Bugtraq

• Thread Index

• [SECURITY] [DSA 1460-1] New postgresql-8.1 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• RE: Linksys WRT54 GL - Session riding (CSRF)
  • From: Tomaz
• [ MDVSA-2008:009-1 ] - Updated autofs packages fix insecure hosts configuration
  • From: security
• F5 BIG-IP Web Management List Search XSS
  • From: nnposter
• Re: what is this?
  • From: crazy frog crazy frog
• what is this?
  • From: crazy frog crazy frog
• [SECURITY] [DSA 1462-1] New hplip packages fix privilege escalation
  • From: Moritz Muehlenhoff
• Garment Center (index.cgi) Local File Inclusion
  • From: Smasher
• [ MDVSA-2008:008 ] - Updated kernel packages fix multiple vulnerabilities and bugs
  • From: security
• [ MDVSA-2008:009 ] - Updated autofs packages fix insecure hosts configuration
  • From: security
• Safari 2 Denial of Service
  • From: S21sec labs
• [ MDVSA-2008:011 ] - Updated rsync packages fix restrictions bypass vulnerabilities
  • From: security
• [ MDVSA-2008:010 ] - Updated libxml2 packages fix DoS vulnerability
  • From: security
• Cross site scripting (XSS) in Moodle 1.8.3
  • From: Hanno Böck
• Re: Buffer-overflow in Quicktime Player 7.3.1.70
  • From: Luigi Auriemma
• Re: At long last -- Extra Outlooks!
  • From: Alexander Bochmann
• Naymz multiple XSS
  • From: morin . josh
• CFP: EuroSec Workshop (March 31st, 2008)
  • From: Stefano Zanero
• Member Area System (MAS) Remote File Include Vulnerability (view_func.php)
  • From: ship_nx
• Re: Buffer-overflow in Quicktime Player 7.3.1.70
  • From: str0ke
• ImageAlbum Remote SQL Injection Vulnerabilities
  • From: db
• re-resting of zzuf results
  • From: Hanno Böck
• SecurityReason - Apache2 CSRF, XSS, Memory Corruption and Denial of Service Vulnerability
  • From: sp3x
• Re: Linksys WRT54 GL - Session riding (CSRF)
  • From: Florian Weimer
• SecurityReason - Apache (mod_proxy_ftp) Undefined Charset UTF-7 XSS Vulnerability
  • From: sp3x
• [ MDVSA-2008:007 ] - Updated madwifi-source, wpa_supplicant packages fix vulnerabilities
  • From: security
• At long last -- Extra Outlooks!
  • From: Thor (Hammer of God)
• Re: Re: Buffer-overflow in Quicktime Player 7.3.1.70
  • From: none
• [USN-567-1] Dovecot vulnerability
  • From: Kees Cook
• Re: Buffer-overflow in Quicktime Player 7.3.1.70
  • From: Marcello Barnaba (void)
• [ MDVSA-2008:006 ] - Updated exiv2 packages fix vulnerability
  • From: security
• [SECURITY] [DSA 1458-1] New openafs packages fix denial of service vulnerability
  • From: Noah Meyerhans
• MTCMS <=2.0 SQL Injection Vulnerbility
  • From: hadihadi_zedehal_2006
• Buffer-overflow in Quicktime Player 7.3.1.70
  • From: Luigi Auriemma
• Word 2007 Email as PDF path disclosure flaw
  • From: ebk_lists
• BT Home Flub: Pwnin the BT Home Hub (5) - exploiting IGDs remotely via UPnP
  • From: Adrian P
• [ GLSA 200801-06 ] Xfce: Multiple vulnerabilities
  • From: Robert Buchholz
• Digital Armaments January-February Hacking Challenge: Special 20.000$ Prize - Windows Vulnerabilities and Exploit
  • From: info
• [USN-566-1] OpenSSH vulnerability
  • From: Kees Cook
• PR07-06, PR07-07, PR07-08, PR07-09, PR07-10, PR07-12: Several XSS, Cross-domain Redirection and Frame Injection on Sun Java System Identity Manager
  • From: ProCheckUp Research
• Simple Machines Forum Cross-Site Scripting Vulnerabilities
  • From: DoZ
• uCon 2008 call for participation - Recife, Brazil
  • From: ucon
• [SECURITY] [DSA 1457-1] New dovecot packages fix information disclosure
  • From: Thijs Kinkhorst
• [ MDVSA-2008:005 ] - Updated libexif packages fix multiple vulnerabilities
  • From: security
• [ GLSA 200801-04 ] OpenAFS: Denial of Service
  • From: Pierre-Yves Rofes
• [USN-565-1] Squid vulnerability
  • From: Kees Cook
• [ GLSA 200801-05 ] Squid: Denial of Service
  • From: Pierre-Yves Rofes
• [SECURITY] [DSA 1456-1] New fail2ban packages fix denial of service
  • From: Thijs Kinkhorst
• [ GLSA 200801-03 ] Claws Mail: Insecure temporary file creation
  • From: Pierre-Yves Rofes
• iDefense Security Advisory 01.09.08: Novell NetWare Client nicm.sys Local Privilege Escalation Vulnerability
  • From: iDefense Labs
• [USN-563-1] CUPS vulnerabilities
  • From: Kees Cook
• [ MDVSA-2008:004 ] - Updated postgresql packages fix denial of service and privilege escalation issues
  • From: security
• [ GLSA 200801-02 ] R: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [USN-561-1] pwlib vulnerability
  • From: Kees Cook
• [USN-564-1] Net-SNMP vulnerability
  • From: Jamie Strandboge
• [INFIGO-2008-01-06]: McAfee E-Business Server Remote Preauth Code Execution / DoS - Corrected
  • From: infocus
• Pre-auth remote commands execution in SAP MaxDB 7.6.03.07
  • From: Luigi Auriemma
• [ MDVSA-2008:003 ] - Updated clamav packages fix multiple vulnerabilities
  • From: security
• [ GLSA 200801-01 ] unp: Arbitrary command execution
  • From: Robert Buchholz
• Privileg escalation in Omegasoft Insel 7
  • From: MC Iglo
• [ MDVSA-2008:004 ] - Updated postgresql packages fix denial of service and privilege escalation issues
  • From: security
• [USN-562-1] opal vulnerability
  • From: Kees Cook
• Re: First (Major) web hacking incidents for 2008. Sign of the year to come?
  • From: Paul Schmehl
• [INFIGO 2008-01-06]: McAfee E-Business Server Remote Preauth Code Execution / DoS
  • From: infocus
• First (Major) web hacking incidents for 2008. Sign of the year to come?
  • From: Ofer Shezaf
• [security bulletin] HPSBMA02239 SSRT061260 rev.3 - HP OpenView Operations (OVO) Agents Running Shared Trace Service, Remote Arbitrary Code Execution
  • From: security-alert
• LFI in Tuned Studios Templates
  • From: Digital Security Research Group [DSecRG]
• ERRATA: [ GLSA 200709-07 ] Eggdrop: Buffer overflow
  • From: Robert Buchholz
• [SECURITY] [DSA 1455-1] New libarchive1 packages fix several problems
  • From: Steve Kemp
• Re: Joomla 1.0.13 CSRF
  • From: J. Carlos Nieto
• Joomla 1.0.13 CSRF
  • From: J. Carlos Nieto
• Level-One WBR-3460A Grants Root Access
  • From: anastasiosm
• HPSBUX02156 SSRT061236 rev.4 - HP-UX Running Thunderbird, Remote Unauthorized Access or Elevation of Privileges or Denial of Service (DoS)
  • From: security-alert
• HPSBUX02153 SSRT061181 rev.7 - HP-UX Running Firefox, Remote Unauthorized Access or Elevation of Privileges or Denial of Service (DoS)
  • From: security-alert
• Corsaire Security Advisory: Sun J2RE DoS issue
  • From: advisories
• VMSA-2008-0002 Low severity security update for VirtualCenter and ESX Server 3.0.2, and ESX 3.0.1
  • From: VMware Security team
• sysHotel On Line Remote File Disclosure Vulnerability.
  • From: p4imi0
• [USN-560-1] Tomboy vulnerability
  • From: Jamie Strandboge
• [ MDVSA-2008:001-1 ] - Updated wireshark packages fix multiple vulnerabilities
  • From: security
• VMSA-2008-0001 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages
  • From: VMware Security team
• iDefense Security Advisory 01.07.08: Motorola netOctopus Agent MSR Write Privilege Escalation Vulnerability
  • From: iDefense Labs
• PWDumpX v1.0 and PWDumpX v1.1 updated - bug fixes
  • From: Reed Arvin
• RE: [HSC] Snitz Forums Multiple Vulnerabilities
  • From: Aaron Cake
• PWDumpX v1.4 - Dumps domain password cache, LSA secrets, password hashes, and password history hashes.
  • From: Reed Arvin
• Re: Linksys WRT54 GL - Session riding (CSRF)
  • From: Jan Heisterkamp
• Re: Linksys WRT54 GL - Session riding (CSRF)
  • From: Jan Heisterkamp
• Million Dollar Script 2.0.14 Remote File Disclosure Vulnerability.
  • From: p4imi0
• [SECURITY] [DSA 1454-1] New freetype packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• CORE-2007-1106: SynCE Remote Command Injection
  • From: CORE Security Technologies Advisories
• LayerOne 2008 - CFP Released
  • From: Layer One
• [SECURITY] [DSA 1453-1] New tomcat5 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• SocialURL Login Page Cross-Site Scripting
  • From: morin . josh
• [SECURITY] [DSA 1452-1] New wzdftpd packages fix denial of service
  • From: Steve Kemp
• PostgreSQL 2007-01-07 Cumulative Security Release
  • From: Josh Berkus
• Re: vBulletin 3.6.8 XSRF/XSS Vulnerability
  • From: nbbn
• Linksys WRT54 GL - Session riding (CSRF)
  • From: tomaz . bratusa
• [Reversemode Paper] Exploiting WDM Audio Drivers
  • From: Reversemode
• [SECURITY] [DSA 1451-1] New mysql-dfsg-5.0 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• New Web Hacking Incidents at WHID
  • From: Ofer Shezaf
• OneCMS Vulnerabilities
  • From: admin
• eTicket 1.5.5.2 Multiple Vulnerabilities
  • From: L4teral
• netrisk 1.9.7 Multiple Remote Vulnerabilities (sql injection/xss)
  • From: hadihadi_zedehal_2006
• [HSC] Snitz Forums Multiple Vulnerabilities
  • From: DoZ
• vBulletin 3.6.8 XSRF/XSS Vulnerability
  • From: nbbn
• Aruba Mobility Controller User Authentication Vulnerability - Aruba Advisory ID: AID-122207
  • From: Robbie Gill
• [SECURITY] [DSA 1448-1] New eggdrop packages fix arbitrary code execution
  • From: Steve Kemp
• rPSA-2008-0008-1 cups
  • From: rPath Update Announcements
• [SECURITY] [DSA 1448-1] New eggdrop packages fix execution of arbitrary code
  • From: Steve Kemp
• [SECURITY] [DSA 1450-1] New util-linux packages fix programming error
  • From: Steve Kemp
• rPSA-2008-0007-1 tetex tetex-afm tetex-dvips tetex-fonts tetex-latex tetex-xdvi
  • From: rPath Update Announcements
• [SECURITY] [DSA 1449-1] New loop-aes-utils packages fix programming error
  • From: Steve Kemp
• [ MDVSA-2008:002 ] - Updated squid package fixes remote denial of service
  • From: security
• INVISION POWER BOARD 2.1.7 ACTIVE XSS/SQL INJECTION EXPLOIT
  • From: underwater
• NetRisk 1.9.7 Remote File Inclusion Vulnerability
  • From: erne
• rPSA-2008-0006-1 libexif
  • From: rPath Update Announcements
• iDefense Security Advisory 12.24.07: Novell ZENworks Endpoint Security Management Local Privilege Escalation Vulnerability
  • From: iDefense Labs
• Re: FortiGuard: URL Filtering Application Bypass Vulnerability
  • From: 3APA3A
• Pre-auth buffer-overflow in mySQL through yaSSL
  • From: Luigi Auriemma
• Some DoS in some telnet servers
  • From: Luigi Auriemma
• Multiple vulnerabilities in yaSSL 1.7.5
  • From: Luigi Auriemma
• Re: rPSA-2008-0001-1 dovecot
  • From: Jonathan Smith
• Re: rPSA-2008-0001-1 dovecot
  • From: Dominic Hargreaves
• AW: phpBB2 2.0.22 Cross Site Scripting Vulnerability
  • From: Aufmuth Andreas
• Re: Latest round of web hacking incidents for 2007 & Project news
  • From: s f
• Re: rPSA-2008-0001-1 dovecot
  • From: Steven M. Christey
• FortiGuard: URL Filtering Application Bypass Vulnerability
  • From: Danux
• rPSA-2008-0004-1 tshark wireshark
  • From: rPath Update Announcements
• Re: phpBB2 2.0.22 Cross Site Scripting Vulnerability
  • From: neothermic
• [SECURITY] [DSA 1447-1] New tomcat5.5 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1445-1] New maradns packages fix denial of service
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1446-1] New wireshark packages fix denial of service
  • From: Moritz Muehlenhoff
• securityvulns.com russian vulnerabilities digest
  • From: 3APA3A
• [SECURITY] [DSA 1444-1] New php5 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Re: rPSA-2008-0001-1 dovecot
  • From: Dominic Hargreaves
• Re: Re: phpBB2 2.0.22 Cross Site Scripting Vulnerability
  • From: admin
• multiple CAPTCHA automation test bypass digest
  • From: 3APA3A
• rPSA-2008-0001-1 dovecot
  • From: rPath Update Announcements
• Re: Latest round of web hacking incidents for 2007 & Project news
  • From: Peter Watkins
• [SECURITY] [DSA 1443-1] New tcpreen packages fix denial of service
  • From: Moritz Muehlenhoff
• RE: Latest round of web hacking incidents for 2007 & Project news
  • From: Memisyazici, Aras
• RE: Re: Cryptome: NSA has real-time access to Hushmail servers
  • From: M. Burnett
• RE: Latest round of web hacking incidents for 2007 & Project news
  • From: Ofer Shezaf
• Re: Cryptome: NSA has real-time access to Hushmail servers
  • From: Lee Dilkie
• Re: Cryptome: NSA has real-time access to Hushmail servers
  • From: John Simpson
• Re: phpBB2 2.0.22 Cross Site Scripting Vulnerability
  • From: neothermic
• [ MDVSA-2008:1 ] - Updated wireshark packages fix multiple vulnerabilities
  • From: security
• xss in w3-msql error page
  • From: vivek_infosec
• Re: [Full-disclosure] Yet another Dialog Spoofing Vulnerability - Firefox Basic Authentication
  • From: Michal Zalewski
• Re: [Full-disclosure] Yet another Dialog Spoofing Vulnerability - Firefox Basic Authentication
  • From: avivra
• [security bulletin] HPSBGN02301 SSRT071508 rev.2 - HP Software Update Running on Windows, Remote Execution of Arbitrary Code, Gain Privileged Access
  • From: security-alert
• Yet another Dialog Spoofing Vulnerability - Firefox Basic Authentication
  • From: avivra
• AST-2008-001: Crash from transfer using BYE with Also header
  • From: Asterisk Security Team
• Buffer-overflow and format string in White_Dune 0.29beta791
  • From: Luigi Auriemma
• Multiple vulnerabilities in Georgia SoftWorks SSH2 Server 7.01.0003
  • From: Luigi Auriemma
• phpBB2 2.0.22 Cross Site Scripting Vulnerability
  • From: bugtraq
• XSS Vulnerabilities in Common Shockwave Flash Files
  • From: rich cannings
• MODx CMS Source code disclosure, local file inclusion
  • From: admin
• Cross-Site Scripting (XSS) in phpWebSite 1.4.0 search
  • From: Audun Larsen
• Re: Cryptome: NSA has real-time access to Hushmail servers
  • From: Rob Thompson
• Re: Cryptome: NSA has real-time access to Hushmail servers
  • From: Jay Hennigan
• RE: Cryptome: NSA has real-time access to Hushmail servers
  • From: Thor (Hammer of God)
• RE: Cryptome: NSA has real-time access to Hushmail servers
  • From: Craig Wright
• [HSC Security Group] Multiple CSRF in Joomla all versions - Complete compromise
  • From: zinho
• Re: Cryptome: NSA has real-time access to Hushmail servers
  • From: mark seiden-via mac
• Re: Cryptome: NSA has real-time access to Hushmail servers
  • From: J. Oquendo
• RE: Cryptome: NSA has real-time access to Hushmail servers
  • From: Kevin Reiter
• Re: TalkBack 2.2.7 Multiple Remote File Inclusion Vulnerabilities
  • From: oldguy
• Re: Cryptome: NSA has real-time access to Hushmail servers
  • From: Seth
• RE: Cryptome: NSA has real-time access to Hushmail servers
  • From: Juha-Matti Laurio
• Instant Softwares DatingSite SQL Injection
  • From: The-0utl4w-noreply
• LiveCart Multiple Cross-Site Scripting Vulnerabilities
  • From: DoZ
• Re: Re: Cryptome: NSA has real-time access to Hushmail servers
  • From: gb
• milliscripts (dir.php) Cross-Site Scripting Vulnerability
  • From: sys-project
• [ GLSA 200712-22 ] Opera: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• Fingerprints in Astaro Security Gateway v7.1
  • From: morin . josh
• Bitweaver source code disclosure, arbitrary file upload
  • From: admin
• [ GLSA 200712-25 ] OpenOffice.org: User-assisted arbitrary code execution
  • From: Pierre-Yves Rofes
• [ GLSA 200712-24 ] AMD64 x86 emulation GTK+ library: User-assisted execution of arbitrary code
  • From: Robert Buchholz
• [ GLSA 200712-23 ] Wireshark: Multiple vulnerabilities
  • From: Robert Buchholz
• CCMS v3.1 Demo <= SQL Injection Vulnerability 0day
  • From: pawel2827
• CuteNews Arbitrary File Download AllVersion
  • From: pawel2827
• TK53 Advisory #2: Multiple vulnerabilities in ClamAV
  • From: Lolek of TK53
• [ GLSA 200712-21 ] Mozilla Firefox, SeaMonkey: Multiple vulnerabilities
  • From: Robert Buchholz
• [ GLSA 200712-20 ] ClamAV: Multiple vulnerabilities
  • From: Robert Buchholz
• [ GLSA 200712-19 ] Syslog-ng: Denial of Service
  • From: Robert Buchholz
• [ GLSA 200712-18 ] Multi-Threaded DAAP Daemon: Multiple vulnerabilities
  • From: Robert Buchholz
• [ GLSA 200712-17 ] exiftags: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [ GLSA 200712-16 ] Exiv2: Integer overflow
  • From: Pierre-Yves Rofes
• [ GLSA 200712-15 ] libexif: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [SECURITY] [DSA 1442-2] New libsndfile packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• Buffer-overflow in CoolPlayer 217
  • From: Luigi Auriemma
• [SECURITY] [DSA 1441-1] New peercast packages fix arbitrary code execution
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 1440-1] New inotify-tools packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1439-1] New typo3-src packages fix SQL injection
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 1405-3] New zope-cmfplone packages fix regression
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 1438-1] New tar packages fix several vulnerabilities
  • From: Florian Weimer
• 2z-project 0.9.6.1 Multiple Security Vulnerabilities
  • From: Digital Security Research Group [DSecRG]
• FAQMasterFlexPlus multiple vulnerabilities
  • From: Juan Galiana
• OpenBiblio 0.5.2-pre4 and prior multiple vulnerabilities
  • From: Juan Galiana
• Re: Cryptome: NSA has real-time access to Hushmail servers
  • From: Steve Shockley
• Buffer-overflow in Extended Module Player 2.5.1
  • From: Luigi Auriemma
• Re: Cryptome: NSA has real-time access to Hushmail servers
  • From: Kurt Buff
• Re: Re: Re: TotalPlayer 3.0 .m3u crash
  • From: david130490
• Multiple vulnerabilities in libnemesi 0.6.4-rc1
  • From: Luigi Auriemma
• Multiple vulnerabilities in Feng 0.1.15
  • From: Luigi Auriemma
• Re: Re: TotalPlayer 3.0 .m3u crash
  • From: david130490
• Re: Cryptome: NSA has real-time access to Hushmail servers
  • From: Valdis . Kletnieks
• Re: Multiple xss in mambo 4.6.2
  • From: Hanno Böck
• Re: Tiger Team: New TV series about pen testers airing on CourtTV Dec 25 11 pm
  • From: blackredyellow
• PHP -> set_time_limit
  • From: brancohat
• Latest round of web hacking incidents for 2007 & Project news
  • From: Ofer Shezaf
• Re: TotalPlayer 3.0 .m3u crash
  • From: Luigi Auriemma
• Re: TotalPlayer 3.0 .m3u crash
  • From: Luigi Auriemma
• [security bulletin] HPSBGN02298 SSRT071502 rev.2 - HP Quick Launch Button (QLB) Running on Windows, Remote Execution of Arbitrary Code, Gain Privileged Access
  • From: security-alert
• IPortalX Forums Cross-Site Scripting Vulnerability
  • From: DoZ
• XZero Community Classifieds <= v4.95.11 LFI & SQL Injection
  • From: office
• Blakord Portal <= Beta 1.3.A (all modules) Blind Sql Injection
  • From: sys-project
• RE: Cryptome: NSA has real-time access to Hushmail servers
  • From: M. Burnett
• RE: Cryptome: NSA has real-time access to Hushmail servers
  • From: Juha-Matti Laurio
• Bid 24744 ?
  • From: balrog
• Re: Microsoft Office Publisher
  • From: fagian
• Re: Re: PHP <= 5.2.5 Safe Mode Bypass
  • From: Alireza Hassani
• [SECURITY] [DSA 1437-1] New cupsys packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Confixx Professional RF&#304;
  • From: erne
• TotalPlayer 3.0 .m3u crash
  • From: david130490
• Multiple vulnerabilities in RUNCMS 1.6 by DSecRG
  • From: Digital Security Research Group
• Unicode buffer-overflow in Zoom Player 6.00b2
  • From: Luigi Auriemma
• Double directory traversal in ImgSvr 0.6.21
  • From: Luigi Auriemma
• Re: PHP <= 5.2.5 Safe Mode Bypass
  • From: shsuff
• Update: Clients buffer-overflow in Live for Speed 0.5X10
  • From: Luigi Auriemma
• SimpleForum <= 4.6.2 - Cross-Site Scripting Vulnerability
  • From: sys-project
• Buffer-overflow and format string in VideoLAN VLC 0.8.6d
  • From: Luigi Auriemma
• [CVE-2007-5342] Apache Tomcat's default security policy is too open
  • From: Mark Thomas
• PHP <= 5.2.5 Safe Mode Bypass
  • From: admin
• Jupiter Cms Multiple Vulnerabilities
  • From: admin
• Re: [HSC] Dokeos Multiple Cross-Site Scripting Vulnerabilities
  • From: yannick . warnier
• [waraxe-2007-SA#060] - Sensitive info disclosure in CuteNews <= 1.4.5
  • From: come2waraxe
• Tikiwiki 1.9.8.3 tiki-special_chars.php XSS Vulnerability
  • From: Mesut Timur
• [ISecAuditors Security Advisories] Tikiwiki CMS is vulnerable to path traversal attack
  • From: ISecAuditors Security Advisories
• Logaholic Web Analytics Software
  • From: malibu . r
• pdflib long filename multiple bufferoverflows
  • From: poplix
• Re: Re: Moodle SQL Injection
  • From: bar
• [HSC] Dokeos Multiple Cross-Site Scripting Vulnerabilities
  • From: DoZ
• My Blog Rfi
  • From: beenudel1986
• Re: Moodle SQL Injection
  • From: foo
• Microsoft Office Publisher
  • From: jplopezy
• America Online AOL Instant Messenger AIM6.0 or 6.5 or higher XSS remote execution
  • From: evanchik
• Word 2003 denial of service
  • From: jplopezy
• HPSBGN2301 SSRT071508 rev.1 - HP Software Update Running on Windows, Remote Execution of Arbitrary Code, Gain Privileged Access
  • From: security-alert
• [CAID 35970]: CA Products That Embed Ingres Authentication Vulnerability
  • From: Williams, James K
• Buffer-overflow in WinUAE 1.4.4
  • From: Luigi Auriemma
• RE: Cryptome: NSA has real-time access to Hushmail servers
  • From: Thor (Hammer of God)
• RE: Cryptome: NSA has real-time access to Hushmail servers
  • From: Jim Harrison
• Cryptome: NSA has real-time access to Hushmail servers
  • From: Juha-Matti Laurio
• Moodle SQL Injection
  • From: root
• [USN-559-1] MySQL vulnerabilities
  • From: Jamie Strandboge
• CFP CISIS '08
  • From: hjan
• Re: Design flaw in AS3 socket handling allows port probing
  • From: fukami
• [SECURITY] [DSA 1436-1] New Linux 2.6.18 packages fix several vulnerabilities
  • From: dann frazier
• Woltlab Burning Board 1.0.2 SQL-Injection Vulnerability
  • From: nbbn
• Re: Morcego CMS <= 0.9.6 Remote File Inclue Vulnerability
  • From: antonio
• Re: Morcego CMS <= 0.9.6 Remote File Inclue Vulnerability
  • From: antonio
• PHP iCalendar <= 2.24 - Cross-Site Scripting Vulnerability
  • From: sys-project
• [security bulletin] HPSBUX02284 SSRT071483 rev.4 - HP-UX Running Java JRE and JDK, Remote Unauthorized Access
  • From: security-alert
• SiteScape Forum TCL injection
  • From: lolo lolo
• [security bulletin] HPSBTU02300 SSRT071452 rev.1 - HP Tru64 UNIX running FFM, Local Denial of Service (Dos)
  • From: security-alert
• [Aria-Security.net] ABI Version 3.7.9.17 Remote SQL Injection
  • From: The-0utl4w-noreply
• Re: Re: NETGEAR WGT624 Wireless DSL router default user name/password vulnerability
  • From: mj
• iSupport v1.8 Local file include vulnerability
  • From: ahcrew
• [security bulletin] HPSBUX02295 SSRT071333 rev.1 - HP-UX Running rpc.yppasswdd, Remote Denial of Service (DoS)
  • From: security-alert
• Black Hat Briefings Call for Papers and Happy Happy Joy Joy
  • From: jmoss
• xeCMS 1.x.x Remote File Disclosure Vulnerability.
  • From: p4imi0
• Re: Wordpress - Broken Access Control
  • From: Abel Cheung
• Re: Wordpress - Broken Access Control
  • From: otto
• HP laptops Software Update tool vulnerability
  • From: porkythepig
• [SECURITY] [DSA 1435-1] New clamav packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Array overflow in id3lib (devel CVS)
  • From: Luigi Auriemma
• SYMSA-2007-015
  • From: research
• Cisco Security Advisory: Application Inspection Vulnerability in Cisco Firewall Services Module
  • From: Cisco Systems Product Security Incident Response Team
• smbfs and apache+php source code disclosure
  • From: Maciej Gąsiorowski
• [USN-557-1] GD library vulnerability
  • From: Jamie Strandboge
• Re: MS Office 2007: Digital Signature does not protect Meta-Data
  • From: Henrich C. Poehls
• [ GLSA 200712-14 ] CUPS: Multiple vulnerabilities
  • From: Robert Buchholz
• [ GLSA 200712-13 ] E2fsprogs: Multiple buffer overflows
  • From: Robert Buchholz
• Re: Uber Uploader <= 5.3.6 Remote File Upload Vulnerability
  • From: recklessb
• AST-2007-027 - Database matching order permits host-based authentication to be ignored
  • From: Security Officer
• Google Toolbar Dialog Spoofing Vulnerability
  • From: avivra
• Tiger Team: New TV series about pen testers airing on CourtTV Dec 25 11 pm
  • From: blackredyellow
• iDefense Security Advisory 12.17.07: Apple Mac OS X mount_smbfs Stack Based Buffer Overflow Vulnerability
  • From: iDefense Labs
• rPSA-2007-0269-1 kernel
  • From: rPath Update Announcements
• iDefense Security Advisory 12.18.07: ClamAV libclamav MEW PE File Integer Overflow Vulnerability
  • From: iDefense Labs
• [USN-556-1] Samba vulnerability
  • From: Kees Cook
• Re: RE: TCP Port randomization paper
  • From: Amit Klein
• [security bulletin] HPSBST02299 SSRT071506 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS07-063 to MS07-069
  • From: security-alert
• ZDI-07-077: Trend Micro ServerProtect StRpcSrv.dll Insecure Method Exposure Vulnerability
  • From: zdi-disclosures
• Re: SineCMS <= 2.3.4 Calendar SQL Injection 'n something else..
  • From: carlo . feller
• Re: Re: PHP MySQL Banner Exchange 2.2.1 remote mysql database bug
  • From: arsalan1991
• SyScan'08 Call For Paper/Training
  • From: organiser@xxxxxxxxxx
• ZDI-07-079: Hewlett-Packard HP-UX swagentd Buffer Overflow Vulnerability
  • From: zdi-disclosures
• Re: Wordpress - Broken Access Control
  • From: th3 . r00k . nospam
• iMesh <= 7.1.0.x IMWebControl Class (IMWeb.dll 7.0.0.x) remote exploit
  • From: retrog
• ZDI-07-078: St. Bernard Open File Manager Heap Overflow Vulnerability
  • From: zdi-disclosures
• Multiple xss in mambo 4.6.2
  • From: beenudel1986
• Rosoft Media Player 4.1.7 crash
  • From: jplopezy
• rPSA-2007-0268-1 kdebase
  • From: rPath Update Announcements
• Apple OS X Software Update Remote Command Execution
  • From: Moritz Jodeit
• Uber Uploader <= 5.3.6 Remote File Upload Vulnerability
  • From: sys-project
• SurgeMail v.38k4 webmail Host header crash
  • From: retrog
• RaidenHTTPD 2.0.19 ulang cmd exec poc exploit
  • From: retrog
• rPSA-2007-0266-1 tetex tetex-afm tetex-dvips tetex-fonts tetex-latex tetex-xdvi
  • From: rPath Update Announcements
• Heap overflow in PeerCast 0.1217
  • From: Luigi Auriemma
• Re: Wordpress - Broken Access Control
  • From: otto
• release uhooker v1.3
  • From: Hernan Ochoa
• [SECURITY] [DSA 1434-1] New mydns packages fix denial of service
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 1433-1] New centericq packages fix execution of code
  • From: Steve Kemp
• [SECURITY] [DSA 1432-1] New link-grammar packages fix execution of code
  • From: Steve Kemp
• jetAudio 7.0.5 COWON Media Center MP4 Stack Overflow
  • From: gforce
• Re: [syslog-ng] ZSA-2007-029: syslog-ng Denial of Service
  • From: Balazs Scheidler
• PHP Security Framework: Vuln and Security Bypass
  • From: gmdarkfig
• ZSA-2007-029: syslog-ng Denial of Service
  • From: Balazs Scheidler
• Re: PHP MySQL Banner Exchange 2.2.1 remote mysql database bug
  • From: theredc0ders
• neuron news1.0 Multiple Remote Vulnerabilities (sql injection/xss)
  • From: hadihadi_zedehal_2006
• ClubHack2007: Presentation are online now
  • From: `ClubHack `
• Wordpress - Broken Access Control
  • From: th3 . r00k . nospam
• PHP RPG - Sql Injection and Session Information Disclosure.
  • From: th3 . r00k . nospam
• Oreon/Centreon - Multiple Remote File Inclusion
  • From: th3 . r00k . nospam
• Anon Proxy Server - Remote Code Execution
  • From: th3 . r00k . nospam
• [security bulletin] HPSBGN02298 SSRT071502 rev.1 - HP Quick Launch Button (QLB) Running on Windows, Remote Execution of Arbitrary Code, Gain Privileged Access
  • From: security-alert
• Phpay - Local File Inclusion
  • From: th3 . r00k . nospam
• POC for samba send_mailslot()
  • From: x 86
• ANNOUNCE: SquirrelMail 1.4.13 Released
  • From: Jon Angliss
• [ MDKSA-2007:246 ] - Updated Firefox packages fix multiple vulnerabilities
  • From: security
• [ISR] - Novell Groupwise client remote stack overflow silently patched.
  • From: ISR-noreply
• AW: MS Office 2007: Digital Signature does not protect Meta-Data
  • From: Naujoks, Hans-Dietmar
• HPSBUX02296 SSRT071504 rev.2 - HP-UX Running OpenSSL, Remote Execution of Arbitrary Code
  • From: security-alert
• Re: MS Office 2007: Digital Signature does not protect Meta-Data
  • From: Henrich C. Poehls
• PHP MySQL Banner Exchange 2.2.1 remote mysql database bug
  • From: arsalan1991
• Re: AW: MS Office 2007: Digital Signature does not protect Meta-Data
  • From: webmaster@xxxxxxxxxxxxxxxxxx
• + Trivantis CourseMill Enterprise Learning Management System - SQL Injection - CVE-2007-6338
  • From: swhite
• [ MDKSA-2007:245 ] - Updated wpa_supplicant package fixes remote denial of service
  • From: security
• [ GLSA 200712-12 ] IRC Services: Denial of Service
  • From: Pierre-Yves Rofes
• [ GLSA 200712-11 ] Portage: Information disclosure
  • From: Pierre-Yves Rofes
• SECURITY: 1.4.12 Package Compromise
  • From: Jon Angliss
• AW: MS Office 2007: Digital Signature does not protect Meta-Data
  • From: Naujoks, Hans-Dietmar
• [USN-550-3] Cairo regression
  • From: Kees Cook
• MS Office 2007: Target of Hyperlinks not covered by Digital Signatures
  • From: poehls
• Hosting Controller - Multiple Security Bugs (Extremely Critical)
  • From: admin
• Fwd: Websense 6.3.1 Filtering Bypass
  • From: The Security Community
• SQL MKPortal M1.1 Rc1
  • From: Sw33t . h4cK3r
• [security bulletin] HPSBUX02294 SSRT071451 rev.1 - HP-UX Running DCE, Remote Denial of Service (DoS)
  • From: security-alert
• OpenOffice: Duplicated, Unprotected Certificate Information shown in Signed ODF Documents
  • From: poehls
• RE: [Full-disclosure] Fwd: Websense 6.3.1 Filtering Bypass
  • From: Hubbard, Dan
• [security bulletin] HPSBUX02296 SSRT071504 rev.1 - HP-UX Running OpenSSL, Remote Execution of Arbitrary Code
  • From: security-alert
• QK SMTP Server 3 - Denial of service
  • From: jplopezy
• Re: Re: Cpanel Vulnerability?
  • From: gdfuego
• iDefense Security Advisory 12.11.07: Microsoft DirectX 7 and 8 DirectShow Stack Buffer Overflow Vulnerability
  • From: iDefense Labs
• rPSA-2007-0264-1 mod_dav_svn subversion
  • From: rPath Update Announcements
• iDefense Security Advisory 12.11.07: Microsoft Internet Explorer JavaScript setExpression Heap Corruption Vulnerability
  • From: iDefense Labs
• Re: Media Player Classic 6.4.9 MP4 Stack Overflow 0-day
  • From: Matthew Leeds
• MS Office 2007: Digital Signature does not protect Meta-Data
  • From: poehls
• Re: Cpanel Vulnerability?
  • From: Charles Hardin
• Re: TCP Port randomization paper
  • From: Fernando Gont
• Cpanel Vulnerability?
  • From: Francisco Pecorella
• [SECURITY] [DSA 1428-2] New Linux 2.6.18 packages fix several vulnerabilities
  • From: dann frazier
• [ MDKSA-2007:244 ] - Updated samba packages fix vulnerability
  • From: security
• [SECURITY] [DSA 1431-1] New ruby-gnome2 packages fix execution of arbitrary code
  • From: Steve Kemp
• [SECURITY] [DSA 1430-1] New libnss-ldap packages fix denial of service
  • From: Steve Kemp
• ZDI-07-076: Microsoft Windows Message Queuing Service Stack Overflow Vulnerability
  • From: zdi-disclosures
• ZDI-07-075: Microsoft Internet Explorer Element Tags Vulnerability
  • From: zdi-disclosures
• [SECURITY] [DSA 1429-1] New htdig packages fix cross site scripting
  • From: Steve Kemp
• ZDI-07-074: Microsoft Internet Explorer Node Manipulation Memory Corruption
  • From: zdi-disclosures
• ZDI-07-073: Microsoft Internet Explorer setExpression Vulnerability
  • From: zdi-disclosures
• Meridian Prolog Manager Username and Plain Text Password Disclosure
  • From: Prolog Error
• Black Hat Briefings Call for Papers
  • From: jmoss
• HP notebooks remote code execution vulnerability (multiple series)
  • From: porkythepig
• PGMfuzz - a tool for testing Pragmatic General Multicast protocol implementations
  • From: IRM Research
• SupportSuite 3.11.01~ Multiple file ~ PHP SELF XSS
  • From: imei Addmimistrator
• rPSA-2007-0262-1 e2fsprogs
  • From: rPath Update Announcements
• [ MDKSA-2007:241 ] - Updated tomcat5 packages fix multiple vulnerabilities
  • From: security
• [SECURITY] [DSA 1481-1] New Linux 2.6.18 packages fix several vulnerabilities
  • From: dann frazier
• [ MDKSA-2007:243 ] - Updated MySQL packages fix multiple vulnerabilities
  • From: security
• RE: TCP Port randomization paper
  • From: Amit Klein
• [ MDKSA-2007:242 ] - Updated e2fsprogs packages fix vulnerability
  • From: security
• ZDI-07-072: Novell Netmail AntiVirus Agent Multiple Overflow Vulnerabilities
  • From: zdi-disclosures
• Re: Dell / Dell Financial Services - Contact
  • From: Juha-Matti Laurio
• WASC Announcement: The Script Mapping Project Results and Call for Participation
  • From: announcements
• Dell / Dell Financial Services - Contact
  • From: Justin@InfoTek
• [ GLSA 200712-10 ] Samba: Execution of arbitrary code
  • From: Pierre-Yves Rofes
• [SECURITY] [DSA 1427-1] New samba packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [USN-550-2] Cairo regression
  • From: Kees Cook
• Filesystem access in DOSBox 0.72
  • From: Luigi Auriemma
• Multiple vulnerabilities in BadBlue 2.72b
  • From: Luigi Auriemma
• Multiple vulnerabilities in BarracudaDrive 3.7.2
  • From: Luigi Auriemma
• Re: Media Player Classic 6.4.9 MP4 Stack Overflow 0-day
  • From: Rob Thompson
• [ GLSA 200712-03 ] GNU Emacs: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• WordPress Charset SQL injection vulnerability (re-resend)
  • From: Abel Cheung
• rPSA-2007-0261-1 samba samba-swat
  • From: rPath Update Announcements
• Re: Windows binary of "GSview 4.8" contain vulnerable zlib (CAN-2005-2096) and vulnerable bz2lib (CAN-2005-0758 & CAN-2005-0953)
  • From: Stefan Kanthak
• [SECURITY] Buffer overrun in send_mailslot()
  • From: Gerald (Jerry) Carter
• Advisory: Websense XSS Vulnerability
  • From: Liquidmatrix Security Digest
• squids ICAP implementation lacks a defer check when reading from ICAP server
  • From: Martin Huter
• [ GLSA 200712-08 ] AMD64 x86 emulation Qt library: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [ GLSA 200712-07 ] Lookup: Insecure temporary file creation
  • From: Pierre-Yves Rofes
• SQL injection - GestDownV1.00Beta
  • From: bebe
• Secunia Research: Samba "send_mailslot()" Buffer Overflow Vulnerability
  • From: Secunia Research
• [ GLSA 200712-05 ] PEAR::MDB2: Information disclosure
  • From: Pierre-Yves Rofes
• Falt4 CMS Security Report/Advisory
  • From: Mesut Timur
• [ GLSA 200712-04 ] Cairo: User-assisted execution of arbitrary code
  • From: Pierre-Yves Rofes
• [ GLSA 200712-06 ] Firebird: Multiple buffer overflows
  • From: Pierre-Yves Rofes
• bttlxeForum Multiple SQL Injection And Cross Site Scripting
  • From: noreply
• Security and hacking papers
  • From: Ork
• Bitweaver XSS & SQL Injection Vulnerability
  • From: DoZ
• Flat PHP Board <= 1.2 Multiple Vulnerabilities
  • From: kingoftheworld92
• CVE-2007-6205
  • From: Hanno Böck
• Unsanitized scripting in RoundCube webmail
  • From: Tomas Kuliavas
• The Cookie Tools v0.3 -- first public release
  • From: michele dallachiesa
• Two vulnerabilities in SquirrelMail GPG plugin
  • From: Tomas Kuliavas
• Call for Papers - Security and High Performance Computing System 2008
  • From: shpcs08
• [ GLSA 200712-09 ] Ruby-GNOME2: Format string error
  • From: Pierre-Yves Rofes
• webSPELL 4.01.02 (calendar.php, usergallery.php) XSS Vulnerability
  • From: brainheadbrainhead
• Lotfian.com DATABASE DRIVEN TRAVEL SITE Multiple SQL Injection
  • From: no-reply
• [SECURITY] [DSA 1426-1] New qt-x11-free packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Media Player Classic 6.4.9 MP4 Stack Overflow 0-day
  • From: gforce
• [USN-555-1] e2fsprogs vulnerability
  • From: Kees Cook
• Windows media player 6.4 MP4 Stack Overflow 0-day
  • From: gforce
• [SECURITY] [DSA 1425-1] New xulrunner packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Nullsoft Winamp MP4 tags Stack Overflow
  • From: gforce
• Upload directory traversal in Easy File Sharing 4.5
  • From: Luigi Auriemma
• Multiple vulnerabilities in Firefly Media Server (mt-daapd) 2.4.1 / SVN 1699
  • From: Luigi Auriemma
• Limited upload directory traversal in HTTP File Server 2.2a / 2.3 beta (build #146)
  • From: Luigi Auriemma
• Two vulnerabilities in Simple HTTPD 1.38
  • From: Luigi Auriemma
• [ MDKSA-2007:240 ] - Updated libnfsidmap packages fix username lookup flaw
  • From: security
• Kvaliitti WebDoc 3.0 CMS SQL Injection vulnerability
  • From: jaakkoNOSPAM
• [SECURITY] [DSA 1423-1] New sitebar packages fix several vulnerabilities
  • From: Steve Kemp
• R7-0031: JFreeChart Image Map Cross-Site Scripting Vulnerabilities
  • From: advisory
• [ISecAuditors Security Advisories] wwwstats is vulnerable to Persistent XSS
  • From: ISecAuditors Security Advisories
• Re: Phorm v3.0 Remote File Upload Vulnerability
  • From: security curmudgeon
• Re: BellaBiblio Admin Login Bypass
  • From: security curmudgeon
• rPSA-2007-0260-1 firefox
  • From: rPath Update Announcements
• Re: Friend Script 2.5 - 2.4 Remote File &#304;nclude
  • From: security curmudgeon
• Re: RIG Image Gallery (dir_abs_src) Remote File Include Vulnerability
  • From: security curmudgeon
• [ MDKSA-2007:239 ] - Updated heimdal packages fix potential vulnerability
  • From: security
• [SECURITY] [DSA 1422-1] New e2fsprogs packages fix arbitrary code execution
  • From: Steve Kemp
• Potential SQL injection vulnerability in Apache::AuthCAS
  • From: Matthias Bethke
• [CAID 35724, 35725, 35726]: CA BrightStor ARCserve Backup Multiple Vulnerabilities
  • From: Williams, James K
• TCP Port randomization paper
  • From: Fernando Gont
• ZDI-07-070: Skype skype4com URI Handler Remote Heap Corruption Vulnerability
  • From: zdi-disclosures
• ZDI-07-071: HP OpenView Network Node Manager Multiple CGI Buffer Overflows
  • From: zdi-disclosures
• [USN-554-1] teTeX and TeX Live vulnerabilities
  • From: Jamie Strandboge
• [ MDKSA-2007:238 ] - Updated liblcms package fixes buffer overflow
  • From: security
• [Security Advisorie] OpenNewsletter v2.5 Multipe XSS Attacks
  • From: Sarasa
• UPDATE: [ GLSA 200711-29 ] Samba: Execution of arbitrary code
  • From: Pierre-Yves Rofes
• [XSS] OpenNewsletter v2.5 Multipe XSS Attacks
  • From: bugtraq
• HITBSecConf2007 Malaysia Videos Now Available
  • From: Praburaajan
• Re: Re: Aria-Security.net: NetAuctionHelp SQL Injection
  • From: NetAuctionHelp Support
• NSFOCUS SA2007-02 : Cisco Security Agent Remote Buffer Overflow Vulnerability
  • From: NSFOCUS Security Team
• SQUID-2007:2, Dec 4, 2007
  • From: Adrian Chadd
• [SECURITY] [DSA 1421-1] New wesnoth packages fix arbitrary file disclosure
  • From: Martin Schulze
• [UPDATE]CA BrightStor ARCServe BackUp Message Engine Remote Stack Overflow Vulnerability
  • From: cocoruder
• [security bulletin] HPSBMA02281 SSRT061261 rev.1 - HP OpenView Network Node Manager (OV NNM) Remote Unauthorized Execution of Arbitrary Code
  • From: security-alert
• Avast! AntiVirus TAR Processing Remote Heap Corruption
  • From: Sowhat
• Aria-Security.Net: PenPals Login and search page SQL Injection
  • From: no-reply
• ezContents Version 1.4.5 Remote File Disclosure Vulnerability.
  • From: p4imi0
• [ GLSA 200712-01 ] Hugin: Insecure temporary file creation
  • From: Pierre-Yves Rofes
• SineCMS <= 2.3.4 Calendar SQL Injection 'n something else..
  • From: kingoftheworld92
• [ GLSA 200712-02 ] Cacti: SQL injection
  • From: Pierre-Yves Rofes
• Firefox 2.0.0.11 INPUT Denial Of Service
  • From: azizov
• Re: Sql Injection in wordpress 2.3.1
  • From: shino
• Re: Sql Injection in wordpress 2.3.1
  • From: alan
• Cisco Security Advisory: Cisco Security Agent for Windows System Driver Remote Buffer Overflow Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [SECURITY] [DSA 1420-1] New zabbix packages fix privilege escalation
  • From: Thijs Kinkhorst
• [ELEYTT] Public Advisory 05-12-2007
  • From: Michal Bucko
• [SECURITY] [DSA 1419-1] New OpenOffice.org packages fix arbitrary Java code execution
  • From: Martin Schulze
• Advisory: Cross Site Scripting in CiscoWorks
  • From: Liquidmatrix Security Digest
• Sql Injection in wordpress 2.3.1
  • From: beenudel1986
• [ECHO_ADV_86$2007] Mambo/Joomla Component rsgallery <= 2.0 beta 5 (catid) Remote SQL Injection Vulnerability
  • From: erdc
• Opera 9.50 beta and prior remote DoS (freeze)
  • From: gynvael
• Re: 27Mhz based wireless security insecurities - Aka - "We know what you typed last summer"
  • From: Michal Bucko
• Blind Sql-Injection in Joomla 1.5 RC3
  • From: beenudel1986
• [ MDKSA-2007:237 ] - Updated openssl packages fix DTLS vulnerability
  • From: security
• rPSA-2007-0257-1 rsync
  • From: rPath Update Announcements
• [ MDKSA-2007:236 ] - Updated openssh packages fix X11 cookie vulnerability
  • From: security
• [USN-553-1] Mono vulnerability
  • From: Kees Cook
• The recent number of unpatched QuickTime flaws is: two
  • From: Juha-Matti Laurio
• [USN-552-1] Perl vulnerability
  • From: Kees Cook
• Re: sing (debian) vunlerability?
  • From: Moritz Muehlenhoff
• [USN-546-2] Firefox regression
  • From: Kees Cook
• RFI and Multiple XSS in PhpMyChat
  • From: beenudel1986
• TIBCO Rendezvous Exploitation Video
  • From: IRM Research
• Re: Powerschool 404 Admin Exposure
  • From: bob
• Some more widgets: Facebook, Hockey, FlickrInterestingNess (Re: [MacOS X] Insecure eval() in Twitgit and Twitterlex dashboard widgets)
  • From: Thomas Roessler
• [security bulletin] HPSBMA02293 SSRT071494 rev.1 - HP Select Identity, Remote Unauthorized Access
  • From: security-alert
• CORE-2007-1004: VLC Activex Bad Pointer Initialization Vulnerability
  • From: CORE Security Technologies Advisories
• PR07-39: Multiple vulnerabilities on Absolute News Manager.NET 5.1 including file retrieval and SQL injection
  • From: research
• Re: [dns-operations] Web Proxy Auto-Discovery (WPAD) Information Disclosure (fwd)
  • From: Gadi Evron
• The first release of SWFIntruder is out !
  • From: Stefano Di Paola
• (Re-post) ATC-08 CFP
  • From: atc08
• [ MDKSA-2007:234 ] - Updated vixie-cron packages fix DoS vulnerability
  • From: security
• [ MDKSA-2007:235 ] - Updated apache packages fix vulnerabilities
  • From: security
• [USN-549-2] PHP regression
  • From: Kees Cook
• SEC Consult SA-20071204-0 :: SonicWALL Global VPN Client Format String Vulnerability
  • From: Bernhard Mueller
• [USN-551-1] OpenLDAP vulnerabilities
  • From: Jamie Strandboge
• [MacOS X] Insecure eval() in Twitgit and Twitterlex dashboard widgets
  • From: Thomas Roessler
• Snitz2000 SQL Injection: A user can gain admin level
  • From: admin
• [USN-550-1] Cairo vulnerability
  • From: Kees Cook
• SYMSA-2007-014: SQL Injection Vulnerability in Beehive Forum Software
  • From: research
• Fwd: PR06-08: BEA Plumtree portal internal hostname disclosure vulnerability
  • From: imipak
• Re: PR06-08: BEA Plumtree portal internal hostname disclosure vulnerability
  • From: guiness.stout
• McAfee SecurityCenter Privacy Service HTML Execution Vulnerability
  • From: DoZ
• Lotfian Brochure and cataloge Script XSS And SQL Injection
  • From: noreply
• Re: SQL Injection in SaphpLesson2.0 "show.php"
  • From: security curmudgeon
• sing (debian) vunlerability?
  • From: Milen Rangelov
• [WhitePaper (SecNiche)] Information Prone LDAP Garbage Dumps
  • From: AKS aka (0kn0ck)
• Re: SQL Injection in saphp "showcat.php"
  • From: security curmudgeon
• PR06-09: BEA Plumtree portal full version disclosure vulnerability
  • From: research
• [SECURITY] [DSA 1418-1] New cacti packages fix SQL injection
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 1417-1] New asterisk packages fix SQL injection
  • From: Moritz Muehlenhoff
• PR06-11: BEA Plumtree portal search facility leaks usernames to unauthenticated users
  • From: research
• PR06-08: BEA Plumtree portal internal hostname disclosure vulnerability
  • From: research
• Realplayer 11 DOS attack when processing a malformed AU file on MS Vista and XP
  • From: thesinoda
• DC4420 - London DEFCON chapter Christmas Party - 11th December
  • From: Major Malfunction
• rPSA-2007-0255-1 nss_ldap
  • From: rPath Update Announcements
• Re: 27Mhz based wireless security insecurities - Aka - "We know what you typed last summer"
  • From: Jacob Appelbaum
• QEMU code_gen_buffer overflow POC
  • From: TeLeMan
• PR07-37: XSS on Apache HTTP Server 413 error pages via malformed HTTP method
  • From: research
• 27Mhz based wireless security insecurities - Aka - "We know what you typed last summer"
  • From: Max Moser
• rPSA-2007-0254-1 idle python
  • From: rPath Update Announcements
• Re: Aria-Security.net: CoolShot E-Lite POS 1.0
  • From: coolshot
• PR07-15: Cross-site Scripting (XSS) / HTML injection on F5 FirePass 4100 SSL VPN 'my.logon.php3' server-side script
  • From: research
• PR07-14: Cross-site Scripting (XSS) / HTML injection on F5 FirePass 4100 SSL VPN 'my.activation.php3' server-side script
  • From: research
• Re[2]: Microsoft FTP Client Multiple Bufferoverflow Vulnerability
  • From: 3APA3A
• Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability
  • From: Vincent Archer
• DOS in Realplayer 11 ActiveX on Win Vista and Win XP SP2
  • From: thesinoda
• SCARE metrics and tool release
  • From: Pete Herzog
• [ MDKSA-2007:224-3 ] - Updated samba packages fix regressions
  • From: security
• Re[2]: Microsoft FTP Client Multiple Bufferoverflow Vulnerability
  • From: Matthew Leeds
• Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability
  • From: Steve Shockley
• [USN-549-1] PHP vulnerabilities
  • From: Kees Cook
• Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability
  • From: Valdis . Kletnieks
• AST-2007-026 - SQL Injection issue in cdr_pgsql
  • From: Asterisk Security Team
• AST-2007-025 - SQL Injection issue in res_config_pgsql
  • From: Asterisk Security Team
• ERRATA: [ GLSA 200711-20 ] Pioneers: Multiple Denials of Service
  • From: Pierre-Yves Rofes
• FreeBSD Security Advisory FreeBSD-SA-07:09.random
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-07:10.gtar
  • From: FreeBSD Security Advisories
• IRM025: TIBCO Rendezvous RVD Daemon Remote Memory Leak DoS
  • From: IRM Research
• Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability
  • From: 3APA3A
• APC Management Vulnerability
  • From: garys
• Digital Armaments November-December Hacking Challenge: Diffuse Client Application (10.000$ extra)
  • From: info
• [SECURITY] [DSA 1409-3] New samba packages fix several vulnerabilities
  • From: Steve Kemp
• [security bulletin] HPSBUX02292 SSRT071499 rev.1 - HP-UX Running Apache, Remote Execution of Arbitrary Code
  • From: security-alert
• [security bulletin] HPSBMA02283 SSRT071319 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Cross Site Scripting (XSS)
  • From: security-alert
• [ MDKSA-2007:233 ] - Updated cpio package fixes buffer overflow and directory traversal vulnerabilities
  • From: security
• [USN-548-1] Pidgin vulnerability
  • From: Kees Cook
• rPSA-2007-0252-1 cups poppler tetex tetex-afm tetex-dvips tetex-fonts tetex-latex tetex-xdvi
  • From: rPath Update Announcements
• Re: Gekko <=0.8.2 (temp directory) Path Disclosure
  • From: J. Carlos Nieto
• [ MDKSA-2007:233 ] - Updated cpio package fixes buffer overflow and directory traversal vulnerabilities
  • From: security
• Some Data of POC2007
  • From: poc2007
• [ MDKSA-2007:232 ] - Updated kernel packages fix multiple vulnerabilities and bugs
  • From: security
• SYM07-029 Symantec BEWS Multiple DoS in Job Engine
  • From: Secure
• Re: Win2K3 Priv Escalation
  • From: Justin@ESC
• Gekko <=0.8.2 (temp directory) Path Disclosure
  • From: sys-project
• RE: Win2K3 Priv Escalation
  • From: Thor (Hammer of God)
• Secunia Research: Symantec Backup Exec Job Engine Denial of Service
  • From: Secunia Research
• Microsoft FTP Client Multiple Bufferoverflow Vulnerability
  • From: Rajesh Sethumadhavan
• Re: Win2K3 Priv Escalation
  • From: Jan Münther
• RE: Win2K3 Priv Escalation
  • From: Matt Ausmus
• Win2K3 Priv Escalation
  • From: justin
• [SECURITY] [DSA 1415-1] New tk8.4 packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1416-1] New tk8.3 packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• PHPkit 1.6.1 (include.php?path=) Remote File Inclusion
  • From: sys-project
• PHPSlideShow XSS Update
  • From: morin . josh
• Liferay Enterprise Portal multiple XSS
  • From: morin . josh
• Eurologon CMS Multiple SQL Injection
  • From: kingoftheworld92
• CORE-2007-0821: Lotus Notes buffer overflow in the Lotus WorkSheet file processor
  • From: Core Security Technologies Advisories
• Re: Creating Backdoors in Cisco IOS using Tcl
  • From: michael
• Re: [Full-disclosure] Creating Backdoors in Cisco IOS using Tcl
  • From: Nicolas FISCHBACH
• Eurologon CMS Db credentials disclosure / files download
  • From: kingoftheworld92
• [SECURITY] [DSA 1414-1] New wireshark packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• National Computer and Information Security Conferences ACIS 2008 - COLOMBIA
  • From: Jeimy Cano
• Announce: RFIDIOt release RFIDIOt-0.1r, November 2007
  • From: Adam Laurie
• Ruby/Gnome2 0.16.0 Format String Vulnerability
  • From: chris . rohlf
• [USN-547-1] PCRE vulnerabilities
  • From: Kees Cook
• [security bulletin] HPSBUX02251 SSRT071449 rev.3 - HP-UX Running BIND, Remote DNS Cache Poisoning
  • From: security-alert
• OWASP Israel Conference 2007, Dec 3rd 2007
  • From: Ofer Shezaf
• [USN-546-1] Firefox vulnerabilities
  • From: Kees Cook
• Creating Backdoors in Cisco IOS using Tcl
  • From: IRM Research
• [USN-545-1] link-grammar vulnerability
  • From: Kees Cook
• CONFidence 2008 CfP
  • From: andrzej . targosz
• FIGIS (FILogin.do) Bypass SQL Injection Vulnerability
  • From: sys-project
• ZDI-07-069: CA BrightStor ARCserve Backup Message Engine Insecure Method Exposure Vulnerability
  • From: zdi-disclosures
• Re: PHP-Nuke NSN Script Depository module <= 1.0.3 Remote Source / DB Credentials Disclosure
  • From: kingoftheworld92
• JLMForo System (modificarPerfil.php) Cross-Site Scripting Vulnerability
  • From: sys-project
• Directory Traversal in SafeNet Sentinel Protection Server and Keys Server
  • From: Elliot Kendall
• PHP-Nuke NSN Script Depository module <= 1.0.3 Remote Source / DB Credentials Disclosure
  • From: kingoftheworld92
• SimpleGallery v0.1.3 (index.php) Cross-Site Scripting Vulnerability
  • From: sys-project
• Tilde CMS <= v. 4.x "aarstal" parameter of "yeardetail" SQL Injection
  • From: kingoftheworld92
• DeluxeBB E-Mail Address Change Security Bypass
  • From: bugtraq
• 2007-06 Sentinel Protection Server Directory Traversal
  • From: VulnerabilityResearch
• [SECURITY] [DSA 1413-1] New mysql packages fix multiple vulnerabilities
  • From: Noah Meyerhans
• [ GLSA 200711-34 ] CSTeX: Multiple vulnerabilities
  • From: Pierre-Yves Rofes
• [ GLSA 200711-33 ] nss_ldap: Information disclosure
  • From: Pierre-Yves Rofes
• FMDeluxe (index.php) Cross-Site Scripting Vulnerability
  • From: sys-project
• GWExtranet Script Injections & Privilege Escalation Vulnerability
  • From: DoZ
• Citrix NetScaler Web Management Cookie Weakness
  • From: nnposter
• Calendar Proverbs <=1.1 (caladmin.php) Remote SQL Injection
  • From: sys-project
• Skype DoS
  • From: mail
• PHPSlideShow (toonchapter8.php) Cross-Site Scripting Vulnerability
  • From: sys-project
• PHP 5.2.4 mail.force_extra_parameters unsecure
  • From: cxib
• two bytehoard 2.1 bugs
  • From: Ernesto Alvarez
• [SECURITY] [DSA 1412-1] New ruby1.9 packages fix insecure SSL certificate validation
  • From: Moritz Muehlenhoff
• HPSBST02291 SSRT071498 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS07-061 and MS07-062
  • From: security-alert
• [SECURITY] [DSA 1409-2] New samba packages fix several vulnerabilities
  • From: Steve Kemp
• [SECURITY] [DSA 1411-1] New libopenssl-ruby packages fix insecure SSL certificate validation
  • From: Moritz Muehlenhoff
• Aria-Security.Net: Gouae DWD Realty SQL Injection
  • From: noreply
• [SECURITY] [DSA 1410-1] New ruby1.8 packages fix insecure SSL certificate validation
  • From: Moritz Muehlenhoff
• Re: Re: Aria-Security.net: NetAuctionHelp SQL Injection
  • From: no-reply
• NetAuctionHelp Classified Ads v1.0 SQL Injection
  • From: no-reply
• Amber Script 1.0 (show_content.php id) Local File Inclusion Vulnerability
  • From: cybermilitan
• vBTube v1.1 - Beta ( Vbulletin Tube) Xss Vulnerable
  • From: cybermilitan
• [ISecAuditors Security Advisories] Cygwin buffer overflow due incorrect filename length check
  • From: ISecAuditors Security Advisories
• PBLang <= 4.99.17.q Remote File Rewriting / Remote Command Execution
  • From: kingoftheworld92
• Re: Aria-Security.net: NetAuctionHelp SQL Injection
  • From: support
• Aria-Security.net: CoolShot E-Lite POS 1.0
  • From: no-reply
• Bitcomet Resource Browser v1.1 XSS
  • From: jplopezy
• [ MDKSA-2007:224-2 ] - Updated samba packages fix vulnerabilities
  • From: security
• Re: Re: Re: Re: Re: Gadu-Gadu Local/Remote Buffer Overflow vulnerability
  • From: gynvael
• Mp3 ToolBox 1.0 beta 5 Remote File &#304;nclude Vulnerability
  • From: cybermilitan
• Re: Gadu-Gadu Local/Remote Buffer Overflow vulnerability
  • From: emacs25
• Re: Re: Re: Re: Gadu-Gadu Local/Remote Buffer Overflow vulnerability
  • From: sdfkjsomcoismwevoiweo
• Re: Re: Re: Gadu-Gadu Local/Remote Buffer Overflow vulnerability
  • From: gynvael
• Re: Re: Gadu-Gadu Local/Remote Buffer Overflow vulnerability
  • From: j00ru . vx
• [0day Remote Command Execution] VigileCMS <= 1.8 Stealth
  • From: wegotyourbox
• Re: MyBlog (MyCMS) Remote PHP Code execution / PHP Code injection ..
  • From: BlackHawk
• Aria-Security.net: Irola My-Time v3.5 SQL Injection
  • From: no-reply
• Re: Re: Gadu-Gadu Local/Remote Buffer Overflow vulnerability
  • From: emacs25
• Re: Gadu-Gadu Local/Remote Buffer Overflow vulnerability
  • From: gg_vuln
• [ MDKSA-2007:231 ] - Updated cacti packages fix SQL injection vulnerability
  • From: security
• Using CSRF to Attack Mobile Phones
  • From: avivra
• [SECURITY] [DSA 1409-1] New samba packages fix several vulnerabilities
  • From: Steve Kemp
• Gadu-Gadu Local/Remote Buffer Overflow vulnerability
  • From: j00ru . vx
• MySpace Scripts - Poll Creator JavaScript Injection Vulnerability
  • From: DoZ
• VigileCMS <= 1.8 Stealth Remote Command Execution Exploit
  • From: bugtraq
• Re: Simple Machines Forum multiple sql injection flaws with exploit code.
  • From: root
• MyBlog (MyCMS) Remote PHP Code execution / PHP Code injection ..
  • From: security
• [Argeniss] Data0: Next generation malware for stealing databases (Paper)
  • From: Cesar
• Remote Shell Command Execution in "KB-Bestellsystem" (amensa-soft.de)
  • From: zero-x
• GetBlog local File inclusion ..
  • From: security
• [ECHO_ADV_85$2007] alstrasoft E-Friends <= 4.98 (seid) Multiple Remote SQL Injection Vulnerabilities
  • From: erdc
• Aria-Security.net: NetAuctionHelp SQL Injection
  • From: no-reply
• Wheatblog (wB) Remote File inclusion ..
  • From: security
• [ MDKSA-2007:224-1 ] - Updated samba packages fix vulnerabilities
  • From: security
• SkyPortal vRC6 Multiple Remote Vulnerabilities
  • From: bugtraq
• Ucms <= 1.8 Backdoor Remote Command Execution Exploit
  • From: bugtraq
• TalkBack 2.2.7 Multiple Remote File Inclusion Vulnerabilities
  • From: bugtraq
• [SECURITY] [DSA 1408-1] New kdegraphics packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• GWextranet Multiple Vulnerabilites
  • From: Joseph . giron13
• E-vanced Solutions Multiple Vulnerabilites
  • From: Joseph . giron13
• Re: [Full-disclosure] Warning: Hackers hijacking unused IP Addresses inside Trusted domains [POC]
  • From: Gadi Evron
• rPSA-2007-0245-1 kernel
  • From: rPath Update Announcements
• [ MDKSA-2007:230 ] - Updated tetex packages fix vulnerabilities
  • From: security
• rPSA-2007-0245-2 kernel
  • From: rPath Update Announcements
• Re: [Full-disclosure] Warning: Hackers hijacking unused IP Addresses inside Trusted domains [POC]
  • From: Paul Schmehl
• rPSA-2007-0243-1 flac
  • From: rPath Update Announcements
• Aria-Security.Net: VU Mailer (Mass Mail) "Password" SQL Injection
  • From: no-reply
• Re: Banks (Wellsfargo.com) using CDNs to deliver Javascript: enables password theft by anyone compromising or controlling the CDN
  • From: Jason Muskat de VE3TSJ - GCFA, GCUX, CEI, CEH
• [Aria-Security.Net] VU Case Manager "Username/Password" SQL Injection
  • From: no-reply