386 messages sorted by: [ date ] [ thread ] [ subject ]

Starting: Mon Oct 03 2005 - 12:03:09 CDT
Ending: Mon Oct 31 2005 - 17:28:11 CST

• . EADS CCR DCR/STI/C
  • Skype security advisory (Tue Oct 25 2005 - 12:16:38 CDT)
• 3APA3A
  • Re: Google Talk cleartext proxy credentials vulnerability (Sat Oct 15 2005 - 14:40:08 CDT)
• ABDUCTER_MINDSYAHOO.COM
  • SQL IN FORUM.PHP (Sun Oct 30 2005 - 06:03:59 CST)
  • File Including In PBLang (Thu Oct 27 2005 - 06:57:24 CDT)
  • File Including In FLAT NUKE (Sat Oct 22 2005 - 11:51:40 CDT)
• adminbatznet.com
  • Woltlab Burning Board info_db.php multiple SQL injection (Wed Oct 26 2005 - 09:01:28 CDT)
• Advisorieseeye.com
  • [EEYEB20050510] - Microsoft DirectShow Remote Code Vulnerability (Tue Oct 11 2005 - 14:05:02 CDT)
  • [EEYEB20050708] Microsoft Distributed Transaction Coordinator Memory Modification Vulnerability (Tue Oct 11 2005 - 14:05:20 CDT)
  • [EEYEB20050915] - MDT2DD.DLL COM Object Uninitialized Heap Memory Vulnerability (Tue Oct 11 2005 - 14:05:35 CDT)
  • [EEYEB20050803] - Windows UMPNPMGR wsprintfW Stack Buffer Overflow Vulnerability (Tue Oct 11 2005 - 14:05:50 CDT)
• advisoriesmatasano.com
  • Network Appliance iSCSI Authentication Bypass (Tue Oct 25 2005 - 05:17:00 CDT)
• advisorykapda.ir
  • [KAPDA::#9] Techno Dreams Scripts Vulnerabilities (Wed Oct 26 2005 - 12:15:28 CDT)
  • [KAPDA::#6] Punbb SQL Injection Vulnerability (Fri Oct 14 2005 - 14:07:23 CDT)
  • Aenovo Multiple Vulnerabilities (Fri Oct 07 2005 - 05:40:43 CDT)
• advisorysecurityfocus.com
  • [KAPDA::#8] Domain Manager Pro Vulnerability (Fri Oct 21 2005 - 17:03:54 CDT)
• advisorywirecom.org
  • MailEnable W3C Logging Remote Buffer Overflow Proof of Concept (Fri Oct 07 2005 - 01:02:20 CDT)
• akred-database-security.com
  • Oracle Workflow CSS Vulnerability wf_route (Thu Oct 20 2005 - 01:39:50 CDT)
  • Oracle Workflow CSS Vulnerability wf_monitor (Thu Oct 20 2005 - 01:14:07 CDT)
  • Re: Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers (Fri Oct 07 2005 - 15:13:13 CDT)
  • Shutdown TNS Listener via Oracle Forms Servlet (Fri Oct 07 2005 - 04:40:19 CDT)
  • Shutdown TNS Listener via Oracle iSQL*Plus (Fri Oct 07 2005 - 04:39:56 CDT)
  • Cross-Site-Scripting Vulnerability in Oracle XMLDB (Fri Oct 07 2005 - 04:39:30 CDT)
  • Cross-Site-Scripting Vulnerability in Oracle iSQL*Plus (Fri Oct 07 2005 - 04:39:07 CDT)
  • Plaintext Password Vulnerabilitiy during Installation of Oracle HTMLDB (Fri Oct 07 2005 - 04:38:41 CDT)
  • Cross-Site-Scripting Vulnerabilities in Oracle HTMLDB (Fri Oct 07 2005 - 04:38:10 CDT)
• alexaleksanet.com
  • Flat Nuke Cross Site Scripting (Sun Oct 23 2005 - 19:05:45 CDT)
  • DCP - portal XSS & SQL attacks (Mon Oct 24 2005 - 06:13:31 CDT)
• ali202fastermail.com
  • Re: Aenovo Multiple Vulnerabilities (Patch) (Sun Oct 16 2005 - 12:17:55 CDT)
• alireza hassani
  • XSS & Path Disclosure in Chipmunk's products (Thu Oct 20 2005 - 07:22:42 CDT)
  • Re: [KAPDA::#6] Punbb SQL Injection Vulnerability (Wed Oct 19 2005 - 07:28:39 CDT)
  • XSS vulnerability in Zeroblog (Tue Oct 11 2005 - 10:17:55 CDT)
• alljergmail.com
  • Yahoo RSS XSS Vulnerability (Mon Oct 17 2005 - 05:56:16 CDT)
  • Yahoo RSS XSS Vulnerability (Correction) (Mon Oct 17 2005 - 06:57:30 CDT)
• almasterhotmail.com
  • SQL In Invision Gallery 2.0.3 (Sun Oct 30 2005 - 09:15:52 CST)
  • SQL saphp Lesson (Mon Oct 24 2005 - 10:52:29 CDT)
  • DBoardGear SQL Injection (Mon Oct 24 2005 - 08:49:32 CDT)
• alphakgengmail.com
  • phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit. (Sat Oct 22 2005 - 08:22:17 CDT)
• Andreas Marx
  • Re: Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through (Wed Oct 26 2005 - 05:50:26 CDT)
• Andreas Zeidler
  • Re: [SECURITYREASON.COM] phpMyAdmin Local file inclusion 2.6.4-pl1 (Wed Oct 12 2005 - 14:23:37 CDT)
  • Re: using php local file include vulnerabilities for command execution (Tue Oct 11 2005 - 12:44:39 CDT)
  • using php local file include vulnerabilities for command execution (Tue Oct 11 2005 - 11:34:15 CDT)
• Andrey Bayora
  • Re: Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through (Fri Oct 28 2005 - 12:41:14 CDT)
  • Re: [Full-disclosure] Multiple Vendor Anti-Virus Software DetectionEvasion Vulnerability through forged magic byte (Thu Oct 27 2005 - 02:14:52 CDT)
  • Re: Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through (Wed Oct 26 2005 - 11:41:39 CDT)
  • Update for the magic byte bug (Wed Oct 26 2005 - 14:27:17 CDT)
  • Re: [Full-disclosure] Multiple Vendor Anti-Virus Software DetectionEvasion Vulnerability through forged magic byte (Tue Oct 25 2005 - 19:10:50 CDT)
  • Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through (Tue Oct 25 2005 - 09:00:54 CDT)
• Animal
  • SQL-Injection in MyBulletinBoard allows attacker to become a board admin. (Wed Oct 26 2005 - 03:01:31 CDT)
• announcementspulltheplug.org
  • PullThePlug Contest: Call For Papers (Mon Oct 10 2005 - 10:21:01 CDT)
• Ariel Berkman
  • xloadimage buffer overflow. (Wed Oct 05 2005 - 16:27:57 CDT)
• arpenhome.se
  • Re: [KAPDA::#6] Punbb SQL Injection Vulnerability (Tue Oct 18 2005 - 11:41:19 CDT)
• arpensecurityfocus.com
  • Re: Remote File Inclusion in forum PunBB (Sat Oct 29 2005 - 11:05:03 CDT)
• ascii
  • PHP iCalendar CSS (Tue Oct 25 2005 - 08:31:29 CDT)
• atmacaicqmail.com
  • Mirabilis ICQ 2003a Buffer Overflow Download Shellcoded Exploit (Sat Oct 29 2005 - 12:46:40 CDT)
• Auri Rahimzadeh
  • Trend Micro's Response to the Magic Byte Bug (Sat Oct 29 2005 - 07:48:01 CDT)
• Ayaz Ahmed Khan
  • PAKCON II: Call for Paper (CfP), Final Call! (Wed Oct 05 2005 - 10:25:13 CDT)
• Bernhard Mueller
  • SEC-Consult SA 20051025-1 :: RSA ACE Web Agent XSS (Tue Oct 25 2005 - 15:26:32 CDT)
  • SEC-Consult SA 20051025-0 :: Snoopy Remote Code Execution Vulnerability (Tue Oct 25 2005 - 15:24:54 CDT)
  • SEC-CONSULT-SA-20051021-0: Yahoo/MSIE XSS (Fri Oct 21 2005 - 04:43:14 CDT)
• Bharat Mediratta
  • Gallery 2.x Remote File Access Vulnerability (Fri Oct 14 2005 - 03:27:17 CDT)
• bhfh01gmail.com
  • PHP-Nuke Cross-Site Scripting Vulnerability (Tue Oct 25 2005 - 14:03:10 CDT)
• Bipin Gautam
  • Re: [Full-disclosure] Multiple Vendor Anti-Virus Software DetectionEvasion Vulnerability through forged magic byte (Fri Oct 28 2005 - 06:47:42 CDT)
• Bob Beck
  • Re: Mozilla Thunderbird SMTP down-negotiation weakness (Wed Oct 26 2005 - 16:09:51 CDT)
• Brian J. Bartlett
  • RE: Advisory: WZCS vulnerabilities (Wed Oct 05 2005 - 02:37:55 CDT)
• Cesar
  • [Argeniss] Story of a dumb patch (Paper advisoryabout CSRSS and Windows Explorer vulnerabilities) (Thu Oct 20 2005 - 17:29:23 CDT)
  • Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers (Thu Oct 06 2005 - 13:41:33 CDT)
• chburchertweb.de
  • aRCHILLES Newsworld < 1.5.0-rc1 Multiple Vulnerabilities (Fri Oct 21 2005 - 15:34:23 CDT)
• CIRT.DK Advisory
  • [CIRT.DK] - Novell ZENworks Patch Management Server 6.0.0.52 - SQL injection (Thu Oct 27 2005 - 09:24:05 CDT)
• Cisco Systems Product Security Incident Response Team
  • Cisco Security Advisory:Cisco 11500 Content Services Switch SSL Malformed Client Certificate Vulnerability (Wed Oct 19 2005 - 11:00:00 CDT)
• Clayton Kossmeyer
  • Re: [Full-disclosure] Ciscos VPN-Client-Passwords can be decrypted (Tue Oct 18 2005 - 15:06:05 CDT)
• contactwebappsec.org
  • Announcement: The Web Application Firewall Evaluation Criteria v1 (Sun Oct 09 2005 - 22:35:18 CDT)
  • WASC Threat Classification in 4 languages (Wed Oct 05 2005 - 16:15:37 CDT)
• D_BuG
  • Re: uplod phpshell in PHP Advanced Transfer Manager (Sat Oct 29 2005 - 22:23:00 CDT)
• dave canuck
  • Re: [ GLSA 200510-23 ] TikiWiki: XSS vulnerability (Fri Oct 28 2005 - 14:26:17 CDT)
• Dave English
  • Re: Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through (Thu Oct 27 2005 - 01:21:46 CDT)
• dave kleiman
  • RE: Careless Law Enforcement Computer Forensics Lacking InfoSec Expertise Causes Suicides (Mon Oct 03 2005 - 13:51:49 CDT)
• David Ahmad
  • New List (Mon Oct 31 2005 - 10:44:08 CST)
• David Litchfield
  • Revision: Multiple Critical and High Vulnerabilities in Oracle Database Server (Tue Oct 18 2005 - 21:06:34 CDT)
  • Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers (Fri Oct 07 2005 - 13:04:10 CDT)
  • Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers (Fri Oct 07 2005 - 12:14:56 CDT)
  • Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers (Thu Oct 06 2005 - 13:52:30 CDT)
  • Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers (Thu Jan 06 2005 - 10:01:26 CST)
  • Some new whitepapers ... (Wed Oct 05 2005 - 07:20:16 CDT)
• dcrabhackerscenter.com
  • Re: Require many large corporate emails for contact regarding vulnerability. (Mon Oct 17 2005 - 16:06:54 CDT)
• Debasis Mohanty
  • RE: [Full-disclosure] Multiple Vendor Anti-Virus Software DetectionEvasion Vulnerability through forged magic byte (Tue Oct 25 2005 - 12:17:04 CDT)
• Dirk Mueller
  • [KDE Security Advisory] KOffice/KWord RTF import buffer overflow (Tue Oct 11 2005 - 08:17:32 CDT)
• donctl
  • Advisory: WZCS vulnerabilities (Tue Oct 04 2005 - 03:54:50 CDT)
• edward11postmaster.co.uk
  • winrar 3.50 Exploit (Sat Oct 15 2005 - 16:30:56 CDT)
• enjiinfosys.tuwien.ac.at
  • Yapig: XSS / Code Injection Vulnerability (Thu Oct 13 2005 - 07:04:34 CDT)
• Eric Romang / ZATAZ.com
  • php < 4.4.1 htaccess apache dos (Mon Oct 24 2005 - 02:36:38 CDT)
• Eygene A. Ryabinkin
  • Re: [Full-disclosure] Multiple Vendor Anti-Virus Software DetectionEvasion Vulnerability through forged magic byte (Thu Oct 27 2005 - 01:25:48 CDT)
• Fernando Gont
  • Revised draft on ICMP attacks (Mon Oct 24 2005 - 09:51:05 CDT)
• Fixer
  • Security Contacr for Mycall (Fri Oct 14 2005 - 15:50:58 CDT)
• Florian Weimer
  • Re: [Full-disclosure] SEC-Consult SA 20051025-0 :: Snoopy Remote Code Execution Vulnerability (Thu Oct 27 2005 - 03:12:37 CDT)
• FreeBSD Security Advisories
  • FreeBSD Security Advisory FreeBSD-SA-05:21.openssl (Tue Oct 11 2005 - 07:02:50 CDT)
• Gadi Evron
  • Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers (Fri Oct 07 2005 - 13:26:10 CDT)
  • Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers (Fri Oct 07 2005 - 12:38:39 CDT)
• Gary Oleary-Steele
  • [SEC-1 Advisory] Collaboration Data Objects Buffer Overflow Vulnerability (Wed Oct 12 2005 - 05:01:50 CDT)
  • [SEC-1 Advisory] GFI MailSecurity 8.1 Web Module Buffer Overflow (Wed Oct 12 2005 - 05:59:37 CDT)
• Georg Wicherski
  • mwcollect v3.0.0 Release (Sun Oct 30 2005 - 06:35:11 CST)
• H D Moore
  • Metasploit Framework v2.5 (Tue Oct 18 2005 - 23:08:40 CDT)
• iDEFENSE Labs
  • iDefense Security Advisory 10.28.05: Multiple Vendor chmlib CHM File Handling Buffer Overflow Vulnerability (Fri Oct 28 2005 - 14:58:45 CDT)
  • iDEFENSE Security Advisory 10.24.05: SCO Openserver authsh 'Home' Buffer Overflow Vulnerability (Mon Oct 24 2005 - 17:51:23 CDT)
  • iDEFENSE Security Advisory 10.24.05: SCO Unixware Setuid ppp prompt Buffer Overflow Vulnerability (Mon Oct 24 2005 - 17:51:26 CDT)
  • iDEFENSE Security Advisory 10.24.05: SCO Openserver backupsh 'Home' Buffer Overflow Vulnerability (Mon Oct 24 2005 - 17:51:20 CDT)
  • iDEFENSE Security Advisory 10.20.05: Symantec Norton AntiVirus DiskMountNotify Local Privilege Escalation (Thu Oct 20 2005 - 16:35:34 CDT)
  • iDEFENSE Security Advisory 10.20.05: Symantec Norton AntiVirus LiveUpdate Local Privilege Escalation (Thu Oct 20 2005 - 16:35:10 CDT)
  • iDEFENSE Security Advisory 10.20.05: Multiple Vendor Ethereal srvloc Buffer Overflow Vulnerability (Thu Oct 20 2005 - 16:35:06 CDT)
  • iDEFENSE Security Advisory 10.13.05: Multiple Vendor wget/curl NTLM Username Buffer Overflow Vulnerability (Thu Oct 13 2005 - 12:16:13 CDT)
  • iDEFENSE Security Advisory 10.13.05: Multiple Vendor XMail 'sendmail' Recipient Buffer Overflow Vulnerability (Thu Oct 13 2005 - 12:16:12 CDT)
  • iDEFENSE Security Advisory 10.10.05: SGI IRIX runpriv Design Error Vulnerability (Mon Oct 10 2005 - 15:53:27 CDT)
  • iDEFENSE Security Advisory 10.10.05: Kaspersky Anti-Virus Engine CHM File Parser Buffer Overflow Vulnerability (Mon Oct 10 2005 - 15:54:23 CDT)
  • iDEFENSE Security Advisory 10.11.05: Microsoft Distributed Transaction Controller Packet Relay DoS Vulnerability (Tue Oct 11 2005 - 13:38:34 CDT)
  • iDEFENSE Security Advisory 10.11.05: Microsoft Distributed Transaction Controller TIP DoS Vulnerability (Tue Oct 11 2005 - 13:38:36 CDT)
  • RE: iDEFENSE Security Advisory 10.04.05: Symantec AntiVirus Scan Engine Web Service Buffer Overflow Vulnerability (Tue Oct 04 2005 - 17:09:43 CDT)
  • iDEFENSE Security Advisory 10.04.05: Symantec AntiVirus Scan Engine Web Service Buffer Overflow Vulnerability (Tue Oct 04 2005 - 17:03:24 CDT)
  • iDEFENSE Security Advisory 10.04.05: UW-IMAP Netmailbox Name Parsing Buffer Overflow Vulnerability (Tue Oct 04 2005 - 16:49:52 CDT)
• Integrigy Security
  • Vulnerabilities in Oracle E-Business Suite 11i - Critical Patch Update October 2005 (Wed Oct 19 2005 - 14:56:40 CDT)
• Ivan .
  • Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers (Thu Oct 06 2005 - 20:32:39 CDT)
• Jason Coombs
  • Careless Law Enforcement Computer Forensics Lacking InfoSec Expertise Causes Suicides (Sat Oct 01 2005 - 13:17:34 CDT)
• Jason Haar
  • Re: Mozilla Thunderbird SMTP down-negotiation weakness (Wed Oct 26 2005 - 16:32:53 CDT)
  • Re: Mozilla Thunderbird SMTP down-negotiation weakness (Wed Oct 26 2005 - 04:35:27 CDT)
• Jerome Athias
  • Re: Some new whitepapers ... (Wed Oct 05 2005 - 17:07:35 CDT)
• khcbsdmail.org
  • RTasarim WebAdmin modul SQL injection (Fri Oct 14 2005 - 01:46:12 CDT)
• Kurt Seifried
  • Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers (Fri Oct 07 2005 - 17:50:22 CDT)
• L. Adrian Griffis
  • RE: Careless Law Enforcement Computer Forensics Lacking InfoSec Expertise Causes Suicides (Mon Oct 03 2005 - 13:58:46 CDT)
• Lachniet, Mark
  • RE: Careless Law Enforcement Computer Forensics Lacking InfoSec Expertise Causes Suicides (Sat Oct 01 2005 - 21:14:30 CDT)
• Len Sassaman
  • CodeCon 2006 Call For Papers (Tue Oct 11 2005 - 14:10:49 CDT)
• lgreenemcmp.com
  • Research for network security news article (Wed Oct 12 2005 - 09:46:30 CDT)
• Lila Buchalski
  • RE: Some new whitepapers ... (Wed Oct 05 2005 - 15:04:48 CDT)
  • Announcement : Core Banking Application Security List (Wed Oct 05 2005 - 14:44:13 CDT)
• listrem0te.com
  • Kaspersky Antivirus Remote Heap Overflow (Mon Oct 03 2005 - 08:48:48 CDT)
• liudieyuumbrella.name
  • ie7 will have more mechanisms (Mon Oct 17 2005 - 02:53:05 CDT)
• lmsfe.up.pt
  • Planet Technology Corp FGSW2402RS switch default password / "backdoor" (Wed Oct 05 2005 - 19:52:27 CDT)
• Ludwig Nussel
  • SUSE Security Announcement: permissions (SUSE-SA:2005:062) (Mon Oct 24 2005 - 04:33:18 CDT)
• Luigi Auriemma
  • F.E.A.R. 1.01 likes lithsock (Fri Oct 21 2005 - 11:21:36 CDT)
• m123303richmond.ac.uk
  • Google Talk cleartext proxy credentials vulnerability (Fri Oct 14 2005 - 06:06:55 CDT)
• ma+nomaildt.e-technik.uni-dortmund.de
  • fetchmail security announcement 2005-02 (CVE-2005-3088) (Thu Oct 27 2005 - 03:25:54 CDT)
• Mandriva Security Team
  • MDKSA-2005:200 - Updated apache-mod_auth_shadow packages fix security restriction bypass issues. (Thu Oct 27 2005 - 13:50:32 CDT)
  • MDKSA-2005:201 - Updated sudo packages fix vulnerability (Thu Oct 27 2005 - 13:51:58 CDT)
  • MDKSA-2005:199 - Updated netpbm packages fix pnmtopng vulnerabilities (Wed Oct 26 2005 - 16:38:52 CDT)
  • MDKSA-2005:196 - Updated perl-Compress-Zlib packages fix vulnerabilities (Wed Oct 26 2005 - 16:34:45 CDT)
  • MDKSA-2005:194 - Updated php-imap packages fix buffer overflow vulnerabilities. (Wed Oct 26 2005 - 16:31:58 CDT)
  • MDKSA-2005:186-1 - Updated lynx packages fix remote buffer overflow (Wed Oct 26 2005 - 16:29:10 CDT)
  • MDKSA-2005:195 - Updated squid packages fix vulnerabilities (Wed Oct 26 2005 - 16:33:21 CDT)
  • MDKSA-2005:198 - Updated uim packages fix suid linking vulnerabilities. (Wed Oct 26 2005 - 16:37:31 CDT)
  • MDKSA-2005:193-1 - Updated ethereal packages fix multiple vulnerabilities (Wed Oct 26 2005 - 16:30:35 CDT)
  • MDKSA-2005:197 - Updated unzip packages fix suid, permissions vulnerabilities. (Wed Oct 26 2005 - 16:36:07 CDT)
  • MDKSA-2005:193 - Updated ethereal packages fix multiple vulnerabilities (Tue Oct 25 2005 - 21:59:11 CDT)
  • MDKSA-2005:192 - Updated xli packages fix buffer overflow vulnerabilities. (Fri Oct 21 2005 - 01:27:52 CDT)
  • MDKSA-2005:191 - Updated ruby packages fix safe level and taint flag protections vulnerability (Fri Oct 21 2005 - 01:26:08 CDT)
  • MDKSA-2005:190 - Updated nss_ldap/pam_ldap packages fix privilege vulnerabilities. (Fri Oct 21 2005 - 01:24:27 CDT)
  • MDKSA-2005:189 - Updated imap packages fix buffer overflow vulnerabilities. (Fri Oct 21 2005 - 01:22:42 CDT)
  • MDKSA-2005:188 - Updated graphviz packages fix temporary file vulnerability. (Fri Oct 21 2005 - 01:20:58 CDT)
  • MDKSA-2005:187 - Updated dia packages fix python SVG import vulnerability. (Fri Oct 21 2005 - 01:19:08 CDT)
  • MDKSA-2005:186 - Updated lynx packages fix remote buffer overflow (Tue Oct 18 2005 - 06:16:03 CDT)
  • MDKSA-2005:185 - Updated koffice packages fix KWord RTF import overflow vulnerability (Fri Oct 14 2005 - 16:27:20 CDT)
  • MDKSA-2005:184 - Updated cfengine packages fix temporary file vulnerabilities (Thu Oct 13 2005 - 22:32:51 CDT)
  • MDKSA-2005:183 - Updated wget packages fix NTLM authentication vulnerability (Thu Oct 13 2005 - 22:31:09 CDT)
  • MDKSA-2005:182 - Updated curl packages fix NTLM authentication vulnerability (Thu Oct 13 2005 - 22:29:19 CDT)
  • MDKSA-2005:181 - Updated squid packages fix vulnerabilities (Wed Oct 12 2005 - 01:08:57 CDT)
  • MDKSA-2005:178 - Updated squirrelmail packages fixes XSS vulberability (Wed Oct 12 2005 - 01:03:48 CDT)
  • MDKSA-2005:179 - Updated openssl packages fix vulnerabilities (Wed Oct 12 2005 - 01:05:28 CDT)
  • MDKSA-2005:180 - Updated xine-lib packages fixes cddb vulnerability (Wed Oct 12 2005 - 01:07:13 CDT)
  • MDKSA-2005:176 - Updated webmin package fixes authentication bypass vulnerability (Fri Oct 07 2005 - 16:52:56 CDT)
  • MDKSA-2005:177 - Updated hylafax packages fix temporary file vulnerability (Fri Oct 07 2005 - 17:12:49 CDT)
  • MDKSA-2005:175 - Updated texinfo packages fix temporary file vulnerability (Thu Oct 06 2005 - 22:07:40 CDT)
  • MDKSA-2005:174 - Updated mozilla-thunderbird packages fix multiple vulnerabilities (Thu Oct 06 2005 - 22:06:00 CDT)
  • MDKSA-2005:173 - Updated mozilla-firefox packages fix vulnerabilities (Thu Oct 06 2005 - 22:04:10 CDT)
  • MDKSA-2005:172 - Updated openssh packages fix GSSAPI credentials vulnerability (Thu Oct 06 2005 - 22:02:30 CDT)
  • MDKSA-2005:171 - Updated kernel packages fix multiple vulnerabilities (Mon Oct 03 2005 - 14:46:39 CDT)
• Marcus Meissner
  • SUSE Security Announcement: openSSL protocol downgrade attack (SUSE-SA:2005:061) (Wed Oct 19 2005 - 08:16:02 CDT)
• Martin Pitt
  • [USN-212-1] libgda2 vulnerability (Fri Oct 28 2005 - 14:38:04 CDT)
  • [USN-151-3] zlib vulnerabilities (Fri Oct 28 2005 - 17:24:37 CDT)
  • [USN-213-1] sudo vulnerability (Fri Oct 28 2005 - 14:44:09 CDT)
  • [USN-206-2] Fixed lynx packages for USN-206-1 (Fri Oct 28 2005 - 19:16:40 CDT)
  • [USN-211-1] Enigmail vulnerability (Thu Oct 20 2005 - 08:31:55 CDT)
  • Re: [Full-disclosure] [USN-208-1] SSH server vulnerability (Tue Oct 18 2005 - 02:13:49 CDT)
  • [USN-210-1] netpbm vulnerability (Tue Oct 18 2005 - 09:53:42 CDT)
  • [USN-208-1] graphviz vulnerability (Mon Oct 17 2005 - 08:17:30 CDT)
  • [USN-207-1] PHP vulnerability (Mon Oct 17 2005 - 05:24:41 CDT)
  • [USN-208-1] SSH server vulnerability (Mon Oct 17 2005 - 11:37:35 CDT)
  • [USN-206-1] Lynx vulnerability (Mon Oct 17 2005 - 04:40:48 CDT)
  • [USN-204-1] SSL library vulnerability (Fri Oct 14 2005 - 03:03:35 CDT)
  • [USN-205-1] Curl and wget vulnerabilities (Fri Oct 14 2005 - 08:31:55 CDT)
  • [USN-203-1] Abiword vulnerabilities (Thu Oct 13 2005 - 09:51:36 CDT)
  • [USN-201-1] SqWebmail vulnerabilities (Tue Oct 11 2005 - 11:14:05 CDT)
  • [USN-202-1] KOffice vulnerability (Wed Oct 12 2005 - 02:20:03 CDT)
  • [USN-200-1] Thunderbird vulnerabilities (Tue Oct 11 2005 - 01:00:28 CDT)
  • [USN-195-1] Ruby vulnerability (Mon Oct 10 2005 - 02:57:51 CDT)
  • [USN-199-1] Linux kernel vulnerabilities (Mon Oct 10 2005 - 11:22:25 CDT)
  • [USN-197-1] Shorewall vulnerability (Mon Oct 10 2005 - 06:05:50 CDT)
  • [USN-198-1] cfengine vulnerabilities (Mon Oct 10 2005 - 09:55:38 CDT)
  • [USN-196-1] Xine library vulnerability (Mon Oct 10 2005 - 03:57:57 CDT)
  • [USN-194-1] texinfo vulnerability (Thu Oct 06 2005 - 09:03:54 CDT)
  • [USN-193-1] dia vulnerability (Tue Oct 04 2005 - 07:20:20 CDT)
  • [USN-155-3] Fixed mozilla locale packages (Tue Oct 04 2005 - 08:25:59 CDT)
• Martin Schulze
  • [SECURITY] [DSA 877-1] New gnump3d packages fix several vulnerabilities (Fri Oct 28 2005 - 04:50:27 CDT)
  • [SECURITY] [DSA 878-1] New netpbm-free packages fix arbitrary code execution (Fri Oct 28 2005 - 06:48:22 CDT)
  • [SECURITY] [DSA 876-1] New lynx-ssl packages fix arbitrary code execution (Thu Oct 27 2005 - 07:43:16 CDT)
  • [SECURITY] [DSA 875-1] New OpenSSL packages fix cryptographic weakness (Thu Oct 27 2005 - 03:57:14 CDT)
  • [SECURITY] [DSA 874-1] New lynx packages fix arbitrary code execution (Thu Oct 27 2005 - 02:58:24 CDT)
  • [SECURITY] [DSA 872-1] New koffice packages fix arbitrary code execution (Wed Oct 26 2005 - 04:42:09 CDT)
  • [SECURITY] [DSA 873-1] New net-snmp packages fix denial of service (Wed Oct 26 2005 - 13:11:20 CDT)
  • [SECURITY] [DSA 548-2] New imlib packages fix arbitrary code execution (Tue Oct 25 2005 - 23:38:33 CDT)
  • [SECURITY] [DSA 871-2] New libgda2 packages fix arbitrary code execution (Tue Oct 25 2005 - 11:18:48 CDT)
  • [SECURITY] [DSA 870-1] New sudo packages fix arbitrary command execution (Tue Oct 25 2005 - 04:39:08 CDT)
  • [SECURITY] [DSA 871-1] New libgda2 packages fix arbitrary code execution (Tue Oct 25 2005 - 10:23:19 CDT)
  • [SECURITY] [DSA 869-1] New eric packages fix arbitrary code execution (Thu Oct 20 2005 - 22:59:17 CDT)
  • [SECURITY] [DSA 867-1] New module-assistant package fixes insecure temporary file (Thu Oct 20 2005 - 05:57:19 CDT)
  • [SECURITY] [DSA 866-1] New Mozilla packages fix several vulnerabilities (Thu Oct 20 2005 - 00:44:19 CDT)
  • [SECURITY] [DSA 868-1] New Mozilla Thunderbird packages fix several vulnerabilities (Thu Oct 20 2005 - 10:11:33 CDT)
  • [SECURITY] [DSA 864-1] New Ruby 1.8 packages fix safety bypass (Thu Oct 13 2005 - 01:49:20 CDT)
  • [SECURITY] [DSA 865-1] New hylafax packages fix insecure temporary files (Thu Oct 13 2005 - 04:45:14 CDT)
  • [SECURITY] [DSA 863-1] New xine-lib packages fix arbitrary code execution (Tue Oct 11 2005 - 22:48:16 CDT)
  • [SECURITY] [DSA 850-1] New tcpdump packages fix denial of service (Sat Oct 08 2005 - 23:57:58 CDT)
  • [SECURITY] [DSA 851-1] New openvpn packages fix denial of service (Sun Oct 09 2005 - 02:14:49 CDT)
  • [SECURITY] [DSA 852-1] New up-imapproxy packages fix arbitrary code execution (Sun Oct 09 2005 - 02:59:14 CDT)
  • [SECURITY] [DSA 853-1] New ethereal packages fix several vulnerabilities (Sun Oct 09 2005 - 06:35:18 CDT)
  • [SECURITY] [DSA 854-1] New tcpdump packages fix denial of service (Sun Oct 09 2005 - 12:06:06 CDT)
  • [SECURITY] [DSA 855-1] New weex packages fix arbitrary code execution (Sun Oct 09 2005 - 23:24:02 CDT)
  • [SECURITY] [DSA 856-1] New py2play packages fix arbitrary code execution (Mon Oct 10 2005 - 01:21:05 CDT)
  • [SECURITY] [DSA 857-1] New graphviz packages fix insecure temporary file (Mon Oct 10 2005 - 01:43:55 CDT)
  • [SECURITY] [DSA 858-1] New xloadimage packages fix arbitrary code execution (Mon Oct 10 2005 - 12:52:26 CDT)
  • [SECURITY] [DSA 859-1] New xli packages fix arbitrary code execution (Mon Oct 10 2005 - 13:13:01 CDT)
  • [SECURITY] [DSA 860-1] New Ruby packages fix safety bypass (Mon Oct 10 2005 - 23:55:24 CDT)
  • [SECURITY] [DSA 861-1] New uw-imap packages fix arbitrary code execution (Tue Oct 11 2005 - 01:26:12 CDT)
  • [SECURITY] [DSA 862-1] New Ruby 1.6 packages fix safety bypass (Tue Oct 11 2005 - 02:01:33 CDT)
  • [SECURITY] [DSA 847-1] New dia packages fix arbitrary code execution (Sat Oct 08 2005 - 01:49:01 CDT)
  • [SECURITY] [DSA 848-1] New masqmail packages fix several vulnerabilities (Sat Oct 08 2005 - 03:08:55 CDT)
  • [SECURITY] [DSA 849-1] New shorewall packages fix firewall bypass (Sat Oct 08 2005 - 05:04:56 CDT)
  • [SECURITY] [DSA 846-1] New cpio packages fix several vulnerabilities (Fri Oct 07 2005 - 10:51:30 CDT)
  • [SECURITY] [DSA 845-1] New mason packages fix missing init script (Thu Oct 06 2005 - 03:05:50 CDT)
  • [SECURITY] [DSA 844-1] New mod-auth-shadow packages fix authentication bypass (Wed Oct 05 2005 - 04:23:52 CDT)
  • [SECURITY] [DSA 843-1] New arc packages fix insecure temporary files (Wed Oct 05 2005 - 01:06:14 CDT)
  • [SECURITY] [DSA 833-2] New mysql-dfsg-4.1 package fixes arbitrary code execution (Tue Oct 04 2005 - 13:04:22 CDT)
  • [SECURITY] [DSA 839-1] New apachetop packages fix insecure temporary file (Tue Oct 04 2005 - 01:41:43 CDT)
  • [SECURITY] [DSA 842-1] New egroupware packages fix arbitrary code execution (Tue Oct 04 2005 - 10:11:05 CDT)
  • [SECURITY] [DSA 840-1] New drupal packages fix remote command execution (Tue Oct 04 2005 - 02:07:56 CDT)
  • [SECURITY] [DSA 837-1] New Mozilla Firefox packages fix denial of service (Sun Oct 02 2005 - 01:07:56 CDT)
• maxjestsuper.pl
  • [SECURITYREASON.COM] phpMyAdmin Local file inclusion 2.6.4-pl1 (Mon Oct 10 2005 - 11:11:19 CDT)
• Meder Kydyraliev
  • Linux Orinoco drivers information leakage (Wed Oct 12 2005 - 01:34:59 CDT)
• mgotts2roads.com
  • Re: Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through (Fri Oct 28 2005 - 11:52:38 CDT)
• Michael Stone
  • [SECURITY] [DSA 838-1] New mozilla-firefox packages fox multiple vulnerabilities (Sun Oct 02 2005 - 19:48:53 CDT)
• Morten Torstensen
  • Re: Windows host based firewall tester (Wed Oct 19 2005 - 01:23:17 CDT)
• Neil Dickey
  • RE: Careless Law Enforcement Computer Forensics Lacking InfoSec Expertise Causes Suicides (Tue Oct 04 2005 - 09:36:53 CDT)
• NGSSoftware Insight Security Research
  • Multiple Critical and High Vulnerabilities in Oracle Database Server (Tue Oct 18 2005 - 18:13:59 CDT)
  • High Risk Vulnerability in Sun Directory Server (Thu Oct 06 2005 - 06:00:09 CDT)
  • Patches available for critical flaws in HP Openview (Wed Oct 05 2005 - 02:56:20 CDT)
• Nicob
  • Re: [Full-disclosure] Re: phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit. (Thu Oct 27 2005 - 09:30:31 CDT)
• nonesecurityfocus.com
  • Trusted Digital, Trusted Mobility Suite Authorization Bypass Vulnerability (Thu Oct 13 2005 - 21:57:42 CDT)
• noreplysecurityfocus.com
  • APPLE-SA-2005-10-31 Mac OS X v10.4.3 (Mon Oct 31 2005 - 17:21:09 CST)
• OpenPKG
  • [OpenPKG-SA-2005.022] OpenPKG Security Advisory (openssl) (Mon Oct 17 2005 - 01:52:07 CDT)
• papipsychohotmail.com
  • Nuked klan 1.7: SQL vulnerability (Sat Oct 22 2005 - 11:55:40 CDT)
  • Nuked klan 1.7: Remote Exploit (Mon Oct 24 2005 - 05:23:05 CDT)
  • Nuked klan 1.7: Bypassed level admin on forum(corrected) (Sun Oct 23 2005 - 19:43:38 CDT)
  • Nuked klan 1.7: XSS vulnerability (Fri Oct 21 2005 - 10:09:23 CDT)
• Paul
  • RE: Possible Bug in PHP-Fusion 6.0.204 (Mon Oct 24 2005 - 21:41:09 CDT)
• Paul Craig
  • Multiple vulnerabilities within RockLiffe MailSite Express WebMail (Fri Oct 28 2005 - 00:32:25 CDT)
• Paul Laudanski
  • Re: phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit. (Tue Oct 25 2005 - 16:21:17 CDT)
  • phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit. (Tue Oct 25 2005 - 16:02:27 CDT)
  • Re: [Full-disclosure] Kerio Personal Firewall and Kerio Server Firewall FWDRV driver Local Denial of Service (Mon Oct 17 2005 - 20:06:42 CDT)
• Paul Szabo
  • gnome-pty-helper writes arbitrary utmp records (Fri Oct 07 2005 - 16:29:23 CDT)
• peanutblack-rat.no-ip.com
  • Possible Bug in PHP-Fusion 6.0.204 (Mon Oct 24 2005 - 11:44:25 CDT)
• Phantasmal Phantasmagoria
  • The Malloc Maleficarum (Tue Oct 11 2005 - 12:14:02 CDT)
• philippkolmann.at
  • Trillian remote crashable (Mon Oct 03 2005 - 04:33:19 CDT)
• Piotr Bania
  • Exploiting Windows Device Drivers Whitepaper (Sun Oct 16 2005 - 02:52:14 CDT)
  • Kerio Personal Firewall and Kerio Server Firewall FWDRV driver Local Denial of Service (Thu Oct 13 2005 - 08:17:36 CDT)
• please_reply_to_securitysco.com
  • OpenServer 5.0.7 : authsh and backupsh buffer overflow (Thu Oct 20 2005 - 17:46:32 CDT)
  • UnixWare 7.1.4 UnixWare 7.1.3 : ppp buffer overflow (Thu Oct 20 2005 - 17:46:19 CDT)
• poizonsecurityinfo.ru
  • DboardGear - uncorrect import themes (SQL-inject) (Tue Oct 25 2005 - 05:28:40 CDT)
• ppwd25hotmail.com
  • Windows UMPNPMGR wsprintfW Stack Buffer Overflow Vulnerability PoC (Fri Oct 21 2005 - 05:37:45 CDT)
• prebenwatchcom.no
  • Vulnerability in MG2 php based Image Gallery - bypass security, view password protected images (Fri Oct 28 2005 - 18:39:08 CDT)
  • aspReady FAQ - open for SQL-injections (Thu Oct 06 2005 - 12:13:19 CDT)
• Radoslav Dejanoviæ
  • Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers (Fri Oct 07 2005 - 02:56:53 CDT)
• Rainer Duffner
  • Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers (Thu Oct 06 2005 - 14:17:49 CDT)
  • Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers (Thu Oct 06 2005 - 13:22:06 CDT)
• retrogodaliceposta.it
  • PhpNuke 7.8 with all security fixes/patches "Your_Account", "Downloads", "Web Links" SQL Injection / Remote commans execution (Sun Oct 23 2005 - 18:33:54 CDT)
  • e107 remote commands execution (Tue Oct 18 2005 - 02:24:45 CDT)
  • Cyphor 0.19 SQL Injection / Board takeover / cross site scripting (Sat Oct 08 2005 - 00:37:53 CDT)
  • Utopia News Pro 1.1.3 SQL Injection / cross site scripting (Thu Oct 06 2005 - 21:15:57 CDT)
• rgodaliceposta.it
  • versatileBulletinBoard V1.0.0 RC2 (possibly prior versions) multiple SQL injection vulnerabilities / login bypass / board takeover (Mon Oct 10 2005 - 17:23:15 CDT)
• Richard M. Smith
  • Looking for security contacts at Sony and Lenovo (FKA IBM) (Tue Oct 25 2005 - 16:45:52 CDT)
  • Looking for a security contact at Macrovision/InstallShield (Tue Oct 25 2005 - 18:08:10 CDT)
• rod hedor
  • Remote File Inclusion in forum PunBB (Sun Oct 23 2005 - 20:57:40 CDT)
• Scott Cromar
  • Insecure Temporary Files in BMC/Control-M Agent (Sat Oct 22 2005 - 05:51:05 CDT)
• Sebastian Krahmer
  • SUSE Security Announcement: OpenWBEM (SUSE-SA:2005:060) (Mon Oct 17 2005 - 09:07:59 CDT)
• SEC Consult Research
  • Re: [Full-disclosure] SEC-Consult SA 20051025-0 :: Snoopy Remote Code Execution Vulnerability (Thu Oct 27 2005 - 09:14:52 CDT)
• Secunia Research
  • Secunia Research: ATutor Multiple Vulnerabilities (Thu Oct 27 2005 - 09:56:25 CDT)
  • Secunia Research: Mantis "t_core_path" File Inclusion Vulnerability (Wed Oct 26 2005 - 10:41:32 CDT)
  • Secunia Research: ZipGenius Multiple Archive Handling Buffer Overflow (Fri Oct 21 2005 - 08:34:25 CDT)
  • Secunia Research: MySource Cross-Site Scripting and File Inclusion Vulnerabilities (Tue Oct 18 2005 - 09:53:53 CDT)
  • Secunia Research: AhnLab V3 Antivirus ALZ/UUE/XXE Archive Handling Buffer Overflow (Thu Oct 13 2005 - 10:39:36 CDT)
  • Secunia Research: Novell NetMail NMAP Agent "USER" Buffer Overflow Vulnerability (Wed Oct 12 2005 - 03:41:45 CDT)
  • Secunia Research: WinRAR Format String and Buffer Overflow Vulnerabilities (Tue Oct 11 2005 - 09:08:05 CDT)
  • Secunia Research: Webroot Desktop Firewall Two Vulnerabilities (Thu Oct 06 2005 - 04:53:14 CDT)
  • Secunia Research: PHP-Fusion Two SQL Injection Vulnerabilities (Thu Oct 06 2005 - 04:55:09 CDT)
  • Secunia Research: ALZip Multiple Archive Handling Buffer Overflow (Wed Oct 05 2005 - 07:34:48 CDT)
• securesymantec.com
  • VERITAS NetBackup: Java User-Interface, format string vulnerability (Wed Oct 12 2005 - 15:24:39 CDT)
• Security Alert
  • [security bulletin] SSRT5975 HP-UX Running on Itanium Platforms Local Denial of Service (DoS) (Thu Oct 13 2005 - 14:18:22 CDT)
• security curmudgeon
  • Re: [Dailydave] Security contact for ... (Fri Oct 07 2005 - 06:16:51 CDT)
• security-alerthp.com
  • [security bulletin] SSRT051055 rev.0 - HP Oracle for OpenView (OfO) Critical Patch Update October 2005 (Mon Oct 24 2005 - 13:32:48 CDT)
  • [security bulletin] SSRT051052 rev.1 - HP OpenView Operations and OpenView VantagePoint Java Runtime Environment (JRE) Remote Privileged Access (Fri Oct 21 2005 - 12:35:33 CDT)
  • [security bulletin] SSRT051052 rev.0 - HP OpenView Operations and OpenView VantagePoint Java Runtime Environment (JRE) Remote Privileged Access (Wed Oct 19 2005 - 14:17:52 CDT)
  • [security bulletin] SSRT051041 rev.1 - HP-UX Mozilla Remote Unauthorized Execution of Privileged Code or Denial of Service (DoS) (Thu Oct 13 2005 - 14:23:16 CDT)
  • [security bulletin] SSRT051003 rev.1 - HP-UX Java Web Start remote unauthorized privileged access (Fri Oct 07 2005 - 05:41:39 CDT)
  • [security bulletin] SSRT051043 rev.0 - Apache Remote Unauthorized access (Fri Oct 07 2005 - 05:44:22 CDT)
  • [security bulletin] SSRT051004 rev.1 - HP-UX Java Runtime Environment (JRE) Untrusted Applet Elevates Privilege (Thu Oct 06 2005 - 05:57:34 CDT)
  • [security bulletin] SSRT4743, SSRT4884 rev.1 - HP Tru64 UNIX TCP/IP remote Denial of Service (DoS) (Thu Oct 06 2005 - 06:06:05 CDT)
  • [security bulletin] SSRT051023 rev.5 - HP OpenView Network Node Manager (OV NNM) Remote Unauthorized Privileged Access (Tue Oct 04 2005 - 14:56:59 CDT)
  • [security bulletin] SSRT051030 rev.1 - HP OpenView Event Correlation Services (OV ECS) Remote Unauthorized Privileged Access (Tue Oct 04 2005 - 15:13:01 CDT)
  • [security bulletin] SSRT5940 rev.2 - HP-UX Mozilla remote, unauthorized user may execute privileged code (Tue Oct 04 2005 - 15:23:34 CDT)
  • [security bulletin] SSRT051040 rev.0 - HP-UX Mozilla Remote Unauthorized Execution of Privileged Code (Tue Oct 04 2005 - 15:31:39 CDT)
  • [security bulletin] SSRT051041 rev.0 - HP-UX Mozilla Remote Unauthorized Execution of Privileged Code or Denial of Service (DoS) (Tue Oct 04 2005 - 15:43:24 CDT)
• securityaewebworks.com
  • Re: Online Dating Software by AEwebworks - aeDating Script <= 4.0 Version Vulnerability (Sun Oct 02 2005 - 05:47:17 CDT)
• Seth Fogie
  • Airscanner Mobile Security Advisory #05101001: iTunes Shared Music Denial of Service/Spoofing/Flooding/Abuse (Fri Oct 14 2005 - 10:08:37 CDT)
• Shell
  • Linksys WRT54G/S Directory Traversal (Tue Oct 18 2005 - 17:11:59 CDT)
• sikikmailgmail.com
  • SparkleBlog Journal.php HTML Injection Vulnerability =>v2.1 (all versions vulnerable) (Tue Oct 25 2005 - 11:47:05 CDT)
  • Zomplog Script Injection Vulnerability =>3.4 (all versions vulnerable) (Sat Oct 22 2005 - 08:25:23 CDT)
• Silent / Saracoth
  • Re: Opinion: Complete failure of Oracle security response and utter neglect of t (Mon Oct 10 2005 - 08:59:30 CDT)
• slythersgmail.com
  • PHP local safedir restriction bypass (Mon Oct 17 2005 - 09:49:55 CDT)
• snsadv
  • [SNS Advisory No.85] XOOPS Multiple Cross-site Scripting Vulnerabilities (Tue Oct 25 2005 - 04:08:08 CDT)
  • [SNS Advisory No.84] Oracle Application Server HTTP Response Splitting Vulnerability (Fri Oct 21 2005 - 03:02:31 CDT)
• sp3xsecurityreason.com
  • SecurityAlert SA025 : PHPNuke Remote Directory Traversal (Wed Oct 19 2005 - 03:59:22 CDT)
• SPI Labs
  • Oracle 10g - emagent.exe Stack-Based Overflow (Wed Oct 19 2005 - 20:46:08 CDT)
• sQlhotmail.com
  • uplod phpshell in PHP Advanced Transfer Manager (Sat Oct 29 2005 - 13:46:03 CDT)
• Stefan Esser
  • Advisory 17/2005: phpBB Multiple Vulnerabilities (Sun Oct 30 2005 - 18:16:37 CST)
  • Advisory 18/2005: PHP Cross Site Scripting (XSS) Vulnerability in phpinfo() (Mon Oct 31 2005 - 07:33:22 CST)
  • Advisory 19/2005: PHP register_globals Activation Vulnerability in parse_str() (Mon Oct 31 2005 - 07:34:23 CST)
  • Advisory 20/2005: PHP File-Upload $GLOBALS Overwrite Vulnerability (Mon Oct 31 2005 - 07:35:20 CST)
  • Advisory 16/2005: phpMyAdmin Local File Inclusion Vulnerability (Sat Oct 22 2005 - 08:33:46 CDT)
• Stefano Zanero
  • Re: Careless Law Enforcement Computer Forensics Lacking InfoSec Expertise Causes Suicides (Mon Oct 03 2005 - 14:07:00 CDT)
• Steve Shockley
  • Re: Network Appliance iSCSI Authentication Bypass (Thu Oct 27 2005 - 21:20:37 CDT)
• steve.shockleyshockley.net
  • Re: Network Appliance iSCSI Authentication Bypass (Fri Oct 28 2005 - 08:18:53 CDT)
• Steven M. Christey
  • A common researcher diagnosis error: misreading error messages (Tue Oct 04 2005 - 16:11:51 CDT)
• Sune Kloppenborg Jeppesen
  • [ GLSA 200510-25 ] Ethereal: Multiple vulnerabilities in protocol dissectors (Sun Oct 30 2005 - 10:57:54 CST)
  • [ GLSA 200510-26 ] XLI, Xloadimage: Buffer overflow (Sun Oct 30 2005 - 11:44:16 CST)
  • [ GLSA 200510-15 ] Lynx: Buffer overflow in NNTP processing (Mon Oct 17 2005 - 10:03:01 CDT)
  • [ GLSA 200510-16 ] phpMyAdmin: Local file inclusion vulnerability (Mon Oct 17 2005 - 10:06:40 CDT)
  • [ GLSA 200510-12 ] KOffice, KWord: RTF import buffer overflow (Fri Oct 14 2005 - 00:30:00 CDT)
  • [ GLSA 200510-08 ] xine-lib: Format string vulnerability (Sat Oct 08 2005 - 11:08:33 CDT)
  • [ GLSA 200510-09 ] Weex: Format string vulnerability (Sat Oct 08 2005 - 11:23:19 CDT)
  • [ GLSA 200510-05 ] Ruby: Security bypass vulnerability (Thu Oct 06 2005 - 09:42:09 CDT)
  • [ GLSA 200510-06 ] Dia: Arbitrary code execution through SVG import (Thu Oct 06 2005 - 09:56:28 CDT)
  • [ GLSA 200510-03 ] Uim: Privilege escalation vulnerability (Tue Oct 04 2005 - 13:04:28 CDT)
• sup3r_linuxhotmail.com
  • Remote MySQL User on Cpanel Default installation with blank password (Tue Oct 25 2005 - 04:19:00 CDT)
• Tatercrispies
  • Re: [Full-disclosure] Re: phpBB 2.0.17 (and other BB systems as well) Cookie disclosure exploit. (Thu Oct 27 2005 - 08:54:59 CDT)
• Thierry Carrez
  • Re: [ GLSA 200510-23 ] TikiWiki: XSS vulnerability (Fri Oct 28 2005 - 15:44:30 CDT)
  • [ GLSA 200510-24 ] Mantis: Multiple vulnerabilities (Fri Oct 28 2005 - 06:46:04 CDT)
  • [ GLSA 200510-22 ] SELinux PAM: Local password guessing attack (Fri Oct 28 2005 - 06:17:04 CDT)
  • [ GLSA 200510-23 ] TikiWiki: XSS vulnerability (Fri Oct 28 2005 - 06:33:42 CDT)
  • [ GLSA 200510-21 ] phpMyAdmin: Local file inclusion and XSS vulnerabilities (Tue Oct 25 2005 - 06:49:15 CDT)
  • [ GLSA 200510-20 ] Zope: File inclusion through RestructuredText (Tue Oct 25 2005 - 06:31:55 CDT)
  • [ GLSA 200510-19 ] cURL: NTLM username stack overflow (Sat Oct 22 2005 - 08:20:43 CDT)
  • [ GLSA 200510-18 ] Netpbm: Buffer overflow in pnmtopng (Thu Oct 20 2005 - 06:29:30 CDT)
  • [ GLSA 200510-17 ] AbiWord: New RTF import buffer overflows (Thu Oct 20 2005 - 06:24:39 CDT)
  • [ GLSA 200510-14 ] Perl, Qt-UnixODBC, CMake: RUNPATH issues (Mon Oct 17 2005 - 03:12:13 CDT)
  • [ GLSA 200510-13 ] SPE: Insecure file permissions (Sat Oct 15 2005 - 04:57:29 CDT)
  • [ GLSA 200510-11 ] OpenSSL: SSL 2.0 protocol rollback (Wed Oct 12 2005 - 06:51:45 CDT)
  • [ GLSA 200510-10 ] uw-imap: Remote buffer overflow (Tue Oct 11 2005 - 06:13:25 CDT)
  • [ GLSA 200510-07 ] RealPlayer, Helix Player: Format string vulnerability (Fri Oct 07 2005 - 12:14:29 CDT)
  • [ GLSA 200510-04 ] Texinfo: Insecure temporary file creation (Wed Oct 05 2005 - 06:35:37 CDT)
  • [ GLSA 200510-02 ] Berkeley MPEG Tools: Multiple insecure temporary files (Mon Oct 03 2005 - 11:03:02 CDT)
  • [ GLSA 200510-01 ] gtkdiskfree: Insecure temporary file creation (Mon Oct 03 2005 - 10:54:26 CDT)
• Thierry Zoller
  • Ciscos VPN-Client-Passwords can be decrypted (Sun Oct 16 2005 - 14:28:41 CDT)
• Thomas Biege
  • Call for Papers - DIMVA 2006 (Tue Oct 04 2005 - 10:43:23 CDT)
• Thomas Henlich
  • Mozilla Thunderbird SMTP down-negotiation weakness (Tue Oct 25 2005 - 06:06:50 CDT)
• Tim
  • Windows host based firewall tester (Tue Oct 18 2005 - 16:55:26 CDT)
• Tobias Glemser
  • Re: VoIP-Phones: Weakness in proccessing SIP-Notify-Messages (Wed Oct 12 2005 - 09:15:38 CDT)
• Tony Finch
  • Re: Mozilla Thunderbird SMTP down-negotiation weakness (Wed Oct 26 2005 - 12:22:06 CDT)
• Tony Jambu
  • Re: Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers (Fri Oct 07 2005 - 23:26:47 CDT)
• Trustix Security Advisor
  • TSLSA-2005-0059 - multi (Mon Oct 24 2005 - 03:24:59 CDT)
• Ulf Harnhammar
  • Lynx Remote Buffer Overflow (Mon Oct 17 2005 - 00:10:36 CDT)
• unsecurewriteme.com
  • Antivirus detection bypass by special crafted archive. (Fri Oct 07 2005 - 16:11:29 CDT)
• v9
  • OpenVPN[v2.0.x]: foreign_option() formart string vulnerability. (Mon Oct 31 2005 - 00:01:53 CST)
• whynsfocus.com
  • NetFlow Analyzer 4 XSS Vulnerability (Mon Oct 17 2005 - 22:37:24 CDT)
• Will Belcher
  • SECURECon 2006 Call for papers! (Tue Oct 18 2005 - 07:05:48 CDT)
• Williams, James K
  • Re: Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability through forged magic byte (Thu Oct 27 2005 - 03:03:54 CDT)
  • RE: CAID 33485 - Computer Associates iGateway debug mode HTTP GET request buffer overflow vulnerability (Wed Oct 19 2005 - 18:02:39 CDT)
  • cacam_logsecurity_win32 exploit published on 20051018 by Metasploit (Wed Oct 19 2005 - 12:34:31 CDT)
  • CAID 33485 - Computer Associates iGateway debug mode HTTP GET request buffer overflow vulnerability (Fri Oct 14 2005 - 09:46:47 CDT)
  • Re: Antivirus detection bypass by special crafted archive. (Fri Oct 14 2005 - 10:26:40 CDT)
  • Re: Security contact for ... (Thu Oct 06 2005 - 15:37:19 CDT)
• Xsecurityfocus.com,
  • Remote File Inclusion in vCard :) (Tue Oct 25 2005 - 17:35:07 CDT)
• ZATAZ Audits
  • flexbackup default config insecure temporary file creation (Mon Oct 17 2005 - 03:06:06 CDT)
• zdi-disclosures3com.com
  • ZDI-05-001: VERITAS NetBackup Remote Code Execution (Wed Oct 12 2005 - 11:32:51 CDT)

Last message date: Mon Oct 31 2005 - 17:28:11 CST
Archived on: Mon Oct 31 2005 - 17:28:15 CST

386 messages sorted by: [ date ] [ thread ] [ subject ]