Bugtraq
- Warcraft III Replay Parser Script Remote Command Exucetion Vulnerability And Cross-Site Scripting Attacking,
botan
- Buffer-overflow and in-game crash in Zdaemon 1.08.01,
Luigi Auriemma
- DbbS<=2.0-alpha SQL injection,
dabdoub-mosikar
- EzASPSite <= 2.0 RC3 Remote SQL Injection Exploit Vulnerability.,
Mustafa Can Bjorn IPEKCI
- OSSTMM Security Analyst Training Live Stream on the Web,
Pete Herzog
- [security bulletin] HPSBUX02108 SSRT061133 rev.2 - HP-UX running Sendmail, Remote Execution of Arbitrary Code,
security-alert
- Black Hat Call for Papers and Registration now open,
Jeff Moss
- MonAlbum 0.8.7 SQL Injection,
undefined1
- Oxygen<=1.x.x SQL injection,
dabdoub-mosikar
- MediaSlash Gallery 'rub' variable Remote File inlcusion Vulnerability,
simo64
- [security bulletin] HPSBUX02102 SSRT051078 rev.2 - HP-UX usermod(1M) Local Unauthorized Access.,
security-alert
- [security bulletin] HPSBUX02103 SSRT5953 rev.2 - HP-UX passwd(1) Local Denial of Service (DoS),
security-alert
- [SECURITY] Samba 3.0.21-3.0.21c: Exposure of machine account credentials in winbindd log files,
Gerald (Jerry) Carter
- strip_tags() but not only vulnerability,
Tõnu Samuel
- Smurfable Linux Kernel,
Tomasz Chomiuk
- McAfee VirusScan DUNZIP32.dll Buffer Overflow Vulnerability,
Juha-Matti Laurio
- Buffer overflows in Dia XFig import,
lars
- X-Changer <=v0.2 Demo SQL injection,
dabdoub-mosikar
- [ MDKSA-2006:061 ] - Updated mailman packages fix DoS from badly formed mime multipart messages.,
security
- [eVuln] Skull-Splitter's PHP Downloadcounter for Wallpapers SQL Injection,
alex
- PhxContacts <= 0.93.1 beta Multiple SQL injection & xss,
dabdoub-mosikar
- [xfocus-SD-060329]MPlayer: Multiple integer overflows,
XFOCUS Security Team
- [eVuln] Skull-Splitter's PHP Guestbook XSS Vulnerability,
alex
- [HV-INFO] Enova hardware encryption: false sense of security,
vuln
- Re: Re: phpBB 2.06 search.php SQL injection,
fritz-li
- Re: Secunia Research: Microsoft Internet Explorer "createTextRange()"Code Execution,
edubp2002
- Full path disclosure in Webcalendar 1.1.0-CVS,
crasher
- Critical PHP bug - act ASAP if you are running web with sensitive data,
Tõnu Samuel
[ GLSA 200603-26 ] bsd-games: Local privilege escalation in tetris-bsd,
Stefan Cornelius
Resource to Report and Stop Phishing Scams,
Paul Laudanski
XSS in PHPKIT Version 1.6.03,
badnet_xoopiter
Cantv/Movilnet's Web SMS vulnerability.,
Bugtraq @ SNSecurity
Determina Fix for CVE-2006-1359 (Zero Day MS Internet Explorer Remote "CreateTextRange()" Code Execution),
Determina Secure
Announcement: The Web Hacking Incidents Database,
contact
ArabPortal 2.0 Stable CrossSiteScripting,
o . y . 6
[SECURITY] [DSA 1021-1] New netpbm-free packages fix arbitrary command execution,
Moritz Muehlenhoff
Secunia Research: Blazix Web Server JSP Source Code Disclosure Vulnerability,
Secunia Research
Genius VideoCAM NB Local Privilege Escalation,
beford
[eVuln] Maian Support Authentication Bypass,
alex
XSS in AL-Caricatier,
xx_hack_xx_2004
[eVuln] Maian Events SQL Injection Vulnerability,
alex
Re: On classifying attacks,
Gadi Evron
VWar <= 1.5.0 R11 Remote Code Execution Exploit,
uid0
EEYE: Temporary workaround for IE createTextRange vulnerability,
Marc Maiffret
SYM06-006, Veritas NetBackup: Multiple Overflow Vulnerabilities in NetBackup Daemons,
secure
ZDI-06-005: Symantec VERITAS NetBackup Volume Manager Buffer Overflow,
zdi-disclosures
[SECURITY] [DSA 1020-1] New flex packages fix insecure code generation,
Moritz Muehlenhoff
ZDI-06-006: Symantec VERITAS NetBackup Database Manager Buffer Overflow,
zdi-disclosures
PHPLiveHelper 1.8 remote command execution (include) Xploit (perl),
stormhacker
TSRT-06-01: Symantec VERITAS NetBackup vnetd Buffer Overflow Vulnerability,
zdi-disclosures
XSS & SQL Injection in Music Box v2.3,
xx_hack_xx_2004
[DDSi-SA] XSS in Raindance Communications Web Conferencing Pro,
D . Snezhkov
Microsoft Windows XP SP2 Firewall issue,
edubp2002
Microsoft MSN Hotmail : Cross-Site Scripting Vulnerability,
Renaud Lifchitz
Blog Pixel Motion<=1.xx Authentication Bypass Vulnerability & SQL injection,
dabdoub_mosikar
[ GLSA 200603-25 ] OpenOffice.org: Heap overflow in included libcurl,
Stefan Cornelius
[eVuln] Maian Weblog Multiple SQL Injection Vulnerabilities,
alex
[eVuln] DSLogin Authentication Bypass Vulnerability,
alex
HYSA-2006-007 phpmyfamily 1.4.1 CRLF injection & XSS,
h4cky0u . org
HYSA-2006-006 G-Book 1.0 XSS And Other Vulnerabilities,
h4cky0u . org
CanfTool v1.1 Cross Site Scripting Attack,
botan
[PHPADSNEW-SA-2006-001] phpAdsNew and phpPgAds 2.0.8 fix multiple vulnerabilities,
Matteo Beccati
[ GLSA 200603-24 ] RealPlayer: Buffer overflow vulnerability,
Matthias Geerdsen
nuked-klan<=1.7.5 SQL Injection,
dabdoub_mosikar
SQL injection in VGM Forbin.,
mfoxhacker
AkoComment SQL injection vulnerability,
Stefan Keller
HPSBUX02108 SSRT061133 rev.1 - HP-UX Sendmail, Remote Execution,
Security Alert
SQL Injection in SaphpLesson2.0,
xx_hack_xx_2004
UBBThreads<=5.5.1+6.0.2+6.0 br5+6.0.1 SQL injection,
dabdoub_mosikar
Re: Quick 'n Easy FTP Server 3.0 pro / lite (buffer overflow vulnerabilities),
bifta04
Re: [optimized PoC] Remote overflow in MSIE script action handlers (mshtml.dll),
dgtlscrm
[eVuln] DSDownload Multiple SQL Injection Vulnerabilities,
alex
[eVuln] DSCounter 'X-Forwarded-For' SQL Injection Vulnerability,
alex
Systrace 1.6: Phoenix Release,
Niels Provos
VihorDesing Script Remote Command Exucetion And Cross Scripting Attack,
botan
HeffnerCMS Remote Command Exucetion And Cross Scripting Attack,
botan
Secunia Research: Quick 'n Easy/Baby Web Server ASP Code Disclosure Vulnerability,
Secunia Research
[security bulletin] HPSBUX02105 SSRT061134 rev.1 - HP-UX Running swagentd Remote Denial of Service (DoS),
security-alert
[eVuln] DSNewsletter SQL Injection Vulnerability,
alex
[eVuln] DSPoll Multiple SQL Injection Vulnerabilities,
alex
On product vulnerability history and vulnerability complexity,
Steven M. Christey
[SECURITY] [DSA 1018-1] New Linux kernel 2.4.27 packages fix several vulnerabilities,
Moritz Muehlenhoff
[eVuln] @1 File Store Multiple XSS and SQL Injection Vulnerabilities,
alex
[SECURITY] [DSA 1019-1] New kpdf packages fix several vulnerabilities,
Martin Schulze
[FLSA-2006:186277] Updated sendmail packages fix security issues,
Jesse Keating
[ MDKSA-2006:060 ] - Updated FreeRADIUS packages fix EAP-MSCHAPv2 module vulnerability,
security
w3wp remote DoS,
Debasis Mohanty
Vulnerabilitiy found in comodo hacker guardian free scan.,
sk8boardkid
Re: [SPAM:] - ASPPortal <= 3.1.1 Multiple Remote SQL Injection Vulnerabilities - Email has different SMTP TO: and MIME TO: fields in the email addresses,
Suport Account
Digital Armaments April-2006 Hacking Challenge: Oracle Database,
info
[HV-PAPER] Security Product Evaluation Tips,
vuln
Sudo tricks,
John Richard Moser
Popup Blocker Bypass Script,
James C. Slora, Jr.
ArabPortal 2.0 Stable [ Full Patch Disclosure ],
o . y . 6
SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow),
Gadi Evron
- trusting SMTP [was: SendGate: Sendmail Multiple Vulnerabilities],
Gadi Evron
- Re: [Full-disclosure] SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow),
Dragos Ruiu
- Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow),
Theo de Raadt
- Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow),
Martin Schulze
- Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow),
Theo de Raadt
- Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow),
D.F.Russell
- Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow),
Kurt Seifried
- Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow),
Gadi Evron
- Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow),
Geo.
- Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow),
Pim van Riezen
- Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow),
Florian Weimer
- Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow),
Casper . Dik
- Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow),
Gadi Evron
- Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow),
Claus Assmann
- Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow),
Eric Allman
- <Possible follow-ups>
- Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow),
Eric Allman
Secunia Research: Orion Application Server JSP Source Disclosure Vulnerability,
Secunia Research
Secunia Research: Microsoft Internet Explorer "createTextRange()" Code Execution,
Secunia Research
[ GLSA 200603-23 ] NetHack, Slash'EM, Falcon's Eye: Local privilege escalation,
Sune Kloppenborg Jeppesen
iDefense Security Advisory 03.23.06: RealNetworks RealPlayer and Helix Player Invalid Chunk Size Heap Overflow Vulnerability,
labs-no-reply
iDefense Security Advisory 03.23.05: ISS Multiple Products Local Privilege Escalation Vulnerability,
labs-no-reply
Microsoft Internet Explorer (mshtml.dll) - Remote Code Execution,
advisories
[SECURITY] [DSA 1017-1] New Linux kernel 2.6.8 packages fix several vulnerabilities,
Moritz Muehlenhoff
Vulnerability Alert Services - Independent List,
Andy Cuff
PasswordSafe 3.0 weak random number generator allows key recovery attack,
info
[KAPDA::#37] - CoMoblog XSS,
farhadkey
[ GLSA 200603-21 ] Sendmail: Race condition in the handling of asynchronous signals,
Sune Kloppenborg Jeppesen
[SECURITY] [DSA 1016-1] New evolution packages fix arbitrary code execution,
Martin Schulze
[SECURITY] [DSA 1015-1] New sendmail packages fix arbitrary code execution,
Martin Schulze
[ MDKSA-2006:059 ] - Updated kernel packages fix multiple vulnerabilities,
security
Advisory 03/2006: KisMAC Cisco Vendor Tag Encapsulated SSID Overflow,
Stefan Esser
[USN-265-1] cairo/Evolution library vulnerability,
Martin Pitt
[ MDKSA-2006:058 ] - Updated sendmail packages fix remote vulnerability,
security
sendmail vuln advisories (CVE-2006-0058),
Marc Bejarano
[SECURITY] [DSA 1014-1] New firebird2 packages fix denial of service,
Martin Schulze
[ GLSA 200603-22 ] PHP: Format string and XSS vulnerabilities,
Sune Kloppenborg Jeppesen
[OpenPKG-SA-2006.007] OpenPKG Security Advisory (sendmail),
OpenPKG
SUSE Security Announcement: sendmail remote code execution (SUSE-SA:2006:017),
Thomas Biege
IE crash,
Stelian Ene
Re; FreeBSD Security Advisory FreeBSD-SA-06:13.sendmail,
Jose Nazario
PHP Live! XSS status_image.php,
kspecial
[SECURITY] [DSA 1013-1] New snmptrapfmt packages fix insecure temporary file,
Martin Schulze
cutenews 1.4.1 Arbitrary File Access,
h e
WinHKI 1.6x Archive Extraction Directory traversal,
h e
DMA[2006-0321a] - 'Motorola P2K Platform setpath() overflow and Blueline attack',
KF (lists)
[eVuln] PHP SimpleNEWS, PHP SimpleNEWS MySQL - Authentication Bypass Vulnerability,
alex
FreeBSD Security Advisory FreeBSD-SA-06:11.ipsec,
FreeBSD Security Advisories
FreeBSD Security Advisory FreeBSD-SA-06:12.opie,
FreeBSD Security Advisories
FreeBSD Security Advisory FreeBSD-SA-06:13.sendmail,
FreeBSD Security Advisories
Mini-Nuke<=1.8.2 SQL injection (6),
dabdoub_mosikar
ASPPortal <= 3.1.1 Multiple Remote SQL Injection Vulnerabilities,
nukedx
Free Articles Directory Remote Command Exucetion,
botan
[ GLSA 200603-20 ] Macromedia Flash Player: Arbitrary code execution,
Sune Kloppenborg Jeppesen
[ GLSA 200603-19 ] cURL/libcurl: Buffer overflow in the handling of TFTP URLs,
Matthias Geerdsen
Recon 2006: Guest speakers announcement. Call for paper and early registration ending in less than 2 weeks.,
Hugo Fortier
XSS in Firepass 4100 SSL VPN v.5.4.2 (and probably others),
alfy
[ GLSA 200603-17 ] PeerCast: Buffer overflow,
Sune Kloppenborg Jeppesen
[SECURITY] [DSA 1012-1] New unzip packages fix arbitrary code execution,
Martin Schulze
[SECURITY] [DSA 1011-1] New kernel-patch-vserver packages fix root exploit,
Martin Schulze
[ GLSA 200603-18 ] Pngcrush: Buffer overflow,
Sune Kloppenborg Jeppesen
CORE-2006-0124: Cross-Site Scripting in Verisign’s haydn.exe CGI script,
CORE Security Technologies Advisories
[ MDKSA-2006:057 ] - Updated cairo packages to address Evolution DoS vulnerability,
security
Perverting Unix Processes,
Pluf
[ MDKSA-2006:056 ] - Updated xorg-x11 packages to address local root vuln,
security
DNS Amplification Attacks,
Gadi Evron
Symantec Security Advisory, SYM06-005,
secure
[CVE-2006-0745] X.Org Security Advisory: privilege escalation and DoS in X11R6.9, X11R7.0,
Daniel Stone
IMF 2006 - 2nd Call for Papers,
Oliver Goebel
Path Disclosure and Arbitrary File Read Vulnerability in SLAB5000,
justint
Noah's Classifieds Multiple Path Disclosure and Cross Site Scripting Vulnerabilities,
raphael . huck
phpWebsite <= SQL Injection (friend.php) & (article.php),
dabdoub_mosikar
[security bulletin] SSRT051251 rev.2 - Apache-based Web Server on HP-UX mod_ssl, proxy_http, Remote Execution of Arbitrary Code, Denial of Service (DoS), and Unauthorized Access,
security-alert
[security bulletin] SSRT051128 rev.1 - HP-UX VirtualVault running Apache 1.3.X Remote Unauthorized Access,
security-alert
[SECURITY] [DSA 1010-1] New ilohamail packages fix cross-site scripting vulnerabilities,
Martin Schulze
[security bulletin] SSRT051078 rev.1 - HP-UX usermod(1M) Local UnaUthorized Access,
security-alert
[SECURITY] [DSA 1009-1] New crossfire packages fix arbitrary code execution,
Martin Schulze
[SECURITY] [DSA 960-3] New libmail-audit-perl packages fix insecure temporary file use,
Martin Schulze
ExtCalendar v1.0 Multiple Xss Vuln,
Soothackers
Contrexx CMS Xss Vuln,
Soothackers
Microsoft Commerce Server 2002: Logon as known user with a false password,
Dimitri
MyBB 1.10 Full Path Disclosure,
o . y . 6
[FLSA-2006:157459-2] Updated kernel packages fix security issues,
Marc Deslauriers
[FLSA-2006:174479] Updated libungif packages fix security issues,
Marc Deslauriers
[eVuln] NMDeluxe XSS & SQL Injection Vulnerabilities,
alex
Oxynews Sql İnjection,
r00t3rr0r
[FLSA-2006:173274] Updated gdk-pixbuf packages fix security issues,
Marc Deslauriers
[SECURITY] [DSA 1007-1] New drupal packages fix several vulnerabilities,
Martin Schulze
[SECURITY] [DSA 1008-1] New kpdf packages fix arbitrary code execution,
Martin Schulze
[SECURITY] [DSA 1006-1] New wzdftpd packages fix arbitrary shell command execution,
Moritz Muehlenhoff
Fedora Legacy Server Outage,
Marc Deslauriers
[FLSA-2006:157459-1] Updated kernel packages fix security issues,
Marc Deslauriers
[ GLSA 200603-16 ] Metamail: Buffer overflow,
Stefan Cornelius
Generically Determining the Prescence of Virtual Machines,
valsmith
Symantec Security Advisory SYM06-004,
secure
XSS IN Invision Power Board,
???? ????
RE: [Full-disclosure] Re: recursive DNS servers DDoS as a growingDDoSproblem,
Keith Morgan
XCon2006 Call For Paper,
XFOCUS Security Team
[ GLSA 200603-15 ] Crypt::CBC: Insecure initialization vector,
Stefan Cornelius
[ GLSA 200603-13 ] PEAR-Auth: Potential authentication bypass,
Stefan Cornelius
[FLSA-2006:175404] Updated xpdf package fixes security issues,
Marc Deslauriers
[ GLSA 200603-14 ] Heimdal: rshd privilege escalation,
Stefan Cornelius
[FLSA-2006:157459-4] Updated kernel packages fix security issues,
Marc Deslauriers
[FLSA-2006:157459-3] Updated kernel packages fix security issues,
Marc Deslauriers
[FLSA-2006:178606] Updated kdelibs packages fix security issues,
Marc Deslauriers
[SECURITY] [DSA 1005-1] New xine-lib packages fix arbitrary code execution,
Moritz Muehlenhoff
Remote overflow in MSIE script action handlers (mshtml.dll),
Michal Zalewski
Milkeyway Multiple Vulnerabilities,
ascii
[SECURITY] [DSA 1004-1] New vlc packages fix arbitrary code execution,
Moritz Muehlenhoff
[SECURITY] [DSA 1003-1] New xpvm packages fix insecure temporary file,
Martin Schulze
[ GLSA 200603-12 ] zoo: Buffer overflow,
Stefan Cornelius
[ GLSA 200603-11 ] Freeciv: Denial of Service,
Stefan Cornelius
Vulnerability fixed in E-gold,
3APA3A
Vulnerability in e-gold,
shurik . f
Latest MS patches kill wireless networking?,
James Garrison
WebVulnCrawl searching excluded directories for hackable web servers,
Michael Scheidell
Invision Power Board v2.1.4 - session hijacking,
Hans Wolters
Re: Re: Invision Power Board v2.1.4 - session hijacking,
matt
GnuPG weak as one guy with a spare laptop.,
Forrest J. Cavalier III
[KAPDA::#34] - MyBB1.0.4~redirectfunction()~HeaderInjection,
addmimistrator
[KAPDA::#35] - MyBB1.0.4~member.php~XSS after login,
addmimistrator
[[KAPDA::#35] MyBB 1.0.3~member.php~XSS Attack in contact details,
addmimistrator
Sasser variant that effects 2k3 SP1 completely updated?,
Andrew Weaver
FW: call for speakers and thoughts on VoIP Security - there's a long way to go!,
Ken Kousky
Secunia Research: Adobe Document/Graphics Server File URI Resource Access,
Secunia Research
[eVuln] discussion - xhawk.net BBCode 'img' XSS & SQL Injection Vulnerabilities,
alex
CodeScan Advisory: Unauthenticated Arbitrary File Read in Horde v3.09 and prior,
CodeScan Labs
[SECURITY] [DSA 1002-1] New webcalendar packages fix several vulnerabilities,
Martin Schulze
CodeScan Advisory: Multiple Vulnerabilities In ASPPortal.net,
CodeScan Labs
WLSI - Windows Local Shellcode Injection - Paper,
Cesar
[HV-HIGH] Microsoft Excel Named Range Arbitrary Code Execution,
vuln
[xfocus-SD-060314]Microsoft Office Excel Buffer Overflow Vulnerability,
XFOCUS Security Team
SYMSA-2006-001: Buffer overflow in Microsoft Office 2000, Office XP (2002), and Office 2003 Routing Slip Metadata,
CS_Advisories Mailbox
Fortinet Security Advisory: FSA-2006-08,
Fortinet Research
Fortinet Security Advisory: FSA-2006-09,
Fortinet Research
High Risk Vulnerability in Microsoft Excel,
NGSSoftware Insight Security Research
ZDI-06-004: Microsoft Excel File Format Parsing Vulnerability,
zdi-disclosures
[eVuln] CyBoards PHP Lite SQL Injection Vulnerability,
alex
Linux zero IP ID vulnerability?,
Marco Ivaldi
[SECURITY] [DSA 1001-1] New crossfire packages fix arbitrary code execution,
Moritz Muehlenhoff
[SECURITY] [DSA 1000-1] New Apache2::Request packages fix denial of service,
Martin Schulze
DMA[2006-0313a] - 'Apple OSX Mail.app RFC1740 Real Name Buffer Overflow',
KF (lists)
[DRUPAL-SA-2006-004] Drupal 4.6.6 / 4.5.8 fixes mail header injection issue,
Uwe Hermann
[SECURITY] [DSA 998-1] New libextractor packages fix several vulnerabilities,
Martin Schulze
[SECURITY] [DSA 999-1] New lurker packages fix several vulnerabilities,
Martin Schulze
[DRUPAL-SA-2006-002] Drupal 4.6.6 / 4.5.8 fixes XSS issue,
Uwe Hermann
[DRUPAL-SA-2006-003] Drupal 4.6.6 / 4.5.8 fixes session fixation issue,
Uwe Hermann
[DRUPAL-SA-2006-001] Drupal 4.6.6 / 4.5.8 fixes access control issue,
Uwe Hermann
[ MDKSA-2006:055 ] - Updated gnupg packages fix signature file verification vulnerability,
security
[SECURITY] [DSA 997-1] New bomberclone packages fix arbitrary code execution,
Martin Schulze
ZDI-06-003: Ipswitch Collaboration Suite Code Execution Vulnerability,
zdi-disclosures
[INetCop Security Advisory] zeroboard IP session bypass XSS vulnerability,
dong-hun you
Buffer Overflow and Installation Script Error in Firebird 1.5.3,
Joxean Koret
WMNews Cross Site Scripting,
exalibur33
Secunia Research: Dwarf HTTP Server Source Disclosure and Cross-Site Scripting,
Secunia Research
Secunia Research: unalz Filename Handling Directory Traversal Vulnerability,
Secunia Research
[SECURITY] [DSA 993-2] New GnuPG packages fix broken signature check,
Martin Schulze
[SECURITY] [DSA 996-1] New Crypt::CBC packages fix cryptographic weakness,
Martin Schulze
Kerio MailServer bugfun,
Evgeny Legerov
[eVuln] Vegas Forum SQL Injection Vulnerability,
alex
[SECURITY] [DSA 995-1] New metamail packages fix arbitrary code execution,
Martin Schulze
[SECURITY] [DSA 994-1] New freeciv packages fix denial of service,
Martin Schulze
Multiple vulnerabilities in ENet library (Jul 2005),
Luigi Auriemma
directory traversal Fixed in DirectContact 0.3c,
lionel
[USN-264-1] gnupg vulnerability,
Martin Pitt
[USN-263-1] Linux kernel vulnerabilities,
Martin Pitt
[USN-262-1] Ubuntu 5.10 installer password disclosure,
Martin Pitt
[ GLSA 200603-10 ] Cube: Multiple vulnerabilities,
Stefan Cornelius
[ GLSA 200603-09 ] SquirrelMail: Cross-site scripting and IMAP command injection,
Stefan Cornelius
AntiVir PersonalEdition Classic: Local Privilige Escalation,
Ramon 'ports' Kukla
Copy protection scheme SafeDisc allows privilege escalation,
yourname
Coppermine exploit used by a Chase Phish?,
Paul Laudanski
Jupiter CMS <= 1.1.5 multiple XSS attack vectors.,
zerogue
SGI IRIX 6.*usr/sysadm/bin/runpriv local root exploit,
rod hedor
XSS in vCard,
xx_hack_xx_2004
[ GLSA 200603-07 ] flex: Potential insecure code generation,
Thierry Carrez
CoreNews 2.0.1 Remote Command Exucetion,
botan
[ GLSA 200603-08 ] GnuPG: Incorrect signature verification,
Thierry Carrez
[SECURITY] [DSA 993-1] New GnuPG packages fix broken signature check,
Martin Schulze
[ GLSA 200603-06 ] GNU tar: Buffer overflow,
Thierry Carrez
Re: Thomson SpeedTouch 500 modems vulnerable to XSS,
dford
[KAPDA::#33] - GuppY <= 4.5.11 Remote DoS vulnerability,
alireza hassani
Advisory: Jiros Banner Experience Pro Remote Privilege Escalation.,
nukedx
GnuPG does not detect injection of unsigned data,
Werner Koch
[eVuln] FreeForum PHP Code Execution & Multiple XSS Vulnerabilities,
alex
[SECURITY] [DSA 992-1] New ffmpeg packages fix arbitrary code execution,
Moritz Muehlenhoff
[SECURITY] [DSA 991-1] New zoo packages fix arbitrary code execution,
Martin Schulze
[SECURITY] [DSA 919-2] New curl packages fix potential security problem,
Martin Schulze
[SECURITY] [DSA 990-1] New bluez-hcidump packages fix denial of service,
Martin Schulze
Statement Regarding Reported Local Escalation of Privileges Vulnerability for ZoneAlarm,
Zone Labs Product Security
[ MDKSA-2006:035-1 ] - Updated php packages fix vulnerability,
security
RE: [Full-disclosure] Re: recursive DNS servers DDoS as a growing DDoSproblem,
Geo.
announcement: reporting and mitigating malicious websites and phishing,
Gadi Evron
[USN-261-1] PHP vulnerabilities,
Martin Pitt
[KDE Security Advisory] kpdf of KDE 3.3.x heap based buffer overflow,
Dirk Mueller
n8cms 1.1 & 1.2 version Sql İnjection And XSS,
liz0
PHP Advanced Transfer Manager Download users password hashes,
liz0
PHP Upload Center Download users password hashes And phpshell Upload,
liz0
DVguestbook 1.0 And 1.2.2 Cross Site Scripting,
liz0
UnrealIRCd3.2.3 Server-Link Denial of Service,
admin
Re: [waraxe-2006-SA#047] - Evading sql-injection filters in phpNuke 7.8,
omega13a
Aluria/WhenU Troubled Past and Whitewashing History,
Paul Laudanski
RE: [Full-disclosure] PHP-based CMS mass-exploitation,
hchemin
RevilloC MailServer 1.x "USER" Command Handling Remote Buffer Overflow Exploit,
securma
txtForum: Script Injection Vulnerability,
enji
txtForum: Multiple XSS Vulnerabilities,
enji
MyBloggie: Multiple XSS Vulnerabilities,
enji
ADP Forum 2.0,* script İnjection,
liz0
M-Phorum Cross Site Scripting,
codexploder
INFIGO-2006-03-01: PeerCast streaming server remote buffer overflow,
infocus
HYSA-2006-005 WordPress 2.0.1 Remote DoS Exploit,
h4cky0u . org
Easy File Sharing Web Server Multiple Vulnerablilities,
revnic
Remote access to NeuSecure/Netcool backend database via web interface credentials leakage,
D . Snezhkov
[SECURITY] [DSA 989-1] New zoph packages fix SQL injection,
Moritz Muehlenhoff
nCipher Advisory #14: Presence of flaws in firmware security,
nCipher Support
nCipher Advisory #13: CBC-MAC IV misleading programming interface,
nCipher Support
nCipher Advisory #12: Insecure Generation of Diffie-Hellman keys,
nCipher Support
[ MDKSA-2006:054 ] - Updated kdegraphics packages fixes overflow vulnerabilities,
security
18 ways to escalate privileges in Zone Labs ZoneAlarm Security Suite build 6.1.744.000,
Reed Arvin
H&R Block contact - SOLVED,
Fixer
a worm for mediaWiki??,
\"vitamona\"
[SECURITY] [DSA 988-1] New squirrelmail packages fix several vulnerabilities,
Moritz Muehlenhoff
[KAPDA::#32] - d2kBlog 1.0.3 Multiple Vulnerabilities,
3nitro
capi4hylafax insecure manipulation with tmp files,
Javor Ninov
textfileBB <= 1.0 Multiple XSS,
retard
Re: [CORRECTIONS AND ADDITIONS ]Azbb v1.1.00 Cross-Site Scripting,
no_reply
[eVuln] EKINboard 'img' BBCode XSS & Cookie 'username' SQL Injection Vulnerabilities,
alex
[security bulletin] HPSBTU02100 SSRT050979 rev.1 - HP Tru64 UNIX IPSEC/ISAKMP Remote Denial of Service (DoS),
security-alert
CanSecWest/core06 Vancouver April 3-7,
Dragos Ruiu
[ MDKSA-2006:053 ] - Updated freeciv packages fix DoS vulnerabilities,
security
[FLSA-2006:176751] Updated gpdf package fixes security issues,
Marc Deslauriers
[FLSA-2006:168516] Updated pcre packages fix a security issue,
Marc Deslauriers
[FLSA-2006:168264-2] Updated X.org packages fix security issue,
Marc Deslauriers
[FLSA-2006:168264-1] Updated XFree86 packages fix security issues,
Marc Deslauriers
Dropbear SSH server Denial of Service,
Pablo Fernandez
Cisco PIX embryonic state machine TTL(n-1) DoS,
Konstantin V. Gavrilenko
Cisco PIX embryonic state machine 1b data DoS,
Konstantin V. Gavrilenko
IE iFrame + Sun JVM + JS bug. Exploitable?,
drguile
[eVuln] ShoutLIVE PHP Code Execution & Multiple XSS Vulnerabilities,
alex
Multiple vulnerabilities in Alien Arena 2006 GE 5.00,
Luigi Auriemma
Loudblog 0.41 SQL Injection, Local file read/include,
tzitaroth
Purple Paper: Exegesis Of Virtual Hosts Hacking,
unknown . pentester
Cpanel Path Disclosure Vulnerability,
Silversmith
IM Lock 2006 - Insecure Registry Permission Vulnerability,
unsecure
[SECURITY] [DSA 987-1] New tar packages fix arbitrary code execution,
Moritz Muehlenhoff
PHP-based CMS mass-exploitation,
Daniel Bonekeeper
phpBannerExchange 2.0 Directory Traversal Vulnerability,
h4cky0u . org
link bank code execution and xss,
retard
histhost v1.0.0 xss and possible rmdir,
retard
[USN-260-1] flex vulnerability,
Martin Pitt
SQL injection in Invision Power Board v2.1.5,
???? ????
SQL injection & XSS IN vbzoom v1.11,
???? ????
Multiple vulnerabilities in Cube engine 2005_08_29,
Luigi Auriemma
Out of memory crash in Freeciv 2.0.7,
Luigi Auriemma
[ GLSA 200603-05 ] zoo: Stack-based buffer overflow,
Thierry Carrez
Multiple vulnerabilities in Sauerbraten engine 2006_02_28,
Luigi Auriemma
Multiple vulnerabilities in Liero Xtreme 0.62b,
Luigi Auriemma
[ GLSA 200603-04 ] IMAP Proxy: Format string vulnerabilities,
Thierry Carrez
Microsoft Visual Studio 6.0 Sp6 Malformed .dbp File BoF Exploit,
kozan
htpasswd bufferoverflow and command execution in thttpd-2.25b.,
Larry Cashdollar
SyScan'06 Call For Papers,
organiser@xxxxxxxxxx
Announcement: WASC Threat Classification in German,
contact
FTPoed Blog Engine =>v1.1 HTML Injection Vulnerability,
sikik
[KAPDA::#31] - Runcms 1.x Cross_Site_Scripting vulnerability in bigshow.php,
roozbeh_afrasiabi
evoBlog Remote Name tag Script injection,
sikik
Game-Panel <= 2.1.6 XSS,
retard
[eVuln] Simple Machines Forum - SMF 'X-Forwarded-For' XSS Vulnerability,
alex
vulnerability in the IE Java applet initialization engine,
porkythepig
[OpenPKG-SA-2006.006] OpenPKG Security Advisory (tar),
OpenPKG
[SECURITY] [DSA 986-1] New gnutls11 packages fix arbitrary code execution,
Martin Schulze
[SECURITY] [DSA 985-1] New libtasn1-2 packages fix arbitrary code execution,
Martin Schulze
[ GLSA 200603-03 ] MPlayer: Multiple integer overflows,
Thierry Carrez
DSplit - Tiny AV signatures Detector,
ad@xxxxxxxxxxxxxxxx
Critical Risk Vulnerability in L-Soft Listserv,
NGSSoftware Insight Security Research
Simplog <= 1.0.2 Vulnerabilities,
retard
Wbb 2.3. xss,
r57shell
Visual Studio 6.0 Buffer Overflow Vulnerability,
kozan
Advisory: TotalECommerce (index.asp id) Remote SQL Injection Vulnerability.,
nukedx
linksys router + irc DoS,
Cade Cairns
[KAPDA::#30] - CuteNews1.4.1 Cross_Site_Scripting Vulnerability,
roozbeh_afrasiabi
Pixel Post Multiple Vulnerabilities,
paisterist . nst
phpBB <= 2.0.19 Multiple DoS vulnerabilities,
paisterist . nst
PHP-Stats <= 0.1.9.1 remote commands execution,
rgod
[eVuln] Easy Forum XSS Vulnerability,
alex
[ GLSA 200603-01 ] WordPress: SQL injection vulnerability,
Thierry Carrez
Various router DoS,
ryanmeyer14
AVG 7 granting Everyone Full Control to updated files... even its drivers,
redxii1234
phpArcadeScript XSS Injections,
retard
[ GLSA 200603-02 ] teTeX, pTeX, CSTeX: Multiple overflows in included XPdf code,
Thierry Carrez
Kaspersky Memory/CPU Usage Leak by design,
Michael . Lang
Re: Guestbox XSS/an admin bypass,
micuel
XST-Strikes-Back vulnerability in Netcache,
Nite Sprite
[eVuln] Skate Board Multimple Vulnerabilities,
alex
Gregarius 0.5.2 XSS and SQL Injection Vulnerabilities,
tzitaroth
AZTEK forums 4.0 multiple vulnerabilities (PoC),
billy
Gallery 2 Multiple Vulnerabilities,
GulfTech Security Research
MyBB 1.04 Perl Exploit,
o . y . 6
iDefense Security Advisory 03.02.06: EMC Dantz Retrospect 7 Backup client DoS Vulnerability,
labs-no-reply@xxxxxxxxxxxx
iDefense Security Advisory 03.02.06: Apple Mac OS X passwd Arbitrary Binary File Creation/Modification,
labs-no-reply@xxxxxxxxxxxx
sql in Dawaween V 1.03,
shereba_2007
MyBB 1.0.4 New SQL Injection,
o . y . 6
vBulletin3.0.12&3.5.3~is_valid_email()~XSS Attack,
addmimistrator
iDefense Security Advisory 03.02.06: Apple MacOS X BOMArchiveHelper Directory Traversal Vulnerability,
labs-no-reply@xxxxxxxxxxxx
[ MDKSA-2006:052 ] - Updated mozilla-thunderbird packages fix vulnerability,
security
Woltlab Burning Board 2.x (Datenbank MOD fileid) Multiple Vulnerabilities.,
nukedx
[SECURITY] [DSA 981-1] new bmv packages fix arbitrary code execution,
Martin Schulze
[eVuln] E-Blah Platinum 'Referer' XSS Vulnerability,
alex
ProtoVer Sample IMAP testsuite release,
Evgeny Legerov
Re: NETGEAR WGT624 Wireless DSL router default user name/password vulnerability,
Jimmy Latouche
PluggedOut Nexus SQL injection,
h e
[SECURITY] [DSA 984-1] New xpdf packages fix several problems,
Martin Schulze
JOOMLA CMS 1.0.7 DoS & path disclosing,
ghc
[SECURITY] [DSA 980-1] New tutos package fixes several vulnerabilities,
Martin Schulze
[KAPDA::#26]vBulletin.3.5.3~3.0.12-XSS,
addmimistrator
[OSX]: /usr/bin/passwd local root exploit.,
v9
Re: [KAPDA::#27] - Runcms 1.x Cross_Site_Scripting vulnerability,
roozbeh_afrasiabi
[FLSA-2006:178989] Updated perl-DBI package fixes security issue,
Marc Deslauriers
[USN-259-1] irssi vulnerability,
Martin Pitt
Advisory: ICQmail.com & Mail2World.com (ms_inbox.asp Current_folder) XSS vulnerability,
nukedx
Re: PHP as a secure language? PHP worms? [was: Re: new linux malware],
L. Adrian Griffis
Re: [Full-disclosure] Quarantine your infected users spreading malware,
Dana Hudes
SMBlog Remote Command Exucetion,
botan
Re: (PHP) mb_send_mail security bypass,
Yasuo Ohgaki
Fwd: APPLE-SA-2006-03-01 Security Update 2006-001,
Dave McKinney
NCP VPN/PKI Client - various Bugs,
Ramon 'ports' Kukla
Secunia Research: NetworkActiv Web Server Script Source Disclosure Vulnerability,
Secunia Research
4images <=1.7.1 remote code execution,
rgod
Re: NETGEAR WGT624 ? Wireless DSL router default user name/password vulnerability,
abuse
Evil side of Firefox extensions,
azurIt
Evolution Emailer DoS,
Alan Cox
Re: Mozilla Thunderbird : Multiple Information Disclosure Vulnerabilities,
Steve Shockley
SAP Web Application Server http request url parsing vulnerability,
arnold . grossmann
Re: Knowledgebases Remote Command Exucetion,
security curmudgeon
Secunia Research: Lighttpd Script Source Disclosure Vulnerability,
Secunia Research
Re: WordPress 2.0.1 Multiple Vulnerabilities,
Javor Ninov
Re: Fedex Kinkos Smart Card Authentication Bypass,
Lance James
[eVuln] Leif M. Wright's Blog Multiple Vulnerabilities,
alex
Updated Noah Classifieds Component for Joomla!/Mambo,
noahsec1
FreeBSD Security Advisory FreeBSD-SA-06:09.openssh [REVISED],
FreeBSD Security Advisories
FreeBSD Security Advisory FreeBSD-SA-06:10.nfs,
FreeBSD Security Advisories
Re: ArGoSoft FTP server remote heap overflow,
Steven M. Christey
Limbo CMS code execution,
Alexander Hristov
FreeBSD Security Advisory FreeBSD-SA-06:09.openssh,
FreeBSD Security Advisories
Re: [Full-disclosure] Mozilla Thunderbird : Multiple Information Disclosure Vulnerabilities,
Daniel Veditz
Re: Bypass Fortinet anti-virus using FTP,
Mathieu Dessus
bttlxeForum 2.* XSS Vulnerability,
stormhacker
recursive DNS servers DDoS as a growing DDoS problem,
Gadi Evron
PEHEPE Membership Management System Multiple Vulnerabilities,
mail
[ MDKSA-2006:051 ] - Updated gettext packages fix temporary file vulnerabilities,
security
