Mail Index

• Thread Index

• [ GLSA 200508-01 ] Compress::Zlib: Buffer overflow
  • From: Sune Kloppenborg Jeppesen
• [SVadvisory] - SQL injection in OpenBook 1.2.2
  • From: svt
• The Java applet sandbox and stateful firewalls
  • From: Florian Weimer
• PHPList Vunerability
  • From: ziot
• Buffer overflow in BusinessMail email server system 4.60.00
  • From: Reed Arvin
• [SECURITY] [DSA 771-1] New pdns packages fix denial of service
  • From: Martin Schulze
• ChurchInfo Multiple Vulnerabilities
  • From: thegreatone2176
• TSLSA-2005-0038 - multi
  • From: Trustix Security Advisor
• Vulnerability in Trendmicro Officescan
  • From: sylvain . roger
• ICMP attacks against TCP: Conclusions
  • From: Fernando Gont
• RE: uguestbook exploit
  • From: Earnhart, Benjamin J
• Re: [BugTraq] Peter Gutmann data deletion theaory?
  • From: Richard Clayton
• [USN-157-1] Mozilla Thunderbird vulnerabilities
  • From: Martin Pitt
• MySQL Eventum Multiple Vulnerabilities
  • From: GulfTech Security Research
• [USN-158-1] gzip utility vulnerability
  • From: Martin Pitt
• Re: Peter Gutmann data deletion theaory?
  • From: Michael Sierchio
• [ GLSA 200507-28 ] AMD64 x86 emulation base libraries: Buffer overflow
  • From: Thierry Carrez
• RE: On classifying attacks
  • From: Forte Systems - Iosif Peterfi
• [USN-159-1] unzip vulnerability
  • From: Martin Pitt
• Re: LSS Security Advisory: Winamp remote buffer overflow vulnerability
  • From: ljuranic
• [security bulletin] SSRT5931 rev.1 Apache on HP-UX Remote Denial of Service and client restriction bypass
  • From: security-alert
• Re: On classifying attacks
  • From: Daniel Weber
• [ GLSA 200508-02 ] ProFTPD: Format string vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• unzip TOCTOU file-permissions vulnerability
  • From: Imran Ghory
• Re: Trillian Ver 3.1 saves password's in plain Text
  • From: security curmudgeon
• Re: [VulnWatch] The Java applet sandbox and stateful firewalls
  • From: Dinis Cruz
• Arab Portal
  • From: ABDUCTER_MINDS
• Re: [VulnWatch] The Java applet sandbox and stateful firewalls
  • From: Florian Weimer
• HACK IN THE BOX SECURITY CONFERENCE 2005
  • From: alphademon
• Quick 'n Easy FTP Server 3.0 pro / lite (buffer overflow vulnerabilities)
  • From: [at]
• VBZoom Cross Site Scripting Vulnerabilities
  • From: almaster
• Re: Re : [Firefox Bug 302187] New: Shared section vulnerability when opening microsoft office document resulting in DoS
  • From: Cesar
• [ GLSA 200508-03 ] nbSMTP: Format string vulnerability
  • From: Thierry Carrez
• CAID 33239 - Computer Associates BrightStor ARCserve/Enterprise Backup Agents buffer overflow vulnerability
  • From: Williams, James K
• [NOBYTES.COM: #8] Naxtor Shopping Cart 1.0 - Information Disclosure & Possible SQL Injection
  • From: John Cobb
• [security bulletin] SSRT5998 Rev.0 HP System Management Homepage (v2.0.x) Denial of Service (DoS) & XSS
  • From: security-alert
• Re: Quick 'n Easy FTP Server 3.0 pro / lite (buffer overflow vulnerabilities)
  • From: brom0815
• Re: [NOBYTES.COM: #8] Naxtor Shopping Cart 1.0 - Information Disclosure & Possible SQL Injection
  • From: Patrick Morris
• Zip 2,31 bad default file-permissions vulnerability
  • From: Imran Ghory
• iDEFENSE Security Advisory 08.02.05: CA BrightStor ARCserve Backup Agent for MS SQL Server Buffer Overflow
  • From: iDEFENSE Labs
• [SECURITY] [DSA 772-1] New apt-cacher package fixes arbitrary command execution
  • From: Martin Schulze
• MDKSA-2005:128 - Updated mozilla packages fix multiple vulnerabilities
  • From: Mandriva Security Team
• Coldfusion Fusebox V4.1.0 Vulnerability
  • From: N.N.P
• Re: CAID 33239 - Computer Associates BrightStor ARCserve/Enterprise Backup Agents buffer overflow vulnerability
  • From: cybertronic
• Silvernews 2.0.3 (possibly previous versions ) SQL Injection / Login Bypass / Remote commands execution / cross site scripting
  • From: retrogod
• [security bulletin] SSRT4682 rev.0 - Oracle for Openview (OfO) Critical Patch Update July 2005
  • From: security-alert
• Re: ClamAV Multiple Rem0te Buffer Overflows
  • From: Steven M. Christey
• Zone Alarm Security Contact
  • From: David Cross
• Re: Trillian Ver 3.1 saves password's in plain Text
  • From: Suramya Tomar
• RE: On classifying attacks
  • From: Tim Nelson
• Microsoft ActiveSync information leak and spoofing
  • From: 3APA3A
• SUSE Security Announcement: several kernel security problems (SUSE-SA:2005:044)
  • From: Ludwig Nussel
• [USN-160-1] Apache 2 vulnerabilities
  • From: Martin Pitt
• Scanning Software Bugs
  • From: Dan . Creed
• [ GLSA 200507-29 ] pstotext: Remote execution of arbitrary code
  • From: Stefan Cornelius
• RE: Trillian Ver 3.1 saves password's in plain Text
  • From: Keith Phillips
• FINAL Phrack Magazine release #63 is OUT
  • From: phrackstaff
• SQL IN PortailPHP
  • From: ABDUCTER_MINDS
• RE: Trillian Ver 3.1 saves password's in plain Text
  • From: Darren Pilgrim
• Re: Trillian Ver 3.1 saves password's in plain Text
  • From: Technica Forensis
• Re: Zip 2,31 bad default file-permissions vulnerability
  • From: Imran Ghory
• Re: Trillian Ver 3.1 saves password's in plain Text
  • From: Technica Forensis
• [USN-161-1] bzip2 utility vulnerability
  • From: Martin Pitt
• Re: Re: Quick 'n Easy FTP Server 3.0 pro / lite (buffer overflow vulnerabilities)
  • From: asierillo
• Re: Zip 2,31 bad default file-permissions vulnerability
  • From: Lupe Christoph
• Re: Coldfusion Fusebox V4.1.0 Vulnerability
  • From: Ian Mitchell
• MDKSA-2005:129 - Updated apache2 packages fix vulnerabilities
  • From: Mandriva Security Team
• MDKSA-2005:130 - Updated apache packages fix vulnerabilities
  • From: Mandriva Security Team
• Re: Zip 2,31 bad default file-permissions vulnerability
  • From: Lupe Christoph
• Re: Coldfusion Fusebox V4.1.0 Vulnerability
  • From: steven
• Re: ClamAV Multiple Rem0te Buffer Overflows
  • From: list
• Re: Zone Alarm Security Contact
  • From: security curmudgeon
• Cisco IOS Shellcode - McAfee IPS Protection
  • From: planz 235
• Remote Password Compromise of Microsoft Active Sync 3.7.1
  • From: nospam
• Re: On classifying attacks
  • From: Crispin Cowan
• Re: Scanning Software Bugs
  • From: KF (lists)
• MDKSA-2005:131 - Updated ethereal packages fix multiple vulnerabilities
  • From: Mandriva Security Team
• Re: uguestbook exploit
  • From: security curmudgeon
• Silvernews 2.0.3 remote command execution exploit, proxy server support!
  • From: [at]
• [HSC Security Group] Multiple XSS in phpopenchat 3.0.2
  • From: zinho
• FlatNuke 2.5.5 (possibly prior versions) remote commands execution / cross site scripting / path disclosure (by rgod)
  • From: retrogod
• Re: Zip 2,31 bad default file-permissions vulnerability
  • From: Stephen C Woods
• TSLSA-2005-0040 - multi
  • From: Trustix Security Advisor
• Re: Zip 2,31 bad default file-permissions vulnerability
  • From: Lupe Christoph
• Re: Trillian Ver 3.1 saves password's in plain Text
  • From: patrick
• Comdev eCommerce config.php Vulnerability
  • From: none
• tar preserves setuid bit
  • From: Imran Ghory
• ipb Css bug(now public)
  • From: virusishacker
• Defeating Citi-Bank Virtual Keyboard Protection
  • From: Debasis Mohanty
• Comdev eCommerce wce.download.php Download Vulnerability
  • From: none
• Root exploits in Lantonix Secure Console Server
  • From: c0ntex
• Vulnerability in ePing and eTrace plugins of e107
  • From: os2a . bto
• Re: On classifying attacks
  • From: Thierry Carrez
• Re: On classifying attacks
  • From: Shwaine
• [ GLSA 200508-04 ] Netpbm: Arbitrary code execution in pstopnm
  • From: Thierry Carrez
• RE: On classifying attacks
  • From: Forte Systems - Iosif Peterfi
• Re: On classifying attacks
  • From: Duncan Simpson
• [ GLSA 200508-05 ] Heartbeat: Insecure temporary file creation
  • From: Sune Kloppenborg Jeppesen
• Gravity Board X v1.1 multiple vulnerabilities
  • From: retrogod
• Re: SQL IN PortailPHP
  • From: Steven M. Christey
• SQL IN Open Bulletin Board
  • From: ABDUCTER_MINDS
• Re: [NOBYTES.COM: #8] Naxtor Shopping Cart 1.0 - Information Disclosure & Possible SQL Injection
  • From: ICool
• E107 + IPB XSS Exploit
  • From: edward11
• Re: ipb Css bug(now public)
  • From: mattmecham
• iDEFENSE Security Advisory 08.05.05: EMC Navisphere Manager Directory Traversal Vulnerability
  • From: iDEFENSE Labs
• XSS in forums CFBB v1.1.0
  • From: stormhacker
• Advisory 13/2005: Remote code execution in SysCP
  • From: Christopher Kunz
• RE: CAID 33239 - Computer Associates BrightStor ARCserve/Enterprise Backup Agents buffer overflow vulnerability
  • From: Williams, James K
• [SVadvisory#13] - SQL injection in MYFAQ 1.0
  • From: svt
• Re: ipb Css bug(now public)
  • From: Nicolas Gregoire
• [AppSecInc Advisory MYSQL05-V0002] Buffer Overflow in MySQL User Defined Functions
  • From: Team SHATTER
• Re: Kent's Guestbook database exploit
  • From: security curmudgeon
• [USN-162-1] ekg and Gadu library vulnerabilities
  • From: Martin Pitt
• Creating a secret web site on IIS 5.x using Alternative Data Streams
  • From: inge_eivind . henriksen
• Re: Scanning Software Bugs
  • From: Hugo van der Kooij
• Nate User Password Disclosed By Anonymous
  • From: saintlinu
• Re: Cisco IOS Shellcode - McAfee IPS Protection
  • From: Darren Reed
• nbSMTP v0.99 remote format string exploit
  • From: coki
• Re: tar preserves setuid bit
  • From: Neil McKellar
• Re: Zip 2,31 bad default file-permissions vulnerability
  • From: Imran Ghory
• Re: tar preserves setuid bit
  • From: Imran Ghory
• Re: Defeating Citi-Bank Virtual Keyboard Protection
  • From: Daniel Bonekeeper
• Re: tar preserves setuid bit
  • From: Sean Comeau
• Re: Trillian Ver 3.1 saves password's in plain Text
  • From: Suramya Tomar
• Re: GNU tar and the setuid bit
  • From: David Watson
• Re: GNU tar and the setuid bit
  • From: David Watson
• Re: [DCC SPAM] Defeating Citi-Bank Virtual Keyboard Protection
  • From: Secure Science Corporation Bugtraq
• [AppSecInc Advisory MYSQL05-V0001] Improper Filtering of Directory Traversal Characters in MySQL User Defined Functions
  • From: Team SHATTER
• FunkBoard V0.66CF (possibly prior versions) cross site scripting, possible database username/password disclosure & board takeover,possible remote code execution
  • From: retrogod
• [AppSecInc Advisory MYSQL05-V0003] Multiple Issues with MySQL User Defined Functions
  • From: Team SHATTER
• [USN-163-1] xpdf vulnerability
  • From: Martin Pitt
• Apple Safari & Javascript - KERN_INVALID_ADDRESS (0x0001)
  • From: Patrick Webster
• Sql injection and global variables poisoning in XMB Forum 1.9.1
  • From: heintz
• Bugtraq ID: 14460 : Coldfusion Fusebox V4.1.0 Vulnerability
  • From: Adrocknaphobia
• iDEFENSE Security Advisory 08.09.05: AWStats ShowInfoURL Remote Command Execution Vulnerability
  • From: iDEFENSE Labs
• RE: Creating a secret web site on IIS 5.x using Alternative Data Streams
  • From: James C Slora Jr
• Mozilla Firefox up to 1.0.6 and Mozilla Thunderbird up to 1.0 url string obfuscation
  • From: Marc Ruef
• Re: tar preserves setuid bit
  • From: Jeremy C. Reed
• BID 14355, VERITAS NetBackup 5.1 Time Stamp Vulnerability
  • From: secure
• [security bulletin] SSRT5940 rev.1 - HP-UX Mozilla remote, unauthorized user may execute privileged code
  • From: security-alert
• Re: Defeating Citi-Bank Virtual Keyboard Protection
  • From: AsTriXs
• Design Flaw at Microsoft's AntiSpyware
  • From: manolisgavriil
• [security bulletin] SSRT051005 rev.0 - HP ProLiant DL585 Servers Unauthorized Remote Access
  • From: security-alert
• [security bulletin] SSRT5957 rev.0 - HP Tru64 UNIX IPSEC Tunnel ESP Mode Remote Unauthorized Disclosure of Encrypted Data
  • From: Security Alert
• [security bulletin] SSRT5998 rev.1 - HP System Management Homepage (v2.0.x) Denial of Service (DoS) and XSS
  • From: security-alert
• NSFOCUS SA2005-02 : Microsoft IE Devenum.dll COM Instantiation Remote Code Execution Vulnerability
  • From: NSFOCUS Security Team
• [KDE Security Advisory] kpdf temp file writing DoS vulnerability
  • From: Dirk Mueller
• Help put a stop to incompetent computer forensics
  • From: Jason Coombs
• Full path disclosure in CaLogic 1.22 and possible in older versions.
  • From: gb . network
• RE: [Full-disclosure] Help put a stop to incompetent computer forensics
  • From: Christopher Day
• Re: SQL IN Open Bulletin Board
  • From: security curmudgeon
• CoolWebSearch found in massive spyware ring
  • From: Paul Laudanski
• MDKSA-2005:132 - Updated heartbeat packages fix temporary file vulnerabilities
  • From: Mandriva Security Team
• MDKSA-2005:133 - Updated netpbm packages fix temporary file vulnerabilities
  • From: Mandriva Security Team
• Evolution multiple remote format string bugs
  • From: sitic
• Privilege escalation in Nortel Contivity VPN Client V05_01.030
  • From: Jeff Peadro
• ISS vs. Cisco: Chapter 2
  • From: FX
• Re: ISS vs. Cisco: Chapter 2
  • From: Florian Weimer
• High Risk Vulnerability in Novell eDirectory Server
  • From: NGSSoftware Insight Security Research
• [USN-166-1] Evolution vulnerabilities
  • From: Martin Pitt
• Re: Compromising pictures of Microsoft Internet Explorer!
  • From: Michal Zalewski
• [USN-164-1] netpbm vulnerability
  • From: Martin Pitt
• [USN-165-1] heartbeat vulnerability
  • From: Martin Pitt
• SUSE Security Announcement: Mozilla various security problems (SUSE-SA:2005:045)
  • From: Marcus Meissner
• [SECURITY] [DSA 773-1] New amd64 packages fix several bugs
  • From: Martin Schulze
• MDKSA-2005:138 - Updated cups packages fix vulnerability
  • From: Mandriva Security Team
• remote DOS on Wyse thin client 1125SE
  • From: Josh Zlatin-Amishav
• MDKSA-2005:137 - Updated ucd-snmp packages fix a DoS vulnerability
  • From: Mandriva Security Team
• MDKSA-2005:135 - Updated kdegraphics packages fix vulnerability
  • From: Mandriva Security Team
• [FLSA-2005:129284] Updated spamassassin package fixes security issue
  • From: Marc Deslauriers
• [FLSA-2005:152889] Updated mc packages fix security issues
  • From: Marc Deslauriers
• [FLSA-2005:157696] Updated gzip package fixes security issues
  • From: Marc Deslauriers
• [FLSA-2005:157701] Updated Apache httpd packages fix security issues
  • From: Marc Deslauriers
• MDKSA-2005:136 - Updated gpdf packages fix vulnerability
  • From: Mandriva Security Team
• MDKSA-2005:134 - Updated xpdf packages fix vulnerability
  • From: Mandriva Security Team
• Privilege escalation in Network Associates ePolicy Orchestrator Agent 3.5.0 (patch 3)
  • From: Reed Arvin
• Xoops 2.2.1 Full Path Disclosure
  • From: none
• [SECURITY] [DSA 774-1] New fetchmail packages fix arbitrary code execution
  • From: Martin Schulze
• (MS05-039) Microsoft Windows Plug-and-Play Service Remote Overflow (Universal Exploit + no crash shellcode)
  • From: houseofdabus
• FW: Updated Version & Exploit - Privilege escalation in Nortel Contivity VPN Client V05_01.030
  • From: Jeff Peadro
• My Bulletin Board RC 4 Vulnerabilities
  • From: phuket
• Insecure directory permissions of default installation of Kaspersky Anti-Virus for Unix/Linux File Servers will lead to local root exploit
  • From: Dr. Peter Bieringer
• Windows 2000 universal exploit for MS05-039
  • From: sl0ppy
• Privilege escalation in Linksys WLAN Monitor v2.0
  • From: Reed Arvin
• Re: Xoops 2.2.1 Full Path Disclosure
  • From: kato
• Bluetooth: Theft of Link Keys for Fun and Profit?
  • From: KF (lists)
• Grandstream Budge Tone 101/102 DoS Vulnerability
  • From: Kroma Pierre
• [USN-168-1] Gaim vulnerabilities
  • From: Martin Pitt
• Low security hole affecting Mentor's ADSLFR4II router
  • From: Tim Brown
• JaguarControl Activex Buffer Overflow
  • From: Tacettin Karadeniz
• SQL in PHPTB Topic Boards 2.0
  • From: almaster
• [DRUPAL-SA-2005-004] Drupal 4.6.3 / 4.5.5 fixes critical XML-RPC issue
  • From: Uwe Hermann
• Advisory 15/2005: PHPXMLRPC Remote PHP Code Injection Vulnerability
  • From: Stefan Esser
• Advisory 14/2005: PEAR XML_RPC Remote PHP Code Injection Vulnerability
  • From: Stefan Esser
• Vulnerability found in CPAINT Ajax Toolkit
  • From: wiley14
• [SECURITY] [DSA 761-2] New heartbeat packages fix insecure temporary files
  • From: Martin Schulze
• drone armies C&C report - July/2005
  • From: Gadi Evron
• [SECURITY] [DSA 775-1] New Mozilla packages fix frame injection spoofing vulnerability
  • From: Martin Schulze
• [ GLSA 200508-06 ] Gaim: Remote execution of arbitrary code
  • From: Sune Kloppenborg Jeppesen
• Technical Note by Amit Klein: Detecting and Preventing HTTP Response Splitting and HTTP Request Smuggling Attacks at the TCP Le
  • From: Amit Klein (AKsecurity)
• Serious flaw in Linksys wireless AP password security
  • From: Steve Scherf
• Re: FunkBoard V0.66CF (possibly prior versions) cross site scripting, possible database username/password disclosure & board takeover,possible remote code execution
  • From: colin
• Serious flaw in Linksys wireless AP password security
  • From: Steve Scherf
• MDKSA-2005:139 - Updated gaim packages fix yet more vulnerabilities
  • From: Mandriva Security Team
• Corsaire Security Advisory: HP Ignite-UX passwd file disclosure issue
  • From: advisories
• MDKSA-2005:140 - Updated proftpd packages fix format string vulnerabilities
  • From: Mandriva Security Team
• 249bytes reverse shellcode with "nooil tricks methods"
  • From: msuiche
• Corsaire Security Advisory: HP Ignite-UX filesystem permissions issue
  • From: advisories
• [SECURITY] [DSA 776-1] New clamav packages fix several problems
  • From: Martin Schulze
• SUSE Security Announcement: apache, apache2 request smuggling problem (SUSE-SA:2005:046)
  • From: Marcus Meissner
• [NOBYTES.COM: #9] ECW Shop 6.0.2 - Multiple Vulnerabilities
  • From: John Cobb
• RE: Serious flaw in Linksys wireless AP password security
  • From: Robert Thompson Jr.
• [ GLSA 200508-07 ] AWStats: Arbitrary code execution using malicious Referrer information
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200508-08 ] Xpdf, Kpdf, GPdf: Denial of Service vulnerability
  • From: Sune Kloppenborg Jeppesen
• SQL injection in Persianblog
  • From: alireza hassani
• RE: Vulnerability found in CPAINT Ajax Toolkit
  • From: Thor Larholm
• Hummingbird FTP Weak Password Encryption
  • From: nnposter
• Re: [Full-disclosure] Privilege escalation in Network Associates ePolicy Orchestrator Agent 3.5.0 (patch 3)
  • From: NoBrain NoPain
• Re: [Full-disclosure] Privilege escalation in Network Associates ePolicy Orchestrator Agent 3.5.0 (patch 3)
  • From: Reed Arvin
• Re: [Full-disclosure] Privilege escalation in Network Associates ePolicy Orchestrator Agent 3.5.0 (patch 3)
  • From: sec-list
• Win32 Port of Nessusd
  • From: Tom Stracener
• Re: Serious flaw in Linksys wireless AP password security
  • From: Steve Scherf
• RE: Serious flaw in Linksys wireless AP password security
  • From: Robert Thompson Jr.
• [security bulletin] SSRT4874 rev.0 - HP-UX Ignite-UX Remote Unauthorized Access
  • From: Boren, Rich (HP SSRT)
• Re: Win32 Port of Nessusd
  • From: Michael Boman
• Cisco Security Advisory: Cisco Clean Access Unauthenticated API Access
  • From: Cisco Systems Product Security Incident Response Team
• NOVL-2005010098073 GroupWise Password Caching
  • From: Ed Reed
• [SECURITYREASON.COM] phpAdsNew/phpPgAds 2.0.5 Local file inclusion cXIb8O3.16
  • From: max
• Buffer-overflow in Chris Moneymaker's World Poker Championship 1.0
  • From: Luigi Auriemma
• Re: SQL injection in Persianblog
  • From: nummish
• SQL injection in mediabox404 v1.2
  • From: cedric
• [SECURITY] [DSA 777-1] New Mozilla packages fix frame injection spoofing vulnerability
  • From: Martin Schulze
• PHPTB Topic Board <= 20: Multiple PHP injection vulnerabilities
  • From: goszynskif
• Unicode Buffer Overflow in WinFtp Server 1.6.8
  • From: Donato Ferrante
• [PHPADSNEW-SA-2005-001] phpAdsNew and phpPgAds 2.0.6 fix multiple vulnerabilities
  • From: Matteo Beccati
• [ GLSA 200508-09 ] bluez-utils: Bluetooth device name validation vulnerability
  • From: Sune Kloppenborg Jeppesen
• MSN Messenger Password Decrypter for WinXP/2003
  • From: ViPeR
• Internet Explorer 6 Meta Refresh Parsing Weakness
  • From: Moritz Naumann
• Juniper Netscreen VPN Username Enumeration Vulnerability
  • From: Roy Hills
• Bypassing the new /GS protection in VC++ 7.1
  • From: D K
• mutt buffer overflow
  • From: Peter Valchev
• Zorum 3.5 remote code execution poc exploit
  • From: retrogod
• Password Disclosure in Whisper32
  • From: Alexey Agapov
• Sensitive Information Disclosure Vulnerability in Kinetics Kiosk Product
  • From: Jason Coombs
• Bluez hcid popen() explained.
  • From: KF (lists)
• Re: [SECURITY] [DSA 777-1] New Mozilla packages fix frame injection spoofing vulnerability
  • From: Douglas Duckworth
• Re: [Full-disclosure] mutt buffer overflow
  • From: Frank Denis (Jedi/Sector One)
• BBCaffe 2.0 cross site scripting poc
  • From: retrogod
• MDKSA-2005:143 - Updated kdegraphics packages fix kfax vulnerability
  • From: Mandriva Security Team
• MDKSA-2005:142 - Updated libtiff packages fixes vulnerability
  • From: Mandriva Security Team
• MDKSA-2005:141 - Updated evolution packages fixes format string vulnerabilities
  • From: Mandriva Security Team
• runcms highlight.php hole
  • From: Security Lists
• PHPFreeNews V1.40 and prior Multiple Vulnerabilities
  • From: h4cky0u
• Re: Sensitive Information Disclosure Vulnerability in Kinetics Kiosk Product
  • From: Jay D. Dyson
• DevC++ V.4.9.9.2 NULL BYTE INSERTION / OBFUSCATION FLAW (by rgod)
  • From: retrogod
• MDKSA-2005:144 - Updated wxPythonGTK packages several vulnerabilities
  • From: Mandriva Security Team
• UnixWare 7.1.4 UnixWare 7.1.3 : cpio race condition and directory traversal issues fixed.
  • From: please_reply_to_security
• w-agora 4.2.0 and prior Remote Directory Travel Vulnerability
  • From: h4cky0u
• ATutor 1.5.1 and prior multiple XSS Vulnerabilities
  • From: h4cky0u
• Re: Sensitive Information Disclosure Vulnerability in Kinetics Kiosk Product
  • From: Zow
• WinAce Temporary File Parsing Buffer Overflow Vulnerability
  • From: atmaca
• [SECURITY] [DSA 778-1] New mantis packages fix several vulnerabilities
  • From: Martin Schulze
• Cisco Clean Access Agent (Perfigo) bypass
  • From: llhansen-bugtraq
• [USN-170-1] gnupg vulnerability
  • From: Martin Pitt
• [ GLSA 200508-10 ] Kismet: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• Secunia Research: HAURI Anti-Virus Compressed Archive Directory Traversal
  • From: Secunia Research
• Fwd: Tor security advisory: DH handshake flaw
  • From: Chris Palmer
• [USN-169-1] Linux kernel vulnerabilities
  • From: Martin Pitt
• [ GLSA 200508-11 ] Adobe Reader: Buffer Overflow
  • From: Thierry Carrez
• Vul in MyBB
  • From: s2b
• IBM Lotus Notes multiple disclosures of password hashes
  • From: Shalom Carmel
• Woltlab Burning Board <= 2.2.2/2.3.3 modcp.php SQL injection
  • From: admin
• [USN-171-1] PHP4 vulnerabilities
  • From: Martin Pitt
• [SECURITY] [DSA 779-1] New Mozilla Firefox packages fix several vulnerabilities
  • From: Martin Schulze
• Bugs Land Down Under v800
  • From: bl2k
• ToorCon 7 Lineup Finalized & Pre-Registration Ending
  • From: h1kari@xxxxxxxxxxx
• Nephp Publisher Enterprise 3.04 Cross Site Scripting
  • From: bl2k
• SUSE Security Announcement: Adobe Reader Plugin buffer overflow (SUSE-SA:2005:047)
  • From: Marcus Meissner
• ELM < 2.5.8 Remote Exploit POC
  • From: c0ntexb
• Cisco Security Advisory: SSL Certificate Validation Vulnerability in IDS Management Software
  • From: Cisco Systems Product Security Incident Response Team
• RE: Cisco Clean Access Agent (Perfigo) bypass
  • From: Dario Ciccarone (dciccaro)
• DMA[2005-0818a] - 'Apple OSX dsidentity privilege abuse'
  • From: KF (lists)
• Cisco Security Advisory: Cisco Intrusion Prevention System Vulnerable to Privilege Escalation
  • From: Cisco Systems Product Security Incident Response Team
• RE: Cisco Clean Access Agent (Perfigo) bypass
  • From: Dario Ciccarone (dciccaro)
• SQL Injection and PHP Code Injection Vulnerabilities in PHPKit 1.6.1
  • From: phuket
• [SECURITYREASON.COM] Multiple vulnerabilities in PostNuke 0.760-RC4b=>x cXIb8O3.15
  • From: max
• Remote IIS 5.x and IIS 6.0 Server Name Spoof
  • From: inge_eivind . henriksen
• Re: RE: Cisco Clean Access Agent (Perfigo) bypass
  • From: cdmiller-bugtraq
• [ Suresec Advisories ] - Several MacOS X vulnerabilities
  • From: Suresec Advisories
• 32919 - Computer Associates Message Queuing (CAM/CAFT) multiple vulnerabilities
  • From: Williams, James K
• Re: Remote IIS 5.x and IIS 6.0 Server Name Spoof
  • From: 3APA3A
• [SECURITY] [DSA 781-1] New Mozilla Thunderbird packages fix several vulnerabilities
  • From: Martin Schulze
• [SECURITY] [DSA 782-1] New bluez-utils packages fix arbitrary command execution
  • From: Martin Schulze
• MDKSA-2005:145 - Updated openvpn packages fix several vulnerabilities
  • From: Mandriva Security Team
• MDKSA-2005:146 - Updated php-pear packages fix more PEAR XML-RPC vulnerabilities
  • From: Mandriva Security Team
• MDKSA-2005:148 - Updated vim packages fix vulnerability
  • From: Mandriva Security Team
• Re: ELM < 2.5.8 Remote Exploit POC
  • From: skulls_phantoms_1
• Oracle Password Checker
  • From: ak
• [ GLSA 200508-12 ] Evolution: Format string vulnerabilities
  • From: Stefan Cornelius
• Server crash in Ventrilo 2.3.0
  • From: Luigi Auriemma
• Mercora IMRadio 4.0.0.0 Discloses Passwords to Local Users
  • From: kozan
• [USN-172-1] lm-sensors vulnerability
  • From: Martin Pitt
• [USN-173-1] PCRE vulnerability
  • From: Martin Pitt
• ZipTorrent 1.3.7.3 Discloses Proxy Passwords to Local Users
  • From: kozan
• Re: Interspire ArticleLive 2005 (php version) is vulnerable to XSS
  • From: eddie
• MDKSA-2005:147 - Updated slocate packages fix vulnerability
  • From: Mandriva Security Team
• [RLSA_01-2005] QNX inputtrap arbitrary file read vulnerability
  • From: julio
• New Whitepaper - The Pharming Guide
  • From: NGSSoftware Insight Security Research
• Multiple Vulnerabilities in Home Ftp Server 1.0.7
  • From: Donato Ferrante
• Cross-site scripting vulnerability in BEA WebLogic administration console
  • From: GomoR
• Secunia Research: SqWebMail Attached File Script Insertion Vulnerability
  • From: Secunia Research
• PaFileDB 3.1 - SQL-Injection
  • From: astovidatu
• Secunia Research: HAURI Anti-Virus ACE Archive Handling Buffer Overflow
  • From: Secunia Research
• Re: Beehive Forum Multiple Vulnerabilities
  • From: wibble
• [SECURITY] [DSA 783-1] New mysql packages fix insecure temporary file
  • From: Martin Schulze
• LeapFTP .lsq Buffer Overflow Vulnerability
  • From: Sowhat .
• Foojan PHP Weblog Information Disclosure - Refferer Html Injection
  • From: ali202
• Re: ZipTorrent 1.3.7.3 Discloses Proxy Passwords to Local Users
  • From: Allen Parker
• RE: Remote IIS 5.x and IIS 6.0 Server Name Spoof
  • From: Sacha Faust
• unload event in ie/mozilla/opera
  • From: Tobias Boonstoppel
• RE: unload event in ie/mozilla/opera
  • From: David Gillett
• [ GLSA 200508-13 ] PEAR XML-RPC, phpxmlrpc: New PHP script injection vulnerability
  • From: Thierry Carrez
• [USN-173-2] PCRE vulnerability
  • From: Martin Pitt
• [ GLSA 200508-14 ] TikiWiki, eGroupWare: Arbitrary command execution through XML-RPC
  • From: Thierry Carrez
• Re: LeapFTP .lsq Buffer Overflow Vulnerability
  • From: Kaveh Razavi
• Re: Mercora IMRadio 4.0.0.0 Discloses Passwords to Local Users
  • From: 3APA3A
• Advisory: iTAN not as secure as claimed
  • From: release
• [ GLSA 200508-15 ] Apache 2.0: Denial of Service vulnerability
  • From: Sune Kloppenborg Jeppesen
• Re: unload event in ie/mozilla/opera
  • From: Drew Haven
• [SECURITY] [DSA 784-1] New courier packages fix denial of service
  • From: Martin Schulze
• Portcullis Security Advisory 05-014 HP Openview Remote Command Execution Vulnerability
  • From: Paul J Docherty
• [SECURITY] [DSA 785-1] New libpam-ldap packages fix authentication bypass
  • From: Martin Schulze
• MS05_039 Exploitation (different languages)
  • From: Roman Medina-Heigl Hernandez
• [ GLSA 200508-17 ] libpcre: Heap integer overflow
  • From: Stefan Cornelius
• [security bulletin] SSRT4702 rev.0 - HP-UX running Veritas 3.3/3.5 unauthorized data access
  • From: Boren, Rich (HP SSRT)
• Re: Portcullis Security Advisory 05-014 HP Openview Remote Command Execution Vulnerability
  • From: David Litchfield
• Re: LeapFTP .lsq Buffer Overflow Vulnerability
  • From: Kaveh Razavi
• Tool for Identifying Rogue Linksys Routers
  • From: Martin Mkrtchian
• Quake 2 Lithium Mod V 1.24 Macro Expansion Vuln?
  • From: nukemmeister
• An Illustrated Guide to IPSec
  • From: Steve Friedl
• [ GLSA 200508-16 ] Tor: Information disclosure
  • From: Sune Kloppenborg Jeppesen
• Re: ZipTorrent 1.3.7.3 Discloses Proxy Passwords to Local Users
  • From: Nick Boyce
• RE: unload event in ie/mozilla/opera
  • From: Early, Clint
• Re: [NOBYTES.COM: #8] Naxtor Shopping Cart 1.0 - Information Disclosure & Possible SQL Injection
  • From: devfreedom
• Re: LeapFTP .lsq Buffer Overflow Vulnerability
  • From: Damien Palmer
• ssl-login-checkbox faked in Lycos webmail-frontend
  • From: Fischer, Andreas
• Re: unload event in ie/mozilla/opera
  • From: Stefan Kelm
• Re: unload event in ie/mozilla/opera
  • From: Niels Bakker
• Re: unload event in ie/mozilla/opera
  • From: Tobias Boonstoppel
• Tool Announcement: AIRT -- the Advanced Incident Response Tool 0.4.2 released
  • From: madsys
• Astaro Security Linux 6.0 - HTTP CONNECT Access Localhost Weakness
  • From: oliver karow
• CORRECTION: Remote IIS 5.x and IIS 6.0 Server Name Spoof
  • From: Mark Burnett
• Re: [Full-disclosure] MS05_039 Exploitation (different languages)
  • From: ad
• Re: Tool for Identifying Rogue Linksys Routers
  • From: Mike Frantzen
• [USN-174-1] courier vulnerability
  • From: Martin Pitt
• RE: Tool for Identifying Rogue Linksys Routers
  • From: Thomas Guyot-Sionnest
• Re: unload event in ie/mozilla/opera
  • From: Godwin Stewart
• Re: MS05_039 Exploitation (different languages)
  • From: Fabrice MOURRON
• Re: Tool for Identifying Rogue Linksys Routers
  • From: Joshua Wright
• 22nd Chaos Communication Congress 2005: Call for Papers
  • From: fukami
• [SECURITY] [DSA 787-1] New backup-manager package fixes several vulnerabilities
  • From: Martin Schulze
• MDKSA-2005:152 - Updated php packages fix integer overflow vulnerability
  • From: Mandriva Security Team
• Re: Tool for Identifying Rogue Linksys Routers
  • From: Graham Wilson
• RE: Tool for Identifying Rogue Linksys Routers
  • From: Matt Mercer
• Re: [ GLSA 200508-14 ] TikiWiki, eGroupWare: Arbitrary command execution through XML-RPC
  • From: Cangrejito Playero
• AWstats Path Disclosure Vulnerability
  • From: fournaux
• [security bulletin] SSRT051023 rev.0 - HP Openview Network Node Manager (OV NNM) Remote Unauthorized Access
  • From: Boren, Rich (HP SSRT)
• MDKSA-2005:150 - Updated bluez-utils packages fix vulnerability
  • From: Mandriva Security Team
• [ GLSA 200508-18 ] PhpWiki: Arbitrary command execution through XML-RPC
  • From: Thierry Carrez
• MDKSA-2005:151 - Updated pcre packages fix integer overflow vulnerability
  • From: Mandriva Security Team
• Re: unload event in ie/mozilla/opera
  • From: Michael Shigorin
• Multiple PHP Images Galleries EXIF Metadata XSS Vulnerabilities
  • From: Cedric Cochin
• Simple PHP Blog File Upload and User Credentials Exposure Vulnerabilities
  • From: Scott Dewey
• [SECURITY] [DSA 786-1] New simpleproxy packages fix arbitrary code execution
  • From: Martin Schulze
• DMA[2005-0826a] - 'Nokia Affix Bluetooth btsrv poor use of popen()'
  • From: KF (lists)
• MDKSA-2005:149 - Updated lm_sensors packages fix temporary file vulnerability
  • From: Mandriva Security Team
• Re: Tool for Identifying Rogue Linksys Routers
  • From: Dave Hull
• Sophos Antivirus Library Remote Heap Overflow
  • From: list
• Looking Glass v20040427 arbitrary commands execution / cross site scripting
  • From: retrogod
• Re: Tool for Identifying Rogue Linksys Routers
  • From: Volker Tanger
• MDKSA-2005:154 - Updated python packages fix integer overflow vulnerability
  • From: Mandriva Security Team
• Re: Tool for Identifying Rogue Linksys Routers
  • From: Mike Kershaw
• MDKSA-2005:153 - Updated gnumeric packages fix integer overflow vulnerability
  • From: Mandriva Security Team
• XSS security hole in phpwebnotes.
  • From: nf2
• Re: ZipTorrent 1.3.7.3 Discloses Proxy Passwords to Local Users
  • From: Nicholas Knight
• Re: Tool for Identifying Rogue Linksys Routers
  • From: Paul Halliday
• RE: Sophos Antivirus Library Remote Heap Overflow
  • From: Dowling, Gabrielle
• Re: Tool for Identifying Rogue Linksys Routers
  • From: Tony Rall
• Multiple CMS/Forum Vulnablilties
  • From: pacifico\", 0] //--></script>a
• Xcon2005 papers released
  • From: alert7
• PHP-Fusion <= v6.00.107 XSS exploit
  • From: slacker4ever_1
• FUD Forum < 2.7.1 PHP code injection vurnelability
  • From: riklaunim
• Land Down Under
  • From: bendeniz_avci
• Secunia Research: SqWebMail HTML Emails Script Insertion Vulnerability
  • From: Secunia Research
• Multiple vulnerabilities in BFCommand & Control for Battlefield 1942 and Vietnam
  • From: Luigi Auriemma
• [cosmoshop <= 8.10.78] be the shopadmin in one step
  • From: innate
• [SECURITY] [DSA 788-1] New kismet packages fix arbitrary code execution
  • From: Martin Schulze
• Land Down Under 801 And Prior Multiple SQL Injection Vulnerabilities
  • From: h4cky0u . org
• SimplePHPBlog Arbitrary File Deletion and Sample Exploit
  • From: 'ken'@FTU
• Re: unload event in ie/mozilla/opera
  • From: gegegz
• Vulnerability in Helpdesk software Hesk 0.92
  • From: s2b
• WASC-Articles: 'Preventing Log Evasion in IIS'
  • From: contact
• PunBB BBCode IMG Tag Script Injection Vulnerability
  • From: y3dips
• Member.php SQL Injection in MyBB
  • From: W7ED
• [SECURITY] [DSA 789-1] New PHP 4 packages fix several vulnerabilities
  • From: Martin Schulze
• AutoLinks Pro 2.1
  • From: none
• Re: Sophos Antivirus Library Remote Heap Overflow
  • From: list
• SUSE Security Announcement: php4/php5 Pear::XML_RPC code injection and PCRE integer overflow problems (SUSE-SA:2005:049)
  • From: Marcus Meissner
• BNBT EasyTracker Remote Denial of Service Vulnerability
  • From: Sowhat .
• SUSE Security Announcement: pcre integer overflows (SUSE-SA:2005:048)
  • From: Marcus Meissner
• iDEFENSE Security Advisory 08.29.05: Adobe Version Cue VCNative Arbitrary Library Loading Vulnerability
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 08.29.05: Adobe Version Cue VCNative Arbitrary File Overwrite Vulnerability
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 08.29.05: Symantec AntiVirus 9 Corporate Edition Local Privilege Escalation Vulnerability
  • From: iDEFENSE Labs
• phpLDAPadmin 0.9.6 - 0.9.7/alpha5 (possibly prior versions) system disclosure,
  • From: retrogod
• [USN-173-3] Fixed apache2 packages for USN-173-2
  • From: Martin Pitt
• [ GLSA 200508-19 ] lm_sensors: Insecure temporary file creation
  • From: Thierry Carrez
• [ GLSA 200508-20 ] phpGroupWare: Multiple vulnerabilities
  • From: Thierry Carrez
• Re: ICMP attacks against TCP: Conclusions
  • From: Dan Yefimov
• [UNTRUE] Gadu-Gadu supposedly fixed the invisible detection vulnerability?
  • From: Maciej Soltysiak
• e107 0.6 forum_post.php create new topics in non-existing forums
  • From: Marc Ruef
• [SECURITY] [DSA 790-1] New phpldapadmin packages fix unauthorised access
  • From: Martin Schulze
• Fetchmail 6.2.5 exploit for Bugtraq ID: 14349
  • From: bannedit
• Re: Vulnerability in Helpdesk software Hesk 0.92
  • From: not
• Re: PunBB BBCode IMG Tag Script Injection Vulnerability
  • From: Aaron Horst
• [SECURITY] [DSA 791-1] New maildrop packages fix arbitrary group mail command execution
  • From: Martin Schulze
• MS05-042 Security Update Problems
  • From: Andrew McCullough
• Re: Vulnerability in Helpdesk software Hesk 0.92
  • From: Thomas Krüger