Bugtraq: by thread
RSS Feed
About List
All Lists
Previous period
217 messages
starting Aug 01 11 and
ending Aug 31 11
Date index |
Thread index |
Author index
- [slackware-security] dhcpcd (SSA:2011-210-02) Slackware Security Team (Aug 01)
- [slackware-security] samba (SSA:2011-210-03) Slackware Security Team (Aug 01)
- [slackware-security] libpng (SSA:2011-210-01) Slackware Security Team (Aug 01)
- cgcraft llc (collections.php?id) Cross Site Scripting Vulnerabilities ehsan_hp200 (Aug 01)
- Elgg 1.7.9 <= | Multiple Cross Site Scripting Vulnerabilities YGN Ethical Hacker Group (Aug 01)
- CFP open for ClubHack2011 Abhijeet Patil (Aug 01)
- NGS00068 Technical Advisory - LibAVCodec AMV Out of Array Write Research@NGSSecure (Aug 01)
- Android Browser Cross-Application Scripting (CVE-2011-2357) Roee Hay (Aug 04)
- Cross Site Scription Vulnerability in vBulletin 4.1.3, 4.1.4 and 4.1.5 haroon (Aug 04)
- XSS in WP e-Commerce advisory (Aug 04)
- Multiple XSS in HESK advisory (Aug 04)
- ThreeDify Designer ActiveX control Insecure Method advisory (Aug 04)
- ThreeDify Designer ActiveX control multiple buffer overflow vulnerabilities advisory (Aug 04)
- APPLE-SA-2011-08-03-1 QuickTime 7.7 Apple Product Security (Aug 04)
- Re: [Full-disclosure] phpMyAdmin 3.x Conditional Session Manipulation Henri Salo (Aug 04)
- Community Server - Reflected Cross-Site Scripting - Advisories PontoSec (Aug 04)
- Community Server - Stored Cross-Site Scripting in User's Signature Advisories PontoSec (Aug 04)
- Useless OpenSSH resources exhausion bug via GSSAPI pi3 (Aug 04)
- Sophos Antivirus Review Tavis Ormandy (Aug 09)
- [SECURITY] [DSA 2291-1] squirrelmail security update Thijs Kinkhorst (Aug 09)
- [SECURITY] [DSA 2289-1] typo3-src security update Florian Weimer (Aug 09)
- [security bulletin] HPSBPI02698 SSRT100404 rev.1 - HP Easy Printer Care Software Running on Windows, Remote Execution of Arbitrary Code security-alert (Aug 09)
- TPTI-11-13: McAfee SaaS myCIOScn.dll Scan Method Script Injection Remote Code Execution Vulnerability ZDI Disclosures (Aug 09)
- Arte Dude (collections.php?id) (property.php?id) Remote SQL injection Vulnerability ehsan_hp200 (Aug 09)
- Web Design Sydney (news-item.php?id) (news-item.php?newsid) Remote SQL injection Vulnerability ehsan_hp200 (Aug 09)
- Avant-Garde Technologies (display-section.php?id) Remote SQL injection Vulnerability ehsan_hp200 (Aug 09)
- Liberating IT (picture.php?gid) Remote SQL injection Vulnerability ehsan_hp200 (Aug 09)
- Re: CA ARCserve D2D r15 GWT RPC Request Auth Bypass / Credentials Williams, James K (Aug 09)
- Amigot Corp (story.php?id) Remote SQL injection Vulnerability ehsan_hp200 (Aug 09)
- 6House Design (product_details.php?id) Remote SQL injection Vulnerability ehsan_hp200 (Aug 09)
- Webdesigns-studio (sysMsg.php?errMsg) Cross Site Scripting Vulnerabilities ehsan_hp200 (Aug 09)
- THE STUDIO (prod.php?id) Remote SQL injection Vulnerability ehsan_hp200 (Aug 09)
- TWSL2011-008: Focus Stealing Vulnerability in Android Trustwave Advisories (Aug 09)
- SEO New York (prod.php?id) Remote SQL injection Vulnerability ehsan_hp200 (Aug 09)
- IPv6 Hackers mailing-list Fernando Gont (Aug 09)
- EasyContent CMS (participant.php?id) Remote SQL injection Vulnerability ehsan_hp200 (Aug 09)
- Chezola Systems (display-section.php?id) Remote SQL injection Vulnerability ehsan_hp200 (Aug 09)
- XWeavers (sysMsg.php?errMsg) Cross Site Scripting Vulnerabilities ehsan_hp200 (Aug 09)
- Kimia Remote SQL injection Vulnerability ehsan_hp200 (Aug 09)
- Synchrony Infotech (product_details.php?id) Remote SQL injection Vulnerability ehsan_hp200 (Aug 09)
- XWeavers (page.asp?id) Remote SQL injection Vulnerability ehsan_hp200 (Aug 09)
- [security bulletin] HPSBMU02695 SSRT100480 rev.1 - HP OpenView Performance Insight, Remote HTML Injection, Unauthorized Access security-alert (Aug 09)
- [SECURITY] [DSA 2290-1] samba security update Florian Weimer (Aug 09)
- TPTI-11-12: McAfee SaaS MyAsUtil5.2.0.603.dll SecureObjectFactory Instantiation Design Flaw Remote Code Execution Vulnerability ZDI Disclosures (Aug 09)
- Fwd: {Lostmon´s Group} Internet Explorer 6, 7 and 8 Window.open race condition Vulnerability Lostmon lords (Aug 10)
- ZDI-11-247: Microsoft Internet Explorer XSLT SetViewSlave Remote Code Execution Vulnerability ZDI Disclosures (Aug 10)
- ZDI-11-248: Microsoft Internet Explorer 9 STYLE Object Parsing Remote Code Execution Vulnerability ZDI Disclosures (Aug 10)
- ZDI-11-249: (Pwn2Own) Microsoft Internet Explorer Protected Mode Bypass Vulnerability ZDI Disclosures (Aug 10)
- ZDI-11-250: Apple QuickTime STTS atom Remote Code Execution Vulnerability ZDI Disclosures (Aug 10)
- ZDI-11-251: Apple QuickTime STSS atom Parsing Remote Code Execution Vulnerability ZDI Disclosures (Aug 10)
- CfP for 4th OWASP Day Germany 2011 now open Tobias Glemser (Aug 10)
- [security bulletin] HPSBHF02699 SSRT100592 rev.1 - HP ProLiant SL Advanced Power Manager (SL-APM), Remote User Validation Failure security-alert (Aug 10)
- Multiple XSS in eShop for Wordpress advisory (Aug 10)
- [security bulletin] HPSBGN02694 SSRT100586 rev.1 - HP webOS Contacts Application, Remote Execution of Arbitrary Code security-alert (Aug 10)
- SQL injection in Social Slider advisory (Aug 10)
- [security bulletin] HPSBGN02696 SSRT100590 rev.1 - HP webOS Calendar Application, Remote Execution of Arbitrary Code security-alert (Aug 10)
- [oCERT-2011-002] libavcodec insufficient boundary check Daniele Bianco (Aug 10)
- CA20110809-01: Security Notice for CA ARCserve D2D ken (Aug 10)
- iDefense Security Advisory 08.09.11: Adobe Flash Player ActionScript Display Memory Corruption Vulnerability labs-no-reply (Aug 10)
- iDefense Security Advisory 08.09.11: Adobe Flash Player Integer Overflow labs-no-reply (Aug 10)
- SEC Consult SA-20110810-0 :: Client-side remote file upload & command execution in Check Point SSL VPN On-Demand applications - CVE-2011-1827 SEC Consult Vulnerability Lab (Aug 15)
- [SECURITY] [DSA 2292-1] ISC DHCP security update Florian Weimer (Aug 15)
- CVE-2011-0527: VMware vFabric tc Server password obfuscation bypass s2-security (Aug 15)
- VUPEN Security Research - Adobe Shockwave rcsL Record Array Indexing Vulnerability (APSB11-19) VUPEN Security Research (Aug 15)
- VUPEN Security Research - Adobe Flash Player ActionScript FileReference Buffer Overflow (APSB11-21) VUPEN Security Research (Aug 15)
- [ MDVSA-2011:122 ] clamav security (Aug 15)
- [ MDVSA-2011:123 ] squirrelmail security (Aug 15)
- [ MDVSA-2011:124 ] phpmyadmin security (Aug 15)
- [ MDVSA-2011:125 ] foomatic-filters security (Aug 15)
- [SECURITY] [DSA 2294-1] freetype security update Moritz Muehlenhoff (Aug 15)
- Calisto light, light plus and full, Sql Injection And user or Admin bypass Lostmon lords (Aug 15)
- [SECURITY] CVE-2011-2729: Commons Daemon fails to drop capabilities (Apache Tomcat) Mark Thomas (Aug 15)
- [SECURITY] CVE-2011-2481: Apache Tomcat information disclosure vulnerability Mark Thomas (Aug 15)
- Neox (categoria.php?id) Remote SQL injection Vulnerability ehsan_hp200 (Aug 15)
- [SECURITY] [DSA 2293-1] libxfont security update Thijs Kinkhorst (Aug 15)
- QOLQA (categoria.php?id) Remote SQL injection Vulnerability ehsan_hp200 (Aug 15)
- cdeVision (index.php?page) Remote File Inclusion Vulnerability ehsan_hp200 (Aug 15)
- CdeVision Cross Site Scripting Vulnerabilities ehsan_hp200 (Aug 15)
- PCVmedia (free_gallery.php?cat_id) Remote SQL injection Vulnerability ehsan_hp200 (Aug 15)
- INSECT Pro - Exploit EChat Server <= v2.5 20110812 - Remote Buffer Overflow Exploit runlvl (Aug 15)
- ZDI-11-252: Apple QuickTime PICT Image PnSize Opcode Remote Code Execution Vulnerability ZDI Disclosures (Aug 15)
- ZDI-11-253: Adobe Flash Player BitmapData.scroll Integer Overflow Remote Code Execution Vulnerability ZDI Disclosures (Aug 15)
- [slackware-security] bind (SSA:2011-224-01) Slackware Security Team (Aug 15)
- WebsiteBaker 2.8.1 <= Cross Site Request Forgery (CSRF) Vulnerability YGN Ethical Hacker Group (Aug 15)
- WebsiteBaker 2.8.1 <= Arbitrary File Upload Vulnerability YGN Ethical Hacker Group (Aug 15)
- CdeVision(students.php?id) (gallery.php?cat) Remote SQL injection Vulnerability ehsan_hp200 (Aug 15)
- DoodleIT (gallery.php?id) (about.php?id) Remote SQL injection Vulnerability ehsan_hp200 (Aug 15)
- BACKEND (categoria.php?id) Remote SQL injection Vulnerability ehsan_hp200 (Aug 15)
- SAY Comunicacion (producto.php?id) Remote SQL injection Vulnerability ehsan_hp200 (Aug 15)
- awiki 20100125 multiple local file inclusion vulnerabilities muuratsalo experimental hack lab (Aug 15)
- Ruxcon 2011 Final Call For Papers cfp (Aug 15)
- [security bulletin] HPSBMU02695 SSRT100480 rev.2 - HP OpenView Performance Insight, Remote HTML Injection, Unauthorized Access, Cross Site Scripting (XSS) security-alert (Aug 15)
- The LAD Melbourne Cms Sql Injection Vulnerability cyber netron (Aug 15)
- NetSaro Enterprise Messenger Server Administration Console Weak Cryptographic Password Storage Vulnerability robkraus (Aug 15)
- NetSaro Enterprise Messenger Server Plaintext Password Storage Vulnerability robkraus (Aug 15)
- Call for Papers: The 6th International Conference for Internet Technology and Secured Transactions (ICITST-2011)! Call for papers (Aug 15)
- [ MDVSA-2011:126 ] java-1.6.0-openjdk security (Aug 15)
- [Annoucement] ClubHack Magazine - Call for Articles abhijeet (Aug 15)
- {Lostmon´s Group} Elgg 1.8 beta2 and prior to 1.7.11 'container_guid' and 'owner_guid' SQL Injection Lostmon lords (Aug 16)
- phpList Improper Access Control and Information Leakage vulnerabilities Davide Canali (Aug 16)
- CVE-2011-2664 Symlink Following and Second-Order Symlink Vulnerabilities in Multiple Check Point Security Management Products Matthew Flanagan (Aug 16)
- Malformed DHCPv6 packets cause RPC to become unresponsive tunterleitner (Aug 16)
- phpWebSite (userpage) Cross Site Scripting Vulnerabilities ehsan_hp200 (Aug 17)
- dedacom (dettaglio.php?id) Remote SQL injection Vulnerability ehsan_hp200 (Aug 17)
- dpconsulenze (dettaglio.php?id) Remote SQL injection Vulnerability ehsan_hp200 (Aug 17)
- ECHO Creative Company (dettaglio.php?id) Remote SQL injection Vulnerability ehsan_hp200 (Aug 17)
- Muzedon (dettaglio.php?id) Remote SQL injection Vulnerability ehsan_hp200 (Aug 17)
- netplanet (dettaglio.asp?id) Remote SQL injection Vulnerability ehsan_hp200 (Aug 17)
- InYourLife (dettaglio.php?id) (dettaglio_immobile.php?id) (notizia.php?id) Remote SQL injection Vulnerability ehsan_hp200 (Aug 17)
- ZDI-11-254: Apple QuickTime 'trun' atom sampleCount Integer Overflow Remote Code Execution Vulnerability ZDI Disclosures (Aug 17)
- ZDI-11-255: Apple QuickTime Player H.264 Reference Picture List Remote Code Execution Vulnerability ZDI Disclosures (Aug 17)
- ZDI-11-256: Apple QuickTime Media Link src Parameter Remote Code Execution Vulnerability ZDI Disclosures (Aug 17)
- ZDI-11-257: Apple QuickTime Player H.264 Slice Header Remote Code Execution Vulnerability ZDI Disclosures (Aug 17)
- ZDI-11-258: Apple QuickTime STSC atom Parsing Remote Code Execution Vulnerability ZDI Disclosures (Aug 17)
- ZDI-11-259: Apple QuickTime STSZ atom Parsing Remote Code Execution Vulnerability ZDI Disclosures (Aug 17)
- ZDI-11-260: Nortel Media Application Server cstore.exe cs_anams Remote Code Execution Vulnerability ZDI Disclosures (Aug 17)
- ZDI-11-261: HP Easy Printer Care XMLSimpleAccessor Class ActiveX Control Remote Code Execution Vulnerability ZDI Disclosures (Aug 17)
- ZDI-11-262: Symantec Veritas Storage Foundation vxsvc.exe Unicode String Parsing Remote Code Execution Vulnerability ZDI Disclosures (Aug 17)
- ZDI-11-263: Symantec Veritas Storage Foundation vxsvc.exe ASCII String Unpacking Remote Code Execution Vulnerability ZDI Disclosures (Aug 17)
- ZDI-11-264: Symantec Veritas Storage Foundation vxsvc.exe Value Unpacking Integer Overflow Remote Code Execution Vulnerability ZDI Disclosures (Aug 17)
- ZDI-11-265: RealNetworks Realplayer QCP Parsing Remote Code Execution Vulnerability ZDI Disclosures (Aug 17)
- ZDI-11-266: RealNetworks RealPlayer Advanced Audio Coding Element Remote Code Execution Vulnerability ZDI Disclosures (Aug 17)
- ZDI-11-267: RealNetworks Realplayer MP3 ID3 tags Remote Code Execution Vulnerability ZDI Disclosures (Aug 17)
- ZDI-11-268: RealNetworks RealPlayer SWF DefineFont Remote Code Execution Vulnerability ZDI Disclosures (Aug 17)
- ZDI-11-269: RealNetworks RealPlayer Cross-Zone Scripting Remote Code Execution Vulnerability ZDI Disclosures (Aug 17)
- lab382 (dettaglio.php?id) Remote SQL injection Vulnerability ehsan_hp200 (Aug 17)
- ESA-2011-027: RSA, The Security Division of EMC, releases Security Patch for Adaptive Authentication (On-Premise) Security_Alert (Aug 17)
- XSS in Fast Secure Contact Form wordpress plugin advisory (Aug 17)
- Multiple XSS in WP-Stats-Dashboard advisory (Aug 17)
- StudioLine Photo Basic 3 ActiveX control Insecure Method advisory (Aug 17)
- ZDI-11-270: Mozilla Firefox SVGTextElement.getCharNumAtPosition Remote Code Execution Vulnerability ZDI Disclosures (Aug 17)
- WebRising (dettaglio.asp?id) Remote SQL injection Vulnerability ehsan_hp200 (Aug 17)
- ZDI-11-271: Mozilla Firefox appendChild DOM Tree Inconsistency Remote Code Execution Vulnerability ZDI Disclosures (Aug 17)
- [ MDVSA-2011:127 ] mozilla security (Aug 17)
- Xplace Company (dettaglio.asp?id) (alloggi-dett.asp?id) (eventi.asp?id) Remote SQL injection Vulnerability ehsan_hp200 (Aug 17)
- [SECURITY] [DSA 2295-1] iceape security update Moritz Muehlenhoff (Aug 17)
- ZDI-11-272: (0day) FlexNet License Server Manager Remote Code Execution Vulnerability ZDI Disclosures (Aug 17)
- [SECURITY] [DSA 2296-1] iceweasel security update Moritz Muehlenhoff (Aug 17)
- [ MDVSA-2011:128 ] dhcp security (Aug 18)
- ToorCon 13 Call For Papers h1kari (Aug 18)
- Elgg 1.7.10 <= | Multiple Vulnerabilities YGN Ethical Hacker Group (Aug 18)
- ASPR #2011-08-18-2: Remote Binary Planting in Mozilla Thunderbird ACROS Security Lists (Aug 18)
- ASPR #2011-08-18-1: Remote Binary Planting in Mozilla Firefox ACROS Security Lists (Aug 18)
- ESA-2011-025: Multiple buffer overflow vulnerabilities in EMC AutoStart Security_Alert (Aug 18)
- ALTOGRADO (catalogo.php?id_categoria) Remote SQL injection Vulnerability ehsan_hp200 (Aug 19)
- ZDI-11-273: EMC Autostart Domain Name Logging Remote Code Execution Vulnerability ZDI Disclosures (Aug 25)
- Cisco Security Advisory: Open Query Interface in Cisco Unified Communications Manager and Cisco Unified Presence Server Cisco Systems Product Security Incident Response Team (Aug 25)
- Grupo Argentina Web Remote SQL injection Vulnerability ehsan_hp200 (Aug 25)
- Concrete CMS 5.4.1.1 <= Cross Site Scripting YGN Ethical Hacker Group (Aug 25)
- ESA-2011-030: RSA, The Security Division of EMC, announces security fixes for RSA enVision Security_Alert (Aug 25)
- [SECURITY] [DSA 2297-1] icedove security update Moritz Muehlenhoff (Aug 25)
- Insomnia : ISVA-110822.1 - Pidgin IM Insecure URL Handling Remote Code Execution Brett Moore (Aug 25)
- Security advisory: SQL Injection in LedgerSMB 1.2.24 and lower Chris Travers (Aug 25)
- ZDI-11-274: EMC Autostart ftAgent Opcode 0x140 Parsing Remote Code Execution Vulnerability ZDI Disclosures (Aug 25)
- Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service Vulnerabilities Cisco Systems Product Security Incident Response Team (Aug 25)
- PHP 5.3.6 multiple null pointer dereference cxib (Aug 25)
- [CVE-2011-2712] Apache Wicket XSS vulnerability Martin Grigorov (Aug 25)
- ZDI-11-275: EMC Autostart ftAgent Opcode 0x11 Parsing Remote Code Execution Vulnerability ZDI Disclosures (Aug 25)
- [PRE-SA-2011-06] Linux kernel: ZERO_SIZE_PTR dereference for long symlinks in Be FS Timo Warns (Aug 25)
- PHP 5.3.6 ZipArchive invalid use glob(3) cxib (Aug 25)
- [slackware-security] php (SSA:2011-237-01) Slackware Security Team (Aug 25)
- ValtNet (photogallery.html?id_categoria) Remote SQL injection Vulnerability ehsan_hp200 (Aug 25)
- CreatiWeb Remote SQL injection Vulnerability ehsan_hp200 (Aug 25)
- Alfazeta (list-prodotti.php?idcategoria) Remote SQL injection Vulnerability ehsan_hp200 (Aug 25)
- Warah Agencia (productos.php?categoria_id) Remote SQL injection Vulnerability ehsan_hp200 (Aug 25)
- Simply Media Web (archivio.asp?categoria_id) Remote SQL injection Vulnerability ehsan_hp200 (Aug 25)
- Dataminas (noticias.php?categoria_id) (galeria.php?galeria_id) Remote SQL injection Vulnerability ehsan_hp200 (Aug 25)
- NetSaro Enterprise Messenger Server Administration Console Source Code Disclosure robkraus (Aug 25)
- Cross-Site Scripting (XSS) in Microsoft ReportViewer Controls info (Aug 25)
- SQL-Ledger patch update for SQL injection Chris Travers (Aug 25)
- JagoanStore CMS Arbitary file upload vulnerability eidelweiss (Aug 25)
- [PT-2011-23] Database information disclosure in GLPI noreply (Aug 25)
- Nafis Group (review.php?ID) Remote SQL injection Vulnerability ehsan_hp200 (Aug 25)
- Nativedreams (Fabarth_gallery.php?categoria_id) Remote SQL injection Vulnerability ehsan_hp200 (Aug 25)
- Data Center Foz (product_cat.php?CATEGORIA_ID) Remote SQL injection Vulnerability ehsan_hp200 (Aug 25)
- LAB GRAPHIC DESIGN (index.php?categoria_id) Remote SQL injection Vulnerability ehsan_hp200 (Aug 25)
- ZDI-11-276: Adobe Flash Player MP4 sequenceParameterSetNALUnit Remote Code Execution Vulnerability ZDI Disclosures (Aug 25)
- Cisco Security Advisory: Denial of Service Vulnerabilities in Cisco Intercompany Media Engine Cisco Systems Product Security Incident Response Team (Aug 25)
- NGS00054 Technical Advisory: : Lumension Device Control (formerly Sanctuary) remote memory corruption Research@NGSSecure (Aug 25)
- B-Keen communication (dettaglio_news.php&id) Remote SQL injection Vulnerability ehsan_hp200 (Aug 26)
- BUZLAB (prodotti.php?idCategoria) Remote SQL injection Vulnerability ehsan_hp200 (Aug 26)
- Foresta Creativa (prodotti.php?idCategoria) Remote SQL injection Vulnerability ehsan_hp200 (Aug 26)
- Web Progetto (prodotti.php?idcategoria) Remote SQL injection Vulnerability ehsan_hp200 (Aug 26)
- Spherica Remote SQL injection Vulnerability ehsan_hp200 (Aug 26)
- Marinet Remote SQL injection Vulnerability ehsan_hp200 (Aug 26)
- <Possible follow-ups>
- Marinet Remote SQL injection Vulnerability ehsan_hp200 (Aug 26)
- TconZERO (prodotto.php?idprodotto) Remote SQL injection Vulnerability ehsan_hp200 (Aug 26)
- Web Art Studio (prodotto.php?lang) Remote SQL injection Vulnerability ehsan_hp200 (Aug 26)
- OMNITEC (prodotto.php?id_prodotto) Remote SQL injection Vulnerability ehsan_hp200 (Aug 26)
- Listendifferent (prodotto.php?IDprodotto) Remote SQL injection Vulnerability ehsan_hp200 (Aug 26)
- Jcow CMS 4.2 <= | Cross Site Scripting YGN Ethical Hacker Group (Aug 26)
- Jcow CMS 4.x:4.2 <= , 5.x:5.2 <= | Arbitrary Code Execution YGN Ethical Hacker Group (Aug 26)
- phpWebSite (publisher) Remote SQL injection Vulnerability ehsan_hp200 (Aug 29)
- [Foreground Security 2011-001]: Casper Suite (JSS 8.1) Cross-Site Scripting Jose Carlos de Arriba (Aug 29)
- JCE Joomla Extension <=2.0.10 Multiple Vulnerabilities admin (Aug 29)
- Fabio Rispoli (prodotto.php?id) Remote SQL injection Vulnerability ehsan_hp200 (Aug 29)
- Marketing & Development (prodotto.php?cat) Remote SQL injection Vulnerability ehsan_hp200 (Aug 29)
- Datriks Solutions (prodotto.php?id) (dettaglio_socio.php?id) Remote SQL injection Vulnerability ehsan_hp200 (Aug 29)
- Multimedia Creative (prodotto.php?id) Remote SQL injection Vulnerability ehsan_hp200 (Aug 29)
- LifeSize Room Vulnerabilities smcintyre (Aug 29)
- DDIVRT-2011-32 Axway SecureTransport '/icons/' Directory Traversal ddivulnalert (Aug 29)
- [SECURITY] CVE-2011-3190 Apache Tomcat Authentication bypass and information disclosure Mark Thomas (Aug 30)
- [SECURITY] [DSA 2298-1] apache2 security update Stefan Fritsch (Aug 30)
- XSS in IBM Open Admin Tool sk (Aug 30)
- bizConsulting (prodotto.php?id) Remote SQL injection Vulnerability ehsan_hp200 (Aug 30)
- Cisco Security Advisory: Apache HTTPd Range Header Denial of Service Vulnerability Cisco Systems Product Security Incident Response Team (Aug 30)
- webyuss (prodotto.php?id) (quadri.php?id) Remote SQL injection Vulnerability ehsan_hp200 (Aug 30)
- Pc Web Agency (prodotto.php?id) Remote SQL injection Vulnerability ehsan_hp200 (Aug 30)
- Cisco Security Advisory: Denial of Service Vulnerability in Cisco TelePresence Codecs Cisco Systems Product Security Incident Response Team (Aug 31)
- [SECURITY] [DSA 2299-1] ca-certificates security update Thijs Kinkhorst (Aug 31)
- Full disclosure for SA45649, SQL Injection in LedgerSMB and SQL-Ledger Chris Travers (Aug 31)
- [SECURITY] [DSA 2200-1] nss security update Moritz Muehlenhoff (Aug 31)
- Mediagrafic (prodotto.asp?id) (records.asp?id_p) Remote SQL injection Vulnerability ehsan_hp200 (Aug 31)
- CWM (dettaglio-prodotto.asp?id) Remote SQL injection Vulnerability ehsan_hp200 (Aug 31)
- Dexanet Remote SQL injection Vulnerability ehsan_hp200 (Aug 31)
- Sana Net (viewnews.php?id) Remote SQL injection Vulnerability ehsan_hp200 (Aug 31)
- XSS in Redirection wordpress plugin advisory (Aug 31)