Mail Index

• Thread Index

• [SECURITY] [DSA 1083-1] New motor packages fix arbitrary code execution
  • From: Martin Schulze
• Re: Fire fox dos exploit
  • From: Josh Zlatin-Amishav
• toendaCMS 0.7.0 Cross Site Scripting
  • From: kubasx
• file include exploit in Support Cards v1
  • From: black code
• Secunia Research: Eserv/3 IMAP and HTTP Server Multiple Vulnerabilities
  • From: Secunia Research
• Secunia Research: ZipCentral ZIP File Handling Buffer Overflow Vulnerability
  • From: Secunia Research
• New SecurityFocus mailing list: Focus-Apple
  • From: Marc Fossi
• Re: New SecurityFocus mailing list: Focus-Apple
  • From: Marc Fossi
• Re: Fire fox dos exploit
  • From: anoni . mouse
• Internet explorer Vulnerbility
  • From: Mr . Niega
• rPSA-2006-0087-1 kernel
  • From: Justin M. Forbes
• [SECURITY] [DSA 1084-1] New typespeed packages fix arbitrary code execution
  • From: Steve Kemp
• SUSE Security Announcement: rug (SUSE-SA:2006:029)
  • From: Thomas Biege
• [security bulletin] HPSBUX02122 SSRT061158 rev.1 - HP-UX Mozilla Remote Execution of Arbitrary Code, Denial of Service (DoS)
  • From: security-alert
• multiple file inclusion exploits in ovidentia v5.8.0
  • From: black code
• FreeBSD Security Advisory FreeBSD-SA-06:16.smbfs
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-06:15.ypserv
  • From: FreeBSD Security Advisories
• multiple file inclusion exploits in ovidentia v5.8.0
  • From: black-cod3
• ishopcart cgi 0day and multiple vulnerabilities
  • From: bugtraq
• TAL RateMyPic v1.0
  • From: luny
• Snort HTTP Inspect Pre-Processor Uricontent Bypass
  • From: Christian Swartzbaugh
• Squirrelmail local file inclusion
  • From: brokejunker
• SyScan'06 - The Hackers' Conference in Asia
  • From: thomas48
• [SECURITY] [DSA 1085-1] New lynx-cur packages fix several vulnerabilities
  • From: Martin Schulze
• Re: Internet explorer Vulnerbility
  • From: Alexander Sotirov
• Corsaire Security Advisory - VMware ESX Server Cross Site Scripting issue
  • From: advisories
• Re: # MHG Security Team --- PHP NUKE All version Remote File Inc.
  • From: rgod
• [ MDKSA-2006:094 ] - Updated evolution packages fix DoS (crash) vulnerability on certain messages.
  • From: security
• CA Forum Remote SQL Injection
  • From: omnipresent
• Forensic memory dumping intricacies - PhysicalMemory, DD, and caching issues
  • From: Arne Vidstrom
• Joomla/Mambo CMS Component SimpleBoard 1.1 XSS-Vulnerabilities
  • From: Yannick von Arx
• RE: Internet explorer Vulnerbility
  • From: Peter Kruse
• Re: PHPSimple Choose v0.3
  • From: prattmic
• northstudio Cross Site Scripting Vulnerability
  • From: CrAzY . CrAcKeR
• Re: [SECURITY] [DSA 1085-1] New lynx-cur packages fix several vulnerabilities
  • From: Thomas Dickey
• SMF 1.0.7 and lower plus 1.1rc2 and lower - IP spoofing vulnerability/IP ban evasion vulnerability
  • From: Jessica Hope
• Re: my Web Server << v-1.0 Denial of Service Exploit
  • From: Steven M. Christey
• Re: Re: # MHG Security Team --- PHP NUKE All version Remote File Inc.
  • From: nukedx
• VMSA-2006-0002 - VMware Server sensitive information lifetime issue
  • From: VMware Security Team
• Weblog Oggi v1.0
  • From: luny
• PHP ManualMaker v1.0
  • From: luny
• Bytehoard 2.1 Remote File Include
  • From: beford
• Re: Jiwa Financials - Reporting allows execution of arbitrary reports as SQL user with full permissions.
  • From: mikes
• newsfactory Cross Site Scripting & SQL injection
  • From: CrAzY . CrAcKeR
• Re: Squirrelmail local file inclusion
  • From: Paul Schmehl
• Redaxo CMS <= 3.2 Remote File Include
  • From: beford
• New Snort Bypass - Patch - Bypass of Patch
  • From: Sigint Consulting
• aspWebLinks 2.0 Remote SQL Injection / Admin Pass Change Exploit
  • From: ajannhwt
• MyTrueHood.com - XSS
  • From: luny
• [SECURITY] [DSA 1086-1] New xmcd packages fix denial of service
  • From: Martin Schulze
• new bug
  • From: webmaster
• Pro Publish SQL Injection and XSS Vulnerabilities
  • From: Soothackers
• # MHG Security Team --- MyBloggie 2.1.1 version Remote File Include Vulnerabilit
  • From: erne ayaz
• [DRUPAL-SA-2006-005] Drupal 4.6.7 / 4.7.1 fixes SQL injection issue
  • From: Uwe Hermann
• [DRUPAL-SA-2006-007] Drupal 4.6.8 / 4.7.2 fixes arbitrary file execution issue
  • From: Uwe Hermann
• [DRUPAL-SA-2006-008] Drupal 4.6.8 / 4.7.2 fixes XSS issue
  • From: Uwe Hermann
• [DRUPAL-SA-2006-006] Drupal 4.6.7 / 4.7.1 fixes arbitrary file execution issue
  • From: Uwe Hermann
• rPSA-2006-0091-1 firefox thunderbird
  • From: Justin M. Forbes
• Re: Re: # MHG Security Team --- PHP NUKE All version Remote File Inc.
  • From: Steven M. Christey
• Re: New Snort Bypass - Patch - Bypass of Patch
  • From: M. Dodge Mumford
• Pixelpost <= 1-5rc1-2 multiple vulnerabilities
  • From: rgod
• [SECURITY] [DSA 1087-1] New PostgreSQL packages fix encoding vulnerabilities
  • From: Martin Schulze
• [ECHO_ADV_32$2006] SCart 2.0 Remote Code Execution
  • From: eufrato
• Critical SQL Injection in CoolForum
  • From: gmdarkfig
• [SECURITY] [DSA 1088-1] New centericq packages fix arbitrary code execution
  • From: Martin Schulze
• Blackhat USA 2006 - Review , remarks and proposal agenda
  • From: newslist@xxxxxxxxxxxxxxxxxxxxxx
• Re: # MHG Security Team --- MyBloggie 2.1.1 version Remote File Include Vulnerabilit
  • From: nukedx
• LocazoList Classifieds <= v1.05e(viewmsg.asp) Remote SQL Injection Vulnerability
  • From: ajannhwt
• phpBB2 (template.php) Remote File Inclusion
  • From: canberx
• [MajorSecurity #7]dotWidget CMS <= 1.0.6 - Remote File Include Vulnerability
  • From: admin
• [SECURITY] [DSA 1089-1] New freeradius packages fix arbitrary code execution
  • From: Martin Schulze
• Re: New Snort Bypass - Patch - Bypass of Patch
  • From: M. Dodge Mumford
• DotClear <= 1.2.4 'blog_dc_path' (php5) arbitrary remote inclusion
  • From: rgod
• LifeType <=1.0.4 'articleId' SQL injection
  • From: rgod
• Re: WBB<--v2.3.4"misc.php" SQL injection Vulnerability
  • From: nukedx
• Re: OaBoard 1.0 Remote File inclusion
  • From: Botan Rizgar
• Re: [Info Disclosure] Diesel PHP Job Site Latest Version
  • From: John F Flynn III
• Re: Fire fox dos exploit
  • From: pagvac
• RE: Fire fox dos exploit
  • From: Andy
• Re: Fire fox dos exploit
  • From: Ronald van den Blink
• Re: Fire fox dos exploit
  • From: Yannick von Arx
• Re: Re: Fire fox dos exploit
  • From: vincenzo . ampolo
• Re: Fire fox dos exploit
  • From: Phil Trainor
• Re: Internet explorer Vulnerbility
  • From: Hariharan
• Re: phpFoX All Version Login Exploit
  • From: purefan
• VMSA-2006-0001 - VMware ESX Server Cross Site Scripting issue
  • From: VMware Security Team
• Re: Fire fox dos exploit
  • From: Ronald van den Blink
• Re: Fire fox dos exploit
  • From: Aaron Hopkins
• Timberland Search XSS Vulnerability
  • From: try_og
• New <<BackTrack release announcement
  • From: Max Moser
• SMS "messages.php" SQL injection
  • From: CrAzY . CrAcKeR
• XSS in ICQ.com
  • From: sn4k3 . 23
• Client buffer-overflow in Quake 3 engine (1.32c / rev 795)
  • From: Luigi Auriemma
• Bookmark4U Remote File Include
  • From: selfar2002
• # MHG Security Team ---Rumble 1.02 version Remote File Inc.
  • From: erne
• # MHG Security Team ---Rumble 1.02 version Remote File Inc.
  • From: MSN : erne [at] ernealizm [dot] com
• Re: [Full-disclosure] bug in oscomerce
  • From: Frank Laszlo
• CyBoards PHP Lite v1.25 (common.PHP) Remote File Inclusion
  • From: SpC-x
• Multiple Vendor NTFS Data Stream Malware Stealth Technique
  • From: Joxean Koret
• RE: phpBB2 (template.php) Remote File Inclusion
  • From: Scrouaf _
• LabWiki v1.0
  • From: luny
• Kmita FAQ v1.0
  • From: luny
• RE: Fire fox dos exploit
  • From: Sanjay Rawat
• TSLSA-2006-0032 - multi
  • From: Trustix Security Advisor
• LocazoList Classifieds <= v1.05e(viewmsg.asp) Remote SQL Injection Vulnerability
  • From: ajannhwt
• FunkBoard CF0.71 (profile.php) Remote User Pass Change Exploit
  • From: ajannhwt
• ewsEngine <= 1.5.0(newscomments.php) Remote SQL Injection Vulnerability
  • From: ajannhwt
• Advisory 04/2006: DokuWiki PHP code execution vulnerability in spellchecker
  • From: Stefan Esser
• Re: [Full Disclosure] [Kil13r-SA-20060520] Microsoft Internet Explorer Crash Vulnerability
  • From: mac68k
• [MajorSecurity #8]DreamAccount <= 3.1 - Remote File Include Vulnerability
  • From: admin
• [MajorSecurity #9]HostAdmin <= 3.1 - Remote File Include Vulnerability
  • From: admin
• Re: phpBB2 (template.php) Remote File Inclusion
  • From: ad@xxxxxxxxxxxxxxxx
• Personal Information Disclosure/Account Hijacking Vulerability in mafia online games
  • From: Ulrich Keil
• Dmx Forum <= v2.1a Remote Passwords Disclosure
  • From: gmdarkfig
• Re: New Snort Bypass - Patch - Bypass of Patch
  • From: Pukhraj Singh
• [Kil13r-SA-20060605] Syworks SafeNET Policy File Vulnerability
  • From: mac68k
• [Kil13r-SA-20060606] ESTsoft InternetDISK Arbitary Code Execution Vulnerability
  • From: mac68k
• [KAPDA::#47] - myNewsletter 1.1.2 SQL_Injection
  • From: farhadkey
• Re: [Full-disclosure] RealVNC 4.1.1 Remote Compromise
  • From: Tobias Kreidl
• Re: Bookmark4U Remote File Include
  • From: str0ke
• ASPScriptz Guest Book 2.0 XSS
  • From: omnipresent
• Re: PCPIN Chat <= 5.0.4 "login/language" remote cmmnds xctn
  • From: k . reznichak
• Re: Multiple Vendor NTFS Data Stream Malware Stealth Technique
  • From: Andreas Marx
• file include in Xtreme Downloads v.1.0
  • From: gamr-14
• Re: phpBB2 (template.php) Remote File Inclusion
  • From: Jessica Hope
• Multiple file include exploits in Xtreme Downloads v.1.0
  • From: black code
• Re: [Full-disclosure] RealVNC 4.1.1 Remote Compromise
  • From: Kurt Seifried
• Particle Gallery v1.0.0
  • From: luny
• Partial Links v1.2.2
  • From: luny
• ParticleSoft Whois v1.0.3
  • From: luny
• Re: phpBB2 (template.php) Remote File Inclusion
  • From: Aaron Klein
• ParticleSoft Wiki v1.0.2
  • From: luny
• [ MDKSA-2006:095 ] - Updated libtiff packages fixes tiffsplit vulnerability
  • From: security
• Re: phpBB2 (template.php) Remote File Inclusion
  • From: Paul Laudanski
• Re: # MHG Security Team --- MyBloggie 2.1.1 version Remote File Include Vulnerabilit
  • From: Steven M. Christey
• GANTTy v1.0.3
  • From: luny
• Asterisk 1.2.9 and Asterisk 1.0.11 Released - Security Fix
  • From: Matt Riddell (IT)
• IRM 019: MailMarshal 6.1 SMTP MTA Content Filter Bypass
  • From: IRM Advisories
• [SECURITY] [DSA 1090-1] New spamassassin packages fix remote command execution
  • From: Martin Schulze
• libgd 2.0.33 infinite loop in GIF decoding ?
  • From: rocheml
• Re: [MajorSecurity #8]DreamAccount <= 3.1 - Remote File Include Vulnerability
  • From: admin
• Re: Squirrelmail local file inclusion
  • From: Steven M. Christey
• [ GLSA 200606-02 ] shadow: Privilege escalation
  • From: Sune Kloppenborg Jeppesen
• RE: Fire fox dos exploit
  • From: Jaroslaw Sajko
• Re: Buffer-overflow and crash in Fenice OMS 1.10
  • From: giampaolo . mancini
• bug on showwich.asp
  • From: ip . chat
• BloggIT <= 1.01 (admin.php) Arbitrary code execution
  • From: Federico Fazzi
• TinyPHP forum <= 3.6 Remote Command Execution Exploit
  • From: hessamx
• Re: [Full-disclosure] RealVNC 4.1.1 Remote Compromise
  • From: Ray Van Dolson
• Re: Re: Fire fox dos exploit
  • From: al4321
• Re: WebCalendar-1.0.3 reading of any files
  • From: craig
• Re: [Info Disclosure] Diesel PHP Job Site Latest Version
  • From: Ronald van den Blink
• XSS on LarkinWEB & Company
  • From: spymeta
• Re: Squirrelmail local file inclusion
  • From: pauls
• ADVISORY - D-Link Wireless Access-Point
  • From: news
• Re: XSS in ICQ.com
  • From: 321_321
• [ GLSA 200606-03 ] Dia: Format string vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• rPSA-2006-0096-1 spamassassin
  • From: Justin M. Forbes
• Vice Stats 0.5b SQL injection
  • From: CrAzY . CrAcKeR
• Re: XSS in ICQ.com
  • From: 321_321
• [HV-LOW] Microsoft NetMeeting memory corruption (Brief)
  • From: vuln
• [ GLSA 200606-05 ] Pound: HTTP request smuggling
  • From: Sune Kloppenborg Jeppesen
• Re: IRM 019: MailMarshal 6.1 SMTP MTA Content Filter Bypass
  • From: phil . mccracken
• MyBB 1.1.2 New XSS
  • From: o . y . 6
• [FLSA-2006:189137-1] Updated mozilla packages fix security issues
  • From: Marc Deslauriers
• [ GLSA 200606-04 ] Tor: Several vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200606-01 ] Opera: Buffer overflow
  • From: Sune Kloppenborg Jeppesen
• aWebNews <= 1.0 (login.php) Remote DocumentRoot file disclosure
  • From: Federico Fazzi
• MiraksGalerie <= 2.62 Multiple Remote command execution
  • From: Federico Fazzi
• [FLSA-2006:190777] Updated X.org packages fix security issue
  • From: Marc Deslauriers
• Re: XSS in ICQ.com
  • From: 321_321
• [FLSA-2006:190941] Updated ipsec-tools package fixes security issue
  • From: Marc Deslauriers
• Re: [Full-disclosure] RealVNC 4.1.1 Remote Compromise
  • From: Bojan Zdrnja
• [FLSA-2006:190884] Updated squirrelmail package fixes security issues
  • From: Marc Deslauriers
• [FLSA-2006:189137-2] Updated firefox package fixes security issues
  • From: Marc Deslauriers
• Calendar Express 2 SQL injection
  • From: CrAzY . CrAcKeR
• [ MDKSA-2006:096 ] - Updated openldap packages fixes buffer overflow vulnerability.
  • From: security
• [ MDKSA-2006:097 ] - Updated MySQL packages fixes SQL injection vulnerability.
  • From: security
• PBL Guestbook v1.31 - XSS
  • From: luny
• [ MDKSA-2006:098 ] - Updated postgresql packages fixes SQL injection vulnerabilities.
  • From: security
• Mafia Moblog Full Path Disclosure / SQL injection
  • From: simo64
• Babykatmedia.com scripts - vSCAL & vREAL - XSS Vulns
  • From: luny
• Chemical Directory - XSS
  • From: luny
• Easy Ad-Manager
  • From: luny
• [NOBYTES.COM: #12] ViArt Shop v2.5.5 - XSS Vulnerability
  • From: John Cobb
• [ GLSA 200606-06 ] AWStats: Remote execution of arbitrary code
  • From: Sune Kloppenborg Jeppesen
• [MajorSecurity #10]i.List <= 1.5 - XSS
  • From: admin
• MiraksGalerie <= 2.62 Multiple Remote command execution
  • From: Federico Fazzi
• E-Dating System from scriptsez.net - XSS
  • From: luny
• [SECURITY] [DSA 1093-1] New xine-ui packages fix denial of service
  • From: Martin Schulze
• Ez Ringtone Manager from scriptez.net - XSS
  • From: luny
• GUESTEX guestbook code execution
  • From: root
• Tikiwiki 1.9.3.2 security release
  • From: marc
• Re: aWebNews <= 1.0 (login.php) Remote DocumentRoot file disclosure
  • From: str0ke
• Internet Explorer vulnerbility
  • From: Mr . Niega
• Uninformed Journal Release Announcement: Volume 4
  • From: Uninformed Journal
• Mathcad Area Lock Vulnerability
  • From: bugtraq
• NPDS <= 5.10 Local Inclusion, XSS, Full path disclosure
  • From: gmdarkfig
• Back-end = 0.7.2.1 (jpcache.php) Remote command execution
  • From: Federico Fazzi
• PHP-Nuke <= 7.9 Search XSS Vulnerability
  • From: try_og
• [SECURITY] [DSA 1091-1] New TIFF packages fix arbitrary code execution
  • From: Martin Schulze
• Re: phpBannerExchange 2.0 Directory Traversal Vulnerability
  • From: mopeygoff
• bug of script injection in shoutcast servers
  • From: mantasjadzevicius
• Re: IRM 019: MailMarshal 6.1 SMTP MTA Content Filter Bypass
  • From: Hayden Searle
• Re: Tiny Web Gallery <= 1.4 XSS
  • From: tinywebgallery
• Ie opera dos exploit
  • From: co296
• cms-bandits 2.5, Remote command execution
  • From: Federico Fazzi
• [USN-289-1] tiff vulnerabilities
  • From: Martin Pitt
• rPSA-2006-0098-1 gdm
  • From: Justin M. Forbes
• [USN-291-1] FreeType vulnerabilities
  • From: Martin Pitt
• 'Multiple Sql injection and XSS in integramod portal
  • From: ahwaz
• Re: Multiple Vendor NTFS Data Stream Malware Stealth Technique
  • From: Gadi Evron
• [SECURITY] [DSA 1092-1] New MySQL 4.1 packages fix SQL injection
  • From: Martin Schulze
• Re: [Full-disclosure] RealVNC 4.1.1 Remote Compromise
  • From: Jose Ramirez
• [security bulletin] HPSBMA02121 SSRT061157 rev.2 - HP OpenView Storage Data Protector Remote Arbitrary Command Execution
  • From: security-alert
• [security bulletin] HPSBUX02090 SSRT051058 rev.2 - HP-UX Secure Shell Remote Denial of Service (DoS)
  • From: security-alert
• SSL VPNs and security
  • From: Michal Zalewski
• Re: SSL VPNs and security
  • From: Amit Klein (AKsecurity)
• [USN-295-1] xine-lib vulnerability
  • From: Martin Pitt
• [ GLSA 200606-07 ] Vixie Cron: Privilege Escalation
  • From: Sune Kloppenborg Jeppesen
• [USN-294-1] courier vulnerability
  • From: Martin Pitt
• [SECURITY] [DSA 1094-1] New gforge packages fix cross-site scripting
  • From: Moritz Muehlenhoff
• okscripts.com - XSS Vulns
  • From: luny
• Dell Openmanage CD Vulnerability
  • From: wiz561
• iFoto v0.20-06/06/06
  • From: luny
• phazizGuestbook v2.0 - XSS
  • From: luny
• Re: PHP-Nuke <= 7.9 Search XSS Vulnerability
  • From: try_og
• [USN-292-1] binutils vulnerability
  • From: Martin Pitt
• [USN-293-1] gdm vulnerability
  • From: Martin Pitt
• Docebo CMS 3.0.3, Remote command execution
  • From: Federico Fazzi
• Docebo Core 3.0.3, Remote command execution
  • From: Federico Fazzi
• mole.com.ua Booking Script
  • From: luny
• mole.com.ua Ticket Booking Script - XSS
  • From: luny
• Docebo Kms 3.0.3, Remote command execution
  • From: Federico Fazzi
• Re: DGbook v1.0 - XSS
  • From: diangemilang
• MobeSpace v2.0 - XSS
  • From: luny
• Re: libgd 2.0.33 infinite loop in GIF decoding ?
  • From: Xavier Roche
• Docebo Lms 3.0.3, Remote command execution
  • From: Federico Fazzi
• Re: SSL VPNs and security
  • From: E Mintz
• Re: SSL VPNs and security
  • From: Michal Zalewski
• [ GLSA 200606-08 ] WordPress: Arbitrary command execution
  • From: Sune Kloppenborg Jeppesen
• Secunia Research: SelectaPix Cross-Site Scripting and SQL Injection Vulnerabilities
  • From: Secunia Research
• Secunia Research: AutoMate unacev2.dll Buffer Overflow Vulnerability
  • From: Secunia Research
• TinyMuw v1.0 - XSS
  • From: luny
• PHP-Nuke Download Module Remote SQL Injection
  • From: BuNy-m
• Contensis CMS XSS vunerability
  • From: smigofthedump
• [USN-288-3] PostgreSQL client vulnerabilities
  • From: Martin Pitt
• Re: IRM 019: MailMarshal 6.1 SMTP MTA Content Filter Bypass
  • From: alberto
• [USN-288-2] PostgreSQL server/client vulnerabilities
  • From: Martin Pitt
• Windows Software Restriction Policy Protection Bypass
  • From: 3APA3A
• P.A.I.D v2.2
  • From: luny
• CORE-2006-0327: IAXclient truncated frames vulnerabilities
  • From: Core Security Technologies advisories
• ST AdManager Lite v1
  • From: luny
• Re: [Full-disclosure] Windows Software Restriction Policy Protection Bypass
  • From: Dinis Cruz
• 0verkill 0.6, Remote integer overflow
  • From: Federico Fazzi
• TSLSA-2006-0034 - multi
  • From: Trustix Security Advisor
• [USN-296-1] firefox vulnerabilities
  • From: Martin Pitt
• [Kil13r-SA-20060609-1] Daum Search Cross-Site Scripting Vulnerability
  • From: mac68k
• [Kil13r-SA-20060609-2] DaNaWa Search Cross-Site Scripting Vulnerability
  • From: mac68k
• [Kil13r-SA-20060609-3] DreamWiz Search Cross-Site Scripting Vulnerability
  • From: mac68k
• CORE-2006-0330: Asterisk PBX truncated video frame vulnerability
  • From: Core Security Technologies advisories
• rPSA-2006-0099-1 openldap openldap-clients openldap-servers
  • From: Justin M. Forbes
• [SECURITY] [DSA 1095-1] New freetype packages fix several vulnerabilities
  • From: Martin Schulze
• Ringlink v3.2 - XSS
  • From: luny
• fx-APP Version 0.0.8.1
  • From: luny
• AsianXO.com - XSS with cookie data include
  • From: luny
• Tempinbox.com
  • From: luny
• [MajorSecurity #11]OpenCMS<= 6.2.1 - XSS
  • From: admin
• [MajorSecurity #13]Cabacos Web CMS<= 3.8 - XSS
  • From: admin
• [MajorSecurity #14]CFXe-CMS <= 2.0 - XSS
  • From: admin
• Joomla! 1.0 Remote File Inclusion
  • From: c4nberx
• [MajorSecurity #12]ZMS<= 2.9 - XSS
  • From: admin
• ERRATA: [ GLSA 200604-10 ] zgv: Heap overflow
  • From: Sune Kloppenborg Jeppesen
• [KAPDA::#47] - Snitz Forum <= 3.4.05 SQL-Injection Vulnerability
  • From: farhadkey
• igloo DoubleSpeak v 0.1 Multiple remote file inclusion
  • From: aminrayden
• [ GLSA 200606-10 ] Cscope: Many buffer overflows
  • From: Sune Kloppenborg Jeppesen
• Diaryland.com - XSS
  • From: luny
• [ GLSA 200606-11 ] JPEG library: Denial of Service
  • From: Sune Kloppenborg Jeppesen
• Mydeardiary.com - XSS
  • From: luny
• [ GLSA 200606-12 ] Mozilla Firefox: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• 5 Star Review - review-script.com - XSS w/ cookie output
  • From: luny
• [ GLSA 200606-13 ] MySQL: SQL Injection
  • From: Sune Kloppenborg Jeppesen
• Secunia Research: MyBB "domecode()" PHP Code Execution Vulnerability
  • From: Secunia Research
• Lycos.com - XSS vulnerability
  • From: admin
• Re: iFoto v0.20-06/06/06
  • From: aizu . ikmal
• Hotbot.com - XSS vulnerability in search engine
  • From: admin
• vbulletin.com Multiple XSS Vulnerabilities
  • From: chris
• WinSCP - URI Handler Command Switch Parsing
  • From: Jelmer Kuperus
• RCblog 1.03 Directory Traversal [index.php]
  • From: irc0d3r
• CS-Forum <= 0.81 Cross Site Scripting, SQL Injection, Full Path Disclosure
  • From: gmdarkfig
• tempnam() Bypass unique file name PHP 5.1.4
  • From: cxib
• Wanderlist.com - XSS vuln with sessions disclosure
  • From: luny
• Myscrapbook v3.1 - XSS
  • From: luny
• PaintedOver.com, Inc. 2004-2006 Xss Vulnerabilities
  • From: redl_ine
• Foing (manage_songs.php) Remote File Inclusion[phpBB]
  • From: darkfire
• [KAPDA::48]CopperminePhotoGallery1.4.8~ addhit() function~ SQLinjection attack
  • From: addmimistrator
• Opengaia.com - XSS Vuln & Session Include
  • From: luny
• sorry i wrong something, this is original AWF CMS 1.11 adv
  • From: Federico Fazzi
• Wireclub.com - XSS & cookie disclosure
  • From: luny
• Nowtalking.com - XSS
  • From: luny
• cescripts.com - XSS
  • From: luny
• ThWboard 3.0 <= SQL Injection
  • From: 666
• Stargazer.org - XSS with Session output
  • From: luny
• Windows XP Task Scheduler Local Privilege Escalation (Advisory)
  • From: zipk0der
• [ GLSA 200606-14 ] GDM: Privilege escalation
  • From: Sune Kloppenborg Jeppesen
• Re: igloo DoubleSpeak v 0.1 Multiple remote file inclusion
  • From: str0ke
• Virtualtourist.com - XSS with cookie disclosure
  • From: luny
• rPSA-2006-0100-1 freetype
  • From: Justin M. Forbes
• [ MDKSA-2006:099 ] - Updated freetype2 packages fixes multiple vulnerabilities.
  • From: security
• Re: SSL VPNs and security
  • From: wnorth
• RE: Internet Explorer vulnerbility
  • From: Greg Merideth (Forward Technology)
• myPHP Guestbook 2.0.2 XSS Vulnerabilitie
  • From: x0r_1
• Re: SSL VPNs and security
  • From: thanekamp
• Flork.com
  • From: luny
• Vampirefreaks.com - XSS with cookie disclosure
  • From: luny
• [EEYEB-20060524] Symantec Remote Management Stack Buffer Overflow
  • From: eEye Advisories
• # MHG Security Team --- PHORUM 5.1.13 Remote File Inc.
  • From: erne
• Meefo.com - XSS with cookie include
  • From: luny
• Re: SSL VPNs and security
  • From: E Mintz
• Onlinenode.com - XSS
  • From: luny
• Re: Internet Explorer vulnerbility
  • From: Andrei Ponomarev
• Yourfacesucks.com - XSS & cookie disclosure
  • From: luny
• [ GLSA 200606-09 ] SpamAssassin: Execution of arbitrary code
  • From: Sune Kloppenborg Jeppesen
• Blackplanet.com - XSS & cookie disclosure vuln.
  • From: luny
• Re: Ie opera dos exploit
  • From: Daniel Hoffmann
• Invision Power Board XSS
  • From: kepche
• Re: Windows XP Task Scheduler Local Privilege Escalation (Advisory)
  • From: Eliah Kagan
• Re: Internet Explorer vulnerbility
  • From: Michael N. Telnov
• internet explorer vulnerability based on MarjinZ & Mr.Niega discovered
  • From: Kevin Berkane
• [FSA013] phpCMS 1.2.1pl2, Remote command execution
  • From: Federico Fazzi
• Call For Papers - No cON Name 2006 Edition Spain
  • From: Jose Nicolas Castellano
• Emllabs.com - XSS
  • From: luny
• Content-Builder (CMS) 0.7.5, Remote command execution
  • From: Federico Fazzi
• DCP-Portal 6.1.x, Remote command execution
  • From: Federico Fazzi
• Re: BUGTRAQ:20060611 ThWboard 3.0 <= SQL Injection
  • From: Steven M. Christey
• VBZooM <<-- V1.11 "show.php" SQL injection
  • From: CrAzY . CrAcKeR
• VBZooM <<--V1.02 "meaning.php" SQL injection
  • From: CrAzY . CrAcKeR
• Re: SSL VPNs and security
  • From: Michal Zalewski
• VBZooM <<--V1.11 "subject.php" SQL injection
  • From: CrAzY . CrAcKeR
• [SECURITY] [DSA 1096-1] New webcalendar packages fix arbitrary code execution
  • From: Martin Schulze
• VBZooM <<--V1.01 "language.php" SQL injection
  • From: CrAzY . CrAcKeR
• Simpnews <= All version - Remote File Include Vulnerabilities
  • From: SpC-x
• multiple Xss exploits in 35mmslidegallery V6
  • From: black code
• High Risk Vulnerability in Microsoft Windows RASMAN Service
  • From: Peter Winter-Smith
• iDefense Security Advisory 06.13.06: Windows MRXSMB.SYS MRxSmbCscIoctlOpenForCopyChunk Overflow
  • From: labs-no-reply
• iDefense Security Advisory 06.13.06: Microsoft Internet Explorer ART File Heap Corruption Vulnerability
  • From: labs-no-reply
• ZDI-06-017: Microsoft Internet Explorer UTF-8 Decoding Heap Overflow Vulnerability
  • From: zdi-disclosures
• PHP MESSENGER 1.0 Version - Remote File Include Vulnerability
  • From: SpC-x
• Jobline 1 1 1 Version - Remote File Include Vulnerability
  • From: SpC-x
• Amr Talkbox talkbox.PHP - Remote File Include Vulnerabilities
  • From: SpC-x
• S H O U T B O X (v1.5) Version - Remote File Include Vulnerability
  • From: SpC-x
• Re: Shoutpro 1.0 Version - Remote File Include Vulnerability
  • From: Steven M. Christey
• iDefense Security Advisory 06.13.06: Windows MRXSMB.SYS MrxSmbCscIoctlCloseForCopyChunk DoS
  • From: labs-no-reply
• Ltwcalendar 4.1.3 version - Remote File Include Vulnerabilities
  • From: SpC-x
• [REVERSEMODE ADVISORY] MS06-030 - Microsoft Mrxsmb.sys privilege escalation advisory
  • From: Reversemode
• # MHG Security Team --- PHPAskIt v2.0.1 Remote File Inc.
  • From: erne@xxxxxxxxxxxxx
• Web-CMS <<--1.0 "print.php" SQL injection
  • From: CrAzY . CrAcKeR
• Re: Simpnews <= All version - Remote File Include Vulnerabilities
  • From: str0ke
• [REVERSEMODE ADVISORY] MS06-030 NtClose DeadLock.
  • From: Reversemode
• TikiWiki Sql injection & XSS Vulnerabilities
  • From: bug@xxxxxxxxxxxxxxx
• Re: vbulletin.com Multiple XSS Vulnerabilities
  • From: contact
• Re: PHP-Nuke <= 7.9 Search XSS Vulnerability
  • From: Paul Laudanski
• blur6ex <= 0.3.462 'ID' blind sql injection
  • From: rgod
• REMOTE FILE INCLUSION ( ALL )
  • From: SpC-x
• RE: Dell Openmanage CD Vulnerability
  • From: Michael Scheidell
• Chipmailer <= 1.09 Multiple Vulnerabilities
  • From: tamriel
• RE: Windows Software Restriction Policy Protection Bypass
  • From: Roger A. Grimes
• iDefense Security Advisory 06.13.06: Windows Media Player PNG Chunk Decoding Stack-Based Buffer Overflow
  • From: labs-no-reply
• GamePlay.co.uk XSS
  • From: charlie
• PhpMyFactures 1.0 Cross Site Scripting, SQL Injection, Full Path Disclosure and others
  • From: gmdarkfig
• Oracle DBMS_STANDARD security problem
  • From: putosoft softputo
• Re: PaintedOver.com, Inc. 2004-2006 Xss Vulnerabilities
  • From: reports
• file include exploits in mcGuestbook 1.3
  • From: gamr-14
• SYMSA-2006-004: Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution
  • From: research
• Simpleshout 1.6.0 Version - Remote File Include Vulnerability
  • From: SpC-x
• ZDI-06-018: Microsoft Internet Explorer DXImageTransform ActiveX Memory Corruption Vulnerability
  • From: zdi-disclosures
• Shoutpro 1.0 Version - Remote File Include Vulnerability
  • From: SpC-x
• [MajorSecurity #17] SixCMS <= 6 - Multiple XSS and directory traversal vulnerabilities
  • From: admin
• G Shout 1.3.1 Version - Remote File Include Vulnerability
  • From: SpC-x
• [USN-297-1] Thunderbird vulnerabilities
  • From: Martin Pitt
• [USN-298-1] libgd2 vulnerability
  • From: Martin Pitt
• [USN-288-4] dovecot regression fix
  • From: Martin Pitt
• Secunia Resaerch: Internet Explorer Exception Handling Memory Corruption Vulnerability
  • From: Secunia Research
• [USN-299-1] dhcdbd vulnerability
  • From: Martin Pitt
• Black Hat Speakers + 2005 Content on-line
  • From: Jeff Moss
• Secunia Research: PicoZip "zipinfo.dll" Multiple Archives Buffer Overflow
  • From: Secunia Research
• [ MDKSA-2006:099-1 ] - Updated freetype2 packages fixes multiple vulnerabilities.
  • From: security
• [ MDKSA-2006:100 ] - Updated gdm packages fix vulnerability
  • From: security
• Re: REMOTE FILE INCLUSION ( ALL )
  • From: Steven M. Christey
• Freeze Greetings Cards PWD.txt
  • From: alp_eren
• bbrss PhpBB (phpbb_root_path) Remote File Inclusion
  • From: SpC-x
• wbb<<--v 2.2.2 "thread.php" SQL injection
  • From: CrAzY . CrAcKeR
• wbb<<--v 2.2.1 "studienplatztausch.php" SQL injection
  • From: CrAzY . CrAcKeR
• wbb<<--v 2.1.6 "profile.php" SQL injection
  • From: CrAzY . CrAcKeR
• [ GLSA 200606-16 ] DokuWiki: PHP code injection
  • From: Sune Kloppenborg Jeppesen
• SEC Consult SA-20060613-0 :: Outlook Web Access Cross Site Scripting Vulnerability
  • From: SEC Consult Research
• Flipper Poll (root_path) Remote File Inclusion
  • From: SpC-x
• [ GLSA 200606-15 ] Asterisk: IAX2 video frame buffer overflow
  • From: Sune Kloppenborg Jeppesen
• Fusion Polls (xtrphome) Remote File Inclusion
  • From: SpC-x
• PhpBlueDragon CMS 2.9.1, File inclusion vulnerability
  • From: Federico Fazzi
• [KDE Security Advisory] KDM symlink attack vulnerability
  • From: Dirk Mueller
• [SECURITY] [DSA 1097-1] New Kernel 2.4.27 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• MySQL DoS
  • From: Kanatoko
• [ MDKSA-2006:101 ] - Updated squirrelmail packages fix vulnerabilities
  • From: security
• [SECURITY] [DSA 1098-1] New horde3 packages fix cross-site scripting
  • From: Moritz Muehlenhoff
• [ MDKSA-2006:102 ] - Updated libtiff packages fixes tiff2pdf vulnerability
  • From: security
• [FSA016] ISPConfig 2.2.3, File inclusion vulnerability
  • From: Federico Fazzi
• [USN-301-1] kdm vulnerability
  • From: Martin Pitt
• [ MDKSA-2006:103 ] - Updated spamassassin packages fix vulnerability
  • From: security
• Secunia Research: CMS Mundo SQL Injection and File Upload Vulnerabilities
  • From: Secunia Research
• EC2ND - Call for Papers
  • From: Blyth A J C (Comp)
• [SECURITY] [DSA 1099-1] New horde2 packages fix cross-site scripting
  • From: Moritz Muehlenhoff
• FreeBSD Security Advisory FreeBSD-SA-06:17.sendmail
  • From: FreeBSD Security Advisories
• Secunia Research: DeluxeBB SQL Injection and File Inclusion Vulnerabilities
  • From: Secunia Research
• [USN-300-1] wv2 vulnerability
  • From: Martin Pitt
• Re: Amr Talkbox talkbox.PHP - Remote File Include Vulnerabilities
  • From: Steven M. Christey
• ePrayver v.Alpha - XSS
  • From: luny
• APBoard 2.2-r3 <= SQL Injections
  • From: 666
• [ MDKSA-2006:104 ] - Updated sendmail packages fix remotely exploitable vulnerability
  • From: security
• Re: MySQL DoS
  • From: Tonnerre Lombard
• [SECURITY] [DSA 1100-1] New wv2 packages fix integer overflow
  • From: Martin Schulze
• MP3 Search/Archive v1.2 - XSS
  • From: luny
• Advisory: Authentication bypass in phpBannerExchange
  • From: RedTeam Pentesting
• Advisory: Unauthorized password recovery in phpBannerExchange
  • From: RedTeam Pentesting
• HotPlugCMS_1.0 - SQL Injection Vulnerability
  • From: guest01
• Andys Chat 4.5 (action) Remote File Inclusion
  • From: SpC-x
• [USN-297-2] Thunderbird extensions update for recent security update
  • From: Martin Pitt
• [ GLSA 200606-18 ] PAM-MySQL: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• Regarding "SMB Invalid Handle Value" - MS06-030. Vulnerability not fixed.
  • From: Reversemode
• [ GLSA 200606-17 ] OpenLDAP: Buffer overflow
  • From: Sune Kloppenborg Jeppesen
• rPSA-2006-0106-1 kdebase
  • From: Justin M. Forbes
• [ GLSA 200606-19 ] Sendmail: Denial of Service
  • From: Sune Kloppenborg Jeppesen
• HotPlugCMS 1.0, Cross-Site Scripting Vulnerabilities
  • From: Federico Fazzi
• rPSA-2006-0105-1 arts
  • From: Justin M. Forbes
• TSLSA-2006-0036 - multi
  • From: Trustix Security Advisor
• dvdwolf SQL injection/XSS
  • From: CrAzY . CrAcKeR
• [USN-303-1] MySQL vulnerability
  • From: Martin Pitt
• Boardhost.com - XSS
  • From: luny
• Develooping Flash Chat (banned_file) Remote File Inclusion
  • From: SpC-x
• Indexu v 5.0.01 Multiple Remote File Include Vulnerabilities
  • From: KARKOR23
• Re: Several flaws in e-business designer (eBD)
  • From: ebd . soporte
• [security bulletin] HPSBUX02115 SSRT061077 rev.1 - HP-UX running Support Tools Manager (xstm, cstm, stm) Local Denial of Service (DoS)
  • From: security-alert
• file include exploits in nucleus 3.23
  • From: gamr-14
• Re: [FSA016] ISPConfig 2.2.3, File inclusion vulnerability
  • From: t . brehm
• aXentForum II XSS vuLLn
  • From: SnoBmsn
• Chatizens.com - XSS with cookie disclosure
  • From: luny
• Calendarix 0.7.20060401, SQL Injection Vulnerabilities
  • From: Federico Fazzi
• Carspace.com - XSS with cookie disclosure
  • From: luny
• Ji-takz Chat (mycfg) Remote File Inclusion
  • From: SpC-x
• Zeroboard File Upload & extension bypass Vulnerability
  • From: mins
• Cisco Secure ACS Cross Site Scripting Vulnerability.
  • From: liam . romanis
• Blacksingles.com - XSS & cookie disclosure
  • From: luny
• file include exploits in mcGuestbook 1.3
  • From: SWEET SWEET
• [ MDKSA-2006:105 ] - Updated kdebase packages fix local vulnerability in kdm
  • From: security
• Re: Secunia Research: PicoZip "zipinfo.dll" Multiple Archives BufferOverflow
  • From: c0rrupt
• [ MDKSA-2006:106 ] - Updated mdkkdm packages fix local vulnerability
  • From: security
• PHP security (or the lack thereof)
  • From: Darren Reed
• PictureDis Products "lang" Parameter File Inclusion Vulnerability
  • From: root-hacked
• Re: [Bugtraq ID: 17909] ISPConfig Session.INC.PHP Remote File Include Vulnerability
  • From: t . brehm
• Youtube.com - XSS & cookie disclosure
  • From: luny
• Bingbox.com - XSS & cookie disclosure
  • From: luny
• RE: Cisco Secure ACS Cross Site Scripting Vulnerability.
  • From: Paul Oxman (poxman)
• file include exploits in dotwidgeta Version 2
  • From: SWEET SWEET
• Simple PHP Poll Authecnication Admin ByPass
  • From: alp_eren
• Netscape.com - Cross site scripting vulnerability
  • From: admin
• webcrawler.com - Cross site scripting vulnerability
  • From: admin
• GreatDomains.com - XSS with cookie disclosure
  • From: admin
• Re: PHP security (or the lack thereof)
  • From: Bojan Zdrnja
• Re: PHP security (or the lack thereof)
  • From: Steven M. Christey
• bitweaver <= v1.3 multiple vulnerabilities
  • From: rgod
• [ECHO_ADV_33$2006] CMS Faethon 1.3.2 mainpath Remote File Inclusion
  • From: eufrato
• Re: PHP security (or the lack thereof)
  • From: Jose Nazario
• Housecarers.com - XSS & cookie disclosure
  • From: luny
• Dealgates.com - XSS with cookie disclosure
  • From: luny
• Re: Bingbox.com - XSS & cookie disclosure
  • From: Sven Vetsch
• Mambo <= 4.6rc1 sql injection
  • From: rgod
• Cline Communications Sql injection
  • From: liz0
• XSS in GardenWeb
  • From: nanoymaster
• Apnaspace.com - XSS with cookie disclosure
  • From: luny
• Re: SSL VPNs and security
  • From: Eloy Paris
• hi5.com - XSS with cookie disclosure
  • From: luny
• Re: GamePlay.co.uk XSS
  • From: Patrick Morris
• Re: RE: Internet Explorer vulnerbility
  • From: Charles Hamby
• ISO.org - XSS vulnerability
  • From: admin
• alipager xss attack
  • From: s3rv3r_hack3r
• Hotscripts.com - XSS with cookie disclosure
  • From: luny
• Proof of concept: mybb 1.1.2 remote code execution
  • From: Javier Olascoaga
• [Kurdish Security # 8] DCP-Portal Remote File Include Vulnerability [Editor DHTML]
  • From: botan
• Facerave.com - XSS & sessions disclosure
  • From: luny
• animesuki XSS
  • From: nanoymaster
• Re: PHP Advanced Transfer Manager Download users password hashes
  • From: jn
• Windowsitpro.com - XSS with cookie disclosure
  • From: luny
• Cybersocieties.com - XSS & cookie disclosure
  • From: luny
• Ratescene.co.uk - XSS with session disclosure
  • From: luny
• Macworld.com - XSS vulnerability
  • From: admin
• About.com - XSS with cookie disclosure
  • From: luny
• Ratemylook.co.uk - XSS with session disclosure
  • From: luny
• Re: Ie opera dos exploit
  • From: Nathaniel Hasenfus
• Palm.com - XSS vulnerability
  • From: admin
• webcrawler.com - XSS vulnerability in search-engine
  • From: admin
• VampireFreaks journal XSS
  • From: nanoymaster
• Ashop Search Module SQL injection
  • From: entrika_fs
• Facetherating.com - XSS & session disclosure
  • From: luny
• Confixx <= 3
  • From: kr4ch
• Confixx <= 3
  • From: kr4ch
• B3ta.com - XSS with cookie disclosure
  • From: luny
• Biblenet.net - XSS
  • From: luny
• SinFP 2.00 - a major release with many new features
  • From: GomoR
• RahnemaCo Remote File Inclusion Exploit
  • From: Breeeeh
• Re: REMOTE FILE INCLUSION ( ALL )
  • From: eufrato
• Blogspot.com - XSS with cookie disclosure
  • From: luny
• 43things.com - XSS with cookie disclosure
  • From: luny
• Technorati.com - XSS with cookie disclosure
  • From: luny
• Re: MySQL DoS
  • From: xhire
• PTT.yu Guestbook Vulnebility
  • From: us3rg0d
• vbzoom V1.11 forum.php SQL Injection Vulnerabilities
  • From: KARKOR23
• mp3.com - Cross site scripting vulnerability
  • From: admin
• XSS in http://www.newscientist.com/ - Search
  • From: viz . security
• MPCS v0.2 - XSS
  • From: luny
• Microsoft Excel 0-day Vulnerability FAQ document written
  • From: Juha-Matti Laurio
• [security bulletin] HPSBTU02116 SSRT061135 rev.2 - HP Tru64 UNIX and HP Internet Express for Tru64 UNIX Running sendmail, Remote Execution of Arbitrary Code or Denial of Service (DoS)
  • From: security-alert
• e107 v0.7.5 XSS
  • From: securityconnection
• Re: [MajorSecurity #17] SixCMS <= 6 - Multiple XSS and directory traversal vulnerabilities
  • From: ellinger
• XSS Vulnerability in Maximus SchoolMAX
  • From: Fixer
• VBZooM <<--V1.00 "rank.php" SQL injection
  • From: CrAzY . CrAcKeR
• VBZooM <<--V1.11 "message.php" SQL injection
  • From: CrAzY . CrAcKeR
• vuBB <= 0.2.1 [BFA] SQL Injection Exploit + Advisory link
  • From: gmdarkfig
• VBZooM <<--V1.00 "lng.php" SQL injection
  • From: CrAzY . CrAcKeR
• SaphpLesson<<--1.1 "misc.php" SQL injection
  • From: CrAzY . CrAcKeR
• PHP Live Helper <=([abs_path]) Remote File Include Vulnerabilities
  • From: selfar2002
• [ GLSA 200606-21 ] Mozilla Thunderbird: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• onedotoh xss atack
  • From: alijsb
• [ GLSA 200606-20 ] Typespeed: Remote execution of arbitrary code
  • From: Sune Kloppenborg Jeppesen
• Re: PHP security (or the lack thereof)
  • From: Geo.
• singapore gallery <= 0.10.0 Multiple Vulnerabilities
  • From: simo64
• Easy CMS 0.1.2 Php Shell Upload Vulnerabilities
  • From: liz0
• WeBBoA Hosting Script SQL Injection
  • From: entrika_fs
• Re: PHP Live Helper <=([abs_path]) Remote File Include Vulnerabilities
  • From: stormhacker
• Dragons Kingdom v1.0 - XSS & cookie disclosure
  • From: luny
• Re: PHP security (or the lack thereof)
  • From: Neil Neely
• Vm ware 0day dos exploit by n00b.
  • From: co296
• qtofilemanager xss attack !
  • From: alijsb
• V3Chat Instant Messenger - XSS
  • From: luny
• Input Validation/Output Encoding Vulnerabilities in Cisco CallManager Allow Script Injection Attacks
  • From: Reynolds, Jake
• Janus Contact
  • From: Charles Hamby
• Re: Vm ware 0day dos exploit by n00b.
  • From: Paul Szabo
• Re: Vm ware 0day dos exploit by n00b.
  • From: Eliah Kagan
• trifinite Security Advisory: Buffer Overrun in Toshiba Bluetooth Stack for Windows
  • From: Martin Herfurt
• display.cgi
  • From: soltan_defacer
• Multiple Bypass and Integrity Lost Vulnerabilities
  • From: egavriil
• vBulletin<<--v3.5.X "member.php" Cross Site Scripting
  • From: CrAzY . CrAcKeR
• [MajorSecurity #18] Ralf Image Gallery <=0.7.4 - Multiple XSS, Remote File Include and directory traversal vulnerabilities
  • From: admin
• Re: MAXDEV CMS Multiple vulnerabilities
  • From: pete
• Module's Name Downloads <<--V 7 SQL injection
  • From: CrAzY . CrAcKeR
• Module's Name Content<<--V1.0 SQL injection
  • From: CrAzY . CrAcKeR
• RahnemaCo "page.php" Remote File Inclusion[2]
  • From: CrAzY . CrAcKeR
• ULtimate PHP Board <= 1.96 GOLD Code Execution (exploit code)
  • From: mbrooks
• [ MDKSA-2006:107 ] - Updated arts packages fix vulnerability in artswrapper
  • From: security
• JEdit ActiveX Control Information Disclosure vulnerability
  • From: bulten
• Sendmail MIME DoS vulnerability
  • From: Jain, Siddhartha
• Re: Vacation Retal Script v1.0
  • From: radu
• [ MDKSA-2006:108 ] - Updated xine-lib packages fix buffer overflow vulnerabilities
  • From: security
• Opera 9 DoS PoC
  • From: N9
• Bypassing of web filters by using ASCII
  • From: k . huwig
• Re: display.cgi
  • From: eufrato
• Re: Bypassing of web filters by using ASCII
  • From: Fixer
• [ MDKSA-2006:110 ] - Updated gnupg packages fix vulnerability
  • From: security
• Re: possible SQL injection in Subdreamer
  • From: ziad
• Re: file include exploits in nucleus 3.23
  • From: nukedx
• Re: # MHG Security Team --- PHORUM 5.1.13 Remote File Inc.
  • From: brian
• Re: PHP security (or the lack thereof)
  • From: Jessica Hope
• Eduha Meeting php shell upload Vulnerabilities
  • From: liz0
• Re: PHP security (or the lack thereof)
  • From: Alan J Rosenthal
• Re: PHP security (or the lack thereof)
  • From: kicktd
• Re: PHP security (or the lack thereof)
  • From: Geo.
• Digital Armaments July-August Hacking Challange: Microsoft
  • From: info
• cjGuestbook v1.3 - XSS
  • From: luny
• Excel 0-day FAQ updated with Microsoft advisory information
  • From: Juha-Matti Laurio
• Somechess v1.5 rc1 - XSS
  • From: luny
• Re: Bypassing of web filters by using ASCII
  • From: Paul
• [ MDKSA-2006:109 ] - Updated wv2 packages fix vulnerability
  • From: security
• Re: Bypassing of web filters by using ASCII
  • From: Kurt Huwig
• Re: Bypassing of web filters by using ASCII
  • From: RSnake
• Re: Bypassing of web filters by using ASCII
  • From: Kurt Huwig
• Re: PHP security (or the lack thereof)
  • From: Crispin Cowan
• MS Excel Remote Code Execution POC Exploit
  • From: naveed
• Re: aXentForum II XSS vuLLn
  • From: Steven M. Christey
• Re: Bypassing of web filters by using ASCII
  • From: Amit Klein (AKsecurity)
• Re: V3Chat Instant Messenger - XSS
  • From: support
• Re: Bypassing of web filters by using ASCII
  • From: Kurt Huwig
• VigilantMinds Advisory: Opera JPEG Processing Integer Overflow Vulnerability (VMSA-20060621-01)
  • From: VigilantMinds Advisories
• Re: Bypassing of web filters by using ASCII
  • From: Hubert Seiwert
• [ GLSA 200606-22 ] aRts: Privilege escalation
  • From: Sune Kloppenborg Jeppesen
• RE: MS Excel Remote Code Execution POC Exploit
  • From: Jain, Siddhartha
• Re: MS Excel Remote Code Execution POC Exploit
  • From: naveed
• [ GLSA 200606-23 ] KDM: Symlink vulnerability
  • From: Sune Kloppenborg Jeppesen
• Re: Bypassing of web filters by using ASCII
  • From: Amit Klein (AKsecurity)
• flock d0s exploit remote. beta 1 (v0.7)
  • From: co296
• [SECURITY] [DSA 1101-1] New courier packages fix denial of service
  • From: Martin Schulze
• Re: MS Excel Remote Code Execution POC Exploit
  • From: Steven M. Christey
• vlbook 1.2 XSS Bug
  • From: omnipresent
• [SNS Advisory No.88] Webmin Directory Traversal Vulnerability
  • From: snsadv@xxxxxxxxx
• QaTraq 6.5 RC: Multiple XSS Vulnerabilities
  • From: enji
• [KAPDA]Coppermine 1.4.8~Parameter Cleanup System ByPass~Registering Global Varables
  • From: addmimistrator
• [security bulletin] HPSBUX02127 SSRT051056 - rev.1 HP-UX Kernel Local Denial of Service (DoS)
  • From: security-alert
• RE: Bypassing of web filters by using ASCII
  • From: James C. Slora Jr.
• TSLSA-2006-0037 - multi
  • From: Trustix Security Advisor
• aeDating 4.1 XSS
  • From: securityconnection
• Trend Micro Control Manager (TMCM) Persistent XSS Vulnerability
  • From: Darren Bounds
• Dating Agent PRO 4.7.1 Vulnerability
  • From: securityconnection
• Cisco Secure ACS Weak Session Management Vulnerability
  • From: Darren Bounds
• Re: Bypassing of web filters by using ASCII
  • From: Amit Klein (AKsecurity)
• Re: Re: PHP security (or the lack thereof)
  • From: nabiy
• [ GLSA 200606-24 ] wv2: Integer overflow
  • From: Stefan Cornelius
• [Kil13r-SA-20060622-1] NetSoft SmartNet 2.0 Cross-Site Scripting Vulnerability
  • From: mac68k
• DREAMACCOUNT V3.1 Remote Command Execution Exploit
  • From: KARKOR23
• Linux VNC evil client patch - BID 17978
  • From: embyte
• rPSA-2006-0110-1 kernel
  • From: Justin M. Forbes
• Re: Digital Armaments July-August Hacking Challange: Microsoft
  • From: Alexander Sotirov
• productcart soltan_defacer
  • From: soltan_defacer
• Dating biz@ dating script v1.0 - XSS
  • From: luny
• WBB<<---v1.2 "showmods.php" SQL Injection
  • From: CrAzY . CrAcKeR
• Re: Opera 9 DoS PoC
  • From: Darren Clarke
• [KAPDA]MyBB1.1.3~Option update for code buttons~Sql Injection Admin Access
  • From: addmimistrator
• Re: PHP security (or the lack thereof)
  • From: Crispin Cowan
• Calendar ( Provided by Codewalkers ) - SQL Injection
  • From: Silitix
• Re: PHP security (or the lack thereof)
  • From: john mullee
• [ECHO_ADV_34$2006] W-Agora (Web-Agora) <= 4.2.0 (inc_dir) Remote File Inclusion
  • From: the_day
• WBB<<---v2.3.1"report.php" SQL Injection
  • From: CrAzY . CrAcKeR
• SYMSA-2006-005
  • From: research
• phpBlueDragon CMS 2.9.1 multiple remote file inclusion vuln
  • From: rozowa . landrynka
• Re: Bypassing of web filters by using ASCII
  • From: Thor (Hammer of God)
• [Kil13r-SA-20060622-2] Namo DeepSearch 4.5 Cross-Site Scripting Vulnerability
  • From: mac68k
• Re: Sendmail MIME DoS vulnerability
  • From: Gadi Evron
• Re: PHP security (or the lack thereof)
  • From: Geo.
• Re: Opera 9 DoS PoC
  • From: Bruno Lustosa
• WBB<<---v2.0 RC2 "newthread.php" SQL Injection
  • From: CrAzY . CrAcKeR
• Re: Re: MS Excel Remote Code Execution POC Exploit
  • From: Juha-Matti Laurio
• Softbiz Dating 1.0 SQL injection
  • From: securityconnection
• Re: Cisco Secure ACS Weak Session Management Vulnerability
  • From: Clayton Kossmeyer
• Re: PHP security (or the lack thereof)
  • From: Ronald Chmara
• ERNW Security Advisory 01/2006
  • From: mozilla
• [Kurdish Security # 9] MyMail Directory Traversal And XSS Attacking Vulnerability
  • From: botan
• Re: Opera 9 DoS PoC
  • From: Laurent
• RE: PHP security (or the lack thereof)
  • From: Geo.
• Claroline Cross-Site Scripting Vulnerabilities
  • From: bug@xxxxxxxxxxxxxxx
• DeluxeBB 1.07 Create admin Exploit
  • From: Hessamx
• Planetnews Authecnication Admin ByPass
  • From: alp_eren
• [SECURITY] [DSA 1102-1] New pinball packages fix privilege escalation
  • From: Steve Kemp
• [USN-304-1] gnupg vulnerability
  • From: Martin Pitt
• XSS in Cpanel 10
  • From: preth00nker
• [ GLSA 200606-25 ] Hashcash: Possible heap overflow
  • From: Thierry Carrez
• RE: Bypassing of web filters by using ASCII
  • From: James C. Slora Jr.
• [ GLSA 200606-26 ] EnergyMech: Denial of Service
  • From: Thierry Carrez
• Re: PHP security (or the lack thereof)
  • From: Paul Schmehl
• Re: PHP security (or the lack thereof)
  • From: Matthias Kestenholz
• Re: vBulletin<<--v3.5.X "member.php" Cross Site Scripting
  • From: scott
• Re: PHP security (or the lack thereof)
  • From: Mrten
• Re: flock d0s exploit remote. beta 1 (v0.7)
  • From: Chris Rothecker
• Re: Bypassing of web filters by using ASCII
  • From: Vincent Archer
• [ MDKSA-2006:111 ] - Updated MySQL packages fixes authorized user DoS(crash) vulnerability.
  • From: security
• [KAPDA]MyBB1.1.3~Option update for code buttons~Sql Injection Admin Access
  • From: addmimistrator
• Re: Bypassing of web filters by using ASCII
  • From: David Huecking
• Re: MS Excel Remote Code Execution POC Exploit
  • From: naveed
• Re: Linux VNC evil client patch - BID 17978
  • From: embyte
• RE: Bypassing of web filters by using ASCII
  • From: Amit Klein (AKsecurity)
• GlobeTrotter Mobility Manager - security issue
  • From: dzelek
• Mailenable SMTP Service DoS
  • From: db0
• RE: Bypassing of web filters by using ASCII
  • From: RSnake
• Re: PHP security (or the lack thereof)
  • From: Daniel Hulme
• Undisclosed cross site scripting vulnerabilities in domaintools.com - requesting contacts
  • From: admin
• Re: Opera 9 DoS PoC
  • From: Bastian Ahrens
• Re: Opera 9 DoS PoC
  • From: Eric Furman
• Amazon and Msn vulnerabilities
  • From: dcrab
• OpenGuestbook Cross Site Scripting & SQL Injection
  • From: simo64
• Amazon, MSN vulns and.. Yes, we know! Most sites have vulnerabilities
  • From: Gadi Evron
• [OpenPKG-SA-2006.010] OpenPKG Security Advisory (gnupg)
  • From: OpenPKG
• Re: PHP security (or the lack thereof)
  • From: Darren Reed
• Universal Hooker - Tool release
  • From: Hernan Ochoa
• Re: PHP security (or the lack thereof)
  • From: Tobias J. Kreidl
• Taking Over Laptops by Fuzzing Wireless Drivers
  • From: Gadi Evron
• Re: Bypassing of web filters by using ASCII
  • From: Balazs Attila-Mihaly (Cd-MaN)
• Re: Bypassing of web filters by using ASCII
  • From: Hubert Seiwert
• Re: PHP security (or the lack thereof)
  • From: Glynn Clements
• Winged Gallery v1.0
  • From: luny
• Re: Sendmail MIME DoS vulnerability
  • From: Claus Assmann
• error_log() Safe Mode Bypass PHP 5.1.4 and 4.4.2
  • From: cxib
• Jaws <= 0.6.2 'Search gadget' SQL injection
  • From: rgod
• Windows Live Messenger 8.0 ( Contact List *.ctt ) Heap Overflow
  • From: Alexander Hristov
• Usenet Script v0.5
  • From: luny
• [USN-306-1] MySQL 4.1 vulnerability
  • From: Martin Pitt
• [USN-305-1] OpenLDAP vulnerability
  • From: Martin Pitt
• [SECURITY] [DSA 1103-1] New Linux kernel 2.6.8 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Re: [ECHO_ADV_34$2006] W-Agora (Web-Agora) <= 4.2.0 (inc_dir) Remote File Inclusion
  • From: Steven M. Christey
• CrisoftRicette<<--1.0pre15b Remote File Inclusion
  • From: CrAzY . CrAcKeR
• SYMSA-2006-006: Lotus Domino SMTP Based Denial of Service
  • From: research
• phpvillage "funshow.php" SQL Injection
  • From: CrAzY . CrAcKeR
• [Kurdish Security # 11] SiteBar Cross-Site Scripting
  • From: botan
• Re: [MajorSecurity #18] Ralf Image Gallery <=0.7.4 - Multiple XSS, Remote File Include and directory traversal vulnerabilities
  • From: Marc MERLIN
• Re: XSS in Cpanel 10
  • From: bug
• Re: Re: PHP security (or the lack thereof)
  • From: nabiy
• Re: PHP security (or the lack thereof)
  • From: Ronald Chmara
• Re: Is Windows TCP/IP source routing PoC code available?
  • From: 3APA3A
• RE: PHP security (or the lack thereof)
  • From: Geo.
• SUSE Security Announcement: freetype2 (SUSE-SA:2006:037)
  • From: Thomas Biege
• [Kurdish Security # 10 ] MF Piadas 1.0 Remote File Include Vulnerability
  • From: botan
• CAID 34325 - CA ITM, eAV, ePP scan job description field format string vulnerability
  • From: Williams, James K
• Files and cvars overwriting in Quake 3 engine (1.32c / rev 803 / ...)
  • From: Luigi Auriemma
• [Kil13r-SA-20060628] Hanaro Search Cross-Site Scripting Vulnerability
  • From: mac68k
• smartsite cms v1.0 Remote File include
  • From: KARKOR23
• Layered Defense Advisory: Format String Vuln in CA eTrust
  • From: dh
• [KAPDA]MyBB 1.1.4~function_post.php~XSS Attack In URL tag
  • From: addmimistrator
• vCard PRO SQL Injection
  • From: CrAzY . CrAcKeR
• [ MDKSA-2006:112 ] - Updated gd packages fix DoS vulnerability.
  • From: security
• [ MDKSA-2006:114 ] - Updated libwmf packages fixes embedded GD vulnerability
  • From: security
• Re: Calendar ( Provided by Codewalkers ) - SQL Injection
  • From: krustevs
• PHP-Nuke Module's Name Sections<<--V3 SQL Injection
  • From: CrAzY . CrAcKeR
• Secunia Research: DeluxeBB SQL Injection and File Inclusion Vulnerabilities
  • From: Secunia Research
• BLOG:CMS <= 4.0.0k sql injection
  • From: rgod
• [USN-307-1] mutt vulnerability
  • From: Martin Pitt
• [ GLSA 200606-27 ] Mutt: Buffer overflow
  • From: Sune Kloppenborg Jeppesen
• AzDGDatingPlatinum<<--v1.1.0 "view.php" SQL Injection
  • From: CrAzY . CrAcKeR
• SyScan'06 Highlight - Is Phone Banking Safe?
  • From: thomas48
• Re[2]: Is Windows TCP/IP source routing PoC code available?
  • From: "Ìèíàåâ_Àíäðåé"
• MKPortal 1.0.1 Final ($ind) File Include Vulnerability (perl)
  • From: stormhacker
• PHP iCalendar Cross Site Scripting
  • From: botan
• Cisco Security Advisory: Multiple Vulnerabilities in Wireless Control System
  • From: Cisco Systems Product Security Incident Response Team
• Microsoft's Real Test with Vista is Vulnerabilities
  • From: Gadi Evron
• [OpenPKG-SA-2006.011] OpenPKG Security Advisory (png)
  • From: OpenPKG
• RE: PHP security (or the lack thereof)
  • From: Geo.
• Re: [MajorSecurity #18] Ralf Image Gallery <=0.7.4 - Multiple XSS, Remote File Include and directory traversal vulnerabilities
  • From: Ralf
• Re: [funsec] Microsoft's Real Test with Vista is Vulnerabilities
  • From: thomas48
• Cisco Security Advisory: Access Point Web-Browser Interface Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• RE: [funsec] Microsoft's Real Test with Vista is Vulnerabilities
  • From: Larry Seltzer
• [ MDKSA-2006:113 ] - Updated tetex packages fix embedded GD vulnerabilities
  • From: security
• Re: PHP security (or the lack thereof)
  • From: Tonnerre Lombard
• Secunia Research: Opera SSL Certificate "Stealing" Weakness
  • From: Secunia Research
• Presentation: AT&T ISNN - "Case Studies in Finding Previously Unknown Vulnerabilities in Web Applications."
  • From: Kenneth F. Belva
• Re: PHP security (or the lack thereof)
  • From: Darren Reed
• PHPClassifieds General
  • From: luny
• Re: Files and cvars overwriting in Quake 3 engine (1.32c / rev 803 / ...)
  • From: Luigi Auriemma
• [KAPDA]http://myimei.com/security/2006-06-24/mybb104archive-modelight-parameter-extractionvarable-overwriting.html
  • From: addmimistrator
• DMA[2006-0628a] - 'Apple OSX launchd unformatted syslog() vulnerability'
  • From: K F (lists)
• [ GLSA 200606-29 ] Tikiwiki: SQL injection and multiple XSS vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• CSRF in Nuked Klan 1.7 SP4.2
  • From: blwood
• Softbiz Banner Exchange 1.0 XSS
  • From: securityconnection
• [ MDKSA-2006:115 ] - Updated mutt packages fix buffer overflow vulnerability
  • From: security
• Secunia Research: phpRaid SQL Injection and File Inclusion Vulnerabilities
  • From: Secunia Research
• [ GLSA 200606-28 ] Horde Web Application Framework: XSS vulnerability
  • From: Sune Kloppenborg Jeppesen
• Digital Armaments Security Advisory 29.06.2006: Siemens Speedstream Wireless Router Password Protection Bypass Vulnerability
  • From: info
• rPSA-2006-0116-1 mutt
  • From: Justin M. Forbes
• Novell Security contact address change
  • From: Roman Drahtmueller
• Multiple Vulnerabilities in PatchLink Update Server 6
  • From: Chris Steipp
• Novell Security Announcement NOVELL-SA:2006:001
  • From: Jim Short
• [security bulletin] HPSBTU02125 SSRT061105 rev.1 - HP Tru64 UNIX Running Perl 5.8.2 and earlier, Local Unauthorized Code Execution
  • From: security-alert
• [security bulletin] HPSBUX02122 SSRT061158 rev.2 - HP-UX Mozilla Remote Execution of Arbitrary Code, Denial of Service (DoS)
  • From: security-alert
• [ MDKSA-2006:114 ] - Updated libwmf packages fixes embedded GD vulnerability
  • From: security
• Msie 7.0 beta Crash
  • From: Mr . Niega
• rPSA-2006-0120-1 gnupg
  • From: Justin M. Forbes