Bugtraq

• Thread Index

• Invision Power Board Privilege Esaclation (2.0.1 + more)
  • From: Anti Matter
• Re: readdir_r considered harmful
  • From: Casper . Dik
• Apache Tomcat 5.5.x remote Denial Of Service
  • From: David Maciejak
• I-Saudi.Com First K-S-A WarGamE
  • From: S3ude
• XSS & SQL injection in phpWebThing
  • From: xx_hack_xx_2004
• Re: Mambo Open Source, Path disclosure
  • From: Vasiliy
• Sql injection in ibProArcade
  • From: bhfh01
• iDEFENSE Security Advisory 11.04.05: Clam AntiVirus tnef_attachment() DoS Vulnerability
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 11.04.05: Clam AntiVirus Cabinet-file handling Denial of Service Vulnerability
  • From: iDEFENSE Labs
• [EEYEB-20050627B] Macromedia Flash Player Improper Memory Access Vulnerability
  • From: Advisories
• DMA[2005-1104a] - 'GpsDrive friendsd2 format string vulnerability'
  • From: kfinisterre
• [ GLSA 200511-03 ] giflib: Multiple vulnerabilities
  • From: Thierry Carrez
• [ GLSA 200511-02 ] QDBM, ImageMagick, GDAL: RUNPATH issues
  • From: Thierry Carrez
• [ GLSA 200511-01 ] libgda: Format string vulnerabilities
  • From: Thierry Carrez
• Re: readdir_r considered harmful
  • From: Ben Hutchings
• readdir_r considered harmful
  • From: Ben Hutchings
• SUSE Security Announcement: pwdutils, shadow (SUSE-SA:2005:064)
  • From: Ludwig Nussel
• ZDI-05-002: Clam Antivirus Remote Code Execution
  • From: zdi-disclosures
• Parosproxy 3.2.6: Local Exploitation, Command injection vulnerability
  • From: Marc Schoenefeld
• Secunia Research: cPanel Entropy Chat Script Insertion Vulnerability
  • From: Secunia Research
• [SECURITY] [DSA 882-1] New OpenSSL packages fix cryptographic weakness
  • From: Martin Schulze
• [SECURITY] [DSA 883-1] New thttpd packages fix insecure temporary file
  • From: Martin Schulze
• [SECURITY] [DSA 881-1] New OpenSSL 0.9.6 packages fix cryptographic weakness
  • From: Martin Schulze
• Advisory: Apple QuickTime Player Remote Denial Of Service
  • From: Piotr Bania
• Advisory: Apple QuickTime PICT Remote Memory Overwrite
  • From: Piotr Bania
• Advisory: Apple QuickTime Player Remote Integer Overflow (1)
  • From: Piotr Bania
• Advisory: Apple QuickTime Player Remote Integer Overflow (2)
  • From: Piotr Bania
• Remotely DoSing JBoss 4.0.2 with serialized java objects
  • From: Marc Schoenefeld
• On Interpretation Conflict Vulnerabilities
  • From: Steven M. Christey
• Re: [Full-disclosure] Advisory 18/2005: PHP Cross Site Scripting(XSS)XVulnerability in phpinfo()
  • From: phole
• Buffer-overflow in GO-Global for Windows 3.1.0.3270
  • From: Luigi Auriemma
• Mambo Open Source, Path disclosure
  • From: alireza hassani
• Re: [Full-disclosure] On Interpretation Conflict Vulnerabilities
  • From: Florian Weimer
• Norton Unerase - Need Contact
  • From: alex cottle
• Multiple vulnerabilities in Scorched 3D 39.1
  • From: Luigi Auriemma
• Limited directory traversal in NeroNET 1.2.0.2
  • From: Luigi Auriemma
• Buffer-overflow and directory traversal in Asus Video Security 3.5.0.0
  • From: Luigi Auriemma
• Buffer-overflow in Glider collect'n kill 1.0.0.0
  • From: Luigi Auriemma
• CuteNews 1.4.1 remote code execution
  • From: retrogod
• [ TZO-012005 ] F-Prot/Frisk Anti Virus bypass - ZIP Version Header
  • From: Thierry Zoller
• Buffer-overflow and crash in FlatFrag 0.3
  • From: Luigi Auriemma
• Socket termination in Battle Carry .005
  • From: Luigi Auriemma
• Black Hat Federal and Europe CFP and Registration now open
  • From: Jeff Moss
• Stack Overflow Basics
  • From: [a-t]
• Cisco Security Advisory: IOS Heap-based Overflow Vulnerability in System Timers
  • From: Cisco Systems Product Security Incident Response Team
• Simple PHP Blog: Multiple XSS Vulnerabilities
  • From: enji
• [OpenPKG-SA-2005.023] OpenPKG Security Advisory (openvpn)
  • From: OpenPKG
• MDKSA-2005:204 - Updated wget packages fix vulnerability
  • From: Mandriva Security Team
• [SECURITY] [DSA 879-1] New gallery packages fix privilege escalation
  • From: Martin Schulze
• MDKSA-2005:202 - Updated squirrelmail packages fix vulnerability
  • From: Mandriva Security Team
• Cisco Security Advisory: Cisco Airespace Wireless LAN Controllers Allow Unencrypted Network Access
  • From: Cisco Systems Product Security Incident Response Team
• MDKSA-2005:203 - Updated gda2.0 packages fix string format vulnerability
  • From: Mandriva Security Team
• [security bulletin] SSRT051029 rev.0 - HP OpenVMS Local Denial of Service (DoS)
  • From: security-alter
• [SECURITY] [DSA 880-1] New phpmyadmin packages fix several vulnerabilities
  • From: Martin Schulze
• Cisco Security Advisory: Cisco IPS MC Malformed Configuration Download Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• HYSA-2005-009 Elite Forum 1.0.0.0 XSS Vulnerability
  • From: h4cky0u . org
• VUBB XSS & path disclosure Vulnerabilities
  • From: alireza hassani
• [tool] multispoof - parallel spoofing for throughput increase
  • From: Pawel Pokrywka
• APPLE-SA-2005-10-31 Mac OS X v10.4.3
  • From: noreply
• Re: uplod phpshell in PHP Advanced Transfer Manager
  • From: D_BuG
• SQL IN FORUM.PHP
  • From: ABDUCTER_MINDS
• mwcollect v3.0.0 Release
  • From: Georg Wicherski
• SQL In Invision Gallery 2.0.3
  • From: almaster
• [ GLSA 200510-25 ] Ethereal: Multiple vulnerabilities in protocol dissectors
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200510-26 ] XLI, Xloadimage: Buffer overflow
  • From: Sune Kloppenborg Jeppesen
• Advisory 17/2005: phpBB Multiple Vulnerabilities
  • From: Stefan Esser
• OpenVPN[v2.0.x]: foreign_option() formart string vulnerability.
  • From: v9
• Advisory 18/2005: PHP Cross Site Scripting (XSS) Vulnerability in phpinfo()
  • From: Stefan Esser
• Advisory 19/2005: PHP register_globals Activation Vulnerability in parse_str()
  • From: Stefan Esser
• Advisory 20/2005: PHP File-Upload $GLOBALS Overwrite Vulnerability
  • From: Stefan Esser
• [USN-212-1] libgda2 vulnerability
  • From: Martin Pitt
• New List
  • From: David Ahmad
• [USN-151-3] zlib vulnerabilities
  • From: Martin Pitt
• [USN-213-1] sudo vulnerability
  • From: Martin Pitt
• [USN-206-2] Fixed lynx packages for USN-206-1
  • From: Martin Pitt
• Trend Micro's Response to the Magic Byte Bug
  • From: Auri Rahimzadeh
• uplod phpshell in PHP Advanced Transfer Manager
  • From: sQl
• Mirabilis ICQ 2003a Buffer Overflow Download Shellcoded Exploit
  • From: atmaca
• Re: Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through
  • From: Andrey Bayora
• Re: Remote File Inclusion in forum PunBB
  • From: arpen
• Vulnerability in MG2 php based Image Gallery - bypass security, view password protected images
  • From: preben
• Re: Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through
  • From: mgotts
• Re: Network Appliance iSCSI Authentication Bypass
  • From: steve . shockley
• Re: [Full-disclosure] Multiple Vendor Anti-Virus Software DetectionEvasion Vulnerability through forged magic byte
  • From: Bipin Gautam
• Re: [Full-disclosure] Multiple Vendor Anti-Virus Software DetectionEvasion Vulnerability through forged magic byte
  • From: Eygene A. Ryabinkin
• Re: Network Appliance iSCSI Authentication Bypass
  • From: Steve Shockley
• Re: [Full-disclosure] Re: phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit.
  • From: Nicob
• Re: Mozilla Thunderbird SMTP down-negotiation weakness
  • From: Jason Haar
• Re: [Full-disclosure] SEC-Consult SA 20051025-0 :: Snoopy Remote Code Execution Vulnerability
  • From: SEC Consult Research
• Re: phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit.
  • From: Paul Laudanski
• Re: [Full-disclosure] Re: phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit.
  • From: Tatercrispies
• Remote MySQL User on Cpanel Default installation with blank password
  • From: sup3r_linux
• Re: [Full-disclosure] SEC-Consult SA 20051025-0 :: Snoopy Remote Code Execution Vulnerability
  • From: Florian Weimer
• Re: Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through forged magic byte
  • From: Williams, James K
• Re: Mozilla Thunderbird SMTP down-negotiation weakness
  • From: Bob Beck
• Re: Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through
  • From: Dave English
• Re: [Full-disclosure] Multiple Vendor Anti-Virus Software DetectionEvasion Vulnerability through forged magic byte
  • From: Andrey Bayora
• Remote File Inclusion in vCard :)
  • From: [AT]
• Re: [ GLSA 200510-23 ] TikiWiki: XSS vulnerability
  • From: dave canuck
• Multiple vulnerabilities within RockLiffe MailSite Express WebMail
  • From: Paul Craig
• File Including In PBLang
  • From: abducter_minds
• Re: [ GLSA 200510-23 ] TikiWiki: XSS vulnerability
  • From: Thierry Carrez
• iDefense Security Advisory 10.28.05: Multiple Vendor chmlib CHM File Handling Buffer Overflow Vulnerability
  • From: iDEFENSE Labs
• [ GLSA 200510-24 ] Mantis: Multiple vulnerabilities
  • From: Thierry Carrez
• MDKSA-2005:200 - Updated apache-mod_auth_shadow packages fix security restriction bypass issues.
  • From: Mandriva Security Team
• [SECURITY] [DSA 877-1] New gnump3d packages fix several vulnerabilities
  • From: Martin Schulze
• [ GLSA 200510-22 ] SELinux PAM: Local password guessing attack
  • From: Thierry Carrez
• MDKSA-2005:201 - Updated sudo packages fix vulnerability
  • From: Mandriva Security Team
• [ GLSA 200510-23 ] TikiWiki: XSS vulnerability
  • From: Thierry Carrez
• [SECURITY] [DSA 878-1] New netpbm-free packages fix arbitrary code execution
  • From: Martin Schulze
• [CIRT.DK] - Novell ZENworks Patch Management Server 6.0.0.52 - SQL injection
  • From: CIRT.DK Advisory
• Secunia Research: ATutor Multiple Vulnerabilities
  • From: Secunia Research
• [SECURITY] [DSA 876-1] New lynx-ssl packages fix arbitrary code execution
  • From: Martin Schulze
• [SECURITY] [DSA 875-1] New OpenSSL packages fix cryptographic weakness
  • From: Martin Schulze
• fetchmail security announcement 2005-02 (CVE-2005-3088)
  • From: ma+nomail
• [SECURITY] [DSA 874-1] New lynx packages fix arbitrary code execution
  • From: Martin Schulze
• RE: [Full-disclosure] Multiple Vendor Anti-Virus Software DetectionEvasion Vulnerability through forged magic byte
  • From: Debasis Mohanty
• MDKSA-2005:199 - Updated netpbm packages fix pnmtopng vulnerabilities
  • From: Mandriva Security Team
• PHP-Nuke Cross-Site Scripting Vulnerability
  • From: bhfh01
• [SECURITY] [DSA 872-1] New koffice packages fix arbitrary code execution
  • From: Martin Schulze
• MDKSA-2005:196 - Updated perl-Compress-Zlib packages fix vulnerabilities
  • From: Mandriva Security Team
• MDKSA-2005:194 - Updated php-imap packages fix buffer overflow vulnerabilities.
  • From: Mandriva Security Team
• Re: Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through
  • From: Andreas Marx
• MDKSA-2005:186-1 - Updated lynx packages fix remote buffer overflow
  • From: Mandriva Security Team
• Re: Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through
  • From: Andrey Bayora
• MDKSA-2005:197 - Updated unzip packages fix suid, permissions vulnerabilities.
  • From: Mandriva Security Team
• MDKSA-2005:195 - Updated squid packages fix vulnerabilities
  • From: Mandriva Security Team
• MDKSA-2005:198 - Updated uim packages fix suid linking vulnerabilities.
  • From: Mandriva Security Team
• MDKSA-2005:193-1 - Updated ethereal packages fix multiple vulnerabilities
  • From: Mandriva Security Team
• phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit.
  • From: Paul Laudanski
• Update for the magic byte bug
  • From: Andrey Bayora
• Re: Mozilla Thunderbird SMTP down-negotiation weakness
  • From: Tony Finch
• [SECURITY] [DSA 873-1] New net-snmp packages fix denial of service
  • From: Martin Schulze
• Re: [Full-disclosure] Multiple Vendor Anti-Virus Software DetectionEvasion Vulnerability through forged magic byte
  • From: Andrey Bayora
• [KAPDA::#9] Techno Dreams Scripts Vulnerabilities
  • From: advisory
• Looking for security contacts at Sony and Lenovo (FKA IBM)
  • From: Richard M. Smith
• SQL-Injection in MyBulletinBoard allows attacker to become a board admin.
  • From: Animal
• Woltlab Burning Board info_db.php multiple SQL injection
  • From: admin
• Re: Mozilla Thunderbird SMTP down-negotiation weakness
  • From: Jason Haar
• Secunia Research: Mantis "t_core_path" File Inclusion Vulnerability
  • From: Secunia Research
• Looking for a security contact at Macrovision/InstallShield
  • From: Richard M. Smith
• MDKSA-2005:193 - Updated ethereal packages fix multiple vulnerabilities
  • From: Mandriva Security Team
• [SECURITY] [DSA 548-2] New imlib packages fix arbitrary code execution
  • From: Martin Schulze
• SparkleBlog Journal.php HTML Injection Vulnerability =>v2.1 (all versions vulnerable)
  • From: sikikmail
• SEC-Consult SA 20051025-1 :: RSA ACE Web Agent XSS
  • From: Bernhard Mueller
• iDEFENSE Security Advisory 10.24.05: SCO Openserver authsh 'Home' Buffer Overflow Vulnerability
  • From: iDEFENSE Labs
• SEC-Consult SA 20051025-0 :: Snoopy Remote Code Execution Vulnerability
  • From: Bernhard Mueller
• [SECURITY] [DSA 871-2] New libgda2 packages fix arbitrary code execution
  • From: Martin Schulze
• Network Appliance iSCSI Authentication Bypass
  • From: advisories
• RE: Possible Bug in PHP-Fusion 6.0.204
  • From: Paul
• Mozilla Thunderbird SMTP down-negotiation weakness
  • From: Thomas Henlich
• [SNS Advisory No.85] XOOPS Multiple Cross-site Scripting Vulnerabilities
  • From: snsadv
• [SECURITY] [DSA 870-1] New sudo packages fix arbitrary command execution
  • From: Martin Schulze
• iDEFENSE Security Advisory 10.24.05: SCO Unixware Setuid ppp prompt Buffer Overflow Vulnerability
  • From: iDEFENSE Labs
• [ GLSA 200510-21 ] phpMyAdmin: Local file inclusion and XSS vulnerabilities
  • From: Thierry Carrez
• [ GLSA 200510-20 ] Zope: File inclusion through RestructuredText
  • From: Thierry Carrez
• [ GLSA 200510-19 ] cURL: NTLM username stack overflow
  • From: Thierry Carrez
• Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through
  • From: Andrey Bayora
• [SECURITY] [DSA 871-1] New libgda2 packages fix arbitrary code execution
  • From: Martin Schulze
• DboardGear - uncorrect import themes (SQL-inject)
  • From: poizon
• Skype security advisory
  • From: . EADS CCR DCR/STI/C
• PHP iCalendar CSS
  • From: ascii
• iDEFENSE Security Advisory 10.24.05: SCO Openserver backupsh 'Home' Buffer Overflow Vulnerability
  • From: iDEFENSE Labs
• Flat Nuke Cross Site Scripting
  • From: alex
• Nuked klan 1.7: SQL vulnerability
  • From: papipsycho
• php < 4.4.1 htaccess apache dos
  • From: Eric Romang / ZATAZ.com
• Nuked klan 1.7: Remote Exploit
  • From: papipsycho
• Zomplog Script Injection Vulnerability =>3.4 (all versions vulnerable)
  • From: sikikmail
• File Including In FLAT NUKE
  • From: abducter_minds
• SQL saphp Lesson
  • From: almaster
• Revised draft on ICMP attacks
  • From: Fernando Gont
• [KAPDA::#8] Domain Manager Pro Vulnerability
  • From: advisory
• aRCHILLES Newsworld < 1.5.0-rc1 Multiple Vulnerabilities
  • From: chburchert
• Possible Bug in PHP-Fusion 6.0.204
  • From: peanut
• Insecure Temporary Files in BMC/Control-M Agent
  • From: Scott Cromar
• [security bulletin] SSRT051055 rev.0 - HP Oracle for OpenView (OfO) Critical Patch Update October 2005
  • From: security-alert
• Nuked klan 1.7: Bypassed level admin on forum(corrected)
  • From: papipsycho
• TSLSA-2005-0059 - multi
  • From: Trustix Security Advisor
• Remote File Inclusion in forum PunBB
  • From: rod hedor
• Advisory 16/2005: phpMyAdmin Local File Inclusion Vulnerability
  • From: Stefan Esser
• phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit.
  • From: alphakgen
• PhpNuke 7.8 with all security fixes/patches "Your_Account", "Downloads", "Web Links" SQL Injection / Remote commans execution
  • From: retrogod
• DCP - portal XSS & SQL attacks
  • From: alex
• SUSE Security Announcement: permissions (SUSE-SA:2005:062)
  • From: Ludwig Nussel
• DBoardGear SQL Injection
  • From: almaster
• Windows UMPNPMGR wsprintfW Stack Buffer Overflow Vulnerability PoC
  • From: ppwd25
• [security bulletin] SSRT051052 rev.1 - HP OpenView Operations and OpenView VantagePoint Java Runtime Environment (JRE) Remote Privileged Access
  • From: security-alert
• SEC-CONSULT-SA-20051021-0: Yahoo/MSIE XSS
  • From: Bernhard Mueller
• Secunia Research: ZipGenius Multiple Archive Handling Buffer Overflow
  • From: Secunia Research
• [SNS Advisory No.84] Oracle Application Server HTTP Response Splitting Vulnerability
  • From: snsadv
• MDKSA-2005:192 - Updated xli packages fix buffer overflow vulnerabilities.
  • From: Mandriva Security Team
• MDKSA-2005:191 - Updated ruby packages fix safe level and taint flag protections vulnerability
  • From: Mandriva Security Team
• MDKSA-2005:190 - Updated nss_ldap/pam_ldap packages fix privilege vulnerabilities.
  • From: Mandriva Security Team
• MDKSA-2005:189 - Updated imap packages fix buffer overflow vulnerabilities.
  • From: Mandriva Security Team
• F.E.A.R. 1.01 likes lithsock
  • From: Luigi Auriemma
• MDKSA-2005:188 - Updated graphviz packages fix temporary file vulnerability.
  • From: Mandriva Security Team
• Nuked klan 1.7: XSS vulnerability
  • From: papipsycho
• MDKSA-2005:187 - Updated dia packages fix python SVG import vulnerability.
  • From: Mandriva Security Team
• [SECURITY] [DSA 869-1] New eric packages fix arbitrary code execution
  • From: Martin Schulze
• OpenServer 5.0.7 : authsh and backupsh buffer overflow
  • From: please_reply_to_security
• UnixWare 7.1.4 UnixWare 7.1.3 : ppp buffer overflow
  • From: please_reply_to_security
• [Argeniss] Story of a dumb patch (Paper advisoryabout CSRSS and Windows Explorer vulnerabilities)
  • From: Cesar
• iDEFENSE Security Advisory 10.20.05: Symantec Norton AntiVirus DiskMountNotify Local Privilege Escalation
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 10.20.05: Symantec Norton AntiVirus LiveUpdate Local Privilege Escalation
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 10.20.05: Multiple Vendor Ethereal srvloc Buffer Overflow Vulnerability
  • From: iDEFENSE Labs
• [USN-211-1] Enigmail vulnerability
  • From: Martin Pitt
• [ GLSA 200510-18 ] Netpbm: Buffer overflow in pnmtopng
  • From: Thierry Carrez
• [ GLSA 200510-17 ] AbiWord: New RTF import buffer overflows
  • From: Thierry Carrez
• Vulnerabilities in Oracle E-Business Suite 11i - Critical Patch Update October 2005
  • From: Integrigy Security
• Oracle Workflow CSS Vulnerability wf_route
  • From: ak
• [SECURITY] [DSA 867-1] New module-assistant package fixes insecure temporary file
  • From: Martin Schulze
• Oracle Workflow CSS Vulnerability wf_monitor
  • From: ak
• [SECURITY] [DSA 866-1] New Mozilla packages fix several vulnerabilities
  • From: Martin Schulze
• Oracle 10g - emagent.exe Stack-Based Overflow
  • From: SPI Labs
• XSS & Path Disclosure in Chipmunk's products
  • From: alireza hassani
• RE: CAID 33485 - Computer Associates iGateway debug mode HTTP GET request buffer overflow vulnerability
  • From: Williams, James K
• [SECURITY] [DSA 868-1] New Mozilla Thunderbird packages fix several vulnerabilities
  • From: Martin Schulze
• [security bulletin] SSRT051052 rev.0 - HP OpenView Operations and OpenView VantagePoint Java Runtime Environment (JRE) Remote Privileged Access
  • From: security-alert
• Cisco Security Advisory:Cisco 11500 Content Services Switch SSL Malformed Client Certificate Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• cacam_logsecurity_win32 exploit published on 20051018 by Metasploit
  • From: Williams, James K
• Re: Windows host based firewall tester
  • From: Morten Torstensen
• SecurityAlert SA025 : PHPNuke Remote Directory Traversal
  • From: sp3x
• Re: [KAPDA::#6] Punbb SQL Injection Vulnerability
  • From: alireza hassani
• SUSE Security Announcement: openSSL protocol downgrade attack (SUSE-SA:2005:061)
  • From: Marcus Meissner
• Metasploit Framework v2.5
  • From: H D Moore
• Revision: Multiple Critical and High Vulnerabilities in Oracle Database Server
  • From: David Litchfield
• Multiple Critical and High Vulnerabilities in Oracle Database Server
  • From: NGSSoftware Insight Security Research
• Re: Require many large corporate emails for contact regarding vulnerability.
  • From: dcrab
• Windows host based firewall tester
  • From: Tim
• Re: [KAPDA::#6] Punbb SQL Injection Vulnerability
  • From: arpen
• Linksys WRT54G/S Directory Traversal
  • From: Shell
• e107 remote commands execution
  • From: retrogod
• NetFlow Analyzer 4 XSS Vulnerability
  • From: why
• SECURECon 2006 Call for papers!
  • From: Will Belcher
• Re: [Full-disclosure] Kerio Personal Firewall and Kerio Server Firewall FWDRV driver Local Denial of Service
  • From: Paul Laudanski
• Secunia Research: MySource Cross-Site Scripting and File Inclusion Vulnerabilities
  • From: Secunia Research
• Re: [Full-disclosure] Ciscos VPN-Client-Passwords can be decrypted
  • From: Clayton Kossmeyer
• MDKSA-2005:186 - Updated lynx packages fix remote buffer overflow
  • From: Mandriva Security Team
• Re: [Full-disclosure] [USN-208-1] SSH server vulnerability
  • From: Martin Pitt
• [USN-210-1] netpbm vulnerability
  • From: Martin Pitt
• winrar 3.50 Exploit
  • From: edward11
• Re: Aenovo Multiple Vulnerabilities (Patch)
  • From: ali202
• [ GLSA 200510-16 ] phpMyAdmin: Local file inclusion vulnerability
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200510-15 ] Lynx: Buffer overflow in NNTP processing
  • From: Sune Kloppenborg Jeppesen
• PHP local safedir restriction bypass
  • From: slythers
• Yahoo RSS XSS Vulnerability
  • From: alljer
• Lynx Remote Buffer Overflow
  • From: Ulf Harnhammar
• [OpenPKG-SA-2005.022] OpenPKG Security Advisory (openssl)
  • From: OpenPKG
• flexbackup default config insecure temporary file creation
  • From: ZATAZ Audits
• ie7 will have more mechanisms
  • From: liudieyu
• SUSE Security Announcement: OpenWBEM (SUSE-SA:2005:060)
  • From: Sebastian Krahmer
• Yahoo RSS XSS Vulnerability (Correction)
  • From: alljer
• Ciscos VPN-Client-Passwords can be decrypted
  • From: Thierry Zoller
• Exploiting Windows Device Drivers Whitepaper
  • From: Piotr Bania
• [USN-208-1] graphviz vulnerability
  • From: Martin Pitt
• [USN-207-1] PHP vulnerability
  • From: Martin Pitt
• [USN-208-1] SSH server vulnerability
  • From: Martin Pitt
• [USN-206-1] Lynx vulnerability
  • From: Martin Pitt
• [ GLSA 200510-14 ] Perl, Qt-UnixODBC, CMake: RUNPATH issues
  • From: Thierry Carrez
• Re: Google Talk cleartext proxy credentials vulnerability
  • From: 3APA3A
• [ GLSA 200510-13 ] SPE: Insecure file permissions
  • From: Thierry Carrez
• MDKSA-2005:185 - Updated koffice packages fix KWord RTF import overflow vulnerability
  • From: Mandriva Security Team
• Security Contacr for Mycall
  • From: Fixer
• [KAPDA::#6] Punbb SQL Injection Vulnerability
  • From: advisory
• MDKSA-2005:184 - Updated cfengine packages fix temporary file vulnerabilities
  • From: Mandriva Security Team
• [USN-204-1] SSL library vulnerability
  • From: Martin Pitt
• [ GLSA 200510-12 ] KOffice, KWord: RTF import buffer overflow
  • From: Sune Kloppenborg Jeppesen
• Trusted Digital, Trusted Mobility Suite Authorization Bypass Vulnerability
  • From: none
• CAID 33485 - Computer Associates iGateway debug mode HTTP GET request buffer overflow vulnerability
  • From: Williams, James K
• MDKSA-2005:183 - Updated wget packages fix NTLM authentication vulnerability
  • From: Mandriva Security Team
• Gallery 2.x Remote File Access Vulnerability
  • From: Bharat Mediratta
• Airscanner Mobile Security Advisory #05101001: iTunes Shared Music Denial of Service/Spoofing/Flooding/Abuse
  • From: Seth Fogie
• MDKSA-2005:182 - Updated curl packages fix NTLM authentication vulnerability
  • From: Mandriva Security Team
• Re: Antivirus detection bypass by special crafted archive.
  • From: Williams, James K
• RTasarim WebAdmin modul SQL injection
  • From: khc
• [USN-205-1] Curl and wget vulnerabilities
  • From: Martin Pitt
• Google Talk cleartext proxy credentials vulnerability
  • From: m123303
• iDEFENSE Security Advisory 10.13.05: Multiple Vendor wget/curl NTLM Username Buffer Overflow Vulnerability
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 10.13.05: Multiple Vendor XMail 'sendmail' Recipient Buffer Overflow Vulnerability
  • From: iDEFENSE Labs
• [security bulletin] SSRT5975 HP-UX Running on Itanium Platforms Local Denial of Service (DoS)
  • From: Security Alert
• [security bulletin] SSRT051041 rev.1 - HP-UX Mozilla Remote Unauthorized Execution of Privileged Code or Denial of Service (DoS)
  • From: security-alert
• Secunia Research: AhnLab V3 Antivirus ALZ/UUE/XXE Archive Handling Buffer Overflow
  • From: Secunia Research
• [USN-203-1] Abiword vulnerabilities
  • From: Martin Pitt
• Yapig: XSS / Code Injection Vulnerability
  • From: enji
• Kerio Personal Firewall and Kerio Server Firewall FWDRV driver Local Denial of Service
  • From: Piotr Bania
• [SECURITY] [DSA 864-1] New Ruby 1.8 packages fix safety bypass
  • From: Martin Schulze
• [SECURITY] [DSA 865-1] New hylafax packages fix insecure temporary files
  • From: Martin Schulze
• Secunia Research: Novell NetMail NMAP Agent "USER" Buffer Overflow Vulnerability
  • From: Secunia Research
• ZDI-05-001: VERITAS NetBackup Remote Code Execution
  • From: zdi-disclosures
• Re: VoIP-Phones: Weakness in proccessing SIP-Notify-Messages
  • From: Tobias Glemser
• VERITAS NetBackup: Java User-Interface, format string vulnerability
  • From: secure
• [SEC-1 Advisory] Collaboration Data Objects Buffer Overflow Vulnerability
  • From: Gary Oleary-Steele
• Research for network security news article
  • From: lgreenem
• Re: [SECURITYREASON.COM] phpMyAdmin Local file inclusion 2.6.4-pl1
  • From: Andreas Zeidler
• Linux Orinoco drivers information leakage
  • From: Meder Kydyraliev
• MDKSA-2005:181 - Updated squid packages fix vulnerabilities
  • From: Mandriva Security Team
• [USN-201-1] SqWebmail vulnerabilities
  • From: Martin Pitt
• [SEC-1 Advisory] GFI MailSecurity 8.1 Web Module Buffer Overflow
  • From: Gary Oleary-Steele
• [ GLSA 200510-11 ] OpenSSL: SSL 2.0 protocol rollback
  • From: Thierry Carrez
• [SECURITY] [DSA 863-1] New xine-lib packages fix arbitrary code execution
  • From: Martin Schulze
• [USN-202-1] KOffice vulnerability
  • From: Martin Pitt
• Re: using php local file include vulnerabilities for command execution
  • From: Andreas Zeidler
• [ GLSA 200510-10 ] uw-imap: Remote buffer overflow
  • From: Thierry Carrez
• MDKSA-2005:178 - Updated squirrelmail packages fixes XSS vulberability
  • From: Mandriva Security Team
• MDKSA-2005:179 - Updated openssl packages fix vulnerabilities
  • From: Mandriva Security Team
• MDKSA-2005:180 - Updated xine-lib packages fixes cddb vulnerability
  • From: Mandriva Security Team
• using php local file include vulnerabilities for command execution
  • From: Andreas Zeidler
• [USN-200-1] Thunderbird vulnerabilities
  • From: Martin Pitt
• [SECURITY] [DSA 850-1] New tcpdump packages fix denial of service
  • From: Martin Schulze
• [SECURITY] [DSA 851-1] New openvpn packages fix denial of service
  • From: Martin Schulze
• [SECURITY] [DSA 852-1] New up-imapproxy packages fix arbitrary code execution
  • From: Martin Schulze
• [SECURITY] [DSA 853-1] New ethereal packages fix several vulnerabilities
  • From: Martin Schulze
• [SECURITY] [DSA 854-1] New tcpdump packages fix denial of service
  • From: Martin Schulze
• Announcement: The Web Application Firewall Evaluation Criteria v1
  • From: contact
• [SECURITY] [DSA 855-1] New weex packages fix arbitrary code execution
  • From: Martin Schulze
• [SECURITY] [DSA 856-1] New py2play packages fix arbitrary code execution
  • From: Martin Schulze
• [SECURITY] [DSA 857-1] New graphviz packages fix insecure temporary file
  • From: Martin Schulze
• Re: Opinion: Complete failure of Oracle security response and utter neglect of t
  • From: Silent / Saracoth
• PullThePlug Contest: Call For Papers
  • From: announcements
• [SECURITYREASON.COM] phpMyAdmin Local file inclusion 2.6.4-pl1
  • From: max
• [SECURITY] [DSA 858-1] New xloadimage packages fix arbitrary code execution
  • From: Martin Schulze
• [SECURITY] [DSA 859-1] New xli packages fix arbitrary code execution
  • From: Martin Schulze
• iDEFENSE Security Advisory 10.10.05: SGI IRIX runpriv Design Error Vulnerability
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 10.10.05: Kaspersky Anti-Virus Engine CHM File Parser Buffer Overflow Vulnerability
  • From: iDEFENSE Labs
• versatileBulletinBoard V1.0.0 RC2 (possibly prior versions) multiple SQL injection vulnerabilities / login bypass / board takeover
  • From: rgod
• [SECURITY] [DSA 860-1] New Ruby packages fix safety bypass
  • From: Martin Schulze
• [SECURITY] [DSA 861-1] New uw-imap packages fix arbitrary code execution
  • From: Martin Schulze
• [SECURITY] [DSA 862-1] New Ruby 1.6 packages fix safety bypass
  • From: Martin Schulze
• FreeBSD Security Advisory FreeBSD-SA-05:21.openssl
  • From: FreeBSD Security Advisories
• XSS vulnerability in Zeroblog
  • From: alireza hassani
• [KDE Security Advisory] KOffice/KWord RTF import buffer overflow
  • From: Dirk Mueller
• Secunia Research: WinRAR Format String and Buffer Overflow Vulnerabilities
  • From: Secunia Research
• The Malloc Maleficarum
  • From: Phantasmal Phantasmagoria
• iDEFENSE Security Advisory 10.11.05: Microsoft Distributed Transaction Controller Packet Relay DoS Vulnerability
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 10.11.05: Microsoft Distributed Transaction Controller TIP DoS Vulnerability
  • From: iDEFENSE Labs
• [EEYEB20050510] - Microsoft DirectShow Remote Code Vulnerability
  • From: Advisories
• [EEYEB20050708] Microsoft Distributed Transaction Coordinator Memory Modification Vulnerability
  • From: Advisories
• [EEYEB20050915] - MDT2DD.DLL COM Object Uninitialized Heap Memory Vulnerability
  • From: Advisories
• [EEYEB20050803] - Windows UMPNPMGR wsprintfW Stack Buffer Overflow Vulnerability
  • From: Advisories
• CodeCon 2006 Call For Papers
  • From: Len Sassaman
• [USN-197-1] Shorewall vulnerability
  • From: Martin Pitt
• [USN-195-1] Ruby vulnerability
  • From: Martin Pitt
• [USN-199-1] Linux kernel vulnerabilities
  • From: Martin Pitt
• [USN-196-1] Xine library vulnerability
  • From: Martin Pitt
• [USN-198-1] cfengine vulnerabilities
  • From: Martin Pitt
• Antivirus detection bypass by special crafted archive.
  • From: unsecure
• gnome-pty-helper writes arbitrary utmp records
  • From: Paul Szabo
• MDKSA-2005:176 - Updated webmin package fixes authentication bypass vulnerability
  • From: Mandriva Security Team
• MDKSA-2005:177 - Updated hylafax packages fix temporary file vulnerability
  • From: Mandriva Security Team
• Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers
  • From: Kurt Seifried
• Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers
  • From: Tony Jambu
• Cyphor 0.19 SQL Injection / Board takeover / cross site scripting
  • From: retrogod
• [SECURITY] [DSA 847-1] New dia packages fix arbitrary code execution
  • From: Martin Schulze
• [SECURITY] [DSA 848-1] New masqmail packages fix several vulnerabilities
  • From: Martin Schulze
• [SECURITY] [DSA 849-1] New shorewall packages fix firewall bypass
  • From: Martin Schulze
• [ GLSA 200510-08 ] xine-lib: Format string vulnerability
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200510-09 ] Weex: Format string vulnerability
  • From: Sune Kloppenborg Jeppesen
• MailEnable W3C Logging Remote Buffer Overflow Proof of Concept
  • From: advisory
• Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers
  • From: Radoslav Dejanović
• Re: Security contact for ...
  • From: Williams, James K
• Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers
  • From: Ivan .
• Utopia News Pro 1.1.3 SQL Injection / cross site scripting
  • From: retrogod
• [ GLSA 200510-07 ] RealPlayer, Helix Player: Format string vulnerability
  • From: Thierry Carrez
• Re: [Dailydave] Security contact for ...
  • From: security curmudgeon
• Aenovo Multiple Vulnerabilities
  • From: advisory
• Re: Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers
  • From: ak
• Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers
  • From: David Litchfield
• Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers
  • From: Gadi Evron
• Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers
  • From: David Litchfield
• Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers
  • From: Gadi Evron
• MDKSA-2005:175 - Updated texinfo packages fix temporary file vulnerability
  • From: Mandriva Security Team
• MDKSA-2005:174 - Updated mozilla-thunderbird packages fix multiple vulnerabilities
  • From: Mandriva Security Team
• MDKSA-2005:173 - Updated mozilla-firefox packages fix vulnerabilities
  • From: Mandriva Security Team
• MDKSA-2005:172 - Updated openssh packages fix GSSAPI credentials vulnerability
  • From: Mandriva Security Team
• Shutdown TNS Listener via Oracle Forms Servlet
  • From: ak
• Shutdown TNS Listener via Oracle iSQL*Plus
  • From: ak
• Cross-Site-Scripting Vulnerability in Oracle XMLDB
  • From: ak
• Cross-Site-Scripting Vulnerability in Oracle iSQL*Plus
  • From: ak
• Plaintext Password Vulnerabilitiy during Installation of Oracle HTMLDB
  • From: ak
• Cross-Site-Scripting Vulnerabilities in Oracle HTMLDB
  • From: ak
• [security bulletin] SSRT051003 rev.1 - HP-UX Java Web Start remote unauthorized privileged access
  • From: security-alert
• [security bulletin] SSRT051043 rev.0 - Apache Remote Unauthorized access
  • From: security-alert
• [SECURITY] [DSA 846-1] New cpio packages fix several vulnerabilities
  • From: Martin Schulze
• Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers
  • From: Rainer Duffner
• Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers
  • From: Cesar
• Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers
  • From: David Litchfield
• RE: Some new whitepapers ...
  • From: Lila Buchalski
• xloadimage buffer overflow.
  • From: Ariel Berkman
• Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers
  • From: Rainer Duffner
• [ GLSA 200510-05 ] Ruby: Security bypass vulnerability
  • From: Sune Kloppenborg Jeppesen
• [USN-194-1] texinfo vulnerability
  • From: Martin Pitt
• Re: Some new whitepapers ...
  • From: Jerome Athias
• [SECURITY] [DSA 845-1] New mason packages fix missing init script
  • From: Martin Schulze
• Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers
  • From: David Litchfield
• High Risk Vulnerability in Sun Directory Server
  • From: NGSSoftware Insight Security Research
• [ GLSA 200510-06 ] Dia: Arbitrary code execution through SVG import
  • From: Sune Kloppenborg Jeppesen
• aspReady FAQ - open for SQL-injections
  • From: preben
• [security bulletin] SSRT051004 rev.1 - HP-UX Java Runtime Environment (JRE) Untrusted Applet Elevates Privilege
  • From: security-alert
• Secunia Research: Webroot Desktop Firewall Two Vulnerabilities
  • From: Secunia Research
• WASC Threat Classification in 4 languages
  • From: contact
• Planet Technology Corp FGSW2402RS switch default password / "backdoor"
  • From: lms
• [security bulletin] SSRT4743, SSRT4884 rev.1 - HP Tru64 UNIX TCP/IP remote Denial of Service (DoS)
  • From: security-alert
• Secunia Research: PHP-Fusion Two SQL Injection Vulnerabilities
  • From: Secunia Research
• Announcement : Core Banking Application Security List
  • From: Lila Buchalski
• RE: iDEFENSE Security Advisory 10.04.05: Symantec AntiVirus Scan Engine Web Service Buffer Overflow Vulnerability
  • From: iDEFENSE Labs
• PAKCON II: Call for Paper (CfP), Final Call!
  • From: Ayaz Ahmed Khan
• Secunia Research: ALZip Multiple Archive Handling Buffer Overflow
  • From: Secunia Research
• Some new whitepapers ...
  • From: David Litchfield
• [SECURITY] [DSA 844-1] New mod-auth-shadow packages fix authentication bypass
  • From: Martin Schulze
• Patches available for critical flaws in HP Openview
  • From: NGSSoftware Insight Security Research
• RE: Advisory: WZCS vulnerabilities
  • From: Brian J. Bartlett
• [SECURITY] [DSA 843-1] New arc packages fix insecure temporary files
  • From: Martin Schulze
• iDEFENSE Security Advisory 10.04.05: Symantec AntiVirus Scan Engine Web Service Buffer Overflow Vulnerability
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 10.04.05: UW-IMAP Netmailbox Name Parsing Buffer Overflow Vulnerability
  • From: iDEFENSE Labs
• [ GLSA 200510-04 ] Texinfo: Insecure temporary file creation
  • From: Thierry Carrez
• [security bulletin] SSRT051023 rev.5 - HP OpenView Network Node Manager (OV NNM) Remote Unauthorized Privileged Access
  • From: security-alert
• [security bulletin] SSRT051030 rev.1 - HP OpenView Event Correlation Services (OV ECS) Remote Unauthorized Privileged Access
  • From: security-alert
• [security bulletin] SSRT5940 rev.2 - HP-UX Mozilla remote, unauthorized user may execute privileged code
  • From: security-alert
• [security bulletin] SSRT051040 rev.0 - HP-UX Mozilla Remote Unauthorized Execution of Privileged Code
  • From: security-alert
• A common researcher diagnosis error: misreading error messages
  • From: Steven M. Christey
• [ GLSA 200510-03 ] Uim: Privilege escalation vulnerability
  • From: Sune Kloppenborg Jeppesen
• [security bulletin] SSRT051041 rev.0 - HP-UX Mozilla Remote Unauthorized Execution of Privileged Code or Denial of Service (DoS)
  • From: security-alert
• [SECURITY] [DSA 833-2] New mysql-dfsg-4.1 package fixes arbitrary code execution
  • From: Martin Schulze
• [ GLSA 200510-02 ] Berkeley MPEG Tools: Multiple insecure temporary files
  • From: Thierry Carrez
• [ GLSA 200510-01 ] gtkdiskfree: Insecure temporary file creation
  • From: Thierry Carrez
• [USN-193-1] dia vulnerability
  • From: Martin Pitt
• [USN-155-3] Fixed mozilla locale packages
  • From: Martin Pitt
• Re: Careless Law Enforcement Computer Forensics Lacking InfoSec Expertise Causes Suicides
  • From: Stefano Zanero
• Advisory: WZCS vulnerabilities
  • From: donctl
• RE: Careless Law Enforcement Computer Forensics Lacking InfoSec Expertise Causes Suicides
  • From: Neil Dickey
• RE: Careless Law Enforcement Computer Forensics Lacking InfoSec Expertise Causes Suicides
  • From: dave kleiman
• [SECURITY] [DSA 839-1] New apachetop packages fix insecure temporary file
  • From: Martin Schulze
• [SECURITY] [DSA 842-1] New egroupware packages fix arbitrary code execution
  • From: Martin Schulze
• Call for Papers - DIMVA 2006
  • From: Thomas Biege
• [SECURITY] [DSA 840-1] New drupal packages fix remote command execution
  • From: Martin Schulze
• MDKSA-2005:171 - Updated kernel packages fix multiple vulnerabilities
  • From: Mandriva Security Team
• RE: Careless Law Enforcement Computer Forensics Lacking InfoSec Expertise Causes Suicides
  • From: L. Adrian Griffis
• Kaspersky Antivirus Remote Heap Overflow
  • From: list
• Trillian remote crashable
  • From: philipp
• Re: Online Dating Software by AEwebworks - aeDating Script <= 4.0 Version Vulnerability
  • From: security
• Careless Law Enforcement Computer Forensics Lacking InfoSec Expertise Causes Suicides
  • From: Jason Coombs
• [SECURITY] [DSA 837-1] New Mozilla Firefox packages fix denial of service
  • From: Martin Schulze
• [SECURITY] [DSA 838-1] New mozilla-firefox packages fox multiple vulnerabilities
  • From: Michael Stone
• RE: Careless Law Enforcement Computer Forensics Lacking InfoSec Expertise Causes Suicides
  • From: Lachniet, Mark
• Security Advisory for Bugzilla 2.18.3, 2.20rc2, and 2.21
  • From: mkanat
• [SECURITY] [DSA 833-1] New mysql-dfsg-4.1 packages fix arbitrary code execution
  • From: Martin Schulze
• [SECURITY] [DSA 834-1] New prozilla packages fix arbitrary code execution
  • From: Martin Schulze
• [Information Disclosure] NetForce v4.02 Sends NIS Password Maps with passwords hashes over sendmail
  • From: bambenek
• [SECURITY] [DSA 835-1] New cfengine packages fix arbitrary file overwriting
  • From: Martin Schulze
• MyBloggie 2.1.3beta null char + SQL Injection -> Login Bypass
  • From: retrogod
• [SECURITY] [DSA 836-1] New cfengine2 packages fix arbitrary file overwriting
  • From: Martin Schulze
• [SECURITY] [DSA 827-1] New backupninja packages fix insecure temporary file
  • From: Michael Stone
• [SECURITY] [DSA 828-1] New squid packages fix denial of service
  • From: Martin Schulze
• [ GLSA 200509-20 ] AbiWord: RTF import stack-based buffer overflow
  • From: Thierry Carrez
• [SECURITY] [DSA 809-2] New squid packages fix denial of service
  • From: Martin Schulze
• BID #14752 update
  • From: Josh Zlatin-Amishav
• [SECURITY] [DSA 829-1] New mysql packages fix arbitrary code execution
  • From: Martin Schulze
• Re: IIS 5.1 allows for remote viewing of source code on FAT/FAT32 volumes using WebDAV
  • From: inge . henriksen
• UPDATE: [ GLSA 200509-11 ] Mozilla Suite, Mozilla Firefox: Multiple vulnerabilities
  • From: Thierry Carrez
• TSLSA-2005-0053 - unzip
  • From: Trustix Security Advisor
• Buffer-overflow and directory traversal bugs in Virtools Web Player 3.0.0.100
  • From: Luigi Auriemma
• [SECURITY] [DSA 831-1] New mysql-dfsg packages fix arbitrary code execution
  • From: Martin Schulze
• iDEFENSE Security Advisory 09.30.05: RealNetworks RealPlayer/HelixPlayer RealPix Format String Vulnerability
  • From: iDEFENSE Labs
• Announce: Bluetooth mailing list - Bluetraq
  • From: Adam Laurie
• Re: Bypassing Personal Firewall (Zone Alarm Pro) Using DDE-IPC
  • From: Paul Laudanski
• [USN-192-1] Squid vulnerability
  • From: Martin Pitt
• RE: "Exploiting the XmlHttpRequest object in IE" - paper by Amit Klein
  • From: Sergey V. Gordeychik
• Citrix Metaframe Presentation Server bypassing policies
  • From: gustavog
• Re: PHP-Fusion v6.00.109 SQL Injection / admin|users credentials disclosure
  • From: security curmudgeon
• [SECURITY] [DSA 826-1] New helix-player packages fix multiple vulnerabilities
  • From: Michael Stone
• Re: PocketPC exploitation
  • From: Joel Maslak
• [ GLSA 200509-21 ] Hylafax: Insecure temporary file creation in xferfaxstats script
  • From: Thierry Carrez
• Re: Serendipity: Account Hijacking / CSRF Vulnerability
  • From: kreon
• Multiple vulnerabilities in Merak Mail Server 8.2.4r with Icewarp Web Mail 5.5.1
  • From: ss_contacts
• [SECURITY] [DSA 830-1] New ntlmaps packages fix information leak
  • From: Martin Schulze
• apachetop insecure temporary file creation
  • From: ZATAZ Audits
• Re: PocketPC exploitation
  • From: Denis Jedig
• [SECURITY] [DSA 832-1] New gopher packages fix several buffer overflows
  • From: Martin Schulze
• Zone Labs response to "Bypassing Personal Firewall (Zone Alarm Pro) Using DDE-IPC"
  • From: Zone Labs Security Team
• Lucid CMS 1.0.11 SQL Injection / Login Bypass / remote code execution
  • From: retrogod
• AV == parasites? (was: PocketPC exploitation)
  • From: Michael Shigorin
• [USN-191-1] unzip vulnerability
  • From: Martin Pitt
• [USN-190-1] SNMP vulnerability
  • From: Martin Pitt
• [USN-189-1] cpio vulnerabilities
  • From: Martin Pitt
• [USN-188-1] AbiWord vulnerability
  • From: Martin Pitt
• [SECURITY] [DSA 822-1] New gtkdiskfree packages fix insecure temporary file
  • From: Martin Schulze
• [SECURITY] [DSA 825-1] New loop-aes-utils packages fix privilege escalation
  • From: Martin Schulze
• SquirrelMail Address Add Plugin XSS
  • From: Moritz Naumann
• Re: PHP-Fusion v6.00.109 SQL Injection / admin|users credentials disclosure
  • From: Petko Petkov
• Re: Bypassing Personal Firewall (Zone Alarm Pro) Using DDE-IPC
  • From: warl0ck
• [SECURITY] [DSA 823-1] New util-linux packages fix privilege escalation
  • From: Martin Schulze
• Serendipity: Account Hijacking / CSRF Vulnerability
  • From: enji
• [SECURITY] [DSA 797-2] Updated zsync i386 packages fix build error
  • From: Michael Stone
• [SECURITY] [DSA 824-1] New ClamAV packages fix denial of service
  • From: Martin Schulze
• Re: PocketPC exploitation
  • From: Jose Morales
• OpenServer 5.0.7 OpenServer 6.0.0 : UnZip File Permissions Change Vulnerability
  • From: please_reply_to_security
• PHP-Fusion v6.00.109 SQL Injection / admin|users credentials disclosure
  • From: retrogod
• Bypassing Personal Firewall (Zone Alarm Pro) Using DDE-IPC
  • From: Debasis Mohanty
• [SECURITY] [DSA 821-1] New python2.3 packages fix arbitrary code execution
  • From: Martin Schulze
• Is the Bottom Line Impacted by Security Breaches?
  • From: Kenneth F. Belva
• Re: "Exploiting the XmlHttpRequest object in IE" - paper by Amit Klein
  • From: Amit Klein (AKsecurity)
• Mantis Bugtracker - Remote Database Scanner and XSS Vulnerabilities
  • From: Joxean Guay del Paraguay
• [ GLSA 200509-19 ] PHP: Vulnerabilities in included PCRE and XML-RPC libraries
  • From: Thierry Carrez
• Re: [ISR] - Novell GroupWise Client Integer Overflow
  • From: Crist J. Clark
• MDKSA-2005:169 - Updated mozilla-firefox packages fix multiple vulnerabilities
  • From: Mandriva Security Team
• PacSec 05
  • From: Dragos Ruiu
• RealPlayer && HelixPlayer Remote Format String Exploit
  • From: c0ntexb
• CMS Made Simple 0.10 is susceptible to a cross site scripting attack.
  • From: X1ngBox
• FreeBSD GNU Mailutils 0.6 imap4d exploit
  • From: angelo
• Nokia 7610, 3210 denial of service in OBEX.
  • From: A. Ramos
• SEO borad: SQL injection
  • From: ghc
• ElseNot project
  • From: layne
• lucidCMS 1.0.11 is susceptible to a cross site scripting attack
  • From: x1ngbox
• Announce: RSBAC v1.2.5 released
  • From: Amon Ott
• Re: "Exploiting the XmlHttpRequest object in IE" - paper by Amit Klein
  • From: Yutaka OIWA
• MDKSA-2005:170 - Updated mozilla packages fix multiple vulnerabilities
  • From: Mandriva Security Team
• [ISR] - Novell GroupWise Client Integer Overflow
  • From: Francisco Amato
• Re: "Exploiting the XmlHttpRequest object in IE" - paper by Amit Klein
  • From: anonymous
• [USN-187-1] Linux kernel vulnerabilities
  • From: Martin Pitt
• [USN-186-2] Ubuntu 4.10 packages for USN-186-1 Firefox security update
  • From: Martin Pitt
• [ GLSA 200509-18 ] Qt: Buffer overflow in the included zlib library
  • From: Sune Kloppenborg Jeppesen
• SUSE Security Announcement: XFree86-server,xorg-x11-server (SUSE-SA:2005:056)
  • From: Thomas Biege
• FL Studio 5 (.flp file processing) Heap Overflow
  • From: varunuppal
• Server crash and motd deletion in MultiTheftAuto 0.5 patch 1
  • From: Luigi Auriemma
• [ GLSA 200509-16 ] Mantis: XSS and SQL injection vulnerabilities
  • From: Thierry Carrez
• [USN-186-1] Mozilla and Firefox vulnerabilities
  • From: Martin Pitt
• [SECURITY] [DSA 817-1] New python2.2 packages fix arbitrary code execution
  • From: joey
• [SECURITY] [DSA 820-1] New courier packages fix cross-site scripting
  • From: Martin Schulze
• MailGust 1.9 SQL Injection
  • From: retrogod
• [ GLSA 200509-17 ] Webmin, Usermin: Remote code execution through PAM authentication
  • From: Thierry Carrez
• AlstraSoft E-Friends Remote Command Exucetion
  • From: khc
• Hijacking Bluetooth Headsets for Fun and Profit?
  • From: KF (lists)
• "Exploiting the XmlHttpRequest object in IE" - paper by Amit Klein
  • From: Amit Klein (AKsecurity)
• My Little Forum 1.5 / 1.6beta SQL Injection
  • From: retrogod
• Rita Scams Call to Arms - Update
  • From: Gadi Evron
• PhpMyFAQ 1.5.1 multiple vulnerabilities
  • From: retrogod
• Re: Remote File Inclusion in MyGuestbook
  • From: security curmudgeon
• Secunia Research: 7-Zip ARJ Archive Handling Buffer Overflow
  • From: Secunia Research
• [SECURITY] [DSA 819-1] New python2.1 packages fix arbitrary code execution
  • From: Martin Schulze
• TSLSA-2005-0051 - clamav
  • From: Trustix Security Advisor
• Sql injection in jPortal version 2.3.1 (module download)
  • From: krasza
• Secunia Research: PowerArchiver ACE/ARJ Archive Handling Buffer Overflow
  • From: Secunia Research
• Re: [Full-disclosure] [scip_Advisory 1746] Microsoft Internet Explorer 6.0 embedded content cross site scripting
  • From: Brion Vibber
• [scip_Advisory 1746] Microsoft Internet Explorer 6.0 embedded content cross site scripting
  • From: Marc Ruef
• [security bulletin] SSRT5998 Rev.2 HP System Management Homepage (v2.0.x) Denial of Service (DoS) and XSS
  • From: security-alert
• Hack Dot AE v2
  • From: SpyHat
• My Little Forum 1.5 / 1.6beta SQL Injection
  • From: retrogod
• [SECURITY] [DSA 817-1] New python2.2 packages fix arbitrary code execution
  • From: Martin Schulze
• HTTP Request Smuggling - ERRATA (the IIS 48K buffer phenomenon)
  • From: Amit Klein (AKsecurity)
• OpenServer 6.0.0 : TCP Remote ICMP Denial Of Service Vulnerabilities
  • From: please_reply_to_security
• Platinum Secure smartcard security bypass
  • From: acidemon
• RE: router worms and International Infrastructure [was: Re: IOS exploit]
  • From: martin
• [SECURITY] [DSA 818-1] New kdeedu packages fix insecure temporary files
  • From: Martin Schulze
• Protty v.01A (beta) - shellcode execution protection library for Windows NT based systems
  • From: Piotr Bania
• FireFox exploit updated
  • From: Berend-Jan Wever
• Re: Paper - How It's Difficult to Ruin a Good Name: An Analysis of Reputational Risk
  • From: hodejo1
• [security bulletin] SSRT5988 rev.1 - HP Tru64 Unix libXpm Remote Denial of Service (DoS) or Execute Privileged Code
  • From: security-alert
• Upcoming Black Hat events announcement
  • From: Jeff Moss
• UnixWare 7.1.4 : LibTIFF < 3.72 malformed data code exec
  • From: please_reply_to_security
• PocketPC exploitation
  • From: Jose Morales
• [SNS Advisory No.83] Webmin/Usermin PAM Authentication Bypass Vulnerability
  • From: snsadv
• [BuHa-Security] Multiple vulnerabilities in (admincp/modcp of) vBulletin 3.0.7
  • From: bugtraq
• MDKSA-2005:167 - Updated util-linux packages fix umount vulnerability
  • From: Mandriva Security Team
• MDKSA-2005:166 - Updated clamv packages fix vulnerabilities
  • From: Mandriva Security Team
• MDKSA-2005:168 - Updated masqmail packages fix vulnerabilities
  • From: Mandriva Security Team
• Re: phpBB 2.0.17 remote avatar size bug
  • From: Peter Kieser
• Re: Subscribe Me Pro 2.044.09P and prior Directory Traversal Vulnerability
  • From: please_use_support_form
• Paper - How It's Difficult to Ruin a Good Name: An Analysis of Reputational Risk
  • From: Kenneth F. Belva
• RE: phpBB 2.0.17 remote avatar size bug
  • From: Sean Sullivan
• [ GLSA 200509-15 ] util-linux: umount command validation error
  • From: Thierry Carrez
• [ GLSA 200509-14 ] Zebedee: Denial of Service vulnerability
  • From: Thierry Carrez
• mercury imap4 remote BOF exploit ( IHSTeam )
  • From: c0d3r
• [USN-185-1] CUPS vulnerability
  • From: Martin Pitt
• MDKSA-2005:138-1 - Updated cups packages fix vulnerability
  • From: Mandriva Security Team
• Hesk Session ID Validation Vulnerability
  • From: os2a . bto
• Secunia Research: Opera Mail Client Attachment Spoofing and Script Insertion
  • From: Secunia Research
• phpBB 2.0.17 remote avatar size bug
  • From: SmOk3
• bacula insecure temporary file creation
  • From: Eric Romang / ZATAZ.com
• MDKSA-2005:165 - Updated cups packages fix vulnerability
  • From: Mandriva Security Team
• Debian Security Host Bandwidth Saturation
  • From: Martin Schulze
• [security bulletin] SSRT5971 rev.0 - HP Tru64 Unix FTP Daemon (ftpd) Remote Denial of Service (DoS)
  • From: security-alert
• [security bulletin] SSRT5999 rev.0 HP OpenVMS Secure Web Browser Mozilla Application Node Spoofing
  • From: security-alert
• Re: [Full-disclosure] Cisco IOS hacked?
  • From: Andrei Mikhailovsky
• Alstrasoft Epay Pro 2.0 and prior Directory Traversal Vulnerability
  • From: h4cky0u
• [ GLSA 200509-13 ] Clam AntiVirus: Multiple vulnerabilities
  • From: Thierry Carrez
• @System Security Conference
  • From: Giorgio Zoppi
• Whitepaper - Writing small shellcode
  • From: Dafydd Stuttard
• [USN-184-1] umount vulnerability
  • From: Martin Pitt
• [ GLSA 200509-09 ] Py2Play: Remote execution of arbitrary Python code
  • From: Thierry Carrez
• Re: PHP Nuke <= 7.8 Multiple SQL Injections
  • From: hans
• Re: PHP Nuke <= 7.8 Multiple SQL Injections
  • From: Paul Laudanski
• Re: PHP Nuke <= 7.8 Multiple SQL Injections
  • From: Daniel Bonekeeper
• Possible memory corruption problems in Apple Safari
  • From: Jonathan Rockway
• [BuHa-Security] Multiple vulnerabilities in (admincp/modcp of) vBulletin 3.0.8/9
  • From: bugtraq
• Alstrasoft Epay Pro 2.0 and prior Directory Traversal Vulnerability
  • From: h4cky0u
• Dumb Question
  • From: Sean Warnock
• [ GLSA 200509-12 ] Apache, mod_ssl: Multiple vulnerabilities
  • From: Thierry Carrez
• Re: Airscanner Mobile Security Advisory #05082201: File Transfer Anywhere v3.01 Local Server Password Disclosure
  • From: 3APA3A
• ERRATA: [ GLSA 200507-20 ] Shorewall: Security policy bypass
  • From: Thierry Carrez
• Web Application Security Analyzer for PHP-Nuke/phpBB CMS
  • From: Paul Laudanski
• [Full-disclosure] killbits? should have named them kibbles and bits
  • From: Ill will
• router worms and International Infrastructure [was: Re: IOS exploit]
  • From: Gadi Evron
• Antigen 8.0 for Exchange/SMTP Rule Vulnerability
  • From: Alan Monaghan
• [ GLSA 200509-11 ] Mozilla Suite, Mozilla Firefox: Buffer overflow
  • From: Thierry Carrez
• CuteNews 1.4.0 remote code execution
  • From: retrogod
• CuteNews 1.4.0 remote code execution
  • From: retrogod
• [ GLSA 200509-10 ] Mailutils: Format string vulnerability in imap4d
  • From: Thierry Carrez
• Cisco IOS hacked?
  • From: ciscoioshehehe
• Re: PHP Nuke <= 7.8 Multiple SQL Injections
  • From: Paul Laudanski
• Re: [Full-disclosure] FireFox Host: Buffer Overflow is not just exploitable on FireFox
  • From: milw0rm Inc.
• CDMA1X Security
  • From: pen-test
• Re: worring about YaST in SuSE 9.3 and maybe lower
  • From: Marcus Meissner
• RE: [Full-disclosure] FireFox Host: Buffer Overflow is not justexploitable on FireFox
  • From: Juha-Matti Laurio
• Greyhats Security back online
  • From: pvnick
• Re: PHP Nuke <= 7.8 Multiple SQL Injections
  • From: Paul Laudanski
• Re: [Full-disclosure] FireFox Host: Buffer Overflow is not just exploitable on FireFox
  • From: Juha-Matti Laurio
• Re: PHP Nuke <= 7.8 Multiple SQL Injections
  • From: Matthias Jim Knopf
• Re: PHP SESSION MODIFICATION
  • From: David N Murray
• TSLSA-2005-0049 - multi
  • From: Trustix Security Advisor
• [FLSA-2005:152919] Updated grip package fixes security issue
  • From: Marc Deslauriers
• (TOOL) TAPiON ver 0.1c
  • From: Piotr Bania
• [SECURITY] [DSA 815-1] New kdebase packages fix local root vulnerability
  • From: Martin Schulze
• gwcc insecure temporary file creation
  • From: ZATAZ Audits
• PHP SESSION MODIFICATION
  • From: unknow
• SUSE Security Announcement: evolution (SUSE-SA:2005:054)
  • From: Ludwig Nussel
• ncompress insecure temporary file creation
  • From: ZATAZ Audits
• SUSE Security Announcement: squid (SUSE-SA:2005:053)
  • From: Thomas Biege
• Re: CastleCops ramps up fight against CoolWebSearch/HomeSearch
  • From: Times Enemy
• arc insecure temporary file creation
  • From: ZATAZ Audits
• Re: CastleCops ramps up fight against CoolWebSearch/HomeSearch
  • From: Paul Laudanski
• worring about YaST in SuSE 9.3 and maybe lower
  • From: innate
• FF IDN buffer overflow workaround works in Netscape too
  • From: Juha-Matti Laurio
• [FLSA-2005:163274] Updated CUPS packages fix security issue
  • From: Marc Deslauriers
• [FLSA-2005:163047] Updated squirrelmail package fixes security issues
  • From: Marc Deslauriers
• [FLSA-2005:162680] Updated Zlib packagea fix security issues
  • From: Marc Deslauriers
• [FLSA-2005:160202] Updated mozilla packages fix security issues
  • From: Marc Deslauriers
• Re: AWstats Path Disclosure Vulnerability
  • From: Martin Pitt
• PTL Advisory 050825 - HP LaserJet Network Username and Information Enumeration
  • From: Pinion Lab
• Re: AWstats Path Disclosure Vulnerability
  • From: cwh01
• Airscanner Mobile Security Advisory #05082201: File Transfer Anywhere v3.01 Local Server Password Disclosure
  • From: contact
• XSS Vulnerability in MIVA Merchant 5 - Includes Fix
  • From: admin
• Re: PHP Nuke <= 7.8 Multiple SQL Injections
  • From: Paul Laudanski
• MDKSA-2005:164 - Updated XFree86/x.org packages fix vulnerability
  • From: Mandriva Security Team
• [SECURITY] [DSA 811-1] New common-lisp-controller packages fix arbitrary code injection
  • From: Martin Schulze
• RE: [Full-disclosure] FireFox Host: Buffer Overflow is not justexploitable on FireFox
  • From: Peter Kruse
• Re: Re: Serious Security issue with broken - Microsoft's .Net XML Serialization API
  • From: darkangel . stt
• RE: [Snort-devel] Re: [Snort-users] Snort DoS Fallacies
  • From: Ferguson, Justin (IARC)
• Anti Arp Poisoning Daemon (OpenAAPD) PS: Link corrected
  • From: Andrea Di Pasquale
• RE: [Snort-devel] Re: [Snort-users] Snort DoS Fallacies
  • From: Steven Sturges
• Re: [Full-disclosure] Mozilla / Mozilla Firefox authentication weakness
  • From: Daniel Veditz
• Re: PHP Nuke <= 7.8 Multiple SQL Injections
  • From: evaders99
• Re: AWstats Path Disclosure Vulnerability
  • From: Fournaux
• Oracle Reports: Generic SQL Injection Vulnerability via Lexical References
  • From: ak
• Online Dating Software by AEwebworks - aeDating Script <= 4.0 Version Vulnerability
  • From: alexsrb
• CastleCops ramps up fight against CoolWebSearch/HomeSearch
  • From: Paul Laudanski
• 404 error XSS
  • From: Josh Zlatin-Amishav
• Re: [Full-disclosure] Mozilla / Mozilla Firefox authentication weakness
  • From: Juha-Matti Laurio
• Remote File Inclusion in MyGuestbook
  • From: rod hedor
• Is netcraft publishing URL of your intranet sites?
  • From: Saqib Ali
• gtkdiskfree insecure temporary file creation
  • From: ZATAZ Audits
• Character Manipulation in Online Systems.
  • From: hackology
• Avocent CCM: Port Access Control Bypass Vulnerability
  • From: spam
• SQL injection & XSS in phpoutsourcing Noah's classifieds
  • From: alireza hassani
• TWiki Remote Command Execution Vulnerability
  • From: Sap .
• Airscanner Mobile Security Advisory #05081102: vxFtpSrv 0.9.7 Remote Code Execution Buffer Overflow Vulnerability
  • From: contact
• DriverStudio Remote Control Authentication Bypass Vulnerability
  • From: cocoruder