Mail Index

• Thread Index

• [SECURITY] [DSA 1221-1] New libgsf packages fix arbitrary code execution
  • From: Martin Schulze
• [SECURITY] [DSA 1222-1] New proftpd packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [ MDKSA-2006:217-1 ] - Updated proftpd packages fix vulnerabilities
  • From: security
• Secunia Research: MailEnable IMAP Service Two Vulnerabilities
  • From: Secunia Research
• [security bulletin] HPSBUX02153 SSRT061181 rev.2 - HP-UX Running Firefox, Remote Unauthorized Access or Elevation of Privileges or Denial of Service (DoS)
  • From: security-alert
• [USN-390-1] evince vulnerability
  • From: Kees Cook
• @lex Guestbook 4.0.1 : Full Path Disclosure & XSS
  • From: mr_kaliman
• Seditio <= 1.10 (pollid) Remote SQL Injection Vulnerability
  • From: ajannhwt
• Invision Community Blog Mod 1.2.4 .PHP SQL Injection Vulnerability
  • From: infection
• [ GLSA 200611-26 ] ProFTPD: Remote execution of arbitrary code
  • From: Raphael Marichez
• Re: [Full-disclosure] ZDI-06-043: Novell Netware Client Print Provider Buffer Overflow Vulnerability
  • From: Dude VanWinkle
• safely concatenating strings in portable C (Re: GnuPG 1.4 and 2.0 buffer overflow)
  • From: Solar Designer
• contentserv 4.x
  • From: capt . nem0
• LDU <= 8.x (polls.php) Remote SQL Injection Vulnerability
  • From: ajannhwt
• iDefense Security Advisory 11.30.06: Multiple Vendor libgsf Heap Overflow Vulnerability
  • From: iDefense Labs
• Woltlab Burning Board 2.3.X XSS Vulnerability (0-Day) FIXED VERSION
  • From: blueshisha
• LifeType version 1.1.2 Multiple Path Disclosure Vulnerabilities
  • From: jesper . jurcenoks
• Re: [Full-disclosure] ZDI-06-043: Novell Netware Client Print Provider Buffer Overflow Vulnerability
  • From: zdi-disclosures
• Invision Gallery 2.0.7 SQL Injection Vulnerability
  • From: infection
• Re: Invision Community Blog Mod 1.2.4 .PHP SQL Injection Vulnerability
  • From: emin
• [SECURITY] [DSA 1205-2] New thttpd packages fix insecure temporary file creation
  • From: Steve Kemp
• [ MDKSA-2006:220 ] - Updated libgsf packages fix heap buffer overflow vulnerability
  • From: security
• [ MDKSA-2006:221 ] - Updated gnupg packages fix vulnerability
  • From: security
• rPSA-2006-0221-1 openldap openldap-clients openldap-servers
  • From: rPath Update Announcements
• [Aria-Security.Net] Web Hosting Control Panel - cPanel 11 Multiple Cross-Site Scripting Vulnerabilites
  • From: Advisory
• deV!L`z Clanportal - Arbitrary File Upload [061124b]
  • From: Tim Weber
• Layered Defense Advisory: Novell Client 4.91 Format String Vulnerability
  • From: dh
• [SECURITY] [DSA 1223-1] New tar packages fix arbitrary file overwrite
  • From: Noah Meyerhans
• Outpost Bypassing Self-Protection via Advanced DLL injection with handle stealing Vulnerability
  • From: Matousec - Transparent security Research
• deV!L`z Clanportal - SQL Injection [061124a]
  • From: Tim Weber
• rPSA-2006-0220-1 dovecot
  • From: rPath Update Announcements
• Aspee Ziyareti Defteri (tr) Sql injection Vuln.
  • From: ShaFuq31
• iDefense Security Advisory 12.01.06: Novell ZENworks Asset Management Msg.dll Heap Overflow Vulnerability
  • From: iDefense Labs
• [SECURITY] [DSA 1222-2] New proftpd packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• iDefense Security Advisory 12.01.06: Novell ZENworks Asset Management Collection Client Heap Overflow Vulnerability
  • From: iDefense Labs
• Re: [Full-disclosure] ZDI-06-043: Novell Netware Client Print Provider Buffer Overflow Vulnerability
  • From: Dude VanWinkle
• rPSA-2006-0224-1 gnupg
  • From: rPath Update Announcements
• TSLSA-2006-0068 - multi
  • From: Trustix Security Advisor
• Re: safely concatenating strings in portable C (Re: GnuPG 1.4 and 2.0 buffer overflow)
  • From: Simon Josefsson
• rPSA-2006-0222-1 tar
  • From: rPath Update Announcements
• freeqboard <= 1.1 (qb_path) Remote File Include Vulnerability
  • From: -= SHELL =- -= SHELL =-
• [ MDKSA-2006:223 ] - Updated ImageMagick packages fixes vulnerability
  • From: security
• [Aria-Security Team] DuWare DuNews SQL Injection Vuln
  • From: Advisory
• [Aria-Security Team] DuWare DuClassMate SQL Injection Vuln
  • From: Advisory
• [Aria-Security Team] DuWare DuPortal SQL Injection Vuln
  • From: Advisory
• PHPNews 1.3.0 XSS
  • From: emulamex
• KhaledMuratList mdb
  • From: blasterim
• [ MDKSA-2006:222 ] - Updated koffice packages fixes integer overflow vulnerability
  • From: security
• [Aria-Security Team] DuWare DuDownloads SQL Injection Vuln
  • From: Advisory
• CuteNews 1.3.6 XSS
  • From: emulamex
• [Aria-Security Team] DuWare DuForum SQL Injection Vuln
  • From: Advisory
• [Aria-Security Team] DuWare DuPaypal SQL Injection Vuln
  • From: Advisory
• [ISecAuditors Advisories] BlueSocket web administration is vulnerable to XSS
  • From: ISecAuditors Security Advisories
• listpics v5
  • From: blasterim
• [ISecAuditors Security Advisories] IMAP/SMTP Injection in Hastymail
  • From: ISecAuditors Security Advisories
• Metyus Okul Ynetim Sistemi V.1.0 (tr) Sql injection Vuln.
  • From: ShaFuq31
• [ISecAuditors Security Advisories] XSS vulnerability in error page of ISMail
  • From: ISecAuditors Security Advisories
• fl0p - passive L7 flow fingerprinting
  • From: Michal Zalewski
• Online BookMarks Multiple SQL Injection/XSS Vulnerabilities
  • From: security
• [SECURITY] [DSA 1224-1] New Mozilla packages fix several vulnerabilities
  • From: Martin Schulze
• [SECURITY] [DSA 1225-1] New Mozilla Firefox packages fix several vulnerabilities
  • From: Martin Schulze
• SMF upload XSS vulnerability
  • From: Jessica Hope
• 2[xss]Vulnerabilities in Script Mobile Ac4p.com
  • From: gamr-14
• PhpMyAdmin 2.7.0-pl2 Path Disclosure | Multiple CRLF/Http Response Splitting
  • From: ajannhwt
• MS Internet Explorer 6.0 (mshtml.dll) Denial of Service Exploit
  • From: ajannhwt
• [SECURITY] [DSA 1225-2] New Mozilla Firefox packages fix several vulnerabilities
  • From: Martin Schulze
• [SECURITY] [DSA 1226-1] New links packages fix arbitrary shell command execution
  • From: Moritz Muehlenhoff
• Vt-Forum Lite System V.1.3 Xss Vuln.
  • From: starext
• Re: UPublisher Exploit - Superfreaker
  • From: me
• [Aria-Security Team] uGestBook SQL Injection Vuln
  • From: Advisory
• Re: Invision Gallery 2.0.7 SQL Injection Vulnerability
  • From: emin
• [SECURITY] [DSA 1227-1] New Mozilla Thunderbird packages fix several vulnerabilities
  • From: Martin Schulze
• Multiple bugs in TFT-Gallery
  • From: nj
• F-Prot Antivirus for Unix: heap overflow and Denial of Service
  • From: research
• [USN-392-1] xine-lib vulnerability
  • From: Kees Cook
• Re: aBitWhizzy [local file include]
  • From: john . goodman
• [USN-391-1] libgsf vulnerability
  • From: Kees Cook
• [ MDKSA-2006:214-1 ] - Updated gv packages fix buffer overflow vulnerability
  • From: security
• Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation
  • From: ss_team
• XSS in JAB Guest Book
  • From: nj
• rPSA-2006-0211-2 doxygen libpng
  • From: rPath Update Announcements
• Re: Multiple bugs in TFT-Gallery
  • From: simo64
• new xss in modbb forum
  • From: h angel
• TSRT-06-14: IBM Tivoli Storage Manager Mutiple Buffer Overflow Vulnerabilities
  • From: TSRT
• [KOffice security advisory] KOffice OLEfilter integer overflow
  • From: Dirk Mueller
• SNORT Covered channels detector patch
  • From: fryxar fryxar
• RE: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation
  • From: Michael Scheidell
• Re: GnuPG 1.4 and 2.0 buffer overflow
  • From: Damien Miller
• Re: [Aria-Security Team] uGestBook SQL Injection Vuln
  • From: Stuart Moore
• Re: MS Internet Explorer 6.0 (mshtml.dll) Denial of Service Exploit
  • From: 3APA3A
• Re: Evolve Merchant[ injection sql ]
  • From: tony
• URL Rdirecction Bug Yahoo
  • From: matrix
• CYBSEC - Security Pre-Advisory: SAP Internet Graphics Service (IGS) Undocumented Features
  • From: Mariano Nuñez Di Croce
• CYBSEC - Security Pre-Advisory: SAP Internet Graphics Service (IGS) Remote Arbitrary File Removal
  • From: Mariano Nuñez Di Croce
• DistrRTgen 1.0 launched!
  • From: Martin Jørgensen
• Re: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation
  • From: eugeny gladkih
• Re: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation
  • From: Steve Shockley
• [SECURITY] [DSA 1228-1] New elinks packages fix arbitrary shell command execution
  • From: Moritz Muehlenhoff
• Re: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation
  • From: Thor (Hammer of God)
• EasyPage Portal ( all ver )SQL Injection
  • From: matrix
• eEye's Zero-Day Tracker Launch
  • From: chinese soup
• Re: Symantec LiveState Agent for Windows vulnerabi
  • From: Damjan
• Re: Re: [Aria-Security Team] uGestBook SQL Injection Vuln
  • From: saps . audit
• Re: Symantec LiveState Agent for Windows vulnerabi
  • From: eugeny gladkih
• Re: EasyPage Portal ( all ver )SQL Injection
  • From: saps . audit
• [security bulletin] HPSBUX02145 SSRT061202 rev.2 - HP-UX running Apache Remote Execution of Arbitrary Code, Denial of Service (DoS), and Unauthorized Access
  • From: security-alert
• Re: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation
  • From: Ansgar -59cobalt- Wiechers
• HPSBUX02178 SSRT061267 rev.1 - HP-UX Secure Shell Remote Denial of Service (DoS)
  • From: security-alert
• EEYE: Adobe Download Manager AOM Stack Buffer Overflow Vulnerability
  • From: eEye Advisories
• [ MDKSA-2006:224 ] - Updated xine-lib packages fix buffer overflow vulnerability
  • From: security
• [USN-390-2] evince vulnerability
  • From: Kees Cook
• Barracuda Convert-UUlib library buffer overflow leads to remote compromise
  • From: Jean-Sébastien Guay-Leroux
• Internet Explorer 6. CSS Expression Denial of Service (P.o.C.)
  • From: José Carlos Nieto Jarquín
• Re: Internet Explorer 6 CSS "expression" Denial of Service Exploit (P.o.C.)
  • From: José Carlos Nieto Jarquín
• Uploadscript Vulnerabilities: Text file Hash password
  • From: hack2prison
• FreeBSD Security Advisory FreeBSD-SA-06:25.kmem
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-06:26.gtar
  • From: FreeBSD Security Advisories
• [SECURITY] [DSA 1229-1] New Asterisk packages fix arbitrary code execution
  • From: Martin Schulze
• Oracle PL/SQL Fuzzing Tool
  • From: Joxean Koret
• BTSaveMySql 1.2 (acces to config files)
  • From: sn0oPy . team
• RE: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation
  • From: Michael Scheidell
• Multiple Vendor Unusual MIME Encoding Content Filter Bypass
  • From: Hendrik Weimer
• SYMSA-2006-012: 2X ThinClientServer Create Admin Account Replay Vulnerability
  • From: research
• GnuPG: remotely controllable function pointer [CVE-2006-6235]
  • From: Werner Koch
• rPSA-2006-0226-1 kernel
  • From: rPath Update Announcements
• [ MDKSA-2006:225 ] - Updated ruby packages fix DoS vulnerability
  • From: security
• rPSA-2006-0227-1 gnupg
  • From: rPath Update Announcements
• Microsoft 0-day word vulnerability - Secunia - Extremely critical
  • From: Ryan Buena
• New MySpace worm could be on its way
  • From: pdp (architect)
• ZDI-06-044: Adobe Download Manager AOM Parsing Buffer Overflow Vulnerability
  • From: zdi-disclosures
• Linksys WIP 330 VoIP wireless phone crash from Nmap scan
  • From: Shawn Merdinger
• [ GLSA 200612-01 ] wv library: Multiple integer overflows
  • From: Sune Kloppenborg Jeppesen
• Digital Armaments Security Advisory 07.12.2006: Yahoo multiple services authentication bypass Vulnerability
  • From: info
• TSRT-06-15: Citrix Presentation Server Client ActiveX Heap Overflow Vulnerability
  • From: TSRT
• Re: Microsoft 0-day word vulnerability - Secunia - Extremely critical
  • From: Andrew Simmons
• Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass
  • From: Tomasz Kojm
• Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass
  • From: Gadi Evron
• Re: XSS in JAB Guest Book
  • From: Steven M. Christey
• Some Thoughts about Office Open XML and Malware Detection
  • From: Jan P. Monsch
• Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass
  • From: Luke Borg
• [USN-393-1] GnuPG vulnerability
  • From: Kees Cook
• Re: The Week of Oracle Database Bugs
  • From: Tony Jambu
• Re: Internet Explorer 6 CSS "expression" Denial of Service Exploit (P.o.C.)
  • From: Andrius Paurys
• phpbb 2.0.x [xss]
  • From: saps . audit
• [USN-390-3] evince-gtk vulnerability
  • From: Kees Cook
• Re: Microsoft 0-day word vulnerability - Secunia - Extremely critical
  • From: Juha-Matti Laurio
• Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass
  • From: michele.sandrelli@xxxxxxxxxxxx
• Re[2]: Multiple Vendor Unusual MIME Encoding Content Filter Bypass
  • From: 3APA3A
• phpAdsNew-2.0.4-pr2 Remote File Inclusion Exploit
  • From: crackers_child
• Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass
  • From: Tomasz Kojm
• [USN-393-2] GnuPG2 vulnerabilities
  • From: Kees Cook
• DUdirectory Admin Panel SQL Injection
  • From: Meftun
• [OpenPKG-SA-2006.037] OpenPKG Security Advisory (gnupg)
  • From: OpenPKG GmbH
• EEYE: Intel Network Adapter Driver Local Privilege Escalation
  • From: eEye Advisories
• [Aria-Security Team] CentOS 4.2 i686 - WHM X v3.1.0 Cross-Site Scripting
  • From: Advisory
• [Aria-Security Team] cPanel 11 pops.html Cross-Site Scripting
  • From: Advisory
• [Aria-Security Team] cPanel BoxTrapper Cross Site Scripting
  • From: Advisory
• TSLSA-2006-0070 - multi
  • From: Trustix Security Advisor
• [OpenPKG-SA-2006.038] OpenPKG Security Advisory (tar)
  • From: OpenPKG GmbH
• [SECURITY] [DSA-1230-1] new l2tpns packages fix buffer overflow
  • From: Steve Kemp
• Microsoft Word 0-day Vulnerability FAQ (CVE-2006-5994) written
  • From: Juha-Matti Laurio
• Midicart vulerable
  • From: ifx
• [CAID 34846]: CA BrightStor ARCserve Backup Discovery Service Buffer Overflow Vulnerability
  • From: Williams, James K
• Re: Internet Explorer 6 CSS "expression" Denial of Service Exploit (P.o.C.)
  • From: chinese soup
• LS-20060908 - Computer Associates BrightStor ARCserve Backup v11.5 Remote Buffer Overflow Vulnerability
  • From: advisories
• LS-20061001 - Computer Associates BrightStor ARCserve Backup v11.5 Remote Buffer Overflow Vulnerability
  • From: advisories
• Animated Smiley Generator File Include Vul.
  • From: starext
• PHP 5.2.0 session.save_path safe_mode and open_basedir bypass
  • From: cxib
• [USN-394-1] Ruby vulnerability
  • From: Kees Cook
• ASX Playlists and Jumping to Conclusions
  • From: Sûnnet Beskerming
• PhpBB Toplist 1.3.7 Xss Vuln.
  • From: starext
• Enforcing Java Security Manager in Restricted Windows Environments?
  • From: Jan P. Monsch
• iDefense Security Advisory 12.08.06: Multiple Vendor Antivirus RAR File Denial of Service Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 12.08.06: Sophos Antivirus CHM Chunk Name Length Memory Corruption Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 12.08.06: Sophos Antivirus CHM File Heap Overflow Vulnerability
  • From: iDefense Labs
• Re: XSS in JAB Guest Book
  • From: Barnz
• Call For Papers: SecurityOPUS 2007
  • From: Sharkey
• [ GLSA 200612-02 ] xine-lib: Buffer overflow
  • From: Sune Kloppenborg Jeppesen
• KDPics Multiple Vulnerabities
  • From: mr_kaliman
• ProNews V1.5 XSS & SQL Injection
  • From: mr_kaliman
• Messageriescripthp V2.0 XSS & SQL Injection
  • From: mr_kaliman
• AnnonceScriptHP V2.0 Multiple Vulnerabilities
  • From: mr_kaliman
• [SECURITY] [DSA 1231-1] New gnupg packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1232-1] New clamav packages fix denial of service
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1233-1] New Linux 2.6.8 packages fix several vulnerabilities
  • From: Dann Frazier
• WASC-Announcement: MX Injection - Capturing and Exploiting Hidden Mail Servers By Vicente Aguilera Diaz
  • From: robert
• D-LINK DWL-2000AP+ remote DoS
  • From: poplix
• [ GLSA 200612-09 ] MadWifi: Kernel driver buffer overflow
  • From: Raphael Marichez
• [SBDA] - ColdFusion MX7 - Multiple Vulnerabilities
  • From: Brett Moore
• Unauthenticated access to IBM Host On-Demand administration pages
  • From: Ferguson, David (Kansas City)
• [ MDKSA-2006:226 ] - Updated squirrelmail packages fix vulnerabilities
  • From: security
• RFIDIOt release - version 0.1i
  • From: Adam Laurie
• Firefox 2.0 security bug: Extensions can hide themself
  • From: azurIt
• ERRATA: [ GLSA 200612-03 ] GnuPG: Multiple vulnerabilities
  • From: Raphael Marichez
• Multiple vulnerabilities in Winamp Web Interface 7.5.13
  • From: Luigi Auriemma
• [ GLSA 200612-08 ] SeaMonkey: Multiple vulnerabilities
  • From: Raphael Marichez
• Several updates in Microsoft Word 0-day (CVE-2006-5994) FAQ document
  • From: Juha-Matti Laurio
• Another, different MS Word 0-day vulnerability reported
  • From: Juha-Matti Laurio
• shopsite advisory
  • From: DoZ
• Secunia Research: MailEnable IMAP Service Buffer Overflow Vulnerability
  • From: Secunia Research
• looking for security community input
  • From: Gadi Evron
• Re: Another, different MS Word 0-day vulnerability reported
  • From: Juha-Matti Laurio
• [ GLSA 200612-04 ] ModPlug: Multiple buffer overflows
  • From: Raphael Marichez
• [ GLSA 200612-06 ] Mozilla Thunderbird: Multiple vulnerabilities
  • From: Raphael Marichez
• Re: LS-20061001 - Computer Associates BrightStor ARCserve Backup
  • From: Williams, James K
• [ GLSA 200612-10 ] Tar: Directory traversal vulnerability
  • From: Matthias Geerdsen
• The newest Word flaw is due to malformed data structure handling
  • From: Juha-Matti Laurio
• Re: LS-20060908 - Computer Associates BrightStor ARCserve Backup
  • From: Williams, James K
• [ GLSA 200612-03 ] GnuPG: Multiple vulnerabilities
  • From: Raphael Marichez
• RFID access control tokens widely open to cloning
  • From: Adam Laurie
• [ GLSA 200612-07 ] Mozilla Firefox: Multiple vulnerabilities
  • From: Raphael Marichez
• Secunia Research: AOL CDDBControl ActiveX Control "SetClientInfo()" Buffer Overflow
  • From: Secunia Research
• [ GLSA 200612-05 ] KOffice shared libraries: Heap corruption
  • From: Sune Kloppenborg Jeppesen
• [ MDKSA-2006:227 ] - Updated kdegraphics packages fix EXIF vulnerability
  • From: security
• [ GLSA 200612-09 ] MadWifi: Kernel driver buffer overflow
  • From: Raphael Marichez
• Re: The newest Word flaw is due to malformed data structure handling
  • From: Alexander Sotirov
• [ MDKSA-2006:228 ] - Updated gnupg packages fix vulnerability
  • From: security
• OpenLDAP kbind authentication buffer overflow
  • From: Solar Eclipse
• [SBDA] SiteKiosk - FileSystem Access
  • From: Brett Moore
• Web Apps- Rad Upload Version 3.02 Remote File Include Vulnerability
  • From: rko . thelegendkiller
• rPSA-2006-0230-1 evince
  • From: rPath Update Announcements
• rPSA-2006-0231-1 squirrelmail
  • From: rPath Update Announcements
• ZDI-06-045: Sophos Anti-Virus CPIO Archive Parsing Buffer Overflow Vulnerability
  • From: zdi-disclosures
• Re: [fuzzing] OWASP Fuzzing page
  • From: Joxean Koret
• Re: The newest Word flaw is due to malformed data structure handling
  • From: Dave \"No, not that one\" Korn
• Re: PHP 5.2.0 session.save_path safe_mode and open_basedir bypass
  • From: Ismail Donmez
• ZDI-06-047: Microsoft Visual Studio WmiScriptUtils.dll Cross-Zone Scripting Vulnerability
  • From: zdi-disclosures
• BLOG:CMS Remote file include Vulnerability
  • From: security
• Secunia Research: Internet Explorer Script Error Handling Memory Corruption
  • From: Secunia Research
• Re: Internet Explorer 6 CSS "expression" Denial of Service Exploit (P.o.C.)
  • From: chinese soup
• [ GLSA 200612-12 ] F-PROT Antivirus: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• ZDI-06-048: Microsoft Internet Explorer normalize() Function Memory Corruption Vulnerability
  • From: zdi-disclosures
• [ GLSA 200612-13 ] libgsf: Buffer overflow
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200612-14 ] Trac: Cross-site request forgery
  • From: Sune Kloppenborg Jeppesen
• Re: shopsite advisory
  • From: bugtraq
• ZDI-06-046: Sophos Anti-Virus SIT Archive Parsing Buffer Overflow Vulnerability
  • From: zdi-disclosures
• Re: Re: The newest Word flaw is due to malformed data structure handling
  • From: test
• iDefense Security Advisory 12.12.06: Sun Microsystems Solaris ld.so 'doprf()' Buffer Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 12.12.06: Sun Microsystems Solaris ld.so Directory Traversal Vulnerability
  • From: iDefense Labs
• [SECURITY] [DSA-1234-1] New ruby1.6 package fix denial of service
  • From: Steve Kemp
• Re: worksystem => Remote File Include Vulnerability Exploit
  • From: Laurent . van_den_reysen
• [SECURITY] [DSA-1235-1] New ruby1.8 package fix denial of service
  • From: Steve Kemp
• [SECURITY] [DSA-1236-1] New enemies-of-carlotta package fix missing sanity checks
  • From: Steve Kemp
• ASP Cmd Shell On IIS 5.1
  • From: Brett Moore
• IBM DB2 Remote DoS during CONNECT processing
  • From: Team SHATTER
• ZDI-06-050: Symantec Veritas NetBackup CONNECT_OPTIONS Buffer Overflow Vulnerability
  • From: zdi-disclosures
• ZDI-06-049: Symantec Veritas NetBackup Long Request Buffer Overflow Vulnerability
  • From: zdi-disclosures
• CORE-2006-1127: ProFTPD Controls Buffer Overflow
  • From: CORE Security Technologies Advisories
• Re: The newest Word flaw is due to malformed data structure handling
  • From: Steven M. Christey
• Call for papers and presenters - Dec. 15th deadline
  • From: Mike Allgeier
• The (in)security of Xorg and DRI
  • From: Darren Reed
• [ GLSA 200612-16 ] Links: Arbitrary Samba command execution
  • From: Raphael Marichez
• Re: [fuzzing] NOT a 0day! Re: [Full-disclosure] OWASP Fuzzing page
  • From: Jerome Athias
• GenesisTrader v1.0 - Multiple Vulnerabilities
  • From: mr_kaliman
• HyperAccess - Multiple Vulnerabilities
  • From: Brett Moore
• [USN-380-2] avahi regression
  • From: Martin Pitt
• rPSA-2006-0232-1 libgsf
  • From: rPath Update Announcements
• Re: Microsoft 0-day word vulnerability - Secunia - Extremely critical
  • From: schafer_jeffrey
• [ MDKSA-2006:229 ] - Updated evince packages fix buffer overflow vulnerability
  • From: security
• NOT a 0day! Re: [fuzzing] [Full-disclosure] OWASP Fuzzing page
  • From: Gadi Evron
• [ MDKSA-2006:230 ] - Updated clamav packages fix vulnerability
  • From: security
• [CAID 34870]: CA Anti-Virus vetfddnt.sys, vetmonnt.sys Local Denial of Service Vulnerabilities
  • From: Williams, James K
• [ MDKSA-2006:164-2 ] - Updated xorg-x11/XFree86 packages fix integer overflow vulnerabilities
  • From: security
• iDefense Security Advisory 12.14.06: GNOME Foundation Display Manager gdmchooser Format String Vulnerability
  • From: iDefense Labs
• Re: [fuzzing] NOT a 0day! Re: [Full-disclosure] OWASP Fuzzing page
  • From: Juha-Matti Laurio
• Re: The newest Word flaw is due to malformed data structure handling
  • From: Juha-Matti Laurio
• Re: iDefense Security Advisory 12.14.06: GNOME Foundation Display Manager gdmchooser Format String Vulnerability
  • From: iDefense Labs
• Re: Re: Microsoft 0-day word vulnerability - Secunia - Extremely critical
  • From: schafer_jeffrey
• [ GLSA 200612-17 ] GNU Radius: Format string vulnerability
  • From: Raphael Marichez
• Re: [fuzzing] NOT a 0day! Re: [Full-disclosure] OWASP Fuzzing page
  • From: Gadi Evron
• Kerio MailServer < 6.3.1 remote Denial of Service
  • From: research
• [ GLSA 200612-15 ] McAfee VirusScan: Insecure DT_RPATH
  • From: Sune Kloppenborg Jeppesen
• CanSecWest 2007 (April 18-20) Call For Papers (Deadline January 7th)
  • From: Dragos Ruiu
• Top 10 Real Computer Crimes for 2007
  • From: Pete Herzog
• [ MDKSA-2006:231 ] - Updated gdm packages fix string vulnerability
  • From: security
• BitDefender AV Packed PE File Parsing Engine Heap Overflow
  • From: security
• TSLSA-2006-0072 - clamav
  • From: Trustix Security Advisor
• Windows Explorer WMV File Denial Of Service Vulnerability
  • From: sehato
• [USN-396-1] gdm vulnerability
  • From: Kees Cook
• Windows Media MID File Denial Of Service Vulnerability
  • From: sehato
• [security bulletin] HPSBMA02173 SSRT061230 rev. 1 - HP Integrated Lights Out (iLO & iLO 2) Running SSH Key Based Authentication Remote Unauthorized Access
  • From: security-alert
• Project Server 2003 - Credential Disclosure
  • From: Brett Moore
• Re: The (in)security of Xorg and DRI
  • From: Nicolas RUFF
• Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!
  • From: gplit
• Bypassing process identification of several personal firewalls and HIPS
  • From: Matousec - Transparent security Research
• Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!
  • From: Bruno Lustosa
• [ MDKSA-2006:206 ] - Updated Thunderbird packages fix multiple vulnerabilities
  • From: security
• Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!
  • From: Josh Bressers
• [OpenPKG-SA-2006.039] OpenPKG Security Advisory (proftpd)
  • From: OpenPKG GmbH
• Drone Armies C&C Report - 15 Dec 2006
  • From: c2report
• RE: Windows Explorer WMV File Denial Of Service Vulnerability
  • From: Ulises Cuñé
• Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!
  • From: Dragos Ruiu
• XSS in gmial google
  • From: gamr-14
• Do&#287;antepe Ziyareti Defteri (tr) Sql Injection Vuln.
  • From: ShaFuq31
• Odysseus 2.0 / Telemachus 1.0 (Beta)
  • From: Dave
• Re: Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!
  • From: gplit
• Re: Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!
  • From: bastyaelvtars
• Re: Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!
  • From: ox90x86
• Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!
  • From: George Yobst
• Re: Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!
  • From: willysr
• Contra Haber Sistemi v1.0 SqL Injection Vuln.
  • From: ShaFuq31
• [HSC Security Group] SiteCatalyst Web Login Cross Site Vulrnabilities
  • From: DoZ
• Re: Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!
  • From: Hunger
• Allied Telesis AT-9000/24 Ethernet switch management can be accessed from all VLANs.
  • From: Pasi Sjoholm
• [SECURITY] [DSA 1237-1] New Linux 2.4.27 packages fix several vulnerabilities
  • From: Dann Frazier
• [SECURITY] [DSA 1238-1] New clamav packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1239-1] New sql-ledger packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• Re: The (in)security of Xorg and DRI
  • From: Darren Reed
• Cisco not honoring update promises?
  • From: Michael Scheidell
• HyperVM Cross-Site Scripting
  • From: Advisory
• Re: The (in)security of Xorg and DRI
  • From: Darren Reed
• RateMe <= all versions => ( main.inc.php ) Remote File Include Vulnerability
  • From: saudi
• SYMSA-2006-013: Multiple Vulnerabilities in Mandiant First Response
  • From: research
• Secunia Research: MailEnable POP Service "PASS" Command Buffer Overflow
  • From: Secunia Research
• Checkpoint NG3 ICMP Flood
  • From: bdmoraes
• Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!
  • From: p . kerr
• Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!
  • From: Kamchybek Jusupov
• Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!
  • From: Marcus Meissner
• [ GLSA 200612-18 ] ClamAV: Denial of Service
  • From: Sune Kloppenborg Jeppesen
• Re: Cisco not honoring update promises?
  • From: rsmoak
• Re: Checkpoint NG3 ICMP Flood
  • From: Michael Schwartzkopff
• Re: Checkpoint NG3 ICMP Flood
  • From: Hugo van der Kooij
• [security bulletin] HPSBUX02178 SSRT061267 rev.2 - HP-UX Secure Shell Remote Unauthorized Denial of Service (DoS)
  • From: security-alert
• [ MDKSA-2006:232 ] - Updated proftpd packages fix mod_ctrls vulnerability
  • From: security
• [ MDKSA-2006:233 ] - Updated dbus packages fix vulnerability
  • From: security
• HITBSecConf2007 - Dubai - Call for Papers now open!
  • From: Praburaajan
• WebCalendar >=1.0 Cross-Site Scripting Vulnerabilities
  • From: 7all7
• Multiple XSS vulnerabiliteies in Inetmedia's information service - cityinfo.
  • From: filip . palian
• New Skype Worm
  • From: Christopher Mosby
• HP Printers FTP Server Denial Of Service
  • From: Joxean Koret
• RE: [BULK] - New Skype Worm
  • From: Hubbard, Dan
• Trend Micro's Vista "0day exploit auction" claim
  • From: Ryan Meyer
• xss in Support Cards v1 ( oSTicket )
  • From: l . d . 0
• Burak Yilmaz Download Portal Sql Injection Vuln.
  • From: ShaFuq31
• Oracle <= 9i / 10g (extproc) Local/Remote Command Execution Exploit
  • From: none
• Oracle <= 9i / 10g File System Access via utl_file Exploit
  • From: none
• Multiple Bugs in MINI WEB SHOP
  • From: xx_hack_xx_2004
• MkPortal Urlobox Cross Site Request Forgery
  • From: info
• RE: Cisco not honoring update promises?
  • From: Michael Scheidell
• ZDI-06-051: Mozilla Firefox SVG Processing Remote Code Execution Vulnerability
  • From: zdi-disclosures
• SEC Consult SA-20061220-0 :: Typo3 Command Execution Vulnerability
  • From: SEC Consult Research
• Oracle Portal 10g HTTP Response Splitting
  • From: putosoft softputo
• NOD32 Antivirus DOC parsing Arbitrary Code Execution Advisory
  • From: security
• Mono XSP ASP.NET Server sourcecode disclosure vulnerability
  • From: jose . palanco
• Re: Oracle <= 9i / 10g File System Access via utl_file Exploit
  • From: sumit kumar soni
• Re: [Full-disclosure] Oracle Portal 10g HTTP Response Splitting
  • From: Brian Eaton
• [security bulletin] HPSBUX02174 SSRT061239 rev.2 HP-UX Running OpenSSL Denial of Service (DoS), Increase Privilege
  • From: security-alert
• [security bulletin] HPSBST02180 SSRT061288 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS06-072 Through MS06-078
  • From: security-alert
• [ GLSA 200612-19 ] pam_ldap: Authentication bypass vulnerability
  • From: Raphael Marichez
• [ GLSA 200612-20 ] imlib2: Multiple vulnerabilities
  • From: Raphael Marichez
• [ GLSA 200612-21 ] Ruby: Denial of Service vulnerability
  • From: Raphael Marichez
• RE: Trend Micro's Vista "0day exploit auction" claim
  • From: Roger A. Grimes
• critical Flaw in Firefox 2.0.0.1 allows to steal the user passwords with a videoclip
  • From: quincy
• RE: Trend Micro's Vista "0day exploit auction" claim
  • From: Simple Nomad
• [USN-397-1] mono vulnerability
  • From: Kees Cook
• [CAID 34876]: CA CleverPath Portal Session Inheritance Vulnerability
  • From: Williams, James K
• [OpenPKG-SA-2006.041] OpenPKG Security Advisory (dbus)
  • From: OpenPKG GmbH
• NOD32 Antivirus CAB parsing Arbitrary Code Execution Advisory
  • From: security
• Re: Oracle <= 9i / 10g File System Access via utl_file Exploit
  • From: Marco Ivaldi
• Fun with event logs (semi-offtopic)
  • From: 3APA3A
• Microsoft Windows XP/2003/Vista memory corruption 0day
  • From: 3APA3A
• Re[2]: [Full-disclosure] Fun with event logs (semi-offtopic)
  • From: 3APA3A
• [SECURITY] [DSA-1240-1] New links2 packages fix arbitrary shell command execution
  • From: Steve Kemp
• Re: [Full-disclosure] Microsoft Windows XP/2003/Vista memory corruption 0day
  • From: 3APA3A
• [ MDKSA-2006:234 ] - Updated mono packages fix vulnerability
  • From: security
• RE: [Full-disclosure] Fun with event logs (semi-offtopic)
  • From: Michele Cicciotti
• Re: Enforcing Java Security Manager in Restricted Windows Environments?
  • From: jim
• Re: [Full-disclosure] Fun with event logs (semi-offtopic)
  • From: endrazine
• Ixprim CMS 1.2 Remote Blind SQL Injection Exploit
  • From: gmdarkfig
• RE: Re[2]: [Full-disclosure] Fun with event logs (semi-offtopic)
  • From: Michele Cicciotti
• Re: [Full-disclosure] Microsoft Windows XP/2003/Vista memory corruption 0day
  • From: Alexander Sotirov
• Re: critical Flaw in Firefox 2.0.0.1 allows to steal the user passwords with a videoclip
  • From: 3APA3A
• SQID v0.1 - SQL Inhection Digger.
  • From: contact
• Re: Vulnerability in MG2 php based Image Gallery - bypass security, view password protected images
  • From: matthieu . paineauSTOPSPAM
• [TOOL] untidy - XML Fuzzer
  • From: Andres Riancho
• Re: RE: Trend Micro's Vista "0day exploit auction" claim
  • From: agoodhez1
• Re: Trend Micro's Vista "0day exploit auction" claim
  • From: Simple Nomad
• Re: MkPortal Urlobox Cross Site Request Forgery
  • From: securityfocus
• Re: MkPortal Urlobox Cross Site Request Forgery
  • From: securityfocus
• [OpenPKG-SA-2006.040] OpenPKG Security Advisory (ruby)
  • From: OpenPKG GmbH
• OpenSER 1.1.0 parse_config buffer overflow vulnerability
  • From: sapheal
• PWDumpX updated (includes CacheDump functionality)
  • From: Reed Arvin
• Re: [Full-disclosure] Microsoft Windows XP/2003/Vista memory corruption 0day
  • From: Pukhraj Singh
• Re: Oracle Portal 10g HTTP Response Splitting
  • From: majororacle
• RE: Enforcing Java Security Manager in Restricted Windows Environments?
  • From: Jan P. Monsch
• Re: critical Flaw in Firefox 2.0.0.1 allows to steal the user passwords with a videoclip
  • From: Juha-Matti Laurio
• RE: [Full-disclosure] Microsoft Windows XP/2003/Vista memory corruption 0day
  • From: Michele Cicciotti
• Xt-News 0.1 : SQL Injection Vulnerability & XSS
  • From: mr_kaliman
• rPSA-2006-0234-1 firefox
  • From: rPath Update Announcements
• Oracle Applications/Portal 9i/10g Cross Site Scripting
  • From: putosoft softputo
• Re[2]: critical Flaw in Firefox 2.0.0.1 allows to steal the user passwords with a videoclip
  • From: Thierry Zoller
• TSLSA-2006-0074 - multi
  • From: Trustix Security Advisor
• Re: [Full-disclosure] Oracle Portal 10g HTTP Response Splitting
  • From: putosoft softputo
• Re: Re: [Full-disclosure] Microsoft Windows XP/2003/Vista memory corruption 0day
  • From: Mike
• SQID v0.2 - SQL Injection Digger.
  • From: contact
• Re: Multiple Remote Vulnerabilities in KISGB
  • From: 3APA3A
• Re: Multiple Remote Vulnerabilities in KISGB
  • From: str0ke
• ZDI-06-052: Novell NetMail NMAP STOR Buffer Overflow Vulnerability
  • From: zdi-disclosures
• ZDI-06-053: Novell NetMail IMAP Verb Literal Heap Overflow Vulnerability
  • From: zdi-disclosures
• ZDI-06-054: Novell NetMail IMAP APPEND Buffer Overflow Vulnerability
  • From: zdi-disclosures
• Efkan Forum v1.0 SqL Inj. Vuln.
  • From: ShaFuq31
• Multiple Bugs in Future Internet ( XSS & SQL Injection )
  • From: xx_hack_xx_2004
• iDefense Security Advisory 12.23.06: Novell NetMail IMAPD subscribe Buffer Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 12.23.06: Novell Netmail IMAP append Denial of Service Vulnerability
  • From: iDefense Labs
• Okul Merkezi Portal v1.0 Remote File IncLude Vuln.
  • From: ShaFuq31
• Chatwm V1.0 SqL Injection Vuln.
  • From: ShaFuq31
• Fishyshoop Security Vulnerability
  • From: James Gray
• TimberWolf 1.2.2 vulnerable to XSS
  • From: corrado . liotta
• Forum AnyBoard - Sql Inyection By Firewall
  • From: Firewall1954
• ERRATA (Re: "Host header cannot be trusted as an anti anti DNS-pinning measure")
  • From: Amit Klein
• XSS with Vbulletin (new idea !)
  • From: ashraf1984
• [SECURITY] [DSA 1241-1] New squirrelmail packages fix cross-site scripting
  • From: Moritz Muehlenhoff
• PHP Live! 3.2.2 Multiple Cross-Site Scripting Vulnerabilities
  • From: DoZ
• Cahier de texte V2.2 Bypass general access protection exploit
  • From: gmdarkfig
• phpcms <=- 1.1.7 Remote File Inclusion
  • From: Zarloule04
• LuckyBot v3 Remote File Include
  • From: i-k-t
• PhpbbXtra v2.0 (phpbb_root_path) Remote File Include Vulnerability
  • From: xorontr
• HLStats Remote SQL Injection Exploit
  • From: nospam
• XSS - CMS Made Simple v1.0.2
  • From: Curtis Zimmerman
• logahead UNU edition 1.0 Remote File Upload & code execution
  • From: corrado . liotta
• [OpenPKG-SA-2006.042] OpenPKG Security Advisory (openser)
  • From: OpenPKG GmbH
• [OpenPKG-SA-2006.043] OpenPKG Security Advisory (links)
  • From: OpenPKG GmbH
• Re: ERRATA (Re: "Host header cannot be trusted as an anti anti DNS-pinning measure")
  • From: Martin Johns
• Re: phpcms <=- 1.1.7 Remote File Inclusion
  • From: Stuart Moore
• Re: phpcms <=- 1.1.7 Remote File Inclusion
  • From: Hugo van der Kooij
• Re: LuckyBot v3 Remote File Include
  • From: Stuart Moore
• Re: The (in)security of Xorg and DRI
  • From: Pavel Kankovsky
• Re: XSS with Vbulletin (new idea !)
  • From: bas
• Host directory full disclosure and input error
  • From: hack2prison
• Secure Login Manager Multiple Input Validation Vulnerabilities
  • From: DoZ
• Re: Cross site scripting & fullpath disclosure
  • From: james . brown
• NtRaiseHardError Csrss.exe memory Disclosure exploit
  • From: Reversemode
• ShmooCon Announcement
  • From: B Potter
• [SECURITY] [DSA 1242-1] New elog packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• Limbo CMS event module (lm_absolute_path) Remote File Include Vulnerabilities
  • From: xorontr
• [SECURITY] [DSA 1243-1] New evince packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• OpenSER OSP Module remote code execution
  • From: sapheal
• Re: XSS with Vbulletin (new idea !)
  • From: l . d . 0
• SMS handling OpenSER remote code executing
  • From: sapheal
• Re: XSS - CMS Made Simple v1.0.2
  • From: nanoymaster
• [OpenPKG-SA-2006.044] OpenPKG Security Advisory (w3m)
  • From: OpenPKG GmbH
• Re: XSS with Vbulletin (new idea !)
  • From: micmast
• [SECURITY] [DSA 1214-2] Updated gv packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1244-1] New xine-lib packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• XSS in script Mobilelib GOLD v2
  • From: gamr-14
• XSS with default page parameter in Oracle Portal 10g
  • From: duchaikhtn
• QuickCam linux device driver allows arbitrary code execution
  • From: sapheal
• LDU <= 8.x (journal.php) SQL Injection Vulnerability
  • From: starext
• DoceboLMS Xss Vuln.
  • From: starext
• Re: XSS in script Mobilelib GOLD v2
  • From: gamr-14
• csrss.exe double-free vulnerability - arbitrary DWORD overwrite exploit
  • From: Reversemode
• MythControl (MythTV remote control) arbitrary code execution
  • From: sapheal
• SoftArtisans FileUp(TM) viewsrc.asp remote script source disclosure exploit
  • From: inge_eivind . henriksen
• [vuln.sg] iso_wincmd Plugin for Total Commander Buffer Overflow Vulnerability
  • From: vulnpost-remove
• Enigma Coppermine Bridge (boarddir) Remote File Include
  • From: xorontr
• Enigma WordPress Bridge (boarddir) Remote File Include
  • From: xorontr