Vulnerability Development (thread)

[Full-disclosure] [ GLSA 200807-16 ] Python: Multiple vulnerabilities, Robert Buchholz, 2008/07/31
[Full-disclosure] [ GLSA 200807-15 ] Pan: User-assisted execution of arbitrary code, Pierre-Yves Rofes, 2008/07/31
[Full-disclosure] [ GLSA 200807-14 ] Linux Audit: Buffer overflow, Pierre-Yves Rofes, 2008/07/31
[Full-disclosure] [ GLSA 200807-13 ] VLC: Multiple vulnerabilities, Pierre-Yves Rofes, 2008/07/31
[Full-disclosure] iDefense Security Advisory 07.30.08: SAP MaxDB dbmsrv Untrusted Execution Path Vulnerability, iDefense Labs, 2008/07/31
[Full-disclosure] Assurent VR - CA ARCserve Backup for Laptops and Desktops LGServer Handshake Buffer Overflow, VR-Subscription-noreply, 2008/07/31
[~] Greetz : Me93fg & Mr.SaFa7, Ghost hacker, 2008/07/31
Secunia Research: Blue Coat K9 Web Protection Response Handling Buffer Overflows, Secunia Research, 2008/07/31
Pligg <= 9.9.0 Multiple Vulnerabilities, GulfTech Security Research, 2008/07/31
[security bulletin] HPSBUX02286 SSRT071466 rev.1 - HP-UX Running System Administration Manager (SAM), Unintended Remote Access, security-alert, 2008/07/31
[oCERT-2008-009] libxslt heap overflow, Andrea Barisani, 2008/07/31
Secunia Research: Blue Coat K9 Web Protection "Referer" Header Buffer Overflow, Secunia Research, 2008/07/31
[ MDVSA-2008:159 ] licq, security, 2008/07/31
[Full-disclosure] rPSA-2008-0241-1 openssl openssl-scripts, rPath Update Announcements, 2008/07/31
Citrix MetaFrame Privilege Escalation, Wendel Guglielmetti Henrique, 2008/07/30
DEV WMS Multiple Vulnerabilities, irancrash, 2008/07/30
[ MDVSA-2008:158 ] silc-toolkit, security, 2008/07/30
[Full-disclosure] Cisco IOS shellcode explanation - additional, Andy Davis, 2008/07/30
Tool: PorkBind Nameserver Security Scanner, super, 2008/07/30
MJGuest 6.8 GT Cross Site Scripting Vulnerability, irancrash, 2008/07/30
HIOX Browser Statistics 2.0 Remote File Inclusion Vulnerability, Ghost hacker, 2008/07/30
HIOX Random Ad 1.3 (hioxRandomAd.php hm) RFI Vulnerability, Ghost hacker, 2008/07/30
HIOX Star Rating System 1.0 Remote File Inclusion Vulnerability, Ghost hacker, 2008/07/30
shoutbox Remote Database Dawnload Exploit, Ghost hacker, 2008/07/30
[Full-disclosure] Advisories, advisories, 2008/07/30
[Full-disclosure] Cisco IOS shellcode explanation, Andy Davis, 2008/07/30
[Full-disclosure] RealNetworks RealPlayer ActiveX Illegal Resource Reference Vulnerability, cocoruder, 2008/07/29
[Full-disclosure] NULL pointer in Unreal Tournament 2004 v3369, Luigi Auriemma, 2008/07/29
[Full-disclosure] Memory corruption and NULL pointer in Unreal Tournament III 1.2, Luigi Auriemma, 2008/07/29
[ MDVSA-2008:157 ] - ffmpeg, security, 2008/07/29
Remote Cisco IOS FTP exploit, Andy Davis, 2008/07/29
- RE: Remote Cisco IOS FTP exploit, Paul Oxman (poxman), 2008/07/30
Gregarius <= 0.5.4 SQL Injection, GulfTech Security Research, 2008/07/29
[DSECRG-08-034] Local File Include Vulnerability in Minishowcase v09b136, Digital Security Research Group [DSecRG], 2008/07/29
plugin Rss Remote File Inclusion Vulnerability, Ghost hacker, 2008/07/29
PhpJobScheduler 3.1 Remote File Inclusion Vulnerability, Ghost hacker, 2008/07/29
[ MDVSA-2008:156 ] - Updated libpng packages fix vulnerability, security, 2008/07/29
[Full-disclosure] n.runs-SA-2008.004 - AVG Anti-Virus Divide by Zero - DoS (remote), security, 2008/07/29
[Full-disclosure] rPSA-2008-0238-1 firefox, rPath Update Announcements, 2008/07/29
[Full-disclosure] rPSA-2008-0235-1 fetchmail fetchmailconf, rPath Update Announcements, 2008/07/29
[Full-disclosure] rPSA-2008-0237-1 tshark wireshark, rPath Update Announcements, 2008/07/29
[Full-disclosure] rPSA-2008-0236-1 httpd mod_ssl, rPath Update Announcements, 2008/07/29
[Full-disclosure] VMSA-2008-00011 Updated ESX service console packages for Samba and vmnix, VMware Security team, 2008/07/28
[Full-disclosure] [USN-626-1] Firefox and xulrunner vulnerabilities, Jamie Strandboge, 2008/07/28
[Full-disclosure] iDefense Security Advisory 07.28.08: Hewlett-Packard OVIS Probe Builder Arbitrary Process Termination Vulnerability, iDefense Labs, 2008/07/28
[Full-disclosure] [USN-631-1] poppler vulnerability, Kees Cook, 2008/07/28
[Full-disclosure] [USN-630-1] ffmpeg vulnerability, Kees Cook, 2008/07/28
Cross Site Scripting (XSS) in Owl <=0.95, CVE-2008-3100, Fabian Fingerle, 2008/07/28
ViArt <= 3.5 SQL Injection, GulfTech Security Research, 2008/07/28
Multiple Cross-Site Scripting Vulnerabilities in Web Wiz Rich Text Editor version 4.02, supportrup, 2008/07/28
JamRoom <= 3.3.8 Authentication Bypass, GulfTech Security Research, 2008/07/28
[security bulletin] HPSBMA02353 SSRT080066 rev.1 - HP OpenView Internet Services Running Probe Builder, Remote Denial of Service (DoS), security-alert, 2008/07/28
Tool release: [evilgrade] - Using DNS cache poisoning to exploit poor update implementations, [ISR] - Infobyte Security Research, 2008/07/28
[DSECRG-08-033] Local File Include Vulnerability in Pixelpost 1.7.1, Digital Security Research Group [DSecRG], 2008/07/28
Security Bypass Vulnerabilities AXESSTEL, Bboyhacks, 2008/07/28
[ MDVSA-2008:155-1 ] - Updated Thunderbird packages fix multiple vulnerabilities, security, 2008/07/28
how to request a cve id?, xpzhang, 2008/07/28
[ MDVSA-2008:155 ] - Updated Thunderbird packages fix multiple vulnerabilities, security, 2008/07/26
[Full-disclosure] http://www.zerodayinitiative.com/advisories/ZDI-08-046, zdi-disclosures, 2008/07/25
[Full-disclosure] ZDI-08-047: RealNetworks RealPlayer rmoc3260 ActiveX Control Memory Corruption Vulnerability, zdi-disclosures, 2008/07/25
[Full-disclosure] ZDI-08-045: Apple Safari StyleSheet ownerNode Heap Corruption Vulnerability, zdi-disclosures, 2008/07/25
SECOBJADV-2008-02: Cygwin Installation and Update Process can be Subverted Vulnerability, advisories, 2008/07/25
ezContents CMS Renote File inclusion, security, 2008/07/25
XRMS 1.99.2 (RFI/XSS/IG) Multiple Remote Vulnerabilities, azzcoder, 2008/07/25
Secunia Research: RealPlayer SWF Frame Handling Buffer Overflow, Secunia Research, 2008/07/25
[Full-disclosure] Flashblock Bypass, Sowhat, 2008/07/25
[Full-disclosure] how to request a cve id?, xpzhang, 2008/07/25
- Re: [Full-disclosure] how to request a cve id?, Fredrick Diggle, 2008/07/25
- Re: [Full-disclosure] how to request a cve id?, Steven M. Christey, 2008/07/27
[Full-disclosure] [USN-629-1] Thunderbird vulnerabilities, Jamie Strandboge, 2008/07/24
[ MDVSA-2008:154 ] - Updated xemacs packages fix vulnerability, security, 2008/07/24
[Full-disclosure] CAU-EX-2008-0003: Kaminsky DNS Cache Poisoning Flaw Exploit for Domains, I)ruid, 2008/07/24
[Full-disclosure] CAU-EX-2008-0002: Kaminsky DNS Cache Poisoning Flaw Exploit, I)ruid, 2008/07/23
- Re: [Full-disclosure] CAU-EX-2008-0002: Kaminsky DNS Cache Poisoning Flaw Exploit, Ganbold, 2008/07/25
  - [Full-disclosure] Re : CAU-EX-2008-0002: Kaminsky DNS Cache Poisoning Flaw Exploit, tixxDZ, 2008/07/25
  - Re: [bugtraq] Re: [Full-disclosure] CAU-EX-2008-0002: Kaminsky DNS Cache Poisoning, Tuc at T-B-O-H.NET, 2008/07/25
[Full-disclosure] [tool] SDT Cleaner 1.0, Nahuel C. Riva, 2008/07/23
[ MDVSA-2008:153 ] - Updated emacs packages fix vulnerability, security, 2008/07/23
Re: Wordpress Malicious File Execution Vulnerability, otto, 2008/07/23
[Full-disclosure] [USN-628-1] PHP vulnerabilities, Jamie Strandboge, 2008/07/23
[SECURITY] [DSA 1540-3] New lighttpd packages fix regression, Thijs Kinkhorst, 2008/07/23
[Full-disclosure] Vim: Flawed Fix of Arbitrary Code Execution Vulnerability in filetype.vim, Jan MinÃÅ, 2008/07/23
AST-2008-010: Asterisk IAX 'POKE' resource exhaustion, Asterisk Security Team, 2008/07/23
AST-2008-011: Traffic amplification in IAX2 firmware provisioning system, Asterisk Security Team, 2008/07/23
[ MDVSA-2008:152 ] - Updated wireshark packages fix denial of service vulnerability, security, 2008/07/23
Outpost Security Suite Pro ver. 2009 Multiple vulnerabilities, jplopezy, 2008/07/22
[DSECRG-08-032] Claroline 1.8.10 Multiple XSS Vulnerabilities, Digital Security Research Group [DSecRG], 2008/07/22
[Full-disclosure] PR08-15: Several Webroot Disclosures on Moodle, ProCheckUp Research, 2008/07/22
[Full-disclosure] PR08-13: Persistent Cross-site Scripting (XSS) on Moodle via blog entry title, ProCheckUp Research, 2008/07/22
[Full-disclosure] PR08-16: CSRF (Cross-site Request Forgery) on Moodle edit profile page, ProCheckUp Research, 2008/07/22
[Full-disclosure] [USN-627-1] Dnsmasq vulnerability, Jamie Strandboge, 2008/07/22
[security bulletin] HPSBMA02346 SSRT080097 rev.3 - HP OpenView Select Identity Active Directory Bidirectional LDAP Connector, Remote Unauthorized Access, security-alert, 2008/07/22
[SECURITY] [DSA 1613-1] new libgd2 packages fix multiple vulnerabilities, Devin Carraway, 2008/07/22
Vulnerability: SocialEngine (SocialEngine.net) high risk security flaw, Tim Loshak, 2008/07/22
FGA-2008-16: EMC Dantz Retrospect 7 backup Server Authentication Module Weak Password Hash Arithmetic Vulnerability, zhliu, 2008/07/22
[ MDVSA-2008:151 ] - Updated libxslt packages fix buffer overflow vulnerability, security, 2008/07/22
Re: [ GLSA 200807-10 ] Bacula: Information disclosure, dan, 2008/07/22
[Full-disclosure] NULL pointer in ZDaemon 1.08.07, Luigi Auriemma, 2008/07/21
[Full-disclosure] [ GLSA 200807-12 ] BitchX: Multiple vulnerabilities, Pierre-Yves Rofes, 2008/07/21
[Full-disclosure] [ GLSA 200807-11 ] PeerCast: Buffer overflow, Pierre-Yves Rofes, 2008/07/21
E-Mail header Injection in HiFriend, Peter Wiesen, 2008/07/21
- Re: E-Mail header Injection in HiFriend, Adrian Pastor, 2008/07/29
[Full-disclosure] [ GLSA 200807-10 ] Bacula: Information disclosure, Pierre-Yves Rofes, 2008/07/21
EZWebAlbum (dlfilename) Remote File Disclosure Vulnerability, Ghost hacker, 2008/07/21
[White Paper] Abusing HTML 5 Structured Client-side Storage, Alberto Trivero, 2008/07/21
Re: SchoolCenter URL Handling Cross Site Scripting Vulnerability, Tester, 2008/07/21
Flip V3.0 final, Cru3l . b0y, 2008/07/21
[DSECRG-08-031] Local File Include Vulnerability in Interact 2.4.1, Digital Security Research Group [DSecRG], 2008/07/21
[Full-disclosure] FGA-2008-16: EMC Dantz Retrospect 7 backup Server Authentication Module Weak Password Hash Arithmetic Vulnerability, zhliu, 2008/07/21
[Full-disclosure] FGA-2008-16: EMC Dantz Retrospect 7 backup Client 7.5.116 NULL-Pointer reference Denial of Service Vulnerability, zhliu, 2008/07/21
MyBlog <=0.9.8 Multiple Vulnerabilities, admin, 2008/07/21
Maran PHP Blog Xss By Khashayar Fereidani, irancrash, 2008/07/21
Easydynamicpages 30tr Multipe Vulerabilities ( Xss / Sql Injection Exploit / File Disclosure Exploit ), irancrash, 2008/07/21
Vulnerability CVE-2008-3671 - MyReview's vulnerability in the access control system, Julien Thomas, 2008/07/21
FGA-2008-16: EMC Dantz Retrospect 7 backup Client 7.5.116 Remote Memory corruption Vulnerability, zhliu, 2008/07/21
EMC Dantz Retrospect 7 backup Client PlainText Password Hash Disclosure Vulnerability, zhliu, 2008/07/21
[ MDVSA-2008:150 ] - Updated mysql packages fix vulnerabilities, security, 2008/07/21
Easyecards 310a Multipe Vulerabilities ( Xss / Sql Injection Exploit / File Disclosure Exploit ) By Khashayar Fereidani, irancrash, 2008/07/21
EasyPublish 3.0tr Multiple Vulnerabilities ( Xss / Sql Injection Exploit / File Disclosure Exploit ), irancrash, 2008/07/21
Re: Oracle Database Local Untrusted Library Path Vulnerability, jmpascual, 2008/07/21
[ MDVSA-2008:149 ] - Updated mysql packages fix vulnerabilities, security, 2008/07/21
Easybookmarker 40tr Xss Vulnerability By Khashayar Fereidani, irancrash, 2008/07/21
[security bulletin] HPSBUX02351 SSRT080058 rev.2 - HP-UX Running BIND, Remote DNS Cache Poisoning, security-alert, 2008/07/19
[Full-disclosure] rPSA-2008-0231-1 bind bind-utils, rPath Update Announcements, 2008/07/19
[Full-disclosure] Oracle Database Local Untrusted Library Path Vulnerability, Joxean Koret, 2008/07/19
- Re: [Full-disclosure] Oracle Database Local Untrusted Library Path Vulnerability, jmpascual, 2008/07/21
[Full-disclosure] rPSA-2008-0230-1 bind bind-utils, rPath Update Announcements, 2008/07/18
Re: Lateral SQL Injection Revisited - No Special Privs Required, a . polyakov, 2008/07/18
- RE: Lateral SQL Injection Revisited - No Special Privs Required, David Litchfield, 2008/07/19
Windows Vista Power Management & Local Security Policy, Abe Getchell, 2008/07/18
- RE: Windows Vista Power Management & Local Security Policy, Jim Harrison, 2008/07/19
  - RE: Windows Vista Power Management & Local Security Policy, Abe Getchell, 2008/07/19
    - RE: Windows Vista Power Management & Local Security Policy, Thor (Hammer of God), 2008/07/21
    - RE: Windows Vista Power Management & Local Security Policy, Abe Getchell, 2008/07/21
    - RE: Windows Vista Power Management & Local Security Policy, Jim Harrison, 2008/07/21
    - RE: Windows Vista Power Management & Local Security Policy, Abe Getchell, 2008/07/21
    - RE: Windows Vista Power Management & Local Security Policy, James C. Slora Jr., 2008/07/22
    - RE: Windows Vista Power Management & Local Security Policy, Jim Harrison, 2008/07/22
    - RE: Windows Vista Power Management & Local Security Policy, Abe Getchell, 2008/07/23
- RE: Windows Vista Power Management & Local Security Policy, Greg, 2008/07/28
- RE: Windows Vista Power Management & Local Security Policy, Good Securitypractice, 2008/07/23
[DSECRG-08-030] Claroline 1.8.9 Multiple Security Vulnerabilities, Digital Security Research Group [DSecRG], 2008/07/18
[ISecAuditors Security Advisories] SmbClientParser Perl module allows remote command execution, ISecAuditors Security Advisories, 2008/07/18
[ MDVSA-2008:148 ] - Updated Firefox packages fix vulnerabilities, security, 2008/07/18
Def_Blog 1.0.3 Multiple Remote SQL Injection Vulnerabilities, tan_prathan, 2008/07/18
Security Vacation Guide, Pete Herzog, 2008/07/18
[Full-disclosure] Lateral SQL Injection Revisited - No Special Privs Required, David Litchfield, 2008/07/18
[Full-disclosure] Vim: Insecure Temporary File Creation During Build: Arbitrary Code Execution, Jan MinÃÅ, 2008/07/17
- Re: [Full-disclosure] Vim: Insecure Temporary File Creation During Build: Arbitrary Code Execution, Nikolai Weibull, 2008/07/18
- Re: [Full-disclosure] Vim: Insecure Temporary File Creation During Build: Arbitrary Code Execution, Robert Buchholz, 2008/07/24
  - Re: [Full-disclosure] Vim: Insecure Temporary File Creation During Build: Arbitrary Code Execution, Jan MinÃÅ, 2008/07/24
    - Re: [Full-disclosure] Vim: Insecure Temporary File Creation During Build: Arbitrary Code Execution, Robert Buchholz, 2008/07/25
    - Re: [Full-disclosure] Vim: Insecure Temporary File Creation During Build: Arbitrary Code Execution, Steven M. Christey, 2008/07/25
    - Re: [Full-disclosure] Vim: Insecure Temporary File Creation During Build: Arbitrary Code Execution, Jan MinÃÅ, 2008/07/26
communitycms-0.1 Remote File Includion, n3tr00t3r, 2008/07/17
[Full-disclosure] ZDI-08-043: Sun Java Web Start vm args Stack Buffer Overflow, zdi-disclosures, 2008/07/17
[Full-disclosure] ZDI-08-042: Sun Java Web Start Sandbox Bypass Vulnerability, zdi-disclosures, 2008/07/17
[Full-disclosure] ZDI-08-044: Mozilla Firefox CSSValue Array Memory Corruption Vulnerability, zdi-disclosures, 2008/07/17
[Full-disclosure] [USN-623-1] Firefox vulnerabilities, Jamie Strandboge, 2008/07/17
HPSBMA02346 SSRT080097 rev.2 - HP Select Identity Active Directory Bidirectional LDAP Connector, Remote Unauthorized Access, security-alert, 2008/07/17
[DSECRG-08-029] Local File Include in Dokeos E-Learning System 1.8.5, Digital Security Research Group, 2008/07/17
ekoparty security trainings (2008) announcement, ekoparty, 2008/07/17
[security bulletin] HPSBUX02351 SSRT080058 rev.1 - HP-UX Running BIND, Remote DNS Cache Poisoning, security-alert, 2008/07/17
[Full-disclosure] Oracle Portal XSS fixed by CPU July 2008, Andrea Purificato, 2008/07/16
[SECURITY] [DSA 1611-1] New afuse packages fix privilege escalation, Thijs Kinkhorst, 2008/07/16
rPSA-2008-0035-1 httpd mod_ssl, rPath Update Announcements, 2008/07/16
openPro 1.3.1 (LIBPATH) Remote RFI Vulnerability, Ghost hacker, 2008/07/16
n.runs-SA-2008.002 - F-Prot Out-of-Bound Memory Access DoS (remote), security, 2008/07/16
[DSECRG-08-028] File read in Velocity web-server, Alexandr Polyakov, 2008/07/16
[Full-disclosure] IETF Internet-Draft on TCP Port randomization, Fernando Gont, 2008/07/16
[Full-disclosure] n.runs-SA-2008.003 - Quicktime - Arbitrary Code Execution (remote), security, 2008/07/16
[ECHO_ADV_100$2008] Comdev Web Blogger <= 4.1.3 (arcmonth) Sql Injection Vulnerability, adv, 2008/07/16
[security bulletin] HPSBMA02133 SSRT061201 rev.9 - HP Oracle for OpenView (OfO) Critical Patch Update, security-alert, 2008/07/16
[security bulletin] HPSBMA02346 SSRT080097 rev.1 - HP Select Identity Active Directory Bidirectional LDAP Connector, Remote Unauthorized Access, security-alert, 2008/07/16
[ MDVSA-2008:146 ] - Updated poppler packages fix arbitrary code execution vulnerability, security, 2008/07/16
[ MDVSA-2008:147 ] - Updated pcre packages fix vulnerability, security, 2008/07/16
[Full-disclosure] n.runs-SA-2008.002 - F-Prot Out-of-Bound Memory Access DoS (remote), security, 2008/07/16
[Full-disclosure] Arbitrary code execution in Netrw version 127, Vim 7.2b, Jan MinÃÅ, 2008/07/16
[Full-disclosure] Vim: Improper Implementation of shellescape()/Arbitrary Code Execution, Jan MinÃÅ, 2008/07/16
- Vim: Improper Implementation of shellescape()/Arbitrary Code Execution, Jan MinÃÅ, 2008/07/21
[Full-disclosure] [USN-625-1] Linux kernel vulnerabilities, Kees Cook, 2008/07/16
[Full-disclosure] iDefense Security Advisory 07.15.08: Oracle Internet Directory Pre-Authentication LDAP DoS Vulnerability, iDefense Labs, 2008/07/15
[Full-disclosure] iDefense Security Advisory 07.15.08: Oracle Database Local Untrusted Library Path Vulnerability, iDefense Labs, 2008/07/15
[Full-disclosure] iDefense Security Advisory 07.15.08: Oracle Database DBMS_AQELM Package Buffer Overflow Vulnerability, iDefense Labs, 2008/07/15
[Full-disclosure] [ GLSA 200807-09 ] Mercurial: Directory traversal, Tobias Heinlein, 2008/07/15
[Full-disclosure] Oracle Application Server PLSQL injection flaw, David Litchfield, 2008/07/15
[SECURITY] [DSA 1609-1] New lighttpd packages fix multiple DOS issues, Steve Kemp, 2008/07/15
HPSBST02350 SSRT080102 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-037 to MS08-040, security-alert, 2008/07/15
[ MDVSA-2008:145 ] - Updated bluez/bluez-utils packages fix SDP packet parsing vulnerability, security, 2008/07/15
CFP now open for ClubHack2008 - India, ClubHack, 2008/07/15
[Full-disclosure] [USN-624-1] PCRE vulnerability, Kees Cook, 2008/07/14
Yuhhu Pubs Black Cat Remote SQL Injection Exploit, RM-x, 2008/07/14
DeepSec 2008 - Last call for submissions, DeepSec Conference Vienna, 2008/07/14
FreeBSD Security Advisory FreeBSD-SA-08:06.bind, FreeBSD Security Advisories, 2008/07/14
Pluck Local File inclusion, admin, 2008/07/14
Simple DNS Plus 5.0/4.1 < remote Denial of Service exploit, Rotem-BugSec, 2008/07/14
[ MDVSA-2008:144 ] - Updated openldap packages fix slapd DoS vulnerability, security, 2008/07/12
[ MDVSA-2008:138-1 ] - Updated OpenOffice.org packages fix vulnerability, security, 2008/07/12
[Full-disclosure] [NETRAGARD SECURITY ADVISORY][Apple Core Image Fun House <= 2.0 OS X -- Arbitrary Code Execution][NETRAGARD-20080711], Netragard Security Advisories, 2008/07/11
[Full-disclosure] [ GLSA 200807-08 ] BIND: Cache poisoning, Matthias Geerdsen, 2008/07/11
[ MDVSA-2008:143 ] - Updated pidgin packages fix MSN protocol handler vulnerability, security, 2008/07/11
Re: PR07-37: XSS on Apache HTTP Server 413 error pages via malformed HTTP method, mcalautt, 2008/07/11
- Re: PR07-37: XSS on Apache HTTP Server 413 error pages via malformed HTTP method, ProCheckUp Research, 2008/07/14
[Full-disclosure] IBM MRO MAXIMO INFORMATION DISCLOSURE AND XSS VULNERABILITIES, Deniz Cevik, 2008/07/11
[ MDVSA-2008:140 ] - Updated ruby packages fix vulnerabilities, security, 2008/07/10
[Full-disclosure] iDefense Security Advisory 07.09.08: Novell eDirectory LDAP Search Request Heap Corruption Vulnerability, iDefense Labs, 2008/07/10
[ MDVSA-2008:141 ] - Updated ruby packages fix vulnerabilities, security, 2008/07/10
phpuserbase 1.3 (menu) Remote File Inclusion Vulnerability, Ghost hacker, 2008/07/10
gapicms v9.0.2 (dirDepth) Remote File Inclusion Vulnerability, Ghost hacker, 2008/07/10
Re: Microsoft DNS patch KB951748 incompatible with Zonealarm FIXED, davee1, 2008/07/10
[Full-disclosure] ZDI-08-041: Novell eDirectory dhost Integer Overflow Code Execution Vulnerability, zdi-disclosures, 2008/07/10
[ MDVSA-2008:142 ] - Updated ruby packages fix vulnerabilities, security, 2008/07/10
Nessus plugins for recent MS Bulletins, Chandrashekhar B, 2008/07/10
Context IS Advisory - MS08-39 OWA XSS, Context IS - Disclosure, 2008/07/10
[ MDVSA-2008:139 ] - Updated BIND packages fix critical DNS vulnerability, security, 2008/07/10
[Full-disclosure] London DEFCON July meet - DC4420 - Thursday 10th July (today!), alien, 2008/07/10
[Full-disclosure] rPSA-2008-0223-1 poppler, rPath Update Announcements, 2008/07/09
[Full-disclosure] [ GLSA 200807-06 ] Apache: Denial of Service, Robert Buchholz, 2008/07/09
[Full-disclosure] [ GLSA 200807-07 ] NX: User-assisted execution of arbitrary code, Robert Buchholz, 2008/07/09
[Full-disclosure] [ GLSA 200807-05 ] OpenOffice.org: User-assisted execution of arbitrary code, Pierre-Yves Rofes, 2008/07/09
Microsoft DNS patch KB951748 incompatible with Zonealarm, Pages-Web.com - Services internet, 2008/07/09
- Re: Microsoft DNS patch KB951748 incompatible with Zonealarm, jgable, 2008/07/12
  - Re: Microsoft DNS patch KB951748 incompatible with Zonealarm, Steve Shockley, 2008/07/12
- Re: Re: Microsoft DNS patch KB951748 incompatible with Zonealarm, nelsrob, 2008/07/14
  - Re: Re: Microsoft DNS patch KB951748 incompatible with Zonealarm, dwg5901, 2008/07/16
Insomnia : ISVA-080709.1 - Microsoft SQL Server - Corrupt Backup File Heap Overflow, Brett Moore, 2008/07/09
Local information disclosure in WeFi Client v3.3.3.0, XiaShing, 2008/07/09
[ MDVSA-2008:138 ] - Updated OpenOffice.org packages fix vulnerability, security, 2008/07/09
[ MDVSA-2008:137 ] - Updated OpenOffice.org fix vulnerability, and a few other bugs, security, 2008/07/09
[Full-disclosure] rPSA-2008-0218-1 ruby, rPath Update Announcements, 2008/07/09
[Full-disclosure] rPSA-2008-0217-1 vsftpd, rPath Update Announcements, 2008/07/09
[Full-disclosure] rPSA-2008-0216-1 firefox, rPath Update Announcements, 2008/07/09
[Full-disclosure] Assurent VR - Adobe RoboHelp Server SQL Injection Vulnerability, VR-Subscription-noreply, 2008/07/09
[ MDVSA-2008:136 ] - Updated Firefox packages fix vulnerabilities, security, 2008/07/08
[USN-622-1] Bind vulnerability, Kees Cook, 2008/07/08
iDefense Security Advisory 07.08.08: Microsoft SQL Server Restore Integer Underflow Vulnerability, iDefense Labs, 2008/07/08
- Re: [Full-disclosure] iDefense Security Advisory 07.08.08: Microsoft SQL Server Restore Integer Underflow Vulnerability, Cesar, 2008/07/08
[Full-disclosure] Minneapolis DC612 Meeting July 10th, 2008@6pm, David Bryan, 2008/07/08
- Re: [Full-disclosure] Minneapolis DC612 Meeting July 10th, 2008@6pm, infolookup, 2008/07/08
[Full-disclosure] [ GLSA 200807-04 ] Poppler: User-assisted execution of arbitrary code, Matthias Geerdsen, 2008/07/08
[SECURITY] [DSA 1603-1] New bind9 packages fix cache poisoning, Florian Weimer, 2008/07/08
[security bulletin] HPSBMA02349 SSRT080043 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Unauthorized Access to Data, security-alert, 2008/07/08
[Full-disclosure] XSS in admin logs - vBulletin 3.7.2 and lower, vBulletin 3.6.10 PL2 and lower, Jessica Hope, 2008/07/08
[security bulletin] HPSBMA02348 SSRT080033 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code, Denial of Service (DoS), security-alert, 2008/07/08
Pwnie Awards 2008, Alexander Sotirov, 2008/07/08
- Re: [Full-disclosure] Pwnie Awards 2008, David Litchfield, 2008/07/21
  - Re: [Full-disclosure] Pwnie Awards 2008, Kingcope Kingcope, 2008/07/21
Call for Papers for the MEITSEC 2008 is now open., Meitsec2008 Conference, 2008/07/08
PHP-NUKE SQL Module's Name 4ndvddb, lovebug, 2008/07/07
[Full-disclosure] [ GLSA 200807-03 ] PCRE: Buffer overflow, Robert Buchholz, 2008/07/07
Re: Multiple vulnerabilities in TietoEnator's Procapita school administration system, at least version, Juha-Matti Laurio, 2008/07/07
[oCERT-2008-007] libpoppler uninitialized pointer, Andrea Barisani, 2008/07/07
[ MDVSA-2008:135 ] - Updated gnome-screensaver packages fix authentication vulnerability, security, 2008/07/05
[ MDVSA-2008:134 ] - Updated squid packages fix DoS vulnerability, security, 2008/07/05
[ MDVSA-2008:133 ] - Updated sympa packages fix DoS vulnerability, security, 2008/07/05
[ MDVSA-2008:132 ] - Updated gnome-screensaver packages fix authentication vulnerability, security, 2008/07/05
[ MDVSA-2008:131 ] - Updated phpMyAdmin packages fix multiple vulnerabilities, security, 2008/07/04
Novell GroupWise Messenger Client (GWIM) Remote Stack Overflow, [ISR] - Infobyte Security Research, 2008/07/04
[DSECRG-08-027] Multiple RFI-LFI in 1024 CMS 1.4.3, 1.4.4 RFC, Digital Security Research Group [DSecRG], 2008/07/04
F5 FirePass 1200 SNMP daemon DoS, nnposter, 2008/07/04
[ MDVSA-2008:129 ] - Updated PHP packages fix multiple vulnerabilities, security, 2008/07/04
[ MDVSA-2008:130 ] - Updated PHP packages fix multiple vulnerabilities, security, 2008/07/04
Unauthorized reading confirmation from Outlook, Augusto Paes de Barros, 2008/07/04
- Re: Unauthorized reading confirmation from Outlook, Alexander Klink, 2008/07/09
Local vulnerability in WeFi Client v3.2.1.4.1(Update), XiaShing, 2008/07/04
- Re: Local vulnerability in WeFi Client v3.2.1.4.1(Update), galia, 2008/07/08
[ MDVSA-2008:128 ] - Updated PHP packages fix multiple vulnerabilities, security, 2008/07/04
[SECURITY] [DSA 1601-1] New wordpress packages fix several vulnerabilities, Thijs Kinkhorst, 2008/07/04
[ MDVSA-2008:127 ] - Updated PHP packages fix multiple vulnerabilities, security, 2008/07/04
[ MDVSA-2008:126 ] - Updated PHP packages fix multiple vulnerabilities, security, 2008/07/04
[ MDVSA-2008:125 ] - Updated PHP packages fix multiple vulnerabilities, security, 2008/07/04
[Full-disclosure] zonedit.com e dns zone transfer, NetExpress, 2008/07/04
rPSA-2008-0212-1 tshark wireshark, rPath Update Announcements, 2008/07/03
rPSA-2008-0211-1 mercurial mercurial-hgk, rPath Update Announcements, 2008/07/03
Release of Pass-The-Hash Toolkit v1.4, Hernan Ochoa, 2008/07/02
Secunia Research: VLC Media Player WAV Processing Integer Overflow, Secunia Research, 2008/07/02
ISEC 2008(Information Security Conference) Guide, isec, 2008/07/02
[Full-disclosure] [USN-619-1] Firefox vulnerabilities, Jamie Strandboge, 2008/07/02
[Full-disclosure] [tool] ratproxy - passive web application security assessment tool, Michal Zalewski, 2008/07/01
Deepsec Talks 2007 are online - registration for 2008 is open, DeepSec 2008, 2008/07/01
Re: [Full-disclosure] Collection of Vulnerabilities in Fully Patched Vim 7.1, Jan MinÃÅ, 2008/07/01
Vuln name: Ruby rb_ary_fill() DOS, snagg, 2008/07/01
New Paper: More than 600 million users surf at high risk, Stefan Frei, 2008/07/01
- RE: New Paper: More than 600 million users surf at high risk, Larry Seltzer, 2008/07/01
- RE: New Paper: More than 600 million users surf at high risk, Larry Seltzer, 2008/07/01
  - RE: New Paper: More than 600 million users surf at high risk, Paul Schmehl, 2008/07/01
    - RE: New Paper: More than 600 million users surf at high risk, Nick FitzGerald, 2008/07/02
    - Re: New Paper: More than 600 million users surf at high risk, Rainer Duffner, 2008/07/02
    - RE: New Paper: More than 600 million users surf at high risk, Jeff Martin, 2008/07/11
    - Re: New Paper: More than 600 million users surf at high risk, Rob Thompson, 2008/07/12
  - Re: New Paper: More than 600 million users surf at high risk, Rob Thompson, 2008/07/02
[security bulletin] HPSBMA02345 SSRT080039 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Cross Site Scripting (XSS), security-alert, 2008/07/01
CFP 25C3 - The 25th Chaos Communication Congress 2008, fukami, 2008/07/01
Re: Rhythmbox Vulnerability, wargame89, 2008/07/01
[Full-disclosure] [ GLSA 200807-02 ] Motion: Execution of arbitrary code, Tobias Heinlein, 2008/07/01
[Full-disclosure] [ GLSA 200807-01 ] Python: Multiple integer overflows, Tobias Heinlein, 2008/07/01
[Full-disclosure] [SCANIT-2008-001] QNX phgrafx Privilege Escalation Vulnerability, Scanit Labs, 2008/07/01
[Full-disclosure] [SCANIT-2008-003] Wordtrans-web Remote Command Execution Vulnerability, Scanit Labs, 2008/07/01
[Full-disclosure] [SCANIT-2008-002] Wordtrans-web Remote Command Execution Vulnerability, Scanit Labs, 2008/07/01