Bugtraq

• Thread Index

• CastleCops Six Years Old
  • From: Paul Laudanski
• aura cms lihatberita SQL Injection(id)
  • From: hackturkiye . hackturkiye
• [ MDVSA-2008:048 ] - Updated Firefox packages fix multiple vulnerabilities
  • From: security
• php nuke gallery SQL Injection(aid)
  • From: hackturkiye . hackturkiye
• php-nuke Kuran SQL Injection(surano)
  • From: hackturkiye . hackturkiye
• php-nuke Recipes SQL Injection(recipeid)
  • From: hackturkiye . hackturkiye
• php nuke Sections SQL Injection(print)
  • From: hackturkiye . hackturkiye
• joomla com_hello_world SQL Injection(id)
  • From: hackturkiye . hackturkiye
• joomla com_product SQL Injection(catid)
  • From: hackturkiye . hackturkiye
• [Aria-Security.Net] BestWebApp Dating System SQL Injection
  • From: no-reply
• [SECURITY] [DSA 1505-1] New alsa-driver packages fix kernel memory leak
  • From: dann frazier
• [SECURITY] [DSA 1504-1] New Linux kernel 2.6.8 packages fix several issues
  • From: dann frazier
• Multiple vulnerabilities in Double-Take 5.0.0.2865
  • From: Luigi Auriemma
• [SECURITY] [DSA 1503-1] New Linux kernel 2.4.27 packages fix several issues
  • From: dann frazier
• [security bulletin] HPSBGN02298 SSRT071502 rev.3 - HP Notebook PC Quick Launch Button (QLB) Software Running on Windows, Remote Execution of Arbitrary Code, Gain Privileged Access
  • From: security-alert
• Tool release: extract Windows credentials from registry hives
  • From: Brendan Dolan-Gavitt
• IBM Quickr 8 Calendar Xss Injection (Bypass Quickr 8.0 Xss Filter)
  • From: goldshlager19
• Re: SQL-injection, XSS in OSSIM (Open Source Security Information Management)
  • From: Dominique Karg
• [USN-581-1] PCRE vulnerability
  • From: Kees Cook
• [SECURITY] [DSA 1502-1] New wordpress packages fix multiple vulnerabilities
  • From: Noah Meyerhans
• EDLGraph 1.0
  • From: subere
• Certification for Web Application Security Professionals
  • From: Anurag Agarwal
• CanSecWest 2008 Mar 26-28
  • From: Dragos Ruiu
• Cold Boot Attacks on Disk Encryption
  • From: Jacob Appelbaum
• [ GLSA 200802-09 ] ClamAV: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [SECURITY] [DSA 1501-1] New dspam packages fix information disclosure
  • From: Thijs Kinkhorst
• Academic Computer Security Conference
  • From: Jon R. Kibler
• [SECURITY] [DSA 1500-1] New splitvt packages fix privilege escalation
  • From: Steve Kemp
• joomla SQL Injection(com_cms)
  • From: hackturkiye . hackturkiye
• joomla SQL Injection(com_asortyment)katid
  • From: hackturkiye . hackturkiye
• XOOPS Module prayerlist SQL Injection(cid)
  • From: hackturkiye . hackturkiye
• aeries browser interface(ABI) 3.8.2.8 Remote SQL Injection
  • From: admin
• VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates
  • From: VMware Security team
• joomla SQL Injection(com_most)secid
  • From: hackturkiye . hackturkiye
• joomla SQL Injection(com_mygallery)
  • From: hackturkiye . hackturkiye
• PHP-Nuke Module Downloads SQL Injection(sid)
  • From: hackturkiye . hackturkiye
• PHP-Nuke genaral print SQL Injection(id)
  • From: hackturkiye . hackturkiye
• PHP-Nuke Module Dossiers Injection(did)
  • From: hackturkiye . hackturkiye
• Announce: RFIDIOt credit card sub-module: ChAP.py
  • From: Adam Laurie
• SQL-injection, XSS in OSSIM (Open Source Security Information Management)
  • From: marcin . kopec
• PHP-Nuke Siir SQL Injection(id)
  • From: hackturkiye . hackturkiye
• XOOPS Module tinyevent-print SQL Injection(id)
  • From: hackturkiye . hackturkiye
• joomla SQL Injection(com_idvnews)
  • From: hackturkiye . hackturkiye
• PHP-Nuke Module BenchmarkNewsInjection(sid)
  • From: hackturkiye . hackturkiye
• joomla SQL Injection(com_joomlavvz)
  • From: hackturkiye . hackturkiye
• CFP: Workshop on Open Source Software for Computer and Network Forensics
  • From: Stefano Zanero
• joomla SQL Injection(com_referenzen)
  • From: hackturkiye . hackturkiye
• Re: iDefense Security Advisory 02.19.08: EMC RepliStor Multiple Heap Overflow Vulnerabilities
  • From: iDefense Labs
• [USN-580-1] libcdio vulnerability
  • From: Jamie Strandboge
• PHP-Nuke Module Classifieds SQL Injection(Details)
  • From: hackturkiye . hackturkiye
• iDefense Security Advisory 02.20.08: Symantec Veritas Storage Foundation Scheduler Service DoS Vulnerability
  • From: iDefense Labs
• ZyXEL Gateways Vulnerability Research: http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf
  • From: ProCheckUp Research
• aeries browser interface(ABI) 3.7.2.2 Remote SQL Injection
  • From: admin
• joomla SQL Injection(com_asortyment)katid
  • From: hackturkiye . hackturkiye
• [ MDVSA-2008:046-1 ] - Updated xine-lib package fixes arbitrary code execution vulnerability
  • From: security
• aeries browser interface(ABI) 3.8.2.8 XSS
  • From: admin
• [security bulletin] HPSBST02314 SSRT080016 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-003 to MS08-013
  • From: security-alert
• [USN-579-1] Qt vulnerability
  • From: Jamie Strandboge
• ZDI-08-007: Symantec VERITAS Storage Foundation Administrator Service Heap Overflow Vulnerability
  • From: zdi-disclosures
• Heap overflow in Sybase MobiLink 10.0.1.3629
  • From: Luigi Auriemma
• Advisory SE-2008-01: PunBB Blind Password Recovery Vulnerability
  • From: Stefan Esser
• iDefense Security Advisory 02.19.08: EMC RepliStor Multiple Heap Overflow Vulnerabilities
  • From: iDefense Labs
• Xoops-2.0.16 Remote File Inclusion
  • From: f10
• Re: XOOPS Module wflinks SQL Injection(cid)
  • From: packet
• Web Hacking Incidents Database Update for Feb 20th
  • From: Ofer Shezaf
• [security bulletin] HPSBTU02311 SSRT080001 rev.1 - HP Tru64 UNIX running Perl, Remote Execution of Arbitrary Code
  • From: security-alert
• [SECURITY] [DSA 1499-1] New pcre3 packages fix arbitrary code execution
  • From: Florian Weimer
• Access violation and limited informations disclosure in webcamXP 3.72.440.0
  • From: Luigi Auriemma
• Two heap overflow in Foxit WAC Server 2.0 Build 3503
  • From: Luigi Auriemma
• Multiple buffer-overflow in NowSMS v2007.06.27
  • From: Luigi Auriemma
• NULL pointer crash in freeSSHd 1.20
  • From: Luigi Auriemma
• [ MDVSA-2007:047 ] - Updated Thunderbird packages fix multiple vulnerabilities
  • From: security
• PHP-Nuke Module Web_Links SQL Injection(cid)
  • From: hackturkiye . hackturkiye
• XOOPS Module eEmpregos SQL Injection(cid)
  • From: hackturkiye . hackturkiye
• [SECURITY] [DSA 1498-1] New libimager-perl packages fix arbitrary code execution
  • From: Steve Kemp
• XOOPS Module wflinks SQL Injection(cid)
  • From: hackturkiye . hackturkiye
• XOOPS Module classifieds SQL Injection(cid)
  • From: hackturkiye . hackturkiye
• Re: CSA-L03: Linux kernel vmsplice unchecked user-pointer dereference
  • From: si0uxsecurity
• joomla SQL Injection(com_magazine)
  • From: hackturkiye . hackturkiye
• XOOPS Module seminars SQL Injection
  • From: hackturkiye . hackturkiye
• XOOPS Module badliege SQL Injection
  • From: hackturkiye . hackturkiye
• XOOPS Module events SQL Injection
  • From: hackturkiye . hackturkiye
• XOOPS Module vacatures SQL Injection
  • From: hackturkiye . hackturkiye
• joomla SQL Injection(com_foevpartners)
  • From: hackturkiye . hackturkiye
• PR06-12: XSS on BEA Plumtree Foundation and AquaLogic Interaction portals
  • From: ProCheckUp Research
• WoltLab Burning Board 3.0.3 PL1 SQL-Injection Vulnerability
  • From: nbbn
• SYMSA-2008-001: Lyris ListManager - Multiple Vulnerabilities
  • From: research
• joomla SQL Injection(com_genealogy)
  • From: hackturkiye . hackturkiye
• [DSECRG-08-016] Jinzora 2.7.5 Multiple XSS
  • From: Digital Security Research Group
• joomla SQL Injection(com_listoffreeads)
  • From: hackturkiye . hackturkiye
• PR08-01: Several XSS, a cross-domain redirect and a webroot disclosure on Spyce - Python Server Pages (PSP)
  • From: ProCheckUp Research
• joomla SQL Injection(com_facileforms)
  • From: hackturkiye . hackturkiye
• XOOPS Module myTopics-print SQL Injection(articleid)
  • From: hackturkiye . hackturkiye
• XOOPS Module wflinks SQL Injection(cid)
  • From: hackturkiye . hackturkiye
• joomla SQL Injection(com_geoboerse)
  • From: hackturkiye . hackturkiye
• joomla SQL Injection(com_detail)
  • From: hackturkiye . hackturkiye
• joomla SQL Injection(com_team
  • From: hackturkiye . hackturkiye
• SmarterMail Enterprise 4.3 - malformed mail XSS
  • From: jplopezy
• joomla SQL Injection(com_formtool)
  • From: hackturkiye . hackturkiye
• joomla SQL Injection(com_iigcatalog)
  • From: hackturkiye . hackturkiye
• XOOPS Module section SQL Injection(articleid)
  • From: hackturkiye . hackturkiye
• [DSECRG-08-015] Multiple Security Vulnerabilities in Dokeos 1.8.4
  • From: Digital Security Research Group
• Re: etomite xss
  • From: dean
• Re: etomite xss
  • From: ralph
• [SECURITY] [DSA 1495-2] New nagios-plugins packages fix regression
  • From: Moritz Muehlenhoff
• (tip=sollinkicerik)SQL Injection Vulnerability
  • From: hackturkiye . hackturkiye
• ProjectPier <= 0.80 Cross Site Scripting and Request Forgery
  • From: L4teral
• ATutor <= 1.5.5 Cross Site Scripting
  • From: L4teral
• joomla SQL Injection(com_ricette)
  • From: hackturkiye . hackturkiye
• joomla SQL Injection (cat)(com_downloads)
  • From: hackturkiye . hackturkiye
• RUXCON 2008 CALL FOR PAPERS
  • From: cfp
• WordPress album PHOTO SQL Injection
  • From: hackturkiye . hackturkiye
• joomla SQL Injection(com_jooget)
  • From: hackturkiye . hackturkiye
• Wordpress Plugin (wp-people) SQL Injection
  • From: hackturkiye . hackturkiye
• WordPress SQL Injection(wp-content-simple-forum)
  • From: hackturkiye . hackturkiye
• Simple CMS <= 1.0.3 (indexen.php area) Remote SQL Injection Exploit
  • From: sys-project
• RunCMS 1.6.1 Multiple XSS and XSRF Vulnerabilties
  • From: nbbn
• Crafty Syntax Xss Vulnerability
  • From: Ozgur Ozdemircili
• joomla SQL Injection(com_galeria)
  • From: hackturkiye . hackturkiye
• joomla SQL Injection(com_filebase)
  • From: hackturkiye . hackturkiye
• lightblog 9.6 local file inclusion vulnerability
  • From: muuratsalo experimental hack lab
• joomla SQL Injection(com_detail)
  • From: hackturkiye . hackturkiye
• Wordpress Plugin (wp-content/recipe) SQL Injection
  • From: hackturkiye . hackturkiye
• WordPress forumaction (PAGE_id)(user)SQL Injection
  • From: hackturkiye . hackturkiye
• joomla SQL Injection(com_profile)
  • From: hackturkiye . hackturkiye
• Re[2]: Apache web server 2.2: htpasswd predictable salt weakness
  • From: 3APA3A
• [SECURITY] [DSA 1497-1] New clamav packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• joomla SQL Injection(com_sg)
  • From: hackturkiye . hackturkiye
• joomla SQL Injection(com_emcompose)
  • From: hackturkiye . hackturkiye
• joomla SQL Injection(com_filebase)
  • From: hackturkiye . hackturkiye
• joomla SQL Injection(com_lexikon)
  • From: hackturkiye . hackturkiye
• banpro-dms 1.0 local file inclusion vulnerability
  • From: muuratsalo experimental hack lab
• joomla SQL Injection( com_scheduling)
  • From: hackturkiye . hackturkiye
• joomla SQL Injection(com_salesrep)
  • From: hackturkiye . hackturkiye
• [HISPASEC] FireFox 2.0.0.11 and Opera 9.50 beta Remote Memory Information Leak, FireFox 2.0.0.11 Remote Denial of Service
  • From: Gynvael Coldwind
• Re: artmedic_weblog Cross Site Scriptting Vulnerbility
  • From: jyvaeskylae
• [ MDVSA-2008:046 ] - Updated xine-lib package fixes arbitrary code execution vulnerability
  • From: security
• rPSA-2008-0059-1 openldap openldap-clients openldap-servers
  • From: rPath Update Announcements
• Re: rPSA-2008-0052-1 kernel
  • From: gregory
• rPSA-2008-0056-1 mailman
  • From: rPath Update Announcements
• Simple Forum Version 1.7-1.9(pagename)
  • From: hackturkiye . hackturkiye
• Re: ACER Travelmate 600 and 800 series - Smartcard flawed Implementation
  • From: linke_z
• Re: Apache web server 2.2: htpasswd predictable salt weakness
  • From: Peter Watkins
• all version Wordpress FORUM S@L injection
  • From: hackturkiye . hackturkiye
• joomla faq SQL Injection
  • From: hackturkiye . hackturkiye
• joomla com_activities sql injection
  • From: hackturkiye . hackturkiye
• [ GLSA 200802-08 ] Boost: Denial of Service
  • From: Raphael Marichez
• Re: [Full-disclosure] rPSA-2008-0052-1 kernel
  • From: Tonnerre Lombard
• Ecommerce Websites from b1st.com SQL Injection
  • From: hackturkiye . hackturkiye
• joomla "com_smslist" sql injecton
  • From: hackturkiye . hackturkiye
• engineering Neoteric UK LTD S@L &#304;NJECT&#304;ON
  • From: hackturkiye . hackturkiye
• artmedic_weblog Cross Site Scriptting Vulnerbility
  • From: hadihadi_zedehal_2006
• [ MDVSA-2008:045 ] - Updated MPlayer packages fix a few vulnerabilities
  • From: security
• Re: Apache web server 2.2: htpasswd predictable salt weakness
  • From: 3APA3A
• Simple Forum Version 1.10-1.11 SQL Injection
  • From: hackturkiye . hackturkiye
• SellOwnHouse login SQL Injection
  • From: hackturkiye . hackturkiye
• Re: DOINGSOFT-2008-02-11-002 IP Diva VPN SSL many XSS attacks
  • From: rose-of-a
• Sami FTP Server 2.0.* Multiple Remote Vulnerabilities
  • From: securfrog
• Re: SECURITY ADVISORY - Level Platforms, Inc. Service Center Install Data HTTP Vulnerability
  • From: cmiyazaki
• [INFIGO-2008-02-13]: SOPHOS Email Security Appliance Cross Site Scripting Vulnerability
  • From: infocus
• Re: Philips VOIP841 Multiple Vulnerabilities
  • From: mattyg
• Re: Joomla 1.0.13 - 1.0.14 / (remote) PHP file inclusion possible if old configuration.php
  • From: manuel . no_spam . bruneau
• StatCounteX 3.0 & 3.1 Admin Vulnerability
  • From: Sekomirza
• UniversalFtp Server 1.0.44 Multiple Remote Denial of service
  • From: securfrog
• scribe 0.2 local file inclusion vulnerability
  • From: muuratsalo experimental hack lab
• DOINGSOFT-2008-02-11-002 IP Diva VPN SSL many XSS attacks
  • From: eagle
• Re: UniversalFtp Server 1.0.44 Multiple Remote Denial of service
  • From: securfrog
• PlutoStatus Locator v1.0pre (alpha) local file inclusion vulnerability
  • From: muuratsalo experimental hack lab
• Rosoft Media Player 4.1.8 Buffer Overflow ( .M3U)
  • From: securfrog
• DOINGSOFT-2008-02-11 - IPDiva VPN SSL Brute force attack
  • From: eagle
• FreeBSD Security Advisory FreeBSD-SA-08:04.ipsec
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-08:03.sendfile
  • From: FreeBSD Security Advisories
• Philips VOIP841 Multiple Vulnerabilities
  • From: luca . carettoni
• Joomla 1.0.13 - 1.0.14 / (remote) PHP file inclusion possible if old configuration.php
  • From: Hendrik Jan Verheij
• [USN-578-1] Linux kernel vulnerabilities
  • From: Jamie Strandboge
• Apache web server 2.2: htpasswd predictable salt weakness
  • From: Peter Watkins
• etomite xss
  • From: th3 . r00k . nospam
• [ GLSA 200802-07 ] Pulseaudio: Privilege escalation
  • From: Pierre-Yves Rofes
• Re: Vwar New Bug
  • From: packet
• artmedic weblog multiple local file inclusion vulnerabilities
  • From: muuratsalo experimental hack lab
• [DSECRG-08-011 | FIX INFORMATION] Astrosoft HelpDesk Multiple XSS
  • From: Digital Security Research Group [DSecRG]
• ELFdump crash when analyzing crafted ELF file.
  • From: david . reguera
• JSPWiki Multiple Vulnerabilities
  • From: Trancer
• Search Unleashed 0.2.10 JavaScript injection (Wordpress plugin)
  • From: Krzysztof Burghardt
• rPSA-2008-0063-1 boost
  • From: rPath Update Announcements
• Cisco Security Advisory: Cisco Unified IP Phone Overflow and Denial of Service Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: SQL injection in Cisco Unified Communications Manager
  • From: Cisco Systems Product Security Incident Response Team
• joomla "com_omnirealestate" S@L Injection
  • From: hackturkiye . hackturkiye
• joomla "com_model"
  • From: hackturkiye . hackturkiye
• joomla upload php code or picture (com_uhp)
  • From: hackturkiye . hackturkiye
• all forums.asp hack
  • From: hackturkiye . hackturkiye
• ALL VERS&#304;ON PHPAUTOV&#304;DEO c99 shell
  • From: hackturkiye . hackturkiye
• Provided By Development Solutions SQL Injection Exploit(panel)
  • From: hackturkiye . hackturkiye
• [security bulletin] HPSBUX02313 SSRT080015 rev.1 - HP-UX Running Apache, Remote Execution of Arbitrary Code
  • From: security-alert
• [security bulletin] HPSBMA02274 SSRT071445 rev.3 - HP System Management Homepage (SMH) for HP-UX, Remote Cross Site Scripting (XSS)
  • From: security-alert
• rPSA-2008-0061-1 SDL_image
  • From: rPath Update Announcements
• [security bulletin] HPSBUX02249 SSRT071442 rev.3 - HP-UX Running the Ignite-UX or the DynRootDisk (DRD) get_system_info Command, Local Unqualified Configuration Change
  • From: security-alert
• Netkom Internet Solutions (folder_id) Remote SQL Injection Vulnerability
  • From: crazy_kinq
• rPSA-2008-0054-1 tk
  • From: rPath Update Announcements
• [Reversemode Advisory] February Advisories : Microsoft Word 2003 + Fortinet Forticlient
  • From: Reversemode
• iDefense Security Advisory 02.12.08: Adobe Flash Media Server 2 Memory Corruption Vulnerability
  • From: iDefense Labs
• Vwar New Bug
  • From: p_s3rver
• Re: XSS on Obedit v3.03
  • From: richard
• [SECURITY] [DSA 1494-2] New linux-2.6 packages fix privilege escalation
  • From: dann frazier
• SyScan'08 Call for Paper/Training
  • From: organiser@xxxxxxxxxx
• ZDI-08-006: Microsoft Internet Explorer SVG animateMotion.by Code Execution Vulnerability
  • From: zdi-disclosures
• iDefense Security Advisory 02.12.08: Adobe Flash Media Server 2 Multiple Integer Overflow Vulnerabilities
  • From: iDefense Labs
• Thanks to all, ExploitSearch in Top5 security must-have
  • From: Security Basic
• iDefense Security Advisory 02.12.08: Microsoft Internet Explorer Property Memory Corruption Vulnerability
  • From: iDefense Labs
• [SECURITY] [DSA 1496-1] New mplayer packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• QuickTime <= 7.4.1 QTPlugin.ocx Multiple Remote Stack Overflow
  • From: laurent . gaffie
• iDefense Security Advisory 02.12.08: Microsoft Office Works Converter Stack-based Buffer Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 02.12.08: Microsoft Office Works Converter Heap Overflow Vulnerability
  • From: iDefense Labs
• [SECURITY] [DSA 1495-1] New nagios-plugins packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [ GLSA 200802-06 ] scponly: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [ GLSA 200802-05 ] Gnumeric: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• Re: Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0
  • From: Luigi Auriemma
• Re: Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0
  • From: jfvanmeter
• Re: Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0
  • From: Luigi Auriemma
• Directory traversal and DoS in WinIPDS G52-33-021
  • From: Luigi Auriemma
• Cacti 0.8.7a Multiple Vulnerabilities
  • From: s4tan
• LI-countdown SQL Injection Vulnerability
  • From: sex
• cacti -- Multiple security vulnerabilities have been discovered
  • From: Mario Sergio Candian
• FLEA-2008-0007-1 gd
  • From: Foresight Linux Essential Announcement Service
• iDefense Security Advisory 02.12.08: ClamAV libclamav PE File Integer Overflow Vulnerability
  • From: iDefense Labs
• Unicode buffer-overflow in RPM Remote Print Manager 4.5.1.11
  • From: Luigi Auriemma
• Re: Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0
  • From: jfvanmeter
• Re: Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0
  • From: Luigi Auriemma
• rPSA-2008-0052-1 kernel
  • From: rPath Update Announcements
• gkrellweather
  • From: forensec
• artmedic weblog multiple xss vulnerabilities
  • From: muuratsalo experimental hack lab
• [ MDVSA-2008:044 ] - Updated kernel packages fix multiple vulnerabilities and bugs
  • From: security
• ZDI-08-005: Novell Client NWSPOOL.DLL EnumPrinters Stack Overflow Vulnerability
  • From: zdi-disclosures
• IOActive Security Advisory: Multiple Remote SiteScope Vulnerabilities
  • From: IOActive Advisories
• ZDI-08-004: Adobe AcrobatReader Javascript for PDF Integer Overflow Vulnerability
  • From: zdi-disclosures
• FLEA-2008-0001-1 firefox
  • From: Foresight Linux Essential Announcement Service
• FLEA-2008-0005-1 e2fsprogs
  • From: Foresight Linux Essential Announcement Service
• Re: Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0
  • From: jfvanmeter
• [ MDVSA-2008:043 ] - Updated kernel packages fix multiple vulnerabilities and bugs
  • From: security
• joomll(k12.tr)(com_mezun)SQL Injection
  • From: hackturkiye . hackturkiye
• CSA-L03: Linux kernel vmsplice unchecked user-pointer dereference
  • From: Wojciech Purczynski
• Kommentare zum Download script SQL Injection
  • From: hackturkiye . hackturkiye
• FLEA-2008-0004-1 rsync
  • From: Foresight Linux Essential Announcement Service
• FLEA-2008-0002-1 python
  • From: Foresight Linux Essential Announcement Service
• joomla (k12.tr)(com_iomezun)SQL Injection
  • From: hackturkiye . hackturkiye
• my little forum XSS
  • From: db
• FLEA-2008-0006-1 tetex tetex-dvips tetex-fonts
  • From: Foresight Linux Essential Announcement Service
• [ GLSA 200802-04 ] Gallery: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• FLEA-2008-0003-1 nss_ldap
  • From: Foresight Linux Essential Announcement Service
• IOActive Security Advisory: Legacy mod_jk2 Buffer Overflow
  • From: IOActive Advisories
• [ GLSA 200802-03 ] Horde IMP: Security bypass
  • From: Pierre-Yves Rofes
• Format string and buffer-overflow in Lst Network Print Server 9.4.2 build 105
  • From: Luigi Auriemma
• Format string and DoS in Opium OPI and cyanPrintIP servers 4.10.x
  • From: Luigi Auriemma
• Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0
  • From: Luigi Auriemma
• Multiple vulnerabilities in EztremeZ-IP File and Printer Server 5.1.2x15
  • From: Luigi Auriemma
• ExtraOutlook 1.2 Released
  • From: Thor (Hammer of God)
• [SECURITY] [DSA 1494-1] New linux-2.6 packages fix privilege escalation
  • From: Florian Weimer
• aliboard Beta Upload Shell From ControlPanel
  • From: رومانسي هكر
• Mercury v1.1.5 Send Message Cross-Site Scripting
  • From: No-reply
• Simple Machines Forum "SMF Shoutbox" Mod Persistent XSS
  • From: enterth3dragon
• [SECURITY] [DSA 1493-1] New sdl-image1.2 packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1490-1] New tk8.3 packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1491-1] New tk8.4 packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1492-1] New wml packages fix denial of service
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1489-1] New iceweasel packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1484-1] New xulrunner packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1485-1] New icedove packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Final CFP: EuroSec Workshop (March 31st, 2008)
  • From: Stefano Zanero
• hi
  • From: f10
• &#1662;&#1610;&#1588; &#1711;&#1586;&#1610;&#1583;&#1607; Website Design Chat Software Remote Cross-Site Scripting
  • From: no-reply
• Default Multiple Joomla! Component com_rapidrecipe "user_id=" Remote SQL Inj.
  • From: staad1
• Vwar 1.5.0
  • From: p_s3rver
• F5 BIG-IP Web Management Console CSRF (with example)
  • From: nnposter
• F5 BIG-IP Web Management Console CSRF
  • From: nnposter
• PKs Movie Database version 3.0.3 (SQL/XSS)
  • From: houssamix
• iDefense Security Advisory 02.08.08: Adobe Reader and Acrobat Multiple Stack-based Buffer Overflow Vulnerabilities
  • From: iDefense Labs
• iDefense Security Advisory 02.08.08: Adobe Reader Security Provider Unsafe Libary Path Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 02.08.08: Adobe Reader and Acrobat JavaScript Insecure Method Exposure Vulnerability
  • From: iDefense Labs
• Some interesting hashes
  • From: Open Phugu
• rPSA-2008-0051-1 firefox
  • From: rPath Update Announcements
• [SECURITY] [DSA 1488-1] New phpbb2 packages fix several vulnerabilities
  • From: Thijs Kinkhorst
• [SECURITY] CVE-2007-6286: Tomcat duplicate request processing vulnerability
  • From: Mark Thomas
• [SECURITY] CVE-2007-5333: Tomcat Cookie handling vulnerabilities
  • From: Mark Thomas
• CVE-2008-0002: Tomcat information disclosure vulnerability
  • From: Mark Thomas
• SECURITY ADVISORY - Level Platforms, Inc. Service Center Install Data HTTP Vulnerability
  • From: Brook Powers
• NULL byte writing in Emerald, RadiusNT/X and Air Marshal
  • From: Luigi Auriemma
• RE: ASUS Eee PC rooted out of the box
  • From: Bug traq
• Re: RE: ASUS Eee PC rooted out of the box
  • From: RISE Security
• rPSA-2008-0048-1 kernel
  • From: rPath Update Announcements
• jetAudio <= 7.0.5 (.ASX) Remote Stack Overflow
  • From: laurent . gaffie
• Re: Buffer Overflow Vulnerability in AxRUploadServer.dll, Activex Method (SetLogging)
  • From: david130490
• [SECURITY] [DSA 1487-1] New libexif packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Buffer Overflow Vulnerability in AxRUploadServer.dll, Activex Method (SetLogging)
  • From: david130490
• [ MDVSA-2008:039 ] - Updated netpbm packages fix buffer overflow vulnerability
  • From: security
• ASUS Eee PC rooted out of the box
  • From: RISE Security
• Joomla <= v1.0.14-RC1(Index.php) Remote File Inclusion Exploit
  • From: alex_zooz_zooz
• Joovili <= v.2.1 (members_help.php) Remote File &#304;nclude Vulnerability
  • From: crazy_kinq
• [ MDVSA-2008:038 ] - Updated gd packages fix buffer overflow vulnerability
  • From: security
• Blackboard (id) Remote SQL Injection
  • From: crazy_kinq
• Husrev Forums v2.0.1:PoWerBoard (tr) (id) Remote SQL Injection
  • From: crazy_kinq
• [DSECRG-08-014] Multiple LFI in PowerNews (Newsscript) 2.5.6
  • From: Digital Security Research Group [DSecRG]
• Adobe Reader/Acrobat Remote PDF Print Silently Vulnerability
  • From: cocoruder
• [ MDVSA-2008:042 ] - Updated Qt4 packages fix vulnerability in QSslSocket
  • From: security
• Web Hacking Incidenets Database 2007 annual Report is out
  • From: Ofer Shezaf
• [ MDVSA-2008:040 ] - Updated SDL_image packages fix vulnerabilities
  • From: security
• [USN-576-1] Firefox vulnerabilities
  • From: Jamie Strandboge
• [ MDVSA-2008:041 ] - Updated tk packages fix buffer overflow vulnerability
  • From: security
• iDefense Security Advisory 02.07.08: IBM DB2 Universal Database Administration Server Memory Corruption Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 02.07.08: IBM DB2 Universal Database db2pd Arbitrary Library Loading Vulnerability
  • From: iDefense Labs
• Multiple vulnerabilities in Ipswitch Instant Messaging 2.0.8.1
  • From: Luigi Auriemma
• [ MDVSA-2008:037 ] - Updated libcdio packages fix DoS vulnerability
  • From: security
• Checkpoint SecuRemote/Secure Client NGX Auto Local Logon Vulnerability
  • From: Michael Neal Vasquez
• [DSECRG-08-013] Modx 0.9.6.1, 0.9.6.1p1 Multiple Security Vulnerabilities
  • From: Digital Security Research Group [DSecRG]
• Re: Logs visualization in WS_FTP Server Manager 6.1.0.0
  • From: Steve Shockley
• mini-pub 0.3 multiple vulnerabilities
  • From: muuratsalo experimental hack lab
• [security bulletin] HPSBMA02309 SSRT080013 rev.1 - HP Select Identity Software, Remote Unauthorized Access
  • From: security-alert
• [ GLSA 200802-01 ] SDL_image: Two buffer overflow vulnerabilities
  • From: Raphael Marichez
• RE: A paper by Amit Klein (Trusteer): "OpenBSD DNS Cache Poisoning and Multiple O/S Predictable IP ID Vulnerability"
  • From: Amit Klein
• ZDI-08-003: Symantec Backup Exec Remote File Upload Vulnerability
  • From: zdi-disclosures
• [ GLSA 200802-02 ] Doomsday: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• Chat vulnerabilities in TinTin++ 1.97.9
  • From: Luigi Auriemma
• [SECURITY] [DSA 1483-1] New net-snmp packages fix denial of service vulnerability
  • From: Noah Meyerhans
• iDefense Security Advisory 02.04.08: Hewlett-Packard Network Node Manager Topology Manager Service DoS Vulnerability
  • From: iDefense Labs
• [ MDVSA-2008:036 ] - Updated CUPS packages fix SNMP vulnerability
  • From: security
• Logs visualization in WS_FTP Server Manager 6.1.0.0
  • From: Luigi Auriemma
• rPSA-2008-0046-1 gd
  • From: rPath Update Announcements
• Re: Tested on Webmin 1.390
  • From: ivangaravito
• rPSA-2008-0043-1 icu
  • From: rPath Update Announcements
• Re: A paper by Amit Klein (Trusteer): "OpenBSD DNS Cache Poisoning and Multiple O/S Predictable IP ID Vulnerability"
  • From: Tim Newsham
• [security bulletin] HPSBGN02310 SSRT080007 rev.1 - HP Virtual Rooms Running on Windows, Remote Execution of Arbitrary Code
  • From: security-alert
• Tested on Webmin 1.390
  • From: no-reply
• [SECURITY] [DSA 1482-1] New squid packages fix denial of service
  • From: Moritz Muehlenhoff
• A paper by Amit Klein (Trusteer): "OpenBSD DNS Cache Poisoning and Multiple O/S Predictable IP ID Vulnerability"
  • From: Amit Klein
• [security bulletin] HPSBST02302 SSRT071474 rev.1 - HP Storage Essentials SRM, Remote Unauthorized Access
  • From: security-alert
• [ MDVSA-2008:035 ] - Updated libcdio packages fix DoS vulnerability
  • From: security
• Apple iPhone 1.1.3 remote DoS exploit
  • From: morin . josh
• rPSA-2008-0040-1 mysql mysql-bench mysql-server
  • From: rPath Update Announcements
• dBpowerAMP Audio Player Release 2 Remote Buffer Overflow
  • From: Securfrog
• CYBSEC Security Advisory: Arbitrary file overwrite in Documentum Administrator / Documentum Webtop
  • From: CYBSEC Advisories
• [SECURITY] [DSA 1486-1] New gnatsweb packages fix cross-site scripting
  • From: Steve Kemp
• [SECURITY] [DSA 1480-1] New poppler packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [DSECRG-08-012] Multiple LFI in Azucar CMS 1.3
  • From: Digital Security Research Group [DSecRG]
• [SECURITY] [DSA 1481-1] New python-cherrypy packages fix denial of service
  • From: Moritz Muehlenhoff
• Re: Multiple vulnerabilities in SAPlpd 6.28
  • From: robert . ingruber
• Re: PR07-38: XSS on sIFR
  • From: hk
• [security bulletin] HPSBMA02307 SSRT071420 rev.1 - HP OpenView Network Node Manager (OV NNM) Remote Denial of Service (DoS)
  • From: security-alert
• Re: Re: PIX Privilege Escalation Vulnerability
  • From: rvandenbrink
• [ MDVSA-2008:034 ] - Updated emacs packages fix vulnerabilities
  • From: security
• NERO Media Player <= 1.4.0.35b Remote Buffer Overflow( .M3U)
  • From: Securfrog
• [USN-575-1] Apache vulnerabilities
  • From: Jamie Strandboge
• Multiple vulnerabilities in SAPlpd 6.28
  • From: Luigi Auriemma
• iDefense Security Advisory 01.31.08: IBM Informix Dynamic Server onedcu File Creation Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 01.31.08: IBM Informix Dynamic Server SQLIDEBUG File Creation Vulnerability
  • From: iDefense Labs
• Multiple vulnerabilities in WinCom LPD Total 3.0.2.623
  • From: Luigi Auriemma
• Socket termination in FTP Log Server 7.9.14.0
  • From: Luigi Auriemma
• CORE-2007-1218: MPlayer 1.0rc2 buffer overflow vulnerability
  • From: CORE Security Technologies Advisories
• CORE-2008-0122: MPlayer arbitrary pointer dereference
  • From: CORE Security Technologies Advisories
• [DSECRG-08-008] Textpattern 4.0.5 Multiple Security Vulnerabilities
  • From: Digital Security Research Group
• [DSECRG-08-011] Astrosoft HelpDesk Multiple XSS
  • From: Digital Security Research Group
• [OPENADS-SA-2008-001] Openads 2.4.2 vulnerability fixed
  • From: Matteo Beccati
• [DSECRG-08-010] VHD Web Pack 2.0 Local File Include
  • From: Digital Security Research Group
• [DSECRG-08-009] xoops 2.0.18 Local File Include
  • From: Digital Security Research Group
• Anon Proxy Server <= 0.102 remote buffer overflow
  • From: L4teral
• [security bulletin] HPSBUX02308 SSRT080010 rev.1 - HP-UX Running Apache, Remote Execution of Arbitrary Code
  • From: security-alert
• IpSwitch WS_FTPSERVER with SSH remote Buffer Overflow
  • From: securfrog
• Wordpress Pluging wp-footnotes 2.2 (admin_panel.php) Multiple Vulnerabilites
  • From: nbbn
• [ MDVSA-2008:033 ] - Updated ruby-gnome2 packages fix arbitrary code execution vulnerability
  • From: security
• phpShop <= v 0.8.1 Remote SQL injection / Filter Bypass
  • From: theredc0ders
• ITech Classifieds Multiple Remote Vulnerabilities
  • From: cybermilitan
• Domain Trader v2.0 Xss Vulnerable
  • From: cybermilitan
• [ MDVSA-2008:032 ] - Updated boost packages fix DoS vulnerabilities
  • From: security
• Wordpress Plugin dmsguestbook 1.7.0 Multiple Remote Vulnerabilities
  • From: nbbn
• The Everything Development System - SQL Injection
  • From: sub
• Youtube Clone Xross Site Scripting (load_message.php)
  • From: ciucciamilcalzino
• Sun JRE / JDK bug introduces XXE possibilities
  • From: Chris Evans
• Titan FTP Server Remote Heap Overflow (USER/PASS)
  • From: securfrog
• SQL in Archimede Net 2000 "E-Guest_show.php"
  • From: Sw33t . h4cK3r
• LightBlog Remote File Upload Vulnerability
  • From: omnipresent
• [ MDVSA-2008:031 ] -
  • From: security
• LiveCart XSS vulnerability fixed since version 1.1.0
  • From: info
• [ MDVSA-2008:030 ] - Updated pcre packages fix vulnerability
  • From: security
• nilson's blogger 0.11 remote file disclosure vulnerabilities
  • From: muuratsalo experimental hack lab
• [USN-573-1] PulseAudio vulnerability
  • From: Jamie Strandboge
• sflog! 0.96 remote file disclosure vulnerabilities
  • From: muuratsalo experimental hack lab
• Attackers can SkypeFind you
  • From: avivra
• Re: [DSECRG-08-007] OpenBSD BGPD daemon Web Interface XSS.
  • From: Digital Security Research Group
• [waraxe-2008-SA#066] - Multiple Vulnerabilities in Coppermine 1.4.14
  • From: come2waraxe
• [DSECRG-08-007] OpenBSD BGPD daemon Web Interface XSS.
  • From: Digital Security Research Group
• [ MDVSA-2008:029 ] - Updated ruby packages fix possible man-in-the-middle attack
  • From: security
• contactforms "cforms-css.php" Remote File Inclusion
  • From: Sw33t . h4cK3r
• [ GLSA 200801-22 ] PeerCast: Buffer overflow
  • From: Pierre-Yves Rofes
• [ GLSA 200801-21 ] Xdg-Utils: Arbitrary command execution
  • From: Pierre-Yves Rofes
• [ GLSA 200801-18 ] Kazehakase: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [ GLSA 200801-19 ] GOffice: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [ GLSA 200801-20 ] libxml2: Denial of Service
  • From: Pierre-Yves Rofes
• rPSA-2008-0032-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs
  • From: rPath Update Announcements
• PeteFinnigan.com Limited advisory for Oracle January 2008 CPU
  • From: Pete Finnigan
• Cisco Security Advisory: Cisco Wireless Control System Tomcat mod_jk.so Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• RE: Recent Web Hacks: WHID update for Janury 30th 2008
  • From: Michael Wojcik
• Ye&#351;il Koridor Ziyareti Defteri (index.php) SqL. inj.
  • From: g0rk3m-31
• [ MDVSA-2008:028 ] - Updated MySQL packages fix multiple vulnerabilities
  • From: security
• [ GLSA 200801-17 ] Netkit FTP Server: Denial of Service
  • From: Raphael Marichez
• [ GLSA 200801-16 ] MaraDNS: CNAME Denial of Service
  • From: Raphael Marichez
• [waraxe-2008-SA#065] - Remote Shell Command Execution in Coppermine 1.4.14
  • From: come2waraxe
• Webspell 4.01.02 2 Vulnerabilites
  • From: nbbn
• tinyBB v0.2 Message Board Remote File Inc.
  • From: g0rk3m-31
• Recent Web Hacks: WHID update for Janury 30th 2008
  • From: Ofer Shezaf
• Insecure Use of RC4 in LSrunasE and Supercrypt (CVE-2007-6340)
  • From: Daniel Roethlisberger
• AmpJuke-0.7.0 (index.php) Xss VuLn.
  • From: g0rk3m-31
• Re: Remote File Disclosure in phpCMS 1.2.2
  • From: 3APA3A
• [!!FIX Information ] Nucleus 3.31 XSS in path
  • From: Digital Security Research Group
• PHPKIT 1.6.4 PL1 2 XSRF Vulnerabilities
  • From: nbbn
• Nucleus 3.31 XSS in path
  • From: Digital Security Research Group
• Remote File Disclosure in phpCMS 1.2.2
  • From: Digital Security Research Group
• CSRF/XSS in Sungard Banner
  • From: banner
• [ GLSA 200801-15 ] PostgreSQL: Multiple vulnerabilities
  • From: Raphael Marichez
• Re: C4 Security Advisory - GE Fanuc Proficy Information Portal 2.6 Authentication Vulnerability
  • From: pete . sage
• Re: C4 Security Advisory - GE Fanuc Proficy Information Portal 2.6 Arbitrary File Upload and Execution
  • From: pete . sage
• Re: C4 Security Advisory - GE Fanuc Cimplicity 6.1 Heap Overflow
  • From: pete . sage
• Advisory: Tripwire Enterprise/Server XSS Vulnerability
  • From: Liquidmatrix Security Digest
• Re: Exploit in IE6,7
  • From: Nick FitzGerald
• Exploit in IE6,7
  • From: r2t
• [SECURITY] [DSA 1478-1] New mysql-dfsg-5.0 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Uninformed Journal Release Announcement: Volume 9
  • From: Uninformed Journal
• VB Marketing "tseekdir.cgi" Local File Inclusion
  • From: Sw33t . h4cK3r
• CORE-2007-1219: Firebird Remote Memory Corruption
  • From: Core Security Technologies Advisories
• WoltLab Burning Board 3.x.x Private Message Delete XSRF Vulnerability
  • From: nbbn
• ASPired2Protect bypass
  • From: milad_sa2007
• Re: OneCMS Vulnerabilities
  • From: webmaster
• eTicket 'index.php' Cross Site Scripting Path Vulnerability
  • From: Alessandro Tanasi
• Re: Simple Machines Forum Cross-Site Scripting Vulnerabilities
  • From: dev
• [SECURITY] [DSA 1477-1] New yarssr packages fix arbitrary shell command execution
  • From: Moritz Muehlenhoff
• ClanSphere 2007.4.4 Remote File Disclosure Vulnerability.
  • From: p4imi0
• Facebook security contact
  • From: Alexander Sotirov
• [ GLSA 200801-13 ] ngIRCd: Denial of Service
  • From: Robert Buchholz
• [ GLSA 200801-11 ] CherryPy: Directory traversal vulnerability
  • From: Robert Buchholz
• [ GLSA 200801-14 ] Blam: User-assisted execution of arbitrary code
  • From: Robert Buchholz
• [ GLSA 200801-12 ] xine-lib: User-assisted execution of arbitrary code
  • From: Robert Buchholz
• Mambo 4.6.3 Path Disclosure, XSS , XSRF, DOS
  • From: admin
• [SECURITY] [DSA 1476-1] New pulseaudio packages fix privilege escalation
  • From: Moritz Muehlenhoff
• Metasploit Framework v3.1 Released
  • From: H D Moore
• phpIP 4.3.2 - Numerous SQL Injection Vulnerablities
  • From: Charles Hooper
• PhPress-0.3.0 Read All Sql Information For Config
  • From: r2t
• F5 BIG-IP Web Management ASM Security Report XSS
  • From: nnposter
• Tool availability - browser DOM Checker
  • From: Michal Zalewski
• [SECURITY] [DSA 1475-1] new gforge packages fix cross site scripting
  • From: Thijs Kinkhorst
• [ MDVSA-2008:027 ] - Updated pulseaudio packages fix local root vulnerability
  • From: security
• Two vulnerabilities for PatchLink Update Client for Unix.
  • From: lcashdol
• Re: PIX Privilege Escalation Vulnerability
  • From: Aaron Collins
• [ MDVSA-2008:026 ] - Updated icu packages fix vulnerabilities
  • From: security
• Re: Peers static overflow in BitTorrent 6.0 and uTorrent 1.7.5
  • From: Luigi Auriemma
• C4 Security Advisory - GE Fanuc Proficy Information Portal 2.6 Authentication Vulnerability
  • From: Eyal Udassin
• C4 Security Advisory - GE Fanuc Proficy Information Portal 2.6 Arbitrary File Upload and Execution
  • From: Eyal Udassin
• C4 Security Advisory - GE Fanuc Cimplicity 6.1 Heap Overflow
  • From: Eyal Udassin
• gdb bug
  • From: digit2004
• [CandyPress] eCommerce suite (SQL Injection + XSS + Path Disclosure)
  • From: Admin
• Pre Dynamic Institution bypass
  • From: milad_sa2007
• E-SMART CART bypass
  • From: milad_sa2007
• Pre Hotel and Resorts reservation portal login bypass
  • From: milad_sa2007
• Re: Re: PIX Privilege Escalation Vulnerability
  • From: tbbunn
• phpBB 2.0.22 Remote PM Delete XSRF Vulnerability
  • From: nbbn
• iDefense Security Advisory 01.22.08: IBM Tivoli PMfOSD HTTP Request Method Buffer Overflow Vulnerability
  • From: iDefense Labs
• rPSA-2008-0030-1 CherryPy
  • From: rPath Update Announcements
• rPSA-2008-0029-1 bind bind-utils
  • From: rPath Update Announcements
• iDefense Security Advisory 01.23.08: IBM AIX pioout BSS Buffer Overflow Vulnerability
  • From: iDefense Labs
• Tiger PHP News System SQL Injection
  • From: 0in . email
• Re: PIX Privilege Escalation Vulnerability
  • From: Eloy Paris
• [ MDVSA-2008:024 ] - Updated libxfont packages fix font handling vulnerability
  • From: security
• [ MDVSA-2008:023 ] - Updated x11-server packages fix multiple vulnerabilities
  • From: security
• [ MDVSA-2008:022 ] - Updated xorg-x11 packages fix multiple vulnerabilities
  • From: security
• [ MDVSA-2008:021 ] - Updated XFree86 packages fix multiple vulnerabilities
  • From: security
• ImageShack Toolbar FileUploader Class insecurities
  • From: retrog
• [ MDVSA-2008:025 ] - Updated x11-server-xgl packages fix multiple vulnerabilities
  • From: security
• PIX Privilege Escalation Vulnerability
  • From: tbbunn
• [ GLSA 200801-10 ] TikiWiki: Multiple vulnerabilities
  • From: Raphaël Marichez
• [SECURITY] [DSA 1444-2] New php5 packages fix regression
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1474-1] New exiv2 packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• Woltlab Burning Board 2.3.6 PL2 Remote Delete Thread XSRF Vulnerability
  • From: nbbn
• RE: Cisco Security Advisory: Cisco PIX and ASA Time-to-Live Vulnerability
  • From: Eric Davis
• Syhunt: HFS (HTTP File Server) Username Spoofing and Log Forging/Injection Vulnerability
  • From: Felipe M. Aragon
• Syhunt: HFS (HTTP File Server) Log Arbitrary File/Directory Manipulation and Denial-of-Service Vulnerabilities
  • From: Felipe M. Aragon
• Syhunt: HFS (HTTP File Server) Template Cross-Site Scripting and Information Disclosure Vulnerabilities
  • From: Felipe M. Aragon
• Cisco Security Advisory: Default Passwords in the Application Velocity System
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco PIX and ASA Time-to-Live Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [ MDVSA-2008:020 ] - Updated xine-lib packages fix remote code execution vulnerabilities
  • From: security
• Web Wiz NewsPad Directory traversal
  • From: admin
• Web Wiz Rich Text Editor Directory traversal + HTM/HTML file creation on the server
  • From: admin
• Web Wiz Forums Directory traversal
  • From: admin
• UPDATED VMSA-2008-0001.1 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages
  • From: VMware Security team
• [security bulletin] HPSBUX02306 SSRT071463 rev.1 - HP-UX Running ARPA Transport, Remote Denial of Service (DoS)
  • From: security-alert
• PHP 5.2.5 cURL safe_mode bypass
  • From: cxib
• SDL_Image 1.2.6 and prior GIF handling buffer overflow
  • From: Gynvael Coldwind
• Apache mod_negotiation Xss and Http Response Splitting
  • From: Minded Security Research Labs
• XSRF under Dean’s Permalinks Migration 1.0
  • From: g30rg3_x
• Re: PR07-38: XSS on sIFR
  • From: bugs+securityfocus
• Belong Site Builder 0.1b Bypass Admincp
  • From: رومانسي هكر
• DeluxeBB 1.1 XSS Vulnerabilitie
  • From: nbbn
• PacerCMS Multiple Vulnerabilities (XSS/SQL)
  • From: db
• [ MDVSA-2008:018 ] - Updated gFTP packages fix vulnerabilities
  • From: security
• [SECURITY] [DSA 1473-1] New scponly packages fix arbitrary code execution
  • From: Florian Weimer
• Re: common dns misconfiguration can lead to "same site" scripting
  • From: Florian Weimer
• RE: Country by Country ISA Computer Sets
  • From: Jim Harrison
• Troopers 08 Security Conference, Call for Papers
  • From: Enno Rey
• Re: common dns misconfiguration can lead to "same site" scripting
  • From: David Malone
• Some hashes for the record
  • From: Sergio 'shadown' Alvarez
• [ MDVSA-2008:019 ] - Updated cairo packages fix vulnerability
  • From: security
• PR07-38: XSS on sIFR
  • From: ProCheckUp Research
• Re: 8e6 Technologies R3000 Internet Filter Bypass by Request Split
  • From: mparker
• [SECURITY] [DSA 1472-1] New xine-lib packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1471-1] New libvorbis packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [waraxe-2008-SA#064] - Sql Injection in MyBB 1.2.11
  • From: come2waraxe
• [waraxe-2008-SA#063] - Information Leakage in Kayako SupportSuite 3.11.01
  • From: come2waraxe
• [ MDVSA-2008:017 ] - Updated MySQL packages fix multiple vulnerabilities
  • From: security
• [ GLSA 200801-07 ] Adobe Flash Player: Multiple vulnerabilities
  • From: Robert Buchholz
• [SECURITY] [DSA 1469-1] New flac packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• Belkin Wireless G Plus MIMO Router F5D9230-4 Authentication Bypass Vulnerability
  • From: gmdarkfig
• [SECURITY] [DSA 1470-1] New horde3 packages fix denial of service
  • From: Moritz Muehlenhoff
• [ GLSA 200801-08 ] libcdio: User-assisted execution of arbitrary code
  • From: Robert Buchholz
• BLOG:CMS 4.2.1.c (DIR_PLUGINS) Multiple Remote File Include
  • From: رومانسي هكر
• Pass-The-Hash Toolkit v1.2 released.
  • From: Hernan Ochoa
• Call Jacking: Phreaking the BT Home Hub
  • From: Adrian P
• [ GLSA 200801-09 ] X.Org X server and Xfont library: Multiple vulnerabilities
  • From: Robert Buchholz
• boastMachine <=3.1 SQL Injection Vulnerbility
  • From: hadihadi_zedehal_2006
• Flaw in Alice gate2 pluswifi adsl modem
  • From: wargame89
• WifiZoo v1.3 released (minor release)
  • From: Hernan Ochoa
• Re: common dns misconfiguration can lead to "same site" scripting
  • From: Florian Weimer
• MegaBBS ASP Forum Cross-Site Scripting
  • From: grossman
• AXIGEN 5.0.x AXIMilter Format String Exploit
  • From: hempel
• Php Search Remote Inclusion
  • From: effectiveness63
• [SECURITY] [DSA 1468-1] New tomcat5.5 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Bloofox CMS SQL Injection (Authentication bypass) , Source code disclosure
  • From: admin
• RE: Country by Country ISA Computer Sets
  • From: Thor (Hammer of God)
• Re: common dns misconfiguration can lead to "same site" scripting
  • From: Kurt Grutzmacher
• [USN-571-2] X.org regression
  • From: Kees Cook
• BitDefender Update Server - Unauthorized Remote File Access Vulnerability
  • From: oliver karow
• [SECURITY] [DSA 1467-1] New mantis packages fix several vulnerabilities
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 1466-2] New xorg-server packages fix regression
  • From: Moritz Muehlenhoff
• [USN-572-1] apt-listchanges vulnerability
  • From: Kees Cook
• RE: Country by Country ISA Computer Sets
  • From: Thor (Hammer of God)
• Re: Re: Utimaco Safeguard Easy vulnerability
  • From: joachim . schneider
• MyBB 1.2.11 Multiple XSRF Vulnerabilities
  • From: nbbn
• Re: Tiger Team: New TV series about pen testers airing on CourtTV Dec 25 11 pm
  • From: michael . lambie
• Re: Country by Country ISA Computer Sets
  • From: Richard Powell
• RE: Country by Country ISA Computer Sets
  • From: Thor (Hammer of God)
• Re: Article DashBoard all version SQL Injection Vulnerability
  • From: hey
• Re: Country by Country ISA Computer Sets
  • From: GomoR
• Re: mcGuestbook v1.2 Remote File Inc.
  • From: the . tiger100
• RE: Country by Country ISA Computer Sets
  • From: Thor (Hammer of God)
• SinFP fingerprinting tool online demo
  • From: GomoR
• Re: Country by Country ISA Computer Sets
  • From: The Fungi
• Making big money...
  • From: jmacaranas
• SocksCap Stack Overflow (<= 2.40-051231)
  • From: azizov
• Re: Member Area System (MAS) Remote File Include Vulnerability (view_func.php)
  • From: m3venge
• common dns misconfiguration can lead to "same site" scripting
  • From: Tavis Ormandy
• New search engine for exploits
  • From: Security Basic
• ZDI-08-002: Citrix Presentation Server IMA Service Heap Overflow Vulnerability
  • From: zdi-disclosures
• Agares PhpAutoVideo 2.21(XSS/RFI) Multiple Remote Vulnerabilities
  • From: houssamix
• [USN-571-1] X.org vulnerabilities
  • From: Kees Cook
• [FIXED] Remote Denial of Service for SSH service at Dell DRAC4 (maybe Mocana SSH)
  • From: Robert Scheck
• IMF 2008 - Call for Papers
  • From: Oliver Goebel
• iDefense Security Advisory 01.17.08: Multiple Vendor X Server XFree86-Misc Extension Invalid Array Index Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 01.17.08: Multiple Vendor X Server EVI and MIT-SHM Extensions Integer Overflow Vulnerabilities
  • From: iDefense Labs
• iDefense Security Advisory 01.17.08: Multiple Vendor X Server TOG-CUP Extension Information Disclosure Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 01.17.08: Multiple Vendor X Server XInput Extension Multiple Memory Corruption Vulnerabilities
  • From: iDefense Labs
• CORE-2007-1119: CORE FORCE Kernel Buffer Overflow
  • From: CORE Security Technologies Advisories
• RE: Skype videomood XSS
  • From: avivra
• [CSNC] OKI C5510MFP Printer Password Disclosure
  • From: Adrian Leuenberger
• Clever Copy <=3.0 Multiple Remote Vulnerabilities
  • From: hadihadi_zedehal_2006
• Re: Utimaco Safeguard Easy vulnerability
  • From: benleavett
• [SECURITY] [DSA 1465-2] New apt-listchanges packages fix arbitrary code execution
  • From: Steve Kemp
• rPSA-2008-0021-1 kernel
  • From: rPath Update Announcements
• [ MDVSA-2008:016 ] - Updated apache 2.2.x packages fix multiple vulnerabilities
  • From: security
• Re: [CVE-2007-2449] Apache Tomcat XSS vulnerabilities in the JSP examples
  • From: linlei99
• rPSA-2008-0018-1 mysql mysql-bench mysql-server
  • From: rPath Update Announcements
• PHPEchoCMS Multible remote vulnerabilitis
  • From: security
• JoomlaFlash Component Multiple Remote File Inclusion
  • From: Smasher
• [SECURITY] [DSA 1465-1] New apt-listchanges packages fix arbitrary code execution
  • From: Steve Kemp
• [security bulletin] HPSBMA02133 SSRT061201 rev.7 - HP Oracle for OpenView (OfO) Critical Patch Update
  • From: security-alert
• [ MDVSA-2008:015 ] - Updated apache 2.0.x packages fix multiple vulnerabilities
  • From: security
• [USN-570-1] boost vulnerabilities
  • From: Jamie Strandboge
• [ MDVSA-2008:014 ] - Updated apache 1.3.x packages fix multiple vulnerabilities
  • From: security
• Gradman <= 0.1.3 (agregar_info.php?tabla=) Local File Inclusion Exploit
  • From: sys-project
• [waraxe-2008-SA#061] - Remote Code Execution in MyBB 1.2.10
  • From: come2waraxe
• SQL scalar function to convert big int to dot notation
  • From: Thor (Hammer of God)
• TPTI-08-02: Cisco Call Manager CTLProvider Heap Overflow Vulnerability
  • From: DVLabs
• [waraxe-2008-SA#062] - Multiple Sql Injections in MyBB 1.2.10
  • From: come2waraxe
• Country by Country Computer Sets now available for ISA 2004
  • From: Thor (Hammer of God)
• Peers static overflow in BitTorrent 6.0 and uTorrent 1.7.5
  • From: Luigi Auriemma
• mcGuestbook v1.2 Remote File Inc.
  • From: gokhankaya
• iDefense Security Advisory 01.15.08: Apple QuickTime Macintosh Resource Processing Heap Corruption Vulnerability
  • From: iDefense Labs
• Cisco Security Advisory: Cisco Unified Communications Manager CTL Provider Heap Overflow
  • From: Cisco Systems Product Security Incident Response Team
• [Aria-Security.Net] Real Estate Web SQL Injection
  • From: no-reply
• TPTI-08-01: Apple Quicktime Image File IDSC Atom Memory Corruption Vulnerability
  • From: DVLabs
• 8e6 Technologies R3000 Internet Filter Bypass by Request Split
  • From: nnposter
• rPSA-2008-0017-1 libxml2
  • From: rPath Update Announcements
• [DSECRG-08-002] Local File Include in arias 0.99-6
  • From: Digital Security Research Group [DSecRG]
• rPSA-2008-0016-1 postgresql postgresql-server
  • From: rPath Update Announcements
• cPanel Hosting Manager (dohtaccess.html)
  • From: no-reply
• rPSA-2008-0015-1 cairo
  • From: rPath Update Announcements
• [SECURITY] [DSA 1464-1] New syslog-ng packages fix denial of service
  • From: Moritz Muehlenhoff
• RichStrong CMS (showproduct.asp?cat=) Remote SQL Injection Exploit
  • From: sys-project
• [DSECRG-08-003] blogcms 4.2.1b Multiple Security Vulnerabilities
  • From: Digital Security Research Group [DSecRG]
• Re: what is this?
  • From: Yousef Syed
• Re: Defeating audio captcha systems
  • From: 3APA3A
• iDefense Security Advisory 01.15.08: TIBCO SmartSockets RTServer Multiple Untrusted Loop Bounds Vulnerabilities
  • From: iDefense Labs
• iDefense Security Advisory 01.15.08: TIBCO SmartSockets RTserver Multiple Untrusted Pointer Offset Vulnerabilities
  • From: iDefense Labs
• iDefense Security Advisory 01.15.08: TIBCO SmartSockets RTServer Multiple Untrusted Pointer Vulnerabilities
  • From: iDefense Labs
• iDefense Security Advisory 01.15.08: TIBCO SmartSockets RTserver Heap Overflow Vulnerability
  • From: iDefense Labs
• Re: Linksys WRT54 GL - Session riding (CSRF)
  • From: Valdis . Kletnieks
• Re: Linksys WRT54 GL - Session riding (CSRF)
  • From: Daniel Weber
• Re[2]: what is this?
  • From: none
• Re: [Full-disclosure] what is this?
  • From: crazy frog crazy frog
• Re: [Full-disclosure] what is this?
  • From: Gadi Evron
• RE: what is this?
  • From: Memisyazici, Aras
• Re: what is this?
  • From: Jamie Riden
• Pipe to FOR Crashes CMD
  • From: James C. Slora Jr.
• MicroNews Admin Direct Access vulnerability
  • From: xcross87
• Max's File Uploader File Upload Vulnerability
  • From: xcross87
• Article DashBoard all version SQL Injection Vulnerability
  • From: xcross87
• SecurityReason - Apache (mod_status) Refresh Header - Open Redirector (XSS)
  • From: sp3x
• Re[2]: what is this?
  • From: Denis
• Re[2]: what is this?
  • From: Denis
• Re: [Full-disclosure] what is this?
  • From: crazy frog crazy frog
• Re: [Full-disclosure] what is this?
  • From: Nick FitzGerald
• Re: what is this?
  • From: crazy frog crazy frog
• Re: Linksys WRT54 GL - Session riding (CSRF)
  • From: Jan Heisterkamp
• Exploiting the SpamBam plugin for wordpress
  • From: "JosŽé M. Palazón Romero"
• Country by Country ISA Computer Sets
  • From: Thor (Hammer of God)
• Defeating audio captcha systems
  • From: "JosŽé M. Palazón Romero"
• Re: what is this?
  • From: Denis
• [USN-569-1] libxml2 vulnerability
  • From: Kees Cook
• FreeBSD Security Advisory FreeBSD-SA-08:02.libc
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-08:01.pty
  • From: FreeBSD Security Advisories
• [ MDVSA-2008:013 ] - Updated python packages fix vulnerability in imageop module
  • From: security
• [ MDVSA-2008:012 ] - Updated python packages fix vulnerabilities
  • From: security
• [security bulletin] HPSBST02304 SSRT080003 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-001 to MS08-002
  • From: security-alert
• [security bulletin] HPSBUX02303 SSRT071468 rev.1 - HP-UX Running X Font Server (xfs) Software, Remote Execution of Arbitrary Code
  • From: security-alert
• [SECURITY] [DSA 1461-1] New libxml2 packages fix denial of service
  • From: Moritz Muehlenhoff
• [USN-568-1] PostgreSQL vulnerabilities
  • From: Jamie Strandboge
• Re: what is this?
  • From: Gadi Evron
• Re[2]: [Full-disclosure] what is this?
  • From: 3APA3A
• [SECURITY] [DSA 1463-1] New postgresql-7.4 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Hacking The Interwebs
  • From: pdp (architect)
• Re: Buffer-overflow in Quicktime Player 7.3.1.70
  • From: Marcello Barnaba (void)
• Re: Garment Center (index.cgi) Local File Inclusion
  • From: Smasher
• RE: what is this?
  • From: Mario Contestabile
• ZDI-08-001: IBM Tivoli Storage Manager Express Backup Server Heap Overflow Vulnerability
  • From: zdi-disclosures
• Re: Linksys WRT54 GL - Session riding (CSRF)
  • From: J. Oquendo
• Binn SBuilder (nid) Remote Blind Sql Injection Vulnerabily
  • From: sys-project
• Re: what is this?
  • From: admin
• Re: what is this?
  • From: Robert McArdle
• Re: what is this?
  • From: crazy frog crazy frog
• Re: Buffer-overflow in Quicktime Player 7.3.1.70
  • From: Luigi Auriemma
• Re: what is this?
  • From: Robert McArdle
• Re: what is this?
  • From: Jose Nazario
• [SECURITY] [DSA 1459-1] New gforge packages fix SQL injection
  • From: Thijs Kinkhorst
• Re: Re: Buffer-overflow in Quicktime Player 7.3.1.70
  • From: snagg
• Re: At long last -- Extra Outlooks!
  • From: Francois Labreque
• RE: At long last -- Extra Outlooks!
  • From: Thor (Hammer of God)
• RE: At long last - Extra Outlooks!
  • From: Thor (Hammer of God)
• Re: At long last -- Extra Outlooks!
  • From: Casper . Dik
• Re: [Full-disclosure] Buffer-overflow in Quicktime Player 7.3.1.70
  • From: Luigi Auriemma
• SQID v0.3 - SQL Injection Digger.
  • From: Metaeye SG
• Re: [Full-disclosure] what is this?
  • From: crazy frog crazy frog
• Re: [Full-disclosure] what is this?
  • From: Nick FitzGerald
• Re: [Full-disclosure] what is this?
  • From: 3APA3A