Mail Index

• Thread Index

• Re: Office 10 applications & flashdrives can be used to browse restricted drives
  • From: Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
• Re: Office 10 applications & flashdrives can be used to browse restricted drives
  • From: Jay D. Dyson
• 7a69Adv#22 - UNIX unzip keep setuid and setgid files
  • From: Albert Puigsech Galicia
• Re: iDEFENSE Security Advisory 02.25.05: WU-FTPD File Globbing Denial of Service Vulnerability
  • From: Rainer Schöpf
• WASC-Articles: 'The Insecure Indexing Vulnerability - Attacks Against Local Search Engines' By Amit Klein
  • From: robert
• iDEFENSE Security Advisory 02.28.05: Mozilla Firefox and Mozilla Browser Out Of Memory Heap Corruption Design Error
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 02.28.05: KPPP Privileged File Descriptor Leak Vulnerability
  • From: iDEFENSE Labs
• [Hat-Squad] GFI L.N.S.S 5.0 Insecure Credential Storage
  • From: Hat-Squad Security Team
• [SECURITYREASON.COM] PostNuke SQL Injection 0.760-RC2=>x cXIb8O3.3
  • From: Maksymilian Arciemowicz
• [SECURITYREASON.COM] PostNuke Critical XSS 0.760-RC2=>x cXIb8O3.2
  • From: Maksymilian Arciemowicz
• [SECURITYREASON.COM] PostNuke Critical SQL Injection 0.760-RC2=>x cXIb8O3.1
  • From: Maksymilian Arciemowicz
• Re: iDEFENSE Security Advisory 02.28.05: Mozilla Firefox and Mozilla Browser Out Of Memory Heap Corruption Design Error
  • From: Miles Beck
• Firefox Software Update
  • From: Kai Howells
• Badblue HTTP Server Exploit
  • From: Miguel Tarascó Acuña
• Re: 7a69Adv#22 - UNIX unzip keep setuid and setgid files
  • From: John Simpson
• [ Postnuke all versions + pnphpbb <=1.2 sql injection - jocanor ]
  • From: JoCaNoR SeCuRiTy TeaM
• Re: BizMail 2.1 Spam Exploit
  • From: Jason Frisvold
• Re: 7a69Adv#22 - UNIX unzip keep setuid and setgid files
  • From: Han Boetes
• Re: iDEFENSE Security Advisory 02.28.05: Mozilla Firefox and Mozilla Browser Out Of Memory Heap Corruption Design Error
  • From: dveditz
• [SIG^2 G-TEC] RaidenHTTPD Server Buffer Overflow and CGI Source Disclosure Vulnerabilities
  • From: chewkeong
• Kernelpanik Labs Digest 2005-2
  • From: Kernelpanik Labs - Security Lists
• IObjectSafety and Internet Explorer
  • From: Shane Hird
• phpBB <= 2.0.12 UID Exploit
  • From: federico gonzales
• OpenServer 5.0.6 OpenServer 5.0.7 : A vulnerability in TCP
  • From: please_reply_to_security
• Re: Firefox Software Update
  • From: Michael Hampton
• 427BB profile.php XSS vulnerability.
  • From: Raven
• [KDE Security Advisory] kppp Privileged fd Leak Vulnerability
  • From: Dirk Mueller
• Re: Firefox Software Update
  • From: Matt Venzke
• Re: Firefox Software Update
  • From: Beau Henderson
• Software PBLang 4.63 delpm.php authentication vulnerability
  • From: Raven
• Re: Firefox Software Update
  • From: Adam Kane
• Re: Firefox Software Update
  • From: Kurt Seifried
• 427BB profile.php XSS vulnerability.
  • From: Raven
• Software PBLang 4.63 sendpm.php reply file read vulnerability
  • From: Raven
• Forumwa search.php xss vulnerability
  • From: Raven
• Re: [ Postnuke all versions + pnphpbb <=1.2 sql injection - jocanor ]
  • From: Maksymilian Arciemowicz
• [ Postnuke all versions + pnphpbb <=1.2 sql injection - jocanor ]
  • From: Jose Pedro Andres
• [ GLSA 200503-01 ] Qt: Untrusted library search path
  • From: Sune Kloppenborg Jeppesen
• Re: 7a69Adv#22 - UNIX unzip keep setuid and setgid files
  • From: devnull
• iDEFENSE Security Advisory 03.01.05: RealNetworks RealPlayer .smil Buffer Overflow Vulnerability
  • From: Michael Sutton
• PHP News <= 1.2.4 - Remote File Inclusion (VXSfx)
  • From: Filip Groszynski
• Re: Firefox Software Update
  • From: Rainer Duffner
• Re: 7a69Adv#22 - UNIX unzip keep setuid and setgid files
  • From: exon
• Re: Firefox Software Update
  • From: Stan Bubrouski
• [ GLSA 200503-03 ] Gaim: Multiple Denial of Service issues
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200503-04 ] phpWebSite: Arbitrary PHP execution and path disclosure
  • From: Thierry Carrez
• [ GLSA 200503-02 ] phpBB: Multiple vulnerabilities
  • From: Thierry Carrez
• Re: Firefox Software Update
  • From: Kai Howells
• [ GLSA 200502-33 ] MediaWiki: Multiple vulnerabilities
  • From: Thierry Carrez
• [USN-89-1] XML library vulnerabilities
  • From: Martin Pitt
• [USN-88-1] reportbug information disclosure
  • From: Martin Pitt
• [USN-86-1] cURL vulnerability
  • From: Martin Pitt
• [USN-87-1] Cyrus IMAP server vulnerability
  • From: Martin Pitt
• iDEFENSE Security Advisory 03.02.05: Computer Associates License Client/Server GCR Checksum Buffer Overflow
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 03.02.05: Computer Associates License Client/Server GCR Network Buffer Overflow
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 03.02.05: Computer Associates License Client/Server GETCONFIG Buffer Overflow
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 03.02.05: Computer Associates License Client PUTOLF Directory Traversal
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 03.02.05: Computer Associates License Client PUTOLF Buffer Overflow
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 03.02.05: Computer Associates License Client and Server Invalid Command Buffer Overflow
  • From: iDEFENSE Labs
• License Patches Are Now Available To Address Buffer Overflows
  • From: Williams, James K
• [CLA-2005:926] Conectiva Security Announcement - mod_python
  • From: Conectiva Updates
• RealOne Player / Real .WAV Heap Overflow File Format Vulnerability
  • From: Mark Litchfield
• Foxmail server "USER" command Multiple remote buffer overflow
  • From: Xin Ouyang
• [FLSA-2005:2314] Updated XFree86 packages fix security flaws
  • From: Dominic Hargreaves
• Vulnerabilities in Aura CMS
  • From: echo staff
• [ GLSA 200503-05 ] xli, xloadimage: Multiple vulnerabilities
  • From: Thierry Carrez
• Re: Firefox Software Update
  • From: Gilles DEMARTY
• Golden Ftp server 1.29 Username remote Buffer Overflow
  • From: Carlos Ulver
• Security Advisory: Computalynx CProxy Server Multiple Remote Vulnerabilities
  • From: Kristof Philipsen
• Re: phpBB <= 2.0.12 UID Exploit
  • From: Nicob
• iDEFENSE Labs Releases IDA Sync
  • From: iDEFENSE Labs
• EEYE: Computer Associates License Manager Remote Vulnerabilities
  • From: Karl Lynn
• [SECURITY BULLETIN] SSRT4866 rev.0 MUP HP OpenVMS V6.x and V7.x privileged file access
  • From: Boren, Rich (SSRT)
• Advisory #08 - phpBB 2.0.13 Bad filtered in usercp_register.php
  • From: Paisterist
• [USN-90-1] Imagemagick vulnerability
  • From: Martin Pitt
• Re: SHA-1 broken
  • From: Pavel Machek
• Microsoft AntiSpyware Beta and Windows Scripting Host
  • From: Joe Stocker
• [XSS] paBox 1.6
  • From: Rift
• [CLA-2005:928] Conectiva Security Announcement - clamav
  • From: Conectiva Updates
• TYPO3 SQL Injection vunerabilitie
  • From: Fabian Becker
• Microsoft Antispyware Beta window docking issue
  • From: Jeroen van Rijn
• My-forum.org cookies vulnerability - data bug
  • From: Black Angel
• Re: Advisory #08 - phpBB 2.0.13 Bad filtered in usercp_register.php
  • From: vzmule
• [ GLSA 200503-06 ] BidWatcher: Format string vulnerability
  • From: Sune Kloppenborg Jeppesen
• Re: TYPO3 SQL Injection vunerabilitie
  • From: Dennis Shewmaker
• [ GLSA 200503-07 ] phpMyAdmin: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• Re: Microsoft Antispyware Beta window docking issue
  • From: Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
• PHP News <= 1.2.4 - Remote File Inclusion Exploit
  • From: mozako
• Re: TYPO3 SQL Injection vunerabilitie
  • From: Sebastian Wolfgarten
• RE: TYPO3 SQL Injection vunerabilitie
  • From: GulfTech Security Research
• GIMP gifload.exe GIF file (image width)*(image height)==0 DOS vulnerability
  • From: Hongzhen Zhou
• Download Center Lite (DCL) - Arbitrary File Inclusion (VXSfx)
  • From: Filip Groszynski
• Re: GIMP gifload.exe GIF file (image width)*(image height)==0 DOS vulnerability
  • From: Frank Denis (Jedi/Sector One)
• Re: TYPO3 SQL Injection vunerabilitie
  • From: Michael Stucki
• RE: Microsoft AntiSpyware Beta and Windows Scripting Host
  • From: alex cottle
• Re: TYPO3 3rd party extension (cmw_linklist) SQL Injection vunerability
  • From: Michael Shigorin
• Re: TYPO3 SQL Injection vunerabilitie
  • From: Michael Shigorin
• PHP Form Mail Script (2.3) - Arbitrary File Inclusion (VXSfx)
  • From: Filip Groszynski
• Re: TYPO3 SQL Injection vunerabilitie
  • From: Karsten Dambekalns
• -==phpBB 2.0.13 Full path disclosure==-
  • From: HaCkZaTaN
• [ GLSA 200503-08 ] OpenMotif, LessTif: New libXpm buffer overflows
  • From: Thierry Carrez
• [ GLSA 200503-09 ] xv: Filename handling vulnerability
  • From: Thierry Carrez
• [ GLSA 200503-10 ] Mozilla Firefox: Various vulnerabilities
  • From: Thierry Carrez
• Bypass of 22 Antivirus software with GDI+ bug exploit Mutations - part 2
  • From: Andrey Bayora
• phpBB 2.0.12 Session Handling Administrator Authentication Bypass -SIMPLIFIED-
  • From: Wesley aka PPC
• LOOKNMEET HTML INJECT EXPLOIT
  • From: Wesley aka PPC
• PaX privilege elevation security bug
  • From: pageexec
• MDKSA-2005:048 - Updated curl packages fix vulnerability
  • From: Mandrakelinux Security Team
• MDKSA-2005:049 - Updated gaim packages fix multiple vulnerabilities
  • From: Mandrakelinux Security Team
• MDKSA-2005:051 - Updated cyrus-imapd packages fix vulnerabilities
  • From: Mandrakelinux Security Team
• MDKSA-2005:052 - Updated kdegraphics packages fix vulnerabilities
  • From: Mandrakelinux Security Team
• MDKSA-2005:050 - Updated gftp packages fix vulnerability
  • From: Mandrakelinux Security Team
• Windows Server 2003 and XP SP2 LAND attack vulnerability
  • From: Dejan Levaja
• Re: Advisory #08 - phpBB 2.0.13 Bad filtered in usercp_register.php
  • From: Some one
• [ GLSA 200503-13 ] mlterm: Integer overflow vulnerability
  • From: Luke Macken
• [SECURITY] [DSA 691-1] New abuse packages fix local root exploit
  • From: Martin Schulze
• Remote Command Execution
  • From: Francisco Alisson
• [ GLSA 200503-11 ] ImageMagick: Filename handling vulnerability
  • From: Thierry Carrez
• [ GLSA 200503-12 ] Hashcash: Format string vulnerability
  • From: Thierry Carrez
• [FLSA-2005:1748] Updated subversion packages fix security issues
  • From: Marc Deslauriers
• [Hat-Squad] Computer-Associates, License Manager POC Exploit
  • From: Hat-Squad Security Team
• [FLSA-2005:2344] Updated php packages fix security issues
  • From: Marc Deslauriers
• Real Realplayer 10 .smil local buffer overflow POC
  • From: nolimit bugtraq
• CIRT.DK Advisory - SafeNet Inc Sentinel License Manager 7.2.0.2 Buffer Overflow
  • From: CIRT Advisory
• Re: [Full-Disclosure] Bypass of 22 Antivirus software with GDI+ bug exploit Mutations - part 2
  • From: Trog
• [USN-91-1] EXIF library vulnerability
  • From: Martin Pitt
• phpBB 2.0.12 Session Handling Administrator Authentication Bypass Exploit
  • From: thephuket
• thoughts and a possible solution on homograph attacks
  • From: Michael Roitzsch
• Re: phpBB 2.0.12 Session Handling Administrator Authentication Bypass -SIMPLIFIED-
  • From: Matthias
• Gene6 FTP Server Local Privilege Escalation Vulnerability
  • From: Sowhat
• Re: GIMP gifload.exe GIF file (image width)*(image height)==0 DOS vulnerability
  • From: Hongzhen Zhou
• Lingo VoIP ATA / UTStarcom iAN-02EX remote access vulnerability
  • From: Atom Smasher
• Remote Testing SocialMPN Remote File Inclusion by y3dips
  • From: echo staff
• PHP Form Mail Script <= 2.3 arbitrary file inclusion exploit exploit
  • From: mozako
• vBulletin Worm - perl.Santy variant
  • From: The Prohacker
• phpBB 2.0.13 - user level exploit
  • From: Some one
• PHP-FUSION 5.* XSS VULNERABILITY
  • From: FireSt0rm
• drone armies C&C report - Feb/2005
  • From: Gadi Evron
• Re: phpGiftReq SQL Injection
  • From: Ryan Walberg
• See-security advisory: Trillian Basic 3.0 PNG Processing Buffer overflow
  • From: tal zeltzer
• - Argeniss - Oracle Database Server Directory transversal
  • From: Cesar
• [CLA-2005:930] Conectiva Security Announcement - kernel
  • From: Conectiva Updates
• PHP mcNews <= 1.3 arbitrary file inclusion (VXSfx)
  • From: Filip Groszynski
• Re: Windows Server 2003 and XP SP2 LAND attack vulnerability
  • From: Jon O.
• phpWebLog <= 0.5.3 arbitrary file inclusion (VXSfx)
  • From: Filip Groszynski
• [USN-92-1] LessTif vulnerabilities
  • From: Martin Pitt
• [ GLSA 200503-14 ] KDE dcopidlng: Insecure temporary file creation
  • From: Sune Kloppenborg Jeppesen
• Re: [ GLSA 200503-12 ] Hashcash: Format string vulnerability
  • From: Hubert Chan
• UnixWare 7.1.4 : Samba multiple security issues
  • From: please_reply_to_security
• Hosting Controller Multiple Unauthenticated information disclose
  • From: small mouse
• Re: thoughts and a possible solution on homograph attacks
  • From: Michael Silk
• Re: thoughts and a possible solution on homograph attacks
  • From: Kevin Day
• Re: thoughts and a possible solution on homograph attacks
  • From: James Youngman
• Re: phpBB 2.0.12 Session Handling Administrator Authentication Bypass Exploit
  • From: comsatcat
• Re: thoughts and a possible solution on homograph attacks
  • From: Thomas Wana
• UnixWare 7.1.4 : squid updated package fixes several security issues
  • From: please_reply_to_security
• Re: thoughts and a possible solution on homograph attacks
  • From: Benjamin Franz
• RE: thoughts and a possible solution on homograph attacks
  • From: Scovetta, Michael V
• iDEFENSE Labs Releases IDA RPC Enumerator
  • From: iDEFENSE Labs
• Re: Gene6 FTP Server Local Privilege Escalation Vulnerability
  • From: Matthieu
• Re: phpBB 2.0.12 Session Handling Administrator Authentication Bypass Exploit
  • From: comsatcat
• Multiples Vulnerabilities
  • From: Francisco Alisson
• Re: [Full-Disclosure] Bypass of 22 Antivirus software with GDI+ bug exploit Mutations - part 2
  • From: Andrey Bayora
• PE Multiple Remote Access Validation Vulnerabilities (Participate Systems Inc. / Outstart Inc.)
  • From: Altrus Wollesen
• Re: Remote Command Execution
  • From: BoI base
• RE: Avaya IP Office Phone Manager - Sensitive Information Cleartext Vulnerability
  • From: Walton, John Michael (John)
• [SCAN Associates Security Advisory] xoops 2.0.9.2 and below weak file extension validation
  • From: pokley
• Re: thoughts and a possible solution on homograph attacks
  • From: Dmitry Yu. Bolkhovityanov
• Re: Lingo VoIP ATA / UTStarcom iAN-02EX remote access vulnerability
  • From: Atom Smasher
• Re: thoughts and a possible solution on homograph attacks
  • From: Dmitry Yu. Bolkhovityanov
• Re: Remote Command Execution
  • From: BoI base
• Re: Windows Server 2003 and XP SP2 LAND attack vulnerability
  • From: Patrick Chipman
• Re: Windows Server 2003 and XP SP2 LAND attack vulnerability
  • From: paul14075
• Re: Windows Server 2003 and XP SP2 LAND attack vulnerability
  • From: Grndahl
• Re: Windows Server 2003 and XP SP2 LAND attack vulnerability
  • From: Miroslav Kubik
• Re: thoughts and a possible solution on homograph attacks
  • From: Denis Jedig
• Re: thoughts and a possible solution on homograph attacks
  • From: Michael Roitzsch
• Re: thoughts and a possible solution on homograph attacks
  • From: Mike Nice
• [CLA-2005:931] Conectiva Security Announcement - squid
  • From: Conectiva Updates
• Multiple vulnerabilities in paFileDB
  • From: sp3x
• ArGoSoft FTP Server 1.4.2.8 Buffer Overflow
  • From: CorryL
• failles dans ProjectBB v0.4.5.1
  • From: [hacktinium]@securityfocus.com@www.securityfocus.com
• [SECURITY] [DSA 692-1] New kppp packages fix privileged file descriptor leak
  • From: Martin Schulze
• Re: Windows Server 2003 and XP SP2 LAND attack vulnerability
  • From: caldcv
• Re: houghts and a possible solution on homograph attacks
  • From: Sven Putteneers
• Re: Windows Server 2003 and XP SP2 LAND attack vulnerability
  • From: killer_loop@xxxxxxxx
• Ethereal remote buffer overflow
  • From: LSS Security
• [FLSA-2005:2404] Updated less package fixes security issue
  • From: Marc Deslauriers
• [USN-93-1] Squid vulnerability
  • From: Martin Pitt
• RE: Ethereal remote buffer overflow - addon
  • From: LSS Security
• Re: Ethereal remote buffer overflow
  • From: Gerald Combs
• Re: Ethereal remote buffer overflow
  • From: Diego Giagio
• [USN-94-1] Perl vulnerability
  • From: Martin Pitt
• [Security Bulletin] SSRT4891 rev.0 HP Tru64 UNIX message queue local denial of service (DoS)
  • From: Boren, Rich (SSRT)
• Update: MS05-011 EEYE: Windows SMB Client Transaction Response Handling Vulnerability
  • From: Marc Maiffret
• [Updated][FLSA-2005:2344] Updated php packages fix security issues
  • From: Marc Deslauriers
• Multiple AV Vendor Incorrect CRC32 Bypass Vulnerability.
  • From: Bipin Gautam
• XCode 1.5 and distcc 2.x Exploit
  • From: Ray Slakinski
• iDEFENSE Security Advisory 03.10.05: Ipswitch Collaboration Suite IMAP EXAMINE Buffer Overflow Vulnerability
  • From: iDEFENSE Labs
• Wfsection 1.07 vulnerabilities
  • From: kreon
• RE: Windows Server 2003 and XP SP2 LAND attack vulnerability
  • From: Detection Services - IS Security
• RE: Windows Server 2003 and XP SP2 LAND attack vulnerability
  • From: Evans, Arian
• iDownload/iSearch responds to Spyware Critics
  • From: Paul Laudanski
• Re: houghts and a possible solution on homograph attacks
  • From: Nick FitzGerald
• Re: Lingo VoIP ATA / UTStarcom iAN-02EX remote access vulnerability
  • From: Atom Smasher
• UBB.threads 6 SQL Injection
  • From: kre0n
• Security Masters Dojo
  • From: Dragos Ruiu
• Re: Lingo VoIP ATA / UTStarcom iAN-02EX remote access vulnerability
  • From: Ryan Cummings
• Re: Lingo VoIP ATA / UTStarcom iAN-02EX remote access vulnerability
  • From: Atom Smasher
• [SECURITYREASON.COM][phpBB 2.0.13 SQL error in session cXIb8O3.8]
  • From: Maksymilian Arciemowicz
• Re: Multiple AV Vendor Incorrect CRC32 Bypass Vulnerability.
  • From: secure
• [ GLSA 200503-16 ] Ethereal: Multiple vulnerabilities
  • From: Luke Macken
• [SECURITYREASON.COM] SQL injection and XSS in paFileDB
  • From: SecurityReason
• [badroot.org] The Includer remote commands execution exploit
  • From: Federico Ozak
• PhotoPost PHP 5.0 RC3, and later, multiple vulnerabilities
  • From: Igor Franchuk
• [badroot.org] The Includer remote commands execution exploit
  • From: mozako
• Mysql CREATE FUNCTION mysql.func table arbitrary library injection
  • From: Stefano Di Paola
• summercon looking for speakers
  • From: louis
• Re: Thoughts and a possible solution on homograph attacks
  • From: Paul Smith
• Mysql CREATE FUNCTION libc arbitrary code execution.
  • From: Stefano Di Paola
• [ GLSA 200503-15 ] X.org: libXpm vulnerability
  • From: Matthias Geerdsen
• RE: Windows Server 2003 and XP SP2 LAND attack vulnerability
  • From: Daniel Cross
• PlatinumFTP 1.0.18 remote DoS
  • From: ports
• [SECURITYREASON.COM] Mass Full Path Disclosure in paFileDB
  • From: SecurityReason
• Virginity Security Advisory 2005-001 : Hola CMS - File destruction and System access
  • From: Virginity Security
• RE: Windows Server 2003 and XP SP2 LAND attack vulnerability
  • From: Miguel Angel Rodríguez Jódar
• aeNovo Database Content Disclosure Vulnerability
  • From: farhad koosha
• KnowledgeBase
  • From: Francisco Alisson
• Av issues
  • From: Bipin Gautam
• Re: [SECURITYREASON.COM] PostNuke Critical SQL Injection 0.760-RC2=>x cXIb8O3.1
  • From: Linux php
• Re: Windows Server 2003 and XP SP2 LAND attack vulnerability
  • From: exon
• Re: iDownload/iSearch responds to Spyware Critics
  • From: bkfsec
• Ethereal remote buffer overflow #2
  • From: LSS Security
• [ GLSA 200503-17 ] libexif: Buffer overflow vulnerability
  • From: Luke Macken
• [SECURITY] [DSA 662-2] New squirrelmail package fixes regression
  • From: Martin Schulze
• [CLA-2005:933] Conectiva Security Announcement - gaim
  • From: Conectiva Updates
• SUSE Security Announcement: openslp (SUSE-SA:2005:015)
  • From: Sebastian Krahmer
• [HAT-SQUAD] SafeNet Sentinel LM, UDP License Manager Exploit
  • From: class 101
• [SECURITY] [DSA 693-1] New luxman packages fix local root exploit
  • From: Martin Schulze
• LimeWire Gnutella client two vulnerabilities
  • From: Kevin Walsh
• New Version of WinBlox is Available
  • From: Liu Die Yu
• [ZH2005-02SA] Insecure tmp file creation in Wine
  • From: Giovanni Delvecchio
• Master RPC program number data base (/etc/rpc)
  • From: Eilon Gishri
• SimpGB SQL Injection Vulnerability
  • From: Alexander Müller
• [XSS] paBox 2.0
  • From: Rift
• ...::: hotforum.nl XSS exploit :::...
  • From: Rebyte Security
• Ethereal 0.10.9 and below remote root exploit
  • From: Diego Giagio
• 3 XSS Vulnerabilities in Phorum <= 5.0.14
  • From: Jon Oberheide
• [SECURITYREASON.COM] phpAdsNew 2.0.4-pr1 Multiple vulnerabilities cXIb8O3.9
  • From: Maksymilian Arciemowicz
• YaBB2 rc1 XSS
  • From: alireza hassani
• "Drop to STARTUP Folder II" published on 2005/02/08
  • From: Liu Die Yu
• DMA[2005-0310a] - 'Frank McIngvale LuxMan buffer overflow'
  • From: Kevin Finisterre
• iDEFENSE Security Advisory 03.14.05: MySQL MaxDB Web Agent Multiple Denial of Service Vulnerabilities
  • From: iDEFENSE Labs
• Not SQL injection and XSS in paFileDB?
  • From: saudi linux
• RE: Av issues
  • From: David Webster
• html code include in phpnuke news crash IE 6
  • From: WoRmZ Web
• PlantinumFTP server <= 1.0.18 Remote DOS exploit
  • From: Exoduks
• Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, and can also lead to bypass AV scanning
  • From: Dr. Peter Bieringer
• phpbb <= 2.0.12 uid vuln + admin_styles.php php code injection exploit
  • From: bad boy
• Re: html code include in phpnuke news crash IE 6
  • From: Berend-Jan Wever
• Re: Av issues
  • From: Thierry Zoller
• phpbb cookie admin access
  • From: pureone
• SAV9 Functionality Hole - misses virus files
  • From: me3
• Re: PlantinumFTP server <= 1.0.18 Remote DOS exploit
  • From: Gary H. Jones II
• Few remote bugs in zPanel
  • From: Mik-
• Virginity Security Advisory 2005-002 : Hola CMS - Another File destruction and System access
  • From: Virginity Security
• [ISR] - Novell iChain Mini FTP Server Valid User Disclosure Vulnerability
  • From: Francisco Amato
• [ISR] - Novell iChain Mini FTP Server Unauthorized Remote Path Disclosure Vulnerability
  • From: Francisco Amato
• [ISR] Insecure communication and Reproduce the Session authentication
  • From: Francisco Amato
• Re: SAV9 Functionality Hole - misses virus files
  • From: Harry Hoffman
• Denial of Service Vulnerability in MySQL Server for Windows
  • From: Luca Ercoli
• Re: Av issues
  • From: Yves Belle-Isle
• [ GLSA 200503-18 ] Ringtone Tools: Buffer overflow vulnerability
  • From: Luke Macken
• [USN-95-1] Linux kernel vulnerabilities
  • From: Martin Pitt
• UPDATE: [ GLSA 200501-38 ] Perl: rmtree and DBI tmpfile vulnerabilities
  • From: Thierry Carrez
• [ISR] - Novell iChain Mini FTP Server Bruteforce Problem
  • From: Francisco Amato
• RE: SAV9 Functionality Hole - misses virus files
  • From: Polazzo Justin
• Re: SAV9 Functionality Hole - misses virus files
  • From: Ben Blakely
• Re: [Full-disclosure] Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, and can also lead to bypass AV scanning
  • From: Rodrigo Barbosa
• Re: [Full-disclosure] Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, and can also lead to bypass AV scanning
  • From: Dr. Peter Bieringer
• Re: [Full-disclosure] Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, and can also lead to bypass AV scanning
  • From: bipin gautam
• Re: Thoughts and a possible solution on homograph attacks
  • From: Riccardo Murri
• GoodTech Telnet Server Buffer Overflow Vulnerability
  • From: Komrade
• RE: SAV9 Functionality Hole - misses virus files
  • From: Dewyngaert Brian Contr ANG/C4
• Re: Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, and can also lead to bypass AV scanning
  • From: Dr. Peter Bieringer
• Re: Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, and can also lead to bypass AV scanning
  • From: Thierry Zoller
• Re: Thoughts and a possible solution on homograph attacks
  • From: Valdis . Kletnieks
• MDKSA-2005:053 - Updated ethereal packages fix multiple vulnerabilities
  • From: Mandrakelinux Security Team
• MDKSA-2005:054 - Updated cyrus-sasl packages fix vulnerability
  • From: Mandrakelinux Security Team
• MDKSA-2005:055 - Updated openslp packages fix multiple vulnerabilities
  • From: Mandrakelinux Security Team
• ADVISORY: DataRescue Interactive Disassembler Pro Debugger Format String Vulnerability
  • From: Piotr Bania
• Multiple KDE Security Advisories (2005-03-16)
  • From: Waldo Bastian
• PlatinumFTPserver format string vulnerability ( IHSTeam )
  • From: c0d3r
• SUSE Security Announcement: multiple Mozilla Firefox vulnerabilities (SUSE-SA:2005:016)
  • From: Marcus Meissner
• MDKSA-2005:056 - Updated koffice packages fix vulnerabilities on 64 bit platforms
  • From: Mandrakelinux Security Team
• Re: Thoughts and a possible solution on homograph attacks
  • From: Riccardo Murri
• MDKSA-2005:057 - Updated gnupg packages fix vulnerability
  • From: Mandrakelinux Security Team
• Re: Thoughts and a possible solution on homograph attacks
  • From: khockenb
• [CLA-2005:934] Conectiva Security Announcement - kdenetwork
  • From: Conectiva Updates
• [USN-97-1] libxpm vulnerability
  • From: Martin Pitt
• Re: [Full-disclosure] Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, and can also lead to bypass AV scanning
  • From: Rodrigo Barbosa
• SAV9 Functionality Hole - misses virus files
  • From: secure
• ASPjar Tell-a-Friend
  • From: farhad koosha
• Servers Alive: Local Privilege Escalation
  • From: Michael Starks
• [ GLSA 200503-20 ] curl: NTLM response buffer overflow
  • From: Sune Kloppenborg Jeppesen
• RE: SAV9 Functionality Hole - misses virus files
  • From: batchelornpe
• [ GLSA 200503-19 ] MySQL: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• [USN-96-1] mySQL vulnerabilities
  • From: Martin Pitt
• RE: Denial of Service Vulnerability in MySQL Server for Windows
  • From: BugTrap
• Re: Av issues
  • From: bipin gautam
• Re: GoodTech Telnet Server Buffer Overflow Vulnerability [EXPLOIT]
  • From: cybertronic
• LLSSRV Clarifications <Immunity>
  • From: Dave Aitel
• MDKSA-2005:059 - Updated evolution packages fix crasher
  • From: Mandrakelinux Security Team
• [ GLSA 200503-21 ] Grip: CDDB response overflow
  • From: Luke Macken
• See-security Advisory: Format string vulnerability in MailEnable 1.8
  • From: a a
• [CLA-2005:937] Conectiva Security Announcement - cyrus-imapd
  • From: Conectiva Updates
• Re: [Full-disclosure] Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, and can also lead to bypass AV scanning
  • From: Tomasz Papszun
• Windows 2000 GDI32.DLL GetEnhMetaFilePaletteEntries() API specially crafted EMF file DOS vulnerability
  • From: Hongzhen Zhou
• XSS in ACS blog
  • From: farhad koosha
• PHP mcNews arbitrary file inclusion
  • From: Jonathan Whiteley
• MDKSA-2005:058 - Updated kdelibs packages fix multiple vulnerabilities
  • From: Mandrakelinux Security Team
• Re: PlatinumFTPserver format string vulnerability ( IHSTeam )
  • From: Gary H. Jones II
• Another includer.cgi problem?
  • From: cout
• [USN-98-1] OpenSLP vulnerabilities
  • From: Martin Pitt
• LLSSRV Redux
  • From: Dave Aitel
• Kevin Walsh: LimeWire Gnutella client two vulnerabilities
  • From: Ill will
• Linux ISO9660 handling flaws
  • From: Michal Zalewski
• Re: Windows Security Checklists - 10 Parts
  • From: Paul Laudanski
• Cain & Abel PSK Sniffer Heap overflow
  • From: Gary O'leary-Steele
• Re: [Full-disclosure] Social Engineering: You Have Been A Victim
  • From: Ron DuFresne
• Security Contact at RSA?
  • From: Gary O'leary-Steele
• [PersianHacker.NET 200503-09]PHPOpenChat v3.x XSS Multiple Vulnerability
  • From: PersianHacker Team
• Social Engineering: You Have Been A Victim
  • From: Paul Laudanski
• myPHP Forum v1, 2 & 3
  • From: Terencentanio Enache
• possible SQL injection in Subdreamer
  • From: GHC team
• Re: Linux ISO9660 handling flaws
  • From: Dan Yefimov
• Re: SAV9 Functionality Hole - misses virus files
  • From: patrickwm71
• [USN-99-1] PHP4 vulnerabilities
  • From: Martin Pitt
• runcms installation path
  • From: Majid NT
• runcms highlight.php hole
  • From: Majid NT
• PHP-Post Exploit
  • From: Terencentanio Enache
• Java Web Start argument injection vulnerability
  • From: Jouko Pynnonen
• [phpbb <= 2.0.13 full path disclosure & directory listing]
  • From: JoCaNoR SeCuRiTy TeaM
• Re: SAV9 Functionality Hole - misses virus files
  • From: secure
• IceCast up to v2.20 multiple vulnerabilities
  • From: Patrick
• RE: [phpbb <= 2.0.13 full path disclosure & directory listing]
  • From: Paul S. Owen
• [ GLSA 200503-22 ] KDE: Local Denial of Service
  • From: Sune Kloppenborg Jeppesen
• Ciamos Installation path(IHS)
  • From: Majid NT
• Ciamos Highlight.php Security Hole(IHS)
  • From: Majid NT
• [PersianHacker.NET 200503-10]PHP-Fusion v5.01 Html Injection Vulnerability
  • From: PersianHacker Team
• OllyDbg long process Module debug Vulnerability
  • From: ATmaCA ATmaCA
• [ GLSA 200503-23 ] rxvt-unicode: Buffer overflow
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200503-24 ] LTris: Buffer overflow
  • From: Sune Kloppenborg Jeppesen
• Symantec Antivirus client locally created scheduled scan is not running if the local console is logged off
  • From: Eitan Caspi
• Re: Few remote bugs in zPanel
  • From: Kris Anderson
• [ GLSA 200503-26 ] Sylpheed, Sylpheed-claws: Message reply overflow
  • From: Luke Macken
• -==CoolForum Path Disclosure & Possible SQL Injection==-
  • From: HaCkZaTaN
• [CLA-2005:940] Conectiva Security Announcement - curl
  • From: Conectiva Updates
• 2 vulnerabilities in BetaParticle
  • From: farhad koosha
• TSL-2005-0009 - multi
  • From: Trustix Security Advisor
• [SECURITY] [DSA 695-1] New xli packages fix several vulnerabilities
  • From: Martin Schulze
• Fw: [PersianHacker.NET 200503-10]PHP-Fusion v5.01 Html Injection Vulnerability
  • From: Sheldon King
• Fw: [PersianHacker.NET 200503-10]PHP-Fusion v5.01 Html Injection Vulnerability
  • From: Sheldon King
• -==PVDasm Long Name Debug Vulnerability==-
  • From: HaCkZaTaN
• Re: [PersianHacker.NET 200503-10]PHP-Fusion v5.01 Html Injection Vulnerability
  • From: Sheldon King
• phpMyFamily 1.4.0 SQL vulnerabilities
  • From: kreon
• Re: Thoughts and a possible solution on homograph attacks
  • From: Duncan Simpson
• [ GLSA 200503-27 ] Xzabite dyndnsupdate: Multiple vulnerabilities
  • From: Thierry Carrez
• [ GLSA 200503-25 ] OpenSLP: Multiple buffer overflows
  • From: Thierry Carrez
• Details of Sybase ASE bugs withheld
  • From: NGSSoftware Insight Security Research
• phpMyFamily 1.4.0 SQL vulnerabilities
  • From: kre0n
• New Whitepaper: Anti Brute Force Resource Metering
  • From: Gunter Ollmann (NGS)
• Re: [VulnWatch] Details of Sybase ASE bugs withheld
  • From: Halvar Flake
• Re: [VulnWatch] Details of Sybase ASE bugs withheld
  • From: David Litchfield
• iDEFENSE Security Advisory 03.21.05: Mac OS X CF_CHARSET_PATH Buffer Overflow Vulnerability
  • From: iDefense Customer Service
• Re: [VulnWatch] Details of Sybase ASE bugs withheld
  • From: sean
• Re: [ISN] How To Save The Internet
  • From: Jason Coombs
• SecurityForest Exploitation Framework Beta has been released!
  • From: Alon Swartz
• Re: Thoughts and a possible solution on homograph attacks
  • From: Nick FitzGerald
• MDKSA-2005:060 - Updated MySQL packages fix multiple vulnerabilities
  • From: Mandrakelinux Security Team
• Kayako eSupport Cross Site Scripting
  • From: GulfTech Security Research
• Mac OSX[CF_CHARSET_PATH]: local root exploit.
  • From: Vade 79
• RUXCON 2005 Call for Papers
  • From: RUXCON Call for Papers
• Re: Symantec Antivirus client locally created scheduled scan is not running if the local console is logged off
  • From: BoneMachine
• [SECURITY] [DSA 696-1] New perl packages fix privilege escalation
  • From: Martin Schulze
• Nortel VPN Client Issue: Clear-text password stored in memory
  • From: Roy Hills
• Possible windows+python bug
  • From: liquid
• [ Positive Technologies #SA] Phorum "location" HTTP Response Splitting Vulnerability
  • From: Alexander Anisimov
• Re: New Whitepaper: Anti Brute Force Resource Metering
  • From: Amit Klein (AKsecurity)
• Black Hat Briefings & Trainings: Registration now open!
  • From: Jeff Moss
• osCommerce File Manager Directory Traversal Vulnerability
  • From: Megasky
• RE: [VulnWatch] Details of Sybase ASE bugs withheld
  • From: Marchand, Tom
• RE: [ISN] How To Save The Internet
  • From: David Gillett
• Re: [VulnWatch] Details of Sybase ASE bugs withheld
  • From: sean
• RE: [VulnWatch] Details of Sybase ASE bugs withheld
  • From: Chris Wysopal
• Re: Possible windows+python bug
  • From: Neil Schemenauer
• RE: [VulnWatch] Details of Sybase ASE bugs withheld
  • From: Marchand, Tom
• Re: Possible windows+python bug
  • From: azurIt
• root-equivalent groups
  • From: psz
• Re: [ISN] How To Save The Internet
  • From: Jason Coombs
• Re: Re: Symantec Antivirus client locally created scheduled scan is not running if the local console is logged off
  • From: Eitan Caspi
• Security Development Lifecycle Whitepaper Available
  • From: Michael Howard
• [SIG^2 G-TEC] SurgeMail Webmail Attachment Upload and XSS Vulnerabilities
  • From: chewkeong
• Re: [VulnWatch] Details of Sybase ASE bugs withheld
  • From: Simple Nomad
• Re: New Whitepaper: Anti Brute Force Resource Metering
  • From: Peter J. Holzer
• RE: [VulnWatch] Details of Sybase ASE bugs withheld
  • From: http-equiv@xxxxxxxxxx
• Re: [VulnWatch] Details of Sybase ASE bugs withheld
  • From: Peter J. Holzer
• Re: Possible windows+python bug
  • From: liquid
• Backdoors in AS/400 emulations allow the server to attack connected PC workstations
  • From: Shalom Carmel
• Re: Details of Sybase ASE bugs withheld
  • From: Jay Libove
• SUSE Security Announcement: ImageMagick problems (SUSE-SA:2005:017)
  • From: Marcus Meissner
• Notacon: Apr. 8-10, 2005 in Cleveland, OH
  • From: Froggy
• Re: Possible windows+python bug
  • From: Kinnell
• Re: [ISN] How To Save The Internet
  • From: Thor (Hammer of God)
• Interspire ArticleLive 2005 (php version) is vulnerable to XSS
  • From: mircia mircia
• Re: New Whitepaper: Anti Brute Force Resource Metering
  • From: Gunter Ollmann
• Re: osCommerce File Manager Directory Traversal Vulnerability
  • From: Aikanáro Calaelen
• Vortex Portal
  • From: Francisco Alisson
• RE: Possible windows+python bug
  • From: Peter Oswald
• RE: Java Web Start argument injection vulnerability
  • From: James C Slora Jr
• [SECURITYREASON.COM] phpSysInfo 2.3 Multiple vulnerabilities cXIb8O3.11
  • From: Maksymilian Arciemowicz
• RE: [ISN] How To Save The Internet
  • From: Arndt . WA
• RE: Details of Sybase ASE bugs withheld
  • From: Evans, Arian
• Re: [ISN] How To Save The Internet
  • From: Derek Martin
• RE: Re: Symantec Antivirus client locally created scheduled scan is not running if the local console is logged off
  • From: Scrimsher, John P
• Multiple vulnerabilities in Topic Calendar 1.0.1 for phpBB
  • From: Alberto Trivero
• Black Hat Briefings & Trainings: Registration now open!
  • From: Jeff Moss
• Oracle Reports Server 10g Vulnerable to XSS
  • From: Paolo Paolo
• Hashcash in mail (was: New Whitepaper: Anti Brute Force Resource Metering)
  • From: Peter J. Holzer
• Firescrolling 2 [Firefox 1.0.1]
  • From: mikx
• SUSE Security Announcement: several kernel security problems (SUSE-SA:2005:018)
  • From: Marcus Meissner
• SUSE Security Announcement: MySQL vulnerabilities (SUSE-SA:2005:019)
  • From: Marcus Meissner
• Re: New Whitepaper: Anti Brute Force Resource Metering
  • From: Jason W
• [USN-100-1] cdrecord vulnerability
  • From: Martin Pitt
• [USN-99-2] Fixed php4 packages for USN-99-1
  • From: Martin Pitt
• Secure Science issues preview of their upcoming block cipher
  • From: BugTraq
• Re: Firescrolling 2 [Firefox 1.0.1]
  • From: John Madden
• [ GLSA 200503-29 ] GnuPG: OpenPGP protocol attack
  • From: Thierry Carrez
• [ GLSA 200503-28 ] Sun Java: Web Start argument injection vulnerability
  • From: Thierry Carrez
• LogicLibrary BugScan VSR,Trillian 2.0, 3.0 and 3.1
  • From: Matt Hargett
• Which anti-spyware cleaner is the best?
  • From: Paul Laudanski
• Security Flaw with Digital signatures in Microsoft Outlook
  • From: Roberto Franceschetti
• Re: New Whitepaper: Anti Brute Force Resource Metering
  • From: Joachim Schipper
• Re: Secure Science issues preview of their upcoming block cipher
  • From: Adam Shostack
• phpMyDirectory 10.1.3-rel Cross site scripting
  • From: mircia mircia
• RX250305 - OpenMosixView : Multiple Race conditions - advisory and exploit
  • From: rexolab
• Re: New Whitepaper: Anti Brute Force Resource Metering
  • From: Amit Klein (AKsecurity)
• smail remote and local root holes
  • From: sean
• Netcomm 1300NB DSL Modem Denial of Service
  • From: Chris Rock
• Re: Secure Science issues preview of their upcoming block cipher
  • From: Jerrold Leichter
• Re: Secure Science issues preview of their upcoming block cipher
  • From: David Covin
• RE: Security Flaw with Digital signatures in Microsoft Outlook
  • From: Adrian Floarea
• Re: [bugtraq] Security Flaw with Digital signatures in Microsoft Outlook
  • From: Erwann ABALEA
• [FLSA-2005:2155] Updated sharutils package fixes security issues
  • From: Marc Deslauriers
• [FLSA-2005:2129] Updated mysql packages fix security issues
  • From: Marc Deslauriers
• [FLSA-2005:2268] Updated spamassassin package fixes security issues
  • From: Marc Deslauriers
• Re: [FLSA-2005:2129] Updated mysql packages fix security issues
  • From: Ventsislav Genchev
• Re: [FLSA-2005:2129] Updated mysql packages fix security issues
  • From: Ventsislav Genchev
• [ GLSA 200503-30 ] Mozilla Suite: Multiple vulnerabilities
  • From: Thierry Carrez
• [ GLSA 200503-33 ] IPsec-Tools: racoon Denial of Service
  • From: Matthias Geerdsen
• Re: Secure Science issues preview of their upcoming block cipher
  • From: Ralf-Philipp Weinmann
• TCP timestamp & advanced fingerprinting
  • From: Erwan Arzur
• ZH2005-03SA -- multiple vulnerabilities in NukeBookmarks .6
  • From: Gerardo Astharot Di Giacomo
• AS/400 LDAP user accounts disclosure
  • From: Shalom Carmel
• QuickTime malformed JPEG buffer overflow
  • From: liquid
• RE: [bugtraq] Security Flaw with Digital signatures in Microsoft Outlook
  • From: Lyal Collins
• Re: New Whitepaper: Anti Brute Force Resource Metering
  • From: Luca Berra
• File inclusion and XSS vulnerability in E-Store Kit-2 PayPal Edition
  • From: dcrab
• Re: Security Flaw with Digital signatures in Microsoft Outlook
  • From: Anthony G. Atkielski
• Re: Secure Science issues preview of their upcoming block cipher
  • From: devnull
• Re: smail remote and local root holes (no, not really ;-)
  • From: Greg A. Woods
• RE: TCP timestamp & advanced fingerprinting
  • From: Bruce Klein
• Brute-Force scanning the entire 32-bit IP space using Javascript.
  • From: cyber_flash
• Re: smail remote and local root holes (no, really ;-)
  • From: sean
• FreeBSD Security Advisory FreeBSD-SA-05:01.telnet
  • From: FreeBSD Security Advisories
• iDEFENSE Security Advisory 03.28.05: Multiple Telnet Client env_opt_add() Buffer Overflow Vulnerability
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 03.28.05: Multiple Telnet Client slc_add_reply() Buffer Overflow Vulnerability
  • From: iDEFENSE Labs
• [CLA-2005:942] Conectiva Security Announcement - ethereal
  • From: Conectiva Updates
• [ GLSA 200503-34 ] mpg321: Format string vulnerability
  • From: Sune Kloppenborg Jeppesen
• Buffer-overflow in Tincat 2 minor than 2.0.28 (Sacred, Settlers 5 and others)
  • From: Luigi Auriemma
• Re: ZH2005-03SA -- multiple vulnerabilities in NukeBookmarks .6
  • From: Paul Laudanski
• Multiple sql injection, and xss vulnerabilities in Vladersoft Shopping Cart v.3.0
  • From: dcrab
• Multiple Sql injection, and multiple XSS vulnerabilities in Photopost PHP Pro Photo Gallery Software.
  • From: dcrab
• local root security bug in linux >= 2.4.6 <= 2.4.30-rc1 and 2.6.x.y <= 2.6.11.5
  • From: advisories
• Multiple Sql injection, and multiple XSS vulnerabilities in Easy Community Management System Forum (E-XOOPS)
  • From: dcrab
• Re: smail remote and local root holes (really, it is exploitable)
  • From: sean
• [USN-101-1] telnet vulnerabilities
  • From: Martin Pitt
• Multiple XSS vulnerabilities in ACS Blog
  • From: Dan Crowley
• Multiple Sql injection, and multiple XSS vulnerabilities in Photopost PHP Pro Photo Gallery Software
  • From: dcrab
• Re: iDEFENSE Security Advisory 03.28.05: Multiple Telnet Client slc_add_reply() Buffer Overflow Vulnerability
  • From: Solar Designer
• RE: Re: Symantec Antivirus client locally created scheduled scan is not running if the local console is logged off
  • From: Eitan Caspi
• Multiple XSS issues in Sun AnswerBook2
  • From: B00B00
• phishing sites report - March/2005
  • From: Gadi Evron
• Re: iDEFENSE Security Advisory 03.28.05: Multiple Telnet Client slc_add_reply() Buffer Overflow Vulnerability
  • From: Tavis Ormandy
• DoS of LAN via D-Link switches
  • From: Frank Bures
• Re: phishing sites report - March/2005
  • From: Gadi Evron
• [SECURITY] [DSA 698-1] New mc packages fix buffer overflow
  • From: Martin Schulze
• Re: phishing sites report - March/2005
  • From: Paul Laudanski
• THai's Shoutbox XSS (Spoofing URL) BUG
  • From: CorryL
• [SECURITY] [DSA 699-1] New netkit-telnet-ssl packages fix arbitrary code execution
  • From: Martin Schulze
• [USN-102-1] shar vulnerabilities
  • From: Martin Pitt
• Multiple Sql injection, and multiple XSS vulnerabilities in Easy Community Management System Forum (E-XOOPS)
  • From: dcrab
• MITKRB5-SA-2005-001: buffer overflows in telnet client
  • From: Tom Yu
• RE: DoS of LAN via D-Link switches
  • From: David Gillett
• Re: TCP timestamp & advanced fingerprinting
  • From: Erwan Arzur
• directory traversal in FastStone 4in1 Browser 1.2
  • From: Donato Ferrante
• Multiple sql injection, and xss vulnerabilities in AspApp
  • From: dcrab
• Invision Power Board v2.0.3 XSS vulnerabilities
  • From: hoang yen
• Multiple sql injection, and xss vulnerabilities in PortalApp
  • From: dcrab
• Code insertion in Blogger comments
  • From: Antone Roundy
• [SECURITY] [DSA 697-1] New netkit-telnet packages fix arbitrary code execution
  • From: Martin Schulze
• Re: iDEFENSE Security Advisory 03.28.05: Multiple Telnet Client slc_add_reply() Buffer Overflow Vulnerability
  • From: Ga=EBl?= Delalleau
• Re: Security Flaw with Digital signatures in Microsoft Outlook
  • From: dori
• [PersianHacker.NET 200503-12]Chatness 2.5.1 and prior XSS Vulnerabilities
  • From: PersianHacker Team
• RE: Multiple Sql injection, and multiple XSS vulnerabilities in Photopost PHP Pro Photo Gallery Software.
  • From: GulfTech Security Research
• Code insertion in Blogger comments
  • From: Antone Roundy
• abuse & security issues > Israel
  • From: Gadi Evron
• Multiple XSS vulnerabilities in ACS Blog
  • From: Dan Crowley
• Re: DoS of LAN via D-Link switches
  • From: Tarmo Mamers
• Multiple phpCoin Vulnerabilities
  • From: GulfTech Security Research
• [PersianHacker.NET 200503-11]Ublog reload 1.0.4 and prior Multiple Vulnerbilities
  • From: PersianHacker Team
• Portcullis Security Advisory 05-011 ACPI 1.6 BIOS
  • From: Paul J Docherty
• MDKSA-2005:061 - Updated krb5 packages fix telnet client vulnerability
  • From: Mandrakelinux Security Team
• Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerable to Crafted SSL Attack
  • From: Cisco Systems Product Security Incident Response Team
• [ GLSA 200503-35 ] Smarty: Template vulnerability
  • From: Thierry Carrez
• RE: Portcullis Security Advisory 05-011 ACPI 1.6 BIOS
  • From: Paul J Docherty
• Re: DoS of LAN via D-Link switches
  • From: Neil Watson
• Re: Multiple Sql injection, and multiple XSS vulnerabilities in Photopost PHP Pro Photo Gallery Software.
  • From: dcrab
• [SECURITY] [DSA 700-1] New mailreader packages fix cross-site scripting vulnerability
  • From: Martin Schulze
• Re: Portcullis Security Advisory 05-011 ACPI 1.6 BIOS
  • From: Kurt Seifried
• PaFileDB Version 3.1 and below are exploitable via a XSS and a SQL injection vulnerability
  • From: dcrab
• Multiple sql injection, and xss vulnerabilities in Pay pal Storefront
  • From: Diabolic Crab