SecurityFeed.info » Bugtraq (bugtraq) Mailing List

Feeds

29336 items (29336 unread) in 97 feeds

• Aviv Raff On .NET (22 unread)
• Bugtraq (bugtraq) Mailing List (712 unread)
• CGISecurity.com: Your Web Site and Application Security Resource (135 unread)
• christian's weblog (25 unread)
• Irongeek's Security Site (160 unread)
• Jeremiah Grossman (85 unread)
• Heorot.net (13 unread)
• milw0rm.com (530 unread)
• Nmap Hackers (nmap-hackers) Mailing List (9 unread)
• Packet Storm Security Advisories (450 unread)
• Packet Storm Security Exploits (551 unread)
• Packet Storm Security Headlines (460 unread)
• Packet Storm Security Last 100 (2596 unread)
• Packet Storm Security Last 20 (1013 unread)
• Packet Storm Security Last 50 (1853 unread)
• Packet Storm Security Last Files (634 unread)
• Packet Storm Security Miscellaneous Files (172 unread)
• Packet Storm Security Tools (184 unread)
• Rootsecure.net (839 unread)
• SecuriTeam.com (273 unread)
• Security Vulnerability Research & Defense (48 unread)
• SecurityFocus News (179 unread)
• SecurityFocus Vulnerabilities (876 unread)
• Securityvulns news channel (416 unread)
• SecWatch - Latest Exploit Alerts (10 unread)
• Taking Network Security to the Streets (28 unread)
• The One And Only Matt Parnell.com (38 unread)
• The Register - Security (642 unread)
• The Register - Software (713 unread)
• VulnWatch (vulnwatch) Mailing List (19 unread)
• Web App Security (webappsec) Mailing List (121 unread)
• IceСμbeς (15 unread)
• Linmagazine (296 unread)
• ‫netcraft Bytes :) (52 unread)
• Digg (4421 unread)
• Blonde 2.0 (72 unread)
• The Microsoft Security Response Center (MSRC) (62 unread)
• (IN)SECURE Magazine Notifications RSS (18 unread)
• 0x000000 Security (95 unread)
• ----- Anti-Malware ----- Analysis and Defense (16 unread)
• Apple Fun (25 unread)
• Technorati Search for: aviv.raffon.net (264 unread)
• C.I.S.R.T. (10 unread)
• Determina Zero-Day Protection (6 unread)
• Didier Stevens (69 unread)
• eEye Digital Security - Research Blog (10 unread)
• Ryan Naraine's Security Watch (162 unread)
• Security - RSS Feeds (280 unread)
• Exploit Prevention Labs (28 unread)
• Software Vulnerability Exploitation Blog (22 unread)
• F-Secure Antivirus Research Weblog (120 unread)
• Full Disclosure (303 unread)
• George Ou (10 unread)
• GNUCITIZEN Media Portfolio (99 unread)
• ha.ckers.org web application security lab (44 unread)
• heise security (496 unread)
• invisiblethings' blog (35 unread)
• Jeff Jones's blog (12 unread)
• JScript Blog (18 unread)
• Matasano Chargen (43 unread)
• McAfee Avert Labs (97 unread)
• Michael Howard's Web Log (39 unread)
• PandaLabs (55 unread)
• Zero Day (343 unread)
• SANS Internet Storm Center, InfoCON: green (293 unread)
• Latest Secunia Security Watchdog Blog Entries (33 unread)
• SecuriTeam Blogs (85 unread)
• Security Fix (173 unread)
• HP ASC Portal (30 unread)
• Strike Center (12 unread)
• Sunbelt Blog (301 unread)
• Sunnet Beskerming Security Advisories (48 unread)
• Technobabylon
• The Recurity Lablog (33 unread)
• Wired: Threat Level (626 unread)
• TrendLabs | Malware Blog - by Trend Micro (223 unread)
• Uninformed Journal (49 unread)
• WabiSabiLabi's blog (23 unread)
• WatchGuard Wire (61 unread)
• Latest Blog Entires From WebSense Security Labs (71 unread)
• Hackszine.com (226 unread)
• DVLabs: Blogs (81 unread)
• Errata Security (91 unread)
• Robert Hensing's Blog (92 unread)
• PaulDotCom Community Blog (12 unread)
• David LeBlanc's Web Log (25 unread)
• Billy (BK) Rios (25 unread)
• David Litchfield's blog (21 unread)
• Farfromr00tin (23 unread)
• aut disce, aut discede (17 unread)
• pwn* (16 unread)
• hackademix.net (54 unread)
• SecurityDot Vulnerabilities (540 unread)
• Vulnerabilities & Exploits (38 unread)
• Malicious Code (34 unread)
• Security Risks (22 unread)
• Digg / Security / upcoming (4515 unread)

Bugtraq (bugtraq) Mailing List (10 unread)

• November 20, 2008
• 23:48

  [ MDVSA-2008:233 ] libcdaudio

   » ‎ Bugtraq (bugtraq) Mailing List
  Posted by security_at_mandriva.com on Nov 20

   _______________________________________________________________________
  

   Mandriva Linux Security Advisory MDVSA-2008:233
   http://www.mandriva.com/security/
   _______________________________________________________________________
  

   Package :...

• 21:50

  Re: Re: Re: Re: Re: Re: Opera 9.6x file: overflow

   » ‎ Bugtraq (bugtraq) Mailing List
  Posted by send9_at_chiseclabs.com on Nov 20

  ('binary' encoding is not supported, stored as-is) I don't mean to come off as a jerk here, but, most of the questions that have been asked were mentioned in the original message and in k`sOSe's code.
  

  As I've said, Opera does not allow you to invoke the file:// handler from the Internet. I am...

• 19:51

  Re: Cpanel 11.x Local File Inclusion amp Cross Site Scripting - Discovered By Khashayar Fereidani

   » ‎ Bugtraq (bugtraq) Mailing List
  Posted by dkoston_at_gmail.com on Nov 20

  ('binary' encoding is not supported, stored as-is) You should update the title of your submission. This is a Fantastico vulnerability (http://www.netenberg.com/fantastico.php). The paths that you are attacking are not part of cPanel.
  Received on Nov 20 2008

• 19:34

  Re: Re: Cpanel 11.x Local File Inclusion amp Cross Site Scripting - Discovered By Khashayar Fereidani

   » ‎ Bugtraq (bugtraq) Mailing List
  Posted by irancrash_at_gmail.com on Nov 20

  ('binary' encoding is not supported, stored as-is) Hi ,
  

  Attacker can bypass disable_functions & mod_security & safe_mode & ... with this vulnerability .
  

  I think this is good reason !
  

  ----------------
  http://fereidani.ir - Khashayar Fereidani
  Received on Nov 20 2008

• 19:32

  SecurityReason : PHP 5.2.6 (error_log) safe_mode bypass

   » ‎ Bugtraq (bugtraq) Mailing List
  Posted by cxib_at_securityreason.com on Nov 20

  ('binary' encoding is not supported, stored as-is)

  [ SecurityReason.com PHP 5.2.6 (error_log) safe_mode bypass ]
  

  Author: Maksymilian Arciemowicz (cXIb8O3)
  securityreason.com
  Date:
  - Written: 10.11.2008
  - Public: 20.11.2008
  

  SecurityReason Research
  SecurityAlert Id: 57
  

  CWE: CWE-264
  ...

• 19:20

  Social Engine 2.7 CRLF Injection SQL injection

   » ‎ Bugtraq (bugtraq) Mailing List
  Posted by office_at_hackattack.at on Nov 20

  ('binary' encoding is not supported, stored as-is) [HACKATTACK Advisory 2008-11-20]Social Engine 2.7 CRLF Injection + SQL injection
  

  Details
  ************************
  Product: Social Engine
  Security-Risk: moderate
  Remote-Exploit: yes
  Vendor-URL: http://www.socialengine.net/
  Vendor-Status:...

• 18:30

  Re: Re: Re: Re: Re: Opera 9.6x file: overflow

   » ‎ Bugtraq (bugtraq) Mailing List
  Posted by theindigowolf_at_gmail.com on Nov 20

  Does that also hold true if you use a javascript/java applet to deliver the URL rather than just placing it in a text link?
  ------Original Message------
  From: psy.echo_at_gmail.com
  Sender:
  To: bugtraq_at_securityfocus.com
  Subject: Re: Re: Re: Re: Re: Opera 9.6x file:// overflow...

• 15:40

  [security bulletin] HPSBMA02388 SSRT080059 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Cross Site Scripting (XSS)

   » ‎ Bugtraq (bugtraq) Mailing List
  Posted by security-alert_at_hp.com on Nov 20

  SUPPORT COMMUNICATION - SECURITY BULLETIN
  

  Document ID: c01607570
  Version: 1
  

  HPSBMA02388 SSRT080059 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Cross Site Scripting (XSS)
  

  NOTICE: The information in this Security Bulletin should be acted upon as soon as possible.
  

  Release Date:...

• 15:07

  Re: Cpanel 11.x Local File Inclusion amp Cross Site Scripting - Discovered By Khashayar Fereidani

   » ‎ Bugtraq (bugtraq) Mailing List
  Posted by Jan van Niekerk on Nov 20

  On Friday 31 October 2008 15:03:55 irancrash_at_gmail.com wrote:
  > ----------------------------------------------------------------
  >
  > Script : Cpanel 11.x
  >
  > Type : Local File Inclusion & Cross Site Scripting
  >
  > Risk : High
  >
  >...

• 9:21

  boastMachine v3.1 Remote Sql Injection

   » ‎ Bugtraq (bugtraq) Mailing List
  Posted by r3d.w0rm_at_yahoo.com on Nov 20

  ('binary' encoding is not supported, stored as-is) #####################################################################################
  #### boastMachine v3.1 Remote Sql Injection ####
  ...