Bugtraq

• Thread Index

• [ MDKSA-2007:015 ] - Updated cacti packages SQL injection vulnerability
  • From: security
• [ MDKSA-2007:017 ] - Updated wget packages fix ftp vulnerability
  • From: security
• MS07-004 VML Integer Overflow Exploit
  • From: LifeAsaGeek
• PHPATM Remote Password Disclosure Vulnerablity
  • From: nightmare
• Gallery <= 1.4.4-pl4 (phpbb_root_path) Remote File Include Vulnerability
  • From: me you
• [ GLSA 200701-10 ] WordPress: Multiple vulnerabilities
  • From: Raphael Marichez
• liens_dynamiques xss and admin authentification
  • From: sn0oPy . team
• [USN-409-1] ksirc vulnerability
  • From: Martin Pitt
• Uninformed Journal Release Announcement: Volume 6
  • From: H D Moore
• InstantForum.NET Multiple Cross-Site Scripting Vulnerability
  • From: DoZ
• Re: Jax Petition Book (languagepack) Remote File Include Vulnerabilities
  • From: bmatheny
• wcSimple Poll (password.txt) Remote Password Disclosure Vulnerablity
  • From: ilkerkandemir
• Jax Petition Book (languagepack) Remote File Include Vulnerabilities
  • From: ilkerkandemir
• Outpost Bypassing Self-Protection using file links Vulnerability
  • From: Matousec - Transparent security Research
• [USN-408-1] krb5 vulnerability
  • From: Martin Pitt
• Re: Re: Re: Uber Uploader 4.2 Arbitrary File Upload Vulnerability
  • From: recklessb
• Remedy Action Request System 5.01.02 - User Enumeration
  • From: Davide Del Vecchio
• Okul Web Otomasyon Sistemi (etkinlikbak.asp) SQL Injection Vulnerability
  • From: ilkerkandemir
• Oracle Passwords and OraBrute
  • From: paulw
• Re: Ipswitch WS_FTP 2007 Professional "wsftpurl" access violation vulnerability
  • From: 3APA3A
• [USN-407-1] libgtop2 vulnerability
  • From: Martin Pitt
• London DC4420 meet - Wednesday 17th January, 2007
  • From: Major Malfunction
• Re: [Full-disclosure] 0trace - traceroute on established connections
  • From: Robert Święcki
• Ovidentia 5.6x Series Remote File &#304;nclude
  • From: hotturk
• Trevorchan <= v0.7 Remote File Include Vulnerability
  • From: ilkerkandemir
• RE: seeking comments on disclosure articles
  • From: Michael Scheidell
• PHP-Nuke <= 7.9 Old-Articles Block "cat" SQL Injection vulnerability
  • From: paisterist
• Re: Naig <= 0.5.2 (this_path) Remote File Include Vulnerability
  • From: maxpost
• Re: phpBB (privmsg.php) XSS Exploit
  • From: neothermic
• Ipswitch WS_FTP 2007 Professional "wsftpurl" access violation vulnerability
  • From: sapheal
• [ MDKSA-2007:013 ] - Updated libneon0.26 packages fix vulnerability
  • From: security
• [SECURITY] [DSA 1248-1] New libsoup packages fix denial of service
  • From: Moritz Muehlenhoff
• Re: Vendor guidelines regarding security contacts
  • From: Steven M. Christey
• [ GLSA 200701-08 ] Opera: Two remote code execution vulnerabilities
  • From: Raphael Marichez
• [ GLSA 200701-07 ] OpenOffice.org: EMF/WMF file handling vulnerabilities
  • From: Raphael Marichez
• [ GLSA 200701-06 ] w3m: Format string vulnerability
  • From: Raphael Marichez
• [ GLSA 200701-05 ] KDE kfile JPEG info plugin: Denial of Service
  • From: Raphael Marichez
• Naig <= 0.5.2 (this_path) Remote File Include Vulnerability
  • From: me you
• AIOCP Login Bypass Vulnerability
  • From: coloss7
• AIOCP SQL Injection Vulnerability
  • From: coloss7
• Re: slocate leaks filenames of protected directories
  • From: Ben Wheeler
• [ MDKSA-2007:012 ] - Updated kernel packages fix multiple vulnerabilities and bugs
  • From: security
• Re: Corsaire Security Advisory: ChainKey Java Code Protection Bypass issue
  • From: Jim Manico
• Wordpress disclosure of Table Prefix Weakness
  • From: process
• seeking comments on disclosure articles
  • From: smcalearney
• Re: [Full-disclosure] Web Honeynet Project: announcement,
  • From: Gadi Evron
• Re: phpBB (privmsg.php) XSS Exploit
  • From: neothermic
• Re: xss in phpmyadmin <= 2.8.1
  • From: alfa
• [CAID 34955, 34956, 34957, 34958, 34959, 34817]: CA BrightStor ARCserve Backup Multiple Overflow Vulnerabilities
  • From: Williams, James K
• Re: slocate leaks filenames of protected directories
  • From: Dave Moore
• Micro CMS <= 3.5 Remote File Include Exploit
  • From: ilkerKandemir
• Re: [Full-disclosure] Web Honeynet Project: announcement,
  • From: bugtraq
• Re: Vendor guidelines regarding security contacts
  • From: Ben Bucksch
• Lies? [Was: Re: Digital Armaments Security Pre-Advisory 11.01.2007: Grsecurity Kernel PaX - Local root vulnerability]
  • From: Lubomir Kundrak
• Web Honeynet Project: announcement, exploit URLs this Wednesday
  • From: Gadi Evron
• Corsaire Security Advisory: ChainKey Java Code Protection Bypass issue
  • From: advisories
• Re (3): Circumventing CSFR Form Token Defense
  • From: bugtraq
• [USN-406-1] OpenOffice.org vulnerability
  • From: Kees Cook
• [ MDKSA-2007:011 ] - Updated Thunderbird packages fix multiple vulnerabilities
  • From: security
• xss in phpmyadmin <= 2.8.1
  • From: alfa
• Ezboxx multiple vulnerabilities.
  • From: Info
• LunarPoll (PollDir) Remote File Include Vulnerabilities
  • From: ilkerKandemir
• Nwom topsites v3.0
  • From: lunY
• LS-20061002 - Computer Associates BrightStor ARCserve Backup Remote Code Execution Vulnerability
  • From: advisories
• Re: Perforce client: security hole by design
  • From: Crispin Cowan
• [security bulletin] HPSBMA02176 SSRT051035 rev.1 - HP OpenView Network Node Manager (OV NNM) Remote Unauthorized Execution of Arbitrary Code
  • From: security-alert
• [ MDKSA-2007:010 ] - Updated Firefox packages fix multiple vulnerabilities
  • From: security
• Digital Armaments Security Pre-Advisory 11.01.2007: Grsecurity Kernel PaX - Local root vulnerability
  • From: info
• [USN-405-1] fetchmail vulnerability
  • From: Kees Cook
• easy-content filemanager
  • From: hackerbinhphuoc
• ZDI-07-003: CA BrightStor ARCserve Backup Message Engine Buffer Overflow Vulnerability
  • From: zdi-disclosures
• LayerOne 2007 CFP Announced
  • From: Layer One
• [security bulletin] HPSBMA02175 SSRT061174 rev.1 - HP OpenView Network Node Manager (OV NNM) Remote Unauthorized Read Access to Files
  • From: security-alert
• ZDI-07-004: CA BrightStor ARCserve Backup Tape Engine Buffer Overflow Vulnerability
  • From: zdi-disclosures
• ZDI-07-002: CA BrightStor ARCserve Backup Tape Engine Code Execution Vulnerability
  • From: zdi-disclosures
• rPSA-2007-0006-1 krb5 krb5-server krb5-services krb5-test krb5-workstation
  • From: rPath Update Announcements
• FreeBSD Security Advisory FreeBSD-SA-07:01.jail
  • From: FreeBSD Security Advisories
• Re: slocate leaks filenames of protected directories
  • From: Ben Wheeler
• Calyptix Security Advisory CX-2007-001 - Snort 2.6.1.2 Integer Underflow Vulnerability
  • From: Calyptix Advisories
• RE: Circumventing CSFR Form Token Defense
  • From: James C. Slora Jr.
• phpBB (privmsg.php) XSS Exploit
  • From: info
• Re: A Major design Bug in Steganography 1.7.x, 1.8 (latest) (Updated Version)
  • From: hlangos-bugtraq
• Re: SAP Security Contact
  • From: Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
• Jshop Server 1.3
  • From: irvian
• Xine-ui format string Vulnerabilties.
  • From: saik0pod
• WMF CreateBrushIndirect vulnerability (DoS)
  • From: Alexander Sotirov
• Computer Terrorism (UK) :: Incident Response Centre - Microsoft Outlook Vulnerability
  • From: advisories
• [ MDKSA-2007:008 ] - Updated kerberos packages fix vulnerability
  • From: security
• Re: Vendor guidelines regarding security contacts
  • From: Juha-Matti Laurio
• [ MDKSA-2007:009 ] - Updated kdenetwork packages fix ksirc vulnerability
  • From: security
• [ MDKSA-2007:007 ] - Updated nvidia driver packages fix vulnerability
  • From: security
• Re: A Major design Bug in Steganography 1.7.x, 1.8 (latest) (Updated Version)
  • From: Dave "No, not that one" Korn
• DMA[2007-0107a] OmniWeb Javascript Alert Format String Vulnerabiity and DMA[2007-0109a] Apple Finder Disk Image Volume Label Overflow / DoS
  • From: K F (lists)
• VMware ESX server security updates
  • From: VMware Security team
• Re: Vendor guidelines regarding security contacts
  • From: Chris Wysopal
• Re: Circumventing CSFR Form Token Defense
  • From: Peter Watkins
• Re: Circumventing CSFR Form Token Defense
  • From: bugtraq
• sazcart v1.5 (cart.php) Remote File include
  • From: emel_gw_ini
• A Major design Bug in Camouflage 1.2.1 (latest)
  • From: thesinoda
• Re: SAP Security Contact
  • From: Thor (Hammer of God)
• Re: SAP Security Contact
  • From: Nick Boyce
• Re: Circumventing CSFR Form Token Defense
  • From: Florian Weimer
• Re: a cheesy Apache / IIS DoS vuln (+a question)
  • From: bugtraq
• CS-Cart 1.3.3 (install.php) Remote File Include Vulnerability
  • From: ahmed_labib_hilmy
• Re: slocate leaks filenames of protected directories
  • From: Dennis Jackson
• [ GLSA 200701-04 ] SeaMonkey: Multiple vulnerabilities
  • From: Raphael Marichez
• VLC Format String Vulnerability also in XINE
  • From: Sven . Czaja
• Re: [Full-disclosure] 0trace - traceroute on established connections
  • From: Jon Oberheide
• Re: Re: Uber Uploader 4.2 Arbitrary File Upload Vulnerability
  • From: null_hack
• A Major design Bug in Steganography 1.7.x, 1.8 (latest) (Updated Version)
  • From: thesinoda
• [ MDKSA-2007:006 ] - Updated OpenOffice.org packages fix WMF vulnerability
  • From: security
• iDefense Q-1 2007 Challenge
  • From: contributor
• Cisco Security Advisory: DLSw Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Unified Contact Center and IP Contact Center JTapi Gateway Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Ralph Angenendt
• [OpenPKG-SA-2007.006] OpenPKG Security Advisory (kerberos)
  • From: OpenPKG GmbH
• Adobe Reader Remote Heap Memory Corruption - Subroutine Pointer Overwrite
  • From: Piotr Bania
• slocate leaks filenames of protected directories
  • From: steven
• iDefense Security Advisory 01.09.07: Adobe Macromedia ColdFusion Source Code Disclosure Vulnerability
  • From: iDefense Labs
• edit-x ecommerce (include_dir) Remote File include
  • From: emel_gw_ini
• iDefense Security Advisory 01.09.07: Multiple Vendor X Server DBE Extension ProcDbeSwapBuffers Memory Corruption Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 01.09.07: Multiple Vendor X Server DBE Extension ProcDbeGetVisualInfo Memory Corruption Vulnerability
  • From: iDefense Labs
• [ MDKSA-2007-005 ] - Updated xorg-x11/XFree86 packages fix integer overflow vulnerabilities
  • From: security
• rPSA-2007-0005-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs
  • From: rPath Update Announcements
• iDefense Security Advisory 01.09.07: Multiple Vendor X Server Render Extension ProcRenderAddGlyphs Memory Corruption Vulnerability
  • From: iDefense Labs
• rPSA-2007-0004-1 bzip2
  • From: rPath Update Announcements
• Circumventing CSFR Form Token Defense
  • From: Jim Manico
• CA BrightStor ARCserve Backup Tape Engine Exploit Security Notice
  • From: Williams, James K
• Easy Banner Pro Version 2.8 <= Remote File Inclusion
  • From: stormhacker
• RE: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Marvin Simkin
• RE: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Tom Spector
• Re: a cheesy Apache / IIS DoS vuln (+a question)
  • From: William A. Rowe, Jr.
• [USN-404-1] MadWifi vulnerability
  • From: Kees Cook
• iDefense Security Advisory 01.09.07: Microsoft Excel Invalid Column Heap Corruption Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 01.09.07: Multiple Microsoft Products VML 'recolorinfo' Element Integer Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 01.09.07: Microsoft Excel Long Palette Heap Overflow Vulnerability
  • From: iDefense Labs
• MITKRB5-SA-2006-003: kadmind (via GSS-API lib) frees uninitialized pointers
  • From: Tom Yu
• Re: Cracking Steganography Application in less than ONE minute
  • From: Michal Spadlinski
• MITKRB5-SA-2006-002: kadmind (via RPC lib) calls uninitialized function pointer
  • From: Tom Yu
• Re: [DCC SPAM] 0trace - traceroute on established connections
  • From: Lance James
• [USN-403-1] X.org vulnerabilities
  • From: Kees Cook
• Re: [Full-disclosure] [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Jim Manico
• rPSA-2007-0003-1 fetchmail
  • From: rPath Update Announcements
• Re: [Full-disclosure] 0trace - traceroute on established connections
  • From: Michal Zalewski
• Re: [Full-disclosure] 0trace - traceroute on established connections
  • From: Alessandro Dellavedova
• magic photo storage website Multiple Remote File Inclusion
  • From: emel_gw_ini
• Re: Universal XSS with PDF files: highly dangerous
  • From: The Anarcat
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Brian Eaton
• Re: SAP Security Contact
  • From: Stan Bubrouski
• Sina UC ActiveX Multiple Remote Stack Overflow
  • From: Sowhat
• ppc engine Multiple file inclusion
  • From: emel_gw_ini
• RE: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Tom Stripling
• Re: Uber Uploader 4.2 Arbitrary File Upload Vulnerability
  • From: recklessb
• Re: PHPKit 1.6.1 RC2 (faq/faq.php) Remote SQL Injection Exploit
  • From: yorn
• Re: OpenPinboard <= Remote File Include
  • From: Steven M. Christey
• [KDE Security Advisory] ksirc Denial of Service vulnerability
  • From: Dirk Mueller
• [ MDKSA-2007:004 ] - Updated geoip packages fix geoipupdate vulnerability
  • From: security
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Amit Klein
• RE: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Guy Podjarny
• Re: a cheesy Apache / IIS DoS vuln (+a question)
  • From: bugtraq
• Re: FON Router allows anonymous web access
  • From: Thierry Zoller
• Re: SAP Security Contact
  • From: Nicob
• Re: RE: [Full-disclosure] Concurrency strikes MSIE (potentially exploitablemsxml3 flaws)
  • From: socket69
• Re: a cheesy Apache / IIS DoS vuln (+a question)
  • From: Gadi Evron
• Cracking Steganography Application in less than ONE minute
  • From: thesinoda
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: RSnake
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Amit Klein
• RFID open source library - RFIDIOt code release - version 0.1k
  • From: Adam Laurie
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: RSnake
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Amit Klein
• [ MDKSA-2007:003 ] - Updated avahi packages fix DoS vulnerability
  • From: security
• Re: Vendor guidelines regarding security contacts
  • From: security curmudgeon
• Re: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Jim Manico
• Re: cisco nac bypass vulnerability - cisco trust agent
  • From: Stefano Zanero
• GForge Cross Site Scripting vulnerability
  • From: jose . palanco
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Amit Klein
• createauction (cats.asp) Remote SQL Injection Vulnerability
  • From: emel_gw_ini
• Vendor guidelines regarding security contacts
  • From: Steven M. Christey
• RE: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Martin O'Neal
• cisco nac bypass vulnerability - cisco trust agent
  • From: thorben schroeder
• Re: Sun java System Messenger Express XSS
  • From: b2wang
• [SECURITY] [DSA 1247-1] New libapache-mod-auth-kerb packages fix remote denial of service
  • From: Noah Meyerhans
• Re: Universal XSS with PDF files: highly dangerous
  • From: Jeff Williams
• rPSA-2007-0001-1 openoffice.org
  • From: rPath Update Announcements
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: pdp (architect)
• [SECURITY] [DSA 1246-1] New OpenOffice.org packages fix arbitrary code execution
  • From: Martin Schulze
• Re: [Full-disclosure] Universal XSS with PDF files: highly dangerous
  • From: pdp (architect)
• Packeteer PacketWise CLI overflow DoS
  • From: kian . mohageri
• magic photo storage website Remote File Inclusion
  • From: k1tk4t
• QASEC Announcement: Writing Software Security Test Cases
  • From: bugtraq
• Re: Re: Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: rudeyak
• HP Multiple Products PML Driver Local Privilege Escalation
  • From: Sowhat
• MKPortal Full Path Disclosure
  • From: info
• RE: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Martin O'Neal
• TK53 Advisory #1: CenterICQ remote DoS buffer overflow in LiveJournal handling
  • From: Lolek of TK53
• Re: SAP Security Contact
  • From: Ansgar -59cobalt- Wiechers
• GeoBB Georgian Bulletin Board Remote File Include Vuln.
  • From: ShaFuq31
• Re: Perforce client: security hole by design
  • From: The Fungi
• Dayfox Blog Remote File Include Vuln.
  • From: ShaFuq31
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Amit Klein
• [SECURITY] [DSA 1245-1] New proftpd packages fix denial of service
  • From: Moritz Muehlenhoff
• NUNE News Script (custom_admin_path) Remote File Include Vulnerablity
  • From: xorontr
• Uguestbook Remote Password Disclosure Vulnerability
  • From: beks
• Webulas Remote Password Disclosure Vulnerability
  • From: beks
• HarikaOnline v2.0 Remote Password Disclosure Vulnerability
  • From: beks
• M-Core Remote Password Disclosure Vulnerability
  • From: beks
• MitiSoft Remote Password Disclosure Vulnerability
  • From: beks
• EMembersPro 1.0 Remote Password Disclosure Vulnerability
  • From: beks
• AJLogin v3.5 Remote Password Disclosure Vulnerability
  • From: beks
• @lex Guestbook <= 4.0.2 Remote Command Execution Exploit
  • From: gmdarkfig
• Re: [Full-disclosure] 0trace - traceroute on established connections
  • From: Michal Zalewski
• 0trace - traceroute on established connections
  • From: Michal Zalewski
• Re: OpenPinboard <= Remote File Include
  • From: jgraef
• [OpenPKG-SA-2007.005] OpenPKG Security Advisory (wordpress)
  • From: OpenPKG GmbH
• FON Router allows anonymous web access
  • From: l . friedrichs
• shopstorenow (orange.asp) sql injection
  • From: emel_gw_ini
• Fix & Chips CMS v1.0
  • From: luny
• Fix & Chips CMS v1.0
  • From: luny
• [OpenPKG-SA-2007.004] OpenPKG Security Advisory (fetchmail)
  • From: OpenPKG GmbH
• [OpenPKG-SA-2007.004] OpenPKG Security Advisory (fetchmail)
  • From: OpenPKG GmbH
• [OpenPKG-SA-2007.003] OpenPKG Security Advisory (drupal)
  • From: OpenPKG GmbH
• Yet Another Link Directory v1.0
  • From: lunY
• ohhASP Remote Password Disclosure
  • From: Advisory
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Secure Access Control Server
  • From: Cisco Systems Product Security Incident Response Team
• fetchmail security announcement 2006-02 (CVE-2006-5867)
  • From: Matthias Andree
• fetchmail security announcement 2006-03 (CVE-2006-5974)
  • From: Matthias Andree
• Re: SAP Security Contact
  • From: Thor (Hammer of God)
• iDefense Security Advisory 01.05.07: Kaspersky Antivirus Scan Engine PE File Denial of Service Vulnerability
  • From: iDefense Labs
• ZDI-07-001: QUALCOMM Eudora WorldMail Remote Management Heap Overflow Vulnerability
  • From: zdi-disclosures
• [OpenPKG-SA-2007.002] OpenPKG Security Advisory (bzip2)
  • From: OpenPKG GmbH
• Kolayindir Download (Yenionline) (tr) SqL Injection Vuln.
  • From: ShaFuq31
• iDefense Security Advisory 01.05.07: Opera Software Opera Web Browser JPG Image DHT Marker Heap Corruption Vulnerability
  • From: iDefense Labs
• Flog 1.1.2 Remote Admin Password Disclosure
  • From: corrado . liotta
• [USN-402-1] Avahi vulnerability
  • From: Kees Cook
• Multiple bugs in EditTag
  • From: nj
• Advisory 01/2007: WordPress CSRF Protection XSS Vulnerability
  • From: Stefan Esser
• Re: SAP Security Contact
  • From: Fritz . Bauspiess
• [DRUPAL-SA-2007-002] Drupal 4.6.11 / 4.7.5 fixes DoS issue
  • From: Uwe Hermann
• RI Blog 1.3 XSS Vuln.
  • From: ShaFuq31
• RI Blog 1.3 XSS Vuln.
  • From: ShaFuq31
• [DRUPAL-SA-2007-001] Drupal 4.6.11 / 4.7.5 fixes XSS issue
  • From: Uwe Hermann
• [DRUPAL-SA-2007-001] Drupal 4.6.11 / 4.7.5 fixes XSS issue
  • From: Uwe Hermann
• iDefense Security Advisory 01.05.07: Opera Software Opera Web Browser createSVGTransformFromMatrix Object Typecasting Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 01.05.07: Opera Software Opera Web Browser createSVGTransformFromMatrix Object Typecasting Vulnerability
  • From: iDefense Labs
• Coppermine Photo Gallery <= 1.4.10 SQL Injection Exploit
  • From: gmdarkfig
• Coppermine Photo Gallery <= 1.4.10 SQL Injection Exploit
  • From: gmdarkfig
• Advisory 02/2007: WordPress Trackback Charset Decoding SQL Injection Vulnerability
  • From: Stefan Esser
• Advisory 02/2007: WordPress Trackback Charset Decoding SQL Injection Vulnerability
  • From: Stefan Esser
• Intranet Open Source Remote Password Disclosure "intranet.mdb"
  • From: Advisory
• Intranet Open Source Remote Password Disclosure "intranet.mdb"
  • From: Advisory
• Uber Uploader 4.2 Arbitrary File Upload Vulnerability
  • From: null_hack
• Uber Uploader 4.2 Arbitrary File Upload Vulnerability
  • From: null_hack
• IG Calendar SQL Injection
  • From: asdfj38
• IG Calendar SQL Injection
  • From: asdfj38
• IG Shop remote code execution
  • From: asdfj38
• IG Shop remote code execution
  • From: asdfj38
• MkPortal Admin XSS
  • From: info
• MkPortal Admin XSS
  • From: info
• [USN-400-1] Thunderbird vulnerabilities
  • From: Kees Cook
• [USN-400-1] Thunderbird vulnerabilities
  • From: Kees Cook
• [USN-401-1] D-Bus vulnerability
  • From: Kees Cook
• [USN-401-1] D-Bus vulnerability
  • From: Kees Cook
• Re: [VulnWatch] High Risk Vulnerability in the OpenOffice and StarOffice Suites
  • From: Pete Connolly
• RE: [Full-disclosure] Concurrency strikes MSIE (potentially exploitablemsxml3 flaws)
  • From: Michal Zalewski
• CMS Made Simple non-permanent XSS
  • From: nanoymaster
• Re: Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: rudeyak
• SAP Security
  • From: Mark Litchfield
• Perforce client: security hole by design
  • From: Ben Bucksch
• [USN-398-3] Firefox theme regression
  • From: Kees Cook
• RE: [Full-disclosure] Concurrency strikes MSIE (potentially exploitablemsxml3 flaws)
  • From: Larry Seltzer
• MkPortal "All Guests are Admin" Exploit
  • From: info
• RE: Universal PDF XSS After Party(posible solution)
  • From: Noe Espinoza M.
• Re: Universal XSS with PDF files: highly dangerous
  • From: Thierry Zoller
• Re: a cheesy Apache / IIS DoS vuln (+a question)
  • From: Michal Zalewski
• DMA[2007-0104a] - 'iLife iPhoto Photocasing Format String Vulnerability'
  • From: K F (lists)
• Concurrency strikes MSIE (potentially exploitable msxml3 flaws)
  • From: Michal Zalewski
• RE: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Martin O'Neal
• High Risk Vulnerability in the OpenOffice and StarOffice Suites
  • From: NGSSoftware Insight Security Research
• RE: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: RSnake
• Re: [VulnWatch] High Risk Vulnerability in the OpenOffice and StarOffice Suites
  • From: David Litchfield
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Rude Yak
• Re: [VulnWatch] High Risk Vulnerability in the OpenOffice and StarOffice Suites
  • From: Florian Weimer
• [ GLSA 200701-03 ] Mozilla Thunderbird: Multiple vulnerabilities
  • From: Raphael Marichez
• Correction (High Risk Vulnerability in the OpenOffice and StarOffice Suites)
  • From: NGSSoftware Insight Security Research
• [ GLSA 200701-02 ] Mozilla Firefox: Multiple vulnerabilities
  • From: Raphael Marichez
• Re: a cheesy Apache / IIS DoS vuln (+a question)
  • From: Rob Sherwood
• Re: [WEB SECURITY] RE: [Full-disclosure] Universal XSS with PDF files: highly dangerous
  • From: RSnake
• Wordpress <= 2.x dictionnary & Bruteforce attack
  • From: kadaj-diabolik
• Re: [WEB SECURITY] RE: Universal PDF XSS After Party(posible solution)
  • From: RSnake
• [ GLSA 200701-01 ] DenyHosts: Denial of Service
  • From: Raphael Marichez
• Re: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Ronald Chmara
• SAP Security Contact
  • From: Mark Litchfield
• Re: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Bill Nash
• Re: [Full-disclosure] Universal PDF XSS After Party(posible solution)
  • From: Darren Bounds
• RE: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Jim Harrison
• Re: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Lawrence Paul MacIntyre
• Re: RE: [Full-disclosure] Universal XSS with PDF files: highly dangerous
  • From: Juha-Matti Laurio
• RE: [Full-disclosure] Universal XSS with PDF files: highly dangerous
  • From: Larry Seltzer
• Universal PDF XSS After Party
  • From: pdp (architect)
• Re: a cheesy Apache / IIS DoS vuln (+a question)
  • From: Pieter de Boer
• Re: a cheesy Apache / IIS DoS vuln (+a question)
  • From: Siim Põder
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: HASEGAWA Yosuke
• [vuln.sg] PowerArchiver PAISO.DLL Buffer Overflow Vulnerability
  • From: vulnpost-remove
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: pdp (architect)
• LS-20061102 - Business Objects Crystal Reports XI Professional Stack Overflow Vulnerability
  • From: advisories
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: RSnake
• 23C3 - Bluetooth hacking revisted [Summary and Code]
  • From: Thierry Zoller
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Jim Manico
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: bugtraq
• Re: SMS handling OpenSER remote code executing
  • From: bogdan
• Re: OpenSER OSP Module remote code execution
  • From: bogdan
• Re: a cheesy Apache / IIS DoS vuln (+a question)
  • From: Michal Zalewski
• Re: a cheesy Apache / IIS DoS vuln (+a question)
  • From: William A. Rowe, Jr.
• CFP for RAID 2007
  • From: Jeffrey Horton
• Re: [Full-disclosure] Universal XSS with PDF files: highly dangerous
  • From: Juha-Matti Laurio
• Re: a cheesy Apache / IIS DoS vuln (+a question)
  • From: Michal Zalewski
• Re: a cheesy Apache / IIS DoS vuln (+a question)
  • From: William A. Rowe, Jr.
• RE: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Larry Seltzer
• a cheesy Apache / IIS DoS vuln (+a question)
  • From: Michal Zalewski
• jgbbs
  • From: dr . t3rr0r1st
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Jean-Jacques Halans
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: pdp (architect)
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Amit Klein
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: pdp (architect)
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Dave Ferguson
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: RSnake
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: pdp (architect)
• Re: OpenPinboard <= Remote File Include
  • From: Stefano Zanero
• [USN-398-2] Firefox vulnerabilities
  • From: Kees Cook
• Simple Web Content Management System SQL Injection Exploit
  • From: gmdarkfig
• Re: Windows NT Message Compiler 1.00.5239 arbitrary code execution
  • From: chinese soup
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Amit Klein
• Re: FreeRadius 1.1.3 SMB_Handle_Type SMB_Connect_Server arbitrary code execution
  • From: 3APA3A
• [USN-398-1] Firefox vulnerabilities
  • From: Kees Cook
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Clean Access
  • From: Cisco Systems Product Security Incident Response Team
• WineGlass "data.mdb" Remote Password Disclosure
  • From: Advisory
• Black Hat New Years Updates (Free Stuff, too!)
  • From: Jeff Moss
• OpenPinboard <= Remote File Include
  • From: zooz_998
• WineGlass "data.mdb" Remote Password Disclosure
  • From: Advisory
• Re: Universal XSS with PDF files: highly dangerous
  • From: ascii
• Hacking AJAX DWR Applications
  • From: shulman
• Adobe Acrobat Reader Plugin - Multiple Vulnerabilities
  • From: Stefano Di Paola
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: pdp (architect)
• [USN-399-1] w3m vulnerabilities
  • From: Kees Cook
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: sven . vetsch
• openmedia local read file
  • From: exe_crack
• Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
  • From: Amit Klein
• Universal XSS with PDF files: highly dangerous
  • From: pdp (architect)
• Re: Windows NT Message Compiler 1.00.5239 arbitrary code execution
  • From: 3APA3A
• GuestBook v0.3a Remote Password Disclosure
  • From: Advisory
• Re: Windows Vista 64bits and unexported kernel symbols
  • From: Rik van Riel
• Re: [USN-398-1] Firefox vulnerabilities
  • From: Scott
• Whos Johny Pwnerseed?
  • From: K F
• Re: SoftArtisans FileUp(TM) viewsrc.asp remote script source disclosure exploit
  • From: wihl
• [ MDKSA-2007:002 ] - Updated kernel packages fix multiple vulnerabilities and bugs
  • From: security
• Re: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Darren Reed
• Windows NT Message Compiler 1.00.5239 arbitrary code execution
  • From: sapheal
• rPSA-2006-0234-2 firefox thunderbird
  • From: rPath Update Announcements
• Nuked Klan <= 1.7 Remote Cookie Disclosure Exploit
  • From: kadaj-diabolik
• [ MDKSA-2007:001 ] - Update libmodplug packages fix buffer overflow vulnerabilities
  • From: security
• Windows Vista 64bits and unexported kernel symbols
  • From: Matthieu Suiche
• Re: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Dana Hudes
• RE: PHP as a secure language? PHP worms?
  • From: Jim Harrison
• RE: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Jim Harrison
• AspBB Remote Password Disclosure
  • From: Advisory
• Re: PHP as a secure language? PHP worms?
  • From: Duncan Simpson
• Re: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Darren Reed
• Openforum Remote password Disclosure
  • From: Advisory
• Re: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Kevin Waterson
• lblog Remote Password Disclosure
  • From: Advisory
• FreeRadius 1.1.3 SMB_Handle_Type SMB_Connect_Server arbitrary code execution
  • From: sapheal
• Re: [Full-disclosure] simplog 0.9.3.2 SQL injection
  • From: Javor Ninov
• Re: [Full-disclosure] simplog 0.9.3.2 SQL injection
  • From: str0ke
• Welcome to Pwndertino...
  • From: K F (lists)
• Dailymotion password reset vulnerability
  • From: daftrix
• RE: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Jim Harrison
• Re: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Chad Maron
• Re: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Dana Hudes
• RE: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Jim Harrison
• Re: XSS with Vbulletin (new idea !)
  • From: marco . van . herwaarden
• Re: Re: Mozilla Firefox 2.0 denial of service vulnerability
  • From: sapheal
• Re: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Tino Wildenhain
• Re: Mozilla Firefox 2.0 denial of service vulnerability
  • From: Jeroen Massar
• Mozilla Firefox 2.0 denial of service vulnerability
  • From: sapheal
• AShop Shopping Cart Multiple XSS Vulnerabilities
  • From: DoZ
• [OpenPKG-SA-2007.001] OpenPKG Security Advisory (cacti)
  • From: OpenPKG GmbH
• Re: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Kevin Waterson
• ATMEL Linux PCI PCMCIA USB Drivers arbitrary code execution
  • From: sapheal
• rblog Database Download Vulnerability
  • From: Advisory
• golden book XSS
  • From: sn0oPy . team
• Re: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Bill Nash
• Kerio Fake 'iphlpapi' DLL injection Vulnerability
  • From: Matousec - Transparent security Research
• BattleBlog Database Download Vulnerability
  • From: Advisory
• [NGSEC] ngGame #3 - BrainStorming
  • From: labs@NGSEC
• Re: PlatinumFTP 1.0.18 remote DoS
  • From: info
• vBulletin vCard PRO XSS
  • From: exexp
• PHPIrc_bot <= Remote File Include
  • From: zooz_998
• WinZip FileView ActiveX controls CreateNewFolderFromName Method Buffer Overflow Vulnerability
  • From: 76693223
• Rediff Bol Downloader Allows Downloading and Spawning Arbitary Files
  • From: gregory_panakkal
• Re: PocketPC MMS - Remote Code Injection/Execution Vulnerability and Denial-of-Service
  • From: Collin R. Mulliner
• WinZip10.0 FileView ActiveX Controls CreateNewFolderFromName Method Buffer overflow
  • From: 76693223
• Spooky Login Multiple HTML Injection Vulnerability
  • From: DoZ
• Enigma WordPress Bridge (boarddir) Remote File Include
  • From: xorontr
• Enigma Coppermine Bridge (boarddir) Remote File Include
  • From: xorontr
• [vuln.sg] iso_wincmd Plugin for Total Commander Buffer Overflow Vulnerability
  • From: vulnpost-remove
• SoftArtisans FileUp(TM) viewsrc.asp remote script source disclosure exploit
  • From: inge_eivind . henriksen
• MythControl (MythTV remote control) arbitrary code execution
  • From: sapheal
• csrss.exe double-free vulnerability - arbitrary DWORD overwrite exploit
  • From: Reversemode
• Re: XSS in script Mobilelib GOLD v2
  • From: gamr-14
• DoceboLMS Xss Vuln.
  • From: starext
• LDU <= 8.x (journal.php) SQL Injection Vulnerability
  • From: starext
• QuickCam linux device driver allows arbitrary code execution
  • From: sapheal
• XSS with default page parameter in Oracle Portal 10g
  • From: duchaikhtn
• XSS in script Mobilelib GOLD v2
  • From: gamr-14
• [SECURITY] [DSA 1244-1] New xine-lib packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1214-2] Updated gv packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• Re: XSS with Vbulletin (new idea !)
  • From: micmast
• [OpenPKG-SA-2006.044] OpenPKG Security Advisory (w3m)
  • From: OpenPKG GmbH
• Re: XSS - CMS Made Simple v1.0.2
  • From: nanoymaster
• SMS handling OpenSER remote code executing
  • From: sapheal
• Re: XSS with Vbulletin (new idea !)
  • From: l . d . 0
• OpenSER OSP Module remote code execution
  • From: sapheal
• [SECURITY] [DSA 1243-1] New evince packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• Limbo CMS event module (lm_absolute_path) Remote File Include Vulnerabilities
  • From: xorontr
• [SECURITY] [DSA 1242-1] New elog packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• ShmooCon Announcement
  • From: B Potter
• NtRaiseHardError Csrss.exe memory Disclosure exploit
  • From: Reversemode
• Re: Cross site scripting & fullpath disclosure
  • From: james . brown
• Secure Login Manager Multiple Input Validation Vulnerabilities
  • From: DoZ
• Host directory full disclosure and input error
  • From: hack2prison
• Re: XSS with Vbulletin (new idea !)
  • From: bas
• Re: The (in)security of Xorg and DRI
  • From: Pavel Kankovsky
• Re: LuckyBot v3 Remote File Include
  • From: Stuart Moore
• Re: phpcms <=- 1.1.7 Remote File Inclusion
  • From: Hugo van der Kooij
• Re: phpcms <=- 1.1.7 Remote File Inclusion
  • From: Stuart Moore
• Re: ERRATA (Re: "Host header cannot be trusted as an anti anti DNS-pinning measure")
  • From: Martin Johns
• [OpenPKG-SA-2006.043] OpenPKG Security Advisory (links)
  • From: OpenPKG GmbH
• [OpenPKG-SA-2006.042] OpenPKG Security Advisory (openser)
  • From: OpenPKG GmbH
• LuckyBot v3 Remote File Include
  • From: i-k-t
• logahead UNU edition 1.0 Remote File Upload & code execution
  • From: corrado . liotta
• XSS - CMS Made Simple v1.0.2
  • From: Curtis Zimmerman
• HLStats Remote SQL Injection Exploit
  • From: nospam
• PhpbbXtra v2.0 (phpbb_root_path) Remote File Include Vulnerability
  • From: xorontr
• phpcms <=- 1.1.7 Remote File Inclusion
  • From: Zarloule04
• Cahier de texte V2.2 Bypass general access protection exploit
  • From: gmdarkfig
• PHP Live! 3.2.2 Multiple Cross-Site Scripting Vulnerabilities
  • From: DoZ
• [SECURITY] [DSA 1241-1] New squirrelmail packages fix cross-site scripting
  • From: Moritz Muehlenhoff
• XSS with Vbulletin (new idea !)
  • From: ashraf1984
• ERRATA (Re: "Host header cannot be trusted as an anti anti DNS-pinning measure")
  • From: Amit Klein
• Forum AnyBoard - Sql Inyection By Firewall
  • From: Firewall1954
• TimberWolf 1.2.2 vulnerable to XSS
  • From: corrado . liotta
• Fishyshoop Security Vulnerability
  • From: James Gray
• Chatwm V1.0 SqL Injection Vuln.
  • From: ShaFuq31
• Okul Merkezi Portal v1.0 Remote File IncLude Vuln.
  • From: ShaFuq31
• iDefense Security Advisory 12.23.06: Novell Netmail IMAP append Denial of Service Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 12.23.06: Novell NetMail IMAPD subscribe Buffer Overflow Vulnerability
  • From: iDefense Labs
• Multiple Bugs in Future Internet ( XSS & SQL Injection )
  • From: xx_hack_xx_2004
• Efkan Forum v1.0 SqL Inj. Vuln.
  • From: ShaFuq31
• ZDI-06-054: Novell NetMail IMAP APPEND Buffer Overflow Vulnerability
  • From: zdi-disclosures
• ZDI-06-053: Novell NetMail IMAP Verb Literal Heap Overflow Vulnerability
  • From: zdi-disclosures
• ZDI-06-052: Novell NetMail NMAP STOR Buffer Overflow Vulnerability
  • From: zdi-disclosures
• Re: Multiple Remote Vulnerabilities in KISGB
  • From: str0ke
• Re: Multiple Remote Vulnerabilities in KISGB
  • From: 3APA3A
• SQID v0.2 - SQL Injection Digger.
  • From: contact
• Re: Re: [Full-disclosure] Microsoft Windows XP/2003/Vista memory corruption 0day
  • From: Mike
• Re: [Full-disclosure] Oracle Portal 10g HTTP Response Splitting
  • From: putosoft softputo
• TSLSA-2006-0074 - multi
  • From: Trustix Security Advisor
• Re[2]: critical Flaw in Firefox 2.0.0.1 allows to steal the user passwords with a videoclip
  • From: Thierry Zoller
• Oracle Applications/Portal 9i/10g Cross Site Scripting
  • From: putosoft softputo
• rPSA-2006-0234-1 firefox
  • From: rPath Update Announcements
• Xt-News 0.1 : SQL Injection Vulnerability & XSS
  • From: mr_kaliman
• RE: [Full-disclosure] Microsoft Windows XP/2003/Vista memory corruption 0day
  • From: Michele Cicciotti
• Re: critical Flaw in Firefox 2.0.0.1 allows to steal the user passwords with a videoclip
  • From: Juha-Matti Laurio
• RE: Enforcing Java Security Manager in Restricted Windows Environments?
  • From: Jan P. Monsch
• Re: Oracle Portal 10g HTTP Response Splitting
  • From: majororacle
• Re: [Full-disclosure] Microsoft Windows XP/2003/Vista memory corruption 0day
  • From: Pukhraj Singh
• PWDumpX updated (includes CacheDump functionality)
  • From: Reed Arvin
• OpenSER 1.1.0 parse_config buffer overflow vulnerability
  • From: sapheal
• [OpenPKG-SA-2006.040] OpenPKG Security Advisory (ruby)
  • From: OpenPKG GmbH
• Re: MkPortal Urlobox Cross Site Request Forgery
  • From: securityfocus
• Re: MkPortal Urlobox Cross Site Request Forgery
  • From: securityfocus
• Re: Trend Micro's Vista "0day exploit auction" claim
  • From: Simple Nomad
• Re: RE: Trend Micro's Vista "0day exploit auction" claim
  • From: agoodhez1
• Re: [Full-disclosure] Fun with event logs (semi-offtopic)
  • From: endrazine
• [TOOL] untidy - XML Fuzzer
  • From: Andres Riancho
• Re: Vulnerability in MG2 php based Image Gallery - bypass security, view password protected images
  • From: matthieu . paineauSTOPSPAM
• SQID v0.1 - SQL Inhection Digger.
  • From: contact
• Re: critical Flaw in Firefox 2.0.0.1 allows to steal the user passwords with a videoclip
  • From: 3APA3A
• Re: [Full-disclosure] Microsoft Windows XP/2003/Vista memory corruption 0day
  • From: Alexander Sotirov
• RE: Re[2]: [Full-disclosure] Fun with event logs (semi-offtopic)
  • From: Michele Cicciotti
• Ixprim CMS 1.2 Remote Blind SQL Injection Exploit
  • From: gmdarkfig
• Re: Enforcing Java Security Manager in Restricted Windows Environments?
  • From: jim
• RE: [Full-disclosure] Fun with event logs (semi-offtopic)
  • From: Michele Cicciotti
• [ MDKSA-2006:234 ] - Updated mono packages fix vulnerability
  • From: security
• Re: [Full-disclosure] Microsoft Windows XP/2003/Vista memory corruption 0day
  • From: 3APA3A
• [SECURITY] [DSA-1240-1] New links2 packages fix arbitrary shell command execution
  • From: Steve Kemp
• Re[2]: [Full-disclosure] Fun with event logs (semi-offtopic)
  • From: 3APA3A
• Microsoft Windows XP/2003/Vista memory corruption 0day
  • From: 3APA3A
• Fun with event logs (semi-offtopic)
  • From: 3APA3A
• Re: Oracle <= 9i / 10g File System Access via utl_file Exploit
  • From: Marco Ivaldi
• NOD32 Antivirus CAB parsing Arbitrary Code Execution Advisory
  • From: security
• [OpenPKG-SA-2006.041] OpenPKG Security Advisory (dbus)
  • From: OpenPKG GmbH
• [CAID 34876]: CA CleverPath Portal Session Inheritance Vulnerability
  • From: Williams, James K
• [USN-397-1] mono vulnerability
  • From: Kees Cook
• RE: Trend Micro's Vista "0day exploit auction" claim
  • From: Simple Nomad
• critical Flaw in Firefox 2.0.0.1 allows to steal the user passwords with a videoclip
  • From: quincy
• RE: Trend Micro's Vista "0day exploit auction" claim
  • From: Roger A. Grimes
• [ GLSA 200612-21 ] Ruby: Denial of Service vulnerability
  • From: Raphael Marichez
• [ GLSA 200612-20 ] imlib2: Multiple vulnerabilities
  • From: Raphael Marichez
• [ GLSA 200612-19 ] pam_ldap: Authentication bypass vulnerability
  • From: Raphael Marichez
• [security bulletin] HPSBST02180 SSRT061288 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS06-072 Through MS06-078
  • From: security-alert
• [security bulletin] HPSBUX02174 SSRT061239 rev.2 HP-UX Running OpenSSL Denial of Service (DoS), Increase Privilege
  • From: security-alert
• Re: [Full-disclosure] Oracle Portal 10g HTTP Response Splitting
  • From: Brian Eaton
• Re: Oracle <= 9i / 10g File System Access via utl_file Exploit
  • From: sumit kumar soni
• Mono XSP ASP.NET Server sourcecode disclosure vulnerability
  • From: jose . palanco
• NOD32 Antivirus DOC parsing Arbitrary Code Execution Advisory
  • From: security
• Oracle Portal 10g HTTP Response Splitting
  • From: putosoft softputo
• SEC Consult SA-20061220-0 :: Typo3 Command Execution Vulnerability
  • From: SEC Consult Research
• ZDI-06-051: Mozilla Firefox SVG Processing Remote Code Execution Vulnerability
  • From: zdi-disclosures
• RE: Cisco not honoring update promises?
  • From: Michael Scheidell
• MkPortal Urlobox Cross Site Request Forgery
  • From: info
• Multiple Bugs in MINI WEB SHOP
  • From: xx_hack_xx_2004
• Oracle <= 9i / 10g File System Access via utl_file Exploit
  • From: none
• Oracle <= 9i / 10g (extproc) Local/Remote Command Execution Exploit
  • From: none
• Burak Yilmaz Download Portal Sql Injection Vuln.
  • From: ShaFuq31
• xss in Support Cards v1 ( oSTicket )
  • From: l . d . 0
• Trend Micro's Vista "0day exploit auction" claim
  • From: Ryan Meyer
• RE: [BULK] - New Skype Worm
  • From: Hubbard, Dan
• HP Printers FTP Server Denial Of Service
  • From: Joxean Koret
• New Skype Worm
  • From: Christopher Mosby
• Multiple XSS vulnerabiliteies in Inetmedia's information service - cityinfo.
  • From: filip . palian
• WebCalendar >=1.0 Cross-Site Scripting Vulnerabilities
  • From: 7all7
• HITBSecConf2007 - Dubai - Call for Papers now open!
  • From: Praburaajan
• [ MDKSA-2006:233 ] - Updated dbus packages fix vulnerability
  • From: security
• [ MDKSA-2006:232 ] - Updated proftpd packages fix mod_ctrls vulnerability
  • From: security
• [security bulletin] HPSBUX02178 SSRT061267 rev.2 - HP-UX Secure Shell Remote Unauthorized Denial of Service (DoS)
  • From: security-alert
• Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!
  • From: Marcus Meissner
• Re: Checkpoint NG3 ICMP Flood
  • From: Hugo van der Kooij
• Re: Cisco not honoring update promises?
  • From: rsmoak
• Re: Checkpoint NG3 ICMP Flood
  • From: Michael Schwartzkopff
• [ GLSA 200612-18 ] ClamAV: Denial of Service
  • From: Sune Kloppenborg Jeppesen
• Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!
  • From: Kamchybek Jusupov
• Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!
  • From: p . kerr
• Checkpoint NG3 ICMP Flood
  • From: bdmoraes
• Secunia Research: MailEnable POP Service "PASS" Command Buffer Overflow
  • From: Secunia Research
• SYMSA-2006-013: Multiple Vulnerabilities in Mandiant First Response
  • From: research
• RateMe <= all versions => ( main.inc.php ) Remote File Include Vulnerability
  • From: saudi
• Re: The (in)security of Xorg and DRI
  • From: Darren Reed
• HyperVM Cross-Site Scripting
  • From: Advisory
• Cisco not honoring update promises?
  • From: Michael Scheidell
• Re: The (in)security of Xorg and DRI
  • From: Darren Reed
• [SECURITY] [DSA 1239-1] New sql-ledger packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1238-1] New clamav packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1237-1] New Linux 2.4.27 packages fix several vulnerabilities
  • From: Dann Frazier
• Allied Telesis AT-9000/24 Ethernet switch management can be accessed from all VLANs.
  • From: Pasi Sjoholm
• Re: Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!
  • From: Hunger
• [HSC Security Group] SiteCatalyst Web Login Cross Site Vulrnabilities
  • From: DoZ
• Contra Haber Sistemi v1.0 SqL Injection Vuln.
  • From: ShaFuq31
• Re: Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!
  • From: willysr
• Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!
  • From: George Yobst
• Re: Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!
  • From: ox90x86
• Re: Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!
  • From: bastyaelvtars
• Re: Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!
  • From: gplit
• Odysseus 2.0 / Telemachus 1.0 (Beta)
  • From: Dave
• Do&#287;antepe Ziyareti Defteri (tr) Sql Injection Vuln.
  • From: ShaFuq31
• XSS in gmial google
  • From: gamr-14
• Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!
  • From: Dragos Ruiu
• RE: Windows Explorer WMV File Denial Of Service Vulnerability
  • From: Ulises Cuñé
• Drone Armies C&C Report - 15 Dec 2006
  • From: c2report
• [OpenPKG-SA-2006.039] OpenPKG Security Advisory (proftpd)
  • From: OpenPKG GmbH
• Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!
  • From: Josh Bressers
• [ MDKSA-2006:206 ] - Updated Thunderbird packages fix multiple vulnerabilities
  • From: security
• Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!
  • From: Bruno Lustosa
• Bypassing process identification of several personal firewalls and HIPS
  • From: Matousec - Transparent security Research
• Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!
  • From: gplit
• Re: The (in)security of Xorg and DRI
  • From: Nicolas RUFF
• Project Server 2003 - Credential Disclosure
  • From: Brett Moore
• [security bulletin] HPSBMA02173 SSRT061230 rev. 1 - HP Integrated Lights Out (iLO & iLO 2) Running SSH Key Based Authentication Remote Unauthorized Access
  • From: security-alert
• Windows Media MID File Denial Of Service Vulnerability
  • From: sehato
• [USN-396-1] gdm vulnerability
  • From: Kees Cook
• Windows Explorer WMV File Denial Of Service Vulnerability
  • From: sehato
• TSLSA-2006-0072 - clamav
  • From: Trustix Security Advisor
• BitDefender AV Packed PE File Parsing Engine Heap Overflow
  • From: security
• [ MDKSA-2006:231 ] - Updated gdm packages fix string vulnerability
  • From: security
• Top 10 Real Computer Crimes for 2007
  • From: Pete Herzog
• [ GLSA 200612-15 ] McAfee VirusScan: Insecure DT_RPATH
  • From: Sune Kloppenborg Jeppesen
• CanSecWest 2007 (April 18-20) Call For Papers (Deadline January 7th)
  • From: Dragos Ruiu
• Kerio MailServer < 6.3.1 remote Denial of Service
  • From: research
• Re: [fuzzing] NOT a 0day! Re: [Full-disclosure] OWASP Fuzzing page
  • From: Gadi Evron
• [ GLSA 200612-17 ] GNU Radius: Format string vulnerability
  • From: Raphael Marichez
• Re: [fuzzing] NOT a 0day! Re: [Full-disclosure] OWASP Fuzzing page
  • From: Juha-Matti Laurio
• Re: Re: Microsoft 0-day word vulnerability - Secunia - Extremely critical
  • From: schafer_jeffrey
• Re: iDefense Security Advisory 12.14.06: GNOME Foundation Display Manager gdmchooser Format String Vulnerability
  • From: iDefense Labs
• Re: The newest Word flaw is due to malformed data structure handling
  • From: Juha-Matti Laurio
• iDefense Security Advisory 12.14.06: GNOME Foundation Display Manager gdmchooser Format String Vulnerability
  • From: iDefense Labs
• NOT a 0day! Re: [fuzzing] [Full-disclosure] OWASP Fuzzing page
  • From: Gadi Evron
• [ MDKSA-2006:164-2 ] - Updated xorg-x11/XFree86 packages fix integer overflow vulnerabilities
  • From: security
• [CAID 34870]: CA Anti-Virus vetfddnt.sys, vetmonnt.sys Local Denial of Service Vulnerabilities
  • From: Williams, James K
• [ MDKSA-2006:230 ] - Updated clamav packages fix vulnerability
  • From: security
• [ MDKSA-2006:229 ] - Updated evince packages fix buffer overflow vulnerability
  • From: security
• Re: Microsoft 0-day word vulnerability - Secunia - Extremely critical
  • From: schafer_jeffrey
• rPSA-2006-0232-1 libgsf
  • From: rPath Update Announcements
• [USN-380-2] avahi regression
  • From: Martin Pitt
• [ GLSA 200612-16 ] Links: Arbitrary Samba command execution
  • From: Raphael Marichez
• Re: [fuzzing] NOT a 0day! Re: [Full-disclosure] OWASP Fuzzing page
  • From: Jerome Athias
• HyperAccess - Multiple Vulnerabilities
  • From: Brett Moore
• GenesisTrader v1.0 - Multiple Vulnerabilities
  • From: mr_kaliman
• The (in)security of Xorg and DRI
  • From: Darren Reed
• Call for papers and presenters - Dec. 15th deadline
  • From: Mike Allgeier
• Re: The newest Word flaw is due to malformed data structure handling
  • From: Steven M. Christey
• CORE-2006-1127: ProFTPD Controls Buffer Overflow
  • From: CORE Security Technologies Advisories
• ZDI-06-049: Symantec Veritas NetBackup Long Request Buffer Overflow Vulnerability
  • From: zdi-disclosures
• ZDI-06-050: Symantec Veritas NetBackup CONNECT_OPTIONS Buffer Overflow Vulnerability
  • From: zdi-disclosures
• IBM DB2 Remote DoS during CONNECT processing
  • From: Team SHATTER
• ASP Cmd Shell On IIS 5.1
  • From: Brett Moore
• [SECURITY] [DSA-1236-1] New enemies-of-carlotta package fix missing sanity checks
  • From: Steve Kemp
• [SECURITY] [DSA-1235-1] New ruby1.8 package fix denial of service
  • From: Steve Kemp
• [SECURITY] [DSA-1234-1] New ruby1.6 package fix denial of service
  • From: Steve Kemp
• Re: worksystem => Remote File Include Vulnerability Exploit
  • From: Laurent . van_den_reysen
• iDefense Security Advisory 12.12.06: Sun Microsystems Solaris ld.so Directory Traversal Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 12.12.06: Sun Microsystems Solaris ld.so 'doprf()' Buffer Overflow Vulnerability
  • From: iDefense Labs
• Re: Re: The newest Word flaw is due to malformed data structure handling
  • From: test
• ZDI-06-046: Sophos Anti-Virus SIT Archive Parsing Buffer Overflow Vulnerability
  • From: zdi-disclosures
• Re: shopsite advisory
  • From: bugtraq
• [ GLSA 200612-14 ] Trac: Cross-site request forgery
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200612-13 ] libgsf: Buffer overflow
  • From: Sune Kloppenborg Jeppesen
• ZDI-06-048: Microsoft Internet Explorer normalize() Function Memory Corruption Vulnerability
  • From: zdi-disclosures
• [ GLSA 200612-12 ] F-PROT Antivirus: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• Secunia Research: Internet Explorer Script Error Handling Memory Corruption
  • From: Secunia Research
• ZDI-06-047: Microsoft Visual Studio WmiScriptUtils.dll Cross-Zone Scripting Vulnerability
  • From: zdi-disclosures
• Re: The newest Word flaw is due to malformed data structure handling
  • From: Dave "No, not that one" Korn
• Re: Internet Explorer 6 CSS "expression" Denial of Service Exploit (P.o.C.)
  • From: chinese soup
• Re: [fuzzing] OWASP Fuzzing page
  • From: Joxean Koret
• ZDI-06-045: Sophos Anti-Virus CPIO Archive Parsing Buffer Overflow Vulnerability
  • From: zdi-disclosures
• BLOG:CMS Remote file include Vulnerability
  • From: security
• Re: PHP 5.2.0 session.save_path safe_mode and open_basedir bypass
  • From: Ismail Donmez
• rPSA-2006-0231-1 squirrelmail
  • From: rPath Update Announcements
• rPSA-2006-0230-1 evince
  • From: rPath Update Announcements
• Web Apps- Rad Upload Version 3.02 Remote File Include Vulnerability
  • From: rko . thelegendkiller
• [SBDA] SiteKiosk - FileSystem Access
  • From: Brett Moore
• OpenLDAP kbind authentication buffer overflow
  • From: Solar Eclipse
• [ MDKSA-2006:228 ] - Updated gnupg packages fix vulnerability
  • From: security
• Re: The newest Word flaw is due to malformed data structure handling
  • From: Alexander Sotirov
• [ GLSA 200612-09 ] MadWifi: Kernel driver buffer overflow
  • From: Raphael Marichez
• [ MDKSA-2006:227 ] - Updated kdegraphics packages fix EXIF vulnerability
  • From: security
• [ GLSA 200612-05 ] KOffice shared libraries: Heap corruption
  • From: Sune Kloppenborg Jeppesen
• Secunia Research: AOL CDDBControl ActiveX Control "SetClientInfo()" Buffer Overflow
  • From: Secunia Research
• [ GLSA 200612-07 ] Mozilla Firefox: Multiple vulnerabilities
  • From: Raphael Marichez
• RFID access control tokens widely open to cloning
  • From: Adam Laurie
• [ GLSA 200612-03 ] GnuPG: Multiple vulnerabilities
  • From: Raphael Marichez
• [ GLSA 200612-04 ] ModPlug: Multiple buffer overflows
  • From: Raphael Marichez
• Re: LS-20060908 - Computer Associates BrightStor ARCserve Backup
  • From: Williams, James K
• The newest Word flaw is due to malformed data structure handling
  • From: Juha-Matti Laurio
• [ GLSA 200612-10 ] Tar: Directory traversal vulnerability
  • From: Matthias Geerdsen
• Re: LS-20061001 - Computer Associates BrightStor ARCserve Backup
  • From: Williams, James K
• [ GLSA 200612-06 ] Mozilla Thunderbird: Multiple vulnerabilities
  • From: Raphael Marichez
• Re: Another, different MS Word 0-day vulnerability reported
  • From: Juha-Matti Laurio
• Secunia Research: MailEnable IMAP Service Buffer Overflow Vulnerability
  • From: Secunia Research
• shopsite advisory
  • From: DoZ
• looking for security community input
  • From: Gadi Evron
• Another, different MS Word 0-day vulnerability reported
  • From: Juha-Matti Laurio
• Several updates in Microsoft Word 0-day (CVE-2006-5994) FAQ document
  • From: Juha-Matti Laurio
• [ GLSA 200612-08 ] SeaMonkey: Multiple vulnerabilities
  • From: Raphael Marichez
• Multiple vulnerabilities in Winamp Web Interface 7.5.13
  • From: Luigi Auriemma
• ERRATA: [ GLSA 200612-03 ] GnuPG: Multiple vulnerabilities
  • From: Raphael Marichez
• Firefox 2.0 security bug: Extensions can hide themself
  • From: azurIt