Bugtraq

• Thread Index

• ZDI-06-004: Microsoft Excel File Format Parsing Vulnerability
  • From: zdi-disclosures
• [eVuln] CyBoards PHP Lite SQL Injection Vulnerability
  • From: alex
• Linux zero IP ID vulnerability?
  • From: Marco Ivaldi
• [SECURITY] [DSA 1001-1] New crossfire packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 1000-1] New Apache2::Request packages fix denial of service
  • From: Martin Schulze
• DMA[2006-0313a] - 'Apple OSX Mail.app RFC1740 Real Name Buffer Overflow'
  • From: KF (lists)
• [DRUPAL-SA-2006-004] Drupal 4.6.6 / 4.5.8 fixes mail header injection issue
  • From: Uwe Hermann
• [SECURITY] [DSA 998-1] New libextractor packages fix several vulnerabilities
  • From: Martin Schulze
• [SECURITY] [DSA 999-1] New lurker packages fix several vulnerabilities
  • From: Martin Schulze
• [DRUPAL-SA-2006-002] Drupal 4.6.6 / 4.5.8 fixes XSS issue
  • From: Uwe Hermann
• [DRUPAL-SA-2006-003] Drupal 4.6.6 / 4.5.8 fixes session fixation issue
  • From: Uwe Hermann
• [DRUPAL-SA-2006-001] Drupal 4.6.6 / 4.5.8 fixes access control issue
  • From: Uwe Hermann
• [ MDKSA-2006:055 ] - Updated gnupg packages fix signature file verification vulnerability
  • From: security
• [SECURITY] [DSA 997-1] New bomberclone packages fix arbitrary code execution
  • From: Martin Schulze
• ZDI-06-003: Ipswitch Collaboration Suite Code Execution Vulnerability
  • From: zdi-disclosures
• Re: Coppermine exploit used by a Chase Phish?
  • From: Nexus
• [INetCop Security Advisory] zeroboard IP session bypass XSS vulnerability
  • From: dong-hun you
• Buffer Overflow and Installation Script Error in Firebird 1.5.3
  • From: Joxean Koret
• WMNews Cross Site Scripting
  • From: exalibur33
• Secunia Research: Dwarf HTTP Server Source Disclosure and Cross-Site Scripting
  • From: Secunia Research
• Secunia Research: unalz Filename Handling Directory Traversal Vulnerability
  • From: Secunia Research
• [SECURITY] [DSA 993-2] New GnuPG packages fix broken signature check
  • From: Martin Schulze
• [SECURITY] [DSA 996-1] New Crypt::CBC packages fix cryptographic weakness
  • From: Martin Schulze
• Kerio MailServer bugfun
  • From: Evgeny Legerov
• [eVuln] Vegas Forum SQL Injection Vulnerability
  • From: alex
• [SECURITY] [DSA 995-1] New metamail packages fix arbitrary code execution
  • From: Martin Schulze
• [SECURITY] [DSA 994-1] New freeciv packages fix denial of service
  • From: Martin Schulze
• Multiple vulnerabilities in ENet library (Jul 2005)
  • From: Luigi Auriemma
• directory traversal Fixed in DirectContact 0.3c
  • From: lionel
• [USN-264-1] gnupg vulnerability
  • From: Martin Pitt
• [USN-263-1] Linux kernel vulnerabilities
  • From: Martin Pitt
• [USN-262-1] Ubuntu 5.10 installer password disclosure
  • From: Martin Pitt
• [ GLSA 200603-10 ] Cube: Multiple vulnerabilities
  • From: Stefan Cornelius
• [ GLSA 200603-09 ] SquirrelMail: Cross-site scripting and IMAP command injection
  • From: Stefan Cornelius
• Jupiter CMS <= 1.1.5 multiple XSS attack vectors.
  • From: zerogue
• AntiVir PersonalEdition Classic: Local Privilige Escalation
  • From: Ramon 'ports' Kukla
• Copy protection scheme SafeDisc allows privilege escalation
  • From: yourname
• SGI IRIX 6.*usr/sysadm/bin/runpriv local root exploit
  • From: rod hedor
• XSS in vCard
  • From: xx_hack_xx_2004
• Coppermine exploit used by a Chase Phish?
  • From: Paul Laudanski
• Re: Dropbear SSH server Denial of Service
  • From: Damien Miller
• [ GLSA 200603-07 ] flex: Potential insecure code generation
  • From: Thierry Carrez
• CoreNews 2.0.1 Remote Command Exucetion
  • From: botan
• Re: [Full-disclosure] Re: recursive DNS servers DDoS as a growing DDoSproblem
  • From: gboyce
• Re: [Full-disclosure] Re: recursive DNS servers DDoS as a growing DDoSproblem
  • From: Security Lists
• [ GLSA 200603-08 ] GnuPG: Incorrect signature verification
  • From: Thierry Carrez
• [SECURITY] [DSA 993-1] New GnuPG packages fix broken signature check
  • From: Martin Schulze
• Re: Dropbear SSH server Denial of Service
  • From: Matt Johnston
• Re: Dropbear SSH server Denial of Service
  • From: il80r
• Re: HYSA-2006-005 WordPress 2.0.1 Remote DoS Exploit
  • From: Don Voita
• Re: HYSA-2006-005 WordPress 2.0.1 Remote DoS Exploit
  • From: scaturan
• [ GLSA 200603-06 ] GNU tar: Buffer overflow
  • From: Thierry Carrez
• Re: recursive DNS servers DDoS as a growing DDoS problem
  • From: Ventsislav Genchev
• Re: Thomson SpeedTouch 500 modems vulnerable to XSS
  • From: dford
• RE: Purple Paper: Exegesis Of Virtual Hosts Hacking
  • From: Craig Wright
• [KAPDA::#33] - GuppY <= 4.5.11 Remote DoS vulnerability
  • From: alireza hassani
• Advisory: Jiros Banner Experience Pro Remote Privilege Escalation.
  • From: nukedx
• GnuPG does not detect injection of unsigned data
  • From: Werner Koch
• [eVuln] FreeForum PHP Code Execution & Multiple XSS Vulnerabilities
  • From: alex
• [SECURITY] [DSA 992-1] New ffmpeg packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 991-1] New zoo packages fix arbitrary code execution
  • From: Martin Schulze
• announcement: reporting and mitigating malicious websites and phishing
  • From: Gadi Evron
• [SECURITY] [DSA 919-2] New curl packages fix potential security problem
  • From: Martin Schulze
• Re: [Full-disclosure] Re: recursive DNS servers DDoS as a growing DDoSproblem
  • From: Mark Senior
• [SECURITY] [DSA 990-1] New bluez-hcidump packages fix denial of service
  • From: Martin Schulze
• RE: [Full-disclosure] Re: recursive DNS servers DDoS as a growing DDoSproblem
  • From: Geo.
• Statement Regarding Reported Local Escalation of Privileges Vulnerability for ZoneAlarm
  • From: Zone Labs Product Security
• [ MDKSA-2006:035-1 ] - Updated php packages fix vulnerability
  • From: security
• [USN-261-1] PHP vulnerabilities
  • From: Martin Pitt
• [KDE Security Advisory] kpdf of KDE 3.3.x heap based buffer overflow
  • From: Dirk Mueller
• Re: HYSA-2006-005 WordPress 2.0.1 Remote DoS Exploit
  • From: scaturan
• n8cms 1.1 & 1.2 version Sql &#304;njection And XSS
  • From: liz0
• PHP Advanced Transfer Manager Download users password hashes
  • From: liz0
• PHP Upload Center Download users password hashes And phpshell Upload
  • From: liz0
• DVguestbook 1.0 And 1.2.2 Cross Site Scripting
  • From: liz0
• UnrealIRCd3.2.3 Server-Link Denial of Service
  • From: admin
• Re: [waraxe-2006-SA#047] - Evading sql-injection filters in phpNuke 7.8
  • From: omega13a
• Re: [waraxe-2006-SA#047] - Evading sql-injection filters in phpNuke 7.8
  • From: omega13a
• Aluria/WhenU Troubled Past and Whitewashing History
  • From: Paul Laudanski
• RE: [Full-disclosure] PHP-based CMS mass-exploitation
  • From: hchemin
• Re: 18 ways to escalate privileges in Zone Labs ZoneAlarm Security Suite build 6.1.744.000
  • From: reedarvin
• Re: Re: [CORRECTIONS AND ADDITIONS ]Azbb v1.1.00 Cross-Site Scripting
  • From: no_reply
• RevilloC MailServer 1.x "USER" Command Handling Remote Buffer Overflow Exploit
  • From: securma
• Re: a worm for mediaWiki??
  • From: Michael Rice
• txtForum: Script Injection Vulnerability
  • From: enji
• txtForum: Multiple XSS Vulnerabilities
  • From: enji
• MyBloggie: Multiple XSS Vulnerabilities
  • From: enji
• DCP Portal: Multiple XSS Vulnerabilities
  • From: enji
• ADP Forum 2.0,* script &#304;njection
  • From: liz0
• M-Phorum Cross Site Scripting
  • From: codexploder
• INFIGO-2006-03-01: PeerCast streaming server remote buffer overflow
  • From: infocus
• HYSA-2006-005 WordPress 2.0.1 Remote DoS Exploit
  • From: h4cky0u . org
• Easy File Sharing Web Server Multiple Vulnerablilities
  • From: revnic
• Remote access to NeuSecure/Netcool backend database via web interface credentials leakage
  • From: D.Snezhkov
• [SECURITY] [DSA 989-1] New zoph packages fix SQL injection
  • From: Moritz Muehlenhoff
• nCipher Advisory #14: Presence of flaws in firmware security
  • From: nCipher Support
• nCipher Advisory #13: CBC-MAC IV misleading programming interface
  • From: nCipher Support
• nCipher Advisory #12: Insecure Generation of Diffie-Hellman keys
  • From: nCipher Support
• Re: 18 ways to escalate privileges in Zone Labs ZoneAlarm Security Suite build 6.1.744.000
  • From: 3APA3A
• [ MDKSA-2006:054 ] - Updated kdegraphics packages fixes overflow vulnerabilities
  • From: security
• 18 ways to escalate privileges in Zone Labs ZoneAlarm Security Suite build 6.1.744.000
  • From: Reed Arvin
• Re: a worm for mediaWiki??
  • From: jredmond
• H&R Block contact - SOLVED
  • From: Fixer
• a worm for mediaWiki??
  • From: "vitamona"
• [SECURITY] [DSA 988-1] New squirrelmail packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [KAPDA::#32] - d2kBlog 1.0.3 Multiple Vulnerabilities
  • From: 3nitro
• Re: PHP-based CMS mass-exploitation
  • From: Paul Laudanski
• capi4hylafax insecure manipulation with tmp files
  • From: Javor Ninov
• textfileBB <= 1.0 Multiple XSS
  • From: retard
• Re: AVG 7 granting Everyone Full Control to updated files... even its drivers
  • From: Matti Haack
• Re: [CORRECTIONS AND ADDITIONS ]Azbb v1.1.00 Cross-Site Scripting
  • From: no_reply
• [eVuln] EKINboard 'img' BBCode XSS & Cookie 'username' SQL Injection Vulnerabilities
  • From: alex
• [security bulletin] HPSBTU02100 SSRT050979 rev.1 - HP Tru64 UNIX IPSEC/ISAKMP Remote Denial of Service (DoS)
  • From: security-alert
• CanSecWest/core06 Vancouver April 3-7
  • From: Dragos Ruiu
• [ MDKSA-2006:053 ] - Updated freeciv packages fix DoS vulnerabilities
  • From: security
• [FLSA-2006:176751] Updated gpdf package fixes security issues
  • From: Marc Deslauriers
• [FLSA-2006:168516] Updated pcre packages fix a security issue
  • From: Marc Deslauriers
• [FLSA-2006:168264-2] Updated X.org packages fix security issue
  • From: Marc Deslauriers
• [FLSA-2006:168264-1] Updated XFree86 packages fix security issues
  • From: Marc Deslauriers
• RE: Cisco PIX embryonic state machine 1b data DoS
  • From: Randy Ivener (rivener)
• Dropbear SSH server Denial of Service
  • From: Pablo Fernandez
• Cisco PIX embryonic state machine TTL(n-1) DoS
  • From: Konstantin V. Gavrilenko
• Cisco PIX embryonic state machine 1b data DoS
  • From: Konstantin V. Gavrilenko
• IE iFrame + Sun JVM + JS bug. Exploitable?
  • From: drguile
• [eVuln] ShoutLIVE PHP Code Execution & Multiple XSS Vulnerabilities
  • From: alex
• Multiple vulnerabilities in Alien Arena 2006 GE 5.00
  • From: Luigi Auriemma
• Loudblog 0.41 SQL Injection, Local file read/include
  • From: tzitaroth
• Purple Paper: Exegesis Of Virtual Hosts Hacking
  • From: unknown . pentester
• Re: [Full-disclosure] Mozilla Thunderbird : Multiple Information Disclosure Vulnerabilities
  • From: Daniel Veditz
• Cpanel Path Disclosure Vulnerability
  • From: Silversmith
• Re: Various router DoS
  • From: bugtraq
• IM Lock 2006 - Insecure Registry Permission Vulnerability
  • From: unsecure
• Re: SQL injection in Invision Power Board v2.1.5
  • From: mattmecham
• [SECURITY] [DSA 987-1] New tar packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• PHP-based CMS mass-exploitation
  • From: Daniel Bonekeeper
• phpBannerExchange 2.0 Directory Traversal Vulnerability
  • From: h4cky0u . org
• RE: linksys router + irc DoS
  • From: Daniel Ramirez Valdez
• link bank code execution and xss
  • From: retard
• histhost v1.0.0 xss and possible rmdir
  • From: retard
• [USN-260-1] flex vulnerability
  • From: Martin Pitt
• SQL injection in Invision Power Board v2.1.5
  • From: ???? ????
• SQL injection & XSS IN vbzoom v1.11
  • From: ???? ????
• Multiple vulnerabilities in Liero Xtreme 0.62b
  • From: Luigi Auriemma
• Out of memory crash in Freeciv 2.0.7
  • From: Luigi Auriemma
• Re: linksys router + irc DoS
  • From: Cade Cairns
• Multiple vulnerabilities in Cube engine 2005_08_29
  • From: Luigi Auriemma
• [ GLSA 200603-05 ] zoo: Stack-based buffer overflow
  • From: Thierry Carrez
• Multiple vulnerabilities in Sauerbraten engine 2006_02_28
  • From: Luigi Auriemma
• [ GLSA 200603-04 ] IMAP Proxy: Format string vulnerabilities
  • From: Thierry Carrez
• Microsoft Visual Studio 6.0 Sp6 Malformed .dbp File BoF Exploit
  • From: kozan
• htpasswd bufferoverflow and command execution in thttpd-2.25b.
  • From: Larry Cashdollar
• SyScan'06 Call For Papers
  • From: organiser@xxxxxxxxxx
• FTPoed Blog Engine =>v1.1 HTML Injection Vulnerability
  • From: sikik
• Announcement: WASC Threat Classification in German
  • From: contact
• [KAPDA::#31] - Runcms 1.x Cross_Site_Scripting vulnerability in bigshow.php
  • From: roozbeh_afrasiabi
• [eVuln] Simple Machines Forum - SMF 'X-Forwarded-For' XSS Vulnerability
  • From: alex
• Re: linksys router + irc DoS
  • From: bugtraq
• evoBlog Remote Name tag Script injection
  • From: sikik
• Game-Panel <= 2.1.6 XSS
  • From: retard
• vulnerability in the IE Java applet initialization engine
  • From: porkythepig
• Re: Wbb 2.3. xss
  • From: Adrian
• Re: Various router DoS
  • From: znx
• [OpenPKG-SA-2006.006] OpenPKG Security Advisory (tar)
  • From: OpenPKG
• [SECURITY] [DSA 986-1] New gnutls11 packages fix arbitrary code execution
  • From: Martin Schulze
• [SECURITY] [DSA 985-1] New libtasn1-2 packages fix arbitrary code execution
  • From: Martin Schulze
• [ GLSA 200603-03 ] MPlayer: Multiple integer overflows
  • From: Thierry Carrez
• DSplit - Tiny AV signatures Detector
  • From: ad@xxxxxxxxxxxxxxxx
• Critical Risk Vulnerability in L-Soft Listserv
  • From: NGSSoftware Insight Security Research
• Simplog <= 1.0.2 Vulnerabilities
  • From: retard
• Re: Kaspersky Memory/CPU Usage Leak by design
  • From: Teodor Cimpoesu
• Visual Studio 6.0 Buffer Overflow Vulnerability
  • From: kozan
• Wbb 2.3. xss
  • From: r57shell
• Advisory: TotalECommerce (index.asp id) Remote SQL Injection Vulnerability.
  • From: nukedx
• PHP-Stats <= 0.1.9.1 remote commands execution
  • From: rgod
• linksys router + irc DoS
  • From: Cade Cairns
• [KAPDA::#30] - CuteNews1.4.1 Cross_Site_Scripting Vulnerability
  • From: roozbeh_afrasiabi
• Pixel Post Multiple Vulnerabilities
  • From: paisterist . nst
• phpBB <= 2.0.19 Multiple DoS vulnerabilities
  • From: paisterist . nst
• [eVuln] Easy Forum XSS Vulnerability
  • From: alex
• [ GLSA 200603-01 ] WordPress: SQL injection vulnerability
  • From: Thierry Carrez
• Various router DoS
  • From: ryanmeyer14
• AVG 7 granting Everyone Full Control to updated files... even its drivers
  • From: redxii1234
• phpArcadeScript XSS Injections
  • From: retard
• [ GLSA 200603-02 ] teTeX, pTeX, CSTeX: Multiple overflows in included XPdf code
  • From: Thierry Carrez
• Kaspersky Memory/CPU Usage Leak by design
  • From: Michael . Lang
• Re: Mozilla Thunderbird : Multiple Information Disclosure Vulnerabilities
  • From: David Rasch
• Re: Guestbox XSS/an admin bypass
  • From: micuel
• XST-Strikes-Back vulnerability in Netcache
  • From: Nite Sprite
• AZTEK forums 4.0 multiple vulnerabilities (PoC)
  • From: billy
• [eVuln] Skate Board Multimple Vulnerabilities
  • From: alex
• Gregarius 0.5.2 XSS and SQL Injection Vulnerabilities
  • From: tzitaroth
• Gallery 2 Multiple Vulnerabilities
  • From: GulfTech Security Research
• MyBB 1.04 Perl Exploit
  • From: o . y . 6
• iDefense Security Advisory 03.02.06: EMC Dantz Retrospect 7 Backup client DoS Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• iDefense Security Advisory 03.02.06: Apple Mac OS X passwd Arbitrary Binary File Creation/Modification
  • From: labs-no-reply@xxxxxxxxxxxx
• RE: [Full-disclosure] Mozilla Thunderbird : Multiple Information Disclosure Vulnerabilities
  • From: Jay Stapleton
• sql in Dawaween V 1.03
  • From: shereba_2007
• MyBB 1.0.4 New SQL Injection
  • From: o . y . 6
• ProtoVer Sample IMAP testsuite release
  • From: Evgeny Legerov
• vBulletin3.0.12&3.5.3~is_valid_email()~XSS Attack
  • From: addmimistrator
• iDefense Security Advisory 03.02.06: Apple MacOS X BOMArchiveHelper Directory Traversal Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• Re: recursive DNS servers DDoS as a growing DDoS problem
  • From: Gadi Evron
• [ MDKSA-2006:052 ] - Updated mozilla-thunderbird packages fix vulnerability
  • From: security
• Woltlab Burning Board 2.x (Datenbank MOD fileid) Multiple Vulnerabilities.
  • From: nukedx
• [SECURITY] [DSA 981-1] new bmv packages fix arbitrary code execution
  • From: Martin Schulze
• [eVuln] E-Blah Platinum 'Referer' XSS Vulnerability
  • From: alex
• Re: Fedex Kinkos Smart Card Authentication Bypass
  • From: Lance James
• Re: NETGEAR WGT624 Wireless DSL router default user name/password vulnerability
  • From: Jimmy Latouche
• JOOMLA CMS 1.0.7 DoS & path disclosing
  • From: ghc
• PluggedOut Nexus SQL injection
  • From: h e
• Re: FW: WordPress 2.0.1 Multiple Vulnerabilities
  • From: Chris Hajer
• [SECURITY] [DSA 984-1] New xpdf packages fix several problems
  • From: Martin Schulze
• [SECURITY] [DSA 980-1] New tutos package fixes several vulnerabilities
  • From: Martin Schulze
• [KAPDA::#26]vBulletin.3.5.3~3.0.12-XSS
  • From: addmimistrator
• Re: recursive DNS servers DDoS as a growing DDoS problem
  • From: v9
• [OSX]: /usr/bin/passwd local root exploit.
  • From: v9
• Re: [KAPDA::#27] - Runcms 1.x Cross_Site_Scripting vulnerability
  • From: roozbeh_afrasiabi
• [FLSA-2006:178989] Updated perl-DBI package fixes security issue
  • From: Marc Deslauriers
• [USN-259-1] irssi vulnerability
  • From: Martin Pitt
• Advisory: ICQmail.com & Mail2World.com (ms_inbox.asp Current_folder) XSS vulnerability
  • From: nukedx
• Re: Evil side of Firefox extensions
  • From: Michael Ekstrand
• Re: WordPress 2.0.1 Multiple Vulnerabilities
  • From: ad@xxxxxxxxxxxxxxxx
• Re: WordPress 2.0.1 Multiple Vulnerabilities
  • From: Daniele Muscetta
• RE: Evil side of Firefox extensions
  • From: salexander
• FW: WordPress 2.0.1 Multiple Vulnerabilities
  • From: Michael.Wade
• Re: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Matthew Schiros
• Re: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: L. Adrian Griffis
• Re: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Matthew Schiros
• Re: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: L. Adrian Griffis
• Re: [Full-disclosure] Quarantine your infected users spreading malware
  • From: Dana Hudes
• SMBlog Remote Command Exucetion
  • From: botan
• Re: (PHP) mb_send_mail security bypass
  • From: Yasuo Ohgaki
• Fwd: APPLE-SA-2006-03-01 Security Update 2006-001
  • From: Dave McKinney
• NCP VPN/PKI Client - various Bugs
  • From: Ramon 'ports' Kukla
• Re: [Full-disclosure] Mozilla Thunderbird : Multiple Information Disclosure Vulnerabilities
  • From: Nick Boyce
• Re: Evil side of Firefox extensions
  • From: Dave Korn
• Secunia Research: NetworkActiv Web Server Script Source Disclosure Vulnerability
  • From: Secunia Research
• Re: Evil side of Firefox extensions
  • From: azurIt
• Re: Evil side of Firefox extensions
  • From: Mike Owen
• Re: Evil side of Firefox extensions
  • From: Ben
• Re: recursive DNS servers DDoS as a growing DDoS problem
  • From: v9
• 4images <=1.7.1 remote code execution
  • From: rgod
• Re: Evil side of Firefox extensions
  • From: Henri Cook
• Re: NETGEAR WGT624 ? Wireless DSL router default user name/password vulnerability
  • From: abuse
• Evil side of Firefox extensions
  • From: azurIt
• Re: ArGoSoft FTP server remote heap overflow
  • From: Jerome Athias
• Evolution Emailer DoS
  • From: Alan Cox
• Re: WordPress 2.0.1 Multiple Vulnerabilities
  • From: Javor Ninov
• Re: Mozilla Thunderbird : Multiple Information Disclosure Vulnerabilities
  • From: Steve Shockley
• SAP Web Application Server http request url parsing vulnerability
  • From: arnold . grossmann
• Re: Knowledgebases Remote Command Exucetion
  • From: security curmudgeon
• Secunia Research: Lighttpd Script Source Disclosure Vulnerability
  • From: Secunia Research
• Re: [Full-disclosure] Mozilla Thunderbird : Multiple Information Disclosure Vulnerabilities
  • From: Daniel Veditz
• Re: Fedex Kinkos Smart Card Authentication Bypass
  • From: Lance James
• [eVuln] Leif M. Wright's Blog Multiple Vulnerabilities
  • From: alex
• Updated Noah Classifieds Component for Joomla!/Mambo
  • From: noahsec1
• FreeBSD Security Advisory FreeBSD-SA-06:09.openssh [REVISED]
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-06:10.nfs
  • From: FreeBSD Security Advisories
• Re: ArGoSoft FTP server remote heap overflow
  • From: Steven M. Christey
• Limbo CMS code execution
  • From: Alexander Hristov
• FreeBSD Security Advisory FreeBSD-SA-06:09.openssh
  • From: FreeBSD Security Advisories
• Re: [Full-disclosure] Mozilla Thunderbird : Multiple Information Disclosure Vulnerabilities
  • From: Daniel Veditz
• Re: [Full-disclosure] Mozilla Thunderbird : Multiple Information Disclosure Vulnerabilities
  • From: Daniel Veditz
• Re: Bypass Fortinet anti-virus using FTP
  • From: Mathieu Dessus
• bttlxeForum 2.* XSS Vulnerability
  • From: stormhacker
• recursive DNS servers DDoS as a growing DDoS problem
  • From: Gadi Evron
• Re: [Full-disclosure] Mozilla Thunderbird : Multiple Information Disclosure Vulnerabilities
  • From: Renaud Lifchitz
• PEHEPE Membership Management System Multiple Vulnerabilities
  • From: mail
• [ MDKSA-2006:051 ] - Updated gettext packages fix temporary file vulnerabilities
  • From: security
• Virex on-access scanning unreliable
  • From: hahn
• Re: NETGEAR WGT624 Wireless DSL router default user name/password vulnerability
  • From: Adam Chesnutt
• [security bulletin] SSRT061118 rev.1 - HP System Management Homepage (SMH) Running on Windows: Remote Unauthorized Access
  • From: security-alert
• Mozilla Thunderbird : Multiple Information Disclosure Vulnerabilities
  • From: Renaud Lifchitz
• (PHP) mb_send_mail security bypass
  • From: ced . clerget
• (PHP) imap functions bypass safemode and open_basedir restrictions
  • From: ced . clerget
• QwikiWiki v1.4 XSS Vulnerability
  • From: drdeath_2006
• MyBB 1.3 NewSQL Injection
  • From: o . y . 6
• EJ3 TOPo - Cross Site Scripting Vulnerability
  • From: mail
• FarsiNews 2.5Pro Exploit
  • From: hessamx
• [FLSA-2006:181014] Updated gnutls packages fix a security issue
  • From: Marc Deslauriers
• Fedex Kinkos Smart Card Authentication Bypass
  • From: Lance James
• Re: NETGEAR WGT624 Wireless DSL router default user name/password vulnerability
  • From: James Garrison
• Sourceforge XSS
  • From: liz0
• [FLSA-2006:175818] Updated udev packages fix a security issue
  • From: Marc Deslauriers
• WordPress 2.0.1 Multiple Vulnerabilities
  • From: k4p0k4p0
• [FLSA-2006:157366] Updated PostgreSQL packages fix security issues
  • From: Marc Deslauriers
• [SECURITY] [DSA 983-1] New pdftohtml packages fix several vulnerabilities
  • From: Martin Schulze
• [FLSA-2006:177694] Updated auth_ldap package fixes security issue
  • From: Marc Deslauriers
• [ MDKSA-2005:050 ] - Updated unzip packages fix vulnerabilities
  • From: security
• [FLSA-2006:177326] Updated mod_auth_pgsql package fixes security issue
  • From: Marc Deslauriers
• Re: URL filter bypass in Fortinet
  • From: VulnWatch
• NETGEAR WGT624 Wireless DSL Firewall/Router vulnerability
  • From: info
• NETGEAR WGT624 Wireless DSL router default user name/password vulnerability
  • From: info
• [ MDKSA-2006:049 ] - Updated squirrelmail packages fix vulnerabilities
  • From: security
• [eVuln] PerlBlog Multiple Vulnerabilities
  • From: alex
• Re: Bypass Fortinet anti-virus using FTP
  • From: VulnWatch
• directory traversal in DirectContact 0.3b
  • From: Donato Ferrante
• PixelArtKingdom TopSites Remote Command Exucetion
  • From: botan
• 2 SQL Injection in d3jeeb
  • From: S3ude
• [ISecAuditors Advisories] IMAP/SMTP Injection in SquirrelMail
  • From: ISecAuditors Security Advisories
• Knowledgebases Remote Command Exucetion
  • From: botan
• Secunia Research: ArGoSoft Mail Server Pro viewheaders Script Insertion
  • From: Secunia Research
• Re: [eVuln] Vanilla Guestbook Multiple XSS & SQL Injection Vulnerabilities
  • From: tachyon
• CGI Calendar XSS Vulnerability
  • From: revnic
• 2 SQL Injection in Fantastic News
  • From: S3ude
• Mail Transport System Professional--Open Relay Hole
  • From: Craig Morrison
• [SECURITY] [DSA 982-1] New gpdf packages fix several vulnerabilities
  • From: Martin Schulze
• phpRPC Library Remote Code Execution
  • From: GulfTech Security Research
• [eVuln] Quirex Arbitrary File Disclosure Vulnerability
  • From: alex
• Archangel Weblog 0.90.02 Admin Authentication Bypass & Remote File Inclusion
  • From: kingofska
• Thomson SpeedTouch 500 modems vulnerable to XSS
  • From: preben
• Re: PwsPHP Injection SQL on Index.php
  • From: zeta_2_
• Norton Monitoring Systems funny problems
  • From: Alexander Hristov
• Archive_Zip (Zip file management class) Directory traversal
  • From: h e
• [USN-258-1] PostgreSQL vulnerability
  • From: Martin Pitt
• [ GLSA 200602-14 ] noweb: Insecure temporary file creation
  • From: Thierry Carrez
• [ GLSA 200602-13 ] GraphicsMagick: Format string vulnerability
  • From: Thierry Carrez
• Re: [Full-disclosure] Quarantine your infected users spreading malware
  • From: 499nag
• Research paper on covert channels
  • From: matthijs
• Re: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Matthew Schiros
• Re: Vulnerabilites in new laws on computer hacking
  • From: Jure Koren
• Re: Amazon phishing scam on Yahoo servers
  • From: Elizabeth Zwicky
• Re: Amazon phishing scam on Yahoo servers
  • From: Stefan Kelm
• Re: H&R Block contact
  • From: Stan Bubrouski
• Re: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Jamie Riden
• RE: Vulnerabilites in new laws on computer hacking
  • From: Craig Wright
• Re: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Thomas M. Payerle
• Re: DarkStarlings.com XSS Vulnerability
  • From: webmaster
• announcement: reporting and mitigating botnets
  • From: Gadi Evron
• Re: Amazon phishing scam on Yahoo servers
  • From: Vincent Archer
• SQL Injection in DCI-Taskeen
  • From: xx_hack_xx_2004
• PwsPHP Injection SQL on Index.php
  • From: papipsycho
• [waraxe-2006-SA#047] - Evading sql-injection filters in phpNuke 7.8
  • From: come2waraxe
• ArGoSoft FTP server remote heap overflow
  • From: Jerome Athias
• [FLSA-2006:176731] Updated perl packages fix security issue
  • From: Marc Deslauriers
• [FLSA-2006:158543] Updated gaim package fixes security issues
  • From: Marc Deslauriers
• [FLSA-2006:138098] Updated nfs-utils package fixes security issues
  • From: Marc Deslauriers
• NSA Group Security Advisory NSAG-№202-25.02.2006 Vulnerability WEBSITE GENERATOR 3.3
  • From: NSA Group
• Advisory: eZ publish <= 3.7.3 (imagecatalogue module) XSS vulnerability
  • From: nukedx
• Advisory: Pentacle In-Out Board <= 6.03 (newsdetailsview.asp newsid) Remote SQL Injection Vulnerability
  • From: nukedx
• Advisory: Pentacle In-Out Board <= 6.03 (login.asp) Authencation ByPass Vulnerability
  • From: nukedx
• NSA Group Security Advisory NSAG-№201-25.02.2006 Vulnerability SPiD v1.3.1
  • From: NSA Group
• [ MDKSA-2005:048 ] - Updated mplayer packages fix integer overflow vulnerabilities
  • From: security
• iDefense Security Advisory 02.24.06: SCO Unixware Setuid ptrace Local Privilege Escalation Vulnerability
  • From: labs-no-reply
• fwd: SuSE Security Announcement: heimdal (SUSE-SA:2006:011)
  • From: Dave McKinney
• Re: Quarantine your infected users spreading malware
  • From: Bob Beck
• RE: Vulnerabilites in new laws on computer hacking
  • From: dave
• [eVuln] Guestex XSS Vulnerability
  • From: alex
• Mambo Multiple Vulnerabilities
  • From: GulfTech Security Research
• Re: Vulnerabilites in new laws on computer hacking
  • From: Ansgar -59cobalt- Wiechers
• TSLSA-2006-0010 - multi
  • From: Trustix Security Advisor
• TSLSA-2006-0008 - multi
  • From: Trustix Security Advisor
• The Domain Name Service as an IDS
  • From: Gadi Evron
• Re: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Kevin Waterson
• Re: Quarantine your infected users spreading malware
  • From: Marcus Aurelius
• Re: Vulnerabilites in new laws on computer hacking
  • From: Casper . Dik
• Re: Vulnerabilites in new laws on computer hacking
  • From: Davi Anabuki
• Re: Vulnerabilites in new laws on computer hacking
  • From: Casper . Dik
• IRM 018: Winamp 5.13 m3u Playlist Buffer Overflow
  • From: Advisories
• SuSE Security Announcement: heimdal (SUSE-SA:2006:010)
  • From: Thomas Biege
• Advisory: MyPHPNuke <= 1.8.8 multiple XSS vulnerabilities
  • From: nukedx
• Advisory: Woltlab Burning Board 2.x (JGS-Gallery MOD <= 4.0) multiple XSS vulnerabilities
  • From: nukedx
• [FLSA-2006:162750] Updated sudo packages fix security issue
  • From: Marc Deslauriers
• Advisory: CilemNews System <= 1.1 Remote SQL Injection Vulnerability
  • From: nukedx
• [FLSA-2006:180036-2] Updated firefox package fixes security issues
  • From: Marc Deslauriers
• RE: Amazon phishing scam on Yahoo servers
  • From: Alex Eckelberry
• [FLSA-2006:180036-1] Updated mozilla packages fix security issues
  • From: Marc Deslauriers
• SpeedCommander 11.0 & ZipStar 5.1 & Squeez 5.1 Directory traversal
  • From: h e
• StuffIt and ZipMagic Family of products Directory traversal
  • From: h e
• WinAce Archiver v2.6 Directory traversal
  • From: h e
• Archive_Tar v 1.2(Tested) (Tar file management class) Directory traversal
  • From: h e
• [eVuln] Guestex Shell Command Execution Vulnerability
  • From: alex
• NSA Group Security Advisory NSAG-№200-24.02.2006 Vulnerability ArGoSoft Mail Server Pro IMAP
  • From: NSA Group
• NSA Group Security Advisory NSAG-№198-23.02.2006 Vulnerability ArGoSoft Mail Server Pro
  • From: NSA Group
• Vulnerability in Crypt::CBC Perl module, versions <= 2.16
  • From: Lincoln Stein
• Event Speaker
  • From: Pete Herzog
• Administrivia: New Bugtraq moderator
  • From: David Ahmad
• NSA Group Security Advisory NSAG-№195-23.02.2006 Vulnerability FCKeditor 2.0 FC
  • From: NSA Group
• NSA Group Security Advisory NSAG-№198-23.02.2006 Vulnerability The Bat v. 3.60.07
  • From: NSA Group
• NSA Group Security Advisory NSAG-№196-23.02.2006 Vulnerability FCKeditor 2.2
  • From: NSA Group
• NSA Group Security Advisory NSAG-№197-23.02.2006 Vulnerability CubeCart 3.0.0 – 3.0.6
  • From: NSA Group
• HYSA-2006-003 Oi! Email Marketing 3.0 SQL Injection
  • From: h4cky0u . org
• RE: Amazon phishing scam on Yahoo servers
  • From: Paul Laudanski
• Re: Amazon phishing scam on Yahoo servers
  • From: Paul Laudanski
• RE: Amazon phishing scam on Yahoo servers
  • From: Geoff Vass
• Re: H&R Block contact
  • From: Fixer
• Re: H&R Block contact
  • From: Rory A. Savage
• Re: Amazon phishing scam on Yahoo servers
  • From: Steve Friedl
• Re: new linux malware
  • From: Jamie Riden
• ZDI-06-002: Adobe Macromedia ShockWave Code Execution
  • From: zdi-disclosures
• [USN-257-1] tar vulnerability
  • From: Martin Pitt
• Secunia Research: WinACE ARJ Archive Handling Buffer Overflow
  • From: Secunia Research
• [eVuln] Teca Diary PE SQL Injection Vulnerability
  • From: alex
• Secunia Research: Visnetic AntiVirus Plug-in for MailServer Privilege Escalation
  • From: Secunia Research
• NOCC Webmail <= 1.0 multiple vulnerabilities
  • From: rgod
• NSFOCUS SA2006-01 : Winamp m3u File Processing Buffer Overflow Vulnerability
  • From: NSFOCUS Security Team
• zoo contains exploitable buffer overflows
  • From: Jean-Sébastien Guay-Leroux
• [ MDKSA-2006:047 ] - Updated metamail packages fix vulnerability
  • From: security
• Re: Internet Explorer Phishing mouseover issue
  • From: Steven M. Christey
• DEF CON 14 is now in effect! The Call for Papers is open.
  • From: The Dark Tangent
• [ MDKSA-2006:045 ] - Updated MySQL packages fix temporary file vulnerability
  • From: security
• Re: Multiple Injection Vulnerabilities in PHP PEAR::Auth Module
  • From: Benjamin R. Ginter
• Re: Multiple Injection Vulnerabilities in PHP PEAR::Auth Module
  • From: Matt Van Gundy
• South River WebDrive Buffer Overflow Vulnerability
  • From: Adrian Castro
• [INetCop Security Advisory] Global Hauri Virobot cookie exploit
  • From: dong-hun you
• Multiple Injection Vulnerabilities in PHP PEAR::Auth Module
  • From: Matt Van Gundy
• InqTana Through the eyes of Dr. Frankenstein.
  • From: KF (lists)
• [KAPDA::#29]Noah's classifieds multiple vulnerabilities
  • From: alireza hassani
• [SECURITY] [DSA 980-1] New tutos packages fix multiple vulnerabilities
  • From: Michael Stone
• Re: update on the linux worm
  • From: Stephen J. Smoogen
• Mozilla Thunderbird : Remote Code Execution & Denial of Service
  • From: Renaud Lifchitz
• [KAPDA::#27] - Runcms 1.x Cross_Site_Scripting vulnerability
  • From: roozbeh_afrasiabi
• Re: Vulnerabilites in new laws on computer hacking
  • From: Radoslav Dejanović
• IpSwitch WhatsUp Professional 2006 DoS
  • From: Josh Zlatin
• [ MDKSA-2006:046 ] - Updated tar packages fix vulnerability
  • From: security
• IRM 017: Multiple Vulnerabilities in Infovista Portal SE
  • From: Advisories
• PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Gadi Evron
• Re: new linux malware
  • From: Gadi Evron
• Invision Power Board 2.1.4 Multiple Vulnerabilities
  • From: paisterist . nst
• [ GLSA 200602-11 ] OpenSSH, Dropbear: Insecure use of system() call
  • From: Thierry Carrez
• Re: Vulnerabilites in new laws on computer hacking
  • From: FocusHacks
• Re: Java script exploit
  • From: Andreas Beck
• RE: Vulnerabilites in new laws on computer hacking
  • From: Craig Wright
• Re: Vulnerabilites in new laws on computer hacking
  • From: Ansgar -59cobalt- Wiechers
• Quarantine your infected users spreading malware
  • From: Gadi Evron
• Re: First WMF mass mailer ItW (phishing Trojan) - think singularities
  • From: Lance James
• PEAR LiveUser File Access Vulnerabilities
  • From: GulfTech Security Research
• RE: Vulnerabilites in new laws on computer hacking
  • From: Craig Wright
• RE: First WMF mass mailer ItW (phishing Trojan) - think singularities
  • From: Ken Kousky
• Re: PHP as a secure language? PHP worms? [was: Re: new linux malware]
  • From: Christine Kronberg
• H&R Block contact
  • From: Fixer
• RE: Vulnerabilites in new laws on computer hacking
  • From: Benson, Sean M
• Re: Vulnerabilites in new laws on computer hacking
  • From: Crispin Cowan
• Amazon phishing scam on Yahoo servers
  • From: Paul Laudanski
• RE: Vulnerabilites in new laws on computer hacking
  • From: Bigby Findrake
• RE: Vulnerabilites in new laws on computer hacking
  • From: Craig Wright
• Re: Vulnerabilites in new laws on computer hacking
  • From: ArkanoiD
• Re: Vulnerabilites in new laws on computer hacking
  • From: ArkanoiD
• Not completely fixed? (was: False positive signature verification in GnuPG)
  • From: Marcus Meissner
• [USN-254-1] noweb vulnerability
  • From: Martin Pitt
• Re: [waraxe-2006-SA#046] - Critical sql injection in phpNuke 7.5-7.8
  • From: sp3x
• PunBB 1.2.10 Multiple DoS Vulnerabilities
  • From: k4p0k4p0
• [eVuln] BirthSys SQL Injection Vulnerability
  • From: alex
• [ MDKSA-2006:044 ] - Updated kernel packages fix multiple vulnerabilities
  • From: security
• Re: Invision Power Board Army System Mod <= 2.1 SQL Injection Exploit
  • From: Angelos D. Keromytis
• The New Face of Phishing
  • From: Gadi Evron
• [myimei]CuteNews1.4.1~ Add Comment For Protected UserNames~ XSS Attack
  • From: addmimistrator
• [eVuln] Magic Downloads Unauthorized Data Modification
  • From: alex
• [USN-256-1] bluez-hcidump vulnerability
  • From: Martin Pitt
• Re: new linux malware
  • From: Marco Monicelli
• [ GLSA 200602-12 ] GPdf: Heap overflows in included Xpdf code
  • From: Thierry Carrez
• Re: new linux malware
  • From: Christine Kronberg
• Mozila Thunderbird 1.5 Address Book DoS
  • From: Javor Ninov
• MiniNuke CMS System all versions (pages.asp) SQL Injection
  • From: nukedx
• [eVuln] Magic News Lite PHP Code Execution & Unauthorized Data Modification
  • From: alex
• Whitepaper by Amit Klein: "HTTP Response Smuggling"
  • From: Amit Klein (AKsecurity)
• Re: Invision Power Board Army System Mod <= 2.1 SQL Injection Exploit
  • From: Crispin Cowan
• how to crash apache/php in cpanel
  • From: Ed Wiget
• [BuHa-Security] DoS Vulnerability in Firefox <= 1.0.7
  • From: bugtraq
• Re: Not completely fixed?
  • From: Werner Koch
• grab cookie information with Melange Chat Server 1.10
  • From: Nexus
• [AJECT] TrueNorth IA eMailserver 5.3.4 buffer overflow vulnerability
  • From: João Antunes
• [USN-255-1] openssh vulnerability
  • From: Martin Pitt
• [BUGZILLA] Security Advisory for Bugzilla 2.20, 2.21.1, and 2.18.4
  • From: mkanat
• SUSE Security Announcement: gpg,liby2util signature checking problems (SUSE-SA:2006:009)
  • From: Marcus Meissner
• [waraxe-2006-SA#046] - Critical sql injection in phpNuke 7.5-7.8
  • From: come2waraxe
• Re: Vulnerability in WinRAR - Phishing based
  • From: Andreas Beck
• Geeklog Remote Code Execution
  • From: GulfTech Security Research
• [eVuln] Time Tracking Software Multiple Vulnerabilities
  • From: alex
• [TZO-062006] Safe'nVulnerable
  • From: Thierry Zoller
• Re: First WMF mass mailer ItW (phishing Trojan)
  • From: Lance James
• Secunia Research: NJStar Word Processor Font Name Buffer Overflow
  • From: Secunia Research
• Guestbox XSS/an admin bypass
  • From: innate
• More info: gBook Multiple Unspecified Cross-Site Scripting Vulnerabilities
  • From: mkproductions
• [eVuln] Magic Calendar Lite Authentication Bypass
  • From: alex
• update on the linux worm
  • From: Gadi Evron
• [OpenPKG-SA-2006.004] OpenPKG Security Advisory (postgresql)
  • From: OpenPKG
• new linux malware
  • From: Gadi Evron
• [OpenPKG-SA-2006.005] OpenPKG Security Advisory (tin)
  • From: OpenPKG
• RE: Vulnerabilites in new laws on computer hacking
  • From: Anthony Cicalla
• Re: First WMF mass mailer ItW (phishing Trojan)
  • From: Lance James
• Re: Vulnerabilites in new laws on computer hacking
  • From: Max Ashton
• Re: Internet Explorer remotely exploitable vulnerability in JScript's document.write() method
  • From: temp
• Re: Vulnerabilites in new laws on computer hacking
  • From: Ansgar -59cobalt- Wiechers
• Re: Vulnerabilites in new laws on computer hacking
  • From: ArkanoiD
• Re: Vulnerabilites in new laws on computer hacking
  • From: Seth Breidbart
• Re: Vulnerabilites in new laws on computer hacking
  • From: dave
• Re: Vulnerabilites in new laws on computer hacking
  • From: Sysmin Sys73m47ic
• Vulnerability in WinRAR - Phishing based
  • From: preben
• Re: Vulnerabilites in new laws on computer hacking
  • From: Jon Gucinski
• Malware that breaks SSL via Pharming {Emerging Threat}
  • From: Lance James
• [operational update] Looking behind the smoke screen of the Internet
  • From: Gadi Evron
• [FLSA-2006:175406] Updated Apache httpd packages fix security issues
  • From: Marc Deslauriers
• [FLSA-2006:152809] Updated squid package fixes security issues
  • From: Marc Deslauriers
• [FLSA-2006:168935] Updated openssh packages fix security issues
  • From: Marc Deslauriers
• [ GLSA 200602-10 ] GnuPG: Incorrect signature verification
  • From: Thierry Carrez
• SLQ Injection vulnerability in WPCeasy
  • From: murfie
• [waraxe-2006-SA#045] - Bypassing CAPTCHA in phpNuke 6.x-7.9
  • From: come2waraxe
• ADOdb Library Cross Site Scripting
  • From: GulfTech Security Research
• RCblog exploit [fun]
  • From: hessam
• [OpenPKG-SA-2006.003] OpenPKG Security Advisory (openssh)
  • From: OpenPKG
• [OpenPKG-SA-2006.002] OpenPKG Security Advisory (sudo)
  • From: OpenPKG
• Tasarim Rehberi Index.PHP Remote Command Exucetion
  • From: botan
• e107 CMS 0.7.2 Chatbox plugin XSS vulnerability
  • From: ssteam . pl
• Coppermine Photo Gallery <=1.4.3 remote code execution
  • From: rgod
• Re: Internet Explorer Phishing mouseover issue
  • From: Paul Szabo
• [ MDKSA-2006:043 ] - Updated gnupg packages fix signature file verification vulnerability
  • From: security
• [ MDKSA-2006:042 ] - Updated libtiff packages fix vulnerability
  • From: security
• [ MDKSA-2006:041 ] - Updated bluez-hcidump packages fix buffer overflow vulnerability
  • From: security
• Re: dotproject <= 2.0.1 remote code execution
  • From: milw0rm Inc.
• Re: Java script exploit
  • From: Jose Nazario
• Re: Java script exploit
  • From: Jose Nazario
• Re: Java script exploit
  • From: 3APA3A
• Re: Stack overflow vulnerability in Internet Explorer exploitable trough VBScript and JScript scripting engines.
  • From: 3APA3A
• [ MDKSA-2006:040 ] - Updated kernel packages fix multiple vulnerabilities
  • From: security
• Java script exploit
  • From: gandalf
• BCS Asia 2006 - Call for Papers
  • From: Jim Geovedi
• Stack overflow vulnerability in Internet Explorer exploitable trough VBScript and JScript scripting engines.
  • From: porkythepig
• [eVuln] CALimba Authentication Bypass Vulnerability
  • From: alex
• Uniden UIP1868P (VoIP phone/gateway) default easy-to-guess password vulnerability
  • From: pagvac
• Sending exact replicas of Distributed.net's worked OGR project files could increase individual's stats.
  • From: spoilt . jesus
• [OpenPKG-SA-2006.001] OpenPKG Security Advisory (gnupg)
  • From: OpenPKG
• [eVuln] SmE GB Host Authentication Bypass Vulnerability
  • From: alex
• [eVuln] PHP/MYSQL Timesheet Multiple SQL Injection Vulnerabilities
  • From: alex
• [SECURITY] [DSA 978-1] New GnuPG packages fix invalid success return
  • From: Martin Schulze
• Re: dotproject <= 2.0.1 remote code execution
  • From: Adam Donnison
• Re: Digital Armaments Security Advisory 02.14.2006: Gallery web-based photo gallery remote file execution
  • From: Bharat Mediratta
• [security bulletin] SSRT051023 rev.6 - HP OpenView Network Node Manager (OV NNM) Remote Unauthorized Privileged Access
  • From: security-alert
• Password disclosure and remote access in Netcool/NeuSecure Security information management platform
  • From: D.Snezhkov
• Re: memory leak in IE?
  • From: bcrawfordjr
• Bugs/Security issues with PatchLink's Update Server
  • From: Brian Boner
• [SECURITY] [DSA 979-1] New pdfkit.framework packages fix several vulnerabilities
  • From: Martin Schulze
• Internet Explorer Phishing mouseover issue
  • From: gandalf
• RUNCMS 1.3a SQL injection
  • From: h e
• [USN-253-1] heimdal vulnerability
  • From: Martin Pitt
• False positive signature verification in GnuPG
  • From: Werner Koch
• [USN-252-1] gnupg vulnerability
  • From: Martin Pitt
• SNORT Incorrect fragmented packet reassembly
  • From: siouxsie
• Re: Siteframe Beaumont 5.0.2 <== User Comment Cross-Site Scripting Vulnerability
  • From: federico . alice
• Soldier of Fortune II format string through PunkBuster 1.180
  • From: Luigi Auriemma
• [eVuln] Scriptme products BBCode 'url' XSS Vulnerability
  • From: alex
• Re: Re: Vulnerabilities in vBulltin(3.0.7 - 3.5.3) and IPB(2.0.0 - 2.1.4).
  • From: Paul Laudanski
• Re: Vulnerabilites in new laws on computer hacking
  • From: Glynn Clements
• [USN-251-1] libtasn vulnerability
  • From: Martin Pitt
• [ GLSA 200602-08 ] libtasn1, GNU TLS: Security flaw in DER decoding
  • From: Thierry Carrez
• RE: Vulnerabilites in new laws on computer hacking
  • From: Craig Wright
• [ GLSA 200602-09 ] BomberClone: Remote execution of arbitrary code
  • From: Thierry Carrez
• PHPKIT >= 1.6.1r2 arbitrary local/remote inclusion (unproperly patched in previous versions)
  • From: rgod
• First WMF mass mailer ItW (phishing Trojan)
  • From: Gadi Evron
• Winamp .m3u fun again ;)
  • From: Sowhat
• Siteframe Beaumont 5.0.2 <== User Comment Cross-Site Scripting Vulnerability
  • From: federico . alice
• [eVuln] PHP Event Calendar XSS & User's Data Corruption Vulnerabilities
  • From: alex
• Critical SQL Injection PHPNuke <= 7.8 - Your_Account module
  • From: sp3x
• D-Link DWL-G700AP httpd DoS
  • From: innate
• RE: Vulnerabilites in new laws on computer hacking
  • From: Marcus J. Ranum
• Re: Vulnerabilites in new laws on computer hacking
  • From: Radoslav Dejanović
• [SECURITY] [DSA 977-1] New heimdal packages fix several vulnerabilities
  • From: Martin Schulze
• What is the state of vulnerability research?
  • From: Steven M. Christey
• Re: MyBB 1.03 Multible xss and sql injections
  • From: security
• Re: Vulnerabilites in new laws on computer hacking
  • From: Paul Schmehl
• Windows Media Player BMP Heap Overflow (MS06-005)
  • From: atmaca
• Openwall GNU/*/Linux (Owl) 2.0 release
  • From: Solar Designer
• PostgreSQL security releases 8.1.3, 8.0.7, 7.4.12, 7.3.14
  • From: PostgreSQL Security
• [SECURITY] [DSA 975-1] New nfs-user-server packages fix arbitrary code execution
  • From: Martin Schulze
• [myimei]MyBB1.0.3~managegroup.php~Multiple SqlInjection & XSS
  • From: addmimistrator
• Security advisory: Windows IME Vulnerability (MS06-009)
  • From: Ryan Lee
• Kadu Remote Denial Of Service Fun
  • From: Piotr Bania
• [SECURITY] [DSA 972-1] New pdfkit.framework packages fix denial of service
  • From: Martin Schulze
• Re: Everyone's loginName variable Cross Site Scripting Vulnerability
  • From: btn
• [ Secuobs - Advisory ] Another kind of DoS on Nokia cell phones
  • From: Infratech Research
• [SECURITY] [DSA 973-1] New OTRS packages fix several vulnerabilities
  • From: Martin Schulze
• [USN-249-1] xpdf/poppler/kpdf vulnerabilities
  • From: Martin Pitt
• [ GLSA 200602-07 ] Sun JDK/JRE: Applet privilege escalation
  • From: Stefan Cornelius
• [myimei]MyBB 1.0.3~private.php~multiple SqlInjection
  • From: addmimistrator
• Re: dotproject <= 2.0.1 remote code execution
  • From: Adam Donnison
• [eVuln] M. Blom HTML::BBCode perl module XSS Vulnerabilities
  • From: alex
• honeyd security advisory: remote detection
  • From: Niels Provos
• [security bulletin] SSRT051045 rev.2 - HP-UX Running DNS BIND4/BIND8 as Forwarders: Remote Unauthorized Privileged Access
  • From: security-alert
• MyBB1.0.3~managegroup.php~Multiple SqlInjection & XSS
  • From: addmimistrator
• Re: What can a Remote Vulnerability Scanner do in Future?
  • From: Tim Nelson
• [security bulletin] SSRT061108 rev.3 - HP Systems Insight Manager Remote Unauthorized Access via Directory Traversal
  • From: security-alert
• [USN-248-1] unzip vulnerability
  • From: Martin Pitt
• Re: John the Ripper 1.7; pam_passwdqc 1.0+; tcb 1.0; phpass 0.0
  • From: Aaron
• [eVuln] 2200net Calendar system SQL Injection and Authentication Bypass Vulnerabilities
  • From: alex
• [SECURITY] [DSA 974-1] New gpdf packages fix denial of service
  • From: Martin Schulze
• [eVuln] My Blog BBCode XSS Vulnerabilities
  • From: alex
• Re: John the Ripper 1.7; pam_passwdqc 1.0+; tcb 1.0; phpass 0.0
  • From: Rainer Duffner
• XMB Forums Multiple Vulnerabilities
  • From: GulfTech Security Research
• [USN-248-2] unzip regression fix
  • From: Martin Pitt
• Mirabiliz ICQ 2002/2003/ LITE 4.0/4.1 LONG (DIRECTORY + FILENAME) EXPLOIT
  • From: edubp2002
• [USN-250-1] Linux kernel vulnerability
  • From: Martin Pitt
• Digital Armaments Security Advisory 02.14.2006: Gallery web-based photo gallery remote file execution
  • From: info
• Re: Latest wu-ftpd exploit :-s
  • From: Ragnar Paulson
• Re: Invision Power Board Army System Mod <= 2.1 SQL Injection Exploit
  • From: Cristian Stoica
• Re: Re: Vulnerabilities in vBulltin(3.0.7 - 3.5.3) and IPB(2.0.0 - 2.1.4).
  • From: sudd3n_death
• CYBSEC - Security Pre-Advisory: Phishing Vector in SAP BC
  • From: Leandro Meiners
• Vulnerabilites in new laws on computer hacking
  • From: self-destruction
• iDefense Labs Quarterly Hacking Challenge
  • From: labs-no-reply@xxxxxxxxxxxx
• [SECURITY] [DSA 976-1] New libast packages fix arbitrary code execution
  • From: Martin Schulze
• CYBSEC - Security Pre-Advisory: Arbitrary File Read/Delete in SAP BC
  • From: Leandro Meiners
• [BuHa-Security] Multiple Vulnerabilities in Mantis 1.00rc4
  • From: bugtraq
• [myimei]WordPress2.0.0~autorswebsite~XSS attack
  • From: addmimistrator
• Cisco Security Advisory: TACACS+ Authentication Bypass in Cisco Anomaly Detection and Mitigation Products
  • From: Cisco Systems Product Security Incident Response Team
• [EEYEB-20051017] Windows Media Player BMP Heap Overflow
  • From: eEye Advisories
• iDefense Security Advisory 02.14.06: Microsoft Windows Media Player Plugin Buffer Overflow Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• MyBB 1.03 Multible xss and sql injections
  • From: s2b
• memory leak in IE?
  • From: David Cross
• [ GLSA 200602-06 ] ImageMagick: Format string vulnerability
  • From: Thierry Carrez
• XSS bugs and SQL injection in sNews
  • From: Alexander Hristov
• dotproject <= 2.0.1 remote code execution
  • From: r . verton
• [waraxe-2006-SA#044] - XSS in phpNuke 7.8 and older versions
  • From: come2waraxe
• SQL injection in PHP Classifieds 6.20
  • From: audun . larsen
• Re: On the "0-day" term
  • From: Gadi Evron
• [SECURITY] [DSA 971-1] New xpdf packages fix denial of service
  • From: Martin Schulze
• Re: Latest wu-ftpd exploit :-s
  • From: Marco Monicelli
• Re: [Full-disclosure] On the "0-day" term
  • From: Jason Coombs
• On the "0-day" term
  • From: Steven M. Christey
• [SECURITY] [DSA 970-1] New kronolith packages fix cross-site scripting
  • From: Martin Schulze
• [ MDKSA-2006:039 ] - Updated gnutls packages fix libtasn1 out-of-bounds access vulnerabilities
  • From: security
• eStara SIP softphone several message-processing vulnerabilities
  • From: zwell
• Advisory: Internet Explorer Drag and Drop Redeux [CVE-2005-3240] (fwd)
  • From: Matthew Murphy
• Advisory: Internet Explorer Drag and Drop Redeux [CVE-2005-3240] (fwd)
  • From: Matthew Murphy
• Re: Folder Guard password protection bypass
  • From: Stan Bubrouski
• EGS Enterprise Groupware System 1.0 rc4 remote commands execution & FlySpray 0.9.7 remote commands execution
  • From: rgod
• New winamp m3u/pls .WMA & .M3U Extension overflows
  • From: b0fnet
• XSS vulnerability in guestbook-php-script
  • From: Micha Borrmann
• Siteframe Beaumont 5.0.1a <== Cross-Site Scripting Vulnerability
  • From: federico . alice
• Re: [Full-disclosure] Internet Explorer drag&drop 0day
  • From: Thierry Zoller
• Internet Explorer drag&drop 0day
  • From: Gadi Evron
• [SECURITY] [DSA 969-1] New scponly packages fix potential root vulnerability
  • From: Martin Schulze
• URL filter bypass in Fortinet
  • From: Mathieu Dessus
• Bypass Fortinet anti-virus using FTP
  • From: Mathieu Dessus
• Latest wu-ftpd exploit :-s
  • From: Mark Heiligen
• Folder Guard password protection bypass
  • From: ShadowBeast
• [SECURITY] [DSA 968-1] New noweb packages fix insecure temporary file creation
  • From: Martin Schulze
• Everyone's loginName variable Cross Site Scripting Vulnerability
  • From: simo
• [ GLSA 200602-05 ] KPdf: Heap based overflow
  • From: Thierry Carrez
• Invision Power Board Army System Mod <= 2.1 SQL Injection Exploit
  • From: unsecure
• [eVuln] phpstatus Authentication Bypass
  • From: alex
• Re: Zen-Cart <= 1.2.6d blind SQL injection / remote commands execution:
  • From: please-use-the-support-forum
• [eVuln] Clever Copy 'Referer' & 'X-Forwarded-For' XSS Vulnerabilities
  • From: alex
• [eVuln] phphd Multiple Vulnerabilities
  • From: alex
• DB_eSession deleteSession() SQL injection
  • From: GulfTech Security Research
• [ GLSA 200602-04 ] Xpdf, Poppler: Heap overflow
  • From: Thierry Carrez
• DocMGR <= 0.54.2 arbitrary remote inclusion
  • From: rgod
• RS-2006-1: Multiple flaws in VHCS 2.x
  • From: Roman Medina-Heigl Hernandez
• imageVue16.1 upload vulnerability
  • From: zjieb
• [USN-247-1] Heimdal vulnerability
  • From: Martin Pitt
• [eVuln] phphg Guestbook Multiple Vulnerabilities
  • From: alex
• [eVuln] phpht Topsites Multiple Vulnerabilities
  • From: alex
• HiveMail <= 1.3 Multiple Vulnerabilities
  • From: GulfTech Security Research
• Linpha <= 1.0 multiple arbitrary local inclusion
  • From: rgod
• Corrupt Word file may cause buffer overflow in the Blackberry Attachment Service
  • From: lukew
• [security bulletin] SSRT061108 rev.2 - HP Systems Insight Manager Remote Unauthorized Access - Directory Traversal
  • From: security-alert
• SUSE Security Announcement: binutils,kdelibs3,kdegraphics3,koffice,dia,lyx (SUSE-SA:2006:007)
  • From: Ludwig Nussel
• Secunia Research: Lotus Notes Multiple Archive Handling Directory Traversal
  • From: Secunia Research
• FarsiNews 2.5 Multiple Vulnerabilities
  • From: h e
• [eVuln] GuestBookHost Authentication Bypass
  • From: alex
• Secunia Research: Lotus Notes HTML Speed Reader Link Buffer Overflows
  • From: Secunia Research
• runCMS <= 1.3a2 possible remote code execution through the integrated FCKEditor package
  • From: rgod
• TSLSA-2006-0006 - multi
  • From: Trustix Security Advisor
• [SECURITY] [DSA 967-1] New elog packages fix arbitrary code execution
  • From: Martin Schulze
• Secunia Research: Lotus Notes UUE File Handling Buffer Overflow
  • From: Secunia Research
• RE: John the Ripper 1.7; pam_passwdqc 1.0+; tcb 1.0; phpass 0.0
  • From: Amin Tora
• LayerOne 2006 - Event Update and Announcement
  • From: Layer One
• Re: mailback script exploit
  • From: erik