Latest Security News

All News: 3 Days | 1 Week | 1 Month
Hot News: 1 Month | 1 Year

2008-05-09

22:52BugtraqSazCart <= 1.5.1 (prodid) Remote SQL Injection Exploit
16:33Bugtraq[ GLSA 200805-08 ] InspIRCd: Denial of Service
16:24Bugtraq[ GLSA 200805-07 ] Linux Terminal Server Project: Multiple vulnerabilities
16:12Bugtraq[ GLSA 200805-06 ] Firebird: Data disclosure
15:15Securiteam[UNIX] Multiple Vendor rdesktop Vulnerabilities
14:49BugtraqOracle Application Server 10G ORA_DAV Basic Authentication Bypass Vulnerability
05:54BugtraqFInal EUSecWest 2008 Speakers
02:03BugtraqXSS and CSRF vulnerability on Cpanel 11
01:45Bugtraq[ MDVSA-2008:099 ] - Updated ImageMagick packages fix vulnerabilities
01:13BugtraqApache Server HTML Injection and UTF-7 XSS Vulnerability
00:02Bugtraq[USN-611-3] GStreamer Good Plugins vulnerability

2008-05-08

23:11Bugtraq[USN-611-2] vorbis-tools vulnerability
22:15Bugtraq[USN-611-1] Speex vulnerability
21:35BugtraqFLEA-2008-0008-1 firefox
17:12BugtraqZYWALL Referer Header XSS Vulnerability
15:13BugtraqNovell Client <= 4.91 SP4 Local Stack overflow / B.S.O.D (unauthentificated user)
03:02BugtraqezContents CMS Version 2.0.0 SQL Injection Vulnerabilities
01:36BugtraqiDefense Security Advisory 05.07.08: Multiple Vendor rdesktop channel_process() Integer Signedness V
01:36BugtraqiDefense Security Advisory 05.07.08: Multiple Vendor rdesktop process_redirect_pdu() BSS Overflow Vu
01:35BugtraqiDefense Security Advisory 05.07.08: Multiple Vendor rdesktop iso_recv_msg() Integer Underflow Vulne

2008-05-07

23:58Bugtraq[ GLSA 200805-04 ] eGroupWare: Multiple vulnerabilities
22:37BugtraqExploiting Google MX servers as Open SMTP Relays
20:56Bugtraq[ GLSA 200805-03 ] Multiple X11 terminals: Local privilege escalation
18:41BugtraqrPSA-2008-0162-1 kernel
12:21BugtraqVBZooM <=V1.11 "reply.php" SQL Injection Vulnerability
10:20BugtraqMultiple XSS In TuxCMS All Version
08:59Securiteam[NEWS] Wonderware SuiteLink Denial of Service Vulnerability
08:07Securiteam[UNIX] PHP GENERATE_SEED() Weak Random Number Seed Vulnerability
07:42Securiteam[UNIX] PHP Multibyte Shell Command Escaping Bypass Vulnerability
06:31Bugtraq[USN-610-1] LTSP vulnerability
06:26Bugtraq[USN-609-1] OpenOffice.org vulnerabilities
03:53Bugtraq[Advisory Update]Adobe Reader/Acrobat Remote PDF Print Silently Vulnerability
03:35BugtraqAdobe Acrobat Professional Javascript For PDF Security Feature Bypass and Memory Corruption Vulnerab
02:34BugtraqrPSA-2008-0157-1 kernel
02:05Bugtraq[ MDVSA-2008:098 ] - Updated openssh packages fix vulnerability
02:02Bugtraq[ MDVSA-2008:097 ] - Updated kdelibs packages fix vulnerability in start_kdeinit
00:23Bugtraq[ MDVSA-2008:096 ] - Updated emacs packages fix vulnerability in vcdiff

2008-05-06

22:19BugtraqmvnForum 1.1 Cross Site Scripting
22:09BugtraqSphider 1.3.4 Cross Site Scripting
21:26Bugtraq[USN-605-1] Thunderbird vulnerabilities
21:09Securiteam[NT] Akamai Download Manager Arbitrary Program Execution Vulnerability
20:49Bugtraq[SECURITY] [DSA 1570-1] New kazehakase packages fix execution of arbitrary code
17:43Bugtraq[SECURITY] [DSA 1554-2] New roundup packages fix regression
17:32Bugtraq[SECURITY] [DSA 1569-2] New cacti packages fix regression
17:23Bugtraq[USN-608-1] KDE vulnerability
17:14Bugtraq[USN-607-1] Emacs vulnerabilities
16:15Bugtraq[security bulletin] HPSBMA02331 SSRT080000 rev.2 - HP-UX running WBEM Services, Remote Execu
16:14BugtraqHPSBUX02332 SSRT080056 rev.1 - HP-UX running Apache with PHP, Remote Denial of Service (DoS)
16:13BugtraqHPSBUX02324 SSRT080034 rev.1 - HP-UX Running Netscape Directory Server (NDS), Local Gain Ext
14:56Bugtraq[tool announcement] tmin - a handy fuzzing test case optimizer
10:18BugtraqAdvisory SE-2008-03: PHP Multibyte Shell Command Escaping Bypass Vulnerability
10:16BugtraqAdvisory SE-2008-02: PHP GENERATE_SEED() Weak Random Number Seed Vulnerability
09:10BugtraqVulnerability in Multiple Web Application
08:39Securiteam[NEWS] WebMod Multiple Vulnerabilities
07:16BugtraqInvitation - OWASP AppSec Europe May 19-22 2008 - Belgium
03:43BugtraqPower Editor LOCAL FILE INCLUSION Vulnerbility
01:56BugtraqQTOFileManager V 1.0<== Remote File Upload Vulnerability

2008-05-05

23:37Bugtraq[ GLSA 200805-02 ] phpMyAdmin: Information disclosure
23:13BugtraqSecurity Advisory for Bugzilla 3.0.3, 3.1.3, 2.22.3, and 2.20.5
23:08Bugtraq[ GLSA 200805-01 ] Horde Application Framework: Multiple vulnerabilities
22:01BugtraqCORE-2008-0129 - Wonderware SuiteLink Denial of Service vulnerability
21:26BugtraqNovell eDirectory DoS via HTTP headers
21:26BugtraqNovell eDirectory unauthenticated access to SOAP interface
19:27Bugtraq[SECURITY] [DSA 1569-1] New cacti packages fix multiple vulnerabilities
18:56Bugtraq[SECURITY] [DSA 1568-1] New b2evolution packages fix cross site scripting
18:46Bugtraq[SECURITY] [DSA 1567-1] New blender packages fix arbitrary code execution
17:53BugtraqScout Portal Toolkit <= 1.4.0 (ParentId) Remote SQL Injection Exploit
17:20Bugtraq[ECHO_ADV_93$2008] Kmita Tellfriend <= 2.0 (file) Remote File Inclusion Vulnerability
17:19Bugtraq[ECHO_ADV_94$2008] Kmita Mail <= 3.0 (file) Remote File Inclusion Vulnerability
17:18Bugtraq[ECHO_ADV_92$2008] Anserv Auction XL (viewfaqs.php cat) Blind Sql Injection Vulnerability
17:12Bugtraq[ECHO_ADV_95$2008] BackLinkSpider (cat_id) Blind Sql Injection Vulnerability
17:03Bugtraq[ECHO_ADV_91$2008] Online Rental Property Script <= 4.5 (pid) Blind Sql Injection Vulnerability
17:00Bugtraq[ECHO_ADV_90$2008] PostNuke Module pnEncyclopedia <= 0.2.0 (id) Blind Sql Injection Vulnerability
16:17Bugtraq[USN-606-1] CUPS vulnerability
15:56BugtraqLifeType 1.2.8
15:42BugtraqMaian Uploader v4.0 XSS Vulnerabilities

2008-05-04

05:45BugtraqMicrosot DID DISCLOSE potential Backdoor