Bugtraq

• Thread Index

• Re: Arbitrary code execution in eping plugin
  • From: exon
• Security contact of airport Rome, Italy
  • From: Michael Schwartzkopff
• [OpenPKG-SA-2005.008] OpenPKG Security Advisory (bzip2)
  • From: OpenPKG
• [ GLSA 200506-11 ] Gaim: Denial of Service vulnerabilities
  • From: Thierry Carrez
• singapore v0.9.11 cross site scripting and path disclosure
  • From: thegreatone2176
• File Upload Manager Sploits
  • From: blackshoe
• Re: Arbitrary code execution in eping plugin
  • From: Sam Michaels
• Re: Arbitrary code execution in eping plugin
  • From: Oliver Monneke
• [ GLSA 200506-08 ] GNU shtool, ocaml-mysql: Insecure temporary file creation
  • From: Thierry Carrez
• [ GLSA 200506-07 ] Ettercap: Format string vulnerability
  • From: Thierry Carrez
• [ GLSA 200506-09 ] gedit: Format string vulnerability
  • From: Thierry Carrez
• [ GLSA 200506-10 ] LutelWall: Insecure temporary file creation
  • From: Thierry Carrez
• Re: Arbitrary code execution in eping plugin
  • From: oliver
• Multiple vulnerabilities in Pico Server (pServ) v3.3
  • From: Raphaël Rigo ML
• Webhints v1.03 Remote Command Execution
  • From: blahplok
• Voice VLAN Access/Abuse Possible on Cisco voice-enabled, 802.1x-secured Interfaces
  • From: csirt
• osCommere HTTP Response Splitting
  • From: GulfTech Security Research
• [Full-disclosure] [USN-139-1] Gaim vulnerability
  • From: Martin Pitt
• Re:[ Suresec Advisories ] - Mac OS X 10.4 - launchd local root vulnerability
  • From: Jonathan Weiss
• IpSwitch IMAP Server LOGON stack overflow
  • From: nolimit
• [USN-138-1] gedit vulnerability
  • From: Martin Pitt
• [ GLSA 200506-06 ] libextractor: Multiple overflow vulnerabilities
  • From: Thierry Carrez
• "Meanwhile, on the other side of the web server" - a new write-up by Amit Klein
  • From: Amit Klein (AKsecurity)
• MDKSA-2005:098 - Updated wget packages fix vulnerabilities
  • From: Mandriva Security Team
• Arbitrary code execution in eping plugin
  • From: y0int
• FreeBSD Security Advisory FreeBSD-SA-05:10.tcpdump
  • From: FreeBSD Security Advisories
• drone armies C&C report - May/2005
  • From: Gadi Evron
• Re: `tattle` -- automatic reporting of SSH brute-force attacks
  • From: Sergio Gelato
• Invision Gallery Vulnerabilities
  • From: GulfTech Security Research
• Re: `tattle` -- automatic reporting of SSH brute-force attacks
  • From: Anders Henke
• xmysqladmin insecure temporary file creation
  • From: ZATAZ Audits
• remote command execution in 'tattle'
  • From: b0iler
• FreeBSD Security Advisory FreeBSD-SA-05:12.bind9
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-05:11.gzip
  • From: FreeBSD Security Advisories
• Invision Community Blog Vulnerabilities
  • From: GulfTech Security Research
• leafnode security announcement leafnode-SA-2005-02 (CAN-2005-1911)
  • From: Matthias Andree
• [ Suresec Advisories ] - Mac OS X 10.4 - launchd local root vulnerability
  • From: [ Suresec Advisories ]
• SUSE Security Announcement: several kernel security problems (SUSE-SA:2005:029)
  • From: Ludwig Nussel
• tftp 2000 1.0.0.1
  • From: Josh Zlatin-Amishav
• [ GLSA 200506-05 ] SilverCity: Insecure file permissions
  • From: Sune Kloppenborg Jeppesen
• 2 SQL injection in Loki download manager v2.0
  • From: hack_912
• MDKSA-2005:096 - Updated openssl packages fix vulnerabilities
  • From: Mandriva Security Team
• [USN-137-1] Linux kernel vulnerabilities
  • From: Martin Pitt
• Second-Order Symlink Vulnerabilities
  • From: Steven M. Christey
• Re: AOL AIM Instant Messenger Buddy Icon "ateimg32.dll" DoS
  • From: Manu Benoît
• Contact Request - Comcast
  • From: Ryan T. Dean
• Kaspersky AntiVirus "klif.sys" Privilege Escalation Vulnerability
  • From: info
• [AppSecInc Advisory WEBSP05-V0098] Remote Buffer overflow in WebSphere Application Server Administrative Console
  • From: Team SHATTER
• Re: SQL Injection Exploit for WordPress <= 1.5.1.1
  • From: Giorgio Mandolfo
• Denial of Service vulnerability in GoodTech SMTP Server for Windows NT/2000/XP version 5.14
  • From: Reed Arvin
• SQL Injection Exploit for WordPress <= 1.5.1.1
  • From: Alberto Trivero
• AOL AIM Instant Messenger Buddy Icon "ateimg32.dll" DoS
  • From: Tom Ferris
• Re: [Full-disclosure] Second-Order Symlink Vulnerabilities
  • From: Graham Reed
• [ GLSA 200506-02 ] Mailutils: SQL Injection
  • From: Thierry Carrez
• [ GLSA 200506-03 ] Dzip: Directory traversal vulnerability
  • From: Thierry Carrez
• SQL Injection Exploit for Portail PHP < 1.3
  • From: Alberto Trivero
• `tattle` -- automatic reporting of SSH brute-force attacks
  • From: C.J. Steele, CISSP
• Server termination in Raknet 2.33 (before 30 May 2005)
  • From: Luigi Auriemma
• GIPTables Firewall <= v1.1 insecure temporary file creation
  • From: ZATAZ Audits
• LutelWall <= 0.97 insecure temporary file creation
  • From: ZATAZ Audits
• Popper webmail remote code execution vulnerability - advisory fix
  • From: LSS Security
• everybuddy <= 0.4.3 insecure temporary file creation
  • From: Eric Romang / DATACENTER Luxembourg
• A new whitepaper by Watchfire - HTTP Request Smuggling
  • From: Ory Segal
• [ GLSA 200506-04 ] Wordpress: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• Malicious Bundles on Mac OS X
  • From: Braden Thomas
• [FLSA-2005:152532] Updated kernel packages fix security issues
  • From: Marc Deslauriers
• Israeli industrial espionage Trojan horse sample + snort sigs
  • From: Gadi Evron
• Re: Backdoor in Fortinet´s firewall Fortigate
  • From: Derek Martin
• [DRUPAL-SA-2005-001] New Drupal release fixes critical security issue
  • From: Uwe Hermann
• CastleCops phpBB bbcode Input Validation Disclosure
  • From: Paul Laudanski
• XCon’2005 CALL FOR PAPER
  • From: alert7@xxxxxxxxxx
• [SECURITY] [DSA 732-1] New mailutils packages fix several vulnerabilities
  • From: Martin Schulze
• Re: Backdoor in Fortinet´s firewall Fortigate
  • From: Michael J McCafferty
• RE: Backdoor in Fortinet´s firewall Fortigate
  • From: Matt Gibson
• [security bulletin] SSRT5962 rev.0 HP OpenView Radia mgmt - Remote access and DoS
  • From: Boren, Rich (SSRT)
• SEC-CONSULT SA20050602-2 :: Exhibit Engine Blind SQL Injection
  • From: Bernhard Müller
• Re: A short warning on the X11 Editres protocol
  • From: Frank v Waveren
• SEC-CONSULT SA20050602-1 :: Arbitrary File Inclusion in phpCMS 1.2.x
  • From: Bernhard Müller
• HP Radia Notify Daemon: Multiple Buffer Overflow Vulnerabilities
  • From: John Cartwright
• Backdoor in Fortinet´s firewall Fortigate
  • From: Johan Andersson
• [ECHO_ADV_14$2005] Multiple Vulnerabilities in Liberum Help Desk
  • From: the_day
• PHP Execution Vulnerability in CuteNews
  • From: John Cantu
• [SECURITY] [DSA 731-1] New krb4 packages fix arbitrary code execution
  • From: Martin Schulze
• [ZH2005-13SA] NEXTWEB (i)Site website management multiple vulnerabilities
  • From: Jim Pangalos
• Re: Microsoft Internet Explorer - Crash on adding sites to restricted zone (05/28/2005)
  • From: Steven M. Christey
• Reminder: XGrabKeyboard is not a security interface
  • From: Florian Weimer
• A short warning on the X11 Editres protocol
  • From: Florian Weimer
• [ GLSA 200506-01 ] Binutils, elfutils: Buffer overflow
  • From: Sune Kloppenborg Jeppesen
• 504T and now also 604T remote access.
  • From: alessandro
• Re: Citrix security contact
  • From: security curmudgeon
• Re: [security@xxxxxxx] [XNUXER-SECURITY] Root Privilige Escalation in Sudo version 1.6.8p7 without Password, SuSE 9.3
  • From: Justin
• Multiple vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4
  • From: Alberto Trivero
• Re: [security@xxxxxxx] [XNUXER-SECURITY] Root Privilige Escalation in Sudo version 1.6.8p7 without Password, SuSE 9.3
  • From: Todd C. Miller
• multiple vulnerability Calendarix Advanced
  • From: DarkBicho
• Re: [XNUXER-SECURITY] Root Privilige Escalation in Sudo version 1.6.8p7 without Password, SuSE 9.3
  • From: Ow Mun Heng
• Wide-scale industrial espionage using Trojan horses in Israel
  • From: Gadi Evron
• [Argeniss] MS05-012 Exploit
  • From: Cesar
• SyScAN'05
  • From: organiser@xxxxxxxxxx
• PowerDownload Remote File Inclusion
  • From: SoulBlack Group
• [XNUXER-SECURITY] Root Privilige Escalation in Sudo version 1.6.8p7 without Password, SuSE 9.3
  • From: Xnuxer Security
• Re: [security@xxxxxxx] [XNUXER-SECURITY] Root Privilige Escalation in Sudo version 1.6.8p7 without Password, SuSE 9.3
  • From: Marcus Meissner
• Re: Microsoft Internet Explorer - Crash on JavaScript "window()"-calling (05/28/2005)
  • From: Benton Lam
• Nortel VPN Router Malformed Packet DoS Vulnerability
  • From: Roy Hills
• RE: Microsoft Internet Explorer - Crash on adding sites to restri cted zone (05/28/2005)
  • From: Hohn, Joerg
• TSL-2005-0025 - binutils
  • From: Trustix Security Advisor
• Spam exploiting MS05-016
  • From: Nick FitzGerald
• TSL-2005-0026 - multi
  • From: Trustix Security Advisor
• Re: Microsoft Internet Explorer - Crash on JavaScript "window()"-calling (05/28/2005)
  • From: - k -
• MDKSA-2005:095 - Updated gdb packages fix vulnerabilities
  • From: Mandriva Security Team
• Multiple vulnerabilities in x-cart Gold
  • From: CENSORED
• MyBB 1.0 RC4 XSS Bug
  • From: August Christopher
• CYBSEC - PHPMailer Infinite Loop Denial of Service
  • From: Mariano Nuñez Di Croce
• Crash in Stronghold 2 1.2
  • From: Luigi Auriemma
• Compuware Softice (DbgMsg driver) Local Denial Of Service
  • From: Piotr Bania
• Format String Vulnerability In Peercast 0.1211 And Earlier
  • From: GulfTech Security Research
• PicoWebServer Remote Unicode Stack Overflow
  • From: Dennis Elser
• Microsoft Internet Explorer - Crash on to many stack overflows (05/28/2005)
  • From: Benjamin Tobias Franz
• Microsoft Internet Explorer - Crash on processing embedded files with endless loop (05/28/2005)
  • From: Benjamin Tobias Franz
• Microsoft Internet Explorer - Crash on JavaScript "window()"-calling (05/28/2005)
  • From: Benjamin Tobias Franz
• Microsoft Internet Explorer - Crash on adding sites to restricted zone (05/28/2005)
  • From: Benjamin Tobias Franz
• SQL Injection Exploit for myBloggie 2.1.1 - 2.1.2
  • From: Alberto Trivero
• Re: User32.dll Icon Size Crash
  • From: Daniel Souza
• [SECURITY] [DSA 730-1] New bzip2 packages fix file unauthorised permissions modification
  • From: Martin Schulze
• RE: ACROS Security: HTML Injection in BEA WebLogic Server Console (2)
  • From: ACROS Security
• Re: [SECURITY] [DSA 729-1] New PHP4 packages fix denial of service
  • From: John GALLET
• Citrix security contact
  • From: Eyal Udassin
• DSL-504T (and maybe many other) remote access without password bug
  • From: alessandro
• RE: CAID 32896 - Computer Associates Vet Antivirus engine heap overflow vulnerability
  • From: Williams, James K
• [AppSecInc Advisory BEA05-V0101] BEA WebLogic Administration Console login page cross-site scripting vulnerability
  • From: Team SHATTER
• [AppSecInc Advisory BEA05-V0100] BEA WebLogic Administration Console error page cross-site scripting vulnerability
  • From: Team SHATTER
• User32.dll Icon Size Crash
  • From: - k -
• [USN-136-2] Fixed packages for USN-136-1
  • From: Martin Pitt
• [USN-136-1] binutils vulnerability
  • From: Martin Pitt
• [ GLSA 200505-20 ] Mailutils: Multiple vulnerabilities in imap4d and mail
  • From: Thierry Carrez
• [USN-135-1] gdb vulnerabilities
  • From: Martin Pitt
• [USN-114-2] Fixed packages for USN-114-1
  • From: Martin Pitt
• PostNuke Critical SQL Injection and XSS 0.750=>x
  • From: sp3x
• PHP Stat Administrative User Authentication Bypass
  • From: SoulBlack Group
• [security bulletin] SSRT5899 rev.0 - HP-UX trusted system remote unauthorized access
  • From: Boren, Rich (SSRT)
• Buffer-overflow in C'Nedra 0.4.0
  • From: Luigi Auriemma
• Buffer-overflow and crash in Terminator 3: War of the Machines 1.16
  • From: Luigi Auriemma
• Re: Commonly used disk imaging and wiping tools can be tricked to miss parts of a disk
  • From: Arne Vidström
• Re: ACROS Security: HTML Injection in BEA WebLogic Server Console (2)
  • From: Will Schroeder
• [security bulletin] SSRT4884 rev.0 - HP-UX TCP/IP Remote Denial of Service (DoS)
  • From: Boren, Rich (SSRT)
• Re: [Full-disclosure] iDEFENSE Security Advisory 05.24.05: Ipswitch IMail Web Calendaring Arbitrary File Read Vulnerability
  • From: jamesbug
• [security bulletin] SSRT5954 rev.1 - HP-UX TCP/IP Remote Denial of Service (DoS)
  • From: Boren, Rich (SSRT)
• Meteor FTP Server: PoC Exploit
  • From: Dim K0r0l
• Re: Multiple Sql injection and XSS vulnerabilities in phpBB Plus v.1.52 and below and some of its modules.
  • From: security curmudgeon
• Re: PowerLink WAN Aggregator - Vunerability
  • From: preasoner
• [USN-134-1] Firefox vulnerabilities
  • From: Martin Pitt
• [USN-133-1] Apache utility vulnerability
  • From: Martin Pitt
• [ GLSA 200505-19 ] gxine: Format string vulnerability
  • From: Thierry Carrez
• Invision Power Board 1.* and 2.* Exploit (BID 13529)
  • From: Petey Beege
• Re: PHP Injection in PHP Poll Creator
  • From: Michael Cordover
• Alwil Software Avast Antivirus Device Driver Memory Overwrite Vulnerability
  • From: Piotr Bania
• [SECURITY] [DSA 729-1] New PHP4 packages fix denial of service
  • From: Martin Schulze
• [SECURITY] [DSA 728-2] New qpopper packages fix arbitrary file overwriting
  • From: Martin Schulze
• davfs2 does not honour Unix permissions
  • From: martin f krafft
• Zone Labs ZoneAlarm Vet anti-virus engine OLE processing vulnerability
  • From: Zone Labs Product Security
• OpenServer 5.0.6 OpenServer 5.0.7 : nwprint privilege escalation
  • From: please_reply_to_security
• High Risk Vulnerability in L-Soft's LISTSERV Server
  • From: NGSSoftware Insight Security Research
• shtool insecure temporary file creation
  • From: ZATAZ.net
• PHP Injection in PHP Poll Creator
  • From: rash ilusion
• iDEFENSE Security Advisory 05.25.05: GNU Mailutils 0.6 imap4d FETCH Command Resource Consumption DoS Vulnerability
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 05.25.05: GNU Mailutils 0.6 imap4d fetch_io Heap overflow Vulnerability
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 05.25.05: GNU Mailutils 0.6 mail header_get_field_name() Buffer Overflow Vulnerability
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 05.25.05: GNU Mailutils 0.6 imap4d Format String Vulnerability
  • From: iDEFENSE Labs
• exim 4.40 exploit
  • From: plugger
• [SECURITY] [DSA 728-1] New qpopper packages fix arbitrary file overwriting
  • From: Martin Schulze
• [USN-132-1] ImageMagick vulnerabilities
  • From: Martin Pitt
• [USN-131-1] Linux kernel vulnerabilities
  • From: Martin Pitt
• [ GLSA 200505-16 ] ImageMagick, GraphicsMagick: Denial of Service vulnerability
  • From: Thierry Carrez
• Javamail Multiple Information Disclosure Vulnerabilities
  • From: Ricky Latt
• iDEFENSE Security Advisory 05.24.05: Ipswitch IMail IMAP SELECT Command DoS Vulnerability
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 05.24.05: Ipswitch IMail Web Calendaring Arbitrary File Read Vulnerability
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 05.24.05: Ipswitch IMail IMAP LOGIN Remote Buffer Overflow Vulnerabilities
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 05.24.05: Ipswitch IMail IMAP LSUB DoS Vulnerability
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 05.24.05: Ipswitch IMail IMAP STATUS Remote Buffer Overflow Vulnerability
  • From: iDEFENSE Labs
• Endless loop in Halo 1.06
  • From: Luigi Auriemma
• ACROS Security: HTML Injection in BEA WebLogic Server Console (1)
  • From: ACROS Security
• ACROS Security: HTML Injection in BEA WebLogic Server Console (2)
  • From: ACROS Security
• Gforge - viewFile.php security flaw
  • From: Filippo Spike Morelli
• Blue Coat Reporter multiple remote vulnerabilities
  • From: Oliver Karow
• CAID 32896 - Computer Associates Vet Antivirus engine heap overflow vulnerability
  • From: Williams, James K
• [ GLSA 200505-18 ] Net-SNMP: fixproc insecure temporary file creation
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200505-17 ] Qpopper: Multiple Vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• Meteor FTP Server v1.5 Buffer Overflow
  • From: Auston J
• Format string and crash in Warrior Kings 1.3 and Battles 1.23
  • From: Luigi Auriemma
• Cookie Cart Default Installation Multiple Vulnerabilities
  • From: SoulBlack Group
• SQL injections in PortailPHP
  • From: CENSORED
• Computer Associates Vet Antivirus Library Remote Heap Overflow
  • From: list
• [SECURITYREASON.COM] PostNuke SQL Injection 0.750=>x
  • From: Maksymilian Arciemowicz
• pst.advisory 2005-21: gxine remote exploitable . opensource is god .lol windows
  • From: yan feng
• [SECURITYREASON.COM] PostNuke Non Critical SQL Injection and Include 0.760-RC3=>x
  • From: Maksymilian Arciemowicz
• [SECURITYREASON.COM] PostNuke XSS and Full path disclosure 0.760RC3=>x
  • From: Maksymilian Arciemowicz
• [SECURITYREASON.COM] PostNuke XSS 0.760{RC2,RC3}
  • From: Maksymilian Arciemowicz
• [UPDATE] UNICODE BUFFER OVERFLOW IN MS-WORD
  • From: Bahaa Naamneh
• RE: Security issue in Microsoft Outlook
  • From: Scovetta, Michael V
• [BuHa Security] Wordpress SQL-Injection
  • From: Thomas Waldegger
• Security contact for Trillian
  • From: Suramya Tomar
• episodex guestbook security bypass & html injection
  • From: farhad koosha
• worm "postcard" e-mail issue
  • From: M. Perri
• picasm error handling stack overflow vulnerability
  • From: Shaun Colley
• [SECURITY] [DSA 727-1] New libconvert-uulib-perl packages fix arbitrary code execution
  • From: Martin Schulze
• pst.advisory: gedit fun. opensource is god .lol windows
  • From: yan feng
• [ GLSA 200505-15 ] gdb: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• ERRATA: [ GLSA 200505-13 ] FreeRADIUS: SQL injection and Denial of Service vulnerability
  • From: Sune Kloppenborg Jeppesen
• UPDATE: [ GLSA 200504-23 ] Kommander: Insecure remote script execution
  • From: Sune Kloppenborg Jeppesen
• [SECURITY] [DSA 726-1] New oops packages fix format string vulnerability
  • From: Martin Schulze
• [USN-130-1] TIFF library vulnerability
  • From: Martin Pitt
• [FLSA-2005:152815] Updated libtiff packages fix security issues
  • From: Marc Deslauriers
• phpATM arbitrary PHP code inclusion
  • From: Ingvar Gilbert
• UNICODE BUFFER OVERFLOW IN MS-WORD
  • From: Bahaa Naamneh
• JavaMail Information Disclosure (msgno)
  • From: Ricky Latt
• Re: [SePro Bugtraq] WBB Portal - JGS-Portal <= 3.0.2 - Multiple Vulnerabilities (09.05.05)
  • From: deluxe
• [ GLSA 200505-14 ] Cheetah: Untrusted module search path
  • From: Sune Kloppenborg Jeppesen
• [SECURITY] [DSA 725-1] New ppxp packages fix local root exploit
  • From: Martin Schulze
• D-Link DSL routers authentication bypass
  • From: Francesco Orro
• MDKSA-2005:092 - Updated gzip packages fix several vulnerabilities
  • From: Mandriva Security Team
• MDKSA-2005:091 - Updated bzip2 packages fix multiple vulnerabilities
  • From: Mandriva Security Team
• MDKSA-2005:090 - Updated nasm packages fix vulnerability
  • From: Mandriva Security Team
• MDKSA-2005:089 - Updated cdrdao packages fix local root vulnerability
  • From: Mandriva Security Team
• UnixWare 7.1.4 : Updated mozilla fixes many security issues
  • From: please_reply_to_security
• Security issue in Microsoft Outlook
  • From: Bakchodiya
• [FLSA-2005:152771] Updated pam packages fix security issue
  • From: Marc Deslauriers
• [FLSA-2005:152883] Updated mozilla packages fix security issues
  • From: Marc Deslauriers
• NOVELL ZENWORKS MULTIPLE REMØTE STACK & HEAP OVERFLOWS
  • From: list
• Re: Mac OS X - Adobe Version Cue local root exploit [c version exploit]
  • From: Vade 79
• Re: Yahoo! Messenger may be storing all session data 'Unencoded' on the local machine
  • From: Torseq Tech.
• Re: [SePro Bugtraq] WBB Portal - JGS-Portal <= 3.0.2 - Multiple Vulnerabilities (09.05.05)
  • From: Steven M. Christey
• [USN-129-1] Squid vulnerability
  • From: Martin Pitt
• Windows (XP, 2k3, Longhorn) is vulnerable to IpV6 Land attack.
  • From: Konrad Malewski
• [USN-128-1] nasm vulnerability
  • From: Martin Pitt
• [SECURITY] [DSA 724-1] New phpsysinfo packages fix cross site scripting
  • From: Martin Schulze
• [USN-127-1] bzip2 vulnerabilities
  • From: Martin Pitt
• Help Center Live Vulnerabilities
  • From: GulfTech Security Research
• Re: Windows image size crash
  • From: cmthemc
• Yahoo! Messenger may be storing all session data 'Unencoded' on the local machine
  • From: Torseq Tech.
• Linux kernel pktcdvd ioctl break user space limit vulnerability [corrected]
  • From: bugs
• MDKSA-2005:088-1 - Updated mozilla-firefox packages re-enable extensions
  • From: Mandriva Security Team
• OpenServer 5.0.6 OpenServer 5.0.7 : telnet client multiple issues
  • From: please_reply_to_security
• [ GLSA 200505-13 ] FreeRADIUS: Buffer overflow and SQL injection vulnerability
  • From: Sune Kloppenborg Jeppesen
• [CLA-2005:953] Conectiva Security Announcement - kde
  • From: Conectiva Updates
• Linux kernel pktcdvd and rawdevice ioctl break user space limit vulnerability
  • From: alert7
• cdrdao exploit for mandrake 10.2 ( Mandriva 2005)
  • From: newbug Tseng
• [SePro Bugtraq] WBB Portal - JGS-Portal <= 3.0.2 - Multiple Vulnerabilities (09.05.05)
  • From: deluxe
• Mac OS X - Adobe Version Cue local root exploit [c version exploit]
  • From: ali reza AcTiOnSpIdEr
• Pico Server (pServ) Remote Command Injection
  • From: Claus R. F. Overbeck
• Pico Server (pServ) Information Disclosure Of CGI Sources
  • From: Claus R. F. Overbeck
• Pico Server (pServ) Local Information Disclosure
  • From: Claus R. F. Overbeck
• Woltlab Burning Board SQL Injection Vulnerability
  • From: GulfTech Security Research
• DotNetNuke (Multiple XSS)
  • From: Mark Woan
• Postnuke 0.750 - 0.760rc4 local file inclusion
  • From: pokley
• Multiple Vulnerabilities in MetaCart e-Shop
  • From: dedi dwianto
• [ GLSA 200505-12 ] PostgreSQL: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200505-11 ] Mozilla Suite, Mozilla Firefox: Remote compromise
  • From: Sune Kloppenborg Jeppesen
• [FLSA-2005:152871] Updated nfs-utils package fixes security issue
  • From: Marc Deslauriers
• [FLSA-2005:152912] Updated imap packages fix security issues
  • From: Marc Deslauriers
• [FLSA-2005:152856] Updated sudo packages fix security issue
  • From: Marc Deslauriers
• MDKSA-2005:088 - Updated mozilla packages fix multiple vulnerabilities
  • From: Mandriva Security Team
• [FLSA-2005:152804] Updated openmotif packages fix image vulnerability
  • From: Marc Deslauriers
• Skull-Splitter's Guestbook Multiple XXS/HTML injection
  • From: Morinex Eneco
• [FLSA-2005:152768] Updated ruby package fixes security issues
  • From: Marc Deslauriers
• [USN-126-1] GNU TLS library vulnerability
  • From: Martin Pitt
• Re: Windows image size crash
  • From: Bernhard Mitterer
• [FLSA-2005:152763] Updated qt packages fixes security issues
  • From: Marc Deslauriers
• Gaim 1.2.1 -- PoC Stack Overflow
  • From: Ron
• [ GLSA 200505-10 ] phpBB: Cross-Site Scripting Vulnerability
  • From: Sune Kloppenborg Jeppesen
• Yahoo! Chat Add Buddy Without Consent Privacy Issue
  • From: Torseq Tech.
• PHPHeaven PHPMyChat Cross-site Scripting Vulnerablitiy
  • From: Megasky
• Re: Windows image size crash
  • From: Oliver J. Morais
• Re: Windows image size crash
  • From: Giuseppe `lan` Marocchio
• Yahoo! Messenger URL Handler Remote DoS Vulnerability
  • From: Torseq Tech.
• Re: Linux kernel ELF core dump privilege elevation
  • From: codeQ
• OpenBB SQL Injection & Cross-site Scripting Vulnerability
  • From: Megasky
• Re: Linux kernel ELF core dump privilege elevation (kernel module workaround)
  • From: chris
• Re: phpbb 2.0.15 released - patches high critical vuln
  • From: Paul Laudanski
• cross-domain cookie theft: who's to blame?
  • From: Tim Tompkins
• Windows image size crash
  • From: RSnake
• Willings WebCam - Password Disclosure Issue
  • From: SecuBox fRoGGz
• OllyDbg "INT3 AT" Format String Vulnerability
  • From: Piotr Bania
• [FLSA-2005:154988] Updated openoffice.org packages fix security issues
  • From: Marc Deslauriers
• [FLSA-2005:155508] Updated cvs package fixes security issues
  • From: Marc Deslauriers
• Netvault Remote Heap Overflow (another one)
  • From: nolimit bugtraq
• OpenServer 5.0.7 UnixWare 7.1.4 UnixWare 7.1.3 : Hyper-Threading information leakage
  • From: please_reply_to_security
• Ultimate PHP Board (UPB) Security Advisory
  • From: Morinex Eneco
• Re: Linux kernel ELF core dump privilege elevation
  • From: Pedro Venda
• 32-bit qmail fun (qmail-pop3d) (fwd)
  • From: Lars Olsson
• ITU 2005 Call For Papers
  • From: Michal Szymanski
• FreeBSD Security Advisory FreeBSD-SA-05:09.htt [REVISED]
  • From: FreeBSD Security Advisories
• [USN-124-2] Fixed packages for USN-124-1
  • From: Martin Pitt
• [USN-124-1] Mozilla and Firefox vulnerabilities
  • From: Martin Pitt
• [USN-125-1] Gaim vulnerabilities
  • From: Martin Pitt
• htdigest exploit code [bid 13537]
  • From: K sPecial
• Re: Linux kernel ELF core dump privilege elevation
  • From: antoine
• Re: Linux kernel ELF core dump privilege elevation (kernel module workaround)
  • From: Andrew Griffiths
• [ GLSA 200505-09 ] Gaim: Denial of Service and buffer overflow vulnerabilties
  • From: Sune Kloppenborg Jeppesen
• MDKSA-2005:084 - Updated gnutls packages fix vulnerabilities
  • From: Mandriva Security Team
• MDKSA-2005:085 - Updated kdelibs packages fix vulnerabilities
  • From: Mandriva Security Team
• MDKSA-2005:086 - Updated gaim packages fix multiple vulnerabilities
  • From: Mandriva Security Team
• MDKSA-2005:087 - Updated tcpdump packages fix multiple vulnerabilities
  • From: Mandriva Security Team
• Acrowave AAP-3100AR authetication bypass
  • From: Martin Tornwall
• Directtopics Multiple Vulnerabilities (Security Advisory)
  • From: Morinex Eneco
• Re: Commonly used disk imaging and wiping tools can be tricked to miss parts of a disk
  • From: Thor Arne Johansen
• Re: ASP.NET __VIEWSTATE crypto validation prone to replay attacks
  • From: Anton Ivanov
• Security Advisory for Bugzilla 2.18, 2.19.2, and 2.16.8
  • From: Max Kanat-Alexander
• Firefox 1.0.4 released. Several vulnerabilities fixed
  • From: Paul
• [DR018] Quartz Composer / QuickTime 7 information leakage
  • From: David Remahl
• Yappa-NG Multiple Vulnerabilities
  • From: GulfTech Security Research
• RE: TCP/IP implementations do not adequately validate ICMP error messages
  • From: David Schwartz
• Re: Firefox Crash??
  • From: Jeremy Kelley
• [HSC Security Group] MaxWebPortal - Multiple SQL injection/XSS
  • From: Zinho
• Re: SPAM-HIGH: TCP/IP implementations do not adequately validate ICMP error messages
  • From: David Nichols
• Re: Linux kernel ELF core dump privilege elevation
  • From: Paul Starzetz
• Re: Firefox Crash??
  • From: Joxean Koret
• OpenServer 5.0.6 OpenServer 5.0.7 : chroot A known exploit can break a chroot prison.
  • From: please_reply_to_security
• Re: Firefox Crash??
  • From: Christophe Lucas
• Re: Authentication bypass, sql injections and xss in ArticleLive 2005
  • From: Steven M. Christey
• Re: Linux kernel ELF core dump privilege elevation
  • From: Greg KH
• BakBone NetVault last warning
  • From: class
• Re: Linux kernel ELF core dump privilege elevation
  • From: Bruno Lustosa
• Ethereal <= 0.10.10 SIP dissector stack overflow DoS exploit
  • From: Shaun Colley
• Guesbook Pro XSS & HTML Injection
  • From: SoulBlack Group
• Re: TCP/IP implementations do not adequately validate ICMP error messages
  • From: Maciej Soltysiak
• Commonly used disk imaging and wiping tools can be tricked to miss parts of a disk
  • From: Arne Vidström
• [Scan Associates Advisory] Neteyes Nexusway multiple vulnerability
  • From: pokley
• Re: Linux kernel ELF core dump privilege elevation
  • From: Greg KH
• Re: TCP/IP implementations do not adequately validate ICMP error messages
  • From: Peter Keel
• Linux kernel ELF core dump privilege elevation
  • From: Paul Starzetz
• Cisco Security Advisory: FWSM URL Filtering Solution TCP ACL Bypass Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Metasploit Framework v2.4
  • From: H D Moore
• MDKSA-2005:083 - Updated ethereal packages fix multiple vulnerabilities
  • From: Mandriva Security Team
• WowBB view_user.php SQL Injection Vulnerability
  • From: Megasky
• remote root security bug in ethereal 0.9.13 >= and <= 0.10.10
  • From: suresec advisories
• [ GLSA 200505-08 ] HT Editor: Multiple buffer overflows
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200505-07 ] libTIFF: Buffer overflow
  • From: Sune Kloppenborg Jeppesen
• CAIF 1.2 released
  • From: Oliver Goebel
• Gamespy cd-key validation system: "Cd-key in use" DoS versus many games
  • From: Luigi Auriemma
• Firefox Crash??
  • From: orebla Orebla
• TCP/IP implementations do not adequately validate ICMP error messages
  • From: Alok Menghrajani - Ilion Security SA
• TSLSA-2005-0021 - squid
  • From: Trustix Security Advisor
• New Macromedia Security Zone Bulletin Posted
  • From: Macromedia Security Zone
• Crash in Zoidcom 1.0 beta 4
  • From: Luigi Auriemma
• Esqo advisory: GeoVision Digital Video Surveillance System - Multiple authentication issues
  • From: Tirath Rai
• [ GLSA 200505-06 ] TCPDump: Decoding routines Denial of Service vulnerability
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200505-05 ] gzip: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• Viruses can evade Sophos Anti-Virus
  • From: xerces8
• Easy Message Board Directory Traversal and Remote Command
  • From: SoulBlack Group
• Re: firefox 1.0.3 spoof+auto dl
  • From: Paul
• Advanced Guestbook 2.3.1
  • From: Spy Hat
• phpbb 2.0.15 released - patches high critical vuln
  • From: Paul Laudanski
• [SecurityLab] Ethereal 0.10.10 SIP Dissector Overflow
  • From: Ejovi Nuwere
• Re: Can't trust COMODO - An Update
  • From: Gunter Ollmann
• Announcement: The Web Security Mailing List
  • From: contact
• Firefox Remote Compromise Leaked
  • From: Paul
• NISCC Vulnerability Advisory IPSEC - 004033
  • From: albatross
• [SECURITY] [DSA 722-1] New smail packages fix arbitrary code execution
  • From: Martin Schulze
• Firefox Remote Compromise Technical Details
  • From: Paul
• Re: MegaBook V2.0 - Cross Site Scripting Exploit
  • From: Spy Hat
• PwsPHP v1.2.2 Final - Multiples vulnerabilities
  • From: SecuBox fRoGGz
• [SECURITY] [DSA 723-1] New XFree86 packages fix arbitrary code execution
  • From: Martin Schulze
• [ GLSA 200505-04 ] GnuTLS: Denial of Service vulnerability
  • From: Matthias Geerdsen
• firefox 1.0.3 spoof+auto dl
  • From: john smith
• 4d WebSTAR 5.x Web Server Mac OS X Buffer Overflow
  • From: Braden Thomas
• [ GLSA 200505-03 ] Ethereal: Numerous vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• [SECURITY] [DSA 721-1] New squid packages fix ACL bypass
  • From: Martin Schulze
• [USN-123-1] Xine library vulnerabilities
  • From: Martin Pitt
• Secure Science Corporation Advisory CSA-056
  • From: SSC Advisory Notice
• [USN-120-1] Apache 2 vulnerability
  • From: Martin Pitt
• [USN-121-1] OpenOffice.org vulnerability
  • From: Martin Pitt
• [USN-122-1] Squid vulnerability
  • From: Martin Pitt
• [USN-119-1] tcpdump vulnerabilities
  • From: Martin Pitt
• [SEC-1 LTD] RSA SecurID Web Agent Heap Overflow
  • From: Gary O'leary-Steele
• PHP Advanced Transfer Manager v1.21
  • From: tjomi4
• FreeBSD Security Advisory FreeBSD-SA-05:08.kmem
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-05:07.ldt
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-05:06.iir
  • From: FreeBSD Security Advisories
• MDKSA-2005:081 - Updated XFree86/XOrg packages fix libXpm vulnerabilities
  • From: Mandriva Security Team
• Multiple Vulnerabilities In Invision Power Board
  • From: GulfTech Security Research
• Re: MegaBook V2.0 - Cross Site Scripting Exploit
  • From: Morning Wood
• Gamespy cd-key validation system: Cd-key never in use
  • From: Luigi Auriemma
• MDKSA-2005:082 - Updated OpenOffice.org packages fix heap overflow vulnerability
  • From: Mandriva Security Team
• Mac OS 10.4: new-account-wizzard in Mail 2.0 sends clear-text passwords
  • From: Markus Wörle
• Sql Injection in CJ Ultra Plus v1.0.3-1.0.4
  • From: Kold
• [ GLSA 200505-02 ] Oops!: Remote code execution
  • From: Luke Macken
• Multiple vulnearabilities in e107 cms
  • From: hennoj
• Re: ASP.NET __VIEWSTATE crypto validation prone to replay attacks
  • From: Michal Zalewski
• [USN-115-1] Kommander vulnerability
  • From: Martin Pitt
• [USN-117-1] cvs vulnerability
  • From: Martin Pitt
• [USN-114-1] kimgio vulnerability
  • From: Martin Pitt
• Re: ASP.NET __VIEWSTATE crypto validation prone to replay attacks
  • From: H D Moore
• [hackgen-2005-#004] - Multiple bugs in MidiCart PHP Shopping Cart
  • From: Exoduks
• Re: ASP.NET __VIEWSTATE crypto validation prone to replay attacks
  • From: Michal Zalewski
• DMA[2005-0502a] - 'Apple OSX multiple Bluetooth vulnerabilities'
  • From: Kevin Finisterre
• [USN-118-1] PostgreSQL vulnerabilities
  • From: Martin Pitt
• [USN-116-1] gzip vulnerabilities
  • From: Martin Pitt
• [USN-113-1] libnet-ssleay-perl vulnerability
  • From: Martin Pitt
• Re: AWStats <= 6.4 Multiple vulnerabilities
  • From: Laurent Destailleur
• Local root vuln in VPN daemon on MacOS X
  • From: Pieter de Boer
• Multiple Vulnerabilities In SitePanel2
  • From: GulfTech Security Research
• Multiple Vulnerabilities In osTicket
  • From: GulfTech Security Research
• RE: ASP.NET __VIEWSTATE crypto validation prone to replay attacks
  • From: Tim Farley
• Multiple vulnerabilities in myBloggie 2.1.1
  • From: Alberto Trivero
• dSMTP - SMTP Mail Server 3.1b Linux Remote Root Format String Exploit
  • From: cybertronic
• Oracle 10g DBMS_SCHEDULER SESSION_USER issue
  • From: Alexander Kornbrust
• Oracle 9i / 10g Fine Grained Auditing Issue
  • From: Alexander Kornbrust
• MegaBook V2.0 - Cross Site Scripting Exploit
  • From: Spy Hat
• MRO Maximo v4 & v5
  • From: Felix
• directory traversal in SimpleCam 1.2
  • From: Donato Ferrante
• iDEFENSE Security Advisory 05.04.05: Apple Mac OS X vpnd Server_id Buffer Overflow Vulnerability
  • From: iDEFENSE Labs
• Local file detection bug found through Adobe SVG Viewer
  • From: Hyperdose Security
• leafnode security announcement leafnode-SA-2005-01
  • From: Matthias Andree
• Multiple vulnerabilities in Merak Mail Server 8.0.3 with Icewarp Web Mail 5.4.2
  • From: ShineShadow
• Gossamer Threads Links SQL login XSS Vulnerability
  • From: Nathan House
• iDEFENSE Security Advisory 05.03.05: Mac OS X Server NeST -target Buffer Overflow Vulnerability
  • From: iDEFENSE Labs
• Golden Ftp Server Pro - Directory Traversal Vuln
  • From: Lachlan. H
• Authentication bypass, sql injections and xss in ArticleLive 2005
  • From: dcrab
• Multiple SQL injections and XSS in FishCart 3.1
  • From: dcrab
• Advisories for 4 vulnerabilities addressed by Apple SU 2005-005
  • From: David Remahl
• [HSC Security Group] ASP Inline Corporate Calendar SQL injection
  • From: Zinho
• [SECURITY] [DSA 720-1] New smartlist packages fix unauthorised un/subscription
  • From: Martin Schulze
• ASP.NET __VIEWSTATE crypto validation prone to replay attacks
  • From: Michal Zalewski
• Re: Apache hacks (./atac, d0s.txt)
  • From: Nick Bright
• tHorK FrameWork Beta v0.1::: another exploit framework
  • From: gilbert nzeka
• [CLA-2005:952] Conectiva Security Announcement - kernel
  • From: Conectiva Updates
• Directory Traversal Vuln - RaidenFTPD 2.4 < Build 2241
  • From: Lachlan. H
• Re: Apache hacks (./atac, d0s.txt)
  • From: Steve Kemp
• Re: Apache hacks (./atac, d0s.txt)
  • From: Jay D. Dyson
• Re: Apache hacks (./atac, d0s.txt)
  • From: KF (lists)
• Re: Privilege escalation in BulletProof FTP Server v2.4.0.31 [PoC]
  • From: Jerome ATHIAS
• Re: Apache hacks (./atac, d0s.txt)
  • From: Robert Zilbauer
• Can't trust COMODO
  • From: Gunter Ollmann (NGS)
• Re: Apache hacks (./atac, d0s.txt)
  • From: Skip Carter
• Re: Apache hacks (./atac, d0s.txt)
  • From: Luiz Henrique
• Regions bank phishing scam
  • From: Ryan S
• Re: Apache hacks (./atac, d0s.txt)
  • From: Daniel Cid
• Re: Apache hacks (./atac, d0s.txt)
  • From: Sagiko
• Re: Apache hacks (./atac, d0s.txt)
  • From: Chris Umphress
• JGS-Portal 3.0.1 SQL-Injection
  • From: admin
• Golden FTP Server Pro Remote Buffer Overflow Exploit
  • From: mohamed amhemed
• [ GLSA 200504-30 ] phpMyAdmin: Insecure SQL script installation
  • From: Sune Kloppenborg Jeppesen
• Defcon Capture the Flag registration is open
  • From: Kenshoto
• Microsoft WINS Vulnerability + OS/SP Scanner
  • From: class
• Re: Apache hacks (./atac, d0s.txt)
  • From: a.list.address@xxxxxxxxx
• Insecure pty permissions in OS X < 10.4
  • From: Matt Johnston
• Clients format string and server crash in Mtp-Target 1.2.2
  • From: Luigi Auriemma
• [ GLSA 200505-01 ] Horde Framework: Multiple XSS vulnerabilities
  • From: Luke Macken
• Multiple Vulnerabilities in Video Cam Server 1.0.0
  • From: Donato Ferrante
• DMA[2005-0501a] - 'ARPUS/Ce setuid buffer overflow and file overwrite'
  • From: KF (lists)
• Apache hacks (./atac, d0s.txt)
  • From: Andrew Y Ng
• Snmppd SNMP proxy daemon format string exploit
  • From: cybertronic
• Mac OS X Cocktail 3.5.4 admin password disclosure
  • From: sonderling
• Re: [bugtraq] Re: Borland Security Contact
  • From: Markus Stenzel
• Re: Safari HTTPS Overflow
  • From: Braden Thomas
• Re: Safari HTTPS Overflow
  • From: David Riley
• DEF CON - New CTF Organizers chosen!
  • From: The Dark Tangent
• [CAN-2005-1062] Administration protocol abuse allows local/remote password cracking
  • From: Secure Computer Group
• [CAN-2005-1063] Administration protocol abuse leads to Service and System Denial of Service
  • From: Secure Computer Group
• MDKSA-2005:078 - Updated squid packages fix vulnerability
  • From: Mandriva Security Team
• MDKSA-2005:079 - Updated perl packages to fix rmtree vulnerability
  • From: Mandriva Security Team
• Multiples Full Path Disclosure in php-nuke 7.6 (and below)
  • From: Luis Fernando
• MDKSA-2005:080 - Updated libxpm4 packages fix libXpm vulnerabilities
  • From: Mandriva Security Team
• Golden FTP Server Pro remote stack BOF exploit (IHSTeam)
  • From: c0d3r
• NY sues Spyware Intermix, funded by Tiaa-Cref
  • From: Paul Laudanski
• Safari HTTPS Overflow
  • From: Gilbert Verdian
• Multiple Sql injections in phpCoin v1.2.2 and below
  • From: dcrab
• DHS Security Contact
  • From: Jason Coombs
• Re: New auto download / install / exploit URL?
  • From: Nicob
• RE: Netflix Site may assist Phishing
  • From: pak_ml
• Re: Borland Security Contact
  • From: KF (lists)
• Re: Vulnerability kali's tagboard
  • From: Jesus
• Re: Security contact at sourceforge?
  • From: Scott Grayban
• [Security Bulletin] SSRT5958 rev.0 - HP OpenView Radia Mgmt. Portal (RMP) Radia Mgmt. Agent Remote unauthorized Privileged Access and (DoS)
  • From: Boren, Rich (SSRT)
• Cross Site Scripting in BEA Admin Console
  • From: Alexander Kornbrust
• [HSC Security Group] Ocean12 Mailing List Manager Pro SQL injection
  • From: Zinho
• File appending vulnerability in Oracle Webcache 9i
  • From: Alexander Kornbrust
• Cross Site Scripting in Oracle Webcache 9i Adminstrator Application
  • From: Alexander Kornbrust
• Webcache Client Requests Bypass OHS mod_access Restrictions
  • From: Alexander Kornbrust
• insecure user account lam-runtime-7.0.6-2mdk rpm
  • From: Scott Grayban
• Borland Security Contact
  • From: Dave Armstrong
• Netflix Site may assist Phishing
  • From: Sara Togian
• OT: Two Factor Authentication on Linux / Mac / Windows
  • From: Mohit Muthanna
• Re: tcpdump[v3.8.x/v3.9.1]: ISIS, BGP, and LDP infinite loop DOS exploits.
  • From: Romain Francoise
• Re: tcpdump(/ethereal)[]: (RSVP) rsvp_print() infinite loop DOS.
  • From: Romain Francoise
• phpBB Notes Mod SQL Injection Vulnerability
  • From: GulfTech Security Research
• Re: Vulnerability kali's tagboard
  • From: security curmudgeon
• High risk flaw in HP OpenView Radia Management Agent
  • From: NGSSoftware Insight Security Research
• [SECURITY] [DSA 718-1] New ethereal packages fix buffer overflow
  • From: Martin Schulze
• [SECURITY] [DSA 719-1] New prozilla packages fix arbitrary code execution
  • From: Martin Schulze
• [SECURITY] [DSA 718-2] New ethereal packages fix buffer overflow
  • From: Martin Schulze
• [ GLSA 200504-28 ] Heimdal: Buffer overflow vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• RE: Capital One's website inadvertently assists phishing
  • From: Rager, Anton (Anton)
• Security contact at sourceforge?
  • From: Joxean Koret
• Re: New auto download / install / exploit URL?
  • From: Hermann Arens
• Re: Discovering and Stopping Phishing/Scam Attacks
  • From: Crispin Cowan
• Re: Discovering and Stopping Phishing/Scam Attacks
  • From: byte_jump
• RE: IE - cross site click detection?
  • From: ViPeR
• ZRCSA-200501 - Multiple vulnerabilities in Claroline
  • From: Sieg Fried
• Buffer overflow in KMiNT21 Software Golden FTP Server Pro v2.52 (10.04.2005)
  • From: Reed Arvin
• [CLA-2005:948] Conectiva Security Announcement - squid
  • From: Conectiva Updates
• Privilege escalation in BulletProof FTP Server v2.4.0.31
  • From: Reed Arvin
• Privilege escalation in BakBone NetVault 7.1
  • From: Reed Arvin
• iDEFENSE Labs Releases dltrace
  • From: iDEFENSE Labs
• SQL-injections in koobi-cms
  • From: CENSORED
• [CLA-2005:950] Conectiva Security Announcement - evolution
  • From: Conectiva Updates
• [CLA-2005:949] Conectiva Security Announcement - gaim
  • From: Conectiva Updates
• [SECURITY] [DSA 716-1] New gaim packages fix denial of service
  • From: Martin Schulze
• [SECURITY] [DSA 717-1] New lsh packages fix several vulnerabilities
  • From: Martin Schulze
• [ GLSA 200504-27 ] xine-lib: Two heap overflow vulnerabilities
  • From: Thierry Carrez
• [SECURITY] [DSA 715-1] New cvs packages fix unauthorised repository access
  • From: Martin Schulze
• [HSC Security Group] Comersus v6 Script injection
  • From: Zinho
• Re: SQL-injections in Invision Power Board v2.0.1
  • From: Steven M. Christey
• myPHP Forum v3 (possible v1 & 2 also) Identification 'spoof'
  • From: Terencentanio Enache
• Black Hat USA 2005 Reminder CFP closing soon!
  • From: Jeff Moss
• SUSE Security Announcement: Mozilla Firefox, Mozilla various security problems (SUSE-SA:2005:028)
  • From: Marcus Meissner
• [ GLSA 200504-26 ] Convert-UUlib: Buffer overflow
  • From: Sune Kloppenborg Jeppesen
• New Whitepaper: Stopping Automated Attack Tools
  • From: Gunter Ollmann (NGS)
• ADV: NetTerm's NetFtpd 4.2.2 Buffer Overflow + PoC Exploit
  • From: shadown
• Re: New auto download / install / exploit URL?
  • From: joke0
• [ GLSA 200504-25 ] Rootkit Hunter: Insecure temporary file creation
  • From: Sune Kloppenborg Jeppesen
• iDEFENSE Security Advisory 04.25.05: MySQL MaxDB Webtool Remote Lock-Token Stack Overflow Vulnerability
  • From: iDEFENSE Labs
• Discovering and Stopping Phishing/Scam Attacks
  • From: steven
• iDEFENSE Security Advisory 04.25.05: MySQL MaxDB Webtool Remote Stack Overflow Vulnerability
  • From: iDEFENSE Labs
• [Hackers Center Security Group] Sqwebmail Http Splitting Vulnerability
  • From: Zinho
• SQL-injections in Invision Power Board v2.0.1
  • From: CENSORED
• IE - cross site click detection?
  • From: ViPeR
• [PLSN-0005] new cvs package available
  • From: Peachtree Linux Security Team
• [PLSN-0006] new libexif package available
  • From: Peachtree Linux Security Team
• [PLSN-0007] new libcdaudio package available
  • From: Peachtree Linux Security Team
• tcpdump[v3.8.x/v3.9.1]: ISIS, BGP, and LDP infinite loop DOS exploits.
  • From: Vade 79
• tcpdump(/ethereal)[]: (RSVP) rsvp_print() infinite loop DOS.
  • From: Vade 79
• GrayCMS php code injection
  • From: Kold
• [exploits] phpMyVisites 1.3 local file retrieval
  • From: Max Cerny
• E-Cart E-Commerce Software EXPLOIT
  • From: Emanuele "z\" Gentili
• Multiple SQL Injections in MetaBid Auctions
  • From: dcrab
• MetaCart2 for PayFlow Multiple Sql Injection Vulnerabilities
  • From: dcrab
• Multiple SQL Injections in MetaCart2 for SQL Server Special Edition U.K
  • From: dcrab
• Multiple SQL Injections in MetaCart2 for PayPal
  • From: dcrab
• Multiple SQL Injections in MetaCart e-Shop V-8
  • From: dcrab
• iDEFENSE Security Advisory 04.26.05: MySQL MaxDB Webtool Remote 'If' Stack Overflow Vulnerability
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 04.26.05: Citrix Program Neighborhood Agent Arbitrary Shortcut Creation Vulnerability
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 04.26.05: Citrix Program Neighborhood Agent Buffer Overflow
  • From: iDEFENSE Labs
• [SECURITY] [DSA 714-1] New kdelibs packages fix arbitrary code execution
  • From: Martin Schulze
• Re: index.cgi script XSS + file show
  • From: D.C. van Moolenbroek
• RE: Possible XSS in User-Agent
  • From: Scovetta, Michael V
• dBpowerAMP Auxiliary - Abnormal execution
  • From: SecuBox fRoGGz
• [security bulletin] SSRT5954 rev.0 HP-UX TCP/IP Remote Denial of Service (DoS)
  • From: Boren, Rich (SSRT)
• [ GLSA 200504-24 ] eGroupWare: XSS and SQL injection vulnerabilities
  • From: Matthias Geerdsen
• remote command execution in ad.cgi script
  • From: fireboy fireboy
• Re: [Full-disclosure] [VulnDiscuss] Re: -==phpBB 2.0.14 Multiple Vulnerabilities==-[Scanned]
  • From: Dave Aitel
• WoltLab Burning Board <= 2.3.1 PL2 - XSS Vulnerability (24.04.05)
  • From: admin
• RE: New auto download / install / exploit URL?
  • From: Geoff Vass
• remote command execution in forum.pl script
  • From: fireboy fireboy
• index.cgi script XSS + file show
  • From: fireboy fireboy
• Re: BitDefender 8 - Race condition vulnerability
  • From: Ovidiu Constantin
• remote command execution in text.cgi script
  • From: fireboy fireboy
• MailEnable HTTPS Buffer Overflow [x0n3-h4ck]
  • From: CorryL
• [Overflow.pl] ImageMagick ReadPNMImage() Heap Overflow
  • From: Damian Put
• E-Cart v1.1 Remote Command Execution Vulnerability
  • From: Emanuele "z\" Gentili
• Yager <= 5.24 Remote Buffer Overflow Exploit
  • From: cybertronic
• Possible XSS in User-Agent
  • From: Nicolas Montoza
• remote command execution in includer.cgi script
  • From: fireboy fireboy
• remote command execution in citat.pl script
  • From: fireboy fireboy
• hyper.cgi script file show bug
  • From: fireboy fireboy
• [INetCop Security Advisory] Snmppd potentially format string vulnerability.
  • From: dong-hun you
• MS05-019 Windows IP options DoS exploit
  • From: GomoR
• remote command execution in include.cgi script
  • From: fireboy fireboy
• Multiple SQL Injections in StorePortal 2.63
  • From: dcrab
• DMA[2005-0423a] - 'Nokia Affix Bluetooth Integer Underflow'
  • From: KF (lists)
• Re: -==phpBB 2.0.14 Multiple Vulnerabilities==-
  • From: Paul Laudanski
• Sql Injection in Confixx 3.06 & 3.08 & 3.?? ?
  • From: Erich Klaus
• remote command execution in inserter.cgi script
  • From: fireboy fireboy
• [CIRT.DK - Advisory] Novell Nsure Audit 1.0.1 Denial of Service
  • From: CIRT.DK Advisory
• [SNS Advisory No.80] nProtect:Netizen Arbitrary File Download Vulnerability
  • From: snsadv
• TSLSA-2005-0015 - postgresql
  • From: Trustix Security Advisor
• Re: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted
  • From: Stephen Frost
• E-Cart v1.1 Remote Command Execution
  • From: Nicolas Montoza
• Re: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted
  • From: Antoine Martin
• Local file detection found through Adobe Reader ActiveX control
  • From: Hyperdose Security
• Multiple Sql injection and XSS in CartWIZ ASP Cart
  • From: dcrab
• artmedic_links5 remote file access exploit
  • From: Adam n30n Simuntis
• -==phpBB 2.0.14 Multiple Vulnerabilities==-
  • From: HaCkZaTaN
• New auto download / install / exploit URL?
  • From: Gandalf The White
• ACSblog bug
  • From: farhad koosha
• Multiple Sql injection vulnerabilities in BK Forum v.4
  • From: dcrab
• [SePro Bugtraq] WBB - WoltLab Burning Board <= 2.3.1 - XSS Vulnerability (22.04.05)
  • From: deluxe
• FreeBSD Security Advisory FreeBSD-SA-05:05.cvs
  • From: FreeBSD Security Advisories
• BitDefender 8 - Race condition vulnerability
  • From: SecuBox fRoGGz
• Re: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
  • From: Antoine Martin
• Re: RealNetworks RealPlayer/RealOne Player/Helix Player Remote Heap Overflow
  • From: Göran Sandahl
• Re: Microsoft Windows image rendering DoS vuln
  • From: Jesse Morgan
• Microsoft Windows image rendering DoS vuln
  • From: Luis Alberto Cortes Zavala
• [ GLSA 200504-23 ] Kommander: Insecure remote script execution
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200504-22 ] KDE kimgio: PCX handling buffer overflow
  • From: Sune Kloppenborg Jeppesen
• [PLSN-0001] - Multiple vulnerabilities in Gaim
  • From: Peachtree Linux Security Team
• [ GLSA 200504-21 ] RealPlayer, Helix Player: Buffer overflow vulnerability
  • From: Thierry Carrez
• Re: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
  • From: Stephen Frost
• Re: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
  • From: Jim Knoble
• [PLSN-0003] - Remote exploits in MPlayer
  • From: Peachtree Linux Security Team
• Re: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
  • From: Bruno Wolff III
• RE: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
  • From: Mike Fratto
• RE: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
  • From: Mike Fratto
• RE: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
  • From: Mark Senior
• Multiple vulnerabilities in Argosoft Mail Server 1.8.7.6
  • From: ShineShadow
• Re: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted
  • From: Michael Samuel
• Re: Microsoft Windows image rendering DoS vuln
  • From: Randy
• Re: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
  • From: Stephen Frost
• [PLSN-0002] - Multiple vulnerabilities in Gaim
  • From: Peachtree Linux Security Team
• [KDE Security Advisory]: Kommander untrusted code execution
  • From: Dirk Mueller
• [KDE Security Advisory]: kimgio input validation errors
  • From: Dirk Mueller
• Multiple Sql injection and XSS in Asp Nuke 0.80 (Working exploits included)
  • From: dcrab
• [PLSN-0003] - Remote exploits in mplayer
  • From: Peachtree Linux Security Team
• UPDATE: [ GLSA 200410-10 ] gettext: Insecure temporary file handling
  • From: Sune Kloppenborg Jeppesen
• UPDATE: [ GLSA 200504-16 ] CVS: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200504-20 ] openMosixview: Insecure temporary file creation
  • From: Thierry Carrez
• [PLSN-0002] - Multiple vulnerabilities in Gaim
  • From: Peachtree Linux Security Team
• Re: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
  • From: Lance James
• Canonicalization and directory traversal in iSeries FTP security products
  • From: Shalom Carmel
• MDKSA-2005:077 - Updated cdrecord packages fix vulnerability
  • From: Mandriva Security Team
• TSLSA-2005-0013 - cvs
  • From: Trustix Security Advisor
• APG Classmaster Workstation Windows SMB share access vulnerability
  • From: Alex Garrett
• [PLSN-0001] - Multiple PHP vulnerabilities
  • From: Peachtree Linux Security Team
• Re: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
  • From: Stephen Frost
• [SECURITY] [DSA 713-1] New junkbuster packages fix several vulnerabilities
  • From: Martin Schulze
• Re: Microsoft Windows image rendering DoS vuln
  • From: patrick
• RE: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
  • From: Mike Fratto
• xine security announcement: multiple heap overflows in MMS and Real RTSP streaming clients
  • From: Michael Roitzsch
• Re: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted
  • From: Tino Wildenhain
• Re: Vulnerability kali's tagboard
  • From: Jason Dodson
• MDKSA-2005:075 - Updated libcdaudio1 packages fix vulnerability
  • From: Mandriva Security Team
• Re: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted
  • From: Rod Taylor
• Vulnerability kali's tagboard
  • From: piker piker
• MDKSA-2005:073 - Updated cvs packages fix vulnerability
  • From: Mandriva Security Team
• Re: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
  • From: Jim Knoble
• Re: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
  • From: Stephen Frost
• Re: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
  • From: David F. Skoll
• Re: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
  • From: Stephen Frost
• Re: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
  • From: Tino Wildenhain
• directory traversal in Yawcam 0.2.5
  • From: Donato Ferrante
• Re: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
  • From: Joshua D. Drake
• [SECURITY] [DSA 701-2] New samba packages fix correct sporadic crash
  • From: Martin Schulze
• Re: Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
  • From: Josh Berkus
• MDKSA-2005:074 - Updated gnome-vfs2 packages fix vulnerability
  • From: Mandriva Security Team
• MDKSA-2005:076 - Updated xli packages fix multiple vulnerabilities
  • From: Mandriva Security Team
• [PLSN-0004] - Buffer overflow in PostgreSQL
  • From: Peachtree Linux Security Team
• Re: Microsoft Windows image rendering DoS vuln
  • From: patrick
• Re: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
  • From: Tom Lane
• Re: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
  • From: Tom Lane
• Re: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
  • From: Jim C. Nasby
• Re: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
  • From: Bruce Momjian
• Re: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
  • From: Tom Lane
• Re: [HACKERS] Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
  • From: Jim C. Nasby
• Linux vsyscalls may be used as attack vectors
  • From: Clad Strife
• cpio directory traversal vulnerability
  • From: Imran Ghory
• Re: Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
  • From: David F. Skoll
• Re: Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
  • From: Stephen Frost
• PMsoftware mini http server remote stack overflow exploit (IHSTeam)
  • From: c0d3r
• gzip directory traversal vulnerability
  • From: Imran Ghory
• Re: Vulnerability in Coppermine Photo Gallery 1.3.*
  • From: nibbler999
• Postgres: pg_hba.conf, md5, pg_shadow, encrypted passwords
  • From: Stephen Frost
• Secure Science Corporation Application Software Advisory 055
  • From: SSC Advisory Notice
• [OpenPKG-SA-2005.006] OpenPKG Security Advisory (mysql)
  • From: OpenPKG
• Linux vsyscalls may be used as attack vectors
  • From: Clad Strife
• Shoutbox SCRIPT <= 3.0.2 Administrative MD5 Username and Password Retrieval [x0n3-h4ck]
  • From: CorryL
• Ecommerce-Carts SQL injection vulnerability ( IHSTeam )
  • From: c0d3r
• [waraxe-2005-SA#042] - Multiple vulnerabilities in Coppermine Photo Gallery 1.3.2
  • From: Janek Vind