Bugtraq

• Thread Index

• [ Secuobs - Advisory ] Bluetooth : DoS on Nokia cell phones
  • From: Infratech Research
• [eVuln] Unknown Domain Shoutbox multiple XSS & SQL Injection Vulnerabilities
  • From: alex
• iDEFENSE Security Advisory 02.10.06: IBM Lotus Domino Server LDAP DoS Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• CPAINT AJAX Library Cross Site Scripting
  • From: GulfTech Security Research
• Secunia Research: Lotus Notes TAR Reader File Extraction Buffer Overflow
  • From: Secunia Research
• Re: John the Ripper 1.7; pam_passwdqc 1.0+; tcb 1.0; phpass 0.0
  • From: Solar Designer
• ProtoVer Sample LDAP testsuite release
  • From: Evgeny Legerov
• Re: CPGNuke Dragonfly 9.0.6.1 remote commands execution through arbitrary local inclusion
  • From: noreply
• Secunia Research: Lotus Notes ZIP File Handling Buffer Overflow
  • From: Secunia Research
• [security bulletin] SSRT051102 rev.1 - HP HTTP Server Running on Windows, Forced Use of Weaker Security Protocol
  • From: security-alert
• Secunia Research: IBM Lotus Domino iNotes Client Script Insertion Vulnerabilities
  • From: Secunia Research
• Re: security contact @lycos.com
  • From: Greg Rubin
• What can a Remote Vulnerability Scanner do in Future?
  • From: Alice Bryson
• Fwd: Trend Micro ServerProtect version 5.58 can be easily circumvented via the mechanism that limits how many files to scan.
  • From: Mert SARICA
• [security bulletin] SSRT051007 rev.2 - HP Tru64 UNIX Running DNS BIND4/BIND8 with Forwarders: Remote Unauthorized Privileged Access
  • From: security-alert
• [ECHO_ADV_27$2006] Indexu <= 5.0.1 Remote File Inclusion
  • From: eufrato
• [SECURITY] [DSA 966-1] New adzapper packages fix denial of service
  • From: Martin Schulze
• ProtoVer SSL: GnuTLS
  • From: Evgeny Legerov
• John the Ripper 1.7; pam_passwdqc 1.0+; tcb 1.0; phpass 0.0
  • From: Solar Designer
• [ MDKSA-2006:038 ] - Updated groff packages fix temporary file vulnerabilities
  • From: security
• CPGNuke Dragonfly 9.0.6.1 remote commands execution through arbitrary local inclusion
  • From: rgod
• iDefense Security Advisory 02.07.06: QNX RTOS 6.3.0 rc.local Insecure File Permissions Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• iDefense Security Advisory 02.07.06: QNX Neutrino RTOS passwd Command Buffer Overflow
  • From: labs-no-reply@xxxxxxxxxxxx
• [ MDKSA-2006:036 ] - Updated mozilla packages to address DoS vulnerability
  • From: security
• WiredRed EPOP XSS Vulnerability
  • From: Adrian Castro
• Re: Re: EasyCMS vulnerable to XSS injection.
  • From: kim
• [eVuln] PHP iCalendar File Inclusion Vulnerability
  • From: alex
• iDefense Security Advisory 02.07.06: QNX Neutrino RTOS crttrap Arbitrary Library Loading Vulnerability
  • From: vendor-disclosure
• iDefense Security Advisory 02.07.06: QNX Neutrino RTOS phgrafx Command Buffer Overflow
  • From: labs-no-reply@xxxxxxxxxxxx
• Re: Workaround for unpatched Oracle PLSQL Gateway flaw
  • From: David Litchfield
• iDefense Security Advisory 02.07.06: QNX Neutrino RTOS libAp ABLPATH Buffer Overflow Vulnerability
  • From: vendor-disclosure
• Whomp Real Estate Manager XP 2005 Sql Injection
  • From: night_warrior771
• iDefense Security Advisory 02.07.06: QNX Neutrino RTOS libph PHOTON_PATH Buffer Overflow Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• Re: Workaround for unpatched Oracle PLSQL Gateway flaw
  • From: a
• iDefense Security Advisory 02.07.06: QNX Neutrino RTOS phfont Race Condition Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• iDefense Security Advisory 02.07.06: QNX RTOS 6.3.0 Local Denial of Service Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• Re: [myimei]MyBB 1.0.2 XSS attack in search.php
  • From: Steven M. Christey
• iDefense Security Advisory 02.07.06: QNX Neutrino RTOS fontsleuth Command Format String Vulnerability
  • From: vendor-disclosure
• iDefense Security Advisory 02.07.06: QNX Neutrino RTOS su Command Buffer Overflow
  • From: labs-no-reply@xxxxxxxxxxxx
• [ MDKSA-2006:037 ] - Updated mozilla-firefox packages to address DoS vulnerability
  • From: security
• [myimei]MyBB1.0.3~moderation.php~SqlInject while merging posts
  • From: addmimistrator
• [myimei]MyBB 1.0.2 XSS attack in search.php
  • From: addmimistrator
• Re: Vulnerabilities in vBulltin(3.0.7 - 3.5.3) and IPB(2.0.0 - 2.1.4).
  • From: scott
• Re: Vulnerabilities in vBulltin(3.0.7 - 3.5.3) and IPB(2.0.0 - 2.1.4).
  • From: Paul Laudanski
• Re: Vulnerabilities in vBulltin(3.0.7 - 3.5.3) and IPB(2.0.0 - 2.1.4).
  • From: Paul Laudanski
• eyeOS <= 0.8.9 Remote Code Execution
  • From: GulfTech Security Research
• [ MDKSA-2006:035 ] - Updated php packages fix vulnerability
  • From: security
• Arbitrary code execution via OProfile
  • From: Luís Miguel Silva
• Re: High Risk Vulnerability in Lexmark Printer Sharing Service
  • From: KF (lists)
• High Risk Vulnerability in Lexmark Printer Sharing Service
  • From: NGSSoftware Insight Security Research
• MyQuiz Arbitrary Command Execution Exploit (perl)
  • From: irc0d3r
• crypt_blowfish 1.0
  • From: Solar Designer
• Re: [xfocus-SD-060206]BCB compiler incorrect deal sizeof operator vulnerability
  • From: XFOCUS Security Team
• Re: CAIDA analysis on CME-24/BlackWorm
  • From: Nick FitzGerald
• Re: security contact @lycos.com
  • From: sheeponhigh
• Re: Cross Site Cooking
  • From: Tim Nelson
• [ MDKSA-2006:034 ] - Updated openssh packages fix vulnerability
  • From: security
• RE: Trend Micro ServerProtect version 5.58 can be easily circumvented via the mechanism that limits how many files to scan.
  • From: Prashant Meswani
• (OLD) Eudora WorldMail 3.0 Windows 2000 Remote System Exploit
  • From: markus magnus
• Vulnerabilities in vBulltin(3.0.7 - 3.5.3) and IPB(2.0.0 - 2.1.4).
  • From: h . z
• mailback script exploit
  • From: coderpunk
• RE: cPanel Multiple Cross Site Scripting Vulnerability
  • From: Hamish Stanaway
• Re: cleartext passwords get into log files
  • From: Damien Miller
• cPanel 10 handle.html XSS Vulnerability
  • From: shell
• Re: cleartext passwords get into log files
  • From: Ben Wheeler
• CAIDA analysis on CME-24/BlackWorm
  • From: Gadi Evron
• [ Secuobs - Tools release ] BSS (Bluetooth Stack Smasher) fuzzer
  • From: Research Infratech
• [ Secuobs - Advisory ] Bluetooth : DoS on Sony/Ericsson cell phones
  • From: Research Infratech
• [ Secuobs - Advisory ] Bluetooth : DoS on hcidump 1.29 + PoC
  • From: Research Infratech
• [ GLSA 200602-03 ] Apache: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200602-02 ] ADOdb: PostgresSQL command injection
  • From: Sune Kloppenborg Jeppesen
• SECURITY.NNOV: The Bat! 2.x message headers spoofing
  • From: 3APA3A
• Re: [KDE Security Advisory] kpdf/xpdf heap based buffer overflow
  • From: Dirk Mueller
• PeopleSoft (Oracle) PSCipher Encryption Weakness
  • From: info
• [xfocus-SD-060206]BCB compiler incorrect deal sizeof operator vulnerability
  • From: XFOCUS Security Team
• Announcement: Domain Contamination By Amit Klein
  • From: contact
• [SECURITY] [DSA 965-1] New ipsec-tools packages fix denial of service
  • From: Martin Schulze
• DarkStarlings.com XSS Vulnerability
  • From: Will Boyce
• [ GLSA 200602-01 ] GStreamer FFmpeg plugin: Heap-based buffer overflow
  • From: Stefan Cornelius
• Easily exploitable Pseudo Random Number generator in phpbb version 2.0.19 and under.
  • From: chinchilla
• ProtoVer LDAP vs CommuniGate Pro 5.0.7
  • From: Evgeny Legerov
• Re: AOL Instant Messenger Version 5.9.3861 Local Buffer Overrun Vulnerability
  • From: Stan Bubrouski
• Re: Cross Site Cooking
  • From: Glynn Clements
• cleartext passwords get into log files
  • From: innate
• mwcollect Alliance Launch
  • From: Georg Wicherski
• Re: security contact @lycos.com
  • From: while
• [eVuln] Vanilla Guestbook Multiple XSS & SQL Injection Vulnerabilities
  • From: alex
• Re: Workaround for unpatched Oracle PLSQL Gateway flaw
  • From: ad@xxxxxxxxxxxxxxxx
• Issues with security software: orbicule.com "Undercover"
  • From: Maximillian Dornseif
• VSR Advisory: IBM Tivoli Access Manager - Web Server Plug-in File Retrieval Vulnerability
  • From: VSR Advisories
• PluggedOut Blog SQL injection and XSS
  • From: h e
• [KAPDA::#26] - MyTopix Sql Injection & Path Disclosure
  • From: alireza hassani
• sql injection in ASP Survey
  • From: mfoxhacker
• LoudBlog <= 0.4 arbitrary remote inclusion
  • From: rgod
• Internet Explorer remotely exploitable vulnerability in JScript's document.write() method
  • From: porkythepig
• CyberShop Ultimate E-commerce Script Cross Site Scripting
  • From: B3g0k
• Re: Blackboard Authentication Error
  • From: jeremy
• [eVuln] MyQuiz Arbitrary Command Execution Vulnerability
  • From: alex
• Re: AOL Instant Messenger Version 5.9.3861 Local Buffer Overrun Vulnerability
  • From: Stan Bubrouski
• Re: Winamp 5.12 - 0day exploit - code execution through playlist
  • From: bart sikkes
• Re: Trend Micro ServerProtect version 5.58 can be easily circumvented via the mechanism that limits how many files to scan.
  • From: Hugo van der Kooij
• Outblaze Cross Site Scripting Vulnerability
  • From: simo
• Blacklist defenses as a breeding ground for vulnerability variants
  • From: Steven M. Christey
• Re: Trend Micro ServerProtect version 5.58 can be easily circumvented via the mechanism that limits how many files to scan.
  • From: Henrik Krohns
• AOL Instant Messenger Version 5.9.3861 Local Buffer Overrun Vulnerability
  • From: shell
• Exchangepop3 rcpt buffer overflow vulnerability
  • From: securma
• Re: Cross Site Cooking
  • From: Yngve Nysaeter Pettersen
• [SECURITY] [DSA 964-1] New gnocatan packages fix denial of service
  • From: Martin Schulze
• cPanel Multiple Cross Site Scripting Vulnerability
  • From: simo
• IronMail-5.0.1-Denial of-Service-Protection-Lets-Remote-Users-Deny-Service
  • From: mark
• Neomail Cross Site Scripting Vulnerability
  • From: simo
• [KDE Security Advisory] kpdf/xpdf heap based buffer overflow
  • From: Dirk Mueller
• Re: Re: Verified evasion in Snort
  • From: Dave Korn
• Trend Micro ServerProtect version 5.58 can be easily circumvented via the mechanism that limits how many files to scan.
  • From: Mert Sarıca
• [ MDKSA-2006:033 ] - Updated OpenOffice.org packages fix issue with disabled hyperlinks
  • From: security
• Re: New worm crawling trough blogs?!
  • From: Nick FitzGerald
• [ MDKSA-2006:029 ] - Updated libast packages fixes buffer overflow vulnerability
  • From: security
• [ MDKSA-2006:032 ] - Updated xpdf packages fixes heap-based buffer overflow vulnerability
  • From: security
• [ MDKSA-2006:031 ] - Updated kdegraphics packages fixes heap-based buffer overflow vulnerability
  • From: security
• Re: Re: Verified evasion in Snort
  • From: anonpoet
• [ MDKSA-2006:030 ] - Updated poppler packages fixes heap-based buffer overflow vulnerability
  • From: security
• [SLAB] NetBSD / OpenBSD kernfs_xread patch evasion
  • From: SecurityLab Research
• More on the workaround for the unpatched Oracle PLSQL Gateway flaw
  • From: David Litchfield
• The History of the Oracle PLSQL Gateway Flaw
  • From: David Litchfield
• CAID 33581 - CA Message Queuing Denial of Service Vulnerabilities
  • From: Williams, James K
• security contact @lycos.com
  • From: Spiros Antonatos
• Bug for libs in php link directory 2.0
  • From: Mario Oyorzabal Salgado
• Re: Blackboard Authentication Error
  • From: security-alerts
• Re: Blackboard Authentication Error
  • From: Joshua Ogle
• SoftMaker Shop is vulnerable to XSS
  • From: preben
• Re: Blackboard Authentication Error
  • From: Johan A.van Zanten
• Re: Buffer Overflow /Font on mIRC
  • From: D.C. van Moolenbroek
• Black Hat USA CFP opens, Europe early bird reminder, Federal news
  • From: Jeff Moss
• [SECURITY] [DSA 963-1] New mydns packages fix denial of service
  • From: Martin Schulze
• [ MDKSA-2006:028 ] - Updated php packages fix XSS and response splitting vulnerabilities
  • From: security
• Daffodil CRM - vulnerable to SQL-injection.
  • From: preben
• Fcrontab - memory corruption on heap.
  • From: pi3ki31ny
• FreeBSD Security Advisory FreeBSD-SA-06:08.sack
  • From: FreeBSD Security Advisories
• Re: Verified evasion in Snort
  • From: mwatchinski
• Re: MyCO multiple vulnerabilities
  • From: office
• Re: Verified evasion in Snort
  • From: Thierry Zoller
• iDefense Security Advisory 02.01.06: Winamp m3u Parsing Stack Overflow Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• RE: Buffer Overflow /Font on mIRC
  • From: Krpata, Tyler
• Re: Blackboard Authentication Error
  • From: George
• iDefense Security Advisory 02.01.06: Winamp m3u/pls .WMA Extension Buffer Overflow Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• Database Manager Default pass
  • From: fireboynet
• Verified evasion in Snort
  • From: at
• Re: Workaround for unpatched Oracle PLSQL Gateway flaw
  • From: x
• DISIT - OPEN SOURCE DISASSEMBLER ENGINE
  • From: Piotr Bania
• [security bulletin] SSRT051007 rev.1 - HP Tru64 UNIX Running DNS BIND Remote Unauthorized Privileged Access
  • From: security-alert
• [SECURITY] [DSA 962-1] New pdftohtml packages fix arbitrary code execution
  • From: Martin Schulze
• [SECURITY] [DSA 961-1] New pdfkit.framework packages fix arbitrary code execution
  • From: Martin Schulze
• ZRCSA-200601: SPIP - Multiple Vulnerabilities
  • From: research
• [eVuln] SZUserMgnt Authentication Bypass
  • From: alex
• Blackboard Authentication Error
  • From: jdo24
• [eVuln] Calendarix SQL Injection & Authorization Bypass Vulnerabilities
  • From: alex
• Windows Access Control Demystified
  • From: sudhakar+bugtraq
• [SECURITY] [DSA 960-2] New libmail-audit-perl packages fix insecure temporary file use
  • From: Martin Schulze
• Xmame 0.102 local vulnerability proof-of-concept
  • From: Rafael San Miguel Carrasco
• Nmap 4.00 Released
  • From: Fyodor
• [SECURITY] [DSA 960-1] New libmail-audit-perl packages fix insecure temporary file use
  • From: Martin Schulze
• FarsiNews 2.1 PHP Remote File Inclusion
  • From: h e
• [SECURITY] [DSA 957-2] New ImageMagick packages fix arbitrary command execution
  • From: Martin Schulze
• MyCO multiple vulnerabilities
  • From: revnic
• Proof of concept for CommuniGate Pro Server vulnerability
  • From: Evgeny Legerov
• Re: EasyCMS vulnerable to XSS injection.
  • From: kim
• Re: Re: Winamp 5.12 - 0day exploit - code execution through playlist
  • From: Juha-Matti Laurio
• Cerberus Helpdesk vulnerable to XSS
  • From: preben
• BrowserCRM vulnerable for XSS
  • From: preben
• Etomite followup information
  • From: security curmudgeon
• [ GLSA 200601-17 ] Xpdf, Poppler, GPdf, libextractor, pdftohtml: Heap overflows
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200601-16 ] MyDNS: Denial of Service
  • From: Sune Kloppenborg Jeppesen
• Re: CME-24 (BlackWorm) Users' FAQ
  • From: Gadi Evron
• [ MDKSA-2006:027 ] - Updated gzip packages fix zgrep vulnerabilities
  • From: security
• New worm crawling trough blogs?!
  • From: blog . worm
• Re: Winamp 5.12 - 0day exploit - code execution through playlist
  • From: Chris Wysopal
• [ MDKSA-2006:026 ] - Updated bzip2 packages fix bzgrep vulnerabilities
  • From: security
• Etomite CMS "Backdoored"
  • From: [at]
• [SECURITY] [DSA 959-1] New unalz packages fix arbitrary code execution
  • From: Martin Schulze
• CME-24 (BlackWorm) Users' FAQ
  • From: Gadi Evron
• Re: Arescom NetDSL-1000 DoS atack source
  • From: Pim van Riezen
• MyBB 1.2 Local File Incusion
  • From: o . y . 6
• XSS flaw in MG2 Image Gallery (v.0.5.1)
  • From: preben
• BlackWorm: statistics and numbers
  • From: Gadi Evron
• gnome evolution mail client inline text file DoS issue
  • From: Mike Davis
• Re: Airscanner Mobile Security Advisory: Remote Hard Reset Data Wipe and DoS of Pocket Controller v5.0 (#AS05080401)
  • From: orambaldini
• Re: [security] What A Click! [Internet Explorer]
  • From: yossarian
• Nuked-klaN Cross-Site Scripting Vulnerability
  • From: [at]
• sPaiz-Nuke Cross-Site Scripting Vulnerability
  • From: [at]
• Arescom NetDSL-1000 DoS atack source
  • From: framirez
• Winamp 5.12 - 0day exploit - code execution through playlist
  • From: Process
• RE: Cross Site Cooking
  • From: Michal Zalewski
• [xpl#2] MiniNuke 1.8.2 - change member's passwrod < Perl >
  • From: hessam
• [SECURITY] [DSA 951-2] New trac packages fix SQL injection and cross-site scripting
  • From: Martin Schulze
• MyBB 1.2 usercp2.php [ $url ] CrossSiteScripting ( XSS )
  • From: o . y . 6
• Re: [Full-disclosure] [ GLSA 200601-15 ] Paros: Default administrator password
  • From: Yvan Boily
• EasyCMS vulnerable to XSS injection.
  • From: preben
• TSLSA-2006-0004 - multi
  • From: Trustix Security Advisor
• [ GLSA 200601-15 ] Paros: Default administrator password
  • From: Sune Kloppenborg Jeppesen
• Re: BlackWorm naming confusing [CME entry now available]
  • From: Jose Nazario
• UebiMiau Webmail System Security Vulnerability
  • From: M.Neset KABAKLI
• [ GLSA 200601-14 ] LibAST: Privilege escalation
  • From: Sune Kloppenborg Jeppesen
• Re: Re: IndonesiaHack Advisory HTML injection in PHP Fusebox
  • From: pr1nce_empire
• Cross Site Cooking
  • From: Michal Zalewski
• Re: MySQL 5.0 information leak?
  • From: Duncan Simpson
• zbattle.net
  • From: c_lispfedora
• [SECURITY] [DSA 951-1] New trac packages fix SQL injection and cross-site scripting
  • From: Martin Schulze
• [ GLSA 200601-13 ] Gallery: Cross-site scripting vulnerability
  • From: Stefan Cornelius
• CAID 33778 - CA iGateway Content-Length Buffer Overflow Vulnerability
  • From: Williams, James K
• BlackWorm technical information
  • From: Gadi Evron
• [FLSA-2006:152845] Updated perl packages fix security issues
  • From: Marc Deslauriers
• [eVuln] Pixelpost Photoblog XSS Vulnerability
  • From: alex
• BlackWorm naming confusing [CME entry now available]
  • From: Gadi Evron
• [USN-246-1] imagemagick vulnerabilities
  • From: Martin Pitt
• LibAST 0.7 Release Fixes Security Vulnerability
  • From: Michael Jennings
• [CORRECTIONS AND ADDITIONS ]Azbb v1.1.00 Cross-Site Scripting
  • From: roozbeh_afrasiabi
• Multiple vulnerabilities in CommuniGate Pro Server
  • From: Evgeny Legerov
• Ege Internet Web Desing Remote Command Exucetion
  • From: botan
• The WorldsEnd.NET - Free Ping Script, written in PHP (2 vulns)
  • From: cvh
• Azbb v1.1.00 Cross-Site Scripting
  • From: roozbeh_afrasiabi
• [ MDKSA-2006:024 ] - Updated ImageMagick packages fix vulnerabilities
  • From: security
• Re: [security] What A Click! [Internet Explorer]
  • From: Lance James
• Shareaza P2P Remote Vulnerability
  • From: Ryan Smith
• CAID 33778 - CA iGateway Content-Length Buffer Overflow Vulnerability [v1.1]
  • From: Williams, James K
• Re: [security] What A Click! [Internet Explorer]
  • From: yossarian
• [ MDKSA-2006:025 ] - Updated net-snmp packages fix vulnerabilities
  • From: security
• [SECURITY] [DSA 958-1] New drupal packages fix several vulnerabilities
  • From: Martin Schulze
• [Argeniss] Oracle Database Buffer overflows vulnerabilities in public procedures of XDB.DBMS_XMLSCHEMA{_INT}
  • From: Cesar
• [ MDKSA-2006:023 ] - Updated perl-Net_SSLeay packages fix vulnerability
  • From: security
• hello
  • From: code . shell
• [SECURITY] [DSA 952-1] New libapache-auth-ldap packages fix arbitrary code execution
  • From: Martin Schulze
• RE: MySQL 5.0 information leak?
  • From: Burton Strauss
• BitComet URI Proof of Concept
  • From: nick58
• Re: [Full-disclosure] Urgent Alert: Possible BlackWorm DDay February 3rd (Snort signatures included)
  • From: Dude VanWinkle
• iDefense Security Advisory 01.23.06: Computer Associates iTechnology iGateway Service Content-Length Buffer Overflow Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• [ Rosiello Security ] Eterm-LibAST Advisory
  • From: angelo
• [ MDKSA-2006:022 ] - Updated perl-Convert-UUlib packages fix vulnerability
  • From: security
• Re: MySQL 5.0 information leak?
  • From: Johan De Meersman
• [SECURITY] [DSA 950-1] New CUPS packages fix arbitrary code execution
  • From: Martin Schulze
• Buffer Overflow /Font on mIRC
  • From: Crowdat Kurobudetsu
• Re: MySQL 5.0 information leak?
  • From: Lance James
• Urgent Alert: Possible BlackWorm DDay February 3rd (Snort signatures included)
  • From: Gadi Evron
• [SECURITY] [DSA 957-1] New ImageMagick packages fix arbitrary command execution
  • From: Martin Schulze
• [eVuln] "my little homepage" products [link] BBCode XSS Vulnerability
  • From: alex
• Windows mem leakage
  • From: endrazine
• [HSC] Multiple transversal bug in vis
  • From: spher3
• [eVuln] AndoNET Blog SQL Injection Vulnerability
  • From: alex
• [ISecAuditors Advisories] Arbitrary flash code remote execution in 123flashchat
  • From: ISecAuditors Security Advisories
• Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerable to Crafted HTTP Attack
  • From: Cisco Systems Product Security Incident Response Team
• SamiFTPd buffer overflow
  • From: admin
• BlackWorm: 2 million infected? ISP notifications.
  • From: Gadi Evron
• SUSE Security Announcement: nfs-server/rpc.mountd remote code execution (SUSE-SA:2006:005)
  • From: Marcus Meissner
• HYSA-2006-002 Phpclanwebsite 1.23.1 Multiple Vulnerabilities
  • From: h4cky0u . org
• SUSE Security Announcement: phpMyAdmin (SUSE-SA:2006:004)
  • From: Ludwig Nussel
• [security bulletin] SSRT061104 rev.1 - HP Oracle for OpenView (OfO) Critical Patch Update January 2006
  • From: security-alert
• [ GLSA 200601-12 ] Trac: Cross-site scripting vulnerability
  • From: Stefan Cornelius
• [SECURITY] [DSA 956-1] New lsh-utils packages fix local vulnerabilities
  • From: Martin Schulze
• Re: [OSVDB Mods] iNETstore E Commerce Solution - Cross Site Scripting
  • From: iNETstore Support
• Updated mozilla-thunderbird packages fix vulnerability
  • From: security
• MyBB 1.0.2 XSS attack in search.php redirection
  • From: addmimistrator
• What A Click! [Internet Explorer]
  • From: mikx
• Re: IndonesiaHack Advisory HTML injection in PHP Fusebox
  • From: brian428
• [eVuln] Text Rider Sensitive Information Disclosure
  • From: alex
• Newsphp Multiple SQL Injection Vulnerabilities
  • From: at
• [KAPDA::#25] - MyBB 1.x Cross_Site_Scripting
  • From: roozbeh_afrasiabi
• [SECURITY] [DSA 953-1] New flyspray packages fix cross-site scripting
  • From: Martin Schulze
• [eVuln] miniBloggie Authentication Bypass
  • From: alex
• [security bulletin] SSRT061099 rev.1 - HP-UX Local Increased Privilege
  • From: security-alert
• Re: Tumbleweed EMF 6.x Processing Issues
  • From: support
• FreeBSD Security Advisory FreeBSD-SA-06:06.kmem
  • From: FreeBSD Security Advisories
• Rosiello Security - Eterm-LibAST Advisory
  • From: angelo
• [SECURITY] [DSA 947-2] New clamav packages fix heap overflow
  • From: Michael Stone
• [eVuln] ExpressionEngine 'Referer' XSS Vulnerability
  • From: alex
• Updated ipsec-tools packages fix vulnerability
  • From: security
• FreeBSD Security Advisory FreeBSD-SA-06:07.pf
  • From: FreeBSD Security Advisories
• HYSA-2006-001 phpBB 2.0.19 search.php and profile.php DOS Vulnerability
  • From: h4cky0u . org
• [eVuln] CheesyBlog XSS Vulnerability
  • From: alex
• Workaround for unpatched Oracle PLSQL Gateway flaw
  • From: David Litchfield
• Technical Note by Amit Klein: "XST Strikes Back"
  • From: Amit Klein (AKsecurity)
• [SECURITY] [DSA 955-1] New mailman packages fix denial of service
  • From: Michael Stone
• Call For Paper - SyScan'06 Singapore
  • From: organiser@xxxxxxxxxx
• [SECURITY] [DSA 954-1] New wine packages fix arbitrary code execution
  • From: Martin Schulze
• [ GLSA 200601-11 ] KDE kjs: URI heap overflow vulnerability
  • From: Sune Kloppenborg Jeppesen
• ANN: New release of CORE FORCE free endpoint security package
  • From: Core FORCE team
• Re: Announcement: The Web Application Firewall Evaluation Criteria v1 Released
  • From: Gadi Evron
• [eVuln] Note-A-Day Weblog Sensitive Information Disclosure
  • From: alex
• [eVuln] e-moBLOG SQL Injection Vulnerability
  • From: alex
• fetchmail security announcement fetchmail-SA-2006-01 (CVE-2006-0321)
  • From: ma+bt
• High Risk Vulnerability in Red Hat Directory Server and Red Hat Certificate Server
  • From: NGSSoftware Insight Security Research
• [USN-245-1] KDE library vulnerability
  • From: Martin Pitt
• Re: MySQL 5.0 information leak?
  • From: Stephen Frost
• CodeCon program announced, early registration deadline nearing
  • From: Len Sassaman
• [SECURITY] [DSA 949-1] New crawl packages fix potential group games execution
  • From: Martin Schulze
• BlogPHP config.php SQL injection login bypassed
  • From: addmimistrator
• RE: MySQL 5.0 information leak?
  • From: Burton Strauss
• Tumbleweed EMF 6.x Processing Issues
  • From: jcary2543
• MDKSA-2006:019 - Updated kdelibs packages fix vulnerability
  • From: Mandriva Security Team
• Re: Digital Armaments Security Advisory 01.16.2006: CMU SNMP utilities snmptrad Format String Vulnerability
  • From: Stan Bubrouski
• MyBB Signature HTML Code Injection
  • From: n
• MyBB 1.0.2 Sniffing table perfix bug in search.php
  • From: addmimistrator
• [ GLSA 200601-10 ] Sun and Blackdown Java: Applet privilege escalation
  • From: Thierry Carrez
• Re: WMF vulnerability was a deliberate backdoor?
  • From: Gadi Evron
• [eVuln] SaralBlog XSS & Multiple SQL Injection Vulnerabilities
  • From: alex
• [eVuln] eggblog Multiple SQL Injection & XSS Vulnerabilities
  • From: alex
• [eVuln] RCBlog Directory Traversal & Sensitive Information Disclosure
  • From: alex
• [SECURITY] [DSA 946-1] New sudo packages fix privilege escalation
  • From: Martin Schulze
• [SECURITY] [DSA 947-1] New ClamAV packages fix heap overflow
  • From: Michael Stone
• MySQL 5.0 information leak?
  • From: Bernd Wurst
• SUSE Security Announcement: kdelibs3 (SUSE-SA:2006:003)
  • From: Ludwig Nussel
• [SECURITY] [DSA 948-1] New kdelibs packages fix buffer overflow
  • From: Michael Stone
• Re: Digital Armaments Security Advisory 01.16.2006: CMU SNMP utilities snmptrad Format String Vulnerability
  • From: Florian Weimer
• BlogPHP config.php SQL injection login bypass
  • From: addmimistrator
• BlogPHP config.php SQL injection login bypass
  • From: addmimistrator
• Claroline 1.7.2, sso identification vulnerability
  • From: karmaguedon
• DMA[2006-0115a] - 'AmbiCom Bluetooth Object Push Overflow'
  • From: KF (lists)
• MDKSA-2006:018 - Updated kernel packages fix several vulnerabilities
  • From: Mandriva Security Team
• [KDE Security Advisory] kjs encodeuri/decodeuri heap overflow
  • From: Dirk Mueller
• phpXplorer file inclusion biyosecurity.be
  • From: liz0
• iDefense Security Advisory 01.17.06: Cisco Systems IOS 11 Web Service CDP Status Page Code Injection Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• iDefense Security Advisory 01.17.06: EMC Legato Networker nsrexecd.exe Heap Overflow Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• iDefense Security Advisory 01.17.06: EMC Legato Networker nsrd.exe DoS Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• Re: Microsoft knew about the WMF flaw for years
  • From: Steven M. Christey
• Oracle Database 10g Rel. 1 - SQL Injection in SYS.KUPV$FT_INT
  • From: ak
• Oracle Database 10g Rel. 1 - SQL Injection in SYS.KUPV$FT
  • From: ak
• Change passwd 3.1 (SquirrelMail plugin )
  • From: rod hedor
• Critical security advisory #006 tftpd32 Format string
  • From: admin
• FreeBSD Security Advisory FreeBSD-SA-06:05.80211
  • From: FreeBSD Security Advisories
• MDKSA-2006:017 - Updated mod_auth_ldap packages fix vulnerability
  • From: Mandriva Security Team
• Re: Directory traversal in phpXplorer
  • From: Stan Bubrouski
• [security bulletin] SSRT5971 rev.1 - HP-UX Running ftpd Remote Denial of Service (DoS)
  • From: security-alert
• Phpclanwebsite BBCode IMG Tag XSS Vulnerability
  • From: [at]
• Re: IRM 015: File system path disclosure on TYPO3 Web Content Manager
  • From: Michael Shigorin
• Google's Blogger.com classic HTTP response splitting vulnerability
  • From: Meder Kydyraliev
• -2- [XSS] in ar-blog v 5.2
  • From: s3ude
• CAID 33756 - DM Deployment Common Component Vulnerabilities
  • From: Williams, James K
• Re: Re: MSN Messenger Password Decrypter for WinXP/2003
  • From: null
• Cisco Security Advisory: Cisco Call Manager Privilege Escalation
  • From: Cisco Systems Product Security Incident Response Team
• Land Down Under Signature HTML Code Injection
  • From: [at]
• [eVuln] WebspotBlogging Authentication Bypass Vulnerability
  • From: alex
• IRM 015: File system path disclosure on TYPO3 Web Content Manager
  • From: Advisories
• Fortinet Advisory: BitComet URI Buffer Overflow Vulnerability
  • From: Fortinet Research
• HITBSecConf2005 Videos Released
  • From: Praburaajan
• MyBB Signature HTML Code Injection
  • From: [at]
• [USN-244-1] Linux kernel vulnerabilities
  • From: Martin Pitt
• Re: MSN Messenger Password Decrypter for WinXP/2003
  • From: frank boldewin
• ICQ Cross Site Scripting Vulnerability
  • From: simo
• XMB Forum HTML Code Injection
  • From: [at]
• Cisco Security Advisory: Cisco Call Manager Denial of Service
  • From: Cisco Systems Product Security Incident Response Team
• [eVuln] geoBlog SQL Injection Vulnerability
  • From: alex
• WEP-Client-Communication-Dumbdown (WCCD) Vulnerability
  • From: Michael.Wade
• Re: Directory traversal in phpXplorer
  • From: Stan Bubrouski
• Cisco Security Advisory: IOS Stack Group Bidding Protocol Crafted Packet DoS
  • From: Cisco Systems Product Security Incident Response Team
• [eVuln] aoblogger Multiple Vulnerabilities
  • From: alex
• [eVuln] Flog Information Disclosure Vulnerability
  • From: alex
• Re: PunBB BBCode URL Tag Script Injection Vulnerability
  • From: Rickard Andersson
• Re: Linksys VPN Router (BEFVP41) DoS Vulnerability
  • From: paul14075
• Phpclanwebsite BBCode IMG Tag XSS Vulnerability
  • From: [at]
• [ TZO-012006 ] Checkpoint VPN-1 SecureClient insecure usage of CreateProcess()
  • From: Thierry Zoller
• Oracle Database 10g Rel. 2- Transparent Data Encryption plaintext masterkey in SGA
  • From: ak
• Oracle Reports - Read parts of files via customize(fixed after 875 days)
  • From: ak
• Oracle Critical Patch Update - January 2006
  • From: NGSSoftware Insight Security Research
• Oracle Reports - Overwrite any application server file via desname (fixed after 889 days)
  • From: ak
• Oracle Reports - Read parts of files via desname (fixed after 874 days)
  • From: ak
• Oracle Database 10g Rel. 2 - Event 10053 logs TDE wallet password in cleartext
  • From: ak
• Oracle DBMS Access Control Bypass in Login
  • From: shulman
• Attacking Automatic Wireless Network Selection
  • From: Dino A. Dai Zovi
• Cerberus FTP Server 2.32 Denial of Service
  • From: cvh
• [eVuln] CaLogic Calendars Multiple XSS Vulnerabilities
  • From: alex
• [HSC Security Group] Multiple SQL injection/XSS in SimpleBlog 2.1
  • From: zinho
• White Album Sql &#304;njection biyosecurity.be
  • From: liz0
• Re: Fullpath disclosure in roundcube webmail
  • From: roundcube
• [SECURITY] [DSA 945-1] New antiword packages fix insecure temporary file creation
  • From: Martin Schulze
• Re: Veritas NetBackup "Volume Manager Daemon" Module Stack Overflow - Exploit
  • From: Dave Korn
• [SECURITY] [DSA 944-1] New mantis packages fix several vulnerabilities
  • From: Martin Schulze
• PowerPortal Cross-Site Scripting Vulnerability
  • From: night_warrior771
• Secunia Research: Mozilla Thunderbird Attachment Spoofing Vulnerability
  • From: Secunia Research
• Re: Microsoft knew about the WMF flaw for years
  • From: Gadi Evron
• [eVuln] microBlog BBCode XSS Vulnerability
  • From: alex
• [eVuln] microBlog SQL Injection Vulnerability
  • From: alex
• [eVuln] BlogPHP Authentication Bypass
  • From: alex
• [SECURITY] [DSA 942-1] New albatross packages fix arbitrary code execution
  • From: Martin Schulze
• XSS in WBNews < = v1.1.0
  • From: dragonjar
• Microsoft(R) Internet Explorer 5 & 6 Remote Denial of Service (DoS) using IMG & XML elements
  • From: inge . henriksen
• Re: Reverse Proxy Cross Site Scripting
  • From: Amit Klein (AKsecurity)
• ERRATA: [ GLSA 200601-09 ] Wine: Windows Metafile SETABORTPROC vulnerability
  • From: Sune Kloppenborg Jeppesen
• IndonesiaHack Advisory HTML injection in PHP Fusebox
  • From: king_purba
• MDKSA-2006:016 - Updated clamav packages fix vulnerability
  • From: Mandriva Security Team
• [USN-243-1] tuxpaint vulnerability
  • From: Martin Pitt
• MDKSA-2006:015 - Updated hylafax packages fix eval injection vulnerabilities
  • From: Mandriva Security Team
• MDKSA-2006:014 - Updated wine packages fix WMF vulnerability
  • From: Mandriva Security Team
• Announcement: The Web Application Firewall Evaluation Criteria v1 Released
  • From: contact
• Digital Armaments Security Advisory 01.16.2006: CMU SNMP utilities snmptrad Format String Vulnerability
  • From: info
• PunBB BBCode URL Tag Script Injection Vulnerability
  • From: night_warrior771
• Re: MSN Messenger Password Decrypter for WinXP/2003
  • From: James_gmail-ij
• EZDatabase Directory Transversal, XSS and Path Disclosure Vulnerability
  • From: Josh Zlatin
• Re: Linksys VPN Router (BEFVP41) DoS Vulnerability
  • From: paul14075
• Microsoft knew about the WMF flaw for years
  • From: Richard M. Smith
• Veritas NetBackup "Volume Manager Daemon" Module Stack Overflow - Exploit
  • From: patrickthomassen
• [eVuln] Bit 5 Blog SQL Injection & Authentication Bypass Vulnerability
  • From: alex
• Re: WMF vulnerability was a deliberate backdoor?
  • From: Mike Ely
• [eVuln] Benders Calendar SQL Injection
  • From: alex
• Re: MyBB 1.0.2 SQL injection in usercp.php
  • From: o . y . 6
• Re: [Full-disclosure] WehnTrust - When you have to trust Wehntrust
  • From: H D Moore
• Reverse Proxy Cross Site Scripting
  • From: Shalom Carmel
• iWar 0.07 PSTN auditing tool released...
  • From: Da Beave
• Re: WMF vulnerability was a deliberate backdoor?
  • From: Steve Friedl
• [USN-242-1] mailman vulnerabilities
  • From: Martin Pitt
• Re: WMF vulnerability was a deliberate backdoor?
  • From: Denis Jedig
• Homeftp r1.0.7 Denial of Service
  • From: cvh
• WehnTrust - When you have to trust Wehntrust
  • From: Thierry Zoller
• CounterPath eyeBeam Handing SIP header Vulnerabilities
  • From: zwell
• RE: WMF vulnerability was a deliberate backdoor?
  • From: Alex Eckelberry
• [eVuln] Bit 5 Blog JavaScript Insertion Vulnerability
  • From: alex
• [SECURITY] [DSA 941-1] New tuxpaint packages fix insecure temporary file creation
  • From: Martin Schulze
• Directory traversal in phpXplorer
  • From: Oriol Torrent
• Apache Geronimo 1.0 - CSS and persistent HTML-Injection vulnerabilities
  • From: oliver karow
• DMA[2006-0112a] - 'Toshiba Bluetooth Stack Directory Transversal'
  • From: KF (lists)
• [SECURITY] [DSA 943-1] New Perl packages fix arbitrary code execution
  • From: Martin Schulze
• MDKSA-2006:013 - Updated kolab packages fix vulnerability
  • From: Mandriva Security Team
• Visual Studio Remote Code Execution
  • From: priest
• [ISecAuditors Advisories] Arbitrary remote file creation in 123flashchat server
  • From: ISecAuditors Security Advisories
• DDSN CMS Admin Panel SQL Injection Vulnerability
  • From: khc
• TSL-2006-0001 - postgresql
  • From: Trustix Security Advisor
• TSLSA-2006-0002 - multi
  • From: Trustix Security Advisor
• DIMVA 2006 Call for Papers
  • From: Thomas Biege
• Linksys VPN Router (BEFVP41) DoS Vulnerability
  • From: paul14075
• Re: MSN Messenger Password Decrypter for WinXP/2003
  • From: kuku
• [eVuln] Light Weight Calendar PHP Code Execution
  • From: alex
• AlstraSoft Template Seller Pro Cross-Site Scripting Vulnerability
  • From: night_warrior771
• DCP Portal Cross-Site Scripting Vulnerability
  • From: night_warrior771
• MyBB 1.0.2 SQL injection
  • From: addmimistrator
• WMF vulnerability was a deliberate backdoor?
  • From: Brooks, Shane
• [EEYEB-2000801] - Windows Embedded Open Type (EOT) Font Heap Overflow Vulnerability
  • From: Advisories
• [SECURITY] [DSA 936-1] New libextractor packages fix arbitrary code execution
  • From: Martin Schulze
• FreeBSD Security Advisory FreeBSD-SA-06:02.ee
  • From: FreeBSD Security Advisories
• [NMRC Advisory] Microsoft Windows Wireless Exposure on Laptops
  • From: Advisories
• Hacking With The Google Search Engine
  • From: Paul Laudanski
• MyBB 1.0.2 SQL injection in usercp.php
  • From: addmimistrator
• [KAPDA::#21] - HomeFtp v1.1 Denial of Service
  • From: [a]
• FullPath disclosure in Xaraya 1.0.1
  • From: king_purba
• ezDatabase 2.0 and below
  • From: none
• Helm XSS Vulnerability
  • From: M.Neset KABAKLI
• [eVuln] MyPhPim Multiple SQL Injection and XSS Vulnerabilities
  • From: alex
• PayPal Phishing Site Exploits Google XSS Vulnerability
  • From: Paul Laudanski
• FreeBSD Security Advisory FreeBSD-SA-06:04.ipfw
  • From: FreeBSD Security Advisories
• Serial Line Sniffer 0.4.4 Buffer Overflow
  • From: Sintigan
• MDKSA-2006:011 - Updated tetex packages fix several vulnerabilities
  • From: Mandriva Security Team
• [FLSA-2006:152803] Updated lesstif packages fix security issues
  • From: Marc Deslauriers
• [ GLSA 200601-05 ] mod_auth_pgsql: Multiple format string vulnerabilities
  • From: Stefan Cornelius
• FreeBSD Security Advisory FreeBSD-SA-06:03.cpio
  • From: FreeBSD Security Advisories
• [EEYEB-20051117B] Apple iTunes (QuickTime.qts) Heap Overflow
  • From: Advisories
• mysec.org Security Advisory : Xmame buffer overflow, with a possibility of privilege escalation
  • From: xwings
• Fortinet Advisory - Apple QuickTime Player StripByteCounts Buffer Overflow Vulnerability
  • From: secresearch
• iDefense Security Advisory 01.13.06: Novell SUSE Linux Enterprise Server Remote Manager Heap Overflow
  • From: labs-no-reply@xxxxxxxxxxxx
• Fortinet Advisory - Apple QuickTime Player StripOffsets Improper Memory Access
  • From: secresearch
• [ GLSA 200601-08 ] Blender: Heap-based buffer overflow
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200601-07 ] ClamAV: Remote execution of arbitrary code
  • From: Sune Kloppenborg Jeppesen
• MDKSA-2006:012 - Updated kdegraphics packages fix several vulnerabilities
  • From: Mandriva Security Team
• SUSE Security Announcement: novell-nrm remote heap overflow (SUSE-SA:2006:002)
  • From: Marcus Meissner
• [ GLSA 200601-09 ] Wine: Windows Metafile SETABORTPROC vulnerability
  • From: Sune Kloppenborg Jeppesen
• [SECURITY] [DSA 940-1] New gpdf packages fix arbitrary code execution
  • From: Martin Schulze
• [SECURITY] [DSA 939-1] New fetchmail packages fix denial of service
  • From: Martin Schulze
• Fortinet Advisory - Apple QuickTime Player ImageWidth Denial of Service Vulnerability
  • From: secresearch
• [USN-240-1] bogofilter vulnerability
  • From: Martin Pitt
• Re: industry standards - current status [was: what we REALLY learned from WMF]
  • From: D. Hazelton
• Advisory: MiniNuke CMS System <= 1.8.2 (membership.asp) remote user password change exploit
  • From: nukedx
• Advisory: MiniNuke CMS System <= 1.8.2 (news.asp) SQL Injection vulnerability
  • From: nukedx
• [eVuln] Wordcircle Multiple SQL Injection & XSS Vulnerabilities
  • From: alex
• [eVuln] Wordcircle Authentication Bypass
  • From: alex
• [eVuln] ACal Authentication Bypass & PHP Code Insertion
  • From: alex
• [eVuln] TankLogger SQL Injection Vulnerability
  • From: alex
• ZDI-06-001: Clam AntiVirus UPX Unpacking Code Execution Vulnerability
  • From: zdi-disclosures
• Interspire TrackPoint NX XSS Vulnerability
  • From: M.Neset KABAKLI
• Multiple PHP Toolkit for PayPal Vulnerabilities
  • From: uinC Team
• Cisco, haven't we learned anything? (technician reset)
  • From: Gadi Evron
• [SECURITY] [DSA 937-1] New tetex-bin packages fix arbitrary code execution
  • From: Martin Schulze
• FogBugz Cross Site Scripting Vulnerability
  • From: M.Neset KABAKLI
• Advisory: MiniNuke CMS System <= 1.8.2 (news.asp) SQL Injection vulnerability
  • From: nukedx
• Re: [Full-disclosure] Session data pollution vulnerabilities in web applications
  • From: Frank Knobbe
• [SECURITY] [DSA 903-2] New unzip packages fix unauthorised permissions modification
  • From: Martin Schulze
• Session data pollution vulnerabilities in web applications
  • From: Alla Bezroutchko
• [USN-241-1] Apache vulnerabilities
  • From: Adam Conrad
• EUSecWest papers and CanSecWest CFP
  • From: Dragos Ruiu
• [SECURITY] [DSA 938-1] New koffice packages fix arbitrary code execution
  • From: Martin Schulze
• Cisco Security Advisory: Access Point Memory Exhaustion from ARP Attacks
  • From: Cisco Systems Product Security Incident Response Team
• Advisory 01/2006: PHP ext/session HTTP Response Splitting Vulnerability
  • From: Stefan Esser
• Advisory 02/2006: PHP ext/mysqli Format String Vulnerability
  • From: Stefan Esser
• H-Sphere Security Vulnerability
  • From: M.Neset KABAKLI
• BSD Securelevels: Circumventing protection of files flagged immutable
  • From: RedTeam Pentesting
• Advisory: XSS attack on Superonline.com email service.
  • From: nukedx
• MDKSA-2006:010 - Updated cups packages fix several vulnerabilities
  • From: Mandriva Security Team
• [FLSA-2006:167803] Updated mysql packages fix security issues
  • From: Marc Deslauriers
• [EEYEB-20051117A] Apple QuickTime STSD Atom Heap Overflow
  • From: Advisories
• FreeBSD Security Advisory FreeBSD-SA-06:01.texindex
  • From: FreeBSD Security Advisories
• [USN-235-2] sudo vulnerability
  • From: Martin Pitt
• [eVuln] MyPhPim Arbitrary File Upload
  • From: alex
• Advisory:XSS vulnerability on WebWiz Forums <= 6.34 (search_form.asp)
  • From: nukedx
• Re: Did MS pull an Ilfak? (MS patch bindiff results)
  • From: Denis Jedig
• eStara Softphone SIP stack Buffer Overflow Vulnerability
  • From: zwell
• SUSE Security Announcement: xpdf,kpdf,gpdf,kword (SUSE-SA:2006:001)
  • From: Ludwig Nussel
• FreeBSD Security Advisory FreeBSD-SA-06:01.texindex [REVISED]
  • From: FreeBSD Security Advisories
• PostgreSQL security releases 8.0.6 and 8.1.2
  • From: PostgreSQL Security
• [ GLSA 200601-06 ] xine-lib, FFmpeg: Heap-based buffer overflow
  • From: Stefan Cornelius
• RE: Did MS pull an Ilfak? (MS patch bindiff results)
  • From: Greg Wroblewski
• [RHSA-2006:0157-01] Low: struts security update for Red Hat Application Server
  • From: bugzilla
• [EEYEB-20051220] Apple QuickTime QTIF Stack Overflow
  • From: Advisories
• [EEYEB-20051031] Apple QuickTime Malformed GIF Heap Overflow
  • From: Advisories
• Cisco Security Advisory: Default Administrative Password in Cisco Security Monitoring, Analysis and Response System (CS-MARS)
  • From: Cisco Systems Product Security Incident Response Team
• Updated Advisories - Incorrect CVE Information
  • From: Advisories
• Microsoft Outlook Critical Vulnerability
  • From: NGSSoftware Insight Security Research
• Microsoft Exchange Critical Vulnerability
  • From: NGSSoftware Insight Security Research
• Re: Dumb IE6/XP denial of service found on the web
  • From: rebornrebel
• New PEAR / Apache2Triad Exploit
  • From: jd2k2000
• [FLSA-2006:168375] Updated mozilla packages fix security issues
  • From: Marc Deslauriers
• Malware - future trends
  • From: Dancho Danchev
• [FLSA-2006:152922] Updated ethereal packages fix security issues
  • From: Marc Deslauriers
• Time modification flaw in BSD securelevels on NetBSD and Linux
  • From: RedTeam Pentesting
• [FLSA-2006:152907] Updated htdig packages fix security issues
  • From: Marc Deslauriers
• Re: Did MS pull an Ilfak? (MS patch bindiff results)
  • From: Joe Polk
• [FLSA-2006:136323] Updated gettext package fixes security issues
  • From: Marc Deslauriers
• Re: Html_Injection in vBulletin 3.5.2
  • From: info
• [USN-236-2] xpdf vulnerabilities in kword, kpdf
  • From: Martin Pitt
• [security bulletin] SSRT051058 rev.1 - HP-UX Secure Shell Remote Denial of Service (DoS)
  • From: security-alert
• [USN-239-1] libapache2-mod-auth-pgsql vulnerability
  • From: Martin Pitt
• iDefense Security Advisory 01.10.06: Sun Solaris uustat Buffer Overflow Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• Multiple Vulnerabilities in Hummingbird Collaboration
  • From: luca . carettoni
• [SECURITY] [DSA 935-1] New libapache2-mod-auth-pgsql packages fix arbitrary code execution
  • From: Michael Stone
• [SECURITY] [DSA 930-2] New smstools packages fix format string vulnerability
  • From: Michael Stone
• Re: Html_Injection in vBulletin 3.5.2
  • From: Steven M. Christey
• [SECURITY] [DSA 934-1] New pound packages fix multiple vulnerabilities
  • From: Michael Stone
• [SECURITY] [DSA 933-1] New hylafax packages fix arbitrary command execution
  • From: Michael Stone
• industry standards - current status [was: what we REALLY learned from WMF]
  • From: Gadi Evron
• Research: Malware Action Detection and Protection
  • From: Arman Nayyeri
• MDKSA-2006:003 - Updated poppler packages fix several vulnerabilities
  • From: Mandriva Security Team
• MDKSA-2006:008 - Updated koffice packages fix several vulnerabilities
  • From: Mandriva Security Team
• MDKSA-2006:006 - Updated gpdf packages fix several vulnerabilities
  • From: Mandriva Security Team
• MDKSA-2006:005 - Updated xpdf packages fix several vulnerabilities
  • From: Mandriva Security Team
• MDKSA-2006:009 - Updated apache2-mod_auth_pgsql packages fix several vulnerabilities
  • From: Mandriva Security Team
• [eVuln] 427BB Multiple Vulnerabilities (Cookie-based Authentication Bypass, SQL Injections, XSS)
  • From: alex
• Xoops Pool Module IMG Tag Cross Site Scripting
  • From: night_warrior771
• Re: Interview: Ilfak Guilfanov
  • From: Denis Jedig
• Php-Nuke Pool and News Module IMG Tag Cross Site
  • From: night_warrior771
• iDefense Security Advisory 01.09.06: Multiple Vendor mod_auth_pgsql Format String Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• Orjinweb E-commerce
  • From: serxwebun
• AIM Multiple Cross Site Scripting Vulnerability
  • From: simo
• Html_Injection in vBulletin 3.5.2
  • From: the_bekir
• MDKSA-2006:004 - Updated pdftohtml packages fix several vulnerabilities
  • From: Mandriva Security Team
• MDKSA-2006:008 - Updated koffice packages fix several vulnerabilities
  • From: Mandriva Security Team
• AOL Multiple Cross Site Scripting Vulnerability
  • From: simo
• Re: Did MS pull an Ilfak? (MS patch bindiff results)
  • From: Brett Glass
• [SECURITY] [DSA 932-1] New kpdf packages fix arbitrary code execution
  • From: Martin Schulze
• Digital Armaments Security Advisory 01.09.2006: Apache auth_ldap module Multiple Format Strings Vulnerability
  • From: info
• [eVuln] Venom Board SQL Injection Vulnerability
  • From: alex
• [SECURITY] [DSA 931-1] New xpdf packages fix arbitrary code execution
  • From: Martin Schulze
• [eVuln] Foxrum BBCode XSS Vulnerabilty
  • From: alex
• NetBSD Security Advisory 2006-002: settimeofday() time wrap
  • From: NetBSD Security Officer
• NetBSD Security Advisory 2006-001: Kernfs kernel memory disclosure
  • From: NetBSD Security Officer
• [SECURITY] [DSA 930-1] New smstools packages fix format string vulnerability
  • From: Michael Stone
• [SECURITY] [DSA 929-1] New petris packages fix buffer overflow
  • From: Michael Stone
• [UPDATE]Microsoft Windows GRE WMF Format Multiple Unauthorized Memory Access Vulnerabilities
  • From: frankruder
• Microsoft Windows GRE WMF Format Multiple Memory Overrun Vulnerabilities
  • From: frankruder
• xorg server 6.8.2 and below on 64bit arch
  • From: serj
• Recon2006 - Call for papers
  • From: Hugo Fortier
• Survey on Vuln Disclosure: Request for Participation
  • From: Richard Forno
• [eVuln] NavBoard BBcode XSS Vulnerability
  • From: alex
• Re: Interview: Ilfak Guilfanov
  • From: Randal L. Schwartz
• [ GLSA 200601-04 ] VMware Workstation: Vulnerability in NAT networking
  • From: Sune Kloppenborg Jeppesen
• Re: MD:Pro - Malware Distribution Project
  • From: Rembrandt
• Re: [USN-237-1] nbd vulnerability
  • From: Florian Weimer
• Re: Dumb IE6/XP denial of service found on the web
  • From: Francois Labreque
• MDKSA-2006:005 - Updated xpdf packages fix several vulnerabilities
  • From: Mandriva Security Team
• [USN-238-2] Blender vulnerability
  • From: Martin Pitt
• [ GLSA 200601-03 ] HylaFAX: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• SysCP WebFTP local file inclusion vulnerability
  • From: Thomas Henlich
• [ GLSA 200601-02 ] KPdf, KWord: Multiple overflows in included Xpdf code
  • From: Sune Kloppenborg Jeppesen
• MDKSA-2006:003 - Updated poppler packages fix several vulnerabilities
  • From: Mandriva Security Team
• Re: Dumb IE6/XP denial of service found on the web
  • From: Kim Christensen
• [eVuln] Proyecto Domus 'email' XSS Vulnerability
  • From: alex
• [USN-237-1] nbd vulnerability
  • From: Martin Pitt
• Re: what we REALLY learned from WMF
  • From: Thor (Hammer of God)
• [USN-238-1] Blender vulnerability
  • From: Martin Pitt
• MDKSA-2006:007 - Updated apache2 packages fix vulnerabilities
  • From: Mandriva Security Team
• Re: Download Accelerator Plus can be tricked to download malicious file
  • From: Dave Korn
• MDKSA-2006:004 - Updated pdftohtml packages fix several vulnerabilities
  • From: Mandriva Security Team
• Did MS pull an Ilfak? (MS patch bindiff results)
  • From: Gadi Evron
• MDKSA-2006:006 - Updated gpdf packages fix several vulnerabilities
  • From: Mandriva Security Team
• Re: MS released a patch today - MS06-001
  • From: Anthony R. Nemmer
• [eVuln] TheWebForum Script Insertion and Authentication Bypass
  • From: alex
• MD5s of Unofficial patches and other mistakes
  • From: Forrest J. Cavalier III
• [security bulletin] SSRT051074 rev.3 - HP-UX Running xterm Local Unauthorized Access
  • From: security-alert
• APPLE-SA-2006-01-05 AirPort firmware update
  • From: noreply
• Re: New from the MS Advisory
  • From: Damaged Industries
• iDefense Security Advisory 01.05.06: Blue Coat WinProxy Telnet DoS Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• [eVuln] ADNForum Multiple Vulnerabilities
  • From: alex
• RE: WMF browser-ish exploit vectors
  • From: James C Slora Jr
• MS released a patch today - MS06-001
  • From: Duran, Jason IT0
• Interview: Ilfak Guilfanov
  • From: Matthew Murphy
• Windows PHP 4.x "0-day" buffer overflow
  • From: mercenary
• Re: Download Accelerator Plus can be tricked to download malicious file
  • From: visitbipin
• [USN-235-1] sudo vulnerability
  • From: Martin Pitt
• [USN-236-1] xpdf vulnerabilities
  • From: Martin Pitt
• Uninformed Journal Release Announcement: Volume 3
  • From: Uninformed
• RE: Download Accelerator Plus can be tricked to download malicious file
  • From: NaPa
• Contact information for Symantec Vulnerability Management
  • From: secure
• HylaFAX Security advisory - fixed in HylaFAX 4.2.4
  • From: Aidan Van Dyk
• iDefense Security Advisory 01.05.06: Blue Coat Systems WinProxy Host Header Stack Overflow Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• [eVuln] TinyPHPForum Multiple Vulnerabilities
  • From: alex
• What is sbininitd port 65534 ???
  • From: waltdnes
• CyberShop User Login Sql Injection
  • From: night_warrior771
• RE: Dumb IE6/XP denial of service found on the web
  • From: Mario Contestabile
• [ECHO_ADV_25$2006] Full path disclosure on boastMachine v3.1
  • From: eufrato
• MD:Pro - Malware Distribution Project
  • From: anthony . aykut
• what we REALLY learned from WMF
  • From: Gadi Evron
• Open Letter on the Interpretation of "Vulnerability Statistics"
  • From: Steven M. Christey
• iDefense Security Advisory 01.05.06: Blue Coat WinProxy Remote DoS Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• Re: WMF Exploit
  • From: Joshua
• Re: WMF browser-ish exploit vectors
  • From: Dave Korn
• Re: WTF??
  • From: anthony . aykut
• WMF: New Metasploit Framework Module
  • From: H D Moore
• Mapping and Remote manipulation of databases
  • From: Gandalf The White
• Re: WTF??
  • From: Nick FitzGerald
• Re: WMF browser-ish exploit vectors
  • From: Nick FitzGerald
• RE: WMF Exploit
  • From: Discussion Lists
• MDKSA-2005:239 - Updated printer-filters-utils packages fix local vulnerability
  • From: Mandriva Security Team
• Re: Cisco PIX / CS ACS: Downloadable RADIUS ACLs vulnerability
  • From: Eloy A. Paris
• Dumb IE6/XP denial of service found on the web
  • From: 8ux1fpd02
• Re[2]: [funsec] WMF round-up, updates and de-mystification
  • From: Pierre Vandevenne
• New from the MS Advisory
  • From: Larry Seltzer
• Re: WMF Exploit
  • From: Paul Laudanski
• [eVuln] Lizard Cart CMS SQL Injection Vulnerability
  • From: alex
• Re: WMF round-up, updates and de-mystification
  • From: Adam Shostack
• Download Accelerator Plus can be tricked to download malicious file
  • From: visitbipin
• Another WMF exploit workaround
  • From: Ivan Arce
• WMF exploit
  • From: Andreas Marx
• RE: WMF round-up, updates and de-mystification
  • From: Krpata, Tyler
• [eVuln] PHPenpals SQL Injection Vulnerabilit
  • From: alex
• WSJ: The new "metasploit" computer virus
  • From: Richard M. Smith
• [eVuln] phpBook PHP Code Execution
  • From: alex
• Recruitment Software allows MySQL credentials disclosure
  • From: Rafael San Miguel Carrasco
• RE: [funsec] WMF round-up, updates and de-mystification
  • From: Larry Seltzer
• RE: WMF Exploit
  • From: Paul
• Re: WMF round-up, updates and de-mystification
  • From: Gadi Evron
• [eVuln] VEGO Links Builder Authentication Bypass
  • From: alex
• RE: [Full-disclosure] WMF round-up, updates and de-mystification
  • From: Larry Seltzer
• Re: [funsec] WMF round-up, updates and de-mystification
  • From: Pierre Vandevenne
• Re: [Full-disclosure] WMF round-up, updates and de-mystification
  • From: InfoSecBOFH
• Re: [Full-disclosure] WMF round-up, updates and de-mystification
  • From: Nancy Kramer
• WMF SETABORTPROC exploit
  • From: SanjayR
• Re: Drupal all versiyon xss cehennem.org
  • From: security
• WMF round-up, updates and de-mystification
  • From: Gadi Evron
• Re: Drupal all versiyon xss cehennem.org
  • From: RSnake
• Winrar 3.30 Local Buffer Overflow
  • From: Alpha_Programmer
• [eVuln] VEGO Web Forum SQL Injection Vulnerability
  • From: alex
• RE: Webwasher CSM Appliance Script Security Restriction Bypass
  • From: Frank Berzau
• [eVuln] oaBoard PHP Code Execution
  • From: alex
• SCO Openserver 5.0.x exploit
  • From: rod hedor
• [eVuln] ScozBook "adminname" Authentication Bypass
  • From: alex
• [eVuln] B-net Software Multiple XSS Vulnerabilities
  • From: alex
• Drupal all versiyon xss cehennem.org
  • From: liz0
• [eVuln] inTouch Authentication Bypass
  • From: alex
• NicoFTP Stack Overflow
  • From: k4p0k4p0
• [ GLSA 200512-18 ] XnView: Privilege escalation
  • From: Thierry Carrez
• [eVuln] Chimera Web Portal System Multiple Vulnerabilities
  • From: alex
• [eVuln] Chipmunk Guestbook XSS Vulnerability
  • From: alex
• [eVuln] PHPjournaler SQL Injection Vulnerability
  • From: alex
• Re: WMF Exploit
  • From: Frank Knobbe