600 messages sorted by: [ date ] [ thread ] [ subject ]

Starting: Wed Nov 01 2006 - 08:21:36 CST
Ending: Thu Nov 30 2006 - 20:53:25 CST

• -= SHELL =- -= SHELL =-
  • MWChat pro V 7.0 <= (CONFIG[MWCHAT_Libs]) Remote File Include Vulnerability (Fri Nov 03 2006 - 07:10:06 CST)
• 3APA3A
  • Re: Big Flaw in Firefox 2: Password Manager Bug Exposes Passwords (Thu Nov 23 2006 - 10:04:28 CST)
  • Re[2]: New Flaw in Firefox 2.0: DoS and possible remote code execution (Fri Nov 03 2006 - 03:08:55 CST)
  • Re[3]: New Flaw in Firefox 2.0: DoS and possible remote code execution (Wed Nov 01 2006 - 09:13:22 CST)
• admin
  • Re: *BSD banner INT overflow vulnerability (Wed Nov 22 2006 - 23:06:29 CST)
• admindwalker.co.uk
  • Re: Re: Phpjobscheduler 3.0 - Multiple Remote File Include (Tue Nov 21 2006 - 11:29:34 CST)
• adminmajorsecurity.de
  • [MajorSecurity Advisory #35]Travelsized CMS - Multiple Cross Site Scripting Issues (Sat Nov 18 2006 - 03:03:05 CST)
  • [MajorSecurity Advisory #36]dev4u CMS - Multiple SQL Injection and Cross Site Scripting Issues (Sat Nov 18 2006 - 03:13:40 CST)
  • [MajorSecurity Advisory #34]Plesk 8 - Multiple Cross Site Scripting Issues (Wed Nov 15 2006 - 13:26:44 CST)
  • [MajorSecurity Advisory #33]ShopSystems - SQL Injection Issue (Sat Nov 11 2006 - 04:59:25 CST)
  • MajorSecurity Advisory #32]phpComasy CMS - Multiple Cross Site Scripting Issues (Mon Nov 06 2006 - 09:32:21 CST)
  • [MajorSecurity Advisory #30]admin.tool 3 CMS - Multiple Cross Site Scripting Issues (Sat Nov 04 2006 - 07:35:14 CST)
  • MajorSecurity Advisory #31]Xenis.creator CMS - Multiple Cross Site Scripting and SQL Injection Issues (Sat Nov 04 2006 - 07:36:11 CST)
• advisorieslssec.com
  • LS-20061102 - Business Objects Crystal Reports Stack Overflow Vulnerability (Thu Nov 23 2006 - 11:27:46 CST)
  • LS-20061113 - CA BrightStor ARCserve Backup Remote Buffer Overflow Vulnerability (Tue Nov 21 2006 - 05:06:58 CST)
• AdvisoryAria-Security.Net
  • [Aria-Security Team] FipsSHOP SQL Injection (Sat Nov 25 2006 - 21:14:30 CST)
  • uPhotoGallery (v 1.1) SQL Injection (Sun Nov 26 2006 - 14:41:04 CST)
  • ClickContact SQL Injection (Sun Nov 26 2006 - 14:40:33 CST)
  • ClickGallery Sql Injection (Sun Nov 26 2006 - 14:43:43 CST)
  • Clickblog Sql Injection (Sun Nov 26 2006 - 14:40:18 CST)
  • [Aria-Security Team] General Shopping Cart SQL Injection Vulnerability (Sat Nov 25 2006 - 19:13:21 CST)
  • [Aria-Security Team] Evolve shopping cart SQL Injection Vulnerability (Sat Nov 25 2006 - 19:12:38 CST)
  • WebHost Manager (WHM) Multiple Cross-Site Scripting (Fri Nov 24 2006 - 16:05:50 CST)
  • CPanel 11 Multiple Cross-Site Scription (Fri Nov 24 2006 - 16:01:46 CST)
  • [Aria-Security Team] iNews News Manager SQL Injection (Fri Nov 24 2006 - 02:54:01 CST)
  • [Aria-Security Team] MidiCart ASP Shopping Cart SQL Injection (Fri Nov 24 2006 - 02:59:18 CST)
  • [Aria-Security Team] ASP ListPics 5.0 SQL Injection (Fri Nov 24 2006 - 02:54:48 CST)
  • [Aria-Security Team] Fixit iDMS Pro Image Gallery SQL Injection (Fri Nov 24 2006 - 02:53:55 CST)
  • [Aria-Security Team] MidiCart ASP Plus Shopping Cart SQL Injection (Fri Nov 24 2006 - 02:59:48 CST)
  • [Aria-Security Team] Ultimate Survey Pro SQL Injection (Fri Nov 24 2006 - 02:52:21 CST)
  • gNews Publisher SQL Injection Vulnerabilites (Mon Nov 20 2006 - 01:38:33 CST)
  • A-Cart 2.0 SQL Injection (Fri Nov 17 2006 - 18:24:47 CST)
  • [Aria-Security's Research Team] ActiveNews Manager SQL Injection Vulnerabilite (Fri Nov 17 2006 - 18:28:50 CST)
  • [Aria-Security's Research Team] Texas Rank'em SQL Injection Vulnerabilite (Fri Nov 17 2006 - 19:23:08 CST)
  • A-Cart PRO SQL Injection (Fri Nov 17 2006 - 18:25:44 CST)
  • [Aria-Security] CPanel Network Tools Cross Site Scripting [Advisory] (Thu Nov 16 2006 - 23:31:31 CST)
  • ASPintranet SQL Injection (Tue Nov 14 2006 - 22:18:34 CST)
  • Image gallery with Access Database SQL Injection (Wed Nov 15 2006 - 18:23:27 CST)
  • i-Gallery 3.4 Cross Site Scripting (Wed Nov 15 2006 - 18:21:57 CST)
  • Helm Cross Site Scripting (Wed Nov 15 2006 - 18:16:57 CST)
  • Xtreme ASP Photo Gallery Cross Site Scripting And SQL Injection (Wed Nov 15 2006 - 18:21:08 CST)
  • Helm Cross-Site Scripting (XSS) (Tue Nov 14 2006 - 17:39:54 CST)
  • BPG Content Management System SQL Injection (Mon Nov 13 2006 - 18:59:04 CST)
  • Engine Manager SQL Injection (Mon Nov 13 2006 - 18:46:59 CST)
  • ECommerce Store Shop Builder (Mon Nov 13 2006 - 17:53:23 CST)
  • eShopping SQL Injection (Mon Nov 13 2006 - 17:56:17 CST)
  • Ustore SQL Injection (Mon Nov 13 2006 - 17:24:09 CST)
  • WWWeb Cocepts SQL Injection (Mon Nov 13 2006 - 17:24:33 CST)
  • SiteXpress SQL Injection (Mon Nov 13 2006 - 17:24:51 CST)
  • ASPintranet SQL Injection (Mon Nov 13 2006 - 17:23:53 CST)
  • Real Estate Listing System SQL Injection (Mon Nov 13 2006 - 17:23:34 CST)
  • DirectAdmin Multiple Cross Site Scription (Sun Nov 12 2006 - 17:00:47 CST)
  • CPanel Multiple Cross Site Scription (Sun Nov 12 2006 - 04:38:07 CST)
• AG- Spider
  • Comdev One Admin Pro.v4.1 ( path[skin] ) Remote File include (Wed Nov 15 2006 - 12:05:49 CST)
• ajannhwthotmail.com
  • LDU <= 8.x (polls.php) Remote SQL Injection Vulnerability (Thu Nov 30 2006 - 09:36:57 CST)
  • Seditio <= 1.10 (pollid) Remote SQL Injection Vulnerability (Thu Nov 30 2006 - 09:37:23 CST)
  • ASPNuke <= 0.80 (register.asp) Remote SQL Injection Vulnerability (Sun Nov 19 2006 - 11:58:05 CST)
  • Online Event Registration <= v2.0 (save_profile.asp) Remote User Pass Change Exploit (Sun Nov 12 2006 - 11:26:45 CST)
  • UPublisher 1.0 (viewarticle.asp) Remote SQL Injection Vulnerability (Sun Nov 12 2006 - 11:24:45 CST)
  • ASPPortal <= 4.0.0 (default1.asp) Remote SQL Injection Exploit (Sun Nov 12 2006 - 11:26:26 CST)
  • Property Pro v1.0 (vir_Login.asp) Remote Login ByPass SQL Injection Vulnerability (Sun Nov 12 2006 - 11:27:53 CST)
  • Asp Scripter Products (cpLogin.asp) Remote SQL ByPass Injection Vulnerability (Sun Nov 12 2006 - 03:11:25 CST)
  • UltraSite 1.0 (update.asp) Remote SQL Injection Vulnerability (Sun Nov 12 2006 - 03:11:04 CST)
  • NuSchool 1.0 (CampusNewsDetails.asp) Remote SQL Injection Exploit (Sat Nov 11 2006 - 07:26:00 CST)
  • NuStore 1.0 (Products.asp) Remote SQL Injection Vulnerability (Sat Nov 11 2006 - 07:24:58 CST)
  • NuRems 1.0 Remote XSS/SQL Injection Exploit (Sat Nov 11 2006 - 07:24:25 CST)
  • NuCommunity 1.0 (cl_CatListing.asp) Remote SQL Injection Exploit (Sat Nov 11 2006 - 07:23:24 CST)
  • AspPired2 Poll <= 1.0 (MoreInfo.asp) Remote SQL Injection Exploit (Sat Nov 11 2006 - 06:23:56 CST)
  • phpManta - Mdoc <= 1.0.2 (view-sourcecode.php) Local File Include Exploit (Sat Nov 11 2006 - 06:23:23 CST)
  • UStore 1.0 (detail.asp) Remote SQL Injection Vulnerability (Sun Nov 12 2006 - 11:24:27 CST)
  • Estate Agent Manager <= v1.3 (default.asp) Remote Login ByPass SQL Injection Vulnerability (Sun Nov 12 2006 - 11:27:19 CST)
  • PhpMyChat <= 0.14.5 Source Code Disclosure Vulnerability (Wed Nov 08 2006 - 10:12:16 CST)
  • PhpMyChat Plus <= 1.9 Multiple Source Code Disclosure Vulnerabilities (Wed Nov 08 2006 - 10:11:47 CST)
  • Ariadne <= 2.4.1 Multiple Remote File Include Vulnerabilities(New) (Mon Nov 06 2006 - 12:30:51 CST)
• alireza hassani
  • [KAPDA]::Security analysis of cutenews 1.4.5 (Tue Nov 21 2006 - 07:04:35 CST)
• Amit Klein
  • Educational write-up by Amit Klein: "A Refreshing Look at Redirection" (Thu Nov 02 2006 - 13:42:23 CST)
• Andrew Christensen
  • Lotus Notes pre-login User.ID key leak (Thu Nov 08 2007 - 06:58:57 CST)
• andrzej.targoszproidea.org.pl
  • CONFidence 2007 CFP (Wed Nov 22 2006 - 16:44:34 CST)
• applesoupgmail.com
  • Hotmail and Windows Live Mail XSS Vulnerabilities (Fri Nov 03 2006 - 09:39:02 CST)
• astralbabzbluebottle.com
  • Re: DoS in Microsoft Windows Live Messenger <= 8.0 (Sat Nov 25 2006 - 04:07:31 CST)
• Avertavertlabs.com
  • Vulnerabilities in Client Service for NetWare (Thu Nov 16 2006 - 10:22:55 CST)
• avivra
  • Internet Explorer 7 - Still Spyware Writers' Heaven (Wed Nov 01 2006 - 16:07:28 CST)
• Bart Seresia
  • RE: VBulletin DoS Exploit [ all Versions ] (Mon Nov 13 2006 - 16:25:37 CST)
• benjilenoobhotmail.com
  • MyStats <=1.0.8 [injection sql, multiples xss, array & full path disclosure] (Sun Nov 12 2006 - 13:52:53 CST)
• beSIRT
  • Team Evil - Incident #2 (Mon Nov 13 2006 - 09:17:06 CST)
• blueshishasafe-mail.net
  • Woltlab Burning Board 2.3.X XSS Vulnerability (0-Day) FIXED VERSION (Thu Nov 30 2006 - 12:28:50 CST)
• bluespy.okgmail.com
  • PhpBB Module Dimension Remote File Include (Sun Nov 19 2006 - 11:46:03 CST)
  • PhpBB Module Dimension Remote File Include (Sat Nov 18 2006 - 05:16:36 CST)
• Blyth A J C (AT)
  • 2nd European Conference on Computer Network Defense (EC2ND) (Mon Nov 27 2006 - 03:28:41 CST)
• Bob Beck
  • Re: *BSD banner INT overflow vulnerability (Wed Nov 22 2006 - 15:35:23 CST)
• Bram Dumolin
  • Re: Firefox 1.5.0.7 Exploit (Thu Nov 02 2006 - 16:32:09 CST)
• broken-proxyLinuxmail.org
  • Advanced Guestbook 2.3.1 (Admin.php) Remote File Include (Fri Nov 03 2006 - 15:02:25 CST)
• bugtraqcgisecurity.net
  • Re: [WEB SECURITY] The state of JavaScript Hacking (Mon Nov 27 2006 - 19:28:12 CST)
  • Challenges faced by automated web application security assessment tools (Mon Nov 13 2006 - 14:55:06 CST)
• c2reportisotf.org
  • Drone Armies C&C Report - 17 Nov 2006 (Fri Nov 17 2006 - 19:03:43 CST)
• capt.nem0gmx.de
  • contentserv 4.x (Thu Nov 30 2006 - 11:12:28 CST)
• Casper.DikSun.COM
  • Re: Lack of environment sanitization in the FreeBSD, OpenBSD, NetBSD dynamic loaders. (Thu Nov 23 2006 - 03:23:59 CST)
• Cesar
  • The Week of Oracle Database Bugs (Mon Nov 20 2006 - 16:19:53 CST)
• Chris Gianelloni
  • Re: [ GLSA 200611-11 ] TikiWiki: Multiple vulnerabilities (Tue Nov 21 2006 - 15:53:25 CST)
• Cisco Systems Product Security Incident Response Team
  • Cisco Security Advisory: Multiple Vulnerabilities in Cisco Secure Desktop (Wed Nov 08 2006 - 10:46:13 CST)
  • Cisco Security Advisory: Cisco Security Agent Management Center LDAP Administrator Authentication Bypass (Wed Nov 01 2006 - 10:15:00 CST)
• ckuanairmagnet.com
  • Re: Airmagnet management interfaces multiple vulnerabilities (Fri Nov 17 2006 - 17:39:10 CST)
• clappymonkeygmail.com
  • Potentially OT: AJAX article (Mon Nov 27 2006 - 15:09:02 CST)
• corrado.liottaalice.it
  • [x0n3-h4ck]Drake CMS v 0.2 XSS exploit (Fri Nov 10 2006 - 10:55:28 CST)
  • [x0n3-h4ck]Essentia Web Server v.2.15 Buffer Overflow (Fri Nov 10 2006 - 10:57:05 CST)
• crackers_childsibersavascilar.com
  • PHP-Nuke Mermaid Module V1.2 (formdisp.php) Remote File Include Exploit (Fri Nov 24 2006 - 15:39:51 CST)
  • MosReporter Joomla Component Remote File Inclusion Exploi (Fri Nov 17 2006 - 13:08:00 CST)
  • shambo2 Component For Mambo 4.5 Remote File Inclusion Exploit (Sat Nov 11 2006 - 12:59:14 CST)
• darkz.gsagmail.com
  • Mail Drives Security Considerations (Fri Nov 03 2006 - 07:33:34 CST)
• David Eisenstein
  • [FLSA-2006:211760] Updated gzip package fixes security issues (Mon Nov 13 2006 - 01:42:12 CST)
• David Litchfield
  • Re: Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?) (Wed Nov 29 2006 - 02:22:09 CST)
  • Re: Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?) (Tue Nov 28 2006 - 11:00:34 CST)
  • Re: Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?) (Mon Nov 27 2006 - 13:25:37 CST)
  • Cursor snarfing - a new class of vulnerability and attack in Oracle (Mon Nov 27 2006 - 02:36:39 CST)
  • Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?) (Wed Nov 22 2006 - 04:57:27 CST)
  • Which is more secure? Oracle vs. Microsoft (Mon Nov 20 2006 - 22:27:42 CST)
• deanetomite.org
  • Re: Etomite CMS 0.6.1.2 Multiple Vulnerabilities ( Sql Injection + Local file inclusion ) (Fri Nov 17 2006 - 10:05:23 CST)
• dragonjargmail.com
  • DoS in Microsoft Windows Live Messenger <= 8.0 (Fri Nov 24 2006 - 15:41:08 CST)
• Dragos Ruiu
  • EUSecWest/London CFP extended to Nov. 7 (Thu Nov 02 2006 - 18:17:33 CST)
• drunken_chinyahoo.com
  • Re: tikiwiki 1.9.5 mysql password disclosure & xss (Fri Nov 24 2006 - 18:05:54 CST)
• Dude VanWinkle
  • Re: [Full-disclosure] ZDI-06-043: Novell Netware Client Print Provider Buffer Overflow Vulnerability (Thu Nov 30 2006 - 07:02:45 CST)
• eEye Advisories
  • EEYE: Workstation Service NetpManageIPCConnect Buffer Overflow (Tue Nov 14 2006 - 14:12:10 CST)
• Eliah Kagan
  • Re: Internet Explorer 7 - Still Spyware Writers' Heaven (Sat Nov 04 2006 - 15:33:17 CST)
  • Re: Internet Explorer 7 - Still Spyware Writers' Heaven (Fri Nov 03 2006 - 20:25:38 CST)
• emc3mentalcollective.com
  • Re: Wordpress File Inclusion (Mon Nov 13 2006 - 12:24:58 CST)
• erdcecho.or.id
  • [ECHO_ADV_61_2006] a-ConMan <= v3.2beta Remote File Inclusion (Wed Nov 22 2006 - 20:42:52 CST)
  • [ECHO_ADV_60_2006] OpenEMR <=2.8.1 Multiple Remote File Inclusion Vulnerability (Sun Nov 05 2006 - 22:11:24 CST)
  • [ECHO_ADV_59_2006]Agora 1.4 RC1 "$_SESSION[PATH_COMPOSANT]" Remote File Inclusion Vulnerability (Sun Nov 05 2006 - 22:10:20 CST)
  • [ECHO_ADV_58_2006]Cyberfolio <=2.0 RC1 $av Remote File Inclusion Vulnerability (Sun Nov 05 2006 - 22:09:26 CST)
  • [ECHO_ADV_57_2006]Soholaunch Pro <=4.9 r36 Multiple Remote File Inclusion Vulnerability (Sun Nov 05 2006 - 22:08:33 CST)
• Evgeny Legerov
  • VulnDisco Pack for Metasploit (Mon Nov 06 2006 - 14:54:47 CST)
• evilrabbigmail.com
  • Re: Re: *BSD banner INT overflow vulnerability (Wed Nov 22 2006 - 14:55:26 CST)
• Expanders
  • Re: Wordpress File Inclusion (Mon Nov 13 2006 - 12:09:19 CST)
• fash1ongmail.com
  • Big Flaw in Firefox 2: Password Manager Bug Exposes Passwords (Wed Nov 22 2006 - 03:57:43 CST)
• FBIHotmail.com
  • Re: tikiwiki 1.9.5 mysql password disclosure & xss (Wed Nov 22 2006 - 19:53:46 CST)
• fcollyergmail.com
  • Re: Re: Digipass Go3 Token Dumper (at least for 2006) (Sat Nov 25 2006 - 09:02:00 CST)
  • Digipass Go3 Token Dumper (at least for 2006) (Sat Nov 11 2006 - 22:41:57 CST)
• Firewall1954hotmail.com
  • Phpdebug 1.1.0 - Remote File Include by Firewall (Sun Nov 12 2006 - 00:56:57 CST)
  • Phpjobscheduler 3.0 - Multiple Remote File Include (Sun Nov 12 2006 - 00:44:06 CST)
  • Exophpdesk V1.2 - Remote File Include (Fri Nov 10 2006 - 18:36:58 CST)
  • encapscms 0.3.6 - Remote File Include by Firewall (Fri Nov 10 2006 - 12:54:47 CST)
• Francesco Laurita
  • Re: CuteNews v1.4.5 (search.php) Remote file include vulnerability (Mon Nov 27 2006 - 14:49:48 CST)
• FreeBSD Security Advisories
  • FreeBSD Security Advisory FreeBSD-SA-06:24.libarchive (Wed Nov 08 2006 - 08:13:54 CST)
• fryxar fryxar
  • AIDE problem handling symlinks (Mon Nov 27 2006 - 09:42:53 CST)
• gamr-14hotmail.com
  • XSS in scriptat support InverseFlow Help Desk v2.31 (Wed Nov 22 2006 - 17:11:17 CST)
• Gary Golomb
  • Free tool for pattern identification (for researchers) (Sat Nov 25 2006 - 08:01:23 CST)
• Ginsu Rabbit
  • linksys wrt54g v5 authentication bypass fixed (Fri Nov 17 2006 - 18:42:03 CST)
• Glynn Clements
  • Re: [ GLSA 200611-03 ] NVIDIA binary graphics driver: Privilege escalation vulnerability (Tue Nov 14 2006 - 05:16:41 CST)
• gmdarkfiggmail.com
  • Cahier de texte V2.0 SQL Code Execution Exploit (Fri Nov 24 2006 - 13:43:33 CST)
  • Re: A-Cart PRO SQL Injection (Sat Nov 18 2006 - 11:23:33 CST)
  • Re: [Aria-Security's Research Team] ActiveNews Manager SQL Injection Vulnerabilite (Sat Nov 18 2006 - 11:25:52 CST)
  • Oxygen <= 1.1.3 (O2PHP Bulletin Board) SQL Injection (Sat Nov 18 2006 - 07:08:01 CST)
• GomoR
  • SinFP 2.04 release, works under Windows (Fri Nov 10 2006 - 13:37:57 CST)
• Gruzicki Wlodek
  • *BSD banner INT overflow vulnerability (Wed Nov 22 2006 - 03:17:44 CST)
• h4ck3riranyahoo.com
  • knowledgeBuilder v.2.2.php.NuLL-WDYL=> Remote File Include Vulnerability (Tue Nov 07 2006 - 22:23:41 CST)
  • phpsatk => Remote File Include Vulnerability EXploit (Tue Nov 07 2006 - 22:20:20 CST)
• hack2prisonyahoo.com
  • Hot Links download backup authorized vulnerabilities (re-post with some edit) (Tue Nov 14 2006 - 23:28:31 CST)
  • Hot Links download backup authorized vulnerabilities (Tue Nov 14 2006 - 23:26:06 CST)
  • Web Directory Pro bypass Vulnerabilities (Fri Nov 03 2006 - 19:58:50 CST)
• hacker hackers
  • XSS in Kayako SupportSuite v3.00.32 (Tue Nov 07 2006 - 09:49:25 CST)
• harrisonhollandgmail.com
  • Re: Multiple vulnerabilities in SAP Web Application Server 6.40 and7.00 (Fri Nov 03 2006 - 05:55:46 CST)
• HASEGAWA Yosuke
  • Re: Hotmail and Windows Live Mail XSS Vulnerabilities (Tue Nov 07 2006 - 19:56:18 CST)
• Heiko Wundram
  • Re: <img src="/imgs/at.gif" border=0 align=middle>cid stats v2.3 File Include (Mon Nov 06 2006 - 11:30:07 CST)
• Hugo van der Kooij
  • Re: Digipass Go3 Token Dumper (at least for 2006) (Fri Nov 24 2006 - 04:17:06 CST)
• iDefense Labs
  • iDefense Security Advisory 11.30.06: Multiple Vendor libgsf Heap Overflow Vulnerability (Thu Nov 30 2006 - 12:55:35 CST)
  • iDefense Security Advisory 11.29.06: Horde Kronolith Arbitrary Local File Inclusion Vulnerability (Wed Nov 29 2006 - 09:38:47 CST)
  • iDefense Security Advisory 11.26.06: GNU Radius Format String Vulnerability (Sun Nov 26 2006 - 13:52:38 CST)
  • iDefense Security Advisory 11.26.06: Qbik WinGate Compressed Name Pointer Denial of Service Vulnerability (Sun Nov 26 2006 - 13:53:23 CST)
  • iDefense Security Advisory 11.09.06: Citrix Presentation Server 4.0 IMA Service Invalid Name Length DoS Vulnerability (Thu Nov 09 2006 - 11:21:32 CST)
  • iDefense Security Advisory 11.08.06: Cisco Secure Desktop Privilege Escalation Vulnerability (Wed Nov 08 2006 - 11:25:57 CST)
  • iDefense Security Advisory 10.31.06: Sophos Anti-Virus Petite File Denial of Service Vulnerability (Tue Oct 31 2006 - 17:35:49 CST)
  • iDefense Security Advisory 10.31.06: Novell iManager Tomcat DoS Vulnerability (Tue Oct 31 2006 - 17:35:46 CST)
  • iDefense Security Advisory 10.27.06: Novell eDirectory NMAS BerDecodeLoginDataRequeset DoS Vulnerability (Tue Oct 31 2006 - 17:35:52 CST)
• iDefense Labs Security Advisories
  • iDefense Security Advisory 11.08.06: IBM Lotus Domino 7 tunekrnl Multiple Vulnerabilities (Wed Nov 08 2006 - 09:07:17 CST)
• Iko Riyadi
  • Perl proxy checker using samair.ru (Wed Nov 22 2006 - 03:07:30 CST)
• In Cognito
  • Lack of environment sanitization in the FreeBSD, OpenBSD, NetBSD dynamic loaders. (Tue Nov 21 2006 - 18:16:25 CST)
  • Lack of environment sanitization in the FreeBSD, OpenBSD, NetBSD dynamic loaders. (Wed Nov 22 2006 - 15:02:53 CST)
• infectionmail.kz
  • Invision Community Blog Mod 1.2.4 .PHP SQL Injection Vulnerability (Thu Nov 30 2006 - 13:19:49 CST)
• infodigitalarmaments.com
  • Digital Armaments November-Decemberr Hacking Challenge: KERNEL (Sun Nov 19 2006 - 05:46:27 CST)
  • igital Armaments November-Decemberr Hacking Challenge: KERNEL Remote (Thu Nov 16 2006 - 12:21:00 CST)
• inge_eivind.henriksenchello.no
  • Re: IE7 website security certificate discrediting exploit (Tue Nov 07 2006 - 13:00:32 CST)
  • IE7 website security certificate discrediting exploit (Fri Nov 03 2006 - 12:00:48 CST)
• insanitydarkers.com.br
  • XSS vBulletin 3.6.X Admin Control Painel (Fri Nov 17 2006 - 12:54:55 CST)
• J. Oquendo
  • Re: Apple Safari "match" Buffer Overflow Vulnerability (Tue Nov 14 2006 - 13:59:37 CST)
• Jan Heisterkamp
  • Re: New Flaw in Firefox 2.0: DoS and possible remote code execution (Wed Nov 01 2006 - 17:31:19 CST)
• jbh_cgyahoo.fr
  • Apple Safari "match" Buffer Overflow Vulnerability (Mon Nov 13 2006 - 19:08:12 CST)
• Jeimy Cano
  • CFP - VII National Computer and Information Security Conference (Thu Nov 23 2006 - 06:53:01 CST)
• Jeremy Epstein
  • RE: Cracking String Encryption in Java Obfuscated Bytecode (Mon Nov 27 2006 - 08:49:49 CST)
• Jeroen Massar
  • Re: [Full-disclosure] New report on Teredo security (Tue Nov 28 2006 - 21:25:00 CST)
• Jerome Athias
  • Re: New Flaw in Firefox 2.0: DoS and possible remote code execution (Thu Nov 02 2006 - 13:01:19 CST)
• Jesper Jurcenoks
  • DigiOz Guestbook version 1.7 Path Disclosure Vulnerability in list.php (Mon Nov 06 2006 - 23:58:21 CST)
• jesper.jurcenoksnetvigilance.com
  • LifeType version 1.1.2 Multiple Path Disclosure Vulnerabilities (Thu Nov 30 2006 - 14:02:20 CST)
  • Monkey Boards version 0.3.5 Multiple Path Disclosure Vulnerabilities (Tue Nov 28 2006 - 16:17:14 CST)
  • REMLAB Web Mech Designer 2.0.5 Path Disclosure Vulnerability (Mon Nov 27 2006 - 11:11:48 CST)
  • DigiOz Guestbook version 1.7 Path Disclosure Vulnerability in list.php (Tue Nov 07 2006 - 10:48:49 CST)
• Jim Hoagland
  • New report on Teredo security (Tue Nov 28 2006 - 20:16:51 CST)
• Jim Manico
  • Re: Cracking String Encryption in Java Obfuscated Bytecode (Thu Nov 23 2006 - 17:26:11 CST)
• jimqnecms.co.uk
  • Re: [ECHO_ADV_53$2006] QnECMS <= 2.5.6 (adminfolderpath) Remote File Inclusion Vulnerability (Tue Nov 21 2006 - 18:14:41 CST)
• John GALLET
  • Re: Cracking String Encryption in Java Obfuscated Bytecode (Fri Nov 24 2006 - 10:24:38 CST)
• John Heasman
  • Whitepaper: Implementing and Detecting a PCI Rootkit (Thu Nov 16 2006 - 11:42:23 CST)
• John Morrissey
  • CVE-2006-5815: remote code execution in ProFTPD (Mon Nov 27 2006 - 10:37:30 CST)
• Jon Hart
  • Re: SYMSA-2006-011: JBoss Java Class DeploymentFileRepository Directory Traversal (Mon Nov 27 2006 - 23:21:06 CST)
• Joxean Koret
  • WFTPD Pro Server 3.23 Buffer Overflow (Tue Nov 07 2006 - 03:26:29 CST)
  • WarFTPd 1.82.00-RC11 Remote Denial Of Service (Tue Nov 07 2006 - 03:23:59 CST)
• Juha-Matti Laurio
  • Re: Password Flaw also in Firefox 1.5.08. Was: Big Flaw in Firefox 2: Password Manager Bug Exposes Passwords (Thu Nov 23 2006 - 12:23:46 CST)
• K F (lists)
  • Kerio WebSTAR local privilege escalation (Thu Nov 16 2006 - 11:40:23 CST)
  • [Fwd: OpenBase SQL multiple vulnerabilities Part Deux] (Tue Nov 14 2006 - 12:33:13 CST)
  • [Fwd: DMA[2006-1031a] - 'Intego VirusBarrier X4 definition bypass exploit'] (Tue Nov 14 2006 - 12:32:29 CST)
• katatafishhush.com
  • BLOG:CMS <= 4.1.3 XSS (Sat Nov 18 2006 - 08:40:43 CST)
• Kees Cook
  • [USN-390-1] evince vulnerability (Thu Nov 30 2006 - 15:47:42 CST)
  • [USN-389-1] GnuPG vulnerability (Wed Nov 29 2006 - 16:36:05 CST)
  • [USN-388-1] KOffice vulnerability (Wed Nov 29 2006 - 15:29:32 CST)
  • [USN-385-1] tar vulnerability (Mon Nov 27 2006 - 17:31:02 CST)
  • [USN-387-1] Dovecot vulnerability (Tue Nov 28 2006 - 14:42:53 CST)
  • [USN-386-1] ImageMagick vulnerability (Mon Nov 27 2006 - 19:36:19 CST)
  • [USN-381-1] Firefox vulnerabilities (Tue Nov 21 2006 - 13:17:28 CST)
  • [USN-382-1] Thunderbird vulnerabilities (Tue Nov 21 2006 - 13:17:47 CST)
  • [USN-384-1] OpenLDAP vulnerability (Mon Nov 20 2006 - 18:46:53 CST)
  • [USN-383-1] libpng vulnerability (Fri Nov 17 2006 - 02:58:41 CST)
  • [USN-379-1] texinfo vulnerability (Thu Nov 09 2006 - 13:17:19 CST)
  • [USN-376-2] imlib2 regression fix (Mon Nov 06 2006 - 16:57:49 CST)
  • [USN-377-1] NVIDIA vulnerability (Fri Nov 03 2006 - 18:43:22 CST)
  • [USN-378-1] RPM vulnerability (Fri Nov 03 2006 - 21:12:35 CST)
  • [USN-376-1] imlib2 vulnerabilities (Fri Nov 03 2006 - 17:37:09 CST)
  • [USN-374-1] wvWare vulnerability (Wed Nov 01 2006 - 12:57:25 CST)
  • [USN-373-1] mutt vulnerabilities (Wed Nov 01 2006 - 11:51:40 CST)
  • [USN-371-1] Ruby vulnerability (Wed Nov 01 2006 - 09:38:35 CST)
  • [USN-370-1] screen vulnerability (Wed Nov 01 2006 - 09:37:48 CST)
• koenigd-e-k-a-d-e-n-t.de
  • Firefox 1.5.0.7 Exploit (Thu Nov 02 2006 - 10:43:35 CST)
• kspecial
  • evince buffer overflow exploit (gv) (Mon Nov 27 2006 - 23:11:48 CST)
• LegendaryZion
  • Cross Site Scripting (XSS) Vulnerability in Netquery by "VIRtech" (Wed Nov 01 2006 - 10:27:50 CST)
• liuqxnipc.org.cn
  • TFTP Server 3CTftpSvc Buffer Overflow Vulnerability (Long transporting mode) (Sun Nov 26 2006 - 06:31:48 CST)
  • TFTP Server AT-TFTP Server v 1.9 Buffer Overflow Vulnerability (Long filename) (Sun Nov 26 2006 - 06:30:41 CST)
  • TFTPD32 v3.01 TFTP Server Long File Name Buffer Overflow Vulnerability (Thu Nov 16 2006 - 20:02:28 CST)
• liz0bsdmail.org
  • Article Script v1.*and v1.6.3 Sql injection (Sun Nov 05 2006 - 18:35:08 CST)
• Lubomir Kundrak
  • Re: Firefox 1.5.0.7 Exploit (Mon Nov 06 2006 - 06:16:01 CST)
• Lucas Holt
  • Re: FreeBSD all versions FireWire IOCTL kernel integer overflow information disclousure (Thu Nov 16 2006 - 07:38:35 CST)
• m-0-thotmail.com
  • XSS in script Mobile (Fri Nov 03 2006 - 09:15:47 CST)
• mahmood ali
  • <img src="/imgs/at.gif" border=0 align=middle>cid stats v2.3 File Include (Sun Nov 05 2006 - 16:33:25 CST)
• Manchester 2600
  • UK Security Convention - Continuity 2006 (Tue Nov 14 2006 - 19:26:11 CST)
• Manh Tho
  • Call for papers: ARES 2007 submission deadline approaches in 2 weeks: 19-11-2006 (Tue Nov 07 2006 - 14:17:35 CST)
• Marcello Barnaba
  • Re: Advisory 14/2006: Dotdeb PHP Email Header Injection Vulnerability (Tue Nov 14 2006 - 15:17:34 CST)
• Mark Wadham
  • Re: ProFTPD mod_tls pre-authentication buffer overflow (Wed Nov 29 2006 - 04:39:23 CST)
• Martin Pitt
  • Re: Firefox 1.5.0.7 Exploit (Fri Nov 03 2006 - 01:18:04 CST)
  • [USN-375-1] PHP vulnerability (Thu Nov 02 2006 - 13:40:16 CST)
• Martin Schulze
  • [SECURITY] [DSA 1221-1] New libgsf packages fix arbitrary code execution (Thu Nov 30 2006 - 02:55:20 CST)
  • [SECURITY] [DSA 1210-1] New Mozilla Firefox packages fix several vulnerabilities (Tue Nov 14 2006 - 02:02:35 CST)
• Matousec - Transparent security Research
  • Outpost Multiple insufficient argument validation of hooked SSDT function Vulnerability (Wed Nov 15 2006 - 13:24:16 CST)
  • Outpost Insufficient validation of 'SandBox' driver input buffer (Wed Nov 01 2006 - 12:55:58 CST)
• Matthew Conover
  • "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?) (Tue Nov 21 2006 - 22:23:12 CST)
• Matthias Geerdsen
  • [ GLSA 200611-17 ] fvwm: fvwm-menu-directory fvwm command injection (Thu Nov 23 2006 - 14:52:17 CST)
  • [ GLSA 200611-04 ] Bugzilla: Multiple Vulnerabilities (Thu Nov 09 2006 - 14:54:58 CST)
  • [ GLSA 200611-02 ] Qt: Integer overflow (Mon Nov 06 2006 - 07:52:14 CST)
  • [ GLSA 200611-01 ] Screen: UTF-8 character handling vulnerability (Fri Nov 03 2006 - 07:30:26 CST)
• Mayhemic Labs Security
  • MHL-2006-003 Public Advisory: "mboard" file creation issue (Sun Nov 26 2006 - 21:33:12 CST)
• MefistoHackermail.Com
  • Re: PhpGedView 4.0.2 (DOCUMENT_ROOT) File inclusion Vulnerablity (Tue Nov 28 2006 - 06:20:26 CST)
  • Re: Active PHP Bookmarks (apb.php) Remote file include (Fri Nov 24 2006 - 04:22:21 CST)
• Michael Scheidell
  • Password Flaw also in Firefox 1.5.08. Was: Big Flaw in Firefox 2: Password Manager Bug Exposes Passwords (Thu Nov 23 2006 - 07:13:10 CST)
• Micheal Turner
  • Re: [Full-disclosure] ZDI-06-040: WinZip FileView ActiveX Control Unsafe Method Exposure Vulnerability (Tue Nov 14 2006 - 16:34:08 CST)
• Mike Prosser
  • SYM06-023, Symantec NetBackup PureDisk: PHP update to Address Reported Security Vulnerability (Wed Nov 29 2006 - 12:21:46 CST)
• miladkalehgmail.com
  • XSS in Email Signature Script (Sat Nov 11 2006 - 10:47:57 CST)
• Moritz Muehlenhoff
  • [SECURITY] [DSA 1222-1] New proftpd packages fix several vulnerabilities (Thu Nov 30 2006 - 11:13:51 CST)
  • [SECURITY] [DSA 1220-1] New pstotext packages fix arbitrary shell command execution (Sun Nov 26 2006 - 12:03:12 CST)
  • [SECURITY] [DSA 1218-1] New proftpd packages fix denial of service (Tue Nov 21 2006 - 12:10:59 CST)
  • [SECURITY] [DSA 1207-2] New phpmyadmin packages fix regression (Sun Nov 19 2006 - 06:55:33 CST)
  • [SECURITY] [DSA 1215-1] New xine-lib packages fix execution of arbitrary code (Mon Nov 20 2006 - 14:36:33 CST)
  • [SECURITY] [DSA 1216-1] New flexbackup packages fix denial of service (Mon Nov 20 2006 - 14:42:35 CST)
  • [SECURITY] [DSA 1217-1] New linux-ftpd packages fix access control bypass (Mon Nov 20 2006 - 14:56:04 CST)
  • [SECURITY] [DSA 1214-1] New gv packages fix arbitrary code execution (Mon Nov 20 2006 - 14:24:02 CST)
  • [SECURITY] [DSA 1213-1] New imagemagick packages fix several vulnerabilities (Sun Nov 19 2006 - 06:43:56 CST)
  • [SECURITY] [DSA 1211-1] New pdns packages fix arbitrary code execution (Tue Nov 14 2006 - 17:44:57 CST)
  • [SECURITY] [DSA 1209-2] New trac packages fix cross-site request forgery (Mon Nov 13 2006 - 14:56:04 CST)
  • [SECURITY] [DSA 1208-1] New bugzilla packages fix several vulnerabilities (Sat Nov 11 2006 - 08:08:27 CST)
  • [SECURITY] [DSA 1209-1] New trac packages fix cross-site request forgery (Sun Nov 12 2006 - 12:31:50 CST)
  • [SECURITY] [DSA 1207-1] New phpmyadmin packages fix several vulnerabilities (Thu Nov 09 2006 - 12:00:21 CST)
  • [SECURITY] [DSA 1206-1] New php4 packages fix several vulnerabilities (Mon Nov 06 2006 - 12:13:12 CST)
  • [SECURITY] [DSA 1204-1] New ingo1 packages fix arbitrary shell command execution (Thu Nov 02 2006 - 17:46:19 CST)
  • [SECURITY] [DSA 1203-1] New libpam-ldap packages fix access control bypass (Thu Nov 02 2006 - 12:53:01 CST)
• mr_kalimanmsn.com
  • <img src="/imgs/at.gif" border=0 align=middle>lex Guestbook 4.0.1 : Full Path Disclosure & XSS (Thu Nov 30 2006 - 12:45:48 CST)
• Mustafa Can Bjorn IPEKCI
  • Advisory: Seditio <= 1.10 Remote SQL Injection Vulnerability. (Tue Nov 21 2006 - 23:06:21 CST)
  • Advisory: LDU <= 8.x Remote SQL Injection Vulnerability. (Tue Nov 21 2006 - 23:03:56 CST)
• nagazakig74hotmail.com
  • Wisi Portal [Sql Injection By Jesus Tovar] (Fri Nov 24 2006 - 20:31:55 CST)
  • Siap Cms Sql Injection (login.asp) (Fri Nov 24 2006 - 19:23:15 CST)
• navairumgmail.com
  • Re: New Bug MiniBB Forum <= 2 Remote File Include (index.php) (Tue Nov 14 2006 - 08:48:56 CST)
  • Web Interface remote file inclusion (Sat Nov 11 2006 - 18:45:24 CST)
  • Y.A.N.S sql injection (Wed Nov 08 2006 - 06:59:34 CST)
  • News publication system remote File include (Tue Nov 07 2006 - 09:02:32 CST)
  • Stanford university SCARF user editing (Sat Nov 04 2006 - 14:25:41 CST)
• Nick Boyce
  • Re: [ GLSA 200611-03 ] NVIDIA binary graphics driver: Privilege escalation vulnerability (Mon Nov 13 2006 - 11:19:52 CST)
• Nick FitzGerald
  • Re: [ GLSA 200611-03 ] NVIDIA binary graphics driver: Privilege escalation vulnerability (Mon Nov 13 2006 - 22:11:58 CST)
• Nicob
  • Old SAP exploits (Sun Nov 12 2006 - 05:35:22 CST)
  • Re: Multiple vulnerabilities in SAP Web Application Server 6.40 and7.00 (Thu Nov 09 2006 - 14:08:08 CST)
  • Re: Multiple vulnerabilities in SAP Web Application Server 6.40 and7.00 (Mon Nov 06 2006 - 17:43:33 CST)
  • Multiple vulnerabilities in SAP Web Application Server 6.40 and 7.00 (Wed Nov 01 2006 - 19:24:23 CST)
• no-replyhessamx.net
  • NVIDIA nView (keystone) local Denial Of service (Thu Nov 23 2006 - 03:54:50 CST)
• Noah Meyerhans
  • [SECURITY] [DSA 1219-1] New texinfo packages fix multiple vulnerabilities (Mon Nov 27 2006 - 11:42:34 CST)
  • [SECURITY] [DSA 1212-1] New openssh packages fix denial of service (Wed Nov 15 2006 - 11:26:52 CST)
• Noam Rathaus
  • Re: GNU gv Stack Overflow Vulnerability (Sun Nov 12 2006 - 11:47:25 CST)
  • Re: [x0n3-h4ck]Essentia Web Server v.2.15 Buffer Overflow (Sun Nov 12 2006 - 10:51:13 CST)
• NormandiaN_MailIDYahoo.com
  • VMware 5.5.1 Local Buffer Overflow (HTML Exploit) (Sun Nov 26 2006 - 00:05:34 CST)
• null_hackyahoo.com
  • PHP Rapid Kill All Version File Injection (Sun Nov 05 2006 - 20:34:22 CST)
• oldiesmannsimplemachines.org
  • Re: Re: Simple Machines Forum (SMF) XSS issue (Wed Nov 01 2006 - 09:06:20 CST)
• Omirjan Batyrbaev
  • New Correction: Re: Serious crypto problem fixed by envelope HMAC method instead of currently used prefix (Tue Nov 21 2006 - 08:31:32 CST)
  • Correction: Re: Serious crypto problem fixed by envelope HMAC method insteadof currently used prefix (Mon Nov 20 2006 - 12:45:45 CST)
  • Re: Serious crypto problem fixed by envelope HMAC method insteadof currently used prefix (Mon Nov 20 2006 - 15:56:33 CST)
  • Serious crypto problem fixed by envelope HMAC method insteadof currently used prefix (Sun Nov 19 2006 - 20:44:21 CST)
• OOZIE
  • Re: Firefox 1.5.0.7 Exploit (Thu Nov 02 2006 - 17:30:23 CST)
• OpenPKG
  • [OpenPKG-SA-2006.036] OpenPKG Security Advisory (png) (Fri Nov 17 2006 - 02:46:05 CST)
  • [OpenPKG-SA-2006.035] OpenPKG Security Advisory (proftpd) (Thu Nov 16 2006 - 15:44:34 CST)
  • [OpenPKG-SA-2006.034] OpenPKG Security Advisory (texinfo) (Wed Nov 15 2006 - 08:21:32 CST)
  • [OpenPKG-SA-2006.033] OpenPKG Security Advisory (openldap) (Fri Nov 10 2006 - 07:07:25 CST)
  • [OpenPKG-SA-2006.032] OpenPKG Security Advisory (openssh) (Wed Nov 08 2006 - 10:08:33 CST)
  • [OpenPKG-SA-2006.029] OpenPKG Security Advisory (bind) (Sat Nov 04 2006 - 06:49:38 CST)
  • [OpenPKG-SA-2006.028] OpenPKG Security Advisory (php) (Fri Nov 03 2006 - 16:58:54 CST)
  • [OpenPKG-SA-2006.030] OpenPKG Security Advisory (ruby) (Sat Nov 04 2006 - 07:27:04 CST)
• OS2A BTO
  • ELOG Web Logbook Remote Denial of Service Vulnerability (Sun Nov 12 2006 - 23:32:27 CST)
• packetpacketstormsecurity.org
  • Re: GPhotos 1.5 Multiple vulnerabilities (Mon Nov 20 2006 - 10:42:09 CST)
• pagvac
  • Sage cross-context scripting -> LOCAL-CONTEXT SCRIPTING (Sat Nov 18 2006 - 07:43:28 CST)
• paisterist.nstgmail.com
  • PHP-Nuke <= 7.9 News module "sid" SQL Injection vulnerabilities (Fri Nov 24 2006 - 02:13:13 CST)
• Paul Laudanski
  • Re: how to trick most of cms avatar upload filter [exemple for : RunCms (PoC)] (Fri Nov 03 2006 - 17:45:23 CST)
• Pavel Kankovsky
  • Re: Clarifying integer overflows vs. signedness errors (Sat Nov 25 2006 - 12:02:16 CST)
• pdp (architect)
  • AttackAPI 2.0 alpha (Sat Nov 25 2006 - 02:16:50 CST)
• philip anselmo
  • PHP Event Calendar 1.5.1 (index.php) Remote File Include Vulnerability (Mon Nov 27 2006 - 18:24:20 CST)
  • CuteNews v1.4.5 (search.php) Remote file include vulnerability (Sun Nov 26 2006 - 17:08:49 CST)
  • Active PHP Bookmarks (apb.php) Remote file include (Thu Nov 23 2006 - 16:32:58 CST)
  • New Bug MiniBB Forum <= 2 Remote File Include (index.php) (Mon Nov 13 2006 - 12:15:03 CST)
• philipp.niedzielagmx.de
  • PHPKit 1.6.1 RC2 (faq/faq.php) Remote SQL Injection Exploit (Fri Nov 10 2006 - 17:24:27 CST)
• poplixpapuasia.org
  • iodine client 0.3.2 buffer overflow (Thu Nov 02 2006 - 12:12:09 CST)
• ProCheckUp Research
  • Immediacy .NET CMS possibly vulnerable to Cross Site Scripting through a malformed cookie (Wed Nov 08 2006 - 05:39:30 CST)
  • Cross Site Scripting (XSS) Vulnerability in IBM WebSphere Application Server (Mon Nov 06 2006 - 07:47:02 CST)
• Raphael Marichez
  • [ GLSA 200611-26 ] ProFTPD: Remote execution of arbitrary code (Thu Nov 30 2006 - 16:41:28 CST)
  • [ GLSA 200611-24 ] LHa: Multiple vulnerabilities (Tue Nov 28 2006 - 13:56:20 CST)
  • [ GLSA 200611-25 ] OpenLDAP: Denial of Service vulnerability (Tue Nov 28 2006 - 13:58:14 CST)
  • [ GLSA 200611-23 ] Mono: Insecure temporary file creation (Tue Nov 28 2006 - 13:54:39 CST)
  • Re: [ GLSA 200611-03 ] NVIDIA binary graphics driver: Privilege escalation vulnerability (Mon Nov 13 2006 - 17:10:02 CST)
  • [ GLSA 200611-07 ] GraphicsMagick: PALM and DCM buffer overflows (Mon Nov 13 2006 - 16:55:57 CST)
  • [ GLSA 200611-08 ] RPM: Buffer overflow (Mon Nov 13 2006 - 16:57:09 CST)
  • [ GLSA 200611-06 ] OpenSSH: Multiple Denial of Service vulnerabilities (Mon Nov 13 2006 - 16:53:37 CST)
  • [ GLSA 200611-05 ] Netkit FTP Server: Privilege escalation (Fri Nov 10 2006 - 08:24:07 CST)
  • [ GLSA 200611-03 ] NVIDIA binary graphics driver: Privilege escalation vulnerability (Tue Nov 07 2006 - 16:24:18 CST)
• raven
  • Re: CuteNews v1.4.5 (search.php) Remote file include vulnerability (Tue Nov 28 2006 - 04:58:46 CST)
• Reed Arvin
  • New Windows tool - PWDumpX v1.0 (Wed Nov 29 2006 - 10:06:33 CST)
  • New Windows tool - NBTEnum 3.3 (Fri Nov 24 2006 - 16:54:09 CST)
• Renaud Lifchitz
  • GNU gv Stack Overflow Vulnerability (Thu Nov 09 2006 - 09:55:46 CST)
• researchgleg.net
  • ProFTPD mod_tls pre-authentication buffer overflow (Tue Nov 28 2006 - 03:13:44 CST)
  • Re: [ MDKSA-2006:217 ] - Updated proftpd packages fix vulnerabilities (Tue Nov 21 2006 - 08:50:09 CST)
• researchsymantec.com
  • SYMSA-2006-011: JBoss Java Class DeploymentFileRepository Directory Traversal (Mon Nov 27 2006 - 11:36:29 CST)
• retrogalice.it
  • Wolflab Burning Board Lite 1.0.2 two sql injections (Thu Nov 23 2006 - 20:44:54 CST)
• revenge
  • ContentNow CMS 1.39 Sql Injection + Path Disclosure Vulnerabilities (Tue Nov 21 2006 - 12:47:37 CST)
  • Etomite CMS 0.6.1.2 Multiple Vulnerabilities ( Sql Injection + Local file inclusion ) (Thu Nov 16 2006 - 06:49:24 CST)
• Reversemode
  • [Reversemode advisory] Computer Associates HIPS Drivers - multiple local privilege escalation vulnerabilities. (Thu Nov 16 2006 - 11:15:15 CST)
• Richard Stanway
  • RE: how to trick most of cms avatar upload filter [exemple for : RunCms (PoC)] (Thu Nov 02 2006 - 17:14:01 CST)
• riclemyahoo.com
  • Chetcpasswd 2.x: multiple vulnerabilities (Mon Nov 13 2006 - 13:06:18 CST)
• Robert McGrew
  • Re: Firefox 1.5.0.7 Exploit (Thu Nov 02 2006 - 14:20:40 CST)
• Rodrigo Rubira Branco (BSDaemon)
  • FreeBSD all versions FireWire IOCTL kernel integer overflow information disclousure (Wed Nov 15 2006 - 06:52:57 CST)
  • TrustedBSD* all versions FireWire IOCTL kernel integer overflow information disclousure (Wed Nov 15 2006 - 06:55:16 CST)
  • DragonFlyBSD all versions FireWire IOCTL kernel integer overflow information disclousure (Wed Nov 15 2006 - 06:54:31 CST)
  • NetBSD all versions FireWire IOCTL kernel integer overflow information disclousure (Wed Nov 15 2006 - 06:53:52 CST)
• Roger A. Grimes
  • RE: Internet Explorer 7 - Still Spyware Writers' Heaven (Sun Nov 05 2006 - 21:35:25 CST)
  • RE: Internet Explorer 7 - Still Spyware Writers' Heaven (Thu Nov 02 2006 - 15:45:33 CST)
• Rogier Mulhuijzen
  • RE: FreeBSD all versions FireWire IOCTL kernel integer overflow information disclousure (Mon Nov 20 2006 - 04:51:31 CST)
• rootarab4services.com
  • Joomla 1.0.11 Remote File Include (Mon Nov 06 2006 - 06:28:37 CST)
• rooth4x0r.ir
  • VBulletin DoS Exploit [ all Versions ] (Fri Nov 10 2006 - 21:42:17 CST)
• rPath Update Announcements
  • rPSA-2006-0219-1 info install-info texinfo (Mon Nov 27 2006 - 09:44:06 CST)
  • rPSA-2006-0218-1 ImageMagick (Mon Nov 27 2006 - 09:42:59 CST)
  • rPSA-2006-0211-1 libpng (Wed Nov 15 2006 - 16:17:38 CST)
  • rPSA-2006-0207-1 openssh openssh-client openssh-server (Thu Nov 09 2006 - 15:54:32 CST)
  • rPSA-2006-0206-1 firefox thunderbird (Thu Nov 09 2006 - 15:53:39 CST)
  • rPSA-2006-0205-1 php php-mysql php-pgsql (Thu Nov 09 2006 - 15:52:27 CST)
  • rPSA-2006-0204-1 kernel (Thu Nov 09 2006 - 15:51:25 CST)
  • rPSA-2006-0202-1 tshark wireshark (Wed Nov 01 2006 - 14:45:59 CST)
• rvirtuevirtech.org
  • Re: Cross Site Scripting (XSS) Vulnerability in Netquery by "VIRtech" (Sat Nov 11 2006 - 13:05:30 CST)
• salesflexwatch.com
  • Re: Digital Armaments Security Advisory 10.07.2006: Flexwath Authorization Bypassing and XSS Vulnerability (Fri Nov 03 2006 - 03:04:42 CST)
• saps.auditgmail.com
  • JiRos Links Manager[injection sql & xss permanent] (Tue Nov 21 2006 - 14:12:50 CST)
  • creadirectory [injection sql & xss] (Tue Nov 21 2006 - 13:58:31 CST)
  • Link Exchange Lite [injection sql] (Tue Nov 21 2006 - 13:33:44 CST)
  • aBitWhizzy [local file include] (Tue Nov 21 2006 - 10:21:40 CST)
  • Re: [ GLSA 200611-11 ] TikiWiki: Multiple vulnerabilities (Tue Nov 21 2006 - 09:38:29 CST)
  • The Classified Ad System [multiple xss & injection sql] (Sun Nov 19 2006 - 09:17:45 CST)
  • Classified System [injection sql] (Sun Nov 19 2006 - 09:56:08 CST)
  • klf-realty [injection sql] (Sun Nov 19 2006 - 10:28:06 CST)
  • Rialto 1.6[admin login bypass & multiples injections sql] (Sun Nov 19 2006 - 20:53:31 CST)
  • eClassifieds [injection sql] (Sun Nov 19 2006 - 09:44:00 CST)
  • ehomes [multiples injections sql] (Sun Nov 19 2006 - 20:25:51 CST)
  • Rapid Classified v3.1 [multiple xss (get) & injection sql] (Sun Nov 19 2006 - 09:07:24 CST)
  • Vikingboard (0.1.2) [ multiples vulnerability ] (Sat Nov 18 2006 - 10:57:02 CST)
  • Infinitytechs Restaurants CM (Fri Nov 17 2006 - 15:04:11 CST)
  • 20/20 datashed [ multiples injection sql ] (Fri Nov 17 2006 - 13:17:21 CST)
  • Dating Site [ login bypass & xss] (Fri Nov 17 2006 - 14:37:24 CST)
  • Aspmforum [ multiples injection sql (get&post)] (Wed Nov 15 2006 - 12:43:05 CST)
  • 20/20 real estate [ multiples injection sql ] (Fri Nov 17 2006 - 12:29:19 CST)
  • 20/20 auto gallery [ multiples injection sql ] (Fri Nov 17 2006 - 12:18:28 CST)
  • Active News Manager [ injection sql (post&get)] (Tue Nov 14 2006 - 16:05:45 CST)
  • Pilot Cart V.7.2 [ injection sql (post) ] (Tue Nov 14 2006 - 12:45:02 CST)
  • ASP Cart [multiples injection sql (post & get)] (Tue Nov 14 2006 - 15:24:26 CST)
  • BaalAsp forum [login bypass ,injections sql(post), xss(post)] (Wed Nov 15 2006 - 11:44:25 CST)
  • CandyPress Store[ multiples injection sql ] (Tue Nov 14 2006 - 13:17:08 CST)
  • eShopping Cart [injection sql] (Tue Nov 14 2006 - 11:27:16 CST)
  • PhpMyAdmin all version [multiples vulnerability] (Thu Nov 16 2006 - 10:32:27 CST)
  • MetaCart e-Shop [multiples injection sql (get & post)] (Tue Nov 14 2006 - 12:18:45 CST)
  • E-commerce Kit 1 PayPal Edition [ injection sql ] (Tue Nov 14 2006 - 11:45:58 CST)
  • E-Calendar Pro 3.0 [ login bypass & injection sql (post)] (Wed Nov 15 2006 - 11:05:48 CST)
  • MultiCalendars [ multiples injection sql ] (Wed Nov 15 2006 - 10:43:05 CST)
  • Dragon calendar [ login bypass & injection sql ] (Wed Nov 15 2006 - 09:27:34 CST)
  • hpecs shopping cart[login bypass & injection sql (post)] (Tue Nov 14 2006 - 13:31:56 CST)
  • A-Cart pro[ injection sql (post&get)] (Tue Nov 14 2006 - 13:55:25 CST)
  • A+ Store E-Commerce[ injection sql & xss (post) ] (Tue Nov 14 2006 - 14:45:11 CST)
  • Property Site Manager [login bypass ,multiples injection sql & xss (get)] (Tue Nov 14 2006 - 08:47:14 CST)
  • Blogme v3 [admin login bypass & xss (post)] (Tue Nov 14 2006 - 09:27:21 CST)
  • FunkyASP Glossary v1.0 [injection sql] (Tue Nov 14 2006 - 09:09:11 CST)
  • Car Site Manager [injection sql & xss (get)] (Tue Nov 14 2006 - 08:33:04 CST)
  • Inventory Manager [injection sql & xss (get)] (Tue Nov 14 2006 - 07:50:22 CST)
  • Evolve Merchant[ injection sql ] (Tue Nov 14 2006 - 14:29:25 CST)
  • infinicart [ multiples injection sql & xss (post) ] (Sun Nov 12 2006 - 14:26:54 CST)
  • Mega Mall [ multiples injection sql & full path disclosure ] (Sun Nov 12 2006 - 13:51:42 CST)
  • Wheatblog [multiple xss (post) & full path disclosure] (Thu Nov 09 2006 - 14:22:27 CST)
  • LandShop Real Estate [multiple injection sql & xss] (Thu Nov 09 2006 - 12:43:01 CST)
  • bitweaver <=1.3.1 [injection sql (post) & xss (post)] (Thu Nov 09 2006 - 11:05:41 CST)
  • omnistar article manager [multiples injection sql] (Wed Nov 08 2006 - 16:46:44 CST)
  • FreeWebshop <=2.2.2 [local file include & xss] (Wed Nov 08 2006 - 11:20:24 CST)
  • Speedwiki 2.0 Arbitrary File Upload Vulnerability (Wed Nov 08 2006 - 12:52:12 CST)
  • Abarcar Realty Portal [injection sql] (Wed Nov 08 2006 - 11:43:17 CST)
  • Portix-PHP [login bypass & xss (post)] (Wed Nov 08 2006 - 12:17:40 CST)
  • AIOCP <=1.3.007 multiples vulnerabilities [sql , remote file include , xss] (Mon Nov 06 2006 - 00:37:46 CST)
  • IF-CMS multiples XSS vunerabilities (Sat Nov 04 2006 - 13:11:55 CST)
  • Re: MajorSecurity Advisory #31]Xenis.creator CMS - Multiple Cross Site Scripting and SQL Injection Issues (Sat Nov 04 2006 - 12:24:33 CST)
  • SIMPLOG 0.9.3 injection sql & multiple xss (Fri Nov 03 2006 - 12:18:58 CST)
• saudihotmail.fr
  • mmgallery Multiple vulnerabilities (Thu Nov 23 2006 - 19:51:46 CST)
  • Cross site scripting & fullpath disclosure (Thu Nov 23 2006 - 19:42:31 CST)
• Secunia Research
  • Secunia Research: MailEnable IMAP Service Two Vulnerabilities (Thu Nov 30 2006 - 11:41:20 CST)
  • Secunia Research: Borland Products idsql32.dll Buffer Overflow Vulnerability (Wed Nov 29 2006 - 07:10:35 CST)
  • Secunia Research: PassGo SSO Plus Insecure Default Directory Permissions (Wed Nov 22 2006 - 04:03:24 CST)
  • Secunia Research: My Firewall Plus Privilege Escalation Vulnerability (Tue Nov 21 2006 - 09:44:47 CST)
  • Secunia Research: Panda ActiveScan Multiple Vulnerabilities (Thu Nov 16 2006 - 09:45:21 CST)
  • Secunia Research: MDaemon Insecure Default Directory Permissions (Thu Nov 16 2006 - 09:47:08 CST)
• securfroggmail.com
  • how to trick most of cms avatar upload filter [exemple for : RunCms (PoC)] (Thu Nov 02 2006 - 00:30:54 CST)
  • tikiwiki 1.9.5 mysql password disclosure & xss (Wed Nov 01 2006 - 11:34:00 CST)
• security-alerthp.com
  • [security bulletin] HPSBUX02153 SSRT061181 rev.2 - HP-UX Running Firefox, Remote Unauthorized Access or Elevation of Privileges or Denial of Service (DoS) (Thu Nov 30 2006 - 14:12:19 CST)
  • [security bulletin] HPSBMA02088 SSRT051026 rev. 2 - HP-UX running WBEM Services Denial of Service (DoS) (Fri Nov 17 2006 - 04:47:40 CST)
  • [security bulletin] HPSBMA02167 SSRT061262 rev.2 - HP OpenView Client Configuration Manager (CCM), Remote Unauthorized Arbitrary Code Execution or Denial of Service (DoS) (Thu Nov 09 2006 - 14:35:19 CST)
  • [security bulletin] HPSBMA02159 SSRT061238 rev.1 - HP System Management Homepage (SMH), Remote Bypassing of Security Features or Cross Site Scripting or Denial of Service (DoS) (Thu Nov 02 2006 - 13:38:26 CST)
  • [security bulletin] HPSBUX02091 SSRT061099 rev.2 - HP-UX Local Increased Privilege (Wed Nov 01 2006 - 14:19:05 CST)
  • [security bulletin] HPSBUX02165 SSRT061266 rev.1 - HP-UX VirtualVault Remote Unauthorized Access (Wed Nov 01 2006 - 14:20:45 CST)
  • [security bulletin] HPSBUX02164 SSRT061265 rev.1 - HP-UX VirtualVault Running Apache 1.3.X Remote Denial of Service (DoS) and Arbitrary Code Execution (Wed Nov 01 2006 - 14:19:55 CST)
  • [security bulletin] HPSBUX02172 SSRT061269 rev.1 - HP-UX VirtualVault running Apache Remote Execution of Arbitrary Code, Denial of Service (DoS), and Unauthorized Access (Wed Nov 01 2006 - 14:21:47 CST)
• security-listhacktrack.com
  • Re: EEYE: Workstation Service NetpManageIPCConnect Buffer Overflow (Sat Nov 18 2006 - 14:09:31 CST)
• securityarmorize.com
  • XSS Vulnerability in Zend Framework Preview 0.2.0 (Fri Nov 03 2006 - 04:17:22 CST)
  • Multiple XSS Vulnerabilities in Zend Google Data Client Library Preview 0.2.0 (Tue Oct 31 2006 - 22:17:05 CST)
• securitymandriva.com
  • [ MDKSA-2006:217-1 ] - Updated proftpd packages fix vulnerabilities (Thu Nov 30 2006 - 12:21:00 CST)
  • [ MDKSA-2006:219 ] - Updated tar packages fix vulnerability (Tue Nov 28 2006 - 18:13:01 CST)
  • [ MDKSA-2006:218 ] - Updated apache-mod_auth_kerb packages fixes DoS vulnerability (Thu Nov 23 2006 - 12:54:00 CST)
  • [ MDKSA-2006:208-1 ] - Updated openldap packages fixes Bind vulnerability (Tue Nov 21 2006 - 18:06:00 CST)
  • [ MDKSA-2006:216 ] - Updated links packages fix smb vulnerability (Mon Nov 20 2006 - 15:37:00 CST)
  • [ MDKSA-2006:215 ] - Updated avahi packages fix netlink vulnerability (Mon Nov 20 2006 - 15:25:00 CST)
  • [ MDKSA-2006:217 ] - Updated proftpd packages fix vulnerabilities (Mon Nov 20 2006 - 16:25:00 CST)
  • [ MDKSA-2006:164-1 ] - Updated xorg-x11/XFree86 packages fix integer overflow vulnerabilities (Fri Nov 17 2006 - 20:42:00 CST)
  • [ MDKSA-2006:214 ] - Updated gv packages fix buffer overflow vulnerability (Fri Nov 17 2006 - 13:37:01 CST)
  • [ MDKSA-2006:213 ] - Updated chromium packages to fix embedded libpng vulnerabilities (Thu Nov 16 2006 - 17:24:00 CST)
  • [ MDKSA-2006:212 ] - Updated doxygen packages to fix embedded libpng vulnerabilities (Thu Nov 16 2006 - 17:09:00 CST)
  • [ MDKSA-2006:210 ] - Updated syslinux packages to fix embedded libpng vulnerabilities (Thu Nov 16 2006 - 16:34:00 CST)
  • [ MDKSA-2006:211 ] - Updated pxelinux packages to fix embedded libpng vulnerabilities (Thu Nov 16 2006 - 16:44:00 CST)
  • [ MDKSA-2006:209 ] - Updated libpng packages fix vulnerabilities (Thu Nov 16 2006 - 16:24:00 CST)
  • [ MDKSA-2006:208 ] - Updated openldap packages fixes Bind vulnerability (Wed Nov 15 2006 - 00:20:00 CST)
  • [ MDKSA-2006:207 ] - Updated bind packages fixes RSA signature verification vulnerability (Tue Nov 14 2006 - 21:20:00 CST)
  • [ MDKSA-2006:206 ] - Updated Thunderbird packages fix multiple vulnerabilities (Thu Nov 09 2006 - 17:27:01 CST)
  • [ MDKSA-2006:205 ] - Updated Firefox packages fix multiple vulnerabilities (Thu Nov 09 2006 - 17:18:01 CST)
  • [ MDKSA-2006:204 ] - Updated openssh packages fix vulnerability (Wed Nov 08 2006 - 19:17:01 CST)
  • [ MDKSA-2006:202 ] - Updated wv packages fix vulnerabilities (Tue Nov 07 2006 - 20:59:00 CST)
  • [ MDKSA-2006:203 ] - Updated texinfo packages fix vulnerability (Wed Nov 08 2006 - 09:23:01 CST)
  • [ MDKSA-2006:198-1 ] - Updated imlib2 packages fix several vulnerabilities (Tue Nov 07 2006 - 21:16:00 CST)
  • [ MDKSA-2006:201 ] - Updated pam_ldap packages fix PasswordPolicyReponse coding error (Tue Nov 07 2006 - 20:45:00 CST)
  • [ MDKSA-2006:200 ] - Updated rpm packages fix vulnerability (Tue Nov 07 2006 - 14:47:00 CST)
  • [ MDKSA-2006:198 ] - Updated imlib2 packages fix several vulnerabilities (Mon Nov 06 2006 - 20:41:01 CST)
  • [ MDKSA-2006:199 ] - Updated libx11 packages fix file descriptor leak vulnerability (Mon Nov 06 2006 - 20:47:00 CST)
  • [ MDKSA-2006:197 ] - Updated kernel packages fix multiple vulnerabilities and bugs (Fri Nov 03 2006 - 14:01:01 CST)
  • [ MDKSA-2006:195 ] - Updated wireshark packages fix multiple vulnerabilities (Fri Nov 03 2006 - 00:06:03 CST)
  • [ MDKSA-2006:196 ] - Updated php packages to address buffer overflow issue (Fri Nov 03 2006 - 00:02:56 CST)
• sehatoyandex.ru
  • Windows Media ASX PlayList File Denial Of Service Vulnerability (Wed Nov 22 2006 - 03:08:04 CST)
• sflistgmx.de
  • Re: New Flaw in Firefox 2.0: DoS and possible remote code execution (Mon Nov 27 2006 - 01:43:04 CST)
• Shawn Fitzgerald
  • RE: Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?) (Tue Nov 28 2006 - 21:41:59 CST)
• silinfiltrated.net
  • Asterisk Local and Remote Denial of Service vulnerability (Wed Nov 01 2006 - 09:59:23 CST)
• simo64morx.org
  • Re: Advanced Guestbook 2.3.1 (Admin.php) Remote File Include (Mon Nov 06 2006 - 21:35:34 CST)
• skulmaticgmail.com
  • GreenBeast CMS <= 1.3 PHP Arbitrary File Upload Vulnerability (Tue Nov 07 2006 - 03:36:34 CST)
• sni-labssni-labs.com
  • Vulnerability in PostNuke (Tue Nov 21 2006 - 16:34:16 CST)
• Solar Designer
  • safely concatenating strings in portable C (Re: GnuPG 1.4 and 2.0 buffer overflow) (Wed Nov 29 2006 - 19:41:35 CST)
• srunschkeabit.de
  • Antwort: Joomla 1.0.11 Remote File Include (Wed Nov 08 2006 - 04:01:44 CST)
• Stefan Esser
  • Advisory 14/2006: Dotdeb PHP Email Header Injection Vulnerability (Tue Nov 14 2006 - 10:32:29 CST)
  • Advisory 13/2006: PHP HTML Entity Encoder Heap Overflow Vulnerability (Thu Nov 02 2006 - 16:12:41 CST)
  • Advisory 12/2006: phpMyAdmin - error.php XSS Vulnerability (Thu Nov 02 2006 - 02:10:38 CST)
• Stefano Zanero
  • Re: Phpjobscheduler 3.0 - Multiple Remote File Include (Sat Nov 18 2006 - 12:08:43 CST)
  • Re: dev_wms => 1.5 Remote File Include Vulnerabilities (Fri Nov 17 2006 - 13:23:28 CST)
  • Re: blogcms => 4.0.0 Remote File Include (Fri Nov 17 2006 - 13:17:07 CST)
  • Re: PLS-Bannieres 1.21 (bannieres.php) File Include (Wed Nov 01 2006 - 09:29:09 CST)
  • Re: phpLedAds 2.0(dir) File Include (Wed Nov 01 2006 - 09:26:11 CST)
• Steve Friedl
  • Re: Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?) (Sat Nov 25 2006 - 11:53:44 CST)
  • Re: Correction: Re: Serious crypto problem fixed by envelope HMAC method insteadof currently used prefix (Tue Nov 21 2006 - 00:02:13 CST)
• Steve Kemp
  • [SECURITY] [DSA-1205-1] New thttpd packages fix insecure temporary file creation (Fri Nov 03 2006 - 09:41:56 CST)
• Steve Shockley
  • Re: *BSD banner INT overflow vulnerability (Wed Nov 22 2006 - 10:02:12 CST)
• Steven M. Christey
  • Re: Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?) (Mon Nov 27 2006 - 16:14:43 CST)
  • Clarifying integer overflows vs. signedness errors (Tue Nov 21 2006 - 15:53:34 CST)
  • Minimizing error cascades in vulnerability information management (Tue Nov 07 2006 - 14:52:30 CST)
  • Re: phpMyConferences <= 8.0.2 Remote File Inclusion (Thu Nov 02 2006 - 20:00:36 CST)
• stopmakingnoisegmail.com
  • Re: Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?) (Fri Nov 24 2006 - 11:46:14 CST)
• stormhackerhotmail.com
  • TOPSTORY BASIC Version 1.0 => Remote File Include Vulnerability (Sun Nov 12 2006 - 15:35:34 CST)
• str0ke
  • Re: VMware 5.5.1 Local Buffer Overflow (HTML Exploit) (Mon Nov 27 2006 - 13:35:53 CST)
  • Re: Phpjobscheduler 3.0 - Multiple Remote File Include (Sat Nov 18 2006 - 15:48:12 CST)
• Stuart Moore
  • Re: PHP Event Calendar 1.5.1 (index.php) Remote File Include Vulnerability (Wed Nov 29 2006 - 15:43:01 CST)
• subereuncon.org
  • OWASP JBroFuzz 0.3 Fuzzer Released! (Tue Nov 28 2006 - 20:18:18 CST)
  • Cracking String Encryption in Java Obfuscated Bytecode (Thu Nov 23 2006 - 15:56:50 CST)
• Sune Kloppenborg Jeppesen
  • [ GLSA 200611-22 ] Ingo H3: Folder name shell command injection (Mon Nov 27 2006 - 02:07:06 CST)
  • [ GLSA 200611-21 ] Kile: Incorrect backup file permission (Mon Nov 27 2006 - 01:51:17 CST)
  • [ GLSA 200611-20 ] GNU gv: Stack overflow (Fri Nov 24 2006 - 14:20:23 CST)
  • [ GLSA 200611-19 ] ImageMagick: PALM and DCM buffer overflows (Fri Nov 24 2006 - 13:30:41 CST)
  • [ GLSA 200611-18 ] TIN: Multiple buffer overflows (Fri Nov 24 2006 - 07:14:32 CST)
  • [ GLSA 200611-16 ] Texinfo: Buffer overflow (Tue Nov 21 2006 - 09:24:57 CST)
  • [ GLSA 200611-15 ] qmailAdmin: Buffer overflow (Tue Nov 21 2006 - 08:42:04 CST)
  • [Full-disclosure] [ GLSA 200611-11 ] TikiWiki: Multiple vulnerabilities (Mon Nov 20 2006 - 13:33:27 CST)
  • [ GLSA 200611-11 ] TikiWiki: Multiple vulnerabilities (Mon Nov 20 2006 - 13:33:27 CST)
  • [ GLSA 200611-14 ] TORQUE: Insecure temproary file creation (Mon Nov 20 2006 - 14:09:09 CST)
  • [ GLSA 200611-12 ] Ruby: Denial of Service vulnerability (Mon Nov 20 2006 - 13:38:59 CST)
  • [ GLSA 200611-13 ] Avahi: "netlink" message vulnerability (Mon Nov 20 2006 - 13:47:31 CST)
  • [ GLSA 200611-10 ] WordPress: Multiple vulnerabilities (Fri Nov 17 2006 - 06:25:46 CST)
  • [ GLSA 200611-09 ] libpng: Denial of Service (Fri Nov 17 2006 - 05:56:37 CST)
• Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
  • Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?) (Sat Nov 25 2006 - 11:53:18 CST)
• Taneli Leppä
  • Re: how to trick most of cms avatar upload filter [exemple for : RunCms (PoC)] (Thu Nov 02 2006 - 14:06:19 CST)
  • Re: how to trick most of cms avatar upload filter [exemple for : RunCms (PoC)] (Thu Nov 02 2006 - 13:56:49 CST)
• tarkustiifp.org
  • b2evolution Remote File inclusion Vulnerability (Tue Nov 28 2006 - 13:35:29 CST)
  • b2evolution XSS Vulnerabilities (Tue Nov 28 2006 - 13:34:18 CST)
• Teemu Salmela
  • Links smbclient command execution (Tue Nov 14 2006 - 19:14:56 CST)
• the_3dit0ryahoo.com
  • ltwCalendar => 4.2.1 Remote File Include Vulnerabilities (Sun Nov 19 2006 - 06:47:47 CST)
  • my little weblog => Cross Site Scripting (Sun Nov 19 2006 - 06:52:42 CST)
  • Wabbit PHP Gallery => 0.9 Remote Traversal Directory (Sun Nov 19 2006 - 06:54:29 CST)
  • BirdBlog => v1.4.0 Cross Site Scripting (Sun Nov 19 2006 - 06:46:28 CST)
  • MyAlbum <= 3.02 (langs_dir) Remote File Inclusion Exploit (Mon Nov 20 2006 - 05:04:13 CST)
  • Telaen => 1.1.0 Remote File Include Vulnerability (Sun Nov 19 2006 - 06:51:07 CST)
  • mxBB calsnails module 1.06 Remote File Inclusion Exploit (Mon Nov 20 2006 - 05:03:40 CST)
  • mg.applanix <= 1.3.1 Remote File Include Exploit (Mon Nov 20 2006 - 05:03:08 CST)
  • iPrimal Forums (index.php) Remote File Include Exploit (Mon Nov 20 2006 - 05:02:33 CST)
  • DodosMail <= 2.0.1(dodosmail.php) Remote File Inclusion Exploit (Mon Nov 20 2006 - 05:01:55 CST)
  • enomphp => 4.0 Remote Traversal Directory (Sun Nov 19 2006 - 06:51:57 CST)
  • dicshunary 0.1 alpha Remote File Inclusion Exploit (Mon Nov 20 2006 - 05:01:14 CST)
  • Shopping_Catalog Remote File Include exploit (Mon Nov 20 2006 - 05:06:11 CST)
  • PHPOLL => 0.96 Cross Site Scripting (Sun Nov 19 2006 - 06:49:43 CST)
  • PhpQuickGallery <= 1.9 Remote File Inclusion Exploit (Mon Nov 20 2006 - 05:05:24 CST)
  • Telaen <= 1.1.0 Remote File Include Exploit (Sun Nov 19 2006 - 06:50:34 CST)
  • LoudMouth => 2.4 Remote File Include Vulnerabilities (Sun Nov 19 2006 - 06:47:06 CST)
  • Sphpblog => 0.8 Remote File Include Vulnerabilities (Thu Nov 16 2006 - 03:02:45 CST)
  • Storystream => 4.0 Remote File Include Vulnerability Exploit (Thu Nov 16 2006 - 03:04:21 CST)
  • RED Blog => Remote File Include Vulnerability Exploit (Thu Nov 16 2006 - 03:02:00 CST)
  • blogcms => 4.0.0 Remote File Include (Thu Nov 16 2006 - 02:48:46 CST)
  • My-BIC => 0.6.5 Remote File Include Vulnerability Exploit (Thu Nov 16 2006 - 02:59:51 CST)
  • eggblog=> 3.1.0 Cross Site Scripting (Thu Nov 16 2006 - 02:58:50 CST)
  • worksystem => Remote File Include Vulnerability Exploit (Thu Nov 16 2006 - 03:05:00 CST)
  • BlogTorrent-preview => 0.92 Cross Site Scripting (Thu Nov 16 2006 - 02:50:35 CST)
  • Sphpblog => 0.8 Cross Site Scripting (Thu Nov 16 2006 - 02:47:52 CST)
  • Myphotos => Remote File Include Vulnerability Exploit (Thu Nov 16 2006 - 03:00:37 CST)
  • discloser => 0.0.4 Remote File Include Vulnerability Exploit (Thu Nov 16 2006 - 02:56:53 CST)
  • dev_wms => 1.5 Remote File Include Vulnerabilities (Thu Nov 16 2006 - 02:55:16 CST)
  • Bloo => 1.00 Remote File Include Vulnerability (Thu Nov 16 2006 - 02:51:39 CST)
  • OdysseusBlog => 1.0.0 Cross Site Scripting (Thu Nov 16 2006 - 03:01:20 CST)
  • discloser => 0.0.4 Remote File Include Vulnerabilities (Thu Nov 16 2006 - 02:57:52 CST)
  • Bloo => 1.00 Cross Site Scripting (Thu Nov 16 2006 - 02:53:11 CST)
• Thiago Zaninotti
  • Re: Clarifying integer overflows vs. signedness errors (Tue Nov 21 2006 - 21:37:48 CST)
• Thierry Zoller
  • Re: Internet Explorer 7 - Still Spyware Writers' Heaven (Sat Nov 04 2006 - 07:03:32 CST)
• Thor (Hammer of God)
  • Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?) (Sat Nov 25 2006 - 14:24:51 CST)
  • Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?) (Fri Nov 24 2006 - 17:52:24 CST)
• Tim Newsham
  • Re: Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?) (Sun Nov 26 2006 - 12:37:28 CST)
• Timo Sirainen
  • Dovecot IMAP/POP3 server: Off-by-one buffer overflow (Sat Nov 18 2006 - 18:39:23 CST)
• Trustix Security Advisor
  • TSLSA-2006-0066 - multi (Tue Nov 28 2006 - 01:38:46 CST)
  • TSLSA-2006-0065 - libpng (Fri Nov 17 2006 - 07:07:55 CST)
  • TSLSA-2006-0063 - multi (Wed Nov 15 2006 - 02:48:54 CST)
  • TSLSA-2006-0061 - multi (Fri Nov 03 2006 - 09:02:12 CST)
• TSRT3Com.com
  • TSRT-06-13: HP OpenView Client Configuration Manager Device Code Execution Vulnerability (Wed Nov 08 2006 - 11:48:58 CST)
• tux025gmail.com
  • mAlbum v0.3 local file inclusion (Sat Nov 25 2006 - 14:47:45 CST)
  • mAlbum v0.3 Multiple vulnerabilitizzz (Mon Nov 20 2006 - 12:15:28 CST)
  • GPhotos 1.5 Multiple vulnerabilities (Sat Nov 18 2006 - 15:19:01 CST)
• vannovaxgmail.com
  • Wordpress File Inclusion (Fri Nov 10 2006 - 20:18:35 CST)
• Vincent A.Menard
  • Multiple Vulnerabilities in AlternC version 0.9.5 (Tue Nov 28 2006 - 15:55:34 CST)
• vitux.manisgmail.com
  • Ixprim CMS 1.2 Remote File Include Vulnerability (Sun Nov 19 2006 - 03:06:47 CST)
• VMware Security team
  • VMSA-2006-0010 - SSL sessions not authenticated by VC Clients (Tue Nov 21 2006 - 16:51:34 CST)
  • VMSA-2006-0008 - VMware ESX Server 2.0.2 Upgrade Patch 2 (Mon Nov 13 2006 - 17:23:03 CST)
  • VMSA-2006-0009 - VMware ESX Server 3.0.0 AMD fxsave/restore issue (Mon Nov 13 2006 - 17:23:11 CST)
  • VMSA-2006-0005 - VMware ESX Server 2.5.4 Upgrade Patch 1 (Mon Nov 13 2006 - 17:22:20 CST)
  • VMSA-2006-0006 - VMware ESX Server 2.5.3 Upgrade Patch 4 (Mon Nov 13 2006 - 17:22:38 CST)
  • VMSA-2006-0007 - VMware ESX Server 2.1.3 Upgrade Patch 2 (Mon Nov 13 2006 - 17:22:54 CST)
• webmasterphpbb-es.com
  • Re: SolpotCrew Advisory #10 - phpBB XS (phpbb_root_path) Remote File Include (Thu Nov 23 2006 - 12:55:30 CST)
• Werner Koch
  • GnuPG 1.4 and 2.0 buffer overflow (Mon Nov 27 2006 - 11:13:02 CST)
• Williams, James K
  • RE: LS-20061113 - CA BrightStor ARCserve Backup Remote Buffer Overflow Vulnerability (Tue Nov 21 2006 - 18:04:52 CST)
  • RE: [Reversemode advisory] Computer Associates HIPS Drivers - multiple local privilege escalation vulnerabilities. (Tue Nov 21 2006 - 17:49:56 CST)
• wmodesucsc.edu
  • Re: feedsplitter considered harmful (Mon Nov 13 2006 - 11:39:28 CST)
• x___._hotmail.com
  • PhpGedView 4.0.2 (DOCUMENT_ROOT) File inclusion Vulnerablity (Mon Nov 27 2006 - 13:29:49 CST)
• yalnifjusers.sourceforge.net
  • Re: PhpGedView 4.0.2 (DOCUMENT_ROOT) File inclusion Vulnerablity (Tue Nov 28 2006 - 14:51:14 CST)
• zdi-disclosures3com.com
  • ZDI-06-043: Novell Netware Client Print Provider Buffer Overflow Vulnerability (Wed Nov 29 2006 - 11:10:37 CST)
  • ZDI-06-042: Verity Ultraseek Request Proxying Vulnerability (Wed Nov 15 2006 - 17:28:36 CST)
  • ZDI-06-041: Microsoft Internet Explorer CSS Float Property Memory Corruption Vulnerability (Tue Nov 14 2006 - 13:54:25 CST)
  • ZDI-06-040: WinZip FileView ActiveX Control Unsafe Method Exposure Vulnerability (Tue Nov 14 2006 - 13:00:43 CST)
  • ZDI-06-038: Citrix MetaFrame IMA Management Module Remote Heap Overflow (Thu Nov 09 2006 - 11:30:41 CST)
  • ZDI-06-039: Marshal MailMarshal ARJ Extraction Directory Traversal Vulnerability (Fri Nov 10 2006 - 11:19:05 CST)
  • ZDI-06-037: America Online ICQ ActiveX Control Code Execution Vulnerability (Mon Nov 06 2006 - 12:08:01 CST)
  • ZDI-06-036: Novell Netmail User Authentication Buffer Overflow Vulnerability (Fri Nov 03 2006 - 15:41:48 CST)

Last message date: Thu Nov 30 2006 - 20:53:25 CST
Archived on: Thu Nov 30 2006 - 20:53:26 CST

600 messages sorted by: [ date ] [ thread ] [ subject ]