Bugtraq: by thread

• RSS Feed
•  About List
•  All Lists

Previous period

Next period

485 messages starting Mar 01 07 and ending Mar 31 07
Date index | Thread index | Author index

• Full disclosure: Directory Transversal and Arbitrary Code Execution Vulnerability in SQL-Ledger and LedgerSMB Chris Travers (Mar 01)
• [ MDKSA-2007:051 ] - Updated snort packages fix DoS vulnerability security (Mar 01)
• [USN-416-2] nvidia-glx-config regression Martin Pitt (Mar 01)
• Comodo Bypassing settings protection using magic pipe Vulnerability Matousec - Transparent security Research (Mar 01)
• Angel LMS 7.1 - Remote SQL Injection Guns (Mar 01)
  • Re: Angel LMS 7.1 - Remote SQL Injection str0ke (Mar 01)
• Serendipity unauthenticated SQL-Injection SaMuschie (Mar 01)
• Built2Go v.1.0 => ( news.php & rating.php ) Cross Site Scripting the_3dit0r (Mar 01)
• Re: Re: MSIE7 browser entrapment vulnerability (probably Firefox, too) sithlordstorm (Mar 01)
• aWebNews v 1.1=>RFI mostafa_ragab (Mar 01)
• Re: ProFTPD 1.3.0/1.3.0a (mod_ctrls support) Local Buffer Overflow Exploit revenge (Mar 01)
• WB News Remote File Include in all versions mostafa_ragab (Mar 01)
• LayerOne 2007 - Call for Papers and Pre-Registration Layer One (Mar 01)
• aWebNews V 1.1 mostafa_ragab (Mar 01)
• Re: Xbox 360 Hypervisor Privilege Escalation Vulnerability jrgong420 (Mar 01)
  • <Possible follow-ups>
  • Re: Xbox 360 Hypervisor Privilege Escalation Vulnerability ron . kleinman (Mar 03)
  • RE: Xbox 360 Hypervisor Privilege Escalation Vulnerability Dr Joe (Mar 13)
  • Re: RE: Xbox 360 Hypervisor Privilege Escalation Vulnerability 5150sd (Mar 27)
• [ GLSA 200703-01 ] Snort: Remote execution of arbitrary code Raphael Marichez (Mar 02)
• [ GLSA 200703-02 ] SpamAssassin: Long URI Denial of Service Raphael Marichez (Mar 02)
• SPAW Editor PHP Edition RaeD Hasadya (Mar 02)
  • Re: SPAW Editor PHP Edition Steve Watt (Mar 03)
• [USN-428-2] Firefox regression Kees Cook (Mar 02)
• [ GLSA 200703-03 ] ClamAV: Denial of Service Raphael Marichez (Mar 02)
• vBulletin v3.6.5 admincp/index.php ( rss feed ) xss vuln. meto5757 (Mar 02)
• ZDI-07-008: Apache Tomcat JK Web Server Connector Long URL Stack Overflow Vulnerability zdi-disclosures (Mar 02)
• Woltlab Burning Board (wbb) 2.3.6 CSRF/XSS - 0day SaMuschie (Mar 02)
  • Re: Woltlab Burning Board (wbb) 2.3.6 CSRF/XSS - 0day MC Iglo (Mar 02)
• Re: Re: WordPress Search Function SQL-Injection none (Mar 02)
• iDefense Security Advisory 03.02.07: Kaspersky AntiVirus UPX File Decompression DoS Vulnerability iDefense Labs (Mar 02)
• Remote File Include In DBImageGallery RaeD Hasadya (Mar 02)
  • <Possible follow-ups>
  • Re: Remote File Include In DBImageGallery tg (Mar 07)
• Limited format string in Netrek 2.12.0 Luigi Auriemma (Mar 02)
• [ MDKSA-2007:050-1 ] - Updated Firefox packages fix multiple vulnerabilities security (Mar 03)
• WordPress source code compromised to enable remote code execution ifsecure (Mar 03)
• webSPELL <= 4.01.02 Remote PHP Code Execution Exploit gmdarkfig (Mar 03)
• [ GLSA 200703-04 ] Mozilla Firefox: Multiple vulnerabilities Raphael Marichez (Mar 03)
• rPSA-2007-0048-1 tcpdump rPath Update Announcements (Mar 03)
• Tyger Bug Tracking System Multiple Vulnerability corrado . liotta (Mar 03)
• BJ Webring XSS sn0oPy . team (Mar 03)
• Re: Evading the Norman SandBox Analyzer John Smith (Mar 03)
  • Re: Evading the Norman SandBox Analyzer Arne Vidstrom (Mar 03)
• rPSA-2007-0040-3 firefox thunderbird rPath Update Announcements (Mar 03)
• [Fwd: Re: Angel LMS 7.1 - Remote SQL Injection] don bailey (Mar 03)
• Re: VMware Workstation multiple denial of service and isolation manipulation vulnerabilities emptysands (Mar 03)
• ERRATA: [ GLSA 200703-01 ] Snort: Remote execution of arbitrary code Raphael Marichez (Mar 03)
• [ GLSA 200703-05 ] Mozilla Suite: Multiple vulnerabilities Raphael Marichez (Mar 03)
• [ GLSA 200703-06 ] AMD64 x86 emulation Qt library: Integer overflow Raphael Marichez (Mar 05)
• [SECURITY] [DSA 1262-1] New gnomemeeting packages fix arbitrary code execution Moritz Muehlenhoff (Mar 05)
• Show Password Admin In Script Uploadscript RaeD Hasadya (Mar 05)
• ePortfolio version 1.0 Java Multiple Input Validation Vulnerabilities Stefan Friedli (Mar 05)
• Konqueror DoS Via JavaScript Read Of FTP Iframe mark (Mar 05)
• Extending JavaScript Portscanning to Include Banner Grabbing mark (Mar 05)
  • Re: Extending JavaScript Portscanning to Include Banner Grabbing Vincent Archer (Mar 06)
• XXS in script Phorum RaeD Hasadya (Mar 05)
  • Re: XXS in script Phorum Maurice Makaay (Mar 06)
• Sava's GuestBook Multiple Vulnerabilities bugtraq (Mar 05)
• LI-Guestbook SQL Injection Vulnerability bugtraq (Mar 05)
• Arbitrary file disclosure vulnerability in rrdbrowse <= 1.6 Sebastian Wolfgarten (Mar 05)
• HITBSecConf2007 - Malaysia: Call for Papers now Open Praburaajan (Mar 05)
• XSS Remote In vCard 2.6 (c)2002 RaeD Hasadya (Mar 05)
• Wordpress <= v2.1.0 ciri (Mar 05)
  • RE: Wordpress <= v2.1.0 McCarty, Eric C. (Mar 05)
  • Re: Wordpress <= v2.1.0 vvitkov () intergenia de (Mar 06)
  • <Possible follow-ups>
  • Re: Re: Wordpress <= v2.1.0 ciri (Mar 07)
• DoS and code execution issue in LedgerSMB < 1.1.5 and SQL-Ledger < 2.6.25 Chris Travers (Mar 05)
• CORE-2007-0115: GnuPG and GnuPG clients unsigned data injection vulnerability CORE Security Technologies Advisories (Mar 05)
• iDefense Security Advisory 03.05.07: Apple QuickTime Color Table ID Heap Corruption Vulnerability iDefense Labs (Mar 05)
• Apple QuickTime Player Remote Heap Overflow Piotr Bania (Mar 06)
• Call for Participation Chaos Communication Camp 2007 fukami (Mar 06)
• Apple QuickTime udta ATOM Integer Overflow Sowhat (Mar 06)
• [security bulletin] HPSBUX02153 SSRT061181 rev.3 - HP-UX Running Firefox, Remote Unauthorized Access or Elevation of Privileges or Denial of Service (DoS) security-alert (Mar 06)
• [security bulletin] HPSBUX02195 SSRT061237 rev.1 - HP-UX Running Software Distributor (SD), Remote Denial of Service (DoS) security-alert (Mar 06)
• [Reversemode Advisory] Apple Quicktime Color ID remote heap corruption Reversemode (Mar 06)
• PHP <= 4.4.6 mssql_connect() & mssql_pconnect() local buffer overflow and safe_mode bypass retrog (Mar 06)
• Re: Tinyportal Shoutbox ichbin (Mar 06)
• rPSA-2007-0050-1 kernel rPath Update Announcements (Mar 06)
• [ GLSA 200703-07 ] STLport: Possible remote execution of arbitrary code Matthias Geerdsen (Mar 06)
• [USN-429-1] tcpdump vulnerability Kees Cook (Mar 06)
• [USN-430-1] mod_python vulnerability Kees Cook (Mar 06)
• [SECURITY] [DSA 1263-1] New clamav packages fix denial of service Moritz Muehlenhoff (Mar 07)
• [USN-431-1] Thunderbird vulnerabilities Kees Cook (Mar 07)
• [ MDKSA-2007:052 ] - Updated Thunderbird packages fix multiple vulnerabilities security (Mar 07)
• [ MDKSA-2007:053 ] - Updated util-linux packages address umount crash issue security (Mar 07)
• Re: Drake CMS v0.3.2 < = RFi Vulnerabilities legolas558 (Mar 07)
• iDefense Security Advisory 03.07.07: Ipswitch IMail Server 2006 Multiple ActiveX Control Buffer Overflow Vulnerabilities iDefense Labs (Mar 07)
• xss in phpmyadmin >=2.8.0 and < 2.10.0 alfa (Mar 07)
• Firekeeper - IDS for Firefox available Jan Wrobel (Mar 07)
  • Re: Firekeeper - IDS for Firefox available Jex (Mar 09)
    • Re: Firekeeper - IDS for Firefox available Bob Beck (Mar 10)
      • Re: Firekeeper - IDS for Firefox available Jan Wrobel (Mar 13)
      • Re: Firekeeper - IDS for Firefox available Bob Beck (Mar 13)
      • Re: Firekeeper - IDS for Firefox available Gadi Evron (Mar 15)
    • Re: Firekeeper - IDS for Firefox available Jan Wrobel (Mar 13)
  • <Possible follow-ups>
  • Re: Re: Firekeeper - IDS for Firefox available irondell (Mar 13)
• month of PHP bugs, secondary message? Gadi Evron (Mar 07)
  • Re: [Full-disclosure] month of PHP bugs, secondary message? Marcus Meissner (Mar 07)
• RPS 6.2 SQL Injection Exploit s0cratex (Mar 07)
• ZDI-07-009: Novell Netmail WebAdmin Buffer Overflow Vulnerability zdi-disclosures (Mar 07)
• ZDI-07-010: Apple Quicktime UDTA Parsing Heap Overflow Vulnerability zdi-disclosures (Mar 07)
• [SECURITY] [DSA 1264-1] New php4 packages fix several vulnerabilities Moritz Muehlenhoff (Mar 07)
• FLSA - foresight linux security announcements Jonathan Smith (Mar 07)
  • Message not available
    • FLEA-2007-0001-1: firefox Foresight Linux Essential Announcement Service (Mar 22)
  • Message not available
    • FLEA-2007-0002-1: inkscape Foresight Linux Essential Announcement Service (Mar 24)
  • Message not available
    • FLEA-2007-0003-1: cups Foresight Linux Essential Announcement Service (Mar 26)
  • Message not available
    • FLEA-2007-0004-1: openoffice.org Foresight Linux Essential Announcement Service (Mar 29)
  • Message not available
    • FLEA-2007-0005-1: slocate Foresight Linux Essential Announcement Service (Mar 29)
• Lazarus Guestbook (admin.php)Remote File Include Expliot c_r_ck (Mar 07)
  • Re: [Bogus] Lazarus Guestbook (admin.php)Remote File Include Expliot - Mailinglists Address (Mar 08)
• Buffer-overflow in Conquest client 8.2a (svn 691) Luigi Auriemma (Mar 07)
• rPSA-2007-0051-1 mod_python rPath Update Announcements (Mar 07)
• rPSA-2007-0052-1 kdelibs rPath Update Announcements (Mar 07)
• dynaliens v2.0/v2.1 bypass admin authentification + XSS sn0oPy . team (Mar 08)
• Black Hat USA CFP Now Open! Jeff Moss (Mar 08)
• Ann: Backtrack 2.0 released Thierry Zoller (Mar 08)
• [USN-424-2] PHP regression Kees Cook (Mar 08)
• [ MDKSA-2007:057 ] - Updated xine-lib packages to address buffer overflow vulnerability security (Mar 08)
• [ MDKSA-2007:056 ] - Updated tcpdump packages address off-by-one overflow security (Mar 08)
• PHP 4.4.6 crack_opendict() local buffer overflow poc exploit retrog (Mar 08)
• [ MDKSA-2007:055 ] - Updated mplayer packages to address buffer overflow vulnerability security (Mar 08)
• Word Press Sensitive Directory exposure (SQL) r00t2000 (Mar 08)
  • Re: Word Press Sensitive Directory exposure (SQL) Francesco Laurita (Mar 09)
  • <Possible follow-ups>
  • Re: Word Press Sensitive Directory exposure (SQL) none (Mar 08)
• [ MDKSA-2007:054 ] - Updated kdelibs packages to address DoS issue in KDE Javascript security (Mar 08)
• [USN-432-1] GnuPG vulnerability Kees Cook (Mar 08)
• Microsoft Windows Vista/2003/XP/2000 file management security issues 3APA3A (Mar 08)
  • RE: Microsoft Windows Vista/2003/XP/2000 file management security issues M. Burnett (Mar 09)
  • RE: Microsoft Windows Vista/2003/XP/2000 file management security issues Roger A. Grimes (Mar 09)
    • Message not available
      • RE: Re[2]: Microsoft Windows Vista/2003/XP/2000 file management security issues Roger A. Grimes (Mar 09)
      • Re: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues Tim (Mar 09)
      • RE: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues Roger A. Grimes (Mar 09)
      • RE: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues Laundrup, Jens (Mar 09)
      • Re[2]: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues 3APA3A (Mar 09)
      • Re: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues Tim (Mar 09)
      • Message not available
      • Re: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues Thor (Hammer of God) (Mar 10)
      • RE: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues Roger A. Grimes (Mar 10)
      • Message not available
      • Re: Re[2]: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues Thor (Hammer of God) (Mar 12)
      • Re[2]: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues 3APA3A (Mar 12)
      • RE: Re[2]: Microsoft Windows Vista/2003/XP/2000 file management security issues M. Burnett (Mar 09)
      • RE: Re[2]: Microsoft Windows Vista/2003/XP/2000 file management security issues Roger A. Grimes (Mar 09)
      • Message not available
      • RE: Re[4]: Microsoft Windows Vista/2003/XP/2000 file management security issues Roger A. Grimes (Mar 09)
      • Message not available
      • Re: Re[2]: Microsoft Windows Vista/2003/XP/2000 file management security issues Thor (Hammer of God) (Mar 09)
  • <Possible follow-ups>
  • Re: Microsoft Windows Vista/2003/XP/2000 file management security issues Steven M. Christey (Mar 13)
    • Re[2]: Microsoft Windows Vista/2003/XP/2000 file management security issues 3APA3A (Mar 13)
      • Re: Microsoft Windows Vista/2003/XP/2000 file management security issues Daniel Hazelton (Mar 13)
      • Re[2]: Microsoft Windows Vista/2003/XP/2000 file management security issues 3APA3A (Mar 15)
      • Re: Microsoft Windows Vista/2003/XP/2000 file management security issues Paweł Goleń (Mar 13)
      • Re[2]: Microsoft Windows Vista/2003/XP/2000 file management security issues 3APA3A (Mar 14)
    • Re: Microsoft Windows Vista/2003/XP/2000 file management security issues Richard Huxton (Mar 13)
• PHP import_request_variables() arbitrary variable overwrite Stefano Di Paola (Mar 08)
• [ECHO_ADV_67$2007] WEBO (Web Organizer) <= 1.0 (baseDir) Remote File Inclusion Vulnerability erdc (Mar 09)
• [ MDKSA-2007:059 ] - Updated gnupg packages provide enhanced forgery detection security (Mar 09)
• Buffer Overflow in Linux Drivers for Omnikey CardMan 4040 (CVE-2007-0005) Daniel Roethlisberger (Mar 09)
• [USN-434-1] Ekiga vulnerability Kees Cook (Mar 09)
• TSLSA-2007-0009 - multi Trustix Security Advisor (Mar 09)
• MS07-016 FTP Response DOS PoC Mathew Rowley (Mar 09)
• XSS In Script deviantART RaeD Hasadya (Mar 09)
• Re: Digital Armaments Security Advisory 20.01.2007: Grsecurity Kernel PaX Vulnerability hugo (Mar 09)
• Php Nuke POST XSS on steroids ascii (Mar 09)
  • Re: Php Nuke POST XSS on steroids Paul Laudanski (Mar 12)
    • Re: Php Nuke POST XSS on steroids ascii (Mar 12)
      • Re: Php Nuke POST XSS on steroids Paul Laudanski (Mar 13)
• SyScan'07 - Call for Paper - NEW UPDATES organiser () syscan org (Mar 09)
• Sql injection in WordPress 2.1.2 Omid (Mar 09)
  • Re: Sql injection in WordPress 2.1.2 steven (Mar 09)
• Remote File Include In Script copyright (c) James Coyle; JCcorp RaeD Hasadya (Mar 09)
• [CAID 35145]: CA eTrust Admin Privilege Escalation Vulnerability Williams, James K (Mar 09)
• Re: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues KJKHyperion (Mar 09)
• Remote File Include In Script Coppermine Photo Gallery RaeD Hasadya (Mar 09)
• SecurityFocus is turning seven. What's next? - OFFTOPIC - Please excuse the X-Post Alfred Huger (Mar 09)
• SEC Consult SA-20070309-0 :: MySQL 5 Single Row Subselect Denial of Service research (Mar 09)
• HC NEWSSYSTEM 1.0-4 (index.php "ID") Blind SQL Injection UniquE (Mar 09)
• [ MDKSA-2007:058 ] - Updated ekiga packages fix string vulnerabilities. security (Mar 09)
• [ MDKSA-2007:060 ] - Updated kernel packages fix multiple vulnerabilities and bugs security (Mar 09)
• WordPress XSS under function wp_title() g30rg3_x (Mar 09)
• Security bypass vulnerability in LedgerSMB and SQL-Ledger (fixes released today) Chris Travers (Mar 09)
• [ GLSA 200703-08 ] SeaMonkey: Multiple vulnerabilities Raphael Marichez (Mar 09)
• wwwpaintboar(newsfile) Remote File Inclusion Vulnerability saw_xyz (Mar 09)
• [USN-433-1] Xine vulnerability Kees Cook (Mar 09)
• [ GLSA 200703-09 ] Smb4K: Multiple vulnerabilities Raphael Marichez (Mar 09)
• [Argeniss] Practical 10 minutes security audit: Oracle Case (Paper) Cesar (Mar 10)
• PHP-Nuke <= 8.0 Cookie Manipulation (lang) programmer (Mar 10)
  • Re: PHP-Nuke <= 8.0 Cookie Manipulation (lang) Paul Laudanski (Mar 12)
• Remote File Include In Script Premod SubDog 2 RaeD Hasadya (Mar 10)
• Remote File Include In Script SoftNews Media Group RaeD Hasadya (Mar 10)
• F&#305;st&#305;q Duyuru Scripti Remote Sql &#304;njection Exploit crazy_king (Mar 10)
• WWWboard password disclosure r00t2000 (Mar 10)
• Grayscale <= 0.8.0 Multiple Vulnerabilities omnipresent (Mar 10)
• Pre-open files attack agains locked file 3APA3A (Mar 10)
• [ECHO_ADV_68$2007] PMB Services <= 3.0.13 Multiple Remote File Inclusion Vulnerability erdc (Mar 10)
• NukeSentinel <= 2.5.06 SQL Injection (mysql >= 4.0.24) Exploit gmdarkfig (Mar 10)
• Re: [Full-disclosure] PHP import_request_variables() arbitrary variable overwrite Stefan Esser (Mar 10)
  • Re: [Full-disclosure] PHP import_request_variables() arbitrary variable overwrite Stefano Di Paola (Mar 10)
    • Re: [Full-disclosure] PHP import_request_variables() arbitrary variable overwrite Stefan Esser (Mar 10)
  • Re: [Full-disclosure] PHP import_request_variables() arbitrary variable overwrite ascii (Mar 10)
  • <Possible follow-ups>
  • Re: [Full-disclosure] PHP import_request_variables() arbitrary variable overwrite Steven M. Christey (Mar 13)
  • Re: Re: [Full-disclosure] PHP import_request_variables() arbitrary variable overwrite retrog (Mar 14)
• Re: PHP Classifieds 7.1 - Remote File Include Vulnerability support (Mar 10)
• [ GLSA 200703-10 ] KHTML: Cross-site scripting (XSS) vulnerability Raphael Marichez (Mar 10)
• [SECURITY] [DSA 1265-1] New Mozilla packages fix several vulnerabilities Martin Schulze (Mar 10)
• Remote File Include In Script PHP Photo Album RaeD Hasadya (Mar 12)
  • <Possible follow-ups>
  • Re: Remote File Include In Script PHP Photo Album Steven M. Christey (Mar 14)
• [security bulletin] HPSBUX02129 SSRT061149 rev.2 - HP-UX running SLP, Remote Unauthorized Access security-alert (Mar 12)
• Remote File Include In Script moodle-1.7.1 RaeD Hasadya (Mar 12)
  • <Possible follow-ups>
  • Re: Remote File Include In Script moodle-1.7.1 martin (Mar 13)
• Remote File Include In ClipShare.v1.5.3 RaeD Hasadya (Mar 12)
• Wiki Remote Authentication Bypass Vulnerability DoZ (Mar 12)
  • Re: Wiki Remote Authentication Bypass Vulnerability Matt D. Harris (Mar 12)
• AssetMan 2.4a <= (download_pdf.php) Remote File Disclosure Vulnerability BorN To K!LL BorN To K!LL (Mar 12)
• Fantastico In all Version Cpanel 10.x <= local File Include z3r0 z3r0.2.z3r0 (Mar 12)
• GuppY v4.0 remote del files/index sn0oPy . team (Mar 12)
• RIM BlackBerry Pearl 8100 Browser DoS clappymonkey (Mar 12)
  • <Possible follow-ups>
  • Re: RIM BlackBerry Pearl 8100 Browser DoS anon (Mar 13)
  • Re: Re: RIM BlackBerry Pearl 8100 Browser DoS clappymonkey (Mar 13)
• [security bulletin] HPSBUX02196 SSRT071318 rev.2 - HP-UX Java (JRE and JDK) Remote Execution of Arbitrary Code security-alert (Mar 12)
• [USN-435-1] Xine vulnerability Kees Cook (Mar 13)
• [USN-436-1] KTorrent vulnerabilities Kees Cook (Mar 13)
• [ECHO_ADV_69$2007] OES (Open Educational System) 0.1beta Remote File Inclusion Vulnerability erdc (Mar 13)
• Iframe-Cash/Iframe-Dollars Adware bundle...oooh... my ....god.. Thierry Zoller (Mar 13)
  • Re: Iframe-Cash/Iframe-Dollars Adware bundle...oooh... my ....god.. Gadi Evron (Mar 13)
  • Re: Iframe-Cash/Iframe-Dollars Adware bundle...oooh... my ....god.. Reversemode (Mar 13)
    • Re: Iframe-Cash/Iframe-Dollars Adware bundle...oooh... my ....god.. Nicolas RUFF (Mar 15)
• Call for Papers: DeepSec IDSC 2007 Europe/Vienna: 20-23 Nov 2007 Paul Böhm (Mar 13)
• Weekly Drawing Contest <= (check_vote.php) Remote File Disclosure Vuln BorN To K!LL BorN To K!LL (Mar 13)
  • Re: Weekly Drawing Contest <= (check_vote.php) Remote File Disclosure Vuln Mailinglists Address (Mar 13)
• [ECHO_ADV_73$2007] MySQL Commander <= 2.7 (home) Remote File Inclusion Vulnerability erdc (Mar 13)
• [USN-432-2] GnuPG2, GPGME vulnerability Kees Cook (Mar 13)
• JGBBS 3.0beta1 Version Search.ASP "Author" SQL Injection Exploit UniquE (Mar 13)
• [ MDKSA-2007:061 ] - Updated mplayer packages to address buffer overflow vulnerability security (Mar 13)
• [ MDKSA-2007:062 ] - Updated xine-lib packages to address buffer overflow vulnerability security (Mar 13)
• CORE-2007-0219: OpenBSD's IPv6 mbufs remote kernel buffer overflow CORE Security Technologies Advisories (Mar 13)
• [ GLSA 200703-11 ] Amarok: User-assisted remote execution of arbitrary code Raphael Marichez (Mar 14)
• n.runs-SA-2007.006 - PHProjekt 5.2.0 - Privilege escalation security (Mar 14)
• n.runs-SA-2007.005 - PHProjekt 5.2.0 - Cross Site Request Forgery security (Mar 14)
• [SECURITY] [DSA 1266-1] New gnupg packages fix signature forgery Moritz Muehlenhoff (Mar 14)
• n.runs-SA-2007.004 - PHProjekt 5.2.0 - Cross Site Scripting and Filter Evasion security (Mar 14)
• n.runs-SA-2007.003 - PHProjekt 5.2.0 - SQL Injection security (Mar 14)
• [ GLSA 200703-12 ] SILC Server: Denial of Service Matthias Geerdsen (Mar 14)
• SEC Consult SA-20070314-0 :: Apache HTTP Server / Tomcat directory traversal David Matscheko (Mar 14)
• SymEvent Driver Local Access System Denial of Service Matousec - Transparent security Research (Mar 14)
• New report on Windows Vista network attack surface Jim Hoagland (Mar 14)
• Fwd: Python 2.5 (Modules/zlib) minigzip local buffer overflow vulnerability starcadi starcadi (Mar 14)
• iDefense Security Advisory 03.14.07: Trend Micro Antivirus UPX Parsing Kernel Divide by Zero Vulnerability iDefense Labs (Mar 14)
• [ECHO_ADV_71$2007] AMP v3.2 (base_path) Remote File Inclusion Vulnerability erdc (Mar 14)
• [ECHO_ADV_72$2007] CARE2X (root_path) Remote File Inclusion Vulnerability erdc (Mar 14)
• [ECHO_ADV_74$2007] WebCreator <= 0.2.6-rc3 (moddir) Remote File Inclusion Vulnerability erdc (Mar 14)
• WSN Guest 1.21 Version Comments.PHP "ID" SQL Injection Exploit UniquE (Mar 14)
• Phishing using IE7 local resource vulnerability avivra (Mar 14)
  • <Possible follow-ups>
  • Re: Phishing using IE7 local resource vulnerability robert (Mar 15)
    • RE: Phishing using IE7 local resource vulnerability avivra (Mar 15)
• [ GLSA 200703-13 ] SSH Communications Security's Secure Shell Server: SFTP privilege escalation Raphael Marichez (Mar 14)
• Woltab Burning Board SQL Injection usergroups.php x666 (Mar 14)
• Horde 3.1.4 (RC1) fixes XSS issue Moritz Naumann (Mar 15)
• [ECHO_ADV_76$2007] Company WebSite Builder PRO (INCLUDE_PATH) Remote File Inclusion Vulnerability erdc (Mar 15)
• IBM Rational ClearQuest Web - Cross Site Scripting james (Mar 15)
• [ECHO_ADV_75$2007] Groupit 2.00b5 (c_basepath) Remote File Inclusion Vulnerability erdc (Mar 15)
• Orion-Blog v2.0 Version Remote Privilege Escalation Exploit UniquE (Mar 15)
• Norton Insufficient validation of 'SymTDI' driver input buffer Matousec - Transparent security Research (Mar 15)
• XSS vulnerability in the online help system of several Cisco products cassio (Mar 15)
  • Re: XSS vulnerability in the online help system of several Cisco products Eloy Paris (Mar 15)
• Remote File Inclusion in ViperWeb asamad (Mar 15)
• PHP <= 4.4.6 ibase_connect() local buffer overflow retrog (Mar 15)
• Horde IMP Webmail Client version H3 (4.1.4) fixes multiple XSS issues Moritz Naumann (Mar 15)
• iDefense Security Advisory 03.15.07: Horde Project Cleanup Script Arbitrary File Deletion Vulnerability iDefense Labs (Mar 15)
• QFTP (LIBFtp 3.1-1) (command line) sprintf() local buffer overflow starcadi starcadi (Mar 15)
• - Call for chapters - Handbook of Research on Digital Anti-forensics and In-security Governance Jeimy Cano (Mar 15)
• LIBFtp 5.0 (sprintf(), strcpy()) Multiple local buffer overflow starcadi starcadi (Mar 15)
• WebCalendar v0.9.45 (13 Dec 2004) (login.php) Remote File include drackanz (Mar 15)
  • <Possible follow-ups>
  • Re: WebCalendar v0.9.45 (13 Dec 2004) (login.php) Remote File include craig (Mar 20)
• vbulletin admincp sql injection disfigure (Mar 15)
• PHP Point Of Sale for osCommerce <= (index.php) Remote File Include Vuln BorN To K!LL BorN To K!LL (Mar 15)
• Absolute Image Gallery Gallery.ASP (categoryid) MSSQL Injection Exploit UniquE (Mar 15)
• Re: [Full-disclosure] Woltab Burning Board SQL Injection usergroups.php Bastian Ahrens (Mar 16)
• DirectAdmin Cross Site Scripting XSS Mandr4ke . root (Mar 16)
• [SECURITY] [DSA 1267-1] New webcalendar packages fix remote file inclusion Moritz Muehlenhoff (Mar 16)
• MS07-012 Not Fixed Greg Sinclair (Mar 16)
• [CAID 34817, 35058, 35158, 35159]: CA BrightStor ARCserve Backup Tape Engine and Portmapper Vulnerabilities Williams, James K (Mar 16)
• Rot 13 <= (enkrypt.php) Remote File Disclosure Vulnerability BorN To K!LL BorN To K!LL (Mar 16)
• Oracle Portal PORTAL.wwv_main.render_warning_screen XSS Sea Shark (Mar 16)
• RE: [VulnWatch] iDefense Security Advisory 03.14.07: Trend Micro Antivirus UPX Parsing Kernel Divide by Zero Vulnerability Topolski, Leo (Mar 16)
• Re: fx-APP Version 0.0.8.1 osdesk (Mar 16)
• Call For Papers - IT Underground Dublin Marcin Tkaczyk (Mar 16)
  • <Possible follow-ups>
  • Call For Papers - IT Underground Dublin marcin . tkaczyk (Mar 20)
• April, 2007 is the "Month of Myspace Bugs" mondo_armando (Mar 16)
• iDefense Security Advisory 03.16.07: Multiple Vendor libwpd Multiple Buffer Overflow Vulnerabilities iDefense Labs (Mar 16)
• Your Opinion Mark Litchfield (Mar 16)
  • Re: Your Opinion bugtraq (Mar 16)
  • Re: Your Opinion Jonathan Glass (GM) (Mar 16)
  • RE: Your Opinion Mario Contestabile (Mar 16)
  • Re: Your Opinion Crispin Cowan (Mar 16)
  • Re: Your Opinion William A. Rowe, Jr. (Mar 16)
  • RE: Your Opinion Scott Blake (Mar 16)
  • Re: Your Opinion The Fungi (Mar 17)
  • Re: Your Opinion Casper . Dik (Mar 17)
    • RE: Your Opinion Jim Harrison (Mar 20)
  • RE: Your Opinion Jim Harrison (Mar 17)
    • RE: Your Opinion Alex Eckelberry (Mar 19)
    • Re: Your Opinion Andrew Kramer (Mar 20)
  • Re: Your Opinion Forrest J. Cavalier III (Mar 19)
  • Re: Your Opinion Paul Stepowski (Mar 20)
  • <Possible follow-ups>
  • Re: Your Opinion Neil Dickey (Mar 16)
    • Re: Your Opinion Jack Lloyd (Mar 20)
  • RE: Your Opinion jay.tomas (Mar 20)
    • RE: Your Opinion Jim Harrison (Mar 20)
  • RE: Your Opinion Neale Green (Mar 21)
• Particle Blogger All Version Post.PHP (PostID) Remote SQL Injection Exploit UniquE (Mar 16)
• rPSA-2007-0056-1 gnupg rPath Update Announcements (Mar 16)
• rPSA-2007-0057-1 libwpd rPath Update Announcements (Mar 16)
• [ MDKSA-2007:063 ] - Updated libwpd packages to address heap overflow vulnerabilities security (Mar 16)
• [ MDKSA-2007:064 ] - Updated openoffice.org packages to address libwpd heap overflow vulnerabilities security (Mar 16)
• Re: [Bogus] Lazarus Guestbook (admin.php)Remote File Include Expliot Steven M. Christey (Mar 16)
• [NETRAGARD-20070316 SECURITY ADVISORY][FrontBase Database <= 4.2.7 ALL PLATFORMS][REMOTE BUFFER OVERFLOW CONDITION][LEVEL: EASY][RISK:MEDIUM] Netragard Security Advisories (Mar 16)
• [ GLSA 200703-14 ] Asterisk: SIP Denial of Service Raphael Marichez (Mar 17)
• [ GLSA 200703-15 ] PostgreSQL: Multiple vulnerabilities Raphael Marichez (Mar 17)
• [ GLSA 200703-16 ] Apache JK Tomcat Connector: Remote execution of arbitrary code Raphael Marichez (Mar 17)
• Bypassing Mcafee Entreprise Password Protection thesinoda (Mar 17)
  • Re: Bypassing Mcafee Entreprise Password Protection 3APA3A (Mar 17)
    • RE: Bypassing Mcafee Entreprise Password Protection Rogheden Anders (Mar 19)
• CLBOX <= (signup.php header) Remote File Include Vulnerability BorN To K!LL BorN To K!LL (Mar 17)
• Your Opinion + Mark Litchfield (Mar 17)
  • Re: Your Opinion + Alex Belits (Mar 19)
  • <Possible follow-ups>
  • Re: Your Opinion + Thor (Hammer of God) (Mar 20)
• Rhapsody IRC 0.28b (NICK) Multiple fs and bof vulnerability starcadi (Mar 17)
• [SECURITY] [DSA 1268-1] New libwpd packages fix arbitrary code execution Martin Schulze (Mar 17)
• Full Disclosure: Arbitrary execution vulnerability in SQL-Ledger and LedgerSMB Chris Travers (Mar 19)
• Net Portal Dynamic System (NPDS) <= 5.10 Remote Code Execution 0day gmdarkfig (Mar 19)
• [SECURITY] [DSA 1269-1] New lookup-el packages fix insecure temporary file Martin Schulze (Mar 19)
• MetaForum <= 0.513 Beta - Remote file upload Vulnerability aeroxteam------nospam----- (Mar 19)
• [ GLSA 200703-17 ] ulogd: Remote execution of arbitrary code Raphael Marichez (Mar 19)
• [ GLSA 200703-18 ] Mozilla Thunderbird: Multiple vulnerabilities Raphael Marichez (Mar 19)
• [ GLSA 200703-19 ] LTSP: Authentication bypass in included LibVNCServer code Raphael Marichez (Mar 19)
• [ GLSA 200703-20 ] LSAT: Insecure temporary file creation Raphael Marichez (Mar 19)
• Unclassified NewsBoard 1.6.3 multiples logs disclosure none (Mar 19)
• Layered Defense Research Advisory: F-Secure Anti-Virus Client Security 6.02 Format String Vulnerability dh (Mar 19)
• CCleaguePro_V1.0.1RC1 Directory Traversal Vulnerability snakeapollon (Mar 19)
  • Re: CCleaguePro_V1.0.1RC1 Directory Traversal Vulnerability str0ke (Mar 19)
• phpx 3.5.15 multiples vulnerabilities none (Mar 19)
• Conflict of Interest - My summary Mark Litchfield (Mar 19)
  • Re: Conflict of Interest - My summary crazy frog crazy frog (Mar 20)
• [Reversemode Advisory] Microsoft Windows Ndistapi.sys IRQL escalation Reversemode (Mar 19)
• w-agora version 4.2.1 Multiple Path Disclosure Vulnerabilities jesper . jurcenoks (Mar 19)
• w-agora version 4.2.1 Information Disclosure Vulnerability jesper . jurcenoks (Mar 19)
• [USN-437-1] libwpd vulnerability Kees Cook (Mar 19)
• ZynOS v3.40 One packet killer Joxean Koret (Mar 19)
• Oracle 10g Dynamic Monitoring Services XSS /servlet/Spy Sea Shark (Mar 20)
• Web Wiz Forums 8.05 (MySQL version) SQL Injection Ivan Fratric (Mar 20)
• Advisory - Redirection Vulnerability in wp-login.php. Metaeye SG (Mar 20)
• w-agora [multiples file upload,xss,full path disclosure,error sql] none (Mar 20)
• Microsoft coverup ? Stolen Xbox live accounts list of known victims - Please Help Kevin Finisterre (lists) (Mar 20)
• Helix Server heap overflow research (Mar 20)
• [SECURITY] [DSA 1271-1] New openafs packages fix remote privilege escalation bug Noah Meyerhans (Mar 20)
• Linksys WAG200G - Information disclosure dniggebrugge (Mar 20)
  • Re: Linksys WAG200G - Information disclosure Shawn Merdinger (Mar 20)
  • Re: Linksys WAG200G - Information disclosure Bartłomiej Ochman (Mar 26)
• [SECURITY] [DSA 1270-1] New OpenOffice.org packages fix several vulnerabilities Martin Schulze (Mar 20)
• [ GLSA 200703-22 ] Mozilla Network Security Service: Remote execution of arbitrary code Raphael Marichez (Mar 20)
• [ GLSA 200703-23 ] WordPress: Multiple vulnerabilities Raphael Marichez (Mar 20)
• [ GLSA 200703-21 ] PHP: Multiple vulnerabilities Raphael Marichez (Mar 20)
• [ MDKSA-2007:065 ] - Updated nas packages address multiple vulnerabilities security (Mar 21)
• [ MDKSA-2007:066 ] - Updated OpenAFS packages address vulnerability security (Mar 21)
• [USN-438-1] Inkscape vulnerability Kees Cook (Mar 21)
• Secunia Research: InterActual Player / CinePlayer IASystemInfo.dll ActiveX Control Buffer Overflow Secunia Research (Mar 21)
• Secunia Research: Evolution Shared Memo Categories Format String Vulnerability Secunia Research (Mar 21)
• Secunia Research: XMMS Integer Overflow and Underflow Vulnerabilities Secunia Research (Mar 21)
• [security bulletin] HPSBUX02156 SSRT061236 rev.2 - HP-UX Running Thunderbird, Remote Unauthorized Access or Elevation of Privileges or Denial of Service (DoS) security-alert (Mar 21)
• HPSBGN02189 SSRT071297 rev.2 - ServiceGuard for Linux, Remote Unauthorized Access security-alert (Mar 21)
• Two new DoS Vulnerabilities in Asterisk Fixed Matt Riddell (NZ) (Mar 21)
• **SubHub v2.3.0** anon (Mar 22)
  • <Possible follow-ups>
  • Re: **SubHub v2.3.0** webmaster (Mar 26)
• [ECHO_ADV_77$2007] Study planner (Studiewijzer) <= 0.15 Remote File Inclusion Vulnerability erdc (Mar 22)
• CFP for RAID 2007: Extended due date for papers: April 8th jeffh (Mar 22)
• [USN-439-1] file vulnerability Kees Cook (Mar 22)
• [USN-440-1] MySQL vulnerability Kees Cook (Mar 22)
• rPSA-2007-0059-1 file rPath Update Announcements (Mar 22)
• ManageEngine Firewall Analyzer arbitrary file disclosure to authorized user yearsilent (Mar 22)
  • <Possible follow-ups>
  • Re: ManageEngine Firewall Analyzer arbitrary file disclosure to authorized user support (Mar 29)
  • Re: ManageEngine Firewall Analyzer arbitrary file disclosure to authorized user support (Mar 30)
• Remote File Incl ude In copyrigh t © James Coyle; JCcorp RaeD Hasadya (Mar 22)
• Remote File Include In Coppermine Photo Gallery RaeD Hasadya (Mar 22)
• [ MDKSA-2007:067 ] - Updated file packages fix heap-based buffer overflow vulnerability security (Mar 22)
• [NB07-22] Multiple vulnerabilities in NETxEIB OPC server Lluis Mora (Mar 22)
• [NB07-17] Multiple vulnerabilities in Takebishi Electric DeviceXplorer SYSMAC OPC server Lluis Mora (Mar 22)
• [NB07-07] Multiple vulnerabilities in Takebishi Electric DeviceXplorer HIDIC OPC server Lluis Mora (Mar 22)
• [NB07-08] Multiple vulnerabilities in Takebishi Electric DeviceXplorer MELSEC OPC server Lluis Mora (Mar 22)
• [SECURITY] [DSA 1272-1] New tcpdump packages fix denial of service Moritz Muehlenhoff (Mar 22)
• [NB07-09] Multiple vulnerabilities in Takebishi Electric DeviceXplorer FA-M3 OPC server Lluis Mora (Mar 22)
• [NB07-10] Multiple vulnerabilities in Takebishi Electric DeviceXplorer MODBUS OPC server Lluis Mora (Mar 22)
• [ MDKSA-2007:068 ] - Updated squid packages fix DoS vulnerability security (Mar 22)
• CRLF injection in PHP ftp function fangxiaodun (Mar 23)
• [ MDKSA-2007:069 ] - Updated inkscape packages to format string vulnerability security (Mar 23)
• iDefense Security Advisory 03.23.07: DataRescue IDA Pro Remote Debugger Server Authentication Bypass Vulnerability iDefense Labs (Mar 23)
• iDefense Security Advisory 03.23.07: Sun Java System Directory Server 5.2 Uninitialized Pointer Cleanup Design Error Vulnerability iDefense Labs (Mar 23)
• Joomla com_joomlaboard 1.1.x Branch (sbp) Multiple Remote File Include Vulnerabi Cold - Zero (Mar 23)
• File Upload System V1.0 (AD_BODY_TEMP) multiple file include ngevedBangetAsli (Mar 24)
• Remote File Include In phpBB-2.0.19 RaeD Hasadya (Mar 24)
  • BOGUS: Remote File Include In phpBB-2.0.19 Cornelius Riemenschneider (Mar 26)
  • <Possible follow-ups>
  • Re: Remote File Include In phpBB-2.0.19 neothermic (Mar 26)
• CcCounter 2.0 cross-site scripting vulnerability localexploit (Mar 26)
• Path Disclosure - Wordpress 2.1.2 lj (Mar 26)
  • Re: Path Disclosure - Wordpress 2.1.2 jm (Mar 27)
• Horde Webmail Multiple HTML Injection vulnerability DoZ (Mar 26)
  • Re: Horde Webmail Multiple HTML Injection vulnerability Jan Schneider (Mar 27)
• Mephisto blog is vulnerable to XSS Sergey Tikhonov (Mar 26)
• Fizzle : Firefox Extension Vulnerability CrYpTiC MauleR (Mar 26)
• Satel Lite for PhpNuke (Satellite.php) <= Local File Inclusion stormhacker (Mar 26)
• Re: [Full-disclosure] XSS at Aon.at, Austrian ISP Nikolay Kichukov (Mar 26)
• Multiple XSS in IronMail Javier Olascoaga (Mar 26)
• PHP 5.2.1 with PECL phpDOC local buffer overflow retrog (Mar 26)
• Playstation 3 "Remote Play" Remote DoS Exploit mak0b (Mar 26)
• Libero.it (italian ISP) XSS vulnerability rosario . valotta (Mar 26)
• [USN-441-1] Squid vulnerability Kees Cook (Mar 26)
• [USN-442-1] Evolution vulnerability Kees Cook (Mar 26)
• [ GLSA 200703-24 ] mgv: Stack overflow in included gv code Raphael Marichez (Mar 26)
• Xoops All Version -Articles- Print.PHP (ID) Blind SQL Injection Exploit And PoC UniquE (Mar 27)
  • <Possible follow-ups>
  • Re: Xoops All Version -Articles- Print.PHP (ID) Blind SQL Injection Exploit And PoC andy (Mar 28)
• Metasploit Framework 3.0 RELEASED! H D Moore (Mar 27)
• [KAPDA::#64] - Flexbb Sql Injection alireza hassani (Mar 27)
• [ECHO_ADV_78$2007] C-Arbre <= 0.6PR7 (root_path) Remote File Inclusion Vulnerability erdc (Mar 27)
• [KDE Security Advisory] KDE ioslave PASV port scanning vulnerability Dirk Mueller (Mar 27)
• Yahoo! Messenger Auth Bypass Vulnerability kishor . tech (Mar 27)
• Linux Kernel DCCP Memory Disclosure Vulnerability Robert Święcki (Mar 27)
  • Re: [Full-disclosure] Linux Kernel DCCP Memory Disclosure Vulnerability Robert Święcki (Mar 27)
• [ MDKSA-2007:070 ] - Updated evolution packages to address vulnerability security (Mar 27)
• Buffer Overflow in InterVetions' NaviCopa HTTP server 2.01 skillTube.com (Mar 27)
• [SECURITY] [DSA 1273-1] New nas packages fix multiple remote vulnerabilities Noah Meyerhans (Mar 27)
• [USN-443-1] Firefox vulnerability Kees Cook (Mar 27)
• [USN-444-1] OpenOffice.org vulnerabilities Kees Cook (Mar 28)
• [USN-445-1] XMMS vulnerabilities Kees Cook (Mar 28)
• Bypass phishing protection in Firefox / Opera zonafirefox (Mar 28)
  • <Possible follow-ups>
  • Re: Bypass phishing protection in Firefox / Opera Anonymous (Mar 29)
  • Re: Re: Bypass phishing protection in Firefox / Opera bob (Mar 29)
  • Re: Re: Bypass phishing protection in Firefox / Opera zonafirefox (Mar 29)
  • Re: Bypass phishing protection in Firefox / Opera Łukasz Pilorz (Mar 30)
• [USN-446-1] NAS vulnerabilities Kees Cook (Mar 28)
• [Full-Disclosure] Another XSS vulnerability in italian Libero.it Matteo G.P. Flora (Mar 28)
• iDefense Security Advisory 03.28.07: IBM Lotus Domino Web Access Cross Site Scripting Vulnerability iDefense Labs (Mar 28)
• iDefense Security Advisory 03.28.07: IBM Lotus Domino Server LDAP Request Invalid DN Message Heap Overflow Vulnerability iDefense Labs (Mar 28)
• ZDI-07-011: IBM Lotus Domino IMAP Server CRAM-MD5 Authentication Buffer Overflow Vulnerability zdi-disclosures (Mar 28)
• Re: SecurityVulns.com: Microsoft Visual C++ 8.0 standard library time functions invalid assertion DoS (Problem 3000). William A. Rowe, Jr. (Mar 28)
• Re: Multiple Vulnerabilities In osTicket eticket (Mar 28)
• Re: [SECURITY ALERT] osTicket bugs eticket (Mar 28)
• Cisco Security Advisory: Multiple Cisco Unified CallManager and Presence Server Denial of Service Vulnerabilities Cisco Systems Product Security Incident Response Team (Mar 28)
• Update: ViewCVS and ViewVC 'checkout view' content type fixation issue Moritz Naumann (Mar 28)
  • Re: [viewvc-users] Update: ViewCVS and ViewVC 'checkout view' content type fixation issue C. Michael Pilato (Mar 28)
• Denial of Service Vulnerabilities in TrueCrypt 4.3 Linux (re. bid 23180) Tim Rees (Mar 28)
• Corel Wordperfect Office X3 Stack Overflow jonny (Mar 28)
• [SECURITY] [DSA 1270-2] New OpenOffice.org packages fix several vulnerabilities Martin Schulze (Mar 28)
• Arbitrary Command Execution in DataDomain Administrator Interface Elliot Kendall (Mar 28)
• rPSA-2007-0061-1 inkscape rPath Update Announcements (Mar 29)
• Re: [VulnWatch] Microsoft Windows Vista Slideshow Unspecified Blue Screen Of Death Vulnerability 3APA3A (Mar 29)
• Xoops Module Friendfinder <= 3.3 (view.php id) BLIND SQL Injection Exploit ajannhwt (Mar 29)
• Advanced Login <= 0.7 (root) Remote File Inclusion Vulnerability bithedz (Mar 29)
• Widespread vulnerabilities in Libero.it/Infostrada.it web portals rosario . valotta (Mar 29)
• [Full-disclosure] [USN-447-1] KDE library vulnerabilities Kees Cook (Mar 29)
• Re: Re: [Full-disclosure] Linux Kernel DCCP Memory Disclosure Vulnerability acme (Mar 29)
• Windows Live Spaces logged user NetworkSetup.aspx cross site scripting paolo . difebbo (Mar 29)
• AOL 9.0 Deskbar.dll/Toolbar.dll DoS Vulnerability Justin Seitz (Mar 29)
• [ MDKSA-2007:071 ] - Updated xmms packages to address integer vulnerabilities security (Mar 29)
• iDefense Security Advisory 03.29.07: IBM Lotus Sametime JNILoader Arbitrary DLL Load Vulnerability iDefense Labs (Mar 29)
• [ MDKSA-2007:072 ] - Updated kdelibs packages to address FTP PASV issue in konqueror security (Mar 29)
• [ GLSA 200703-25 ] Ekiga: Format string vulnerability Raphael Marichez (Mar 29)
• [ MDKSA-2007:073 ] - Updated openoffice.org packages to address vulnerabilities security (Mar 29)
• Mybb Change Password Vulnerability security (Mar 30)
• 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038) Alexander Sotirov (Mar 30)
  • Re: 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038) Jan Wrobel (Mar 31)
    • Re: 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038) Alexander Sotirov (Mar 31)
      • RE: [Full-disclosure] 0-day ANI vulnerability in Microsoft Windows(CVE-2007-0038) Eric Sites (Mar 31)
  • Re: 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038) Alexander Sotirov (Mar 31)
• CA Brightstor Backup Mediasvr.exe Remote Code Vulnerability M. Shirk (Mar 30)
• VMSA-2007-0002 VMware ESX security updates VMware Security team (Mar 30)
• DrakeCMS multiple vulerabilities security (Mar 30)
• AIX 4.3 lsmcode local root command execution pr1nce_empire (Mar 30)
• The Week Of Vista Bugs [TWOVB] TWOVB Team (Mar 30)
• [ECHO_ADV_80$2007] Softerra Time-Assistant <= 6.2 (inc_dir) Remote File Inclusion Vulnerability erdc (Mar 30)
• ANI Zeroday, Third Party Patch Marc Maiffret (Mar 30)
• [ GLSA 200703-26 ] file: Integer underflow Raphael Marichez (Mar 30)
• Busting The Bluetooth Myth Max Moser (Mar 30)
• TSRT-07-03: America Online SuperBuddy ActiveX Control Code Execution Vulnerability TSRT (Mar 30)
• CA BrightStor ARCserve Backup Mediasvr.exe vulnerability Williams, James K (Mar 31)
• On-going Internet Emergency and Domain Names Gadi Evron (Mar 31)
• Windows .ANI Stack Overflow Exploit devcode29 (Mar 31)
• PHP-Fusion 'Calendar_Panel' Module show_event.PHP (m_month) SQL Injection Exploit And PoC UniquE (Mar 31)
• Remot File Include In SLAED_CMS_2 RaeD Hasadya (Mar 31)
• Remot File Include In Shop-SCRIPT FREE RaeD Hasadya (Mar 31)
• Remot File Include In Aardvark Topsites PHP 5 RaeD Hasadya (Mar 31)

Previous period

Next period