Bugtraq

• Thread Index

• Secunia Research: IceWarp Web Mail Two File Inclusion Vulnerabilities
  • From: Secunia Research
• Re: Phorum 5.1.14 XSS SQL injection Vulnerability
  • From: Maurice Makaay
• Plesk Control Panel <= 8.0.0 XSS vulnerability
  • From: vuln . invent
• Calendar Module <= 1.5.7 Remote File Include Vulnerabilities
  • From: matdhule
• PHP Event Calendar versi 1.4 (path_to_calendar) Remote File Inclusion
  • From: chris_hasibuan
• Several updates in MS PowerPoint 0-day Vulnerability FAQ at SecuriTeam Blogs
  • From: Juha-Matti Laurio
• Re: Bybass HTTP ( extension files ) in ISA 2004
  • From: Thor (Hammer of God)
• Mercury Messenger
  • From: Hans Wolters
• MyBulletinBoard (MyBB) 1.1.5 'CLIENT-IP' sql injection
  • From: rgod
• Gracenote buffer overflow
  • From: MNV
• Re: [Full-disclosure] Re: Linux Kernel 2.6.x PRCTL Core Dump Handling - Local r00t Exploit ( BID 18874 / CVE-2006-2451 )
  • From: Jon Hart
• Re: Linux Kernel 2.6.x PRCTL Core Dump Handling -- Simple workaround
  • From: Lukasz Trabinski
• Re: Securing PHP or finding PHP alternatives (was: PHP security (or the lack thereof))
  • From: Meet Myself on the Internet
• Invision Power Board 2.1 <= 2.1.6 sql injection
  • From: rst
• Re: LAMP vs Microsoft
  • From: Joel Maslak
• Re: Linux Kernel 2.6.x PRCTL Core Dump Handling -- Simple workaround
  • From: Michael Shigorin
• Re: Securing PHP or finding PHP alternatives
  • From: Michael Shigorin
• Re: LAMP vs Microsoft
  • From: Bob Beck
• Re: Buddy Zone Version 1.0.1 - XSS
  • From: support
• Re: LAMP vs Microsoft
  • From: Darren Reed
• [OpenPKG-SA-2006.013] OpenPKG Security Advisory (mutt)
  • From: OpenPKG
• Re: Securing PHP or finding PHP alternatives (was: PHP security (or the lack thereof))
  • From: Matthias Kestenholz
• Fantastic Guestbook v2.0.1 Advisory
  • From: omnipresent
• Crtical Shockwave Embeded XSS Execution
  • From: spammeanddie
• Re: LAMP vs Microsoft
  • From: Bob Beck
• Re: phpbb 3.x sql injection (with global moderator rights)
  • From: bugtraq
• VBZooM <=V1.11 "sub-join.php" SQL Injection
  • From: Breeeeh
• Re: Securing PHP or finding PHP alternatives
  • From: Sheryl Coppenger
• SubberZ[Lite] - Remote File Include
  • From: ChironeX . FleckeriX
• Re: [ GLSA 200607-05 ] SHOUTcast server: Multiple vulnerabilities
  • From: Cyneox
• Microsoft PowerPoint 0-day Vulnerability FAQ document written
  • From: Juha-Matti Laurio
• VBZooM <=V1.11 " ignore-pm.php" SQL Injection
  • From: Breeeeh
• VBZooM <=V1.11 " reply.php" SQL Injection
  • From: Breeeeh
• MiniBB Forum <= 1.5a Remote File Include Vulnerabilities
  • From: matdhule
• RE: MIMESweeper For Web 5.X Cross Site Scripting
  • From: Erez Metula
• Re: LAMP vs Microsoft
  • From: Darren Reed
• Re: WordPress 2.0.3 SQL Error and Full Path Disclosure
  • From: nate
• Re: [Full-disclosure] ERNW Security Advisory 02/2006 - Buffer Overflow in sipXtapi (used in AOL Triton)
  • From: Mailinglists
• VBZooM "sendmail.php" SQL Injection
  • From: Breeeeh
• Phorum 5.1.14 XSS SQL injection Vulnerability
  • From: securityconnection
• Re: Webmin / Usermin Arbitrary File Disclosure Vulnerability exploit
  • From: José Parrella
• [SECURITY] Plain text password in Finjan Appliance 5100/8100 NG backup file
  • From: finde_schwachstelle
• Re: WordPress 2.0.3 SQL Error and Full Path Disclosure
  • From: jholguin
• Rocks Clusters <=4.1 local root
  • From: Xavier
• MyGallery "Room.php" SQL Injection
  • From: Breeeeh
• XSS phpBB 2.0.21 in administration
  • From: renatrix
• RE: Re: vBulletin 3.5.4 (install_path) Exploit
  • From: Robert Marquardt
• saphp "add.php" forumid Parameter SQL Injection
  • From: Breeeeh
• crashing firefox <= 1.5.0.4
  • From: reywen
• Linux sys_prctl LKM based hotfix
  • From: Abhisek Datta
• Re: Securing PHP or finding PHP alternatives
  • From: SkyFlash
• Kerio Terminating 'kpf4ss.exe' using internal runtime error Vulnerability
  • From: David Matousek
• Norton Insufficient protection of Norton service registry keys
  • From: David Matousek
• MS Power Point Multiple Vulnerabilities - (memory corruption) POC
  • From: naveed
• MS Power Point Multiple Vulnerabilities - (mso.dll) POC
  • From: naveed
• MS Power Point Multiple Vulnerabilities (powerpnt.exe)- POC
  • From: naveed
• Bybass HTTP ( extension files ) in ISA 2004
  • From: medozero
• Re: Linux Kernel 2.6.x PRCTL Core Dump Handling -- Simple workaround
  • From: Hugo van der Kooij
• Re: Photocycle v1.0 - XSS
  • From: securityfocus
• EEYE: McAfee ePolicy Orchestrator Remote Compromise
  • From: eEye Advisories
• Linux Kernel 2.6.x PRCTL Core Dump Handling -- Simple workaround
  • From: Caveo Internet BV - Security
• Microsoft Works - Buffer Overflows / Denial of Service (DoS)-Vulnerabilities
  • From: Benjamin Tobias Franz
• Phorum 5.1.15 security release (fixes "PHORUM 5 arbitrary local inclusion")
  • From: Maurice Makaay
• IE <= 6 DoS vulnerability
  • From: jonasschaub
• Re: WebEx Downloader Plug-in Multiple Vulnerabilities + rant
  • From: Mark Rowe
• rPSA-2006-0122-2 kernel
  • From: Justin M. Forbes
• [security bulletin] HPSBUX02120 SSRT051057 rev.2 - HP-UX Local Denial of Service (DoS)
  • From: security-alert
• perForms <= 1.0 ([mosConfig_absolute_path]) Remote File Inclusion
  • From: endeneu
• Re: [ECHO_ADV_38$2006] Multiple Mambo/Joomla Component Remote File Include Vulnerabilities
  • From: Joxean Koret
• [ MDKSA-2006:123 ] - Updated kernel packages fixes multiple vulnerabilities
  • From: security
• phpbb 3.x sql injection (with global moderator rights)
  • From: rgod
• PHORUM 5 arbitrary local inclusion
  • From: rgod
• flatnuke <= 2.5.7 arbitrary php file upload
  • From: rgod
• [ MDKSA-2006:122 ] - Updated php packages fix multiple vulnerabilities
  • From: security
• [USN-318-1] libtunepimp vulnerability
  • From: Martin Pitt
• Flipper Poll <= 1.1.0 Remote File Inclusion Vulnerability
  • From: x0r0n
• Orbitmatrix PHP Script v1.0
  • From: luny
• ScozNews Final-Php <=1.1 Remote File Inclusion Vulnerability
  • From: x0r0n
• Photocycle v1.0 - XSS
  • From: luny
• [USN-317-1] zope2.8 vulnerability
  • From: Martin Pitt
• SYMSA-2006-004 (Full Details): Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution
  • From: research
• RE: WordPress 2.0.3 SQL Error and Full Path Disclosure
  • From: Aaron Newman
• [ECHO_ADV_38$2006] Multiple Mambo/Joomla Component Remote File Include Vulnerabilities
  • From: matdhule
• Re: # MHG Security Team --- PHPAskIt v2.0.1 Remote File Inc.
  • From: amelie
• [ MDKSA-2006:121 ] - Updated xine-lib packages fix buffer overflow vulnerability
  • From: security
• Linux Kernel 2.6.x PRCTL Core Dump Handling - Local r00t Exploit ( BID 18874 / CVE-2006-2451 )
  • From: Roman Medina-Heigl Hernandez
• SMB Information Disclosure Vulnerability
  • From: Avert
• [ MDKSA-2006:117-1 ] - Updated libmms packages fix buffer overflow vulnerability
  • From: security
• FLV Players Multiple Input Validation Vulnerabilities
  • From: xzerox
• NSFOCUS SA2006-05 : Microsoft Excel SELECTION Record Memory Corruption Vulnerability
  • From: NSFOCUS Security Team
• Re: # MHG Security Team --- PHPAskIt v2.0.1 Remote File Inc.
  • From: Amelie
• Re: WordPress 2.0.3 SQL Error and Full Path Disclosure
  • From: zck zck
• New CVE number states Excel Style handling as a separate issue
  • From: Juha-Matti Laurio
• NSFOCUS SA2006-06 : Microsoft Excel COLINFO Record Buffer Overflow Vulnerability
  • From: NSFOCUS Security Team
• [ MDKSA-2006:120 ] - Updated samba packages fix DoS vulnerability
  • From: security
• Lazarus Guestbook Cross Site Scripting Vulnerabilities
  • From: simo64
• RE: Old vulnerable sotwares collection
  • From: John Rigali
• Re: Browser bugs hit IE, Firefox today (SANS)
  • From: 3CO
• S21Sec-032-en: Vulnerability in Fatwire Content Server
  • From: labs
• TOPo v.2.2.178 Account Reset
  • From: darkz . gsa
• [SECURITY] [DSA 1108-1] New mutt packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• NSFOCUS SA2006-04 : Microsoft Office GIF Filter Buffer Overflow Vulnerability
  • From: NSFOCUS Security Team
• Microsoft Excel Array Index Error Remote Code Execution
  • From: Sowhat
• Re: [ANNOUNCEMENT] Samba 3.0.1 - 3.0.22: memory exhaustion DoS against smbd
  • From: Gerald (Jerry) Carter
• Fuzzing Microsoft Office
  • From: naveed
• rPSA-2006-0128-1 samba samba-swat
  • From: Justin M. Forbes
• Cisco Security Advisory: Cisco Intrusion Prevention System Malformed Packet Denial of Service
  • From: Cisco Systems Product Security Incident Response Team
• SQuery <= 4.5(libpath) Remote File Inclusion Exploit
  • From: SHiKaA-
• Re: ATutor 1.5.3 Cross Site Scripting
  • From: info
• [USN-314-1] samba vulnerability
  • From: Martin Pitt
• [ MDKA-2006:119 ] - Updated ppp packages fix plugin vulnerability
  • From: security
• Cisco Security Advisory: Cisco Router Web Setup Ships with Insecure Default IOS Configuration
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Multiple Cisco Unified CallManager Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• [USN-315-1] libmms, xine-lib vulnerabilities
  • From: Martin Pitt
• [USN-316-1] installer vulnerability
  • From: Martin Pitt
• [USN-313-1] OpenOffice.org vulnerabilities
  • From: Martin Pitt
• Re: LAMP vs Microsoft
  • From: Steven M. Christey
• ZDI-06-022: Microsoft Office Excel File Rebuilding Code Execution Vulnerability
  • From: zdi-disclosures
• TSRT-06-02: Microsoft SRV.SYS Mailslot Ring0 Memory Corruption Vulnerability
  • From: Tippingpoint Security Research Team
• CYBSEC - Security Pre-Advisory: Microsoft Windows DHCP Client Service Remote Buffer Overflow
  • From: Mariano Nuñez Di Croce
• SYMSA-2006-007: Microsoft Office Malformed String Parsing Vulnerability
  • From: research
• Re: Securing PHP or finding PHP alternatives
  • From: Crispin Cowan
• [ GLSA 200607-05 ] SHOUTcast server: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200607-02 ] FreeType: Multiple integer overflows
  • From: Sune Kloppenborg Jeppesen
• Re: LAMP vs Microsoft
  • From: Bob Beck
• Juniper Networks DX Web Administration Persistent System Log XSS Vulnerability
  • From: Darren Bounds
• Re: LAMP vs Microsoft
  • From: Jarrod Frates
• randshop <= 1.1.x (index.php) Remote File Inclusion Vulnerability
  • From: Saudi . Unix
• Local file inclusion in Farsinews3.0BETA1
  • From: armin390
• Re: Mico crashes when contected with wrong IOR / DoS
  • From: tuergeist
• [SECURITY] [DSA 1107-1] New GnuPG packages fix denial of service
  • From: Martin Schulze
• [ANNOUNCEMENT] Samba 3.0.1 - 3.0.22: memory exhaustion DoS against smbd
  • From: Gerald (Jerry) Carter
• Re: Mico crashes when contected with wrong IOR / DoS
  • From: Karel Gardas
• Re: Windows Explorer URL File format overflow
  • From: naveed
• Webmin / Usermin Arbitrary File Disclosure Vulnerability exploit
  • From: Alexander Hristov
• Old vulnerable sotwares collection
  • From: Jerome Athias
• Re: Mico crashes when contected with wrong IOR / DoS
  • From: Karel Gardas
• Re: PHP security (or the lack thereof)
  • From: Darren Reed
• Digital Armaments Security Advisory 10.07.2006: Flexwath Authorization Bypassing and XSS Vulnerability
  • From: info
• RE: WebEx Downloader Plug-in Multiple Vulnerabilities + rant
  • From: Web Ex
• Re: Re: vBulletin 3.5.4 (install_path) Exploit
  • From: mikathebest2003
• MS Word Unchecked Boundary Condition Vulnerability
  • From: naveed
• CC announces new Rootkit help forum insync with Book
  • From: Paul Laudanski
• RE: MIMESweeper For Web 5.X Cross Site Scripting
  • From: Erez Metula
• [USN-312-1] gimp vulnerability
  • From: Martin Pitt
• Re: Invision Power Board v1.3 Final SQL Injection
  • From: mattmecham
• Re: galleria <= 1.0 Remote File Inclusion Vulnerability
  • From: counterpoint
• phpPolls 1.0.3 Administration ByPass
  • From: alp_eren
• [SECURITY] [DSA 1106-1] New ppp packages fix privilege escalation
  • From: Martin Schulze
• Re: [ MDKSA-2006:116 ] - Updated kernel packages fixes multiple vulnerabilities
  • From: Paul Starzetz
• [ECHO_ADV_37$2006] pc_cookbook Mambo/Joomla Component <= v0.3 Remote File Include Vulnerabilities
  • From: matdhule
• Re: rPSA-2006-0122-1 kernel
  • From: Paul Starzetz
• ERNW Security Advisory 02/2006 - Buffer Overflow in sipXtapi (used in AOL Triton)
  • From: mozilla
• Re: [KAPDA::#46] - AjaxPortal Authentication Bypass
  • From: earthquake
• LAMP vs Microsoft
  • From: Darren Reed
• Re: RE: Invision Vulnerabilities, including remote code execution
  • From: mattmecham
• MT rmcek Toplist v2.2 Version Microsoft Access Driver ( MDB ) Download
  • From: StorMBoY
• [ GLSA 200607-04 ] PostgreSQL: SQL injection
  • From: Sune Kloppenborg Jeppesen
• Re: Mico crashes when contected with wrong IOR / DoS
  • From: tuergeist
• Graffiti Forums v1.0 SQL Injection Vulnerabilities
  • From: paisterist . nst
• Re: Invision Power Board "v1.X & 2.X" SQL Injection
  • From: mattmecham
• Securing PHP or finding PHP alternatives (was: PHP security (or the lack thereof))
  • From: Gezim Hoxha
• Webvizyon Portal 2006 Version SQL Injection
  • From: StorMBoY
• [ GLSA 200607-03 ] libTIFF: Multiple buffer overflows
  • From: Sune Kloppenborg Jeppesen
• RW::Download stats.php Remote File Inc.
  • From: StorMBoY
• ATutor 1.5.3 Cross Site Scripting
  • From: securityconnection
• [KAPDA::#46] - AjaxPortal Authentication Bypass
  • From: alireza hassani
• Re: [Bugtraq] Re: flock d0s exploit remote. beta 1 (v0.7)
  • From: flockoyd
• PAPOO <=3RC3 sql injection / admin credentials disclosure
  • From: rgod
• [ MDKSA-2006:118 ] - Updated OpenOffice.org packages fix various vulnerabilities
  • From: security
• ZDI-06-021: WebEx Downloader Plug-in Code Execution Vulnerability
  • From: zdi-disclosures
• Pivot <=1.30rc2 privilege escalation / remote commands execution
  • From: rgod
• IBM AIX Security contact?
  • From: Joxean Koret
• lintah_|adv|_01@2006>=========<[Aura-CMS v1.62]<===>[XSS vulnerable]&[bug]
  • From: k07iX
• [SECURITY] [DSA 1105-1] New xine-lib packages fix denial of service
  • From: Martin Schulze
• HostingController: An attacker can gain reseller privileges and after that can gain admin privileges
  • From: Irsdl
• Sport-slo.net Guestbook v1.0
  • From: luny
• [ MDKSA-2006:117 ] - Updated libmms packages fix buffer overflow vulnerability
  • From: security
• PBL Guestbook <= 1.32 XSS & SQL Querys Vulnerabilities
  • From: paisterist . nst
• Format string bug in Sparklet 0.9.4try3
  • From: Luigi Auriemma
• rPSA-2006-0122-1 kernel
  • From: Justin M. Forbes
• Possible code execution in Kaillera 0.86
  • From: Luigi Auriemma
• [ECHO_ADV_36$2006] ExtCalendar <== v2.0 Remote File Include Vulnerabilities
  • From: matdhule
• ATutor : Cross-Site Scripting Vulnerabilities
  • From: bug@xxxxxxxxxxxxxxx
• PHP-Blogger Multiple Cross Site Scripting Vulnerabilities
  • From: OS2A BTO
• WebEx Downloader Plug-in Multiple Vulnerabilities + rant
  • From: Mark Litchfield
• TSLSA-2006-0040 - kernel
  • From: Trustix Security Advisor
• Mico crashes when contected with wrong IOR / DoS
  • From: tuergeist
• McAfee VirusScan Enterprise 8.0.0 Buffer Overflow
  • From: johndoe1529
• Various heap and stack overflow bugs in AdPlug library 2.0 (CVS 04 Jul 2006)
  • From: Luigi Auriemma
• Major updates to Excel 0-day Vulnerability FAQ at SecuriTeam Blogs
  • From: Juha-Matti Laurio
• Re: IBM AIX Security contact?
  • From: Troy Bollinger
• Re: vBulletin 3.5.4 (install_path) Exploit
  • From: scott
• [USN-310-1] ppp vulnerability
  • From: Martin Pitt
• [USN-309-1] libmms vulnerability
  • From: Martin Pitt
• [USN-308-1] shadow vulnerability
  • From: Martin Pitt
• Re: vBulletin 3.5.4 (install_path) Exploit
  • From: mikathebest2003
• Public Advisory: Horde 3.1.1, 3.0.10 Multiple Security Issues
  • From: Moritz Naumann
• [SECURITY] [DSA 1104-2] New OpenOffice.org packages fix arbitrary code execution
  • From: Martin Schulze
• vBulletin 3.5.4 (install_path) Exploit
  • From: CarcaBotx
• TigerTom Scripts
  • From: luny
• [ MDKSA-2006:116 ] - Updated kernel packages fixes multiple vulnerabilities
  • From: security
• Re: PHP security (or the lack thereof)
  • From: Dan Falconer
• BLOG:CMS 4.1.0 SQL injection File Include Vulnerability
  • From: securityconnection
• sNews 1.3 XSS SQL
  • From: securityconnection
• Touch arbitrary file execute vulnerability
  • From: Alex Park
• Windows Explorer URL File format overflow
  • From: nanika
• Shopping Cart V0.9
  • From: luny
• Re: Browser bugs hit IE, Firefox today (SANS)
  • From: Paul Szabo
• Invision Power Board "v1.X & 2.X" SQL Injection
  • From: CrAzY . CrAcKeR
• [Bugtraq] Re: flock d0s exploit remote. beta 1 (v0.7)
  • From: .myke lyons
• Re: WordPress 2.0.3 SQL Error and Full Path Disclosure
  • From: Jaroslaw Sajko
• Re: file include exploits in randshop v1.2
  • From: Rainer Duffner
• PhpWebGallery Cross Site Scripting Vulnerability
  • From: iss4m . h
• file include exploits in randshop v1.2
  • From: black code
• [scip_Advisory 2352] F5 FirePass 4100 prior 6.x multiple Cross Site Scripting
  • From: Marc Ruef
• Re: WordPress 2.0.3 SQL Error and Full Path Disclosure
  • From: James Davis
• galleria <= 1.0 Remote File Inclusion Vulnerability
  • From: ineal
• [scip_Advisory 2351] Kyberna AG ky2help various form fields SQL Injection
  • From: Marc Ruef
• Re: Browser bugs hit IE, Firefox today (SANS)
  • From: Thor Larholm
• imgsvr dos exploit by n00b
  • From: co296
• TBE 4.0 XSS
  • From: securityconnection
• ZoneAlarm Insufficient protection of registry key 'VETFDDNT\Enum' Vulnerability
  • From: David Matousek
• [ GLSA 200607-01 ] mpg123: Heap overflow
  • From: Sune Kloppenborg Jeppesen
• Call For Papers - No cON Name 2006 Edition Spain
  • From: deese
• 5 php scripts remote database password disclosure
  • From: gmdarkfig
• Excel 2000/XP/2003 Style 0day POC
  • From: nanika
• Contact for nhl.com
  • From: C. Hamby
• Invision Power Board v1.3 Final SQL Injection
  • From: Breeeeh
• QTOFileManager 1.0
  • From: securityconnection
• popup Vacation Rentals[calendar_year.php] SQL Injection
  • From: BoNy-m
• Multiple vulnerabilities in TK8 Safe v.3.0.5
  • From: clappymonkey
• Re: [Full Disclosure] [Kil13r-SA-20060701-2] MoniWiki 1.1.1 Cross-Site Scripting Vulnerability
  • From: mac68k
• free QBoard v1.1 Multiple Remote File include
  • From: KARKOR23
• Pearl Products Multiple Remote File Inclusion
  • From: xzerox
• plume-cms v1.0.4 Multiple Remote File include
  • From: KARKOR23
• WordPress 2.0.3 SQL Error and Full Path Disclosure
  • From: xzerox
• [MajorSecurity #19] AutoRank <= 5.01 - Multiple XSS and cookie disclosure
  • From: admin
• call for papers - IT Underground, Italy 2006
  • From: it_underground
• Glossaire<<--v1.7 Remote File Include
  • From: CrAzY . CrAcKeR
• Php-Fusion (Xss) With Avatar Upload
  • From: zeberus_
• Whitepaper: IT (in)security implementation in a real world example
  • From: Denis Jedig
• SturGeoN Upload v1 Remote Command Execution Exploit
  • From: gmdarkfig
• Sql injection in Diesel joke site script
  • From: black code
• SmS Script SQL Injection
  • From: Breeeeh
• Internet Crna Gora SQL Injection
  • From: Breeeeh
• OPERA Web Browser 9 Denial OF Service
  • From: y3dips
• DEF CON 14: Speakers Selected and more.
  • From: The Dark Tangent
• phpMyAdmin : Cross-Site Scripting Vulnerability
  • From: bug@xxxxxxxxxxxxxxx
• mAds v1.0
  • From: lunY
• Buddy Zone Version 1.0.1 - XSS
  • From: luny
• [security bulletin] HPSBUX02103 SSRT5953 rev.3 - HP-UX passwd(1) Local Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBUX02128 SSRT5996 - rev.1 HP-UX mkdir(1) Local Unauthorized Access
  • From: security-alert
• Re: Msie 7.0 beta Crash
  • From: mike
• Re: Browser bugs hit IE, Firefox today (SANS)
  • From: Alex Potter
• RE: [Full-disclosure] Browser bugs hit IE, Firefox today (SANS)
  • From: Schmehl, Paul L
• Re: PHP security (or the lack thereof)
  • From: Kevin Waterson
• phpBB 2.0.21 Full Path Disclosure
  • From: xzerox
• Re: [Full-disclosure] Re[2]: Is Windows TCP/IP source routing PoC code available?
  • From: 3APA3A
• News <= 5.2 XSS, SQL Injection, Full Path Disclosure
  • From: gmdarkfig
• NewsPHP 2006 PRO XSS SQL injection Vulnerability
  • From: securityconnection
• Hobbit monitor: Security issue with Hobbit 4.2-beta client
  • From: Henrik Stoerner
• My smiles "browse.php" SQL Injection
  • From: CrAzY . CrAcKeR
• Module's Name "Classifieds" SQL Injection
  • From: CrAzY . CrAcKeR
• CDJ<<--V NITKID 2.0 "category.php" SQL Injection
  • From: CrAzY . CrAcKeR
• MyNewsGroups<<--v. 0.6 "tree.php" SQL Injection
  • From: CrAzY . CrAcKeR
• FreeHost "misc.php & news.php" SQL Injection
  • From: CrAzY . CrAcKeR
• ZDI-06-020: Apple iTunes AAC File Parsing Integer Overflow Vulnerability
  • From: zdi-disclosures
• ISC: Firefox immune to outerHTML flaw in MSIE [Was: Browser bugs hit IE, Firefox]
  • From: Juha-Matti Laurio
• [Kil13r-SA-20060701-3] Massting Cross-Site Scripting Vulnerability
  • From: mac68k
• [Kil13r-SA-20060701-2] MoniWiki 1.1.1 Cross-Site Scripting Vulnerability
  • From: mac68k
• [Kil13r-SA-20060701-1] Ahnlab Search Cross-Site Scripting Vulnerability
  • From: mac68k
• Zen-Cart 1.3.0.2 Full Path Disclosure
  • From: o . y . 6
• [ GLSA 200606-30 ] Kiax: Arbitrary code execution
  • From: Sune Kloppenborg Jeppesen
• libwmf integer/heap overflow
  • From: sean
• [SECURITY] [DSA 1104-1] New OpenOffice.org packages fix several vulnerabilities
  • From: Martin Schulze
• ezWaiter v3.0 - XSS
  • From: luny
• Re: [Full-disclosure] Browser bugs hit IE, Firefox today (SANS)
  • From: Juha-Matti Laurio
• Browser bugs hit IE, Firefox today (SANS)
  • From: Bill Stout
• rPSA-2006-0120-1 gnupg
  • From: Justin M. Forbes
• Msie 7.0 beta Crash
  • From: Mr . Niega
• [ MDKSA-2006:114 ] - Updated libwmf packages fixes embedded GD vulnerability
  • From: security
• [security bulletin] HPSBUX02122 SSRT061158 rev.2 - HP-UX Mozilla Remote Execution of Arbitrary Code, Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBTU02125 SSRT061105 rev.1 - HP Tru64 UNIX Running Perl 5.8.2 and earlier, Local Unauthorized Code Execution
  • From: security-alert
• Novell Security Announcement NOVELL-SA:2006:001
  • From: Jim Short
• Multiple Vulnerabilities in PatchLink Update Server 6
  • From: Chris Steipp
• rPSA-2006-0116-1 mutt
  • From: Justin M. Forbes
• Novell Security contact address change
  • From: Roman Drahtmueller
• Digital Armaments Security Advisory 29.06.2006: Siemens Speedstream Wireless Router Password Protection Bypass Vulnerability
  • From: info
• [ GLSA 200606-28 ] Horde Web Application Framework: XSS vulnerability
  • From: Sune Kloppenborg Jeppesen
• Secunia Research: phpRaid SQL Injection and File Inclusion Vulnerabilities
  • From: Secunia Research
• [ MDKSA-2006:115 ] - Updated mutt packages fix buffer overflow vulnerability
  • From: security
• Softbiz Banner Exchange 1.0 XSS
  • From: securityconnection
• CSRF in Nuked Klan 1.7 SP4.2
  • From: blwood
• [ GLSA 200606-29 ] Tikiwiki: SQL injection and multiple XSS vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• DMA[2006-0628a] - 'Apple OSX launchd unformatted syslog() vulnerability'
  • From: K F (lists)
• [KAPDA]http://myimei.com/security/2006-06-24/mybb104archive-modelight-parameter-extractionvarable-overwriting.html
  • From: addmimistrator
• Re: PHP security (or the lack thereof)
  • From: Darren Reed
• Re: Files and cvars overwriting in Quake 3 engine (1.32c / rev 803 / ...)
  • From: Luigi Auriemma
• PHPClassifieds General
  • From: luny
• Layered Defense Advisory: Format String Vuln in CA eTrust
  • From: dh
• Presentation: AT&T ISNN - "Case Studies in Finding Previously Unknown Vulnerabilities in Web Applications."
  • From: Kenneth F. Belva
• Secunia Research: Opera SSL Certificate "Stealing" Weakness
  • From: Secunia Research
• Re: PHP security (or the lack thereof)
  • From: Tonnerre Lombard
• [ MDKSA-2006:113 ] - Updated tetex packages fix embedded GD vulnerabilities
  • From: security
• RE: [funsec] Microsoft's Real Test with Vista is Vulnerabilities
  • From: Larry Seltzer
• Cisco Security Advisory: Access Point Web-Browser Interface Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Re: [funsec] Microsoft's Real Test with Vista is Vulnerabilities
  • From: thomas48
• Re: [MajorSecurity #18] Ralf Image Gallery <=0.7.4 - Multiple XSS, Remote File Include and directory traversal vulnerabilities
  • From: Ralf
• RE: PHP security (or the lack thereof)
  • From: Geo.
• [OpenPKG-SA-2006.011] OpenPKG Security Advisory (png)
  • From: OpenPKG
• Microsoft's Real Test with Vista is Vulnerabilities
  • From: Gadi Evron
• Cisco Security Advisory: Multiple Vulnerabilities in Wireless Control System
  • From: Cisco Systems Product Security Incident Response Team
• PHP iCalendar Cross Site Scripting
  • From: botan
• MKPortal 1.0.1 Final ($ind) File Include Vulnerability (perl)
  • From: stormhacker
• Re[2]: Is Windows TCP/IP source routing PoC code available?
  • From: "Ìèíàåâ_Àíäðåé"
• AzDGDatingPlatinum<<--v1.1.0 "view.php" SQL Injection
  • From: CrAzY . CrAcKeR
• SyScan'06 Highlight - Is Phone Banking Safe?
  • From: thomas48
• [ GLSA 200606-27 ] Mutt: Buffer overflow
  • From: Sune Kloppenborg Jeppesen
• [USN-307-1] mutt vulnerability
  • From: Martin Pitt
• BLOG:CMS <= 4.0.0k sql injection
  • From: rgod
• Secunia Research: DeluxeBB SQL Injection and File Inclusion Vulnerabilities
  • From: Secunia Research
• PHP-Nuke Module's Name Sections<<--V3 SQL Injection
  • From: CrAzY . CrAcKeR
• Re: Calendar ( Provided by Codewalkers ) - SQL Injection
  • From: krustevs
• [ MDKSA-2006:114 ] - Updated libwmf packages fixes embedded GD vulnerability
  • From: security
• [ MDKSA-2006:112 ] - Updated gd packages fix DoS vulnerability.
  • From: security
• vCard PRO SQL Injection
  • From: CrAzY . CrAcKeR
• [KAPDA]MyBB 1.1.4~function_post.php~XSS Attack In URL tag
  • From: addmimistrator
• smartsite cms v1.0 Remote File include
  • From: KARKOR23
• [Kil13r-SA-20060628] Hanaro Search Cross-Site Scripting Vulnerability
  • From: mac68k
• Files and cvars overwriting in Quake 3 engine (1.32c / rev 803 / ...)
  • From: Luigi Auriemma
• CAID 34325 - CA ITM, eAV, ePP scan job description field format string vulnerability
  • From: Williams, James K
• [Kurdish Security # 10 ] MF Piadas 1.0 Remote File Include Vulnerability
  • From: botan
• SUSE Security Announcement: freetype2 (SUSE-SA:2006:037)
  • From: Thomas Biege
• RE: PHP security (or the lack thereof)
  • From: Geo.
• Re: Is Windows TCP/IP source routing PoC code available?
  • From: 3APA3A
• Re: PHP security (or the lack thereof)
  • From: Ronald Chmara
• Re: Re: PHP security (or the lack thereof)
  • From: nabiy
• Re: XSS in Cpanel 10
  • From: bug
• Re: [MajorSecurity #18] Ralf Image Gallery <=0.7.4 - Multiple XSS, Remote File Include and directory traversal vulnerabilities
  • From: Marc MERLIN
• [Kurdish Security # 11] SiteBar Cross-Site Scripting
  • From: botan
• phpvillage "funshow.php" SQL Injection
  • From: CrAzY . CrAcKeR
• CrisoftRicette<<--1.0pre15b Remote File Inclusion
  • From: CrAzY . CrAcKeR
• SYMSA-2006-006: Lotus Domino SMTP Based Denial of Service
  • From: research
• Re: [ECHO_ADV_34$2006] W-Agora (Web-Agora) <= 4.2.0 (inc_dir) Remote File Inclusion
  • From: Steven M. Christey
• [SECURITY] [DSA 1103-1] New Linux kernel 2.6.8 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [USN-305-1] OpenLDAP vulnerability
  • From: Martin Pitt
• [USN-306-1] MySQL 4.1 vulnerability
  • From: Martin Pitt
• Usenet Script v0.5
  • From: luny
• Windows Live Messenger 8.0 ( Contact List *.ctt ) Heap Overflow
  • From: Alexander Hristov
• Jaws <= 0.6.2 'Search gadget' SQL injection
  • From: rgod
• error_log() Safe Mode Bypass PHP 5.1.4 and 4.4.2
  • From: cxib
• Re: Sendmail MIME DoS vulnerability
  • From: Claus Assmann
• Winged Gallery v1.0
  • From: luny
• Re: PHP security (or the lack thereof)
  • From: Glynn Clements
• Re: Bypassing of web filters by using ASCII
  • From: Hubert Seiwert
• Re: Bypassing of web filters by using ASCII
  • From: Balazs Attila-Mihaly (Cd-MaN)
• Taking Over Laptops by Fuzzing Wireless Drivers
  • From: Gadi Evron
• Re: PHP security (or the lack thereof)
  • From: Tobias J. Kreidl
• Universal Hooker - Tool release
  • From: Hernan Ochoa
• Re: PHP security (or the lack thereof)
  • From: Darren Reed
• Amazon, MSN vulns and.. Yes, we know! Most sites have vulnerabilities
  • From: Gadi Evron
• [OpenPKG-SA-2006.010] OpenPKG Security Advisory (gnupg)
  • From: OpenPKG
• OpenGuestbook Cross Site Scripting & SQL Injection
  • From: simo64
• Amazon and Msn vulnerabilities
  • From: dcrab
• Re: Opera 9 DoS PoC
  • From: Eric Furman
• Re: Opera 9 DoS PoC
  • From: Bastian Ahrens
• Undisclosed cross site scripting vulnerabilities in domaintools.com - requesting contacts
  • From: admin
• Re: PHP security (or the lack thereof)
  • From: Daniel Hulme
• RE: Bypassing of web filters by using ASCII
  • From: RSnake
• Mailenable SMTP Service DoS
  • From: db0
• GlobeTrotter Mobility Manager - security issue
  • From: dzelek
• RE: Bypassing of web filters by using ASCII
  • From: Amit Klein (AKsecurity)
• Re: Linux VNC evil client patch - BID 17978
  • From: embyte
• Re: MS Excel Remote Code Execution POC Exploit
  • From: naveed
• [KAPDA]MyBB1.1.3~Option update for code buttons~Sql Injection Admin Access
  • From: addmimistrator
• Re: Bypassing of web filters by using ASCII
  • From: David Huecking
• [ MDKSA-2006:111 ] - Updated MySQL packages fixes authorized user DoS(crash) vulnerability.
  • From: security
• Re: PHP security (or the lack thereof)
  • From: Ronald Chmara
• Re: Bypassing of web filters by using ASCII
  • From: Vincent Archer
• Re: flock d0s exploit remote. beta 1 (v0.7)
  • From: Chris Rothecker
• Re: vBulletin<<--v3.5.X "member.php" Cross Site Scripting
  • From: scott
• Re: PHP security (or the lack thereof)
  • From: Mrten
• Re: PHP security (or the lack thereof)
  • From: Matthias Kestenholz
• Re: PHP security (or the lack thereof)
  • From: Paul Schmehl
• RE: Bypassing of web filters by using ASCII
  • From: James C. Slora Jr.
• [ GLSA 200606-26 ] EnergyMech: Denial of Service
  • From: Thierry Carrez
• [ GLSA 200606-25 ] Hashcash: Possible heap overflow
  • From: Thierry Carrez
• XSS in Cpanel 10
  • From: preth00nker
• DeluxeBB 1.07 Create admin Exploit
  • From: Hessamx
• [USN-304-1] gnupg vulnerability
  • From: Martin Pitt
• Planetnews Authecnication Admin ByPass
  • From: alp_eren
• [SECURITY] [DSA 1102-1] New pinball packages fix privilege escalation
  • From: Steve Kemp
• Claroline Cross-Site Scripting Vulnerabilities
  • From: bug@xxxxxxxxxxxxxxx
• RE: PHP security (or the lack thereof)
  • From: Geo.
• Re: Opera 9 DoS PoC
  • From: Laurent
• [Kurdish Security # 9] MyMail Directory Traversal And XSS Attacking Vulnerability
  • From: botan
• ERNW Security Advisory 01/2006
  • From: mozilla
• Re: Cisco Secure ACS Weak Session Management Vulnerability
  • From: Clayton Kossmeyer
• Softbiz Dating 1.0 SQL injection
  • From: securityconnection
• Re: Re: MS Excel Remote Code Execution POC Exploit
  • From: Juha-Matti Laurio
• WBB<<---v2.0 RC2 "newthread.php" SQL Injection
  • From: CrAzY . CrAcKeR
• Re: Opera 9 DoS PoC
  • From: Bruno Lustosa
• Re: PHP security (or the lack thereof)
  • From: Geo.
• Re: Sendmail MIME DoS vulnerability
  • From: Gadi Evron
• [Kil13r-SA-20060622-2] Namo DeepSearch 4.5 Cross-Site Scripting Vulnerability
  • From: mac68k
• Re: Bypassing of web filters by using ASCII
  • From: Thor (Hammer of God)
• phpBlueDragon CMS 2.9.1 multiple remote file inclusion vuln
  • From: rozowa . landrynka
• SYMSA-2006-005
  • From: research
• WBB<<---v2.3.1"report.php" SQL Injection
  • From: CrAzY . CrAcKeR
• [ECHO_ADV_34$2006] W-Agora (Web-Agora) <= 4.2.0 (inc_dir) Remote File Inclusion
  • From: the_day
• Re: PHP security (or the lack thereof)
  • From: john mullee
• Re: PHP security (or the lack thereof)
  • From: Crispin Cowan
• Calendar ( Provided by Codewalkers ) - SQL Injection
  • From: Silitix
• [KAPDA]MyBB1.1.3~Option update for code buttons~Sql Injection Admin Access
  • From: addmimistrator
• Re: Opera 9 DoS PoC
  • From: Darren Clarke
• WBB<<---v1.2 "showmods.php" SQL Injection
  • From: CrAzY . CrAcKeR
• Dating biz@ dating script v1.0 - XSS
  • From: luny
• productcart soltan_defacer
  • From: soltan_defacer
• Re: Digital Armaments July-August Hacking Challange: Microsoft
  • From: Alexander Sotirov
• rPSA-2006-0110-1 kernel
  • From: Justin M. Forbes
• Linux VNC evil client patch - BID 17978
  • From: embyte
• DREAMACCOUNT V3.1 Remote Command Execution Exploit
  • From: KARKOR23
• [Kil13r-SA-20060622-1] NetSoft SmartNet 2.0 Cross-Site Scripting Vulnerability
  • From: mac68k
• [ GLSA 200606-24 ] wv2: Integer overflow
  • From: Stefan Cornelius
• Re: Re: PHP security (or the lack thereof)
  • From: nabiy
• Re: Bypassing of web filters by using ASCII
  • From: Amit Klein (AKsecurity)
• Cisco Secure ACS Weak Session Management Vulnerability
  • From: Darren Bounds
• Dating Agent PRO 4.7.1 Vulnerability
  • From: securityconnection
• Trend Micro Control Manager (TMCM) Persistent XSS Vulnerability
  • From: Darren Bounds
• aeDating 4.1 XSS
  • From: securityconnection
• TSLSA-2006-0037 - multi
  • From: Trustix Security Advisor
• RE: Bypassing of web filters by using ASCII
  • From: James C. Slora Jr.
• [security bulletin] HPSBUX02127 SSRT051056 - rev.1 HP-UX Kernel Local Denial of Service (DoS)
  • From: security-alert
• [KAPDA]Coppermine 1.4.8~Parameter Cleanup System ByPass~Registering Global Varables
  • From: addmimistrator
• QaTraq 6.5 RC: Multiple XSS Vulnerabilities
  • From: enji
• [SNS Advisory No.88] Webmin Directory Traversal Vulnerability
  • From: snsadv@xxxxxxxxx
• vlbook 1.2 XSS Bug
  • From: omnipresent
• Re: MS Excel Remote Code Execution POC Exploit
  • From: Steven M. Christey
• [SECURITY] [DSA 1101-1] New courier packages fix denial of service
  • From: Martin Schulze
• flock d0s exploit remote. beta 1 (v0.7)
  • From: co296
• Re: Bypassing of web filters by using ASCII
  • From: Amit Klein (AKsecurity)
• [ GLSA 200606-23 ] KDM: Symlink vulnerability
  • From: Sune Kloppenborg Jeppesen
• Re: MS Excel Remote Code Execution POC Exploit
  • From: naveed
• RE: MS Excel Remote Code Execution POC Exploit
  • From: Jain, Siddhartha
• [ GLSA 200606-22 ] aRts: Privilege escalation
  • From: Sune Kloppenborg Jeppesen
• Re: Bypassing of web filters by using ASCII
  • From: Hubert Seiwert
• VigilantMinds Advisory: Opera JPEG Processing Integer Overflow Vulnerability (VMSA-20060621-01)
  • From: VigilantMinds Advisories
• Re: Bypassing of web filters by using ASCII
  • From: Kurt Huwig
• Re: V3Chat Instant Messenger - XSS
  • From: support
• Re: Bypassing of web filters by using ASCII
  • From: Amit Klein (AKsecurity)
• Re: aXentForum II XSS vuLLn
  • From: Steven M. Christey
• MS Excel Remote Code Execution POC Exploit
  • From: naveed
• Re: PHP security (or the lack thereof)
  • From: Crispin Cowan
• Re: Bypassing of web filters by using ASCII
  • From: Kurt Huwig
• Re: Bypassing of web filters by using ASCII
  • From: RSnake
• Re: Bypassing of web filters by using ASCII
  • From: Kurt Huwig
• [ MDKSA-2006:109 ] - Updated wv2 packages fix vulnerability
  • From: security
• Re: Bypassing of web filters by using ASCII
  • From: Paul
• Somechess v1.5 rc1 - XSS
  • From: luny
• Excel 0-day FAQ updated with Microsoft advisory information
  • From: Juha-Matti Laurio
• cjGuestbook v1.3 - XSS
  • From: luny
• Digital Armaments July-August Hacking Challange: Microsoft
  • From: info
• Re: PHP security (or the lack thereof)
  • From: Geo.
• Re: Bypassing of web filters by using ASCII
  • From: Fixer
• Re: PHP security (or the lack thereof)
  • From: kicktd
• Re: PHP security (or the lack thereof)
  • From: Alan J Rosenthal
• Eduha Meeting php shell upload Vulnerabilities
  • From: liz0
• Re: PHP security (or the lack thereof)
  • From: Jessica Hope
• Re: # MHG Security Team --- PHORUM 5.1.13 Remote File Inc.
  • From: brian
• Re: file include exploits in nucleus 3.23
  • From: nukedx
• [ MDKSA-2006:110 ] - Updated gnupg packages fix vulnerability
  • From: security
• Re: possible SQL injection in Subdreamer
  • From: ziad
• Re: display.cgi
  • From: eufrato
• Bypassing of web filters by using ASCII
  • From: k . huwig
• Opera 9 DoS PoC
  • From: N9
• [ MDKSA-2006:108 ] - Updated xine-lib packages fix buffer overflow vulnerabilities
  • From: security
• Re: Vacation Retal Script v1.0
  • From: radu
• Sendmail MIME DoS vulnerability
  • From: Jain, Siddhartha
• JEdit ActiveX Control Information Disclosure vulnerability
  • From: bulten
• [ MDKSA-2006:107 ] - Updated arts packages fix vulnerability in artswrapper
  • From: security
• ULtimate PHP Board <= 1.96 GOLD Code Execution (exploit code)
  • From: mbrooks
• RahnemaCo "page.php" Remote File Inclusion[2]
  • From: CrAzY . CrAcKeR
• Module's Name Content<<--V1.0 SQL injection
  • From: CrAzY . CrAcKeR
• Module's Name Downloads <<--V 7 SQL injection
  • From: CrAzY . CrAcKeR
• Re: MAXDEV CMS Multiple vulnerabilities
  • From: pete
• [MajorSecurity #18] Ralf Image Gallery <=0.7.4 - Multiple XSS, Remote File Include and directory traversal vulnerabilities
  • From: admin
• vBulletin<<--v3.5.X "member.php" Cross Site Scripting
  • From: CrAzY . CrAcKeR
• Multiple Bypass and Integrity Lost Vulnerabilities
  • From: egavriil
• display.cgi
  • From: soltan_defacer
• trifinite Security Advisory: Buffer Overrun in Toshiba Bluetooth Stack for Windows
  • From: Martin Herfurt
• Re: Vm ware 0day dos exploit by n00b.
  • From: Eliah Kagan
• Re: Vm ware 0day dos exploit by n00b.
  • From: Paul Szabo
• Janus Contact
  • From: Charles Hamby
• Input Validation/Output Encoding Vulnerabilities in Cisco CallManager Allow Script Injection Attacks
  • From: Reynolds, Jake
• V3Chat Instant Messenger - XSS
  • From: luny
• qtofilemanager xss attack !
  • From: alijsb
• Vm ware 0day dos exploit by n00b.
  • From: co296
• Re: PHP security (or the lack thereof)
  • From: Neil Neely
• Dragons Kingdom v1.0 - XSS & cookie disclosure
  • From: luny
• Re: PHP Live Helper <=([abs_path]) Remote File Include Vulnerabilities
  • From: stormhacker
• WeBBoA Hosting Script SQL Injection
  • From: entrika_fs
• Easy CMS 0.1.2 Php Shell Upload Vulnerabilities
  • From: liz0
• singapore gallery <= 0.10.0 Multiple Vulnerabilities
  • From: simo64
• Re: PHP security (or the lack thereof)
  • From: Geo.
• [ GLSA 200606-20 ] Typespeed: Remote execution of arbitrary code
  • From: Sune Kloppenborg Jeppesen
• onedotoh xss atack
  • From: alijsb
• PHP Live Helper <=([abs_path]) Remote File Include Vulnerabilities
  • From: selfar2002
• [ GLSA 200606-21 ] Mozilla Thunderbird: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• SaphpLesson<<--1.1 "misc.php" SQL injection
  • From: CrAzY . CrAcKeR
• vuBB <= 0.2.1 [BFA] SQL Injection Exploit + Advisory link
  • From: gmdarkfig
• VBZooM <<--V1.00 "lng.php" SQL injection
  • From: CrAzY . CrAcKeR
• VBZooM <<--V1.11 "message.php" SQL injection
  • From: CrAzY . CrAcKeR
• VBZooM <<--V1.00 "rank.php" SQL injection
  • From: CrAzY . CrAcKeR
• XSS Vulnerability in Maximus SchoolMAX
  • From: Fixer
• Re: [MajorSecurity #17] SixCMS <= 6 - Multiple XSS and directory traversal vulnerabilities
  • From: ellinger
• e107 v0.7.5 XSS
  • From: securityconnection
• [security bulletin] HPSBTU02116 SSRT061135 rev.2 - HP Tru64 UNIX and HP Internet Express for Tru64 UNIX Running sendmail, Remote Execution of Arbitrary Code or Denial of Service (DoS)
  • From: security-alert
• Microsoft Excel 0-day Vulnerability FAQ document written
  • From: Juha-Matti Laurio
• MPCS v0.2 - XSS
  • From: luny
• XSS in http://www.newscientist.com/ - Search
  • From: viz . security
• mp3.com - Cross site scripting vulnerability
  • From: admin
• vbzoom V1.11 forum.php SQL Injection Vulnerabilities
  • From: KARKOR23
• PTT.yu Guestbook Vulnebility
  • From: us3rg0d
• Re: MySQL DoS
  • From: xhire
• Technorati.com - XSS with cookie disclosure
  • From: luny
• 43things.com - XSS with cookie disclosure
  • From: luny
• Blogspot.com - XSS with cookie disclosure
  • From: luny
• Re: REMOTE FILE INCLUSION ( ALL )
  • From: eufrato
• RahnemaCo Remote File Inclusion Exploit
  • From: Breeeeh
• SinFP 2.00 - a major release with many new features
  • From: GomoR
• Biblenet.net - XSS
  • From: luny
• B3ta.com - XSS with cookie disclosure
  • From: luny
• Confixx <= 3
  • From: kr4ch
• Confixx <= 3
  • From: kr4ch
• Facetherating.com - XSS & session disclosure
  • From: luny
• VampireFreaks journal XSS
  • From: nanoymaster
• Re: Ie opera dos exploit
  • From: Nathaniel Hasenfus
• Ratemylook.co.uk - XSS with session disclosure
  • From: luny
• Ratescene.co.uk - XSS with session disclosure
  • From: luny
• Ashop Search Module SQL injection
  • From: entrika_fs
• webcrawler.com - XSS vulnerability in search-engine
  • From: admin
• Palm.com - XSS vulnerability
  • From: admin
• About.com - XSS with cookie disclosure
  • From: luny
• Macworld.com - XSS vulnerability
  • From: admin
• Cybersocieties.com - XSS & cookie disclosure
  • From: luny
• Windowsitpro.com - XSS with cookie disclosure
  • From: luny
• Re: PHP Advanced Transfer Manager Download users password hashes
  • From: jn
• animesuki XSS
  • From: nanoymaster
• Facerave.com - XSS & sessions disclosure
  • From: luny
• [Kurdish Security # 8] DCP-Portal Remote File Include Vulnerability [Editor DHTML]
  • From: botan
• Proof of concept: mybb 1.1.2 remote code execution
  • From: Javier Olascoaga
• Hotscripts.com - XSS with cookie disclosure
  • From: luny
• alipager xss attack
  • From: s3rv3r_hack3r
• ISO.org - XSS vulnerability
  • From: admin
• Re: RE: Internet Explorer vulnerbility
  • From: Charles Hamby
• Re: GamePlay.co.uk XSS
  • From: Patrick Morris
• hi5.com - XSS with cookie disclosure
  • From: luny
• Re: SSL VPNs and security
  • From: Eloy Paris
• Apnaspace.com - XSS with cookie disclosure
  • From: luny
• XSS in GardenWeb
  • From: nanoymaster
• Cline Communications Sql injection
  • From: liz0
• Mambo <= 4.6rc1 sql injection
  • From: rgod
• Re: Bingbox.com - XSS & cookie disclosure
  • From: Sven Vetsch
• Dealgates.com - XSS with cookie disclosure
  • From: luny
• Housecarers.com - XSS & cookie disclosure
  • From: luny
• Re: PHP security (or the lack thereof)
  • From: Jose Nazario
• [ECHO_ADV_33$2006] CMS Faethon 1.3.2 mainpath Remote File Inclusion
  • From: eufrato
• bitweaver <= v1.3 multiple vulnerabilities
  • From: rgod
• Re: PHP security (or the lack thereof)
  • From: Steven M. Christey
• Re: PHP security (or the lack thereof)
  • From: Bojan Zdrnja
• GreatDomains.com - XSS with cookie disclosure
  • From: admin
• webcrawler.com - Cross site scripting vulnerability
  • From: admin
• Netscape.com - Cross site scripting vulnerability
  • From: admin
• Simple PHP Poll Authecnication Admin ByPass
  • From: alp_eren
• file include exploits in dotwidgeta Version 2
  • From: SWEET SWEET
• RE: Cisco Secure ACS Cross Site Scripting Vulnerability.
  • From: Paul Oxman (poxman)
• Bingbox.com - XSS & cookie disclosure
  • From: luny
• PHP security (or the lack thereof)
  • From: Darren Reed
• Youtube.com - XSS & cookie disclosure
  • From: luny
• Re: [Bugtraq ID: 17909] ISPConfig Session.INC.PHP Remote File Include Vulnerability
  • From: t . brehm
• Re: Secunia Research: PicoZip "zipinfo.dll" Multiple Archives BufferOverflow
  • From: c0rrupt
• PictureDis Products "lang" Parameter File Inclusion Vulnerability
  • From: root-hacked
• [ MDKSA-2006:106 ] - Updated mdkkdm packages fix local vulnerability
  • From: security
• [ MDKSA-2006:105 ] - Updated kdebase packages fix local vulnerability in kdm
  • From: security
• file include exploits in mcGuestbook 1.3
  • From: SWEET SWEET
• Blacksingles.com - XSS & cookie disclosure
  • From: luny
• Cisco Secure ACS Cross Site Scripting Vulnerability.
  • From: liam . romanis
• Zeroboard File Upload & extension bypass Vulnerability
  • From: mins
• Carspace.com - XSS with cookie disclosure
  • From: luny
• Ji-takz Chat (mycfg) Remote File Inclusion
  • From: SpC-x
• Calendarix 0.7.20060401, SQL Injection Vulnerabilities
  • From: Federico Fazzi
• Chatizens.com - XSS with cookie disclosure
  • From: luny
• file include exploits in nucleus 3.23
  • From: gamr-14
• aXentForum II XSS vuLLn
  • From: SnoBmsn
• Re: [FSA016] ISPConfig 2.2.3, File inclusion vulnerability
  • From: t . brehm
• [security bulletin] HPSBUX02115 SSRT061077 rev.1 - HP-UX running Support Tools Manager (xstm, cstm, stm) Local Denial of Service (DoS)
  • From: security-alert
• Re: Several flaws in e-business designer (eBD)
  • From: ebd . soporte
• Indexu v 5.0.01 Multiple Remote File Include Vulnerabilities
  • From: KARKOR23
• Develooping Flash Chat (banned_file) Remote File Inclusion
  • From: SpC-x
• Boardhost.com - XSS
  • From: luny
• [USN-303-1] MySQL vulnerability
  • From: Martin Pitt
• dvdwolf SQL injection/XSS
  • From: CrAzY . CrAcKeR
• TSLSA-2006-0036 - multi
  • From: Trustix Security Advisor
• rPSA-2006-0105-1 arts
  • From: Justin M. Forbes
• HotPlugCMS 1.0, Cross-Site Scripting Vulnerabilities
  • From: Federico Fazzi
• [ GLSA 200606-19 ] Sendmail: Denial of Service
  • From: Sune Kloppenborg Jeppesen
• rPSA-2006-0106-1 kdebase
  • From: Justin M. Forbes
• [ GLSA 200606-17 ] OpenLDAP: Buffer overflow
  • From: Sune Kloppenborg Jeppesen
• Regarding "SMB Invalid Handle Value" - MS06-030. Vulnerability not fixed.
  • From: Reversemode
• [ GLSA 200606-18 ] PAM-MySQL: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• ePrayver v.Alpha - XSS
  • From: luny
• APBoard 2.2-r3 <= SQL Injections
  • From: 666
• [USN-297-2] Thunderbird extensions update for recent security update
  • From: Martin Pitt
• Andys Chat 4.5 (action) Remote File Inclusion
  • From: SpC-x
• HotPlugCMS_1.0 - SQL Injection Vulnerability
  • From: guest01
• Advisory: Unauthorized password recovery in phpBannerExchange
  • From: RedTeam Pentesting
• Advisory: Authentication bypass in phpBannerExchange
  • From: RedTeam Pentesting
• MP3 Search/Archive v1.2 - XSS
  • From: luny
• [SECURITY] [DSA 1100-1] New wv2 packages fix integer overflow
  • From: Martin Schulze
• Re: MySQL DoS
  • From: Tonnerre Lombard
• [ MDKSA-2006:104 ] - Updated sendmail packages fix remotely exploitable vulnerability
  • From: security
• Re: Amr Talkbox talkbox.PHP - Remote File Include Vulnerabilities
  • From: Steven M. Christey
• [SECURITY] [DSA 1099-1] New horde2 packages fix cross-site scripting
  • From: Moritz Muehlenhoff
• Flipper Poll (root_path) Remote File Inclusion
  • From: SpC-x
• [USN-300-1] wv2 vulnerability
  • From: Martin Pitt
• Secunia Research: DeluxeBB SQL Injection and File Inclusion Vulnerabilities
  • From: Secunia Research
• FreeBSD Security Advisory FreeBSD-SA-06:17.sendmail
  • From: FreeBSD Security Advisories
• EC2ND - Call for Papers
  • From: Blyth A J C (Comp)
• Secunia Research: CMS Mundo SQL Injection and File Upload Vulnerabilities
  • From: Secunia Research
• [ MDKSA-2006:103 ] - Updated spamassassin packages fix vulnerability
  • From: security
• [USN-301-1] kdm vulnerability
  • From: Martin Pitt
• [FSA016] ISPConfig 2.2.3, File inclusion vulnerability
  • From: Federico Fazzi
• [ MDKSA-2006:102 ] - Updated libtiff packages fixes tiff2pdf vulnerability
  • From: security
• [SECURITY] [DSA 1098-1] New horde3 packages fix cross-site scripting
  • From: Moritz Muehlenhoff
• [ MDKSA-2006:101 ] - Updated squirrelmail packages fix vulnerabilities
  • From: security
• MySQL DoS
  • From: Kanatoko
• [SECURITY] [DSA 1097-1] New Kernel 2.4.27 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [KDE Security Advisory] KDM symlink attack vulnerability
  • From: Dirk Mueller
• [ GLSA 200606-15 ] Asterisk: IAX2 video frame buffer overflow
  • From: Sune Kloppenborg Jeppesen
• PhpBlueDragon CMS 2.9.1, File inclusion vulnerability
  • From: Federico Fazzi
• Fusion Polls (xtrphome) Remote File Inclusion
  • From: SpC-x
• SEC Consult SA-20060613-0 :: Outlook Web Access Cross Site Scripting Vulnerability
  • From: SEC Consult Research
• [ GLSA 200606-16 ] DokuWiki: PHP code injection
  • From: Sune Kloppenborg Jeppesen
• wbb<<--v 2.1.6 "profile.php" SQL injection
  • From: CrAzY . CrAcKeR
• wbb<<--v 2.2.1 "studienplatztausch.php" SQL injection
  • From: CrAzY . CrAcKeR
• wbb<<--v 2.2.2 "thread.php" SQL injection
  • From: CrAzY . CrAcKeR
• Re: REMOTE FILE INCLUSION ( ALL )
  • From: Steven M. Christey
• bbrss PhpBB (phpbb_root_path) Remote File Inclusion
  • From: SpC-x
• Freeze Greetings Cards PWD.txt
  • From: alp_eren
• [ MDKSA-2006:100 ] - Updated gdm packages fix vulnerability
  • From: security
• [ MDKSA-2006:099-1 ] - Updated freetype2 packages fixes multiple vulnerabilities.
  • From: security
• Secunia Research: PicoZip "zipinfo.dll" Multiple Archives Buffer Overflow
  • From: Secunia Research
• Black Hat Speakers + 2005 Content on-line
  • From: Jeff Moss
• [USN-299-1] dhcdbd vulnerability
  • From: Martin Pitt
• Secunia Resaerch: Internet Explorer Exception Handling Memory Corruption Vulnerability
  • From: Secunia Research
• [USN-298-1] libgd2 vulnerability
  • From: Martin Pitt
• [USN-288-4] dovecot regression fix
  • From: Martin Pitt
• [USN-297-1] Thunderbird vulnerabilities
  • From: Martin Pitt
• G Shout 1.3.1 Version - Remote File Include Vulnerability
  • From: SpC-x
• [MajorSecurity #17] SixCMS <= 6 - Multiple XSS and directory traversal vulnerabilities
  • From: admin
• Shoutpro 1.0 Version - Remote File Include Vulnerability
  • From: SpC-x
• VBZooM <<-- V1.11 "show.php" SQL injection
  • From: CrAzY . CrAcKeR
• ZDI-06-018: Microsoft Internet Explorer DXImageTransform ActiveX Memory Corruption Vulnerability
  • From: zdi-disclosures
• Simpleshout 1.6.0 Version - Remote File Include Vulnerability
  • From: SpC-x
• SYMSA-2006-004: Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution
  • From: research