528 messages sorted by: [ date ] [ thread ] [ subject ]

Starting: Sun Jan 01 2006 - 14:31:57 CST
Ending: Wed Feb 01 2006 - 12:03:14 CST

• 8ux1fpd02sneakemail.com
  • Dumb IE6/XP denial of service found on the web (Sat Dec 31 2005 - 12:13:12 CST)
• Adam Conrad
  • [USN-241-1] Apache vulnerabilities (Thu Jan 12 2006 - 03:40:18 CST)
• Adam Shostack
  • Re: WMF round-up, updates and de-mystification (Tue Jan 03 2006 - 16:36:48 CST)
• addmimistratorgmail.com
  • MyBB 1.0.2 XSS attack in search.php redirection (Wed Jan 25 2006 - 17:33:02 CST)
  • BlogPHP config.php SQL injection login bypassed (Fri Jan 20 2006 - 23:41:57 CST)
  • MyBB 1.0.2 Sniffing table perfix bug in search.php (Sat Jan 14 2006 - 13:52:09 CST)
  • BlogPHP config.php SQL injection login bypass (Fri Jan 20 2006 - 15:01:37 CST)
  • BlogPHP config.php SQL injection login bypass (Fri Jan 20 2006 - 13:17:25 CST)
  • MyBB 1.0.2 SQL injection (Fri Jan 13 2006 - 05:37:01 CST)
  • MyBB 1.0.2 SQL injection in usercp.php (Sat Jan 14 2006 - 13:14:46 CST)
• admincritical.lt
  • SamiFTPd buffer overflow (Tue Jan 24 2006 - 13:58:19 CST)
  • Critical security advisory #006 tftpd32 Format string (Thu Jan 19 2006 - 14:58:38 CST)
• Advisories
  • IRM 015: File system path disclosure on TYPO3 Web Content Manager (Thu Jan 19 2006 - 04:30:36 CST)
  • [EEYEB-2000801] - Windows Embedded Open Type (EOT) Font Heap Overflow Vulnerability (Tue Jan 10 2006 - 14:09:36 CST)
  • [NMRC Advisory] Microsoft Windows Wireless Exposure on Laptops (Sat Jan 14 2006 - 12:50:57 CST)
  • [EEYEB-20051117B] Apple iTunes (QuickTime.qts) Heap Overflow (Wed Jan 11 2006 - 11:35:16 CST)
  • [EEYEB-20051117A] Apple QuickTime STSD Atom Heap Overflow (Wed Jan 11 2006 - 11:37:11 CST)
  • [EEYEB-20051220] Apple QuickTime QTIF Stack Overflow (Wed Jan 11 2006 - 11:33:18 CST)
  • [EEYEB-20051031] Apple QuickTime Malformed GIF Heap Overflow (Wed Jan 11 2006 - 11:40:04 CST)
  • Updated Advisories - Incorrect CVE Information (Wed Jan 11 2006 - 11:53:21 CST)
• Aidan Van Dyk
  • HylaFAX Security advisory - fixed in HylaFAX 4.2.4 (Wed Jan 04 2006 - 19:33:02 CST)
• akred-database-security.com
  • Oracle Database 10g Rel. 1 - SQL Injection in SYS.KUPV$FT_INT (Tue Jan 17 2006 - 17:52:56 CST)
  • Oracle Database 10g Rel. 1 - SQL Injection in SYS.KUPV$FT (Tue Jan 17 2006 - 17:57:54 CST)
  • Oracle Database 10g Rel. 2- Transparent Data Encryption plaintext masterkey in SGA (Tue Jan 17 2006 - 16:09:27 CST)
  • Oracle Reports - Read parts of files via customize(fixed after 875 days) (Tue Jan 17 2006 - 16:07:45 CST)
  • Oracle Reports - Overwrite any application server file via desname (fixed after 889 days) (Tue Jan 17 2006 - 16:07:01 CST)
  • Oracle Reports - Read parts of files via desname (fixed after 874 days) (Tue Jan 17 2006 - 16:05:51 CST)
  • Oracle Database 10g Rel. 2 - Event 10053 logs TDE wallet password in cleartext (Tue Jan 17 2006 - 16:04:52 CST)
• Alex Eckelberry
  • RE: WMF vulnerability was a deliberate backdoor? (Sun Jan 15 2006 - 18:58:22 CST)
• alexevuln.com
  • [eVuln] SZUserMgnt Authentication Bypass (Wed Feb 01 2006 - 01:37:30 CST)
  • [eVuln] Calendarix SQL Injection & Authorization Bypass Vulnerabilities (Wed Feb 01 2006 - 01:36:58 CST)
  • [eVuln] Pixelpost Photoblog XSS Vulnerability (Mon Jan 23 2006 - 11:45:06 CST)
  • [eVuln] "my little homepage" products [link] BBCode XSS Vulnerability (Thu Jan 26 2006 - 12:36:13 CST)
  • [eVuln] AndoNET Blog SQL Injection Vulnerability (Thu Jan 26 2006 - 12:35:31 CST)
  • [eVuln] Text Rider Sensitive Information Disclosure (Tue Jan 24 2006 - 12:57:46 CST)
  • [eVuln] miniBloggie Authentication Bypass (Tue Jan 24 2006 - 12:58:55 CST)
  • [eVuln] ExpressionEngine 'Referer' XSS Vulnerability (Wed Jan 25 2006 - 10:50:53 CST)
  • [eVuln] CheesyBlog XSS Vulnerability (Wed Jan 25 2006 - 10:51:44 CST)
  • [eVuln] Note-A-Day Weblog Sensitive Information Disclosure (Sun Jan 22 2006 - 12:34:26 CST)
  • [eVuln] e-moBLOG SQL Injection Vulnerability (Sun Jan 22 2006 - 12:33:17 CST)
  • [eVuln] SaralBlog XSS & Multiple SQL Injection Vulnerabilities (Wed Jan 18 2006 - 14:01:56 CST)
  • [eVuln] eggblog Multiple SQL Injection & XSS Vulnerabilities (Wed Jan 18 2006 - 14:00:25 CST)
  • [eVuln] RCBlog Directory Traversal & Sensitive Information Disclosure (Fri Jan 20 2006 - 04:15:48 CST)
  • [eVuln] WebspotBlogging Authentication Bypass Vulnerability (Thu Jan 19 2006 - 12:32:48 CST)
  • [eVuln] geoBlog SQL Injection Vulnerability (Mon Jan 16 2006 - 03:56:25 CST)
  • [eVuln] aoblogger Multiple Vulnerabilities (Tue Jan 17 2006 - 13:52:57 CST)
  • [eVuln] Flog Information Disclosure Vulnerability (Tue Jan 17 2006 - 13:53:35 CST)
  • [eVuln] CaLogic Calendars Multiple XSS Vulnerabilities (Mon Jan 16 2006 - 09:55:53 CST)
  • [eVuln] microBlog BBCode XSS Vulnerability (Tue Jan 17 2006 - 04:20:35 CST)
  • [eVuln] microBlog SQL Injection Vulnerability (Tue Jan 17 2006 - 04:19:55 CST)
  • [eVuln] BlogPHP Authentication Bypass (Tue Jan 17 2006 - 04:19:06 CST)
  • [eVuln] Bit 5 Blog SQL Injection & Authentication Bypass Vulnerability (Sun Jan 15 2006 - 13:20:29 CST)
  • [eVuln] Benders Calendar SQL Injection (Sun Jan 15 2006 - 13:19:43 CST)
  • [eVuln] Bit 5 Blog JavaScript Insertion Vulnerability (Sun Jan 15 2006 - 13:21:06 CST)
  • [eVuln] Light Weight Calendar PHP Code Execution (Fri Jan 13 2006 - 04:03:13 CST)
  • [eVuln] MyPhPim Multiple SQL Injection and XSS Vulnerabilities (Tue Jan 10 2006 - 19:08:53 CST)
  • [eVuln] Wordcircle Multiple SQL Injection & XSS Vulnerabilities (Thu Jan 12 2006 - 16:01:14 CST)
  • [eVuln] Wordcircle Authentication Bypass (Thu Jan 12 2006 - 15:58:15 CST)
  • [eVuln] ACal Authentication Bypass & PHP Code Insertion (Thu Jan 12 2006 - 15:56:16 CST)
  • [eVuln] TankLogger SQL Injection Vulnerability (Thu Jan 12 2006 - 15:57:16 CST)
  • [eVuln] MyPhPim Arbitrary File Upload (Tue Jan 10 2006 - 19:09:40 CST)
  • [eVuln] 427BB Multiple Vulnerabilities (Cookie-based Authentication Bypass, SQL Injections, XSS) (Sat Jan 07 2006 - 05:20:33 CST)
  • [eVuln] Venom Board SQL Injection Vulnerability (Mon Jan 09 2006 - 12:22:58 CST)
  • [eVuln] Foxrum BBCode XSS Vulnerabilty (Mon Jan 09 2006 - 11:24:36 CST)
  • [eVuln] NavBoard BBcode XSS Vulnerability (Sat Jan 07 2006 - 14:49:24 CST)
  • [eVuln] Proyecto Domus 'email' XSS Vulnerability (Thu Jan 05 2006 - 18:28:49 CST)
  • [eVuln] TheWebForum Script Insertion and Authentication Bypass (Fri Jan 06 2006 - 10:10:50 CST)
  • [eVuln] ADNForum Multiple Vulnerabilities (Thu Jan 05 2006 - 10:32:58 CST)
  • [eVuln] TinyPHPForum Multiple Vulnerabilities (Wed Jan 04 2006 - 20:44:58 CST)
  • [eVuln] Lizard Cart CMS SQL Injection Vulnerability (Tue Jan 03 2006 - 18:09:14 CST)
  • [eVuln] PHPenpals SQL Injection Vulnerabilit (Sun Jan 01 2006 - 16:59:01 CST)
  • [eVuln] phpBook PHP Code Execution (Sun Jan 01 2006 - 17:00:48 CST)
  • [eVuln] VEGO Links Builder Authentication Bypass (Sun Jan 01 2006 - 16:53:53 CST)
  • [eVuln] VEGO Web Forum SQL Injection Vulnerability (Sun Jan 01 2006 - 16:45:52 CST)
  • [eVuln] oaBoard PHP Code Execution (Sun Jan 01 2006 - 16:56:28 CST)
  • [eVuln] ScozBook "adminname" Authentication Bypass (Mon Jan 02 2006 - 13:49:55 CST)
  • [eVuln] B-net Software Multiple XSS Vulnerabilities (Mon Jan 02 2006 - 11:01:37 CST)
  • [eVuln] inTouch Authentication Bypass (Sun Jan 01 2006 - 17:06:42 CST)
  • [eVuln] Chimera Web Portal System Multiple Vulnerabilities (Sun Jan 01 2006 - 17:05:39 CST)
  • [eVuln] Chipmunk Guestbook XSS Vulnerability (Sun Jan 01 2006 - 16:58:10 CST)
  • [eVuln] PHPjournaler SQL Injection Vulnerability (Sun Jan 01 2006 - 17:07:32 CST)
• alireza hassani
  • [KAPDA::#19] - Html Injection in vBulletin 3.5.2 (Sun Jan 01 2006 - 14:42:45 CST)
• Alla Bezroutchko
  • Session data pollution vulnerabilities in web applications (Thu Jan 12 2006 - 05:33:08 CST)
• Alpha_ProgrammerLinuxMail.ORG
  • Winrar 3.30 Local Buffer Overflow (Tue Jan 03 2006 - 00:08:18 CST)
• Amit Klein (AKsecurity)
  • Technical Note by Amit Klein: "XST Strikes Back" (Wed Jan 25 2006 - 00:49:56 CST)
  • Re: Reverse Proxy Cross Site Scripting (Tue Jan 17 2006 - 02:13:40 CST)
• Andreas Marx
  • WMF exploit (Tue Jan 03 2006 - 15:00:12 CST)
• angelorosiello.org
  • [ Rosiello Security ] Eterm-LibAST Advisory (Mon Jan 23 2006 - 10:27:11 CST)
  • Rosiello Security - Eterm-LibAST Advisory (Wed Jan 25 2006 - 14:43:50 CST)
• Anthony R. Nemmer
  • Re: MS released a patch today - MS06-001 (Thu Jan 05 2006 - 20:33:41 CST)
• anthony.aykutframe4.com
  • MD:Pro - Malware Distribution Project (Thu Jan 05 2006 - 05:49:58 CST)
  • Re: WTF?? (Sat Dec 31 2005 - 02:39:57 CST)
• Arman Nayyeri
  • Research: Malware Action Detection and Protection (Sat Jan 07 2006 - 01:50:41 CST)
• at
  • Verified evasion in Snort (Thu Jan 26 2006 - 14:51:32 CST)
  • Newsphp Multiple SQL Injection Vulnerabilities (Sun Jan 22 2006 - 12:50:35 CST)
• Bernd Wurst
  • MySQL 5.0 information leak? (Fri Jan 20 2006 - 06:05:02 CST)
• blog.wormgmail.com
  • New worm crawling trough blogs?! (Fri Jan 27 2006 - 05:49:23 CST)
• botanlinuxmail.org
  • Ege Internet Web Desing Remote Command Exucetion (Sat Jan 28 2006 - 07:37:56 CST)
• Brett Glass
  • Re: Did MS pull an Ilfak? (MS patch bindiff results) (Mon Jan 09 2006 - 12:52:16 CST)
• brian428yahoo.com
  • Re: IndonesiaHack Advisory HTML injection in PHP Fusebox (Mon Jan 23 2006 - 16:41:43 CST)
• Brooks, Shane
  • WMF vulnerability was a deliberate backdoor? (Fri Jan 13 2006 - 13:31:16 CST)
• bugzillaredhat.com
  • [RHSA-2006:0157-01] Low: struts security update for Red Hat Application Server (Wed Jan 11 2006 - 13:15:51 CST)
• Burton Strauss
  • RE: MySQL 5.0 information leak? (Sun Jan 22 2006 - 21:19:53 CST)
  • RE: MySQL 5.0 information leak? (Fri Jan 20 2006 - 20:17:03 CST)
• c_lispfedorayahoo.com
  • zbattle.net (Sat Jan 28 2006 - 08:47:53 CST)
• Cesar
  • [Argeniss] Oracle Database Buffer overflows vulnerabilities in public procedures of XDB.DBMS_XMLSCHEMA{_INT} (Thu Jan 26 2006 - 16:30:34 CST)
• Chris Wysopal
  • Re: Winamp 5.12 - 0day exploit - code execution through playlist (Mon Jan 30 2006 - 13:20:37 CST)
• Cisco Systems Product Security Incident Response Team
  • Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerable to Crafted HTTP Attack (Thu Jan 26 2006 - 11:00:00 CST)
  • Cisco Security Advisory: Cisco Call Manager Privilege Escalation (Wed Jan 18 2006 - 10:00:00 CST)
  • Cisco Security Advisory: Cisco Call Manager Denial of Service (Wed Jan 18 2006 - 10:00:00 CST)
  • Cisco Security Advisory: IOS Stack Group Bidding Protocol Crafted Packet DoS (Wed Jan 18 2006 - 10:00:00 CST)
  • Cisco Security Advisory: Access Point Memory Exhaustion from ARP Attacks (Thu Jan 12 2006 - 10:15:06 CST)
  • Cisco Security Advisory: Default Administrative Password in Cisco Security Monitoring, Analysis and Response System (CS-MARS) (Wed Jan 11 2006 - 11:06:56 CST)
• code.shellyahoo.com
  • hello (Fri Jan 27 2006 - 09:23:39 CST)
• contactwebappsec.org
  • Announcement: The Web Application Firewall Evaluation Criteria v1 Released (Sun Jan 15 2006 - 15:05:24 CST)
• Core FORCE team
  • ANN: New release of CORE FORCE free endpoint security package (Tue Jan 24 2006 - 15:47:53 CST)
• Crowdat Kurobudetsu
  • Buffer Overflow /Font on mIRC (Tue Jan 24 2006 - 05:24:04 CST)
• cvhkapda.ir
  • The WorldsEnd.NET - Free Ping Script, written in PHP (2 vulns) (Mon Jan 23 2006 - 14:54:13 CST)
• cvhsecurityfocus.com
  • Cerberus FTP Server 2.32 Denial of Service (Sun Jan 15 2006 - 13:12:19 CST)
  • Homeftp r1.0.7 Denial of Service (Sun Jan 15 2006 - 12:47:55 CST)
• cvhsecurityfocus.com,
  • [KAPDA::#21] - HomeFtp v1.1 Denial of Service (Sat Jan 14 2006 - 09:45:45 CST)
• D. Hazelton
  • Re: industry standards - current status [was: what we REALLY learned from WMF] (Mon Jan 09 2006 - 22:21:15 CST)
• Da Beave
  • iWar 0.07 PSTN auditing tool released... (Sat Jan 14 2006 - 18:12:43 CST)
• Damaged Industries
  • Re: New from the MS Advisory (Thu Jan 05 2006 - 16:35:00 CST)
• Dancho Danchev
  • Malware - future trends (Tue Jan 10 2006 - 11:52:05 CST)
• Dave Korn
  • Re: Veritas NetBackup "Volume Manager Daemon" Module Stack Overflow - Exploit (Tue Jan 17 2006 - 08:21:31 CST)
  • Re: Download Accelerator Plus can be tricked to download malicious file (Fri Jan 06 2006 - 12:52:14 CST)
  • Re: WMF browser-ish exploit vectors (Tue Jan 03 2006 - 13:09:54 CST)
• David Litchfield
  • Workaround for unpatched Oracle PLSQL Gateway flaw (Wed Jan 25 2006 - 12:25:07 CST)
• Denis Jedig
  • Re: WMF vulnerability was a deliberate backdoor? (Mon Jan 16 2006 - 08:11:21 CST)
  • Re: Did MS pull an Ilfak? (MS patch bindiff results) (Wed Jan 11 2006 - 05:05:09 CST)
  • Re: Interview: Ilfak Guilfanov (Sat Jan 07 2006 - 16:54:42 CST)
• Dino A. Dai Zovi
  • Attacking Automatic Wireless Network Selection (Tue Jan 17 2006 - 14:21:55 CST)
• Dirk Mueller
  • [KDE Security Advisory] kjs encodeuri/decodeuri heap overflow (Thu Jan 19 2006 - 16:07:10 CST)
• Discussion Lists
  • RE: WMF Exploit (Fri Dec 30 2005 - 17:45:49 CST)
• dragonjargmail.com
  • XSS in WBNews < = v1.1.0 (Tue Jan 17 2006 - 04:13:22 CST)
• Dragos Ruiu
  • EUSecWest papers and CanSecWest CFP (Wed Jan 11 2006 - 23:04:23 CST)
• Dude VanWinkle
  • Re: [Full-disclosure] Urgent Alert: Possible BlackWorm DDay February 3rd (Snort signatures included) (Tue Jan 24 2006 - 12:52:39 CST)
• Duncan Simpson
  • Re: MySQL 5.0 information leak? (Fri Jan 27 2006 - 18:44:34 CST)
• Duran, Jason IT0
  • MS released a patch today - MS06-001 (Thu Jan 05 2006 - 15:00:35 CST)
• Eloy A. Paris
  • Re: Cisco PIX / CS ACS: Downloadable RADIUS ACLs vulnerability (Fri Dec 30 2005 - 14:28:21 CST)
• endrazinepulltheplug.org
  • Windows mem leakage (Tue Jan 24 2006 - 06:01:53 CST)
• eufratogmail.com
  • [ECHO_ADV_25$2006] Full path disclosure on boastMachine v3.1 (Thu Jan 05 2006 - 04:27:23 CST)
• Evgeny Legerov
  • Proof of concept for CommuniGate Pro Server vulnerability (Tue Jan 31 2006 - 01:55:34 CST)
  • Multiple vulnerabilities in CommuniGate Pro Server (Sat Jan 28 2006 - 01:15:17 CST)
• Florian Weimer
  • Re: Digital Armaments Security Advisory 01.16.2006: CMU SNMP utilities snmptrad Format String Vulnerability (Fri Jan 20 2006 - 14:43:09 CST)
  • Re: [USN-237-1] nbd vulnerability (Fri Jan 06 2006 - 04:08:17 CST)
• Forrest J. Cavalier III
  • MD5s of Unofficial patches and other mistakes (Fri Jan 06 2006 - 11:22:05 CST)
• Fortinet Research
  • Fortinet Advisory: BitComet URI Buffer Overflow Vulnerability (Wed Jan 18 2006 - 16:06:42 CST)
• framirezakori.fr
  • Arescom NetDSL-1000 DoS atack source (Mon Jan 30 2006 - 07:51:27 CST)
• Francois Labreque
  • Re: Dumb IE6/XP denial of service found on the web (Thu Jan 05 2006 - 07:12:38 CST)
• Frank Berzau
  • RE: Webwasher CSM Appliance Script Security Restriction Bypass (Mon Jan 02 2006 - 19:23:28 CST)
• frank boldewin
  • Re: MSN Messenger Password Decrypter for WinXP/2003 (Tue Jan 17 2006 - 17:08:13 CST)
• Frank Knobbe
  • Re: [Full-disclosure] Session data pollution vulnerabilities in web applications (Thu Jan 12 2006 - 10:50:47 CST)
  • Re: WMF Exploit (Fri Dec 30 2005 - 16:45:33 CST)
• frankruderhotmail.com
  • [UPDATE]Microsoft Windows GRE WMF Format Multiple Unauthorized Memory Access Vulnerabilities (Mon Jan 09 2006 - 03:08:08 CST)
  • Microsoft Windows GRE WMF Format Multiple Memory Overrun Vulnerabilities (Sat Jan 07 2006 - 02:07:43 CST)
• FreeBSD Security Advisories
  • FreeBSD Security Advisory FreeBSD-SA-06:06.kmem (Wed Jan 25 2006 - 04:13:08 CST)
  • FreeBSD Security Advisory FreeBSD-SA-06:07.pf (Wed Jan 25 2006 - 04:13:43 CST)
  • FreeBSD Security Advisory FreeBSD-SA-06:05.80211 (Wed Jan 18 2006 - 03:10:15 CST)
  • FreeBSD Security Advisory FreeBSD-SA-06:02.ee (Wed Jan 11 2006 - 02:19:10 CST)
  • FreeBSD Security Advisory FreeBSD-SA-06:04.ipfw (Wed Jan 11 2006 - 02:19:22 CST)
  • FreeBSD Security Advisory FreeBSD-SA-06:03.cpio (Wed Jan 11 2006 - 02:19:14 CST)
  • FreeBSD Security Advisory FreeBSD-SA-06:01.texindex (Wed Jan 11 2006 - 02:19:03 CST)
  • FreeBSD Security Advisory FreeBSD-SA-06:01.texindex [REVISED] (Wed Jan 11 2006 - 04:21:54 CST)
• Fyodor
  • Nmap 4.00 Released (Tue Jan 31 2006 - 12:09:33 CST)
• Gadi Evron
  • Re: CME-24 (BlackWorm) Users' FAQ (Mon Jan 30 2006 - 14:32:33 CST)
  • CME-24 (BlackWorm) Users' FAQ (Mon Jan 30 2006 - 14:00:43 CST)
  • BlackWorm: statistics and numbers (Thu Jan 26 2006 - 19:50:14 CST)
  • BlackWorm technical information (Tue Jan 24 2006 - 11:22:49 CST)
  • BlackWorm naming confusing [CME entry now available] (Tue Jan 24 2006 - 12:26:32 CST)
  • Urgent Alert: Possible BlackWorm DDay February 3rd (Snort signatures included) (Tue Jan 24 2006 - 10:15:56 CST)
  • BlackWorm: 2 million infected? ISP notifications. (Wed Jan 25 2006 - 17:08:14 CST)
  • Re: Announcement: The Web Application Firewall Evaluation Criteria v1 Released (Sun Jan 22 2006 - 00:44:13 CST)
  • Re: WMF vulnerability was a deliberate backdoor? (Sun Jan 15 2006 - 13:58:22 CST)
  • Re: Microsoft knew about the WMF flaw for years (Tue Jan 17 2006 - 03:12:08 CST)
  • Cisco, haven't we learned anything? (technician reset) (Thu Jan 12 2006 - 07:14:42 CST)
  • industry standards - current status [was: what we REALLY learned from WMF] (Fri Jan 06 2006 - 16:56:54 CST)
  • Did MS pull an Ilfak? (MS patch bindiff results) (Thu Jan 05 2006 - 20:16:20 CST)
  • what we REALLY learned from WMF (Thu Jan 05 2006 - 15:53:45 CST)
  • Re: WMF round-up, updates and de-mystification (Tue Jan 03 2006 - 05:56:46 CST)
  • WMF round-up, updates and de-mystification (Tue Jan 03 2006 - 02:28:40 CST)
• Gandalf The White
  • Mapping and Remote manipulation of databases (Fri Dec 30 2005 - 21:18:02 CST)
• grasshopasecurityfocus.com
  • Re: RE: WMF Exploit (Sun Jan 01 2006 - 17:29:13 CST)
• Greg Wroblewski
  • RE: Did MS pull an Ilfak? (MS patch bindiff results) (Tue Jan 10 2006 - 15:39:28 CST)
• H D Moore
  • Re: [Full-disclosure] WehnTrust - When you have to trust Wehntrust (Mon Jan 16 2006 - 14:52:21 CST)
  • WMF: New Metasploit Framework Module (Sat Dec 31 2005 - 01:36:20 CST)
• h e
  • FarsiNews 2.1 PHP Remote File Inclusion (Tue Jan 31 2006 - 07:47:57 CST)
• h4cky0u.orggmail.com
  • HYSA-2006-002 Phpclanwebsite 1.23.1 Multiple Vulnerabilities (Wed Jan 25 2006 - 16:43:17 CST)
  • HYSA-2006-001 phpBB 2.0.19 search.php and profile.php DOS Vulnerability (Wed Jan 25 2006 - 08:49:41 CST)
• hessamkachal667.com
  • [xpl#2] MiniNuke 1.8.2 - change member's passwrod < Perl > (Sun Jan 29 2006 - 12:17:22 CST)
• Hugo Fortier
  • Recon2006 - Call for papers (Fri Jan 06 2006 - 00:34:48 CST)
• iNETstore Support
  • Re: [OSVDB Mods] iNETstore E Commerce Solution - Cross Site Scripting (Thu Jan 26 2006 - 00:51:46 CST)
• infodigitalarmaments.com
  • Digital Armaments Security Advisory 01.16.2006: CMU SNMP utilities snmptrad Format String Vulnerability (Mon Jan 16 2006 - 09:08:25 CST)
  • Digital Armaments Security Advisory 01.09.2006: Apache auth_ldap module Multiple Format Strings Vulnerability (Mon Jan 09 2006 - 12:36:32 CST)
• infohoder.com
  • Re: Html_Injection in vBulletin 3.5.2 (Tue Jan 10 2006 - 01:56:21 CST)
• InfoSecBOFH
  • Re: [Full-disclosure] WMF round-up, updates and de-mystification (Tue Jan 03 2006 - 05:34:46 CST)
• inge.henriksenbooleansoft.com
  • Microsoft(R) Internet Explorer 5 & 6 Remote Denial of Service (DoS) using IMG & XML elements (Sat Jan 14 2006 - 17:33:45 CST)
• ISecAuditors Security Advisories
  • [ISecAuditors Advisories] Arbitrary flash code remote execution in 123flashchat (Tue Jan 24 2006 - 03:37:36 CST)
  • [ISecAuditors Advisories] Arbitrary remote file creation in 123flashchat server (Fri Jan 13 2006 - 06:53:34 CST)
• Ivan Arce
  • Another WMF exploit workaround (Wed Jan 04 2006 - 09:37:05 CST)
• James C Slora Jr
  • RE: WMF browser-ish exploit vectors (Thu Jan 05 2006 - 16:36:47 CST)
• James_gmail-ij
  • Re: MSN Messenger Password Decrypter for WinXP/2003 (Mon Jan 16 2006 - 05:18:12 CST)
• jcary2543yahoo.com
  • Tumbleweed EMF 6.x Processing Issues (Fri Jan 20 2006 - 20:13:58 CST)
• jd2k2000hotmail.com
  • New PEAR / Apache2Triad Exploit (Sun Jan 08 2006 - 21:42:03 CST)
• jdo24cornell.edu
  • Blackboard Authentication Error (Wed Feb 01 2006 - 08:30:39 CST)
• Joe Polk
  • Re: Did MS pull an Ilfak? (MS patch bindiff results) (Tue Jan 10 2006 - 08:20:45 CST)
• Johan De Meersman
  • Re: MySQL 5.0 information leak? (Tue Jan 24 2006 - 05:09:58 CST)
• Jose Nazario
  • Re: BlackWorm naming confusing [CME entry now available] (Sun Jan 29 2006 - 09:38:23 CST)
• Josh Zlatin
  • EZDatabase Directory Transversal, XSS and Path Disclosure Vulnerability (Sun Jan 15 2006 - 05:28:11 CST)
• Joshua
  • Re: WMF Exploit (Tue Jan 03 2006 - 13:31:51 CST)
• Juha-Matti Laurio
  • Re: Re: Winamp 5.12 - 0day exploit - code execution through playlist (Tue Jan 31 2006 - 00:30:19 CST)
• Justin Myers
  • Re: WMF Exploit (Sun Jan 01 2006 - 14:31:57 CST)
• k4p0k4p0hotmail.com
  • NicoFTP Stack Overflow (Sun Jan 01 2006 - 20:28:01 CST)
• karmaguedonhotmail.com
  • Claroline 1.7.2, sso identification vulnerability (Fri Jan 20 2006 - 11:27:26 CST)
• KF (lists)
  • DMA[2006-0115a] - 'AmbiCom Bluetooth Object Push Overflow' (Fri Jan 20 2006 - 12:15:11 CST)
  • DMA[2006-0112a] - 'Toshiba Bluetooth Stack Directory Transversal' (Thu Jan 12 2006 - 21:46:45 CST)
• khcbsdmail.org
  • DDSN CMS Admin Panel SQL Injection Vulnerability (Fri Jan 13 2006 - 06:22:55 CST)
• Kim Christensen
  • Re: Dumb IE6/XP denial of service found on the web (Thu Jan 05 2006 - 01:58:19 CST)
• kimeasycms.no
  • Re: EasyCMS vulnerable to XSS injection. (Tue Jan 31 2006 - 10:14:48 CST)
• king_purbayahoo.co.uk
  • IndonesiaHack Advisory HTML injection in PHP Fusebox (Tue Jan 17 2006 - 01:32:35 CST)
  • FullPath disclosure in Xaraya 1.0.1 (Sat Jan 14 2006 - 12:55:25 CST)
• Krpata, Tyler
  • RE: WMF round-up, updates and de-mystification (Tue Jan 03 2006 - 16:36:17 CST)
• kukukuku.com
  • Re: MSN Messenger Password Decrypter for WinXP/2003 (Thu Jan 12 2006 - 18:51:37 CST)
• labs-no-replyidefense.com
  • iDefense Security Advisory 01.23.06: Computer Associates iTechnology iGateway Service Content-Length Buffer Overflow Vulnerability (Mon Jan 23 2006 - 12:41:14 CST)
  • iDefense Security Advisory 01.17.06: Cisco Systems IOS 11 Web Service CDP Status Page Code Injection Vulnerability (Tue Jan 17 2006 - 17:18:42 CST)
  • iDefense Security Advisory 01.17.06: EMC Legato Networker nsrexecd.exe Heap Overflow Vulnerability (Tue Jan 17 2006 - 17:20:53 CST)
  • iDefense Security Advisory 01.17.06: EMC Legato Networker nsrd.exe DoS Vulnerability (Tue Jan 17 2006 - 17:21:25 CST)
  • iDefense Security Advisory 01.13.06: Novell SUSE Linux Enterprise Server Remote Manager Heap Overflow (Fri Jan 13 2006 - 12:34:09 CST)
  • iDefense Security Advisory 01.10.06: Sun Solaris uustat Buffer Overflow Vulnerability (Tue Jan 10 2006 - 08:58:50 CST)
  • iDefense Security Advisory 01.09.06: Multiple Vendor mod_auth_pgsql Format String Vulnerability (Mon Jan 09 2006 - 15:26:19 CST)
  • iDefense Security Advisory 01.05.06: Blue Coat WinProxy Telnet DoS Vulnerability (Thu Jan 05 2006 - 15:35:54 CST)
  • iDefense Security Advisory 01.05.06: Blue Coat Systems WinProxy Host Header Stack Overflow Vulnerability (Thu Jan 05 2006 - 15:35:15 CST)
  • iDefense Security Advisory 01.05.06: Blue Coat WinProxy Remote DoS Vulnerability (Thu Jan 05 2006 - 15:34:37 CST)
• Lance James
  • Re: [security] What A Click! [Internet Explorer] (Fri Jan 27 2006 - 13:22:11 CST)
  • Re: MySQL 5.0 information leak? (Sun Jan 22 2006 - 10:48:21 CST)
• Larry Seltzer
  • New from the MS Advisory (Tue Jan 03 2006 - 07:19:21 CST)
  • RE: [funsec] WMF round-up, updates and de-mystification (Tue Jan 03 2006 - 05:59:22 CST)
  • RE: [Full-disclosure] WMF round-up, updates and de-mystification (Tue Jan 03 2006 - 05:49:53 CST)
• Len Sassaman
  • CodeCon program announced, early registration deadline nearing (Sat Jan 21 2006 - 13:56:59 CST)
• liz0bsdmail.com
  • phpXplorer file inclusion biyosecurity.be (Tue Jan 17 2006 - 18:22:49 CST)
  • White Album Sql &#304;njection biyosecurity.be (Sun Jan 15 2006 - 20:49:34 CST)
  • Drupal all versiyon xss cehennem.org (Mon Jan 02 2006 - 04:45:25 CST)
• luca.carettonisecurenetwork.it
  • Multiple Vulnerabilities in Hummingbird Collaboration (Tue Jan 10 2006 - 10:05:18 CST)
• Lucasecurityfocus.com, Ercoli@securityfocus.com,
  • Etomite CMS "Backdoored" (Thu Jan 26 2006 - 19:06:45 CST)
• Ludwig Nussel
  • SUSE Security Announcement: phpMyAdmin (SUSE-SA:2006:004) (Thu Jan 26 2006 - 07:54:47 CST)
  • SUSE Security Announcement: kdelibs3 (SUSE-SA:2006:003) (Fri Jan 20 2006 - 09:07:52 CST)
  • SUSE Security Announcement: xpdf,kpdf,gpdf,kword (SUSE-SA:2006:001) (Wed Jan 11 2006 - 06:04:14 CST)
• M.Neset KABAKLI
  • UebiMiau Webmail System Security Vulnerability (Sun Jan 29 2006 - 09:22:12 CST)
  • Helm XSS Vulnerability (Thu Jan 12 2006 - 15:45:30 CST)
  • Interspire TrackPoint NX XSS Vulnerability (Thu Jan 12 2006 - 05:13:01 CST)
  • FogBugz Cross Site Scripting Vulnerability (Thu Jan 12 2006 - 05:15:03 CST)
  • H-Sphere Security Vulnerability (Thu Jan 12 2006 - 11:18:46 CST)
• ma+btdt.e-technik.uni-dortmund.de
  • fetchmail security announcement fetchmail-SA-2006-01 (CVE-2006-0321) (Sun Jan 22 2006 - 07:19:18 CST)
• Mandriva Security Team
  • MDKSA-2006:019 - Updated kdelibs packages fix vulnerability (Fri Jan 20 2006 - 20:03:01 CST)
  • MDKSA-2006:018 - Updated kernel packages fix several vulnerabilities (Fri Jan 20 2006 - 13:25:00 CST)
  • MDKSA-2006:017 - Updated mod_auth_ldap packages fix vulnerability (Thu Jan 19 2006 - 14:47:35 CST)
  • MDKSA-2006:016 - Updated clamav packages fix vulnerability (Mon Jan 16 2006 - 18:24:01 CST)
  • MDKSA-2006:015 - Updated hylafax packages fix eval injection vulnerabilities (Mon Jan 16 2006 - 18:03:01 CST)
  • MDKSA-2006:014 - Updated wine packages fix WMF vulnerability (Mon Jan 16 2006 - 17:47:01 CST)
  • MDKSA-2006:013 - Updated kolab packages fix vulnerability (Thu Jan 12 2006 - 19:48:00 CST)
  • MDKSA-2006:011 - Updated tetex packages fix several vulnerabilities (Tue Jan 10 2006 - 18:36:00 CST)
  • MDKSA-2006:012 - Updated kdegraphics packages fix several vulnerabilities (Thu Jan 12 2006 - 18:44:00 CST)
  • MDKSA-2006:010 - Updated cups packages fix several vulnerabilities (Tue Jan 10 2006 - 18:13:00 CST)
  • MDKSA-2006:004 - Updated pdftohtml packages fix several vulnerabilities (Mon Jan 09 2006 - 09:30:00 CST)
  • MDKSA-2006:003 - Updated poppler packages fix several vulnerabilities (Mon Jan 09 2006 - 09:29:01 CST)
  • MDKSA-2006:008 - Updated koffice packages fix several vulnerabilities (Fri Jan 06 2006 - 17:09:00 CST)
  • MDKSA-2006:006 - Updated gpdf packages fix several vulnerabilities (Mon Jan 09 2006 - 09:32:00 CST)
  • MDKSA-2006:005 - Updated xpdf packages fix several vulnerabilities (Mon Jan 09 2006 - 09:31:00 CST)
  • MDKSA-2006:009 - Updated apache2-mod_auth_pgsql packages fix several vulnerabilities (Fri Jan 06 2006 - 20:28:00 CST)
  • MDKSA-2006:008 - Updated koffice packages fix several vulnerabilities (Mon Jan 09 2006 - 09:32:00 CST)
  • MDKSA-2006:005 - Updated xpdf packages fix several vulnerabilities (Thu Jan 05 2006 - 19:52:00 CST)
  • MDKSA-2006:003 - Updated poppler packages fix several vulnerabilities (Thu Jan 05 2006 - 18:53:00 CST)
  • MDKSA-2006:007 - Updated apache2 packages fix vulnerabilities (Thu Jan 05 2006 - 20:13:00 CST)
  • MDKSA-2006:004 - Updated pdftohtml packages fix several vulnerabilities (Thu Jan 05 2006 - 19:08:00 CST)
  • MDKSA-2006:006 - Updated gpdf packages fix several vulnerabilities (Thu Jan 05 2006 - 20:00:00 CST)
  • MDKSA-2005:239 - Updated printer-filters-utils packages fix local vulnerability (Fri Dec 30 2005 - 17:18:00 CST)
• Marc Deslauriers
  • [FLSA-2006:152845] Updated perl packages fix security issues (Tue Jan 24 2006 - 17:31:53 CST)
  • [FLSA-2006:152803] Updated lesstif packages fix security issues (Mon Jan 09 2006 - 19:31:35 CST)
  • [FLSA-2006:167803] Updated mysql packages fix security issues (Tue Jan 10 2006 - 18:58:33 CST)
  • [FLSA-2006:168375] Updated mozilla packages fix security issues (Mon Jan 09 2006 - 19:33:36 CST)
  • [FLSA-2006:152922] Updated ethereal packages fix security issues (Mon Jan 09 2006 - 19:32:55 CST)
  • [FLSA-2006:152907] Updated htdig packages fix security issues (Mon Jan 09 2006 - 19:32:11 CST)
  • [FLSA-2006:136323] Updated gettext package fixes security issues (Mon Jan 09 2006 - 19:30:53 CST)
• Marcus Meissner
  • SUSE Security Announcement: nfs-server/rpc.mountd remote code execution (SUSE-SA:2006:005) (Thu Jan 26 2006 - 10:09:26 CST)
  • SUSE Security Announcement: novell-nrm remote heap overflow (SUSE-SA:2006:002) (Fri Jan 13 2006 - 09:44:49 CST)
• Mario Contestabile
  • RE: Dumb IE6/XP denial of service found on the web (Thu Jan 05 2006 - 08:13:46 CST)
• Martin Pitt
  • [USN-246-1] imagemagick vulnerabilities (Tue Jan 24 2006 - 10:26:52 CST)
  • [USN-245-1] KDE library vulnerability (Fri Jan 20 2006 - 05:24:49 CST)
  • [USN-244-1] Linux kernel vulnerabilities (Wed Jan 18 2006 - 02:16:30 CST)
  • [USN-243-1] tuxpaint vulnerability (Mon Jan 16 2006 - 05:50:11 CST)
  • [USN-242-1] mailman vulnerabilities (Mon Jan 16 2006 - 04:45:35 CST)
  • [Full-disclosure] [USN-236-2] xpdf vulnerabilities in kword, kpdf (Mon Jan 09 2006 - 02:26:54 CST)
  • [USN-240-1] bogofilter vulnerability (Wed Jan 11 2006 - 11:05:47 CST)
  • [Full-disclosure] [USN-236-2] xpdf vulnerabilities in kword, kpdf (Mon Jan 09 2006 - 02:26:54 CST)
  • [USN-235-2] sudo vulnerability (Mon Jan 09 2006 - 05:32:31 CST)
  • [USN-236-2] xpdf vulnerabilities in kword, kpdf (Mon Jan 09 2006 - 02:26:54 CST)
  • [USN-239-1] libapache2-mod-auth-pgsql vulnerability (Mon Jan 09 2006 - 02:16:34 CST)
  • [USN-238-2] Blender vulnerability (Fri Jan 06 2006 - 03:47:44 CST)
  • [USN-237-1] nbd vulnerability (Fri Jan 06 2006 - 03:11:57 CST)
  • [USN-238-1] Blender vulnerability (Fri Jan 06 2006 - 03:13:41 CST)
  • [USN-235-1] sudo vulnerability (Thu Jan 05 2006 - 10:38:41 CST)
  • [USN-236-1] xpdf vulnerabilities (Thu Jan 05 2006 - 11:59:41 CST)
  • [USN-233-1] fetchmail vulnerability (Mon Jan 02 2006 - 12:33:55 CST)
  • [USN-234-1] cpio vulnerability (Mon Jan 02 2006 - 13:05:14 CST)
• Martin Schulze
  • [SECURITY] [DSA 962-1] New pdftohtml packages fix arbitrary code execution (Wed Feb 01 2006 - 03:57:27 CST)
  • [SECURITY] [DSA 961-1] New pdfkit.framework packages fix arbitrary code execution (Wed Feb 01 2006 - 01:22:26 CST)
  • [SECURITY] [DSA 960-2] New libmail-audit-perl packages fix insecure temporary file use (Tue Jan 31 2006 - 15:12:18 CST)
  • [SECURITY] [DSA 960-1] New libmail-audit-perl packages fix insecure temporary file use (Tue Jan 31 2006 - 04:14:37 CST)
  • [SECURITY] [DSA 957-2] New ImageMagick packages fix arbitrary command execution (Tue Jan 31 2006 - 03:42:18 CST)
  • [SECURITY] [DSA 959-1] New unalz packages fix arbitrary code execution (Mon Jan 30 2006 - 11:38:27 CST)
  • [SECURITY] [DSA 951-2] New trac packages fix SQL injection and cross-site scripting (Mon Jan 30 2006 - 07:13:39 CST)
  • [SECURITY] [DSA 951-1] New trac packages fix SQL injection and cross-site scripting (Mon Jan 23 2006 - 03:17:48 CST)
  • [SECURITY] [DSA 958-1] New drupal packages fix several vulnerabilities (Fri Jan 27 2006 - 04:01:55 CST)
  • [SECURITY] [DSA 952-1] New libapache-auth-ldap packages fix arbitrary code execution (Mon Jan 23 2006 - 08:06:55 CST)
  • [SECURITY] [DSA 950-1] New CUPS packages fix arbitrary code execution (Mon Jan 23 2006 - 02:11:03 CST)
  • [SECURITY] [DSA 957-1] New ImageMagick packages fix arbitrary command execution (Thu Jan 26 2006 - 12:28:00 CST)
  • [SECURITY] [DSA 956-1] New lsh-utils packages fix local vulnerabilities (Thu Jan 26 2006 - 03:55:16 CST)
  • [SECURITY] [DSA 953-1] New flyspray packages fix cross-site scripting (Tue Jan 24 2006 - 10:33:40 CST)
  • [SECURITY] [DSA 954-1] New wine packages fix arbitrary code execution (Wed Jan 25 2006 - 00:30:54 CST)
  • [SECURITY] [DSA 949-1] New crawl packages fix potential group games execution (Fri Jan 20 2006 - 09:13:36 CST)
  • [SECURITY] [DSA 946-1] New sudo packages fix privilege escalation (Fri Jan 20 2006 - 04:24:04 CST)
  • [SECURITY] [DSA 945-1] New antiword packages fix insecure temporary file creation (Tue Jan 17 2006 - 09:33:38 CST)
  • [SECURITY] [DSA 944-1] New mantis packages fix several vulnerabilities (Tue Jan 17 2006 - 04:31:54 CST)
  • [SECURITY] [DSA 942-1] New albatross packages fix arbitrary code execution (Mon Jan 16 2006 - 02:45:18 CST)
  • [SECURITY] [DSA 941-1] New tuxpaint packages fix insecure temporary file creation (Mon Jan 16 2006 - 01:45:32 CST)
  • [SECURITY] [DSA 943-1] New Perl packages fix arbitrary code execution (Mon Jan 16 2006 - 09:23:36 CST)
  • [SECURITY] [DSA 936-1] New libextractor packages fix arbitrary code execution (Wed Jan 11 2006 - 03:04:51 CST)
  • [SECURITY] [DSA 940-1] New gpdf packages fix arbitrary code execution (Fri Jan 13 2006 - 03:12:45 CST)
  • [SECURITY] [DSA 939-1] New fetchmail packages fix denial of service (Fri Jan 13 2006 - 02:40:44 CST)
  • [SECURITY] [DSA 937-1] New tetex-bin packages fix arbitrary code execution (Thu Jan 12 2006 - 05:32:22 CST)
  • [SECURITY] [DSA 903-2] New unzip packages fix unauthorised permissions modification (Thu Jan 12 2006 - 05:01:23 CST)
  • [SECURITY] [DSA 938-1] New koffice packages fix arbitrary code execution (Thu Jan 12 2006 - 08:15:14 CST)
  • [SECURITY] [DSA 932-1] New kpdf packages fix arbitrary code execution (Mon Jan 09 2006 - 11:36:11 CST)
  • [SECURITY] [DSA 931-1] New xpdf packages fix arbitrary code execution (Mon Jan 09 2006 - 10:56:11 CST)
• Matthew Murphy
  • Interview: Ilfak Guilfanov (Wed Jan 04 2006 - 15:21:05 CST)
• Meder Kydyraliev
  • Google's Blogger.com classic HTTP response splitting vulnerability (Wed Jan 18 2006 - 04:50:48 CST)
• mercenaryhushmail.com
  • Windows PHP 4.x "0-day" buffer overflow (Wed Jan 04 2006 - 21:52:52 CST)
• Michael Jennings
  • LibAST 0.7 Release Fixes Security Vulnerability (Mon Jan 23 2006 - 13:53:10 CST)
• Michael Shigorin
  • Re: IRM 015: File system path disclosure on TYPO3 Web Content Manager (Thu Jan 19 2006 - 13:13:27 CST)
• Michael Stone
  • [SECURITY] [DSA 947-2] New clamav packages fix heap overflow (Wed Jan 25 2006 - 05:32:43 CST)
  • [SECURITY] [DSA 955-1] New mailman packages fix denial of service (Wed Jan 25 2006 - 05:33:51 CST)
  • [SECURITY] [DSA 947-1] New ClamAV packages fix heap overflow (Fri Jan 20 2006 - 04:57:26 CST)
  • [SECURITY] [DSA 948-1] New kdelibs packages fix buffer overflow (Fri Jan 20 2006 - 08:35:19 CST)
  • [SECURITY] [DSA 935-1] New libapache2-mod-auth-pgsql packages fix arbitrary code execution (Tue Jan 10 2006 - 08:14:01 CST)
  • [SECURITY] [DSA 930-2] New smstools packages fix format string vulnerability (Tue Jan 10 2006 - 07:58:52 CST)
  • [SECURITY] [DSA 934-1] New pound packages fix multiple vulnerabilities (Mon Jan 09 2006 - 21:25:14 CST)
  • [SECURITY] [DSA 933-1] New hylafax packages fix arbitrary command execution (Mon Jan 09 2006 - 21:24:23 CST)
  • [SECURITY] [DSA 930-1] New smstools packages fix format string vulnerability (Mon Jan 09 2006 - 07:51:03 CST)
  • [SECURITY] [DSA 929-1] New petris packages fix buffer overflow (Mon Jan 09 2006 - 07:47:30 CST)
• Michael.Wadeferguson.com
  • WEP-Client-Communication-Dumbdown (WCCD) Vulnerability (Mon Jan 16 2006 - 14:49:26 CST)
• Michal Zalewski
  • RE: Cross Site Cooking (Mon Jan 30 2006 - 04:02:02 CST)
  • Cross Site Cooking (Sat Jan 28 2006 - 18:50:23 CST)
• Mike Davis
  • gnome evolution mail client inline text file DoS issue (Mon Jul 08 2002 - 19:22:34 CDT)
• Mike Ely
  • Re: WMF vulnerability was a deliberate backdoor? (Sun Jan 15 2006 - 15:42:50 CST)
• mikx
  • What A Click! [Internet Explorer] (Tue Jan 24 2006 - 13:06:43 CST)
• nsecurityfocus.com
  • MyBB Signature HTML Code Injection (Wed Jan 18 2006 - 17:14:25 CST)
• Nancy Kramer
  • Re: [Full-disclosure] WMF round-up, updates and de-mystification (Tue Jan 03 2006 - 04:35:50 CST)
• NaPa
  • RE: Download Accelerator Plus can be tricked to download malicious file (Wed Jan 04 2006 - 12:58:40 CST)
• NetBSD Security Officer
  • NetBSD Security Advisory 2006-002: settimeofday() time wrap (Mon Jan 09 2006 - 10:00:36 CST)
  • NetBSD Security Advisory 2006-001: Kernfs kernel memory disclosure (Mon Jan 09 2006 - 09:53:25 CST)
• NGSSoftware Insight Security Research
  • High Risk Vulnerability in Red Hat Directory Server and Red Hat Certificate Server (Sun Jan 22 2006 - 07:13:09 CST)
  • Oracle Critical Patch Update - January 2006 (Tue Jan 17 2006 - 15:28:55 CST)
  • Microsoft Outlook Critical Vulnerability (Tue Jan 10 2006 - 16:54:38 CST)
  • Microsoft Exchange Critical Vulnerability (Tue Jan 10 2006 - 16:49:03 CST)
• Nick FitzGerald
  • Re: WTF?? (Fri Dec 30 2005 - 20:07:50 CST)
  • Re: WMF browser-ish exploit vectors (Fri Dec 30 2005 - 18:29:49 CST)
• nick58gmail.com
  • BitComet URI Proof of Concept (Sun Jan 22 2006 - 18:09:41 CST)
• night_warrior771hotmail.com
  • PowerPortal Cross-Site Scripting Vulnerability (Tue Jan 17 2006 - 03:49:32 CST)
  • PunBB BBCode URL Tag Script Injection Vulnerability (Mon Jan 16 2006 - 05:34:48 CST)
  • AlstraSoft Template Seller Pro Cross-Site Scripting Vulnerability (Fri Jan 13 2006 - 05:56:25 CST)
  • DCP Portal Cross-Site Scripting Vulnerability (Fri Jan 13 2006 - 06:15:39 CST)
  • Xoops Pool Module IMG Tag Cross Site Scripting (Sat Jan 07 2006 - 04:08:21 CST)
  • Php-Nuke Pool and News Module IMG Tag Cross Site (Sat Jan 07 2006 - 04:10:24 CST)
  • CyberShop User Login Sql Injection (Thu Jan 05 2006 - 03:32:55 CST)
• night_warrior771securityfocus.com,
  • Nuked-klaN Cross-Site Scripting Vulnerability (Mon Jan 30 2006 - 05:32:10 CST)
  • sPaiz-Nuke Cross-Site Scripting Vulnerability (Sun Jan 29 2006 - 07:34:52 CST)
  • Phpclanwebsite BBCode IMG Tag XSS Vulnerability (Wed Jan 18 2006 - 04:01:23 CST)
  • Land Down Under Signature HTML Code Injection (Wed Jan 18 2006 - 17:18:45 CST)
  • MyBB Signature HTML Code Injection (Wed Jan 18 2006 - 14:34:36 CST)
  • XMB Forum HTML Code Injection (Wed Jan 18 2006 - 16:27:32 CST)
  • Phpclanwebsite BBCode IMG Tag XSS Vulnerability (Tue Jan 17 2006 - 16:44:02 CST)
• nonenone.com
  • ezDatabase 2.0 and below (Sat Jan 14 2006 - 09:16:39 CST)
• noreplysecurityfocus.com
  • APPLE-SA-2006-01-05 AirPort firmware update (Thu Jan 05 2006 - 16:39:42 CST)
• nukedxnukedx.com
  • Advisory: MiniNuke CMS System <= 1.8.2 (membership.asp) remote user password change exploit (Thu Jan 12 2006 - 22:36:43 CST)
  • Advisory: MiniNuke CMS System <= 1.8.2 (news.asp) SQL Injection vulnerability (Thu Jan 12 2006 - 22:32:17 CST)
  • Advisory: MiniNuke CMS System <= 1.8.2 (news.asp) SQL Injection vulnerability (Thu Jan 12 2006 - 22:22:17 CST)
  • Advisory: XSS attack on Superonline.com email service. (Wed Jan 11 2006 - 04:10:12 CST)
  • Advisory:XSS vulnerability on WebWiz Forums <= 6.34 (search_form.asp) (Wed Jan 11 2006 - 04:09:14 CST)
• nullmsn-pwd-recovery.com
  • Re: Re: MSN Messenger Password Decrypter for WinXP/2003 (Wed Jan 18 2006 - 09:53:57 CST)
• o.y.6hotmail.com
  • MyBB 1.2 Local File Incusion (Mon Jan 30 2006 - 04:38:29 CST)
  • MyBB 1.2 usercp2.php [ $url ] CrossSiteScripting ( XSS ) (Sun Jan 29 2006 - 14:02:42 CST)
  • Re: MyBB 1.0.2 SQL injection in usercp.php (Sun Jan 15 2006 - 10:28:39 CST)
• oliver karow
  • Apache Geronimo 1.0 - CSS and persistent HTML-Injection vulnerabilities (Sun Jan 15 2006 - 12:12:58 CST)
• orambaldinisoti.net
  • Re: Airscanner Mobile Security Advisory: Remote Hard Reset Data Wipe and DoS of Pocket Controller v5.0 (#AS05080401) (Fri Jan 27 2006 - 18:23:55 CST)
• organisersyscan.org
  • Call For Paper - SyScan'06 Singapore (Tue Jan 24 2006 - 21:31:58 CST)
• Oriol Torrent
  • Directory traversal in phpXplorer (Mon Jan 16 2006 - 04:10:32 CST)
• patrickthomassengmail.com
  • Veritas NetBackup "Volume Manager Daemon" Module Stack Overflow - Exploit (Sun Jan 15 2006 - 19:24:40 CST)
• Paul
  • RE: WMF Exploit (Sat Dec 31 2005 - 14:03:43 CST)
• Paul Laudanski
  • Hacking With The Google Search Engine (Sat Jan 14 2006 - 13:29:00 CST)
  • PayPal Phishing Site Exploits Google XSS Vulnerability (Tue Jan 10 2006 - 23:51:44 CST)
  • Re: WMF Exploit (Tue Jan 03 2006 - 16:39:37 CST)
• paul14075gmail.com
  • Re: Linksys VPN Router (BEFVP41) DoS Vulnerability (Tue Jan 17 2006 - 14:44:14 CST)
  • Re: Linksys VPN Router (BEFVP41) DoS Vulnerability (Sun Jan 15 2006 - 22:36:26 CST)
  • Linksys VPN Router (BEFVP41) DoS Vulnerability (Fri Jan 13 2006 - 00:17:45 CST)
• Pierre Vandevenne
  • Re[2]: [funsec] WMF round-up, updates and de-mystification (Tue Jan 03 2006 - 07:42:06 CST)
  • Re: [funsec] WMF round-up, updates and de-mystification (Tue Jan 03 2006 - 05:47:49 CST)
• Pim van Riezen
  • Re: Arescom NetDSL-1000 DoS atack source (Mon Jan 30 2006 - 12:04:25 CST)
• Piotr Bania
  • DISIT - OPEN SOURCE DISASSEMBLER ENGINE (Tue Jan 31 2006 - 11:57:14 CST)
• PostgreSQL Security
  • PostgreSQL security releases 8.0.6 and 8.1.2 (Wed Jan 11 2006 - 08:24:30 CST)
• pr1nce_empireyahoo.com
  • Re: Re: IndonesiaHack Advisory HTML injection in PHP Fusebox (Sun Jan 29 2006 - 08:47:00 CST)
• Praburaajan
  • HITBSecConf2005 Videos Released (Thu Jan 19 2006 - 05:56:45 CST)
• prebenwatchcom.no
  • Cerberus Helpdesk vulnerable to XSS (Mon Jan 30 2006 - 17:42:55 CST)
  • BrowserCRM vulnerable for XSS (Mon Jan 30 2006 - 18:03:21 CST)
  • XSS flaw in MG2 Image Gallery (v.0.5.1) (Mon Jan 30 2006 - 14:48:50 CST)
  • EasyCMS vulnerable to XSS injection. (Sun Jan 29 2006 - 14:42:40 CST)
• priestpriestmaster.org
  • Visual Studio Remote Code Execution (Fri Jan 13 2006 - 05:57:24 CST)
• Process
  • Winamp 5.12 - 0day exploit - code execution through playlist (Mon Jan 30 2006 - 09:00:16 CST)
• Rafael San Miguel Carrasco
  • Xmame 0.102 local vulnerability proof-of-concept (Tue Jan 31 2006 - 14:07:12 CST)
  • Recruitment Software allows MySQL credentials disclosure (Sat Dec 31 2005 - 05:14:59 CST)
• Randal L. Schwartz
  • Re: Interview: Ilfak Guilfanov (Sat Jan 07 2006 - 13:12:48 CST)
• rebornrebelhotmail.co.uk
  • Re: Dumb IE6/XP denial of service found on the web (Sun Jan 08 2006 - 10:29:42 CST)
• RedTeam Pentesting
  • BSD Securelevels: Circumventing protection of files flagged immutable (Mon Jan 09 2006 - 06:27:28 CST)
  • Time modification flaw in BSD securelevels on NetBSD and Linux (Mon Jan 09 2006 - 06:28:38 CST)
• Rembrandt
  • Re: MD:Pro - Malware Distribution Project (Thu Jan 05 2006 - 18:35:38 CST)
• researchzone-h.fr
  • ZRCSA-200601: SPIP - Multiple Vulnerabilities (Tue Jan 31 2006 - 17:58:35 CST)
• revnicgmail.com
  • MyCO multiple vulnerabilities (Tue Jan 31 2006 - 02:07:31 CST)
• Richard Forno
  • Survey on Vuln Disclosure: Request for Participation (Thu Jan 05 2006 - 19:57:29 CST)
• Richard M. Smith
  • Microsoft knew about the WMF flaw for years (Mon Jan 16 2006 - 09:08:49 CST)
  • WSJ: The new "metasploit" computer virus (Tue Jan 03 2006 - 13:39:43 CST)
• Rickard Andersson
  • Re: PunBB BBCode URL Tag Script Injection Vulnerability (Tue Jan 17 2006 - 13:07:11 CST)
• rod hedor
  • Change passwd 3.1 (SquirrelMail plugin ) (Thu Jan 19 2006 - 15:14:51 CST)
  • SCO Openserver 5.0.x exploit (Mon Jan 02 2006 - 17:43:53 CST)
• roozbeh_afrasiabiyahoo.com
  • [CORRECTIONS AND ADDITIONS ]Azbb v1.1.00 Cross-Site Scripting (Sat Jan 28 2006 - 01:30:48 CST)
  • Azbb v1.1.00 Cross-Site Scripting (Sun Jan 22 2006 - 19:43:40 CST)
  • [KAPDA::#25] - MyBB 1.x Cross_Site_Scripting (Tue Jan 24 2006 - 12:50:12 CST)
• roundcubegmail.com
  • Re: Fullpath disclosure in roundcube webmail (Tue Jan 17 2006 - 05:53:10 CST)
• RSnake
  • Re: Drupal all versiyon xss cehennem.org (Tue Jan 03 2006 - 14:38:59 CST)
• Ryan Smith
  • Shareaza P2P Remote Vulnerability (Fri Jan 27 2006 - 06:45:46 CST)
• s3udehotmail.com
  • -2- [XSS] in ar-blog v 5.2 (Wed Jan 18 2006 - 07:52:58 CST)
• SanjayR
  • WMF SETABORTPROC exploit (Tue Jan 03 2006 - 02:44:43 CST)
• secresearchfortinet.com
  • Fortinet Advisory - Apple QuickTime Player StripByteCounts Buffer Overflow Vulnerability (Thu Jan 12 2006 - 17:40:42 CST)
  • Fortinet Advisory - Apple QuickTime Player StripOffsets Improper Memory Access (Thu Jan 12 2006 - 17:48:04 CST)
  • Fortinet Advisory - Apple QuickTime Player ImageWidth Denial of Service Vulnerability (Thu Jan 12 2006 - 17:56:42 CST)
• Secunia Research
  • Secunia Research: Mozilla Thunderbird Attachment Spoofing Vulnerability (Tue Jan 17 2006 - 03:32:48 CST)
• securesymantec.com
  • Contact information for Symantec Vulnerability Management (Wed Jan 04 2006 - 18:41:33 CST)
• security curmudgeon
  • Etomite followup information (Mon Jan 30 2006 - 16:15:07 CST)
• security-alerthp.com
  • [security bulletin] SSRT051007 rev.1 - HP Tru64 UNIX Running DNS BIND Remote Unauthorized Privileged Access (Wed Feb 01 2006 - 07:05:00 CST)
  • [security bulletin] SSRT061104 rev.1 - HP Oracle for OpenView (OfO) Critical Patch Update January 2006 (Tue Jan 24 2006 - 12:39:43 CST)
  • [security bulletin] SSRT061099 rev.1 - HP-UX Local Increased Privilege (Tue Jan 24 2006 - 12:30:09 CST)
  • [security bulletin] SSRT5971 rev.1 - HP-UX Running ftpd Remote Denial of Service (DoS) (Thu Jan 19 2006 - 13:40:53 CST)
  • [security bulletin] SSRT051058 rev.1 - HP-UX Secure Shell Remote Denial of Service (DoS) (Tue Jan 10 2006 - 12:35:42 CST)
  • [security bulletin] SSRT051074 rev.3 - HP-UX Running xterm Local Unauthorized Access (Fri Jan 06 2006 - 11:55:48 CST)
• securitydrupal.org
  • Re: Drupal all versiyon xss cehennem.org (Tue Jan 03 2006 - 15:43:49 CST)
• securitymandriva.com
  • [ MDKSA-2006:027 ] - Updated gzip packages fix zgrep vulnerabilities (Mon Jan 30 2006 - 17:12:00 CST)
  • [ MDKSA-2006:026 ] - Updated bzip2 packages fix bzgrep vulnerabilities (Mon Jan 30 2006 - 15:23:00 CST)
  • [ MDKSA-2006:024 ] - Updated ImageMagick packages fix vulnerabilities (Thu Jan 26 2006 - 17:17:22 CST)
  • [ MDKSA-2006:025 ] - Updated net-snmp packages fix vulnerabilities (Thu Jan 26 2006 - 21:39:00 CST)
  • [ MDKSA-2006:023 ] - Updated perl-Net_SSLeay packages fix vulnerability (Thu Jan 26 2006 - 17:12:37 CST)
  • [ MDKSA-2006:022 ] - Updated perl-Convert-UUlib packages fix vulnerability (Thu Jan 26 2006 - 16:24:36 CST)
  • Updated mozilla-thunderbird packages fix vulnerability (Wed Jan 25 2006 - 17:17:31 CST)
  • Updated ipsec-tools packages fix vulnerability (Wed Jan 25 2006 - 14:11:04 CST)
• serjvarna.net
  • xorg server 6.8.2 and below on 64bit arch (Sun Jan 08 2006 - 09:26:05 CST)
• serxwebunlinuxmail.org
  • Orjinweb E-commerce (Fri Jan 06 2006 - 16:08:59 CST)
• Shalom Carmel
  • Reverse Proxy Cross Site Scripting (Sun Jan 15 2006 - 04:49:52 CST)
• shulmanimperva.com
  • Oracle DBMS Access Control Bypass in Login (Tue Jan 17 2006 - 14:18:12 CST)
• simomorx.org
  • ICQ Cross Site Scripting Vulnerability (Wed Jan 18 2006 - 09:19:11 CST)
  • AIM Multiple Cross Site Scripting Vulnerability (Sat Jan 07 2006 - 21:53:54 CST)
  • AOL Multiple Cross Site Scripting Vulnerability (Sat Jan 07 2006 - 21:45:05 CST)
• Sintiganshellcoders.com
  • Serial Line Sniffer 0.4.4 Buffer Overflow (Wed Jan 11 2006 - 00:22:56 CST)
• spher3hackerscenter.com
  • [HSC] Multiple transversal bug in vis (Thu Jan 26 2006 - 09:32:40 CST)
• Stan Bubrouski
  • Re: Digital Armaments Security Advisory 01.16.2006: CMU SNMP utilities snmptrad Format String Vulnerability (Fri Jan 20 2006 - 16:26:05 CST)
  • Re: Directory traversal in phpXplorer (Thu Jan 19 2006 - 14:06:04 CST)
  • Re: Directory traversal in phpXplorer (Mon Jan 16 2006 - 14:00:47 CST)
• Stefan Cornelius
  • [ GLSA 200601-13 ] Gallery: Cross-site scripting vulnerability (Thu Jan 26 2006 - 13:07:20 CST)
  • [ GLSA 200601-12 ] Trac: Cross-site scripting vulnerability (Thu Jan 26 2006 - 07:36:58 CST)
  • [ GLSA 200601-05 ] mod_auth_pgsql: Multiple format string vulnerabilities (Tue Jan 10 2006 - 13:51:25 CST)
  • [ GLSA 200601-06 ] xine-lib, FFmpeg: Heap-based buffer overflow (Tue Jan 10 2006 - 15:05:55 CST)
• Stefan Esser
  • Advisory 01/2006: PHP ext/session HTTP Response Splitting Vulnerability (Thu Jan 12 2006 - 10:35:28 CST)
  • Advisory 02/2006: PHP ext/mysqli Format String Vulnerability (Thu Jan 12 2006 - 10:39:06 CST)
• Stephen Frost
  • Re: MySQL 5.0 information leak? (Fri Jan 20 2006 - 18:30:57 CST)
• Steve Friedl
  • Re: WMF vulnerability was a deliberate backdoor? (Sun Jan 15 2006 - 14:33:11 CST)
• Steven M. Christey
  • Re: Microsoft knew about the WMF flaw for years (Tue Jan 17 2006 - 17:46:39 CST)
  • Re: Html_Injection in vBulletin 3.5.2 (Mon Jan 09 2006 - 23:21:58 CST)
  • Open Letter on the Interpretation of "Vulnerability Statistics" (Thu Jan 05 2006 - 01:12:32 CST)
• sudhakar+bugtraqcs.princeton.edu
  • Windows Access Control Demystified (Tue Jan 31 2006 - 17:08:18 CST)
• Sune Kloppenborg Jeppesen
  • [ GLSA 200601-17 ] Xpdf, Poppler, GPdf, libextractor, pdftohtml: Heap overflows (Mon Jan 30 2006 - 16:20:33 CST)
  • [ GLSA 200601-16 ] MyDNS: Denial of Service (Mon Jan 30 2006 - 15:30:43 CST)
  • [ GLSA 200601-15 ] Paros: Default administrator password (Sun Jan 29 2006 - 14:53:55 CST)
  • [ GLSA 200601-14 ] LibAST: Privilege escalation (Sun Jan 29 2006 - 08:14:29 CST)
  • [ GLSA 200601-11 ] KDE kjs: URI heap overflow vulnerability (Sun Jan 22 2006 - 06:28:19 CST)
  • ERRATA: [ GLSA 200601-09 ] Wine: Windows Metafile SETABORTPROC vulnerability (Tue Jan 17 2006 - 01:27:29 CST)
  • [ GLSA 200601-08 ] Blender: Heap-based buffer overflow (Fri Jan 13 2006 - 01:07:44 CST)
  • [ GLSA 200601-07 ] ClamAV: Remote execution of arbitrary code (Fri Jan 13 2006 - 01:05:25 CST)
  • [ GLSA 200601-09 ] Wine: Windows Metafile SETABORTPROC vulnerability (Fri Jan 13 2006 - 01:12:12 CST)
  • [ GLSA 200601-04 ] VMware Workstation: Vulnerability in NAT networking (Sat Jan 07 2006 - 15:09:50 CST)
  • [ GLSA 200601-03 ] HylaFAX: Multiple vulnerabilities (Fri Jan 06 2006 - 07:39:41 CST)
  • [ GLSA 200601-02 ] KPdf, KWord: Multiple overflows in included Xpdf code (Wed Jan 04 2006 - 16:02:01 CST)
• supporttumbleweed.com
  • Re: Tumbleweed EMF 6.x Processing Issues (Tue Jan 24 2006 - 16:18:17 CST)
• the_bekirsavsak.com
  • Html_Injection in vBulletin 3.5.2 (Sun Jan 08 2006 - 13:51:35 CST)
• Thierry Carrez
  • [ GLSA 200601-10 ] Sun and Blackdown Java: Applet privilege escalation (Mon Jan 16 2006 - 07:34:49 CST)
  • [ GLSA 200512-18 ] XnView: Privilege escalation (Fri Dec 30 2005 - 06:43:42 CST)
  • [ GLSA 200601-01 ] pinentry: Local privilege escalation (Tue Jan 03 2006 - 08:51:55 CST)
• Thierry Zoller
  • [ TZO-012006 ] Checkpoint VPN-1 SecureClient insecure usage of CreateProcess() (Tue Jan 17 2006 - 15:45:14 CST)
  • WehnTrust - When you have to trust Wehntrust (Mon Jan 16 2006 - 14:47:05 CST)
• Thomas Biege
  • DIMVA 2006 Call for Papers (Fri Jan 13 2006 - 07:56:22 CST)
• Thomas Henlich
  • SysCP WebFTP local file inclusion vulnerability (Wed Jan 04 2006 - 14:38:00 CST)
• Thor (Hammer of God)
  • Re: what we REALLY learned from WMF (Thu Jan 05 2006 - 23:33:12 CST)
• Trustix Security Advisor
  • TSLSA-2006-0004 - multi (Mon Jan 30 2006 - 07:12:49 CST)
  • TSL-2006-0001 - postgresql (Fri Jan 13 2006 - 07:57:43 CST)
  • TSLSA-2006-0002 - multi (Fri Jan 13 2006 - 07:57:11 CST)
• uinC Team
  • Multiple PHP Toolkit for PayPal Vulnerabilities (Thu Jan 12 2006 - 08:42:04 CST)
• Uninformed
  • Uninformed Journal Release Announcement: Volume 3 (Wed Jan 04 2006 - 14:46:44 CST)
• visitbipinhotmail.com
  • Re: Download Accelerator Plus can be tricked to download malicious file (Thu Jan 05 2006 - 12:08:06 CST)
  • Download Accelerator Plus can be tricked to download malicious file (Wed Jan 04 2006 - 11:30:40 CST)
• waltdneswaltdnes.org
  • What is sbininitd port 65534 ??? (Wed Jan 04 2006 - 22:22:36 CST)
• Williams, James K
  • CAID 33778 - CA iGateway Content-Length Buffer Overflow Vulnerability (Mon Jan 23 2006 - 10:22:07 CST)
  • CAID 33778 - CA iGateway Content-Length Buffer Overflow Vulnerability [v1.1] (Thu Jan 26 2006 - 23:24:02 CST)
  • CAID 33756 - DM Deployment Common Component Vulnerabilities (Wed Jan 18 2006 - 09:41:48 CST)
• xx.com
  • Re: Workaround for unpatched Oracle PLSQL Gateway flaw (Tue Jan 31 2006 - 08:17:34 CST)
• xwingssecurityfocus.com
  • mysec.org Security Advisory : Xmame buffer overflow, with a possibility of privilege escalation (Tue Jan 10 2006 - 14:43:57 CST)
• yossarian
  • Re: [security] What A Click! [Internet Explorer] (Fri Jan 27 2006 - 15:51:59 CST)
  • Re: [security] What A Click! [Internet Explorer] (Thu Jan 26 2006 - 18:31:21 CST)
• Yvan Boily
  • Re: [Full-disclosure] [ GLSA 200601-15 ] Paros: Default administrator password (Sun Jan 29 2006 - 21:14:53 CST)
• zdi-disclosures3com.com
  • ZDI-06-001: Clam AntiVirus UPX Unpacking Code Execution Vulnerability (Thu Jan 12 2006 - 14:37:09 CST)
• zinhohackerscenter.com
  • [HSC Security Group] Multiple SQL injection/XSS in SimpleBlog 2.1 (Sat Jan 14 2006 - 17:21:17 CST)
• zwellsohu.com
  • CounterPath eyeBeam Handing SIP header Vulnerabilities (Sun Jan 15 2006 - 20:58:42 CST)
  • eStara Softphone SIP stack Buffer Overflow Vulnerability (Wed Jan 11 2006 - 04:16:56 CST)

Last message date: Wed Feb 01 2006 - 12:03:14 CST
Archived on: Wed Feb 01 2006 - 12:03:32 CST

528 messages sorted by: [ date ] [ thread ] [ subject ]