Bugtraq

• Thread Index

• RFIDIOt release - version 0.1i
  • From: Adam Laurie
• [ MDKSA-2006:226 ] - Updated squirrelmail packages fix vulnerabilities
  • From: security
• D-LINK DWL-2000AP+ remote DoS
  • From: poplix
• Unauthenticated access to IBM Host On-Demand administration pages
  • From: Ferguson, David (Kansas City)
• [SBDA] - ColdFusion MX7 - Multiple Vulnerabilities
  • From: Brett Moore
• [ GLSA 200612-09 ] MadWifi: Kernel driver buffer overflow
  • From: Raphael Marichez
• WASC-Announcement: MX Injection - Capturing and Exploiting Hidden Mail Servers By Vicente Aguilera Diaz
  • From: robert
• [SECURITY] [DSA 1233-1] New Linux 2.6.8 packages fix several vulnerabilities
  • From: Dann Frazier
• [SECURITY] [DSA 1232-1] New clamav packages fix denial of service
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1231-1] New gnupg packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• AnnonceScriptHP V2.0 Multiple Vulnerabilities
  • From: mr_kaliman
• Messageriescripthp V2.0 XSS & SQL Injection
  • From: mr_kaliman
• ProNews V1.5 XSS & SQL Injection
  • From: mr_kaliman
• KDPics Multiple Vulnerabities
  • From: mr_kaliman
• [ GLSA 200612-02 ] xine-lib: Buffer overflow
  • From: Sune Kloppenborg Jeppesen
• Call For Papers: SecurityOPUS 2007
  • From: Sharkey
• Re: XSS in JAB Guest Book
  • From: Barnz
• iDefense Security Advisory 12.08.06: Sophos Antivirus CHM File Heap Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 12.08.06: Sophos Antivirus CHM Chunk Name Length Memory Corruption Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 12.08.06: Multiple Vendor Antivirus RAR File Denial of Service Vulnerability
  • From: iDefense Labs
• Enforcing Java Security Manager in Restricted Windows Environments?
  • From: Jan P. Monsch
• PhpBB Toplist 1.3.7 Xss Vuln.
  • From: starext
• [USN-394-1] Ruby vulnerability
  • From: Kees Cook
• PHP 5.2.0 session.save_path safe_mode and open_basedir bypass
  • From: cxib
• Animated Smiley Generator File Include Vul.
  • From: starext
• ASX Playlists and Jumping to Conclusions
  • From: Sûnnet Beskerming
• LS-20061001 - Computer Associates BrightStor ARCserve Backup v11.5 Remote Buffer Overflow Vulnerability
  • From: advisories
• LS-20060908 - Computer Associates BrightStor ARCserve Backup v11.5 Remote Buffer Overflow Vulnerability
  • From: advisories
• Re: Internet Explorer 6 CSS "expression" Denial of Service Exploit (P.o.C.)
  • From: chinese soup
• [CAID 34846]: CA BrightStor ARCserve Backup Discovery Service Buffer Overflow Vulnerability
  • From: Williams, James K
• Midicart vulerable
  • From: ifx
• Microsoft Word 0-day Vulnerability FAQ (CVE-2006-5994) written
  • From: Juha-Matti Laurio
• [SECURITY] [DSA-1230-1] new l2tpns packages fix buffer overflow
  • From: Steve Kemp
• [OpenPKG-SA-2006.038] OpenPKG Security Advisory (tar)
  • From: OpenPKG GmbH
• TSLSA-2006-0070 - multi
  • From: Trustix Security Advisor
• [Aria-Security Team] cPanel BoxTrapper Cross Site Scripting
  • From: Advisory
• [Aria-Security Team] cPanel 11 pops.html Cross-Site Scripting
  • From: Advisory
• [Aria-Security Team] CentOS 4.2 i686 - WHM X v3.1.0 Cross-Site Scripting
  • From: Advisory
• EEYE: Intel Network Adapter Driver Local Privilege Escalation
  • From: eEye Advisories
• [OpenPKG-SA-2006.037] OpenPKG Security Advisory (gnupg)
  • From: OpenPKG GmbH
• DUdirectory Admin Panel SQL Injection
  • From: Meftun
• [USN-393-2] GnuPG2 vulnerabilities
  • From: Kees Cook
• Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass
  • From: Tomasz Kojm
• Re[2]: Multiple Vendor Unusual MIME Encoding Content Filter Bypass
  • From: 3APA3A
• phpAdsNew-2.0.4-pr2 Remote File Inclusion Exploit
  • From: crackers_child
• Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass
  • From: michele.sandrelli@xxxxxxxxxxxx
• Re: Microsoft 0-day word vulnerability - Secunia - Extremely critical
  • From: Juha-Matti Laurio
• [USN-390-3] evince-gtk vulnerability
  • From: Kees Cook
• phpbb 2.0.x [xss]
  • From: saps . audit
• Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass
  • From: Luke Borg
• Re: Internet Explorer 6 CSS "expression" Denial of Service Exploit (P.o.C.)
  • From: Andrius Paurys
• Re: The Week of Oracle Database Bugs
  • From: Tony Jambu
• [USN-393-1] GnuPG vulnerability
  • From: Kees Cook
• Some Thoughts about Office Open XML and Malware Detection
  • From: Jan P. Monsch
• Re: XSS in JAB Guest Book
  • From: Steven M. Christey
• TSRT-06-15: Citrix Presentation Server Client ActiveX Heap Overflow Vulnerability
  • From: TSRT
• Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass
  • From: Gadi Evron
• Re: Microsoft 0-day word vulnerability - Secunia - Extremely critical
  • From: Andrew Simmons
• Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass
  • From: Tomasz Kojm
• Digital Armaments Security Advisory 07.12.2006: Yahoo multiple services authentication bypass Vulnerability
  • From: info
• [ GLSA 200612-01 ] wv library: Multiple integer overflows
  • From: Sune Kloppenborg Jeppesen
• Linksys WIP 330 VoIP wireless phone crash from Nmap scan
  • From: Shawn Merdinger
• ZDI-06-044: Adobe Download Manager AOM Parsing Buffer Overflow Vulnerability
  • From: zdi-disclosures
• New MySpace worm could be on its way
  • From: pdp (architect)
• Microsoft 0-day word vulnerability - Secunia - Extremely critical
  • From: Ryan Buena
• rPSA-2006-0227-1 gnupg
  • From: rPath Update Announcements
• [ MDKSA-2006:225 ] - Updated ruby packages fix DoS vulnerability
  • From: security
• rPSA-2006-0226-1 kernel
  • From: rPath Update Announcements
• GnuPG: remotely controllable function pointer [CVE-2006-6235]
  • From: Werner Koch
• SYMSA-2006-012: 2X ThinClientServer Create Admin Account Replay Vulnerability
  • From: research
• Multiple Vendor Unusual MIME Encoding Content Filter Bypass
  • From: Hendrik Weimer
• RE: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation
  • From: Michael Scheidell
• BTSaveMySql 1.2 (acces to config files)
  • From: sn0oPy . team
• Oracle PL/SQL Fuzzing Tool
  • From: Joxean Koret
• [SECURITY] [DSA 1229-1] New Asterisk packages fix arbitrary code execution
  • From: Martin Schulze
• FreeBSD Security Advisory FreeBSD-SA-06:26.gtar
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-06:25.kmem
  • From: FreeBSD Security Advisories
• Uploadscript Vulnerabilities: Text file Hash password
  • From: hack2prison
• Re: Internet Explorer 6 CSS "expression" Denial of Service Exploit (P.o.C.)
  • From: José Carlos Nieto Jarquín
• Internet Explorer 6. CSS Expression Denial of Service (P.o.C.)
  • From: José Carlos Nieto Jarquín
• Barracuda Convert-UUlib library buffer overflow leads to remote compromise
  • From: Jean-Sébastien Guay-Leroux
• [USN-390-2] evince vulnerability
  • From: Kees Cook
• [ MDKSA-2006:224 ] - Updated xine-lib packages fix buffer overflow vulnerability
  • From: security
• EEYE: Adobe Download Manager AOM Stack Buffer Overflow Vulnerability
  • From: eEye Advisories
• HPSBUX02178 SSRT061267 rev.1 - HP-UX Secure Shell Remote Denial of Service (DoS)
  • From: security-alert
• Re: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation
  • From: Ansgar -59cobalt- Wiechers
• [security bulletin] HPSBUX02145 SSRT061202 rev.2 - HP-UX running Apache Remote Execution of Arbitrary Code, Denial of Service (DoS), and Unauthorized Access
  • From: security-alert
• Re: EasyPage Portal ( all ver )SQL Injection
  • From: saps . audit
• Re: Symantec LiveState Agent for Windows vulnerabi
  • From: eugeny gladkih
• Re: Re: [Aria-Security Team] uGestBook SQL Injection Vuln
  • From: saps . audit
• eEye's Zero-Day Tracker Launch
  • From: chinese soup
• Re: Symantec LiveState Agent for Windows vulnerabi
  • From: Damjan
• EasyPage Portal ( all ver )SQL Injection
  • From: matrix
• Re: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation
  • From: Steve Shockley
• Re: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation
  • From: Thor (Hammer of God)
• [SECURITY] [DSA 1228-1] New elinks packages fix arbitrary shell command execution
  • From: Moritz Muehlenhoff
• Re: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation
  • From: eugeny gladkih
• CYBSEC - Security Pre-Advisory: SAP Internet Graphics Service (IGS) Remote Arbitrary File Removal
  • From: Mariano Nuñez Di Croce
• DistrRTgen 1.0 launched!
  • From: Martin Jørgensen
• CYBSEC - Security Pre-Advisory: SAP Internet Graphics Service (IGS) Undocumented Features
  • From: Mariano Nuñez Di Croce
• URL Rdirecction Bug Yahoo
  • From: matrix
• Re: [Aria-Security Team] uGestBook SQL Injection Vuln
  • From: Stuart Moore
• RE: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation
  • From: Michael Scheidell
• Re: Evolve Merchant[ injection sql ]
  • From: tony
• Re: GnuPG 1.4 and 2.0 buffer overflow
  • From: Damien Miller
• Re: MS Internet Explorer 6.0 (mshtml.dll) Denial of Service Exploit
  • From: 3APA3A
• [KOffice security advisory] KOffice OLEfilter integer overflow
  • From: Dirk Mueller
• SNORT Covered channels detector patch
  • From: fryxar fryxar
• TSRT-06-14: IBM Tivoli Storage Manager Mutiple Buffer Overflow Vulnerabilities
  • From: TSRT
• Re: Invision Gallery 2.0.7 SQL Injection Vulnerability
  • From: emin
• new xss in modbb forum
  • From: h angel
• Re: Multiple bugs in TFT-Gallery
  • From: simo64
• rPSA-2006-0211-2 doxygen libpng
  • From: rPath Update Announcements
• XSS in JAB Guest Book
  • From: nj
• [USN-392-1] xine-lib vulnerability
  • From: Kees Cook
• Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation
  • From: ss_team
• [USN-391-1] libgsf vulnerability
  • From: Kees Cook
• [ MDKSA-2006:214-1 ] - Updated gv packages fix buffer overflow vulnerability
  • From: security
• Re: aBitWhizzy [local file include]
  • From: john . goodman
• F-Prot Antivirus for Unix: heap overflow and Denial of Service
  • From: research
• Multiple bugs in TFT-Gallery
  • From: nj
• [SECURITY] [DSA 1227-1] New Mozilla Thunderbird packages fix several vulnerabilities
  • From: Martin Schulze
• [Aria-Security Team] uGestBook SQL Injection Vuln
  • From: Advisory
• Re: UPublisher Exploit - Superfreaker
  • From: me
• Vt-Forum Lite System V.1.3 Xss Vuln.
  • From: starext
• [SECURITY] [DSA 1226-1] New links packages fix arbitrary shell command execution
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1225-2] New Mozilla Firefox packages fix several vulnerabilities
  • From: Martin Schulze
• MS Internet Explorer 6.0 (mshtml.dll) Denial of Service Exploit
  • From: ajannhwt
• PhpMyAdmin 2.7.0-pl2 Path Disclosure | Multiple CRLF/Http Response Splitting
  • From: ajannhwt
• 2[xss]Vulnerabilities in Script Mobile Ac4p.com
  • From: gamr-14
• SMF upload XSS vulnerability
  • From: Jessica Hope
• [SECURITY] [DSA 1225-1] New Mozilla Firefox packages fix several vulnerabilities
  • From: Martin Schulze
• [SECURITY] [DSA 1224-1] New Mozilla packages fix several vulnerabilities
  • From: Martin Schulze
• Online BookMarks Multiple SQL Injection/XSS Vulnerabilities
  • From: security
• fl0p - passive L7 flow fingerprinting
  • From: Michal Zalewski
• [ISecAuditors Security Advisories] XSS vulnerability in error page of ISMail
  • From: ISecAuditors Security Advisories
• Metyus Okul Ynetim Sistemi V.1.0 (tr) Sql injection Vuln.
  • From: ShaFuq31
• [ISecAuditors Security Advisories] IMAP/SMTP Injection in Hastymail
  • From: ISecAuditors Security Advisories
• listpics v5
  • From: blasterim
• [ISecAuditors Advisories] BlueSocket web administration is vulnerable to XSS
  • From: ISecAuditors Security Advisories
• [Aria-Security Team] DuWare DuPaypal SQL Injection Vuln
  • From: Advisory
• [Aria-Security Team] DuWare DuForum SQL Injection Vuln
  • From: Advisory
• CuteNews 1.3.6 XSS
  • From: emulamex
• [Aria-Security Team] DuWare DuDownloads SQL Injection Vuln
  • From: Advisory
• [ MDKSA-2006:222 ] - Updated koffice packages fixes integer overflow vulnerability
  • From: security
• KhaledMuratList mdb
  • From: blasterim
• PHPNews 1.3.0 XSS
  • From: emulamex
• [Aria-Security Team] DuWare DuPortal SQL Injection Vuln
  • From: Advisory
• [Aria-Security Team] DuWare DuClassMate SQL Injection Vuln
  • From: Advisory
• [Aria-Security Team] DuWare DuNews SQL Injection Vuln
  • From: Advisory
• [ MDKSA-2006:223 ] - Updated ImageMagick packages fixes vulnerability
  • From: security
• freeqboard <= 1.1 (qb_path) Remote File Include Vulnerability
  • From: -= SHELL =- -= SHELL =-
• rPSA-2006-0222-1 tar
  • From: rPath Update Announcements
• Re: safely concatenating strings in portable C (Re: GnuPG 1.4 and 2.0 buffer overflow)
  • From: Simon Josefsson
• TSLSA-2006-0068 - multi
  • From: Trustix Security Advisor
• rPSA-2006-0224-1 gnupg
  • From: rPath Update Announcements
• Re: [Full-disclosure] ZDI-06-043: Novell Netware Client Print Provider Buffer Overflow Vulnerability
  • From: Dude VanWinkle
• [SECURITY] [DSA 1222-2] New proftpd packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• iDefense Security Advisory 12.01.06: Novell ZENworks Asset Management Msg.dll Heap Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 12.01.06: Novell ZENworks Asset Management Collection Client Heap Overflow Vulnerability
  • From: iDefense Labs
• Aspee Ziyareti Defteri (tr) Sql injection Vuln.
  • From: ShaFuq31
• rPSA-2006-0220-1 dovecot
  • From: rPath Update Announcements
• deV!L`z Clanportal - SQL Injection [061124a]
  • From: Tim Weber
• Outpost Bypassing Self-Protection via Advanced DLL injection with handle stealing Vulnerability
  • From: Matousec - Transparent security Research
• [SECURITY] [DSA 1223-1] New tar packages fix arbitrary file overwrite
  • From: Noah Meyerhans
• Layered Defense Advisory: Novell Client 4.91 Format String Vulnerability
  • From: dh
• deV!L`z Clanportal - Arbitrary File Upload [061124b]
  • From: Tim Weber
• [Aria-Security.Net] Web Hosting Control Panel - cPanel 11 Multiple Cross-Site Scripting Vulnerabilites
  • From: Advisory
• rPSA-2006-0221-1 openldap openldap-clients openldap-servers
  • From: rPath Update Announcements
• [ MDKSA-2006:221 ] - Updated gnupg packages fix vulnerability
  • From: security
• [ MDKSA-2006:220 ] - Updated libgsf packages fix heap buffer overflow vulnerability
  • From: security
• [SECURITY] [DSA 1205-2] New thttpd packages fix insecure temporary file creation
  • From: Steve Kemp
• Re: Invision Community Blog Mod 1.2.4 .PHP SQL Injection Vulnerability
  • From: emin
• Invision Gallery 2.0.7 SQL Injection Vulnerability
  • From: infection
• Re: [Full-disclosure] ZDI-06-043: Novell Netware Client Print Provider Buffer Overflow Vulnerability
  • From: zdi-disclosures
• LifeType version 1.1.2 Multiple Path Disclosure Vulnerabilities
  • From: jesper . jurcenoks
• Woltlab Burning Board 2.3.X XSS Vulnerability (0-Day) FIXED VERSION
  • From: blueshisha
• iDefense Security Advisory 11.30.06: Multiple Vendor libgsf Heap Overflow Vulnerability
  • From: iDefense Labs
• LDU <= 8.x (polls.php) Remote SQL Injection Vulnerability
  • From: ajannhwt
• contentserv 4.x
  • From: capt . nem0
• safely concatenating strings in portable C (Re: GnuPG 1.4 and 2.0 buffer overflow)
  • From: Solar Designer
• Invision Community Blog Mod 1.2.4 .PHP SQL Injection Vulnerability
  • From: infection
• Re: [Full-disclosure] ZDI-06-043: Novell Netware Client Print Provider Buffer Overflow Vulnerability
  • From: Dude VanWinkle
• [ GLSA 200611-26 ] ProFTPD: Remote execution of arbitrary code
  • From: Raphael Marichez
• Seditio <= 1.10 (pollid) Remote SQL Injection Vulnerability
  • From: ajannhwt
• @lex Guestbook 4.0.1 : Full Path Disclosure & XSS
  • From: mr_kaliman
• [USN-390-1] evince vulnerability
  • From: Kees Cook
• [SECURITY] [DSA 1221-1] New libgsf packages fix arbitrary code execution
  • From: Martin Schulze
• [security bulletin] HPSBUX02153 SSRT061181 rev.2 - HP-UX Running Firefox, Remote Unauthorized Access or Elevation of Privileges or Denial of Service (DoS)
  • From: security-alert
• Secunia Research: MailEnable IMAP Service Two Vulnerabilities
  • From: Secunia Research
• [ MDKSA-2006:217-1 ] - Updated proftpd packages fix vulnerabilities
  • From: security
• [SECURITY] [DSA 1222-1] New proftpd packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [USN-389-1] GnuPG vulnerability
  • From: Kees Cook
• Potentially OT: AJAX article
  • From: clappymonkey
• [USN-388-1] KOffice vulnerability
  • From: Kees Cook
• Re: PHP Event Calendar 1.5.1 (index.php) Remote File Include Vulnerability
  • From: Stuart Moore
• [Aria-Security Team] FipsSHOP SQL Injection
  • From: Advisory
• Monkey Boards version 0.3.5 Multiple Path Disclosure Vulnerabilities
  • From: jesper . jurcenoks
• New Windows tool - PWDumpX v1.0
  • From: Reed Arvin
• RE: Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?)
  • From: Shawn Fitzgerald
• OWASP JBroFuzz 0.3 Fuzzer Released!
  • From: subere
• REMLAB Web Mech Designer 2.0.5 Path Disclosure Vulnerability
  • From: jesper . jurcenoks
• SYM06-023, Symantec NetBackup PureDisk: PHP update to Address Reported Security Vulnerability
  • From: Mike Prosser
• Multiple Vulnerabilities in AlternC version 0.9.5
  • From: Vincent A.Menard
• Secunia Research: Borland Products idsql32.dll Buffer Overflow Vulnerability
  • From: Secunia Research
• [ MDKSA-2006:219 ] - Updated tar packages fix vulnerability
  • From: security
• Re: Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?)
  • From: David Litchfield
• PHP Event Calendar 1.5.1 (index.php) Remote File Include Vulnerability
  • From: philip anselmo
• ZDI-06-043: Novell Netware Client Print Provider Buffer Overflow Vulnerability
  • From: zdi-disclosures
• iDefense Security Advisory 11.29.06: Horde Kronolith Arbitrary Local File Inclusion Vulnerability
  • From: iDefense Labs
• Re: CuteNews v1.4.5 (search.php) Remote file include vulnerability
  • From: raven
• Re: ProFTPD mod_tls pre-authentication buffer overflow
  • From: Mark Wadham
• Re: [WEB SECURITY] The state of JavaScript Hacking
  • From: bugtraq
• b2evolution Remote File inclusion Vulnerability
  • From: tarkus
• Re: [Full-disclosure] New report on Teredo security
  • From: Jeroen Massar
• New report on Teredo security
  • From: Jim Hoagland
• Re: PhpGedView 4.0.2 (DOCUMENT_ROOT) File inclusion Vulnerablity
  • From: yalnifj
• [ GLSA 200611-24 ] LHa: Multiple vulnerabilities
  • From: Raphael Marichez
• [ GLSA 200611-25 ] OpenLDAP: Denial of Service vulnerability
  • From: Raphael Marichez
• [ GLSA 200611-23 ] Mono: Insecure temporary file creation
  • From: Raphael Marichez
• [USN-387-1] Dovecot vulnerability
  • From: Kees Cook
• b2evolution XSS Vulnerabilities
  • From: tarkus
• [USN-385-1] tar vulnerability
  • From: Kees Cook
• Re: PhpGedView 4.0.2 (DOCUMENT_ROOT) File inclusion Vulnerablity
  • From: Mefisto
• ProFTPD mod_tls pre-authentication buffer overflow
  • From: research
• TSLSA-2006-0066 - multi
  • From: Trustix Security Advisor
• evince buffer overflow exploit (gv)
  • From: kspecial
• Re: Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?)
  • From: David Litchfield
• [USN-386-1] ImageMagick vulnerability
  • From: Kees Cook
• Re: Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?)
  • From: Steven M. Christey
• Re: SYMSA-2006-011: JBoss Java Class DeploymentFileRepository Directory Traversal
  • From: Jon Hart
• uPhotoGallery (v 1.1) SQL Injection
  • From: Advisory
• [ GLSA 200611-22 ] Ingo H3: Folder name shell command injection
  • From: Sune Kloppenborg Jeppesen
• GnuPG 1.4 and 2.0 buffer overflow
  • From: Werner Koch
• SYMSA-2006-011: JBoss Java Class DeploymentFileRepository Directory Traversal
  • From: research
• CVE-2006-5815: remote code execution in ProFTPD
  • From: John Morrissey
• ClickContact SQL Injection
  • From: Advisory
• AIDE problem handling symlinks
  • From: fryxar fryxar
• Cursor snarfing - a new class of vulnerability and attack in Oracle
  • From: David Litchfield
• 2nd European Conference on Computer Network Defense (EC2ND)
  • From: Blyth A J C (AT)
• RE: Cracking String Encryption in Java Obfuscated Bytecode
  • From: Jeremy Epstein
• Re: New Flaw in Firefox 2.0: DoS and possible remote code execution
  • From: sflist
• [ GLSA 200611-21 ] Kile: Incorrect backup file permission
  • From: Sune Kloppenborg Jeppesen
• iDefense Security Advisory 11.26.06: GNU Radius Format String Vulnerability
  • From: iDefense Labs
• MHL-2006-003 Public Advisory: "mboard" file creation issue
  • From: Mayhemic Labs Security
• Re: CuteNews v1.4.5 (search.php) Remote file include vulnerability
  • From: Francesco Laurita
• PhpGedView 4.0.2 (DOCUMENT_ROOT) File inclusion Vulnerablity
  • From: x___ . _
• rPSA-2006-0219-1 info install-info texinfo
  • From: rPath Update Announcements
• Re: VMware 5.5.1 Local Buffer Overflow (HTML Exploit)
  • From: str0ke
• Re: Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?)
  • From: David Litchfield
• CuteNews v1.4.5 (search.php) Remote file include vulnerability
  • From: philip anselmo
• TFTP Server 3CTftpSvc Buffer Overflow Vulnerability (Long transporting mode)
  • From: liuqx
• rPSA-2006-0218-1 ImageMagick
  • From: rPath Update Announcements
• iDefense Security Advisory 11.26.06: Qbik WinGate Compressed Name Pointer Denial of Service Vulnerability
  • From: iDefense Labs
• [SECURITY] [DSA 1219-1] New texinfo packages fix multiple vulnerabilities
  • From: Noah Meyerhans
• Re: Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?)
  • From: Tim Newsham
• ClickGallery Sql Injection
  • From: Advisory
• Clickblog Sql Injection
  • From: Advisory
• VMware 5.5.1 Local Buffer Overflow (HTML Exploit)
  • From: NormandiaN_MailID
• TFTP Server AT-TFTP Server v 1.9 Buffer Overflow Vulnerability (Long filename)
  • From: liuqx
• [SECURITY] [DSA 1220-1] New pstotext packages fix arbitrary shell command execution
  • From: Moritz Muehlenhoff
• [Aria-Security Team] General Shopping Cart SQL Injection Vulnerability
  • From: Advisory
• [Aria-Security Team] Evolve shopping cart SQL Injection Vulnerability
  • From: Advisory
• mAlbum v0.3 local file inclusion
  • From: tux025
• Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?)
  • From: Thor (Hammer of God)
• Re: Clarifying integer overflows vs. signedness errors
  • From: Pavel Kankovsky
• Re: Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?)
  • From: Steve Friedl
• Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?)
  • From: Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
• Re: Re: Digipass Go3 Token Dumper (at least for 2006)
  • From: fcollyer
• Free tool for pattern identification (for researchers)
  • From: Gary Golomb
• Re: DoS in Microsoft Windows Live Messenger <= 8.0
  • From: astralbabz
• AttackAPI 2.0 alpha
  • From: pdp (architect)
• Wisi Portal [Sql Injection By Jesus Tovar]
  • From: nagazakig74
• Siap Cms Sql Injection (login.asp)
  • From: nagazakig74
• Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?)
  • From: Thor (Hammer of God)
• Re: tikiwiki 1.9.5 mysql password disclosure & xss
  • From: drunken_chin
• Re: Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?)
  • From: stopmakingnoise
• New Windows tool - NBTEnum 3.3
  • From: Reed Arvin
• DoS in Microsoft Windows Live Messenger <= 8.0
  • From: dragonjar
• WebHost Manager (WHM) Multiple Cross-Site Scripting
  • From: Advisory
• [ GLSA 200611-20 ] GNU gv: Stack overflow
  • From: Sune Kloppenborg Jeppesen
• CPanel 11 Multiple Cross-Site Scription
  • From: Advisory
• PHP-Nuke Mermaid Module V1.2 (formdisp.php) Remote File Include Exploit
  • From: crackers_child
• [Aria-Security Team] Ultimate Survey Pro SQL Injection
  • From: Advisory
• Cahier de texte V2.0 SQL Code Execution Exploit
  • From: gmdarkfig
• [ GLSA 200611-19 ] ImageMagick: PALM and DCM buffer overflows
  • From: Sune Kloppenborg Jeppesen
• Re: Digipass Go3 Token Dumper (at least for 2006)
  • From: Hugo van der Kooij
• [Aria-Security Team] iNews News Manager SQL Injection
  • From: Advisory
• [Aria-Security Team] MidiCart ASP Shopping Cart SQL Injection
  • From: Advisory
• [Aria-Security Team] ASP ListPics 5.0 SQL Injection
  • From: Advisory
• [Aria-Security Team] Fixit iDMS Pro Image Gallery SQL Injection
  • From: Advisory
• Re: Active PHP Bookmarks (apb.php) Remote file include
  • From: Mefisto
• PHP-Nuke <= 7.9 News module "sid" SQL Injection vulnerabilities
  • From: paisterist . nst
• Re: Cracking String Encryption in Java Obfuscated Bytecode
  • From: John GALLET
• [Aria-Security Team] MidiCart ASP Plus Shopping Cart SQL Injection
  • From: Advisory
• Wolflab Burning Board Lite 1.0.2 two sql injections
  • From: retrog
• [ GLSA 200611-18 ] TIN: Multiple buffer overflows
  • From: Sune Kloppenborg Jeppesen
• mmgallery Multiple vulnerabilities
  • From: saudi
• Cross site scripting & fullpath disclosure
  • From: saudi
• Re: Cracking String Encryption in Java Obfuscated Bytecode
  • From: Jim Manico
• Cracking String Encryption in Java Obfuscated Bytecode
  • From: subere
• Active PHP Bookmarks (apb.php) Remote file include
  • From: philip anselmo
• [ GLSA 200611-17 ] fvwm: fvwm-menu-directory fvwm command injection
  • From: Matthias Geerdsen
• LS-20061102 - Business Objects Crystal Reports Stack Overflow Vulnerability
  • From: advisories
• Re: *BSD banner INT overflow vulnerability
  • From: admin
• Re: SolpotCrew Advisory #10 - phpBB XS (phpbb_root_path) Remote File Include
  • From: webmaster
• [ MDKSA-2006:218 ] - Updated apache-mod_auth_kerb packages fixes DoS vulnerability
  • From: security
• Re: Password Flaw also in Firefox 1.5.08. Was: Big Flaw in Firefox 2: Password Manager Bug Exposes Passwords
  • From: Juha-Matti Laurio
• Re: Big Flaw in Firefox 2: Password Manager Bug Exposes Passwords
  • From: 3APA3A
• Re: tikiwiki 1.9.5 mysql password disclosure & xss
  • From: FBI
• Password Flaw also in Firefox 1.5.08. Was: Big Flaw in Firefox 2: Password Manager Bug Exposes Passwords
  • From: Michael Scheidell
• CFP - VII National Computer and Information Security Conference
  • From: Jeimy Cano
• NVIDIA nView (keystone) local Denial Of service
  • From: no-reply
• [ECHO_ADV_61_2006] a-ConMan <= v3.2beta Remote File Inclusion
  • From: erdc
• Re: Lack of environment sanitization in the FreeBSD, OpenBSD, NetBSD dynamic loaders.
  • From: Casper . Dik
• Big Flaw in Firefox 2: Password Manager Bug Exposes Passwords
  • From: fash1on
• XSS in scriptat support InverseFlow Help Desk v2.31
  • From: gamr-14
• Perl proxy checker using samair.ru
  • From: Iko Riyadi
• CONFidence 2007 CFP
  • From: andrzej . targosz
• Re: *BSD banner INT overflow vulnerability
  • From: Bob Beck
• Lack of environment sanitization in the FreeBSD, OpenBSD, NetBSD dynamic loaders.
  • From: In Cognito
• Re: Re: *BSD banner INT overflow vulnerability
  • From: evilrabbi
• Lack of environment sanitization in the FreeBSD, OpenBSD, NetBSD dynamic loaders.
  • From: In Cognito
• [ MDKSA-2006:208-1 ] - Updated openldap packages fixes Bind vulnerability
  • From: security
• Windows Media ASX PlayList File Denial Of Service Vulnerability
  • From: sehato
• Re: [ECHO_ADV_53$2006] QnECMS <= 2.5.6 (adminfolderpath) Remote File Inclusion Vulnerability
  • From: jim
• "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?)
  • From: Matthew Conover
• Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?)
  • From: David Litchfield
• Re: Clarifying integer overflows vs. signedness errors
  • From: Thiago Zaninotti
• Re: *BSD banner INT overflow vulnerability
  • From: Steve Shockley
• RE: LS-20061113 - CA BrightStor ARCserve Backup Remote Buffer Overflow Vulnerability
  • From: Williams, James K
• Secunia Research: PassGo SSO Plus Insecure Default Directory Permissions
  • From: Secunia Research
• *BSD banner INT overflow vulnerability
  • From: Gruzicki Wlodek
• Re: [ GLSA 200611-11 ] TikiWiki: Multiple vulnerabilities
  • From: Chris Gianelloni
• [USN-381-1] Firefox vulnerabilities
  • From: Kees Cook
• RE: [Reversemode advisory] Computer Associates HIPS Drivers - multiple local privilege escalation vulnerabilities.
  • From: Williams, James K
• Advisory: Seditio <= 1.10 Remote SQL Injection Vulnerability.
  • From: Mustafa Can Bjorn IPEKCI
• Vulnerability in PostNuke
  • From: sni-labs
• VMSA-2006-0010 - SSL sessions not authenticated by VC Clients
  • From: VMware Security team
• Clarifying integer overflows vs. signedness errors
  • From: Steven M. Christey
• Advisory: LDU <= 8.x Remote SQL Injection Vulnerability.
  • From: Mustafa Can Bjorn IPEKCI
• [USN-382-1] Thunderbird vulnerabilities
  • From: Kees Cook
• JiRos Links Manager[injection sql & xss permanent]
  • From: saps . audit
• creadirectory [injection sql & xss]
  • From: saps . audit
• Link Exchange Lite [injection sql]
  • From: saps . audit
• Re: Re: Phpjobscheduler 3.0 - Multiple Remote File Include
  • From: admin
• ContentNow CMS 1.39 Sql Injection + Path Disclosure Vulnerabilities
  • From: revenge
• aBitWhizzy [local file include]
  • From: saps . audit
• [SECURITY] [DSA 1218-1] New proftpd packages fix denial of service
  • From: Moritz Muehlenhoff
• Secunia Research: My Firewall Plus Privilege Escalation Vulnerability
  • From: Secunia Research
• Re: [ GLSA 200611-11 ] TikiWiki: Multiple vulnerabilities
  • From: saps . audit
• [ GLSA 200611-16 ] Texinfo: Buffer overflow
  • From: Sune Kloppenborg Jeppesen
• Re: [ MDKSA-2006:217 ] - Updated proftpd packages fix vulnerabilities
  • From: research
• [ GLSA 200611-15 ] qmailAdmin: Buffer overflow
  • From: Sune Kloppenborg Jeppesen
• New Correction: Re: Serious crypto problem fixed by envelope HMAC method instead of currently used prefix
  • From: Omirjan Batyrbaev
• [KAPDA]::Security analysis of cutenews 1.4.5
  • From: alireza hassani
• LS-20061113 - CA BrightStor ARCserve Backup Remote Buffer Overflow Vulnerability
  • From: advisories
• Re: Correction: Re: Serious crypto problem fixed by envelope HMAC method insteadof currently used prefix
  • From: Steve Friedl
• Which is more secure? Oracle vs. Microsoft
  • From: David Litchfield
• [USN-384-1] OpenLDAP vulnerability
  • From: Kees Cook
• The Classified Ad System [multiple xss & injection sql]
  • From: saps . audit
• [ MDKSA-2006:216 ] - Updated links packages fix smb vulnerability
  • From: security
• [SECURITY] [DSA 1207-2] New phpmyadmin packages fix regression
  • From: Moritz Muehlenhoff
• ltwCalendar => 4.2.1 Remote File Include Vulnerabilities
  • From: the_3dit0r
• Re: GPhotos 1.5 Multiple vulnerabilities
  • From: packet
• Correction: Re: Serious crypto problem fixed by envelope HMAC method insteadof currently used prefix
  • From: Omirjan Batyrbaev
• Classified System [injection sql]
  • From: saps . audit
• [ GLSA 200611-11 ] TikiWiki: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• my little weblog => Cross Site Scripting
  • From: the_3dit0r
• mAlbum v0.3 Multiple vulnerabilitizzz
  • From: tux025
• [SECURITY] [DSA 1215-1] New xine-lib packages fix execution of arbitrary code
  • From: Moritz Muehlenhoff
• Wabbit PHP Gallery => 0.9 Remote Traversal Directory
  • From: the_3dit0r
• [ MDKSA-2006:215 ] - Updated avahi packages fix netlink vulnerability
  • From: security
• BirdBlog => v1.4.0 Cross Site Scripting
  • From: the_3dit0r
• [SECURITY] [DSA 1216-1] New flexbackup packages fix denial of service
  • From: Moritz Muehlenhoff
• [ GLSA 200611-14 ] TORQUE: Insecure temproary file creation
  • From: Sune Kloppenborg Jeppesen
• MyAlbum <= 3.02 (langs_dir) Remote File Inclusion Exploit
  • From: the_3dit0r
• Re: Serious crypto problem fixed by envelope HMAC method insteadof currently used prefix
  • From: Omirjan Batyrbaev
• [ GLSA 200611-12 ] Ruby: Denial of Service vulnerability
  • From: Sune Kloppenborg Jeppesen
• [SECURITY] [DSA 1217-1] New linux-ftpd packages fix access control bypass
  • From: Moritz Muehlenhoff
• [ GLSA 200611-13 ] Avahi: "netlink" message vulnerability
  • From: Sune Kloppenborg Jeppesen
• The Week of Oracle Database Bugs
  • From: Cesar
• LoudMouth => 2.4 Remote File Include Vulnerabilities
  • From: the_3dit0r
• [ MDKSA-2006:217 ] - Updated proftpd packages fix vulnerabilities
  • From: security
• [SECURITY] [DSA 1214-1] New gv packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• Rialto 1.6[admin login bypass & multiples injections sql]
  • From: saps . audit
• Telaen => 1.1.0 Remote File Include Vulnerability
  • From: the_3dit0r
• mxBB calsnails module 1.06 Remote File Inclusion Exploit
  • From: the_3dit0r
• mg.applanix <= 1.3.1 Remote File Include Exploit
  • From: the_3dit0r
• iPrimal Forums (index.php) Remote File Include Exploit
  • From: the_3dit0r
• enomphp => 4.0 Remote Traversal Directory
  • From: the_3dit0r
• klf-realty [injection sql]
  • From: saps . audit
• DodosMail <= 2.0.1(dodosmail.php) Remote File Inclusion Exploit
  • From: the_3dit0r
• dicshunary 0.1 alpha Remote File Inclusion Exploit
  • From: the_3dit0r
• RE: FreeBSD all versions FireWire IOCTL kernel integer overflow information disclousure
  • From: Rogier Mulhuijzen
• Shopping_Catalog Remote File Include exploit
  • From: the_3dit0r
• PhpQuickGallery <= 1.9 Remote File Inclusion Exploit
  • From: the_3dit0r
• gNews Publisher SQL Injection Vulnerabilites
  • From: Advisory
• eClassifieds [injection sql]
  • From: saps . audit
• Serious crypto problem fixed by envelope HMAC method insteadof currently used prefix
  • From: Omirjan Batyrbaev
• PHPOLL => 0.96 Cross Site Scripting
  • From: the_3dit0r
• ehomes [multiples injections sql]
  • From: saps . audit
• ASPNuke <= 0.80 (register.asp) Remote SQL Injection Vulnerability
  • From: ajannhwt
• PhpBB Module Dimension Remote File Include
  • From: bluespy . ok
• Telaen <= 1.1.0 Remote File Include Exploit
  • From: the_3dit0r
• [SECURITY] [DSA 1213-1] New imagemagick packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Rapid Classified v3.1 [multiple xss (get) & injection sql]
  • From: saps . audit
• Digital Armaments November-Decemberr Hacking Challenge: KERNEL
  • From: info
• Ixprim CMS 1.2 Remote File Include Vulnerability
  • From: vitux . manis
• Dovecot IMAP/POP3 server: Off-by-one buffer overflow
  • From: Timo Sirainen
• Re: Phpjobscheduler 3.0 - Multiple Remote File Include
  • From: str0ke
• Re: EEYE: Workstation Service NetpManageIPCConnect Buffer Overflow
  • From: security-list
• GPhotos 1.5 Multiple vulnerabilities
  • From: tux025
• Re: Phpjobscheduler 3.0 - Multiple Remote File Include
  • From: Stefano Zanero
• Re: A-Cart PRO SQL Injection
  • From: gmdarkfig
• Re: [Aria-Security's Research Team] ActiveNews Manager SQL Injection Vulnerabilite
  • From: gmdarkfig
• A-Cart 2.0 SQL Injection
  • From: Advisory
• linksys wrt54g v5 authentication bypass fixed
  • From: Ginsu Rabbit
• [Aria-Security's Research Team] Texas Rank'em SQL Injection Vulnerabilite
  • From: Advisory
• [MajorSecurity Advisory #35]Travelsized CMS - Multiple Cross Site Scripting Issues
  • From: admin
• [Aria-Security's Research Team] ActiveNews Manager SQL Injection Vulnerabilite
  • From: Advisory
• PhpBB Module Dimension Remote File Include
  • From: bluespy . ok
• BLOG:CMS <= 4.1.3 XSS
  • From: katatafish
• [ MDKSA-2006:164-1 ] - Updated xorg-x11/XFree86 packages fix integer overflow vulnerabilities
  • From: security
• Vikingboard (0.1.2) [ multiples vulnerability ]
  • From: saps . audit
• Drone Armies C&C Report - 17 Nov 2006
  • From: c2report
• Oxygen <= 1.1.3 (O2PHP Bulletin Board) SQL Injection
  • From: gmdarkfig
• Sage cross-context scripting -> LOCAL-CONTEXT SCRIPTING
  • From: pagvac
• [MajorSecurity Advisory #36]dev4u CMS - Multiple SQL Injection and Cross Site Scripting Issues
  • From: admin
• A-Cart PRO SQL Injection
  • From: Advisory
• Re: dev_wms => 1.5 Remote File Include Vulnerabilities
  • From: Stefano Zanero
• [ MDKSA-2006:214 ] - Updated gv packages fix buffer overflow vulnerability
  • From: security
• Infinitytechs Restaurants CM
  • From: saps . audit
• Re: Airmagnet management interfaces multiple vulnerabilities
  • From: ckuan
• Re: blogcms => 4.0.0 Remote File Include
  • From: Stefano Zanero
• Dating Site [ login bypass & xss]
  • From: saps . audit
• MosReporter Joomla Component Remote File Inclusion Exploi
  • From: crackers_child
• XSS vBulletin 3.6.X Admin Control Painel
  • From: insanity
• 20/20 datashed [ multiples injection sql ]
  • From: saps . audit
• igital Armaments November-Decemberr Hacking Challenge: KERNEL Remote
  • From: info
• Aspmforum [ multiples injection sql (get&post)]
  • From: saps . audit
• Sphpblog => 0.8 Remote File Include Vulnerabilities
  • From: the_3dit0r
• [Reversemode advisory] Computer Associates HIPS Drivers - multiple local privilege escalation vulnerabilities.
  • From: Reversemode
• TFTPD32 v3.01 TFTP Server Long File Name Buffer Overflow Vulnerability
  • From: liuqx
• 20/20 real estate [ multiples injection sql ]
  • From: saps . audit
• 20/20 auto gallery [ multiples injection sql ]
  • From: saps . audit
• [Aria-Security] CPanel Network Tools Cross Site Scripting [Advisory]
  • From: Advisory
• Re: Etomite CMS 0.6.1.2 Multiple Vulnerabilities ( Sql Injection + Local file inclusion )
  • From: dean
• [ GLSA 200611-10 ] WordPress: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• TSLSA-2006-0065 - libpng
  • From: Trustix Security Advisor
• [ GLSA 200611-09 ] libpng: Denial of Service
  • From: Sune Kloppenborg Jeppesen
• [security bulletin] HPSBMA02088 SSRT051026 rev. 2 - HP-UX running WBEM Services Denial of Service (DoS)
  • From: security-alert
• [USN-383-1] libpng vulnerability
  • From: Kees Cook
• [OpenPKG-SA-2006.036] OpenPKG Security Advisory (png)
  • From: OpenPKG
• [ MDKSA-2006:213 ] - Updated chromium packages to fix embedded libpng vulnerabilities
  • From: security
• [ MDKSA-2006:212 ] - Updated doxygen packages to fix embedded libpng vulnerabilities
  • From: security
• Active News Manager [ injection sql (post&get)]
  • From: saps . audit
• [OpenPKG-SA-2006.035] OpenPKG Security Advisory (proftpd)
  • From: OpenPKG
• [ MDKSA-2006:210 ] - Updated syslinux packages to fix embedded libpng vulnerabilities
  • From: security
• [ MDKSA-2006:211 ] - Updated pxelinux packages to fix embedded libpng vulnerabilities
  • From: security
• Kerio WebSTAR local privilege escalation
  • From: K F (lists)
• [ MDKSA-2006:209 ] - Updated libpng packages fix vulnerabilities
  • From: security
• Pilot Cart V.7.2 [ injection sql (post) ]
  • From: saps . audit
• Storystream => 4.0 Remote File Include Vulnerability Exploit
  • From: the_3dit0r
• RED Blog => Remote File Include Vulnerability Exploit
  • From: the_3dit0r
• blogcms => 4.0.0 Remote File Include
  • From: the_3dit0r
• ASPintranet SQL Injection
  • From: Advisory
• My-BIC => 0.6.5 Remote File Include Vulnerability Exploit
  • From: the_3dit0r
• Image gallery with Access Database SQL Injection
  • From: Advisory
• rPSA-2006-0211-1 libpng
  • From: rPath Update Announcements
• Links smbclient command execution
  • From: Teemu Salmela
• UK Security Convention - Continuity 2006
  • From: Manchester 2600
• RE: VBulletin DoS Exploit [ all Versions ]
  • From: Bart Seresia
• Secunia Research: Panda ActiveScan Multiple Vulnerabilities
  • From: Secunia Research
• eggblog=> 3.1.0 Cross Site Scripting
  • From: the_3dit0r
• Hot Links download backup authorized vulnerabilities (re-post with some edit)
  • From: hack2prison
• Re: FreeBSD all versions FireWire IOCTL kernel integer overflow information disclousure
  • From: Lucas Holt
• worksystem => Remote File Include Vulnerability Exploit
  • From: the_3dit0r
• ASP Cart [multiples injection sql (post & get)]
  • From: saps . audit
• Comdev One Admin Pro.v4.1 ( path[skin] ) Remote File include
  • From: AG- Spider
• BlogTorrent-preview => 0.92 Cross Site Scripting
  • From: the_3dit0r
• Sphpblog => 0.8 Cross Site Scripting
  • From: the_3dit0r
• i-Gallery 3.4 Cross Site Scripting
  • From: Advisory
• Myphotos => Remote File Include Vulnerability Exploit
  • From: the_3dit0r
• Helm Cross Site Scripting
  • From: Advisory
• ZDI-06-042: Verity Ultraseek Request Proxying Vulnerability
  • From: zdi-disclosures
• BaalAsp forum [login bypass ,injections sql(post), xss(post)]
  • From: saps . audit
• CandyPress Store[ multiples injection sql ]
  • From: saps . audit
• Vulnerabilities in Client Service for NetWare
  • From: Avert
• Whitepaper: Implementing and Detecting a PCI Rootkit
  • From: John Heasman
• eShopping Cart [injection sql]
  • From: saps . audit
• Re: Advisory 14/2006: Dotdeb PHP Email Header Injection Vulnerability
  • From: Marcello Barnaba
• Etomite CMS 0.6.1.2 Multiple Vulnerabilities ( Sql Injection + Local file inclusion )
  • From: revenge
• discloser => 0.0.4 Remote File Include Vulnerability Exploit
  • From: the_3dit0r
• dev_wms => 1.5 Remote File Include Vulnerabilities
  • From: the_3dit0r
• Re: Apple Safari "match" Buffer Overflow Vulnerability
  • From: J. Oquendo
• Secunia Research: MDaemon Insecure Default Directory Permissions
  • From: Secunia Research
• Chetcpasswd 2.x: multiple vulnerabilities
  • From: riclem
• Bloo => 1.00 Remote File Include Vulnerability
  • From: the_3dit0r
• Team Evil - Incident #2
  • From: beSIRT
• OdysseusBlog => 1.0.0 Cross Site Scripting
  • From: the_3dit0r
• [MajorSecurity Advisory #34]Plesk 8 - Multiple Cross Site Scripting Issues
  • From: admin
• PhpMyAdmin all version [multiples vulnerability]
  • From: saps . audit
• Hot Links download backup authorized vulnerabilities
  • From: hack2prison
• discloser => 0.0.4 Remote File Include Vulnerabilities
  • From: the_3dit0r
• Xtreme ASP Photo Gallery Cross Site Scripting And SQL Injection
  • From: Advisory
• MetaCart e-Shop [multiples injection sql (get & post)]
  • From: saps . audit
• E-commerce Kit 1 PayPal Edition [ injection sql ]
  • From: saps . audit
• Bloo => 1.00 Cross Site Scripting
  • From: the_3dit0r
• [ MDKSA-2006:208 ] - Updated openldap packages fixes Bind vulnerability
  • From: security
• FreeBSD all versions FireWire IOCTL kernel integer overflow information disclousure
  • From: Rodrigo Rubira Branco (BSDaemon)
• Helm Cross-Site Scripting (XSS)
  • From: Advisory
• E-Calendar Pro 3.0 [ login bypass & injection sql (post)]
  • From: saps . audit
• Outpost Multiple insufficient argument validation of hooked SSDT function Vulnerability
  • From: Matousec - Transparent security Research
• [SECURITY] [DSA 1212-1] New openssh packages fix denial of service
  • From: Noah Meyerhans
• [ MDKSA-2006:207 ] - Updated bind packages fixes RSA signature verification vulnerability
  • From: security
• TSLSA-2006-0063 - multi
  • From: Trustix Security Advisor
• TrustedBSD* all versions FireWire IOCTL kernel integer overflow information disclousure
  • From: Rodrigo Rubira Branco (BSDaemon)
• DragonFlyBSD all versions FireWire IOCTL kernel integer overflow information disclousure
  • From: Rodrigo Rubira Branco (BSDaemon)
• [OpenPKG-SA-2006.034] OpenPKG Security Advisory (texinfo)
  • From: OpenPKG
• NetBSD all versions FireWire IOCTL kernel integer overflow information disclousure
  • From: Rodrigo Rubira Branco (BSDaemon)
• MultiCalendars [ multiples injection sql ]
  • From: saps . audit
• [SECURITY] [DSA 1211-1] New pdns packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• Dragon calendar [ login bypass & injection sql ]
  • From: saps . audit
• hpecs shopping cart[login bypass & injection sql (post)]
  • From: saps . audit
• A-Cart pro[ injection sql (post&get)]
  • From: saps . audit
• A+ Store E-Commerce[ injection sql & xss (post) ]
  • From: saps . audit
• ZDI-06-041: Microsoft Internet Explorer CSS Float Property Memory Corruption Vulnerability
  • From: zdi-disclosures
• ZDI-06-040: WinZip FileView ActiveX Control Unsafe Method Exposure Vulnerability
  • From: zdi-disclosures
• EEYE: Workstation Service NetpManageIPCConnect Buffer Overflow
  • From: eEye Advisories
• [Fwd: OpenBase SQL multiple vulnerabilities Part Deux]
  • From: K F (lists)
• Re: [Full-disclosure] ZDI-06-040: WinZip FileView ActiveX Control Unsafe Method Exposure Vulnerability
  • From: Micheal Turner
• [Fwd: DMA[2006-1031a] - 'Intego VirusBarrier X4 definition bypass exploit']
  • From: K F (lists)
• Property Site Manager [login bypass ,multiples injection sql & xss (get)]
  • From: saps . audit
• Blogme v3 [admin login bypass & xss (post)]
  • From: saps . audit
• FunkyASP Glossary v1.0 [injection sql]
  • From: saps . audit
• Re: New Bug MiniBB Forum <= 2 Remote File Include (index.php)
  • From: navairum
• Evolve Merchant[ injection sql ]
  • From: saps . audit
• Car Site Manager [injection sql & xss (get)]
  • From: saps . audit
• Inventory Manager [injection sql & xss (get)]
  • From: saps . audit
• Re: [ GLSA 200611-03 ] NVIDIA binary graphics driver: Privilege escalation vulnerability
  • From: Glynn Clements
• Re: [ GLSA 200611-03 ] NVIDIA binary graphics driver: Privilege escalation vulnerability
  • From: Nick FitzGerald
• Apple Safari "match" Buffer Overflow Vulnerability
  • From: jbh_cg
• BPG Content Management System SQL Injection
  • From: Advisory
• Engine Manager SQL Injection
  • From: Advisory
• ECommerce Store Shop Builder
  • From: Advisory
• Advisory 14/2006: Dotdeb PHP Email Header Injection Vulnerability
  • From: Stefan Esser
• eShopping SQL Injection
  • From: Advisory
• Ustore SQL Injection
  • From: Advisory
• WWWeb Cocepts SQL Injection
  • From: Advisory
• SiteXpress SQL Injection
  • From: Advisory
• ASPintranet SQL Injection
  • From: Advisory
• Real Estate Listing System SQL Injection
  • From: Advisory
• [SECURITY] [DSA 1210-1] New Mozilla Firefox packages fix several vulnerabilities
  • From: Martin Schulze
• DirectAdmin Multiple Cross Site Scription
  • From: Advisory
• [SECURITY] [DSA 1209-2] New trac packages fix cross-site request forgery
  • From: Moritz Muehlenhoff
• [ GLSA 200611-08 ] RPM: Buffer overflow
  • From: Raphael Marichez
• VMSA-2006-0007 - VMware ESX Server 2.1.3 Upgrade Patch 2
  • From: VMware Security team
• VMSA-2006-0006 - VMware ESX Server 2.5.3 Upgrade Patch 4
  • From: VMware Security team
• Re: [ GLSA 200611-03 ] NVIDIA binary graphics driver: Privilege escalation vulnerability
  • From: Raphael Marichez
• [ GLSA 200611-06 ] OpenSSH: Multiple Denial of Service vulnerabilities
  • From: Raphael Marichez
• Re: GNU gv Stack Overflow Vulnerability
  • From: Noam Rathaus
• New Bug MiniBB Forum <= 2 Remote File Include (index.php)
  • From: philip anselmo
• UPublisher 1.0 (viewarticle.asp) Remote SQL Injection Vulnerability
  • From: ajannhwt
• Re: Wordpress File Inclusion
  • From: Expanders
• [ GLSA 200611-07 ] GraphicsMagick: PALM and DCM buffer overflows
  • From: Raphael Marichez
• Challenges faced by automated web application security assessment tools
  • From: bugtraq
• VMSA-2006-0008 - VMware ESX Server 2.0.2 Upgrade Patch 2
  • From: VMware Security team
• SinFP 2.04 release, works under Windows
  • From: GomoR
• VMSA-2006-0009 - VMware ESX Server 3.0.0 AMD fxsave/restore issue
  • From: VMware Security team
• VMSA-2006-0005 - VMware ESX Server 2.5.4 Upgrade Patch 1
  • From: VMware Security team
• Online Event Registration <= v2.0 (save_profile.asp) Remote User Pass Change Exploit
  • From: ajannhwt
• iDefense Security Advisory 11.09.06: Citrix Presentation Server 4.0 IMA Service Invalid Name Length DoS Vulnerability
  • From: iDefense Labs
• [FLSA-2006:211760] Updated gzip package fixes security issues
  • From: David Eisenstein
• Estate Agent Manager <= v1.3 (default.asp) Remote Login ByPass SQL Injection Vulnerability
  • From: ajannhwt
• ASPPortal <= 4.0.0 (default1.asp) Remote SQL Injection Exploit
  • From: ajannhwt
• Re: [x0n3-h4ck]Essentia Web Server v.2.15 Buffer Overflow
  • From: Noam Rathaus
• Property Pro v1.0 (vir_Login.asp) Remote Login ByPass SQL Injection Vulnerability
  • From: ajannhwt
• Old SAP exploits
  • From: Nicob
• CPanel Multiple Cross Site Scription
  • From: Advisory
• Asp Scripter Products (cpLogin.asp) Remote SQL ByPass Injection Vulnerability
  • From: ajannhwt
• UltraSite 1.0 (update.asp) Remote SQL Injection Vulnerability
  • From: ajannhwt
• ELOG Web Logbook Remote Denial of Service Vulnerability
  • From: OS2A BTO
• Phpdebug 1.1.0 - Remote File Include by Firewall
  • From: Firewall1954
• Phpjobscheduler 3.0 - Multiple Remote File Include
  • From: Firewall1954
• ZDI-06-038: Citrix MetaFrame IMA Management Module Remote Heap Overflow
  • From: zdi-disclosures
• Digipass Go3 Token Dumper (at least for 2006)
  • From: fcollyer
• VBulletin DoS Exploit [ all Versions ]
  • From: root
• Web Interface remote file inclusion
  • From: navairum
• Re: Cross Site Scripting (XSS) Vulnerability in Netquery by "VIRtech"
  • From: rvirtue
• shambo2 Component For Mambo 4.5 Remote File Inclusion Exploit
  • From: crackers_child
• infinicart [ multiples injection sql & xss (post) ]
  • From: saps . audit
• XSS in Email Signature Script
  • From: miladkaleh
• [SECURITY] [DSA 1208-1] New bugzilla packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Re: Wordpress File Inclusion
  • From: emc3
• NuSchool 1.0 (CampusNewsDetails.asp) Remote SQL Injection Exploit
  • From: ajannhwt
• Re: feedsplitter considered harmful
  • From: wmodes
• NuStore 1.0 (Products.asp) Remote SQL Injection Vulnerability
  • From: ajannhwt
• Re: [ GLSA 200611-03 ] NVIDIA binary graphics driver: Privilege escalation vulnerability
  • From: Nick Boyce
• NuRems 1.0 Remote XSS/SQL Injection Exploit
  • From: ajannhwt
• NuCommunity 1.0 (cl_CatListing.asp) Remote SQL Injection Exploit
  • From: ajannhwt
• UStore 1.0 (detail.asp) Remote SQL Injection Vulnerability
  • From: ajannhwt
• AspPired2 Poll <= 1.0 (MoreInfo.asp) Remote SQL Injection Exploit
  • From: ajannhwt
• phpManta - Mdoc <= 1.0.2 (view-sourcecode.php) Local File Include Exploit
  • From: ajannhwt
• MyStats <=1.0.8 [injection sql, multiples xss, array & full path disclosure]
  • From: benjilenoob
• [MajorSecurity Advisory #33]ShopSystems - SQL Injection Issue
  • From: admin
• TOPSTORY BASIC Version 1.0 => Remote File Include Vulnerability
  • From: stormhacker
• Wordpress File Inclusion
  • From: vannovax
• Mega Mall [ multiples injection sql & full path disclosure ]
  • From: saps . audit
• [SECURITY] [DSA 1209-1] New trac packages fix cross-site request forgery
  • From: Moritz Muehlenhoff
• Exophpdesk V1.2 - Remote File Include
  • From: firewall1954
• PHPKit 1.6.1 RC2 (faq/faq.php) Remote SQL Injection Exploit
  • From: philipp . niedziela
• encapscms 0.3.6 - Remote File Include by Firewall
  • From: firewall1954
• ZDI-06-039: Marshal MailMarshal ARJ Extraction Directory Traversal Vulnerability
  • From: zdi-disclosures
• [x0n3-h4ck]Drake CMS v 0.2 XSS exploit
  • From: corrado . liotta
• [x0n3-h4ck]Essentia Web Server v.2.15 Buffer Overflow
  • From: corrado . liotta
• [ GLSA 200611-05 ] Netkit FTP Server: Privilege escalation
  • From: Raphael Marichez
• [OpenPKG-SA-2006.033] OpenPKG Security Advisory (openldap)
  • From: OpenPKG
• [ MDKSA-2006:206 ] - Updated Thunderbird packages fix multiple vulnerabilities
  • From: security
• [ MDKSA-2006:205 ] - Updated Firefox packages fix multiple vulnerabilities
  • From: security
• rPSA-2006-0207-1 openssh openssh-client openssh-server
  • From: rPath Update Announcements
• rPSA-2006-0206-1 firefox thunderbird
  • From: rPath Update Announcements
• rPSA-2006-0205-1 php php-mysql php-pgsql
  • From: rPath Update Announcements
• rPSA-2006-0204-1 kernel
  • From: rPath Update Announcements
• [ GLSA 200611-04 ] Bugzilla: Multiple Vulnerabilities
  • From: Matthias Geerdsen
• [security bulletin] HPSBMA02167 SSRT061262 rev.2 - HP OpenView Client Configuration Manager (CCM), Remote Unauthorized Arbitrary Code Execution or Denial of Service (DoS)
  • From: security-alert
• Wheatblog [multiple xss (post) & full path disclosure]
  • From: saps . audit
• Re: Multiple vulnerabilities in SAP Web Application Server 6.40 and7.00
  • From: Nicob
• [USN-379-1] texinfo vulnerability
  • From: Kees Cook
• LandShop Real Estate [multiple injection sql & xss]
  • From: saps . audit
• [SECURITY] [DSA 1207-1] New phpmyadmin packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• GNU gv Stack Overflow Vulnerability
  • From: Renaud Lifchitz
• bitweaver <=1.3.1 [injection sql (post) & xss (post)]
  • From: saps . audit
• [ MDKSA-2006:204 ] - Updated openssh packages fix vulnerability
  • From: security
• omnistar article manager [multiples injection sql]
  • From: saps . audit
• Call for papers: ARES 2007 submission deadline approaches in 2 weeks: 19-11-2006
  • From: Manh Tho
• Antwort: Joomla 1.0.11 Remote File Include
  • From: srunschke
• PhpMyChat Plus <= 1.9 Multiple Source Code Disclosure Vulnerabilities
  • From: ajannhwt
• FreeBSD Security Advisory FreeBSD-SA-06:24.libarchive
  • From: FreeBSD Security Advisories
• FreeWebshop <=2.2.2 [local file include & xss]
  • From: saps . audit
• PhpMyChat <= 0.14.5 Source Code Disclosure Vulnerability
  • From: ajannhwt
• [ MDKSA-2006:201 ] - Updated pam_ldap packages fix PasswordPolicyReponse coding error
  • From: security
• [ MDKSA-2006:198-1 ] - Updated imlib2 packages fix several vulnerabilities
  • From: security
• [OpenPKG-SA-2006.032] OpenPKG Security Advisory (openssh)
  • From: OpenPKG
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Secure Desktop
  • From: Cisco Systems Product Security Incident Response Team
• Immediacy .NET CMS possibly vulnerable to Cross Site Scripting through a malformed cookie
  • From: ProCheckUp Research
• [ MDKSA-2006:203 ] - Updated texinfo packages fix vulnerability
  • From: security
• [ MDKSA-2006:202 ] - Updated wv packages fix vulnerabilities
  • From: security
• Portix-PHP [login bypass & xss (post)]
  • From: saps . audit
• phpsatk => Remote File Include Vulnerability EXploit
  • From: h4ck3riran
• Speedwiki 2.0 Arbitrary File Upload Vulnerability
  • From: saps . audit
• Re: Hotmail and Windows Live Mail XSS Vulnerabilities
  • From: HASEGAWA Yosuke
• TSRT-06-13: HP OpenView Client Configuration Manager Device Code Execution Vulnerability
  • From: TSRT
• iDefense Security Advisory 11.08.06: Cisco Secure Desktop Privilege Escalation Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 11.08.06: IBM Lotus Domino 7 tunekrnl Multiple Vulnerabilities
  • From: iDefense Labs Security Advisories
• knowledgeBuilder v.2.2.php.NuLL-WDYL=> Remote File Include Vulnerability
  • From: h4ck3riran
• Y.A.N.S sql injection
  • From: navairum
• Lotus Notes pre-login User.ID key leak
  • From: Andrew Christensen
• Abarcar Realty Portal [injection sql]
  • From: saps . audit
• WFTPD Pro Server 3.23 Buffer Overflow
  • From: Joxean Koret
• DigiOz Guestbook version 1.7 Path Disclosure Vulnerability in list.php
  • From: Jesper Jurcenoks
• XSS in Kayako SupportSuite v3.00.32
  • From: hacker hackers
• [ GLSA 200611-03 ] NVIDIA binary graphics driver: Privilege escalation vulnerability
  • From: Raphael Marichez
• WarFTPd 1.82.00-RC11 Remote Denial Of Service
  • From: Joxean Koret
• Minimizing error cascades in vulnerability information management
  • From: Steven M. Christey
• [ MDKSA-2006:200 ] - Updated rpm packages fix vulnerability
  • From: security