Bugtraq
- Enigma WordPress Bridge (boarddir) Remote File Include,
xorontr
- Enigma Coppermine Bridge (boarddir) Remote File Include,
xorontr
- [vuln.sg] iso_wincmd Plugin for Total Commander Buffer Overflow Vulnerability,
vulnpost-remove
- SoftArtisans FileUp(TM) viewsrc.asp remote script source disclosure exploit,
inge_eivind . henriksen
- MythControl (MythTV remote control) arbitrary code execution,
sapheal
- csrss.exe double-free vulnerability - arbitrary DWORD overwrite exploit,
Reversemode
- DoceboLMS Xss Vuln.,
starext
- LDU <= 8.x (journal.php) SQL Injection Vulnerability,
starext
- QuickCam linux device driver allows arbitrary code execution,
sapheal
- XSS with default page parameter in Oracle Portal 10g,
duchaikhtn
- XSS in script Mobilelib GOLD v2,
gamr-14
- [SECURITY] [DSA 1244-1] New xine-lib packages fix arbitrary code execution,
Moritz Muehlenhoff
- [SECURITY] [DSA 1214-2] Updated gv packages fix arbitrary code execution,
Moritz Muehlenhoff
- [OpenPKG-SA-2006.044] OpenPKG Security Advisory (w3m),
OpenPKG GmbH
- SMS handling OpenSER remote code executing,
sapheal
- OpenSER OSP Module remote code execution,
sapheal
- [SECURITY] [DSA 1243-1] New evince packages fix arbitrary code execution,
Moritz Muehlenhoff
- Limbo CMS event module (lm_absolute_path) Remote File Include Vulnerabilities,
xorontr
- [SECURITY] [DSA 1242-1] New elog packages fix arbitrary code execution,
Moritz Muehlenhoff
- ShmooCon Announcement,
B Potter
- NtRaiseHardError Csrss.exe memory Disclosure exploit,
Reversemode
- Re: Cross site scripting & fullpath disclosure,
james . brown
- Secure Login Manager Multiple Input Validation Vulnerabilities,
DoZ
- Host directory full disclosure and input error,
hack2prison
- [OpenPKG-SA-2006.043] OpenPKG Security Advisory (links),
OpenPKG GmbH
- [OpenPKG-SA-2006.042] OpenPKG Security Advisory (openser),
OpenPKG GmbH
- logahead UNU edition 1.0 Remote File Upload & code execution,
corrado . liotta
- XSS - CMS Made Simple v1.0.2,
Curtis Zimmerman
- HLStats Remote SQL Injection Exploit,
nospam
- PhpbbXtra v2.0 (phpbb_root_path) Remote File Include Vulnerability,
xorontr
- LuckyBot v3 Remote File Include,
i-k-t
- phpcms <=- 1.1.7 Remote File Inclusion,
Zarloule04
- Cahier de texte V2.2 Bypass general access protection exploit,
gmdarkfig
- PHP Live! 3.2.2 Multiple Cross-Site Scripting Vulnerabilities,
DoZ
- [SECURITY] [DSA 1241-1] New squirrelmail packages fix cross-site scripting,
Moritz Muehlenhoff
- XSS with Vbulletin (new idea !),
ashraf1984
- ERRATA (Re: "Host header cannot be trusted as an anti anti DNS-pinning measure"),
Amit Klein
- Forum AnyBoard - Sql Inyection By Firewall,
Firewall1954
- TimberWolf 1.2.2 vulnerable to XSS,
corrado . liotta
- Chatwm V1.0 SqL Injection Vuln.,
ShaFuq31
- Fishyshoop Security Vulnerability,
James Gray
- Okul Merkezi Portal v1.0 Remote File IncLude Vuln.,
ShaFuq31
- iDefense Security Advisory 12.23.06: Novell Netmail IMAP append Denial of Service Vulnerability,
iDefense Labs
- iDefense Security Advisory 12.23.06: Novell NetMail IMAPD subscribe Buffer Overflow Vulnerability,
iDefense Labs
- Multiple Bugs in Future Internet ( XSS & SQL Injection ),
xx_hack_xx_2004
- Efkan Forum v1.0 SqL Inj. Vuln.,
ShaFuq31
- ZDI-06-054: Novell NetMail IMAP APPEND Buffer Overflow Vulnerability,
zdi-disclosures
- ZDI-06-053: Novell NetMail IMAP Verb Literal Heap Overflow Vulnerability,
zdi-disclosures
- ZDI-06-052: Novell NetMail NMAP STOR Buffer Overflow Vulnerability,
zdi-disclosures
- Re: Multiple Remote Vulnerabilities in KISGB,
3APA3A
- SQID v0.2 - SQL Injection Digger.,
contact
- Re: Re: [Full-disclosure] Microsoft Windows XP/2003/Vista memory corruption 0day,
Mike
- Re: [Full-disclosure] Oracle Portal 10g HTTP Response Splitting,
putosoft softputo
- TSLSA-2006-0074 - multi,
Trustix Security Advisor
- Oracle Applications/Portal 9i/10g Cross Site Scripting,
putosoft softputo
- rPSA-2006-0234-1 firefox,
rPath Update Announcements
- Xt-News 0.1 : SQL Injection Vulnerability & XSS,
mr_kaliman
- PWDumpX updated (includes CacheDump functionality),
Reed Arvin
- OpenSER 1.1.0 parse_config buffer overflow vulnerability,
sapheal
- [OpenPKG-SA-2006.040] OpenPKG Security Advisory (ruby),
OpenPKG GmbH
- [TOOL] untidy - XML Fuzzer,
Andres Riancho
- Re: Vulnerability in MG2 php based Image Gallery - bypass security, view password protected images,
matthieu . paineauSTOPSPAM
- SQID v0.1 - SQL Inhection Digger.,
contact
- Ixprim CMS 1.2 Remote Blind SQL Injection Exploit,
gmdarkfig
- RE: [Full-disclosure] Fun with event logs (semi-offtopic),
Michele Cicciotti
- [ MDKSA-2006:234 ] - Updated mono packages fix vulnerability,
security
- [SECURITY] [DSA-1240-1] New links2 packages fix arbitrary shell command execution,
Steve Kemp
- Microsoft Windows XP/2003/Vista memory corruption 0day,
3APA3A
Fun with event logs (semi-offtopic),
3APA3A
NOD32 Antivirus CAB parsing Arbitrary Code Execution Advisory,
security
[OpenPKG-SA-2006.041] OpenPKG Security Advisory (dbus),
OpenPKG GmbH
[CAID 34876]: CA CleverPath Portal Session Inheritance Vulnerability,
Williams, James K
[USN-397-1] mono vulnerability,
Kees Cook
critical Flaw in Firefox 2.0.0.1 allows to steal the user passwords with a videoclip,
quincy
[ GLSA 200612-21 ] Ruby: Denial of Service vulnerability,
Raphael Marichez
[ GLSA 200612-20 ] imlib2: Multiple vulnerabilities,
Raphael Marichez
[ GLSA 200612-19 ] pam_ldap: Authentication bypass vulnerability,
Raphael Marichez
[security bulletin] HPSBST02180 SSRT061288 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS06-072 Through MS06-078,
security-alert
[security bulletin] HPSBUX02174 SSRT061239 rev.2 HP-UX Running OpenSSL Denial of Service (DoS), Increase Privilege,
security-alert
Mono XSP ASP.NET Server sourcecode disclosure vulnerability,
jose . palanco
NOD32 Antivirus DOC parsing Arbitrary Code Execution Advisory,
security
Oracle Portal 10g HTTP Response Splitting,
putosoft softputo
SEC Consult SA-20061220-0 :: Typo3 Command Execution Vulnerability,
SEC Consult Research
ZDI-06-051: Mozilla Firefox SVG Processing Remote Code Execution Vulnerability,
zdi-disclosures
MkPortal Urlobox Cross Site Request Forgery,
info
Multiple Bugs in MINI WEB SHOP,
xx_hack_xx_2004
Oracle <= 9i / 10g File System Access via utl_file Exploit,
none
Oracle <= 9i / 10g (extproc) Local/Remote Command Execution Exploit,
none
Burak Yilmaz Download Portal Sql Injection Vuln.,
ShaFuq31
xss in Support Cards v1 ( oSTicket ),
l . d . 0
Trend Micro's Vista "0day exploit auction" claim,
Ryan Meyer
<Possible follow-ups>
Re: RE: Trend Micro's Vista "0day exploit auction" claim,
agoodhez1
HP Printers FTP Server Denial Of Service,
Joxean Koret
New Skype Worm,
Christopher Mosby
Multiple XSS vulnerabiliteies in Inetmedia's information service - cityinfo.,
filip . palian
WebCalendar >=1.0 Cross-Site Scripting Vulnerabilities,
7all7
HITBSecConf2007 - Dubai - Call for Papers now open!,
Praburaajan
[ MDKSA-2006:233 ] - Updated dbus packages fix vulnerability,
security
[ MDKSA-2006:232 ] - Updated proftpd packages fix mod_ctrls vulnerability,
security
[security bulletin] HPSBUX02178 SSRT061267 rev.2 - HP-UX Secure Shell Remote Unauthorized Denial of Service (DoS),
security-alert
[ GLSA 200612-18 ] ClamAV: Denial of Service,
Sune Kloppenborg Jeppesen
Checkpoint NG3 ICMP Flood,
bdmoraes
Secunia Research: MailEnable POP Service "PASS" Command Buffer Overflow,
Secunia Research
SYMSA-2006-013: Multiple Vulnerabilities in Mandiant First Response,
research
RateMe <= all versions => ( main.inc.php ) Remote File Include Vulnerability,
saudi
HyperVM Cross-Site Scripting,
Advisory
Cisco not honoring update promises?,
Michael Scheidell
[SECURITY] [DSA 1239-1] New sql-ledger packages fix arbitrary code execution,
Moritz Muehlenhoff
[SECURITY] [DSA 1238-1] New clamav packages fix several vulnerabilities,
Moritz Muehlenhoff
[SECURITY] [DSA 1237-1] New Linux 2.4.27 packages fix several vulnerabilities,
Dann Frazier
Allied Telesis AT-9000/24 Ethernet switch management can be accessed from all VLANs.,
Pasi Sjoholm
[HSC Security Group] SiteCatalyst Web Login Cross Site Vulrnabilities,
DoZ
Contra Haber Sistemi v1.0 SqL Injection Vuln.,
ShaFuq31
Odysseus 2.0 / Telemachus 1.0 (Beta),
Dave
Doğantepe Ziyareti Defteri (tr) Sql Injection Vuln.,
ShaFuq31
XSS in gmial google,
gamr-14
Drone Armies C&C Report - 15 Dec 2006,
c2report
[OpenPKG-SA-2006.039] OpenPKG Security Advisory (proftpd),
OpenPKG GmbH
[ MDKSA-2006:206 ] - Updated Thunderbird packages fix multiple vulnerabilities,
security
Bypassing process identification of several personal firewalls and HIPS,
Matousec - Transparent security Research
Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!,
gplit
Project Server 2003 - Credential Disclosure,
Brett Moore
[security bulletin] HPSBMA02173 SSRT061230 rev. 1 - HP Integrated Lights Out (iLO & iLO 2) Running SSH Key Based Authentication Remote Unauthorized Access,
security-alert
Windows Media MID File Denial Of Service Vulnerability,
sehato
[USN-396-1] gdm vulnerability,
Kees Cook
Windows Explorer WMV File Denial Of Service Vulnerability,
sehato
TSLSA-2006-0072 - clamav,
Trustix Security Advisor
BitDefender AV Packed PE File Parsing Engine Heap Overflow,
security
[ MDKSA-2006:231 ] - Updated gdm packages fix string vulnerability,
security
Top 10 Real Computer Crimes for 2007,
Pete Herzog
CanSecWest 2007 (April 18-20) Call For Papers (Deadline January 7th),
Dragos Ruiu
[ GLSA 200612-15 ] McAfee VirusScan: Insecure DT_RPATH,
Sune Kloppenborg Jeppesen
Kerio MailServer < 6.3.1 remote Denial of Service,
research
Re: [fuzzing] NOT a 0day! Re: [Full-disclosure] OWASP Fuzzing page,
Juha-Matti Laurio
iDefense Security Advisory 12.14.06: GNOME Foundation Display Manager gdmchooser Format String Vulnerability,
iDefense Labs
[ MDKSA-2006:164-2 ] - Updated xorg-x11/XFree86 packages fix integer overflow vulnerabilities,
security
[CAID 34870]: CA Anti-Virus vetfddnt.sys, vetmonnt.sys Local Denial of Service Vulnerabilities,
Williams, James K
[ MDKSA-2006:230 ] - Updated clamav packages fix vulnerability,
security
[ GLSA 200612-17 ] GNU Radius: Format string vulnerability,
Raphael Marichez
[ MDKSA-2006:229 ] - Updated evince packages fix buffer overflow vulnerability,
security
rPSA-2006-0232-1 libgsf,
rPath Update Announcements
[USN-380-2] avahi regression,
Martin Pitt
HyperAccess - Multiple Vulnerabilities,
Brett Moore
GenesisTrader v1.0 - Multiple Vulnerabilities,
mr_kaliman
Call for papers and presenters - Dec. 15th deadline,
Mike Allgeier
[ GLSA 200612-16 ] Links: Arbitrary Samba command execution,
Raphael Marichez
The (in)security of Xorg and DRI,
Darren Reed
CORE-2006-1127: ProFTPD Controls Buffer Overflow,
CORE Security Technologies Advisories
ZDI-06-049: Symantec Veritas NetBackup Long Request Buffer Overflow Vulnerability,
zdi-disclosures
ZDI-06-050: Symantec Veritas NetBackup CONNECT_OPTIONS Buffer Overflow Vulnerability,
zdi-disclosures
IBM DB2 Remote DoS during CONNECT processing,
Team SHATTER
ASP Cmd Shell On IIS 5.1,
Brett Moore
[SECURITY] [DSA-1236-1] New enemies-of-carlotta package fix missing sanity checks,
Steve Kemp
[SECURITY] [DSA-1235-1] New ruby1.8 package fix denial of service,
Steve Kemp
Re: worksystem => Remote File Include Vulnerability Exploit,
Laurent . van_den_reysen
[SECURITY] [DSA-1234-1] New ruby1.6 package fix denial of service,
Steve Kemp
iDefense Security Advisory 12.12.06: Sun Microsystems Solaris ld.so Directory Traversal Vulnerability,
iDefense Labs
iDefense Security Advisory 12.12.06: Sun Microsystems Solaris ld.so 'doprf()' Buffer Overflow Vulnerability,
iDefense Labs
ZDI-06-046: Sophos Anti-Virus SIT Archive Parsing Buffer Overflow Vulnerability,
zdi-disclosures
[ GLSA 200612-14 ] Trac: Cross-site request forgery,
Sune Kloppenborg Jeppesen
[ GLSA 200612-13 ] libgsf: Buffer overflow,
Sune Kloppenborg Jeppesen
[ GLSA 200612-12 ] F-PROT Antivirus: Multiple vulnerabilities,
Sune Kloppenborg Jeppesen
ZDI-06-048: Microsoft Internet Explorer normalize() Function Memory Corruption Vulnerability,
zdi-disclosures
Secunia Research: Internet Explorer Script Error Handling Memory Corruption,
Secunia Research
BLOG:CMS Remote file include Vulnerability,
security
ZDI-06-047: Microsoft Visual Studio WmiScriptUtils.dll Cross-Zone Scripting Vulnerability,
zdi-disclosures
Re: [fuzzing] OWASP Fuzzing page,
Joxean Koret
ZDI-06-045: Sophos Anti-Virus CPIO Archive Parsing Buffer Overflow Vulnerability,
zdi-disclosures
rPSA-2006-0231-1 squirrelmail,
rPath Update Announcements
rPSA-2006-0230-1 evince,
rPath Update Announcements
Web Apps- Rad Upload Version 3.02 Remote File Include Vulnerability,
rko . thelegendkiller
[SBDA] SiteKiosk - FileSystem Access,
Brett Moore
OpenLDAP kbind authentication buffer overflow,
Solar Eclipse
[ MDKSA-2006:228 ] - Updated gnupg packages fix vulnerability,
security
[ MDKSA-2006:227 ] - Updated kdegraphics packages fix EXIF vulnerability,
security
[ GLSA 200612-05 ] KOffice shared libraries: Heap corruption,
Sune Kloppenborg Jeppesen
Secunia Research: AOL CDDBControl ActiveX Control "SetClientInfo()" Buffer Overflow,
Secunia Research
RFID access control tokens widely open to cloning,
Adam Laurie
[ GLSA 200612-07 ] Mozilla Firefox: Multiple vulnerabilities,
Raphael Marichez
[ GLSA 200612-03 ] GnuPG: Multiple vulnerabilities,
Raphael Marichez
Re: LS-20060908 - Computer Associates BrightStor ARCserve Backup,
Williams, James K
The newest Word flaw is due to malformed data structure handling,
Juha-Matti Laurio
[ GLSA 200612-10 ] Tar: Directory traversal vulnerability,
Matthias Geerdsen
Re: LS-20061001 - Computer Associates BrightStor ARCserve Backup,
Williams, James K
[ GLSA 200612-04 ] ModPlug: Multiple buffer overflows,
Raphael Marichez
Secunia Research: MailEnable IMAP Service Buffer Overflow Vulnerability,
Secunia Research
[ GLSA 200612-06 ] Mozilla Thunderbird: Multiple vulnerabilities,
Raphael Marichez
shopsite advisory,
DoZ
looking for security community input,
Gadi Evron
Another, different MS Word 0-day vulnerability reported,
Juha-Matti Laurio
Several updates in Microsoft Word 0-day (CVE-2006-5994) FAQ document,
Juha-Matti Laurio
[ GLSA 200612-08 ] SeaMonkey: Multiple vulnerabilities,
Raphael Marichez
Multiple vulnerabilities in Winamp Web Interface 7.5.13,
Luigi Auriemma
ERRATA: [ GLSA 200612-03 ] GnuPG: Multiple vulnerabilities,
Raphael Marichez
Firefox 2.0 security bug: Extensions can hide themself,
azurIt
RFIDIOt release - version 0.1i,
Adam Laurie
[ MDKSA-2006:226 ] - Updated squirrelmail packages fix vulnerabilities,
security
Unauthenticated access to IBM Host On-Demand administration pages,
Ferguson, David (Kansas City)
[SBDA] - ColdFusion MX7 - Multiple Vulnerabilities,
Brett Moore
[ GLSA 200612-09 ] MadWifi: Kernel driver buffer overflow,
Raphael Marichez
D-LINK DWL-2000AP+ remote DoS,
poplix
WASC-Announcement: MX Injection - Capturing and Exploiting Hidden Mail Servers By Vicente Aguilera Diaz,
robert
[SECURITY] [DSA 1233-1] New Linux 2.6.8 packages fix several vulnerabilities,
Dann Frazier
[SECURITY] [DSA 1232-1] New clamav packages fix denial of service,
Moritz Muehlenhoff
[SECURITY] [DSA 1231-1] New gnupg packages fix arbitrary code execution,
Moritz Muehlenhoff
AnnonceScriptHP V2.0 Multiple Vulnerabilities,
mr_kaliman
Messageriescripthp V2.0 XSS & SQL Injection,
mr_kaliman
ProNews V1.5 XSS & SQL Injection,
mr_kaliman
KDPics Multiple Vulnerabities,
mr_kaliman
[ GLSA 200612-02 ] xine-lib: Buffer overflow,
Sune Kloppenborg Jeppesen
Call For Papers: SecurityOPUS 2007,
Sharkey
iDefense Security Advisory 12.08.06: Sophos Antivirus CHM File Heap Overflow Vulnerability,
iDefense Labs
iDefense Security Advisory 12.08.06: Sophos Antivirus CHM Chunk Name Length Memory Corruption Vulnerability,
iDefense Labs
iDefense Security Advisory 12.08.06: Multiple Vendor Antivirus RAR File Denial of Service Vulnerability,
iDefense Labs
Enforcing Java Security Manager in Restricted Windows Environments?,
Jan P. Monsch
PhpBB Toplist 1.3.7 Xss Vuln.,
starext
[USN-394-1] Ruby vulnerability,
Kees Cook
PHP 5.2.0 session.save_path safe_mode and open_basedir bypass,
cxib
Animated Smiley Generator File Include Vul.,
starext
ASX Playlists and Jumping to Conclusions,
Sûnnet Beskerming
LS-20061001 - Computer Associates BrightStor ARCserve Backup v11.5 Remote Buffer Overflow Vulnerability,
advisories
LS-20060908 - Computer Associates BrightStor ARCserve Backup v11.5 Remote Buffer Overflow Vulnerability,
advisories
[CAID 34846]: CA BrightStor ARCserve Backup Discovery Service Buffer Overflow Vulnerability,
Williams, James K
Midicart vulerable,
ifx
Microsoft Word 0-day Vulnerability FAQ (CVE-2006-5994) written,
Juha-Matti Laurio
[SECURITY] [DSA-1230-1] new l2tpns packages fix buffer overflow,
Steve Kemp
[OpenPKG-SA-2006.038] OpenPKG Security Advisory (tar),
OpenPKG GmbH
TSLSA-2006-0070 - multi,
Trustix Security Advisor
[Aria-Security Team] cPanel BoxTrapper Cross Site Scripting,
Advisory
[Aria-Security Team] cPanel 11 pops.html Cross-Site Scripting,
Advisory
[Aria-Security Team] CentOS 4.2 i686 - WHM X v3.1.0 Cross-Site Scripting,
Advisory
EEYE: Intel Network Adapter Driver Local Privilege Escalation,
eEye Advisories
[OpenPKG-SA-2006.037] OpenPKG Security Advisory (gnupg),
OpenPKG GmbH
DUdirectory Admin Panel SQL Injection,
Meftun
[USN-393-2] GnuPG2 vulnerabilities,
Kees Cook
phpAdsNew-2.0.4-pr2 Remote File Inclusion Exploit,
crackers_child
[USN-390-3] evince-gtk vulnerability,
Kees Cook
phpbb 2.0.x [xss],
saps . audit
Re: The Week of Oracle Database Bugs,
Tony Jambu
[USN-393-1] GnuPG vulnerability,
Kees Cook
Some Thoughts about Office Open XML and Malware Detection,
Jan P. Monsch
TSRT-06-15: Citrix Presentation Server Client ActiveX Heap Overflow Vulnerability,
TSRT
Digital Armaments Security Advisory 07.12.2006: Yahoo multiple services authentication bypass Vulnerability,
info
[ GLSA 200612-01 ] wv library: Multiple integer overflows,
Sune Kloppenborg Jeppesen
Linksys WIP 330 VoIP wireless phone crash from Nmap scan,
Shawn Merdinger
ZDI-06-044: Adobe Download Manager AOM Parsing Buffer Overflow Vulnerability,
zdi-disclosures
New MySpace worm could be on its way,
pdp (architect)
Microsoft 0-day word vulnerability - Secunia - Extremely critical,
Ryan Buena
rPSA-2006-0227-1 gnupg,
rPath Update Announcements
rPSA-2006-0226-1 kernel,
rPath Update Announcements
[ MDKSA-2006:225 ] - Updated ruby packages fix DoS vulnerability,
security
GnuPG: remotely controllable function pointer [CVE-2006-6235],
Werner Koch
SYMSA-2006-012: 2X ThinClientServer Create Admin Account Replay Vulnerability,
research
Multiple Vendor Unusual MIME Encoding Content Filter Bypass,
Hendrik Weimer
BTSaveMySql 1.2 (acces to config files),
sn0oPy . team
Oracle PL/SQL Fuzzing Tool,
Joxean Koret
[SECURITY] [DSA 1229-1] New Asterisk packages fix arbitrary code execution,
Martin Schulze
FreeBSD Security Advisory FreeBSD-SA-06:26.gtar,
FreeBSD Security Advisories
FreeBSD Security Advisory FreeBSD-SA-06:25.kmem,
FreeBSD Security Advisories
Uploadscript Vulnerabilities: Text file Hash password,
hack2prison
Re: Internet Explorer 6 CSS "expression" Denial of Service Exploit (P.o.C.),
José Carlos Nieto Jarquín
Internet Explorer 6. CSS Expression Denial of Service (P.o.C.),
José Carlos Nieto Jarquín
Barracuda Convert-UUlib library buffer overflow leads to remote compromise,
Jean-Sébastien Guay-Leroux
[USN-390-2] evince vulnerability,
Kees Cook
[ MDKSA-2006:224 ] - Updated xine-lib packages fix buffer overflow vulnerability,
security
EEYE: Adobe Download Manager AOM Stack Buffer Overflow Vulnerability,
eEye Advisories
HPSBUX02178 SSRT061267 rev.1 - HP-UX Secure Shell Remote Denial of Service (DoS),
security-alert
[security bulletin] HPSBUX02145 SSRT061202 rev.2 - HP-UX running Apache Remote Execution of Arbitrary Code, Denial of Service (DoS), and Unauthorized Access,
security-alert
eEye's Zero-Day Tracker Launch,
chinese soup
Re: Symantec LiveState Agent for Windows vulnerabi,
Damjan
EasyPage Portal ( all ver )SQL Injection,
matrix
[SECURITY] [DSA 1228-1] New elinks packages fix arbitrary shell command execution,
Moritz Muehlenhoff
CYBSEC - Security Pre-Advisory: SAP Internet Graphics Service (IGS) Remote Arbitrary File Removal,
Mariano Nuñez Di Croce
DistrRTgen 1.0 launched!,
Martin Jørgensen
CYBSEC - Security Pre-Advisory: SAP Internet Graphics Service (IGS) Undocumented Features,
Mariano Nuñez Di Croce
URL Rdirecction Bug Yahoo,
matrix
Re: Evolve Merchant[ injection sql ],
tony
Re: GnuPG 1.4 and 2.0 buffer overflow,
Damien Miller
[KOffice security advisory] KOffice OLEfilter integer overflow,
Dirk Mueller
SNORT Covered channels detector patch,
fryxar fryxar
TSRT-06-14: IBM Tivoli Storage Manager Mutiple Buffer Overflow Vulnerabilities,
TSRT
F-Prot Antivirus for Unix: heap overflow and Denial of Service,
research
new xss in modbb forum,
h angel
rPSA-2006-0211-2 doxygen libpng,
rPath Update Announcements
XSS in JAB Guest Book,
nj
Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation,
ss_team
[ MDKSA-2006:214-1 ] - Updated gv packages fix buffer overflow vulnerability,
security
Re: aBitWhizzy [local file include],
john . goodman
[USN-391-1] libgsf vulnerability,
Kees Cook
MS Internet Explorer 6.0 (mshtml.dll) Denial of Service Exploit,
ajannhwt
[USN-392-1] xine-lib vulnerability,
Kees Cook
Multiple bugs in TFT-Gallery,
nj
[SECURITY] [DSA 1227-1] New Mozilla Thunderbird packages fix several vulnerabilities,
Martin Schulze
[Aria-Security Team] uGestBook SQL Injection Vuln,
Advisory
Re: UPublisher Exploit - Superfreaker,
me
Vt-Forum Lite System V.1.3 Xss Vuln.,
starext
[SECURITY] [DSA 1226-1] New links packages fix arbitrary shell command execution,
Moritz Muehlenhoff
[SECURITY] [DSA 1225-2] New Mozilla Firefox packages fix several vulnerabilities,
Martin Schulze
PhpMyAdmin 2.7.0-pl2 Path Disclosure | Multiple CRLF/Http Response Splitting,
ajannhwt
2[xss]Vulnerabilities in Script Mobile Ac4p.com,
gamr-14
SMF upload XSS vulnerability,
Jessica Hope
[SECURITY] [DSA 1225-1] New Mozilla Firefox packages fix several vulnerabilities,
Martin Schulze
[SECURITY] [DSA 1224-1] New Mozilla packages fix several vulnerabilities,
Martin Schulze
Online BookMarks Multiple SQL Injection/XSS Vulnerabilities,
security
fl0p - passive L7 flow fingerprinting,
Michal Zalewski
[ISecAuditors Security Advisories] XSS vulnerability in error page of ISMail,
ISecAuditors Security Advisories
Metyus Okul Ynetim Sistemi V.1.0 (tr) Sql injection Vuln.,
ShaFuq31
[ISecAuditors Security Advisories] IMAP/SMTP Injection in Hastymail,
ISecAuditors Security Advisories
listpics v5,
blasterim
[ISecAuditors Advisories] BlueSocket web administration is vulnerable to XSS,
ISecAuditors Security Advisories
[Aria-Security Team] DuWare DuPaypal SQL Injection Vuln,
Advisory
[Aria-Security Team] DuWare DuForum SQL Injection Vuln,
Advisory
CuteNews 1.3.6 XSS,
emulamex
[Aria-Security Team] DuWare DuDownloads SQL Injection Vuln,
Advisory
[ MDKSA-2006:222 ] - Updated koffice packages fixes integer overflow vulnerability,
security
KhaledMuratList mdb,
blasterim
[Aria-Security Team] DuWare DuPortal SQL Injection Vuln,
Advisory
PHPNews 1.3.0 XSS,
emulamex
[Aria-Security Team] DuWare DuClassMate SQL Injection Vuln,
Advisory
[Aria-Security Team] DuWare DuNews SQL Injection Vuln,
Advisory
[ MDKSA-2006:223 ] - Updated ImageMagick packages fixes vulnerability,
security
freeqboard <= 1.1 (qb_path) Remote File Include Vulnerability,
-= SHELL =- -= SHELL =-
rPSA-2006-0222-1 tar,
rPath Update Announcements
TSLSA-2006-0068 - multi,
Trustix Security Advisor
rPSA-2006-0224-1 gnupg,
rPath Update Announcements
iDefense Security Advisory 12.01.06: Novell ZENworks Asset Management Collection Client Heap Overflow Vulnerability,
iDefense Labs
[SECURITY] [DSA 1222-2] New proftpd packages fix several vulnerabilities,
Moritz Muehlenhoff
Aspee Ziyareti Defteri (tr) Sql injection Vuln.,
ShaFuq31
iDefense Security Advisory 12.01.06: Novell ZENworks Asset Management Msg.dll Heap Overflow Vulnerability,
iDefense Labs
rPSA-2006-0220-1 dovecot,
rPath Update Announcements
Outpost Bypassing Self-Protection via Advanced DLL injection with handle stealing Vulnerability,
Matousec - Transparent security Research
[SECURITY] [DSA 1223-1] New tar packages fix arbitrary file overwrite,
Noah Meyerhans
Layered Defense Advisory: Novell Client 4.91 Format String Vulnerability,
dh
deV!L`z Clanportal - SQL Injection [061124a],
Tim Weber
deV!L`z Clanportal - Arbitrary File Upload [061124b],
Tim Weber
[Aria-Security.Net] Web Hosting Control Panel - cPanel 11 Multiple Cross-Site Scripting Vulnerabilites,
Advisory
rPSA-2006-0221-1 openldap openldap-clients openldap-servers,
rPath Update Announcements
[ MDKSA-2006:221 ] - Updated gnupg packages fix vulnerability,
security
[ MDKSA-2006:220 ] - Updated libgsf packages fix heap buffer overflow vulnerability,
security
[SECURITY] [DSA 1205-2] New thttpd packages fix insecure temporary file creation,
Steve Kemp
Invision Gallery 2.0.7 SQL Injection Vulnerability,
infection
LifeType version 1.1.2 Multiple Path Disclosure Vulnerabilities,
jesper . jurcenoks
iDefense Security Advisory 11.30.06: Multiple Vendor libgsf Heap Overflow Vulnerability,
iDefense Labs
LDU <= 8.x (polls.php) Remote SQL Injection Vulnerability,
ajannhwt
contentserv 4.x,
capt . nem0
safely concatenating strings in portable C (Re: GnuPG 1.4 and 2.0 buffer overflow),
Solar Designer
Re: [Full-disclosure] ZDI-06-043: Novell Netware Client Print Provider Buffer Overflow Vulnerability,
Dude VanWinkle
[ GLSA 200611-26 ] ProFTPD: Remote execution of arbitrary code,
Raphael Marichez
Invision Community Blog Mod 1.2.4 .PHP SQL Injection Vulnerability,
infection
Seditio <= 1.10 (pollid) Remote SQL Injection Vulnerability,
ajannhwt
@lex Guestbook 4.0.1 : Full Path Disclosure & XSS,
mr_kaliman
Woltlab Burning Board 2.3.X XSS Vulnerability (0-Day) FIXED VERSION,
blueshisha
[USN-390-1] evince vulnerability,
Kees Cook
