439 messages sorted by: [ date ] [ thread ] [ subject ]

Starting: Fri Dec 01 2006 - 10:50:45 CST
Ending: Sat Dec 30 2006 - 15:22:42 CST

• -= SHELL =- -= SHELL =-
  • freeqboard <= 1.1 (qb_path) Remote File Include Vulnerability (Fri Dec 01 2006 - 02:32:26 CST)
• 3APA3A
  • Re: Multiple Remote Vulnerabilities in KISGB (Fri Dec 22 2006 - 15:00:06 CST)
  • Re: critical Flaw in Firefox 2.0.0.1 allows to steal the user passwords with a videoclip (Thu Dec 21 2006 - 09:23:26 CST)
  • Re: [Full-disclosure] Microsoft Windows XP/2003/Vista memory corruption 0day (Thu Dec 21 2006 - 07:41:41 CST)
  • Re[2]: [Full-disclosure] Fun with event logs (semi-offtopic) (Thu Dec 21 2006 - 11:13:14 CST)
  • Microsoft Windows XP/2003/Vista memory corruption 0day (Thu Dec 21 2006 - 05:58:17 CST)
  • Fun with event logs (semi-offtopic) (Thu Dec 21 2006 - 06:22:09 CST)
  • Re[2]: Multiple Vendor Unusual MIME Encoding Content Filter Bypass (Thu Dec 07 2006 - 13:00:31 CST)
  • Re: MS Internet Explorer 6.0 (mshtml.dll) Denial of Service Exploit (Tue Dec 05 2006 - 09:25:22 CST)
• 7all7163.com
  • WebCalendar >=1.0 Cross-Site Scripting Vulnerabilities (Tue Dec 19 2006 - 03:19:58 CST)
• Adam Laurie
  • RFID access control tokens widely open to cloning (Mon Dec 11 2006 - 11:51:40 CST)
  • RFIDIOt release - version 0.1i (Sun Dec 10 2006 - 10:06:36 CST)
• advisorieslssec.com
  • LS-20061001 - Computer Associates BrightStor ARCserve Backup v11.5 Remote Buffer Overflow Vulnerability (Fri Dec 08 2006 - 15:28:39 CST)
  • LS-20060908 - Computer Associates BrightStor ARCserve Backup v11.5 Remote Buffer Overflow Vulnerability (Fri Dec 08 2006 - 15:26:30 CST)
• AdvisoryAria-Security.Net
  • HyperVM Cross-Site Scripting (Sun Dec 17 2006 - 17:48:55 CST)
  • [Aria-Security Team] cPanel BoxTrapper Cross Site Scripting (Thu Dec 07 2006 - 18:27:46 CST)
  • [Aria-Security Team] cPanel 11 pops.html Cross-Site Scripting (Thu Dec 07 2006 - 18:26:19 CST)
  • [Aria-Security Team] CentOS 4.2 i686 - WHM X v3.1.0 Cross-Site Scripting (Thu Dec 07 2006 - 18:41:35 CST)
  • [Aria-Security Team] uGestBook SQL Injection Vuln (Sun Dec 03 2006 - 22:28:43 CST)
  • [Aria-Security Team] DuWare DuPaypal SQL Injection Vuln (Fri Dec 01 2006 - 18:41:16 CST)
  • [Aria-Security Team] DuWare DuForum SQL Injection Vuln (Fri Dec 01 2006 - 18:41:02 CST)
  • [Aria-Security Team] DuWare DuDownloads SQL Injection Vuln (Fri Dec 01 2006 - 18:40:03 CST)
  • [Aria-Security Team] DuWare DuPortal SQL Injection Vuln (Fri Dec 01 2006 - 18:40:33 CST)
  • [Aria-Security Team] DuWare DuClassMate SQL Injection Vuln (Fri Dec 01 2006 - 18:40:28 CST)
  • [Aria-Security Team] DuWare DuNews SQL Injection Vuln (Fri Dec 01 2006 - 18:39:38 CST)
  • [Aria-Security.Net] Web Hosting Control Panel - cPanel 11 Multiple Cross-Site Scripting Vulnerabilites (Thu Nov 30 2006 - 22:25:28 CST)
• agoodhez1yahoo.co.uk
  • Re: RE: Trend Micro's Vista "0day exploit auction" claim (Thu Dec 21 2006 - 03:01:40 CST)
• ajannhwthotmail.com
  • MS Internet Explorer 6.0 (mshtml.dll) Denial of Service Exploit (Sun Dec 03 2006 - 13:27:03 CST)
  • PhpMyAdmin 2.7.0-pl2 Path Disclosure | Multiple CRLF/Http Response Splitting (Sun Dec 03 2006 - 13:26:23 CST)
• Alexander Sotirov
  • Re: [Full-disclosure] Microsoft Windows XP/2003/Vista memory corruption 0day (Thu Dec 21 2006 - 14:11:29 CST)
  • Re: The newest Word flaw is due to malformed data structure handling (Mon Dec 11 2006 - 18:20:43 CST)
• Amit Klein
  • ERRATA (Re: "Host header cannot be trusted as an anti anti DNS-pinning measure") (Mon Dec 25 2006 - 12:46:44 CST)
• Andres Riancho
  • [TOOL] untidy - XML Fuzzer (Thu Dec 21 2006 - 08:19:58 CST)
• Andrew Simmons
  • Re: Microsoft 0-day word vulnerability - Secunia - Extremely critical (Thu Dec 07 2006 - 05:51:30 CST)
• Andrius Paurys
  • Re: Internet Explorer 6 CSS "expression" Denial of Service Exploit (P.o.C.) (Thu Dec 07 2006 - 11:00:59 CST)
• Ansgar -59cobalt- Wiechers
  • Re: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation (Tue Dec 05 2006 - 13:47:41 CST)
• ashraf1984hotmail.com
  • XSS with Vbulletin (new idea !) (Sun Dec 24 2006 - 16:12:08 CST)
• azurIt
  • Firefox 2.0 security bug: Extensions can hide themself (Sun Dec 10 2006 - 09:45:28 CST)
• B Potter
  • ShmooCon Announcement (Wed Dec 27 2006 - 14:37:10 CST)
• Barnzhotmail.co.uk
  • Re: XSS in JAB Guest Book (Fri Dec 08 2006 - 20:45:36 CST)
• basvbulletin.com
  • Re: XSS with Vbulletin (new idea !) (Wed Dec 27 2006 - 03:33:47 CST)
• bastyaelvtarsgmail.com
  • Re: Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!! (Sat Dec 16 2006 - 12:01:24 CST)
• bdmoraesbol.com.br
  • Checkpoint NG3 ICMP Flood (Mon Dec 18 2006 - 05:14:33 CST)
• blasterimhotmail.com
  • listpics v5 (Sat Dec 02 2006 - 14:47:42 CST)
  • KhaledMuratList mdb (Sat Dec 02 2006 - 02:19:57 CST)
• Brett Moore
  • Project Server 2003 - Credential Disclosure (Thu Dec 14 2006 - 17:08:41 CST)
  • HyperAccess - Multiple Vulnerabilities (Wed Dec 13 2006 - 21:00:26 CST)
  • ASP Cmd Shell On IIS 5.1 (Tue Dec 12 2006 - 20:02:56 CST)
  • [SBDA] SiteKiosk - FileSystem Access (Mon Dec 11 2006 - 17:00:46 CST)
  • [SBDA] - ColdFusion MX7 - Multiple Vulnerabilities (Sun Dec 10 2006 - 16:35:12 CST)
• Brian Eaton
  • Re: [Full-disclosure] Oracle Portal 10g HTTP Response Splitting (Wed Dec 20 2006 - 12:55:09 CST)
• Bruno Lustosa
  • Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!! (Fri Dec 15 2006 - 12:07:20 CST)
• bugtraqstunkworks.com
  • Re: shopsite advisory (Tue Dec 12 2006 - 16:27:12 CST)
• c2reportisotf.org
  • Drone Armies C&C Report - 15 Dec 2006 (Fri Dec 15 2006 - 16:17:39 CST)
• chinese soup
  • Re: Internet Explorer 6 CSS "expression" Denial of Service Exploit (P.o.C.) (Sat Dec 09 2006 - 15:21:41 CST)
  • Re: Internet Explorer 6 CSS "expression" Denial of Service Exploit (P.o.C.) (Fri Dec 08 2006 - 11:46:58 CST)
  • eEye's Zero-Day Tracker Launch (Tue Dec 05 2006 - 15:03:18 CST)
• Christopher Mosby
  • New Skype Worm (Tue Dec 19 2006 - 10:49:29 CST)
• contactmetaeye.org
  • SQID v0.2 - SQL Injection Digger. (Fri Dec 22 2006 - 06:02:51 CST)
  • SQID v0.1 - SQL Inhection Digger. (Thu Dec 21 2006 - 09:26:50 CST)
• CORE Security Technologies Advisories
  • CORE-2006-1127: ProFTPD Controls Buffer Overflow (Wed Dec 13 2006 - 16:06:42 CST)
• corrado.liottaalice.it
  • logahead UNU edition 1.0 Remote File Upload & code execution (Mon Dec 25 2006 - 15:13:38 CST)
  • TimberWolf 1.2.2 vulnerable to XSS (Sun Dec 24 2006 - 08:45:41 CST)
• crackers_childsibersavascilar.com
  • phpAdsNew-2.0.4-pr2 Remote File Inclusion Exploit (Thu Dec 07 2006 - 13:14:31 CST)
• Curtis Zimmerman
  • XSS - CMS Made Simple v1.0.2 (Mon Dec 25 2006 - 15:13:33 CST)
• cxibsecurityreason.com
  • PHP 5.2.0 session.save_path safe_mode and open_basedir bypass (Fri Dec 08 2006 - 14:59:52 CST)
• Damien Miller
  • Re: GnuPG 1.4 and 2.0 buffer overflow (Tue Dec 05 2006 - 06:10:58 CST)
• Damjan
  • Re: Symantec LiveState Agent for Windows vulnerabi (Tue Dec 05 2006 - 14:09:40 CST)
• Dann Frazier
  • [SECURITY] [DSA 1237-1] New Linux 2.4.27 packages fix several vulnerabilities (Sun Dec 17 2006 - 08:07:46 CST)
  • [SECURITY] [DSA 1233-1] New Linux 2.6.8 packages fix several vulnerabilities (Sun Dec 10 2006 - 15:06:55 CST)
• Darren Reed
  • Re: The (in)security of Xorg and DRI (Sun Dec 17 2006 - 23:33:05 CST)
  • Re: The (in)security of Xorg and DRI (Sun Dec 17 2006 - 09:39:23 CST)
  • The (in)security of Xorg and DRI (Wed Dec 13 2006 - 18:40:59 CST)
• Dave
  • Odysseus 2.0 / Telemachus 1.0 (Beta) (Sat Dec 16 2006 - 07:22:55 CST)
• Dave \
  • Re: The newest Word flaw is due to malformed data structure handling (Tue Dec 12 2006 - 08:31:20 CST)
• dhlayereddefense.com
  • Layered Defense Advisory: Novell Client 4.91 Format String Vulnerability (Fri Dec 01 2006 - 04:50:47 CST)
• Dirk Mueller
  • [KOffice security advisory] KOffice OLEfilter integer overflow (Tue Dec 05 2006 - 04:49:11 CST)
• DoZHackersCenter.com
  • Secure Login Manager Multiple Input Validation Vulnerabilities (Wed Dec 27 2006 - 11:07:17 CST)
  • PHP Live! 3.2.2 Multiple Cross-Site Scripting Vulnerabilities (Mon Dec 25 2006 - 13:21:36 CST)
  • [HSC Security Group] SiteCatalyst Web Login Cross Site Vulrnabilities (Sat Dec 16 2006 - 12:44:20 CST)
  • shopsite advisory (Sun Dec 10 2006 - 11:12:12 CST)
• Dragos Ruiu
  • Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!! (Sat Dec 16 2006 - 01:55:54 CST)
  • CanSecWest 2007 (April 18-20) Call For Papers (Deadline January 7th) (Wed Dec 13 2006 - 17:57:12 CST)
• duchaikhtngmail.com
  • XSS with default page parameter in Oracle Portal 10g (Thu Dec 28 2006 - 21:07:27 CST)
• Dude VanWinkle
  • Re: [Full-disclosure] ZDI-06-043: Novell Netware Client Print Provider Buffer Overflow Vulnerability (Thu Nov 30 2006 - 19:52:25 CST)
• eEye Advisories
  • EEYE: Intel Network Adapter Driver Local Privilege Escalation (Thu Dec 07 2006 - 17:09:17 CST)
  • EEYE: Adobe Download Manager AOM Stack Buffer Overflow Vulnerability (Tue Dec 05 2006 - 19:28:38 CST)
• eminhasanov.com
  • Re: Invision Gallery 2.0.7 SQL Injection Vulnerability (Mon Dec 04 2006 - 00:31:00 CST)
  • Re: Invision Community Blog Mod 1.2.4 .PHP SQL Injection Vulnerability (Fri Dec 01 2006 - 00:10:49 CST)
• emulamexhotmail.com
  • CuteNews 1.3.6 XSS (Fri Dec 01 2006 - 14:56:34 CST)
  • PHPNews 1.3.0 XSS (Fri Dec 01 2006 - 14:57:10 CST)
• endrazine
  • Re: [Full-disclosure] Fun with event logs (semi-offtopic) (Thu Dec 21 2006 - 07:09:43 CST)
• eugeny gladkih
  • Re: Symantec LiveState Agent for Windows vulnerabi (Tue Dec 05 2006 - 15:24:46 CST)
  • Re: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation (Tue Dec 05 2006 - 13:16:45 CST)
• Ferguson, David (Kansas City)
  • Unauthenticated access to IBM Host On-Demand administration pages (Mon Dec 11 2006 - 08:39:09 CST)
• filip.palianpjwstk.edu.pl
  • Multiple XSS vulnerabiliteies in Inetmedia's information service - cityinfo. (Tue Dec 19 2006 - 07:52:41 CST)
• Firewall1954hotmail.com
  • Forum AnyBoard - Sql Inyection By Firewall (Mon Dec 25 2006 - 11:49:00 CST)
• FreeBSD Security Advisories
  • FreeBSD Security Advisory FreeBSD-SA-06:26.gtar (Wed Dec 06 2006 - 03:33:20 CST)
  • FreeBSD Security Advisory FreeBSD-SA-06:25.kmem (Wed Dec 06 2006 - 03:33:13 CST)
• fryxar fryxar
  • SNORT Covered channels detector patch (Tue Dec 05 2006 - 08:34:04 CST)
• Gadi Evron
  • Re: [fuzzing] NOT a 0day! Re: [Full-disclosure] OWASP Fuzzing page (Thu Dec 14 2006 - 07:39:35 CST)
  • NOT a 0day! Re: [fuzzing] [Full-disclosure] OWASP Fuzzing page (Thu Dec 14 2006 - 06:27:57 CST)
  • looking for security community input (Sun Dec 10 2006 - 16:31:18 CST)
  • Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass (Thu Dec 07 2006 - 06:30:49 CST)
• gamr-14hotmail.com
  • Re: XSS in script Mobilelib GOLD v2 (Fri Dec 29 2006 - 14:08:49 CST)
  • XSS in script Mobilelib GOLD v2 (Thu Dec 28 2006 - 17:44:22 CST)
  • XSS in gmial google (Sat Dec 16 2006 - 02:50:34 CST)
  • 2[xss]Vulnerabilities in Script Mobile Ac4p.com (Sun Dec 03 2006 - 13:21:40 CST)
• George Yobst
  • Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!! (Fri Dec 15 2006 - 17:22:21 CST)
• gmdarkfiggmail.com
  • Cahier de texte V2.2 Bypass general access protection exploit (Sun Dec 24 2006 - 08:58:05 CST)
  • Ixprim CMS 1.2 Remote Blind SQL Injection Exploit (Thu Dec 21 2006 - 13:47:27 CST)
• gplitgsplit.com
  • Re: Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!! (Sat Dec 16 2006 - 03:37:57 CST)
  • Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!! (Fri Dec 15 2006 - 03:49:54 CST)
• h angel
  • new xss in modbb forum (Mon Dec 04 2006 - 14:53:32 CST)
• hack2prisonyahoo.com
  • Host directory full disclosure and input error (Wed Dec 27 2006 - 05:05:47 CST)
  • Uploadscript Vulnerabilities: Text file Hash password (Wed Dec 06 2006 - 02:28:11 CST)
• Hendrik Weimer
  • Multiple Vendor Unusual MIME Encoding Content Filter Bypass (Wed Dec 06 2006 - 08:24:25 CST)
• Hubbard, Dan
  • RE: [BULK] - New Skype Worm (Tue Dec 19 2006 - 12:16:28 CST)
• Hugo van der Kooij
  • Re: phpcms <=- 1.1.7 Remote File Inclusion (Tue Dec 26 2006 - 17:13:30 CST)
  • Re: Checkpoint NG3 ICMP Flood (Mon Dec 18 2006 - 14:04:00 CST)
• Hunger
  • Re: Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!! (Sat Dec 16 2006 - 13:52:55 CST)
• i-k-thotmail.com
  • LuckyBot v3 Remote File Include (Tue Dec 26 2006 - 09:02:45 CST)
• iDefense Labs
  • iDefense Security Advisory 12.23.06: Novell Netmail IMAP append Denial of Service Vulnerability (Sat Dec 23 2006 - 20:07:59 CST)
  • iDefense Security Advisory 12.23.06: Novell NetMail IMAPD subscribe Buffer Overflow Vulnerability (Sat Dec 23 2006 - 20:07:53 CST)
  • Re: iDefense Security Advisory 12.14.06: GNOME Foundation Display Manager gdmchooser Format String Vulnerability (Thu Dec 14 2006 - 11:48:23 CST)
  • iDefense Security Advisory 12.14.06: GNOME Foundation Display Manager gdmchooser Format String Vulnerability (Thu Dec 14 2006 - 11:36:08 CST)
  • iDefense Security Advisory 12.12.06: Sun Microsystems Solaris ld.so Directory Traversal Vulnerability (Tue Dec 12 2006 - 13:31:20 CST)
  • iDefense Security Advisory 12.12.06: Sun Microsystems Solaris ld.so 'doprf()' Buffer Overflow Vulnerability (Tue Dec 12 2006 - 13:31:08 CST)
  • iDefense Security Advisory 12.08.06: Sophos Antivirus CHM File Heap Overflow Vulnerability (Fri Dec 08 2006 - 16:56:37 CST)
  • iDefense Security Advisory 12.08.06: Sophos Antivirus CHM Chunk Name Length Memory Corruption Vulnerability (Fri Dec 08 2006 - 16:56:31 CST)
  • iDefense Security Advisory 12.08.06: Multiple Vendor Antivirus RAR File Denial of Service Vulnerability (Fri Dec 08 2006 - 16:56:23 CST)
  • iDefense Security Advisory 12.01.06: Novell ZENworks Asset Management Collection Client Heap Overflow Vulnerability (Fri Dec 01 2006 - 15:01:18 CST)
  • iDefense Security Advisory 12.01.06: Novell ZENworks Asset Management Msg.dll Heap Overflow Vulnerability (Fri Dec 01 2006 - 15:01:27 CST)
• ifxcupu.us
  • Midicart vulerable (Fri Dec 08 2006 - 05:23:32 CST)
• infectionmail.kz
  • Invision Gallery 2.0.7 SQL Injection Vulnerability (Fri Dec 01 2006 - 04:22:51 CST)
• infoburnhead.it
  • MkPortal Urlobox Cross Site Request Forgery (Tue Dec 19 2006 - 16:27:27 CST)
• infodigitalarmaments.com
  • Digital Armaments Security Advisory 07.12.2006: Yahoo multiple services authentication bypass Vulnerability (Thu Dec 07 2006 - 05:27:17 CST)
• inge_eivind.henriksenchello.no
  • SoftArtisans FileUp(TM) viewsrc.asp remote script source disclosure exploit (Sat Dec 30 2006 - 07:21:57 CST)
• ISecAuditors Security Advisories
  • [ISecAuditors Security Advisories] XSS vulnerability in error page of ISMail (Sat Dec 02 2006 - 15:21:52 CST)
  • [ISecAuditors Security Advisories] IMAP/SMTP Injection in Hastymail (Sat Dec 02 2006 - 15:21:59 CST)
  • [ISecAuditors Advisories] BlueSocket web administration is vulnerable to XSS (Sat Dec 02 2006 - 12:53:45 CST)
• Ismail Donmez
  • Re: PHP 5.2.0 session.save_path safe_mode and open_basedir bypass (Sat Dec 09 2006 - 16:37:56 CST)
• James Gray
  • Fishyshoop Security Vulnerability (Sun Dec 24 2006 - 03:19:00 CST)
• james.brownbldesign.com
  • Re: Cross site scripting & fullpath disclosure (Wed Dec 27 2006 - 11:58:56 CST)
• Jan P. Monsch
  • RE: Enforcing Java Security Manager in Restricted Windows Environments? (Thu Dec 21 2006 - 15:39:47 CST)
  • Enforcing Java Security Manager in Restricted Windows Environments? (Fri Dec 08 2006 - 11:05:29 CST)
  • Some Thoughts about Office Open XML and Malware Detection (Thu Dec 07 2006 - 10:29:27 CST)
• Jean-Sébastien Guay-Leroux
  • Barracuda Convert-UUlib library buffer overflow leads to remote compromise (Tue Dec 05 2006 - 23:14:04 CST)
• Jerome Athias
  • Re: [fuzzing] NOT a 0day! Re: [Full-disclosure] OWASP Fuzzing page (Thu Dec 14 2006 - 07:32:11 CST)
• Jessica Hope
  • SMF upload XSS vulnerability (Sun Dec 03 2006 - 12:17:01 CST)
• jimmanico.net
  • Re: Enforcing Java Security Manager in Restricted Windows Environments? (Thu Dec 21 2006 - 13:35:48 CST)
• john.goodmanunverse.net
  • Re: aBitWhizzy [local file include] (Mon Dec 04 2006 - 09:32:08 CST)
• jose.palancoeazel.es
  • Mono XSP ASP.NET Server sourcecode disclosure vulnerability (Wed Dec 20 2006 - 11:26:11 CST)
• Josh Bressers
  • Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!! (Fri Dec 15 2006 - 15:11:47 CST)
• José Carlos Nieto Jarquín
  • Re: Internet Explorer 6 CSS "expression" Denial of Service Exploit (P.o.C.) (Wed Dec 06 2006 - 01:01:10 CST)
  • Internet Explorer 6. CSS Expression Denial of Service (P.o.C.) (Wed Dec 06 2006 - 00:30:39 CST)
• Joxean Koret
  • HP Printers FTP Server Denial Of Service (Tue Dec 19 2006 - 11:54:56 CST)
  • Re: [fuzzing] OWASP Fuzzing page (Tue Dec 12 2006 - 12:44:38 CST)
  • Oracle PL/SQL Fuzzing Tool (Wed Dec 06 2006 - 07:18:55 CST)
• Juha-Matti Laurio
  • Re: critical Flaw in Firefox 2.0.0.1 allows to steal the user passwords with a videoclip (Thu Dec 21 2006 - 15:43:13 CST)
  • Re: The newest Word flaw is due to malformed data structure handling (Thu Dec 14 2006 - 12:14:10 CST)
  • Re: [fuzzing] NOT a 0day! Re: [Full-disclosure] OWASP Fuzzing page (Thu Dec 14 2006 - 13:44:54 CST)
  • The newest Word flaw is due to malformed data structure handling (Mon Dec 11 2006 - 15:59:40 CST)
  • Re: Another, different MS Word 0-day vulnerability reported (Sun Dec 10 2006 - 16:10:46 CST)
  • Another, different MS Word 0-day vulnerability reported (Sun Dec 10 2006 - 15:58:01 CST)
  • Several updates in Microsoft Word 0-day (CVE-2006-5994) FAQ document (Sun Dec 10 2006 - 15:51:02 CST)
  • Microsoft Word 0-day Vulnerability FAQ (CVE-2006-5994) written (Thu Dec 07 2006 - 19:20:11 CST)
  • Re: Microsoft 0-day word vulnerability - Secunia - Extremely critical (Thu Dec 07 2006 - 12:22:09 CST)
• Kamchybek Jusupov
  • Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!! (Sun Dec 17 2006 - 04:05:14 CST)
• Kees Cook
  • [USN-397-1] mono vulnerability (Wed Dec 20 2006 - 15:46:26 CST)
  • [USN-396-1] gdm vulnerability (Thu Dec 14 2006 - 17:41:52 CST)
  • [USN-394-1] Ruby vulnerability (Thu Dec 07 2006 - 23:32:10 CST)
  • [USN-393-2] GnuPG2 vulnerabilities (Thu Dec 07 2006 - 14:31:39 CST)
  • [USN-390-3] evince-gtk vulnerability (Wed Dec 06 2006 - 18:30:18 CST)
  • [USN-393-1] GnuPG vulnerability (Wed Dec 06 2006 - 20:37:50 CST)
  • [USN-390-2] evince vulnerability (Tue Dec 05 2006 - 21:23:27 CST)
  • [USN-392-1] xine-lib vulnerability (Mon Dec 04 2006 - 16:02:10 CST)
  • [USN-391-1] libgsf vulnerability (Mon Dec 04 2006 - 16:01:56 CST)
• l.d.0hotmail.com
  • Re: XSS with Vbulletin (new idea !) (Wed Dec 27 2006 - 23:52:55 CST)
  • xss in Support Cards v1 ( oSTicket ) (Tue Dec 19 2006 - 13:24:22 CST)
• Laurent.van_den_reysentiscali.fr
  • Re: worksystem => Remote File Include Vulnerability Exploit (Wed Dec 13 2006 - 03:40:22 CST)
• Luigi Auriemma
  • Multiple vulnerabilities in Winamp Web Interface 7.5.13 (Sun Dec 10 2006 - 14:09:56 CST)
• Luke Borg
  • Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass (Thu Dec 07 2006 - 11:57:35 CST)
• majororaclegmail.com
  • Re: Oracle Portal 10g HTTP Response Splitting (Thu Dec 21 2006 - 15:18:53 CST)
• Marco Ivaldi
  • Re: Oracle <= 9i / 10g File System Access via utl_file Exploit (Thu Dec 21 2006 - 03:39:55 CST)
• Marcus Meissner
  • Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!! (Mon Dec 18 2006 - 13:23:10 CST)
• Mariano Nuñez Di Croce
  • CYBSEC - Security Pre-Advisory: SAP Internet Graphics Service (IGS) Remote Arbitrary File Removal (Tue Dec 05 2006 - 12:32:43 CST)
  • CYBSEC - Security Pre-Advisory: SAP Internet Graphics Service (IGS) Undocumented Features (Tue Dec 05 2006 - 12:25:49 CST)
• Martin Johns
  • Re: ERRATA (Re: "Host header cannot be trusted as an anti anti DNS-pinning measure") (Tue Dec 26 2006 - 14:45:41 CST)
• Martin Jørgensen
  • DistrRTgen 1.0 launched! (Tue Dec 05 2006 - 06:36:09 CST)
• Martin Pitt
  • [USN-380-2] avahi regression (Thu Dec 14 2006 - 06:28:58 CST)
• Martin Schulze
  • [SECURITY] [DSA 1229-1] New Asterisk packages fix arbitrary code execution (Wed Dec 06 2006 - 05:55:43 CST)
  • [SECURITY] [DSA 1227-1] New Mozilla Thunderbird packages fix several vulnerabilities (Mon Dec 04 2006 - 02:14:59 CST)
  • [SECURITY] [DSA 1225-2] New Mozilla Firefox packages fix several vulnerabilities (Sun Dec 03 2006 - 14:01:26 CST)
  • [SECURITY] [DSA 1225-1] New Mozilla Firefox packages fix several vulnerabilities (Sun Dec 03 2006 - 10:35:28 CST)
  • [SECURITY] [DSA 1224-1] New Mozilla packages fix several vulnerabilities (Sun Dec 03 2006 - 09:30:39 CST)
• Matousec - Transparent security Research
  • Bypassing process identification of several personal firewalls and HIPS (Fri Dec 15 2006 - 12:42:11 CST)
  • Outpost Bypassing Self-Protection via Advanced DLL injection with handle stealing Vulnerability (Fri Dec 01 2006 - 04:12:26 CST)
• matrixhackerz.ir
  • EasyPage Portal ( all ver )SQL Injection (Tue Dec 05 2006 - 14:02:13 CST)
  • URL Rdirecction Bug Yahoo (Tue Dec 05 2006 - 06:21:04 CST)
• Matthias Geerdsen
  • [ GLSA 200612-10 ] Tar: Directory traversal vulnerability (Mon Dec 11 2006 - 15:46:21 CST)
• matthieu.paineauSTOPSPAMwanadoo.fr
  • Re: Vulnerability in MG2 php based Image Gallery - bypass security, view password protected images (Thu Dec 21 2006 - 04:28:34 CST)
• meoverhere.cc
  • Re: UPublisher Exploit - Superfreaker (Sun Dec 03 2006 - 19:27:32 CST)
• MeftunMeftunNet.com
  • DUdirectory Admin Panel SQL Injection (Thu Dec 07 2006 - 15:51:54 CST)
• Michael Scheidell
  • RE: Cisco not honoring update promises? (Tue Dec 19 2006 - 16:54:59 CST)
  • Cisco not honoring update promises? (Sun Dec 17 2006 - 09:53:02 CST)
  • RE: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation (Wed Dec 06 2006 - 07:23:18 CST)
  • RE: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation (Tue Dec 05 2006 - 06:40:59 CST)
• Michael Schwartzkopff
  • Re: Checkpoint NG3 ICMP Flood (Mon Dec 18 2006 - 13:01:29 CST)
• Michal Zalewski
  • fl0p - passive L7 flow fingerprinting (Sat Dec 02 2006 - 23:41:08 CST)
• Michele Cicciotti
  • RE: [Full-disclosure] Microsoft Windows XP/2003/Vista memory corruption 0day (Thu Dec 21 2006 - 18:58:19 CST)
  • RE: Re[2]: [Full-disclosure] Fun with event logs (semi-offtopic) (Thu Dec 21 2006 - 14:19:47 CST)
  • RE: [Full-disclosure] Fun with event logs (semi-offtopic) (Thu Dec 21 2006 - 09:20:54 CST)
• michele.sandrellikatamail.com
  • Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass (Thu Dec 07 2006 - 13:33:00 CST)
• micmastgmail.com
  • Re: XSS with Vbulletin (new idea !) (Wed Dec 27 2006 - 15:21:43 CST)
• Mike Allgeier
  • Call for papers and presenters - Dec. 15th deadline (Thu Dec 14 2006 - 00:08:22 CST)
• Mikemikerosoftware.com
  • Re: Re: [Full-disclosure] Microsoft Windows XP/2003/Vista memory corruption 0day (Thu Dec 21 2006 - 19:48:45 CST)
• Moritz Muehlenhoff
  • [SECURITY] [DSA 1244-1] New xine-lib packages fix arbitrary code execution (Thu Dec 28 2006 - 11:39:00 CST)
  • [SECURITY] [DSA 1214-2] Updated gv packages fix arbitrary code execution (Wed Dec 27 2006 - 16:38:22 CST)
  • [SECURITY] [DSA 1243-1] New evince packages fix arbitrary code execution (Wed Dec 27 2006 - 18:19:11 CST)
  • [SECURITY] [DSA 1242-1] New elog packages fix arbitrary code execution (Wed Dec 27 2006 - 16:33:30 CST)
  • [SECURITY] [DSA 1241-1] New squirrelmail packages fix cross-site scripting (Mon Dec 25 2006 - 14:28:05 CST)
  • [SECURITY] [DSA 1239-1] New sql-ledger packages fix arbitrary code execution (Sun Dec 17 2006 - 09:21:18 CST)
  • [SECURITY] [DSA 1238-1] New clamav packages fix several vulnerabilities (Sun Dec 17 2006 - 09:05:33 CST)
  • [SECURITY] [DSA 1232-1] New clamav packages fix denial of service (Sat Dec 09 2006 - 08:43:33 CST)
  • [SECURITY] [DSA 1231-1] New gnupg packages fix arbitrary code execution (Sat Dec 09 2006 - 03:39:51 CST)
  • [SECURITY] [DSA 1228-1] New elinks packages fix arbitrary shell command execution (Tue Dec 05 2006 - 13:50:15 CST)
  • [SECURITY] [DSA 1226-1] New links packages fix arbitrary shell command execution (Sun Dec 03 2006 - 14:19:22 CST)
  • [SECURITY] [DSA 1222-2] New proftpd packages fix several vulnerabilities (Fri Dec 01 2006 - 12:11:17 CST)
• mr_kalimanmsn.com
  • Xt-News 0.1 : SQL Injection Vulnerability & XSS (Thu Dec 21 2006 - 20:23:48 CST)
  • GenesisTrader v1.0 - Multiple Vulnerabilities (Wed Dec 13 2006 - 20:32:08 CST)
  • AnnonceScriptHP V2.0 Multiple Vulnerabilities (Sat Dec 09 2006 - 02:50:08 CST)
  • Messageriescripthp V2.0 XSS & SQL Injection (Sat Dec 09 2006 - 02:48:25 CST)
  • ProNews V1.5 XSS & SQL Injection (Sat Dec 09 2006 - 02:46:40 CST)
  • KDPics Multiple Vulnerabities (Sat Dec 09 2006 - 02:45:03 CST)
• nanoymastergmail.com
  • Re: XSS - CMS Made Simple v1.0.2 (Thu Dec 28 2006 - 08:35:51 CST)
• Nicolas RUFF
  • Re: The (in)security of Xorg and DRI (Fri Dec 15 2006 - 08:44:29 CST)
• njhackerz.ir
  • XSS in JAB Guest Book (Mon Dec 04 2006 - 10:20:37 CST)
  • Multiple bugs in TFT-Gallery (Mon Dec 04 2006 - 03:57:04 CST)
• Noah Meyerhans
  • [SECURITY] [DSA 1223-1] New tar packages fix arbitrary file overwrite (Fri Dec 01 2006 - 10:26:11 CST)
• nonenone.com
  • Oracle <= 9i / 10g File System Access via utl_file Exploit (Tue Dec 19 2006 - 15:11:02 CST)
  • Oracle <= 9i / 10g (extproc) Local/Remote Command Execution Exploit (Tue Dec 19 2006 - 15:10:07 CST)
• nospamgoogle.com
  • HLStats Remote SQL Injection Exploit (Mon Dec 25 2006 - 10:56:20 CST)
• OpenPKG GmbH
  • [OpenPKG-SA-2006.044] OpenPKG Security Advisory (w3m) (Wed Dec 27 2006 - 15:47:44 CST)
  • [OpenPKG-SA-2006.043] OpenPKG Security Advisory (links) (Tue Dec 26 2006 - 06:53:06 CST)
  • [OpenPKG-SA-2006.042] OpenPKG Security Advisory (openser) (Tue Dec 26 2006 - 05:44:21 CST)
  • [OpenPKG-SA-2006.040] OpenPKG Security Advisory (ruby) (Thu Dec 21 2006 - 03:44:45 CST)
  • [OpenPKG-SA-2006.041] OpenPKG Security Advisory (dbus) (Thu Dec 21 2006 - 04:19:42 CST)
  • [OpenPKG-SA-2006.039] OpenPKG Security Advisory (proftpd) (Fri Dec 15 2006 - 16:56:06 CST)
  • [OpenPKG-SA-2006.038] OpenPKG Security Advisory (tar) (Fri Dec 08 2006 - 10:40:43 CST)
  • [OpenPKG-SA-2006.037] OpenPKG Security Advisory (gnupg) (Thu Dec 07 2006 - 16:22:34 CST)
• ox90x86hotmail.com
  • Re: Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!! (Sat Dec 16 2006 - 07:43:27 CST)
• p.kerrauckland.ac.nz
  • Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!! (Sun Dec 17 2006 - 01:32:08 CST)
• Pasi Sjoholm
  • Allied Telesis AT-9000/24 Ethernet switch management can be accessed from all VLANs. (Sat Dec 16 2006 - 17:22:31 CST)
• Pavel Kankovsky
  • Re: The (in)security of Xorg and DRI (Tue Dec 26 2006 - 17:20:14 CST)
• pdp (architect)
  • New MySpace worm could be on its way (Wed Dec 06 2006 - 21:29:38 CST)
• Pete Herzog
  • Top 10 Real Computer Crimes for 2007 (Thu Dec 14 2006 - 04:34:31 CST)
• poplixpapuasia.org
  • D-LINK DWL-2000AP+ remote DoS (Mon Dec 11 2006 - 06:06:27 CST)
• Praburaajan
  • HITBSecConf2007 - Dubai - Call for Papers now open! (Mon Dec 18 2006 - 21:00:57 CST)
• Pukhraj Singh
  • Re: [Full-disclosure] Microsoft Windows XP/2003/Vista memory corruption 0day (Thu Dec 21 2006 - 16:17:14 CST)
• putosoft softputo
  • Re: [Full-disclosure] Oracle Portal 10g HTTP Response Splitting (Fri Dec 22 2006 - 02:26:12 CST)
  • Oracle Applications/Portal 9i/10g Cross Site Scripting (Fri Dec 22 2006 - 02:30:42 CST)
  • Oracle Portal 10g HTTP Response Splitting (Wed Dec 20 2006 - 08:19:02 CST)
• quincygmail.com
  • critical Flaw in Firefox 2.0.0.1 allows to steal the user passwords with a videoclip (Wed Dec 20 2006 - 04:02:54 CST)
• Raphael Marichez
  • [ GLSA 200612-21 ] Ruby: Denial of Service vulnerability (Wed Dec 20 2006 - 14:24:38 CST)
  • [ GLSA 200612-20 ] imlib2: Multiple vulnerabilities (Wed Dec 20 2006 - 14:21:40 CST)
  • [ GLSA 200612-19 ] pam_ldap: Authentication bypass vulnerability (Wed Dec 20 2006 - 14:18:49 CST)
  • [ GLSA 200612-17 ] GNU Radius: Format string vulnerability (Thu Dec 14 2006 - 07:59:13 CST)
  • [ GLSA 200612-16 ] Links: Arbitrary Samba command execution (Thu Dec 14 2006 - 07:55:44 CST)
  • [ GLSA 200612-09 ] MadWifi: Kernel driver buffer overflow (Mon Dec 11 2006 - 17:32:54 CST)
  • [ GLSA 200612-07 ] Mozilla Firefox: Multiple vulnerabilities (Sun Dec 10 2006 - 13:02:23 CST)
  • [ GLSA 200612-03 ] GnuPG: Multiple vulnerabilities (Sun Dec 10 2006 - 07:31:37 CST)
  • [ GLSA 200612-04 ] ModPlug: Multiple buffer overflows (Sun Dec 10 2006 - 07:33:44 CST)
  • [ GLSA 200612-06 ] Mozilla Thunderbird: Multiple vulnerabilities (Sun Dec 10 2006 - 12:58:58 CST)
  • [ GLSA 200612-08 ] SeaMonkey: Multiple vulnerabilities (Sun Dec 10 2006 - 13:03:21 CST)
  • ERRATA: [ GLSA 200612-03 ] GnuPG: Multiple vulnerabilities (Mon Dec 11 2006 - 04:01:43 CST)
  • [ GLSA 200612-09 ] MadWifi: Kernel driver buffer overflow (Sun Dec 10 2006 - 15:20:33 CST)
• Reed Arvin
  • PWDumpX updated (includes CacheDump functionality) (Thu Dec 21 2006 - 15:01:57 CST)
• researchgleg.net
  • Kerio MailServer < 6.3.1 remote Denial of Service (Thu Dec 14 2006 - 15:09:09 CST)
  • F-Prot Antivirus for Unix: heap overflow and Denial of Service (Mon Dec 04 2006 - 07:48:59 CST)
• researchsymantec.com
  • SYMSA-2006-013: Multiple Vulnerabilities in Mandiant First Response (Mon Dec 18 2006 - 07:12:58 CST)
  • SYMSA-2006-012: 2X ThinClientServer Create Admin Account Replay Vulnerability (Wed Dec 06 2006 - 08:42:19 CST)
• Reversemode
  • csrss.exe double-free vulnerability - arbitrary DWORD overwrite exploit (Fri Dec 29 2006 - 18:40:55 CST)
  • NtRaiseHardError Csrss.exe memory Disclosure exploit (Wed Dec 27 2006 - 14:12:29 CST)
• rko.thelegendkillergmail.com
  • Web Apps- Rad Upload Version 3.02 Remote File Include Vulnerability (Tue Dec 12 2006 - 10:47:33 CST)
• robertwebappsec.org
  • WASC-Announcement: MX Injection - Capturing and Exploiting Hidden Mail Servers By Vicente Aguilera Diaz (Mon Dec 11 2006 - 09:53:30 CST)
• Roger A. Grimes
  • RE: Trend Micro's Vista "0day exploit auction" claim (Tue Dec 19 2006 - 20:55:44 CST)
• rPath Update Announcements
  • rPSA-2006-0234-1 firefox (Fri Dec 22 2006 - 00:41:58 CST)
  • rPSA-2006-0232-1 libgsf (Thu Dec 14 2006 - 02:01:20 CST)
  • rPSA-2006-0231-1 squirrelmail (Tue Dec 12 2006 - 11:25:23 CST)
  • rPSA-2006-0230-1 evince (Tue Dec 12 2006 - 11:24:53 CST)
  • rPSA-2006-0227-1 gnupg (Wed Dec 06 2006 - 15:34:50 CST)
  • rPSA-2006-0226-1 kernel (Wed Dec 06 2006 - 11:10:29 CST)
  • rPSA-2006-0211-2 doxygen libpng (Mon Dec 04 2006 - 11:25:28 CST)
  • rPSA-2006-0222-1 tar (Thu Nov 30 2006 - 21:46:14 CST)
  • rPSA-2006-0224-1 gnupg (Thu Nov 30 2006 - 21:48:29 CST)
  • rPSA-2006-0220-1 dovecot (Thu Nov 30 2006 - 21:40:00 CST)
  • rPSA-2006-0221-1 openldap openldap-clients openldap-servers (Thu Nov 30 2006 - 21:43:57 CST)
• rsmoakcisco.com
  • Re: Cisco not honoring update promises? (Mon Dec 18 2006 - 11:53:30 CST)
• Ryan Buena
  • Microsoft 0-day word vulnerability - Secunia - Extremely critical (Wed Dec 06 2006 - 13:01:02 CST)
• Ryan Meyer
  • Trend Micro's Vista "0day exploit auction" claim (Tue Dec 19 2006 - 12:59:15 CST)
• saphealhack.pl
  • MythControl (MythTV remote control) arbitrary code execution (Sat Dec 30 2006 - 06:17:55 CST)
  • QuickCam linux device driver allows arbitrary code execution (Fri Dec 29 2006 - 09:20:19 CST)
  • SMS handling OpenSER remote code executing (Thu Dec 28 2006 - 07:09:00 CST)
  • OpenSER OSP Module remote code execution (Thu Dec 28 2006 - 06:22:38 CST)
  • OpenSER 1.1.0 parse_config buffer overflow vulnerability (Wed Dec 20 2006 - 17:32:48 CST)
• saps.auditgmail.com
  • phpbb 2.0.x [xss] (Thu Dec 07 2006 - 12:10:36 CST)
  • Re: EasyPage Portal ( all ver )SQL Injection (Tue Dec 05 2006 - 15:39:58 CST)
  • Re: Re: [Aria-Security Team] uGestBook SQL Injection Vuln (Tue Dec 05 2006 - 15:29:44 CST)
• saudihotmail.fr
  • RateMe <= all versions => ( main.inc.php ) Remote File Include Vulnerability (Mon Dec 18 2006 - 03:23:54 CST)
• schafer_jeffreyhotmail.com
  • Re: Re: Microsoft 0-day word vulnerability - Secunia - Extremely critical (Thu Dec 14 2006 - 12:17:06 CST)
  • Re: Microsoft 0-day word vulnerability - Secunia - Extremely critical (Wed Dec 13 2006 - 22:15:52 CST)
• SEC Consult Research
  • SEC Consult SA-20061220-0 :: Typo3 Command Execution Vulnerability (Wed Dec 20 2006 - 07:04:15 CST)
• Secunia Research
  • Secunia Research: MailEnable POP Service "PASS" Command Buffer Overflow (Mon Dec 18 2006 - 08:54:13 CST)
  • Secunia Research: Internet Explorer Script Error Handling Memory Corruption (Tue Dec 12 2006 - 14:04:57 CST)
  • Secunia Research: AOL CDDBControl ActiveX Control "SetClientInfo()" Buffer Overflow (Mon Dec 11 2006 - 04:10:02 CST)
  • Secunia Research: MailEnable IMAP Service Buffer Overflow Vulnerability (Mon Dec 11 2006 - 04:05:23 CST)
• security-alerthp.com
  • [security bulletin] HPSBST02180 SSRT061288 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS06-072 Through MS06-078 (Wed Dec 20 2006 - 13:20:02 CST)
  • [security bulletin] HPSBUX02174 SSRT061239 rev.2 HP-UX Running OpenSSL Denial of Service (DoS), Increase Privilege (Wed Dec 20 2006 - 13:20:53 CST)
  • [security bulletin] HPSBUX02178 SSRT061267 rev.2 - HP-UX Secure Shell Remote Unauthorized Denial of Service (DoS) (Mon Dec 18 2006 - 16:36:39 CST)
  • [security bulletin] HPSBMA02173 SSRT061230 rev. 1 - HP Integrated Lights Out (iLO & iLO 2) Running SSH Key Based Authentication Remote Unauthorized Access (Fri Dec 15 2006 - 04:44:55 CST)
  • HPSBUX02178 SSRT061267 rev.1 - HP-UX Secure Shell Remote Denial of Service (DoS) (Tue Dec 05 2006 - 13:41:51 CST)
  • [security bulletin] HPSBUX02145 SSRT061202 rev.2 - HP-UX running Apache Remote Execution of Arbitrary Code, Denial of Service (DoS), and Unauthorized Access (Tue Dec 05 2006 - 13:41:15 CST)
• securitymandriva.com
  • [ MDKSA-2006:234 ] - Updated mono packages fix vulnerability (Wed Dec 20 2006 - 17:38:51 CST)
  • [ MDKSA-2006:233 ] - Updated dbus packages fix vulnerability (Mon Dec 18 2006 - 20:54:00 CST)
  • [ MDKSA-2006:232 ] - Updated proftpd packages fix mod_ctrls vulnerability (Mon Dec 18 2006 - 20:19:00 CST)
  • [ MDKSA-2006:206 ] - Updated Thunderbird packages fix multiple vulnerabilities (Fri Dec 15 2006 - 15:31:51 CST)
  • [ MDKSA-2006:231 ] - Updated gdm packages fix string vulnerability (Thu Dec 14 2006 - 20:07:00 CST)
  • [ MDKSA-2006:164-2 ] - Updated xorg-x11/XFree86 packages fix integer overflow vulnerabilities (Thu Dec 14 2006 - 11:03:00 CST)
  • [ MDKSA-2006:230 ] - Updated clamav packages fix vulnerability (Wed Dec 13 2006 - 22:47:00 CST)
  • [ MDKSA-2006:229 ] - Updated evince packages fix buffer overflow vulnerability (Wed Dec 13 2006 - 22:28:01 CST)
  • [ MDKSA-2006:228 ] - Updated gnupg packages fix vulnerability (Mon Dec 11 2006 - 20:08:01 CST)
  • [ MDKSA-2006:227 ] - Updated kdegraphics packages fix EXIF vulnerability (Mon Dec 11 2006 - 13:07:01 CST)
  • [ MDKSA-2006:226 ] - Updated squirrelmail packages fix vulnerabilities (Mon Dec 11 2006 - 11:50:00 CST)
  • [ MDKSA-2006:225 ] - Updated ruby packages fix DoS vulnerability (Wed Dec 06 2006 - 13:02:00 CST)
  • [ MDKSA-2006:224 ] - Updated xine-lib packages fix buffer overflow vulnerability (Tue Dec 05 2006 - 20:42:00 CST)
  • [ MDKSA-2006:214-1 ] - Updated gv packages fix buffer overflow vulnerability (Mon Dec 04 2006 - 09:56:00 CST)
  • [ MDKSA-2006:222 ] - Updated koffice packages fixes integer overflow vulnerability (Fri Dec 01 2006 - 15:16:01 CST)
  • [ MDKSA-2006:223 ] - Updated ImageMagick packages fixes vulnerability (Fri Dec 01 2006 - 18:17:01 CST)
  • [ MDKSA-2006:221 ] - Updated gnupg packages fix vulnerability (Thu Nov 30 2006 - 21:29:01 CST)
  • [ MDKSA-2006:220 ] - Updated libgsf packages fix heap buffer overflow vulnerability (Thu Nov 30 2006 - 20:18:01 CST)
• securitynruns.com
  • NOD32 Antivirus CAB parsing Arbitrary Code Execution Advisory (Thu Dec 21 2006 - 05:50:17 CST)
  • NOD32 Antivirus DOC parsing Arbitrary Code Execution Advisory (Wed Dec 20 2006 - 08:32:01 CST)
  • BitDefender AV Packed PE File Parsing Engine Heap Overflow (Fri Dec 15 2006 - 09:01:30 CST)
• securitysoqor.net
  • BLOG:CMS Remote file include Vulnerability (Sun Dec 10 2006 - 04:33:20 CST)
• securityvigilon.com
  • Online BookMarks Multiple SQL Injection/XSS Vulnerabilities (Sun Dec 03 2006 - 08:33:33 CST)
• securityfocusvisiblesoul.com
  • Re: MkPortal Urlobox Cross Site Request Forgery (Wed Dec 20 2006 - 21:13:44 CST)
• securityfocusvisiblesoul.net
  • Re: MkPortal Urlobox Cross Site Request Forgery (Wed Dec 20 2006 - 17:29:25 CST)
• sehatoyandex.ru
  • Windows Media MID File Denial Of Service Vulnerability (Fri Dec 15 2006 - 09:03:54 CST)
  • Windows Explorer WMV File Denial Of Service Vulnerability (Fri Dec 15 2006 - 09:02:34 CST)
• ShaFuq31HoTMaiL.CoM
  • Chatwm V1.0 SqL Injection Vuln. (Sun Dec 24 2006 - 03:53:58 CST)
  • Okul Merkezi Portal v1.0 Remote File IncLude Vuln. (Sun Dec 24 2006 - 01:12:30 CST)
  • Efkan Forum v1.0 SqL Inj. Vuln. (Fri Dec 22 2006 - 14:37:32 CST)
  • Burak Yilmaz Download Portal Sql Injection Vuln. (Tue Dec 19 2006 - 13:50:47 CST)
  • Contra Haber Sistemi v1.0 SqL Injection Vuln. (Sat Dec 16 2006 - 09:50:27 CST)
  • Do&#287;antepe Ziyareti Defteri (tr) Sql Injection Vuln. (Sat Dec 16 2006 - 10:48:49 CST)
  • Metyus Okul Ynetim Sistemi V.1.0 (tr) Sql injection Vuln. (Sat Dec 02 2006 - 13:17:10 CST)
  • Aspee Ziyareti Defteri (tr) Sql injection Vuln. (Fri Dec 01 2006 - 13:17:53 CST)
• Sharkey
  • Call For Papers: SecurityOPUS 2007 (Fri Dec 08 2006 - 20:56:24 CST)
• Shawn Merdinger
  • Linksys WIP 330 VoIP wireless phone crash from Nmap scan (Wed Dec 06 2006 - 18:03:07 CST)
• simo64morx.org
  • Re: Multiple bugs in TFT-Gallery (Mon Dec 04 2006 - 17:36:20 CST)
• Simon Josefsson
  • Re: safely concatenating strings in portable C (Re: GnuPG 1.4 and 2.0 buffer overflow) (Fri Dec 01 2006 - 03:45:06 CST)
• Simple Nomad
  • Re: Trend Micro's Vista "0day exploit auction" claim (Wed Dec 20 2006 - 17:11:50 CST)
  • RE: Trend Micro's Vista "0day exploit auction" claim (Wed Dec 20 2006 - 16:16:37 CST)
• sn0oPy.teamgmail.com
  • BTSaveMySql 1.2 (acces to config files) (Wed Dec 06 2006 - 07:46:52 CST)
• Solar Eclipse
  • OpenLDAP kbind authentication buffer overflow (Tue Dec 12 2006 - 03:42:47 CST)
• ss_team
  • Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation (Mon Dec 04 2006 - 10:28:05 CST)
• starextmsn.com
  • DoceboLMS Xss Vuln. (Fri Dec 29 2006 - 10:38:13 CST)
  • LDU <= 8.x (journal.php) SQL Injection Vulnerability (Fri Dec 29 2006 - 10:26:21 CST)
  • PhpBB Toplist 1.3.7 Xss Vuln. (Fri Dec 08 2006 - 10:57:57 CST)
  • Animated Smiley Generator File Include Vul. (Fri Dec 08 2006 - 14:59:14 CST)
  • Vt-Forum Lite System V.1.3 Xss Vuln. (Sun Dec 03 2006 - 14:17:27 CST)
• Steve Kemp
  • [SECURITY] [DSA-1240-1] New links2 packages fix arbitrary shell command execution (Thu Dec 21 2006 - 04:12:20 CST)
  • [SECURITY] [DSA-1236-1] New enemies-of-carlotta package fix missing sanity checks (Wed Dec 13 2006 - 06:29:10 CST)
  • [SECURITY] [DSA-1235-1] New ruby1.8 package fix denial of service (Wed Dec 13 2006 - 06:18:52 CST)
  • [SECURITY] [DSA-1234-1] New ruby1.6 package fix denial of service (Wed Dec 13 2006 - 06:12:07 CST)
  • [SECURITY] [DSA-1230-1] new l2tpns packages fix buffer overflow (Fri Dec 08 2006 - 09:30:27 CST)
  • [SECURITY] [DSA 1205-2] New thttpd packages fix insecure temporary file creation (Fri Dec 01 2006 - 09:36:34 CST)
• Steve Shockley
  • Re: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation (Tue Dec 05 2006 - 13:55:51 CST)
• Steven M. Christey
  • Re: The newest Word flaw is due to malformed data structure handling (Wed Dec 13 2006 - 20:06:10 CST)
  • Re: XSS in JAB Guest Book (Thu Dec 07 2006 - 10:05:39 CST)
• str0ke
  • Re: Multiple Remote Vulnerabilities in KISGB (Fri Dec 22 2006 - 16:08:41 CST)
• Stuart Moore
  • Re: LuckyBot v3 Remote File Include (Tue Dec 26 2006 - 17:33:52 CST)
  • Re: phpcms <=- 1.1.7 Remote File Inclusion (Tue Dec 26 2006 - 16:45:25 CST)
  • Re: [Aria-Security Team] uGestBook SQL Injection Vuln (Tue Dec 05 2006 - 08:10:50 CST)
• sumit kumar soni
  • Re: Oracle <= 9i / 10g File System Access via utl_file Exploit (Wed Dec 20 2006 - 06:33:32 CST)
• Sune Kloppenborg Jeppesen
  • [ GLSA 200612-18 ] ClamAV: Denial of Service (Mon Dec 18 2006 - 13:42:19 CST)
  • [ GLSA 200612-15 ] McAfee VirusScan: Insecure DT_RPATH (Wed Dec 13 2006 - 23:58:03 CST)
  • [ GLSA 200612-14 ] Trac: Cross-site request forgery (Tue Dec 12 2006 - 16:28:12 CST)
  • [ GLSA 200612-13 ] libgsf: Buffer overflow (Tue Dec 12 2006 - 16:13:37 CST)
  • [ GLSA 200612-12 ] F-PROT Antivirus: Multiple vulnerabilities (Tue Dec 12 2006 - 15:57:36 CST)
  • [ GLSA 200612-05 ] KOffice shared libraries: Heap corruption (Sun Dec 10 2006 - 09:03:12 CST)
  • [ GLSA 200612-02 ] xine-lib: Buffer overflow (Sat Dec 09 2006 - 01:45:17 CST)
  • [ GLSA 200612-01 ] wv library: Multiple integer overflows (Thu Dec 07 2006 - 05:04:09 CST)
• Sûnnet Beskerming
  • ASX Playlists and Jumping to Conclusions (Fri Dec 08 2006 - 00:53:02 CST)
• Team SHATTER
  • IBM DB2 Remote DoS during CONNECT processing (Wed Dec 13 2006 - 13:29:42 CST)
• testtest.pl
  • Re: Re: The newest Word flaw is due to malformed data structure handling (Tue Dec 12 2006 - 11:45:53 CST)
• Thierry Zoller
  • Re[2]: critical Flaw in Firefox 2.0.0.1 allows to steal the user passwords with a videoclip (Fri Dec 22 2006 - 05:45:42 CST)
• Thor (Hammer of God)
  • Re: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation (Tue Dec 05 2006 - 14:19:40 CST)
• Tim Weber
  • deV!L`z Clanportal - SQL Injection [061124a] (Fri Dec 01 2006 - 03:00:32 CST)
  • deV!L`z Clanportal - Arbitrary File Upload [061124b] (Fri Dec 01 2006 - 03:45:03 CST)
• Tomasz Kojm
  • Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass (Thu Dec 07 2006 - 13:31:42 CST)
  • Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass (Thu Dec 07 2006 - 08:15:50 CST)
• Tony Jambu
  • Re: The Week of Oracle Database Bugs (Thu Dec 07 2006 - 04:35:06 CST)
• tonylynxinternet.com
  • Re: Evolve Merchant[ injection sql ] (Tue Dec 05 2006 - 03:33:38 CST)
• Trustix Security Advisor
  • TSLSA-2006-0074 - multi (Fri Dec 22 2006 - 07:20:59 CST)
  • TSLSA-2006-0072 - clamav (Fri Dec 15 2006 - 07:43:32 CST)
  • TSLSA-2006-0070 - multi (Fri Dec 08 2006 - 08:54:56 CST)
  • TSLSA-2006-0068 - multi (Fri Dec 01 2006 - 07:26:04 CST)
• TSRT3com.com
  • TSRT-06-15: Citrix Presentation Server Client ActiveX Heap Overflow Vulnerability (Wed Dec 06 2006 - 19:21:19 CST)
  • TSRT-06-14: IBM Tivoli Storage Manager Mutiple Buffer Overflow Vulnerabilities (Mon Dec 04 2006 - 17:53:15 CST)
• Ulises Cuñé
  • RE: Windows Explorer WMV File Denial Of Service Vulnerability (Fri Dec 15 2006 - 17:51:22 CST)
• vulnpost-removevuln.sg
  • [vuln.sg] iso_wincmd Plugin for Total Commander Buffer Overflow Vulnerability (Fri Dec 29 2006 - 21:00:49 CST)
• Werner Koch
  • GnuPG: remotely controllable function pointer [CVE-2006-6235] (Wed Dec 06 2006 - 09:58:16 CST)
• Williams, James K
  • [CAID 34876]: CA CleverPath Portal Session Inheritance Vulnerability (Wed Dec 20 2006 - 21:58:00 CST)
  • [CAID 34870]: CA Anti-Virus vetfddnt.sys, vetmonnt.sys Local Denial of Service Vulnerabilities (Thu Dec 14 2006 - 11:42:51 CST)
  • Re: LS-20060908 - Computer Associates BrightStor ARCserve Backup (Mon Dec 11 2006 - 15:25:37 CST)
  • Re: LS-20061001 - Computer Associates BrightStor ARCserve Backup (Mon Dec 11 2006 - 15:23:40 CST)
  • [CAID 34846]: CA BrightStor ARCserve Backup Discovery Service Buffer Overflow Vulnerability (Fri Dec 08 2006 - 11:57:03 CST)
• willysrgmail.com
  • Re: Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!! (Fri Dec 15 2006 - 18:50:19 CST)
• xorontrgmail.com
  • Enigma WordPress Bridge (boarddir) Remote File Include (Sat Dec 30 2006 - 14:20:59 CST)
  • Enigma Coppermine Bridge (boarddir) Remote File Include (Sat Dec 30 2006 - 14:20:10 CST)
  • Limbo CMS event module (lm_absolute_path) Remote File Include Vulnerabilities (Wed Dec 27 2006 - 23:23:25 CST)
  • PhpbbXtra v2.0 (phpbb_root_path) Remote File Include Vulnerability (Mon Dec 25 2006 - 10:57:56 CST)
• xx_hack_xx_2004hotmail.com
  • Multiple Bugs in Future Internet ( XSS & SQL Injection ) (Sat Dec 23 2006 - 09:39:01 CST)
  • Multiple Bugs in MINI WEB SHOP (Tue Dec 19 2006 - 16:01:49 CST)
• Zarloule04gmail.com
  • phpcms <=- 1.1.7 Remote File Inclusion (Sun Dec 24 2006 - 17:28:20 CST)
• zdi-disclosures3com.com
  • ZDI-06-054: Novell NetMail IMAP APPEND Buffer Overflow Vulnerability (Fri Dec 22 2006 - 18:11:44 CST)
  • ZDI-06-053: Novell NetMail IMAP Verb Literal Heap Overflow Vulnerability (Fri Dec 22 2006 - 18:11:32 CST)
  • ZDI-06-052: Novell NetMail NMAP STOR Buffer Overflow Vulnerability (Fri Dec 22 2006 - 18:11:16 CST)
  • ZDI-06-051: Mozilla Firefox SVG Processing Remote Code Execution Vulnerability (Tue Dec 19 2006 - 21:03:44 CST)
  • ZDI-06-049: Symantec Veritas NetBackup Long Request Buffer Overflow Vulnerability (Wed Dec 13 2006 - 14:58:51 CST)
  • ZDI-06-050: Symantec Veritas NetBackup CONNECT_OPTIONS Buffer Overflow Vulnerability (Wed Dec 13 2006 - 14:59:56 CST)
  • ZDI-06-046: Sophos Anti-Virus SIT Archive Parsing Buffer Overflow Vulnerability (Tue Dec 12 2006 - 12:53:54 CST)
  • ZDI-06-048: Microsoft Internet Explorer normalize() Function Memory Corruption Vulnerability (Tue Dec 12 2006 - 13:03:38 CST)
  • ZDI-06-047: Microsoft Visual Studio WmiScriptUtils.dll Cross-Zone Scripting Vulnerability (Tue Dec 12 2006 - 13:03:24 CST)
  • ZDI-06-045: Sophos Anti-Virus CPIO Archive Parsing Buffer Overflow Vulnerability (Tue Dec 12 2006 - 12:52:49 CST)
  • ZDI-06-044: Adobe Download Manager AOM Parsing Buffer Overflow Vulnerability (Wed Dec 06 2006 - 19:01:12 CST)
  • Re: [Full-disclosure] ZDI-06-043: Novell Netware Client Print Provider Buffer Overflow Vulnerability (Thu Nov 30 2006 - 18:27:41 CST)

Last message date: Sat Dec 30 2006 - 15:22:42 CST
Archived on: Sat Dec 30 2006 - 15:22:42 CST

439 messages sorted by: [ date ] [ thread ] [ subject ]