bugtraq mailing list - 2011/06

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2011/06

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 19	² 7	³ 11	⁴	⁵
⁶ 12	⁷ 13	⁸ 14	⁹ 3	¹⁰ 10	¹¹	¹²
¹³ 8	¹⁴ 21	¹⁵ 23	¹⁶ 3	¹⁷ 2	¹⁸ 18	¹⁹ 2
²⁰ 2	²¹ 4	²² 1	²³ 2	²⁴ 1	²⁵ 1	²⁶ 1
²⁷ 4	²⁸ 5	²⁹ 6	³⁰ 7

Messages by day:

June 1 (19 messages)

ZDI-11-169: IBM Tivoli Endpoint lcfd.exe opts Argument Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[SECURITY] [DSA 2248-1] ejabberd security update (Nico Golde <nion@...ian.org>)
IPv6 RA-Guard evasion (and neighbor discovery monitoring) vulnerabilities (Fernando Gont <fernando.gont@...il.com>)
[SECURITY] [DSA 2249-1] jabberd14 security update (Nico Golde <nion@...ian.org>)
[SECURITY] [DSA 2250-1] citadel security update (Nico Golde <nion@...ian.org>)
CodeMeter WebAdmin Cross-site Scripting (XSS) Vulnerability (robkraus@...utionary.com)
Post Revolution 0.8.0c Multiple Remote Vulnerabilities (Javier Bassi <javierbassi@...il.com>)
Re: Ra-Guard evasion (new Internet-Drafts) (Marc Heuse <mh@...sec.de>)
HTB22999: Multiple SQL Injections in A Really Simple Chat (ARSC) (advisory@...ridge.ch)
HTB22997: XSS in A Really Simple Chat (ARSC) (advisory@...ridge.ch)
[ MDVSA-2011:104 ] bind (security@...driva.com)
[ MDVSA-2011:105 ] wireshark (security@...driva.com)
Cisco Security Advisory: Default Credentials Vulnerability in Cisco Network Registrar (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified IP Phones 7900 Series (Cisco Systems Product Security Incident Response Team <psirt@...co.com…)
Cisco Security Advisory: Default Credentials for root Account on the Cisco Media Experience Engine 5600 (Cisco Systems Product Security Incident Response Team <…)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client (Cisco Systems Product Security Incident Response Team <psirt@...co…)
Cross-Site Scripting vulnerability in Icinga (sschurtz@...nline.de)
Cross-Site Scripting vulnerability in Nagios (sschurtz@...nline.de)
Re: Ra-Guard evasion (new Internet-Drafts) (Fernando Gont <fernando@...t.com.ar>)

June 2 (7 messages)

International PHP Conference - Call for Papers ("Carsten Eilers" <ceilers-lists@....de>)
[SECURITY] [DSA 2251-1] subversion security update (Thijs Kinkhorst <thijs@...ian.org>)
COM Server-Based Binary Planting Proof Of Concept ("ACROS Security Lists" <lists@...os.si>)
Re: [Full-disclosure] COM Server-Based Binary Planting Proof Of Concept (Dan Kaminsky <dan@...para.com>)
RE: [Full-disclosure] COM Server-Based Binary Planting Proof OfConcept ("ACROS Security Lists" <lists@...os.si>)
RE: [Full-disclosure] COM Server-Based Binary Planting Proof OfConcept ("Thor (Hammer of God)" <thor@...merofgod.com>)
RE: [Full-disclosure] COM Server-Based Binary Planting ProofOfConcept ("Mitja Kolsek" <mitja.kolsek@...os.si>)

June 3 (11 messages)

RE: [Full-disclosure] COM Server-Based Binary Planting ProofOfConcept ("Mitja Kolsek" <mitja.kolsek@...os.si>)
AST-2011-007 (Jonathan Rose <security@...ium.com>)
Re: [Full-disclosure] COM Server-Based Binary Planting ProofOfConcept (Dan Kaminsky <dan@...para.com>)
[CVE-ID REQUEST] vBulletin - Multiple Open Redirects (Robert Gilbert <rgilbert@...ock.com>)
[SECURITY] [DSA 2252-1] dovecot security update (Moritz Muehlenhoff <jmm@...ian.org>)
Re: [Full-disclosure] COM Server-Based Binary Planting ProofOfConcept (Mitja Kolsek <mitja.kolsek@...os.si>)
iDefense Security Advisory 06.01.11: Cisco AnyConnect VPN Client Arbitrary Program Execution Vulnerability (labs-no-reply <labs-no-reply@...p.vrsn.com>)
CFP: IEEE SocialCom11 /PASSAT11 (justinzzhan@...il.com)
WebSVN 2.3.2 Unproper Metacharacters Escaping exec() Remote Commands Injection Vulnerability (nospam@...il.it)
[security bulletin] HPSBMA02652 SSRT100432 rev.4 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Informa… (security-alert@...com)
ZDI-11-171: Sybase OneBridge Mobile Data Suite Format String Remore Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)

June 6 (12 messages)

fetchmail security announcement fetchmail-SA-2011-01 (CVE-2011-1947) (ma+bt@...e-technik.uni-dortmund.de)
iDefense Security Advisory 05.03.11: Tom Sawyer GET Extension Factory COM Object Instantiation Memory Corruption Vulner… (labs-no-reply <labs-no-reply@...p.vrsn.…)
VMware Tools Multiple Vulnerabilities (VSR Advisories <advisories@...curity.com>)
[SECURITY] [DSA 2253-1] fontforge security update (Thijs Kinkhorst <thijs@...ian.org>)
AppSec USA 2011 CFP Reminder, CTF Pre-Conference Challenge #2 (adam.baso@...sp.org)
[ MDVSA-2011:106 ] subversion (security@...driva.com)
[SECURITY] [DSA 2254-1] oprofile security update (Luciano Bello <luciano@...ian.org>)
PopScript Multiple Vulnerabilities (root@...y.com)
Squiz Matrix - Cross-Site Scripting Vulnerability (Patrick Webster <patrick@...security.com.au>)
ESA-2011-009 (revised): RSA, The Security Division of EMC, announces new fix for potential security vulnerability in RSA(r) Access Ma… (<Security_Alert@....com>)
[SECURITY] [DSA 2255-1] libxml2 security update (Thijs Kinkhorst <thijs@...ian.org>)
Java HotSpot Cryptographic Provider signature verification vulnerability (Zacheusz Siedlecki <Zacheusz.Siedlecki@...il.com>)

June 7 (13 messages)

ZDI-11-172: Novell iPrint nipplib.dll uri Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-173: Novell iPrint nipplib.dll profile-time Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-174: Novell iPrint nipplib.dll profile-name Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-175: Novell iPrint nipplib.dll file-date-time Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-176: Novell iPrint nipplib.dll driver-version Remote Code Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-177: Novell iPrint nipplib.dll core-package Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-178: Novell iPrint nipplib.dll client-file-name Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-179: Novell iPrint nipplib.dll iprint-client-config-info Remote Code Execution Vulnerability ("Fly, Kate" <kate.kate.fly@...com>)
ZDI-11-180: Novell iPrint op-printer-list-all-jobs cookie Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-181: Novell iPrint op-printer-list-all-jobs url Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Multiple Cross-Site Scripting vulnerabilities in BLOG:CMS (sschurtz@...nline.de)
[ MDVSA-2011:107 ] fetchmail (security@...driva.com)
OWASP Zed Attack Proxy version 1.3.0 (psiinon <psiinon@...il.com>)

June 8 (14 messages)

[HITB-Announce] HITB2011AMS Conference Materials & Photos (Hafez Kamal <aphesz@...kinthebox.org>)
Multiple vulnerabilities in several IP camera products (roberto.paleari@...ze.net)
ZDI-11-182: Oracle Java IE Browser Plugin Corrupted Window Procedure Hook Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.co…)
ZDI-11-183: Oracle Java ICC Profile MultiLanguage 'mluc' Tag Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-184: Oracle Java ICC Profile Sequence Description 'pseq' Tag Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.…)
ZDI-11-185: Oracle Java ICC Profile 'bfd ' Tag Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-186: Oracle Java ICC Profile Multi-Language 'curv' Tag Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-187: Oracle Java ICC Profile clrt Tag Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-188: Oracle Java ICC Profile ncl2 Count Tag Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-189: Oracle Java ICC Profile ncl2 DevCoords Tag Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-190: Oracle Java ICC Profile 'crdi' Tag Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-191: Oracle Java ICC Screening Tag Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-192: Oracle Java Web Start Command Argument Injection Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[security bulletin] HPSBMA02674 SSRT100487 rev.1 - HP Service Manager and HP Service Center, Unauthorized Remote Access, Unsecured Local A… (security-alert@...com)

June 9 (3 messages)

[security bulletin] HPSBMA02631 SSRT100324 rev.1 - HP OpenView Storage Data Protector, Remote Execution of Arbitrary Code (security-alert@...com)
[Announcement] ClubHACK Magazine Issue 17-June 2011 released (abhijeet@...bhack.com)
PDFill Insecure Library Loading (robkraus@...utionary.com)

June 10 (10 messages)

[SECURITY] [DSA 2256-1] tiff security update (Thijs Kinkhorst <thijs@...ian.org>)
IEEE SocialCom/PASSAT Call For Paper Deadline: June 15, 2011 (justinzzhan@...il.com)
VUPEN Security Research - Oracle Java ICC Profile "ncl2" Tag Integer Overflow Code Execution Vulnerability ("VUPEN Security Research" <advisories@...en.com>)
VUPEN Security Research - Oracle Java ICC Profile "pseq" Tag Integer Overflow Code Execution Vulnerability ("VUPEN Security Research" <advisories@...en.com>)
VUPEN Security Research - Oracle Java ICC Profile "bfd" Tag Integer Overflow Code Execution Vulnerability ("VUPEN Security Research" <advisories@...en.com>)
VUPEN Security Research - Oracle Java ICC Profile "clrt" Tag Integer Overflow Code Execution Vulnerability ("VUPEN Security Research" <advisories@...en.com>)
VUPEN Security Research - Oracle Java ICC Profile "scrn" Tag Integer Overflow Code Execution Vulnerability ("VUPEN Security Research" <advisories@...en.com>)
VUPEN Security Research - Oracle Java ICC Profile "mluc" Tag Integer Overflow Code Execution Vulnerability ("VUPEN Security Research" <advisories@...en.com>)
Call for Participation: DIMVA 2011 (Konrad Rieck <konrad.rieck@...berlin.de>)
[SECURITY] [DSA 2257-1] vlc security update (Nico Golde <nion@...ian.org>)

June 13 (8 messages)

[ MDVSA-2011:109 ] webmin (security@...driva.com)
phion netfence / Barracuda NG Firewall: Remote Command Execution with root Privileges (mailinglists <ml@...key-cert.at>)
Javascript Injection in Microsoft Lync 4.0.7577.0 (bede@...fus.net)
[SECURITY] [DSA 2258-1] kolab-cyrus-imapd security update (Nico Golde <nico@...lde.de>)
[SECURITY] [DSA 2259-1] fex security update (Nico Golde <nico@...lde.de>)
[HITB-Announce] HITB eZine Issue #006 Released! (Hafez Kamal <aphesz@...kinthebox.org>)
Re: HTB22943: XSS in Dalbum (Henri Salo <henri@...v.fi>)
[ MDVSA-2011:108 ] xerces-j2 (security@...driva.com)

June 14 (21 messages)

DC4420 - London DEFCON - June meet - Tuesday 21st June 2011 (Major Malfunction <majormal@...ate-radio.org>)
Last Day for AppSec USA 2011 CFP! (adam.baso@...sp.org)
[Annoucement] ClubHack Magazine - Call for Articles (abhijeet@...bhack.com)
[security bulletin] HPSBMA02627 SSRT090246 rev.2 - HP OpenView Performance Insight Server, Remote Execution of Arbitrary Code (security-alert@...com)
ZDI-11-193: Microsoft Internet Explorer DOM Modification Race Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-194: Microsoft Internet Explorer layout-grid-char style Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-195: Microsoft Internet Explorer selection.empty Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-196: Microsoft Internet Explorer HTTP 302 Redirect Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-197: Microsoft Internet Explorer vgx.dll imagedata Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-198: (Pwn2Own) Microsoft Internet Explorer Uninitialized Variable Information Leak Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-199: Oracle Java Soundbank Decompression Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-200: Adobe Shockwave AudioMixer Structure Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-201: Adobe Shockwave Cursor Structure Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-202: Adobe Shockwave rcsL String Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-203: Adobe Shockwave xtcL Chunk Parsing Integer Overflow Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-204: Adobe Shockwave TextXtra Text Element Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-205: Adobe Shockwave Missing Lctx Chunk Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-206: Adobe Shockwave GIF Decompression Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
CORE-2011-0203 - MS HyperV Persistent DoS Vulnerability (CORE Security Technologies Advisories <advisories@...esecurity.com>)
ZDI-11-207: Adobe Shockwave tSAC Chunk String Termination Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-208: Adobe Shockwave rcsL Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)

June 15 (23 messages)

ZDI-11-209: Adobe Shockwave rcsL Substructure Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-210: Adobe Shockwave rcsL Chunk Parsing Misallocation Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-211: Adobe Shockwave Shockwave 3d Asset.x32 DEMX Chunk 0xFFFFFF49 Field Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoi…)
ZDI-11-212: Adobe Shockwave KEY* Chunk Invalid Size Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-213: Adobe Shockwave rcsL Trusted Offset Chunk Processing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-214: Adobe Shockwave CASt Chunk Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-215: Adobe Shockwave DEMX Chunk Multiple Field Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-216: Adobe Shockwave rcsL Chunk 16-bit Field Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-217: Adobe Shockwave Font Structure Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-218: Adobe Acrobat Reader tesselate.x3d Multimedia Playing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-219: Adobe Acrobat Reader 3difr.x3d Multimedia Playing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
NSFOCUS SA2011-01 : Microsoft Internet Explorer Link Property Processing Memory Corruption Vulnerability (NSFOCUS Security Team <security@...ocus.com>)
Re: XSS Vulnerability in Redmine 1.0.1 to 1.1.1 (Henri Salo <henri@...v.fi>)
ZDI-11-220: Adobe Shockwave Director File rcsL Chunk Multiple Opcode Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint…)
ZDI-11-221: Adobe Shockwave Shockwave 3d Asset.x32 DEMX 0xFFFFFF45 Field Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingp…)
ZDI-11-222: Adobe Shockwave Shockwave 3d Asset.x32 DEMX Chunk Substructure Count Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingp…)
TPTI-11-06: Oracle Java ICC Profile rcs2 Tag Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
TPTI-11-07: Adobe Shockwave iml32.dll CSWV Chunk Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
TPTI-11-08: Adobe Shockwave iml32.dll DEMX Chunk GIF Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
TPTI-11-09: Adobe Shockwave iml32.dll CSWV Chunk Byte Array Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
TPTI-11-11: Adobe Shockwave Lnam Chunk Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
TPTI-11-10: Adobe Shockwave dirapi.dll rcsL Chunk Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
CORE-2010-1021: IBM WebSphere Application Server Cross-Site Request Forgery (CORE Security Technologies Advisories <advisories@...esecurity.com>)

June 16 (3 messages)

HTB23012: Gogago YouTube Video Converter ActiveX Control "Download()" Buffer Overflow Vulnerability (advisory@...ridge.ch)
[BGA - SignalSEC Advisory]:Adobe Shockwave Player Remote Code Execution (signaladvisory@...il.com)
Oracle HTTP Server XSS Header Injection (Yasser ABOUKIR <contact@...oukir.com>)

June 17 (2 messages)

Essential PIM 4.22: MANY vulnerabilities in 3rd party libraries ("Stefan Kanthak" <stefan.kanthak@...go.de>)
[ MDVSA-2011:110 ] gimp (security@...driva.com)

June 18 (18 messages)

[security bulletin] HPSBUX02657 SSRT100460 rev.1 - CIFS Server (Samba), Remote Execution of Arbitrary Code, Denial of Service (DoS) (security-alert@...com)
iDefense Security Advisory 06.14.11: Adobe Shockwave Lingo Script Opcodes Integer Signedness Vulnerability (labs-no-reply <labs-no-reply@...p.vrsn.com>)
iDefense Security Advisory 06.14.11: Adobe Shockwave Font Asset Heap Overflow Vulnerability (labs-no-reply <labs-no-reply@...p.vrsn.com>)
VUPEN Security Research - Microsoft Windows OLE Automation Integer Underflow Vulnerability (MS11-038) ("VUPEN Security Research" <advisories@...en.com>)
JFreeChart - Path Disclosure vulnerability (Patrick Webster <patrick@...security.com.au>)
myBloggie 2.1.6 SQL-Injection, Advanced INSERT INTO Injection technique (info@...inverton.de)
[SECURITY] [DSA 2263-1] movabletype-opensource security update (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 2261-1] redmine security update (Thijs Kinkhorst <thijs@...ian.org>)
HTB23008: Multiple XSS & CSRF (Cross-Site Request Forgery) in miniblog (advisory@...ridge.ch)
iDefense Security Advisory 06.14.11: Adobe Shockwave Cursor Asset tSAC Chunk Integer Overflow Vulnerability (labs-no-reply <labs-no-reply@...p.vrsn.com>)
HTB23010: Multiple XSS & Local File Inclusion in Free Simple CMS (advisory@...ridge.ch)
HTB23004: Multiple Vulnerabilities in e107 (advisory@...ridge.ch)
EQDKP plus Cross Site Scripting and Bypass file extension ("iPower N/A" <vb.win32@...il.com>)
Re: WOOT '11 Call for Papers (reminder) (Michal Zalewski <lcamtuf@...edump.cx>)
iDefense Security Advisory 06.14.11: Adobe Shockwave 3D Asset DEMX Integer Overflow Vulnerability (labs-no-reply <labs-no-reply@...p.vrsn.com>)
[SECURITY] [DSA 2259-1] rails security update (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 2262-1] moodle security update (Moritz Muehlenhoff <jmm@...ian.org>)
HTB23005: Multiple XSS in N-13 News (advisory@...ridge.ch)

June 19 (2 messages)

Perfect PDF products distributed with vulnerable MSVC++ libraries ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Re: CORE-2010-1021: IBM WebSphere Application Server Cross-Site Request Forgery (Tyler Borland <tborland1@...il.com>)

June 20 (2 messages)

[SECURITY] [DSA 2264-1] linux-2.6 security update (dann frazier <dannf@...ian.org>)
Re: ZDI-11-208: Adobe Shockwave rcsL Parsing Remote Code Execution Vulnerability ("Mikhail A. Utin" <mutin@...monwealthcare.org>)

June 21 (4 messages)

[SECURITY] [DSA 2265-1] perl security update (Florian Weimer <fw@...eb.enyo.de>)
ZDI-11-223: Mozilla Firefox SVGPathSegList.replaceItem Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-224: Mozilla Firefox SVGPointList.appendItem Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-225: Mozilla Firefox nsXULCommandDispatcher Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)

June 22 (1 message)

Re: Perfect PDF products distributed with vulnerable MSVC++ libraries (Brad Hards <bradh@...gmouth.net>)

June 23 (2 messages)

HTB23017: XSS in FanUpdate (advisory@...ridge.ch)
[PRE-SA-2011-05] Buffer overflow in tftp-hpa daemon (Timo Warns <warns@...-sense.de>)

June 24 (1 message)

Re: Perfect PDF products distributed with vulnerable MSVC++ libraries ("Stefan Kanthak" <stefan.kanthak@...go.de>)

June 25 (1 message)

HTB23015: Easewe FTP ActiveX Control Multiple Insecure Methods (advisory@...ridge.ch)

June 26 (1 message)

TWSL2011-006: IBM Web Application Firewall Bypass (Trustwave Advisories <trustwaveadvisories@...stwave.com>)

June 27 (4 messages)

HTB23016: Kofax e-Transactions Sender Sendbox ActiveX Control Insecure Method (advisory@...ridge.ch)
Mambo CMS 4.6.x (4.6.5) | Multiple Cross Site Scripting Vulnerabilities (YGN Ethical Hacker Group <lists@...g.net>)
[SECURITY] CVE-2011-2204 - Apache Tomcat information disclosure (Mark Thomas <markt@...che.org>)
[SECURITY] CVE-2011-2204 - Apache Tomcat information disclosure (Mark Thomas <markt@...che.org>)

June 28 (5 messages)

ZDI-11-226: Citrix EdgeSight Launcher Service Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-227: Novell File Reporter Engine RECORD Tag Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
2wire password reset module (techhelperjax@...il.com)
Joomla! 1.6.3 and lower | Multiple Cross Site Scripting (XSS) Vulnerabilities (YGN Ethical Hacker Group <lists@...g.net>)
Re: Joomla! 1.6.3 and lower | Multiple Cross Site Scripting (XSS) Vulnerabilities (Christian Sciberras <uuf6429@...il.com>)

June 29 (6 messages)

ZDI-11-231: Apple QuickTime Pict File Matrix Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-230: Apple Quicktime Apple Lossless Audio Codec Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-228: Apple ColorSync ICC Profile ncl2 Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-229: Apple QuickTime RIFF fmt Chunk Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
CORE-2011-0514: Multiple vulnerabilities in HP Data Protector (CORE Security Technologies Advisories <advisories@...esecurity.com>)
CORE-2011-0606: HP Data Protector EXEC_CMD Buffer Overflow Vulnerability (CORE Security Technologies Advisories <advisories@...esecurity.com>)

June 30 (7 messages)

Off-by-one in Sybase Advantage Server 10.0.0.3 (Luigi Auriemma <aluigi@...istici.org>)
[SECURITY] [DSA-2210-2] tiff security update (Luciano Bello <luciano@...ian.org>)
Resolved - NNT Change Tracker - Hard-Coded Encryption Key Originally posted as http://seclists.org/fulldisclosure/2011/May/460 (support@...ws.com)
APPLE-SA-2011-06-28-1 Java for Mac OS X 10.6 Update 5 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2011-06-28-2 Java for Mac OS X 10.5 Update 10 (Apple Product Security <product-security-noreply@...ts.apple.com>)
Breaking the links: Exploiting the linker (Tim Brown <timb@...-dimension.org.uk>)
OpenSSH 3.5p1 Remote Root Exploit for FreeBSD ("HI-TECH ." <isowarez.isowarez.isowarez@...glemail.com>)

200 messages

Powered by blists - more mailing lists