Mail Index

• Thread Index

• Call for new mailing lists @ SecurityFocus
  • From: Alfred Huger
• secure client-side platform
  • From: liudieyu
• [security bulletin] SSRT051004 rev.0 - HP-UX Java Runtime Environment (JRE) Untrusted Applet Elevates Privilege
  • From: security-alert
• [ GLSA 200508-22 ] pam_ldap: Authentication bypass vulnerability
  • From: Sune Kloppenborg Jeppesen
• Indiatimes Messenger 6.0 Buffer Overflow (Remote)
  • From: ViPeR
• [ GLSA 200508-21 ] phpWebSite: Arbitrary command execution through XML-RPC and SQL injection
  • From: Sune Kloppenborg Jeppesen
• [security bulletin] SSRT051003 rev.0 - HP-UX Java Web Start remote unauthorized privileged access
  • From: security-alert
• [SECURITY] [DSA 792-1] New pstotext packages fix arbitrary command execution
  • From: Martin Schulze
• XSS in GreyMatter blog
  • From: poizon
• Obsidis #1 Call for Papers
  • From: angelo
• Simple Machine Forum 1-0-5 (possibly prior versions) user IP address / information disclosure
  • From: retrogod
• Re: ICMP attacks against TCP: Conclusions
  • From: Damien Miller
• Flatnuke 2.5.6 (possibly prior versions) Underlying system information disclosure / Administrative & users credentials disclosure
  • From: retrogod
• RE: secure client-side platform
  • From: Beauford, Jason
• CMS Made Simple <= 0.10 - PHP injection
  • From: groszynskif
• Vulnerability in Symantec Anti Virus Corporate Edition v9.x
  • From: golovast
• Ariba password exposure vulnerability
  • From: gerald626
• Re: Vulnerability in Symantec Anti Virus Corporate Edition v9.x]
  • From: secure
• [USN-173-4] PCRE vulnerabilities
  • From: Martin Pitt
• SimplePHPBlog Arbitrary File Deletion and Sample Exploit
  • From: 'ken'@FTU
• RE: Vulnerability in Symantec Anti Virus Corporate Edition v9.x
  • From: James C Slora Jr
• Adobe Version Cue exploits.
  • From: v9
• [ GLSA 200509-01 ] MPlayer: Heap overflow in ad_pcm.c
  • From: Thierry Carrez
• UMN gopher[v3.0.9+] multiple(2) client buffer overflows.
  • From: v9
• RE: Ariba password exposure vulnerability
  • From: Craig Kennedy
• [SecuriWeb.2005.1] - Barracuda SPAM firewall advisory
  • From: Francois Harvey
• Re: secure client-side platform
  • From: liudieyu
• File aribitary read access in frox
  • From: un4m31
• Re: Vulnerability in Symantec Anti Virus Corporate Edition v9.x
  • From: Colin
• [SECURITY] [DSA 793-1] New sqwebmail packages fix cross-site scripting
  • From: Martin Schulze
• silc server and toolkit insecure temporary file creation
  • From: Eric Romang / ZATAZ.com
• re: Ariba Spend Management System
  • From: gerald626
• [SECURITY] [DSA 779-2] New Mozilla Firefox packages fix several vulnerabilities
  • From: Martin Schulze
• [security bulletin] SSRT051005 rev.1 - HP ProLiant DL585 Servers Unauthorized Remote Access
  • From: Boren, Rich (HP SSRT)
• SUSE Security Announcement: kernel multiple security problems (SUSE-SA:2005:050)
  • From: Marcus Meissner
• iDEFENSE Security Advisory 09.01.05: 3Com Network Supervisor Directory Traversal Vulnerability
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 09.01.05: Novell NetMail IMAPD Command Continuation Request Heap Overflow
  • From: iDEFENSE Labs
• Re: secure client-side platform
  • From: Keith Oxenrider
• RE: Re: secure client-side platform
  • From: Mark Senior
• [SECURITY] [DSA 794-1] New polygen packages fix denial of service
  • From: Martin Schulze
• Re: secure client-side platform
  • From: devnull
• CYBSEC - Multiple Vendor Web Vulnerability Scanner Arbitrary Script Injection Vulnerability
  • From: Mariano Nuñez Di Croce
• [SECURITY] [DSA 800-1] New pcre3 packages fix arbitrary code execution
  • From: Martin Schulze
• [SECURITY] [DSA 798-1] New phproupware packages fix several vulnerabilities
  • From: Martin Schulze
• [SECURITY] [DSA 799-1] New webcalendar packages fix remote code execution
  • From: Michael Stone
• Re: Vulnerability in Symantec Anti Virus Corporate Edition v9.x]
  • From: Steven M. Christey
• CodePimps e-zine #0x07 was released
  • From: codepimps
• FileZilla weakly-encrypted password vulnerability: advisory + PoC
  • From: [#*at*#]
• MAXdev MD-Pro 1.0.73 (possibly prior versions) remote code execution / cross site scripting / path disclosure
  • From: retrogod
• [NOBYTES.COM: #11] MidiCart ASP Shopping Cart, Evaluation Version 7 & Standard & Pro - Multiple Vulnerabilities
  • From: John Cobb
• I have discovered small xss error in open webmail 2.41
  • From: s3cure
• IIS 5.1 allows for remote viewing of source code on FAT/FAT32 volumes using WebDAV
  • From: inge . henriksen
• [KDE Security Advisory] kcheckpass local root vulnerability
  • From: Dirk Mueller
• Microsoft Windows keybd_event validation vulnerability
  • From: Frederic Charpentier
• [OpenPKG-SA-2005.020] OpenPKG Security Advisory (proftpd)
  • From: OpenPKG
• [ GLSA 200509-02 ] Gnumeric: Heap overflow in the included PCRE library
  • From: Thierry Carrez
• [ GLSA 200509-05 ] Net-SNMP: Insecure RPATH
  • From: Thierry Carrez
• [ GLSA 200509-04 ] phpLDAPadmin: Authentication bypass
  • From: Thierry Carrez
• SUSE Security Announcement: php4, php5 remote code execution (SUSE-SA:2005:051)
  • From: Marcus Meissner
• Re: [Full-disclosure] Microsoft Windows keybd_event validation vulnerability
  • From: Jerome Athias
• [USN-145-2] wget bug fix
  • From: Martin Pitt
• [OpenPKG-SA-2005.017] OpenPKG Security Advisory (modssl)
  • From: OpenPKG
• [ GLSA 200509-03 ] OpenTTD: Format string vulnerabilities
  • From: Stefan Cornelius
• Re: CMS Made Simple <= 0.10 - PHP injection
  • From: garaged
• Multiple vulnerabilities in FreeBSD 'urban'
  • From: Shaun Colley
• Land Down Under 'events.php' Cross Site Scripting Vulnerability
  • From: conor . e . buckley
• Re: FileZilla weakly-encrypted password vulnerability: advisory + PoC
  • From: Nick Boyce
• PHP-Nuke
  • From: bhfh
• UNB 1.5.3 cross site scripting
  • From: retrogod
• Re: FileZilla weakly-encrypted password vulnerability: advisory + PoC
  • From: Nicholas Knight
• Re: FileZilla weakly-encrypted password vulnerability
  • From: Luigi Auriemma
• [NewAngels Advisory] aMember Pro 2.3.X - Remote File Include Vulnerability
  • From: 4Degrees
• Re: FileZilla weakly-encrypted password vulnerability: advisory + PoC
  • From: medhead
• phpCommunityCalendar 4.0.3 (possibly prior versions) sql injection / login bypass / cross site scripting
  • From: retrogod
• [SECURITY] [DSA 801-1] New ntp packages fix group id confusion
  • From: Martin Schulze
• Revised paper on "ICMP attacks against TCP"
  • From: Fernando Gont
• [OpenPKG-SA-2005.019] OpenPKG Security Advisory (openssh)
  • From: OpenPKG
• [OpenPKG-SA-2005.018] OpenPKG Security Advisory (pcre)
  • From: OpenPKG
• USB Lock Auto-Protect v1.5 - Local Password Encryption Weakness
  • From: unsecure
• [security bulletin] SSRT051023 rev.1 - HP OpenView Network Node Manager (OV NNM) Remote Unauthorized Privileged Access
  • From: security-alert
• Update: Realchat user impersonation - BSA 200506110001
  • From: Andreas Beck
• [SECURITY] [DSA 795-2] Updated i386 proftpd packages fix format string vulnerability
  • From: Michael Stone
• Secunia Research: SqWebMail Conditional Comments Script Insertion Vulnerability
  • From: Secunia Research
• (Annex A) ADSL Road Runner Exploit Description & Theory
  • From: gp32boy
• Vulnerability in myBloggie 2.1.3-beta and prior
  • From: os2a . bto
• [ GLSA 200509-06 ] Squid: Denial of Service vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• FreeBSD Security Advisory FreeBSD-SA-05:20.cvsbug
  • From: FreeBSD Security Advisories
• Vulnerability In SecureOL VE2 v1.05.1008
  • From: maxim
• Re: Microsoft Windows keybd_event validation vulnerability
  • From: Ansgar -59cobalt- Wiechers
• SQL Injection[2] In MyBB PR2
  • From: stranger-killer
• Re: [NOBYTES.COM: #11] MidiCart ASP Shopping Cart, Evaluation Version 7 & Standard & Pro - Multiple Vulnerabilities
  • From: [at]
• [SECURITY] [DSA 802-1] New cvs packages fix insecure temporary files
  • From: Martin Schulze
• MDKSA-2005:160 - Updated kdebase packages fix potential local root vulnerability
  • From: Mandriva Security Team
• MDKSA-2005:159 - Updated kdeedu packages fix tempfile vulnerability
  • From: Mandriva Security Team
• PBLang 4.65 (possibly prior versions) remote code execution
  • From: retrogod
• WebArchiveX - Unsafe Methods Vulnerability
  • From: Brett Moore
• MDKSA-2005:158 - Updated mplayer packages fix vulnerabilities
  • From: Mandriva Security Team
• MDKSA-2005:157 - Updated smb4k packages fix vulnerabilities
  • From: Mandriva Security Team
• [NewAngels Advisory #5] Stylemotion WEB//NEWS 1.4 Vulnerabilities
  • From: r . verton
• Rule bypassing in CheckPoint NGX R60
  • From: fitz
• MDKSA-2005:156 - Updated ntp packages fix small security-related issue.
  • From: Mandriva Security Team
• [ Suresec Advisories ] - Kcheckpass file creation vulnerability
  • From: Suresec Advisories
• RE: FileZilla weakly-encrypted password vulnerability: advisory + PoC
  • From: MacIntyre, Lawrence Paul
• Re: Microsoft Windows keybd_event validation vulnerability
  • From: galacticjello
• USN-160-2: Apache vulnerability
  • From: Martin Pitt
• [USN-177-1] Apache 2 vulnerabilities
  • From: Martin Pitt
• Cisco Security Advisory: Cisco IOS Firewall Authentication Proxy for FTP and Telnet Sessions Buffer Overflow
  • From: Cisco Systems Product Security Incident Response Team
• [USN-176-1] kcheckpass vulnerability
  • From: Martin Pitt
• RE: FileZilla weakly-encrypted password vulnerability: advisory + PoC
  • From: Mark Senior
• anti Windows XP SP2 firewall trick
  • From: crusoe
• [SECURITY] [DSA 803-1] New Apache packages fix HTTP request smuggling
  • From: Martin Schulze
• [SECURITY] [DSA 804-1] New kdelibs packages fix backup file information leak
  • From: Martin Schulze
• Secunia Research: ALZip ACE Archive Handling Buffer Overflow
  • From: Secunia Research
• Secunia Research: NOD32 Anti-Virus ARJ Archive Handling Buffer Overflow
  • From: Secunia Research
• [SECURITY] [DSA 805-1] New Apache2 packages fix several vulnerabilities
  • From: Martin Schulze
• MDKSA-2005:161 - Updated apache2 packages to address multiple vulnerabilities
  • From: Mandriva Security Team
• [SECURITY] [DSA 806-1] New cvs packages fix insecure temporary files
  • From: Martin Schulze
• TSLSA-2005-0047 - multi
  • From: Trustix Security Advisor
• iDEFENSE Security Advisory 09.09.05: GNU Mailutils 0.6 imap4d 'search' Format String Vulnerability
  • From: iDEFENSE Labs
• (TOOL) TAPiON (Polymorphic Decryptor Generator) Engine
  • From: Piotr Bania
• KillProcess 2.20 and priors "FileDescription" Local Buffer Overflow Issue
  • From: fRoGGz
• Cj Desing Three Aplications One Bug
  • From: psymera
• KillProcess 2.20 and priors "FileDescription" Local Buffer Overflow Issue
  • From: fRoGGz
• Zebedee DoS Vulnerability
  • From: Shiraishi.M
• class-1 Forum Software v 0.24.4 Remote code execution
  • From: retrogod
• [USN-178-1] Linux kernel vulnerabilities
  • From: Martin Pitt
• [USN-179-1] openssl weak default configuration
  • From: Martin Pitt
• FreeBSD Security Advisory FreeBSD-SA-05:20.cvsbug [REVISED]
  • From: FreeBSD Security Advisories
• [SECURITY] [DSA 807-1] New mod_ssl packages fix acl restriction bypass
  • From: Martin Schulze
• Re[2]: [Full-disclosure] (TOOL) TAPiON (Polymorphic Decryptor Generator) Engine
  • From: Alejandro Barrera
• Sawmill XSS vuln
  • From: Mark Terry
• Security Flaw in pam_per_user Module
  • From: Mark D. Roth
• SUSE Security Announcement: apache2 (SUSE-SA:2005:051)
  • From: Thomas Biege
• [SECURITY] [DSA 808-1] New tdiary packages fix Cross Site Request Forgery
  • From: Martin Schulze
• Re: [Full-disclosure] (TOOL) TAPiON (Polymorphic Decryptor Generator) Engine
  • From: Piotr Bania
• PHP Nuke <= 7.8 Multiple SQL Injections
  • From: r . verton
• Re: [Full-disclosure] (TOOL) TAPiON (Polymorphic Decryptor Generator) Engine
  • From: Alejandro Barrera
• util-linux: unintentional grant of privileges by umount
  • From: David Watson
• [ GLSA 200509-08 ] Python: Heap overflow in the included PCRE library
  • From: Thierry Carrez
• [OpenPKG-SA-2005.021] OpenPKG Security Advisory (squid)
  • From: OpenPKG
• [ GLSA 200509-07 ] X.Org: Heap overflow in pixmap allocation
  • From: Thierry Carrez
• [USN-83-2] LessTif 1 vulnerabilities
  • From: Martin Pitt
• [USN-181-1] Mozilla products vulnerability
  • From: Martin Pitt
• [SECURITY] [DSA 810-1] New Mozilla packages fix several vulnerabilities
  • From: Martin Schulze
• AzDGDatingLite V 2.1.3 remote code execution
  • From: retrogod
• Subscribe Me Pro 2.044.09P and prior Directory Traversal Vulnerability
  • From: h4cky0u
• [SECURITY] [DSA 809-1] New squid packages fix several vulnerabilities
  • From: Martin Schulze
• MDKSA-2005:162 - Updated squid packages fix vulnerabilities
  • From: Mandriva Security Team
• MDKSA-2005:163 - Updated MySQL packages fix vulnerability
  • From: Mandriva Security Team
• Re: anti Windows XP SP2 firewall trick
  • From: Ansgar -59cobalt- Wiechers
• Serious Security issue with broken - Microsoft's .Net XML Serialization API
  • From: Rohit
• Re: Serious Security issue with broken - Microsoft's .Net XML Serialization API
  • From: Rohit
• iDEFENSE Security Advisory 09.13.05: Linksys WRT54G Router Remote Administration Fixed Encryption Key Vulnerability
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 09.13.05: Linksys WRT54G 'restore.cgi' Configuration Modification Design Error Vulnerability
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 09.13.05: Linksys WRT54G Management Interface DoS Vulnerability
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 09.13.05: Linksys WRT54G 'upgrade.cgi' Firmware Upload Design Error Vulnerability
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 09.13.05: Linksys WRT54G Router Remote Administration apply.cgi Buffer Overflow Vulnerability
  • From: iDEFENSE Labs
• Re: [Snort-users] Snort DoS Fallacies
  • From: Martin Roesch
• Mozilla / Mozilla Firefox authentication weakness
  • From: 3APA3A
• Secunia Research: AVIRA Antivirus ACE Archive Handling Buffer Overflow
  • From: Secunia Research
• ATutor 1.5.1 SQL Injection / Admin credentials disclosure / remote code execution
  • From: retrogod
• [SECURITY] [DSA 814-1] New lm-sensors packages fix insecure temporary file
  • From: Martin Schulze
• Secunia Research: Ahnlab V3 Antivirus Multiple Vulnerabilities
  • From: Secunia Research
• Digital Scribe v1.4 Login Bypass / SQL injection / remote code execution
  • From: retrogod
• [SECURITY] [DSA 813-1] New centericq packages fix several vulnerabilities
  • From: Martin Schulze
• [SECURITY] [DSA 812-1] New turqstat packages fix buffer overflow
  • From: Martin Schulze
• Airscanner Mobile Security Advisory #05081203: vxTftpSrv 1.7.0 Remote Code Execution Buffer Overflow Vulnerability
  • From: contact
• Airscanner Mobile Security Advisory #05081101: vxWeb v.1.1.4 Denial of Service Vulnerability
  • From: contact
• DriverStudio Remote Control Authentication Bypass Vulnerability
  • From: cocoruder
• Airscanner Mobile Security Advisory #05081102: vxFtpSrv 0.9.7 Remote Code Execution Buffer Overflow Vulnerability
  • From: contact
• TWiki Remote Command Execution Vulnerability
  • From: Sap .
• SQL injection & XSS in phpoutsourcing Noah's classifieds
  • From: alireza hassani
• Avocent CCM: Port Access Control Bypass Vulnerability
  • From: spam
• Character Manipulation in Online Systems.
  • From: hackology
• gtkdiskfree insecure temporary file creation
  • From: ZATAZ Audits
• Is netcraft publishing URL of your intranet sites?
  • From: Saqib Ali
• Remote File Inclusion in MyGuestbook
  • From: rod hedor
• Re: [Full-disclosure] Mozilla / Mozilla Firefox authentication weakness
  • From: Juha-Matti Laurio
• 404 error XSS
  • From: Josh Zlatin-Amishav
• CastleCops ramps up fight against CoolWebSearch/HomeSearch
  • From: Paul Laudanski
• Online Dating Software by AEwebworks - aeDating Script <= 4.0 Version Vulnerability
  • From: alexsrb
• Oracle Reports: Generic SQL Injection Vulnerability via Lexical References
  • From: ak
• Re: AWstats Path Disclosure Vulnerability
  • From: Fournaux
• Re: PHP Nuke <= 7.8 Multiple SQL Injections
  • From: evaders99
• Re: [Full-disclosure] Mozilla / Mozilla Firefox authentication weakness
  • From: Daniel Veditz
• RE: [Snort-devel] Re: [Snort-users] Snort DoS Fallacies
  • From: Steven Sturges
• Anti Arp Poisoning Daemon (OpenAAPD) PS: Link corrected
  • From: Andrea Di Pasquale
• RE: [Snort-devel] Re: [Snort-users] Snort DoS Fallacies
  • From: Ferguson, Justin (IARC)
• Re: Re: Serious Security issue with broken - Microsoft's .Net XML Serialization API
  • From: darkangel . stt
• RE: [Full-disclosure] FireFox Host: Buffer Overflow is not justexploitable on FireFox
  • From: Peter Kruse
• [SECURITY] [DSA 811-1] New common-lisp-controller packages fix arbitrary code injection
  • From: Martin Schulze
• MDKSA-2005:164 - Updated XFree86/x.org packages fix vulnerability
  • From: Mandriva Security Team
• Re: PHP Nuke <= 7.8 Multiple SQL Injections
  • From: Paul Laudanski
• XSS Vulnerability in MIVA Merchant 5 - Includes Fix
  • From: admin
• Airscanner Mobile Security Advisory #05082201: File Transfer Anywhere v3.01 Local Server Password Disclosure
  • From: contact
• Re: AWstats Path Disclosure Vulnerability
  • From: cwh01
• PTL Advisory 050825 - HP LaserJet Network Username and Information Enumeration
  • From: Pinion Lab
• Re: AWstats Path Disclosure Vulnerability
  • From: Martin Pitt
• [FLSA-2005:160202] Updated mozilla packages fix security issues
  • From: Marc Deslauriers
• [FLSA-2005:162680] Updated Zlib packagea fix security issues
  • From: Marc Deslauriers
• [FLSA-2005:163047] Updated squirrelmail package fixes security issues
  • From: Marc Deslauriers
• [FLSA-2005:163274] Updated CUPS packages fix security issue
  • From: Marc Deslauriers
• FF IDN buffer overflow workaround works in Netscape too
  • From: Juha-Matti Laurio
• worring about YaST in SuSE 9.3 and maybe lower
  • From: innate
• Re: CastleCops ramps up fight against CoolWebSearch/HomeSearch
  • From: Paul Laudanski
• arc insecure temporary file creation
  • From: ZATAZ Audits
• Re: CastleCops ramps up fight against CoolWebSearch/HomeSearch
  • From: Times Enemy
• SUSE Security Announcement: squid (SUSE-SA:2005:053)
  • From: Thomas Biege
• ncompress insecure temporary file creation
  • From: ZATAZ Audits
• SUSE Security Announcement: evolution (SUSE-SA:2005:054)
  • From: Ludwig Nussel
• PHP SESSION MODIFICATION
  • From: unknow
• gwcc insecure temporary file creation
  • From: ZATAZ Audits
• [SECURITY] [DSA 815-1] New kdebase packages fix local root vulnerability
  • From: Martin Schulze
• (TOOL) TAPiON ver 0.1c
  • From: Piotr Bania
• [FLSA-2005:152919] Updated grip package fixes security issue
  • From: Marc Deslauriers
• TSLSA-2005-0049 - multi
  • From: Trustix Security Advisor
• Re: PHP SESSION MODIFICATION
  • From: David N Murray
• Re: PHP Nuke <= 7.8 Multiple SQL Injections
  • From: Matthias Jim Knopf
• Re: PHP Nuke <= 7.8 Multiple SQL Injections
  • From: Paul Laudanski
• RE: [Full-disclosure] FireFox Host: Buffer Overflow is not justexploitable on FireFox
  • From: Juha-Matti Laurio
• Re: [Full-disclosure] FireFox Host: Buffer Overflow is not just exploitable on FireFox
  • From: Juha-Matti Laurio
• CDMA1X Security
  • From: pen-test
• Greyhats Security back online
  • From: pvnick
• Re: worring about YaST in SuSE 9.3 and maybe lower
  • From: Marcus Meissner
• Re: [Full-disclosure] FireFox Host: Buffer Overflow is not just exploitable on FireFox
  • From: milw0rm Inc.
• Re: PHP Nuke <= 7.8 Multiple SQL Injections
  • From: Paul Laudanski
• Cisco IOS hacked?
  • From: ciscoioshehehe
• [ GLSA 200509-10 ] Mailutils: Format string vulnerability in imap4d
  • From: Thierry Carrez
• CuteNews 1.4.0 remote code execution
  • From: retrogod
• CuteNews 1.4.0 remote code execution
  • From: retrogod
• [ GLSA 200509-11 ] Mozilla Suite, Mozilla Firefox: Buffer overflow
  • From: Thierry Carrez
• Antigen 8.0 for Exchange/SMTP Rule Vulnerability
  • From: Alan Monaghan
• router worms and International Infrastructure [was: Re: IOS exploit]
  • From: Gadi Evron
• [Full-disclosure] killbits? should have named them kibbles and bits
  • From: Ill will
• Alstrasoft Epay Pro 2.0 and prior Directory Traversal Vulnerability
  • From: h4cky0u
• Web Application Security Analyzer for PHP-Nuke/phpBB CMS
  • From: Paul Laudanski
• ERRATA: [ GLSA 200507-20 ] Shorewall: Security policy bypass
  • From: Thierry Carrez
• Re: Airscanner Mobile Security Advisory #05082201: File Transfer Anywhere v3.01 Local Server Password Disclosure
  • From: 3APA3A
• [ GLSA 200509-12 ] Apache, mod_ssl: Multiple vulnerabilities
  • From: Thierry Carrez
• Dumb Question
  • From: Sean Warnock
• [BuHa-Security] Multiple vulnerabilities in (admincp/modcp of) vBulletin 3.0.8/9
  • From: bugtraq
• Possible memory corruption problems in Apple Safari
  • From: Jonathan Rockway
• Re: PHP Nuke <= 7.8 Multiple SQL Injections
  • From: Daniel Bonekeeper
• Re: PHP Nuke <= 7.8 Multiple SQL Injections
  • From: Paul Laudanski
• Re: PHP Nuke <= 7.8 Multiple SQL Injections
  • From: hans
• [ GLSA 200509-09 ] Py2Play: Remote execution of arbitrary Python code
  • From: Thierry Carrez
• [USN-184-1] umount vulnerability
  • From: Martin Pitt
• @System Security Conference
  • From: Giorgio Zoppi
• Whitepaper - Writing small shellcode
  • From: Dafydd Stuttard
• [ GLSA 200509-13 ] Clam AntiVirus: Multiple vulnerabilities
  • From: Thierry Carrez
• Alstrasoft Epay Pro 2.0 and prior Directory Traversal Vulnerability
  • From: h4cky0u
• Re: [Full-disclosure] Cisco IOS hacked?
  • From: Andrei Mikhailovsky
• [security bulletin] SSRT5999 rev.0 HP OpenVMS Secure Web Browser Mozilla Application Node Spoofing
  • From: security-alert
• [security bulletin] SSRT5971 rev.0 - HP Tru64 Unix FTP Daemon (ftpd) Remote Denial of Service (DoS)
  • From: security-alert
• Debian Security Host Bandwidth Saturation
  • From: Martin Schulze
• MDKSA-2005:165 - Updated cups packages fix vulnerability
  • From: Mandriva Security Team
• bacula insecure temporary file creation
  • From: Eric Romang / ZATAZ.com
• phpBB 2.0.17 remote avatar size bug
  • From: SmOk3
• Secunia Research: Opera Mail Client Attachment Spoofing and Script Insertion
  • From: Secunia Research
• Hesk Session ID Validation Vulnerability
  • From: os2a . bto
• MDKSA-2005:138-1 - Updated cups packages fix vulnerability
  • From: Mandriva Security Team
• [USN-185-1] CUPS vulnerability
  • From: Martin Pitt
• mercury imap4 remote BOF exploit ( IHSTeam )
  • From: c0d3r
• [ GLSA 200509-14 ] Zebedee: Denial of Service vulnerability
  • From: Thierry Carrez
• [ GLSA 200509-15 ] util-linux: umount command validation error
  • From: Thierry Carrez
• RE: phpBB 2.0.17 remote avatar size bug
  • From: Sean Sullivan
• Paper - How It's Difficult to Ruin a Good Name: An Analysis of Reputational Risk
  • From: Kenneth F. Belva
• Re: Subscribe Me Pro 2.044.09P and prior Directory Traversal Vulnerability
  • From: please_use_support_form
• Re: phpBB 2.0.17 remote avatar size bug
  • From: Peter Kieser
• MDKSA-2005:168 - Updated masqmail packages fix vulnerabilities
  • From: Mandriva Security Team
• MDKSA-2005:166 - Updated clamv packages fix vulnerabilities
  • From: Mandriva Security Team
• MDKSA-2005:167 - Updated util-linux packages fix umount vulnerability
  • From: Mandriva Security Team
• [BuHa-Security] Multiple vulnerabilities in (admincp/modcp of) vBulletin 3.0.7
  • From: bugtraq
• [SNS Advisory No.83] Webmin/Usermin PAM Authentication Bypass Vulnerability
  • From: snsadv
• PocketPC exploitation
  • From: Jose Morales
• UnixWare 7.1.4 : LibTIFF < 3.72 malformed data code exec
  • From: please_reply_to_security
• Upcoming Black Hat events announcement
  • From: Jeff Moss
• Re: Paper - How It's Difficult to Ruin a Good Name: An Analysis of Reputational Risk
  • From: hodejo1
• [security bulletin] SSRT5988 rev.1 - HP Tru64 Unix libXpm Remote Denial of Service (DoS) or Execute Privileged Code
  • From: security-alert
• FireFox exploit updated
  • From: Berend-Jan Wever
• Protty v.01A (beta) - shellcode execution protection library for Windows NT based systems
  • From: Piotr Bania
• OpenServer 6.0.0 : TCP Remote ICMP Denial Of Service Vulnerabilities
  • From: please_reply_to_security
• [SECURITY] [DSA 818-1] New kdeedu packages fix insecure temporary files
  • From: Martin Schulze
• RE: router worms and International Infrastructure [was: Re: IOS exploit]
  • From: martin
• Platinum Secure smartcard security bypass
  • From: acidemon
• HTTP Request Smuggling - ERRATA (the IIS 48K buffer phenomenon)
  • From: Amit Klein (AKsecurity)
• [SECURITY] [DSA 817-1] New python2.2 packages fix arbitrary code execution
  • From: Martin Schulze
• My Little Forum 1.5 / 1.6beta SQL Injection
  • From: retrogod
• Hack Dot AE v2
  • From: SpyHat
• [security bulletin] SSRT5998 Rev.2 HP System Management Homepage (v2.0.x) Denial of Service (DoS) and XSS
  • From: security-alert
• [scip_Advisory 1746] Microsoft Internet Explorer 6.0 embedded content cross site scripting
  • From: Marc Ruef
• Re: [Full-disclosure] [scip_Advisory 1746] Microsoft Internet Explorer 6.0 embedded content cross site scripting
  • From: Brion Vibber
• Secunia Research: PowerArchiver ACE/ARJ Archive Handling Buffer Overflow
  • From: Secunia Research
• Sql injection in jPortal version 2.3.1 (module download)
  • From: krasza
• TSLSA-2005-0051 - clamav
  • From: Trustix Security Advisor
• [SECURITY] [DSA 819-1] New python2.1 packages fix arbitrary code execution
  • From: Martin Schulze
• Secunia Research: 7-Zip ARJ Archive Handling Buffer Overflow
  • From: Secunia Research
• Re: Remote File Inclusion in MyGuestbook
  • From: security curmudgeon
• PhpMyFAQ 1.5.1 multiple vulnerabilities
  • From: retrogod
• Rita Scams Call to Arms - Update
  • From: Gadi Evron
• AlstraSoft E-Friends Remote Command Exucetion
  • From: khc
• MailGust 1.9 SQL Injection
  • From: retrogod
• My Little Forum 1.5 / 1.6beta SQL Injection
  • From: retrogod
• "Exploiting the XmlHttpRequest object in IE" - paper by Amit Klein
  • From: Amit Klein (AKsecurity)
• Hijacking Bluetooth Headsets for Fun and Profit?
  • From: KF (lists)
• [ GLSA 200509-17 ] Webmin, Usermin: Remote code execution through PAM authentication
  • From: Thierry Carrez
• [SECURITY] [DSA 820-1] New courier packages fix cross-site scripting
  • From: Martin Schulze
• [SECURITY] [DSA 817-1] New python2.2 packages fix arbitrary code execution
  • From: joey
• [USN-186-1] Mozilla and Firefox vulnerabilities
  • From: Martin Pitt
• [ GLSA 200509-16 ] Mantis: XSS and SQL injection vulnerabilities
  • From: Thierry Carrez
• Server crash and motd deletion in MultiTheftAuto 0.5 patch 1
  • From: Luigi Auriemma
• FL Studio 5 (.flp file processing) Heap Overflow
  • From: varunuppal
• SUSE Security Announcement: XFree86-server,xorg-x11-server (SUSE-SA:2005:056)
  • From: Thomas Biege
• [ GLSA 200509-18 ] Qt: Buffer overflow in the included zlib library
  • From: Sune Kloppenborg Jeppesen
• [USN-186-2] Ubuntu 4.10 packages for USN-186-1 Firefox security update
  • From: Martin Pitt
• [USN-187-1] Linux kernel vulnerabilities
  • From: Martin Pitt
• Re: "Exploiting the XmlHttpRequest object in IE" - paper by Amit Klein
  • From: anonymous
• [ISR] - Novell GroupWise Client Integer Overflow
  • From: Francisco Amato
• MDKSA-2005:170 - Updated mozilla packages fix multiple vulnerabilities
  • From: Mandriva Security Team
• Re: "Exploiting the XmlHttpRequest object in IE" - paper by Amit Klein
  • From: Yutaka OIWA
• Announce: RSBAC v1.2.5 released
  • From: Amon Ott
• lucidCMS 1.0.11 is susceptible to a cross site scripting attack
  • From: x1ngbox
• ElseNot project
  • From: layne
• SEO borad: SQL injection
  • From: ghc
• Nokia 7610, 3210 denial of service in OBEX.
  • From: A. Ramos
• FreeBSD GNU Mailutils 0.6 imap4d exploit
  • From: angelo
• CMS Made Simple 0.10 is susceptible to a cross site scripting attack.
  • From: X1ngBox
• RealPlayer && HelixPlayer Remote Format String Exploit
  • From: c0ntexb
• PacSec 05
  • From: Dragos Ruiu
• MDKSA-2005:169 - Updated mozilla-firefox packages fix multiple vulnerabilities
  • From: Mandriva Security Team
• Re: [ISR] - Novell GroupWise Client Integer Overflow
  • From: Crist J. Clark
• [ GLSA 200509-19 ] PHP: Vulnerabilities in included PCRE and XML-RPC libraries
  • From: Thierry Carrez
• Mantis Bugtracker - Remote Database Scanner and XSS Vulnerabilities
  • From: Joxean Guay del Paraguay
• Re: "Exploiting the XmlHttpRequest object in IE" - paper by Amit Klein
  • From: Amit Klein (AKsecurity)
• Is the Bottom Line Impacted by Security Breaches?
  • From: Kenneth F. Belva
• [SECURITY] [DSA 821-1] New python2.3 packages fix arbitrary code execution
  • From: Martin Schulze
• Bypassing Personal Firewall (Zone Alarm Pro) Using DDE-IPC
  • From: Debasis Mohanty
• PHP-Fusion v6.00.109 SQL Injection / admin|users credentials disclosure
  • From: retrogod
• OpenServer 5.0.7 OpenServer 6.0.0 : UnZip File Permissions Change Vulnerability
  • From: please_reply_to_security
• Re: PocketPC exploitation
  • From: Jose Morales
• [SECURITY] [DSA 824-1] New ClamAV packages fix denial of service
  • From: Martin Schulze
• [SECURITY] [DSA 797-2] Updated zsync i386 packages fix build error
  • From: Michael Stone
• Serendipity: Account Hijacking / CSRF Vulnerability
  • From: enji
• Re: Bypassing Personal Firewall (Zone Alarm Pro) Using DDE-IPC
  • From: warl0ck
• SquirrelMail Address Add Plugin XSS
  • From: Moritz Naumann
• Re: PHP-Fusion v6.00.109 SQL Injection / admin|users credentials disclosure
  • From: Petko Petkov
• [SECURITY] [DSA 823-1] New util-linux packages fix privilege escalation
  • From: Martin Schulze
• [SECURITY] [DSA 825-1] New loop-aes-utils packages fix privilege escalation
  • From: Martin Schulze
• [SECURITY] [DSA 822-1] New gtkdiskfree packages fix insecure temporary file
  • From: Martin Schulze
• [USN-188-1] AbiWord vulnerability
  • From: Martin Pitt
• [USN-189-1] cpio vulnerabilities
  • From: Martin Pitt
• [USN-190-1] SNMP vulnerability
  • From: Martin Pitt
• [USN-191-1] unzip vulnerability
  • From: Martin Pitt
• AV == parasites? (was: PocketPC exploitation)
  • From: Michael Shigorin
• Lucid CMS 1.0.11 SQL Injection / Login Bypass / remote code execution
  • From: retrogod