Bugtraq: by date

Saturday, 1 April
- Mis-diagnosed XSS bugs hiding worse issues due to PHP feature Steven M. Christey
- linksubmit <= All version Html Tag Injector in index.php ali_at_hackerz.ir
Thursday, 30 March
- Re: recursive DNS servers DDoS as a growing DDoS problem Gadi Evron
Saturday, 1 April
- Re: [Full-disclosure] Mis-diagnosed XSS bugs hiding worse issues due to PHP feature Siegfried
- SQuery <= 4.5 Remote File Inclusion Exploit uid0_at_exploitercode.com
Friday, 31 March
- RE: recursive DNS servers DDoS as a growing DDoS problem gboyce
Saturday, 1 April
- FleXiBle Development Script Remote Command Exucetion And XSS Attacking botan_at_linuxmail.org
- Re: Mis-diagnosed XSS bugs hiding worse issues due to PHP feature Siegfried
Wednesday, 29 March
- Re: Re: Re: phpBB 2.06 search.php SQL injection theguywhocouldwipeyourphpBB_at_hackersworlddomination.com
Friday, 31 March
- DoS-ing sysklogd? Milen Rangelov
Saturday, 1 April
- PHPNuke-Clan 3.0.1 Remote File Inclusion Exploit uid0_at_exploitercode.com
Wednesday, 29 March
- GeSWall 2.2 – Free Intrusion Prevention System for Windows GentleSecurity Team
Thursday, 30 March
- Re: recursive DNS servers DDoS as a growing DDoS problem Paul Stepowski
Saturday, 1 April
- SiteMan <= All version SQL injection in admin_login.asp ali_at_hackerz.ir
Monday, 3 April
- Phpwebgallery <= 1.4.1 SQL injection Vulnerability t4h4_at_linuxmail.org
- Secunia Research: AN HTTPD Script Source Disclosure Vulnerability Secunia Research
Saturday, 1 April
- Re: On product vulnerability history and vulnerability complexity Crispin Cowan
Monday, 3 April
- [USN-266-1] dia vulnerabilities Martin Pitt
- [SECURITY] [DSA 1000-2] New Apache2::Request packages fix denial of service Martin Schulze
- Another Internet Explorer Address Bar Spoofing Vulnerability hainamluke_at_yahoo.com
Sunday, 2 April
- Hosting Controller AccountActions.asp and saveuploadfiles.asp vulns (PoC) paolo.difebbo_at_gmail.com
Saturday, 1 April
- Flaw in commonly used bash random seed method coderpunk
Sunday, 2 April
- Re: Mis-diagnosed XSS bugs hiding worse issues due to PHP feature cxib_at_securityreason.com
- RE: DoS-ing sysklogd? Justin Shore
- VWar <= 1.5.0 R12 Remote File Inclusion Exploit uid0_at_exploitercode.com
Saturday, 1 April
- Multiple Vulnerabilities in LucidCMS crasher_at_kecoak.or.id
Sunday, 2 April
- MyBB 1.10 New CrossSiteScripting o.y.6_at_hotmail.com
Monday, 3 April
- Re: Flaw in commonly used bash random seed method Matthijs
Friday, 31 March
- RE: recursive DNS servers DDoS as a growing DDoS problem Geo.
Monday, 3 April
- Re: On product vulnerability history and vulnerability complexity Gadi Evron
- Re: On product vulnerability history and vulnerability complexity Steven M. Christey
Friday, 31 March
- SQL Injection in Softbiz Image Gallery xx_hack_xx_2004_at_hotmail.com
Monday, 3 April
- Re: On product vulnerability history and vulnerability complexity ArkanoiD
Friday, 31 March
- Re: WebVulnCrawl searching excluded directories for hackable web servers Dennis Brown
- Re: Cantv/Movilnet's Web SMS vulnerability. raven
Saturday, 1 April
- Re: On classifying attacks john mullee
Sunday, 2 April
- Re: recursive DNS servers DDoS as a growing DDoS problem Geo.
Monday, 3 April
- Re: On product vulnerability history and vulnerability complexity Forrest J. Cavalier III
- [ MDKSA-2006:064 ] - Updated MySQL packages fix logging bypass vulnerability security_at_mandriva.com
- [ MDKSA-2006:062 ] - Updated dia packages fix buffer overflow vulnerabilities security_at_mandriva.com
Saturday, 1 April
- Re: recursive DNS servers DDoS as a growing DDoS problem Anton Ivanov
Sunday, 2 April
- ReloadCMS <= 1.2.5stable Cross site scripting / remote command execution rgod_at_autistici.org
Monday, 3 April
- SYMSA-2006-002: McAfee WebShield SMTP Format String Vulnerability CS_Advisories Mailbox
- Bypassing ISA Server 2004 with IPv6 Romain.Le.Guen_at_romainl.com
Tuesday, 4 April
- Re: Flaw in commonly used bash random seed method Dave English
- Re: Bypassing ISA Server 2004 with IPv6 3APA3A
- RUXCON 2006 Call for Papers cfp_at_ruxcon.org.au
Monday, 3 April
- SMART Technologies SynchronEyes Remote Denial of Services dennis_at_backtrace.de
- Re: recursive DNS servers DDoS as a growing DDoS problem Anton Ivanov
- Re: On product vulnerability history and vulnerability complexity Gadi Evron
- Re: recursive DNS servers DDoS as a growing DDoS problem Anton Ivanov
Tuesday, 4 April
- RE: recursive DNS servers DDoS as a growing DDoS problem Geo.
Monday, 3 April
- Format string in Doomsday 1.8.6 Luigi Auriemma
Tuesday, 4 April
- Re: On product vulnerability history and vulnerability complexity Steven M. Christey
Monday, 3 April
- [USN-267-1] mailman vulnerability Martin Pitt
Tuesday, 4 April
- Re: On product vulnerability history and vulnerability complexity Javor Ninov
Sunday, 2 April
- RE: recursive DNS servers DDoS as a growing DDoS problem MÃ¥ns Nilsson
Tuesday, 4 April
- [ GLSA 200604-01 ] MediaWiki: Cross-site scripting vulnerability Stefan Cornelius
Monday, 3 April
- Re: DoS-ing sysklogd? Bernhard Fischer
- Barracuda LHA archiver security bug leads to remote compromise Jean-Sébastien Guay-Leroux
- Re: DoS-ing sysklogd? Christophe Garault
- Barracuda ZOO archiver security bug leads to remote compromise Jean-Sébastien Guay-Leroux
Tuesday, 4 April
- [security bulletin] HPSBPI2109 SSRT061141 rev.1 - HP Color LaserJet 2500 and 4600 Toolbox Running on Microsoft Windows Remote Unauthorized Disclosure of Information security-alert_at_hp.com
- [ GLSA 200604-02 ] Horde Application Framework: Remote code execution Stefan Cornelius
- Re: recursive DNS servers DDoS as a growing DDoS problem Tim
- [ GLSA 200604-03 ] FreeRADIUS: Authentication bypass in EAP-MSCHAPv2 module Matthias Geerdsen
- RE: recursive DNS servers DDoS as a growing DDoS problem Thomas Guyot-Sionnest
- Buffer-overflow in Ultr@VNC 1.0.1 viewer and server Luigi Auriemma
- Re: Flaw in commonly used bash random seed method Matthijs
Monday, 3 April
- Re: [Full-disclosure] Critical PHP bug - act ASAP if you are running web with sensitive data Moriyoshi Koizumi
Tuesday, 4 April
- RE: recursive DNS servers DDoS as a growing DDoS problem Geo.
- Re: Another Internet Explorer Address Bar Spoofing Vulnerability franz_at_noemail.com
- ArabPortal 2.0.1 Stable [ 9 CrossSiteScripting & 1 SQL Injection ] MultBugz o.y.6_at_hotmail.com
- Re: Flaw in commonly used bash random seed method Matthijs
- NOD32 local privilege escalation vulnerability visitbipin_at_hotmail.com
Monday, 3 April
- Re: [Full-disclosure] Critical PHP bug - act ASAP if you are running web with sensitive data Jasper Bryant-Greene
Tuesday, 4 April
- Another way to spoof Internet Explorer Address Bar hainamluke_at_yahoo.com
Monday, 3 April
- Re: [Full-disclosure] Critical PHP bug - act ASAP if you are runningweb with sen mailinglist mailinglist
Tuesday, 4 April
- Re: Limbo CMS code execution gergero_at_securityfocus.com
Monday, 3 April
- Re: recursive DNS servers DDoS as a growing DDoS problem Marco Ivaldi
Tuesday, 4 April
- Re: [Full-disclosure] Critical PHP bug - act ASAP if you are running web with sensitive data John Bond
Monday, 3 April
- Black Hat Call for Papers and Registration now open Jeff Moss
- [Full-disclosure] PIRANA exploitation framework and SMTP contentfilter security Jean-Sébastien Guay-Leroux
- [SECURITY] [DSA 1022-1] New storebackup packages fix several vulnerabilities Moritz Muehlenhoff
- Re: recursive DNS servers DDoS as a growing DDoS problem Jim Pingle
- Re: recursive DNS servers DDoS as a growing DDoS problem Tim
- Re: recursive DNS servers DDoS as a growing DDoS problem Simon Boulet
Tuesday, 4 April
- [ECHO_ADV_27$2006] AngelineCMS 0.8.1 Installpath Remote File Inclusion eufrato_at_gmail.com
- [SEC-1 LTD] HP Colour LaserJet 2500 and 4600 Toolbox Directory Traversal Vulnerability Richard Horsman
- [ECHO_ADV_27$2006] AngelineCMS 0.8.1 Installpath Remote File Inclusion eufrato_at_gmail.com
Monday, 3 April
- Re: [Full-disclosure] Critical PHP bug - act ASAP if you are running web with sensitive data Jasper Bryant-Greene
Tuesday, 4 April
- Re: Flaw in commonly used bash random seed method Dave Korn
- Linux Kernel Local DoS vulnerability. fingerout
- [FLSA-2006:152873] Updated xine package fixes security issues Marc Deslauriers
Wednesday, 5 April
- Re: Re: Bypassing ISA Server 2004 with IPv6 Romain.Le-Guen_at_hsc.fr
- Re: Bypassing ISA Server 2004 with IPv6 Christine Kronberg
- [SECURITY] [DSA 1024-1] New clamav packages fix several vulnerabilities Moritz Muehlenhoff
- Cisco Security Advisory: Cisco 11500 Content Services Switch HTTP Request Vulnerability Cisco Systems Product Security Incident Response Team
Tuesday, 4 April
- [FLSA-2006:152896] Updated mod_python package fixes a security issue Marc Deslauriers
Wednesday, 5 April
- Re: Buffer-overflow in Ultr@VNC 1.0.1 viewer and server Luigi Auriemma
- [ MDKSA-2006:066 ] - Updated FreeRADIUS packages fix off-by-one overflow vulnerabilty security_at_mandriva.com
Saturday, 8 April
- Autonomous LAN party File iNclusion codexploder_at_linuxmail.org
Tuesday, 4 April
- [FLSA-2006:156139] Updated tcpdump packages fix security issues Marc Deslauriers
Friday, 7 April
- Xss In SaphpLesson3.0 w3.__at_hotmail.com
Tuesday, 4 April
- [FLSA-2006:156290] Updated cyrus-imapd packages fix security issues Marc Deslauriers
- [FLSA-2006:170411] Updated imap packages fix security issue Marc Deslauriers
- [FLSA-2006:183571-1] Updated tar package fixes security issue Marc Deslauriers
- [FLSA-2006:183571-2] Updated tar package fixes security issue Marc Deslauriers
- [FLSA-2006:180159] Updated unzip package fixes security issue Marc Deslauriers
Saturday, 8 April
- [eVuln] Null news SQL Injection Vulnerability alex_at_evuln.com
Tuesday, 4 April
- [FLSA-2006:184074] Updated pine package fixes security issue Marc Deslauriers
- [FLSA-2006:184098] Updated libc-client packages fixes security issue Marc Deslauriers
- [Updated] [FLSA-2006:186277] Updated sendmail packages fix security issue Marc Deslauriers
- Re: recursive DNS servers DDoS as a growing DDoS problem Jim Pingle
Saturday, 8 April
- [eVuln] phpNewsManager Multiple SQL Injections alex_at_evuln.com
Friday, 7 April
- SQL Injection in Chipmunk Guestbook dr.jr7_at_hotmail.com
- Sire 2.0 Nws Remote File inclusion & Arbitary Files Upload simo64_at_gmail.com
Tuesday, 4 April
- [Kaffeine Security Advisory] Heap based buffer overflow in http_peek() Dirk Mueller
- Re: recursive DNS servers DDoS as a growing DDoS problem Gadi Evron
- Re: recursive DNS servers DDoS as a growing DDoS problem Geo.
- Re: recursive DNS servers DDoS as a growing DDoS problem Ross Wheeler
- Re: FleXiBle Development Script Remote Command Exucetion And XSS Attacking Steven M. Christey
- Re: Bypassing ISA Server 2004 with IPv6 offtopic
Wednesday, 5 April
- Welcome to XCon2006 in China! xcon_at_xfocus.org
Saturday, 8 April
- [SECURITY] [DSA 1031-1] New cacti packages fix several vulnerabilities Martin Schulze
- [SECURITY] [DSA 946-2] New sudo packages fix privilege escalation Martin Schulze
Tuesday, 4 April
- google xss almfnod_at_gawab.com
- RE: Another way to spoof Internet Explorer Address Bar Memisyazici, Aras
Thursday, 6 April
- [security bulletin] HPSBUX02108 SSRT061133 rev.3 - HP-UX running Sendmail, Remote Execution of Arbitrary Code security-alert_at_hp.com
Friday, 7 April
- [ MDKSA-2006:068 ] - Updated mplayer packages fix integer overflow vulnerabilities security_at_mandriva.com
Tuesday, 4 April
- Re: recursive DNS servers DDoS as a growing DDoS problem Erwan David
Thursday, 6 April
- Re: Re: Another Internet Explorer Address Bar Spoofing Vulnerability pc.tech2_at_comcast.net
Friday, 7 April
- [KAPDA::#38] - MyBB 1.1.0~functions_post.php~XSS Attack addmimistrator_at_gmail.com
Thursday, 6 April
- [eVuln] VSNS Lemon Multiple Vulnerabilities alex_at_evuln.com
- PHPMyChat 0.15.0dev "SYS enter" remote commands xctn (not properly patched from previous versions) rgod_at_autistici.org
Wednesday, 5 April
- [ MDKSA-2006:065 ] - Updated kaffeine packages fix remote buffer overflow vulnerability security_at_mandriva.com
Saturday, 8 April
- Matt Wright Guestbook Xss Script İnjection liz0_at_bsdmail.com
Friday, 7 April
- [eVuln] vCounter - sourceworkshop SQL Injection Vulnerability alex_at_evuln.com
Thursday, 6 April
- [USN-268-1] Kaffeine vulnerability Martin Pitt
- LayerOne 2006 - Finalized Speaker Line-Up Announced Layer One
Wednesday, 5 April
- PHPMyChat <= 0.14.5 remote commands execution rgod_at_autistici.org
- Re: SQL injection in Invision Power Board v2.1.5 optix_prorat100_at_yahoo.com
Friday, 7 April
- [SECURITY] [DSA 1028-1] New libimager-perl packages fix denial of service Martin Schulze
Thursday, 6 April
- [ECHO_ADV_28$2006] Clever Copy <= 3.0 Connect.inc Critical Information Disclosure eufrato_at_gmail.com
Friday, 7 April
- [ MDKSA-2006:067 ] - Updated clamav packages fix vulnerabilities security_at_mandriva.com
Wednesday, 5 April
- [ GLSA 200604-05 ] Doomsday: Format string vulnerability Stefan Cornelius
Thursday, 6 April
- MAXDEV CMS Multiple vulnerabilities king_purba_at_yahoo.co.uk
Wednesday, 5 April
- [SECURITY] [DSA 1018-2] New Linux kernel 2.4.27 packages fix several vulnerabilities Moritz Muehlenhoff
Tuesday, 4 April
- Re: recursive DNS servers DDoS as a growing DDoS problem Anton Ivanov
Friday, 7 April
- [eVuln] newsletter - sourceworkshop SQL Injection Vulnerability alex_at_evuln.com
Wednesday, 5 April
- [ GLSA 200604-04 ] Kaffeine: Buffer overflow Sune Kloppenborg Jeppesen
Saturday, 8 April
- Shadowed Portal Cross Site Scripting liz0_at_bsdmail.com
Wednesday, 5 April
- Re: [Full-disclosure] Critical PHP bug - act ASAP if you are running web with sensitive data Moriyoshi Koizumi
Thursday, 6 April
- [SECURITY] [DSA 1027-1] New mailman packages fix denial of service Martin Schulze
Wednesday, 5 April
- Re: Another Internet Explorer Address Bar Spoofing Vulnerability sh0rtie
- Re: Flaw in commonly used bash random seed method Steve VanDevender
Thursday, 6 April
- XSS Bug in Cherokee Webserver rubengarrote_at_idominiun.com
Saturday, 8 April
- [SECURITY] [DSA 1029-1] New libphp-adodb packages fix several vulnerabilities Martin Schulze
Wednesday, 5 April
- Google Reader "preview" and "lens" script improper feed validation Debasis Mohanty
Saturday, 8 April
- Virtual War File İnclusion liz0_at_bsdmail.com
Wednesday, 5 April
- Cisco Security Advisory: Cisco Optical Networking System 15000 series and Cisco Transport Controller Vulnerabilities Cisco Systems Product Security Incident Response Team
Friday, 7 April
- Re: Format string in Doomsday 1.8.6 Alexey Dobriyan
Saturday, 8 April
- [SECURITY] [DSA 1030-1] New moodle packages fix several vulnerabilities Martin Schulze
Thursday, 6 April
- Multiple vulnerability in jupiter CMS king_purba_at_yahoo.co.uk
- [SECURITY] [DSA 1026-1] New sash packages fix potential arbitrary code execution Moritz Muehlenhoff
Friday, 7 April
- [ GLSA 200604-06 ] ClamAV: Multiple vulnerabilities Sune Kloppenborg Jeppesen
Wednesday, 5 April
- Re: Buffer-overflow in Ultr@VNC 1.0.1 viewer and server jalvare7_at_cajastur.es
- [SECURITY] [DSA 1023-1] New kaffeine packages fix arbitrary code execution Martin Schulze
- Re: Bios Information Leakage darmawan_salihun_at_students.itb.ac.id
Thursday, 6 April
- [security bulletin] HPSBUX02110 SSRT061110 rev.1 - HP-UX Running wu-ftpd Remote Denial of Service (DoS) security-alert_at_hp.com
- [security bulletin] HPSBUX02111 SSRT061132 rev.1 - HP-UX su(1) Local Unauthorized Access security-alert_at_hp.com
- [SECURITY] [DSA 1025-1] New dia packages fix arbitrary code execution Martin Schulze
Friday, 7 April
- IE6 Crash tel_at_weirdtech.org
Wednesday, 5 April
- RE: recursive DNS servers DDoS as a growing DDoS problem Geo.
Thursday, 6 April
- [Overflow.pl] Clam AntiVirus Win32-UPX Heap Overflow (not default configuration) Damian Put
Monday, 10 April
- Re: IE6 Crash H D Moore
Saturday, 8 April
- XMB Forum 1.9.5-Final XSS r0xes.ratm_at_gmail.com
Monday, 10 April
- Oracle read-only user can insert/update/delete data via specially crafted views ak_at_red-database-security.com
- Re[2]: Bypassing ISA Server 2004 with IPv6 3APA3A
- TUGZip Archive Extraction Directory traversal h e
Sunday, 9 April
- Vulnerabilities in SPIP crasher_at_kecoak.or.id
- PhpOpenChat 3.0.x ADODB Server.php "sql" SQL injection rgod_at_autistici.org
- phpinfo() Cross Site Scripting PHP 5.1.2 and 4.4.2 cxib_at_securityreason.com
- function *() php/apache Crash PHP 4.4.2 and 5.1.2 cxib_at_securityreason.com
- tempnam() open_basedir bypass PHP 4.4.2 and 5.1.2 cxib_at_securityreason.com
- copy() Safe Mode Bypass PHP 4.4.2 and 5.1.2 cxib_at_securityreason.com
- MyBB 1.10 'newthread.php' < CrossSiteScripting > o.y.6_at_hotmail.com
- Myspace.com - Intricate Script Injection silentproducts_at_gmail.com
- Re: Bypassing ISA Server 2004 with IPv6 Thor (Hammer of God)
- RE: google xss Andy Meyers
- Re: Bypassing ISA Server 2004 with IPv6 Thor (Hammer of God)
- Vegadns blind sql injection and cross site scripting king_purba_at_yahoo.co.uk
Monday, 10 April
- PHPList <= 2.10.2 remote commands execution rgod_at_autistici.org
- [eVuln] phpNewsManager Multiple SQL Injections alex_at_evuln.com
- Jbook Cross Site Scripting root___at_linuxmail.org
- phpMyForum Cross Site Scripting & CRLF injection root___at_linuxmail.org
- PHPWebGallery Multiple Cross Site Scripting Vulnerabilities root___at_linuxmail.org
Tuesday, 11 April
- [USN-269-1] xscreensaver vulnerability Martin Pitt
- Re: PHPList <= 2.10.2 remote commands execution secfoc_at_tincan.co.uk
Monday, 10 April
- Re: function *() php/apache Crash PHP 4.4.2 and 5.1.2 Michal Zalewski
- Confixx 3.1.2 <= Cross Site Scripting Vuln sn4k3.23_at_gmail.com
- INDEXU <= 5.0.1 (theme_path)and (base_path) Remote File Inclusion Exploit selfar2002_at_hotmail.com
- [ MDKSA-2006:069 ] - Updated openvpn packages fix vulnerability security_at_mandriva.com
Tuesday, 11 April
- Multiple vulnerabilities in Blur6ex crasher_at_kecoak.or.id
- phpListPro <= 2.0 - Remote File Include Vulnerability admin_at_majorsecurity.de
- Realplayer .SWF Multiple Remote Memory Corruption Vulnerabilities Sowhat
- [eVuln] [V]Book Multiple Vulnerabilities alex_at_evuln.com
- ZDI-06-007: Microsoft Windows Address Book (WAB) File Format Parsing Vulnerability zdi-disclosures_at_3com.com
- Manila <= 9.5 - XSS Vulnerabilities d4igoro_at_gmail.com
- Confixx 3.1.2 <= SQL Injection sn4k3.23_at_gmail.com
- Tritanium Bulletin Board 1.2.3 - XSS d4igoro_at_gmail.com
Monday, 10 April
- IBM ptt_at_btinternet.com
Tuesday, 11 April
- [eVuln] VNews Multiple Vulnerabilities alex_at_evuln.com
Monday, 10 April
- Re: google xss Jim Ley
Tuesday, 11 April
- Re: Re: PHPList <= 2.10.2 remote commands execution rg.viza_at_gmail.com
- [SRC-Telindus advisory] - HP System Management Homepage Remote Unauthorized Access SRC Telindus
- AzDGVote File inclusion selfar2002_at_hotmail.com
Monday, 10 April
- Re: Bypassing ISA Server 2004 with IPv6 noreply_at_romainl.com
Tuesday, 11 April
- [ MDKSA-2006:071 ] - Updated xscreensaver packages fix clear-text password vulnerability security_at_mandriva.com
Monday, 10 April
- [ MDKSA-2006:070 ] - Updated openvpn packages fix vulnerability security_at_mandriva.com
Tuesday, 11 April
- IMF 2006 - Submission Deadline Extension Oliver Goebel
- IT Underground, London 2006 - call for papers it_underground_at_gazeta.pl
Monday, 10 April
- Re: google xss pagvac
Tuesday, 11 April
- SAXoPRESS - directory traversal securiteam_at_datasec.no
- 2nd European Conference on Computer Network Defense (EC2ND) Blyth A J C (Comp)
- Microsoft Internet Explorer DBCS Remote Memory Corruption Vulnerability Sowhat
- Re: Buffer-overflow in Ultr@VNC 1.0.1 viewer POC phaas_at_redspin.com
Wednesday, 12 April
- [SECURITY] [DSA 1032-1] New zope-cmfplone packages fix unprivileged data manipulation Moritz Muehlenhoff
- [eVuln] QLnews XSS and PHP Code Insertion Vulnerabilities alex_at_evuln.com
Tuesday, 11 April
- Re: function *() php/apache Crash PHP 4.4.2 and 5.1.2 Steven M. Christey
- Simplog <=0.9.2 multiple vulnerabilities rgod_at_autistici.org
Wednesday, 12 April
- [SECURITY] [DSA 1033-1] New horde3 packages fix several vulnerabilities Moritz Muehlenhoff
- Exploiting out of memory crashes and null pointers [was: Re: function *() php/apache Crash PHP 4.4.2 and 5.1.2] 86400s_at_nerim.net
- Vulnerability in Microsoft FrontPage Server Extensions Could Allow Cross-Site Scripting Esteban Martinez Fayo
Thursday, 13 April
- [security bulletin] HPSBUX02108 SSRT061133 rev.6 - HP-UX running Sendmail, Remote Execution of Arbitrary Code security-alert_at_hp.com
- [USN-270-1] xpdf vulnerabilities Martin Pitt
Wednesday, 12 April
- Clansys Multiple Xss Vulnerabilities Soothackers_at_gmail.com
Thursday, 13 April
- Re: phpWebsite <= SQL Injection (friend.php) & (article.php) shaun_at_aegisdesign.co.uk
Wednesday, 12 April
- PatroNet CMS Xss Vuln Soothackers_at_gmail.com
Thursday, 13 April
- Windows Help Heap Overflow c0ntexb_at_gmail.com
Wednesday, 12 April
- SimpleBBS v1.1(posts.php) remote command execution stormhacker_at_hotmail.com
- [BuHa-Security] DoS Vulnerability in Firefox 1.5.0.1 bugtraq_at_morph3us.org
Thursday, 13 April
- [eVuln] qliteNews SQL Injection Vulnerability alex_at_evuln.com
Wednesday, 12 April
- [BuHa-Security] Stack Based Buffer Overflow Vulnerability in Amaya 9.4 #2 bugtraq_at_morph3us.org
- Remote File Inclusion in VBulletin ImpEx dr.jr7_at_hotmail.com
- [BuHa-Security] Multiple Vulnerabilities in MS IE 6.0 SP2 bugtraq_at_morph3us.org
- Re: Multiple vulnerabilities in Blur6ex Steven M. Christey
- phpWebSite 0.10.? (topics.php) Remote SQL Injection Exploit selfar2002_at_hotmail.com
- RevoBoard [email] tag XSS r0xes.ratm_at_gmail.com
- Re: google xss Vladimir Levijev
- Recon 2006: speaker lineup announcement Recon
Thursday, 13 April
- Re: Confixx 3.1.2 <= SQL Injection iovdin_at_swsoft.com
Wednesday, 12 April
- MyBB 1.10 New XSS ' member.php ' o.y.6_at_hotmail.com
Thursday, 13 April
- Re: function *() php/apache Crash PHP 4.4.2 and 5.1.2 Michal Zalewski
Wednesday, 12 April
- QuickBlogger v1.4 Cross-Site Scripting botan_at_linuxmail.org
Tuesday, 11 April
- RE: IBM Michael Scheidell
Wednesday, 12 April
- phpMyAdmin 2.7.0-pl1 kr4ch_at_web.de
- Re: Jupiter CMS <= 1.1.5 multiple XSS attack vectors. anonss_at_anonaa.com
- MyBB 1.10 New CrossSiteScripting ' member.php ' o.y.6_at_hotmail.com
- SaphpLesson 2.0 (forumid) Remote SQL Injection Exploit selfar2002_at_hotmail.com
Thursday, 13 April
- Secunia Research: Adobe Document Server for Reader Extensions Multiple Vulnerabilities Secunia Research
- SEC Consult SA-20060314 :: Opera Browser CSS Attribute Integer Wrap / Buffer Overflow Bernhard Mueller
- ZDI-06-008: Novell GroupWise Messenger Accept-Language Buffer Overflow zdi-disclosures_at_3com.com
Tuesday, 11 April
- Re: IBM stend_at_us.ibm.com
Thursday, 13 April
- TalentSoft Web+Shop Path Disclosure revnic_at_gmail.com
Wednesday, 12 April
- [BuHa-Security] Stack Based Buffer Overflow Vulnerability in Amaya 9.4 bugtraq_at_morph3us.org
Thursday, 13 April
- Re: RE: IBM Juha-Matti Laurio
- [eVuln] RedCMS Multiple XSS and SQL Injection Vulnerabilities alex_at_evuln.com
- Camino Browser HTML Parsing Null Pointer Dereference Denial of Service Vulnerability izimask_at_thehackademy.net
- PowerClan 1.14 - SQL Injection d4igoro_at_gmail.com
- Re: Simplog <=0.9.2 multiple vulnerabilities Jeremy Ashcraft
Friday, 14 April
- [eVuln] aWebNews Multiple XSS and SQL Injection Vulnerabilities alex_at_evuln.com
Thursday, 13 April
- Vulnerabilities in lifetype crasher_at_kecoak.or.id
- Vulnerabilities in Papoo crasher_at_kecoak.or.id
- Vulnerabilities in MODx crasher_at_kecoak.or.id
Friday, 14 April
- Farsinews Cross-Site Scripting & Path disclosure vulnerability aminrayden_at_yahoo.com
- osCommerce "extras/" information/source code disclosure rgod_at_autistici.org
Thursday, 13 April
- Re: phpMyAdmin 2.7.0-pl1 Kevin Waterson
Friday, 14 April
- Encyclopedia <= 3.0 (login.php) CrossSite Scripting - XSS n0m3rcy_at_bsdmail.org
- phpBB Admin command execution noch22_at_gmail.com
Wednesday, 14 April
- Serendipity Blog vuln moep
Friday, 14 April
- [SECURITY] [DSA 1034-1] New horde2 packages fix several vulnerabilities Moritz Muehlenhoff
- phpBB template file code execution noch22_at_gmail.com
- Re: Re: function *() php/apache Crash PHP 4.4.2 and 5.1.2 sp3x_at_securityreason.com
- Avast Linux Home Edition (vulnerability on a temporary folder creation) Julien L.
- [ GLSA 200604-07 ] Cacti: Multiple vulnerabilities in included ADOdb Thierry Carrez
Thursday, 13 April
- Firefox 1.5.0.1 Password Manager Arbtirary User Browsing History Disclosure franz_at_noemail.com
- Re: [Full-disclosure] SEC Consult SA-20060314 :: Opera Browser CSS Attribute Integer Wrap / Buffer Overflow Thierry Zoller
- Re: phpWebSite 0.10.? (topics.php) Remote SQL Injection Exploit Kevin Wilcox
- Re: Re: NETGEAR WGT624 Wireless DSL router default user name/password vulnerability tranceformer_at_crimsonguard.net
- [Full-disclosure] Microsoft DNS resolver: deliberately sabotaged hosts-file lookup Dave Korn
- Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotaged hosts-file lookup Brandon S. Allbery KF8NH
- PAJAX Remote Code Injection and File Inclusion Vulnerability RedTeam Pentesting
- Xss In ar-blog v 5.2 W3.__at_hotmail.com
- Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotaged hosts-file lookup Stan Bubrouski
- RE: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup Derek Soeder
- planetSearch+ - XSS Vulnerabilities d4igoro_at_gmail.com
- Re: [ECHO_ADV_27$2006] Indexu <= 5.0.1 Remote File Inclusion robert_at_blurstorm.com
- Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotaged hosts-file lookup A.L.M.Buxey_at_lboro.ac.uk
Wednesday, 12 April
- Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotaged hosts-file lookup dumdidumdideldey
Thursday, 13 April
- Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotaged hosts-file lookup Joachim Schipper
Wednesday, 12 April
- Re: SAXoPRESS - directory traversal aka Saxotech Online securiteam_at_datasec.no
- Re: Sql Injection in Confixx 3.06 & 3.08 & 3.?? ? iovdin_at_swsoft.com
- a Yahoo Vulnerability r57shell_at_gmail.com
Monday, 10 April
- Re[2]: Bypassing ISA Server 2004 with IPv6 Christine Kronberg
- Dokeos 1.6.4 SQL Injection Vulnerability Alvaro Olavarria
Friday, 14 April
- manila.userland cross site scriptable Aaron Kaplan
- Re: QuickBlogger v1.4 Cross-Site Scripting Steven M. Christey
- ZDI-06-010: Mozilla Firefox CSS Letter-Spacing Heap Overflow Vulnerability zdi-disclosures_at_3com.com
- [KAPDA]MyBB1.1.0~global.php~ParameterExtracting addmimistrator_at_gmail.com
- [KAPDA]CopperminePhotoGallery1.4.4~ PluginInclusionSystem(index.php)~ RemoteFileInclusion attack addmimistrator_at_gmail.com
- Re: Firefox 1.5.0.1 Password Manager Arbtirary User Browsing History Disclosure Eliah Kagan
- [eVuln] aWebBB Multiple XSS and SQL Injection Vulnerabilities alex_at_evuln.com
Saturday, 15 April
- [SECURITY] [DSA 1035-1] New fcheck packages fix insecure temporary file creation Moritz Muehlenhoff
- Re[3]: Bypassing ISA Server 2004 with IPv6 3APA3A
- PHP Album <= 0.3.2.3 remote commnads execution rgod_at_autistici.org
- RE: osCommerce "extras/" information/source code disclosure Michael Scheidell
- Tiny Web Gallery <= 1.4 XSS qex_at_bsdmail.org
- PhpGuestbook <= 1.0 XSS qex_at_bsdmail.org
- FlexBB <= 0.5.7 BETA XSS qex_at_bsdmail.org
- Boardsolution <= 1.12 XSS qex_at_bsdmail.org
- phpFaber TopSites Script Cross-Site Scripting botan_at_linuxmail.org
- Snipe Gallery <= 3.1.4 Multiple XSS qex_at_bsdmail.org
- Re: Vulnerabilities in MOD Victor Brilon
- Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup Thor (Hammer of God)
- DbbS<=2.0-alpha Multiple Vulnerabilities yamcho_at_mail.it
Sunday, 16 April
- Re: [KAPDA]CopperminePhotoGallery1.4.4~ PluginInclusionSystem(index.php)~ RemoteFileInclusion attack Dariusz Kolasinski
- Xss In bMachine 2٫7 W3.__at_hotmail.com
- FlexBB v0.5.5 BETA [SQL Inj] [XSS] [Login bypass] kr4ch_at_web.de
- Calendarix "yearcal.php" XSS Attacking botan_at_linuxmail.org
- Re: Snipe Gallery <= 3.1.4 Multiple XSS nobody_at_nowhere.com
- MyEvent Remote File Execution And XSS Attacking botan_at_linuxmail.org
- BetaBoard Cross Site Scripting vulnerability easy.mask_at_gmail.com
- PhpWebFTP 3.2 Login Script arko.dhar_at_gmail.com
Monday, 17 April
- [SECURITY] [DSA 1036-1] New bsdgames packages fix local privilege escalation Moritz Muehlenhoff
- - PHPGraphy <= 0.9.11 "editwelcome" unauthorized access / cross site scripting - rgod_at_autistici.org
- ShoutBOOK <= 1.1 XSS qex_at_bsdmail.org
- Neuron Blog <= 1.1 XSS qex_at_bsdmail.org
- [eVuln] CzarNews XSS and Multiple SQL Injection Vulnerabilities alex_at_evuln.com
- Tiny PHP forum - vulns hessam_at_hessamx.net
- AnimeGenesis <= XSS qex_at_bsdmail.org
- ZDI-06-009: Mozilla Firefox Tag Parsing Code Execution Vulnerability zdi-disclosures_at_3com.com
- [ GLSA 200604-08 ] libapreq2: Denial of Service vulnerability Thierry Carrez
- FlexBB 0.5.5 Bypass Exploit o.y.6_at_hotmail.com
- Neon Responder (Dos,Exploit) Stefan Lochbihler
- [Argeniss] Alert - Yahoo! Webmail XSS Cesar
- gcc 4.1 bug miscompiles pointer range checks, may place you at risk Felix von Leitner
- [eVuln] Wire Plastik wpBlog SQL Injection Vulnerability alex_at_evuln.com
- [SA-03] Example of Grsecurity protection avoid. adam_at_pinkhat.org
- Re: gcc 4.1 bug miscompiles pointer range checks, may place you at risk Michael Chamberlain
- Re: gcc 4.1 bug miscompiles pointer range checks, may place you at risk Forrest J. Cavalier III
- RE: gcc 4.1 bug miscompiles pointer range checks, may place you at risk Michael Wojcik
- Linpha 1.1.0 - XSS Vulnerabilities d4igoro_at_gmail.com
Tuesday, 18 April
- Re: gcc 4.1 bug miscompiles pointer range checks, may place you at risk Alexander Klimov
- Remote Xine Format String Vulnerability c0ntexb_at_gmail.com
Monday, 17 April
- Re: [Full-disclosure] [Argeniss] Alert - Yahoo! Webmail XSS Morning Wood
Tuesday, 18 April
- Another flaw in Firefox 1.5.0.2: to open files from remote miky_at_gmail.com
- Re: - PHPGraphy <= 0.9.11 "editwelcome" unauthorized access / cross site scripting - JiM / aEGIS
- axoverzicht.cgi <= XSS qex_at_bsdmail.org
Monday, 17 April
- blur6ex Local File Inclusion and SQL injection . h e
- Re: [Full-disclosure] [Argeniss] Alert - Yahoo! Webmail XSS Morning Wood
Tuesday, 18 April
- Re: gcc 4.1 bug miscompiles pointer range checks, may place you at risk jat-public01_at_jaet.org
Monday, 17 April
- Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup Ansgar -59cobalt- Wiechers
Tuesday, 18 April
- Re: gcc 4.1 bug miscompiles pointer range checks, may place you at risk Florian Weimer
Monday, 17 April
- [ MDKSA-2006:072 ] - Updated kernel packages fix multiple vulnerabilities security_at_mandriva.com
Tuesday, 18 April
- phpLister v. 0.4.1 XSS Attacking botan_at_linuxmail.org
- [KAPDA::#41] - Mambo/Joomla rss component vulnerability alireza hassani
- Multiple critical and high risk issues in Oracle's database server NGSSoftware Insight Security Research
- [Symantec Security Advisory] LiveUpdate for Macintosh Local Privilege Escalation Secure_at_symantec.com
- Re: gcc 4.1 bug miscompiles pointer range checks, may place you at risk Gabor Gombas
- CuteNews 1.4.1 <= Cross Site Scripting sn4k3.23_at_gmail.com
- SQL Injection in package SYS.DBMS_LOGMNR_SESSION ak_at_red-database-security.com
Wednesday, 19 April
- FreeBSD Security Advisory FreeBSD-SA-06:14.fpu FreeBSD Security Advisories
- [MajorSecurity]ActualAnalyzer - Remote File Include Vulnerability admin_at_majorsecurity.de
- Oracle 10g 10.2.0.2.0 DBA exploit putosoft softputo
- XSS Vulnerability in Guest-book script powered by Community Architect susam.pal_at_gmail.com
- Cisco Security Advisory: Cisco IOS XR MPLS Vulnerabilities Cisco Systems Product Security Incident Response Team
Tuesday, 18 April
- Re: Path Disclosure and Arbitrary File Read Vulnerability in SLAB5000 office_at_slabmedia.com
Wednesday, 19 April
- Re: [KAPDA::#41] - Mambo/Joomla rss component vulnerability rey.gigataras_at_joomla.org
- Re: Multiple vulnerabilities in Linux based Cisco products Ilker Temir
- [security bulletin] HPSBUX02108 SSRT061133 rev.7 - HP-UX running Sendmail, Remote Execution of Arbitrary Code security-alert_at_hp.com
- Multiple vulnerabilities in Linux based Cisco products assurance.com.au
- RechnungsZentrale V2 - SQL injection and Remote PHP inclusion vulnerabilities info_at_g-0.org
- ThWboard <= 3 Beta 2.84 SQL Injection Qex_at_bsdmail.org
- Cisco Security Advisory: Multiple Vulnerabilities in the WLSE Appliance Cisco Systems Product Security Incident Response Team
Tuesday, 18 April
- Re: phpBB Admin command execution dave.de_at_siol.net
Monday, 17 April
- Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup Paul Wouters
Saturday, 15 April
- redirection vuln crawlers breed & security through obscurity Ivan Sergio Borgonovo
Tuesday, 18 April
- Shbablek Mail Vulnerablitiy - Cross-Site Scripting n0m3rcy_at_bsdmail.org
Monday, 17 April
- Re: RE: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup john_at_johnsdomain.org
Wednesday, 19 April
- WWWThread RC 3 MultBugs o.y.6_at_hotmail.com
- ContentBoxx Login.php Cross-Site Scripting botan_at_linuxmail.org
Sunday, 16 April
- Fortinet28 box does not resist has small synflood! testx444_at_hushmail.com
- Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup no.spam_at_my.house
Tuesday, 18 April
- Re: Multiple Vulnerabilities in LucidCMS zachofalltrades_at_sourceforge.net
Saturday, 15 April
- Tlen.PL e-mail XSS vulnerability. koper_at_pass.pl
Wednesday, 19 April
- RE: redirection vuln crawlers breed & security through obscurity Evans, Arian
Sunday, 16 April
- Re: RE: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup somebody_at_rtr.ca
Monday, 17 April
- Re: gcc 4.1 bug miscompiles pointer range checks, may place you at risk Nate Eldredge
- Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup Geo.
Saturday, 15 April
- Re: Re[2]: Bypassing ISA Server 2004 with IPv6 Thor (Hammer of God)
Wednesday, 19 April
- Confixx SQL Injection exploit (confixx_exploit.pl) defa
- EasyGallery Cross-Site Scripting botan_at_linuxmail.org
Saturday, 15 April
- Re[3]: Bypassing ISA Server 2004 with IPv6 Christine Kronberg
Tuesday, 18 April
- [eVuln] MD News Authentication Bypass and SQL Injection Vulnerabilities alex_at_evuln.com
Sunday, 16 April
- Re: Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotaged hosts-file lookup somerandomaddress99_at_mailinator.com
Saturday, 15 April
- Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotaged hosts-file lookup Jamie Riden
Sunday, 16 April
- Re: Re[2]: Bypassing ISA Server 2004 with IPv6 Christine Kronberg
- SQL Injection in incredibleindia.org susam_pal_at_yahoo.co.in
Wednesday, 19 April
- [eVuln] N.T. Version 1.1.0 XSS and PHP Code Insertion Vulnerabilities alex_at_evuln.com
- PCPIN Chat <= 5.0.4 "login/language" remote cmmnds xctn rgod_at_autistici.org
- [USN-271-1] Firefox vulnerabilities Martin Pitt
Monday, 17 April
- Strengthen OpenSSH security? Brett Glass
Wednesday, 19 April
- ASPSitem <= 1.83 Remote SQL Injection Vulnerability Mustafa Can Bjorn IPEKCI
Monday, 17 April
- Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup robsekeris_at_hotmail.com
Thursday, 20 April
- [eVuln] MWGuest XSS Vulnerability alex_at_evuln.com
- PHPSurveyor <= 0.995 'save.php/surveyid' remote cmmnds xctn rgod_at_autistici.org
- ThWboard 3 Beta 2.84 Cross Site Scripting CrAzY.CrAcKeR_at_hotmail.com
- axoverzicht.cgi<==Remote File Inclusion CrAzY.CrAcKeR_at_hotmail.com
- Re: CuteNews 1.4.1 <= Cross Site Scripting Steven M. Christey
- [security bulletin] HPSBTU02095 SSRT051007 rev.3 - HP Tru64 UNIX Running DNS BIND4/BIND8 as Forwarders: Remote Unauthorized Privileged Access security-alert_at_hp.com
- [security bulletin] HPSBST02112 SSRT061129 rev.1 - HP StorageWorks Secure Path for Windows Remote Denial of Service (DoS) security-alert_at_hp.com
Tuesday, 18 April
- Ad-Aware Revisited Roy.Batty_at_phreaker.net
Wednesday, 19 April
- New site about security conferences : www.security-briefings.com newslist_at_security-briefings.com
- Allied Telesyn Switch UDP Data Flood Management Denial Of Service Vulnerability kim_at_webdeal.no
- RE: (addendum) redirection vuln crawlers breed & security through obscurity Evans, Arian
- [Argeniss] Oracle Database 10gR1 Buffer overflow in VERIFY_LOG procedure Cesar
- Re: Strengthen OpenSSH security? Mike Hoskins
- Re: Strengthen OpenSSH security? Carson Gaspar
- Re: Strengthen OpenSSH security? Kd
- Re: Re[3]: Bypassing ISA Server 2004 with IPv6 Thor (Hammer of God)
- Re: Strengthen OpenSSH security? MaddHatter
- Re: Strengthen OpenSSH security? Damien Miller
- Re: Re[3]: Bypassing ISA Server 2004 with IPv6 offtopic
- RE: [Full-disclosure] Microsoft DNS resolver: deliberately sabotaged hosts-file lookup Mario Contestabile
Thursday, 20 April
- RE: Microsoft DNS resolver: deliberately sabotaged hosts-file lookup Nick FitzGerald
- 4images <= 1.7 XSS qex_at_bsdmail.org
- Websense Filter Bypass qex_at_bsdmail.org
- Re: Strengthen OpenSSH security? c0redump_at_ackers.org.uk
- Mini-NUKE v2.3<<--- SQL Injection CrAzY.CrAcKeR_at_hotmail.com
- [ GLSA 200604-09 ] Cyrus-SASL: DIGEST-MD5 Pre-Authentication Denial of Service Sune Kloppenborg Jeppesen
- [ GLSA 200604-10 ] zgv, xzgv: Heap overflow Sune Kloppenborg Jeppesen
- [SecuriWeb 2006.1] directory traversal in Asterisk@Home and ARI François Harvey
- BK Forum <<--V.4.0 SQL Injection CrAzY.CrAcKeR_at_hotmail.com
- Re: Strengthen OpenSSH security? Theo de Raadt
Friday, 21 April
- [eVuln] MWNewsletter SQL Injection and XSS Vulnerabilities alex_at_evuln.com
- r57shell.php <= 1.3 XSS qex_at_bsdmail.org
- bloggage Remote SQL Injection omnipresent_at_email.it
- [SECURITY] [DSA 1037-1] New zgv packages fix arbitrary code execution Martin Schulze
- RE: [BULK] - Websense Filter Bypass Hubbard, Dan
- Re: Mini-NUKE v2.3<<--- SQL Injection nukedx_at_nukedx.com
- Scry Gallery Directory Traversal & Full Path Disclosure Vulnerabilites simo64_at_gmail.com
- Rapid7 Advisory R7-0021: Symantec Scan Engine Authentication Fundamental Design Error advisory_at_rapid7.com
- Rapid7 Advisory R7-0022: Symantec Scan Engine Known Immutable DSA Private Key advisory_at_rapid7.com
- Rapid7 Advisory R7-0023: Symantec Scan Engine File Disclosure Vulnerability advisory_at_rapid7.com
- Rapid7 Advisory R7-0019: Directory traversal vulnerability in SolarWinds TFTP Server for Windows advisory_at_rapid7.com
- [Symantec Security Advisor] Symantec Scan Engine Multiple Vulnerabilities secure_at_symantec.com
Saturday, 22 April
- [SECURITY] [DSA 1038-1] New xzgv packages fix arbitrary code execution Martin Schulze
- VWar <= ver 1.21 Remote Code Execution Exploit ali_at_hackerz.ir
Friday, 21 April
- dForum <= 1.5 Multiple Remote File Inclusion Vulnerabilities. Mustafa Can Bjorn IPEKCI
- vBulletin <= 3.5.4 with MKPortal 1.1 Remote SQL Injection Vulnerability. Mustafa Can Bjorn IPEKCI
- Advisory: Simplog <= 0.93 Multiple Remote Vulnerabilities. Mustafa Can Bjorn IPEKCI
- Advisory: CoreNews <= 2.0.1 Multiple Remote Vulnerabilities. Mustafa Can Bjorn IPEKCI
Saturday, 22 April
- [ GLSA 200604-11 ] Crossfire server: Denial of Service and potential arbitrary code execution Thierry Carrez
Wednesday, 19 April
- Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup Thor (Hammer of God)
- Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup Thor (Hammer of God)
- Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup John Biederstedt
- Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup Thor (Hammer of God)
- Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup Thor (Hammer of God)
Thursday, 20 April
- Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup Geo.
- Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup John Biederstedt
- Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup Thor (Hammer of God)
- Re: Strengthen OpenSSH security? Bob Goodman
Friday, 21 April
- FlexBB 0.5.5 Exploit [ function/showprofile.php ] Remote SQL Injection o.y.6_at_hotmail.com
- Re: redirection vuln crawlers breed & security through obscurity Thomas Hochstein
- Yahoo! Mail XSS Vulnerability Cheng Peng Su
Saturday, 22 April
- MSIE (mshtml.dll) OBJECT tag vulnerability Michal Zalewski
Monday, 24 April
- [USN-272-1] cyrus-sasl2 vulnerability Martin Pitt
- NSFOCUS SA2006-03 : IBM AIX rm_mlcache_file Local Race Condition Vulnerability NSFOCUS Security Team
- NSFOCUS SA2006-02 : IBM AIX mklvcopy Local Privilege Escalation Vulnerability NSFOCUS Security Team
- [SECURITY] [DSA 1040-1] New gdm packages fix local root exploit Martin Schulze
Sunday, 23 April
- [SECURITY] [DSA 1039-1] New blender packages fix several vulnerabilities Martin Schulze
- Scry Gallery XSS Vulnerability arko.dhar_at_gmail.com
- [ GLSA 200604-14 ] Dia: Arbitrary code execution through XFig import Sune Kloppenborg Jeppesen
- [ GLSA 200604-13 ] fbida: Insecure temporary file creation Sune Kloppenborg Jeppesen
- [ GLSA 200604-12 ] Mozilla Firefox: Multiple vulnerabilities Thierry Carrez
Monday, 24 April
- [eVuln] RateIt SQL Injection Vulnerability alex_at_evuln.com
Sunday, 23 April
- FileLodge Bolt (showonlineusers.php) Cross-Site Scripting Vulnerbility n0m3rcy_at_bsdmail.org
Monday, 24 April
- XSS Bug in OpenGear Server Website Aditya_at_Metaeye.Org
Sunday, 23 April
- BK Forum <= 4.0 Remote SQL Injection n0m3rcy_at_bsdmail.org
- [MajorSecurity] TotalCalendar 2.30 - Remote File Include Vulnerability admin_at_majorsecurity.de
Monday, 24 April
- [USN-273-1] Ruby vulnerability Martin Pitt
Sunday, 23 April
- RIblog Remote SQL Injection Exploit omnipresent_at_email.it
- Re: evoBlog Remote Name tag Script injection daniel_at_evo-dev.com
- Buffer-overflow and crash in Fenice OMS 1.10 Luigi Auriemma
- Denial of service bugs in OpenTTD 0.4.7 Luigi Auriemma
Saturday, 12 November
- Multiple PHP4/PHP5 vulnerabilities infocus
Sunday, 23 April
- Format string bug in Skulltag 0.96f Luigi Auriemma
- Advisory: Clansys <= 1.1 PHP Code Insertion Vulnerability. Mustafa Can Bjorn IPEKCI
Monday, 24 April
- Apple Mac OS X Safari 2.0.3 Vulnerability security_at_slashdot.ch
Sunday, 23 April
- Firefox Remote Code Execution and DoS 1.5.0.2 chris_at_splices.org
Monday, 24 April
- [MajorSecurity] phpMyAgenda 3.0 Final - Remote File Include Vulnerability admin_at_majorsecurity.de
Sunday, 23 April
- VWar Path Disclosure arko.dhar_at_gmail.com
- vbulletin<--3.0.x SQL Injection CrAzY.CrAcKeR_at_hotmail.com
Saturday, 22 April
- Advisory: My Gaming Ladder Combo System <= 7.0 Remote File Inclusion Vulnerability. Mustafa Can Bjorn IPEKCI
- ADVISORY FOR IOPUS SECURE EMAIL ATTACHMENTS ntwak0_at_safehack.com
Friday, 21 April
- RE: [BULK] - Websense Filter Bypass John E. Fleming
Monday, 24 April
- Quick 'n Easy FTP Server pro/lite Logging unicode stack overflow Kaveh Razavi
- Re: Apple Mac OS X Safari 2.0.3 Vulnerability Colin Keigher
- Re: vbulletin<--3.0.x SQL Injection scott_at_vbulletin.com
- [ MDKSA-2006:074 ] - Updated php packages address multiple vulnerabilities. security_at_mandriva.com
- [ MDKSA-2006:073 ] - Updated cyrus-sasl packages addresses vulnerability security_at_mandriva.com
- photokorn 1.53 , 1.542 << Sql Dr-Jr7_at_hotmail.com
- NextAge Shopping Cart Software XSS AminRayden_at_yahoo.com
- [ MDKSA-2006:075 ] - Updated mozilla-firefox packages fix numerous vulnerabilities security_at_mandriva.com
- PhpWebFtp Cross Site Scripting Vulnerability arko.dhar_at_gmail.com
Tuesday, 25 April
- [SECURITY] [DSA 1041-1] New abc2ps packages fix arbitrary code execution Martin Schulze
- NASL 'Split' function Buffer overflow Vulnerability OS2A BTO
- Re: ADVISORY FOR IOPUS SECURE EMAIL ATTACHMENTS fabio
Monday, 24 April
- Re: ADVISORY FOR IOPUS SECURE EMAIL ATTACHMENTS Andreas Beck
Tuesday, 25 April
- Invision Vulnerabilities, including remote code execution spam_at_we11er.co.uk
- Re: Apple Mac OS X Safari 2.0.3 Vulnerability Tom Ferris
- Re: NASL 'Split' function Buffer overflow Vulnerability Renaud Deraison
- [SECURITY] [DSA 1042-1] New Cyrus SASL packages fix denial of service Martin Schulze
- Re: NASL 'Split' function Buffer overflow Vulnerability Renaud Deraison
- Fenice - Open Media Streaming Server remote BOF exploit Kaveh Razavi
Saturday, 22 April
- PowerPoint Phishing Trojan Lance James
Monday, 24 April
- Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup Thor (Hammer of God)
Tuesday, 3 January
- Re: [Full-disclosure] Microsoft DNS resolver: deliberately sabotaged hosts-file lookup Duncan Simpson
Monday, 24 April
- Multiple vulnerabilities in IP3 Networks 'NetAccess' NA75 appliance Moonen, Ralph
- RE: [Full-disclosure] Microsoft DNS resolver: deliberately sabotagedhosts-file lookup Sean Scott
- Multiple browsers Windows mailto protocol Office 2003 file attachment exploit inge.henriksen_at_booleansoft.com
- Re: Advisory: Clansys <= 1.1 PHP Code Insertion Vulnerability. nukedx_at_nukedx.com
Tuesday, 25 April
- Instant Photo Gallery <= Multiple XSS qex_at_bsdmail.org
- Re: Apple Mac OS X Safari 2.0.3 Vulnerability Billy Bues
- Instant Photo Gallery <= Multiple XSS qex_at_bsdmail.org
- DCForumLite V 3.0<--XSS/SQL Injection Breeeeh_at_hotmail.com
Wednesday, 26 April
- Recent Oracle exploit is _actually_ an 0day with no patch David Litchfield
Tuesday, 25 April
- [ MDKSA-2006:076 ] - Updated mozilla packages fix numerous vulnerabilities security_at_mandriva.com
- [ MDKSA-2006:077 ] - Updated ethereal packages fix numerous vulnerabilities security_at_mandriva.com
- [ MDKSA-2006:078 ] - Updated mozilla-thunderbird packages fix numerous vulnerabilities security_at_mandriva.com
- [ MDKSA-2006:079 ] - Updated ruby packages fix vulnerability security_at_mandriva.com
Wednesday, 26 April
- Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerable to Crafted HTTP Attack Cisco Systems Product Security Incident Response Team
- [SECURITY] [DSA 1044-1] New Mozilla Firefox packages fix several vulnerabilities Martin Schulze
- MySmartBB<---v 1.1.x SQL Injection/XSS BoNy-m_at_hotmail.com
- DevBB <= 1.0.0 XSS qex_at_bsdmail.com
- [SECURITY] [DSA 1044-1] New Mozilla Firefox packages fix several vulnerabilities Martin Schulze
- Secunia Research: SpeedProject Products ACE Archive Handling Buffer Overflow Secunia Research
- [ GLSA 200604-15 ] xine-ui: Format string vulnerabilities Sune Kloppenborg Jeppesen
- [SECURITY] [DSA 1043-1] New abcmidi packages fix arbitrary code execution Martin Schulze
- [ GLSA 200604-16 ] xine-lib: Buffer overflow vulnerability Sune Kloppenborg Jeppesen
Tuesday, 25 April
- [eVuln] warforge.NEWS SQL Injection and Multiple XSS Vulnerabilities alex_at_evuln.com
- SQL Injection On DUportal outlaw_at_aria-security.net
- ZDI-06-011: Mozilla Firefox Table Rebuilding Code Execution Vulnerability zdi-disclosures_at_3com.com
- XXS Attack On FarsiNews outlaw_at_aria-security.net
Wednesday, 26 April
- Open Bulletin Board < Multiple Vulnerability qex_at_bsdmail.org
Tuesday, 25 April
- Local XXS Attack On CuteNews outlaw_at_aria-security.net
Wednesday, 26 April
- Re: Apple Mac OS X Safari 2.0.3 Vulnerability jens_at_mac.com
- Re: XV multiple buffer overflows (update) kvea_at_loc.gov
- Re: Invision Vulnerabilities, including remote code execution Steven M. Christey
- [EEYEB-20060227] Juniper Networks SSL-VPN Client Buffer Overflow eEye Advisories
- Re: Apple Mac OS X Safari 2.0.3 Vulnerability Aaron Phillips
Thursday, 27 April
- Re: Invision Vulnerabilities, including remote code execution mattmecham_at_gmail.com
- MyBB 1.1.1 Local SQL Injections o.y.6_at_hotmail.com
- (no subject) Yannick von Arx
- [USN-274-1] MySQL vulnerability Martin Pitt
Wednesday, 26 April
- Land Down Under 802 and below version Path Disclosure Vulnerability Advisory_at_Aria-Security.net
Thursday, 27 April
- [security bulletin] HPSBUX02108 SSRT061133 rev.9 - HP-UX running Sendmail, Remote Execution of Arbitrary Code security-alert_at_hp.com
- [security bulletin] HPSBUX02075 SSRT051074 rev.4 - HP-UX Running xterm Local Unauthorized Access security-alert_at_hp.com
Wednesday, 26 April
- Re: Instant Photo Gallery <= Multiple XSS security curmudgeon
- [ GLSA 200604-17 ] Ethereal: Multiple vulnerabilities in protocol dissectors Sune Kloppenborg Jeppesen
Thursday, 27 April
- [security bulletin] HPSBMA02113 SSRT061148 rev.1 - HP Oracle for OpenView (OfO) Critical Patch Update April 2006 security-alert_at_hp.com
- SQL injection exploit IPB <= 2.1.4 satanchild123_at_hotmail.com
- Re: Instant Photo Gallery <= Multiple XSS Steven M. Christey
- [USN-275-1] Mozilla vulnerabilities Martin Pitt
Wednesday, 26 April
- [SECURITY] [DSA 1045-1] New OpenVPN packages fix arbitrary code execution Martin Schulze
Thursday, 27 April
- [SECURITY] [DSA 1046-1] New Mozilla packages fix several vulnerabilities Martin Schulze
- BL4's SMTP server BufferOverflow Vulnerable the_day_at_echo.or.id
- Re: Recent Oracle exploit is _actually_ an 0day with no patch Steven M. Christey
Friday, 28 April
- Secunia Research: Servant Salamander unacev2.dll Buffer Overflow Vulnerability Secunia Research
- [ECHO_ADV_31$2006] Sws Web Server 0.1.7 Strcpy() & Syslog() Format String Vulnerability the_day_at_echo.or.id
Thursday, 27 April
- WinISO/UltraISO/MagicISO/PowerISO Directory Traversal Vulnerability Sowhat
- Cireos Portal Cross Site Scripting outlaw_at_aria-security.net
Friday, 28 April
- [Argeniss] Alert - Yahoo! Mail XSS vulnerability Cesar
- Re: Recent Oracle exploit is _actually_ an 0day with no patch Cesar
- [Kurdish Security #3] CoolMenus Event Remote File Include Vulnerability (For PHP) botan_at_linuxmail.org
- [ GLSA 200604-18 ] Mozilla Suite: Multiple vulnerabilities Thierry Carrez
- [Kurdish Security #2] Artmedic Event Remote File Include Vulnerability botan_at_linuxmail.org
- RE: Recent Oracle exploit is _actually_ an 0day with no patch Kornbrust, Alexander
Thursday, 27 April
- Neomail.pl Local Cross Site Scripting outlaw_at_aria-security.net
- Re: Recent Oracle exploit is _actually_ an 0day with no patch David Litchfield
Friday, 28 April
- [Kurdish Secure Advisory #1] I-RATER Platinum "Admin/configsettings.tpl.php" Remote File Include Vulnerability botan_at_linuxmail.org
Tuesday, 25 April
- Re: phpMyForum Cross Site Scripting & CRLF injection chris_at_phpmyforum.de
Thursday, 27 April
- Invision Power Board 2.1.5 POC Javier Olascoaga
Wednesday, 26 April
- Re: VWar Path Disclosure spic_at_g00ns.net
Saturday, 29 April
- W-Agora 4.20 XSS r0xes.ratm_at_gmail.com
Thursday, 27 April
- TopList <= 1.3.8 (PHPBB Hack) Remote File Inclusion Vulnerability mfoxhacker_at_gmail.com
Saturday, 29 April
- TextFileBB 1.0.16 Multiple XSS r0xes.ratm_at_gmail.com
Friday, 28 April
- Re: Recent Oracle exploit is _actually_ an 0day with no patch David Litchfield
Wednesday, 26 April
- Re: Apple Mac OS X Safari 2.0.3 Vulnerability Ian MacPhedran
- RE: Invision Vulnerabilities, including remote code execution Mike Weller
Tuesday, 25 April
- poll.pl<--remote commands execution exploit CrAzY.CrAcKeR_at_hotmail.com
Wednesday, 26 April
- XSS Attack On DirectAdmin Hosting Managment outlaw_at_aria-security.net

Last message date: Apr 30 2006
Archived on: Jul 01 2008 PDT