bugtraq mailing list - 2011/08

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2011/08

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹ 7	²	³	⁴ 11	⁵	⁶	⁷
⁸	⁹ 26	¹⁰ 16	¹¹	¹²	¹³	¹⁴
¹⁵ 38	¹⁶ 4	¹⁷ 36	¹⁸ 6	¹⁹ 2	²⁰	²¹
²²	²³	²⁴	²⁵ 29	²⁶ 17	²⁷	²⁸
²⁹ 9	³⁰ 7	³¹ 9

Messages by day:

August 1 (7 messages)

[slackware-security] dhcpcd (SSA:2011-210-02) (Slackware Security Team <security@...ckware.com>)
[slackware-security] samba (SSA:2011-210-03) (Slackware Security Team <security@...ckware.com>)
[slackware-security] libpng (SSA:2011-210-01) (Slackware Security Team <security@...ckware.com>)
cgcraft llc (collections.php?id) Cross Site Scripting Vulnerabilities (ehsan_hp200@...mail.com)
Elgg 1.7.9 <= | Multiple Cross Site Scripting Vulnerabilities (YGN Ethical Hacker Group <lists@...g.net>)
CFP open for ClubHack2011 (Abhijeet Patil <getabhijeetpatil@...il.com>)
NGS00068 Technical Advisory - LibAVCodec AMV Out of Array Write ("Research@...Secure" <research@...secure.com>)

August 4 (11 messages)

Android Browser Cross-Application Scripting (CVE-2011-2357) (Roee Hay <roeeh@...ibm.com>)
Cross Site Scription Vulnerability in vBulletin 4.1.3, 4.1.4 and 4.1.5 (haroon@...e.it)
Multiple XSS in HESK (advisory@...ridge.ch)
ThreeDify Designer ActiveX control Insecure Method (advisory@...ridge.ch)
ThreeDify Designer ActiveX control multiple buffer overflow vulnerabilities (advisory@...ridge.ch)
APPLE-SA-2011-08-03-1 QuickTime 7.7 (Apple Product Security <product-security-noreply@...ts.apple.com>)
XSS in WP e-Commerce (advisory@...ridge.ch)
Re: [Full-disclosure] phpMyAdmin 3.x Conditional Session Manipulation (Henri Salo <henri@...v.fi>)
Community Server - Reflected Cross-Site Scripting - (Advisories PontoSec <advisories@...tosec.com>)
Community Server - Stored Cross-Site Scripting in User's Signature (Advisories PontoSec <advisories@...tosec.com>)
Useless OpenSSH resources exhausion bug via GSSAPI (pi3@...ec.pl)

August 9 (26 messages)

Sophos Antivirus Review (Tavis Ormandy <taviso@...xchg8b.com>)
[SECURITY] [DSA 2289-1] typo3-src security update (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 2290-1] samba security update (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 2291-1] squirrelmail security update (Thijs Kinkhorst <thijs@...ian.org>)
[security bulletin] HPSBPI02698 SSRT100404 rev.1 - HP Easy Printer Care Software Running on Windows, Remote Execution of Arbitrary Code (security-alert@...com)
TPTI-11-13: McAfee SaaS myCIOScn.dll Scan Method Script Injection Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Arte Dude (collections.php?id) (property.php?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
Web Design Sydney (news-item.php?id) (news-item.php?newsid) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
Avant-Garde Technologies (display-section.php?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
Liberating IT (picture.php?gid) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
Re: CA ARCserve D2D r15 GWT RPC Request Auth Bypass / Credentials ("Williams, James K" <James.Williams@...com>)
Amigot Corp (story.php?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
6House Design (product_details.php?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
Webdesigns-studio (sysMsg.php?errMsg) Cross Site Scripting Vulnerabilities (ehsan_hp200@...mail.com)
THE STUDIO (prod.php?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
TWSL2011-008: Focus Stealing Vulnerability in Android (Trustwave Advisories <trustwaveadvisories@...stwave.com>)
SEO New York (prod.php?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
IPv6 Hackers mailing-list (Fernando Gont <fgont@...networks.com>)
EasyContent CMS (participant.php?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
Chezola Systems (display-section.php?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
XWeavers (sysMsg.php?errMsg) Cross Site Scripting Vulnerabilities (ehsan_hp200@...mail.com)
Kimia Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
Synchrony Infotech (product_details.php?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
XWeavers (page.asp?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
[security bulletin] HPSBMU02695 SSRT100480 rev.1 - HP OpenView Performance Insight, Remote HTML Injection, Unauthorized Access (security-alert@...com)
TPTI-11-12: McAfee SaaS MyAsUtil5.2.0.603.dll SecureObjectFactory Instantiation Design Flaw Remote Code Execution Vulne… (ZDI Disclosures <zdi-disclosures@...pin…)

August 10 (16 messages)

Fwd: {Lostmon´s Group} Internet Explorer 6, 7 and 8 Window.open race condition Vulnerability (Lostmon lords <lostmon@...il.com>)
ZDI-11-247: Microsoft Internet Explorer XSLT SetViewSlave Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-248: Microsoft Internet Explorer 9 STYLE Object Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-249: (Pwn2Own) Microsoft Internet Explorer Protected Mode Bypass Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-250: Apple QuickTime STTS atom Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-251: Apple QuickTime STSS atom Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
CfP for 4th OWASP Day Germany 2011 now open ("Tobias Glemser" <tglemser@...e-consulting.com>)
[security bulletin] HPSBHF02699 SSRT100592 rev.1 - HP ProLiant SL Advanced Power Manager (SL-APM), Remote User Validation Failure (security-alert@...com)
Multiple XSS in eShop for Wordpress (advisory@...ridge.ch)
[security bulletin] HPSBGN02694 SSRT100586 rev.1 - HP webOS Contacts Application, Remote Execution of Arbitrary Code (security-alert@...com)
SQL injection in Social Slider (advisory@...ridge.ch)
[security bulletin] HPSBGN02696 SSRT100590 rev.1 - HP webOS Calendar Application, Remote Execution of Arbitrary Code (security-alert@...com)
[oCERT-2011-002] libavcodec insufficient boundary check (Daniele Bianco <danbia@...rt.org>)
CA20110809-01: Security Notice for CA ARCserve D2D (ken <ken@...williams.us>)
iDefense Security Advisory 08.09.11: Adobe Flash Player ActionScript Display Memory Corruption Vulnerability (labs-no-reply <labs-no-reply@...p.vrsn.com>)
iDefense Security Advisory 08.09.11: Adobe Flash Player Integer Overflow (labs-no-reply <labs-no-reply@...p.vrsn.com>)

August 15 (38 messages)

SEC Consult SA-20110810-0 :: Client-side remote file upload & command execution in Check Point SSL VPN On-Demand applic… (SEC Consult Vulnerability Lab <research…)
[SECURITY] [DSA 2292-1] ISC DHCP security update (Florian Weimer <fw@...eb.enyo.de>)
CVE-2011-0527: VMware vFabric tc Server password obfuscation bypass (s2-security <s2-security@...are.com>)
VUPEN Security Research - Adobe Shockwave rcsL Record Array Indexing Vulnerability (APSB11-19) ("VUPEN Security Research" <advisories@...en.com>)
VUPEN Security Research - Adobe Flash Player ActionScript FileReference Buffer Overflow (APSB11-21) ("VUPEN Security Research" <advisories@...en.com>)
[ MDVSA-2011:122 ] clamav (security@...driva.com)
[ MDVSA-2011:123 ] squirrelmail (security@...driva.com)
[ MDVSA-2011:124 ] phpmyadmin (security@...driva.com)
[ MDVSA-2011:125 ] foomatic-filters (security@...driva.com)
[SECURITY] [DSA 2294-1] freetype security update (Moritz Muehlenhoff <jmm@...ian.org>)
Calisto light, light plus and full, Sql Injection And user or Admin bypass (Lostmon lords <lostmon@...il.com>)
[SECURITY] CVE-2011-2729: Commons Daemon fails to drop capabilities (Apache Tomcat) (Mark Thomas <markt@...che.org>)
[SECURITY] CVE-2011-2481: Apache Tomcat information disclosure vulnerability (Mark Thomas <markt@...che.org>)
Neox (categoria.php?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
[SECURITY] [DSA 2293-1] libxfont security update (Thijs Kinkhorst <thijs@...ian.org>)
QOLQA (categoria.php?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
cdeVision (index.php?page) Remote File Inclusion Vulnerability (ehsan_hp200@...mail.com)
CdeVision Cross Site Scripting Vulnerabilities (ehsan_hp200@...mail.com)
PCVmedia (free_gallery.php?cat_id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
INSECT Pro - Exploit EChat Server <= v2.5 20110812 - Remote Buffer Overflow Exploit (runlvl <runlvl@...il.com>)
ZDI-11-252: Apple QuickTime PICT Image PnSize Opcode Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-253: Adobe Flash Player BitmapData.scroll Integer Overflow Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[slackware-security] bind (SSA:2011-224-01) (Slackware Security Team <security@...ckware.com>)
WebsiteBaker 2.8.1 <= Cross Site Request Forgery (CSRF) Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
WebsiteBaker 2.8.1 <= Arbitrary File Upload Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
CdeVision(students.php?id) (gallery.php?cat) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
DoodleIT (gallery.php?id) (about.php?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
BACKEND (categoria.php?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
SAY Comunicacion (producto.php?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
awiki 20100125 multiple local file inclusion vulnerabilities (muuratsalo experimental hack lab <muuratsalo@...il.com>)
Ruxcon 2011 Final Call For Papers (cfp@...con.org.au)
[security bulletin] HPSBMU02695 SSRT100480 rev.2 - HP OpenView Performance Insight, Remote HTML Injection, Unauthorized Access, Cross Site… (security-alert@...com)
The LAD Melbourne Cms Sql Injection Vulnerability (cyber netron <cybernetron@...il.com>)
NetSaro Enterprise Messenger Server Administration Console Weak Cryptographic Password Storage Vulnerability (robkraus@...tionary.com)
NetSaro Enterprise Messenger Server Plaintext Password Storage Vulnerability (robkraus@...tionary.com)
Call for Papers: The 6th International Conference for Internet Technology and Secured Transactions (ICITST-2011)! (Call for papers <call.for.papers.is@...il.co…)
[ MDVSA-2011:126 ] java-1.6.0-openjdk (security@...driva.com)
[Annoucement] ClubHack Magazine - Call for Articles (abhijeet@...bhack.com)

August 16 (4 messages)

{Lostmon´s Group} Elgg 1.8 beta2 and prior to 1.7.11 'container_guid' and 'owner_guid' SQL Injection (Lostmon lords <lostmon@...il.com>)
phpList Improper Access Control and Information Leakage vulnerabilities (Davide Canali <davide@...idecanali.com>)
CVE-2011-2664 Symlink Following and Second-Order Symlink Vulnerabilities in Multiple Check Point Security Management Pr… (Matthew Flanagan <mattimustang@...il.co…)
Malformed DHCPv6 packets cause RPC to become unresponsive (tunterleitner@...racuda.com)

August 17 (36 messages)

phpWebSite (userpage) Cross Site Scripting Vulnerabilities (ehsan_hp200@...mail.com)
dedacom (dettaglio.php?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
dpconsulenze (dettaglio.php?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
ECHO Creative Company (dettaglio.php?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
Muzedon (dettaglio.php?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
netplanet (dettaglio.asp?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
InYourLife (dettaglio.php?id) (dettaglio_immobile.php?id) (notizia.php?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
ZDI-11-254: Apple QuickTime 'trun' atom sampleCount Integer Overflow Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-255: Apple QuickTime Player H.264 Reference Picture List Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-256: Apple QuickTime Media Link src Parameter Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-257: Apple QuickTime Player H.264 Slice Header Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-258: Apple QuickTime STSC atom Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-259: Apple QuickTime STSZ atom Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-260: Nortel Media Application Server cstore.exe cs_anams Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-261: HP Easy Printer Care XMLSimpleAccessor Class ActiveX Control Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com…)
ZDI-11-262: Symantec Veritas Storage Foundation vxsvc.exe Unicode String Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingp…)
ZDI-11-263: Symantec Veritas Storage Foundation vxsvc.exe ASCII String Unpacking Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingp…)
ZDI-11-264: Symantec Veritas Storage Foundation vxsvc.exe Value Unpacking Integer Overflow Remote Code Execution Vulner… (ZDI Disclosures <zdi-disclosures@...pin…)
ZDI-11-265: RealNetworks Realplayer QCP Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-266: RealNetworks RealPlayer Advanced Audio Coding Element Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-267: RealNetworks Realplayer MP3 ID3 tags Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-268: RealNetworks RealPlayer SWF DefineFont Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-269: RealNetworks RealPlayer Cross-Zone Scripting Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
lab382 (dettaglio.php?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
ESA-2011-027: RSA, The Security Division of EMC, releases Security Patch for Adaptive Authentication (On-Premise) (<Security_Alert@....com>)
XSS in Fast Secure Contact Form wordpress plugin (advisory@...ridge.ch)
Multiple XSS in WP-Stats-Dashboard (advisory@...ridge.ch)
StudioLine Photo Basic 3 ActiveX control Insecure Method (advisory@...ridge.ch)
ZDI-11-270: Mozilla Firefox SVGTextElement.getCharNumAtPosition Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
WebRising (dettaglio.asp?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
ZDI-11-271: Mozilla Firefox appendChild DOM Tree Inconsistency Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[ MDVSA-2011:127 ] mozilla (security@...driva.com)
Xplace Company (dettaglio.asp?id) (alloggi-dett.asp?id) (eventi.asp?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
[SECURITY] [DSA 2295-1] iceape security update (Moritz Muehlenhoff <jmm@...ian.org>)
ZDI-11-272: (0day) FlexNet License Server Manager Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[SECURITY] [DSA 2296-1] iceweasel security update (Moritz Muehlenhoff <jmm@...ian.org>)

August 18 (6 messages)

[ MDVSA-2011:128 ] dhcp (security@...driva.com)
ToorCon 13 Call For Papers (h1kari@...rcon.org)
Elgg 1.7.10 <= | Multiple Vulnerabilities (YGN Ethical Hacker Group <lists@...g.net>)
ASPR #2011-08-18-2: Remote Binary Planting in Mozilla Thunderbird ("ACROS Security Lists" <lists@...os.si>)
ASPR #2011-08-18-1: Remote Binary Planting in Mozilla Firefox ("ACROS Security Lists" <lists@...os.si>)
ESA-2011-025: Multiple buffer overflow vulnerabilities in EMC AutoStart (<Security_Alert@....com>)

August 19 (2 messages)

ALTOGRADO (catalogo.php?id_categoria) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
Grupo Argentina Web Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)

August 25 (29 messages)

Cisco Security Advisory: Open Query Interface in Cisco Unified Communications Manager and Cisco Unified Presence Server (Cisco Systems Product Security Incident…)
Concrete CMS 5.4.1.1 <= Cross Site Scripting (YGN Ethical Hacker Group <lists@...g.net>)
ESA-2011-030: RSA, The Security Division of EMC, announces security fixes for RSA enVision (<Security_Alert@....com>)
[SECURITY] [DSA 2297-1] icedove security update (Moritz Muehlenhoff <jmm@...ian.org>)
Insomnia : ISVA-110822.1 - Pidgin IM Insecure URL Handling Remote Code Execution ("Brett Moore" <advisories@...omniasec.com>)
Security advisory: SQL Injection in LedgerSMB 1.2.24 and lower (Chris Travers <chris.travers@...il.com>)
ZDI-11-274: EMC Autostart ftAgent Opcode 0x140 Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@ci…)
PHP 5.3.6 multiple null pointer dereference (cxib@...urityreason.com)
[CVE-2011-2712] Apache Wicket XSS vulnerability (Martin Grigorov <mgrigorov@...che.org>)
ZDI-11-275: EMC Autostart ftAgent Opcode 0x11 Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[PRE-SA-2011-06] Linux kernel: ZERO_SIZE_PTR dereference for long symlinks in Be FS (Timo Warns <warns@...-sense.de>)
PHP 5.3.6 ZipArchive invalid use glob(3) (cxib@...urityreason.com)
[slackware-security] php (SSA:2011-237-01) (Slackware Security Team <security@...ckware.com>)
ValtNet (photogallery.html?id_categoria) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
CreatiWeb Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
Alfazeta (list-prodotti.php?idcategoria) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
Warah Agencia (productos.php?categoria_id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
Simply Media Web (archivio.asp?categoria_id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
Dataminas (noticias.php?categoria_id) (galeria.php?galeria_id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
NetSaro Enterprise Messenger Server Administration Console Source Code Disclosure (robkraus@...tionary.com)
Cross-Site Scripting (XSS) in Microsoft ReportViewer Controls (info@...security.com)
SQL-Ledger patch update for SQL injection (Chris Travers <chris@...atrontech.com>)
ZDI-11-273: EMC Autostart Domain Name Logging Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
JagoanStore CMS Arbitary file upload vulnerability (eidelweiss@...dowslive.com)
[PT-2011-23] Database information disclosure in GLPI (noreply@...ecurity.ru)
Nafis Group (review.php?ID) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
Nativedreams (Fabarth_gallery.php?categoria_id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
Data Center Foz (product_cat.php?CATEGORIA_ID) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)

August 26 (17 messages)

LAB GRAPHIC DESIGN (index.php?categoria_id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
ZDI-11-276: Adobe Flash Player MP4 sequenceParameterSetNALUnit Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Cisco Security Advisory: Denial of Service Vulnerabilities in Cisco Intercompany Media Engine (Cisco Systems Product Security Incident Response Team <psirt@...c…)
NGS00054 Technical Advisory: : Lumension Device Control (formerly Sanctuary) remote memory corruption ("Research@...Secure" <research@...secure.com>)
B-Keen communication (dettaglio_news.php&id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
BUZLAB (prodotti.php?idCategoria) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
Foresta Creativa (prodotti.php?idCategoria) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
Web Progetto (prodotti.php?idcategoria) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
Spherica Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
Marinet Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
Marinet Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
TconZERO (prodotto.php?idprodotto) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
Web Art Studio (prodotto.php?lang) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
OMNITEC (prodotto.php?id_prodotto) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
Listendifferent (prodotto.php?IDprodotto) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
Jcow CMS 4.2 <= | Cross Site Scripting (YGN Ethical Hacker Group <lists@...g.net>)
Jcow CMS 4.x:4.2 <= , 5.x:5.2 <= | Arbitrary Code Execution (YGN Ethical Hacker Group <lists@...g.net>)

August 29 (9 messages)

phpWebSite (publisher) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
[Foreground Security 2011-001]: Casper Suite (JSS 8.1) Cross-Site Scripting (Jose Carlos de Arriba <jcarriba@...egroundsecurity.com>)
JCE Joomla Extension <=2.0.10 Multiple Vulnerabilities (admin <admin@...report.ir>)
Fabio Rispoli (prodotto.php?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
Marketing & Development (prodotto.php?cat) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
Datriks Solutions (prodotto.php?id) (dettaglio_socio.php?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
Multimedia Creative (prodotto.php?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
LifeSize Room Vulnerabilities (smcintyre@...urestate.net)
DDIVRT-2011-32 Axway SecureTransport '/icons/' Directory Traversal (ddivulnalert@...frontline.com)

August 30 (7 messages)

[SECURITY] CVE-2011-3190 Apache Tomcat Authentication bypass and information disclosure (Mark Thomas <markt@...che.org>)
[SECURITY] [DSA 2298-1] apache2 security update (Stefan Fritsch <sf@...ian.org>)
XSS in IBM Open Admin Tool (sk <sk10_0@...oo.com>)
bizConsulting (prodotto.php?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
Cisco Security Advisory: Apache HTTPd Range Header Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
webyuss (prodotto.php?id) (quadri.php?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
Pc Web Agency (prodotto.php?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)

August 31 (9 messages)

Cisco Security Advisory: Denial of Service Vulnerability in Cisco TelePresence Codecs (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
[SECURITY] [DSA 2299-1] ca-certificates security update (Thijs Kinkhorst <thijs@...ian.org>)
Full disclosure for SA45649, SQL Injection in LedgerSMB and SQL-Ledger (Chris Travers <chris@...atrontech.com>)
[SECURITY] [DSA 2200-1] nss security update (Moritz Muehlenhoff <jmm@...ian.org>)
Mediagrafic (prodotto.asp?id) (records.asp?id_p) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
CWM (dettaglio-prodotto.asp?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
Dexanet Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
Sana Net (viewnews.php?id) Remote SQL injection Vulnerability (ehsan_hp200@...mail.com)
XSS in Redirection wordpress plugin (advisory@...ridge.ch)

217 messages

Powered by blists - more mailing lists