375 messages sorted by: [ author ] [ date ] [ thread ]

Starting: Fri Jun 01 2007 - 09:45:16 CDT
Ending: Sat Jun 30 2007 - 12:15:59 CDT

• "run as" local denial-of-service enables administrative account processes to be killed
  • James C. Slora Jr. (Tue Jun 26 2007 - 09:30:18 CDT)
  • Eitan Caspi (Sat Jun 23 2007 - 15:44:59 CDT)
• 2007-06-03: PeerCast streaming server submits cleartext password
  • mpegfreeshells.ch (Sun Jun 03 2007 - 20:29:27 CDT)
• [ GLSA 200706-01 ] libexif: Integer overflow vulnerability
  • Raphael Marichez (Tue Jun 05 2007 - 13:58:32 CDT)
• [ GLSA 200706-02 ] Evolution: User-assisted execution of arbitrary code
  • Raphael Marichez (Wed Jun 06 2007 - 15:43:33 CDT)
• [ GLSA 200706-03 ] ELinks: User-assisted execution of arbitrary code
  • Raphael Marichez (Wed Jun 06 2007 - 15:57:23 CDT)
• [ GLSA 200706-04 ] MadWifi: Multiple vulnerabilities
  • Raphael Marichez (Mon Jun 11 2007 - 16:31:29 CDT)
• [ GLSA 200706-05 ] ClamAV: Multiple Denials of Service
  • Raphael Marichez (Fri Jun 15 2007 - 11:35:10 CDT)
• [ GLSA 200706-06 ] Mozilla products: Multiple vulnerabilities
  • Raphael Marichez (Tue Jun 19 2007 - 16:03:55 CDT)
• [ GLSA 200706-07 ] PHProjekt: Multiple vulnerabilities
  • Raphael Marichez (Tue Jun 19 2007 - 16:59:17 CDT)
• [ GLSA 200706-08 ] emul-linux-x86-java: Multiple vulnerabilities
  • Raphael Marichez (Tue Jun 26 2007 - 16:12:29 CDT)
• [ GLSA 200706-09 ] libexif: Buffer overflow
  • Raphael Marichez (Tue Jun 26 2007 - 16:22:02 CDT)
• [ MDKSA-2007:110 ] - Updated php-pear packages fix directory traversal vulnerability
  • securitymandriva.com (Mon Jun 04 2007 - 16:51:18 CDT)
• [ MDKSA-2007:111 ] - Updated util-linux packages address login access policies bypassing issue
  • securitymandriva.com (Mon Jun 04 2007 - 17:00:35 CDT)
• [ MDKSA-2007:112 ] - Updated mplayer packages fix buffer overflow vulnerability
  • securitymandriva.com (Mon Jun 04 2007 - 17:09:55 CDT)
• [ MDKSA-2007:113 ] - Updated mutt packages fix vulnerabilities
  • securitymandriva.com (Mon Jun 04 2007 - 17:51:51 CDT)
• [ MDKSA-2007:114 ] - Updated file packages fix vulnerabilities
  • securitymandriva.com (Tue Jun 05 2007 - 18:07:11 CDT)
• [ MDKSA-2007:115 ] - Updated clamav packages fix vulnerabilities
  • securitymandriva.com (Mon Jun 04 2007 - 20:07:23 CDT)
• [ MDKSA-2007:116 ] - Updated libpng packages fix vulnerability
  • securitymandriva.com (Tue Jun 05 2007 - 18:13:42 CDT)
• [ MDKSA-2007:117 ] - Updated lha packages fix unsafe temporary files creation issue
  • securitymandriva.com (Wed Jun 06 2007 - 00:23:43 CDT)
• [ MDKSA-2007:118 ] - Updated libexif packages fix crash and possible arbitrary code execution issue
  • securitymandriva.com (Fri Jun 08 2007 - 16:22:07 CDT)
• [ MDKSA-2007:119 ] - Updated Thunderbird packages fix multiple vulnerabilities
  • securitymandriva.com (Tue Jun 12 2007 - 13:11:17 CDT)
• [ MDKSA-2007:120 ] - Updated Firefox packages fix multiple vulnerabilities
  • securitymandriva.com (Tue Jun 12 2007 - 15:06:22 CDT)
• [ MDKSA-2007:121 ] - Updated freetype2 packages fix integer overflow vulnerability
  • securitymandriva.com (Wed Jun 13 2007 - 20:24:07 CDT)
• [ MDKSA-2007:122 ] - Updated gd packages fix vulnerability
  • securitymandriva.com (Wed Jun 13 2007 - 20:46:25 CDT)
• [ MDKSA-2007:123 ] - Updated libwmf packages fix vulnerability
  • securitymandriva.com (Wed Jun 13 2007 - 20:55:23 CDT)
• [ MDKSA-2007:124 ] - Updated tetex packages fix vulnerability
  • securitymandriva.com (Wed Jun 13 2007 - 21:33:20 CDT)
• [ MDKSA-2007:125 ] - Updated spamassassin packages fix possible DoS condition
  • securitymandriva.com (Thu Jun 14 2007 - 15:23:18 CDT)
• [ MDKSA-2007:126 ] - Updated Firefox packages fix multiple vulnerabilities
  • securitymandriva.com (Fri Jun 15 2007 - 16:53:22 CDT)
• [ MDKSA-2007:126-1 ] - Updated Firefox packages fix multiple vulnerabilities
  • securitymandriva.com (Sat Jun 16 2007 - 18:08:16 CDT)
• [ MDKSA-2007:127 ] - Updated apache packages fix mod_mem_cache issue
  • securitymandriva.com (Tue Jun 19 2007 - 18:50:14 CDT)
• [ MDKSA-2007:128 ] - Updated libexif packages fix integer overflow flaw
  • securitymandriva.com (Tue Jun 19 2007 - 19:21:33 CDT)
• [ MDKSA-2007:129 ] - Updated jasper packages fix vulnerability
  • securitymandriva.com (Tue Jun 19 2007 - 20:42:30 CDT)
• [ MDKSA-2007:130 ] - Updated proftpd packages fix authentication bypass vulnerability
  • securitymandriva.com (Wed Jun 20 2007 - 20:45:28 CDT)
• [ MDKSA-2007:131 ] - Updated Thunderbird packages fix multiple vulnerabilities
  • securitymandriva.com (Wed Jun 20 2007 - 20:55:19 CDT)
• [ MDKSA-2007:132 ] - Updated madwifi-source, wpa_supplicant packages fix vulnerabilities
  • securitymandriva.com (Thu Jun 21 2007 - 14:03:01 CDT)
• [ MDKSA-2007:133 ] - Updated emacs packages fix DoS vulnerability
  • securitymandriva.com (Thu Jun 21 2007 - 17:21:24 CDT)
• [ MDKSA-2007:134 ] - Updated xfsdump packages fix unsafe temporary directory creation issue
  • securitymandriva.com (Thu Jun 21 2007 - 18:58:30 CDT)
• [ MDKSA-2007:135 ] - Updated webmin packages fix XSS vulnerability
  • securitymandriva.com (Fri Jun 22 2007 - 18:37:55 CDT)
• [ MDKSA-2007:136 ] - Updated evolution packages fix vulnerability
  • securitymandriva.com (Tue Jun 26 2007 - 17:27:44 CDT)
• [ MDKSA-2007:137 ] - Updated krb5 packages fix vulnerabilities
  • securitymandriva.com (Tue Jun 26 2007 - 22:34:58 CDT)
• [CAID 35395, 35396]: CA Anti-Virus Engine CAB File Buffer Overflow Vulnerabilities
  • Williams, James K (Thu Jun 07 2007 - 10:43:02 CDT)
• [CAID 35450, 35451, 35452, 35453]: CA Products That Embed Ingres Multiple Vulnerabilities
  • Williams, James K (Fri Jun 22 2007 - 09:00:40 CDT)
• [CVE-2007-1358] Apache Tomcat XSS vulnerability in Accept-Language header processing
  • Mark Thomas (Mon Jun 18 2007 - 18:30:20 CDT)
• [CVE-2007-2449] Apache Tomcat XSS vulnerabilities in the JSP examples
  • Mark Thomas (Wed Jun 13 2007 - 21:24:09 CDT)
• [CVE-2007-2450]: Apache Tomcat XSS vulnerability in Manager
  • Mark Thomas (Wed Jun 13 2007 - 21:26:44 CDT)
• [Full-disclosure] Apple Safari: cookie stealing
  • Michal Zalewski (Wed Jun 13 2007 - 09:46:59 CDT)
• [Full-disclosure] Apple Safari: idn urlbar spoofing
  • Larry Seltzer (Mon Jun 25 2007 - 16:15:22 CDT)
  • Michal Zalewski (Mon Jun 25 2007 - 16:22:34 CDT)
• [Full-disclosure] Apple Safari: urlbar/window title spoofing
  • Mark Senior (Fri Jun 15 2007 - 09:07:39 CDT)
  • Robert Swiecki (Thu Jun 14 2007 - 18:31:39 CDT)
• [Full-disclosure] Safari for Windows,0day URL protocol handler command injection
  • Larry Seltzer (Tue Jun 12 2007 - 08:19:54 CDT)
• [Full-disclosure] Windows Oday release
  • Jared DeMott (Wed Jun 13 2007 - 12:41:42 CDT)
• [GOODFELLAS - VULN ] Avaxswf.dll v.1.0.0.1 from Avax Vector software ActiveX Arbitrary Data Write
  • GOODFELLAS SRT (Tue Jun 26 2007 - 15:03:50 CDT)
• [GOODFELLAS - VULN] BarCodeAx.dll v. 4.9 ActiveX Control Remote Stack Buffer Overflow
  • GOODFELLAS SRT (Sat Jun 23 2007 - 11:07:17 CDT)
• [GOODFELLAS - VULN] hpqxml.dll 2.0.0.133 from HP Digital Imaging Arbitary Data Write.
  • Goodfellas SRT (Wed Jun 27 2007 - 15:27:57 CDT)
• [ISR] :: Infobyte Security Research :: release (ISR-sqlget.pl) v1.0.0
  • Francisco Amato (Mon Jun 25 2007 - 16:02:20 CDT)
• [MajorSecurity Advisory #47]Simple Machines Forum (SMF) - Session fixation Issue
  • motokochansimplemachines.org (Mon Jun 25 2007 - 01:33:01 CDT)
  • nobodydomain.com (Thu Jun 14 2007 - 16:05:55 CDT)
• [MajorSecurity Advisory #49]Calimero.CMS - Session fixation Issue
  • adminmajorsecurity.de (Fri Jun 01 2007 - 11:48:21 CDT)
• [MajorSecurity Advisory #50]chameleon cms - Session fixation Issue
  • adminmajorsecurity.de (Thu Jun 07 2007 - 10:33:22 CDT)
  • adminmajorsecurity.de (Fri Jun 01 2007 - 11:48:53 CDT)
• [OpenPKG-SA-2007.020] OpenPKG Security Advisory (php)
  • OpenPKG GmbH (Fri Jun 01 2007 - 07:11:30 CDT)
• [OpenPKG-SA-2007.021] OpenPKG Security Advisory (wordpress)
  • OpenPKG GmbH (Fri Jun 08 2007 - 10:57:02 CDT)
• [PLESK 7.5 Reload] & [PLESK 7.6 for MS Windows] path passing and disclosure vulnerability
  • leokkxi.com (Sat Jun 02 2007 - 23:37:08 CDT)
• [SecurInfos] PCSoft WinDEV .wdp Project File Handling Buffer Overflow
  • Jerome Athias (Thu Jun 28 2007 - 01:48:06 CDT)
• [security bulletin] HPSBGN02199 SSRT071312 rev.3 - Mercury Quality Center ActiveX, Remote Unauthorized Arbitrary Code Executio
  • security-alerthp.com (Thu Jun 21 2007 - 14:27:26 CDT)
• [security bulletin] HPSBMA02224 SSRT071334 rev.1 - HP System Management Homepage (SMH) for Linux, Remote Privileged Access
  • security-alerthp.com (Mon Jun 18 2007 - 08:01:36 CDT)
• [security bulletin] HPSBPI02226 SSRT061274 rev.1 - HP Help and Support Center Running on HP Notebook Computers Running with Windows XP, Remote Unauthorized Access
  • security-alerthp.com (Wed Jun 20 2007 - 13:47:25 CDT)
• [security bulletin] HPSBTU02218 SSRT071424 rev.1 - HP Tru64 UNIX Internet Express running Samba, Remote Arbitrary Code Execution or Local Unauthorized Privilege Elevation
  • security-alerthp.com (Wed Jun 20 2007 - 13:48:20 CDT)
• [security bulletin] HPSBTU02232 SSRT071429 rev.1 - Secure Web Server for HP Tru64 UNIX Powered by Apache (SWS) or HP Internet Express for Tru64 UNIX running PHP, Remote Arbitrary Code Execution, Unauthorized Disclosure of Information, or Denial of Service (DoS)
  • security-alerthp.com (Thu Jun 28 2007 - 09:28:21 CDT)
• [security bulletin] HPSBUX02217 SSRT071337 rev.2 - HP-UX running Kerberos, Remote Arbitrary Code Execution
  • security-alerthp.com (Tue Jun 05 2007 - 06:57:29 CDT)
• [security bulletin] HPSBUX02218 SSRT071424 rev.1 - HP-UX running CIFS Server (Samba), Remote Arbitrary Code Execution
  • security-alerthp.com (Tue Jun 05 2007 - 13:52:49 CDT)
• [security bulletin] HPSBUX02219 SSRT061273 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS)
  • security-alerthp.com (Tue Jun 12 2007 - 13:40:07 CDT)
• [security bulletin] HPSBUX02225 SSRT071295 rev.1 - HP-UX Running Xserver, Local Denial of Service (DoS)
  • security-alerthp.com (Mon Jun 25 2007 - 08:01:05 CDT)
• [SECURITY] [DSA 1291-4] New samba packages fix regression
  • Moritz Muehlenhoff (Mon Jun 04 2007 - 14:37:12 CDT)
• [SECURITY] [DSA 1299-1] New ipsec-tools packages fix denial of service
  • dann frazier (Tue Jun 12 2007 - 11:37:07 CDT)
  • 3APA3A (Mon Jun 11 2007 - 05:18:10 CDT)
  • dann frazier (Thu Jun 07 2007 - 12:52:59 CDT)
• [SECURITY] [DSA 1300-1] New iceape packages fix several vulnerabilities
  • Moritz Muehlenhoff (Thu Jun 07 2007 - 15:16:43 CDT)
• [SECURITY] [DSA 1301-1] New Gimp packages fix arbitrary code execution
  • Noah Meyerhans (Sat Jun 09 2007 - 12:09:42 CDT)
• [SECURITY] [DSA 1302-1] New freetype packages fix integer overflow
  • Steve Kemp (Sun Jun 10 2007 - 08:48:40 CDT)
• [SECURITY] [DSA 1303-1] New lighttpd packages fix denial of service
  • Steve Kemp (Sun Jun 10 2007 - 08:21:23 CDT)
• [SECURITY] [DSA 1304-1] New Linux kernel 2.6.8 packages fix several vulnerabilities
  • dann frazier (Sat Jun 16 2007 - 05:57:02 CDT)
• [SECURITY] [DSA 1305-1] New icedove packages fix several vulnerabilities
  • Moritz Muehlenhoff (Wed Jun 13 2007 - 12:34:11 CDT)
• [SECURITY] [DSA 1306-1] New xulrunner packages fix several vulnerabilities
  • Moritz Muehlenhoff (Tue Jun 12 2007 - 10:57:27 CDT)
• [SECURITY] [DSA 1307-1] New OpenOffice.org packages fix arbitrary code execution
  • Martin Schulze (Tue Jun 12 2007 - 13:10:47 CDT)
• [SECURITY] [DSA 1308-1] New iceweasel packages fix several vulnerabilities
  • Moritz Muehlenhoff (Thu Jun 14 2007 - 12:22:37 CDT)
• [SECURITY] [DSA 1309-1] New libexif packages fix integer overflow
  • Steve Kemp (Sat Jun 16 2007 - 18:23:43 CDT)
• [SECURITY] [DSA 1309-1] New PostgreSQL 8.1 packages fix privilege escalation
  • Moritz Muehlenhoff (Sat Jun 16 2007 - 16:34:45 CDT)
• [SECURITY] [DSA 1310-1] New libexif packages fix integer overflow
  • Steve Kemp (Sat Jun 16 2007 - 18:24:15 CDT)
• [SECURITY] [DSA 1311-1] New PostgreSQL 7.4 packages fix privilege escalation
  • Moritz Muehlenhoff (Sun Jun 17 2007 - 18:23:17 CDT)
• [SECURITY] [DSA 1312-1] New libapache-mod-jk packages fix information disclosure
  • Moritz Muehlenhoff (Sun Jun 17 2007 - 18:26:28 CDT)
• [SECURITY] [DSA 1313-1] New MPlayer packages fix arbitrary code execution
  • Moritz Muehlenhoff (Tue Jun 19 2007 - 12:45:11 CDT)
• [SECURITY] [DSA 1314-1] New open-iscsi packages fix several vulnerabilities
  • Moritz Muehlenhoff (Tue Jun 19 2007 - 14:51:02 CDT)
• [SECURITY] [DSA 1315-1] New libphp-phpmailer packages fix arbitrary shell command execution
  • Moritz Muehlenhoff (Tue Jun 19 2007 - 15:35:39 CDT)
• [SECURITY] [DSA 1316-1] New emacs21 packages fix denial of service
  • Steve Kemp (Thu Jun 21 2007 - 07:56:55 CDT)
• [SECURITY] [DSA 1317-1] New tinymux packages fix buffer overflow
  • Steve Kemp (Fri Jun 22 2007 - 20:10:24 CDT)
• [SECURITY] [DSA 1318-1] New ekg packages fix denial of service
  • Moritz Muehlenhoff (Fri Jun 22 2007 - 16:39:23 CDT)
• [SECURITY] [DSA 1319-1] New maradns packages fix denial of service
  • Moritz Muehlenhoff (Sat Jun 23 2007 - 04:54:46 CDT)
• [SECURITY] [DSA 1320-1] New clamav packages fix several vulnerabilities
  • Moritz Muehlenhoff (Sat Jun 23 2007 - 05:57:02 CDT)
• [SECURITY] [DSA 1321-1] New evolution-data-server packages fix arbitrary code execution
  • Moritz Muehlenhoff (Sat Jun 23 2007 - 07:49:54 CDT)
• [SECURITY] [DSA 1322-1] New wireshark packages fix denial of service
  • Moritz Muehlenhoff (Wed Jun 27 2007 - 15:57:25 CDT)
• [SECURITY] [DSA 1323-1] New krb5 packages fix several vulnerabilities
  • Moritz Muehlenhoff (Thu Jun 28 2007 - 15:13:18 CDT)
• [SECURITY] [DSA 1324-1] New hiki packages fix missing input sanitising
  • Steve Kemp (Thu Jun 28 2007 - 16:04:32 CDT)
• [SECURITY] [DSA 1325-1] New evolution packages fix arbitrary code execution
  • Moritz Muehlenhoff (Fri Jun 29 2007 - 10:06:48 CDT)
• [TOOL] w3af - Web Application Attack and Audit Framework
  • Andres Riancho (Sun Jun 10 2007 - 13:20:29 CDT)
• [USN-439-2] file vulnerability
  • Kees Cook (Mon Jun 11 2007 - 17:20:16 CDT)
• [USN-468-1] Firefox vulnerabilities
  • Kees Cook (Fri Jun 01 2007 - 16:47:37 CDT)
• [USN-469-1] Thunderbird vulnerabilities
  • Kees Cook (Wed Jun 06 2007 - 00:25:24 CDT)
• [USN-470-1] Linux kernel vulnerabilities
  • Kees Cook (Fri Jun 08 2007 - 17:32:34 CDT)
• [USN-471-1] libexif vulnerability
  • Kees Cook (Mon Jun 11 2007 - 17:22:22 CDT)
• [USN-472-1] libpng vulnerability
  • Kees Cook (Mon Jun 11 2007 - 19:43:10 CDT)
• [USN-473-1] libgd2 vulnerabilities
  • Kees Cook (Mon Jun 11 2007 - 19:44:35 CDT)
• [USN-474-1] xscreensaver vulnerability
  • Kees Cook (Tue Jun 12 2007 - 18:33:57 CDT)
• [USN-475-1] evolution-data-server vulnerability
  • Kees Cook (Thu Jun 21 2007 - 18:52:28 CDT)
• [USN-476-1] redhat-cluster-suite vulnerability
  • Kees Cook (Fri Jun 22 2007 - 13:22:56 CDT)
• [USN-477-1] krb5 vulnerabilities
  • Kees Cook (Tue Jun 26 2007 - 19:01:44 CDT)
• [USN-478-1] libexif vulnerability
  • Kees Cook (Tue Jun 26 2007 - 19:10:18 CDT)
• [USN-479-1] MadWifi vulnerabilities
  • Kees Cook (Fri Jun 29 2007 - 00:37:26 CDT)
• Airscanner Advisory #07062901: FlexiSPY Victim/User Database Exposure (Full world readable access to ALL SMS/Emails/Voice data from victims/users)
  • Airscanner Corp. (Fri Jun 29 2007 - 12:45:31 CDT)
• All Of the Mambo & Joomla Script Remote File Inclussion Bugs..
  • spymetayahoo.com (Fri Jun 22 2007 - 04:36:26 CDT)
• Announce - Release RFIDIOt ver 0.1n (June 2007)
  • Adam Laurie (Wed Jun 06 2007 - 10:44:39 CDT)
• Apache Prefork MPM vulnerabilities - Report
  • Blazej Miga (Tue Jun 19 2007 - 18:50:36 CDT)
• Apple Safari: cookie stealing
  • Robert Swiecki (Wed Jun 13 2007 - 05:34:42 CDT)
• Apple Safari: idn urlbar spoofing
  • Robert Swiecki (Wed Jun 27 2007 - 04:27:40 CDT)
  • Robert Swiecki (Mon Jun 25 2007 - 15:33:19 CDT)
• ASP Folder Gallery Vulnerabilities
  • hack2prisonyahoo.com (Wed Jun 06 2007 - 11:08:44 CDT)
• Assorted browser vulnerabilities
  • Michal Zalewski (Mon Jun 04 2007 - 06:02:40 CDT)
• Atom PhotoBlog v1.0.9 XSS vulnerability
  • lscalima.serapis.net (Thu Jun 07 2007 - 05:34:28 CDT)
• BCS'07 Call For Papers
  • Jim Geovedi (Mon Jun 04 2007 - 02:37:38 CDT)
• BlackBoard Multiple Vulnerabilities (XSS)
  • anonymoushackermail.com (Thu Jun 14 2007 - 01:33:19 CDT)
• Buffer overflow in BusinessMail email server system 4.60.00
  • Steve Tornio (Mon Jun 04 2007 - 11:22:43 CDT)
  • iantnetcplus.com (Mon Jun 04 2007 - 09:32:32 CDT)
• bugtraq submission
  • Warner Moore (Mon Jun 04 2007 - 08:10:50 CDT)
  • dr.rezengmail.com (Fri Jun 01 2007 - 11:50:17 CDT)
• ByPass In PortalApp
  • RaedBsdMail.Com (Thu Jun 14 2007 - 15:53:36 CDT)
• CACTUSHOP 6 Default Installation Allows Remote Database Disclosure
  • DoZHackersCenter.com (Sun Jun 03 2007 - 19:30:24 CDT)
• Calendarix version 0.7. 20070307 Multiple Path Disclosure Vulnerabilities
  • securityresearchnetvigilance.com (Mon Jun 25 2007 - 11:20:30 CDT)
  • securityresearchnetvigilance.com (Mon Jun 25 2007 - 11:18:25 CDT)
• Calendarix version 0.7. 20070307 Multiple SQL Injection Vulnerabilities
  • securityresearchnetvigilance.com (Mon Jun 25 2007 - 11:20:53 CDT)
• Calendarix version 0.7. 20070307 Multiple XSS Attacks
  • securityresearchnetvigilance.com (Mon Jun 25 2007 - 11:24:59 CDT)
• Calyptix Security Advisory CX-2007-04 - Cross-Site Request Forgery Attack Against Check Point Safe<img src="/imgs/at.gif" border=0 align=middle>Office Device
  • Calyptix Security (Tue Jun 26 2007 - 13:44:53 CDT)
• CERN &#304;mage Map Dispatcher
  • h0tturkh0tturk.com (Sun Jun 03 2007 - 17:48:23 CDT)
• CfP: 5th ACM Workshop on Recurring Malware (WORM) - Deadline extension
  • chrisseclab.tuwien.ac.at (Tue Jun 19 2007 - 09:59:42 CDT)
• CFP: ISOI III (a DA workshop)
  • Gadi Evron (Mon Jun 25 2007 - 23:16:19 CDT)
• CheckPoint VPN-1 UTM Edge Cross Site Request Forgery vulnerability
  • Henri Lindberg - Louhi Networks Oy (Tue Jun 26 2007 - 20:01:32 CDT)
• Cisco Trust Agent Vulnerability
  • adblakedeloitte.co.uk (Mon Jun 11 2007 - 08:57:04 CDT)
• Comdev eCommerce 4.1 RFI Vulnerability
  • johnnytalkerhotmail.com (Sat Jun 02 2007 - 20:41:34 CDT)
• Comdev Web Blogger 4.1 RFI Vulnerability
  • johnnytalkerhotmail.com (Sat Jun 02 2007 - 20:42:39 CDT)
• Comersus Shop Cart 7.07 SQL Injection & XSS
  • DoZHackersCenter.com (Tue Jun 19 2007 - 20:51:20 CDT)
• Comicsense SQL Injection Advisory/Exploit
  • s0cratexhotmail.com (Tue Jun 05 2007 - 12:21:53 CDT)
• Contact request - nVidia
  • john-lindsayngssoftware.com (Wed Jun 27 2007 - 11:38:07 CDT)
• Conti FTP Server v1.0 DoS
  • esc6hush.com (Tue Jun 26 2007 - 22:24:16 CDT)
• CSIS Advisory: BlueCoat K9 Web Protection 3.2.36 Overflow
  • Dennis Rand (Fri Jun 08 2007 - 02:00:21 CDT)
• CSIS Advisory: Microsoft GDI+ Integer division by zero flaw handling .ICO files
  • H D Moore (Thu Jun 07 2007 - 10:34:17 CDT)
  • Dennis Rand (Thu Jun 07 2007 - 04:21:23 CDT)
• Dansie Cart Script Exploit Reported
  • Steven M. Christey (Tue Jun 05 2007 - 20:33:06 CDT)
  • h0tturkh0tturk.com (Sun Jun 03 2007 - 17:50:52 CDT)
• Disinfectors for the calculator virus (ti89.Gaara)
  • Piotr Bania (Sun Jun 03 2007 - 03:36:06 CDT)
• EEYE: Yahoo Webcam ActiveX Controls Multiple Buffer Overflows
  • eEye Advisories (Fri Jun 08 2007 - 12:58:19 CDT)
• Elxis CMS <= 2006.4 - banner module - sql injection
  • Nico Leidecker (Thu Jun 14 2007 - 13:07:00 CDT)
• eNdonesia 8.4 [multiple injection sql]
  • laurent.gaffiegmail.com (Fri Jun 22 2007 - 11:24:52 CDT)
• eTicket version 1.5.5 Path Disclosure Vulnerability
  • securityresearchnetvigilance.com (Wed Jun 27 2007 - 16:04:15 CDT)
• eTicket version 1.5.5 XSS Attack Vulnerability
  • sfhm2k.org (Fri Jun 29 2007 - 04:56:41 CDT)
  • securityresearchnetvigilance.com (Wed Jun 27 2007 - 16:04:24 CDT)
• Evenzia CMS XSS
  • glafkosinfosec.org.uk (Fri Jun 01 2007 - 11:58:16 CDT)
• flac123 0.0.9 - Stack overflow in comment parsing
  • David Thiel (Thu Jun 28 2007 - 21:34:02 CDT)
• FLEA-2007-0021-2: madwifi
  • Foresight Linux Essential Announcement Service (Wed Jun 06 2007 - 12:23:27 CDT)
• FLEA-2007-0024-1: libexif
  • Foresight Linux Essential Advisory Service (Mon Jun 04 2007 - 15:18:54 CDT)
• FLEA-2007-0025-1: openoffice.org
  • Foresight Linux Essential Announcement Service (Wed Jun 13 2007 - 13:37:54 CDT)
• FLEA-2007-0026-1: evolution-data-server
  • Foresight Linux Essential Announcement Service (Mon Jun 18 2007 - 21:12:40 CDT)
• FLEA-2007-0027-1: thunderbird
  • Foresight Linux Essential Announcement Service (Wed Jun 20 2007 - 10:49:51 CDT)
• FLEA-2007-0028-1: libexif
  • Foresight Linux Essential Announcement Service (Fri Jun 22 2007 - 14:08:41 CDT)
• FLEA-2007-0029-1: krb5 krb5-workstation
  • Foresight Linux Essential Announcement Service (Wed Jun 27 2007 - 19:27:48 CDT)
• FLEA-2007-0030-1: avahi avahi-glib avahi-sharp
  • Foresight Linux Essential Announcement Service (Thu Jun 28 2007 - 09:33:43 CDT)
• Full Path Disclosure in SendCard
  • xx_hack_xx_2004hotmail.com (Thu May 31 2007 - 18:22:41 CDT)
• fusetalk CSS (autherror.cfm)
  • Ivan Almuina (Wed Jun 20 2007 - 06:21:45 CDT)
• fusetalk CSS (comfinish.cfm)
  • Ivan Almuina (Wed Jun 20 2007 - 06:32:09 CDT)
• fusetalk SQL (autherror.cfm)
  • Ivan Almuina (Tue Jun 19 2007 - 07:38:29 CDT)
• Fusetalk SQL injection submission.
  • Charles Kim (Mon Jun 18 2007 - 11:06:42 CDT)
• fuzzylime (forum) XSS
  • rmcalima.serapis.net (Mon Jun 18 2007 - 09:34:23 CDT)
• Having Fun With PostgreSQL
  • Frank Berek (Mon Jun 18 2007 - 15:16:39 CDT)
  • Ray Stell (Mon Jun 18 2007 - 07:56:56 CDT)
  • Nico Leidecker (Sat Jun 16 2007 - 12:11:47 CDT)
• High risk vulnerability in OpenOffice RTF parser
  • NGSSoftware Insight Security Research (Wed Jun 13 2007 - 12:15:50 CDT)
• Hnkaray Duyuru Script Remote SQL &#304;njection
  • Dj_ReMix_20hotmail.com (Wed Jun 06 2007 - 23:12:06 CDT)
• HPSBST02231 SSRT071438 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS07-030 to MS07-035
  • security-alerthp.com (Thu Jun 21 2007 - 14:28:25 CDT)
• HPSBTU02207 SSRT061239 rev.2 - HP Tru64 UNIX OpenSSL and BIND Remote Arbitrary Code Execution or Denial of Service (DoS)
  • security-alerthp.com (Wed Jun 27 2007 - 08:04:39 CDT)
• HTTP SERVER (httpsv1.6.2) 404 Denial of Service
  • impriligmail.com (Wed Jun 20 2007 - 19:55:16 CDT)
• HTTP SERVER (httpsv1.6.2) source code disclosure
  • impriligmail.com (Wed Jun 20 2007 - 15:17:37 CDT)
• iDefense Security Advisory 06.01.07: Symantec VERITAS Storage Foundation Administration Service DoS Vulnerability
  • iDefense Labs (Fri Jun 01 2007 - 18:59:23 CDT)
• iDefense Security Advisory 06.05.07: Symantec Ghost Multiple Denial of Service Vulnerabilities
  • iDefense Labs (Wed Jun 06 2007 - 10:08:43 CDT)
• iDefense Security Advisory 06.07.07: Linux Kernel cpuset tasks Information Disclosure Vulnerability
  • iDefense Labs (Fri Jun 08 2007 - 11:48:51 CDT)
• iDefense Security Advisory 06.12.07: Microsoft License Manager and urlmon.dll COM Object Interaction Invalid Memory Access Vulnerability
  • iDefense Labs (Tue Jun 12 2007 - 16:33:02 CDT)
• iDefense Security Advisory 06.13.07: Multiple Vendor libexif Integer Overflow Heap Corruption Vulnerability
  • iDefense Labs (Wed Jun 13 2007 - 10:59:55 CDT)
• iDefense Security Advisory 06.14.07: Apache MyFaces Tomahawk JSF Framework Cross-Site Scripting (XSS) Vulnerability
  • iDefense Labs (Thu Jun 14 2007 - 12:41:28 CDT)
• iDefense Security Advisory 06.18.07: Cerulean Studios Trillian UTF-8 Word Wrap Heap Overflow Vulnerability
  • iDefense Labs (Mon Jun 18 2007 - 16:36:26 CDT)
• iDefense Security Advisory 06.21.07: Ingres Database Multiple Heap Corruption Vulnerabilities
  • iDefense Labs (Thu Jun 21 2007 - 15:50:32 CDT)
• iDefense Security Advisory 06.26.07: Multiple Vendor Kerberos kadmind Rename Principal Buffer Overflow Vulnerability
  • iDefense Labs (Tue Jun 26 2007 - 13:46:14 CDT)
• iDefense Security Advisory 06.26.07: RealNetworks RealPlayer/HelixPlayer SMIL wallclock Stack Overflow Vulnerability
  • iDefense Labs (Tue Jun 26 2007 - 14:53:46 CDT)
• IE 6 / MS Office Outlook Express Address Book Activex DoS
  • no-replyyahoo.com (Wed Jun 06 2007 - 07:47:42 CDT)
• IE 6/Microsoft Html Popup Window (mshtml.dll) DoS
  • no-replyhessamx.net (Wed Jun 06 2007 - 07:40:10 CDT)
• iG Shop 1.4 eval Inclusion Vulnerability
  • ifxcupu.us (Tue Jun 19 2007 - 01:49:54 CDT)
• Ingres stack overflow in uuid_from_char function
  • NGSSoftware Insight Security Research (Mon Jun 25 2007 - 04:35:42 CDT)
• Ingres Unauthenticated Pointer Overwrite 1
  • NGSSoftware Insight Security Research (Mon Jun 25 2007 - 04:30:51 CDT)
• Ingres Unauthenticated Pointer Overwrite 2
  • NGSSoftware Insight Security Research (Mon Jun 25 2007 - 04:33:33 CDT)
• Ingres verifydb local stack overflow
  • NGSSoftware Insight Security Research (Mon Jun 25 2007 - 04:38:58 CDT)
• Ingres wakeup setuid(ingres) file truncation
  • NGSSoftware Insight Security Research (Mon Jun 25 2007 - 04:41:10 CDT)
• jumping sudo using ptrace on Linux/i386
  • Trent Waddington (Fri Jun 01 2007 - 20:08:32 CDT)
• Juniper SBR V 6.0.1 CRL-Checking problem
  • USprotteweb.de (Wed Jun 27 2007 - 13:56:29 CDT)
• Kaspersky Multiple insufficient argument validation of hooked SSDT function Vulnerability
  • Matousec - Transparent security Research (Fri Jun 15 2007 - 03:15:06 CDT)
• KF Web Server 3.1.0 admin console XSS
  • supportkeyfocus.net (Tue Jun 26 2007 - 08:26:10 CDT)
  • impriligmail.com (Sat Jun 23 2007 - 14:18:37 CDT)
• Light Blog 4.1 XSS Vulnerability
  • lscalima.serapis.net (Wed Jun 06 2007 - 14:21:20 CDT)
• Linker index.php - Cross-Site Scripting Vulnerability
  • vagrant - e-hack.org (Sat Jun 02 2007 - 01:01:20 CDT)
• LiteWEB 2.7 404 Denial of Services
  • impriligmail.com (Sat Jun 23 2007 - 14:51:56 CDT)
• Local Denial of Service in Safari
  • azizovitdefence.ru (Sat Jun 16 2007 - 14:42:08 CDT)
• Local File Include Vulnerabilities in YaBB <= 2.1(all version)
  • kraszagmail.com (Tue Jun 19 2007 - 08:26:48 CDT)
• LuckyBot v3 Remote File Include
  • infolucasvd.nl (Wed Jun 06 2007 - 10:29:18 CDT)
• MaraDNS denial of service vulnerabilities
  • jantunesdi.fc.ul.pt (Tue Jun 19 2007 - 08:00:28 CDT)
• Maran Blog XSS vulnerability
  • lscalima.serapis.net (Sun Jun 10 2007 - 04:24:28 CDT)
• Menu Manager Mod for WebAPP - No Input Filtering
  • webappweb-app.org (Mon Jun 18 2007 - 02:01:36 CDT)
  • web-apphotmail.com (Tue Jun 12 2007 - 15:52:45 CDT)
• MIT krb5: makes sudo authentication issue MUCH worse.
  • Thor Lancelot Simon (Wed Jun 06 2007 - 22:37:37 CDT)
• MITKRB5-SA-2007-004: kadmind multiple RPC lib vulnerabilities
  • Tom Yu (Tue Jun 26 2007 - 13:01:54 CDT)
• MITKRB5-SA-2007-005: kadmind vulnerable to buffer overflow
  • Tom Yu (Tue Jun 26 2007 - 13:01:56 CDT)
• MLabs is Shifted Fully : SecNiche Initiative
  • Aditya K Sood (Mon Jun 11 2007 - 17:33:45 CDT)
• Monkey CMS v0.0.3 Remote File Include Vulnerabilitiy
  • wwwhtp.cc (Thu Jun 07 2007 - 03:23:19 CDT)
• MS07-034: Executing arbitrary script with mhtml: protocol handler
  • HASEGAWA Yosuke (Thu Jun 21 2007 - 22:42:13 CDT)
• My Datebook SQL Injection + XSS
  • lscalima.serapis.net (Mon Jun 04 2007 - 13:14:12 CDT)
• myBloggie 2.1.5 Remote File Include
  • the.tiger100gmail.com (Sun Jun 10 2007 - 01:08:27 CDT)
  • yasergencturk.net (Sat Jun 09 2007 - 12:08:39 CDT)
• MyEvent1.6 (template.php) Remote File Inclusion Vulnerability
  • str0ke (Sat Jun 02 2007 - 11:17:09 CDT)
  • yasergencturk.net (Sat Jun 02 2007 - 02:07:53 CDT)
• MyNews version 0.10 SQL Injection Vulnerability
  • securityresearchnetvigilance.com (Mon Jun 25 2007 - 11:18:03 CDT)
• MyServer-0.8.9 - source code disclosure
  • impriligmail.com (Wed Jun 20 2007 - 19:45:05 CDT)
• MyServer-0.8.9 - xss in sample cgi page
  • impriligmail.com (Wed Jun 20 2007 - 19:47:08 CDT)
• n.runs-SA-2007.013 - F-Secure Antivirus LZH parsing BufferOverflow Advisory
  • securitynruns.com (Fri Jun 01 2007 - 11:37:10 CDT)
• n.runs-SA-2007.014 - F-Secure Antivirus ARJ parsing Infinite Loop Advisory
  • securitynruns.com (Mon Jun 04 2007 - 11:52:21 CDT)
• n.runs-SA-2007.015 - F-Secure Antivirus FSG packed files parsing Infinite Loop Advisory
  • securitynruns.com (Mon Jun 04 2007 - 11:55:52 CDT)
• NetClassifieds [multiple vulnerabilities]
  • laurent.gaffiegmail.com (Thu Jun 21 2007 - 14:21:35 CDT)
• New Include Redirect Bug XSS All vBulletin v 3.x.x
  • scott-REMOTE-vbulletin.com (Fri Jun 22 2007 - 06:32:23 CDT)
  • kanedabohater.net (Thu Jun 21 2007 - 13:39:11 CDT)
  • scott-REMOVE-vbulletin.com (Thu Jun 21 2007 - 10:09:46 CDT)
  • stormhackerhotmail.com (Wed Jun 20 2007 - 08:37:48 CDT)
• New Include Redirect Bug XSS All vBulletin(r) v 3.x.x
  • scott-REMOVE-vbulletin.com (Fri Jun 22 2007 - 05:30:09 CDT)
  • Steven M. Christey (Thu Jun 21 2007 - 15:21:15 CDT)
• New post Topic Hijacking XSS All vBulletin v 3.x.x (2)
  • scott-REMOVE-vbulletin.com (Thu Jun 21 2007 - 10:10:03 CDT)
  • stormhackerhotmail.com (Wed Jun 20 2007 - 08:54:07 CDT)
• Openedge _mprosrv buffer overflow
  • suresyncgmail.com (Wed Jun 27 2007 - 05:14:13 CDT)
• Outpost Enforcing system reboot with 'outpost_ipc_hdr' mutex Vulnerability
  • Matousec - Transparent security Research (Fri Jun 01 2007 - 12:37:09 CDT)
• OWASP and WASC Cocktail party at Blackhat USA 2007
  • Anurag Agarwal (Thu Jun 07 2007 - 12:31:46 CDT)
• Packeteer PacketShaper Web Management Denial of Service
  • nnposterdisclosed.not (Fri Jun 08 2007 - 08:30:24 CDT)
• Papoo CMS - Multiple Cross Site Scripting
  • Nico Leidecker (Fri Jun 15 2007 - 14:26:25 CDT)
• Papoo CMS 3.6 - Access Restriction Bypass
  • Nico Leidecker (Sun Jun 24 2007 - 11:22:03 CDT)
• Papoo CMS 3.6 - SQL Injection
  • Nico Leidecker (Sun Jun 24 2007 - 11:20:59 CDT)
• PBSite - PHP Bulletin Site | CMS ====> RFI
  • pito pito (Sat Jun 02 2007 - 06:17:12 CDT)
  • pito pito (Fri Jun 01 2007 - 07:25:22 CDT)
• Persistent cross-site scripting in wordpress.com dashboard
  • Matteo Carli (Tue Jun 19 2007 - 11:23:59 CDT)
• PHP 4/5 htaccess safemode and open_basedir Bypass
  • cxibsecurityreason.com (Tue Jun 26 2007 - 19:42:04 CDT)
• PHP hosting Biller
  • rmcalima.serapis.net (Mon Jun 18 2007 - 08:13:23 CDT)
• PHP parse_str() arbitrary variable overwrite
  • Chuck Swiger (Wed Jun 13 2007 - 12:23:43 CDT)
  • gmdarkfiggmail.com (Wed Jun 13 2007 - 10:27:01 CDT)
  • Steven M. Christey (Tue Jun 12 2007 - 18:53:37 CDT)
  • adminbatznet.com (Tue Jun 12 2007 - 13:57:12 CDT)
  • gmdarkfiggmail.com (Tue Jun 12 2007 - 08:56:38 CDT)
• PhpListPro Persistent XSS Vulnerability
  • corrado.liottaalice.it (Fri Jun 15 2007 - 15:21:54 CDT)
• PHPMailer command execution
  • Thor Larholm (Mon Jun 11 2007 - 12:46:16 CDT)
• PHPMyDesk Beta Release 1.0b ==> RFI
  • no-spamprivacy.com (Fri Jun 22 2007 - 20:00:58 CDT)
  • the.tiger100gmail.com (Sun Jun 10 2007 - 00:59:19 CDT)
  • titanichacker titanichacker (Thu Jun 07 2007 - 17:22:01 CDT)
• phpreactor <===1.2.7 remote file include
  • pito pito (Fri Jun 01 2007 - 07:26:56 CDT)
• phpTrafficA < 1.4.2
  • laurent.gaffiegmail.com (Sun Jun 24 2007 - 12:56:56 CDT)
• phpWebThings ==>1.5.2 RFI
  • titanichacker titanichacker (Thu Jun 07 2007 - 13:18:49 CDT)
• Pixy - An Open-Source Vulnerability Scanner for PHP Applications
  • pixy-noreplyseclab.tuwien.ac.at (Wed Jun 20 2007 - 04:14:12 CDT)
• Pluxml 0.3.1 Remote Code Execution Exploit
  • gmdarkfiggmail.com (Sun Jun 24 2007 - 10:08:05 CDT)
• POWER PHLOGGER v.2.2.5 (username) SQL Injection
  • darkz.gsagmail.com (Mon Jun 25 2007 - 03:47:55 CDT)
• Progress Webspeed exploit for all releases
  • suresyncgmail.com (Fri Jun 29 2007 - 16:51:26 CDT)
• Project CERA Is Up Again : Secniche Initiative
  • Aditya K Sood (Mon Jun 11 2007 - 17:31:13 CDT)
• Prototype of an PHP application ===> RFI
  • pito pito (Fri Jun 01 2007 - 07:26:19 CDT)
• Recent OpenSSL exploits
  • Ryan's spam address (Sat Jun 02 2007 - 16:18:32 CDT)
• Redlevel Advisory #025 - Vonage VoIP Telephone Adapter Default Misconfiguration
  • johnmartinelli.com (Sat Jun 02 2007 - 00:37:40 CDT)
• RedLevel Advisory #23 - SalesCart Shopping Cart SQL Injection Vulnerability
  • Jon Ribbens (Thu Jun 14 2007 - 18:27:29 CDT)
  • John M. Martinelli (Thu Jun 14 2007 - 16:31:14 CDT)
  • accountingcomcity.com (Wed Jun 13 2007 - 12:36:20 CDT)
• Remote log injection on DenyHosts, Fail2ban and BlockHosts
  • Daniel Cid (Wed Jun 06 2007 - 15:15:29 CDT)
• RevokeBB Blind SQL Injection / Hash Extractor
  • BlackHawk (Fri Jun 01 2007 - 11:54:30 CDT)
• RFI In Script SH-News 3.1
  • RaedBsdMail.Com (Thu Jun 14 2007 - 15:48:20 CDT)
• rPSA-2007-0114-1 mutt
  • rPath Update Announcements (Mon Jun 04 2007 - 16:41:14 CDT)
• rPSA-2007-0115-1 libexif
  • rPath Update Announcements (Mon Jun 04 2007 - 16:41:39 CDT)
• rPSA-2007-0117-1 gd php php-mysql php-pgsql
  • rPath Update Announcements (Thu Jun 07 2007 - 17:27:24 CDT)
• rPSA-2007-0119-1 spamassassin
  • rPath Update Announcements (Wed Jun 13 2007 - 16:28:12 CDT)
• rPSA-2007-0122-1 evolution-data-server
  • rPath Update Announcements (Thu Jun 14 2007 - 19:51:51 CDT)
• rPSA-2007-0123-1 squirrelmail
  • rPath Update Announcements (Thu Jun 14 2007 - 19:52:11 CDT)
• rPSA-2007-0124-1 kernel xen
  • rPath Update Announcements (Thu Jun 14 2007 - 19:56:06 CDT)
• rPSA-2007-0126-1 util-linux
  • rPath Update Announcements (Fri Jun 15 2007 - 09:37:51 CDT)
• rPSA-2007-0127-1 fetchmail
  • rPath Update Announcements (Tue Jun 19 2007 - 10:49:53 CDT)
• rPSA-2007-0131-1 libexif
  • rPath Update Announcements (Mon Jun 25 2007 - 11:10:39 CDT)
• rPSA-2007-0133-1 emacs emacs-leim
  • rPath Update Announcements (Mon Jun 25 2007 - 19:44:48 CDT)
• rPSA-2007-0135-1 krb5 krb5-server krb5-services krb5-test krb5-workstation
  • rPath Update Announcements (Wed Jun 27 2007 - 15:18:20 CDT)
• rPSA-2007-0136-1 httpd mod_ssl
  • rPath Update Announcements (Wed Jun 27 2007 - 16:32:41 CDT)
• RUS-CERT 2007-06:01 (1380): Insecure Defaults in A-L OmniPCX 7.0
  • Oliver Goebel (Thu Jun 07 2007 - 05:54:27 CDT)
• S21Sec-035: F5 FirePass command execution vulnerability
  • S21sec Labs (Mon Jun 04 2007 - 04:22:48 CDT)
• Safari Bookmarks Buffer Overflow Vulnerability
  • azizovitdefence.ru (Sun Jun 24 2007 - 11:14:59 CDT)
• Safari for Windows, 0day URL protocol handler command injection
  • Thor Larholm (Mon Jun 11 2007 - 20:45:54 CDT)
• Safari XMLHttpRequest HTTP header injection
  • Richard Moore (Mon Jun 25 2007 - 06:03:18 CDT)
• SAP Internet Communication Framework (BC-MID-ICF) Vulnerability
  • Ivan Buetler (Wed Jun 27 2007 - 02:03:39 CDT)
• SAP Web Dynpro Java (BC-WD-JAV) Vulnerability
  • Ivan Buetler (Wed Jun 27 2007 - 02:00:50 CDT)
• SEC Consult SA-20070601-0 :: PHP chunk_split() integer overflow
  • Gerhard Wagner (Fri Jun 01 2007 - 09:19:15 CDT)
• SECNICHE : Dwelling Security is On the Run
  • Aditya K Sood (Wed Jun 13 2007 - 01:30:03 CDT)
• Second Call for Papers: DeepSec IDSC 2007 Europe/Vienna: 20-23 Nov 2007
  • Paul Böhm (Thu Jun 07 2007 - 20:54:49 CDT)
• Secunia Research: KVIrc irc:// URI Handler Command Execution Vulnerability
  • Secunia Research (Thu Jun 28 2007 - 08:19:18 CDT)
• Secunia Research: Symantec Mail Security for SMTP Boundary Errors
  • Secunia Research (Thu Jun 28 2007 - 08:17:09 CDT)
• Serious holes affecting JFFNMS
  • Tim Brown (Sun Jun 10 2007 - 14:53:41 CDT)
• ShAnKaR: Simle machines forum CAPTCHA bypass and PHP injection
  • 3APA3A (Mon Jun 18 2007 - 04:49:53 CDT)
• SHTTPD V1.38 server source code disclosure
  • impriligmail.com (Sat Jun 23 2007 - 12:21:38 CDT)
• Singapore Gallery fullpath disclosure
  • hack2prisonyahoo.com (Thu Jun 14 2007 - 08:15:07 CDT)
• Sitellite cms <= 4.2.12 RFI Vuln
  • luxsimian.ca (Tue Jun 19 2007 - 00:09:32 CDT)
  • CarcaBotCarcaBot.ro (Sat Jun 16 2007 - 11:24:16 CDT)
• SpyBye 0.3 released
  • Niels Provos (Sat Jun 09 2007 - 21:51:21 CDT)
• SQL Injection In Script VBZooM V1.12
  • RaeDBsdMail.Com (Fri Jun 29 2007 - 02:36:10 CDT)
• static XSS / SQL-Injection in Omegasoft Insel
  • MC Iglo (Fri Jun 01 2007 - 06:45:32 CDT)
• Sudo: local root compromise with krb5 enabled
  • Ken Raeburn (Fri Jun 15 2007 - 13:36:11 CDT)
  • Kyle Wheeler (Thu Jun 14 2007 - 10:00:55 CDT)
  • Ken Raeburn (Mon Jun 11 2007 - 17:52:11 CDT)
  • Todd C. Miller (Thu Jun 07 2007 - 15:05:42 CDT)
  • Mark Senior (Thu Jun 07 2007 - 14:55:52 CDT)
  • James Downs (Thu Jun 07 2007 - 12:13:46 CDT)
  • Thor Lancelot Simon (Wed Jun 06 2007 - 20:57:25 CDT)
  • Thor Lancelot Simon (Wed Jun 06 2007 - 22:19:01 CDT)
• SYM07-009,Symantec Storage Foundation for Windows Volume Manager: Authentication Bypass and Potential Code Execution in Scheduler Service
  • securesymantec.com (Mon Jun 04 2007 - 11:00:28 CDT)
• SYM07-011 Symantec Reporting Server password disclosure
  • securesymantec.com (Tue Jun 05 2007 - 14:16:07 CDT)
• SYM07-012 Symantec Reporting Server elevation of privilege
  • securesymantec.com (Tue Jun 05 2007 - 14:27:37 CDT)
• SYMSA-2007-004: Multiple Vulnerabilities in Xythos Server Products
  • researchsymantec.com (Fri Jun 22 2007 - 13:06:27 CDT)
• TPTI-07-08: Symantec Veritas Storage Foundation Scheduler Service Authentication Bypass Vulnerability
  • TSRT3com.com (Mon Jun 04 2007 - 19:49:57 CDT)
• TPTI-07-09: Macrovision FLEXnet boisweb.dll ActiveX Control Buffer Overflow Vulnerability
  • TSRT3com.com (Mon Jun 04 2007 - 19:50:01 CDT)
• TPTI-07-10: Centennial Software XferWan.exe Stack Overflow Vulnerability
  • TSRT3com.com (Mon Jun 04 2007 - 19:50:05 CDT)
• TSLSA-2007-0020 - clamav
  • Trustix Security Advisor (Fri Jun 08 2007 - 03:40:38 CDT)
• TSLSA-2007-0021 - kerberos5
  • Trustix Security Advisor (Fri Jun 29 2007 - 07:08:59 CDT)
• Unpatched input validation flaw in Firefox 2.0.0.4
  • Thor Larholm (Mon Jun 04 2007 - 14:42:05 CDT)
• Utopia News Pro version 1.4.0 XSS Attack Vulnerability
  • securityresearchnetvigilance.com (Sun Jun 17 2007 - 14:19:34 CDT)
• uTorrent overflow
  • Pavel Konov (Wed Jun 06 2007 - 17:57:57 CDT)
  • Gavin Hanover (Wed Jun 06 2007 - 18:51:16 CDT)
  • Andreas Beck (Thu Jun 07 2007 - 05:30:25 CDT)
  • Jon Ribbens (Mon Jun 04 2007 - 18:23:16 CDT)
  • Dj.r4iDeNgmail.com (Tue Jun 05 2007 - 20:28:27 CDT)
  • Dj.r4iDeNgmail.com (Sat Jun 02 2007 - 15:15:09 CDT)
• VLC 0.8.6b format string vulnerability & integer overflow
  • David Thiel (Thu Jun 21 2007 - 13:28:11 CDT)
• vSupport Integrated Ticket System 3.*.* SQL injection
  • stormhackerhotmail.com (Sat Jun 09 2007 - 09:33:40 CDT)
• W1L3D4 WEBmarket Remote SQL &#304;njection
  • Dj_ReMix_20hotmail.com (Wed Jun 06 2007 - 23:11:08 CDT)
• W1L3D4 WEBmarket v0,1 SQL Injection Vuln
  • crackers_childsibersavascilar.com (Tue Jun 19 2007 - 15:35:29 CDT)
• Webif.cgi local file inclusion
  • maiosyetmawk.org (Mon Jun 18 2007 - 09:10:55 CDT)
• WebStudio Multiple XSS Vulnerabilities
  • glafkosgmail.com (Mon Jun 04 2007 - 06:36:06 CDT)
• Webwiz vulnerable
  • spymasterspykod.net (Sun Jun 10 2007 - 19:43:01 CDT)
• WheatBlog 1.1 RFI/SQL Injection
  • underwateritdefence.ru (Sat Jun 30 2007 - 09:52:04 CDT)
• Windows Oday release
  • Hugo van der Kooij (Thu Jun 14 2007 - 17:05:03 CDT)
  • gelinuxbox.org (Wed Jun 13 2007 - 12:48:07 CDT)
  • Steven M. Christey (Wed Jun 13 2007 - 12:03:36 CDT)
  • Joanna Rutkowska (Wed Jun 13 2007 - 05:10:23 CDT)
  • gelinuxbox.org (Tue Jun 12 2007 - 15:21:56 CDT)
  • Thomas Lim (Tue Jun 12 2007 - 13:58:24 CDT)
• WinPT User ID Spoofing Vulnerability
  • nnposterdisclosed.not (Mon Jun 11 2007 - 09:01:03 CDT)
• WmsCMS < = 2.0 Multiple XSS Vulnerabilities
  • glafkosinfosec.org.uk (Thu Jun 07 2007 - 10:39:12 CDT)
• Wordpress default theme XSS (admin) and other problems
  • John Smith (Fri Jun 08 2007 - 08:15:38 CDT)
• WSPortal version 1.0 Path Disclosure Vulnerability
  • securityresearchnetvigilance.com (Sun Jun 17 2007 - 14:19:09 CDT)
• WSPortal version 1.0 SQL Injection Vulnerability
  • securityresearchnetvigilance.com (Sun Jun 17 2007 - 14:19:23 CDT)
• XEForum Cookie Modification Privilege Escalation Vulnerability
  • Firewall1954hotmail.com (Wed Jun 27 2007 - 20:12:55 CDT)
• Z-Blog 1.7 Authentication Bypass Database Download Vulnerability
  • RaedBsdMail.Com (Fri Jun 01 2007 - 06:19:38 CDT)
• ZDI-07-034: CA Multiple Product AV Engine CAB Filename Parsing Stack Overflow Vulnerability
  • zdi-disclosures3com.com (Tue Jun 05 2007 - 14:48:37 CDT)
• ZDI-07-035: CA Multiple Product AV Engine CAB Header Parsing Stack Overflow Vulnerability
  • zdi-disclosures3com.com (Tue Jun 05 2007 - 14:48:42 CDT)
• ZDI-07-036: Arris Cadant C3 CMTS Remote DoS Vulnerability
  • zdi-disclosures3com.com (Tue Jun 12 2007 - 12:26:16 CDT)
• ZDI-07-037: Microsoft Internet Explorer Language Pack Installation Remote Code Execution Vulnerability
  • zdi-disclosures3com.com (Tue Jun 12 2007 - 15:37:02 CDT)
• ZDI-07-038: Microsoft Internet Explorer Prototype Dereference Code Execution Vulnerability
  • zdi-disclosures3com.com (Tue Jun 12 2007 - 15:37:13 CDT)
• Zen Help Desk ==> Version 2.1 Bypass/
  • titanichacker titanichacker (Thu Jun 07 2007 - 16:12:31 CDT)

Last message date: Sat Jun 30 2007 - 12:15:59 CDT
Archived on: Sat Jun 30 2007 - 12:15:59 CDT

375 messages sorted by: [ author ] [ date ] [ thread ]