604 messages sorted by: [ date ] [ thread ] [ subject ]

Starting: Sat Apr 01 2006 - 15:37:20 CST
Ending: Sat Apr 29 2006 - 16:22:53 CDT

• 3APA3A
  • Re[3]: Bypassing ISA Server 2004 with IPv6 (Sat Apr 15 2006 - 06:17:28 CDT)
  • Re[2]: Bypassing ISA Server 2004 with IPv6 (Mon Apr 10 2006 - 07:22:47 CDT)
  • Re: Bypassing ISA Server 2004 with IPv6 (Tue Apr 04 2006 - 07:40:57 CDT)
• 86400snerim.net
  • Exploiting out of memory crashes and null pointers [was: Re: function *() php/apache Crash PHP 4.4.2 and 5.1.2] (Wed Apr 12 2006 - 14:23:56 CDT)
• A.L.M.Buxeylboro.ac.uk
  • Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotaged hosts-file lookup (Thu Apr 13 2006 - 14:05:27 CDT)
• Aaron Kaplan
  • manila.userland cross site scriptable (Fri Apr 14 2006 - 16:18:08 CDT)
• Aaron Phillips
  • Re: Apple Mac OS X Safari 2.0.3 Vulnerability (Wed Apr 26 2006 - 18:15:46 CDT)
• adampinkhat.org
  • [SA-03] Example of Grsecurity protection avoid. (Mon Apr 17 2006 - 16:52:28 CDT)
• addmimistratorgmail.com
  • [KAPDA]CopperminePhotoGallery1.4.4~ PluginInclusionSystem(index.php)~ RemoteFileInclusion attack (Sat Apr 15 2006 - 00:26:11 CDT)
  • [KAPDA]MyBB1.1.0~global.php~ParameterExtracting (Fri Apr 14 2006 - 23:57:56 CDT)
  • [KAPDA::#38] - MyBB 1.1.0~functions_post.php~XSS Attack (Fri Apr 07 2006 - 03:21:00 CDT)
• AdityaMetaeye.Org
  • XSS Bug in OpenGear Server Website (Mon Apr 24 2006 - 09:50:40 CDT)
• adminmajorsecurity.de
  • [MajorSecurity] phpMyAgenda 3.0 Final - Remote File Include Vulnerability (Mon Apr 24 2006 - 10:12:55 CDT)
  • [MajorSecurity] TotalCalendar 2.30 - Remote File Include Vulnerability (Sun Apr 23 2006 - 06:19:14 CDT)
  • [MajorSecurity]ActualAnalyzer - Remote File Include Vulnerability (Wed Apr 19 2006 - 03:57:15 CDT)
  • phpListPro <= 2.0 - Remote File Include Vulnerability (Tue Apr 11 2006 - 07:03:53 CDT)
• AdvisoryAria-Security.net
  • Land Down Under 802 and below version Path Disclosure Vulnerability (Thu Apr 27 2006 - 00:01:27 CDT)
• advisoryrapid7.com
  • Rapid7 Advisory R7-0019: Directory traversal vulnerability in SolarWinds TFTP Server for Windows (Fri Apr 21 2006 - 14:10:35 CDT)
  • Rapid7 Advisory R7-0023: Symantec Scan Engine File Disclosure Vulnerability (Fri Apr 21 2006 - 14:19:02 CDT)
  • Rapid7 Advisory R7-0022: Symantec Scan Engine Known Immutable DSA Private Key (Fri Apr 21 2006 - 14:17:21 CDT)
  • Rapid7 Advisory R7-0021: Symantec Scan Engine Authentication Fundamental Design Error (Fri Apr 21 2006 - 14:15:09 CDT)
• akred-database-security.com
  • SQL Injection in package SYS.DBMS_LOGMNR_SESSION (Tue Apr 18 2006 - 17:07:41 CDT)
  • Oracle read-only user can insert/update/delete data via specially crafted views (Mon Apr 10 2006 - 06:57:23 CDT)
• alexevuln.com
  • [eVuln] warforge.NEWS SQL Injection and Multiple XSS Vulnerabilities (Wed Apr 26 2006 - 01:15:01 CDT)
  • [eVuln] RateIt SQL Injection Vulnerability (Mon Apr 24 2006 - 10:45:02 CDT)
  • [eVuln] MWNewsletter SQL Injection and XSS Vulnerabilities (Fri Apr 21 2006 - 07:30:46 CDT)
  • [eVuln] MWGuest XSS Vulnerability (Thu Apr 20 2006 - 11:04:25 CDT)
  • [eVuln] N.T. Version 1.1.0 XSS and PHP Code Insertion Vulnerabilities (Wed Apr 19 2006 - 02:59:48 CDT)
  • [eVuln] MD News Authentication Bypass and SQL Injection Vulnerabilities (Tue Apr 18 2006 - 14:58:49 CDT)
  • [eVuln] Wire Plastik wpBlog SQL Injection Vulnerability (Mon Apr 17 2006 - 16:12:59 CDT)
  • [eVuln] CzarNews XSS and Multiple SQL Injection Vulnerabilities (Mon Apr 17 2006 - 06:53:22 CDT)
  • [eVuln] aWebBB Multiple XSS and SQL Injection Vulnerabilities (Sat Apr 15 2006 - 01:20:20 CDT)
  • [eVuln] aWebNews Multiple XSS and SQL Injection Vulnerabilities (Fri Apr 14 2006 - 02:27:24 CDT)
  • [eVuln] RedCMS Multiple XSS and SQL Injection Vulnerabilities (Thu Apr 13 2006 - 16:20:01 CDT)
  • [eVuln] qliteNews SQL Injection Vulnerability (Thu Apr 13 2006 - 09:20:29 CDT)
  • [eVuln] QLnews XSS and PHP Code Insertion Vulnerabilities (Wed Apr 12 2006 - 03:18:21 CDT)
  • [eVuln] VNews Multiple Vulnerabilities (Tue Apr 11 2006 - 12:09:52 CDT)
  • [eVuln] [V]Book Multiple Vulnerabilities (Tue Apr 11 2006 - 09:13:32 CDT)
  • [eVuln] phpNewsManager Multiple SQL Injections (Mon Apr 10 2006 - 05:56:07 CDT)
  • [eVuln] newsletter - sourceworkshop SQL Injection Vulnerability (Fri Apr 07 2006 - 11:33:11 CDT)
  • [eVuln] vCounter - sourceworkshop SQL Injection Vulnerability (Fri Apr 07 2006 - 11:33:52 CDT)
  • [eVuln] VSNS Lemon Multiple Vulnerabilities (Thu Apr 06 2006 - 11:24:08 CDT)
  • [eVuln] phpNewsManager Multiple SQL Injections (Sat Apr 08 2006 - 06:23:08 CDT)
  • [eVuln] Null news SQL Injection Vulnerability (Sat Apr 08 2006 - 06:21:53 CDT)
• Alexander Klimov
  • Re: gcc 4.1 bug miscompiles pointer range checks, may place you at risk (Tue Apr 18 2006 - 02:45:21 CDT)
• Alexey Dobriyan
  • Re: Format string in Doomsday 1.8.6 (Fri Apr 07 2006 - 10:04:52 CDT)
• alihackerz.ir
  • VWar <= ver 1.21 Remote Code Execution Exploit (Sat Apr 22 2006 - 10:48:59 CDT)
  • SiteMan <= All version SQL injection in admin_login.asp (Sat Apr 01 2006 - 13:57:08 CST)
  • linksubmit <= All version Html Tag Injector in index.php (Sat Apr 01 2006 - 14:06:58 CST)
• alireza hassani
  • [KAPDA::#41] - Mambo/Joomla rss component vulnerability (Tue Apr 18 2006 - 09:07:51 CDT)
• almfnodgawab.com
  • google xss (Tue Apr 04 2006 - 16:34:47 CDT)
• Alvaro Olavarria
  • Dokeos 1.6.4 SQL Injection Vulnerability (Mon Apr 10 2006 - 20:36:28 CDT)
• AminRaydenyahoo.com
  • NextAge Shopping Cart Software XSS (Mon Apr 24 2006 - 21:21:21 CDT)
  • Farsinews Cross-Site Scripting & Path disclosure vulnerability (Fri Apr 14 2006 - 06:54:07 CDT)
• Andreas Beck
  • Re: ADVISORY FOR IOPUS SECURE EMAIL ATTACHMENTS (Mon Apr 24 2006 - 19:17:20 CDT)
• Andy Meyers
  • RE: google xss (Sun Apr 09 2006 - 18:50:27 CDT)
• anonssanonaa.com
  • Re: Jupiter CMS <= 1.1.5 multiple XSS attack vectors. (Wed Apr 12 2006 - 14:43:34 CDT)
• Ansgar -59cobalt- Wiechers
  • Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup (Mon Apr 17 2006 - 18:06:22 CDT)
• Anton Ivanov
  • Re: recursive DNS servers DDoS as a growing DDoS problem (Wed Apr 05 2006 - 01:32:43 CDT)
  • Re: recursive DNS servers DDoS as a growing DDoS problem (Tue Apr 04 2006 - 01:43:03 CDT)
  • Re: recursive DNS servers DDoS as a growing DDoS problem (Tue Apr 04 2006 - 01:59:58 CDT)
  • Re: recursive DNS servers DDoS as a growing DDoS problem (Sun Apr 02 2006 - 01:40:51 CST)
• ArkanoiD
  • Re: On product vulnerability history and vulnerability complexity (Mon Apr 03 2006 - 10:44:12 CDT)
• arko.dhargmail.com
  • PhpWebFtp Cross Site Scripting Vulnerability (Tue Apr 25 2006 - 01:45:52 CDT)
  • VWar Path Disclosure (Sun Apr 23 2006 - 12:53:55 CDT)
  • Scry Gallery XSS Vulnerability (Sun Apr 23 2006 - 21:36:32 CDT)
  • PhpWebFTP 3.2 Login Script (Sun Apr 16 2006 - 21:21:52 CDT)
• assurance.com.au
  • Multiple vulnerabilities in Linux based Cisco products (Wed Apr 19 2006 - 10:15:32 CDT)
• Bernhard Fischer
  • Re: DoS-ing sysklogd? (Mon Apr 03 2006 - 10:10:19 CDT)
• Bernhard Mueller
  • SEC Consult SA-20060314 :: Opera Browser CSS Attribute Integer Wrap / Buffer Overflow (Thu Apr 13 2006 - 07:24:39 CDT)
• Billy Bues
  • Re: Apple Mac OS X Safari 2.0.3 Vulnerability (Tue Apr 25 2006 - 12:02:32 CDT)
• Blyth A J C (Comp)
  • 2nd European Conference on Computer Network Defense (EC2ND) (Tue Apr 11 2006 - 10:35:30 CDT)
• Bob Goodman
  • Re: Strengthen OpenSSH security? (Thu Apr 20 2006 - 19:16:23 CDT)
• BoNy-mhotmail.com
  • MySmartBB<---v 1.1.x SQL Injection/XSS (Wed Apr 26 2006 - 10:46:20 CDT)
• botanlinuxmail.org
  • [Kurdish Secure Advisory #1] I-RATER Platinum "Admin/configsettings.tpl.php" Remote File Include Vulnerability (Fri Apr 28 2006 - 07:13:31 CDT)
  • [Kurdish Security #2] Artmedic Event Remote File Include Vulnerability (Fri Apr 28 2006 - 12:45:27 CDT)
  • [Kurdish Security #3] CoolMenus Event Remote File Include Vulnerability (For PHP) (Fri Apr 28 2006 - 12:47:06 CDT)
  • EasyGallery Cross-Site Scripting (Wed Apr 19 2006 - 13:19:42 CDT)
  • ContentBoxx Login.php Cross-Site Scripting (Wed Apr 19 2006 - 11:32:25 CDT)
  • phpLister v. 0.4.1 XSS Attacking (Tue Apr 18 2006 - 14:58:11 CDT)
  • MyEvent Remote File Execution And XSS Attacking (Sun Apr 16 2006 - 13:42:04 CDT)
  • Calendarix "yearcal.php" XSS Attacking (Sun Apr 16 2006 - 12:50:57 CDT)
  • phpFaber TopSites Script Cross-Site Scripting (Sat Apr 15 2006 - 09:10:26 CDT)
  • QuickBlogger v1.4 Cross-Site Scripting (Wed Apr 12 2006 - 14:18:03 CDT)
  • FleXiBle Development Script Remote Command Exucetion And XSS Attacking (Sat Apr 01 2006 - 13:15:14 CST)
• Brandon S. Allbery KF8NH
  • Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotaged hosts-file lookup (Thu Apr 13 2006 - 12:36:40 CDT)
• Breeeehhotmail.com
  • DCForumLite V 3.0<--XSS/SQL Injection (Tue Apr 25 2006 - 16:05:03 CDT)
• Brett Glass
  • Strengthen OpenSSH security? (Mon Apr 17 2006 - 23:31:52 CDT)
• bugtraqmorph3us.org
  • [BuHa-Security] Multiple Vulnerabilities in MS IE 6.0 SP2 (Wed Apr 12 2006 - 17:49:30 CDT)
  • [BuHa-Security] Stack Based Buffer Overflow Vulnerability in Amaya 9.4 #2 (Wed Apr 12 2006 - 18:59:17 CDT)
  • [BuHa-Security] Stack Based Buffer Overflow Vulnerability in Amaya 9.4 (Wed Apr 12 2006 - 18:31:32 CDT)
  • [BuHa-Security] DoS Vulnerability in Firefox 1.5.0.1 (Wed Apr 12 2006 - 18:30:24 CDT)
• c0ntexbgmail.com
  • Remote Xine Format String Vulnerability (Tue Apr 18 2006 - 02:31:05 CDT)
  • Windows Help Heap Overflow (Thu Apr 13 2006 - 10:36:56 CDT)
• c0redumpackers.org.uk
  • Re: Strengthen OpenSSH security? (Thu Apr 20 2006 - 06:47:43 CDT)
• Carson Gaspar
  • Re: Strengthen OpenSSH security? (Wed Apr 19 2006 - 22:28:38 CDT)
• Cesar
  • Re: Recent Oracle exploit is _actually_ an 0day with no patch (Fri Apr 28 2006 - 11:32:39 CDT)
  • [Argeniss] Alert - Yahoo! Mail XSS vulnerability (Fri Apr 28 2006 - 12:08:44 CDT)
  • [Argeniss] Oracle Database 10gR1 Buffer overflow in VERIFY_LOG procedure (Wed Apr 19 2006 - 19:02:56 CDT)
  • [Argeniss] Alert - Yahoo! Webmail XSS (Mon Apr 17 2006 - 14:02:34 CDT)
• cfpruxcon.org.au
  • RUXCON 2006 Call for Papers (Tue Apr 04 2006 - 04:58:27 CDT)
• Cheng Peng Su
  • Yahoo! Mail XSS Vulnerability (Fri Apr 21 2006 - 06:16:01 CDT)
• chrisphpmyforum.de
  • Re: phpMyForum Cross Site Scripting & CRLF injection (Tue Apr 25 2006 - 09:16:53 CDT)
• chrissplices.org
  • Firefox Remote Code Execution and DoS 1.5.0.2 (Sun Apr 23 2006 - 20:26:37 CDT)
• Christine Kronberg
  • Re: Re[2]: Bypassing ISA Server 2004 with IPv6 (Sun Apr 16 2006 - 16:35:03 CDT)
  • Re[3]: Bypassing ISA Server 2004 with IPv6 (Sat Apr 15 2006 - 15:23:48 CDT)
  • Re[2]: Bypassing ISA Server 2004 with IPv6 (Mon Apr 10 2006 - 14:34:16 CDT)
  • Re: Bypassing ISA Server 2004 with IPv6 (Wed Apr 05 2006 - 05:12:10 CDT)
• Christophe Garault
  • Re: DoS-ing sysklogd? (Mon Apr 03 2006 - 06:14:36 CDT)
• Cisco Systems Product Security Incident Response Team
  • Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerable to Crafted HTTP Attack (Wed Apr 26 2006 - 11:18:09 CDT)
  • Cisco Security Advisory: Multiple Vulnerabilities in the WLSE Appliance (Wed Apr 19 2006 - 10:00:00 CDT)
  • Cisco Security Advisory: Cisco IOS XR MPLS Vulnerabilities (Wed Apr 19 2006 - 10:00:00 CDT)
  • Cisco Security Advisory: Cisco Optical Networking System 15000 series and Cisco Transport Controller Vulnerabilities (Wed Apr 05 2006 - 11:00:32 CDT)
  • Cisco Security Advisory: Cisco 11500 Content Services Switch HTTP Request Vulnerability (Wed Apr 05 2006 - 10:00:00 CDT)
• coderpunk
  • Flaw in commonly used bash random seed method (Sat Apr 01 2006 - 20:12:15 CST)
• codexploderlinuxmail.org
  • Autonomous LAN party File iNclusion (Sat Apr 08 2006 - 08:28:51 CDT)
• Colin Keigher
  • Re: Apple Mac OS X Safari 2.0.3 Vulnerability (Mon Apr 24 2006 - 15:05:48 CDT)
• crasherkecoak.or.id
  • Vulnerabilities in MODx (Fri Apr 14 2006 - 01:53:11 CDT)
  • Vulnerabilities in Papoo (Fri Apr 14 2006 - 01:47:55 CDT)
  • Vulnerabilities in lifetype (Fri Apr 14 2006 - 01:45:10 CDT)
  • Multiple vulnerabilities in Blur6ex (Tue Apr 11 2006 - 02:56:31 CDT)
  • Vulnerabilities in SPIP (Sun Apr 09 2006 - 02:00:06 CDT)
  • Multiple Vulnerabilities in LucidCMS (Sun Apr 02 2006 - 00:07:13 CST)
• CrAzY.CrAcKeRhotmail.com
  • poll.pl<--remote commands execution exploit (Tue Apr 25 2006 - 21:07:49 CDT)
  • vbulletin<--3.0.x SQL Injection (Sun Apr 23 2006 - 13:01:19 CDT)
  • BK Forum <<--V.4.0 SQL Injection (Thu Apr 20 2006 - 19:38:43 CDT)
  • Mini-NUKE v2.3<<--- SQL Injection (Thu Apr 20 2006 - 14:13:13 CDT)
  • axoverzicht.cgi<==Remote File Inclusion (Thu Apr 20 2006 - 07:36:07 CDT)
  • ThWboard 3 Beta 2.84 Cross Site Scripting (Thu Apr 20 2006 - 07:55:00 CDT)
• Crispin Cowan
  • Re: On product vulnerability history and vulnerability complexity (Sat Apr 01 2006 - 17:00:30 CST)
• CS_Advisories Mailbox
  • SYMSA-2006-002: McAfee WebShield SMTP Format String Vulnerability (Mon Apr 03 2006 - 21:02:04 CDT)
• cxibsecurityreason.com
  • copy() Safe Mode Bypass PHP 4.4.2 and 5.1.2 (Sun Apr 09 2006 - 13:10:13 CDT)
  • tempnam() open_basedir bypass PHP 4.4.2 and 5.1.2 (Sun Apr 09 2006 - 14:23:13 CDT)
  • function *() php/apache Crash PHP 4.4.2 and 5.1.2 (Sun Apr 09 2006 - 14:22:19 CDT)
  • phpinfo() Cross Site Scripting PHP 5.1.2 and 4.4.2 (Sun Apr 09 2006 - 14:21:20 CDT)
  • Re: Mis-diagnosed XSS bugs hiding worse issues due to PHP feature (Sun Apr 02 2006 - 10:04:44 CDT)
• d4igorogmail.com
  • Linpha 1.1.0 - XSS Vulnerabilities (Mon Apr 17 2006 - 15:54:12 CDT)
  • planetSearch+ - XSS Vulnerabilities (Thu Apr 13 2006 - 13:52:29 CDT)
  • PowerClan 1.14 - SQL Injection (Thu Apr 13 2006 - 16:34:36 CDT)
  • Tritanium Bulletin Board 1.2.3 - XSS (Tue Apr 11 2006 - 15:26:06 CDT)
  • Manila <= 9.5 - XSS Vulnerabilities (Tue Apr 11 2006 - 16:19:26 CDT)
• Damian Put
  • [Overflow.pl] Clam AntiVirus Win32-UPX Heap Overflow (not default configuration) (Thu Apr 06 2006 - 11:10:48 CDT)
• Damien Miller
  • Re: Strengthen OpenSSH security? (Thu Apr 20 2006 - 00:13:54 CDT)
• danielevo-dev.com
  • Re: evoBlog Remote Name tag Script injection (Sun Apr 23 2006 - 03:53:08 CDT)
• Dariusz Kolasinski
  • Re: [KAPDA]CopperminePhotoGallery1.4.4~ PluginInclusionSystem(index.php)~ RemoteFileInclusion attack (Sun Apr 16 2006 - 04:40:13 CDT)
• darmawan_salihunstudents.itb.ac.id
  • Re: Bios Information Leakage (Wed Apr 05 2006 - 22:22:40 CDT)
• Dave English
  • Re: Flaw in commonly used bash random seed method (Tue Apr 04 2006 - 03:21:40 CDT)
• Dave Korn
  • [Full-disclosure] Microsoft DNS resolver: deliberately sabotaged hosts-file lookup (Thu Apr 13 2006 - 12:29:15 CDT)
  • Re: Flaw in commonly used bash random seed method (Tue Apr 04 2006 - 08:22:53 CDT)
• dave.desiol.net
  • Re: phpBB Admin command execution (Tue Apr 18 2006 - 03:19:25 CDT)
• David Litchfield
  • Re: Recent Oracle exploit is _actually_ an 0day with no patch (Fri Apr 28 2006 - 16:40:37 CDT)
  • Re: Recent Oracle exploit is _actually_ an 0day with no patch (Thu Apr 27 2006 - 20:24:20 CDT)
  • Recent Oracle exploit is _actually_ an 0day with no patch (Wed Apr 26 2006 - 09:29:39 CDT)
• Debasis Mohanty
  • Google Reader "preview" and "lens" script improper feed validation (Wed Apr 05 2006 - 14:09:44 CDT)
• defa
  • Confixx SQL Injection exploit (confixx_exploit.pl) (Wed Apr 19 2006 - 10:53:42 CDT)
• Dennis Brown
  • Re: WebVulnCrawl searching excluded directories for hackable web servers (Fri Mar 31 2006 - 15:04:20 CST)
• dennisbacktrace.de
  • SMART Technologies SynchronEyes Remote Denial of Services (Tue Apr 04 2006 - 00:42:18 CDT)
• Derek Soeder
  • RE: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup (Thu Apr 13 2006 - 14:01:38 CDT)
• Dirk Mueller
  • [Kaffeine Security Advisory] Heap based buffer overflow in http_peek() (Tue Apr 04 2006 - 19:46:46 CDT)
• Dr-Jr7hotmail.com
  • photokorn 1.53 , 1.542 << Sql (Mon Apr 24 2006 - 22:33:42 CDT)
• dr.jr7hotmail.com
  • Remote File Inclusion in VBulletin ImpEx (Wed Apr 12 2006 - 09:04:26 CDT)
  • SQL Injection in Chipmunk Guestbook (Fri Apr 07 2006 - 17:17:26 CDT)
• dumdidumdideldey
  • Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotaged hosts-file lookup (Wed Apr 12 2006 - 22:39:57 CDT)
• Duncan Simpson
  • Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotaged hosts-file lookup (Tue Jan 03 2006 - 10:35:42 CST)
• easy.maskgmail.com
  • BetaBoard Cross Site Scripting vulnerability (Sun Apr 16 2006 - 17:44:28 CDT)
• eEye Advisories
  • [EEYEB-20060227] Juniper Networks SSL-VPN Client Buffer Overflow (Wed Apr 26 2006 - 14:33:35 CDT)
• Eliah Kagan
  • Re: Firefox 1.5.0.1 Password Manager Arbtirary User Browsing History Disclosure (Fri Apr 14 2006 - 23:38:23 CDT)
• Erwan David
  • Re: recursive DNS servers DDoS as a growing DDoS problem (Wed Apr 05 2006 - 01:11:15 CDT)
• Esteban Martinez Fayo
  • Vulnerability in Microsoft FrontPage Server Extensions Could Allow Cross-Site Scripting (Wed Apr 12 2006 - 16:32:16 CDT)
• eufratogmail.com
  • [ECHO_ADV_28$2006] Clever Copy <= 3.0 Connect.inc Critical Information Disclosure (Fri Apr 07 2006 - 01:46:03 CDT)
  • [ECHO_ADV_27$2006] AngelineCMS 0.8.1 Installpath Remote File Inclusion (Tue Apr 04 2006 - 06:27:52 CDT)
  • [ECHO_ADV_27$2006] AngelineCMS 0.8.1 Installpath Remote File Inclusion (Tue Apr 04 2006 - 12:10:10 CDT)
• Evans, Arian
  • RE: (addendum) redirection vuln crawlers breed & security through obscurity (Wed Apr 19 2006 - 17:46:17 CDT)
  • RE: redirection vuln crawlers breed & security through obscurity (Wed Apr 19 2006 - 14:48:46 CDT)
• fabio
  • Re: ADVISORY FOR IOPUS SECURE EMAIL ATTACHMENTS (Tue Apr 25 2006 - 06:20:03 CDT)
• Felix von Leitner
  • gcc 4.1 bug miscompiles pointer range checks, may place you at risk (Mon Apr 17 2006 - 15:03:54 CDT)
• fingerout
  • Linux Kernel Local DoS vulnerability. (Tue Apr 04 2006 - 18:24:40 CDT)
• Florian Weimer
  • Re: gcc 4.1 bug miscompiles pointer range checks, may place you at risk (Tue Apr 18 2006 - 14:16:13 CDT)
• Forrest J. Cavalier III
  • Re: gcc 4.1 bug miscompiles pointer range checks, may place you at risk (Mon Apr 17 2006 - 17:26:46 CDT)
  • Re: On product vulnerability history and vulnerability complexity (Mon Apr 03 2006 - 12:19:46 CDT)
• franznoemail.com
  • Firefox 1.5.0.1 Password Manager Arbtirary User Browsing History Disclosure (Thu Apr 13 2006 - 11:16:08 CDT)
  • Re: Another Internet Explorer Address Bar Spoofing Vulnerability (Tue Apr 04 2006 - 09:40:53 CDT)
• François Harvey
  • [SecuriWeb 2006.1] directory traversal in Asterisk<img src="/imgs/at.gif" border=0 align=middle>Home and ARI (Thu Apr 20 2006 - 22:15:45 CDT)
• FreeBSD Security Advisories
  • FreeBSD Security Advisory FreeBSD-SA-06:14.fpu (Wed Apr 19 2006 - 02:11:27 CDT)
• Gabor Gombas
  • Re: gcc 4.1 bug miscompiles pointer range checks, may place you at risk (Tue Apr 18 2006 - 04:21:40 CDT)
• Gadi Evron
  • Re: recursive DNS servers DDoS as a growing DDoS problem (Tue Apr 04 2006 - 20:45:43 CDT)
  • Re: On product vulnerability history and vulnerability complexity (Mon Apr 03 2006 - 19:34:00 CDT)
  • Re: On product vulnerability history and vulnerability complexity (Mon Apr 03 2006 - 14:12:13 CDT)
  • Re: recursive DNS servers DDoS as a growing DDoS problem (Thu Mar 30 2006 - 14:23:58 CST)
• gboyce
  • RE: recursive DNS servers DDoS as a growing DDoS problem (Fri Mar 31 2006 - 11:38:36 CST)
• GentleSecurity Team
  • GeSWall 2.2 – Free Intrusion Prevention System for Windows (Wed Mar 29 2006 - 15:54:02 CST)
• Geo.
  • Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup (Thu Apr 20 2006 - 07:18:40 CDT)
  • Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup (Mon Apr 17 2006 - 12:09:28 CDT)
  • RE: recursive DNS servers DDoS as a growing DDoS problem (Wed Apr 05 2006 - 08:13:50 CDT)
  • Re: recursive DNS servers DDoS as a growing DDoS problem (Tue Apr 04 2006 - 21:45:52 CDT)
  • RE: recursive DNS servers DDoS as a growing DDoS problem (Tue Apr 04 2006 - 10:10:39 CDT)
  • RE: recursive DNS servers DDoS as a growing DDoS problem (Tue Apr 04 2006 - 07:32:29 CDT)
  • Re: recursive DNS servers DDoS as a growing DDoS problem (Sun Apr 02 2006 - 09:31:07 CDT)
  • RE: recursive DNS servers DDoS as a growing DDoS problem (Fri Mar 31 2006 - 12:27:20 CST)
• gergerosecurityfocus.com
  • Re: Limbo CMS code execution (Tue Apr 04 2006 - 07:16:15 CDT)
• H D Moore
  • Re: IE6 Crash (Mon Apr 10 2006 - 09:16:08 CDT)
• h e
  • blur6ex Local File Inclusion and SQL injection . (Mon Apr 17 2006 - 07:11:13 CDT)
  • TUGZip Archive Extraction Directory traversal (Mon Apr 10 2006 - 06:35:05 CDT)
• hainamlukeyahoo.com
  • Another way to spoof Internet Explorer Address Bar (Tue Apr 04 2006 - 09:27:31 CDT)
  • Another Internet Explorer Address Bar Spoofing Vulnerability (Mon Apr 03 2006 - 13:29:02 CDT)
• hessamhessamx.net
  • Tiny PHP forum - vulns (Mon Apr 17 2006 - 07:28:06 CDT)
• Hubbard, Dan
  • RE: [BULK] - Websense Filter Bypass (Fri Apr 21 2006 - 12:11:42 CDT)
• Ian MacPhedran
  • Re: Apple Mac OS X Safari 2.0.3 Vulnerability (Wed Apr 26 2006 - 18:05:48 CDT)
• Ilker Temir
  • Re: Multiple vulnerabilities in Linux based Cisco products (Wed Apr 19 2006 - 10:42:50 CDT)
• infog-0.org
  • RechnungsZentrale V2 - SQL injection and Remote PHP inclusion vulnerabilities (Wed Apr 19 2006 - 02:40:03 CDT)
• infocus
  • Multiple PHP4/PHP5 vulnerabilities (Sat Nov 12 2005 - 09:44:46 CST)
• inge.henriksenbooleansoft.com
  • Multiple browsers Windows mailto protocol Office 2003 file attachment exploit (Mon Apr 24 2006 - 10:55:36 CDT)
• iovdinswsoft.com
  • Re: Sql Injection in Confixx 3.06 & 3.08 & 3.?? ? (Wed Apr 12 2006 - 04:36:34 CDT)
  • Re: Confixx 3.1.2 <= SQL Injection (Thu Apr 13 2006 - 05:06:33 CDT)
• it_undergroundgazeta.pl
  • IT Underground, London 2006 - call for papers (Tue Apr 11 2006 - 09:38:09 CDT)
• Ivan Sergio Borgonovo
  • redirection vuln crawlers breed & security through obscurity (Sat Apr 15 2006 - 07:46:50 CDT)
• izimaskthehackademy.net
  • Camino Browser HTML Parsing Null Pointer Dereference Denial of Service Vulnerability (Thu Apr 13 2006 - 15:15:18 CDT)
• jalvare7cajastur.es
  • Re: Buffer-overflow in Ultr<img src="/imgs/at.gif" border=0 align=middle>VNC 1.0.1 viewer and server (Wed Apr 05 2006 - 02:49:14 CDT)
• Jamie Riden
  • Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotaged hosts-file lookup (Sat Apr 15 2006 - 21:32:29 CDT)
• Jasper Bryant-Greene
  • Re: [Full-disclosure] Critical PHP bug - act ASAP if you are running web with sensitive data (Mon Apr 03 2006 - 16:58:56 CDT)
  • Re: [Full-disclosure] Critical PHP bug - act ASAP if you are running web with sensitive data (Mon Apr 03 2006 - 17:15:13 CDT)
• jat-public01jaet.org
  • Re: gcc 4.1 bug miscompiles pointer range checks, may place you at risk (Tue Apr 18 2006 - 10:44:18 CDT)
• Javier Olascoaga
  • Invision Power Board 2.1.5 POC (Thu Apr 27 2006 - 07:11:18 CDT)
• Javor Ninov
  • Re: On product vulnerability history and vulnerability complexity (Tue Apr 04 2006 - 02:49:02 CDT)
• Jean-Sébastien Guay-Leroux
  • [Full-disclosure] PIRANA exploitation framework and SMTP contentfilter security (Mon Apr 03 2006 - 18:45:25 CDT)
  • Barracuda ZOO archiver security bug leads to remote compromise (Mon Apr 03 2006 - 18:51:15 CDT)
  • Barracuda LHA archiver security bug leads to remote compromise (Mon Apr 03 2006 - 18:51:17 CDT)
• Jeff Moss
  • Black Hat Call for Papers and Registration now open (Thu Apr 06 2006 - 15:03:17 CDT)
  • Black Hat Call for Papers and Registration now open (Mon Apr 03 2006 - 17:49:45 CDT)
• jensmac.com
  • Re: Apple Mac OS X Safari 2.0.3 Vulnerability (Wed Apr 26 2006 - 09:41:47 CDT)
• Jeremy Ashcraft
  • Re: Simplog <=0.9.2 multiple vulnerabilities (Thu Apr 13 2006 - 19:41:43 CDT)
• JiM / aEGIS
  • Re: - PHPGraphy <= 0.9.11 "editwelcome" unauthorized access / cross site scripting - (Tue Apr 18 2006 - 06:09:58 CDT)
• Jim Ley
  • Re: google xss (Mon Apr 10 2006 - 14:11:07 CDT)
• Jim Pingle
  • Re: recursive DNS servers DDoS as a growing DDoS problem (Tue Apr 04 2006 - 17:09:02 CDT)
  • Re: recursive DNS servers DDoS as a growing DDoS problem (Mon Apr 03 2006 - 18:12:31 CDT)
• Joachim Schipper
  • Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotaged hosts-file lookup (Thu Apr 13 2006 - 19:13:21 CDT)
• John Biederstedt
  • Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup (Thu Apr 20 2006 - 10:14:31 CDT)
  • Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup (Wed Apr 19 2006 - 18:43:38 CDT)
• John Bond
  • Re: [Full-disclosure] Critical PHP bug - act ASAP if you are running web with sensitive data (Tue Apr 04 2006 - 08:29:26 CDT)
• John E. Fleming
  • RE: [BULK] - Websense Filter Bypass (Fri Apr 21 2006 - 14:33:27 CDT)
• john mullee
  • Re: On classifying attacks (Sat Apr 01 2006 - 05:46:36 CST)
• johnjohnsdomain.org
  • Re: RE: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup (Mon Apr 17 2006 - 07:33:18 CDT)
• Juha-Matti Laurio
  • Re: RE: IBM (Thu Apr 13 2006 - 14:55:24 CDT)
• Julien L.
  • Avast Linux Home Edition (vulnerability on a temporary folder creation) (Fri Apr 14 2006 - 14:12:17 CDT)
• Justin Shore
  • RE: DoS-ing sysklogd? (Sun Apr 02 2006 - 16:43:06 CDT)
• Kaveh Razavi
  • Fenice - Open Media Streaming Server remote BOF exploit (Tue Apr 25 2006 - 14:25:45 CDT)
  • Quick 'n Easy FTP Server pro/lite Logging unicode stack overflow (Mon Apr 24 2006 - 14:22:38 CDT)
• Kd
  • Re: Strengthen OpenSSH security? (Wed Apr 19 2006 - 23:03:30 CDT)
• Kevin Waterson
  • Re: phpMyAdmin 2.7.0-pl1 (Thu Apr 13 2006 - 19:17:54 CDT)
• Kevin Wilcox
  • Re: phpWebSite 0.10.? (topics.php) Remote SQL Injection Exploit (Thu Apr 13 2006 - 12:44:31 CDT)
• kimwebdeal.no
  • Allied Telesyn Switch UDP Data Flood Management Denial Of Service Vulnerability (Wed Apr 19 2006 - 15:24:06 CDT)
• king_purbayahoo.co.uk
  • Vegadns blind sql injection and cross site scripting (Mon Apr 10 2006 - 01:30:30 CDT)
  • Multiple vulnerability in jupiter CMS (Fri Apr 07 2006 - 01:01:28 CDT)
  • MAXDEV CMS Multiple vulnerabilities (Thu Apr 06 2006 - 13:02:46 CDT)
• koperpass.pl
  • Tlen.PL e-mail XSS vulnerability. (Sat Apr 15 2006 - 17:51:56 CDT)
• Kornbrust, Alexander
  • RE: Recent Oracle exploit is _actually_ an 0day with no patch (Fri Apr 28 2006 - 14:17:29 CDT)
• kr4chweb.de
  • FlexBB v0.5.5 BETA [SQL Inj] [XSS] [Login bypass] (Sun Apr 16 2006 - 11:07:15 CDT)
  • phpMyAdmin 2.7.0-pl1 (Wed Apr 12 2006 - 13:50:37 CDT)
• kvealoc.gov
  • Re: XV multiple buffer overflows (update) (Wed Apr 26 2006 - 10:13:44 CDT)
• Lance James
  • PowerPoint Phishing Trojan (Sat Apr 22 2006 - 03:11:20 CDT)
• Layer One
  • LayerOne 2006 - Finalized Speaker Line-Up Announced (Thu Apr 06 2006 - 11:48:35 CDT)
• liz0bsdmail.com
  • Virtual War File &#304;nclusion (Sat Apr 08 2006 - 08:27:58 CDT)
  • Shadowed Portal Cross Site Scripting (Sat Apr 08 2006 - 08:29:40 CDT)
  • Matt Wright Guestbook Xss Script &#304;njection (Sat Apr 08 2006 - 08:33:09 CDT)
• Luigi Auriemma
  • Format string bug in Skulltag 0.96f (Sun Apr 23 2006 - 14:03:27 CDT)
  • Denial of service bugs in OpenTTD 0.4.7 (Sun Apr 23 2006 - 14:02:51 CDT)
  • Buffer-overflow and crash in Fenice OMS 1.10 (Sun Apr 23 2006 - 14:02:13 CDT)
  • Re: Buffer-overflow in Ultr<img src="/imgs/at.gif" border=0 align=middle>VNC 1.0.1 viewer and server (Wed Apr 05 2006 - 11:00:21 CDT)
  • Buffer-overflow in Ultr<img src="/imgs/at.gif" border=0 align=middle>VNC 1.0.1 viewer and server (Tue Apr 04 2006 - 14:24:13 CDT)
  • Format string in Doomsday 1.8.6 (Mon Apr 03 2006 - 16:20:34 CDT)
• MaddHatter
  • Re: Strengthen OpenSSH security? (Wed Apr 19 2006 - 23:33:38 CDT)
• mailinglist mailinglist
  • Re: [Full-disclosure] Critical PHP bug - act ASAP if you are runningweb with sen (Mon Apr 03 2006 - 11:35:53 CDT)
• Marc Deslauriers
  • [Updated] [FLSA-2006:186277] Updated sendmail packages fix security issue (Tue Apr 04 2006 - 19:49:42 CDT)
  • [FLSA-2006:184098] Updated libc-client packages fixes security issue (Tue Apr 04 2006 - 19:48:08 CDT)
  • [FLSA-2006:184074] Updated pine package fixes security issue (Tue Apr 04 2006 - 19:47:35 CDT)
  • [FLSA-2006:180159] Updated unzip package fixes security issue (Tue Apr 04 2006 - 19:47:00 CDT)
  • [FLSA-2006:183571-2] Updated tar package fixes security issue (Tue Apr 04 2006 - 19:46:22 CDT)
  • [FLSA-2006:183571-1] Updated tar package fixes security issue (Tue Apr 04 2006 - 19:45:50 CDT)
  • [FLSA-2006:170411] Updated imap packages fix security issue (Tue Apr 04 2006 - 19:45:15 CDT)
  • [FLSA-2006:156290] Updated cyrus-imapd packages fix security issues (Tue Apr 04 2006 - 19:44:42 CDT)
  • [FLSA-2006:156139] Updated tcpdump packages fix security issues (Tue Apr 04 2006 - 19:44:08 CDT)
  • [FLSA-2006:152896] Updated mod_python package fixes a security issue (Tue Apr 04 2006 - 19:43:31 CDT)
  • [FLSA-2006:152873] Updated xine package fixes security issues (Tue Apr 04 2006 - 19:42:48 CDT)
• Marco Ivaldi
  • Re: recursive DNS servers DDoS as a growing DDoS problem (Mon Apr 03 2006 - 09:39:46 CDT)
• Mario Contestabile
  • RE: [Full-disclosure] Microsoft DNS resolver: deliberately sabotaged hosts-file lookup (Wed Apr 19 2006 - 10:56:53 CDT)
• Martin Pitt
  • [USN-275-1] Mozilla vulnerabilities (Thu Apr 27 2006 - 16:42:37 CDT)
  • [USN-274-1] MySQL vulnerability (Thu Apr 27 2006 - 09:45:59 CDT)
  • [USN-273-1] Ruby vulnerability (Mon Apr 24 2006 - 08:57:34 CDT)
  • [USN-272-1] cyrus-sasl2 vulnerability (Mon Apr 24 2006 - 07:40:33 CDT)
  • [USN-271-1] Firefox vulnerabilities (Wed Apr 19 2006 - 10:32:19 CDT)
  • [USN-270-1] xpdf vulnerabilities (Thu Apr 13 2006 - 02:33:12 CDT)
  • [USN-269-1] xscreensaver vulnerability (Tue Apr 11 2006 - 08:39:11 CDT)
  • [USN-268-1] Kaffeine vulnerability (Thu Apr 06 2006 - 11:56:55 CDT)
  • [USN-267-1] mailman vulnerability (Mon Apr 03 2006 - 10:44:00 CDT)
  • [USN-266-1] dia vulnerabilities (Mon Apr 03 2006 - 07:33:11 CDT)
• Martin Schulze
  • [SECURITY] [DSA 1046-1] New Mozilla packages fix several vulnerabilities (Thu Apr 27 2006 - 02:08:35 CDT)
  • [SECURITY] [DSA 1045-1] New OpenVPN packages fix arbitrary code execution (Thu Apr 27 2006 - 01:12:11 CDT)
  • [SECURITY] [DSA 1043-1] New abcmidi packages fix arbitrary code execution (Wed Apr 26 2006 - 02:12:01 CDT)
  • [SECURITY] [DSA 1044-1] New Mozilla Firefox packages fix several vulnerabilities (Wed Apr 26 2006 - 11:58:22 CDT)
  • [SECURITY] [DSA 1044-1] New Mozilla Firefox packages fix several vulnerabilities (Wed Apr 26 2006 - 11:02:42 CDT)
  • [SECURITY] [DSA 1042-1] New Cyrus SASL packages fix denial of service (Tue Apr 25 2006 - 12:35:50 CDT)
  • [SECURITY] [DSA 1041-1] New abc2ps packages fix arbitrary code execution (Tue Apr 25 2006 - 02:01:54 CDT)
  • [SECURITY] [DSA 1039-1] New blender packages fix several vulnerabilities (Mon Apr 24 2006 - 01:29:55 CDT)
  • [SECURITY] [DSA 1040-1] New gdm packages fix local root exploit (Mon Apr 24 2006 - 02:04:24 CDT)
  • [SECURITY] [DSA 1038-1] New xzgv packages fix arbitrary code execution (Sat Apr 22 2006 - 03:31:28 CDT)
  • [SECURITY] [DSA 1037-1] New zgv packages fix arbitrary code execution (Fri Apr 21 2006 - 10:50:16 CDT)
  • [SECURITY] [DSA 1025-1] New dia packages fix arbitrary code execution (Thu Apr 06 2006 - 02:16:58 CDT)
  • [SECURITY] [DSA 1023-1] New kaffeine packages fix arbitrary code execution (Wed Apr 05 2006 - 04:14:02 CDT)
  • [SECURITY] [DSA 1030-1] New moodle packages fix several vulnerabilities (Sat Apr 08 2006 - 08:33:21 CDT)
  • [SECURITY] [DSA 1029-1] New libphp-adodb packages fix several vulnerabilities (Sat Apr 08 2006 - 06:48:10 CDT)
  • [SECURITY] [DSA 1027-1] New mailman packages fix denial of service (Thu Apr 06 2006 - 03:22:22 CDT)
  • [SECURITY] [DSA 1028-1] New libimager-perl packages fix denial of service (Fri Apr 07 2006 - 13:38:47 CDT)
  • [SECURITY] [DSA 946-2] New sudo packages fix privilege escalation (Sat Apr 08 2006 - 11:09:06 CDT)
  • [SECURITY] [DSA 1031-1] New cacti packages fix several vulnerabilities (Sat Apr 08 2006 - 10:37:57 CDT)
  • [SECURITY] [DSA 1000-2] New Apache2::Request packages fix denial of service (Mon Apr 03 2006 - 02:28:37 CDT)
• Matthias Geerdsen
  • [ GLSA 200604-03 ] FreeRADIUS: Authentication bypass in EAP-MSCHAPv2 module (Tue Apr 04 2006 - 13:57:33 CDT)
• Matthijs
  • Re: Flaw in commonly used bash random seed method (Tue Apr 04 2006 - 09:47:30 CDT)
  • Re: Flaw in commonly used bash random seed method (Tue Apr 04 2006 - 10:02:12 CDT)
  • Re: Flaw in commonly used bash random seed method (Mon Apr 03 2006 - 14:56:12 CDT)
• mattmechamgmail.com
  • Re: Invision Vulnerabilities, including remote code execution (Thu Apr 27 2006 - 06:17:46 CDT)
• Memisyazici, Aras
  • RE: Another way to spoof Internet Explorer Address Bar (Tue Apr 04 2006 - 23:37:05 CDT)
• mfoxhackergmail.com
  • TopList <= 1.3.8 (PHPBB Hack) Remote File Inclusion Vulnerability (Fri Apr 28 2006 - 01:13:50 CDT)
• Michael Chamberlain
  • Re: gcc 4.1 bug miscompiles pointer range checks, may place you at risk (Mon Apr 17 2006 - 18:57:47 CDT)
• Michael Scheidell
  • RE: osCommerce "extras/" information/source code disclosure (Sat Apr 15 2006 - 07:39:14 CDT)
  • RE: IBM (Tue Apr 11 2006 - 23:15:31 CDT)
• Michael Wojcik
  • RE: gcc 4.1 bug miscompiles pointer range checks, may place you at risk (Mon Apr 17 2006 - 19:06:28 CDT)
• Michal Zalewski
  • MSIE (mshtml.dll) OBJECT tag vulnerability (Sat Apr 22 2006 - 18:30:03 CDT)
  • Re: function *() php/apache Crash PHP 4.4.2 and 5.1.2 (Thu Apr 13 2006 - 13:20:45 CDT)
  • Re: function *() php/apache Crash PHP 4.4.2 and 5.1.2 (Mon Apr 10 2006 - 12:28:22 CDT)
• Mike Hoskins
  • Re: Strengthen OpenSSH security? (Wed Apr 19 2006 - 22:21:25 CDT)
• Mike Weller
  • RE: Invision Vulnerabilities, including remote code execution (Wed Apr 26 2006 - 16:46:37 CDT)
• mikygmail.com
  • Another flaw in Firefox 1.5.0.2: to open files from remote (Tue Apr 18 2006 - 09:38:34 CDT)
• Milen Rangelov
  • DoS-ing sysklogd? (Fri Mar 31 2006 - 06:37:23 CST)
• moep
  • Serendipity Blog vuln (Wed Apr 14 2004 - 09:11:29 CDT)
• Moonen, Ralph
  • Multiple vulnerabilities in IP3 Networks 'NetAccess' NA75 appliance (Mon Apr 24 2006 - 16:05:41 CDT)
• Moritz Muehlenhoff
  • [SECURITY] [DSA 1036-1] New bsdgames packages fix local privilege escalation (Mon Apr 17 2006 - 03:46:07 CDT)
  • [SECURITY] [DSA 1035-1] New fcheck packages fix insecure temporary file creation (Sat Apr 15 2006 - 05:54:16 CDT)
  • [SECURITY] [DSA 1034-1] New horde2 packages fix several vulnerabilities (Fri Apr 14 2006 - 09:42:44 CDT)
  • [SECURITY] [DSA 1033-1] New horde3 packages fix several vulnerabilities (Wed Apr 12 2006 - 14:03:35 CDT)
  • [SECURITY] [DSA 1032-1] New zope-cmfplone packages fix unprivileged data manipulation (Wed Apr 12 2006 - 07:48:37 CDT)
  • [SECURITY] [DSA 1026-1] New sash packages fix potential arbitrary code execution (Thu Apr 06 2006 - 02:36:42 CDT)
  • [SECURITY] [DSA 1018-2] New Linux kernel 2.4.27 packages fix several vulnerabilities (Wed Apr 05 2006 - 02:45:22 CDT)
  • [SECURITY] [DSA 1024-1] New clamav packages fix several vulnerabilities (Wed Apr 05 2006 - 15:08:17 CDT)
  • [SECURITY] [DSA 1022-1] New storebackup packages fix several vulnerabilities (Mon Apr 03 2006 - 18:36:45 CDT)
• Moriyoshi Koizumi
  • Re: [Full-disclosure] Critical PHP bug - act ASAP if you are running web with sensitive data (Wed Apr 05 2006 - 19:58:41 CDT)
  • Re: [Full-disclosure] Critical PHP bug - act ASAP if you are running web with sensitive data (Mon Apr 03 2006 - 09:06:01 CDT)
• Morning Wood
  • Re: [Full-disclosure] [Argeniss] Alert - Yahoo! Webmail XSS (Mon Apr 17 2006 - 14:58:41 CDT)
  • Re: [Full-disclosure] [Argeniss] Alert - Yahoo! Webmail XSS (Mon Apr 17 2006 - 22:34:16 CDT)
• Mustafa Can Bjorn IPEKCI
  • Advisory: My Gaming Ladder Combo System <= 7.0 Remote File Inclusion Vulnerability. (Sat Apr 22 2006 - 13:56:47 CDT)
  • Advisory: Clansys <= 1.1 PHP Code Insertion Vulnerability. (Sun Apr 23 2006 - 16:03:06 CDT)
  • Advisory: CoreNews <= 2.0.1 Multiple Remote Vulnerabilities. (Fri Apr 21 2006 - 16:56:16 CDT)
  • Advisory: Simplog <= 0.93 Multiple Remote Vulnerabilities. (Fri Apr 21 2006 - 16:54:25 CDT)
  • vBulletin <= 3.5.4 with MKPortal 1.1 Remote SQL Injection Vulnerability. (Fri Apr 21 2006 - 16:52:58 CDT)
  • dForum <= 1.5 Multiple Remote File Inclusion Vulnerabilities. (Fri Apr 21 2006 - 16:51:46 CDT)
  • ASPSitem <= 1.83 Remote SQL Injection Vulnerability (Wed Apr 19 2006 - 13:39:21 CDT)
• MÃ¥ns Nilsson
  • RE: recursive DNS servers DDoS as a growing DDoS problem (Mon Apr 03 2006 - 00:05:57 CDT)
• n0m3rcybsdmail.org
  • BK Forum <= 4.0 Remote SQL Injection (Sun Apr 23 2006 - 06:19:00 CDT)
  • FileLodge Bolt (showonlineusers.php) Cross-Site Scripting Vulnerbility (Sun Apr 23 2006 - 07:24:41 CDT)
  • Shbablek Mail Vulnerablitiy - Cross-Site Scripting (Tue Apr 18 2006 - 13:44:58 CDT)
  • Encyclopedia <= 3.0 (login.php) CrossSite Scripting - XSS (Fri Apr 14 2006 - 09:47:05 CDT)
• Nate Eldredge
  • Re: gcc 4.1 bug miscompiles pointer range checks, may place you at risk (Mon Apr 17 2006 - 19:15:21 CDT)
• newslistsecurity-briefings.com
  • New site about security conferences : www.security-briefings.com (Wed Apr 19 2006 - 14:51:56 CDT)
• NGSSoftware Insight Security Research
  • Multiple critical and high risk issues in Oracle's database server (Tue Apr 18 2006 - 14:02:49 CDT)
• Nick FitzGerald
  • RE: Microsoft DNS resolver: deliberately sabotaged hosts-file lookup (Thu Apr 20 2006 - 03:04:28 CDT)
• no.spammy.house
  • Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup (Sun Apr 16 2006 - 10:40:53 CDT)
• nobodynowhere.com
  • Re: Snipe Gallery <= 3.1.4 Multiple XSS (Sun Apr 16 2006 - 13:15:23 CDT)
• noch22gmail.com
  • phpBB template file code execution (Fri Apr 14 2006 - 09:51:05 CDT)
  • phpBB Admin command execution (Fri Apr 14 2006 - 10:03:41 CDT)
• noreplyromainl.com
  • Re: Bypassing ISA Server 2004 with IPv6 (Mon Apr 10 2006 - 13:31:31 CDT)
• NSFOCUS Security Team
  • NSFOCUS SA2006-02 : IBM AIX mklvcopy Local Privilege Escalation Vulnerability (Mon Apr 24 2006 - 03:35:17 CDT)
  • NSFOCUS SA2006-03 : IBM AIX rm_mlcache_file Local Race Condition Vulnerability (Mon Apr 24 2006 - 03:37:05 CDT)
• ntwak0safehack.com
  • ADVISORY FOR IOPUS SECURE EMAIL ATTACHMENTS (Sat Apr 22 2006 - 11:25:16 CDT)
• nukedxnukedx.com
  • Re: Advisory: Clansys <= 1.1 PHP Code Insertion Vulnerability. (Mon Apr 24 2006 - 15:16:40 CDT)
  • Re: Mini-NUKE v2.3<<--- SQL Injection (Fri Apr 21 2006 - 14:09:24 CDT)
• o.y.6hotmail.com
  • MyBB 1.1.1 Local SQL Injections (Thu Apr 27 2006 - 03:01:19 CDT)
  • FlexBB 0.5.5 Exploit [ function/showprofile.php ] Remote SQL Injection (Fri Apr 21 2006 - 02:30:46 CDT)
  • WWWThread RC 3 MultBugs (Wed Apr 19 2006 - 14:01:08 CDT)
  • FlexBB 0.5.5 Bypass Exploit (Mon Apr 17 2006 - 13:10:49 CDT)
  • MyBB 1.10 New CrossSiteScripting ' member.php ' (Wed Apr 12 2006 - 14:29:54 CDT)
  • MyBB 1.10 New XSS ' member.php ' (Wed Apr 12 2006 - 17:05:19 CDT)
  • MyBB 1.10 'newthread.php' < CrossSiteScripting > (Sun Apr 09 2006 - 16:14:08 CDT)
  • ArabPortal 2.0.1 Stable [ 9 CrossSiteScripting & 1 SQL Injection ] MultBugz (Tue Apr 04 2006 - 13:42:56 CDT)
  • MyBB 1.10 New CrossSiteScripting (Sun Apr 02 2006 - 13:15:07 CDT)
• officeslabmedia.com
  • Re: Path Disclosure and Arbitrary File Read Vulnerability in SLAB5000 (Tue Apr 18 2006 - 19:06:31 CDT)
• offtopic
  • Re: Re[3]: Bypassing ISA Server 2004 with IPv6 (Thu Apr 20 2006 - 00:27:40 CDT)
  • Re: Bypassing ISA Server 2004 with IPv6 (Wed Apr 05 2006 - 01:00:29 CDT)
• Oliver Goebel
  • IMF 2006 - Submission Deadline Extension (Tue Apr 11 2006 - 10:42:18 CDT)
• omnipresentemail.it
  • RIblog Remote SQL Injection Exploit (Sun Apr 23 2006 - 05:32:11 CDT)
  • bloggage Remote SQL Injection (Fri Apr 21 2006 - 04:57:05 CDT)
• optix_prorat100yahoo.com
  • Re: SQL injection in Invision Power Board v2.1.5 (Wed Apr 05 2006 - 07:14:54 CDT)
• OS2A BTO
  • NASL 'Split' function Buffer overflow Vulnerability (Tue Apr 25 2006 - 02:51:15 CDT)
• outlawaria-security.net
  • XSS Attack On DirectAdmin Hosting Managment (Wed Apr 26 2006 - 23:29:05 CDT)
  • Neomail.pl Local Cross Site Scripting (Thu Apr 27 2006 - 23:36:35 CDT)
  • Cireos Portal Cross Site Scripting (Thu Apr 27 2006 - 22:53:42 CDT)
  • Local XXS Attack On CuteNews (Wed Apr 26 2006 - 00:07:54 CDT)
  • XXS Attack On FarsiNews (Wed Apr 26 2006 - 00:09:22 CDT)
  • SQL Injection On DUportal (Wed Apr 26 2006 - 00:11:38 CDT)
• pagvac
  • Re: google xss (Mon Apr 10 2006 - 14:40:18 CDT)
• paolo.difebbogmail.com
  • Hosting Controller AccountActions.asp and saveuploadfiles.asp vulns (PoC) (Sun Apr 02 2006 - 12:18:42 CDT)
• Paul Stepowski
  • Re: recursive DNS servers DDoS as a growing DDoS problem (Thu Mar 30 2006 - 19:27:17 CST)
• Paul Wouters
  • Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup (Mon Apr 17 2006 - 15:49:14 CDT)
• pc.tech2comcast.net
  • Re: Re: Another Internet Explorer Address Bar Spoofing Vulnerability (Thu Apr 06 2006 - 16:45:06 CDT)
• phaasredspin.com
  • Re: Buffer-overflow in Ultr<img src="/imgs/at.gif" border=0 align=middle>VNC 1.0.1 viewer POC (Tue Apr 11 2006 - 16:42:02 CDT)
• pttbtinternet.com
  • IBM (Mon Apr 10 2006 - 06:12:30 CDT)
• putosoft softputo
  • Oracle 10g 10.2.0.2.0 DBA exploit (Wed Apr 19 2006 - 03:33:56 CDT)
• qexbsdmail.com
  • DevBB <= 1.0.0 XSS (Wed Apr 26 2006 - 08:23:38 CDT)
• qexbsdmail.org
  • Open Bulletin Board < Multiple Vulnerability (Wed Apr 26 2006 - 12:33:32 CDT)
  • Instant Photo Gallery <= Multiple XSS (Tue Apr 25 2006 - 12:26:42 CDT)
  • Instant Photo Gallery <= Multiple XSS (Tue Apr 25 2006 - 12:23:39 CDT)
  • r57shell.php <= 1.3 XSS (Fri Apr 21 2006 - 06:32:29 CDT)
  • Websense Filter Bypass (Thu Apr 20 2006 - 07:03:38 CDT)
  • 4images <= 1.7 XSS (Thu Apr 20 2006 - 04:46:22 CDT)
  • ThWboard <= 3 Beta 2.84 SQL Injection (Wed Apr 19 2006 - 06:01:36 CDT)
  • axoverzicht.cgi <= XSS (Tue Apr 18 2006 - 06:44:43 CDT)
  • AnimeGenesis <= XSS (Mon Apr 17 2006 - 09:17:25 CDT)
  • Neuron Blog <= 1.1 XSS (Mon Apr 17 2006 - 06:46:35 CDT)
  • ShoutBOOK <= 1.1 XSS (Mon Apr 17 2006 - 05:07:46 CDT)
  • Snipe Gallery <= 3.1.4 Multiple XSS (Sat Apr 15 2006 - 10:00:19 CDT)
  • Boardsolution <= 1.12 XSS (Sat Apr 15 2006 - 08:30:36 CDT)
  • FlexBB <= 0.5.7 BETA XSS (Sat Apr 15 2006 - 08:28:37 CDT)
  • PhpGuestbook <= 1.0 XSS (Sat Apr 15 2006 - 08:27:43 CDT)
  • Tiny Web Gallery <= 1.4 XSS (Sat Apr 15 2006 - 08:26:44 CDT)
• r0xes.ratmgmail.com
  • TextFileBB 1.0.16 Multiple XSS (Sat Apr 29 2006 - 14:15:49 CDT)
  • W-Agora 4.20 XSS (Sat Apr 29 2006 - 14:27:57 CDT)
  • RevoBoard [email] tag XSS (Thu Apr 13 2006 - 01:45:30 CDT)
  • XMB Forum 1.9.5-Final XSS (Sat Apr 08 2006 - 19:11:35 CDT)
• r57shellgmail.com
  • a Yahoo Vulnerability (Wed Apr 12 2006 - 05:51:38 CDT)
• raven
  • Re: Cantv/Movilnet's Web SMS vulnerability. (Fri Mar 31 2006 - 18:48:18 CST)
• Recon
  • Recon 2006: speaker lineup announcement (Thu Apr 13 2006 - 01:01:22 CDT)
• RedTeam Pentesting
  • PAJAX Remote Code Injection and File Inclusion Vulnerability (Thu Apr 13 2006 - 13:33:53 CDT)
• Renaud Deraison
  • Re: NASL 'Split' function Buffer overflow Vulnerability (Tue Apr 25 2006 - 12:09:28 CDT)
  • Re: NASL 'Split' function Buffer overflow Vulnerability (Tue Apr 25 2006 - 12:20:36 CDT)
• revnicgmail.com
  • TalentSoft Web+Shop Path Disclosure (Thu Apr 13 2006 - 07:14:56 CDT)
• rey.gigatarasjoomla.org
  • Re: [KAPDA::#41] - Mambo/Joomla rss component vulnerability (Wed Apr 19 2006 - 08:28:59 CDT)
• rg.vizagmail.com
  • Re: Re: PHPList <= 2.10.2 remote commands execution (Tue Apr 11 2006 - 11:45:56 CDT)
• rgodautistici.org
  • PHPSurveyor <= 0.995 'save.php/surveyid' remote cmmnds xctn (Thu Apr 20 2006 - 08:26:22 CDT)
  • PCPIN Chat <= 5.0.4 "login/language" remote cmmnds xctn (Wed Apr 19 2006 - 12:00:51 CDT)
  • - PHPGraphy <= 0.9.11 "editwelcome" unauthorized access / cross site scripting - (Mon Apr 17 2006 - 04:03:03 CDT)
  • PHP Album <= 0.3.2.3 remote commnads execution (Sat Apr 15 2006 - 06:36:34 CDT)
  • osCommerce "extras/" information/source code disclosure (Fri Apr 14 2006 - 06:20:03 CDT)
  • Simplog <=0.9.2 multiple vulnerabilities (Tue Apr 11 2006 - 20:14:24 CDT)
  • PHPList <= 2.10.2 remote commands execution (Mon Apr 10 2006 - 04:32:11 CDT)
  • PhpOpenChat 3.0.x ADODB Server.php "sql" SQL injection (Sun Apr 09 2006 - 06:33:32 CDT)
  • PHPMyChat <= 0.14.5 remote commands execution (Wed Apr 05 2006 - 06:10:32 CDT)
  • PHPMyChat 0.15.0dev "SYS enter" remote commands xctn (not properly patched from previous versions) (Thu Apr 06 2006 - 04:35:00 CDT)
  • ReloadCMS <= 1.2.5stable Cross site scripting / remote command execution (Sun Apr 02 2006 - 04:04:43 CDT)
• Richard Horsman
  • [SEC-1 LTD] HP Colour LaserJet 2500 and 4600 Toolbox Directory Traversal Vulnerability (Tue Apr 04 2006 - 08:54:22 CDT)
• robertblurstorm.com
  • Re: [ECHO_ADV_27$2006] Indexu <= 5.0.1 Remote File Inclusion (Thu Apr 13 2006 - 17:23:28 CDT)
• robsekerishotmail.com
  • Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup (Mon Apr 17 2006 - 04:38:51 CDT)
• Romain.Le-Guenhsc.fr
  • Re: Re: Bypassing ISA Server 2004 with IPv6 (Wed Apr 05 2006 - 03:35:37 CDT)
• Romain.Le.Guenromainl.com
  • Bypassing ISA Server 2004 with IPv6 (Mon Apr 03 2006 - 10:08:55 CDT)
• root__linuxmail.org
  • PHPWebGallery Multiple Cross Site Scripting Vulnerabilities (Mon Apr 10 2006 - 05:12:17 CDT)
  • phpMyForum Cross Site Scripting & CRLF injection (Mon Apr 10 2006 - 04:56:09 CDT)
  • Jbook Cross Site Scripting (Mon Apr 10 2006 - 04:54:21 CDT)
• Ross Wheeler
  • Re: recursive DNS servers DDoS as a growing DDoS problem (Wed Apr 05 2006 - 00:13:16 CDT)
• Roy.Battyphreaker.net
  • Ad-Aware Revisited (Tue Apr 18 2006 - 10:01:18 CDT)
• rubengarroteidominiun.com
  • XSS Bug in Cherokee Webserver (Thu Apr 06 2006 - 18:44:55 CDT)
• satanchild123hotmail.com
  • SQL injection exploit IPB <= 2.1.4 (Thu Apr 27 2006 - 11:05:08 CDT)
• scottvbulletin.com
  • Re: vbulletin<--3.0.x SQL Injection (Mon Apr 24 2006 - 17:00:04 CDT)
• Sean Scott
  • RE: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup (Mon Apr 24 2006 - 11:10:09 CDT)
• secfoctincan.co.uk
  • Re: PHPList <= 2.10.2 remote commands execution (Tue Apr 11 2006 - 09:55:45 CDT)
• Secunia Research
  • Secunia Research: Servant Salamander unacev2.dll Buffer Overflow Vulnerability (Fri Apr 28 2006 - 03:27:15 CDT)
  • Secunia Research: SpeedProject Products ACE Archive Handling Buffer Overflow (Wed Apr 26 2006 - 08:18:32 CDT)
  • Secunia Research: Adobe Document Server for Reader Extensions Multiple Vulnerabilities (Thu Apr 13 2006 - 05:22:30 CDT)
  • Secunia Research: AN HTTPD Script Source Disclosure Vulnerability (Mon Apr 03 2006 - 08:15:04 CDT)
• securesymantec.com
  • [Symantec Security Advisor] Symantec Scan Engine Multiple Vulnerabilities (Fri Apr 21 2006 - 18:37:04 CDT)
  • [Symantec Security Advisory] LiveUpdate for Macintosh Local Privilege Escalation (Tue Apr 18 2006 - 15:12:59 CDT)
• securiteamdatasec.no
  • Re: SAXoPRESS - directory traversal aka Saxotech Online (Wed Apr 12 2006 - 04:21:43 CDT)
  • SAXoPRESS - directory traversal (Tue Apr 11 2006 - 10:37:16 CDT)
• security curmudgeon
  • Re: Instant Photo Gallery <= Multiple XSS (Wed Apr 26 2006 - 22:55:46 CDT)
• security-alerthp.com
  • [security bulletin] HPSBMA02113 SSRT061148 rev.1 - HP Oracle for OpenView (OfO) Critical Patch Update April 2006 (Thu Apr 27 2006 - 10:26:30 CDT)
  • [security bulletin] HPSBUX02075 SSRT051074 rev.4 - HP-UX Running xterm Local Unauthorized Access (Thu Apr 27 2006 - 10:27:29 CDT)
  • [security bulletin] HPSBUX02108 SSRT061133 rev.9 - HP-UX running Sendmail, Remote Execution of Arbitrary Code (Thu Apr 27 2006 - 10:19:47 CDT)
  • [security bulletin] HPSBST02112 SSRT061129 rev.1 - HP StorageWorks Secure Path for Windows Remote Denial of Service (DoS) (Thu Apr 20 2006 - 12:12:44 CDT)
  • [security bulletin] HPSBTU02095 SSRT051007 rev.3 - HP Tru64 UNIX Running DNS BIND4/BIND8 as Forwarders: Remote Unauthorized Privileged Access (Thu Apr 20 2006 - 12:10:00 CDT)
  • [security bulletin] HPSBUX02108 SSRT061133 rev.7 - HP-UX running Sendmail, Remote Execution of Arbitrary Code (Wed Apr 19 2006 - 11:06:39 CDT)
  • [security bulletin] HPSBUX02108 SSRT061133 rev.6 - HP-UX running Sendmail, Remote Execution of Arbitrary Code (Thu Apr 13 2006 - 06:40:00 CDT)
  • [security bulletin] HPSBUX02111 SSRT061132 rev.1 - HP-UX su(1) Local Unauthorized Access (Thu Apr 06 2006 - 12:09:50 CDT)
  • [security bulletin] HPSBUX02110 SSRT061110 rev.1 - HP-UX Running wu-ftpd Remote Denial of Service (DoS) (Thu Apr 06 2006 - 12:08:43 CDT)
  • [security bulletin] HPSBUX02108 SSRT061133 rev.3 - HP-UX running Sendmail, Remote Execution of Arbitrary Code (Thu Apr 06 2006 - 12:07:41 CDT)
  • [security bulletin] HPSBPI2109 SSRT061141 rev.1 - HP Color LaserJet 2500 and 4600 Toolbox Running on Microsoft Windows Remote Unauthorized Disclosure of Information (Tue Apr 04 2006 - 12:34:44 CDT)
• securitymandriva.com
  • [ MDKSA-2006:079 ] - Updated ruby packages fix vulnerability (Tue Apr 25 2006 - 18:29:00 CDT)
  • [ MDKSA-2006:078 ] - Updated mozilla-thunderbird packages fix numerous vulnerabilities (Tue Apr 25 2006 - 18:03:00 CDT)
  • [ MDKSA-2006:077 ] - Updated ethereal packages fix numerous vulnerabilities (Tue Apr 25 2006 - 17:55:00 CDT)
  • [ MDKSA-2006:076 ] - Updated mozilla packages fix numerous vulnerabilities (Tue Apr 25 2006 - 17:21:53 CDT)
  • [ MDKSA-2006:075 ] - Updated mozilla-firefox packages fix numerous vulnerabilities (Mon Apr 24 2006 - 21:56:39 CDT)
  • [ MDKSA-2006:073 ] - Updated cyrus-sasl packages addresses vulnerability (Mon Apr 24 2006 - 16:38:56 CDT)
  • [ MDKSA-2006:074 ] - Updated php packages address multiple vulnerabilities. (Mon Apr 24 2006 - 16:38:56 CDT)
  • [ MDKSA-2006:072 ] - Updated kernel packages fix multiple vulnerabilities (Mon Apr 17 2006 - 16:38:00 CDT)
  • [ MDKSA-2006:070 ] - Updated openvpn packages fix vulnerability (Mon Apr 10 2006 - 20:40:00 CDT)
  • [ MDKSA-2006:071 ] - Updated xscreensaver packages fix clear-text password vulnerability (Tue Apr 11 2006 - 14:30:00 CDT)
  • [ MDKSA-2006:069 ] - Updated openvpn packages fix vulnerability (Mon Apr 10 2006 - 19:50:00 CDT)
  • [ MDKSA-2006:067 ] - Updated clamav packages fix vulnerabilities (Fri Apr 07 2006 - 16:25:00 CDT)
  • [ MDKSA-2006:065 ] - Updated kaffeine packages fix remote buffer overflow vulnerability (Wed Apr 05 2006 - 12:50:00 CDT)
  • [ MDKSA-2006:068 ] - Updated mplayer packages fix integer overflow vulnerabilities (Fri Apr 07 2006 - 16:46:00 CDT)
  • [ MDKSA-2006:066 ] - Updated FreeRADIUS packages fix off-by-one overflow vulnerabilty (Wed Apr 05 2006 - 18:47:01 CDT)
  • [ MDKSA-2006:062 ] - Updated dia packages fix buffer overflow vulnerabilities (Mon Apr 03 2006 - 15:27:01 CDT)
  • [ MDKSA-2006:064 ] - Updated MySQL packages fix logging bypass vulnerability (Mon Apr 03 2006 - 17:25:00 CDT)
• securityslashdot.ch
  • Apple Mac OS X Safari 2.0.3 Vulnerability (Mon Apr 24 2006 - 13:00:13 CDT)
• selfar2002hotmail.com
  • SaphpLesson 2.0 (forumid) Remote SQL Injection Exploit (Wed Apr 12 2006 - 16:33:13 CDT)
  • phpWebSite 0.10.? (topics.php) Remote SQL Injection Exploit (Wed Apr 12 2006 - 16:40:53 CDT)
  • AzDGVote File inclusion (Tue Apr 11 2006 - 17:03:20 CDT)
  • INDEXU <= 5.0.1 (theme_path)and (base_path) Remote File Inclusion Exploit (Mon Apr 10 2006 - 20:12:20 CDT)
• sh0rtie
  • Re: Another Internet Explorer Address Bar Spoofing Vulnerability (Wed Apr 05 2006 - 15:53:58 CDT)
• shaunaegisdesign.co.uk
  • Re: phpWebsite <= SQL Injection (friend.php) & (article.php) (Thu Apr 13 2006 - 06:48:53 CDT)
• Siegfried
  • Re: Mis-diagnosed XSS bugs hiding worse issues due to PHP feature (Sat Apr 01 2006 - 14:24:31 CST)
  • Re: [Full-disclosure] Mis-diagnosed XSS bugs hiding worse issues due to PHP feature (Sat Apr 01 2006 - 11:13:55 CST)
• silentproductsgmail.com
  • Myspace.com - Intricate Script Injection (Sun Apr 09 2006 - 17:31:18 CDT)
• simo64gmail.com
  • Scry Gallery Directory Traversal & Full Path Disclosure Vulnerabilites (Fri Apr 21 2006 - 13:54:08 CDT)
  • Sire 2.0 Nws Remote File inclusion & Arbitary Files Upload (Fri Apr 07 2006 - 18:48:52 CDT)
• Simon Boulet
  • Re: recursive DNS servers DDoS as a growing DDoS problem (Mon Apr 03 2006 - 11:34:22 CDT)
• sn4k3.23gmail.com
  • CuteNews 1.4.1 <= Cross Site Scripting (Tue Apr 18 2006 - 17:19:50 CDT)
  • Confixx 3.1.2 <= SQL Injection (Tue Apr 11 2006 - 16:05:23 CDT)
  • Confixx 3.1.2 <= Cross Site Scripting Vuln (Mon Apr 10 2006 - 17:42:41 CDT)
• somebodyrtr.ca
  • Re: RE: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup (Sun Apr 16 2006 - 13:54:10 CDT)
• somerandomaddress99mailinator.com
  • Re: Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotaged hosts-file lookup (Sun Apr 16 2006 - 12:15:53 CDT)
• Soothackersgmail.com
  • PatroNet CMS Xss Vuln (Wed Apr 12 2006 - 17:51:53 CDT)
  • Clansys Multiple Xss Vulnerabilities (Wed Apr 12 2006 - 17:47:55 CDT)
• Sowhat
  • WinISO/UltraISO/MagicISO/PowerISO Directory Traversal Vulnerability (Thu Apr 27 2006 - 22:17:59 CDT)
  • Microsoft Internet Explorer DBCS Remote Memory Corruption Vulnerability (Tue Apr 11 2006 - 20:46:17 CDT)
  • Realplayer .SWF Multiple Remote Memory Corruption Vulnerabilities (Tue Apr 11 2006 - 06:47:34 CDT)
• sp3xsecurityreason.com
  • Re: Re: function *() php/apache Crash PHP 4.4.2 and 5.1.2 (Fri Apr 14 2006 - 11:08:44 CDT)
• spamwe11er.co.uk
  • Invision Vulnerabilities, including remote code execution (Tue Apr 25 2006 - 11:06:43 CDT)
• spicg00ns.net
  • Re: VWar Path Disclosure (Wed Apr 26 2006 - 02:07:44 CDT)
• SRC Telindus
  • [SRC-Telindus advisory] - HP System Management Homepage Remote Unauthorized Access (Tue Apr 11 2006 - 11:20:10 CDT)
• Stan Bubrouski
  • Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotaged hosts-file lookup (Thu Apr 13 2006 - 13:59:18 CDT)
• Stefan Cornelius
  • [ GLSA 200604-05 ] Doomsday: Format string vulnerability (Wed Apr 05 2006 - 21:34:35 CDT)
  • [ GLSA 200604-02 ] Horde Application Framework: Remote code execution (Tue Apr 04 2006 - 13:35:53 CDT)
  • [ GLSA 200604-01 ] MediaWiki: Cross-site scripting vulnerability (Tue Apr 04 2006 - 07:03:00 CDT)
• Stefan Lochbihler
  • Neon Responder (Dos,Exploit) (Mon Apr 17 2006 - 11:03:00 CDT)
• stendus.ibm.com
  • Re: IBM (Tue Apr 11 2006 - 21:47:30 CDT)
• Steve VanDevender
  • Re: Flaw in commonly used bash random seed method (Wed Apr 05 2006 - 12:32:16 CDT)
• Steven M. Christey
  • Re: Recent Oracle exploit is _actually_ an 0day with no patch (Thu Apr 27 2006 - 17:54:12 CDT)
  • Re: Instant Photo Gallery <= Multiple XSS (Thu Apr 27 2006 - 17:00:59 CDT)
  • Re: Invision Vulnerabilities, including remote code execution (Wed Apr 26 2006 - 14:41:24 CDT)
  • Re: CuteNews 1.4.1 <= Cross Site Scripting (Thu Apr 20 2006 - 11:34:42 CDT)
  • Re: QuickBlogger v1.4 Cross-Site Scripting (Fri Apr 14 2006 - 17:01:21 CDT)
  • Re: Multiple vulnerabilities in Blur6ex (Wed Apr 12 2006 - 19:02:18 CDT)
  • Re: function *() php/apache Crash PHP 4.4.2 and 5.1.2 (Tue Apr 11 2006 - 19:29:37 CDT)
  • Re: FleXiBle Development Script Remote Command Exucetion And XSS Attacking (Wed Apr 05 2006 - 00:23:24 CDT)
  • Re: On product vulnerability history and vulnerability complexity (Tue Apr 04 2006 - 10:11:45 CDT)
  • Re: On product vulnerability history and vulnerability complexity (Mon Apr 03 2006 - 15:50:45 CDT)
  • Mis-diagnosed XSS bugs hiding worse issues due to PHP feature (Sat Apr 01 2006 - 02:11:34 CST)
• stormhackerhotmail.com
  • SimpleBBS v1.1(posts.php) remote command execution (Wed Apr 12 2006 - 18:28:20 CDT)
• Sune Kloppenborg Jeppesen
  • [ GLSA 200604-17 ] Ethereal: Multiple vulnerabilities in protocol dissectors (Thu Apr 27 2006 - 00:16:51 CDT)
  • [ GLSA 200604-15 ] xine-ui: Format string vulnerabilities (Wed Apr 26 2006 - 11:58:42 CDT)
  • [ GLSA 200604-16 ] xine-lib: Buffer overflow vulnerability (Wed Apr 26 2006 - 12:01:51 CDT)
  • [ GLSA 200604-13 ] fbida: Insecure temporary file creation (Sun Apr 23 2006 - 14:50:33 CDT)
  • [ GLSA 200604-14 ] Dia: Arbitrary code execution through XFig import (Sun Apr 23 2006 - 14:55:51 CDT)
  • [ GLSA 200604-10 ] zgv, xzgv: Heap overflow (Thu Apr 20 2006 - 23:45:15 CDT)
  • [ GLSA 200604-09 ] Cyrus-SASL: DIGEST-MD5 Pre-Authentication Denial of Service (Thu Apr 20 2006 - 23:41:24 CDT)
  • [ GLSA 200604-06 ] ClamAV: Multiple vulnerabilities (Fri Apr 07 2006 - 14:45:41 CDT)
  • [ GLSA 200604-04 ] Kaffeine: Buffer overflow (Wed Apr 05 2006 - 16:28:24 CDT)
• susam.palgmail.com
  • XSS Vulnerability in Guest-book script powered by Community Architect (Wed Apr 19 2006 - 10:08:36 CDT)
• susam_palyahoo.co.in
  • SQL Injection in incredibleindia.org (Sun Apr 16 2006 - 04:53:43 CDT)
• t4h4linuxmail.org
  • Phpwebgallery <= 1.4.1 SQL injection Vulnerability (Mon Apr 03 2006 - 09:07:26 CDT)
• telweirdtech.org
  • IE6 Crash (Fri Apr 07 2006 - 10:12:41 CDT)
• testx444hushmail.com
  • Fortinet28 box does not resist has small synflood! (Sun Apr 16 2006 - 16:51:31 CDT)
• the_dayecho.or.id
  • [ECHO_ADV_31$2006] Sws Web Server 0.1.7 Strcpy() & Syslog() Format String Vulnerability (Fri Apr 28 2006 - 02:22:33 CDT)
  • BL4's SMTP server BufferOverflow Vulnerable (Thu Apr 27 2006 - 03:24:25 CDT)
• theguywhocouldwipeyourphpBBhackersworlddomination.com
  • Re: Re: Re: phpBB 2.06 search.php SQL injection (Wed Mar 29 2006 - 12:28:24 CST)
• Theo de Raadt
  • Re: Strengthen OpenSSH security? (Thu Apr 20 2006 - 20:15:30 CDT)
• Thierry Carrez
  • [ GLSA 200604-18 ] Mozilla Suite: Multiple vulnerabilities (Fri Apr 28 2006 - 12:40:01 CDT)
  • [ GLSA 200604-12 ] Mozilla Firefox: Multiple vulnerabilities (Sun Apr 23 2006 - 14:41:41 CDT)
  • [ GLSA 200604-11 ] Crossfire server: Denial of Service and potential arbitrary code execution (Sat Apr 22 2006 - 15:12:30 CDT)
  • [ GLSA 200604-08 ] libapreq2: Denial of Service vulnerability (Mon Apr 17 2006 - 12:34:07 CDT)
  • [ GLSA 200604-07 ] Cacti: Multiple vulnerabilities in included ADOdb (Fri Apr 14 2006 - 15:33:24 CDT)
• Thierry Zoller
  • Re: [Full-disclosure] SEC Consult SA-20060314 :: Opera Browser CSS Attribute Integer Wrap / Buffer Overflow (Thu Apr 13 2006 - 11:42:36 CDT)
• Thomas Guyot-Sionnest
  • RE: recursive DNS servers DDoS as a growing DDoS problem (Tue Apr 04 2006 - 09:40:01 CDT)
• Thomas Hochstein
  • Re: redirection vuln crawlers breed & security through obscurity (Fri Apr 21 2006 - 04:54:44 CDT)
• Thor (Hammer of God)
  • Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup (Mon Apr 24 2006 - 11:15:50 CDT)
  • Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup (Thu Apr 20 2006 - 12:38:38 CDT)
  • Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup (Wed Apr 19 2006 - 22:54:46 CDT)
  • Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup (Wed Apr 19 2006 - 21:59:40 CDT)
  • Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup (Wed Apr 19 2006 - 17:22:32 CDT)
  • Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup (Wed Apr 19 2006 - 17:00:23 CDT)
  • Re: Re[3]: Bypassing ISA Server 2004 with IPv6 (Wed Apr 19 2006 - 23:22:29 CDT)
  • Re: Re[2]: Bypassing ISA Server 2004 with IPv6 (Sat Apr 15 2006 - 22:28:36 CDT)
  • Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup (Sat Apr 15 2006 - 13:39:18 CDT)
  • Re: Bypassing ISA Server 2004 with IPv6 (Sun Apr 09 2006 - 22:51:33 CDT)
  • Re: Bypassing ISA Server 2004 with IPv6 (Sun Apr 09 2006 - 17:44:51 CDT)
• Tim
  • Re: recursive DNS servers DDoS as a growing DDoS problem (Mon Apr 03 2006 - 21:54:19 CDT)
  • Re: recursive DNS servers DDoS as a growing DDoS problem (Tue Apr 04 2006 - 10:06:13 CDT)
• Tom Ferris
  • Re: Apple Mac OS X Safari 2.0.3 Vulnerability (Tue Apr 25 2006 - 11:22:58 CDT)
• tranceformercrimsonguard.net
  • Re: Re: NETGEAR WGT624 Wireless DSL router default user name/password vulnerability (Thu Apr 13 2006 - 13:52:16 CDT)
• uid0exploitercode.com
  • VWar <= 1.5.0 R12 Remote File Inclusion Exploit (Sun Apr 02 2006 - 05:13:03 CDT)
  • PHPNuke-Clan 3.0.1 Remote File Inclusion Exploit (Sat Apr 01 2006 - 15:26:22 CST)
  • SQuery <= 4.5 Remote File Inclusion Exploit (Sat Apr 01 2006 - 15:26:58 CST)
• Victor Brilon
  • Re: Vulnerabilities in MOD (Sat Apr 15 2006 - 12:37:19 CDT)
• visitbipinhotmail.com
  • NOD32 local privilege escalation vulnerability (Tue Apr 04 2006 - 14:27:20 CDT)
• Vladimir Levijev
  • Re: google xss (Wed Apr 12 2006 - 07:34:55 CDT)
• W3._hotmail.com
  • Xss In bMachine 2&#1643;7 (Sun Apr 16 2006 - 07:59:52 CDT)
  • Xss In ar-blog v 5.2 (Thu Apr 13 2006 - 14:57:25 CDT)
  • Xss In SaphpLesson3.0 (Fri Apr 07 2006 - 13:20:12 CDT)
• xconxfocus.org
  • Welcome to XCon2006 in China! (Wed Apr 05 2006 - 02:10:06 CDT)
• xx_hack_xx_2004hotmail.com
  • SQL Injection in Softbiz Image Gallery (Fri Mar 31 2006 - 15:13:29 CST)
• yamchomail.it
  • DbbS<=2.0-alpha Multiple Vulnerabilities (Sat Apr 15 2006 - 22:46:38 CDT)
• Yannick von Arx
  • (no subject) (Thu Apr 27 2006 - 08:27:22 CDT)
• zachofalltradessourceforge.net
  • Re: Multiple Vulnerabilities in LucidCMS (Tue Apr 18 2006 - 13:18:52 CDT)
• zdi-disclosures3com.com
  • ZDI-06-011: Mozilla Firefox Table Rebuilding Code Execution Vulnerability (Wed Apr 26 2006 - 00:00:11 CDT)
  • ZDI-06-009: Mozilla Firefox Tag Parsing Code Execution Vulnerability (Mon Apr 17 2006 - 11:46:40 CDT)
  • ZDI-06-010: Mozilla Firefox CSS Letter-Spacing Heap Overflow Vulnerability (Fri Apr 14 2006 - 20:02:40 CDT)
  • ZDI-06-008: Novell GroupWise Messenger Accept-Language Buffer Overflow (Thu Apr 13 2006 - 11:11:40 CDT)
  • ZDI-06-007: Microsoft Windows Address Book (WAB) File Format Parsing Vulnerability (Tue Apr 11 2006 - 12:53:05 CDT)

Last message date: Sat Apr 29 2006 - 16:22:53 CDT
Archived on: Sat Apr 29 2006 - 16:22:53 CDT

604 messages sorted by: [ date ] [ thread ] [ subject ]