Bugtraq: by subject

"Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?)
- Shawn Fitzgerald (Nov 28 2006)
- David Litchfield (Nov 29 2006)
- David Litchfield (Nov 28 2006)
- Steven M. Christey (Nov 27 2006)
- David Litchfield (Nov 27 2006)
- Tim Newsham (Nov 26 2006)
- Thor (Hammer of God) (Nov 25 2006)
- Steve Friedl (Nov 25 2006)
- Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] (Nov 25 2006)
- Thor (Hammer of God) (Nov 24 2006)
- stopmakingnoise_at_gmail.com (Nov 24 2006)
- Matthew Conover (Nov 21 2006)
- David Litchfield (Nov 22 2006)
*BSD banner INT overflow vulnerability
- admin (Nov 22 2006)
- Bob Beck (Nov 22 2006)
- evilrabbi_at_gmail.com (Nov 22 2006)
- Steve Shockley (Nov 22 2006)
- Gruzicki Wlodek (Nov 22 2006)
20/20 auto gallery [ multiples injection sql ]
- saps.audit_at_gmail.com (Nov 17 2006)
20/20 datashed [ multiples injection sql ]
- saps.audit_at_gmail.com (Nov 17 2006)
20/20 real estate [ multiples injection sql ]
- saps.audit_at_gmail.com (Nov 17 2006)
2nd European Conference on Computer Network Defense (EC2ND)
- Blyth A J C (AT) (Nov 27 2006)
@cid stats v2.3 File Include
- Heiko Wundram (Nov 06 2006)
- mahmood ali (Nov 05 2006)
@lex Guestbook 4.0.1 : Full Path Disclosure & XSS
- mr_kaliman_at_msn.com (Nov 30 2006)
[ GLSA 200611-01 ] Screen: UTF-8 character handling vulnerability
- Matthias Geerdsen (Nov 03 2006)
[ GLSA 200611-02 ] Qt: Integer overflow
- Matthias Geerdsen (Nov 06 2006)
[ GLSA 200611-03 ] NVIDIA binary graphics driver: Privilege escalation vulnerability
- Glynn Clements (Nov 14 2006)
- Nick FitzGerald (Nov 13 2006)
- Raphael Marichez (Nov 13 2006)
- Nick Boyce (Nov 13 2006)
- Raphael Marichez (Nov 07 2006)
[ GLSA 200611-04 ] Bugzilla: Multiple Vulnerabilities
- Matthias Geerdsen (Nov 09 2006)
[ GLSA 200611-05 ] Netkit FTP Server: Privilege escalation
- Raphael Marichez (Nov 10 2006)
[ GLSA 200611-06 ] OpenSSH: Multiple Denial of Service vulnerabilities
- Raphael Marichez (Nov 13 2006)
[ GLSA 200611-07 ] GraphicsMagick: PALM and DCM buffer overflows
- Raphael Marichez (Nov 13 2006)
[ GLSA 200611-08 ] RPM: Buffer overflow
- Raphael Marichez (Nov 13 2006)
[ GLSA 200611-09 ] libpng: Denial of Service
- Sune Kloppenborg Jeppesen (Nov 17 2006)
[ GLSA 200611-10 ] WordPress: Multiple vulnerabilities
- Sune Kloppenborg Jeppesen (Nov 17 2006)
[ GLSA 200611-11 ] TikiWiki: Multiple vulnerabilities
- Chris Gianelloni (Nov 21 2006)
- saps.audit_at_gmail.com (Nov 21 2006)
- Sune Kloppenborg Jeppesen (Nov 20 2006)
[ GLSA 200611-12 ] Ruby: Denial of Service vulnerability
- Sune Kloppenborg Jeppesen (Nov 20 2006)
[ GLSA 200611-13 ] Avahi: "netlink" message vulnerability
- Sune Kloppenborg Jeppesen (Nov 20 2006)
[ GLSA 200611-14 ] TORQUE: Insecure temproary file creation
- Sune Kloppenborg Jeppesen (Nov 20 2006)
[ GLSA 200611-15 ] qmailAdmin: Buffer overflow
- Sune Kloppenborg Jeppesen (Nov 21 2006)
[ GLSA 200611-16 ] Texinfo: Buffer overflow
- Sune Kloppenborg Jeppesen (Nov 21 2006)
[ GLSA 200611-17 ] fvwm: fvwm-menu-directory fvwm command injection
- Matthias Geerdsen (Nov 23 2006)
[ GLSA 200611-18 ] TIN: Multiple buffer overflows
- Sune Kloppenborg Jeppesen (Nov 24 2006)
[ GLSA 200611-19 ] ImageMagick: PALM and DCM buffer overflows
- Sune Kloppenborg Jeppesen (Nov 24 2006)
[ GLSA 200611-20 ] GNU gv: Stack overflow
- Sune Kloppenborg Jeppesen (Nov 24 2006)
[ GLSA 200611-21 ] Kile: Incorrect backup file permission
- Sune Kloppenborg Jeppesen (Nov 26 2006)
[ GLSA 200611-22 ] Ingo H3: Folder name shell command injection
- Sune Kloppenborg Jeppesen (Nov 27 2006)
[ GLSA 200611-23 ] Mono: Insecure temporary file creation
- Raphael Marichez (Nov 28 2006)
[ GLSA 200611-24 ] LHa: Multiple vulnerabilities
- Raphael Marichez (Nov 28 2006)
[ GLSA 200611-25 ] OpenLDAP: Denial of Service vulnerability
- Raphael Marichez (Nov 28 2006)
[ GLSA 200611-26 ] ProFTPD: Remote execution of arbitrary code
- Raphael Marichez (Nov 30 2006)
[ MDKSA-2006:164-1 ] - Updated xorg-x11/XFree86 packages fix integer overflow vulnerabilities
- security_at_mandriva.com (Nov 17 2006)
[ MDKSA-2006:195 ] - Updated wireshark packages fix multiple vulnerabilities
- security_at_mandriva.com (Nov 02 2006)
[ MDKSA-2006:196 ] - Updated php packages to address buffer overflow issue
- security_at_mandriva.com (Nov 02 2006)
[ MDKSA-2006:197 ] - Updated kernel packages fix multiple vulnerabilities and bugs
- security_at_mandriva.com (Nov 03 2006)
[ MDKSA-2006:198 ] - Updated imlib2 packages fix several vulnerabilities
- security_at_mandriva.com (Nov 06 2006)
[ MDKSA-2006:198-1 ] - Updated imlib2 packages fix several vulnerabilities
- security_at_mandriva.com (Nov 07 2006)
[ MDKSA-2006:199 ] - Updated libx11 packages fix file descriptor leak vulnerability
- security_at_mandriva.com (Nov 06 2006)
[ MDKSA-2006:200 ] - Updated rpm packages fix vulnerability
- security_at_mandriva.com (Nov 07 2006)
[ MDKSA-2006:201 ] - Updated pam_ldap packages fix PasswordPolicyReponse coding error
- security_at_mandriva.com (Nov 07 2006)
[ MDKSA-2006:202 ] - Updated wv packages fix vulnerabilities
- security_at_mandriva.com (Nov 07 2006)
[ MDKSA-2006:203 ] - Updated texinfo packages fix vulnerability
- security_at_mandriva.com (Nov 08 2006)
[ MDKSA-2006:204 ] - Updated openssh packages fix vulnerability
- security_at_mandriva.com (Nov 08 2006)
[ MDKSA-2006:205 ] - Updated Firefox packages fix multiple vulnerabilities
- security_at_mandriva.com (Nov 09 2006)
[ MDKSA-2006:206 ] - Updated Thunderbird packages fix multiple vulnerabilities
- security_at_mandriva.com (Nov 09 2006)
[ MDKSA-2006:207 ] - Updated bind packages fixes RSA signature verification vulnerability
- security_at_mandriva.com (Nov 14 2006)
[ MDKSA-2006:208 ] - Updated openldap packages fixes Bind vulnerability
- security_at_mandriva.com (Nov 14 2006)
[ MDKSA-2006:208-1 ] - Updated openldap packages fixes Bind vulnerability
- security_at_mandriva.com (Nov 21 2006)
[ MDKSA-2006:209 ] - Updated libpng packages fix vulnerabilities
- security_at_mandriva.com (Nov 16 2006)
[ MDKSA-2006:210 ] - Updated syslinux packages to fix embedded libpng vulnerabilities
- security_at_mandriva.com (Nov 16 2006)
[ MDKSA-2006:211 ] - Updated pxelinux packages to fix embedded libpng vulnerabilities
- security_at_mandriva.com (Nov 16 2006)
[ MDKSA-2006:212 ] - Updated doxygen packages to fix embedded libpng vulnerabilities
- security_at_mandriva.com (Nov 16 2006)
[ MDKSA-2006:213 ] - Updated chromium packages to fix embedded libpng vulnerabilities
- security_at_mandriva.com (Nov 16 2006)
[ MDKSA-2006:214 ] - Updated gv packages fix buffer overflow vulnerability
- security_at_mandriva.com (Nov 17 2006)
[ MDKSA-2006:215 ] - Updated avahi packages fix netlink vulnerability
- security_at_mandriva.com (Nov 20 2006)
[ MDKSA-2006:216 ] - Updated links packages fix smb vulnerability
- security_at_mandriva.com (Nov 20 2006)
[ MDKSA-2006:217 ] - Updated proftpd packages fix vulnerabilities
- research_at_gleg.net (Nov 21 2006)
- security_at_mandriva.com (Nov 20 2006)
[ MDKSA-2006:217-1 ] - Updated proftpd packages fix vulnerabilities
- security_at_mandriva.com (Nov 30 2006)
[ MDKSA-2006:218 ] - Updated apache-mod_auth_kerb packages fixes DoS vulnerability
- security_at_mandriva.com (Nov 23 2006)
[ MDKSA-2006:219 ] - Updated tar packages fix vulnerability
- security_at_mandriva.com (Nov 28 2006)
[Aria-Security Team] ASP ListPics 5.0 SQL Injection
- Advisory_at_Aria-security.net (Nov 24 2006)
[Aria-Security Team] Evolve shopping cart SQL Injection Vulnerability
- Advisory_at_Aria-security.net (Nov 25 2006)
[Aria-Security Team] FipsSHOP SQL Injection
- Advisory_at_Aria-Security.Net (Nov 25 2006)
[Aria-Security Team] Fixit iDMS Pro Image Gallery SQL Injection
- Advisory_at_Aria-security.net (Nov 24 2006)
[Aria-Security Team] General Shopping Cart SQL Injection Vulnerability
- Advisory_at_Aria-security.net (Nov 25 2006)
[Aria-Security Team] iNews News Manager SQL Injection
- Advisory_at_Aria-security.net (Nov 24 2006)
[Aria-Security Team] MidiCart ASP Plus Shopping Cart SQL Injection
- Advisory_at_Aria-security.net (Nov 24 2006)
[Aria-Security Team] MidiCart ASP Shopping Cart SQL Injection
- Advisory_at_Aria-security.net (Nov 24 2006)
[Aria-Security Team] Ultimate Survey Pro SQL Injection
- Advisory_at_Aria-security.net (Nov 24 2006)
[Aria-Security's Research Team] ActiveNews Manager SQL Injection Vulnerabilite
- gmdarkfig_at_gmail.com (Nov 18 2006)
- Advisory_at_Aria-security.net (Nov 17 2006)
[Aria-Security's Research Team] Texas Rank'em SQL Injection Vulnerabilite
- Advisory_at_Aria-security.net (Nov 17 2006)
[Aria-Security] CPanel Network Tools Cross Site Scripting [Advisory]
- Advisory_at_Aria-security.net (Nov 16 2006)
[ECHO_ADV_53$2006] QnECMS <= 2.5.6 (adminfolderpath) Remote File Inclusion Vulnerability
- jim_at_qnecms.co.uk (Nov 21 2006)
[ECHO_ADV_57_2006]Soholaunch Pro <=4.9 r36 Multiple Remote File Inclusion Vulnerability
- erdc_at_echo.or.id (Nov 05 2006)
[ECHO_ADV_58_2006]Cyberfolio <=2.0 RC1 $av Remote File Inclusion Vulnerability
- erdc_at_echo.or.id (Nov 05 2006)
[ECHO_ADV_59_2006]Agora 1.4 RC1 "$_SESSION[PATH_COMPOSANT]" Remote File Inclusion Vulnerability
- erdc_at_echo.or.id (Nov 05 2006)
[ECHO_ADV_60_2006] OpenEMR <=2.8.1 Multiple Remote File Inclusion Vulnerability
- erdc_at_echo.or.id (Nov 05 2006)
[ECHO_ADV_61_2006] a-ConMan <= v3.2beta Remote File Inclusion
- erdc_at_echo.or.id (Nov 22 2006)
[FLSA-2006:211760] Updated gzip package fixes security issues
- David Eisenstein (Nov 12 2006)
[Full-disclosure] New report on Teredo security
- Jeroen Massar (Nov 28 2006)
[Full-disclosure] ZDI-06-040: WinZip FileView ActiveX Control Unsafe Method Exposure Vulnerability
- Micheal Turner (Nov 14 2006)
[Full-disclosure] ZDI-06-043: Novell Netware Client Print Provider Buffer Overflow Vulnerability
- Dude VanWinkle (Nov 30 2006)
[Fwd: DMA[2006-1031a] - 'Intego VirusBarrier X4 definition bypass exploit']
- K F (lists) (Nov 14 2006)
[Fwd: OpenBase SQL multiple vulnerabilities Part Deux]
- K F (lists) (Nov 14 2006)
[KAPDA]::Security analysis of cutenews 1.4.5
- alireza hassani (Nov 21 2006)
[MajorSecurity Advisory #30]admin.tool 3 CMS - Multiple Cross Site Scripting Issues
- admin_at_majorsecurity.de (Nov 04 2006)
[MajorSecurity Advisory #33]ShopSystems - SQL Injection Issue
- admin_at_majorsecurity.de (Nov 11 2006)
[MajorSecurity Advisory #34]Plesk 8 - Multiple Cross Site Scripting Issues
- admin_at_majorsecurity.de (Nov 15 2006)
[MajorSecurity Advisory #35]Travelsized CMS - Multiple Cross Site Scripting Issues
- admin_at_majorsecurity.de (Nov 18 2006)
[MajorSecurity Advisory #36]dev4u CMS - Multiple SQL Injection and Cross Site Scripting Issues
- admin_at_majorsecurity.de (Nov 18 2006)
[OpenPKG-SA-2006.028] OpenPKG Security Advisory (php)
- OpenPKG (Nov 03 2006)
[OpenPKG-SA-2006.029] OpenPKG Security Advisory (bind)
- OpenPKG (Nov 04 2006)
[OpenPKG-SA-2006.030] OpenPKG Security Advisory (ruby)
- OpenPKG (Nov 04 2006)
[OpenPKG-SA-2006.032] OpenPKG Security Advisory (openssh)
- OpenPKG (Nov 08 2006)
[OpenPKG-SA-2006.033] OpenPKG Security Advisory (openldap)
- OpenPKG (Nov 10 2006)
[OpenPKG-SA-2006.034] OpenPKG Security Advisory (texinfo)
- OpenPKG (Nov 15 2006)
[OpenPKG-SA-2006.035] OpenPKG Security Advisory (proftpd)
- OpenPKG (Nov 16 2006)
[OpenPKG-SA-2006.036] OpenPKG Security Advisory (png)
- OpenPKG (Nov 17 2006)
[Reversemode advisory] Computer Associates HIPS Drivers - multiple local privilege escalation vulnerabilities.
- Williams, James K (Nov 21 2006)
- Reversemode (Nov 16 2006)
[security bulletin] HPSBMA02088 SSRT051026 rev. 2 - HP-UX running WBEM Services Denial of Service (DoS)
- security-alert_at_hp.com (Nov 17 2006)
[security bulletin] HPSBMA02159 SSRT061238 rev.1 - HP System Management Homepage (SMH), Remote Bypassing of Security Features or Cross Site Scripting or Denial of Service (DoS)
- security-alert_at_hp.com (Nov 02 2006)
[security bulletin] HPSBMA02167 SSRT061262 rev.2 - HP OpenView Client Configuration Manager (CCM), Remote Unauthorized Arbitrary Code Execution or Denial of Service (DoS)
- security-alert_at_hp.com (Nov 09 2006)
[security bulletin] HPSBUX02091 SSRT061099 rev.2 - HP-UX Local Increased Privilege
- security-alert_at_hp.com (Nov 01 2006)
[security bulletin] HPSBUX02153 SSRT061181 rev.2 - HP-UX Running Firefox, Remote Unauthorized Access or Elevation of Privileges or Denial of Service (DoS)
- security-alert_at_hp.com (Nov 30 2006)
[security bulletin] HPSBUX02164 SSRT061265 rev.1 - HP-UX VirtualVault Running Apache 1.3.X Remote Denial of Service (DoS) and Arbitrary Code Execution
- security-alert_at_hp.com (Nov 01 2006)
[security bulletin] HPSBUX02165 SSRT061266 rev.1 - HP-UX VirtualVault Remote Unauthorized Access
- security-alert_at_hp.com (Nov 01 2006)
[security bulletin] HPSBUX02172 SSRT061269 rev.1 - HP-UX VirtualVault running Apache Remote Execution of Arbitrary Code, Denial of Service (DoS), and Unauthorized Access
- security-alert_at_hp.com (Nov 01 2006)
[SECURITY] [DSA 1203-1] New libpam-ldap packages fix access control bypass
- Moritz Muehlenhoff (Nov 02 2006)
[SECURITY] [DSA 1204-1] New ingo1 packages fix arbitrary shell command execution
- Moritz Muehlenhoff (Nov 02 2006)
[SECURITY] [DSA 1206-1] New php4 packages fix several vulnerabilities
- Moritz Muehlenhoff (Nov 06 2006)
[SECURITY] [DSA 1207-1] New phpmyadmin packages fix several vulnerabilities
- Moritz Muehlenhoff (Nov 09 2006)
[SECURITY] [DSA 1207-2] New phpmyadmin packages fix regression
- Moritz Muehlenhoff (Nov 19 2006)
[SECURITY] [DSA 1208-1] New bugzilla packages fix several vulnerabilities
- Moritz Muehlenhoff (Nov 11 2006)
[SECURITY] [DSA 1209-1] New trac packages fix cross-site request forgery
- Moritz Muehlenhoff (Nov 12 2006)
[SECURITY] [DSA 1209-2] New trac packages fix cross-site request forgery
- Moritz Muehlenhoff (Nov 13 2006)
[SECURITY] [DSA 1210-1] New Mozilla Firefox packages fix several vulnerabilities
- Martin Schulze (Nov 14 2006)
[SECURITY] [DSA 1211-1] New pdns packages fix arbitrary code execution
- Moritz Muehlenhoff (Nov 14 2006)
[SECURITY] [DSA 1212-1] New openssh packages fix denial of service
- Noah Meyerhans (Nov 15 2006)
[SECURITY] [DSA 1213-1] New imagemagick packages fix several vulnerabilities
- Moritz Muehlenhoff (Nov 19 2006)
[SECURITY] [DSA 1214-1] New gv packages fix arbitrary code execution
- Moritz Muehlenhoff (Nov 20 2006)
[SECURITY] [DSA 1215-1] New xine-lib packages fix execution of arbitrary code
- Moritz Muehlenhoff (Nov 20 2006)
[SECURITY] [DSA 1216-1] New flexbackup packages fix denial of service
- Moritz Muehlenhoff (Nov 20 2006)
[SECURITY] [DSA 1217-1] New linux-ftpd packages fix access control bypass
- Moritz Muehlenhoff (Nov 20 2006)
[SECURITY] [DSA 1218-1] New proftpd packages fix denial of service
- Moritz Muehlenhoff (Nov 21 2006)
[SECURITY] [DSA 1219-1] New texinfo packages fix multiple vulnerabilities
- Noah Meyerhans (Nov 27 2006)
[SECURITY] [DSA 1220-1] New pstotext packages fix arbitrary shell command execution
- Moritz Muehlenhoff (Nov 26 2006)
[SECURITY] [DSA 1221-1] New libgsf packages fix arbitrary code execution
- Martin Schulze (Nov 30 2006)
[SECURITY] [DSA 1222-1] New proftpd packages fix several vulnerabilities
- Moritz Muehlenhoff (Nov 30 2006)
[SECURITY] [DSA-1205-1] New thttpd packages fix insecure temporary file creation
- Steve Kemp (Nov 03 2006)
[USN-370-1] screen vulnerability
- Kees Cook (Nov 01 2006)
[USN-371-1] Ruby vulnerability
- Kees Cook (Nov 01 2006)
[USN-373-1] mutt vulnerabilities
- Kees Cook (Nov 01 2006)
[USN-374-1] wvWare vulnerability
- Kees Cook (Nov 01 2006)
[USN-375-1] PHP vulnerability
- Martin Pitt (Nov 02 2006)
[USN-376-1] imlib2 vulnerabilities
- Kees Cook (Nov 03 2006)
[USN-376-2] imlib2 regression fix
- Kees Cook (Nov 06 2006)
[USN-377-1] NVIDIA vulnerability
- Kees Cook (Nov 03 2006)
[USN-378-1] RPM vulnerability
- Kees Cook (Nov 03 2006)
[USN-379-1] texinfo vulnerability
- Kees Cook (Nov 09 2006)
[USN-381-1] Firefox vulnerabilities
- Kees Cook (Nov 21 2006)
[USN-382-1] Thunderbird vulnerabilities
- Kees Cook (Nov 21 2006)
[USN-383-1] libpng vulnerability
- Kees Cook (Nov 17 2006)
[USN-384-1] OpenLDAP vulnerability
- Kees Cook (Nov 20 2006)
[USN-385-1] tar vulnerability
- Kees Cook (Nov 27 2006)
[USN-386-1] ImageMagick vulnerability
- Kees Cook (Nov 27 2006)
[USN-387-1] Dovecot vulnerability
- Kees Cook (Nov 28 2006)
[USN-388-1] KOffice vulnerability
- Kees Cook (Nov 29 2006)
[USN-389-1] GnuPG vulnerability
- Kees Cook (Nov 29 2006)
[USN-390-1] evince vulnerability
- Kees Cook (Nov 30 2006)
[WEB SECURITY] The state of JavaScript Hacking
- bugtraq_at_cgisecurity.net (Nov 27 2006)
[x0n3-h4ck]Drake CMS v 0.2 XSS exploit
- corrado.liotta_at_alice.it (Nov 10 2006)
[x0n3-h4ck]Essentia Web Server v.2.15 Buffer Overflow
- Noam Rathaus (Nov 12 2006)
- corrado.liotta_at_alice.it (Nov 10 2006)
A+ Store E-Commerce[ injection sql & xss (post) ]
- saps.audit_at_gmail.com (Nov 14 2006)
A-Cart 2.0 SQL Injection
- Advisory_at_Aria-security.net (Nov 17 2006)
A-Cart PRO SQL Injection
- gmdarkfig_at_gmail.com (Nov 18 2006)
- Advisory_at_Aria-security.net (Nov 17 2006)
A-Cart pro[ injection sql (post&get)]
- saps.audit_at_gmail.com (Nov 14 2006)
Abarcar Realty Portal [injection sql]
- saps.audit_at_gmail.com (Nov 08 2006)
aBitWhizzy [local file include]
- saps.audit_at_gmail.com (Nov 21 2006)
Active News Manager [ injection sql (post&get)]
- saps.audit_at_gmail.com (Nov 14 2006)
Active PHP Bookmarks (apb.php) Remote file include
- Mefisto_at_Hackermail.Com (Nov 24 2006)
- philip anselmo (Nov 23 2006)
Advanced Guestbook 2.3.1 (Admin.php) Remote File Include
- simo64_at_morx.org (Nov 06 2006)
- broken-proxy_at_Linuxmail.org (Nov 03 2006)
Advisory 12/2006: phpMyAdmin - error.php XSS Vulnerability
- Stefan Esser (Nov 02 2006)
Advisory 13/2006: PHP HTML Entity Encoder Heap Overflow Vulnerability
- Stefan Esser (Nov 02 2006)
Advisory 14/2006: Dotdeb PHP Email Header Injection Vulnerability
- Marcello Barnaba (Nov 14 2006)
- Stefan Esser (Nov 14 2006)
Advisory: LDU <= 8.x Remote SQL Injection Vulnerability.
- Mustafa Can Bjorn IPEKCI (Nov 21 2006)
Advisory: Seditio <= 1.10 Remote SQL Injection Vulnerability.
- Mustafa Can Bjorn IPEKCI (Nov 21 2006)
AIDE problem handling symlinks
- fryxar fryxar (Nov 27 2006)
AIOCP <=1.3.007 multiples vulnerabilities [sql , remote file include , xss]
- saps.audit_at_gmail.com (Nov 05 2006)
Airmagnet management interfaces multiple vulnerabilities
- ckuan_at_airmagnet.com (Nov 17 2006)
Antwort: Joomla 1.0.11 Remote File Include
- srunschke_at_abit.de (Nov 08 2006)
Apple Safari "match" Buffer Overflow Vulnerability
- J. Oquendo (Nov 14 2006)
- jbh_cg_at_yahoo.fr (Nov 13 2006)
Ariadne <= 2.4.1 Multiple Remote File Include Vulnerabilities(New)
- ajannhwt_at_hotmail.com (Nov 06 2006)
Article Script v1.*and v1.6.3 Sql injection
- liz0_at_bsdmail.org (Nov 05 2006)
ASP Cart [multiples injection sql (post & get)]
- saps.audit_at_gmail.com (Nov 14 2006)
Asp Scripter Products (cpLogin.asp) Remote SQL ByPass Injection Vulnerability
- ajannhwt_at_hotmail.com (Nov 12 2006)
ASPintranet SQL Injection
- Advisory_at_Aria-security.net (Nov 14 2006)
- Advisory_at_Aria-security.net (Nov 13 2006)
Aspmforum [ multiples injection sql (get&post)]
- saps.audit_at_gmail.com (Nov 15 2006)
ASPNuke <= 0.80 (register.asp) Remote SQL Injection Vulnerability
- ajannhwt_at_hotmail.com (Nov 19 2006)
AspPired2 Poll <= 1.0 (MoreInfo.asp) Remote SQL Injection Exploit
- ajannhwt_at_hotmail.com (Nov 11 2006)
ASPPortal <= 4.0.0 (default1.asp) Remote SQL Injection Exploit
- ajannhwt_at_hotmail.com (Nov 12 2006)
Asterisk Local and Remote Denial of Service vulnerability
- sil_at_infiltrated.net (Nov 01 2006)
AttackAPI 2.0 alpha
- pdp (architect) (Nov 25 2006)
b2evolution Remote File inclusion Vulnerability
- tarkus_at_tiifp.org (Nov 28 2006)
b2evolution XSS Vulnerabilities
- tarkus_at_tiifp.org (Nov 28 2006)
BaalAsp forum [login bypass ,injections sql(post), xss(post)]
- saps.audit_at_gmail.com (Nov 15 2006)
Big Flaw in Firefox 2: Password Manager Bug Exposes Passwords
- 3APA3A (Nov 23 2006)
- fash1on_at_gmail.com (Nov 22 2006)
BirdBlog => v1.4.0 Cross Site Scripting
- the_3dit0r_at_yahoo.com (Nov 19 2006)
bitweaver <=1.3.1 [injection sql (post) & xss (post)]
- saps.audit_at_gmail.com (Nov 09 2006)
BLOG:CMS <= 4.1.3 XSS
- katatafish_at_hush.com (Nov 18 2006)
blogcms => 4.0.0 Remote File Include
- Stefano Zanero (Nov 17 2006)
- the_3dit0r_at_yahoo.com (Nov 16 2006)
Blogme v3 [admin login bypass & xss (post)]
- saps.audit_at_gmail.com (Nov 14 2006)
BlogTorrent-preview => 0.92 Cross Site Scripting
- the_3dit0r_at_yahoo.com (Nov 16 2006)
Bloo => 1.00 Cross Site Scripting
- the_3dit0r_at_yahoo.com (Nov 16 2006)
Bloo => 1.00 Remote File Include Vulnerability
- the_3dit0r_at_yahoo.com (Nov 16 2006)
BPG Content Management System SQL Injection
- Advisory_at_Aria-security.net (Nov 13 2006)
Cahier de texte V2.0 SQL Code Execution Exploit
- gmdarkfig_at_gmail.com (Nov 24 2006)
Call for papers: ARES 2007 submission deadline approaches in 2 weeks: 19-11-2006
- Manh Tho (Nov 07 2006)
CandyPress Store[ multiples injection sql ]
- saps.audit_at_gmail.com (Nov 14 2006)
Car Site Manager [injection sql & xss (get)]
- saps.audit_at_gmail.com (Nov 14 2006)
CFP - VII National Computer and Information Security Conference
- Jeimy Cano (Nov 23 2006)
Challenges faced by automated web application security assessment tools
- bugtraq_at_cgisecurity.net (Nov 13 2006)
Chetcpasswd 2.x: multiple vulnerabilities
- riclem_at_yahoo.com (Nov 13 2006)
Cisco Security Advisory: Cisco Security Agent Management Center LDAP Administrator Authentication Bypass
- Cisco Systems Product Security Incident Response Team (Nov 01 2006)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Secure Desktop
- Cisco Systems Product Security Incident Response Team (Nov 08 2006)
Clarifying integer overflows vs. signedness errors
- Pavel Kankovsky (Nov 25 2006)
- Thiago Zaninotti (Nov 21 2006)
- Steven M. Christey (Nov 21 2006)
Classified System [injection sql]
- saps.audit_at_gmail.com (Nov 19 2006)
Clickblog Sql Injection
- Advisory_at_Aria-Security.Net (Nov 26 2006)
ClickContact SQL Injection
- Advisory_at_Aria-Security.Net (Nov 26 2006)
ClickGallery Sql Injection
- Advisory_at_Aria-Security.Net (Nov 26 2006)
Comdev One Admin Pro.v4.1 ( path[skin] ) Remote File include
- AG- Spider (Nov 15 2006)
CONFidence 2007 CFP
- andrzej.targosz_at_proidea.org.pl (Nov 22 2006)
ContentNow CMS 1.39 Sql Injection + Path Disclosure Vulnerabilities
- revenge (Nov 21 2006)
contentserv 4.x
- capt.nem0_at_gmx.de (Nov 30 2006)
CPanel 11 Multiple Cross-Site Scription
- Advisory_at_Aria-security.net (Nov 24 2006)
CPanel Multiple Cross Site Scription
- Advisory_at_Aria-security.net (Nov 12 2006)
Cracking String Encryption in Java Obfuscated Bytecode
- Jeremy Epstein (Nov 27 2006)
- John GALLET (Nov 24 2006)
- Jim Manico (Nov 23 2006)
- subere_at_uncon.org (Nov 23 2006)
creadirectory [injection sql & xss]
- saps.audit_at_gmail.com (Nov 21 2006)
Cross site scripting & fullpath disclosure
- saudi_at_hotmail.fr (Nov 23 2006)
Cross Site Scripting (XSS) Vulnerability in IBM WebSphere Application Server
- ProCheckUp Research (Nov 06 2006)
Cross Site Scripting (XSS) Vulnerability in Netquery by "VIRtech"
- rvirtue_at_virtech.org (Nov 11 2006)
- LegendaryZion (Nov 01 2006)
Cursor snarfing - a new class of vulnerability and attack in Oracle
- David Litchfield (Nov 27 2006)
CuteNews v1.4.5 (search.php) Remote file include vulnerability
- raven (Nov 28 2006)
- Francesco Laurita (Nov 27 2006)
- philip anselmo (Nov 26 2006)
CVE-2006-5815: remote code execution in ProFTPD
- John Morrissey (Nov 27 2006)
Dating Site [ login bypass & xss]
- saps.audit_at_gmail.com (Nov 17 2006)
dev_wms => 1.5 Remote File Include Vulnerabilities
- Stefano Zanero (Nov 17 2006)
- the_3dit0r_at_yahoo.com (Nov 16 2006)
dicshunary 0.1 alpha Remote File Inclusion Exploit
- the_3dit0r_at_yahoo.com (Nov 20 2006)
DigiOz Guestbook version 1.7 Path Disclosure Vulnerability in list.php
- Jesper Jurcenoks (Nov 06 2006)
- jesper.jurcenoks_at_netvigilance.com (Nov 07 2006)
Digipass Go3 Token Dumper (at least for 2006)
- fcollyer_at_gmail.com (Nov 25 2006)
- Hugo van der Kooij (Nov 24 2006)
- fcollyer_at_gmail.com (Nov 11 2006)
Digital Armaments November-Decemberr Hacking Challenge: KERNEL
- info_at_digitalarmaments.com (Nov 19 2006)
Digital Armaments Security Advisory 10.07.2006: Flexwath Authorization Bypassing and XSS Vulnerability
- sales_at_flexwatch.com (Nov 03 2006)
DirectAdmin Multiple Cross Site Scription
- Advisory_at_Aria-security.net (Nov 12 2006)
discloser => 0.0.4 Remote File Include Vulnerabilities
- the_3dit0r_at_yahoo.com (Nov 16 2006)
discloser => 0.0.4 Remote File Include Vulnerability Exploit
- the_3dit0r_at_yahoo.com (Nov 16 2006)
DodosMail <= 2.0.1(dodosmail.php) Remote File Inclusion Exploit
- the_3dit0r_at_yahoo.com (Nov 20 2006)
DoS in Microsoft Windows Live Messenger <= 8.0
- astralbabz_at_bluebottle.com (Nov 25 2006)
- dragonjar_at_gmail.com (Nov 24 2006)
Dovecot IMAP/POP3 server: Off-by-one buffer overflow
- Timo Sirainen (Nov 18 2006)
Dragon calendar [ login bypass & injection sql ]
- saps.audit_at_gmail.com (Nov 15 2006)
DragonFlyBSD all versions FireWire IOCTL kernel integer overflow information disclousure
- Rodrigo Rubira Branco (BSDaemon) (Nov 15 2006)
Drone Armies C&C Report - 17 Nov 2006
- c2report_at_isotf.org (Nov 17 2006)
E-Calendar Pro 3.0 [ login bypass & injection sql (post)]
- saps.audit_at_gmail.com (Nov 15 2006)
E-commerce Kit 1 PayPal Edition [ injection sql ]
- saps.audit_at_gmail.com (Nov 14 2006)
eClassifieds [injection sql]
- saps.audit_at_gmail.com (Nov 19 2006)
ECommerce Store Shop Builder
- Advisory_at_Aria-security.net (Nov 13 2006)
Educational write-up by Amit Klein: "A Refreshing Look at Redirection"
- Amit Klein (Nov 02 2006)
EEYE: Workstation Service NetpManageIPCConnect Buffer Overflow
- security-list_at_hacktrack.com (Nov 18 2006)
- eEye Advisories (Nov 14 2006)
eggblog=> 3.1.0 Cross Site Scripting
- the_3dit0r_at_yahoo.com (Nov 16 2006)
ehomes [multiples injections sql]
- saps.audit_at_gmail.com (Nov 19 2006)
ELOG Web Logbook Remote Denial of Service Vulnerability
- OS2A BTO (Nov 12 2006)
encapscms 0.3.6 - Remote File Include by Firewall
- firewall1954_at_hotmail.com (Nov 10 2006)
Engine Manager SQL Injection
- Advisory_at_Aria-security.net (Nov 13 2006)
enomphp => 4.0 Remote Traversal Directory
- the_3dit0r_at_yahoo.com (Nov 19 2006)
eShopping Cart [injection sql]
- saps.audit_at_gmail.com (Nov 14 2006)
eShopping SQL Injection
- Advisory_at_Aria-security.net (Nov 13 2006)
Estate Agent Manager <= v1.3 (default.asp) Remote Login ByPass SQL Injection Vulnerability
- ajannhwt_at_hotmail.com (Nov 12 2006)
Etomite CMS 0.6.1.2 Multiple Vulnerabilities ( Sql Injection + Local file inclusion )
- dean_at_etomite.org (Nov 17 2006)
- revenge (Nov 16 2006)
EUSecWest/London CFP extended to Nov. 7
- Dragos Ruiu (Nov 02 2006)
evince buffer overflow exploit (gv)
- kspecial (Nov 27 2006)
Evolve Merchant[ injection sql ]
- saps.audit_at_gmail.com (Nov 14 2006)
Exophpdesk V1.2 - Remote File Include
- firewall1954_at_hotmail.com (Nov 10 2006)
feedsplitter considered harmful
- wmodes_at_ucsc.edu (Nov 13 2006)
Firefox 1.5.0.7 Exploit
- OOZIE (Nov 02 2006)
- Lubomir Kundrak (Nov 06 2006)
- Martin Pitt (Nov 02 2006)
- Bram Dumolin (Nov 02 2006)
- Robert McGrew (Nov 02 2006)
- koenig_at_d-e-k-a-d-e-n-t.de (Nov 02 2006)
Free tool for pattern identification (for researchers)
- Gary Golomb (Nov 25 2006)
FreeBSD all versions FireWire IOCTL kernel integer overflow information disclousure
- Rogier Mulhuijzen (Nov 20 2006)
- Lucas Holt (Nov 16 2006)
- Rodrigo Rubira Branco (BSDaemon) (Nov 15 2006)
FreeBSD Security Advisory FreeBSD-SA-06:24.libarchive
- FreeBSD Security Advisories (Nov 08 2006)
FreeWebshop <=2.2.2 [local file include & xss]
- saps.audit_at_gmail.com (Nov 08 2006)
FunkyASP Glossary v1.0 [injection sql]
- saps.audit_at_gmail.com (Nov 14 2006)
gNews Publisher SQL Injection Vulnerabilites
- Advisory_at_aria-security.net (Nov 19 2006)
GNU gv Stack Overflow Vulnerability
- Noam Rathaus (Nov 12 2006)
- Renaud Lifchitz (Nov 09 2006)
GnuPG 1.4 and 2.0 buffer overflow
- Werner Koch (Nov 27 2006)
GnuPG 1.4 and 2.0 buffer overflow)
- Solar Designer (Nov 29 2006)
GPhotos 1.5 Multiple vulnerabilities
- packet_at_packetstormsecurity.org (Nov 20 2006)
- tux025_at_gmail.com (Nov 18 2006)
GreenBeast CMS <= 1.3 PHP Arbitrary File Upload Vulnerability
- skulmatic_at_gmail.com (Nov 07 2006)
Helm Cross Site Scripting
- Advisory_at_Aria-security.net (Nov 15 2006)
Helm Cross-Site Scripting (XSS)
- Advisory_at_Aria-security.net (Nov 14 2006)
Hot Links download backup authorized vulnerabilities
- hack2prison_at_yahoo.com (Nov 14 2006)
Hot Links download backup authorized vulnerabilities (re-post with some edit)
- hack2prison_at_yahoo.com (Nov 14 2006)
Hotmail and Windows Live Mail XSS Vulnerabilities
- HASEGAWA Yosuke (Nov 07 2006)
- applesoup_at_gmail.com (Nov 03 2006)
how to trick most of cms avatar upload filter [exemple for : RunCms (PoC)]
- Paul Laudanski (Nov 03 2006)
- Richard Stanway (Nov 02 2006)
- Taneli Lepp� (Nov 02 2006)
- Taneli Lepp� (Nov 02 2006)
- securfrog_at_gmail.com (Nov 01 2006)
hpecs shopping cart[login bypass & injection sql (post)]
- saps.audit_at_gmail.com (Nov 14 2006)
i-Gallery 3.4 Cross Site Scripting
- Advisory_at_Aria-security.net (Nov 15 2006)
iDefense Security Advisory 10.27.06: Novell eDirectory NMAS BerDecodeLoginDataRequeset DoS Vulnerability
- iDefense Labs (Oct 31 2006)
iDefense Security Advisory 10.31.06: Novell iManager Tomcat DoS Vulnerability
- iDefense Labs (Oct 31 2006)
iDefense Security Advisory 10.31.06: Sophos Anti-Virus Petite File Denial of Service Vulnerability
- iDefense Labs (Oct 31 2006)
iDefense Security Advisory 11.08.06: Cisco Secure Desktop Privilege Escalation Vulnerability
- iDefense Labs (Nov 08 2006)
iDefense Security Advisory 11.08.06: IBM Lotus Domino 7 tunekrnl Multiple Vulnerabilities
- iDefense Labs Security Advisories (Nov 08 2006)
iDefense Security Advisory 11.09.06: Citrix Presentation Server 4.0 IMA Service Invalid Name Length DoS Vulnerability
- iDefense Labs (Nov 09 2006)
iDefense Security Advisory 11.26.06: GNU Radius Format String Vulnerability
- iDefense Labs (Nov 26 2006)
iDefense Security Advisory 11.26.06: Qbik WinGate Compressed Name Pointer Denial of Service Vulnerability
- iDefense Labs (Nov 26 2006)
iDefense Security Advisory 11.29.06: Horde Kronolith Arbitrary Local File Inclusion Vulnerability
- iDefense Labs (Nov 29 2006)
iDefense Security Advisory 11.30.06: Multiple Vendor libgsf Heap Overflow Vulnerability
- iDefense Labs (Nov 30 2006)
IE7 website security certificate discrediting exploit
- inge_eivind.henriksen_at_chello.no (Nov 07 2006)
- inge_eivind.henriksen_at_chello.no (Nov 03 2006)
IF-CMS multiples XSS vunerabilities
- saps.audit_at_gmail.com (Nov 04 2006)
igital Armaments November-Decemberr Hacking Challenge: KERNEL Remote
- info_at_digitalarmaments.com (Nov 16 2006)
Image gallery with Access Database SQL Injection
- Advisory_at_Aria-security.net (Nov 15 2006)
Immediacy .NET CMS possibly vulnerable to Cross Site Scripting through a malformed cookie
- ProCheckUp Research (Nov 08 2006)
infinicart [ multiples injection sql & xss (post) ]
- saps.audit_at_gmail.com (Nov 12 2006)
Infinitytechs Restaurants CM
- saps.audit_at_gmail.com (Nov 17 2006)
Internet Explorer 7 - Still Spyware Writers' Heaven
- Roger A. Grimes (Nov 05 2006)
- Eliah Kagan (Nov 04 2006)
- Thierry Zoller (Nov 04 2006)
- Eliah Kagan (Nov 03 2006)
- Roger A. Grimes (Nov 02 2006)
- avivra (Nov 01 2006)
Inventory Manager [injection sql & xss (get)]
- saps.audit_at_gmail.com (Nov 14 2006)
Invision Community Blog Mod 1.2.4 .PHP SQL Injection Vulnerability
- infection_at_mail.kz (Nov 30 2006)
iodine client 0.3.2 buffer overflow
- poplix_at_papuasia.org (Nov 02 2006)
iPrimal Forums (index.php) Remote File Include Exploit
- the_3dit0r_at_yahoo.com (Nov 20 2006)
Ixprim CMS 1.2 Remote File Include Vulnerability
- vitux.manis_at_gmail.com (Nov 19 2006)
JiRos Links Manager[injection sql & xss permanent]
- saps.audit_at_gmail.com (Nov 21 2006)
Joomla 1.0.11 Remote File Include
- root_at_arab4services.com (Nov 06 2006)
Kerio WebSTAR local privilege escalation
- K F (lists) (Nov 16 2006)
klf-realty [injection sql]
- saps.audit_at_gmail.com (Nov 19 2006)
knowledgeBuilder v.2.2.php.NuLL-WDYL=> Remote File Include Vulnerability
- h4ck3riran_at_yahoo.com (Nov 07 2006)
Lack of environment sanitization in the FreeBSD, OpenBSD, NetBSD dynamic loaders.
- Casper.Dik_at_Sun.COM (Nov 23 2006)
- In Cognito (Nov 21 2006)
- In Cognito (Nov 22 2006)
LandShop Real Estate [multiple injection sql & xss]
- saps.audit_at_gmail.com (Nov 09 2006)
LDU <= 8.x (polls.php) Remote SQL Injection Vulnerability
- ajannhwt_at_hotmail.com (Nov 30 2006)
LifeType version 1.1.2 Multiple Path Disclosure Vulnerabilities
- jesper.jurcenoks_at_netvigilance.com (Nov 30 2006)
Link Exchange Lite [injection sql]
- saps.audit_at_gmail.com (Nov 21 2006)
Links smbclient command execution
- Teemu Salmela (Nov 14 2006)
linksys wrt54g v5 authentication bypass fixed
- Ginsu Rabbit (Nov 17 2006)
Lotus Notes pre-login User.ID key leak
- Andrew Christensen (Nov 08 2007)
LoudMouth => 2.4 Remote File Include Vulnerabilities
- the_3dit0r_at_yahoo.com (Nov 19 2006)
LS-20061102 - Business Objects Crystal Reports Stack Overflow Vulnerability
- advisories_at_lssec.com (Nov 23 2006)
LS-20061113 - CA BrightStor ARCserve Backup Remote Buffer Overflow Vulnerability
- Williams, James K (Nov 21 2006)
- advisories_at_lssec.com (Nov 21 2006)
ltwCalendar => 4.2.1 Remote File Include Vulnerabilities
- the_3dit0r_at_yahoo.com (Nov 19 2006)
Mail Drives Security Considerations
- darkz.gsa_at_gmail.com (Nov 03 2006)
MajorSecurity Advisory #31]Xenis.creator CMS - Multiple Cross Site Scripting and SQL Injection Issues
- saps.audit_at_gmail.com (Nov 04 2006)
- admin_at_majorsecurity.de (Nov 04 2006)
MajorSecurity Advisory #32]phpComasy CMS - Multiple Cross Site Scripting Issues
- admin_at_majorsecurity.de (Nov 06 2006)
mAlbum v0.3 local file inclusion
- tux025_at_gmail.com (Nov 25 2006)
mAlbum v0.3 Multiple vulnerabilitizzz
- tux025_at_gmail.com (Nov 20 2006)
Mega Mall [ multiples injection sql & full path disclosure ]
- saps.audit_at_gmail.com (Nov 12 2006)
MetaCart e-Shop [multiples injection sql (get & post)]
- saps.audit_at_gmail.com (Nov 14 2006)
mg.applanix <= 1.3.1 Remote File Include Exploit
- the_3dit0r_at_yahoo.com (Nov 20 2006)
MHL-2006-003 Public Advisory: "mboard" file creation issue
- Mayhemic Labs Security (Nov 26 2006)
Minimizing error cascades in vulnerability information management
- Steven M. Christey (Nov 07 2006)
mmgallery Multiple vulnerabilities
- saudi_at_hotmail.fr (Nov 23 2006)
Monkey Boards version 0.3.5 Multiple Path Disclosure Vulnerabilities
- jesper.jurcenoks_at_netvigilance.com (Nov 28 2006)
MosReporter Joomla Component Remote File Inclusion Exploi
- crackers_child_at_sibersavascilar.com (Nov 17 2006)
MultiCalendars [ multiples injection sql ]
- saps.audit_at_gmail.com (Nov 15 2006)
Multiple Vulnerabilities in AlternC version 0.9.5
- Vincent A.Menard (Nov 28 2006)
Multiple vulnerabilities in SAP Web Application Server 6.40 and 7.00
- Nicob (Nov 01 2006)
Multiple vulnerabilities in SAP Web Application Server 6.40 and7.00
- Nicob (Nov 09 2006)
- Nicob (Nov 06 2006)
- harrisonholland_at_gmail.com (Nov 03 2006)
Multiple XSS Vulnerabilities in Zend Google Data Client Library Preview 0.2.0
- security_at_armorize.com (Oct 31 2006)
MWChat pro V 7.0 <= (CONFIG[MWCHAT_Libs]) Remote File Include Vulnerability
- -= SHELL =- -= SHELL =- (Nov 03 2006)
mxBB calsnails module 1.06 Remote File Inclusion Exploit
- the_3dit0r_at_yahoo.com (Nov 20 2006)
my little weblog => Cross Site Scripting
- the_3dit0r_at_yahoo.com (Nov 19 2006)
My-BIC => 0.6.5 Remote File Include Vulnerability Exploit
- the_3dit0r_at_yahoo.com (Nov 16 2006)
MyAlbum <= 3.02 (langs_dir) Remote File Inclusion Exploit
- the_3dit0r_at_yahoo.com (Nov 20 2006)
Myphotos => Remote File Include Vulnerability Exploit
- the_3dit0r_at_yahoo.com (Nov 16 2006)
MyStats <=1.0.8 [injection sql, multiples xss, array & full path disclosure]
- benjilenoob_at_hotmail.com (Nov 12 2006)
NetBSD all versions FireWire IOCTL kernel integer overflow information disclousure
- Rodrigo Rubira Branco (BSDaemon) (Nov 15 2006)
New Bug MiniBB Forum <= 2 Remote File Include (index.php)
- navairum_at_gmail.com (Nov 14 2006)
- philip anselmo (Nov 13 2006)
New Flaw in Firefox 2.0: DoS and possible remote code execution
- sflist_at_gmx.de (Nov 26 2006)
- Jerome Athias (Nov 02 2006)
- Jan Heisterkamp (Nov 01 2006)
- 3APA3A (Nov 03 2006)
- 3APA3A (Nov 01 2006)
New report on Teredo security
- Jim Hoagland (Nov 28 2006)
New Windows tool - NBTEnum 3.3
- Reed Arvin (Nov 24 2006)
New Windows tool - PWDumpX v1.0
- Reed Arvin (Nov 29 2006)
News publication system remote File include
- navairum_at_gmail.com (Nov 07 2006)
NuCommunity 1.0 (cl_CatListing.asp) Remote SQL Injection Exploit
- ajannhwt_at_hotmail.com (Nov 11 2006)
NuRems 1.0 Remote XSS/SQL Injection Exploit
- ajannhwt_at_hotmail.com (Nov 11 2006)
NuSchool 1.0 (CampusNewsDetails.asp) Remote SQL Injection Exploit
- ajannhwt_at_hotmail.com (Nov 11 2006)
NuStore 1.0 (Products.asp) Remote SQL Injection Vulnerability
- ajannhwt_at_hotmail.com (Nov 11 2006)
NVIDIA nView (keystone) local Denial Of service
- no-reply_at_hessamx.net (Nov 23 2006)
OdysseusBlog => 1.0.0 Cross Site Scripting
- the_3dit0r_at_yahoo.com (Nov 16 2006)
Old SAP exploits
- Nicob (Nov 12 2006)
omnistar article manager [multiples injection sql]
- saps.audit_at_gmail.com (Nov 08 2006)
Online Event Registration <= v2.0 (save_profile.asp) Remote User Pass Change Exploit
- ajannhwt_at_hotmail.com (Nov 12 2006)
Outpost Insufficient validation of 'SandBox' driver input buffer
- Matousec - Transparent security Research (Nov 01 2006)
Outpost Multiple insufficient argument validation of hooked SSDT function Vulnerability
- Matousec - Transparent security Research (Nov 15 2006)
OWASP JBroFuzz 0.3 Fuzzer Released!
- subere_at_uncon.org (Nov 28 2006)
Oxygen <= 1.1.3 (O2PHP Bulletin Board) SQL Injection
- gmdarkfig_at_gmail.com (Nov 18 2006)
Password Flaw also in Firefox 1.5.08. Was: Big Flaw in Firefox 2: Password Manager Bug Exposes Passwords
- Juha-Matti Laurio (Nov 23 2006)
- Michael Scheidell (Nov 23 2006)
Perl proxy checker using samair.ru
- Iko Riyadi (Nov 22 2006)
PHP Event Calendar 1.5.1 (index.php) Remote File Include Vulnerability
- Stuart Moore (Nov 29 2006)
- philip anselmo (Nov 27 2006)
PHP Rapid Kill All Version File Injection
- null_hack_at_yahoo.com (Nov 05 2006)
PHP-Nuke <= 7.9 News module "sid" SQL Injection vulnerabilities
- paisterist.nst_at_gmail.com (Nov 24 2006)
PHP-Nuke Mermaid Module V1.2 (formdisp.php) Remote File Include Exploit
- crackers_child_at_sibersavascilar.com (Nov 24 2006)
PhpBB Module Dimension Remote File Include
- bluespy.ok_at_gmail.com (Nov 19 2006)
- bluespy.ok_at_gmail.com (Nov 18 2006)
Phpdebug 1.1.0 - Remote File Include by Firewall
- Firewall1954_at_hotmail.com (Nov 11 2006)
PhpGedView 4.0.2 (DOCUMENT_ROOT) File inclusion Vulnerablity
- yalnifj_at_users.sourceforge.net (Nov 28 2006)
- Mefisto_at_Hackermail.Com (Nov 28 2006)
- x___.__at_hotmail.com (Nov 27 2006)
Phpjobscheduler 3.0 - Multiple Remote File Include
- admin_at_dwalker.co.uk (Nov 21 2006)
- str0ke (Nov 18 2006)
- Stefano Zanero (Nov 18 2006)
- Firewall1954_at_hotmail.com (Nov 11 2006)
PHPKit 1.6.1 RC2 (faq/faq.php) Remote SQL Injection Exploit
- philipp.niedziela_at_gmx.de (Nov 10 2006)
phpLedAds 2.0(dir) File Include
- Stefano Zanero (Nov 01 2006)
phpManta - Mdoc <= 1.0.2 (view-sourcecode.php) Local File Include Exploit
- ajannhwt_at_hotmail.com (Nov 11 2006)
PhpMyAdmin all version [multiples vulnerability]
- saps.audit_at_gmail.com (Nov 16 2006)
PhpMyChat <= 0.14.5 Source Code Disclosure Vulnerability
- ajannhwt_at_hotmail.com (Nov 08 2006)
PhpMyChat Plus <= 1.9 Multiple Source Code Disclosure Vulnerabilities
- ajannhwt_at_hotmail.com (Nov 08 2006)
phpMyConferences <= 8.0.2 Remote File Inclusion
- Steven M. Christey (Nov 02 2006)
PHPOLL => 0.96 Cross Site Scripting
- the_3dit0r_at_yahoo.com (Nov 19 2006)
PhpQuickGallery <= 1.9 Remote File Inclusion Exploit
- the_3dit0r_at_yahoo.com (Nov 20 2006)
phpsatk => Remote File Include Vulnerability EXploit
- h4ck3riran_at_yahoo.com (Nov 07 2006)
Pilot Cart V.7.2 [ injection sql (post) ]
- saps.audit_at_gmail.com (Nov 14 2006)
PLS-Bannieres 1.21 (bannieres.php) File Include
- Stefano Zanero (Nov 01 2006)
Portix-PHP [login bypass & xss (post)]
- saps.audit_at_gmail.com (Nov 08 2006)
Potentially OT: AJAX article
- clappymonkey_at_gmail.com (Nov 27 2006)
ProFTPD mod_tls pre-authentication buffer overflow
- Mark Wadham (Nov 29 2006)
- research_at_gleg.net (Nov 28 2006)
Property Pro v1.0 (vir_Login.asp) Remote Login ByPass SQL Injection Vulnerability
- ajannhwt_at_hotmail.com (Nov 12 2006)
Property Site Manager [login bypass ,multiples injection sql & xss (get)]
- saps.audit_at_gmail.com (Nov 14 2006)
Rapid Classified v3.1 [multiple xss (get) & injection sql]
- saps.audit_at_gmail.com (Nov 19 2006)
Real Estate Listing System SQL Injection
- Advisory_at_Aria-security.net (Nov 13 2006)
RED Blog => Remote File Include Vulnerability Exploit
- the_3dit0r_at_yahoo.com (Nov 16 2006)
REMLAB Web Mech Designer 2.0.5 Path Disclosure Vulnerability
- jesper.jurcenoks_at_netvigilance.com (Nov 27 2006)
Rialto 1.6[admin login bypass & multiples injections sql]
- saps.audit_at_gmail.com (Nov 19 2006)
rPSA-2006-0202-1 tshark wireshark
- rPath Update Announcements (Nov 01 2006)
rPSA-2006-0204-1 kernel
- rPath Update Announcements (Nov 09 2006)
rPSA-2006-0205-1 php php-mysql php-pgsql
- rPath Update Announcements (Nov 09 2006)
rPSA-2006-0206-1 firefox thunderbird
- rPath Update Announcements (Nov 09 2006)
rPSA-2006-0207-1 openssh openssh-client openssh-server
- rPath Update Announcements (Nov 09 2006)
rPSA-2006-0211-1 libpng
- rPath Update Announcements (Nov 15 2006)
rPSA-2006-0218-1 ImageMagick
- rPath Update Announcements (Nov 27 2006)
rPSA-2006-0219-1 info install-info texinfo
- rPath Update Announcements (Nov 27 2006)
Sage cross-context scripting -> LOCAL-CONTEXT SCRIPTING
- pagvac (Nov 18 2006)
Secunia Research: Borland Products idsql32.dll Buffer Overflow Vulnerability
- Secunia Research (Nov 29 2006)
Secunia Research: MailEnable IMAP Service Two Vulnerabilities
- Secunia Research (Nov 30 2006)
Secunia Research: MDaemon Insecure Default Directory Permissions
- Secunia Research (Nov 16 2006)
Secunia Research: My Firewall Plus Privilege Escalation Vulnerability
- Secunia Research (Nov 21 2006)
Secunia Research: Panda ActiveScan Multiple Vulnerabilities
- Secunia Research (Nov 16 2006)
Secunia Research: PassGo SSO Plus Insecure Default Directory Permissions
- Secunia Research (Nov 22 2006)
Seditio <= 1.10 (pollid) Remote SQL Injection Vulnerability
- ajannhwt_at_hotmail.com (Nov 30 2006)
Serious crypto problem fixed by envelope HMAC method instead of currently used prefix
- Omirjan Batyrbaev (Nov 21 2006)
Serious crypto problem fixed by envelope HMAC method insteadof currently used prefix
- Steve Friedl (Nov 20 2006)
- Omirjan Batyrbaev (Nov 20 2006)
- Omirjan Batyrbaev (Nov 20 2006)
- Omirjan Batyrbaev (Nov 19 2006)
shambo2 Component For Mambo 4.5 Remote File Inclusion Exploit
- crackers_child_at_sibersavascilar.com (Nov 11 2006)
Shopping_Catalog Remote File Include exploit
- the_3dit0r_at_yahoo.com (Nov 20 2006)
Siap Cms Sql Injection (login.asp)
- nagazakig74_at_hotmail.com (Nov 24 2006)
Simple Machines Forum (SMF) XSS issue
- oldiesmann_at_simplemachines.org (Nov 01 2006)
SIMPLOG 0.9.3 injection sql & multiple xss
- saps.audit_at_gmail.com (Nov 03 2006)
SinFP 2.04 release, works under Windows
- GomoR (Nov 10 2006)
SiteXpress SQL Injection
- Advisory_at_Aria-security.net (Nov 13 2006)
SolpotCrew Advisory #10 - phpBB XS (phpbb_root_path) Remote File Include
- webmaster_at_phpbb-es.com (Nov 23 2006)
Speedwiki 2.0 Arbitrary File Upload Vulnerability
- saps.audit_at_gmail.com (Nov 08 2006)
Sphpblog => 0.8 Cross Site Scripting
- the_3dit0r_at_yahoo.com (Nov 16 2006)
Sphpblog => 0.8 Remote File Include Vulnerabilities
- the_3dit0r_at_yahoo.com (Nov 16 2006)
Stanford university SCARF user editing
- navairum_at_gmail.com (Nov 04 2006)
Storystream => 4.0 Remote File Include Vulnerability Exploit
- the_3dit0r_at_yahoo.com (Nov 16 2006)
SYM06-023, Symantec NetBackup PureDisk: PHP update to Address Reported Security Vulnerability
- Mike Prosser (Nov 29 2006)
SYMSA-2006-011: JBoss Java Class DeploymentFileRepository Directory Traversal
- Jon Hart (Nov 27 2006)
- research_at_symantec.com (Nov 27 2006)
Team Evil - Incident #2
- beSIRT (Nov 13 2006)
Telaen <= 1.1.0 Remote File Include Exploit
- the_3dit0r_at_yahoo.com (Nov 19 2006)
Telaen => 1.1.0 Remote File Include Vulnerability
- the_3dit0r_at_yahoo.com (Nov 19 2006)
TFTP Server 3CTftpSvc Buffer Overflow Vulnerability (Long transporting mode)
- liuqx_at_nipc.org.cn (Nov 26 2006)
TFTP Server AT-TFTP Server v 1.9 Buffer Overflow Vulnerability (Long filename)
- liuqx_at_nipc.org.cn (Nov 26 2006)
TFTPD32 v3.01 TFTP Server Long File Name Buffer Overflow Vulnerability
- liuqx_at_nipc.org.cn (Nov 16 2006)
The Classified Ad System [multiple xss & injection sql]
- saps.audit_at_gmail.com (Nov 19 2006)
The Week of Oracle Database Bugs
- Cesar (Nov 20 2006)
tikiwiki 1.9.5 mysql password disclosure & xss
- drunken_chin_at_yahoo.com (Nov 24 2006)
- FBI_at_Hotmail.com (Nov 22 2006)
- securfrog_at_gmail.com (Nov 01 2006)
TOPSTORY BASIC Version 1.0 => Remote File Include Vulnerability
- stormhacker_at_hotmail.com (Nov 12 2006)
TrustedBSD* all versions FireWire IOCTL kernel integer overflow information disclousure
- Rodrigo Rubira Branco (BSDaemon) (Nov 15 2006)
TSLSA-2006-0061 - multi
- Trustix Security Advisor (Nov 03 2006)
TSLSA-2006-0063 - multi
- Trustix Security Advisor (Nov 15 2006)
TSLSA-2006-0065 - libpng
- Trustix Security Advisor (Nov 17 2006)
TSLSA-2006-0066 - multi
- Trustix Security Advisor (Nov 27 2006)
TSRT-06-13: HP OpenView Client Configuration Manager Device Code Execution Vulnerability
- TSRT_at_3Com.com (Nov 08 2006)
UK Security Convention - Continuity 2006
- Manchester 2600 (Nov 14 2006)
UltraSite 1.0 (update.asp) Remote SQL Injection Vulnerability
- ajannhwt_at_hotmail.com (Nov 12 2006)
uPhotoGallery (v 1.1) SQL Injection
- Advisory_at_Aria-Security.Net (Nov 26 2006)
UPublisher 1.0 (viewarticle.asp) Remote SQL Injection Vulnerability
- ajannhwt_at_hotmail.com (Nov 12 2006)
UStore 1.0 (detail.asp) Remote SQL Injection Vulnerability
- ajannhwt_at_hotmail.com (Nov 12 2006)
Ustore SQL Injection
- Advisory_at_Aria-security.net (Nov 13 2006)
VBulletin DoS Exploit [ all Versions ]
- Bart Seresia (Nov 13 2006)
- root_at_h4x0r.ir (Nov 10 2006)
Vikingboard (0.1.2) [ multiples vulnerability ]
- saps.audit_at_gmail.com (Nov 18 2006)
VMSA-2006-0005 - VMware ESX Server 2.5.4 Upgrade Patch 1
- VMware Security team (Nov 13 2006)
VMSA-2006-0006 - VMware ESX Server 2.5.3 Upgrade Patch 4
- VMware Security team (Nov 13 2006)
VMSA-2006-0007 - VMware ESX Server 2.1.3 Upgrade Patch 2
- VMware Security team (Nov 13 2006)
VMSA-2006-0008 - VMware ESX Server 2.0.2 Upgrade Patch 2
- VMware Security team (Nov 13 2006)
VMSA-2006-0009 - VMware ESX Server 3.0.0 AMD fxsave/restore issue
- VMware Security team (Nov 13 2006)
VMSA-2006-0010 - SSL sessions not authenticated by VC Clients
- VMware Security team (Nov 21 2006)
VMware 5.5.1 Local Buffer Overflow (HTML Exploit)
- str0ke (Nov 27 2006)
- NormandiaN_MailID_at_Yahoo.com (Nov 25 2006)
VulnDisco Pack for Metasploit
- Evgeny Legerov (Nov 06 2006)
Vulnerabilities in Client Service for NetWare
- Avert_at_avertlabs.com (Nov 16 2006)
Vulnerability in PostNuke
- sni-labs_at_sni-labs.com (Nov 21 2006)
Wabbit PHP Gallery => 0.9 Remote Traversal Directory
- the_3dit0r_at_yahoo.com (Nov 19 2006)
WarFTPd 1.82.00-RC11 Remote Denial Of Service
- Joxean Koret (Nov 07 2006)
Web Directory Pro bypass Vulnerabilities
- hack2prison_at_yahoo.com (Nov 03 2006)
Web Interface remote file inclusion
- navairum_at_gmail.com (Nov 11 2006)
WebHost Manager (WHM) Multiple Cross-Site Scripting
- Advisory_at_Aria-security.net (Nov 24 2006)
WFTPD Pro Server 3.23 Buffer Overflow
- Joxean Koret (Nov 07 2006)
Wheatblog [multiple xss (post) & full path disclosure]
- saps.audit_at_gmail.com (Nov 09 2006)
Which is more secure? Oracle vs. Microsoft
- David Litchfield (Nov 20 2006)
Whitepaper: Implementing and Detecting a PCI Rootkit
- John Heasman (Nov 16 2006)
Windows Media ASX PlayList File Denial Of Service Vulnerability
- sehato_at_yandex.ru (Nov 22 2006)
Wisi Portal [Sql Injection By Jesus Tovar]
- nagazakig74_at_hotmail.com (Nov 24 2006)
Wolflab Burning Board Lite 1.0.2 two sql injections
- retrog_at_alice.it (Nov 23 2006)
Woltlab Burning Board 2.3.X XSS Vulnerability (0-Day) FIXED VERSION
- blueshisha_at_safe-mail.net (Nov 30 2006)
Wordpress File Inclusion
- Expanders (Nov 13 2006)
- emc3_at_mentalcollective.com (Nov 13 2006)
- vannovax_at_gmail.com (Nov 10 2006)
worksystem => Remote File Include Vulnerability Exploit
- the_3dit0r_at_yahoo.com (Nov 16 2006)
WWWeb Cocepts SQL Injection
- Advisory_at_Aria-security.net (Nov 13 2006)
XSS in Email Signature Script
- miladkaleh_at_gmail.com (Nov 11 2006)
XSS in Kayako SupportSuite v3.00.32
- hacker hackers (Nov 07 2006)
XSS in script Mobile
- m-0-t_at_hotmail.com (Nov 03 2006)
XSS in scriptat support InverseFlow Help Desk v2.31
- gamr-14_at_hotmail.com (Nov 22 2006)
XSS vBulletin 3.6.X Admin Control Painel
- insanity_at_darkers.com.br (Nov 17 2006)
XSS Vulnerability in Zend Framework Preview 0.2.0
- security_at_armorize.com (Nov 03 2006)
Xtreme ASP Photo Gallery Cross Site Scripting And SQL Injection
- Advisory_at_Aria-security.net (Nov 15 2006)
Y.A.N.S sql injection
- navairum_at_gmail.com (Nov 08 2006)
ZDI-06-036: Novell Netmail User Authentication Buffer Overflow Vulnerability
- zdi-disclosures_at_3com.com (Nov 03 2006)
ZDI-06-037: America Online ICQ ActiveX Control Code Execution Vulnerability
- zdi-disclosures_at_3Com.com (Nov 06 2006)
ZDI-06-038: Citrix MetaFrame IMA Management Module Remote Heap Overflow
- zdi-disclosures_at_3com.com (Nov 09 2006)
ZDI-06-039: Marshal MailMarshal ARJ Extraction Directory Traversal Vulnerability
- zdi-disclosures_at_3com.com (Nov 10 2006)
ZDI-06-040: WinZip FileView ActiveX Control Unsafe Method Exposure Vulnerability
- zdi-disclosures_at_3com.com (Nov 14 2006)
ZDI-06-041: Microsoft Internet Explorer CSS Float Property Memory Corruption Vulnerability
- zdi-disclosures_at_3com.com (Nov 14 2006)
ZDI-06-042: Verity Ultraseek Request Proxying Vulnerability
- zdi-disclosures_at_3com.com (Nov 15 2006)
ZDI-06-043: Novell Netware Client Print Provider Buffer Overflow Vulnerability
- zdi-disclosures_at_3com.com (Nov 29 2006)