Mail Index

• Thread Index

• Zone Labs response to "Bypassing Personal Firewall (Zone Alarm Pro) Using DDE-IPC"
  • From: Zone Labs Security Team
• [SECURITY] [DSA 832-1] New gopher packages fix several buffer overflows
  • From: Martin Schulze
• Re: PocketPC exploitation
  • From: Denis Jedig
• apachetop insecure temporary file creation
  • From: ZATAZ Audits
• [SECURITY] [DSA 830-1] New ntlmaps packages fix information leak
  • From: Martin Schulze
• Re: Serendipity: Account Hijacking / CSRF Vulnerability
  • From: kreon
• Multiple vulnerabilities in Merak Mail Server 8.2.4r with Icewarp Web Mail 5.5.1
  • From: ss_contacts
• [ GLSA 200509-21 ] Hylafax: Insecure temporary file creation in xferfaxstats script
  • From: Thierry Carrez
• Re: PocketPC exploitation
  • From: Joel Maslak
• [SECURITY] [DSA 826-1] New helix-player packages fix multiple vulnerabilities
  • From: Michael Stone
• Re: PHP-Fusion v6.00.109 SQL Injection / admin|users credentials disclosure
  • From: security curmudgeon
• Re: Bypassing Personal Firewall (Zone Alarm Pro) Using DDE-IPC
  • From: Paul Laudanski
• RE: "Exploiting the XmlHttpRequest object in IE" - paper by Amit Klein
  • From: Sergey V. Gordeychik
• Citrix Metaframe Presentation Server bypassing policies
  • From: gustavog
• [SECURITY] [DSA 831-1] New mysql-dfsg packages fix arbitrary code execution
  • From: Martin Schulze
• [USN-192-1] Squid vulnerability
  • From: Martin Pitt
• Announce: Bluetooth mailing list - Bluetraq
  • From: Adam Laurie
• iDEFENSE Security Advisory 09.30.05: RealNetworks RealPlayer/HelixPlayer RealPix Format String Vulnerability
  • From: iDEFENSE Labs
• Buffer-overflow and directory traversal bugs in Virtools Web Player 3.0.0.100
  • From: Luigi Auriemma
• TSLSA-2005-0053 - unzip
  • From: Trustix Security Advisor
• Re: IIS 5.1 allows for remote viewing of source code on FAT/FAT32 volumes using WebDAV
  • From: inge . henriksen
• UPDATE: [ GLSA 200509-11 ] Mozilla Suite, Mozilla Firefox: Multiple vulnerabilities
  • From: Thierry Carrez
• [SECURITY] [DSA 829-1] New mysql packages fix arbitrary code execution
  • From: Martin Schulze
• BID #14752 update
  • From: Josh Zlatin-Amishav
• [SECURITY] [DSA 809-2] New squid packages fix denial of service
  • From: Martin Schulze
• [ GLSA 200509-20 ] AbiWord: RTF import stack-based buffer overflow
  • From: Thierry Carrez
• [SECURITY] [DSA 828-1] New squid packages fix denial of service
  • From: Martin Schulze
• [SECURITY] [DSA 827-1] New backupninja packages fix insecure temporary file
  • From: Michael Stone
• [SECURITY] [DSA 836-1] New cfengine2 packages fix arbitrary file overwriting
  • From: Martin Schulze
• MyBloggie 2.1.3beta null char + SQL Injection -> Login Bypass
  • From: retrogod
• [SECURITY] [DSA 835-1] New cfengine packages fix arbitrary file overwriting
  • From: Martin Schulze
• [Information Disclosure] NetForce v4.02 Sends NIS Password Maps with passwords hashes over sendmail
  • From: bambenek
• [SECURITY] [DSA 833-1] New mysql-dfsg-4.1 packages fix arbitrary code execution
  • From: Martin Schulze
• [SECURITY] [DSA 834-1] New prozilla packages fix arbitrary code execution
  • From: Martin Schulze
• Security Advisory for Bugzilla 2.18.3, 2.20rc2, and 2.21
  • From: mkanat
• RE: Careless Law Enforcement Computer Forensics Lacking InfoSec Expertise Causes Suicides
  • From: Lachniet, Mark
• [SECURITY] [DSA 837-1] New Mozilla Firefox packages fix denial of service
  • From: Martin Schulze
• [SECURITY] [DSA 838-1] New mozilla-firefox packages fox multiple vulnerabilities
  • From: Michael Stone
• Careless Law Enforcement Computer Forensics Lacking InfoSec Expertise Causes Suicides
  • From: Jason Coombs
• Re: Online Dating Software by AEwebworks - aeDating Script <= 4.0 Version Vulnerability
  • From: security
• Trillian remote crashable
  • From: philipp
• Kaspersky Antivirus Remote Heap Overflow
  • From: list
• RE: Careless Law Enforcement Computer Forensics Lacking InfoSec Expertise Causes Suicides
  • From: L. Adrian Griffis
• MDKSA-2005:171 - Updated kernel packages fix multiple vulnerabilities
  • From: Mandriva Security Team
• [SECURITY] [DSA 840-1] New drupal packages fix remote command execution
  • From: Martin Schulze
• [SECURITY] [DSA 842-1] New egroupware packages fix arbitrary code execution
  • From: Martin Schulze
• Call for Papers - DIMVA 2006
  • From: Thomas Biege
• [SECURITY] [DSA 839-1] New apachetop packages fix insecure temporary file
  • From: Martin Schulze
• RE: Careless Law Enforcement Computer Forensics Lacking InfoSec Expertise Causes Suicides
  • From: dave kleiman
• RE: Careless Law Enforcement Computer Forensics Lacking InfoSec Expertise Causes Suicides
  • From: Neil Dickey
• Advisory: WZCS vulnerabilities
  • From: donctl
• Re: Careless Law Enforcement Computer Forensics Lacking InfoSec Expertise Causes Suicides
  • From: Stefano Zanero
• [ GLSA 200510-01 ] gtkdiskfree: Insecure temporary file creation
  • From: Thierry Carrez
• [USN-155-3] Fixed mozilla locale packages
  • From: Martin Pitt
• [USN-193-1] dia vulnerability
  • From: Martin Pitt
• [ GLSA 200510-02 ] Berkeley MPEG Tools: Multiple insecure temporary files
  • From: Thierry Carrez
• [security bulletin] SSRT051041 rev.0 - HP-UX Mozilla Remote Unauthorized Execution of Privileged Code or Denial of Service (DoS)
  • From: security-alert
• [SECURITY] [DSA 833-2] New mysql-dfsg-4.1 package fixes arbitrary code execution
  • From: Martin Schulze
• [ GLSA 200510-03 ] Uim: Privilege escalation vulnerability
  • From: Sune Kloppenborg Jeppesen
• A common researcher diagnosis error: misreading error messages
  • From: Steven M. Christey
• [security bulletin] SSRT051040 rev.0 - HP-UX Mozilla Remote Unauthorized Execution of Privileged Code
  • From: security-alert
• [security bulletin] SSRT5940 rev.2 - HP-UX Mozilla remote, unauthorized user may execute privileged code
  • From: security-alert
• [security bulletin] SSRT051030 rev.1 - HP OpenView Event Correlation Services (OV ECS) Remote Unauthorized Privileged Access
  • From: security-alert
• [security bulletin] SSRT051023 rev.5 - HP OpenView Network Node Manager (OV NNM) Remote Unauthorized Privileged Access
  • From: security-alert
• [ GLSA 200510-04 ] Texinfo: Insecure temporary file creation
  • From: Thierry Carrez
• iDEFENSE Security Advisory 10.04.05: UW-IMAP Netmailbox Name Parsing Buffer Overflow Vulnerability
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 10.04.05: Symantec AntiVirus Scan Engine Web Service Buffer Overflow Vulnerability
  • From: iDEFENSE Labs
• RE: iDEFENSE Security Advisory 10.04.05: Symantec AntiVirus Scan Engine Web Service Buffer Overflow Vulnerability
  • From: iDEFENSE Labs
• [SECURITY] [DSA 843-1] New arc packages fix insecure temporary files
  • From: Martin Schulze
• RE: Advisory: WZCS vulnerabilities
  • From: Brian J. Bartlett
• Patches available for critical flaws in HP Openview
  • From: NGSSoftware Insight Security Research
• [SECURITY] [DSA 844-1] New mod-auth-shadow packages fix authentication bypass
  • From: Martin Schulze
• Some new whitepapers ...
  • From: David Litchfield
• Secunia Research: ALZip Multiple Archive Handling Buffer Overflow
  • From: Secunia Research
• PAKCON II: Call for Paper (CfP), Final Call!
  • From: Ayaz Ahmed Khan
• Announcement : Core Banking Application Security List
  • From: Lila Buchalski
• RE: Some new whitepapers ...
  • From: Lila Buchalski
• [security bulletin] SSRT4743, SSRT4884 rev.1 - HP Tru64 UNIX TCP/IP remote Denial of Service (DoS)
  • From: security-alert
• Secunia Research: PHP-Fusion Two SQL Injection Vulnerabilities
  • From: Secunia Research
• Secunia Research: Webroot Desktop Firewall Two Vulnerabilities
  • From: Secunia Research
• Planet Technology Corp FGSW2402RS switch default password / "backdoor"
  • From: lms
• WASC Threat Classification in 4 languages
  • From: contact
• [security bulletin] SSRT051004 rev.1 - HP-UX Java Runtime Environment (JRE) Untrusted Applet Elevates Privilege
  • From: security-alert
• aspReady FAQ - open for SQL-injections
  • From: preben
• [ GLSA 200510-06 ] Dia: Arbitrary code execution through SVG import
  • From: Sune Kloppenborg Jeppesen
• High Risk Vulnerability in Sun Directory Server
  • From: NGSSoftware Insight Security Research
• Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers
  • From: David Litchfield
• [SECURITY] [DSA 845-1] New mason packages fix missing init script
  • From: Martin Schulze
• Re: Some new whitepapers ...
  • From: Jerome Athias
• [ GLSA 200510-05 ] Ruby: Security bypass vulnerability
  • From: Sune Kloppenborg Jeppesen
• [USN-194-1] texinfo vulnerability
  • From: Martin Pitt
• Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers
  • From: Rainer Duffner
• xloadimage buffer overflow.
  • From: Ariel Berkman
• Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers
  • From: David Litchfield
• Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers
  • From: Cesar
• Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers
  • From: Rainer Duffner
• [SECURITY] [DSA 846-1] New cpio packages fix several vulnerabilities
  • From: Martin Schulze
• [security bulletin] SSRT051043 rev.0 - Apache Remote Unauthorized access
  • From: security-alert
• [security bulletin] SSRT051003 rev.1 - HP-UX Java Web Start remote unauthorized privileged access
  • From: security-alert
• Cross-Site-Scripting Vulnerabilities in Oracle HTMLDB
  • From: ak
• Plaintext Password Vulnerabilitiy during Installation of Oracle HTMLDB
  • From: ak
• Cross-Site-Scripting Vulnerability in Oracle iSQL*Plus
  • From: ak
• Cross-Site-Scripting Vulnerability in Oracle XMLDB
  • From: ak
• Shutdown TNS Listener via Oracle iSQL*Plus
  • From: ak
• Shutdown TNS Listener via Oracle Forms Servlet
  • From: ak
• MDKSA-2005:172 - Updated openssh packages fix GSSAPI credentials vulnerability
  • From: Mandriva Security Team
• MDKSA-2005:173 - Updated mozilla-firefox packages fix vulnerabilities
  • From: Mandriva Security Team
• MDKSA-2005:174 - Updated mozilla-thunderbird packages fix multiple vulnerabilities
  • From: Mandriva Security Team
• MDKSA-2005:175 - Updated texinfo packages fix temporary file vulnerability
  • From: Mandriva Security Team
• Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers
  • From: Gadi Evron
• Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers
  • From: David Litchfield
• Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers
  • From: Gadi Evron
• Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers
  • From: David Litchfield
• Re: Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers
  • From: ak
• Aenovo Multiple Vulnerabilities
  • From: advisory
• [ GLSA 200510-07 ] RealPlayer, Helix Player: Format string vulnerability
  • From: Thierry Carrez
• Re: [Dailydave] Security contact for ...
  • From: security curmudgeon
• MailEnable W3C Logging Remote Buffer Overflow Proof of Concept
  • From: advisory
• Utopia News Pro 1.1.3 SQL Injection / cross site scripting
  • From: retrogod
• Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers
  • From: Ivan .
• Re: Security contact for ...
  • From: Williams, James K
• Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers
  • From: Radoslav Dejanović
• [ GLSA 200510-09 ] Weex: Format string vulnerability
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200510-08 ] xine-lib: Format string vulnerability
  • From: Sune Kloppenborg Jeppesen
• [SECURITY] [DSA 849-1] New shorewall packages fix firewall bypass
  • From: Martin Schulze
• [SECURITY] [DSA 848-1] New masqmail packages fix several vulnerabilities
  • From: Martin Schulze
• [SECURITY] [DSA 847-1] New dia packages fix arbitrary code execution
  • From: Martin Schulze
• Cyphor 0.19 SQL Injection / Board takeover / cross site scripting
  • From: retrogod
• Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers
  • From: Tony Jambu
• Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers
  • From: Kurt Seifried
• MDKSA-2005:177 - Updated hylafax packages fix temporary file vulnerability
  • From: Mandriva Security Team
• MDKSA-2005:176 - Updated webmin package fixes authentication bypass vulnerability
  • From: Mandriva Security Team
• gnome-pty-helper writes arbitrary utmp records
  • From: Paul Szabo
• Antivirus detection bypass by special crafted archive.
  • From: unsecure
• [USN-196-1] Xine library vulnerability
  • From: Martin Pitt
• [USN-198-1] cfengine vulnerabilities
  • From: Martin Pitt
• [USN-197-1] Shorewall vulnerability
  • From: Martin Pitt
• [USN-199-1] Linux kernel vulnerabilities
  • From: Martin Pitt
• [USN-195-1] Ruby vulnerability
  • From: Martin Pitt
• CodeCon 2006 Call For Papers
  • From: Len Sassaman
• [EEYEB20050803] - Windows UMPNPMGR wsprintfW Stack Buffer Overflow Vulnerability
  • From: Advisories
• [EEYEB20050915] - MDT2DD.DLL COM Object Uninitialized Heap Memory Vulnerability
  • From: Advisories
• [EEYEB20050708] Microsoft Distributed Transaction Coordinator Memory Modification Vulnerability
  • From: Advisories
• [EEYEB20050510] - Microsoft DirectShow Remote Code Vulnerability
  • From: Advisories
• iDEFENSE Security Advisory 10.11.05: Microsoft Distributed Transaction Controller TIP DoS Vulnerability
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 10.11.05: Microsoft Distributed Transaction Controller Packet Relay DoS Vulnerability
  • From: iDEFENSE Labs
• The Malloc Maleficarum
  • From: Phantasmal Phantasmagoria
• Secunia Research: WinRAR Format String and Buffer Overflow Vulnerabilities
  • From: Secunia Research
• [KDE Security Advisory] KOffice/KWord RTF import buffer overflow
  • From: Dirk Mueller
• XSS vulnerability in Zeroblog
  • From: alireza hassani
• FreeBSD Security Advisory FreeBSD-SA-05:21.openssl
  • From: FreeBSD Security Advisories
• [SECURITY] [DSA 862-1] New Ruby 1.6 packages fix safety bypass
  • From: Martin Schulze
• [SECURITY] [DSA 861-1] New uw-imap packages fix arbitrary code execution
  • From: Martin Schulze
• [SECURITY] [DSA 860-1] New Ruby packages fix safety bypass
  • From: Martin Schulze
• versatileBulletinBoard V1.0.0 RC2 (possibly prior versions) multiple SQL injection vulnerabilities / login bypass / board takeover
  • From: rgod
• iDEFENSE Security Advisory 10.10.05: Kaspersky Anti-Virus Engine CHM File Parser Buffer Overflow Vulnerability
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 10.10.05: SGI IRIX runpriv Design Error Vulnerability
  • From: iDEFENSE Labs
• [SECURITY] [DSA 859-1] New xli packages fix arbitrary code execution
  • From: Martin Schulze
• [SECURITY] [DSA 858-1] New xloadimage packages fix arbitrary code execution
  • From: Martin Schulze
• [SECURITYREASON.COM] phpMyAdmin Local file inclusion 2.6.4-pl1
  • From: max
• PullThePlug Contest: Call For Papers
  • From: announcements
• Re: Opinion: Complete failure of Oracle security response and utter neglect of t
  • From: Silent / Saracoth
• [SECURITY] [DSA 857-1] New graphviz packages fix insecure temporary file
  • From: Martin Schulze
• [SECURITY] [DSA 856-1] New py2play packages fix arbitrary code execution
  • From: Martin Schulze
• [SECURITY] [DSA 855-1] New weex packages fix arbitrary code execution
  • From: Martin Schulze
• Announcement: The Web Application Firewall Evaluation Criteria v1
  • From: contact
• [SECURITY] [DSA 854-1] New tcpdump packages fix denial of service
  • From: Martin Schulze
• [SECURITY] [DSA 853-1] New ethereal packages fix several vulnerabilities
  • From: Martin Schulze
• [SECURITY] [DSA 852-1] New up-imapproxy packages fix arbitrary code execution
  • From: Martin Schulze
• [SECURITY] [DSA 851-1] New openvpn packages fix denial of service
  • From: Martin Schulze
• [SECURITY] [DSA 850-1] New tcpdump packages fix denial of service
  • From: Martin Schulze
• [USN-200-1] Thunderbird vulnerabilities
  • From: Martin Pitt
• [ GLSA 200510-10 ] uw-imap: Remote buffer overflow
  • From: Thierry Carrez
• using php local file include vulnerabilities for command execution
  • From: Andreas Zeidler
• MDKSA-2005:180 - Updated xine-lib packages fixes cddb vulnerability
  • From: Mandriva Security Team
• MDKSA-2005:179 - Updated openssl packages fix vulnerabilities
  • From: Mandriva Security Team
• Re: using php local file include vulnerabilities for command execution
  • From: Andreas Zeidler
• MDKSA-2005:178 - Updated squirrelmail packages fixes XSS vulberability
  • From: Mandriva Security Team
• [USN-202-1] KOffice vulnerability
  • From: Martin Pitt
• [SECURITY] [DSA 863-1] New xine-lib packages fix arbitrary code execution
  • From: Martin Schulze
• [ GLSA 200510-11 ] OpenSSL: SSL 2.0 protocol rollback
  • From: Thierry Carrez
• [SEC-1 Advisory] GFI MailSecurity 8.1 Web Module Buffer Overflow
  • From: Gary Oleary-Steele
• [USN-201-1] SqWebmail vulnerabilities
  • From: Martin Pitt
• MDKSA-2005:181 - Updated squid packages fix vulnerabilities
  • From: Mandriva Security Team
• Linux Orinoco drivers information leakage
  • From: Meder Kydyraliev
• Re: [SECURITYREASON.COM] phpMyAdmin Local file inclusion 2.6.4-pl1
  • From: Andreas Zeidler
• Research for network security news article
  • From: lgreenem
• [SEC-1 Advisory] Collaboration Data Objects Buffer Overflow Vulnerability
  • From: Gary Oleary-Steele
• VERITAS NetBackup: Java User-Interface, format string vulnerability
  • From: secure
• Re: VoIP-Phones: Weakness in proccessing SIP-Notify-Messages
  • From: Tobias Glemser
• ZDI-05-001: VERITAS NetBackup Remote Code Execution
  • From: zdi-disclosures
• Secunia Research: Novell NetMail NMAP Agent "USER" Buffer Overflow Vulnerability
  • From: Secunia Research
• [SECURITY] [DSA 865-1] New hylafax packages fix insecure temporary files
  • From: Martin Schulze
• [SECURITY] [DSA 864-1] New Ruby 1.8 packages fix safety bypass
  • From: Martin Schulze
• Kerio Personal Firewall and Kerio Server Firewall FWDRV driver Local Denial of Service
  • From: Piotr Bania
• Yapig: XSS / Code Injection Vulnerability
  • From: enji
• [USN-203-1] Abiword vulnerabilities
  • From: Martin Pitt
• Secunia Research: AhnLab V3 Antivirus ALZ/UUE/XXE Archive Handling Buffer Overflow
  • From: Secunia Research
• [security bulletin] SSRT051041 rev.1 - HP-UX Mozilla Remote Unauthorized Execution of Privileged Code or Denial of Service (DoS)
  • From: security-alert
• [security bulletin] SSRT5975 HP-UX Running on Itanium Platforms Local Denial of Service (DoS)
  • From: Security Alert
• iDEFENSE Security Advisory 10.13.05: Multiple Vendor XMail 'sendmail' Recipient Buffer Overflow Vulnerability
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 10.13.05: Multiple Vendor wget/curl NTLM Username Buffer Overflow Vulnerability
  • From: iDEFENSE Labs
• [USN-205-1] Curl and wget vulnerabilities
  • From: Martin Pitt
• Re: Antivirus detection bypass by special crafted archive.
  • From: Williams, James K
• RTasarim WebAdmin modul SQL injection
  • From: khc
• Google Talk cleartext proxy credentials vulnerability
  • From: m123303
• MDKSA-2005:182 - Updated curl packages fix NTLM authentication vulnerability
  • From: Mandriva Security Team
• Airscanner Mobile Security Advisory #05101001: iTunes Shared Music Denial of Service/Spoofing/Flooding/Abuse
  • From: Seth Fogie
• MDKSA-2005:183 - Updated wget packages fix NTLM authentication vulnerability
  • From: Mandriva Security Team
• Gallery 2.x Remote File Access Vulnerability
  • From: Bharat Mediratta
• CAID 33485 - Computer Associates iGateway debug mode HTTP GET request buffer overflow vulnerability
  • From: Williams, James K
• Trusted Digital, Trusted Mobility Suite Authorization Bypass Vulnerability
  • From: none
• [ GLSA 200510-12 ] KOffice, KWord: RTF import buffer overflow
  • From: Sune Kloppenborg Jeppesen
• [USN-204-1] SSL library vulnerability
  • From: Martin Pitt
• MDKSA-2005:184 - Updated cfengine packages fix temporary file vulnerabilities
  • From: Mandriva Security Team
• [KAPDA::#6] Punbb SQL Injection Vulnerability
  • From: advisory
• Security Contacr for Mycall
  • From: Fixer
• [ GLSA 200510-13 ] SPE: Insecure file permissions
  • From: Thierry Carrez
• MDKSA-2005:185 - Updated koffice packages fix KWord RTF import overflow vulnerability
  • From: Mandriva Security Team
• Re: Google Talk cleartext proxy credentials vulnerability
  • From: 3APA3A
• [ GLSA 200510-14 ] Perl, Qt-UnixODBC, CMake: RUNPATH issues
  • From: Thierry Carrez
• [USN-206-1] Lynx vulnerability
  • From: Martin Pitt
• [USN-208-1] SSH server vulnerability
  • From: Martin Pitt
• [USN-207-1] PHP vulnerability
  • From: Martin Pitt
• [USN-208-1] graphviz vulnerability
  • From: Martin Pitt
• Exploiting Windows Device Drivers Whitepaper
  • From: Piotr Bania
• Ciscos VPN-Client-Passwords can be decrypted
  • From: Thierry Zoller
• Yahoo RSS XSS Vulnerability (Correction)
  • From: alljer
• SUSE Security Announcement: OpenWBEM (SUSE-SA:2005:060)
  • From: Sebastian Krahmer
• ie7 will have more mechanisms
  • From: liudieyu
• flexbackup default config insecure temporary file creation
  • From: ZATAZ Audits
• [OpenPKG-SA-2005.022] OpenPKG Security Advisory (openssl)
  • From: OpenPKG
• Lynx Remote Buffer Overflow
  • From: Ulf Harnhammar
• Yahoo RSS XSS Vulnerability
  • From: alljer
• PHP local safedir restriction bypass
  • From: slythers
• [ GLSA 200510-15 ] Lynx: Buffer overflow in NNTP processing
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200510-16 ] phpMyAdmin: Local file inclusion vulnerability
  • From: Sune Kloppenborg Jeppesen
• Re: Aenovo Multiple Vulnerabilities (Patch)
  • From: ali202
• winrar 3.50 Exploit
  • From: edward11
• [USN-210-1] netpbm vulnerability
  • From: Martin Pitt
• Re: [Full-disclosure] [USN-208-1] SSH server vulnerability
  • From: Martin Pitt
• Secunia Research: MySource Cross-Site Scripting and File Inclusion Vulnerabilities
  • From: Secunia Research
• Re: [Full-disclosure] Kerio Personal Firewall and Kerio Server Firewall FWDRV driver Local Denial of Service
  • From: Paul Laudanski
• SECURECon 2006 Call for papers!
  • From: Will Belcher
• MDKSA-2005:186 - Updated lynx packages fix remote buffer overflow
  • From: Mandriva Security Team
• Re: [Full-disclosure] Ciscos VPN-Client-Passwords can be decrypted
  • From: Clayton Kossmeyer
• NetFlow Analyzer 4 XSS Vulnerability
  • From: why
• e107 remote commands execution
  • From: retrogod
• Windows host based firewall tester
  • From: Tim
• Linksys WRT54G/S Directory Traversal
  • From: Shell
• Re: [KAPDA::#6] Punbb SQL Injection Vulnerability
  • From: arpen
• Multiple Critical and High Vulnerabilities in Oracle Database Server
  • From: NGSSoftware Insight Security Research
• Re: Require many large corporate emails for contact regarding vulnerability.
  • From: dcrab
• Revision: Multiple Critical and High Vulnerabilities in Oracle Database Server
  • From: David Litchfield
• Metasploit Framework v2.5
  • From: H D Moore
• SUSE Security Announcement: openSSL protocol downgrade attack (SUSE-SA:2005:061)
  • From: Marcus Meissner
• Re: [KAPDA::#6] Punbb SQL Injection Vulnerability
  • From: alireza hassani
• SecurityAlert SA025 : PHPNuke Remote Directory Traversal
  • From: sp3x
• Re: Windows host based firewall tester
  • From: Morten Torstensen
• cacam_logsecurity_win32 exploit published on 20051018 by Metasploit
  • From: Williams, James K
• Cisco Security Advisory:Cisco 11500 Content Services Switch SSL Malformed Client Certificate Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [security bulletin] SSRT051052 rev.0 - HP OpenView Operations and OpenView VantagePoint Java Runtime Environment (JRE) Remote Privileged Access
  • From: security-alert
• [SECURITY] [DSA 868-1] New Mozilla Thunderbird packages fix several vulnerabilities
  • From: Martin Schulze
• RE: CAID 33485 - Computer Associates iGateway debug mode HTTP GET request buffer overflow vulnerability
  • From: Williams, James K
• XSS & Path Disclosure in Chipmunk's products
  • From: alireza hassani
• Oracle 10g - emagent.exe Stack-Based Overflow
  • From: SPI Labs
• [SECURITY] [DSA 866-1] New Mozilla packages fix several vulnerabilities
  • From: Martin Schulze
• Oracle Workflow CSS Vulnerability wf_monitor
  • From: ak
• [SECURITY] [DSA 867-1] New module-assistant package fixes insecure temporary file
  • From: Martin Schulze
• Oracle Workflow CSS Vulnerability wf_route
  • From: ak
• Vulnerabilities in Oracle E-Business Suite 11i - Critical Patch Update October 2005
  • From: Integrigy Security
• [ GLSA 200510-17 ] AbiWord: New RTF import buffer overflows
  • From: Thierry Carrez
• [ GLSA 200510-18 ] Netpbm: Buffer overflow in pnmtopng
  • From: Thierry Carrez
• [USN-211-1] Enigmail vulnerability
  • From: Martin Pitt
• iDEFENSE Security Advisory 10.20.05: Multiple Vendor Ethereal srvloc Buffer Overflow Vulnerability
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 10.20.05: Symantec Norton AntiVirus LiveUpdate Local Privilege Escalation
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 10.20.05: Symantec Norton AntiVirus DiskMountNotify Local Privilege Escalation
  • From: iDEFENSE Labs
• [Argeniss] Story of a dumb patch (Paper advisoryabout CSRSS and Windows Explorer vulnerabilities)
  • From: Cesar
• UnixWare 7.1.4 UnixWare 7.1.3 : ppp buffer overflow
  • From: please_reply_to_security
• OpenServer 5.0.7 : authsh and backupsh buffer overflow
  • From: please_reply_to_security
• F.E.A.R. 1.01 likes lithsock
  • From: Luigi Auriemma
• [SECURITY] [DSA 869-1] New eric packages fix arbitrary code execution
  • From: Martin Schulze
• Nuked klan 1.7: XSS vulnerability
  • From: papipsycho
• MDKSA-2005:187 - Updated dia packages fix python SVG import vulnerability.
  • From: Mandriva Security Team
• MDKSA-2005:188 - Updated graphviz packages fix temporary file vulnerability.
  • From: Mandriva Security Team
• MDKSA-2005:189 - Updated imap packages fix buffer overflow vulnerabilities.
  • From: Mandriva Security Team
• MDKSA-2005:190 - Updated nss_ldap/pam_ldap packages fix privilege vulnerabilities.
  • From: Mandriva Security Team
• MDKSA-2005:191 - Updated ruby packages fix safe level and taint flag protections vulnerability
  • From: Mandriva Security Team
• MDKSA-2005:192 - Updated xli packages fix buffer overflow vulnerabilities.
  • From: Mandriva Security Team
• [SNS Advisory No.84] Oracle Application Server HTTP Response Splitting Vulnerability
  • From: snsadv
• Secunia Research: ZipGenius Multiple Archive Handling Buffer Overflow
  • From: Secunia Research
• SEC-CONSULT-SA-20051021-0: Yahoo/MSIE XSS
  • From: Bernhard Mueller
• [security bulletin] SSRT051052 rev.1 - HP OpenView Operations and OpenView VantagePoint Java Runtime Environment (JRE) Remote Privileged Access
  • From: security-alert
• Windows UMPNPMGR wsprintfW Stack Buffer Overflow Vulnerability PoC
  • From: ppwd25
• phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit.
  • From: alphakgen
• PhpNuke 7.8 with all security fixes/patches "Your_Account", "Downloads", "Web Links" SQL Injection / Remote commans execution
  • From: retrogod
• DBoardGear SQL Injection
  • From: almaster
• SUSE Security Announcement: permissions (SUSE-SA:2005:062)
  • From: Ludwig Nussel
• DCP - portal XSS & SQL attacks
  • From: alex
• Remote File Inclusion in forum PunBB
  • From: rod hedor
• Advisory 16/2005: phpMyAdmin Local File Inclusion Vulnerability
  • From: Stefan Esser
• TSLSA-2005-0059 - multi
  • From: Trustix Security Advisor
• Nuked klan 1.7: Bypassed level admin on forum(corrected)
  • From: papipsycho
• Insecure Temporary Files in BMC/Control-M Agent
  • From: Scott Cromar
• [security bulletin] SSRT051055 rev.0 - HP Oracle for OpenView (OfO) Critical Patch Update October 2005
  • From: security-alert
• Revised draft on ICMP attacks
  • From: Fernando Gont
• Possible Bug in PHP-Fusion 6.0.204
  • From: peanut
• aRCHILLES Newsworld < 1.5.0-rc1 Multiple Vulnerabilities
  • From: chburchert
• [KAPDA::#8] Domain Manager Pro Vulnerability
  • From: advisory
• SQL saphp Lesson
  • From: almaster
• File Including In FLAT NUKE
  • From: abducter_minds
• Zomplog Script Injection Vulnerability =>3.4 (all versions vulnerable)
  • From: sikikmail
• php < 4.4.1 htaccess apache dos
  • From: Eric Romang / ZATAZ.com
• Nuked klan 1.7: Remote Exploit
  • From: papipsycho
• Nuked klan 1.7: SQL vulnerability
  • From: papipsycho
• Flat Nuke Cross Site Scripting
  • From: alex
• iDEFENSE Security Advisory 10.24.05: SCO Openserver backupsh 'Home' Buffer Overflow Vulnerability
  • From: iDEFENSE Labs
• PHP iCalendar CSS
  • From: ascii
• Skype security advisory
  • From: . EADS CCR DCR/STI/C
• DboardGear - uncorrect import themes (SQL-inject)
  • From: poizon
• [SECURITY] [DSA 871-1] New libgda2 packages fix arbitrary code execution
  • From: Martin Schulze
• Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through
  • From: Andrey Bayora
• [ GLSA 200510-19 ] cURL: NTLM username stack overflow
  • From: Thierry Carrez
• [ GLSA 200510-20 ] Zope: File inclusion through RestructuredText
  • From: Thierry Carrez
• [SNS Advisory No.85] XOOPS Multiple Cross-site Scripting Vulnerabilities
  • From: snsadv
• [ GLSA 200510-21 ] phpMyAdmin: Local file inclusion and XSS vulnerabilities
  • From: Thierry Carrez
• iDEFENSE Security Advisory 10.24.05: SCO Unixware Setuid ppp prompt Buffer Overflow Vulnerability
  • From: iDEFENSE Labs
• [SECURITY] [DSA 870-1] New sudo packages fix arbitrary command execution
  • From: Martin Schulze
• RE: Possible Bug in PHP-Fusion 6.0.204
  • From: Paul
• Mozilla Thunderbird SMTP down-negotiation weakness
  • From: Thomas Henlich
• Network Appliance iSCSI Authentication Bypass
  • From: advisories
• [SECURITY] [DSA 871-2] New libgda2 packages fix arbitrary code execution
  • From: Martin Schulze
• SEC-Consult SA 20051025-0 :: Snoopy Remote Code Execution Vulnerability
  • From: Bernhard Mueller
• SEC-Consult SA 20051025-1 :: RSA ACE Web Agent XSS
  • From: Bernhard Mueller
• iDEFENSE Security Advisory 10.24.05: SCO Openserver authsh 'Home' Buffer Overflow Vulnerability
  • From: iDEFENSE Labs
• SparkleBlog Journal.php HTML Injection Vulnerability =>v2.1 (all versions vulnerable)
  • From: sikikmail
• [SECURITY] [DSA 548-2] New imlib packages fix arbitrary code execution
  • From: Martin Schulze
• MDKSA-2005:193 - Updated ethereal packages fix multiple vulnerabilities
  • From: Mandriva Security Team
• Looking for a security contact at Macrovision/InstallShield
  • From: Richard M. Smith
• Re: Mozilla Thunderbird SMTP down-negotiation weakness
  • From: Jason Haar
• Secunia Research: Mantis "t_core_path" File Inclusion Vulnerability
  • From: Secunia Research
• Woltlab Burning Board info_db.php multiple SQL injection
  • From: admin
• SQL-Injection in MyBulletinBoard allows attacker to become a board admin.
  • From: Animal
• Looking for security contacts at Sony and Lenovo (FKA IBM)
  • From: Richard M. Smith
• phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit.
  • From: Paul Laudanski
• [SECURITY] [DSA 873-1] New net-snmp packages fix denial of service
  • From: Martin Schulze
• [KAPDA::#9] Techno Dreams Scripts Vulnerabilities
  • From: advisory
• Re: [Full-disclosure] Multiple Vendor Anti-Virus Software DetectionEvasion Vulnerability through forged magic byte
  • From: Andrey Bayora
• Re: Mozilla Thunderbird SMTP down-negotiation weakness
  • From: Tony Finch
• Update for the magic byte bug
  • From: Andrey Bayora
• MDKSA-2005:197 - Updated unzip packages fix suid, permissions vulnerabilities.
  • From: Mandriva Security Team
• MDKSA-2005:193-1 - Updated ethereal packages fix multiple vulnerabilities
  • From: Mandriva Security Team
• MDKSA-2005:198 - Updated uim packages fix suid linking vulnerabilities.
  • From: Mandriva Security Team
• MDKSA-2005:195 - Updated squid packages fix vulnerabilities
  • From: Mandriva Security Team
• Re: Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through
  • From: Andrey Bayora
• MDKSA-2005:186-1 - Updated lynx packages fix remote buffer overflow
  • From: Mandriva Security Team
• Re: Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through
  • From: Andreas Marx
• MDKSA-2005:194 - Updated php-imap packages fix buffer overflow vulnerabilities.
  • From: Mandriva Security Team
• MDKSA-2005:196 - Updated perl-Compress-Zlib packages fix vulnerabilities
  • From: Mandriva Security Team
• [SECURITY] [DSA 872-1] New koffice packages fix arbitrary code execution
  • From: Martin Schulze
• PHP-Nuke Cross-Site Scripting Vulnerability
  • From: bhfh01
• MDKSA-2005:199 - Updated netpbm packages fix pnmtopng vulnerabilities
  • From: Mandriva Security Team
• RE: [Full-disclosure] Multiple Vendor Anti-Virus Software DetectionEvasion Vulnerability through forged magic byte
  • From: Debasis Mohanty
• [SECURITY] [DSA 874-1] New lynx packages fix arbitrary code execution
  • From: Martin Schulze
• fetchmail security announcement 2005-02 (CVE-2005-3088)
  • From: ma+nomail
• [SECURITY] [DSA 875-1] New OpenSSL packages fix cryptographic weakness
  • From: Martin Schulze
• [SECURITY] [DSA 876-1] New lynx-ssl packages fix arbitrary code execution
  • From: Martin Schulze
• Secunia Research: ATutor Multiple Vulnerabilities
  • From: Secunia Research
• [CIRT.DK] - Novell ZENworks Patch Management Server 6.0.0.52 - SQL injection
  • From: CIRT.DK Advisory
• [SECURITY] [DSA 878-1] New netpbm-free packages fix arbitrary code execution
  • From: Martin Schulze
• [ GLSA 200510-23 ] TikiWiki: XSS vulnerability
  • From: Thierry Carrez
• MDKSA-2005:201 - Updated sudo packages fix vulnerability
  • From: Mandriva Security Team
• [ GLSA 200510-22 ] SELinux PAM: Local password guessing attack
  • From: Thierry Carrez
• [SECURITY] [DSA 877-1] New gnump3d packages fix several vulnerabilities
  • From: Martin Schulze
• MDKSA-2005:200 - Updated apache-mod_auth_shadow packages fix security restriction bypass issues.
  • From: Mandriva Security Team
• [ GLSA 200510-24 ] Mantis: Multiple vulnerabilities
  • From: Thierry Carrez
• iDefense Security Advisory 10.28.05: Multiple Vendor chmlib CHM File Handling Buffer Overflow Vulnerability
  • From: iDEFENSE Labs
• Re: [ GLSA 200510-23 ] TikiWiki: XSS vulnerability
  • From: Thierry Carrez
• Re: [ GLSA 200510-23 ] TikiWiki: XSS vulnerability
  • From: dave canuck
• File Including In PBLang
  • From: abducter_minds
• Multiple vulnerabilities within RockLiffe MailSite Express WebMail
  • From: Paul Craig
• Remote File Inclusion in vCard :)
  • From: [AT]
• Re: [Full-disclosure] Multiple Vendor Anti-Virus Software DetectionEvasion Vulnerability through forged magic byte
  • From: Andrey Bayora
• Re: Mozilla Thunderbird SMTP down-negotiation weakness
  • From: Bob Beck
• Re: Mozilla Thunderbird SMTP down-negotiation weakness
  • From: Jason Haar
• Remote MySQL User on Cpanel Default installation with blank password
  • From: sup3r_linux
• Re: Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through
  • From: Dave English
• Re: phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit.
  • From: Paul Laudanski
• Re: Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through forged magic byte
  • From: Williams, James K
• Re: [Full-disclosure] SEC-Consult SA 20051025-0 :: Snoopy Remote Code Execution Vulnerability
  • From: Florian Weimer
• Re: [Full-disclosure] Re: phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit.
  • From: Tatercrispies
• Re: [Full-disclosure] SEC-Consult SA 20051025-0 :: Snoopy Remote Code Execution Vulnerability
  • From: SEC Consult Research
• Re: [Full-disclosure] Re: phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit.
  • From: Nicob
• Re: [Full-disclosure] Multiple Vendor Anti-Virus Software DetectionEvasion Vulnerability through forged magic byte
  • From: Eygene A. Ryabinkin
• Re: Network Appliance iSCSI Authentication Bypass
  • From: Steve Shockley
• Re: [Full-disclosure] Multiple Vendor Anti-Virus Software DetectionEvasion Vulnerability through forged magic byte
  • From: Bipin Gautam
• Re: Network Appliance iSCSI Authentication Bypass
  • From: steve . shockley
• Re: Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through
  • From: mgotts
• Re: Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through
  • From: Andrey Bayora
• Vulnerability in MG2 php based Image Gallery - bypass security, view password protected images
  • From: preben
• Re: Remote File Inclusion in forum PunBB
  • From: arpen
• Mirabilis ICQ 2003a Buffer Overflow Download Shellcoded Exploit
  • From: atmaca
• uplod phpshell in PHP Advanced Transfer Manager
  • From: sQl
• Trend Micro's Response to the Magic Byte Bug
  • From: Auri Rahimzadeh