======================================================================

Secunia Research 08/04/2008

- Symantec Mail Security Applix Graphics Parsing Vulnerabilities -

======================================================================
Table of Contents

Affected Softwar

[ more ]  [ reply ]

======================================================================

Secunia Research 08/04/2008

- Autonomy Keyview Applix Graphics Parsing Vulnerabilities -

======================================================================
Table of Contents

Affected Software..

[ more ]  [ reply ]

======================================================================

Secunia Research 14/04/2008

- HP OpenView Network Node Manager OpenView5.exe Directory Traversal -

======================================================================
Table of Contents

Affected Softw

[ more ]  [ reply ]

======================================================================

Secunia Research 08/04/2008

- Lotus Notes EML Reader Buffer Overflows -

======================================================================
Table of Contents

Affected Software............

[ more ]  [ reply ]

======================================================================

Secunia Research 08/04/2008

- Autonomy Keyview EML Reader Buffer Overflows -

======================================================================
Table of Contents

Affected Software..........

[ more ]  [ reply ]

======================================================================

Secunia Research 08/04/2008

- Lotus Notes Folio Flat File Parsing Buffer Overflows -

======================================================================
Table of Contents

Affected Software....

[ more ]  [ reply ]

======================================================================

Secunia Research 08/04/2008

- Symantec Mail Security Folio Flat File Parsing Buffer Overflows -

======================================================================
Table of Contents

Affected Softwar

[ more ]  [ reply ]

======================================================================

Secunia Research 08/04/2008

- Autonomy Keyview Folio Flat File Parsing Buffer Overflows -

======================================================================
Table of Contents

Affected Software..

[ more ]  [ reply ]

======================================================================

Secunia Research 08/04/2008

- Lotus Notes htmsr.dll Buffer Overflows -

======================================================================
Table of Contents

Affected Software...........

[ more ]  [ reply ]

======================================================================

Secunia Research 08/04/2008

- activePDF DocConverter Folio Flat File Parsing Buffer Overflows -

======================================================================
Table of Contents

Affected Softwar

[ more ]  [ reply ]

======================================================================

Secunia Research 08/04/2008

- Lotus Notes kvdocve.dll Path Processing Buffer Overflow -

======================================================================
Table of Contents

Affected Software..

[ more ]  [ reply ]

======================================================================

Secunia Research 08/04/2008

- Lotus Notes Applix Graphics Parsing Vulnerabilities -

======================================================================
Table of Contents

Affected Software.....

[ more ]  [ reply ]

======================================================================

Secunia Research 08/04/2008

- Adobe Flash Player "Declare Function (V7)" Heap Overflow -

======================================================================
Table of Contents

Affected Software..

[ more ]  [ reply ]

2008/04/12 #2008-003 libpng zero-length chunks incorrect handling

Description:

Applications using libpng that install unknown chunk handlers, or copy
unknown chunks, may be vulnerable to a security issue which may result in
incorrect output, information leaks, crashes, or arbitrary code execution

[ more ]  [ reply ]

Identification : DOINGSOFT-2008-03-10-001
CVE-ID : pending
Discovery date : 14/12/2007
Correcting Date : 03/04/2008
How to get the patch :
http://support.businessobjects.com/downloads/critical_hot_fixes/default.
asp
choose "FixPack 3.5"

Publishing date : 14/04/2008
Product : Business Object Infovie

[ more ]  [ reply ]

#### Translation by Google Translate ####

This Opencosmo Security has organizato the OneSecurityDay event held each year. The event is dedicated to all the lovers of play of web application wishing to compete with other auditors from around the world.

For those who do not know, OneSecurityDay

[ more ]  [ reply ]

Hi everyone,

we are pleased to announce a new project called oCERT, the Open Source
Computer Emergency Response Team.

The oCERT project is a public effort providing security handling support to
Open Source projects affected by security incidents or vulnerabilities, just
like national CERTs offer

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

With the passing of "Sledgehammer" I was looking in the DEF CON archives for
An old picture of him at the first DEF CON, and came across the first con
announcement.

To commemorate both I decided to announce DEF CON 16 in the same style. How
'bout tho

[ more ]  [ reply ]

This behaviour refers to version 1.0.3

It was changed and fixed two months ago.

Is there still known potential XSS issue in the current version 1.0.6.?

WoltLab offers different ways to contact with relation to a security vulnerability:

Mail to woltlab (at) woltlab de.

WoltLab Community F

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

With the passing of "The Jackal" I was looking in the DEF CON archives for
an
old picture of him at the first DEF CON, and came across the first con
announcement.

To commemorate both I decided to announce DEF CON 16 in the same style. How
'bout those

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDVSA-2008:084
http://www.mandriva.com/security/
____________________________________________________________________

[ more ]  [ reply ]

Title: Incorrect input validation in PyString_FromStringAndSize()
leads to multiple buffer overflows
Date Discoverd: ??-April-2008
Date Reported: 08-April-2008
Date Patched: 09-April-2008
Date Disclosed: 11-April-2008
Criticality: High

Affected Products
-----------------

Python 2.5.2, ear

[ more ]  [ reply ]

Name:

Trillian 3.1.9.0 DTD File Buffer Overflow

Software:

Trillian 3.1.9.0

Vendor:

Cerulean Studios

Description:

Trillian 3.1.9.0. Basic(and maybe minor versions and other as Pro) is vulnerable to parser xml format in .dtd file type. The explotation requires that the user download

[ more ]  [ reply ]

#######################################################################

Luigi Auriemma

Application: HP OpenView Network Node Manager
http://www.openview.hp.com/products/nnm/
Versions: <= 7.53
Platforms: Windows (tested), Solaris, Linux, HP-UX
Bug

[ more ]  [ reply ]

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200804-11
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - -

[ more ]  [ reply ]

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200804-12
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - -

[ more ]  [ reply ]

WiKID wClient-PHP <= 3.0-2 Multiple XSS Vulnerabilities

Name Multiple Vulnerabilities in wClient-PHP
Systems Affected wClient-PHP 3.0-2 and earlier versions
Severity Medium
Impact (CVSSv2) Medium (5/10, vector: AV:N/AC:L/Au:N/C:C/I:N/A:N)
Vendor http://

[ more ]  [ reply ]

iDefense Security Advisory 04.09.08
http://labs.idefense.com/intelligence/vulnerabilities/
Apr 09, 2008

I. BACKGROUND

EMC DiskXtender is a data backup and migration suite. It consists of
several applications that are used to manage storing large quantities
of files across multiple storage devices.

[ more ]  [ reply ]

Borland InterBase 2007 "ibserver.exe" Buffer Overflow Vulnerability POC

Affected Software:
Borland InterBase 2007 Service Pack 2.
ibserver.exe version 8.0.0.123

Severity:
High

Summary:
There exists a vulnerability in Borland InterBase 2007.
The attacker who successfully explo

[ more ]  [ reply ]

iDefense Security Advisory 04.09.08
http://labs.idefense.com/intelligence/vulnerabilities/
Apr 09, 2008

I. BACKGROUND

EMC DiskXtender is a data backup and migration suite. It consists of
several applications that are used to manage storing large quantities
of files across multiple storage devices.

[ more ]  [ reply ]