Mail Index

• Thread Index

• [ GLSA 200712-23 ] Wireshark: Multiple vulnerabilities
  • From: Robert Buchholz
• [ GLSA 200712-24 ] AMD64 x86 emulation GTK+ library: User-assisted execution of arbitrary code
  • From: Robert Buchholz
• [ GLSA 200712-25 ] OpenOffice.org: User-assisted arbitrary code execution
  • From: Pierre-Yves Rofes
• Bitweaver source code disclosure, arbitrary file upload
  • From: admin
• Fingerprints in Astaro Security Gateway v7.1
  • From: morin . josh
• [ GLSA 200712-22 ] Opera: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• Re: Re: Cryptome: NSA has real-time access to Hushmail servers
  • From: gb
• milliscripts (dir.php) Cross-Site Scripting Vulnerability
  • From: sys-project
• LiveCart Multiple Cross-Site Scripting Vulnerabilities
  • From: DoZ
• RE: Cryptome: NSA has real-time access to Hushmail servers
  • From: Juha-Matti Laurio
• Instant Softwares DatingSite SQL Injection
  • From: The-0utl4w-noreply
• Re: Cryptome: NSA has real-time access to Hushmail servers
  • From: Seth
• Re: TalkBack 2.2.7 Multiple Remote File Inclusion Vulnerabilities
  • From: oldguy
• RE: Cryptome: NSA has real-time access to Hushmail servers
  • From: Kevin Reiter
• Re: Cryptome: NSA has real-time access to Hushmail servers
  • From: mark seiden-via mac
• Re: Cryptome: NSA has real-time access to Hushmail servers
  • From: J. Oquendo
• [HSC Security Group] Multiple CSRF in Joomla all versions - Complete compromise
  • From: zinho
• RE: Cryptome: NSA has real-time access to Hushmail servers
  • From: Craig Wright
• RE: Cryptome: NSA has real-time access to Hushmail servers
  • From: Thor (Hammer of God)
• Re: Cryptome: NSA has real-time access to Hushmail servers
  • From: Jay Hennigan
• Re: Cryptome: NSA has real-time access to Hushmail servers
  • From: Rob Thompson
• Cross-Site Scripting (XSS) in phpWebSite 1.4.0 search
  • From: Audun Larsen
• MODx CMS Source code disclosure, local file inclusion
  • From: admin
• XSS Vulnerabilities in Common Shockwave Flash Files
  • From: rich cannings
• Buffer-overflow and format string in White_Dune 0.29beta791
  • From: Luigi Auriemma
• phpBB2 2.0.22 Cross Site Scripting Vulnerability
  • From: bugtraq
• Multiple vulnerabilities in Georgia SoftWorks SSH2 Server 7.01.0003
  • From: Luigi Auriemma
• AST-2008-001: Crash from transfer using BYE with Also header
  • From: Asterisk Security Team
• Yet another Dialog Spoofing Vulnerability - Firefox Basic Authentication
  • From: avivra
• [security bulletin] HPSBGN02301 SSRT071508 rev.2 - HP Software Update Running on Windows, Remote Execution of Arbitrary Code, Gain Privileged Access
  • From: security-alert
• Re: [Full-disclosure] Yet another Dialog Spoofing Vulnerability - Firefox Basic Authentication
  • From: avivra
• Re: [Full-disclosure] Yet another Dialog Spoofing Vulnerability - Firefox Basic Authentication
  • From: Michal Zalewski
• xss in w3-msql error page
  • From: vivek_infosec
• [ MDVSA-2008:1 ] - Updated wireshark packages fix multiple vulnerabilities
  • From: security
• Re: phpBB2 2.0.22 Cross Site Scripting Vulnerability
  • From: neothermic
• Re: Cryptome: NSA has real-time access to Hushmail servers
  • From: John Simpson
• Re: Cryptome: NSA has real-time access to Hushmail servers
  • From: Lee Dilkie
• RE: Latest round of web hacking incidents for 2007 & Project news
  • From: Ofer Shezaf
• RE: Re: Cryptome: NSA has real-time access to Hushmail servers
  • From: M. Burnett
• RE: Latest round of web hacking incidents for 2007 & Project news
  • From: Memisyazici, Aras
• [SECURITY] [DSA 1443-1] New tcpreen packages fix denial of service
  • From: Moritz Muehlenhoff
• Re: Latest round of web hacking incidents for 2007 & Project news
  • From: Peter Watkins
• rPSA-2008-0001-1 dovecot
  • From: rPath Update Announcements
• multiple CAPTCHA automation test bypass digest
  • From: 3APA3A
• Re: Re: phpBB2 2.0.22 Cross Site Scripting Vulnerability
  • From: admin
• Re: rPSA-2008-0001-1 dovecot
  • From: Dominic Hargreaves
• [SECURITY] [DSA 1444-1] New php5 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• securityvulns.com russian vulnerabilities digest
  • From: 3APA3A
• [SECURITY] [DSA 1446-1] New wireshark packages fix denial of service
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1445-1] New maradns packages fix denial of service
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1447-1] New tomcat5.5 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Re: phpBB2 2.0.22 Cross Site Scripting Vulnerability
  • From: neothermic
• rPSA-2008-0004-1 tshark wireshark
  • From: rPath Update Announcements
• FortiGuard: URL Filtering Application Bypass Vulnerability
  • From: Danux
• Re: rPSA-2008-0001-1 dovecot
  • From: Steven M. Christey
• Re: Latest round of web hacking incidents for 2007 & Project news
  • From: s f
• AW: phpBB2 2.0.22 Cross Site Scripting Vulnerability
  • From: Aufmuth Andreas
• Re: rPSA-2008-0001-1 dovecot
  • From: Dominic Hargreaves
• Re: rPSA-2008-0001-1 dovecot
  • From: Jonathan Smith
• Multiple vulnerabilities in yaSSL 1.7.5
  • From: Luigi Auriemma
• Some DoS in some telnet servers
  • From: Luigi Auriemma
• Pre-auth buffer-overflow in mySQL through yaSSL
  • From: Luigi Auriemma
• Re: FortiGuard: URL Filtering Application Bypass Vulnerability
  • From: 3APA3A
• iDefense Security Advisory 12.24.07: Novell ZENworks Endpoint Security Management Local Privilege Escalation Vulnerability
  • From: iDefense Labs
• rPSA-2008-0006-1 libexif
  • From: rPath Update Announcements
• NetRisk 1.9.7 Remote File Inclusion Vulnerability
  • From: erne
• INVISION POWER BOARD 2.1.7 ACTIVE XSS/SQL INJECTION EXPLOIT
  • From: underwater
• [ MDVSA-2008:002 ] - Updated squid package fixes remote denial of service
  • From: security
• [SECURITY] [DSA 1449-1] New loop-aes-utils packages fix programming error
  • From: Steve Kemp
• rPSA-2008-0007-1 tetex tetex-afm tetex-dvips tetex-fonts tetex-latex tetex-xdvi
  • From: rPath Update Announcements
• [SECURITY] [DSA 1450-1] New util-linux packages fix programming error
  • From: Steve Kemp
• [SECURITY] [DSA 1448-1] New eggdrop packages fix execution of arbitrary code
  • From: Steve Kemp
• rPSA-2008-0008-1 cups
  • From: rPath Update Announcements
• [SECURITY] [DSA 1448-1] New eggdrop packages fix arbitrary code execution
  • From: Steve Kemp
• Aruba Mobility Controller User Authentication Vulnerability - Aruba Advisory ID: AID-122207
  • From: Robbie Gill
• vBulletin 3.6.8 XSRF/XSS Vulnerability
  • From: nbbn
• eTicket 1.5.5.2 Multiple Vulnerabilities
  • From: L4teral
• [HSC] Snitz Forums Multiple Vulnerabilities
  • From: DoZ
• netrisk 1.9.7 Multiple Remote Vulnerabilities (sql injection/xss)
  • From: hadihadi_zedehal_2006
• OneCMS Vulnerabilities
  • From: admin
• New Web Hacking Incidents at WHID
  • From: Ofer Shezaf
• [Reversemode Paper] Exploiting WDM Audio Drivers
  • From: Reversemode
• [SECURITY] [DSA 1451-1] New mysql-dfsg-5.0 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Linksys WRT54 GL - Session riding (CSRF)
  • From: tomaz . bratusa
• SocialURL Login Page Cross-Site Scripting
  • From: morin . josh
• Re: vBulletin 3.6.8 XSRF/XSS Vulnerability
  • From: nbbn
• PostgreSQL 2007-01-07 Cumulative Security Release
  • From: Josh Berkus
• [SECURITY] [DSA 1452-1] New wzdftpd packages fix denial of service
  • From: Steve Kemp
• [SECURITY] [DSA 1453-1] New tomcat5 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• LayerOne 2008 - CFP Released
  • From: Layer One
• Million Dollar Script 2.0.14 Remote File Disclosure Vulnerability.
  • From: p4imi0
• CORE-2007-1106: SynCE Remote Command Injection
  • From: CORE Security Technologies Advisories
• [SECURITY] [DSA 1454-1] New freetype packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• Re: Linksys WRT54 GL - Session riding (CSRF)
  • From: Jan Heisterkamp
• Re: Linksys WRT54 GL - Session riding (CSRF)
  • From: Jan Heisterkamp
• PWDumpX v1.4 - Dumps domain password cache, LSA secrets, password hashes, and password history hashes.
  • From: Reed Arvin
• PWDumpX v1.0 and PWDumpX v1.1 updated - bug fixes
  • From: Reed Arvin
• RE: [HSC] Snitz Forums Multiple Vulnerabilities
  • From: Aaron Cake
• iDefense Security Advisory 01.07.08: Motorola netOctopus Agent MSR Write Privilege Escalation Vulnerability
  • From: iDefense Labs
• VMSA-2008-0001 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages
  • From: VMware Security team
• [ MDVSA-2008:001-1 ] - Updated wireshark packages fix multiple vulnerabilities
  • From: security
• [USN-560-1] Tomboy vulnerability
  • From: Jamie Strandboge
• sysHotel On Line Remote File Disclosure Vulnerability.
  • From: p4imi0
• VMSA-2008-0002 Low severity security update for VirtualCenter and ESX Server 3.0.2, and ESX 3.0.1
  • From: VMware Security team
• Corsaire Security Advisory: Sun J2RE DoS issue
  • From: advisories
• HPSBUX02153 SSRT061181 rev.7 - HP-UX Running Firefox, Remote Unauthorized Access or Elevation of Privileges or Denial of Service (DoS)
  • From: security-alert
• HPSBUX02156 SSRT061236 rev.4 - HP-UX Running Thunderbird, Remote Unauthorized Access or Elevation of Privileges or Denial of Service (DoS)
  • From: security-alert
• Level-One WBR-3460A Grants Root Access
  • From: anastasiosm
• Joomla 1.0.13 CSRF
  • From: J. Carlos Nieto
• Re: Joomla 1.0.13 CSRF
  • From: J. Carlos Nieto
• [SECURITY] [DSA 1455-1] New libarchive1 packages fix several problems
  • From: Steve Kemp
• ERRATA: [ GLSA 200709-07 ] Eggdrop: Buffer overflow
  • From: Robert Buchholz
• LFI in Tuned Studios Templates
  • From: Digital Security Research Group [DSecRG]
• [security bulletin] HPSBMA02239 SSRT061260 rev.3 - HP OpenView Operations (OVO) Agents Running Shared Trace Service, Remote Arbitrary Code Execution
  • From: security-alert
• First (Major) web hacking incidents for 2008. Sign of the year to come?
  • From: Ofer Shezaf
• [INFIGO 2008-01-06]: McAfee E-Business Server Remote Preauth Code Execution / DoS
  • From: infocus
• Re: First (Major) web hacking incidents for 2008. Sign of the year to come?
  • From: Paul Schmehl
• [USN-562-1] opal vulnerability
  • From: Kees Cook
• [ MDVSA-2008:004 ] - Updated postgresql packages fix denial of service and privilege escalation issues
  • From: security
• Privileg escalation in Omegasoft Insel 7
  • From: MC Iglo
• [ GLSA 200801-01 ] unp: Arbitrary command execution
  • From: Robert Buchholz
• [ MDVSA-2008:003 ] - Updated clamav packages fix multiple vulnerabilities
  • From: security
• Pre-auth remote commands execution in SAP MaxDB 7.6.03.07
  • From: Luigi Auriemma
• [INFIGO-2008-01-06]: McAfee E-Business Server Remote Preauth Code Execution / DoS - Corrected
  • From: infocus
• [USN-561-1] pwlib vulnerability
  • From: Kees Cook
• [USN-564-1] Net-SNMP vulnerability
  • From: Jamie Strandboge
• [ GLSA 200801-02 ] R: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [USN-563-1] CUPS vulnerabilities
  • From: Kees Cook
• [ MDVSA-2008:004 ] - Updated postgresql packages fix denial of service and privilege escalation issues
  • From: security
• iDefense Security Advisory 01.09.08: Novell NetWare Client nicm.sys Local Privilege Escalation Vulnerability
  • From: iDefense Labs
• [ GLSA 200801-03 ] Claws Mail: Insecure temporary file creation
  • From: Pierre-Yves Rofes
• [SECURITY] [DSA 1456-1] New fail2ban packages fix denial of service
  • From: Thijs Kinkhorst
• [ GLSA 200801-05 ] Squid: Denial of Service
  • From: Pierre-Yves Rofes
• [USN-565-1] Squid vulnerability
  • From: Kees Cook
• [ GLSA 200801-04 ] OpenAFS: Denial of Service
  • From: Pierre-Yves Rofes
• [ MDVSA-2008:005 ] - Updated libexif packages fix multiple vulnerabilities
  • From: security
• [SECURITY] [DSA 1457-1] New dovecot packages fix information disclosure
  • From: Thijs Kinkhorst
• uCon 2008 call for participation - Recife, Brazil
  • From: ucon
• Simple Machines Forum Cross-Site Scripting Vulnerabilities
  • From: DoZ
• PR07-06, PR07-07, PR07-08, PR07-09, PR07-10, PR07-12: Several XSS, Cross-domain Redirection and Frame Injection on Sun Java System Identity Manager
  • From: ProCheckUp Research
• [USN-566-1] OpenSSH vulnerability
  • From: Kees Cook
• Digital Armaments January-February Hacking Challenge: Special 20.000$ Prize - Windows Vulnerabilities and Exploit
  • From: info
• [ GLSA 200801-06 ] Xfce: Multiple vulnerabilities
  • From: Robert Buchholz
• BT Home Flub: Pwnin the BT Home Hub (5) - exploiting IGDs remotely via UPnP
  • From: Adrian P
• Word 2007 Email as PDF path disclosure flaw
  • From: ebk_lists
• Buffer-overflow in Quicktime Player 7.3.1.70
  • From: Luigi Auriemma
• MTCMS <=2.0 SQL Injection Vulnerbility
  • From: hadihadi_zedehal_2006
• [SECURITY] [DSA 1458-1] New openafs packages fix denial of service vulnerability
  • From: Noah Meyerhans
• [ MDVSA-2008:006 ] - Updated exiv2 packages fix vulnerability
  • From: security
• Re: Buffer-overflow in Quicktime Player 7.3.1.70
  • From: Marcello Barnaba (void)
• [USN-567-1] Dovecot vulnerability
  • From: Kees Cook
• Re: Re: Buffer-overflow in Quicktime Player 7.3.1.70
  • From: none
• re-resting of zzuf results
  • From: Hanno Böck
• At long last -- Extra Outlooks!
  • From: Thor (Hammer of God)
• [ MDVSA-2008:007 ] - Updated madwifi-source, wpa_supplicant packages fix vulnerabilities
  • From: security
• SecurityReason - Apache (mod_proxy_ftp) Undefined Charset UTF-7 XSS Vulnerability
  • From: sp3x
• Re: Linksys WRT54 GL - Session riding (CSRF)
  • From: Florian Weimer
• SecurityReason - Apache2 CSRF, XSS, Memory Corruption and Denial of Service Vulnerability
  • From: sp3x
• ImageAlbum Remote SQL Injection Vulnerabilities
  • From: db
• Re: Buffer-overflow in Quicktime Player 7.3.1.70
  • From: str0ke
• CFP: EuroSec Workshop (March 31st, 2008)
  • From: Stefano Zanero
• Member Area System (MAS) Remote File Include Vulnerability (view_func.php)
  • From: ship_nx
• Naymz multiple XSS
  • From: morin . josh
• Re: At long last -- Extra Outlooks!
  • From: Alexander Bochmann
• Re: Buffer-overflow in Quicktime Player 7.3.1.70
  • From: Luigi Auriemma
• Cross site scripting (XSS) in Moodle 1.8.3
  • From: Hanno Böck
• [ MDVSA-2008:010 ] - Updated libxml2 packages fix DoS vulnerability
  • From: security
• [ MDVSA-2008:011 ] - Updated rsync packages fix restrictions bypass vulnerabilities
  • From: security
• Safari 2 Denial of Service
  • From: S21sec labs
• [ MDVSA-2008:009 ] - Updated autofs packages fix insecure hosts configuration
  • From: security
• [ MDVSA-2008:008 ] - Updated kernel packages fix multiple vulnerabilities and bugs
  • From: security
• Garment Center (index.cgi) Local File Inclusion
  • From: Smasher
• [SECURITY] [DSA 1462-1] New hplip packages fix privilege escalation
  • From: Moritz Muehlenhoff
• what is this?
  • From: crazy frog crazy frog
• Re: what is this?
  • From: crazy frog crazy frog
• F5 BIG-IP Web Management List Search XSS
  • From: nnposter
• [ MDVSA-2008:009-1 ] - Updated autofs packages fix insecure hosts configuration
  • From: security
• RE: Linksys WRT54 GL - Session riding (CSRF)
  • From: Tomaz
• [SECURITY] [DSA 1460-1] New postgresql-8.1 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Re: [Full-disclosure] what is this?
  • From: 3APA3A
• Re: [Full-disclosure] what is this?
  • From: Nick FitzGerald
• Re: [Full-disclosure] what is this?
  • From: crazy frog crazy frog
• SQID v0.3 - SQL Injection Digger.
  • From: Metaeye SG
• Re: [Full-disclosure] Buffer-overflow in Quicktime Player 7.3.1.70
  • From: Luigi Auriemma
• Re: At long last -- Extra Outlooks!
  • From: Casper . Dik
• RE: At long last - Extra Outlooks!
  • From: Thor (Hammer of God)
• RE: At long last -- Extra Outlooks!
  • From: Thor (Hammer of God)
• Re: At long last -- Extra Outlooks!
  • From: Francois Labreque
• Re: Re: Buffer-overflow in Quicktime Player 7.3.1.70
  • From: snagg
• Re: what is this?
  • From: Jose Nazario
• [SECURITY] [DSA 1459-1] New gforge packages fix SQL injection
  • From: Thijs Kinkhorst
• Re: what is this?
  • From: Robert McArdle
• Re: what is this?
  • From: crazy frog crazy frog
• Re: what is this?
  • From: Robert McArdle
• Re: what is this?
  • From: admin
• Re: Buffer-overflow in Quicktime Player 7.3.1.70
  • From: Luigi Auriemma
• Re: Linksys WRT54 GL - Session riding (CSRF)
  • From: J. Oquendo
• ZDI-08-001: IBM Tivoli Storage Manager Express Backup Server Heap Overflow Vulnerability
  • From: zdi-disclosures
• RE: what is this?
  • From: Mario Contestabile
• Binn SBuilder (nid) Remote Blind Sql Injection Vulnerabily
  • From: sys-project
• Re: Garment Center (index.cgi) Local File Inclusion
  • From: Smasher
• Re: Buffer-overflow in Quicktime Player 7.3.1.70
  • From: Marcello Barnaba (void)
• Hacking The Interwebs
  • From: pdp (architect)
• [SECURITY] [DSA 1463-1] New postgresql-7.4 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Re[2]: [Full-disclosure] what is this?
  • From: 3APA3A
• Re: what is this?
  • From: Gadi Evron
• [USN-568-1] PostgreSQL vulnerabilities
  • From: Jamie Strandboge
• [SECURITY] [DSA 1461-1] New libxml2 packages fix denial of service
  • From: Moritz Muehlenhoff
• [security bulletin] HPSBUX02303 SSRT071468 rev.1 - HP-UX Running X Font Server (xfs) Software, Remote Execution of Arbitrary Code
  • From: security-alert
• [security bulletin] HPSBST02304 SSRT080003 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-001 to MS08-002
  • From: security-alert
• [ MDVSA-2008:012 ] - Updated python packages fix vulnerabilities
  • From: security
• [ MDVSA-2008:013 ] - Updated python packages fix vulnerability in imageop module
  • From: security
• FreeBSD Security Advisory FreeBSD-SA-08:01.pty
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-08:02.libc
  • From: FreeBSD Security Advisories
• [USN-569-1] libxml2 vulnerability
  • From: Kees Cook
• Re: what is this?
  • From: Denis
• Defeating audio captcha systems
  • From: "JosŽé M. Palazón Romero"
• Country by Country ISA Computer Sets
  • From: Thor (Hammer of God)
• Exploiting the SpamBam plugin for wordpress
  • From: "JosŽé M. Palazón Romero"
• Re: Linksys WRT54 GL - Session riding (CSRF)
  • From: Jan Heisterkamp
• Re: what is this?
  • From: crazy frog crazy frog
• Re: [Full-disclosure] what is this?
  • From: Nick FitzGerald
• Re[2]: what is this?
  • From: Denis
• Re: [Full-disclosure] what is this?
  • From: crazy frog crazy frog
• Re[2]: what is this?
  • From: Denis
• SecurityReason - Apache (mod_status) Refresh Header - Open Redirector (XSS)
  • From: sp3x
• Article DashBoard all version SQL Injection Vulnerability
  • From: xcross87
• Max's File Uploader File Upload Vulnerability
  • From: xcross87
• MicroNews Admin Direct Access vulnerability
  • From: xcross87
• Pipe to FOR Crashes CMD
  • From: James C. Slora Jr.
• Re: what is this?
  • From: Jamie Riden
• RE: what is this?
  • From: Memisyazici, Aras
• Re: [Full-disclosure] what is this?
  • From: Gadi Evron
• Re: [Full-disclosure] what is this?
  • From: crazy frog crazy frog
• Re[2]: what is this?
  • From: none
• Re: Linksys WRT54 GL - Session riding (CSRF)
  • From: Daniel Weber
• Re: Linksys WRT54 GL - Session riding (CSRF)
  • From: Valdis . Kletnieks
• iDefense Security Advisory 01.15.08: TIBCO SmartSockets RTserver Heap Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 01.15.08: TIBCO SmartSockets RTServer Multiple Untrusted Pointer Vulnerabilities
  • From: iDefense Labs
• iDefense Security Advisory 01.15.08: TIBCO SmartSockets RTserver Multiple Untrusted Pointer Offset Vulnerabilities
  • From: iDefense Labs
• iDefense Security Advisory 01.15.08: TIBCO SmartSockets RTServer Multiple Untrusted Loop Bounds Vulnerabilities
  • From: iDefense Labs
• Re: Defeating audio captcha systems
  • From: 3APA3A
• Re: what is this?
  • From: Yousef Syed
• [SECURITY] [DSA 1464-1] New syslog-ng packages fix denial of service
  • From: Moritz Muehlenhoff
• [DSECRG-08-003] blogcms 4.2.1b Multiple Security Vulnerabilities
  • From: Digital Security Research Group [DSecRG]
• RichStrong CMS (showproduct.asp?cat=) Remote SQL Injection Exploit
  • From: sys-project
• rPSA-2008-0015-1 cairo
  • From: rPath Update Announcements
• cPanel Hosting Manager (dohtaccess.html)
  • From: no-reply
• rPSA-2008-0016-1 postgresql postgresql-server
  • From: rPath Update Announcements
• [DSECRG-08-002] Local File Include in arias 0.99-6
  • From: Digital Security Research Group [DSecRG]
• rPSA-2008-0017-1 libxml2
  • From: rPath Update Announcements
• 8e6 Technologies R3000 Internet Filter Bypass by Request Split
  • From: nnposter
• TPTI-08-01: Apple Quicktime Image File IDSC Atom Memory Corruption Vulnerability
  • From: DVLabs
• [Aria-Security.Net] Real Estate Web SQL Injection
  • From: no-reply
• iDefense Security Advisory 01.15.08: Apple QuickTime Macintosh Resource Processing Heap Corruption Vulnerability
  • From: iDefense Labs
• Cisco Security Advisory: Cisco Unified Communications Manager CTL Provider Heap Overflow
  • From: Cisco Systems Product Security Incident Response Team
• mcGuestbook v1.2 Remote File Inc.
  • From: gokhankaya
• Peers static overflow in BitTorrent 6.0 and uTorrent 1.7.5
  • From: Luigi Auriemma
• Country by Country Computer Sets now available for ISA 2004
  • From: Thor (Hammer of God)
• [waraxe-2008-SA#062] - Multiple Sql Injections in MyBB 1.2.10
  • From: come2waraxe
• TPTI-08-02: Cisco Call Manager CTLProvider Heap Overflow Vulnerability
  • From: DVLabs
• SQL scalar function to convert big int to dot notation
  • From: Thor (Hammer of God)
• [waraxe-2008-SA#061] - Remote Code Execution in MyBB 1.2.10
  • From: come2waraxe
• Gradman <= 0.1.3 (agregar_info.php?tabla=) Local File Inclusion Exploit
  • From: sys-project
• [ MDVSA-2008:014 ] - Updated apache 1.3.x packages fix multiple vulnerabilities
  • From: security
• [USN-570-1] boost vulnerabilities
  • From: Jamie Strandboge
• [ MDVSA-2008:015 ] - Updated apache 2.0.x packages fix multiple vulnerabilities
  • From: security
• [security bulletin] HPSBMA02133 SSRT061201 rev.7 - HP Oracle for OpenView (OfO) Critical Patch Update
  • From: security-alert
• [SECURITY] [DSA 1465-1] New apt-listchanges packages fix arbitrary code execution
  • From: Steve Kemp
• JoomlaFlash Component Multiple Remote File Inclusion
  • From: Smasher
• PHPEchoCMS Multible remote vulnerabilitis
  • From: security
• rPSA-2008-0018-1 mysql mysql-bench mysql-server
  • From: rPath Update Announcements
• Re: [CVE-2007-2449] Apache Tomcat XSS vulnerabilities in the JSP examples
  • From: linlei99
• [ MDVSA-2008:016 ] - Updated apache 2.2.x packages fix multiple vulnerabilities
  • From: security
• rPSA-2008-0021-1 kernel
  • From: rPath Update Announcements
• [SECURITY] [DSA 1465-2] New apt-listchanges packages fix arbitrary code execution
  • From: Steve Kemp
• Re: Utimaco Safeguard Easy vulnerability
  • From: benleavett
• Clever Copy <=3.0 Multiple Remote Vulnerabilities
  • From: hadihadi_zedehal_2006
• [CSNC] OKI C5510MFP Printer Password Disclosure
  • From: Adrian Leuenberger
• RE: Skype videomood XSS
  • From: avivra
• CORE-2007-1119: CORE FORCE Kernel Buffer Overflow
  • From: CORE Security Technologies Advisories
• iDefense Security Advisory 01.17.08: Multiple Vendor X Server XInput Extension Multiple Memory Corruption Vulnerabilities
  • From: iDefense Labs
• iDefense Security Advisory 01.17.08: Multiple Vendor X Server TOG-CUP Extension Information Disclosure Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 01.17.08: Multiple Vendor X Server EVI and MIT-SHM Extensions Integer Overflow Vulnerabilities
  • From: iDefense Labs
• iDefense Security Advisory 01.17.08: Multiple Vendor X Server XFree86-Misc Extension Invalid Array Index Vulnerability
  • From: iDefense Labs
• ZDI-08-002: Citrix Presentation Server IMA Service Heap Overflow Vulnerability
  • From: zdi-disclosures
• IMF 2008 - Call for Papers
  • From: Oliver Goebel
• [FIXED] Remote Denial of Service for SSH service at Dell DRAC4 (maybe Mocana SSH)
  • From: Robert Scheck
• [USN-571-1] X.org vulnerabilities
  • From: Kees Cook
• Agares PhpAutoVideo 2.21(XSS/RFI) Multiple Remote Vulnerabilities
  • From: houssamix
• New search engine for exploits
  • From: Security Basic
• common dns misconfiguration can lead to "same site" scripting
  • From: Tavis Ormandy
• Re: Member Area System (MAS) Remote File Include Vulnerability (view_func.php)
  • From: m3venge
• SocksCap Stack Overflow (<= 2.40-051231)
  • From: azizov
• Making big money...
  • From: jmacaranas
• Re: Country by Country ISA Computer Sets
  • From: The Fungi
• Re: Country by Country ISA Computer Sets
  • From: GomoR
• SinFP fingerprinting tool online demo
  • From: GomoR
• RE: Country by Country ISA Computer Sets
  • From: Thor (Hammer of God)
• Re: mcGuestbook v1.2 Remote File Inc.
  • From: the . tiger100
• Re: Article DashBoard all version SQL Injection Vulnerability
  • From: hey
• RE: Country by Country ISA Computer Sets
  • From: Thor (Hammer of God)
• Re: Country by Country ISA Computer Sets
  • From: Richard Powell
• Re: Tiger Team: New TV series about pen testers airing on CourtTV Dec 25 11 pm
  • From: michael . lambie
• MyBB 1.2.11 Multiple XSRF Vulnerabilities
  • From: nbbn
• Re: Re: Utimaco Safeguard Easy vulnerability
  • From: joachim . schneider
• RE: Country by Country ISA Computer Sets
  • From: Thor (Hammer of God)
• [USN-572-1] apt-listchanges vulnerability
  • From: Kees Cook
• [USN-571-2] X.org regression
  • From: Kees Cook
• [SECURITY] [DSA 1466-2] New xorg-server packages fix regression
  • From: Moritz Muehlenhoff
• BitDefender Update Server - Unauthorized Remote File Access Vulnerability
  • From: oliver karow
• [SECURITY] [DSA 1467-1] New mantis packages fix several vulnerabilities
  • From: Thijs Kinkhorst
• Re: common dns misconfiguration can lead to "same site" scripting
  • From: Kurt Grutzmacher
• RE: Country by Country ISA Computer Sets
  • From: Thor (Hammer of God)
• Bloofox CMS SQL Injection (Authentication bypass) , Source code disclosure
  • From: admin
• [SECURITY] [DSA 1468-1] New tomcat5.5 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Php Search Remote Inclusion
  • From: effectiveness63
• AXIGEN 5.0.x AXIMilter Format String Exploit
  • From: hempel
• MegaBBS ASP Forum Cross-Site Scripting
  • From: grossman
• Re: common dns misconfiguration can lead to "same site" scripting
  • From: Florian Weimer
• WifiZoo v1.3 released (minor release)
  • From: Hernan Ochoa
• Flaw in Alice gate2 pluswifi adsl modem
  • From: wargame89
• boastMachine <=3.1 SQL Injection Vulnerbility
  • From: hadihadi_zedehal_2006
• [ GLSA 200801-09 ] X.Org X server and Xfont library: Multiple vulnerabilities
  • From: Robert Buchholz
• Pass-The-Hash Toolkit v1.2 released.
  • From: Hernan Ochoa
• Call Jacking: Phreaking the BT Home Hub
  • From: Adrian P
• [ GLSA 200801-08 ] libcdio: User-assisted execution of arbitrary code
  • From: Robert Buchholz
• BLOG:CMS 4.2.1.c (DIR_PLUGINS) Multiple Remote File Include
  • From: رومانسي هكر
• [SECURITY] [DSA 1470-1] New horde3 packages fix denial of service
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1469-1] New flac packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• Belkin Wireless G Plus MIMO Router F5D9230-4 Authentication Bypass Vulnerability
  • From: gmdarkfig
• [ GLSA 200801-07 ] Adobe Flash Player: Multiple vulnerabilities
  • From: Robert Buchholz
• [waraxe-2008-SA#063] - Information Leakage in Kayako SupportSuite 3.11.01
  • From: come2waraxe
• [ MDVSA-2008:017 ] - Updated MySQL packages fix multiple vulnerabilities
  • From: security
• [waraxe-2008-SA#064] - Sql Injection in MyBB 1.2.11
  • From: come2waraxe
• [SECURITY] [DSA 1471-1] New libvorbis packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1472-1] New xine-lib packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• Re: 8e6 Technologies R3000 Internet Filter Bypass by Request Split
  • From: mparker
• PR07-38: XSS on sIFR
  • From: ProCheckUp Research
• [ MDVSA-2008:019 ] - Updated cairo packages fix vulnerability
  • From: security
• Some hashes for the record
  • From: Sergio 'shadown' Alvarez
• Troopers 08 Security Conference, Call for Papers
  • From: Enno Rey
• RE: Country by Country ISA Computer Sets
  • From: Jim Harrison
• Re: common dns misconfiguration can lead to "same site" scripting
  • From: Florian Weimer
• [SECURITY] [DSA 1473-1] New scponly packages fix arbitrary code execution
  • From: Florian Weimer
• [ MDVSA-2008:018 ] - Updated gFTP packages fix vulnerabilities
  • From: security
• Re: common dns misconfiguration can lead to "same site" scripting
  • From: David Malone
• PacerCMS Multiple Vulnerabilities (XSS/SQL)
  • From: db
• Belong Site Builder 0.1b Bypass Admincp
  • From: رومانسي هكر
• DeluxeBB 1.1 XSS Vulnerabilitie
  • From: nbbn
• Re: PR07-38: XSS on sIFR
  • From: bugs+securityfocus
• XSRF under Dean’s Permalinks Migration 1.0
  • From: g30rg3_x
• Apache mod_negotiation Xss and Http Response Splitting
  • From: Minded Security Research Labs
• SDL_Image 1.2.6 and prior GIF handling buffer overflow
  • From: Gynvael Coldwind
• PHP 5.2.5 cURL safe_mode bypass
  • From: cxib
• [security bulletin] HPSBUX02306 SSRT071463 rev.1 - HP-UX Running ARPA Transport, Remote Denial of Service (DoS)
  • From: security-alert
• UPDATED VMSA-2008-0001.1 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages
  • From: VMware Security team
• Web Wiz Forums Directory traversal
  • From: admin
• Web Wiz Rich Text Editor Directory traversal + HTM/HTML file creation on the server
  • From: admin
• Web Wiz NewsPad Directory traversal
  • From: admin
• [ MDVSA-2008:020 ] - Updated xine-lib packages fix remote code execution vulnerabilities
  • From: security
• Cisco Security Advisory: Cisco PIX and ASA Time-to-Live Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Default Passwords in the Application Velocity System
  • From: Cisco Systems Product Security Incident Response Team
• Syhunt: HFS (HTTP File Server) Template Cross-Site Scripting and Information Disclosure Vulnerabilities
  • From: Felipe M. Aragon
• Syhunt: HFS (HTTP File Server) Log Arbitrary File/Directory Manipulation and Denial-of-Service Vulnerabilities
  • From: Felipe M. Aragon
• Syhunt: HFS (HTTP File Server) Username Spoofing and Log Forging/Injection Vulnerability
  • From: Felipe M. Aragon
• RE: Cisco Security Advisory: Cisco PIX and ASA Time-to-Live Vulnerability
  • From: Eric Davis
• Woltlab Burning Board 2.3.6 PL2 Remote Delete Thread XSRF Vulnerability
  • From: nbbn
• [SECURITY] [DSA 1474-1] New exiv2 packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [ GLSA 200801-10 ] TikiWiki: Multiple vulnerabilities
  • From: Raphaël Marichez
• [SECURITY] [DSA 1444-2] New php5 packages fix regression
  • From: Moritz Muehlenhoff
• PIX Privilege Escalation Vulnerability
  • From: tbbunn
• [ MDVSA-2008:025 ] - Updated x11-server-xgl packages fix multiple vulnerabilities
  • From: security
• ImageShack Toolbar FileUploader Class insecurities
  • From: retrog
• [ MDVSA-2008:021 ] - Updated XFree86 packages fix multiple vulnerabilities
  • From: security
• [ MDVSA-2008:022 ] - Updated xorg-x11 packages fix multiple vulnerabilities
  • From: security
• [ MDVSA-2008:023 ] - Updated x11-server packages fix multiple vulnerabilities
  • From: security
• [ MDVSA-2008:024 ] - Updated libxfont packages fix font handling vulnerability
  • From: security
• Re: PIX Privilege Escalation Vulnerability
  • From: Eloy Paris
• Tiger PHP News System SQL Injection
  • From: 0in . email
• iDefense Security Advisory 01.23.08: IBM AIX pioout BSS Buffer Overflow Vulnerability
  • From: iDefense Labs
• rPSA-2008-0029-1 bind bind-utils
  • From: rPath Update Announcements
• rPSA-2008-0030-1 CherryPy
  • From: rPath Update Announcements
• iDefense Security Advisory 01.22.08: IBM Tivoli PMfOSD HTTP Request Method Buffer Overflow Vulnerability
  • From: iDefense Labs
• phpBB 2.0.22 Remote PM Delete XSRF Vulnerability
  • From: nbbn
• Re: Re: PIX Privilege Escalation Vulnerability
  • From: tbbunn
• Pre Hotel and Resorts reservation portal login bypass
  • From: milad_sa2007
• E-SMART CART bypass
  • From: milad_sa2007
• Pre Dynamic Institution bypass
  • From: milad_sa2007
• [CandyPress] eCommerce suite (SQL Injection + XSS + Path Disclosure)
  • From: Admin
• gdb bug
  • From: digit2004
• C4 Security Advisory - GE Fanuc Proficy Information Portal 2.6 Authentication Vulnerability
  • From: Eyal Udassin
• C4 Security Advisory - GE Fanuc Cimplicity 6.1 Heap Overflow
  • From: Eyal Udassin
• C4 Security Advisory - GE Fanuc Proficy Information Portal 2.6 Arbitrary File Upload and Execution
  • From: Eyal Udassin
• Re: Peers static overflow in BitTorrent 6.0 and uTorrent 1.7.5
  • From: Luigi Auriemma
• [ MDVSA-2008:026 ] - Updated icu packages fix vulnerabilities
  • From: security
• Re: PIX Privilege Escalation Vulnerability
  • From: Aaron Collins
• Two vulnerabilities for PatchLink Update Client for Unix.
  • From: lcashdol
• [ MDVSA-2008:027 ] - Updated pulseaudio packages fix local root vulnerability
  • From: security
• [SECURITY] [DSA 1475-1] new gforge packages fix cross site scripting
  • From: Thijs Kinkhorst
• Tool availability - browser DOM Checker
  • From: Michal Zalewski
• F5 BIG-IP Web Management ASM Security Report XSS
  • From: nnposter
• PhPress-0.3.0 Read All Sql Information For Config
  • From: r2t
• phpIP 4.3.2 - Numerous SQL Injection Vulnerablities
  • From: Charles Hooper
• Metasploit Framework v3.1 Released
  • From: H D Moore
• [SECURITY] [DSA 1476-1] New pulseaudio packages fix privilege escalation
  • From: Moritz Muehlenhoff
• Mambo 4.6.3 Path Disclosure, XSS , XSRF, DOS
  • From: admin
• [ GLSA 200801-14 ] Blam: User-assisted execution of arbitrary code
  • From: Robert Buchholz
• [ GLSA 200801-11 ] CherryPy: Directory traversal vulnerability
  • From: Robert Buchholz
• Facebook security contact
  • From: Alexander Sotirov
• ClanSphere 2007.4.4 Remote File Disclosure Vulnerability.
  • From: p4imi0
• [SECURITY] [DSA 1477-1] New yarssr packages fix arbitrary shell command execution
  • From: Moritz Muehlenhoff
• eTicket 'index.php' Cross Site Scripting Path Vulnerability
  • From: Alessandro Tanasi
• Re: Simple Machines Forum Cross-Site Scripting Vulnerabilities
  • From: dev
• Re: OneCMS Vulnerabilities
  • From: webmaster
• [ GLSA 200801-13 ] ngIRCd: Denial of Service
  • From: Robert Buchholz
• [ GLSA 200801-12 ] xine-lib: User-assisted execution of arbitrary code
  • From: Robert Buchholz
• ASPired2Protect bypass
  • From: milad_sa2007
• WoltLab Burning Board 3.x.x Private Message Delete XSRF Vulnerability
  • From: nbbn
• CORE-2007-1219: Firebird Remote Memory Corruption
  • From: Core Security Technologies Advisories
• VB Marketing "tseekdir.cgi" Local File Inclusion
  • From: Sw33t . h4cK3r
• Uninformed Journal Release Announcement: Volume 9
  • From: Uninformed Journal
• [SECURITY] [DSA 1478-1] New mysql-dfsg-5.0 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Re: Exploit in IE6,7
  • From: Nick FitzGerald
• Advisory: Tripwire Enterprise/Server XSS Vulnerability
  • From: Liquidmatrix Security Digest
• Re: C4 Security Advisory - GE Fanuc Cimplicity 6.1 Heap Overflow
  • From: pete . sage
• Re: C4 Security Advisory - GE Fanuc Proficy Information Portal 2.6 Arbitrary File Upload and Execution
  • From: pete . sage
• Re: C4 Security Advisory - GE Fanuc Proficy Information Portal 2.6 Authentication Vulnerability
  • From: pete . sage
• [ GLSA 200801-15 ] PostgreSQL: Multiple vulnerabilities
  • From: Raphael Marichez
• CSRF/XSS in Sungard Banner
  • From: banner
• Remote File Disclosure in phpCMS 1.2.2
  • From: Digital Security Research Group
• Nucleus 3.31 XSS in path
  • From: Digital Security Research Group
• PHPKIT 1.6.4 PL1 2 XSRF Vulnerabilities
  • From: nbbn
• [!!FIX Information ] Nucleus 3.31 XSS in path
  • From: Digital Security Research Group
• Re: Remote File Disclosure in phpCMS 1.2.2
  • From: 3APA3A
• AmpJuke-0.7.0 (index.php) Xss VuLn.
  • From: g0rk3m-31
• Insecure Use of RC4 in LSrunasE and Supercrypt (CVE-2007-6340)
  • From: Daniel Roethlisberger
• Recent Web Hacks: WHID update for Janury 30th 2008
  • From: Ofer Shezaf
• tinyBB v0.2 Message Board Remote File Inc.
  • From: g0rk3m-31
• [waraxe-2008-SA#065] - Remote Shell Command Execution in Coppermine 1.4.14
  • From: come2waraxe
• Webspell 4.01.02 2 Vulnerabilites
  • From: nbbn
• [ GLSA 200801-16 ] MaraDNS: CNAME Denial of Service
  • From: Raphael Marichez
• [ GLSA 200801-17 ] Netkit FTP Server: Denial of Service
  • From: Raphael Marichez
• [ MDVSA-2008:028 ] - Updated MySQL packages fix multiple vulnerabilities
  • From: security
• Ye&#351;il Koridor Ziyareti Defteri (index.php) SqL. inj.
  • From: g0rk3m-31
• RE: Recent Web Hacks: WHID update for Janury 30th 2008
  • From: Michael Wojcik
• Cisco Security Advisory: Cisco Wireless Control System Tomcat mod_jk.so Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• PeteFinnigan.com Limited advisory for Oracle January 2008 CPU
  • From: Pete Finnigan
• rPSA-2008-0032-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs
  • From: rPath Update Announcements
• [ GLSA 200801-20 ] libxml2: Denial of Service
  • From: Pierre-Yves Rofes
• [ GLSA 200801-19 ] GOffice: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [ GLSA 200801-18 ] Kazehakase: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [ GLSA 200801-21 ] Xdg-Utils: Arbitrary command execution
  • From: Pierre-Yves Rofes
• [ GLSA 200801-22 ] PeerCast: Buffer overflow
  • From: Pierre-Yves Rofes
• contactforms "cforms-css.php" Remote File Inclusion
  • From: Sw33t . h4cK3r