Bugtraq: by subject

8e6 Technologies R3000 Internet Filter Bypass by Request Split
- mparker_at_8e6.com (Jan 21 2008)
- nnposter_at_disclosed.not (Jan 15 2008)
[ GLSA 200801-01 ] unp: Arbitrary command execution
- Robert Buchholz (Jan 08 2008)
[ GLSA 200801-02 ] R: Multiple vulnerabilities
- Pierre-Yves Rofes (Jan 09 2008)
[ GLSA 200801-03 ] Claws Mail: Insecure temporary file creation
- Pierre-Yves Rofes (Jan 09 2008)
[ GLSA 200801-04 ] OpenAFS: Denial of Service
- Pierre-Yves Rofes (Jan 09 2008)
[ GLSA 200801-05 ] Squid: Denial of Service
- Pierre-Yves Rofes (Jan 09 2008)
[ GLSA 200801-06 ] Xfce: Multiple vulnerabilities
- Robert Buchholz (Jan 09 2008)
[ GLSA 200801-07 ] Adobe Flash Player: Multiple vulnerabilities
- Robert Buchholz (Jan 19 2008)
[ GLSA 200801-08 ] libcdio: User-assisted execution of arbitrary code
- Robert Buchholz (Jan 19 2008)
[ GLSA 200801-09 ] X.Org X server and Xfont library: Multiple vulnerabilities
- Robert Buchholz (Jan 20 2008)
[ GLSA 200801-10 ] TikiWiki: Multiple vulnerabilities
- Raphaël Marichez (Jan 23 2008)
[ GLSA 200801-11 ] CherryPy: Directory traversal vulnerability
- Robert Buchholz (Jan 27 2008)
[ GLSA 200801-12 ] xine-lib: User-assisted execution of arbitrary code
- Robert Buchholz (Jan 27 2008)
[ GLSA 200801-13 ] ngIRCd: Denial of Service
- Robert Buchholz (Jan 27 2008)
[ GLSA 200801-14 ] Blam: User-assisted execution of arbitrary code
- Robert Buchholz (Jan 27 2008)
[ GLSA 200801-15 ] PostgreSQL: Multiple vulnerabilities
- Raphael Marichez (Jan 29 2008)
[ GLSA 200801-16 ] MaraDNS: CNAME Denial of Service
- Raphael Marichez (Jan 29 2008)
[ GLSA 200801-17 ] Netkit FTP Server: Denial of Service
- Raphael Marichez (Jan 29 2008)
[ GLSA 200801-18 ] Kazehakase: Multiple vulnerabilities
- Pierre-Yves Rofes (Jan 30 2008)
[ GLSA 200801-19 ] GOffice: Multiple vulnerabilities
- Pierre-Yves Rofes (Jan 30 2008)
[ GLSA 200801-20 ] libxml2: Denial of Service
- Pierre-Yves Rofes (Jan 30 2008)
[ GLSA 200801-21 ] Xdg-Utils: Arbitrary command execution
- Pierre-Yves Rofes (Jan 30 2008)
[ GLSA 200801-22 ] PeerCast: Buffer overflow
- Pierre-Yves Rofes (Jan 30 2008)
[ MDVSA-2008:001-1 ] - Updated wireshark packages fix multiple vulnerabilities
- security_at_mandriva.com (Jan 07 2008)
[ MDVSA-2008:002 ] - Updated squid package fixes remote denial of service
- security_at_mandriva.com (Jan 04 2008)
[ MDVSA-2008:003 ] - Updated clamav packages fix multiple vulnerabilities
- security_at_mandriva.com (Jan 08 2008)
[ MDVSA-2008:004 ] - Updated postgresql packages fix denial of service and privilege escalation issues
- security_at_mandriva.com (Jan 08 2008)
- security_at_mandriva.com (Jan 09 2008)
[ MDVSA-2008:005 ] - Updated libexif packages fix multiple vulnerabilities
- security_at_mandriva.com (Jan 09 2008)
[ MDVSA-2008:006 ] - Updated exiv2 packages fix vulnerability
- security_at_mandriva.com (Jan 10 2008)
[ MDVSA-2008:007 ] - Updated madwifi-source, wpa_supplicant packages fix vulnerabilities
- security_at_mandriva.com (Jan 10 2008)
[ MDVSA-2008:008 ] - Updated kernel packages fix multiple vulnerabilities and bugs
- security_at_mandriva.com (Jan 11 2008)
[ MDVSA-2008:009 ] - Updated autofs packages fix insecure hosts configuration
- security_at_mandriva.com (Jan 11 2008)
[ MDVSA-2008:009-1 ] - Updated autofs packages fix insecure hosts configuration
- security_at_mandriva.com (Jan 12 2008)
[ MDVSA-2008:010 ] - Updated libxml2 packages fix DoS vulnerability
- security_at_mandriva.com (Jan 11 2008)
[ MDVSA-2008:011 ] - Updated rsync packages fix restrictions bypass vulnerabilities
- security_at_mandriva.com (Jan 11 2008)
[ MDVSA-2008:012 ] - Updated python packages fix vulnerabilities
- security_at_mandriva.com (Jan 14 2008)
[ MDVSA-2008:013 ] - Updated python packages fix vulnerability in imageop module
- security_at_mandriva.com (Jan 14 2008)
[ MDVSA-2008:014 ] - Updated apache 1.3.x packages fix multiple vulnerabilities
- security_at_mandriva.com (Jan 16 2008)
[ MDVSA-2008:015 ] - Updated apache 2.0.x packages fix multiple vulnerabilities
- security_at_mandriva.com (Jan 16 2008)
[ MDVSA-2008:016 ] - Updated apache 2.2.x packages fix multiple vulnerabilities
- security_at_mandriva.com (Jan 16 2008)
[ MDVSA-2008:017 ] - Updated MySQL packages fix multiple vulnerabilities
- security_at_mandriva.com (Jan 19 2008)
[ MDVSA-2008:018 ] - Updated gFTP packages fix vulnerabilities
- security_at_mandriva.com (Jan 21 2008)
[ MDVSA-2008:019 ] - Updated cairo packages fix vulnerability
- security_at_mandriva.com (Jan 21 2008)
[ MDVSA-2008:020 ] - Updated xine-lib packages fix remote code execution vulnerabilities
- security_at_mandriva.com (Jan 22 2008)
[ MDVSA-2008:021 ] - Updated XFree86 packages fix multiple vulnerabilities
- security_at_mandriva.com (Jan 24 2008)
[ MDVSA-2008:022 ] - Updated xorg-x11 packages fix multiple vulnerabilities
- security_at_mandriva.com (Jan 24 2008)
[ MDVSA-2008:023 ] - Updated x11-server packages fix multiple vulnerabilities
- security_at_mandriva.com (Jan 24 2008)
[ MDVSA-2008:024 ] - Updated libxfont packages fix font handling vulnerability
- security_at_mandriva.com (Jan 24 2008)
[ MDVSA-2008:025 ] - Updated x11-server-xgl packages fix multiple vulnerabilities
- security_at_mandriva.com (Jan 23 2008)
[ MDVSA-2008:026 ] - Updated icu packages fix vulnerabilities
- security_at_mandriva.com (Jan 25 2008)
[ MDVSA-2008:027 ] - Updated pulseaudio packages fix local root vulnerability
- security_at_mandriva.com (Jan 25 2008)
[ MDVSA-2008:028 ] - Updated MySQL packages fix multiple vulnerabilities
- security_at_mandriva.com (Jan 29 2008)
[ MDVSA-2008:029 ] - Updated ruby packages fix possible man-in-the-middle attack
- security_at_mandriva.com (Jan 30 2008)
[ MDVSA-2008:1 ] - Updated wireshark packages fix multiple vulnerabilities
- security_at_mandriva.com (Jan 02 2008)
[!!FIX Information ] Nucleus 3.31 XSS in path
- Digital Security Research Group (Jan 29 2008)
[Aria-Security.Net] Real Estate Web SQL Injection
- no-reply_at_aria-security.net (Jan 15 2008)
[CandyPress] eCommerce suite (SQL Injection + XSS + Path Disclosure)
- Admin_at_BugReport.IR (Jan 25 2008)
[CSNC] OKI C5510MFP Printer Password Disclosure
- Adrian Leuenberger (Jan 17 2008)
[CVE-2007-2449] Apache Tomcat XSS vulnerabilities in the JSP examples
- linlei99_at_hotmail.com (Jan 16 2008)
[DSECRG-08-002] Local File Include in arias 0.99-6
- Digital Security Research Group [DSecRG] (Jan 16 2008)
[DSECRG-08-003] blogcms 4.2.1b Multiple Security Vulnerabilities
- Digital Security Research Group [DSecRG] (Jan 16 2008)
[DSECRG-08-007] OpenBSD BGPD daemon Web Interface XSS.
- Digital Security Research Group (Jan 31 2008)
- Digital Security Research Group (Jan 31 2008)
[FIXED] Remote Denial of Service for SSH service at Dell DRAC4 (maybe Mocana SSH)
- Robert Scheck (Jan 18 2008)
[Full-disclosure] Buffer-overflow in Quicktime Player 7.3.1.70
- Luigi Auriemma (Jan 14 2008)
[Full-disclosure] what is this?
- crazy frog crazy frog (Jan 15 2008)
- Gadi Evron (Jan 15 2008)
- crazy frog crazy frog (Jan 15 2008)
- Nick FitzGerald (Jan 14 2008)
- 3APA3A (Jan 14 2008)
- crazy frog crazy frog (Jan 14 2008)
- Nick FitzGerald (Jan 14 2008)
- 3APA3A (Jan 14 2008)
[Full-disclosure] Yet another Dialog Spoofing Vulnerability - Firefox Basic Authentication
- avivra (Jan 03 2008)
- Michal Zalewski (Jan 03 2008)
[HSC] Snitz Forums Multiple Vulnerabilities
- Aaron Cake (Jan 07 2008)
- DoZ_at_HackersCenter.com (Jan 06 2008)
[INFIGO 2008-01-06]: McAfee E-Business Server Remote Preauth Code Execution / DoS
- infocus (Jan 09 2008)
[INFIGO-2008-01-06]: McAfee E-Business Server Remote Preauth Code Execution / DoS - Corrected
- infocus (Jan 09 2008)
[Reversemode Paper] Exploiting WDM Audio Drivers
- Reversemode (Jan 07 2008)
[security bulletin] HPSBGN02301 SSRT071508 rev.2 - HP Software Update Running on Windows, Remote Execution of Arbitrary Code, Gain Privileged Access
- security-alert_at_hp.com (Jan 03 2008)
[security bulletin] HPSBMA02133 SSRT061201 rev.7 - HP Oracle for OpenView (OfO) Critical Patch Update
- security-alert_at_hp.com (Jan 17 2008)
[security bulletin] HPSBMA02239 SSRT061260 rev.3 - HP OpenView Operations (OVO) Agents Running Shared Trace Service, Remote Arbitrary Code Execution
- security-alert_at_hp.com (Jan 09 2008)
[security bulletin] HPSBST02304 SSRT080003 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-001 to MS08-002
- security-alert_at_hp.com (Jan 15 2008)
[security bulletin] HPSBUX02303 SSRT071468 rev.1 - HP-UX Running X Font Server (xfs) Software, Remote Execution of Arbitrary Code
- security-alert_at_hp.com (Jan 15 2008)
[security bulletin] HPSBUX02306 SSRT071463 rev.1 - HP-UX Running ARPA Transport, Remote Denial of Service (DoS)
- security-alert_at_hp.com (Jan 23 2008)
[SECURITY] [DSA 1443-1] New tcpreen packages fix denial of service
- Moritz Muehlenhoff (Jan 03 2008)
[SECURITY] [DSA 1444-1] New php5 packages fix several vulnerabilities
- Moritz Muehlenhoff (Jan 03 2008)
[SECURITY] [DSA 1444-2] New php5 packages fix regression
- Moritz Muehlenhoff (Jan 23 2008)
[SECURITY] [DSA 1445-1] New maradns packages fix denial of service
- Moritz Muehlenhoff (Jan 03 2008)
[SECURITY] [DSA 1446-1] New wireshark packages fix denial of service
- Moritz Muehlenhoff (Jan 03 2008)
[SECURITY] [DSA 1447-1] New tomcat5.5 packages fix several vulnerabilities
- Moritz Muehlenhoff (Jan 03 2008)
[SECURITY] [DSA 1448-1] New eggdrop packages fix arbitrary code execution
- Steve Kemp (Jan 05 2008)
[SECURITY] [DSA 1448-1] New eggdrop packages fix execution of arbitrary code
- Steve Kemp (Jan 05 2008)
[SECURITY] [DSA 1449-1] New loop-aes-utils packages fix programming error
- Steve Kemp (Jan 05 2008)
[SECURITY] [DSA 1450-1] New util-linux packages fix programming error
- Steve Kemp (Jan 05 2008)
[SECURITY] [DSA 1451-1] New mysql-dfsg-5.0 packages fix several vulnerabilities
- Moritz Muehlenhoff (Jan 06 2008)
[SECURITY] [DSA 1452-1] New wzdftpd packages fix denial of service
- Steve Kemp (Jan 06 2008)
[SECURITY] [DSA 1453-1] New tomcat5 packages fix several vulnerabilities
- Moritz Muehlenhoff (Jan 07 2008)
[SECURITY] [DSA 1454-1] New freetype packages fix arbitrary code execution
- Moritz Muehlenhoff (Jan 07 2008)
[SECURITY] [DSA 1455-1] New libarchive1 packages fix several problems
- Steve Kemp (Jan 08 2008)
[SECURITY] [DSA 1456-1] New fail2ban packages fix denial of service
- Thijs Kinkhorst (Jan 09 2008)
[SECURITY] [DSA 1457-1] New dovecot packages fix information disclosure
- Thijs Kinkhorst (Jan 09 2008)
[SECURITY] [DSA 1458-1] New openafs packages fix denial of service vulnerability
- Noah Meyerhans (Jan 10 2008)
[SECURITY] [DSA 1459-1] New gforge packages fix SQL injection
- Thijs Kinkhorst (Jan 13 2008)
[SECURITY] [DSA 1460-1] New postgresql-8.1 packages fix several vulnerabilities
- Moritz Muehlenhoff (Jan 13 2008)
[SECURITY] [DSA 1461-1] New libxml2 packages fix denial of service
- Moritz Muehlenhoff (Jan 13 2008)
[SECURITY] [DSA 1462-1] New hplip packages fix privilege escalation
- Moritz Muehlenhoff (Jan 13 2008)
[SECURITY] [DSA 1463-1] New postgresql-7.4 packages fix several vulnerabilities
- Moritz Muehlenhoff (Jan 14 2008)
[SECURITY] [DSA 1464-1] New syslog-ng packages fix denial of service
- Moritz Muehlenhoff (Jan 15 2008)
[SECURITY] [DSA 1465-1] New apt-listchanges packages fix arbitrary code execution
- Steve Kemp (Jan 17 2008)
[SECURITY] [DSA 1465-2] New apt-listchanges packages fix arbitrary code execution
- Steve Kemp (Jan 17 2008)
[SECURITY] [DSA 1466-2] New xorg-server packages fix regression
- Moritz Muehlenhoff (Jan 19 2008)
[SECURITY] [DSA 1467-1] New mantis packages fix several vulnerabilities
- Thijs Kinkhorst (Jan 19 2008)
[SECURITY] [DSA 1468-1] New tomcat5.5 packages fix several vulnerabilities
- Moritz Muehlenhoff (Jan 20 2008)
[SECURITY] [DSA 1469-1] New flac packages fix arbitrary code execution
- Moritz Muehlenhoff (Jan 20 2008)
[SECURITY] [DSA 1470-1] New horde3 packages fix denial of service
- Moritz Muehlenhoff (Jan 20 2008)
[SECURITY] [DSA 1471-1] New libvorbis packages fix several vulnerabilities
- Moritz Muehlenhoff (Jan 21 2008)
[SECURITY] [DSA 1472-1] New xine-lib packages fix arbitrary code execution
- Moritz Muehlenhoff (Jan 21 2008)
[SECURITY] [DSA 1473-1] New scponly packages fix arbitrary code execution
- Florian Weimer (Jan 21 2008)
[SECURITY] [DSA 1474-1] New exiv2 packages fix arbitrary code execution
- Moritz Muehlenhoff (Jan 23 2008)
[SECURITY] [DSA 1475-1] new gforge packages fix cross site scripting
- Thijs Kinkhorst (Jan 26 2008)
[SECURITY] [DSA 1476-1] New pulseaudio packages fix privilege escalation
- Moritz Muehlenhoff (Jan 27 2008)
[SECURITY] [DSA 1477-1] New yarssr packages fix arbitrary shell command execution
- Moritz Muehlenhoff (Jan 27 2008)
[SECURITY] [DSA 1478-1] New mysql-dfsg-5.0 packages fix several vulnerabilities
- Moritz Muehlenhoff (Jan 28 2008)
[USN-560-1] Tomboy vulnerability
- Jamie Strandboge (Jan 07 2008)
[USN-561-1] pwlib vulnerability
- Kees Cook (Jan 08 2008)
[USN-562-1] opal vulnerability
- Kees Cook (Jan 08 2008)
[USN-563-1] CUPS vulnerabilities
- Kees Cook (Jan 08 2008)
[USN-564-1] Net-SNMP vulnerability
- Jamie Strandboge (Jan 09 2008)
[USN-565-1] Squid vulnerability
- Kees Cook (Jan 09 2008)
[USN-566-1] OpenSSH vulnerability
- Kees Cook (Jan 09 2008)
[USN-567-1] Dovecot vulnerability
- Kees Cook (Jan 10 2008)
[USN-568-1] PostgreSQL vulnerabilities
- Jamie Strandboge (Jan 14 2008)
[USN-569-1] libxml2 vulnerability
- Kees Cook (Jan 14 2008)
[USN-570-1] boost vulnerabilities
- Jamie Strandboge (Jan 16 2008)
[USN-571-1] X.org vulnerabilities
- Kees Cook (Jan 17 2008)
[USN-571-2] X.org regression
- Kees Cook (Jan 18 2008)
[USN-572-1] apt-listchanges vulnerability
- Kees Cook (Jan 18 2008)
[USN-573-1] PulseAudio vulnerability
- Jamie Strandboge (Jan 31 2008)
[waraxe-2008-SA#061] - Remote Code Execution in MyBB 1.2.10
- come2waraxe_at_yahoo.com (Jan 16 2008)
[waraxe-2008-SA#062] - Multiple Sql Injections in MyBB 1.2.10
- come2waraxe_at_yahoo.com (Jan 16 2008)
[waraxe-2008-SA#063] - Information Leakage in Kayako SupportSuite 3.11.01
- come2waraxe_at_yahoo.com (Jan 21 2008)
[waraxe-2008-SA#064] - Sql Injection in MyBB 1.2.11
- come2waraxe_at_yahoo.com (Jan 21 2008)
[waraxe-2008-SA#065] - Remote Shell Command Execution in Coppermine 1.4.14
- come2waraxe_at_yahoo.com (Jan 30 2008)
[waraxe-2008-SA#066] - Multiple Vulnerabilities in Coppermine 1.4.14
- come2waraxe_at_yahoo.com (Jan 31 2008)
Advisory: Tripwire Enterprise/Server XSS Vulnerability
- Liquidmatrix Security Digest (Jan 29 2008)
Agares PhpAutoVideo 2.21(XSS/RFI) Multiple Remote Vulnerabilities
- houssamix_at_hotmail.fr (Jan 18 2008)
AmpJuke-0.7.0 (index.php) Xss VuLn.
- g0rk3m-31_at_hotmail.com (Jan 29 2008)
Apache mod_negotiation Xss and Http Response Splitting
- Minded Security Research Labs (Jan 22 2008)
Article DashBoard all version SQL Injection Vulnerability
- hey_at_me.com (Jan 16 2008)
- xcross87_at_gmail.com (Jan 15 2008)
Aruba Mobility Controller User Authentication Vulnerability - Aruba Advisory ID: AID-122207
- Robbie Gill (Jan 04 2008)
ASPired2Protect bypass
- milad_sa2007_at_yahoo.com (Jan 26 2008)
AST-2008-001: Crash from transfer using BYE with Also header
- Asterisk Security Team (Jan 02 2008)
At long last - Extra Outlooks!
- Thor (Hammer of God) (Jan 11 2008)
At long last -- Extra Outlooks!
- Francois Labreque (Jan 11 2008)
- Thor (Hammer of God) (Jan 11 2008)
- Casper.Dik_at_Sun.COM (Jan 11 2008)
- Alexander Bochmann (Jan 11 2008)
- Thor (Hammer of God) (Jan 10 2008)
Attackers can SkypeFind you
- avivra (Jan 31 2008)
AW: phpBB2 2.0.22 Cross Site Scripting Vulnerability
- Aufmuth Andreas (Jan 03 2008)
AXIGEN 5.0.x AXIMilter Format String Exploit
- hempel (Jan 20 2008)
Belkin Wireless G Plus MIMO Router F5D9230-4 Authentication Bypass Vulnerability
- gmdarkfig_at_gmail.com (Jan 19 2008)
Belong Site Builder 0.1b Bypass Admincp
- ÑèåÇæÓê çãÑ (Jan 22 2008)
Binn SBuilder (nid) Remote Blind Sql Injection Vulnerabily
- sys-project_at_hotmail.com (Jan 14 2008)
BitDefender Update Server - Unauthorized Remote File Access Vulnerability
- oliver karow (Jan 19 2008)
BLOG:CMS 4.2.1.c (DIR_PLUGINS) Multiple Remote File Include
- ÑæãÇäÓí åßÑ (Jan 20 2008)
Bloofox CMS SQL Injection (Authentication bypass) , Source code disclosure
- admin_at_bugreport.ir (Jan 19 2008)
boastMachine <=3.1 SQL Injection Vulnerbility
- hadihadi_zedehal_2006_at_yahoo.com (Jan 21 2008)
BT Home Flub: Pwnin the BT Home Hub (5) - exploiting IGDs remotely via UPnP
- Adrian P (Jan 10 2008)
Buffer-overflow and format string in White_Dune 0.29beta791
- Luigi Auriemma (Jan 02 2008)
Buffer-overflow in Quicktime Player 7.3.1.70
- Marcello Barnaba (void) (Jan 12 2008)
- Luigi Auriemma (Jan 12 2008)
- snagg_at_openssl.it (Jan 12 2008)
- Luigi Auriemma (Jan 11 2008)
- str0ke (Jan 11 2008)
- none_at_void.gov (Jan 10 2008)
- Marcello Barnaba (void) (Jan 10 2008)
- Luigi Auriemma (Jan 10 2008)
C4 Security Advisory - GE Fanuc Cimplicity 6.1 Heap Overflow
- pete.sage_at_ge.com (Jan 29 2008)
- Eyal Udassin (Jan 25 2008)
C4 Security Advisory - GE Fanuc Proficy Information Portal 2.6 Arbitrary File Upload and Execution
- pete.sage_at_ge.com (Jan 29 2008)
- Eyal Udassin (Jan 25 2008)
C4 Security Advisory - GE Fanuc Proficy Information Portal 2.6 Authentication Vulnerability
- pete.sage_at_ge.com (Jan 29 2008)
- Eyal Udassin (Jan 25 2008)
Call Jacking: Phreaking the BT Home Hub
- Adrian P (Jan 21 2008)
CFP: EuroSec Workshop (March 31st, 2008)
- Stefano Zanero (Jan 11 2008)
Cisco Security Advisory: Cisco PIX and ASA Time-to-Live Vulnerability
- Eric Davis (Jan 23 2008)
- Cisco Systems Product Security Incident Response Team (Jan 23 2008)
Cisco Security Advisory: Cisco Unified Communications Manager CTL Provider Heap Overflow
- Cisco Systems Product Security Incident Response Team (Jan 16 2008)
Cisco Security Advisory: Cisco Wireless Control System Tomcat mod_jk.so Vulnerability
- Cisco Systems Product Security Incident Response Team (Jan 30 2008)
Cisco Security Advisory: Default Passwords in the Application Velocity System
- Cisco Systems Product Security Incident Response Team (Jan 23 2008)
ClanSphere 2007.4.4 Remote File Disclosure Vulnerability.
- p4imi0 (Jan 27 2008)
Clever Copy <=3.0 Multiple Remote Vulnerabilities
- hadihadi_zedehal_2006_at_yahoo.com (Jan 17 2008)
common dns misconfiguration can lead to "same site" scripting
- Florian Weimer (Jan 21 2008)
- David Malone (Jan 21 2008)
- Florian Weimer (Jan 21 2008)
- Kurt Grutzmacher (Jan 18 2008)
- Tavis Ormandy (Jan 18 2008)
contactforms "cforms-css.php" Remote File Inclusion
- Sw33t.h4cK3r_at_hotmail.securityfocus.com (Jan 30 2008)
CORE-2007-1106: SynCE Remote Command Injection
- CORE Security Technologies Advisories (Jan 07 2008)
CORE-2007-1119: CORE FORCE Kernel Buffer Overflow
- CORE Security Technologies Advisories (Jan 17 2008)
CORE-2007-1219: Firebird Remote Memory Corruption
- Core Security Technologies Advisories (Jan 28 2008)
Corsaire Security Advisory: Sun J2RE DoS issue
- advisories (Jan 08 2008)
Country by Country Computer Sets now available for ISA 2004
- Thor (Hammer of God) (Jan 16 2008)
Country by Country ISA Computer Sets
- Jim Harrison (Jan 21 2008)
- Thor (Hammer of God) (Jan 19 2008)
- Thor (Hammer of God) (Jan 16 2008)
- Richard Powell (Jan 18 2008)
- Thor (Hammer of God) (Jan 18 2008)
- Thor (Hammer of God) (Jan 16 2008)
- GomoR (Jan 16 2008)
- The Fungi (Jan 17 2008)
- Thor (Hammer of God) (Jan 14 2008)
cPanel Hosting Manager (dohtaccess.html)
- no-reply_at_aria-security.net (Jan 15 2008)
Cross site scripting (XSS) in Moodle 1.8.3
- Hanno BÃ¶ck (Jan 11 2008)
Cross-Site Scripting (XSS) in phpWebSite 1.4.0 search
- Audun Larsen (Jan 01 2008)
Cryptome: NSA has real-time access to Hushmail servers
- M. Burnett (Dec 31 2007)
- Lee Dilkie (Jan 01 2008)
- John Simpson (Jan 01 2008)
CSRF/XSS in Sungard Banner
- banner_at_ch4n.org (Jan 29 2008)
Defeating audio captcha systems
- 3APA3A (Jan 15 2008)
- JosÂŽÃ© M. PalazÃ³n Romero (Jan 14 2008)
DeluxeBB 1.1 XSS Vulnerabilitie
- nbbn_at_gmx.net (Jan 22 2008)
Digital Armaments January-February Hacking Challenge: Special 20.000$ Prize - Windows Vulnerabilities and Exploit
- info_at_digitalarmaments.com (Jan 10 2008)
E-SMART CART bypass
- milad_sa2007_at_yahoo.com (Jan 24 2008)
ERRATA: [ GLSA 200709-07 ] Eggdrop: Buffer overflow
- Robert Buchholz (Jan 08 2008)
eTicket 'index.php' Cross Site Scripting Path Vulnerability
- Alessandro Tanasi (Jan 27 2008)
eTicket 1.5.5.2 Multiple Vulnerabilities
- L4teral (Jan 06 2008)
Exploit in IE6,7
- Nick FitzGerald (Jan 28 2008)
- r2t_at_hotmail.it (Jan 28 2008)
Exploiting the SpamBam plugin for wordpress
- JosÂŽÃ© M. PalazÃ³n Romero (Jan 14 2008)
F5 BIG-IP Web Management ASM Security Report XSS
- nnposter_at_disclosed.not (Jan 25 2008)
F5 BIG-IP Web Management List Search XSS
- nnposter_at_disclosed.not (Jan 14 2008)
Facebook security contact
- Alexander Sotirov (Jan 28 2008)
First (Major) web hacking incidents for 2008. Sign of the year to come?
- Paul Schmehl (Jan 09 2008)
- Ofer Shezaf (Jan 09 2008)
Flaw in Alice gate2 pluswifi adsl modem
- wargame89_at_yahoo.it (Jan 21 2008)
FortiGuard: URL Filtering Application Bypass Vulnerability
- 3APA3A (Jan 04 2008)
- Danux (Jan 03 2008)
FreeBSD Security Advisory FreeBSD-SA-08:01.pty
- FreeBSD Security Advisories (Jan 14 2008)
FreeBSD Security Advisory FreeBSD-SA-08:02.libc
- FreeBSD Security Advisories (Jan 14 2008)
Garment Center (index.cgi) Local File Inclusion
- Smasher_at_ciucciamiilcalzino.it (Jan 14 2008)
- Smasher_at_ciucciamiilcalzino.it (Jan 12 2008)
gdb bug
- digit2004_at_optonline.net (Jan 24 2008)
Gradman <= 0.1.3 (agregar_info.php?tabla=) Local File Inclusion Exploit
- sys-project_at_hotmail.com (Jan 16 2008)
Hacking The Interwebs
- pdp (architect) (Jan 13 2008)
HPSBUX02153 SSRT061181 rev.7 - HP-UX Running Firefox, Remote Unauthorized Access or Elevation of Privileges or Denial of Service (DoS)
- security-alert_at_hp.com (Jan 08 2008)
HPSBUX02156 SSRT061236 rev.4 - HP-UX Running Thunderbird, Remote Unauthorized Access or Elevation of Privileges or Denial of Service (DoS)
- security-alert_at_hp.com (Jan 08 2008)
iDefense Security Advisory 01.07.08: Motorola netOctopus Agent MSR Write Privilege Escalation Vulnerability
- iDefense Labs (Jan 07 2008)
iDefense Security Advisory 01.09.08: Novell NetWare Client nicm.sys Local Privilege Escalation Vulnerability
- iDefense Labs (Jan 09 2008)
iDefense Security Advisory 01.15.08: Apple QuickTime Macintosh Resource Processing Heap Corruption Vulnerability
- iDefense Labs (Jan 15 2008)
iDefense Security Advisory 01.15.08: TIBCO SmartSockets RTserver Heap Overflow Vulnerability
- iDefense Labs (Jan 15 2008)
iDefense Security Advisory 01.15.08: TIBCO SmartSockets RTServer Multiple Untrusted Loop Bounds Vulnerabilities
- iDefense Labs (Jan 15 2008)
iDefense Security Advisory 01.15.08: TIBCO SmartSockets RTserver Multiple Untrusted Pointer Offset Vulnerabilities
- iDefense Labs (Jan 15 2008)
iDefense Security Advisory 01.15.08: TIBCO SmartSockets RTServer Multiple Untrusted Pointer Vulnerabilities
- iDefense Labs (Jan 15 2008)
iDefense Security Advisory 01.17.08: Multiple Vendor X Server EVI and MIT-SHM Extensions Integer Overflow Vulnerabilities
- iDefense Labs (Jan 17 2008)
iDefense Security Advisory 01.17.08: Multiple Vendor X Server TOG-CUP Extension Information Disclosure Vulnerability
- iDefense Labs (Jan 17 2008)
iDefense Security Advisory 01.17.08: Multiple Vendor X Server XFree86-Misc Extension Invalid Array Index Vulnerability
- iDefense Labs (Jan 17 2008)
iDefense Security Advisory 01.17.08: Multiple Vendor X Server XInput Extension Multiple Memory Corruption Vulnerabilities
- iDefense Labs (Jan 17 2008)
iDefense Security Advisory 01.22.08: IBM Tivoli PMfOSD HTTP Request Method Buffer Overflow Vulnerability
- iDefense Labs (Jan 24 2008)
iDefense Security Advisory 01.23.08: IBM AIX pioout BSS Buffer Overflow Vulnerability
- iDefense Labs (Jan 24 2008)
iDefense Security Advisory 12.24.07: Novell ZENworks Endpoint Security Management Local Privilege Escalation Vulnerability
- iDefense Labs (Jan 04 2008)
ImageAlbum Remote SQL Injection Vulnerabilities
- db_at_rawsecurity.org (Jan 10 2008)
ImageShack Toolbar FileUploader Class insecurities
- retrog_at_alice.it (Jan 24 2008)
IMF 2008 - Call for Papers
- Oliver Goebel (Jan 17 2008)
Insecure Use of RC4 in LSrunasE and Supercrypt (CVE-2007-6340)
- Daniel Roethlisberger (Jan 29 2008)
INVISION POWER BOARD 2.1.7 ACTIVE XSS/SQL INJECTION EXPLOIT
- underwater_at_itdefence.ru (Jan 05 2008)
Joomla 1.0.13 CSRF
- J. Carlos Nieto (Jan 08 2008)
- J. Carlos Nieto (Jan 08 2008)
JoomlaFlash Component Multiple Remote File Inclusion
- Smasher_at_ciucciamiilcalzino.it (Jan 16 2008)
Latest round of web hacking incidents for 2007 & Project news
- s f (Jan 03 2008)
- Peter Watkins (Jan 03 2008)
- Memisyazici, Aras (Dec 30 2007)
- Ofer Shezaf (Jan 01 2008)
LayerOne 2008 - CFP Released
- Layer One (Jan 07 2008)
Level-One WBR-3460A Grants Root Access
- anastasiosm_at_gmail.com (Jan 07 2008)
LFI in Tuned Studios Templates
- Digital Security Research Group [DSecRG] (Jan 09 2008)
Linksys WRT54 GL - Session riding (CSRF)
- Valdis.Kletnieks_at_vt.edu (Jan 15 2008)
- Daniel Weber (Jan 15 2008)
- Jan Heisterkamp (Jan 14 2008)
- J. Oquendo (Jan 14 2008)
- Tomaz (Jan 13 2008)
- Florian Weimer (Jan 11 2008)
- Jan Heisterkamp (Jan 07 2008)
- Jan Heisterkamp (Jan 07 2008)
- tomaz.bratusa_at_teamintell.com (Jan 07 2008)
Making big money...
- jmacaranas_at_fxdd.com (Jan 17 2008)
Mambo 4.6.3 Path Disclosure, XSS , XSRF, DOS
- admin_at_bugreport.ir (Jan 28 2008)
Max's File Uploader File Upload Vulnerability
- xcross87_at_gmail.com (Jan 15 2008)
mcGuestbook v1.2 Remote File Inc.
- the.tiger100_at_gmail.com (Jan 17 2008)
- gokhankaya_at_hotmail.com (Jan 16 2008)
MegaBBS ASP Forum Cross-Site Scripting
- grossman_at_yahoo.com (Jan 20 2008)
Member Area System (MAS) Remote File Include Vulnerability (view_func.php)
- m3venge_at_yahoo.com (Jan 18 2008)
- ship_nx_at_yahoo.com (Jan 11 2008)
Metasploit Framework v3.1 Released
- H D Moore (Jan 27 2008)
MicroNews Admin Direct Access vulnerability
- xcross87_at_gmail.com (Jan 15 2008)
Million Dollar Script 2.0.14 Remote File Disclosure Vulnerability.
- p4imi0 (Jan 07 2008)
MODx CMS Source code disclosure, local file inclusion
- admin_at_bugreport.ir (Jan 01 2008)
MTCMS <=2.0 SQL Injection Vulnerbility
- hadihadi_zedehal_2006_at_yahoo.com (Jan 10 2008)
multiple CAPTCHA automation test bypass digest
- 3APA3A (Jan 03 2008)
Multiple vulnerabilities in Georgia SoftWorks SSH2 Server 7.01.0003
- Luigi Auriemma (Jan 02 2008)
Multiple vulnerabilities in yaSSL 1.7.5
- Luigi Auriemma (Jan 04 2008)
MyBB 1.2.11 Multiple XSRF Vulnerabilities
- nbbn_at_gmx.net (Jan 18 2008)
Naymz multiple XSS
- morin.josh_at_gmail.com (Jan 11 2008)
netrisk 1.9.7 Multiple Remote Vulnerabilities (sql injection/xss)
- hadihadi_zedehal_2006_at_yahoo.com (Jan 06 2008)
NetRisk 1.9.7 Remote File Inclusion Vulnerability
- erne_at_ernealizm.us (Jan 04 2008)
New search engine for exploits
- Security Basic (Jan 17 2008)
New Web Hacking Incidents at WHID
- Ofer Shezaf (Jan 07 2008)
nilson's blogger 0.11 remote file disclosure vulnerabilities
- muuratsalo experimental hack lab (Jan 31 2008)
Nucleus 3.31 XSS in path
- Digital Security Research Group (Jan 29 2008)
OneCMS Vulnerabilities
- webmaster_at_insanevisions.com (Jan 26 2008)
- admin_at_bugreport.ir (Jan 07 2008)
PacerCMS Multiple Vulnerabilities (XSS/SQL)
- db_at_rawsecurity.org (Jan 22 2008)
Pass-The-Hash Toolkit v1.2 released.
- Hernan Ochoa (Jan 21 2008)
Peers static overflow in BitTorrent 6.0 and uTorrent 1.7.5
- Luigi Auriemma (Jan 25 2008)
- Luigi Auriemma (Jan 16 2008)
PeteFinnigan.com Limited advisory for Oracle January 2008 CPU
- Pete Finnigan (Jan 30 2008)
PHP 5.2.5 cURL safe_mode bypass
- cxib_at_securityreason.com (Jan 22 2008)
Php Search Remote Inclusion
- effectiveness63_at_gmail.com (Jan 20 2008)
phpBB 2.0.22 Remote PM Delete XSRF Vulnerability
- nbbn_at_gmx.net (Jan 23 2008)
phpBB2 2.0.22 Cross Site Scripting Vulnerability
- neothermic_at_phpbb.com (Jan 03 2008)
- admin_at_batznet.com (Jan 03 2008)
- neothermic_at_phpbb.com (Jan 03 2008)
- bugtraq_at_opencosmo.com (Jan 02 2008)
PHPEchoCMS Multible remote vulnerabilitis
- security_at_soqor.net (Jan 16 2008)
phpIP 4.3.2 - Numerous SQL Injection Vulnerablities
- Charles Hooper (Jan 26 2008)
PHPKIT 1.6.4 PL1 2 XSRF Vulnerabilities
- nbbn_at_gmx.net (Jan 29 2008)
PhPress-0.3.0 Read All Sql Information For Config
- r2t_at_hotmail.it (Jan 26 2008)
Pipe to FOR Crashes CMD
- James C. Slora Jr. (Jan 15 2008)
PIX Privilege Escalation Vulnerability
- Aaron Collins (Feb 25 2008)
- tbbunn_at_ctc.net (Jan 24 2008)
- Eloy Paris (Jan 24 2008)
- tbbunn_at_ctc.net (Jan 23 2008)
PostgreSQL 2007-01-07 Cumulative Security Release
- Josh Berkus (Jan 07 2008)
PR07-06, PR07-07, PR07-08, PR07-09, PR07-10, PR07-12: Several XSS, Cross-domain Redirection and Frame Injection on Sun Java System Identity Manager
- ProCheckUp Research (Jan 10 2008)
PR07-38: XSS on sIFR
- bugs+securityfocus_at_novemberborn.net (Jan 22 2008)
- ProCheckUp Research (Jan 22 2008)
Pre Dynamic Institution bypass
- milad_sa2007_at_yahoo.com (Jan 24 2008)
Pre Hotel and Resorts reservation portal login bypass
- milad_sa2007_at_yahoo.com (Jan 24 2008)
Pre-auth buffer-overflow in mySQL through yaSSL
- Luigi Auriemma (Jan 04 2008)
Pre-auth remote commands execution in SAP MaxDB 7.6.03.07
- Luigi Auriemma (Jan 09 2008)
Privileg escalation in Omegasoft Insel 7
- MC Iglo (Jan 09 2008)
PWDumpX v1.0 and PWDumpX v1.1 updated - bug fixes
- Reed Arvin (Jan 07 2008)
PWDumpX v1.4 - Dumps domain password cache, LSA secrets, password hashes, and password history hashes.
- Reed Arvin (Jan 07 2008)
re-resting of zzuf results
- Hanno BÃ¶ck (Jan 10 2008)
Recent Web Hacks: WHID update for Janury 30th 2008
- Michael Wojcik (Jan 30 2008)
- Ofer Shezaf (Jan 30 2008)
Remote File Disclosure in phpCMS 1.2.2
- 3APA3A (Jan 29 2008)
- Digital Security Research Group (Jan 29 2008)
RichStrong CMS (showproduct.asp?cat=) Remote SQL Injection Exploit
- sys-project_at_hotmail.com (Jan 16 2008)
rPSA-2008-0001-1 dovecot
- Jonathan Smith (Jan 03 2008)
- Dominic Hargreaves (Jan 04 2008)
- Steven M. Christey (Jan 03 2008)
- Dominic Hargreaves (Jan 03 2008)
- rPath Update Announcements (Jan 03 2008)
rPSA-2008-0004-1 tshark wireshark
- rPath Update Announcements (Jan 03 2008)
rPSA-2008-0006-1 libexif
- rPath Update Announcements (Jan 04 2008)
rPSA-2008-0007-1 tetex tetex-afm tetex-dvips tetex-fonts tetex-latex tetex-xdvi
- rPath Update Announcements (Jan 04 2008)
rPSA-2008-0008-1 cups
- rPath Update Announcements (Jan 05 2008)
rPSA-2008-0015-1 cairo
- rPath Update Announcements (Jan 15 2008)
rPSA-2008-0016-1 postgresql postgresql-server
- rPath Update Announcements (Jan 15 2008)
rPSA-2008-0017-1 libxml2
- rPath Update Announcements (Jan 15 2008)
rPSA-2008-0018-1 mysql mysql-bench mysql-server
- rPath Update Announcements (Jan 17 2008)
rPSA-2008-0021-1 kernel
- rPath Update Announcements (Jan 17 2008)
rPSA-2008-0029-1 bind bind-utils
- rPath Update Announcements (Jan 24 2008)
rPSA-2008-0030-1 CherryPy
- rPath Update Announcements (Jan 24 2008)
rPSA-2008-0032-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs
- rPath Update Announcements (Jan 30 2008)
Safari 2 Denial of Service
- S21sec labs (Jan 12 2008)
SDL_Image 1.2.6 and prior GIF handling buffer overflow
- Gynvael Coldwind (Jan 23 2008)
SecurityReason - Apache (mod_proxy_ftp) Undefined Charset UTF-7 XSS Vulnerability
- sp3x_at_securityreason.com (Jan 10 2008)
SecurityReason - Apache (mod_status) Refresh Header - Open Redirector (XSS)
- sp3x_at_securityreason.com (Jan 15 2008)
SecurityReason - Apache2 CSRF, XSS, Memory Corruption and Denial of Service Vulnerability
- sp3x_at_securityreason.com (Jan 10 2008)
securityvulns.com russian vulnerabilities digest
- 3APA3A (Jan 03 2008)
sflog! 0.96 remote file disclosure vulnerabilities
- muuratsalo experimental hack lab (Jan 31 2008)
Simple Machines Forum Cross-Site Scripting Vulnerabilities
- dev_at_null.org (Jan 26 2008)
- DoZ_at_HackersCenter.com (Jan 09 2008)
SinFP fingerprinting tool online demo
- GomoR (Jan 16 2008)
Skype videomood XSS
- avivra (Jan 17 2008)
SocialURL Login Page Cross-Site Scripting
- morin.josh_at_gmail.com (Jan 07 2008)
SocksCap Stack Overflow (<= 2.40-051231)
- azizov_at_itdefence.ru (Jan 18 2008)
Some DoS in some telnet servers
- Luigi Auriemma (Jan 04 2008)
Some hashes for the record
- Sergio 'shadown' Alvarez (Jan 22 2008)
SQID v0.3 - SQL Injection Digger.
- Metaeye SG (Jan 14 2008)
SQL scalar function to convert big int to dot notation
- Thor (Hammer of God) (Jan 16 2008)
Syhunt: HFS (HTTP File Server) Log Arbitrary File/Directory Manipulation and Denial-of-Service Vulnerabilities
- Felipe M. Aragon (Jan 23 2008)
Syhunt: HFS (HTTP File Server) Template Cross-Site Scripting and Information Disclosure Vulnerabilities
- Felipe M. Aragon (Jan 23 2008)
Syhunt: HFS (HTTP File Server) Username Spoofing and Log Forging/Injection Vulnerability
- Felipe M. Aragon (Jan 23 2008)
sysHotel On Line Remote File Disclosure Vulnerability.
- p4imi0 (Jan 08 2008)
Tiger PHP News System SQL Injection
- 0in.email_at_gmail.com (Jan 24 2008)
Tiger Team: New TV series about pen testers airing on CourtTV Dec 25 11 pm
- michael.lambie_at_gmail.com (Jan 16 2008)
tinyBB v0.2 Message Board Remote File Inc.
- g0rk3m-31_at_hotmail.com (Jan 30 2008)
Tool availability - browser DOM Checker
- Michal Zalewski (Jan 25 2008)
TPTI-08-01: Apple Quicktime Image File IDSC Atom Memory Corruption Vulnerability
- DVLabs (Jan 15 2008)
TPTI-08-02: Cisco Call Manager CTLProvider Heap Overflow Vulnerability
- DVLabs (Jan 16 2008)
Troopers 08 Security Conference, Call for Papers
- Enno Rey (Jan 21 2008)
Two vulnerabilities for PatchLink Update Client for Unix.
- lcashdol_at_gmail.com (Jan 25 2008)
uCon 2008 call for participation - Recife, Brazil
- ucon_at_thebugmagazine.org (Jan 10 2008)
Uninformed Journal Release Announcement: Volume 9
- Uninformed Journal (Jan 28 2008)
UPDATED VMSA-2008-0001.1 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages
- VMware Security team (Jan 22 2008)
Utimaco Safeguard Easy vulnerability
- joachim.schneider_at_utimaco.de (Jan 18 2008)
- benleavett_at_googlemail.com (Jan 17 2008)
VB Marketing "tseekdir.cgi" Local File Inclusion
- Sw33t.h4cK3r_at_hotmail.securityfocus.com (Jan 28 2008)
vBulletin 3.6.8 XSRF/XSS Vulnerability
- nbbn_at_gmx.net (Jan 07 2008)
- nbbn_at_gmx.net (Jan 05 2008)
VMSA-2008-0001 Moderate OpenPegasus PAM Authentication Buffer Overflow and updated service console packages
- VMware Security team (Jan 07 2008)
VMSA-2008-0002 Low severity security update for VirtualCenter and ESX Server 3.0.2, and ESX 3.0.1
- VMware Security team (Jan 07 2008)
Web Wiz Forums Directory traversal
- admin_at_bugreport.ir (Jan 22 2008)
Web Wiz NewsPad Directory traversal
- admin_at_bugreport.ir (Jan 22 2008)
Web Wiz Rich Text Editor Directory traversal + HTM/HTML file creation on the server
- admin_at_bugreport.ir (Jan 22 2008)
Webspell 4.01.02 2 Vulnerabilites
- nbbn_at_gmx.net (Jan 30 2008)
what is this?
- Yousef Syed (Jan 16 2008)
- none (Jan 15 2008)
- Jamie Riden (Jan 15 2008)
- Memisyazici, Aras (Jan 15 2008)
- Denis (Jan 15 2008)
- Denis (Jan 15 2008)
- crazy frog crazy frog (Jan 14 2008)
- Denis (Jan 14 2008)
- Gadi Evron (Jan 14 2008)
- Mario Contestabile (Jan 14 2008)
- admin_at_tkroupa.net (Jan 14 2008)
- Robert McArdle (Jan 14 2008)
- crazy frog crazy frog (Jan 14 2008)
- Robert McArdle (Jan 14 2008)
- Jose Nazario (Jan 14 2008)
- crazy frog crazy frog (Jan 13 2008)
- crazy frog crazy frog (Jan 13 2008)
WifiZoo v1.3 released (minor release)
- Hernan Ochoa (Jan 21 2008)
Woltlab Burning Board 2.3.6 PL2 Remote Delete Thread XSRF Vulnerability
- nbbn_at_gmx.net (Jan 23 2008)
WoltLab Burning Board 3.x.x Private Message Delete XSRF Vulnerability
- nbbn_at_gmx.net (Jan 26 2008)
Word 2007 Email as PDF path disclosure flaw
- ebk_lists_at_hotmail.com (Jan 10 2008)
XSRF under Deanâ€™s Permalinks Migration 1.0
- g30rg3_x (Jan 22 2008)
xss in w3-msql error page
- vivek_infosec_at_yahoo.com (Jan 03 2008)
XSS Vulnerabilities in Common Shockwave Flash Files
- rich cannings (Jan 02 2008)
Yeşil Koridor Ziyareti Defteri (index.php) SqL. inj.
- g0rk3m-31_at_hotmail.com (Jan 30 2008)
Yet another Dialog Spoofing Vulnerability - Firefox Basic Authentication
- avivra (Jan 02 2008)
ZDI-08-001: IBM Tivoli Storage Manager Express Backup Server Heap Overflow Vulnerability
- zdi-disclosures_at_3com.com (Jan 14 2008)
ZDI-08-002: Citrix Presentation Server IMA Service Heap Overflow Vulnerability
- zdi-disclosures_at_3com.com (Jan 17 2008)