Bugtraq: by thread

• RSS Feed
•  About List
•  All Lists

Previous period

Next period

763 messages starting Jun 01 06 and ending Jun 30 06
Date index | Thread index | Author index

• multiple file inclusion exploits in ovidentia v5.8.0 black code (Jun 01)
  • <Possible follow-ups>
  • multiple file inclusion exploits in ovidentia v5.8.0 black-cod3 (Jun 01)
• FreeBSD Security Advisory FreeBSD-SA-06:16.smbfs FreeBSD Security Advisories (Jun 01)
• FreeBSD Security Advisory FreeBSD-SA-06:15.ypserv FreeBSD Security Advisories (Jun 01)
• ishopcart cgi 0day and multiple vulnerabilities bugtraq (Jun 01)
• TAL RateMyPic v1.0 luny (Jun 01)
• Snort HTTP Inspect Pre-Processor Uricontent Bypass Christian Swartzbaugh (Jun 01)
• Squirrelmail local file inclusion brokejunker (Jun 01)
  • Re: Squirrelmail local file inclusion Paul Schmehl (Jun 02)
  • <Possible follow-ups>
  • Re: Squirrelmail local file inclusion Steven M. Christey (Jun 06)
    • Re: Squirrelmail local file inclusion pauls (Jun 07)
• SyScan'06 - The Hackers' Conference in Asia thomas48 (Jun 01)
• [SECURITY] [DSA 1085-1] New lynx-cur packages fix several vulnerabilities Martin Schulze (Jun 01)
  • Re: [SECURITY] [DSA 1085-1] New lynx-cur packages fix several vulnerabilities Thomas Dickey (Jun 02)
• Re: Internet explorer Vulnerbility Alexander Sotirov (Jun 01)
  • <Possible follow-ups>
  • RE: Internet explorer Vulnerbility Peter Kruse (Jun 02)
  • Re: Internet explorer Vulnerbility Hariharan (Jun 04)
  • Internet Explorer vulnerbility Mr . Niega (Jun 08)
    • Re: Internet Explorer vulnerbility Andrei Ponomarev (Jun 12)
    • Re: Internet Explorer vulnerbility Michael N. Telnov (Jun 13)
  • RE: Internet Explorer vulnerbility Greg Merideth (Forward Technology) (Jun 12)
    • Re: RE: Internet Explorer vulnerbility Charles Hamby (Jun 17)
• Corsaire Security Advisory - VMware ESX Server Cross Site Scripting issue advisories (Jun 01)
• Re: # MHG Security Team --- PHP NUKE All version Remote File Inc. rgod (Jun 01)
  • <Possible follow-ups>
  • Re: Re: # MHG Security Team --- PHP NUKE All version Remote File Inc. nukedx (Jun 02)
  • Re: Re: # MHG Security Team --- PHP NUKE All version Remote File Inc. Steven M. Christey (Jun 03)
• [ MDKSA-2006:094 ] - Updated evolution packages fix DoS (crash) vulnerability on certain messages. security (Jun 01)
• CA Forum Remote SQL Injection omnipresent (Jun 01)
• Forensic memory dumping intricacies - PhysicalMemory, DD, and caching issues Arne Vidstrom (Jun 02)
• Joomla/Mambo CMS Component SimpleBoard 1.1 XSS-Vulnerabilities Yannick von Arx (Jun 02)
• Re: PHPSimple Choose v0.3 prattmic (Jun 02)
• northstudio Cross Site Scripting Vulnerability CrAzY . CrAcKeR (Jun 02)
• SMF 1.0.7 and lower plus 1.1rc2 and lower - IP spoofing vulnerability/IP ban evasion vulnerability Jessica Hope (Jun 02)
• Re: my Web Server << v-1.0 Denial of Service Exploit Steven M. Christey (Jun 02)
• VMSA-2006-0002 - VMware Server sensitive information lifetime issue VMware Security Team (Jun 02)
• Weblog Oggi v1.0 luny (Jun 02)
• PHP ManualMaker v1.0 luny (Jun 02)
• Bytehoard 2.1 Remote File Include beford (Jun 02)
• Re: Jiwa Financials - Reporting allows execution of arbitrary reports as SQL user with full permissions. mikes (Jun 02)
• newsfactory Cross Site Scripting & SQL injection CrAzY . CrAcKeR (Jun 02)
• Redaxo CMS <= 3.2 Remote File Include beford (Jun 02)
• New Snort Bypass - Patch - Bypass of Patch Sigint Consulting (Jun 02)
  • Re: New Snort Bypass - Patch - Bypass of Patch M. Dodge Mumford (Jun 03)
    • Re: New Snort Bypass - Patch - Bypass of Patch M. Dodge Mumford (Jun 04)
      • Re: New Snort Bypass - Patch - Bypass of Patch Pukhraj Singh (Jun 05)
• aspWebLinks 2.0 Remote SQL Injection / Admin Pass Change Exploit ajannhwt (Jun 02)
• MyTrueHood.com - XSS luny (Jun 02)
• [SECURITY] [DSA 1086-1] New xmcd packages fix denial of service Martin Schulze (Jun 02)
• new bug webmaster (Jun 02)
• Pro Publish SQL Injection and XSS Vulnerabilities Soothackers (Jun 02)
• # MHG Security Team --- MyBloggie 2.1.1 version Remote File Include Vulnerabilit erne ayaz (Jun 02)
  • <Possible follow-ups>
  • Re: # MHG Security Team --- MyBloggie 2.1.1 version Remote File Include Vulnerabilit nukedx (Jun 04)
  • Re: # MHG Security Team --- MyBloggie 2.1.1 version Remote File Include Vulnerabilit Steven M. Christey (Jun 06)
• [DRUPAL-SA-2006-005] Drupal 4.6.7 / 4.7.1 fixes SQL injection issue Uwe Hermann (Jun 02)
• [DRUPAL-SA-2006-007] Drupal 4.6.8 / 4.7.2 fixes arbitrary file execution issue Uwe Hermann (Jun 02)
• [DRUPAL-SA-2006-008] Drupal 4.6.8 / 4.7.2 fixes XSS issue Uwe Hermann (Jun 02)
• [DRUPAL-SA-2006-006] Drupal 4.6.7 / 4.7.1 fixes arbitrary file execution issue Uwe Hermann (Jun 03)
• rPSA-2006-0091-1 firefox thunderbird Justin M. Forbes (Jun 03)
• Pixelpost <= 1-5rc1-2 multiple vulnerabilities rgod (Jun 04)
• [SECURITY] [DSA 1087-1] New PostgreSQL packages fix encoding vulnerabilities Martin Schulze (Jun 04)
• [ECHO_ADV_32$2006] SCart 2.0 Remote Code Execution eufrato (Jun 04)
• Critical SQL Injection in CoolForum gmdarkfig (Jun 04)
• [SECURITY] [DSA 1088-1] New centericq packages fix arbitrary code execution Martin Schulze (Jun 04)
• Blackhat USA 2006 - Review , remarks and proposal agenda newslist () security-briefings com (Jun 04)
• LocazoList Classifieds <= v1.05e(viewmsg.asp) Remote SQL Injection Vulnerability ajannhwt (Jun 04)
  • <Possible follow-ups>
  • LocazoList Classifieds <= v1.05e(viewmsg.asp) Remote SQL Injection Vulnerability ajannhwt (Jun 05)
• phpBB2 (template.php) Remote File Inclusion canberx (Jun 04)
  • RE: phpBB2 (template.php) Remote File Inclusion Scrouaf _ (Jun 05)
  • Re: phpBB2 (template.php) Remote File Inclusion ad () heapoverflow com (Jun 05)
    • Re: phpBB2 (template.php) Remote File Inclusion Jessica Hope (Jun 06)
    • Re: phpBB2 (template.php) Remote File Inclusion Aaron Klein (Jun 06)
    • Re: phpBB2 (template.php) Remote File Inclusion Paul Laudanski (Jun 06)
• [MajorSecurity #7]dotWidget CMS <= 1.0.6 - Remote File Include Vulnerability admin (Jun 04)
• [SECURITY] [DSA 1089-1] New freeradius packages fix arbitrary code execution Martin Schulze (Jun 04)
• DotClear <= 1.2.4 'blog_dc_path' (php5) arbitrary remote inclusion rgod (Jun 04)
• LifeType <=1.0.4 'articleId' SQL injection rgod (Jun 04)
• Re: WBB<--v2.3.4"misc.php" SQL injection Vulnerability nukedx (Jun 04)
• Re: OaBoard 1.0 Remote File inclusion Botan Rizgar (Jun 04)
• Re: [Info Disclosure] Diesel PHP Job Site Latest Version John F Flynn III (Jun 04)
  • Re: [Info Disclosure] Diesel PHP Job Site Latest Version Ronald van den Blink (Jun 07)
• Re: Fire fox dos exploit pagvac (Jun 04)
  • <Possible follow-ups>
  • RE: Fire fox dos exploit Andy (Jun 04)
    • RE: Fire fox dos exploit Sanjay Rawat (Jun 05)
      • RE: Fire fox dos exploit Jaroslaw Sajko (Jun 07)
  • Re: Fire fox dos exploit Ronald van den Blink (Jun 04)
  • Re: Fire fox dos exploit Yannick von Arx (Jun 04)
  • Re: Re: Fire fox dos exploit vincenzo . ampolo (Jun 04)
  • Re: Fire fox dos exploit Phil Trainor (Jun 04)
  • Re: Fire fox dos exploit Ronald van den Blink (Jun 04)
  • Re: Fire fox dos exploit Aaron Hopkins (Jun 04)
  • Re: Re: Fire fox dos exploit al4321 (Jun 07)
• Re: phpFoX All Version Login Exploit purefan (Jun 04)
• VMSA-2006-0001 - VMware ESX Server Cross Site Scripting issue VMware Security Team (Jun 04)
• Timberland Search XSS Vulnerability try_og (Jun 05)
• New <<BackTrack release announcement Max Moser (Jun 05)
• SMS "messages.php" SQL injection CrAzY . CrAcKeR (Jun 05)
• XSS in ICQ.com sn4k3 . 23 (Jun 05)
  • <Possible follow-ups>
  • Re: XSS in ICQ.com 321_321 (Jun 07)
  • Re: XSS in ICQ.com 321_321 (Jun 07)
  • Re: XSS in ICQ.com 321_321 (Jun 08)
• Client buffer-overflow in Quake 3 engine (1.32c / rev 795) Luigi Auriemma (Jun 05)
• Bookmark4U Remote File Include selfar2002 (Jun 05)
  • Re: Bookmark4U Remote File Include str0ke (Jun 05)
• # MHG Security Team ---Rumble 1.02 version Remote File Inc. erne (Jun 05)
  • <Possible follow-ups>
  • # MHG Security Team ---Rumble 1.02 version Remote File Inc. MSN : erne [at] ernealizm [dot] com (Jun 05)
• Re: [Full-disclosure] bug in oscomerce Frank Laszlo (Jun 05)
• CyBoards PHP Lite v1.25 (common.PHP) Remote File Inclusion SpC-x (Jun 05)
• Multiple Vendor NTFS Data Stream Malware Stealth Technique Joxean Koret (Jun 05)
  • <Possible follow-ups>
  • Re: Multiple Vendor NTFS Data Stream Malware Stealth Technique Andreas Marx (Jun 06)
    • Re: Multiple Vendor NTFS Data Stream Malware Stealth Technique Gadi Evron (Jun 08)
• LabWiki v1.0 luny (Jun 05)
• Kmita FAQ v1.0 luny (Jun 05)
• TSLSA-2006-0032 - multi Trustix Security Advisor (Jun 05)
• FunkBoard CF0.71 (profile.php) Remote User Pass Change Exploit ajannhwt (Jun 05)
• ewsEngine <= 1.5.0(newscomments.php) Remote SQL Injection Vulnerability ajannhwt (Jun 05)
• Advisory 04/2006: DokuWiki PHP code execution vulnerability in spellchecker Stefan Esser (Jun 05)
• Re: [Full Disclosure] [Kil13r-SA-20060520] Microsoft Internet Explorer Crash Vulnerability mac68k (Jun 05)
• [MajorSecurity #8]DreamAccount <= 3.1 - Remote File Include Vulnerability admin (Jun 05)
  • <Possible follow-ups>
  • Re: [MajorSecurity #8]DreamAccount <= 3.1 - Remote File Include Vulnerability admin (Jun 06)
• [MajorSecurity #9]HostAdmin <= 3.1 - Remote File Include Vulnerability admin (Jun 05)
• Personal Information Disclosure/Account Hijacking Vulerability in mafia online games Ulrich Keil (Jun 05)
• Dmx Forum <= v2.1a Remote Passwords Disclosure gmdarkfig (Jun 05)
• [Kil13r-SA-20060605] Syworks SafeNET Policy File Vulnerability mac68k (Jun 05)
• [Kil13r-SA-20060606] ESTsoft InternetDISK Arbitary Code Execution Vulnerability mac68k (Jun 05)
• [KAPDA::#47] - myNewsletter 1.1.2 SQL_Injection farhadkey (Jun 05)
• Re: [Full-disclosure] RealVNC 4.1.1 Remote Compromise Tobias Kreidl (Jun 05)
  • Re: [Full-disclosure] RealVNC 4.1.1 Remote Compromise Kurt Seifried (Jun 06)
    • Re: [Full-disclosure] RealVNC 4.1.1 Remote Compromise Ray Van Dolson (Jun 07)
      • Re: [Full-disclosure] RealVNC 4.1.1 Remote Compromise Jose Ramirez (Jun 08)
    • Re: [Full-disclosure] RealVNC 4.1.1 Remote Compromise Bojan Zdrnja (Jun 08)
• ASPScriptz Guest Book 2.0 XSS omnipresent (Jun 05)
• Re: PCPIN Chat <= 5.0.4 "login/language" remote cmmnds xctn k . reznichak (Jun 05)
• file include in Xtreme Downloads v.1.0 gamr-14 (Jun 06)
• Multiple file include exploits in Xtreme Downloads v.1.0 black code (Jun 06)
• Particle Gallery v1.0.0 luny (Jun 06)
• Partial Links v1.2.2 luny (Jun 06)
• ParticleSoft Whois v1.0.3 luny (Jun 06)
• ParticleSoft Wiki v1.0.2 luny (Jun 06)
• [ MDKSA-2006:095 ] - Updated libtiff packages fixes tiffsplit vulnerability security (Jun 06)
• GANTTy v1.0.3 luny (Jun 06)
• Asterisk 1.2.9 and Asterisk 1.0.11 Released - Security Fix Matt Riddell (IT) (Jun 06)
• IRM 019: MailMarshal 6.1 SMTP MTA Content Filter Bypass IRM Advisories (Jun 06)
  • <Possible follow-ups>
  • Re: IRM 019: MailMarshal 6.1 SMTP MTA Content Filter Bypass phil . mccracken (Jun 07)
    • Re: IRM 019: MailMarshal 6.1 SMTP MTA Content Filter Bypass Hayden Searle (Jun 08)
      • Re: IRM 019: MailMarshal 6.1 SMTP MTA Content Filter Bypass alberto (Jun 09)
• [SECURITY] [DSA 1090-1] New spamassassin packages fix remote command execution Martin Schulze (Jun 06)
• libgd 2.0.33 infinite loop in GIF decoding ? rocheml (Jun 06)
  • Re: libgd 2.0.33 infinite loop in GIF decoding ? Xavier Roche (Jun 09)
• [ GLSA 200606-02 ] shadow: Privilege escalation Sune Kloppenborg Jeppesen (Jun 07)
• Re: Buffer-overflow and crash in Fenice OMS 1.10 giampaolo . mancini (Jun 07)
• bug on showwich.asp ip . chat (Jun 07)
• BloggIT <= 1.01 (admin.php) Arbitrary code execution Federico Fazzi (Jun 07)
• TinyPHP forum <= 3.6 Remote Command Execution Exploit hessamx (Jun 07)
• aWebNews <= 1.0 (login.php) Remote DocumentRoot file disclosure Federico Fazzi (Jun 07)
  • Re: aWebNews <= 1.0 (login.php) Remote DocumentRoot file disclosure str0ke (Jun 08)
• Re: WebCalendar-1.0.3 reading of any files craig (Jun 07)
• XSS on LarkinWEB & Company spymeta (Jun 07)
• ADVISORY - D-Link Wireless Access-Point news (Jun 07)
• [HV-LOW] Microsoft NetMeeting memory corruption (Brief) vuln (Jun 07)
• [ GLSA 200606-03 ] Dia: Format string vulnerabilities Sune Kloppenborg Jeppesen (Jun 07)
• rPSA-2006-0096-1 spamassassin Justin M. Forbes (Jun 07)
• Vice Stats 0.5b SQL injection CrAzY . CrAcKeR (Jun 07)
• [ GLSA 200606-05 ] Pound: HTTP request smuggling Sune Kloppenborg Jeppesen (Jun 07)
• MyBB 1.1.2 New XSS o . y . 6 (Jun 07)
• [FLSA-2006:189137-1] Updated mozilla packages fix security issues Marc Deslauriers (Jun 07)
• [ GLSA 200606-04 ] Tor: Several vulnerabilities Sune Kloppenborg Jeppesen (Jun 07)
• [ GLSA 200606-01 ] Opera: Buffer overflow Sune Kloppenborg Jeppesen (Jun 07)
• [FLSA-2006:190777] Updated X.org packages fix security issue Marc Deslauriers (Jun 07)
• MiraksGalerie <= 2.62 Multiple Remote command execution Federico Fazzi (Jun 07)
  • <Possible follow-ups>
  • MiraksGalerie <= 2.62 Multiple Remote command execution Federico Fazzi (Jun 08)
• Calendar Express 2 SQL injection CrAzY . CrAcKeR (Jun 08)
• [FLSA-2006:189137-2] Updated firefox package fixes security issues Marc Deslauriers (Jun 08)
• [FLSA-2006:190941] Updated ipsec-tools package fixes security issue Marc Deslauriers (Jun 08)
• [FLSA-2006:190884] Updated squirrelmail package fixes security issues Marc Deslauriers (Jun 08)
• [ MDKSA-2006:096 ] - Updated openldap packages fixes buffer overflow vulnerability. security (Jun 08)
• [ MDKSA-2006:097 ] - Updated MySQL packages fixes SQL injection vulnerability. security (Jun 08)
• PBL Guestbook v1.31 - XSS luny (Jun 08)
• [ MDKSA-2006:098 ] - Updated postgresql packages fixes SQL injection vulnerabilities. security (Jun 08)
• Mafia Moblog Full Path Disclosure / SQL injection simo64 (Jun 08)
• Babykatmedia.com scripts - vSCAL & vREAL - XSS Vulns luny (Jun 08)
• Chemical Directory - XSS luny (Jun 08)
• Easy Ad-Manager luny (Jun 08)
• [NOBYTES.COM: #12] ViArt Shop v2.5.5 - XSS Vulnerability John Cobb (Jun 08)
• [ GLSA 200606-06 ] AWStats: Remote execution of arbitrary code Sune Kloppenborg Jeppesen (Jun 08)
• [MajorSecurity #10]i.List <= 1.5 - XSS admin (Jun 08)
• E-Dating System from scriptsez.net - XSS luny (Jun 08)
• [SECURITY] [DSA 1093-1] New xine-ui packages fix denial of service Martin Schulze (Jun 08)
• Ez Ringtone Manager from scriptez.net - XSS luny (Jun 08)
• GUESTEX guestbook code execution root (Jun 08)
• [USN-291-1] FreeType vulnerabilities Martin Pitt (Jun 08)
• cms-bandits 2.5, Remote command execution Federico Fazzi (Jun 08)
• Tikiwiki 1.9.3.2 security release marc (Jun 08)
• Uninformed Journal Release Announcement: Volume 4 Uninformed Journal (Jun 08)
• Mathcad Area Lock Vulnerability bugtraq (Jun 08)
• NPDS <= 5.10 Local Inclusion, XSS, Full path disclosure gmdarkfig (Jun 08)
• Back-end = 0.7.2.1 (jpcache.php) Remote command execution Federico Fazzi (Jun 08)
• PHP-Nuke <= 7.9 Search XSS Vulnerability try_og (Jun 08)
  • Re: PHP-Nuke <= 7.9 Search XSS Vulnerability Paul Laudanski (Jun 14)
  • <Possible follow-ups>
  • Re: PHP-Nuke <= 7.9 Search XSS Vulnerability try_og (Jun 09)
• [SECURITY] [DSA 1091-1] New TIFF packages fix arbitrary code execution Martin Schulze (Jun 08)
• Re: phpBannerExchange 2.0 Directory Traversal Vulnerability mopeygoff (Jun 08)
• bug of script injection in shoutcast servers mantasjadzevicius (Jun 08)
• Re: Tiny Web Gallery <= 1.4 XSS tinywebgallery (Jun 08)
• Ie opera dos exploit co296 (Jun 08)
  • Re: Ie opera dos exploit Daniel Hoffmann (Jun 13)
  • Re: Ie opera dos exploit Nathaniel Hasenfus (Jun 17)
• [USN-289-1] tiff vulnerabilities Martin Pitt (Jun 08)
• rPSA-2006-0098-1 gdm Justin M. Forbes (Jun 08)
• 'Multiple Sql injection and XSS in integramod portal ahwaz (Jun 08)
• [SECURITY] [DSA 1092-1] New MySQL 4.1 packages fix SQL injection Martin Schulze (Jun 08)
• [security bulletin] HPSBMA02121 SSRT061157 rev.2 - HP OpenView Storage Data Protector Remote Arbitrary Command Execution security-alert (Jun 08)
• [security bulletin] HPSBUX02090 SSRT051058 rev.2 - HP-UX Secure Shell Remote Denial of Service (DoS) security-alert (Jun 09)
• SSL VPNs and security Michal Zalewski (Jun 09)
  • Re: SSL VPNs and security Amit Klein (AKsecurity) (Jun 09)
  • Message not available
    • Re: SSL VPNs and security E Mintz (Jun 09)
  • Message not available
    • Re: SSL VPNs and security Michal Zalewski (Jun 09)
      • Re: SSL VPNs and security E Mintz (Jun 12)
  • Re: SSL VPNs and security Eloy Paris (Jun 17)
  • <Possible follow-ups>
  • Re: SSL VPNs and security wnorth (Jun 12)
  • Re: SSL VPNs and security thanekamp (Jun 12)
    • Re: SSL VPNs and security Michal Zalewski (Jun 13)
• [USN-295-1] xine-lib vulnerability Martin Pitt (Jun 09)
• [ GLSA 200606-07 ] Vixie Cron: Privilege Escalation Sune Kloppenborg Jeppesen (Jun 09)
• [USN-294-1] courier vulnerability Martin Pitt (Jun 09)
• [SECURITY] [DSA 1094-1] New gforge packages fix cross-site scripting Moritz Muehlenhoff (Jun 09)
• okscripts.com - XSS Vulns luny (Jun 09)
• Dell Openmanage CD Vulnerability wiz561 (Jun 09)
  • <Possible follow-ups>
  • RE: Dell Openmanage CD Vulnerability Michael Scheidell (Jun 14)
• iFoto v0.20-06/06/06 luny (Jun 09)
  • <Possible follow-ups>
  • Re: iFoto v0.20-06/06/06 aizu . ikmal (Jun 12)
• [USN-292-1] binutils vulnerability Martin Pitt (Jun 09)
• phazizGuestbook v2.0 - XSS luny (Jun 09)
• [USN-293-1] gdm vulnerability Martin Pitt (Jun 09)
• Docebo CMS 3.0.3, Remote command execution Federico Fazzi (Jun 09)
• Docebo Core 3.0.3, Remote command execution Federico Fazzi (Jun 09)
• mole.com.ua Booking Script luny (Jun 09)
• mole.com.ua Ticket Booking Script - XSS luny (Jun 09)
• Re: DGbook v1.0 - XSS diangemilang (Jun 09)
• Docebo Kms 3.0.3, Remote command execution Federico Fazzi (Jun 09)
• MobeSpace v2.0 - XSS luny (Jun 09)
• Docebo Lms 3.0.3, Remote command execution Federico Fazzi (Jun 09)
• [ GLSA 200606-08 ] WordPress: Arbitrary command execution Sune Kloppenborg Jeppesen (Jun 09)
• Secunia Research: SelectaPix Cross-Site Scripting and SQL Injection Vulnerabilities Secunia Research (Jun 09)
• Secunia Research: AutoMate unacev2.dll Buffer Overflow Vulnerability Secunia Research (Jun 09)
• TinyMuw v1.0 - XSS luny (Jun 09)
• PHP-Nuke Download Module Remote SQL Injection BuNy-m (Jun 09)
• CORE-2006-0327: IAXclient truncated frames vulnerabilities Core Security Technologies advisories (Jun 09)
• Contensis CMS XSS vunerability smigofthedump (Jun 09)
• [USN-288-2] PostgreSQL server/client vulnerabilities Martin Pitt (Jun 09)
• [USN-288-3] PostgreSQL client vulnerabilities Martin Pitt (Jun 09)
• Windows Software Restriction Policy Protection Bypass 3APA3A (Jun 09)
  • Re: [Full-disclosure] Windows Software Restriction Policy Protection Bypass Dinis Cruz (Jun 10)
  • RE: Windows Software Restriction Policy Protection Bypass Roger A. Grimes (Jun 14)
• P.A.I.D v2.2 luny (Jun 10)
• ST AdManager Lite v1 luny (Jun 10)
• 0verkill 0.6, Remote integer overflow Federico Fazzi (Jun 10)
• TSLSA-2006-0034 - multi Trustix Security Advisor (Jun 10)
• [USN-296-1] firefox vulnerabilities Martin Pitt (Jun 10)
• [Kil13r-SA-20060609-1] Daum Search Cross-Site Scripting Vulnerability mac68k (Jun 10)
• [Kil13r-SA-20060609-2] DaNaWa Search Cross-Site Scripting Vulnerability mac68k (Jun 10)
• [Kil13r-SA-20060609-3] DreamWiz Search Cross-Site Scripting Vulnerability mac68k (Jun 10)
• CORE-2006-0330: Asterisk PBX truncated video frame vulnerability Core Security Technologies advisories (Jun 10)
• rPSA-2006-0099-1 openldap openldap-clients openldap-servers Justin M. Forbes (Jun 10)
• [SECURITY] [DSA 1095-1] New freetype packages fix several vulnerabilities Martin Schulze (Jun 10)
• Ringlink v3.2 - XSS luny (Jun 10)
• fx-APP Version 0.0.8.1 luny (Jun 10)
• AsianXO.com - XSS with cookie data include luny (Jun 10)
• Tempinbox.com luny (Jun 10)
• [MajorSecurity #11]OpenCMS<= 6.2.1 - XSS admin (Jun 10)
• [MajorSecurity #13]Cabacos Web CMS<= 3.8 - XSS admin (Jun 10)
• [MajorSecurity #14]CFXe-CMS <= 2.0 - XSS admin (Jun 10)
• Joomla! 1.0 Remote File Inclusion c4nberx (Jun 10)
• [MajorSecurity #12]ZMS<= 2.9 - XSS admin (Jun 10)
• ERRATA: [ GLSA 200604-10 ] zgv: Heap overflow Sune Kloppenborg Jeppesen (Jun 10)
• [KAPDA::#47] - Snitz Forum <= 3.4.05 SQL-Injection Vulnerability farhadkey (Jun 10)
• [ GLSA 200606-10 ] Cscope: Many buffer overflows Sune Kloppenborg Jeppesen (Jun 12)
• igloo DoubleSpeak v 0.1 Multiple remote file inclusion aminrayden (Jun 12)
  • Re: igloo DoubleSpeak v 0.1 Multiple remote file inclusion str0ke (Jun 12)
• Mydeardiary.com - XSS luny (Jun 12)
• Diaryland.com - XSS luny (Jun 12)
• [ GLSA 200606-11 ] JPEG library: Denial of Service Sune Kloppenborg Jeppesen (Jun 12)
• [ GLSA 200606-12 ] Mozilla Firefox: Multiple vulnerabilities Sune Kloppenborg Jeppesen (Jun 12)
• [ GLSA 200606-13 ] MySQL: SQL Injection Sune Kloppenborg Jeppesen (Jun 12)
• 5 Star Review - review-script.com - XSS w/ cookie output luny (Jun 12)
• Secunia Research: MyBB "domecode()" PHP Code Execution Vulnerability Secunia Research (Jun 12)
• Lycos.com - XSS vulnerability admin (Jun 12)
• Hotbot.com - XSS vulnerability in search engine admin (Jun 12)
• vbulletin.com Multiple XSS Vulnerabilities chris (Jun 12)
  • <Possible follow-ups>
  • Re: vbulletin.com Multiple XSS Vulnerabilities contact (Jun 13)
• WinSCP - URI Handler Command Switch Parsing Jelmer Kuperus (Jun 12)
• RCblog 1.03 Directory Traversal [index.php] irc0d3r (Jun 12)
• CS-Forum <= 0.81 Cross Site Scripting, SQL Injection, Full Path Disclosure gmdarkfig (Jun 12)
• tempnam() Bypass unique file name PHP 5.1.4 cxib (Jun 12)
• Wanderlist.com - XSS vuln with sessions disclosure luny (Jun 12)
• Myscrapbook v3.1 - XSS luny (Jun 12)
• PaintedOver.com, Inc. 2004-2006 Xss Vulnerabilities redl_ine (Jun 12)
  • <Possible follow-ups>
  • Re: PaintedOver.com, Inc. 2004-2006 Xss Vulnerabilities reports (Jun 14)
• [KAPDA::48]CopperminePhotoGallery1.4.8~ addhit() function~ SQLinjection attack addmimistrator (Jun 12)
• Foing (manage_songs.php) Remote File Inclusion[phpBB] darkfire (Jun 12)
• Opengaia.com - XSS Vuln & Session Include luny (Jun 12)
• sorry i wrong something, this is original AWF CMS 1.11 adv Federico Fazzi (Jun 12)
• Nowtalking.com - XSS luny (Jun 12)
• Wireclub.com - XSS & cookie disclosure luny (Jun 12)
• cescripts.com - XSS luny (Jun 12)
• Virtualtourist.com - XSS with cookie disclosure luny (Jun 12)
• ThWboard 3.0 <= SQL Injection 666 (Jun 12)
• Windows XP Task Scheduler Local Privilege Escalation (Advisory) zipk0der (Jun 12)
  • Re: Windows XP Task Scheduler Local Privilege Escalation (Advisory) Eliah Kagan (Jun 13)
• Stargazer.org - XSS with Session output luny (Jun 12)
• Onlinenode.com - XSS luny (Jun 12)
• [ GLSA 200606-14 ] GDM: Privilege escalation Sune Kloppenborg Jeppesen (Jun 12)
• rPSA-2006-0100-1 freetype Justin M. Forbes (Jun 12)
• [ MDKSA-2006:099 ] - Updated freetype2 packages fixes multiple vulnerabilities. security (Jun 12)
• myPHP Guestbook 2.0.2 XSS Vulnerabilitie x0r_1 (Jun 12)
• Flork.com luny (Jun 12)
• Vampirefreaks.com - XSS with cookie disclosure luny (Jun 12)
• # MHG Security Team --- PHORUM 5.1.13 Remote File Inc. erne (Jun 12)
  • <Possible follow-ups>
  • Re: # MHG Security Team --- PHORUM 5.1.13 Remote File Inc. brian (Jun 21)
• [EEYEB-20060524] Symantec Remote Management Stack Buffer Overflow eEye Advisories (Jun 12)
• [ GLSA 200606-09 ] SpamAssassin: Execution of arbitrary code Sune Kloppenborg Jeppesen (Jun 12)
• Meefo.com - XSS with cookie include luny (Jun 12)
• Yourfacesucks.com - XSS & cookie disclosure luny (Jun 13)
• Blackplanet.com - XSS & cookie disclosure vuln. luny (Jun 13)
• Invision Power Board XSS kepche (Jun 13)
• internet explorer vulnerability based on MarjinZ & Mr.Niega discovered Kevin Berkane (Jun 13)
• [FSA013] phpCMS 1.2.1pl2, Remote command execution Federico Fazzi (Jun 13)
• Call For Papers - No cON Name 2006 Edition Spain Jose Nicolas Castellano (Jun 13)
• Emllabs.com - XSS luny (Jun 13)
• Content-Builder (CMS) 0.7.5, Remote command execution Federico Fazzi (Jun 13)
• DCP-Portal 6.1.x, Remote command execution Federico Fazzi (Jun 13)
• Re: BUGTRAQ:20060611 ThWboard 3.0 <= SQL Injection Steven M. Christey (Jun 13)
• VBZooM <<-- V1.11 "show.php" SQL injection CrAzY . CrAcKeR (Jun 13)
• VBZooM <<--V1.02 "meaning.php" SQL injection CrAzY . CrAcKeR (Jun 13)
• VBZooM <<--V1.11 "subject.php" SQL injection CrAzY . CrAcKeR (Jun 13)
• [SECURITY] [DSA 1096-1] New webcalendar packages fix arbitrary code execution Martin Schulze (Jun 13)
• VBZooM <<--V1.01 "language.php" SQL injection CrAzY . CrAcKeR (Jun 13)
• multiple Xss exploits in 35mmslidegallery V6 black code (Jun 13)
• Simpnews <= All version - Remote File Include Vulnerabilities SpC-x (Jun 13)
  • Re: Simpnews <= All version - Remote File Include Vulnerabilities str0ke (Jun 13)
• High Risk Vulnerability in Microsoft Windows RASMAN Service Peter Winter-Smith (Jun 13)
• iDefense Security Advisory 06.13.06: Windows MRXSMB.SYS MRxSmbCscIoctlOpenForCopyChunk Overflow labs-no-reply (Jun 13)
• iDefense Security Advisory 06.13.06: Microsoft Internet Explorer ART File Heap Corruption Vulnerability labs-no-reply (Jun 13)
• ZDI-06-017: Microsoft Internet Explorer UTF-8 Decoding Heap Overflow Vulnerability zdi-disclosures (Jun 13)
• PHP MESSENGER 1.0 Version - Remote File Include Vulnerability SpC-x (Jun 13)
• Jobline 1 1 1 Version - Remote File Include Vulnerability SpC-x (Jun 13)
• Amr Talkbox talkbox.PHP - Remote File Include Vulnerabilities SpC-x (Jun 13)
  • <Possible follow-ups>
  • Re: Amr Talkbox talkbox.PHP - Remote File Include Vulnerabilities Steven M. Christey (Jun 15)
• S H O U T B O X (v1.5) Version - Remote File Include Vulnerability SpC-x (Jun 13)
• iDefense Security Advisory 06.13.06: Windows MRXSMB.SYS MrxSmbCscIoctlCloseForCopyChunk DoS labs-no-reply (Jun 13)
• Re: Shoutpro 1.0 Version - Remote File Include Vulnerability Steven M. Christey (Jun 13)
  • <Possible follow-ups>
  • Shoutpro 1.0 Version - Remote File Include Vulnerability SpC-x (Jun 14)
• Ltwcalendar 4.1.3 version - Remote File Include Vulnerabilities SpC-x (Jun 13)
• [REVERSEMODE ADVISORY] MS06-030 - Microsoft Mrxsmb.sys privilege escalation advisory Reversemode (Jun 13)
• # MHG Security Team --- PHPAskIt v2.0.1 Remote File Inc. erne (Jun 13)
• Web-CMS <<--1.0 "print.php" SQL injection CrAzY . CrAcKeR (Jun 13)
• [REVERSEMODE ADVISORY] MS06-030 NtClose DeadLock. Reversemode (Jun 13)
• TikiWiki Sql injection & XSS Vulnerabilities bug () securitynews ir (Jun 13)
• blur6ex <= 0.3.462 'ID' blind sql injection rgod (Jun 13)
• REMOTE FILE INCLUSION ( ALL ) SpC-x (Jun 14)
  • <Possible follow-ups>
  • Re: REMOTE FILE INCLUSION ( ALL ) Steven M. Christey (Jun 14)
  • Re: REMOTE FILE INCLUSION ( ALL ) eufrato (Jun 19)
• iDefense Security Advisory 06.13.06: Windows Media Player PNG Chunk Decoding Stack-Based Buffer Overflow labs-no-reply (Jun 14)
• Chipmailer <= 1.09 Multiple Vulnerabilities tamriel (Jun 14)
• GamePlay.co.uk XSS charlie (Jun 14)
  • Re: GamePlay.co.uk XSS Patrick Morris (Jun 17)
• PhpMyFactures 1.0 Cross Site Scripting, SQL Injection, Full Path Disclosure and others gmdarkfig (Jun 14)
• Oracle DBMS_STANDARD security problem putosoft softputo (Jun 14)
• file include exploits in mcGuestbook 1.3 gamr-14 (Jun 14)
  • <Possible follow-ups>
  • file include exploits in mcGuestbook 1.3 SWEET SWEET (Jun 16)
• SYMSA-2006-004: Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution research (Jun 14)
• Simpleshout 1.6.0 Version - Remote File Include Vulnerability SpC-x (Jun 14)
• ZDI-06-018: Microsoft Internet Explorer DXImageTransform ActiveX Memory Corruption Vulnerability zdi-disclosures (Jun 14)
• G Shout 1.3.1 Version - Remote File Include Vulnerability SpC-x (Jun 14)
• [MajorSecurity #17] SixCMS <= 6 - Multiple XSS and directory traversal vulnerabilities admin (Jun 14)
  • <Possible follow-ups>
  • Re: [MajorSecurity #17] SixCMS <= 6 - Multiple XSS and directory traversal vulnerabilities ellinger (Jun 19)
• [USN-297-1] Thunderbird vulnerabilities Martin Pitt (Jun 14)
• [USN-298-1] libgd2 vulnerability Martin Pitt (Jun 14)
• [USN-288-4] dovecot regression fix Martin Pitt (Jun 14)
• Secunia Resaerch: Internet Explorer Exception Handling Memory Corruption Vulnerability Secunia Research (Jun 14)
• [USN-299-1] dhcdbd vulnerability Martin Pitt (Jun 14)
• Black Hat Speakers + 2005 Content on-line Jeff Moss (Jun 14)
• Secunia Research: PicoZip "zipinfo.dll" Multiple Archives Buffer Overflow Secunia Research (Jun 14)
• [ MDKSA-2006:099-1 ] - Updated freetype2 packages fixes multiple vulnerabilities. security (Jun 14)
• [ MDKSA-2006:100 ] - Updated gdm packages fix vulnerability security (Jun 14)
• Freeze Greetings Cards PWD.txt alp_eren (Jun 14)
• bbrss PhpBB (phpbb_root_path) Remote File Inclusion SpC-x (Jun 14)
• wbb<<--v 2.2.2 "thread.php" SQL injection CrAzY . CrAcKeR (Jun 14)
• wbb<<--v 2.2.1 "studienplatztausch.php" SQL injection CrAzY . CrAcKeR (Jun 14)
• wbb<<--v 2.1.6 "profile.php" SQL injection CrAzY . CrAcKeR (Jun 14)
• [ GLSA 200606-16 ] DokuWiki: PHP code injection Sune Kloppenborg Jeppesen (Jun 14)
• SEC Consult SA-20060613-0 :: Outlook Web Access Cross Site Scripting Vulnerability SEC Consult Research (Jun 14)
• Flipper Poll (root_path) Remote File Inclusion SpC-x (Jun 14)
• [ GLSA 200606-15 ] Asterisk: IAX2 video frame buffer overflow Sune Kloppenborg Jeppesen (Jun 14)
• Fusion Polls (xtrphome) Remote File Inclusion SpC-x (Jun 14)
• [KDE Security Advisory] KDM symlink attack vulnerability Dirk Mueller (Jun 14)
• [SECURITY] [DSA 1097-1] New Kernel 2.4.27 packages fix several vulnerabilities Moritz Muehlenhoff (Jun 14)
• PhpBlueDragon CMS 2.9.1, File inclusion vulnerability Federico Fazzi (Jun 14)
• MySQL DoS Kanatoko (Jun 14)
  • Re: MySQL DoS Tonnerre Lombard (Jun 15)
  • <Possible follow-ups>
  • Re: MySQL DoS xhire (Jun 19)
• [ MDKSA-2006:101 ] - Updated squirrelmail packages fix vulnerabilities security (Jun 14)
• [SECURITY] [DSA 1098-1] New horde3 packages fix cross-site scripting Moritz Muehlenhoff (Jun 14)
• [ MDKSA-2006:102 ] - Updated libtiff packages fixes tiff2pdf vulnerability security (Jun 14)
• [FSA016] ISPConfig 2.2.3, File inclusion vulnerability Federico Fazzi (Jun 14)
  • <Possible follow-ups>
  • Re: [FSA016] ISPConfig 2.2.3, File inclusion vulnerability t . brehm (Jun 16)
• [USN-301-1] kdm vulnerability Martin Pitt (Jun 15)
• [ MDKSA-2006:103 ] - Updated spamassassin packages fix vulnerability security (Jun 15)
• Secunia Research: CMS Mundo SQL Injection and File Upload Vulnerabilities Secunia Research (Jun 15)
• EC2ND - Call for Papers Blyth A J C (Comp) (Jun 15)
• [SECURITY] [DSA 1099-1] New horde2 packages fix cross-site scripting Moritz Muehlenhoff (Jun 15)
• FreeBSD Security Advisory FreeBSD-SA-06:17.sendmail FreeBSD Security Advisories (Jun 15)
• Secunia Research: DeluxeBB SQL Injection and File Inclusion Vulnerabilities Secunia Research (Jun 15)
  • <Possible follow-ups>
  • Secunia Research: DeluxeBB SQL Injection and File Inclusion Vulnerabilities Secunia Research (Jun 28)
• [USN-300-1] wv2 vulnerability Martin Pitt (Jun 15)
• ePrayver v.Alpha - XSS luny (Jun 15)
• APBoard 2.2-r3 <= SQL Injections 666 (Jun 15)
• [ MDKSA-2006:104 ] - Updated sendmail packages fix remotely exploitable vulnerability security (Jun 15)
• [SECURITY] [DSA 1100-1] New wv2 packages fix integer overflow Martin Schulze (Jun 15)
• MP3 Search/Archive v1.2 - XSS luny (Jun 15)
• Advisory: Authentication bypass in phpBannerExchange RedTeam Pentesting (Jun 15)
• Advisory: Unauthorized password recovery in phpBannerExchange RedTeam Pentesting (Jun 15)
• HotPlugCMS_1.0 - SQL Injection Vulnerability guest01 (Jun 15)
• Andys Chat 4.5 (action) Remote File Inclusion SpC-x (Jun 15)
• [USN-297-2] Thunderbird extensions update for recent security update Martin Pitt (Jun 15)
• [ GLSA 200606-18 ] PAM-MySQL: Multiple vulnerabilities Sune Kloppenborg Jeppesen (Jun 15)
• Regarding "SMB Invalid Handle Value" - MS06-030. Vulnerability not fixed. Reversemode (Jun 15)
• [ GLSA 200606-19 ] Sendmail: Denial of Service Sune Kloppenborg Jeppesen (Jun 15)
• [ GLSA 200606-17 ] OpenLDAP: Buffer overflow Sune Kloppenborg Jeppesen (Jun 15)
• rPSA-2006-0106-1 kdebase Justin M. Forbes (Jun 15)
• HotPlugCMS 1.0, Cross-Site Scripting Vulnerabilities Federico Fazzi (Jun 15)
• rPSA-2006-0105-1 arts Justin M. Forbes (Jun 16)
• TSLSA-2006-0036 - multi Trustix Security Advisor (Jun 16)
• dvdwolf SQL injection/XSS CrAzY . CrAcKeR (Jun 16)
• [USN-303-1] MySQL vulnerability Martin Pitt (Jun 16)
• Boardhost.com - XSS luny (Jun 16)
• [security bulletin] HPSBUX02115 SSRT061077 rev.1 - HP-UX running Support Tools Manager (xstm, cstm, stm) Local Denial of Service (DoS) security-alert (Jun 16)
• Develooping Flash Chat (banned_file) Remote File Inclusion SpC-x (Jun 16)
• Re: Several flaws in e-business designer (eBD) ebd . soporte (Jun 16)
• aXentForum II XSS vuLLn SnoBmsn (Jun 16)
  • <Possible follow-ups>
  • Re: aXentForum II XSS vuLLn Steven M. Christey (Jun 22)
• Indexu v 5.0.01 Multiple Remote File Include Vulnerabilities KARKOR23 (Jun 16)
• file include exploits in nucleus 3.23 gamr-14 (Jun 16)
  • <Possible follow-ups>
  • Re: file include exploits in nucleus 3.23 nukedx (Jun 21)
• Chatizens.com - XSS with cookie disclosure luny (Jun 16)
• Calendarix 0.7.20060401, SQL Injection Vulnerabilities Federico Fazzi (Jun 16)
• Ji-takz Chat (mycfg) Remote File Inclusion SpC-x (Jun 16)
• Carspace.com - XSS with cookie disclosure luny (Jun 16)
• Zeroboard File Upload & extension bypass Vulnerability mins (Jun 16)
• Cisco Secure ACS Cross Site Scripting Vulnerability. liam . romanis (Jun 16)
  • <Possible follow-ups>
  • RE: Cisco Secure ACS Cross Site Scripting Vulnerability. Paul Oxman (poxman) (Jun 17)
• Blacksingles.com - XSS & cookie disclosure luny (Jun 16)
• PHP security (or the lack thereof) Darren Reed (Jun 16)
  • Re: PHP security (or the lack thereof) Bojan Zdrnja (Jun 17)
    • Re: PHP security (or the lack thereof) Jessica Hope (Jun 21)
  • Re: PHP security (or the lack thereof) Jose Nazario (Jun 17)
    • Re: PHP security (or the lack thereof) Geo. (Jun 19)
      • Re: PHP security (or the lack thereof) kicktd (Jun 22)
      • Re: PHP security (or the lack thereof) Geo. (Jun 22)
      • Re: PHP security (or the lack thereof) Crispin Cowan (Jun 22)
  • Re: PHP security (or the lack thereof) Neil Neely (Jun 20)
  • Re: PHP security (or the lack thereof) john mullee (Jun 24)
    • Re: PHP security (or the lack thereof) Darren Reed (Jun 27)
      • Re: PHP security (or the lack thereof) Ronald Chmara (Jun 27)
      • Re: PHP security (or the lack thereof) Tonnerre Lombard (Jun 29)
      • Re: PHP security (or the lack thereof) Darren Reed (Jun 29)
  • <Possible follow-ups>
  • Re: PHP security (or the lack thereof) Steven M. Christey (Jun 17)
  • Re: PHP security (or the lack thereof) Alan J Rosenthal (Jun 22)
    • Re: PHP security (or the lack thereof) Geo. (Jun 24)
  • Re: Re: PHP security (or the lack thereof) nabiy (Jun 23)
    • Re: PHP security (or the lack thereof) Crispin Cowan (Jun 24)
      • Re: PHP security (or the lack thereof) Daniel Hulme (Jun 26)
      • Re: PHP security (or the lack thereof) Tobias J. Kreidl (Jun 27)
      • Re: PHP security (or the lack thereof) Glynn Clements (Jun 27)
    • Re: PHP security (or the lack thereof) Ronald Chmara (Jun 26)
      • RE: PHP security (or the lack thereof) Geo. (Jun 26)
      • Re: PHP security (or the lack thereof) Paul Schmehl (Jun 26)
      • RE: PHP security (or the lack thereof) Geo. (Jun 28)
      • Re: PHP security (or the lack thereof) Matthias Kestenholz (Jun 26)
      • RE: PHP security (or the lack thereof) Geo. (Jun 27)
      • Re: PHP security (or the lack thereof) Mrten (Jun 26)
  • Re: Re: PHP security (or the lack thereof) nabiy (Jun 27)
• [ MDKSA-2006:105 ] - Updated kdebase packages fix local vulnerability in kdm security (Jun 16)
• PictureDis Products "lang" Parameter File Inclusion Vulnerability root-hacked (Jun 16)
• Re: Secunia Research: PicoZip "zipinfo.dll" Multiple Archives BufferOverflow c0rrupt (Jun 16)
• [ MDKSA-2006:106 ] - Updated mdkkdm packages fix local vulnerability security (Jun 16)
• Re: [Bugtraq ID: 17909] ISPConfig Session.INC.PHP Remote File Include Vulnerability t . brehm (Jun 17)
• Youtube.com - XSS & cookie disclosure luny (Jun 17)
• Bingbox.com - XSS & cookie disclosure luny (Jun 17)
  • Re: Bingbox.com - XSS & cookie disclosure Sven Vetsch (Jun 17)
• file include exploits in dotwidgeta Version 2 SWEET SWEET (Jun 17)
• Simple PHP Poll Authecnication Admin ByPass alp_eren (Jun 17)
• Netscape.com - Cross site scripting vulnerability admin (Jun 17)
• webcrawler.com - Cross site scripting vulnerability admin (Jun 17)
• GreatDomains.com - XSS with cookie disclosure admin (Jun 17)
• bitweaver <= v1.3 multiple vulnerabilities rgod (Jun 17)
• [ECHO_ADV_33$2006] CMS Faethon 1.3.2 mainpath Remote File Inclusion eufrato (Jun 17)
• Housecarers.com - XSS & cookie disclosure luny (Jun 17)
• Dealgates.com - XSS with cookie disclosure luny (Jun 17)
• Mambo <= 4.6rc1 sql injection rgod (Jun 17)
• Cline Communications Sql injection liz0 (Jun 17)
• Hotscripts.com - XSS with cookie disclosure luny (Jun 17)
• XSS in GardenWeb nanoymaster (Jun 17)
• Apnaspace.com - XSS with cookie disclosure luny (Jun 17)
• Cybersocieties.com - XSS & cookie disclosure luny (Jun 17)
• hi5.com - XSS with cookie disclosure luny (Jun 17)
• ISO.org - XSS vulnerability admin (Jun 17)
• alipager xss attack s3rv3r_hack3r (Jun 17)
• Proof of concept: mybb 1.1.2 remote code execution Javier Olascoaga (Jun 17)
• [Kurdish Security # 8] DCP-Portal Remote File Include Vulnerability [Editor DHTML] botan (Jun 17)
• Facerave.com - XSS & sessions disclosure luny (Jun 17)
• animesuki XSS nanoymaster (Jun 17)
• Re: PHP Advanced Transfer Manager Download users password hashes jn (Jun 17)
• Windowsitpro.com - XSS with cookie disclosure luny (Jun 17)
• Ratescene.co.uk - XSS with session disclosure luny (Jun 17)
• Macworld.com - XSS vulnerability admin (Jun 17)
• About.com - XSS with cookie disclosure luny (Jun 17)
• Ratemylook.co.uk - XSS with session disclosure luny (Jun 17)
• Palm.com - XSS vulnerability admin (Jun 17)
• webcrawler.com - XSS vulnerability in search-engine admin (Jun 17)
• VampireFreaks journal XSS nanoymaster (Jun 17)
• Ashop Search Module SQL injection entrika_fs (Jun 17)
• Facetherating.com - XSS & session disclosure luny (Jun 17)
• Confixx <= 3 kr4ch (Jun 18)
  • <Possible follow-ups>
  • Confixx <= 3 kr4ch (Jun 18)
• B3ta.com - XSS with cookie disclosure luny (Jun 18)
• Biblenet.net - XSS luny (Jun 18)
• SinFP 2.00 - a major release with many new features GomoR (Jun 19)
• RahnemaCo Remote File Inclusion Exploit Breeeeh (Jun 19)
• Blogspot.com - XSS with cookie disclosure luny (Jun 19)
• 43things.com - XSS with cookie disclosure luny (Jun 19)
• Technorati.com - XSS with cookie disclosure luny (Jun 19)
• PTT.yu Guestbook Vulnebility us3rg0d (Jun 19)
• vbzoom V1.11 forum.php SQL Injection Vulnerabilities KARKOR23 (Jun 19)
• mp3.com - Cross site scripting vulnerability admin (Jun 19)
• XSS in http://www.newscientist.com/ - Search viz . security (Jun 19)
• MPCS v0.2 - XSS luny (Jun 19)
• Microsoft Excel 0-day Vulnerability FAQ document written Juha-Matti Laurio (Jun 19)
• [security bulletin] HPSBTU02116 SSRT061135 rev.2 - HP Tru64 UNIX and HP Internet Express for Tru64 UNIX Running sendmail, Remote Execution of Arbitrary Code or Denial of Service (DoS) security-alert (Jun 19)
• e107 v0.7.5 XSS securityconnection (Jun 19)
• VBZooM <<--V1.00 "rank.php" SQL injection CrAzY . CrAcKeR (Jun 19)
• XSS Vulnerability in Maximus SchoolMAX Fixer (Jun 19)
• VBZooM <<--V1.11 "message.php" SQL injection CrAzY . CrAcKeR (Jun 19)
• vuBB <= 0.2.1 [BFA] SQL Injection Exploit + Advisory link gmdarkfig (Jun 19)
• VBZooM <<--V1.00 "lng.php" SQL injection CrAzY . CrAcKeR (Jun 19)
• SaphpLesson<<--1.1 "misc.php" SQL injection CrAzY . CrAcKeR (Jun 19)
• PHP Live Helper <=([abs_path]) Remote File Include Vulnerabilities selfar2002 (Jun 19)
  • <Possible follow-ups>
  • Re: PHP Live Helper <=([abs_path]) Remote File Include Vulnerabilities stormhacker (Jun 20)
• [ GLSA 200606-21 ] Mozilla Thunderbird: Multiple vulnerabilities Sune Kloppenborg Jeppesen (Jun 19)
• onedotoh xss atack alijsb (Jun 19)
• [ GLSA 200606-20 ] Typespeed: Remote execution of arbitrary code Sune Kloppenborg Jeppesen (Jun 19)
• Easy CMS 0.1.2 Php Shell Upload Vulnerabilities liz0 (Jun 19)
• singapore gallery <= 0.10.0 Multiple Vulnerabilities simo64 (Jun 19)
• WeBBoA Hosting Script SQL Injection entrika_fs (Jun 19)
• Dragons Kingdom v1.0 - XSS & cookie disclosure luny (Jun 20)
• Vm ware 0day dos exploit by n00b. co296 (Jun 20)
  • Re: Vm ware 0day dos exploit by n00b. Paul Szabo (Jun 20)
  • Re: Vm ware 0day dos exploit by n00b. Eliah Kagan (Jun 20)
• qtofilemanager xss attack ! alijsb (Jun 20)
• V3Chat Instant Messenger - XSS luny (Jun 20)
  • <Possible follow-ups>
  • Re: V3Chat Instant Messenger - XSS support (Jun 22)
• Input Validation/Output Encoding Vulnerabilities in Cisco CallManager Allow Script Injection Attacks Reynolds, Jake (Jun 20)
• Janus Contact Charles Hamby (Jun 20)
• trifinite Security Advisory: Buffer Overrun in Toshiba Bluetooth Stack for Windows Martin Herfurt (Jun 20)
• display.cgi soltan_defacer (Jun 20)
  • <Possible follow-ups>
  • Re: display.cgi eufrato (Jun 21)
• Multiple Bypass and Integrity Lost Vulnerabilities egavriil (Jun 20)
• vBulletin<<--v3.5.X "member.php" Cross Site Scripting CrAzY . CrAcKeR (Jun 20)
  • <Possible follow-ups>
  • Re: vBulletin<<--v3.5.X "member.php" Cross Site Scripting scott (Jun 26)
• [MajorSecurity #18] Ralf Image Gallery <=0.7.4 - Multiple XSS, Remote File Include and directory traversal vulnerabilities admin (Jun 20)
  • Re: [MajorSecurity #18] Ralf Image Gallery <=0.7.4 - Multiple XSS, Remote File Include and directory traversal vulnerabilities Marc MERLIN (Jun 27)
• Re: MAXDEV CMS Multiple vulnerabilities pete (Jun 20)
• Module's Name Downloads <<--V 7 SQL injection CrAzY . CrAcKeR (Jun 20)
• Module's Name Content<<--V1.0 SQL injection CrAzY . CrAcKeR (Jun 20)
• RahnemaCo "page.php" Remote File Inclusion[2] CrAzY . CrAcKeR (Jun 20)
• ULtimate PHP Board <= 1.96 GOLD Code Execution (exploit code) mbrooks (Jun 20)
• [ MDKSA-2006:107 ] - Updated arts packages fix vulnerability in artswrapper security (Jun 21)
• JEdit ActiveX Control Information Disclosure vulnerability bulten (Jun 21)
• Sendmail MIME DoS vulnerability Jain, Siddhartha (Jun 21)
  • Re: Sendmail MIME DoS vulnerability Gadi Evron (Jun 24)
  • Re: Sendmail MIME DoS vulnerability Claus Assmann (Jun 27)
• Re: Vacation Retal Script v1.0 radu (Jun 21)
• [ MDKSA-2006:108 ] - Updated xine-lib packages fix buffer overflow vulnerabilities security (Jun 21)
• Opera 9 DoS PoC N9 (Jun 21)
  • Re: Opera 9 DoS PoC Bruno Lustosa (Jun 24)
    • Re: Opera 9 DoS PoC Bastian Ahrens (Jun 26)
    • Re: Opera 9 DoS PoC Eric Furman (Jun 26)
  • <Possible follow-ups>
  • Re: Opera 9 DoS PoC Darren Clarke (Jun 23)
    • Re: Opera 9 DoS PoC Laurent (Jun 26)
• Bypassing of web filters by using ASCII k . huwig (Jun 21)
  • Re: Bypassing of web filters by using ASCII Fixer (Jun 21)
    • Re: Bypassing of web filters by using ASCII Paul (Jun 22)
      • Re: Bypassing of web filters by using ASCII Kurt Huwig (Jun 22)
      • Re: Bypassing of web filters by using ASCII Amit Klein (AKsecurity) (Jun 22)
      • RE: Bypassing of web filters by using ASCII James C. Slora Jr. (Jun 23)
      • RE: Bypassing of web filters by using ASCII Amit Klein (AKsecurity) (Jun 26)
      • RE: Bypassing of web filters by using ASCII RSnake (Jun 26)
      • Re: Bypassing of web filters by using ASCII Hubert Seiwert (Jun 27)
      • RE: Bypassing of web filters by using ASCII James C. Slora Jr. (Jun 26)
      • Re: Bypassing of web filters by using ASCII Thor (Hammer of God) (Jun 24)
  • Re: Bypassing of web filters by using ASCII RSnake (Jun 22)
    • Re: Bypassing of web filters by using ASCII Kurt Huwig (Jun 22)
    • Re: Bypassing of web filters by using ASCII David Huecking (Jun 26)
  • Re: Bypassing of web filters by using ASCII Hubert Seiwert (Jun 22)
  • Re: Bypassing of web filters by using ASCII Amit Klein (AKsecurity) (Jun 22)
    • Message not available
      • Re: Bypassing of web filters by using ASCII Amit Klein (AKsecurity) (Jun 23)
      • Re: Bypassing of web filters by using ASCII Vincent Archer (Jun 26)
      • Re: Bypassing of web filters by using ASCII Balazs Attila-Mihaly (Cd-MaN) (Jun 27)
  • <Possible follow-ups>
  • Re: Bypassing of web filters by using ASCII Kurt Huwig (Jun 22)
• [ MDKSA-2006:110 ] - Updated gnupg packages fix vulnerability security (Jun 21)
• Re: possible SQL injection in Subdreamer ziad (Jun 21)
• Eduha Meeting php shell upload Vulnerabilities liz0 (Jun 21)
• Digital Armaments July-August Hacking Challange: Microsoft info (Jun 22)
  • Re: Digital Armaments July-August Hacking Challange: Microsoft Alexander Sotirov (Jun 23)
• cjGuestbook v1.3 - XSS luny (Jun 22)
• Excel 0-day FAQ updated with Microsoft advisory information Juha-Matti Laurio (Jun 22)
• Somechess v1.5 rc1 - XSS luny (Jun 22)
• [ MDKSA-2006:109 ] - Updated wv2 packages fix vulnerability security (Jun 22)
• MS Excel Remote Code Execution POC Exploit naveed (Jun 22)
  • <Possible follow-ups>
  • RE: MS Excel Remote Code Execution POC Exploit Jain, Siddhartha (Jun 22)
    • Re: MS Excel Remote Code Execution POC Exploit naveed (Jun 22)
  • Re: MS Excel Remote Code Execution POC Exploit Steven M. Christey (Jun 23)
    • Re: MS Excel Remote Code Execution POC Exploit naveed (Jun 26)
  • Re: Re: MS Excel Remote Code Execution POC Exploit Juha-Matti Laurio (Jun 24)
• VigilantMinds Advisory: Opera JPEG Processing Integer Overflow Vulnerability (VMSA-20060621-01) VigilantMinds Advisories (Jun 22)
• [ GLSA 200606-22 ] aRts: Privilege escalation Sune Kloppenborg Jeppesen (Jun 22)
• [ GLSA 200606-23 ] KDM: Symlink vulnerability Sune Kloppenborg Jeppesen (Jun 22)
• flock d0s exploit remote. beta 1 (v0.7) co296 (Jun 23)
  • Re: flock d0s exploit remote. beta 1 (v0.7) Chris Rothecker (Jun 26)
• [SECURITY] [DSA 1101-1] New courier packages fix denial of service Martin Schulze (Jun 23)
• vlbook 1.2 XSS Bug omnipresent (Jun 23)
• [SNS Advisory No.88] Webmin Directory Traversal Vulnerability snsadv () lac co jp (Jun 23)
• QaTraq 6.5 RC: Multiple XSS Vulnerabilities enji (Jun 23)
• [KAPDA]Coppermine 1.4.8~Parameter Cleanup System ByPass~Registering Global Varables addmimistrator (Jun 23)
• [security bulletin] HPSBUX02127 SSRT051056 - rev.1 HP-UX Kernel Local Denial of Service (DoS) security-alert (Jun 23)
• TSLSA-2006-0037 - multi Trustix Security Advisor (Jun 23)
• aeDating 4.1 XSS securityconnection (Jun 23)
• Trend Micro Control Manager (TMCM) Persistent XSS Vulnerability Darren Bounds (Jun 23)
• Dating Agent PRO 4.7.1 Vulnerability securityconnection (Jun 23)
• Cisco Secure ACS Weak Session Management Vulnerability Darren Bounds (Jun 23)
  • Re: Cisco Secure ACS Weak Session Management Vulnerability Clayton Kossmeyer (Jun 24)
• [ GLSA 200606-24 ] wv2: Integer overflow Stefan Cornelius (Jun 23)
• DREAMACCOUNT V3.1 Remote Command Execution Exploit KARKOR23 (Jun 23)
• [Kil13r-SA-20060622-1] NetSoft SmartNet 2.0 Cross-Site Scripting Vulnerability mac68k (Jun 23)
• Linux VNC evil client patch - BID 17978 embyte (Jun 23)
  • <Possible follow-ups>
  • Re: Linux VNC evil client patch - BID 17978 embyte (Jun 26)
• rPSA-2006-0110-1 kernel Justin M. Forbes (Jun 23)
• productcart soltan_defacer soltan_defacer (Jun 23)
• Dating biz@ dating script v1.0 - XSS luny (Jun 23)
• WBB<<---v1.2 "showmods.php" SQL Injection CrAzY . CrAcKeR (Jun 23)
• [KAPDA]MyBB1.1.3~Option update for code buttons~Sql Injection Admin Access addmimistrator (Jun 23)
  • <Possible follow-ups>
  • [KAPDA]MyBB1.1.3~Option update for code buttons~Sql Injection Admin Access addmimistrator (Jun 26)
• Calendar ( Provided by Codewalkers ) - SQL Injection Silitix (Jun 24)
  • <Possible follow-ups>
  • Re: Calendar ( Provided by Codewalkers ) - SQL Injection krustevs (Jun 28)
• [ECHO_ADV_34$2006] W-Agora (Web-Agora) <= 4.2.0 (inc_dir) Remote File Inclusion the_day (Jun 24)
• WBB<<---v2.3.1"report.php" SQL Injection CrAzY . CrAcKeR (Jun 24)
• SYMSA-2006-005 research (Jun 24)
• phpBlueDragon CMS 2.9.1 multiple remote file inclusion vuln rozowa . landrynka (Jun 24)
• [Kil13r-SA-20060622-2] Namo DeepSearch 4.5 Cross-Site Scripting Vulnerability mac68k (Jun 24)
• WBB<<---v2.0 RC2 "newthread.php" SQL Injection CrAzY . CrAcKeR (Jun 24)
• Softbiz Dating 1.0 SQL injection securityconnection (Jun 24)
• ERNW Security Advisory 01/2006 mozilla (Jun 26)
• [Kurdish Security # 9] MyMail Directory Traversal And XSS Attacking Vulnerability botan (Jun 26)
• Claroline Cross-Site Scripting Vulnerabilities bug () securitynews ir (Jun 26)
• DeluxeBB 1.07 Create admin Exploit Hessamx (Jun 26)
• Planetnews Authecnication Admin ByPass alp_eren (Jun 26)
• [SECURITY] [DSA 1102-1] New pinball packages fix privilege escalation Steve Kemp (Jun 26)
• [USN-304-1] gnupg vulnerability Martin Pitt (Jun 26)
• XSS in Cpanel 10 preth00nker (Jun 26)
  • <Possible follow-ups>
  • Re: XSS in Cpanel 10 bug (Jun 27)
• [ GLSA 200606-25 ] Hashcash: Possible heap overflow Thierry Carrez (Jun 26)
• [ GLSA 200606-26 ] EnergyMech: Denial of Service Thierry Carrez (Jun 26)
• [ MDKSA-2006:111 ] - Updated MySQL packages fixes authorized user DoS(crash) vulnerability. security (Jun 26)
• GlobeTrotter Mobility Manager - security issue dzelek (Jun 26)
• Mailenable SMTP Service DoS db0 (Jun 26)
• Undisclosed cross site scripting vulnerabilities in domaintools.com - requesting contacts admin (Jun 26)
• Amazon and Msn vulnerabilities dcrab (Jun 27)
• OpenGuestbook Cross Site Scripting & SQL Injection simo64 (Jun 27)
• [OpenPKG-SA-2006.010] OpenPKG Security Advisory (gnupg) OpenPKG (Jun 27)
• Amazon, MSN vulns and.. Yes, we know! Most sites have vulnerabilities Gadi Evron (Jun 27)
• Universal Hooker - Tool release Hernan Ochoa (Jun 27)
• Taking Over Laptops by Fuzzing Wireless Drivers Gadi Evron (Jun 27)
• Winged Gallery v1.0 luny (Jun 27)
• error_log() Safe Mode Bypass PHP 5.1.4 and 4.4.2 cxib (Jun 27)
• Jaws <= 0.6.2 'Search gadget' SQL injection rgod (Jun 27)
• Windows Live Messenger 8.0 ( Contact List *.ctt ) Heap Overflow Alexander Hristov (Jun 27)
• Usenet Script v0.5 luny (Jun 27)
• [USN-306-1] MySQL 4.1 vulnerability Martin Pitt (Jun 27)
• [USN-305-1] OpenLDAP vulnerability Martin Pitt (Jun 27)
• [SECURITY] [DSA 1103-1] New Linux kernel 2.6.8 packages fix several vulnerabilities Moritz Muehlenhoff (Jun 27)
• Re: [ECHO_ADV_34$2006] W-Agora (Web-Agora) <= 4.2.0 (inc_dir) Remote File Inclusion Steven M. Christey (Jun 27)
• CrisoftRicette<<--1.0pre15b Remote File Inclusion CrAzY . CrAcKeR (Jun 27)
• SYMSA-2006-006: Lotus Domino SMTP Based Denial of Service research (Jun 27)
• phpvillage "funshow.php" SQL Injection CrAzY . CrAcKeR (Jun 27)
• [Kurdish Security # 11] SiteBar Cross-Site Scripting botan (Jun 27)
• Re: Is Windows TCP/IP source routing PoC code available? 3APA3A (Jun 27)
  • Re[2]: Is Windows TCP/IP source routing PoC code available? Ìèíàåâ_Àíäðåé (Jun 28)
• SUSE Security Announcement: freetype2 (SUSE-SA:2006:037) Thomas Biege (Jun 27)
• [Kurdish Security # 10 ] MF Piadas 1.0 Remote File Include Vulnerability botan (Jun 27)
• CAID 34325 - CA ITM, eAV, ePP scan job description field format string vulnerability Williams, James K (Jun 27)
• Files and cvars overwriting in Quake 3 engine (1.32c / rev 803 / ...) Luigi Auriemma (Jun 27)
  • <Possible follow-ups>
  • Re: Files and cvars overwriting in Quake 3 engine (1.32c / rev 803 / ...) Luigi Auriemma (Jun 29)
• [Kil13r-SA-20060628] Hanaro Search Cross-Site Scripting Vulnerability mac68k (Jun 27)
• smartsite cms v1.0 Remote File include KARKOR23 (Jun 28)
• Layered Defense Advisory: Format String Vuln in CA eTrust dh (Jun 28)
• [KAPDA]MyBB 1.1.4~function_post.php~XSS Attack In URL tag addmimistrator (Jun 28)
• vCard PRO SQL Injection CrAzY . CrAcKeR (Jun 28)
• [ MDKSA-2006:112 ] - Updated gd packages fix DoS vulnerability. security (Jun 28)
• [ MDKSA-2006:114 ] - Updated libwmf packages fixes embedded GD vulnerability security (Jun 28)
  • <Possible follow-ups>
  • [ MDKSA-2006:114 ] - Updated libwmf packages fixes embedded GD vulnerability security (Jun 29)
• PHP-Nuke Module's Name Sections<<--V3 SQL Injection CrAzY . CrAcKeR (Jun 28)
• BLOG:CMS <= 4.0.0k sql injection rgod (Jun 28)
• [USN-307-1] mutt vulnerability Martin Pitt (Jun 28)
• [ GLSA 200606-27 ] Mutt: Buffer overflow Sune Kloppenborg Jeppesen (Jun 28)
• AzDGDatingPlatinum<<--v1.1.0 "view.php" SQL Injection CrAzY . CrAcKeR (Jun 28)
• SyScan'06 Highlight - Is Phone Banking Safe? thomas48 (Jun 28)
• MKPortal 1.0.1 Final ($ind) File Include Vulnerability (perl) stormhacker (Jun 28)
• PHP iCalendar Cross Site Scripting botan (Jun 28)
• Cisco Security Advisory: Multiple Vulnerabilities in Wireless Control System Cisco Systems Product Security Incident Response Team (Jun 28)
• Microsoft's Real Test with Vista is Vulnerabilities Gadi Evron (Jun 28)
  • Re: [funsec] Microsoft's Real Test with Vista is Vulnerabilities thomas48 (Jun 28)
    • RE: [funsec] Microsoft's Real Test with Vista is Vulnerabilities Larry Seltzer (Jun 29)
• [OpenPKG-SA-2006.011] OpenPKG Security Advisory (png) OpenPKG (Jun 28)
• Re: [MajorSecurity #18] Ralf Image Gallery <=0.7.4 - Multiple XSS, Remote File Include and directory traversal vulnerabilities Ralf (Jun 28)
• Cisco Security Advisory: Access Point Web-Browser Interface Vulnerability Cisco Systems Product Security Incident Response Team (Jun 28)
• [ MDKSA-2006:113 ] - Updated tetex packages fix embedded GD vulnerabilities security (Jun 29)
• Secunia Research: Opera SSL Certificate "Stealing" Weakness Secunia Research (Jun 29)
• Presentation: AT&T ISNN - "Case Studies in Finding Previously Unknown Vulnerabilities in Web Applications." Kenneth F. Belva (Jun 29)
• PHPClassifieds General luny (Jun 29)
• [KAPDA]http://myimei.com/security/2006-06-24/mybb104archive-modelight-parameter-extractionvarable-overwriting.html addmimistrator (Jun 29)
• DMA[2006-0628a] - 'Apple OSX launchd unformatted syslog() vulnerability' K F (lists) (Jun 29)
• [ GLSA 200606-29 ] Tikiwiki: SQL injection and multiple XSS vulnerabilities Sune Kloppenborg Jeppesen (Jun 29)
• CSRF in Nuked Klan 1.7 SP4.2 blwood (Jun 29)
• [ MDKSA-2006:115 ] - Updated mutt packages fix buffer overflow vulnerability security (Jun 29)
• Softbiz Banner Exchange 1.0 XSS securityconnection (Jun 29)
• Secunia Research: phpRaid SQL Injection and File Inclusion Vulnerabilities Secunia Research (Jun 29)
• [ GLSA 200606-28 ] Horde Web Application Framework: XSS vulnerability Sune Kloppenborg Jeppesen (Jun 29)
• Digital Armaments Security Advisory 29.06.2006: Siemens Speedstream Wireless Router Password Protection Bypass Vulnerability info (Jun 29)
• rPSA-2006-0116-1 mutt Justin M. Forbes (Jun 29)
• Novell Security contact address change Roman Drahtmueller (Jun 29)
• Multiple Vulnerabilities in PatchLink Update Server 6 Chris Steipp (Jun 29)
• Novell Security Announcement NOVELL-SA:2006:001 Jim Short (Jun 29)
• [security bulletin] HPSBTU02125 SSRT061105 rev.1 - HP Tru64 UNIX Running Perl 5.8.2 and earlier, Local Unauthorized Code Execution security-alert (Jun 29)
• [security bulletin] HPSBUX02122 SSRT061158 rev.2 - HP-UX Mozilla Remote Execution of Arbitrary Code, Denial of Service (DoS) security-alert (Jun 29)
• Msie 7.0 beta Crash Mr . Niega (Jun 29)
• rPSA-2006-0120-1 gnupg Justin M. Forbes (Jun 29)
• Browser bugs hit IE, Firefox today (SANS) Bill Stout (Jun 30)
• Re: [Full-disclosure] Browser bugs hit IE, Firefox today (SANS) Juha-Matti Laurio (Jun 30)
• ezWaiter v3.0 - XSS luny (Jun 30)
• [SECURITY] [DSA 1104-1] New OpenOffice.org packages fix several vulnerabilities Martin Schulze (Jun 30)
• libwmf integer/heap overflow sean (Jun 30)
• [ GLSA 200606-30 ] Kiax: Arbitrary code execution Sune Kloppenborg Jeppesen (Jun 30)
• Zen-Cart 1.3.0.2 Full Path Disclosure o . y . 6 (Jun 30)
• [Kil13r-SA-20060701-1] Ahnlab Search Cross-Site Scripting Vulnerability mac68k (Jun 30)
• [Kil13r-SA-20060701-2] MoniWiki 1.1.1 Cross-Site Scripting Vulnerability mac68k (Jun 30)
• [Kil13r-SA-20060701-3] Massting Cross-Site Scripting Vulnerability mac68k (Jun 30)
• ISC: Firefox immune to outerHTML flaw in MSIE [Was: Browser bugs hit IE, Firefox] Juha-Matti Laurio (Jun 30)
• ZDI-06-020: Apple iTunes AAC File Parsing Integer Overflow Vulnerability zdi-disclosures (Jun 30)
• FreeHost "misc.php & news.php" SQL Injection CrAzY . CrAcKeR (Jun 30)
• MyNewsGroups<<--v. 0.6 "tree.php" SQL Injection CrAzY . CrAcKeR (Jun 30)
• CDJ<<--V NITKID 2.0 "category.php" SQL Injection CrAzY . CrAcKeR (Jun 30)
• Module's Name "Classifieds" SQL Injection CrAzY . CrAcKeR (Jun 30)
• My smiles "browse.php" SQL Injection CrAzY . CrAcKeR (Jun 30)
• Hobbit monitor: Security issue with Hobbit 4.2-beta client Henrik Stoerner (Jun 30)

Previous period

Next period