655 messages sorted by: [ date ] [ thread ] [ subject ]

Starting: Tue Jun 06 2006 - 10:48:45 CDT
Ending: Fri Jun 30 2006 - 14:49:26 CDT

• 321_321mail.ru
  • Re: XSS in ICQ.com (Mon Jun 05 2006 - 11:27:34 CDT)
  • Re: XSS in ICQ.com (Mon Jun 05 2006 - 11:29:02 CDT)
  • Re: XSS in ICQ.com (Mon Jun 05 2006 - 11:30:58 CDT)
• 3APA3A
  • Re: Is Windows TCP/IP source routing PoC code available? (Tue Jun 27 2006 - 04:28:03 CDT)
  • Windows Software Restriction Policy Protection Bypass (Fri Jun 09 2006 - 03:05:18 CDT)
• 666hell.de.tk
  • APBoard 2.2-r3 <= SQL Injections (Wed Jun 14 2006 - 18:26:53 CDT)
  • ThWboard 3.0 <= SQL Injection (Sat Jun 10 2006 - 22:22:07 CDT)
• Aaron Klein
  • Re: phpBB2 (template.php) Remote File Inclusion (Mon Jun 05 2006 - 19:30:11 CDT)
• addmimistratorgmail.com
  • [KAPDA]http://myimei.com/security/2006-06-24/mybb104archive-modelight-parameter-extractionvarable-overwriting.html (Wed Jun 28 2006 - 01:50:59 CDT)
  • [KAPDA]MyBB 1.1.4~function_post.php~XSS Attack In URL tag (Wed Jun 28 2006 - 01:52:04 CDT)
  • [KAPDA]MyBB1.1.3~Option update for code buttons~Sql Injection Admin Access (Fri Jun 23 2006 - 12:03:50 CDT)
  • [KAPDA]MyBB1.1.3~Option update for code buttons~Sql Injection Admin Access (Thu Jun 22 2006 - 09:19:33 CDT)
  • [KAPDA]Coppermine 1.4.8~Parameter Cleanup System ByPass~Registering Global Varables (Fri Jun 23 2006 - 06:25:16 CDT)
  • [KAPDA::48]CopperminePhotoGallery1.4.8~ addhit() function~ SQLinjection attack (Sun Jun 11 2006 - 10:32:39 CDT)
• adminmajorsecurity.de
  • Undisclosed cross site scripting vulnerabilities in domaintools.com - requesting contacts (Sun Jun 25 2006 - 04:42:35 CDT)
  • [MajorSecurity #18] Ralf Image Gallery <=0.7.4 - Multiple XSS, Remote File Include and directory traversal vulnerabilities (Tue Jun 20 2006 - 09:32:16 CDT)
  • mp3.com - Cross site scripting vulnerability (Fri Jun 16 2006 - 07:56:48 CDT)
  • webcrawler.com - XSS vulnerability in search-engine (Tue Jun 13 2006 - 10:10:41 CDT)
  • Palm.com - XSS vulnerability (Tue Jun 13 2006 - 10:43:12 CDT)
  • Macworld.com - XSS vulnerability (Tue Jun 13 2006 - 10:37:44 CDT)
  • ISO.org - XSS vulnerability (Tue Jun 13 2006 - 10:51:50 CDT)
  • GreatDomains.com - XSS with cookie disclosure (Fri Jun 16 2006 - 13:59:26 CDT)
  • webcrawler.com - Cross site scripting vulnerability (Fri Jun 16 2006 - 13:02:55 CDT)
  • Netscape.com - Cross site scripting vulnerability (Fri Jun 16 2006 - 12:57:05 CDT)
  • [MajorSecurity #17] SixCMS <= 6 - Multiple XSS and directory traversal vulnerabilities (Mon Jun 12 2006 - 10:35:16 CDT)
  • Hotbot.com - XSS vulnerability in search engine (Sat Jun 10 2006 - 14:52:41 CDT)
  • Lycos.com - XSS vulnerability (Sat Jun 10 2006 - 14:11:21 CDT)
  • [MajorSecurity #12]ZMS<= 2.9 - XSS (Sat Jun 10 2006 - 10:50:34 CDT)
  • [MajorSecurity #14]CFXe-CMS <= 2.0 - XSS (Sat Jun 10 2006 - 13:32:37 CDT)
  • [MajorSecurity #13]Cabacos Web CMS<= 3.8 - XSS (Sat Jun 10 2006 - 11:08:38 CDT)
  • [MajorSecurity #11]OpenCMS<= 6.2.1 - XSS (Sat Jun 10 2006 - 09:21:41 CDT)
  • [MajorSecurity #10]i.List <= 1.5 - XSS (Thu Jun 08 2006 - 12:45:29 CDT)
  • Re: [MajorSecurity #8]DreamAccount <= 3.1 - Remote File Include Vulnerability (Tue Jun 06 2006 - 10:10:42 CDT)
• ahwazsetiran.com
  • 'Multiple Sql injection and XSS in integramod portal (Tue Jun 06 2006 - 14:13:48 CDT)
• aizu.ikmalgmail.com
  • Re: iFoto v0.20-06/06/06 (Mon Jun 12 2006 - 01:28:41 CDT)
• al4321gmail.com
  • Re: Re: Fire fox dos exploit (Sun Jun 04 2006 - 15:14:35 CDT)
• Alan J Rosenthal
  • Re: PHP security (or the lack thereof) (Mon Jun 19 2006 - 18:41:48 CDT)
• alberto
  • Re: IRM 019: MailMarshal 6.1 SMTP MTA Content Filter Bypass (Fri Jun 09 2006 - 02:29:25 CDT)
• Alexander Hristov
  • Windows Live Messenger 8.0 ( Contact List *.ctt ) Heap Overflow (Sun Jun 25 2006 - 06:42:22 CDT)
• Alexander Sotirov
  • Re: Digital Armaments July-August Hacking Challange: Microsoft (Wed Jun 21 2006 - 21:58:46 CDT)
• alijsbyahoo.com
  • qtofilemanager xss attack ! (Sun Jun 18 2006 - 02:58:04 CDT)
  • onedotoh xss atack (Sun Jun 18 2006 - 03:02:22 CDT)
• alp_erenayyildiz.org
  • Planetnews Authecnication Admin ByPass (Mon Jun 26 2006 - 08:18:39 CDT)
  • Simple PHP Poll Authecnication Admin ByPass (Fri Jun 16 2006 - 12:35:09 CDT)
  • Freeze Greetings Cards PWD.txt (Wed Jun 14 2006 - 02:56:43 CDT)
• aminraydenyahoo.com
  • igloo DoubleSpeak v 0.1 Multiple remote file inclusion (Sun Jun 11 2006 - 15:47:48 CDT)
• Amit Klein (AKsecurity)
  • RE: Bypassing of web filters by using ASCII (Fri Jun 23 2006 - 14:23:17 CDT)
  • Re: Bypassing of web filters by using ASCII (Fri Jun 23 2006 - 10:12:13 CDT)
  • Re: Bypassing of web filters by using ASCII (Thu Jun 22 2006 - 17:08:56 CDT)
  • Re: Bypassing of web filters by using ASCII (Thu Jun 22 2006 - 02:46:41 CDT)
  • Re: SSL VPNs and security (Fri Jun 09 2006 - 09:17:31 CDT)
• Andreas Marx
  • Re: Multiple Vendor NTFS Data Stream Malware Stealth Technique (Mon Jun 05 2006 - 15:47:04 CDT)
• Andrei Ponomarev
  • Re: Internet Explorer vulnerbility (Thu Jun 08 2006 - 23:00:25 CDT)
• Balazs Attila-Mihaly (Cd-MaN)
  • Re: Bypassing of web filters by using ASCII (Sat Jun 24 2006 - 13:57:39 CDT)
• Bastian Ahrens
  • Re: Opera 9 DoS PoC (Sat Jun 24 2006 - 04:43:28 CDT)
• Bill Stout
  • Browser bugs hit IE, Firefox today (SANS) (Thu Jun 29 2006 - 19:17:34 CDT)
• black code
  • multiple Xss exploits in 35mmslidegallery V6 (Tue Jun 13 2006 - 06:09:22 CDT)
  • Multiple file include exploits in Xtreme Downloads v.1.0 (Mon Jun 05 2006 - 16:10:44 CDT)
• blwoodskynet.be
  • CSRF in Nuked Klan 1.7 SP4.2 (Thu Jun 29 2006 - 03:14:53 CDT)
• Blyth A J C (Comp)
  • EC2ND - Call for Papers (Wed Jun 14 2006 - 06:01:39 CDT)
• Bojan Zdrnja
  • Re: PHP security (or the lack thereof) (Fri Jun 16 2006 - 18:06:03 CDT)
  • Re: [Full-disclosure] RealVNC 4.1.1 Remote Compromise (Tue Jun 06 2006 - 20:01:46 CDT)
• botanlinuxmail.org
  • PHP iCalendar Cross Site Scripting (Wed Jun 28 2006 - 13:14:42 CDT)
  • [Kurdish Security # 10 ] MF Piadas 1.0 Remote File Include Vulnerability (Tue Jun 27 2006 - 09:35:59 CDT)
  • [Kurdish Security # 11] SiteBar Cross-Site Scripting (Tue Jun 27 2006 - 10:09:08 CDT)
  • [Kurdish Security # 9] MyMail Directory Traversal And XSS Attacking Vulnerability (Mon Jun 26 2006 - 08:20:50 CDT)
  • [Kurdish Security # 8] DCP-Portal Remote File Include Vulnerability [Editor DHTML] (Tue Jun 13 2006 - 03:30:35 CDT)
• Breeeehhotmail.com
  • RahnemaCo Remote File Inclusion Exploit (Wed Jun 14 2006 - 04:00:17 CDT)
• brianphorum.org
  • Re: # MHG Security Team --- PHORUM 5.1.13 Remote File Inc. (Mon Jun 19 2006 - 17:20:51 CDT)
• Bruno Lustosa
  • Re: Opera 9 DoS PoC (Wed Jun 21 2006 - 12:21:08 CDT)
• bugsecuritynews.ir
  • Re: XSS in Cpanel 10 (Mon Jun 26 2006 - 18:09:36 CDT)
  • Claroline Cross-Site Scripting Vulnerabilities (Mon Jun 26 2006 - 11:03:34 CDT)
  • TikiWiki Sql injection & XSS Vulnerabilities (Tue Jun 13 2006 - 15:23:37 CDT)
• bugtraqfirewraith.co.uk
  • Mathcad Area Lock Vulnerability (Thu Jun 08 2006 - 11:53:07 CDT)
• bultensrlabs.net
  • JEdit ActiveX Control Information Disclosure vulnerability (Wed Jun 21 2006 - 03:25:30 CDT)
• BuNy-mhotmail.com
  • PHP-Nuke Download Module Remote SQL Injection (Fri Jun 09 2006 - 02:38:24 CDT)
• c0rruptf34r.us
  • Re: Secunia Research: PicoZip "zipinfo.dll" Multiple Archives BufferOverflow (Thu Jun 15 2006 - 19:06:32 CDT)
• c4nberxgmail.com
  • Joomla! 1.0 Remote File Inclusion (Sat Jun 10 2006 - 13:49:34 CDT)
• Charles Hamby
  • Janus Contact (Mon Jun 19 2006 - 17:50:44 CDT)
  • Re: RE: Internet Explorer vulnerbility (Mon Jun 12 2006 - 16:40:49 CDT)
• charliethehackersplace.org
  • GamePlay.co.uk XSS (Fri Jun 09 2006 - 19:57:52 CDT)
• Chris Rothecker
  • Re: flock d0s exploit remote. beta 1 (v0.7) (Fri Jun 23 2006 - 11:30:28 CDT)
• Chris Steipp
  • Multiple Vulnerabilities in PatchLink Update Server 6 (Wed Jun 28 2006 - 23:23:32 CDT)
• chrissplices.org
  • vbulletin.com Multiple XSS Vulnerabilities (Sat Jun 10 2006 - 15:48:22 CDT)
• Cisco Systems Product Security Incident Response Team
  • Cisco Security Advisory: Access Point Web-Browser Interface Vulnerability (Wed Jun 28 2006 - 12:00:00 CDT)
  • Cisco Security Advisory: Multiple Vulnerabilities in Wireless Control System (Wed Jun 28 2006 - 12:00:00 CDT)
• Claus Assmann
  • Re: Sendmail MIME DoS vulnerability (Sat Jun 24 2006 - 00:51:42 CDT)
• Clayton Kossmeyer
  • Re: Cisco Secure ACS Weak Session Management Vulnerability (Fri Jun 23 2006 - 18:45:40 CDT)
• co296aol.com
  • flock d0s exploit remote. beta 1 (v0.7) (Thu Jun 22 2006 - 19:27:07 CDT)
  • Vm ware 0day dos exploit by n00b. (Sun Jun 18 2006 - 08:02:01 CDT)
  • Ie opera dos exploit (Thu Jun 08 2006 - 05:06:08 CDT)
• contactvbulletin.com
  • Re: vbulletin.com Multiple XSS Vulnerabilities (Tue Jun 13 2006 - 09:12:04 CDT)
• Core Security Technologies advisories
  • CORE-2006-0330: Asterisk PBX truncated video frame vulnerability (Fri Jun 09 2006 - 15:33:28 CDT)
  • CORE-2006-0327: IAXclient truncated frames vulnerabilities (Fri Jun 09 2006 - 16:30:53 CDT)
• craigk5n.us
  • Re: WebCalendar-1.0.3 reading of any files (Wed Jun 07 2006 - 10:35:29 CDT)
• CrAzY.CrAcKeRhotmail.com
  • My smiles "browse.php" SQL Injection (Fri Jun 30 2006 - 11:39:56 CDT)
  • Module's Name "Classifieds" SQL Injection (Fri Jun 30 2006 - 11:37:34 CDT)
  • CDJ<<--V NITKID 2.0 "category.php" SQL Injection (Fri Jun 30 2006 - 11:31:28 CDT)
  • MyNewsGroups<<--v. 0.6 "tree.php" SQL Injection (Fri Jun 30 2006 - 11:26:02 CDT)
  • FreeHost "misc.php & news.php" SQL Injection (Fri Jun 30 2006 - 11:21:45 CDT)
  • AzDGDatingPlatinum<<--v1.1.0 "view.php" SQL Injection (Wed Jun 28 2006 - 14:06:44 CDT)
  • PHP-Nuke Module's Name Sections<<--V3 SQL Injection (Wed Jun 28 2006 - 05:38:49 CDT)
  • vCard PRO SQL Injection (Wed Jun 28 2006 - 10:38:07 CDT)
  • phpvillage "funshow.php" SQL Injection (Tue Jun 27 2006 - 09:59:48 CDT)
  • CrisoftRicette<<--1.0pre15b Remote File Inclusion (Tue Jun 27 2006 - 09:56:34 CDT)
  • WBB<<---v2.0 RC2 "newthread.php" SQL Injection (Thu Jun 22 2006 - 09:11:08 CDT)
  • WBB<<---v2.3.1"report.php" SQL Injection (Thu Jun 22 2006 - 08:57:28 CDT)
  • WBB<<---v1.2 "showmods.php" SQL Injection (Thu Jun 22 2006 - 09:07:27 CDT)
  • RahnemaCo "page.php" Remote File Inclusion[2] (Sat Jun 17 2006 - 03:34:22 CDT)
  • Module's Name Content<<--V1.0 SQL injection (Sat Jun 17 2006 - 03:25:40 CDT)
  • Module's Name Downloads <<--V 7 SQL injection (Sat Jun 17 2006 - 03:20:18 CDT)
  • vBulletin<<--v3.5.X "member.php" Cross Site Scripting (Tue Jun 20 2006 - 08:10:16 CDT)
  • SaphpLesson<<--1.1 "misc.php" SQL injection (Mon Jun 19 2006 - 07:30:39 CDT)
  • VBZooM <<--V1.00 "lng.php" SQL injection (Mon Jun 19 2006 - 07:23:40 CDT)
  • VBZooM <<--V1.11 "message.php" SQL injection (Mon Jun 19 2006 - 07:22:51 CDT)
  • VBZooM <<--V1.00 "rank.php" SQL injection (Mon Jun 19 2006 - 07:19:32 CDT)
  • dvdwolf SQL injection/XSS (Fri Jun 16 2006 - 09:16:33 CDT)
  • wbb<<--v 2.1.6 "profile.php" SQL injection (Wed Jun 14 2006 - 00:35:55 CDT)
  • wbb<<--v 2.2.1 "studienplatztausch.php" SQL injection (Wed Jun 14 2006 - 00:31:06 CDT)
  • wbb<<--v 2.2.2 "thread.php" SQL injection (Wed Jun 14 2006 - 00:26:00 CDT)
  • Web-CMS <<--1.0 "print.php" SQL injection (Mon Jun 12 2006 - 12:02:23 CDT)
  • VBZooM <<--V1.01 "language.php" SQL injection (Tue Jun 13 2006 - 01:40:09 CDT)
  • VBZooM <<--V1.11 "subject.php" SQL injection (Tue Jun 13 2006 - 01:51:41 CDT)
  • VBZooM <<--V1.02 "meaning.php" SQL injection (Tue Jun 13 2006 - 01:47:12 CDT)
  • VBZooM <<-- V1.11 "show.php" SQL injection (Tue Jun 13 2006 - 01:36:10 CDT)
  • Calendar Express 2 SQL injection (Wed Jun 07 2006 - 00:54:09 CDT)
  • Vice Stats 0.5b SQL injection (Wed Jun 07 2006 - 01:08:02 CDT)
• Crispin Cowan
  • Re: PHP security (or the lack thereof) (Fri Jun 23 2006 - 15:16:03 CDT)
  • Re: PHP security (or the lack thereof) (Wed Jun 21 2006 - 20:01:37 CDT)
• cxibsecurityreason.com
  • error_log() Safe Mode Bypass PHP 5.1.4 and 4.4.2 (Sun Jun 25 2006 - 18:11:34 CDT)
  • tempnam() Bypass unique file name PHP 5.1.4 (Sun Jun 11 2006 - 17:39:03 CDT)
• Daniel Hoffmann
  • Re: Ie opera dos exploit (Thu Jun 08 2006 - 18:38:43 CDT)
• Daniel Hulme
  • Re: PHP security (or the lack thereof) (Sat Jun 24 2006 - 03:28:00 CDT)
• darkfiref4kelive.zzn.com
  • Foing (manage_songs.php) Remote File Inclusion[phpBB] (Mon Jun 12 2006 - 07:43:08 CDT)
• Darren Bounds
  • Cisco Secure ACS Weak Session Management Vulnerability (Fri Jun 23 2006 - 08:18:51 CDT)
  • Trend Micro Control Manager (TMCM) Persistent XSS Vulnerability (Fri Jun 23 2006 - 08:17:05 CDT)
• Darren Clarke
  • Re: Opera 9 DoS PoC (Thu Jun 22 2006 - 04:36:15 CDT)
• Darren Reed
  • Re: PHP security (or the lack thereof) (Tue Jun 27 2006 - 05:27:59 CDT)
  • Re: PHP security (or the lack thereof) (Sat Jun 24 2006 - 17:42:39 CDT)
  • PHP security (or the lack thereof) (Fri Jun 16 2006 - 06:21:56 CDT)
• David Huecking
  • Re: Bypassing of web filters by using ASCII (Sun Jun 25 2006 - 10:42:07 CDT)
• db0
  • Mailenable SMTP Service DoS (Sat Jun 24 2006 - 11:22:03 CDT)
• dcrabhackerscenter.com
  • Amazon and Msn vulnerabilities (Fri Jun 23 2006 - 09:18:44 CDT)
• dhlayereddefense.com
  • Layered Defense Advisory: Format String Vuln in CA eTrust (Tue Jun 27 2006 - 19:24:31 CDT)
• diangemilanggmail.com
  • Re: DGbook v1.0 - XSS (Fri Jun 09 2006 - 08:12:26 CDT)
• Dinis Cruz
  • Re: [Full-disclosure] Windows Software Restriction Policy Protection Bypass (Fri Jun 09 2006 - 05:52:00 CDT)
• Dirk Mueller
  • [KDE Security Advisory] KDM symlink attack vulnerability (Wed Jun 14 2006 - 13:30:39 CDT)
• dzelekgmail.com
  • GlobeTrotter Mobility Manager - security issue (Fri Jun 23 2006 - 16:30:22 CDT)
• E Mintz
  • Re: SSL VPNs and security (Fri Jun 09 2006 - 01:36:19 CDT)
  • Re: SSL VPNs and security (Fri Jun 09 2006 - 01:19:28 CDT)
• ebd.soporteoasyssoft.com
  • Re: Several flaws in e-business designer (eBD) (Fri Jun 16 2006 - 03:32:07 CDT)
• eEye Advisories
  • [EEYEB-20060524] Symantec Remote Management Stack Buffer Overflow (Mon Jun 12 2006 - 17:25:03 CDT)
• egavriilsentinel.gr
  • Multiple Bypass and Integrity Lost Vulnerabilities (Tue Jun 20 2006 - 08:07:40 CDT)
• Eliah Kagan
  • Re: Vm ware 0day dos exploit by n00b. (Mon Jun 19 2006 - 22:32:01 CDT)
  • Re: Windows XP Task Scheduler Local Privilege Escalation (Advisory) (Mon Jun 12 2006 - 15:37:26 CDT)
• ellingersix.de
  • Re: [MajorSecurity #17] SixCMS <= 6 - Multiple XSS and directory traversal vulnerabilities (Mon Jun 19 2006 - 06:43:45 CDT)
• Eloy Paris
  • Re: SSL VPNs and security (Tue Jun 13 2006 - 18:11:13 CDT)
• embytemadlab.it
  • Re: Linux VNC evil client patch - BID 17978 (Sat Jun 24 2006 - 03:38:00 CDT)
  • Linux VNC evil client patch - BID 17978 (Fri Jun 23 2006 - 10:33:09 CDT)
• enjiseclab.tuwien.ac.at
  • QaTraq 6.5 RC: Multiple XSS Vulnerabilities (Fri Jun 23 2006 - 05:36:13 CDT)
• entrika_fsyahoo.com
  • WeBBoA Hosting Script SQL Injection (Sun Jun 18 2006 - 13:56:50 CDT)
  • Ashop Search Module SQL injection (Tue Jun 13 2006 - 11:48:55 CDT)
• Eric Furman
  • Re: Opera 9 DoS PoC (Sat Jun 24 2006 - 14:18:45 CDT)
• erneernealizm.com
  • # MHG Security Team --- PHPAskIt v2.0.1 Remote File Inc. (Mon Jun 12 2006 - 12:47:24 CDT)
  • # MHG Security Team --- PHORUM 5.1.13 Remote File Inc. (Sat Jun 10 2006 - 20:47:47 CDT)
• eufratogmail.com
  • Re: display.cgi (Wed Jun 21 2006 - 03:37:52 CDT)
  • Re: REMOTE FILE INCLUSION ( ALL ) (Wed Jun 14 2006 - 04:54:44 CDT)
  • [ECHO_ADV_33$2006] CMS Faethon 1.3.2 mainpath Remote File Inclusion (Fri Jun 16 2006 - 20:35:11 CDT)
• farhadkeyyahoo.com
  • [KAPDA::#47] - Snitz Forum <= 3.4.05 SQL-Injection Vulnerability (Sat Jun 10 2006 - 10:13:34 CDT)
• Federico Fazzi
  • Calendarix 0.7.20060401, SQL Injection Vulnerabilities (Thu Jun 15 2006 - 16:39:40 CDT)
  • HotPlugCMS 1.0, Cross-Site Scripting Vulnerabilities (Thu Jun 15 2006 - 13:36:55 CDT)
  • [FSA016] ISPConfig 2.2.3, File inclusion vulnerability (Wed Jun 14 2006 - 12:07:36 CDT)
  • PhpBlueDragon CMS 2.9.1, File inclusion vulnerability (Wed Jun 14 2006 - 11:27:54 CDT)
  • DCP-Portal 6.1.x, Remote command execution (Mon Jun 12 2006 - 02:38:49 CDT)
  • Content-Builder (CMS) 0.7.5, Remote command execution (Sun Jun 11 2006 - 16:44:35 CDT)
  • [FSA013] phpCMS 1.2.1pl2, Remote command execution (Mon Jun 12 2006 - 03:29:14 CDT)
  • sorry i wrong something, this is original AWF CMS 1.11 adv (Sun Jun 11 2006 - 15:38:51 CDT)
  • 0verkill 0.6, Remote integer overflow (Fri Jun 09 2006 - 08:02:20 CDT)
  • Docebo Lms 3.0.3, Remote command execution (Fri Jun 09 2006 - 00:31:46 CDT)
  • Docebo Kms 3.0.3, Remote command execution (Fri Jun 09 2006 - 00:11:19 CDT)
  • Docebo Core 3.0.3, Remote command execution (Thu Jun 08 2006 - 23:52:47 CDT)
  • Docebo CMS 3.0.3, Remote command execution (Thu Jun 08 2006 - 23:23:02 CDT)
  • Back-end = 0.7.2.1 (jpcache.php) Remote command execution (Wed Jun 07 2006 - 18:12:30 CDT)
  • cms-bandits 2.5, Remote command execution (Thu Jun 08 2006 - 04:09:54 CDT)
  • MiraksGalerie <= 2.62 Multiple Remote command execution (Wed Jun 07 2006 - 16:32:46 CDT)
  • MiraksGalerie <= 2.62 Multiple Remote command execution (Tue Jun 06 2006 - 22:08:44 CDT)
  • aWebNews <= 1.0 (login.php) Remote DocumentRoot file disclosure (Tue Jun 06 2006 - 16:49:37 CDT)
  • BloggIT <= 1.01 (admin.php) Arbitrary code execution (Tue Jun 06 2006 - 15:55:41 CDT)
• Fixer
  • Re: Bypassing of web filters by using ASCII (Wed Jun 21 2006 - 15:15:35 CDT)
  • XSS Vulnerability in Maximus SchoolMAX (Sun Jun 18 2006 - 03:56:30 CDT)
• FreeBSD Security Advisories
  • FreeBSD Security Advisory FreeBSD-SA-06:17.sendmail (Wed Jun 14 2006 - 11:17:22 CDT)
• Gadi Evron
  • Microsoft's Real Test with Vista is Vulnerabilities (Tue Jun 27 2006 - 06:45:20 CDT)
  • Taking Over Laptops by Fuzzing Wireless Drivers (Sun Jun 25 2006 - 07:23:11 CDT)
  • Amazon, MSN vulns and.. Yes, we know! Most sites have vulnerabilities (Fri Jun 23 2006 - 20:30:54 CDT)
  • Re: Sendmail MIME DoS vulnerability (Wed Jun 21 2006 - 13:32:00 CDT)
  • Re: Multiple Vendor NTFS Data Stream Malware Stealth Technique (Tue Jun 06 2006 - 16:28:26 CDT)
• gamr-14hotmail.com
  • file include exploits in nucleus 3.23 (Fri Jun 16 2006 - 12:01:28 CDT)
  • file include exploits in mcGuestbook 1.3 (Tue Jun 13 2006 - 09:05:51 CDT)
  • file include in Xtreme Downloads v.1.0 (Mon Jun 05 2006 - 15:59:10 CDT)
• Geo.
  • RE: PHP security (or the lack thereof) (Tue Jun 27 2006 - 06:53:44 CDT)
  • RE: PHP security (or the lack thereof) (Tue Jun 27 2006 - 06:41:29 CDT)
  • RE: PHP security (or the lack thereof) (Mon Jun 26 2006 - 11:06:42 CDT)
  • Re: PHP security (or the lack thereof) (Thu Jun 22 2006 - 18:02:24 CDT)
  • Re: PHP security (or the lack thereof) (Tue Jun 20 2006 - 05:02:23 CDT)
  • Re: PHP security (or the lack thereof) (Sat Jun 17 2006 - 13:06:10 CDT)
• giampaolo.mancinipolito.it
  • Re: Buffer-overflow and crash in Fenice OMS 1.10 (Wed Jun 07 2006 - 04:18:17 CDT)
• Glynn Clements
  • Re: PHP security (or the lack thereof) (Sat Jun 24 2006 - 07:43:57 CDT)
• gmdarkfiggmail.com
  • vuBB <= 0.2.1 [BFA] SQL Injection Exploit + Advisory link (Sun Jun 18 2006 - 09:16:42 CDT)
  • PhpMyFactures 1.0 Cross Site Scripting, SQL Injection, Full Path Disclosure and others (Sat Jun 10 2006 - 11:46:50 CDT)
  • CS-Forum <= 0.81 Cross Site Scripting, SQL Injection, Full Path Disclosure (Sun Jun 11 2006 - 12:30:37 CDT)
  • NPDS <= 5.10 Local Inclusion, XSS, Full path disclosure (Thu Jun 08 2006 - 04:18:50 CDT)
• GomoR
  • SinFP 2.00 - a major release with many new features (Thu Jun 15 2006 - 11:55:42 CDT)
• Greg Merideth (Forward Technology)
  • RE: Internet Explorer vulnerbility (Thu Jun 08 2006 - 19:21:34 CDT)
• guest01gmail.com
  • HotPlugCMS_1.0 - SQL Injection Vulnerability (Thu Jun 15 2006 - 06:31:59 CDT)
• Hayden Searle
  • Re: IRM 019: MailMarshal 6.1 SMTP MTA Content Filter Bypass (Wed Jun 07 2006 - 21:14:55 CDT)
• Henrik Stoerner
  • Hobbit monitor: Security issue with Hobbit 4.2-beta client (Fri Jun 30 2006 - 11:47:25 CDT)
• Hernan Ochoa
  • Universal Hooker - Tool release (Mon Jun 26 2006 - 11:35:34 CDT)
• Hessamxhessamx.net
  • DeluxeBB 1.07 Create admin Exploit (Sun Jun 25 2006 - 13:19:51 CDT)
  • TinyPHP forum <= 3.6 Remote Command Execution Exploit (Tue Jun 06 2006 - 02:20:15 CDT)
• Hubert Seiwert
  • Re: Bypassing of web filters by using ASCII (Mon Jun 26 2006 - 12:56:31 CDT)
  • Re: Bypassing of web filters by using ASCII (Thu Jun 22 2006 - 09:57:58 CDT)
• infodigitalarmaments.com
  • Digital Armaments Security Advisory 29.06.2006: Siemens Speedstream Wireless Router Password Protection Bypass Vulnerability (Thu Jun 29 2006 - 05:13:04 CDT)
  • Digital Armaments July-August Hacking Challange: Microsoft (Tue Jun 20 2006 - 09:50:31 CDT)
• ip.chatyahoo.com
  • bug on showwich.asp (Wed Jun 07 2006 - 01:31:57 CDT)
• irc0d3ryahoo.com
  • RCblog 1.03 Directory Traversal [index.php] (Sun Jun 11 2006 - 09:53:14 CDT)
• IRM Advisories
  • IRM 019: MailMarshal 6.1 SMTP MTA Content Filter Bypass (Tue Jun 06 2006 - 04:09:45 CDT)
• Jain, Siddhartha
  • RE: MS Excel Remote Code Execution POC Exploit (Thu Jun 22 2006 - 15:24:28 CDT)
  • Sendmail MIME DoS vulnerability (Tue Jun 20 2006 - 17:57:32 CDT)
• James C. Slora Jr.
  • RE: Bypassing of web filters by using ASCII (Mon Jun 26 2006 - 14:31:58 CDT)
  • RE: Bypassing of web filters by using ASCII (Fri Jun 23 2006 - 06:55:52 CDT)
• Jaroslaw Sajko
  • RE: Fire fox dos exploit (Wed Jun 07 2006 - 05:43:34 CDT)
• Javier Olascoaga
  • Proof of concept: mybb 1.1.2 remote code execution (Tue Jun 13 2006 - 08:41:41 CDT)
• Jeff Moss
  • Black Hat Speakers + 2005 Content on-line (Tue Jun 13 2006 - 18:29:00 CDT)
• Jelmer Kuperus
  • WinSCP - URI Handler Command Switch Parsing (Fri Mar 10 2006 - 14:25:00 CST)
• Jessica Hope
  • Re: PHP security (or the lack thereof) (Sat Jun 17 2006 - 12:08:50 CDT)
  • Re: phpBB2 (template.php) Remote File Inclusion (Mon Jun 05 2006 - 16:05:43 CDT)
• Jim Short
  • Novell Security Announcement NOVELL-SA:2006:001 (Thu Jun 29 2006 - 12:18:47 CDT)
• jnhz6.de
  • Re: PHP Advanced Transfer Manager Download users password hashes (Tue Jun 13 2006 - 08:26:15 CDT)
• John Cobb
  • [NOBYTES.COM: #12] ViArt Shop v2.5.5 - XSS Vulnerability (Wed Jun 07 2006 - 16:08:51 CDT)
• john mullee
  • Re: PHP security (or the lack thereof) (Thu Jun 22 2006 - 07:15:12 CDT)
• Jose Nazario
  • Re: PHP security (or the lack thereof) (Fri Jun 16 2006 - 20:50:37 CDT)
• Jose Nicolas Castellano
  • Call For Papers - No cON Name 2006 Edition Spain (Sun Jun 11 2006 - 15:41:31 CDT)
• Jose Ramirez
  • Re: [Full-disclosure] RealVNC 4.1.1 Remote Compromise (Wed Jun 07 2006 - 13:07:47 CDT)
• Juha-Matti Laurio
  • ISC: Firefox immune to outerHTML flaw in MSIE [Was: Browser bugs hit IE, Firefox] (Fri Jun 30 2006 - 10:42:38 CDT)
  • Re: [Full-disclosure] Browser bugs hit IE, Firefox today (SANS) (Thu Jun 29 2006 - 20:07:38 CDT)
  • Re: Re: MS Excel Remote Code Execution POC Exploit (Fri Jun 23 2006 - 11:53:48 CDT)
  • Excel 0-day FAQ updated with Microsoft advisory information (Tue Jun 20 2006 - 19:36:58 CDT)
  • Microsoft Excel 0-day Vulnerability FAQ document written (Sun Jun 18 2006 - 05:43:57 CDT)
• Justin M. Forbes
  • rPSA-2006-0120-1 gnupg (Thu Jun 29 2006 - 16:32:38 CDT)
  • rPSA-2006-0116-1 mutt (Thu Jun 29 2006 - 11:06:31 CDT)
  • rPSA-2006-0110-1 kernel (Fri Jun 23 2006 - 12:55:49 CDT)
  • rPSA-2006-0105-1 arts (Thu Jun 15 2006 - 14:01:00 CDT)
  • rPSA-2006-0106-1 kdebase (Thu Jun 15 2006 - 14:01:16 CDT)
  • rPSA-2006-0100-1 freetype (Mon Jun 12 2006 - 13:11:00 CDT)
  • rPSA-2006-0099-1 openldap openldap-clients openldap-servers (Fri Jun 09 2006 - 15:54:51 CDT)
  • rPSA-2006-0098-1 gdm (Thu Jun 08 2006 - 09:43:30 CDT)
  • rPSA-2006-0096-1 spamassassin (Wed Jun 07 2006 - 13:07:50 CDT)
• K F (lists)
  • DMA[2006-0628a] - 'Apple OSX launchd unformatted syslog() vulnerability' (Wed Jun 28 2006 - 21:47:50 CDT)
• k.huwigiku-ag.de
  • Bypassing of web filters by using ASCII (Wed Jun 21 2006 - 08:11:18 CDT)
• Kanatoko
  • MySQL DoS (Wed Jun 14 2006 - 12:24:15 CDT)
• KARKOR23hotmail.com
  • smartsite cms v1.0 Remote File include (Tue Jun 27 2006 - 18:00:17 CDT)
  • DREAMACCOUNT V3.1 Remote Command Execution Exploit (Fri Jun 23 2006 - 10:05:11 CDT)
  • vbzoom V1.11 forum.php SQL Injection Vulnerabilities (Fri Jun 16 2006 - 06:06:42 CDT)
  • Indexu v 5.0.01 Multiple Remote File Include Vulnerabilities (Fri Jun 16 2006 - 05:30:11 CDT)
• Kenneth F. Belva
  • Presentation: AT&T ISNN - "Case Studies in Finding Previously Unknown Vulnerabilities in Web Applications." (Tue Jun 27 2006 - 19:01:47 CDT)
• kepchemsn.com
  • Invision Power Board XSS (Fri Jun 09 2006 - 16:02:58 CDT)
• Kevin Berkane
  • internet explorer vulnerability based on MarjinZ & Mr.Niega discovered (Thu Jun 08 2006 - 15:15:43 CDT)
• kicktd
  • Re: PHP security (or the lack thereof) (Mon Jun 19 2006 - 23:54:31 CDT)
• kr4chweb.de
  • Confixx <= 3 (Wed Jun 14 2006 - 14:45:10 CDT)
  • Confixx <= 3 (Wed Jun 14 2006 - 10:36:58 CDT)
• krustevsgmail.com
  • Re: Calendar ( Provided by Codewalkers ) - SQL Injection (Tue Jun 27 2006 - 14:48:38 CDT)
• Kurt Huwig
  • Re: Bypassing of web filters by using ASCII (Thu Jun 22 2006 - 04:44:59 CDT)
  • Re: Bypassing of web filters by using ASCII (Wed Jun 21 2006 - 19:34:37 CDT)
  • Re: Bypassing of web filters by using ASCII (Wed Jun 21 2006 - 18:23:20 CDT)
• Kurt Seifried
  • Re: [Full-disclosure] RealVNC 4.1.1 Remote Compromise (Mon Jun 05 2006 - 18:33:29 CDT)
• labs-no-reply
  • iDefense Security Advisory 06.13.06: Windows Media Player PNG Chunk Decoding Stack-Based Buffer Overflow (Tue Jun 13 2006 - 13:05:37 CDT)
  • iDefense Security Advisory 06.13.06: Windows MRXSMB.SYS MrxSmbCscIoctlCloseForCopyChunk DoS (Tue Jun 13 2006 - 13:06:43 CDT)
  • iDefense Security Advisory 06.13.06: Microsoft Internet Explorer ART File Heap Corruption Vulnerability (Tue Jun 13 2006 - 13:06:12 CDT)
  • iDefense Security Advisory 06.13.06: Windows MRXSMB.SYS MRxSmbCscIoctlOpenForCopyChunk Overflow (Tue Jun 13 2006 - 13:07:08 CDT)
• Larry Seltzer
  • RE: [funsec] Microsoft's Real Test with Vista is Vulnerabilities (Wed Jun 28 2006 - 05:00:45 CDT)
• Laurent
  • Re: Opera 9 DoS PoC (Fri Jun 23 2006 - 23:12:41 CDT)
• liam.romanisuk.fujitsu.com
  • Cisco Secure ACS Cross Site Scripting Vulnerability. (Thu Jun 15 2006 - 12:02:51 CDT)
• liz0bsdmail.com
  • Eduha Meeting php shell upload Vulnerabilities (Sat Jun 17 2006 - 15:04:33 CDT)
  • Easy CMS 0.1.2 Php Shell Upload Vulnerabilities (Sun Jun 18 2006 - 10:41:37 CDT)
  • Cline Communications Sql injection (Sat Jun 17 2006 - 08:16:04 CDT)
• Luigi Auriemma
  • Re: Files and cvars overwriting in Quake 3 engine (1.32c / rev 803 / ...) (Wed Jun 28 2006 - 12:39:03 CDT)
  • Files and cvars overwriting in Quake 3 engine (1.32c / rev 803 / ...) (Tue Jun 27 2006 - 14:33:12 CDT)
• lunyyoufucktard.com
  • ezWaiter v3.0 - XSS (Thu Jun 29 2006 - 22:14:08 CDT)
  • PHPClassifieds General (Wed Jun 28 2006 - 15:43:04 CDT)
  • Usenet Script v0.5 (Sun Jun 25 2006 - 12:18:22 CDT)
  • Winged Gallery v1.0 (Sat Jun 24 2006 - 15:30:41 CDT)
  • Dating biz<img src="/imgs/at.gif" border=0 align=middle> dating script v1.0 - XSS (Thu Jun 22 2006 - 18:13:20 CDT)
  • Somechess v1.5 rc1 - XSS (Tue Jun 20 2006 - 16:19:44 CDT)
  • cjGuestbook v1.3 - XSS (Tue Jun 20 2006 - 15:36:54 CDT)
  • V3Chat Instant Messenger - XSS (Sat Jun 17 2006 - 17:01:52 CDT)
  • Dragons Kingdom v1.0 - XSS & cookie disclosure (Sun Jun 18 2006 - 17:58:54 CDT)
  • MPCS v0.2 - XSS (Sat Jun 17 2006 - 15:00:46 CDT)
  • Technorati.com - XSS with cookie disclosure (Wed Jun 14 2006 - 03:52:30 CDT)
  • 43things.com - XSS with cookie disclosure (Wed Jun 14 2006 - 03:51:14 CDT)
  • Blogspot.com - XSS with cookie disclosure (Wed Jun 14 2006 - 03:50:05 CDT)
  • Biblenet.net - XSS (Thu Jun 15 2006 - 05:22:00 CDT)
  • B3ta.com - XSS with cookie disclosure (Thu Jun 15 2006 - 01:54:18 CDT)
  • Facetherating.com - XSS & session disclosure (Tue Jun 13 2006 - 04:18:35 CDT)
  • Ratemylook.co.uk - XSS with session disclosure (Tue Jun 13 2006 - 05:01:02 CDT)
  • About.com - XSS with cookie disclosure (Tue Jun 13 2006 - 01:36:49 CDT)
  • Ratescene.co.uk - XSS with session disclosure (Tue Jun 13 2006 - 05:26:49 CDT)
  • Cybersocieties.com - XSS & cookie disclosure (Mon Jun 12 2006 - 17:30:39 CDT)
  • Windowsitpro.com - XSS with cookie disclosure (Mon Jun 12 2006 - 23:51:36 CDT)
  • Hotscripts.com - XSS with cookie disclosure (Mon Jun 12 2006 - 15:31:47 CDT)
  • hi5.com - XSS with cookie disclosure (Tue Jun 13 2006 - 03:20:29 CDT)
  • Apnaspace.com - XSS with cookie disclosure (Mon Jun 12 2006 - 18:28:28 CDT)
  • Dealgates.com - XSS with cookie disclosure (Sat Jun 17 2006 - 04:43:16 CDT)
  • Housecarers.com - XSS & cookie disclosure (Fri Jun 16 2006 - 23:18:27 CDT)
  • Bingbox.com - XSS & cookie disclosure (Fri Jun 16 2006 - 01:37:39 CDT)
  • Youtube.com - XSS & cookie disclosure (Fri Jun 16 2006 - 04:03:49 CDT)
  • Blacksingles.com - XSS & cookie disclosure (Thu Jun 15 2006 - 17:42:07 CDT)
  • Carspace.com - XSS with cookie disclosure (Thu Jun 15 2006 - 14:55:03 CDT)
  • Chatizens.com - XSS with cookie disclosure (Thu Jun 15 2006 - 19:08:13 CDT)
  • Boardhost.com - XSS (Thu Jun 15 2006 - 17:04:41 CDT)
  • MP3 Search/Archive v1.2 - XSS (Thu Jun 15 2006 - 02:18:02 CDT)
  • ePrayver v.Alpha - XSS (Wed Jun 14 2006 - 16:36:55 CDT)
  • Emllabs.com - XSS (Fri Jun 09 2006 - 01:41:13 CDT)
  • Blackplanet.com - XSS & cookie disclosure vuln. (Sun Jun 11 2006 - 17:45:31 CDT)
  • Yourfacesucks.com - XSS & cookie disclosure (Mon Jun 12 2006 - 04:48:37 CDT)
  • Onlinenode.com - XSS (Sat Jun 10 2006 - 19:11:54 CDT)
  • Meefo.com - XSS with cookie include (Sat Jun 10 2006 - 16:38:05 CDT)
  • Vampirefreaks.com - XSS with cookie disclosure (Sun Jun 11 2006 - 05:20:49 CDT)
  • Flork.com (Sat Jun 10 2006 - 15:49:42 CDT)
  • Virtualtourist.com - XSS with cookie disclosure (Mon Jun 12 2006 - 03:55:56 CDT)
  • Stargazer.org - XSS with Session output (Sun Jun 11 2006 - 04:07:01 CDT)
  • cescripts.com - XSS (Sun Jun 11 2006 - 16:03:35 CDT)
  • Nowtalking.com - XSS (Sat Jun 10 2006 - 17:55:33 CDT)
  • Wireclub.com - XSS & cookie disclosure (Mon Jun 12 2006 - 00:00:54 CDT)
  • Opengaia.com - XSS Vuln & Session Include (Sun Jun 11 2006 - 00:51:38 CDT)
  • Myscrapbook v3.1 - XSS (Sun Jun 11 2006 - 01:43:43 CDT)
  • Wanderlist.com - XSS vuln with sessions disclosure (Sun Jun 11 2006 - 18:50:42 CDT)
  • 5 Star Review - review-script.com - XSS w/ cookie output (Sun Jun 11 2006 - 16:45:34 CDT)
  • Mydeardiary.com - XSS (Mon Jun 12 2006 - 02:31:38 CDT)
  • Diaryland.com - XSS (Mon Jun 12 2006 - 01:55:55 CDT)
  • Tempinbox.com (Sat Jun 10 2006 - 02:54:36 CDT)
  • AsianXO.com - XSS with cookie data include (Sat Jun 10 2006 - 04:00:23 CDT)
  • fx-APP Version 0.0.8.1 (Sat Jun 10 2006 - 02:28:52 CDT)
  • Ringlink v3.2 - XSS (Sat Jun 10 2006 - 01:11:13 CDT)
  • ST AdManager Lite v1 (Fri Jun 09 2006 - 05:32:33 CDT)
  • P.A.I.D v2.2 (Fri Jun 09 2006 - 05:05:05 CDT)
  • TinyMuw v1.0 - XSS (Fri Jun 09 2006 - 02:35:53 CDT)
  • MobeSpace v2.0 - XSS (Fri Jun 09 2006 - 00:29:07 CDT)
  • mole.com.ua Ticket Booking Script - XSS (Fri Jun 09 2006 - 00:04:04 CDT)
  • mole.com.ua Booking Script (Thu Jun 08 2006 - 23:52:11 CDT)
  • phazizGuestbook v2.0 - XSS (Thu Jun 08 2006 - 16:49:05 CDT)
  • iFoto v0.20-06/06/06 (Thu Jun 08 2006 - 16:31:39 CDT)
  • okscripts.com - XSS Vulns (Thu Jun 08 2006 - 16:05:04 CDT)
  • Ez Ringtone Manager from scriptez.net - XSS (Wed Jun 07 2006 - 19:49:10 CDT)
  • E-Dating System from scriptsez.net - XSS (Wed Jun 07 2006 - 18:18:35 CDT)
  • Easy Ad-Manager (Wed Jun 07 2006 - 19:29:52 CDT)
  • Chemical Directory - XSS (Wed Jun 07 2006 - 19:21:43 CDT)
  • Babykatmedia.com scripts - vSCAL & vREAL - XSS Vulns (Wed Jun 07 2006 - 18:35:59 CDT)
  • PBL Guestbook v1.31 - XSS (Wed Jun 07 2006 - 15:13:25 CDT)
  • GANTTy v1.0.3 (Mon Jun 05 2006 - 22:42:59 CDT)
  • ParticleSoft Wiki v1.0.2 (Mon Jun 05 2006 - 19:27:40 CDT)
  • ParticleSoft Whois v1.0.3 (Mon Jun 05 2006 - 19:12:45 CDT)
  • Partial Links v1.2.2 (Mon Jun 05 2006 - 19:01:17 CDT)
  • Particle Gallery v1.0.0 (Mon Jun 05 2006 - 18:37:01 CDT)
• lunyyoufucktard/com.securityfocus.com
  • Facerave.com - XSS & sessions disclosure (Mon Jun 12 2006 - 22:10:39 CDT)
• mac68kgmail.com
  • [Kil13r-SA-20060701-3] Massting Cross-Site Scripting Vulnerability (Fri Jun 30 2006 - 10:28:17 CDT)
  • [Kil13r-SA-20060701-2] MoniWiki 1.1.1 Cross-Site Scripting Vulnerability (Fri Jun 30 2006 - 10:27:31 CDT)
  • [Kil13r-SA-20060701-1] Ahnlab Search Cross-Site Scripting Vulnerability (Fri Jun 30 2006 - 10:26:38 CDT)
  • [Kil13r-SA-20060628] Hanaro Search Cross-Site Scripting Vulnerability (Tue Jun 27 2006 - 14:03:30 CDT)
  • [Kil13r-SA-20060622-2] Namo DeepSearch 4.5 Cross-Site Scripting Vulnerability (Thu Jun 22 2006 - 02:20:33 CDT)
  • [Kil13r-SA-20060622-1] NetSoft SmartNet 2.0 Cross-Site Scripting Vulnerability (Thu Jun 22 2006 - 02:19:58 CDT)
  • [Kil13r-SA-20060609-3] DreamWiz Search Cross-Site Scripting Vulnerability (Fri Jun 09 2006 - 12:58:10 CDT)
  • [Kil13r-SA-20060609-2] DaNaWa Search Cross-Site Scripting Vulnerability (Fri Jun 09 2006 - 12:57:06 CDT)
  • [Kil13r-SA-20060609-1] Daum Search Cross-Site Scripting Vulnerability (Fri Jun 09 2006 - 12:55:50 CDT)
• mantasjadzeviciusvecro.lt
  • bug of script injection in shoutcast servers (Thu Jun 08 2006 - 08:29:11 CDT)
• Marc Deslauriers
  • [FLSA-2006:189137-2] Updated firefox package fixes security issues (Tue Jun 06 2006 - 18:31:39 CDT)
  • [FLSA-2006:190884] Updated squirrelmail package fixes security issues (Tue Jun 06 2006 - 18:33:09 CDT)
  • [FLSA-2006:190941] Updated ipsec-tools package fixes security issue (Tue Jun 06 2006 - 18:33:52 CDT)
  • [FLSA-2006:190777] Updated X.org packages fix security issue (Tue Jun 06 2006 - 18:32:28 CDT)
  • [FLSA-2006:189137-1] Updated mozilla packages fix security issues (Tue Jun 06 2006 - 18:30:44 CDT)
• Marc MERLIN
  • Re: [MajorSecurity #18] Ralf Image Gallery <=0.7.4 - Multiple XSS, Remote File Include and directory traversal vulnerabilities (Tue Jun 27 2006 - 10:34:39 CDT)
• marcmarclaporte.com
  • Tikiwiki 1.9.3.2 security release (Wed Jun 07 2006 - 20:58:29 CDT)
• Martin Herfurt
  • trifinite Security Advisory: Buffer Overrun in Toshiba Bluetooth Stack for Windows (Tue Jun 20 2006 - 02:47:03 CDT)
• Martin Pitt
  • [USN-307-1] mutt vulnerability (Wed Jun 28 2006 - 07:44:44 CDT)
  • [USN-305-1] OpenLDAP vulnerability (Tue Jun 27 2006 - 05:53:59 CDT)
  • [USN-306-1] MySQL 4.1 vulnerability (Tue Jun 27 2006 - 08:52:48 CDT)
  • [USN-304-1] gnupg vulnerability (Mon Jun 26 2006 - 10:57:53 CDT)
  • [USN-303-1] MySQL vulnerability (Fri Jun 16 2006 - 10:12:59 CDT)
  • [USN-297-2] Thunderbird extensions update for recent security update (Thu Jun 15 2006 - 09:29:52 CDT)
  • [USN-300-1] wv2 vulnerability (Wed Jun 14 2006 - 14:18:04 CDT)
  • [USN-301-1] kdm vulnerability (Wed Jun 14 2006 - 14:18:07 CDT)
  • [USN-299-1] dhcdbd vulnerability (Wed Jun 14 2006 - 03:46:45 CDT)
  • [USN-288-4] dovecot regression fix (Wed Jun 14 2006 - 03:46:12 CDT)
  • [USN-298-1] libgd2 vulnerability (Wed Jun 14 2006 - 03:46:32 CDT)
  • [USN-297-1] Thunderbird vulnerabilities (Wed Jun 14 2006 - 03:45:48 CDT)
  • [USN-296-1] firefox vulnerabilities (Fri Jun 09 2006 - 08:13:38 CDT)
  • [USN-288-2] PostgreSQL server/client vulnerabilities (Fri Jun 09 2006 - 02:51:13 CDT)
  • [USN-288-3] PostgreSQL client vulnerabilities (Fri Jun 09 2006 - 05:46:38 CDT)
  • [USN-293-1] gdm vulnerability (Fri Jun 09 2006 - 05:46:30 CDT)
  • [USN-292-1] binutils vulnerability (Fri Jun 09 2006 - 05:46:35 CDT)
  • [USN-294-1] courier vulnerability (Fri Jun 09 2006 - 05:46:40 CDT)
  • [USN-295-1] xine-lib vulnerability (Fri Jun 09 2006 - 05:46:43 CDT)
  • [USN-291-1] FreeType vulnerabilities (Thu Jun 08 2006 - 09:33:03 CDT)
  • [USN-289-1] tiff vulnerabilities (Thu Jun 08 2006 - 06:56:45 CDT)
• Martin Schulze
  • [SECURITY] [DSA 1104-1] New OpenOffice.org packages fix several vulnerabilities (Thu Jun 29 2006 - 22:39:48 CDT)
  • [SECURITY] [DSA 1101-1] New courier packages fix denial of service (Fri Jun 23 2006 - 00:28:30 CDT)
  • [SECURITY] [DSA 1100-1] New wv2 packages fix integer overflow (Thu Jun 15 2006 - 00:46:32 CDT)
  • [SECURITY] [DSA 1096-1] New webcalendar packages fix arbitrary code execution (Tue Jun 13 2006 - 00:39:00 CDT)
  • [SECURITY] [DSA 1095-1] New freetype packages fix several vulnerabilities (Sat Jun 10 2006 - 00:22:33 CDT)
  • [SECURITY] [DSA 1092-1] New MySQL 4.1 packages fix SQL injection (Thu Jun 08 2006 - 08:49:58 CDT)
  • [SECURITY] [DSA 1091-1] New TIFF packages fix arbitrary code execution (Thu Jun 08 2006 - 05:13:20 CDT)
  • [SECURITY] [DSA 1093-1] New xine-ui packages fix denial of service (Thu Jun 08 2006 - 12:17:14 CDT)
  • [SECURITY] [DSA 1090-1] New spamassassin packages fix remote command execution (Tue Jun 06 2006 - 04:17:42 CDT)
• Matt Riddell (IT)
  • Asterisk 1.2.9 and Asterisk 1.0.11 Released - Security Fix (Tue Jun 06 2006 - 03:51:32 CDT)
• Matthias Kestenholz
  • Re: PHP security (or the lack thereof) (Mon Jun 26 2006 - 12:32:55 CDT)
• mbrookskliconsulting.com
  • ULtimate PHP Board <= 1.96 GOLD Code Execution (exploit code) (Tue Jun 20 2006 - 15:57:10 CDT)
• Michael N. Telnov
  • Re: Internet Explorer vulnerbility (Thu Jun 08 2006 - 15:33:34 CDT)
• Michael Scheidell
  • RE: Dell Openmanage CD Vulnerability (Fri Jun 09 2006 - 18:37:20 CDT)
• Michal Zalewski
  • Re: SSL VPNs and security (Mon Jun 12 2006 - 23:40:37 CDT)
  • Re: SSL VPNs and security (Fri Jun 09 2006 - 01:31:51 CDT)
  • SSL VPNs and security (Thu Jun 08 2006 - 15:48:18 CDT)
• minswins21.com
  • Zeroboard File Upload & extension bypass Vulnerability (Thu Jun 15 2006 - 21:55:07 CDT)
• mopeygoffgmail.com
  • Re: phpBannerExchange 2.0 Directory Traversal Vulnerability (Thu Jun 08 2006 - 11:28:45 CDT)
• Moritz Muehlenhoff
  • [SECURITY] [DSA 1103-1] New Linux kernel 2.6.8 packages fix several vulnerabilities (Tue Jun 27 2006 - 00:00:01 CDT)
  • [SECURITY] [DSA 1099-1] New horde2 packages fix cross-site scripting (Wed Jun 14 2006 - 15:08:03 CDT)
  • [SECURITY] [DSA 1098-1] New horde3 packages fix cross-site scripting (Wed Jun 14 2006 - 15:00:08 CDT)
  • [SECURITY] [DSA 1097-1] New Kernel 2.4.27 packages fix several vulnerabilities (Wed Jun 14 2006 - 12:55:23 CDT)
  • [SECURITY] [DSA 1094-1] New gforge packages fix cross-site scripting (Thu Jun 08 2006 - 15:20:18 CDT)
• mozillaids-guide.de
  • ERNW Security Advisory 01/2006 (Mon Jun 26 2006 - 08:07:26 CDT)
• Mr.Niegagmail.com
  • Msie 7.0 beta Crash (Thu Jun 29 2006 - 16:36:43 CDT)
  • Internet Explorer vulnerbility (Thu Jun 08 2006 - 14:00:49 CDT)
• Mrten
  • Re: PHP security (or the lack thereof) (Mon Jun 26 2006 - 14:37:08 CDT)
• N9critical.lt
  • Opera 9 DoS PoC (Tue Jun 20 2006 - 22:39:09 CDT)
• nabiyhotmail.com
  • Re: Re: PHP security (or the lack thereof) (Mon Jun 26 2006 - 20:19:40 CDT)
  • Re: Re: PHP security (or the lack thereof) (Wed Jun 21 2006 - 18:52:47 CDT)
• nanoymastergmail.com
  • VampireFreaks journal XSS (Mon Jun 12 2006 - 18:57:58 CDT)
  • animesuki XSS (Mon Jun 12 2006 - 16:24:49 CDT)
  • XSS in GardenWeb (Mon Jun 12 2006 - 15:46:54 CDT)
• Nathaniel Hasenfus
  • Re: Ie opera dos exploit (Tue Jun 13 2006 - 12:07:54 CDT)
• naveed
  • Re: MS Excel Remote Code Execution POC Exploit (Fri Jun 23 2006 - 13:16:32 CDT)
  • Re: MS Excel Remote Code Execution POC Exploit (Thu Jun 22 2006 - 15:43:47 CDT)
  • MS Excel Remote Code Execution POC Exploit (Wed Jun 21 2006 - 23:42:25 CDT)
• Neil Neely
  • Re: PHP security (or the lack thereof) (Mon Jun 19 2006 - 12:07:33 CDT)
• newssecurityopensource.org.br
  • ADVISORY - D-Link Wireless Access-Point (Tue Jun 06 2006 - 19:23:20 CDT)
• nukedxnukedx.com
  • Re: file include exploits in nucleus 3.23 (Sat Jun 17 2006 - 11:21:46 CDT)
• o.y.6hotmail.com
  • Zen-Cart 1.3.0.2 Full Path Disclosure (Fri Jun 30 2006 - 04:49:22 CDT)
  • MyBB 1.1.2 New XSS (Tue Jun 06 2006 - 02:21:42 CDT)
• omnipresentemail.it
  • vlbook 1.2 XSS Bug (Fri Jun 23 2006 - 05:05:36 CDT)
• OpenPKG
  • [OpenPKG-SA-2006.011] OpenPKG Security Advisory (png) (Wed Jun 28 2006 - 03:52:06 CDT)
  • [OpenPKG-SA-2006.010] OpenPKG Security Advisory (gnupg) (Mon Jun 26 2006 - 01:21:30 CDT)
• Patrick Morris
  • Re: GamePlay.co.uk XSS (Tue Jun 13 2006 - 20:10:40 CDT)
• Paul
  • Re: Bypassing of web filters by using ASCII (Wed Jun 21 2006 - 17:24:16 CDT)
• Paul Laudanski
  • Re: PHP-Nuke <= 7.9 Search XSS Vulnerability (Tue Jun 13 2006 - 10:23:25 CDT)
  • Re: phpBB2 (template.php) Remote File Inclusion (Mon Jun 05 2006 - 20:47:30 CDT)
• Paul Oxman (poxman)
  • RE: Cisco Secure ACS Cross Site Scripting Vulnerability. (Sat Jun 17 2006 - 05:51:38 CDT)
• Paul Schmehl
  • Re: PHP security (or the lack thereof) (Mon Jun 26 2006 - 12:45:17 CDT)
• Paul Szabo
  • Re: Vm ware 0day dos exploit by n00b. (Mon Jun 19 2006 - 21:59:57 CDT)
• paulsutdallas.edu
  • Re: Squirrelmail local file inclusion (Tue Jun 06 2006 - 20:05:18 CDT)
• petemaxdev.com
  • Re: MAXDEV CMS Multiple vulnerabilities (Tue Jun 20 2006 - 10:57:35 CDT)
• Peter Winter-Smith
  • High Risk Vulnerability in Microsoft Windows RASMAN Service (Tue Jun 13 2006 - 12:38:50 CDT)
• phil.mccrackenfatchickswithglamourshots.com
  • Re: IRM 019: MailMarshal 6.1 SMTP MTA Content Filter Bypass (Wed Jun 07 2006 - 10:53:46 CDT)
• preth00nkergmail.com
  • XSS in Cpanel 10 (Sun Jun 25 2006 - 22:36:08 CDT)
• putosoft softputo
  • Oracle DBMS_STANDARD security problem (Mon Jun 12 2006 - 17:05:36 CDT)
• radumatrafox.info
  • Re: Vacation Retal Script v1.0 (Wed Jun 21 2006 - 07:50:08 CDT)
• Ralf
  • Re: [MajorSecurity #18] Ralf Image Gallery <=0.7.4 - Multiple XSS, Remote File Include and directory traversal vulnerabilities (Tue Jun 27 2006 - 13:52:30 CDT)
• Ray Van Dolson
  • Re: [Full-disclosure] RealVNC 4.1.1 Remote Compromise (Tue Jun 06 2006 - 17:10:09 CDT)
• redl_inehotmail.com
  • PaintedOver.com, Inc. 2004-2006 Xss Vulnerabilities (Sun Jun 11 2006 - 09:06:12 CDT)
• RedTeam Pentesting
  • Advisory: Unauthorized password recovery in phpBannerExchange (Thu Jun 15 2006 - 06:11:54 CDT)
  • Advisory: Authentication bypass in phpBannerExchange (Thu Jun 15 2006 - 06:10:51 CDT)
• reportspaintedover.com
  • Re: PaintedOver.com, Inc. 2004-2006 Xss Vulnerabilities (Tue Jun 13 2006 - 00:08:41 CDT)
• researchsymantec.com
  • SYMSA-2006-006: Lotus Domino SMTP Based Denial of Service (Mon Jun 26 2006 - 15:42:37 CDT)
  • SYMSA-2006-005 (Thu Jun 22 2006 - 14:32:32 CDT)
  • SYMSA-2006-004: Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution (Mon Jun 12 2006 - 21:38:46 CDT)
• Reversemode
  • Regarding "SMB Invalid Handle Value" - MS06-030. Vulnerability not fixed. (Thu Jun 15 2006 - 13:43:06 CDT)
  • [REVERSEMODE ADVISORY] MS06-030 NtClose DeadLock. (Tue Jun 13 2006 - 17:11:20 CDT)
  • [REVERSEMODE ADVISORY] MS06-030 - Microsoft Mrxsmb.sys privilege escalation advisory (Tue Jun 13 2006 - 17:00:56 CDT)
• Reynolds, Jake
  • Input Validation/Output Encoding Vulnerabilities in Cisco CallManager Allow Script Injection Attacks (Mon Jun 19 2006 - 12:16:38 CDT)
• rgodautistici.org
  • BLOG:CMS <= 4.0.0k sql injection (Wed Jun 28 2006 - 10:17:03 CDT)
  • Jaws <= 0.6.2 'Search gadget' SQL injection (Mon Jun 26 2006 - 06:15:10 CDT)
  • Mambo <= 4.6rc1 sql injection (Sat Jun 17 2006 - 07:32:42 CDT)
  • bitweaver <= v1.3 multiple vulnerabilities (Fri Jun 16 2006 - 19:30:47 CDT)
  • blur6ex <= 0.3.462 'ID' blind sql injection (Mon Jun 12 2006 - 11:18:31 CDT)
• rochemlhttrack.com
  • libgd 2.0.33 infinite loop in GIF decoding ? (Tue Jun 06 2006 - 09:02:47 CDT)
• Roger A. Grimes
  • RE: Windows Software Restriction Policy Protection Bypass (Fri Jun 09 2006 - 19:02:10 CDT)
• Roman Drahtmueller
  • Novell Security contact address change (Thu Jun 29 2006 - 10:57:04 CDT)
• Ronald Chmara
  • Re: PHP security (or the lack thereof) (Mon Jun 26 2006 - 22:38:32 CDT)
  • Re: PHP security (or the lack thereof) (Sat Jun 24 2006 - 00:07:50 CDT)
• Ronald van den Blink
  • Re: [Info Disclosure] Diesel PHP Job Site Latest Version (Mon Jun 05 2006 - 18:09:44 CDT)
• root
  • GUESTEX guestbook code execution (Wed Jun 07 2006 - 22:13:06 CDT)
• root-hackedhotmail.com
  • PictureDis Products "lang" Parameter File Inclusion Vulnerability (Thu Jun 15 2006 - 15:41:55 CDT)
• rozowa.landrynkaspam.nation.pl
  • phpBlueDragon CMS 2.9.1 multiple remote file inclusion vuln (Thu Jun 22 2006 - 02:35:09 CDT)
• RSnake
  • RE: Bypassing of web filters by using ASCII (Fri Jun 23 2006 - 17:12:27 CDT)
  • Re: Bypassing of web filters by using ASCII (Wed Jun 21 2006 - 18:57:45 CDT)
• s3rv3r_hack3ryahoo.com
  • alipager xss attack (Tue Jun 13 2006 - 12:17:28 CDT)
• scottvbulletin.com
  • Re: vBulletin<<--v3.5.X "member.php" Cross Site Scripting (Fri Jun 23 2006 - 05:36:28 CDT)
• sean
  • libwmf integer/heap overflow (Fri Jun 30 2006 - 02:03:05 CDT)
• SEC Consult Research
  • SEC Consult SA-20060613-0 :: Outlook Web Access Cross Site Scripting Vulnerability (Wed Jun 14 2006 - 02:03:54 CDT)
• Secunia Research
  • Secunia Research: phpRaid SQL Injection and File Inclusion Vulnerabilities (Thu Jun 29 2006 - 07:06:24 CDT)
  • Secunia Research: Opera SSL Certificate "Stealing" Weakness (Wed Jun 28 2006 - 03:08:30 CDT)
  • Secunia Research: DeluxeBB SQL Injection and File Inclusion Vulnerabilities (Wed Jun 28 2006 - 03:06:44 CDT)
  • Secunia Research: DeluxeBB SQL Injection and File Inclusion Vulnerabilities (Wed Jun 14 2006 - 07:17:09 CDT)
  • Secunia Research: CMS Mundo SQL Injection and File Upload Vulnerabilities (Wed Jun 14 2006 - 07:16:01 CDT)
  • Secunia Research: PicoZip "zipinfo.dll" Multiple Archives Buffer Overflow (Wed Jun 14 2006 - 03:31:09 CDT)
  • Secunia Resaerch: Internet Explorer Exception Handling Memory Corruption Vulnerability (Wed Jun 14 2006 - 03:31:08 CDT)
  • Secunia Research: MyBB "domecode()" PHP Code Execution Vulnerability (Mon Jun 12 2006 - 10:20:38 CDT)
  • Secunia Research: AutoMate unacev2.dll Buffer Overflow Vulnerability (Fri Jun 09 2006 - 02:32:00 CDT)
  • Secunia Research: SelectaPix Cross-Site Scripting and SQL Injection Vulnerabilities (Fri Jun 09 2006 - 02:31:00 CDT)
• security-alerthp.com
  • [security bulletin] HPSBUX02122 SSRT061158 rev.2 - HP-UX Mozilla Remote Execution of Arbitrary Code, Denial of Service (DoS) (Thu Jun 29 2006 - 12:57:32 CDT)
  • [security bulletin] HPSBTU02125 SSRT061105 rev.1 - HP Tru64 UNIX Running Perl 5.8.2 and earlier, Local Unauthorized Code Execution (Thu Jun 29 2006 - 12:56:34 CDT)
  • [security bulletin] HPSBUX02127 SSRT051056 - rev.1 HP-UX Kernel Local Denial of Service (DoS) (Fri Jun 23 2006 - 06:30:16 CDT)
  • [security bulletin] HPSBTU02116 SSRT061135 rev.2 - HP Tru64 UNIX and HP Internet Express for Tru64 UNIX Running sendmail, Remote Execution of Arbitrary Code or Denial of Service (DoS) (Mon Jun 19 2006 - 06:08:48 CDT)
  • [security bulletin] HPSBUX02115 SSRT061077 rev.1 - HP-UX running Support Tools Manager (xstm, cstm, stm) Local Denial of Service (DoS) (Fri Jun 16 2006 - 06:52:38 CDT)
  • [security bulletin] HPSBUX02090 SSRT051058 rev.2 - HP-UX Secure Shell Remote Denial of Service (DoS) (Thu Jun 08 2006 - 14:52:49 CDT)
  • [security bulletin] HPSBMA02121 SSRT061157 rev.2 - HP OpenView Storage Data Protector Remote Arbitrary Command Execution (Thu Jun 08 2006 - 14:54:03 CDT)
• securitymandriva.com
  • [ MDKSA-2006:114 ] - Updated libwmf packages fixes embedded GD vulnerability (Thu Jun 29 2006 - 15:47:00 CDT)
  • [ MDKSA-2006:115 ] - Updated mutt packages fix buffer overflow vulnerability (Wed Jun 28 2006 - 20:01:00 CDT)
  • [ MDKSA-2006:113 ] - Updated tetex packages fix embedded GD vulnerabilities (Tue Jun 27 2006 - 20:33:00 CDT)
  • [ MDKSA-2006:114 ] - Updated libwmf packages fixes embedded GD vulnerability (Tue Jun 27 2006 - 22:52:00 CDT)
  • [ MDKSA-2006:112 ] - Updated gd packages fix DoS vulnerability. (Tue Jun 27 2006 - 20:19:01 CDT)
  • [ MDKSA-2006:111 ] - Updated MySQL packages fixes authorized user DoS(crash) vulnerability. (Fri Jun 23 2006 - 11:42:00 CDT)
  • [ MDKSA-2006:109 ] - Updated wv2 packages fix vulnerability (Tue Jun 20 2006 - 20:04:00 CDT)
  • [ MDKSA-2006:110 ] - Updated gnupg packages fix vulnerability (Tue Jun 20 2006 - 20:18:00 CDT)
  • [ MDKSA-2006:108 ] - Updated xine-lib packages fix buffer overflow vulnerabilities (Tue Jun 20 2006 - 20:02:00 CDT)
  • [ MDKSA-2006:107 ] - Updated arts packages fix vulnerability in artswrapper (Tue Jun 20 2006 - 20:00:00 CDT)
  • [ MDKSA-2006:106 ] - Updated mdkkdm packages fix local vulnerability (Thu Jun 15 2006 - 19:10:00 CDT)
  • [ MDKSA-2006:105 ] - Updated kdebase packages fix local vulnerability in kdm (Thu Jun 15 2006 - 18:34:00 CDT)
  • [ MDKSA-2006:104 ] - Updated sendmail packages fix remotely exploitable vulnerability (Wed Jun 14 2006 - 22:58:00 CDT)
  • [ MDKSA-2006:103 ] - Updated spamassassin packages fix vulnerability (Wed Jun 14 2006 - 16:45:00 CDT)
  • [ MDKSA-2006:102 ] - Updated libtiff packages fixes tiff2pdf vulnerability (Wed Jun 14 2006 - 16:26:00 CDT)
  • [ MDKSA-2006:101 ] - Updated squirrelmail packages fix vulnerabilities (Wed Jun 14 2006 - 16:10:00 CDT)
  • [ MDKSA-2006:100 ] - Updated gdm packages fix vulnerability (Tue Jun 13 2006 - 23:06:00 CDT)
  • [ MDKSA-2006:099-1 ] - Updated freetype2 packages fixes multiple vulnerabilities. (Tue Jun 13 2006 - 22:55:00 CDT)
  • [ MDKSA-2006:099 ] - Updated freetype2 packages fixes multiple vulnerabilities. (Mon Jun 12 2006 - 14:34:01 CDT)
  • [ MDKSA-2006:098 ] - Updated postgresql packages fixes SQL injection vulnerabilities. (Wed Jun 07 2006 - 15:42:00 CDT)
  • [ MDKSA-2006:097 ] - Updated MySQL packages fixes SQL injection vulnerability. (Wed Jun 07 2006 - 14:37:00 CDT)
  • [ MDKSA-2006:096 ] - Updated openldap packages fixes buffer overflow vulnerability. (Wed Jun 07 2006 - 14:01:00 CDT)
  • [ MDKSA-2006:095 ] - Updated libtiff packages fixes tiffsplit vulnerability (Mon Jun 05 2006 - 20:43:00 CDT)
• securityconnectiongmail.com
  • Softbiz Banner Exchange 1.0 XSS (Thu Jun 29 2006 - 10:20:20 CDT)
  • Softbiz Dating 1.0 SQL injection (Thu Jun 22 2006 - 12:29:10 CDT)
  • Dating Agent PRO 4.7.1 Vulnerability (Thu Jun 22 2006 - 12:27:50 CDT)
  • aeDating 4.1 XSS (Thu Jun 22 2006 - 12:23:15 CDT)
  • e107 v0.7.5 XSS (Sun Jun 18 2006 - 16:03:14 CDT)
• selfar2002hotmail.com
  • PHP Live Helper <=([abs_path]) Remote File Include Vulnerabilities (Sun Jun 18 2006 - 20:53:59 CDT)
• Silitixgmail.com
  • Calendar ( Provided by Codewalkers ) - SQL Injection (Thu Jun 22 2006 - 00:07:34 CDT)
• simo64gmail.com
  • OpenGuestbook Cross Site Scripting & SQL Injection (Sun Jun 25 2006 - 02:07:33 CDT)
  • singapore gallery <= 0.10.0 Multiple Vulnerabilities (Sun Jun 18 2006 - 03:31:38 CDT)
  • Mafia Moblog Full Path Disclosure / SQL injection (Wed Jun 07 2006 - 19:18:33 CDT)
• smigofthedumpyahoo.com
  • Contensis CMS XSS vunerability (Fri Jun 09 2006 - 02:53:34 CDT)
• SnoBmsnhotmail.de
  • aXentForum II XSS vuLLn (Fri Jun 16 2006 - 09:15:41 CDT)
• snsadvlac.co.jp
  • [SNS Advisory No.88] Webmin Directory Traversal Vulnerability (Fri Jun 23 2006 - 05:08:54 CDT)
• soltan_defaceryahoo.com
  • productcart soltan_defacer (Thu Jun 22 2006 - 01:47:31 CDT)
  • display.cgi (Tue Jun 20 2006 - 04:28:03 CDT)
• SpC-xBsdmail.Org
  • Ji-takz Chat (mycfg) Remote File Inclusion (Fri Jun 16 2006 - 02:28:01 CDT)
  • Develooping Flash Chat (banned_file) Remote File Inclusion (Fri Jun 16 2006 - 01:29:33 CDT)
  • Andys Chat 4.5 (action) Remote File Inclusion (Thu Jun 15 2006 - 07:24:54 CDT)
  • Fusion Polls (xtrphome) Remote File Inclusion (Wed Jun 14 2006 - 05:34:39 CDT)
  • Flipper Poll (root_path) Remote File Inclusion (Wed Jun 14 2006 - 05:04:48 CDT)
  • bbrss PhpBB (phpbb_root_path) Remote File Inclusion (Tue Jun 13 2006 - 23:56:46 CDT)
  • G Shout 1.3.1 Version - Remote File Include Vulnerability (Tue Jun 13 2006 - 12:14:48 CDT)
  • Shoutpro 1.0 Version - Remote File Include Vulnerability (Tue Jun 13 2006 - 12:39:42 CDT)
  • Simpleshout 1.6.0 Version - Remote File Include Vulnerability (Tue Jun 13 2006 - 12:44:28 CDT)
  • REMOTE FILE INCLUSION ( ALL ) (Tue Jun 13 2006 - 09:22:26 CDT)
  • Ltwcalendar 4.1.3 version - Remote File Include Vulnerabilities (Tue Jun 13 2006 - 11:15:34 CDT)
  • S H O U T B O X (v1.5) Version - Remote File Include Vulnerability (Tue Jun 13 2006 - 12:34:15 CDT)
  • Amr Talkbox talkbox.PHP - Remote File Include Vulnerabilities (Tue Jun 13 2006 - 11:29:25 CDT)
  • Jobline 1 1 1 Version - Remote File Include Vulnerability (Tue Jun 13 2006 - 13:41:18 CDT)
  • PHP MESSENGER 1.0 Version - Remote File Include Vulnerability (Tue Jun 13 2006 - 12:22:22 CDT)
  • Simpnews <= All version - Remote File Include Vulnerabilities (Tue Jun 13 2006 - 00:19:31 CDT)
• spymetayahoo.com
  • XSS on LarkinWEB & Company (Sun Jun 04 2006 - 08:34:45 CDT)
• Stefan Cornelius
  • [ GLSA 200606-24 ] wv2: Integer overflow (Fri Jun 23 2006 - 10:03:45 CDT)
• Steve Kemp
  • [SECURITY] [DSA 1102-1] New pinball packages fix privilege escalation (Sun Jun 25 2006 - 22:47:47 CDT)
• Steven M. Christey
  • Re: [ECHO_ADV_34$2006] W-Agora (Web-Agora) <= 4.2.0 (inc_dir) Remote File Inclusion (Mon Jun 26 2006 - 21:01:01 CDT)
  • Re: MS Excel Remote Code Execution POC Exploit (Thu Jun 22 2006 - 18:58:18 CDT)
  • Re: aXentForum II XSS vuLLn (Thu Jun 22 2006 - 00:45:09 CDT)
  • Re: PHP security (or the lack thereof) (Fri Jun 16 2006 - 18:25:22 CDT)
  • Re: Amr Talkbox talkbox.PHP - Remote File Include Vulnerabilities (Thu Jun 15 2006 - 01:26:37 CDT)
  • Re: REMOTE FILE INCLUSION ( ALL ) (Wed Jun 14 2006 - 01:33:06 CDT)
  • Re: Shoutpro 1.0 Version - Remote File Include Vulnerability (Tue Jun 13 2006 - 16:35:38 CDT)
  • Re: BUGTRAQ:20060611 ThWboard 3.0 <= SQL Injection (Mon Jun 12 2006 - 21:30:38 CDT)
  • Re: Squirrelmail local file inclusion (Tue Jun 06 2006 - 15:32:02 CDT)
  • Re: # MHG Security Team --- MyBloggie 2.1.1 version Remote File Include Vulnerabilit (Mon Jun 05 2006 - 20:52:21 CDT)
• stormhackerhotmail.com
  • MKPortal 1.0.1 Final ($ind) File Include Vulnerability (perl) (Wed Jun 28 2006 - 13:39:58 CDT)
  • Re: PHP Live Helper <=([abs_path]) Remote File Include Vulnerabilities (Mon Jun 19 2006 - 12:05:11 CDT)
• str0ke
  • Re: Simpnews <= All version - Remote File Include Vulnerabilities (Tue Jun 13 2006 - 17:06:44 CDT)
  • Re: igloo DoubleSpeak v 0.1 Multiple remote file inclusion (Mon Jun 12 2006 - 12:56:22 CDT)
  • Re: aWebNews <= 1.0 (login.php) Remote DocumentRoot file disclosure (Thu Jun 08 2006 - 08:19:10 CDT)
• Sune Kloppenborg Jeppesen
  • [ GLSA 200606-30 ] Kiax: Arbitrary code execution (Fri Jun 30 2006 - 10:10:59 CDT)
  • [ GLSA 200606-28 ] Horde Web Application Framework: XSS vulnerability (Wed Jun 28 2006 - 23:45:09 CDT)
  • [ GLSA 200606-29 ] Tikiwiki: SQL injection and multiple XSS vulnerabilities (Wed Jun 28 2006 - 23:57:48 CDT)
  • [ GLSA 200606-27 ] Mutt: Buffer overflow (Wed Jun 28 2006 - 14:36:03 CDT)
  • [ GLSA 200606-23 ] KDM: Symlink vulnerability (Thu Jun 22 2006 - 14:48:22 CDT)
  • [ GLSA 200606-22 ] aRts: Privilege escalation (Thu Jun 22 2006 - 14:17:43 CDT)
  • [ GLSA 200606-20 ] Typespeed: Remote execution of arbitrary code (Mon Jun 19 2006 - 00:55:00 CDT)
  • [ GLSA 200606-21 ] Mozilla Thunderbird: Multiple vulnerabilities (Mon Jun 19 2006 - 11:16:49 CDT)
  • [ GLSA 200606-19 ] Sendmail: Denial of Service (Thu Jun 15 2006 - 11:07:01 CDT)
  • [ GLSA 200606-17 ] OpenLDAP: Buffer overflow (Thu Jun 15 2006 - 10:54:31 CDT)
  • [ GLSA 200606-18 ] PAM-MySQL: Multiple vulnerabilities (Thu Jun 15 2006 - 10:59:22 CDT)
  • [ GLSA 200606-15 ] Asterisk: IAX2 video frame buffer overflow (Wed Jun 14 2006 - 12:40:13 CDT)
  • [ GLSA 200606-16 ] DokuWiki: PHP code injection (Wed Jun 14 2006 - 12:55:03 CDT)
  • [ GLSA 200606-09 ] SpamAssassin: Execution of arbitrary code (Sun Jun 11 2006 - 14:42:35 CDT)
  • [ GLSA 200606-14 ] GDM: Privilege escalation (Mon Jun 12 2006 - 15:05:00 CDT)
  • [ GLSA 200606-13 ] MySQL: SQL Injection (Sun Jun 11 2006 - 15:29:28 CDT)
  • [ GLSA 200606-12 ] Mozilla Firefox: Multiple vulnerabilities (Sun Jun 11 2006 - 15:24:33 CDT)
  • [ GLSA 200606-11 ] JPEG library: Denial of Service (Sun Jun 11 2006 - 15:15:04 CDT)
  • [ GLSA 200606-10 ] Cscope: Many buffer overflows (Sun Jun 11 2006 - 15:10:53 CDT)
  • ERRATA: [ GLSA 200604-10 ] zgv: Heap overflow (Sat Jun 10 2006 - 13:52:56 CDT)
  • [ GLSA 200606-08 ] WordPress: Arbitrary command execution (Fri Jun 09 2006 - 16:10:59 CDT)
  • [ GLSA 200606-07 ] Vixie Cron: Privilege Escalation (Fri Jun 09 2006 - 10:31:37 CDT)
  • [ GLSA 200606-06 ] AWStats: Remote execution of arbitrary code (Wed Jun 07 2006 - 13:59:10 CDT)
  • [ GLSA 200606-01 ] Opera: Buffer overflow (Wed Jun 07 2006 - 00:20:47 CDT)
  • [ GLSA 200606-04 ] Tor: Several vulnerabilities (Wed Jun 07 2006 - 12:50:07 CDT)
  • [ GLSA 200606-05 ] Pound: HTTP request smuggling (Wed Jun 07 2006 - 13:13:14 CDT)
  • [ GLSA 200606-03 ] Dia: Format string vulnerabilities (Wed Jun 07 2006 - 12:32:04 CDT)
  • [ GLSA 200606-02 ] shadow: Privilege escalation (Wed Jun 07 2006 - 09:15:50 CDT)
• supportv3chat.com
  • Re: V3Chat Instant Messenger - XSS (Thu Jun 22 2006 - 02:57:38 CDT)
• Sven Vetsch
  • Re: Bingbox.com - XSS & cookie disclosure (Sat Jun 17 2006 - 06:02:43 CDT)
• SWEET SWEET
  • file include exploits in dotwidgeta Version 2 (Fri Jun 16 2006 - 12:34:10 CDT)
  • file include exploits in mcGuestbook 1.3 (Fri Jun 16 2006 - 12:09:58 CDT)
• t.brehmispconfig.org
  • Re: [Bugtraq ID: 17909] ISPConfig Session.INC.PHP Remote File Include Vulnerability (Fri Jun 16 2006 - 05:05:21 CDT)
  • Re: [FSA016] ISPConfig 2.2.3, File inclusion vulnerability (Fri Jun 16 2006 - 05:13:34 CDT)
• tamrielgmx.net
  • Chipmailer <= 1.09 Multiple Vulnerabilities (Tue Jun 13 2006 - 14:46:25 CDT)
• thanekamphotmail.com
  • Re: SSL VPNs and security (Fri Jun 09 2006 - 02:02:40 CDT)
• the_dayecho.or.id
  • [ECHO_ADV_34$2006] W-Agora (Web-Agora) <= 4.2.0 (inc_dir) Remote File Inclusion (Thu Jun 22 2006 - 03:19:48 CDT)
• Thierry Carrez
  • [ GLSA 200606-26 ] EnergyMech: Denial of Service (Mon Jun 26 2006 - 14:23:23 CDT)
  • [ GLSA 200606-25 ] Hashcash: Possible heap overflow (Mon Jun 26 2006 - 14:11:23 CDT)
• Thomas Biege
  • SUSE Security Announcement: freetype2 (SUSE-SA:2006:037) (Tue Jun 27 2006 - 07:25:03 CDT)
• thomas48
  • Re: [funsec] Microsoft's Real Test with Vista is Vulnerabilities (Tue Jun 27 2006 - 22:30:13 CDT)
  • SyScan'06 Highlight - Is Phone Banking Safe? (Tue Jun 27 2006 - 23:21:50 CDT)
• Thor (Hammer of God)
  • Re: Bypassing of web filters by using ASCII (Wed Jun 21 2006 - 22:40:25 CDT)
• tinywebgallerymdempfle.de
  • Re: Tiny Web Gallery <= 1.4 XSS (Tue Jun 06 2006 - 05:06:53 CDT)
• Tobias J. Kreidl
  • Re: PHP security (or the lack thereof) (Sat Jun 24 2006 - 00:55:16 CDT)
• Tonnerre Lombard
  • Re: PHP security (or the lack thereof) (Tue Jun 27 2006 - 00:47:29 CDT)
  • Re: MySQL DoS (Thu Jun 15 2006 - 00:41:30 CDT)
• Trustix Security Advisor
  • TSLSA-2006-0037 - multi (Fri Jun 23 2006 - 07:14:38 CDT)
  • TSLSA-2006-0036 - multi (Fri Jun 16 2006 - 07:35:20 CDT)
  • TSLSA-2006-0034 - multi (Fri Jun 09 2006 - 08:04:15 CDT)
• try_oghotmail.com
  • Re: PHP-Nuke <= 7.9 Search XSS Vulnerability (Thu Jun 08 2006 - 20:26:11 CDT)
  • PHP-Nuke <= 7.9 Search XSS Vulnerability (Thu Jun 08 2006 - 07:32:39 CDT)
• Uninformed Journal
  • Uninformed Journal Release Announcement: Volume 4 (Thu Jun 08 2006 - 13:53:42 CDT)
• us3rg0d
  • PTT.yu Guestbook Vulnebility (Thu Jun 15 2006 - 16:55:50 CDT)
• VigilantMinds Advisories
  • VigilantMinds Advisory: Opera JPEG Processing Integer Overflow Vulnerability (VMSA-20060621-01) (Thu Jun 22 2006 - 09:10:44 CDT)
• Vincent Archer
  • Re: Bypassing of web filters by using ASCII (Mon Jun 26 2006 - 04:19:28 CDT)
• viz.securitygmail.com
  • XSS in http://www.newscientist.com/ - Search (Fri Jun 16 2006 - 09:13:26 CDT)
• vulnhexview.com
  • [HV-LOW] Microsoft NetMeeting memory corruption (Brief) (Tue Jun 06 2006 - 19:27:53 CDT)
• Williams, James K
  • CAID 34325 - CA ITM, eAV, ePP scan job description field format string vulnerability (Tue Jun 27 2006 - 14:17:36 CDT)
• wiz561gmail.com
  • Dell Openmanage CD Vulnerability (Thu Jun 08 2006 - 16:29:19 CDT)
• wnorthverizon.net
  • Re: SSL VPNs and security (Thu Jun 08 2006 - 20:56:48 CDT)
• x0r_1hotmail.de
  • myPHP Guestbook 2.0.2 XSS Vulnerabilitie (Fri Jun 09 2006 - 04:32:33 CDT)
• Xavier Roche
  • Re: libgd 2.0.33 infinite loop in GIF decoding ? (Fri Jun 09 2006 - 08:30:36 CDT)
• xhireherniklasika.cz
  • Re: MySQL DoS (Thu Jun 15 2006 - 14:38:11 CDT)
• zdi-disclosures3Com.com
  • ZDI-06-020: Apple iTunes AAC File Parsing Integer Overflow Vulnerability (Fri Jun 30 2006 - 11:06:50 CDT)
  • ZDI-06-018: Microsoft Internet Explorer DXImageTransform ActiveX Memory Corruption Vulnerability (Tue Jun 13 2006 - 13:30:49 CDT)
  • ZDI-06-017: Microsoft Internet Explorer UTF-8 Decoding Heap Overflow Vulnerability (Tue Jun 13 2006 - 13:33:29 CDT)
• ziadsubdreamer.com
  • Re: possible SQL injection in Subdreamer (Wed Jun 21 2006 - 12:04:13 CDT)
• zipk0der
  • Windows XP Task Scheduler Local Privilege Escalation (Advisory) (Sun Jun 11 2006 - 19:53:43 CDT)
• Ìèíàåâ_Àíäðåé
  • Re[2]: Is Windows TCP/IP source routing PoC code available? (Wed Jun 28 2006 - 14:01:51 CDT)

Last message date: Fri Jun 30 2006 - 14:49:26 CDT
Archived on: Fri Jun 30 2006 - 14:49:27 CDT

655 messages sorted by: [ date ] [ thread ] [ subject ]