Mail Index

• Thread Index

• Cisco Security Advisory: Cisco Catalyst 6000, 6500 Series and Cisco 7600 Series NAM (Network Analysis Module) Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Catalyst 6000, 6500 and Cisco 7600 Series MPLS Packet Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• RE: MSIE7 browser entrapment vulnerability (probably Firefox, too)
  • From: perpetualmotionuk
• Re: Xbox 360 Hypervisor Privilege Escalation Vulnerability
  • From: gera
• Evading the Norman SandBox Analyzer
  • From: Arne Vidstrom
• [USN-428-1] Firefox vulnerabilities
  • From: Martin Pitt
• [CAID 35112]: CA eTrust Intrusion Detection Denial of Service Vulnerability
  • From: Williams, James K
• Re: Xbox 360 Hypervisor Privilege Escalation Vulnerability
  • From: anohacker
• [ MDKSA-2007:050 ] - Updated Firefox packages fix multiple vulnerabilities
  • From: security
• Full disclosure: Directory Transversal and Arbitrary Code Execution Vulnerability in SQL-Ledger and LedgerSMB
  • From: Chris Travers
• [ MDKSA-2007:051 ] - Updated snort packages fix DoS vulnerability
  • From: security
• [USN-416-2] nvidia-glx-config regression
  • From: Martin Pitt
• Comodo Bypassing settings protection using magic pipe Vulnerability
  • From: Matousec - Transparent security Research
• Angel LMS 7.1 - Remote SQL Injection
  • From: Guns
• Serendipity unauthenticated SQL-Injection
  • From: SaMuschie
• Re: Angel LMS 7.1 - Remote SQL Injection
  • From: str0ke
• Built2Go v.1.0 => ( news.php & rating.php ) Cross Site Scripting
  • From: the_3dit0r
• Re: Re: MSIE7 browser entrapment vulnerability (probably Firefox, too)
  • From: sithlordstorm
• aWebNews v 1.1=>RFI
  • From: mostafa_ragab
• Re: ProFTPD 1.3.0/1.3.0a (mod_ctrls support) Local Buffer Overflow Exploit
  • From: revenge
• WB News Remote File Include in all versions
  • From: mostafa_ragab
• LayerOne 2007 - Call for Papers and Pre-Registration
  • From: Layer One
• aWebNews V 1.1
  • From: mostafa_ragab
• Re: Xbox 360 Hypervisor Privilege Escalation Vulnerability
  • From: jrgong420
• [ GLSA 200703-01 ] Snort: Remote execution of arbitrary code
  • From: Raphael Marichez
• [ GLSA 200703-02 ] SpamAssassin: Long URI Denial of Service
  • From: Raphael Marichez
• SPAW Editor PHP Edition
  • From: RaeD Hasadya
• [USN-428-2] Firefox regression
  • From: Kees Cook
• [ GLSA 200703-03 ] ClamAV: Denial of Service
  • From: Raphael Marichez
• vBulletin v3.6.5 admincp/index.php ( rss feed ) xss vuln.
  • From: meto5757
• ZDI-07-008: Apache Tomcat JK Web Server Connector Long URL Stack Overflow Vulnerability
  • From: zdi-disclosures
• Woltlab Burning Board (wbb) 2.3.6 CSRF/XSS - 0day
  • From: SaMuschie
• Re: Re: WordPress Search Function SQL-Injection
  • From: none
• iDefense Security Advisory 03.02.07: Kaspersky AntiVirus UPX File Decompression DoS Vulnerability
  • From: iDefense Labs
• Re: Woltlab Burning Board (wbb) 2.3.6 CSRF/XSS - 0day
  • From: MC Iglo
• Remote File Include In DBImageGallery
  • From: RaeD Hasadya
• Limited format string in Netrek 2.12.0
  • From: Luigi Auriemma
• [ MDKSA-2007:050-1 ] - Updated Firefox packages fix multiple vulnerabilities
  • From: security
• WordPress source code compromised to enable remote code execution
  • From: ifsecure
• webSPELL <= 4.01.02 Remote PHP Code Execution Exploit
  • From: gmdarkfig
• rPSA-2007-0048-1 tcpdump
  • From: rPath Update Announcements
• [ GLSA 200703-04 ] Mozilla Firefox: Multiple vulnerabilities
  • From: Raphael Marichez
• Tyger Bug Tracking System Multiple Vulnerability
  • From: corrado . liotta
• BJ Webring XSS
  • From: sn0oPy . team
• Re: Evading the Norman SandBox Analyzer
  • From: Arne Vidstrom
• Re: Evading the Norman SandBox Analyzer
  • From: John Smith
• rPSA-2007-0040-3 firefox thunderbird
  • From: rPath Update Announcements
• [Fwd: Re: Angel LMS 7.1 - Remote SQL Injection]
  • From: don bailey
• Re: VMware Workstation multiple denial of service and isolation manipulation vulnerabilities
  • From: emptysands
• Re: Xbox 360 Hypervisor Privilege Escalation Vulnerability
  • From: ron . kleinman
• ERRATA: [ GLSA 200703-01 ] Snort: Remote execution of arbitrary code
  • From: Raphael Marichez
• [ GLSA 200703-05 ] Mozilla Suite: Multiple vulnerabilities
  • From: Raphael Marichez
• Re: SPAW Editor PHP Edition
  • From: Steve Watt
• [ GLSA 200703-06 ] AMD64 x86 emulation Qt library: Integer overflow
  • From: Raphael Marichez
• [SECURITY] [DSA 1262-1] New gnomemeeting packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• Show Password Admin In Script Uploadscript
  • From: RaeD Hasadya
• ePortfolio version 1.0 Java Multiple Input Validation Vulnerabilities
  • From: Stefan Friedli
• Konqueror DoS Via JavaScript Read Of FTP Iframe
  • From: mark
• Extending JavaScript Portscanning to Include Banner Grabbing
  • From: mark
• XXS in script Phorum
  • From: RaeD Hasadya
• Sava's GuestBook Multiple Vulnerabilities
  • From: bugtraq
• LI-Guestbook SQL Injection Vulnerability
  • From: bugtraq
• Arbitrary file disclosure vulnerability in rrdbrowse <= 1.6
  • From: Sebastian Wolfgarten
• HITBSecConf2007 - Malaysia: Call for Papers now Open
  • From: Praburaajan
• XSS Remote In vCard 2.6 (c)2002
  • From: RaeD Hasadya
• Wordpress <= v2.1.0
  • From: ciri
• DoS and code execution issue in LedgerSMB < 1.1.5 and SQL-Ledger < 2.6.25
  • From: Chris Travers
• CORE-2007-0115: GnuPG and GnuPG clients unsigned data injection vulnerability
  • From: CORE Security Technologies Advisories
• iDefense Security Advisory 03.05.07: Apple QuickTime Color Table ID Heap Corruption Vulnerability
  • From: iDefense Labs
• RE: Wordpress <= v2.1.0
  • From: McCarty, Eric C.
• Apple QuickTime Player Remote Heap Overflow
  • From: Piotr Bania
• Re: Wordpress <= v2.1.0
  • From: vvitkov@xxxxxxxxxxxxx
• Call for Participation Chaos Communication Camp 2007
  • From: fukami
• Apple QuickTime udta ATOM Integer Overflow
  • From: Sowhat
• Re: XXS in script Phorum
  • From: Maurice Makaay
• [security bulletin] HPSBUX02153 SSRT061181 rev.3 - HP-UX Running Firefox, Remote Unauthorized Access or Elevation of Privileges or Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBUX02195 SSRT061237 rev.1 - HP-UX Running Software Distributor (SD), Remote Denial of Service (DoS)
  • From: security-alert
• [Reversemode Advisory] Apple Quicktime Color ID remote heap corruption
  • From: Reversemode
• PHP <= 4.4.6 mssql_connect() & mssql_pconnect() local buffer overflow and safe_mode bypass
  • From: retrog
• Re: Tinyportal Shoutbox
  • From: ichbin
• Re: Extending JavaScript Portscanning to Include Banner Grabbing
  • From: Vincent Archer
• rPSA-2007-0050-1 kernel
  • From: rPath Update Announcements
• [ GLSA 200703-07 ] STLport: Possible remote execution of arbitrary code
  • From: Matthias Geerdsen
• [USN-429-1] tcpdump vulnerability
  • From: Kees Cook
• [USN-430-1] mod_python vulnerability
  • From: Kees Cook
• [SECURITY] [DSA 1263-1] New clamav packages fix denial of service
  • From: Moritz Muehlenhoff
• [USN-431-1] Thunderbird vulnerabilities
  • From: Kees Cook
• [ MDKSA-2007:052 ] - Updated Thunderbird packages fix multiple vulnerabilities
  • From: security
• [ MDKSA-2007:053 ] - Updated util-linux packages address umount crash issue
  • From: security
• Re: Drake CMS v0.3.2 < = RFi Vulnerabilities
  • From: legolas558
• iDefense Security Advisory 03.07.07: Ipswitch IMail Server 2006 Multiple ActiveX Control Buffer Overflow Vulnerabilities
  • From: iDefense Labs
• xss in phpmyadmin >=2.8.0 and < 2.10.0
  • From: alfa
• Firekeeper - IDS for Firefox available
  • From: Jan Wrobel
• Re: Remote File Include In DBImageGallery
  • From: tg
• month of PHP bugs, secondary message?
  • From: Gadi Evron
• Re: [Full-disclosure] month of PHP bugs, secondary message?
  • From: Marcus Meissner
• RPS 6.2 SQL Injection Exploit
  • From: s0cratex
• Re: Re: Wordpress <= v2.1.0
  • From: ciri
• ZDI-07-009: Novell Netmail WebAdmin Buffer Overflow Vulnerability
  • From: zdi-disclosures
• ZDI-07-010: Apple Quicktime UDTA Parsing Heap Overflow Vulnerability
  • From: zdi-disclosures
• [SECURITY] [DSA 1264-1] New php4 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• FLSA - foresight linux security announcements
  • From: Jonathan Smith
• Lazarus Guestbook (admin.php)Remote File Include Expliot
  • From: c_r_ck
• Buffer-overflow in Conquest client 8.2a (svn 691)
  • From: Luigi Auriemma
• rPSA-2007-0051-1 mod_python
  • From: rPath Update Announcements
• rPSA-2007-0052-1 kdelibs
  • From: rPath Update Announcements
• dynaliens v2.0/v2.1 bypass admin authentification + XSS
  • From: sn0oPy . team
• Black Hat USA CFP Now Open!
  • From: Jeff Moss
• Ann: Backtrack 2.0 released
  • From: Thierry Zoller
• [USN-424-2] PHP regression
  • From: Kees Cook
• [ MDKSA-2007:057 ] - Updated xine-lib packages to address buffer overflow vulnerability
  • From: security
• [ MDKSA-2007:056 ] - Updated tcpdump packages address off-by-one overflow
  • From: security
• PHP 4.4.6 crack_opendict() local buffer overflow poc exploit
  • From: retrog
• [ MDKSA-2007:055 ] - Updated mplayer packages to address buffer overflow vulnerability
  • From: security
• Word Press Sensitive Directory exposure (SQL)
  • From: r00t2000
• [ MDKSA-2007:054 ] - Updated kdelibs packages to address DoS issue in KDE Javascript
  • From: security
• [USN-432-1] GnuPG vulnerability
  • From: Kees Cook
• Re: [Bogus] Lazarus Guestbook (admin.php)Remote File Include Expliot -
  • From: Mailinglists Address
• Re: Word Press Sensitive Directory exposure (SQL)
  • From: none
• Microsoft Windows Vista/2003/XP/2000 file management security issues
  • From: 3APA3A
• PHP import_request_variables() arbitrary variable overwrite
  • From: Stefano Di Paola
• [ECHO_ADV_67$2007] WEBO (Web Organizer) <= 1.0 (baseDir) Remote File Inclusion Vulnerability
  • From: erdc
• [ MDKSA-2007:059 ] - Updated gnupg packages provide enhanced forgery detection
  • From: security
• Buffer Overflow in Linux Drivers for Omnikey CardMan 4040 (CVE-2007-0005)
  • From: Daniel Roethlisberger
• [USN-434-1] Ekiga vulnerability
  • From: Kees Cook
• TSLSA-2007-0009 - multi
  • From: Trustix Security Advisor
• MS07-016 FTP Response DOS PoC
  • From: Mathew Rowley
• XSS In Script deviantART
  • From: RaeD Hasadya
• Re: Digital Armaments Security Advisory 20.01.2007: Grsecurity Kernel PaX Vulnerability
  • From: hugo
• Php Nuke POST XSS on steroids
  • From: ascii
• SyScan'07 - Call for Paper - NEW UPDATES
  • From: organiser@xxxxxxxxxx
• RE: Re[2]: Microsoft Windows Vista/2003/XP/2000 file management security issues
  • From: Roger A. Grimes
• Re: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues
  • From: Tim
• Sql injection in WordPress 2.1.2
  • From: Omid
• [CAID 35145]: CA eTrust Admin Privilege Escalation Vulnerability
  • From: Williams, James K
• Remote File Include In Script copyright (c) James Coyle; JCcorp
  • From: RaeD Hasadya
• Re: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues
  • From: KJKHyperion
• Remote File Include In Script Coppermine Photo Gallery
  • From: RaeD Hasadya
• RE: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues
  • From: Roger A. Grimes
• SecurityFocus is turning seven. What's next? - OFFTOPIC - Please excuse the X-Post
  • From: Alfred Huger
• RE: Re[2]: Microsoft Windows Vista/2003/XP/2000 file management security issues
  • From: Roger A. Grimes
• RE: Microsoft Windows Vista/2003/XP/2000 file management security issues
  • From: M. Burnett
• RE: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues
  • From: Laundrup, Jens
• Re: Word Press Sensitive Directory exposure (SQL)
  • From: Francesco Laurita
• RE: Re[2]: Microsoft Windows Vista/2003/XP/2000 file management security issues
  • From: M. Burnett
• SEC Consult SA-20070309-0 :: MySQL 5 Single Row Subselect Denial of Service
  • From: research
• Re: Firekeeper - IDS for Firefox available
  • From: Jex
• HC NEWSSYSTEM 1.0-4 (index.php "ID") Blind SQL Injection
  • From: UniquE
• [ MDKSA-2007:058 ] - Updated ekiga packages fix string vulnerabilities.
  • From: security
• Re[2]: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues
  • From: 3APA3A
• RE: Re[4]: Microsoft Windows Vista/2003/XP/2000 file management security issues
  • From: Roger A. Grimes
• Re: Sql injection in WordPress 2.1.2
  • From: steven
• [ MDKSA-2007:060 ] - Updated kernel packages fix multiple vulnerabilities and bugs
  • From: security
• Re: Re[2]: Microsoft Windows Vista/2003/XP/2000 file management security issues
  • From: Thor (Hammer of God)
• WordPress XSS under function wp_title()
  • From: g30rg3_x
• Security bypass vulnerability in LedgerSMB and SQL-Ledger (fixes released today)
  • From: Chris Travers
• [ GLSA 200703-08 ] SeaMonkey: Multiple vulnerabilities
  • From: Raphael Marichez
• wwwpaintboar(newsfile) Remote File Inclusion Vulnerability
  • From: saw_xyz
• Re: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues
  • From: Tim
• RE: Microsoft Windows Vista/2003/XP/2000 file management security issues
  • From: Roger A. Grimes
• [USN-433-1] Xine vulnerability
  • From: Kees Cook
• [ GLSA 200703-09 ] Smb4K: Multiple vulnerabilities
  • From: Raphael Marichez
• [Argeniss] Practical 10 minutes security audit: Oracle Case (Paper)
  • From: Cesar
• PHP-Nuke <= 8.0 Cookie Manipulation (lang)
  • From: programmer
• Remote File Include In Script Premod SubDog 2
  • From: RaeD Hasadya
• Remote File Include In Script SoftNews Media Group
  • From: RaeD Hasadya
• F&#305;st&#305;q Duyuru Scripti Remote Sql &#304;njection Exploit
  • From: crazy_king
• WWWboard password disclosure
  • From: r00t2000
• Grayscale <= 0.8.0 Multiple Vulnerabilities
  • From: omnipresent
• Pre-open files attack agains locked file
  • From: 3APA3A
• [ECHO_ADV_68$2007] PMB Services <= 3.0.13 Multiple Remote File Inclusion Vulnerability
  • From: erdc
• NukeSentinel <= 2.5.06 SQL Injection (mysql >= 4.0.24) Exploit
  • From: gmdarkfig
• Re: [Full-disclosure] PHP import_request_variables() arbitrary variable overwrite
  • From: Stefan Esser
• Re: PHP Classifieds 7.1 - Remote File Include Vulnerability
  • From: support
• Re: [Full-disclosure] PHP import_request_variables() arbitrary variable overwrite
  • From: Stefano Di Paola
• Re: [Full-disclosure] PHP import_request_variables() arbitrary variable overwrite
  • From: ascii
• [ GLSA 200703-10 ] KHTML: Cross-site scripting (XSS) vulnerability
  • From: Raphael Marichez
• Re: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues
  • From: Thor (Hammer of God)
• RE: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues
  • From: Roger A. Grimes
• Re: Firekeeper - IDS for Firefox available
  • From: Bob Beck
• Re: [Full-disclosure] PHP import_request_variables() arbitrary variable overwrite
  • From: Stefan Esser
• [SECURITY] [DSA 1265-1] New Mozilla packages fix several vulnerabilities
  • From: Martin Schulze
• Re: Re[2]: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues
  • From: Thor (Hammer of God)
• Remote File Include In Script PHP Photo Album
  • From: RaeD Hasadya
• [security bulletin] HPSBUX02129 SSRT061149 rev.2 - HP-UX running SLP, Remote Unauthorized Access
  • From: security-alert
• Re[2]: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues
  • From: 3APA3A
• Remote File Include In Script moodle-1.7.1
  • From: RaeD Hasadya
• Remote File Include In ClipShare.v1.5.3
  • From: RaeD Hasadya
• Wiki Remote Authentication Bypass Vulnerability
  • From: DoZ
• Re: Php Nuke POST XSS on steroids
  • From: ascii
• Re: Php Nuke POST XSS on steroids
  • From: Paul Laudanski
• AssetMan 2.4a <= (download_pdf.php) Remote File Disclosure Vulnerability
  • From: BorN To K!LL BorN To K!LL
• Re: Wiki Remote Authentication Bypass Vulnerability
  • From: Matt D. Harris
• Fantastico In all Version Cpanel 10.x <= local File Include
  • From: z3r0 z3r0.2.z3r0
• GuppY v4.0 remote del files/index
  • From: sn0oPy . team
• RIM BlackBerry Pearl 8100 Browser DoS
  • From: clappymonkey
• Re: PHP-Nuke <= 8.0 Cookie Manipulation (lang)
  • From: Paul Laudanski
• [security bulletin] HPSBUX02196 SSRT071318 rev.2 - HP-UX Java (JRE and JDK) Remote Execution of Arbitrary Code
  • From: security-alert
• Re: [Full-disclosure] PHP import_request_variables() arbitrary variable overwrite
  • From: Steven M. Christey
• Re: RIM BlackBerry Pearl 8100 Browser DoS
  • From: anon
• Re: Microsoft Windows Vista/2003/XP/2000 file management security issues
  • From: Steven M. Christey
• [USN-435-1] Xine vulnerability
  • From: Kees Cook
• Re: Firekeeper - IDS for Firefox available
  • From: Jan Wrobel
• RE: Xbox 360 Hypervisor Privilege Escalation Vulnerability
  • From: Dr Joe
• [USN-436-1] KTorrent vulnerabilities
  • From: Kees Cook
• [ECHO_ADV_69$2007] OES (Open Educational System) 0.1beta Remote File Inclusion Vulnerability
  • From: erdc
• Iframe-Cash/Iframe-Dollars Adware bundle...oooh... my ....god..
  • From: Thierry Zoller
• Call for Papers: DeepSec IDSC 2007 Europe/Vienna: 20-23 Nov 2007
  • From: Paul Böhm
• Re: Re: Firekeeper - IDS for Firefox available
  • From: irondell
• Re: Remote File Include In Script moodle-1.7.1
  • From: martin
• Re[2]: Microsoft Windows Vista/2003/XP/2000 file management security issues
  • From: 3APA3A
• Weekly Drawing Contest <= (check_vote.php) Remote File Disclosure Vuln
  • From: BorN To K!LL BorN To K!LL
• [ECHO_ADV_73$2007] MySQL Commander <= 2.7 (home) Remote File Inclusion Vulnerability
  • From: erdc
• Re: Iframe-Cash/Iframe-Dollars Adware bundle...oooh... my ....god..
  • From: Gadi Evron
• Re: Microsoft Windows Vista/2003/XP/2000 file management security issues
  • From: Richard Huxton
• Re: Iframe-Cash/Iframe-Dollars Adware bundle...oooh... my ....god..
  • From: Reversemode
• Re: Firekeeper - IDS for Firefox available
  • From: Jan Wrobel
• Re: Microsoft Windows Vista/2003/XP/2000 file management security issues
  • From: Daniel Hazelton
• [USN-432-2] GnuPG2, GPGME vulnerability
  • From: Kees Cook
• JGBBS 3.0beta1 Version Search.ASP "Author" SQL Injection Exploit
  • From: UniquE
• Re: Weekly Drawing Contest <= (check_vote.php) Remote File Disclosure Vuln
  • From: Mailinglists Address
• Re: Re: RIM BlackBerry Pearl 8100 Browser DoS
  • From: clappymonkey
• Re: Firekeeper - IDS for Firefox available
  • From: Bob Beck
• [ MDKSA-2007:061 ] - Updated mplayer packages to address buffer overflow vulnerability
  • From: security
• [ MDKSA-2007:062 ] - Updated xine-lib packages to address buffer overflow vulnerability
  • From: security
• Re: Microsoft Windows Vista/2003/XP/2000 file management security issues
  • From: Paweł Goleń
• Re: Php Nuke POST XSS on steroids
  • From: Paul Laudanski
• CORE-2007-0219: OpenBSD's IPv6 mbufs remote kernel buffer overflow
  • From: CORE Security Technologies Advisories
• [ GLSA 200703-11 ] Amarok: User-assisted remote execution of arbitrary code
  • From: Raphael Marichez
• n.runs-SA-2007.006 - PHProjekt 5.2.0 - Privilege escalation
  • From: security
• n.runs-SA-2007.005 - PHProjekt 5.2.0 - Cross Site Request Forgery
  • From: security
• [SECURITY] [DSA 1266-1] New gnupg packages fix signature forgery
  • From: Moritz Muehlenhoff
• n.runs-SA-2007.004 - PHProjekt 5.2.0 - Cross Site Scripting and Filter Evasion
  • From: security
• n.runs-SA-2007.003 - PHProjekt 5.2.0 - SQL Injection
  • From: security
• [ GLSA 200703-12 ] SILC Server: Denial of Service
  • From: Matthias Geerdsen
• SEC Consult SA-20070314-0 :: Apache HTTP Server / Tomcat directory traversal
  • From: David Matscheko
• SymEvent Driver Local Access System Denial of Service
  • From: Matousec - Transparent security Research
• New report on Windows Vista network attack surface
  • From: Jim Hoagland
• Re[2]: Microsoft Windows Vista/2003/XP/2000 file management security issues
  • From: 3APA3A
• Fwd: Python 2.5 (Modules/zlib) minigzip local buffer overflow vulnerability
  • From: starcadi starcadi
• Re: Re: [Full-disclosure] PHP import_request_variables() arbitrary variable overwrite
  • From: retrog
• iDefense Security Advisory 03.14.07: Trend Micro Antivirus UPX Parsing Kernel Divide by Zero Vulnerability
  • From: iDefense Labs
• [ECHO_ADV_71$2007] AMP v3.2 (base_path) Remote File Inclusion Vulnerability
  • From: erdc
• [ECHO_ADV_72$2007] CARE2X (root_path) Remote File Inclusion Vulnerability
  • From: erdc
• [ECHO_ADV_74$2007] WebCreator <= 0.2.6-rc3 (moddir) Remote File Inclusion Vulnerability
  • From: erdc
• Re: Remote File Include In Script PHP Photo Album
  • From: Steven M. Christey
• WSN Guest 1.21 Version Comments.PHP "ID" SQL Injection Exploit
  • From: UniquE
• Phishing using IE7 local resource vulnerability
  • From: avivra
• [ GLSA 200703-13 ] SSH Communications Security's Secure Shell Server: SFTP privilege escalation
  • From: Raphael Marichez
• Woltab Burning Board SQL Injection usergroups.php
  • From: x666
• Horde 3.1.4 (RC1) fixes XSS issue
  • From: Moritz Naumann
• [ECHO_ADV_76$2007] Company WebSite Builder PRO (INCLUDE_PATH) Remote File Inclusion Vulnerability
  • From: erdc
• IBM Rational ClearQuest Web - Cross Site Scripting
  • From: james
• [ECHO_ADV_75$2007] Groupit 2.00b5 (c_basepath) Remote File Inclusion Vulnerability
  • From: erdc
• Orion-Blog v2.0 Version Remote Privilege Escalation Exploit
  • From: UniquE
• Norton Insufficient validation of 'SymTDI' driver input buffer
  • From: Matousec - Transparent security Research
• Re: Iframe-Cash/Iframe-Dollars Adware bundle...oooh... my ....god..
  • From: Nicolas RUFF
• XSS vulnerability in the online help system of several Cisco products
  • From: cassio
• Remote File Inclusion in ViperWeb
  • From: asamad
• Horde IMP Webmail Client version H3 (4.1.4) fixes multiple XSS issues
  • From: Moritz Naumann
• iDefense Security Advisory 03.15.07: Horde Project Cleanup Script Arbitrary File Deletion Vulnerability
  • From: iDefense Labs
• PHP <= 4.4.6 ibase_connect() local buffer overflow
  • From: retrog
• Re: Phishing using IE7 local resource vulnerability
  • From: robert
• Re: XSS vulnerability in the online help system of several Cisco products
  • From: Eloy Paris
• RE: Phishing using IE7 local resource vulnerability
  • From: avivra
• QFTP (LIBFtp 3.1-1) (command line) sprintf() local buffer overflow
  • From: starcadi starcadi
• - Call for chapters - Handbook of Research on Digital Anti-forensics and In-security Governance
  • From: Jeimy Cano
• LIBFtp 5.0 (sprintf(), strcpy()) Multiple local buffer overflow
  • From: starcadi starcadi
• Re: Firekeeper - IDS for Firefox available
  • From: Gadi Evron
• vbulletin admincp sql injection
  • From: disfigure
• WebCalendar v0.9.45 (13 Dec 2004) (login.php) Remote File include
  • From: drackanz
• PHP Point Of Sale for osCommerce <= (index.php) Remote File Include Vuln
  • From: BorN To K!LL BorN To K!LL
• Absolute Image Gallery Gallery.ASP (categoryid) MSSQL Injection Exploit
  • From: UniquE
• Re[2]: Microsoft Windows Vista/2003/XP/2000 file management security issues
  • From: 3APA3A
• Re: [Full-disclosure] Woltab Burning Board SQL Injection usergroups.php
  • From: Bastian Ahrens
• DirectAdmin Cross Site Scripting XSS
  • From: Mandr4ke . root
• [SECURITY] [DSA 1267-1] New webcalendar packages fix remote file inclusion
  • From: Moritz Muehlenhoff
• MS07-012 Not Fixed
  • From: Greg Sinclair
• [CAID 34817, 35058, 35158, 35159]: CA BrightStor ARCserve Backup Tape Engine and Portmapper Vulnerabilities
  • From: Williams, James K
• Rot 13 <= (enkrypt.php) Remote File Disclosure Vulnerability
  • From: BorN To K!LL BorN To K!LL
• Oracle Portal PORTAL.wwv_main.render_warning_screen XSS
  • From: Sea Shark
• RE: [VulnWatch] iDefense Security Advisory 03.14.07: Trend Micro Antivirus UPX Parsing Kernel Divide by Zero Vulnerability
  • From: Topolski, Leo
• Re: fx-APP Version 0.0.8.1
  • From: osdesk
• Call For Papers - IT Underground Dublin
  • From: Marcin Tkaczyk
• April, 2007 is the "Month of Myspace Bugs"
  • From: mondo_armando
• iDefense Security Advisory 03.16.07: Multiple Vendor libwpd Multiple Buffer Overflow Vulnerabilities
  • From: iDefense Labs
• Your Opinion
  • From: Mark Litchfield
• Particle Blogger All Version Post.PHP (PostID) Remote SQL Injection Exploit
  • From: UniquE
• rPSA-2007-0056-1 gnupg
  • From: rPath Update Announcements
• Re: Your Opinion
  • From: bugtraq
• rPSA-2007-0057-1 libwpd
  • From: rPath Update Announcements
• Re: Your Opinion
  • From: Jonathan Glass (GM)
• RE: Your Opinion
  • From: Mario Contestabile
• Re: Your Opinion
  • From: Crispin Cowan
• [ MDKSA-2007:063 ] - Updated libwpd packages to address heap overflow vulnerabilities
  • From: security
• [ MDKSA-2007:064 ] - Updated openoffice.org packages to address libwpd heap overflow vulnerabilities
  • From: security
• Re: [Bogus] Lazarus Guestbook (admin.php)Remote File Include Expliot
  • From: Steven M. Christey
• [NETRAGARD-20070316 SECURITY ADVISORY][FrontBase Database <= 4.2.7 ALL PLATFORMS][REMOTE BUFFER OVERFLOW CONDITION][LEVEL: EASY][RISK:MEDIUM]
  • From: Netragard Security Advisories
• Re: Your Opinion
  • From: Neil Dickey
• Re: Your Opinion
  • From: William A. Rowe, Jr.
• RE: Your Opinion
  • From: Scott Blake
• [ GLSA 200703-14 ] Asterisk: SIP Denial of Service
  • From: Raphael Marichez
• [ GLSA 200703-15 ] PostgreSQL: Multiple vulnerabilities
  • From: Raphael Marichez
• [ GLSA 200703-16 ] Apache JK Tomcat Connector: Remote execution of arbitrary code
  • From: Raphael Marichez
• Bypassing Mcafee Entreprise Password Protection
  • From: thesinoda
• CLBOX <= (signup.php header) Remote File Include Vulnerability
  • From: BorN To K!LL BorN To K!LL
• Re: Your Opinion
  • From: The Fungi
• Your Opinion +
  • From: Mark Litchfield
• Re: Your Opinion
  • From: Casper . Dik
• RE: Your Opinion
  • From: Jim Harrison
• Rhapsody IRC 0.28b (NICK) Multiple fs and bof vulnerability
  • From: starcadi
• Re: Bypassing Mcafee Entreprise Password Protection
  • From: 3APA3A
• [SECURITY] [DSA 1268-1] New libwpd packages fix arbitrary code execution
  • From: Martin Schulze
• Full Disclosure: Arbitrary execution vulnerability in SQL-Ledger and LedgerSMB
  • From: Chris Travers
• Net Portal Dynamic System (NPDS) <= 5.10 Remote Code Execution 0day
  • From: gmdarkfig
• [SECURITY] [DSA 1269-1] New lookup-el packages fix insecure temporary file
  • From: Martin Schulze
• MetaForum <= 0.513 Beta - Remote file upload Vulnerability
  • From: aeroxteam------nospam-----
• [ GLSA 200703-17 ] ulogd: Remote execution of arbitrary code
  • From: Raphael Marichez
• [ GLSA 200703-18 ] Mozilla Thunderbird: Multiple vulnerabilities
  • From: Raphael Marichez
• [ GLSA 200703-19 ] LTSP: Authentication bypass in included LibVNCServer code
  • From: Raphael Marichez
• [ GLSA 200703-20 ] LSAT: Insecure temporary file creation
  • From: Raphael Marichez
• RE: Bypassing Mcafee Entreprise Password Protection
  • From: Rogheden Anders
• Unclassified NewsBoard 1.6.3 multiples logs disclosure
  • From: none
• Layered Defense Research Advisory: F-Secure Anti-Virus Client Security 6.02 Format String Vulnerability
  • From: dh
• CCleaguePro_V1.0.1RC1 Directory Traversal Vulnerability
  • From: snakeapollon
• phpx 3.5.15 multiples vulnerabilities
  • From: none
• Re: Your Opinion
  • From: Forrest J. Cavalier III
• RE: Your Opinion
  • From: Alex Eckelberry
• Re: Your Opinion +
  • From: Alex Belits
• Conflict of Interest - My summary
  • From: Mark Litchfield
• [Reversemode Advisory] Microsoft Windows Ndistapi.sys IRQL escalation
  • From: Reversemode
• w-agora version 4.2.1 Multiple Path Disclosure Vulnerabilities
  • From: jesper . jurcenoks
• w-agora version 4.2.1 Information Disclosure Vulnerability
  • From: jesper . jurcenoks
• Re: CCleaguePro_V1.0.1RC1 Directory Traversal Vulnerability
  • From: str0ke
• [USN-437-1] libwpd vulnerability
  • From: Kees Cook
• ZynOS v3.40 One packet killer
  • From: Joxean Koret
• Oracle 10g Dynamic Monitoring Services XSS /servlet/Spy
  • From: Sea Shark
• Web Wiz Forums 8.05 (MySQL version) SQL Injection
  • From: Ivan Fratric
• Re: WebCalendar v0.9.45 (13 Dec 2004) (login.php) Remote File include
  • From: craig
• Advisory - Redirection Vulnerability in wp-login.php.
  • From: Metaeye SG
• w-agora [multiples file upload,xss,full path disclosure,error sql]
  • From: none
• Call For Papers - IT Underground Dublin
  • From: marcin . tkaczyk
• Microsoft coverup ? Stolen Xbox live accounts list of known victims - Please Help
  • From: Kevin Finisterre (lists)
• Re: Conflict of Interest - My summary
  • From: crazy frog crazy frog
• Re: Your Opinion
  • From: Andrew Kramer
• RE: Your Opinion
  • From: Jim Harrison
• RE: Your Opinion
  • From: Jim Harrison
• RE: Your Opinion
  • From: jay.tomas
• Re: Your Opinion
  • From: Paul Stepowski
• Re: Your Opinion
  • From: Jack Lloyd
• Helix Server heap overflow
  • From: research
• [SECURITY] [DSA 1271-1] New openafs packages fix remote privilege escalation bug
  • From: Noah Meyerhans
• Linksys WAG200G - Information disclosure
  • From: dniggebrugge
• Re: Your Opinion +
  • From: Thor (Hammer of God)
• [SECURITY] [DSA 1270-1] New OpenOffice.org packages fix several vulnerabilities
  • From: Martin Schulze
• [ GLSA 200703-22 ] Mozilla Network Security Service: Remote execution of arbitrary code
  • From: Raphael Marichez
• [ GLSA 200703-23 ] WordPress: Multiple vulnerabilities
  • From: Raphael Marichez
• Re: Linksys WAG200G - Information disclosure
  • From: Shawn Merdinger
• [ GLSA 200703-21 ] PHP: Multiple vulnerabilities
  • From: Raphael Marichez
• [ MDKSA-2007:065 ] - Updated nas packages address multiple vulnerabilities
  • From: security
• [ MDKSA-2007:066 ] - Updated OpenAFS packages address vulnerability
  • From: security
• [USN-438-1] Inkscape vulnerability
  • From: Kees Cook
• Secunia Research: InterActual Player / CinePlayer IASystemInfo.dll ActiveX Control Buffer Overflow
  • From: Secunia Research
• Secunia Research: Evolution Shared Memo Categories Format String Vulnerability
  • From: Secunia Research
• Secunia Research: XMMS Integer Overflow and Underflow Vulnerabilities
  • From: Secunia Research
• [security bulletin] HPSBUX02156 SSRT061236 rev.2 - HP-UX Running Thunderbird, Remote Unauthorized Access or Elevation of Privileges or Denial of Service (DoS)
  • From: security-alert
• HPSBGN02189 SSRT071297 rev.2 - ServiceGuard for Linux, Remote Unauthorized Access
  • From: security-alert
• RE: Your Opinion
  • From: Neale Green
• Two new DoS Vulnerabilities in Asterisk Fixed
  • From: Matt Riddell (NZ)
• **SubHub v2.3.0**
  • From: anon
• [ECHO_ADV_77$2007] Study planner (Studiewijzer) <= 0.15 Remote File Inclusion Vulnerability
  • From: erdc
• CFP for RAID 2007: Extended due date for papers: April 8th
  • From: jeffh
• [USN-439-1] file vulnerability
  • From: Kees Cook
• [USN-440-1] MySQL vulnerability
  • From: Kees Cook
• FLEA-2007-0001-1: firefox
  • From: Foresight Linux Essential Announcement Service
• rPSA-2007-0059-1 file
  • From: rPath Update Announcements
• ManageEngine Firewall Analyzer arbitrary file disclosure to authorized user
  • From: yearsilent
• Remote File Include In copyright © James Coyle; JCcorp
  • From: RaeD Hasadya
• Remote File Include In Coppermine Photo Gallery
  • From: RaeD Hasadya
• [ MDKSA-2007:067 ] - Updated file packages fix heap-based buffer overflow vulnerability
  • From: security
• [NB07-22] Multiple vulnerabilities in NETxEIB OPC server
  • From: Lluis Mora
• [NB07-17] Multiple vulnerabilities in Takebishi Electric DeviceXplorer SYSMAC OPC server
  • From: Lluis Mora
• [NB07-07] Multiple vulnerabilities in Takebishi Electric DeviceXplorer HIDIC OPC server
  • From: Lluis Mora
• [NB07-08] Multiple vulnerabilities in Takebishi Electric DeviceXplorer MELSEC OPC server
  • From: Lluis Mora
• [SECURITY] [DSA 1272-1] New tcpdump packages fix denial of service
  • From: Moritz Muehlenhoff
• [NB07-09] Multiple vulnerabilities in Takebishi Electric DeviceXplorer FA-M3 OPC server
  • From: Lluis Mora
• [NB07-10] Multiple vulnerabilities in Takebishi Electric DeviceXplorer MODBUS OPC server
  • From: Lluis Mora
• [ MDKSA-2007:068 ] - Updated squid packages fix DoS vulnerability
  • From: security
• CRLF injection in PHP ftp function
  • From: fangxiaodun
• [ MDKSA-2007:069 ] - Updated inkscape packages to format string vulnerability
  • From: security
• iDefense Security Advisory 03.23.07: DataRescue IDA Pro Remote Debugger Server Authentication Bypass Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 03.23.07: Sun Java System Directory Server 5.2 Uninitialized Pointer Cleanup Design Error Vulnerability
  • From: iDefense Labs
• Joomla com_joomlaboard 1.1.x Branch (sbp) Multiple Remote File Include Vulnerabi
  • From: Cold - Zero
• File Upload System V1.0 (AD_BODY_TEMP) multiple file include
  • From: ngevedBangetAsli
• FLEA-2007-0002-1: inkscape
  • From: Foresight Linux Essential Announcement Service
• Remote File Include In phpBB-2.0.19
  • From: RaeD Hasadya
• BOGUS: Remote File Include In phpBB-2.0.19
  • From: Cornelius Riemenschneider
• Re: Remote File Include In phpBB-2.0.19
  • From: neothermic
• CcCounter 2.0 cross-site scripting vulnerability
  • From: localexploit
• Path Disclosure - Wordpress 2.1.2
  • From: lj
• Horde Webmail Multiple HTML Injection vulnerability
  • From: DoZ
• Fizzle : Firefox Extension Vulnerability
  • From: CrYpTiC MauleR
• Mephisto blog is vulnerable to XSS
  • From: Sergey Tikhonov
• Satel Lite for PhpNuke (Satellite.php) <= Local File Inclusion
  • From: stormhacker
• Re: Linksys WAG200G - Information disclosure
  • From: Bartłomiej Ochman
• Multiple XSS in IronMail
  • From: Javier Olascoaga
• Re: [Full-disclosure] XSS at Aon.at, Austrian ISP
  • From: Nikolay Kichukov
• PHP 5.2.1 with PECL phpDOC local buffer overflow
  • From: retrog
• Re: **SubHub v2.3.0**
  • From: webmaster
• FLEA-2007-0003-1: cups
  • From: Foresight Linux Essential Announcement Service
• Playstation 3 "Remote Play" Remote DoS Exploit
  • From: mak0b
• Libero.it (italian ISP) XSS vulnerability
  • From: rosario . valotta
• [USN-441-1] Squid vulnerability
  • From: Kees Cook
• [USN-442-1] Evolution vulnerability
  • From: Kees Cook
• [ GLSA 200703-24 ] mgv: Stack overflow in included gv code
  • From: Raphael Marichez
• Re: Horde Webmail Multiple HTML Injection vulnerability
  • From: Jan Schneider
• Re: Path Disclosure - Wordpress 2.1.2
  • From: jm
• Xoops All Version -Articles- Print.PHP (ID) Blind SQL Injection Exploit And PoC
  • From: UniquE
• Metasploit Framework 3.0 RELEASED!
  • From: H D Moore
• [KAPDA::#64] - Flexbb Sql Injection
  • From: alireza hassani
• [ECHO_ADV_78$2007] C-Arbre <= 0.6PR7 (root_path) Remote File Inclusion Vulnerability
  • From: erdc
• [KDE Security Advisory] KDE ioslave PASV port scanning vulnerability
  • From: Dirk Mueller
• Yahoo! Messenger Auth Bypass Vulnerability
  • From: kishor . tech
• Linux Kernel DCCP Memory Disclosure Vulnerability
  • From: Robert Święcki
• [ MDKSA-2007:070 ] - Updated evolution packages to address vulnerability
  • From: security
• Buffer Overflow in InterVetions' NaviCopa HTTP server 2.01
  • From: skillTube.com
• [SECURITY] [DSA 1273-1] New nas packages fix multiple remote vulnerabilities
  • From: Noah Meyerhans
• [USN-443-1] Firefox vulnerability
  • From: Kees Cook
• Re: [Full-disclosure] Linux Kernel DCCP Memory Disclosure Vulnerability
  • From: Robert Święcki
• Re: RE: Xbox 360 Hypervisor Privilege Escalation Vulnerability
  • From: 5150sd
• Re: Xoops All Version -Articles- Print.PHP (ID) Blind SQL Injection Exploit And PoC
  • From: andy
• [USN-444-1] OpenOffice.org vulnerabilities
  • From: Kees Cook
• [USN-445-1] XMMS vulnerabilities
  • From: Kees Cook
• Bypass phishing protection in Firefox / Opera
  • From: zonafirefox
• [USN-446-1] NAS vulnerabilities
  • From: Kees Cook
• Corel Wordperfect Office X3 Stack Overflow
  • From: jonny
• [Full-Disclosure] Another XSS vulnerability in italian Libero.it
  • From: Matteo G.P. Flora
• iDefense Security Advisory 03.28.07: IBM Lotus Domino Web Access Cross Site Scripting Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 03.28.07: IBM Lotus Domino Server LDAP Request Invalid DN Message Heap Overflow Vulnerability
  • From: iDefense Labs
• ZDI-07-011: IBM Lotus Domino IMAP Server CRAM-MD5 Authentication Buffer Overflow Vulnerability
  • From: zdi-disclosures
• Re: Multiple Vulnerabilities In osTicket
  • From: eticket
• Re: [SECURITY ALERT] osTicket bugs
  • From: eticket
• Re: SecurityVulns.com: Microsoft Visual C++ 8.0 standard library time functions invalid assertion DoS (Problem 3000).
  • From: William A. Rowe, Jr.
• Cisco Security Advisory: Multiple Cisco Unified CallManager and Presence Server Denial of Service Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• Re: [viewvc-users] Update: ViewCVS and ViewVC 'checkout view' content type fixation issue
  • From: C. Michael Pilato
• Denial of Service Vulnerabilities in TrueCrypt 4.3 Linux (re. bid 23180)
  • From: Tim Rees
• Update: ViewCVS and ViewVC 'checkout view' content type fixation issue
  • From: Moritz Naumann
• [SECURITY] [DSA 1270-2] New OpenOffice.org packages fix several vulnerabilities
  • From: Martin Schulze
• Arbitrary Command Execution in DataDomain Administrator Interface
  • From: Elliot Kendall
• rPSA-2007-0061-1 inkscape
  • From: rPath Update Announcements
• Re: [VulnWatch] Microsoft Windows Vista Slideshow Unspecified Blue Screen Of Death Vulnerability
  • From: 3APA3A
• Re: Bypass phishing protection in Firefox / Opera
  • From: Anonymous
• Xoops Module Friendfinder <= 3.3 (view.php id) BLIND SQL Injection Exploit
  • From: ajannhwt
• Re: ManageEngine Firewall Analyzer arbitrary file disclosure to authorized user
  • From: support
• Advanced Login <= 0.7 (root) Remote File Inclusion Vulnerability
  • From: bithedz
• Widespread vulnerabilities in Libero.it/Infostrada.it web portals
  • From: rosario . valotta
• [Full-disclosure] [USN-447-1] KDE library vulnerabilities
  • From: Kees Cook
• Re: Re: [Full-disclosure] Linux Kernel DCCP Memory Disclosure Vulnerability
  • From: acme
• Windows Live Spaces logged user NetworkSetup.aspx cross site scripting
  • From: paolo . difebbo
• Re: Re: Bypass phishing protection in Firefox / Opera
  • From: bob
• AOL 9.0 Deskbar.dll/Toolbar.dll DoS Vulnerability
  • From: Justin Seitz
• [ MDKSA-2007:071 ] - Updated xmms packages to address integer vulnerabilities
  • From: security
• iDefense Security Advisory 03.29.07: IBM Lotus Sametime JNILoader Arbitrary DLL Load Vulnerability
  • From: iDefense Labs
• FLEA-2007-0004-1: openoffice.org
  • From: Foresight Linux Essential Announcement Service
• [ MDKSA-2007:072 ] - Updated kdelibs packages to address FTP PASV issue in konqueror
  • From: security
• [ GLSA 200703-25 ] Ekiga: Format string vulnerability
  • From: Raphael Marichez
• [ MDKSA-2007:073 ] - Updated openoffice.org packages to address vulnerabilities
  • From: security
• FLEA-2007-0005-1: slocate
  • From: Foresight Linux Essential Announcement Service
• Re: Re: Bypass phishing protection in Firefox / Opera
  • From: zonafirefox
• Mybb Change Password Vulnerability
  • From: security
• 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038)
  • From: Alexander Sotirov
• CA Brightstor Backup Mediasvr.exe Remote Code Vulnerability
  • From: M. Shirk
• VMSA-2007-0002 VMware ESX security updates
  • From: VMware Security team
• DrakeCMS multiple vulerabilities
  • From: security
• AIX 4.3 lsmcode local root command execution
  • From: pr1nce_empire
• Re: Bypass phishing protection in Firefox / Opera
  • From: Łukasz Pilorz
• The Week Of Vista Bugs [TWOVB]
  • From: TWOVB Team
• [ECHO_ADV_80$2007] Softerra Time-Assistant <= 6.2 (inc_dir) Remote File Inclusion Vulnerability
  • From: erdc
• Re: ManageEngine Firewall Analyzer arbitrary file disclosure to authorized user
  • From: support
• ANI Zeroday, Third Party Patch
  • From: Marc Maiffret
• [ GLSA 200703-26 ] file: Integer underflow
  • From: Raphael Marichez
• Busting The Bluetooth Myth
  • From: Max Moser
• TSRT-07-03: America Online SuperBuddy ActiveX Control Code Execution Vulnerability
  • From: TSRT