Mail Index

• Thread Index

• DMCounter Remote File Include
  • From: beford
• [ GLSA 200605-01 ] MPlayer: Heap-based buffer overflow
  • From: Sune Kloppenborg Jeppesen
• JMK's Picture Gallery admin login
  • From: alp_eren
• planetGallery admin login
  • From: tugr
• free-php.net Poll 1.0 admin login
  • From: tugr
• Secunia Research: WinHKI unacev2.dll Buffer Overflow Vulnerability
  • From: Secunia Research
• [SECURITY] [DSA 1048-1] New Asterisk packages fix arbitrary code execution
  • From: Martin Schulze
• Re: Apple Mac OS X Safari 2.0.3 Vulnerability
  • From: buggy
• [SECURITY] [DSA 1047-1] New resmgr packages fix unauthorised access
  • From: Martin Schulze
• Image file crashes Finder, Safari and other apps
  • From: cmertes
• Thyme 1.3 Cross Site Scripting
  • From: outlaw
• 4images<-- 1.7.1 SQL Injection
  • From: CrAzY . CrAcKeR
• Invision Power Board v2.1.5 Remote SQL Injection
  • From: o . y . 6
• OpenBB 1.0.8 Full Path Disclosure
  • From: o . y . 6
• Poll: Emerging Threats
  • From: Jon R. Kibler
• RE: Poll: Emerging Threats
  • From: H Alsaleh
• I-RATER Platinum Remote File Inclusion exploit Cod3d by R@1D3N
  • From: AminRayden
• CoolMenus Event Remote File Inclusion exploit
  • From: AminRayden
• XINE format string bugs when handling non existen file
  • From: king_purba
• Blog Mod <= 0.2.x SQL Injection
  • From: qex
• Re: CoolMenus Event Remote File Inclusion exploit
  • From: Steven M. Christey
• RE: Oracle 10g 10.2.0.2.0 DBA exploit
  • From: putosoft softputo
• FTP Fuzzer
  • From: infocus
• VHCS --- Virtual Hosting Control System Cross Site Scripting
  • From: outlaw
• [ MDKSA-2006:080 ] - Updated clamav packages fix vulnerability
  • From: security
• JSBoard XSS vulnerability
  • From: Alexander Klink
• Cisco Security Advisory: Cisco Unity Express Expired Password Reset Privilege Escalation
  • From: Cisco Systems Product Security Incident Response Team
• X7 Chat <=2.0 remote commands execution
  • From: rgod
• [SECURITY] [DSA 1049-1] New Ethereal packages fix several vulnerabilities
  • From: Martin Schulze
• zenphoto Multiple Path Disclosure and Cross Site Scripting Vulnerabilities
  • From: raphael . huck
• Ejabberd : Symlink vulnerability during installation process
  • From: Julien L.
• geoBlog Mutiple XSS Vulnerability
  • From: admin
• sBlog SQL Injection and Path Disclosure Vulnerability
  • From: admin
• Cmscout <= V1.10 multiple XSS attack vectors
  • From: zerogue
• SF-Users V1.0 XSS injection
  • From: zerogue
• FileProtection Express <= 1.0.1 authentification bypass
  • From: zerogue
• Russcom.net Loginphp multiple vulnerabilties
  • From: zerogue
• TyroCms beta V1.0 multiple XSS injections
  • From: zerogue
• Invision Gallery 2.0.6 ( SQL Injection )
  • From: o . y . 6
• Oracle, where are the patches???
  • From: David Litchfield
• MySQL Anonymous Login Handshake - Information Leakage.
  • From: Stefano Di Paola
• MySQL COM_TABLE_DUMP Information Leakage and Arbitrary command execution.
  • From: Stefano Di Paola
• [ GLSA 200605-02 ] X.Org: Buffer overflow in XRender extension
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200605-03 ] ClamAV: Buffer overflow in Freshclam
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200605-04 ] phpWebSite: Local file inclusion
  • From: Sune Kloppenborg Jeppesen
• RE: Oracle, where are the patches???
  • From: Kornbrust, Alexander
• [ MDKSA-2006:081 ] - Updated xorg-x11 packages fix vulnerability
  • From: security
• [USN-276-1] Thunderbird vulnerabilities
  • From: Martin Pitt
• Quagga RIPD unauthenticated route table broadcast
  • From: Konstantin V. Gavrilenko
• Re: Quagga RIPD unauthenticated route injection
  • From: Paul Jakma
• SUSE Security Announcement: xorg-x11-server (SUSE-SA:2006:023)
  • From: Ludwig Nussel
• Dynamic Evaluation Vulnerabilities in PHP applications
  • From: Steven M. Christey
• [SECURITY] [DSA 1050-1] New ClamAV packages fix denial of service or arbitrary code execution
  • From: Martin Schulze
• [USN-277-1] TIFF library vulnerabilities
  • From: Martin Pitt
• Re: FTP Fuzzer
  • From: Alexey Biznya
• Quagga RIPD unauthenticated route injection
  • From: Konstantin V. Gavrilenko
• [USN-278-1] gdm vulnerability
  • From: Martin Pitt
• Vulnerability in the way Ultr@xxxxxxxxx handles MS-Logon Authentication.
  • From: gdehanot
• OpenVPN 2.0.7 and below: Remote OpenVPN Management Interface Flaw
  • From: c0redump
• BankTown's ActiveX Buffer Overflow Vulnerability
  • From: Alex Park
• [USN-279-1] libnasl/nessus vulnerability
  • From: Martin Pitt
• [ MDKSA-2006:082 ] - Updated libtiff packages fix vulnerabilities
  • From: security
• Re: OpenVPN 2.0.7 and below: Remote OpenVPN Management Interface Flaw
  • From: David F. Skoll
• Re: Ejabberd : Symlink vulnerability during installation process
  • From: mickael . remond
• [SECURITY] [DSA 1051-1] New Mozilla Thunderbird packages fix several vulnerabilities
  • From: Martin Schulze
• [security bulletin] HPSBUX02108 SSRT061133 rev.10 - HP-UX running Sendmail, Remote Execution of Arbitrary Code
  • From: security-alert
• ISA Server 2004 Log Manipulation
  • From: beSIRT
• Re: Invision Power Board v2.1.5 Remote SQL Injection
  • From: mattmecham
• [REWTERZ-20060504] - Sami FTP Server Remote Buffer Overflow Vulnerability
  • From: rewterz
• Re: Invision Gallery 2.0.6 ( SQL Injection )
  • From: mattmecham
• CuteGuestbook XSS attack
  • From: omnipresent
• PunBB 1.2.11 Cross-Site Scripting
  • From: o . y . 6
• zawhttpd - Buffer Overflow
  • From: Kamil Sienicki
• Fast Click SQL Lite <= 1.1.3 Remote File Inclusion
  • From: Aminrayden
• [REWTERZ-20060503] XM Easy Personal FTP Server Remote Buffer Overflow Vulnerability
  • From: rewterz
• Fast Click <= 2.3.8 Remote File Inclusion
  • From: Aminrayden
• [USN-281-1] Linux kernel vulnerabilities
  • From: Martin Pitt
• 321soft PhP Gallery 0.9 - directory travel & XSS
  • From: d4igoro
• [USN-280-1] X.org server vulnerability
  • From: Martin Pitt
• libero.it XSS vulnerability - HTML injection
  • From: Davide Denicolo
• Panda Antivirus Enterprise Secure, Norton Antivirus 2005 and the virus "I Love You"
  • From: Joxean Koret
• bigwebmaster guestbook multiply XSS
  • From: Javor Ninov
• Re: gcc 4.1 bug miscompiles pointer range checks, may place you at risk
  • From: leonleon77
• Re: [Full-disclosure] RE: Oracle, where are the patches???
  • From: Cesar
• Re: Dynamic Evaluation Vulnerabilities in PHP applications
  • From: Michael Schlenker
• Re: OpenVPN 2.0.7 and below: Remote OpenVPN Management Interface Flaw
  • From: Joachim Schipper
• foreseeing (cough) critical problems futile? (was: Oracle, where are the patches???)
  • From: Michael Shigorin
• WebCalendar User Account Enumeration Weakness
  • From: David Maciejak
• modules name(Sections)SQL Injection Exploit
  • From: Mster-X
• modules name(Downloads)SQL Injection Exploit
  • From: Mster-X
• CuteNews 1.4.1 Multiple vulnerabilities
  • From: k4p0k4p0
• Re: OpenVPN 2.0.7 and below: Remote OpenVPN Management Interface Flaw
  • From: Kurt Seifried
• [ MDKSA-2006:081-1 ] - Updated xorg-x11 packages fix vulnerability
  • From: security
• Re: ISA Server 2004 Log Manipulation
  • From: Steven M. Christey
• SaPHPLesson 3.0 Multbugs
  • From: o . y . 6
• Re: ISA Server 2004 Log Manipulation
  • From: beSIRT
• Invision Community Blog .. Bugs
  • From: o . y . 6
• Re: WebCalendar User Account Enumeration Weakness
  • From: David Maciejak
• Cryptomathic ActiveX Buffer Overflow (TDC Digital signature)
  • From: CIRT.DK Advisory
• TSLSA-2006-0024 - multi
  • From: Trustix Security Advisor
• [ GLSA 200605-05 ] rsync: Potential integer overflow
  • From: Sune Kloppenborg Jeppesen
• OpenFAQ - HTML injection and XSS (Cross Site Scripting)
  • From: Kamil Sienicki
• JetBox CMS Remote File Include
  • From: beford
• ChipmunkBlogger improper input sanitizing
  • From: zerogue
• ChipmunkBoard Multiple Attack vectors
  • From: zerogue
• FlexCustomer <= 0.0.4 sql injection
  • From: zerogue
• myBloggie <= 2.1.3 XSS
  • From: zerogue
• PassMasterFlex (and PassMasterFlex+) XSS injection
  • From: zerogue
• [ GLSA 200605-06 ] Mozilla Firefox: Potential remote code execution
  • From: Thierry Carrez
• VisionSource CMS <= 0.6 XSS vectors
  • From: zerogue
• WebsiteBaker CMS lack of sanitizing
  • From: zerogue
• X7Chat <= 2.0.2 avatar XSS injection
  • From: zerogue
• Re: DB_eSession deleteSession() SQL injection
  • From: interact
• Alexadex.com players.py XSS Exploit
  • From: skinnypuppy
• Re: gcc 4.1 bug miscompiles pointer range checks, may place you at risk
  • From: Tonnerre Lombard
• Intel wireless service s24evmon.exe confidential information disclosure.
  • From: ruben
• Re: Re: Invision Gallery 2.0.6 ( SQL Injection )
  • From: an0n
• phpBB 2.0.20 Full Path Disclosure and SQL Errors
  • From: cxib
• Firefox 1.5.0.3 code execution exploit
  • From: yesn
• Re: ISA Server 2004 Log Manipulation
  • From: Shaun Colley
• Idle scan rediscovered!!!
  • From: Joel Jose
• URL Bug On 1ASPHost and DomainDLX Hosting Services
  • From: spymeta
• Re: OpenVPN 2.0.7 and below: Remote OpenVPN Management Interface Flaw
  • From: c0redump
• Re: ISA Server 2004 Log Manipulation
  • From: Thor (Hammer of God)
• X-POLL admin By-Pass
  • From: alp_eren
• Limbo CMS (option=weblinks) SQL injection exploit
  • From: SnoBMSN
• Phil's Bookmark script admin By-pass
  • From: alp_eren
• OpenEngine (PHP CMS)
  • From: ck
• [KAPDA] MyBB1.1.1~Email Verification in User Activation ~SQL Injection Attack
  • From: addmimistrator
• [ GLSA 200605-07 ] Nagios: Buffer overflow
  • From: Sune Kloppenborg Jeppesen
• AngelineCMS Multiple Vulnerabilities
  • From: admin
• Re: BankTown's ActiveX Buffer Overflow Vulnerability
  • From: lkh1348
• [SECURITY] [DSA 1052-1] New cgiirc packages fix arbitrary code execution
  • From: Martin Schulze
• CAID 34013 - CA Common Services CAIRIM on z/OS LMP SVC vulnerability
  • From: Williams, James K
• Dokeos Learning Management System 1.6.4 Remote File Include
  • From: beford
• Multiple Vulnerabilities In IdealBB ASP Bulletin Board
  • From: CodeScan Labs
• Claroline Open Source e-Learning 1.7.5 Remote File Include
  • From: beford
• singapore v0.9.7 XSS Vulnerabilities
  • From: alp_eren
• INFIGO-2006-05-03: Multiple FTP Servers vulnerabilities
  • From: infocus
• [Kurdish Security # 4] phpRaid Remote File Include Vulnerability (PHPBB)
  • From: botan
• [Kurdish Security # 5] phpRaid Remote File Include [SMF]
  • From: botan
• Re: Invision Community Blog .. Bugs
  • From: mattmecham
• [USN-282-1] Nagios vulnerability
  • From: Martin Pitt
• [USN-283-1] MySQL vulnerabilities
  • From: Martin Pitt
• Secunia Research: TZipBuilder ZIP File Handling Buffer Overflow Vulnerability
  • From: Secunia Research
• Secunia Research: Anti-Trojan unacev2.dll Buffer Overflow Vulnerability
  • From: Secunia Research
• [ GLSA 200605-08 ] PHP: Multiple vulnerabilities
  • From: Thierry Carrez
• [ GLSA 200605-09 ] Mozilla Thunderbird: Multiple vulnerabilities
  • From: Thierry Carrez
• VSR Advisory: WebSense content filter bypass when deployed in conjunction with Cisco filtering devices
  • From: VSR Advisories
• ZDI-06-012: Sophos Anti-Virus CAB Unpacking Code Execution Vulnerability
  • From: zdi-disclosures
• Unfiltered Header Injection in Apache 1.3.34/2.0.57/2.2.1
  • From: Zaninotti, Thiago
• PHPFusion <= v6.00.306 avatar mod_mime arbitrary file upload & local inclusion vulnerabilities
  • From: rgod
• [MajorSecurity] phpListPro <= 2.01 - Multiple Remote File Include Vulnerability
  • From: admin
• SYMSA-2006-003: Cisco Secure ACS for Windows - Administrator Password Disclosure
  • From: research
• VSR Advisory: WebSense content filter bypass when deployed in conjunction with Cisco filtering devices
  • From: Matthew Cerha
• Re: SYMSA-2006-003: Cisco Secure ACS for Windows - Administrator Password Disclosure
  • From: Matthew Cerha
• Re: ISA Server 2004 Log Manipulation
  • From: Steven M. Christey
• Secunia Research: Where Is It unacev2.dll Buffer Overflow Vulnerability
  • From: Secunia Research
• tseekdir.cgi<--Local File Include
  • From: BoNy-m
• [SECURITY] [DSA 1053-1] New Mozilla packages fix arbitrary code execution
  • From: Martin Schulze
• ICQ Client Cross-Application Scripting (XAS)
  • From: 3APA3A
• # MHG Security Team --- OzzyWork Gallery SQL Injection
  • From: Dj_ReMix_20
• plaNetStat Admin ByPass
  • From: alp_eren
• Re: INFIGO-2006-05-03: Multiple FTP Servers vulnerabilities
  • From: Andrea Rimicci
• # MHG Security Team --- DuGallery V2.x SQL Injection
  • From: Dj_ReMix_20
• [EEYEB20051011B] - Microsoft Distributed Transaction Coordinator Denial of Service
  • From: eEye Advisories
• [EEYEB20051011A] - Microsoft Distributed Transaction Coordinator Heap Overflow
  • From: eEye Advisories
• ZDI-06-013: 3Com TippingPoint SMS Server Information Disclosure Vulnerability
  • From: zdi-disclosures
• IGNORING SSH CONNECTION USES ARP CACHE POISSONING
  • From: king_purba
• Two independent vulnerabilities (client and server side) in Quake3 engine and many derived games
  • From: Thilo Schulz
• [Reversemode] Microsoft Infotech Storage library Heap Corruption
  • From: Reversemode
• Re: Phil's Bookmark script admin By-pass
  • From: Steven M. Christey
• [SECURITY] [DSA 1054-1] New TIFF packages fix denial of service and arbitrary code execution
  • From: Martin Schulze
• Re: IGNORING SSH CONNECTION USES ARP CACHE POISSONING
  • From: Thierry Zoller
• IBM Websphere Application Server Multiple Vulnerabilities
  • From: SnoBmsn
• # MHG Security Team --- OzzyWork Gallery Upload Vulnerabilities
  • From: Dj_ReMix_20
• [ GLSA 200605-11 ] Ruby: Denial of Service
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200605-10 ] pdnsd: Denial of Service and potential arbitrary code execution
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200605-12 ] Quake 3 engine based games: Buffer Overflow
  • From: Sune Kloppenborg Jeppesen
• Multiple SQL Injection Vulnerabilities in Dreamweaver Generated Code
  • From: Brian Gallagher
• [ MDKSA-2006:083 ] - Updated gdm package fixes symlink attack vulnerability
  • From: security
• Hackmaster Group DMCounter Remote File Include
  • From: c-w-m
• Oracle - the last word
  • From: David Litchfield
• Re: Firefox 1.5.0.3 code execution exploit
  • From: James_gmail-ij
• Re: tseekdir.cgi<--Local File Include
  • From: Steven M. Christey
• Re: Firefox 1.5.0.3 code execution exploit
  • From: Juha-Matti Laurio
• Re: Firefox 1.5.0.3 code execution exploit
  • From: Flavio Visentin
• Re: Milliscript 1.4 Multiple Vulnerabilities
  • From: webmaster
• Re: phpBB 2.0.20 Full Path Disclosure and SQL Errors
  • From: Maksymilian Arciemowicz
• Re: Firefox 1.5.0.3 code execution exploit
  • From: Daniel Veditz
• UBlog Remote XSS Exploit
  • From: SnoBMSN
• Re: OpenVPN 2.0.7 and below: Remote OpenVPN Management Interface Flaw
  • From: Giancarlo Razzolini
• [ MDKSA-2006:084 ] - Updated MySQL packages fix several vulnerabilities
  • From: security
• Re: IGNORING SSH CONNECTION USES ARP CACHE POISSONING
  • From: Hugo van der Kooij
• Firefox 1.5.0.3 - DoS
  • From: p4 . werterxyz
• mybb v1.1.1(showthread.php) SQL Injection Exploit
  • From: Breeeeh
• [TZO-042006] Insecure Auto-Update and File execution
  • From: Thierry Zoller
• Re: Firefox 1.5.0.3 - DoS
  • From: Chris Horry
• PhpListPro 2.01 Remote File Include Vulnerability
  • From: SnoBMSN
• Re: Firefox 1.5.0.3 code execution exploit
  • From: Ismail Donmez
• Re: modules name(Downloads)SQL Injection Exploit
  • From: Paul Laudanski
• vbulletin security Alert
  • From: aura
• [48Bits.com Advisory] Path conversion design flaw in Microsoft NTDLL
  • From: 48Bits.com [I+D Team]
• Kerio WinRoute Firewall Protocol Inspection Denial
  • From: SnoBMSN
• ZDI-06-014: Verisign I-Nav ActiveX Control Code Execution Vulnerability
  • From: zdi-disclosures
• Re: phpBB 2.0.20 Full Path Disclosure and SQL Errors
  • From: Paul Laudanski
• Re: SYMSA-2006-003: Cisco Secure ACS for Windows - AdministratorPassword Disclosure
  • From: Greg owens
• Cisco Security Advisory: AVS TCP Relay Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• RE: SYMSA-2006-003: Cisco Secure ACS for Windows - AdministratorPassword Disclosure
  • From: John Stuppi (jstuppi)
• Re: vbulletin security Alert
  • From: scott
• [ MDKSA-2006:085 ] - Updated xine-ui packages fix format string vulnerabilities
  • From: security
• Unclassified NewsBoard <= 1.6.1 patch 1 ABBC[Config][smileset] arbitrary local inclusion
  • From: rgod
• Re: Oracle - the last word
  • From: Steven M. Christey
• [TZO-042006] Insecure Auto-Update and File execution (2)
  • From: Thierry Zoller
• [SECURITY] [DSA 1055-1] New Mozilla Firefox packages fix arbitrary code execution
  • From: Martin Schulze
• Secunia Research: UltimateZip unacev2.dll Buffer Overflow Vulnerability
  • From: Secunia Research
• Microsoft MSDTC NdrAllocate Validation Vulnerability
  • From: avert
• Verizon Voicewing and Linksys PAP2-VN
  • From: securityfocus
• phpBB "charts.php" XSS and SQL-Injection
  • From: sn4k3 . 23
• [ GLSA 200605-13 ] MySQL: Information leakage
  • From: Sune Kloppenborg Jeppesen
• Ipswitch WhatsUp Professional multiple flaws
  • From: David Maciejak
• Apple QuickTime udta ATOM Heap Overflow
  • From: Sowhat
• Re: Secunia Research: Where Is It unacev2.dll Buffer OverflowVulnerability
  • From: jason . gerfen
• Re: Firefox 1.5.0.3 - DoS
  • From: RSnake
• yet more XSS in older versions of ColdFusion
  • From: zuxncwaruio
• ZDI-06-015: Apple QuickTime H.264 Parsing Heap Overflow Vulnerability
  • From: zdi-disclosures
• How secure is software X?
  • From: David Litchfield
• [Kurdish Security # 7] Foing Remote File Include Vulnerability [PHPBB]
  • From: botan
• Apple QuickDraw/QuickTime Multiple Vulnerabilities
  • From: Avert
• Re: [Reversemode] Microsoft Infotech Storage library Heap Corruption
  • From: marco . correnti
• TSLSA-2006-0026 - kernel
  • From: Trustix Security Advisor
• Re: [Full-disclosure] How secure is software X?
  • From: David Litchfield
• [EEYEB-20060307] Apple QuickTime FPX Integer Overflow
  • From: eEye Advisories
• Re: How secure is software X?
  • From: Adam Shostack
• RE: Oracle - the last word
  • From: Lee Kelly
• Re: How secure is software X?
  • From: Tim Newsham
• Re: [Reversemode] Microsoft Infotech Storage library Heap Corruption
  • From: Reversemode
• PHPBB 2.0.20 persistent issues with avatars
  • From: rgod
• Re: phpBB "charts.php" XSS and SQL-Injection
  • From: g30rg3x
• Dokeos LDAP hole fixed
  • From: thomas . depraetere
• Re: IGNORING SSH CONNECTION USES ARP CACHE POISSONING
  • From: king_purba
• Re: Re: Phil's Bookmark script admin By-pass
  • From: theproffx
• Re: [Full-disclosure] How secure is software X?
  • From: Michael Silk
• SEC Consult SA-20060512-0 :: Symantec Enterprise Firewall NAT/HTTP Proxy Private IP Exposure
  • From: Bernhard Mueller
• Dovecot IMAP: Mailbox names list disclosure with mboxes
  • From: Timo Sirainen
• Re: Firefox 1.5.0.3 - DoS
  • From: Flavio Visentin
• Several flaws in e-business designer (eBD)
  • From: Pedro Andújar
• Re: phpBB 2.0.20 Full Path Disclosure and SQL Errors
  • From: Paul Laudanski
• PHP Live Helper ASP(chat.php) XSS
  • From: mster-X
• # MHG Security Team --- Gallery Upload Vulnerabilities
  • From: Dj_ReMix_20
• Re: Oracle - the last word
  • From: Stefano Di Paola
• Re: modules name(Downloads)SQL Injection Exploit
  • From: znx
• Re: IGNORING SSH CONNECTION USES ARP CACHE POISSONING
  • From: Felipe openglx
• Re: Firefox 1.5.0.3 - DoS
  • From: marrob
• [FLSA-2006:152898] Updated emacs packages fix a security issue
  • From: Marc Deslauriers
• Buffer-overflow and NULL pointer crash in Genecys 0.2
  • From: Luigi Auriemma
• [FLSA-2006:152868] Updated tetex packages fix security issues
  • From: Marc Deslauriers
• Multiple vulnerabilities in Outgun 1.0.3 bot 2
  • From: Luigi Auriemma
• Multiple vulnerabilities in Raydium rev 309
  • From: Luigi Auriemma
• RE: How secure is software X?
  • From: Ferguson, Justin (IARC)
• Socket unreachable in GNUnet rev 2780
  • From: Luigi Auriemma
• [FLSA-2006:185355] Updated gnupg package fixes security issues
  • From: Marc Deslauriers
• Gphotos Directory Traversal and Cross Site Scripting
  • From: doz
• [FLSA-2006:152904] Updated ncpfs package fixes security issues
  • From: Marc Deslauriers
• [FLSA-2006:152923] Updated xloadimage package fixes security issues
  • From: Marc Deslauriers
• Server crash in Empire 4.3.2
  • From: Luigi Auriemma
• Re: How secure is software X?
  • From: David Litchfield
• [FLSA-2006:164512] Updated fetchmail packages fix security issues
  • From: Marc Deslauriers
• SQL-Injection in e107 allows attacker to become a site admininstrator
  • From: socsam
• Re: How secure is software X?
  • From: Paul B. Saitta
• Re: Re: Firefox 1.5.0.3 - DoS
  • From: Ronald
• Re: How secure is software X?
  • From: Fabian Becker
• PhpBB <= 2.0.20 Admin/Restore Database remote cmmnds xctn (works with admin sid)
  • From: rgod
• Re: Firefox 1.5.0.3 - DoS
  • From: Ronald van den Blink
• RE: Oracle - the last word
  • From: Iggy E
• [SECURITY] [DSA 1057-1] New phpLDAPadmin packages fix cross-site scripting
  • From: Martin Schulze
• [USN-274-2] MySQL vulnerability
  • From: Martin Pitt
• Is MS06-018 a DoS or a system compromise ?
  • From: Nick Boyce
• JDK 1.4.2_11, 1.5.0_06, unsigned applets consuming all free harddisk space
  • From: Marc Schoenefeld
• Re: PHPBB 2.0.20 persistent issues with avatars
  • From: Paul Laudanski
• 90% of programs made in PHP5 and prior Full Path Disclosure vuln.
  • From: sirdarckcat
• XSS in FreeTextBox and FCKEditor Basic Toolbar Selection
  • From: bonsite
• POC exploit for freeSSHd version 1.0.9
  • From: Tauqeer Ahmad
• [SECURITY] [DSA 1056-1] New webcalendar packages fix information leak
  • From: Martin Schulze
• DMA[2006-0514a] - 'ClamAV freshclam incorrect privilege drop'
  • From: KF (lists)
• RealVNC 4.1.1 Remote Compromise
  • From: James Evans
• Sugar Suite Open Source <= 4.2 "OptimisticLock!" arbitrary remote inclusion exploit
  • From: rgod
• Azboard <= 1.0 Multiple Sql Injections
  • From: geinblues
• tyree[at]users.sourceforge.net
  • From: tyree
• Secunia Research: FilZip unacev2.dll Buffer Overflow Vulnerability
  • From: Secunia Research
• CYBSEC - Security Advisory: Phishing Vector in SAP BC (Business Connector)
  • From: Leandro Meiners
• CYBSEC - Security Advisory: Arbitrary File Read/Delete in SAP BC (Business Connector)
  • From: Leandro Meiners
• Re: [Full-disclosure] RealVNC 4.1.1 Remote Compromise
  • From: Juha-Matti Laurio
• Re: How secure is software X?
  • From: Matt . Carpenter
• Novell NDPS Remote Vulnerability (Server & Client)
  • From: Ryan Smith
• Secunia Research: Abakt ZIP File Handling Buffer Overflow Vulnerability
  • From: Secunia Research
• [USN-284-1] Quagga vulnerabilities
  • From: Martin Pitt
• Confixx 3.1.2 <= Code Injection
  • From: Snake_23
• YapBB <= 1.2 Beta2 'find.php' SQL Injection Vulnerability
  • From: geinblues
• RE: Is MS06-018 a DoS or a system compromise ?
  • From: Hayes, Bill
• DeluxeBB 1.06 Remote SQL Injection Exploit
  • From: kingofska
• Re: [Full-disclosure] POC exploit for freeSSHd version 1.0.9
  • From: David Maciejak
• RE: Is MS06-018 a DoS or a system compromise ?
  • From: Maxime Ducharme
• re: RealVNC 4.1.1 Remote Compromise
  • From: plato
• PhpRemoteView Multiple Xss Vulnerabilities
  • From: Soothackers
• Sphider Multiple Xss Vulnerabilities
  • From: Soothackers
• IceWarp Cross-Site Scripting(XSS)
  • From: LiNuX_rOOt1
• Newsportal: code injection vulnerability
  • From: newsportal
• ScanAlert Security Advisory
  • From: Joseph Pierini
• Checkpoint SYN DoS Vulnerability
  • From: sanjay naik
• Caucho Resin Windows Directory Traversal Vulnerability
  • From: advisory
• The Weakness of Windows Impersonation Model
  • From: Brian L. Walche
• Re: Checkpoint SYN DoS Vulnerability
  • From: Pawel Worach
• PHP-Fusion <= 6.00.306 "srch_where" SQL injection / admin credentials disclosure
  • From: rgod
• Re: Checkpoint SYN DoS Vulnerability
  • From: sanjay naik
• vulnerability details
  • From: Arnold Grossmann
• UPDATE: [ GLSA 200605-13 ] MySQL: Information leakage
  • From: Sune Kloppenborg Jeppesen
• DeluxeBB <= v1.06 attachment mod_mime exploit
  • From: rgod
• Re: Checkpoint SYN DoS Vulnerability
  • From: Chris Brenton
• ERRATA: [ GLSA 200605-07 ] Nagios: Buffer overflow
  • From: Sune Kloppenborg Jeppesen
• Maksymilian Arciemowicz
  • From: cxib
• Advisory: Quezza BB <= 1.0 File Inclusion Vulnerability.
  • From: Mustafa Can Bjorn IPEKCI
• Secunia Research: IZArc unacev2.dll Buffer Overflow Vulnerability
  • From: Secunia Research
• Re: Checkpoint SYN DoS Vulnerability
  • From: sanjay naik
• Newsportal <= 0.36 Remote File Inclusion Vulnerability
  • From: philipp . niedziela
• iDefense Q2 2006 Vulnerability Challenge
  • From: labs-no-reply@xxxxxxxxxxxx
• Re: Zen Cart login.php SQL Injection Vulnerability
  • From: noreply
• Re: Checkpoint SYN DoS Vulnerability
  • From: Bojan Zdrnja
• VNC_bypauth: vnc scanner multithreaded linux & windows
  • From: ad@xxxxxxxxxxxxxxxx
• Re[2]: The Weakness of Windows Impersonation Model
  • From: Brian L. Walche
• What's Up Professional Spoofing Authentication Bypass
  • From: Kenneth F. Belva
• Firefox (with IETab Plugin) Null Pointer Dereferences Bug
  • From: Debasis Mohanty
• DIMVA 2006 - Call For Participation
  • From: Thomas Biege
• Re[2]: The Weakness of Windows Impersonation Model
  • From: Brian L. Walche
• Two heap overflow in libextractor 0.5.13 (rev 2832)
  • From: Luigi Auriemma
• Secunia Research: Eazel unacev2.dll Buffer Overflow Vulnerability
  • From: Secunia Research
• Mobotix IP Network Cameras Multiple XSS
  • From: jaime . blasco
• Boastmachine Cross Site Scripting Vulnerability
  • From: mail
• OpenWiki<--v0.78 Cross-Site Scripting
  • From: LiNuX_rOOt1
• HYSA-2006-008 myBloggie 2.1.3 CRLF & SQL Injection
  • From: h4cky0u . org
• Re: The Weakness of Windows Impersonation Model
  • From: David Litchfield
• RadLance Local Inclusion Exploit
  • From: Hussain Salim
• Wargamming Network..
  • From: Dusty
• Gawab.com Register Xss Bugtraq
  • From: rootter
• Re: Maksymilian Arciemowicz
  • From: frantisek holop
• CodeScan Advisory: Avatar MOD v1.3 for Snitz Forums v3.4 - Arbitrary File Upload
  • From: CodeScan Labs
• Multiple Vulns in Bitrix CMS
  • From: Gogi The Georgian
• [cosmoshop again] sql injection + view all files as admin user
  • From: innate
• [Info Disclosure] Diesel PHP Job Site Latest Version
  • From: Matt Gibson
• AspBB Forum "profile.asp & default.asp" XSS Vulnerability
  • From: TeufeL Online
• Gmail/Gtalk web client DoS
  • From: dan
• [SECURITY] [DSA 1058-1] New awstats packages fix arbitrary command execution
  • From: Martin Schulze
• Re: JDK 1.4.2_11, 1.5.0_06, unsigned applets consuming all free harddisk space
  • From: William Starling
• XSS in orkut.com
  • From: Rohin Koul
• Re: [Full-disclosure] RealVNC 4.1.1 Remote Compromise
  • From: Joachim Schipper
• FrontRange iHeat Vulnerability
  • From: mcdanielar
• POC exploit for freeFTPd 1.0.10
  • From: Tauqeer Ahmad
• Re: Re: Checkpoint SYN DoS Vulnerability
  • From: jrh57
• RE: Checkpoint SYN DoS Vulnerability
  • From: Sterling, Chuck
• Re: Checkpoint SYN DoS Vulnerability
  • From: sanjay naik
• Re: Is MS06-018 a DoS or a system compromise ?
  • From: Nick Boyce
• Re:POC exploit for freeFTPd 1.0.10
  • From: Tauqeer Ahmad
• Re: MediaSlash Gallery 'rub' variable Remote File inlcusion Vulnerability
  • From: gyzmo77
• Re: Checkpoint SYN DoS Vulnerability
  • From: Erick Mechler
• Myspace Friend Train v2.8
  • From: luny
• Code Injection via Hidden Form Field Manipulation
  • From: mtoren
• Re: PHPBB 2.0.20 persistent issues with avatars
  • From: s89df987 s9f87s987f
• Re: JDK 1.4.2_11, 1.5.0_06, unsigned applets consuming all free harddisk space
  • From: Leif Erik Andersen (at Seven)
• Sun single-CPU DOS
  • From: Doug Hughes
• Re: [Full-disclosure] What's Up Professional Spoofing Authentication Bypass
  • From: David Maciejak
• Re: Checkpoint SYN DoS Vulnerability
  • From: sanjay naik
• Re: phpBB "charts.php" XSS and SQL-Injection
  • From: phpbb
• RE: [Full-disclosure] RealVNC 4.1.1 Remote Compromise
  • From: Krpata, Tyler
• Re: Firefox (with IETab Plugin) Null Pointer Dereferences Bug
  • From: Roman Daszczyszak
• [ MDKSA-2006:086 ] - Updated kernel packages fix multiple vulnerabilities
  • From: security
• Secunia Research: CAM UnZip ZIP File Handling Buffer Overflow Vulnerability
  • From: Secunia Research
• [security bulletin] HPSBUX02108 SSRT061133 rev.11 - HP-UX Running Sendmail, Remote Execution of Arbitrary Code
  • From: security-alert
• [security bulletin] HPSBUX02117 SSRT2400 rev.1 - HP-UX Running BINDv4 Domain Name Server (DNS) Remote Unauthorized Access, Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBTU02118 SSRT061145 rev.1 - HP Tru64 UNIX Running Firefox or Mozilla Application Suite, Remote Execution of Arbitrary Code or Denial of Service (DoS)
  • From: security-alert
• [SECURITY] [DSA 1059-1] New quagga packages fix several vulnerabilities
  • From: Martin Schulze
• Yourfreeworld Styleish Text Ads Script
  • From: luny
• [SECURITY] [DSA 1062-1] New kphone packages fix information disclosure
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1060-1] New kernel-patch-vserver packages fix privilege escalation
  • From: Moritz Muehlenhoff
• Yourfreeworld.com Short Url & Url Tracker Script
  • From: luny
• [SECURITY] [DSA 1061-1] New popfile packages fix denial of service
  • From: Moritz Muehlenhoff
• Jemscripts Download Control v1.0
  • From: luny
• CYBSEC - Security Pre-Advisory: Local Privilege Escalation in SAP sapdba Command
  • From: Leandro Meiners
• [SECURITY] [DSA 1063-1] New phpgroupware packages fix execution of arbitrary web script code
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1066-1] New phpbb2 packages fix execution of arbitrary web script code
  • From: Moritz Muehlenhoff
• phpBazar <= 2.1.0 Multiple vulnerabilites
  • From: i6d
• Re: [Full-disclosure] RealVNC 4.1.1 Remote Compromise
  • From: Matt Venzke
• Re: NSA Group Security Advisory NSAG-195-23.02.2006 Vulnerability FCKeditor 2.0 FC
  • From: fredck
• [SECURITY] [DSA 1065-1] New hostapd packages fix denial of service
  • From: Moritz Muehlenhoff
• ActualAnalyzer Server <=8.23 - Remote File Include Vulnerability
  • From: i6d
• Interlink "news_information.php" XSS
  • From: Mster-X
• RaceEventManagement <--v0.7.6 SQL injection & XSS
  • From: Mster-X
• Xtremescripts Topsites v1.1
  • From: luny
• [SECURITY] [DSA 1067-1] New Linux kernel 2.4.16 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Re: NSA Group Security Advisory NSAG-196-23.02.2006 Vulnerability FCKeditor 2.2
  • From: fredck
• [SECURITY] [DSA 1064-1] New cscope packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• Re: PHPBB 2.0.20 persistent issues with avatars
  • From: Paul Laudanski
• cPanel OpenBaseDir Bypass
  • From: i6d
• Zix Forum <= 1.12 (layid) SQL Injection Vulnerability
  • From: i6d
• Re: XSS in orkut.com
  • From: Google Security Team
• [SECURITY] [DSA 1068-1] New fbi packages fix denial of service
  • From: Moritz Muehlenhoff
• Re: Zix Forum <= 1.12 (layid) SQL Injection Vulnerability
  • From: farhadkey
• Hiox Guestbook 3.1
  • From: luny
• [SECURITY] [DSA 1069-1] New Linux kernel 2.4.18 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• PunBB 1.2.11 Cross site scripting
  • From: k4p0k4p0
• Destiney Rated Images Script v0.5.0 - XSS Vulnv
  • From: luny
• Destiney Links Script v2.1.2
  • From: luny
• [SECURITY] [DSA 1070-1] New Linux kernel 2.4.19 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Captivate 1.0 - XSS Vuln
  • From: luny
• PHP Easy Galerie Index.PHP Remote File Include Vulnerability
  • From: craziest
• Firefox 1.5.0.3 Flaw - Page can obtain path to Mozilla installation or profile by examining JavaScript exceptions
  • From: milw0rm
• XOOPS <= 2.0.13.2 'xoopsOption[nocommon]' exploit
  • From: rgod
• [TZO-072006]-Xampp - Multiple Priviledge Escalation (SYSTEM) and Rogue Autostart
  • From: Thierry Zoller
• [ GLSA 200605-14 ] libextractor: Two heap-based buffer overflows
  • From: Stefan Cornelius
• [ GLSA 200605-15 ] Quagga Routing Suite: Multiple vulnerabilities
  • From: Stefan Cornelius
• [SECURITY] [DSA 1069-1] New Linux kernel 2.4.18 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Novell Client login form enables reading and writing from and to the clipboard of the logged-in user
  • From: EitanCaspi@xxxxxxxxx
• Generic Browser Crash with Java 1.4.2_11, Java 1.5.0_06
  • From: Marc Schoenefeld
• [KAPDA::#43] - phpwcms multiple vulnerabilities
  • From: alireza hassani
• Skype - URI Handler Command Switch Parsing
  • From: Brett Moore
• Re: modules name(Sections)SQL Injection Exploit
  • From: security curmudgeon
• Re: tseekdir.cgi<--Local File Include
  • From: security curmudgeon
• [SECURITY] [DSA 1071-1] New MySQL 3.23 packages fix several vulnerabilities
  • From: Martin Schulze
• Perlpodder Remote Arbitrary Command Execution
  • From: RedTeam Pentesting
• Prodder Remote Arbitrary Command Execution
  • From: RedTeam Pentesting
• BitZipper Archive Extraction Directory traversal
  • From: h e
• Re: WebsiteBaker CMS lack of sanitizing
  • From: ryan
• [security bulletin] HPSBUX02119 SSRT4848 rev.1 - HP-UX Running Motif Applications Remote Arbitrary Code Execution, Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBUX02120 SSRT051057 rev.1 - HP-UX Local Denial of Service (DoS)
  • From: security-alert
• [SECURITY] [DSA 1073-1] New MySQL 4.1 packages fix several vulnerabilities
  • From: Martin Schulze
• Re: Novell Client login form enables reading and writing from and to the clipboard of the logged-in user
  • From: Roman Drahtmueller
• ZDI-06-016: Novell eDirectory 8.8 NDS Server Buffer Overflow Vulnerability
  • From: zdi-disclosures
• ACROS Security: Buffer Overflow In EMC (previously Dantz) Retroclient Service
  • From: ACROS Security
• [SECURITY] [DSA 1072-1] New Nagios packages fix arbitrary code execution
  • From: Martin Schulze
• Re: Checkpoint SYN DoS Vulnerability
  • From: Jim Clausing
• mybb v1.1.1(rss.php) SQL Injection Exploit
  • From: Breeeeh
• Re: Unfiltered Header Injection in Apache 1.3.34/2.0.57/2.2.1
  • From: Amit Klein (AKsecurity)
• CANews Multiple Vulnerabilities
  • From: omnipresent
• Re: 90% of programs made in PHP5 and prior Full Path Disclosure vuln.
  • From: sirdarckcat
• Re: Checkpoint SYN DoS Vulnerability
  • From: Bojan Zdrnja
• SOE's implementation of Lithium Forums Software allows users to log on as each other.
  • From: john
• Beoped Portal XSS
  • From: outlaw
• Re: Sun single-CPU DOS
  • From: Mike O'Connor
• phpRaid "view.php" XSS Vulnerability
  • From: TeufeL Online
• TSLSA-2006-0028 - multi
  • From: Trustix Security Advisor
• Remote Code Execution in artmedic Newsletter 4.1 [log.php]
  • From: c . j . schmitz
• Re: POC exploit for freeFTPd 1.0.10
  • From: Sanjay Rawat
• Re: POC exploit for freeFTPd 1.0.10
  • From: Tauqeer Ahmad
• Re: 90% of programs made in PHP5 and prior Full Path Disclosure vuln.
  • From: Kamil Sienicki
• Microsoft Internet Explorer - Crash on mouse button click
  • From: mac68k
• Hackernetwork.Com Mail XSS Vulnerability
  • From: TeufeL Online
• Circumventing quarantine control in Windows 2003 and ISA 2004
  • From: Memet Anwar
• Chatty improper input sanitizing
  • From: zerogue
• Re: Circumventing quarantine control in Windows 2003 and ISA 2004
  • From: 3APA3A
• DSChat <= 1.0 XSS
  • From: zerogue
• IpLogger <= 1.7 XSS
  • From: zerogue
• QBv14 XSS
  • From: zerogue
• Russcom PHPImages lack of validation
  • From: zerogue
• Russcom Ping Remote code execution
  • From: zerogue
• SkyeShoutbox <= v.1.2.0 XSS
  • From: zerogue
• Kaspersky antivirus 6: HTTP monitor bypassing
  • From: john
• [OpenPKG-SA-2006.008] OpenPKG Security Advisory (openldap)
  • From: OpenPKG
• Non eXecutable Stack Lovin on OSX86
  • From: KF (lists)
• Nucleus CMS <= 3.22 arbitrary remote inclusion
  • From: rgod
• [security bulletin] HPSBUX02114 SSRT061115 rev.1 - HP-UX Running Software Distributor Local Elevation of Privilege
  • From: security-alert
• phpMyDirectory <= 10.4.4 Multiple Remote File Include(new!)
  • From: ajannhwt
• AlstraSoft E-Friends - XSS
  • From: luny
• Alstrasoft Article Manager Pro v1.6
  • From: luny
• [security bulletin] HPSBUX02075 SSRT051074 rev.5 - HP-UX Running xterm Local Unauthorized Access
  • From: security-alert
• Re: Sun single-CPU DOS
  • From: Doug Hughes
• RE: Circumventing quarantine control in Windows 2003 and ISA 2004
  • From: Roger A. Grimes
• Re: How secure is software X?
  • From: Crispin Cowan
• DGbook v1.0 - XSS
  • From: luny
• [USN-285-1] awstats vulnerability
  • From: Martin Pitt
• [security bulletin] HPSBMA02121 SSRT061157 rev.1 - HP OpenView Storage Data Protector Remote Arbitrary Command Execution
  • From: security-alert
• [security bulletin] HPSBMA02098 SSRT5911 rev.1 - HP OpenView Network Node Manager (OV NNM) Remote Unauthorized Privileged Access, Arbitrary Command Execution, Arbitrary File Creation
  • From: security-alert
• Re: Microsoft Internet Explorer - Crash on mouse button click
  • From: unknown user
• Re: Circumventing quarantine control in Windows 2003 and ISA 2004
  • From: Mark Senior
• Server termination in netPanzer 0.8 (rev 952)
  • From: Luigi Auriemma
• Buffer-overflow in the WebTool service of PunkBuster for servers (minor than v1.229)
  • From: Luigi Auriemma
• Re: Sun single-CPU DOS
  • From: Mike O'Connor
• Re: Destiney Rated Images Script v0.5.0 - XSS Vulnv
  • From: webmaster
• AlstraSoft Web Host Directory v1.2
  • From: luny
• Re: Checkpoint SYN DoS Vulnerability
  • From: Niranjan S Patil
• Publicist v0.95 - XSS And Full Path Errors
  • From: luny
• Re: Circumventing quarantine control in Windows 2003 and ISA 2004
  • From: Andreas Beck
• Mambo <= 4.6. RC1 xss
  • From: rgod
• YLZH(right.php)Cross Site Scripting
  • From: Breeeeh
• Default Screen Saver Vulnerability in Microsoft Windows
  • From: susam . pal
• Vodafone.de XSS Vulnerability
  • From: try_og
• NETGEAR WGR614 v6 Wireless DSL router information disclosure vulnerability
  • From: info
• Re: How secure is software X?
  • From: Duncan Simpson
• Diesel Joke Site SQL INJECTION
  • From: a_linuxer
• Write-up by Amit Klein: "IE + some popular forward proxy servers = XSS, defacement (browser cache poisoning)"
  • From: Amit Klein (AKsecurity)
• OpenCms version 6.0.x Xml Content Demo search engine Cross site scripting
  • From: jaime . blasco
• [SECURITY] [DSA 1074-1] New mpg123 packages fix arbitrary code execution
  • From: Martin Schulze
• Cisco Security Advisory: Windows VPN Client Local Privilege Escalation Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [ MDKSA-2006:087 ] - Updated kernel packages fixes netfilter SNMP NAT memory corruption
  • From: security
• [ MDKSA-2006:088 ] - Updated hostapd package to address DoS vulnerability
  • From: security
• [ MDKSA-2006:089 ] - Updated kphone packages fixes permissions issue with .qt/kphonerc
  • From: security
• Re: Default Screen Saver Vulnerability in Microsoft Windows
  • From: Eliah Kagan
• Re: Default Screen Saver Vulnerability in Microsoft Windows
  • From: Ansgar -59cobalt- Wiechers
• [ MDKSA-2006:090 ] - Updated shadow-utils packages fix mailbox creation vulnerability
  • From: security
• [ MDKSA-2006:091 ] - Updated php packages fix vulnerabilities
  • From: security
• VSR Advisory: PDF Tools AG - PDF Form Filling and Flattening Tool Buffer Overflow
  • From: advisories
• Re: Default Screen Saver Vulnerability in Microsoft Windows
  • From: Jason V. Miller
• [CLOSED] SOE's implementation of Lithium Forums Software allows users to log on as each other.
  • From: support
• Re: mybb v1.1.1(rss.php) SQL Injection Exploit
  • From: Steven M. Christey
• Kaspersky antivirus 6: POP3 state machine error
  • From: bug . registrator
• phpFoX All Version Login Exploit
  • From: mx
• Re: Re: [SECURITYREASON.COM] PhpNuke 7.6=>x Multiple vulnerabilities cXIb8O3.12
  • From: phpnuke
• AZ Photo Album Script Pro
  • From: luny
• RE: Microsoft Internet Explorer - Crash on mouse button click
  • From: Jain, Siddhartha
• Re: IpLogger <= 1.7 XSS
  • From: thrasher . basher
• ChatPat v1.0
  • From: luny
• A Nasty Security Bug that affect PGP Virtual Disks & PGP SDA , PGP 8.x & 9.x and Truecrypt.
  • From: thesinoda
• sql injection in phpWebSite 0.8.3
  • From: help-users
• iFdate v1.2
  • From: luny
• Realty Pro One Property Listing Script
  • From: luny
• Bulletin Board Elite-Board v.1.1
  • From: luny
• [USN-286-1] Dia vulnerabilities
  • From: Martin Pitt
• GuestbookXL 1.3
  • From: luny
• Re: Circumventing quarantine control in Windows 2003 and ISA 2004
  • From: Memet Anwar
• CMS Mundo V1.0
  • From: luny
• Pre Shopping Mall v1.0
  • From: luny
• [KAPDA::#44] - NewsCMSLite Login ByPass by Cookie
  • From: farhadkey
• Pre News Manager v1.0
  • From: luny
• Drupal <= 4.7 attachment/mod_mime remote code execution
  • From: rgod
• RE: modules name(Sections)SQL Injection Exploit
  • From: Evans, Arian
• rPSA-2006-0082-1 vixie-cron
  • From: Justin M. Forbes
• iFlance v1.1
  • From: luny
• Hackernetwork Mail Xss[Search] Vulnerability
  • From: ajannhwt
• PostgreSQL security releases 8.1.4, 8.0.8, 7.4.13, 7.3.15
  • From: PostgreSQL Security
• Wordpress <=2.0.2 'cache' shell injection
  • From: rgod
• Addendum
  • From: ennead@xxxxxxxxxxxxx
• RE: A Nasty Security Bug that affect PGP Virtual Disks & PGP SDA , PGP 8.x & 9.x and Truecrypt.
  • From: ennead@xxxxxxxxxxxxx
• TSLSA-2006-0030 - multi
  • From: Trustix Security Advisor
• [SECURITY] [DSA 1076-1] New lynx packages fix denial of service
  • From: Martin Schulze
• [SECURITY] [DSA 1077-1] New lynx-ssl packages fix denial of service
  • From: Martin Schulze
• Re: Destiney Rated Images Script v0.5.0 - XSS Vulnv
  • From: Steven M. Christey
• V-Webmail 1.6.4 Remote File Include
  • From: beford
• [BuHa-Security] DoS Vulnerability in MS IE 6 SP2
  • From: bugtraq
• [BuHa-Security] MS06-013: HTML Tag Memory Corruption Vulnerability in MS IE 6 SP2
  • From: bugtraq
• ASLR now built into Vista
  • From: David Litchfield
• Re: [Full-disclosure] ASLR now built into Vista
  • From: c0ntex
• [SECURITY] [DSA 1075-1] New awstats packages fix arbitrary command execution
  • From: Martin Schulze
• Re: Kaspersky antivirus 6: POP3 state machine error
  • From: denisov_vit
• Re: Sun single-CPU DOS
  • From: Mike O'Connor
• Re: Sun single-CPU DOS
  • From: Mike O'Connor
• XSS in Omegasoft's Insel
  • From: MC Iglo
• Docebo LMS 2.05 Remote File Include
  • From: beford
• Re: A Nasty Security Bug that affect PGP Virtual Disks & PGP SDA , PGP 8.x & 9.x and Truecrypt.
  • From: 3APA3A
• XSS in Monster Top List | MTL 1.4
  • From: V8f3
• Easy-Content Forums 1.0 Multiple SQL/XSS Vulnerabilities
  • From: ajannhwt
• Toasts Forums 1.6.44 in Xss
  • From: ajannhwt
• phpjobboard Authecnical admin byPass
  • From: alp_eren
• qjForum(member.asp) SQL Injection Vulnerability
  • From: ajannhwt
• [MajorSecurity #6]Socketmail <= 2.2.6 - Remote File Include Vulnerability
  • From: admin
• Tamber Forum <= 1.9.13 Multiple SQL Injection Vulnerabilities
  • From: ajannhwt
• my Web Server << v-1.0 Denial of Service Exploit
  • From: s3rv3r_hack3r
• Multiple XSS Vulnerabilities in Tikiwiki 1.9.x
  • From: blwood
• RE: Realty Pro One Property Listing Script
  • From: Krpata, Tyler
• Re: [BuHa-Security] DoS Vulnerability in MS IE 6 SP2
  • From: ad@xxxxxxxxxxxxxxxx
• Plume CMS Remote File Include
  • From: beford
• PHPResidence <= 0.6 XSS
  • From: zerogue
• PHP AGTC-Membership system <= v1.1a XSS
  • From: zerogue
• ByteHoard <= 2.1 multiple vulnerabilities
  • From: zerogue
• Assetman <= 2.4a XSS
  • From: zerogue
• Easy-Content Forums 1.0 Multiple [SQL/XSS] Vulnerabilities
  • From: ajannhwt
• Re: Kaspersky antivirus 6: HTTP monitor bypassing
  • From: denisov_vit
• Re: PhpListPro 2.01 Remote File Include Vulnerability
  • From: not
• Seditio Cross Site Scripting Vulnerability
  • From: mail
• Re: Sun single-CPU DOS
  • From: Doug Hughes
• XSS Vulnerability on www.my6d.com Connection Work System
  • From: spymeta
• Re: Microsoft Internet Explorer - Crash on mouse button click
  • From: unknown user
• [OpenPKG-SA-2006.009] OpenPKG Security Advisory (binutils)
  • From: OpenPKG
• On the Recent PGP and Truecrypt Posting
  • From: jon
• Re: Microsoft Internet Explorer - Crash on mouse button click
  • From: unknown user
• Re: Kaspersky antivirus 6: HTTP monitor bypassing
  • From: dmitryp . spm
• rPSA-2006-0080-1 postgresql postgresql-server
  • From: Justin M. Forbes
• XSS Vulnerability on Vodafone
  • From: try_og
• iBoutique.MALL - Directory Traversal
  • From: luny
• PHPSimple Choose v0.3
  • From: luny
• Super Link Exchange Script v1.0
  • From: luny
• Vacation Retal Script v1.0
  • From: luny
• Re: Microsoft Internet Explorer - Crash on mouse button click
  • From: unknown user
• Re: Microsoft Internet Explorer - Crash on mouse button click
  • From: mac68k
• MyYearBook.com - XSS
  • From: luny
• Pretty Guestbook v1
  • From: luny
• Smile Guestbook v1
  • From: luny
• Morris Guestbook v1
  • From: luny
• Re: Wordpress <=2.0.2 'cache' shell injection
  • From: pokley
• Re: A Nasty Security Bug that affect PGP Virtual Disks & PGP SDA , PGP 8.x & 9.x and Truecrypt.
  • From: Alexander Klimov
• Re: RE: A Nasty Security Bug that affect PGP Virtual Disks & PGP SDA , PGP 8.x & 9.x and Truecrypt.
  • From: ahariri
• [ MDKSA-2006:092 ] - Updated mpg123 packages fix DoS vulnerability.
  • From: security
• LM hashes in a hot-desking environment
  • From: feedb4ck
• Re: Sun single-CPU DOS
  • From: Doug Hughes
• Re: my Web Server << v-1.0 Denial of Service Exploit
  • From: str0ke
• Re[2]: [Full-disclosure] ASLR now built into Vista
  • From: 3APA3A
• cURL Safe Mode Bypass PHP 4.4.2 and 5.1.4
  • From: cxib
• rPSA-2006-0084-1 fetchmail
  • From: Justin M. Forbes
• Wavecon Advisory: Open-Xchange <= 0.8.2 defaultuser with /bin/bash and default password
  • From: Cemil Degirmenci
• rPSA-2006-0083-1 enscript
  • From: Justin M. Forbes
• Symantec antivirus software exposes computers
  • From: Michael Scheidell
• InternerExplorer error: ECMAScript interpreter stack overflow
  • From: sehato
• Critical sql injection in saphplesson 2.0
  • From: black-cod3
• Re: LM hashes in a hot-desking environment
  • From: 3APA3A
• Re: LM hashes in a hot-desking environment
  • From: Ansgar -59cobalt- Wiechers
• Xss exploit in Chipmunk guestbook
  • From: black-cod3
• Multiple Xss exploits in ar-blog v 5.2
  • From: black-cod3
• sql injection in PHPcafe.net Tutorial Manager
  • From: black-cod3
• RE: LM hashes in a hot-desking environment
  • From: Roger A. Grimes
• Speedy ASP Forum(profileupdate.asp) User Pass Change Exploit
  • From: ajannhwt
• [SECURITY] [DSA 1078-1] New tiff packages fix denial of service
  • From: Martin Schulze
• D-Link DSA-3100 Cross-Site Scripting
  • From: jaime . blasco
• Re: On the Recent PGP and Truecrypt Posting
  • From: John Pettitt
• Proof of concept that PGP AUTHENTICATION CAN BE BYPASSED WITHOUT PATCHING
  • From: thesinoda
• RE: A Nasty Security Bug that affect PGP Virtual Disks & PGP SDA , PGP 8.x & 9.x and Truecrypt.
  • From: thesinoda
• RE: [security] A Nasty Security Bug that affect PGP Virtual Disks & PGP SDA , PGP 8.x & 9.x and Truecrypt.
  • From: phugo
• Re: Re: A Nasty Security Bug that affect PGP Virtual Disks & PGP SDA , PGP 8.x & 9.x and Truecrypt.
  • From: visitbipin
• html Guest Gear
  • From: pieisgdvgd
• [SECURITY] [DSA 1079-1] New MySQL 4.0 packages fix several vulnerabilities
  • From: Martin Schulze
• [SECURITY] [DSA 1080-1] New dovecot packages fix directory traversal
  • From: Steve Kemp
• [SECURITY] [DSA 1081-1] New libextractor packages fix arbitrary code execution
  • From: Martin Schulze
• [USN-287-1] Nagios vulnerability
  • From: Martin Pitt
• [USN-288-1] PostgreSQL server/client vulnerabilities
  • From: Martin Pitt
• Buffer overflow in QuickTime 7.0.4?
  • From: John Richard Moser
• Re: On the Recent PGP and Truecrypt Posting
  • From: Jon Callas
• multiple file include exploits in EzUpload Pro v2.10
  • From: black-cod3
• JAMES 2.2.0 <-- Denial Of Service
  • From: y3dips
• Advisory: MiniNuke v2.x Multiple Remote Vulnerabilities
  • From: Mustafa Can Bjorn IPEKCI
• Advisory: ASPBB <= 0.52 (perform_search.asp) XSS vulnerability
  • From: Mustafa Can Bjorn IPEKCI
• Advisory: tinyBB <= 0.3 Multiple Remote Vulnerabilities.
  • From: Mustafa Can Bjorn IPEKCI
• Advisory: Enigma Haber <= 4.3 Multiple Remote SQL Injection Vulnerabilities
  • From: Mustafa Can Bjorn IPEKCI
• Advisory: F@cile Interactive Web <= 0.8x Multiple Remote Vulnerabilities.
  • From: Mustafa Can Bjorn IPEKCI
• Advisory: Eggblog <= 3.x Multiple Remote Vulnerabilities
  • From: Mustafa Can Bjorn IPEKCI
• Advisory: phpBB 2.x (admin/admin_hacks_list.php) Local Inclusion Vulnerability.
  • From: Mustafa Can Bjorn IPEKCI
• Advisory: phpBB 2.x (Activity MOD Plus) File Inclusion Vulnerability.
  • From: Mustafa Can Bjorn IPEKCI
• Advisory: ASPSitem <= 2.0 Multiple Vulnerabilities.
  • From: Mustafa Can Bjorn IPEKCI
• Advisory: UBBThreads 5.x,6.x Multiple File Inclusion Vulnerabilities.
  • From: Mustafa Can Bjorn IPEKCI
• Advisory: Blend Portal <= 1.2.0 for phpBB 2.x (blend_data/blend_common.php) File Inclusion Vulnerability
  • From: Mustafa Can Bjorn IPEKCI
• VARIOMAT(advanced cms tool)SQL injection/XSS
  • From: CrAzY . CrAcKeR
• Xss exploit in Photoalbum B&W v1.3
  • From: black-cod3
• [KAPDA::#45] - geeklog multiple vulnerabilities
  • From: alireza hassani
• UBBThreads 5.x,6.x md5 hash disclosure
  • From: chris
• RE: Advisory: Blend Portal <= 1.2.0 for phpBB 2.x(blend_data/blend_common.php) File Inclusion Vulnerability
  • From: austin best
• RE: Advisory: Eggblog <= 3.x Multiple Remote Vulnerabilities
  • From: Egg
• Re: Proof of concept that PGP AUTHENTICATION CAN BE BYPASSED WITHOUT PATCHING
  • From: Andreas Beck
• Foing Remote File Include Vulnerability [PHPBB]
  • From: s3rv3r_hack3r
• New SMB and DCERPC features on Impacket released with doc
  • From: Gerardo Richarte
• WikiNi Persistent Cross Site Scripting Vulnerability
  • From: raphael . huck
• [SECURITY] [DSA 1082-1] New Linux kernel 2.4.17 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Multiple Xss exploits in Chipmunk Board
  • From: black code
• RE: Multiple Xss exploits in coolphp magazine
  • From: black code
• multiple Xss exploits in : vCard 2.9
  • From: black code
• [KAPDA::#46] - Nukedit Unauthorized Admin Add
  • From: farhadkey
• Re: LM hashes in a hot-desking environment
  • From: The Little Prince
• Jiwa Financials - Reporting allows execution of arbitrary reports as SQL user with full permissions.
  • From: Robert
• 4nNukeWare<--V 0.91 SQL Injection exploits
  • From: CrAzY . CrAcKeR
• Re: On the Recent PGP and Truecrypt Posting
  • From: Jon Callas
• phpMyDesktop|arcade 1.0 FINAL Code Execution
  • From: darkgod . xsf
• Bratpack Cross Site Scripting Vulnerability
  • From: CrAzY . CrAcKeR
• NorthStudio Cross Site Scripting Vulnerability
  • From: CrAzY . CrAcKeR
• WBB<--v2.3.4"misc.php" SQL injection Vulnerability
  • From: CrAzY . CrAcKeR
• Re: On the Recent PGP and Truecrypt Posting
  • From: Andreas Beck
• OaBoard 1.0 Remote File inclusion
  • From: hessamx
• Backdoor in RelevantKnowledge adware (What are we fighting for?)
  • From: 3APA3A
• Fire fox dos exploit
  • From: co296
• [ GLSA 200605-16 ] CherryPy: Directory traversal vulnerability
  • From: Stefan Cornelius
• [ MDKSA-2006:093 ] - Updated dia packages fix string format vulnerabilities.
  • From: security
• [ GLSA 200605-17 ] libTIFF: Multiple vulnerabilities
  • From: Stefan Cornelius
• WebCalendar-1.0.3 reading of any files
  • From: socsam
• Open Searchable Image Catalogue: XSS and SQL Injection Vulnerabilities
  • From: enji
• Re: [Info Disclosure] Diesel PHP Job Site Latest Version
  • From: support
• Re: V-Webmail 1.6.4 Remote File Include
  • From: Ventsislav Genchev
• Xss exploit in Chipmunk directory
  • From: black code
• Re: Re[2]: The Weakness of Windows Impersonation Model
  • From: Cesar
• pppBlog <= 0.3.8 administrative credentials/system disclosure
  • From: rgod
• # MHG Security Team --- PHP NUKE All version Remote File Inc.
  • From: erne
• Re: [Info Disclosure] Diesel PHP Job Site Latest Version
  • From: GulfTech Security Research
• QontentOneCMS v1.0
  • From: luny