Mail Index

• Thread Index

• phpMyConferences <= 8.0.2 Remote File Inclusion
  • From: mfp . c
• ActiveX security leaks in the TV owned web game platform
  • From: maxgipeh
• Hawking Technology wireless router WR254-CA DNS issue
  • From: Nikolai Grigoriev
• [ MDKSA-2006:193 ] - Updated ImageMagick packages fix vulnerabilities
  • From: security
• [ MDKSA-2006:194 ] - Updated PostgreSQL packages fix vulnerabilities
  • From: security
• SQL Injection Vulnerability in bfExplorer 0.0.6
  • From: security
• Sun java System Messenger Express XSS
  • From: handrix
• New Flaw in Firefox 2.0: DoS and possible remote code execution
  • From: xxxx
• Re: freenews---> fileinclude
  • From: pokley
• Re: freenews---> fileinclude
  • From: pokley
• Authentication bypass in BytesFall Explorer
  • From: RedTeam Pentesting
• Re: New Flaw in Firefox 2.0: DoS and possible remote code execution
  • From: Josh Bressers
• Re: New Flaw in Firefox 2.0: DoS and possible remote code execution
  • From: Gouki
• Re: Re: New Flaw in Firefox 2.0: DoS and possible remote code execution
  • From: xxxx
• [SECURITY] [DSA 1201-1] New ethereal packages fix denial of service
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1202-1] New screen packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• PHP-Nuke <= 7.9 Journal module (search.php) "forwhat" SQL Injection vulnerability
  • From: paisterist . nst
• Cross Site Scripting (XSS) Vulnerability in iPlanet Messaging Server Messenger Express by "Sun"
  • From: LegendaryZion
• Directory listing on B-FOCuS Wireless 802.11b/g ADSL2+ Router by "ECI Telecom LTD"
  • From: LegendaryZion
• Cross Site Scripting (XSS) Vulnerability in Web Mail service by "Walla! Communications LTD"
  • From: LegendaryZion
• Re: New Flaw in Firefox 2.0: DoS and possible remote code execution
  • From: Daniel Veditz
• iDefense Security Advisory 10.27.06: Novell eDirectory NMAS BerDecodeLoginDataRequeset DoS Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 10.31.06: Novell iManager Tomcat DoS Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 10.31.06: Sophos Anti-Virus Petite File Denial of Service Vulnerability
  • From: iDefense Labs
• Multiple XSS Vulnerabilities in Zend Google Data Client Library Preview 0.2.0
  • From: security
• Re: Re: Simple Machines Forum (SMF) XSS issue
  • From: oldiesmann
• Re[3]: New Flaw in Firefox 2.0: DoS and possible remote code execution
  • From: 3APA3A
• [USN-370-1] screen vulnerability
  • From: Kees Cook
• [USN-371-1] Ruby vulnerability
  • From: Kees Cook
• Cross Site Scripting (XSS) Vulnerability in Netquery by "VIRtech"
  • From: LegendaryZion
• Re: phpLedAds 2.0(dir) File Include
  • From: Stefano Zanero
• Cisco Security Advisory: Cisco Security Agent Management Center LDAP Administrator Authentication Bypass
  • From: Cisco Systems Product Security Incident Response Team
• [USN-373-1] mutt vulnerabilities
  • From: Kees Cook
• Asterisk Local and Remote Denial of Service vulnerability
  • From: sil
• tikiwiki 1.9.5 mysql password disclosure & xss
  • From: securfrog
• Outpost Insufficient validation of 'SandBox' driver input buffer
  • From: Matousec - Transparent security Research
• rPSA-2006-0202-1 tshark wireshark
  • From: rPath Update Announcements
• [security bulletin] HPSBUX02172 SSRT061269 rev.1 - HP-UX VirtualVault running Apache Remote Execution of Arbitrary Code, Denial of Service (DoS), and Unauthorized Access
  • From: security-alert
• Re: PLS-Bannieres 1.21 (bannieres.php) File Include
  • From: Stefano Zanero
• [security bulletin] HPSBUX02164 SSRT061265 rev.1 - HP-UX VirtualVault Running Apache 1.3.X Remote Denial of Service (DoS) and Arbitrary Code Execution
  • From: security-alert
• [security bulletin] HPSBUX02165 SSRT061266 rev.1 - HP-UX VirtualVault Remote Unauthorized Access
  • From: security-alert
• [USN-374-1] wvWare vulnerability
  • From: Kees Cook
• [security bulletin] HPSBUX02091 SSRT061099 rev.2 - HP-UX Local Increased Privilege
  • From: security-alert
• Internet Explorer 7 - Still Spyware Writers' Heaven
  • From: avivra
• Multiple vulnerabilities in SAP Web Application Server 6.40 and 7.00
  • From: Nicob
• how to trick most of cms avatar upload filter [exemple for : RunCms (PoC)]
  • From: securfrog
• Advisory 12/2006: phpMyAdmin - error.php XSS Vulnerability
  • From: Stefan Esser
• Firefox 1.5.0.7 Exploit
  • From: koenig
• iodine client 0.3.2 buffer overflow
  • From: poplix
• [SECURITY] [DSA 1203-1] New libpam-ldap packages fix access control bypass
  • From: Moritz Muehlenhoff
• [security bulletin] HPSBMA02159 SSRT061238 rev.1 - HP System Management Homepage (SMH), Remote Bypassing of Security Features or Cross Site Scripting or Denial of Service (DoS)
  • From: security-alert
• [USN-375-1] PHP vulnerability
  • From: Martin Pitt
• Educational write-up by Amit Klein: "A Refreshing Look at Redirection"
  • From: Amit Klein
• Re: how to trick most of cms avatar upload filter [exemple for : RunCms (PoC)]
  • From: Taneli Leppä
• Re: how to trick most of cms avatar upload filter [exemple for : RunCms (PoC)]
  • From: Taneli Leppä
• Re: Firefox 1.5.0.7 Exploit
  • From: Robert McGrew
• RE: how to trick most of cms avatar upload filter [exemple for : RunCms (PoC)]
  • From: Richard Stanway
• Re: Firefox 1.5.0.7 Exploit
  • From: Bram Dumolin
• RE: Internet Explorer 7 - Still Spyware Writers' Heaven
  • From: Roger A. Grimes
• Advisory 13/2006: PHP HTML Entity Encoder Heap Overflow Vulnerability
  • From: Stefan Esser
• EUSecWest/London CFP extended to Nov. 7
  • From: Dragos Ruiu
• Re: phpMyConferences <= 8.0.2 Remote File Inclusion
  • From: Steven M. Christey
• [ MDKSA-2006:196 ] - Updated php packages to address buffer overflow issue
  • From: security
• [ MDKSA-2006:195 ] - Updated wireshark packages fix multiple vulnerabilities
  • From: security
• Re: Firefox 1.5.0.7 Exploit
  • From: Martin Pitt
• Re[2]: New Flaw in Firefox 2.0: DoS and possible remote code execution
  • From: 3APA3A
• Re: Digital Armaments Security Advisory 10.07.2006: Flexwath Authorization Bypassing and XSS Vulnerability
  • From: sales
• Re: Multiple vulnerabilities in SAP Web Application Server 6.40 and7.00
  • From: harrisonholland
• [ GLSA 200611-01 ] Screen: UTF-8 character handling vulnerability
  • From: Matthias Geerdsen
• [SECURITY] [DSA-1205-1] New thttpd packages fix insecure temporary file creation
  • From: Steve Kemp
• SIMPLOG 0.9.3 injection sql & multiple xss
  • From: saps . audit
• [ MDKSA-2006:197 ] - Updated kernel packages fix multiple vulnerabilities and bugs
  • From: security
• XSS in script Mobile
  • From: m-0-t
• ZDI-06-036: Novell Netmail User Authentication Buffer Overflow Vulnerability
  • From: zdi-disclosures
• [USN-376-1] imlib2 vulnerabilities
  • From: Kees Cook
• [OpenPKG-SA-2006.030] OpenPKG Security Advisory (ruby)
  • From: OpenPKG
• Re: Internet Explorer 7 - Still Spyware Writers' Heaven
  • From: Eliah Kagan
• MajorSecurity Advisory #31]Xenis.creator CMS - Multiple Cross Site Scripting and SQL Injection Issues
  • From: admin
• Re: how to trick most of cms avatar upload filter [exemple for : RunCms (PoC)]
  • From: Paul Laudanski
• [OpenPKG-SA-2006.028] OpenPKG Security Advisory (php)
  • From: OpenPKG
• Web Directory Pro bypass Vulnerabilities
  • From: hack2prison
• [OpenPKG-SA-2006.029] OpenPKG Security Advisory (bind)
  • From: OpenPKG
• [USN-378-1] RPM vulnerability
  • From: Kees Cook
• [MajorSecurity Advisory #30]admin.tool 3 CMS - Multiple Cross Site Scripting Issues
  • From: admin
• [USN-377-1] NVIDIA vulnerability
  • From: Kees Cook
• Re: MajorSecurity Advisory #31]Xenis.creator CMS - Multiple Cross Site Scripting and SQL Injection Issues
  • From: saps . audit
• IF-CMS multiples XSS vunerabilities
  • From: saps . audit
• Re: Internet Explorer 7 - Still Spyware Writers' Heaven
  • From: Thierry Zoller
• @cid stats v2.3 File Include
  • From: mahmood ali
• Article Script v1.*and v1.6.3 Sql injection
  • From: liz0
• Stanford university SCARF user editing
  • From: navairum
• PHP Rapid Kill All Version File Injection
  • From: null_hack
• Re: New Flaw in Firefox 2.0: DoS and possible remote code execution
  • From: Jan Heisterkamp
• [ECHO_ADV_57_2006]Soholaunch Pro <=4.9 r36 Multiple Remote File Inclusion Vulnerability
  • From: erdc
• Mail Drives Security Considerations
  • From: darkz . gsa
• [ECHO_ADV_58_2006]Cyberfolio <=2.0 RC1 $av Remote File Inclusion Vulnerability
  • From: erdc
• Re: @cid stats v2.3 File Include
  • From: Heiko Wundram
• [ECHO_ADV_59_2006]Agora 1.4 RC1 "$_SESSION[PATH_COMPOSANT]" Remote File Inclusion Vulnerability
  • From: erdc
• [ECHO_ADV_60_2006] OpenEMR <=2.8.1 Multiple Remote File Inclusion Vulnerability
  • From: erdc
• Re: New Flaw in Firefox 2.0: DoS and possible remote code execution
  • From: Jerome Athias
• AIOCP <=1.3.007 multiples vulnerabilities [sql , remote file include , xss]
  • From: saps . audit
• Joomla 1.0.11 Remote File Include
  • From: root
• MWChat pro V 7.0 <= (CONFIG[MWCHAT_Libs]) Remote File Include Vulnerability
  • From: -= SHELL =- -= SHELL =-
• Cross Site Scripting (XSS) Vulnerability in IBM WebSphere Application Server
  • From: ProCheckUp Research
• TSLSA-2006-0061 - multi
  • From: Trustix Security Advisor
• [ GLSA 200611-02 ] Qt: Integer overflow
  • From: Matthias Geerdsen
• Ariadne <= 2.4.1 Multiple Remote File Include Vulnerabilities(New)
  • From: ajannhwt
• MajorSecurity Advisory #32]phpComasy CMS - Multiple Cross Site Scripting Issues
  • From: admin
• Re: Internet Explorer 7 - Still Spyware Writers' Heaven
  • From: Eliah Kagan
• RE: Internet Explorer 7 - Still Spyware Writers' Heaven
  • From: Roger A. Grimes
• [SECURITY] [DSA 1204-1] New ingo1 packages fix arbitrary shell command execution
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1206-1] New php4 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• XSS Vulnerability in Zend Framework Preview 0.2.0
  • From: security
• Hotmail and Windows Live Mail XSS Vulnerabilities
  • From: applesoup
• Advanced Guestbook 2.3.1 (Admin.php) Remote File Include
  • From: broken-proxy
• VulnDisco Pack for Metasploit
  • From: Evgeny Legerov
• Re: Firefox 1.5.0.7 Exploit
  • From: OOZIE
• ZDI-06-037: America Online ICQ ActiveX Control Code Execution Vulnerability
  • From: zdi-disclosures
• Re: Firefox 1.5.0.7 Exploit
  • From: Lubomir Kundrak
• IE7 website security certificate discrediting exploit
  • From: inge_eivind . henriksen
• Re: Multiple vulnerabilities in SAP Web Application Server 6.40 and7.00
  • From: Nicob
• Re: Advanced Guestbook 2.3.1 (Admin.php) Remote File Include
  • From: simo64
• GreenBeast CMS <= 1.3 PHP Arbitrary File Upload Vulnerability
  • From: skulmatic
• [USN-376-2] imlib2 regression fix
  • From: Kees Cook
• [ MDKSA-2006:199 ] - Updated libx11 packages fix file descriptor leak vulnerability
  • From: security
• [ MDKSA-2006:198 ] - Updated imlib2 packages fix several vulnerabilities
  • From: security
• News publication system remote File include
  • From: navairum
• Re: IE7 website security certificate discrediting exploit
  • From: inge_eivind . henriksen
• DigiOz Guestbook version 1.7 Path Disclosure Vulnerability in list.php
  • From: jesper . jurcenoks
• [ MDKSA-2006:200 ] - Updated rpm packages fix vulnerability
  • From: security
• Minimizing error cascades in vulnerability information management
  • From: Steven M. Christey
• WarFTPd 1.82.00-RC11 Remote Denial Of Service
  • From: Joxean Koret
• XSS in Kayako SupportSuite v3.00.32
  • From: hacker hackers
• [ GLSA 200611-03 ] NVIDIA binary graphics driver: Privilege escalation vulnerability
  • From: Raphael Marichez
• DigiOz Guestbook version 1.7 Path Disclosure Vulnerability in list.php
  • From: Jesper Jurcenoks
• WFTPD Pro Server 3.23 Buffer Overflow
  • From: Joxean Koret
• [ MDKSA-2006:201 ] - Updated pam_ldap packages fix PasswordPolicyReponse coding error
  • From: security
• [OpenPKG-SA-2006.032] OpenPKG Security Advisory (openssh)
  • From: OpenPKG
• Call for papers: ARES 2007 submission deadline approaches in 2 weeks: 19-11-2006
  • From: Manh Tho
• [ MDKSA-2006:198-1 ] - Updated imlib2 packages fix several vulnerabilities
  • From: security
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Secure Desktop
  • From: Cisco Systems Product Security Incident Response Team
• Y.A.N.S sql injection
  • From: navairum
• PhpMyChat Plus <= 1.9 Multiple Source Code Disclosure Vulnerabilities
  • From: ajannhwt
• PhpMyChat <= 0.14.5 Source Code Disclosure Vulnerability
  • From: ajannhwt
• [ MDKSA-2006:203 ] - Updated texinfo packages fix vulnerability
  • From: security
• Lotus Notes pre-login User.ID key leak
  • From: Andrew Christensen
• iDefense Security Advisory 11.08.06: IBM Lotus Domino 7 tunekrnl Multiple Vulnerabilities
  • From: iDefense Labs Security Advisories
• Portix-PHP [login bypass & xss (post)]
  • From: saps . audit
• phpsatk => Remote File Include Vulnerability EXploit
  • From: h4ck3riran
• TSRT-06-13: HP OpenView Client Configuration Manager Device Code Execution Vulnerability
  • From: TSRT
• Re: Hotmail and Windows Live Mail XSS Vulnerabilities
  • From: HASEGAWA Yosuke
• Abarcar Realty Portal [injection sql]
  • From: saps . audit
• iDefense Security Advisory 11.08.06: Cisco Secure Desktop Privilege Escalation Vulnerability
  • From: iDefense Labs
• knowledgeBuilder v.2.2.php.NuLL-WDYL=> Remote File Include Vulnerability
  • From: h4ck3riran
• Speedwiki 2.0 Arbitrary File Upload Vulnerability
  • From: saps . audit
• [ MDKSA-2006:202 ] - Updated wv packages fix vulnerabilities
  • From: security
• Immediacy .NET CMS possibly vulnerable to Cross Site Scripting through a malformed cookie
  • From: ProCheckUp Research
• FreeWebshop <=2.2.2 [local file include & xss]
  • From: saps . audit
• FreeBSD Security Advisory FreeBSD-SA-06:24.libarchive
  • From: FreeBSD Security Advisories
• Antwort: Joomla 1.0.11 Remote File Include
  • From: srunschke
• omnistar article manager [multiples injection sql]
  • From: saps . audit
• [ MDKSA-2006:204 ] - Updated openssh packages fix vulnerability
  • From: security
• bitweaver <=1.3.1 [injection sql (post) & xss (post)]
  • From: saps . audit
• GNU gv Stack Overflow Vulnerability
  • From: Renaud Lifchitz
• [SECURITY] [DSA 1207-1] New phpmyadmin packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• LandShop Real Estate [multiple injection sql & xss]
  • From: saps . audit
• [USN-379-1] texinfo vulnerability
  • From: Kees Cook
• Re: Multiple vulnerabilities in SAP Web Application Server 6.40 and7.00
  • From: Nicob
• Wheatblog [multiple xss (post) & full path disclosure]
  • From: saps . audit
• [security bulletin] HPSBMA02167 SSRT061262 rev.2 - HP OpenView Client Configuration Manager (CCM), Remote Unauthorized Arbitrary Code Execution or Denial of Service (DoS)
  • From: security-alert
• [ GLSA 200611-04 ] Bugzilla: Multiple Vulnerabilities
  • From: Matthias Geerdsen
• rPSA-2006-0204-1 kernel
  • From: rPath Update Announcements
• rPSA-2006-0205-1 php php-mysql php-pgsql
  • From: rPath Update Announcements
• rPSA-2006-0206-1 firefox thunderbird
  • From: rPath Update Announcements
• rPSA-2006-0207-1 openssh openssh-client openssh-server
  • From: rPath Update Announcements
• [ MDKSA-2006:205 ] - Updated Firefox packages fix multiple vulnerabilities
  • From: security
• [ MDKSA-2006:206 ] - Updated Thunderbird packages fix multiple vulnerabilities
  • From: security
• [OpenPKG-SA-2006.033] OpenPKG Security Advisory (openldap)
  • From: OpenPKG
• [ GLSA 200611-05 ] Netkit FTP Server: Privilege escalation
  • From: Raphael Marichez
• [x0n3-h4ck]Essentia Web Server v.2.15 Buffer Overflow
  • From: corrado . liotta
• [x0n3-h4ck]Drake CMS v 0.2 XSS exploit
  • From: corrado . liotta
• ZDI-06-039: Marshal MailMarshal ARJ Extraction Directory Traversal Vulnerability
  • From: zdi-disclosures
• encapscms 0.3.6 - Remote File Include by Firewall
  • From: firewall1954
• Estate Agent Manager <= v1.3 (default.asp) Remote Login ByPass SQL Injection Vulnerability
  • From: ajannhwt
• Mega Mall [ multiples injection sql & full path disclosure ]
  • From: saps . audit
• MyStats <=1.0.8 [injection sql, multiples xss, array & full path disclosure]
  • From: benjilenoob
• TOPSTORY BASIC Version 1.0 => Remote File Include Vulnerability
  • From: stormhacker
• PHPKit 1.6.1 RC2 (faq/faq.php) Remote SQL Injection Exploit
  • From: philipp . niedziela
• [SECURITY] [DSA 1209-1] New trac packages fix cross-site request forgery
  • From: Moritz Muehlenhoff
• UStore 1.0 (detail.asp) Remote SQL Injection Vulnerability
  • From: ajannhwt
• Exophpdesk V1.2 - Remote File Include
  • From: firewall1954
• Wordpress File Inclusion
  • From: vannovax
• [MajorSecurity Advisory #33]ShopSystems - SQL Injection Issue
  • From: admin
• phpManta - Mdoc <= 1.0.2 (view-sourcecode.php) Local File Include Exploit
  • From: ajannhwt
• AspPired2 Poll <= 1.0 (MoreInfo.asp) Remote SQL Injection Exploit
  • From: ajannhwt
• NuCommunity 1.0 (cl_CatListing.asp) Remote SQL Injection Exploit
  • From: ajannhwt
• Re: feedsplitter considered harmful
  • From: wmodes
• Re: Wordpress File Inclusion
  • From: emc3
• NuRems 1.0 Remote XSS/SQL Injection Exploit
  • From: ajannhwt
• Re: [ GLSA 200611-03 ] NVIDIA binary graphics driver: Privilege escalation vulnerability
  • From: Nick Boyce
• NuStore 1.0 (Products.asp) Remote SQL Injection Vulnerability
  • From: ajannhwt
• NuSchool 1.0 (CampusNewsDetails.asp) Remote SQL Injection Exploit
  • From: ajannhwt
• [SECURITY] [DSA 1208-1] New bugzilla packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• XSS in Email Signature Script
  • From: miladkaleh
• infinicart [ multiples injection sql & xss (post) ]
  • From: saps . audit
• shambo2 Component For Mambo 4.5 Remote File Inclusion Exploit
  • From: crackers_child
• Re: Cross Site Scripting (XSS) Vulnerability in Netquery by "VIRtech"
  • From: rvirtue
• VBulletin DoS Exploit [ all Versions ]
  • From: root
• Web Interface remote file inclusion
  • From: navairum
• Digipass Go3 Token Dumper (at least for 2006)
  • From: fcollyer
• ZDI-06-038: Citrix MetaFrame IMA Management Module Remote Heap Overflow
  • From: zdi-disclosures
• Phpjobscheduler 3.0 - Multiple Remote File Include
  • From: Firewall1954
• Phpdebug 1.1.0 - Remote File Include by Firewall
  • From: Firewall1954
• ELOG Web Logbook Remote Denial of Service Vulnerability
  • From: OS2A BTO
• UltraSite 1.0 (update.asp) Remote SQL Injection Vulnerability
  • From: ajannhwt
• Asp Scripter Products (cpLogin.asp) Remote SQL ByPass Injection Vulnerability
  • From: ajannhwt
• CPanel Multiple Cross Site Scription
  • From: Advisory
• Old SAP exploits
  • From: Nicob
• Property Pro v1.0 (vir_Login.asp) Remote Login ByPass SQL Injection Vulnerability
  • From: ajannhwt
• Re: [x0n3-h4ck]Essentia Web Server v.2.15 Buffer Overflow
  • From: Noam Rathaus
• ASPPortal <= 4.0.0 (default1.asp) Remote SQL Injection Exploit
  • From: ajannhwt
• UPublisher 1.0 (viewarticle.asp) Remote SQL Injection Vulnerability
  • From: ajannhwt
• [FLSA-2006:211760] Updated gzip package fixes security issues
  • From: David Eisenstein
• [SECURITY] [DSA 1209-2] New trac packages fix cross-site request forgery
  • From: Moritz Muehlenhoff
• DirectAdmin Multiple Cross Site Scription
  • From: Advisory
• Challenges faced by automated web application security assessment tools
  • From: bugtraq
• VMSA-2006-0006 - VMware ESX Server 2.5.3 Upgrade Patch 4
  • From: VMware Security team
• iDefense Security Advisory 11.09.06: Citrix Presentation Server 4.0 IMA Service Invalid Name Length DoS Vulnerability
  • From: iDefense Labs
• SinFP 2.04 release, works under Windows
  • From: GomoR
• [ GLSA 200611-06 ] OpenSSH: Multiple Denial of Service vulnerabilities
  • From: Raphael Marichez
• Re: [ GLSA 200611-03 ] NVIDIA binary graphics driver: Privilege escalation vulnerability
  • From: Raphael Marichez
• [ GLSA 200611-08 ] RPM: Buffer overflow
  • From: Raphael Marichez
• New Bug MiniBB Forum <= 2 Remote File Include (index.php)
  • From: philip anselmo
• VMSA-2006-0007 - VMware ESX Server 2.1.3 Upgrade Patch 2
  • From: VMware Security team
• VMSA-2006-0005 - VMware ESX Server 2.5.4 Upgrade Patch 1
  • From: VMware Security team
• Online Event Registration <= v2.0 (save_profile.asp) Remote User Pass Change Exploit
  • From: ajannhwt
• VMSA-2006-0009 - VMware ESX Server 3.0.0 AMD fxsave/restore issue
  • From: VMware Security team
• VMSA-2006-0008 - VMware ESX Server 2.0.2 Upgrade Patch 2
  • From: VMware Security team
• Re: Wordpress File Inclusion
  • From: Expanders
• [ GLSA 200611-07 ] GraphicsMagick: PALM and DCM buffer overflows
  • From: Raphael Marichez
• Re: GNU gv Stack Overflow Vulnerability
  • From: Noam Rathaus
• [SECURITY] [DSA 1210-1] New Mozilla Firefox packages fix several vulnerabilities
  • From: Martin Schulze
• Real Estate Listing System SQL Injection
  • From: Advisory
• ASPintranet SQL Injection
  • From: Advisory
• SiteXpress SQL Injection
  • From: Advisory
• WWWeb Cocepts SQL Injection
  • From: Advisory
• Ustore SQL Injection
  • From: Advisory
• eShopping SQL Injection
  • From: Advisory
• Advisory 14/2006: Dotdeb PHP Email Header Injection Vulnerability
  • From: Stefan Esser
• ECommerce Store Shop Builder
  • From: Advisory
• Engine Manager SQL Injection
  • From: Advisory
• BPG Content Management System SQL Injection
  • From: Advisory
• Apple Safari "match" Buffer Overflow Vulnerability
  • From: jbh_cg
• Re: [ GLSA 200611-03 ] NVIDIA binary graphics driver: Privilege escalation vulnerability
  • From: Nick FitzGerald
• Evolve Merchant[ injection sql ]
  • From: saps . audit
• Re: [ GLSA 200611-03 ] NVIDIA binary graphics driver: Privilege escalation vulnerability
  • From: Glynn Clements
• Inventory Manager [injection sql & xss (get)]
  • From: saps . audit
• Car Site Manager [injection sql & xss (get)]
  • From: saps . audit
• Re: New Bug MiniBB Forum <= 2 Remote File Include (index.php)
  • From: navairum
• FunkyASP Glossary v1.0 [injection sql]
  • From: saps . audit
• Blogme v3 [admin login bypass & xss (post)]
  • From: saps . audit
• Property Site Manager [login bypass ,multiples injection sql & xss (get)]
  • From: saps . audit
• [Fwd: DMA[2006-1031a] - 'Intego VirusBarrier X4 definition bypass exploit']
  • From: K F (lists)
• Re: [Full-disclosure] ZDI-06-040: WinZip FileView ActiveX Control Unsafe Method Exposure Vulnerability
  • From: Micheal Turner
• [Fwd: OpenBase SQL multiple vulnerabilities Part Deux]
  • From: K F (lists)
• EEYE: Workstation Service NetpManageIPCConnect Buffer Overflow
  • From: eEye Advisories
• ZDI-06-040: WinZip FileView ActiveX Control Unsafe Method Exposure Vulnerability
  • From: zdi-disclosures
• ZDI-06-041: Microsoft Internet Explorer CSS Float Property Memory Corruption Vulnerability
  • From: zdi-disclosures
• A+ Store E-Commerce[ injection sql & xss (post) ]
  • From: saps . audit
• A-Cart pro[ injection sql (post&get)]
  • From: saps . audit
• hpecs shopping cart[login bypass & injection sql (post)]
  • From: saps . audit
• Dragon calendar [ login bypass & injection sql ]
  • From: saps . audit
• [SECURITY] [DSA 1211-1] New pdns packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• MultiCalendars [ multiples injection sql ]
  • From: saps . audit
• NetBSD all versions FireWire IOCTL kernel integer overflow information disclousure
  • From: Rodrigo Rubira Branco (BSDaemon)
• [OpenPKG-SA-2006.034] OpenPKG Security Advisory (texinfo)
  • From: OpenPKG
• DragonFlyBSD all versions FireWire IOCTL kernel integer overflow information disclousure
  • From: Rodrigo Rubira Branco (BSDaemon)
• TrustedBSD* all versions FireWire IOCTL kernel integer overflow information disclousure
  • From: Rodrigo Rubira Branco (BSDaemon)
• TSLSA-2006-0063 - multi
  • From: Trustix Security Advisor
• [ MDKSA-2006:207 ] - Updated bind packages fixes RSA signature verification vulnerability
  • From: security
• [SECURITY] [DSA 1212-1] New openssh packages fix denial of service
  • From: Noah Meyerhans
• Outpost Multiple insufficient argument validation of hooked SSDT function Vulnerability
  • From: Matousec - Transparent security Research
• E-Calendar Pro 3.0 [ login bypass & injection sql (post)]
  • From: saps . audit
• Helm Cross-Site Scripting (XSS)
  • From: Advisory
• FreeBSD all versions FireWire IOCTL kernel integer overflow information disclousure
  • From: Rodrigo Rubira Branco (BSDaemon)
• [ MDKSA-2006:208 ] - Updated openldap packages fixes Bind vulnerability
  • From: security
• Bloo => 1.00 Cross Site Scripting
  • From: the_3dit0r
• E-commerce Kit 1 PayPal Edition [ injection sql ]
  • From: saps . audit
• MetaCart e-Shop [multiples injection sql (get & post)]
  • From: saps . audit
• Xtreme ASP Photo Gallery Cross Site Scripting And SQL Injection
  • From: Advisory
• discloser => 0.0.4 Remote File Include Vulnerabilities
  • From: the_3dit0r
• Hot Links download backup authorized vulnerabilities
  • From: hack2prison
• PhpMyAdmin all version [multiples vulnerability]
  • From: saps . audit
• [MajorSecurity Advisory #34]Plesk 8 - Multiple Cross Site Scripting Issues
  • From: admin
• OdysseusBlog => 1.0.0 Cross Site Scripting
  • From: the_3dit0r
• Bloo => 1.00 Remote File Include Vulnerability
  • From: the_3dit0r
• Team Evil - Incident #2
  • From: beSIRT
• Chetcpasswd 2.x: multiple vulnerabilities
  • From: riclem
• Secunia Research: MDaemon Insecure Default Directory Permissions
  • From: Secunia Research
• Re: Apple Safari "match" Buffer Overflow Vulnerability
  • From: J. Oquendo
• dev_wms => 1.5 Remote File Include Vulnerabilities
  • From: the_3dit0r
• discloser => 0.0.4 Remote File Include Vulnerability Exploit
  • From: the_3dit0r
• Etomite CMS 0.6.1.2 Multiple Vulnerabilities ( Sql Injection + Local file inclusion )
  • From: revenge
• Re: Advisory 14/2006: Dotdeb PHP Email Header Injection Vulnerability
  • From: Marcello Barnaba
• eShopping Cart [injection sql]
  • From: saps . audit
• Whitepaper: Implementing and Detecting a PCI Rootkit
  • From: John Heasman
• Vulnerabilities in Client Service for NetWare
  • From: Avert
• CandyPress Store[ multiples injection sql ]
  • From: saps . audit
• BaalAsp forum [login bypass ,injections sql(post), xss(post)]
  • From: saps . audit
• ZDI-06-042: Verity Ultraseek Request Proxying Vulnerability
  • From: zdi-disclosures
• Helm Cross Site Scripting
  • From: Advisory
• Myphotos => Remote File Include Vulnerability Exploit
  • From: the_3dit0r
• i-Gallery 3.4 Cross Site Scripting
  • From: Advisory
• Sphpblog => 0.8 Cross Site Scripting
  • From: the_3dit0r
• BlogTorrent-preview => 0.92 Cross Site Scripting
  • From: the_3dit0r
• Comdev One Admin Pro.v4.1 ( path[skin] ) Remote File include
  • From: AG- Spider
• ASP Cart [multiples injection sql (post & get)]
  • From: saps . audit
• worksystem => Remote File Include Vulnerability Exploit
  • From: the_3dit0r
• Re: FreeBSD all versions FireWire IOCTL kernel integer overflow information disclousure
  • From: Lucas Holt
• Hot Links download backup authorized vulnerabilities (re-post with some edit)
  • From: hack2prison
• eggblog=> 3.1.0 Cross Site Scripting
  • From: the_3dit0r
• Secunia Research: Panda ActiveScan Multiple Vulnerabilities
  • From: Secunia Research
• RE: VBulletin DoS Exploit [ all Versions ]
  • From: Bart Seresia
• UK Security Convention - Continuity 2006
  • From: Manchester 2600
• Links smbclient command execution
  • From: Teemu Salmela
• rPSA-2006-0211-1 libpng
  • From: rPath Update Announcements
• Image gallery with Access Database SQL Injection
  • From: Advisory
• My-BIC => 0.6.5 Remote File Include Vulnerability Exploit
  • From: the_3dit0r
• ASPintranet SQL Injection
  • From: Advisory
• blogcms => 4.0.0 Remote File Include
  • From: the_3dit0r
• RED Blog => Remote File Include Vulnerability Exploit
  • From: the_3dit0r
• Storystream => 4.0 Remote File Include Vulnerability Exploit
  • From: the_3dit0r
• Pilot Cart V.7.2 [ injection sql (post) ]
  • From: saps . audit
• [ MDKSA-2006:209 ] - Updated libpng packages fix vulnerabilities
  • From: security
• Kerio WebSTAR local privilege escalation
  • From: K F (lists)
• [ MDKSA-2006:211 ] - Updated pxelinux packages to fix embedded libpng vulnerabilities
  • From: security
• [ MDKSA-2006:210 ] - Updated syslinux packages to fix embedded libpng vulnerabilities
  • From: security
• [OpenPKG-SA-2006.035] OpenPKG Security Advisory (proftpd)
  • From: OpenPKG
• Active News Manager [ injection sql (post&get)]
  • From: saps . audit
• [ MDKSA-2006:212 ] - Updated doxygen packages to fix embedded libpng vulnerabilities
  • From: security
• [ MDKSA-2006:213 ] - Updated chromium packages to fix embedded libpng vulnerabilities
  • From: security
• [OpenPKG-SA-2006.036] OpenPKG Security Advisory (png)
  • From: OpenPKG
• [USN-383-1] libpng vulnerability
  • From: Kees Cook
• [security bulletin] HPSBMA02088 SSRT051026 rev. 2 - HP-UX running WBEM Services Denial of Service (DoS)
  • From: security-alert
• [ GLSA 200611-09 ] libpng: Denial of Service
  • From: Sune Kloppenborg Jeppesen
• TSLSA-2006-0065 - libpng
  • From: Trustix Security Advisor
• [ GLSA 200611-10 ] WordPress: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• Re: Etomite CMS 0.6.1.2 Multiple Vulnerabilities ( Sql Injection + Local file inclusion )
  • From: dean
• [Aria-Security] CPanel Network Tools Cross Site Scripting [Advisory]
  • From: Advisory
• 20/20 auto gallery [ multiples injection sql ]
  • From: saps . audit
• 20/20 real estate [ multiples injection sql ]
  • From: saps . audit
• TFTPD32 v3.01 TFTP Server Long File Name Buffer Overflow Vulnerability
  • From: liuqx
• [Reversemode advisory] Computer Associates HIPS Drivers - multiple local privilege escalation vulnerabilities.
  • From: Reversemode
• Sphpblog => 0.8 Remote File Include Vulnerabilities
  • From: the_3dit0r
• Aspmforum [ multiples injection sql (get&post)]
  • From: saps . audit
• igital Armaments November-Decemberr Hacking Challenge: KERNEL Remote
  • From: info
• XSS vBulletin 3.6.X Admin Control Painel
  • From: insanity
• Dating Site [ login bypass & xss]
  • From: saps . audit
• MosReporter Joomla Component Remote File Inclusion Exploi
  • From: crackers_child
• 20/20 datashed [ multiples injection sql ]
  • From: saps . audit
• Re: blogcms => 4.0.0 Remote File Include
  • From: Stefano Zanero
• Re: Airmagnet management interfaces multiple vulnerabilities
  • From: ckuan
• Infinitytechs Restaurants CM
  • From: saps . audit
• [ MDKSA-2006:214 ] - Updated gv packages fix buffer overflow vulnerability
  • From: security
• Re: dev_wms => 1.5 Remote File Include Vulnerabilities
  • From: Stefano Zanero
• A-Cart PRO SQL Injection
  • From: Advisory
• [MajorSecurity Advisory #36]dev4u CMS - Multiple SQL Injection and Cross Site Scripting Issues
  • From: admin
• Sage cross-context scripting -> LOCAL-CONTEXT SCRIPTING
  • From: pagvac
• PhpBB Module Dimension Remote File Include
  • From: bluespy . ok
• [ MDKSA-2006:164-1 ] - Updated xorg-x11/XFree86 packages fix integer overflow vulnerabilities
  • From: security
• Oxygen <= 1.1.3 (O2PHP Bulletin Board) SQL Injection
  • From: gmdarkfig
• [Aria-Security's Research Team] Texas Rank'em SQL Injection Vulnerabilite
  • From: Advisory
• Drone Armies C&C Report - 17 Nov 2006
  • From: c2report
• Vikingboard (0.1.2) [ multiples vulnerability ]
  • From: saps . audit
• BLOG:CMS <= 4.1.3 XSS
  • From: katatafish
• [Aria-Security's Research Team] ActiveNews Manager SQL Injection Vulnerabilite
  • From: Advisory
• [MajorSecurity Advisory #35]Travelsized CMS - Multiple Cross Site Scripting Issues
  • From: admin
• linksys wrt54g v5 authentication bypass fixed
  • From: Ginsu Rabbit
• A-Cart 2.0 SQL Injection
  • From: Advisory
• Re: [Aria-Security's Research Team] ActiveNews Manager SQL Injection Vulnerabilite
  • From: gmdarkfig
• Re: A-Cart PRO SQL Injection
  • From: gmdarkfig
• Re: Phpjobscheduler 3.0 - Multiple Remote File Include
  • From: Stefano Zanero
• GPhotos 1.5 Multiple vulnerabilities
  • From: tux025
• Re: Phpjobscheduler 3.0 - Multiple Remote File Include
  • From: str0ke
• Re: EEYE: Workstation Service NetpManageIPCConnect Buffer Overflow
  • From: security-list
• [Full-disclosure] Regarding the heap spray.
  • From: . Solo
• Dovecot IMAP/POP3 server: Off-by-one buffer overflow
  • From: Timo Sirainen
• LoudMouth => 2.4 Remote File Include Vulnerabilities
  • From: the_3dit0r
• Telaen <= 1.1.0 Remote File Include Exploit
  • From: the_3dit0r
• Ixprim CMS 1.2 Remote File Include Vulnerability
  • From: vitux . manis
• Rapid Classified v3.1 [multiple xss (get) & injection sql]
  • From: saps . audit
• Digital Armaments November-Decemberr Hacking Challenge: KERNEL
  • From: info
• [SECURITY] [DSA 1213-1] New imagemagick packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• PhpBB Module Dimension Remote File Include
  • From: bluespy . ok
• PhpQuickGallery <= 1.9 Remote File Inclusion Exploit
  • From: the_3dit0r
• ASPNuke <= 0.80 (register.asp) Remote SQL Injection Vulnerability
  • From: ajannhwt
• ehomes [multiples injections sql]
  • From: saps . audit
• PHPOLL => 0.96 Cross Site Scripting
  • From: the_3dit0r
• Serious crypto problem fixed by envelope HMAC method insteadof currently used prefix
  • From: Omirjan Batyrbaev
• eClassifieds [injection sql]
  • From: saps . audit
• Rialto 1.6[admin login bypass & multiples injections sql]
  • From: saps . audit
• gNews Publisher SQL Injection Vulnerabilites
  • From: Advisory
• Shopping_Catalog Remote File Include exploit
  • From: the_3dit0r
• RE: FreeBSD all versions FireWire IOCTL kernel integer overflow information disclousure
  • From: Rogier Mulhuijzen
• dicshunary 0.1 alpha Remote File Inclusion Exploit
  • From: the_3dit0r
• enomphp => 4.0 Remote Traversal Directory
  • From: the_3dit0r
• DodosMail <= 2.0.1(dodosmail.php) Remote File Inclusion Exploit
  • From: the_3dit0r
• klf-realty [injection sql]
  • From: saps . audit
• iPrimal Forums (index.php) Remote File Include Exploit
  • From: the_3dit0r
• mg.applanix <= 1.3.1 Remote File Include Exploit
  • From: the_3dit0r
• mxBB calsnails module 1.06 Remote File Inclusion Exploit
  • From: the_3dit0r
• Telaen => 1.1.0 Remote File Include Vulnerability
  • From: the_3dit0r
• [SECURITY] [DSA 1214-1] New gv packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [ MDKSA-2006:217 ] - Updated proftpd packages fix vulnerabilities
  • From: security
• The Week of Oracle Database Bugs
  • From: Cesar
• [ GLSA 200611-13 ] Avahi: "netlink" message vulnerability
  • From: Sune Kloppenborg Jeppesen
• [SECURITY] [DSA 1217-1] New linux-ftpd packages fix access control bypass
  • From: Moritz Muehlenhoff
• MyAlbum <= 3.02 (langs_dir) Remote File Inclusion Exploit
  • From: the_3dit0r
• [ GLSA 200611-12 ] Ruby: Denial of Service vulnerability
  • From: Sune Kloppenborg Jeppesen
• Re: Serious crypto problem fixed by envelope HMAC method insteadof currently used prefix
  • From: Omirjan Batyrbaev
• [ GLSA 200611-14 ] TORQUE: Insecure temproary file creation
  • From: Sune Kloppenborg Jeppesen
• [SECURITY] [DSA 1216-1] New flexbackup packages fix denial of service
  • From: Moritz Muehlenhoff
• [ MDKSA-2006:215 ] - Updated avahi packages fix netlink vulnerability
  • From: security
• BirdBlog => v1.4.0 Cross Site Scripting
  • From: the_3dit0r
• Wabbit PHP Gallery => 0.9 Remote Traversal Directory
  • From: the_3dit0r
• [SECURITY] [DSA 1215-1] New xine-lib packages fix execution of arbitrary code
  • From: Moritz Muehlenhoff
• mAlbum v0.3 Multiple vulnerabilitizzz
  • From: tux025
• my little weblog => Cross Site Scripting
  • From: the_3dit0r
• [ GLSA 200611-11 ] TikiWiki: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• Classified System [injection sql]
  • From: saps . audit
• Correction: Re: Serious crypto problem fixed by envelope HMAC method insteadof currently used prefix
  • From: Omirjan Batyrbaev
• Re: GPhotos 1.5 Multiple vulnerabilities
  • From: packet
• ltwCalendar => 4.2.1 Remote File Include Vulnerabilities
  • From: the_3dit0r
• [SECURITY] [DSA 1207-2] New phpmyadmin packages fix regression
  • From: Moritz Muehlenhoff
• [ MDKSA-2006:216 ] - Updated links packages fix smb vulnerability
  • From: security
• The Classified Ad System [multiple xss & injection sql]
  • From: saps . audit
• [USN-384-1] OpenLDAP vulnerability
  • From: Kees Cook
• Which is more secure? Oracle vs. Microsoft
  • From: David Litchfield
• Re: Correction: Re: Serious crypto problem fixed by envelope HMAC method insteadof currently used prefix
  • From: Steve Friedl
• LS-20061113 - CA BrightStor ARCserve Backup Remote Buffer Overflow Vulnerability
  • From: advisories
• [KAPDA]::Security analysis of cutenews 1.4.5
  • From: alireza hassani
• New Correction: Re: Serious crypto problem fixed by envelope HMAC method instead of currently used prefix
  • From: Omirjan Batyrbaev
• [ GLSA 200611-15 ] qmailAdmin: Buffer overflow
  • From: Sune Kloppenborg Jeppesen
• Re: [ MDKSA-2006:217 ] - Updated proftpd packages fix vulnerabilities
  • From: research
• [ GLSA 200611-16 ] Texinfo: Buffer overflow
  • From: Sune Kloppenborg Jeppesen
• Re: [ GLSA 200611-11 ] TikiWiki: Multiple vulnerabilities
  • From: saps . audit
• Secunia Research: My Firewall Plus Privilege Escalation Vulnerability
  • From: Secunia Research
• [SECURITY] [DSA 1218-1] New proftpd packages fix denial of service
  • From: Moritz Muehlenhoff
• aBitWhizzy [local file include]
  • From: saps . audit
• ContentNow CMS 1.39 Sql Injection + Path Disclosure Vulnerabilities
  • From: revenge
• [USN-382-1] Thunderbird vulnerabilities
  • From: Kees Cook
• Re: Re: Phpjobscheduler 3.0 - Multiple Remote File Include
  • From: admin
• Link Exchange Lite [injection sql]
  • From: saps . audit
• creadirectory [injection sql & xss]
  • From: saps . audit
• JiRos Links Manager[injection sql & xss permanent]
  • From: saps . audit
• Advisory: LDU <= 8.x Remote SQL Injection Vulnerability.
  • From: Mustafa Can Bjorn IPEKCI
• Clarifying integer overflows vs. signedness errors
  • From: Steven M. Christey
• VMSA-2006-0010 - SSL sessions not authenticated by VC Clients
  • From: VMware Security team
• Vulnerability in PostNuke
  • From: sni-labs
• RE: [Reversemode advisory] Computer Associates HIPS Drivers - multiple local privilege escalation vulnerabilities.
  • From: Williams, James K
• Advisory: Seditio <= 1.10 Remote SQL Injection Vulnerability.
  • From: Mustafa Can Bjorn IPEKCI
• [USN-381-1] Firefox vulnerabilities
  • From: Kees Cook
• Re: [ GLSA 200611-11 ] TikiWiki: Multiple vulnerabilities
  • From: Chris Gianelloni
• RE: LS-20061113 - CA BrightStor ARCserve Backup Remote Buffer Overflow Vulnerability
  • From: Williams, James K
• *BSD banner INT overflow vulnerability
  • From: Gruzicki Wlodek
• Secunia Research: PassGo SSO Plus Insecure Default Directory Permissions
  • From: Secunia Research
• Re: *BSD banner INT overflow vulnerability
  • From: Steve Shockley
• Re: Clarifying integer overflows vs. signedness errors
  • From: Thiago Zaninotti
• Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?)
  • From: David Litchfield
• "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?)
  • From: Matthew Conover
• Re: [ECHO_ADV_53$2006] QnECMS <= 2.5.6 (adminfolderpath) Remote File Inclusion Vulnerability
  • From: jim
• Windows Media ASX PlayList File Denial Of Service Vulnerability
  • From: sehato
• [ MDKSA-2006:208-1 ] - Updated openldap packages fixes Bind vulnerability
  • From: security
• Lack of environment sanitization in the FreeBSD, OpenBSD, NetBSD dynamic loaders.
  • From: In Cognito
• Re: Re: *BSD banner INT overflow vulnerability
  • From: evilrabbi
• Re: *BSD banner INT overflow vulnerability
  • From: Bob Beck
• Lack of environment sanitization in the FreeBSD, OpenBSD, NetBSD dynamic loaders.
  • From: In Cognito
• CONFidence 2007 CFP
  • From: andrzej . targosz
• Perl proxy checker using samair.ru
  • From: Iko Riyadi
• XSS in scriptat support InverseFlow Help Desk v2.31
  • From: gamr-14
• Big Flaw in Firefox 2: Password Manager Bug Exposes Passwords
  • From: fash1on
• Re: Lack of environment sanitization in the FreeBSD, OpenBSD, NetBSD dynamic loaders.
  • From: Casper . Dik
• [ECHO_ADV_61_2006] a-ConMan <= v3.2beta Remote File Inclusion
  • From: erdc
• NVIDIA nView (keystone) local Denial Of service
  • From: no-reply
• CFP - VII National Computer and Information Security Conference
  • From: Jeimy Cano
• Password Flaw also in Firefox 1.5.08. Was: Big Flaw in Firefox 2: Password Manager Bug Exposes Passwords
  • From: Michael Scheidell
• Re: tikiwiki 1.9.5 mysql password disclosure & xss
  • From: FBI
• Re: Big Flaw in Firefox 2: Password Manager Bug Exposes Passwords
  • From: 3APA3A
• Re: Password Flaw also in Firefox 1.5.08. Was: Big Flaw in Firefox 2: Password Manager Bug Exposes Passwords
  • From: Juha-Matti Laurio
• [ MDKSA-2006:218 ] - Updated apache-mod_auth_kerb packages fixes DoS vulnerability
  • From: security
• Re: SolpotCrew Advisory #10 - phpBB XS (phpbb_root_path) Remote File Include
  • From: webmaster
• Re: *BSD banner INT overflow vulnerability
  • From: admin
• LS-20061102 - Business Objects Crystal Reports Stack Overflow Vulnerability
  • From: advisories
• [ GLSA 200611-17 ] fvwm: fvwm-menu-directory fvwm command injection
  • From: Matthias Geerdsen
• Active PHP Bookmarks (apb.php) Remote file include
  • From: philip anselmo
• Cracking String Encryption in Java Obfuscated Bytecode
  • From: subere
• Re: Cracking String Encryption in Java Obfuscated Bytecode
  • From: Jim Manico
• [Aria-Security Team] Ultimate Survey Pro SQL Injection
  • From: Advisory
• Cross site scripting & fullpath disclosure
  • From: saudi
• [ GLSA 200611-18 ] TIN: Multiple buffer overflows
  • From: Sune Kloppenborg Jeppesen
• [Aria-Security Team] MidiCart ASP Plus Shopping Cart SQL Injection
  • From: Advisory
• PHP-Nuke <= 7.9 News module "sid" SQL Injection vulnerabilities
  • From: paisterist . nst
• mmgallery Multiple vulnerabilities
  • From: saudi
• Re: Active PHP Bookmarks (apb.php) Remote file include
  • From: Mefisto
• Wolflab Burning Board Lite 1.0.2 two sql injections
  • From: retrog
• Re: Cracking String Encryption in Java Obfuscated Bytecode
  • From: John GALLET
• [Aria-Security Team] Fixit iDMS Pro Image Gallery SQL Injection
  • From: Advisory
• [Aria-Security Team] ASP ListPics 5.0 SQL Injection
  • From: Advisory
• [Aria-Security Team] MidiCart ASP Shopping Cart SQL Injection
  • From: Advisory
• [Aria-Security Team] iNews News Manager SQL Injection
  • From: Advisory
• Re: Digipass Go3 Token Dumper (at least for 2006)
  • From: Hugo van der Kooij
• [ GLSA 200611-19 ] ImageMagick: PALM and DCM buffer overflows
  • From: Sune Kloppenborg Jeppesen
• Cahier de texte V2.0 SQL Code Execution Exploit
  • From: gmdarkfig
• PHP-Nuke Mermaid Module V1.2 (formdisp.php) Remote File Include Exploit
  • From: crackers_child
• CPanel 11 Multiple Cross-Site Scription
  • From: Advisory
• [ GLSA 200611-20 ] GNU gv: Stack overflow
  • From: Sune Kloppenborg Jeppesen
• WebHost Manager (WHM) Multiple Cross-Site Scripting
  • From: Advisory
• DoS in Microsoft Windows Live Messenger <= 8.0
  • From: dragonjar
• New Windows tool - NBTEnum 3.3
  • From: Reed Arvin
• Re: Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?)
  • From: stopmakingnoise
• Re: tikiwiki 1.9.5 mysql password disclosure & xss
  • From: drunken_chin
• Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?)
  • From: Thor (Hammer of God)
• Siap Cms Sql Injection (login.asp)
  • From: nagazakig74
• Wisi Portal [Sql Injection By Jesus Tovar]
  • From: nagazakig74
• AttackAPI 2.0 alpha
  • From: pdp (architect)
• Re: DoS in Microsoft Windows Live Messenger <= 8.0
  • From: astralbabz
• Free tool for pattern identification (for researchers)
  • From: Gary Golomb
• Re: Re: Digipass Go3 Token Dumper (at least for 2006)
  • From: fcollyer
• Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?)
  • From: Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
• Re: Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?)
  • From: Steve Friedl
• Re: Clarifying integer overflows vs. signedness errors
  • From: Pavel Kankovsky
• Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?)
  • From: Thor (Hammer of God)
• mAlbum v0.3 local file inclusion
  • From: tux025
• [Aria-Security Team] Evolve shopping cart SQL Injection Vulnerability
  • From: Advisory
• [Aria-Security Team] General Shopping Cart SQL Injection Vulnerability
  • From: Advisory
• [SECURITY] [DSA 1220-1] New pstotext packages fix arbitrary shell command execution
  • From: Moritz Muehlenhoff
• Re: Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?)
  • From: Tim Newsham
• Clickblog Sql Injection
  • From: Advisory
• ClickGallery Sql Injection
  • From: Advisory
• iDefense Security Advisory 11.26.06: Qbik WinGate Compressed Name Pointer Denial of Service Vulnerability
  • From: iDefense Labs
• TFTP Server AT-TFTP Server v 1.9 Buffer Overflow Vulnerability (Long filename)
  • From: liuqx
• VMware 5.5.1 Local Buffer Overflow (HTML Exploit)
  • From: NormandiaN_MailID
• [SECURITY] [DSA 1219-1] New texinfo packages fix multiple vulnerabilities
  • From: Noah Meyerhans
• CuteNews v1.4.5 (search.php) Remote file include vulnerability
  • From: philip anselmo
• rPSA-2006-0218-1 ImageMagick
  • From: rPath Update Announcements
• TFTP Server 3CTftpSvc Buffer Overflow Vulnerability (Long transporting mode)
  • From: liuqx
• Re: Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?)
  • From: David Litchfield
• Re: VMware 5.5.1 Local Buffer Overflow (HTML Exploit)
  • From: str0ke
• rPSA-2006-0219-1 info install-info texinfo
  • From: rPath Update Announcements
• PhpGedView 4.0.2 (DOCUMENT_ROOT) File inclusion Vulnerablity
  • From: x___ . _
• Re: CuteNews v1.4.5 (search.php) Remote file include vulnerability
  • From: Francesco Laurita
• MHL-2006-003 Public Advisory: "mboard" file creation issue
  • From: Mayhemic Labs Security
• iDefense Security Advisory 11.26.06: GNU Radius Format String Vulnerability
  • From: iDefense Labs
• [ GLSA 200611-21 ] Kile: Incorrect backup file permission
  • From: Sune Kloppenborg Jeppesen
• Re: New Flaw in Firefox 2.0: DoS and possible remote code execution
  • From: sflist
• RE: Cracking String Encryption in Java Obfuscated Bytecode
  • From: Jeremy Epstein
• 2nd European Conference on Computer Network Defense (EC2ND)
  • From: Blyth A J C (AT)
• Cursor snarfing - a new class of vulnerability and attack in Oracle
  • From: David Litchfield
• AIDE problem handling symlinks
  • From: fryxar fryxar
• ClickContact SQL Injection
  • From: Advisory
• SYMSA-2006-011: JBoss Java Class DeploymentFileRepository Directory Traversal
  • From: research
• GnuPG 1.4 and 2.0 buffer overflow
  • From: Werner Koch
• CVE-2006-5815: remote code execution in ProFTPD
  • From: John Morrissey
• [ GLSA 200611-22 ] Ingo H3: Folder name shell command injection
  • From: Sune Kloppenborg Jeppesen
• uPhotoGallery (v 1.1) SQL Injection
  • From: Advisory
• Re: SYMSA-2006-011: JBoss Java Class DeploymentFileRepository Directory Traversal
  • From: Jon Hart
• Re: Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?)
  • From: Steven M. Christey
• [USN-386-1] ImageMagick vulnerability
  • From: Kees Cook
• Re: Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?)
  • From: David Litchfield
• evince buffer overflow exploit (gv)
  • From: kspecial
• TSLSA-2006-0066 - multi
  • From: Trustix Security Advisor
• ProFTPD mod_tls pre-authentication buffer overflow
  • From: research
• Re: PhpGedView 4.0.2 (DOCUMENT_ROOT) File inclusion Vulnerablity
  • From: Mefisto
• b2evolution XSS Vulnerabilities
  • From: tarkus
• [USN-387-1] Dovecot vulnerability
  • From: Kees Cook
• [ GLSA 200611-23 ] Mono: Insecure temporary file creation
  • From: Raphael Marichez
• [ GLSA 200611-25 ] OpenLDAP: Denial of Service vulnerability
  • From: Raphael Marichez
• [ GLSA 200611-24 ] LHa: Multiple vulnerabilities
  • From: Raphael Marichez
• Re: PhpGedView 4.0.2 (DOCUMENT_ROOT) File inclusion Vulnerablity
  • From: yalnifj
• [USN-385-1] tar vulnerability
  • From: Kees Cook
• New report on Teredo security
  • From: Jim Hoagland
• Multiple Vulnerabilities in AlternC version 0.9.5
  • From: Vincent A.Menard
• Re: [Full-disclosure] New report on Teredo security
  • From: Jeroen Massar
• b2evolution Remote File inclusion Vulnerability
  • From: tarkus
• Re: CuteNews v1.4.5 (search.php) Remote file include vulnerability
  • From: raven
• Re: [WEB SECURITY] The state of JavaScript Hacking
  • From: bugtraq
• PHP Event Calendar 1.5.1 (index.php) Remote File Include Vulnerability
  • From: philip anselmo
• Re: ProFTPD mod_tls pre-authentication buffer overflow
  • From: Mark Wadham
• ZDI-06-043: Novell Netware Client Print Provider Buffer Overflow Vulnerability
  • From: zdi-disclosures
• iDefense Security Advisory 11.29.06: Horde Kronolith Arbitrary Local File Inclusion Vulnerability
  • From: iDefense Labs
• Re: Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?)
  • From: David Litchfield
• REMLAB Web Mech Designer 2.0.5 Path Disclosure Vulnerability
  • From: jesper . jurcenoks
• [ MDKSA-2006:219 ] - Updated tar packages fix vulnerability
  • From: security
• Secunia Research: Borland Products idsql32.dll Buffer Overflow Vulnerability
  • From: Secunia Research
• SYM06-023, Symantec NetBackup PureDisk: PHP update to Address Reported Security Vulnerability
  • From: Mike Prosser
• OWASP JBroFuzz 0.3 Fuzzer Released!
  • From: subere
• RE: Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?)
  • From: Shawn Fitzgerald
• New Windows tool - PWDumpX v1.0
  • From: Reed Arvin
• Monkey Boards version 0.3.5 Multiple Path Disclosure Vulnerabilities
  • From: jesper . jurcenoks
• [Aria-Security Team] FipsSHOP SQL Injection
  • From: Advisory
• Potentially OT: AJAX article
  • From: clappymonkey
• Re: PHP Event Calendar 1.5.1 (index.php) Remote File Include Vulnerability
  • From: Stuart Moore
• [USN-388-1] KOffice vulnerability
  • From: Kees Cook
• [USN-389-1] GnuPG vulnerability
  • From: Kees Cook