Bugtraq

• Thread Index

---

• Re: Xbox 360 Hypervisor Privilege Escalation Vulnerability
  • From: anohacker
• [CAID 35112]: CA eTrust Intrusion Detection Denial of Service Vulnerability
  • From: Williams, James K
• [USN-428-1] Firefox vulnerabilities
  • From: Martin Pitt
• Evading the Norman SandBox Analyzer
  • From: Arne Vidstrom
• Re: Xbox 360 Hypervisor Privilege Escalation Vulnerability
  • From: gera
• RE: MSIE7 browser entrapment vulnerability (probably Firefox, too)
  • From: perpetualmotionuk
• Cisco Security Advisory: Cisco Catalyst 6000, 6500 and Cisco 7600 Series MPLS Packet Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Catalyst 6000, 6500 Series and Cisco 7600 Series NAM (Network Analysis Module) Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Re: WordPress Search Function SQL-Injection
  • From: ascii
• Re: WordPress Search Function SQL-Injection
  • From: kelson
• Xbox 360 Hypervisor Privilege Escalation Vulnerability
  • From: Anonymous Hacker
• Re: WordPress Search Function SQL-Injection
  • From: Justin Frydman - Thinkweb Media
• [NETRAGARD-20070220 SECURITY ADVISORY] [McAfee VirusScan for Mac (Virex) Local root exploit and Scan Bypass]
  • From: Netragard Security Advisories
• iDefense Security Advisory 02.27.07: Computer Associates eTrust Intrusion Detection Denial of Service Vulnerability
  • From: iDefense Labs
• Nullsoft ShoutcastServer Persistant XSS - 0day
  • From: SaMuschie
• WordPress Search Function SQL-Injection
  • From: SaMuschie
• rPSA-2007-0043-1 php php-mysql php-pgsql
  • From: rPath Update Announcements
• RE: SYMSA-2007-002: Palm OS Treo Find Feature System Password Bypass
  • From: Roger A. Grimes
• [ GLSA 200702-12 ] CHMlib: User-assisted remote execution of arbitrary code
  • From: Raphael Marichez
• [ GLSA 200702-11 ] MPlayer: Buffer overflow
  • From: Raphael Marichez
• Wordpress 2.1.1 - Multiple Script Injection Vulnerabilities
  • From: Stefan Friedli
• Re: [Full-disclosure] Firefox onUnload + document.write() memory corruption vulnerability (MSIE7 null ptr)
  • From: Michal Zalewski
• Re: [Full-disclosure] ViewCVS 0.9.4 issues
  • From: Moritz Naumann
• Few unreported vulnerabilities by SehaTo
  • From: 3APA3A
• Re: XXS in script Phorum
  • From: brian
• ViewCVS 0.9.4 issues
  • From: Moritz Naumann
• MTCMS multiple upload vulnerabilities
  • From: none
• Re: MSIE7 browser entrapment vulnerability (probably Firefox, too)
  • From: Michal Zalewski
• Re: [Full-disclosure] Firefox Cache Hack - Firefox History Hack redux
  • From: Ismail Dönmez
• XXS in script Phorum
  • From: c_r_ck
• WordPress AdminPanel CSRF/XSS - 0day
  • From: SaMuschie
• Re: [Full-disclosure] Firefox Cache Hack - Firefox History Hack redux
  • From: pdp (architect)
• Secunia Software Inspector OS Security Assessment problem
  • From: David ROBERT
• RE: SYMSA-2007-002: Palm OS Treo Find Feature System Password Bypass
  • From: McCarty, Eric C.
• [security bulletin] HPSBST02194 SSRT071306 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS07-005 Through MS07-016
  • From: security-alert
• Re: [Full-disclosure] Firefox Cache Hack - Firefox History Hack redux
  • From: arman
• SEC Consult SA-20070226-0 :: File Disclosure in Pagesetter for PostNuke
  • From: research
• rPSA-2007-0040-1 firefox
  • From: rPath Update Announcements
• Re: [Full-disclosure] Firefox Cache Hack - Firefox History Hack redux
  • From: Ismail Dönmez
• Know your Enemy: Web Application Threats
  • From: Gadi Evron
• Re: [Full-disclosure] Firefox Cache Hack - Firefox History Hack redux
  • From: pdp (architect)
• Re: [Full-disclosure] Firefox Cache Hack - Firefox History Hack redux
  • From: Michael Silk
• Re: ActiveCalendar 1.2.0, Multiple vulnerabilities
  • From: simon . itsecurity
• Re: [Full-disclosure] Firefox onUnload + document.write() memory corruption vulnerability (MSIE7 null ptr)
  • From: Michal Zalewski
• SQLiteManager v1.2.0 Multiple Vulnerabilities
  • From: simon . itsecurity
• Re: [Full-disclosure] Firefox onUnload + document.write() memory corruption vulnerability (MSIE7 null ptr)
  • From: Ismail Dönmez
• Re: MSIE7 browser entrapment vulnerability (probably Firefox, too)
  • From: Jeffrey Katz
• Re: [Full-disclosure] Firefox onUnload + document.write() memory corruption vulnerability (MSIE7 null ptr)
  • From: Stan Bubrouski
• sitex multiple vulnerabilities
  • From: none
• Call for Paper - SyScan'07
  • From: Thomas Lim
• Cursor Injection - A New Method for Exploiting PL/SQL Injection and Potential Defences
  • From: David Litchfield
• [ GLSA 200702-10 ] UFO2000: Multiple vulnerabilities
  • From: Raphael Marichez
• Re: [Full-disclosure] Firefox onUnload + document.write() memory corruption vulnerability (MSIE7 null ptr)
  • From: Daniel Veditz
• JBrowser Acces to Admin Panel Exploit
  • From: crazy_king
• [ GLSA 200702-09 ] Nexuiz: Multiple vulnerabilities
  • From: Raphael Marichez
• Phpwebgallery-1.4.1, Multiple Cross Site Scripting
  • From: simon . itsecurity
• Coppermine Photo Gallery 1.3.x Blind SQL Injection Exploit
  • From: s0cratex
• Photostand_1.2.0 Multiple Cross Site Scripting
  • From: simon . itsecurity
• ActiveCalendar 1.2.0, Multiple vulnerabilities
  • From: simon . itsecurity
• Blind sql injection attack in INSERT syntax on PHP-nuke <=8.0 Final
  • From: krasza
• Re: Stack Overflow in Third-Party ActiveX Controls affects Multiple Vendor Products Including Some Symantec Consumer Products and Automated Support
  • From: John Smith
• pickle download local file
  • From: none
• [ MDKSA-2007:049 ] - Updated spamassassin packages fix DoS vulnerability
  • From: security
• Simple one-file gallery
  • From: none
• Advisory 03/2007: Multiple Browsers Cross Domain Charset Inheritance Vulnerability
  • From: Stefan Esser
• xtcommerce local file include
  • From: none
• shopkitplus local file include
  • From: none
• iDefense Security Advisory 02.23.07: Mozilla Network Security Services SSLv2 Server Stack Overflow Vulnerability
  • From: iDefense Labs
• Re: iDefense Security Advisory 02.22.07: IBM DB2 Universal Database DB2INSTANCE File Creation Vulnerability
  • From: Steven M. Christey
• iDefense Security Advisory 02.23.07: Mozilla Network Security Services SSLv2 Client Integer Underflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 02.23.07: Mozilla Network Security Services SSLv2 Server Stack Overflow Vulnerability
  • From: iDefense Labs
• Stack Overflow in Third-Party ActiveX Controls affects Multiple Vendor Products Including Some Symantec Consumer Products and Automated Support
  • From: secure
• rPSA-2007-0038-1 spamassassin
  • From: rPath Update Announcements
• rPSA-2007-0036-1 kernel
  • From: rPath Update Announcements
• [USN-427-1] enigmail vulnerability
  • From: Martin Pitt
• Secunia Research: Internet Explorer 7 "onunload" Event Spoofing Vulnerability
  • From: Secunia Research
• [ MDKSA-2007:048 ] - Updated php packages fix multiple vulnerabilities
  • From: security
• Firefox onUnload + document.write() memory corruption vulnerability (MSIE7 null ptr)
  • From: Michal Zalewski
• MSIE7 browser entrapment vulnerability (probably Firefox, too)
  • From: Michal Zalewski
• Firefox Cache Hack - Firefox History Hack redux
  • From: pdp (architect)
• Re: [Full-disclosure] Firefox bookmark cross-domain surfing vulnerability
  • From: Daniel Veditz
• Re: [ECHO_ADV_66$2007] SendStudio <= 2004.14 Remote File Inclusion Vulnerability
  • From: Chris Smith
• [OpenPKG-SA-2007.010] OpenPKG Security Advisory (php)
  • From: OpenPKG GmbH
• Re: JBoss jmx-console CSRF
  • From: pagvac
• iDefense Security Advisory 02.22.07: IBM DB2 Universal Database DB2INSTANCE File Creation Vulnerability
  • From: iDefense Labs
• Re: [Full-disclosure] Firefox Cache Hack - Firefox History Hack redux
  • From: Ben Bucksch
• iDefense Security Advisory 02.22.07: IBM DB2 Universal Database Multiple Privilege Escalation Vulnerabilities
  • From: iDefense Labs
• Firefox: onUnload tailgating (MSIE7 entrapment bug variant)
  • From: Michal Zalewski
• [ECHO_ADV_66$2007] SendStudio <= 2004.14 Remote File Inclusion Vulnerability
  • From: erdc
• Re: [Full-disclosure] Firefox bookmark cross-domain surfing vulnerability
  • From: pdp (architect)
• Re: [Full-disclosure] iDefense Security Advisory 02.15.07: Multiple Vendor ClamAV CAB File Denial of Service Vulnerability
  • From: aCaB
• Re[2]: Solaris telnet vulnberability - how many on your network?
  • From: Steven M. Christey
• iDefense Security Advisory 02.22.07: VeriSign ConfigChk ActiveX Control Buffer Overflow Vulnerability
  • From: iDefense Labs
• Connectix Boards <= 0.7 (p_skin) Multiple Vulnerabilities Exploit
  • From: gmdarkfig
• RE: SYMSA-2007-002: Palm OS Treo Find Feature System Password Bypass
  • From: Roger A. Grimes
• FlashGameScript v1.5.4 Remote File Inclusion Vulnerability
  • From: malic89
• Re: Firefox: about:blank is phisher's best friend
  • From: Michal Zalewski
• Re: Firefox: about:blank is phisher's best friend
  • From: Florian Weimer
• Re[2]: [Full-disclosure] Microsoft Windows 2000/XP/2003/Vista ReadDirectoryChangesW informaton leak
  • From: 3APA3A
• WebSpell > 4.0 Authentication Bypass and arbitrary code execution
  • From: r . verton
• JBoss jmx-console CSRF
  • From: buben . razuma
• Re: [Full-disclosure] Firefox bookmark cross-domain surfing vulnerability
  • From: Michal Zalewski
• Hasadya Raed
  • From: RaeD Hasadya
• JBrowser acces to admin/config files
  • From: sn0oPy . team
• RE: Overtaking Google Desktop
  • From: Yair Amit
• RE: Re[2]: Solaris telnet vulnberability - how many on your network?
  • From: Roger A. Grimes
• SaphpLesson v3.0 SQL Injection Exploit
  • From: gamr-14
• pheap [edit LFI] vulnerability
  • From: none
• Re: Web Apps- Rad Upload Version 3.02 Remote File Include Vulnerability
  • From: e4c5
• LoveCMS 1.4 multiple vulnerabilities
  • From: none
• Plantilla PHP Simple
  • From: none
• SYMSA-2007-002-1: Palm OS Treo Find Feature System Password Bypass
  • From: research
• Re: Re: SYMSA-2007-002: Palm OS Treo Find Feature System Password Bypass
  • From: chgsupra1
• Re: SYMSA-2007-002: Palm OS Treo Find Feature System Password Bypass
  • From: chgsupra1
• Pics Navigator Directory Traversal Vulnerability
  • From: sn0oPy . team
• Magic News Plus File Inclusion And Xss Vulnerabilitis
  • From: security
• Re: Drive-by Pharming Threat
  • From: hlockhar
• OWASP JBroFuzz 0.5 Fuzzer Released!
  • From: subere
• Re: [Full-disclosure] Firefox bookmark cross-domain surfing vulnerability
  • From: Michal Zalewski
• Microsoft Windows 2000/XP/2003/Vista ReadDirectoryChangesW informaton leak
  • From: 3APA3A
• [USN-426-1] Ekiga vulnerabilities
  • From: Kees Cook
• Re[2]: Solaris telnet vulnberability - how many on your network?
  • From: Thierry Zoller
• [USN-425-1] slocate vulnerability
  • From: Kees Cook
• Re: [Full-disclosure] Firefox: serious cookie stealing / same-domain bypass vulnerability
  • From: Michal Zalewski
• Re: [Full-disclosure] Firefox bookmark cross-domain surfing vulnerability
  • From: pdp (architect)
• Re: [Full-disclosure] Firefox bookmark cross-domain surfing vulnerability
  • From: pdp (architect)
• Firefox bookmark cross-domain surfing vulnerability
  • From: Michal Zalewski
• iDefense Security Advisory 02.16.07: Trend Micro ServerProtect Web Interface Authorization Bypass Vulnerability
  • From: iDefense Labs
• [ MDKSA-2007:047 ] - Updated kernel packages fix multiple vulnerabilities and bugs
  • From: security
• Re: Jboss vulnerability (AUSCERT#2007d2feb)
  • From: AusCERT
• Call Center Software - Remote Xss Post Exploit -
  • From: corrado . liotta
• [ MDKSA-2007:044 ] - Updated ekiga packages fix string vulnerabilities.
  • From: security
• Re: Solaris telnet vulnberability - how many on your network?
  • From: Edsel Adap
• Nabopoll Blind SQL Injection vulnerabilies
  • From: s0cratex
• [ MDKSA-2007:045 ] - Updated gnomemeeting packages fix string vulnerabilities
  • From: security
• Players disconnection in Simbin racing games
  • From: Luigi Auriemma
• Re: ProFTPD 1.3.0/1.3.0a (mod_ctrls support) Local Buffer Overflow Exploit
  • From: Mark Wadham
• Cisco Security Advisory: Multiple Vulnerabilities in 802.1X Supplicant
  • From: Cisco Systems Product Security Incident Response Team
• Re: ProFTPD 1.3.0/1.3.0a (mod_ctrls support) Local Buffer Overflow Exploit
  • From: str0ke
• /bin/ls with gid=0 in Debian linux-ftpd
  • From: Paul Szabo
• Cisco Security Advisory: Cisco Unified IP Conference Station and IP Phone Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• Overtaking Google Desktop
  • From: Yair Amit
• [USN-424-1] PHP vulnerabilities
  • From: Martin Pitt
• XLAtunes 0.1 (album) Remote SQL Injection Vulnerability
  • From: Guns
• [ MDKSA-2007:046 ] - Updated gnucash packages fix temp file issues.
  • From: security
• Re: Re: Apache Multiple Injection Vulnerabilities
  • From: hugo
• Re: Jboss vulnerability
  • From: ben . dexter
• qwik-smtpd format string
  • From: hotturk
• Re: Jboss vulnerability
  • From: Javier Antunez
• TSRT-07-02: Trend Micro ServerProtect eng50.dll Stack Overflow Vulnerabilities
  • From: TSRT
• VMware Workstation multiple denial of service and isolation manipulation vulnerabilities
  • From: EitanCaspi@xxxxxxxxx
• TSRT-07-01: Trend Micro ServerProtect StCommon.dll Stack Overflow Vulnerabilities
  • From: TSRT
• [USN-423-1] MoinMoin vulnerabilities
  • From: Kees Cook
• Re: Apache Multiple Injection Vulnerabilities
  • From: Amit Klein
• RE: Solaris telnet vulnberability - how many on your network?
  • From: Nate Eldredge
• Re: Drive-by Pharming Threat
  • From: Jeremy Saintot
• NukeSentinel 2.5.05 (nsbypass.php) Blind SQL Injection Exploit
  • From: gmdarkfig
• Re: [Full-disclosure] Drive-by Pharming Threat
  • From: auto400208
• Re: [Full-disclosure] Drive-by Pharming Threat
  • From: auto400208
• Re: [Full-disclosure] Drive-by Pharming Threat
  • From: Andrew Farmer
• Re: [Full-disclosure] Drive-by Pharming Threat
  • From: Martin Johns
• ProFTPD 1.3.0/1.3.0a (mod_ctrls support) Local Buffer Overflow Exploit
  • From: Guns
• Re: Drive-by Pharming Threat
  • From: auto400208
• Re: Web Server Botnets and Server Farms as Attack Platforms
  • From: Anders Henke
• AdMentor Script Remote SQL injection Exploit
  • From: crazy_king
• Metaye Released - ZmbScap
  • From: Contact
• phpXmms 1.0 (tcmdp) Remote File Include Vulnerabilities
  • From: ilkerkandemir
• Re: XLAtunes 0.1 (album) Remote SQL Injection Vulnerability
  • From: str0ke
• Rootkit Profiler LX
  • From: Tobias Klein
• Re: Jboss vulnerability
  • From: Harry Hoffman
• RE: Solaris telnet vulnberability - how many on your network?
  • From: Michael Wojcik
• Re: Jboss vulnerability
  • From: James Davis
• RE: Firefox: about:blank is phisher's best friend
  • From: Michael Wojcik
• Re: Solaris telnet vulnberability - how many on your network?
  • From: Marco Ivaldi
• Re: DotClear v1.2.5
  • From: contact
• [ MDKSA-2007:043 ] - Updated clamav packages address multiple issues.
  • From: security
• MyCalendar multiple XSS
  • From: sn0oPy . team
• NukeSentinel 2.5.05 (nukesentinel.php) File Disclosure Exploit
  • From: gmdarkfig
• Jboss vulnerability
  • From: dexie
• XLAtunes 0.1 (album) Remote SQL Injection Vulnerability
  • From: Guns
• MediaWiki Cross-site Scripting
  • From: eyal
• ESupport Multiple HTML Injection Vulnerabilities
  • From: DoZ
• iTunes remote memory corruption vulnerability
  • From: poplix
• Powerschool 404 Admin Exposure
  • From: gheetotank
• Re: [SECURITY] [DSA 1259-1] New fetchmail packages fix information disclosure
  • From: Matthias Andree
• Remote DoS in libevent DNS parsing <= 1.2a
  • From: Jon Oberheide
• Re: Solaris telnet vulnberability - how many on your network?
  • From: Brandon Butterworth
• [ GLSA 200702-08 ] AMD64 x86 emulation Sun's J2SE Development Kit: Multiple vulnerabilities
  • From: Raphael Marichez
• Re: Drive-by Pharming Threat
  • From: Cedric Blancher
• [ GLSA 200702-07 ] Sun JDK/JRE: Execution of arbitrary code
  • From: Raphael Marichez
• Re: Solaris telnet vulnberability - how many on your network?
  • From: Cromar Scott
• [ GLSA 200702-06 ] BIND: Denial of Service
  • From: Raphael Marichez
• Re: Drive-by Pharming Threat
  • From: Marcello Barnaba
• Re: Firefox: about:blank is phisher's best friend
  • From: Michal Zalewski
• Re: Firefox: about:blank is phisher's best friend
  • From: zonafirefox
• mAlbum v0.3 admin by default user/pass
  • From: sn0oPy . team
• DotClear v1.2.5
  • From: k4rtal
• Re: Solaris telnet vulnberability - how many on your network?
  • From: Nate Eldredge
• RE: Drive-by Pharming Threat
  • From: Memisyazici, Aras
• Re: Re: Re: Solaris telnet vulnberability - how many on your network?
  • From: Gadi Evron
• Re: Solaris telnet vulnberability - how many on your network?
  • From: Darren Reed
• Firefox: about:blank is phisher's best friend
  • From: Michal Zalewski
• Re: Solaris telnet vulnberability - how many on your network?
  • From: greimer
• Re: Drive-by Pharming Threat
  • From: Dennis
• Re: RE: Re: Re: Solaris telnet vulnberability - how many on your network?
  • From: thefinn12345
• Re: Solaris telnet vulnberability - how many on your network?
  • From: Anthony R. Nemmer
• Re: Re: Re: Solaris telnet vulnberability - how many on your network?
  • From: jf
• RE:Drive-by Pharming Threat
  • From: psirt
• Re: Drive-by Pharming Threat
  • From: Mark Senior
• Re: SYMSA-2007-002: Palm OS Treo Find Feature System Password Bypass
  • From: agonline . dummy
• Re: Re: Re: Solaris telnet vulnberability - how many on your network?
  • From: thefinn12345
• false: Plume CMS 1.2.2 < = RFi Vulnerabilities
  • From: Stuart Moore
• Re: RE: Re: Solaris telnet vulnberability - how many on your network?
  • From: thefinn12345
• utorrent issue?
  • From: Gadi Evron
• phpbb_wordsearch < = RFi Vulnerabilities
  • From: k4rtal
• Plume CMS 1.2.2 < = RFi Vulnerabilities
  • From: k4rtal
• Meganoide's news v1.1.1 < = RFi Vulnerabilities
  • From: k4rtal
• Drake CMS v0.3.2 < = RFi Vulnerabilities
  • From: k4rtal
• Re: SYMSA-2007-002: Palm OS Treo Find Feature System Password Bypass
  • From: dkirker
• Re: Apache Multiple Injection Vulnerabilities
  • From: security
• Ezboo webstats acces to sensitive files
  • From: sn0oPy . team
• RE: Re: Re: Solaris telnet vulnberability - how many on your network?
  • From: jf
• Re: Web Server Botnets and Server Farms as Attack Platforms
  • From: Tom
• Reflections on Trusting Trust [was: Re: Solaris telnet ...]
  • From: Gadi Evron
• PBLang 4.60 <= (index.php) Remote File Include Vulnerability
  • From: me you
• Downgrading the Oracle native authentication
  • From: sec . list
• Meganoide's news v1.1.1 < = RFi Vulnerabilities
  • From: k4rtal
• [funsec] Quebec Health Officials Fighting Computer Virus (fwd)
  • From: Gadi Evron
• Re: Re: Solaris telnet vulnberability - how many on your network?
  • From: Hugo van der Kooij
• Re: Virginity Security Advisory 2007-001 : T-Com Speedport 500V Login bypass
  • From: kissme
• [SECURITY] [DSA 1261-1] New PostgreSQL packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Re: [Full-disclosure] Firefox: serious cookie stealing / same-domain bypass vulnerability
  • From: Base64
• [ GLSA 200702-05 ] Fail2ban: Denial of Service
  • From: Raphael Marichez
• Dem_trac acces to log file wihtout authentification
  • From: sn0oPy . team
• CedStat v1.31 XSS
  • From: sn0oPy . team
• Re: Re: Solaris telnet vulnberability - how many on your network?
  • From: jf
• EasyMail Objects v6.5 Connect Method Stack Overflow
  • From: Paul Craig
• RE: Re: Solaris telnet vulnberability - how many on your network?
  • From: Roger A. Grimes
• [USN-422-1] ImageMagick vulnerabilities
  • From: Kees Cook
• Drive-by Pharming Threat
  • From: Zulfikar Ramzan
• Re: Apache Multiple Injection Vulnerabilities
  • From: Hugo Vázquez Caramés
• Re: iDefense Security Advisory 02.15.07: Multiple Vendor ClamAV MIME Parsing Directory Traversal Vulnerability
  • From: Alan J. Wylie
• MSN redirect Bug
  • From: h4x0r_ir
• RE: Re[2]: Solaris telnet vulnberability - how many on your network?
  • From: Evans, Thomas
• Re: [Full-disclosure] Firefox: serious cookie stealing / same-domain bypass vulnerability
  • From: pdp (architect)
• Re: Re: Solaris telnet vulnberability - how many on your network?
  • From: thefinn12345
• Re: [Full-disclosure] Firefox: serious cookie stealing / same-domain bypass vulnerability
  • From: pdp (architect)
• Re: Solaris telnet vulnberability - how many on your network?
  • From: thefinn12345
• Re: [Full-disclosure] Firefox: serious cookie stealing / same-domain bypass vulnerability
  • From: Michal Zalewski
• Re: [Full-disclosure] Firefox: serious cookie stealing / same-domain bypass vulnerability
  • From: pdp (architect)
• iDefense Security Advisory 02.15.07: Multiple Vendor ClamAV CAB File Denial of Service Vulnerability
  • From: iDefense Labs
• [security bulletin] HBSBGN02189 SSRT071297 rev.1 ServiceGuard for Linux, Remote Unauthorized Access
  • From: security-alert
• Re: Firefox: serious cookie stealing / same-domain bypass vulnerability
  • From: Michal Zalewski
• iDefense Security Advisory 02.15.07: Multiple Vendor ClamAV MIME Parsing Directory Traversal Vulnerability
  • From: iDefense Labs
• Comodo DLL injection via weak hash function exploitation Vulnerability
  • From: Matousec - Transparent security Research
• Re: Apache Multiple Injection Vulnerabilities
  • From: Amit Klein
• Re: Solaris telnet vulnberability - how many on your network?
  • From: Darren Reed
• Re: Re[2]: Solaris telnet vulnberability - how many on your network?
  • From: Darren Reed
• XSS in [deskpro.com v1.1.0 ]
  • From: bl4ck
• Re: local bug :[xxs] in whm
  • From: anon . e . mouse
• Re: [BLACKLIST] [Full-disclosure] Solaris telnet vulnberability -
  • From: Darren Reed
• XSS in [Calendar Express 2 ]
  • From: bl4ck
• Lizardtech DjVu Browser Plug-in - Multiple Vulnerabilities
  • From: Brett Moore
• RE: Apache Multiple Injection Vulnerabilities
  • From: Rogier Mulhuijzen
• Re: Stanford university SCARF user editing
  • From: spam
• Re: [BLACKLIST] [Full-disclosure] Solaris telnet vulnberability - how many on yournetwork?
  • From: Gadi Evron
• RE: defacements for the installation of malcode
  • From: Gadi Evron
• RE: Re[2]: Solaris telnet vulnberability - how many on your network?
  • From: Gadi Evron
• Re: [Full-disclosure] Firefox: serious cookie stealing / same-domain bypass vulnerability
  • From: Stan Bubrouski
• Re: Solaris telnet vulnberability - how many on your network?
  • From: Gadi Evron
• Re: [Full-disclosure] Firefox: serious cookie stealing / same-domain bypass vulnerability
  • From: Daniel Veditz
• RE: defacements for the installation of malcode
  • From: Jeremy Epstein
• Re: [Full-disclosure] Firefox: serious cookie stealing / same-domain bypass vulnerability
  • From: Peter Besenbruch
• Re: [BLACKLIST] [Full-disclosure] Solaris telnet vulnberability - how many on yournetwork?
  • From: Joep Vesseur
• Re: [Full-disclosure] Firefox: serious cookie stealing / same-domain bypass vulnerability
  • From: Ben Bucksch
• defacements for the installation of malcode
  • From: Gadi Evron
• Firefox: serious cookie stealing / same-domain bypass vulnerability
  • From: Michal Zalewski
• RE: [BLACKLIST] [Full-disclosure] Solaris telnet vulnberability - how many on yournetwork?
  • From: Gadi Evron
• Re: Solaris telnet vulnberability - how many on your network?
  • From: Damien Miller
• [SECURITY] [DSA 1260-1] New imagemagick package fix arbitrary code execution
  • From: Moritz Muehlenhoff
• RE: Re[2]: Solaris telnet vulnberability - how many on your network?
  • From: Roger A. Grimes
• [SECURITY] [DSA 1259-1] New fetchmail packages fix information disclosure
  • From: Moritz Muehlenhoff
• Re: Solaris telnet vulnberability - how many on your network?
  • From: Leandro Gelasi
• Cisco Security Advisory: Multiple Vulnerabilities in Firewall Services Module
  • From: Cisco Systems Product Security Incident Response Team
• Re[2]: Solaris telnet vulnberability - how many on your network?
  • From: Thierry Zoller
• RE: [Full-disclosure] Solaris telnet vulnberability - how many onyour network?
  • From: David Taylor
• Re: DotClear Full Path Disclosure Vulnerability
  • From: Cedric Blancher
• Re: Jupiter CMS 1.1.5 Multiple Vulnerabilities
  • From: gmdarkfig
• Apache Multiple Injection Vulnerabilities
  • From: hugo
• Re: DotClear Full Path Disclosure Vulnerability
  • From: Raphaël HUCK
• Argument injection issues
  • From: Steven M. Christey
• Re: Solaris telnet vulnberability - how many on your network?
  • From: Casper . Dik
• Re: Solaris telnet vulnberability - how many on your network?
  • From: Joe Shamblin
• Re: Solaris telnet vulnberability - how many on your network?
  • From: Gadi Evron
• Solaris telnet vuln solutions digest and network risks
  • From: Gadi Evron
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco PIX and ASA Appliances
  • From: Cisco Systems Product Security Incident Response Team
• WebTester 5.0.2 sql injection and XSS vulnerabilities
  • From: Moran Zavdi
• Jupiter CMS 1.1.5 Multiple Vulnerabilities
  • From: gmdarkfig
• [security bulletin] HPSBUX02192 SSRT061233 rev.1 - HP-UX Running ARPA Transport, Local Denial of Service (DoS)
  • From: security-alert
• HPSBUX02191 SSRT071302 rev.1 - HP-UX Running SLSd, Remote Unauthorized Arbitrary File Creation
  • From: security-alert
• Secunia Research: MailEnable Web Mail Client Multiple Vulnerabilities
  • From: Secunia Research
• iDefense Security Advisory 02.13.07: Hewlett-Packard HP-UX SLSd Arbitrary File Creation Vulnerability
  • From: iDefense Labs NO-REPLY
• SYMSA-2007-002: Palm OS Treo Find Feature System Password Bypass
  • From: research
• [ GLSA 200702-04 ] RAR, UnRAR: Buffer overflow
  • From: Raphael Marichez
• Re: Solaris telnet vulnberability - how many on your network?
  • From: georg . oppenberg
• MS Interactive Training .cbo Overflow
  • From: Brett Moore
• RE: [Full-disclosure] Solaris telnet vulnberability - how many onyour network?
  • From: Peter Ferrie
• Re: Solaris telnet vulnberability - how many on your network?
  • From: Casper . Dik
• Re: Solaris telnet vulnberability - how many on your network?
  • From: Casper . Dik
• Re: Solaris telnet vulnberability - how many on your network?
  • From: Gadi Evron
• [ GLSA 200702-03 ] Snort: Denial of Service
  • From: Raphael Marichez
• Re: Solaris telnet vulnberability - how many on your network?
  • From: Gadi Evron
• [ GLSA 200702-02 ] ProFTPD: Local privilege escalation
  • From: Raphael Marichez
• Re: Solaris telnet vulnberability - how many on your network?
  • From: Casper . Dik
• Re: Solaris telnet vulnberability - how many on your network?
  • From: Gadi Evron
• iDefense Security Advisory 02.13.07: Microsoft 'wininet.dll' FTP Reply Null Termination Heap Corruption Vulnerability
  • From: iDefense Labs NO-REPLY
• Re: DotClear Full Path Disclosure Vulnerability
  • From: Gmail account
• Re: Denial Of Service in Internet Explorer for MS Windows Mobile 5.0
  • From: Nicolas RUFF
• [ GLSA 200702-01 ] Samba: Multiple vulnerabilities
  • From: Raphael Marichez
• Re: [BLACKLIST] [Full-disclosure] Solaris telnet vulnberability - how many on yournetwork?
  • From: Casper . Dik
• Fullaspsite Shop (tr) Xss & SqL &#304;nj. VulnZ.
  • From: ShaFuq31
• RE: Solaris telnet vulnberability - how many on your network?
  • From: Michal Zalewski
• Re: Firefox focus stealing vulnerability (possibly other browsers)
  • From: Michal Zalewski
• Re: DotClear Full Path Disclosure Vulnerability
  • From: Cedric Blancher
• Re: Solaris telnet vulnberability - how many on your network?
  • From: Casper . Dik
• UPDATE: [ GLSA 200611-05 ] Netkit FTP Server: Privilege escalation
  • From: Raphael Marichez
• Re: DotClear Full Path Disclosure Vulnerability
  • From: Cedric Blancher
• Cisco Security Advisory: Multiple IOS IPS Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• RE: Solaris telnet vulnberability - how many on your network?
  • From: Gadi Evron
• RE: Solaris telnet vulnberability - how many on your network?
  • From: Gadi Evron
• RE: Solaris telnet vulnberability - how many on your network?
  • From: Oliver Friedrichs
• Re: DotClear Full Path Disclosure Vulnerability
  • From: Raphaël HUCK
• RE: [BLACKLIST] [Full-disclosure] Solaris telnet vulnberability - how many on yournetwork?
  • From: Michael Wojcik
• Re: Firefox focus stealing vulnerability (possibly other browsers)
  • From: Andreas Beck
• Re: DotClear Full Path Disclosure Vulnerability
  • From: Cedric Blancher
• RE: XSS in lighttpd
  • From: Bart Seresia
• Re: DotClear Full Path Disclosure Vulnerability
  • From: Raphaël HUCK
• Re: [Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers)
  • From: pdp (architect)
• Re: [Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers)
  • From: Ben Bucksch
• TSLSA-2007-0007 - multi
  • From: Trustix Security Advisor
• NDSS: Network and Distributed Systems Security
  • From: Crispin Cowan
• Re: TFTP directory traversal in Kiwi CatTools
  • From: support
• RE: Solaris telnet vulnberability - how many on your network?
  • From: Oliver Friedrichs
• [ MDKSA-2007:042 ] - Updated smb4k packages fix numerous vulnerabilities
  • From: security
• Aruba Mobility Controller Management Buffer Overflow
  • From: security
• Re: Web Server Botnets and Server Farms as Attack Platforms
  • From: Steven M. Christey
• Aruba Networks - Unauthorized Administrative and WLAN Access through Guest Account
  • From: security
• Re: Firefox focus stealing vulnerability (possibly other browsers)
  • From: Michal Zalewski
• Re: Firefox focus stealing vulnerability (possibly other browsers)
  • From: Michal Zalewski
• Re: [BLACKLIST] [Full-disclosure] Solaris telnet vulnberability - how many on yournetwork?
  • From: Thierry Zoller
• Inertia News Remote File &#304;nclude
  • From: crazy_king
• Re: [Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers)
  • From: Michal Zalewski
• PHP 5.2.1 crash bug
  • From: squeeky . mouse
• XSS in eWay
  • From: bl4ck
• SecurityVulns.com: Microsoft Visual C++ 8.0 standard library time functions invalid assertion DoS (Problem 3000).
  • From: 3APA3A
• XSS in lighttpd
  • From: bl4ck
• XSS in communityserver !
  • From: bl4ck
• Solaris telnet vulnberability - how many on your network?
  • From: Gadi Evron
• XSS in JBoss Portal
  • From: bl4ck
• Firefox focus stealing vulnerability (possibly other browsers)
  • From: Michal Zalewski
• Virtual Calendar <= (pwd.txt) Remote Password Disclosur Vulnerability
  • From: me you
• Port randomization paper
  • From: Fernando Gont
• Re: [Full-disclosure] Solaris telnet vulnberability - how many on your network?
  • From: armin walland
• Windows logoff bug solution possibly.
  • From: Rage Coder
• Re: [Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers)
  • From: pdp (architect)
• [USN-417-3] PostgreSQL regression
  • From: Martin Pitt
• Radical Technologies - Portal Search- multiple XSS issue
  • From: claxus
• Re: Re[2]: Ipswitch WS_FTP Server 5.04 multiple arbitrary code execution vulnerabilities
  • From: ismaelalfaro
• Miniwebsvr 0.0.6 - Directory traversal
  • From: Daniel Nyström
• Jportal 2.3.1 CSRF vulnerability
  • From: dzitu
• Firefox/MSIE focus stealing vulnerability - clarification
  • From: Michal Zalewski
• Re: [Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers)
  • From: Paul Szabo
• Re: Firefox focus stealing vulnerability (possibly other browsers)
  • From: Claus Färber
• Re: [Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers)
  • From: Ben Bucksch
• Re: [Full-disclosure] Solaris telnet vulnberability - how many on your network?
  • From: Vincent Archer
• DotClear Full Path Disclosure Vulnerability
  • From: raphael . huck
• Re: [Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers)
  • From: Michal Zalewski
• Re: [Full-disclosure] Solaris telnet vulnberability - how many on your network?
  • From: Huzeyfe Onal
• Re: [Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers)
  • From: Ben Bucksch
• Web Server Botnets and Server Farms as Attack Platforms
  • From: Gadi Evron
• Oreon1.2.x Series Exploit Coded
  • From: hotturk
• Re: Firefox focus stealing vulnerability (possibly other browsers)
  • From: Michal Zalewski
• Re: [Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers)
  • From: pdp (architect)
• [OpenPKG-SA-2007.009] OpenPKG Security Advisory (twiki)
  • From: OpenPKG GmbH
• Arbitrary file disclosure vulnerability in IP3 NetAccess < 4.1.9.6
  • From: Sebastian Wolfgarten
• Arbitrary file disclosure vulnerability in php rrd browser < 0.2.1 (prb)
  • From: Sebastian Wolfgarten
• Re: [Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers)
  • From: Michal Zalewski
• KvGuestbook Remote Add Admin Exploit
  • From: crazy_king
• Re: [Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers)
  • From: pdp (architect)
• Multiple vulnerabilities in phpMyVisites
  • From: Nicob
• Re: [Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers)
  • From: pdp (architect)
• Re: [Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers)
  • From: pdp (architect)
• Re: mcRefer SQL injection
  • From: gmdarkfig
• Re: [Full-disclosure] Firefox focus stealing vulnerability (possibly other browsers)
  • From: Michal Zalewski
• MediaWiki Full Path Disclosure Vulnerability
  • From: raphael . huck
• phpPolls 1.0.3 (acces to sensitive file)
  • From: sn0oPy . team
• Re: [XSS] Qdig - Quick Digital Image Gallery Version 1.2.9.3 and -devel
  • From: Andrea Purificato - bunker
• [XSS] Qdig - Quick Digital Image Gallery Version 1.2.9.3 and -devel
  • From: Andrea Purificato - bunker
• nabopoll 1.1.2 sensitive file (admin without password)
  • From: sn0oPy . team
• Allons_voter Version 1.0 xss and admin votes
  • From: sn0oPy . team
• mcRefer SQL injection
  • From: sn0oPy . team
• [USN-421-1] MoinMoin vulnerability
  • From: Kees Cook
• rPSA-2007-0031-1 kernel
  • From: rPath Update Announcements
• rPSA-2006-0233-1 dbus dbus-glib dbus-qt dbus-x11
  • From: rPath Update Announcements
• [ MDKSA-2007:041 ] - Updated ImageMagick packages fix buffer overflow vulnerability
  • From: security
• Re: PS Information Leak on HP True64 Alpha OSF1 v5.1 1885
  • From: Ivan Jager
• FreeBSD Security Advisory FreeBSD-SA-07:02.bind
  • From: FreeBSD Security Advisories
• Re: PS Information Leak on HP True64 Alpha OSF1 v5.1 1885
  • From: Andrea Purificato - bunker
• XSS in Rainbow with Rainbow.Zen
  • From: bl4ck
• Every MS Exploit
  • From: layne
• RE: Denial Of Service in Internet Explorer for MS Windows Mobile 5.0
  • From: McCarty, Eric C.
• local bug :[xxs] in whm
  • From: ali
• Call for Papers: IT-Incident Management and IT-Forensics 2007
  • From: Oliver Goebel
• Re: Denial Of Service in Internet Explorer for MS Windows Mobile 5.0
  • From: Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
• Capital Request Forms Db Username and Password Vulnerabilities
  • From: gokhankaya
• Ovidentia Exploit Codeds
  • From: hotturk
• Denial Of Service in Internet Explorer for MS Windows Mobile 5.0
  • From: clappymonkey
• PAKCON III: Call for Papers [cfp]
  • From: Ayaz Ahmed Khan
• [Reversemode Advisory] TrendMicro Products - multiple privilege escalation vulnerabilities.
  • From: Reversemode
• eXtreme File Hosting remote file upload vulnerability
  • From: hamed . bazargani
• [ MDKSA-2007:037-1 ] - Updated postgresql packages address multiple vulnerabilities
  • From: security
• rPSA-2007-0029-1 ImageMagick
  • From: rPath Update Announcements
• rPSA-2007-0028-1 gd
  • From: rPath Update Announcements
• ZDI-07-007: HP Mercury LoadRunner Agent Stack Overflow Vulnerability
  • From: zdi-disclosures
• TFTP directory traversal in Kiwi CatTools
  • From: Nicob
• Multiple vulnerabilities in SAP WebAS 6.40 and 7.00 (technical details)
  • From: Nicob
• [security bulletin] HPSBMA02190 SSRT071300 rev.1 - HP OpenView Storage Data Protector, Local Execution of Arbitrary Code
  • From: security-alert
• [security bulletin] HPSBGN02187 SSRT061280 rev.1 - Mercury LoadRunner, Performance Center, Monitor over Firewall, Remote Unauthenticated Arbitrary Code Execution
  • From: security-alert
• rPSA-2007-0025-2 postgresql postgresql-server
  • From: rPath Update Announcements
• Re: remote file include in whm (all version)
  • From: Mailinglists Address
• Re: Defeating CAPTCHAs via Averaging
  • From: noreply9871234
• remote file include in whm (all version)
  • From: ali
• Ability to inject and execute any code as root in SysCP
  • From: flo
• [ MDKSA-2007:039 ] - Updated gtk+2.0 packages address DoS, LSB issues, several bugs
  • From: security
• iDefense Security Advisory 02.07.07: Trend Micro AntiVirus UPX Parsing Kernel Buffer Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 02.07.07: RARLabs Unrar Password Prompt Buffer Overflow Vulnerability
  • From: iDefense Labs
• [ MDKSA-2007:040 ] - Updated kernel packages fix multiple vulnerabilities and bugs
  • From: security
• iDefense Security Advisory 02.07.07: Trend Micro TmComm Local Privilege Escalation Vulnerability
  • From: iDefense Labs
• Re: Jetty Session ID Prediction
  • From: Chris Anley
• Re: VBulletin AdminCP Index.PHP Multiple Cross-Site Scripting Vulnerability
  • From: kier
• XLNC1 Radio Classical Music Nuke Portal Remote File Inc. Vuln.
  • From: gokhankaya
• rPSA-2007-0026-1 samba samba-swat
  • From: rPath Update Announcements
• [SECURITY] [DSA 1258-1] New Mozilla Firefox packages fix several vulnerabilities
  • From: Martin Schulze
• [ MDKSA-2007:038 ] - Updated php packages to address multiple issues
  • From: security
• [ MDKSA-2007:037 ] - Updated postgresql packages address multiple vulnerabilities
  • From: security
• [ MDKSA-2007:036 ] - Updated libwmf packages fix embedded gd DoS vulnerability.
  • From: security
• [ MDKSA-2007:035 ] - Updated gd packages fix DoS vulnerability.
  • From: security
• Medium level security hole in FreeProxy
  • From: Tim Brown
• MySQLNewsEngine (affichearticles.php3) Remote File Inc. Vuln.
  • From: gokhankaya
• [USN-417-2] PostgreSQL 8.1 regression
  • From: Martin Pitt
• VBulletin AdminCP Index.PHP Multiple Cross-Site Scripting Vulnerability
  • From: DoZ
• [USN-419-1] Samba vulnerabilities
  • From: Kees Cook
• [USN-420-1] KDE library vulnerability
  • From: Kees Cook
• [security bulletin] HPSBUX02181 SSRT061289 rev.2 - HP-UX Running IPFilter, Remote Unauthorized Denial of Service (DoS)
  • From: security-alert
• Re: Jetty Session ID Prediction
  • From: Michal Zalewski
• Re: Jetty Session ID Prediction
  • From: Amit Klein
• rPSA-2007-0025-1 postgresql postgresql-server
  • From: rPath Update Announcements
• PS Information Leak on HP True64 Alpha OSF1 v5.1 1885
  • From: Andrea \"bunker\" Purificato
• [USN-418-1] Bind vulnerabilities
  • From: Kees Cook
• Re: Jetty Session ID Prediction
  • From: Michal Zalewski
• Re: Jetty Session ID Prediction
  • From: Amit Klein
• Re: [Full-disclosure] PS Information Leak on HP Tru64 Alpha OSF1 v5.1 1885
  • From: Andrea \"bunker\" Purificato
• Unofficial SQL-Ledger patch for CVE-2007-0667
  • From: Chris Travers
• Firefox 2.0.0.1 and Opera 9.10 Anty Fraud/Phishing Protection bypass.
  • From: Kanedaaa Bohater
• Re: Jetty Session ID Prediction
  • From: Chris Anley
• Sql injection bugs in Joomla and Mambo
  • From: Omid
• Re: Jetty Session ID Prediction
  • From: Michal Zalewski
• Sql injection bugs in Virtuemart and Letterman
  • From: Omid
• Firefox + popup blocker + XMLHttpRequest + srand() = oops
  • From: Michal Zalewski
• iDefense Security Advisory 02.02.07: Blue Coat Systems WinProxy CONNECT Method Heap Overflow Vulnerability
  • From: iDefense Labs
• [USN-417-1] PostgreSQL vulnerabilities
  • From: Martin Pitt
• Uphotogallery Multiple Cross-Site Scripting Vulnerability
  • From: DoZ
• [ MDKSA-2007:034 ] - Updated samba packages address multiple vulnerabilities
  • From: security
• Mina Ajans Script Remote File Inclusion Vuln.
  • From: canberx
• rPSA-2007-0023-1 tshark wireshark
  • From: rPath Update Announcements
• Re: dvddb-0.6 media sql-inj. vuln.
  • From: str0ke
• Les News v2.2 [Admin news without password]
  • From: sn0oPy . team
• [SECURITY] [DSA 1257-1] New samba packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• Sql injection bugs in PHP-Nuke
  • From: Omid
• Re: Web 2.0 backdoors made easy with MSIE & XMLHttpRequest
  • From: Amit Klein
• [SAMBA-SECURITY] CVE-2007-0454: Format string bug in afsacl.so VFS plugin
  • From: Gerald (Jerry) Carter
• Cold Fusion Web Server XSS 0 day
  • From: digi7al64
• Re: [Full-disclosure] Firefox + popup blocker + XMLHttpRequest + srand() = oops
  • From: Michal Zalewski
• Re: Jetty Session ID Prediction
  • From: Amit Klein
• Re: local Calendar System v1.1 (lcStdLib.inc) Remote File Include
  • From: Steven M. Christey
• dvddb-0.6 media remote file include vuln.
  • From: gokhankaya
• [SAMBA-SECURITY] CVE-2007-0453: Buffer overrun in nss_winbind.so.1 on Solaris
  • From: Gerald (Jerry) Carter
• [SAMBA-SECURITY] CVE-2007-0452: Potential DoS against smbd in Samba 3.0.6 - 3.0.23d
  • From: Gerald (Jerry) Carter
• Re: [Full-disclosure] Firefox + popup blocker + XMLHttpRequest + srand() = oops
  • From: pdp (architect)
• TSLSA-2007-0005 - multi
  • From: Trustix Security Advisor
• Jetty Session ID Prediction
  • From: NGSSoftware Insight Security Research
• flashChat 4.7.8 Cross Site Scripting Vulnerability
  • From: binaryloc
• Wap Portal Serve 1.* <= Remote File Inclusion
  • From: stormhacker
• dvddb-0.6 media sql-inj. vuln.
  • From: gokhankaya
• Sql injection bugs in Xoops 2.0.16 + Weblinks module
  • From: Omid
• Adrenalin's ASP Chat XSS
  • From: sn0oPy . team
• MysearchEngine XSS
  • From: sn0oPy . team
• Vmare workstation guest isolation weaknesses (clipboard transfer)
  • From: EitanCaspi@xxxxxxxxx
• Re: Web 2.0 backdoors made easy with MSIE & XMLHttpRequest
  • From: Michal Zalewski
• Ublog Reload Admin Panel Multiple HTML Injections
  • From: DoZ
• [ MDKSA-2007:033 ] - Updated wireshark packages fix multiple vulnerabilities
  • From: security
• Security Advisory for Bugzilla 2.20.3, 2.22.1, and 2.23.3
  • From: mkanat
• [ MDKSA-2007:032 ] - Updated mpg123 packages fix DoS vulnerability.
  • From: security
• Re: Re: Ipswitch WS_FTP Server 5.04 multiple arbitrary code execution vulnerabilities
  • From: michal . bucko
• [ MDKSA-2007:031 ] - Updated kdelibs packages fix KHTML vulnerability
  • From: security
• Re[2]: Ipswitch WS_FTP Server 5.04 multiple arbitrary code execution vulnerabilities
  • From: 3APA3A
• Re: Ipswitch WS_FTP Server 5.04 multiple arbitrary code execution vulnerabilities
  • From: Steven M. Christey
• Re: Sourceforge compromized?
  • From: Karl Schlitt
• Re: strange behavior on Cisco 2801
  • From: Eloy Paris
• Re: Sourceforge compromized?
  • From: Tim
• Re: Sourceforge compromized?
  • From: Serguei A. Mokhov
• Re: Sourceforge compromized?
  • From: Eliah Kagan
• Chicken of the VNC 2.0 remote DoS
  • From: poplix
• Sourceforge compromized?
  • From: Michael Scheidell
• Re: SMF "index.php?action=pm" Cross Site-Scripting
  • From: grudge
• Re: strange behavior on Cisco 2801
  • From: Neil Anderson
• Phishing Evolution Report Released
  • From: Carl Jongsma
• Cerulean Portal System (phpbb_root_path) Remote File Include Exploit
  • From: xorontr
• Omegaboard v1.0b4 (phpbb_root_path) Remote File Include Exploit
  • From: xorontr
• php web portail [remote file include & local file include]
  • From: saps . audit
• strange behavior on Cisco 2801
  • From: Marcin
• [USN-415-1] GTK vulnerability
  • From: Kees Cook
• Comodo Multiple insufficient argument validation of hooked SSDT function Vulnerability
  • From: Matousec - Transparent security Research
• Ipswitch WS_FTP Server 5.04 multiple arbitrary code execution vulnerabilities
  • From: Michal Bucko
• Re: Defeating CAPTCHAs via Averaging
  • From: Andreas Beck
• Re: Defeating CAPTCHAs via Averaging
  • From: Lou Katz
• Technika - Attack Scripting Environment
  • From: pdp (architect)
• Re: stompy the session stomper - tool availability
  • From: Michal Zalewski
• [SECURITY] [DSA 1256-1] New gtk+2.0 packages fix denial of service
  • From: Moritz Muehlenhoff
• [ GLSA 200701-26 ] KSirc: Denial of Service vulnerability
  • From: Raphael Marichez
• BBED - Oracle Block Browser and Editor
  • From: pete
• [ GLSA 200701-28 ] thttpd: Unauthenticated remote file access
  • From: Raphael Marichez

We are proud to have Web Hosting and Rack Housing from 9 Net Avenue Deutschland.
(12)