Bugtraq: by author

3APA3A
- ShAnKaR: Simle machines forum CAPTCHA bypass and PHP injection (Jun 18 2007)
- Re: [SECURITY] [DSA 1299-1] New ipsec-tools packages fix denial of service (Jun 11 2007)
accounting_at_comcity.com
- Re: RedLevel Advisory #23 - SalesCart Shopping Cart SQL Injection Vulnerability (Jun 13 2007)
Adam Laurie
- Announce - Release RFIDIOt ver 0.1n (June 2007) (Jun 06 2007)
adblake_at_deloitte.co.uk
- Cisco Trust Agent Vulnerability (Jun 11 2007)
Aditya K Sood
- SECNICHE : Dwelling Security is On the Run (Jun 12 2007)
- MLabs is Shifted Fully : SecNiche Initiative (Jun 11 2007)
- Project CERA Is Up Again : Secniche Initiative (Jun 11 2007)
admin_at_batznet.com
- Re: PHP parse_str() arbitrary variable overwrite (Jun 12 2007)
admin_at_majorsecurity.de
- Re: [MajorSecurity Advisory #50]chameleon cms - Session fixation Issue (Jun 07 2007)
- [MajorSecurity Advisory #49]Calimero.CMS - Session fixation Issue (Jun 01 2007)
- [MajorSecurity Advisory #50]chameleon cms - Session fixation Issue (Jun 01 2007)
Airscanner Corp.
- Airscanner Advisory #07062901: FlexiSPY Victim/User Database Exposure (Full world readable access to ALL SMS/Emails/Voice data from victims/users) (Jun 29 2007)
Andreas Beck
- Re: uTorrent overflow (Jun 07 2007)
Andres Riancho
- [TOOL] w3af - Web Application Attack and Audit Framework (Jun 10 2007)
anonymous_at_hackermail.com
- Re: Re: BlackBoard Multiple Vulnerabilities (XSS) (Jun 13 2007)
Anurag Agarwal
- OWASP and WASC Cocktail party at Blackhat USA 2007 (Jun 07 2007)
azizov_at_itdefence.ru
- Safari Bookmarks Buffer Overflow Vulnerability (Jun 24 2007)
- Local Denial of Service in Safari (Jun 16 2007)
BlackHawk
- RevokeBB Blind SQL Injection / Hash Extractor (Jun 01 2007)
Blazej Miga
- Apache Prefork MPM vulnerabilities - Report (Jun 19 2007)
Calyptix Security
- Calyptix Security Advisory CX-2007-04 - Cross-Site Request Forgery Attack Against Check Point Safe@Office Device (Jun 26 2007)
CarcaBot_at_CarcaBot.ro
- Sitellite cms <= 4.2.12 RFI Vuln (Jun 16 2007)
Charles Kim
- Fusetalk SQL injection submission. (Jun 18 2007)
chris_at_seclab.tuwien.ac.at
- CfP: 5th ACM Workshop on Recurring Malware (WORM) - Deadline extension (Jun 19 2007)
Chuck Swiger
- Re: PHP parse_str() arbitrary variable overwrite (Jun 13 2007)
corrado.liotta_at_alice.it
- PhpListPro Persistent XSS Vulnerability (Jun 15 2007)
crackers_child_at_sibersavascilar.com
- W1L3D4 WEBmarket v0,1 SQL Injection Vuln (Jun 19 2007)
cxib_at_securityreason.com
- PHP 4/5 htaccess safemode and open_basedir Bypass (Jun 26 2007)
Daniel Cid
- Remote log injection on DenyHosts, Fail2ban and BlockHosts (Jun 06 2007)
dann frazier
- [SECURITY] [DSA 1304-1] New Linux kernel 2.6.8 packages fix several vulnerabilities (Jun 16 2007)
- Re: [SECURITY] [DSA 1299-1] New ipsec-tools packages fix denial of service (Jun 12 2007)
- [SECURITY] [DSA 1299-1] New ipsec-tools packages fix denial of service (Jun 07 2007)
darkz.gsa_at_gmail.com
- POWER PHLOGGER v.2.2.5 (username) SQL Injection (Jun 25 2007)
David Thiel
- flac123 0.0.9 - Stack overflow in comment parsing (Jun 28 2007)
- VLC 0.8.6b format string vulnerability & integer overflow (Jun 21 2007)
Dennis Rand
- CSIS Advisory: BlueCoat K9 Web Protection 3.2.36 Overflow (Jun 08 2007)
- CSIS Advisory: Microsoft GDI+ Integer division by zero flaw handling .ICO files (Jun 07 2007)
Dj.r4iDeN_at_gmail.com
- Re: uTorrent overflow (Jun 05 2007)
- uTorrent overflow (Jun 02 2007)
Dj_ReMix_20_at_hotmail.com
- W1L3D4 WEBmarket Remote SQL İnjection (Jun 06 2007)
- Hnkaray Duyuru Script Remote SQL İnjection (Jun 06 2007)
DoZ_at_HackersCenter.com
- Comersus Shop Cart 7.07 SQL Injection & XSS (Jun 19 2007)
- CACTUSHOP 6 Default Installation Allows Remote Database Disclosure (Jun 03 2007)
dr.rezen_at_gmail.com
- bugtraq submission (Jun 01 2007)
eEye Advisories
- EEYE: Yahoo Webcam ActiveX Controls Multiple Buffer Overflows (Jun 08 2007)
Eitan Caspi
- "run as" local denial-of-service enables administrative account processes to be killed (Jun 23 2007)
esc6_at_hush.com
- Conti FTP Server v1.0 DoS (Jun 26 2007)
Firewall1954_at_hotmail.com
- XEForum Cookie Modification Privilege Escalation Vulnerability (Jun 27 2007)
Foresight Linux Essential Advisory Service
- FLEA-2007-0024-1: libexif (Jun 04 2007)
Foresight Linux Essential Announcement Service
- FLEA-2007-0030-1: avahi avahi-glib avahi-sharp (Jun 28 2007)
- FLEA-2007-0029-1: krb5 krb5-workstation (Jun 27 2007)
- FLEA-2007-0028-1: libexif (Jun 22 2007)
- FLEA-2007-0027-1: thunderbird (Jun 20 2007)
- FLEA-2007-0026-1: evolution-data-server (Jun 18 2007)
- FLEA-2007-0025-1: openoffice.org (Jun 13 2007)
- FLEA-2007-0021-2: madwifi (Jun 06 2007)
Francisco Amato
- [ISR] :: Infobyte Security Research :: release (ISR-sqlget.pl) v1.0.0 (Jun 25 2007)
Frank Berek
- Re: Having Fun With PostgreSQL (Jun 18 2007)
Gadi Evron
- CFP: ISOI III (a DA workshop) (Jun 25 2007)
Gavin Hanover
- Re: uTorrent overflow (Jun 06 2007)
ge_at_linuxbox.org
- Re: Windows Oday release (Jun 13 2007)
- Re: Windows Oday release (Jun 12 2007)
Gerhard Wagner
- SEC Consult SA-20070601-0 :: PHP chunk_split() integer overflow (Jun 01 2007)
glafkos_at_gmail.com
- WebStudio Multiple XSS Vulnerabilities (Jun 04 2007)
glafkos_at_infosec.org.uk
- WmsCMS < = 2.0 Multiple XSS Vulnerabilities (Jun 07 2007)
- Evenzia CMS XSS (Jun 01 2007)
gmdarkfig_at_gmail.com
- Pluxml 0.3.1 Remote Code Execution Exploit (Jun 24 2007)
- Re: Re: PHP parse_str() arbitrary variable overwrite (Jun 13 2007)
- PHP parse_str() arbitrary variable overwrite (Jun 12 2007)
Goodfellas SRT
- [GOODFELLAS - VULN] hpqxml.dll 2.0.0.133 from HP Digital Imaging Arbitary Data Write. (Jun 27 2007)
- [GOODFELLAS - VULN ] Avaxswf.dll v.1.0.0.1 from Avax Vector software ActiveX Arbitrary Data Write (Jun 26 2007)
- [GOODFELLAS - VULN] BarCodeAx.dll v. 4.9 ActiveX Control Remote Stack Buffer Overflow (Jun 23 2007)
H D Moore
- Re: CSIS Advisory: Microsoft GDI+ Integer division by zero flaw handling .ICO files (Jun 07 2007)
h0tturk_at_h0tturk.com
- CERN İmage Map Dispatcher (Jun 03 2007)
- Dansie Cart Script Exploit Reported (Jun 03 2007)
hack2prison_at_yahoo.com
- Singapore Gallery fullpath disclosure (Jun 14 2007)
- ASP Folder Gallery Vulnerabilities (Jun 06 2007)
HASEGAWA Yosuke
- MS07-034: Executing arbitrary script with mhtml: protocol handler (Jun 21 2007)
Henri Lindberg - Louhi Networks Oy
- CheckPoint VPN-1 UTM Edge Cross Site Request Forgery vulnerability (Jun 26 2007)
Hugo van der Kooij
- Re: Windows Oday release (Jun 14 2007)
iant_at_netcplus.com
- Re: Buffer overflow in BusinessMail email server system 4.60.00 (Jun 04 2007)
iDefense Labs
- iDefense Security Advisory 06.26.07: RealNetworks RealPlayer/HelixPlayer SMIL wallclock Stack Overflow Vulnerability (Jun 26 2007)
- iDefense Security Advisory 06.26.07: Multiple Vendor Kerberos kadmind Rename Principal Buffer Overflow Vulnerability (Jun 26 2007)
- iDefense Security Advisory 06.21.07: Ingres Database Multiple Heap Corruption Vulnerabilities (Jun 21 2007)
- iDefense Security Advisory 06.18.07: Cerulean Studios Trillian UTF-8 Word Wrap Heap Overflow Vulnerability (Jun 18 2007)
- iDefense Security Advisory 06.14.07: Apache MyFaces Tomahawk JSF Framework Cross-Site Scripting (XSS) Vulnerability (Jun 14 2007)
- iDefense Security Advisory 06.13.07: Multiple Vendor libexif Integer Overflow Heap Corruption Vulnerability (Jun 13 2007)
- iDefense Security Advisory 06.12.07: Microsoft License Manager and urlmon.dll COM Object Interaction Invalid Memory Access Vulnerability (Jun 12 2007)
- iDefense Security Advisory 06.07.07: Linux Kernel cpuset tasks Information Disclosure Vulnerability (Jun 08 2007)
- iDefense Security Advisory 06.05.07: Symantec Ghost Multiple Denial of Service Vulnerabilities (Jun 06 2007)
- iDefense Security Advisory 06.01.07: Symantec VERITAS Storage Foundation Administration Service DoS Vulnerability (Jun 01 2007)
ifx_at_cupu.us
- iG Shop 1.4 eval Inclusion Vulnerability (Jun 18 2007)
imprili_at_gmail.com
- LiteWEB 2.7 404 Denial of Services (Jun 23 2007)
- KF Web Server 3.1.0 admin console XSS (Jun 23 2007)
- SHTTPD V1.38 server source code disclosure (Jun 23 2007)
- HTTP SERVER (httpsv1.6.2) 404 Denial of Service (Jun 20 2007)
- MyServer-0.8.9 - xss in sample cgi page (Jun 20 2007)
- MyServer-0.8.9 - source code disclosure (Jun 20 2007)
- HTTP SERVER (httpsv1.6.2) source code disclosure (Jun 20 2007)
info_at_lucasvd.nl
- Re: LuckyBot v3 Remote File Include (Jun 06 2007)
Ivan Almuina
- fusetalk CSS (autherror.cfm) (Jun 20 2007)
- fusetalk CSS (comfinish.cfm) (Jun 20 2007)
- fusetalk SQL (autherror.cfm) (Jun 19 2007)
Ivan Buetler
- SAP Internet Communication Framework (BC-MID-ICF) Vulnerability (Jun 27 2007)
- SAP Web Dynpro Java (BC-WD-JAV) Vulnerability (Jun 27 2007)
James C. Slora Jr.
- RE: "run as" local denial-of-service enables administrative account processes to be killed (Jun 26 2007)
James Downs
- Re: Sudo: local root compromise with krb5 enabled (Jun 07 2007)
jantunes_at_di.fc.ul.pt
- MaraDNS denial of service vulnerabilities (Jun 19 2007)
Jared DeMott
- Re: [Full-disclosure] Windows Oday release (Jun 13 2007)
Jerome Athias
- [SecurInfos] PCSoft WinDEV .wdp Project File Handling Buffer Overflow (Jun 27 2007)
Jim Geovedi
- BCS'07 Call For Papers (Jun 04 2007)
Joanna Rutkowska
- Re: Windows Oday release (Jun 13 2007)
John M. Martinelli
- Re: RedLevel Advisory #23 - SalesCart Shopping Cart SQL Injection Vulnerability (Jun 14 2007)
John Smith
- Wordpress default theme XSS (admin) and other problems (Jun 08 2007)
john-lindsay_at_ngssoftware.com
- Contact request - nVidia (Jun 27 2007)
john_at_martinelli.com
- Redlevel Advisory #025 - Vonage VoIP Telephone Adapter Default Misconfiguration (Jun 01 2007)
johnnytalker_at_hotmail.com
- Comdev eCommerce 4.1 RFI Vulnerability (Jun 02 2007)
- Comdev Web Blogger 4.1 RFI Vulnerability (Jun 02 2007)
Jon Ribbens
- Re: RedLevel Advisory #23 - SalesCart Shopping Cart SQL Injection Vulnerability (Jun 14 2007)
- Re: uTorrent overflow (Jun 04 2007)
kaneda_at_bohater.net
- Re: New Include Redirect Bug XSS All vBulletin v 3.x.x (Jun 21 2007)
Kees Cook
- [USN-479-1] MadWifi vulnerabilities (Jun 28 2007)
- [USN-478-1] libexif vulnerability (Jun 26 2007)
- [USN-477-1] krb5 vulnerabilities (Jun 26 2007)
- [USN-476-1] redhat-cluster-suite vulnerability (Jun 22 2007)
- [USN-475-1] evolution-data-server vulnerability (Jun 21 2007)
- [USN-474-1] xscreensaver vulnerability (Jun 12 2007)
- [USN-473-1] libgd2 vulnerabilities (Jun 11 2007)
- [USN-472-1] libpng vulnerability (Jun 11 2007)
- [USN-471-1] libexif vulnerability (Jun 11 2007)
- [USN-439-2] file vulnerability (Jun 11 2007)
- [USN-470-1] Linux kernel vulnerabilities (Jun 08 2007)
- [USN-469-1] Thunderbird vulnerabilities (Jun 05 2007)
- [USN-468-1] Firefox vulnerabilities (Jun 01 2007)
Ken Raeburn
- Re: Sudo: local root compromise with krb5 enabled (Jun 15 2007)
- Re: Sudo: local root compromise with krb5 enabled (Jun 11 2007)
krasza_at_gmail.com
- Local File Include Vulnerabilities in YaBB <= 2.1(all version) (Jun 19 2007)
Kyle Wheeler
- Re: Sudo: local root compromise with krb5 enabled (Jun 14 2007)
Larry Seltzer
- RE: [Full-disclosure] Apple Safari: idn urlbar spoofing (Jun 25 2007)
- RE: [Full-disclosure] Safari for Windows,0day URL protocol handler command injection (Jun 12 2007)
laurent.gaffie_at_gmail.com
- phpTrafficA < 1.4.2 (Jun 24 2007)
- eNdonesia 8.4 [multiple injection sql] (Jun 22 2007)
- NetClassifieds [multiple vulnerabilities] (Jun 21 2007)
leo_at_kkxi.com
- Re: [PLESK 7.5 Reload] & [PLESK 7.6 for MS Windows] path passing and disclosure vulnerability (Jun 02 2007)
ls_at_calima.serapis.net
- Maran Blog XSS vulnerability (Jun 10 2007)
- Atom PhotoBlog v1.0.9 XSS vulnerability (Jun 07 2007)
- Light Blog 4.1 XSS Vulnerability (Jun 06 2007)
- My Datebook SQL Injection + XSS (Jun 04 2007)
lux_at_simian.ca
- Re: Sitellite cms <= 4.2.12 RFI Vuln (Jun 18 2007)
maiosyet_at_mawk.org
- Webif.cgi local file inclusion (Jun 18 2007)
Mark Senior
- Re: [Full-disclosure] Apple Safari: urlbar/window title spoofing (Jun 15 2007)
- Re: Sudo: local root compromise with krb5 enabled (Jun 07 2007)
Mark Thomas
- [CVE-2007-1358] Apache Tomcat XSS vulnerability in Accept-Language header processing (Jun 18 2007)
- [CVE-2007-2449] Apache Tomcat XSS vulnerabilities in the JSP examples (Jun 13 2007)
- [CVE-2007-2450]: Apache Tomcat XSS vulnerability in Manager (Jun 13 2007)
Martin Schulze
- [SECURITY] [DSA 1307-1] New OpenOffice.org packages fix arbitrary code execution (Jun 12 2007)
Matousec - Transparent security Research
- Kaspersky Multiple insufficient argument validation of hooked SSDT function Vulnerability (Jun 15 2007)
- Outpost Enforcing system reboot with 'outpost_ipc_hdr' mutex Vulnerability (Jun 01 2007)
Matteo Carli
- Persistent cross-site scripting in wordpress.com dashboard (Jun 19 2007)
MC Iglo
- static XSS / SQL-Injection in Omegasoft Insel (Jun 01 2007)
Michal Zalewski
- Re: [Full-disclosure] Apple Safari: idn urlbar spoofing (Jun 25 2007)
- Re: [Full-disclosure] Apple Safari: cookie stealing (Jun 13 2007)
- Assorted browser vulnerabilities (Jun 04 2007)
Moritz Muehlenhoff
- [SECURITY] [DSA 1325-1] New evolution packages fix arbitrary code execution (Jun 29 2007)
- [SECURITY] [DSA 1323-1] New krb5 packages fix several vulnerabilities (Jun 28 2007)
- [SECURITY] [DSA 1322-1] New wireshark packages fix denial of service (Jun 27 2007)
- [SECURITY] [DSA 1315-1] New libphp-phpmailer packages fix arbitrary shell command execution (Jun 19 2007)
- [SECURITY] [DSA 1314-1] New open-iscsi packages fix several vulnerabilities (Jun 19 2007)
- [SECURITY] [DSA 1313-1] New MPlayer packages fix arbitrary code execution (Jun 19 2007)
- [SECURITY] [DSA 1312-1] New libapache-mod-jk packages fix information disclosure (Jun 17 2007)
- [SECURITY] [DSA 1311-1] New PostgreSQL 7.4 packages fix privilege escalation (Jun 17 2007)
- [SECURITY] [DSA 1309-1] New PostgreSQL 8.1 packages fix privilege escalation (Jun 16 2007)
- [SECURITY] [DSA 1308-1] New iceweasel packages fix several vulnerabilities (Jun 14 2007)
- [SECURITY] [DSA 1305-1] New icedove packages fix several vulnerabilities (Jun 13 2007)
- [SECURITY] [DSA 1306-1] New xulrunner packages fix several vulnerabilities (Jun 12 2007)
- [SECURITY] [DSA 1300-1] New iceape packages fix several vulnerabilities (Jun 07 2007)
- [SECURITY] [DSA 1291-4] New samba packages fix regression (Jun 04 2007)
motokochan_at_simplemachines.org
- Re: Re: [MajorSecurity Advisory #47]Simple Machines Forum (SMF) - Session fixation Issue (Jun 24 2007)
mpeg_at_freeshells.ch
- 2007-06-03: PeerCast streaming server submits cleartext password (Jun 03 2007)
NGSSoftware Insight Security Research
- Ingres wakeup setuid(ingres) file truncation (Jun 25 2007)
- Ingres stack overflow in uuid_from_char function (Jun 25 2007)
- Ingres Unauthenticated Pointer Overwrite 1 (Jun 25 2007)
- Ingres verifydb local stack overflow (Jun 25 2007)
- Ingres Unauthenticated Pointer Overwrite 2 (Jun 25 2007)
- High risk vulnerability in OpenOffice RTF parser (Jun 13 2007)
Nico Leidecker
- Papoo CMS 3.6 - Access Restriction Bypass (Jun 24 2007)
- Papoo CMS 3.6 - SQL Injection (Jun 24 2007)
- Having Fun With PostgreSQL (Jun 16 2007)
- Papoo CMS - Multiple Cross Site Scripting (Jun 15 2007)
- Elxis CMS <= 2006.4 - banner module - sql injection (Jun 14 2007)
Niels Provos
- SpyBye 0.3 released (Jun 09 2007)
nnposter_at_disclosed.not
- WinPT User ID Spoofing Vulnerability (Jun 11 2007)
- Packeteer PacketShaper Web Management Denial of Service (Jun 08 2007)
no-reply_at_hessamx.net
- IE 6/Microsoft Html Popup Window (mshtml.dll) DoS (Jun 06 2007)
no-reply_at_yahoo.com
- IE 6 / MS Office Outlook Express Address Book Activex DoS (Jun 06 2007)
no-spam_at_privacy.com
- Re: Re: PHPMyDesk Beta Release 1.0b ==> RFI (Jun 22 2007)
Noah Meyerhans
- [SECURITY] [DSA 1301-1] New Gimp packages fix arbitrary code execution (Jun 09 2007)
nobody_at_domain.com
- Re: [MajorSecurity Advisory #47]Simple Machines Forum (SMF) - Session fixation Issue (Jun 14 2007)
Oliver Goebel
- RUS-CERT 2007-06:01 (1380): Insecure Defaults in A-L OmniPCX 7.0 (Jun 07 2007)
OpenPKG GmbH
- [OpenPKG-SA-2007.021] OpenPKG Security Advisory (wordpress) (Jun 08 2007)
- [OpenPKG-SA-2007.020] OpenPKG Security Advisory (php) (Jun 01 2007)
Paul B�hm
- Second Call for Papers: DeepSec IDSC 2007 Europe/Vienna: 20-23 Nov 2007 (Jun 07 2007)
Pavel Konov
- Re: uTorrent overflow (Jun 06 2007)
Piotr Bania
- Disinfectors for the calculator virus (ti89.Gaara) (Jun 03 2007)
pito pito
- PBSite - PHP Bulletin Site | CMS ====> RFI (Jun 02 2007)
- Prototype of an PHP application ===> RFI (Jun 01 2007)
- PBSite - PHP Bulletin Site | CMS ====> RFI (Jun 01 2007)
- phpreactor <===1.2.7 remote file include (Jun 01 2007)
pixy-noreply_at_seclab.tuwien.ac.at
- Pixy - An Open-Source Vulnerability Scanner for PHP Applications (Jun 20 2007)
RaeD_at_BsdMail.Com
- SQL Injection In Script VBZooM V1.12 (Jun 29 2007)
- RFI In Script SH-News 3.1 (Jun 14 2007)
- ByPass In PortalApp (Jun 14 2007)
- Z-Blog 1.7 Authentication Bypass Database Download Vulnerability (Jun 01 2007)
Raphael Marichez
- [ GLSA 200706-08 ] emul-linux-x86-java: Multiple vulnerabilities (Jun 26 2007)
- [ GLSA 200706-09 ] libexif: Buffer overflow (Jun 26 2007)
- [ GLSA 200706-07 ] PHProjekt: Multiple vulnerabilities (Jun 19 2007)
- [ GLSA 200706-06 ] Mozilla products: Multiple vulnerabilities (Jun 19 2007)
- [ GLSA 200706-05 ] ClamAV: Multiple Denials of Service (Jun 15 2007)
- [ GLSA 200706-04 ] MadWifi: Multiple vulnerabilities (Jun 11 2007)
- [ GLSA 200706-02 ] Evolution: User-assisted execution of arbitrary code (Jun 06 2007)
- [ GLSA 200706-03 ] ELinks: User-assisted execution of arbitrary code (Jun 06 2007)
- [ GLSA 200706-01 ] libexif: Integer overflow vulnerability (Jun 05 2007)
Ray Stell
- Re: Having Fun With PostgreSQL (Jun 18 2007)
research_at_symantec.com
- SYMSA-2007-004: Multiple Vulnerabilities in Xythos Server Products (Jun 22 2007)
Richard Moore
- Safari XMLHttpRequest HTTP header injection (Jun 25 2007)
rm_at_calima.serapis.net
- fuzzylime (forum) XSS (Jun 18 2007)
- PHP hosting Biller (Jun 18 2007)
Robert Swiecki
- Re: Apple Safari: idn urlbar spoofing (Jun 27 2007)
- Re: Apple Safari: idn urlbar spoofing (Jun 25 2007)
- Re: [Full-disclosure] Apple Safari: urlbar/window title spoofing (Jun 14 2007)
- Apple Safari: cookie stealing (Jun 13 2007)
rPath Update Announcements
- rPSA-2007-0136-1 httpd mod_ssl (Jun 27 2007)
- rPSA-2007-0135-1 krb5 krb5-server krb5-services krb5-test krb5-workstation (Jun 27 2007)
- rPSA-2007-0133-1 emacs emacs-leim (Jun 25 2007)
- rPSA-2007-0131-1 libexif (Jun 25 2007)
- rPSA-2007-0127-1 fetchmail (Jun 19 2007)
- rPSA-2007-0122-1 evolution-data-server (Jun 14 2007)
- rPSA-2007-0126-1 util-linux (Jun 15 2007)
- rPSA-2007-0124-1 kernel xen (Jun 14 2007)
- rPSA-2007-0123-1 squirrelmail (Jun 14 2007)
- rPSA-2007-0119-1 spamassassin (Jun 13 2007)
- rPSA-2007-0117-1 gd php php-mysql php-pgsql (Jun 07 2007)
- rPSA-2007-0115-1 libexif (Jun 04 2007)
- rPSA-2007-0114-1 mutt (Jun 04 2007)
Ryan's spam address
- Recent OpenSSL exploits (Jun 02 2007)
s0cratex_at_hotmail.com
- Comicsense SQL Injection Advisory/Exploit (Jun 05 2007)
S21sec Labs
- S21Sec-035: F5 FirePass command execution vulnerability (Jun 04 2007)
scott-REMOTE-_at_vbulletin.com
- Re: Re: New Include Redirect Bug XSS All vBulletin v 3.x.x (Jun 22 2007)
scott-REMOVE-_at_vbulletin.com
- Re: Re: New Include Redirect Bug XSS All vBulletin(r) v 3.x.x (Jun 22 2007)
- Re: New post Topic Hijacking XSS All vBulletin v 3.x.x (2) (Jun 21 2007)
- Re: New Include Redirect Bug XSS All vBulletin v 3.x.x (Jun 21 2007)
Secunia Research
- Secunia Research: KVIrc irc:// URI Handler Command Execution Vulnerability (Jun 28 2007)
- Secunia Research: Symantec Mail Security for SMTP Boundary Errors (Jun 28 2007)
secure_at_symantec.com
- SYM07-011 Symantec Reporting Server password disclosure (Jun 05 2007)
- SYM07-012 Symantec Reporting Server elevation of privilege (Jun 05 2007)
- SYM07-009,Symantec Storage Foundation for Windows Volume Manager: Authentication Bypass and Potential Code Execution in Scheduler Service (Jun 04 2007)
security-alert_at_hp.com
- [security bulletin] HPSBTU02232 SSRT071429 rev.1 - Secure Web Server for HP Tru64 UNIX Powered by Apache (SWS) or HP Internet Express for Tru64 UNIX running PHP, Remote Arbitrary Code Execution, Unauthorized Disclosure of Information, or Denial of Service (DoS) (Jun 28 2007)
- HPSBTU02207 SSRT061239 rev.2 - HP Tru64 UNIX OpenSSL and BIND Remote Arbitrary Code Execution or Denial of Service (DoS) (Jun 27 2007)
- [security bulletin] HPSBUX02225 SSRT071295 rev.1 - HP-UX Running Xserver, Local Denial of Service (DoS) (Jun 25 2007)
- HPSBST02231 SSRT071438 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS07-030 to MS07-035 (Jun 21 2007)
- [security bulletin] HPSBGN02199 SSRT071312 rev.3 - Mercury Quality Center ActiveX, Remote Unauthorized Arbitrary Code Executio (Jun 21 2007)
- [security bulletin] HPSBTU02218 SSRT071424 rev.1 - HP Tru64 UNIX Internet Express running Samba, Remote Arbitrary Code Execution or Local Unauthorized Privilege Elevation (Jun 20 2007)
- [security bulletin] HPSBPI02226 SSRT061274 rev.1 - HP Help and Support Center Running on HP Notebook Computers Running with Windows XP, Remote Unauthorized Access (Jun 20 2007)
- [security bulletin] HPSBMA02224 SSRT071334 rev.1 - HP System Management Homepage (SMH) for Linux, Remote Privileged Access (Jun 18 2007)
- [security bulletin] HPSBUX02219 SSRT061273 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS) (Jun 12 2007)
- [security bulletin] HPSBUX02218 SSRT071424 rev.1 - HP-UX running CIFS Server (Samba), Remote Arbitrary Code Execution (Jun 05 2007)
- [security bulletin] HPSBUX02217 SSRT071337 rev.2 - HP-UX running Kerberos, Remote Arbitrary Code Execution (Jun 05 2007)
security_at_mandriva.com
- [ MDKSA-2007:136 ] - Updated evolution packages fix vulnerability (Jun 26 2007)
- [ MDKSA-2007:137 ] - Updated krb5 packages fix vulnerabilities (Jun 26 2007)
- [ MDKSA-2007:134 ] - Updated xfsdump packages fix unsafe temporary directory creation issue (Jun 21 2007)
- [ MDKSA-2007:133 ] - Updated emacs packages fix DoS vulnerability (Jun 21 2007)
- [ MDKSA-2007:132 ] - Updated madwifi-source, wpa_supplicant packages fix vulnerabilities (Jun 21 2007)
- [ MDKSA-2007:131 ] - Updated Thunderbird packages fix multiple vulnerabilities (Jun 20 2007)
- [ MDKSA-2007:130 ] - Updated proftpd packages fix authentication bypass vulnerability (Jun 20 2007)
- [ MDKSA-2007:128 ] - Updated libexif packages fix integer overflow flaw (Jun 19 2007)
- [ MDKSA-2007:129 ] - Updated jasper packages fix vulnerability (Jun 19 2007)
- [ MDKSA-2007:127 ] - Updated apache packages fix mod_mem_cache issue (Jun 19 2007)
- [ MDKSA-2007:126-1 ] - Updated Firefox packages fix multiple vulnerabilities (Jun 16 2007)
- [ MDKSA-2007:126 ] - Updated Firefox packages fix multiple vulnerabilities (Jun 15 2007)
- [ MDKSA-2007:125 ] - Updated spamassassin packages fix possible DoS condition (Jun 14 2007)
- [ MDKSA-2007:124 ] - Updated tetex packages fix vulnerability (Jun 13 2007)
- [ MDKSA-2007:122 ] - Updated gd packages fix vulnerability (Jun 13 2007)
- [ MDKSA-2007:123 ] - Updated libwmf packages fix vulnerability (Jun 13 2007)
- [ MDKSA-2007:121 ] - Updated freetype2 packages fix integer overflow vulnerability (Jun 13 2007)
- [ MDKSA-2007:120 ] - Updated Firefox packages fix multiple vulnerabilities (Jun 12 2007)
- [ MDKSA-2007:119 ] - Updated Thunderbird packages fix multiple vulnerabilities (Jun 12 2007)
- [ MDKSA-2007:118 ] - Updated libexif packages fix crash and possible arbitrary code execution issue (Jun 08 2007)
- [ MDKSA-2007:117 ] - Updated lha packages fix unsafe temporary files creation issue (Jun 05 2007)
- [ MDKSA-2007:116 ] - Updated libpng packages fix vulnerability (Jun 05 2007)
- [ MDKSA-2007:114 ] - Updated file packages fix vulnerabilities (Jun 05 2007)
- [ MDKSA-2007:112 ] - Updated mplayer packages fix buffer overflow vulnerability (Jun 04 2007)
- [ MDKSA-2007:111 ] - Updated util-linux packages address login access policies bypassing issue (Jun 04 2007)
- [ MDKSA-2007:115 ] - Updated clamav packages fix vulnerabilities (Jun 04 2007)
- [ MDKSA-2007:113 ] - Updated mutt packages fix vulnerabilities (Jun 04 2007)
- [ MDKSA-2007:110 ] - Updated php-pear packages fix directory traversal vulnerability (Jun 04 2007)
security_at_nruns.com
- n.runs-SA-2007.015 - F-Secure Antivirus FSG packed files parsing Infinite Loop Advisory (Jun 04 2007)
- n.runs-SA-2007.014 - F-Secure Antivirus ARJ parsing Infinite Loop Advisory (Jun 04 2007)
- n.runs-SA-2007.013 - F-Secure Antivirus LZH parsing BufferOverflow Advisory (Jun 01 2007)
securityresearch_at_netvigilance.com
- eTicket version 1.5.5 XSS Attack Vulnerability (Jun 27 2007)
- eTicket version 1.5.5 Path Disclosure Vulnerability (Jun 27 2007)
- Calendarix version 0.7. 20070307 Multiple SQL Injection Vulnerabilities (Jun 25 2007)
- MyNews version 0.10 SQL Injection Vulnerability (Jun 25 2007)
- Calendarix version 0.7. 20070307 Multiple Path Disclosure Vulnerabilities (Jun 25 2007)
- Calendarix version 0.7. 20070307 Multiple XSS Attacks (Jun 25 2007)
- Calendarix version 0.7. 20070307 Multiple Path Disclosure Vulnerabilities (Jun 25 2007)
- WSPortal version 1.0 SQL Injection Vulnerability (Jun 17 2007)
- Utopia News Pro version 1.4.0 XSS Attack Vulnerability (Jun 17 2007)
- WSPortal version 1.0 Path Disclosure Vulnerability (Jun 17 2007)
sf_at_hm2k.org
- Re: eTicket version 1.5.5 XSS Attack Vulnerability (Jun 29 2007)
spymaster_at_spykod.net
- Webwiz vulnerable (Jun 10 2007)
spymeta_at_yahoo.com
- All Of the Mambo & Joomla Script Remote File Inclussion Bugs.. (Jun 22 2007)
Steve Kemp
- [SECURITY] [DSA 1324-1] New hiki packages fix missing input sanitising (Jun 28 2007)
- [SECURITY] [DSA 1316-1] New emacs21 packages fix denial of service (Jun 21 2007)
- [SECURITY] [DSA 1310-1] New libexif packages fix integer overflow (Jun 16 2007)
- [SECURITY] [DSA 1309-1] New libexif packages fix integer overflow (Jun 16 2007)
- [SECURITY] [DSA 1303-1] New lighttpd packages fix denial of service (Jun 10 2007)
- [SECURITY] [DSA 1302-1] New freetype packages fix integer overflow (Jun 10 2007)
Steve Tornio
- Re: Buffer overflow in BusinessMail email server system 4.60.00 (Jun 04 2007)
Steven M. Christey
- Re: New Include Redirect Bug XSS All vBulletin(r) v 3.x.x (Jun 21 2007)
- Re: Windows Oday release (Jun 13 2007)
- Re: PHP parse_str() arbitrary variable overwrite (Jun 12 2007)
- Re: Dansie Cart Script Exploit Reported (Jun 05 2007)
stormhacker_at_hotmail.com
- New Include Redirect Bug XSS All vBulletin v 3.x.x (Jun 20 2007)
- New post Topic Hijacking XSS All vBulletin v 3.x.x (2) (Jun 20 2007)
- vSupport Integrated Ticket System 3.*.* SQL injection (Jun 09 2007)
str0ke
- Re: MyEvent1.6 (template.php) Remote File Inclusion Vulnerability (Jun 02 2007)
support_at_keyfocus.net
- Re: KF Web Server 3.1.0 admin console XSS (Jun 26 2007)
suresync_at_gmail.com
- Re: Re: Progress Webspeed exploit for all releases (Jun 29 2007)
- Openedge _mprosrv buffer overflow (Jun 27 2007)
the.tiger100_at_gmail.com
- Re: myBloggie 2.1.5 Remote File Include (Jun 09 2007)
- Re: PHPMyDesk Beta Release 1.0b ==> RFI (Jun 09 2007)
Thomas Lim
- Windows Oday release (Jun 12 2007)
Thor Lancelot Simon
- Sudo: local root compromise with krb5 enabled (Jun 06 2007)
- MIT krb5: makes sudo authentication issue MUCH worse. (Jun 06 2007)
- Re: Sudo: local root compromise with krb5 enabled (Jun 06 2007)
Thor Larholm
- Safari for Windows, 0day URL protocol handler command injection (Jun 11 2007)
- PHPMailer command execution (Jun 11 2007)
- Unpatched input validation flaw in Firefox 2.0.0.4 (Jun 04 2007)
Tim Brown
- Serious holes affecting JFFNMS (Jun 10 2007)
titanichacker titanichacker
- PHPMyDesk Beta Release 1.0b ==> RFI (Jun 07 2007)
- Zen Help Desk ==> Version 2.1 Bypass/ (Jun 07 2007)
- phpWebThings ==>1.5.2 RFI (Jun 07 2007)
Todd C. Miller
- Re: Sudo: local root compromise with krb5 enabled (Jun 07 2007)
Tom Yu
- MITKRB5-SA-2007-005: kadmind vulnerable to buffer overflow (Jun 26 2007)
- MITKRB5-SA-2007-004: kadmind multiple RPC lib vulnerabilities (Jun 26 2007)
Trent Waddington
- jumping sudo using ptrace on Linux/i386 (Jun 01 2007)
Trustix Security Advisor
- TSLSA-2007-0021 - kerberos5 (Jun 29 2007)
- TSLSA-2007-0020 - clamav (Jun 08 2007)
TSRT_at_3com.com
- TPTI-07-09: Macrovision FLEXnet boisweb.dll ActiveX Control Buffer Overflow Vulnerability (Jun 04 2007)
- TPTI-07-10: Centennial Software XferWan.exe Stack Overflow Vulnerability (Jun 04 2007)
- TPTI-07-08: Symantec Veritas Storage Foundation Scheduler Service Authentication Bypass Vulnerability (Jun 04 2007)
underwater_at_itdefence.ru
- WheatBlog 1.1 RFI/SQL Injection (Jun 30 2007)
USprotte_at_web.de
- Juniper SBR V 6.0.1 CRL-Checking problem (Jun 27 2007)
vagrant - e-hack.org
- Linker index.php - Cross-Site Scripting Vulnerability (Jun 01 2007)
Warner Moore
- RE: bugtraq submission (Jun 04 2007)
web-app_at_hotmail.com
- Menu Manager Mod for WebAPP - No Input Filtering (Jun 12 2007)
webapp_at_web-app.org
- Re: Menu Manager Mod for WebAPP - No Input Filtering (Jun 18 2007)
Williams, James K
- [CAID 35450, 35451, 35452, 35453]: CA Products That Embed Ingres Multiple Vulnerabilities (Jun 22 2007)
- [CAID 35395, 35396]: CA Anti-Virus Engine CAB File Buffer Overflow Vulnerabilities (Jun 07 2007)
www_at_htp.cc
- Re: Monkey CMS v0.0.3 Remote File Include Vulnerabilitiy (Jun 07 2007)
xx_hack_xx_2004_at_hotmail.com
- Full Path Disclosure in SendCard (May 31 2007)
yaser_at_gencturk.net
- myBloggie 2.1.5 Remote File Include (Jun 09 2007)
- MyEvent1.6 (template.php) Remote File Inclusion Vulnerability (Jun 02 2007)
zdi-disclosures_at_3com.com
- ZDI-07-038: Microsoft Internet Explorer Prototype Dereference Code Execution Vulnerability (Jun 12 2007)
- ZDI-07-037: Microsoft Internet Explorer Language Pack Installation Remote Code Execution Vulnerability (Jun 12 2007)
- ZDI-07-036: Arris Cadant C3 CMTS Remote DoS Vulnerability (Jun 12 2007)
- ZDI-07-034: CA Multiple Product AV Engine CAB Filename Parsing Stack Overflow Vulnerability (Jun 05 2007)
- ZDI-07-035: CA Multiple Product AV Engine CAB Header Parsing Stack Overflow Vulnerability (Jun 05 2007)