Bugtraq
[Prev Page][Next Page]
DMA[2006-0514a] - 'ClamAV freshclam incorrect privilege drop',
KF (lists)
[SECURITY] [DSA 1056-1] New webcalendar packages fix information leak,
Martin Schulze
POC exploit for freeSSHd version 1.0.9,
Tauqeer Ahmad
XSS in FreeTextBox and FCKEditor Basic Toolbar Selection,
bonsite
90% of programs made in PHP5 and prior Full Path Disclosure vuln.,
sirdarckcat
JDK 1.4.2_11, 1.5.0_06, unsigned applets consuming all free harddisk space,
Marc Schoenefeld
Is MS06-018 a DoS or a system compromise ?,
Nick Boyce
[USN-274-2] MySQL vulnerability,
Martin Pitt
[SECURITY] [DSA 1057-1] New phpLDAPadmin packages fix cross-site scripting,
Martin Schulze
PhpBB <= 2.0.20 Admin/Restore Database remote cmmnds xctn (works with admin sid),
rgod
SQL-Injection in e107 allows attacker to become a site admininstrator,
socsam
[FLSA-2006:164512] Updated fetchmail packages fix security issues,
Marc Deslauriers
Server crash in Empire 4.3.2,
Luigi Auriemma
[FLSA-2006:152923] Updated xloadimage package fixes security issues,
Marc Deslauriers
[FLSA-2006:152904] Updated ncpfs package fixes security issues,
Marc Deslauriers
Gphotos Directory Traversal and Cross Site Scripting,
doz
Socket unreachable in GNUnet rev 2780,
Luigi Auriemma
[FLSA-2006:185355] Updated gnupg package fixes security issues,
Marc Deslauriers
Multiple vulnerabilities in Raydium rev 309,
Luigi Auriemma
Multiple vulnerabilities in Outgun 1.0.3 bot 2,
Luigi Auriemma
[FLSA-2006:152868] Updated tetex packages fix security issues,
Marc Deslauriers
Buffer-overflow and NULL pointer crash in Genecys 0.2,
Luigi Auriemma
[FLSA-2006:152898] Updated emacs packages fix a security issue,
Marc Deslauriers
# MHG Security Team --- Gallery Upload Vulnerabilities,
Dj_ReMix_20
PHP Live Helper ASP(chat.php) XSS,
mster-X
Several flaws in e-business designer (eBD),
Pedro Andújar
Dovecot IMAP: Mailbox names list disclosure with mboxes,
Timo Sirainen
SEC Consult SA-20060512-0 :: Symantec Enterprise Firewall NAT/HTTP Proxy Private IP Exposure,
Bernhard Mueller
Dokeos LDAP hole fixed,
thomas . depraetere
PHPBB 2.0.20 persistent issues with avatars,
rgod
[EEYEB-20060307] Apple QuickTime FPX Integer Overflow,
eEye Advisories
TSLSA-2006-0026 - kernel,
Trustix Security Advisor
Apple QuickDraw/QuickTime Multiple Vulnerabilities,
Avert
[Kurdish Security # 7] Foing Remote File Include Vulnerability [PHPBB],
botan
How secure is software X?,
David Litchfield
ZDI-06-015: Apple QuickTime H.264 Parsing Heap Overflow Vulnerability,
zdi-disclosures
yet more XSS in older versions of ColdFusion,
zuxncwaruio
Re: Secunia Research: Where Is It unacev2.dll Buffer OverflowVulnerability,
jason . gerfen
Apple QuickTime udta ATOM Heap Overflow,
Sowhat
Ipswitch WhatsUp Professional multiple flaws,
David Maciejak
[ GLSA 200605-13 ] MySQL: Information leakage,
Sune Kloppenborg Jeppesen
phpBB "charts.php" XSS and SQL-Injection,
sn4k3 . 23
Verizon Voicewing and Linksys PAP2-VN,
securityfocus
Microsoft MSDTC NdrAllocate Validation Vulnerability,
avert
Secunia Research: UltimateZip unacev2.dll Buffer Overflow Vulnerability,
Secunia Research
Unclassified NewsBoard <= 1.6.1 patch 1 ABBC[Config][smileset] arbitrary local inclusion,
rgod
[SECURITY] [DSA 1055-1] New Mozilla Firefox packages fix arbitrary code execution,
Martin Schulze
[TZO-042006] Insecure Auto-Update and File execution (2),
Thierry Zoller
[ MDKSA-2006:085 ] - Updated xine-ui packages fix format string vulnerabilities,
security
Cisco Security Advisory: AVS TCP Relay Vulnerability,
Cisco Systems Product Security Incident Response Team
Re: SYMSA-2006-003: Cisco Secure ACS for Windows - AdministratorPassword Disclosure,
Greg owens
ZDI-06-014: Verisign I-Nav ActiveX Control Code Execution Vulnerability,
zdi-disclosures
Kerio WinRoute Firewall Protocol Inspection Denial,
SnoBMSN
[48Bits.com Advisory] Path conversion design flaw in Microsoft NTDLL,
48Bits.com [I+D Team]
vbulletin security Alert,
aura
PhpListPro 2.01 Remote File Include Vulnerability,
SnoBMSN
[TZO-042006] Insecure Auto-Update and File execution,
Thierry Zoller
mybb v1.1.1(showthread.php) SQL Injection Exploit,
Breeeeh
Firefox 1.5.0.3 - DoS,
p4 . werterxyz
[ MDKSA-2006:084 ] - Updated MySQL packages fix several vulnerabilities,
security
UBlog Remote XSS Exploit,
SnoBMSN
Oracle - the last word,
David Litchfield
Hackmaster Group DMCounter Remote File Include,
c-w-m
[ MDKSA-2006:083 ] - Updated gdm package fixes symlink attack vulnerability,
security
Multiple SQL Injection Vulnerabilities in Dreamweaver Generated Code,
Brian Gallagher
[ GLSA 200605-10 ] pdnsd: Denial of Service and potential arbitrary code execution,
Sune Kloppenborg Jeppesen
[ GLSA 200605-12 ] Quake 3 engine based games: Buffer Overflow,
Sune Kloppenborg Jeppesen
[ GLSA 200605-11 ] Ruby: Denial of Service,
Sune Kloppenborg Jeppesen
# MHG Security Team --- OzzyWork Gallery Upload Vulnerabilities,
Dj_ReMix_20
IBM Websphere Application Server Multiple Vulnerabilities,
SnoBmsn
[SECURITY] [DSA 1054-1] New TIFF packages fix denial of service and arbitrary code execution,
Martin Schulze
[Reversemode] Microsoft Infotech Storage library Heap Corruption,
Reversemode
Two independent vulnerabilities (client and server side) in Quake3 engine and many derived games,
Thilo Schulz
ZDI-06-013: 3Com TippingPoint SMS Server Information Disclosure Vulnerability,
zdi-disclosures
IGNORING SSH CONNECTION USES ARP CACHE POISSONING,
king_purba
[EEYEB20051011A] - Microsoft Distributed Transaction Coordinator Heap Overflow,
eEye Advisories
[EEYEB20051011B] - Microsoft Distributed Transaction Coordinator Denial of Service,
eEye Advisories
# MHG Security Team --- DuGallery V2.x SQL Injection,
Dj_ReMix_20
[SECURITY] [DSA 1053-1] New Mozilla packages fix arbitrary code execution,
Martin Schulze
plaNetStat Admin ByPass,
alp_eren
# MHG Security Team --- OzzyWork Gallery SQL Injection,
Dj_ReMix_20
ICQ Client Cross-Application Scripting (XAS),
3APA3A
tseekdir.cgi<--Local File Include,
BoNy-m
Secunia Research: Where Is It unacev2.dll Buffer Overflow Vulnerability,
Secunia Research
PHPFusion <= v6.00.306 avatar mod_mime arbitrary file upload & local inclusion vulnerabilities,
rgod
SYMSA-2006-003: Cisco Secure ACS for Windows - Administrator Password Disclosure,
research
[MajorSecurity] phpListPro <= 2.01 - Multiple Remote File Include Vulnerability,
admin
Unfiltered Header Injection in Apache 1.3.34/2.0.57/2.2.1,
Zaninotti, Thiago
VSR Advisory: WebSense content filter bypass when deployed in conjunction with Cisco filtering devices,
VSR Advisories
ZDI-06-012: Sophos Anti-Virus CAB Unpacking Code Execution Vulnerability,
zdi-disclosures
[ GLSA 200605-09 ] Mozilla Thunderbird: Multiple vulnerabilities,
Thierry Carrez
[ GLSA 200605-08 ] PHP: Multiple vulnerabilities,
Thierry Carrez
Secunia Research: Anti-Trojan unacev2.dll Buffer Overflow Vulnerability,
Secunia Research
Secunia Research: TZipBuilder ZIP File Handling Buffer Overflow Vulnerability,
Secunia Research
[USN-283-1] MySQL vulnerabilities,
Martin Pitt
[USN-282-1] Nagios vulnerability,
Martin Pitt
[Kurdish Security # 5] phpRaid Remote File Include [SMF],
botan
[Kurdish Security # 4] phpRaid Remote File Include Vulnerability (PHPBB),
botan
INFIGO-2006-05-03: Multiple FTP Servers vulnerabilities,
infocus
singapore v0.9.7 XSS Vulnerabilities,
alp_eren
Claroline Open Source e-Learning 1.7.5 Remote File Include,
beford
Multiple Vulnerabilities In IdealBB ASP Bulletin Board,
CodeScan Labs
Dokeos Learning Management System 1.6.4 Remote File Include,
beford
CAID 34013 - CA Common Services CAIRIM on z/OS LMP SVC vulnerability,
Williams, James K
[SECURITY] [DSA 1052-1] New cgiirc packages fix arbitrary code execution,
Martin Schulze
AngelineCMS Multiple Vulnerabilities,
admin
[ GLSA 200605-07 ] Nagios: Buffer overflow,
Sune Kloppenborg Jeppesen
[KAPDA] MyBB1.1.1~Email Verification in User Activation ~SQL Injection Attack,
addmimistrator
OpenEngine (PHP CMS),
ck
Phil's Bookmark script admin By-pass,
alp_eren
Limbo CMS (option=weblinks) SQL injection exploit,
SnoBMSN
X-POLL admin By-Pass,
alp_eren
URL Bug On 1ASPHost and DomainDLX Hosting Services,
spymeta
Idle scan rediscovered!!!,
Joel Jose
Firefox 1.5.0.3 code execution exploit,
yesn
phpBB 2.0.20 Full Path Disclosure and SQL Errors,
cxib
Intel wireless service s24evmon.exe confidential information disclosure.,
ruben
Alexadex.com players.py XSS Exploit,
skinnypuppy
X7Chat <= 2.0.2 avatar XSS injection,
zerogue
WebsiteBaker CMS lack of sanitizing,
zerogue
VisionSource CMS <= 0.6 XSS vectors,
zerogue
[ GLSA 200605-06 ] Mozilla Firefox: Potential remote code execution,
Thierry Carrez
PassMasterFlex (and PassMasterFlex+) XSS injection,
zerogue
myBloggie <= 2.1.3 XSS,
zerogue
FlexCustomer <= 0.0.4 sql injection,
zerogue
ChipmunkBoard Multiple Attack vectors,
zerogue
ChipmunkBlogger improper input sanitizing,
zerogue
JetBox CMS Remote File Include,
beford
OpenFAQ - HTML injection and XSS (Cross Site Scripting),
Kamil Sienicki
[ GLSA 200605-05 ] rsync: Potential integer overflow,
Sune Kloppenborg Jeppesen
TSLSA-2006-0024 - multi,
Trustix Security Advisor
Cryptomathic ActiveX Buffer Overflow (TDC Digital signature),
CIRT.DK Advisory
SaPHPLesson 3.0 Multbugs,
o . y . 6
Invision Community Blog .. Bugs,
o . y . 6
[ MDKSA-2006:081-1 ] - Updated xorg-x11 packages fix vulnerability,
security
CuteNews 1.4.1 Multiple vulnerabilities,
k4p0k4p0
modules name(Downloads)SQL Injection Exploit,
Mster-X
modules name(Sections)SQL Injection Exploit,
Mster-X
WebCalendar User Account Enumeration Weakness,
David Maciejak
bigwebmaster guestbook multiply XSS,
Javor Ninov
[REWTERZ-20060503] XM Easy Personal FTP Server Remote Buffer Overflow Vulnerability,
rewterz
Panda Antivirus Enterprise Secure, Norton Antivirus 2005 and the virus "I Love You",
Joxean Koret
libero.it XSS vulnerability - HTML injection,
Davide Denicolo
[USN-280-1] X.org server vulnerability,
Martin Pitt
321soft PhP Gallery 0.9 - directory travel & XSS,
d4igoro
[USN-281-1] Linux kernel vulnerabilities,
Martin Pitt
Fast Click <= 2.3.8 Remote File Inclusion,
Aminrayden
Fast Click SQL Lite <= 1.1.3 Remote File Inclusion,
Aminrayden
zawhttpd - Buffer Overflow,
Kamil Sienicki
PunBB 1.2.11 Cross-Site Scripting,
o . y . 6
CuteGuestbook XSS attack,
omnipresent
[REWTERZ-20060504] - Sami FTP Server Remote Buffer Overflow Vulnerability,
rewterz
[security bulletin] HPSBUX02108 SSRT061133 rev.10 - HP-UX running Sendmail, Remote Execution of Arbitrary Code,
security-alert
ISA Server 2004 Log Manipulation,
beSIRT
[SECURITY] [DSA 1051-1] New Mozilla Thunderbird packages fix several vulnerabilities,
Martin Schulze
[ MDKSA-2006:082 ] - Updated libtiff packages fix vulnerabilities,
security
[USN-279-1] libnasl/nessus vulnerability,
Martin Pitt
BankTown's ActiveX Buffer Overflow Vulnerability,
Alex Park
OpenVPN 2.0.7 and below: Remote OpenVPN Management Interface Flaw,
c0redump
Vulnerability in the way Ultr@VNC-1.0.1 handles MS-Logon Authentication.,
gdehanot
[USN-278-1] gdm vulnerability,
Martin Pitt
Quagga RIPD unauthenticated route injection,
Konstantin V. Gavrilenko
[USN-277-1] TIFF library vulnerabilities,
Martin Pitt
[SECURITY] [DSA 1050-1] New ClamAV packages fix denial of service or arbitrary code execution,
Martin Schulze
Quagga RIPD unauthenticated route table broadcast,
Konstantin V. Gavrilenko
Dynamic Evaluation Vulnerabilities in PHP applications,
Steven M. Christey
SUSE Security Announcement: xorg-x11-server (SUSE-SA:2006:023),
Ludwig Nussel
[USN-276-1] Thunderbird vulnerabilities,
Martin Pitt
[ MDKSA-2006:081 ] - Updated xorg-x11 packages fix vulnerability,
security
[ GLSA 200605-04 ] phpWebSite: Local file inclusion,
Sune Kloppenborg Jeppesen
[ GLSA 200605-03 ] ClamAV: Buffer overflow in Freshclam,
Sune Kloppenborg Jeppesen
[ GLSA 200605-02 ] X.Org: Buffer overflow in XRender extension,
Sune Kloppenborg Jeppesen
MySQL COM_TABLE_DUMP Information Leakage and Arbitrary command execution.,
Stefano Di Paola
MySQL Anonymous Login Handshake - Information Leakage.,
Stefano Di Paola
Oracle, where are the patches???,
David Litchfield
Invision Gallery 2.0.6 ( SQL Injection ),
o . y . 6
TyroCms beta V1.0 multiple XSS injections,
zerogue
Russcom.net Loginphp multiple vulnerabilties,
zerogue
FileProtection Express <= 1.0.1 authentification bypass,
zerogue
SF-Users V1.0 XSS injection,
zerogue
Cmscout <= V1.10 multiple XSS attack vectors,
zerogue
sBlog SQL Injection and Path Disclosure Vulnerability,
admin
geoBlog Mutiple XSS Vulnerability,
admin
Ejabberd : Symlink vulnerability during installation process,
Julien L.
zenphoto Multiple Path Disclosure and Cross Site Scripting Vulnerabilities,
raphael . huck
[SECURITY] [DSA 1049-1] New Ethereal packages fix several vulnerabilities,
Martin Schulze
X7 Chat <=2.0 remote commands execution,
rgod
Cisco Security Advisory: Cisco Unity Express Expired Password Reset Privilege Escalation,
Cisco Systems Product Security Incident Response Team
JSBoard XSS vulnerability,
Alexander Klink
[ MDKSA-2006:080 ] - Updated clamav packages fix vulnerability,
security
VHCS --- Virtual Hosting Control System Cross Site Scripting,
outlaw
FTP Fuzzer,
infocus
Blog Mod <= 0.2.x SQL Injection,
qex
XINE format string bugs when handling non existen file,
king_purba
CoolMenus Event Remote File Inclusion exploit,
AminRayden
I-RATER Platinum Remote File Inclusion exploit Cod3d by R@1D3N,
AminRayden
Poll: Emerging Threats,
Jon R. Kibler
OpenBB 1.0.8 Full Path Disclosure,
o . y . 6
Invision Power Board v2.1.5 Remote SQL Injection,
o . y . 6
4images<-- 1.7.1 SQL Injection,
CrAzY . CrAcKeR
Thyme 1.3 Cross Site Scripting,
outlaw
Image file crashes Finder, Safari and other apps,
cmertes
[SECURITY] [DSA 1047-1] New resmgr packages fix unauthorised access,
Martin Schulze
[SECURITY] [DSA 1048-1] New Asterisk packages fix arbitrary code execution,
Martin Schulze
Secunia Research: WinHKI unacev2.dll Buffer Overflow Vulnerability,
Secunia Research
free-php.net Poll 1.0 admin login,
tugr
planetGallery admin login,
tugr
JMK's Picture Gallery admin login,
alp_eren
[ GLSA 200605-01 ] MPlayer: Heap-based buffer overflow,
Sune Kloppenborg Jeppesen
DMCounter Remote File Include,
beford
TextFileBB 1.0.16 Multiple XSS,
r0xes . ratm
TopList <= 1.3.8 (PHPBB Hack) Remote File Inclusion Vulnerability,
mfoxhacker
XSS Attack On DirectAdmin Hosting Managment,
outlaw
W-Agora 4.20 XSS,
r0xes . ratm
poll.pl<--remote commands execution exploit,
CrAzY . CrAcKeR
Invision Power Board 2.1.5 POC,
Javier Olascoaga
[Kurdish Secure Advisory #1] I-RATER Platinum "Admin/configsettings.tpl.php" Remote File Include Vulnerability,
botan
Neomail.pl Local Cross Site Scripting,
outlaw
[Kurdish Security #2] Artmedic Event Remote File Include Vulnerability,
botan
[ GLSA 200604-18 ] Mozilla Suite: Multiple vulnerabilities,
Thierry Carrez
[Kurdish Security #3] CoolMenus Event Remote File Include Vulnerability (For PHP),
botan
[Argeniss] Alert - Yahoo! Mail XSS vulnerability,
Cesar
Cireos Portal Cross Site Scripting,
outlaw
WinISO/UltraISO/MagicISO/PowerISO Directory Traversal Vulnerability,
Sowhat
[ECHO_ADV_31$2006] Sws Web Server 0.1.7 Strcpy() & Syslog() Format String Vulnerability,
the_day
Secunia Research: Servant Salamander unacev2.dll Buffer Overflow Vulnerability,
Secunia Research
BL4's SMTP server BufferOverflow Vulnerable,
the_day
[SECURITY] [DSA 1046-1] New Mozilla packages fix several vulnerabilities,
Martin Schulze
[SECURITY] [DSA 1045-1] New OpenVPN packages fix arbitrary code execution,
Martin Schulze
[USN-275-1] Mozilla vulnerabilities,
Martin Pitt
SQL injection exploit IPB <= 2.1.4,
satanchild123
[security bulletin] HPSBMA02113 SSRT061148 rev.1 - HP Oracle for OpenView (OfO) Critical Patch Update April 2006,
security-alert
[ GLSA 200604-17 ] Ethereal: Multiple vulnerabilities in protocol dissectors,
Sune Kloppenborg Jeppesen
[security bulletin] HPSBUX02075 SSRT051074 rev.4 - HP-UX Running xterm Local Unauthorized Access,
security-alert
[security bulletin] HPSBUX02108 SSRT061133 rev.9 - HP-UX running Sendmail, Remote Execution of Arbitrary Code,
security-alert
Land Down Under 802 and below version Path Disclosure Vulnerability,
Advisory
[USN-274-1] MySQL vulnerability,
Martin Pitt
,
Yannick von Arx
MyBB 1.1.1 Local SQL Injections,
o . y . 6
[EEYEB-20060227] Juniper Networks SSL-VPN Client Buffer Overflow,
eEye Advisories
Re: Apple Mac OS X Safari 2.0.3 Vulnerability,
jens
ZDI-06-011: Mozilla Firefox Table Rebuilding Code Execution Vulnerability,
zdi-disclosures
Open Bulletin Board < Multiple Vulnerability,
qex
Local XXS Attack On CuteNews,
outlaw
XXS Attack On FarsiNews,
outlaw
SQL Injection On DUportal,
outlaw
[eVuln] warforge.NEWS SQL Injection and Multiple XSS Vulnerabilities,
alex
[ GLSA 200604-16 ] xine-lib: Buffer overflow vulnerability,
Sune Kloppenborg Jeppesen
[SECURITY] [DSA 1043-1] New abcmidi packages fix arbitrary code execution,
Martin Schulze
[ GLSA 200604-15 ] xine-ui: Format string vulnerabilities,
Sune Kloppenborg Jeppesen
Secunia Research: SpeedProject Products ACE Archive Handling Buffer Overflow,
Secunia Research
DevBB <= 1.0.0 XSS,
qex
MySmartBB<---v 1.1.x SQL Injection/XSS,
BoNy-m
[SECURITY] [DSA 1044-1] New Mozilla Firefox packages fix several vulnerabilities,
Martin Schulze
[ MDKSA-2006:079 ] - Updated ruby packages fix vulnerability,
security
[ MDKSA-2006:078 ] - Updated mozilla-thunderbird packages fix numerous vulnerabilities,
security
[ MDKSA-2006:077 ] - Updated ethereal packages fix numerous vulnerabilities,
security
[ MDKSA-2006:076 ] - Updated mozilla packages fix numerous vulnerabilities,
security
Recent Oracle exploit is _actually_ an 0day with no patch,
David Litchfield
DCForumLite V 3.0<--XSS/SQL Injection,
Breeeeh
Instant Photo Gallery <= Multiple XSS,
qex
Multiple browsers Windows mailto protocol Office 2003 file attachment exploit,
inge . henriksen
Multiple vulnerabilities in IP3 Networks 'NetAccess' NA75 appliance,
Moonen, Ralph
PowerPoint Phishing Trojan,
Lance James
Fenice - Open Media Streaming Server remote BOF exploit,
Kaveh Razavi
[SECURITY] [DSA 1042-1] New Cyrus SASL packages fix denial of service,
Martin Schulze
Invision Vulnerabilities, including remote code execution,
spam
NASL 'Split' function Buffer overflow Vulnerability,
OS2A BTO
[SECURITY] [DSA 1041-1] New abc2ps packages fix arbitrary code execution,
Martin Schulze
PhpWebFtp Cross Site Scripting Vulnerability,
arko . dhar
[ MDKSA-2006:075 ] - Updated mozilla-firefox packages fix numerous vulnerabilities,
security
NextAge Shopping Cart Software XSS,
AminRayden
photokorn 1.53 , 1.542 << Sql,
Dr-Jr7
[ MDKSA-2006:073 ] - Updated cyrus-sasl packages addresses vulnerability,
security
[ MDKSA-2006:074 ] - Updated php packages address multiple vulnerabilities.,
security
Quick 'n Easy FTP Server pro/lite Logging unicode stack overflow,
Kaveh Razavi
ADVISORY FOR IOPUS SECURE EMAIL ATTACHMENTS,
ntwak0
Advisory: My Gaming Ladder Combo System <= 7.0 Remote File Inclusion Vulnerability.,
Mustafa Can Bjorn IPEKCI
vbulletin<--3.0.x SQL Injection,
CrAzY . CrAcKeR
VWar Path Disclosure,
arko . dhar
Apple Mac OS X Safari 2.0.3 Vulnerability,
[MajorSecurity] phpMyAgenda 3.0 Final - Remote File Include Vulnerability,
admin
Firefox Remote Code Execution and DoS 1.5.0.2,
chris
Advisory: Clansys <= 1.1 PHP Code Insertion Vulnerability.,
Mustafa Can Bjorn IPEKCI
Format string bug in Skulltag 0.96f,
Luigi Auriemma
Multiple PHP4/PHP5 vulnerabilities,
infocus
Denial of service bugs in OpenTTD 0.4.7,
Luigi Auriemma
Buffer-overflow and crash in Fenice OMS 1.10,
Luigi Auriemma
RIblog Remote SQL Injection Exploit,
omnipresent
[USN-273-1] Ruby vulnerability,
Martin Pitt
[MajorSecurity] TotalCalendar 2.30 - Remote File Include Vulnerability,
admin
BK Forum <= 4.0 Remote SQL Injection,
n0m3rcy
XSS Bug in OpenGear Server Website,
Aditya
FileLodge Bolt (showonlineusers.php) Cross-Site Scripting Vulnerbility,
n0m3rcy
[ GLSA 200604-12 ] Mozilla Firefox: Multiple vulnerabilities,
Thierry Carrez
[eVuln] RateIt SQL Injection Vulnerability,
alex
[ GLSA 200604-13 ] fbida: Insecure temporary file creation,
Sune Kloppenborg Jeppesen
[ GLSA 200604-14 ] Dia: Arbitrary code execution through XFig import,
Sune Kloppenborg Jeppesen
Scry Gallery XSS Vulnerability,
arko . dhar
[SECURITY] [DSA 1039-1] New blender packages fix several vulnerabilities,
Martin Schulze
[SECURITY] [DSA 1040-1] New gdm packages fix local root exploit,
Martin Schulze
NSFOCUS SA2006-02 : IBM AIX mklvcopy Local Privilege Escalation Vulnerability,
NSFOCUS Security Team
NSFOCUS SA2006-03 : IBM AIX rm_mlcache_file Local Race Condition Vulnerability,
NSFOCUS Security Team
[USN-272-1] cyrus-sasl2 vulnerability,
Martin Pitt
MSIE (mshtml.dll) OBJECT tag vulnerability,
Michal Zalewski
Yahoo! Mail XSS Vulnerability,
Cheng Peng Su
FlexBB 0.5.5 Exploit [ function/showprofile.php ] Remote SQL Injection,
o . y . 6
[ GLSA 200604-11 ] Crossfire server: Denial of Service and potential arbitrary code execution,
Thierry Carrez
Advisory: CoreNews <= 2.0.1 Multiple Remote Vulnerabilities.,
Mustafa Can Bjorn IPEKCI
Advisory: Simplog <= 0.93 Multiple Remote Vulnerabilities.,
Mustafa Can Bjorn IPEKCI
vBulletin <= 3.5.4 with MKPortal 1.1 Remote SQL Injection Vulnerability.,
Mustafa Can Bjorn IPEKCI
dForum <= 1.5 Multiple Remote File Inclusion Vulnerabilities.,
Mustafa Can Bjorn IPEKCI
VWar <= ver 1.21 Remote Code Execution Exploit,
ali
[SECURITY] [DSA 1038-1] New xzgv packages fix arbitrary code execution,
Martin Schulze
[Symantec Security Advisor] Symantec Scan Engine Multiple Vulnerabilities,
secure
Rapid7 Advisory R7-0019: Directory traversal vulnerability in SolarWinds TFTP Server for Windows,
advisory
Rapid7 Advisory R7-0023: Symantec Scan Engine File Disclosure Vulnerability,
advisory
Rapid7 Advisory R7-0022: Symantec Scan Engine Known Immutable DSA Private Key,
advisory
Rapid7 Advisory R7-0021: Symantec Scan Engine Authentication Fundamental Design Error,
advisory
Scry Gallery Directory Traversal & Full Path Disclosure Vulnerabilites,
simo64
RE: [BULK] - Websense Filter Bypass,
Hubbard, Dan
[SECURITY] [DSA 1037-1] New zgv packages fix arbitrary code execution,
Martin Schulze
bloggage Remote SQL Injection,
omnipresent
r57shell.php <= 1.3 XSS,
qex
[eVuln] MWNewsletter SQL Injection and XSS Vulnerabilities,
alex
BK Forum <<--V.4.0 SQL Injection,
CrAzY . CrAcKeR
[SecuriWeb 2006.1] directory traversal in Asterisk@Home and ARI,
François Harvey
[ GLSA 200604-10 ] zgv, xzgv: Heap overflow,
Sune Kloppenborg Jeppesen
[ GLSA 200604-09 ] Cyrus-SASL: DIGEST-MD5 Pre-Authentication Denial of Service,
Sune Kloppenborg Jeppesen
Mini-NUKE v2.3<<--- SQL Injection,
CrAzY . CrAcKeR
Websense Filter Bypass,
qex
4images <= 1.7 XSS,
qex
[Argeniss] Oracle Database 10gR1 Buffer overflow in VERIFY_LOG procedure,
Cesar
RE: (addendum) redirection vuln crawlers breed & security through obscurity,
Evans, Arian
Allied Telesyn Switch UDP Data Flood Management Denial Of Service Vulnerability,
kim
New site about security conferences : www.security-briefings.com,
newslist@xxxxxxxxxxxxxxxxxxxxxx
Ad-Aware Revisited,
Roy . Batty
[security bulletin] HPSBST02112 SSRT061129 rev.1 - HP StorageWorks Secure Path for Windows Remote Denial of Service (DoS),
security-alert
[security bulletin] HPSBTU02095 SSRT051007 rev.3 - HP Tru64 UNIX Running DNS BIND4/BIND8 as Forwarders: Remote Unauthorized Privileged Access,
security-alert
axoverzicht.cgi<==Remote File Inclusion,
CrAzY . CrAcKeR
ThWboard 3 Beta 2.84 Cross Site Scripting,
CrAzY . CrAcKeR
PHPSurveyor <= 0.995 'save.php/surveyid' remote cmmnds xctn,
rgod
[eVuln] MWGuest XSS Vulnerability,
alex
Tlen.PL e-mail XSS vulnerability.,
koper
ASPSitem <= 1.83 Remote SQL Injection Vulnerability,
Mustafa Can Bjorn IPEKCI
Strengthen OpenSSH security?,
Brett Glass
[USN-271-1] Firefox vulnerabilities,
Martin Pitt
PCPIN Chat <= 5.0.4 "login/language" remote cmmnds xctn,
rgod
[eVuln] N.T. Version 1.1.0 XSS and PHP Code Insertion Vulnerabilities,
alex
SQL Injection in incredibleindia.org,
susam_pal
[eVuln] MD News Authentication Bypass and SQL Injection Vulnerabilities,
alex
Re: Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotaged hosts-file lookup,
somerandomaddress99
Confixx SQL Injection exploit (confixx_exploit.pl),
defa
EasyGallery Cross-Site Scripting,
botan
Fortinet28 box does not resist has small synflood!,
testx444
ContentBoxx Login.php Cross-Site Scripting,
botan
WWWThread RC 3 MultBugs,
o . y . 6
Shbablek Mail Vulnerablitiy - Cross-Site Scripting,
n0m3rcy
redirection vuln crawlers breed & security through obscurity,
Ivan Sergio Borgonovo
Cisco Security Advisory: Multiple Vulnerabilities in the WLSE Appliance,
Cisco Systems Product Security Incident Response Team
ThWboard <= 3 Beta 2.84 SQL Injection,
Qex
RechnungsZentrale V2 - SQL injection and Remote PHP inclusion vulnerabilities,
info
Multiple vulnerabilities in Linux based Cisco products,
assurance.com.au
[security bulletin] HPSBUX02108 SSRT061133 rev.7 - HP-UX running Sendmail, Remote Execution of Arbitrary Code,
security-alert
Cisco Security Advisory: Cisco IOS XR MPLS Vulnerabilities,
Cisco Systems Product Security Incident Response Team
XSS Vulnerability in Guest-book script powered by Community Architect,
susam . pal
Oracle 10g 10.2.0.2.0 DBA exploit,
putosoft softputo
[MajorSecurity]ActualAnalyzer - Remote File Include Vulnerability,
admin
FreeBSD Security Advisory FreeBSD-SA-06:14.fpu,
FreeBSD Security Advisories
SQL Injection in package SYS.DBMS_LOGMNR_SESSION,
ak
CuteNews 1.4.1 <= Cross Site Scripting,
sn4k3 . 23
[Symantec Security Advisory] LiveUpdate for Macintosh Local Privilege Escalation,
Secure
Multiple critical and high risk issues in Oracle's database server,
NGSSoftware Insight Security Research
[KAPDA::#41] - Mambo/Joomla rss component vulnerability,
alireza hassani
phpLister v. 0.4.1 XSS Attacking,
botan
[ MDKSA-2006:072 ] - Updated kernel packages fix multiple vulnerabilities,
security
blur6ex Local File Inclusion and SQL injection .,
h e
axoverzicht.cgi <= XSS,
qex
Another flaw in Firefox 1.5.0.2: to open files from remote,
miky
Remote Xine Format String Vulnerability,
c0ntexb
Linpha 1.1.0 - XSS Vulnerabilities,
d4igoro
[SA-03] Example of Grsecurity protection avoid.,
adam
[eVuln] Wire Plastik wpBlog SQL Injection Vulnerability,
alex
gcc 4.1 bug miscompiles pointer range checks, may place you at risk,
Felix von Leitner
- Re: gcc 4.1 bug miscompiles pointer range checks, may place you at risk,
Forrest J. Cavalier III
- Re: gcc 4.1 bug miscompiles pointer range checks, may place you at risk,
Alexander Klimov
- Re: gcc 4.1 bug miscompiles pointer range checks, may place you at risk,
Florian Weimer
- Re: gcc 4.1 bug miscompiles pointer range checks, may place you at risk,
Michael Chamberlain
- Re: gcc 4.1 bug miscompiles pointer range checks, may place you at risk,
Gabor Gombas
- Re: gcc 4.1 bug miscompiles pointer range checks, may place you at risk,
Nate Eldredge
- <Possible follow-ups>
- RE: gcc 4.1 bug miscompiles pointer range checks, may place you at risk,
Michael Wojcik
- Re: gcc 4.1 bug miscompiles pointer range checks, may place you at risk,
jat-public01
- Re: gcc 4.1 bug miscompiles pointer range checks, may place you at risk,
leonleon77
[Argeniss] Alert - Yahoo! Webmail XSS,
Cesar
Neon Responder (Dos,Exploit),
Stefan Lochbihler
FlexBB 0.5.5 Bypass Exploit,
o . y . 6
[ GLSA 200604-08 ] libapreq2: Denial of Service vulnerability,
Thierry Carrez
ZDI-06-009: Mozilla Firefox Tag Parsing Code Execution Vulnerability,
zdi-disclosures
AnimeGenesis <= XSS,
qex
Tiny PHP forum - vulns,
hessam
[eVuln] CzarNews XSS and Multiple SQL Injection Vulnerabilities,
alex
Neuron Blog <= 1.1 XSS,
qex
ShoutBOOK <= 1.1 XSS,
qex
- PHPGraphy <= 0.9.11 "editwelcome" unauthorized access / cross site scripting -,
rgod
[SECURITY] [DSA 1036-1] New bsdgames packages fix local privilege escalation,
Moritz Muehlenhoff
PhpWebFTP 3.2 Login Script,
arko . dhar
BetaBoard Cross Site Scripting vulnerability,
easy . mask
MyEvent Remote File Execution And XSS Attacking,
botan
Calendarix "yearcal.php" XSS Attacking,
botan
FlexBB v0.5.5 BETA [SQL Inj] [XSS] [Login bypass],
kr4ch
Xss In bMachine 2٫7,
W3 . _
DbbS<=2.0-alpha Multiple Vulnerabilities,
yamcho
Snipe Gallery <= 3.1.4 Multiple XSS,
qex
phpFaber TopSites Script Cross-Site Scripting,
botan
Boardsolution <= 1.12 XSS,
qex
FlexBB <= 0.5.7 BETA XSS,
qex
PhpGuestbook <= 1.0 XSS,
qex
Tiny Web Gallery <= 1.4 XSS,
qex
PHP Album <= 0.3.2.3 remote commnads execution,
rgod
[SECURITY] [DSA 1035-1] New fcheck packages fix insecure temporary file creation,
Moritz Muehlenhoff
[eVuln] aWebBB Multiple XSS and SQL Injection Vulnerabilities,
alex
[KAPDA]CopperminePhotoGallery1.4.4~ PluginInclusionSystem(index.php)~ RemoteFileInclusion attack,
addmimistrator
[KAPDA]MyBB1.1.0~global.php~ParameterExtracting,
addmimistrator
ZDI-06-010: Mozilla Firefox CSS Letter-Spacing Heap Overflow Vulnerability,
zdi-disclosures
manila.userland cross site scriptable,
Aaron Kaplan
Dokeos 1.6.4 SQL Injection Vulnerability,
Alvaro Olavarria
a Yahoo Vulnerability,
r57shell
Re: SAXoPRESS - directory traversal aka Saxotech Online,
securiteam
planetSearch+ - XSS Vulnerabilities,
d4igoro
RE: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup,
Derek Soeder
Xss In ar-blog v 5.2,
W3 . _
PAJAX Remote Code Injection and File Inclusion Vulnerability,
RedTeam Pentesting
[Full-disclosure] Microsoft DNS resolver: deliberately sabotaged hosts-file lookup,
Dave Korn
Firefox 1.5.0.1 Password Manager Arbtirary User Browsing History Disclosure,
franz
[ GLSA 200604-07 ] Cacti: Multiple vulnerabilities in included ADOdb,
Thierry Carrez
Avast Linux Home Edition (vulnerability on a temporary folder creation),
Julien L.
phpBB template file code execution,
noch22
[SECURITY] [DSA 1034-1] New horde2 packages fix several vulnerabilities,
Moritz Muehlenhoff
Serendipity Blog vuln,
moep
phpBB Admin command execution,
noch22
Encyclopedia <= 3.0 (login.php) CrossSite Scripting - XSS,
n0m3rcy
osCommerce "extras/" information/source code disclosure,
rgod
Farsinews Cross-Site Scripting & Path disclosure vulnerability,
aminrayden
Vulnerabilities in MODx,
crasher
Vulnerabilities in Papoo,
crasher
Vulnerabilities in lifetype,
crasher
[eVuln] aWebNews Multiple XSS and SQL Injection Vulnerabilities,
alex
PowerClan 1.14 - SQL Injection,
d4igoro
Camino Browser HTML Parsing Null Pointer Dereference Denial of Service Vulnerability,
izimask
[eVuln] RedCMS Multiple XSS and SQL Injection Vulnerabilities,
alex
TalentSoft Web+Shop Path Disclosure,
revnic
ZDI-06-008: Novell GroupWise Messenger Accept-Language Buffer Overflow,
zdi-disclosures
SEC Consult SA-20060314 :: Opera Browser CSS Attribute Integer Wrap / Buffer Overflow,
Bernhard Mueller
SaphpLesson 2.0 (forumid) Remote SQL Injection Exploit,
selfar2002
Secunia Research: Adobe Document Server for Reader Extensions Multiple Vulnerabilities,
Secunia Research
MyBB 1.10 New CrossSiteScripting ' member.php ',
o . y . 6
phpMyAdmin 2.7.0-pl1,
kr4ch
QuickBlogger v1.4 Cross-Site Scripting,
botan
MyBB 1.10 New XSS ' member.php ',
o . y . 6
Recon 2006: speaker lineup announcement,
Recon
RevoBoard [email] tag XSS,
r0xes . ratm
phpWebSite 0.10.? (topics.php) Remote SQL Injection Exploit,
selfar2002
[BuHa-Security] Multiple Vulnerabilities in MS IE 6.0 SP2,
bugtraq
Remote File Inclusion in VBulletin ImpEx,
dr . jr7
[BuHa-Security] Stack Based Buffer Overflow Vulnerability in Amaya 9.4 #2,
bugtraq
[BuHa-Security] Stack Based Buffer Overflow Vulnerability in Amaya 9.4,
bugtraq
[eVuln] qliteNews SQL Injection Vulnerability,
alex
[BuHa-Security] DoS Vulnerability in Firefox 1.5.0.1,
bugtraq
SimpleBBS v1.1(posts.php) remote command execution,
stormhacker
Windows Help Heap Overflow,
c0ntexb
PatroNet CMS Xss Vuln,
Soothackers
Clansys Multiple Xss Vulnerabilities,
Soothackers
[USN-270-1] xpdf vulnerabilities,
Martin Pitt
[security bulletin] HPSBUX02108 SSRT061133 rev.6 - HP-UX running Sendmail, Remote Execution of Arbitrary Code,
security-alert
Vulnerability in Microsoft FrontPage Server Extensions Could Allow Cross-Site Scripting,
Esteban Martinez Fayo
[SECURITY] [DSA 1033-1] New horde3 packages fix several vulnerabilities,
Moritz Muehlenhoff
Simplog <=0.9.2 multiple vulnerabilities,
rgod
[eVuln] QLnews XSS and PHP Code Insertion Vulnerabilities,
alex
[SECURITY] [DSA 1032-1] New zope-cmfplone packages fix unprivileged data manipulation,
Moritz Muehlenhoff
Re: Buffer-overflow in Ultr@VNC 1.0.1 viewer POC,
phaas
Microsoft Internet Explorer DBCS Remote Memory Corruption Vulnerability,
Sowhat
2nd European Conference on Computer Network Defense (EC2ND),
Blyth A J C (Comp)
[Index of Archives]
[Netfilter]
[Security]
[PHP]
[Linux Kernel]
