SecurityFocus Bugtraq
By Author

350 messages sorted by: [ date ] [ thread ] [ subject ] [ attachment ]

Starting: 11/01/05
Ending: 11/30/05

• A.1.M_at_Hotmail.com
  • SQL injection in phpWebThing 1.4.4 (11/11/05)
• abducter_minds_at_yahoo.com
  • Gallery_v2.4 SQL Injection (11/04/05)
• admin_at_dbtech.org
  • IE BUG, Mozilla DOS? (11/21/05)
• advisories+asterisk_at_assurance.com.au
  • Asterisk vmail.cgi vulnerability (11/07/05)
• Advisories_at_eeye.com
  • [EEYEB-20050701] - RealPlayer Zipped Skin File Buffer Overflow II (11/10/05)
  • [EEYEB-20050510] - RealPlayer Data Packet Stack Overflow (11/10/05)
  • [EEYEB-20050901] Windows Metafile SetPalette Entries Heap OVerflow Vulnerability (Graphics Rendering Engine Vulnerability) (11/08/05)
  • [EEYEB-20050329] Windows Metafile Multiple Heap Overflows (11/08/05)
  • [EEYEB-20050627B] Macromedia Flash Player Improper Memory Access Vulnerability (11/05/05)
• alert7_at_xfocus.org
  • [xfocus-AD-051115]Multiple antivirus failed to scan malicous filename bypass vulnerability (11/15/05)
• alex cottle
  • Norton Unerase - Need Contact (11/02/05)
• alireza hassani
  • Re: XSS on Yahoo Mail (11/26/05)
  • [KAPDA::#14] - PHPPost XSS and HTML Injection (11/22/05)
  • [KAPDA::#13] - XMB HTML Injection & Path Disclosure. (11/17/05)
  • [KAPDA::#12] - ekinboard XSS and HTML Injection (11/14/05)
  • Mambo Open Source, Path disclosure (11/02/05)
  • VUBB XSS & path disclosure Vulnerabilities (11/01/05)
• Amin Tora
  • [ADVISORY] CISCO ASA Failover DoS Vulnerability (11/14/05)
• Andrei Mikhailovsky
  • Re: Authentication vulnerability in Belkin wireless devices (11/16/05)
  • Authentication vulnerability in Belkin wireless devices (11/15/05)
• Andrew Farmer
  • Re: [Full-disclosure] Re: readdir_r considered harmful (11/07/05)
• Andrew Miller
  • Re: [Full-disclosure] Re: readdir_r considered harmful (11/08/05)
• Angelo Dell'Aera
  • Metro Olografix Crypto Meeting 2006 CFP (11/20/05)
• Anti Matter
  • Invision Power Board Privilege Esaclation (2.0.1 + more) (11/04/05)
• ascii
  • Free Web Stat Multiple XSS Vulnerabilities (11/28/05)
  • Php Web Statistik Multiple Vulnerabilities (11/28/05)
  • WebCalendar Multiple Vulnerabilities (11/28/05)
• Atom Smasher
  • GAO report on e-voting (11/12/05)
• B Potter
  • ShmooCon 2006 - Washington DC (11/17/05)
• Ben Hutchings
  • Re: readdir_r considered harmful (11/01/05)
  • readdir_r considered harmful (11/01/05)
• benjilenoob_at_hotmail.com
  • Failles dans Invision Power Board 2.1 [xss] (11/04/05)
• Bernhard Mueller
  • SEC Consult SA-20051107-0 :: toendaCMS multiple vulnerabilites (11/07/05)
  • SEC Consult SA-20051107-1 :: Macromedia Flash Player ActionDefineFunction Memory Corruption (11/07/05)
• bhfh01_at_gmail.com
  • Sql injection in ibProArcade (11/05/05)
• bhs_team_at_yahoo.com
  • 1-2-All Broadcast E-mail Software vulnerable to a classic SQL admin (11/11/05)
  • Advanced Guestbook 2.2 ( SQL Injection Exploit ) (11/06/05)
• Bill Stout
  • Beta product testing (11/14/05)
• Bug Traq Lists
  • RE: Advisory 23/2005: vTiger multiple vulnerabilities (11/25/05)
• Casper.Dik_at_Sun.COM
  • Re: [Full-disclosure] Re: readdir_r considered harmful (11/08/05)
  • Re: [Full-disclosure] Re: readdir_r considered harmful (11/06/05)
  • Re: [Full-disclosure] Re: readdir_r considered harmful (11/06/05)
  • Re: readdir_r considered harmful (11/05/05)
• Christopher Kunz
  • Advisory 23/2005: vTiger multiple vulnerabilities (11/25/05)
  • Re: Advisory 23/2005: vTiger multiple vulnerabilities (11/25/05)
  • Advisory 23/2005: vTiger multiple vulnerabilities (11/24/05)
  • Advisory 22/2005: Multiple vulnerabilities in phpSysInfo (11/13/05)
  • Advisory 21/2005: Multiple vulnerabilities in PHPKIT (11/08/05)
• Cisco Systems Product Security Incident Response Team
  • Cisco Security Advisory: Cisco Security Agent Vulnerable to Privilege Escalation (11/29/05)
  • Cisco Security Advisory: Fixed SNMP Communities and Open UDP Port in Cisco 7920 Wireless IP Phone (11/16/05)
  • Cisco Security Advisory: Multiple Vulnerabilities Found by PROTOS IPSec Test Suite (11/14/05)
  • Cisco Security Advisory: IOS Heap-based Overflow Vulnerability in System Timers (11/02/05)
  • Cisco Security Advisory: Cisco Airespace Wireless LAN Controllers Allow Unencrypted Network Access (11/02/05)
  • Cisco Security Advisory: Cisco IPS MC Malformed Configuration Download Vulnerability (11/01/05)
• come2waraxe_at_yahoo.com
  • [waraxe-2005-SA#043] - Sql injection in Phorum 5.0.20 and earlier (11/04/05)
• Core FORCE team
  • ANN: Free endpoint security software released (Core FORCE 070.105) (11/28/05)
• Cory Altheide
  • Re: New Bug KESM in GoogleTalk (11/11/05)
• crazy frog crazy frog
  • Midicart sql injection (11/12/05)
• crowdat_at_gmail.com
  • Re: New Bug KESM in GoogleTalk (11/10/05)
• Dana Hudes
  • Re: DMA[2005-1112a] - 'Veritas Storage Foundation VCSI18N_LANG buffer overflow' (11/15/05)
• daniel.schreckling_at_securityfocus.com
  • Horde MIME Viewer vulnerability (11/22/05)
• dave kleiman
  • RE: List of Security-oriented Fairs/Events/Conferences? (11/15/05)
• David F. Skoll
  • Re: [FLSA-2005:152794] Updated rp-pppoe package fixes security issue (11/15/05)
• David Litchfield
  • Snagging Security Tokens to Elevate Privileges (11/18/05)
  • Database servers on XP and the curious flaw (11/16/05)
  • Three years and ten months without a patch (11/15/05)
• David Maciejak
  • Apache Tomcat 5.5.x remote Denial Of Service (11/04/05)
• deane10_at_sbcglobal.net
  • Re: phpBB Code EXEC (v2.0.10) (11/28/05)
• Debasis Mohanty
  • Zone Labs Products Advance Program Control and OS Firewall (Behavioral Based) Technology Bypass Vulnerability (11/07/05)
• Dragos Ruiu
  • EUSecWest/London Call for Papers and PacSec/Tokyo announcements (11/06/05)
• enji_at_infosys.tuwien.ac.at
  • Simple PHP Blog: Multiple XSS Vulnerabilities (11/02/05)
• exoduks_at_securityfocus.com,
  • Re: Midicart sql injection (11/15/05)
• fakemeail_at_yahoo.com
  • Re: Cisco Clean Access Agent (Perfigo) bypass (11/21/05)
• first-2006papers_at_first.org
  • Call For Papers (11/08/05)
• Florian Weimer
  • Re: - Cisco IOS HTTP Server code injection/execution vulnerability- (11/28/05)
  • Re: [Full-disclosure] On Interpretation Conflict Vulnerabilities (11/03/05)
• gb.network_at_gmail.com
  • Remote file include in phpgreetz (11/26/05)
  • Remote file include in Q-News (11/26/05)
  • Remote file include in Athena (11/26/05)
• GeekZ_at_securityfocus.com,
  • upload phpshell in PHPFM (11/07/05)
• GentleSecurity Team
  • GeSWall Intrusion Prevention System 2.1 Released (Freeware) (11/23/05)
• H D Moore
  • Google Search Appliance proxystylesheet Flaws (11/21/05)
• h4cky0u.org_at_gmail.com
  • HYSA-2005-009 Elite Forum 1.0.0.0 XSS Vulnerability (11/01/05)
• Hans Wolters
  • [security - exponentcms] (11/19/05)
• iDEFENSE Labs
  • iDEFENSE Security Advisory 11.04.05: Clam AntiVirus tnef_attachment() DoS Vulnerability (11/05/05)
  • iDEFENSE Security Advisory 11.04.05: Clam AntiVirus Cabinet-file handling Denial of Service Vulnerability (11/05/05)
• info_at_elcomsoft.com
  • Schneier's PasswordSafe password validation flaw (11/16/05)
• inge.henriksen_at_booleansoft.com
  • Re: Work in Progress: FileZilla Server Terminal V0.9.4d Buffer Overflow (11/21/05)
  • Work in Progress: FileZilla Server Terminal V0.9.4d Buffer Overflow (11/07/05)
• io_at_lucaercoli.it
  • Buffer Overrun in FTGate4 Groupware Mail server (11/16/05)
• Irene Abezgauz
  • Security Advisory: Struts Error Message Cross Site Scripting (11/21/05)
• Ivan Arce
  • Core FORCE and OpenBSD PF's (11/28/05)
• James Evans
  • Google Talk Denial of Service - BenjiBug (11/23/05)
• Jaroslaw Sajko
  • Gadu-Gadu several vulnerabilities (version <= 7.20) (11/21/05)
• Jeff Moss
  • Black Hat Federal and Europe CFP and Registration now open (11/03/05)
• Jeremy Epstein
  • RE: List of Security-oriented Fairs/Events/Conferences? (11/15/05)
• Jerome Athias
  • Invision Power Board 2.1 : Multiple XSS Vulnerabilities (11/06/05)
• Jim Ley
  • Re: XSS on Yahoo Mail (11/24/05)
• Josh Zlatin
  • MailEnable IMAP DOS (11/24/05)
• Juha-Matti Laurio
  • RE: List of Security-oriented Fairs/Events/Conferences? (11/16/05)
• kahrny_at_gmail.com
  • Re: New Bug KESM in GoogleTalk (11/18/05)
• Kevin Finisterre
  • DMA[2005-1112a] - 'Veritas Storage Foundation VCSI18N_LANG buffer overflow' (11/12/05)
• kfinisterre
  • DMA[2005-1104a] - 'GpsDrive friendsd2 format string vulnerability' (11/04/05)
• khc_at_bsdmail.org
  • OSTE v1.0 Remote Command Exucetion (11/07/05)
• khc_at_bsdmial.org
  • Webistanbul Control Panel Sql Injection (11/26/05)
• Konstantin V. Gavrilenko
  • Cisco PIX TCP Connection Prevention (11/22/05)
• koon_at_gentoo.org
  • [Full-disclosure] [ GLSA 200511-23 ] chmlib, KchmViewer: Stack-based buffer overflow (11/28/05)
• ksa_ksa82_at_hotmail.com
  • APBoard v [all] ---> [SQL injection] (11/21/05)
• Kyle Wheeler
  • Re: IE BUG, Mozilla DOS? (11/23/05)
• labs-no-reply_at_idefense.com
  • iDEFENSE Security Advisory 11.17.05: Qualcomm WorldMail IMAP Server Directory Traversal Vulnerability (11/17/05)
  • iDEFENSE Security Advisory 11.15.05: Multiple Vendor Insecure Call to CreateProcess() Vulnerability (11/15/05)
  • iDEFENSE Security Advisory 11.15.05: Multiple Vendor GTK+ gdk-pixbuf XPM Loader Heap Overflow Vulnerability (11/15/05)
  • iDefense Security Advisory 11.11.05: Multiple Vendor Lynx Command Injection Vulnerability (11/11/05)
• Lance James
  • Re: XSS on Yahoo Mail (11/28/05)
• Larry Seltzer
  • Your One-Stop Site For Sony Lawsuit Info (11/21/05)
• Layer One
  • LayerOne 2006 CFP Released (11/07/05)
• Leandro Meiners
  • CYBSEC - Security Advisory: Multiple XSS in SAP WAS (11/09/05)
  • CYBSEC - Security Advisory: Phishing Vector in SAP WAS (11/09/05)
  • CYBSEC - Security Advisory: HTTP Response Splitting in SAP WAS (11/09/05)
• limfung_at_gmail.com
  • Re: Re: - Cisco IOS HTTP Server code injection/execution vulnerability- (11/29/05)
• little.hacker_at_gmail.com
  • Re: XSS on Yahoo Mail (11/24/05)
• liz0_at_bsdmail.com
  • Randshop all versiyon Sql &#304;njection (11/28/05)
• Luca Sambucci
  • Re: List of Security-oriented Fairs/Events/Conferences? (11/16/05)
• Ludwig Nussel
  • SUSE Security Announcement: pwdutils, shadow (SUSE-SA:2005:064) (11/04/05)
• Luigi Auriemma
  • Buffer-overflow in GO-Global for Windows 3.1.0.3270 (11/02/05)
  • Multiple vulnerabilities in Scorched 3D 39.1 (11/02/05)
  • Limited directory traversal in NeroNET 1.2.0.2 (11/02/05)
  • Buffer-overflow and directory traversal in Asus Video Security 3.5.0.0 (11/02/05)
  • Buffer-overflow in Glider collect'n kill 1.0.0.0 (11/02/05)
  • Buffer-overflow and crash in FlatFrag 0.3 (11/02/05)
  • Socket termination in Battle Carry .005 (11/02/05)
• Luigi Mori
  • Flaw in Syn Attack Protection on non-updated Microsoft OSes can lead to DoS (11/28/05)
• Mandriva Security Team
  • MDKSA-2005:216 - Updated fuse packages fix vulnerability (11/24/05)
  • MDKSA-2005:215 - Updated binutils packages fix vulnerabilities (11/23/05)
  • MDKSA-2005:214 - Updated gdk-pixbuf/gtk+2.0 packages fix vulnerability (11/19/05)
  • MDKSA-2005:213 - Updated php packages fix multiple vulnerabilities (11/17/05)
  • MDKSA-2005:212 - Updated egroupware packages to address phpldapadmin, phpsysinfo vulnerabilities (11/16/05)
  • MDKSA-2005:211 - Updated lynx packages fix critical vulnerability (11/12/05)
  • MDKSA-2005:210 - Updated w3c-libwww packages fixes DoS vulnerability. (11/10/05)
  • MDKSA-2005:209 - Updated fetchmail packages fixes fetchmailconf vulnerability (11/10/05)
  • MDKSA-2005:208 - Updated emacs packages fix Lisp vulnerability (11/10/05)
  • MDKSA-2005:207 - Updated libungif packages fix various vulnerabilities (11/10/05)
  • MDKSA-2005:206 - Updated openvpn packages fix multiple vulnerabilities (11/08/05)
  • MDKSA-2005:205 - Updated clamav packages fix multiple vulnerabilities (11/08/05)
  • MDKSA-2005:204 - Updated wget packages fix vulnerability (11/02/05)
  • MDKSA-2005:202 - Updated squirrelmail packages fix vulnerability (11/02/05)
  • MDKSA-2005:203 - Updated gda2.0 packages fix string format vulnerability (11/02/05)
• Manh Tho
  • 2nd CFP: Workshops at the 1st Int. Conf. on Availability, Reliability & Security (11/24/05)
• Marc Deslauriers
  • [FLSA-2005:166943] Updated php packages fix security issues (11/29/05)
  • [FLSA-2005:123013] Updated xchat package fixes security issue (11/15/05)
  • [FLSA-2005:123013] Updated xchat package fixes security issue (11/15/05)
  • [FLSA-2005:158801] Updated bzip2 packages fix security issues (11/15/05)
  • [FLSA-2005:152794] Updated rp-pppoe package fixes security issue (11/15/05)
  • [FLSA-2005:152848] Updated glibc packages fix security issues (11/14/05)
  • [FLSA-2005:166941] Updated httpd and mod_ssl packages fix two security issues (11/10/05)
• Marc Schoenefeld
  • Parosproxy 3.2.6: Local Exploitation, Command injection vulnerability (11/04/05)
  • Remotely DoSing JBoss 4.0.2 with serialized java objects (11/04/05)
• Martin Pitt
  • [USN-218-1] netpbm vulnerabilities (11/21/05)
  • [USN-219-1] Linux kernel vulnerabilities (11/22/05)
  • [USN-190-2] ucs-snmp vulnerability (11/21/05)
  • [USN-217-1] Inkscape vulnerability (11/21/05)
  • [USN-216-1] GDK vulnerabilities (11/16/05)
  • [USN-215-1] fetchmailconf vulnerability (11/07/05)
  • [USN-151-4] rpm vulnerability (11/09/05)
  • [USN-214-1] libungif vulnerabilities (11/07/05)
• Martin Schulze
  • [SECURITY] [DSA 911-1] New gtk+2.0 packages fix several vulnerabilities (11/29/05)
  • [SECURITY] [DSA 910-1] New zope2.7 packages fix arbitrary file inclusion (11/24/05)
  • [SECURITY] [DSA 907-1] New ipmenu packages fix insecure temporary file creation (11/23/05)
  • [SECURITY] [DSA 908-1] New sylpheed-claws packages fix arbitrary code execution (11/23/05)
  • [SECURITY] [DSA 909-1] New horde3 packages fix cross-site scripting (11/23/05)
  • [SECURITY] [DSA 900-3] New fetchmail-ssl packages fix potential information leak (11/22/05)
  • [SECURITY] [DSA 906-1] New sylpheed packages fix arbitrary code execution (11/22/05)
  • [SECURITY] [DSA 905-1] New mantis packages fix several vulnerabilities (11/22/05)
  • [SECURITY] [DSA 900-2] New fetchmail packages fix potential information leak (11/21/05)
  • [SECURITY] [DSA 904-1] New netpbm packages fix arbitrary code execution (11/21/05)
  • [SECURITY] [DSA 903-1] New unzip packages fix unauthorised permissions modification (11/21/05)
  • [SECURITY] [DSA 811-2] New common-lisp-controller packages fix arbitrary code injection (11/21/05)
  • [SECURITY] [DSA 902-1] New xmail packages fix arbitrary code execution (11/21/05)
  • [SECURITY] [DSA 901-1] New gnump3d packages fix several vulnerabilities (11/19/05)
  • [SECURITY] [DSA 900-1] New fetchmail packages fix potential information leak (11/18/05)
  • [SECURITY] [DSA 899-1] New egroupware packages fix several vulnerabilities (11/17/05)
  • [SECURITY] [DSA 898-1] New phpgroupware packages fix several vulnerabilities (11/17/05)
  • [SECURITY] [DSA 897-1] New phpsysinfo packages fix several vulnerabilities (11/15/05)
  • [SECURITY] [DSA 896-1] New ftpd-ssl packages fix arbitrary code execution (11/15/05)
  • [SECURITY] [DSA 894-1] New AbiWord packages fix arbitrary code execution (11/14/05)
  • [SECURITY] [DSA 895-1] New uim packages fix privilege escalation (11/14/05)
  • [SECURITY] [DSA 893-1] New acidlab packages fix SQL injection (11/14/05)
  • [SECURITY] [DSA 804-2] New kdelibs packages fix backup file information leak (11/10/05)
  • [SECURITY] [DSA 892-1] New awstats packages fix arbitrary command execution (11/10/05)
  • [SECURITY] [DSA 890-1] New libungif4 packages fix several vulnerabilities (11/09/05)
  • [SECURITY] [DSA 891-1] New gpsdrive packages fix arbitrary code execution (11/09/05)
  • [SECURITY] [DSA 889-1] New enigmail packages fix information disclosure (11/08/05)
  • [SECURITY] [DSA 884-1] New Horde3 packages fix insecure default installation (11/07/05)
  • [SECURITY] [DSA 809-3] New squid packages fix regression (11/07/05)
  • [SECURITY] [DSA 885-1] New OpenVPN packages fix several vulnerabilities (11/07/05)
  • [SECURITY] [DSA 886-1] New chmlib packages fix several vulnerabilities (11/07/05)
  • [SECURITY] [DSA 888-1] New OpenSSL packages fix cryptographic weakness (11/07/05)
  • [SECURITY] [DSA 882-1] New OpenSSL packages fix cryptographic weakness (11/04/05)
  • [SECURITY] [DSA 883-1] New thttpd packages fix insecure temporary file (11/04/05)
  • [SECURITY] [DSA 881-1] New OpenSSL 0.9.6 packages fix cryptographic weakness (11/04/05)
  • [SECURITY] [DSA 879-1] New gallery packages fix privilege escalation (11/02/05)
  • [SECURITY] [DSA 880-1] New phpmyadmin packages fix several vulnerabilities (11/02/05)
• Matan Peled
  • Re: XSS on Yahoo Mail (11/26/05)
• Matteo Beccati
  • [PHPADSNEW-SA-2005-002] phpAdsNew and phpPgAds 2.0.7 fix multiple vulnerabilities (11/15/05)
• max_at_jestsuper.pl
  • Re: phpBB 2.0.18 SQL Query problem (11/15/05)
  • phpBB 2.0.18 SQL Query problem (11/11/05)
• Michal Zalewski
  • cracking safes with thermal imaging (11/21/05)
• michal_at_tux.bz
  • Kadu remote DoS (11/28/05)
• Moritz Naumann
  • Re: VHCS 2.x HTTP Error Cross Site Scripting (11/24/05)
  • OTRS 1.x/2.x Multiple Security Issues (11/22/05)
  • VHCS 2.x HTTP Error Cross Site Scripting (11/22/05)
  • PmWiki 2.0.12 Cross Site Scripting (11/22/05)
  • Antville 1.1 Cross Site Scripting (11/09/05)
  • Multiple security issues in TikiWiki 1.9.x (11/09/05)
• mose_at_tikiwiki.org
  • Re: Multiple security issues in TikiWiki 1.9.x (11/27/05)
• natalylopez380_at_hotmail.com
  • New Bug KESM in GoogleTalk (11/09/05)
• newbug_at_securityfocus.com,
  • Mandriva Security (11/25/05)
• NGSSoftware Insight Security Research
  • High Risk Flaw in RealPlayer (11/11/05)
  • Oracle DBMS_ASSERT and the October 2005 CPU (11/08/05)
  • Oracle October 2005 CPU Problems (11/08/05)
• Nish_at_securityfocus.com,
  • Exploiting the Stack (Part I-IV) (11/22/05)
  • Stack Overflow Basics (11/03/05)
• noreply_at_securityfocus.com
  • APPLE-SA-2005-11-15 iTunes 6 for Windows (11/16/05)
  • [securityzone@macromedia.com: Macromedia Security Bulletins] (11/16/05)
  • APPLE-SA-2005-10-31 Mac OS X v10.4.3 (11/01/05)
• OpenPKG
  • [OpenPKG-SA-2005.023] OpenPKG Security Advisory (openvpn) (11/02/05)
• papipsycho_at_hotmail.com
  • Buffer OverFlow For Php 4.3.10 and other ?? Local (11/16/05)
• Paul Laudanski
  • Malware Removal and Prevention Procedure (11/11/05)
• Paul Schmehl
  • What is wrong with these people? (11/28/05)
• Pawel Pokrywka
  • [tool] multispoof - parallel spoofing for throughput increase (11/01/05)
• Personal Account
  • Re: XSS on Yahoo Mail (11/24/05)
• Petko Petkov
  • Google Base (11/18/05)
• phole_at_hushmail.com
  • Re: [Full-disclosure] Advisory 18/2005: PHP Cross Site Scripting(XSS)XVulnerability in phpinfo() (11/03/05)
• picardos_at_terra.es
  • - Cisco IOS HTTP Server code injection/execution vulnerability- (11/28/05)
• Piotr Bania
  • Advisory: Apple QuickTime Player Remote Denial Of Service (11/04/05)
  • Advisory: Apple QuickTime PICT Remote Memory Overwrite (11/04/05)
  • Advisory: Apple QuickTime Player Remote Integer Overflow (1) (11/04/05)
  • Advisory: Apple QuickTime Player Remote Integer Overflow (2) (11/04/05)
• Piotr Kamisiski
  • DNS query spam (11/27/05)
• poizon_at_securityinfo.ru
  • Path disclosure in CuteNews <= 1.4.0 (11/07/05)
• preben_at_watchcom.no
  • fipsCMS light - vulnerable to script injection. (11/14/05)
  • ASPKnowledgebase vulnerable to XSS injection. (11/09/05)
  • ASPKnowledgebase vulnerable to SQL-inject (11/09/05)
• r.verton_at_gmail.com
  • PHP-Fusion <= 6.00.206 Multiple Vulnerabilities (11/18/05)
  • Template Seller Pro 3.25 (11/15/05)
  • Affiliate Network Pro v7.2 SQL Injections, Arbitrary code execution, XSS (11/15/05)
  • PHPCalendar (and some more codegrrl.com products) arbitrary code execution (11/13/05)
• r0xes_at_7NA.org
  • XSS in PBLang 4.65 Profile.php/UCP.php (11/26/05)
• Rainer Duffner
  • List of Security-oriented Fairs/Events/Conferences? (11/14/05)
• Randy Ivener (rivener)
  • RE: [ADVISORY] CISCO ASA Failover DoS Vulnerability (11/14/05)
• RBA
  • Re: Zoomblog HTML Injection Vulnerability (11/07/05)
• rebarz99_at_gmail.com
  • Mambo 0day Exploit out in the wild - mambo/skype hacked (11/18/05)
• retrogod_at_aliceposta.it
  • Guppy <= 4.5.9 Remote code execution (11/28/05)
  • eFiction <= 2.0 multiple vulnerabilities (11/25/05)
  • XOOPS 2.2.3 Final arbitrary local inclusion / XOOPS WF-Downloads module v 2.05 SQL Injection (11/13/05)
  • Moodle <=1.6dev blind SQL Injection (11/10/05)
  • CuteNews 1.4.1 remote code execution (11/03/05)
• reuben.31_at_nickname.net
  • XSS vulnerability in names.co.uk framed hosting (11/07/05)
• Richard Fuchshuber
  • RE: XSS on Yahoo Mail (11/24/05)
  • XSS on Yahoo Mail (11/23/05)
• Ron van Daal
  • Re: phpBB Code EXEC (v2.0.10) (11/28/05)
  • Re: phpBB 2.0.18 SQL Query problem (11/15/05)
• s2b_at_hotmail.com
  • Multible Sql injections in Wizz Forum (11/13/05)
  • Cyphor (Release: 0.19) Sql injection (11/13/05)
  • Xss - Html injection in XMB (11/04/05)
• S3ude_at_Hotmail.com
  • I-Saudi.Com First K-S-A WarGamE (11/05/05)
• Saeed Abu Nimeh
  • Re: List of Security-oriented Fairs/Events/Conferences? (11/15/05)
• SEC Consult Research
  • SEC Consult SA-20051125-0 :: More Vulnerabilities in vTiger CRM (11/25/05)
• Secunia Research
  • Secunia Research: SpeedProject Products ZIP/UUE File Extraction Buffer Overflow (11/24/05)
  • Secunia Research: Opera Command Line URL Shell Command Injection (11/22/05)
  • Secunia Research: Winmail Server Multiple Vulnerabilities (11/18/05)
  • Secunia Research: MailEnable Buffer Overflow and Directory Traversal Vulnerabilities (11/18/05)
  • Secunia Research: cPanel Entropy Chat Script Insertion Vulnerability (11/04/05)
• Security Alert
  • [security bulletin] SSRT5979 - HP Jetdirect 635n IPv6/IPsec Print Server (J7961A) Remote Denial of Service (DoS) (11/16/05)
• security-alert_at_hp.com
  • [security bulletin] SSRT051074 Revised - HP-UX Running xterm Local Unauthorized Access (11/23/05)
  • [security bulletin] SSRT5979 - HP-UX Running IPSec Remote Denial of Service (DoS) (11/16/05)
  • [security bulletin] SSRT051251 - Apache-based Web Server on HP-UX mod_ssl, proxy_http, Remote Execution of Arbitrary Code, Denial of Service (DoS), and Unauthorized Access (11/16/05)
  • [security bulletin] HPSBUX02075 SSRT051074 - HP-UX Running xterm Local Unauthorized Access (11/14/05)
  • [security bulletin] SSRT051012 - HP-UX envd Local Execution of Privileged Code (11/09/05)
  • [security bulletin] SSRT051014 - HP-UX Trusted Mode remshd Remote Unauthorized Access (11/09/05)
  • [security bulletin] SSRT051064 Revised - HP-UX ftpd Remote Unauthorized Data Access (11/09/05)
  • [security bulletin] SSRT051041 Revised - HP-UX Mozilla Remote Unauthorized Execution of Privileged Code or Denial of Service (DoS) (11/09/05)
• security-alter_at_hp.com
  • [security bulletin] SSRT051029 rev.0 - HP OpenVMS Local Denial of Service (DoS) (11/02/05)
• Security.advisory_at_apcc.com
  • APC Security Advisory - PowerChute Network Shutdown's Web Interface Only Supports HTTP (11/28/05)
• securityadvisory_at_computerterrorism.com
  • Computer Terrorism Security Advisory (Reclassification) - Microsoft Internet Explorer JavaScript Window() Vulnerability (11/21/05)
• sflist_at_digitaloffense.net
  • MD4 and MD5 collision generators (11/14/05)
• ShadowBeast_at_underdevelop.com
  • Folder Guard exe files protection bypass (11/10/05)
• sheldon_at_php-fusion.co.uk
  • Re: PHP-Fusion <= 6.00.206 Multiple Vulnerabilities (11/19/05)
• Siegfried
  • ZRCSA-200502 - phpAdsNew SQL Injection Vulnerabilities (11/11/05)
• siegfried_at_zone-h.org
  • ZRCSA-200503 - ktools Buffer Overflow Vulnerability (11/27/05)
• sigint_at_hush.com
  • In response to ISAKMP 'vulnerabilities' (11/16/05)
• sikikmail_at_gmail.com
  • Zoomblog HTML Injection Vulnerability (11/04/05)
  • Zoomblog HTML Injection Vulnerability (11/04/05)
  • Zoomblog <IMG> BBCode Tag JavaScript Injection Vulnerability (11/05/05)
• sinneR
  • Walla TeleSite Multiple Vulnerabilities (11/14/05)
• sp3x_at_securityreason.com
  • Critical SQL Injection PHPNuke <= 7.8 (11/15/05)
• Stefan Esser
  • [Full-disclosure] Advisory 17/2005: phpBB Multiple Vulnerabilities (10/31/05)
• Stefan Lochbihler
  • freeFTPd 1.0.10 (Dos,Exploit) (11/24/05)
  • PHPWCMS - Directory traversal vulnerability,CSS attack (11/15/05)
• Steven Champeon
  • Re: XSS on Yahoo Mail (11/25/05)
• Steven M. Christey
  • On Interpretation Conflict Vulnerabilities (11/03/05)
• stormhacker_at_hotmail.com
  • PollVote Remote File Inclusion (11/14/05)
• Sune Kloppenborg Jeppesen
  • [ GLSA 200511-18 ] phpSysInfo: Multiple vulnerabilities (11/22/05)
  • [ GLSA 200511-19 ] eix: Insecure temporary file creation (11/22/05)
  • [ GLSA 200511-20 ] Horde Application Framework: XSS vulnerability (11/22/05)
  • [ GLSA 200511-15 ] Smb4k: Local unauthorized file access (11/18/05)
  • [ GLSA 200511-05 ] GNUMP3d: Directory traversal and XSS vulnerabilities (11/06/05)
  • [ GLSA 200511-04 ] ClamAV: Multiple vulnerabilities (11/06/05)
• syini666_at_gmail.com
  • Multiple Bugs in MyBB 1.0 PR2 Rev 686(Updated Nov 1, 2005) (11/14/05)
• Thierry Carrez
  • [Full-disclosure] [ GLSA 200511-21 ] Macromedia Flash Player: Remote arbitrary code execution (11/25/05)
  • [Full-disclosure] [ GLSA 200511-22 ] Inkscape: Buffer overflow (11/28/05)
  • [Full-disclosure] [ GLSA 200511-23 ] chmlib, KchmViewer: Stack-based buffer overflow (11/28/05)
  • [ GLSA 200511-22 ] Inkscape: Buffer overflow (11/28/05)
  • [ GLSA 200511-23 ] chmlib, KchmViewer: Stack-based buffer overflow (11/28/05)
  • [ GLSA 200511-21 ] Macromedia Flash Player: Remote arbitrary code execution (11/25/05)
  • [ GLSA 200511-17 ] FUSE: mtab corruption through fusermount (11/22/05)
  • [ GLSA 200511-16 ] GNUMP3d: Directory traversal and insecure temporary file creation (11/21/05)
  • [ GLSA 200511-14 ] GTK+ 2, GdkPixbuf: Multiple XPM decoding vulnerabilities (11/16/05)
  • [ GLSA 200511-13 ] Sylpheed, Sylpheed-Claws: Buffer overflow in LDIF importer (11/15/05)
  • [ GLSA 200511-12 ] Scorched 3D: Multiple vulnerabilities (11/15/05)
  • [ GLSA 200511-11 ] linux-ftpd-ssl: Remote buffer overflow (11/13/05)
  • [ GLSA 200511-10 ] RAR: Format string and buffer overflow vulnerabilities (11/13/05)
  • [ GLSA 200511-09 ] Lynx: Arbitrary command execution (11/13/05)
  • [ GLSA 200511-08 ] PHP: Multiple vulnerabilities (11/13/05)
  • [ GLSA 200511-06 ] fetchmail: Password exposure in fetchmailconf (11/06/05)
  • [ GLSA 200511-07 ] OpenVPN: Multiple vulnerabilities (11/06/05)
  • [ GLSA 200511-03 ] giflib: Multiple vulnerabilities (11/04/05)
  • [ GLSA 200511-02 ] QDBM, ImageMagick, GDAL: RUNPATH issues (11/02/05)
  • [ GLSA 200511-01 ] libgda: Format string vulnerabilities (11/02/05)
• Thierry Zoller
  • Re: [xfocus-AD-051115]Multiple antivirus failed to scan malicous filename bypass vulnerability (11/15/05)
  • [ TZO-012005 ] F-Prot/Frisk Anti Virus bypass - ZIP Version Header (11/02/05)
• Thomas Biege
  • SUSE Security Announcement: gdk-pixbuf, gtk2 (SUSE-SA:2005:065) (11/16/05)
• tk_at_trapkit.de
  • [TKADV2005-11-004] Multiple Cross Site Scripting vulnerabilities in phpMyFAQ (11/19/05)
  • [TKADV2005-11-001] Multiple vulnerabilities in PHPlist (11/07/05)
• Toni Koivunen
  • [FS-05-02] Multiple vulnerabilities in phpMyAdmin (11/15/05)
  • [FS-05-01] Multiple vulnerabilities in phpAdsNew (11/10/05)
• trueend5_at_yahoo.com
  • Re: Re: Mambo Open Source, Path disclosure (11/06/05)
• Ulrich Drepper
  • Re: [Full-disclosure] Re: readdir_r considered harmful (11/06/05)
  • Re: [Full-disclosure] Re: readdir_r considered harmful (11/06/05)
• unknown.pentester_at_gmail.com
  • Google Talk cleartext credentials in process memory (11/28/05)
• v9
  • Re: OpenVPN[v2.0.x]: foreign_option() formart string vulnerability. (11/04/05)
• Vasiliy
  • Re: Mambo Open Source, Path disclosure (11/05/05)
• Vincent Danen
  • Re: Mandriva Security (11/26/05)
• Will Wesley
  • Re: XSS on Yahoo Mail (11/26/05)
  • RE: XSS on Yahoo Mail (11/24/05)
• willey_wonka_at_hotmail.com
  • e107 Games System exploit (11/07/05)
• Williams, James K
  • Re: Hidden accounts on sony vaio laptops (11/08/05)
• xx_hack_xx_2004_at_hotmail.com
  • XSS & SQL injection in phpWebThing (11/05/05)
• yash.kadakia_at_securityforge.com
  • Hidden accounts on sony vaio laptops (11/07/05)
• zdi-disclosures_at_3com.com
  • ZDI-05-002: Clam Antivirus Remote Code Execution (11/04/05)

Last message date: 11/30/05
Archived on: 11/30/05 CET

350 messages sorted by: [ date ] [ thread ] [ subject ] [ attachment ]

• Security
• UNIX
• Linux
• Coding
• Usenet

• News
• Mailing-Lists
• Newsgroups
• Service
• About
• Privacy
• Search
• Imprint