Most recent messages
570 messages sorted by: [ author ] [ date ] [ subject ]

Starting: Tue Aug 01 2006 - 10:33:45 CDT
Ending: Thu Aug 31 2006 - 17:47:01 CDT

• [ GLSA 200608-01 ] Apache: Off-by-one flaw in mod_rewrite Matthias Geerdsen (Tue Aug 01 2006 - 07:04:12 CDT)
• NewsLetter v3.5 <= (NL_PATH) Remote File Inclusion Exploit tr_zindanwolfsecurity.org (Tue Aug 01 2006 - 08:15:36 CDT)
• [Kurdish Security # 16 ] newsReporter v1.0 Remote Command Execution botanlinuxmail.org (Tue Aug 01 2006 - 09:01:32 CDT)
• [Kurdish Security # 17 ] GuestBook 3.5 Remote Command Execution botanlinuxmail.org (Tue Aug 01 2006 - 09:02:40 CDT)
• [Kurdish Security # 18 ] FAQ Script Remote Command Execution botanlinuxmail.org (Tue Aug 01 2006 - 09:03:23 CDT)
• [Kurdish Security # 19 ] FileManager Remote Command Execution botanlinuxmail.org (Tue Aug 01 2006 - 09:04:03 CDT)
• [Kurdish Security # 20 ] Quickie Remote Command Execution botanlinuxmail.org (Tue Aug 01 2006 - 09:04:44 CDT)
• [Kurdish Security # 21] ShoutBox v4.4 Remote Command Execution botanlinuxmail.org (Tue Aug 01 2006 - 09:05:34 CDT)
• [SECURITY] [DSA 1130-1] New sitebar packages fix cross-site scripting Martin Schulze (Tue Aug 01 2006 - 10:02:12 CDT)
• WoW Roster <= 1.5.x Remote File Include (hsList.php) AG Spider (Tue Aug 01 2006 - 10:22:50 CDT)
• Re: Gdiplus.dll division by 0 giacomo collini (Tue Aug 01 2006 - 10:24:27 CDT)
  • Re: Gdiplus.dll division by 0 Dennis Lubert (Tue Aug 01 2006 - 16:38:43 CDT)
• [vuln.sg] Lhaplus LHA Extended Header Handling Buffer Overflow Vulnerability vulnpost-removevuln.sg (Mon Jul 31 2006 - 19:52:15 CDT)
• [ MDKSA-2006:135 ] - Updated freeciv packages fix DoS vulnerabilities securitymandriva.com (Mon Jul 31 2006 - 20:02:00 CDT)
• VMSA-2006-0004 Cross site scripting vulnerability and other fixes VMware Security Team (Mon Jul 31 2006 - 21:27:11 CDT)
• [USN-327-2] firefox regression Martin Pitt (Tue Aug 01 2006 - 04:06:15 CDT)
• TSEP 0.9.4.2 <= Remote File Inclusion philipp.niedzielagmx.de (Tue Aug 01 2006 - 04:18:51 CDT)
• ISS BlackICE PC Protection DLL faking of run-time linked libraries Vulnerability David Matousek (Tue Aug 01 2006 - 04:57:56 CDT)
• WoW Roster <= 1.5.x Remote File Include (hsList.php) AG Spider (Tue Aug 01 2006 - 10:25:12 CDT)
• [SECURITY] [DSA 1132-1] New apache2 packages fix buffer overflow Steve Kemp (Tue Aug 01 2006 - 07:57:19 CDT)
• [SECURITY] [DSA 1131-1] New apache package fix buffer overflow Steve Kemp (Tue Aug 01 2006 - 05:46:24 CDT)
• SUSE Security Announcement: freetype2 (SUSE-SA:2006:045) Thomas Biege (Tue Aug 01 2006 - 11:44:12 CDT)
• SUSE Security Announcement: libtiff (SUSE-SA:2006:044) Thomas Biege (Tue Aug 01 2006 - 11:42:25 CDT)
• [ MDKSA-2006:136 ] - Updated kdegraphics packages fix multiple libtiff vulnerabilities securitymandriva.com (Tue Aug 01 2006 - 14:43:00 CDT)
• SYM06-013 Symantec On-Demand Protection Encrypted Data Exposure securesymantec.com (Tue Aug 01 2006 - 15:32:44 CDT)
  • Re: SYM06-013 Symantec On-Demand Protection Encrypted Data Exposure Chris Wysopal (Tue Aug 01 2006 - 22:22:02 CDT)
  • Re: SYM06-013 Symantec On-Demand Protection Encrypted Data Exposure dmsecurityfocus.com (Thu Aug 10 2006 - 21:19:48 CDT)
• Barracuda Vulnerability: Hardcoded Password [NNL-20060801-01] gssinclannlsoftware.com (Tue Aug 01 2006 - 16:18:15 CDT)
  • Re: Barracuda Vulnerability: Hardcoded Password [NNL-20060801-01] pingywon (Wed Aug 02 2006 - 09:39:43 CDT)
  • RE: Barracuda Vulnerability: Hardcoded Password [NNL-20060801-01] Roger A. Grimes (Wed Aug 02 2006 - 13:50:04 CDT)
• Barracuda Vulnerability: Arbitrary File Disclosure [NNL-20060801-02] gssinclannlsoftware.com (Tue Aug 01 2006 - 16:20:39 CDT)
  • Re: Barracuda Vulnerability: Arbitrary File Disclosure [NNL-20060801-02] Matthew Hall (Thu Aug 03 2006 - 11:01:01 CDT)
• DMA[2006-0801a] - 'Apple OSX fetchmail buffer overflow' K F (lists) (Tue Aug 01 2006 - 16:52:59 CDT)
• [ MDKSA-2006:137 ] - Updated libtiff packages fix multiple vulnerabilities securitymandriva.com (Tue Aug 01 2006 - 14:55:00 CDT)
• [SECURITY] [DSA 1133-1] New mantis packages fix execution of arbitrary web script code Moritz Muehlenhoff (Tue Aug 01 2006 - 15:20:00 CDT)
• JavaScript port scanning pdp (architect) (Tue Aug 01 2006 - 15:21:36 CDT)
• rPSA-2006-0142-1 libtiff Justin M. Forbes (Tue Aug 01 2006 - 17:40:12 CDT)
• EEYE: research.eeye.com Marc Maiffret (Tue Aug 01 2006 - 17:46:34 CDT)
• [SECURITY] [DSA 1134-1] New Mozilla Thunderbird packages fix several vulnerabilities Martin Schulze (Wed Aug 02 2006 - 00:47:19 CDT)
• Secunia Research: Jetbox Multiple Vulnerabilities Secunia Research (Wed Aug 02 2006 - 10:12:33 CDT)
• Re: Cisco VPN Concentrator IKE resource exhaustion DoS Advisory Roy Hills (Wed Aug 02 2006 - 03:03:11 CDT)
  • Re: Re: Cisco VPN Concentrator IKE resource exhaustion DoS Advisory henry.sieffgmail.com (Mon Aug 07 2006 - 17:24:13 CDT)
  • Re: Re: Cisco VPN Concentrator IKE resource exhaustion DoS Advisory Henry Sieff (Fri Aug 11 2006 - 14:09:37 CDT)
  • RE: Re: Cisco VPN Concentrator IKE resource exhaustion DoS Advisory Lance Seelbach (Fri Aug 11 2006 - 11:57:58 CDT)
• SaveWeb Portal 3.4 <- (SITE_Path) Remote File Inclusion Vulnerability x0r0nhotmail.com (Wed Aug 02 2006 - 06:19:30 CDT)
• Content Management Framework "G3" - XSS Vulnerability in Search Function Stefan Friedli (Wed Aug 02 2006 - 05:15:17 CDT)
• rPSA-2006-0143-1 gnupg Justin M. Forbes (Wed Aug 02 2006 - 14:09:06 CDT)
• [USN-330-1] tiff vulnerabilities Martin Pitt (Wed Aug 02 2006 - 14:48:42 CDT)
• [eVuln] MyBB 'Avatar URL' XSS Vulnerability alexevuln.com (Wed Aug 02 2006 - 05:18:01 CDT)
• [SECURITY] [DSA 1136-1] New gpdf packages fix denial of service Martin Schulze (Wed Aug 02 2006 - 11:22:27 CDT)
• [security bulletin] HPSBUX02124 SSRT061159 rev.1 - HP-UX Sendmail MIME Remote Denial of Service (DoS) security-alerthp.com (Wed Aug 02 2006 - 16:50:08 CDT)
• OZJournal v1.5 - XSS lunyyoufucktard.com (Wed Aug 02 2006 - 12:42:47 CDT)
• [security bulletin] HPSBUX02108 SSRT061133 rev.13 - HP-UX Running Sendmail, Remote Execution of Arbitrary Code security-alerthp.com (Wed Aug 02 2006 - 16:50:49 CDT)
• [SECURITY] [DSA 1137-1] New tiff packages fix several vulnerabilities Martin Schulze (Wed Aug 02 2006 - 13:28:12 CDT)
• [security bulletin] HPSBGN02136 SSRT061173 rev.1 - ProCurve Series 3500yl, 6200yl, and 5400zl Switches Running Software Prior to K.11.33 Remote Denial of Service (DoS) security-alerthp.com (Wed Aug 02 2006 - 16:49:27 CDT)
• Hobbit monitor security bugfix release - 4.1.2p2 Henrik Stoerner (Wed Aug 02 2006 - 15:35:50 CDT)
• [SECURITY] [DSA 1138-1] New cfs packages fix denial of service Moritz Muehlenhoff (Wed Aug 02 2006 - 14:43:14 CDT)
• [SECURITY] [DSA 1135-1] New libtunepimp packages fix arbitrary code execution Martin Schulze (Wed Aug 02 2006 - 01:46:38 CDT)
• [security bulletin] HPSBUX02087 SSRT4728 rev.3 - HP-UX running TCP/IP Remote Denial of Service (DoS) security-alerthp.com (Wed Aug 02 2006 - 16:51:50 CDT)
• Simpliciti Locked Browser Jail Breakout Vulnerability EvilPacket (Tue Aug 01 2006 - 19:15:54 CDT)
• TSEP <= 0.942 Remote File Include beford (Wed Aug 02 2006 - 17:56:41 CDT)
• Vwar v1.5.0 <= Sql Injection and XSS vuln. mfoxhackergmail.com (Thu Aug 03 2006 - 01:16:55 CDT)
• Secunia Research: PC Tools AntiVirus Insecure Default Directory Permissions Secunia Research (Thu Aug 03 2006 - 03:46:52 CDT)
• CMSimple Cross Site Scripting Outlawaria-security.net (Thu Aug 03 2006 - 03:57:34 CDT)
• [USN-331-1] Linux kernel vulnerabilities Martin Pitt (Thu Aug 03 2006 - 04:19:27 CDT)
• [USN-332-1] gnupg vulnerability Martin Pitt (Thu Aug 03 2006 - 04:55:17 CDT)
• Re: [Announcement] Apache HTTP Server 2.2.3 (2.0.59, 1.3.37) Released Philip M. Gollucci (Thu Aug 03 2006 - 04:05:21 CDT)
  • Re: [Announcement] Apache HTTP Server 2.2.3 (2.0.59, 1.3.37) Released William A. Rowe, Jr. (Thu Aug 03 2006 - 04:58:18 CDT)
  • Re: [Announcement] Apache HTTP Server 2.2.3 (2.0.59, 1.3.37) Released Steve VanDevender (Thu Aug 03 2006 - 14:17:37 CDT)
• [SECURITY] [DSA 1139-1] New ruby1.6 packages fix privilege escalation Moritz Muehlenhoff (Thu Aug 03 2006 - 12:35:15 CDT)
• Javascript software authentication brute force attack Gianstefano Monni (Thu Aug 03 2006 - 05:31:57 CDT)
• [MajorSecurity Advisory #27]ToendaCMS - Cross Site Scripting Issue adminmajorsecurity.de (Thu Aug 03 2006 - 08:44:14 CDT)
• SendCard <= 3.4.0 unauthorized administrative access / remote commands execution rgodautistici.org (Thu Aug 03 2006 - 07:49:53 CDT)
• [SECURITY] [DSA 1140-1] New GnuPG packages fix denial of service Martin Schulze (Thu Aug 03 2006 - 12:57:49 CDT)
• SolpotCrew Advisory #5 - modernbill ver 1.6 (DIR) Remote File Inclusion chris_hasibuanyahoo.com (Thu Aug 03 2006 - 09:29:51 CDT)
  • Re: SolpotCrew Advisory #5 - modernbill ver 1.6 (DIR) Remote File Inclusion Mailinglists Address (Thu Aug 03 2006 - 15:02:40 CDT)
• [ GLSA 200608-02 ] Mozilla SeaMonkey: Multiple vulnerabilities Stefan Cornelius (Thu Aug 03 2006 - 13:22:50 CDT)
• [DRUPAL-SA-2006-011] Drupal 4.7.3 / 4.6.9 fixes XSS issue Uwe Hermann (Thu Aug 03 2006 - 10:20:41 CDT)
• [ GLSA 200608-03 ] Mozilla Firefox: Multiple vulnerabilities Thierry Carrez (Thu Aug 03 2006 - 14:59:11 CDT)
• vbulletin 3.5.4 IE exploit xss stefandakotacom.net (Thu Aug 03 2006 - 13:14:28 CDT)
  • Re: vbulletin 3.5.4 IE exploit xss jamesgmail.com (Mon Aug 07 2006 - 03:01:43 CDT)
• ME Download System 1.3 Remote File Inclusion philipp.niedzielagmx.de (Thu Aug 03 2006 - 13:49:43 CDT)
• [ GLSA 200608-04 ] Mozilla Thunderbird: Multiple vulnerabilities Thierry Carrez (Thu Aug 03 2006 - 15:27:31 CDT)
• ZoneX 1.0.3 - Publishers Gold Edition Remote File Inclusion Vulnerability x0r0nhotmail.com (Thu Aug 03 2006 - 15:04:16 CDT)
  • Re: ZoneX 1.0.3 - Publishers Gold Edition Remote File Inclusion Vulnerability maric_sasayahoo.com (Wed Aug 30 2006 - 04:31:31 CDT)
• [security bulletin] HPSBUX02137 SSRT051024 rev.1 - HP-UX Running Xserver Local Execution of Arbitrary Code, Privilege Elevation security-alerthp.com (Thu Aug 03 2006 - 14:06:42 CDT)
• GaesteChaos <= 0.2 Multiple Vulnerabilities Tamriel (Thu Aug 03 2006 - 18:15:12 CDT)
• CounterChaos <= 0.48c SQL Injection Vulnerability Tamriel (Thu Aug 03 2006 - 18:15:37 CDT)
• GeheimChaos <= 0.5 Multiple SQL Injection Vulnerabilities Tamriel (Thu Aug 03 2006 - 18:16:00 CDT)
• XSS in Vbulletin 3.6.0 in IE 0nly Stefandakotacom.net (Thu Aug 03 2006 - 17:44:55 CDT)
• [SECURITY] [DSA 1141-1] New GnuPG2 packages fix denial of service Martin Schulze (Thu Aug 03 2006 - 23:36:54 CDT)
• [ GLSA 200608-05 ] LibVNCServer: Authentication bypass Sune Kloppenborg Jeppesen (Thu Aug 03 2006 - 23:49:17 CDT)
• [ GLSA 200608-06 ] Courier MTA: Denial of Service vulnerability Sune Kloppenborg Jeppesen (Thu Aug 03 2006 - 23:56:14 CDT)
• [ECHO_ADV_42$2006] BufferOverflow in Eremove Client erdcecho.or.id (Fri Aug 04 2006 - 05:23:58 CDT)
• [SECURITY] [DSA 1142-1] New freeciv packages fix arbitrary code execution Martin Schulze (Fri Aug 04 2006 - 00:01:43 CDT)
• [ECHO_ADV_42$2006] PHP Live Helper <= 2.0 (abs_path) Remote File Inclusion matdhulegmail.com (Fri Aug 04 2006 - 04:54:21 CDT)
• [SECURITY] [DSA 1143-1] New dhcp packages fix denial of service Martin Schulze (Fri Aug 04 2006 - 03:46:55 CDT)
• TSLSA-2006-0044 - multi Trustix Security Advisor (Fri Aug 04 2006 - 09:08:18 CDT)
• CAID 34509 - CA eTrust Antivirus WebScan vulnerabilities Williams, James K (Fri Aug 04 2006 - 11:17:37 CDT)
• phpAutoMembersArea 3.2.5 ($installed_config_file) Remote File Inclusion philipp.niedzielagmx.de (Fri Aug 04 2006 - 13:54:51 CDT)
• Barracuda Spam Firewall: Administrator Level Remote Command Execution [ID-20060804-01] Matthew Hall (Fri Aug 04 2006 - 05:22:53 CDT)
• Re: Vanilla CMS <= 1.0.1 (RootDirectory) Remote file inclusion Vuln. dinoboffhotmail.com (Sat Aug 05 2006 - 06:07:13 CDT)
• [ GLSA 200608-07 ] libTIFF: Multiple vulnerabilities Sune Kloppenborg Jeppesen (Fri Aug 04 2006 - 17:40:37 CDT)
• vBulletin 3.0.14 ~ init.php~ registerring global arbitary variable~ XSS exploit addmimistratorgmail.com (Fri Aug 04 2006 - 21:38:54 CDT)
• Tinyportal Shoutbox exploitexhotmail.com (Sat Aug 05 2006 - 03:22:02 CDT)
• [ GLSA 200608-08 ] GnuPG: Integer overflow vulnerability Sune Kloppenborg Jeppesen (Sat Aug 05 2006 - 06:09:49 CDT)
• MyBloggie <= 2.1.4 trackback.php SQL injection / admin credentials disclosure rgodautistici.org (Sat Aug 05 2006 - 15:04:15 CDT)
• Multiple vulnerabilities in DConnect Daemon 0.7.0 (CVS 30 Jul 2006) Luigi Auriemma (Sun Aug 06 2006 - 14:27:52 CDT)
• IMENDIO PLANNER REMOTE FILENAME FORMAT STRING VULNERABILITY king_purbayahoo.co.uk (Mon Aug 07 2006 - 03:59:05 CDT)
• XSS Vulnerability in FTD v3.7.3 try_oghotmail.com (Sat Aug 05 2006 - 16:10:04 CDT)
• Re: flatnuke <= 2.5.7 arbitrary php file upload segatomyahoo.it (Mon Aug 07 2006 - 02:35:06 CDT)
• [ECHO_ADV_44$2006] PHP Simple Shop <= 2.0 (abs_path) Remote File Inclusion erdcecho.or.id (Sun Aug 06 2006 - 22:07:21 CDT)
• XennoBB <= 2.1.0 "birthday" SQL injection c.boultonmybboard.com (Sat Aug 05 2006 - 23:39:38 CDT)
• SAPID CMS remote File Inclusion vulnerabilities simo64morx.org (Mon Aug 07 2006 - 09:42:08 CDT)
• 0-day XP SP2 wmf exploit cyanid-E (Sun Aug 06 2006 - 05:02:18 CDT)
• SolpotCrew Advisory #6 - phpCC - Beta 4.2 (base_dir) Remote File Inclusion chris_hasibuanyahoo.com (Sun Aug 06 2006 - 07:30:46 CDT)
• 0-day XP SP2 wmf exploit (some details) cyanid-E (Mon Aug 07 2006 - 04:05:21 CDT)
• NEWSolved Lite v1.9.2 (abs_path) Remote File Inclusion philipp.niedzielagmx.de (Sun Aug 06 2006 - 13:14:16 CDT)
• when will AV vendors fix this??? Bipin Gautam (Sat Aug 05 2006 - 02:20:56 CDT)
  • Re: when will AV vendors fix this??? Denis Jedig (Sat Aug 05 2006 - 03:35:25 CDT)
  • Re: when will AV vendors fix this??? Marius Huse Jacobsen (Mon Aug 07 2006 - 13:26:24 CDT)
  • RE: when will AV vendors fix this??? Thomas D. (Mon Aug 07 2006 - 13:20:03 CDT)
  • Re: when will AV vendors fix this??? Paul Schmehl (Mon Aug 07 2006 - 15:35:34 CDT)
  • Re: when will AV vendors fix this??? Bipin Gautam (Mon Aug 07 2006 - 21:09:13 CDT)
  • Re: when will AV vendors fix this??? Andreas Marx (Mon Aug 14 2006 - 13:21:31 CDT)
• blur6ex 0.3 Comment title HTML inyection vuln. piiiiiii pppiiiiiiii (Sun Aug 06 2006 - 11:09:00 CDT)
• PHP: Zend_Hash_Del_Key_Or_Index Vulnerability Stefan Esser (Sun Aug 06 2006 - 12:47:39 CDT)
• php local buffer underflow could lead to arbitary code execution heintzhotmail.com (Fri Aug 04 2006 - 16:24:57 CDT)
• [ GLSA 200608-10 ] pike: SQL injection vulnerability Sune Kloppenborg Jeppesen (Sun Aug 06 2006 - 14:31:26 CDT)
• [ GLSA 200608-11 ] Webmin, Usermin: File Disclosure Sune Kloppenborg Jeppesen (Sun Aug 06 2006 - 15:09:46 CDT)
• Virtual War v1.5.0 Remote File Include (vwar_root) AG Spider (Mon Aug 07 2006 - 09:44:36 CDT)
• [vuln.sg] Lhaz LHA Long Filename Buffer Overflow Vulnerability vulnpost-removevuln.sg (Mon Aug 07 2006 - 01:24:17 CDT)
• Will Microsoft patch remarkable old Msjet40.dll issue? Juha-Matti Laurio (Fri Aug 04 2006 - 17:15:30 CDT)
  • Re: Will Microsoft patch remarkable old Msjet40.dll issue? Juha-Matti Laurio (Tue Aug 08 2006 - 17:07:52 CDT)
• [SECURITY] [DSA 1144-1] New chmlib packages fix denial of service Moritz Muehlenhoff (Mon Aug 07 2006 - 12:31:45 CDT)
• linksys WRT54g authentication bypass Ginsu Rabbit (Sat Aug 05 2006 - 13:52:49 CDT)
  • RE: linksys WRT54g authentication bypass Andy Meyers (Mon Aug 07 2006 - 15:04:34 CDT)
  • Re: linksys WRT54g authentication bypass Nicholas Knight (Mon Aug 07 2006 - 18:32:18 CDT)
  • Re: linksys WRT54g authentication bypass Rodrigo Barbosa (Mon Aug 07 2006 - 18:32:02 CDT)
  • Re: linksys WRT54g authentication bypass Ginsu Rabbit (Mon Aug 07 2006 - 18:43:03 CDT)
  • RE: linksys WRT54g authentication bypass Miguel Valentin (Mon Aug 07 2006 - 18:23:19 CDT)
  • RE: linksys WRT54g authentication bypass Ginsu Rabbit (Mon Aug 07 2006 - 18:49:36 CDT)
  • Re: linksys WRT54g authentication bypass guant a (Tue Aug 08 2006 - 01:01:24 CDT)
  • Re: linksys WRT54g authentication bypass Ginsu Rabbit (Tue Aug 08 2006 - 13:20:50 CDT)
  • RE: linksys WRT54g authentication bypass TeamXMM Consulting, Inc. (Fri Aug 11 2006 - 13:32:48 CDT)
  • Re: RE: linksys WRT54g authentication bypass gooorgussgmail.com (Fri Aug 11 2006 - 03:26:39 CDT)
• [ GLSA 200608-12 ] x11vnc: Authentication bypass in included LibVNCServer code Sune Kloppenborg Jeppesen (Mon Aug 07 2006 - 13:02:22 CDT)
  • Re: [ GLSA 200608-12 ] x11vnc: Authentication bypass in included LibVNCServer code xvmlkarlrunge.com (Thu Aug 10 2006 - 20:07:18 CDT)
• DeluxeBB Multiple Vulnerabilities darkz.gsagmail.com (Mon Aug 07 2006 - 08:36:56 CDT)
• simplog 0.9.3 and prior XSS piiiiiii pppiiiiiiii (Sun Aug 06 2006 - 16:01:00 CDT)
• Visual Events Calendar v1.1 (cfg_dir) Remote Inclusion Vulnerability x0r0nhotmail.com (Mon Aug 07 2006 - 14:35:51 CDT)
• TSRT-06-06: Computer Associates eTrust AntiVirus WebScan Manifest Processing Buffer Overflow Vulnerability TSRT3com.com (Mon Aug 07 2006 - 12:58:03 CDT)
• TSRT-06-05: Computer Associates eTrust AntiVirus WebScan Automatic Update Code Execution Vulnerability TSRT3Com.com (Mon Aug 07 2006 - 12:58:09 CDT)
• ARES 2007: Call for workshop proposals, deadline Sept 10, 2006 Manh Tho (Thu Aug 03 2006 - 17:19:41 CDT)
• Attacking the local LAN via XSS pdp (architect) (Thu Aug 03 2006 - 18:35:48 CDT)
• Re: [Full-disclosure] Attacking the local LAN via XSS Schanulleke (Fri Aug 04 2006 - 02:21:56 CDT)
  • Re: [Full-disclosure] Attacking the local LAN via XSS Thierry Zoller (Fri Aug 04 2006 - 05:13:16 CDT)
  • Re: [Full-disclosure] Attacking the local LAN via XSS pdp (architect) (Fri Aug 04 2006 - 05:29:05 CDT)
  • Re: [Full-disclosure] Attacking the local LAN via XSS Nikolay Kubarelov (Mon Aug 07 2006 - 18:23:38 CDT)
• Re: Re[2]: [Full-disclosure] Attacking the local LAN via XSS pdp (architect) (Fri Aug 04 2006 - 08:06:57 CDT)
• Re[2]: [Full-disclosure] Attacking the local LAN via XSS Thierry Zoller (Fri Aug 04 2006 - 07:11:40 CDT)
• AUTODAFE: an Act of Software Torture [FUZZER] Martin Vuagnoux (Fri Aug 04 2006 - 18:33:25 CDT)
• phpPrintAnalyzer <= 1.1 (rep_par_rapport_racine) Remote File Inclusion Vulnerability sh3llsh3ll.ir (Mon Aug 07 2006 - 15:19:08 CDT)
  • Re: phpPrintAnalyzer <= 1.1 (rep_par_rapport_racine) Remote File Inclusion Vulnerability Carsten Eilers (Mon Aug 14 2006 - 14:26:33 CDT)
• [EEYEB-20060719] McAfee Subscription Manager Stack Buffer Overflow eEye Advisories (Mon Aug 07 2006 - 17:09:36 CDT)
• Announcement: Feed Injection in Web 2.0: Hacking RSS and Atom Feed Implementations [Whitepaper] SPI Labs (Mon Aug 07 2006 - 15:28:54 CDT)
• [ GLSA 200608-13 ] ClamAV: Heap buffer overflow Matthias Geerdsen (Tue Aug 08 2006 - 09:01:42 CDT)
• ZDI-06-026: Microsoft Internet Explorer Multiple CSS Imports Memory Corruption Vulnerability zdi-disclosures3com.com (Tue Aug 08 2006 - 13:29:19 CDT)
• ZDI-06-027: Microsoft Internet Explorer CSS Class Ordering Memory Corruption Vulnerability zdi-disclosures3com.com (Tue Aug 08 2006 - 13:29:34 CDT)
• [SECURITY] [DSA 1145-1] New freeradius packages fix several vulnerabilities Moritz Muehlenhoff (Mon Aug 07 2006 - 18:29:07 CDT)
• Archangel Weblog 0.90.02 and prior Multiple HTML injections piiiiiii pppiiiiiiii (Tue Aug 08 2006 - 13:41:47 CDT)
• docpile:we v0.2.2 (INIT_PATH) Remote File Inclusion Vulnerability x0r0nhotmail.com (Tue Aug 08 2006 - 09:03:22 CDT)
• rPSA-2006-0147-1 mysql mysql-bench mysql-server Justin M. Forbes (Mon Aug 07 2006 - 17:11:58 CDT)
• phNNTP <= 1.3 (article-raw.php) Remote File Include Vulnerability tr_zindanwolfsecurity.org (Tue Aug 08 2006 - 12:13:35 CDT)
• Microsoft PowerPoint Malformed Record Memory Corruption Sowhat (Tue Aug 08 2006 - 15:16:51 CDT)
• [ GLSA 200608-14 ] DUMB: Heap buffer overflow Sune Kloppenborg Jeppesen (Tue Aug 08 2006 - 15:34:00 CDT)
• TSRT-06-07: eIQnetworks Enterprise Security Analyzer Monitoring Agent Buffer Overflow Vulnerabilities TSRT3com.com (Tue Aug 08 2006 - 13:00:38 CDT)
• unwrapping PL/SQL petepetefinnigan.com (Tue Aug 08 2006 - 10:39:51 CDT)
• MojoScripts' xss vulnerable tugraicqmail.com (Tue Aug 08 2006 - 09:33:13 CDT)
• MITKRB-SA-2006-001: multiple local privilege escalation vulnerabilities Tom Yu (Tue Aug 08 2006 - 14:08:58 CDT)
• AW: Virtual War v1.5.0 Remote File Include (vwar_root) Frank Reißner (Tue Aug 08 2006 - 07:54:53 CDT)
• ERRATA: [ GLSA 200608-08 ] GnuPG: Integer overflow vulnerability Sune Kloppenborg Jeppesen (Tue Aug 08 2006 - 14:11:57 CDT)
• rPSA-2006-0150-1 krb5 krb5-server krb5-services krb5-test krb5-workstation Justin M. Forbes (Wed Aug 09 2006 - 12:01:42 CDT)
• [Overflow.pl] Clam AntiVirus Win32-UPX Heap Overflow pucikoverflow.pl (Wed Aug 09 2006 - 10:18:05 CDT)
• SUSE Security Announcement: clamav (SUSE-SA:2006:046) Ludwig Nussel (Wed Aug 09 2006 - 09:49:20 CDT)
• PgMarket 2.2.3 (CFG[libdir]) Remote File Inclusion Vulnerabilities x0r0nhotmail.com (Wed Aug 09 2006 - 09:22:10 CDT)
• Latinchat Denial Of Service Vicente Perez (Wed Aug 09 2006 - 01:49:59 CDT)
• Assessment of Vista Kernel Mode Security ATR-Bugtraq (Wed Aug 09 2006 - 13:26:49 CDT)
• [SECURITY] [DSA 1146-1] New krb5 packages fix privilege escalation Martin Schulze (Wed Aug 09 2006 - 01:10:06 CDT)
• [ MDKSA-2006:138 ] - Updated clamav packages fix vulnerability securitymandriva.com (Tue Aug 08 2006 - 20:10:00 CDT)
• CivicSpace Version 0.8.5 HTML injection HeLiOsZ RooT (Tue Aug 08 2006 - 19:42:53 CDT)
• BlogHoster v2.2 Post Comment Html Injection piiiiiii pppiiiiiiii (Tue Aug 08 2006 - 15:44:55 CDT)
• Multiple buffer-overflows in AlsaPlayer 0.99.76 Luigi Auriemma (Wed Aug 09 2006 - 15:20:19 CDT)
• [ MDKSA-2006:139 ] - Updated krb5 packages fix local privilege escalation vulnerability securitymandriva.com (Wed Aug 09 2006 - 14:53:00 CDT)
• Cwfm <= 0.9.1 (Language) Remote File Inclusion Vulnerability philipp.niedzielagmx.de (Tue Aug 08 2006 - 15:13:08 CDT)
• Stack and heap overflows in MODPlug Tracker/OpenMPT 1.17.02.43 and libmodplug 0.8 Luigi Auriemma (Wed Aug 09 2006 - 15:46:51 CDT)
• [ISR] - Novell Groupwise Webaccess (Cross-Site Scripting) Francisco Amato (Tue Aug 08 2006 - 14:45:04 CDT)
• TSRT-06-10: Microsoft HLINK.DLL Hyperlink Object Library Buffer Overflow Vulnerability TSRT3com.com (Tue Aug 08 2006 - 14:17:47 CDT)
• TSRT-06-09: Microsoft DirectAnimation COM Object Memory Corruption Vulnerability TSRT3com.com (Tue Aug 08 2006 - 14:17:25 CDT)
• TSRT-06-08: Microsoft Internet Help COM Object Memory Corruption Vulnerability TSRT3com.com (Tue Aug 08 2006 - 14:16:54 CDT)
• [SECURITY] [DSA 1148-1] New gallery packages fix several vulnerabilities Moritz Muehlenhoff (Wed Aug 09 2006 - 16:27:02 CDT)
• [SECURITY] [DSA 1147-1] New drupal packages fix cross-site scripting Moritz Muehlenhoff (Wed Aug 09 2006 - 14:38:40 CDT)
• [USN-333-1] libwmf vulnerability Martin Pitt (Wed Aug 09 2006 - 04:14:41 CDT)
• [ MDKSA-2006:140 ] - Updated ncompress packages fix vulnerability securitymandriva.com (Wed Aug 09 2006 - 15:05:00 CDT)
• XChat <= 2.6.4-1 (win version) Remote Denial of Service Exploit (php) ratboy727gmail.com (Wed Aug 09 2006 - 18:28:10 CDT)
• PHPMyRing <= 4.2.0 (view_com.php) Remote SQL Injection simo64morx.org (Wed Aug 09 2006 - 22:10:00 CDT)
• Yabb XSS Outlawaria-security.net (Wed Aug 09 2006 - 23:13:34 CDT)
• TinyWebGallery v1.5 ( image ) Remote Include Vulnerability x0r0nhotmail.com (Thu Aug 10 2006 - 00:26:58 CDT)
  • Re: TinyWebGallery v1.5 ( image ) Remote Include Vulnerability tinywebgallerymdempfle.de (Wed Aug 16 2006 - 04:10:22 CDT)
• [SECURITY] [DSA 1149-1] New ncompress packages fix potential code execution Martin Schulze (Thu Aug 10 2006 - 00:33:16 CDT)
• Sending multipart/form-data requests from Flash (with arbitrary headers) Amit Klein (AKsecurity) (Thu Aug 10 2006 - 02:25:32 CDT)
• Directory Traversal vulnerability in IPCheck Monitor Server auuw73dsl.pipex.com (Thu Aug 10 2006 - 04:20:40 CDT)
  • Re: Directory Traversal vulnerability in IPCheck Monitor Server supportpaessler.com (Thu Aug 24 2006 - 11:33:22 CDT)
• CYBSEC - Security Pre-Advisory: SAP Internet Graphics Service (IGS) Remote Denial of Service Mariano Nuñez Di Croce (Thu Aug 10 2006 - 13:45:54 CDT)
• CYBSEC - Security Pre-Advisory: SAP Internet Graphics Service (IGS) Remote Buffer Overflow Mariano Nuñez Di Croce (Thu Aug 10 2006 - 13:47:14 CDT)
• PocketPC MMS - Remote Code Injection/Execution Vulnerability and Denial-of-Service Collin R. Mulliner (Thu Aug 10 2006 - 13:28:18 CDT)
• [ GLSA 200608-15 ] MIT Kerberos 5: Multiple local privilege escalation (test Falco for security<img src="/imgs/at.gif" border=0 align=middle>) Raphael Marichez (Thu Aug 10 2006 - 09:51:08 CDT)
• [ GLSA 200608-17 ] libwmf: Buffer overflow vulnerability Sune Kloppenborg Jeppesen (Thu Aug 10 2006 - 14:12:17 CDT)
• [ GLSA 200608-18 ] Net::Server: Format string vulnerability Sune Kloppenborg Jeppesen (Thu Aug 10 2006 - 14:50:55 CDT)
• [ GLSA 200608-16 ] Warzone 2100 Resurrection: Multiple buffer overflows Sune Kloppenborg Jeppesen (Thu Aug 10 2006 - 14:09:24 CDT)
• Mambo/Joomla Component Remository v3.25 (mosConfig_absolute_path) Remote File Inclusion Vulnerability caminosexmagnet.com (Thu Aug 10 2006 - 05:21:42 CDT)
• Netgear FVG318 is vunerable to DOS attack rootlocalhost.com (Thu Aug 10 2006 - 03:46:57 CDT)
• Mafia Moblog <= 6 (pathtotemplate) Remote File Inclusion Vulnerability sh3llsh3ll.ir (Thu Aug 10 2006 - 08:06:23 CDT)
  • Re: Mafia Moblog <= 6 (pathtotemplate) Remote File Inclusion Vulnerability nonamenodomain.com (Fri Aug 11 2006 - 16:32:13 CDT)
• InfanView 3.98 (with plugins) - Access violation at processing images ANI files sehatoyandex.ru (Wed Aug 09 2006 - 15:17:03 CDT)
• myBloggie <= 2.1.3 (mybloggie_root_path) Remote File Inclusion Vulnerability sh3llsh3ll.ir (Wed Aug 09 2006 - 13:14:15 CDT)
  • Re: myBloggie <= 2.1.3 (mybloggie_root_path) Remote File Inclusion Vulnerability nukedxnukedx.com (Sat Aug 12 2006 - 10:54:09 CDT)
  • Re: Re: myBloggie <= 2.1.3 (mybloggie_root_path) Remote File Inclusion Vulnerability istgharofonianx.net (Sat Aug 12 2006 - 17:25:58 CDT)
• Compersus ASP shopping cart <= DataBase Downloading vuln. mfoxhackergmail.com (Wed Aug 09 2006 - 11:05:00 CDT)
• Virtual War v1.5.0 <= Sql Injection vuln. mfoxhackergmail.com (Wed Aug 09 2006 - 10:55:47 CDT)
• XennoBB <= "avatar gallery" Directory Transversal c.boultonmybboard.com (Wed Aug 09 2006 - 10:53:19 CDT)
• CGI Script Source Code Disclosure Vulnerability in Apache for Windows susam.palgmail.com (Wed Aug 09 2006 - 05:15:42 CDT)
  • Re: CGI Script Source Code Disclosure Vulnerability in Apache for Windows Joe Orton (Wed Aug 16 2006 - 04:15:44 CDT)
  • Re: Re: CGI Script Source Code Disclosure Vulnerability in Apache for Windows nareshhackergmail.com (Thu Aug 17 2006 - 02:35:19 CDT)
• Simple one-file GuestBook 1.0 omnipresentemail.it (Wed Aug 09 2006 - 08:10:49 CDT)
• Dragonfly CMS 9.0.6.1 and prior XSS HeLiOsZ RooT (Wed Aug 09 2006 - 08:32:52 CDT)
• Security Contact Sean Warnock (Mon Aug 07 2006 - 13:02:36 CDT)
• RE: [Full-disclosure] RE: when will AV vendors fix this??? Thomas D. (Mon Aug 07 2006 - 15:45:10 CDT)
  • RE: [Full-disclosure] RE: when will AV vendors fix this??? Dmitry Yu. Bolkhovityanov (Fri Aug 11 2006 - 03:07:28 CDT)
• Bypassing script filters with variable-width encodings Cheng Peng Su (Mon Aug 07 2006 - 21:22:06 CDT)
• XSSing the Lan 3 (web trojans.. not a new idea) pdp (architect) (Tue Aug 08 2006 - 08:18:45 CDT)
• Security Vulnerability in Ruby on Rails 1.1.x michaelkoziarski.com (Thu Aug 10 2006 - 21:50:48 CDT)
• [security bulletin] HPSBUX02108 SSRT061133 rev.14 - HP-UX Running Sendmail, Remote Execution of Arbitrary Code security-alerthp.com (Fri Aug 11 2006 - 05:21:55 CDT)
• [security bulletin] HPSBUX02124 SSRT061159 rev.2 - HP-UX Sendmail MIME Remote Denial of Service (DoS) security-alerthp.com (Fri Aug 11 2006 - 05:22:54 CDT)
• TSLSA-2006-0046 - multi Trustix Security Advisor (Fri Aug 11 2006 - 09:24:27 CDT)
• miniBloggie <= 1.0 (fname) Remote File Inclusion Vulnerability sh3llsh3ll.ir (Thu Aug 10 2006 - 15:38:38 CDT)
  • Re: miniBloggie <= 1.0 (fname) Remote File Inclusion Vulnerability Carsten Eilers (Sun Aug 13 2006 - 07:31:44 CDT)
• [ GLSA 200608-19 ] WordPress: Privilege escalation Raphael Marichez (Thu Aug 10 2006 - 15:47:36 CDT)
• Startpage <= 1.0 (cfgLanguage) Remote File Inclusion Vulnerability sh3llsh3ll.ir (Thu Aug 10 2006 - 15:53:46 CDT)
  • Re: Startpage <= 1.0 (cfgLanguage) Remote File Inclusion Vulnerability Carsten Eilers (Sun Aug 13 2006 - 07:31:44 CDT)
  • Re: Startpage <= 1.0 (cfgLanguage) Remote File Inclusion Vulnerability nonamenodomain.com (Fri Aug 11 2006 - 16:42:29 CDT)
  • Re: Startpage <= 1.0 (cfgLanguage) Remote File Inclusion Vulnerability securityfocusdraijer.org (Sun Aug 20 2006 - 06:01:27 CDT)
• rPSA-2006-0152-1 squirrelmail Justin M. Forbes (Fri Aug 11 2006 - 13:55:16 CDT)
• WEBInsta Mailing list manager (cabsolute_path) 1.3e RFI philipp.niedzielagmx.de (Thu Aug 10 2006 - 16:07:46 CDT)
• wheatblog &#1615;Session.php Remote File Inclusion Outlawaria-security.net (Fri Aug 11 2006 - 03:43:48 CDT)
• UPDATE: [ GLSA 200511-12 ] Scorched 3D: Multiple vulnerabilities Raphael Marichez (Fri Aug 11 2006 - 03:59:04 CDT)
• VWar <= 1.50 R14 (n) Remote SQL Injection brom0815gmx.de (Fri Aug 11 2006 - 04:46:47 CDT)
• Nokia Browser Crash qodeqode.org (Fri Aug 11 2006 - 06:50:31 CDT)
• SquirrelMail 1.4.8 released - fixes variable overwriting attack Thijs Kinkhorst (Fri Aug 11 2006 - 07:26:09 CDT)
• Re: [SM-ANNOUNCE] SquirrelMail 1.4.8 released - fixes variable overwriting attack Yves Goergen (Fri Aug 11 2006 - 08:23:11 CDT)
  • Re: [SM-ANNOUNCE] SquirrelMail 1.4.8 released - fixes variable overwriting attack Allie Daneman (Fri Aug 11 2006 - 20:21:30 CDT)
• Calendarix <= 0.7 (calpath) Remote File Inclusion Vulnerability sh3llsh3ll.ir (Sat Aug 12 2006 - 04:59:20 CDT)
  • Re: Calendarix <= 0.7 (calpath) Remote File Inclusion Vulnerability Carsten Eilers (Sun Aug 13 2006 - 07:31:44 CDT)
  • Re: Calendarix <= 0.7 (calpath) Remote File Inclusion Vulnerability Steven M. Christey (Mon Aug 14 2006 - 16:54:59 CDT)
  • Re: Calendarix <= 0.7 (calpath) Remote File Inclusion Vulnerability Carsten Eilers (Tue Aug 15 2006 - 03:59:01 CDT)
• myEvent <= 1.4 Multiple Remote File Include Vulnerabilities sh3llsh3ll.ir (Sat Aug 12 2006 - 05:03:15 CDT)
  • Re: myEvent <= 1.4 Multiple Remote File Include Vulnerabilities Carsten Eilers (Sun Aug 13 2006 - 07:31:44 CDT)
• Concurrency-related vulnerabilities in browsers - expect problems Michal Zalewski (Sat Aug 12 2006 - 11:15:12 CDT)
  • Re: Concurrency-related vulnerabilities in browsers - expect problems Michal Zalewski (Tue Aug 15 2006 - 14:41:48 CDT)
  • Re: Concurrency-related vulnerabilities in browsers - expect problems mannionsnet.net (Thu Aug 17 2006 - 12:20:43 CDT)
  • Re: Concurrency-related vulnerabilities in browsers - expect problems Michal Zalewski (Fri Aug 18 2006 - 16:36:17 CDT)
• [SECURITY] [DSA 1150-1] New shadow packages fix privilege escalation Martin Schulze (Sat Aug 12 2006 - 11:50:24 CDT)
  • Re: [SECURITY] [DSA 1150-1] New shadow packages fix privilege escalation Henry Jensen (Sun Aug 20 2006 - 21:46:40 CDT)
• Microsoft Help (WINHLP32.EXE) - Multiple Remote Code Execution and Denial Of Service Vulnerabilities Benjamin Tobias Franz (Sat Aug 12 2006 - 12:23:55 CDT)
  • Re: Microsoft Help (WINHLP32.EXE) - Multiple Remote Code Execution and Denial Of Service Vulnerabilities Reversemode (Sat Aug 12 2006 - 14:54:41 CDT)
• Forum Software ASPPlayground.NET Advanced Edition 2.4.5 Unicode Xss blood2_20032003yahoo.com (Fri Aug 11 2006 - 10:26:24 CDT)
• (Security Advisory) SYM06-014 Symantec Backup Exec Internal RPC Overflow Secure (Fri Aug 11 2006 - 16:19:56 CDT)
• ScatterChat Advisory 2006-01: Cryptanalytic Attack Vulnerability ScatterChat Advisories (Fri Aug 11 2006 - 09:25:52 CDT)
• Multiple buffer-overflows in libmusicbrainz 2.1.2 Luigi Auriemma (Sun Aug 13 2006 - 10:59:15 CDT)
• Re: TSRT-06-02: Microsoft SRV.SYS Mailslot Ring0 Memory Corruption Vulnerability publicfrank4dd.com (Mon Aug 14 2006 - 09:44:39 CDT)
  • Re: TSRT-06-02: Microsoft SRV.SYS Mailslot Ring0 Memory Corruption Vulnerability Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] (Mon Aug 14 2006 - 11:44:07 CDT)
  • Re: Re: TSRT-06-02: Microsoft SRV.SYS Mailslot Ring0 Memory Corruption Vulnerability mrsimla.colostate.edu (Mon Aug 14 2006 - 11:41:19 CDT)
• Informix - Discovery, Attack and Defense David Litchfield (Mon Aug 14 2006 - 11:20:04 CDT)
• Informix Long Username Buffer Overflow Vulnerability NGSSoftware Insight Security Research (Mon Aug 14 2006 - 11:22:04 CDT)
• Error logging buffer overflow in Informix NGSSoftware Insight Security Research (Mon Aug 14 2006 - 11:22:38 CDT)
• [ECHO_ADV_45$2006] WEBinsta CMS 0.3.1 (templates_dir) Remote File Inclusion Vulnerability erdcecho.or.id (Sun Aug 13 2006 - 20:13:52 CDT)
• Google Picasa Listening on Port 80? Geoff Vass (Fri Aug 11 2006 - 07:28:29 CDT)
  • RE: Google Picasa Listening on Port 80? Kameron Gasso (Mon Aug 14 2006 - 15:47:17 CDT)
• SQLIDEBUG envariable overflow on Informix NGSSoftware Insight Security Research (Mon Aug 14 2006 - 11:25:12 CDT)
• XMB <= 1.9.6 Final basename()/'langfilenew' arbitrary local inclusion / remote commands execution rgodautistici.org (Sun Aug 13 2006 - 13:59:47 CDT)
• Re: Yabb XSS - or NOT Volker Tanger (Sun Aug 13 2006 - 16:56:03 CDT)
• BlaBla 4U XSS Vulnerabilite vampire_chiristofyahoo.com (Mon Aug 14 2006 - 10:06:22 CDT)
• Virtual War v1.5.0 SQL injection and XSS vampire_chiristofyahoo.com (Mon Aug 14 2006 - 10:01:48 CDT)
• JavaScript get Internal Address (thanks to DanBUK) pdp (architect) (Sat Aug 12 2006 - 03:55:02 CDT)
• HPSBMA02138 SSRT061184 rev.1 - HP OpenView Storage Data Protector, Remote Arbitrary Command Execution security-alerthp.com (Mon Aug 14 2006 - 04:22:46 CDT)
• Kaspersky Anti-Hacker personal firewall unstealthy stealth mode tbratusagmail.com (Sat Aug 12 2006 - 04:52:49 CDT)
• Wordpress WP-DB Backup Plugin Directory Traversal Vulnerability ss_team (Mon Aug 14 2006 - 03:36:03 CDT)
• Arbitrary Library Loading in Informix NGSSoftware Insight Security Research (Mon Aug 14 2006 - 11:23:29 CDT)
• Multiple Arbitrary Command Execution Vulnerabilities NGSSoftware Insight Security Research (Mon Aug 14 2006 - 11:24:47 CDT)
• InfanView 3.98 (with plugins) - Access violation at processing images CUR files sehatoyandex.ru (Sat Aug 12 2006 - 15:07:28 CDT)
• Re: [SM-ANNOUNCE] SquirrelMail 1.4.8 released - fixes variable overwriting attack Michael Engert (Sat Aug 12 2006 - 07:25:54 CDT)
• Technical note: under some conditions, it's possible to steal HTTP credentials using Flash Amit Klein (AKsecurity) (Mon Aug 14 2006 - 13:52:45 CDT)
• Unauthorized Database Creation Privilege on Informix NGSSoftware Insight Security Research (Mon Aug 14 2006 - 11:25:36 CDT)
• Local privilege Escalation in SmartLine DeviceLock 5.73 seppiseppig.de (Sun Aug 13 2006 - 05:26:26 CDT)
• Multiple Password Exposures Flaws NGSSoftware Insight Security Research (Mon Aug 14 2006 - 11:24:22 CDT)
• osDate 1.1.8 - Multiple HTML Injection Vulnerability - fixed vijaynairvijay.com (Sat Aug 12 2006 - 22:56:10 CDT)
• RE: ANNOUNCING: 3rd Annual US OWASP AppSec Conference - Oct 16-18 2006 - Seattle, WA Dave Wichers (Sun Aug 13 2006 - 17:39:35 CDT)
• Peoplebook Mambo Component <= v1.0 Remote File Include Vulnerabilities matdhulegmail.com (Mon Aug 14 2006 - 04:49:41 CDT)
• [Overflow.pl] ImageMagick ReadSGIImage() Heap Overflow Damian Put (Mon Aug 14 2006 - 12:45:16 CDT)
• (somewhat) breaking the same-origin policy by undermining dns-pinning Martin Johns (Mon Aug 14 2006 - 11:07:31 CDT)
• Multiple Buffer Overflow Vulnerabilities in Informix NGSSoftware Insight Security Research (Mon Aug 14 2006 - 11:23:57 CDT)
• Joomla Webring Component (component_dir) Remote File Inclusion Vulnerabilities x0r0nhotmail.com (Sun Aug 13 2006 - 11:43:40 CDT)
• [ GLSA 200608-20 ] Ruby on Rails: Several vulnerabilities Raphael Marichez (Mon Aug 14 2006 - 09:58:44 CDT)
• Multiple Arbitrary File Access (Write/Read) Vulnerabilities NGSSoftware Insight Security Research (Mon Aug 14 2006 - 11:25:58 CDT)
• Opera 9 Remote Denial of Service NNP (Sun Aug 13 2006 - 18:07:34 CDT)
• Security contact from Critical Path Inc Guillermo Marro (Mon Aug 14 2006 - 13:39:35 CDT)
  • RE: Security contact from Critical Path Inc Tony Maupin (Tue Aug 15 2006 - 01:45:04 CDT)
• [ MDKSA-2006:142 ] - Updated heartbeat packages fix vulnerability securitymandriva.com (Mon Aug 14 2006 - 17:08:00 CDT)
• [ MDKSA-2006:141 ] - Updated gnupg packages fix vulnerability securitymandriva.com (Mon Aug 14 2006 - 16:42:00 CDT)
• Mailslot bug (MS06-035) vs non-Mailslot bug (CVE-2006-3942) Gerardo Richarte (Mon Aug 14 2006 - 18:12:20 CDT)
  • RE: Mailslot bug (MS06-035) vs non-Mailslot bug (CVE-2006-3942) Marc Maiffret (Thu Aug 17 2006 - 20:40:34 CDT)
  • Re: Mailslot bug (MS06-035) vs non-Mailslot bug (CVE-2006-3942) naveed (Tue Aug 15 2006 - 17:54:40 CDT)
• local file include in PHP-Nuke (autohtml.php) MosT3mRhotmail.com (Tue Aug 15 2006 - 10:00:04 CDT)
• [XSec-06-02]: Internet Explorer (IMSKDIC.DLL) COM Object Instantiation Vulnerability nop (Tue Aug 15 2006 - 10:15:56 CDT)
• Koobi Pro CMS 5.6 SQL injection & XSS vampire_chiristofyahoo.com (Tue Aug 15 2006 - 05:54:28 CDT)
• [XSec-06-03]: Internet Explorer (CHTSKDIC.DLL) COM Object Instantiation Vulnerability nop (Tue Aug 15 2006 - 10:26:58 CDT)
• [SECURITY] [DSA 1151-1] New heartbeat packages fix denial of service Martin Schulze (Tue Aug 15 2006 - 02:56:46 CDT)
• [security bulletin] HPSBUX02141 SSRT51153 rev.1 - HP-UX in Trusted mode, Local Denial of Service (DoS) security-alerthp.com (Tue Aug 15 2006 - 12:00:04 CDT)
• Lizge V.20 Web Portal File Include Vulnerability crackers_childsibersavascilar.com (Tue Aug 15 2006 - 14:24:51 CDT)
• otopholder 1.8 suffers from a local file inclusion,XSS and directory listing vuln vampire_chiristofyahoo.com (Tue Aug 15 2006 - 05:43:38 CDT)
• fusionnews 3,7 Remote File Inclusion Outlawaria-security.net (Tue Aug 15 2006 - 03:57:18 CDT)
• CORE-2006-0714: Microsoft SRV.SYS SMB_COM_TRANSACTION Denial of Service Core Security Technologies advisories (Mon Aug 14 2006 - 17:54:40 CDT)
• [XSec-06-04]: Internet Explorer (msoe.dll) COM Object Instantiation Vulnerability nop (Tue Aug 15 2006 - 10:49:23 CDT)
• [USN-334-1] krb5 vulnerabilities Martin Pitt (Wed Aug 16 2006 - 02:47:28 CDT)
• [XSec-06-05]: VMware 5.5.1 for Windows arbitrary partition table delete issue. root (Wed Aug 16 2006 - 03:38:25 CDT)
• Mambo com_lm component (archive.php) Remote File Include Vulnerabilities crackers_childsibersavascilar.com (Wed Aug 16 2006 - 04:36:11 CDT)
• [USN-335-1] heartbeat vulnerability Martin Pitt (Wed Aug 16 2006 - 07:39:51 CDT)
• [scip_Advisory 2456] Horde Framework and Horde IMP /index.php cross site referencing Marc Ruef (Wed Aug 16 2006 - 08:51:00 CDT)
• [scip_Advisory 2457] Horde Framework and Horde IMP /horde/imp/search.php cross site scripting Marc Ruef (Wed Aug 16 2006 - 08:51:14 CDT)
• MS Terminal Server application session breakout pedantic1gmail.com (Wed Aug 16 2006 - 11:56:03 CDT)
  • Re: MS Terminal Server application session breakout Thor (Hammer of God) (Wed Aug 16 2006 - 17:20:07 CDT)
• ShockwaveFlash 9 (Stack overflow) Mr.Niegagmail.com (Wed Aug 16 2006 - 08:35:20 CDT)
• [security bulletin] HPSBUX02115 SSRT061077 rev.2 - HP-UX running Support Tools Manager (xstm, cstm, stm) Local Denial of Service (DoS) security-alerthp.com (Wed Aug 16 2006 - 14:32:03 CDT)
• Technical note by Amit Klein: "Sending arbitrary HTTP requests with Flash 7/8 (+IE 6.0)" Amit Klein (AKsecurity) (Wed Aug 16 2006 - 15:33:27 CDT)
• [ MDKSA-2006:143 ] - Updated Firefox packages fix multiple vulnerabilities securitymandriva.com (Wed Aug 16 2006 - 15:51:00 CDT)
• SYM06-16 Symantec NetBackup PureDisk Remote Office Edition Elevation of Privilege Mike Prosser (Wed Aug 16 2006 - 14:57:17 CDT)
  • Re: SYM06-16 Symantec NetBackup PureDisk Remote Office Edition Elevation of Privilege securesymantec.com (Thu Aug 17 2006 - 13:10:44 CDT)
• Reporter Mambo Component Remote File &#304;nclude crackers_childsibersavascilar.com (Wed Aug 16 2006 - 11:50:09 CDT)
• Re: [Overflow.pl] ImageMagick ReadSGIImage() Heap Overflow Daniel Kobras (Wed Aug 16 2006 - 11:32:03 CDT)
• discloser 0.0.4 Remote File Inclusion (with Exploit) dr.t3rr0r1styahoo.com (Wed Aug 16 2006 - 16:51:24 CDT)
  • Re: discloser 0.0.4 Remote File Inclusion (with Exploit) Carsten Eilers (Thu Aug 17 2006 - 15:04:12 CDT)
  • Re: discloser 0.0.4 Remote File Inclusion (with Exploit) Carsten Eilers (Sat Aug 19 2006 - 02:39:08 CDT)
  • Re: Re: discloser 0.0.4 Remote File Inclusion (with Exploit) dr.t3rr0r1styahoo.com (Thu Aug 17 2006 - 16:14:13 CDT)
• [USN-337-1] imagemagick vulnerability Martin Pitt (Thu Aug 17 2006 - 01:21:57 CDT)
• [EEYEB-20060703] IBM eGatherer ActiveX Code Execution Vulnerability eEye Advisories (Wed Aug 16 2006 - 18:21:11 CDT)
• Registration Now Open!: Security OPUS Infosec Conference - Oct 2-5 2006 - San Francisco, CA Richard Lindberg (Thu Aug 17 2006 - 07:50:05 CDT)
• [USN-336-1] binutils vulnerability Martin Pitt (Thu Aug 17 2006 - 01:21:33 CDT)
• CubeCart <= 3.0.11 SQL injection & cross site scripting rgodautistici.org (Thu Aug 17 2006 - 00:15:05 CDT)
• [XSec-06-06]: Windows 2003 (tsuserex.dll) COM Object Instantiation Vulnerability nop (Thu Aug 17 2006 - 12:36:51 CDT)
• Re: [VulnWatch] Re: Concurrency-related vulnerabilities in browsers - expect problems Steven M. Christey (Thu Aug 17 2006 - 13:04:33 CDT)
  • Re: [VulnWatch] Re: Concurrency-related vulnerabilities in browsers - expect problems Michal Zalewski (Thu Aug 17 2006 - 17:35:15 CDT)
• World Summit on Intrusion Prevention wsipunatek.com (Thu Aug 17 2006 - 09:16:29 CDT)
• UPDATED: MITKRB5-SA-2006-001: multiple local privilege escalation vulnerabilities Tom Yu (Wed Aug 16 2006 - 17:38:59 CDT)
• RE: [VulnWatch] Re: Concurrency-related vulnerabilities in browsers - expect problems Michael Wojcik (Thu Aug 17 2006 - 15:09:13 CDT)
• powergap <= (s0x.php) Remote File Inclusion saudi.unixhotmail.com (Thu Aug 17 2006 - 08:04:36 CDT)
• [security bulletin] HPSBUX02139 SSRT5981 rev.1 - HP-UX Running the LP Subsystem, remote Denial of Service (DoS) security-alerthp.com (Thu Aug 17 2006 - 05:52:09 CDT)
• [ MDKSA-2006:143-1 ] - Updated Firefox packages fix multiple vulnerabilities securitymandriva.com (Thu Aug 17 2006 - 16:42:00 CDT)
• [XSec-06-07]: Visual Studio 6.0 Multiple COM Object Instantiation Vulnerability nop (Thu Aug 17 2006 - 13:02:45 CDT)
• ToorCon 8 Call for Papers Closing Tomorrow & Workshops/Seminars Added h1karitoorcon.org (Thu Aug 17 2006 - 17:28:53 CDT)
• Secunia Research: AOL Insecure Default Directory Permissions Jakob Balle (Fri Aug 18 2006 - 08:26:46 CDT)
• mtg_myhomepage Component For Mambo R.F.I Outlawaria-security.net (Thu Aug 17 2006 - 23:29:43 CDT)
  • Re: mtg_myhomepage Component For Mambo R.F.I Carsten Eilers (Fri Aug 18 2006 - 17:51:50 CDT)
• Joomla x-shop <= 1.7 Remote File Include Vulnerability crackers_childsibersavascilar.com (Fri Aug 18 2006 - 05:04:39 CDT)
  • Re: Joomla x-shop <= 1.7 Remote File Include Vulnerability Carsten Eilers (Fri Aug 18 2006 - 17:51:50 CDT)
• anjel Mambo Component Remote File Include crackers_childsibersavascilar.com (Thu Aug 17 2006 - 16:09:36 CDT)
  • Re: anjel Mambo Component Remote File Include Carsten Eilers (Fri Aug 18 2006 - 17:51:50 CDT)
• Joomla Rssxt <= 1.0 Remote File Include Vulnerability crackers_childsibersavascilar.com (Fri Aug 18 2006 - 04:46:12 CDT)
  • Re: Joomla Rssxt <= 1.0 Remote File Include Vulnerability Carsten Eilers (Fri Aug 18 2006 - 17:51:51 CDT)
• [SECURITY] [DSA 1152-1] New trac packages fix information disclosure Martin Schulze (Fri Aug 18 2006 - 04:19:29 CDT)
• mambo-phphop Product Scroller Module R.F.I Outlawaria-security.net (Thu Aug 17 2006 - 23:29:06 CDT)
  • Re: mambo-phphop Product Scroller Module R.F.I Carsten Eilers (Fri Aug 18 2006 - 17:51:50 CDT)
• Norton DLL faking via 'SuiteOwners' protection bypass Vulnerability David Matousek (Fri Aug 18 2006 - 11:07:35 CDT)
• [KAPDA::#55] - Joomla poll component vulnerability alireza hassani (Fri Aug 18 2006 - 11:37:28 CDT)
• Mambo jim Component Remote Include Vulnerability x0r0nhotmail.com (Thu Aug 17 2006 - 15:56:10 CDT)
• Re: [Full-disclosure] RE: when will AV vendors fix this??? Paul Schmehl (Mon Aug 14 2006 - 15:23:44 CDT)
  • Re: [Full-disclosure] RE: when will AV vendors fix this??? Bipin Gautam (Tue Aug 15 2006 - 10:22:39 CDT)
• Multiple xxs cPanel 10 preth00nkergmail.com (Tue Aug 15 2006 - 22:48:51 CDT)
• Re: [Full-disclosure] Re: when will AV vendors fix this??? Paul Schmehl (Mon Aug 14 2006 - 15:33:15 CDT)
• UPDATE vBulletin Version 3.5.4 exploit dicomdkgmail.com (Mon Aug 14 2006 - 20:08:01 CDT)
  • Re: UPDATE vBulletin Version 3.5.4 exploit scottvbulletin.com (Fri Aug 18 2006 - 15:40:11 CDT)
• Registration Now Open!: 3rd Annual US OWASP AppSec Conference - Oct 16-18 2006 - Seattle, WA Dave Wichers (Wed Aug 16 2006 - 14:19:39 CDT)
• OneOrZero Helpdesk V1.6.4.1 susceptible to SQL injection and XSS vampire_chiristofyahoo.com (Tue Aug 15 2006 - 05:57:33 CDT)
• JavaScript Lazy Authorization Forcer and Visited Link Scaner pdp (architect) (Tue Aug 15 2006 - 16:55:52 CDT)
  • Re: JavaScript Lazy Authorization Forcer and Visited Link Scaner mikeiscool (Tue Aug 15 2006 - 23:08:15 CDT)
• contentpublisher Mambo Component Remote File Include Vulnerabilities crackers_childsibersavascilar.com (Thu Aug 17 2006 - 15:38:57 CDT)
  • Re: contentpublisher Mambo Component Remote File Include Vulnerabilities Carsten Eilers (Wed Aug 23 2006 - 17:51:34 CDT)
• Mambo mambelfish Component <= 1.1 Remote File Include Vulnerability bilkopathotmail.com (Thu Aug 17 2006 - 15:58:25 CDT)
• [SECURITY] [DSA 1153-1] New ClamAV packages fix arbitrary code execution Martin Schulze (Fri Aug 18 2006 - 12:39:44 CDT)
• Joomla Kochsuite Component <= 0.9.4 (config.kochsuite.php) Remote File Inclusion Vulnerability caminosexmagnet.com (Fri Aug 18 2006 - 11:39:27 CDT)
• Joomla MamboWiki Component <= 0.9.4 (MamboLogin.php) Remote File Inclusion Vulnerability caminosexmagnet.com (Fri Aug 18 2006 - 12:30:08 CDT)
• Joomla RF&#304; ( ERNE ) erneernealizm.com (Thu Aug 17 2006 - 15:44:04 CDT)
  • Re: Joomla RF&#304; ( ERNE ) Carsten Eilers (Wed Aug 23 2006 - 17:51:34 CDT)
• Sonium Enterprise Adressbook Version 0.2 (folder) RFI philipp.niedzielagmx.de (Fri Aug 18 2006 - 14:16:20 CDT)
• Modification For OpenSEF Remote file Inclusion Outlawaria-security.net (Fri Aug 18 2006 - 20:18:24 CDT)
  • Re: Modification For OpenSEF Remote file Inclusion Carsten Eilers (Wed Aug 23 2006 - 17:51:34 CDT)
• Ako Comments (mod) Remote File Inclusion Outlawaria-security.net (Sat Aug 19 2006 - 03:16:57 CDT)
• [Kurdish Security # 23] Spaw Editor Remote Include Vulnerability botanlinuxmail.org (Sat Aug 19 2006 - 10:38:53 CDT)
• Mambo CatalogShop Remote File Inclusion Outlawaria-security.net (Sat Aug 19 2006 - 15:08:39 CDT)
• Mambo com_cropimage 1.0 Component Remote Include Vulnerability x0r0nhotmail.com (Sat Aug 19 2006 - 15:19:24 CDT)
• XennoBB <= 2.2.1 "icon_topic" SQL Injection c.boultonmybboard.com (Sat Aug 19 2006 - 02:35:01 CDT)
• POC & exploit for Apache mod_rewrite off-by-one Jacobo Avariento (Sun Aug 20 2006 - 10:06:02 CDT)
• LBlog <= "comments.asp" SQL Injection Exploit ChironeX.FleckeriXGmail.Com (Sun Aug 20 2006 - 10:07:20 CDT)
• WoltLab Burning Board 2.3.5(WBB) in XSS ZeberuSZeberuS.Com (Sun Aug 20 2006 - 12:22:53 CDT)
• [SECURITY] [DSA 1154-1] New squirrelmail packages fix information disclosure Moritz Muehlenhoff (Sun Aug 20 2006 - 17:10:12 CDT)
• New PowerPoint 0-day and Trojan - FAQ document ready Juha-Matti Laurio (Sun Aug 20 2006 - 18:20:42 CDT)
• [XSec-06-08]: Windows 2000 Multiple COM Object Instantiation Vulnerability nop (Mon Aug 21 2006 - 09:59:56 CDT)
• Mambo Component - Display MOSBot Manager Remote File Inclusion Vuln Outlawaria-security.net (Sat Aug 19 2006 - 20:55:01 CDT)
  • Re: Mambo Component - Display MOSBot Manager Remote File Inclusion Vuln Jan de Groot (Mon Aug 21 2006 - 14:23:56 CDT)
• Mambo Component - Display MOSBot Manager Remote File Inclusion Vuln Outlawaria-security.net (Sat Aug 19 2006 - 20:01:23 CDT)
• DoS 2wire Gateway preth00nkergmail.com (Sat Aug 19 2006 - 20:00:41 CDT)
• Mambo Component - EstateAgent Remote File Inclusion Outlawaria-security.net (Sat Aug 19 2006 - 21:02:16 CDT)
  • Re: Mambo Component - EstateAgent Remote File Inclusion Carsten Eilers (Wed Aug 23 2006 - 17:51:34 CDT)
• [XSec-06-09]: Internet Explorer Multiple COM Objects Color Property DoS Vulnerability nop (Mon Aug 21 2006 - 13:06:38 CDT)
• ToendaCMS <= 1.0.3 -(tcms_administer_site) Remote File Include h4ck3riranyahoo.com (Sun Aug 20 2006 - 02:52:31 CDT)
  • Re: ToendaCMS <= 1.0.3 -(tcms_administer_site) Remote File Include Carsten Eilers (Wed Aug 23 2006 - 17:51:34 CDT)
• SimpleBlog 2.0 <= "comments.asp" SQL Injection Exploit ChironeX.FleckeriXGmail.Com (Sun Aug 20 2006 - 09:04:23 CDT)
• Diesel Job Site forgot.php Cross-Site Scripting night_warrior-hotmail.com (Mon Aug 21 2006 - 08:13:14 CDT)
• Diesel Paid Mail getad.php Cross-Site Scripting Vulnerability night_warrior-hotmail.com (Mon Aug 21 2006 - 08:13:46 CDT)
• Smart Traffic Remote File Include Vulnerability night_warrior-hotmail.com (Mon Aug 21 2006 - 08:14:03 CDT)
• DieselPay &#304;ndex.php Cross-Site Scripting Vulnerability night_warrior-hotmail.com (Mon Aug 21 2006 - 08:14:18 CDT)
• [ MDKSA-2006:144 ] - Updated php packages fix vulnerability securitymandriva.com (Mon Aug 21 2006 - 16:59:00 CDT)
• [ MDKSA-2006:145 ] - Updated Firefox packages fix multiple vulnerabilities securitymandriva.com (Mon Aug 21 2006 - 19:23:00 CDT)
• MDaemon POP3 server remote buffer overflow (preauth) infocus (Tue Aug 22 2006 - 03:32:23 CDT)
• [ MDKSA-2006:146 ] - Updated Thunderbird packages fix multiple vulnerabilities securitymandriva.com (Mon Aug 21 2006 - 19:39:00 CDT)
• TTG0601 - Alt-N WebAdmin Multiple Vulnerabilities TTG (Mon Aug 21 2006 - 18:28:27 CDT)
• Vendor Statement: fixed Mobotix IP Network Cameras Multiple XSS bug dkabsmobotix.com (Tue Aug 22 2006 - 03:31:56 CDT)
• Simpliciti Locked Browser Jail Breakout Vulnerability dcsimpliciti.biz (Tue Aug 22 2006 - 11:35:43 CDT)
• EEYE:ALERT: MS06-042 Related Internet Explorer 'Crash' is Exploitable Marc Maiffret (Tue Aug 22 2006 - 15:33:39 CDT)
• Major updates in PowerPoint FAQ document - not a 0-day issue Juha-Matti Laurio (Tue Aug 22 2006 - 16:00:10 CDT)
• Simple Machines Forum <=1.1RC2 unset() vulnerabilities rgodautistici.org (Tue Aug 22 2006 - 12:15:47 CDT)
• unauthorized VNC access in AK-Systems Windows Terminals Victor Sudakov (Tue Aug 22 2006 - 04:11:05 CDT)
• (exploit) firefox 1.5.0.6 linux DoS tomas (Tue Aug 22 2006 - 03:20:55 CDT)
• Linux Kernel SCTP Privilege Elevation Vulnerability Avertavertlabs.com (Tue Aug 22 2006 - 17:23:10 CDT)
• Tons of SQL-injections and XSS in Eichhorn Portal and vendor page MC Iglo (Sun Aug 20 2006 - 06:10:02 CDT)
• Symantec Enterprise Security Manager Denial-of-Service Vulnerability Avertavertlabs.com (Tue Aug 22 2006 - 16:56:54 CDT)
• PHlyMail Lite [PM_[path][lib]=] Remote File Include Vulnerability D3nGeRGmail.CoM (Fri Aug 18 2006 - 16:52:51 CDT)
  • Re: PHlyMail Lite [PM_[path][lib]=] Remote File Include Vulnerability Carsten Eilers (Wed Aug 23 2006 - 17:51:34 CDT)
• PHProjekt v0.6.1 Remote File Inclusion Vulnerability (2) D3nGeRGmail.CoM (Mon Aug 21 2006 - 14:26:55 CDT)
  • Re: PHProjekt v0.6.1 Remote File Inclusion Vulnerability (2) Carsten Eilers (Wed Aug 23 2006 - 17:51:34 CDT)
• BlackBoard Multiple Vulnerabilities (XSS) Pr070ngmail.com (Tue Aug 22 2006 - 16:40:43 CDT)
  • Re: BlackBoard Multiple Vulnerabilities (XSS) C. Hamby (Tue Aug 22 2006 - 19:57:40 CDT)
  • Re: BlackBoard Multiple Vulnerabilities (XSS) pr0t0nbusted.com (Wed Aug 23 2006 - 08:19:19 CDT)
  • Re: Re: BlackBoard Multiple Vulnerabilities (XSS) Pr070ngmail.com (Sun Aug 27 2006 - 20:04:37 CDT)
• [ MDKSA-2006:147 ] - Updated squirrelmail packages fix vulnerabilities securitymandriva.com (Tue Aug 22 2006 - 15:52:00 CDT)
• faille include in "VeriTECH" isreal king-hackerhotmail.fr (Mon Aug 21 2006 - 12:05:28 CDT)
• Symantec Gateway Security DNS exploit Gianstefano Monni (Wed Aug 23 2006 - 03:02:08 CDT)
  • RE: Symantec Gateway Security DNS exploit Pretorius, Wynand (ZA - Johannesburg) (Wed Aug 23 2006 - 11:38:26 CDT)
  • Re: Symantec Gateway Security DNS exploit axelseedig.org (Thu Aug 24 2006 - 03:03:20 CDT)
• Cisco Security Advisory: Cisco VPN 3000 Concentrator FTP Management Vulnerabilities Cisco Systems Product Security Incident Response Team (Wed Aug 23 2006 - 11:30:24 CDT)
• Cisco Security Advisory: Unintentional Password Modification in Cisco Firewall Products Cisco Systems Product Security Incident Response Team (Wed Aug 23 2006 - 11:44:31 CDT)
• AW: Symantec Gateway Security DNS exploit Andre Braun (Wed Aug 23 2006 - 12:21:34 CDT)
• Bugtraq ID: 18402 The Cute Group (Wed Aug 23 2006 - 12:57:15 CDT)
• New malware names and updates to PowerPoint FAQ document Juha-Matti Laurio (Wed Aug 23 2006 - 13:50:24 CDT)
• [ GLSA 200608-21 ] Heimdal: Multiple local privilege escalation vulnerabilities Raphael Marichez (Wed Aug 23 2006 - 14:12:16 CDT)
• [ GLSA 200608-22 ] fbida: Arbitrary command execution Raphael Marichez (Wed Aug 23 2006 - 14:45:16 CDT)
• FreeBSD Security Advisory FreeBSD-SA-06:18.ppp FreeBSD Security Advisories (Wed Aug 23 2006 - 17:18:28 CDT)
• Advisory: VistaBB <= 2.x Multiple File Inclusion Vulnerabilities Mustafa Can Bjorn IPEKCI (Wed Aug 23 2006 - 22:04:26 CDT)
• Advisory: Integramod Portal <= 2.x File Inclusion Vulnerability Mustafa Can Bjorn IPEKCI (Wed Aug 23 2006 - 22:02:53 CDT)
• Re: Opsware NAS 6.0 reveals MySQL 'root' password danil9470yahoo.com (Thu Aug 24 2006 - 08:17:29 CDT)
• [SECURITY] [DSA 1155-1] New sendmail packages fix denial of service Martin Schulze (Thu Aug 24 2006 - 01:23:59 CDT)
• [ GLSA 200608-23 ] Heartbeat: Denial of Service Sune Kloppenborg Jeppesen (Thu Aug 24 2006 - 12:43:33 CDT)
• [SECURITY] [DSA 1155-2] New sendmail packages fix denial of service Martin Schulze (Thu Aug 24 2006 - 04:16:49 CDT)
• EEYE: Internet Explorer Compressed Content URL Heap Overflow Vulnerability Marc Maiffret (Thu Aug 24 2006 - 14:34:44 CDT)
• [ MDKSA-2006:149 ] - Updated MySQL packages fix user privilege vulnerabilities securitymandriva.com (Thu Aug 24 2006 - 15:40:00 CDT)
• Advisory 05/2006: Zend Platform Multiple Remote Vulnerabilities Stefan Esser (Thu Aug 24 2006 - 06:29:54 CDT)
• [ MDKSA-2006:148 ] - Updated xorg-x11 packages fix vulnerabilities securitymandriva.com (Thu Aug 24 2006 - 14:30:01 CDT)
• pSlash v0.7 (lvc_include_dir) Remote Include Vulnerability x0r0nhotmail.com (Thu Aug 24 2006 - 00:30:08 CDT)
• Re: [eVuln] B-net Software Multiple XSS Vulnerabilities anonanon.net (Fri Aug 25 2006 - 03:52:39 CDT)
• rPSA-2006-0157-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs Justin M. Forbes (Thu Aug 24 2006 - 23:14:26 CDT)
• Multiple Vulnerabilities in Asterisk 1.2.10 (Fixed in 1.2.11) Matt Riddell (IT) (Fri Aug 25 2006 - 04:14:13 CDT)
• NSFOCUS SA2006-08 : Microsoft IE6 urlmon.dll Long URL Buffer Overflow Vulnerability NSFOCUS Security Team (Fri Aug 25 2006 - 01:55:02 CDT)
• rPSA-2006-0158-1 tshark wireshark Justin M. Forbes (Thu Aug 24 2006 - 23:15:00 CDT)
• TSLSA-2006-0048 - multi Trustix Security Advisor (Fri Aug 25 2006 - 07:59:43 CDT)
• FreeBSD Security Advisory FreeBSD-SA-06:18.ppp [REVISED] FreeBSD Security Advisories (Fri Aug 25 2006 - 07:34:08 CDT)
• Indiana University Security Advisory: Fuji Xerox Printing Systems (FXPS) print engine vulnerabilities Krulewitch, Sean V (Fri Aug 25 2006 - 10:08:46 CDT)
• YaPiG thanks_comment.php Cross-Site Scripting Vulnerability Kuon_at_Armorize_dot_comno.this.domain (Fri Aug 25 2006 - 05:47:33 CDT)
• [ MDKSA-2006:150 ] - Updated kernel packages fix multiple vulnerabilities securitymandriva.com (Fri Aug 25 2006 - 13:33:00 CDT)
• [ MDKSA-2006:151 ] - Updated kernel packages fix multiple vulnerabilities securitymandriva.com (Fri Aug 25 2006 - 13:49:00 CDT)
• CuteNews 1.3.* Remote File Include Vulnerability stormhackerhotmail.com (Fri Aug 25 2006 - 14:14:46 CDT)
  • Re: CuteNews 1.3.* Remote File Include Vulnerability Carsten Eilers (Tue Aug 29 2006 - 17:12:25 CDT)
• Mambo/Joomla com_comprofiler Components <== v1.0 RC 2 Multiple Remote File Include Vulnerabilities matdhulegmail.com (Fri Aug 25 2006 - 22:47:35 CDT)
• [ MDKSA-2006:152 ] - Updated wireshark packages fix multiple vulnerabilities securitymandriva.com (Fri Aug 25 2006 - 16:07:00 CDT)
• AlstraSoft Video Share Enterprise Remote File Include Vulnerability night_warrior-hotmail.com (Sat Aug 26 2006 - 04:48:59 CDT)
• Bigace 1.8.2 (GLOBALS) Remote File Inclusion vampire_chiristofyahoo.com (Sat Aug 26 2006 - 03:14:15 CDT)
• [ GLSA 200608-24 ] AlsaPlayer: Multiple buffer overflows Raphael Marichez (Sat Aug 26 2006 - 07:12:04 CDT)
• Jupiter CMS 1.1.5 index.php Remote File Include D3nGeRGmail.CoM (Fri Aug 25 2006 - 17:50:11 CDT)
  • Re: Jupiter CMS 1.1.5 index.php Remote File Include Carsten Eilers (Tue Aug 29 2006 - 17:12:25 CDT)
• Sql injection in Xoops Omid (Fri Aug 25 2006 - 16:19:29 CDT)
• MyBB Html Injection ( XSS ) RedwormMaiL.Com (Fri Aug 25 2006 - 16:55:23 CDT)
• Jetbox CMS search_function.php Remote File D3nGeRGmail.CoM (Fri Aug 25 2006 - 18:25:01 CDT)
• Sql injection in Mambo & Joomla Omid (Fri Aug 25 2006 - 16:18:20 CDT)
• Suggested Fix for CVE-2006-4299 Michael Jennings (Fri Aug 25 2006 - 19:10:52 CDT)
• Cisco NAC Appliance Agent Installation Bypass Vulnerability Andreas Gal (Fri Aug 25 2006 - 19:23:28 CDT)
  • Re: Cisco NAC Appliance Agent Installation Bypass Vulnerability Eloy Paris (Sat Aug 26 2006 - 15:31:49 CDT)
  • Re: Cisco NAC Appliance Agent Installation Bypass Vulnerability Udo Sprotte (Sat Aug 26 2006 - 14:24:18 CDT)
  • Re: Cisco NAC Appliance Agent Installation Bypass Vulnerability Joe Feise (Tue Aug 29 2006 - 17:20:33 CDT)
• [SECURITY] [DSA 1156-1] New kdebase packages fix information disclosure Moritz Muehlenhoff (Sun Aug 27 2006 - 13:44:39 CDT)
• [XSec-06-10]: Internet Explorer (daxctle.ocx) Heap Overflow Vulnerability nop (Sun Aug 27 2006 - 13:17:39 CDT)
• [SECURITY] [DSA 1159-1] New Mozilla Thunderbird packages fix several problems Martin Schulze (Mon Aug 28 2006 - 00:30:14 CDT)
• [SECURITY] [DSA 1158-1] New streamripper packages fix arbitrary code execution Moritz Muehlenhoff (Sun Aug 27 2006 - 15:05:11 CDT)
• [SECURITY] [DSA 1157-1] New ruby1.8 packages fix several vulnerabilities Moritz Muehlenhoff (Sun Aug 27 2006 - 14:51:21 CDT)
• [ GLSA 200608-25 ] X.org and some X.org libraries: Local privilege escalations Raphael Marichez (Mon Aug 28 2006 - 11:53:56 CDT)
• interact <= 2.2 (CONFIG[BASE_PATH]) Remote File Include Vulnerability carcabotxyahoo.com (Mon Aug 28 2006 - 08:16:50 CDT)
• JetBox cms (search_function.php) Remote File Include carcabotxyahoo.com (Mon Aug 28 2006 - 08:08:08 CDT)
• Re: Another YabbSE Remote Code Execution Vulnerability wiziwigcomcast.net (Sat Aug 26 2006 - 13:44:26 CDT)
• Possible Myspace Worm mjwcyberwart.com (Sat Aug 26 2006 - 22:24:25 CDT)
• SYMSA-2006-009 researchsymantec.com (Mon Aug 28 2006 - 08:42:44 CDT)
• [ GLSA 200608-27 ] Motor: Execution of arbitrary code Raphael Marichez (Tue Aug 29 2006 - 10:03:14 CDT)
• [ GLSA 200608-26 ] Wireshark: Multiple vulnerabilities Raphael Marichez (Tue Aug 29 2006 - 10:02:20 CDT)
• [ GLSA 200608-28 ] PHP: Arbitary code execution Raphael Marichez (Tue Aug 29 2006 - 10:03:58 CDT)
• rPSA-2006-0159-1 ImageMagick Justin M. Forbes (Tue Aug 29 2006 - 10:14:27 CDT)
• [ MDKSA-2006:155 ] - Updated ImageMagick packages fix vulnerabilities securitymandriva.com (Tue Aug 29 2006 - 10:15:00 CDT)
• [ MDKSA-2006:153 ] - Updated binutils packages fix multiple vulnerabilities securitymandriva.com (Mon Aug 28 2006 - 22:35:00 CDT)
• [ MDKSA-2006:154 ] - Updated lesstif packages fix potential local root vulnerability securitymandriva.com (Mon Aug 28 2006 - 22:49:00 CDT)
• LinksCaffe no checker at admin hoangyenxinhdepyahoo.com (Mon Aug 28 2006 - 23:57:09 CDT)
• CYBSEC - Security Advisory: Microsoft Windows DHCP Client Service Remote Buffer Overflow Mariano Nuñez Di Croce (Tue Aug 29 2006 - 12:23:19 CDT)
• [SECURITY] [DSA 1160-1] New Mozilla packages fix several vulnerabilities Martin Schulze (Tue Aug 29 2006 - 00:26:35 CDT)
• AW: JetBox cms (search_function.php) Remote File Include Frank Reißner (Tue Aug 29 2006 - 01:27:51 CDT)
  • Re: AW: JetBox cms (search_function.php) Remote File Include Steven M. Christey (Tue Aug 29 2006 - 18:57:13 CDT)
• e107 <= 0.75 GLOBALS[] overwrite/Zend_Hash_Del_Key_Or_Index remote commands execution rgodautistici.org (Tue Aug 29 2006 - 03:05:09 CDT)
• Submit ( b2evolution<= 1.8 Remote File Include Vulnerabilities ) h4ck3riranyahoo.com (Tue Aug 29 2006 - 07:07:42 CDT)
  • Re: Submit ( b2evolution<= 1.8 Remote File Include Vulnerabilities ) donot.spam (Tue Aug 29 2006 - 19:28:55 CDT)
• Submit ( ToendaCMS<= ( Remote File Include Vulnerabilities ) h4ck3riranyahoo.com (Tue Aug 29 2006 - 07:09:02 CDT)
• JS ASP Faq Manager v1.10 sql injection alihackerz.ir (Tue Aug 29 2006 - 07:54:26 CDT)
• [SECURITY] [DSA 1161-1] New Mozilla Firefox packages fix several vulnerabilities Martin Schulze (Tue Aug 29 2006 - 12:17:51 CDT)
• DUpoll 3.1 security alert bozkurtserdarbozkurtserdar.com (Tue Aug 29 2006 - 11:03:48 CDT)
• Portail PHP mod_phpalbum 2.15 Modules Remote File Inclusion x0r0nhotmail.com (Tue Aug 29 2006 - 13:03:15 CDT)
• InfoSec Paper: Creating Business Through Virtual Trust Kenneth F. Belva (Tue Aug 29 2006 - 17:15:40 CDT)
• SQL-Ledger serious security vulnerability and workaround chrismetatrontech.com (Tue Aug 29 2006 - 22:12:56 CDT)
• [SECURITY] [DSA 1162-1] New libmusicbrainz packages fix arbitrary code execution Martin Schulze (Wed Aug 30 2006 - 01:02:11 CDT)
• Ezportal/Ztml v1.0 Multiple vulnerabilities Hessamxhessamx.net (Wed Aug 30 2006 - 01:01:43 CDT)
• IwebNegar v1.1 Multiple vulnerabilities Hessamxhessamx.net (Wed Aug 30 2006 - 01:03:22 CDT)
• Nuked Klan 1.7 SP4.3 : Function Anti-XSS Bypassed Blwood (Wed Aug 30 2006 - 02:25:33 CDT)
• XSS in HLstats 1.34 MC Iglo (Wed Aug 30 2006 - 02:52:25 CDT)
• [KAPDA::#56] - FREEKOT SQL Injection Vulnerability farhadkeyyahoo.com (Wed Aug 30 2006 - 06:53:30 CDT)
• [SECURITY] [DSA 1163-1] New gtetrinet packages fix arbitrary code execution Martin Schulze (Wed Aug 30 2006 - 09:29:39 CDT)
• Re: JetBox cms (search_function.php) Remote File Include Carsten Eilers (Wed Aug 30 2006 - 13:39:25 CDT)
  • Re: JetBox cms (search_function.php) Remote File Include Steven M. Christey (Wed Aug 30 2006 - 18:12:19 CDT)
• ezContents Version 2.0.3 Remote/Local File Inclusion, SQL Injection, XSS gmdarkfiggmail.com (Wed Aug 30 2006 - 13:33:58 CDT)
• osCommerce < 2.2 Milestone 2 060817 POC Exploit s10242006yahoo.com (Wed Aug 30 2006 - 13:07:46 CDT)
• [KAPDA]MyBB 1.1.7 ~ admin/global.php ~ XSS Attack addmimistratorgmail.com (Wed Aug 30 2006 - 08:14:42 CDT)
• feedsplitter considered harmful jonjrock.us (Wed Aug 30 2006 - 15:09:27 CDT)
• Hackers to Hackers Conference III - Call for Papers Rodrigo Rubira Branco (BSDaemon) (Wed Aug 30 2006 - 04:51:44 CDT)
• [KAPDA]MyBB 1.1.7~ htmlspeacialchar_uni(), fixjavascript(), functions_post.php ~[url]XSS attack addmimistratorgmail.com (Wed Aug 30 2006 - 08:09:10 CDT)
• [ MDKSA-2006:157 ] - Updated musicbrainz packages fix buffer overflow vulnerabilities securitymandriva.com (Wed Aug 30 2006 - 17:54:00 CDT)
• [ECHO_ADV_46$2006] ExBB v1.9.1 (exbb[home_path]) Multiple Remote File Inclusion erdcecho.or.id (Wed Aug 30 2006 - 21:46:01 CDT)
• [ MDKSA-2006:156 ] - Updated sendmail packages fix DoS vulnerabilities securitymandriva.com (Wed Aug 30 2006 - 17:48:00 CDT)
• New NT4/Windows botnet reported Juha-Matti Laurio (Thu Aug 31 2006 - 10:18:29 CDT)
• XXS in learncenter.asp exe_crackhotmail.com (Wed Aug 30 2006 - 17:02:33 CDT)
• rPSA-2006-0161-1 libmusicbrainz rPath Update Announcements (Wed Aug 30 2006 - 16:38:12 CDT)
• Lyris ListManager 8.95: Add arbitrary administrator to arbitrary list Design Properly (Wed Aug 30 2006 - 23:25:44 CDT)
• Membrepass v1.5 Php code execution, Xss, Sql Injection gmdarkfiggmail.com (Thu Aug 31 2006 - 08:58:40 CDT)
• AW: AW: JetBox cms (search_function.php) Remote File Include Frank Reißner (Thu Aug 31 2006 - 02:41:49 CDT)
• [SECURITY] [DSA 1164-1] New sendmail packages fix denial of service Martin Schulze (Thu Aug 31 2006 - 00:19:04 CDT)
• [ MDKSA-2006:158 ] - Updated MySQL packages fix DoS vuln, initscript bug securitymandriva.com (Thu Aug 31 2006 - 14:21:00 CDT)
• Compression Plus and Tumblweed EMF Stack Overflow Michael Hale Ligh (Thu Aug 31 2006 - 14:16:55 CDT)
• rPSA-2006-0162-1 kernel rPath Update Announcements (Thu Aug 31 2006 - 16:03:31 CDT)
• Pheap CMS<= (lpref) Remote File Inclusion Exploit SHiKaA-hotmail.com (Wed Aug 30 2006 - 14:29:58 CDT)
• ModuleBased CMS alfa 1 Multiple Remote File Inclusion amir.scorpinoyahoo.com (Tue Aug 29 2006 - 11:41:12 CDT)
• [ISR] - IBM eGatherer ActiveX Code Execution PoC Francisco Amato (Tue Aug 29 2006 - 09:22:06 CDT)

Last message date: Thu Aug 31 2006 - 17:47:01 CDT
Archived on: Thu Aug 31 2006 - 17:47:01 CDT

570 messages sorted by: [ author ] [ date ] [ subject ]