Bugtraq

• Thread Index

• file include exploits in mcGuestbook 1.3
  • From: gamr-14
• Re: PaintedOver.com, Inc. 2004-2006 Xss Vulnerabilities
  • From: reports
• Oracle DBMS_STANDARD security problem
  • From: putosoft softputo
• PhpMyFactures 1.0 Cross Site Scripting, SQL Injection, Full Path Disclosure and others
  • From: gmdarkfig
• GamePlay.co.uk XSS
  • From: charlie
• RE: Windows Software Restriction Policy Protection Bypass
  • From: Roger A. Grimes
• Chipmailer <= 1.09 Multiple Vulnerabilities
  • From: tamriel
• RE: Dell Openmanage CD Vulnerability
  • From: Michael Scheidell
• iDefense Security Advisory 06.13.06: Windows Media Player PNG Chunk Decoding Stack-Based Buffer Overflow
  • From: labs-no-reply
• REMOTE FILE INCLUSION ( ALL )
  • From: SpC-x
• blur6ex <= 0.3.462 'ID' blind sql injection
  • From: rgod
• Re: PHP-Nuke <= 7.9 Search XSS Vulnerability
  • From: Paul Laudanski
• Re: vbulletin.com Multiple XSS Vulnerabilities
  • From: contact
• TikiWiki Sql injection & XSS Vulnerabilities
  • From: bug@xxxxxxxxxxxxxxx
• Web-CMS <<--1.0 "print.php" SQL injection
  • From: CrAzY . CrAcKeR
• [REVERSEMODE ADVISORY] MS06-030 NtClose DeadLock.
  • From: Reversemode
• Re: Simpnews <= All version - Remote File Include Vulnerabilities
  • From: str0ke
• # MHG Security Team --- PHPAskIt v2.0.1 Remote File Inc.
  • From: erne@xxxxxxxxxxxxx
• [REVERSEMODE ADVISORY] MS06-030 - Microsoft Mrxsmb.sys privilege escalation advisory
  • From: Reversemode
• Ltwcalendar 4.1.3 version - Remote File Include Vulnerabilities
  • From: SpC-x
• Re: Shoutpro 1.0 Version - Remote File Include Vulnerability
  • From: Steven M. Christey
• iDefense Security Advisory 06.13.06: Windows MRXSMB.SYS MrxSmbCscIoctlCloseForCopyChunk DoS
  • From: labs-no-reply
• S H O U T B O X (v1.5) Version - Remote File Include Vulnerability
  • From: SpC-x
• Amr Talkbox talkbox.PHP - Remote File Include Vulnerabilities
  • From: SpC-x
• Jobline 1 1 1 Version - Remote File Include Vulnerability
  • From: SpC-x
• PHP MESSENGER 1.0 Version - Remote File Include Vulnerability
  • From: SpC-x
• ZDI-06-017: Microsoft Internet Explorer UTF-8 Decoding Heap Overflow Vulnerability
  • From: zdi-disclosures
• iDefense Security Advisory 06.13.06: Microsoft Internet Explorer ART File Heap Corruption Vulnerability
  • From: labs-no-reply
• iDefense Security Advisory 06.13.06: Windows MRXSMB.SYS MRxSmbCscIoctlOpenForCopyChunk Overflow
  • From: labs-no-reply
• High Risk Vulnerability in Microsoft Windows RASMAN Service
  • From: Peter Winter-Smith
• multiple Xss exploits in 35mmslidegallery V6
  • From: black code
• Simpnews <= All version - Remote File Include Vulnerabilities
  • From: SpC-x
• VBZooM <<--V1.01 "language.php" SQL injection
  • From: CrAzY . CrAcKeR
• [SECURITY] [DSA 1096-1] New webcalendar packages fix arbitrary code execution
  • From: Martin Schulze
• VBZooM <<--V1.11 "subject.php" SQL injection
  • From: CrAzY . CrAcKeR
• Re: SSL VPNs and security
  • From: Michal Zalewski
• VBZooM <<--V1.02 "meaning.php" SQL injection
  • From: CrAzY . CrAcKeR
• Re: BUGTRAQ:20060611 ThWboard 3.0 <= SQL Injection
  • From: Steven M. Christey
• DCP-Portal 6.1.x, Remote command execution
  • From: Federico Fazzi
• Content-Builder (CMS) 0.7.5, Remote command execution
  • From: Federico Fazzi
• Emllabs.com - XSS
  • From: luny
• Call For Papers - No cON Name 2006 Edition Spain
  • From: Jose Nicolas Castellano
• [FSA013] phpCMS 1.2.1pl2, Remote command execution
  • From: Federico Fazzi
• internet explorer vulnerability based on MarjinZ & Mr.Niega discovered
  • From: Kevin Berkane
• Re: Internet Explorer vulnerbility
  • From: Michael N. Telnov
• Re: Windows XP Task Scheduler Local Privilege Escalation (Advisory)
  • From: Eliah Kagan
• Invision Power Board XSS
  • From: kepche
• Re: Ie opera dos exploit
  • From: Daniel Hoffmann
• Blackplanet.com - XSS & cookie disclosure vuln.
  • From: luny
• [ GLSA 200606-09 ] SpamAssassin: Execution of arbitrary code
  • From: Sune Kloppenborg Jeppesen
• Yourfacesucks.com - XSS & cookie disclosure
  • From: luny
• Re: SSL VPNs and security
  • From: E Mintz
• Re: Internet Explorer vulnerbility
  • From: Andrei Ponomarev
• Onlinenode.com - XSS
  • From: luny
• [EEYEB-20060524] Symantec Remote Management Stack Buffer Overflow
  • From: eEye Advisories
• Meefo.com - XSS with cookie include
  • From: luny
• # MHG Security Team --- PHORUM 5.1.13 Remote File Inc.
  • From: erne
• Vampirefreaks.com - XSS with cookie disclosure
  • From: luny
• Re: SSL VPNs and security
  • From: thanekamp
• Flork.com
  • From: luny
• RE: Internet Explorer vulnerbility
  • From: Greg Merideth (Forward Technology)
• Re: SSL VPNs and security
  • From: wnorth
• myPHP Guestbook 2.0.2 XSS Vulnerabilitie
  • From: x0r_1
• [ MDKSA-2006:099 ] - Updated freetype2 packages fixes multiple vulnerabilities.
  • From: security
• rPSA-2006-0100-1 freetype
  • From: Justin M. Forbes
• Virtualtourist.com - XSS with cookie disclosure
  • From: luny
• Re: igloo DoubleSpeak v 0.1 Multiple remote file inclusion
  • From: str0ke
• [ GLSA 200606-14 ] GDM: Privilege escalation
  • From: Sune Kloppenborg Jeppesen
• Wireclub.com - XSS & cookie disclosure
  • From: luny
• Windows XP Task Scheduler Local Privilege Escalation (Advisory)
  • From: zipk0der
• Stargazer.org - XSS with Session output
  • From: luny
• cescripts.com - XSS
  • From: luny
• ThWboard 3.0 <= SQL Injection
  • From: 666
• Nowtalking.com - XSS
  • From: luny
• sorry i wrong something, this is original AWF CMS 1.11 adv
  • From: Federico Fazzi
• Foing (manage_songs.php) Remote File Inclusion[phpBB]
  • From: darkfire
• Opengaia.com - XSS Vuln & Session Include
  • From: luny
• [KAPDA::48]CopperminePhotoGallery1.4.8~ addhit() function~ SQLinjection attack
  • From: addmimistrator
• Wanderlist.com - XSS vuln with sessions disclosure
  • From: luny
• PaintedOver.com, Inc. 2004-2006 Xss Vulnerabilities
  • From: redl_ine
• tempnam() Bypass unique file name PHP 5.1.4
  • From: cxib
• Myscrapbook v3.1 - XSS
  • From: luny
• CS-Forum <= 0.81 Cross Site Scripting, SQL Injection, Full Path Disclosure
  • From: gmdarkfig
• RCblog 1.03 Directory Traversal [index.php]
  • From: irc0d3r
• Re: iFoto v0.20-06/06/06
  • From: aizu . ikmal
• WinSCP - URI Handler Command Switch Parsing
  • From: Jelmer Kuperus
• Secunia Research: MyBB "domecode()" PHP Code Execution Vulnerability
  • From: Secunia Research
• vbulletin.com Multiple XSS Vulnerabilities
  • From: chris
• 5 Star Review - review-script.com - XSS w/ cookie output
  • From: luny
• Hotbot.com - XSS vulnerability in search engine
  • From: admin
• Lycos.com - XSS vulnerability
  • From: admin
• [ GLSA 200606-13 ] MySQL: SQL Injection
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200606-12 ] Mozilla Firefox: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• Mydeardiary.com - XSS
  • From: luny
• [ GLSA 200606-11 ] JPEG library: Denial of Service
  • From: Sune Kloppenborg Jeppesen
• igloo DoubleSpeak v 0.1 Multiple remote file inclusion
  • From: aminrayden
• Diaryland.com - XSS
  • From: luny
• [ GLSA 200606-10 ] Cscope: Many buffer overflows
  • From: Sune Kloppenborg Jeppesen
• [KAPDA::#47] - Snitz Forum <= 3.4.05 SQL-Injection Vulnerability
  • From: farhadkey
• Joomla! 1.0 Remote File Inclusion
  • From: c4nberx
• ERRATA: [ GLSA 200604-10 ] zgv: Heap overflow
  • From: Sune Kloppenborg Jeppesen
• [MajorSecurity #12]ZMS<= 2.9 - XSS
  • From: admin
• [MajorSecurity #14]CFXe-CMS <= 2.0 - XSS
  • From: admin
• [MajorSecurity #13]Cabacos Web CMS<= 3.8 - XSS
  • From: admin
• [MajorSecurity #11]OpenCMS<= 6.2.1 - XSS
  • From: admin
• AsianXO.com - XSS with cookie data include
  • From: luny
• Tempinbox.com
  • From: luny
• fx-APP Version 0.0.8.1
  • From: luny
• Ringlink v3.2 - XSS
  • From: luny
• [SECURITY] [DSA 1095-1] New freetype packages fix several vulnerabilities
  • From: Martin Schulze
• rPSA-2006-0099-1 openldap openldap-clients openldap-servers
  • From: Justin M. Forbes
• CORE-2006-0330: Asterisk PBX truncated video frame vulnerability
  • From: Core Security Technologies advisories
• [Kil13r-SA-20060609-3] DreamWiz Search Cross-Site Scripting Vulnerability
  • From: mac68k
• [Kil13r-SA-20060609-2] DaNaWa Search Cross-Site Scripting Vulnerability
  • From: mac68k
• [Kil13r-SA-20060609-1] Daum Search Cross-Site Scripting Vulnerability
  • From: mac68k
• [USN-296-1] firefox vulnerabilities
  • From: Martin Pitt
• TSLSA-2006-0034 - multi
  • From: Trustix Security Advisor
• 0verkill 0.6, Remote integer overflow
  • From: Federico Fazzi
• Re: [Full-disclosure] Windows Software Restriction Policy Protection Bypass
  • From: Dinis Cruz
• ST AdManager Lite v1
  • From: luny
• P.A.I.D v2.2
  • From: luny
• Windows Software Restriction Policy Protection Bypass
  • From: 3APA3A
• [USN-288-2] PostgreSQL server/client vulnerabilities
  • From: Martin Pitt
• Re: IRM 019: MailMarshal 6.1 SMTP MTA Content Filter Bypass
  • From: alberto
• [USN-288-3] PostgreSQL client vulnerabilities
  • From: Martin Pitt
• Contensis CMS XSS vunerability
  • From: smigofthedump
• CORE-2006-0327: IAXclient truncated frames vulnerabilities
  • From: Core Security Technologies advisories
• PHP-Nuke Download Module Remote SQL Injection
  • From: BuNy-m
• TinyMuw v1.0 - XSS
  • From: luny
• Secunia Research: AutoMate unacev2.dll Buffer Overflow Vulnerability
  • From: Secunia Research
• [ GLSA 200606-08 ] WordPress: Arbitrary command execution
  • From: Sune Kloppenborg Jeppesen
• Secunia Research: SelectaPix Cross-Site Scripting and SQL Injection Vulnerabilities
  • From: Secunia Research
• Re: SSL VPNs and security
  • From: Michal Zalewski
• Re: SSL VPNs and security
  • From: E Mintz
• Re: DGbook v1.0 - XSS
  • From: diangemilang
• Docebo Lms 3.0.3, Remote command execution
  • From: Federico Fazzi
• MobeSpace v2.0 - XSS
  • From: luny
• Docebo Kms 3.0.3, Remote command execution
  • From: Federico Fazzi
• Re: libgd 2.0.33 infinite loop in GIF decoding ?
  • From: Xavier Roche
• mole.com.ua Ticket Booking Script - XSS
  • From: luny
• mole.com.ua Booking Script
  • From: luny
• Docebo Core 3.0.3, Remote command execution
  • From: Federico Fazzi
• Docebo CMS 3.0.3, Remote command execution
  • From: Federico Fazzi
• [USN-293-1] gdm vulnerability
  • From: Martin Pitt
• [USN-292-1] binutils vulnerability
  • From: Martin Pitt
• Re: PHP-Nuke <= 7.9 Search XSS Vulnerability
  • From: try_og
• phazizGuestbook v2.0 - XSS
  • From: luny
• iFoto v0.20-06/06/06
  • From: luny
• Dell Openmanage CD Vulnerability
  • From: wiz561
• okscripts.com - XSS Vulns
  • From: luny
• [SECURITY] [DSA 1094-1] New gforge packages fix cross-site scripting
  • From: Moritz Muehlenhoff
• [USN-294-1] courier vulnerability
  • From: Martin Pitt
• [ GLSA 200606-07 ] Vixie Cron: Privilege Escalation
  • From: Sune Kloppenborg Jeppesen
• [USN-295-1] xine-lib vulnerability
  • From: Martin Pitt
• Re: SSL VPNs and security
  • From: Amit Klein (AKsecurity)
• rPSA-2006-0098-1 gdm
  • From: Justin M. Forbes
• SSL VPNs and security
  • From: Michal Zalewski
• [security bulletin] HPSBUX02090 SSRT051058 rev.2 - HP-UX Secure Shell Remote Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBMA02121 SSRT061157 rev.2 - HP OpenView Storage Data Protector Remote Arbitrary Command Execution
  • From: security-alert
• Re: [Full-disclosure] RealVNC 4.1.1 Remote Compromise
  • From: Jose Ramirez
• [SECURITY] [DSA 1092-1] New MySQL 4.1 packages fix SQL injection
  • From: Martin Schulze
• Re: Multiple Vendor NTFS Data Stream Malware Stealth Technique
  • From: Gadi Evron
• 'Multiple Sql injection and XSS in integramod portal
  • From: ahwaz
• [USN-291-1] FreeType vulnerabilities
  • From: Martin Pitt
• [USN-289-1] tiff vulnerabilities
  • From: Martin Pitt
• Ie opera dos exploit
  • From: co296
• Re: Tiny Web Gallery <= 1.4 XSS
  • From: tinywebgallery
• Re: IRM 019: MailMarshal 6.1 SMTP MTA Content Filter Bypass
  • From: Hayden Searle
• bug of script injection in shoutcast servers
  • From: mantasjadzevicius
• Re: phpBannerExchange 2.0 Directory Traversal Vulnerability
  • From: mopeygoff
• [SECURITY] [DSA 1091-1] New TIFF packages fix arbitrary code execution
  • From: Martin Schulze
• PHP-Nuke <= 7.9 Search XSS Vulnerability
  • From: try_og
• Back-end = 0.7.2.1 (jpcache.php) Remote command execution
  • From: Federico Fazzi
• NPDS <= 5.10 Local Inclusion, XSS, Full path disclosure
  • From: gmdarkfig
• Mathcad Area Lock Vulnerability
  • From: bugtraq
• Uninformed Journal Release Announcement: Volume 4
  • From: Uninformed Journal
• Internet Explorer vulnerbility
  • From: Mr . Niega
• Re: aWebNews <= 1.0 (login.php) Remote DocumentRoot file disclosure
  • From: str0ke
• [SECURITY] [DSA 1093-1] New xine-ui packages fix denial of service
  • From: Martin Schulze
• Tikiwiki 1.9.3.2 security release
  • From: marc
• cms-bandits 2.5, Remote command execution
  • From: Federico Fazzi
• [MajorSecurity #10]i.List <= 1.5 - XSS
  • From: admin
• GUESTEX guestbook code execution
  • From: root
• Ez Ringtone Manager from scriptez.net - XSS
  • From: luny
• E-Dating System from scriptsez.net - XSS
  • From: luny
• MiraksGalerie <= 2.62 Multiple Remote command execution
  • From: Federico Fazzi
• [ GLSA 200606-06 ] AWStats: Remote execution of arbitrary code
  • From: Sune Kloppenborg Jeppesen
• [NOBYTES.COM: #12] ViArt Shop v2.5.5 - XSS Vulnerability
  • From: John Cobb
• Easy Ad-Manager
  • From: luny
• Chemical Directory - XSS
  • From: luny
• Babykatmedia.com scripts - vSCAL & vREAL - XSS Vulns
  • From: luny
• Mafia Moblog Full Path Disclosure / SQL injection
  • From: simo64
• [ MDKSA-2006:098 ] - Updated postgresql packages fixes SQL injection vulnerabilities.
  • From: security
• PBL Guestbook v1.31 - XSS
  • From: luny
• [ MDKSA-2006:097 ] - Updated MySQL packages fixes SQL injection vulnerability.
  • From: security
• [ MDKSA-2006:096 ] - Updated openldap packages fixes buffer overflow vulnerability.
  • From: security
• Calendar Express 2 SQL injection
  • From: CrAzY . CrAcKeR
• [FLSA-2006:189137-2] Updated firefox package fixes security issues
  • From: Marc Deslauriers
• [FLSA-2006:190884] Updated squirrelmail package fixes security issues
  • From: Marc Deslauriers
• Re: [Full-disclosure] RealVNC 4.1.1 Remote Compromise
  • From: Bojan Zdrnja
• [FLSA-2006:190941] Updated ipsec-tools package fixes security issue
  • From: Marc Deslauriers
• Re: XSS in ICQ.com
  • From: 321_321
• [FLSA-2006:190777] Updated X.org packages fix security issue
  • From: Marc Deslauriers
• MiraksGalerie <= 2.62 Multiple Remote command execution
  • From: Federico Fazzi
• aWebNews <= 1.0 (login.php) Remote DocumentRoot file disclosure
  • From: Federico Fazzi
• [ GLSA 200606-01 ] Opera: Buffer overflow
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200606-04 ] Tor: Several vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• Re: IRM 019: MailMarshal 6.1 SMTP MTA Content Filter Bypass
  • From: phil . mccracken
• [FLSA-2006:189137-1] Updated mozilla packages fix security issues
  • From: Marc Deslauriers
• MyBB 1.1.2 New XSS
  • From: o . y . 6
• [ GLSA 200606-05 ] Pound: HTTP request smuggling
  • From: Sune Kloppenborg Jeppesen
• [HV-LOW] Microsoft NetMeeting memory corruption (Brief)
  • From: vuln
• Re: XSS in ICQ.com
  • From: 321_321
• rPSA-2006-0096-1 spamassassin
  • From: Justin M. Forbes
• Vice Stats 0.5b SQL injection
  • From: CrAzY . CrAcKeR
• [ GLSA 200606-03 ] Dia: Format string vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• Re: XSS in ICQ.com
  • From: 321_321
• ADVISORY - D-Link Wireless Access-Point
  • From: news
• Re: [Info Disclosure] Diesel PHP Job Site Latest Version
  • From: Ronald van den Blink
• Re: Squirrelmail local file inclusion
  • From: pauls
• XSS on LarkinWEB & Company
  • From: spymeta
• Re: WebCalendar-1.0.3 reading of any files
  • From: craig
• Re: Re: Fire fox dos exploit
  • From: al4321
• Re: [Full-disclosure] RealVNC 4.1.1 Remote Compromise
  • From: Ray Van Dolson
• TinyPHP forum <= 3.6 Remote Command Execution Exploit
  • From: hessamx
• BloggIT <= 1.01 (admin.php) Arbitrary code execution
  • From: Federico Fazzi
• bug on showwich.asp
  • From: ip . chat
• Re: Buffer-overflow and crash in Fenice OMS 1.10
  • From: giampaolo . mancini
• RE: Fire fox dos exploit
  • From: Jaroslaw Sajko
• [ GLSA 200606-02 ] shadow: Privilege escalation
  • From: Sune Kloppenborg Jeppesen
• Re: Squirrelmail local file inclusion
  • From: Steven M. Christey
• Re: [MajorSecurity #8]DreamAccount <= 3.1 - Remote File Include Vulnerability
  • From: admin
• libgd 2.0.33 infinite loop in GIF decoding ?
  • From: rocheml
• [SECURITY] [DSA 1090-1] New spamassassin packages fix remote command execution
  • From: Martin Schulze
• IRM 019: MailMarshal 6.1 SMTP MTA Content Filter Bypass
  • From: IRM Advisories
• Asterisk 1.2.9 and Asterisk 1.0.11 Released - Security Fix
  • From: Matt Riddell (IT)
• GANTTy v1.0.3
  • From: luny
• Re: # MHG Security Team --- MyBloggie 2.1.1 version Remote File Include Vulnerabilit
  • From: Steven M. Christey
• Re: phpBB2 (template.php) Remote File Inclusion
  • From: Paul Laudanski
• [ MDKSA-2006:095 ] - Updated libtiff packages fixes tiffsplit vulnerability
  • From: security
• ParticleSoft Wiki v1.0.2
  • From: luny
• Re: phpBB2 (template.php) Remote File Inclusion
  • From: Aaron Klein
• ParticleSoft Whois v1.0.3
  • From: luny
• Partial Links v1.2.2
  • From: luny
• Particle Gallery v1.0.0
  • From: luny
• Re: [Full-disclosure] RealVNC 4.1.1 Remote Compromise
  • From: Kurt Seifried
• Multiple file include exploits in Xtreme Downloads v.1.0
  • From: black code
• Re: phpBB2 (template.php) Remote File Inclusion
  • From: Jessica Hope
• file include in Xtreme Downloads v.1.0
  • From: gamr-14
• Re: Multiple Vendor NTFS Data Stream Malware Stealth Technique
  • From: Andreas Marx
• Re: PCPIN Chat <= 5.0.4 "login/language" remote cmmnds xctn
  • From: k . reznichak
• ASPScriptz Guest Book 2.0 XSS
  • From: omnipresent
• Re: Bookmark4U Remote File Include
  • From: str0ke
• Re: [Full-disclosure] RealVNC 4.1.1 Remote Compromise
  • From: Tobias Kreidl
• [KAPDA::#47] - myNewsletter 1.1.2 SQL_Injection
  • From: farhadkey
• [Kil13r-SA-20060606] ESTsoft InternetDISK Arbitary Code Execution Vulnerability
  • From: mac68k
• [Kil13r-SA-20060605] Syworks SafeNET Policy File Vulnerability
  • From: mac68k
• Personal Information Disclosure/Account Hijacking Vulerability in mafia online games
  • From: Ulrich Keil
• Re: New Snort Bypass - Patch - Bypass of Patch
  • From: Pukhraj Singh
• Dmx Forum <= v2.1a Remote Passwords Disclosure
  • From: gmdarkfig
• Re: phpBB2 (template.php) Remote File Inclusion
  • From: ad@xxxxxxxxxxxxxxxx
• [MajorSecurity #9]HostAdmin <= 3.1 - Remote File Include Vulnerability
  • From: admin
• [MajorSecurity #8]DreamAccount <= 3.1 - Remote File Include Vulnerability
  • From: admin
• Re: [Full Disclosure] [Kil13r-SA-20060520] Microsoft Internet Explorer Crash Vulnerability
  • From: mac68k
• Advisory 04/2006: DokuWiki PHP code execution vulnerability in spellchecker
  • From: Stefan Esser
• ewsEngine <= 1.5.0(newscomments.php) Remote SQL Injection Vulnerability
  • From: ajannhwt
• FunkBoard CF0.71 (profile.php) Remote User Pass Change Exploit
  • From: ajannhwt
• LocazoList Classifieds <= v1.05e(viewmsg.asp) Remote SQL Injection Vulnerability
  • From: ajannhwt
• TSLSA-2006-0032 - multi
  • From: Trustix Security Advisor
• RE: Fire fox dos exploit
  • From: Sanjay Rawat
• Kmita FAQ v1.0
  • From: luny
• LabWiki v1.0
  • From: luny
• RE: phpBB2 (template.php) Remote File Inclusion
  • From: Scrouaf _
• Multiple Vendor NTFS Data Stream Malware Stealth Technique
  • From: Joxean Koret
• CyBoards PHP Lite v1.25 (common.PHP) Remote File Inclusion
  • From: SpC-x
• Re: [Full-disclosure] bug in oscomerce
  • From: Frank Laszlo
• # MHG Security Team ---Rumble 1.02 version Remote File Inc.
  • From: MSN : erne [at] ernealizm [dot] com
• # MHG Security Team ---Rumble 1.02 version Remote File Inc.
  • From: erne
• Bookmark4U Remote File Include
  • From: selfar2002
• Client buffer-overflow in Quake 3 engine (1.32c / rev 795)
  • From: Luigi Auriemma
• XSS in ICQ.com
  • From: sn4k3 . 23
• SMS "messages.php" SQL injection
  • From: CrAzY . CrAcKeR
• New <<BackTrack release announcement
  • From: Max Moser
• Timberland Search XSS Vulnerability
  • From: try_og
• Re: Fire fox dos exploit
  • From: Aaron Hopkins
• Re: Fire fox dos exploit
  • From: Ronald van den Blink
• VMSA-2006-0001 - VMware ESX Server Cross Site Scripting issue
  • From: VMware Security Team
• Re: phpFoX All Version Login Exploit
  • From: purefan
• Re: Internet explorer Vulnerbility
  • From: Hariharan
• Re: Fire fox dos exploit
  • From: Phil Trainor
• Re: Re: Fire fox dos exploit
  • From: vincenzo . ampolo
• Re: Fire fox dos exploit
  • From: Yannick von Arx
• Re: Fire fox dos exploit
  • From: Ronald van den Blink
• RE: Fire fox dos exploit
  • From: Andy
• Re: Fire fox dos exploit
  • From: pagvac
• Re: [Info Disclosure] Diesel PHP Job Site Latest Version
  • From: John F Flynn III
• Re: OaBoard 1.0 Remote File inclusion
  • From: Botan Rizgar
• Re: WBB<--v2.3.4"misc.php" SQL injection Vulnerability
  • From: nukedx
• LifeType <=1.0.4 'articleId' SQL injection
  • From: rgod
• DotClear <= 1.2.4 'blog_dc_path' (php5) arbitrary remote inclusion
  • From: rgod
• Re: New Snort Bypass - Patch - Bypass of Patch
  • From: M. Dodge Mumford
• [SECURITY] [DSA 1089-1] New freeradius packages fix arbitrary code execution
  • From: Martin Schulze
• [MajorSecurity #7]dotWidget CMS <= 1.0.6 - Remote File Include Vulnerability
  • From: admin
• phpBB2 (template.php) Remote File Inclusion
  • From: canberx
• LocazoList Classifieds <= v1.05e(viewmsg.asp) Remote SQL Injection Vulnerability
  • From: ajannhwt
• Re: # MHG Security Team --- MyBloggie 2.1.1 version Remote File Include Vulnerabilit
  • From: nukedx
• Blackhat USA 2006 - Review , remarks and proposal agenda
  • From: newslist@xxxxxxxxxxxxxxxxxxxxxx
• [SECURITY] [DSA 1088-1] New centericq packages fix arbitrary code execution
  • From: Martin Schulze
• Critical SQL Injection in CoolForum
  • From: gmdarkfig
• [ECHO_ADV_32$2006] SCart 2.0 Remote Code Execution
  • From: eufrato
• [SECURITY] [DSA 1087-1] New PostgreSQL packages fix encoding vulnerabilities
  • From: Martin Schulze
• Pixelpost <= 1-5rc1-2 multiple vulnerabilities
  • From: rgod
• Re: New Snort Bypass - Patch - Bypass of Patch
  • From: M. Dodge Mumford
• Re: Re: # MHG Security Team --- PHP NUKE All version Remote File Inc.
  • From: Steven M. Christey
• rPSA-2006-0091-1 firefox thunderbird
  • From: Justin M. Forbes
• [DRUPAL-SA-2006-006] Drupal 4.6.7 / 4.7.1 fixes arbitrary file execution issue
  • From: Uwe Hermann
• [DRUPAL-SA-2006-008] Drupal 4.6.8 / 4.7.2 fixes XSS issue
  • From: Uwe Hermann
• [DRUPAL-SA-2006-007] Drupal 4.6.8 / 4.7.2 fixes arbitrary file execution issue
  • From: Uwe Hermann
• [DRUPAL-SA-2006-005] Drupal 4.6.7 / 4.7.1 fixes SQL injection issue
  • From: Uwe Hermann
• # MHG Security Team --- MyBloggie 2.1.1 version Remote File Include Vulnerabilit
  • From: erne ayaz
• Pro Publish SQL Injection and XSS Vulnerabilities
  • From: Soothackers
• new bug
  • From: webmaster
• [SECURITY] [DSA 1086-1] New xmcd packages fix denial of service
  • From: Martin Schulze
• MyTrueHood.com - XSS
  • From: luny
• aspWebLinks 2.0 Remote SQL Injection / Admin Pass Change Exploit
  • From: ajannhwt
• New Snort Bypass - Patch - Bypass of Patch
  • From: Sigint Consulting
• Redaxo CMS <= 3.2 Remote File Include
  • From: beford
• Re: Squirrelmail local file inclusion
  • From: Paul Schmehl
• newsfactory Cross Site Scripting & SQL injection
  • From: CrAzY . CrAcKeR
• Re: Jiwa Financials - Reporting allows execution of arbitrary reports as SQL user with full permissions.
  • From: mikes
• Bytehoard 2.1 Remote File Include
  • From: beford
• PHP ManualMaker v1.0
  • From: luny
• Weblog Oggi v1.0
  • From: luny
• VMSA-2006-0002 - VMware Server sensitive information lifetime issue
  • From: VMware Security Team
• Re: Re: # MHG Security Team --- PHP NUKE All version Remote File Inc.
  • From: nukedx
• Re: my Web Server << v-1.0 Denial of Service Exploit
  • From: Steven M. Christey
• SMF 1.0.7 and lower plus 1.1rc2 and lower - IP spoofing vulnerability/IP ban evasion vulnerability
  • From: Jessica Hope
• Re: [SECURITY] [DSA 1085-1] New lynx-cur packages fix several vulnerabilities
  • From: Thomas Dickey
• northstudio Cross Site Scripting Vulnerability
  • From: CrAzY . CrAcKeR
• Re: PHPSimple Choose v0.3
  • From: prattmic
• RE: Internet explorer Vulnerbility
  • From: Peter Kruse
• Joomla/Mambo CMS Component SimpleBoard 1.1 XSS-Vulnerabilities
  • From: Yannick von Arx
• Forensic memory dumping intricacies - PhysicalMemory, DD, and caching issues
  • From: Arne Vidstrom
• CA Forum Remote SQL Injection
  • From: omnipresent
• [ MDKSA-2006:094 ] - Updated evolution packages fix DoS (crash) vulnerability on certain messages.
  • From: security
• Re: # MHG Security Team --- PHP NUKE All version Remote File Inc.
  • From: rgod
• Corsaire Security Advisory - VMware ESX Server Cross Site Scripting issue
  • From: advisories
• Re: Internet explorer Vulnerbility
  • From: Alexander Sotirov
• [SECURITY] [DSA 1085-1] New lynx-cur packages fix several vulnerabilities
  • From: Martin Schulze
• SyScan'06 - The Hackers' Conference in Asia
  • From: thomas48
• Squirrelmail local file inclusion
  • From: brokejunker
• Snort HTTP Inspect Pre-Processor Uricontent Bypass
  • From: Christian Swartzbaugh
• TAL RateMyPic v1.0
  • From: luny
• ishopcart cgi 0day and multiple vulnerabilities
  • From: bugtraq
• multiple file inclusion exploits in ovidentia v5.8.0
  • From: black-cod3
• FreeBSD Security Advisory FreeBSD-SA-06:15.ypserv
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-06:16.smbfs
  • From: FreeBSD Security Advisories
• multiple file inclusion exploits in ovidentia v5.8.0
  • From: black code
• rPSA-2006-0087-1 kernel
  • From: Justin M. Forbes
• SUSE Security Announcement: rug (SUSE-SA:2006:029)
  • From: Thomas Biege
• Internet explorer Vulnerbility
  • From: Mr . Niega
• [security bulletin] HPSBUX02122 SSRT061158 rev.1 - HP-UX Mozilla Remote Execution of Arbitrary Code, Denial of Service (DoS)
  • From: security-alert
• [SECURITY] [DSA 1084-1] New typespeed packages fix arbitrary code execution
  • From: Steve Kemp
• Re: Fire fox dos exploit
  • From: anoni . mouse
• Re: New SecurityFocus mailing list: Focus-Apple
  • From: Marc Fossi
• New SecurityFocus mailing list: Focus-Apple
  • From: Marc Fossi
• Secunia Research: ZipCentral ZIP File Handling Buffer Overflow Vulnerability
  • From: Secunia Research
• Secunia Research: Eserv/3 IMAP and HTTP Server Multiple Vulnerabilities
  • From: Secunia Research
• file include exploit in Support Cards v1
  • From: black code
• toendaCMS 0.7.0 Cross Site Scripting
  • From: kubasx
• Re: Fire fox dos exploit
  • From: Josh Zlatin-Amishav
• [SECURITY] [DSA 1083-1] New motor packages fix arbitrary code execution
  • From: Martin Schulze
• QontentOneCMS v1.0
  • From: luny
• Re: [Info Disclosure] Diesel PHP Job Site Latest Version
  • From: GulfTech Security Research
• # MHG Security Team --- PHP NUKE All version Remote File Inc.
  • From: erne
• pppBlog <= 0.3.8 administrative credentials/system disclosure
  • From: rgod
• Re: Re[2]: The Weakness of Windows Impersonation Model
  • From: Cesar
• Xss exploit in Chipmunk directory
  • From: black code
• Re: V-Webmail 1.6.4 Remote File Include
  • From: Ventsislav Genchev
• Re: [Info Disclosure] Diesel PHP Job Site Latest Version
  • From: support
• Open Searchable Image Catalogue: XSS and SQL Injection Vulnerabilities
  • From: enji
• WebCalendar-1.0.3 reading of any files
  • From: socsam
• [ GLSA 200605-17 ] libTIFF: Multiple vulnerabilities
  • From: Stefan Cornelius
• [ MDKSA-2006:093 ] - Updated dia packages fix string format vulnerabilities.
  • From: security
• [ GLSA 200605-16 ] CherryPy: Directory traversal vulnerability
  • From: Stefan Cornelius
• Fire fox dos exploit
  • From: co296
• Backdoor in RelevantKnowledge adware (What are we fighting for?)
  • From: 3APA3A
• OaBoard 1.0 Remote File inclusion
  • From: hessamx
• Re: On the Recent PGP and Truecrypt Posting
  • From: Andreas Beck
• WBB<--v2.3.4"misc.php" SQL injection Vulnerability
  • From: CrAzY . CrAcKeR
• NorthStudio Cross Site Scripting Vulnerability
  • From: CrAzY . CrAcKeR
• Bratpack Cross Site Scripting Vulnerability
  • From: CrAzY . CrAcKeR
• phpMyDesktop|arcade 1.0 FINAL Code Execution
  • From: darkgod . xsf
• Re: On the Recent PGP and Truecrypt Posting
  • From: Jon Callas
• 4nNukeWare<--V 0.91 SQL Injection exploits
  • From: CrAzY . CrAcKeR
• Jiwa Financials - Reporting allows execution of arbitrary reports as SQL user with full permissions.
  • From: Robert
• Re: LM hashes in a hot-desking environment
  • From: The Little Prince
• [KAPDA::#46] - Nukedit Unauthorized Admin Add
  • From: farhadkey
• multiple Xss exploits in : vCard 2.9
  • From: black code
• RE: Multiple Xss exploits in coolphp magazine
  • From: black code
• Multiple Xss exploits in Chipmunk Board
  • From: black code
• [SECURITY] [DSA 1082-1] New Linux kernel 2.4.17 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• WikiNi Persistent Cross Site Scripting Vulnerability
  • From: raphael . huck
• New SMB and DCERPC features on Impacket released with doc
  • From: Gerardo Richarte
• Foing Remote File Include Vulnerability [PHPBB]
  • From: s3rv3r_hack3r
• Re: Proof of concept that PGP AUTHENTICATION CAN BE BYPASSED WITHOUT PATCHING
  • From: Andreas Beck
• RE: Advisory: Eggblog <= 3.x Multiple Remote Vulnerabilities
  • From: Egg
• RE: Advisory: Blend Portal <= 1.2.0 for phpBB 2.x(blend_data/blend_common.php) File Inclusion Vulnerability
  • From: austin best
• UBBThreads 5.x,6.x md5 hash disclosure
  • From: chris
• [KAPDA::#45] - geeklog multiple vulnerabilities
  • From: alireza hassani
• Xss exploit in Photoalbum B&W v1.3
  • From: black-cod3
• VARIOMAT(advanced cms tool)SQL injection/XSS
  • From: CrAzY . CrAcKeR
• Advisory: Blend Portal <= 1.2.0 for phpBB 2.x (blend_data/blend_common.php) File Inclusion Vulnerability
  • From: Mustafa Can Bjorn IPEKCI
• Advisory: UBBThreads 5.x,6.x Multiple File Inclusion Vulnerabilities.
  • From: Mustafa Can Bjorn IPEKCI
• Advisory: ASPSitem <= 2.0 Multiple Vulnerabilities.
  • From: Mustafa Can Bjorn IPEKCI
• Advisory: phpBB 2.x (Activity MOD Plus) File Inclusion Vulnerability.
  • From: Mustafa Can Bjorn IPEKCI
• Advisory: phpBB 2.x (admin/admin_hacks_list.php) Local Inclusion Vulnerability.
  • From: Mustafa Can Bjorn IPEKCI
• Advisory: Eggblog <= 3.x Multiple Remote Vulnerabilities
  • From: Mustafa Can Bjorn IPEKCI
• Advisory: F@cile Interactive Web <= 0.8x Multiple Remote Vulnerabilities.
  • From: Mustafa Can Bjorn IPEKCI
• Advisory: Enigma Haber <= 4.3 Multiple Remote SQL Injection Vulnerabilities
  • From: Mustafa Can Bjorn IPEKCI
• Advisory: tinyBB <= 0.3 Multiple Remote Vulnerabilities.
  • From: Mustafa Can Bjorn IPEKCI
• Advisory: ASPBB <= 0.52 (perform_search.asp) XSS vulnerability
  • From: Mustafa Can Bjorn IPEKCI
• Advisory: MiniNuke v2.x Multiple Remote Vulnerabilities
  • From: Mustafa Can Bjorn IPEKCI
• JAMES 2.2.0 <-- Denial Of Service
  • From: y3dips
• multiple file include exploits in EzUpload Pro v2.10
  • From: black-cod3
• Re: On the Recent PGP and Truecrypt Posting
  • From: Jon Callas
• Buffer overflow in QuickTime 7.0.4?
  • From: John Richard Moser
• [USN-288-1] PostgreSQL server/client vulnerabilities
  • From: Martin Pitt
• [USN-287-1] Nagios vulnerability
  • From: Martin Pitt
• [SECURITY] [DSA 1081-1] New libextractor packages fix arbitrary code execution
  • From: Martin Schulze
• [SECURITY] [DSA 1080-1] New dovecot packages fix directory traversal
  • From: Steve Kemp
• [SECURITY] [DSA 1079-1] New MySQL 4.0 packages fix several vulnerabilities
  • From: Martin Schulze
• html Guest Gear
  • From: pieisgdvgd
• Re: Re: A Nasty Security Bug that affect PGP Virtual Disks & PGP SDA , PGP 8.x & 9.x and Truecrypt.
  • From: visitbipin
• RE: [security] A Nasty Security Bug that affect PGP Virtual Disks & PGP SDA , PGP 8.x & 9.x and Truecrypt.
  • From: phugo
• RE: A Nasty Security Bug that affect PGP Virtual Disks & PGP SDA , PGP 8.x & 9.x and Truecrypt.
  • From: thesinoda
• Proof of concept that PGP AUTHENTICATION CAN BE BYPASSED WITHOUT PATCHING
  • From: thesinoda
• Re: On the Recent PGP and Truecrypt Posting
  • From: John Pettitt
• D-Link DSA-3100 Cross-Site Scripting
  • From: jaime . blasco
• [SECURITY] [DSA 1078-1] New tiff packages fix denial of service
  • From: Martin Schulze
• Speedy ASP Forum(profileupdate.asp) User Pass Change Exploit
  • From: ajannhwt
• RE: LM hashes in a hot-desking environment
  • From: Roger A. Grimes
• sql injection in PHPcafe.net Tutorial Manager
  • From: black-cod3
• Multiple Xss exploits in ar-blog v 5.2
  • From: black-cod3
• Xss exploit in Chipmunk guestbook
  • From: black-cod3
• Re: LM hashes in a hot-desking environment
  • From: Ansgar -59cobalt- Wiechers
• Re: LM hashes in a hot-desking environment
  • From: 3APA3A
• Critical sql injection in saphplesson 2.0
  • From: black-cod3
• InternerExplorer error: ECMAScript interpreter stack overflow
  • From: sehato
• Symantec antivirus software exposes computers
  • From: Michael Scheidell
• rPSA-2006-0083-1 enscript
  • From: Justin M. Forbes
• Wavecon Advisory: Open-Xchange <= 0.8.2 defaultuser with /bin/bash and default password
  • From: Cemil Degirmenci
• rPSA-2006-0084-1 fetchmail
  • From: Justin M. Forbes
• cURL Safe Mode Bypass PHP 4.4.2 and 5.1.4
  • From: cxib
• Re[2]: [Full-disclosure] ASLR now built into Vista
  • From: 3APA3A
• Re: my Web Server << v-1.0 Denial of Service Exploit
  • From: str0ke
• Re: Sun single-CPU DOS
  • From: Doug Hughes
• LM hashes in a hot-desking environment
  • From: feedb4ck
• [ MDKSA-2006:092 ] - Updated mpg123 packages fix DoS vulnerability.
  • From: security
• Re: RE: A Nasty Security Bug that affect PGP Virtual Disks & PGP SDA , PGP 8.x & 9.x and Truecrypt.
  • From: ahariri
• Re: A Nasty Security Bug that affect PGP Virtual Disks & PGP SDA , PGP 8.x & 9.x and Truecrypt.
  • From: Alexander Klimov
• Re: Wordpress <=2.0.2 'cache' shell injection
  • From: pokley
• Morris Guestbook v1
  • From: luny
• Smile Guestbook v1
  • From: luny
• Pretty Guestbook v1
  • From: luny
• MyYearBook.com - XSS
  • From: luny
• Re: Microsoft Internet Explorer - Crash on mouse button click
  • From: mac68k
• Re: Microsoft Internet Explorer - Crash on mouse button click
  • From: unknown user
• Vacation Retal Script v1.0
  • From: luny
• Super Link Exchange Script v1.0
  • From: luny
• PHPSimple Choose v0.3
  • From: luny
• iBoutique.MALL - Directory Traversal
  • From: luny
• XSS Vulnerability on Vodafone
  • From: try_og
• rPSA-2006-0080-1 postgresql postgresql-server
  • From: Justin M. Forbes
• Re: Kaspersky antivirus 6: HTTP monitor bypassing
  • From: dmitryp . spm
• Re: Microsoft Internet Explorer - Crash on mouse button click
  • From: unknown user
• On the Recent PGP and Truecrypt Posting
  • From: jon
• [OpenPKG-SA-2006.009] OpenPKG Security Advisory (binutils)
  • From: OpenPKG
• XSS Vulnerability on www.my6d.com Connection Work System
  • From: spymeta
• Re: Microsoft Internet Explorer - Crash on mouse button click
  • From: unknown user
• Re: Sun single-CPU DOS
  • From: Doug Hughes
• Seditio Cross Site Scripting Vulnerability
  • From: mail
• Re: PhpListPro 2.01 Remote File Include Vulnerability
  • From: not
• Re: Kaspersky antivirus 6: HTTP monitor bypassing
  • From: denisov_vit
• Easy-Content Forums 1.0 Multiple [SQL/XSS] Vulnerabilities
  • From: ajannhwt
• Assetman <= 2.4a XSS
  • From: zerogue
• ByteHoard <= 2.1 multiple vulnerabilities
  • From: zerogue
• PHP AGTC-Membership system <= v1.1a XSS
  • From: zerogue
• PHPResidence <= 0.6 XSS
  • From: zerogue
• Plume CMS Remote File Include
  • From: beford
• Re: [BuHa-Security] DoS Vulnerability in MS IE 6 SP2
  • From: ad@xxxxxxxxxxxxxxxx
• RE: Realty Pro One Property Listing Script
  • From: Krpata, Tyler
• Multiple XSS Vulnerabilities in Tikiwiki 1.9.x
  • From: blwood
• my Web Server << v-1.0 Denial of Service Exploit
  • From: s3rv3r_hack3r
• Tamber Forum <= 1.9.13 Multiple SQL Injection Vulnerabilities
  • From: ajannhwt
• [MajorSecurity #6]Socketmail <= 2.2.6 - Remote File Include Vulnerability
  • From: admin
• qjForum(member.asp) SQL Injection Vulnerability
  • From: ajannhwt
• phpjobboard Authecnical admin byPass
  • From: alp_eren
• Toasts Forums 1.6.44 in Xss
  • From: ajannhwt
• Easy-Content Forums 1.0 Multiple SQL/XSS Vulnerabilities
  • From: ajannhwt
• XSS in Monster Top List | MTL 1.4
  • From: V8f3
• Re: A Nasty Security Bug that affect PGP Virtual Disks & PGP SDA , PGP 8.x & 9.x and Truecrypt.
  • From: 3APA3A
• Docebo LMS 2.05 Remote File Include
  • From: beford
• XSS in Omegasoft's Insel
  • From: MC Iglo
• Re: Sun single-CPU DOS
  • From: Mike O'Connor
• Re: Sun single-CPU DOS
  • From: Mike O'Connor
• Re: Kaspersky antivirus 6: POP3 state machine error
  • From: denisov_vit
• [SECURITY] [DSA 1075-1] New awstats packages fix arbitrary command execution
  • From: Martin Schulze
• Re: [Full-disclosure] ASLR now built into Vista
  • From: c0ntex
• ASLR now built into Vista
  • From: David Litchfield
• [BuHa-Security] MS06-013: HTML Tag Memory Corruption Vulnerability in MS IE 6 SP2
  • From: bugtraq
• [BuHa-Security] DoS Vulnerability in MS IE 6 SP2
  • From: bugtraq
• V-Webmail 1.6.4 Remote File Include
  • From: beford
• Re: Destiney Rated Images Script v0.5.0 - XSS Vulnv
  • From: Steven M. Christey
• [SECURITY] [DSA 1077-1] New lynx-ssl packages fix denial of service
  • From: Martin Schulze
• [SECURITY] [DSA 1076-1] New lynx packages fix denial of service
  • From: Martin Schulze
• TSLSA-2006-0030 - multi
  • From: Trustix Security Advisor
• RE: A Nasty Security Bug that affect PGP Virtual Disks & PGP SDA , PGP 8.x & 9.x and Truecrypt.
  • From: ennead@xxxxxxxxxxxxx
• Addendum
  • From: ennead@xxxxxxxxxxxxx
• Wordpress <=2.0.2 'cache' shell injection
  • From: rgod
• PostgreSQL security releases 8.1.4, 8.0.8, 7.4.13, 7.3.15
  • From: PostgreSQL Security
• Hackernetwork Mail Xss[Search] Vulnerability
  • From: ajannhwt
• iFlance v1.1
  • From: luny
• rPSA-2006-0082-1 vixie-cron
  • From: Justin M. Forbes
• RE: modules name(Sections)SQL Injection Exploit
  • From: Evans, Arian
• Drupal <= 4.7 attachment/mod_mime remote code execution
  • From: rgod
• Pre News Manager v1.0
  • From: luny
• [KAPDA::#44] - NewsCMSLite Login ByPass by Cookie
  • From: farhadkey
• Pre Shopping Mall v1.0
  • From: luny
• CMS Mundo V1.0
  • From: luny
• Re: Circumventing quarantine control in Windows 2003 and ISA 2004
  • From: Memet Anwar
• GuestbookXL 1.3
  • From: luny
• [USN-286-1] Dia vulnerabilities
  • From: Martin Pitt
• Bulletin Board Elite-Board v.1.1
  • From: luny
• Realty Pro One Property Listing Script
  • From: luny
• iFdate v1.2
  • From: luny
• sql injection in phpWebSite 0.8.3
  • From: help-users
• A Nasty Security Bug that affect PGP Virtual Disks & PGP SDA , PGP 8.x & 9.x and Truecrypt.
  • From: thesinoda
• ChatPat v1.0
  • From: luny
• Re: IpLogger <= 1.7 XSS
  • From: thrasher . basher
• RE: Microsoft Internet Explorer - Crash on mouse button click
  • From: Jain, Siddhartha
• AZ Photo Album Script Pro
  • From: luny
• Re: Re: [SECURITYREASON.COM] PhpNuke 7.6=>x Multiple vulnerabilities cXIb8O3.12
  • From: phpnuke
• phpFoX All Version Login Exploit
  • From: mx
• Kaspersky antivirus 6: POP3 state machine error
  • From: bug . registrator
• Re: mybb v1.1.1(rss.php) SQL Injection Exploit
  • From: Steven M. Christey
• [CLOSED] SOE's implementation of Lithium Forums Software allows users to log on as each other.
  • From: support
• Re: Default Screen Saver Vulnerability in Microsoft Windows
  • From: Jason V. Miller
• VSR Advisory: PDF Tools AG - PDF Form Filling and Flattening Tool Buffer Overflow
  • From: advisories
• [ MDKSA-2006:091 ] - Updated php packages fix vulnerabilities
  • From: security
• [ MDKSA-2006:090 ] - Updated shadow-utils packages fix mailbox creation vulnerability
  • From: security
• Re: Default Screen Saver Vulnerability in Microsoft Windows
  • From: Ansgar -59cobalt- Wiechers
• Re: Default Screen Saver Vulnerability in Microsoft Windows
  • From: Eliah Kagan
• [ MDKSA-2006:089 ] - Updated kphone packages fixes permissions issue with .qt/kphonerc
  • From: security
• [ MDKSA-2006:088 ] - Updated hostapd package to address DoS vulnerability
  • From: security
• [ MDKSA-2006:087 ] - Updated kernel packages fixes netfilter SNMP NAT memory corruption
  • From: security
• Cisco Security Advisory: Windows VPN Client Local Privilege Escalation Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [SECURITY] [DSA 1074-1] New mpg123 packages fix arbitrary code execution
  • From: Martin Schulze
• OpenCms version 6.0.x Xml Content Demo search engine Cross site scripting
  • From: jaime . blasco
• Write-up by Amit Klein: "IE + some popular forward proxy servers = XSS, defacement (browser cache poisoning)"
  • From: Amit Klein (AKsecurity)
• Diesel Joke Site SQL INJECTION
  • From: a_linuxer
• Re: How secure is software X?
  • From: Duncan Simpson
• NETGEAR WGR614 v6 Wireless DSL router information disclosure vulnerability
  • From: info
• Vodafone.de XSS Vulnerability
  • From: try_og
• Default Screen Saver Vulnerability in Microsoft Windows
  • From: susam . pal
• YLZH(right.php)Cross Site Scripting
  • From: Breeeeh
• Mambo <= 4.6. RC1 xss
  • From: rgod
• Re: Circumventing quarantine control in Windows 2003 and ISA 2004
  • From: Andreas Beck
• Publicist v0.95 - XSS And Full Path Errors
  • From: luny
• Re: Checkpoint SYN DoS Vulnerability
  • From: Niranjan S Patil
• AlstraSoft Web Host Directory v1.2
  • From: luny
• Re: Destiney Rated Images Script v0.5.0 - XSS Vulnv
  • From: webmaster
• Re: Sun single-CPU DOS
  • From: Mike O'Connor
• Buffer-overflow in the WebTool service of PunkBuster for servers (minor than v1.229)
  • From: Luigi Auriemma
• Server termination in netPanzer 0.8 (rev 952)
  • From: Luigi Auriemma
• Re: Circumventing quarantine control in Windows 2003 and ISA 2004
  • From: Mark Senior
• Re: Microsoft Internet Explorer - Crash on mouse button click
  • From: unknown user
• [security bulletin] HPSBMA02098 SSRT5911 rev.1 - HP OpenView Network Node Manager (OV NNM) Remote Unauthorized Privileged Access, Arbitrary Command Execution, Arbitrary File Creation
  • From: security-alert
• [security bulletin] HPSBMA02121 SSRT061157 rev.1 - HP OpenView Storage Data Protector Remote Arbitrary Command Execution
  • From: security-alert
• [USN-285-1] awstats vulnerability
  • From: Martin Pitt
• DGbook v1.0 - XSS
  • From: luny
• Re: How secure is software X?
  • From: Crispin Cowan
• RE: Circumventing quarantine control in Windows 2003 and ISA 2004
  • From: Roger A. Grimes
• Re: Sun single-CPU DOS
  • From: Doug Hughes
• [security bulletin] HPSBUX02075 SSRT051074 rev.5 - HP-UX Running xterm Local Unauthorized Access
  • From: security-alert
• Alstrasoft Article Manager Pro v1.6
  • From: luny
• AlstraSoft E-Friends - XSS
  • From: luny
• phpMyDirectory <= 10.4.4 Multiple Remote File Include(new!)
  • From: ajannhwt
• [security bulletin] HPSBUX02114 SSRT061115 rev.1 - HP-UX Running Software Distributor Local Elevation of Privilege
  • From: security-alert
• Nucleus CMS <= 3.22 arbitrary remote inclusion
  • From: rgod
• Non eXecutable Stack Lovin on OSX86
  • From: KF (lists)
• [OpenPKG-SA-2006.008] OpenPKG Security Advisory (openldap)
  • From: OpenPKG
• Kaspersky antivirus 6: HTTP monitor bypassing
  • From: john
• SkyeShoutbox <= v.1.2.0 XSS
  • From: zerogue
• Russcom Ping Remote code execution
  • From: zerogue
• Russcom PHPImages lack of validation
  • From: zerogue
• QBv14 XSS
  • From: zerogue
• IpLogger <= 1.7 XSS
  • From: zerogue
• DSChat <= 1.0 XSS
  • From: zerogue
• Re: Circumventing quarantine control in Windows 2003 and ISA 2004
  • From: 3APA3A
• Chatty improper input sanitizing
  • From: zerogue
• Circumventing quarantine control in Windows 2003 and ISA 2004
  • From: Memet Anwar
• Hackernetwork.Com Mail XSS Vulnerability
  • From: TeufeL Online
• Microsoft Internet Explorer - Crash on mouse button click
  • From: mac68k
• Re: 90% of programs made in PHP5 and prior Full Path Disclosure vuln.
  • From: Kamil Sienicki
• Re: POC exploit for freeFTPd 1.0.10
  • From: Tauqeer Ahmad
• Re: POC exploit for freeFTPd 1.0.10
  • From: Sanjay Rawat
• Remote Code Execution in artmedic Newsletter 4.1 [log.php]
  • From: c . j . schmitz
• TSLSA-2006-0028 - multi
  • From: Trustix Security Advisor
• phpRaid "view.php" XSS Vulnerability
  • From: TeufeL Online
• Re: Sun single-CPU DOS
  • From: Mike O'Connor
• Beoped Portal XSS
  • From: outlaw
• SOE's implementation of Lithium Forums Software allows users to log on as each other.
  • From: john
• Re: Checkpoint SYN DoS Vulnerability
  • From: Bojan Zdrnja
• ACROS Security: Buffer Overflow In EMC (previously Dantz) Retroclient Service
  • From: ACROS Security
• Re: 90% of programs made in PHP5 and prior Full Path Disclosure vuln.
  • From: sirdarckcat
• CANews Multiple Vulnerabilities
  • From: omnipresent
• Re: Unfiltered Header Injection in Apache 1.3.34/2.0.57/2.2.1
  • From: Amit Klein (AKsecurity)
• [SECURITY] [DSA 1072-1] New Nagios packages fix arbitrary code execution
  • From: Martin Schulze
• mybb v1.1.1(rss.php) SQL Injection Exploit
  • From: Breeeeh
• Re: Novell Client login form enables reading and writing from and to the clipboard of the logged-in user
  • From: Roman Drahtmueller
• Re: Checkpoint SYN DoS Vulnerability
  • From: Jim Clausing
• [SECURITY] [DSA 1073-1] New MySQL 4.1 packages fix several vulnerabilities
  • From: Martin Schulze
• ZDI-06-016: Novell eDirectory 8.8 NDS Server Buffer Overflow Vulnerability
  • From: zdi-disclosures
• [security bulletin] HPSBUX02120 SSRT051057 rev.1 - HP-UX Local Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBUX02119 SSRT4848 rev.1 - HP-UX Running Motif Applications Remote Arbitrary Code Execution, Denial of Service (DoS)
  • From: security-alert
• Re: WebsiteBaker CMS lack of sanitizing
  • From: ryan
• BitZipper Archive Extraction Directory traversal
  • From: h e
• Prodder Remote Arbitrary Command Execution
  • From: RedTeam Pentesting
• Perlpodder Remote Arbitrary Command Execution
  • From: RedTeam Pentesting
• [SECURITY] [DSA 1071-1] New MySQL 3.23 packages fix several vulnerabilities
  • From: Martin Schulze
• Re: tseekdir.cgi<--Local File Include
  • From: security curmudgeon
• Re: modules name(Sections)SQL Injection Exploit
  • From: security curmudgeon
• Skype - URI Handler Command Switch Parsing
  • From: Brett Moore
• [KAPDA::#43] - phpwcms multiple vulnerabilities
  • From: alireza hassani
• Generic Browser Crash with Java 1.4.2_11, Java 1.5.0_06
  • From: Marc Schoenefeld
• Novell Client login form enables reading and writing from and to the clipboard of the logged-in user
  • From: EitanCaspi@xxxxxxxxx
• [SECURITY] [DSA 1069-1] New Linux kernel 2.4.18 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [ GLSA 200605-15 ] Quagga Routing Suite: Multiple vulnerabilities
  • From: Stefan Cornelius
• [ GLSA 200605-14 ] libextractor: Two heap-based buffer overflows
  • From: Stefan Cornelius
• [TZO-072006]-Xampp - Multiple Priviledge Escalation (SYSTEM) and Rogue Autostart
  • From: Thierry Zoller
• XOOPS <= 2.0.13.2 'xoopsOption[nocommon]' exploit
  • From: rgod
• Firefox 1.5.0.3 Flaw - Page can obtain path to Mozilla installation or profile by examining JavaScript exceptions
  • From: milw0rm
• PHP Easy Galerie Index.PHP Remote File Include Vulnerability
  • From: craziest
• Captivate 1.0 - XSS Vuln
  • From: luny
• [SECURITY] [DSA 1070-1] New Linux kernel 2.4.19 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Destiney Links Script v2.1.2
  • From: luny
• Destiney Rated Images Script v0.5.0 - XSS Vulnv
  • From: luny
• PunBB 1.2.11 Cross site scripting
  • From: k4p0k4p0
• [SECURITY] [DSA 1069-1] New Linux kernel 2.4.18 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Hiox Guestbook 3.1
  • From: luny
• Re: Zix Forum <= 1.12 (layid) SQL Injection Vulnerability
  • From: farhadkey
• [SECURITY] [DSA 1068-1] New fbi packages fix denial of service
  • From: Moritz Muehlenhoff
• Re: XSS in orkut.com
  • From: Google Security Team
• Zix Forum <= 1.12 (layid) SQL Injection Vulnerability
  • From: i6d
• cPanel OpenBaseDir Bypass
  • From: i6d
• Re: PHPBB 2.0.20 persistent issues with avatars
  • From: Paul Laudanski
• [SECURITY] [DSA 1064-1] New cscope packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• Re: NSA Group Security Advisory NSAG-196-23.02.2006 Vulnerability FCKeditor 2.2
  • From: fredck
• [SECURITY] [DSA 1067-1] New Linux kernel 2.4.16 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Xtremescripts Topsites v1.1
  • From: luny
• Interlink "news_information.php" XSS
  • From: Mster-X
• RaceEventManagement <--v0.7.6 SQL injection & XSS
  • From: Mster-X
• ActualAnalyzer Server <=8.23 - Remote File Include Vulnerability
  • From: i6d
• [SECURITY] [DSA 1065-1] New hostapd packages fix denial of service
  • From: Moritz Muehlenhoff
• Re: NSA Group Security Advisory NSAG-195-23.02.2006 Vulnerability FCKeditor 2.0 FC
  • From: fredck