Bugtraq

• Thread Index

• Annuaire Netref v4.2 [ fwrite php ] vulnerability
  • From: jaguar
• Re: Capital One's website inadvertently assists phishing
  • From: Allen Parker
• Re: Capital One's website inadvertently assists phishing
  • From: Joseph Barillari
• Multiple Security Issues Found In AZBB
  • From: GulfTech Security Research
• RE: iDEFENSE Security Advisory 04.18.05: McAfee Internet Security Suite 2005 Insecure File Permission Vulnerability
  • From: Boyce, Nick
• Multiple eGroupware Vulnerabilities
  • From: GulfTech Security Research
• ICMP attacks against TCP (Proof-of-Concept code) (MS05-019, CISCO:20050412)
  • From: houseofdabus HOD
• Neslo Desktop Rover Remote DoS Vulnerability
  • From: Adam Baldwin
• RealNetworks RealPlayer/RealOne Player/Helix Player Remote Heap Overflow
  • From: Piotr Bania
• [ GLSA 200504-19 ] MPlayer: Two heap overflow vulnerabilities
  • From: Matthias Geerdsen
• [HSC Security Group] Ocean12 Calendar manager 1.01 SQL injection
  • From: Zinho
• SUSE Security Announcement: RealPlayer buffer overflow in RAM file handling (SUSE-SA:2005:026)
  • From: Marcus Meissner
• SUSE Security Announcement: PostgreSQL buffer overflow problems (SUSE-SA-2005:027)
  • From: Marcus Meissner
• [SECURITY] [DSA 661-2] New f2c packages fix insecure temporary files
  • From: Martin Schulze
• DUportal Pro 3.4 has MANY Sql injection and Sql Errors.
  • From: dcrab
• [CLA-2005:947] Conectiva Security Announcement - MySQL
  • From: Conectiva Updates
• Capital One's website inadvertently assists phishing
  • From: Joseph Barillari
• RE: Portcullis Security Advisory 05-012 Ebay Session Riding Vulnerability
  • From: GulfTech Security Research
• Announcing PAKCON II (2005)!
  • From: Ayaz Ahmed Khan
• PAKCON II: Call for Papers (CfP - 2005)
  • From: Ayaz Ahmed Khan
• MS05-021 Microsoft Exchange X-LINK2STATE Heap Overflow PoC
  • From: Evgeny Pinchuk
• CAU - New Tool: hcraft - HTTP Vuln Request Crafter
  • From: I)ruid
• [ GLSA 200504-18 ] Mozilla Firefox, Mozilla Suite: Multiple vulnerabilities
  • From: Thierry Carrez
• [SECURITY] [DSA 712-1] New geneweb packages fix insecure file operations
  • From: Martin Schulze
• File Selection May Lead to Command Execution (GM#015-IE)
  • From: GreyMagic Security
• UBB Thread printthread.php SQL Injection
  • From: Hillel Himovich
• RE: ERNW Security Advisory 01/2005 [ EXPLOIT ]
  • From: cybertronic
• Directoy Traversal Attack in apexec.pl (.%00./-Bug)
  • From: msdarkflyer
• Re: cpio TOCTOU file-permissions vulnerability
  • From: Steve G
• [SECURITY] [DSA 711-1] New info2www packages fix cross-site scripting vulnerability
  • From: Martin Schulze
• Portcullis Security Advisory 05-012 Ebay Session Riding Vulnerability
  • From: Paul J Docherty
• [ GLSA 200504-17 ] XV: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• MDKSA-2005:072 - Updated php packages fix multiple vulnerabilities
  • From: Mandriva Security Team
• - Argeniss - Oracle exploits and workarounds
  • From: Cesar
• iDEFENSE Security Advisory 04.18.05: McAfee Internet Security Suite 2005 Insecure File Permission Vulnerability
  • From: iDEFENSE Labs
• The first open source spyware
  • From: gilbert nzeka
• [ GLSA 200504-16 ] CVS: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• [AppSecInc Team SHATTER Security Advisory] SQL Injection in ALTER_MANUALLOG_CHANGE_SOURCE procedure
  • From: Team SHATTER
• [AppSecInc Team SHATTER Security Advisory] Multiple SQL Injection vulnerabilities in DBMS_METADATA package
  • From: Team SHATTER
• [AppSecInc Team SHATTER Security Advisory] Denial of Service in Oracle interMedia
  • From: Team SHATTER
• [AppSecInc Team SHATTER Security Advisory] SQL Injection in CREATE_SCN_CHANGE_SET procedure
  • From: Team SHATTER
• [AppSecInc Team SHATTER Security Advisory] Multiple SQL Injection vulnerabilities in DBMS_CDC_SUBSCRIBE and DBMS_CDC_ISUBSCRIBE packages
  • From: Team SHATTER
• ERNW Security Advisory 01/2005
  • From: Mailinglists
• Re: HTTP RESPONSE SPLITTING by Diabolic Crab
  • From: Amit Klein (AKsecurity)
• [SECURITY] [DSA 710-1] New gtkhtml packages fix denial of service
  • From: Martin Schulze
• phpBB - Knowledge Base MOD - SQL-Injection and Full Path Disclosure
  • From: deluxe
• Firesearching 1 + 2 [Firefox 1.0.2]
  • From: mikx
• Re: Http Response Splitting Vulnerability In PHP-NUKE 7.6 and below
  • From: Amit Klein (AKsecurity)
• [ECL] Windows IP Options DoS POC [ECL]
  • From: Yuri Gushin
• [ GLSA 200504-15 ] PHP: Multiple vulnerabilities
  • From: Thierry Carrez
• Firelinking [Firefox 1.0.2]
  • From: mikx
• Vulnerability in Coppermine Photo Gallery 1.3.*
  • From: GHC team
• SUSE Security Announcement: cvs (SUSE-SA:2005:024)
  • From: Sebastian Krahmer
• Require many large corporate emails for contact regarding vulnerability.
  • From: dcrab
• Re: ================================ GNU Core Utilities race condition file-permissions vulnerability ================================ Software: mkdir, mknod, mkfifo Version: Part of GNU Core Utilities 5.
  • From: Pavel Kankovsky
• Re: gzip TOCTOU file-permissions vulnerability
  • From: Dmitry Yu. Bolkhovityanov
• phpBB datenbank mod has XSS/SQL Injection in the id variable
  • From: tom cruise
• Re: Http Response Splitting Vulnerability In PHP-NUKE 7.6 and below
  • From: Paul Laudanski
• [DR001] AppleWebKit XMLHttpRequest arbitrary file disclosure vulnerability
  • From: David Remahl
• Re: Http Response Splitting Vulnerability In PHP-NUKE 7.6 and below
  • From: JeiAr
• Http Response Splitting Vulnerability In PHP-NUKE 7.6 and below
  • From: dcrab
• [Overflow.pl] Libsafe - Safety Check Bypass Vulnerability
  • From: Overflow.pl
• Re: gzip TOCTOU file-permissions vulnerability
  • From: Scott Gifford
• Mafia Blog
  • From: Francisco Alisson
• Re: gzip TOCTOU file-permissions vulnerability
  • From: Peter J. Holzer
• [ECHO_ADV_12$2005] Vulnerabilities in sphpblog
  • From: echo staff
• Vulnerabilities in sphpblog
  • From: echo staff
• [ GLSA 200504-14 ] monkeyd: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• Enumeration of AS/400 users and their status via POP3
  • From: Shalom Carmel
• Re: gzip TOCTOU file-permissions vulnerability
  • From: devnull
• Arbitrary file overwrite possible by Musicmatch ActiveX control
  • From: Hyperdose Security
• myBloggie 2.1.1
  • From: Francisco Alisson
• Dameware NT Utilities and MiniRemote Control <= 4.9 vulnerability
  • From: Jordi Corrales
• [SECURITY] [DSA 708-1] New PHP3 packages fix denial of service
  • From: Martin Schulze
• [Overflow.pl] GOCR - Multiple vulnerabilities
  • From: Overflow.pl
• windux-linux-gui-rainbow-lanman-cracker released
  • From: Philippe Oechslin
• [ GLSA 200504-13 ] OpenOffice.Org: DOC document Heap Overflow
  • From: Sune Kloppenborg Jeppesen
• [SECURITY] [DSA 709-1] New libexif packages fix arbitrary code execution
  • From: Martin Schulze
• Re: gzip TOCTOU file-permissions vulnerability
  • From: Theodor Milkov
• Improper log file storage in Musicmatch software
  • From: Hyperdose Security
• FreeBSD Security Advisory FreeBSD-SA-05:04.ifconf
  • From: FreeBSD Security Advisories
• [USN-112-1] PHP4 vulnerabilities
  • From: Martin Pitt
• [USN-111-1] Squid vulnerability
  • From: Martin Pitt
• Re: gzip TOCTOU file-permissions vulnerability
  • From: Derek Martin
• Re: bzip2 TOCTOU file-permissions vulnerability
  • From: Steve Grubb
• Re: gzip TOCTOU file-permissions vulnerability
  • From: Steve Grubb
• Trusted Site Cross Site Scripting Elevation of Privilege in Musicmatch
  • From: Hyperdose Security
• Trojan file issue in Musicmatch software
  • From: Hyperdose Security
• RE: gzip TOCTOU file-permissions vulnerability
  • From: Mark Senior
• Re: gzip TOCTOU file-permissions vulnerability
  • From: Derek Martin
• Multiple vulnerabilities in Yager 5.24
  • From: Luigi Auriemma
• Re: serendipity SQL Injection vulnerability
  • From: sebastian
• Multiple multiple sql injection/errors and xss vulnerabilities in OneWorldStore
  • From: dcrab
• BCS Asia 2005 Slides and pictures
  • From: Anthony Zboralski
• Re: Security Contact for NetApp ?
  • From: Antonio Varni
• Computer Associates BrightStor ARCserve Backup and BrightStor Enterprise Backup UniversalAgent buffer overflow vulnerability
  • From: Williams, James K
• Security Contact for NetApp ?
  • From: Fabrice Marie
• sumus[v0.2.2]: (httpd) remote buffer overflow exploit.
  • From: Vade 79
• All4WWW-Homepagecreator Remote Command Execution
  • From: Francisco Alisson
• MDKSA-2005:071 - Updated gaim packages fix multiple vulnerabilities
  • From: Mandriva Security Team
• Re: gzip TOCTOU file-permissions vulnerability
  • From: psz
• Internet Explorer wininet.dll URL parsing memory corruption technical details
  • From: 3APA3A
• [ GLSA 200504-12 ] rsnapshot: Local privilege escalation
  • From: Thierry Carrez
• serendipity SQL Injection vulnerability
  • From: kreon
• Re: gzip TOCTOU file-permissions vulnerability
  • From: Joey Hess
• Windows kernel overflow fixed
  • From: NGSSoftware Insight Security Research
• [ GLSA 200504-11 ] JunkBuster: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• Multiple Sql injection and XSS vulnerabilities in phpBB Plus v.1.52 and below and some of its modules.
  • From: dcrab
• Details and PoC for MS05-020 MSIE DHTML Object handling vulnerabilities
  • From: Berend-Jan Wever
• Re: gzip TOCTOU file-permissions vulnerability
  • From: Peter J. Holzer
• Re: gzip TOCTOU file-permissions vulnerability
  • From: Derek Martin
• LG U8120 Mobile Phone Denial of Service
  • From: Luca Ercoli
• HTTP RESPONSE SPLITTING by Diabolic Crab
  • From: dcrab
• [ GLSA 200504-10 ] Gld: Remote execution of arbitrary code
  • From: Sune Kloppenborg Jeppesen
• ms05016 POC
  • From: zwell zwell
• MDKSA-2005:070 - Updated MySQL packages fix vulnerability
  • From: Mandrakelinux Security Team
• [SECURITY] [DSA 706-1] New axel packages fix arbitrary code execution
  • From: Martin Schulze
• NetManage RUMBA 7.4 Profile Handling Multiple Buffer Overflow Vulnerabilities
  • From: Bahaa Naamneh
• [SECURITY] [DSA 707-1] New mysql packages fix several vulnerabilities
  • From: Martin Schulze
• cpio TOCTOU file-permissions vulnerability
  • From: Imran Ghory
• IBM WebSphere Widespread configuration JSP disclosure
  • From: SPI Labs
• Multiple High Risk flaws fixed in Oracle
  • From: NGSSoftware Insight Security Research
• Multiple medium risk flaws fixed in new version of PHP (late advisory)
  • From: NGSSoftware Insight Security Research
• Gld 1.5 released (security fix)
  • From: Salim Gasmi
• Patch available for critical Veritas i3 Server vulnerability
  • From: NGSSoftware Insight Security Research
• zOOM Media Gallery - Simple SQL Injection discovery
  • From: Andreas Constantinides
• 'Widcomm BTW (Microsoft Windows BT stack) Directory Transversal'
  • From: KF (lists)
• Re: gzip TOCTOU file-permissions vulnerability
  • From: Martin Pitt
• GLD (Greylisting daemon for Postfix) multiple vulnerabilities.
  • From: dong-hun you
• WordPress XSS and HTML injection
  • From: Nicolas Montoza
• RE: iDEFENSE Security Advisory 04.08.05: Microsoft Multiple E-Mail Client Address Spoofing Vulnerability
  • From: Larry Seltzer
• Window Washer 6.0: False Sense of Security
  • From: WBG Links
• DoKuWiki file-upload vulnerabilities
  • From: kreon
• Re: Sql injection, xss and path disclosure vulnerabilities in PostNuke 0.760-RC3
  • From: Maksymilian Arciemowicz
• JavaMail allows directory traversal in attachments
  • From: Rafael San Miguel Carrasco
• [ GLSA 200504-09 ] Axel: Vulnerability in HTTP redirection handling
  • From: vorlon
• QuickTime for Windows malformed GIF DoS
  • From: liquid
• Re: Sql injection, xss and path disclosure vulnerabilities in PostNuke 0.760-RC3
  • From: Dionysios G. Synodinos
• Centra 7 XSS Exploit
  • From: Clorox
• Re: [SECURITYREASON.COM] PhpNuke 7.6=>x Multiple vulnerabilities cXIb8O3.12
  • From: Paul Laudanski
• Remote Buffer Overflow in Lotus Domino
  • From: Next Generation Insight Security Research (NGS Software)
• eGroupWare Leaks Files
  • From: Gerald Quakenbush
• IRM 011: Sygate,Security Agent (Sygate Secure Enterprise) Fail Open DoS
  • From: IRM Advisories
• iDEFENSE Security Advisory 04.12.05: Microsoft Internet Explorer DHTML Engine Race Condition Vulnerability
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 04.12.05: Microsoft Windows Internet Explorer Long Hostname Heap Corruption Vulnerability
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 04.12.05: Microsoft MSHTA Script Execution Vulnerability
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 04.12.05: Microsoft Windows CSRSS.EXE Stack Overflow Vulnerability
  • From: iDEFENSE Labs
• Sql injection in jPortal version 2.3.1 (module banner)
  • From: Marcin "CiNU5" Krupowicz
• WebCT 4.1 vulnerable to XSS attacks
  • From: lacertosum
• 7a69Adv#23 - Jar tool directory transversal vulnerability
  • From: Pluf
• Microsoft Jet (msjet40.dll) Exploit
  • From: Stuart Pearson
• rsnapshot Security Advisory 001
  • From: security
• rpdump TOCTOU file-permissions vulnerability
  • From: Imran Ghory
• XV multiple buffer overflows (update)
  • From: Greg Roelofs
• AzDGDatingPlatinum multiple vulnerabilities
  • From: kre0n
• Directory transversal, sql injection and xss vulnerabilities in RadBids Gold v2
  • From: dcrab
• Sql injection in jPortal version 2.3.1 (module banner)
  • From: Marcin "CiNU5" Krupowicz
• [WHITEPAPER] Bugger The Debugger
  • From: Brett Moore
• Microsoft Windows image rendering DoS vuln
  • From: Andrew
• RE: Miranda IM and Miranda Installer Let Local Users Execute Arbitrary Code
  • From: Richard Stanway
• OpenOffice DOC document Heap Overflow
  • From: lee xiaojun
• Invision board 1.3.1 and below are vulnerable to a sql injection vulnerability [PATCH INCLUDED]
  • From: dcrab
• [ GLSA 200504-08 ] phpMyAdmin: Cross-site scripting vulnerability
  • From: Luke Macken
• Zone-H 2004 statistics are ready to be downloaded
  • From: Gerardo Astharot Di Giacomo
• iDEFENSE Security Advisory 04.11.05: Computer Associates BrightStor ARCserve Backup UniversalAgent Buffer Overflow
  • From: iDEFENSE Labs
• Miranda IM and Miranda Installer Let Local Users Execute Arbitrary Code
  • From: Kozan
• ================================ GNU Core Utilities race condition file-permissions vulnerability ================================ Software: mkdir, mknod, mkfifo Version: Part of GNU Core Utilities 5.2.1 Software URL: <http://www.gnu.org/software/cor
  • From: Imran Ghory
• Re: Microsoft Explorer Denial of Service
  • From: Luca Ercoli
• TowerBlog <= 0.6 Admin Account View [x0n3-h4ck]
  • From: CorryL
• Multiple ModernBill 4.3.0 And Earlier Vulnerabilities
  • From: GulfTech Security Research
• SUSE Security Announcement: various KDE security problems (SUSE-SA:2005:022)
  • From: Marcus Meissner
• OpenText FirstClass 8.0 Client Arbitrary File Execution
  • From: dila
• UPDATE: [ GLSA 200503-35 ] Smarty: Template vulnerability
  • From: Thierry Carrez
• [ GLSA 200504-07 ] GnomeVFS, libcdaudio: CDDB response overflow
  • From: Thierry Carrez
• [USN-110-1] Linux kernel vulnerabilities
  • From: Martin Pitt
• UnixWare 7.1.4 UnixWare 7.1.3 UnixWare 7.1.1 : telnet client multiple issues
  • From: please_reply_to_security
• How to Report a Security Vulnerability to Microsoft
  • From: Microsoft Security Response Center
• iDEFENSE Security Advisory 04.08.05: Microsoft Multiple E-Mail Client Address Spoofing Vulnerability
  • From: iDEFENSE Labs
• Double Choco Latte Remote Code Execution
  • From: JeiAr
• Pafiledb ACTION Parameter XSS
  • From: tom cruise
• PunBB <= 1.2.4 - change email to become admin exploit
  • From: exploits@xxxxxxxxxxx
• phpBB Upload Script "up.php" Arbitrary File Upload
  • From: Status-x
• MDKSA-2005:069 - Updated gdk-pixbuf packages fix vulnerability
  • From: Mandrakelinux Security Team
• MDKSA-2005:068 - Updated gtk+2.0 packages fix vulnerability
  • From: Mandrakelinux Security Team
• MacOSX Java Runtime Environment Remote Denial-of-Service (DoS) Vulnerability
  • From: Marc Schoenefeld
• Sql injection, xss and path disclosure vulnerabilities in PostNuke 0.760-RC3
  • From: dcrab
• MDKSA-2005:067 - Updated sharutils packages fix multiple vulnerabilities
  • From: Mandrakelinux Security Team
• OpenServer 5.0.6 OpenServer 5.0.7 : cscope local attacker can remove arbitrary files
  • From: please_reply_to_security
• UnixWare 7.1.4 : cdrecord local root exploit
  • From: please_reply_to_security
• UnixWare 7.1.4 : libtiff Multiple vulnerabilities
  • From: please_reply_to_security
• UnixWare 7.1.4 UnixWare 7.1.3 UnixWare 7.1.1 : CDE dtlogin unspecified double free
  • From: please_reply_to_security
• OpenServer 5.0.6 OpenServer 5.0.7 : termsh atcronsh auditsh environment buffer overflows
  • From: please_reply_to_security
• Macromedia Security Bulletin - ColdFusion MX 6.1
  • From: Macromedia Security Zone
• [SECURITYREASON.COM] phpnuke 7.6 Multiple vulnerabilities in Web_Links Module cXIb8O3.14
  • From: Maksymilian Arciemowicz
• [SECURITYREASON.COM] phpnuke 7.6 Multiple vulnerabilities in Downloads Module cXIb8O3.13
  • From: Maksymilian Arciemowicz
• iDEFENSE Security Advisory 04.07.05: SGI IRIX gr_osview File Overwrite Vulnerability
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 04.07.05: SGI IRIX gr_osview Information Disclosure Vulnerability
  • From: iDEFENSE Labs
• Re: crontab from vixie-cron allows read other users crontabs
  • From: Gadi Evron
• Re: crontab from vixie-cron allows read other users crontabs
  • From: David Malone
• [SIG^2 G-TEC] SurgeFTP LEAK Command Denial-Of-Service Vulnerability
  • From: chewkeong
• Re: [ GLSA 200503-12 ] Hashcash: Format string vulnerability
  • From: Adam Back
• [ GLSA 200504-06 ] sharutils: Insecure temporary file creation
  • From: Luke Macken
• RE: [NOBYTES.COM: #6] CubeCart 2.0.6 - Information Disclosure
  • From: John Cobb
• RE: [NOBYTES.COM: #6] CubeCart 2.0.6 - Information Disclosure
  • From: Ravish Ahuja
• Re: OSX - trojan apps can bypass authentication controls and gain root privilages
  • From: KF (lists)
• RE: PayPal "security" measures
  • From: McAllister, Andrew
• [waraxe-2005-SA#041] - Critical Sql Injection in PhpNuke 6.x-7.6 Top module
  • From: Janek Vind
• Re: PayPal "security" measures
  • From: sh0rtie
• LiteCommerce Sql injection and reveling errors vulnerability
  • From: dcrab
• [NOBYTES.COM: #6] CubeCart 2.0.6 - Information Disclosure
  • From: John Cobb
• iDEFENSE Security Advisory 04.06.05: IBM Lotus Domino Server Web Service DoS Vulnerability
  • From: iDEFENSE Labs
• Re: Microsoft Explorer Denial of Service
  • From: Des Ward
• Cisco Security Advisory: Vulnerabilities in Cisco IOS Secure Shell Server
  • From: Cisco Systems Product Security Incident Response Team
• RE: Microsoft Explorer Denial of Service
  • From: Larry Seltzer
• Re: crontab from vixie-cron allows read other users crontabs
  • From: Richard Moore
• [USN-108-1] GDK vulnerability
  • From: Martin Pitt
• [ GLSA 200504-04 ] mit-krb5: Multiple buffer overflows in telnet client
  • From: Thierry Carrez
• FreeBSD Security Advisory FreeBSD-SA-05:03.amd64
  • From: FreeBSD Security Advisories
• Active Auction House has multiple Sql injection, error and XSS vulnerabilities
  • From: dcrab
• OSX - trojan apps can bypass authentication controls and gain root privilages
  • From: bert
• Cisco Security Advisory: Vulnerabilities in the Internet Key Exchange Xauth Implementation
  • From: Cisco Systems Product Security Incident Response Team
• runcms/e-xoops 1.1A and below file upload vulnerability
  • From: pokley
• Microsoft Explorer Denial of Service
  • From: Luca Ercoli
• drone armies C&C report - March/2005
  • From: Gadi Evron
• [USN-109-1] MySQL vulnerability
  • From: Martin Pitt
• [ GLSA 200504-05 ] Gaim: Denial of Service issues
  • From: Luke Macken
• crontab from vixie-cron allows read other users crontabs
  • From: Karol Więsek
• MailEnable Smtpd remote Dos [x0n3-h4ck]
  • From: CorryL
• iDEFENSE Security Advisory 04.05.05: Computer Associates eTrust Intrusion Detection System CPImportKey DoS
  • From: iDEFENSE Labs
• [OpenPKG-SA-2005.005] OpenPKG Security Advisory (imapd)
  • From: OpenPKG
• Sybase ASE Multiple Security Issues (#NISR05042005)
  • From: NGSSoftware Insight Security Research
• [USN-107-1] racoon vulnerability
  • From: Martin Pitt
• [USN-106-1] Gaim vulnerabilities
  • From: Martin Pitt
• Sanboxed browsing and authentication credentials
  • From: Max Moser
• [USN-105-1] PHP4 vulnerabilities
  • From: Martin Pitt
• SQL INJECTION in DLMan Pro. PHPBB Mod.
  • From: rock master
• iDEFENSE Labs Releases OllyDbg Breakpoint Manager
  • From: iDEFENSE Labs
• TSLSA-2005-0011 - kernel
  • From: Trustix Security Advisor
• FreeBSD Security Advisory FreeBSD-SA-05:02.sendfile
  • From: FreeBSD Security Advisories
• [SECURITYREASON.COM] Full path disclosure and XSS in PHPNuke part 3
  • From: sp3x
• Logics Software BS2000 Host to Web Client ALL PLATFORMS
  • From: Román Ramírez
• SQL INJECTION in LinksLinks Pro. PHPBB Mod.
  • From: rock master
• gzip TOCTOU file-permissions vulnerability
  • From: Imran Ghory
• Authenticaion bypass, Directory transversal and XSS vulnerabilities in PayProCart 3.0 - Profitcode Software
  • From: dcrab
• RE: PayPal "security" measures
  • From: McAllister, Andrew
• Re: AW: PayPal "security" measures
  • From: Rainer Duffner
• RE: AW: PayPal "security" measures
  • From: J B
• Re: AW: PayPal 'security' measures
  • From: mike
• phpMyAdmin Cross-site Scripting Vulnerability
  • From: Oriol Torrent Santiago
• Re: AW: PayPal "security" measures
  • From: David F. Russell
• Re: Solaris 10 Containers / Zones Security Flaw
  • From: Darren Reed
• Re: [HV-HIGH] Microsoft Jet DB engine vulnerabilities
  • From: Son SonOfLilit
• Disclosure of AS/400 user accounts via the FTP server
  • From: Shalom Carmel
• [ GLSA 200504-03 ] Dnsmasq: Poisoning and Denial of Service vulnerabilities
  • From: Thierry Carrez
• SonicWALL SOHO/10 - XSS vulnerability
  • From: Oliver Karow
• [USN-104-1] unshar vulnerability
  • From: Martin Pitt
• [CLA-2005:946] Conectiva Security Announcement - MySQL
  • From: Conectiva Updates
• ArGoSoft FTP Server is still vuln + PoC exploit code (IHSTeam)
  • From: c0d3r
• [SECURITY] [DSA 704-1] New remstats packages fix several vulnerabilities
  • From: Martin Schulze
• Full path disclosure and XSS in PHPNuke
  • From: SecurityReason
• [SECURITYREASON.COM] PhpNuke 7.6=>x Multiple vulnerabilities cXIb8O3.12
  • From: Maksymilian Arciemowicz
• possible privilege escalation on Sco OpenServer 5.0.7
  • From: pasquale minervini
• Re: [HV-HIGH] Microsoft Jet DB engine vulnerabilities
  • From: Steve Shockley
• [SECURITY] [DSA 705-1] New wu-ftpd packages fix denial of service
  • From: Martin Schulze
• Re: [HV-HIGH] Microsoft Jet DB engine vulnerabilities
  • From: Thor (Hammer of God)
• Microsoft Windows Internet Name Service (WINS) Remote Heap Overflow Exploit
  • From: class101@xxxxxxxxxxxxx
• Re: Solaris 10 Containers / Zones Security Flaw
  • From: jim allan
• AW: PayPal "security" measures
  • From: Michael Rueve
• Local buffer overflow on Aeon<=0.2a
  • From: patr0n
• SUSE Security Announcement: kernel local privilege escalation (SUSE-SA:2005:021)
  • From: Marcus Meissner
• [ GLSA 200504-02 ] Sylpheed, Sylpheed-claws: Buffer overflow on message display
  • From: Thierry Carrez
• Re: bzip2 TOCTOU file-permissions vulnerability
  • From: Jason V. Miller
• Yet Another Forum.net XSS vulnerabilities
  • From: maty siman
• How to write remote exploits ( V. 1.1)
  • From: Sumy
• Re: [HV-HIGH] Microsoft Jet DB engine vulnerabilities
  • From: Denis Jedig
• AlstraSoft EPay Pro v2.0 has file include and multiple xss vulnerabilities
  • From: dcrab
• Re: Solaris 10 Containers / Zones Security Flaw
  • From: Jonathan Katz
• MDKSA-2005:065 - Updated ImageMagick packages fix multiple vulnerabilities
  • From: Mandrakelinux Security Team
• MDKSA-2005:066 - Updated grip packages fix vulnerability
  • From: Mandrakelinux Security Team
• Re: Solaris 10 Containers / Zones Security Flaw
  • From: Robert Escue
• RE: Microsoft Windows Server 2003 "Shell Folders" Directory Traversal Vulnerability
  • From: Eiji James Yoshida
• In-game server crash in Call of Duty 1.5b and United Offensive 1.51b
  • From: Luigi Auriemma
• In-game server buffer-overflow in Jedi Academy 1.011
  • From: Luigi Auriemma
• In-game players kicking in the Quake 3 engine
  • From: Luigi Auriemma
• Re: bzip2 TOCTOU file-permissions vulnerability
  • From: Steve Grubb
• multiple remote denial of service vulnerabilities in Gaim
  • From: Jean-Yves Lefort
• [ GLSA 200504-01 ] telnet-bsd: Multiple buffer overflows
  • From: Thierry Carrez
• Information leak in the Linux kernel ext2 implementation
  • From: Arkoon Security Team
• Solaris 10 Containers / Zones Security Flaw
  • From: jim allan
• (Paper) Programming: The Heart of Web Security
  • From: Sumy
• DMA[2005-0401a] - 'IVT BlueSoleil Directory Transversal'
  • From: KF (Lists)
• [USN-103-1] Linux kernel vulnerabilities
  • From: Martin Pitt
• Buffer Overflow within the RUMBA product
  • From: Bahaa Naamneh
• Re: [HV-HIGH] Microsoft Jet DB engine vulnerabilities
  • From: Thor (Hammer of God)
• Re: cPanel/WHM demo account problems
  • From: Darren
• [Hat-Squad Advisory] Bakbone NetVault Heap overflow Vulnerabilities
  • From: Hat-Squad Security Team
• PayPal "security" measures
  • From: Jeremy Rasmussen
• iDEFENSE Security Advisory 03.31.05: PHP getimagesize() Multiple Denial of Service Vulnerabilities
  • From: iDEFENSE Labs
• [SECURITY] [DSA 702-1] New ImageMagick packages fix several vulnerabilities
  • From: Martin Schulze
• [SECURITY] [DSA 703-1] New krb5 packages fix arbitrary code execution
  • From: Martin Schulze
• Security holes in the iTunes Music Store
  • From: Charles M. Hannum
• Reverse shell using netcat on AS/400
  • From: Shalom Carmel
• [HV-HIGH] Microsoft Jet DB engine vulnerabilities
  • From: vuln
• (PAPER) "Vision of danger: The Firefox Greasemonkey"
  • From: Piotr Bania
• Re: cPanel/WHM demo account problems
  • From: Beau Henderson
• RE: eBay Account Phishing with eBay Redirect - Ebay fixed this + related XSS hole
  • From: Rager, Anton (Anton)
• RE: Invision Power Board v2.0.3 XSS vulnerabilities
  • From: alex
• WindowsXP malformed .wmf files DoS
  • From: liquid
• Re: DoS of LAN via D-Link switches
  • From: Scott Nelson
• Re: Bay Technical Associates telnet server logon bypass
  • From: Michael Brennen
• MDKSA-2005:063 - Updated htdig packages fix vulnerability
  • From: Mandrakelinux Security Team
• Bay Technical Associates telnet server logon bypass
  • From: nolimit bugtraq
• MDKSA-2005:062 - Updated ipsec-tools packages fix vulnerability
  • From: Mandrakelinux Security Team
• MX Shop 1.1.1 and MX Kart 1.1.2 are vulnerable to multiple SQL injection vulnerabilities
  • From: dcrab
• [ GLSA 200503-37 ] LimeWire: Disclosure of sensitive information
  • From: Thierry Carrez
• MDKSA-2005:064 - Updated libexif packages fix vulnerability
  • From: Mandrakelinux Security Team
• [ GLSA 200503-36 ] netkit-telnetd: Buffer overflow
  • From: Thierry Carrez
• RE: Portcullis Security Advisory 05-011 ACPI 1.6 BIOS
  • From: Paul J Docherty
• Re: Portcullis Security Advisory 05-011 ACPI 1.6 BIOS
  • From: Chris Paget
• Vendor Response to Portculis Advisory 05-002: Spectrum Cash Receipting System
  • From: Paul J Docherty
• cPanel/WHM demo account problems
  • From: Richard Stanway
• Re: DoS of LAN via D-Link switches
  • From: Joel Maslak
• bzip2 TOCTOU file-permissions vulnerability
  • From: Imran Ghory
• [SECURITY] [DSA 701-1] New samba packages fix arbitrary code execution
  • From: Martin Schulze
• [CLA-2005:945] Conectiva Security Announcement - kernel
  • From: Conectiva Updates
• Multiple sql injection, and xss vulnerabilities in Pay pal Storefront
  • From: Diabolic Crab
• PaFileDB Version 3.1 and below are exploitable via a XSS and a SQL injection vulnerability
  • From: dcrab
• Re: Portcullis Security Advisory 05-011 ACPI 1.6 BIOS
  • From: Kurt Seifried
• [SECURITY] [DSA 700-1] New mailreader packages fix cross-site scripting vulnerability
  • From: Martin Schulze
• Re: Multiple Sql injection, and multiple XSS vulnerabilities in Photopost PHP Pro Photo Gallery Software.
  • From: dcrab
• Re: DoS of LAN via D-Link switches
  • From: Neil Watson
• RE: Portcullis Security Advisory 05-011 ACPI 1.6 BIOS
  • From: Paul J Docherty
• [ GLSA 200503-35 ] Smarty: Template vulnerability
  • From: Thierry Carrez
• Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerable to Crafted SSL Attack
  • From: Cisco Systems Product Security Incident Response Team
• MDKSA-2005:061 - Updated krb5 packages fix telnet client vulnerability
  • From: Mandrakelinux Security Team
• [PersianHacker.NET 200503-11]Ublog reload 1.0.4 and prior Multiple Vulnerbilities
  • From: PersianHacker Team
• Portcullis Security Advisory 05-011 ACPI 1.6 BIOS
  • From: Paul J Docherty
• Multiple phpCoin Vulnerabilities
  • From: GulfTech Security Research
• Re: DoS of LAN via D-Link switches
  • From: Tarmo Mamers
• Multiple XSS vulnerabilities in ACS Blog
  • From: Dan Crowley
• abuse & security issues > Israel
  • From: Gadi Evron
• Code insertion in Blogger comments
  • From: Antone Roundy
• RE: Multiple Sql injection, and multiple XSS vulnerabilities in Photopost PHP Pro Photo Gallery Software.
  • From: GulfTech Security Research
• [PersianHacker.NET 200503-12]Chatness 2.5.1 and prior XSS Vulnerabilities
  • From: PersianHacker Team
• Re: Security Flaw with Digital signatures in Microsoft Outlook
  • From: dori
• Re: iDEFENSE Security Advisory 03.28.05: Multiple Telnet Client slc_add_reply() Buffer Overflow Vulnerability
  • From: Ga=EBl?= Delalleau
• [SECURITY] [DSA 697-1] New netkit-telnet packages fix arbitrary code execution
  • From: Martin Schulze
• Code insertion in Blogger comments
  • From: Antone Roundy
• Multiple sql injection, and xss vulnerabilities in PortalApp
  • From: dcrab
• Invision Power Board v2.0.3 XSS vulnerabilities
  • From: hoang yen
• Re: iDEFENSE Security Advisory 03.28.05: Multiple Telnet Client slc_add_reply() Buffer Overflow Vulnerability
  • From: Tavis Ormandy
• Re: TCP timestamp & advanced fingerprinting
  • From: Erwan Arzur
• Multiple sql injection, and xss vulnerabilities in AspApp
  • From: dcrab
• directory traversal in FastStone 4in1 Browser 1.2
  • From: Donato Ferrante
• MITKRB5-SA-2005-001: buffer overflows in telnet client
  • From: Tom Yu
• RE: DoS of LAN via D-Link switches
  • From: David Gillett
• Multiple Sql injection, and multiple XSS vulnerabilities in Easy Community Management System Forum (E-XOOPS)
  • From: dcrab
• [SECURITY] [DSA 699-1] New netkit-telnet-ssl packages fix arbitrary code execution
  • From: Martin Schulze
• [USN-102-1] shar vulnerabilities
  • From: Martin Pitt
• Re: phishing sites report - March/2005
  • From: Gadi Evron
• THai's Shoutbox XSS (Spoofing URL) BUG
  • From: CorryL
• Re: phishing sites report - March/2005
  • From: Paul Laudanski
• [SECURITY] [DSA 698-1] New mc packages fix buffer overflow
  • From: Martin Schulze
• DoS of LAN via D-Link switches
  • From: Frank Bures
• Multiple Sql injection, and multiple XSS vulnerabilities in Photopost PHP Pro Photo Gallery Software
  • From: dcrab
• phishing sites report - March/2005
  • From: Gadi Evron
• Multiple XSS issues in Sun AnswerBook2
  • From: B00B00
• RE: Re: Symantec Antivirus client locally created scheduled scan is not running if the local console is logged off
  • From: Eitan Caspi
• Re: iDEFENSE Security Advisory 03.28.05: Multiple Telnet Client slc_add_reply() Buffer Overflow Vulnerability
  • From: Solar Designer
• Multiple XSS vulnerabilities in ACS Blog
  • From: Dan Crowley
• [USN-101-1] telnet vulnerabilities
  • From: Martin Pitt
• Re: smail remote and local root holes (really, it is exploitable)
  • From: sean
• Multiple Sql injection, and multiple XSS vulnerabilities in Easy Community Management System Forum (E-XOOPS)
  • From: dcrab
• local root security bug in linux >= 2.4.6 <= 2.4.30-rc1 and 2.6.x.y <= 2.6.11.5
  • From: advisories
• Multiple Sql injection, and multiple XSS vulnerabilities in Photopost PHP Pro Photo Gallery Software.
  • From: dcrab
• Multiple sql injection, and xss vulnerabilities in Vladersoft Shopping Cart v.3.0
  • From: dcrab
• Re: ZH2005-03SA -- multiple vulnerabilities in NukeBookmarks .6
  • From: Paul Laudanski
• Buffer-overflow in Tincat 2 minor than 2.0.28 (Sacred, Settlers 5 and others)
  • From: Luigi Auriemma
• [ GLSA 200503-34 ] mpg321: Format string vulnerability
  • From: Sune Kloppenborg Jeppesen
• [CLA-2005:942] Conectiva Security Announcement - ethereal
  • From: Conectiva Updates
• iDEFENSE Security Advisory 03.28.05: Multiple Telnet Client slc_add_reply() Buffer Overflow Vulnerability
  • From: iDEFENSE Labs
• iDEFENSE Security Advisory 03.28.05: Multiple Telnet Client env_opt_add() Buffer Overflow Vulnerability
  • From: iDEFENSE Labs
• FreeBSD Security Advisory FreeBSD-SA-05:01.telnet
  • From: FreeBSD Security Advisories
• Re: smail remote and local root holes (no, really ;-)
  • From: sean
• Brute-Force scanning the entire 32-bit IP space using Javascript.
  • From: cyber_flash
• RE: TCP timestamp & advanced fingerprinting
  • From: Bruce Klein
• Re: smail remote and local root holes (no, not really ;-)
  • From: Greg A. Woods
• Re: Secure Science issues preview of their upcoming block cipher
  • From: devnull
• Re: Security Flaw with Digital signatures in Microsoft Outlook
  • From: Anthony G. Atkielski
• File inclusion and XSS vulnerability in E-Store Kit-2 PayPal Edition
  • From: dcrab
• Re: New Whitepaper: Anti Brute Force Resource Metering
  • From: Luca Berra
• RE: [bugtraq] Security Flaw with Digital signatures in Microsoft Outlook
  • From: Lyal Collins
• QuickTime malformed JPEG buffer overflow
  • From: liquid
• AS/400 LDAP user accounts disclosure
  • From: Shalom Carmel
• ZH2005-03SA -- multiple vulnerabilities in NukeBookmarks .6
  • From: Gerardo Astharot Di Giacomo
• phpbb 2.0.13 Exploit (bug)
  • From: tOnk3r
• Re: Secure Science issues preview of their upcoming block cipher
  • From: Ralf-Philipp Weinmann
• TCP timestamp & advanced fingerprinting
  • From: Erwan Arzur
• [ GLSA 200503-33 ] IPsec-Tools: racoon Denial of Service
  • From: Matthias Geerdsen
• [ GLSA 200503-30 ] Mozilla Suite: Multiple vulnerabilities
  • From: Thierry Carrez
• Re: [FLSA-2005:2129] Updated mysql packages fix security issues
  • From: Ventsislav Genchev
• Re: [FLSA-2005:2129] Updated mysql packages fix security issues
  • From: Ventsislav Genchev
• [FLSA-2005:2268] Updated spamassassin package fixes security issues
  • From: Marc Deslauriers
• [FLSA-2005:2129] Updated mysql packages fix security issues
  • From: Marc Deslauriers
• [FLSA-2005:2155] Updated sharutils package fixes security issues
  • From: Marc Deslauriers
• Re: [bugtraq] Security Flaw with Digital signatures in Microsoft Outlook
  • From: Erwann ABALEA
• RE: Security Flaw with Digital signatures in Microsoft Outlook
  • From: Adrian Floarea
• Re: Secure Science issues preview of their upcoming block cipher
  • From: David Covin
• Re: Secure Science issues preview of their upcoming block cipher
  • From: Jerrold Leichter
• Netcomm 1300NB DSL Modem Denial of Service
  • From: Chris Rock
• smail remote and local root holes
  • From: sean
• RX250305 - OpenMosixView : Multiple Race conditions - advisory and exploit
  • From: rexolab
• Re: New Whitepaper: Anti Brute Force Resource Metering
  • From: Amit Klein (AKsecurity)
• Re: New Whitepaper: Anti Brute Force Resource Metering
  • From: Joachim Schipper
• phpMyDirectory 10.1.3-rel Cross site scripting
  • From: mircia mircia
• Re: Secure Science issues preview of their upcoming block cipher
  • From: Adam Shostack
• Security Flaw with Digital signatures in Microsoft Outlook
  • From: Roberto Franceschetti
• Which anti-spyware cleaner is the best?
  • From: Paul Laudanski
• LogicLibrary BugScan VSR,Trillian 2.0, 3.0 and 3.1
  • From: Matt Hargett
• [ GLSA 200503-28 ] Sun Java: Web Start argument injection vulnerability
  • From: Thierry Carrez
• [ GLSA 200503-29 ] GnuPG: OpenPGP protocol attack
  • From: Thierry Carrez
• Re: Firescrolling 2 [Firefox 1.0.1]
  • From: John Madden
• Secure Science issues preview of their upcoming block cipher
  • From: BugTraq
• [USN-99-2] Fixed php4 packages for USN-99-1
  • From: Martin Pitt
• Re: New Whitepaper: Anti Brute Force Resource Metering
  • From: Jason W
• [USN-100-1] cdrecord vulnerability
  • From: Martin Pitt
• SUSE Security Announcement: MySQL vulnerabilities (SUSE-SA:2005:019)
  • From: Marcus Meissner
• SUSE Security Announcement: several kernel security problems (SUSE-SA:2005:018)
  • From: Marcus Meissner
• Oracle Reports Server 10g Vulnerable to XSS
  • From: Paolo Paolo
• Firescrolling 2 [Firefox 1.0.1]
  • From: mikx
• Hashcash in mail (was: New Whitepaper: Anti Brute Force Resource Metering)
  • From: Peter J. Holzer
• Black Hat Briefings & Trainings: Registration now open!
  • From: Jeff Moss
• Multiple vulnerabilities in Topic Calendar 1.0.1 for phpBB
  • From: Alberto Trivero
• RE: Details of Sybase ASE bugs withheld
  • From: Evans, Arian
• RE: Re: Symantec Antivirus client locally created scheduled scan is not running if the local console is logged off
  • From: Scrimsher, John P
• Re: [ISN] How To Save The Internet
  • From: Derek Martin
• RE: [ISN] How To Save The Internet
  • From: Arndt . WA
• [SECURITYREASON.COM] phpSysInfo 2.3 Multiple vulnerabilities cXIb8O3.11
  • From: Maksymilian Arciemowicz
• RE: Java Web Start argument injection vulnerability
  • From: James C Slora Jr
• RE: Possible windows+python bug
  • From: Peter Oswald
• Vortex Portal
  • From: Francisco Alisson
• Re: New Whitepaper: Anti Brute Force Resource Metering
  • From: Gunter Ollmann
• Re: osCommerce File Manager Directory Traversal Vulnerability
  • From: Aikanáro Calaelen
• Interspire ArticleLive 2005 (php version) is vulnerable to XSS
  • From: mircia mircia
• Re: [ISN] How To Save The Internet
  • From: Thor (Hammer of God)
• Re: Possible windows+python bug
  • From: Kinnell
• Notacon: Apr. 8-10, 2005 in Cleveland, OH
  • From: Froggy
• SUSE Security Announcement: ImageMagick problems (SUSE-SA:2005:017)
  • From: Marcus Meissner
• Re: Details of Sybase ASE bugs withheld
  • From: Jay Libove
• Backdoors in AS/400 emulations allow the server to attack connected PC workstations
  • From: Shalom Carmel
• Re: Possible windows+python bug
  • From: liquid
• Re: [VulnWatch] Details of Sybase ASE bugs withheld
  • From: Peter J. Holzer
• RE: [VulnWatch] Details of Sybase ASE bugs withheld
  • From: http-equiv@xxxxxxxxxx
• Re: New Whitepaper: Anti Brute Force Resource Metering
  • From: Peter J. Holzer
• Re: [VulnWatch] Details of Sybase ASE bugs withheld
  • From: Simple Nomad
• [SIG^2 G-TEC] SurgeMail Webmail Attachment Upload and XSS Vulnerabilities
  • From: chewkeong
• Security Development Lifecycle Whitepaper Available
  • From: Michael Howard
• Re: Re: Symantec Antivirus client locally created scheduled scan is not running if the local console is logged off
  • From: Eitan Caspi
• Re: [ISN] How To Save The Internet
  • From: Jason Coombs
• root-equivalent groups
  • From: psz
• Re: Possible windows+python bug
  • From: azurIt
• RE: [VulnWatch] Details of Sybase ASE bugs withheld
  • From: Marchand, Tom
• Re: Possible windows+python bug
  • From: Neil Schemenauer
• RE: [VulnWatch] Details of Sybase ASE bugs withheld
  • From: Chris Wysopal
• Re: [VulnWatch] Details of Sybase ASE bugs withheld
  • From: sean
• RE: [ISN] How To Save The Internet
  • From: David Gillett
• RE: [VulnWatch] Details of Sybase ASE bugs withheld
  • From: Marchand, Tom
• osCommerce File Manager Directory Traversal Vulnerability
  • From: Megasky
• Black Hat Briefings & Trainings: Registration now open!
  • From: Jeff Moss
• Nortel VPN Client Issue: Clear-text password stored in memory
  • From: Roy Hills
• Re: New Whitepaper: Anti Brute Force Resource Metering
  • From: Amit Klein (AKsecurity)
• [ Positive Technologies #SA] Phorum "location" HTTP Response Splitting Vulnerability
  • From: Alexander Anisimov
• Possible windows+python bug
  • From: liquid
• Re: Symantec Antivirus client locally created scheduled scan is not running if the local console is logged off
  • From: BoneMachine
• [SECURITY] [DSA 696-1] New perl packages fix privilege escalation
  • From: Martin Schulze
• RUXCON 2005 Call for Papers
  • From: RUXCON Call for Papers
• Mac OSX[CF_CHARSET_PATH]: local root exploit.
  • From: Vade 79
• Kayako eSupport Cross Site Scripting
  • From: GulfTech Security Research
• MDKSA-2005:060 - Updated MySQL packages fix multiple vulnerabilities
  • From: Mandrakelinux Security Team
• Re: Thoughts and a possible solution on homograph attacks
  • From: Nick FitzGerald
• Re: [ISN] How To Save The Internet
  • From: Jason Coombs
• SecurityForest Exploitation Framework Beta has been released!
  • From: Alon Swartz
• Re: [VulnWatch] Details of Sybase ASE bugs withheld
  • From: sean
• iDEFENSE Security Advisory 03.21.05: Mac OS X CF_CHARSET_PATH Buffer Overflow Vulnerability
  • From: iDefense Customer Service
• Re: [VulnWatch] Details of Sybase ASE bugs withheld
  • From: David Litchfield
• Re: [VulnWatch] Details of Sybase ASE bugs withheld
  • From: Halvar Flake
• New Whitepaper: Anti Brute Force Resource Metering
  • From: Gunter Ollmann (NGS)
• phpMyFamily 1.4.0 SQL vulnerabilities
  • From: kre0n
• Details of Sybase ASE bugs withheld
  • From: NGSSoftware Insight Security Research
• [ GLSA 200503-25 ] OpenSLP: Multiple buffer overflows
  • From: Thierry Carrez
• [ GLSA 200503-27 ] Xzabite dyndnsupdate: Multiple vulnerabilities
  • From: Thierry Carrez
• Re: Thoughts and a possible solution on homograph attacks
  • From: Duncan Simpson
• phpMyFamily 1.4.0 SQL vulnerabilities
  • From: kreon
• Re: [PersianHacker.NET 200503-10]PHP-Fusion v5.01 Html Injection Vulnerability
  • From: Sheldon King
• -==PVDasm Long Name Debug Vulnerability==-
  • From: HaCkZaTaN
• Fw: [PersianHacker.NET 200503-10]PHP-Fusion v5.01 Html Injection Vulnerability
  • From: Sheldon King
• Fw: [PersianHacker.NET 200503-10]PHP-Fusion v5.01 Html Injection Vulnerability
  • From: Sheldon King
• Symantec Antivirus client locally created scheduled scan is not running if the local console is logged off
  • From: Eitan Caspi
• [SECURITY] [DSA 695-1] New xli packages fix several vulnerabilities
  • From: Martin Schulze
• TSL-2005-0009 - multi
  • From: Trustix Security Advisor
• 2 vulnerabilities in BetaParticle
  • From: farhad koosha
• [CLA-2005:940] Conectiva Security Announcement - curl
  • From: Conectiva Updates
• -==CoolForum Path Disclosure & Possible SQL Injection==-
  • From: HaCkZaTaN
• [ GLSA 200503-26 ] Sylpheed, Sylpheed-claws: Message reply overflow
  • From: Luke Macken
• Re: Few remote bugs in zPanel
  • From: Kris Anderson
• [ GLSA 200503-24 ] LTris: Buffer overflow
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200503-23 ] rxvt-unicode: Buffer overflow
  • From: Sune Kloppenborg Jeppesen
• OllyDbg long process Module debug Vulnerability
  • From: ATmaCA ATmaCA
• [PersianHacker.NET 200503-10]PHP-Fusion v5.01 Html Injection Vulnerability
  • From: PersianHacker Team
• Ciamos Highlight.php Security Hole(IHS)
  • From: Majid NT
• Ciamos Installation path(IHS)
  • From: Majid NT
• [ GLSA 200503-22 ] KDE: Local Denial of Service
  • From: Sune Kloppenborg Jeppesen
• RE: [phpbb <= 2.0.13 full path disclosure & directory listing]
  • From: Paul S. Owen
• IceCast up to v2.20 multiple vulnerabilities
  • From: Patrick
• Re: SAV9 Functionality Hole - misses virus files
  • From: secure
• [phpbb <= 2.0.13 full path disclosure & directory listing]
  • From: JoCaNoR SeCuRiTy TeaM
• Java Web Start argument injection vulnerability
  • From: Jouko Pynnonen
• PHP-Post Exploit
  • From: Terencentanio Enache
• runcms highlight.php hole
  • From: Majid NT
• runcms installation path
  • From: Majid NT
• [USN-99-1] PHP4 vulnerabilities
  • From: Martin Pitt
• Social Engineering: You Have Been A Victim
  • From: Paul Laudanski
• Re: SAV9 Functionality Hole - misses virus files
  • From: patrickwm71
• Re: Linux ISO9660 handling flaws
  • From: Dan Yefimov
• possible SQL injection in Subdreamer
  • From: GHC team
• myPHP Forum v1, 2 & 3
  • From: Terencentanio Enache
• [PersianHacker.NET 200503-09]PHPOpenChat v3.x XSS Multiple Vulnerability
  • From: PersianHacker Team
• Security Contact at RSA?
  • From: Gary O'leary-Steele
• Re: [Full-disclosure] Social Engineering: You Have Been A Victim
  • From: Ron DuFresne
• Cain & Abel PSK Sniffer Heap overflow
  • From: Gary O'leary-Steele
• Re: Windows Security Checklists - 10 Parts
  • From: Paul Laudanski
• Linux ISO9660 handling flaws
  • From: Michal Zalewski
• Kevin Walsh: LimeWire Gnutella client two vulnerabilities
  • From: Ill will
• LLSSRV Redux
  • From: Dave Aitel
• [USN-98-1] OpenSLP vulnerabilities
  • From: Martin Pitt
• Another includer.cgi problem?
  • From: cout
• Re: PlatinumFTPserver format string vulnerability ( IHSTeam )
  • From: Gary H. Jones II
• MDKSA-2005:058 - Updated kdelibs packages fix multiple vulnerabilities
  • From: Mandrakelinux Security Team
• PHP mcNews arbitrary file inclusion
  • From: Jonathan Whiteley
• XSS in ACS blog
  • From: farhad koosha
• Windows 2000 GDI32.DLL GetEnhMetaFilePaletteEntries() API specially crafted EMF file DOS vulnerability
  • From: Hongzhen Zhou
• Re: [Full-disclosure] Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, and can also lead to bypass AV scanning
  • From: Tomasz Papszun
• [CLA-2005:937] Conectiva Security Announcement - cyrus-imapd
  • From: Conectiva Updates
• See-security Advisory: Format string vulnerability in MailEnable 1.8
  • From: a a
• [ GLSA 200503-21 ] Grip: CDDB response overflow
  • From: Luke Macken
• MDKSA-2005:059 - Updated evolution packages fix crasher
  • From: Mandrakelinux Security Team
• LLSSRV Clarifications <Immunity>
  • From: Dave Aitel
• Re: GoodTech Telnet Server Buffer Overflow Vulnerability [EXPLOIT]
  • From: cybertronic
• Re: Av issues
  • From: bipin gautam
• Re: Thoughts and a possible solution on homograph attacks
  • From: Riccardo Murri
• RE: Denial of Service Vulnerability in MySQL Server for Windows
  • From: BugTrap
• [USN-96-1] mySQL vulnerabilities
  • From: Martin Pitt
• [ GLSA 200503-19 ] MySQL: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• RE: SAV9 Functionality Hole - misses virus files
  • From: batchelornpe
• ADVISORY: DataRescue Interactive Disassembler Pro Debugger Format String Vulnerability
  • From: Piotr Bania
• [ GLSA 200503-20 ] curl: NTLM response buffer overflow
  • From: Sune Kloppenborg Jeppesen
• Servers Alive: Local Privilege Escalation
  • From: Michael Starks
• ASPjar Tell-a-Friend
  • From: farhad koosha
• [USN-97-1] libxpm vulnerability
  • From: Martin Pitt
• PlatinumFTPserver format string vulnerability ( IHSTeam )
  • From: c0d3r
• SAV9 Functionality Hole - misses virus files
  • From: secure
• Re: [Full-disclosure] Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, and can also lead to bypass AV scanning
  • From: Rodrigo Barbosa
• [CLA-2005:934] Conectiva Security Announcement - kdenetwork
  • From: Conectiva Updates
• Re: Thoughts and a possible solution on homograph attacks
  • From: khockenb
• SUSE Security Announcement: multiple Mozilla Firefox vulnerabilities (SUSE-SA:2005:016)
  • From: Marcus Meissner
• MDKSA-2005:057 - Updated gnupg packages fix vulnerability
  • From: Mandrakelinux Security Team
• Multiple KDE Security Advisories (2005-03-16)
  • From: Waldo Bastian
• MDKSA-2005:056 - Updated koffice packages fix vulnerabilities on 64 bit platforms
  • From: Mandrakelinux Security Team
• MDKSA-2005:055 - Updated openslp packages fix multiple vulnerabilities
  • From: Mandrakelinux Security Team
• MDKSA-2005:054 - Updated cyrus-sasl packages fix vulnerability
  • From: Mandrakelinux Security Team
• MDKSA-2005:053 - Updated ethereal packages fix multiple vulnerabilities
  • From: Mandrakelinux Security Team
• Re: Thoughts and a possible solution on homograph attacks
  • From: Valdis . Kletnieks
• Re: Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, and can also lead to bypass AV scanning
  • From: Thierry Zoller
• Re: Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, and can also lead to bypass AV scanning
  • From: Dr. Peter Bieringer
• RE: SAV9 Functionality Hole - misses virus files
  • From: Dewyngaert Brian Contr ANG/C4
• GoodTech Telnet Server Buffer Overflow Vulnerability
  • From: Komrade
• Re: Thoughts and a possible solution on homograph attacks
  • From: Riccardo Murri
• Re: [Full-disclosure] Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, and can also lead to bypass AV scanning
  • From: bipin gautam
• Re: [Full-disclosure] Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, and can also lead to bypass AV scanning
  • From: Dr. Peter Bieringer
• Re: [Full-disclosure] Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, and can also lead to bypass AV scanning
  • From: Rodrigo Barbosa
• Re: SAV9 Functionality Hole - misses virus files
  • From: Ben Blakely
• RE: SAV9 Functionality Hole - misses virus files
  • From: Polazzo Justin
• [ISR] - Novell iChain Mini FTP Server Bruteforce Problem
  • From: Francisco Amato
• UPDATE: [ GLSA 200501-38 ] Perl: rmtree and DBI tmpfile vulnerabilities
  • From: Thierry Carrez
• [USN-95-1] Linux kernel vulnerabilities
  • From: Martin Pitt
• [ GLSA 200503-18 ] Ringtone Tools: Buffer overflow vulnerability
  • From: Luke Macken
• Re: Av issues
  • From: Yves Belle-Isle
• Denial of Service Vulnerability in MySQL Server for Windows
  • From: Luca Ercoli
• Re: SAV9 Functionality Hole - misses virus files
  • From: Harry Hoffman
• [ISR] Insecure communication and Reproduce the Session authentication
  • From: Francisco Amato
• [ISR] - Novell iChain Mini FTP Server Unauthorized Remote Path Disclosure Vulnerability
  • From: Francisco Amato
• [ISR] - Novell iChain Mini FTP Server Valid User Disclosure Vulnerability
  • From: Francisco Amato
• Virginity Security Advisory 2005-002 : Hola CMS - Another File destruction and System access
  • From: Virginity Security
• Few remote bugs in zPanel
  • From: Mik-
• Re: PlantinumFTP server <= 1.0.18 Remote DOS exploit
  • From: Gary H. Jones II
• SAV9 Functionality Hole - misses virus files
  • From: me3
• phpbb cookie admin access
  • From: pureone
• Re: Av issues
  • From: Thierry Zoller
• Re: html code include in phpnuke news crash IE 6
  • From: Berend-Jan Wever
• phpbb <= 2.0.12 uid vuln + admin_styles.php php code injection exploit
  • From: bad boy
• Unfiltered escape sequences in filenames contained in ZIP archives wouldn't be escaped on displaying or logging, and can also lead to bypass AV scanning
  • From: Dr. Peter Bieringer
• PlantinumFTP server <= 1.0.18 Remote DOS exploit
  • From: Exoduks
• RE: Av issues
  • From: David Webster
• html code include in phpnuke news crash IE 6
  • From: WoRmZ Web
• Not SQL injection and XSS in paFileDB?
  • From: saudi linux
• iDEFENSE Security Advisory 03.14.05: MySQL MaxDB Web Agent Multiple Denial of Service Vulnerabilities
  • From: iDEFENSE Labs
• DMA[2005-0310a] - 'Frank McIngvale LuxMan buffer overflow'
  • From: Kevin Finisterre
• "Drop to STARTUP Folder II" published on 2005/02/08
  • From: Liu Die Yu
• YaBB2 rc1 XSS
  • From: alireza hassani
• [SECURITYREASON.COM] phpAdsNew 2.0.4-pr1 Multiple vulnerabilities cXIb8O3.9
  • From: Maksymilian Arciemowicz
• 3 XSS Vulnerabilities in Phorum <= 5.0.14
  • From: Jon Oberheide
• Ethereal 0.10.9 and below remote root exploit
  • From: Diego Giagio
• ...::: hotforum.nl XSS exploit :::...
  • From: Rebyte Security
• Master RPC program number data base (/etc/rpc)
  • From: Eilon Gishri
• SimpGB SQL Injection Vulnerability
  • From: Alexander Müller
• [XSS] paBox 2.0
  • From: Rift
• [ZH2005-02SA] Insecure tmp file creation in Wine
  • From: Giovanni Delvecchio
• [HAT-SQUAD] SafeNet Sentinel LM, UDP License Manager Exploit
  • From: class 101
• New Version of WinBlox is Available
  • From: Liu Die Yu
• LimeWire Gnutella client two vulnerabilities
  • From: Kevin Walsh
• [SECURITY] [DSA 693-1] New luxman packages fix local root exploit
  • From: Martin Schulze
• SUSE Security Announcement: openslp (SUSE-SA:2005:015)
  • From: Sebastian Krahmer
• [CLA-2005:933] Conectiva Security Announcement - gaim
  • From: Conectiva Updates
• [SECURITY] [DSA 662-2] New squirrelmail package fixes regression
  • From: Martin Schulze
• [ GLSA 200503-17 ] libexif: Buffer overflow vulnerability
  • From: Luke Macken
• Ethereal remote buffer overflow #2
  • From: LSS Security
• Re: iDownload/iSearch responds to Spyware Critics
  • From: bkfsec
• Re: Windows Server 2003 and XP SP2 LAND attack vulnerability
  • From: exon
• Re: [SECURITYREASON.COM] PostNuke Critical SQL Injection 0.760-RC2=>x cXIb8O3.1
  • From: Linux php
• Av issues
  • From: Bipin Gautam
• KnowledgeBase
  • From: Francisco Alisson
• aeNovo Database Content Disclosure Vulnerability
  • From: farhad koosha
• RE: Windows Server 2003 and XP SP2 LAND attack vulnerability
  • From: Miguel Angel Rodríguez Jódar
• Virginity Security Advisory 2005-001 : Hola CMS - File destruction and System access
  • From: Virginity Security
• [SECURITYREASON.COM] Mass Full Path Disclosure in paFileDB
  • From: SecurityReason
• PlatinumFTP 1.0.18 remote DoS
  • From: ports
• RE: Windows Server 2003 and XP SP2 LAND attack vulnerability
  • From: Daniel Cross
• Mysql CREATE FUNCTION libc arbitrary code execution.
  • From: Stefano Di Paola
• [ GLSA 200503-15 ] X.org: libXpm vulnerability
  • From: Matthias Geerdsen
• Re: Thoughts and a possible solution on homograph attacks
  • From: Paul Smith
• summercon looking for speakers
  • From: louis
• Mysql CREATE FUNCTION mysql.func table arbitrary library injection
  • From: Stefano Di Paola
• [badroot.org] The Includer remote commands execution exploit
  • From: mozako
• [badroot.org] The Includer remote commands execution exploit
  • From: Federico Ozak
• PhotoPost PHP 5.0 RC3, and later, multiple vulnerabilities
  • From: Igor Franchuk
• [SECURITYREASON.COM] SQL injection and XSS in paFileDB
  • From: SecurityReason
• [ GLSA 200503-16 ] Ethereal: Multiple vulnerabilities
  • From: Luke Macken
• Re: Multiple AV Vendor Incorrect CRC32 Bypass Vulnerability.
  • From: secure
• [SECURITYREASON.COM][phpBB 2.0.13 SQL error in session cXIb8O3.8]
  • From: Maksymilian Arciemowicz
• Re: Lingo VoIP ATA / UTStarcom iAN-02EX remote access vulnerability
  • From: Atom Smasher
• Re: Lingo VoIP ATA / UTStarcom iAN-02EX remote access vulnerability
  • From: Ryan Cummings
• Security Masters Dojo
  • From: Dragos Ruiu
• UBB.threads 6 SQL Injection
  • From: kre0n
• Re: Lingo VoIP ATA / UTStarcom iAN-02EX remote access vulnerability
  • From: Atom Smasher
• Re: houghts and a possible solution on homograph attacks
  • From: Nick FitzGerald
• iDownload/iSearch responds to Spyware Critics
  • From: Paul Laudanski
• RE: Windows Server 2003 and XP SP2 LAND attack vulnerability
  • From: Evans, Arian
• RE: Windows Server 2003 and XP SP2 LAND attack vulnerability
  • From: Detection Services - IS Security
• Wfsection 1.07 vulnerabilities
  • From: kreon
• iDEFENSE Security Advisory 03.10.05: Ipswitch Collaboration Suite IMAP EXAMINE Buffer Overflow Vulnerability
  • From: iDEFENSE Labs
• XCode 1.5 and distcc 2.x Exploit
  • From: Ray Slakinski
• Multiple AV Vendor Incorrect CRC32 Bypass Vulnerability.
  • From: Bipin Gautam
• [Updated][FLSA-2005:2344] Updated php packages fix security issues
  • From: Marc Deslauriers
• Update: MS05-011 EEYE: Windows SMB Client Transaction Response Handling Vulnerability
  • From: Marc Maiffret
• [Security Bulletin] SSRT4891 rev.0 HP Tru64 UNIX message queue local denial of service (DoS)
  • From: Boren, Rich (SSRT)
• [USN-94-1] Perl vulnerability
  • From: Martin Pitt