Bugtraq: by thread

Bugtraq: by thread

569 messages starting Aug 01 06 and ending Aug 31 06
Date index | Thread index | Author index

[ GLSA 200608-01 ] Apache: Off-by-one flaw in mod_rewrite Matthias Geerdsen (Aug 01)
NewsLetter v3.5 <= (NL_PATH) Remote File Inclusion Exploit tr_zindan (Aug 01)
[Kurdish Security # 16 ] newsReporter v1.0 Remote Command Execution botan (Aug 01)
[Kurdish Security # 17 ] GuestBook 3.5 Remote Command Execution botan (Aug 01)
[Kurdish Security # 18 ] FAQ Script Remote Command Execution botan (Aug 01)
[Kurdish Security # 19 ] FileManager Remote Command Execution botan (Aug 01)
[Kurdish Security # 20 ] Quickie Remote Command Execution botan (Aug 01)
[Kurdish Security # 21] ShoutBox v4.4 Remote Command Execution botan (Aug 01)
[SECURITY] [DSA 1130-1] New sitebar packages fix cross-site scripting Martin Schulze (Aug 01)
WoW Roster <= 1.5.x Remote File Include (hsList.php) AG Spider (Aug 01)
- <Possible follow-ups>
- WoW Roster <= 1.5.x Remote File Include (hsList.php) AG Spider (Aug 01)
Re: Gdiplus.dll division by 0 giacomo collini (Aug 01)
- Re: Gdiplus.dll division by 0 Dennis Lubert (Aug 02)
[vuln.sg] Lhaplus LHA Extended Header Handling Buffer Overflow Vulnerability vulnpost-remove (Aug 01)
[ MDKSA-2006:135 ] - Updated freeciv packages fix DoS vulnerabilities security (Aug 01)
VMSA-2006-0004 Cross site scripting vulnerability and other fixes VMware Security Team (Aug 01)
[USN-327-2] firefox regression Martin Pitt (Aug 01)
TSEP 0.9.4.2 <= Remote File Inclusion philipp . niedziela (Aug 01)
ISS BlackICE PC Protection DLL faking of run-time linked libraries Vulnerability David Matousek (Aug 01)
[SECURITY] [DSA 1132-1] New apache2 packages fix buffer overflow Steve Kemp (Aug 01)
[SECURITY] [DSA 1131-1] New apache package fix buffer overflow Steve Kemp (Aug 01)
SUSE Security Announcement: freetype2 (SUSE-SA:2006:045) Thomas Biege (Aug 01)
SUSE Security Announcement: libtiff (SUSE-SA:2006:044) Thomas Biege (Aug 01)
[ MDKSA-2006:136 ] - Updated kdegraphics packages fix multiple libtiff vulnerabilities security (Aug 01)
SYM06-013 Symantec On-Demand Protection Encrypted Data Exposure secure (Aug 01)
- Re: SYM06-013 Symantec On-Demand Protection Encrypted Data Exposure Chris Wysopal (Aug 02)
  - Re: SYM06-013 Symantec On-Demand Protection Encrypted Data Exposure dm (Aug 11)
Barracuda Vulnerability: Hardcoded Password [NNL-20060801-01] gssincla (Aug 01)
- Re: Barracuda Vulnerability: Hardcoded Password [NNL-20060801-01] pingywon (Aug 02)
- RE: Barracuda Vulnerability: Hardcoded Password [NNL-20060801-01] Roger A. Grimes (Aug 03)
Barracuda Vulnerability: Arbitrary File Disclosure [NNL-20060801-02] gssincla (Aug 01)
- Re: Barracuda Vulnerability: Arbitrary File Disclosure [NNL-20060801-02] Matthew Hall (Aug 03)
[ MDKSA-2006:137 ] - Updated libtiff packages fix multiple vulnerabilities security (Aug 01)
DMA[2006-0801a] - 'Apple OSX fetchmail buffer overflow' K F (lists) (Aug 01)
[SECURITY] [DSA 1133-1] New mantis packages fix execution of arbitrary web script code Moritz Muehlenhoff (Aug 02)
JavaScript port scanning pdp (architect) (Aug 02)
rPSA-2006-0142-1 libtiff Justin M. Forbes (Aug 02)
EEYE: research.eeye.com Marc Maiffret (Aug 02)
[SECURITY] [DSA 1134-1] New Mozilla Thunderbird packages fix several vulnerabilities Martin Schulze (Aug 02)
Secunia Research: Jetbox Multiple Vulnerabilities Secunia Research (Aug 02)
Re: Cisco VPN Concentrator IKE resource exhaustion DoS Advisory Roy Hills (Aug 02)
- <Possible follow-ups>
- Re: Re: Cisco VPN Concentrator IKE resource exhaustion DoS Advisory henry . sieff (Aug 11)
  - RE: Re: Cisco VPN Concentrator IKE resource exhaustion DoS Advisory Lance Seelbach (Aug 14)
    - Re: Re: Cisco VPN Concentrator IKE resource exhaustion DoS Advisory Henry Sieff (Aug 11)
SaveWeb Portal 3.4 <- (SITE_Path) Remote File Inclusion Vulnerability x0r0n (Aug 02)
Content Management Framework "G3" - XSS Vulnerability in Search Function Stefan Friedli (Aug 02)
rPSA-2006-0143-1 gnupg Justin M. Forbes (Aug 02)
[USN-330-1] tiff vulnerabilities Martin Pitt (Aug 02)
[eVuln] MyBB 'Avatar URL' XSS Vulnerability alex (Aug 02)
[security bulletin] HPSBUX02108 SSRT061133 rev.13 - HP-UX Running Sendmail, Remote Execution of Arbitrary Code security-alert (Aug 02)
[SECURITY] [DSA 1137-1] New tiff packages fix several vulnerabilities Martin Schulze (Aug 02)
[SECURITY] [DSA 1136-1] New gpdf packages fix denial of service Martin Schulze (Aug 02)
[security bulletin] HPSBUX02124 SSRT061159 rev.1 - HP-UX Sendmail MIME Remote Denial of Service (DoS) security-alert (Aug 02)
OZJournal v1.5 - XSS luny (Aug 02)
[security bulletin] HPSBGN02136 SSRT061173 rev.1 - ProCurve Series 3500yl, 6200yl, and 5400zl Switches Running Software Prior to K.11.33 Remote Denial of Service (DoS) security-alert (Aug 02)
Hobbit monitor security bugfix release - 4.1.2p2 Henrik Stoerner (Aug 02)
[SECURITY] [DSA 1138-1] New cfs packages fix denial of service Moritz Muehlenhoff (Aug 03)
[SECURITY] [DSA 1135-1] New libtunepimp packages fix arbitrary code execution Martin Schulze (Aug 03)
[security bulletin] HPSBUX02087 SSRT4728 rev.3 - HP-UX running TCP/IP Remote Denial of Service (DoS) security-alert (Aug 03)
Simpliciti Locked Browser Jail Breakout Vulnerability EvilPacket (Aug 03)
- <Possible follow-ups>
- Simpliciti Locked Browser Jail Breakout Vulnerability dc (Aug 22)
TSEP <= 0.942 Remote File Include beford (Aug 03)
Vwar v1.5.0 <= Sql Injection and XSS vuln. mfoxhacker (Aug 03)
Secunia Research: PC Tools AntiVirus Insecure Default Directory Permissions Secunia Research (Aug 03)
CMSimple Cross Site Scripting Outlaw (Aug 03)
[USN-331-1] Linux kernel vulnerabilities Martin Pitt (Aug 03)
[USN-332-1] gnupg vulnerability Martin Pitt (Aug 03)
Re: [Announcement] Apache HTTP Server 2.2.3 (2.0.59, 1.3.37) Released Philip M. Gollucci (Aug 03)
- Re: [Announcement] Apache HTTP Server 2.2.3 (2.0.59, 1.3.37) Released William A. Rowe, Jr. (Aug 03)
- Re: [Announcement] Apache HTTP Server 2.2.3 (2.0.59, 1.3.37) Released Steve VanDevender (Aug 07)
[SECURITY] [DSA 1139-1] New ruby1.6 packages fix privilege escalation Moritz Muehlenhoff (Aug 03)
Javascript software authentication brute force attack Gianstefano Monni (Aug 03)
[MajorSecurity Advisory #27]ToendaCMS - Cross Site Scripting Issue admin (Aug 03)
SendCard <= 3.4.0 unauthorized administrative access / remote commands execution rgod (Aug 03)
[SECURITY] [DSA 1140-1] New GnuPG packages fix denial of service Martin Schulze (Aug 03)
SolpotCrew Advisory #5 - modernbill ver 1.6 (DIR) Remote File Inclusion chris_hasibuan (Aug 03)
- Re: SolpotCrew Advisory #5 - modernbill ver 1.6 (DIR) Remote File Inclusion Mailinglists Address (Aug 07)
[ GLSA 200608-02 ] Mozilla SeaMonkey: Multiple vulnerabilities Stefan Cornelius (Aug 03)
[DRUPAL-SA-2006-011] Drupal 4.7.3 / 4.6.9 fixes XSS issue Uwe Hermann (Aug 03)
vbulletin 3.5.4 IE exploit xss stefan (Aug 03)
- <Possible follow-ups>
- Re: vbulletin 3.5.4 IE exploit xss james (Aug 07)
[ GLSA 200608-03 ] Mozilla Firefox: Multiple vulnerabilities Thierry Carrez (Aug 03)
ME Download System 1.3 Remote File Inclusion philipp . niedziela (Aug 03)
[ GLSA 200608-04 ] Mozilla Thunderbird: Multiple vulnerabilities Thierry Carrez (Aug 03)
ZoneX 1.0.3 - Publishers Gold Edition Remote File Inclusion Vulnerability x0r0n (Aug 03)
[security bulletin] HPSBUX02137 SSRT051024 rev.1 - HP-UX Running Xserver Local Execution of Arbitrary Code, Privilege Elevation security-alert (Aug 03)
GaesteChaos <= 0.2 Multiple Vulnerabilities Tamriel (Aug 04)
CounterChaos <= 0.48c SQL Injection Vulnerability Tamriel (Aug 04)
GeheimChaos <= 0.5 Multiple SQL Injection Vulnerabilities Tamriel (Aug 04)
XSS in Vbulletin 3.6.0 in IE 0nly Stefan (Aug 04)
[SECURITY] [DSA 1141-1] New GnuPG2 packages fix denial of service Martin Schulze (Aug 04)
[ GLSA 200608-05 ] LibVNCServer: Authentication bypass Sune Kloppenborg Jeppesen (Aug 04)
[ GLSA 200608-06 ] Courier MTA: Denial of Service vulnerability Sune Kloppenborg Jeppesen (Aug 04)
[ECHO_ADV_42$2006] BufferOverflow in Eremove Client erdc (Aug 04)
[SECURITY] [DSA 1142-1] New freeciv packages fix arbitrary code execution Martin Schulze (Aug 04)
[SECURITY] [DSA 1143-1] New dhcp packages fix denial of service Martin Schulze (Aug 04)
[ECHO_ADV_42$2006] PHP Live Helper <= 2.0 (abs_path) Remote File Inclusion matdhule (Aug 04)
TSLSA-2006-0044 - multi Trustix Security Advisor (Aug 04)
CAID 34509 - CA eTrust Antivirus WebScan vulnerabilities Williams, James K (Aug 04)
phpAutoMembersArea 3.2.5 ($installed_config_file) Remote File Inclusion philipp . niedziela (Aug 04)
Barracuda Spam Firewall: Administrator Level Remote Command Execution [ID-20060804-01] Matthew Hall (Aug 04)
[ GLSA 200608-07 ] libTIFF: Multiple vulnerabilities Sune Kloppenborg Jeppesen (Aug 05)
vBulletin 3.0.14 ~ init.php~ registerring global arbitary variable~ XSS exploit addmimistrator (Aug 05)
Tinyportal Shoutbox exploitex (Aug 05)
[ GLSA 200608-08 ] GnuPG: Integer overflow vulnerability Sune Kloppenborg Jeppesen (Aug 05)
MyBloggie <= 2.1.4 trackback.php SQL injection / admin credentials disclosure rgod (Aug 05)
XSS Vulnerability in FTD v3.7.3 try_og (Aug 07)
Re: flatnuke <= 2.5.7 arbitrary php file upload segatom (Aug 07)
[ECHO_ADV_44$2006] PHP Simple Shop <= 2.0 (abs_path) Remote File Inclusion erdc (Aug 07)
XennoBB <= 2.1.0 "birthday" SQL injection c . boulton (Aug 07)
SAPID CMS remote File Inclusion vulnerabilities simo64 (Aug 07)
0-day XP SP2 wmf exploit cyanid-E (Aug 07)
0-day XP SP2 wmf exploit (some details) cyanid-E (Aug 07)
SolpotCrew Advisory #6 - phpCC - Beta 4.2 (base_dir) Remote File Inclusion chris_hasibuan (Aug 07)
NEWSolved Lite v1.9.2 (abs_path) Remote File Inclusion philipp . niedziela (Aug 07)
when will AV vendors fix this??? Bipin Gautam (Aug 07)
- Re: when will AV vendors fix this??? Denis Jedig (Aug 07)
- Re: when will AV vendors fix this??? Marius Huse Jacobsen (Aug 11)
- RE: when will AV vendors fix this??? Thomas D. (Aug 11)
- Re: when will AV vendors fix this??? Paul Schmehl (Aug 11)
  - Re: when will AV vendors fix this??? Bipin Gautam (Aug 11)
- <Possible follow-ups>
- Re: when will AV vendors fix this??? Andreas Marx (Aug 18)
  - Re: [Full-disclosure] Re: when will AV vendors fix this??? Paul Schmehl (Aug 18)
blur6ex 0.3 Comment title HTML inyection vuln. piiiiiii pppiiiiiiii (Aug 07)
PHP: Zend_Hash_Del_Key_Or_Index Vulnerability Stefan Esser (Aug 07)
IMENDIO PLANNER REMOTE FILENAME FORMAT STRING VULNERABILITY king_purba (Aug 07)
Multiple vulnerabilities in DConnect Daemon 0.7.0 (CVS 30 Jul 2006) Luigi Auriemma (Aug 07)
Virtual War v1.5.0 Remote File Include (vwar_root) AG Spider (Aug 07)
- AW: Virtual War v1.5.0 Remote File Include (vwar_root) Frank Reißner (Aug 08)
[ GLSA 200608-10 ] pike: SQL injection vulnerability Sune Kloppenborg Jeppesen (Aug 07)
php local buffer underflow could lead to arbitary code execution heintz (Aug 07)
[ GLSA 200608-11 ] Webmin, Usermin: File Disclosure Sune Kloppenborg Jeppesen (Aug 07)
[vuln.sg] Lhaz LHA Long Filename Buffer Overflow Vulnerability vulnpost-remove (Aug 07)
Will Microsoft patch remarkable old Msjet40.dll issue? Juha-Matti Laurio (Aug 07)
- <Possible follow-ups>
- Re: Will Microsoft patch remarkable old Msjet40.dll issue? Juha-Matti Laurio (Aug 08)
[SECURITY] [DSA 1144-1] New chmlib packages fix denial of service Moritz Muehlenhoff (Aug 07)
Re: Vanilla CMS <= 1.0.1 (RootDirectory) Remote file inclusion Vuln. dinoboff (Aug 07)
linksys WRT54g authentication bypass Ginsu Rabbit (Aug 07)
- RE: linksys WRT54g authentication bypass Andy Meyers (Aug 07)
  - RE: linksys WRT54g authentication bypass Miguel Valentin (Aug 11)
    - RE: linksys WRT54g authentication bypass Ginsu Rabbit (Aug 11)
- Re: linksys WRT54g authentication bypass Nicholas Knight (Aug 11)
- Re: linksys WRT54g authentication bypass Rodrigo Barbosa (Aug 11)
  - Re: linksys WRT54g authentication bypass Ginsu Rabbit (Aug 11)
- <Possible follow-ups>
- Re: linksys WRT54g authentication bypass guant a (Aug 11)
  - Re: linksys WRT54g authentication bypass Ginsu Rabbit (Aug 11)
- RE: linksys WRT54g authentication bypass TeamXMM Consulting, Inc. (Aug 15)
- Re: RE: linksys WRT54g authentication bypass gooorguss (Aug 15)
[ GLSA 200608-12 ] x11vnc: Authentication bypass in included LibVNCServer code Sune Kloppenborg Jeppesen (Aug 07)
- <Possible follow-ups>
- Re: [ GLSA 200608-12 ] x11vnc: Authentication bypass in included LibVNCServer code xvml (Aug 11)
DeluxeBB Multiple Vulnerabilities darkz . gsa (Aug 07)
simplog 0.9.3 and prior XSS piiiiiii pppiiiiiiii (Aug 07)
Visual Events Calendar v1.1 (cfg_dir) Remote Inclusion Vulnerability x0r0n (Aug 07)
TSRT-06-06: Computer Associates eTrust AntiVirus WebScan Manifest Processing Buffer Overflow Vulnerability TSRT (Aug 07)
TSRT-06-05: Computer Associates eTrust AntiVirus WebScan Automatic Update Code Execution Vulnerability TSRT (Aug 07)
ARES 2007: Call for workshop proposals, deadline Sept 10, 2006 Manh Tho (Aug 07)
Attacking the local LAN via XSS pdp (architect) (Aug 07)
- Re: [Full-disclosure] Attacking the local LAN via XSS Schanulleke (Aug 07)
- Re: [Full-disclosure] Attacking the local LAN via XSS Thierry Zoller (Aug 07)
  - Re: [Full-disclosure] Attacking the local LAN via XSS pdp (architect) (Aug 07)
    - Re[2]: [Full-disclosure] Attacking the local LAN via XSS Thierry Zoller (Aug 07)
    - Re: Re[2]: [Full-disclosure] Attacking the local LAN via XSS pdp (architect) (Aug 07)
    - Re: [Full-disclosure] Attacking the local LAN via XSS Nikolay Kubarelov (Aug 11)
AUTODAFE: an Act of Software Torture [FUZZER] Martin Vuagnoux (Aug 07)
phpPrintAnalyzer <= 1.1 (rep_par_rapport_racine) Remote File Inclusion Vulnerability sh3ll (Aug 07)
- Re: phpPrintAnalyzer <= 1.1 (rep_par_rapport_racine) Remote File Inclusion Vulnerability Carsten Eilers (Aug 15)
[EEYEB-20060719] McAfee Subscription Manager Stack Buffer Overflow eEye Advisories (Aug 08)
Announcement: Feed Injection in Web 2.0: Hacking RSS and Atom Feed Implementations [Whitepaper] SPI Labs (Aug 08)
[ GLSA 200608-13 ] ClamAV: Heap buffer overflow Matthias Geerdsen (Aug 08)
ZDI-06-026: Microsoft Internet Explorer Multiple CSS Imports Memory Corruption Vulnerability zdi-disclosures (Aug 08)
ZDI-06-027: Microsoft Internet Explorer CSS Class Ordering Memory Corruption Vulnerability zdi-disclosures (Aug 08)
[SECURITY] [DSA 1145-1] New freeradius packages fix several vulnerabilities Moritz Muehlenhoff (Aug 08)
Archangel Weblog 0.90.02 and prior Multiple HTML injections piiiiiii pppiiiiiiii (Aug 08)
docpile:we v0.2.2 (INIT_PATH) Remote File Inclusion Vulnerability x0r0n (Aug 08)
rPSA-2006-0147-1 mysql mysql-bench mysql-server Justin M. Forbes (Aug 08)
phNNTP <= 1.3 (article-raw.php) Remote File Include Vulnerability tr_zindan (Aug 08)
Microsoft PowerPoint Malformed Record Memory Corruption Sowhat (Aug 08)
[ GLSA 200608-14 ] DUMB: Heap buffer overflow Sune Kloppenborg Jeppesen (Aug 08)
TSRT-06-07: eIQnetworks Enterprise Security Analyzer Monitoring Agent Buffer Overflow Vulnerabilities TSRT (Aug 08)
unwrapping PL/SQL pete (Aug 08)
MojoScripts' xss vulnerable tugra (Aug 08)
MITKRB-SA-2006-001: multiple local privilege escalation vulnerabilities Tom Yu (Aug 08)
ERRATA: [ GLSA 200608-08 ] GnuPG: Integer overflow vulnerability Sune Kloppenborg Jeppesen (Aug 08)
rPSA-2006-0150-1 krb5 krb5-server krb5-services krb5-test krb5-workstation Justin M. Forbes (Aug 09)
[Overflow.pl] Clam AntiVirus Win32-UPX Heap Overflow pucik (Aug 09)
SUSE Security Announcement: clamav (SUSE-SA:2006:046) Ludwig Nussel (Aug 09)
PgMarket 2.2.3 (CFG[libdir]) Remote File Inclusion Vulnerabilities x0r0n (Aug 09)
[USN-333-1] libwmf vulnerability Martin Pitt (Aug 09)
Latinchat Denial Of Service Vicente Perez (Aug 09)
Assessment of Vista Kernel Mode Security ATR-Bugtraq (Aug 09)
[SECURITY] [DSA 1146-1] New krb5 packages fix privilege escalation Martin Schulze (Aug 09)
[ MDKSA-2006:138 ] - Updated clamav packages fix vulnerability security (Aug 09)
CivicSpace Version 0.8.5 HTML injection HeLiOsZ RooT (Aug 09)
BlogHoster v2.2 Post Comment Html Injection piiiiiii pppiiiiiiii (Aug 09)
Cwfm <= 0.9.1 (Language) Remote File Inclusion Vulnerability philipp . niedziela (Aug 09)
[ MDKSA-2006:139 ] - Updated krb5 packages fix local privilege escalation vulnerability security (Aug 09)
[ISR] - Novell Groupwise Webaccess (Cross-Site Scripting) Francisco Amato (Aug 09)
TSRT-06-10: Microsoft HLINK.DLL Hyperlink Object Library Buffer Overflow Vulnerability TSRT (Aug 09)
Multiple buffer-overflows in AlsaPlayer 0.99.76 Luigi Auriemma (Aug 09)
TSRT-06-09: Microsoft DirectAnimation COM Object Memory Corruption Vulnerability TSRT (Aug 09)
Stack and heap overflows in MODPlug Tracker/OpenMPT 1.17.02.43 and libmodplug 0.8 Luigi Auriemma (Aug 09)
TSRT-06-08: Microsoft Internet Help COM Object Memory Corruption Vulnerability TSRT (Aug 09)
[SECURITY] [DSA 1148-1] New gallery packages fix several vulnerabilities Moritz Muehlenhoff (Aug 09)
[SECURITY] [DSA 1147-1] New drupal packages fix cross-site scripting Moritz Muehlenhoff (Aug 09)
[ MDKSA-2006:140 ] - Updated ncompress packages fix vulnerability security (Aug 10)
XChat <= 2.6.4-1 (win version) Remote Denial of Service Exploit (php) ratboy727 (Aug 10)
PHPMyRing <= 4.2.0 (view_com.php) Remote SQL Injection simo64 (Aug 10)
Yabb XSS Outlaw (Aug 10)
- Re: Yabb XSS - or NOT Volker Tanger (Aug 14)
TinyWebGallery v1.5 ( image ) Remote Include Vulnerability x0r0n (Aug 10)
- <Possible follow-ups>
- Re: TinyWebGallery v1.5 ( image ) Remote Include Vulnerability tinywebgallery (Aug 16)
[SECURITY] [DSA 1149-1] New ncompress packages fix potential code execution Martin Schulze (Aug 10)
Sending multipart/form-data requests from Flash (with arbitrary headers) Amit Klein (AKsecurity) (Aug 10)
Directory Traversal vulnerability in IPCheck Monitor Server auuw73 (Aug 10)
- <Possible follow-ups>
- Re: Directory Traversal vulnerability in IPCheck Monitor Server support (Aug 24)
CYBSEC - Security Pre-Advisory: SAP Internet Graphics Service (IGS) Remote Denial of Service Mariano Nuñez Di Croce (Aug 10)
CYBSEC - Security Pre-Advisory: SAP Internet Graphics Service (IGS) Remote Buffer Overflow Mariano Nuñez Di Croce (Aug 10)
PocketPC MMS - Remote Code Injection/Execution Vulnerability and Denial-of-Service Collin R. Mulliner (Aug 10)
[ GLSA 200608-15 ] MIT Kerberos 5: Multiple local privilege escalation (test Falco for security@) Raphael Marichez (Aug 10)
[ GLSA 200608-17 ] libwmf: Buffer overflow vulnerability Sune Kloppenborg Jeppesen (Aug 10)
[ GLSA 200608-18 ] Net::Server: Format string vulnerability Sune Kloppenborg Jeppesen (Aug 10)
[ GLSA 200608-16 ] Warzone 2100 Resurrection: Multiple buffer overflows Sune Kloppenborg Jeppesen (Aug 10)
Mambo/Joomla Component Remository v3.25 (mosConfig_absolute_path) Remote File Inclusion Vulnerability camino (Aug 11)
Netgear FVG318 is vunerable to DOS attack root (Aug 11)
Mafia Moblog <= 6 (pathtotemplate) Remote File Inclusion Vulnerability sh3ll (Aug 11)
- <Possible follow-ups>
- Re: Mafia Moblog <= 6 (pathtotemplate) Remote File Inclusion Vulnerability noname (Aug 14)
InfanView 3.98 (with plugins) - Access violation at processing images ANI files sehato (Aug 11)
myBloggie <= 2.1.3 (mybloggie_root_path) Remote File Inclusion Vulnerability sh3ll (Aug 11)
- <Possible follow-ups>
- Re: myBloggie <= 2.1.3 (mybloggie_root_path) Remote File Inclusion Vulnerability nukedx (Aug 12)
- Re: Re: myBloggie <= 2.1.3 (mybloggie_root_path) Remote File Inclusion Vulnerability istgha (Aug 15)
Compersus ASP shopping cart <= DataBase Downloading vuln. mfoxhacker (Aug 11)
Virtual War v1.5.0 <= Sql Injection vuln. mfoxhacker (Aug 11)
XennoBB <= "avatar gallery" Directory Transversal c . boulton (Aug 11)
CGI Script Source Code Disclosure Vulnerability in Apache for Windows susam . pal (Aug 11)
- Re: CGI Script Source Code Disclosure Vulnerability in Apache for Windows Joe Orton (Aug 16)
- <Possible follow-ups>
- Re: Re: CGI Script Source Code Disclosure Vulnerability in Apache for Windows nareshhacker (Aug 17)
Simple one-file GuestBook 1.0 omnipresent (Aug 11)
Dragonfly CMS 9.0.6.1 and prior XSS HeLiOsZ RooT (Aug 11)
Security Contact Sean Warnock (Aug 11)
RE: [Full-disclosure] RE: when will AV vendors fix this??? Thomas D. (Aug 11)
- RE: [Full-disclosure] RE: when will AV vendors fix this??? Dmitry Yu. Bolkhovityanov (Aug 14)
  - Re: [Full-disclosure] RE: when will AV vendors fix this??? Paul Schmehl (Aug 18)
    - Re: [Full-disclosure] RE: when will AV vendors fix this??? Bipin Gautam (Aug 18)
Bypassing script filters with variable-width encodings Cheng Peng Su (Aug 11)
XSSing the Lan 3 (web trojans.. not a new idea) pdp (architect) (Aug 11)
Security Vulnerability in Ruby on Rails 1.1.x michael (Aug 11)
[security bulletin] HPSBUX02108 SSRT061133 rev.14 - HP-UX Running Sendmail, Remote Execution of Arbitrary Code security-alert (Aug 11)
[security bulletin] HPSBUX02124 SSRT061159 rev.2 - HP-UX Sendmail MIME Remote Denial of Service (DoS) security-alert (Aug 11)
TSLSA-2006-0046 - multi Trustix Security Advisor (Aug 11)
miniBloggie <= 1.0 (fname) Remote File Inclusion Vulnerability sh3ll (Aug 11)
- Re: miniBloggie <= 1.0 (fname) Remote File Inclusion Vulnerability Carsten Eilers (Aug 14)
[ GLSA 200608-19 ] WordPress: Privilege escalation Raphael Marichez (Aug 11)
Startpage <= 1.0 (cfgLanguage) Remote File Inclusion Vulnerability sh3ll (Aug 11)
- Re: Startpage <= 1.0 (cfgLanguage) Remote File Inclusion Vulnerability Carsten Eilers (Aug 14)
- <Possible follow-ups>
- Re: Startpage <= 1.0 (cfgLanguage) Remote File Inclusion Vulnerability noname (Aug 15)
- Re: Startpage <= 1.0 (cfgLanguage) Remote File Inclusion Vulnerability securityfocus (Aug 21)
rPSA-2006-0152-1 squirrelmail Justin M. Forbes (Aug 11)
WEBInsta Mailing list manager (cabsolute_path) 1.3e RFI philipp . niedziela (Aug 11)
wheatblog ُSession.php Remote File Inclusion Outlaw (Aug 11)
UPDATE: [ GLSA 200511-12 ] Scorched 3D: Multiple vulnerabilities Raphael Marichez (Aug 11)
VWar <= 1.50 R14 (n) Remote SQL Injection brom0815 (Aug 11)
Nokia Browser Crash qode (Aug 12)
SquirrelMail 1.4.8 released - fixes variable overwriting attack Thijs Kinkhorst (Aug 12)
- Re: [SM-ANNOUNCE] SquirrelMail 1.4.8 released - fixes variable overwriting attack Yves Goergen (Aug 12)
  - Re: [SM-ANNOUNCE] SquirrelMail 1.4.8 released - fixes variable overwriting attack Allie Daneman (Aug 14)
  - Re: [SM-ANNOUNCE] SquirrelMail 1.4.8 released - fixes variable overwriting attack Michael Engert (Aug 15)
Calendarix <= 0.7 (calpath) Remote File Inclusion Vulnerability sh3ll (Aug 12)
- Re: Calendarix <= 0.7 (calpath) Remote File Inclusion Vulnerability Carsten Eilers (Aug 14)
- <Possible follow-ups>
- Re: Calendarix <= 0.7 (calpath) Remote File Inclusion Vulnerability Steven M. Christey (Aug 15)
  - Re: Calendarix <= 0.7 (calpath) Remote File Inclusion Vulnerability Carsten Eilers (Aug 15)
myEvent <= 1.4 Multiple Remote File Include Vulnerabilities sh3ll (Aug 12)
- Re: myEvent <= 1.4 Multiple Remote File Include Vulnerabilities Carsten Eilers (Aug 14)
Concurrency-related vulnerabilities in browsers - expect problems Michal Zalewski (Aug 12)
- Re: Concurrency-related vulnerabilities in browsers - expect problems Michal Zalewski (Aug 15)
  - Re: [VulnWatch] Re: Concurrency-related vulnerabilities in browsers - expect problems Steven M. Christey (Aug 17)
    - Re: [VulnWatch] Re: Concurrency-related vulnerabilities in browsers - expect problems Michal Zalewski (Aug 18)
- <Possible follow-ups>
- Re: Concurrency-related vulnerabilities in browsers - expect problems mannion (Aug 18)
  - Re: Concurrency-related vulnerabilities in browsers - expect problems Michal Zalewski (Aug 18)
[SECURITY] [DSA 1150-1] New shadow packages fix privilege escalation Martin Schulze (Aug 12)
- Re: [SECURITY] [DSA 1150-1] New shadow packages fix privilege escalation Henry Jensen (Aug 21)
Microsoft Help (WINHLP32.EXE) - Multiple Remote Code Execution and Denial Of Service Vulnerabilities Benjamin Tobias Franz (Aug 12)
- Re: Microsoft Help (WINHLP32.EXE) - Multiple Remote Code Execution and Denial Of Service Vulnerabilities Reversemode (Aug 12)
(Security Advisory) SYM06-014 Symantec Backup Exec Internal RPC Overflow Secure (Aug 12)
Forum Software ASPPlayground.NET Advanced Edition 2.4.5 Unicode Xss blood2_20032003 (Aug 12)
ScatterChat Advisory 2006-01: Cryptanalytic Attack Vulnerability ScatterChat Advisories (Aug 12)
Re: TSRT-06-02: Microsoft SRV.SYS Mailslot Ring0 Memory Corruption Vulnerability public (Aug 14)
- Re: TSRT-06-02: Microsoft SRV.SYS Mailslot Ring0 Memory Corruption Vulnerability Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] (Aug 15)
- <Possible follow-ups>
- Re: Re: TSRT-06-02: Microsoft SRV.SYS Mailslot Ring0 Memory Corruption Vulnerability mr (Aug 15)
Informix - Discovery, Attack and Defense David Litchfield (Aug 14)
Informix Long Username Buffer Overflow Vulnerability NGSSoftware Insight Security Research (Aug 14)
Error logging buffer overflow in Informix NGSSoftware Insight Security Research (Aug 14)
[ECHO_ADV_45$2006] WEBinsta CMS 0.3.1 (templates_dir) Remote File Inclusion Vulnerability erdc (Aug 14)
Google Picasa Listening on Port 80? Geoff Vass (Aug 14)
- RE: Google Picasa Listening on Port 80? Kameron Gasso (Aug 18)
SQLIDEBUG envariable overflow on Informix NGSSoftware Insight Security Research (Aug 14)
XMB <= 1.9.6 Final basename()/'langfilenew' arbitrary local inclusion / remote commands execution rgod (Aug 14)
BlaBla 4U XSS Vulnerabilite vampire_chiristof (Aug 14)
Virtual War v1.5.0 SQL injection and XSS vampire_chiristof (Aug 14)
JavaScript get Internal Address (thanks to DanBUK) pdp (architect) (Aug 14)
HPSBMA02138 SSRT061184 rev.1 - HP OpenView Storage Data Protector, Remote Arbitrary Command Execution security-alert (Aug 14)
Kaspersky Anti-Hacker personal firewall unstealthy stealth mode tbratusa (Aug 14)
Wordpress WP-DB Backup Plugin Directory Traversal Vulnerability ss_team (Aug 14)
Arbitrary Library Loading in Informix NGSSoftware Insight Security Research (Aug 14)
Multiple Arbitrary Command Execution Vulnerabilities NGSSoftware Insight Security Research (Aug 14)
InfanView 3.98 (with plugins) - Access violation at processing images CUR files sehato (Aug 14)
Technical note: under some conditions, it's possible to steal HTTP credentials using Flash Amit Klein (AKsecurity) (Aug 15)
Unauthorized Database Creation Privilege on Informix NGSSoftware Insight Security Research (Aug 15)
Local privilege Escalation in SmartLine DeviceLock 5.73 seppi (Aug 15)
Multiple Password Exposures Flaws NGSSoftware Insight Security Research (Aug 15)
osDate 1.1.8 - Multiple HTML Injection Vulnerability - fixed vijay (Aug 15)
RE: ANNOUNCING: 3rd Annual US OWASP AppSec Conference - Oct 16-18 2006 - Seattle, WA Dave Wichers (Aug 15)
Peoplebook Mambo Component <= v1.0 Remote File Include Vulnerabilities matdhule (Aug 15)
Multiple buffer-overflows in libmusicbrainz 2.1.2 Luigi Auriemma (Aug 15)
[Overflow.pl] ImageMagick ReadSGIImage() Heap Overflow Damian Put (Aug 15)
- Re: [Overflow.pl] ImageMagick ReadSGIImage() Heap Overflow Daniel Kobras (Aug 17)
(somewhat) breaking the same-origin policy by undermining dns-pinning Martin Johns (Aug 15)
Multiple Buffer Overflow Vulnerabilities in Informix NGSSoftware Insight Security Research (Aug 15)
Joomla Webring Component (component_dir) Remote File Inclusion Vulnerabilities x0r0n (Aug 15)
[ GLSA 200608-20 ] Ruby on Rails: Several vulnerabilities Raphael Marichez (Aug 15)
Multiple Arbitrary File Access (Write/Read) Vulnerabilities NGSSoftware Insight Security Research (Aug 15)
Opera 9 Remote Denial of Service NNP (Aug 15)
Security contact from Critical Path Inc Guillermo Marro (Aug 15)
- RE: Security contact from Critical Path Inc Tony Maupin (Aug 18)
[ MDKSA-2006:142 ] - Updated heartbeat packages fix vulnerability security (Aug 15)
[ MDKSA-2006:141 ] - Updated gnupg packages fix vulnerability security (Aug 15)
local file include in PHP-Nuke (autohtml.php) MosT3mR (Aug 15)
Mailslot bug (MS06-035) vs non-Mailslot bug (CVE-2006-3942) Gerardo Richarte (Aug 15)
- RE: Mailslot bug (MS06-035) vs non-Mailslot bug (CVE-2006-3942) Marc Maiffret (Aug 18)
- Re: Mailslot bug (MS06-035) vs non-Mailslot bug (CVE-2006-3942) naveed (Aug 18)
[XSec-06-02]: Internet Explorer (IMSKDIC.DLL) COM Object Instantiation Vulnerability nop (Aug 15)
[XSec-06-03]: Internet Explorer (CHTSKDIC.DLL) COM Object Instantiation Vulnerability nop (Aug 15)
Koobi Pro CMS 5.6 SQL injection & XSS vampire_chiristof (Aug 15)
[XSec-06-04]: Internet Explorer (msoe.dll) COM Object Instantiation Vulnerability nop (Aug 15)
[SECURITY] [DSA 1151-1] New heartbeat packages fix denial of service Martin Schulze (Aug 15)
[security bulletin] HPSBUX02141 SSRT51153 rev.1 - HP-UX in Trusted mode, Local Denial of Service (DoS) security-alert (Aug 15)
otopholder 1.8 suffers from a local file inclusion,XSS and directory listing vuln vampire_chiristof (Aug 15)
Lizge V.20 Web Portal File Include Vulnerability crackers_child (Aug 15)
fusionnews 3,7 Remote File Inclusion Outlaw (Aug 15)
CORE-2006-0714: Microsoft SRV.SYS SMB_COM_TRANSACTION Denial of Service Core Security Technologies advisories (Aug 15)
[USN-334-1] krb5 vulnerabilities Martin Pitt (Aug 16)
[XSec-06-05]: VMware 5.5.1 for Windows arbitrary partition table delete issue. root (Aug 16)
Mambo com_lm component (archive.php) Remote File Include Vulnerabilities crackers_child (Aug 16)
[USN-335-1] heartbeat vulnerability Martin Pitt (Aug 16)
[scip_Advisory 2456] Horde Framework and Horde IMP /index.php cross site referencing Marc Ruef (Aug 16)
[scip_Advisory 2457] Horde Framework and Horde IMP /horde/imp/search.php cross site scripting Marc Ruef (Aug 16)
MS Terminal Server application session breakout pedantic1 (Aug 16)
- Re: MS Terminal Server application session breakout Thor (Hammer of God) (Aug 16)
ShockwaveFlash 9 (Stack overflow) Mr . Niega (Aug 16)
[security bulletin] HPSBUX02115 SSRT061077 rev.2 - HP-UX running Support Tools Manager (xstm, cstm, stm) Local Denial of Service (DoS) security-alert (Aug 16)
Technical note by Amit Klein: "Sending arbitrary HTTP requests with Flash 7/8 (+IE 6.0)" Amit Klein (AKsecurity) (Aug 16)
[ MDKSA-2006:143 ] - Updated Firefox packages fix multiple vulnerabilities security (Aug 16)
SYM06-16 Symantec NetBackup PureDisk Remote Office Edition Elevation of Privilege Mike Prosser (Aug 16)
- <Possible follow-ups>
- Re: SYM06-16 Symantec NetBackup PureDisk Remote Office Edition Elevation of Privilege secure (Aug 17)
Reporter Mambo Component Remote File İnclude crackers_child (Aug 17)
discloser 0.0.4 Remote File Inclusion (with Exploit) dr . t3rr0r1st (Aug 17)
- Re: discloser 0.0.4 Remote File Inclusion (with Exploit) Carsten Eilers (Aug 17)
- <Possible follow-ups>
- Re: Re: discloser 0.0.4 Remote File Inclusion (with Exploit) dr . t3rr0r1st (Aug 18)
  - Re: discloser 0.0.4 Remote File Inclusion (with Exploit) Carsten Eilers (Aug 23)
[USN-337-1] imagemagick vulnerability Martin Pitt (Aug 17)
[EEYEB-20060703] IBM eGatherer ActiveX Code Execution Vulnerability eEye Advisories (Aug 17)
CubeCart <= 3.0.11 SQL injection & cross site scripting rgod (Aug 17)
[USN-336-1] binutils vulnerability Martin Pitt (Aug 17)
[XSec-06-06]: Windows 2003 (tsuserex.dll) COM Object Instantiation Vulnerability nop (Aug 17)
UPDATED: MITKRB5-SA-2006-001: multiple local privilege escalation vulnerabilities Tom Yu (Aug 17)
World Summit on Intrusion Prevention wsip (Aug 17)
powergap <= (s0x.php) Remote File Inclusion saudi . unix (Aug 17)
RE: [VulnWatch] Re: Concurrency-related vulnerabilities in browsers - expect problems Michael Wojcik (Aug 17)
[security bulletin] HPSBUX02139 SSRT5981 rev.1 - HP-UX Running the LP Subsystem, remote Denial of Service (DoS) security-alert (Aug 17)
[ MDKSA-2006:143-1 ] - Updated Firefox packages fix multiple vulnerabilities security (Aug 17)
[XSec-06-07]: Visual Studio 6.0 Multiple COM Object Instantiation Vulnerability nop (Aug 18)
ToorCon 8 Call for Papers Closing Tomorrow & Workshops/Seminars Added h1kari () toorcon org (Aug 18)
Secunia Research: AOL Insecure Default Directory Permissions Jakob Balle (Aug 18)
mtg_myhomepage Component For Mambo R.F.I Outlaw (Aug 18)
- Re: mtg_myhomepage Component For Mambo R.F.I Carsten Eilers (Aug 22)
Joomla x-shop <= 1.7 Remote File Include Vulnerability crackers_child (Aug 18)
- Re: Joomla x-shop <= 1.7 Remote File Include Vulnerability Carsten Eilers (Aug 22)
Joomla Rssxt <= 1.0 Remote File Include Vulnerability crackers_child (Aug 18)
- Re: Joomla Rssxt <= 1.0 Remote File Include Vulnerability Carsten Eilers (Aug 22)
anjel Mambo Component Remote File Include crackers_child (Aug 18)
- Re: anjel Mambo Component Remote File Include Carsten Eilers (Aug 23)
[SECURITY] [DSA 1152-1] New trac packages fix information disclosure Martin Schulze (Aug 18)
mambo-phphop Product Scroller Module R.F.I Outlaw (Aug 18)
- Re: mambo-phphop Product Scroller Module R.F.I Carsten Eilers (Aug 22)
Norton DLL faking via 'SuiteOwners' protection bypass Vulnerability David Matousek (Aug 18)
Mambo jim Component Remote Include Vulnerability x0r0n (Aug 18)
Multiple xxs cPanel 10 preth00nker (Aug 18)
UPDATE vBulletin Version 3.5.4 exploit dicomdk (Aug 18)
- <Possible follow-ups>
- Re: UPDATE vBulletin Version 3.5.4 exploit scott (Aug 18)
Registration Now Open!: 3rd Annual US OWASP AppSec Conference - Oct 16-18 2006 - Seattle, WA Dave Wichers (Aug 18)
- Registration Now Open!: Security OPUS Infosec Conference - Oct 2-5 2006 - San Francisco, CA Richard Lindberg (Aug 17)
OneOrZero Helpdesk V1.6.4.1 susceptible to SQL injection and XSS vampire_chiristof (Aug 18)
contentpublisher Mambo Component Remote File Include Vulnerabilities crackers_child (Aug 18)
- Re: contentpublisher Mambo Component Remote File Include Vulnerabilities Carsten Eilers (Aug 25)
JavaScript Lazy Authorization Forcer and Visited Link Scaner pdp (architect) (Aug 18)
- Re: JavaScript Lazy Authorization Forcer and Visited Link Scaner mikeiscool (Aug 18)
Mambo mambelfish Component <= 1.1 Remote File Include Vulnerability bilkopat (Aug 18)
[SECURITY] [DSA 1153-1] New ClamAV packages fix arbitrary code execution Martin Schulze (Aug 18)
[KAPDA::#55] - Joomla poll component vulnerability alireza hassani (Aug 18)
Joomla Kochsuite Component <= 0.9.4 (config.kochsuite.php) Remote File Inclusion Vulnerability camino (Aug 18)
Joomla MamboWiki Component <= 0.9.4 (MamboLogin.php) Remote File Inclusion Vulnerability camino (Aug 18)
Joomla RFİ ( ERNE ) erne (Aug 18)
- Re: Joomla RFİ ( ERNE ) Carsten Eilers (Aug 24)
Sonium Enterprise Adressbook Version 0.2 (folder) RFI philipp . niedziela (Aug 18)
Modification For OpenSEF Remote file Inclusion Outlaw (Aug 19)
- Re: Modification For OpenSEF Remote file Inclusion Carsten Eilers (Aug 24)
Ako Comments (mod) Remote File Inclusion Outlaw (Aug 19)
[Kurdish Security # 23] Spaw Editor Remote Include Vulnerability botan (Aug 19)
Mambo CatalogShop Remote File Inclusion Outlaw (Aug 19)
Mambo com_cropimage 1.0 Component Remote Include Vulnerability x0r0n (Aug 19)
XennoBB <= 2.2.1 "icon_topic" SQL Injection c . boulton (Aug 19)
POC & exploit for Apache mod_rewrite off-by-one Jacobo Avariento (Aug 21)
LBlog <= "comments.asp" SQL Injection Exploit ChironeX . FleckeriX (Aug 21)
WoltLab Burning Board 2.3.5(WBB) in XSS ZeberuS (Aug 21)
[SECURITY] [DSA 1154-1] New squirrelmail packages fix information disclosure Moritz Muehlenhoff (Aug 21)
New PowerPoint 0-day and Trojan - FAQ document ready Juha-Matti Laurio (Aug 21)
[XSec-06-08]: Windows 2000 Multiple COM Object Instantiation Vulnerability nop (Aug 21)
Mambo Component - Display MOSBot Manager Remote File Inclusion Vuln Outlaw (Aug 21)
- Re: Mambo Component - Display MOSBot Manager Remote File Inclusion Vuln Jan de Groot (Aug 22)
- <Possible follow-ups>
- Mambo Component - Display MOSBot Manager Remote File Inclusion Vuln Outlaw (Aug 21)
DoS 2wire Gateway preth00nker (Aug 21)
[XSec-06-09]: Internet Explorer Multiple COM Objects Color Property DoS Vulnerability nop (Aug 21)
ToendaCMS <= 1.0.3 -(tcms_administer_site) Remote File Include h4ck3riran (Aug 21)
- Re: ToendaCMS <= 1.0.3 -(tcms_administer_site) Remote File Include Carsten Eilers (Aug 24)
SimpleBlog 2.0 <= "comments.asp" SQL Injection Exploit ChironeX . FleckeriX (Aug 21)
Diesel Job Site forgot.php Cross-Site Scripting night_warrior- (Aug 21)
Diesel Paid Mail getad.php Cross-Site Scripting Vulnerability night_warrior- (Aug 21)
Smart Traffic Remote File Include Vulnerability night_warrior- (Aug 21)
DieselPay İndex.php Cross-Site Scripting Vulnerability night_warrior- (Aug 21)
[ MDKSA-2006:144 ] - Updated php packages fix vulnerability security (Aug 21)
Mambo Component - EstateAgent Remote File Inclusion Outlaw (Aug 22)
- Re: Mambo Component - EstateAgent Remote File Inclusion Carsten Eilers (Aug 24)
[ MDKSA-2006:145 ] - Updated Firefox packages fix multiple vulnerabilities security (Aug 22)
MDaemon POP3 server remote buffer overflow (preauth) infocus (Aug 22)
[ MDKSA-2006:146 ] - Updated Thunderbird packages fix multiple vulnerabilities security (Aug 22)
TTG0601 - Alt-N WebAdmin Multiple Vulnerabilities TTG (Aug 22)
Vendor Statement: fixed Mobotix IP Network Cameras Multiple XSS bug dkabs (Aug 22)
EEYE:ALERT: MS06-042 Related Internet Explorer 'Crash' is Exploitable Marc Maiffret (Aug 22)
Major updates in PowerPoint FAQ document - not a 0-day issue Juha-Matti Laurio (Aug 22)
Simple Machines Forum <=1.1RC2 unset() vulnerabilities rgod (Aug 22)
unauthorized VNC access in AK-Systems Windows Terminals Victor Sudakov (Aug 22)
(exploit) firefox 1.5.0.6 linux DoS tomas (Aug 22)
Linux Kernel SCTP Privilege Elevation Vulnerability Avert (Aug 22)
Symantec Enterprise Security Manager Denial-of-Service Vulnerability Avert (Aug 22)
Tons of SQL-injections and XSS in Eichhorn Portal and vendor page MC Iglo (Aug 22)
PHlyMail Lite [PM_[path][lib]=] Remote File Include Vulnerability D3nGeR (Aug 22)
- Re: PHlyMail Lite [PM_[path][lib]=] Remote File Include Vulnerability Carsten Eilers (Aug 24)
BlackBoard Multiple Vulnerabilities (XSS) Pr070n (Aug 23)
- Re: BlackBoard Multiple Vulnerabilities (XSS) C. Hamby (Aug 23)
- <Possible follow-ups>
- Re: BlackBoard Multiple Vulnerabilities (XSS) pr0t0n (Aug 23)
- Re: Re: BlackBoard Multiple Vulnerabilities (XSS) Pr070n (Aug 31)
PHProjekt v0.6.1 Remote File Inclusion Vulnerability (2) D3nGeR (Aug 23)
- Re: PHProjekt v0.6.1 Remote File Inclusion Vulnerability (2) Carsten Eilers (Aug 24)
[ MDKSA-2006:147 ] - Updated squirrelmail packages fix vulnerabilities security (Aug 23)
faille include in "VeriTECH" isreal king-hacker (Aug 23)
Symantec Gateway Security DNS exploit Gianstefano Monni (Aug 23)
- AW: Symantec Gateway Security DNS exploit Andre Braun (Aug 23)
- RE: Symantec Gateway Security DNS exploit Pretorius, Wynand (ZA - Johannesburg) (Aug 23)
- <Possible follow-ups>
- Re: Symantec Gateway Security DNS exploit axel (Aug 25)
Cisco Security Advisory: Cisco VPN 3000 Concentrator FTP Management Vulnerabilities Cisco Systems Product Security Incident Response Team (Aug 23)
Cisco Security Advisory: Unintentional Password Modification in Cisco Firewall Products Cisco Systems Product Security Incident Response Team (Aug 23)
Bugtraq ID: 18402 The Cute Group (Aug 23)
New malware names and updates to PowerPoint FAQ document Juha-Matti Laurio (Aug 23)
[ GLSA 200608-21 ] Heimdal: Multiple local privilege escalation vulnerabilities Raphael Marichez (Aug 23)
[ GLSA 200608-22 ] fbida: Arbitrary command execution Raphael Marichez (Aug 23)
FreeBSD Security Advisory FreeBSD-SA-06:18.ppp FreeBSD Security Advisories (Aug 24)
Advisory: VistaBB <= 2.x Multiple File Inclusion Vulnerabilities Mustafa Can Bjorn IPEKCI (Aug 24)
Advisory: Integramod Portal <= 2.x File Inclusion Vulnerability Mustafa Can Bjorn IPEKCI (Aug 24)
Re: Opsware NAS 6.0 reveals MySQL 'root' password danil9470 (Aug 24)
[SECURITY] [DSA 1155-1] New sendmail packages fix denial of service Martin Schulze (Aug 24)
[ GLSA 200608-23 ] Heartbeat: Denial of Service Sune Kloppenborg Jeppesen (Aug 24)
[SECURITY] [DSA 1155-2] New sendmail packages fix denial of service Martin Schulze (Aug 24)
EEYE: Internet Explorer Compressed Content URL Heap Overflow Vulnerability Marc Maiffret (Aug 24)
[ MDKSA-2006:149 ] - Updated MySQL packages fix user privilege vulnerabilities security (Aug 24)
pSlash v0.7 (lvc_include_dir) Remote Include Vulnerability x0r0n (Aug 24)
Advisory 05/2006: Zend Platform Multiple Remote Vulnerabilities Stefan Esser (Aug 24)
[ MDKSA-2006:148 ] - Updated xorg-x11 packages fix vulnerabilities security (Aug 25)
Re: [eVuln] B-net Software Multiple XSS Vulnerabilities anon (Aug 25)
Multiple Vulnerabilities in Asterisk 1.2.10 (Fixed in 1.2.11) Matt Riddell (IT) (Aug 25)
rPSA-2006-0157-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs Justin M. Forbes (Aug 25)
NSFOCUS SA2006-08 : Microsoft IE6 urlmon.dll Long URL Buffer Overflow Vulnerability NSFOCUS Security Team (Aug 25)
rPSA-2006-0158-1 tshark wireshark Justin M. Forbes (Aug 25)
TSLSA-2006-0048 - multi Trustix Security Advisor (Aug 25)
FreeBSD Security Advisory FreeBSD-SA-06:18.ppp [REVISED] FreeBSD Security Advisories (Aug 25)
Indiana University Security Advisory: Fuji Xerox Printing Systems (FXPS) print engine vulnerabilities Krulewitch, Sean V (Aug 25)
YaPiG thanks_comment.php Cross-Site Scripting Vulnerability Kuon_at_Armorize_dot_com (Aug 25)
[ MDKSA-2006:150 ] - Updated kernel packages fix multiple vulnerabilities security (Aug 25)
[ MDKSA-2006:151 ] - Updated kernel packages fix multiple vulnerabilities security (Aug 25)
CuteNews 1.3.* Remote File Include Vulnerability stormhacker (Aug 25)
- Re: CuteNews 1.3.* Remote File Include Vulnerability Carsten Eilers (Aug 30)
[ MDKSA-2006:152 ] - Updated wireshark packages fix multiple vulnerabilities security (Aug 26)
MyBB Html Injection ( XSS ) Redworm (Aug 26)
AlstraSoft Video Share Enterprise Remote File Include Vulnerability night_warrior- (Aug 26)
[ GLSA 200608-24 ] AlsaPlayer: Multiple buffer overflows Raphael Marichez (Aug 26)
Sql injection in Mambo & Joomla Omid (Aug 26)
Bigace 1.8.2 (GLOBALS) Remote File Inclusion vampire_chiristof (Aug 26)
Sql injection in Xoops Omid (Aug 26)
Jupiter CMS 1.1.5 index.php Remote File Include D3nGeR (Aug 26)
- Re: Jupiter CMS 1.1.5 index.php Remote File Include Carsten Eilers (Aug 30)
Jetbox CMS search_function.php Remote File D3nGeR (Aug 26)
Suggested Fix for CVE-2006-4299 Michael Jennings (Aug 26)
Cisco NAC Appliance Agent Installation Bypass Vulnerability Andreas Gal (Aug 26)
- Re: Cisco NAC Appliance Agent Installation Bypass Vulnerability Eloy Paris (Aug 28)
  - Re: Cisco NAC Appliance Agent Installation Bypass Vulnerability Joe Feise (Aug 30)
- Re: Cisco NAC Appliance Agent Installation Bypass Vulnerability Udo Sprotte (Aug 28)
Mambo/Joomla com_comprofiler Components <== v1.0 RC 2 Multiple Remote File Include Vulnerabilities matdhule (Aug 26)
[SECURITY] [DSA 1156-1] New kdebase packages fix information disclosure Moritz Muehlenhoff (Aug 28)
[XSec-06-10]: Internet Explorer (daxctle.ocx) Heap Overflow Vulnerability nop (Aug 28)
[SECURITY] [DSA 1159-1] New Mozilla Thunderbird packages fix several problems Martin Schulze (Aug 28)
[SECURITY] [DSA 1158-1] New streamripper packages fix arbitrary code execution Moritz Muehlenhoff (Aug 28)
[SECURITY] [DSA 1157-1] New ruby1.8 packages fix several vulnerabilities Moritz Muehlenhoff (Aug 28)
[ GLSA 200608-25 ] X.org and some X.org libraries: Local privilege escalations Raphael Marichez (Aug 28)
interact <= 2.2 (CONFIG[BASE_PATH]) Remote File Include Vulnerability carcabotx (Aug 28)
JetBox cms (search_function.php) Remote File Include carcabotx (Aug 28)
- AW: JetBox cms (search_function.php) Remote File Include Frank Reißner (Aug 29)
Re: Another YabbSE Remote Code Execution Vulnerability wiziwig (Aug 28)
Possible Myspace Worm mjw (Aug 28)
SYMSA-2006-009 research (Aug 29)
[ GLSA 200608-27 ] Motor: Execution of arbitrary code Raphael Marichez (Aug 29)
[ GLSA 200608-26 ] Wireshark: Multiple vulnerabilities Raphael Marichez (Aug 29)
[ GLSA 200608-28 ] PHP: Arbitary code execution Raphael Marichez (Aug 29)
rPSA-2006-0159-1 ImageMagick Justin M. Forbes (Aug 29)
[ MDKSA-2006:155 ] - Updated ImageMagick packages fix vulnerabilities security (Aug 29)
[ MDKSA-2006:153 ] - Updated binutils packages fix multiple vulnerabilities security (Aug 29)
CYBSEC - Security Advisory: Microsoft Windows DHCP Client Service Remote Buffer Overflow Mariano Nuñez Di Croce (Aug 29)
[ MDKSA-2006:154 ] - Updated lesstif packages fix potential local root vulnerability security (Aug 29)
LinksCaffe no checker at admin hoangyenxinhdep (Aug 29)
[SECURITY] [DSA 1160-1] New Mozilla packages fix several vulnerabilities Martin Schulze (Aug 29)
e107 <= 0.75 GLOBALS[] overwrite/Zend_Hash_Del_Key_Or_Index remote commands execution rgod (Aug 29)
Submit ( b2evolution<= 1.8 Remote File Include Vulnerabilities ) h4ck3riran (Aug 29)
- <Possible follow-ups>
- Re: Submit ( b2evolution<= 1.8 Remote File Include Vulnerabilities ) do (Aug 31)
Submit ( ToendaCMS<= ( Remote File Include Vulnerabilities ) h4ck3riran (Aug 29)
JS ASP Faq Manager v1.10 sql injection ali (Aug 29)
[SECURITY] [DSA 1161-1] New Mozilla Firefox packages fix several vulnerabilities Martin Schulze (Aug 29)
DUpoll 3.1 security alert bozkurtserdar (Aug 29)
Portail PHP mod_phpalbum 2.15 Modules Remote File Inclusion x0r0n (Aug 29)
InfoSec Paper: Creating Business Through Virtual Trust Kenneth F. Belva (Aug 30)
Re: AW: JetBox cms (search_function.php) Remote File Include Steven M. Christey (Aug 30)
- Re: JetBox cms (search_function.php) Remote File Include Carsten Eilers (Aug 30)
  - Re: JetBox cms (search_function.php) Remote File Include Steven M. Christey (Aug 31)
- AW: AW: JetBox cms (search_function.php) Remote File Include Frank Reißner (Aug 31)
SQL-Ledger serious security vulnerability and workaround chris (Aug 30)
[SECURITY] [DSA 1162-1] New libmusicbrainz packages fix arbitrary code execution Martin Schulze (Aug 30)
Ezportal/Ztml v1.0 Multiple vulnerabilities Hessamx (Aug 30)
IwebNegar v1.1 Multiple vulnerabilities Hessamx (Aug 30)
Nuked Klan 1.7 SP4.3 : Function Anti-XSS Bypassed Blwood (Aug 30)
XSS in HLstats 1.34 MC Iglo (Aug 30)
[KAPDA::#56] - FREEKOT SQL Injection Vulnerability farhadkey (Aug 30)
[SECURITY] [DSA 1163-1] New gtetrinet packages fix arbitrary code execution Martin Schulze (Aug 30)
ezContents Version 2.0.3 Remote/Local File Inclusion, SQL Injection, XSS gmdarkfig (Aug 30)
osCommerce < 2.2 Milestone 2 060817 POC Exploit s10242006 (Aug 30)
feedsplitter considered harmful jon (Aug 30)
[KAPDA]MyBB 1.1.7 ~ admin/global.php ~ XSS Attack addmimistrator (Aug 30)
Hackers to Hackers Conference III - Call for Papers Rodrigo Rubira Branco (BSDaemon) (Aug 31)
[KAPDA]MyBB 1.1.7~ htmlspeacialchar_uni(), fixjavascript(), functions_post.php ~[url]XSS attack addmimistrator (Aug 31)
[ MDKSA-2006:157 ] - Updated musicbrainz packages fix buffer overflow vulnerabilities security (Aug 31)
[ECHO_ADV_46$2006] ExBB v1.9.1 (exbb[home_path]) Multiple Remote File Inclusion erdc (Aug 31)
[ MDKSA-2006:156 ] - Updated sendmail packages fix DoS vulnerabilities security (Aug 31)
New NT4/Windows botnet reported Juha-Matti Laurio (Aug 31)
XXS in learncenter.asp exe_crack (Aug 31)
rPSA-2006-0161-1 libmusicbrainz rPath Update Announcements (Aug 31)
Lyris ListManager 8.95: Add arbitrary administrator to arbitrary list Design Properly (Aug 31)
Membrepass v1.5 Php code execution, Xss, Sql Injection gmdarkfig (Aug 31)
[SECURITY] [DSA 1164-1] New sendmail packages fix denial of service Martin Schulze (Aug 31)
[ MDKSA-2006:158 ] - Updated MySQL packages fix DoS vuln, initscript bug security (Aug 31)
Compression Plus and Tumblweed EMF Stack Overflow Michael Hale Ligh (Aug 31)
Pheap CMS<= (lpref) Remote File Inclusion Exploit SHiKaA- (Aug 31)
rPSA-2006-0162-1 kernel rPath Update Announcements (Aug 31)
ModuleBased CMS alfa 1 Multiple Remote File Inclusion amir . scorpino (Aug 31)
[ISR] - IBM eGatherer ActiveX Code Execution PoC Francisco Amato (Aug 31)

Previous period

Next period