Bugtraq: by author

3APA3A
- Re[2]: Microsoft FTP Client Multiple Bufferoverflow Vulnerability (Nov 30 2007)
- Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability (Nov 29 2007)
[48bits] vulndev
- [48Bits Advisory] QuickTime Panorama Sample Atom Heap Overflow (Nov 10 2007)
abc.seo_at_gmail.com
- li-guestbook sql inj (Nov 09 2007)
Adam Laurie
- Announce: RFIDIOt release RFIDIOt-0.1r, November 2007 (Nov 27 2007)
admin_at_biyofrm.com
- Sciurus Hosting Panel Code İnjection (Nov 16 2007)
Adrian P
- Several persistent XSS and CSRF on Wireless-G ADSL Gateway with SpeedBooster (WAG54GS) (Nov 20 2007)
Advisory_at_aria-security.net
- Aria-Security.Net Research: Rapid Classified HotList Image (Nov 10 2007)
- Aria-Security.Net Research: Lotfian BROCHURE Management System (Nov 08 2007)
- Aria-Security.Net Research: Request For Travel Sql Injection (Nov 07 2007)
Advisory_at_Aria-Security.net,
- MyWebFTP Password Disclosure (Nov 05 2007)
aeroxteam-nospam_at_gmail.com
- Re: IceBB 1.0rc6 <= Remote SQL Injection (Nov 19 2007)
- IceBB 1.0rc6 <= Remote SQL Injection (Nov 18 2007)
Alex Eckelberry
- RE: mac trojan in-the-wild (Nov 01 2007)
- RE: mac trojan in-the-wild (Nov 01 2007)
Alexander Klimov
- Re: Breaking RSA: Totient indirect factorization (Nov 15 2007)
Alla Bezroutchko
- Predictable DNS transaction IDs in Microsoft DNS Server (Nov 14 2007)
Amit Klein
- After 6 months - fix available for Microsoft DNS cache poisoning attack (Nov 13 2007)
andrzej.targosz_at_proidea.org.pl
- CONFidence 2008 CfP (Nov 26 2007)
angelo_at_rosiello.org
- RFID: Security Briefings (Nov 12 2007)
anuj tenani
- Re: SMF .htaccess bypass (Nov 06 2007)
Asterisk Security Team
- AST-2007-026 - SQL Injection issue in cdr_pgsql (Nov 29 2007)
- AST-2007-025 - SQL Injection issue in res_config_pgsql (Nov 29 2007)
atc08_at_atilf.no
- ATC-08 Call for papers (repost) (Nov 13 2007)
avivra
- Using CSRF to Attack Mobile Phones (Nov 22 2007)
Bernardo Damele
- [Tool] sqlmap: a blind SQL injection tool (release 0.5) (Nov 04 2007)
Bernhard Mueller
- SEC Consult SA-20071101-0 :: Multiple Vulnerabilities in SonicWALL SSL-VPN Client (Nov 01 2007)
BlackHawk
- Re: MyBlog (MyCMS) Remote PHP Code execution / PHP Code injection .. (Nov 23 2007)
bugtraq_at_opencosmo.com
- DeluxeBB E-Mail Address Change Security Bypass (Nov 26 2007)
- VigileCMS <= 1.8 Stealth Remote Command Execution Exploit (Nov 22 2007)
- SkyPortal vRC6 Multiple Remote Vulnerabilities (Nov 21 2007)
- Ucms <= 1.8 Backdoor Remote Command Execution Exploit (Nov 21 2007)
- TalkBack 2.2.7 Multiple Remote File Inclusion Vulnerabilities (Nov 21 2007)
buzzy_at_poczta.fm
- Re: iDefense Security Advisory 11.07.07: Oracle 10g R2 PITRIG_DROPMETADATA Buffer Overflow Vulnerability (Nov 08 2007)
CaseArmour.net Security Administrator
- Re: Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability (Nov 16 2007)
Cesar
- [Argeniss] Data0: Next generation malware for stealing databases (Paper) (Nov 22 2007)
Chris
- Cypress BX script backdoored? (Nov 06 2007)
Chris Withers
- security contact for mitsubishi electric? (Nov 17 2007)
chris.rohlf_at_gmail.com
- Ruby/Gnome2 0.16.0 Format String Vulnerability (Nov 27 2007)
Clifton Royston
- Re: Breaking RSA: Totient indirect factorization (Nov 15 2007)
cocoruder
- Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability (Nov 16 2007)
coolshot_at__nospam_coolshot.net
- Re: Aria-Security.net: CoolShot E-Lite POS 1.0 (Nov 30 2007)
Core Security Technologies Advisories
- CORE-2007-0821: Lotus Notes buffer overflow in the Lotus WorkSheet file processor (Nov 27 2007)
cxib_at_securityreason.com
- PHP 5.2.4 mail.force_extra_parameters unsecure (Nov 25 2007)
cybermilitan_at_hotmail.com
- Amber Script 1.0 (show_content.php id) Local File Inclusion Vulnerability (Nov 24 2007)
- vBTube v1.1 - Beta ( Vbulletin Tube) Xss Vulnerable (Nov 24 2007)
- Mp3 ToolBox 1.0 beta 5 Remote File İnclude Vulnerability (Nov 23 2007)
daniel.stirnimann_at_csnc.ch
- Alcatel OmniPCX Enterprise VoIP Vulnerability (Nov 18 2007)
David Litchfield
- Oracle 11g/10g Installation Vulnerability (Nov 13 2007)
djvincy_at_hotmail.it
- Skalinks <= 1_5 Cross Site Request Forgery Add Admin (Nov 03 2007)
DoZ_at_HackersCenter.com
- GWExtranet Script Injections & Privilege Escalation Vulnerability (Nov 25 2007)
- MySpace Scripts - Poll Creator JavaScript Injection Vulnerability (Nov 22 2007)
Dragos Ruiu
- CanSecWest 2008 CFP (deadline Nov 30, conf Mar 26-28) and PacSec Dojo's (Nov 08 2007)
- Re: IM upgrade automated social engineering attack (Nov 06 2007)
- IM upgrade automated social engineering attack (Nov 01 2007)
drakomo_at_gmail.com
- SQL injection bug found in TBSource. (Nov 09 2007)
Duncan Simpson
- Re: [Full-disclosure] Standing Up Against German Laws - Project HayNeedle (Nov 11 2007)
DVLabs
- TPTI-07-20: Apple Quicktime Movie Stack Overflow Vulnerability (Nov 14 2007)
eEye Advisories
- EEYE: BitDefender Online Scanner 8 Double Decode Heap Overflow (Nov 20 2007)
- EEYE: Multiple Vulnerabilities In .FLAC File Format and Various Media Applications (Nov 15 2007)
Elliot Kendall
- Directory Traversal in SafeNet Sentinel Protection Server and Keys Server (Nov 26 2007)
emacs25_at_gmail.com
- Re: Gadu-Gadu Local/Remote Buffer Overflow vulnerability (Nov 23 2007)
- Re: Re: Gadu-Gadu Local/Remote Buffer Overflow vulnerability (Nov 22 2007)
erdc_at_echo.or.id
- [ECHO_ADV_85$2007] alstrasoft E-Friends <= 4.98 (seid) Multiple Remote SQL Injection Vulnerabilities (Nov 22 2007)
- [ECHO_ADV_84$2007] ProfileCMS <= 1.0 Remote SQL Injection Vulnerability (Nov 17 2007)
Erick Galinkin
- Re: Breaking RSA: Totient indirect factorization (Nov 15 2007)
Ernesto Alvarez
- two bytehoard 2.1 bugs (Nov 26 2007)
fabio
- Alice - dns spoofer (Nov 11 2007)
Florian Echtler
- Re: Standing Up Against German Laws - Project HayNeedle (Nov 13 2007)
Florian Weimer
- [SECURITY] [DSA 1400-1] New perl packages fix arbitrary code execution (Nov 06 2007)
- [SECURITY] [DSA 1399-1] New pcre3 packages fix arbitrary code execution (Nov 05 2007)
Foresight Linux Essential Announcement Service
- FLEA-2007-0069-1 perl (Nov 11 2007)
- FLEA-2007-0065-1 libpng (Nov 11 2007)
- FLEA-2007-0067-1 pidgin (Nov 11 2007)
- FLEA-2007-0064-1 pcre (Nov 11 2007)
- FLEA-2007-0068-1 ruby (Nov 11 2007)
- FLEA-2007-0066-1 ImageMagick (Nov 11 2007)
- FLEA-2007-0063-1 perl (Nov 09 2007)
Frank Guthausen
- Re: Standing Up Against German Laws - Project HayNeedle (Nov 14 2007)
FreeBSD Security Advisories
- FreeBSD Security Advisory FreeBSD-SA-07:10.gtar (Nov 29 2007)
- FreeBSD Security Advisory FreeBSD-SA-07:09.random (Nov 29 2007)
Gadi Evron
- Re: [Full-disclosure] Warning: Hackers hijacking unused IP Addresses inside Trusted domains [POC] (Nov 21 2007)
- RE: mac trojan in-the-wild (Nov 01 2007)
- the heart of the problem [was: RE: mac trojan in-the-wild] (Nov 01 2007)
- Re: [botnets] re MAC trojan (fwd) (Nov 01 2007)
- mac trojan in-the-wild (Oct 31 2007)
gandlf
- Re: Breaking RSA: Totient indirect factorization (Nov 15 2007)
- Breaking RSA: Totient indirect factorization (Nov 14 2007)
garys_at_totalserversolutions.com
- APC Management Vulnerability (Nov 29 2007)
Gerald (Jerry) Carter
- [SAMBA] CVE-2007-5398 - Remote Code Execution in Samba's nmbd (Nov 15 2007)
- [SAMBA] CVE-2007-4572 - GETDC mailslot processing buffer overrun in nmbd (Nov 15 2007)
gg_vuln_at_yahoo.com
- Re: Gadu-Gadu Local/Remote Buffer Overflow vulnerability (Nov 22 2007)
Giuseppe Gottardi
- SiteMinder Agent: Cross Site Scripting (Nov 06 2007)
gmdarkfig_at_gmail.com
- JBC Explorer <= V7.20 RC 1 Remote Code Execution Exploit (Nov 04 2007)
Graeme Fowler
- Re: Certificate spoofing issue with Mozilla, Konqueror, Safari 2 (Nov 19 2007)
Guns_at_0x90.com.ar
- PHP-Nuke Module Advertising Blind SQL Injection (Nov 10 2007)
- PhpNuke (add-on) MS TopSites Edit Exploit And Html Injection (Nov 06 2007)
- IDMOS v1.0 Alpha Multiple RFI Vulnerability (Nov 06 2007)
- sBlog 0.7.3 Beta Cross Site Request Forgery (Nov 01 2007)
gynvael_at_vexillium.org
- Re: Re: Re: Re: Re: Gadu-Gadu Local/Remote Buffer Overflow vulnerability (Nov 23 2007)
- Re: Re: Re: Gadu-Gadu Local/Remote Buffer Overflow vulnerability (Nov 23 2007)
h3llcode_at_hotmail.it
- Simple Machine Forum - Private section/posts/info disclosure (Nov 08 2007)
- SMF .htaccess bypass (Nov 06 2007)
Hanno Böck
- CVE-2007-3694: Cross site scripting (XSS) in broadcast machine (Nov 12 2007)
Henrik Langos
- Re: Comments re ISC's announcement on bind9 security (Nov 01 2007)
iDefense Labs
- iDefense Security Advisory 11.14.07: Apple Mac OS X AppleTalk Socket IOCTL Kernel Stack Buffer Overflow Vulnerability (Nov 14 2007)
- iDefense Security Advisory 11.14.07: Apple Mac OS X Mach Port Inheritance Privilege Escalation Vulnerability (Nov 14 2007)
- iDefense Security Advisory 11.14.07: Apple Mac OS X AppleTalk ASP Message Kernel Heap Overflow Vulnerability (Nov 14 2007)
- iDefense Security Advisory 11.14.07: Apple Mac OS X AppleTalk mbuf Kernel Heap Overflow Vulnerability (Nov 14 2007)
- iDefense Security Advisory 11.12.07: Novell NetWare Client Local Privilege Escalation Vulnerability (Nov 13 2007)
- iDefense Security Advisory 11.12.07: WinPcap NPF.SYS bpf_filter_init Arbitrary Array Indexing Vulnerability (Nov 12 2007)
- iDefense Security Advisory 11.09.07: IBM Informix Dynamic Server DBLANG Directory Traversal Vulnerability (Nov 09 2007)
- iDefense Security Advisory 11.09.07: AOL AmpX ActiveX Control Multiple Buffer Overflow Vulnerabilities (Nov 09 2007)
- iDefense Security Advisory 11.07.07: Oracle 10g R2 PITRIG_DROPMETADATA Buffer Overflow Vulnerability (Nov 07 2007)
- iDefense Security Advisory 11.06.07: Microsoft DebugView Privilege Escalation Vulnerability (Nov 06 2007)
- iDefense Security Advisory 11.05.07: Apple QuickTime Panorama Sample Atom Heap Buffer Overflow Vulnerability (Nov 05 2007)
- iDefense Security Advisory 11.02.07: Sun Microsystems Solaris srsexec Format String Vulnerability (Nov 05 2007)
imipak
- Re: Standing Up Against German Laws - Project HayNeedle (Nov 14 2007)
info_at_digitalarmaments.com
- Digital Armaments November-December Hacking Challenge: Diffuse Client Application (10.000$ extra) (Nov 29 2007)
info_at_opencosmo.com
- VigileCMS 1.4 Multiple Remote Vulnerabilities (Nov 18 2007)
IRM Research
- IRM025: TIBCO Rendezvous RVD Daemon Remote Memory Leak DoS (Nov 29 2007)
- Creating Backdoors in Cisco IOS using Tcl (Nov 27 2007)
- Six Remote Memory Corruption Vulnerabilities in IBM WebSphere MQ 6.0 (Nov 14 2007)
ISecAuditors Security Advisories
- [ISecAuditors Security Advisories] Cygwin buffer overflow due incorrect filename length check (Nov 24 2007)
- [ISecAuditors Security Advisories] VTLS.web.gateway cgi is vulnerable to XSS (Nov 13 2007)
J. Carlos Nieto
- Re: Gekko <=0.8.2 (temp directory) Path Disclosure (Nov 28 2007)
j00ru.vx_at_gmail.com
- Re: Re: Gadu-Gadu Local/Remote Buffer Overflow vulnerability (Nov 23 2007)
- Gadu-Gadu Local/Remote Buffer Overflow vulnerability (Nov 22 2007)
Jacob Appelbaum
- Re: 27Mhz based wireless security insecurities - Aka - "We know what you typed last summer" (Nov 30 2007)
Jamie Strandboge
- [USN-544-2] Samba regression (Nov 17 2007)
- [USN-544-1] Samba vulnerabilities (Nov 15 2007)
- [USN-542-2] KOffice vulnerabilities (Nov 15 2007)
Jan M�nther
- Re: Win2K3 Priv Escalation (Nov 28 2007)
Jan Newger
- Re: [Full-disclosure] Standing Up Against German Laws - Project HayNeedle (Nov 10 2007)
Jason Muskat de VE3TSJ - GCFA, GCUX, CEI, CEH
- Re: Banks (Wellsfargo.com) using CDNs to deliver Javascript: enables password theft by anyone compromising or controlling the CDN (Nov 20 2007)
Jeimy Cano
- National Computer and Information Security Conferences ACIS 2008 - COLOMBIA (Nov 27 2007)
jf
- Re: [Full-disclosure] Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability (Nov 18 2007)
Jim Harrison
- RE: mac trojan in-the-wild (Nov 01 2007)
Jindrich Kubec
- Re: Simple Machine Forum - Private section/posts/info disclosure (Nov 08 2007)
joel_at_peshkin.net
- Banks (Wellsfargo.com) using CDNs to deliver Javascript: enables password theft by anyone compromising or controlling the CDN (Nov 19 2007)
johan beisser
- Re: Standing Up Against German Laws - Project HayNeedle (Nov 13 2007)
- Re: [Full-disclosure] Standing Up Against German Laws - Project HayNeedle (Nov 13 2007)
- Re: Standing Up Against German Laws - Project HayNeedle (Nov 12 2007)
- Re: Standing Up Against German Laws - Project HayNeedle (Nov 12 2007)
Joseph.giron13_at_gmail.com
- GWextranet Multiple Vulnerabilites (Nov 21 2007)
- E-vanced Solutions Multiple Vulnerabilites (Nov 21 2007)
- ExoPHPdesk user profile XSS / profile SQL injection (Nov 13 2007)
- phphelpdesk Multiple vulnerabilities (Nov 02 2007)
jplopezy_at_gmail.com
- Bitcomet Resource Browser v1.1 XSS (Nov 23 2007)
Juergen Schmidt
- Leopard's firewall damages Skype and WoW (Nov 05 2007)
Juha-Matti Laurio
- Re: Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability (Nov 17 2007)
- Cryptome: NSA has access to Windows Mobile smartphones (Nov 01 2007)
Justin_at_ESC
- Re: Win2K3 Priv Escalation (Nov 28 2007)
justin_at_escracing.com
- Win2K3 Priv Escalation (Nov 27 2007)
Kapetanakis Giannis
- Re: Certificate spoofing issue with Mozilla, Konqueror, Safari 2 (Nov 20 2007)
- Re: Certificate spoofing issue with Mozilla, Konqueror, Safari 2 (Nov 19 2007)
Kees Cook
- [USN-549-1] PHP vulnerabilities (Nov 29 2007)
- [USN-548-1] Pidgin vulnerability (Nov 28 2007)
- [USN-547-1] PCRE vulnerabilities (Nov 26 2007)
- [USN-546-1] Firefox vulnerabilities (Nov 26 2007)
- [USN-545-1] link-grammar vulnerability (Nov 26 2007)
- [USN-543-1] VMWare vulnerabilities (Nov 15 2007)
- [USN-542-1] poppler vulnerabilities (Nov 13 2007)
- [USN-541-1] Emacs vulnerability (Nov 13 2007)
- [USN-540-1] flac vulnerability (Nov 13 2007)
- [USN-539-1] CUPS vulnerability (Nov 05 2007)
- [USN-537-2] Compiz vulnerability (Nov 02 2007)
kingoftheworld92_at_fastwebnet.it
- Eurologon CMS Db credentials disclosure / files download (Nov 27 2007)
- Eurologon CMS Multiple SQL Injection (Nov 27 2007)
- Re: PHP-Nuke NSN Script Depository module <= 1.0.3 Remote Source / DB Credentials Disclosure (Nov 26 2007)
- PHP-Nuke NSN Script Depository module <= 1.0.3 Remote Source / DB Credentials Disclosure (Nov 26 2007)
- Tilde CMS <= v. 4.x "aarstal" parameter of "yeardetail" SQL Injection (Nov 26 2007)
- PBLang <= 4.99.17.q Remote File Rewriting / Remote Command Execution (Nov 24 2007)
- Scribe <= 2.0 Remote PHP Code Execution (Nov 01 2007)
- Synergiser <= 1.2 RC1 Local File Inclusion & Full path disclosure (Nov 01 2007)
klynn.securityfocus_at_kevinlynn.com
- Re: Simple Machine Forum - Private section/posts/info disclosure (Nov 09 2007)
Kurt Dillard
- RE: Cryptome: NSA has access to Windows Mobile smartphones (Nov 01 2007)
L4teral
- AutoIndex <= 2.2.2 Cross Site Scripting and Denial of Service (Nov 12 2007)
laurent.gaffie_at_gmail.com
- Konqueror Remote Denial Of Service (Nov 14 2007)
- PHP <= 5.2.5 Gettext Lib Multiple Denial of service (Nov 13 2007)
- PHP <= 5.2.5 stream_wrapper_register() denial of service (Nov 13 2007)
Luigi Auriemma
- Crash in LIVE555 Media Server 2007.11.01 (Nov 18 2007)
mail_at_me.not
- Skype DoS (Nov 25 2007)
Matt Ausmus
- RE: Win2K3 Priv Escalation (Nov 27 2007)
Matt D. Harris
- Re: Standing Up Against German Laws - Project HayNeedle (Nov 12 2007)
- Re: SMF .htaccess bypass (Nov 06 2007)
Matthew Leeds
- Re[2]: Microsoft FTP Client Multiple Bufferoverflow Vulnerability (Nov 29 2007)
- Re: mac trojan in-the-wild (Nov 01 2007)
Max Moser
- 27Mhz based wireless security insecurities - Aka - "We know what you typed last summer" (Nov 30 2007)
MC Iglo
- Aida-Web Information Exposure (Nov 15 2007)
Memisyazici, Aras
- RE: mac trojan in-the-wild (Nov 01 2007)
mesut_at_h-labs.org
- Eggblog v3.1.0 XSS Vulnerability (Nov 11 2007)
michael_at_cleverly.com
- Re: Creating Backdoors in Cisco IOS using Tcl (Nov 27 2007)
Michal Zalewski
- Re: Certificate spoofing issue with Mozilla, Konqueror, Safari 2 (Nov 19 2007)
mj_at_jarn.com
- [CVE-2007-5741] Plone: statusmessages and linkintegrity unsafe network data hotfix (Nov 06 2007)
morin.josh_at_gmail.com
- PHPSlideShow XSS Update (Nov 27 2007)
- Liferay Enterprise Portal multiple XSS (Nov 27 2007)
Moritz Muehlenhoff
- [SECURITY] [DSA 1415-1] New tk8.4 packages fix arbitrary code execution (Nov 27 2007)
- [SECURITY] [DSA 1416-1] New tk8.3 packages fix arbitrary code execution (Nov 27 2007)
- [SECURITY] [DSA 1414-1] New wireshark packages fix several vulnerabilities (Nov 26 2007)
- [SECURITY] [DSA 1412-1] New ruby1.9 packages fix insecure SSL certificate validation (Nov 25 2007)
- [SECURITY] [DSA 1411-1] New libopenssl-ruby packages fix insecure SSL certificate validation (Nov 25 2007)
- [SECURITY] [DSA 1410-1] New ruby1.8 packages fix insecure SSL certificate validation (Nov 25 2007)
- [SECURITY] [DSA 1408-1] New kdegraphics packages fix arbitrary code execution (Nov 21 2007)
- [SECURITY] [DSA 1407-1] New cupsys packages fix arbitrary code execution (Nov 18 2007)
- [SECURITY] [DSA 1401-1] New iceape packages fix several vulnerabilities (Nov 05 2007)
- [SECURITY] [DSA 1397-1] New mono packages fix integer overflow (Nov 03 2007)
Network Protocol Security
- Re: Comments re ISC's announcement on bind9 security (Oct 31 2007)
Nick Boyce
- Re: HPSBUX02287 SSRT071485 rev.1 - HP-UX Running HP Secure Shell, Remotely Gain Extended Privileges (Nov 15 2007)
Nick FitzGerald
- Re: mac trojan in-the-wild (Nov 01 2007)
Nicolas FISCHBACH
- Re: [Full-disclosure] Creating Backdoors in Cisco IOS using Tcl (Nov 27 2007)
Nils Toedtmann
- Re: Certificate spoofing issue with Mozilla, Konqueror, Safari 2 (Nov 19 2007)
- Certificate spoofing issue with Mozilla, Konqueror, Safari 2 (Nov 18 2007)
nnp
- [UPH-07-02] Firefly Media Server DoS (Nov 02 2007)
- [UPH-07-01] Firefly Media Server DoS (Nov 02 2007)
- Re: [UPH-07-03] Firefly Media Server remote format string vulnerability (Nov 02 2007)
- Re: [UPH-07-01] Firefly Media Server DoS (Nov 02 2007)
- [UPH-07-03] Firefly Media Server remote format string vulnerability (Nov 02 2007)
- Re: mac trojan in-the-wild (Nov 01 2007)
nnposter_at_disclosed.not
- Citrix NetScaler Web Management Cookie Weakness (Nov 25 2007)
- Citrix NetScaler Web Management XSS (Nov 19 2007)
no-reply_at_Aria-Security.net
- Re: Re: Aria-Security.net: NetAuctionHelp SQL Injection (Nov 24 2007)
- NetAuctionHelp Classified Ads v1.0 SQL Injection (Nov 24 2007)
- Aria-Security.net: CoolShot E-Lite POS 1.0 (Nov 24 2007)
- Aria-Security.net: Irola My-Time v3.5 SQL Injection (Nov 23 2007)
- Aria-Security.net: NetAuctionHelp SQL Injection (Nov 21 2007)
- Aria-Security.Net: VU Mailer (Mass Mail) "Password" SQL Injection (Nov 20 2007)
- [Aria-Security.Net] VU Case Manager "Username/Password" SQL Injection (Nov 20 2007)
- [Aria-Secutiy Net] Click&BaneX SQL Injection (Nov 18 2007)
- JiRos Upload Manager SQL Injection (Nov 16 2007)
- Free Forums "search" Sql Injection (Nov 13 2007)
- Aria-Security.Net: MetaCart SQL Injection (Nov 13 2007)
- DocuSafe "Search" SQL Injection (Nov 13 2007)
Noah Meyerhans
- [SECURITY] [DSA 1413-1] New mysql packages fix multiple vulnerabilities (Nov 26 2007)
- [SECURITY] [DSA 1398-1] New perdition packages fix arbitrary code execution (Nov 05 2007)
noreply_at_aria-security.net
- Aria-Security.Net: Gouae DWD Realty SQL Injection (Nov 25 2007)
ntn_at_networkontap.com
- Re: Re: Comments re ISC's announcement on bind9 security (Nov 01 2007)
Ofer Shezaf
- OWASP Israel Conference 2007, Dec 3rd 2007 (Nov 27 2007)
OpenPKG GmbH
- [OpenPKG-SA-2007.023] OpenPKG Security Advisory (perl) (Nov 07 2007)
overet_at_securitydate.it
- Re: Re: SiteMinder Agent: Cross Site Scripting (Nov 09 2007)
Paolo Perego
- (tool announce) Orizon v0.50 announce (Nov 01 2007)
Paul Schmehl
- Re: [Full-disclosure] Warning: Hackers hijacking unused IP Addresses inside Trusted domains [POC] (Nov 21 2007)
- Re: [Full-disclosure] mac trojan in-the-wild (Nov 01 2007)
Paul Sebastian Ziegler
- Standing Up Against German Laws - Project HayNeedle (Nov 10 2007)
Paul Wouters
- Re: Standing Up Against German Laws - Project HayNeedle (Nov 13 2007)
Pete Herzog
- SCARE metrics and tool release (Nov 30 2007)
pete_at_petefinnigan.com
- Oracle 0-day to get SYSDBA access (Nov 12 2007)
Peter Besenbruch
- Re: [Full-disclosure] mac trojan in-the-wild (Nov 01 2007)
- Re: [Full-disclosure] mac trojan in-the-wild (Nov 01 2007)
Peter Conrad
- Re: [Full-disclosure] Standing Up Against German Laws - Project HayNeedle (Nov 13 2007)
phil_at_broadbandmechanics.com
- PeopleAggregatory security advisory - re CVE-2007-5631 (Nov 11 2007)
Pierre-Yves Rofes
- ERRATA: [ GLSA 200711-20 ] Pioneers: Multiple Denials of Service (Nov 29 2007)
- [ GLSA 200711-34 ] CSTeX: Multiple vulnerabilities (Nov 25 2007)
- [ GLSA 200711-33 ] nss_ldap: Information disclosure (Nov 25 2007)
- [ GLSA 200711-32 ] Feynmf: Insecure temporary file creation (Nov 20 2007)
- [ GLSA 200711-31 ] Net-SNMP: Denial of Service (Nov 20 2007)
- [ GLSA 200711-30 ] PCRE: Multiple vulnerabilities (Nov 20 2007)
- [ GLSA 200711-29 ] Samba: Execution of arbitrary code (Nov 20 2007)
- [ GLSA 200711-28 ] Perl: Buffer overflow (Nov 19 2007)
- [ GLSA 200711-22 ] Poppler, KDE: User-assisted execution of arbitrary code (Nov 18 2007)
- [ GLSA 200711-21 ] Bochs: Multiple vulnerabilities (Nov 17 2007)
- [ GLSA 200711-27 ] Link Grammar: User-assisted execution of arbitrary code (Nov 18 2007)
- [ GLSA 200711-25 ] MySQL: Denial of Service (Nov 18 2007)
- [ GLSA 200711-26 ] teTeX: Multiple vulnerabilities (Nov 18 2007)
- [ GLSA 200711-23 ] VMware Workstation and Player: Multiple vulnerabilities (Nov 18 2007)
- [ GLSA 200711-24 ] Mozilla Thunderbird: Multiple vulnerabilities (Nov 18 2007)
- [ GLSA 200711-20 ] Pioneers: Denial of Service (Nov 14 2007)
- [ GLSA 200711-19 ] TikiWiki: Multiple vulnerabilities (Nov 14 2007)
- [ GLSA 200711-18 ] Cpio: Buffer overflow (Nov 14 2007)
- [ GLSA 200711-17 ] Ruby on Rails: Multiple vulnerabilities (Nov 14 2007)
- [ GLSA 200711-16 ] CUPS: Memory corruption (Nov 12 2007)
- [ GLSA 200711-15 ] FLAC: Buffer overflow (Nov 12 2007)
- [ GLSA 200711-14 ] Mozilla Firefox, SeaMonkey, XULRunner: Multiple vulnerabilities (Nov 12 2007)
- [ GLSA 200711-13 ] 3proxy: Denial of Service (Nov 08 2007)
- [ GLSA 200711-11 ] Nagios Plugins: Two buffer overflows (Nov 08 2007)
- [ GLSA 200711-12 ] Tomboy: User-assisted execution of arbitrary code (Nov 08 2007)
- [ GLSA 200711-10 ] Mono: Buffer overflow (Nov 07 2007)
- [ GLSA 200711-09 ] MadWifi: Denial of Service (Nov 07 2007)
- [ GLSA 200711-08 ] libpng: Multiple Denials of Service (Nov 07 2007)
- [ GLSA 200711-07 ] Python: User-assisted execution of arbitrary code (Nov 07 2007)
- [ GLSA 200711-06 ] Apache: Multiple vulnerabilities (Nov 07 2007)
- [ GLSA 200711-05 ] SiteBar: Multiple issues (Nov 06 2007)
- [ GLSA 200711-04 ] Evolution: User-assisted remote execution of arbitrary code (Nov 06 2007)
- [ GLSA 200711-02 ] OpenSSH: Security bypass (Nov 01 2007)
- [ GLSA 200711-03 ] Gallery: Multiple vulnerabilities (Nov 01 2007)
- [ GLSA 200711-01 ] gFTP: Multiple vulnerabilities (Nov 01 2007)
poc2007_at_gmail.com
- Some Data of POC2007 (Nov 28 2007)
Quark IT - Hilton Travis
- RE: Standing Up Against German Laws - Project HayNeedle (Nov 16 2007)
r00t_at_bl4ckh0l3.com
- Belkin Wireless G Router DoS (Nov 17 2007)
Raj Mathur
- Re: Standing Up Against German Laws - Project HayNeedle (Nov 13 2007)
Rajesh Sethumadhavan
- Microsoft FTP Client Multiple Bufferoverflow Vulnerability (Nov 27 2007)
Raymond Pete
- Re: Airkiosk/formlib application is XSS vuln (Nov 01 2007)
Research
- Cisco IOS Shellcode (Nov 12 2007)
research_at_procheckup.com
- PR07-15: Cross-site Scripting (XSS) / HTML injection on F5 FirePass 4100 SSL VPN 'my.logon.php3' server-side script (Nov 30 2007)
- PR07-37: XSS on Apache HTTP Server 413 error pages via malformed HTTP method (Nov 30 2007)
- PR07-14: Cross-site Scripting (XSS) / HTML injection on F5 FirePass 4100 SSL VPN 'my.activation.php3' server-side script (Nov 30 2007)
- PR07-26: Persistent XSS on Aruba 800 Mobility Controller's login page (Nov 15 2007)
- PR07-02: XSS on Liferay Portal Enterprise 4.1.1 login page ('login' parameter) (Nov 15 2007)
- PR07-13: Cross-site Scripting / HTML injection on F5 FirePass 4100 SSL VPN 'download_plugin.php3' server-side script (Nov 12 2007)
- Two XSS on Blue Coat ProxySG Management Console (Nov 01 2007)
RISE Security
- [RISE-2007004] Apple Mac OS X 10.4.x Kernel i386_set_ldt() Integer Overflow Vulnerability (Nov 15 2007)
Robert McArdle
- Re: mac trojan in-the-wild (Nov 02 2007)
Roger A. Grimes
- RE: mac trojan in-the-wild (Nov 01 2007)
- RE: mac trojan in-the-wild (Nov 02 2007)
Roman Medina-Heigl Hernandez
- DoS Exploit for DHCPd bug (Bugtraq ID 25984 ; CVE-2007-5365) (Nov 02 2007)
Roman Shirokov
- Re: IM upgrade automated social engineering attack (Nov 06 2007)
root_at_fuck.com
- Re: Simple Machines Forum multiple sql injection flaws with exploit code. (Nov 21 2007)
root_at_hanicker.it
- xoops mylinks module - sql injection (Nov 09 2007)
rPath Update Announcements
- rPSA-2007-0254-1 idle python (Nov 30 2007)
- rPSA-2007-0252-1 cups poppler tetex tetex-afm tetex-dvips tetex-fonts tetex-latex tetex-xdvi (Nov 28 2007)
- rPSA-2007-0245-2 kernel (Nov 21 2007)
- rPSA-2007-0245-1 kernel (Nov 21 2007)
- rPSA-2007-0243-1 flac (Nov 21 2007)
- rPSA-2007-0242-1 php5 php5-cgi php5-mysql php5-pear php5-pgsql php5-soap php5-xsl (Nov 19 2007)
- rPSA-2007-0241-1 samba samba-swat (Nov 16 2007)
- rPSA-2007-0231-1 pcre (Nov 06 2007)
- rPSA-2007-0232-1 perl (Nov 06 2007)
rx_at_h4cky0u.org
- Re: Re: Simple Machine Forum - Private section/posts/info disclosure (Nov 11 2007)
sales_at_bosdev.com
- Re: Bosdev Multiple vulnerabilities (Nov 12 2007)
sdfkjsomcoismwevoiweo_at_o2.pl
- Re: Re: Re: Re: Gadu-Gadu Local/Remote Buffer Overflow vulnerability (Nov 23 2007)
secse08_at_gmail.com
- CFP: International workshop on Secure Software Engineering - Deadline extended! (Nov 01 2007)
Secunia Research
- Secunia Research: Symantec Backup Exec Job Engine Denial of Service (Nov 28 2007)
- Secunia Research: Samba "reply_netbios_packet()" Buffer Overflow Vulnerability (Nov 15 2007)
- Secunia Research: Xpdf "Stream.cc" Multiple Vulnerabilities (Nov 07 2007)
- Secunia Research: AbiWord Link Grammar "separate_sentence()" Buffer Overflow (Nov 07 2007)
- Secunia Research: Link Grammar "separate_sentence()" Buffer Overflow (Nov 07 2007)
- Secunia Research: ACDSee Products Image and Archive Plug-ins Buffer Overflows (Nov 02 2007)
Secure
- SYM07-029 Symantec BEWS Multiple DoS in Job Engine (Nov 28 2007)
security-alert_at_hp.com
- [security bulletin] HPSBUX02292 SSRT071499 rev.1 - HP-UX Running Apache, Remote Execution of Arbitrary Code (Nov 29 2007)
- [security bulletin] HPSBMA02283 SSRT071319 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Cross Site Scripting (XSS) (Nov 29 2007)
- [security bulletin] HPSBUX02251 SSRT071449 rev.3 - HP-UX Running BIND, Remote DNS Cache Poisoning (Nov 27 2007)
- HPSBST02291 SSRT071498 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS07-061 and MS07-062 (Nov 26 2007)
- [security bulletin] HPSBUX02289 SSRT071461 rev.1 - HP-UX Running BIND 8, Remote DNS Cache Poisoning (Nov 20 2007)
- [security bulletin] HPSBUX02284 SSRT071483 rev.2 - HP-UX Running Java JRE and JDK, Remote Unauthorized Access (Nov 15 2007)
- [security bulletin] HPSBMA02288 SSRT071465 rev.1 - HP OpenView Operations (OVO) Running on HP-UX and Solaris, Remote Unauthorized Access, Denial of Service (DoS) (Nov 14 2007)
- HPSBUX02287 SSRT071485 rev.1 - HP-UX Running HP Secure Shell, Remotely Gain Extended Privileges (Nov 12 2007)
- [security bulletin] HPSBUX02285 SSRT071484 rev.1 - HP-UX Running Aries PA Emulator, Local Unauthorized Access (Nov 08 2007)
security_at_mandriva.com
- [ MDKSA-2007:224-3 ] - Updated samba packages fix regressions (Nov 29 2007)
- [ MDKSA-2007:233 ] - Updated cpio package fixes buffer overflow and directory traversal vulnerabilities (Nov 28 2007)
- [ MDKSA-2007:233 ] - Updated cpio package fixes buffer overflow and directory traversal vulnerabilities (Nov 28 2007)
- [ MDKSA-2007:232 ] - Updated kernel packages fix multiple vulnerabilities and bugs (Nov 28 2007)
- [ MDKSA-2007:224-2 ] - Updated samba packages fix vulnerabilities (Nov 23 2007)
- [ MDKSA-2007:231 ] - Updated cacti packages fix SQL injection vulnerability (Nov 22 2007)
- [ MDKSA-2007:224-1 ] - Updated samba packages fix vulnerabilities (Nov 21 2007)
- [ MDKSA-2007:230 ] - Updated tetex packages fix vulnerabilities (Nov 20 2007)
- [ MDKSA-2007:229 ] - Updated phpMyAdmin packages fix multiple vulnerabilities (Nov 20 2007)
- [ MDKSA-2007:228 ] - Updated cups packages fix vulnerabilities (Nov 19 2007)
- [ MDKSA-2007:227 ] - Updated poppler packages fix vulnerabilities (Nov 19 2007)
- [ MDKSA-2007:226 ] - Updated kernel packages fix multiple vulnerabilities and bugs (Nov 19 2007)
- [ MDKSA-2007:225 ] - Updated net-snmp packages fix remote denial of service vulnerability (Nov 19 2007)
- [ MDKSA-2007:224 ] - Updated samba packages fix vulnerabilities (Nov 17 2007)
- [ MDKSA-2007:223 ] - Updated pdftohtml packages fix vulnerabilities (Nov 17 2007)
- [ MDKSA-2007:222 ] - Updated koffice packages fix vulnerabilities (Nov 17 2007)
- [ MDKSA-2007:221 ] - Updated kdegraphics packages fix vulnerabilities in kpdf (Nov 15 2007)
- [ MDKSA-2007:220 ] - Updated gpdf packages fix vulnerabilities (Nov 15 2007)
- [ MDKSA-2007:219 ] - Updated xpdf packages fix vulnerabilities (Nov 15 2007)
- [ MDKSA-2007:218 ] - Updated mono packages fix arbitrary code execution vulnerability (Nov 14 2007)
- [ MDKSA-2007:217 ] - Updated libpng packages fix multiple vulnerabilities (Nov 13 2007)
- [ MDKSA-2007:216 ] - Updated kernel packages fix multiple vulnerabilities and bugs (Nov 13 2007)
- [ MDKSA-2007:204-1 ] - Updated cups packages fix vulnerability (Nov 12 2007)
- [ MDKSA-2007:215 ] - Updated openldap packages fix vulnerability (Nov 08 2007)
- [ MDKSA-2007:214 ] - Updated flac packages fix vulnerability (Nov 08 2007)
- [ MDKSA-2007:213 ] - Updated pcre packages fix vulnerability (Nov 08 2007)
- [ MDKSA-2007:212 ] - Updated pcre packages fix vulnerability (Nov 08 2007)
- [ MDKSA-2007:211 ] - Updated pcre packages fix vulnerability (Nov 08 2007)
- [ MDKSA-2007:210 ] - Updated xfs package prevents arbitrary code execution vulnerabilities (Nov 06 2007)
- [ MDKSA-2007:209 ] - Updated netpbm packages fix vulnerability (Nov 05 2007)
- [ MDKSA-2007:208 ] - Updated ghostscript packages fix vulnerability (Nov 05 2007)
- [ MDKSA-2007:207 ] - Updated perl packages fix vulnerability (Nov 05 2007)
- [ MDKSA-2007:206 ] - Updated pwlib packages fix vulnerability (Nov 02 2007)
- [ MDKSA-2007:205 ] - Updated opal packages fix vulnerability (Nov 02 2007)
- [ MDKSA-2007:204 ] - Updated cups packages fix vulnerability (Nov 01 2007)
- [ MDKSA-2007:203 ] - Updated xen packages fix multiple vulnerabilities (Nov 01 2007)
security_at_soqor.net
- MyBlog (MyCMS) Remote PHP Code execution / PHP Code injection .. (Nov 22 2007)
- GetBlog local File inclusion .. (Nov 22 2007)
- Wheatblog (wB) Remote File inclusion .. (Nov 22 2007)
securityfocus_at_netdevice.com
- Re: SiteMinder Agent: Cross Site Scripting (Nov 08 2007)
shadown
- Some hashes for the record (Nov 14 2007)
Shane Kerr
- Re: Comments re ISC's announcement on bind9 security (Nov 02 2007)
- Re: Comments re ISC's announcement on bind9 security (Nov 02 2007)
skien
- Re: Airkiosk/formlib application is XSS vuln (Nov 01 2007)
Sowhat
- Vulnerability Hash Database - Maillist (Nov 17 2007)
- AhnLab AntiVirus Remote Kernel Memory Corruption (Nov 16 2007)
Stefano Zanero
- Re: Standing Up Against German Laws - Project HayNeedle (Nov 13 2007)
Steve Kemp
- [SECURITY] [DSA 1409-3] New samba packages fix several vulnerabilities (Nov 29 2007)
- [SECURITY] [DSA 1409-2] New samba packages fix several vulnerabilities (Nov 26 2007)
- [SECURITY] [DSA 1409-1] New samba packages fix several vulnerabilities (Nov 22 2007)
- [SECURITY] [DSA 1402-1] New gforge packages fix several vulnerabilities (Nov 07 2007)
Steve Shockley
- Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability (Nov 29 2007)
Steven J. Murdoch
- Wordpress Cookie Authentication Vulnerability (Nov 19 2007)
support_at_netauctionhelp.com
- Re: Aria-Security.net: NetAuctionHelp SQL Injection (Nov 24 2007)
sys-project_at_hotmail.com
- Gekko <=0.8.2 (temp directory) Path Disclosure (Nov 28 2007)
- PHPkit 1.6.1 (include.php?path=) Remote File Inclusion (Nov 27 2007)
- FIGIS (FILogin.do) Bypass SQL Injection Vulnerability (Nov 26 2007)
- JLMForo System (modificarPerfil.php) Cross-Site Scripting Vulnerability (Nov 26 2007)
- SimpleGallery v0.1.3 (index.php) Cross-Site Scripting Vulnerability (Nov 26 2007)
- FMDeluxe (index.php) Cross-Site Scripting Vulnerability (Nov 26 2007)
- Calendar Proverbs <=1.1 (caladmin.php) Remote SQL Injection (Nov 26 2007)
- PHPSlideShow (toonchapter8.php) Cross-Site Scripting Vulnerability (Nov 26 2007)
TeLeMan
- QEMU code_gen_buffer overflow POC (Nov 30 2007)
The Asterisk Development Team
- AST-2007-024 - Fallacious security advisory spread on the Internet involving buffer overflow in Zaptel's sethdlc application (Nov 08 2007)
Theo de Raadt
- Re: Comments re ISC's announcement on bind9 security (Nov 01 2007)
thesinoda_at_hotmail.com
- DOS in Realplayer 11 ActiveX on Win Vista and Win XP SP2 (Nov 29 2007)
thetaung_at_gmail.com
- Javamail login username and password same email problem (Nov 16 2007)
Thijs Kinkhorst
- [SECURITY] [DSA 1405-2] New zope-cmfplone packages fix regression (Nov 11 2007)
- [SECURITY] [DSA 1406-1] New horde3 packages fix several vulnerabilities (Nov 09 2007)
- [SECURITY] [DSA 1405-1] New zope-cmfplone packages fix arbitrary code execution (Nov 09 2007)
- [SECURITY] [DSA 1403-1] New phpmyadmin packages fix cross-site scripting (Nov 08 2007)
- [SECURITY] [DSA 1404-1] New gallery2 packages fix privilege escalation (Nov 08 2007)
Thor (Hammer of God)
- RE: Win2K3 Priv Escalation (Nov 28 2007)
- RE: mac trojan in-the-wild (Nov 01 2007)
- RE: mac trojan in-the-wild (Nov 01 2007)
Tim
- Re: Comments re ISC's announcement on bind9 security (Nov 02 2007)
- Re: Comments re ISC's announcement on bind9 security (Nov 02 2007)
- Re: Comments re ISC's announcement on bind9 security (Nov 01 2007)
Tobias Klein
- [TKADV2007-001] Mac OS X TIOCSETD IOCTL Kernel Memory Corruption Vulnerability (Nov 15 2007)
Valdis.Kletnieks_at_vt.edu
- Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability (Nov 29 2007)
- Re: Standing Up Against German Laws - Project HayNeedle (Nov 13 2007)
verys-secret_at_hotmail.com
- Myspace Clone Script (index.php) Remote File Inclusion Vulnerability (Nov 17 2007)
- Black Lily 2007 (products.php class) Remote SQL Injection Vulnerability (Nov 17 2007)
- net-finity (links.php) Remote SQL Injection Vulnerability (Nov 17 2007)
Vincent Archer
- Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability (Nov 30 2007)
VulnerabilityResearch_at_DigitalDefense.net
- 2007-06 Sentinel Protection Server Directory Traversal (Nov 26 2007)
Watson Ladd
- Re: Breaking RSA: Totient indirect factorization (Nov 14 2007)
wegotyourbox_at_gmail.com
- [0day Remote Command Execution] VigileCMS <= 1.8 Stealth (Nov 23 2007)
Williams, James K
- Re: SiteMinder Agent: Cross Site Scripting (Nov 09 2007)
zdi-disclosures_at_3com.com
- ZDI-07-069: CA BrightStor ARCserve Backup Message Engine Insecure Method Exposure Vulnerability (Nov 26 2007)
- ZDI-07-067: Apple QuickTime PICT File Poly Opcodes Heap Corruption Vulnerability (Nov 05 2007)
- ZDI-07-068: Apple QuickTime Uncompressedfile Opcode Stack Overflow Vulnerability (Nov 05 2007)
- ZDI-07-065: Apple QuickTime Color Table RGB Parsing Heap Corruption Vulnerability (Nov 05 2007)
- ZDI-07-066: Apple Quicktime PICT File PackBitsRgn Parsing Heap Corruption Vulnerability (Nov 05 2007)
- ZDI-07-059: Verity KeyView SDK Multiple File Format Parsing Vulnerabilities (Oct 31 2007)
- ZDI-07-064: Novell Client Trust Heap Overflow Vulnerability (Oct 31 2007)
- ZDI-07-063: RealPlayer RA Field Size File Processing Heap Oveflow Vulnerability (Oct 31 2007)
- ZDI-07-062: RealNetworks RealPlayer PLS File Memory Corruption Vulnerability (Oct 31 2007)
- ZDI-07-061: RealNetworks RealPlayer SWF Processing Remote Code Execution Vulnerability (Oct 31 2007)
- ZDI-07-060: HP OpenView Radia Integration Server File System Exposure Vulnerability (Oct 31 2007)
- ZDI-07-058: Oracle E-Business Suite SQL Injection Vulnerability (Oct 31 2007)
zero-x_at_linuxmail.org
- Remote Shell Command Execution in "KB-Bestellsystem" (amensa-soft.de) (Nov 22 2007)