Bugtraq: by author

addmimistrator_at_gmail.com
- [KAPDA]MyBB 1.1.7~ htmlspeacialchar_uni(), fixjavascript(), functions_post.php ~[url]XSS attack (Aug 30 2006)
- [KAPDA]MyBB 1.1.7 ~ admin/global.php ~ XSS Attack (Aug 30 2006)
- vBulletin 3.0.14 ~ init.php~ registerring global arbitary variable~ XSS exploit (Aug 04 2006)
admin_at_majorsecurity.de
- [MajorSecurity Advisory #27]ToendaCMS - Cross Site Scripting Issue (Aug 03 2006)
AG Spider
- Virtual War v1.5.0 Remote File Include (vwar_root) (Aug 07 2006)
- WoW Roster <= 1.5.x Remote File Include (hsList.php) (Aug 01 2006)
- WoW Roster <= 1.5.x Remote File Include (hsList.php) (Aug 01 2006)
alex_at_evuln.com
- [eVuln] MyBB 'Avatar URL' XSS Vulnerability (Aug 02 2006)
ali_at_hackerz.ir
- JS ASP Faq Manager v1.10 sql injection (Aug 29 2006)
alireza hassani
- [KAPDA::#55] - Joomla poll component vulnerability (Aug 18 2006)
Allie Daneman
- Re: [SM-ANNOUNCE] SquirrelMail 1.4.8 released - fixes variable overwriting attack (Aug 11 2006)
amir.scorpino_at_yahoo.com
- ModuleBased CMS alfa 1 Multiple Remote File Inclusion (Aug 29 2006)
Amit Klein (AKsecurity)
- Technical note by Amit Klein: "Sending arbitrary HTTP requests with Flash 7/8 (+IE 6.0)" (Aug 16 2006)
- Technical note: under some conditions, it's possible to steal HTTP credentials using Flash (Aug 14 2006)
- Sending multipart/form-data requests from Flash (with arbitrary headers) (Aug 10 2006)
Andre Braun
- AW: Symantec Gateway Security DNS exploit (Aug 23 2006)
Andreas Gal
- Cisco NAC Appliance Agent Installation Bypass Vulnerability (Aug 25 2006)
Andreas Marx
- Re: when will AV vendors fix this??? (Aug 14 2006)
Andy Meyers
- RE: linksys WRT54g authentication bypass (Aug 07 2006)
anon_at_anon.net
- Re: [eVuln] B-net Software Multiple XSS Vulnerabilities (Aug 25 2006)
ATR-Bugtraq
- Assessment of Vista Kernel Mode Security (Aug 09 2006)
auuw73_at_dsl.pipex.com
- Directory Traversal vulnerability in IPCheck Monitor Server (Aug 10 2006)
Avert_at_avertlabs.com
- Symantec Enterprise Security Manager Denial-of-Service Vulnerability (Aug 22 2006)
- Linux Kernel SCTP Privilege Elevation Vulnerability (Aug 22 2006)
axel_at_seedig.org
- Re: Symantec Gateway Security DNS exploit (Aug 24 2006)
beford
- TSEP <= 0.942 Remote File Include (Aug 02 2006)
Benjamin Tobias Franz
- Microsoft Help (WINHLP32.EXE) - Multiple Remote Code Execution and Denial Of Service Vulnerabilities (Aug 12 2006)
bilkopat_at_hotmail.com
- Mambo mambelfish Component <= 1.1 Remote File Include Vulnerability (Aug 17 2006)
Bipin Gautam
- Re: [Full-disclosure] RE: when will AV vendors fix this??? (Aug 15 2006)
- Re: when will AV vendors fix this??? (Aug 07 2006)
- when will AV vendors fix this??? (Aug 05 2006)
blood2_20032003_at_yahoo.com
- Forum Software ASPPlayground.NET Advanced Edition 2.4.5 Unicode Xss (Aug 11 2006)
Blwood
- Nuked Klan 1.7 SP4.3 : Function Anti-XSS Bypassed (Aug 30 2006)
botan_at_linuxmail.org
- [Kurdish Security # 23] Spaw Editor Remote Include Vulnerability (Aug 19 2006)
- [Kurdish Security # 21] ShoutBox v4.4 Remote Command Execution (Aug 01 2006)
- [Kurdish Security # 20 ] Quickie Remote Command Execution (Aug 01 2006)
- [Kurdish Security # 19 ] FileManager Remote Command Execution (Aug 01 2006)
- [Kurdish Security # 18 ] FAQ Script Remote Command Execution (Aug 01 2006)
- [Kurdish Security # 17 ] GuestBook 3.5 Remote Command Execution (Aug 01 2006)
- [Kurdish Security # 16 ] newsReporter v1.0 Remote Command Execution (Aug 01 2006)
bozkurtserdar_at_bozkurtserdar.com
- DUpoll 3.1 security alert (Aug 29 2006)
brom0815_at_gmx.de
- VWar <= 1.50 R14 (n) Remote SQL Injection (Aug 11 2006)
C. Hamby
- Re: BlackBoard Multiple Vulnerabilities (XSS) (Aug 22 2006)
c.boulton_at_mybboard.com
- XennoBB <= 2.2.1 "icon_topic" SQL Injection (Aug 19 2006)
- XennoBB <= "avatar gallery" Directory Transversal (Aug 09 2006)
- XennoBB <= 2.1.0 "birthday" SQL injection (Aug 05 2006)
camino_at_sexmagnet.com
- Joomla MamboWiki Component <= 0.9.4 (MamboLogin.php) Remote File Inclusion Vulnerability (Aug 18 2006)
- Joomla Kochsuite Component <= 0.9.4 (config.kochsuite.php) Remote File Inclusion Vulnerability (Aug 18 2006)
- Mambo/Joomla Component Remository v3.25 (mosConfig_absolute_path) Remote File Inclusion Vulnerability (Aug 10 2006)
carcabotx_at_yahoo.com
- JetBox cms (search_function.php) Remote File Include (Aug 28 2006)
- interact <= 2.2 (CONFIG[BASE_PATH]) Remote File Include Vulnerability (Aug 28 2006)
Carsten Eilers
- Re: JetBox cms (search_function.php) Remote File Include (Aug 30 2006)
- Re: CuteNews 1.3.* Remote File Include Vulnerability (Aug 29 2006)
- Re: Jupiter CMS 1.1.5 index.php Remote File Include (Aug 29 2006)
- Re: contentpublisher Mambo Component Remote File Include Vulnerabilities (Aug 23 2006)
- Re: ToendaCMS <= 1.0.3 -(tcms_administer_site) Remote File Include (Aug 23 2006)
- Re: Mambo Component - EstateAgent Remote File Inclusion (Aug 23 2006)
- Re: PHProjekt v0.6.1 Remote File Inclusion Vulnerability (2) (Aug 23 2006)
- Re: PHlyMail Lite [PM_[path][lib]=] Remote File Include Vulnerability (Aug 23 2006)
- Re: Joomla RFİ ( ERNE ) (Aug 23 2006)
- Re: Modification For OpenSEF Remote file Inclusion (Aug 23 2006)
- Re: anjel Mambo Component Remote File Include (Aug 18 2006)
- Re: discloser 0.0.4 Remote File Inclusion (with Exploit) (Aug 19 2006)
- Re: mambo-phphop Product Scroller Module R.F.I (Aug 18 2006)
- Re: mtg_myhomepage Component For Mambo R.F.I (Aug 18 2006)
- Re: Joomla Rssxt <= 1.0 Remote File Include Vulnerability (Aug 18 2006)
- Re: Joomla x-shop <= 1.7 Remote File Include Vulnerability (Aug 18 2006)
- Re: discloser 0.0.4 Remote File Inclusion (with Exploit) (Aug 17 2006)
- Re: Calendarix <= 0.7 (calpath) Remote File Inclusion Vulnerability (Aug 15 2006)
- Re: phpPrintAnalyzer <= 1.1 (rep_par_rapport_racine) Remote File Inclusion Vulnerability (Aug 14 2006)
- Re: Startpage <= 1.0 (cfgLanguage) Remote File Inclusion Vulnerability (Aug 13 2006)
- Re: miniBloggie <= 1.0 (fname) Remote File Inclusion Vulnerability (Aug 13 2006)
- Re: Calendarix <= 0.7 (calpath) Remote File Inclusion Vulnerability (Aug 13 2006)
- Re: myEvent <= 1.4 Multiple Remote File Include Vulnerabilities (Aug 13 2006)
Cheng Peng Su
- Bypassing script filters with variable-width encodings (Aug 07 2006)
ChironeX.FleckeriX_at_Gmail.Com
- SimpleBlog 2.0 <= "comments.asp" SQL Injection Exploit (Aug 20 2006)
- LBlog <= "comments.asp" SQL Injection Exploit (Aug 20 2006)
Chris Wysopal
- Re: SYM06-013 Symantec On-Demand Protection Encrypted Data Exposure (Aug 01 2006)
chris_at_metatrontech.com
- SQL-Ledger serious security vulnerability and workaround (Aug 29 2006)
chris_hasibuan_at_yahoo.com
- SolpotCrew Advisory #6 - phpCC - Beta 4.2 (base_dir) Remote File Inclusion (Aug 06 2006)
- SolpotCrew Advisory #5 - modernbill ver 1.6 (DIR) Remote File Inclusion (Aug 03 2006)
Cisco Systems Product Security Incident Response Team
- Cisco Security Advisory: Unintentional Password Modification in Cisco Firewall Products (Aug 23 2006)
- Cisco Security Advisory: Cisco VPN 3000 Concentrator FTP Management Vulnerabilities (Aug 23 2006)
Collin R. Mulliner
- PocketPC MMS - Remote Code Injection/Execution Vulnerability and Denial-of-Service (Aug 10 2006)
Core Security Technologies advisories
- CORE-2006-0714: Microsoft SRV.SYS SMB_COM_TRANSACTION Denial of Service (Aug 14 2006)
crackers_child_at_sibersavascilar.com
- contentpublisher Mambo Component Remote File Include Vulnerabilities (Aug 17 2006)
- anjel Mambo Component Remote File Include (Aug 17 2006)
- Joomla Rssxt <= 1.0 Remote File Include Vulnerability (Aug 18 2006)
- Joomla x-shop <= 1.7 Remote File Include Vulnerability (Aug 18 2006)
- Reporter Mambo Component Remote File İnclude (Aug 16 2006)
- Mambo com_lm component (archive.php) Remote File Include Vulnerabilities (Aug 16 2006)
- Lizge V.20 Web Portal File Include Vulnerability (Aug 15 2006)
cyanid-E
- 0-day XP SP2 wmf exploit (some details) (Aug 07 2006)
- 0-day XP SP2 wmf exploit (Aug 06 2006)
D3nGeR_at_Gmail.CoM
- Jetbox CMS search_function.php Remote File (Aug 25 2006)
- Jupiter CMS 1.1.5 index.php Remote File Include (Aug 25 2006)
- PHProjekt v0.6.1 Remote File Inclusion Vulnerability (2) (Aug 21 2006)
- PHlyMail Lite [PM_[path][lib]=] Remote File Include Vulnerability (Aug 18 2006)
Damian Put
- [Overflow.pl] ImageMagick ReadSGIImage() Heap Overflow (Aug 14 2006)
Daniel Kobras
- Re: [Overflow.pl] ImageMagick ReadSGIImage() Heap Overflow (Aug 16 2006)
danil9470_at_yahoo.com
- Re: Opsware NAS 6.0 reveals MySQL 'root' password (Aug 24 2006)
darkz.gsa_at_gmail.com
- DeluxeBB Multiple Vulnerabilities (Aug 07 2006)
Dave Wichers
- Registration Now Open!: 3rd Annual US OWASP AppSec Conference - Oct 16-18 2006 - Seattle, WA (Aug 16 2006)
- RE: ANNOUNCING: 3rd Annual US OWASP AppSec Conference - Oct 16-18 2006 - Seattle, WA (Aug 13 2006)
David Litchfield
- Informix - Discovery, Attack and Defense (Aug 14 2006)
David Matousek
- Norton DLL faking via 'SuiteOwners' protection bypass Vulnerability (Aug 18 2006)
- ISS BlackICE PC Protection DLL faking of run-time linked libraries Vulnerability (Aug 01 2006)
dc_at_simpliciti.biz
- Simpliciti Locked Browser Jail Breakout Vulnerability (Aug 22 2006)
Denis Jedig
- Re: when will AV vendors fix this??? (Aug 05 2006)
Dennis Lubert
- Re: Gdiplus.dll division by 0 (Aug 01 2006)
Design Properly
- Lyris ListManager 8.95: Add arbitrary administrator to arbitrary list (Aug 30 2006)
dicomdk_at_gmail.com
- UPDATE vBulletin Version 3.5.4 exploit (Aug 14 2006)
dinoboff_at_hotmail.com
- Re: Vanilla CMS <= 1.0.1 (RootDirectory) Remote file inclusion Vuln. (Aug 05 2006)
dkabs_at_mobotix.com
- Vendor Statement: fixed Mobotix IP Network Cameras Multiple XSS bug (Aug 22 2006)
dm_at_securityfocus.com
- Re: SYM06-013 Symantec On-Demand Protection Encrypted Data Exposure (Aug 10 2006)
Dmitry Yu. Bolkhovityanov
- RE: [Full-disclosure] RE: when will AV vendors fix this??? (Aug 11 2006)
do_at_not.spam
- Re: Submit ( b2evolution<= 1.8 Remote File Include Vulnerabilities ) (Aug 29 2006)
dr.t3rr0r1st_at_yahoo.com
- Re: Re: discloser 0.0.4 Remote File Inclusion (with Exploit) (Aug 17 2006)
- discloser 0.0.4 Remote File Inclusion (with Exploit) (Aug 16 2006)
eEye Advisories
- [EEYEB-20060703] IBM eGatherer ActiveX Code Execution Vulnerability (Aug 16 2006)
- [EEYEB-20060719] McAfee Subscription Manager Stack Buffer Overflow (Aug 07 2006)
Eloy Paris
- Re: Cisco NAC Appliance Agent Installation Bypass Vulnerability (Aug 26 2006)
erdc_at_echo.or.id
- [ECHO_ADV_46$2006] ExBB v1.9.1 (exbb[home_path]) Multiple Remote File Inclusion (Aug 30 2006)
- [ECHO_ADV_45$2006] WEBinsta CMS 0.3.1 (templates_dir) Remote File Inclusion Vulnerability (Aug 13 2006)
- [ECHO_ADV_44$2006] PHP Simple Shop <= 2.0 (abs_path) Remote File Inclusion (Aug 06 2006)
- [ECHO_ADV_42$2006] BufferOverflow in Eremove Client (Aug 04 2006)
erne_at_ernealizm.com
- Joomla RFİ ( ERNE ) (Aug 17 2006)
EvilPacket
- Simpliciti Locked Browser Jail Breakout Vulnerability (Aug 01 2006)
exe_crack_at_hotmail.com
- XXS in learncenter.asp (Aug 30 2006)
exploitex_at_hotmail.com
- Tinyportal Shoutbox (Aug 05 2006)
farhadkey_at_yahoo.com
- [KAPDA::#56] - FREEKOT SQL Injection Vulnerability (Aug 30 2006)
Francisco Amato
- [ISR] - IBM eGatherer ActiveX Code Execution PoC (Aug 29 2006)
- [ISR] - Novell Groupwise Webaccess (Cross-Site Scripting) (Aug 08 2006)
Frank Rei�ner
- AW: AW: JetBox cms (search_function.php) Remote File Include (Aug 31 2006)
- AW: JetBox cms (search_function.php) Remote File Include (Aug 28 2006)
- AW: Virtual War v1.5.0 Remote File Include (vwar_root) (Aug 08 2006)
FreeBSD Security Advisories
- FreeBSD Security Advisory FreeBSD-SA-06:18.ppp [REVISED] (Aug 25 2006)
- FreeBSD Security Advisory FreeBSD-SA-06:18.ppp (Aug 23 2006)
Geoff Vass
- Google Picasa Listening on Port 80? (Aug 11 2006)
Gerardo Richarte
- Mailslot bug (MS06-035) vs non-Mailslot bug (CVE-2006-3942) (Aug 14 2006)
giacomo collini
- Re: Gdiplus.dll division by 0 (Aug 01 2006)
Gianstefano Monni
- Symantec Gateway Security DNS exploit (Aug 23 2006)
- Javascript software authentication brute force attack (Aug 03 2006)
Ginsu Rabbit
- Re: linksys WRT54g authentication bypass (Aug 08 2006)
- RE: linksys WRT54g authentication bypass (Aug 07 2006)
- Re: linksys WRT54g authentication bypass (Aug 07 2006)
- linksys WRT54g authentication bypass (Aug 05 2006)
gmdarkfig_at_gmail.com
- Membrepass v1.5 Php code execution, Xss, Sql Injection (Aug 31 2006)
- ezContents Version 2.0.3 Remote/Local File Inclusion, SQL Injection, XSS (Aug 30 2006)
gooorguss_at_gmail.com
- Re: RE: linksys WRT54g authentication bypass (Aug 11 2006)
gssincla_at_nnlsoftware.com
- Barracuda Vulnerability: Arbitrary File Disclosure [NNL-20060801-02] (Aug 01 2006)
- Barracuda Vulnerability: Hardcoded Password [NNL-20060801-01] (Aug 01 2006)
guant a
- Re: linksys WRT54g authentication bypass (Aug 07 2006)
Guillermo Marro
- Security contact from Critical Path Inc (Aug 14 2006)
h1kari_at_toorcon.org
- ToorCon 8 Call for Papers Closing Tomorrow & Workshops/Seminars Added (Aug 17 2006)
h4ck3riran_at_yahoo.com
- Submit ( ToendaCMS<= ( Remote File Include Vulnerabilities ) (Aug 29 2006)
- Submit ( b2evolution<= 1.8 Remote File Include Vulnerabilities ) (Aug 29 2006)
- ToendaCMS <= 1.0.3 -(tcms_administer_site) Remote File Include (Aug 20 2006)
heintz_at_hotmail.com
- php local buffer underflow could lead to arbitary code execution (Aug 04 2006)
HeLiOsZ RooT
- Dragonfly CMS 9.0.6.1 and prior XSS (Aug 09 2006)
- CivicSpace Version 0.8.5 HTML injection (Aug 08 2006)
Henrik Stoerner
- Hobbit monitor security bugfix release - 4.1.2p2 (Aug 02 2006)
Henry Jensen
- Re: [SECURITY] [DSA 1150-1] New shadow packages fix privilege escalation (Aug 20 2006)
Henry Sieff
- Re: Re: Cisco VPN Concentrator IKE resource exhaustion DoS Advisory (Aug 11 2006)
henry.sieff_at_gmail.com
- Re: Re: Cisco VPN Concentrator IKE resource exhaustion DoS Advisory (Aug 07 2006)
Hessamx_at_hessamx.net
- IwebNegar v1.1 Multiple vulnerabilities (Aug 29 2006)
- Ezportal/Ztml v1.0 Multiple vulnerabilities (Aug 29 2006)
hoangyenxinhdep_at_yahoo.com
- LinksCaffe no checker at admin (Aug 28 2006)
infocus
- MDaemon POP3 server remote buffer overflow (preauth) (Aug 22 2006)
istgha_at_rofonianx.net
- Re: Re: myBloggie <= 2.1.3 (mybloggie_root_path) Remote File Inclusion Vulnerability (Aug 12 2006)
Jacobo Avariento
- POC & exploit for Apache mod_rewrite off-by-one (Aug 20 2006)
Jakob Balle
- Secunia Research: AOL Insecure Default Directory Permissions (Aug 18 2006)
james_at_gmail.com
- Re: vbulletin 3.5.4 IE exploit xss (Aug 07 2006)
Jan de Groot
- Re: Mambo Component - Display MOSBot Manager Remote File Inclusion Vuln (Aug 21 2006)
Joe Feise
- Re: Cisco NAC Appliance Agent Installation Bypass Vulnerability (Aug 29 2006)
Joe Orton
- Re: CGI Script Source Code Disclosure Vulnerability in Apache for Windows (Aug 16 2006)
jon_at_jrock.us
- feedsplitter considered harmful (Aug 30 2006)
Juha-Matti Laurio
- New NT4/Windows botnet reported (Aug 31 2006)
- New malware names and updates to PowerPoint FAQ document (Aug 23 2006)
- Major updates in PowerPoint FAQ document - not a 0-day issue (Aug 22 2006)
- New PowerPoint 0-day and Trojan - FAQ document ready (Aug 20 2006)
- Re: Will Microsoft patch remarkable old Msjet40.dll issue? (Aug 08 2006)
- Will Microsoft patch remarkable old Msjet40.dll issue? (Aug 04 2006)
Justin M. Forbes
- rPSA-2006-0159-1 ImageMagick (Aug 29 2006)
- rPSA-2006-0158-1 tshark wireshark (Aug 24 2006)
- rPSA-2006-0157-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs (Aug 24 2006)
- rPSA-2006-0152-1 squirrelmail (Aug 11 2006)
- rPSA-2006-0150-1 krb5 krb5-server krb5-services krb5-test krb5-workstation (Aug 09 2006)
- rPSA-2006-0147-1 mysql mysql-bench mysql-server (Aug 07 2006)
- rPSA-2006-0143-1 gnupg (Aug 02 2006)
- rPSA-2006-0142-1 libtiff (Aug 01 2006)
K F (lists)
- DMA[2006-0801a] - 'Apple OSX fetchmail buffer overflow' (Aug 01 2006)
Kameron Gasso
- RE: Google Picasa Listening on Port 80? (Aug 14 2006)
Kenneth F. Belva
- InfoSec Paper: Creating Business Through Virtual Trust (Aug 29 2006)
king-hacker_at_hotmail.fr
- faille include in "VeriTECH" isreal (Aug 21 2006)
king_purba_at_yahoo.co.uk
- IMENDIO PLANNER REMOTE FILENAME FORMAT STRING VULNERABILITY (Aug 07 2006)
Krulewitch, Sean V
- Indiana University Security Advisory: Fuji Xerox Printing Systems (FXPS) print engine vulnerabilities (Aug 25 2006)
Kuon_at_Armorize_dot_com_at_no.this.domain
- YaPiG thanks_comment.php Cross-Site Scripting Vulnerability (Aug 25 2006)
Lance Seelbach
- RE: Re: Cisco VPN Concentrator IKE resource exhaustion DoS Advisory (Aug 11 2006)
Ludwig Nussel
- SUSE Security Announcement: clamav (SUSE-SA:2006:046) (Aug 09 2006)
Luigi Auriemma
- Multiple buffer-overflows in libmusicbrainz 2.1.2 (Aug 13 2006)
- Stack and heap overflows in MODPlug Tracker/OpenMPT 1.17.02.43 and libmodplug 0.8 (Aug 09 2006)
- Multiple buffer-overflows in AlsaPlayer 0.99.76 (Aug 09 2006)
- Multiple vulnerabilities in DConnect Daemon 0.7.0 (CVS 30 Jul 2006) (Aug 06 2006)
luny_at_youfucktard.com
- OZJournal v1.5 - XSS (Aug 02 2006)
Mailinglists Address
- Re: SolpotCrew Advisory #5 - modernbill ver 1.6 (DIR) Remote File Inclusion (Aug 03 2006)
Manh Tho
- ARES 2007: Call for workshop proposals, deadline Sept 10, 2006 (Aug 03 2006)
mannion_at_snet.net
- Re: Concurrency-related vulnerabilities in browsers - expect problems (Aug 17 2006)
Marc Maiffret
- EEYE: Internet Explorer Compressed Content URL Heap Overflow Vulnerability (Aug 24 2006)
- EEYE:ALERT: MS06-042 Related Internet Explorer 'Crash' is Exploitable (Aug 22 2006)
- RE: Mailslot bug (MS06-035) vs non-Mailslot bug (CVE-2006-3942) (Aug 17 2006)
- EEYE: research.eeye.com (Aug 01 2006)
Marc Ruef
- [scip_Advisory 2457] Horde Framework and Horde IMP /horde/imp/search.php cross site scripting (Aug 16 2006)
- [scip_Advisory 2456] Horde Framework and Horde IMP /index.php cross site referencing (Aug 16 2006)
Mariano Nu�ez Di Croce
- CYBSEC - Security Advisory: Microsoft Windows DHCP Client Service Remote Buffer Overflow (Aug 29 2006)
- CYBSEC - Security Pre-Advisory: SAP Internet Graphics Service (IGS) Remote Buffer Overflow (Aug 10 2006)
- CYBSEC - Security Pre-Advisory: SAP Internet Graphics Service (IGS) Remote Denial of Service (Aug 10 2006)
Marius Huse Jacobsen
- Re: when will AV vendors fix this??? (Aug 07 2006)
Martin Johns
- (somewhat) breaking the same-origin policy by undermining dns-pinning (Aug 14 2006)
Martin Pitt
- [USN-336-1] binutils vulnerability (Aug 16 2006)
- [USN-337-1] imagemagick vulnerability (Aug 16 2006)
- [USN-335-1] heartbeat vulnerability (Aug 16 2006)
- [USN-334-1] krb5 vulnerabilities (Aug 16 2006)
- [USN-333-1] libwmf vulnerability (Aug 09 2006)
- [USN-332-1] gnupg vulnerability (Aug 03 2006)
- [USN-331-1] Linux kernel vulnerabilities (Aug 03 2006)
- [USN-330-1] tiff vulnerabilities (Aug 02 2006)
- [USN-327-2] firefox regression (Aug 01 2006)
Martin Schulze
- [SECURITY] [DSA 1164-1] New sendmail packages fix denial of service (Aug 30 2006)
- [SECURITY] [DSA 1163-1] New gtetrinet packages fix arbitrary code execution (Aug 30 2006)
- [SECURITY] [DSA 1162-1] New libmusicbrainz packages fix arbitrary code execution (Aug 29 2006)
- [SECURITY] [DSA 1161-1] New Mozilla Firefox packages fix several vulnerabilities (Aug 29 2006)
- [SECURITY] [DSA 1160-1] New Mozilla packages fix several vulnerabilities (Aug 28 2006)
- [SECURITY] [DSA 1159-1] New Mozilla Thunderbird packages fix several problems (Aug 27 2006)
- [SECURITY] [DSA 1155-2] New sendmail packages fix denial of service (Aug 24 2006)
- [SECURITY] [DSA 1155-1] New sendmail packages fix denial of service (Aug 23 2006)
- [SECURITY] [DSA 1153-1] New ClamAV packages fix arbitrary code execution (Aug 18 2006)
- [SECURITY] [DSA 1152-1] New trac packages fix information disclosure (Aug 18 2006)
- [SECURITY] [DSA 1151-1] New heartbeat packages fix denial of service (Aug 15 2006)
- [SECURITY] [DSA 1150-1] New shadow packages fix privilege escalation (Aug 12 2006)
- [SECURITY] [DSA 1149-1] New ncompress packages fix potential code execution (Aug 09 2006)
- [SECURITY] [DSA 1146-1] New krb5 packages fix privilege escalation (Aug 08 2006)
- [SECURITY] [DSA 1143-1] New dhcp packages fix denial of service (Aug 04 2006)
- [SECURITY] [DSA 1142-1] New freeciv packages fix arbitrary code execution (Aug 03 2006)
- [SECURITY] [DSA 1141-1] New GnuPG2 packages fix denial of service (Aug 03 2006)
- [SECURITY] [DSA 1140-1] New GnuPG packages fix denial of service (Aug 03 2006)
- [SECURITY] [DSA 1135-1] New libtunepimp packages fix arbitrary code execution (Aug 01 2006)
- [SECURITY] [DSA 1136-1] New gpdf packages fix denial of service (Aug 02 2006)
- [SECURITY] [DSA 1137-1] New tiff packages fix several vulnerabilities (Aug 02 2006)
- [SECURITY] [DSA 1134-1] New Mozilla Thunderbird packages fix several vulnerabilities (Aug 01 2006)
- [SECURITY] [DSA 1130-1] New sitebar packages fix cross-site scripting (Aug 01 2006)
Martin Vuagnoux
- AUTODAFE: an Act of Software Torture [FUZZER] (Aug 04 2006)
matdhule_at_gmail.com
- Mambo/Joomla com_comprofiler Components <== v1.0 RC 2 Multiple Remote File Include Vulnerabilities (Aug 25 2006)
- Peoplebook Mambo Component <= v1.0 Remote File Include Vulnerabilities (Aug 14 2006)
- [ECHO_ADV_42$2006] PHP Live Helper <= 2.0 (abs_path) Remote File Inclusion (Aug 04 2006)
Matt Riddell (IT)
- Multiple Vulnerabilities in Asterisk 1.2.10 (Fixed in 1.2.11) (Aug 25 2006)
Matthew Hall
- Barracuda Spam Firewall: Administrator Level Remote Command Execution [ID-20060804-01] (Aug 04 2006)
- Re: Barracuda Vulnerability: Arbitrary File Disclosure [NNL-20060801-02] (Aug 03 2006)
Matthias Geerdsen
- [ GLSA 200608-13 ] ClamAV: Heap buffer overflow (Aug 08 2006)
- [ GLSA 200608-01 ] Apache: Off-by-one flaw in mod_rewrite (Aug 01 2006)
MC Iglo
- XSS in HLstats 1.34 (Aug 30 2006)
- Tons of SQL-injections and XSS in Eichhorn Portal and vendor page (Aug 20 2006)
mfoxhacker_at_gmail.com
- Virtual War v1.5.0 <= Sql Injection vuln. (Aug 09 2006)
- Compersus ASP shopping cart <= DataBase Downloading vuln. (Aug 09 2006)
- Vwar v1.5.0 <= Sql Injection and XSS vuln. (Aug 02 2006)
Michael Engert
- Re: [SM-ANNOUNCE] SquirrelMail 1.4.8 released - fixes variable overwriting attack (Aug 12 2006)
Michael Hale Ligh
- Compression Plus and Tumblweed EMF Stack Overflow (Aug 31 2006)
Michael Jennings
- Suggested Fix for CVE-2006-4299 (Aug 25 2006)
Michael Wojcik
- RE: [VulnWatch] Re: Concurrency-related vulnerabilities in browsers - expect problems (Aug 17 2006)
michael_at_koziarski.com
- Security Vulnerability in Ruby on Rails 1.1.x (Aug 10 2006)
Michal Zalewski
- Re: Concurrency-related vulnerabilities in browsers - expect problems (Aug 18 2006)
- Re: [VulnWatch] Re: Concurrency-related vulnerabilities in browsers - expect problems (Aug 17 2006)
- Re: Concurrency-related vulnerabilities in browsers - expect problems (Aug 15 2006)
- Concurrency-related vulnerabilities in browsers - expect problems (Aug 12 2006)
Miguel Valentin
- RE: linksys WRT54g authentication bypass (Aug 07 2006)
Mike Prosser
- SYM06-16 Symantec NetBackup PureDisk Remote Office Edition Elevation of Privilege (Aug 16 2006)
mikeiscool
- Re: JavaScript Lazy Authorization Forcer and Visited Link Scaner (Aug 15 2006)
mjw_at_cyberwart.com
- Possible Myspace Worm (Aug 26 2006)
Moritz Muehlenhoff
- [SECURITY] [DSA 1157-1] New ruby1.8 packages fix several vulnerabilities (Aug 27 2006)
- [SECURITY] [DSA 1158-1] New streamripper packages fix arbitrary code execution (Aug 27 2006)
- [SECURITY] [DSA 1156-1] New kdebase packages fix information disclosure (Aug 27 2006)
- [SECURITY] [DSA 1154-1] New squirrelmail packages fix information disclosure (Aug 20 2006)
- [SECURITY] [DSA 1147-1] New drupal packages fix cross-site scripting (Aug 09 2006)
- [SECURITY] [DSA 1148-1] New gallery packages fix several vulnerabilities (Aug 09 2006)
- [SECURITY] [DSA 1145-1] New freeradius packages fix several vulnerabilities (Aug 07 2006)
- [SECURITY] [DSA 1144-1] New chmlib packages fix denial of service (Aug 07 2006)
- [SECURITY] [DSA 1139-1] New ruby1.6 packages fix privilege escalation (Aug 03 2006)
- [SECURITY] [DSA 1138-1] New cfs packages fix denial of service (Aug 02 2006)
- [SECURITY] [DSA 1133-1] New mantis packages fix execution of arbitrary web script code (Aug 01 2006)
MosT3mR_at_hotmail.com
- local file include in PHP-Nuke (autohtml.php) (Aug 15 2006)
Mr.Niega_at_gmail.com
- ShockwaveFlash 9 (Stack overflow) (Aug 16 2006)
mr_at_simla.colostate.edu
- Re: Re: TSRT-06-02: Microsoft SRV.SYS Mailslot Ring0 Memory Corruption Vulnerability (Aug 14 2006)
Mustafa Can Bjorn IPEKCI
- Advisory: Integramod Portal <= 2.x File Inclusion Vulnerability (Aug 23 2006)
- Advisory: VistaBB <= 2.x Multiple File Inclusion Vulnerabilities (Aug 23 2006)
nareshhacker_at_gmail.com
- Re: Re: CGI Script Source Code Disclosure Vulnerability in Apache for Windows (Aug 17 2006)
naveed
- Re: Mailslot bug (MS06-035) vs non-Mailslot bug (CVE-2006-3942) (Aug 15 2006)
NGSSoftware Insight Security Research
- Multiple Arbitrary File Access (Write/Read) Vulnerabilities (Aug 14 2006)
- Multiple Buffer Overflow Vulnerabilities in Informix (Aug 14 2006)
- Multiple Password Exposures Flaws (Aug 14 2006)
- Unauthorized Database Creation Privilege on Informix (Aug 14 2006)
- Multiple Arbitrary Command Execution Vulnerabilities (Aug 14 2006)
- Arbitrary Library Loading in Informix (Aug 14 2006)
- SQLIDEBUG envariable overflow on Informix (Aug 14 2006)
- Error logging buffer overflow in Informix (Aug 14 2006)
- Informix Long Username Buffer Overflow Vulnerability (Aug 14 2006)
Nicholas Knight
- Re: linksys WRT54g authentication bypass (Aug 07 2006)
night_warrior-_at_hotmail.com
- AlstraSoft Video Share Enterprise Remote File Include Vulnerability (Aug 26 2006)
- DieselPay İndex.php Cross-Site Scripting Vulnerability (Aug 21 2006)
- Smart Traffic Remote File Include Vulnerability (Aug 21 2006)
- Diesel Paid Mail getad.php Cross-Site Scripting Vulnerability (Aug 21 2006)
- Diesel Job Site forgot.php Cross-Site Scripting (Aug 21 2006)
Nikolay Kubarelov
- Re: [Full-disclosure] Attacking the local LAN via XSS (Aug 07 2006)
NNP
- Opera 9 Remote Denial of Service (Aug 13 2006)
noname_at_nodomain.com
- Re: Startpage <= 1.0 (cfgLanguage) Remote File Inclusion Vulnerability (Aug 11 2006)
- Re: Mafia Moblog <= 6 (pathtotemplate) Remote File Inclusion Vulnerability (Aug 11 2006)
nop
- [XSec-06-10]: Internet Explorer (daxctle.ocx) Heap Overflow Vulnerability (Aug 27 2006)
- [XSec-06-09]: Internet Explorer Multiple COM Objects Color Property DoS Vulnerability (Aug 21 2006)
- [XSec-06-08]: Windows 2000 Multiple COM Object Instantiation Vulnerability (Aug 21 2006)
- [XSec-06-07]: Visual Studio 6.0 Multiple COM Object Instantiation Vulnerability (Aug 17 2006)
- [XSec-06-06]: Windows 2003 (tsuserex.dll) COM Object Instantiation Vulnerability (Aug 17 2006)
- [XSec-06-04]: Internet Explorer (msoe.dll) COM Object Instantiation Vulnerability (Aug 15 2006)
- [XSec-06-03]: Internet Explorer (CHTSKDIC.DLL) COM Object Instantiation Vulnerability (Aug 15 2006)
- [XSec-06-02]: Internet Explorer (IMSKDIC.DLL) COM Object Instantiation Vulnerability (Aug 15 2006)
NSFOCUS Security Team
- NSFOCUS SA2006-08 : Microsoft IE6 urlmon.dll Long URL Buffer Overflow Vulnerability (Aug 24 2006)
nukedx_at_nukedx.com
- Re: myBloggie <= 2.1.3 (mybloggie_root_path) Remote File Inclusion Vulnerability (Aug 12 2006)
Omid
- Sql injection in Xoops (Aug 25 2006)
- Sql injection in Mambo & Joomla (Aug 25 2006)
omnipresent_at_email.it
- Simple one-file GuestBook 1.0 (Aug 09 2006)
Outlaw_at_aria-security.net
- Mambo Component - EstateAgent Remote File Inclusion (Aug 19 2006)
- Mambo Component - Display MOSBot Manager Remote File Inclusion Vuln (Aug 19 2006)
- Mambo Component - Display MOSBot Manager Remote File Inclusion Vuln (Aug 19 2006)
- Mambo CatalogShop Remote File Inclusion (Aug 19 2006)
- Ako Comments (mod) Remote File Inclusion (Aug 19 2006)
- Modification For OpenSEF Remote file Inclusion (Aug 18 2006)
- mambo-phphop Product Scroller Module R.F.I (Aug 17 2006)
- mtg_myhomepage Component For Mambo R.F.I (Aug 17 2006)
- fusionnews 3,7 Remote File Inclusion (Aug 15 2006)
- wheatblog ُSession.php Remote File Inclusion (Aug 11 2006)
- Yabb XSS (Aug 09 2006)
- CMSimple Cross Site Scripting (Aug 03 2006)
Paul Schmehl
- Re: [Full-disclosure] Re: when will AV vendors fix this??? (Aug 14 2006)
- Re: [Full-disclosure] RE: when will AV vendors fix this??? (Aug 14 2006)
- Re: when will AV vendors fix this??? (Aug 07 2006)
pdp (architect)
- JavaScript Lazy Authorization Forcer and Visited Link Scaner (Aug 15 2006)
- JavaScript get Internal Address (thanks to DanBUK) (Aug 12 2006)
- XSSing the Lan 3 (web trojans.. not a new idea) (Aug 08 2006)
- Re: Re[2]: [Full-disclosure] Attacking the local LAN via XSS (Aug 04 2006)
- Re: [Full-disclosure] Attacking the local LAN via XSS (Aug 04 2006)
- Attacking the local LAN via XSS (Aug 03 2006)
- JavaScript port scanning (Aug 01 2006)
pedantic1_at_gmail.com
- MS Terminal Server application session breakout (Aug 16 2006)
pete_at_petefinnigan.com
- unwrapping PL/SQL (Aug 08 2006)
Philip M. Gollucci
- Re: [Announcement] Apache HTTP Server 2.2.3 (2.0.59, 1.3.37) Released (Aug 03 2006)
philipp.niedziela_at_gmx.de
- Sonium Enterprise Adressbook Version 0.2 (folder) RFI (Aug 18 2006)
- WEBInsta Mailing list manager (cabsolute_path) 1.3e RFI (Aug 10 2006)
- Cwfm <= 0.9.1 (Language) Remote File Inclusion Vulnerability (Aug 08 2006)
- NEWSolved Lite v1.9.2 (abs_path) Remote File Inclusion (Aug 06 2006)
- phpAutoMembersArea 3.2.5 ($installed_config_file) Remote File Inclusion (Aug 04 2006)
- ME Download System 1.3 Remote File Inclusion (Aug 03 2006)
- TSEP 0.9.4.2 <= Remote File Inclusion (Aug 01 2006)
piiiiiii pppiiiiiiii
- BlogHoster v2.2 Post Comment Html Injection (Aug 08 2006)
- Archangel Weblog 0.90.02 and prior Multiple HTML injections (Aug 08 2006)
- simplog 0.9.3 and prior XSS (Aug 06 2006)
- blur6ex 0.3 Comment title HTML inyection vuln. (Aug 06 2006)
pingywon
- Re: Barracuda Vulnerability: Hardcoded Password [NNL-20060801-01] (Aug 02 2006)
Pr070n_at_gmail.com
- Re: Re: BlackBoard Multiple Vulnerabilities (XSS) (Aug 27 2006)
- BlackBoard Multiple Vulnerabilities (XSS) (Aug 22 2006)
pr0t0n_at_busted.com
- Re: BlackBoard Multiple Vulnerabilities (XSS) (Aug 23 2006)
preth00nker_at_gmail.com
- DoS 2wire Gateway (Aug 19 2006)
- Multiple xxs cPanel 10 (Aug 15 2006)
Pretorius, Wynand (ZA - Johannesburg)
- RE: Symantec Gateway Security DNS exploit (Aug 23 2006)
public_at_frank4dd.com
- Re: TSRT-06-02: Microsoft SRV.SYS Mailslot Ring0 Memory Corruption Vulnerability (Aug 14 2006)
pucik_at_overflow.pl
- [Overflow.pl] Clam AntiVirus Win32-UPX Heap Overflow (Aug 09 2006)
qode_at_qode.org
- Nokia Browser Crash (Aug 11 2006)
Raphael Marichez
- [ GLSA 200608-28 ] PHP: Arbitary code execution (Aug 29 2006)
- [ GLSA 200608-26 ] Wireshark: Multiple vulnerabilities (Aug 29 2006)
- [ GLSA 200608-27 ] Motor: Execution of arbitrary code (Aug 29 2006)
- [ GLSA 200608-25 ] X.org and some X.org libraries: Local privilege escalations (Aug 28 2006)
- [ GLSA 200608-24 ] AlsaPlayer: Multiple buffer overflows (Aug 26 2006)
- [ GLSA 200608-22 ] fbida: Arbitrary command execution (Aug 23 2006)
- [ GLSA 200608-21 ] Heimdal: Multiple local privilege escalation vulnerabilities (Aug 23 2006)
- [ GLSA 200608-20 ] Ruby on Rails: Several vulnerabilities (Aug 14 2006)
- UPDATE: [ GLSA 200511-12 ] Scorched 3D: Multiple vulnerabilities (Aug 11 2006)
- [ GLSA 200608-19 ] WordPress: Privilege escalation (Aug 10 2006)
- [ GLSA 200608-15 ] MIT Kerberos 5: Multiple local privilege escalation (test Falco for security@) (Aug 10 2006)
ratboy727_at_gmail.com
- XChat <= 2.6.4-1 (win version) Remote Denial of Service Exploit (php) (Aug 09 2006)
Redworm_at_MaiL.Com
- MyBB Html Injection ( XSS ) (Aug 25 2006)
research_at_symantec.com
- SYMSA-2006-009 (Aug 28 2006)
Reversemode
- Re: Microsoft Help (WINHLP32.EXE) - Multiple Remote Code Execution and Denial Of Service Vulnerabilities (Aug 12 2006)
rgod_at_autistici.org
- e107 <= 0.75 GLOBALS[] overwrite/Zend_Hash_Del_Key_Or_Index remote commands execution (Aug 29 2006)
- Simple Machines Forum <=1.1RC2 unset() vulnerabilities (Aug 22 2006)
- CubeCart <= 3.0.11 SQL injection & cross site scripting (Aug 16 2006)
- XMB <= 1.9.6 Final basename()/'langfilenew' arbitrary local inclusion / remote commands execution (Aug 13 2006)
- MyBloggie <= 2.1.4 trackback.php SQL injection / admin credentials disclosure (Aug 05 2006)
- SendCard <= 3.4.0 unauthorized administrative access / remote commands execution (Aug 03 2006)
Richard Lindberg
- Registration Now Open!: Security OPUS Infosec Conference - Oct 2-5 2006 - San Francisco, CA (Aug 17 2006)
Rodrigo Barbosa
- Re: linksys WRT54g authentication bypass (Aug 07 2006)
Rodrigo Rubira Branco (BSDaemon)
- Hackers to Hackers Conference III - Call for Papers (Aug 30 2006)
Roger A. Grimes
- RE: Barracuda Vulnerability: Hardcoded Password [NNL-20060801-01] (Aug 02 2006)
root
- [XSec-06-05]: VMware 5.5.1 for Windows arbitrary partition table delete issue. (Aug 16 2006)
root_at_localhost.com
- Netgear FVG318 is vunerable to DOS attack (Aug 10 2006)
Roy Hills
- Re: Cisco VPN Concentrator IKE resource exhaustion DoS Advisory (Aug 02 2006)
rPath Update Announcements
- rPSA-2006-0162-1 kernel (Aug 31 2006)
- rPSA-2006-0161-1 libmusicbrainz (Aug 30 2006)
s10242006_at_yahoo.com
- osCommerce < 2.2 Milestone 2 060817 POC Exploit (Aug 30 2006)
saudi.unix_at_hotmail.com
- powergap <= (s0x.php) Remote File Inclusion (Aug 17 2006)
ScatterChat Advisories
- ScatterChat Advisory 2006-01: Cryptanalytic Attack Vulnerability (Aug 11 2006)
Schanulleke
- Re: [Full-disclosure] Attacking the local LAN via XSS (Aug 04 2006)
scott_at_vbulletin.com
- Re: UPDATE vBulletin Version 3.5.4 exploit (Aug 18 2006)
Sean Warnock
- Security Contact (Aug 07 2006)
Secunia Research
- Secunia Research: PC Tools AntiVirus Insecure Default Directory Permissions (Aug 03 2006)
- Secunia Research: Jetbox Multiple Vulnerabilities (Aug 02 2006)
Secure
- (Security Advisory) SYM06-014 Symantec Backup Exec Internal RPC Overflow (Aug 11 2006)
secure_at_symantec.com
- Re: SYM06-16 Symantec NetBackup PureDisk Remote Office Edition Elevation of Privilege (Aug 17 2006)
- SYM06-013 Symantec On-Demand Protection Encrypted Data Exposure (Aug 01 2006)
security-alert_at_hp.com
- [security bulletin] HPSBUX02139 SSRT5981 rev.1 - HP-UX Running the LP Subsystem, remote Denial of Service (DoS) (Aug 17 2006)
- [security bulletin] HPSBUX02115 SSRT061077 rev.2 - HP-UX running Support Tools Manager (xstm, cstm, stm) Local Denial of Service (DoS) (Aug 16 2006)
- [security bulletin] HPSBUX02141 SSRT51153 rev.1 - HP-UX in Trusted mode, Local Denial of Service (DoS) (Aug 15 2006)
- HPSBMA02138 SSRT061184 rev.1 - HP OpenView Storage Data Protector, Remote Arbitrary Command Execution (Aug 14 2006)
- [security bulletin] HPSBUX02124 SSRT061159 rev.2 - HP-UX Sendmail MIME Remote Denial of Service (DoS) (Aug 11 2006)
- [security bulletin] HPSBUX02108 SSRT061133 rev.14 - HP-UX Running Sendmail, Remote Execution of Arbitrary Code (Aug 11 2006)
- [security bulletin] HPSBUX02137 SSRT051024 rev.1 - HP-UX Running Xserver Local Execution of Arbitrary Code, Privilege Elevation (Aug 03 2006)
- [security bulletin] HPSBUX02087 SSRT4728 rev.3 - HP-UX running TCP/IP Remote Denial of Service (DoS) (Aug 02 2006)
- [security bulletin] HPSBGN02136 SSRT061173 rev.1 - ProCurve Series 3500yl, 6200yl, and 5400zl Switches Running Software Prior to K.11.33 Remote Denial of Service (DoS) (Aug 02 2006)
- [security bulletin] HPSBUX02124 SSRT061159 rev.1 - HP-UX Sendmail MIME Remote Denial of Service (DoS) (Aug 02 2006)
- [security bulletin] HPSBUX02108 SSRT061133 rev.13 - HP-UX Running Sendmail, Remote Execution of Arbitrary Code (Aug 02 2006)
security_at_mandriva.com
- [ MDKSA-2006:158 ] - Updated MySQL packages fix DoS vuln, initscript bug (Aug 31 2006)
- [ MDKSA-2006:156 ] - Updated sendmail packages fix DoS vulnerabilities (Aug 30 2006)
- [ MDKSA-2006:157 ] - Updated musicbrainz packages fix buffer overflow vulnerabilities (Aug 30 2006)
- [ MDKSA-2006:154 ] - Updated lesstif packages fix potential local root vulnerability (Aug 28 2006)
- [ MDKSA-2006:153 ] - Updated binutils packages fix multiple vulnerabilities (Aug 28 2006)
- [ MDKSA-2006:155 ] - Updated ImageMagick packages fix vulnerabilities (Aug 29 2006)
- [ MDKSA-2006:152 ] - Updated wireshark packages fix multiple vulnerabilities (Aug 25 2006)
- [ MDKSA-2006:151 ] - Updated kernel packages fix multiple vulnerabilities (Aug 25 2006)
- [ MDKSA-2006:150 ] - Updated kernel packages fix multiple vulnerabilities (Aug 25 2006)
- [ MDKSA-2006:148 ] - Updated xorg-x11 packages fix vulnerabilities (Aug 24 2006)
- [ MDKSA-2006:149 ] - Updated MySQL packages fix user privilege vulnerabilities (Aug 24 2006)
- [ MDKSA-2006:147 ] - Updated squirrelmail packages fix vulnerabilities (Aug 22 2006)
- [ MDKSA-2006:146 ] - Updated Thunderbird packages fix multiple vulnerabilities (Aug 21 2006)
- [ MDKSA-2006:145 ] - Updated Firefox packages fix multiple vulnerabilities (Aug 21 2006)
- [ MDKSA-2006:144 ] - Updated php packages fix vulnerability (Aug 21 2006)
- [ MDKSA-2006:143-1 ] - Updated Firefox packages fix multiple vulnerabilities (Aug 17 2006)
- [ MDKSA-2006:143 ] - Updated Firefox packages fix multiple vulnerabilities (Aug 16 2006)
- [ MDKSA-2006:141 ] - Updated gnupg packages fix vulnerability (Aug 14 2006)
- [ MDKSA-2006:142 ] - Updated heartbeat packages fix vulnerability (Aug 14 2006)
- [ MDKSA-2006:140 ] - Updated ncompress packages fix vulnerability (Aug 09 2006)
- [ MDKSA-2006:139 ] - Updated krb5 packages fix local privilege escalation vulnerability (Aug 09 2006)
- [ MDKSA-2006:138 ] - Updated clamav packages fix vulnerability (Aug 08 2006)
- [ MDKSA-2006:137 ] - Updated libtiff packages fix multiple vulnerabilities (Aug 01 2006)
- [ MDKSA-2006:136 ] - Updated kdegraphics packages fix multiple libtiff vulnerabilities (Aug 01 2006)
- [ MDKSA-2006:135 ] - Updated freeciv packages fix DoS vulnerabilities (Jul 31 2006)
securityfocus_at_draijer.org
- Re: Startpage <= 1.0 (cfgLanguage) Remote File Inclusion Vulnerability (Aug 20 2006)
segatom_at_yahoo.it
- Re: flatnuke <= 2.5.7 arbitrary php file upload (Aug 07 2006)
sehato_at_yandex.ru
- InfanView 3.98 (with plugins) - Access violation at processing images CUR files (Aug 12 2006)
- InfanView 3.98 (with plugins) - Access violation at processing images ANI files (Aug 09 2006)
seppi_at_seppig.de
- Local privilege Escalation in SmartLine DeviceLock 5.73 (Aug 13 2006)
sh3ll_at_sh3ll.ir
- myEvent <= 1.4 Multiple Remote File Include Vulnerabilities (Aug 12 2006)
- Calendarix <= 0.7 (calpath) Remote File Inclusion Vulnerability (Aug 12 2006)
- Startpage <= 1.0 (cfgLanguage) Remote File Inclusion Vulnerability (Aug 10 2006)
- miniBloggie <= 1.0 (fname) Remote File Inclusion Vulnerability (Aug 10 2006)
- myBloggie <= 2.1.3 (mybloggie_root_path) Remote File Inclusion Vulnerability (Aug 09 2006)
- Mafia Moblog <= 6 (pathtotemplate) Remote File Inclusion Vulnerability (Aug 10 2006)
- phpPrintAnalyzer <= 1.1 (rep_par_rapport_racine) Remote File Inclusion Vulnerability (Aug 07 2006)
SHiKaA-_at_hotmail.com
- Pheap CMS<= (lpref) Remote File Inclusion Exploit (Aug 30 2006)
simo64_at_morx.org
- PHPMyRing <= 4.2.0 (view_com.php) Remote SQL Injection (Aug 09 2006)
- SAPID CMS remote File Inclusion vulnerabilities (Aug 07 2006)
Sowhat
- Microsoft PowerPoint Malformed Record Memory Corruption (Aug 08 2006)
SPI Labs
- Announcement: Feed Injection in Web 2.0: Hacking RSS and Atom Feed Implementations [Whitepaper] (Aug 07 2006)
ss_team
- Wordpress WP-DB Backup Plugin Directory Traversal Vulnerability (Aug 14 2006)
Stefan Cornelius
- [ GLSA 200608-02 ] Mozilla SeaMonkey: Multiple vulnerabilities (Aug 03 2006)
Stefan Esser
- Advisory 05/2006: Zend Platform Multiple Remote Vulnerabilities (Aug 24 2006)
- PHP: Zend_Hash_Del_Key_Or_Index Vulnerability (Aug 06 2006)
Stefan Friedli
- Content Management Framework "G3" - XSS Vulnerability in Search Function (Aug 02 2006)
Stefan_at_dakotacom.net
- XSS in Vbulletin 3.6.0 in IE 0nly (Aug 03 2006)
- vbulletin 3.5.4 IE exploit xss (Aug 03 2006)
Steve Kemp
- [SECURITY] [DSA 1131-1] New apache package fix buffer overflow (Aug 01 2006)
- [SECURITY] [DSA 1132-1] New apache2 packages fix buffer overflow (Aug 01 2006)
Steve VanDevender
- Re: [Announcement] Apache HTTP Server 2.2.3 (2.0.59, 1.3.37) Released (Aug 03 2006)
Steven M. Christey
- Re: JetBox cms (search_function.php) Remote File Include (Aug 30 2006)
- Re: AW: JetBox cms (search_function.php) Remote File Include (Aug 29 2006)
- Re: [VulnWatch] Re: Concurrency-related vulnerabilities in browsers - expect problems (Aug 17 2006)
- Re: Calendarix <= 0.7 (calpath) Remote File Inclusion Vulnerability (Aug 14 2006)
stormhacker_at_hotmail.com
- CuteNews 1.3.* Remote File Include Vulnerability (Aug 25 2006)
Sune Kloppenborg Jeppesen
- [ GLSA 200608-23 ] Heartbeat: Denial of Service (Aug 24 2006)
- [ GLSA 200608-16 ] Warzone 2100 Resurrection: Multiple buffer overflows (Aug 10 2006)
- [ GLSA 200608-18 ] Net::Server: Format string vulnerability (Aug 10 2006)
- [ GLSA 200608-17 ] libwmf: Buffer overflow vulnerability (Aug 10 2006)
- ERRATA: [ GLSA 200608-08 ] GnuPG: Integer overflow vulnerability (Aug 08 2006)
- [ GLSA 200608-14 ] DUMB: Heap buffer overflow (Aug 08 2006)
- [ GLSA 200608-12 ] x11vnc: Authentication bypass in included LibVNCServer code (Aug 07 2006)
- [ GLSA 200608-11 ] Webmin, Usermin: File Disclosure (Aug 06 2006)
- [ GLSA 200608-10 ] pike: SQL injection vulnerability (Aug 06 2006)
- [ GLSA 200608-08 ] GnuPG: Integer overflow vulnerability (Aug 05 2006)
- [ GLSA 200608-07 ] libTIFF: Multiple vulnerabilities (Aug 04 2006)
- [ GLSA 200608-06 ] Courier MTA: Denial of Service vulnerability (Aug 03 2006)
- [ GLSA 200608-05 ] LibVNCServer: Authentication bypass (Aug 03 2006)
support_at_paessler.com
- Re: Directory Traversal vulnerability in IPCheck Monitor Server (Aug 24 2006)
susam.pal_at_gmail.com
- CGI Script Source Code Disclosure Vulnerability in Apache for Windows (Aug 09 2006)
Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
- Re: TSRT-06-02: Microsoft SRV.SYS Mailslot Ring0 Memory Corruption Vulnerability (Aug 14 2006)
Tamriel
- GeheimChaos <= 0.5 Multiple SQL Injection Vulnerabilities (Aug 03 2006)
- CounterChaos <= 0.48c SQL Injection Vulnerability (Aug 03 2006)
- GaesteChaos <= 0.2 Multiple Vulnerabilities (Aug 03 2006)
tbratusa_at_gmail.com
- Kaspersky Anti-Hacker personal firewall unstealthy stealth mode (Aug 12 2006)
TeamXMM Consulting, Inc.
- RE: linksys WRT54g authentication bypass (Aug 11 2006)
The Cute Group
- Bugtraq ID: 18402 (Aug 23 2006)
Thierry Carrez
- [ GLSA 200608-04 ] Mozilla Thunderbird: Multiple vulnerabilities (Aug 03 2006)
- [ GLSA 200608-03 ] Mozilla Firefox: Multiple vulnerabilities (Aug 03 2006)
Thierry Zoller
- Re[2]: [Full-disclosure] Attacking the local LAN via XSS (Aug 04 2006)
- Re: [Full-disclosure] Attacking the local LAN via XSS (Aug 04 2006)
Thijs Kinkhorst
- SquirrelMail 1.4.8 released - fixes variable overwriting attack (Aug 11 2006)
Thomas Biege
- SUSE Security Announcement: libtiff (SUSE-SA:2006:044) (Aug 01 2006)
- SUSE Security Announcement: freetype2 (SUSE-SA:2006:045) (Aug 01 2006)
Thomas D.
- RE: [Full-disclosure] RE: when will AV vendors fix this??? (Aug 07 2006)
- RE: when will AV vendors fix this??? (Aug 07 2006)
Thor (Hammer of God)
- Re: MS Terminal Server application session breakout (Aug 16 2006)
tinywebgallery_at_mdempfle.de
- Re: TinyWebGallery v1.5 ( image ) Remote Include Vulnerability (Aug 16 2006)
Tom Yu
- UPDATED: MITKRB5-SA-2006-001: multiple local privilege escalation vulnerabilities (Aug 16 2006)
- MITKRB-SA-2006-001: multiple local privilege escalation vulnerabilities (Aug 08 2006)
tomas
- (exploit) firefox 1.5.0.6 linux DoS (Aug 22 2006)
Tony Maupin
- RE: Security contact from Critical Path Inc (Aug 14 2006)
tr_zindan_at_wolfsecurity.org
- phNNTP <= 1.3 (article-raw.php) Remote File Include Vulnerability (Aug 08 2006)
- NewsLetter v3.5 <= (NL_PATH) Remote File Inclusion Exploit (Aug 01 2006)
Trustix Security Advisor
- TSLSA-2006-0048 - multi (Aug 25 2006)
- TSLSA-2006-0046 - multi (Aug 11 2006)
- TSLSA-2006-0044 - multi (Aug 04 2006)
try_og_at_hotmail.com
- XSS Vulnerability in FTD v3.7.3 (Aug 05 2006)
TSRT_at_3com.com
- TSRT-06-08: Microsoft Internet Help COM Object Memory Corruption Vulnerability (Aug 08 2006)
- TSRT-06-09: Microsoft DirectAnimation COM Object Memory Corruption Vulnerability (Aug 08 2006)
- TSRT-06-10: Microsoft HLINK.DLL Hyperlink Object Library Buffer Overflow Vulnerability (Aug 08 2006)
- TSRT-06-07: eIQnetworks Enterprise Security Analyzer Monitoring Agent Buffer Overflow Vulnerabilities (Aug 08 2006)
- TSRT-06-05: Computer Associates eTrust AntiVirus WebScan Automatic Update Code Execution Vulnerability (Aug 07 2006)
- TSRT-06-06: Computer Associates eTrust AntiVirus WebScan Manifest Processing Buffer Overflow Vulnerability (Aug 07 2006)
TTG
- TTG0601 - Alt-N WebAdmin Multiple Vulnerabilities (Aug 21 2006)
tugra_at_icqmail.com
- MojoScripts' xss vulnerable (Aug 08 2006)
Udo Sprotte
- Re: Cisco NAC Appliance Agent Installation Bypass Vulnerability (Aug 26 2006)
Uwe Hermann
- [DRUPAL-SA-2006-011] Drupal 4.7.3 / 4.6.9 fixes XSS issue (Aug 03 2006)
vampire_chiristof_at_yahoo.com
- Bigace 1.8.2 (GLOBALS) Remote File Inclusion (Aug 26 2006)
- OneOrZero Helpdesk V1.6.4.1 susceptible to SQL injection and XSS (Aug 15 2006)
- otopholder 1.8 suffers from a local file inclusion,XSS and directory listing vuln (Aug 15 2006)
- Koobi Pro CMS 5.6 SQL injection & XSS (Aug 15 2006)
- Virtual War v1.5.0 SQL injection and XSS (Aug 14 2006)
- BlaBla 4U XSS Vulnerabilite (Aug 14 2006)
Vicente Perez
- Latinchat Denial Of Service (Aug 08 2006)
Victor Sudakov
- unauthorized VNC access in AK-Systems Windows Terminals (Aug 22 2006)
vijay_at_nairvijay.com
- osDate 1.1.8 - Multiple HTML Injection Vulnerability - fixed (Aug 12 2006)
VMware Security Team
- VMSA-2006-0004 Cross site scripting vulnerability and other fixes (Jul 31 2006)
Volker Tanger
- Re: Yabb XSS - or NOT (Aug 13 2006)
vulnpost-remove_at_vuln.sg
- [vuln.sg] Lhaz LHA Long Filename Buffer Overflow Vulnerability (Aug 06 2006)
- [vuln.sg] Lhaplus LHA Extended Header Handling Buffer Overflow Vulnerability (Jul 31 2006)
William A. Rowe, Jr.
- Re: [Announcement] Apache HTTP Server 2.2.3 (2.0.59, 1.3.37) Released (Aug 03 2006)
Williams, James K
- CAID 34509 - CA eTrust Antivirus WebScan vulnerabilities (Aug 04 2006)
wiziwig_at_comcast.net
- Re: Another YabbSE Remote Code Execution Vulnerability (Aug 26 2006)
wsip_at_unatek.com
- World Summit on Intrusion Prevention (Aug 17 2006)
x0r0n_at_hotmail.com
- Portail PHP mod_phpalbum 2.15 Modules Remote File Inclusion (Aug 29 2006)
- pSlash v0.7 (lvc_include_dir) Remote Include Vulnerability (Aug 23 2006)
- Mambo com_cropimage 1.0 Component Remote Include Vulnerability (Aug 19 2006)
- Mambo jim Component Remote Include Vulnerability (Aug 17 2006)
- Joomla Webring Component (component_dir) Remote File Inclusion Vulnerabilities (Aug 13 2006)
- TinyWebGallery v1.5 ( image ) Remote Include Vulnerability (Aug 09 2006)
- PgMarket 2.2.3 (CFG[libdir]) Remote File Inclusion Vulnerabilities (Aug 09 2006)
- docpile:we v0.2.2 (INIT_PATH) Remote File Inclusion Vulnerability (Aug 08 2006)
- Visual Events Calendar v1.1 (cfg_dir) Remote Inclusion Vulnerability (Aug 07 2006)
- ZoneX 1.0.3 - Publishers Gold Edition Remote File Inclusion Vulnerability (Aug 03 2006)
- SaveWeb Portal 3.4 <- (SITE_Path) Remote File Inclusion Vulnerability (Aug 02 2006)
xvml_at_karlrunge.com
- Re: [ GLSA 200608-12 ] x11vnc: Authentication bypass in included LibVNCServer code (Aug 10 2006)
Yves Goergen
- Re: [SM-ANNOUNCE] SquirrelMail 1.4.8 released - fixes variable overwriting attack (Aug 11 2006)
zdi-disclosures_at_3com.com
- ZDI-06-027: Microsoft Internet Explorer CSS Class Ordering Memory Corruption Vulnerability (Aug 08 2006)
- ZDI-06-026: Microsoft Internet Explorer Multiple CSS Imports Memory Corruption Vulnerability (Aug 08 2006)
ZeberuS_at_ZeberuS.Com
- WoltLab Burning Board 2.3.5(WBB) in XSS (Aug 20 2006)