Mail Index

• Thread Index

• [ MDVSA-2008:029 ] - Updated ruby packages fix possible man-in-the-middle attack
  • From: security
• [DSECRG-08-007] OpenBSD BGPD daemon Web Interface XSS.
  • From: Digital Security Research Group
• [waraxe-2008-SA#066] - Multiple Vulnerabilities in Coppermine 1.4.14
  • From: come2waraxe
• Re: [DSECRG-08-007] OpenBSD BGPD daemon Web Interface XSS.
  • From: Digital Security Research Group
• Attackers can SkypeFind you
  • From: avivra
• sflog! 0.96 remote file disclosure vulnerabilities
  • From: muuratsalo experimental hack lab
• [USN-573-1] PulseAudio vulnerability
  • From: Jamie Strandboge
• nilson's blogger 0.11 remote file disclosure vulnerabilities
  • From: muuratsalo experimental hack lab
• [ MDVSA-2008:030 ] - Updated pcre packages fix vulnerability
  • From: security
• LiveCart XSS vulnerability fixed since version 1.1.0
  • From: info
• [ MDVSA-2008:031 ] -
  • From: security
• LightBlog Remote File Upload Vulnerability
  • From: omnipresent
• SQL in Archimede Net 2000 "E-Guest_show.php"
  • From: Sw33t . h4cK3r
• Titan FTP Server Remote Heap Overflow (USER/PASS)
  • From: securfrog
• Sun JRE / JDK bug introduces XXE possibilities
  • From: Chris Evans
• Youtube Clone Xross Site Scripting (load_message.php)
  • From: ciucciamilcalzino
• Wordpress Plugin dmsguestbook 1.7.0 Multiple Remote Vulnerabilities
  • From: nbbn
• The Everything Development System - SQL Injection
  • From: sub
• [ MDVSA-2008:032 ] - Updated boost packages fix DoS vulnerabilities
  • From: security
• Domain Trader v2.0 Xss Vulnerable
  • From: cybermilitan
• ITech Classifieds Multiple Remote Vulnerabilities
  • From: cybermilitan
• [ MDVSA-2008:033 ] - Updated ruby-gnome2 packages fix arbitrary code execution vulnerability
  • From: security
• Wordpress Pluging wp-footnotes 2.2 (admin_panel.php) Multiple Vulnerabilites
  • From: nbbn
• phpShop <= v 0.8.1 Remote SQL injection / Filter Bypass
  • From: theredc0ders
• IpSwitch WS_FTPSERVER with SSH remote Buffer Overflow
  • From: securfrog
• [security bulletin] HPSBUX02308 SSRT080010 rev.1 - HP-UX Running Apache, Remote Execution of Arbitrary Code
  • From: security-alert
• Anon Proxy Server <= 0.102 remote buffer overflow
  • From: L4teral
• [DSECRG-08-009] xoops 2.0.18 Local File Include
  • From: Digital Security Research Group
• [OPENADS-SA-2008-001] Openads 2.4.2 vulnerability fixed
  • From: Matteo Beccati
• [DSECRG-08-011] Astrosoft HelpDesk Multiple XSS
  • From: Digital Security Research Group
• [DSECRG-08-010] VHD Web Pack 2.0 Local File Include
  • From: Digital Security Research Group
• [DSECRG-08-008] Textpattern 4.0.5 Multiple Security Vulnerabilities
  • From: Digital Security Research Group
• CORE-2008-0122: MPlayer arbitrary pointer dereference
  • From: CORE Security Technologies Advisories
• CORE-2007-1218: MPlayer 1.0rc2 buffer overflow vulnerability
  • From: CORE Security Technologies Advisories
• Socket termination in FTP Log Server 7.9.14.0
  • From: Luigi Auriemma
• Multiple vulnerabilities in WinCom LPD Total 3.0.2.623
  • From: Luigi Auriemma
• iDefense Security Advisory 01.31.08: IBM Informix Dynamic Server onedcu File Creation Vulnerability
  • From: iDefense Labs
• Multiple vulnerabilities in SAPlpd 6.28
  • From: Luigi Auriemma
• iDefense Security Advisory 01.31.08: IBM Informix Dynamic Server SQLIDEBUG File Creation Vulnerability
  • From: iDefense Labs
• [USN-575-1] Apache vulnerabilities
  • From: Jamie Strandboge
• Re: Re: PIX Privilege Escalation Vulnerability
  • From: rvandenbrink
• NERO Media Player <= 1.4.0.35b Remote Buffer Overflow( .M3U)
  • From: Securfrog
• [ MDVSA-2008:034 ] - Updated emacs packages fix vulnerabilities
  • From: security
• [security bulletin] HPSBMA02307 SSRT071420 rev.1 - HP OpenView Network Node Manager (OV NNM) Remote Denial of Service (DoS)
  • From: security-alert
• Re: PR07-38: XSS on sIFR
  • From: hk
• Re: Multiple vulnerabilities in SAPlpd 6.28
  • From: robert . ingruber
• [SECURITY] [DSA 1481-1] New python-cherrypy packages fix denial of service
  • From: Moritz Muehlenhoff
• [DSECRG-08-012] Multiple LFI in Azucar CMS 1.3
  • From: Digital Security Research Group [DSecRG]
• [SECURITY] [DSA 1480-1] New poppler packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1486-1] New gnatsweb packages fix cross-site scripting
  • From: Steve Kemp
• CYBSEC Security Advisory: Arbitrary file overwrite in Documentum Administrator / Documentum Webtop
  • From: CYBSEC Advisories
• dBpowerAMP Audio Player Release 2 Remote Buffer Overflow
  • From: Securfrog
• rPSA-2008-0040-1 mysql mysql-bench mysql-server
  • From: rPath Update Announcements
• Apple iPhone 1.1.3 remote DoS exploit
  • From: morin . josh
• [ MDVSA-2008:035 ] - Updated libcdio packages fix DoS vulnerability
  • From: security
• [security bulletin] HPSBST02302 SSRT071474 rev.1 - HP Storage Essentials SRM, Remote Unauthorized Access
  • From: security-alert
• A paper by Amit Klein (Trusteer): "OpenBSD DNS Cache Poisoning and Multiple O/S Predictable IP ID Vulnerability"
  • From: Amit Klein
• Tested on Webmin 1.390
  • From: no-reply
• [SECURITY] [DSA 1482-1] New squid packages fix denial of service
  • From: Moritz Muehlenhoff
• [security bulletin] HPSBGN02310 SSRT080007 rev.1 - HP Virtual Rooms Running on Windows, Remote Execution of Arbitrary Code
  • From: security-alert
• Re: A paper by Amit Klein (Trusteer): "OpenBSD DNS Cache Poisoning and Multiple O/S Predictable IP ID Vulnerability"
  • From: Tim Newsham
• rPSA-2008-0043-1 icu
  • From: rPath Update Announcements
• Re: Tested on Webmin 1.390
  • From: ivangaravito
• Logs visualization in WS_FTP Server Manager 6.1.0.0
  • From: Luigi Auriemma
• rPSA-2008-0046-1 gd
  • From: rPath Update Announcements
• [ MDVSA-2008:036 ] - Updated CUPS packages fix SNMP vulnerability
  • From: security
• iDefense Security Advisory 02.04.08: Hewlett-Packard Network Node Manager Topology Manager Service DoS Vulnerability
  • From: iDefense Labs
• [SECURITY] [DSA 1483-1] New net-snmp packages fix denial of service vulnerability
  • From: Noah Meyerhans
• Chat vulnerabilities in TinTin++ 1.97.9
  • From: Luigi Auriemma
• ZDI-08-003: Symantec Backup Exec Remote File Upload Vulnerability
  • From: zdi-disclosures
• [ GLSA 200802-02 ] Doomsday: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [ GLSA 200802-01 ] SDL_image: Two buffer overflow vulnerabilities
  • From: Raphael Marichez
• RE: A paper by Amit Klein (Trusteer): "OpenBSD DNS Cache Poisoning and Multiple O/S Predictable IP ID Vulnerability"
  • From: Amit Klein
• [security bulletin] HPSBMA02309 SSRT080013 rev.1 - HP Select Identity Software, Remote Unauthorized Access
  • From: security-alert
• mini-pub 0.3 multiple vulnerabilities
  • From: muuratsalo experimental hack lab
• Re: Logs visualization in WS_FTP Server Manager 6.1.0.0
  • From: Steve Shockley
• [DSECRG-08-013] Modx 0.9.6.1, 0.9.6.1p1 Multiple Security Vulnerabilities
  • From: Digital Security Research Group [DSecRG]
• Checkpoint SecuRemote/Secure Client NGX Auto Local Logon Vulnerability
  • From: Michael Neal Vasquez
• [ MDVSA-2008:037 ] - Updated libcdio packages fix DoS vulnerability
  • From: security
• Multiple vulnerabilities in Ipswitch Instant Messaging 2.0.8.1
  • From: Luigi Auriemma
• iDefense Security Advisory 02.07.08: IBM DB2 Universal Database db2pd Arbitrary Library Loading Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 02.07.08: IBM DB2 Universal Database Administration Server Memory Corruption Vulnerability
  • From: iDefense Labs
• [ MDVSA-2008:041 ] - Updated tk packages fix buffer overflow vulnerability
  • From: security
• [USN-576-1] Firefox vulnerabilities
  • From: Jamie Strandboge
• [ MDVSA-2008:040 ] - Updated SDL_image packages fix vulnerabilities
  • From: security
• Web Hacking Incidenets Database 2007 annual Report is out
  • From: Ofer Shezaf
• [ MDVSA-2008:042 ] - Updated Qt4 packages fix vulnerability in QSslSocket
  • From: security
• Adobe Reader/Acrobat Remote PDF Print Silently Vulnerability
  • From: cocoruder
• [DSECRG-08-014] Multiple LFI in PowerNews (Newsscript) 2.5.6
  • From: Digital Security Research Group [DSecRG]
• Husrev Forums v2.0.1:PoWerBoard (tr) (id) Remote SQL Injection
  • From: crazy_kinq
• Blackboard (id) Remote SQL Injection
  • From: crazy_kinq
• Joovili <= v.2.1 (members_help.php) Remote File &#304;nclude Vulnerability
  • From: crazy_kinq
• [ MDVSA-2008:038 ] - Updated gd packages fix buffer overflow vulnerability
  • From: security
• Joomla <= v1.0.14-RC1(Index.php) Remote File Inclusion Exploit
  • From: alex_zooz_zooz
• ASUS Eee PC rooted out of the box
  • From: RISE Security
• [ MDVSA-2008:039 ] - Updated netpbm packages fix buffer overflow vulnerability
  • From: security
• Buffer Overflow Vulnerability in AxRUploadServer.dll, Activex Method (SetLogging)
  • From: david130490
• [SECURITY] [DSA 1487-1] New libexif packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Re: Buffer Overflow Vulnerability in AxRUploadServer.dll, Activex Method (SetLogging)
  • From: david130490
• jetAudio <= 7.0.5 (.ASX) Remote Stack Overflow
  • From: laurent . gaffie
• rPSA-2008-0048-1 kernel
  • From: rPath Update Announcements
• Re: RE: ASUS Eee PC rooted out of the box
  • From: RISE Security
• RE: ASUS Eee PC rooted out of the box
  • From: Bug traq
• NULL byte writing in Emerald, RadiusNT/X and Air Marshal
  • From: Luigi Auriemma
• SECURITY ADVISORY - Level Platforms, Inc. Service Center Install Data HTTP Vulnerability
  • From: Brook Powers
• CVE-2008-0002: Tomcat information disclosure vulnerability
  • From: Mark Thomas
• [SECURITY] CVE-2007-5333: Tomcat Cookie handling vulnerabilities
  • From: Mark Thomas
• [SECURITY] CVE-2007-6286: Tomcat duplicate request processing vulnerability
  • From: Mark Thomas
• [SECURITY] [DSA 1488-1] New phpbb2 packages fix several vulnerabilities
  • From: Thijs Kinkhorst
• rPSA-2008-0051-1 firefox
  • From: rPath Update Announcements
• Some interesting hashes
  • From: Open Phugu
• iDefense Security Advisory 02.08.08: Adobe Reader and Acrobat JavaScript Insecure Method Exposure Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 02.08.08: Adobe Reader Security Provider Unsafe Libary Path Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 02.08.08: Adobe Reader and Acrobat Multiple Stack-based Buffer Overflow Vulnerabilities
  • From: iDefense Labs
• PKs Movie Database version 3.0.3 (SQL/XSS)
  • From: houssamix
• F5 BIG-IP Web Management Console CSRF
  • From: nnposter
• F5 BIG-IP Web Management Console CSRF (with example)
  • From: nnposter
• Vwar 1.5.0
  • From: p_s3rver
• Default Multiple Joomla! Component com_rapidrecipe "user_id=" Remote SQL Inj.
  • From: staad1
• &#1662;&#1610;&#1588; &#1711;&#1586;&#1610;&#1583;&#1607; Website Design Chat Software Remote Cross-Site Scripting
  • From: no-reply
• hi
  • From: f10
• Final CFP: EuroSec Workshop (March 31st, 2008)
  • From: Stefano Zanero
• [SECURITY] [DSA 1485-1] New icedove packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1484-1] New xulrunner packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1489-1] New iceweasel packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1492-1] New wml packages fix denial of service
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1491-1] New tk8.4 packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1490-1] New tk8.3 packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1493-1] New sdl-image1.2 packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• Simple Machines Forum "SMF Shoutbox" Mod Persistent XSS
  • From: enterth3dragon
• Mercury v1.1.5 Send Message Cross-Site Scripting
  • From: No-reply
• aliboard Beta Upload Shell From ControlPanel
  • From: رومانسي هكر
• [SECURITY] [DSA 1494-1] New linux-2.6 packages fix privilege escalation
  • From: Florian Weimer
• ExtraOutlook 1.2 Released
  • From: Thor (Hammer of God)
• Multiple vulnerabilities in EztremeZ-IP File and Printer Server 5.1.2x15
  • From: Luigi Auriemma
• Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0
  • From: Luigi Auriemma
• Format string and DoS in Opium OPI and cyanPrintIP servers 4.10.x
  • From: Luigi Auriemma
• Format string and buffer-overflow in Lst Network Print Server 9.4.2 build 105
  • From: Luigi Auriemma
• [ GLSA 200802-03 ] Horde IMP: Security bypass
  • From: Pierre-Yves Rofes
• IOActive Security Advisory: Legacy mod_jk2 Buffer Overflow
  • From: IOActive Advisories
• [ GLSA 200802-04 ] Gallery: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• my little forum XSS
  • From: db
• FLEA-2008-0006-1 tetex tetex-dvips tetex-fonts
  • From: Foresight Linux Essential Announcement Service
• joomla (k12.tr)(com_iomezun)SQL Injection
  • From: hackturkiye . hackturkiye
• FLEA-2008-0002-1 python
  • From: Foresight Linux Essential Announcement Service
• Kommentare zum Download script SQL Injection
  • From: hackturkiye . hackturkiye
• CSA-L03: Linux kernel vmsplice unchecked user-pointer dereference
  • From: Wojciech Purczynski
• FLEA-2008-0003-1 nss_ldap
  • From: Foresight Linux Essential Announcement Service
• joomll(k12.tr)(com_mezun)SQL Injection
  • From: hackturkiye . hackturkiye
• FLEA-2008-0004-1 rsync
  • From: Foresight Linux Essential Announcement Service
• [ MDVSA-2008:043 ] - Updated kernel packages fix multiple vulnerabilities and bugs
  • From: security
• Re: Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0
  • From: jfvanmeter
• FLEA-2008-0005-1 e2fsprogs
  • From: Foresight Linux Essential Announcement Service
• ZDI-08-004: Adobe AcrobatReader Javascript for PDF Integer Overflow Vulnerability
  • From: zdi-disclosures
• IOActive Security Advisory: Multiple Remote SiteScope Vulnerabilities
  • From: IOActive Advisories
• ZDI-08-005: Novell Client NWSPOOL.DLL EnumPrinters Stack Overflow Vulnerability
  • From: zdi-disclosures
• FLEA-2008-0001-1 firefox
  • From: Foresight Linux Essential Announcement Service
• [ MDVSA-2008:044 ] - Updated kernel packages fix multiple vulnerabilities and bugs
  • From: security
• artmedic weblog multiple xss vulnerabilities
  • From: muuratsalo experimental hack lab
• gkrellweather
  • From: forensec
• rPSA-2008-0052-1 kernel
  • From: rPath Update Announcements
• Re: Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0
  • From: jfvanmeter
• Unicode buffer-overflow in RPM Remote Print Manager 4.5.1.11
  • From: Luigi Auriemma
• iDefense Security Advisory 02.12.08: ClamAV libclamav PE File Integer Overflow Vulnerability
  • From: iDefense Labs
• FLEA-2008-0007-1 gd
  • From: Foresight Linux Essential Announcement Service
• cacti -- Multiple security vulnerabilities have been discovered
  • From: Mario Sergio Candian
• Re: Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0
  • From: Luigi Auriemma
• LI-countdown SQL Injection Vulnerability
  • From: sex
• Cacti 0.8.7a Multiple Vulnerabilities
  • From: s4tan
• Directory traversal and DoS in WinIPDS G52-33-021
  • From: Luigi Auriemma
• Re: Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0
  • From: Luigi Auriemma
• Re: Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0
  • From: jfvanmeter
• Re: Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0
  • From: Luigi Auriemma
• [ GLSA 200802-05 ] Gnumeric: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• [ GLSA 200802-06 ] scponly: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [SECURITY] [DSA 1495-1] New nagios-plugins packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• iDefense Security Advisory 02.12.08: Microsoft Office Works Converter Heap Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 02.12.08: Microsoft Office Works Converter Stack-based Buffer Overflow Vulnerability
  • From: iDefense Labs
• [SECURITY] [DSA 1496-1] New mplayer packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• QuickTime <= 7.4.1 QTPlugin.ocx Multiple Remote Stack Overflow
  • From: laurent . gaffie
• Thanks to all, ExploitSearch in Top5 security must-have
  • From: Security Basic
• iDefense Security Advisory 02.12.08: Microsoft Internet Explorer Property Memory Corruption Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 02.12.08: Adobe Flash Media Server 2 Multiple Integer Overflow Vulnerabilities
  • From: iDefense Labs
• ZDI-08-006: Microsoft Internet Explorer SVG animateMotion.by Code Execution Vulnerability
  • From: zdi-disclosures
• SyScan'08 Call for Paper/Training
  • From: organiser@xxxxxxxxxx
• [SECURITY] [DSA 1494-2] New linux-2.6 packages fix privilege escalation
  • From: dann frazier
• iDefense Security Advisory 02.12.08: Adobe Flash Media Server 2 Memory Corruption Vulnerability
  • From: iDefense Labs
• Re: XSS on Obedit v3.03
  • From: richard
• Vwar New Bug
  • From: p_s3rver
• [Reversemode Advisory] February Advisories : Microsoft Word 2003 + Fortinet Forticlient
  • From: Reversemode
• rPSA-2008-0054-1 tk
  • From: rPath Update Announcements
• Netkom Internet Solutions (folder_id) Remote SQL Injection Vulnerability
  • From: crazy_kinq
• [security bulletin] HPSBUX02249 SSRT071442 rev.3 - HP-UX Running the Ignite-UX or the DynRootDisk (DRD) get_system_info Command, Local Unqualified Configuration Change
  • From: security-alert
• rPSA-2008-0061-1 SDL_image
  • From: rPath Update Announcements
• [security bulletin] HPSBMA02274 SSRT071445 rev.3 - HP System Management Homepage (SMH) for HP-UX, Remote Cross Site Scripting (XSS)
  • From: security-alert
• [security bulletin] HPSBUX02313 SSRT080015 rev.1 - HP-UX Running Apache, Remote Execution of Arbitrary Code
  • From: security-alert
• Provided By Development Solutions SQL Injection Exploit(panel)
  • From: hackturkiye . hackturkiye
• ALL VERS&#304;ON PHPAUTOV&#304;DEO c99 shell
  • From: hackturkiye . hackturkiye
• all forums.asp hack
  • From: hackturkiye . hackturkiye
• joomla upload php code or picture (com_uhp)
  • From: hackturkiye . hackturkiye
• joomla "com_model"
  • From: hackturkiye . hackturkiye
• joomla "com_omnirealestate" S@L Injection
  • From: hackturkiye . hackturkiye
• Cisco Security Advisory: SQL injection in Cisco Unified Communications Manager
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Unified IP Phone Overflow and Denial of Service Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• rPSA-2008-0063-1 boost
  • From: rPath Update Announcements
• Search Unleashed 0.2.10 JavaScript injection (Wordpress plugin)
  • From: Krzysztof Burghardt
• JSPWiki Multiple Vulnerabilities
  • From: Trancer
• ELFdump crash when analyzing crafted ELF file.
  • From: david . reguera
• [DSECRG-08-011 | FIX INFORMATION] Astrosoft HelpDesk Multiple XSS
  • From: Digital Security Research Group [DSecRG]
• artmedic weblog multiple local file inclusion vulnerabilities
  • From: muuratsalo experimental hack lab
• Re: Vwar New Bug
  • From: packet
• [ GLSA 200802-07 ] Pulseaudio: Privilege escalation
  • From: Pierre-Yves Rofes
• etomite xss
  • From: th3 . r00k . nospam
• Apache web server 2.2: htpasswd predictable salt weakness
  • From: Peter Watkins
• [USN-578-1] Linux kernel vulnerabilities
  • From: Jamie Strandboge
• Joomla 1.0.13 - 1.0.14 / (remote) PHP file inclusion possible if old configuration.php
  • From: Hendrik Jan Verheij
• Philips VOIP841 Multiple Vulnerabilities
  • From: luca . carettoni
• FreeBSD Security Advisory FreeBSD-SA-08:03.sendfile
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-08:04.ipsec
  • From: FreeBSD Security Advisories
• Rosoft Media Player 4.1.8 Buffer Overflow ( .M3U)
  • From: securfrog
• DOINGSOFT-2008-02-11 - IPDiva VPN SSL Brute force attack
  • From: eagle
• PlutoStatus Locator v1.0pre (alpha) local file inclusion vulnerability
  • From: muuratsalo experimental hack lab
• Re: UniversalFtp Server 1.0.44 Multiple Remote Denial of service
  • From: securfrog
• DOINGSOFT-2008-02-11-002 IP Diva VPN SSL many XSS attacks
  • From: eagle
• scribe 0.2 local file inclusion vulnerability
  • From: muuratsalo experimental hack lab
• UniversalFtp Server 1.0.44 Multiple Remote Denial of service
  • From: securfrog
• StatCounteX 3.0 & 3.1 Admin Vulnerability
  • From: Sekomirza
• Re: Joomla 1.0.13 - 1.0.14 / (remote) PHP file inclusion possible if old configuration.php
  • From: manuel . no_spam . bruneau
• Re: Philips VOIP841 Multiple Vulnerabilities
  • From: mattyg
• [INFIGO-2008-02-13]: SOPHOS Email Security Appliance Cross Site Scripting Vulnerability
  • From: infocus
• Re: DOINGSOFT-2008-02-11-002 IP Diva VPN SSL many XSS attacks
  • From: rose-of-a
• Re: SECURITY ADVISORY - Level Platforms, Inc. Service Center Install Data HTTP Vulnerability
  • From: cmiyazaki
• Sami FTP Server 2.0.* Multiple Remote Vulnerabilities
  • From: securfrog
• SellOwnHouse login SQL Injection
  • From: hackturkiye . hackturkiye
• Simple Forum Version 1.10-1.11 SQL Injection
  • From: hackturkiye . hackturkiye
• Re: Apache web server 2.2: htpasswd predictable salt weakness
  • From: 3APA3A
• [ MDVSA-2008:045 ] - Updated MPlayer packages fix a few vulnerabilities
  • From: security
• artmedic_weblog Cross Site Scriptting Vulnerbility
  • From: hadihadi_zedehal_2006
• engineering Neoteric UK LTD S@L &#304;NJECT&#304;ON
  • From: hackturkiye . hackturkiye
• joomla "com_smslist" sql injecton
  • From: hackturkiye . hackturkiye
• Ecommerce Websites from b1st.com SQL Injection
  • From: hackturkiye . hackturkiye
• Re: [Full-disclosure] rPSA-2008-0052-1 kernel
  • From: Tonnerre Lombard
• [ GLSA 200802-08 ] Boost: Denial of Service
  • From: Raphael Marichez
• joomla com_activities sql injection
  • From: hackturkiye . hackturkiye
• joomla faq SQL Injection
  • From: hackturkiye . hackturkiye
• all version Wordpress FORUM S@L injection
  • From: hackturkiye . hackturkiye
• Re: Apache web server 2.2: htpasswd predictable salt weakness
  • From: Peter Watkins
• Re: ACER Travelmate 600 and 800 series - Smartcard flawed Implementation
  • From: linke_z
• Simple Forum Version 1.7-1.9(pagename)
  • From: hackturkiye . hackturkiye
• rPSA-2008-0056-1 mailman
  • From: rPath Update Announcements
• Re: rPSA-2008-0052-1 kernel
  • From: gregory
• rPSA-2008-0059-1 openldap openldap-clients openldap-servers
  • From: rPath Update Announcements
• [ MDVSA-2008:046 ] - Updated xine-lib package fixes arbitrary code execution vulnerability
  • From: security
• Re: artmedic_weblog Cross Site Scriptting Vulnerbility
  • From: jyvaeskylae
• [HISPASEC] FireFox 2.0.0.11 and Opera 9.50 beta Remote Memory Information Leak, FireFox 2.0.0.11 Remote Denial of Service
  • From: Gynvael Coldwind
• joomla SQL Injection(com_salesrep)
  • From: hackturkiye . hackturkiye
• joomla SQL Injection( com_scheduling)
  • From: hackturkiye . hackturkiye
• banpro-dms 1.0 local file inclusion vulnerability
  • From: muuratsalo experimental hack lab
• joomla SQL Injection(com_lexikon)
  • From: hackturkiye . hackturkiye
• joomla SQL Injection(com_filebase)
  • From: hackturkiye . hackturkiye
• joomla SQL Injection(com_sg)
  • From: hackturkiye . hackturkiye
• [SECURITY] [DSA 1497-1] New clamav packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Re[2]: Apache web server 2.2: htpasswd predictable salt weakness
  • From: 3APA3A
• joomla SQL Injection(com_emcompose)
  • From: hackturkiye . hackturkiye
• joomla SQL Injection(com_profile)
  • From: hackturkiye . hackturkiye
• WordPress forumaction (PAGE_id)(user)SQL Injection
  • From: hackturkiye . hackturkiye
• Wordpress Plugin (wp-content/recipe) SQL Injection
  • From: hackturkiye . hackturkiye
• joomla SQL Injection(com_detail)
  • From: hackturkiye . hackturkiye
• lightblog 9.6 local file inclusion vulnerability
  • From: muuratsalo experimental hack lab
• joomla SQL Injection(com_filebase)
  • From: hackturkiye . hackturkiye
• joomla SQL Injection(com_galeria)
  • From: hackturkiye . hackturkiye
• RunCMS 1.6.1 Multiple XSS and XSRF Vulnerabilties
  • From: nbbn
• WordPress SQL Injection(wp-content-simple-forum)
  • From: hackturkiye . hackturkiye
• joomla SQL Injection(com_jooget)
  • From: hackturkiye . hackturkiye
• RUXCON 2008 CALL FOR PAPERS
  • From: cfp
• Simple CMS <= 1.0.3 (indexen.php area) Remote SQL Injection Exploit
  • From: sys-project
• joomla SQL Injection(com_ricette)
  • From: hackturkiye . hackturkiye
• Crafty Syntax Xss Vulnerability
  • From: Ozgur Ozdemircili
• Wordpress Plugin (wp-people) SQL Injection
  • From: hackturkiye . hackturkiye
• WordPress album PHOTO SQL Injection
  • From: hackturkiye . hackturkiye
• ProjectPier <= 0.80 Cross Site Scripting and Request Forgery
  • From: L4teral
• joomla SQL Injection (cat)(com_downloads)
  • From: hackturkiye . hackturkiye
• ATutor <= 1.5.5 Cross Site Scripting
  • From: L4teral
• [SECURITY] [DSA 1495-2] New nagios-plugins packages fix regression
  • From: Moritz Muehlenhoff
• (tip=sollinkicerik)SQL Injection Vulnerability
  • From: hackturkiye . hackturkiye
• Re: etomite xss
  • From: ralph
• Re: etomite xss
  • From: dean
• [DSECRG-08-015] Multiple Security Vulnerabilities in Dokeos 1.8.4
  • From: Digital Security Research Group
• XOOPS Module section SQL Injection(articleid)
  • From: hackturkiye . hackturkiye
• joomla SQL Injection(com_iigcatalog)
  • From: hackturkiye . hackturkiye
• joomla SQL Injection(com_formtool)
  • From: hackturkiye . hackturkiye
• SmarterMail Enterprise 4.3 - malformed mail XSS
  • From: jplopezy
• joomla SQL Injection(com_detail)
  • From: hackturkiye . hackturkiye
• XOOPS Module wflinks SQL Injection(cid)
  • From: hackturkiye . hackturkiye
• XOOPS Module myTopics-print SQL Injection(articleid)
  • From: hackturkiye . hackturkiye
• joomla SQL Injection(com_facileforms)
  • From: hackturkiye . hackturkiye
• joomla SQL Injection(com_team
  • From: hackturkiye . hackturkiye
• joomla SQL Injection(com_geoboerse)
  • From: hackturkiye . hackturkiye
• joomla SQL Injection(com_listoffreeads)
  • From: hackturkiye . hackturkiye
• SYMSA-2008-001: Lyris ListManager - Multiple Vulnerabilities
  • From: research
• joomla SQL Injection(com_genealogy)
  • From: hackturkiye . hackturkiye
• WoltLab Burning Board 3.0.3 PL1 SQL-Injection Vulnerability
  • From: nbbn
• PR06-12: XSS on BEA Plumtree Foundation and AquaLogic Interaction portals
  • From: ProCheckUp Research
• PR08-01: Several XSS, a cross-domain redirect and a webroot disclosure on Spyce - Python Server Pages (PSP)
  • From: ProCheckUp Research
• XOOPS Module vacatures SQL Injection
  • From: hackturkiye . hackturkiye
• [DSECRG-08-016] Jinzora 2.7.5 Multiple XSS
  • From: Digital Security Research Group
• XOOPS Module badliege SQL Injection
  • From: hackturkiye . hackturkiye
• XOOPS Module events SQL Injection
  • From: hackturkiye . hackturkiye
• joomla SQL Injection(com_foevpartners)
  • From: hackturkiye . hackturkiye
• XOOPS Module seminars SQL Injection
  • From: hackturkiye . hackturkiye
• joomla SQL Injection(com_magazine)
  • From: hackturkiye . hackturkiye
• [SECURITY] [DSA 1498-1] New libimager-perl packages fix arbitrary code execution
  • From: Steve Kemp
• Re: CSA-L03: Linux kernel vmsplice unchecked user-pointer dereference
  • From: si0uxsecurity
• XOOPS Module classifieds SQL Injection(cid)
  • From: hackturkiye . hackturkiye
• XOOPS Module wflinks SQL Injection(cid)
  • From: hackturkiye . hackturkiye
• XOOPS Module eEmpregos SQL Injection(cid)
  • From: hackturkiye . hackturkiye
• PHP-Nuke Module Web_Links SQL Injection(cid)
  • From: hackturkiye . hackturkiye
• [ MDVSA-2007:047 ] - Updated Thunderbird packages fix multiple vulnerabilities
  • From: security
• NULL pointer crash in freeSSHd 1.20
  • From: Luigi Auriemma
• Multiple buffer-overflow in NowSMS v2007.06.27
  • From: Luigi Auriemma
• Two heap overflow in Foxit WAC Server 2.0 Build 3503
  • From: Luigi Auriemma
• Access violation and limited informations disclosure in webcamXP 3.72.440.0
  • From: Luigi Auriemma
• [SECURITY] [DSA 1499-1] New pcre3 packages fix arbitrary code execution
  • From: Florian Weimer
• [security bulletin] HPSBTU02311 SSRT080001 rev.1 - HP Tru64 UNIX running Perl, Remote Execution of Arbitrary Code
  • From: security-alert
• Web Hacking Incidents Database Update for Feb 20th
  • From: Ofer Shezaf
• Xoops-2.0.16 Remote File Inclusion
  • From: f10
• Re: XOOPS Module wflinks SQL Injection(cid)
  • From: packet
• Advisory SE-2008-01: PunBB Blind Password Recovery Vulnerability
  • From: Stefan Esser
• iDefense Security Advisory 02.19.08: EMC RepliStor Multiple Heap Overflow Vulnerabilities
  • From: iDefense Labs
• Heap overflow in Sybase MobiLink 10.0.1.3629
  • From: Luigi Auriemma
• ZDI-08-007: Symantec VERITAS Storage Foundation Administrator Service Heap Overflow Vulnerability
  • From: zdi-disclosures
• [USN-579-1] Qt vulnerability
  • From: Jamie Strandboge
• [security bulletin] HPSBST02314 SSRT080016 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-003 to MS08-013
  • From: security-alert
• aeries browser interface(ABI) 3.8.2.8 XSS
  • From: admin
• [ MDVSA-2008:046-1 ] - Updated xine-lib package fixes arbitrary code execution vulnerability
  • From: security
• joomla SQL Injection(com_asortyment)katid
  • From: hackturkiye . hackturkiye
• aeries browser interface(ABI) 3.7.2.2 Remote SQL Injection
  • From: admin
• ZyXEL Gateways Vulnerability Research: http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf
  • From: ProCheckUp Research
• iDefense Security Advisory 02.20.08: Symantec Veritas Storage Foundation Scheduler Service DoS Vulnerability
  • From: iDefense Labs
• PHP-Nuke Module Classifieds SQL Injection(Details)
  • From: hackturkiye . hackturkiye
• [USN-580-1] libcdio vulnerability
  • From: Jamie Strandboge
• Re: iDefense Security Advisory 02.19.08: EMC RepliStor Multiple Heap Overflow Vulnerabilities
  • From: iDefense Labs
• joomla SQL Injection(com_referenzen)
  • From: hackturkiye . hackturkiye
• joomla SQL Injection(com_joomlavvz)
  • From: hackturkiye . hackturkiye
• CFP: Workshop on Open Source Software for Computer and Network Forensics
  • From: Stefano Zanero
• PHP-Nuke Module BenchmarkNewsInjection(sid)
  • From: hackturkiye . hackturkiye
• joomla SQL Injection(com_idvnews)
  • From: hackturkiye . hackturkiye
• XOOPS Module tinyevent-print SQL Injection(id)
  • From: hackturkiye . hackturkiye
• PHP-Nuke Siir SQL Injection(id)
  • From: hackturkiye . hackturkiye
• SQL-injection, XSS in OSSIM (Open Source Security Information Management)
  • From: marcin . kopec
• Announce: RFIDIOt credit card sub-module: ChAP.py
  • From: Adam Laurie
• PHP-Nuke genaral print SQL Injection(id)
  • From: hackturkiye . hackturkiye
• PHP-Nuke Module Downloads SQL Injection(sid)
  • From: hackturkiye . hackturkiye
• PHP-Nuke Module Dossiers Injection(did)
  • From: hackturkiye . hackturkiye
• joomla SQL Injection(com_mygallery)
  • From: hackturkiye . hackturkiye
• joomla SQL Injection(com_most)secid
  • From: hackturkiye . hackturkiye
• VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates
  • From: VMware Security team
• aeries browser interface(ABI) 3.8.2.8 Remote SQL Injection
  • From: admin
• XOOPS Module prayerlist SQL Injection(cid)
  • From: hackturkiye . hackturkiye
• joomla SQL Injection(com_asortyment)katid
  • From: hackturkiye . hackturkiye
• joomla SQL Injection(com_cms)
  • From: hackturkiye . hackturkiye
• [SECURITY] [DSA 1500-1] New splitvt packages fix privilege escalation
  • From: Steve Kemp
• Academic Computer Security Conference
  • From: Jon R. Kibler
• [SECURITY] [DSA 1501-1] New dspam packages fix information disclosure
  • From: Thijs Kinkhorst
• [ GLSA 200802-09 ] ClamAV: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• Cold Boot Attacks on Disk Encryption
  • From: Jacob Appelbaum
• CanSecWest 2008 Mar 26-28
  • From: Dragos Ruiu
• EDLGraph 1.0
  • From: subere
• [SECURITY] [DSA 1502-1] New wordpress packages fix multiple vulnerabilities
  • From: Noah Meyerhans
• Certification for Web Application Security Professionals
  • From: Anurag Agarwal
• [USN-581-1] PCRE vulnerability
  • From: Kees Cook
• IBM Quickr 8 Calendar Xss Injection (Bypass Quickr 8.0 Xss Filter)
  • From: goldshlager19
• Re: SQL-injection, XSS in OSSIM (Open Source Security Information Management)
  • From: Dominique Karg
• Tool release: extract Windows credentials from registry hives
  • From: Brendan Dolan-Gavitt
• [security bulletin] HPSBGN02298 SSRT071502 rev.3 - HP Notebook PC Quick Launch Button (QLB) Software Running on Windows, Remote Execution of Arbitrary Code, Gain Privileged Access
  • From: security-alert
• [SECURITY] [DSA 1503-1] New Linux kernel 2.4.27 packages fix several issues
  • From: dann frazier
• Multiple vulnerabilities in Double-Take 5.0.0.2865
  • From: Luigi Auriemma
• [SECURITY] [DSA 1504-1] New Linux kernel 2.6.8 packages fix several issues
  • From: dann frazier
• [SECURITY] [DSA 1505-1] New alsa-driver packages fix kernel memory leak
  • From: dann frazier
• [Aria-Security.Net] BestWebApp Dating System SQL Injection
  • From: no-reply
• joomla com_product SQL Injection(catid)
  • From: hackturkiye . hackturkiye
• joomla com_hello_world SQL Injection(id)
  • From: hackturkiye . hackturkiye
• php nuke Sections SQL Injection(print)
  • From: hackturkiye . hackturkiye
• [ MDVSA-2008:048 ] - Updated Firefox packages fix multiple vulnerabilities
  • From: security
• php-nuke Recipes SQL Injection(recipeid)
  • From: hackturkiye . hackturkiye
• php nuke gallery SQL Injection(aid)
  • From: hackturkiye . hackturkiye
• php-nuke Kuran SQL Injection(surano)
  • From: hackturkiye . hackturkiye
• aura cms lihatberita SQL Injection(id)
  • From: hackturkiye . hackturkiye
• CastleCops Six Years Old
  • From: Paul Laudanski
• php-nuke Quran SQL Injection(surano)
  • From: hackturkiye . hackturkiye
• phpechocms v 2.0 rc3 RFI
  • From: beenudel1986
• [ MDVSA-2008:049 ] - Updated nss_ldap package fixes race condition allowing user data theft
  • From: security
• Joomla com_stat "id" Remote SQL Injection
  • From: no-reply
• joomla com_garyscookbook SQL Injection(id)
  • From: hackturkiye . hackturkiye
• joomla com_wines SQL Injection(id)
  • From: hackturkiye . hackturkiye
• Re: Re: SQL-injection, XSS in OSSIM (Open Source Security Information Management)
  • From: dcid
• joomla com_simpleshop SQL Injection(section) #
  • From: hackturkiye . hackturkiye
• Joomla Com_blog "pid" Remote SQL Injection
  • From: no-reply
• Joomla com_inter "id" Remote SQL Injection
  • From: no-reply
• Softbiz jokes and funny pictures (index.php) sql injection
  • From: Hamza Almersoumi
• Pigyard Art Gallery Multiple SQL Injection
  • From: No-Reply
• Alkacon OpenCms tree_files.jsp resource XSS
  • From: nnposter
• S21SEC-040-en: Infinite invalid authentication attempts possible in BEA WebLogic Server
  • From: S21sec labs
• [SECURITY] [DSA 1507-1] New turba2 packages fix permission testing
  • From: Steve Kemp
• [SECURITY] [DSA 1506-1] New iceape packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Packeteer Products File Listing XSS
  • From: nnposter
• [ GLSA 200802-10 ] Python: PCRE Integer overflow
  • From: Robert Buchholz
• Php Nuke "Sell" module SQL Injection ("cid")
  • From: no-reply
• CORE-2007-0930 Path Traversal vulnerability in VMware's shared folders implementation
  • From: Core Security Technologies Advisories
• Aria-Security.Net: Joomla Com_publication "pid" Remote SQL Injection
  • From: No-Reply
• Wordpress Plugin Sniplets 1.1.2 Multiple Vulnerabilities
  • From: nbbn
• Powered by Pagetool Ver (1.04-05-06-07)
  • From: turkish-warrorr
• [SECURITY] [DSA 1508-1] New diatheke packages fix arbirary shell command execution
  • From: Thijs Kinkhorst
• Format string and buffer-overflow in SurgeMail 38k4
  • From: Luigi Auriemma
• Re: Powered by Pagetool Ver (1.04-05-06-07)
  • From: packet
• NULL pointer in SurgeFTP 2.3a2
  • From: Luigi Auriemma
• Nortel IP Phone DoS
  • From: sipherr
• php-nuke sql injection reportaj [secid]
  • From: lovebug
• [SECURITY] [DSA 1509-1] New koffice packages fix multiple vulnerabilities
  • From: Noah Meyerhans
• Bypassing OfficeScan Trend Micro AV
  • From: Danux
• SandMan 1.0.080226 is out!
  • From: Matthieu Suiche
• Re: Nortel IP Phone DoS
  • From: amarkov
• Re: Re: Nortel IP Phone DoS
  • From: sipherr
• [ MDVSA-2008:050 ] - Updated cups packages fix multiple vulnerabilities
  • From: security
• [ GLSA 200802-12 ] xine-lib: User-assisted execution of arbitrary code
  • From: Robert Buchholz
• [ GLSA 200802-11 ] Asterisk: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [ MDVSA-2008:051 ] - Updated cups packages fix vulnerabilities
  • From: security
• iDefense Security Advisory 02.26.08: Symantec Scan Engine 5.1.2 RAR File Denial of Service Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 02.26.08: Symantec Scan Engine 5.1.2 RAR File Buffer Overflow Vulnerability
  • From: iDefense Labs
• [SECURITY] [DSA 1510-1] New ghostscript packages fix arbitrary code execution
  • From: Thijs Kinkhorst
• iDefense Security Advisory 02.26.08: Mozilla Thunderbird MIME External-Body Heap Overflow Vulnerability
  • From: iDefense Labs
• CFP - ekoparty 4th edition
  • From: ekoparty
• Re: Mambo 4.6.3 Path Disclosure, XSS , XSRF, DOS
  • From: jamboomla
• Buffer-overflow in the passwords handling of Trend Micro OfficeScan 8.0 and possibly other products
  • From: Luigi Auriemma
• [ MDVSA-2008:052 ] - Updated cacti packages fix multiple vulnerabilities
  • From: security
• CORE-2008-0130: VLC media player chunk context validation error
  • From: Core Security Technologies Advisories
• [ MDVSA-2008:053 ] - Updated pcre packages fix vulnerability
  • From: security
• security and aluminum foil hats
  • From: Pete Herzog
• Urulu 2.1 Blind SQL Injection Vulnerability (CVE-2008-0385)
  • From: Daniel Roethlisberger
• 123 Flash Chat Module for phpBB
  • From: f10
• PHP-Nuke My_eGallery "gid" Remote SQL Injection
  • From: no-reply
• PR07-42: Webroot disclosure on Juniper Networks Secure Access 2000
  • From: ProCheckUp Research
• PR07-41: XSS on Juniper Networks Secure Access 2000
  • From: ProCheckUp Research
• Re: 123 Flash Chat Module for phpBB
  • From: f10
• RE: Buffer-overflow in the passwords handling of Trend Micro OfficeScan 8.0 and possibly other products
  • From: Raymond_Villafania
• XSS on XRMS- open source CRM
  • From: vijayv
• rPSA-2008-0084-1 lighttpd
  • From: rPath Update Announcements
• rPSA-2008-0086-1 pcre
  • From: rPath Update Announcements
• rPSA-2008-0088-1 am-utils
  • From: rPath Update Announcements
• Loginwindow.app and Mac OS X
  • From: Jacob Appelbaum
• rPSA-2008-0082-1 espgs
  • From: rPath Update Announcements
• [ MDVSA-2008:054 ] - Updated dbus packages fix vulnerability
  • From: security