Bugtraq
- rPSA-2007-0112-1 firefox thunderbird,
rPath Update Announcements
- [USN-467-1] Gimp vulnerability,
Kees Cook
- Re: Progress Webspeed exploit for all releases,
sauge
- FLEA-2007-0023-1: firefox,
Foresight Linux Essential Announcement Service
- [ GLSA 200705-25 ] file: Integer overflow,
Raphael Marichez
- [ GLSA 200705-24 ] libpng: Denial of Service,
Raphael Marichez
- [ GLSA 200705-23 ] Sun JDK/JRE: Multiple vulnerabilities,
Raphael Marichez
- PHP JackKnife [multiple vulnerabilities],
laurent . gaffie
- GNU Findutils release 4.2.31 fixes CVE-2007-2452 (GNU locate heap buffer overrun),
James Youngman
- MyBloggie 2.1.6 SQL Injection,
ls
- [USN-466-1] freetype vulnerability,
Kees Cook
- n.runs-SA-2007.012 - Avira Antivir Antivirus TAR Denial of Service,
security
- [ GLSA 200705-22 ] FreeType: Buffer overflow,
Raphael Marichez
- [tool] Etherbat - Ethernet topology discovery,
bugtraq
- [ GLSA 200705-21 ] MPlayer: Two buffer overflows,
Raphael Marichez
- Practicle Gallery 1.0.1 XSS,
ls
- Particle Blogger 1.2.1 SQL Injection,
ls
- Full Path Disclosure in Almnzm,
xx_hack_xx_2004
- cpcommerce < v1.1.0 [sql injection],
laurent . gaffie
- [security bulletin] HPSBUX02087 SSRT4728 rev.5 - HP-UX running TCP/IP Remote Denial of Service (DoS),
security-alert
- RedLevel Advisory #23 - SalesCart Shopping Cart SQL Injection Vulnerability,
john
- Apache httpd vulenrabilities,
Blazej Miga
- [MajorSecurity Advisory #48]eggblog - Session fixation Issue,
admin
- n.runs-SA-2007.011 - Avira Antivir Antivirus UPX parsing Divide by Zero Advisory,
security
- Mac OS X vpnd local format string,
NGSSoftware Insight Security Research
- DGNews version 2.1 XSS Attack Vulnerability,
securityresearch
- Re: fx-APP Version 0.0.8.1,
chiweeman
- myEvent version 1.6 Multiple Path Disclosure Vulnerabilities,
securityresearch
- DGNews version 2.1 SQL Injection Vulnerability,
securityresearch
- DGNews version 2.1 Path Disclosure Vulnerability,
securityresearch
- RFI In Script FlashChat_v479,
Raed
- Inout Meta Searh engine Remote Code Execution,
BlackHawk
- [SECURITY] [DSA 1298-1] New otrs2 packages fix cross-site scripting,
Moritz Muehlenhoff
- n.runs-SA-2007.010 - Avira Antivir Antivirus LZH parsing Arbitrary Code Execution Advisory,
security
- [ GLSA 200705-20 ] Blackdown Java: Applet privilege escalation,
Raphael Marichez
- RMForum Database Disclosure Vulnerabilitiy,
the_3dit0r
- [ GLSA 200705-19 ] PHP: Multiple vulnerabilities,
Raphael Marichez
- Zindizayn Okul Web Sistemi v1.0 Sql VulnZ.,
g0rk3m-31
- [USN-465-1] PulseAudio vulnerability,
Kees Cook
- webCMS_1.00 Database Disclosure Vulnerabilitiy,
the_3dit0r
- [OpenPKG-SA-2007.019] OpenPKG Security Advisory (php),
OpenPKG GmbH
- rtpBreak - detects, reconstructs and analyzes any RTP session,
michele dallachiesa
- iDefense Security Advisory 05.25.07: Sun Java System Web Proxy Multiple Buffer Overflow Vulnerabilities,
iDefense Labs
- TSLSA-2007-0019 - multi,
Trustix Security Advisor
- Vulnerability - cpCommerce - XSS,
jadoba
- IE 6 / Dart Communications PowerTCP ZIP Compression Control (DartZip.dll 1.8.5.3) remote buffer overflow,
retrog
- BoastMachine index.php Cross Site Scripting Vulnerability,
newbinaryfile
- GTP 3G © Gnuturk Portal System year=**&month= Cross-Site Scripting Vulnerability,
vagrant - e-hack.org
- Pligg critical vulnerability,
242th section
- Multiple XSS in Digirez,
xx_hack_xx_2004
- rPSA-2007-0109-1 file,
rPath Update Announcements
- iDefense Security Advisory 05.24.07: Apple Computer Mac OS X pppd Plugin Loading Privilege Escalation Vulnerability,
iDefense Labs
- FLEA-2007-0022-1: file,
Foresight Linux Essential Announcement Service
- FLEA-2007-0021-1: madwifi,
Foresight Linux Essential Announcement Service
- Dart Communications PowerTCP Service Control (DartService.dll 3.1.3.3) remote buffer overflow,
retrog
- WIYS v1.0 Cross-Site Scripting Vulnerability - (05.24.2007) (NEW),
vagrant - e-hack.org
- Vulnerability in Credant Mobile Guardian Shield for Windows,
myucebox
- n.runs-SA-2007.008 - Avast! Antivirus CAB parsing Arbitrary Code Execution Advisory,
security
- [OpenPKG-SA-2007.018] OpenPKG Security Advisory (freetype),
OpenPKG GmbH
- [SECURITY] [DSA 1297-1] New gforge-plugin-scmcvs packages fix arbitrary shell command execution,
Moritz Muehlenhoff
- [ MDKSA-2007:104-1 ] - Updated samba packages fix multiple vulnerabilities,
security
- [ MDKSA-2007:109 ] - Updated tetex packages fix vulnerabilities,
security
- FLEA-2007-0020-1: freetype,
Foresight Linux Essential Announcement Service
- rPSA-2007-0108-1 freetype,
rPath Update Announcements
- Re: [Full-disclosure] Question Regarding IIS 6.0 / Is this a DoS???,
3APA3A
- rPSA-2007-0107-1 mysql mysql-bench mysql-server,
rPath Update Announcements
- iDefense Security Advisory 05.23.07: Opera Software Opera Web Browser Transfer Item Pop-up Menu Stack Overflow Vulnerability,
iDefense Labs
- FreeBSD Security Advisory FreeBSD-SA-07:04.file,
FreeBSD Security Advisories
- [waraxe-2007-SA#051] - Sql Injection in 2z Project 0.9.5,
come2waraxe
- Cisco CallManager 4.1 Input Validation Vulnerability,
Stefan Friedli
- Secunia Research: eScan Products Agent Service Command Decryption Buffer Overflow,
Secunia Research
- Q1 2007 Application Security Trends Report (Corrected Link),
Tom Stracener
- [USN-463-1] vim vulnerability,
Kees Cook
- [ MDKSA-2007:108 ] - Updated gimp packages fix stack overflow in sunras plugin,
security
- [USN-462-1] PHP vulnerabilities,
Kees Cook
- POC CODE - TI89 Titanium Resident EPO Calculator Virus (T89.GAARA),
Piotr Bania
- ABC Excel Parser Pro v4.0 Remote File Include Exploit,
the_3dit0r
- NOD32 Antivirus Long Path Name Stack Overflow Vulnerabilities,
Ismael Briones
- BoastMachine v3.0 platinum - Session İd Hacking,
vagrant Pest
- Magic iso heap over flow <Help>,
KaCo678
- RedLevel Advisory #021 - CubeCart v3.0.16 SQL Injection Vulnerability,
john
- SQL-Injection in IP-TRACKING Mod for phpBB2.0.x,
Cornelius Riemenschneider
- phpPgAdmin-4.1.1 Remote File Include & Url Redirecting Vulnerabilitiy,
the_3dit0r
- FLEA-2007-0019-1: python,
Foresight Linux Essential Announcement Service
- RedLevel Advisory #020 - HLstats v1.35 Cross-Site Scripting Vulnerability #3,
john
- FINAL Call For Papers: Chaos Communication Camp 2007, Berlin,
Paul Böhm
- [SECURITY] [DSA 1291-3] New samba packages fix regression,
Moritz Muehlenhoff
- RedLevel Advisory #018 - RM EasyMail Plus - Cross-Site Scripting Vulnerability #2,
john
- [Call for Participation] DIMVA 2007,
Robin Sommer
- [ GLSA 200705-18 ] PPTPD: Denial of Service attack,
Sune Kloppenborg Jeppesen
- [USN-460-2] Samba regression,
Kees Cook
- Cisco Security Advisory: Vulnerability In Crypto Library,
Cisco Systems Product Security Incident Response Team
- Q1 2007 Application Security Trends Report,
Tom Stracener
- [security bulletin] HPSBUX02217 SSRT071337 rev.1 - HP-UX running Kerberos, Remote Arbitrary Code Execution,
security-alert
- GMTT Music Distro 1.2 XSS Exploit,
corrado . liotta
- [SECURITY] [DSA 1296-1] New php4 packages fix privilege escalation,
Moritz Muehlenhoff
- Jetbox CMS version 2.1 Multiple Path Disclosure Vulnerabilities,
securityresearch
- RedLevel Advisory #017 - PsychoStats v3.0.6b Multiple Cross-Site Scripting Vulnerabilities,
john
- Cisco Security Advisory: Multiple Vulnerabilities in Cisco IOS While Processing SSL Packets,
Cisco Systems Product Security Incident Response Team
- Remider: VNSECON 07 Call for Papers ends on June 08,
rd
- [waraxe-2007-SA#050] - Sql Injection in WordPress 2.1.3,
come2waraxe
- Oracle Forensics Part 4: Live Response,
David Litchfield
- Security Videos,
thejus_mb
- Jetbox CMS version 2.1 XSS Attack Vulnerability,
securityresearch
- RedLevel Advisory #022 - ClonusWiki .5 Cross-Site Scripting Vulnerability,
john
- [ISecAuditors Security Advisories] Microsoft IIS5 NTLM and Basic authentication bypass,
ISecAuditors Security Advisories
- [SECURITY] [DSA 1281-2] New clamav packages fix denial of service vulnerability,
Noah Meyerhans
- Remedy for: Remot File Include In phpexplorator_2_0,
tchouamou
- [USN-459-2] pptpd regression,
Kees Cook
- Jetbox CMS version 2.1 Multiple SQL Injection Vulnerabilities,
securityresearch
- Re: Re: [Bogus] Lazarus Guestbook (admin.php)Remote File Include Expliot -,
webmaster
- Simple Accessible XHTML Online News v4.6 Remote File Include Exploit,
the_3dit0r
- SimpGB v1.46.0 Remote File Include Exploit,
the_3dit0r
- [ MDKSA-2007:107 ] - Updated evolution packages fix APOP weakness,
security
- [ MDKSA-2007:106 ] - Updated squirrelmailpackages fix vulnerabilities,
security
- RedLevel Advisory #017 - HLstats v1.35 Cross-Site Scripting Vulnerability #2,
john
- RedLevel Advisory #016 - HLstats v1.35 Cross-Site Scripting Vulnerability,
john
- [CVE-2007-1355] Tomcat documentation XSS vulnerabilities,
Mark Thomas
- [SECURITY] [DSA 1295-1] New php5 packages fix several vulnerabilities,
Moritz Muehlenhoff
- NASA Site Bug ( Check URI Input ),
matrix
- [USN-436-2] KTorrent vulnerability,
Kees Cook
- VMSA-2007-0004.1 Updated: Multiple Denial-of-Service issues fixed and directory traversal vulnerability,
VMware Security team
- REWTERZ-20070518 - Authentication Bypass in Rational Soft's Hidden Administrator,
rewterz security team
- ACROS Security: Session Fixation Vulnerability in HP SIM 5.0,
ACROS Security
- [OpenPKG-SA-2007.017] OpenPKG Security Advisory (ratbox),
OpenPKG GmbH
- Predictable TCP ISN in Packeteer PacketShaper,
nnposter
- [OpenPKG-SA-2007.015] OpenPKG Security Advisory (quagga),
OpenPKG GmbH
- eSyndiCat Input Validation Error Vulnerability,
hack2prison
- rPSA-2007-0104-1 idle python,
rPath Update Announcements
- [USN-461-1] Quagga vulnerability,
Kees Cook
- FLEA-2007-0018-1: libpng,
Foresight Linux Essential Announcement Service
- [ MDKSA-2007:105 ] - Updated fetchmail packages fix potential APOP vulnerabilities,
security
- RedLevel Advisory #015 - Redoable 1.2 Cross-Site Scripting Vulnerability (patch included),
john
- [OpenPKG-SA-2007.013] OpenPKG Security Advisory (png),
OpenPKG GmbH
- [security bulletin] HPSBST02214 SSRT071422 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS07-023 to MS07-029,
security-alert
- [OpenPKG-SA-2007.012] OpenPKG Security Advisory (samba),
OpenPKG GmbH
- [security bulletin] HPSBMA02213 SSRT061214 rev.1 - HP Systems Insight Manager (SIM) for Windows, Remote Privileged Access and Arbitrary Code Execution,
security-alert
- [security bulletin] HPSBTU02209 SSRT071323 rev.1 - HP Tru64 UNIX Running Secure Shell (SSH), Remote Unauthorized Identification of Valid Users,
security-alert
- [ GLSA 200705-17 ] Apache mod_security: Rule bypass,
Raphael Marichez
- [ GLSA 200705-16 ] PhpWiki: Remote execution of arbitrary code,
Raphael Marichez
- [SECURITY] [DSA 1291-2] New samba packages fix multiple vulnerabilities,
Noah Meyerhans
- XCon2007 Call For Paper,
XFOCUS Security Team
- [SECURITY] [DSA 1293-1] New quagga packages fix denial of service,
Martin Schulze
- TSLSA-2007-0017 - multi,
Trustix Security Advisor
- XSS vulnerability on various german online banking sites (sparkasse),
Ulrich Keil
- VP-ASP Shopping Cart 6.50 - Cross-Site Scripting Vulnerability,
john
- rPSA-2007-0102-1 libpng,
rPath Update Announcements
- CA BrightStor ARCserve Backup Mediasvr.exe and caloggerd.exe Vulnerabilities,
Williams, James K
- Symantec Product Security: Norton Personal Firewall 2004 ActiveX Control vulnerability,
secure
- ANNOUNCE: RFIDIOt version 0.1m released (May 16th 2007),
Adam Laurie
- vbulletin < 3.6.6 [permanent xss],
laurent . gaffie
- I, Bot. Taking advantage of robots power (Article),
crossbower
- [USN-460-1] Samba vulnerabilities,
Kees Cook
- [SECURITY] [DSA 1292-1] New qt4-x11 packages fix cross-site scripting vulnerability,
Noah Meyerhans
- ZDI-07-033: Samba lsa_io_trans_names Heap Overflow Vulnerability,
zdi-disclosures
- ZDI-07-030: Samba netdfs_io_dfs_EnumInfo_d Heap Overflow Vulnerability,
zdi-disclosures
- ZDI-07-029: Samba lsa_io_privilege_set Heap Overflow Vulnerability,
zdi-disclosures
- ZDI-07-031: Samba smb_io_notify_option_type_data Heap Overflow Vulnerability,
zdi-disclosures
- ZDI-07-032: Samba sec_io_acl Heap Overflow Vulnerability,
zdi-disclosures
- FLEA-2007-0017-1: samba,
Foresight Linux Essential Announcement Service
- [SECURITY] [DSA 1291-1] New samba packages fix multiple vulnerabilities,
Noah Meyerhans
- Retrieving "deleted" sms/mms from Nokia phone (Symbian S60),
Davide Del Vecchio
- Jetbox CMS version 2.1 E-Mail Injection Vulnerability,
securityresearch
- Bypassing PFW/HIPS open process control with uncommon identifier,
Matousec - Transparent security Research
- [ MDKSA-2007:104 ] - Updated samba packages fix multiple vulnerabilities,
security
- [ GLSA 200705-15 ] Samba: Multiple vulnerabilities,
Sune Kloppenborg Jeppesen
- GS07-01 Full-Width and Half-Width Unicode Encoding IDS/IPS/WAF Bypass Vulnerability,
Fatih Ozavci
- rPSA-2007-0098-1 samba samba-swat,
rPath Update Announcements
- [USN-459-1] pptpd vulnerability,
Kees Cook
- Media Player Classic .MPA Div-By-Zero Denial of Service Vulnerability,
Michal Bucko (hackpl)
- ImI image file inclusion in script upload,
spriteversus
- iDefense Security Advisory 05.14.07: Samba SAMR Change Password Remote Command Injection Vulnerability,
iDefense Labs
- IMF 2007 - Deadline Extension,
Oliver Goebel
- Apple Safari on MacOSX may reveal user's saved passwords,
poplix
- [security bulletin] HPSBGN02189 SSRT071297 rev.3 - ServiceGuard for Linux, Remote Unauthorized Access,
security-alert
- [SAMBA-SECURITY] CVE-2007-2447: Remote Command Injection Vulnerability,
Gerald (Jerry) Carter
- Windows Vista: Non-privileged code can redirect shortcuts to intercept privilege elevation requests,
robpaveza
- BTCrack 1.1 Heisec Release,
Thierry Zoller
- MyBB version 1.2.4 Multiple Path Disclosure Vulnerabilities,
securityresearch
- [SAMBA-SECURITY] CVE-2007-2444: Local SID/Name Translation Failure Can Result in User Privilege Elevation,
Gerald (Jerry) Carter
- [ GLSA 200705-14 ] XScreenSaver: Privilege escalation,
Raphael Marichez
- [SAMBA-SECURITY] CVE-2007-2446: Multiple Heap Overflows Allow Remote Code Execution,
Gerald (Jerry) Carter
- ifdate 2.* unauthorized administrative access bug,
expw0rm
- SonicBB version 1.0 Multiple SQL Injection Vulnerabilities,
securityresearch
- [security bulletin] HPSBMI02210 SSRT071396 rev.2 - ProCurve Series 9300m Switches, Remote Denial of Service (DoS),
security-alert
- [SECURITY] [DSA 1290-1] New squirrelmail packages fix cross-site scripting,
Moritz Muehlenhoff
- Uninformed Journal Release Announcement: Volume 7,
sflist
- [SECURITY] [DSA 1289-1] New Linux 2.6.18 packages fix several vulnerabilities,
Moritz Muehlenhoff
- SonicBB version 1.0 XSS Attack Vulnerabilities,
securityresearch
- SonicBB version 1.0 Multiple Path Disclosure Vulnerabilities,
securityresearch
- Exim 4.66 in conjunction with spamd Overflow issues,
calcite
- notepad++[v4.1]: (win32) ruby file processing buffer overflow exploit.,
v9
- Broadband routers and botnets - being proactive,
Gadi Evron
- Webspeed OpenEdge Dos exploit,
bendeniz_avci
- [vuln.sg] yEnc32 Decoder Long Filename Buffer Overflow Vulnerability,
vulnpost-remove
- Design Flaw in Deutsche Telekom Speedport w700v broadband router,
Michael Domberg
- Cross-Site Scripting in Adobe RoboHelp 6, Server 6 and X5,
Michael Domberg
- W1L3D4 Philboard v0.2 sql injection,
ALEMIN KRALI
- Multiple Denial of Service attacks possible for Webspeed OpenEdge,
suresync
- [CAID 35330, 35331]: CA Anti-Virus, CA Threat Manager, and CA Anti-Spyware Console Login and File Mapping Vulnerabilities,
Williams, James K
- ZDI-07-028: CA eTrust AntiVirus Server inoweb Buffer Overflow Vulnerability,
zdi-disclosures
- rPSA-2007-0096-1 shadow,
rPath Update Announcements
- TPTI-07-07: Apple QuickTime STSD Parsing Heap Overflow Vulnerability,
TSRT
- TFTPdWin 0.4.2 Server Directory Traversal Vulnerability,
VulnerabilityResearch
- fotolog xss,
absamu
- [ MDKSA-2007:102 ] - Updated php packages fix multiple vulnerabilities,
security
- eFileCabinet Authentication Bypass,
VulnerabilityResearch
- [ MDKSA-2007:103 ] - Updated php packages fix multiple vulnerabilities,
security
- Computer Associates eTrust InoTask.exe Antivirus Buffer Overflow Vulnerability,
binagres
- iDefense Security Advisory 05.10.07: Apple Darwin Streaming Proxy Multiple Vulnerabilities,
iDefense Labs
- phpMUR Cross Site Scripting,
the_3dit0r
- iDefense Security Advisory 05.10.07: Novell NetMail NMDMC Buffer Overflow Vulnerability,
iDefense Labs
- [ GLSA 200705-13 ] ImageMagick: Multiple buffer overflows,
Sune Kloppenborg Jeppesen
- [ GLSA 200705-12 ] PostgreSQL: Privilege escalation,
Sune Kloppenborg Jeppesen
- iDefense Security Advisory 05.10.07: Sun Microsystems Solaris SRS Proxy Core srsexec Arbitrary File Read Vulnerability,
iDefense Labs
- iDefense Security Advisory 05.09.07: Computer Associates eTrust InoTask.exe Antivirus Buffer Overflow Vulnerability,
iDefense Labs
- squirrelmail CSRF vulnerability,
p3rlhax
- Secunia Research: Internet Explorer HTML Objects Memory Corruption Vulnerability,
Secunia Research
- Secunia Research: BearShare NCTAudioFile2 ActiveX Control Buffer Overflow,
Secunia Research
- [ MDKSA-2007:101 ] - Updated bind packages fix vulnerability,
security
- 2nd OWASP Israel mini conference at the Interdisciplinary Center Herzliya (IDC), Monday, May 21st, 13:30,
Ofer Shezaf
- iDefense Security Advisory 05.08.07: Microsoft Excel Filter Record Code Execution Vulnerability,
iDefense Labs
- iDefense Security Advisory 05.08.07: Microsoft Exchange Server 2000 IMAP Literal Processing DoS Vulnerability,
iDefense Labs
- iDefense Security Advisory 05.08.07: Microsoft Word RTF File Parsing Heap Corruption Vulnerability,
iDefense Labs
- iDefense Security Advisory 05.09.07: Symantec Norton Internet Security 2006 COM Object Security ByPass Vulnerability,
iDefense Labs
- [ MDKSA-2007:100 ] - Updated bind packages fix vulnerability,
security
- Training Classes in SyScan'07,
organiser@xxxxxxxxxx
- Defeating Citibank Virtual Keyboard protection using screenshot method,
yashks
- Re: Defeating Citibank Virtual Keyboard protection using screenshot method,
Jan Heisterkamp
- <Possible follow-ups>
- Re: Re: Defeating Citibank Virtual Keyboard protection using screenshot method,
yashks
- Re: RE: Defeating Citibank Virtual Keyboard protection using screenshot method,
balazs . zolika
- RE: Defeating Citibank Virtual Keyboard protection using screenshot method,
Rogier Mulhuijzen
- Re: Defeating Citibank Virtual Keyboard protection using screenshot method,
Reversemode
- Re: Defeating Citibank Virtual Keyboard protection using screenshot method,
Paul Foote
- Re: Defeating Citibank Virtual Keyboard protection using screenshot method,
imipak
- RE: Defeating Citibank Virtual Keyboard protection using screenshot method,
Rogier Mulhuijzen
- Re: Defeating Citibank Virtual Keyboard protection using screenshot method,
sethb
- Re: Defeating Citibank Virtual Keyboard protection using screenshot method,
mailbox@xxxxxxxxxxxxxx
Re: Re: Defeating Citibank Virtual Keyboard protection using screenshot method,
balazs . zolika
Multiple vulnerabilities,
Michal Bucko (hackpl)
Re: [Dailydave] Vulnerabilities Hashes DB needed,
shadown
Re: [Full-disclosure] Vulnerabilities Hashes DB needed,
Morning Wood
Digital Armaments May-June-2007 Hacking Challenge: VMware,
info
Cisco Security Advisory: Multiple Vulnerabilities in the IOS FTP Server,
Cisco Systems Product Security Incident Response Team
iDefense Security Advisory 05.08.07: McAfee Security Center IsOldAppInstalled ActiveX Buffer Overflow Vulnerability,
iDefense Labs
SEC Consult SA-20070509-0 :: Multiple vulnerabilites in Nokia Intellisync Mobile Suite & Wireless Email Express,
Johannes Greil
RDP TLS downgrade,
software
[ MDKSA-2007:098 ] - Updated clamav packages fix vulnerabilities,
security
Exchange Calendar MODPROPS Denial of Service (CVE-2007-0039),
Alexander Sotirov
[ MDKSA-2007:099 ] - Updated python packages fix vulnerabilities,
security
[SECURITY] [DSA 1288-1] New pptpd packages fix denial of service,
Moritz Muehlenhoff
[security bulletin] HPSBTU02211 SSRT071326 rev.1 - HP Tru64 UNIX Running the dop command, Local Execution of Arbitrary Code with Privilege Elevation,
security-alert
[security bulletin] HPSBMA02138 SSRT061184 rev.3 - HP OpenView Storage Data Protector, Remote Unauthorized Arbitrary Command Execution,
security-alert
ZDI-07-026: Microsoft Excel BIFF File Format Named Graph Record Parsing Stack Overflow Vulnerability,
zdi-disclosures
ZDI-07-027: Microsoft Internet Explorer Table Column Deletion Memory Corruption Vulnerability,
zdi-disclosures
[USN-458-1] MoinMoin vulnerabilities,
Kees Cook
rPSA-2007-0094-1 cpio,
rPath Update Announcements
Advanced Guestbook version 2.4.2 Multiple XSS Attack Vulnerabilities,
securityresearch
[ GLSA 200705-10 ] LibXfont, TightVNC: Multiple vulnerabilities,
Raphael Marichez
ZDI-07-024: Trend Micro ServerProtect EarthAgent Stack Overflow Vulnerability,
zdi-disclosures
[ GLSA 200705-11 ] MySQL: Two Denial of Service vulnerabilities,
Raphael Marichez
AP Newspower software <=4.0.1 allows remote data manipulation,
gobbles_fo_evar
[ GLSA 200705-09 ] IPsec-Tools: Denial of Service,
Raphael Marichez
Advanced Guestbook version 2.4.2 Directory Traversal Vulnerability,
securityresearch
FLEA-2007-0016-1: kernel,
Foresight Linux Essential Announcement Service
rPSA-2007-0092-1 tetex tetex-afm tetex-dvips tetex-fonts tetex-latex tetex-xdvi,
rPath Update Announcements
Advanced Guestbook version 2.4.2 Multiple Error Information Leak Vulnerabilities,
securityresearch
ZDI-07-025: Trend Micro ServerProtect AgRpcCln.dll Stack Overflow Vulnerability,
zdi-disclosures
VMSA-2007-0004 Multiple Denial-of-Service issues fixed,
VMware Security team
WASC Announcement: Distributed Open Proxy Honeypot Project Data Released,
announcements
[ GLSA 200705-08 ] GIMP: Buffer overflow,
Raphael Marichez
[ GLSA 200705-07 ] Lighttpd: Two Denials of Service,
Raphael Marichez
Updated: webMethods Security Advisory: Glue console directory traversal vulnerability,
Jeremy Epstein
OTRS <= 2.0.x XSS/XSRF,
ciri
iDefense Security Advisory 05.07.07: Sun Microsystems Solaris ACE_SETACL Integer Signedness DoS Vulnerability,
iDefense Labs
Re: NukeSentinel Bypass SQL Injection & Nuke Evolution <= 2.0.3 SQL Injections,
technocrat
american cart 3.* (abs_path) remote file include,
kepledehlah
PHPHtmlLib <= 2.4.0 Remote File Include Exploit,
ilkerkandemir
phpHoo3 (admin.php) Remote Login Bypass SQL Injection Vulnerability,
ilkerkandemir
fipsCMS v2.1 Remote SQL injection Vulnerability,
ilkerkandemir
pfa CMS v6.0 (index.php repinc) Remote File Include Vulnerability,
ilkerkandemir
[Reversemode Advisory] VMware Products - GPF Denial of Service,
Reversemode
[USN-457-1] elinks vulnerability,
Kees Cook
[SECURITY] [DSA 1287-1] New ldap-account-manager packages fix multiple vulnerabilities,
Noah Meyerhans
Kayako eSupport v3.00.90 Cross Site Scripting (XSS),
e1c4
Mini Web Shop v.2 Vulnerable to XSS,
corrado . liotta
Re: nucleus 3.22 >> RFI,
security curmudgeon
Drake CMS (v0.4.0) - CRLF Injection Vulnerability,
john
UPDATED: CubeCart (v3.0.15) - CRLF Injection Vulnerability,
john
[ GLSA 200705-06 ] X.Org X11 library: Multiple integer overflows,
Raphael Marichez
SunShop (v4) Multiple Vulnerabilities,
john
Podium CMS - Cookie Manipulation Exploit,
john
Taltech Tal Bar Code ActiveX Control Memory Corruption Vulnerability(-ies),
sapheal-hack.pl
Nuked-klaN 1.7.6 Remote Code Execution Exploit,
gmdarkfig
[MajorSecurity Advisory #47]Simple Machines Forum (SMF) - Session fixation Issue,
admin
ACP3 (v4.0b3) - Multiple Vulnerabilities,
john
XSS in Microsoft SharePoint,
ville . solarius
Re: WebScarab <= 20060621-0003 cross site scripting,
Rogan Dawes
NPDS <= 5.10 - Multiple SQL injections,
aeroxteam_PLEASEDONTSPAMUS
safari's saved password at risk,
poplix
Re: sunshop v4 >> RFI,
lagged2hell
RunCms <= 1.5.2 debug_show.php sql injection,
retrog
Remote File Include In Script impex,
RaeD
PHPSecurityAdmin Remote File Include Exploit,
ilkerkandemir
Multiple vendors ZOO file decompression infinite loop DoS,
Jean-Sébastien Guay-Leroux
rPSA-2007-0088-1 xscreensaver,
rPath Update Announcements
rPSA-2007-0085-1 lftp,
rPath Update Announcements
rPSA-2007-0089-1 net-snmp net-snmp-utils,
rPath Update Announcements
rPSA-2007-0090-1 gimp,
rPath Update Announcements
[security bulletin] HPSBUX01137 SSRT5954 rev.10 - HP-UX Running TCP/IP (IPv4), Remote Unauthorized Denial of Service (DoS),
security-alert
[security bulletin] HPSBMI02210 SSRT071396 rev.1 - ProCurve Series 9300m Switches, Remote Denial of Service (DoS),
security-alert
[security bulletin] HPSBTU02116 SSRT061135 rev.3 - HP Tru64 UNIX and HP Internet Express for Tru64 UNIX Running sendmail, Remote Execution of Arbitrary Code or Denial of Service (DoS),
security-alert
Aardvark Topsites PHP Directory Disclosure Vulnerability,
DoZ
SchoolBoard (admin.php) Remote Login Bypass SQL Injection Vulnerability,
ilkerkandemir
Bradford CampusManager v3.1(6) Sensitive Data Disclosure,
john
[ MDKSA-2007:097 ] - Updated xscreensaver packages fix vulnerability,
security
[security bulletin] HPSBTU02179 SSRT061256 rev.1 - HP Tru64 UNIX Running the ps command, Local Disclosure of Sensitive Information,
security-alert
Medium security hole affecting DSL-G624T,
Tim Brown
[security bulletin] HPSBPI02185 SSRT071290 rev.2 - HP Jetdirect Running ftp, Remote Denial of Service (DoS),
security-alert
12All File Upload Vulnerability,
John McGuire
TPTI-07-05: IBM Tivoli Provisioning Manager for OS Deployment Multiple Stack Overflow Vulnerabilities,
TSRT
TPTI-07-06: Trillian Pro Rendezvous XMPP HTML Decoding Heap Corruption,
TSRT
[ MDKSA-2007:096 ] - Updated quagga packages fix DoS vulnerability,
security
[SECURITY] [DSA 1286-1] New Linux 2.6.18 packages fix several vulnerabilities,
Dann Frazier
iDefense Security Advisory 05.02.07: LiveData Protocol Server Heap Overflow Vulnerability,
iDefense Labs
Post Nuke v4bJournal Module Sql Inject,
abbasi
Cisco Security Advisory: LDAP and VPN Vulnerabilities in PIX and ASA Appliances,
Cisco Systems Product Security Incident Response Team
response Progress: Denial of Service attack against WebSpeed possible,
suresync
Disable website access for sites running Webspeed,
suresync
Vulnerability in InterVations' MailCopa,
skillTube.com
Atomix Mp3 Buffer Overflow,
preth00nker
[USN-456-1] net-snmp vulnerability,
Kees Cook
[ MDKSA-2007:095 ] - Updated ktorrent packages fix vulnerability,
security
[ GLSA 200705-04 ] Apache mod_perl: Denial of Service,
Sune Kloppenborg Jeppesen
[ECHO_ADV_82$2007] wordpress plugins wp-Table <= 1.43 (wpPATH) Remote File Inclusion Vulnerability,
erdc
Wordpress All versions XSS,
jcarlos . norte
[ GLSA 200705-05 ] Quagga: Denial of Service,
Sune Kloppenborg Jeppesen
[ECHO_ADV_81$2007] wordpress plugins wordTube <= 1.43 (wpPATH) Remote File Inclusion Vulnerability,
erdc
rPSA-2007-0084-1 kernel,
rPath Update Announcements
ZDI-07-023: Apple QTJava toQTPointer() Pointer Arithmetic Memory Overwrite Vulnerability,
zdi-disclosures
Radware Security Advisory - Yate 1.1.0 Denial of Service Vulnerability,
no-reply
[ GLSA 200705-03 ] Tomcat: Information disclosure,
Raphael Marichez
[ GLSA 200705-01 ] Ktorrent: Multiple vulnerabilities,
Raphael Marichez
[ GLSA 200705-02 ] FreeType: User-assisted execution of arbitrary code,
Raphael Marichez
[SECURITY] [DSA 1285-1] New wordpress packages fix multiple vulnerabilities,
Noah Meyerhans
[SECURITY] [DSA 1284-1] New qemu packages fix several vulnerabilities,
Moritz Muehlenhoff
iDefense Security Advisory 04.30.07: Cerulean Studios Trillian Multiple IRC Vulnerabilities,
iDefense Labs
ZoneAlarm Insufficient validation of 'vsdatant' driver input buffer Vulnerability,
Matousec - Transparent security Research
