Network Security Archives

Vulnerability Development (date)

[Thread Index] [Top] [All Lists]

April 24, 2008

[SECURITY] [DSA 1557-1] New phpmyadmin packages fix several vulnerabilities, Thijs Kinkhorst, 06:49
HPSBGN02333 SSRT080031 rev.1 - HP Software Update HPeDiag Running on Windows, Remote Disclosure of Information and Execution of Arbitrary Code, security-alert, 06:37
[Full-disclosure] A New Class of Vulnerability in Oracle: Lateral SQL Injection, David Litchfield, 03:17
Trillian 3.1 basic nick crash, jplopezy, 03:06
DDIVRT-2008-11 BadBlue uninst.exe DoS, vulnerabilityresearch, 02:55
[Full-disclosure] [ GLSA 200804-28 ] JRockit: Multiple vulnerabilities, Tobias Heinlein, 02:12
[Full-disclosure] [ GLSA 200804-27 ] SILC: Multiple vulnerabilities, Tobias Heinlein, 02:12
Re: xine-lib NES Sound Format Demuxer Buffer Overflow, Guido Landi, 00:57

April 23, 2008

xine-lib NES Sound Format Demuxer Buffer Overflow, laurent . gaffie, 06:26
[W01-0408] Realtek HD Audio Codec Drivers (Vista) - Local Privilege Escalation, vulns, 06:16
PR07-44: XSS on RSA Authentication Agent login page, ProCheckUp Research, 05:43
PR07-43: Cross-domain redirect on RSA Authentication Agent, ProCheckUp Research, 05:32
Re: NetClassifieds Sql Injection, laurent . gaffie, 04:28
[SECURITY] [DSA 1555-1] New iceweasel packages fix arbitrary code execution, Moritz Muehlenhoff, 03:35
[Full-disclosure] [ GLSA 200804-26 ] Openfire: Denial of Service, Robert Buchholz, 02:09
[Full-disclosure] [ GLSA 200804-25 ] VLC: User-assisted execution of arbitrary code, Robert Buchholz, 01:58
Zune software - arbitrary file overwrite, info, 01:58
NetClassifieds Sql Injection, noreply, 01:37
LayerOne 2008 - Final Pre-Con Update, Layer One, 01:26
Horde Webmail XSS [Aria-Security], noreply, 01:15
AST-2008-006 - 3-way handshake in IAX2 incomplete, Security Officer, 00:54
Re: Default key algorithm in Thomson and BT Home Hub routers, ap, 00:33

April 22, 2008

Default key algorithm in Thomson and BT Home Hub routers, Adrian Pastor, 07:31
[SECURITY] [DSA 1554-1] New roundup packages fix cross-site scripting vulnerability, Noah Meyerhans, 07:20
Re: Firefox 3.0 beta 5 crash, Gianluca Borello, 06:03
Firefox 3.0 beta 5 crash, jplopezy, 05:52
Safari 3.1.1 Multiple Vulnerabilities for windows, jplopezy, 04:35

April 21, 2008

[Full-disclosure] [USN-602-1] Firefox vulnerabilities, Jamie Strandboge, 22:22
[Full-disclosure] Correcting CVEs (was Re: Cross site scripting issues in s9y (CVE-2008-1386, CVE-2008-1387)), Hanno BÃck, 22:01
[Full-disclosure] IMF 2008 - 2nd Call for Papers, Oliver Goebel, 21:40
[Full-disclosure] Cross site scripting issues in s9y (CVE-2008-1386, CVE-2008-1387), Hanno BÃck, 20:05
[Full-disclosure] [USN-602-1] Firefox vulnerabilities, Jamie Strandboge, 16:06
[Full-disclosure] [USN-604-1] Gnumeric vulnerability, Kees Cook, 13:41
Re: Powered by gCards v1.46 SQL, packet, 07:36
Sea-Surfing on the Motorola Surfboard, th3 . r00k . nospam, 05:06
Xoops All Version -Articles- Article.PHP (ID) Blind SQL Injection ExpL0it, crazy_kinq, 04:55
ANNOUNCE: Security Implications of Windows Access Tokens Whitepaper, luke . jennings, 04:43
Re: Re: Smf 1.1.4 Remote File Inclusion Vulnerabilities, douchbag, 04:22
Powered by gCards v1.46 SQL, turkish-warriorr, 04:22
IRM Security Advisory : RedDot CMS SQL injection vulnerability, Mark Crowther, 02:35
[Full-disclosure] IRM Security Advisory : RedDot CMS SQL injection vulnerability, Mark Crowther, 01:52
Acidcat CMS Multiple Vulnerabilities, admin, 01:19
[ MDVSA-2008:090 ] - Updated OpenOffice.org packages fix vulnerabilities, security, 01:09
Deciphering the PHP-Nuke Capthca, Michael . Brooks . SPAM, 00:58
SyScan'08 Singapore - Call for Paper, organiser@syscan.org, 00:47
Deciphering the Simple Machines Forum audio Captcha, Michael . Brooks . SPAM, 00:37

April 19, 2008

Re: [Full-disclosure] Injecting spam into Google Web History via I'm Feeling Lucky queries, Nick FitzGerald, 09:08
[Full-disclosure] Token Kidnapping (Microsoft Security Advisory 951306) presentation available, Cesar, 02:03

April 18, 2008

[Full-disclosure] [ GLSA 200804-24 ] DBmail: Data disclosure, Matthias Geerdsen, 09:11
[Full-disclosure] [ GLSA 200804-23 ] CUPS: Integer overflow vulnerability, Matthias Geerdsen, 09:11
[Full-disclosure] Injecting spam into Google Web History via I'm Feeling Lucky queries, Alexander Konovalenko, 07:58
Wikepage Wiki v.2007-2 Cross-Site Scripting, darkz . gsa, 02:29
LightNEasy v.1.2.2 flat Multiple Vulnerabilities, darkz . gsa, 02:18
5th avenue Shopping Cart SQL Injection, noreply, 02:08
BitTorrent Clients and CSRF, th3 . r00k . nospam, 01:57
[ MDVSA-2008:089 ] - Updated poppler packages fix vulnerability, security, 01:46
[ MDVSA-2008:088 ] - Updated clamav packages fix multiple vulnerabilities, security, 01:35
[Full-disclosure] ANNOUNCE: RFIDIOt-0.1s release (now available for Windows), Adam Laurie, 00:51
[Full-disclosure] Team SHATTER Security Advisory: Multiple DoS in JAR files manipulation procedures, Team SHATTER, 00:30
[Full-disclosure] Team SHATTER Security Advisory: IBM DB2 UDB Arbitrary file overwrite in SYSPROC.NNSTAT procedure, Team SHATTER, 00:30
[Full-disclosure] Team SHATTER Security Advisory: IBM DB2 UDB Arbitrary code execution in ADMIN_SP_C/ADMIN_SP_C2 procedures, Team SHATTER, 00:30

April 17, 2008

[Full-disclosure] [ GLSA 200804-22 ] PowerDNS Recursor: DNS Cache Poisoning, Robert Buchholz, 23:58
[Full-disclosure] [ GLSA 200804-21 ] Adobe Flash Player: Multiple vulnerabilities, Robert Buchholz, 23:58
[Full-disclosure] [ GLSA 200804-20 ] Sun JDK/JRE: Multiple vulnerabilities, Robert Buchholz, 09:20
[Full-disclosure] [ GLSA 200804-19 ] PHP Toolkit: Data disclosure and Denial of Service, Robert Buchholz, 09:10
[Full-disclosure] iDefense Security Advisory 04.17.08: Multiple Vendor OpenOffice QPRO File Parsing Integer Underflow Vulnerability, iDefense Labs, 07:47
[Full-disclosure] iDefense Security Advisory 04.17.08: Multiple Vendor OpenOffice QPRO Multiple Heap Overflow Vulnerabilities, iDefense Labs, 07:46
[Full-disclosure] iDefense Security Advisory 04.17.08: Multiple Vendor OpenOffice EMF EMR_BITBLT Record Integer Overflow Vulnerability, iDefense Labs, 07:36
[Full-disclosure] iDefense Security Advisory 04.17.08: Multiple Vendor OpenOffice OLE DocumentSummaryInformation Heap Overflow Vulnerability, iDefense Labs, 07:36
Re: [Full-disclosure] Secunia Research: Lotus Notes Folio Flat File Parsing Buffer Overflows, Juha-Matti Laurio, 06:33
Re: BigAnt Server 2.2 PreAuth Remote SEH Overflow Exploit (0day), m . memelli, 05:09
[Full-disclosure] [USN-603-2] KOffice vulnerability, Kees Cook, 04:26
[Full-disclosure] [USN-603-1] poppler vulnerability, Kees Cook, 04:16
[SECURITY] [DSA 1548-1] New xpdf packages fix arbitrary code exitution, Devin Carraway, 04:05
Announcement - DeepSec Conference 2008, Nov 11-14 2008, DeepSec Conference, 02:49
Microsoft Works 7 WkImgSrv.dll crash POC, wsn1983, 02:49
[security bulletin] HPSBMA02328 SSRT071293 rev.2 - HP OpenView Network Node Manager (OV NNM) Running Apache, Remote Cross Site Scripting (XSS), Denial of Service (DoS), Execute Arbitrary Code, security-alert, 02:38
[security bulletin] HPSBST02329 SSRT080048 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-018 to MS08-025, security-alert, 02:28
[security bulletin] HPSBMA02133 SSRT061201 rev.8 - HP Oracle for OpenView (OfO) Critical Patch Update, security-alert, 02:06
[oCERT-2008-004] multiple speex implementations insufficient boundary checks, Andrea Barisani, 00:49
[ MDVSA-2008:087 ] - Updated policykit package fixes format string vulnerability, security, 00:27
FreeBSD Security Advisory FreeBSD-SA-08:05.openssh, FreeBSD Security Advisories, 00:17

April 16, 2008

[Full-disclosure] [ GLSA 200804-17 ] Speex: User-assisted execution of arbitrary code, Robert Buchholz, 22:23
[Full-disclosure] [ GLSA 200804-18 ] Poppler: User-assisted execution of arbitrary code, Robert Buchholz, 22:12
[Full-disclosure] [ GLSA 200804-16 ] rsync: Execution of arbitrary code, Robert Buchholz, 21:41
[Full-disclosure] ZDI-08-022: Apple Safari WebKit PCRE Handling Integer Overflow Vulnerability, zdi-disclosures, 07:42
Classifieds Caffe (index.php cat_id) Remote SQL Injection, sys-project, 07:10
Re: PHPSlideShow (toonchapter8.php) Cross-Site Scripting Vulnerability, contact, 05:04
[Full-disclosure] iDefense Security Advisory 04.15.08: Oracle Application Express Privilege Escalation Vulnerability, iDefense Labs, 04:10
CA DSM gui_cm_ctrls ActiveX Control Vulnerability, Williams, James K, 03:28
Oracle - Hardcoded Password and Password Reset of OUTLN User [DB13], ak, 02:55
[INFIGO-2008-04-08]: ICQ 6 remote buffer overflow vulnerability, infocus, 02:32
Oracle - SQL Injection Vulnerability in SDO_UTIL [DB05], ak, 02:21
Oracle - SQL Injection in package SDO_IDX [DB07], ak, 01:27
BigAnt Server 2.2 PreAuth Remote SEH Overflow Exploit (0day), admin, 00:54
Carbon Communities forum Multiple Vulnerabilities., admin, 00:43
Oracle - SQL Injection in package SDO_GEOM [DB06], ak, 00:32

April 15, 2008

[Full-disclosure] [INFIGO-2008-04-08]: ICQ 6 remote buffer overflow vulnerability, infocus, 18:42
[Full-disclosure] VMSA-2008-0007 Moderate Updated Service Console packages pcre, net-snmp, and OpenPegasus, VMware Security team, 11:27
[Full-disclosure] iDefense Security Advisory 04.09.08: IBM DB2 Universal Database db2dasStartStopFMDaemon Buffer Overflow Vulnerability, iDefense Labs, 07:59
[Full-disclosure] iDefense Security Advisory 04.09.08: IBM DB2 Universal Database Administration Server File Creation Vulnerability, iDefense Labs, 07:59
[ MDVSA-2008:086 ] - Updated kernel packages fix vulnerability, security, 07:27
DIVX Player <= 6.7.0 Buffer Overflow PoC ( .SRT ), securfrog, 07:16
remote file include, win32 . exe, 06:53
remote file include, win32 . exe, 06:22
Koobi Pro 6.25 poll Remote SQL Injection Vulnerability, Sabun, 06:00
WordPress 2.5 - Salt cracking vulnerability, J. Carlos Nieto, 05:39
Koobi CMS 4.2.4/4.2.5/4.3.0 Multiple Remote SQL Injection Vulnerabilities, sys-project, 05:28
[Full-disclosure] iDefense Security Advisory 04.14.08: ClamAV libclamav PE WWPack Heap Overflow Vulnerability, iDefense Labs, 05:06
[Full-disclosure] iDefense Security Advisory 04.14.08: ClamAV libclamav PeSpin Heap Overflow Vulnerability, iDefense Labs, 05:06
[ MDVSA-2008:086 ] - Updated kernel packages fix vulnerability, security, 03:50
BosNews 2002-2006 Remote add user admin, houssamix, 02:12
BosNews v4.0 Remote add user admin, houssamix, 01:39
[ MDVSA-2008:085 ] - Updated python packages fix arbitrary code execution vulnerability, security, 01:28
Re: [Full-disclosure] Secunia Research: Lotus Notes Folio Flat File Parsing Buffer Overflows, Erik Harrison, 01:17
Dotclear 'ecrire/images.php' Arbitrary File Upload Vulnerability, Morgan ARMAND, 00:56
KwsPHP (Upload) Remote Code Execution Exploit, ajax, 00:35
Troopers08 Security Conference, April 23/24 (Munich/Germany), Enno Rey, 00:23
Re: [Full-disclosure] Secunia Research: Lotus Notes Folio Flat File Parsing Buffer Overflows, Luigi Auriemma, 00:01

April 14, 2008

[Full-disclosure] clamav: Endless loop / hang with crafter arj, CVE-2008-1387, Hanno BÃck, 19:41
[Full-disclosure] S21SEC-042-en:Cezanne SW Cross-Site Scripting (login required), David Barroso, 11:25
[Full-disclosure] [ GLSA 200804-15 ] libpng: Execution of arbitrary code, Robert Buchholz, 11:03
[Full-disclosure] [ GLSA 200804-14 ] Opera: Multiple vulnerabilities, Robert Buchholz, 08:38
[Full-disclosure] [ GLSA 200804-13 ] Asterisk: Multiple vulnerabilities, Robert Buchholz, 08:07
[Full-disclosure] [USN-601-1] Squid vulnerability, Jamie Strandboge, 06:11
Fones Clinic Mart SQL, turkish-warriorr, 06:10
S21SEC-041-en:Cezanne SW Cross-Site Scripting, S21sec labs, 05:38
[Full-disclosure] S21SEC-043-en:Cezanne SW Blind SQL Injection, S21sec labs, 05:27
[Full-disclosure] S21SEC-042-en:Cezanne SW Cross-Site Scripting (login required), S21sec labs, 05:27
Secunia Research: Internet Explorer Data Stream Handling Vulnerability, Secunia Research, 02:50
[Full-disclosure] Cyberflexing: A response to Mark Seiden, n3td3v, 02:49
Secunia Research: activePDF DocConverter Applix Graphics Parsing Vulnerabilities, Secunia Research, 02:28
Secunia Research: Autonomy Keyview Applix Graphics Parsing Vulnerabilities, Secunia Research, 02:28
Secunia Research: Lotus Notes EML Reader Buffer Overflows, Secunia Research, 02:17
Secunia Research: Symantec Mail Security Applix Graphics Parsing Vulnerabilities, Secunia Research, 02:07
Secunia Research: Autonomy Keyview EML Reader Buffer Overflows, Secunia Research, 01:56
Secunia Research: HP OpenView Network Node Manager OpenView5.exe Directory Traversal, Secunia Research, 01:46
Secunia Research: Autonomy Keyview Folio Flat File Parsing Buffer Overflows, Secunia Research, 01:35
Secunia Research: Lotus Notes Folio Flat File Parsing Buffer Overflows, Secunia Research, 01:24
Secunia Research: Lotus Notes Applix Graphics Parsing Vulnerabilities, Secunia Research, 01:24
Secunia Research: Symantec Mail Security Folio Flat File Parsing Buffer Overflows, Secunia Research, 01:13
Secunia Research: Lotus Notes htmsr.dll Buffer Overflows, Secunia Research, 01:02
Secunia Research: Adobe Flash Player "Declare Function (V7)" Heap Overflow, Secunia Research, 01:02
Secunia Research: activePDF DocConverter Folio Flat File Parsing Buffer Overflows, Secunia Research, 00:40
OneSecurityDay 2008 - Web application auditing challenge, bugtraq, 00:40
Secunia Research: Lotus Notes kvdocve.dll Path Processing Buffer Overflow, Secunia Research, 00:40
[oCERT-2008-003] libpng zero-length chunks incorrect handling, Andrea Barisani, 00:29
project announcement - oCERT - Open Source CERT, Andrea Barisani, 00:29
DEF CON 16 Retro Announcement! Back to Bang!, The Dark Tangent, 00:19

April 13, 2008

[Full-disclosure] Observing the observer in VoIP communications, michele dallachiesa, 19:40
[Full-disclosure] DOINGSOFT-2008-03-10-001 - XSS issue in BOXiR2, Sebastien gioria, 07:18

April 12, 2008

Re: WoltLab(R) Community Framework WCF 1.0.6, marc . deroche, 00:42
DEF CON 16 Retro Announcement! Back to Bang!, The Dark Tangent, 00:32
[ MDVSA-2008:084 ] - Updated rsync packages fix vulnerability, security, 00:21

April 11, 2008

IOActive Security Advisory: Incorrect input validation in PyString_FromStringAndSize() leads to multiple buffer overflows, Justin Ferguson, 06:39
Trillian 3.1.9.0 DTD File Buffer Overflow, david130490, 05:34
[Full-disclosure] Directory traversal and multiple Denials of Service in HP OpenView NNM 7.53, Luigi Auriemma, 04:09
WiKID wClient-PHP <= 3.0-2 Multiple XSS Vulnerabilities, ascii, 03:58
[Full-disclosure] [ GLSA 200804-12 ] gnome-screensaver: Privilege escalation, Raphael Marichez, 01:51
[Full-disclosure] [ GLSA 200804-11 ] policyd-weight: Insecure temporary file creation, Robert Buchholz, 01:51
Borland InterBase 2007 "ibserver.exe" Buffer Overflow Vulnerability POC, Liu Zhen Hua, 00:38
w2b.ru multiple products SQL Injection, noreply, 00:16

April 10, 2008

[Full-disclosure] Borland InterBase 2007 "ibserver.exe" Buffer Overflow Vulnerability POC, alau, 18:47
[Full-disclosure] [USN-600-1] rsync vulnerability, Kees Cook, 17:03
[Full-disclosure] iDefense Security Advisory 04.09.08: EMC DiskXtender MediaStor Format String Vulnerability, iDefense Labs, 09:18
[Full-disclosure] iDefense Security Advisory 04.09.08: EMC DiskXtender File System Manager Stack Buffer Overflow Vulnerability, iDefense Labs, 09:07
[Full-disclosure] iDefense Security Advisory 04.09.08: EMC DiskXtender Authentication Bypass Vulnerability, iDefense Labs, 08:57
EUSecWest CFP Closes April 14th (conf May 21/22 2008), Dragos Ruiu, 07:11
[Full-disclosure] [ GLSA 200804-09 ] am-utils: Insecure temporary file creation, Pierre-Yves Rofes, 06:39
[Full-disclosure] [ GLSA 200804-10 ] Tomcat: Multiple vulnerabilities, Pierre-Yves Rofes, 06:28
Re: Re: licq remote DoS?, mrangelov, 02:57
Re: openMosix userspace library stack-based buffer overflow, nixpanic, 02:36
[Full-disclosure] [ GLSA 200804-08 ] lighttpd: Multiple vulnerabilities, Tobias Heinlein, 01:32
[ MDVSA-2008:083 ] - Updated audit packages fix vulnerability, security, 01:00
Re: licq remote DoS?, 3APA3A, 00:49
paFileDB 3.1 Remote SQL Injection, noreply, 00:28
Re: Alkacon OpenCms sessions.jsp searchfilter XSS, a . westtermann, 00:18

April 09, 2008

IOActive Security Advisory: Buffer overflow in Python zlib extension module, Justin Ferguson, 07:48
[ MDVSA-2008:082 ] - Updated php-apc packages fix vulnerability, security, 06:02
[Full-disclosure] [USN-599-1] Ghostscript vulnerability, Jamie Strandboge, 06:02
[SECURITY] [DSA 1543-1] New vlc packages fix several vulnerabilities, Devin Carraway, 05:51
[CVE-2007-5301] alsaplayer PoC - exploit, Albert Sellarès, 04:25
[SECURITY] [DSA 1542-1] New libcairo packages fix arbitrary code execution, Devin Carraway, 04:15
SAP Netweaver 6.40-7.0 Cross-Site-Scripting, jaime . blasco, 00:51
Pu Arcade component for Joomla - SQL injection, netmantis . com, 00:51

April 08, 2008

[Full-disclosure] [ GLSA 200804-07 ] PECL APC: Buffer Overflow, Robert Buchholz, 19:29
[Full-disclosure] CAU-2008-0002: Microsoft Windows SharePoint Services Picture Source XSS, I)ruid, 11:53
[Full-disclosure] ZDI-08-021: Adobe Flash Player DeclareFunction2 Invalid Object Use Vulnerability, zdi-disclosures, 09:28
[Full-disclosure] iDefense Security Advisory 04.08.08: Microsoft Windows Graphics Rendering Engine Integer Overflow Vulnerability, iDefense Labs, 08:14
[Full-disclosure] iDefense Security Advisory 04.08.08: Microsoft Windows Graphics Rendering Engine Heap Buffer Overflow Vulnerability, iDefense Labs, 08:14
[Full-disclosure] iDefense Security Advisory 04.08.08: Microsoft HxTocCtrl ActiveX Control Invalid Param Heap Corruption Vulnerability, iDefense Labs, 07:10
Re: [Full-disclosure] Multiple vulnerabilities in HP OpenView NNM 7.53, Luigi Auriemma, 04:57
[Full-disclosure] ZDI-08-020: Microsoft GDI WMF Parsing Heap Overflow Vulnerability, zdi-disclosures, 04:36
[security bulletin] HPSBMA02242 SSRT061260 rev.3 - HP OpenView Network Node Manager (OV NNM) Running Shared Trace Service, Remote Arbitrary Code Execution, security-alert, 04:26
[security bulletin] [security bulletin] HPSBST02318 SSRT080018 rev.1 - HP Storage Essentials Software, Remote Unauthorized Access to Data, security-alert, 04:05
Microsoft Windows DNS Stub Resolver Cache Poisoning (MS08-020), Amit Klein, 03:55
New tool released : Syslog Fuzzer, jaime . blasco, 02:09
[security bulletin] HPSBMA02327 SSRT071455 rev.1 - HP Integrity Servers iLO-2 Management Processors (iLO-2 MP), Denial of Service (DoS), security-alert, 01:16
licq remote DoS?, Milen Rangelov, 01:16
Wayport Public Access PC Authentication Bypass Weakness, Pascal Cretain, 01:06
Re: Wikepage Opus 13 2007.2 Directory Traversal Vulnerbility, yeppy, 00:55
Swiki 1.5 Multiple Cross-Site Scripting Vulnerabilities, brad . antoniewicz, 00:44

April 07, 2008

[Full-disclosure] WoltLab(R) Community Framework XSS and Full Path Disclosure Vulnerability, Jessica Hope, 09:08
Wikepage Opus 13 2007.2 Directory Traversal Vulnerbility, virangar_nml, 05:53
Attack Technique: File Download Injection, Jeff Williams, 05:42
[Full-disclosure] Multiple vulnerabilities in HP OpenView NNM 7.53, Luigi Auriemma, 05:42
CDNetworks Nefficient Download(NeffyLauncher.dll) Vulnerabilities, Simon Ryeo, 05:31
Tumbleweed SecureTransport FileTransfer ActiveX Control Buffer Overflow, Patrick Webster, 05:21
openMosix userspace library stack-based buffer overflow, jose, 05:21

April 06, 2008

[Full-disclosure] [ GLSA 200804-06 ] UnZip: User-assisted execution of arbitrary code, Robert Buchholz, 03:02

April 05, 2008

[Full-disclosure] [ GLSA 200804-05 ] NX: User-assisted execution of arbitrary code, Robert Buchholz, 22:06
[Full-disclosure] [ GLSA 200804-04 ] MySQL: Multiple vulnerabilities, Robert Buchholz, 22:06
Blogator-script 0.95 SQL Injection Vulnerbility, hadihadi_zedehal_2006, 00:20
Alkacon OpenCms sessions.jsp searchfilter XSS, nnposter, 00:20
Blogator-script 0.95 Change User Password Vulnerbility, hadihadi_zedehal_2006, 00:10
TheGreenBowVPN, Login Credentials Disclosure, evilcry, 00:10

April 04, 2008

F5 BIG-IP Management Interface Perl Injection, nnposter, 23:59
[Full-disclosure] [ GLSA 200804-03 ] OpenSSH: Privilege escalation, Robert Buchholz, 21:35
rPSA-2008-0139-1 gnome-ssh-askpass openssh openssh-client openssh-server, rPath Update Announcements, 06:09
rPSA-2008-0138-1 tshark wireshark, rPath Update Announcements, 06:09
rPSA-2008-0136-1 cups, rPath Update Announcements, 05:48
[SECURITY] [DSA 1538-1] New alsaplayer packages fix arbitrary code execution, Devin Carraway, 05:48
[SECURITY] [DSA 1539-1] New mapserver packages fix multiple vulnerabilities, Devin Carraway, 05:37
Re: [Full-disclosure] ZDI-08-018: Apple QuickTime Run Length Encoding Heap Overflow Vulnerability, Ureleet, 05:15
[Full-disclosure] iDefense Security Advisory 04.03.08: Computer Associates Alert Notification Service Multiple RPC Buffer Overflow Vulnerabilities, iDefense Labs, 03:20
[security bulletin] HPSBMA02323 SSRT080032 rev.1 - HP USB Floppy Drive Key (Option) for ProLiant Servers, Local Virus Infection, security-alert, 01:46
Re: [Full-disclosure] ZDI-08-018: Apple QuickTime Run Length Encoding Heap Overflow Vulnerability, Brian Livingstone, 01:35
Re: [Full-disclosure] ZDI-08-018: Apple QuickTime Run Length Encoding Heap Overflow Vulnerability, n3td3v, 01:13
KwsPHP Module ConcoursPhoto XSS, hsx, 01:02
CA ARCserve Backup for Laptops and Desktops Server and CA Desktop Management Suite Multiple Vulnerabilities, Williams, James K, 01:01
CA Alert Notification Server Multiple Vulnerabilities, Williams, James K, 00:40
Medium security hole affecting Festival on Debian unstable/testing and Ubuntu Hardy Heron, Tim Brown, 00:29

April 03, 2008

Re: [Full-disclosure] ZDI-08-018: Apple QuickTime Run Length Encoding Heap Overflow Vulnerability, Ureleet, 23:16
[Full-disclosure] iDefense Security Advisory 04.02.08: Symantec Internet Security 2008 ActiveDataInfo.LaunchProcess Design Error Vulnerability, iDefense Labs, 07:42
[Full-disclosure] iDefense Security Advisory 04.02.08: Symantec Norton Internet Security 2008 ActiveX Control Buffer Overflow Vulnerability, iDefense Labs, 07:32
[Full-disclosure] iDefense Security Advisory 04.03.08: SCO UnixWare pkgadd Directory Traversal Vulnerability, iDefense Labs, 07:31
[Full-disclosure] ZDI-08-018: Apple QuickTime Run Length Encoding Heap Overflow Vulnerability, zdi-disclosures, 06:49
[Full-disclosure] ZDI-08-014: Apple Quicktime Multiple Opcode Memory Corruption Vulnerabilities, zdi-disclosures, 06:49
[Full-disclosure] ZDI-08-016: Apple QuickTime MP4A Atom Parsing Heap Corruption Vulnerability, zdi-disclosures, 06:49
[Full-disclosure] ZDI-08-015: Apple QuickTime Clipping Region Heap Overflow Vulnerability, zdi-disclosures, 06:49
[Full-disclosure] ZDI-08-019: Apple QuickTime Malformed VR obji Atom Parsing Memory Corruption Vulnerability, zdi-disclosures, 06:38
[Full-disclosure] iDefense Security Advisory 04.02.08: Borland CaliberRM StarTeam Multicast Service Buffer Overflow Vulnerability, iDefense Labs, 06:28
[Full-disclosure] ZDI-08-017: Apple QuickTime Kodak Encoding Heap Overflow Vulnerability, zdi-disclosures, 06:28
[Full-disclosure] CORE-2008-0314 - Orbit Downloader "Download failed" buffer overflow, CORE Security Technologies Advisories, 05:55
POC2008 call for papers, pocadm, 04:41
Recon 2008 CFP last call, early registration open, Recon Conference, 00:29

April 02, 2008

Parallels virtuozzo's VZPP multiple csrf vulnerabilities, poplix, 23:57
Joomla Component com_lms SQL Injection, no-reply, 23:46
Vulnerabilities in kses-based HTML filters, lpilorz, 23:36
Webwasher Denial of Service Vulnerability, security, 23:25
[SECURITY] [DSA 1537-1] New xpdf packages fix multiple vulnerabilities, Devin Carraway, 23:14
[Full-disclosure] [USN-598-1] CUPS vulnerabilities, Jamie Strandboge, 07:55
[Full-disclosure] [ GLSA 200804-02 ] bzip2: Denial of Service, Pierre-Yves Rofes, 06:40
[Full-disclosure] [USN-588-2] MySQL regression, Jamie Strandboge, 06:09
[ MDVSA-2008:081 ] - Updated CUPS packages fix multiple vulnerabilities, security, 05:47
RE: Internet explorer 7.0 spoofing, Mike Diaz, 05:26
[Full-disclosure] Directory traversal in LANDesk Management Suite 8.80.1.1, Luigi Auriemma, 03:31
[Full-disclosure] ANNOUNCE: Apache-SSL security release - apache_1.3.41+ssl_1.59, Adam Laurie, 01:15
HPSBTU02325 SSRT080006 rev.1 - HP Internet Express for Tru64 UNIX running PostgreSQL, Arbitrary Code Execution, Privilege Elevation, or Denial of Service (DoS), security-alert, 00:32

April 01, 2008

HPSBMA02317 SSRT080026 rev.1 - HP Select Identity Software, Gain Unauthorized Access, security-alert, 23:50
Datalife Engine 6.7 XSRF, irancrash, 23:50
Writers Block SQL Injection Vulnerabilities, nebelfrost23, 23:39
Re: Re: Re: Internet explorer 7.0 spoofing, jplopezy, 23:39
RE: Internet explorer 7.0 spoofing, Darth Jedi, 23:28
[Full-disclosure] [USN-597-1] OpenSSH vulnerability, Kees Cook, 09:54
Re: [Full-disclosure] CAU-2008-0001 - Slowly Closing Door RaceCondition, Garrett M. Groff, 08:10
Re: Hamachi Password Disclosure Vulnerability, anonymous, 06:04
Re: Internet explorer 7.0 spoofing, Razi Shaban, 05:54
Re: Re: Internet explorer 7.0 spoofing, w0lfd33m, 05:43
[Full-disclosure] [ GLSA 200804-01 ] CUPS: Multiple vulnerabilities, Robert Buchholz, 03:57
Re: [Full-disclosure] CAU-2008-0001 - Slowly Closing Door Race Condition, I)ruid, 02:12
TCP/IP security vulnerability disclosed, J. Oquendo, 00:57
[SECURITY] [DSA 1533-2] New exiftags packages fix several vulnerabilities, Devin Carraway, 00:47
Re: [Full-disclosure] CAU-2008-0001 - Slowly Closing Door Race Condition, David Weston, 00:46
cevado technologies real estate CMS SQL injection, joseph . giron13, 00:25
Terracotta Personal Edition Multiple vulnerabilities, joseph . giron13, 00:04