Mail Index

• Thread Index

• Spooky Login Multiple HTML Injection Vulnerability
  • From: DoZ
• WinZip10.0 FileView ActiveX Controls CreateNewFolderFromName Method Buffer overflow
  • From: 76693223
• Re: PocketPC MMS - Remote Code Injection/Execution Vulnerability and Denial-of-Service
  • From: Collin R. Mulliner
• Rediff Bol Downloader Allows Downloading and Spawning Arbitary Files
  • From: gregory_panakkal
• WinZip FileView ActiveX controls CreateNewFolderFromName Method Buffer Overflow Vulnerability
  • From: 76693223
• PHPIrc_bot <= Remote File Include
  • From: zooz_998
• vBulletin vCard PRO XSS
  • From: exexp
• Re: PlatinumFTP 1.0.18 remote DoS
  • From: info
• [NGSEC] ngGame #3 - BrainStorming
  • From: labs@NGSEC
• BattleBlog Database Download Vulnerability
  • From: Advisory
• Kerio Fake 'iphlpapi' DLL injection Vulnerability
  • From: Matousec - Transparent security Research
• Re: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Bill Nash
• golden book XSS
  • From: sn0oPy . team
• rblog Database Download Vulnerability
  • From: Advisory
• ATMEL Linux PCI PCMCIA USB Drivers arbitrary code execution
  • From: sapheal
• Re: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Kevin Waterson
• [OpenPKG-SA-2007.001] OpenPKG Security Advisory (cacti)
  • From: OpenPKG GmbH
• AShop Shopping Cart Multiple XSS Vulnerabilities
  • From: DoZ
• Mozilla Firefox 2.0 denial of service vulnerability
  • From: sapheal
• Re: Mozilla Firefox 2.0 denial of service vulnerability
  • From: Jeroen Massar
• Re: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Tino Wildenhain
• Re: Re: Mozilla Firefox 2.0 denial of service vulnerability
  • From: sapheal
• Re: XSS with Vbulletin (new idea !)
  • From: marco . van . herwaarden
• RE: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Jim Harrison
• Re: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Dana Hudes
• Re: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Chad Maron
• RE: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Jim Harrison
• Dailymotion password reset vulnerability
  • From: daftrix
• Welcome to Pwndertino...
  • From: K F (lists)
• Re: [Full-disclosure] simplog 0.9.3.2 SQL injection
  • From: str0ke
• Re: [Full-disclosure] simplog 0.9.3.2 SQL injection
  • From: Javor Ninov
• FreeRadius 1.1.3 SMB_Handle_Type SMB_Connect_Server arbitrary code execution
  • From: sapheal
• lblog Remote Password Disclosure
  • From: Advisory
• Re: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Kevin Waterson
• Openforum Remote password Disclosure
  • From: Advisory
• Re: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Darren Reed
• Re: PHP as a secure language? PHP worms?
  • From: Duncan Simpson
• AspBB Remote Password Disclosure
  • From: Advisory
• RE: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Jim Harrison
• RE: PHP as a secure language? PHP worms?
  • From: Jim Harrison
• Re: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Dana Hudes
• Windows Vista 64bits and unexported kernel symbols
  • From: Matthieu Suiche
• [ MDKSA-2007:001 ] - Update libmodplug packages fix buffer overflow vulnerabilities
  • From: security
• Nuked Klan <= 1.7 Remote Cookie Disclosure Exploit
  • From: kadaj-diabolik
• rPSA-2006-0234-2 firefox thunderbird
  • From: rPath Update Announcements
• Windows NT Message Compiler 1.00.5239 arbitrary code execution
  • From: sapheal
• Re: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Darren Reed
• [ MDKSA-2007:002 ] - Updated kernel packages fix multiple vulnerabilities and bugs
  • From: security
• Re: SoftArtisans FileUp(TM) viewsrc.asp remote script source disclosure exploit
  • From: wihl
• Whos Johny Pwnerseed?
  • From: K F
• Re: [USN-398-1] Firefox vulnerabilities
  • From: Scott
• Re: Windows Vista 64bits and unexported kernel symbols
  • From: Rik van Riel
• GuestBook v0.3a Remote Password Disclosure
  • From: Advisory
• Re: Windows NT Message Compiler 1.00.5239 arbitrary code execution
  • From: 3APA3A
• Universal XSS with PDF files: highly dangerous
  • From: pdp (architect)
• openmedia local read file
  • From: exe_crack
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Amit Klein
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: sven . vetsch
• [USN-399-1] w3m vulnerabilities
  • From: Kees Cook
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: pdp (architect)
• Adobe Acrobat Reader Plugin - Multiple Vulnerabilities
  • From: Stefano Di Paola
• Hacking AJAX DWR Applications
  • From: shulman
• Re: Universal XSS with PDF files: highly dangerous
  • From: ascii
• WineGlass "data.mdb" Remote Password Disclosure
  • From: Advisory
• OpenPinboard <= Remote File Include
  • From: zooz_998
• Black Hat New Years Updates (Free Stuff, too!)
  • From: Jeff Moss
• WineGlass "data.mdb" Remote Password Disclosure
  • From: Advisory
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Clean Access
  • From: Cisco Systems Product Security Incident Response Team
• [USN-398-1] Firefox vulnerabilities
  • From: Kees Cook
• Re: FreeRadius 1.1.3 SMB_Handle_Type SMB_Connect_Server arbitrary code execution
  • From: 3APA3A
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Amit Klein
• Re: Windows NT Message Compiler 1.00.5239 arbitrary code execution
  • From: chinese soup
• Simple Web Content Management System SQL Injection Exploit
  • From: gmdarkfig
• [USN-398-2] Firefox vulnerabilities
  • From: Kees Cook
• Re: OpenPinboard <= Remote File Include
  • From: Stefano Zanero
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: pdp (architect)
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: RSnake
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Dave Ferguson
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: pdp (architect)
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Amit Klein
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: pdp (architect)
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Jean-Jacques Halans
• jgbbs
  • From: dr . t3rr0r1st
• a cheesy Apache / IIS DoS vuln (+a question)
  • From: Michal Zalewski
• RE: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Larry Seltzer
• Re: a cheesy Apache / IIS DoS vuln (+a question)
  • From: William A. Rowe, Jr.
• Re: a cheesy Apache / IIS DoS vuln (+a question)
  • From: Michal Zalewski
• CFP for RAID 2007
  • From: Jeffrey Horton
• Re: [Full-disclosure] Universal XSS with PDF files: highly dangerous
  • From: Juha-Matti Laurio
• Re: a cheesy Apache / IIS DoS vuln (+a question)
  • From: William A. Rowe, Jr.
• Re: a cheesy Apache / IIS DoS vuln (+a question)
  • From: Michal Zalewski
• Re: OpenSER OSP Module remote code execution
  • From: bogdan
• Re: SMS handling OpenSER remote code executing
  • From: bogdan
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: bugtraq
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Jim Manico
• 23C3 - Bluetooth hacking revisted [Summary and Code]
  • From: Thierry Zoller
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: RSnake
• LS-20061102 - Business Objects Crystal Reports XI Professional Stack Overflow Vulnerability
  • From: advisories
• MkPortal "All Guests are Admin" Exploit
  • From: info
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: pdp (architect)
• [vuln.sg] PowerArchiver PAISO.DLL Buffer Overflow Vulnerability
  • From: vulnpost-remove
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: HASEGAWA Yosuke
• Re: a cheesy Apache / IIS DoS vuln (+a question)
  • From: Siim Põder
• Re: a cheesy Apache / IIS DoS vuln (+a question)
  • From: Pieter de Boer
• Universal PDF XSS After Party
  • From: pdp (architect)
• RE: [Full-disclosure] Universal XSS with PDF files: highly dangerous
  • From: Larry Seltzer
• Re: Universal XSS with PDF files: highly dangerous
  • From: Thierry Zoller
• Re: RE: [Full-disclosure] Universal XSS with PDF files: highly dangerous
  • From: Juha-Matti Laurio
• Re: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Lawrence Paul MacIntyre
• RE: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Jim Harrison
• Re: [Full-disclosure] Universal PDF XSS After Party(posible solution)
  • From: Darren Bounds
• Re: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Bill Nash
• SAP Security Contact
  • From: Mark Litchfield
• Re: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Ronald Chmara
• [ GLSA 200701-01 ] DenyHosts: Denial of Service
  • From: Raphael Marichez
• Re: [WEB SECURITY] RE: Universal PDF XSS After Party(posible solution)
  • From: RSnake
• Wordpress <= 2.x dictionnary & Bruteforce attack
  • From: kadaj-diabolik
• Re: [WEB SECURITY] RE: [Full-disclosure] Universal XSS with PDF files: highly dangerous
  • From: RSnake
• Re: a cheesy Apache / IIS DoS vuln (+a question)
  • From: Rob Sherwood
• [ GLSA 200701-02 ] Mozilla Firefox: Multiple vulnerabilities
  • From: Raphael Marichez
• Correction (High Risk Vulnerability in the OpenOffice and StarOffice Suites)
  • From: NGSSoftware Insight Security Research
• [ GLSA 200701-03 ] Mozilla Thunderbird: Multiple vulnerabilities
  • From: Raphael Marichez
• Re: [VulnWatch] High Risk Vulnerability in the OpenOffice and StarOffice Suites
  • From: Florian Weimer
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Rude Yak
• Re: [VulnWatch] High Risk Vulnerability in the OpenOffice and StarOffice Suites
  • From: David Litchfield
• RE: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: RSnake
• High Risk Vulnerability in the OpenOffice and StarOffice Suites
  • From: NGSSoftware Insight Security Research
• RE: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Martin O'Neal
• Concurrency strikes MSIE (potentially exploitable msxml3 flaws)
  • From: Michal Zalewski
• DMA[2007-0104a] - 'iLife iPhoto Photocasing Format String Vulnerability'
  • From: K F (lists)
• Re: a cheesy Apache / IIS DoS vuln (+a question)
  • From: Michal Zalewski
• RE: Universal PDF XSS After Party(posible solution)
  • From: Noe Espinoza M.
• RE: [Full-disclosure] Concurrency strikes MSIE (potentially exploitablemsxml3 flaws)
  • From: Larry Seltzer
• [USN-398-3] Firefox theme regression
  • From: Kees Cook
• Perforce client: security hole by design
  • From: Ben Bucksch
• SAP Security
  • From: Mark Litchfield
• Re: Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: rudeyak
• CMS Made Simple non-permanent XSS
  • From: nanoymaster
• RE: [Full-disclosure] Concurrency strikes MSIE (potentially exploitablemsxml3 flaws)
  • From: Michal Zalewski
• Re: [VulnWatch] High Risk Vulnerability in the OpenOffice and StarOffice Suites
  • From: Pete Connolly
• [USN-401-1] D-Bus vulnerability
  • From: Kees Cook
• [USN-400-1] Thunderbird vulnerabilities
  • From: Kees Cook
• MkPortal Admin XSS
  • From: info
• IG Shop remote code execution
  • From: asdfj38
• IG Calendar SQL Injection
  • From: asdfj38
• Uber Uploader 4.2 Arbitrary File Upload Vulnerability
  • From: null_hack
• Intranet Open Source Remote Password Disclosure "intranet.mdb"
  • From: Advisory
• Advisory 02/2007: WordPress Trackback Charset Decoding SQL Injection Vulnerability
  • From: Stefan Esser
• Coppermine Photo Gallery <= 1.4.10 SQL Injection Exploit
  • From: gmdarkfig
• iDefense Security Advisory 01.05.07: Opera Software Opera Web Browser createSVGTransformFromMatrix Object Typecasting Vulnerability
  • From: iDefense Labs
• [DRUPAL-SA-2007-001] Drupal 4.6.11 / 4.7.5 fixes XSS issue
  • From: Uwe Hermann
• RI Blog 1.3 XSS Vuln.
  • From: ShaFuq31
• [DRUPAL-SA-2007-002] Drupal 4.6.11 / 4.7.5 fixes DoS issue
  • From: Uwe Hermann
• Re: SAP Security Contact
  • From: Fritz . Bauspiess
• Advisory 01/2007: WordPress CSRF Protection XSS Vulnerability
  • From: Stefan Esser
• Multiple bugs in EditTag
  • From: nj
• [USN-402-1] Avahi vulnerability
  • From: Kees Cook
• Flog 1.1.2 Remote Admin Password Disclosure
  • From: corrado . liotta
• iDefense Security Advisory 01.05.07: Opera Software Opera Web Browser JPG Image DHT Marker Heap Corruption Vulnerability
  • From: iDefense Labs
• Kolayindir Download (Yenionline) (tr) SqL Injection Vuln.
  • From: ShaFuq31
• [OpenPKG-SA-2007.002] OpenPKG Security Advisory (bzip2)
  • From: OpenPKG GmbH
• ZDI-07-001: QUALCOMM Eudora WorldMail Remote Management Heap Overflow Vulnerability
  • From: zdi-disclosures
• iDefense Security Advisory 01.05.07: Kaspersky Antivirus Scan Engine PE File Denial of Service Vulnerability
  • From: iDefense Labs
• Re: SAP Security Contact
  • From: Thor (Hammer of God)
• fetchmail security announcement 2006-03 (CVE-2006-5974)
  • From: Matthias Andree
• fetchmail security announcement 2006-02 (CVE-2006-5867)
  • From: Matthias Andree
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Secure Access Control Server
  • From: Cisco Systems Product Security Incident Response Team
• ohhASP Remote Password Disclosure
  • From: Advisory
• Yet Another Link Directory v1.0
  • From: lunY
• [OpenPKG-SA-2007.003] OpenPKG Security Advisory (drupal)
  • From: OpenPKG GmbH
• [OpenPKG-SA-2007.004] OpenPKG Security Advisory (fetchmail)
  • From: OpenPKG GmbH
• Fix & Chips CMS v1.0
  • From: luny
• shopstorenow (orange.asp) sql injection
  • From: emel_gw_ini
• FON Router allows anonymous web access
  • From: l . friedrichs
• [OpenPKG-SA-2007.005] OpenPKG Security Advisory (wordpress)
  • From: OpenPKG GmbH
• Re: OpenPinboard <= Remote File Include
  • From: jgraef
• 0trace - traceroute on established connections
  • From: Michal Zalewski
• Re: [Full-disclosure] 0trace - traceroute on established connections
  • From: Michal Zalewski
• @lex Guestbook <= 4.0.2 Remote Command Execution Exploit
  • From: gmdarkfig
• AJLogin v3.5 Remote Password Disclosure Vulnerability
  • From: beks
• EMembersPro 1.0 Remote Password Disclosure Vulnerability
  • From: beks
• MitiSoft Remote Password Disclosure Vulnerability
  • From: beks
• M-Core Remote Password Disclosure Vulnerability
  • From: beks
• HarikaOnline v2.0 Remote Password Disclosure Vulnerability
  • From: beks
• Webulas Remote Password Disclosure Vulnerability
  • From: beks
• Uguestbook Remote Password Disclosure Vulnerability
  • From: beks
• NUNE News Script (custom_admin_path) Remote File Include Vulnerablity
  • From: xorontr
• [SECURITY] [DSA 1245-1] New proftpd packages fix denial of service
  • From: Moritz Muehlenhoff
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Amit Klein
• Dayfox Blog Remote File Include Vuln.
  • From: ShaFuq31
• Re: Perforce client: security hole by design
  • From: The Fungi
• GeoBB Georgian Bulletin Board Remote File Include Vuln.
  • From: ShaFuq31
• Re: SAP Security Contact
  • From: Ansgar -59cobalt- Wiechers
• TK53 Advisory #1: CenterICQ remote DoS buffer overflow in LiveJournal handling
  • From: Lolek of TK53
• RE: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Martin O'Neal
• MKPortal Full Path Disclosure
  • From: info
• Re: Re: Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: rudeyak
• HP Multiple Products PML Driver Local Privilege Escalation
  • From: Sowhat
• magic photo storage website Remote File Inclusion
  • From: k1tk4t
• QASEC Announcement: Writing Software Security Test Cases
  • From: bugtraq
• Packeteer PacketWise CLI overflow DoS
  • From: kian . mohageri
• Re: [Full-disclosure] Universal XSS with PDF files: highly dangerous
  • From: pdp (architect)
• [SECURITY] [DSA 1246-1] New OpenOffice.org packages fix arbitrary code execution
  • From: Martin Schulze
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: pdp (architect)
• rPSA-2007-0001-1 openoffice.org
  • From: rPath Update Announcements
• Re: Universal XSS with PDF files: highly dangerous
  • From: Jeff Williams
• [SECURITY] [DSA 1247-1] New libapache-mod-auth-kerb packages fix remote denial of service
  • From: Noah Meyerhans
• Re: Sun java System Messenger Express XSS
  • From: b2wang
• cisco nac bypass vulnerability - cisco trust agent
  • From: thorben schroeder
• RE: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Martin O'Neal
• Vendor guidelines regarding security contacts
  • From: Steven M. Christey
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Amit Klein
• createauction (cats.asp) Remote SQL Injection Vulnerability
  • From: emel_gw_ini
• GForge Cross Site Scripting vulnerability
  • From: jose . palanco
• Re: cisco nac bypass vulnerability - cisco trust agent
  • From: Stefano Zanero
• Re: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Jim Manico
• Re: Vendor guidelines regarding security contacts
  • From: security curmudgeon
• [ MDKSA-2007:003 ] - Updated avahi packages fix DoS vulnerability
  • From: security
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: RSnake
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Amit Klein
• RFID open source library - RFIDIOt code release - version 0.1k
  • From: Adam Laurie
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Amit Klein
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: RSnake
• Cracking Steganography Application in less than ONE minute
  • From: thesinoda
• Re: a cheesy Apache / IIS DoS vuln (+a question)
  • From: Gadi Evron
• Re: RE: [Full-disclosure] Concurrency strikes MSIE (potentially exploitablemsxml3 flaws)
  • From: socket69
• Re: SAP Security Contact
  • From: Nicob
• Re: FON Router allows anonymous web access
  • From: Thierry Zoller
• Re: a cheesy Apache / IIS DoS vuln (+a question)
  • From: bugtraq
• RE: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Guy Podjarny
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Amit Klein
• [ MDKSA-2007:004 ] - Updated geoip packages fix geoipupdate vulnerability
  • From: security
• [KDE Security Advisory] ksirc Denial of Service vulnerability
  • From: Dirk Mueller
• Re: OpenPinboard <= Remote File Include
  • From: Steven M. Christey
• Re: Uber Uploader 4.2 Arbitrary File Upload Vulnerability
  • From: recklessb
• RE: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Tom Stripling
• ppc engine Multiple file inclusion
  • From: emel_gw_ini
• Re: PHPKit 1.6.1 RC2 (faq/faq.php) Remote SQL Injection Exploit
  • From: yorn
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Brian Eaton
• Re: SAP Security Contact
  • From: Stan Bubrouski
• Sina UC ActiveX Multiple Remote Stack Overflow
  • From: Sowhat
• Re: Universal XSS with PDF files: highly dangerous
  • From: The Anarcat
• magic photo storage website Multiple Remote File Inclusion
  • From: emel_gw_ini
• Re: [Full-disclosure] 0trace - traceroute on established connections
  • From: Alessandro Dellavedova
• rPSA-2007-0003-1 fetchmail
  • From: rPath Update Announcements
• Re: [Full-disclosure] 0trace - traceroute on established connections
  • From: Michal Zalewski
• Re: [Full-disclosure] [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Jim Manico
• [USN-403-1] X.org vulnerabilities
  • From: Kees Cook
• Re: [DCC SPAM] 0trace - traceroute on established connections
  • From: Lance James
• MITKRB5-SA-2006-002: kadmind (via RPC lib) calls uninitialized function pointer
  • From: Tom Yu
• Re: Cracking Steganography Application in less than ONE minute
  • From: Michal Spadlinski
• MITKRB5-SA-2006-003: kadmind (via GSS-API lib) frees uninitialized pointers
  • From: Tom Yu
• iDefense Security Advisory 01.09.07: Microsoft Excel Long Palette Heap Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 01.09.07: Multiple Microsoft Products VML 'recolorinfo' Element Integer Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 01.09.07: Microsoft Excel Invalid Column Heap Corruption Vulnerability
  • From: iDefense Labs
• [USN-404-1] MadWifi vulnerability
  • From: Kees Cook
• Re: a cheesy Apache / IIS DoS vuln (+a question)
  • From: William A. Rowe, Jr.
• RE: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Tom Spector
• RE: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Marvin Simkin
• Easy Banner Pro Version 2.8 <= Remote File Inclusion
  • From: stormhacker
• CA BrightStor ARCserve Backup Tape Engine Exploit Security Notice
  • From: Williams, James K
• Circumventing CSFR Form Token Defense
  • From: Jim Manico
• rPSA-2007-0004-1 bzip2
  • From: rPath Update Announcements
• iDefense Security Advisory 01.09.07: Multiple Vendor X Server Render Extension ProcRenderAddGlyphs Memory Corruption Vulnerability
  • From: iDefense Labs
• rPSA-2007-0005-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs
  • From: rPath Update Announcements
• [ MDKSA-2007-005 ] - Updated xorg-x11/XFree86 packages fix integer overflow vulnerabilities
  • From: security
• iDefense Security Advisory 01.09.07: Multiple Vendor X Server DBE Extension ProcDbeGetVisualInfo Memory Corruption Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 01.09.07: Multiple Vendor X Server DBE Extension ProcDbeSwapBuffers Memory Corruption Vulnerability
  • From: iDefense Labs
• edit-x ecommerce (include_dir) Remote File include
  • From: emel_gw_ini
• iDefense Security Advisory 01.09.07: Adobe Macromedia ColdFusion Source Code Disclosure Vulnerability
  • From: iDefense Labs
• slocate leaks filenames of protected directories
  • From: steven
• Adobe Reader Remote Heap Memory Corruption - Subroutine Pointer Overwrite
  • From: Piotr Bania
• [OpenPKG-SA-2007.006] OpenPKG Security Advisory (kerberos)
  • From: OpenPKG GmbH
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Ralph Angenendt
• Cisco Security Advisory: Cisco Unified Contact Center and IP Contact Center JTapi Gateway Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: DLSw Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• iDefense Q-1 2007 Challenge
  • From: contributor
• [ MDKSA-2007:006 ] - Updated OpenOffice.org packages fix WMF vulnerability
  • From: security
• A Major design Bug in Steganography 1.7.x, 1.8 (latest) (Updated Version)
  • From: thesinoda
• Re: Re: Uber Uploader 4.2 Arbitrary File Upload Vulnerability
  • From: null_hack
• Re: [Full-disclosure] 0trace - traceroute on established connections
  • From: Jon Oberheide
• VLC Format String Vulnerability also in XINE
  • From: Sven . Czaja
• [ GLSA 200701-04 ] SeaMonkey: Multiple vulnerabilities
  • From: Raphael Marichez
• CS-Cart 1.3.3 (install.php) Remote File Include Vulnerability
  • From: ahmed_labib_hilmy
• Re: slocate leaks filenames of protected directories
  • From: Dennis Jackson
• Re: a cheesy Apache / IIS DoS vuln (+a question)
  • From: bugtraq
• Re: Circumventing CSFR Form Token Defense
  • From: Florian Weimer
• Re: SAP Security Contact
  • From: Nick Boyce
• Re: SAP Security Contact
  • From: Thor (Hammer of God)
• A Major design Bug in Camouflage 1.2.1 (latest)
  • From: thesinoda
• sazcart v1.5 (cart.php) Remote File include
  • From: emel_gw_ini
• Re: Circumventing CSFR Form Token Defense
  • From: bugtraq
• Re: Circumventing CSFR Form Token Defense
  • From: Peter Watkins
• Re: Vendor guidelines regarding security contacts
  • From: Chris Wysopal
• VMware ESX server security updates
  • From: VMware Security team
• DMA[2007-0107a] OmniWeb Javascript Alert Format String Vulnerabiity and DMA[2007-0109a] Apple Finder Disk Image Volume Label Overflow / DoS
  • From: K F (lists)
• Re: A Major design Bug in Steganography 1.7.x, 1.8 (latest) (Updated Version)
  • From: Dave \"No, not that one\" Korn
• [ MDKSA-2007:007 ] - Updated nvidia driver packages fix vulnerability
  • From: security
• [ MDKSA-2007:009 ] - Updated kdenetwork packages fix ksirc vulnerability
  • From: security
• Re: Vendor guidelines regarding security contacts
  • From: Juha-Matti Laurio
• [ MDKSA-2007:008 ] - Updated kerberos packages fix vulnerability
  • From: security
• Computer Terrorism (UK) :: Incident Response Centre - Microsoft Outlook Vulnerability
  • From: advisories
• WMF CreateBrushIndirect vulnerability (DoS)
  • From: Alexander Sotirov
• Xine-ui format string Vulnerabilties.
  • From: saik0pod
• Jshop Server 1.3
  • From: irvian
• Re: SAP Security Contact
  • From: Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
• Re: A Major design Bug in Steganography 1.7.x, 1.8 (latest) (Updated Version)
  • From: hlangos-bugtraq
• phpBB (privmsg.php) XSS Exploit
  • From: info
• RE: Circumventing CSFR Form Token Defense
  • From: James C. Slora Jr.
• Calyptix Security Advisory CX-2007-001 - Snort 2.6.1.2 Integer Underflow Vulnerability
  • From: Calyptix Advisories
• Re: slocate leaks filenames of protected directories
  • From: Ben Wheeler
• FreeBSD Security Advisory FreeBSD-SA-07:01.jail
  • From: FreeBSD Security Advisories
• rPSA-2007-0006-1 krb5 krb5-server krb5-services krb5-test krb5-workstation
  • From: rPath Update Announcements
• ZDI-07-002: CA BrightStor ARCserve Backup Tape Engine Code Execution Vulnerability
  • From: zdi-disclosures
• ZDI-07-004: CA BrightStor ARCserve Backup Tape Engine Buffer Overflow Vulnerability
  • From: zdi-disclosures
• [security bulletin] HPSBMA02175 SSRT061174 rev.1 - HP OpenView Network Node Manager (OV NNM) Remote Unauthorized Read Access to Files
  • From: security-alert
• LayerOne 2007 CFP Announced
  • From: Layer One
• ZDI-07-003: CA BrightStor ARCserve Backup Message Engine Buffer Overflow Vulnerability
  • From: zdi-disclosures
• easy-content filemanager
  • From: hackerbinhphuoc
• [USN-405-1] fetchmail vulnerability
  • From: Kees Cook
• Digital Armaments Security Pre-Advisory 11.01.2007: Grsecurity Kernel PaX - Local root vulnerability
  • From: info
• [ MDKSA-2007:010 ] - Updated Firefox packages fix multiple vulnerabilities
  • From: security
• [security bulletin] HPSBMA02176 SSRT051035 rev.1 - HP OpenView Network Node Manager (OV NNM) Remote Unauthorized Execution of Arbitrary Code
  • From: security-alert
• Re: Perforce client: security hole by design
  • From: Crispin Cowan
• LS-20061002 - Computer Associates BrightStor ARCserve Backup Remote Code Execution Vulnerability
  • From: advisories
• Nwom topsites v3.0
  • From: lunY
• LunarPoll (PollDir) Remote File Include Vulnerabilities
  • From: ilkerKandemir
• Ezboxx multiple vulnerabilities.
  • From: Info
• xss in phpmyadmin <= 2.8.1
  • From: alfa
• [ MDKSA-2007:011 ] - Updated Thunderbird packages fix multiple vulnerabilities
  • From: security
• [USN-406-1] OpenOffice.org vulnerability
  • From: Kees Cook
• Re (3): Circumventing CSFR Form Token Defense
  • From: bugtraq
• Corsaire Security Advisory: ChainKey Java Code Protection Bypass issue
  • From: advisories
• Web Honeynet Project: announcement, exploit URLs this Wednesday
  • From: Gadi Evron
• Lies? [Was: Re: Digital Armaments Security Pre-Advisory 11.01.2007: Grsecurity Kernel PaX - Local root vulnerability]
  • From: Lubomir Kundrak
• Re: Vendor guidelines regarding security contacts
  • From: Ben Bucksch
• Re: [Full-disclosure] Web Honeynet Project: announcement,
  • From: bugtraq
• Micro CMS <= 3.5 Remote File Include Exploit
  • From: ilkerKandemir
• Re: slocate leaks filenames of protected directories
  • From: Dave Moore
• [CAID 34955, 34956, 34957, 34958, 34959, 34817]: CA BrightStor ARCserve Backup Multiple Overflow Vulnerabilities
  • From: Williams, James K
• Re: xss in phpmyadmin <= 2.8.1
  • From: alfa
• Re: phpBB (privmsg.php) XSS Exploit
  • From: neothermic
• Re: [Full-disclosure] Web Honeynet Project: announcement,
  • From: Gadi Evron
• Wordpress disclosure of Table Prefix Weakness
  • From: process
• seeking comments on disclosure articles
  • From: smcalearney
• Re: Corsaire Security Advisory: ChainKey Java Code Protection Bypass issue
  • From: Jim Manico
• [ MDKSA-2007:012 ] - Updated kernel packages fix multiple vulnerabilities and bugs
  • From: security
• Re: slocate leaks filenames of protected directories
  • From: Ben Wheeler
• AIOCP SQL Injection Vulnerability
  • From: coloss7
• AIOCP Login Bypass Vulnerability
  • From: coloss7
• Naig <= 0.5.2 (this_path) Remote File Include Vulnerability
  • From: me you
• [ GLSA 200701-05 ] KDE kfile JPEG info plugin: Denial of Service
  • From: Raphael Marichez
• [ GLSA 200701-06 ] w3m: Format string vulnerability
  • From: Raphael Marichez
• [ GLSA 200701-07 ] OpenOffice.org: EMF/WMF file handling vulnerabilities
  • From: Raphael Marichez
• [ GLSA 200701-08 ] Opera: Two remote code execution vulnerabilities
  • From: Raphael Marichez
• Re: Vendor guidelines regarding security contacts
  • From: Steven M. Christey
• [SECURITY] [DSA 1248-1] New libsoup packages fix denial of service
  • From: Moritz Muehlenhoff
• [ MDKSA-2007:013 ] - Updated libneon0.26 packages fix vulnerability
  • From: security
• Ipswitch WS_FTP 2007 Professional "wsftpurl" access violation vulnerability
  • From: sapheal
• Re: phpBB (privmsg.php) XSS Exploit
  • From: neothermic
• Re: Naig <= 0.5.2 (this_path) Remote File Include Vulnerability
  • From: maxpost
• PHP-Nuke <= 7.9 Old-Articles Block "cat" SQL Injection vulnerability
  • From: paisterist
• RE: seeking comments on disclosure articles
  • From: Michael Scheidell
• Trevorchan <= v0.7 Remote File Include Vulnerability
  • From: ilkerkandemir
• Ovidentia 5.6x Series Remote File &#304;nclude
  • From: hotturk
• Re: [Full-disclosure] 0trace - traceroute on established connections
  • From: Robert Święcki
• London DC4420 meet - Wednesday 17th January, 2007
  • From: Major Malfunction
• [USN-407-1] libgtop2 vulnerability
  • From: Martin Pitt
• Re: Ipswitch WS_FTP 2007 Professional "wsftpurl" access violation vulnerability
  • From: 3APA3A
• Okul Web Otomasyon Sistemi (etkinlikbak.asp) SQL Injection Vulnerability
  • From: ilkerkandemir
• Oracle Passwords and OraBrute
  • From: paulw
• Remedy Action Request System 5.01.02 - User Enumeration
  • From: Davide Del Vecchio
• Re: Re: Re: Uber Uploader 4.2 Arbitrary File Upload Vulnerability
  • From: recklessb
• [USN-408-1] krb5 vulnerability
  • From: Martin Pitt
• Outpost Bypassing Self-Protection using file links Vulnerability
  • From: Matousec - Transparent security Research
• Jax Petition Book (languagepack) Remote File Include Vulnerabilities
  • From: ilkerkandemir
• wcSimple Poll (password.txt) Remote Password Disclosure Vulnerablity
  • From: ilkerkandemir
• Re: Jax Petition Book (languagepack) Remote File Include Vulnerabilities
  • From: bmatheny
• InstantForum.NET Multiple Cross-Site Scripting Vulnerability
  • From: DoZ
• Uninformed Journal Release Announcement: Volume 6
  • From: H D Moore
• [USN-409-1] ksirc vulnerability
  • From: Martin Pitt
• liens_dynamiques xss and admin authentification
  • From: sn0oPy . team
• [ GLSA 200701-10 ] WordPress: Multiple vulnerabilities
  • From: Raphael Marichez
• Gallery <= 1.4.4-pl4 (phpbb_root_path) Remote File Include Vulnerability
  • From: me you
• PHPATM Remote Password Disclosure Vulnerablity
  • From: nightmare
• [ MDKSA-2007:017 ] - Updated wget packages fix ftp vulnerability
  • From: security
• [ MDKSA-2007:015 ] - Updated cacti packages SQL injection vulnerability
  • From: security
• [KDE Security Advisory] kpdf/kword/xpdf denial of service vulnerability
  • From: Dirk Mueller
• [ MDKSA-2007:016 ] - Updated fetchmail packages fix vulnerability
  • From: security
• dt_guestbook version 1.0f XSS vulnerability
  • From: jesper . jurcenoks
• Re: Gallery <= 1.4.4-pl4 (phpbb_root_path) Remote File Include Vulnerability
  • From: Chris Kelly
• rPSA-2007-0007-1 kdenetwork
  • From: rPath Update Announcements
• Announcement: The Cross-site Request Forgery FAQ
  • From: bugtraq
• [x0n3-h4ck] SmE FileMailer 1.21 Remote Sql Injextion Exploit
  • From: corrado . liotta
• Re: Gallery <= 1.4.4-pl4 (phpbb_root_path) Remote File Include Vulnerability
  • From: krasza
• Re: Jax Petition Book (languagepack) Remote File Include Vulnerabilities
  • From: John McGuire
• Re: Remedy Action Request System 5.01.02 - User Enumeration
  • From: Davide Del Vecchio
• Re: [Full-disclosure] iDefense Q-1 2007 Challenge
  • From: Simon Smith
• [ GLSA 200701-09 ] oftpd: Denial of Service
  • From: Raphael Marichez
• vulnerability script indexu all versions
  • From: gamr-14
• Re: [Full-disclosure] iDefense Q-1 2007 Challenge
  • From: K F (lists)
• Re: [Full-disclosure] iDefense Q-1 2007 Challenge -I WILL BUY FOR MORE
  • From: Simon Smith
• Re: [Full-disclosure] iDefense Q-1 2007 Challenge
  • From: Blue Boar
• rPSA-2007-0008-1 gd
  • From: rPath Update Announcements
• Re: [Full-disclosure] iDefense Q-1 2007 Challenge
  • From: K F (lists)
• Re: Ipswitch WS_FTP 2007 Professional "wsftpurl" access violation vulnerability
  • From: Eliah Kagan
• [ MDKSA-2007:014 ] - Updated bluez-utils packages fix hidd vulnerability
  • From: security
• Re: Ipswitch WS_FTP 2007 Professional "wsftpurl" access violation vulnerability
  • From: HACKPL - bugtraq/sapheal
• [ GLSA 200701-11 ] Kronolith: Local file inclusion
  • From: Raphael Marichez
• [ GLSA 200701-12 ] Mono: Information disclosure
  • From: Raphael Marichez
• Re: Trevorchan <= v0.7 Remote File Include Vulnerability
  • From: Stefano Zanero
• SYMSA-2007-001: Oracle Application Server 10g - Directory Traversal
  • From: research
• Re: WMF CreateBrushIndirect vulnerability (DoS)
  • From: temp0_123
• ZDI-07-005: Sun Microsystems Java GIF File Parsing Memory Corruption Vulnerability
  • From: zdi-disclosures
• Windows logoff bug possible security vulnerability and exploit.
  • From: Rage Coder
• Re: [Full-disclosure] iDefense Q-1 2007 Challenge
  • From: Blue Boar
• Re: [Full-disclosure] iDefense Q-1 2007 Challenge
  • From: Simon Smith
• Re: [Full-disclosure] iDefense Q-1 2007 Challenge -I WILL BUY FOR MORE
  • From: Jim Manico
• Re: [Full-disclosure] iDefense Q-1 2007 Challenge
  • From: Simon Smith
• [SECURITY] [DSA 1250-1] New cacti packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [ISecAuditors Security Advisories] Oracle Reports Web Cartridge (RWCGI60) vulnerable to XSS
  • From: ISecAuditors Security Advisories
• Re: [Full-disclosure] iDefense Q-1 2007 Challenge
  • From: Tim Newsham
• [x0n3-h4ck] myBloggie 2.1.5 XSS exploit
  • From: corrado . liotta
• Microsoft Help Workshop .CNT contents files buffer overflow vulnerability
  • From: porkythepig
• Re: Windows logoff bug possible security vulnerability and exploit.
  • From: 3APA3A
• [security bulletin] HPSBUX02181 SSRT061289 rev.1 - HP-UX Running IPFilter, Remote Unauthorized Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBST02184 SSRT071296 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS07-001 Through MS07-004
  • From: security-alert
• Multiple OS kernel insecure handling of stdio file descriptor
  • From: XFOCUS Security Team
• FW: [cacti-announce] Cacti 0.8.6j Released
  • From: Warner Moore
• CYBSEC - Security Advisory: SAP Internet Graphics Service (IGS) Remote Buffer Overflow
  • From: CYBSEC Advisories
• [USN-410-1] poppler vulnerability
  • From: Martin Pitt
• Cisco Security Advisory: SSL/TLS Certificate and SSH Public Key Validation Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Re: FW: [cacti-announce] Cacti 0.8.6j Released
  • From: Steve Friedl
• Re: Multiple OS kernel insecure handling of stdio file descriptor
  • From: 3APA3A
• [security bulletin] HPSBPI02185 SSRT071290 rev.1 - HP Jetdirect Running ftp, Remote Denial of Service (DoS)
  • From: security-alert
• Directory Traversal in ArsDigita Community System
  • From: Elliot Kendall
• [ MDKSA-2007:018 ] - Updated koffice packages fix crafted pdf file vulnerability
  • From: security
• [ MDKSA-2007:019 ] - Updated pdftohtml packages fix crafted pdf file vulnerability
  • From: security
• [ MDKSA-2007:020 ] - Updated poppler packages fix crafted pdf file vulnerability
  • From: security
• [ MDKSA-2007:021 ] - Updated xpdf packages fix crafted pdf file vulnerability
  • From: security
• Re: Multiple OS kernel insecure handling of stdio file descriptor
  • From: Peter Jeremy
• [ MDKSA-2007:022 ] - Updated tetex packages fix crafted pdf file vulnerability
  • From: security
• [x0n3-h4ck] sabros.us 1.7 XSS Exploit
  • From: corrado . liotta
• [ MDKSA-2007:023 ] - Updated libgtop2 packages fix buffer overflow vulnerability
  • From: security
• Re: [_SUSPEKT] - Re: [Full-disclosure] iDefense Q-1 2007 Challenge - Bayesian Filter detected spam
  • From: Simon Smith
• Re: [Full-disclosure] iDefense Q-1 2007 Challenge -I WILL BUY FOR MORE
  • From: Simon Smith
• Re: [Full-disclosure] iDefense Q-1 2007 Challenge -I WILL BUY FOR MORE
  • From: Simon Smith
• Re: [Full-disclosure] iDefense Q-1 2007 Challenge -I WILL BUY FOR MORE
  • From: Simon Smith
• Re: Windows logoff bug possible security vulnerability and exploit.
  • From: Rage Coder
• Re: [Full-disclosure] iDefense Q-1 2007 Challenge -I WILL BUY FOR MORE
  • From: Roman Medina-Heigl Hernandez
• EUSecWest 2007 Papers
  • From: Dragos Ruiu
• Re: CMS Made Simple non-permanent XSS
  • From: ted
• MyShoutBox Multiple Cross-Site Scripting Vulnerability
  • From: DoZ
• Layered Defense Research Advisory: BitDefender Client 8.02 Format String Vulnerability
  • From: dh
• TSLSA-2007-0003 - multi
  • From: Trustix Security Advisor
• DoS against AVM Fritz!Box 7050 (and others)
  • From: collin
• Help project files (.HPJ) buffer overflow vulnerability in Microsoft Help Workshop
  • From: porkythepig
• Virginity Security Advisory 2007-001 : T-Com Speedport 500V Login bypass
  • From: advisory07
• WzdFTPD < 8.1 Denial of service
  • From: S21sec Labs
• DIMVA 2007: Final Call for Papers
  • From: Robin Sommer
• [RISE-2007001] Apple Mac OS X 10.4.x kernel shared_region_map_file_np() memory corruption vulnerability
  • From: RISE Security
• a-forum xss
  • From: sn0oPy
• Re: Multiple OS kernel insecure handling of stdio file descriptor
  • From: Shiva Persaud
• Login Manager Multiple HTML Injections
  • From: DoZ
• Paypal Subscription Manager Multiple HTML Injections
  • From: DoZ
• SMF "index.php?action=pm" Cross Site-Scripting
  • From: Advisory
• Digital Armaments Security Advisory 20.01.2007: Grsecurity Kernel PaX Vulnerability
  • From: info
• XSS in 212cafeBoard ( Verision 0.08 & 6.30 Beta )
  • From: xx_hack_xx_2004
• Sun Microsystems Java GIF File Parsing Memory Corruption Vulnerability Prove Of Concept Exploit
  • From: luoluonet
• Wiki-how path disclosure
  • From: iamtheevil1
• Re: [Full-disclosure] Check Point Connectra End Point security bypass
  • From: Felix Lindner
• Re: SMF "index.php?action=pm" Cross Site-Scripting
  • From: lfx4sodas
• FishCart [injection sql]
  • From: saps . audit
• Re: Multiple OS kernel insecure handling of stdio file descriptor
  • From: Carson Gaspar
• FreeForum 0.9.0 <=- (index.php fpath) Remote File Include Vulnerability
  • From: me you
• Re: Virginity Security Advisory 2007-001 : T-Com Speedport 500V Login bypass
  • From: jn
• [SECURITY] [DSA 1251-1] New netrik packages fix arbitary shell command execution
  • From: Steve Kemp
• Re: [Full-disclosure] Multiple OS kernel insecure handling of stdio file descriptor
  • From: Troy Bollinger
• XMB "U2U Instant Messenger" Cross-Site Scripting
  • From: Advisory
• Re: Virginity Security Advisory 2007-001 : T-Com Speedport 500V Login bypass
  • From: security@xxxxxxxxx
• XSS in Guestbook ( v.4.00 beta )
  • From: xx_hack_xx_2004
• SQL Injection in Unique Ads ( UDS )
  • From: xx_hack_xx_2004
• cmsimple 2.7 Remote File Include
  • From: mr alkomandoz
• Microsoft Visual C++ (.RC) resource files buffer overflow vulnerability
  • From: porkythepig
• phpAdsNew 2.0.7 Remote File Include
  • From: mr alkomandoz
• PHP Link Directory XSS Vulnerability version <= 3.0.6
  • From: jussi . vuokko
• Full Path Disclosure in Open-Realty ( v2.3.4 )
  • From: xx_hack_xx_2004
• Fantastic News <=- (news.php) Remote File Include Vulnerability
  • From: me you
• Check Point Connectra End Point security bypass
  • From: Roni Bachar
• Re: Re: SMF "index.php?action=pm" Cross Site-Scripting
  • From: alexbove
• [x0n3-h4ck] bitweaver 1.3.1 XSS Exploit
  • From: corrado . liotta
• UploadScript <=- v1.02 (password.txt) Remote Password Disclosure Vulnerability
  • From: me you
• Uploader <= (userdata/user_1.txt) Password Disclosure Vulnerability
  • From: me you
• [ GLSA 200701-13 ] Fetchmail: Denial of Service and password disclosure
  • From: Matthias Geerdsen
• Re: FishCart [injection sql]
  • From: Michael Brennen
• SQL Injection by using Cookie Poisoning for Website Baker Version 2.6.5 and before
  • From: Rolf Huisman
• [ GLSA 200701-14 ] Mod_auth_kerb: Denial of Service
  • From: Raphael Marichez
• [ GLSA 200701-15 ] Sun JDK/JRE: Multiple vulnerabilities
  • From: Raphael Marichez
• [ GLSA 200701-16 ] Adobe Acrobat Reader: Multiple vulnerabilities
  • From: Raphael Marichez
• rPSA-2007-0011-1 wget
  • From: rPath Update Announcements
• Safari Improperly Parses HTML Documents & BlogSpot XSS vulnerability
  • From: Jose Avila III
• Re: Re: Re: SMF "index.php?action=pm" Cross Site-Scripting
  • From: Outlaw
• Re: Fantastic News <=- (news.php) Remote File Include Vulnerability <- bogus... again
  • From: Mailinglists Address
• [ MDKSA-2007:024 ] - Updated kdegraphics packages fix crafted pdf file vulnerability
  • From: security
• AToZed Software Intraweb Component for Borland Delphi and Kylix DoS vulnerability
  • From: C0r3 1mp4ct
• Bluetooth DoS by obex push
  • From: hornung
• Bluetooth DoS by obex push
  • From: Armin Hornung
• rPSA-2007-0012-1 ed
  • From: rPath Update Announcements
• xss filter to protect from xss attacks
  • From: Anurag Agarwal
• Re: Multiple OS kernel insecure handling of stdio file descriptor
  • From: eugeny gladkih
• Re: Bluetooth DoS by obex push [readable]
  • From: hornung
• Adobe ColdFusion Information Disclosure
  • From: zck zck
• [ GLSA 200701-17 ] libgtop: Privilege escalation
  • From: Matthias Geerdsen
• Re: Digital Armaments Security Advisory 20.01.2007: Grsecurity Kernel PaX Vulnerability
  • From: nospam
• Re: phpAdsNew 2.0.7 Remote File Include
  • From: l . d . 0
• rPSA-2007-0015-1 libsoup
  • From: rPath Update Announcements
• Re: Windows logoff bug possible security vulnerability and exploit.
  • From: Bart ....
• [ECHO_ADV_62$2007] Upload Service 1.0 remote file inclusion
  • From: y3dips
• rPSA-2007-0014-1 libgtop
  • From: rPath Update Announcements
• [ MDKSA-2007:025 ] - Updated kernel packages fix multiple vulnerabilities and bugs
  • From: security
• Re: Multiple SQL injections and XSS in FishCart 3.1
  • From: michael
• SUSE Security Announcement: squid (SUSE-SA:2007:012)
  • From: Thomas Biege
• RANDOM PHP QUOTE 1.0 (pwd.txt) Remote Password Disclosur
  • From: the . tiger100
• Re: DoS against AVM Fritz!Box 7050 (and others)
  • From: Matthias Wenzel
• [ GLSA 200701-18 ] xine-ui: Format string vulnerabilities
  • From: Raphael Marichez
• [ MDKSA-2006:217-2 ] - Updated proftpd packages fix vulnerabilities
  • From: security
• subscribe (pwd.txt) Remote Password Disclosur
  • From: the . tiger100
• [ GLSA 200701-19 ] OpenLDAP: Insecure usage of /tmp during installation
  • From: Raphael Marichez
• rPSA-2007-0013-1 poppler tetex tetex-afm tetex-dvips tetex-fonts tetex-latex tetex-xdvi
  • From: rPath Update Announcements
• [USN-411-1] libsoup vulnerability
  • From: Kees Cook
• PR06-14: IP Phones based on Centrality Communications/Aredfox PA168 chipset weak session management vulnerability
  • From: ProCheckUp Research
• Advanced Guestbook <=- 2.4.2 (include_path) Remote File Include Vulnerability
  • From: me you
• SUSE Security Announcement: xine (SUSE-SA:2007:013)
  • From: Thomas Biege
• [ MDKSA-2007:026 ] - Updated squid packages fix vulnerabilities
  • From: security
• [ GLSA 200701-20 ] Centericq: Remote buffer overflow in LiveJournal handling
  • From: Raphael Marichez
• [USN-412-1] GeoIP vulnerability
  • From: Kees Cook
• [USN-413-1] BlueZ vulnerability
  • From: Kees Cook
• Re: Safari Improperly Parses HTML Documents & BlogSpot XSS vulnerability
  • From: Robert Tasarz
• [Aria-Security Team] MyBB Cross-Site Scripting
  • From: Advisory
• Toxiclab Shoutbox Password Disclosure Vulnerability
  • From: beks
• Secunia Research: NCTsoft Products NCTAudioFile2 ActiveX Control Buffer Overflow
  • From: Secunia Research
• Secunia Research: Sienzo Digital Music Mentor NCTAudioFile2 ActiveX Control Buffer Overflow
  • From: Secunia Research
• [CAID 34993]: CA BrightStor ARCserve Backup for Laptops and Desktops Multiple Overflow Vulnerabilities
  • From: Williams, James K
• Re: AToZed Software Intraweb Component for Borland Delphi and Kylix DoS vulnerability
  • From: mail
• ZixForum <= 1.14 (Zixforum.mdb) Remote Password Disclosure Vulnerability
  • From: me you
• Maxtricity Tagger Password Disclosure Vulnerability
  • From: beks
• Re: Advanced Guestbook <=- 2.4.2 (include_path) Remote File Include Vulnerability
  • From: Stefano Zanero
• Re: FreeForum 0.9.0 <=- (index.php fpath) Remote File Include Vulnerability
  • From: Stefano Zanero
• Re: Secunia Research: NCTsoft Products NCTAudioFile2 ActiveX Control Buffer Overflow
  • From: Secunia Research
• Cisco Security Advisory: Crafted TCP Packet Can Cause Denial of Service
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: IPv6 Routing Header Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Crafted IP Option Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [OPENADS-SA-2007-001] phpAdsNew and phpPgAds 2.0.9-pr1 vulnerability fixed
  • From: Matteo Beccati
• Re: phpAdsNew 2.0.7 Remote File Include
  • From: matteo
• Weaknesses in Pingback Design
  • From: bmatheny
• [ GLSA 200701-21 ] MIT Kerberos 5: Arbitrary Remote Code Execution
  • From: Matthias Geerdsen
• DoS against Telligent Community Server
  • From: bmatheny
• [security bulletin] HPSBUX02186 SSRT071299 rev.1 - HP-UX running Apache Remote Execution of Arbitrary Code, Denial of Service (DoS), Unauthorized Access
  • From: security-alert
• ZDI-07-006: Citrix Metaframe Presentation Server Print Provider Buffer Overflow Vulnerability
  • From: zdi-disclosures
• Multiple Remote Vulnerabilities in Wordpress
  • From: bmatheny
• Oracle Buffer Overflow in DBMS_REPCAT_UNTRUSTED.UNREGISTER_SNAPSHOT
  • From: Team SHATTER
• Oracle Buffer Overflow in DBMS_LOGMNR.ADD_LOGFILE
  • From: Team SHATTER
• Oracle Buffer Overflow in DBMS_LOGREP_UTIL.GET_OBJECT_NAME
  • From: Team SHATTER
• Oracle Buffer Overflow in DBMS_DRS.GET_PROPERTY
  • From: Team SHATTER
• Oracle Multiple Buffer Overflows and DoS attacks in public procedures of MDSYS.MD
  • From: Team SHATTER
• [CAID 34818]: CA Personal Firewall Multiple Privilege Escalation Vulnerabilities
  • From: Williams, James K
• Oracle Buffer Overflows in DBMS_CAPTURE_ADM_INTERNAL
  • From: Team SHATTER
• [USN-414-1] Squid vulnerabilities
  • From: Kees Cook
• Remove all admin->root authorization prompts from OSX
  • From: K F (lists)
• Re: AToZed Software Intraweb Component for Borland Delphi and Kylix DoS vulnerability
  • From: bounce
• ASP NEWS <= V3 (news_detail.asp) Remote SQL Injection Vulnerability
  • From: ajannhwt
• rPSA-2007-0019-1 gtk
  • From: rPath Update Announcements
• uniForum <= v4 (wbsearch.aspx) Remote SQL Injection Vulnerability
  • From: ajannhwt
• Xero Portal v1.2 (phpbb_root_path) Remote File Include Vulnerablity
  • From: xorontr
• ASP EDGE <= V1.2b (user.asp) Remote SQL Injection Vulnerability
  • From: ajannhwt
• EzDatabase Multiple Cross-Site Scripting Vulnerability
  • From: DoZ
• Re: phpCOIN <= RC-1 (modules/mail/index.php) Remote File Include Vulnerability
  • From: str0ke
• makit news/blog poster <=v3(news_page.asp) Remote SQL Injection Vulnerability
  • From: ajannhwt
• BIND remote exploit (low severity) [Fwd: Internet Systems Consortium Security Advisory.]
  • From: Lebbeous Weekley
• Aztek Forum 4.1 Multiple Vulnerabilities Exploit
  • From: gmdarkfig
• phpCOIN <= RC-1 (modules/mail/index.php) Remote File Include Vulnerability
  • From: me you
• [x0n3-h4ck] Siteman 2.0.x2 Remote Md5 Hash Disclosure Vulnerability
  • From: corrado . liotta
• [x0n3-h4ck] Siteman 1.1.11 Remote Md5 Hash Disclosure Vulnerability
  • From: corrado . liotta
• GPS 1.2 Content Managing System (print.asp) Remote SQL Injection Vulnerability
  • From: ajannhwt
• [NETRAGARD-20061218 SECURITY ADVISORY] [@Mail WebMail Cross Site Request Forgery]
  • From: Netragard Security Advisories
• Re: Oracle Buffer Overflows in DBMS_CAPTURE_ADM_INTERNAL
  • From: Steven M. Christey
• [ GLSA 200701-22 ] Squid: Multiple Denial of Service vulnerabilities
  • From: Matthias Geerdsen
• Buffer overflow in VSAPI library of Trend Micro VirusWall 3.81 for Linux
  • From: Sebastian Wolfgarten
• The certification password of Internet Explorer 7 and operation of auto complete
  • From: support
• high5 Review script Security Risk
  • From: anon
• RE: Remove all admin->root authorization prompts from OSX
  • From: Marvin Simkin
• Re: AToZed Software Intraweb Component for Borland Delphi and Kylix DoS vulnerability
  • From: C0r3 1mp4ct
• Re: Aztek Forum 4.1 Multiple Vulnerabilities Exploit
  • From: gmdarkfig
• Re: Remove all admin->root authorization prompts from OSX
  • From: A. Shaw
• Vulnerability disclosure comments
  • From: Shawna McAlearney
• Re: Oracle Buffer Overflow in DBMS_LOGREP_UTIL.GET_OBJECT_NAME
  • From: Steven M. Christey
• Omniture SiteCatalyst Multiple Cross-Site Scripting Vulnerabilities
  • From: DoZ
• Re: [Full-disclosure] 0trace - traceroute on established connections
  • From: Jon Oberheide
• Re: ZixForum <= 1.14 (Zixforum.mdb) Remote Password Disclosure Vulnerability
  • From: anonym
• RubyGems 0.9.0 and earlier installation exploit
  • From: Eric Hodel
• Medium Risk Vulnerability in PGP Desktop
  • From: NGSSoftware Insight Security Research
• Re: [Full-disclosure] rPSA-2007-0011-1 wget
  • From: Ron DuFresne
• [USN-410-2] teTeX vulnerability
  • From: Kees Cook
• [ GLSA 200701-24 ] VLC media player: Format string vulnerability
  • From: Matthias Geerdsen
• [OPENADS-SA-2007-002] Max Media Manager v0.1.29 and v0.3.30 vulnerability fixed
  • From: Matteo Beccati
• Movable Type <= 3.33 XSS Exploit
  • From: teracci2002
• Re: Re: Re: Re: SMF "index.php?action=pm" Cross Site-Scripting
  • From: sirdarckcat
• [ MDKSA-2007:027 ] - Updated xine-ui packages fix vulnerabilities
  • From: security
• Re: SMF "index.php?action=pm" Cross Site-Scripting
  • From: Lise Moorveld
• [ GLSA 200701-23 ] Cacti: Command execution and SQL injection
  • From: Matthias Geerdsen
• Cross-site Scripting with Local Privilege Vulnerability in Yahoo Messenger
  • From: hainamluke
• PHP Membership Manager Cross-Site Scripting Vulnerability
  • From: DoZ
• FdScript <= v1.3.2 Remote File Disclosure Vulnerability
  • From: ajannhwt
• S21sec-034-en: Cisco VTP DoS vulnerability
  • From: S21sec Labs
• iDefense Security Advisory 01.26.07: Multiple Vendor libchm Page Block Length Memory Corruption Vulnerability
  • From: iDefense Labs
• Re: Remove all admin->root authorization prompts from OSX
  • From: Baptiste Malguy
• Re: Remove all admin->root authorization prompts from OSX
  • From: Ben Bucksch
• Re: Remove all admin->root authorization prompts from OSX
  • From: John Smith
• rPSA-2007-0021-1 bind bind-utils
  • From: rPath Update Announcements
• rPSA-2007-0020-1 rmake
  • From: rPath Update Announcements
• Dexia website security alert
  • From: Jos Kirps
• WS_FTP 2007 Professional SCP handling format string vulnerability
  • From: Michal Bucko
• Re: [OPENADS-SA-2007-002] Max Media Manager v0.1.29 and v0.3.30 vulnerability fixed
  • From: Matteo Beccati
• [ MDKSA-2007:029 ] - Updated libsoup packages fix DoS vulnerability
  • From: security
• stompy the session stomper - tool availability
  • From: Michal Zalewski
• Full Disclosure: Arbitrary Code Execution in LedgerSMB CVE-2006-5872
  • From: Chris Travers
• [USN-398-4] Firefox regression
  • From: Kees Cook
• Re: Cross-site Scripting with Local Privilege Vulnerability in Yahoo Messenger
  • From: Outlaw
• Open Conference Systems = 2.8.2 Remote File Inclusion
  • From: trzindan
• [ MDKSA-2007:028 ] - Updated ulogd packaged to address buffer overflow vulnerability
  • From: security
• AdMentor (banners) admin SQL injection
  • From: sn0oPy . team
• local Calendar System v1.1 (lcStdLib.inc) Remote File Include
  • From: trzindan
• RE: Cross-site Scripting with Local Privilege Vulnerability in Yahoo Messenger
  • From: Ahmed Sheipani
• [SECURITY] [DSA 1253-1] New Mozilla Firefox packages fix several vulnerabilities
  • From: Martin Schulze
• [SECURITY] [DSA 1252-1] New vlc packages fix arbitrary code execution
  • From: Martin Schulze
• Re: Open Conference Systems = 2.8.2 Remote File Inclusion
  • From: Michał Melewski
• [OpenPKG-SA-2007.007] OpenPKG Security Advisory (bind)
  • From: OpenPKG GmbH
• [SECURITY] [DSA 1254-1] New bind9 packages fix denial of service
  • From: Moritz Muehlenhoff
• MDPro 1.0.76 - Multiple Remote Vulnerabilities
  • From: adexior
• Internet Explorer 7 ActiveX bgColor property NULL pointer dereference (DoS)
  • From: Alexander Sotirov
• [OpenPKG-SA-2007.008] OpenPKG Security Advisory (cvstrac)
  • From: OpenPKG GmbH
• Xt-Stats v.2.4.0.b3 - Remote File Include Vulnerabilities
  • From: h4cked . eg
• Re: Dexia website security alert
  • From: Thierry Zoller
• Fake: Open Conference Systems = 2.8.2 Remote File Inclusion
  • From: bzhbfzj3001
• Re: local Calendar System v1.1 (lcStdLib.inc) Remote File Include
  • From: Stefano Zanero
• CVSTrac 2.0.0 Denial of Service (DoS) vulnerability
  • From: Ralf S. Engelschall
• Defeating CAPTCHAs via Averaging
  • From: noreply9871234
• Phorum HTML Injection Vulnerability
  • From: DoZ
• Re: stompy the session stomper - tool availability
  • From: Rogan Dawes
• gnopaste <= 0.5.3 (index.php) Remote File Include Vulnerability
  • From: trzindan
• AdMentor (banners) admin SQL injection
  • From: sn0oPy . team
• Re: Phorum HTML Injection Vulnerability
  • From: brian
• Re: Fake: Open Conference Systems = 2.8.2 Remote File Inclusion
  • From: Michał Melewski
• Re: Windows logoff bug possible security vulnerability and exploit.
  • From: Rage Coder
• Re: Fake: Open Conference Systems = 2.8.2 Remote File Inclusion
  • From: Michał Melewski
• Re: local Calendar System v1.1 (lcStdLib.inc) Remote File Include
  • From: Gadi Evron
• Arbitrary Code Execution in SQL-Ledger and LedgerSMB through redirects
  • From: Chris Travers
• Re: local Calendar System v1.1 (lcStdLib.inc) Remote File Include
  • From: Stefano Zanero
• [ GLSA 200701-25 ] X.Org X server: Multiple vulnerabilities
  • From: Matthias Geerdsen
• Re: Re: Oracle Buffer Overflows in DBMS_CAPTURE_ADM_INTERNAL
  • From: shatter
• Re: local Calendar System v1.1 (lcStdLib.inc) Remote File Include
  • From: Simple Nomad
• Re: stompy the session stomper - tool availability
  • From: Michal Zalewski
• Re: Cross-site Scripting with Local Privilege Vulnerability in Yahoo Messenger
  • From: 3B.Security Researcher
• Re: Open Conference Systems = 2.8.2 Remote File Inclusion
  • From: Stefano Zanero
• VII National Computer and Information Security Conference ACIS 2007 - COLOMBIA
  • From: Jeimy Cano
• RBL - ASP (scripts with db) SQL injection
  • From: sn0oPy . team
• Oracle - Indirect Privilege Escalation and Defeating Virtual Private Databases
  • From: David Litchfield
• [DRUPAL-SA-2007-005] Drupal 4.7.6 / 5.1 fixes arbitrary code execution issue
  • From: Uwe Hermann
• rPSA-2007-0020-2 rmake
  • From: rPath Update Announcements
• COSEINC Alert: Microsoft Agent Heap Overflow Vulnerability Technical Details (Patched)
  • From: Coseinc
• Re: [Full-disclosure] S21sec-034-en: Cisco VTP DoS vulnerability
  • From: Clay Seaman-Kossmeyer
• RBL - ASP (scripts with db) SQL injection
  • From: sn0oPy . team
• Re: gnopaste <= 0.5.3 (index.php) Remote File Include Vulnerability
  • From: Francesco Laurita
• PhP Generic library & framework (include_path) Remote File Include Exploit
  • From: umutc4n
• Re: Fake: Open Conference Systems = 2.8.2 Remote File Inclusion
  • From: bzhbfzj3001
• EncapsCMS 0.3.6 (common_foot.php) Remote File Include
  • From: trzindan
• Atsphp 5.0.1 [Top Sites] [index.php] - Remote File Include
  • From: trzindan
• Re: Defeating CAPTCHAs via Averaging
  • From: Alexander Klimov
• [ MDKSA-2007:030 ] - Updated bind packages fix DoS vulnerabilities
  • From: security
• Re: BOGUS: Atsphp 5.0.1 [Top Sites] [index.php] - Remote File Include
  • From: Mailinglists Address