Bugtraq: by author

3APA3A
- Re[2]: Apache web server 2.2: htpasswd predictable salt weakness (Feb 16 2008)
- Re: Apache web server 2.2: htpasswd predictable salt weakness (Feb 15 2008)
Adam Laurie
- Announce: RFIDIOt credit card sub-module: ChAP.py (Feb 21 2008)
admin_at_arsalank.com
- aeries browser interface(ABI) 3.8.2.8 Remote SQL Injection (Feb 21 2008)
- aeries browser interface(ABI) 3.7.2.2 Remote SQL Injection (Feb 21 2008)
- aeries browser interface(ABI) 3.8.2.8 XSS (Feb 21 2008)
alex_zooz_zooz_at_hotmail.com
- Joomla <= v1.0.14-RC1(Index.php) Remote File Inclusion Exploit (Feb 08 2008)
amarkov_at_voipshield.com
- Re: Nortel IP Phone DoS (Feb 26 2008)
Amit Klein
- RE: A paper by Amit Klein (Trusteer): "OpenBSD DNS Cache Poisoning and Multiple O/S Predictable IP ID Vulnerability" (Feb 06 2008)
- A paper by Amit Klein (Trusteer): "OpenBSD DNS Cache Poisoning and Multiple O/S Predictable IP ID Vulnerability" (Feb 06 2008)
Anurag Agarwal
- Certification for Web Application Security Professionals (Feb 21 2008)
beenudel1986_at_gmail.com
- phpechocms v 2.0 rc3 RFI (Feb 23 2008)
brad.antoniewicz_at_foundstone.com
- Beehive/SendFile.NET - Secure File Transfer Appliance Hardcoded Credentials (Feb 28 2008)
Brendan Dolan-Gavitt
- Tool release: extract Windows credentials from registry hives (Feb 20 2008)
Brook Powers
- SECURITY ADVISORY - Level Platforms, Inc. Service Center Install Data HTTP Vulnerability (Feb 08 2008)
Bug traq
- RE: ASUS Eee PC rooted out of the box (Feb 08 2008)
cfp_at_ruxcon.org.au
- RUXCON 2008 CALL FOR PAPERS (Feb 17 2008)
Chris Evans
- Ghostscript buffer overflow (Feb 28 2008)
- Sun JRE / JDK bug introduces XXE possibilities (Feb 02 2008)
Cisco Systems Product Security Incident Response Team
- Cisco Security Advisory: Cisco Unified IP Phone Overflow and Denial of Service Vulnerabilities (Feb 13 2008)
- Cisco Security Advisory: SQL injection in Cisco Unified Communications Manager (Feb 13 2008)
ciucciamilcalzino_at_ciuccazzamelo.it
- Youtube Clone Xross Site Scripting (load_message.php) (Feb 01 2008)
cmiyazaki_at_levelplatforms.com
- Re: SECURITY ADVISORY - Level Platforms, Inc. Service Center Install Data HTTP Vulnerability (Feb 14 2008)
cocoruder
- Adobe Reader/Acrobat Remote PDF Print Silently Vulnerability (Feb 07 2008)
Core Security Technologies Advisories
- CORE-2008-0130: VLC media player chunk context validation error (Feb 27 2008)
- CORE-2007-0930 Path Traversal vulnerability in VMware's shared folders implementation (Feb 25 2008)
- CORE-2007-1218: MPlayer 1.0rc2 buffer overflow vulnerability (Feb 04 2008)
- CORE-2008-0122: MPlayer arbitrary pointer dereference (Feb 04 2008)
crazy_kinq_at_hotmail.co.uk
- Netkom Internet Solutions (folder_id) Remote SQL Injection Vulnerability (Feb 13 2008)
- Joovili <= v.2.1 (members_help.php) Remote File İnclude Vulnerability (Feb 07 2008)
- Blackboard (id) Remote SQL Injection (Feb 07 2008)
- Husrev Forums v2.0.1:PoWerBoard (tr) (id) Remote SQL Injection (Feb 07 2008)
cybermilitan_at_hotmail.com
- ITech Classifieds Multiple Remote Vulnerabilities (Feb 01 2008)
- Domain Trader v2.0 Xss Vulnerable (Feb 02 2008)
CYBSEC Advisories
- CYBSEC Security Advisory: Arbitrary file overwrite in Documentum Administrator / Documentum Webtop (Feb 05 2008)
Daniel Roethlisberger
- Urulu 2.1 Blind SQL Injection Vulnerability (CVE-2008-0385) (Feb 28 2008)
dann frazier
- [SECURITY] [DSA 1505-1] New alsa-driver packages fix kernel memory leak (Feb 22 2008)
- [SECURITY] [DSA 1504-1] New Linux kernel 2.6.8 packages fix several issues (Feb 22 2008)
- [SECURITY] [DSA 1503-1] New Linux kernel 2.4.27 packages fix several issues (Feb 22 2008)
- [SECURITY] [DSA 1494-2] New linux-2.6 packages fix privilege escalation (Feb 12 2008)
Danux
- Bypassing OfficeScan Trend Micro AV (Feb 25 2008)
david.reguera_at_inteco.es
- ELFdump crash when analyzing crafted ELF file. (Feb 13 2008)
david130490_at_hotmail.com
- Re: Buffer Overflow Vulnerability in AxRUploadServer.dll, Activex Method (SetLogging) (Feb 08 2008)
- Buffer Overflow Vulnerability in AxRUploadServer.dll, Activex Method (SetLogging) (Feb 08 2008)
db_at_rawsecurity.org
- netOffice Dwins 1.3 Remote code execution. (Feb 29 2008)
- my little forum XSS (Feb 11 2008)
dcid_at_ossec.net
- Re: Re: SQL-injection, XSS in OSSIM (Open Source Security Information Management) (Feb 25 2008)
dean_at_etomite.org
- Re: etomite xss (Feb 18 2008)
Digital Security Research Group
- [DSECRG-08-016] Jinzora 2.7.5 Multiple XSS (Feb 19 2008)
- [DSECRG-08-015] Multiple Security Vulnerabilities in Dokeos 1.8.4 (Feb 19 2008)
- [DSECRG-08-008] Textpattern 4.0.5 Multiple Security Vulnerabilities (Feb 04 2008)
- [DSECRG-08-011] Astrosoft HelpDesk Multiple XSS (Feb 04 2008)
- [DSECRG-08-010] VHD Web Pack 2.0 Local File Include (Feb 04 2008)
- [DSECRG-08-009] xoops 2.0.18 Local File Include (Feb 04 2008)
Digital Security Research Group [DSecRG]
- [DSECRG-08-011 | FIX INFORMATION] Astrosoft HelpDesk Multiple XSS (Feb 14 2008)
- [DSECRG-08-014] Multiple LFI in PowerNews (Newsscript) 2.5.6 (Feb 08 2008)
- [DSECRG-08-013] Modx 0.9.6.1, 0.9.6.1p1 Multiple Security Vulnerabilities (Feb 07 2008)
- [DSECRG-08-012] Multiple LFI in Azucar CMS 1.3 (Feb 05 2008)
Dominique Karg
- Re: SQL-injection, XSS in OSSIM (Open Source Security Information Management) (Feb 21 2008)
Dragos Ruiu
- CanSecWest 2008 Mar 26-28 (Feb 22 2008)
eagle
- DOINGSOFT-2008-02-11-002 IP Diva VPN SSL many XSS attacks (Feb 14 2008)
- DOINGSOFT-2008-02-11 - IPDiva VPN SSL Brute force attack (Feb 14 2008)
ekoparty
- CFP - ekoparty 4th edition (Feb 26 2008)
enterth3dragon_at_gmail.com
- Simple Machines Forum "SMF Shoutbox" Mod Persistent XSS (Feb 10 2008)
f10_at_by-f10.com
- Re: 123 Flash Chat Module for phpBB (Feb 28 2008)
- 123 Flash Chat Module for phpBB (Feb 28 2008)
- Xoops-2.0.16 Remote File Inclusion (Feb 19 2008)
- hi (Feb 10 2008)
Florian Weimer
- [SECURITY] [DSA 1499-1] New pcre3 packages fix arbitrary code execution (Feb 19 2008)
- [SECURITY] [DSA 1494-1] New linux-2.6 packages fix privilege escalation (Feb 11 2008)
forensec_at_yahoo.de
- gkrellweather (Feb 11 2008)
Foresight Linux Essential Announcement Service
- FLEA-2008-0007-1 gd (Feb 12 2008)
- FLEA-2008-0001-1 firefox (Feb 11 2008)
- FLEA-2008-0005-1 e2fsprogs (Feb 12 2008)
- FLEA-2008-0004-1 rsync (Feb 12 2008)
- FLEA-2008-0002-1 python (Feb 12 2008)
- FLEA-2008-0006-1 tetex tetex-dvips tetex-fonts (Feb 12 2008)
- FLEA-2008-0003-1 nss_ldap (Feb 12 2008)
FreeBSD Security Advisories
- FreeBSD Security Advisory FreeBSD-SA-08:04.ipsec (Feb 14 2008)
- FreeBSD Security Advisory FreeBSD-SA-08:03.sendfile (Feb 14 2008)
goldshlager19_at_gmail.com
- IBM Quickr 8 Calendar Xss Injection (Bypass Quickr 8.0 Xss Filter) (Feb 22 2008)
gregory
- Re: rPSA-2008-0052-1 kernel (Feb 13 2008)
Gynvael Coldwind
- [HISPASEC] FireFox 2.0.0.11 and Opera 9.50 beta Remote Memory Information Leak, FireFox 2.0.0.11 Remote Denial of Service (Feb 16 2008)
hackturkiye.hackturkiye_at_gmail.com
- joomla com_simpleshop SQL Injection(section) # (Feb 24 2008)
- joomla com_wines SQL Injection(id) (Feb 24 2008)
- joomla com_garyscookbook SQL Injection(id) (Feb 24 2008)
- php-nuke Quran SQL Injection(surano) (Feb 23 2008)
- aura cms lihatberita SQL Injection(id) (Feb 23 2008)
- php nuke gallery SQL Injection(aid) (Feb 23 2008)
- php-nuke Kuran SQL Injection(surano) (Feb 23 2008)
- php-nuke Recipes SQL Injection(recipeid) (Feb 23 2008)
- php nuke Sections SQL Injection(print) (Feb 23 2008)
- joomla com_hello_world SQL Injection(id) (Feb 23 2008)
- joomla com_product SQL Injection(catid) (Feb 23 2008)
- joomla SQL Injection(com_cms) (Feb 21 2008)
- joomla SQL Injection(com_asortyment)katid (Feb 21 2008)
- XOOPS Module prayerlist SQL Injection(cid) (Feb 21 2008)
- joomla SQL Injection(com_most)secid (Feb 21 2008)
- joomla SQL Injection(com_mygallery) (Feb 21 2008)
- PHP-Nuke Module Downloads SQL Injection(sid) (Feb 21 2008)
- PHP-Nuke genaral print SQL Injection(id) (Feb 21 2008)
- PHP-Nuke Module Dossiers Injection(did) (Feb 21 2008)
- PHP-Nuke Siir SQL Injection(id) (Feb 21 2008)
- XOOPS Module tinyevent-print SQL Injection(id) (Feb 21 2008)
- joomla SQL Injection(com_idvnews) (Feb 21 2008)
- PHP-Nuke Module BenchmarkNewsInjection(sid) (Feb 21 2008)
- joomla SQL Injection(com_joomlavvz) (Feb 21 2008)
- joomla SQL Injection(com_referenzen) (Feb 21 2008)
- PHP-Nuke Module Classifieds SQL Injection(Details) (Feb 21 2008)
- joomla SQL Injection(com_asortyment)katid (Feb 21 2008)
- PHP-Nuke Module Web_Links SQL Injection(cid) (Feb 19 2008)
- XOOPS Module wflinks SQL Injection(cid) (Feb 19 2008)
- XOOPS Module eEmpregos SQL Injection(cid) (Feb 19 2008)
- XOOPS Module classifieds SQL Injection(cid) (Feb 19 2008)
- joomla SQL Injection(com_magazine) (Feb 18 2008)
- XOOPS Module seminars SQL Injection (Feb 19 2008)
- XOOPS Module badliege SQL Injection (Feb 19 2008)
- XOOPS Module events SQL Injection (Feb 19 2008)
- XOOPS Module vacatures SQL Injection (Feb 19 2008)
- joomla SQL Injection(com_foevpartners) (Feb 18 2008)
- joomla SQL Injection(com_genealogy) (Feb 18 2008)
- joomla SQL Injection(com_listoffreeads) (Feb 18 2008)
- joomla SQL Injection(com_facileforms) (Feb 18 2008)
- XOOPS Module myTopics-print SQL Injection(articleid) (Feb 18 2008)
- XOOPS Module wflinks SQL Injection(cid) (Feb 18 2008)
- joomla SQL Injection(com_geoboerse) (Feb 18 2008)
- joomla SQL Injection(com_detail) (Feb 18 2008)
- joomla SQL Injection(com_team (Feb 18 2008)
- joomla SQL Injection(com_formtool) (Feb 18 2008)
- joomla SQL Injection(com_iigcatalog) (Feb 18 2008)
- XOOPS Module section SQL Injection(articleid) (Feb 18 2008)
- (tip=sollinkicerik)SQL Injection Vulnerability (Feb 16 2008)
- joomla SQL Injection(com_ricette) (Feb 16 2008)
- joomla SQL Injection (cat)(com_downloads) (Feb 16 2008)
- WordPress album PHOTO SQL Injection (Feb 16 2008)
- joomla SQL Injection(com_jooget) (Feb 16 2008)
- Wordpress Plugin (wp-people) SQL Injection (Feb 16 2008)
- WordPress SQL Injection(wp-content-simple-forum) (Feb 16 2008)
- joomla SQL Injection(com_galeria) (Feb 16 2008)
- joomla SQL Injection(com_filebase) (Feb 16 2008)
- joomla SQL Injection(com_detail) (Feb 16 2008)
- Wordpress Plugin (wp-content/recipe) SQL Injection (Feb 16 2008)
- WordPress forumaction (PAGE_id)(user)SQL Injection (Feb 16 2008)
- joomla SQL Injection(com_profile) (Feb 16 2008)
- joomla SQL Injection(com_sg) (Feb 15 2008)
- joomla SQL Injection(com_emcompose) (Feb 16 2008)
- joomla SQL Injection(com_filebase) (Feb 15 2008)
- joomla SQL Injection(com_lexikon) (Feb 15 2008)
- joomla SQL Injection( com_scheduling) (Feb 16 2008)
- joomla SQL Injection(com_salesrep) (Feb 15 2008)
- Simple Forum Version 1.7-1.9(pagename) (Feb 15 2008)
- all version Wordpress FORUM S@L injection (Feb 15 2008)
- joomla faq SQL Injection (Feb 13 2008)
- joomla com_activities sql injection (Feb 13 2008)
- Ecommerce Websites from b1st.com SQL Injection (Feb 15 2008)
- joomla "com_smslist" sql injecton (Feb 14 2008)
- engineering Neoteric UK LTD S@L İNJECTİON (Feb 15 2008)
- Simple Forum Version 1.10-1.11 SQL Injection (Feb 15 2008)
- SellOwnHouse login SQL Injection (Feb 13 2008)
- joomla "com_omnirealestate" S@L Injection (Feb 13 2008)
- joomla "com_model" (Feb 13 2008)
- joomla upload php code or picture (com_uhp) (Feb 13 2008)
- all forums.asp hack (Feb 13 2008)
- ALL VERSİON PHPAUTOVİDEO c99 shell (Feb 13 2008)
- Provided By Development Solutions SQL Injection Exploit(panel) (Feb 13 2008)
- joomll(k12.tr)(com_mezun)SQL Injection (Feb 12 2008)
- Kommentare zum Download script SQL Injection (Feb 12 2008)
- joomla (k12.tr)(com_iomezun)SQL Injection (Feb 12 2008)
hadihadi_zedehal_2006_at_yahoo.com
- artmedic_weblog Cross Site Scriptting Vulnerbility (Feb 14 2008)
Hamza Almersoumi
- Softbiz jokes and funny pictures (index.php) sql injection (Feb 24 2008)
Hendrik Jan Verheij
- Joomla 1.0.13 - 1.0.14 / (remote) PHP file inclusion possible if old configuration.php (Feb 14 2008)
Hernan Ochoa
- Release: Pass-The-Hash toolkit v1.3 (Feb 29 2008)
hk_at_lwd.de
- Re: PR07-38: XSS on sIFR (Feb 05 2008)
houssamix_at_hotmail.fr
- PKs Movie Database version 3.0.3 (SQL/XSS) (Feb 09 2008)
iDefense Labs
- iDefense Security Advisory 02.26.08: Mozilla Thunderbird MIME External-Body Heap Overflow Vulnerability (Feb 26 2008)
- iDefense Security Advisory 02.26.08: Symantec Scan Engine 5.1.2 RAR File Buffer Overflow Vulnerability (Feb 26 2008)
- iDefense Security Advisory 02.26.08: Symantec Scan Engine 5.1.2 RAR File Denial of Service Vulnerability (Feb 26 2008)
- Re: iDefense Security Advisory 02.19.08: EMC RepliStor Multiple Heap Overflow Vulnerabilities (Feb 20 2008)
- iDefense Security Advisory 02.20.08: Symantec Veritas Storage Foundation Scheduler Service DoS Vulnerability (Feb 20 2008)
- iDefense Security Advisory 02.19.08: EMC RepliStor Multiple Heap Overflow Vulnerabilities (Feb 20 2008)
- iDefense Security Advisory 02.12.08: Adobe Flash Media Server 2 Memory Corruption Vulnerability (Feb 12 2008)
- iDefense Security Advisory 02.12.08: Adobe Flash Media Server 2 Multiple Integer Overflow Vulnerabilities (Feb 12 2008)
- iDefense Security Advisory 02.12.08: Microsoft Internet Explorer Property Memory Corruption Vulnerability (Feb 12 2008)
- iDefense Security Advisory 02.12.08: Microsoft Office Works Converter Stack-based Buffer Overflow Vulnerability (Feb 12 2008)
- iDefense Security Advisory 02.12.08: Microsoft Office Works Converter Heap Overflow Vulnerability (Feb 12 2008)
- iDefense Security Advisory 02.12.08: ClamAV libclamav PE File Integer Overflow Vulnerability (Feb 12 2008)
- iDefense Security Advisory 02.08.08: Adobe Reader and Acrobat Multiple Stack-based Buffer Overflow Vulnerabilities (Feb 09 2008)
- iDefense Security Advisory 02.08.08: Adobe Reader Security Provider Unsafe Libary Path Vulnerability (Feb 08 2008)
- iDefense Security Advisory 02.08.08: Adobe Reader and Acrobat JavaScript Insecure Method Exposure Vulnerability (Feb 08 2008)
- iDefense Security Advisory 02.07.08: IBM DB2 Universal Database Administration Server Memory Corruption Vulnerability (Feb 07 2008)
- iDefense Security Advisory 02.07.08: IBM DB2 Universal Database db2pd Arbitrary Library Loading Vulnerability (Feb 07 2008)
- iDefense Security Advisory 02.04.08: Hewlett-Packard Network Node Manager Topology Manager Service DoS Vulnerability (Feb 06 2008)
- iDefense Security Advisory 01.31.08: IBM Informix Dynamic Server onedcu File Creation Vulnerability (Feb 04 2008)
- iDefense Security Advisory 01.31.08: IBM Informix Dynamic Server SQLIDEBUG File Creation Vulnerability (Feb 04 2008)
info_at_livecart.com
- LiveCart XSS vulnerability fixed since version 1.1.0 (Feb 01 2008)
infocus
- [INFIGO-2008-02-13]: SOPHOS Email Security Appliance Cross Site Scripting Vulnerability (Feb 15 2008)
IOActive Advisories
- IOActive Security Advisory: Multiple Remote SiteScope Vulnerabilities (Feb 11 2008)
- IOActive Security Advisory: Legacy mod_jk2 Buffer Overflow (Feb 11 2008)
ivangaravito_at_gmail.com
- Re: Tested on Webmin 1.390 (Feb 06 2008)
Jacob Appelbaum
- Re: Loginwindow.app and Mac OS X (Feb 28 2008)
- Loginwindow.app and Mac OS X (Feb 28 2008)
- Cold Boot Attacks on Disk Encryption (Feb 21 2008)
jamboomla_at_gmail.com
- Re: Mambo 4.6.3 Path Disclosure, XSS , XSRF, DOS (Feb 27 2008)
Jamie Strandboge
- [USN-582-1] Thunderbird vulnerabilities (Feb 29 2008)
- [USN-580-1] libcdio vulnerability (Feb 21 2008)
- [USN-579-1] Qt vulnerability (Feb 21 2008)
- [USN-578-1] Linux kernel vulnerabilities (Feb 13 2008)
- [USN-576-1] Firefox vulnerabilities (Feb 07 2008)
- [USN-575-1] Apache vulnerabilities (Feb 04 2008)
jfvanmeter_at_comcast.net
- Re: Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0 (Feb 12 2008)
- Re: Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0 (Feb 12 2008)
- Re: Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0 (Feb 12 2008)
Jon R. Kibler
- Academic Computer Security Conference (Feb 21 2008)
jplopezy_at_gmail.com
- SmarterMail Enterprise 4.3 - malformed mail XSS (Feb 18 2008)
jyvaeskylae_at_gmail.com
- Re: artmedic_weblog Cross Site Scriptting Vulnerbility (Feb 15 2008)
Kees Cook
- [USN-581-1] PCRE vulnerability (Feb 21 2008)
Krzysztof Burghardt
- Search Unleashed 0.2.10 JavaScript injection (Wordpress plugin) (Feb 13 2008)
L4teral
- ProjectPier <= 0.80 Cross Site Scripting and Request Forgery (Feb 17 2008)
- ATutor <= 1.5.5 Cross Site Scripting (Feb 17 2008)
- Anon Proxy Server <= 0.102 remote buffer overflow (Feb 03 2008)
laurent.gaffie_at_gmail.com
- QuickTime <= 7.4.1 QTPlugin.ocx Multiple Remote Stack Overflow (Feb 12 2008)
- jetAudio <= 7.0.5 (.ASX) Remote Stack Overflow (Feb 08 2008)
linke_z_at_hotmail.com
- Re: ACER Travelmate 600 and 800 series - Smartcard flawed Implementation (Feb 12 2008)
lovebug_at_hotmail.it
- php-nuke sql injection reportaj [secid] (Feb 26 2008)
luca.carettoni_at_securenetwork.it
- Philips VOIP841 Multiple Vulnerabilities (Feb 14 2008)
Luigi Auriemma
- Buffer-overflow in the passwords handling of Trend Micro OfficeScan 8.0 and possibly other products (Feb 27 2008)
- NULL pointer in SurgeFTP 2.3a2 (Feb 25 2008)
- Format string and buffer-overflow in SurgeMail 38k4 (Feb 25 2008)
- Multiple vulnerabilities in Double-Take 5.0.0.2865 (Feb 22 2008)
- Heap overflow in Sybase MobiLink 10.0.1.3629 (Feb 20 2008)
- Access violation and limited informations disclosure in webcamXP 3.72.440.0 (Feb 19 2008)
- Two heap overflow in Foxit WAC Server 2.0 Build 3503 (Feb 19 2008)
- Multiple buffer-overflow in NowSMS v2007.06.27 (Feb 19 2008)
- NULL pointer crash in freeSSHd 1.20 (Feb 19 2008)
- Re: Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0 (Feb 12 2008)
- Re: Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0 (Feb 12 2008)
- Directory traversal and DoS in WinIPDS G52-33-021 (Feb 12 2008)
- Unicode buffer-overflow in RPM Remote Print Manager 4.5.1.11 (Feb 12 2008)
- Re: Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0 (Feb 12 2008)
- Format string and buffer-overflow in Lst Network Print Server 9.4.2 build 105 (Feb 11 2008)
- Format string and DoS in Opium OPI and cyanPrintIP servers 4.10.x (Feb 11 2008)
- Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0 (Feb 11 2008)
- Multiple vulnerabilities in EztremeZ-IP File and Printer Server 5.1.2x15 (Feb 11 2008)
- NULL byte writing in Emerald, RadiusNT/X and Air Marshal (Feb 08 2008)
- Multiple vulnerabilities in Ipswitch Instant Messaging 2.0.8.1 (Feb 07 2008)
- Chat vulnerabilities in TinTin++ 1.97.9 (Feb 06 2008)
- Logs visualization in WS_FTP Server Manager 6.1.0.0 (Feb 06 2008)
- Multiple vulnerabilities in WinCom LPD Total 3.0.2.623 (Feb 04 2008)
- Multiple vulnerabilities in SAPlpd 6.28 (Feb 04 2008)
- Socket termination in FTP Log Server 7.9.14.0 (Feb 04 2008)
manuel.no_spam.bruneau_at_voi_la.fr
- Re: Joomla 1.0.13 - 1.0.14 / (remote) PHP file inclusion possible if old configuration.php (Feb 15 2008)
marcin.kopec_at_hotmail.com
- SQL-injection, XSS in OSSIM (Open Source Security Information Management) (Feb 21 2008)
Mario Sergio Candian
- cacti -- Multiple security vulnerabilities have been discovered (Feb 12 2008)
Mark Thomas
- [SECURITY] CVE-2007-6286: Tomcat duplicate request processing vulnerability (Feb 08 2008)
- [SECURITY] CVE-2007-5333: Tomcat Cookie handling vulnerabilities (Feb 08 2008)
- CVE-2008-0002: Tomcat information disclosure vulnerability (Feb 08 2008)
Matt Johnston
- Re: Loginwindow.app and Mac OS X (Feb 28 2008)
Matteo Beccati
- [OPENADS-SA-2008-001] Openads 2.4.2 vulnerability fixed (Feb 04 2008)
Matthieu Suiche
- SandMan 1.0.080226 is out! (Feb 26 2008)
mattyg_at_hotmail.com
- Re: Philips VOIP841 Multiple Vulnerabilities (Feb 15 2008)
Michael Neal Vasquez
- Checkpoint SecuRemote/Secure Client NGX Auto Local Logon Vulnerability (Feb 07 2008)
morin.josh_at_gmail.com
- Apple iPhone 1.1.3 remote DoS exploit (Feb 05 2008)
Moritz Muehlenhoff
- [SECURITY] [DSA 1506-1] New iceape packages fix several vulnerabilities (Feb 24 2008)
- [SECURITY] [DSA 1495-2] New nagios-plugins packages fix regression (Feb 17 2008)
- [SECURITY] [DSA 1497-1] New clamav packages fix several vulnerabilities (Feb 16 2008)
- [SECURITY] [DSA 1496-1] New mplayer packages fix arbitrary code execution (Feb 12 2008)
- [SECURITY] [DSA 1495-1] New nagios-plugins packages fix several vulnerabilities (Feb 12 2008)
- [SECURITY] [DSA 1493-1] New sdl-image1.2 packages fix arbitrary code execution (Feb 10 2008)
- [SECURITY] [DSA 1490-1] New tk8.3 packages fix arbitrary code execution (Feb 10 2008)
- [SECURITY] [DSA 1491-1] New tk8.4 packages fix arbitrary code execution (Feb 10 2008)
- [SECURITY] [DSA 1492-1] New wml packages fix denial of service (Feb 10 2008)
- [SECURITY] [DSA 1489-1] New iceweasel packages fix several vulnerabilities (Feb 10 2008)
- [SECURITY] [DSA 1484-1] New xulrunner packages fix several vulnerabilities (Feb 10 2008)
- [SECURITY] [DSA 1485-1] New icedove packages fix several vulnerabilities (Feb 10 2008)
- [SECURITY] [DSA 1487-1] New libexif packages fix several vulnerabilities (Feb 08 2008)
- [SECURITY] [DSA 1482-1] New squid packages fix denial of service (Feb 05 2008)
- [SECURITY] [DSA 1480-1] New poppler packages fix several vulnerabilities (Feb 05 2008)
- [SECURITY] [DSA 1481-1] New python-cherrypy packages fix denial of service (Feb 05 2008)
muuratsalo experimental hack lab
- lightblog 9.6 local file inclusion vulnerability (Feb 16 2008)
- banpro-dms 1.0 local file inclusion vulnerability (Feb 16 2008)
- scribe 0.2 local file inclusion vulnerability (Feb 14 2008)
- PlutoStatus Locator v1.0pre (alpha) local file inclusion vulnerability (Feb 14 2008)
- artmedic weblog multiple local file inclusion vulnerabilities (Feb 13 2008)
- artmedic weblog multiple xss vulnerabilities (Feb 12 2008)
- mini-pub 0.3 multiple vulnerabilities (Feb 07 2008)
nbbn_at_gmx.net
- Wordpress Plugin Sniplets 1.1.2 Multiple Vulnerabilities (Feb 25 2008)
- WoltLab Burning Board 3.0.3 PL1 SQL-Injection Vulnerability (Feb 19 2008)
- RunCMS 1.6.1 Multiple XSS and XSRF Vulnerabilties (Feb 16 2008)
- Wordpress Pluging wp-footnotes 2.2 (admin_panel.php) Multiple Vulnerabilites (Feb 01 2008)
- Wordpress Plugin dmsguestbook 1.7.0 Multiple Remote Vulnerabilities (Feb 02 2008)
nnposter_at_disclosed.not
- Packeteer Products File Listing XSS (Feb 24 2008)
- Alkacon OpenCms tree_files.jsp resource XSS (Feb 24 2008)
- F5 BIG-IP Web Management Console CSRF (with example) (Feb 10 2008)
- F5 BIG-IP Web Management Console CSRF (Feb 09 2008)
no-reply_at_aria-security.net
- PHP-Nuke My_eGallery "gid" Remote SQL Injection (Feb 27 2008)
- Aria-Security.Net: Joomla Com_publication "pid" Remote SQL Injection (Feb 23 2008)
- Php Nuke "Sell" module SQL Injection ("cid") (Feb 24 2008)
- Pigyard Art Gallery Multiple SQL Injection (Feb 24 2008)
- Joomla com_inter "id" Remote SQL Injection (Feb 23 2008)
- Joomla Com_blog "pid" Remote SQL Injection (Feb 23 2008)
- Joomla com_stat "id" Remote SQL Injection (Feb 23 2008)
- [Aria-Security.Net] BestWebApp Dating System SQL Injection (Feb 22 2008)
- Mercury v1.1.5 Send Message Cross-Site Scripting (Feb 10 2008)
- پيش گزيده Website Design Chat Software Remote Cross-Site Scripting (Feb 10 2008)
- Tested on Webmin 1.390 (Feb 05 2008)
Noah Meyerhans
- [SECURITY] [DSA 1509-1] New koffice packages fix multiple vulnerabilities (Feb 25 2008)
- [SECURITY] [DSA 1502-1] New wordpress packages fix multiple vulnerabilities (Feb 21 2008)
- [SECURITY] [DSA 1483-1] New net-snmp packages fix denial of service vulnerability (Feb 06 2008)
oc photon
- Re: Loginwindow.app and Mac OS X (Feb 28 2008)
Ofer Shezaf
- Web Hacking Incidents Database Update for Feb 20th (Feb 20 2008)
- Web Hacking Incidenets Database 2007 annual Report is out (Feb 07 2008)
omnipresent_at_email.it
- LightBlog Remote File Upload Vulnerability (Feb 01 2008)
Open Phugu
- Some interesting hashes (Feb 08 2008)
organiser_at_syscan.org
- SyScan'08 Call for Paper/Training (Feb 12 2008)
Ozgur Ozdemircili
- Crafty Syntax Xss Vulnerability (Feb 18 2008)
p_s3rver_at_yahoo.com
- Vwar New Bug (Feb 13 2008)
- Vwar 1.5.0 (Feb 10 2008)
packet_at_packetstormsecurity.org
- Re: Powered by Pagetool Ver (1.04-05-06-07) (Feb 25 2008)
- Re: XOOPS Module wflinks SQL Injection(cid) (Feb 19 2008)
- Re: Vwar New Bug (Feb 13 2008)
Paul Laudanski
- CastleCops Six Years Old (Feb 23 2008)
Pete Herzog
- security and aluminum foil hats (Feb 28 2008)
Peter Watkins
- Re: Apache web server 2.2: htpasswd predictable salt weakness (Feb 15 2008)
- Apache web server 2.2: htpasswd predictable salt weakness (Feb 13 2008)
Pierre-Yves Rofes
- [ GLSA 200802-11 ] Asterisk: Multiple vulnerabilities (Feb 26 2008)
- [ GLSA 200802-09 ] ClamAV: Multiple vulnerabilities (Feb 21 2008)
- [ GLSA 200802-07 ] Pulseaudio: Privilege escalation (Feb 13 2008)
- [ GLSA 200802-06 ] scponly: Multiple vulnerabilities (Feb 12 2008)
- [ GLSA 200802-05 ] Gnumeric: User-assisted execution of arbitrary code (Feb 12 2008)
- [ GLSA 200802-04 ] Gallery: Multiple vulnerabilities (Feb 11 2008)
- [ GLSA 200802-03 ] Horde IMP: Security bypass (Feb 11 2008)
- [ GLSA 200802-02 ] Doomsday: Multiple vulnerabilities (Feb 06 2008)
ProCheckUp Research
- PR07-41: XSS on Juniper Networks Secure Access 2000 (Feb 28 2008)
- PR07-42: Webroot disclosure on Juniper Networks Secure Access 2000 (Feb 28 2008)
- ZyXEL Gateways Vulnerability Research: http://www.procheckup.com/Hacking_ZyXEL_Gateways.pdf (Feb 21 2008)
- PR06-12: XSS on BEA Plumtree Foundation and AquaLogic Interaction portals (Feb 19 2008)
- PR08-01: Several XSS, a cross-domain redirect and a webroot disclosure on Spyce - Python Server Pages (PSP) (Feb 19 2008)
ralph_at_etomite.org
- Re: etomite xss (Feb 18 2008)
Raphael Marichez
- [ GLSA 200802-08 ] Boost: Denial of Service (Feb 14 2008)
- [ GLSA 200802-01 ] SDL_image: Two buffer overflow vulnerabilities (Feb 06 2008)
Raymond_Villafania_at_support.trendmicro.com
- RE: Buffer-overflow in the passwords handling of Trend Micro OfficeScan 8.0 and possibly other products (Feb 27 2008)
research_at_symantec.com
- SYMSA-2008-001: Lyris ListManager - Multiple Vulnerabilities (Feb 18 2008)
Reversemode
- [Reversemode Advisory] February Advisories : Microsoft Word 2003 + Fortinet Forticlient (Feb 13 2008)
richard_at_oblius.com
- Re: XSS on Obedit v3.03 (Feb 13 2008)
RISE Security
- Re: RE: ASUS Eee PC rooted out of the box (Feb 08 2008)
- ASUS Eee PC rooted out of the box (Feb 08 2008)
Robert Buchholz
- [ GLSA 200802-12 ] xine-lib: User-assisted execution of arbitrary code (Feb 26 2008)
- [ GLSA 200802-10 ] Python: PCRE Integer overflow (Feb 23 2008)
robert.ingruber_at_siemens.com
- Re: Multiple vulnerabilities in SAPlpd 6.28 (Feb 05 2008)
rose-of-a_at_hotmail.com
- Re: DOINGSOFT-2008-02-11-002 IP Diva VPN SSL many XSS attacks (Feb 14 2008)
rPath Update Announcements
- rPSA-2008-0094-1 kernel (Feb 29 2008)
- rPSA-2008-0093-1 thunderbird (Feb 29 2008)
- rPSA-2008-0092-1 tshark wireshark (Feb 29 2008)
- rPSA-2008-0091-1 cups (Feb 29 2008)
- rPSA-2008-0082-1 espgs (Feb 28 2008)
- rPSA-2008-0088-1 am-utils (Feb 28 2008)
- rPSA-2008-0086-1 pcre (Feb 28 2008)
- rPSA-2008-0084-1 lighttpd (Feb 28 2008)
- rPSA-2008-0059-1 openldap openldap-clients openldap-servers (Feb 12 2008)
- rPSA-2008-0056-1 mailman (Feb 15 2008)
- rPSA-2008-0063-1 boost (Feb 13 2008)
- rPSA-2008-0061-1 SDL_image (Feb 13 2008)
- rPSA-2008-0054-1 tk (Feb 12 2008)
- rPSA-2008-0052-1 kernel (Feb 12 2008)
- rPSA-2008-0051-1 firefox (Feb 08 2008)
- rPSA-2008-0048-1 kernel (Feb 08 2008)
- rPSA-2008-0046-1 gd (Feb 06 2008)
- rPSA-2008-0043-1 icu (Feb 06 2008)
- rPSA-2008-0040-1 mysql mysql-bench mysql-server (Feb 05 2008)
rvandenbrink_at_metafore.ca
- Re: Re: PIX Privilege Escalation Vulnerability (Feb 04 2008)
S21sec labs
- S21SEC-040-en: Infinite invalid authentication attempts possible in BEA WebLogic Server (Feb 25 2008)
s4tan
- Cacti 0.8.7a Multiple Vulnerabilities (Feb 12 2008)
securfrog_at_gmail.com
- Sami FTP Server 2.0.* Multiple Remote Vulnerabilities (Feb 14 2008)
- UniversalFtp Server 1.0.44 Multiple Remote Denial of service (Feb 14 2008)
- Re: UniversalFtp Server 1.0.44 Multiple Remote Denial of service (Feb 14 2008)
- Rosoft Media Player 4.1.8 Buffer Overflow ( .M3U) (Feb 14 2008)
- dBpowerAMP Audio Player Release 2 Remote Buffer Overflow (Feb 05 2008)
- NERO Media Player <= 1.4.0.35b Remote Buffer Overflow( .M3U) (Feb 05 2008)
- IpSwitch WS_FTPSERVER with SSH remote Buffer Overflow (Feb 02 2008)
- Titan FTP Server Remote Heap Overflow (USER/PASS) (Feb 01 2008)
Security Basic
- Thanks to all, ExploitSearch in Top5 security must-have (Feb 12 2008)
security-alert_at_hp.com
- [security bulletin] HPSBGN02298 SSRT071502 rev.3 - HP Notebook PC Quick Launch Button (QLB) Software Running on Windows, Remote Execution of Arbitrary Code, Gain Privileged Access (Feb 22 2008)
- [security bulletin] HPSBST02314 SSRT080016 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-003 to MS08-013 (Feb 21 2008)
- [security bulletin] HPSBTU02311 SSRT080001 rev.1 - HP Tru64 UNIX running Perl, Remote Execution of Arbitrary Code (Feb 20 2008)
- [security bulletin] HPSBUX02313 SSRT080015 rev.1 - HP-UX Running Apache, Remote Execution of Arbitrary Code (Feb 13 2008)
- [security bulletin] HPSBMA02274 SSRT071445 rev.3 - HP System Management Homepage (SMH) for HP-UX, Remote Cross Site Scripting (XSS) (Feb 13 2008)
- [security bulletin] HPSBUX02249 SSRT071442 rev.3 - HP-UX Running the Ignite-UX or the DynRootDisk (DRD) get_system_info Command, Local Unqualified Configuration Change (Feb 13 2008)
- [security bulletin] HPSBMA02309 SSRT080013 rev.1 - HP Select Identity Software, Remote Unauthorized Access (Feb 07 2008)
- [security bulletin] HPSBGN02310 SSRT080007 rev.1 - HP Virtual Rooms Running on Windows, Remote Execution of Arbitrary Code (Feb 06 2008)
- [security bulletin] HPSBST02302 SSRT071474 rev.1 - HP Storage Essentials SRM, Remote Unauthorized Access (Feb 06 2008)
- [security bulletin] HPSBMA02307 SSRT071420 rev.1 - HP OpenView Network Node Manager (OV NNM) Remote Denial of Service (DoS) (Feb 05 2008)
- [security bulletin] HPSBUX02308 SSRT080010 rev.1 - HP-UX Running Apache, Remote Execution of Arbitrary Code (Feb 04 2008)
security_at_mandriva.com
- [ MDVSA-2008:056 ] - Updated gnumeric packages fix vulnerability (Feb 29 2008)
- [ MDVSA-2008:055 ] - Updated ghostscript packages fix arbitrary code execution vulnerability (Feb 28 2008)
- [ MDVSA-2008:054 ] - Updated dbus packages fix vulnerability (Feb 28 2008)
- [ MDVSA-2008:053 ] - Updated pcre packages fix vulnerability (Feb 27 2008)
- [ MDVSA-2008:052 ] - Updated cacti packages fix multiple vulnerabilities (Feb 27 2008)
- [ MDVSA-2008:051 ] - Updated cups packages fix vulnerabilities (Feb 26 2008)
- [ MDVSA-2008:050 ] - Updated cups packages fix multiple vulnerabilities (Feb 26 2008)
- [ MDVSA-2008:049 ] - Updated nss_ldap package fixes race condition allowing user data theft (Feb 25 2008)
- [ MDVSA-2008:048 ] - Updated Firefox packages fix multiple vulnerabilities (Feb 22 2008)
- [ MDVSA-2008:046-1 ] - Updated xine-lib package fixes arbitrary code execution vulnerability (Feb 20 2008)
- [ MDVSA-2007:047 ] - Updated Thunderbird packages fix multiple vulnerabilities (Feb 19 2008)
- [ MDVSA-2008:046 ] - Updated xine-lib package fixes arbitrary code execution vulnerability (Feb 15 2008)
- [ MDVSA-2008:045 ] - Updated MPlayer packages fix a few vulnerabilities (Feb 14 2008)
- [ MDVSA-2008:044 ] - Updated kernel packages fix multiple vulnerabilities and bugs (Feb 12 2008)
- [ MDVSA-2008:043 ] - Updated kernel packages fix multiple vulnerabilities and bugs (Feb 11 2008)
- [ MDVSA-2008:039 ] - Updated netpbm packages fix buffer overflow vulnerability (Feb 07 2008)
- [ MDVSA-2008:038 ] - Updated gd packages fix buffer overflow vulnerability (Feb 07 2008)
- [ MDVSA-2008:042 ] - Updated Qt4 packages fix vulnerability in QSslSocket (Feb 07 2008)
- [ MDVSA-2008:040 ] - Updated SDL_image packages fix vulnerabilities (Feb 07 2008)
- [ MDVSA-2008:041 ] - Updated tk packages fix buffer overflow vulnerability (Feb 07 2008)
- [ MDVSA-2008:037 ] - Updated libcdio packages fix DoS vulnerability (Feb 07 2008)
- [ MDVSA-2008:036 ] - Updated CUPS packages fix SNMP vulnerability (Feb 06 2008)
- [ MDVSA-2008:035 ] - Updated libcdio packages fix DoS vulnerability (Feb 05 2008)
- [ MDVSA-2008:034 ] - Updated emacs packages fix vulnerabilities (Feb 04 2008)
- [ MDVSA-2008:033 ] - Updated ruby-gnome2 packages fix arbitrary code execution vulnerability (Feb 01 2008)
- [ MDVSA-2008:032 ] - Updated boost packages fix DoS vulnerabilities (Feb 01 2008)
- [ MDVSA-2008:031 ] - (Feb 01 2008)
- [ MDVSA-2008:030 ] - Updated pcre packages fix vulnerability (Jan 31 2008)
security_at_soqor.net
- PHPMyTourney Remote file include Vulnerability (Feb 29 2008)
Sekomirza_at_windowslive.com
- StatCounteX 3.0 & 3.1 Admin Vulnerability (Feb 14 2008)
sex_at_aaa-aaa.net.ru
- LI-countdown SQL Injection Vulnerability (Feb 12 2008)
si0uxsecurity_at_hotmail.com
- Re: CSA-L03: Linux kernel vmsplice unchecked user-pointer dereference (Feb 19 2008)
sipherr_at_gmail.com
- Re: Re: Nortel IP Phone DoS (Feb 26 2008)
- Nortel IP Phone DoS (Feb 26 2008)
staad1_at_gmail.com
- Default Multiple Joomla! Component com_rapidrecipe "user_id=" Remote SQL Inj. (Feb 10 2008)
Stefan Esser
- Advisory SE-2008-01: PunBB Blind Password Recovery Vulnerability (Feb 20 2008)
Stefano Zanero
- CFP: Workshop on Open Source Software for Computer and Network Forensics (Feb 20 2008)
- Final CFP: EuroSec Workshop (March 31st, 2008) (Feb 10 2008)
Steve Kemp
- [SECURITY] [DSA 1507-1] New turba2 packages fix permission testing (Feb 24 2008)
- [SECURITY] [DSA 1500-1] New splitvt packages fix privilege escalation (Feb 21 2008)
- [SECURITY] [DSA 1498-1] New libimager-perl packages fix arbitrary code execution (Feb 19 2008)
- [SECURITY] [DSA 1486-1] New gnatsweb packages fix cross-site scripting (Feb 05 2008)
Steve Shockley
- Re: Logs visualization in WS_FTP Server Manager 6.1.0.0 (Feb 06 2008)
sub
- The Everything Development System - SQL Injection (Feb 01 2008)
subere_at_uncon.org
- EDLGraph 1.0 (Feb 21 2008)
Sw33t.h4cK3r_at_hotmail.com
- SQL in Archimede Net 2000 "E-Guest_show.php" (Feb 01 2008)
sys-project_at_hotmail.com
- Centreon <= 1.4.2.3 (index.php) Remote File Disclosure (Feb 29 2008)
- Simple CMS <= 1.0.3 (indexen.php area) Remote SQL Injection Exploit (Feb 17 2008)
th3.r00k.nospam_at_pork.gmail.com
- etomite xss (Feb 13 2008)
theredc0ders_at_gmail.com
- phpShop <= v 0.8.1 Remote SQL injection / Filter Bypass (Feb 02 2008)
Thijs Kinkhorst
- [SECURITY] [DSA 1510-1] New ghostscript packages fix arbitrary code execution (Feb 27 2008)
- [SECURITY] [DSA 1508-1] New diatheke packages fix arbirary shell command execution (Feb 25 2008)
- [SECURITY] [DSA 1501-1] New dspam packages fix information disclosure (Feb 21 2008)
- [SECURITY] [DSA 1488-1] New phpbb2 packages fix several vulnerabilities (Feb 08 2008)
Thor (Hammer of God)
- ExtraOutlook 1.2 Released (Feb 11 2008)
Tim Newsham
- Re: A paper by Amit Klein (Trusteer): "OpenBSD DNS Cache Poisoning and Multiple O/S Predictable IP ID Vulnerability" (Feb 06 2008)
Tonnerre Lombard
- Re: [Full-disclosure] rPSA-2008-0052-1 kernel (Feb 13 2008)
Trancer
- JSPWiki Multiple Vulnerabilities (Feb 13 2008)
turkish-warrorr_at_hotmail.com
- Powered by Pagetool Ver (1.04-05-06-07) (Feb 24 2008)
vijayv_at_cascentral.com
- XSS on XRMS- open source CRM (Feb 28 2008)
VMware Security team
- VMSA-2008-0003 Moderate: Updated aacraid driver and samba and python service console updates (Feb 21 2008)
Wojciech Purczynski
- CSA-L03: Linux kernel vmsplice unchecked user-pointer dereference (Feb 11 2008)
zdi-disclosures_at_3com.com
- ZDI-08-007: Symantec VERITAS Storage Foundation Administrator Service Heap Overflow Vulnerability (Feb 20 2008)
- ZDI-08-006: Microsoft Internet Explorer SVG animateMotion.by Code Execution Vulnerability (Feb 12 2008)
- ZDI-08-005: Novell Client NWSPOOL.DLL EnumPrinters Stack Overflow Vulnerability (Feb 11 2008)
- ZDI-08-004: Adobe AcrobatReader Javascript for PDF Integer Overflow Vulnerability (Feb 11 2008)
- ZDI-08-003: Symantec Backup Exec Remote File Upload Vulnerability (Feb 06 2008)
��
- aliboard Beta Upload Shell From ControlPanel (Feb 10 2008)