Bugtraq

• Thread Index

• Re: RE: WMF Exploit
  • From: grasshopa
• [USN-233-1] fetchmail vulnerability
  • From: Martin Pitt
• [KAPDA::#19] - Html Injection in vBulletin 3.5.2
  • From: alireza hassani
• Re: WMF Exploit
  • From: Justin Myers
• [USN-234-1] cpio vulnerability
  • From: Martin Pitt
• [ GLSA 200601-01 ] pinentry: Local privilege escalation
  • From: Thierry Carrez
• [xfocus-SD-060101]AIX getCommand&getShell two vulnerabilities
  • From: XFOCUS Security Team
• MyBB 1.0 SQL injection in uploading file
  • From: addmimistrator
• MyBB XSS cross-site scripting
  • From: addmimistrator
• Re: WMF Exploit
  • From: Paul Laudanski
• [KAPDA::#18] - WebWiz Products SQL Injection
  • From: advisory
• RE: WMF Exploit
  • From: Bill Busby
• WMF browser-ish exploit vectors
  • From: Evans, Arian
• Yahoo mail Cross Site Scripting vulnerability
  • From: simo
• RE: WMF Exploit
  • From: Derick Anderson
• WTF??
  • From: veil_of_darkness
• Re: Exploitation of Windows WMF on the web
  • From: psgw
• Advisory 26/2005: TinyMCE Compressor Vulnerabilities
  • From: Stefan Esser
• Secunia Research: TUGZip ARJ Archive Handling Buffer Overflow Vulnerability
  • From: Secunia Research
• phpbb2.0.19 fixes security issues
  • From: Paul Laudanski
• rssh: root privilege escalation flaw
  • From: Derek Martin
• [ GLSA 200512-17 ] scponly: Multiple privilege escalation issues
  • From: Thierry Carrez
• Black Hat Federal and Europe Call for Papers
  • From: Jeff Moss
• Airscanner Mobile Security Advisory #05083102 Spb Kiosk Engine Program Bypass
  • From: contact . removethis
• WMF exploit
  • From: ninjapicook
• RE: [Full-disclosure] Someone wasted a nice bug on spyware...
  • From: Jim Serino
• RE: WMF Exploit
  • From: Hayes, Bill
• [SECURITY] [DSA 927-2] New tkdiff packages fix insecure temporary file creation
  • From: Martin Schulze
• PhpDocumentor <= 1.3.0 rc4 Arbitrary remote/local inclusion
  • From: retrogod
• WMF Exploit
  • From: davidribyrne
• WMF Exploit
  • From: davidribyrne
• [ GLSA 200512-16 ] OpenMotif, AMD64 x86 emulation X libraries: Buffer overflows in libUil library
  • From: Thierry Carrez
• RE: Is this a new exploit?
  • From: Portz, Jon
• Re: Is this a new exploit?
  • From: Andreas Marx
• Re: Is this a new exploit?
  • From: redxii1234
• RE: [Full-disclosure] Someone wasted a nice bug on spyware...
  • From: Paul
• [BUGZILLA] Security advisory for Bugzilla < 2.16.11
  • From: David Miller
• Re: Is this a new exploit?
  • From: H D Moore
• Exploitation of Windows WMF on the web
  • From: Daniel Bonekeeper
• MDKSA-2005:238 - Updated php/php-mbstring packages fix mail injection vulnerability
  • From: Mandriva Security Team
• Is this a new exploit?
  • From: noemailpls
• Malware sample site
  • From: mvalsmith
• dtSearch DUNZIP32.dll Buffer Overflow Vulnerability
  • From: Juha-Matti Laurio
• [SECURITY] [DSA 927-1] New tkdiff packages fix insecure temporary file creation
  • From: Martin Schulze
• Secunia Research: IceWarp Web Mail Multiple File Inclusion Vulnerabilities
  • From: Secunia Research
• [ GLSA 200512-15 ] rssh: Privilege escalation
  • From: Stefan Cornelius
• Cerberus Helpdesk multiple vulnerabilities.
  • From: A. Ramos
• Obsidis n1 released!
  • From: angelo
• Multiple Translation websites Cross Site Scripting vulnerability: Google, Altavista, IBM, freetranslation, worldlingo, etc
  • From: simo
• [BuHa-Security] DoS Vulnerability in M$ IE 6 SP2 #3
  • From: bugtraq
• [BuHa-Security] DoS Vulnerability in M$ IE 6 SP2 #2
  • From: bugtraq
• [BuHa-Security] DoS Vulnerability in M$ IE 6 SP2 #1
  • From: bugtraq
• [SECURITY] [DSA 928-1] New dhis-tools-dns packages fix insecure temporary file creation
  • From: Martin Schulze
• Airscanner Mobile Security Advisory #0508310 Spb Kiosk Engine Administrator Password & Information Disclosure
  • From: contact . removethis
• [ GLSA 200512-13 ] Dropbear: Privilege escalation
  • From: Stefan Cornelius
• Found new bug
  • From: hackeriri
• CFP - IT Underground 2006, Prague, Czech Republic
  • From: Piotr Sobolewski
• Dev web management system <= 1.5 SQL injection / cross site scripting
  • From: retrogod
• MDKSA-2005:237 - Updated cpio packages fix buffer overflow on x86_64
  • From: Mandriva Security Team
• MDKSA-2005:236 - Updated fetchmail packages fix vulnerability
  • From: Mandriva Security Team
• Electric Sheep window-id stack overflow
  • From: MichaelAiello
• Multiple Network-related Vulnerabilities in Electric Sheep
  • From: MichaelAiello
• [SECURITY] [DSA 926-2] New ketm packages fix privilege escalation
  • From: Martin Schulze
• [TKADV2005-12-001] Multiple SQL Injection vulnerabilities in MyBB
  • From: tk
• RE: Webwasher CSM Appliance Script Security Restriction Bypass
  • From: Frank Berzau
• [ GLSA 200512-12 ] Mantis: Multiple vulnerabilities
  • From: Stefan Cornelius
• XSS&Sql injection attack in PHP-Fusion 6.00.3 Released
  • From: krasza
• Webwasher CSM Appliance Script Security Restriction Bypass
  • From: d0t v0rt3x
• [USN-231-1] Linux kernel vulnerabilities
  • From: Martin Pitt
• iDefense Security Advisory 12.22.05: Linux Kernel Socket Buffer Memory Exhaustion DoS Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• Privilege escalation in McAfee VirusScan Enterprise 8.0i (patch 11) and CMA 3.5 (patch 5)
  • From: Reed Arvin
• Re: Cisco PIX / CS ACS: Downloadable RADIUS ACLs vulnerability
  • From: 3APA3A
• CYBSEC - Security Advisory: httprint Multiple Vulnerabilities
  • From: Mariano Nuñez Di Croce
• [SECURITY] [DSA 925-1] New phpbb2 packages fix several vulnerabilities
  • From: Martin Schulze
• fetchmail security announcement fetchmail-SA-2005-03 (CVE-2005-4348)
  • From: ma+bt
• MDKSA-2005:235 - Updated kernel packages fix numerous vulnerabilities
  • From: Mandriva Security Team
• Cisco PIX / CS ACS: Downloadable RADIUS ACLs vulnerability
  • From: ovt
• iDefense Security Advisory 12.21.05: Macromedia JRun 4 Web Server URL Parsing Buffer Overflow Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• VMware vulnerability in NAT networking
  • From: vmware-security-alert
• XSS vulnerabilities in Google.com
  • From: Watchfire Research
• WinRAR - Processing Filename Incorrectly Vulnerability
  • From: agoanywhere
• Cisco Security Response: DoS in Cisco Clean Access
  • From: Clayton Kossmeyer
• [SECURITY] [DSA 924-1] New nbd packages fix potential arbitrary code execution
  • From: Martin Schulze
• Re: XSS bypass in PHPNuke - FIX ?
  • From: Paul Laudanski
• [KAPDA::#17] - beehiveforum Script Injection
  • From: alireza hassani
• Vulnerability in Metadot portal server allows users to gain administrative privileges
  • From: Gerry Chng
• mIRC buffer overflow
  • From: Crowdat Kurobudetsu
• [Security-Advisories@xxxxxxxxxxx: [Full-disclosure] [ACSSEC-2005-11-25-0x1] VMWare Workstation 5.5.0 <= build-18007 G SX Server Variants And Others]
  • From: Andrew Griffiths
• [ECHO_ADV_24$2005] Full path disclosure on WordPress < 1.5.2
  • From: the_day@xxxxxxxxxx
• Re: Symantec Antivirus Library Remote Heap Overflows
  • From: ltr
• security patch for Linux Kernel 2.6
  • From: breno
• Tolva PHP website system Remote File Include
  • From: beford
• Workshop "Dependability Aspects in DWH and Mining applications"Deadline:15-01-06
  • From: Manh Tho
• [ECHO_ADV_24$2005] Full path disclosure on WordPress < 1.5.2
  • From: the_day
• Call for Paper - VI National Computer and Information Security Conference - COLOMBIA
  • From: Jeimy José Cano Martínez
• [Hat-Squad] Remote Heap Corruption Vulnerability in Interaction SIP Proxy
  • From: service
• MDKSA-2005:234 - Updated sudo packages fix vulnerability
  • From: Mandriva Security Team
• IRM 012: Portfolio Netpublish Server 7 is vulnerable to a Directory Traversal Attack
  • From: Advisories
• IRM 013: Ultraapps Issue Manager is vulnerable to Privilege Escalation
  • From: Advisories
• IRM 014: Sygate Protection Agent 5.0 vulnerability - A low privileged user can disable the security agent
  • From: Advisories
• Secunia Research: Pegasus Mail Buffer Overflow and Off-by-One Vulnerabilities
  • From: Secunia Research
• [Overflow.pl] Blender BlenLoader Integer Overflow
  • From: Damian Put
• PHPGedView <= 3.3.7 remote code execution
  • From: retrogod
• Acidcat ASP CMS Multiple Vulnerabilities
  • From: h e
• Re: Unauthenticated EIGRP DoS
  • From: Paul Oxman (poxman)
• Digital Armaments Security Advisory 12.20.2005: WEBsweeper/MIMEsweeper Executable File Content Check bypass Vulnerability
  • From: info
• [ GLSA 200512-11 ] CenterICQ: Multiple vulnerabilities
  • From: Thierry Carrez
• [security bulletin] SSRT5983 rev.1 - HP-UX Running Software Distributor (SD) Remote Unauthorized Access
  • From: security-alert
• iDefense Security Advisory 12.20.05: McAfee Security Center MCINSCTL.DLL ActiveX Control File Overwrite
  • From: labs-no-reply@xxxxxxxxxxxx
• Enterprise Connector v.1.02 Multiple SQL Vulnerabilities and Login Bypass
  • From: darkz . gsa
• iDefense Security Advisory 12.20.05: Qualcomm WorldMail IMAP Server String Literal Processing Overflow Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• Symantec Antivirus Library Remote Heap Overflows
  • From: list
• MDKSA-2005:233 - Updated apache2 packages fix vulnerability in worker MPM
  • From: Mandriva Security Team
• Re: Making unidirectional VLAN and PVLAN jumping bidirectional
  • From: Clayton Kossmeyer
• [security bulletin] SSRT051026 rev. 1 - HP-UX running WBEM Services Denial of Service (DoS)
  • From: security-alert
• about phpMyAdmin's server_privileges.php announced vulnerability
  • From: Marc Delisle
• Making unidirectional VLAN and PVLAN jumping bidirectional
  • From: Andrew A. Vladimirov
• Authenticated EIGRP DoS / Information leak
  • From: Andrew A. Vladimirov
• Re: phpMyAdmin server_privileges.php SQL Injection Vulnerabilities.
  • From: michal
• [ GLSA 200512-10 ] Opera: Command-line URL shell command injection
  • From: Thierry Carrez
• [FLSA-2005:168326] Updated util-linux and mount packages fix security issue
  • From: Marc Deslauriers
• [FLSA-2005:166939] Updated openssl packages fix security issues
  • From: Marc Deslauriers
• [FLSA-2005:155510] Updated gtk2 packages fixes security issues
  • From: Marc Deslauriers
• [FLSA-2005:152892] Updated enscript package fixes security issues
  • From: Marc Deslauriers
• [FLSA-2005:152870] Updated a2ps package fixes security issue
  • From: Marc Deslauriers
• [FLSA-2005:152832] Updated lynx package fixes security issues
  • From: Marc Deslauriers
• [FLSA-2005:152787] Updated redhat-config-nfs package fixes security issue
  • From: Marc Deslauriers
• [SECURITY] [DSA 923-1] New dropbear packages fix arbitrary code execution
  • From: Martin Schulze
• ZRCSA-200505: libremail - "pop.c" Format String Vulnerability
  • From: deepfear
• phpMyAdmin server_privileges.php SQL Injection Vulnerabilities.
  • From: Alice Bryson
• Re: Fullpath disclosure in roundcube webmail
  • From: Steven M. Christey
• Re: Bypass XSS filter in PHPNUKE 7.9=>x
  • From: Paul Laudanski
• Microsoft IIS Remote Denial of Service (DoS) .DLL Url exploit
  • From: inge . henriksen
• Fullpath disclosure in roundcube webmail
  • From: king_purba
• Bug in HC
  • From: hackeriri
• Update on the PGP NTFS File Wipe Issue, 16 Dec 2005
  • From: Jon Callas
• RE: RLA ("Remote LanD Attack")
  • From: Patrick Galligan
• exploit (html) for Advanced Guestbook 2.2
  • From: irc0d3r
• Re: Bios Information Leakage
  • From: Ron van Daal
• Advisory: XSS in WebCal (v1.11-v3.04)
  • From: Stan Bubrouski
• DoS in Cisco Clean Access
  • From: alex
• iDefense Security Advisory 12.16.05: Citrix Program Neighborhood Name Heap Corruption Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• DMA[2005-1214a] - 'Widcomm BTW - Bluetooth for Windows Remote Audio Eavesdropping'
  • From: Kevin Finisterre
• Re: Patches available for IBM AIX flaws
  • From: David Litchfield
• [USN-230-2] ffmpeg/xine-lib vulnerability
  • From: Martin Pitt
• phpCOIN-1.2.2-Full-2005 SQL Injection
  • From: stranger-killer
• [ GLSA 200512-07 ] OpenLDAP, Gauche: RUNPATH issues
  • From: Thierry Carrez
• [ GLSA 200512-08 ] Xpdf, GPdf, CUPS, Poppler: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• Re: Patches available for IBM AIX flaws
  • From: Shiva Persaud
• [ GLSA 200512-09 ] cURL: Off-by-one errors in URL handling
  • From: Sune Kloppenborg Jeppesen
• Countering Trusting Trust through Diverse Double-Compiling
  • From: David A. Wheeler
• Bios Information Leakage
  • From: Jonathan Brossard
• Re: [Full-disclosure] iDEFENSE Security Advisory 12.06.05: Ipswitch Collaboration Suite SMTP Format String Vulnerability
  • From: Owen Dhu
• Re: [Full-disclosure] [EEYEB-20050523] Windows Kernel APC Data-Free Local Privilege Escalation Vulnerability
  • From: Ron
• RE: RLA ("Remote LanD Attack")
  • From: Roger A. Grimes
• AIX Heap Overflow paper
  • From: David Litchfield
• [security bulletin] SSRT4728 rev.1 - HP-UX running TCP/IP Remote Denial of Service (DoS)
  • From: security-alert
• Re: RLA ("Remote LanD Attack")
  • From: Synister Syntax
• Re: RLA ("Remote LanD Attack")
  • From: Synister Syntax
• MarmaraWeb E-commerce Script Cross Site Scripting
  • From: B3g0k
• MarmaraWeb E-commerce Remote Command Exucetion
  • From: B3g0k
• CYBSEC - Security Advisory: Watchfire AppScan QA Remote Code Execution
  • From: Mariano Nuñez Di Croce
• Metasploit Framework v3.0 Alpha Release 1
  • From: H D Moore
• Notacon Call for Proposals open
  • From: Paul Schneider
• Patches available for IBM AIX flaws
  • From: NGSSoftware Insight Security Research
• MDKSA-2005:232 - Updated gstreamer-ffmpeg packages fix buffer overflow vulnerability
  • From: Mandriva Security Team
• MDKSA-2005:231 - Updated ffmpeg packages fix buffer overflow vulnerability
  • From: Mandriva Security Team
• MDKSA-2005:230 - Updated mplayer packages fix buffer overflow vulnerability
  • From: Mandriva Security Team
• MDKSA-2005:229 - Updated xmovie packages fix buffer overflow vulnerability
  • From: Mandriva Security Team
• MDKSA-2005:228 - Updated xine-lib packages fix buffer overflow vulnerability
  • From: Mandriva Security Team
• Re: Countering Trusting Trust through Diverse Double-Compiling
  • From: David A. Wheeler
• MDKSA-2005:227 - Updated ethereal packages fix vulnerability
  • From: Mandriva Security Team
• iDefense Security Advisory 12.14.05: Trend Micro PC-Cillin Internet Security Insecure File Permission Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• [SECURITY] [DSA 922-1] New Linux 2.6.8 packages fix several vulnerabilities
  • From: Martin Schulze
• Re: Countering Trusting Trust through Diverse Double-Compiling
  • From: Mike Lisanke
• [ GLSA 200512-06 ] Ethereal: Buffer overflow in OSPF protocol dissector
  • From: Thierry Carrez
• Re: [ GLSA 200512-04 ] Openswan, IPsec-Tools: Vulnerabilities in ISAKMP Protocol implementation
  • From: Thierry Carrez
• Re: Re: Re: [KAPDA::#16] - SMF SQL Injection
  • From: grudge
• Secunia Research: Microsoft Internet Explorer Keyboard Shortcut Processing Vulnerability
  • From: Secunia Research
• [USN-230-1] ffmpeg vulnerability
  • From: Martin Pitt
• CodeCon submission deadline reminder
  • From: Len Sassaman
• SUSE Security Announcement: kernel various security and bugfixes (SUSE-SA:2005:068)
  • From: Marcus Meissner
• RLA ("Remote LanD Attack")
  • From: Synister Syntax
• Business Objects WebIntelligence 6.5x Account Lockout and System DoS
  • From: mkemp4
• Re: [ GLSA 200512-04 ] Openswan, IPsec-Tools: Vulnerabilities in ISAK MP Protocol implementation
  • From: VANHULLEBUS Yvan
• [SECURITY] [DSA 921-1] New Linux 2.4.27 packages fix several vulnerabilities
  • From: Martin Schulze
• [ GLSA 200512-05 ] Xmail: Privilege escalation through sendmail
  • From: Thierry Carrez
• SUSE Security Announcement: php4, php5 (SUSE-SA:2005:069)
  • From: Ludwig Nussel
• Re: IMOEL CMS Sql password discovery
  • From: Steven M. Christey
• DIMVA 2006 - 2nd Call for Papers
  • From: Thomas Biege
• iDefense Security Advisory 12.14.05: Trend Micro ServerProtect Crystal Reports ReportServer File Disclosure
  • From: labs-no-reply@xxxxxxxxxxxx
• Bypass XSS filter in PHPNUKE 7.9=>x
  • From: max
• Disclosure timelines from vendors - a promising practice?
  • From: Steven M. Christey
• iDefense Security Advisory 12.14.05: Trend Micro ServerProtect EarthAgent Remote DoS Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• Re: [PHP-CHECKER] 99 potential SQL injection vulnerabilities
  • From: Andy Lindeman
• [OpenPKG-SA-2005.029] OpenPKG Security Advisory (apache)
  • From: OpenPKG
• [PHP-CHECKER] 99 potential SQL injection vulnerabilities
  • From: Yichen Xie
• Re: [scip_Advisory] NetGear RP114 Flooding Denial of Service
  • From: Thierry Zoller
• iDefense Security Advisory 12.14.05: Trend Micro ServerProtect relay.dll Chunked Overflow Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• Re: [Full-disclosure] [EEYEB-20050523] Windows Kernel APC Data-Free Local Privilege Escalation Vulnerability
  • From: Joshua Russel
• iDefense Security Advisory 12.14.05: Trend Micro ServerProtect isaNVWRequest.dll Chunked Overflow
  • From: labs-no-reply@xxxxxxxxxxxx
• Re: [Full-disclosure] Re: [EEYEB-20050523] Windows Kernel APC Data-FreeLocal Privilege Escalation Vulnerability
  • From: Tom Ferris
• LIMBO CMS <= v1.0.4.2 _SERVER[] array overwrite / remote code execution
  • From: retrogod
• RE: [Full-disclosure] [EEYEB-20050523] Windows Kernel APC Data-FreeLocal Privilege Escalation Vulnerability
  • From: Marc Maiffret
• ADP Forum 2.0,ADP Forum 2.0.1,ADP Forum 2.0.2,ADP Forum 2.0.3 versiyon user md5 hash bug
  • From: liz0
• [SECURITY] [DSA 920-1] New ethereal packages fix arbitrary code execution
  • From: Martin Schulze
• Secunia Research: Internet Explorer Suppressed "Download Dialog" Vulnerability
  • From: Secunia Research
• Re: [ GLSA 200512-04 ] Openswan, IPsec-Tools: Vulnerabilities in ISAK MP Protocol implementation
  • From: Paul Wouters
• MDKSA-2005:226 - Updated mozilla-thunderbird package fix vulnerability in enigmail
  • From: Mandriva Security Team
• phpCOIN 1.2.2 multiple vulnerabilities
  • From: retrogod
• [EEYEB-20050523] Windows Kernel APC Data-Free Local Privilege Escalation Vulnerability
  • From: Advisories
• [USN-229-1] Zope vulnerability
  • From: Martin Pitt
• [USN-222-2] Perl vulnerability
  • From: Martin Pitt
• Re: Re: [KAPDA::#16] - SMF SQL Injection
  • From: Steven M. Christey
• [OpenPKG-SA-2005.028] OpenPKG Security Advisory (curl)
  • From: OpenPKG
• [scip_Advisory] NetGear RP114 Flooding Denial of Service
  • From: Marc Ruef
• [USN-228-1] curl library vulnerability
  • From: Martin Pitt
• Status on PGP NTFS File Wipe issue, 11 Dec 2005
  • From: Jon Callas
• [PHP-CHECKER] 99 potential SQL injection vulnerabilities
  • From: php-checker
• Re: [KAPDA::#16] - SMF SQL Injection
  • From: ascii
• Arab Portal v2 Beta2 SQL Injections
  • From: stranger-killer
• Re: Website Baker <=2.6.0 SQL Injection -> Login bypass -> remote code execution
  • From: ryan
• SEC Consult SA-20051211-0 :: Nortel SSL VPN Cross Site Scripting/Command Execution
  • From: SEC Consult Research
• Re: [DCG] DEFCON London group - DC4420 - inaugural meeting and Christmas Drinks!
  • From: racerx
• Re: Re: [Full-disclosure] Kerio Personal Firewall and Kerio Server Firewall FWDRV driver Local Denial of Service
  • From: JHannah01
• [ GLSA 200512-04 ] Openswan, IPsec-Tools: Vulnerabilities in ISAKMP Protocol implementation
  • From: Thierry Carrez
• SEC Consult SA-20051211-0 :: Several XSS issues in Horde Framework, Kronolith Calendar, Mnemo Notes, Nag Tasks and Turba Addressbook
  • From: Johannes Greil
• iDEFENSE Security Advisory 12.12.05: SCO Unixware Setuid 'uidadmin' Scheme Buffer Overflow Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• [USN-227-1] xpdf vulnerabilities
  • From: Martin Pitt
• Re: Re: [KAPDA::#16] - SMF SQL Injection
  • From: polnby
• oracle not only offeder - researchers NOT responsible?
  • From: Gadi Evron
• Re: Re: [KAPDA::#16] - SMF SQL Injection
  • From: retrogod
• Re: [Full-disclosure] [scip_Advisory] NetGear RP114 Flooding Denial ofService
  • From: Morning Wood
• Guestserver guestbook system vulnerabilities
  • From: jaakko
• [ GLSA 200512-03 ] phpMyAdmin: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• IMOEL CMS Sql password discovery
  • From: silversmith
• BTGrup Admin WebController Script SQL injection
  • From: khc
• [SECURITY] [DSA 919-1] New curl packages fix potential security problem
  • From: Martin Schulze
• Torrential 1.2 Directory Traversal
  • From: Shell
• DEFCON London group - DC4420 - inaugural meeting and Christmas Drinks!
  • From: Major Malfunction
• MDKSA-2005:206-1 - Updated openvpn packages fix multiple vulnerabilities
  • From: Mandriva Security Team
• Flatnuke 2.5.6 privilege escalation / remote commands execution exploit
  • From: retrogod
• Re: [KAPDA::#16] - SMF SQL Injection
  • From: grudge
• Apani Network Response to ISAKMP cert-fi:7710 Alert
  • From: mkuch
• PGP Wipe Free Space, Lyris ListManager Flaws, Windows Timestamps, Sam Juicer
  • From: H D Moore
• Re: 3com product security hole
  • From: Nicob
• Motorola SB5100E Cable Modem DoS
  • From: Алексей Синцов
• MDKSA-2005:225 - Updated perl package fixes format string vulnerability
  • From: Mandriva Security Team
• TSLSA-2005-0070 - multi
  • From: Trustix Security Advisor
• iDefense Security Advisory 12.09.05: Ethereal OSPF Protocol Dissector Buffer Overflow Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• [SECURITY] [DSA 918-1] New osh packages fix privilege escalation
  • From: Martin Schulze
• MDKSA-2005:224 - Updated curl package fixes format string vulnerability
  • From: Mandriva Security Team
• [USN-226-1] Courier vulnerability
  • From: Martin Pitt
• Milliscript 1.4 Multiple Vulnerabilities
  • From: NaPa
• [KAPDA::#16] - SMF SQL Injection
  • From: alireza hassani
• Re: 3com product security hole
  • From: Juha-Matti Laurio
• [TKPN2005-12-001] Multiple critical vulnerabilities in MyBB
  • From: tk
• [security bulletin] SSRT051069 - HP Tru64 Unix Secure Web Server (SWS 6.4.1 and earlier) PHP/XMLRPC Remote Unauthorized Execution of Arbitrary Code
  • From: security-alert
• = 1.2.6d blind SQL injection / remote commands execution:
  • From: retrogod
• Website Baker <=2.6.0 SQL Injection -> Login bypass -> remote code execution
  • From: retrogod
• 3com product security hole
  • From: jaime . blasco
• [SECURITY] [DSA 917-1] New courier packages fix unauthorised access
  • From: Martin Schulze
• -Exploiting Freelist[0] On Windows XP Service Pack 2-
  • From: Brett Moore
• Airscanner Mobile Security Advisory: Remote Hard Reset Data Wipe and DoS of Pocket Controller v5.0 (#AS05080401)
  • From: contact . removethis
• iDefense Security Advisory 12.07.05: Dell TrueMobile 2300 Wireless Broadband Router Authentication Bypass Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• [security bulletin] SSRT051037 HP-UX Running IPSec Remote Unauthorized Access
  • From: security-alert
• [security bulletin] SSRT5954 Revised - HP-UX TCP/IP Remote Denial of Service (DoS)
  • From: security-alert
• [ GLSA 200512-01 ] Perl: Format string errors can lead to code execution
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200512-02 ] Webmin, Usermin: Format string vulnerability
  • From: Sune Kloppenborg Jeppesen
• [KDE Security Advisory] multiple buffer overflows in kpdf/koffice
  • From: Dirk Mueller
• [security bulletin] SSRT4884 HP-UX TCP/IP Remote Denial of Service (DoS)
  • From: security-alert
• Journal of Computer Virology-Call for Papers
  • From: Saeed Abu Nimeh
• DRZES HMS XSS and SQL Injection Vulnerabilities
  • From: vipsta
• Mobile Antivirus Researchers Assoc. Call for White Papers
  • From: contact . removethis
• Advisory 24/2005: libcurl URL parsing vulnerability
  • From: Stefan Esser
• Advisory 25/2005: phpMyAdmin Variables Overwrite Vulnerability
  • From: Stefan Esser
• [SECURITY] [DSA 916-1] New Inkscape packages fix arbitrary code execution
  • From: Martin Schulze
• SugarSuite Open Source <= 4.0beta Remote code execution
  • From: retrogod
• SimpleBBS <= v1.1 remote commands execution in c by: unitedasia security crew
  • From: unitedasia
• [KAPDA::#15] - ThWboard multiple vulnerabilities
  • From: alireza hassani
• Critical Myspace.com Vulnerabilites
  • From: silentproducts
• [USN-225-1] Apache 2 vulnerability
  • From: Martin Pitt
• [USN-224-1] Kerberos vulnerabilities
  • From: Martin Pitt
• iDefense Security Advisory 12.05.05: Multiple Vendor xpdf StreamPredictor Heap Overflow Vulnerability
  • From: iDEFENSE Labs
• iDefense Security Advisory 12.05.05: Multiple Vendor xpdf JPX Stream Reader Heap Overflow Vulnerability
  • From: iDEFENSE Labs
• iDefense Security Advisory 12.05.05: Multiple Vendor xpdf DCTStream Progressive Heap Overflow
  • From: iDEFENSE Labs
• iDefense Security Advisory 12.05.05: Multiple Vendor xpdf DCTStream Baseline Heap Overflow Vulnerability
  • From: iDEFENSE Labs
• Horde IMP Webmail Client XSS all versions
  • From: Igor
• SUSE Security Announcement: kernel various security and bugfixes (SUSE-SA:2005:067)
  • From: Marcus Meissner
• Buffer Overflow in MultiTech VoIP Implementations
  • From: SecurityLab Research
• Outpost24 Public Security Note: Linux/Elxbot
  • From: David Jacoby
• Blog System v1.2 Multiple SQL Injection Vulnerabilities
  • From: vipsta
• [security bulletin] HPSBUX01059 SSRT4704 Revised - HP-UX Running wu-ftpd Local Unauthorized Access
  • From: security-alert
• [USN-180-2] MySQL 4.1 vulnerability
  • From: Martin Pitt
• have you ever been BluePIMped?
  • From: KF (lists)
• [scip_Advisory] e107 v0.6 rate.php manipulation
  • From: Marc Ruef
• [USN-223-1] Inkscape vulnerability
  • From: Martin Pitt
• more MD5 colliding examples
  • From: Gerardo Richarte
• Zen-Cart <= 1.2.6d blind SQL injection / remote commands execution:
  • From: retrogod
• eXtreme Styles mod <= 2.2.1 Multiple Vulnerabilities
  • From: tommie1
• PHP-Fusion v6.00.109 SQL Injection and Info. Disclosure
  • From: xer0x . west
• [OpenPKG-SA-2005.027] OpenPKG Security Advisory (php)
  • From: OpenPKG
• DMA[2005-1202a] - 'sobexsrv - Scripting/Secure OBEX Server format string vulnerability'
  • From: KF (lists)
• QNX 4.25 suided dhcp.client binary
  • From: lms
• [Updated] [FLSA-2005:166943] Updated php packages fix security issues
  • From: Marc Deslauriers
• MDKSA-2005:222 - Updated mailman packages fix various vulnerabilities
  • From: Mandriva Security Team
• Re: WebCalendar
  • From: Louis Wang
• Alisveristr E-Commerce Admin Login SQL &#304;njection
  • From: B3g0k
• [OpenPKG-SA-2005.025] OpenPKG Security Advisory (perl)
  • From: OpenPKG
• eXtreme Styles mod <= 2.2.1 Multiple Vulnerabilities
  • From: tommie1
• Re: Re: Microsoft Windows CreateRemoteThread Exploit
  • From: warl0ck
• MDKSA-2005:221 - Updated spamassassin packages fixes vulnerability
  • From: Mandriva Security Team
• [OpenPKG-SA-2005.026] OpenPKG Security Advisory (lynx)
  • From: OpenPKG
• MDKSA-2005:223 - Updated webmin package fixes format string vulnerability
  • From: Mandriva Security Team
• Re: - Cisco IOS HTTP Server code injection/execution vulnerability-
  • From: Mike Caudill
• WinEggDropShell Multiple Remote Stack Overflow
  • From: Sowhat
• [USN-222-1] Perl vulnerability
  • From: Martin Pitt
• [USN-221-1] racoon vulnerability
  • From: Martin Pitt
• Format String Vulnerabilities in Perl Programs
  • From: Steven M. Christey
• [xfocus-SD-051202]openMotif libUil Multiple vulnerability
  • From: alert7@xxxxxxxxxx
• 22nd CCC conference in Berlin
  • From: Harry Behrens
• SEC Consult SA-XXXXXXXXXXX
  • From: Bernhard Mueller
• SEC Consult SA-20050212-1 :: A Word on Webmail Security and Browser related XSS Bugs
  • From: Sec Consult Research
• SEC Consult SA-20051202-1 :: GMX Webmail XSS
  • From: Sec Consult Research
• RE: Microsoft Windows CreateRemoteThread Exploit
  • From: Michael Wojcik
• Re: Microsoft Windows CreateRemoteThread Exploit
  • From: Anton
• Re: Sunbelt set to acquire Kerio Personal Firewall
  • From: Nick Boyce
• phpMyChat Multiple XSS vulnerabilities.
  • From: secresearch
• [SECURITY] [DSA 915-1] New helix-player packages fix arbitrary code execution
  • From: Martin Schulze
• Cisco Security Advisory: IOS HTTP Server Command Injection Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [DRUPAL-SA-2005-009] Drupal 4.6.4 / 4.5.6 fixes minor access control issue
  • From: Uwe Hermann
• [SECURITY] [DSA 913-1] New gdk-pixbuf packages fix several vulnerabilities
  • From: Martin Schulze
• Perl format string integer wrap vulnerability
  • From: robert
• [USN-220-1] w3c-libwww vulnerability
  • From: Martin Pitt
• Edgewall Trac SQL Injection Vulnerability
  • From: David Maciejak
• [DRUPAL-SA-2005-007] Drupal 4.6.4 / 4.5.6 fixes XSS issue
  • From: Uwe Hermann
• [DRUPAL-SA-2005-008] Drupal 4.6.4 / 4.5.6 fixes XSS and HTTP header injection issue
  • From: Uwe Hermann
• [SECURITY] [DSA 914-1] New horde2 packages fix cross-site scripting
  • From: Martin Schulze
• Microsoft Windows CreateRemoteThread Exploit
  • From: q7x
• WebCalendar Multiple Vulnerabilities.
  • From: lwang
• [security bulletin] SSRT4787 Revised - HP Systems Insight Manager (SIM) for HP-UX Remote Denial of Service (DoS)
  • From: security-alert
• Re: Opera 8.50 DoS with simple java applet
  • From: Yngve N. Pettersen (Developer Opera Software ASA)
• Re: DNS query spam
  • From: Piotr Kamisiski
• Sunbelt set to acquire Kerio Personal Firewall
  • From: Paul Laudanski
• Re: WebCalendar Multiple Vulnerabilities
  • From: craig
• PhpX <= 3.5.9 SQL Injection -> login bypass -> remote command/code execution
  • From: retrogod
• Re: What is wrong with these people?
  • From: Steve Shockley
• Re: - Cisco IOS HTTP Server code injection/execution vulnerability-
  • From: Florian Weimer
• Re: DNS query spam
  • From: fugi
• MDKSA-2005:220 - Updated kernel packages fix numerous vulnerabilities
  • From: Mandriva Security Team
• Re: Re: Xaraya <= 1.0.0 RC4 D.O.S / file corruption
  • From: retrogod
• MDKSA-2005:217 - Updated netpbm packages fix pnmtopng vulnerabilities
  • From: Mandriva Security Team
• Re: Opera 8.50 DoS with simple java applet
  • From: Edward D Wiget
• MDKSA-2005:218 - Updated kernel packages fix numerous vulnerabilities
  • From: Mandriva Security Team
• MDKSA-2005:219 - Updated kernel packages fix numerous vulnerabilities
  • From: Mandriva Security Team
• Re: WebCalendar Multiple Vulnerabilities
  • From: Paul Laudanski
• Re: DNS query spam
  • From: Joe
• Opera 8.50 DoS with simple java applet
  • From: Marc Schoenefeld
• Gallery 2.x Security Advisory
  • From: Bharat Mediratta
• Re: DNS query spam
  • From: Stephen Stuart
• [SECURITY] [DSA 912-1] New centericq packages fix denial of service
  • From: Martin Schulze
• Re: DNS query spam
  • From: Jim Pingle
• Re: DNS query spam
  • From: Florian Weimer
• Re: WebCalendar Multiple Vulnerabilities
  • From: ascii
• Re: Xaraya <= 1.0.0 RC4 D.O.S / file corruption
  • From: Paul Laudanski
• Re: DNS query spam
  • From: Florian Weimer
• Re: Re: - Cisco IOS HTTP Server code injection/execution vulnerability-
  • From: picardos
• RE: - Cisco IOS HTTP Server code injection/execution vulnerability-
  • From: Evans, Arian
• Re: DNS query spam
  • From: Piotr Kamisiski
• possible privilege escalation on QNX Neutrino 6.3.0
  • From: pasquale minervini
• N-13 News Remote SQL/PHP Shell injection
  • From: contropotere
• Panda Remote Heap Overflow
  • From: list
• Re: DNS query spam
  • From: Antone Roundy
• Re: DNS query spam
  • From: Josep Ma Castells
• Re: DNS query spam
  • From: Alexander Lourier
• APPLE-SA-2005-11-29 Security Update 2005-009
  • From: noreply
• Webmin miniserv.pl format string vulnerability
  • From: advisory
• ASP-Rider Default.asp SQL Injection
  • From: info
• Xaraya <= 1.0.0 RC4 D.O.S / file corruption
  • From: retrogod
• Re: Re: - Cisco IOS HTTP Server code injection/execution vulnerability-
  • From: limfung
• [FLSA-2005:166943] Updated php packages fix security issues
  • From: Marc Deslauriers
• [Full-disclosure] [ GLSA 200511-23 ] chmlib, KchmViewer: Stack-based buffer overflow
  • From: koon
• [SECURITY] [DSA 911-1] New gtk+2.0 packages fix several vulnerabilities
  • From: Martin Schulze
• Cisco Security Advisory: Cisco Security Agent Vulnerable to Privilege Escalation
  • From: Cisco Systems Product Security Incident Response Team
• Core FORCE and OpenBSD PF's
  • From: Ivan Arce
• Re: phpBB Code EXEC (v2.0.10)
  • From: Ron van Daal
• Flaw in Syn Attack Protection on non-updated Microsoft OSes can lead to DoS
  • From: Luigi Mori
• Re: - Cisco IOS HTTP Server code injection/execution vulnerability-
  • From: Florian Weimer
• What is wrong with these people?
  • From: Paul Schmehl
• Google Talk cleartext credentials in process memory
  • From: unknown . pentester
• Kadu remote DoS
  • From: michal
• - Cisco IOS HTTP Server code injection/execution vulnerability-
  • From: picardos
• Randshop all versiyon Sql &#304;njection
  • From: liz0
• Re: Multiple security issues in TikiWiki 1.9.x
  • From: mose
• DNS query spam
  • From: Piotr Kamisiski
• Re: phpBB Code EXEC (v2.0.10)
  • From: deane10
• ZRCSA-200503 - ktools Buffer Overflow Vulnerability
  • From: siegfried
• Re: XSS on Yahoo Mail
  • From: Lance James
• APC Security Advisory - PowerChute Network Shutdown's Web Interface Only Supports HTTP
  • From: Security . advisory
• Free Web Stat Multiple XSS Vulnerabilities
  • From: ascii
• Php Web Statistik Multiple Vulnerabilities
  • From: ascii
• WebCalendar Multiple Vulnerabilities
  • From: ascii
• Guppy <= 4.5.9 Remote code execution
  • From: retrogod
• ANN: Free endpoint security software released (Core FORCE 070.105)
  • From: Core FORCE team
• [ GLSA 200511-22 ] Inkscape: Buffer overflow
  • From: Thierry Carrez
• [ GLSA 200511-23 ] chmlib, KchmViewer: Stack-based buffer overflow
  • From: Thierry Carrez
• Remote file include in phpgreetz
  • From: gb . network
• Remote file include in Q-News
  • From: gb . network
• Remote file include in Athena
  • From: gb . network
• Re: XSS on Yahoo Mail
  • From: Matan Peled
• Re: XSS on Yahoo Mail
  • From: alireza hassani
• Webistanbul Control Panel Sql Injection
  • From: khc
• RE: XSS on Yahoo Mail
  • From: Richard Fuchshuber
• Re: Mandriva Security
  • From: Vincent Danen
• RE: Advisory 23/2005: vTiger multiple vulnerabilities
  • From: Bug Traq Lists
• Re: XSS on Yahoo Mail
  • From: little . hacker
• Re: XSS on Yahoo Mail
  • From: Personal Account
• Re: XSS on Yahoo Mail
  • From: Jim Ley
• Re: XSS on Yahoo Mail
  • From: Will Wesley
• Re: XSS on Yahoo Mail
  • From: Steven Champeon
• XSS in PBLang 4.65 Profile.php/UCP.php
  • From: r0xes
• [ GLSA 200511-21 ] Macromedia Flash Player: Remote arbitrary code execution
  • From: Thierry Carrez
• Advisory 23/2005: vTiger multiple vulnerabilities
  • From: Christopher Kunz
• Re: Advisory 23/2005: vTiger multiple vulnerabilities
  • From: Christopher Kunz
• Mandriva Security
  • From: [at]
• eFiction <= 2.0 multiple vulnerabilities
  • From: retrogod
• SEC Consult SA-20051125-0 :: More Vulnerabilities in vTiger CRM
  • From: SEC Consult Research
• MDKSA-2005:216 - Updated fuse packages fix vulnerability
  • From: Mandriva Security Team
• Re: VHCS 2.x HTTP Error Cross Site Scripting
  • From: Moritz Naumann
• 2nd CFP: Workshops at the 1st Int. Conf. on Availability, Reliability & Security
  • From: Manh Tho
• freeFTPd 1.0.10 (Dos,Exploit)
  • From: Stefan Lochbihler
• RE: XSS on Yahoo Mail
  • From: Will Wesley
• [SECURITY] [DSA 910-1] New zope2.7 packages fix arbitrary file inclusion
  • From: Martin Schulze
• Advisory 23/2005: vTiger multiple vulnerabilities
  • From: Christopher Kunz
• MailEnable IMAP DOS
  • From: Josh Zlatin
• Secunia Research: SpeedProject Products ZIP/UUE File Extraction Buffer Overflow
  • From: Secunia Research
• MDKSA-2005:215 - Updated binutils packages fix vulnerabilities
  • From: Mandriva Security Team
• XSS on Yahoo Mail
  • From: Richard Fuchshuber
• [ GLSA 200511-18 ] phpSysInfo: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200511-19 ] eix: Insecure temporary file creation
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200511-20 ] Horde Application Framework: XSS vulnerability
  • From: Sune Kloppenborg Jeppesen
• Google Talk Denial of Service - BenjiBug
  • From: James Evans
• [SECURITY] [DSA 907-1] New ipmenu packages fix insecure temporary file creation
  • From: Martin Schulze
• Re: IE BUG, Mozilla DOS?
  • From: Kyle Wheeler
• [SECURITY] [DSA 908-1] New sylpheed-claws packages fix arbitrary code execution
  • From: Martin Schulze
• GeSWall Intrusion Prevention System 2.1 Released (Freeware)
  • From: GentleSecurity Team
• [SECURITY] [DSA 909-1] New horde3 packages fix cross-site scripting
  • From: Martin Schulze
• [security bulletin] SSRT051074 Revised - HP-UX Running xterm Local Unauthorized Access
  • From: security-alert
• OTRS 1.x/2.x Multiple Security Issues
  • From: Moritz Naumann
• Cisco PIX TCP Connection Prevention
  • From: Konstantin V. Gavrilenko
• [USN-218-1] netpbm vulnerabilities
  • From: Martin Pitt
• [USN-219-1] Linux kernel vulnerabilities
  • From: Martin Pitt
• [SECURITY] [DSA 906-1] New sylpheed packages fix arbitrary code execution
  • From: Martin Schulze
• Secunia Research: Opera Command Line URL Shell Command Injection
  • From: Secunia Research
• [SECURITY] [DSA 900-3] New fetchmail-ssl packages fix potential information leak
  • From: Martin Schulze
• [ GLSA 200511-17 ] FUSE: mtab corruption through fusermount
  • From: Thierry Carrez
• Exploiting the Stack (Part I-IV)
  • From: [at]
• Horde MIME Viewer vulnerability
  • From: daniel . schreckling
• VHCS 2.x HTTP Error Cross Site Scripting
  • From: Moritz Naumann
• [KAPDA::#14] - PHPPost XSS and HTML Injection
  • From: alireza hassani
• PmWiki 2.0.12 Cross Site Scripting
  • From: Moritz Naumann
• [USN-190-2] ucs-snmp vulnerability
  • From: Martin Pitt
• [USN-217-1] Inkscape vulnerability
  • From: Martin Pitt
• [ GLSA 200511-16 ] GNUMP3d: Directory traversal and insecure temporary file creation
  • From: Thierry Carrez
• [SECURITY] [DSA 905-1] New mantis packages fix several vulnerabilities
  • From: Martin Schulze
• IE BUG, Mozilla DOS?
  • From: admin
• Computer Terrorism Security Advisory (Reclassification) - Microsoft Internet Explorer JavaScript Window() Vulnerability
  • From: securityadvisory
• Gadu-Gadu several vulnerabilities (version <= 7.20)
  • From: Jaroslaw Sajko
• [SECURITY] [DSA 904-1] New netpbm packages fix arbitrary code execution
  • From: Martin Schulze
• [SECURITY] [DSA 903-1] New unzip packages fix unauthorised permissions modification
  • From: Martin Schulze
• [SECURITY] [DSA 900-2] New fetchmail packages fix potential information leak
  • From: Martin Schulze
• Re: Cisco Clean Access Agent (Perfigo) bypass
  • From: fakemeail
• Google Search Appliance proxystylesheet Flaws
  • From: H D Moore
• Metro Olografix Crypto Meeting 2006 CFP
  • From: Angelo Dell'Aera
• [SECURITY] [DSA 811-2] New common-lisp-controller packages fix arbitrary code injection
  • From: Martin Schulze
• [SECURITY] [DSA 902-1] New xmail packages fix arbitrary code execution
  • From: Martin Schulze
• cracking safes with thermal imaging
  • From: Michal Zalewski
• Re: Work in Progress: FileZilla Server Terminal V0.9.4d Buffer Overflow
  • From: inge . henriksen
• Your One-Stop Site For Sony Lawsuit Info
  • From: Larry Seltzer
• APBoard v [all] ---> [SQL injection]
  • From: ksa_ksa82
• Security Advisory: Struts Error Message Cross Site Scripting
  • From: Irene Abezgauz
• [TKADV2005-11-004] Multiple Cross Site Scripting vulnerabilities in phpMyFAQ
  • From: tk
• [ GLSA 200511-15 ] Smb4k: Local unauthorized file access
  • From: Sune Kloppenborg Jeppesen
• [security - exponentcms]
  • From: Hans Wolters
• [SECURITY] [DSA 901-1] New gnump3d packages fix several vulnerabilities
  • From: Martin Schulze
• MDKSA-2005:214 - Updated gdk-pixbuf/gtk+2.0 packages fix vulnerability
  • From: Mandriva Security Team
• Mambo 0day Exploit out in the wild - mambo/skype hacked
  • From: rebarz99
• Re: PHP-Fusion <= 6.00.206 Multiple Vulnerabilities
  • From: sheldon
• Secunia Research: Winmail Server Multiple Vulnerabilities
  • From: Secunia Research
• Google Base
  • From: Petko Petkov
• Secunia Research: MailEnable Buffer Overflow and Directory Traversal Vulnerabilities
  • From: Secunia Research
• Re: New Bug KESM in GoogleTalk
  • From: kahrny
• PHP-Fusion <= 6.00.206 Multiple Vulnerabilities
  • From: r . verton
• Snagging Security Tokens to Elevate Privileges
  • From: David Litchfield
• [SECURITY] [DSA 900-1] New fetchmail packages fix potential information leak
  • From: Martin Schulze
• iDEFENSE Security Advisory 11.17.05: Qualcomm WorldMail IMAP Server Directory Traversal Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• [SECURITY] [DSA 899-1] New egroupware packages fix several vulnerabilities
  • From: Martin Schulze
• [SECURITY] [DSA 898-1] New phpgroupware packages fix several vulnerabilities
  • From: Martin Schulze
• [KAPDA::#13] - XMB HTML Injection & Path Disclosure.
  • From: alireza hassani
• MDKSA-2005:213 - Updated php packages fix multiple vulnerabilities
  • From: Mandriva Security Team
• ShmooCon 2006 - Washington DC
  • From: B Potter
• [security bulletin] SSRT5979 - HP-UX Running IPSec Remote Denial of Service (DoS)
  • From: security-alert
• [ GLSA 200511-14 ] GTK+ 2, GdkPixbuf: Multiple XPM decoding vulnerabilities
  • From: Thierry Carrez
• Buffer OverFlow For Php 4.3.10 and other ?? Local
  • From: papipsycho
• MDKSA-2005:212 - Updated egroupware packages to address phpldapadmin, phpsysinfo vulnerabilities
  • From: Mandriva Security Team
• [security bulletin] SSRT5979 - HP Jetdirect 635n IPv6/IPsec Print Server (J7961A) Remote Denial of Service (DoS)
  • From: Security Alert
• Re: List of Security-oriented Fairs/Events/Conferences?
  • From: Luca Sambucci
• [USN-216-1] GDK vulnerabilities
  • From: Martin Pitt
• [security bulletin] SSRT051251 - Apache-based Web Server on HP-UX mod_ssl, proxy_http, Remote Execution of Arbitrary Code, Denial of Service (DoS), and Unauthorized Access
  • From: security-alert
• Re: Authentication vulnerability in Belkin wireless devices
  • From: Andrei Mikhailovsky
• In response to ISAKMP 'vulnerabilities'
  • From: sigint
• Cisco Security Advisory: Fixed SNMP Communities and Open UDP Port in Cisco 7920 Wireless IP Phone
  • From: Cisco Systems Product Security Incident Response Team
• Buffer Overrun in FTGate4 Groupware Mail server
  • From: io
• Database servers on XP and the curious flaw
  • From: David Litchfield
• SUSE Security Announcement: gdk-pixbuf, gtk2 (SUSE-SA:2005:065)
  • From: Thomas Biege
• Schneier's PasswordSafe password validation flaw
  • From: info
• RE: List of Security-oriented Fairs/Events/Conferences?
  • From: Juha-Matti Laurio
• [ GLSA 200511-13 ] Sylpheed, Sylpheed-Claws: Buffer overflow in LDIF importer
  • From: Thierry Carrez
• APPLE-SA-2005-11-15 iTunes 6 for Windows
  • From: noreply
• Critical SQL Injection PHPNuke <= 7.8
  • From: sp3x
• iDEFENSE Security Advisory 11.15.05: Multiple Vendor Insecure Call to CreateProcess() Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• iDEFENSE Security Advisory 11.15.05: Multiple Vendor GTK+ gdk-pixbuf XPM Loader Heap Overflow Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• Re: phpBB 2.0.18 SQL Query problem
  • From: max
• Authentication vulnerability in Belkin wireless devices
  • From: Andrei Mikhailovsky
• [securityzone@xxxxxxxxxxxxxx: Macromedia Security Bulletins]
  • From: noreply
• RE: List of Security-oriented Fairs/Events/Conferences?
  • From: dave kleiman
• Re: [xfocus-AD-051115]Multiple antivirus failed to scan malicous filename bypass vulnerability
  • From: Thierry Zoller
• Template Seller Pro 3.25
  • From: r . verton
• Re: Midicart sql injection
  • From: [at]
• Re: [FLSA-2005:152794] Updated rp-pppoe package fixes security issue
  • From: David F. Skoll
• Affiliate Network Pro v7.2 SQL Injections, Arbitrary code execution, XSS
  • From: r . verton
• [FLSA-2005:123013] Updated xchat package fixes security issue
  • From: Marc Deslauriers
• Three years and ten months without a patch
  • From: David Litchfield
• [FS-05-02] Multiple vulnerabilities in phpMyAdmin
  • From: Toni Koivunen
• [SECURITY] [DSA 897-1] New phpsysinfo packages fix several vulnerabilities
  • From: Martin Schulze
• [PHPADSNEW-SA-2005-002] phpAdsNew and phpPgAds 2.0.7 fix multiple vulnerabilities
  • From: Matteo Beccati
• Re: phpBB 2.0.18 SQL Query problem
  • From: Ron van Daal
• [FLSA-2005:158801] Updated bzip2 packages fix security issues
  • From: Marc Deslauriers
• [SECURITY] [DSA 896-1] New ftpd-ssl packages fix arbitrary code execution
  • From: Martin Schulze
• [ GLSA 200511-12 ] Scorched 3D: Multiple vulnerabilities
  • From: Thierry Carrez
• [FLSA-2005:152794] Updated rp-pppoe package fixes security issue
  • From: Marc Deslauriers
• [xfocus-AD-051115]Multiple antivirus failed to scan malicous filename bypass vulnerability
  • From: alert7@xxxxxxxxxx
• Re: DMA[2005-1112a] - 'Veritas Storage Foundation VCSI18N_LANG buffer overflow'
  • From: Dana Hudes
• PHPWCMS - Directory traversal vulnerability,CSS attack
  • From: Stefan Lochbihler
• RE: List of Security-oriented Fairs/Events/Conferences?
  • From: Jeremy Epstein
• Re: List of Security-oriented Fairs/Events/Conferences?
  • From: Saeed Abu Nimeh
• [SECURITY] [DSA 894-1] New AbiWord packages fix arbitrary code execution
  • From: Martin Schulze
• RE: [ADVISORY] CISCO ASA Failover DoS Vulnerability
  • From: Randy Ivener (rivener)
• iDefense Security Advisory 11.11.05: Multiple Vendor Lynx Command Injection Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• Multible Sql injections in Wizz Forum
  • From: s2b
• Walla TeleSite Multiple Vulnerabilities
  • From: sinneR
• Cyphor (Release: 0.19) Sql injection
  • From: s2b
• 1-2-All Broadcast E-mail Software vulnerable to a classic SQL admin
  • From: bhs_team
• Midicart sql injection
  • From: crazy frog crazy frog
• Malware Removal and Prevention Procedure
  • From: Paul Laudanski
• Cisco Security Advisory: Multiple Vulnerabilities Found by PROTOS IPSec Test Suite
  • From: Cisco Systems Product Security Incident Response Team
• Re: New Bug KESM in GoogleTalk
  • From: Cory Altheide
• phpBB 2.0.18 SQL Query problem
  • From: max
• GAO report on e-voting
  • From: Atom Smasher
• List of Security-oriented Fairs/Events/Conferences?
  • From: Rainer Duffner
• MD4 and MD5 collision generators
  • From: sflist
• Beta product testing
  • From: Bill Stout
• [security bulletin] HPSBUX02075 SSRT051074 - HP-UX Running xterm Local Unauthorized Access
  • From: security-alert
• [KAPDA::#12] - ekinboard XSS and HTML Injection
  • From: alireza hassani
• [ADVISORY] CISCO ASA Failover DoS Vulnerability
  • From: Amin Tora
• fipsCMS light - vulnerable to script injection.
  • From: preben
• [SECURITY] [DSA 895-1] New uim packages fix privilege escalation
  • From: Martin Schulze
• Advisory 22/2005: Multiple vulnerabilities in phpSysInfo
  • From: Christopher Kunz
• [SECURITY] [DSA 893-1] New acidlab packages fix SQL injection
  • From: Martin Schulze
• DMA[2005-1112a] - 'Veritas Storage Foundation VCSI18N_LANG buffer overflow'
  • From: Kevin Finisterre
• [FLSA-2005:152848] Updated glibc packages fix security issues
  • From: Marc Deslauriers
• [ GLSA 200511-11 ] linux-ftpd-ssl: Remote buffer overflow
  • From: Thierry Carrez
• [ GLSA 200511-10 ] RAR: Format string and buffer overflow vulnerabilities
  • From: Thierry Carrez
• XOOPS 2.2.3 Final arbitrary local inclusion / XOOPS WF-Downloads module v 2.05 SQL Injection
  • From: retrogod
• PHPCalendar (and some more codegrrl.com products) arbitrary code execution
  • From: r . verton
• [ GLSA 200511-09 ] Lynx: Arbitrary command execution
  • From: Thierry Carrez
• PollVote Remote File Inclusion
  • From: stormhacker
• [ GLSA 200511-08 ] PHP: Multiple vulnerabilities
  • From: Thierry Carrez
• ZRCSA-200502 - phpAdsNew SQL Injection Vulnerabilities
  • From: Siegfried
• Multiple Bugs in MyBB 1.0 PR2 Rev 686(Updated Nov 1, 2005)
  • From: syini666
• MDKSA-2005:211 - Updated lynx packages fix critical vulnerability
  • From: Mandriva Security Team
• SQL injection in phpWebThing 1.4.4
  • From: A . 1 . M
• High Risk Flaw in RealPlayer
  • From: NGSSoftware Insight Security Research
• [EEYEB-20050701] - RealPlayer Zipped Skin File Buffer Overflow II
  • From: Advisories
• [EEYEB-20050510] - RealPlayer Data Packet Stack Overflow
  • From: Advisories
• [USN-215-1] fetchmailconf vulnerability
  • From: Martin Pitt
• Moodle <=1.6dev blind SQL Injection
  • From: retrogod
• [FLSA-2005:166941] Updated httpd and mod_ssl packages fix two security issues
  • From: Marc Deslauriers
• Re: New Bug KESM in GoogleTalk
  • From: crowdat
• [SECURITY] [DSA 804-2] New kdelibs packages fix backup file information leak
  • From: Martin Schulze
• Folder Guard exe files protection bypass
  • From: ShadowBeast
• [FS-05-01] Multiple vulnerabilities in phpAdsNew
  • From: Toni Koivunen
• [SECURITY] [DSA 892-1] New awstats packages fix arbitrary command execution
  • From: Martin Schulze
• MDKSA-2005:210 - Updated w3c-libwww packages fixes DoS vulnerability.
  • From: Mandriva Security Team
• MDKSA-2005:209 - Updated fetchmail packages fixes fetchmailconf vulnerability
  • From: Mandriva Security Team
• MDKSA-2005:208 - Updated emacs packages fix Lisp vulnerability
  • From: Mandriva Security Team
• MDKSA-2005:207 - Updated libungif packages fix various vulnerabilities
  • From: Mandriva Security Team
• [security bulletin] SSRT051012 - HP-UX envd Local Execution of Privileged Code
  • From: security-alert
• [security bulletin] SSRT051014 - HP-UX Trusted Mode remshd Remote Unauthorized Access
  • From: security-alert
• [security bulletin] SSRT051064 Revised - HP-UX ftpd Remote Unauthorized Data Access
  • From: security-alert
• [security bulletin] SSRT051041 Revised - HP-UX Mozilla Remote Unauthorized Execution of Privileged Code or Denial of Service (DoS)
  • From: security-alert
• [USN-151-4] rpm vulnerability
  • From: Martin Pitt
• ASPKnowledgebase vulnerable to XSS injection.
  • From: preben
• ASPKnowledgebase vulnerable to SQL-inject
  • From: preben
• [EEYEB-20050901] Windows Metafile SetPalette Entries Heap OVerflow Vulnerability (Graphics Rendering Engine Vulnerability)
  • From: Advisories
• New Bug KESM in GoogleTalk
  • From: natalylopez380
• Antville 1.1 Cross Site Scripting
  • From: Moritz Naumann
• Multiple security issues in TikiWiki 1.9.x
  • From: Moritz Naumann
• CYBSEC - Security Advisory: Multiple XSS in SAP WAS
  • From: Leandro Meiners
• CYBSEC - Security Advisory: Phishing Vector in SAP WAS
  • From: Leandro Meiners
• [SECURITY] [DSA 890-1] New libungif4 packages fix several vulnerabilities
  • From: Martin Schulze
• [EEYEB-20050329] Windows Metafile Multiple Heap Overflows
  • From: Advisories
• MDKSA-2005:206 - Updated openvpn packages fix multiple vulnerabilities
  • From: Mandriva Security Team
• CYBSEC - Security Advisory: HTTP Response Splitting in SAP WAS
  • From: Leandro Meiners
• [SECURITY] [DSA 891-1] New gpsdrive packages fix arbitrary code execution
  • From: Martin Schulze
• Advisory 21/2005: Multiple vulnerabilities in PHPKIT
  • From: Christopher Kunz
• Re: Hidden accounts on sony vaio laptops
  • From: Williams, James K
• MDKSA-2005:205 - Updated clamav packages fix multiple vulnerabilities
  • From: Mandriva Security Team
• Re: [Full-disclosure] Re: readdir_r considered harmful
  • From: Andrew Miller
• [SECURITY] [DSA 889-1] New enigmail packages fix information disclosure
  • From: Martin Schulze
• Call For Papers
  • From: first-2006papers
• Re: [Full-disclosure] Re: readdir_r considered harmful
  • From: Casper . Dik
• Oracle DBMS_ASSERT and the October 2005 CPU
  • From: NGSSoftware Insight Security Research
• Oracle October 2005 CPU Problems
  • From: NGSSoftware Insight Security Research
• Hidden accounts on sony vaio laptops
  • From: yash . kadakia
• [TKADV2005-11-001] Multiple vulnerabilities in PHPlist
  • From: tk
• LayerOne 2006 CFP Released
  • From: Layer One
• e107 Games System exploit
  • From: willey_wonka
• Zone Labs Products Advance Program Control and OS Firewall (Behavioral Based) Technology Bypass Vulnerability
  • From: Debasis Mohanty
• Re: [Full-disclosure] Re: readdir_r considered harmful
  • From: Casper . Dik
• Re: [Full-disclosure] Re: readdir_r considered harmful
  • From: Ulrich Drepper
• [USN-214-1] libungif vulnerabilities
  • From: Martin Pitt
• Re: [Full-disclosure] Re: readdir_r considered harmful
  • From: Casper . Dik
• Re: [Full-disclosure] Re: readdir_r considered harmful
  • From: Ulrich Drepper
• Re: Re: Mambo Open Source, Path disclosure
  • From: trueend5
• Advanced Guestbook 2.2 ( SQL Injection Exploit )
  • From: bhs_team
• Invision Power Board 2.1 : Multiple XSS Vulnerabilities
  • From: Jerome Athias
• [ GLSA 200511-06 ] fetchmail: Password exposure in fetchmailconf
  • From: Thierry Carrez
• Asterisk vmail.cgi vulnerability
  • From: advisories+asterisk
• [ GLSA 200511-07 ] OpenVPN: Multiple vulnerabilities
  • From: Thierry Carrez
• TWiki 20030201 VIEW string remote command execution
  • From: [at]
• Re: [Full-disclosure] Re: readdir_r considered harmful
  • From: Andrew Farmer
• upload phpshell in PHPFM
  • From: [at]
• XSS vulnerability in names.co.uk framed hosting
  • From: reuben . 31
• [SECURITY] [DSA 884-1] New Horde3 packages fix insecure default installation
  • From: Martin Schulze
• SEC Consult SA-20051107-0 :: toendaCMS multiple vulnerabilites
  • From: Bernhard Mueller
• SEC Consult SA-20051107-1 :: Macromedia Flash Player ActionDefineFunction Memory Corruption
  • From: Bernhard Mueller
• Path disclosure in CuteNews <= 1.4.0
  • From: poizon
• [SECURITY] [DSA 809-3] New squid packages fix regression
  • From: Martin Schulze
• OSTE v1.0 Remote Command Exucetion
  • From: khc
• [SECURITY] [DSA 886-1] New chmlib packages fix several vulnerabilities
  • From: Martin Schulze
• Work in Progress: FileZilla Server Terminal V0.9.4d Buffer Overflow
  • From: inge . henriksen
• [SECURITY] [DSA 888-1] New OpenSSL packages fix cryptographic weakness
  • From: Martin Schulze
• [SECURITY] [DSA 885-1] New OpenVPN packages fix several vulnerabilities
  • From: Martin Schulze
• Re: Zoomblog HTML Injection Vulnerability
  • From: RBA
• [ GLSA 200511-05 ] GNUMP3d: Directory traversal and XSS vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200511-04 ] ClamAV: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• EUSecWest/London Call for Papers and PacSec/Tokyo announcements
  • From: Dragos Ruiu
• Zoomblog <IMG> BBCode Tag JavaScript Injection Vulnerability
  • From: sikikmail
• Gallery_v2.4 SQL Injection
  • From: abducter_minds
• Zoomblog HTML Injection Vulnerability
  • From: sikikmail
• Zoomblog HTML Injection Vulnerability
  • From: sikikmail
• Re: OpenVPN[v2.0.x]: foreign_option() formart string vulnerability.
  • From: v9
• [waraxe-2005-SA#043] - Sql injection in Phorum 5.0.20 and earlier
  • From: come2waraxe
• Failles dans Invision Power Board 2.1 [xss]
  • From: benjilenoob
• Xss - Html injection in XMB
  • From: s2b