Bugtraq

• Thread Index

• Design Flaw in Deutsche Telekom Speedport w700v broadband router
  • From: Michael Domberg
• Cross-Site Scripting in Adobe RoboHelp 6, Server 6 and X5
  • From: Michael Domberg
• W1L3D4 Philboard v0.2 sql injection
  • From: ALEMIN KRALI
• Re: Defeating Citibank Virtual Keyboard protection using screenshot method
  • From: Jan Heisterkamp
• Multiple Denial of Service attacks possible for Webspeed OpenEdge
  • From: suresync
• [CAID 35330, 35331]: CA Anti-Virus, CA Threat Manager, and CA Anti-Spyware Console Login and File Mapping Vulnerabilities
  • From: Williams, James K
• ZDI-07-028: CA eTrust AntiVirus Server inoweb Buffer Overflow Vulnerability
  • From: zdi-disclosures
• RE: Defeating Citibank Virtual Keyboard protection using screenshot method
  • From: Nick FitzGerald
• TPTI-07-07: Apple QuickTime STSD Parsing Heap Overflow Vulnerability
  • From: TSRT
• rPSA-2007-0096-1 shadow
  • From: rPath Update Announcements
• Re: squirrelmail CSRF vulnerability
  • From: Tim Newsham
• TFTPdWin 0.4.2 Server Directory Traversal Vulnerability
  • From: VulnerabilityResearch
• fotolog xss
  • From: absamu
• [ MDKSA-2007:102 ] - Updated php packages fix multiple vulnerabilities
  • From: security
• eFileCabinet Authentication Bypass
  • From: VulnerabilityResearch
• Re: Defeating Citibank Virtual Keyboard protection using screenshot method
  • From: Reversemode
• [ MDKSA-2007:103 ] - Updated php packages fix multiple vulnerabilities
  • From: security
• RE: Defeating Citibank Virtual Keyboard protection using screenshot method
  • From: James C. Slora Jr.
• Computer Associates eTrust InoTask.exe Antivirus Buffer Overflow Vulnerability
  • From: binagres
• iDefense Security Advisory 05.10.07: Apple Darwin Streaming Proxy Multiple Vulnerabilities
  • From: iDefense Labs
• Re: Defeating Citibank Virtual Keyboard protection using screenshot method
  • From: Ansgar -59cobalt- Wiechers
• Re: Defeating Citibank Virtual Keyboard protection using screenshot method
  • From: Florian Weimer
• phpMUR Cross Site Scripting
  • From: the_3dit0r
• iDefense Security Advisory 05.10.07: Novell NetMail NMDMC Buffer Overflow Vulnerability
  • From: iDefense Labs
• Re: squirrelmail CSRF vulnerability
  • From: Josh Zlatin-Amishav
• [ GLSA 200705-13 ] ImageMagick: Multiple buffer overflows
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200705-12 ] PostgreSQL: Privilege escalation
  • From: Sune Kloppenborg Jeppesen
• RE: Defeating Citibank Virtual Keyboard protection using screenshot method
  • From: David Gillett
• iDefense Security Advisory 05.10.07: Sun Microsystems Solaris SRS Proxy Core srsexec Arbitrary File Read Vulnerability
  • From: iDefense Labs
• Re: Defeating Citibank Virtual Keyboard protection using screenshot method
  • From: Eli Dart
• iDefense Security Advisory 05.09.07: Computer Associates eTrust InoTask.exe Antivirus Buffer Overflow Vulnerability
  • From: iDefense Labs
• squirrelmail CSRF vulnerability
  • From: p3rlhax
• RE: Defeating Citibank Virtual Keyboard protection using screenshot method
  • From: Rogier Mulhuijzen
• Re: RE: Defeating Citibank Virtual Keyboard protection using screenshot method
  • From: balazs . zolika
• Secunia Research: Internet Explorer HTML Objects Memory Corruption Vulnerability
  • From: Secunia Research
• Secunia Research: BearShare NCTAudioFile2 ActiveX Control Buffer Overflow
  • From: Secunia Research
• Re: [ MDKSA-2007:101 ] - Updated bind packages fix vulnerability
  • From: Stefano
• RE: Defeating Citibank Virtual Keyboard protection using screenshot method
  • From: Debasis Mohanty
• RE: RDP TLS downgrade
  • From: Roger A. Grimes
• [ MDKSA-2007:101 ] - Updated bind packages fix vulnerability
  • From: security
• RE: Defeating Citibank Virtual Keyboard protection using screenshot method
  • From: Nick FitzGerald
• RE: Defeating Citibank Virtual Keyboard protection using screenshot method
  • From: Gadi Evron
• RE: Defeating Citibank Virtual Keyboard protection using screenshot method
  • From: Jim Harrison
• Re: Re: Defeating Citibank Virtual Keyboard protection using screenshot method
  • From: yashks
• 2nd OWASP Israel mini conference at the Interdisciplinary Center Herzliya (IDC), Monday, May 21st, 13:30
  • From: Ofer Shezaf
• RE: Defeating Citibank Virtual Keyboard protection using screenshot method
  • From: Gadi Evron
• iDefense Security Advisory 05.08.07: Microsoft Excel Filter Record Code Execution Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 05.08.07: Microsoft Word RTF File Parsing Heap Corruption Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 05.08.07: Microsoft Exchange Server 2000 IMAP Literal Processing DoS Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 05.09.07: Symantec Norton Internet Security 2006 COM Object Security ByPass Vulnerability
  • From: iDefense Labs
• [ MDKSA-2007:100 ] - Updated bind packages fix vulnerability
  • From: security
• RE: Defeating Citibank Virtual Keyboard protection using screenshot method
  • From: Jim Harrison
• RE: Defeating Citibank Virtual Keyboard protection using screenshot method
  • From: Jim Harrison
• Training Classes in SyScan'07
  • From: organiser@xxxxxxxxxx
• Re: Defeating Citibank Virtual Keyboard protection using screenshot method
  • From: Gadi Evron
• Re: Defeating Citibank Virtual Keyboard protection using screenshot method
  • From: Reversemode
• Re: [security bulletin] HPSBTU02211 SSRT071326 rev.1 - HP Tru64 UNIX Running the dop command, Local Execution of Arbitrary Code with Privilege Elevation
  • From: Daniele Calore
• Defeating Citibank Virtual Keyboard protection using screenshot method
  • From: yashks
• Re: [Full-disclosure] Vulnerabilities Hashes DB needed
  • From: Morning Wood
• Multiple vulnerabilities
  • From: Michal Bucko (hackpl)
• Re: [Dailydave] Vulnerabilities Hashes DB needed
  • From: shadown
• Digital Armaments May-June-2007 Hacking Challenge: VMware
  • From: info
• Re: Podium CMS - Cookie Manipulation Exploit
  • From: Steven M. Christey
• RE: RDP TLS downgrade
  • From: M. Burnett
• Cisco Security Advisory: Multiple Vulnerabilities in the IOS FTP Server
  • From: Cisco Systems Product Security Incident Response Team
• iDefense Security Advisory 05.08.07: McAfee Security Center IsOldAppInstalled ActiveX Buffer Overflow Vulnerability
  • From: iDefense Labs
• Re: UPDATED: CubeCart (v3.0.15) - CRLF Injection Vulnerability
  • From: info
• Exchange Calendar MODPROPS Denial of Service (CVE-2007-0039)
  • From: Alexander Sotirov
• SEC Consult SA-20070509-0 :: Multiple vulnerabilites in Nokia Intellisync Mobile Suite & Wireless Email Express
  • From: Johannes Greil
• RDP TLS downgrade
  • From: software
• [ MDKSA-2007:099 ] - Updated python packages fix vulnerabilities
  • From: security
• [ MDKSA-2007:098 ] - Updated clamav packages fix vulnerabilities
  • From: security
• [SECURITY] [DSA 1288-1] New pptpd packages fix denial of service
  • From: Moritz Muehlenhoff
• [security bulletin] HPSBTU02211 SSRT071326 rev.1 - HP Tru64 UNIX Running the dop command, Local Execution of Arbitrary Code with Privilege Elevation
  • From: security-alert
• [security bulletin] HPSBMA02138 SSRT061184 rev.3 - HP OpenView Storage Data Protector, Remote Unauthorized Arbitrary Command Execution
  • From: security-alert
• ZDI-07-026: Microsoft Excel BIFF File Format Named Graph Record Parsing Stack Overflow Vulnerability
  • From: zdi-disclosures
• ZDI-07-027: Microsoft Internet Explorer Table Column Deletion Memory Corruption Vulnerability
  • From: zdi-disclosures
• [USN-458-1] MoinMoin vulnerabilities
  • From: Kees Cook
• rPSA-2007-0094-1 cpio
  • From: rPath Update Announcements
• Advanced Guestbook version 2.4.2 Multiple XSS Attack Vulnerabilities
  • From: securityresearch
• [ GLSA 200705-10 ] LibXfont, TightVNC: Multiple vulnerabilities
  • From: Raphael Marichez
• ZDI-07-024: Trend Micro ServerProtect EarthAgent Stack Overflow Vulnerability
  • From: zdi-disclosures
• [ GLSA 200705-11 ] MySQL: Two Denial of Service vulnerabilities
  • From: Raphael Marichez
• AP Newspower software <=4.0.1 allows remote data manipulation
  • From: gobbles_fo_evar
• [ GLSA 200705-09 ] IPsec-Tools: Denial of Service
  • From: Raphael Marichez
• Advanced Guestbook version 2.4.2 Directory Traversal Vulnerability
  • From: securityresearch
• FLEA-2007-0016-1: kernel
  • From: Foresight Linux Essential Announcement Service
• rPSA-2007-0092-1 tetex tetex-afm tetex-dvips tetex-fonts tetex-latex tetex-xdvi
  • From: rPath Update Announcements
• Advanced Guestbook version 2.4.2 Multiple Error Information Leak Vulnerabilities
  • From: securityresearch
• ZDI-07-025: Trend Micro ServerProtect AgRpcCln.dll Stack Overflow Vulnerability
  • From: zdi-disclosures
• VMSA-2007-0004 Multiple Denial-of-Service issues fixed
  • From: VMware Security team
• WASC Announcement: Distributed Open Proxy Honeypot Project Data Released
  • From: announcements
• [ GLSA 200705-08 ] GIMP: Buffer overflow
  • From: Raphael Marichez
• [ GLSA 200705-07 ] Lighttpd: Two Denials of Service
  • From: Raphael Marichez
• Re: 12All File Upload Vulnerability
  • From: info
• Updated: webMethods Security Advisory: Glue console directory traversal vulnerability
  • From: Jeremy Epstein
• OTRS <= 2.0.x XSS/XSRF
  • From: ciri
• iDefense Security Advisory 05.07.07: Sun Microsystems Solaris ACE_SETACL Integer Signedness DoS Vulnerability
  • From: iDefense Labs
• Re: NukeSentinel Bypass SQL Injection & Nuke Evolution <= 2.0.3 SQL Injections
  • From: technocrat
• PHPHtmlLib <= 2.4.0 Remote File Include Exploit
  • From: ilkerkandemir
• american cart 3.* (abs_path) remote file include
  • From: kepledehlah
• phpHoo3 (admin.php) Remote Login Bypass SQL Injection Vulnerability
  • From: ilkerkandemir
• fipsCMS v2.1 Remote SQL injection Vulnerability
  • From: ilkerkandemir
• pfa CMS v6.0 (index.php repinc) Remote File Include Vulnerability
  • From: ilkerkandemir
• [Reversemode Advisory] VMware Products - GPF Denial of Service
  • From: Reversemode
• [USN-457-1] elinks vulnerability
  • From: Kees Cook
• [SECURITY] [DSA 1287-1] New ldap-account-manager packages fix multiple vulnerabilities
  • From: Noah Meyerhans
• Kayako eSupport v3.00.90 Cross Site Scripting (XSS)
  • From: e1c4
• Mini Web Shop v.2 Vulnerable to XSS
  • From: corrado . liotta
• Re: nucleus 3.22 >> RFI
  • From: security curmudgeon
• Drake CMS (v0.4.0) - CRLF Injection Vulnerability
  • From: john
• UPDATED: CubeCart (v3.0.15) - CRLF Injection Vulnerability
  • From: john
• [ GLSA 200705-06 ] X.Org X11 library: Multiple integer overflows
  • From: Raphael Marichez
• SunShop (v4) Multiple Vulnerabilities
  • From: john
• Podium CMS - Cookie Manipulation Exploit
  • From: john
• Taltech Tal Bar Code ActiveX Control Memory Corruption Vulnerability(-ies)
  • From: sapheal-hack.pl
• Nuked-klaN 1.7.6 Remote Code Execution Exploit
  • From: gmdarkfig
• RE: XSS in Microsoft SharePoint
  • From: Jim Harrison
• [MajorSecurity Advisory #47]Simple Machines Forum (SMF) - Session fixation Issue
  • From: admin
• ACP3 (v4.0b3) - Multiple Vulnerabilities
  • From: john
• Re: NPDS <= 5.10 - Multiple SQL injections
  • From: aeroxteam_PLEASEDONTSPAMUS
• XSS in Microsoft SharePoint
  • From: ville . solarius
• Re: WebScarab <= 20060621-0003 cross site scripting
  • From: Rogan Dawes
• NPDS <= 5.10 - Multiple SQL injections
  • From: aeroxteam_PLEASEDONTSPAMUS
• Re: iDefense Security Advisory 04.30.07: Cerulean Studios Trillian Multiple IRC Vulnerabilities
  • From: Reversemode
• safari's saved password at risk
  • From: poplix
• Re: sunshop v4 >> RFI
  • From: lagged2hell
• RunCms <= 1.5.2 debug_show.php sql injection
  • From: retrog
• Remote File Include In Script impex
  • From: RaeD
• Re: iDefense Security Advisory 04.30.07: Cerulean Studios Trillian Multiple IRC Vulnerabilities
  • From: Marvin Frick
• PHPSecurityAdmin Remote File Include Exploit
  • From: ilkerkandemir
• Re: Medium security hole affecting DSL-G624T
  • From: Tim Brown
• Re: Medium security hole affecting DSL-G624T
  • From: Tim Brown
• Multiple vendors ZOO file decompression infinite loop DoS
  • From: Jean-Sébastien Guay-Leroux
• Re[2]: Medium security hole affecting DSL-G624T
  • From: 3APA3A
• Re: Medium security hole affecting DSL-G624T
  • From: 3APA3A
• rPSA-2007-0088-1 xscreensaver
  • From: rPath Update Announcements
• rPSA-2007-0089-1 net-snmp net-snmp-utils
  • From: rPath Update Announcements
• rPSA-2007-0090-1 gimp
  • From: rPath Update Announcements
• rPSA-2007-0085-1 lftp
  • From: rPath Update Announcements
• [security bulletin] HPSBUX01137 SSRT5954 rev.10 - HP-UX Running TCP/IP (IPv4), Remote Unauthorized Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBMI02210 SSRT071396 rev.1 - ProCurve Series 9300m Switches, Remote Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBTU02116 SSRT061135 rev.3 - HP Tru64 UNIX and HP Internet Express for Tru64 UNIX Running sendmail, Remote Execution of Arbitrary Code or Denial of Service (DoS)
  • From: security-alert
• Aardvark Topsites PHP Directory Disclosure Vulnerability
  • From: DoZ
• SchoolBoard (admin.php) Remote Login Bypass SQL Injection Vulnerability
  • From: ilkerkandemir
• Bradford CampusManager v3.1(6) Sensitive Data Disclosure
  • From: john
• [ MDKSA-2007:097 ] - Updated xscreensaver packages fix vulnerability
  • From: security
• [security bulletin] HPSBTU02179 SSRT061256 rev.1 - HP Tru64 UNIX Running the ps command, Local Disclosure of Sensitive Information
  • From: security-alert
• Medium security hole affecting DSL-G624T
  • From: Tim Brown
• [security bulletin] HPSBPI02185 SSRT071290 rev.2 - HP Jetdirect Running ftp, Remote Denial of Service (DoS)
  • From: security-alert
• 12All File Upload Vulnerability
  • From: John McGuire
• TPTI-07-05: IBM Tivoli Provisioning Manager for OS Deployment Multiple Stack Overflow Vulnerabilities
  • From: TSRT
• TPTI-07-06: Trillian Pro Rendezvous XMPP HTML Decoding Heap Corruption
  • From: TSRT
• [ MDKSA-2007:096 ] - Updated quagga packages fix DoS vulnerability
  • From: security
• [SECURITY] [DSA 1286-1] New Linux 2.6.18 packages fix several vulnerabilities
  • From: Dann Frazier
• iDefense Security Advisory 05.02.07: LiveData Protocol Server Heap Overflow Vulnerability
  • From: iDefense Labs
• Post Nuke v4bJournal Module Sql Inject
  • From: abbasi
• Cisco Security Advisory: LDAP and VPN Vulnerabilities in PIX and ASA Appliances
  • From: Cisco Systems Product Security Incident Response Team
• response Progress: Denial of Service attack against WebSpeed possible
  • From: suresync
• Disable website access for sites running Webspeed
  • From: suresync
• Vulnerability in InterVations' MailCopa
  • From: skillTube.com
• Atomix Mp3 Buffer Overflow
  • From: preth00nker
• [USN-456-1] net-snmp vulnerability
  • From: Kees Cook
• [ MDKSA-2007:095 ] - Updated ktorrent packages fix vulnerability
  • From: security
• [ GLSA 200705-04 ] Apache mod_perl: Denial of Service
  • From: Sune Kloppenborg Jeppesen
• [ECHO_ADV_81$2007] wordpress plugins wordTube <= 1.43 (wpPATH) Remote File Inclusion Vulnerability
  • From: erdc
• [ECHO_ADV_82$2007] wordpress plugins wp-Table <= 1.43 (wpPATH) Remote File Inclusion Vulnerability
  • From: erdc
• Wordpress All versions XSS
  • From: jcarlos . norte
• [ GLSA 200705-05 ] Quagga: Denial of Service
  • From: Sune Kloppenborg Jeppesen
• rPSA-2007-0084-1 kernel
  • From: rPath Update Announcements
• ZDI-07-023: Apple QTJava toQTPointer() Pointer Arithmetic Memory Overwrite Vulnerability
  • From: zdi-disclosures
• Radware Security Advisory - Yate 1.1.0 Denial of Service Vulnerability
  • From: no-reply
• [ GLSA 200705-03 ] Tomcat: Information disclosure
  • From: Raphael Marichez
• [ GLSA 200705-01 ] Ktorrent: Multiple vulnerabilities
  • From: Raphael Marichez
• [ GLSA 200705-02 ] FreeType: User-assisted execution of arbitrary code
  • From: Raphael Marichez
• [SECURITY] [DSA 1285-1] New wordpress packages fix multiple vulnerabilities
  • From: Noah Meyerhans
• [SECURITY] [DSA 1284-1] New qemu packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• ZoneAlarm Insufficient validation of 'vsdatant' driver input buffer Vulnerability
  • From: Matousec - Transparent security Research
• iDefense Security Advisory 04.30.07: Cerulean Studios Trillian Multiple IRC Vulnerabilities
  • From: iDefense Labs
• E-Annu (home.php) Remote SQL Injection Vulnerability
  • From: ilkerkandemir
• FLEA-2007-0015-1: gimp
  • From: Foresight Linux Essential Announcement Service
• FLEA-2007-0014-1: vim
  • From: Foresight Linux Essential Announcement Service
• Re: Sphider Version 1.2.x (include_dir) file include
  • From: ijoo . keren
• [security bulletin] HPSBMA02197 SSRT061285 rev.1 - HP-UX Running HP Power Manager Remote Agent (RA), Local Execution of Arbitrary Code with Root Privileges
  • From: security-alert
• iDefense Security Advisory 04.27.07: VMware Workstation Shared Folders Directory Traversal Vulnerability
  • From: iDefense Labs
• 3proxy[v0.5.3g]: (linux/win32 service) remote buffer overflow exploits.
  • From: v9
• Re: GHH Portal 1.1 (passwd.txt) Remote Password Disclosure Vulnerability
  • From: Jamie Riden
• GHH Portal 1.1 (passwd.txt) Remote Password Disclosure Vulnerability
  • From: crazy_king
• [SECURITY] [DSA 1283-1] New php5 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• please retract CVE-2007-2056 "Time-of-Check-Time-of-Use File Race in AFFLIB"
  • From: Simson Garfinkel
• Flaw in about.r OS and Progress version disclosure
  • From: suresync
• Re: please retract CVE-2007-2056 "Time-of-Check-Time-of-Use File Race in AFFLIB"
  • From: Tim
• Seir Anphin (file.php a[filepath]) Remote File Disclosure Vulnerability
  • From: ilkerkandemir
• Sphider Version 1.2.x (include_dir) file include
  • From: 1one1
• [ GLSA 200704-22 ] BEAST: Denial of Service
  • From: Raphael Marichez
• [ GLSA 200704-23 ] capi4k-utils: Buffer overflow
  • From: Raphael Marichez
• AFFLIB(TM): Multiple Shell Metacharacter Injections
  • From: VSR Advisories
• AFFLIB(TM): Multiple Format String Injections
  • From: VSR Advisories
• AFFLIB(TM): Multiple Buffer Overflows
  • From: VSR Advisories
• AFFLIB(TM): Time-of-Check-Time-of-Use File Race
  • From: VSR Advisories
• Security Concerns in Web 2.0
  • From: dharmeshmm
• iDefense Security Advisory 04.26.07: Symantec Norton Ghost 10 Recovery Points Insecure Password Storage Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 04.26.07: Symantec Norton Ghost 10 Service Manager Buffer Overflow Vulnerability
  • From: iDefense Labs
• [USN-454-1] PostgreSQL vulnerability
  • From: Martin Pitt
• [USN-455-1] PHP vulnerabilities
  • From: Martin Pitt
• FreeBSD Security Advisory FreeBSD-SA-07:03.ipv6
  • From: FreeBSD Security Advisories
• TSLSA-2007-0015 - postgresql
  • From: Trustix Security Advisor
• iDefense Security Advisory 04.26.07: Novell eDirectory NCP Fragment Denial of Service Vulnerability
  • From: iDefense Labs
• [SECURITY] [DSA 1282-1] New php4 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Re: Steganos Encrypted Safe NOT so safe
  • From: support
• Burak Y&#305;lmaz Blog (tr) v1.0 SQL injection vulnerability
  • From: dj_remix_20
• Re: Chicken of the VNC 2.0 remote DoS
  • From: support
• SineCMS
  • From: nexus
• Re: WordPress v2.1.3 >> remote file include~
  • From: otto
• modbuild >> 4.1 Remote File Inclusion
  • From: s433d_only_linux
• [CAID 35198, 35276]: CA BrightStor ARCserve Backup Media Server Vulnerabilities
  • From: Williams, James K
• [ MDKSA-2007:094 ] - Updated postgresql packages fix vulnerability
  • From: security
• [USN-453-2] rdesktop regression
  • From: Martin Pitt
• [CAID 35277]: CA CleverPath Portal SQL Injection Vulnerability
  • From: Williams, James K
• :doruk100net >> RFI
  • From: alijsb
• ASA-2007-012: Remote Crash Vulnerability in Manager Interface
  • From: Kevin P. Fleming
• IE 7 and Firefox Browsers Digest Authentication Request Splitting
  • From: Stefano Di Paola
• VirtuaNews.Pro.v1.0.3.Retail.+All.Plugins Remote file Include
  • From: s433d_only_linux
• Remote File Inclusion
  • From: s433d_only_linux
• CFP: 3rd European Conference on Computer Network Defense (EC2ND)
  • From: Stefano Zanero
• Re: 3Com's TippingPoint Denial of Service
  • From: Secure
• download engine V1.4.1 >> RFI (local)
  • From: alijsb
• nucleus 3.22 >> RFI
  • From: alijsb
• ASA-2007-011: Multiple problems in SIP channel parser handling response codes
  • From: Kevin P. Fleming
• ASA-2007-010: Two stack buffer overflows in SIP channel's T.38 SDP parsing code
  • From: Kevin P. Fleming
• blogsystem 1.4 >> local & remote = -rfi & lfi & -xss
  • From: info
• comus 2.0 Final >> RFI
  • From: alijsb
• Re: 3Com's TippingPoint Denial of Service
  • From: Steven M. Christey
• Built2Go_PHP_Link_Portal_v1.79 >> RFI
  • From: alijsb
• Searchactivity >> RFI
  • From: alijsb
• B2 Weblog and News Publishing Tool v0.6.1 >> RFI
  • From: alijsb
• adrevenue script (CyKuH.com)>> RFI
  • From: alijsb
• Shop-Script v 2.0 >> RFI
  • From: alijsb
• sunshop v4 >> RFI
  • From: info
• [SECURITY] [DSA 1281-1] New clamav packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• phpMYTGP v v1.4b >> RFI
  • From: alijsb
• netbingo v 2000 >> RFI
  • From: alijsb
• DynaTracker &v151>> RFI
  • From: alijsb
• HTMLeditbox & 2.2 >> RFI
  • From: alijsb
• WordPress v2.1.3 >> remote file include~
  • From: s433d_only_linux
• HYIP Manager Pro Script >> Remote file Include
  • From: alijsb
• MyNewsGroups >> RFI in include.php
  • From: alijsb
• Cisco Security Advisory: Default Passwords in NetFlow Collection Engine
  • From: Cisco Systems Product Security Incident Response Team
• Re: 3Com's TippingPoint Denial of Service
  • From: Simple Nomad
• ZDI-07-022: CA BrightStor ArcServe Media Server Multiple Buffer Overflow Vulnerabilities
  • From: zdi-disclosures
• dcp-portal v611 >> RFi
  • From: s433d_only_linux
• Re: ImageProcessing ... Local (Denial of Service Exploit)
  • From: Tim Newsham
• 3Com's TippingPoint Denial of Service
  • From: mike20061005
• [SECURITY] [DSA 1280-1] New aircrack-ng packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [MajorSecurity Advisory #46]Plogger - Session fixation Issue
  • From: admin
• Progress Webspeed exploit for all releases
  • From: suresync
• [security bulletin] HPSBST02200 SSRT071330 rev.1 - HP StorageWorks Command View Advanced Edition for XP, Local Unauthorized Access
  • From: security-alert
• Re: gallery >> 1.5.6 Remote File Inclusion
  • From: Chris Kelly
• Security Advisory: CA CleverPath SQL Injection
  • From: Irene Abezgauz
• Re: gallery >> 1.5.6 Remote File Inclusion
  • From: the . tiger100
• ImageProcessing ... Local (Denial of Service Exploit)
  • From: Dr . Ninux
• gallery >> 1.5.6 Remote File Inclusion
  • From: s433d_only_linux
• Re: claroline <= Multiple Remote File Include Vulnerablitiy
  • From: BlackHawk
• YA Book 0.98 Persistent XSS
  • From: omnipresent
• [ GLSA 200704-21 ] ClamAV: Multiple vulnerabilities
  • From: Matthias Geerdsen
• rPSA-2007-0081-1 postgresql postgresql-server
  • From: rPath Update Announcements
• Post Revolution Remote File Inclusion
  • From: InyeXion
• phpMySpace Gold (v8.10) - Blind SQL/XPath Injection Exploit
  • From: john
• DmCMS Shell Uploading
  • From: security
• acvsws_php5_v1.0 <= Multiple Remote File Include Vulnerablitiy
  • From: Mohandko
• [ GLSA 200704-20 ] NAS: Multiple vulnerabilities
  • From: Raphael Marichez
• RE: Yet another SQL injection framework
  • From: Greg Merideth
• [ MDKSA-2007:093 ] - Updated zziplib packages fix vulnerability
  • From: security
• [security bulletin] HPSBUX02183 SSRT061243 rev.1 - HP-UX sendmail, Remote Denial of Service (DoS)
  • From: security-alert
• [ GLSA 200704-19 ] Blender: User-assisted remote execution of arbitrary code
  • From: Raphael Marichez
• [ MDKSA-2007:092 ] - Updated freeradius packages fix vulnerability
  • From: security
• TJSChat Version 0.95 Cross Site Scripting
  • From: the_3dit0r
• 3proxy 0.5.3i bugfix release
  • From: Vladimir Dubrovin
• Big Blue Guestbook HTML Injection Vulnerabilities
  • From: seko
• WASC-Articles: 'The business case for security frameworks'
  • From: announcements
• FLEA-2007-0012-1: madwifi
  • From: Foresight Linux Essential Announcement Service
• FLEA-2007-0013-1: xine-lib
  • From: Foresight Linux Essential Announcement Service
• bibtex mase Remote File Inclusion
  • From: InyeXion
• Remote file inclusion in Joomla 1.5.0 Beta
  • From: Omid
• [ GLSA 200704-18 ] Courier-IMAP: Remote execution of arbitrary code
  • From: Raphael Marichez
• [SECURITY] [DSA 1279-1] New webcalendar packages fix cross-site scripting
  • From: Moritz Muehlenhoff
• c-arbre <= Multiple Remote File Include Vulnerablitiy
  • From: Mohandko
• Ripe Website Manager (<= 0.8.4) - SQL Injection Vulnerability and Cross-Site Scripting Exploit
  • From: john
• File117 Remote File Inclusion
  • From: InyeXion
• [ GLSA 200704-16 ] Aircrack-ng: Remote execution of arbitrary code
  • From: Raphael Marichez
• PHPMyBibli <= Multiple Remote File Include
  • From: Mohandko
• EsForum <= 3.0 SQL Injection Vulnerability
  • From: ilkerkandemir
• lms 1.5.3 Remote File Inclusion
  • From: InyeXion
• claroline <= Multiple Remote File Include Vulnerablitiy
  • From: Mohandko
• [Reversemode advisory] CheckPoint Zonelabs - ZoneAlarm SRESCAN driver local privilege escalation
  • From: Reversemode
• [ GLSA 200704-17 ] 3proxy: Buffer overflow
  • From: Raphael Marichez
• Re: WS_FTP Home 2007 NetscapeFTPHandler denial of service
  • From: sapheal
• Allfaclassfieds (level2.php dir) remote file inclusion
  • From: asdasd asdsadas
• WS_FTP Home 2007 NetscapeFTPHandler denial of service
  • From: Michal Bucko
• Re: Top Auction 1.0 (viewcat.php) Remote Blind SQL Injection // starhack.org
  • From: str0ke
• turbolence core 0.0.1 alpha Remote File Inclusion
  • From: omnipresent
• Top Auction 1.0 (viewcat.php) Remote Blind SQL Injection // starhack.org
  • From: seko
• UseBB Version 1.0.4 Path Disclosure Vulnerability
  • From: securityresearch
• FLEA-2007-0011-1: lighttpd
  • From: Foresight Linux Essential Announcement Service
• iDefense Security Advisory 04.20.07: Check Point Zone Labs SRESCAN IOCTL Local Privilege Escalation Vulnerability
  • From: iDefense Labs
• TSLSA-2007-0013 - multi
  • From: Trustix Security Advisor
• Re: Yet another SQL injection framework
  • From: Nick Boyce
• Eba News Version : v1.1 <= (webpages.php) Remote File Include // starhack.org
  • From: seko
• Re: Yet another SQL injection framework (file corruption)
  • From: Guillermo Marro
• ZDI-07-021: GraceNote CDDBControl ActiveX Buffer Overflow Vulnerability
  • From: zdi-disclosures
• NeatUpload vulnerability and fix
  • From: dean
• Re: Internet Explorer Crash
  • From: "C. Bergström"
• [security bulletin] HPSBST02208 SSRT071365 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS07-018 to MS07-022
  • From: security-alert
• [ MDKSA-2007:091 ] - Updated sqlite packages fix vulnerability
  • From: security
• [ MDKSA-2007:090 ] - Updated php packages fix multiple vulnerabilities
  • From: security
• [security bulletin] HPSBMA02133 SSRT061201 rev.4 - HP Oracle for OpenView (OfO) Critical Patch Update
  • From: security-alert
• Yet another SQL injection framework
  • From: Guillermo Marro
• Re: Internet Explorer Crash
  • From: Dave Walker
• Re: Internet Explorer Crash
  • From: simone colombo
• RaidenFTPd IXceedCompression multiple denial of service vulnerabilities
  • From: Michal Bucko
• Winamp <= (WMV) 5.3 Buffer Overflow DOS Exploit (0-DAY)
  • From: UniquE
• [waraxe-2007-SA#049] - Multiple vulnerabilities in Phorum 5.1.20
  • From: come2waraxe
• IPB (Invision Power Board) Full Path Disclusure
  • From: security
• Re: ZDI-07-020: BMC Performance Manager SNMP Command Execution Vulnerability
  • From: rashbi
• CfP Hack.lu 2007
  • From: info
• [ MDKSA-2007:089 ] - Updated php packages fix multiple vulnerabilities
  • From: security
• [ MDKSA-2007:088 ] - Updated php packages fix multiple vulnerabilities
  • From: security
• [ MDKSA-2007:087 ] - Updated php packages fix multiple vulnerabilities
  • From: security
• Re: Internet Explorer Crash
  • From: Kevin Finisterre (lists)
• [USN-453-1] X.org vulnerability
  • From: Kees Cook
• RE: Re[2]: Windows DNS Cache Poisoning by Forwarder DNS Spoofing
  • From: Oliver Friedrichs
• ZDI-07-020: BMC Performance Manager SNMP Command Execution Vulnerability
  • From: zdi-disclosures
• ZDI-07-019: BMC Patrol PerformAgent bgs_sdservice Memory Corruption Vulnerability
  • From: zdi-disclosures
• Re: Internet Explorer Crash
  • From: Rob Bartlett
• Re: PHP Nuke <= 8.0.0.3.3b SQL Injections and Bypass SQL Injection Protection vulnerabilities
  • From: Paul Laudanski
• ZDI-07-018: IBM Tivoli Monitoring Express Universal Agent Heap Overflow Vunlerability
  • From: zdi-disclosures
• ZDI-07-017: Oracle E-Business Suite Arbitrary Document Download Vulnerability
  • From: zdi-disclosures
• ZDI-07-016: Oracle E-Business Suite Arbitrary Node Deletion Vulnerability
  • From: zdi-disclosures
• ZDI-07-015: Novell Groupwise WebAccess Base64 Decoding Stack Overflow Vulnerability
  • From: zdi-disclosures
• NuclearBB Alpha 1 - Multiple Blind SQL/XPath Injection Vulnerabilities
  • From: john
• Re: Windows DNS Cache Poisoning by Forwarder DNS Spoofing
  • From: Matthew Dixon Cowles
• Re: [funsec] Re: [Full-disclosure] A Botted Fortune 500 a Day
  • From: Fergie
• RE: Re[2]: Windows DNS Cache Poisoning by Forwarder DNS Spoofing
  • From: Roger A. Grimes
• Re: Internet Explorer Crash
  • From: Thor (Hammer of God)
• [security bulletin] HPSBST02206 SSRT071354 rev.2 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS07-017
  • From: security-alert
• Re: Internet Explorer Crash
  • From: elflord91
• Re: Windows DNS Cache Poisoning by Forwarder DNS Spoofing
  • From: Tim
• Re: Windows DNS Cache Poisoning by Forwarder DNS Spoofing
  • From: Bojan Zdrnja
• Re: Linksys WAG200G - Information disclosure
  • From: no-mail
• Oracle Database Buffer overflow vulnerabilities in package DBMS_SNAP_INTERNAL
  • From: Team SHATTER
• Re: Windows DNS Cache Poisoning by Forwarder DNS Spoofing
  • From: Tim
• EclipseBB Remote File Inclusion
  • From: security
• Re: Windows DNS Cache Poisoning by Forwarder DNS Spoofing
  • From: Makoto Shiotsuki
• RE: Windows DNS Cache Poisoning by Forwarder DNS Spoofing
  • From: Roger A. Grimes
• Extreme PHPBB2 Remote File Inclusion
  • From: security
• Re: [Full-disclosure] A Botted Fortune 500 a Day
  • From: Nick FitzGerald
• FullyModdedphpBB2 Remote File Inclusion
  • From: security
• Re: Internet Explorer Crash
  • From: Tom Gregory
• MediaBeez Sql query Execution .. Wear isn't ?? :)
  • From: security
• [ GLSA 200704-13 ] File: Denial of Service
  • From: Raphael Marichez
• rPSA-2007-0074-1 dovecot
  • From: rPath Update Announcements
• [ GLSA 200704-15 ] MadWifi: Multiple vulnerabilities
  • From: Raphael Marichez
• rPSA-2007-0073-1 php php-mysql php-pgsql
  • From: rPath Update Announcements
• rPSA-2007-0072-1 lighttpd
  • From: rPath Update Announcements
• iDefense Security Advisory 04.17.07: McAfee E-Business Admin Server Invalid Data Length DoS Vulnerability
  • From: iDefense Labs
• Analysis of the Oracle April 2007 Critical Patch Update
  • From: David Litchfield
• Advisory: Shutdown unprotected Oracle TNS Listener via Oracle Discoverer Servlet [AS01]
  • From: ak
• Advisory: XSS Vulnerability in Oracle Secure Enterprise Search [SES01]
  • From: ak
• Reminder: HITBSecConf2007 - Malaysia: Call for Papers closing in 2 weeks
  • From: Praburaajan
• Advisory: SQL Injection in package SYS.DBMS_UPGRADE_INTERNAL
  • From: ak
• iDefense Security Advisory 04.17.07: McAfee VirusScan On-Access Scanner Long Unicode File Name Buffer Overflow
  • From: iDefense Labs
• Advisory: SQL Injection in package SYS.DBMS_AQADM_SYS
  • From: ak
• Advisory: Bypass Oracle Logon Trigger
  • From: ak
• NukeSentinel Bypass SQL Injection & Nuke Evolution <= 2.0.3 SQL Injections
  • From: programmer
• Re: Internet Explorer Crash
  • From: Mike Ely
• [ GLSA 200704-14 ] FreeRADIUS: Denial of Service
  • From: Raphael Marichez
• Re: [Full-disclosure] A Botted Fortune 500 a Day
  • From: Simon Smith
• Gizzar <= (basePath) Remote File Include Vulnerability
  • From: BorN To K!LL BorN To K!LL
• Re: Windows DNS Cache Poisoning by Forwarder DNS Spoofing
  • From: Makoto Shiotsuki
• Mambo/Joomla Component New Article Component RFI
  • From: meftun
• Cross Domain XMLHttpRequest
  • From: Michal Majchrowicz
• Re: Windows DNS Cache Poisoning by Forwarder DNS Spoofing
  • From: Tim
• Re: [Full-disclosure] A Botted Fortune 500 a Day
  • From: Jamie Riden
• Re: [Full-disclosure] A Botted Fortune 500 a Day
  • From: Steven Adair
• Re: [Full-disclosure] A Botted Fortune 500 a Day
  • From: Jamie Riden
• n.runs-SA-2007.007 - Sun Solaris 10 - Format string vulnerability
  • From: security
• Re: [Full-disclosure] A Botted Fortune 500 a Day
  • From: Steven Adair
• WASC-Articles: 'The Importance of Application Classification in Secure Application Development'
  • From: contact
• Re: Internet Explorer Crash
  • From: Thor (Hammer of God)
• Re: [Full-disclosure] Cross Domain XMLHttpRequest
  • From: ascii
• ShoutPro 1.5.2 - arbitrary code execution
  • From: jd2k2000
• Re: Internet Explorer Crash
  • From: The Anarcat
• SYMSA-2007-003 Macrovision InstallAnywhere Password and Serial Number Bypass
  • From: research
• BlueArc Firmware 4.2.944b FTP bounce
  • From: Tim Rupp
• Re[2]: Windows DNS Cache Poisoning by Forwarder DNS Spoofing
  • From: 3APA3A
• Multiple Ask IE Toolbar denial of service vulnerabilities
  • From: Michal Bucko
• [security bulletin] HPSBTU02207 SSRT061213, SSRT061239, SSRT071304 rev.1 - HP Tru64 UNIX SSL and BIND Remote Arbitrary Code Execution or Denial of Service (DoS)
  • From: security-alert
• Internet Explorer Crash
  • From: J. Oquendo
• Re: bloofoxCMS 0.2.2 Remote File Include Vulnerabilitiy
  • From: info
• RE: Windows DNS Cache Poisoning by Forwarder DNS Spoofing
  • From: Roger A. Grimes
• webMethods Security Advisory: Glue console directory traversal vu lnerability
  • From: Jeremy Epstein
• Re: Netsprint Toolbar 1.1 arbitrary remote code vulnerability
  • From: Michal Zalewski
• Re: [WEB SECURITY] Persistent CSRF and The Hotlink Hell
  • From: Ryan Barnett
• RE: Windows DNS Cache Poisoning by Forwarder DNS Spoofing
  • From: Roger A. Grimes
• Re: [Full-disclosure] [WEB SECURITY] Persistent CSRF and The Hotlink Hell
  • From: Blue Boar
• my little forum 1.7 Remote File Include Vulnerabilitiy
  • From: the_3dit0r
• my little weblog Cross Site Scripting
  • From: the_3dit0r
• Wabbit PHP Gallery v0.9 Cross Site Scripting
  • From: the_3dit0r
• Remot File Include download_engine_V1.4.3
  • From: RaeD
• Remot File Include In Script phphd_downloads
  • From: RaeD
• PHP Nuke <= 8.0.0.3.3b SQL Injections and Bypass SQL Injection Protection vulnerabilities
  • From: programmer
• Netsprint Toolbar 1.1 arbitrary remote code vulnerability
  • From: Michal Bucko
• iDefense Security Advisory 04.16.07: Akamai Download Manager ActiveX Stack Buffer Overflow Vulnerability
  • From: iDefense Labs
• [ GLSA 200704-12 ] OpenOffice.org: Multiple vulnerabilities
  • From: Raphael Marichez
• [ MDKSA-2007:085 ] - Updated freeradius packages fix DoS vulnerability
  • From: security
• [ MDKSA-2007:084 ] - Updated ipsec-tools packages fix DoS vulnerability
  • From: security
• [ MDKSA-2007:086 ] - Updated cups packages fix DoS vulnerability
  • From: security
• Akamai Technologies Security Advisory 2007-0001
  • From: Akamai Security Team
• rPSA-2007-0071-1 kernel
  • From: rPath Update Announcements
• [ GLSA 200704-11 ] Vixie Cron: Denial of Service
  • From: Matthias Geerdsen
• Ivan Gallery Script V.0.1 (index.php) Remote File Include Exploit
  • From: seko
• iDefense Security Advisory 04.16.07: ClamAV CAB File Unstore Buffer Overflow Vulnerability
  • From: iDefense Labs
• Persistent CSRF and The Hotlink Hell
  • From: pdp (architect)
• [ GLSA 200704-10 ] Inkscape: Two format string vulnerabilities
  • From: Matthias Geerdsen
• Re: Critical phpwiki c99shell exploit
  • From: Taneli Leppä
• Windows DNS Cache Poisoning by Forwarder DNS Spoofing
  • From: Makoto Shiotsuki
• Microsoft DNS Server Remote Code execution: Analysis and exploit
  • From: mballano
• Re: phpMyChat-0.14.5
  • From: stuart_smith
• MyBlog <= 0.9.8 Remote Command Execution Exploit
  • From: BlackHawk
• ActionPoll Script (actionpoll.php) Remote File Include // starhack.org
  • From: seko
• ZoneAlarm Multiple insufficient argument validation of hooked SSDT function Vulnerability
  • From: Matousec - Transparent security Research
• [MajorSecurity Advisory #45]oe2edit CMS - Cross Site Scripting and Cookie Manipulation Issue
  • From: admin
• Joomla/Mambo Jambook v1.0 beta7 Rfi Vuln.
  • From: crazy_king
• LS simple guestbook - arbitrary code execution
  • From: jd2k2000
• Re: [exploits] RPC vuln in DNS Server (fwd)
  • From: Gadi Evron
• [ GLSA 200704-09 ] xine-lib: Heap-based buffer overflow
  • From: Raphael Marichez
• Sitebar 3.3.5 (index.php writerFile)Remote File Include Vulnerabilities
  • From: ?? ???? ??????
• Re: Maian Search v1.1
  • From: support
• Re: Maian Gallery v1.0
  • From: support
• Re: sitex multiple vulnerabilities
  • From: Lostmon
• Pixaria Gallery 1.0 (class.Smarty.php) Remote File Include Vulnerability
  • From: irvian_yoe
• Re: VCDGear <= 3.56 Build 050213 (FILE) Local Code Execution Exploit
  • From: str0ke
• phpMyChat-0.14.5
  • From: k4rtal
• bloofoxCMS 0.2.2 Remote File Include Vulnerabilitiy
  • From: the_3dit0r
• Maian Weblog v3.1
  • From: k4rtal
• Flip-search-add-on 2.0
  • From: k4rtal
• Back-End CMS Database Tables v0.4.7 Remote File Include Vulnerabilities
  • From: the_3dit0r
• MySpeach v1.9
  • From: k4rtal
• B2evolution 1.6 RFi
  • From: k4rtal
• Maian Gallery v1.0
  • From: k4rtal
• Maian Search v1.1
  • From: k4rtal
• FloweRS v2.0 Cross Site Scripting
  • From: the_3dit0r
• MobilePublisherphp v1.1.2 Remote File Include Vulnerabilities
  • From: the_3dit0r
• Back-End CMS Database Tables v0.4.7 Cross Site Scripting
  • From: the_3dit0r
• Re: Steganos Encrypted Safe NOT so safe
  • From: Andreas Beck
• VCDGear <= 3.56 Build 050213 (FILE) Local Code Execution Exploit
  • From: meftun
• Re: Vbulletin 3.6.5 Sql Injection ! [misc.php]
  • From: scott-REMOVE
• bloofoxCMS 0.2.2 Cross Site Scripting
  • From: the_3dit0r
• Vbulletin 3.6.5 Sql Injection ! [misc.php]
  • From: seko
• TSRT-07-04: LANDesk Management Suite Alert Service Stack Overflow Vulnerability
  • From: TSRT
• [waraxe-2007-SA#048] - Multiple vulnerabilities in Virtual War 1.5 module for PhpNuke
  • From: come2waraxe
• [MajorSecurity Advisory #44]MailBee WebMail Pro - Cross Site Scripting Issue
  • From: admin
• [OPENADS-SA-2007-004] Max Media Manager v0.1.29-rc and v0.3.31-alpha-pr2 vulnerability fixed
  • From: Matteo Beccati
• [OPENADS-SA-2007-003] Openads 2.0.11 vulnerability fixed
  • From: Matteo Beccati
• [Argeniss] Hacking Databases for owning your data (paper)
  • From: Cesar
• [USN-452-1] KDE library vulnerability
  • From: Kees Cook
• iDefense Security Advisory 04.12.07: Hewlett Packard HP-UX Remote pfs_mountd.rpc Buffer Overflow Vulnerability
  • From: iDefense Labs
• Aircrack-ng (airodump-ng) remote buffer overflow vulnerability
  • From: jonny
• RE: Critical phpwiki c99shell exploit
  • From: Ryan Neufeld
• FAC GuestBook v2.0 remote database disclosure vulnerability
  • From: the_3dit0r
• Re: Cross site scripting in mephisto 0.7.3
  • From: encytemedia
• Chatness <= 2.5.3 - Arbitrary Code Execution
  • From: jd2k2000
• phpwebnews v.1 Multiple Cross Site Scripting Vulnerabilites
  • From: the_3dit0r
• TuMusika Evolution 1.6 Cross Site Scripting Vulnerabilitiy
  • From: the_3dit0r
• [security bulletin] HPSBUX02203 SSRT071339 rev.1 - HP-UX Running Portable File System (PFS), Remote Increase in Privilege
  • From: security-alert
• Cross site scripting in mephisto 0.7.3
  • From: Hanno Böck
• Re: Critical phpwiki c99shell exploit
  • From: Jamie Riden
• Re: Critical phpwiki c99shell exploit
  • From: Gadi Evron
• Cisco Security Advisory: Multiple Vulnerabilities in the Cisco Wireless Control System
  • From: Cisco Systems Product Security Incident Response Team
• [security bulletin] HPSBGN02199 SSRT071312 rev.1 - Mercury Quality Center ActiveX, Remote Unauthorized Arbitrary Code Execution
  • From: security-alert
• Cisco Security Advisory: Multiple Vulnerabilities in the Cisco Wireless LAN Controller and Cisco Lightweight Access Points
  • From: Cisco Systems Product Security Incident Response Team
• [ GLSA 200704-08 ] DokuWiki: Cross-site scripting vulnerability
  • From: Matthias Geerdsen
• [security bulletin] HPSBUX01137 SSRT5954 rev.9 - HP-UX Running TCP/IP (IPv4), Remote Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBST02206 SSRT071354 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS07-014
  • From: security-alert
• Critical phpwiki c99shell exploit
  • From: rurban
• CVE-2007-1872: Cross site scripting in toendaCMS 1.5.3
  • From: Hanno Böck
• INFIGO-2007-04-05: Enterprise Security Analyzer server remote buffer overflows
  • From: infocus
• CVE-2007-1871: Cross site scripting in chcounter 3.1.3
  • From: Hanno Böck
• HPSBUX02205 SSRT061120 rev.1 - HP-UX Running ARPA Transport, Local Denial of Service (DoS)
  • From: security-alert
• E107 - (v0.7.8) Access Escalation Vulnerbility - PoC
  • From: jd2k2000
• [ MDKSA-2007:082 ] - Updated madwifi-source, wpa_supplicant packages fix vulnerabilities
  • From: security
• [USN-451-1] Linux kernel vulnerabilities
  • From: Kees Cook
• iDefense Security Advisory 04.11.07: Apache HTTPD suEXEC Multiple Vulnerabilities
  • From: iDefense Labs
• [ MDKSA-2007:075-1 ] - Updated qt4 packages to address utf8 decoder bug
  • From: security
• [ MDKSA-2007:083 ] - Updated apache-mod_perl packages fix DoS vulnerability
  • From: security
• [ MDKSA-2007:079-1 ] - Updated xorg-x11/XFree86 packages fix integer overflow vulnerabilities
  • From: security
• Steganos Encrypted Safe NOT so safe
  • From: frankrizzo604
• PunBB <= 1.2.14 Multiple Vulnerabilities (Advisory)
  • From: gmdarkfig
• PunBB <= 1.2.14 Remote Code Execution (Exploit)
  • From: gmdarkfig
• Re: Latinchat Denial Of Service
  • From: d4rksoft
• Re: On-going Internet Emergency and Domain Names
  • From: Alexander Klimov
• Cosign SSO Authentication Bypass
  • From: Jon Oberheide
• CodeBreak (codebreak.php process_method) - Remote File Inclusion Vulnerability
  • From: john
• [MajorSecurity Advisory #43]Calacode ATMail 5.0 - Cross Site Scripting and Cookie Manipulation Issue
  • From: admin
• New bug :)
  • From: asdasd asdsadas
• pL-PHP beta 0.9 - Multiple Vulnerabilities
  • From: omnipresent
• nEw Bug :D
  • From: asdasd asdsadas
• [ MDKSA-2007:080-1 ] - Updated tightvnc packages fix integer overflow vulnerabilities
  • From: security
• webMethods Glue Management Console Directory Traversal
  • From: Patrick Webster
• [ MDKSA-2007:081-1 ] - Updated freetype2 packages fix vulnerability
  • From: security
• Re: vbulletin admincp sql injection
  • From: rjmjr69
• [ MDKSA-2007:077-1 ] - Updated krb5 packages fix vulnerabilities
  • From: security
• iDefense Security Advisory 04.10.07: Microsoft Windows Universal Plug and Play Memory Corruption Vulnerability
  • From: iDefense Labs
• PhpOpenChat <= 3.0.1 (poc.php) Multiple Remote File Include Vulnerabilities
  • From: seko
• Secunia Research: Microsoft Agent URL Parsing Memory Corruption Vulnerability
  • From: Secunia Research
• EEYE: Windows Vista CSRSS Dangling Process Pointer Privilege Escalation
  • From: eEye Advisories
• EEYE: Windows VDM Zero Page Race Condition Privilege Escalation
  • From: eEye Advisories
• DEF CON One Five CfP in effect!
  • From: The Dark Tangent
• phpGalleryScript 1.0 - File Inclusion Vulnerabilities
  • From: z12xxa
• [USN-450-1] ipsec-tools vulnerability
  • From: Kees Cook
• iDefense Security Advisory 04.09.07: AOL AIM and ICQ File Transfer Path-Traversal Vulnerability
  • From: iDefense Labs
• Re: Re: Mybb Hot Editor Plugin Local File Inclusion
  • From: liz0
• rPSA-2007-0070-1 openoffice.org
  • From: rPath Update Announcements
• Re: Mybb Hot Editor Plugin Local File Inclusion
  • From: Kevin Finisterre (lists)
• xodagallery Remote Code Execution Vulnerability
  • From: the_3dit0r
• Hot Editor v4.0 Local File Inclusion
  • From: liz0
• Mybb Hot Editor Plugin Local File Inclusion
  • From: liz0
• QuizShock 1.6.1 - Cross-Site Scripting Vulnerability
  • From: john
• Request It : Song Request System 1.0b - remote file inclusion
  • From: mail
• DeskPRO v2.0.1 - Cross-Site Scripting Vulnerability
  • From: john
• Remot File Include In Script Lore v1
  • From: RaeD
• phpMyAdmin 2.6.1 Local Cross Site Scripting
  • From: the_3dit0r
• Take Control In Script Jeebles Directory
  • From: RaeD
• Gsylvain35 Portail Web Remote File Include Vulnerabilities
  • From: the_3dit0r
• Scorp Book <== v1.0 (smilies.php) Remote File Include Exploit
  • From: k4rtal
• UBB.threads (<= 6.1.1) SQL Injection Vulnerability
  • From: john
• witshare 0.9 Remote File Include Vulnerabilitiy
  • From: the_3dit0r
• CmailServer WebMail <= V.5.3.4 (signup) Remote XSS Exploit
  • From: ajannhwt
• Re: Nine Vista CVEs, including Microsoft inaccurate Teredo use case documentation
  • From: GomoR
• [MajorSecurity Advisory #42]webblizzard CMS - Cross Site Scripting and Session fixation Issues
  • From: Securityaudit
• PHP <= 5.2.1 wbmp file handling integer overflow
  • From: Ivan Fratric
• [ GLSA 200704-07 ] libwpd: Multiple vulnerabilities
  • From: Raphael Marichez
• [ GLSA 200704-06 ] Evince: Stack overflow in included gv code
  • From: Raphael Marichez
• LayerOne 2007 - Speaker Line up Announced
  • From: Layer One
• [SECURITY] [DSA 1278-1] New man-db packages fix arbitrary code execution
  • From: Noah Meyerhans
• AOL Nullsoft Winamp IT Module "IN_MOD.DLL" Remote Heap Memory Corruption
  • From: Piotr Bania
• AOL Nullsoft Winamp S3M Module "IN_MOD.DLL" Remote Heap Memory Corruption
  • From: Piotr Bania
• AOL Nullsoft Winamp LIBSNDFILE.DLL Remote Memory Corruption (Off By Zero)
  • From: Piotr Bania
• livor 2.5 Cross-Site Scripting Vulnerability
  • From: rko . thelegendkiller
• [MajorSecurity Advisory #41]onelook courts online - Session fixation Issue
  • From: Securityaudit
• [MajorSecurity Advisory #40]onelook oboShop - Session fixation Issue
  • From: Securityaudit
• ZDI-07-013: Kaspersky AntiVirus Engine ARJ Archive Parsing Heap Overflow Vulnerability
  • From: zdi-disclosures
• [MajorSecurity Advisory #39]onelook onebyone CMS - Session fixation Issue
  • From: Securityaudit
• phpContact Multiple Remote File Inclusion Vulnerabilities
  • From: rko . thelegendkiller
• ZDI-07-014: Kaspersky Anti-Virus ActiveX Control Unsafe Method Exposure Vulnerablity
  • From: zdi-disclosures
• ACLS ineffective in SQL-Ledger and LedgerSMB
  • From: Chris Travers
• Re: Nine Vista CVEs, including Microsoft inaccurate Teredo use case documentation
  • From: Jim Hoagland
• Re: Firefox extensions go Evil - Critical Vulnerabilities in Firefox/Firebug
  • From: Thor Larholm
• [security bulletin] HPSBUX02204 SSRT071341 rev.1 - HP-UX Running CIFS Server (Samba), Remote Denial of Service (DoS)
  • From: security-alert
• FLEA-2007-0010-1: evolution
  • From: Foresight Linux Essential Announcement Service
• Wserve HTTP Server 4.6 Version (Long Directory Name) Buffer Overflow - Denial Of Service
  • From: UniquE
• FLEA-2007-0009-1: xorg-x11 freetype
  • From: Foresight Linux Essential Announcement Service
• FLEA-2007-0008-1: krb5
  • From: Foresight Linux Essential Announcement Service
• iDefense Security Advisory 04.04.07: ESRI ArcSDE Buffer Overflow Vulnerability
  • From: iDefense Labs
• Microsoft .NET request filtering bypass vulnerability (BID 20753)
  • From: research
• iDefense Security Advisory 04.04.07: Kaspersky Internet Security Suite klif.sys Heap Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 04.04.07: Kaspersky AntiVirus SysInfo ActiveX Control Information Disclosure Vulnerability
  • From: iDefense Labs
• [ MDKSA-2007:081 ] - Updated freetype2 packages fix vulnerability
  • From: security
• [ MDKSA-2007:080 ] - Updated tightvnc packages fix integer overflow vulnerabilities
  • From: security
• LedgerSMB 1.2.0 finally released, fixes CVE-2006-5589
  • From: Chris Travers
• Re: [WEB SECURITY] Firefox extensions go Evil - Critical Vulnerabilities in Firefox/Firebug
  • From: Daniel Veditz
• [ MDKSA-2007:079 ] - Updated xorg-x11/XFree86 packages fix integer overflow vulnerabilities
  • From: security
• [ MDKSA-2007:078 ] - Updated kernel packages fix multiple vulnerabilities and bugs
  • From: security
• VMSA-2007-0003 VMware ESX 3.0.1 and 3.0.0 server security updates
  • From: VMware Security team
• Firefox extensions go Evil - Critical Vulnerabilities in Firefox/Firebug
  • From: pdp (architect)
• [ MDKSA-2007:077 ] - Updated krb5 packages fix vulnerabilities
  • From: security
• Gazi Okul Sitesi 2007(tr)(fotokategori.asp) Remote SQL Injection
  • From: r00t-balance
• [SECURITY] [DSA 1277-1] New XMMS packages fix arbitrary code execution
  • From: Noah Meyerhans
• Re: More information on ZERT patch for ANI 0day
  • From: Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
• Re: More information on ZERT patch for ANI 0day
  • From: Jason Frisvold
• Re: More information on ZERT patch for ANI 0day
  • From: Jason Frisvold
• Several Windows image viewers vulnerabilities
  • From: Ivan Fratric
• High Risk Vulnerability in OpenOffice
  • From: NGSSoftware Insight Security Research
• rPSA-2007-0062-1 firefox
  • From: rPath Update Announcements
• Re: Denial of Service Vulnerabilities in TrueCrypt 4.3 Linux (re. bid 23180)
  • From: Marco Ivaldi
• Mozilla Firefox Insecure Element Stealth Injection Vulnerability
  • From: Michal Majchrowicz
• [ MDKSA-2007:076 ] - Updated kdelibs packages to address UTF8 issue in KJS
  • From: security
• MyBlog: PHP and MySQL Blog/CMS software Remote File Include Vulnerabilitiy
  • From: the_3dit0r
• MyBlog: PHP and MySQL Blog/CMS software Cross-Site Scripting Vulnerabilitiy
  • From: the_3dit0r
• rPSA-2007-0065-1 freetype xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs
  • From: rPath Update Announcements
• phpechocms2 Remote File Include Vulnerabilities
  • From: the_3dit0r
• iDefense Security Advisory 04.03.07: Multiple Vendor X Server BDF Font Parsing Integer Overflow Vulnerability
  • From: iDefense Labs
• phpechocms v.2 Cross-Site Scripting Vulnerabilitiy
  • From: the_3dit0r
• Monkey CMS v0.0.3 Remote File Include Vulnerabilitiy
  • From: the_3dit0r
• rPSA-2007-0066-1 kdelibs qt-x11-free
  • From: rPath Update Announcements
• K-CMS v1.0 Remote File Include Vulnerabilities
  • From: the_3dit0r
• rPSA-2007-0067-1 nas
  • From: rPath Update Announcements
• iXon_CMS 0.30 Remote File Include Vulnerabilities
  • From: the_3dit0r
• [USN-448-1] X.org vulnerabilities
  • From: Kees Cook
• Remot File Include In phpexplorator_2_0
  • From: RaeD
• [MajorSecurity Advisory #38]eXV2 CMS - Session fixation and Cross-Site-Scripting Issues
  • From: Securityaudit
• [ MDKSA-2007:074 ] - Updated qt3 packages to address utf8 decoder bug
  • From: security
• CYBSEC Release: SAP Security - Paper & Tool release
  • From: Mariano Nuñez Di Croce
• rPSA-2007-0064-1 ImageMagick
  • From: rPath Update Announcements
• CYBSEC Security Pre-Advisory: SAP RFC_SET_REG_SERVER_PROPERTY RFC Function Denial Of Service
  • From: CYBSEC Advisories
• [USN-449-1] krb5 vulnerabilities
  • From: Kees Cook
• CYBSEC Security Pre-Advisory: SAP SYSTEM_CREATE_INSTANCE RFC Function Buffer Overflow
  • From: CYBSEC Advisories
• CYBSEC Security Pre-Advisory: SAP RFC_START_GUI RFC Function Buffer Overflow
  • From: CYBSEC Advisories
• lite-cms-0.2.1 Remote File Include Vulnerabilities
  • From: the_3dit0r
• iDefense Security Advisory 04.03.07: Multiple Vendor X Server XC-MISC Extension Memory Corruption Vulnerability
  • From: iDefense Labs
• CYBSEC Security Pre-Advisory: SAP RFC_START_PROGRAM RFC Function Multiple Vulnerabilities
  • From: CYBSEC Advisories
• CYBSEC Pre-Advisory: SAP TRUSTED_SYSTEM_SECURITY RFC Function Information Disclosure
  • From: CYBSEC Advisories
• rPSA-2007-0063-1 krb5 krb5-server krb5-services krb5-test krb5-workstation
  • From: rPath Update Announcements
• Three New Papers on Oracle Forensics
  • From: David Litchfield
• [ GLSA 200704-03 ] OpenAFS: Privilege escalation
  • From: Raphael Marichez
• iDefense Security Advisory 04.03.07: Multiple Vendor X Server fonts.dir File Parsing Integer Overflow Vulnerability
  • From: iDefense Labs
• [ MDKSA-2007:075 ] - Updated qt4 packages to address utf8 decoder bug
  • From: security
• [ GLSA 200704-05 ] zziplib: Buffer Overflow
  • From: Raphael Marichez
• Nine Vista CVEs, including Microsoft inaccurate Teredo use case documentation
  • From: Jim Hoagland
• [ GLSA 200704-02 ] MIT Kerberos 5: Arbitrary remote code execution
  • From: Sune Kloppenborg Jeppesen
• [SECURITY] [DSA 1276-1] New krb5 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• FLEA-2007-0006-1: ImageMagick
  • From: Foresight Linux Essential Announcement Service
• ZDI-07-012: Yahoo! Messenger AudioConf ActiveX Control Buffer Overflow
  • From: zdi-disclosures
• FLEA-2007-0007-1: nas
  • From: Foresight Linux Essential Announcement Service
• iDefense Security Advisory 04.03.07: Multiple Vendor Kerberos kadmind Buffer Overflow Vulnerability
  • From: iDefense Labs
• Re: On-going Internet Emergency and Domain Names
  • From: Bob Fiero
• Re: More information on ZERT patch for ANI 0day
  • From: Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
• Re: 0day Oracle 10g exploit - dbms_aq.enqueue - become DBA
  • From: Andrea Purificato - bunker
• MITKRB5-SA-2007-001: telnetd allows login as arbitrary user [CVE-2007-0956]
  • From: Tom Yu
• Re: 0day Oracle 10g exploit - dbms_aq.enqueue - become DBA
  • From: Gadi Evron
• iDefense Security Advisory 04.03.07: Microsoft Windows WMF Triggerable Kernel Design Error DoS Vulnerability
  • From: iDefense Labs
• FLEA-2007-0006-2: ImageMagick
  • From: Foresight Linux Essential Announcement Service
• MITKRB5-SA-2007-003: double-free vulnerability in kadmind (via GSS-API library) [CVE-2007-1216]
  • From: Tom Yu
• MITKRB5-SA-2007-002: KDC, kadmind stack overflow in krb5_klog_syslog [CVE-2007-0957]
  • From: Tom Yu
• Re: More information on ZERT patch for ANI 0day
  • From: Stefan Kelm
• Re: [Full-disclosure] More information on ZERT patch for ANI 0day
  • From: Matthew Murphy
• Re[2]: APOP vulnerability
  • From: 3APA3A
• Re: APOP vulnerability
  • From: Gaëtan LEURENT
• Remote File Include In Script stat12
  • From: RaeD
• Re: [Full-disclosure] [RECTIFY] Oracle 10g exploit - dbms_aq.enqueue - become DBA
  • From: Andrea "bunker" Purificato
• MyBulletinBoard (MyBB) <= 1.2.3 Remote Code Execution Exploit
  • From: gmdarkfig
• [MajorSecurity Advisory #37]HolaCMS - Cross Site Scripting Issue
  • From: SecurityAudit
• Re: APOP vulnerability
  • From: 3APA3A
• Re: Exploiting Microsoft dynamic Dns updates
  • From: Denis Jedig
• TWOVB][ The Week Of Vista Bugs: the truth is out there
  • From: TWOVB Team
• [SECURITY] [DSA 1275-1] New zope2.7 packages fix cross-site scripting flaw
  • From: Noah Meyerhans
• iDefense Security Advisory 03.31.07: IBM Tivoli Provisioning Manager for OS Deployment Multiple Vulnerabilities
  • From: iDefense Labs
• [ GLSA 200704-01 ] Asterisk: Two SIP Denial of Service vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• [CFP] VNSECON 07 - Call for Papers / HCMC - August 03-04, 2007
  • From: rd
• Re: Maplab <= 2.2.1 (gszAppPath) Remote File Inclusion Vulnerability
  • From: str0ke
• Re: Maplab <= 2.2.1 (gszAppPath) Remote File Inclusion Vulnerability
  • From: jasus
• iDefense Security Advisory 04.02.07: Hewlett-Packard Mercury Quality Center ActiveX Control ProgColor Buffer Overflow Vulnerability
  • From: iDefense Labs
• APOP vulnerability
  • From: Gaëtan LEURENT
• Re: AIX 4.3 lsmcode local root command execution
  • From: Shiva Persaud
• WOVB #01: Bypassing Vista Firewall, Flying over obstructive line
  • From: TWOVB Team
• More information on ZERT patch for ANI 0day
  • From: Gadi Evron
• iDefense Security Advisory 03.31.07: Multiple Vendor ImageMagick DCM and XWD Buffer Overflow Vulnerabilities
  • From: iDefense Labs
• Maplab <= 2.2.1 (gszAppPath) Remote File Inclusion Vulnerability
  • From: mufti . rizal
• Windows XP/Vista (.ANI) Remote Exploit (bypass eeye patch)
  • From: jamikazu
• 0day Oracle 10g exploit - dbms_aq.enqueue - become DBA
  • From: Andrea "bunker" Purificato
• Re: Denial of Service Vulnerabilities in TrueCrypt 4.3 Linux (re. bid 23180)
  • From: Pavel Kankovsky
• Norton Multiple insufficient argument validation of hooked SSDT function Vulnerability
  • From: Matousec - Transparent security Research
• DirectAdmin persistant XSS [takeover an Administrator`s account]
  • From: Kanedaaa Bohater
• Re: Drake CMS v0.3.2 < = RFi Vulnerabilities
  • From: legolas558
• [ GLSA 200703-28 ] CUPS: Denial of Service
  • From: Raphael Marichez
• [security bulletin] HPSBMA02198 SSRT061177 rev.1 - HP OpenView Network Node Manager (OV NNM) Remote Unauthorized Access
  • From: security-alert