bugtraq mailing list - 2008/02

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2008/02

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹ 5	² 12	³
⁴ 14	⁵ 16	⁶ 18	⁷ 8	⁸ 25	⁹ 9	¹⁰
¹¹ 23	¹² 41	¹³ 31	¹⁴ 22	¹⁵ 35	¹⁶ 11	¹⁷
¹⁸ 23	¹⁹ 36	²⁰ 7	²¹ 37	²² 15	²³ 13	²⁴
²⁵ 25	²⁶ 11	²⁷ 13	²⁸ 16	²⁹ 16

Messages by day:

February 1 (5 messages)

[ MDVSA-2008:030 ] - Updated pcre packages fix vulnerability (security@...driva.com)
LightBlog Remote File Upload Vulnerability (omnipresent@...il.it)
LiveCart XSS vulnerability fixed since version 1.1.0 (info@...ecart.com)
[ MDVSA-2008:031 ] - (security@...driva.com)
SQL in Archimede Net 2000 "E-Guest_show.php" (Sw33t.h4cK3r@...mail.com)

February 2 (12 messages)

Titan FTP Server Remote Heap Overflow (USER/PASS) (securfrog@...il.com)
Domain Trader v2.0 Xss Vulnerable (cybermilitan@...mail.com)
Sun JRE / JDK bug introduces XXE possibilities ("Chris Evans" <scarybeasts@...il.com>)
Youtube Clone Xross Site Scripting (load_message.php) (ciucciamilcalzino@...ccazzamelo.it)
Wordpress Plugin dmsguestbook 1.7.0 Multiple Remote Vulnerabilities (nbbn@....net)
The Everything Development System - SQL Injection (sub <sub@...m641a.net>)
[ MDVSA-2008:032 ] - Updated boost packages fix DoS vulnerabilities (security@...driva.com)
ITech Classifieds Multiple Remote Vulnerabilities (cybermilitan@...mail.com)
phpShop <= v 0.8.1 Remote SQL injection / Filter Bypass (theredc0ders@...il.com)
[ MDVSA-2008:033 ] - Updated ruby-gnome2 packages fix arbitrary code execution vulnerability (security@...driva.com)
Wordpress Pluging wp-footnotes 2.2 (admin_panel.php) Multiple Vulnerabilites (nbbn@....net)
IpSwitch WS_FTPSERVER with SSH remote Buffer Overflow (securfrog@...il.com)

February 4 (14 messages)

[security bulletin] HPSBUX02308 SSRT080010 rev.1 - HP-UX Running Apache, Remote Execution of Arbitrary Code (security-alert@...com)
Anon Proxy Server <= 0.102 remote buffer overflow (L4teral <l4teral@...il.com>)
[DSECRG-08-009] xoops 2.0.18 Local File Include (Digital Security Research Group <research@...c.ru>)
[OPENADS-SA-2008-001] Openads 2.4.2 vulnerability fixed (Matteo Beccati <php@...cati.com>)
[DSECRG-08-011] Astrosoft HelpDesk Multiple XSS (Digital Security Research Group <research@...c.ru>)
[DSECRG-08-008] Textpattern 4.0.5 Multiple Security Vulnerabilities (Digital Security Research Group <research@...c.ru>)
[DSECRG-08-010] VHD Web Pack 2.0 Local File Include (Digital Security Research Group <research@...c.ru>)
CORE-2008-0122: MPlayer arbitrary pointer dereference (CORE Security Technologies Advisories <advisories@...esecurity.com>)
CORE-2007-1218: MPlayer 1.0rc2 buffer overflow vulnerability (CORE Security Technologies Advisories <advisories@...esecurity.com>)
Socket termination in FTP Log Server 7.9.14.0 (Luigi Auriemma <aluigi@...istici.org>)
Multiple vulnerabilities in WinCom LPD Total 3.0.2.623 (Luigi Auriemma <aluigi@...istici.org>)
iDefense Security Advisory 01.31.08: IBM Informix Dynamic Server onedcu File Creation Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Multiple vulnerabilities in SAPlpd 6.28 (Luigi Auriemma <aluigi@...istici.org>)
iDefense Security Advisory 01.31.08: IBM Informix Dynamic Server SQLIDEBUG File Creation Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)

February 5 (16 messages)

[USN-575-1] Apache vulnerabilities (Jamie Strandboge <jamie@...ntu.com>)
Re: Re: PIX Privilege Escalation Vulnerability (rvandenbrink@...afore.ca)
NERO Media Player <= 1.4.0.35b Remote Buffer Overflow( .M3U) (Securfrog@...il.com)
[ MDVSA-2008:034 ] - Updated emacs packages fix vulnerabilities (security@...driva.com)
[security bulletin] HPSBMA02307 SSRT071420 rev.1 - HP OpenView Network Node Manager (OV NNM) Remote Denial of Service (DoS) (security-alert@...com)
Re: PR07-38: XSS on sIFR (hk@....de)
Re: Multiple vulnerabilities in SAPlpd 6.28 (robert.ingruber@...mens.com)
[SECURITY] [DSA 1481-1] New python-cherrypy packages fix denial of service (Moritz Muehlenhoff <jmm@...ian.org>)
[DSECRG-08-012] Multiple LFI in Azucar CMS 1.3 ("Digital Security Research Group [DSecRG]" <research@...c.ru>)
[SECURITY] [DSA 1480-1] New poppler packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 1486-1] New gnatsweb packages fix cross-site scripting (Steve Kemp <skx@...ian.org>)
CYBSEC Security Advisory: Arbitrary file overwrite in Documentum Administrator / Documentum Webtop (CYBSEC Advisories <advisories@...sec.com>)
dBpowerAMP Audio Player Release 2 Remote Buffer Overflow (Securfrog@...il.com)
rPSA-2008-0040-1 mysql mysql-bench mysql-server (rPath Update Announcements <announce-noreply@...th.com>)
Apple iPhone 1.1.3 remote DoS exploit (morin.josh@...il.com)
[ MDVSA-2008:035 ] - Updated libcdio packages fix DoS vulnerability (security@...driva.com)

February 6 (18 messages)

[security bulletin] HPSBST02302 SSRT071474 rev.1 - HP Storage Essentials SRM, Remote Unauthorized Access (security-alert@...com)
A paper by Amit Klein (Trusteer): "OpenBSD DNS Cache Poisoning and Multiple O/S Predictable IP ID Vulnerability" (Amit Klein <amit.klein@...steer.com>)
Tested on Webmin 1.390 (no-reply@...a-security.net)
[SECURITY] [DSA 1482-1] New squid packages fix denial of service (Moritz Muehlenhoff <jmm@...ian.org>)
[security bulletin] HPSBGN02310 SSRT080007 rev.1 - HP Virtual Rooms Running on Windows, Remote Execution of Arbitrary Code (security-alert@...com)
Re: A paper by Amit Klein (Trusteer): "OpenBSD DNS Cache Poisoning and Multiple O/S Predictable IP ID Vulnerability" (Tim Newsham <newsham@...a.net>)
rPSA-2008-0043-1 icu (rPath Update Announcements <announce-noreply@...th.com>)
Re: Tested on Webmin 1.390 (ivangaravito@...il.com)
Logs visualization in WS_FTP Server Manager 6.1.0.0 (Luigi Auriemma <aluigi@...istici.org>)
rPSA-2008-0046-1 gd (rPath Update Announcements <announce-noreply@...th.com>)
[ MDVSA-2008:036 ] - Updated CUPS packages fix SNMP vulnerability (security@...driva.com)
iDefense Security Advisory 02.04.08: Hewlett-Packard Network Node Manager Topology Manager Service DoS Vulnerability (iDefense Labs <labs-no-reply@...fense.com…)
[SECURITY] [DSA 1483-1] New net-snmp packages fix denial of service vulnerability (Noah Meyerhans <noahm@...ian.org>)
Chat vulnerabilities in TinTin++ 1.97.9 (Luigi Auriemma <aluigi@...istici.org>)
[ GLSA 200802-02 ] Doomsday: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
ZDI-08-003: Symantec Backup Exec Remote File Upload Vulnerability (zdi-disclosures@...m.com)
[ GLSA 200802-01 ] SDL_image: Two buffer overflow vulnerabilities (Raphael Marichez <falco@...too.org>)
RE: A paper by Amit Klein (Trusteer): "OpenBSD DNS Cache Poisoning and Multiple O/S Predictable IP ID Vulnerability" (Amit Klein <amit.klein@...steer.com>)

February 7 (8 messages)

[security bulletin] HPSBMA02309 SSRT080013 rev.1 - HP Select Identity Software, Remote Unauthorized Access (security-alert@...com)
Re: Logs visualization in WS_FTP Server Manager 6.1.0.0 (Steve Shockley <steve.shockley@...ckley.net>)
mini-pub 0.3 multiple vulnerabilities ("muuratsalo experimental hack lab" <muuratsalo@...il.com>)
[DSECRG-08-013] Modx 0.9.6.1, 0.9.6.1p1 Multiple Security Vulnerabilities ("Digital Security Research Group [DSecRG]" <research@...c.ru>)
Checkpoint SecuRemote/Secure Client NGX Auto Local Logon Vulnerability ("Michael Neal Vasquez" <mnv@...mni.princeton.edu>)
[ MDVSA-2008:037 ] - Updated libcdio packages fix DoS vulnerability (security@...driva.com)
Multiple vulnerabilities in Ipswitch Instant Messaging 2.0.8.1 (Luigi Auriemma <aluigi@...istici.org>)
iDefense Security Advisory 02.07.08: IBM DB2 Universal Database db2pd Arbitrary Library Loading Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)

February 8 (25 messages)

iDefense Security Advisory 02.07.08: IBM DB2 Universal Database Administration Server Memory Corruption Vulnerability (iDefense Labs <labs-no-reply@...fense.co…)
[ MDVSA-2008:041 ] - Updated tk packages fix buffer overflow vulnerability (security@...driva.com)
[USN-576-1] Firefox vulnerabilities (Jamie Strandboge <jamie@...ntu.com>)
Adobe Reader/Acrobat Remote PDF Print Silently Vulnerability (cocoruder <cocoruder@...il.com>)
[ MDVSA-2008:040 ] - Updated SDL_image packages fix vulnerabilities (security@...driva.com)
Web Hacking Incidenets Database 2007 annual Report is out (Ofer Shezaf <ofers@...ach.com>)
[ MDVSA-2008:042 ] - Updated Qt4 packages fix vulnerability in QSslSocket (security@...driva.com)
[DSECRG-08-014] Multiple LFI in PowerNews (Newsscript) 2.5.6 ("Digital Security Research Group [DSecRG]" <research@...c.ru>)
Husrev Forums v2.0.1:PoWerBoard (tr) (id) Remote SQL Injection (crazy_kinq@...mail.co.uk)
Blackboard (id) Remote SQL Injection (crazy_kinq@...mail.co.uk)
Joovili <= v.2.1 (members_help.php) Remote File İnclude Vulnerability (crazy_kinq@...mail.co.uk)
[ MDVSA-2008:038 ] - Updated gd packages fix buffer overflow vulnerability (security@...driva.com)
[ MDVSA-2008:039 ] - Updated netpbm packages fix buffer overflow vulnerability (security@...driva.com)
Joomla <= v1.0.14-RC1(Index.php) Remote File Inclusion Exploit (alex_zooz_zooz@...mail.com)
ASUS Eee PC rooted out of the box (RISE Security <advisories@...esecurity.org>)
Buffer Overflow Vulnerability in AxRUploadServer.dll, Activex Method (SetLogging) (david130490@...mail.com)
[SECURITY] [DSA 1487-1] New libexif packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Buffer Overflow Vulnerability in AxRUploadServer.dll, Activex Method (SetLogging) (david130490@...mail.com)
jetAudio <= 7.0.5 (.ASX) Remote Stack Overflow (laurent.gaffie@...il.com)
RE: ASUS Eee PC rooted out of the box ("Bug traq" <bugtraq001@...kermail.com>)
rPSA-2008-0048-1 kernel (rPath Update Announcements <announce-noreply@...th.com>)
Re: RE: ASUS Eee PC rooted out of the box (RISE Security <advisories@...esecurity.org>)
NULL byte writing in Emerald, RadiusNT/X and Air Marshal (Luigi Auriemma <aluigi@...istici.org>)
SECURITY ADVISORY - Level Platforms, Inc. Service Center Install Data HTTP Vulnerability ("Brook Powers" <BPowers@...h-serve.com>)
CVE-2008-0002: Tomcat information disclosure vulnerability (Mark Thomas <markt@...che.org>)

February 9 (9 messages)

[SECURITY] CVE-2007-5333: Tomcat Cookie handling vulnerabilities (Mark Thomas <markt@...che.org>)
[SECURITY] CVE-2007-6286: Tomcat duplicate request processing vulnerability (Mark Thomas <markt@...che.org>)
[SECURITY] [DSA 1488-1] New phpbb2 packages fix several vulnerabilities (thijs@...ian.org (Thijs Kinkhorst))
rPSA-2008-0051-1 firefox (rPath Update Announcements <announce-noreply@...th.com>)
Some interesting hashes ("Open Phugu" <openphugu@...il.com>)
iDefense Security Advisory 02.08.08: Adobe Reader and Acrobat JavaScript Insecure Method Exposure Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 02.08.08: Adobe Reader Security Provider Unsafe Libary Path Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 02.08.08: Adobe Reader and Acrobat Multiple Stack-based Buffer Overflow Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)
PKs Movie Database version 3.0.3 (SQL/XSS) (houssamix@...mail.fr)

February 11 (23 messages)

F5 BIG-IP Web Management Console CSRF (nnposter@...closed.not)
F5 BIG-IP Web Management Console CSRF (with example) (nnposter@...closed.not)
Vwar 1.5.0 (p_s3rver@...oo.com)
Default Multiple Joomla! Component com_rapidrecipe "user_id=" Remote SQL Inj. (staad1@...il.com)
پيش گزيده Website Design Chat Software Remote Cross-Site Scripting (no-reply@...a-security.net)
hi (f10@...f10.com)
Final CFP: EuroSec Workshop (March 31st, 2008) (Stefano Zanero <zanero@...t.polimi.it>)
[SECURITY] [DSA 1485-1] New icedove packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 1484-1] New xulrunner packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 1489-1] New iceweasel packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 1492-1] New wml packages fix denial of service (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 1491-1] New tk8.4 packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 1490-1] New tk8.3 packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 1493-1] New sdl-image1.2 packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
Simple Machines Forum "SMF Shoutbox" Mod Persistent XSS (enterth3dragon@...il.com)
Mercury v1.1.5 Send Message Cross-Site Scripting (No-reply@...a-security.net)
aliboard Beta Upload Shell From ControlPanel (رومانسي هكر <rxhr@...mail.com>)
[SECURITY] [DSA 1494-1] New linux-2.6 packages fix privilege escalation (Florian Weimer <fw@...eb.enyo.de>)
ExtraOutlook 1.2 Released ("Thor (Hammer of God)" <thor@...merofgod.com>)
Multiple vulnerabilities in EztremeZ-IP File and Printer Server 5.1.2x15 (Luigi Auriemma <aluigi@...istici.org>)
Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0 (Luigi Auriemma <aluigi@...istici.org>)
Format string and DoS in Opium OPI and cyanPrintIP servers 4.10.x (Luigi Auriemma <aluigi@...istici.org>)
Format string and buffer-overflow in Lst Network Print Server 9.4.2 build 105 (Luigi Auriemma <aluigi@...istici.org>)

February 12 (41 messages)

[ GLSA 200802-03 ] Horde IMP: Security bypass (Pierre-Yves Rofes <py@...too.org>)
IOActive Security Advisory: Legacy mod_jk2 Buffer Overflow (IOActive Advisories <advisory@...ctive.com>)
[ GLSA 200802-04 ] Gallery: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
my little forum XSS (db@...security.org)
FLEA-2008-0006-1 tetex tetex-dvips tetex-fonts (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
joomla (k12.tr)(com_iomezun)SQL Injection (hackturkiye.hackturkiye@...il.com)
FLEA-2008-0002-1 python (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
Kommentare zum Download script SQL Injection (hackturkiye.hackturkiye@...il.com)
CSA-L03: Linux kernel vmsplice unchecked user-pointer dereference (Wojciech Purczynski <cliph@...c.pl>)
FLEA-2008-0003-1 nss_ldap (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
joomll(k12.tr)(com_mezun)SQL Injection (hackturkiye.hackturkiye@...il.com)
FLEA-2008-0004-1 rsync (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
[ MDVSA-2008:043 ] - Updated kernel packages fix multiple vulnerabilities and bugs (security@...driva.com)
joomla (k12.tr)(com_iomezun)SQL Injection (hackturkiye.hackturkiye@...il.com)
Re: Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0 (jfvanmeter@...cast.net)
FLEA-2008-0005-1 e2fsprogs (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
ZDI-08-004: Adobe AcrobatReader Javascript for PDF Integer Overflow Vulnerability (zdi-disclosures@...m.com)
IOActive Security Advisory: Multiple Remote SiteScope Vulnerabilities (IOActive Advisories <advisory@...ctive.com>)
ZDI-08-005: Novell Client NWSPOOL.DLL EnumPrinters Stack Overflow Vulnerability (zdi-disclosures@...m.com)
FLEA-2008-0001-1 firefox (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
[ MDVSA-2008:044 ] - Updated kernel packages fix multiple vulnerabilities and bugs (security@...driva.com)
gkrellweather (forensec@...oo.de)
rPSA-2008-0052-1 kernel (rPath Update Announcements <announce-noreply@...th.com>)
Re: Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0 (jfvanmeter@...cast.net)
Unicode buffer-overflow in RPM Remote Print Manager 4.5.1.11 (Luigi Auriemma <aluigi@...istici.org>)
iDefense Security Advisory 02.12.08: ClamAV libclamav PE File Integer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
artmedic weblog multiple xss vulnerabilities ("muuratsalo experimental hack lab" <muuratsalo@...il.com>)
FLEA-2008-0007-1 gd (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
cacti -- Multiple security vulnerabilities have been discovered (Mario Sergio Candian <mscandian@...ebsdbrasil.com.br>)
Re: Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0 (Luigi Auriemma <aluigi@...istici.org>)
LI-countdown SQL Injection Vulnerability (sex@...-aaa.net.ru)
Cacti 0.8.7a Multiple Vulnerabilities (s4tan <s4tan@....it>)
Directory traversal and DoS in WinIPDS G52-33-021 (Luigi Auriemma <aluigi@...istici.org>)
Re: Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0 (Luigi Auriemma <aluigi@...istici.org>)
Re: Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0 (jfvanmeter@...cast.net)
Re: Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0 (Luigi Auriemma <aluigi@...istici.org>)
[ GLSA 200802-05 ] Gnumeric: User-assisted execution of arbitrary code (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200802-06 ] scponly: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200802-05 ] Gnumeric: User-assisted execution of arbitrary code (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200802-06 ] scponly: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
[ GLSA 200802-05 ] Gnumeric: User-assisted execution of arbitrary code (Pierre-Yves Rofes <py@...too.org>)

February 13 (31 messages)

[SECURITY] [DSA 1495-1] New nagios-plugins packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 1495-1] New nagios-plugins packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
iDefense Security Advisory 02.12.08: Microsoft Office Works Converter Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 02.12.08: Microsoft Office Works Converter Stack-based Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
[SECURITY] [DSA 1496-1] New mplayer packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
QuickTime <= 7.4.1 QTPlugin.ocx Multiple Remote Stack Overflow (laurent.gaffie@...il.com)
Thanks to all, ExploitSearch in Top5 security must-have ("Security Basic" <security.basic@...il.com>)
iDefense Security Advisory 02.12.08: Microsoft Internet Explorer Property Memory Corruption Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
ZDI-08-006: Microsoft Internet Explorer SVG animateMotion.by Code Execution Vulnerability (zdi-disclosures@...m.com)
SyScan'08 Call for Paper/Training ("organiser@...can.org" <organiser@...can.org>)
[SECURITY] [DSA 1494-2] New linux-2.6 packages fix privilege escalation (dann frazier <dannf@...ian.org>)
iDefense Security Advisory 02.12.08: Adobe Flash Media Server 2 Memory Corruption Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 02.12.08: Adobe Flash Media Server 2 Multiple Integer Overflow Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)
Re: XSS on Obedit v3.03 (richard@...ius.com)
Vwar New Bug (p_s3rver@...oo.com)
[Reversemode Advisory] February Advisories : Microsoft Word 2003 + Fortinet Forticlient (Reversemode <advisories@...ersemode.com>)
rPSA-2008-0054-1 tk (rPath Update Announcements <announce-noreply@...th.com>)
Netkom Internet Solutions (folder_id) Remote SQL Injection Vulnerability (crazy_kinq@...mail.co.uk)
[security bulletin] HPSBUX02249 SSRT071442 rev.3 - HP-UX Running the Ignite-UX or the DynRootDisk (DRD) get_system_info Command, Local Unq… (security-alert@...com)
rPSA-2008-0061-1 SDL_image (rPath Update Announcements <announce-noreply@...th.com>)
[security bulletin] HPSBMA02274 SSRT071445 rev.3 - HP System Management Homepage (SMH) for HP-UX, Remote Cross Site Scripting (XSS) (security-alert@...com)
[security bulletin] HPSBUX02313 SSRT080015 rev.1 - HP-UX Running Apache, Remote Execution of Arbitrary Code (security-alert@...com)
Provided By Development Solutions SQL Injection Exploit(panel) (hackturkiye.hackturkiye@...il.com)
ALL VERSİON PHPAUTOVİDEO c99 shell (hackturkiye.hackturkiye@...il.com)
all forums.asp hack (hackturkiye.hackturkiye@...il.com)
joomla upload php code or picture (com_uhp) (hackturkiye.hackturkiye@...il.com)
joomla "com_model" (hackturkiye.hackturkiye@...il.com)
joomla "com_omnirealestate" S@L Injection (hackturkiye.hackturkiye@...il.com)
Cisco Security Advisory: SQL injection in Cisco Unified Communications Manager (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco Unified IP Phone Overflow and Denial of Service Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@cis…)
rPSA-2008-0063-1 boost (rPath Update Announcements <announce-noreply@...th.com>)

February 14 (22 messages)

Search Unleashed 0.2.10 JavaScript injection (Wordpress plugin) ("Krzysztof Burghardt" <krzysztof@...ghardt.pl>)
JSPWiki Multiple Vulnerabilities (Trancer <mtrancer@...il.com>)
[DSECRG-08-011 | FIX INFORMATION] Astrosoft HelpDesk Multiple XSS ("Digital Security Research Group [DSecRG]" <research@...c.ru>)
ELFdump crash when analyzing crafted ELF file. (david.reguera@...eco.es)
artmedic weblog multiple local file inclusion vulnerabilities ("muuratsalo experimental hack lab" <muuratsalo@...il.com>)
Re: Vwar New Bug (packet@...ketstormsecurity.org)
[ GLSA 200802-07 ] Pulseaudio: Privilege escalation (Pierre-Yves Rofes <py@...too.org>)
etomite xss (th3.r00k.nospam@...k.gmail.com)
Apache web server 2.2: htpasswd predictable salt weakness (Peter Watkins <peterw@....net>)
[USN-578-1] Linux kernel vulnerabilities (Jamie Strandboge <jamie@...ntu.com>)
Joomla 1.0.13 - 1.0.14 / (remote) PHP file inclusion possible if old configuration.php ("Hendrik Jan Verheij" <h.j.verheij@...s.nl>)
Philips VOIP841 Multiple Vulnerabilities (luca.carettoni@...urenetwork.it)
FreeBSD Security Advisory FreeBSD-SA-08:03.sendfile (FreeBSD Security Advisories <security-advisories@...eBSD.org>)
FreeBSD Security Advisory FreeBSD-SA-08:04.ipsec (FreeBSD Security Advisories <security-advisories@...eBSD.org>)
Joomla 1.0.13 - 1.0.14 / (remote) PHP file inclusion possible if old configuration.php ("Hendrik Jan Verheij" <h.j.verheij@...s.nl>)
Rosoft Media Player 4.1.8 Buffer Overflow ( .M3U) (securfrog@...il.com)
DOINGSOFT-2008-02-11 - IPDiva VPN SSL Brute force attack (eagle <eagle@...ckers.fr>)
scribe 0.2 local file inclusion vulnerability ("muuratsalo experimental hack lab" <muuratsalo@...il.com>)
PlutoStatus Locator v1.0pre (alpha) local file inclusion vulnerability ("muuratsalo experimental hack lab" <muuratsalo@...il.com>)
Re: UniversalFtp Server 1.0.44 Multiple Remote Denial of service (securfrog@...il.com)
DOINGSOFT-2008-02-11-002 IP Diva VPN SSL many XSS attacks (eagle <eagle@...ckers.fr>)
UniversalFtp Server 1.0.44 Multiple Remote Denial of service (securfrog@...il.com)

February 15 (35 messages)

Sami FTP Server 2.0.* Multiple Remote Vulnerabilities (securfrog@...il.com)
StatCounteX 3.0 & 3.1 Admin Vulnerability (Sekomirza@...dowslive.com)
Re: Joomla 1.0.13 - 1.0.14 / (remote) PHP file inclusion possible if old configuration.php (manuel.no_spam.bruneau@..._la.fr)
Re: Philips VOIP841 Multiple Vulnerabilities (mattyg@...mail.com)
[INFIGO-2008-02-13]: SOPHOS Email Security Appliance Cross Site Scripting Vulnerability ("infocus" <infocus@...igo.hr>)
Re: SECURITY ADVISORY - Level Platforms, Inc. Service Center Install Data HTTP Vulnerability (cmiyazaki@...elplatforms.com)
Re: DOINGSOFT-2008-02-11-002 IP Diva VPN SSL many XSS attacks (rose-of-a@...mail.com)
Re: SECURITY ADVISORY - Level Platforms, Inc. Service Center Install Data HTTP Vulnerability (cmiyazaki@...elplatforms.com)
Re: DOINGSOFT-2008-02-11-002 IP Diva VPN SSL many XSS attacks (rose-of-a@...mail.com)
SellOwnHouse login SQL Injection (hackturkiye.hackturkiye@...il.com)
StatCounteX 3.0 & 3.1 Admin Vulnerability (Sekomirza@...dowslive.com)
Re: SECURITY ADVISORY - Level Platforms, Inc. Service Center Install Data HTTP Vulnerability (cmiyazaki@...elplatforms.com)
Re: Apache web server 2.2: htpasswd predictable salt weakness (3APA3A <3APA3A@...URITY.NNOV.RU>)
Simple Forum Version 1.10-1.11 SQL Injection (hackturkiye.hackturkiye@...il.com)
[ MDVSA-2008:045 ] - Updated MPlayer packages fix a few vulnerabilities (security@...driva.com)
artmedic_weblog Cross Site Scriptting Vulnerbility (hadihadi_zedehal_2006@...oo.com)
Ecommerce Websites from b1st.com SQL Injection (hackturkiye.hackturkiye@...il.com)
engineering Neoteric UK LTD S@L İNJECTİON (hackturkiye.hackturkiye@...il.com)
joomla "com_smslist" sql injecton (hackturkiye.hackturkiye@...il.com)
Re: [Full-disclosure] rPSA-2008-0052-1 kernel (Tonnerre Lombard <tonnerre.lombard@...roup.ch>)
[ GLSA 200802-08 ] Boost: Denial of Service (Raphael Marichez <falco@...too.org>)
joomla com_activities sql injection (hackturkiye.hackturkiye@...il.com)
all version Wordpress FORUM S@L injection (hackturkiye.hackturkiye@...il.com)
joomla faq SQL Injection (hackturkiye.hackturkiye@...il.com)
SellOwnHouse login SQL Injection (hackturkiye.hackturkiye@...il.com)
Re: Apache web server 2.2: htpasswd predictable salt weakness (Peter Watkins <peterw@....net>)
Simple Forum Version 1.7-1.9(pagename) (hackturkiye.hackturkiye@...il.com)
Re: ACER Travelmate 600 and 800 series - Smartcard flawed Implementation (linke_z@...mail.com)
rPSA-2008-0056-1 mailman (rPath Update Announcements <announce-noreply@...th.com>)
SellOwnHouse login SQL Injection (hackturkiye.hackturkiye@...il.com)
Re: rPSA-2008-0052-1 kernel (gregory <gregory@....be>)
rPSA-2008-0059-1 openldap openldap-clients openldap-servers (rPath Update Announcements <announce-noreply@...th.com>)
[ MDVSA-2008:046 ] - Updated xine-lib package fixes arbitrary code execution vulnerability (security@...driva.com)
SellOwnHouse login SQL Injection (hackturkiye.hackturkiye@...il.com)
SellOwnHouse login SQL Injection (hackturkiye.hackturkiye@...il.com)

February 16 (11 messages)

Re: artmedic_weblog Cross Site Scriptting Vulnerbility (jyvaeskylae@...il.com)
[HISPASEC] FireFox 2.0.0.11 and Opera 9.50 beta Remote Memory Information Leak, FireFox 2.0.0.11 Remote Denial of Servic… ("Gynvael Coldwind" <gynvael@...illium.o…)
Re[2]: Apache web server 2.2: htpasswd predictable salt weakness (3APA3A <3APA3A@...URITY.NNOV.RU>)
joomla SQL Injection(com_salesrep) (hackturkiye.hackturkiye@...il.com)
joomla SQL Injection( com_scheduling) (hackturkiye.hackturkiye@...il.com)
banpro-dms 1.0 local file inclusion vulnerability ("muuratsalo experimental hack lab" <muuratsalo@...il.com>)
joomla SQL Injection(com_lexikon) (hackturkiye.hackturkiye@...il.com)
joomla SQL Injection(com_filebase) (hackturkiye.hackturkiye@...il.com)
joomla SQL Injection(com_sg) (hackturkiye.hackturkiye@...il.com)
[SECURITY] [DSA 1497-1] New clamav packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
joomla SQL Injection(com_emcompose) (hackturkiye.hackturkiye@...il.com)

February 18 (23 messages)

joomla SQL Injection(com_profile) (hackturkiye.hackturkiye@...il.com)
WordPress SQL Injection(wp-content-simple-forum) (hackturkiye.hackturkiye@...il.com)
WordPress forumaction (PAGE_id)(user)SQL Injection (hackturkiye.hackturkiye@...il.com)
Wordpress Plugin (wp-content/recipe) SQL Injection (hackturkiye.hackturkiye@...il.com)
joomla SQL Injection(com_detail) (hackturkiye.hackturkiye@...il.com)
lightblog 9.6 local file inclusion vulnerability ("muuratsalo experimental hack lab" <muuratsalo@...il.com>)
joomla SQL Injection(com_filebase) (hackturkiye.hackturkiye@...il.com)
joomla SQL Injection(com_galeria) (hackturkiye.hackturkiye@...il.com)
RunCMS 1.6.1 Multiple XSS and XSRF Vulnerabilties (nbbn@....net)
joomla SQL Injection(com_jooget) (hackturkiye.hackturkiye@...il.com)
RUXCON 2008 CALL FOR PAPERS (cfp@...con.org.au)
Simple CMS <= 1.0.3 (indexen.php area) Remote SQL Injection Exploit (sys-project@...mail.com)
joomla SQL Injection(com_ricette) (hackturkiye.hackturkiye@...il.com)
Crafty Syntax Xss Vulnerability (Ozgur Ozdemircili <ozgur.ozdemircili@...il.com>)
Wordpress Plugin (wp-people) SQL Injection (hackturkiye.hackturkiye@...il.com)
WordPress album PHOTO SQL Injection (hackturkiye.hackturkiye@...il.com)
ProjectPier <= 0.80 Cross Site Scripting and Request Forgery (L4teral <l4teral@...il.com>)
joomla SQL Injection (cat)(com_downloads) (hackturkiye.hackturkiye@...il.com)
ATutor <= 1.5.5 Cross Site Scripting (L4teral <l4teral@...il.com>)
[SECURITY] [DSA 1495-2] New nagios-plugins packages fix regression (Moritz Muehlenhoff <jmm@...ian.org>)
(tip=sollinkicerik)SQL Injection Vulnerability (hackturkiye.hackturkiye@...il.com)
Re: etomite xss (ralph@...mite.org)
Re: etomite xss (dean@...mite.org)

February 19 (36 messages)

[DSECRG-08-015] Multiple Security Vulnerabilities in Dokeos 1.8.4 (Digital Security Research Group <research@...c.ru>)
XOOPS Module section SQL Injection(articleid) (hackturkiye.hackturkiye@...il.com)
joomla SQL Injection(com_iigcatalog) (hackturkiye.hackturkiye@...il.com)
joomla SQL Injection(com_formtool) (hackturkiye.hackturkiye@...il.com)
SmarterMail Enterprise 4.3 - malformed mail XSS (jplopezy@...il.com)
joomla SQL Injection(com_detail) (hackturkiye.hackturkiye@...il.com)
XOOPS Module wflinks SQL Injection(cid) (hackturkiye.hackturkiye@...il.com)
XOOPS Module myTopics-print SQL Injection(articleid) (hackturkiye.hackturkiye@...il.com)
joomla SQL Injection(com_team (hackturkiye.hackturkiye@...il.com)
joomla SQL Injection(com_geoboerse) (hackturkiye.hackturkiye@...il.com)
joomla SQL Injection(com_facileforms) (hackturkiye.hackturkiye@...il.com)
PR08-01: Several XSS, a cross-domain redirect and a webroot disclosure on Spyce - Python Server Pages (PSP) (ProCheckUp Research <research@...checkup.com>)
joomla SQL Injection(com_listoffreeads) (hackturkiye.hackturkiye@...il.com)
SYMSA-2008-001: Lyris ListManager - Multiple Vulnerabilities (research@...antec.com)
joomla SQL Injection(com_genealogy) (hackturkiye.hackturkiye@...il.com)
WoltLab Burning Board 3.0.3 PL1 SQL-Injection Vulnerability (nbbn@....net)
PR06-12: XSS on BEA Plumtree Foundation and AquaLogic Interaction portals (ProCheckUp Research <research@...checkup.com>)
joomla SQL Injection(com_foevpartners) (hackturkiye.hackturkiye@...il.com)
XOOPS Module vacatures SQL Injection (hackturkiye.hackturkiye@...il.com)
[DSECRG-08-016] Jinzora 2.7.5 Multiple XSS (Digital Security Research Group <research@...c.ru>)
XOOPS Module badliege SQL Injection (hackturkiye.hackturkiye@...il.com)
XOOPS Module events SQL Injection (hackturkiye.hackturkiye@...il.com)
XOOPS Module seminars SQL Injection (hackturkiye.hackturkiye@...il.com)
joomla SQL Injection(com_magazine) (hackturkiye.hackturkiye@...il.com)
[SECURITY] [DSA 1498-1] New libimager-perl packages fix arbitrary code execution (Steve Kemp <skx@...ian.org>)
Re: CSA-L03: Linux kernel vmsplice unchecked user-pointer dereference (si0uxsecurity@...mail.com)
PHP-Nuke Module Web_Links SQL Injection(cid) (hackturkiye.hackturkiye@...il.com)
XOOPS Module classifieds SQL Injection(cid) (hackturkiye.hackturkiye@...il.com)
XOOPS Module wflinks SQL Injection(cid) (hackturkiye.hackturkiye@...il.com)
XOOPS Module eEmpregos SQL Injection(cid) (hackturkiye.hackturkiye@...il.com)
[ MDVSA-2007:047 ] - Updated Thunderbird packages fix multiple vulnerabilities (security@...driva.com)
[SECURITY] [DSA 1499-1] New pcre3 packages fix arbitrary code execution (Florian Weimer <fw@...eb.enyo.de>)
NULL pointer crash in freeSSHd 1.20 (Luigi Auriemma <aluigi@...istici.org>)
Multiple buffer-overflow in NowSMS v2007.06.27 (Luigi Auriemma <aluigi@...istici.org>)
Two heap overflow in Foxit WAC Server 2.0 Build 3503 (Luigi Auriemma <aluigi@...istici.org>)
Access violation and limited informations disclosure in webcamXP 3.72.440.0 (Luigi Auriemma <aluigi@...istici.org>)

February 20 (7 messages)

Xoops-2.0.16 Remote File Inclusion (f10@...f10.com)
[security bulletin] HPSBTU02311 SSRT080001 rev.1 - HP Tru64 UNIX running Perl, Remote Execution of Arbitrary Code (security-alert@...com)
Web Hacking Incidents Database Update for Feb 20th (Ofer Shezaf <ofer@...zaf.com>)
Re: XOOPS Module wflinks SQL Injection(cid) (packet@...ketstormsecurity.org)
Advisory SE-2008-01: PunBB Blind Password Recovery Vulnerability (Stefan Esser <stefan.esser@...tioneins.de>)
iDefense Security Advisory 02.19.08: EMC RepliStor Multiple Heap Overflow Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)
Heap overflow in Sybase MobiLink 10.0.1.3629 (Luigi Auriemma <aluigi@...istici.org>)

February 21 (37 messages)

Re: iDefense Security Advisory 02.19.08: EMC RepliStor Multiple Heap Overflow Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)
ZDI-08-007: Symantec VERITAS Storage Foundation Administrator Service Heap Overflow Vulnerability (zdi-disclosures@...m.com)
joomla SQL Injection(com_referenzen) (hackturkiye.hackturkiye@...il.com)
[USN-579-1] Qt vulnerability (Jamie Strandboge <jamie@...onical.com>)
[security bulletin] HPSBST02314 SSRT080016 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-003 to MS08-013 (security-alert@...com)
[ MDVSA-2008:046-1 ] - Updated xine-lib package fixes arbitrary code execution vulnerability (security@...driva.com)
aeries browser interface(ABI) 3.8.2.8 XSS (admin@...alank.com)
joomla SQL Injection(com_asortyment)katid (hackturkiye.hackturkiye@...il.com)
aeries browser interface(ABI) 3.7.2.2 Remote SQL Injection (admin@...alank.com)
ZyXEL Gateways Vulnerability Research: http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf (ProCheckUp Research <research@...checkup.com>)
iDefense Security Advisory 02.20.08: Symantec Veritas Storage Foundation Scheduler Service DoS Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
PHP-Nuke Module Classifieds SQL Injection(Details) (hackturkiye.hackturkiye@...il.com)
[USN-580-1] libcdio vulnerability (Jamie Strandboge <jamie@...onical.com>)
[USN-579-1] Qt vulnerability (Jamie Strandboge <jamie@...onical.com>)
[security bulletin] HPSBST02314 SSRT080016 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-003 to MS08-013 (security-alert@...com)
joomla SQL Injection(com_joomlavvz) (hackturkiye.hackturkiye@...il.com)
CFP: Workshop on Open Source Software for Computer and Network Forensics (Stefano Zanero <zanero@...t.polimi.it>)
PHP-Nuke Module BenchmarkNewsInjection(sid) (hackturkiye.hackturkiye@...il.com)
joomla SQL Injection(com_idvnews) (hackturkiye.hackturkiye@...il.com)
CFP: Workshop on Open Source Software for Computer and Network Forensics (Stefano Zanero <zanero@...t.polimi.it>)
XOOPS Module tinyevent-print SQL Injection(id) (hackturkiye.hackturkiye@...il.com)
PHP-Nuke Siir SQL Injection(id) (hackturkiye.hackturkiye@...il.com)
SQL-injection, XSS in OSSIM (Open Source Security Information Management) (marcin.kopec@...mail.com)
Announce: RFIDIOt credit card sub-module: ChAP.py (Adam Laurie <adam@...roup.co.uk>)
PHP-Nuke genaral print SQL Injection(id) (hackturkiye.hackturkiye@...il.com)
PHP-Nuke Module Dossiers Injection(did) (hackturkiye.hackturkiye@...il.com)
joomla SQL Injection(com_mygallery) (hackturkiye.hackturkiye@...il.com)
PHP-Nuke Module Downloads SQL Injection(sid) (hackturkiye.hackturkiye@...il.com)
joomla SQL Injection(com_most)secid (hackturkiye.hackturkiye@...il.com)
VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates (VMware Security team <security@...are.com>)
aeries browser interface(ABI) 3.8.2.8 Remote SQL Injection (admin@...alank.com)
XOOPS Module prayerlist SQL Injection(cid) (hackturkiye.hackturkiye@...il.com)
joomla SQL Injection(com_asortyment)katid (hackturkiye.hackturkiye@...il.com)
joomla SQL Injection(com_cms) (hackturkiye.hackturkiye@...il.com)
[SECURITY] [DSA 1500-1] New splitvt packages fix privilege escalation (Steve Kemp <skx@...ian.org>)
Academic Computer Security Conference ("Jon R. Kibler" <Jon.Kibler@...t.com>)
[SECURITY] [DSA 1501-1] New dspam packages fix information disclosure (thijs@...ian.org (Thijs Kinkhorst))

February 22 (15 messages)

[ GLSA 200802-09 ] ClamAV: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)
Cold Boot Attacks on Disk Encryption (Jacob Appelbaum <jacob@...elbaum.net>)
CanSecWest 2008 Mar 26-28 (Dragos Ruiu <dr@....net>)
EDLGraph 1.0 (subere@...on.org)
[SECURITY] [DSA 1502-1] New wordpress packages fix multiple vulnerabilities (Noah Meyerhans <noahm@...ian.org>)
Certification for Web Application Security Professionals ("Anurag Agarwal" <anurag.agarwal@...oo.com>)
[USN-581-1] PCRE vulnerability (Kees Cook <kees@...ntu.com>)
IBM Quickr 8 Calendar Xss Injection (Bypass Quickr 8.0 Xss Filter) (goldshlager19@...il.com)
Re: SQL-injection, XSS in OSSIM (Open Source Security Information Management) (Dominique Karg <dk@...im.net>)
Tool release: extract Windows credentials from registry hives (Brendan Dolan-Gavitt <bdolangavitt@...leyan.edu>)
[security bulletin] HPSBGN02298 SSRT071502 rev.3 - HP Notebook PC Quick Launch Button (QLB) Software Running on Windows, Remote Execution … (security-alert@...com)
[SECURITY] [DSA 1503-1] New Linux kernel 2.4.27 packages fix several issues (dann frazier <dannf@...ian.org>)
[SECURITY] [DSA 1504-1] New Linux kernel 2.6.8 packages fix several issues (dann frazier <dannf@...ian.org>)
Multiple vulnerabilities in Double-Take 5.0.0.2865 (Luigi Auriemma <aluigi@...istici.org>)
[SECURITY] [DSA 1505-1] New alsa-driver packages fix kernel memory leak (dann frazier <dannf@...ian.org>)

February 23 (13 messages)

[Aria-Security.Net] BestWebApp Dating System SQL Injection (no-reply@...a-Security.Net)
joomla com_product SQL Injection(catid) (hackturkiye.hackturkiye@...il.com)
joomla com_hello_world SQL Injection(id) (hackturkiye.hackturkiye@...il.com)
[ MDVSA-2008:048 ] - Updated Firefox packages fix multiple vulnerabilities (security@...driva.com)
php nuke Sections SQL Injection(print) (hackturkiye.hackturkiye@...il.com)
php-nuke Recipes SQL Injection(recipeid) (hackturkiye.hackturkiye@...il.com)
php nuke gallery SQL Injection(aid) (hackturkiye.hackturkiye@...il.com)
php-nuke Kuran SQL Injection(surano) (hackturkiye.hackturkiye@...il.com)
aura cms lihatberita SQL Injection(id) (hackturkiye.hackturkiye@...il.com)
CastleCops Six Years Old (Paul Laudanski <paul@...tlecops.com>)
php-nuke Quran SQL Injection(surano) (hackturkiye.hackturkiye@...il.com)
CastleCops Six Years Old (Paul Laudanski <paul@...tlecops.com>)
phpechocms v 2.0 rc3 RFI (beenudel1986@...il.com)

February 25 (25 messages)

[ MDVSA-2008:049 ] - Updated nss_ldap package fixes race condition allowing user data theft (security@...driva.com)
Joomla com_stat "id" Remote SQL Injection (no-reply@...a-Security.Net)
joomla com_garyscookbook SQL Injection(id) (hackturkiye.hackturkiye@...il.com)
joomla com_wines SQL Injection(id) (hackturkiye.hackturkiye@...il.com)
Re: Re: SQL-injection, XSS in OSSIM (Open Source Security Information Management) (dcid@...ec.net)
joomla com_simpleshop SQL Injection(section) # (hackturkiye.hackturkiye@...il.com)
Joomla Com_blog "pid" Remote SQL Injection (no-reply@...a-Security.Net)
Joomla com_inter "id" Remote SQL Injection (no-reply@...a-Security.Net)
Softbiz jokes and funny pictures (index.php) sql injection ("Hamza Almersoumi" <xxmizoxx@...il.com>)
Pigyard Art Gallery Multiple SQL Injection (No-Reply@...a-Security.net)
Alkacon OpenCms tree_files.jsp resource XSS (nnposter@...closed.not)
S21SEC-040-en: Infinite invalid authentication attempts possible in BEA WebLogic Server ("S21sec labs" <s21seclabs@...sec.com>)
[SECURITY] [DSA 1507-1] New turba2 packages fix permission testing (Steve Kemp <skx@...ian.org>)
[SECURITY] [DSA 1506-1] New iceape packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
Packeteer Products File Listing XSS (nnposter@...closed.not)
[ GLSA 200802-10 ] Python: PCRE Integer overflow (Robert Buchholz <rbu@...too.org>)
Php Nuke "Sell" module SQL Injection ("cid") (no-reply@...a-security.net)
CORE-2007-0930 Path Traversal vulnerability in VMware's shared folders implementation (Core Security Technologies Advisories <advisories@...esecurity.com>)
Aria-Security.Net: Joomla Com_publication "pid" Remote SQL Injection (No-Reply@...a-Security.Net)
Wordpress Plugin Sniplets 1.1.2 Multiple Vulnerabilities (nbbn@....net)
Powered by Pagetool Ver (1.04-05-06-07) (turkish-warrorr@...mail.com)
[SECURITY] [DSA 1508-1] New diatheke packages fix arbirary shell command execution (thijs@...ian.org (Thijs Kinkhorst))
Format string and buffer-overflow in SurgeMail 38k4 (Luigi Auriemma <aluigi@...istici.org>)
Re: Powered by Pagetool Ver (1.04-05-06-07) (packet@...ketstormsecurity.org)
NULL pointer in SurgeFTP 2.3a2 (Luigi Auriemma <aluigi@...istici.org>)

February 26 (11 messages)

Nortel IP Phone DoS (sipherr@...il.com)
php-nuke sql injection reportaj [secid] (lovebug@...mail.it)
[SECURITY] [DSA 1509-1] New koffice packages fix multiple vulnerabilities (Noah Meyerhans <noahm@...ian.org>)
Bypassing OfficeScan Trend Micro AV (Danux <danuxx@...il.com>)
SandMan 1.0.080226 is out! ("Matthieu Suiche" <msuiche@...il.com>)
Re: Nortel IP Phone DoS (amarkov@...pshield.com)
Re: Re: Nortel IP Phone DoS (sipherr@...il.com)
[ MDVSA-2008:050 ] - Updated cups packages fix multiple vulnerabilities (security@...driva.com)
[ MDVSA-2008:051 ] - Updated cups packages fix vulnerabilities (security@...driva.com)
[ GLSA 200802-12 ] xine-lib: User-assisted execution of arbitrary code (Robert Buchholz <rbu@...too.org>)
[ GLSA 200802-11 ] Asterisk: Multiple vulnerabilities (Pierre-Yves Rofes <py@...too.org>)

February 27 (13 messages)

iDefense Security Advisory 02.26.08: Symantec Scan Engine 5.1.2 RAR File Denial of Service Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 02.26.08: Symantec Scan Engine 5.1.2 RAR File Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
[SECURITY] [DSA 1510-1] New ghostscript packages fix arbitrary code execution (thijs@...ian.org (Thijs Kinkhorst))
iDefense Security Advisory 02.26.08: Mozilla Thunderbird MIME External-Body Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
CFP - ekoparty 4th edition (ekoparty <no-reply@...party.com.ar>)
[SECURITY] [DSA 1510-1] New ghostscript packages fix arbitrary code execution (thijs@...ian.org (Thijs Kinkhorst))
Re: Mambo 4.6.3 Path Disclosure, XSS , XSRF, DOS (jamboomla@...il.com)
[SECURITY] [DSA 1510-1] New ghostscript packages fix arbitrary code execution (thijs@...ian.org (Thijs Kinkhorst))
Buffer-overflow in the passwords handling of Trend Micro OfficeScan 8.0 and possibly other products (Luigi Auriemma <aluigi@...istici.org>)
[ MDVSA-2008:052 ] - Updated cacti packages fix multiple vulnerabilities (security@...driva.com)
CORE-2008-0130: VLC media player chunk context validation error (Core Security Technologies Advisories <advisories@...esecurity.com>)
[ MDVSA-2008:053 ] - Updated pcre packages fix vulnerability (security@...driva.com)
[ MDVSA-2008:053 ] - Updated pcre packages fix vulnerability (security@...driva.com)

February 28 (16 messages)

security and aluminum foil hats (Pete Herzog <lists@...com.org>)
Urulu 2.1 Blind SQL Injection Vulnerability (CVE-2008-0385) (Daniel Roethlisberger <daniel.roethlisberger@...c.ch>)
123 Flash Chat Module for phpBB (f10@...f10.com)
PHP-Nuke My_eGallery "gid" Remote SQL Injection (no-reply@...a-security.net)
PR07-42: Webroot disclosure on Juniper Networks Secure Access 2000 (ProCheckUp Research <research@...checkup.com>)
123 Flash Chat Module for phpBB (f10@...f10.com)
PR07-41: XSS on Juniper Networks Secure Access 2000 (ProCheckUp Research <research@...checkup.com>)
Re: 123 Flash Chat Module for phpBB (f10@...f10.com)
RE: Buffer-overflow in the passwords handling of Trend Micro OfficeScan 8.0 and possibly other products (<Raymond_Villafania@...port.trendmicro.com>)
XSS on XRMS- open source CRM (vijayv@...central.com)
rPSA-2008-0084-1 lighttpd (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2008-0086-1 pcre (rPath Update Announcements <announce-noreply@...th.com>)
Loginwindow.app and Mac OS X (Jacob Appelbaum <jacob@...elbaum.net>)
rPSA-2008-0088-1 am-utils (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2008-0082-1 espgs (rPath Update Announcements <announce-noreply@...th.com>)
[ MDVSA-2008:054 ] - Updated dbus packages fix vulnerability (security@...driva.com)

February 29 (16 messages)

Beehive/SendFile.NET - Secure File Transfer Appliance Hardcoded Credentials (brad.antoniewicz@...ndstone.com)
Re: Loginwindow.app and Mac OS X ("oc photon" <ocphoton@...il.com>)
Re: Loginwindow.app and Mac OS X (Jacob Appelbaum <jacob@...elbaum.net>)
PHPMyTourney Remote file include Vulnerability (security@...or.net)
Ghostscript buffer overflow ("Chris Evans" <scarybeasts@...il.com>)
Re: Loginwindow.app and Mac OS X (Matt Johnston <matt@....asn.au>)
Centreon <= 1.4.2.3 (index.php) Remote File Disclosure (sys-project@...mail.com)
[ MDVSA-2008:055 ] - Updated ghostscript packages fix arbitrary code execution vulnerability (security@...driva.com)
netOffice Dwins 1.3 Remote code execution. (db@...security.org)
rPSA-2008-0091-1 cups (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2008-0092-1 tshark wireshark (rPath Update Announcements <announce-noreply@...th.com>)
Release: Pass-The-Hash toolkit v1.3 ("Hernan Ochoa" <hernan@...il.com>)
rPSA-2008-0093-1 thunderbird (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2008-0094-1 kernel (rPath Update Announcements <announce-noreply@...th.com>)
[USN-582-1] Thunderbird vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
[ MDVSA-2008:056 ] - Updated gnumeric packages fix vulnerability (security@...driva.com)

482 messages

Powered by blists - more mailing lists