Bugtraq: by thread

• RSS Feed
•  About List
•  All Lists

Previous period

Next period

699 messages starting May 01 06 and ending Jun 01 06
Date index | Thread index | Author index

• DMCounter Remote File Include beford (May 01)
• [ GLSA 200605-01 ] MPlayer: Heap-based buffer overflow Sune Kloppenborg Jeppesen (May 01)
• JMK's Picture Gallery admin login alp_eren (May 01)
• planetGallery admin login tugr (May 01)
• free-php.net Poll 1.0 admin login tugr (May 01)
• Secunia Research: WinHKI unacev2.dll Buffer Overflow Vulnerability Secunia Research (May 01)
• [SECURITY] [DSA 1048-1] New Asterisk packages fix arbitrary code execution Martin Schulze (May 01)
• Re: Apple Mac OS X Safari 2.0.3 Vulnerability buggy (May 01)
• [SECURITY] [DSA 1047-1] New resmgr packages fix unauthorised access Martin Schulze (May 01)
• Image file crashes Finder, Safari and other apps cmertes (May 01)
• Thyme 1.3 Cross Site Scripting outlaw (May 01)
• 4images<-- 1.7.1 SQL Injection CrAzY . CrAcKeR (May 01)
• Invision Power Board v2.1.5 Remote SQL Injection o . y . 6 (May 01)
  • <Possible follow-ups>
  • Re: Invision Power Board v2.1.5 Remote SQL Injection mattmecham (May 04)
• OpenBB 1.0.8 Full Path Disclosure o . y . 6 (May 01)
• Poll: Emerging Threats Jon R. Kibler (May 01)
  • <Possible follow-ups>
  • RE: Poll: Emerging Threats H Alsaleh (May 01)
• I-RATER Platinum Remote File Inclusion exploit Cod3d by R () 1D3N AminRayden (May 01)
• CoolMenus Event Remote File Inclusion exploit AminRayden (May 01)
  • <Possible follow-ups>
  • Re: CoolMenus Event Remote File Inclusion exploit Steven M. Christey (May 01)
• XINE format string bugs when handling non existen file king_purba (May 01)
• Blog Mod <= 0.2.x SQL Injection qex (May 01)
• RE: Oracle 10g 10.2.0.2.0 DBA exploit putosoft softputo (May 01)
• FTP Fuzzer infocus (May 02)
  • Re: FTP Fuzzer Alexey Biznya (May 03)
• VHCS --- Virtual Hosting Control System Cross Site Scripting outlaw (May 02)
• [ MDKSA-2006:080 ] - Updated clamav packages fix vulnerability security (May 02)
• JSBoard XSS vulnerability Alexander Klink (May 02)
• Cisco Security Advisory: Cisco Unity Express Expired Password Reset Privilege Escalation Cisco Systems Product Security Incident Response Team (May 02)
• X7 Chat <=2.0 remote commands execution rgod (May 02)
• [SECURITY] [DSA 1049-1] New Ethereal packages fix several vulnerabilities Martin Schulze (May 02)
• zenphoto Multiple Path Disclosure and Cross Site Scripting Vulnerabilities raphael . huck (May 02)
• Ejabberd : Symlink vulnerability during installation process Julien L. (May 02)
  • <Possible follow-ups>
  • Re: Ejabberd : Symlink vulnerability during installation process mickael . remond (May 03)
• geoBlog Mutiple XSS Vulnerability admin (May 02)
• sBlog SQL Injection and Path Disclosure Vulnerability admin (May 02)
• Cmscout <= V1.10 multiple XSS attack vectors zerogue (May 02)
• SF-Users V1.0 XSS injection zerogue (May 02)
• FileProtection Express <= 1.0.1 authentification bypass zerogue (May 02)
• Russcom.net Loginphp multiple vulnerabilties zerogue (May 02)
• TyroCms beta V1.0 multiple XSS injections zerogue (May 02)
• Invision Gallery 2.0.6 ( SQL Injection ) o . y . 6 (May 02)
  • <Possible follow-ups>
  • Re: Invision Gallery 2.0.6 ( SQL Injection ) mattmecham (May 04)
  • Re: Re: Invision Gallery 2.0.6 ( SQL Injection ) an0n (May 06)
• Oracle, where are the patches??? David Litchfield (May 02)
  • foreseeing (cough) critical problems futile? (was: Oracle, where are the patches???) Michael Shigorin (May 04)
  • <Possible follow-ups>
  • RE: Oracle, where are the patches??? Kornbrust, Alexander (May 02)
    • Re: [Full-disclosure] RE: Oracle, where are the patches??? Cesar (May 04)
• MySQL Anonymous Login Handshake - Information Leakage. Stefano Di Paola (May 02)
• MySQL COM_TABLE_DUMP Information Leakage and Arbitrary command execution. Stefano Di Paola (May 02)
• [ GLSA 200605-02 ] X.Org: Buffer overflow in XRender extension Sune Kloppenborg Jeppesen (May 02)
• [ GLSA 200605-03 ] ClamAV: Buffer overflow in Freshclam Sune Kloppenborg Jeppesen (May 02)
• [ GLSA 200605-04 ] phpWebSite: Local file inclusion Sune Kloppenborg Jeppesen (May 02)
• [ MDKSA-2006:081 ] - Updated xorg-x11 packages fix vulnerability security (May 03)
• [USN-276-1] Thunderbird vulnerabilities Martin Pitt (May 03)
• Quagga RIPD unauthenticated route table broadcast Konstantin V. Gavrilenko (May 03)
• SUSE Security Announcement: xorg-x11-server (SUSE-SA:2006:023) Ludwig Nussel (May 03)
• Dynamic Evaluation Vulnerabilities in PHP applications Steven M. Christey (May 03)
  • Re: Dynamic Evaluation Vulnerabilities in PHP applications Michael Schlenker (May 04)
• [SECURITY] [DSA 1050-1] New ClamAV packages fix denial of service or arbitrary code execution Martin Schulze (May 03)
• [USN-277-1] TIFF library vulnerabilities Martin Pitt (May 03)
• Quagga RIPD unauthenticated route injection Konstantin V. Gavrilenko (May 03)
  • Re: Quagga RIPD unauthenticated route injection Paul Jakma (May 03)
• [USN-278-1] gdm vulnerability Martin Pitt (May 03)
• Vulnerability in the way Ultr () VNC-1 0 1 handles MS-Logon Authentication. gdehanot (May 03)
• OpenVPN 2.0.7 and below: Remote OpenVPN Management Interface Flaw c0redump (May 03)
  • Re: OpenVPN 2.0.7 and below: Remote OpenVPN Management Interface Flaw David F. Skoll (May 03)
  • Re: OpenVPN 2.0.7 and below: Remote OpenVPN Management Interface Flaw Joachim Schipper (May 04)
    • Re: OpenVPN 2.0.7 and below: Remote OpenVPN Management Interface Flaw Kurt Seifried (May 05)
    • Re: OpenVPN 2.0.7 and below: Remote OpenVPN Management Interface Flaw c0redump (May 06)
      • Re: OpenVPN 2.0.7 and below: Remote OpenVPN Management Interface Flaw Giancarlo Razzolini (May 10)
• BankTown's ActiveX Buffer Overflow Vulnerability Alex Park (May 03)
  • <Possible follow-ups>
  • Re: BankTown's ActiveX Buffer Overflow Vulnerability lkh1348 (May 08)
• [USN-279-1] libnasl/nessus vulnerability Martin Pitt (May 03)
• [ MDKSA-2006:082 ] - Updated libtiff packages fix vulnerabilities security (May 03)
• [SECURITY] [DSA 1051-1] New Mozilla Thunderbird packages fix several vulnerabilities Martin Schulze (May 04)
• [security bulletin] HPSBUX02108 SSRT061133 rev.10 - HP-UX running Sendmail, Remote Execution of Arbitrary Code security-alert (May 04)
• ISA Server 2004 Log Manipulation beSIRT (May 04)
  • <Possible follow-ups>
  • Re: ISA Server 2004 Log Manipulation Steven M. Christey (May 05)
    • Re: ISA Server 2004 Log Manipulation beSIRT (May 05)
      • Re: ISA Server 2004 Log Manipulation Thor (Hammer of God) (May 07)
  • Re: ISA Server 2004 Log Manipulation Shaun Colley (May 06)
  • Re: ISA Server 2004 Log Manipulation Steven M. Christey (May 09)
• [REWTERZ-20060504] - Sami FTP Server Remote Buffer Overflow Vulnerability rewterz (May 04)
• CuteGuestbook XSS attack omnipresent (May 04)
• PunBB 1.2.11 Cross-Site Scripting o . y . 6 (May 04)
• zawhttpd - Buffer Overflow Kamil Sienicki (May 04)
• [REWTERZ-20060503] XM Easy Personal FTP Server Remote Buffer Overflow Vulnerability rewterz (May 04)
• Fast Click SQL Lite <= 1.1.3 Remote File Inclusion Aminrayden (May 04)
• Fast Click <= 2.3.8 Remote File Inclusion Aminrayden (May 04)
• 321soft PhP Gallery 0.9 - directory travel & XSS d4igoro (May 04)
• [USN-281-1] Linux kernel vulnerabilities Martin Pitt (May 04)
• [USN-280-1] X.org server vulnerability Martin Pitt (May 04)
• libero.it XSS vulnerability - HTML injection Davide Denicolo (May 04)
• Panda Antivirus Enterprise Secure, Norton Antivirus 2005 and the virus "I Love You" Joxean Koret (May 04)
• bigwebmaster guestbook multiply XSS Javor Ninov (May 04)
• Re: gcc 4.1 bug miscompiles pointer range checks, may place you at risk leonleon77 (May 04)
  • Re: gcc 4.1 bug miscompiles pointer range checks, may place you at risk Tonnerre Lombard (May 06)
• WebCalendar User Account Enumeration Weakness David Maciejak (May 05)
  • Re: WebCalendar User Account Enumeration Weakness David Maciejak (May 05)
• modules name(Sections)SQL Injection Exploit Mster-X (May 05)
  • Re: modules name(Sections)SQL Injection Exploit security curmudgeon (May 22)
  • <Possible follow-ups>
  • RE: modules name(Sections)SQL Injection Exploit Evans, Arian (May 25)
• modules name(Downloads)SQL Injection Exploit Mster-X (May 05)
  • Re: modules name(Downloads)SQL Injection Exploit Paul Laudanski (May 10)
    • Re: modules name(Downloads)SQL Injection Exploit znx (May 13)
• CuteNews 1.4.1 Multiple vulnerabilities k4p0k4p0 (May 05)
• [ MDKSA-2006:081-1 ] - Updated xorg-x11 packages fix vulnerability security (May 05)
• SaPHPLesson 3.0 Multbugs o . y . 6 (May 05)
• Invision Community Blog .. Bugs o . y . 6 (May 05)
  • <Possible follow-ups>
  • Re: Invision Community Blog .. Bugs mattmecham (May 08)
• Cryptomathic ActiveX Buffer Overflow (TDC Digital signature) CIRT.DK Advisory (May 05)
• TSLSA-2006-0024 - multi Trustix Security Advisor (May 05)
• [ GLSA 200605-05 ] rsync: Potential integer overflow Sune Kloppenborg Jeppesen (May 06)
• OpenFAQ - HTML injection and XSS (Cross Site Scripting) Kamil Sienicki (May 06)
• JetBox CMS Remote File Include beford (May 06)
• ChipmunkBlogger improper input sanitizing zerogue (May 06)
• ChipmunkBoard Multiple Attack vectors zerogue (May 06)
• FlexCustomer <= 0.0.4 sql injection zerogue (May 06)
• myBloggie <= 2.1.3 XSS zerogue (May 06)
• PassMasterFlex (and PassMasterFlex+) XSS injection zerogue (May 06)
• [ GLSA 200605-06 ] Mozilla Firefox: Potential remote code execution Thierry Carrez (May 06)
• VisionSource CMS <= 0.6 XSS vectors zerogue (May 06)
• WebsiteBaker CMS lack of sanitizing zerogue (May 06)
  • <Possible follow-ups>
  • Re: WebsiteBaker CMS lack of sanitizing ryan (May 22)
• X7Chat <= 2.0.2 avatar XSS injection zerogue (May 06)
• Re: DB_eSession deleteSession() SQL injection interact (May 06)
• Alexadex.com players.py XSS Exploit skinnypuppy (May 06)
• Intel wireless service s24evmon.exe confidential information disclosure. ruben (May 06)
• phpBB 2.0.20 Full Path Disclosure and SQL Errors cxib (May 06)
  • Re: phpBB 2.0.20 Full Path Disclosure and SQL Errors Paul Laudanski (May 11)
    • Re: phpBB 2.0.20 Full Path Disclosure and SQL Errors Maksymilian Arciemowicz (May 10)
      • Re: phpBB 2.0.20 Full Path Disclosure and SQL Errors Paul Laudanski (May 13)
• Firefox 1.5.0.3 code execution exploit yesn (May 06)
  • Re: Firefox 1.5.0.3 code execution exploit James_gmail-ij (May 10)
  • Re: Firefox 1.5.0.3 code execution exploit Flavio Visentin (May 10)
  • Re: Firefox 1.5.0.3 code execution exploit Daniel Veditz (May 10)
  • Re: Firefox 1.5.0.3 code execution exploit Ismail Donmez (May 10)
  • <Possible follow-ups>
  • Re: Firefox 1.5.0.3 code execution exploit Juha-Matti Laurio (May 10)
• Idle scan rediscovered!!! Joel Jose (May 06)
• URL Bug On 1ASPHost and DomainDLX Hosting Services spymeta (May 06)
• X-POLL admin By-Pass alp_eren (May 08)
• Limbo CMS (option=weblinks) SQL injection exploit SnoBMSN (May 08)
• Phil's Bookmark script admin By-pass alp_eren (May 08)
  • <Possible follow-ups>
  • Re: Phil's Bookmark script admin By-pass Steven M. Christey (May 09)
  • Re: Re: Phil's Bookmark script admin By-pass theproffx (May 12)
• OpenEngine (PHP CMS) ck (May 08)
• [KAPDA] MyBB1.1.1~Email Verification in User Activation ~SQL Injection Attack addmimistrator (May 08)
• [ GLSA 200605-07 ] Nagios: Buffer overflow Sune Kloppenborg Jeppesen (May 08)
• AngelineCMS Multiple Vulnerabilities admin (May 08)
• [SECURITY] [DSA 1052-1] New cgiirc packages fix arbitrary code execution Martin Schulze (May 08)
• CAID 34013 - CA Common Services CAIRIM on z/OS LMP SVC vulnerability Williams, James K (May 08)
• Dokeos Learning Management System 1.6.4 Remote File Include beford (May 08)
• Multiple Vulnerabilities In IdealBB ASP Bulletin Board CodeScan Labs (May 08)
• Claroline Open Source e-Learning 1.7.5 Remote File Include beford (May 08)
• singapore v0.9.7 XSS Vulnerabilities alp_eren (May 08)
• INFIGO-2006-05-03: Multiple FTP Servers vulnerabilities infocus (May 08)
  • Re: INFIGO-2006-05-03: Multiple FTP Servers vulnerabilities Andrea Rimicci (May 09)
• [Kurdish Security # 4] phpRaid Remote File Include Vulnerability (PHPBB) botan (May 08)
• [Kurdish Security # 5] phpRaid Remote File Include [SMF] botan (May 08)
• [USN-282-1] Nagios vulnerability Martin Pitt (May 08)
• [USN-283-1] MySQL vulnerabilities Martin Pitt (May 08)
• Secunia Research: TZipBuilder ZIP File Handling Buffer Overflow Vulnerability Secunia Research (May 08)
• Secunia Research: Anti-Trojan unacev2.dll Buffer Overflow Vulnerability Secunia Research (May 08)
• [ GLSA 200605-08 ] PHP: Multiple vulnerabilities Thierry Carrez (May 08)
• [ GLSA 200605-09 ] Mozilla Thunderbird: Multiple vulnerabilities Thierry Carrez (May 08)
• VSR Advisory: WebSense content filter bypass when deployed in conjunction with Cisco filtering devices VSR Advisories (May 08)
  • <Possible follow-ups>
  • VSR Advisory: WebSense content filter bypass when deployed in conjunction with Cisco filtering devices Matthew Cerha (May 08)
• ZDI-06-012: Sophos Anti-Virus CAB Unpacking Code Execution Vulnerability zdi-disclosures (May 08)
• Unfiltered Header Injection in Apache 1.3.34/2.0.57/2.2.1 Zaninotti, Thiago (May 08)
  • Re: Unfiltered Header Injection in Apache 1.3.34/2.0.57/2.2.1 Amit Klein (AKsecurity) (May 22)
• PHPFusion <= v6.00.306 avatar mod_mime arbitrary file upload & local inclusion vulnerabilities rgod (May 08)
• [MajorSecurity] phpListPro <= 2.01 - Multiple Remote File Include Vulnerability admin (May 08)
• SYMSA-2006-003: Cisco Secure ACS for Windows - Administrator Password Disclosure research (May 08)
  • Re: SYMSA-2006-003: Cisco Secure ACS for Windows - Administrator Password Disclosure Matthew Cerha (May 08)
• Secunia Research: Where Is It unacev2.dll Buffer Overflow Vulnerability Secunia Research (May 09)
• tseekdir.cgi<--Local File Include BoNy-m (May 09)
  • Re: tseekdir.cgi<--Local File Include security curmudgeon (May 22)
  • <Possible follow-ups>
  • Re: tseekdir.cgi<--Local File Include Steven M. Christey (May 10)
• [SECURITY] [DSA 1053-1] New Mozilla packages fix arbitrary code execution Martin Schulze (May 09)
• ICQ Client Cross-Application Scripting (XAS) 3APA3A (May 09)
• # MHG Security Team --- OzzyWork Gallery SQL Injection Dj_ReMix_20 (May 09)
• plaNetStat Admin ByPass alp_eren (May 09)
• # MHG Security Team --- DuGallery V2.x SQL Injection Dj_ReMix_20 (May 09)
• [EEYEB20051011B] - Microsoft Distributed Transaction Coordinator Denial of Service eEye Advisories (May 09)
• [EEYEB20051011A] - Microsoft Distributed Transaction Coordinator Heap Overflow eEye Advisories (May 09)
• ZDI-06-013: 3Com TippingPoint SMS Server Information Disclosure Vulnerability zdi-disclosures (May 09)
• IGNORING SSH CONNECTION USES ARP CACHE POISSONING king_purba (May 09)
  • Re: IGNORING SSH CONNECTION USES ARP CACHE POISSONING Thierry Zoller (May 10)
  • Re: IGNORING SSH CONNECTION USES ARP CACHE POISSONING Hugo van der Kooij (May 10)
  • Re: IGNORING SSH CONNECTION USES ARP CACHE POISSONING Felipe openglx (May 13)
  • <Possible follow-ups>
  • Re: IGNORING SSH CONNECTION USES ARP CACHE POISSONING king_purba (May 12)
• Two independent vulnerabilities (client and server side) in Quake3 engine and many derived games Thilo Schulz (May 09)
• [Reversemode] Microsoft Infotech Storage library Heap Corruption Reversemode (May 09)
  • <Possible follow-ups>
  • Re: [Reversemode] Microsoft Infotech Storage library Heap Corruption marco . correnti (May 12)
    • Re: [Reversemode] Microsoft Infotech Storage library Heap Corruption Reversemode (May 12)
• [SECURITY] [DSA 1054-1] New TIFF packages fix denial of service and arbitrary code execution Martin Schulze (May 09)
• IBM Websphere Application Server Multiple Vulnerabilities SnoBmsn (May 10)
• # MHG Security Team --- OzzyWork Gallery Upload Vulnerabilities Dj_ReMix_20 (May 10)
• [ GLSA 200605-11 ] Ruby: Denial of Service Sune Kloppenborg Jeppesen (May 10)
• [ GLSA 200605-10 ] pdnsd: Denial of Service and potential arbitrary code execution Sune Kloppenborg Jeppesen (May 10)
• [ GLSA 200605-12 ] Quake 3 engine based games: Buffer Overflow Sune Kloppenborg Jeppesen (May 10)
• Multiple SQL Injection Vulnerabilities in Dreamweaver Generated Code Brian Gallagher (May 10)
• [ MDKSA-2006:083 ] - Updated gdm package fixes symlink attack vulnerability security (May 10)
• Hackmaster Group DMCounter Remote File Include c-w-m (May 10)
• Oracle - the last word David Litchfield (May 10)
  • <Possible follow-ups>
  • Re: Oracle - the last word Steven M. Christey (May 11)
    • RE: Oracle - the last word Lee Kelly (May 12)
      • RE: Oracle - the last word Iggy E (May 15)
    • Re: Oracle - the last word Stefano Di Paola (May 13)
• Re: Milliscript 1.4 Multiple Vulnerabilities webmaster (May 10)
• UBlog Remote XSS Exploit SnoBMSN (May 10)
• [ MDKSA-2006:084 ] - Updated MySQL packages fix several vulnerabilities security (May 10)
• Firefox 1.5.0.3 - DoS p4 . werterxyz (May 10)
  • Re: Firefox 1.5.0.3 - DoS Chris Horry (May 10)
    • Re: Firefox 1.5.0.3 - DoS RSnake (May 12)
  • Re: Firefox 1.5.0.3 - DoS Flavio Visentin (May 13)
  • Re: Firefox 1.5.0.3 - DoS Ronald van den Blink (May 15)
  • <Possible follow-ups>
  • Re: Firefox 1.5.0.3 - DoS marrob (May 13)
  • Re: Re: Firefox 1.5.0.3 - DoS Ronald (May 15)
• mybb v1.1.1(showthread.php) SQL Injection Exploit Breeeeh (May 10)
• [TZO-042006] Insecure Auto-Update and File execution Thierry Zoller (May 10)
• PhpListPro 2.01 Remote File Include Vulnerability SnoBMSN (May 10)
  • <Possible follow-ups>
  • Re: PhpListPro 2.01 Remote File Include Vulnerability not (May 26)
• vbulletin security Alert aura (May 10)
  • <Possible follow-ups>
  • Re: vbulletin security Alert scott (May 11)
• [48Bits.com Advisory] Path conversion design flaw in Microsoft NTDLL 48Bits.com [I+D Team] (May 10)
• Kerio WinRoute Firewall Protocol Inspection Denial SnoBMSN (May 10)
• ZDI-06-014: Verisign I-Nav ActiveX Control Code Execution Vulnerability zdi-disclosures (May 11)
• Re: SYMSA-2006-003: Cisco Secure ACS for Windows - AdministratorPassword Disclosure Greg owens (May 11)
  • <Possible follow-ups>
  • RE: SYMSA-2006-003: Cisco Secure ACS for Windows - AdministratorPassword Disclosure John Stuppi (jstuppi) (May 11)
• Cisco Security Advisory: AVS TCP Relay Vulnerability Cisco Systems Product Security Incident Response Team (May 11)
• [ MDKSA-2006:085 ] - Updated xine-ui packages fix format string vulnerabilities security (May 11)
• Unclassified NewsBoard <= 1.6.1 patch 1 ABBC[Config][smileset] arbitrary local inclusion rgod (May 11)
• [TZO-042006] Insecure Auto-Update and File execution (2) Thierry Zoller (May 11)
• [SECURITY] [DSA 1055-1] New Mozilla Firefox packages fix arbitrary code execution Martin Schulze (May 11)
• Microsoft MSDTC NdrAllocate Validation Vulnerability avert (May 11)
• Secunia Research: UltimateZip unacev2.dll Buffer Overflow Vulnerability Secunia Research (May 11)
• Verizon Voicewing and Linksys PAP2-VN securityfocus (May 11)
• phpBB "charts.php" XSS and SQL-Injection sn4k3 . 23 (May 11)
  • <Possible follow-ups>
  • Re: phpBB "charts.php" XSS and SQL-Injection g30rg3x (May 12)
  • Re: phpBB "charts.php" XSS and SQL-Injection phpbb (May 19)
• [ GLSA 200605-13 ] MySQL: Information leakage Sune Kloppenborg Jeppesen (May 11)
• Ipswitch WhatsUp Professional multiple flaws David Maciejak (May 12)
• Apple QuickTime udta ATOM Heap Overflow Sowhat (May 12)
• Re: Secunia Research: Where Is It unacev2.dll Buffer OverflowVulnerability jason . gerfen (May 12)
• yet more XSS in older versions of ColdFusion zuxncwaruio (May 12)
• How secure is software X? David Litchfield (May 12)
  • Re: How secure is software X? Adam Shostack (May 12)
  • Re: How secure is software X? Tim Newsham (May 12)
  • Re: [Full-disclosure] How secure is software X? Michael Silk (May 12)
    • Re: [Full-disclosure] How secure is software X? David Litchfield (May 12)
  • Re: How secure is software X? Paul B. Saitta (May 15)
  • Re: How secure is software X? Fabian Becker (May 15)
    • Re: How secure is software X? Matt . Carpenter (May 15)
      • Re: How secure is software X? Duncan Simpson (May 24)
    • Re: How secure is software X? Crispin Cowan (May 24)
  • <Possible follow-ups>
  • RE: How secure is software X? Ferguson, Justin (IARC) (May 13)
    • Re: How secure is software X? David Litchfield (May 13)
• [Kurdish Security # 7] Foing Remote File Include Vulnerability [PHPBB] botan (May 12)
• Apple QuickDraw/QuickTime Multiple Vulnerabilities Avert (May 12)
• TSLSA-2006-0026 - kernel Trustix Security Advisor (May 12)
• [EEYEB-20060307] Apple QuickTime FPX Integer Overflow eEye Advisories (May 12)
• PHPBB 2.0.20 persistent issues with avatars rgod (May 12)
  • Re: PHPBB 2.0.20 persistent issues with avatars Paul Laudanski (May 15)
  • <Possible follow-ups>
  • Re: PHPBB 2.0.20 persistent issues with avatars s89df987 s9f87s987f (May 19)
    • Re: PHPBB 2.0.20 persistent issues with avatars Paul Laudanski (May 20)
• Dokeos LDAP hole fixed thomas . depraetere (May 12)
• SEC Consult SA-20060512-0 :: Symantec Enterprise Firewall NAT/HTTP Proxy Private IP Exposure Bernhard Mueller (May 12)
• Dovecot IMAP: Mailbox names list disclosure with mboxes Timo Sirainen (May 12)
• Several flaws in e-business designer (eBD) Pedro Andújar (May 13)
• PHP Live Helper ASP(chat.php) XSS mster-X (May 13)
• # MHG Security Team --- Gallery Upload Vulnerabilities Dj_ReMix_20 (May 13)
• ZDI-06-015: Apple QuickTime H.264 Parsing Heap Overflow Vulnerability zdi-disclosures (May 13)
• [FLSA-2006:152898] Updated emacs packages fix a security issue Marc Deslauriers (May 13)
• Buffer-overflow and NULL pointer crash in Genecys 0.2 Luigi Auriemma (May 13)
• [FLSA-2006:152868] Updated tetex packages fix security issues Marc Deslauriers (May 13)
• Multiple vulnerabilities in Outgun 1.0.3 bot 2 Luigi Auriemma (May 13)
• Multiple vulnerabilities in Raydium rev 309 Luigi Auriemma (May 13)
• [FLSA-2006:185355] Updated gnupg package fixes security issues Marc Deslauriers (May 13)
• Socket unreachable in GNUnet rev 2780 Luigi Auriemma (May 13)
• Gphotos Directory Traversal and Cross Site Scripting doz (May 13)
• [FLSA-2006:152904] Updated ncpfs package fixes security issues Marc Deslauriers (May 13)
• [FLSA-2006:152923] Updated xloadimage package fixes security issues Marc Deslauriers (May 13)
• Server crash in Empire 4.3.2 Luigi Auriemma (May 13)
• [FLSA-2006:164512] Updated fetchmail packages fix security issues Marc Deslauriers (May 13)
• SQL-Injection in e107 allows attacker to become a site admininstrator socsam (May 13)
• PhpBB <= 2.0.20 Admin/Restore Database remote cmmnds xctn (works with admin sid) rgod (May 15)
• [SECURITY] [DSA 1057-1] New phpLDAPadmin packages fix cross-site scripting Martin Schulze (May 15)
• [USN-274-2] MySQL vulnerability Martin Pitt (May 15)
• Is MS06-018 a DoS or a system compromise ? Nick Boyce (May 15)
  • RE: Is MS06-018 a DoS or a system compromise ? Maxime Ducharme (May 15)
  • <Possible follow-ups>
  • RE: Is MS06-018 a DoS or a system compromise ? Hayes, Bill (May 15)
    • Re: Is MS06-018 a DoS or a system compromise ? Nick Boyce (May 18)
• JDK 1.4.2_11, 1.5.0_06, unsigned applets consuming all free harddisk space Marc Schoenefeld (May 15)
  • Re: JDK 1.4.2_11, 1.5.0_06, unsigned applets consuming all free harddisk space William Starling (May 18)
  • Re: JDK 1.4.2_11, 1.5.0_06, unsigned applets consuming all free harddisk space Leif Erik Andersen (at Seven) (May 19)
• 90% of programs made in PHP5 and prior Full Path Disclosure vuln. sirdarckcat (May 15)
  • <Possible follow-ups>
  • Re: 90% of programs made in PHP5 and prior Full Path Disclosure vuln. sirdarckcat (May 22)
  • Re: 90% of programs made in PHP5 and prior Full Path Disclosure vuln. Kamil Sienicki (May 22)
• XSS in FreeTextBox and FCKEditor Basic Toolbar Selection bonsite (May 15)
• POC exploit for freeSSHd version 1.0.9 Tauqeer Ahmad (May 15)
  • Re: [Full-disclosure] POC exploit for freeSSHd version 1.0.9 David Maciejak (May 15)
• [SECURITY] [DSA 1056-1] New webcalendar packages fix information leak Martin Schulze (May 15)
• DMA[2006-0514a] - 'ClamAV freshclam incorrect privilege drop' KF (lists) (May 15)
• RealVNC 4.1.1 Remote Compromise James Evans (May 15)
  • Message not available
    • Re: [Full-disclosure] RealVNC 4.1.1 Remote Compromise Joachim Schipper (May 18)
  • <Possible follow-ups>
  • re: RealVNC 4.1.1 Remote Compromise plato (May 16)
• Sugar Suite Open Source <= 4.2 "OptimisticLock!" arbitrary remote inclusion exploit rgod (May 15)
• Azboard <= 1.0 Multiple Sql Injections geinblues (May 15)
• tyree[at]users.sourceforge.net tyree (May 15)
• Secunia Research: FilZip unacev2.dll Buffer Overflow Vulnerability Secunia Research (May 15)
• CYBSEC - Security Advisory: Phishing Vector in SAP BC (Business Connector) Leandro Meiners (May 15)
• CYBSEC - Security Advisory: Arbitrary File Read/Delete in SAP BC (Business Connector) Leandro Meiners (May 15)
• Re: [Full-disclosure] RealVNC 4.1.1 Remote Compromise Juha-Matti Laurio (May 15)
  • <Possible follow-ups>
  • RE: [Full-disclosure] RealVNC 4.1.1 Remote Compromise Krpata, Tyler (May 19)
    • Re: [Full-disclosure] RealVNC 4.1.1 Remote Compromise Matt Venzke (May 20)
• Novell NDPS Remote Vulnerability (Server & Client) Ryan Smith (May 15)
• Secunia Research: Abakt ZIP File Handling Buffer Overflow Vulnerability Secunia Research (May 15)
• [USN-284-1] Quagga vulnerabilities Martin Pitt (May 15)
• Confixx 3.1.2 <= Code Injection Snake_23 (May 15)
• YapBB <= 1.2 Beta2 'find.php' SQL Injection Vulnerability geinblues (May 15)
• DeluxeBB 1.06 Remote SQL Injection Exploit kingofska (May 15)
• PhpRemoteView Multiple Xss Vulnerabilities Soothackers (May 16)
• Sphider Multiple Xss Vulnerabilities Soothackers (May 16)
• IceWarp Cross-Site Scripting(XSS) LiNuX_rOOt1 (May 16)
• Newsportal: code injection vulnerability newsportal (May 16)
• ScanAlert Security Advisory Joseph Pierini (May 16)
• Checkpoint SYN DoS Vulnerability sanjay naik (May 16)
  • Re: Checkpoint SYN DoS Vulnerability Pawel Worach (May 16)
    • Re: Checkpoint SYN DoS Vulnerability sanjay naik (May 16)
      • Re: Checkpoint SYN DoS Vulnerability Bojan Zdrnja (May 17)
      • Re: Checkpoint SYN DoS Vulnerability Jim Clausing (May 22)
      • Re: Checkpoint SYN DoS Vulnerability Erick Mechler (May 18)
      • Re: Checkpoint SYN DoS Vulnerability Bojan Zdrnja (May 22)
  • Re: Checkpoint SYN DoS Vulnerability Chris Brenton (May 16)
    • Re: Checkpoint SYN DoS Vulnerability sanjay naik (May 19)
      • Re: Checkpoint SYN DoS Vulnerability Niranjan S Patil (May 24)
  • <Possible follow-ups>
  • Re: Checkpoint SYN DoS Vulnerability sanjay naik (May 17)
  • Re: Re: Checkpoint SYN DoS Vulnerability jrh57 (May 18)
  • RE: Checkpoint SYN DoS Vulnerability Sterling, Chuck (May 18)
  • Re: Checkpoint SYN DoS Vulnerability sanjay naik (May 18)
• Caucho Resin Windows Directory Traversal Vulnerability advisory (May 16)
• The Weakness of Windows Impersonation Model Brian L. Walche (May 16)
  • Re: The Weakness of Windows Impersonation Model David Litchfield (May 18)
    • Re[2]: The Weakness of Windows Impersonation Model Brian L. Walche (May 17)
    • Re[2]: The Weakness of Windows Impersonation Model Brian L. Walche (May 17)
      • Re: Re[2]: The Weakness of Windows Impersonation Model Cesar (May 31)
• vulnerability details Arnold Grossmann (May 16)
• UPDATE: [ GLSA 200605-13 ] MySQL: Information leakage Sune Kloppenborg Jeppesen (May 16)
• DeluxeBB <= v1.06 attachment mod_mime exploit rgod (May 16)
• ERRATA: [ GLSA 200605-07 ] Nagios: Buffer overflow Sune Kloppenborg Jeppesen (May 16)
• PHP-Fusion <= 6.00.306 "srch_where" SQL injection / admin credentials disclosure rgod (May 17)
• Advisory: Quezza BB <= 1.0 File Inclusion Vulnerability. Mustafa Can Bjorn IPEKCI (May 17)
• Maksymilian Arciemowicz cxib (May 17)
  • Re: Maksymilian Arciemowicz frantisek holop (May 18)
• Secunia Research: IZArc unacev2.dll Buffer Overflow Vulnerability Secunia Research (May 17)
• iDefense Q2 2006 Vulnerability Challenge labs-no-reply () idefense com (May 17)
• Newsportal <= 0.36 Remote File Inclusion Vulnerability philipp . niedziela (May 17)
• Re: Zen Cart login.php SQL Injection Vulnerability noreply (May 17)
• VNC_bypauth: vnc scanner multithreaded linux & windows ad () heapoverflow com (May 17)
• What's Up Professional Spoofing Authentication Bypass Kenneth F. Belva (May 17)
  • Re: [Full-disclosure] What's Up Professional Spoofing Authentication Bypass David Maciejak (May 19)
• Firefox (with IETab Plugin) Null Pointer Dereferences Bug Debasis Mohanty (May 17)
  • <Possible follow-ups>
  • Re: Firefox (with IETab Plugin) Null Pointer Dereferences Bug Roman Daszczyszak (May 19)
• DIMVA 2006 - Call For Participation Thomas Biege (May 17)
• Two heap overflow in libextractor 0.5.13 (rev 2832) Luigi Auriemma (May 17)
• Secunia Research: Eazel unacev2.dll Buffer Overflow Vulnerability Secunia Research (May 17)
• Mobotix IP Network Cameras Multiple XSS jaime . blasco (May 17)
• Boastmachine Cross Site Scripting Vulnerability mail (May 17)
• OpenWiki<--v0.78 Cross-Site Scripting LiNuX_rOOt1 (May 18)
• HYSA-2006-008 myBloggie 2.1.3 CRLF & SQL Injection h4cky0u . org (May 18)
• RadLance Local Inclusion Exploit Hussain Salim (May 18)
• Wargamming Network.. Dusty (May 18)
• Gawab.com Register Xss Bugtraq rootter (May 18)
• CodeScan Advisory: Avatar MOD v1.3 for Snitz Forums v3.4 - Arbitrary File Upload CodeScan Labs (May 18)
• Multiple Vulns in Bitrix CMS Gogi The Georgian (May 18)
• [cosmoshop again] sql injection + view all files as admin user innate (May 18)
• [Info Disclosure] Diesel PHP Job Site Latest Version Matt Gibson (May 18)
  • <Possible follow-ups>
  • Re: [Info Disclosure] Diesel PHP Job Site Latest Version support (May 30)
    • Re: [Info Disclosure] Diesel PHP Job Site Latest Version GulfTech Security Research (May 31)
• AspBB Forum "profile.asp & default.asp" XSS Vulnerability TeufeL Online (May 18)
• Gmail/Gtalk web client DoS dan (May 18)
• [SECURITY] [DSA 1058-1] New awstats packages fix arbitrary command execution Martin Schulze (May 18)
• XSS in orkut.com Rohin Koul (May 18)
  • Re: XSS in orkut.com Google Security Team (May 20)
• FrontRange iHeat Vulnerability mcdanielar (May 18)
• POC exploit for freeFTPd 1.0.10 Tauqeer Ahmad (May 18)
  • Re: POC exploit for freeFTPd 1.0.10 Sanjay Rawat (May 22)
  • <Possible follow-ups>
  • Re:POC exploit for freeFTPd 1.0.10 Tauqeer Ahmad (May 18)
  • Re: POC exploit for freeFTPd 1.0.10 Tauqeer Ahmad (May 22)
• Re: MediaSlash Gallery 'rub' variable Remote File inlcusion Vulnerability gyzmo77 (May 18)
• Myspace Friend Train v2.8 luny (May 18)
• Code Injection via Hidden Form Field Manipulation mtoren (May 19)
• Sun single-CPU DOS Doug Hughes (May 19)
  • Re: Sun single-CPU DOS Mike O'Connor (May 22)
    • Re: Sun single-CPU DOS Doug Hughes (May 24)
      • Re: Sun single-CPU DOS Mike O'Connor (May 24)
      • Re: Sun single-CPU DOS Doug Hughes (May 26)
      • Re: Sun single-CPU DOS Mike O'Connor (May 26)
      • Re: Sun single-CPU DOS Mike O'Connor (May 26)
      • Re: Sun single-CPU DOS Doug Hughes (May 27)
• [ MDKSA-2006:086 ] - Updated kernel packages fix multiple vulnerabilities security (May 19)
• Secunia Research: CAM UnZip ZIP File Handling Buffer Overflow Vulnerability Secunia Research (May 19)
• [security bulletin] HPSBUX02108 SSRT061133 rev.11 - HP-UX Running Sendmail, Remote Execution of Arbitrary Code security-alert (May 19)
• [security bulletin] HPSBUX02117 SSRT2400 rev.1 - HP-UX Running BINDv4 Domain Name Server (DNS) Remote Unauthorized Access, Denial of Service (DoS) security-alert (May 19)
• [security bulletin] HPSBTU02118 SSRT061145 rev.1 - HP Tru64 UNIX Running Firefox or Mozilla Application Suite, Remote Execution of Arbitrary Code or Denial of Service (DoS) security-alert (May 19)
• [SECURITY] [DSA 1059-1] New quagga packages fix several vulnerabilities Martin Schulze (May 19)
• Yourfreeworld Styleish Text Ads Script luny (May 19)
• [SECURITY] [DSA 1062-1] New kphone packages fix information disclosure Moritz Muehlenhoff (May 19)
• Yourfreeworld.com Short Url & Url Tracker Script luny (May 19)
• [SECURITY] [DSA 1060-1] New kernel-patch-vserver packages fix privilege escalation Moritz Muehlenhoff (May 19)
• [SECURITY] [DSA 1061-1] New popfile packages fix denial of service Moritz Muehlenhoff (May 19)
• Jemscripts Download Control v1.0 luny (May 19)
• CYBSEC - Security Pre-Advisory: Local Privilege Escalation in SAP sapdba Command Leandro Meiners (May 19)
• [SECURITY] [DSA 1063-1] New phpgroupware packages fix execution of arbitrary web script code Moritz Muehlenhoff (May 19)
• [SECURITY] [DSA 1066-1] New phpbb2 packages fix execution of arbitrary web script code Moritz Muehlenhoff (May 20)
• phpBazar <= 2.1.0 Multiple vulnerabilites i6d (May 20)
• Re: NSA Group Security Advisory NSAG-195-23.02.2006 Vulnerability FCKeditor 2.0 FC fredck (May 20)
• [SECURITY] [DSA 1065-1] New hostapd packages fix denial of service Moritz Muehlenhoff (May 20)
• ActualAnalyzer Server <=8.23 - Remote File Include Vulnerability i6d (May 20)
• Interlink "news_information.php" XSS Mster-X (May 20)
• RaceEventManagement <--v0.7.6 SQL injection & XSS Mster-X (May 20)
• Xtremescripts Topsites v1.1 luny (May 20)
• [SECURITY] [DSA 1067-1] New Linux kernel 2.4.16 packages fix several vulnerabilities Moritz Muehlenhoff (May 20)
• Re: NSA Group Security Advisory NSAG-196-23.02.2006 Vulnerability FCKeditor 2.2 fredck (May 20)
• [SECURITY] [DSA 1064-1] New cscope packages fix arbitrary code execution Moritz Muehlenhoff (May 20)
• cPanel OpenBaseDir Bypass i6d (May 20)
• Zix Forum <= 1.12 (layid) SQL Injection Vulnerability i6d (May 20)
  • <Possible follow-ups>
  • Re: Zix Forum <= 1.12 (layid) SQL Injection Vulnerability farhadkey (May 22)
• [SECURITY] [DSA 1068-1] New fbi packages fix denial of service Moritz Muehlenhoff (May 20)
• Hiox Guestbook 3.1 luny (May 22)
• [SECURITY] [DSA 1069-1] New Linux kernel 2.4.18 packages fix several vulnerabilities Moritz Muehlenhoff (May 22)
  • <Possible follow-ups>
  • [SECURITY] [DSA 1069-1] New Linux kernel 2.4.18 packages fix several vulnerabilities Moritz Muehlenhoff (May 22)
• PunBB 1.2.11 Cross site scripting k4p0k4p0 (May 22)
• Destiney Rated Images Script v0.5.0 - XSS Vulnv luny (May 22)
  • <Possible follow-ups>
  • Re: Destiney Rated Images Script v0.5.0 - XSS Vulnv webmaster (May 24)
  • Re: Destiney Rated Images Script v0.5.0 - XSS Vulnv Steven M. Christey (May 26)
• Destiney Links Script v2.1.2 luny (May 22)
• [SECURITY] [DSA 1070-1] New Linux kernel 2.4.19 packages fix several vulnerabilities Moritz Muehlenhoff (May 22)
• Captivate 1.0 - XSS Vuln luny (May 22)
• PHP Easy Galerie Index.PHP Remote File Include Vulnerability craziest (May 22)
• Firefox 1.5.0.3 Flaw - Page can obtain path to Mozilla installation or profile by examining JavaScript exceptions milw0rm (May 22)
• XOOPS <= 2.0.13.2 'xoopsOption[nocommon]' exploit rgod (May 22)
• [TZO-072006]-Xampp - Multiple Priviledge Escalation (SYSTEM) and Rogue Autostart Thierry Zoller (May 22)
• [ GLSA 200605-14 ] libextractor: Two heap-based buffer overflows Stefan Cornelius (May 22)
• [ GLSA 200605-15 ] Quagga Routing Suite: Multiple vulnerabilities Stefan Cornelius (May 22)
• Novell Client login form enables reading and writing from and to the clipboard of the logged-in user EitanCaspi () yahoo com (May 22)
  • Re: Novell Client login form enables reading and writing from and to the clipboard of the logged-in user Roman Drahtmueller (May 22)
• Generic Browser Crash with Java 1.4.2_11, Java 1.5.0_06 Marc Schoenefeld (May 22)
• [KAPDA::#43] - phpwcms multiple vulnerabilities alireza hassani (May 22)
• Skype - URI Handler Command Switch Parsing Brett Moore (May 22)
• [SECURITY] [DSA 1071-1] New MySQL 3.23 packages fix several vulnerabilities Martin Schulze (May 22)
• Perlpodder Remote Arbitrary Command Execution RedTeam Pentesting (May 22)
• Prodder Remote Arbitrary Command Execution RedTeam Pentesting (May 22)
• BitZipper Archive Extraction Directory traversal h e (May 22)
• [security bulletin] HPSBUX02119 SSRT4848 rev.1 - HP-UX Running Motif Applications Remote Arbitrary Code Execution, Denial of Service (DoS) security-alert (May 22)
• [security bulletin] HPSBUX02120 SSRT051057 rev.1 - HP-UX Local Denial of Service (DoS) security-alert (May 22)
• ZDI-06-016: Novell eDirectory 8.8 NDS Server Buffer Overflow Vulnerability zdi-disclosures (May 22)
• [SECURITY] [DSA 1073-1] New MySQL 4.1 packages fix several vulnerabilities Martin Schulze (May 22)
• ACROS Security: Buffer Overflow In EMC (previously Dantz) Retroclient Service ACROS Security (May 22)
• [SECURITY] [DSA 1072-1] New Nagios packages fix arbitrary code execution Martin Schulze (May 22)
• mybb v1.1.1(rss.php) SQL Injection Exploit Breeeeh (May 22)
  • <Possible follow-ups>
  • Re: mybb v1.1.1(rss.php) SQL Injection Exploit Steven M. Christey (May 25)
• CANews Multiple Vulnerabilities omnipresent (May 22)
• SOE's implementation of Lithium Forums Software allows users to log on as each other. john (May 22)
• Beoped Portal XSS outlaw (May 22)
• phpRaid "view.php" XSS Vulnerability TeufeL Online (May 22)
• TSLSA-2006-0028 - multi Trustix Security Advisor (May 22)
• Remote Code Execution in artmedic Newsletter 4.1 [log.php] c . j . schmitz (May 22)
• Microsoft Internet Explorer - Crash on mouse button click mac68k (May 22)
  • <Possible follow-ups>
  • Re: Microsoft Internet Explorer - Crash on mouse button click unknown user (May 24)
    • Message not available
      • Re: Microsoft Internet Explorer - Crash on mouse button click unknown user (May 26)
      • Message not available
      • Re: Microsoft Internet Explorer - Crash on mouse button click unknown user (May 27)
    • Message not available
      • Re: Microsoft Internet Explorer - Crash on mouse button click unknown user (May 26)
  • RE: Microsoft Internet Explorer - Crash on mouse button click Jain, Siddhartha (May 25)
  • Re: Microsoft Internet Explorer - Crash on mouse button click mac68k (May 27)
• Hackernetwork.Com Mail XSS Vulnerability TeufeL Online (May 22)
• Circumventing quarantine control in Windows 2003 and ISA 2004 Memet Anwar (May 22)
  • Re: Circumventing quarantine control in Windows 2003 and ISA 2004 3APA3A (May 23)
  • RE: Circumventing quarantine control in Windows 2003 and ISA 2004 Roger A. Grimes (May 24)
  • Re: Circumventing quarantine control in Windows 2003 and ISA 2004 Mark Senior (May 24)
    • Re: Circumventing quarantine control in Windows 2003 and ISA 2004 Memet Anwar (May 25)
  • Re: Circumventing quarantine control in Windows 2003 and ISA 2004 Andreas Beck (May 24)
• Chatty improper input sanitizing zerogue (May 23)
• DSChat <= 1.0 XSS zerogue (May 23)
• IpLogger <= 1.7 XSS zerogue (May 23)
  • <Possible follow-ups>
  • Re: IpLogger <= 1.7 XSS thrasher . basher (May 25)
• QBv14 XSS zerogue (May 23)
• Russcom PHPImages lack of validation zerogue (May 23)
• Russcom Ping Remote code execution zerogue (May 23)
• SkyeShoutbox <= v.1.2.0 XSS zerogue (May 23)
• Kaspersky antivirus 6: HTTP monitor bypassing john (May 23)
  • <Possible follow-ups>
  • Re: Kaspersky antivirus 6: HTTP monitor bypassing denisov_vit (May 26)
  • Re: Kaspersky antivirus 6: HTTP monitor bypassing dmitryp . spm (May 26)
• [OpenPKG-SA-2006.008] OpenPKG Security Advisory (openldap) OpenPKG (May 23)
• Non eXecutable Stack Lovin on OSX86 KF (lists) (May 23)
• Nucleus CMS <= 3.22 arbitrary remote inclusion rgod (May 23)
• [security bulletin] HPSBUX02114 SSRT061115 rev.1 - HP-UX Running Software Distributor Local Elevation of Privilege security-alert (May 23)
• phpMyDirectory <= 10.4.4 Multiple Remote File Include(new!) ajannhwt (May 23)
• AlstraSoft E-Friends - XSS luny (May 23)
• Alstrasoft Article Manager Pro v1.6 luny (May 23)
• [security bulletin] HPSBUX02075 SSRT051074 rev.5 - HP-UX Running xterm Local Unauthorized Access security-alert (May 23)
• DGbook v1.0 - XSS luny (May 24)
• [USN-285-1] awstats vulnerability Martin Pitt (May 24)
• [security bulletin] HPSBMA02121 SSRT061157 rev.1 - HP OpenView Storage Data Protector Remote Arbitrary Command Execution security-alert (May 24)
• [security bulletin] HPSBMA02098 SSRT5911 rev.1 - HP OpenView Network Node Manager (OV NNM) Remote Unauthorized Privileged Access, Arbitrary Command Execution, Arbitrary File Creation security-alert (May 24)
• Server termination in netPanzer 0.8 (rev 952) Luigi Auriemma (May 24)
• Buffer-overflow in the WebTool service of PunkBuster for servers (minor than v1.229) Luigi Auriemma (May 24)
• AlstraSoft Web Host Directory v1.2 luny (May 24)
• Publicist v0.95 - XSS And Full Path Errors luny (May 24)
• Mambo <= 4.6. RC1 xss rgod (May 24)
• YLZH(right.php)Cross Site Scripting Breeeeh (May 24)
• Default Screen Saver Vulnerability in Microsoft Windows susam . pal (May 24)
  • Re: Default Screen Saver Vulnerability in Microsoft Windows Eliah Kagan (May 24)
  • Re: Default Screen Saver Vulnerability in Microsoft Windows Ansgar -59cobalt- Wiechers (May 24)
    • Re: Default Screen Saver Vulnerability in Microsoft Windows Jason V. Miller (May 25)
• Vodafone.de XSS Vulnerability try_og (May 24)
• NETGEAR WGR614 v6 Wireless DSL router information disclosure vulnerability info (May 24)
• Diesel Joke Site SQL INJECTION a_linuxer (May 24)
• Write-up by Amit Klein: "IE + some popular forward proxy servers = XSS, defacement (browser cache poisoning)" Amit Klein (AKsecurity) (May 24)
• OpenCms version 6.0.x Xml Content Demo search engine Cross site scripting jaime . blasco (May 24)
• [SECURITY] [DSA 1074-1] New mpg123 packages fix arbitrary code execution Martin Schulze (May 24)
• Cisco Security Advisory: Windows VPN Client Local Privilege Escalation Vulnerability Cisco Systems Product Security Incident Response Team (May 24)
• [ MDKSA-2006:087 ] - Updated kernel packages fixes netfilter SNMP NAT memory corruption security (May 24)
• [ MDKSA-2006:088 ] - Updated hostapd package to address DoS vulnerability security (May 24)
• [ MDKSA-2006:089 ] - Updated kphone packages fixes permissions issue with .qt/kphonerc security (May 24)
• [ MDKSA-2006:090 ] - Updated shadow-utils packages fix mailbox creation vulnerability security (May 24)
• [ MDKSA-2006:091 ] - Updated php packages fix vulnerabilities security (May 25)
• VSR Advisory: PDF Tools AG - PDF Form Filling and Flattening Tool Buffer Overflow advisories (May 25)
• [CLOSED] SOE's implementation of Lithium Forums Software allows users to log on as each other. support (May 25)
• Kaspersky antivirus 6: POP3 state machine error bug . registrator (May 25)
  • <Possible follow-ups>
  • Re: Kaspersky antivirus 6: POP3 state machine error denisov_vit (May 26)
• phpFoX All Version Login Exploit mx (May 25)
• Re: Re: [SECURITYREASON.COM] PhpNuke 7.6=>x Multiple vulnerabilities cXIb8O3.12 phpnuke (May 25)
• AZ Photo Album Script Pro luny (May 25)
• ChatPat v1.0 luny (May 25)
• A Nasty Security Bug that affect PGP Virtual Disks & PGP SDA , PGP 8.x & 9.x and Truecrypt. thesinoda (May 25)
  • Re: A Nasty Security Bug that affect PGP Virtual Disks & PGP SDA , PGP 8.x & 9.x and Truecrypt. 3APA3A (May 26)
  • Re: A Nasty Security Bug that affect PGP Virtual Disks & PGP SDA , PGP 8.x & 9.x and Truecrypt. Alexander Klimov (May 27)
  • RE: [security] A Nasty Security Bug that affect PGP Virtual Disks & PGP SDA , PGP 8.x & 9.x and Truecrypt. phugo (May 27)
  • <Possible follow-ups>
  • RE: A Nasty Security Bug that affect PGP Virtual Disks & PGP SDA , PGP 8.x & 9.x and Truecrypt. ennead () truecrypt org (May 26)
  • Re: RE: A Nasty Security Bug that affect PGP Virtual Disks & PGP SDA , PGP 8.x & 9.x and Truecrypt. ahariri (May 27)
  • RE: A Nasty Security Bug that affect PGP Virtual Disks & PGP SDA , PGP 8.x & 9.x and Truecrypt. thesinoda (May 27)
  • Re: Re: A Nasty Security Bug that affect PGP Virtual Disks & PGP SDA , PGP 8.x & 9.x and Truecrypt. visitbipin (May 27)
• sql injection in phpWebSite 0.8.3 help-users (May 25)
• iFdate v1.2 luny (May 25)
• Realty Pro One Property Listing Script luny (May 25)
  • <Possible follow-ups>
  • RE: Realty Pro One Property Listing Script Krpata, Tyler (May 26)
• Bulletin Board Elite-Board v.1.1 luny (May 25)
• [USN-286-1] Dia vulnerabilities Martin Pitt (May 25)
• GuestbookXL 1.3 luny (May 25)
• CMS Mundo V1.0 luny (May 25)
• Pre Shopping Mall v1.0 luny (May 25)
• [KAPDA::#44] - NewsCMSLite Login ByPass by Cookie farhadkey (May 25)
• Pre News Manager v1.0 luny (May 25)
• Drupal <= 4.7 attachment/mod_mime remote code execution rgod (May 25)
• PostgreSQL security releases 8.1.4, 8.0.8, 7.4.13, 7.3.15 PostgreSQL Security (May 25)
• rPSA-2006-0082-1 vixie-cron Justin M. Forbes (May 25)
• iFlance v1.1 luny (May 25)
• Hackernetwork Mail Xss[Search] Vulnerability ajannhwt (May 25)
• Wordpress <=2.0.2 'cache' shell injection rgod (May 25)
  • Re: Wordpress <=2.0.2 'cache' shell injection pokley (May 27)
• Addendum ennead () truecrypt org (May 26)
• TSLSA-2006-0030 - multi Trustix Security Advisor (May 26)
• [SECURITY] [DSA 1076-1] New lynx packages fix denial of service Martin Schulze (May 26)
• [SECURITY] [DSA 1077-1] New lynx-ssl packages fix denial of service Martin Schulze (May 26)
• V-Webmail 1.6.4 Remote File Include beford (May 26)
  • Re: V-Webmail 1.6.4 Remote File Include Ventsislav Genchev (May 30)
• [BuHa-Security] DoS Vulnerability in MS IE 6 SP2 bugtraq (May 26)
  • Re: [BuHa-Security] DoS Vulnerability in MS IE 6 SP2 ad () heapoverflow com (May 26)
• [BuHa-Security] MS06-013: HTML Tag Memory Corruption Vulnerability in MS IE 6 SP2 bugtraq (May 26)
• ASLR now built into Vista David Litchfield (May 26)
  • Re: [Full-disclosure] ASLR now built into Vista c0ntex (May 26)
    • Re[2]: [Full-disclosure] ASLR now built into Vista 3APA3A (May 27)
• [SECURITY] [DSA 1075-1] New awstats packages fix arbitrary command execution Martin Schulze (May 26)
• XSS in Omegasoft's Insel MC Iglo (May 26)
• Docebo LMS 2.05 Remote File Include beford (May 26)
• XSS in Monster Top List | MTL 1.4 V8f3 (May 26)
• Easy-Content Forums 1.0 Multiple SQL/XSS Vulnerabilities ajannhwt (May 26)
• Toasts Forums 1.6.44 in Xss ajannhwt (May 26)
• phpjobboard Authecnical admin byPass alp_eren (May 26)
• qjForum(member.asp) SQL Injection Vulnerability ajannhwt (May 26)
• [MajorSecurity #6]Socketmail <= 2.2.6 - Remote File Include Vulnerability admin (May 26)
• Tamber Forum <= 1.9.13 Multiple SQL Injection Vulnerabilities ajannhwt (May 26)
• my Web Server << v-1.0 Denial of Service Exploit s3rv3r_hack3r (May 26)
  • Re: my Web Server << v-1.0 Denial of Service Exploit str0ke (May 27)
• Multiple XSS Vulnerabilities in Tikiwiki 1.9.x blwood (May 26)
• Plume CMS Remote File Include beford (May 26)
• PHPResidence <= 0.6 XSS zerogue (May 26)
• PHP AGTC-Membership system <= v1.1a XSS zerogue (May 26)
• ByteHoard <= 2.1 multiple vulnerabilities zerogue (May 26)
• Assetman <= 2.4a XSS zerogue (May 26)
• Easy-Content Forums 1.0 Multiple [SQL/XSS] Vulnerabilities ajannhwt (May 26)
• Seditio Cross Site Scripting Vulnerability mail (May 26)
• XSS Vulnerability on www.my6d.com Connection Work System spymeta (May 26)
• [OpenPKG-SA-2006.009] OpenPKG Security Advisory (binutils) OpenPKG (May 26)
• On the Recent PGP and Truecrypt Posting jon (May 26)
  • Re: On the Recent PGP and Truecrypt Posting John Pettitt (May 27)
    • Re: On the Recent PGP and Truecrypt Posting Jon Callas (May 29)
      • Message not available
      • Re: On the Recent PGP and Truecrypt Posting Jon Callas (May 30)
      • Re: On the Recent PGP and Truecrypt Posting Andreas Beck (May 30)
• rPSA-2006-0080-1 postgresql postgresql-server Justin M. Forbes (May 26)
• XSS Vulnerability on Vodafone try_og (May 26)
• iBoutique.MALL - Directory Traversal luny (May 26)
• PHPSimple Choose v0.3 luny (May 27)
• Super Link Exchange Script v1.0 luny (May 27)
• Vacation Retal Script v1.0 luny (May 27)
• MyYearBook.com - XSS luny (May 27)
• Pretty Guestbook v1 luny (May 27)
• Smile Guestbook v1 luny (May 27)
• Morris Guestbook v1 luny (May 27)
• [ MDKSA-2006:092 ] - Updated mpg123 packages fix DoS vulnerability. security (May 27)
• LM hashes in a hot-desking environment feedb4ck (May 27)
  • Re: LM hashes in a hot-desking environment 3APA3A (May 27)
  • Re: LM hashes in a hot-desking environment Ansgar -59cobalt- Wiechers (May 27)
    • Re: LM hashes in a hot-desking environment The Little Prince (May 29)
  • RE: LM hashes in a hot-desking environment Roger A. Grimes (May 27)
• cURL Safe Mode Bypass PHP 4.4.2 and 5.1.4 cxib (May 27)
• rPSA-2006-0084-1 fetchmail Justin M. Forbes (May 27)
• Wavecon Advisory: Open-Xchange <= 0.8.2 defaultuser with /bin/bash and default password Cemil Degirmenci (May 27)
• rPSA-2006-0083-1 enscript Justin M. Forbes (May 27)
• Symantec antivirus software exposes computers Michael Scheidell (May 27)
• InternerExplorer error: ECMAScript interpreter stack overflow sehato (May 27)
• Critical sql injection in saphplesson 2.0 black-cod3 (May 27)
• Xss exploit in Chipmunk guestbook black-cod3 (May 27)
• Multiple Xss exploits in ar-blog v 5.2 black-cod3 (May 27)
• sql injection in PHPcafe.net Tutorial Manager black-cod3 (May 27)
• Speedy ASP Forum(profileupdate.asp) User Pass Change Exploit ajannhwt (May 27)
• [SECURITY] [DSA 1078-1] New tiff packages fix denial of service Martin Schulze (May 27)
• D-Link DSA-3100 Cross-Site Scripting jaime . blasco (May 27)
• Proof of concept that PGP AUTHENTICATION CAN BE BYPASSED WITHOUT PATCHING thesinoda (May 27)
  • Re: Proof of concept that PGP AUTHENTICATION CAN BE BYPASSED WITHOUT PATCHING Andreas Beck (May 29)
• html Guest Gear pieisgdvgd (May 27)
• [SECURITY] [DSA 1079-1] New MySQL 4.0 packages fix several vulnerabilities Martin Schulze (May 29)
• [SECURITY] [DSA 1080-1] New dovecot packages fix directory traversal Steve Kemp (May 29)
• [SECURITY] [DSA 1081-1] New libextractor packages fix arbitrary code execution Martin Schulze (May 29)
• [USN-287-1] Nagios vulnerability Martin Pitt (May 29)
• [USN-288-1] PostgreSQL server/client vulnerabilities Martin Pitt (May 29)
• Buffer overflow in QuickTime 7.0.4? John Richard Moser (May 29)
• multiple file include exploits in EzUpload Pro v2.10 black-cod3 (May 29)
• JAMES 2.2.0 <-- Denial Of Service y3dips (May 29)
• Advisory: MiniNuke v2.x Multiple Remote Vulnerabilities Mustafa Can Bjorn IPEKCI (May 29)
• Advisory: ASPBB <= 0.52 (perform_search.asp) XSS vulnerability Mustafa Can Bjorn IPEKCI (May 29)
• Advisory: tinyBB <= 0.3 Multiple Remote Vulnerabilities. Mustafa Can Bjorn IPEKCI (May 29)
• Advisory: Enigma Haber <= 4.3 Multiple Remote SQL Injection Vulnerabilities Mustafa Can Bjorn IPEKCI (May 29)
• Advisory: F () cile Interactive Web <= 0.8x Multiple Remote Vulnerabilities. Mustafa Can Bjorn IPEKCI (May 29)
• Advisory: Eggblog <= 3.x Multiple Remote Vulnerabilities Mustafa Can Bjorn IPEKCI (May 29)
  • RE: Advisory: Eggblog <= 3.x Multiple Remote Vulnerabilities Egg (May 29)
• Advisory: phpBB 2.x (admin/admin_hacks_list.php) Local Inclusion Vulnerability. Mustafa Can Bjorn IPEKCI (May 29)
• Advisory: phpBB 2.x (Activity MOD Plus) File Inclusion Vulnerability. Mustafa Can Bjorn IPEKCI (May 29)
• Advisory: ASPSitem <= 2.0 Multiple Vulnerabilities. Mustafa Can Bjorn IPEKCI (May 29)
• Advisory: UBBThreads 5.x,6.x Multiple File Inclusion Vulnerabilities. Mustafa Can Bjorn IPEKCI (May 29)
• Advisory: Blend Portal <= 1.2.0 for phpBB 2.x (blend_data/blend_common.php) File Inclusion Vulnerability Mustafa Can Bjorn IPEKCI (May 29)
  • RE: Advisory: Blend Portal <= 1.2.0 for phpBB 2.x(blend_data/blend_common.php) File Inclusion Vulnerability austin best (May 29)
• VARIOMAT(advanced cms tool)SQL injection/XSS CrAzY . CrAcKeR (May 29)
• Xss exploit in Photoalbum B&W v1.3 black-cod3 (May 29)
• [KAPDA::#45] - geeklog multiple vulnerabilities alireza hassani (May 29)
• UBBThreads 5.x,6.x md5 hash disclosure chris (May 29)
• Foing Remote File Include Vulnerability [PHPBB] s3rv3r_hack3r (May 29)
• New SMB and DCERPC features on Impacket released with doc Gerardo Richarte (May 29)
• WikiNi Persistent Cross Site Scripting Vulnerability raphael . huck (May 29)
• [SECURITY] [DSA 1082-1] New Linux kernel 2.4.17 packages fix several vulnerabilities Moritz Muehlenhoff (May 29)
• Multiple Xss exploits in Chipmunk Board black code (May 29)
• RE: Multiple Xss exploits in coolphp magazine black code (May 29)
• multiple Xss exploits in : vCard 2.9 black code (May 29)
• [KAPDA::#46] - Nukedit Unauthorized Admin Add farhadkey (May 29)
• Jiwa Financials - Reporting allows execution of arbitrary reports as SQL user with full permissions. Robert (May 30)
• 4nNukeWare<--V 0.91 SQL Injection exploits CrAzY . CrAcKeR (May 30)
• phpMyDesktop|arcade 1.0 FINAL Code Execution darkgod . xsf (May 30)
• Bratpack Cross Site Scripting Vulnerability CrAzY . CrAcKeR (May 30)
• NorthStudio Cross Site Scripting Vulnerability CrAzY . CrAcKeR (May 30)
• WBB<--v2.3.4"misc.php" SQL injection Vulnerability CrAzY . CrAcKeR (May 30)
• OaBoard 1.0 Remote File inclusion hessamx (May 30)
• Backdoor in RelevantKnowledge adware (What are we fighting for?) 3APA3A (May 30)
• Fire fox dos exploit co296 (May 30)
  • Re: Fire fox dos exploit Josh Zlatin-Amishav (May 31)
  • <Possible follow-ups>
  • Re: Fire fox dos exploit anoni . mouse (Jun 01)
• [ GLSA 200605-16 ] CherryPy: Directory traversal vulnerability Stefan Cornelius (May 30)
• [ MDKSA-2006:093 ] - Updated dia packages fix string format vulnerabilities. security (May 30)
• [ GLSA 200605-17 ] libTIFF: Multiple vulnerabilities Stefan Cornelius (May 30)
• WebCalendar-1.0.3 reading of any files socsam (May 30)
• Open Searchable Image Catalogue: XSS and SQL Injection Vulnerabilities enji (May 30)
• Xss exploit in Chipmunk directory black code (May 30)
• pppBlog <= 0.3.8 administrative credentials/system disclosure rgod (May 31)
• # MHG Security Team --- PHP NUKE All version Remote File Inc. erne (May 31)
• QontentOneCMS v1.0 luny (May 31)
• [SECURITY] [DSA 1083-1] New motor packages fix arbitrary code execution Martin Schulze (May 31)
• toendaCMS 0.7.0 Cross Site Scripting kubasx (May 31)
• file include exploit in Support Cards v1 black code (May 31)
• Secunia Research: Eserv/3 IMAP and HTTP Server Multiple Vulnerabilities Secunia Research (May 31)
• Secunia Research: ZipCentral ZIP File Handling Buffer Overflow Vulnerability Secunia Research (May 31)
• New SecurityFocus mailing list: Focus-Apple Marc Fossi (May 31)
  • Re: New SecurityFocus mailing list: Focus-Apple Marc Fossi (May 31)
• Internet explorer Vulnerbility Mr . Niega (Jun 01)
• [SECURITY] [DSA 1084-1] New typespeed packages fix arbitrary code execution Steve Kemp (Jun 01)
• rPSA-2006-0087-1 kernel Justin M. Forbes (Jun 01)
• SUSE Security Announcement: rug (SUSE-SA:2006:029) Thomas Biege (Jun 01)
• [security bulletin] HPSBUX02122 SSRT061158 rev.1 - HP-UX Mozilla Remote Execution of Arbitrary Code, Denial of Service (DoS) security-alert (Jun 01)

Previous period

Next period