Bugtraq: by date

Thursday, 29 June
- NewsPHP 2006 PRO XSS SQL injection Vulnerability securityconnection_at_gmail.com
- News <= 5.2 XSS, SQL Injection, Full Path Disclosure gmdarkfig_at_gmail.com
- Re: [Full-disclosure] Re[2]: Is Windows TCP/IP source routing PoC code available? 3APA3A
- phpBB 2.0.21 Full Path Disclosure xzerox_at_linuxmail.org
Wednesday, 28 June
- Re: PHP security (or the lack thereof) Kevin Waterson
Friday, 30 June
- RE: [Full-disclosure] Browser bugs hit IE, Firefox today (SANS) Schmehl, Paul L
- Re: Browser bugs hit IE, Firefox today (SANS) Alex Potter
- Re: Msie 7.0 beta Crash mike_at_gmail.com
- [security bulletin] HPSBUX02128 SSRT5996 - rev.1 HP-UX mkdir(1) Local Unauthorized Access security-alert_at_hp.com
- [security bulletin] HPSBUX02103 SSRT5953 rev.3 - HP-UX passwd(1) Local Denial of Service (DoS) security-alert_at_hp.com
- Buddy Zone Version 1.0.1 - XSS luny_at_youfucktard.com
- mAds v1.0 lunY_at_youfucktard.com
- phpMyAdmin : Cross-Site Scripting Vulnerability bug_at_securitynews.ir
- DEF CON 14: Speakers Selected and more. The Dark Tangent
Saturday, 1 July
- OPERA Web Browser 9 Denial OF Service y3dips_at_echo.or.id
- Internet Crna Gora SQL Injection Breeeeh_at_hotmail.com
- SmS Script SQL Injection Breeeeh_at_hotmail.com
- Sql injection in Diesel joke site script black code
- SturGeoN Upload v1 Remote Command Execution Exploit gmdarkfig_at_gmail.com
Friday, 30 June
- Whitepaper: IT (in)security implementation in a real world example Denis Jedig
Saturday, 1 July
- Php-Fusion (Xss) With Avatar Upload zeberus__at_hotmail.com
- Glossaire<<--v1.7 Remote File Include CrAzY.CrAcKeR_at_hotmail.com
- call for papers - IT Underground, Italy 2006 it_underground_at_gazeta.pl
Sunday, 2 July
- [MajorSecurity #19] AutoRank <= 5.01 - Multiple XSS and cookie disclosure admin_at_majorsecurity.de
- WordPress 2.0.3 SQL Error and Full Path Disclosure xzerox_at_linuxmail.org
- plume-cms v1.0.4 Multiple Remote File include KARKOR23_at_hotmail.com
- Pearl Products Multiple Remote File Inclusion xzerox_at_linuxmail.org
- free QBoard v1.1 Multiple Remote File include KARKOR23_at_hotmail.com
- Re: [Full Disclosure] [Kil13r-SA-20060701-2] MoniWiki 1.1.1 Cross-Site Scripting Vulnerability mac68k_at_gmail.com
- Multiple vulnerabilities in TK8 Safe v.3.0.5 clappymonkey_at_gmail.com
- popup Vacation Rentals[calendar_year.php] SQL Injection BoNy-m_at_hotmail.com
- QTOFileManager 1.0 securityconnection_at_gmail.com
- Invision Power Board v1.3 Final SQL Injection Breeeeh_at_hotmail.com
- Contact for nhl.com C. Hamby
Monday, 3 July
- Excel 2000/XP/2003 Style 0day POC nanika_at_chroot.org
- 5 php scripts remote database password disclosure gmdarkfig_at_gmail.com
- Call For Papers - No cON Name 2006 Edition Spain deese_at_spezialk.net
- [ GLSA 200607-01 ] mpg123: Heap overflow Sune Kloppenborg Jeppesen
- ZoneAlarm Insufficient protection of registry key 'VETFDDNT\Enum' Vulnerability David Matousek
- imgsvr dos exploit by n00b co296_at_aol.com
- TBE 4.0 XSS securityconnection_at_gmail.com
Tuesday, 4 July
- Re: Browser bugs hit IE, Firefox today (SANS) Thor Larholm
Monday, 3 July
- [scip_Advisory 2351] Kyberna AG ky2help various form fields SQL Injection Marc Ruef
- galleria <= 1.0 Remote File Inclusion Vulnerability ineal_at_gmail.com
Tuesday, 4 July
- Re: WordPress 2.0.3 SQL Error and Full Path Disclosure James Davis
- [scip_Advisory 2352] F5 FirePass 4100 prior 6.x multiple Cross Site Scripting Marc Ruef
- file include exploits in randshop v1.2 black code
Monday, 3 July
- PhpWebGallery Cross Site Scripting Vulnerability iss4m.h_at_gmail.com
Tuesday, 4 July
- Re: file include exploits in randshop v1.2 Rainer Duffner
- Re: WordPress 2.0.3 SQL Error and Full Path Disclosure Jaroslaw Sajko
- [Bugtraq] Re: flock d0s exploit remote. beta 1 (v0.7) .myke lyons
- Invision Power Board "v1.X & 2.X" SQL Injection CrAzY.CrAcKeR_at_hotmail.com
- Re: Browser bugs hit IE, Firefox today (SANS) Paul Szabo
- Shopping Cart V0.9 luny_at_youfu**ktard.com
- Windows Explorer URL File format overflow nanika_at_chroot.org
Wednesday, 5 July
- Touch arbitrary file execute vulnerability Alex Park
- sNews 1.3 XSS SQL securityconnection_at_gmail.com
- BLOG:CMS 4.1.0 SQL injection File Include Vulnerability securityconnection_at_gmail.com
- Re: PHP security (or the lack thereof) Dan Falconer
- [ MDKSA-2006:116 ] - Updated kernel packages fixes multiple vulnerabilities security_at_mandriva.com
- vBulletin 3.5.4 (install_path) Exploit CarcaBotx_at_yahoo.com
- TigerTom Scripts luny_at_youf**ktard.com
Thursday, 6 July
- [SECURITY] [DSA 1104-2] New OpenOffice.org packages fix arbitrary code execution Martin Schulze
Wednesday, 5 July
- Public Advisory: Horde 3.1.1, 3.0.10 Multiple Security Issues Moritz Naumann
- Re: vBulletin 3.5.4 (install_path) Exploit mikathebest2003_at_yahoo.de
- [USN-308-1] shadow vulnerability Martin Pitt
- [USN-309-1] libmms vulnerability Martin Pitt
- [USN-310-1] ppp vulnerability Martin Pitt
- Re: vBulletin 3.5.4 (install_path) Exploit scott_at_vbulletin.com
Thursday, 6 July
- Re: IBM AIX Security contact? Troy Bollinger
- Major updates to Excel 0-day Vulnerability FAQ at SecuriTeam Blogs Juha-Matti Laurio
- Various heap and stack overflow bugs in AdPlug library 2.0 (CVS 04 Jul 2006) Luigi Auriemma
- McAfee VirusScan Enterprise 8.0.0 Buffer Overflow johndoe1529_at_yahoo.com
- Mico crashes when contected with wrong IOR / DoS tuergeist
Friday, 7 July
- TSLSA-2006-0040 - kernel Trustix Security Advisor
- WebEx Downloader Plug-in Multiple Vulnerabilities + rant Mark Litchfield
Thursday, 6 July
- PHP-Blogger Multiple Cross Site Scripting Vulnerabilities OS2A BTO
Friday, 7 July
- [ECHO_ADV_36$2006] ExtCalendar <== v2.0 Remote File Include Vulnerabilities matdhule_at_gmail.com
- ATutor : Cross-Site Scripting Vulnerabilities bug_at_securitynews.ir
Thursday, 6 July
- Possible code execution in Kaillera 0.86 Luigi Auriemma
Friday, 7 July
- rPSA-2006-0122-1 kernel Justin M. Forbes
- PBL Guestbook <= 1.32 XSS & SQL Querys Vulnerabilities paisterist.nst_at_gmail.com
Thursday, 6 July
- Format string bug in Sparklet 0.9.4try3 Luigi Auriemma
- [ MDKSA-2006:117 ] - Updated libmms packages fix buffer overflow vulnerability security_at_mandriva.com
Friday, 7 July
- HostingController: An attacker can gain reseller privileges and after that can gain admin privileges Irsdl_at_yahoo.com
Thursday, 6 July
- Sport-slo.net Guestbook v1.0 luny_at_youfucktard.com
- IBM AIX Security contact? Joxean Koret
Friday, 7 July
- Pivot <=1.30rc2 privilege escalation / remote commands execution rgod_at_autistici.org
Thursday, 6 July
- [SECURITY] [DSA 1105-1] New xine-lib packages fix denial of service Martin Schulze
- lintah_|adv|_01@2006>=========<[Aura-CMS v1.62]<===>[XSS vulnerable]&[bug] k07iX
- ZDI-06-021: WebEx Downloader Plug-in Code Execution Vulnerability zdi-disclosures_at_3com.com
Friday, 7 July
- [ MDKSA-2006:118 ] - Updated OpenOffice.org packages fix various vulnerabilities security_at_mandriva.com
- PAPOO <=3RC3 sql injection / admin credentials disclosure rgod_at_autistici.org
- Re: [Bugtraq] Re: flock d0s exploit remote. beta 1 (v0.7) flockoyd_at_gmail.com
Saturday, 8 July
- [KAPDA::#46] - AjaxPortal Authentication Bypass alireza hassani
- ATutor 1.5.3 Cross Site Scripting securityconnection_at_gmail.com
- RW::Download stats.php Remote File Inc. StorMBoY_at_BsdMaiL.Org
Sunday, 9 July
- [ GLSA 200607-03 ] libTIFF: Multiple buffer overflows Sune Kloppenborg Jeppesen
Saturday, 8 July
- Webvizyon Portal 2006 Version SQL Injection StorMBoY_at_BsdMail.Org
Friday, 7 July
- Securing PHP or finding PHP alternatives (was: PHP security (or the lack thereof)) Gezim Hoxha
Monday, 10 July
- Re: Invision Power Board "v1.X & 2.X" SQL Injection mattmecham_at_gmail.com
Saturday, 8 July
- Graffiti Forums v1.0 SQL Injection Vulnerabilities paisterist.nst_at_gmail.com
Sunday, 9 July
- [ GLSA 200607-04 ] PostgreSQL: SQL injection Sune Kloppenborg Jeppesen
- MT rmcek Toplist v2.2 Version Microsoft Access Driver ( MDB ) Download StorMBoY_at_BsdMaiL.Org
- LAMP vs Microsoft Darren Reed
Monday, 10 July
- Re: RE: Invision Vulnerabilities, including remote code execution mattmecham_at_gmail.com
Sunday, 9 July
- Re: [KAPDA::#46] - AjaxPortal Authentication Bypass earthquake_at_freemail.hu
- ERNW Security Advisory 02/2006 - Buffer Overflow in sipXtapi (used in AOL Triton) mozilla_at_ids-guide.de
Monday, 10 July
- Re: rPSA-2006-0122-1 kernel Paul Starzetz
Sunday, 9 July
- [ECHO_ADV_37$2006] pc_cookbook Mambo/Joomla Component <= v0.3 Remote File Include Vulnerabilities matdhule_at_gmail.com
- [SECURITY] [DSA 1106-1] New ppp packages fix privilege escalation Martin Schulze
Thursday, 6 July
- Re: [ MDKSA-2006:116 ] - Updated kernel packages fixes multiple vulnerabilities Paul Starzetz
Monday, 10 July
- phpPolls 1.0.3 Administration ByPass alp_eren_at_ayyildiz.org
- Re: galleria <= 1.0 Remote File Inclusion Vulnerability counterpoint_at_mamboguru.com
- Re: Invision Power Board v1.3 Final SQL Injection mattmecham_at_gmail.com
- [USN-312-1] gimp vulnerability Martin Pitt
- RE: MIMESweeper For Web 5.X Cross Site Scripting Erez Metula
Thursday, 6 July
- CC announces new Rootkit help forum insync with Book Paul Laudanski
Monday, 10 July
- MS Word Unchecked Boundary Condition Vulnerability naveed
Saturday, 8 July
- Re: Re: vBulletin 3.5.4 (install_path) Exploit mikathebest2003_at_yahoo.de
- RE: WebEx Downloader Plug-in Multiple Vulnerabilities + rant Web Ex
Monday, 10 July
- Digital Armaments Security Advisory 10.07.2006: Flexwath Authorization Bypassing and XSS Vulnerability info_at_digitalarmaments.com
Sunday, 9 July
- Webmin / Usermin Arbitrary File Disclosure Vulnerability exploit Alexander Hristov
Monday, 10 July
- Re: Mico crashes when contected with wrong IOR / DoS Karel Gardas
Wednesday, 5 July
- Re: PHP security (or the lack thereof) Darren Reed
Sunday, 9 July
- Re: Mico crashes when contected with wrong IOR / DoS tuergeist
Monday, 10 July
- Re: Mico crashes when contected with wrong IOR / DoS tuergeist
Thursday, 6 July
- Re: Windows Explorer URL File format overflow naveed
Monday, 10 July
- Re: Mico crashes when contected with wrong IOR / DoS Karel Gardas
- Local file inclusion in Farsinews3.0BETA1 armin390_at_9mail.com
- Old vulnerable sotwares collection Jerome Athias
- [ANNOUNCEMENT] Samba 3.0.1 - 3.0.22: memory exhaustion DoS against smbd Gerald (Jerry) Carter
- [SECURITY] [DSA 1107-1] New GnuPG packages fix denial of service Martin Schulze
Wednesday, 5 July
- randshop <= 1.1.x (index.php) Remote File Inclusion Vulnerability Saudi.Unix_at_Hotmail.com
Monday, 10 July
- Re: LAMP vs Microsoft Jarrod Frates
- Juniper Networks DX Web Administration Persistent System Log XSS Vulnerability Darren Bounds
- Re: LAMP vs Microsoft Bob Beck
- Re: Securing PHP or finding PHP alternatives Crispin Cowan
Sunday, 9 July
- [ GLSA 200607-02 ] FreeType: Multiple integer overflows Sune Kloppenborg Jeppesen
- [ GLSA 200607-05 ] SHOUTcast server: Multiple vulnerabilities Sune Kloppenborg Jeppesen
Monday, 10 July
- SYMSA-2006-007: Microsoft Office Malformed String Parsing Vulnerability research_at_symantec.com
Tuesday, 11 July
- CYBSEC - Security Pre-Advisory: Microsoft Windows DHCP Client Service Remote Buffer Overflow Mariano Nu�ez Di Croce
- TSRT-06-02: Microsoft SRV.SYS Mailslot Ring0 Memory Corruption Vulnerability Tippingpoint Security Research Team
- ZDI-06-022: Microsoft Office Excel File Rebuilding Code Execution Vulnerability zdi-disclosures_at_3com.com
- Re: LAMP vs Microsoft Steven M. Christey
Wednesday, 12 July
- [USN-313-1] OpenOffice.org vulnerabilities Martin Pitt
- [USN-316-1] installer vulnerability Martin Pitt
- [USN-315-1] libmms, xine-lib vulnerabilities Martin Pitt
- Cisco Security Advisory: Multiple Cisco Unified CallManager Vulnerabilities Cisco Systems Product Security Incident Response Team
- Cisco Security Advisory: Cisco Router Web Setup Ships with Insecure Default IOS Configuration Cisco Systems Product Security Incident Response Team
Monday, 10 July
- [ MDKA-2006:119 ] - Updated ppp packages fix plugin vulnerability security_at_mandriva.com
Tuesday, 11 July
- Re: ATutor 1.5.3 Cross Site Scripting info_at_atutor.ca
Monday, 10 July
- SQuery <= 4.5(libpath) Remote File Inclusion Exploit SHiKaA-_at_hotmail.com
Wednesday, 12 July
- [USN-314-1] samba vulnerability Martin Pitt
Monday, 10 July
- Re: [ANNOUNCEMENT] Samba 3.0.1 - 3.0.22: memory exhaustion DoS against smbd Gerald (Jerry) Carter
Wednesday, 12 July
- Cisco Security Advisory: Cisco Intrusion Prevention System Malformed Packet Denial of Service Cisco Systems Product Security Incident Response Team
Tuesday, 11 July
- rPSA-2006-0128-1 samba samba-swat Justin M. Forbes
- Fuzzing Microsoft Office naveed
- SMB Information Disclosure Vulnerability Avert_at_avertlabs.com
Monday, 10 July
- [SECURITY] [DSA 1108-1] New mutt packages fix arbitrary code execution Moritz Muehlenhoff
Tuesday, 11 July
- Microsoft Excel Array Index Error Remote Code Execution Sowhat
- Linux Kernel 2.6.x PRCTL Core Dump Handling - Local r00t Exploit ( BID 18874 / CVE-2006-2451 ) Roman Medina-Heigl Hernandez
Wednesday, 12 July
- [ MDKSA-2006:117-1 ] - Updated libmms packages fix buffer overflow vulnerability security_at_mandriva.com
- NSFOCUS SA2006-04 : Microsoft Office GIF Filter Buffer Overflow Vulnerability NSFOCUS Security Team
- TOPo v.2.2.178 Account Reset darkz.gsa_at_gmail.com
- S21Sec-032-en: Vulnerability in Fatwire Content Server labs_at_s21sec.com
- Re: Browser bugs hit IE, Firefox today (SANS) 3CO
Monday, 10 July
- RE: Old vulnerable sotwares collection John Rigali
Tuesday, 11 July
- Lazarus Guestbook Cross Site Scripting Vulnerabilities simo64_at_gmail.com
Monday, 10 July
- [ MDKSA-2006:120 ] - Updated samba packages fix DoS vulnerability security_at_mandriva.com
Wednesday, 12 July
- NSFOCUS SA2006-06 : Microsoft Excel COLINFO Record Buffer Overflow Vulnerability NSFOCUS Security Team
Monday, 10 July
- New CVE number states Excel Style handling as a separate issue Juha-Matti Laurio
Wednesday, 12 July
- Re: WordPress 2.0.3 SQL Error and Full Path Disclosure zck zck
- Re: # MHG Security Team --- PHPAskIt v2.0.1 Remote File Inc. Amelie
- NSFOCUS SA2006-05 : Microsoft Excel SELECTION Record Memory Corruption Vulnerability NSFOCUS Security Team
- FLV Players Multiple Input Validation Vulnerabilities xzerox_at_linuxmail.org
- [ MDKSA-2006:121 ] - Updated xine-lib packages fix buffer overflow vulnerability security_at_mandriva.com
Tuesday, 11 July
- Re: # MHG Security Team --- PHPAskIt v2.0.1 Remote File Inc. amelie_at_not-noticeably.net
Wednesday, 12 July
- [ECHO_ADV_38$2006] Multiple Mambo/Joomla Component Remote File Include Vulnerabilities matdhule_at_gmail.com
- RE: WordPress 2.0.3 SQL Error and Full Path Disclosure Aaron Newman
- SYMSA-2006-004 (Full Details): Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution research_at_symantec.com
Thursday, 13 July
- [USN-317-1] zope2.8 vulnerability Martin Pitt
- Photocycle v1.0 - XSS luny_at_youfucktard.com
- ScozNews Final-Php <=1.1 Remote File Inclusion Vulnerability x0r0n_at_hotmail.com
- Orbitmatrix PHP Script v1.0 luny_at_youfucktard.com
- Flipper Poll <= 1.1.0 Remote File Inclusion Vulnerability x0r0n_at_hotmail.com
- [USN-318-1] libtunepimp vulnerability Martin Pitt
- [ MDKSA-2006:122 ] - Updated php packages fix multiple vulnerabilities security_at_mandriva.com
- flatnuke <= 2.5.7 arbitrary php file upload rgod_at_autistici.org
- PHORUM 5 arbitrary local inclusion rgod_at_autistici.org
- phpbb 3.x sql injection (with global moderator rights) rgod_at_autistici.org
- Re: [ECHO_ADV_38$2006] Multiple Mambo/Joomla Component Remote File Include Vulnerabilities Joxean Koret
- [ MDKSA-2006:123 ] - Updated kernel packages fixes multiple vulnerabilities security_at_mandriva.com
- perForms <= 1.0 ([mosConfig_absolute_path]) Remote File Inclusion endeneu_at_linuxmail.com
- [security bulletin] HPSBUX02120 SSRT051057 rev.2 - HP-UX Local Denial of Service (DoS) security-alert_at_hp.com
- rPSA-2006-0122-2 kernel Justin M. Forbes
Friday, 14 July
- Re: WebEx Downloader Plug-in Multiple Vulnerabilities + rant Mark Rowe
Thursday, 13 July
- IE <= 6 DoS vulnerability jonasschaub_at_gmail.com
- Phorum 5.1.15 security release (fixes "PHORUM 5 arbitrary local inclusion") Maurice Makaay
Friday, 14 July
- Microsoft Works - Buffer Overflows / Denial of Service (DoS)-Vulnerabilities Benjamin Tobias Franz
- Linux Kernel 2.6.x PRCTL Core Dump Handling -- Simple workaround Caveo Internet BV - Security
- EEYE: McAfee ePolicy Orchestrator Remote Compromise eEye Advisories
- Re: Photocycle v1.0 - XSS securityfocus_at_adambrown.info
- Re: Linux Kernel 2.6.x PRCTL Core Dump Handling -- Simple workaround Hugo van der Kooij
Saturday, 15 July
- Bybass HTTP ( extension files ) in ISA 2004 medozero_at_yahoo.com
- MS Power Point Multiple Vulnerabilities (powerpnt.exe)- POC naveed
- MS Power Point Multiple Vulnerabilities - (mso.dll) POC naveed
- MS Power Point Multiple Vulnerabilities - (memory corruption) POC naveed
- Norton Insufficient protection of Norton service registry keys David Matousek
- Kerio Terminating 'kpf4ss.exe' using internal runtime error Vulnerability David Matousek
Monday, 10 July
- Re: Securing PHP or finding PHP alternatives Michael Shigorin
Tuesday, 11 July
- Re: Securing PHP or finding PHP alternatives SkyFlash
Wednesday, 12 July
- Linux sys_prctl LKM based hotfix Abhisek Datta
Tuesday, 11 July
- crashing firefox <= 1.5.0.4 reywen_at_gmail.com
- saphp "add.php" forumid Parameter SQL Injection Breeeeh_at_hotmail.com
Monday, 10 July
- RE: Re: vBulletin 3.5.4 (install_path) Exploit Robert Marquardt
Tuesday, 11 July
- XSS phpBB 2.0.21 in administration renatrix_at_gmail.com
- MyGallery "Room.php" SQL Injection Breeeeh_at_hotmail.com
Friday, 14 July
- Rocks Clusters <=4.1 local root Xavier
Tuesday, 11 July
- [SECURITY] Plain text password in Finjan Appliance 5100/8100 NG backup file finde_schwachstelle_at_gmx.net
Thursday, 13 July
- Re: WordPress 2.0.3 SQL Error and Full Path Disclosure jholguin_at_gmail.com
Monday, 10 July
- Re: Webmin / Usermin Arbitrary File Disclosure Vulnerability exploit Jos� Parrella
Tuesday, 11 July
- Phorum 5.1.14 XSS SQL injection Vulnerability securityconnection_at_gmail.com
Thursday, 13 July
- Re: WordPress 2.0.3 SQL Error and Full Path Disclosure nate
Saturday, 15 July
- MiniBB Forum <= 1.5a Remote File Include Vulnerabilities matdhule_at_gmail.com
Tuesday, 11 July
- Re: [Full-disclosure] ERNW Security Advisory 02/2006 - Buffer Overflow in sipXtapi (used in AOL Triton) Mailinglists
- Re: LAMP vs Microsoft Darren Reed
Friday, 14 July
- SubberZ[Lite] - Remote File Include ChironeX.FleckeriX_at_Gmail.Com
Tuesday, 11 July
- RE: MIMESweeper For Web 5.X Cross Site Scripting Erez Metula
- VBZooM <=V1.11 " reply.php" SQL Injection Breeeeh_at_hotmail.com
- VBZooM <=V1.11 " ignore-pm.php" SQL Injection Breeeeh_at_hotmail.com
Friday, 14 July
- Microsoft PowerPoint 0-day Vulnerability FAQ document written Juha-Matti Laurio
Tuesday, 11 July
- Re: [ GLSA 200607-05 ] SHOUTcast server: Multiple vulnerabilities Cyneox
- Re: Securing PHP or finding PHP alternatives Sheryl Coppenger
Friday, 14 July
- Re: phpbb 3.x sql injection (with global moderator rights) bugtraq_at_neothermic.com
Thursday, 13 July
- Crtical Shockwave Embeded XSS Execution spammeanddie_at_msn.com
Tuesday, 11 July
- VBZooM <=V1.11 "sub-join.php" SQL Injection Breeeeh_at_hotmail.com
Monday, 10 July
- Re: Securing PHP or finding PHP alternatives (was: PHP security (or the lack thereof)) Matthias Kestenholz
Tuesday, 11 July
- Re: LAMP vs Microsoft Bob Beck
Saturday, 15 July
- [OpenPKG-SA-2006.013] OpenPKG Security Advisory (mutt) OpenPKG
Tuesday, 11 July
- Fantastic Guestbook v2.0.1 Advisory omnipresent_at_email.it
- VBZooM "sendmail.php" SQL Injection Breeeeh_at_hotmail.com
- Re: LAMP vs Microsoft Darren Reed
Wednesday, 12 July
- Re: LAMP vs Microsoft Bob Beck
Saturday, 15 July
- Re: Buddy Zone Version 1.0.1 - XSS support_at_vastal.com
Monday, 10 July
- Re: LAMP vs Microsoft Joel Maslak
Friday, 14 July
- Re: Linux Kernel 2.6.x PRCTL Core Dump Handling -- Simple workaround Michael Shigorin
- Invision Power Board 2.1 <= 2.1.6 sql injection rst_at_ghc.ru
Monday, 10 July
- Re: Securing PHP or finding PHP alternatives (was: PHP security (or the lack thereof)) Meet Myself on the Internet
Friday, 14 July
- Re: Linux Kernel 2.6.x PRCTL Core Dump Handling -- Simple workaround Lukasz Trabinski
Wednesday, 12 July
- Re: [Full-disclosure] Re: Linux Kernel 2.6.x PRCTL Core Dump Handling - Local r00t Exploit ( BID 18874 / CVE-2006-2451 ) Jon Hart
Monday, 10 July
- Gracenote buffer overflow MNV
Friday, 14 July
- MyBulletinBoard (MyBB) 1.1.5 'CLIENT-IP' sql injection rgod_at_autistici.org
Saturday, 15 July
- Mercury Messenger Hans Wolters
- Re: Bybass HTTP ( extension files ) in ISA 2004 Thor (Hammer of God)
- Several updates in MS PowerPoint 0-day Vulnerability FAQ at SecuriTeam Blogs Juha-Matti Laurio
- PHP Event Calendar versi 1.4 (path_to_calendar) Remote File Inclusion chris_hasibuan_at_yahoo.com
- Calendar Module <= 1.5.7 Remote File Include Vulnerabilities matdhule_at_gmail.com
- Plesk Control Panel <= 8.0.0 XSS vulnerability vuln.invent_at_gmail.com
Sunday, 16 July
- Re: Phorum 5.1.14 XSS SQL injection Vulnerability Maurice Makaay
Monday, 17 July
- Secunia Research: IceWarp Web Mail Two File Inclusion Vulnerabilities Secunia Research
Sunday, 16 July
- [SECURITY] [DSA 1109-1] New rssh packages fix privilege escalation Moritz Muehlenhoff
Monday, 17 July
- RE: Bybass HTTP ( extension files ) in ISA 2004 Edward Tripovich
- rPSA-2006-0130-1 kernel Justin M. Forbes
- [EEYEB-20060227] D-Link Router UPNP Stack Overflow eEye Advisories
- Secunia Research: VisNetic Mail Server Two File Inclusion Vulnerabilities Secunia Research
Sunday, 16 July
- [SECURITY] [DSA 1110-1] New samba packages fix denial of service Moritz Muehlenhoff
Monday, 17 July
- Secunia Research: BitZipper unacev2.dll Buffer Overflow Vulnerability Secunia Research
- PacSec 2006 CALL FOR PAPERS (Deadline Aug. 4; Event Nov. 27-30) Dragos Ruiu
Sunday, 16 July
- boastMachine <= 3.1 SQL Injection Exploit gmdarkfig_at_gmail.com
Saturday, 15 July
- ListMessenger v0.9.3 Remote File Inclusion Vulnerability x0r0n_at_hotmail.com
Sunday, 16 July
- Multiple vulnerabilities in UFO2000 svn 1057 Luigi Auriemma
- [SECURITY] [DSA 1111-1] New Linux kernel 2.6.8 packages fix privilege escalation Moritz Muehlenhoff
Tuesday, 18 July
- About the latest three Powerpoint vulnerabilities: exploitable? ewt_at_telecomitalia.it
Monday, 17 July
- [SECURITY] [DSA 1112-1] New mysql-dfsg-4.1 packages fix denial of service Moritz Muehlenhoff
Sunday, 16 July
- Re: Invision Power Board 2.1 <= 2.1.6 sql injection paul dansing
Monday, 17 July
- ToorCon 2006 Call for Papers h1kari_at_toorcon.org
- RUXCON 2006 Final Call For Papers cfp_at_ruxcon.org.au
- Re: Securing PHP or finding PHP alternatives Crispin Cowan
Sunday, 16 July
- Re: Linux Kernel 2.6.x PRCTL Core Dump Handling -- Simple workaround Michal Zalewski
Tuesday, 18 July
- [USN-319-1] Linux kernel vulnerability Martin Pitt
Saturday, 15 July
- Re: LAMP vs Microsoft George Capehart
Sunday, 16 July
- Re: LAMP vs Microsoft Darren Reed
- New Article Mambo Component <= 1.0 (com_articles.php) Remote File Include Vulnerabilities matdhule_at_gmail.com
- Unauthenticated access to BT Voyager config file and PPP credentials embedded in HTML form pagvacito
Tuesday, 18 July
- Re: Invision Power Board 2.1 <= 2.1.6 sql injection str0ke
Sunday, 16 July
- 23rd Chaos Communication Congress 2006: Call for Participation fukami
- Calendar Mambo Module <= 1.5.7 Remote File Include Vulnerabilities matdhule_at_gmail.com
Monday, 17 July
- Re: WebEx Downloader Plug-in Multiple Vulnerabilities + rant Mark Litchfield
- Cross Site Scripting Vulnerability in Zoho Virtual Office ss_team
Tuesday, 18 July
- [KAPDA::#52] - PHP-Post 1.0 Cookie Modification Privilege Escalation Vulnerability farhadkey_at_kapda.ir
Monday, 17 July
- Professional PHP Tools Guestbook Multiple Vulnerabilities tamriel_at_gmx.net
Tuesday, 18 July
- [ MDKSA-2006:124 ] - Updated kernel packages fix privilege escalation vulnerability security_at_mandriva.com
Monday, 17 July
- ToendaCMS <= 1.0.0 arbitrary file upload rgod_at_autistici.org
Saturday, 15 July
- Keyif Portal v2.0 - Microsoft Access Driver ( MDB ) Download x0r0n_at_hotmail.com
Monday, 17 July
- Outpost Firewall Pro secrately fixing security flaws? Bipin Gautam
- Re: Invision Power Board 2.1 <= 2.1.6 sql injection mattmecham_at_gmail.com
- DeluxeBB mutiple vulnerabilities Jessica Hope
- $100 plus several of my books if you can crack my Windows password hashes. Roger A. Grimes
Tuesday, 18 July
- Oracle Database - SQL Injection in SYS.KUPW$WORKER [DB03] ak_at_red-database-security.com
- Oracle Database - SQL Injection in SYS.DBMS_CDC_IMPDP [DB01] ak_at_red-database-security.com
- WebScarab <= 20060621-0003 cross site scripting security_at_moritz-naumann.com
Sunday, 16 July
- RE: [lists] Re: PHP security (or the lack thereof) Curt Purdy
Tuesday, 18 July
- [SECURITY] [DSA 1113-1] New zope2.7 packages fix information disclosure Moritz Muehlenhoff
Sunday, 16 July
- Re: Bybass HTTP ( extension files ) in ISA 2004 medozero_at_yahoo.com
- Re: Bybass HTTP ( extension files ) in ISA 2004 medozero_at_yahoo.com
Tuesday, 18 July
- PcAnywhere > 12 Local Privilege Escalation root_at_digitalbullets.org
Saturday, 15 July
- Consumers of Broadband Providers (ISP) may be open to hijack attacks peter_philipp_at_freenet.de
Monday, 17 July
- ExtCalendar Mambo Module <= v2( extcalendar.php ) Remote File Include Vulnerabilities saudi.unix_at_hotmail.com
Tuesday, 18 July
- Oracle Database - SQL Injection in SYS.DBMS_UPGRADE [DB22] ak_at_red-database-security.com
Monday, 17 July
- Invision Power Board v2.1 <= 2.1.6 sql injection exploit paul14075_at_gmail.com
Tuesday, 18 July
- Oracle Database - SQL Injection in SYS.DBMS_STATS [DB21] ak_at_red-database-security.com
- [security bulletin] HPSBTU02132 SSRT061154 rev.1 - HP Tru64 UNIX running NIS ypserv, Remote Denial of Service (DoS) security-alert_at_hp.com
- hdweGUEST <= 2.1.1 Cross Site Scripting Vulnerabilities tamriel_at_gmx.net
- ASP.DLL Include File Buffer Overflow Brett Moore
- Re: Re: Invision Power Board 2.1 <= 2.1.6 sql injection paul14075_at_gmail.com
Sunday, 16 July
- Escalation of privileges in Outpost and Lavasoft Firewalls -Unusual ShellExecute behavior mullware_at_gmail.com
Saturday, 15 July
- Re: LAMP vs Microsoft Bob Beck
- Re: Webmin / Usermin Arbitrary File Disclosure Vulnerability exploit str0ke
- Re: XSS phpBB 2.0.21 in administration Jessica Hope
Sunday, 16 July
- Re: LAMP vs Microsoft Hugo van der Kooij
Monday, 17 July
- osDate 1.1.7 multiple vulnerabilities binary.loc_at_gmail.com
Friday, 14 July
- Webmin / Usermin Arbitrary File Disclosure Vulnerability Perl Alexander Hristov
Saturday, 15 July
- Re: crashing firefox <= 1.5.0.4 bugtraq_at_radev.net
Tuesday, 18 July
- New PowerPoint Trojan installs itself as LSP Juha-Matti Laurio
Wednesday, 19 July
- [USN-320-1] PHP vulnerabilities Martin Pitt
Tuesday, 18 July
- [ MDKSA-2006:125 ] - Updated webmin packages fix arbitray file read vulnerability. security_at_mandriva.com
- [ MDKSA-2006:127 ] - Updated gimp packages fix buffer overflow vulnerability. security_at_mandriva.com
- [ MDKSA-2006:126 ] - Updated libtunepimp packages fixes buffer overflow vulnerabilities. security_at_mandriva.com
- [ MDKSA-2006:128 ] - Updated wireshark packages fix numerous vulnerabilities security_at_mandriva.com
- Re: Bybass HTTP ( extension files ) in ISA 2004 Thor (Hammer of God)
Wednesday, 19 July
- rPSA-2006-0132-1 tshark wireshark Justin M. Forbes
- Cisco Security Advisory: Multiple Vulnerabilities in Cisco Security Monitoring, Analysis and Response System (CS-MARS) Cisco Systems Product Security Incident Response Team
Tuesday, 18 July
- VMSA-2006-0003 VMware possible incorrect permissions on SSL key files VMware Security Team
Wednesday, 19 July
- [ GLSA 200607-06 ] libpng: Buffer overflow Thierry Carrez
- [USN-319-2] Linux kernel vulnerability Martin Pitt
- [USN-313-2] OpenOffice.org vulnerabilities Martin Pitt
- Re: imageVue16.1 upload vulnerability info_at_imagevuex.com
- AFCommerce Shopping Cart sledge_at_paradise.net.nz
- Security point-of-contact for Ameritrade? James M. Blackburn
- Re: osDate 1.1.7 multiple vulnerabilities binary.loc_at_gmail.com
- rPSA-2006-0133-1 libpng Justin M. Forbes
- Cisco MARS < 4.2.1 remote compromise Jon Hart
Thursday, 20 July
- [ECHO_ADV_40$2006] iManage CMS <= 4.0.12 (absolute_path) Remote File Inclusion matdhule_at_gmail.com
- Advisory: Remote command execution in planetGallery RedTeam Pentesting
- [MajorSecurity #20]SiteDepth CMS <= 3.01 - Remote File Include Vulnerability admin_at_majorsecurity.de
- [MajorSecurity #21] phpFaber TopSites <=2.0.9 - SQL Injection Vulnerability admin_at_majorsecurity.de
- [MajorSecurity #22] Top XL <=1.1 - XSS and cookie disclosure admin_at_majorsecurity.de
- [ MDKSA-2006:129 ] - Updated freetype2 packages fixes overflow vulnerability. security_at_mandriva.com
- [security bulletin] HPSBUX02108 SSRT061133 rev.12 - HP-UX Running Sendmail, Remote Execution of Arbitrary Code security-alert_at_hp.com
Friday, 21 July
- rPSA-2006-0134-1 sendmail sendmail-cf Justin M. Forbes
- [USN-321-1] mysql-dfsg-4.1 vulnerability Martin Pitt
- [SECURITY] [DSA 1117-1] New libgd2 packages fix denial of service Moritz Muehlenhoff
Thursday, 20 July
- [security bulletin] HPSBMA02133 SSRT061201 rev.1 - HP Oracle for OpenView (OfO) Critical Patch Update July 2006 security-alert_at_hp.com
Friday, 21 July
- SECURITY UPDATE::Farsinews release FarsiNewsPro3.0Stable1SecurityPath1 armin390_at_gmail.com
Thursday, 20 July
- [ GLSA 200607-07 ] xine-lib: Buffer overflow Thierry Carrez
Friday, 21 July
- [SECURITY] [DSA 1115-1] New GnuPG2 packages fix denial of service Martin Schulze
Thursday, 20 July
- LoudBlog <=0.5 Sql injection rgod_at_autistici.org
- Unidomedia Chameleon LE/Pro Directory Traversal kicktd_at_hotmail.com
Friday, 21 July
- TSLSA-2006-0042 - multi Trustix Security Advisor
Thursday, 20 July
- Samba Internal Data Structures DOS Vulnerability Exploit Alexander Hristov
- [ MDKSA-2006:130 ] - Updated kdelibs packages fix konqueror crash vulnerability. security_at_mandriva.com
- [SECURITY] [DSA 1114-1] New hashcash packages fix arbitrary code execution Martin Schulze
Friday, 21 July
- SolpotCrew Advisory #2 - Advanced Poll ver 2.02 (base_path) Remote File Inclusion chris_hasibuan_at_yahoo.com
- [SECURITY] [DSA 1116-1] New gimp packages fix arbitrary code execution Moritz Muehlenhoff
- Re: Samba Internal Data Structures DOS Vulnerability Exploit Gerald (Jerry) Carter
- Re: Securing PHP or finding PHP alternatives Crispin Cowan
- MiniBB Forum <= 1.5a Remote File Include (search.php-whosOnline.php) AG Spider
- iDefense Security Advisory 07.20.06: Sun Microsystems Solaris sysinfo() Kernel Memory Disclosure Vulnerability labs-no-reply
- Re: [EEYEB-20060227] D-Link Router UPNP Stack Overflow kala_z_at_hotmail.com
- [Kurdish Security # 13] Savant2 Remote File Include Vulnerability [For Mambo, Joomla] botan_at_linuxmail.org
Tuesday, 18 July
- RE: $100 plus several of my books if you can crack my Windows password hashes. Roger A. Grimes
Friday, 21 July
- Re: ATutor 1.5.3 Cross Site Scripting Steven M. Christey
Wednesday, 19 July
- Re: LAMP vs Microsoft Darren Reed
Tuesday, 18 July
- Re: Securing PHP or finding PHP alternatives Michael Cordover
Friday, 21 July
- Re: [Full-disclosure] iDefense Security Advisory 07.20.06: Sun Microsystems Solaris sysinfo() Kernel Memory Disclosure Vulnerability Micheal Turner
Tuesday, 18 July
- RE: XSS phpBB 2.0.21 in administration David Thomson
Saturday, 22 July
- Microsoft Internet Explorer DOS Vulnerability SnoBmsn_at_Hotmail.de
Friday, 21 July
- MicroGuestBook Remote XSS Attack omnipresent_at_email.it
Saturday, 22 July
- [MajorSecurity #25] Advanced Guestbook 2.4 for phpBB - Multiple XSS and SQL-Injection Vulnerabilities admin_at_majorsecurity.de
- RE: [EEYEB-20060227] D-Link Router UPNP Stack Overflow m
- [MajorSecurity #24] Fire-Mouse TopList <=v1.1 - Cross Site Scripting admin_at_majorsecurity.de
- Low security hole affecting IPCalc's CGI wrapper Tim Brown
- [SECURITY] [DSA 1118-1] New Mozilla packages fix several vulnerabilities Martin Schulze
Friday, 21 July
- about bid 17404 crack_at_rome.com
Saturday, 22 July
- [SECURITY] [DSA 1119-1] New hiki packages fix denial of service Martin Schulze
Wednesday, 19 July
- Re: XSS phpBB 2.0.21 in administration Jessica Hope
Monday, 17 July
- Re: SubberZ[Lite] - Remote File Include the.jalal_at_gmail.com
Tuesday, 18 July
- RE: $100 plus several of my books if you can crack my Windows password hashes. Roger A. Grimes
Monday, 17 July
- New CVE identifiers for separate PowerPoint 0-day issues assigned Juha-Matti Laurio
Tuesday, 18 July
- RE: $100 plus several of my books if you can crack my Windows password hashes. Michael Scheidell
Monday, 17 July
- Re: [EEYEB-20060227] D-Link Router UPNP Stack Overflow scott
Tuesday, 18 July
- new shell bypass safe mode d3nger_at_hotmail.com
Friday, 21 July
- SolpotCrew Advisory #3 - com_trade Remote File Inclusion (mosConfig_absolute_path) mail_at_sipplah.com
Wednesday, 19 July
- Re: XSS phpBB 2.0.21 in administration Jessica Hope
- Re: AFCommerce Shopping Cart contact_at_afcommerce.com
Tuesday, 18 July
- Re: ExtCalendar Mambo Module <= v2( extcalendar.php ) Remote File Include Vulnerabilities matdhule_at_gmail.com
Thursday, 20 July
- Re: New PowerPoint Trojan installs itself as LSP Mike Healan
- MiniBB Forum <= 1.5a Remote File Include (news.php) AG Spider
- Com Multibanners Remote File Inclusion (mosConfig_absolute_path) mail_at_blue-spy.net
Friday, 21 July
- [MajorSecurity #23] BLOG:CMS <= 4.0.0j - XSS and cookie disclosure admin_at_majorsecurity.de
Thursday, 20 July
- Blackboard Academic Suite 6.2.23 +/-: Persistent cross-site scripting vulnerability harbl_at_hushmail.com
- Re: [MajorSecurity #22] Top XL <=1.1 - XSS and cookie disclosure admin_at_majorsecurity.de
- Re: [Full-disclosure] Re: New PowerPoint Trojan installs itself as LSP Juha-Matti Laurio
- Re: Digital Armaments Security Advisory 10.07.2006: Flexwath Authorization Bypassing and XSS Vulnerability sales_at_flexwatch.com
- Map MS Security Bulletins to MS KB numbers Matthew Leeds
Friday, 21 July
- DotClear : Multiples Full Path Disclosure Silitix_at_gmail.com
Saturday, 22 July
- [SECURITY] [DSA 1120-1] New Mozilla Firefox packages fix several vulnerabilities Martin Schulze
Sunday, 23 July
- [Kurdish Security # 14] MoSpray [base_dir] Remote Command Execution [ Mambo & Joomla] botan_at_linuxmail.org
- Vanilla CMS <= 1.0.1 (RootDirectory) Remote file inclusion Vuln. mfoxhacker_at_gmail.com
- [ GLSA 200607-08 ] GIMP: Buffer overflow Sune Kloppenborg Jeppesen
Monday, 24 July
- [CYBSEC] TippingPoint detection bypass Andres Riancho
Sunday, 23 July
- Buffer-overflow in the XM loader of Cheese Tracker 0.9.9 Luigi Auriemma
Monday, 24 July
- [SECURITY] [DSA 1121-1] New postgrey packages fix denial of service Martin Schulze
- PHP Live! v3.2 (header.php) Remote File Include Vulnerabilities saudi.unix_at_hotmail.com
- Re: [ GLSA 200607-08 ] GIMP: Buffer overflow Michael Shigorin
- Re: Re: [Full-disclosure] iDefense Security Advisory 07.20.06: Sun Microsystems Solaris sysinfo() Kernel Memory Disclosure Vulnerability Micheal Turner
- [USN-322-1] Konqueror vulnerability Martin Pitt
- Check Point R55W Directory Traversal Sec-Tec Lists
- MusicBox <= 2.3.4 XSS SQL injection Vulnerability securityconnection_at_gmail.com
- [SECURITY] [DSA 1124-1] New fbi packages fix potential deletion of user data Moritz Muehlenhoff
- Windows XP/NT/SMB2003/2000 Denial of Service attack J. Oquendo
- ERRATA: [ GLSA 200607-08 ] GIMP: Buffer overflow Sune Kloppenborg Jeppesen
- Write-up by Amit Klein: "Forging HTTP request headers with Flash" Amit Klein (AKsecurity)
Sunday, 23 July
- [MajorSecurity #26] Woltlab Burning Board - Multiple Cookie manipulation and session fixation vulnerabilities admin_at_majorsecurity.de
Monday, 24 July
- SQuery v.x (devi.php) (armygame.php) Remote File Inclusion saudi.unix_at_hotmail.com
- Heap overflow in the GT2 loader of libmikmod 3.2.2 Luigi Auriemma
- [SECURITY] [DSA 1123-1] New libdumb packages fix arbitrary code execution Moritz Muehlenhoff
- Opsware NAS 6.0 reveals MySQL 'root' password Freeman, Michael
- rPSA-2006-0135-1 gimp Justin M. Forbes
- Digital Armaments Security Advisory 24.07.2006: Siemens Speedstream Wireless/Router Denial of Service Vulnerability info_at_digitalarmaments.com
Friday, 21 July
- SYMSA-2006-008:Password Safe - Lock Password Database Configuration Not Enforced research_at_symantec.com
Sunday, 23 July
- Buffer-overflow in recvTextMessage and NETrecvFile in Warzone Resurrection 2.0.3 (SVN 127) Luigi Auriemma
Monday, 24 July
- [SECURITY] [DSA 1122-1] New Net::Server packages fix denial of service Martin Schulze
Sunday, 23 July
- Two crash vulnerabilities in Freeciv 2.1.0-beta1 (SVN 15 Jul 2006) Luigi Auriemma
Tuesday, 25 July
- [ GLSA 200607-09 ] Wireshark: Multiple vulnerabilities Sune Kloppenborg Jeppesen
- [USN-296-2] Firefox vulnerabilities Martin Pitt
Monday, 24 July
- Advisory: VMware Possible Incorrect Permissions On SSL Key Files Nick Breese
- [vuln.sg] DynaZip DZIP32.DLL/DZIPS32.DLL Buffer Overflow Vulnerabilities vulnpost-remove_at_vuln.sg
- [vuln.sg] TurboZIP ZIP Repair Buffer Overflow Vulnerability vulnpost-remove_at_vuln.sg
- [vuln.sg] AGEphone "sipd.dll" SIP Packet Handling Buffer Overflow vulnpost-remove_at_vuln.sg
- LinksCaffe 3.0 SQL injection/Command Execution Vulnerabilties simo64_at_gmail.com
Tuesday, 25 July
- [ GLSA 200607-10 ] Samba: Denial of Service vulnerability Sune Kloppenborg Jeppesen
- [security bulletin] HPSBUX02087 SSRT4728 rev.2 - HP-UX running TCP/IP Remote Denial of Service (DoS) security-alert_at_hp.com
- Re: Ashop Search Module SQL injection security curmudgeon
- [ MDKSA-2006:131 ] - Updated perl-Net-Server packages fix format string vulnerability security_at_mandriva.com
- Full Path Disclosure xGuestBook v1.02 dicomdk_at_gmail.com
- MS06-034 lies? IIS 6 can still be owned? Cesar
Wednesday, 26 July
- Secunia Research: AutoVue SolidModel Professional Buffer Overflow Vulnerability Secunia Research
- [USN-297-3] Thunderbird vulnerabilities Martin Pitt
- [USN-320-2] php4 regression Martin Pitt
- EzUpload multi file vulnerabilities hack2prison_at_yahoo.com
- Multiple vulnerabilities in OpenCMS Meder Kydyraliev
- [SECURITY] [DSA 1111-2] New Linux kernel 2.6.8 packages fix privilege escalation Moritz Muehlenhoff
- Re: Write-up by Amit Klein: "Forging HTTP request headers with Flash" Amit Klein (AKsecurity)
Tuesday, 25 July
- wwwThreads XSS l2odon_at_yahoo.com
Wednesday, 26 July
- Zyxel Prestige 660H-61 Cross-Site Scripting jose.palanco_at_eazel.es
Tuesday, 25 July
- Professional Home Page Tools Login Script Cross Site Scripting Vulnerabilities tamriel_at_gmx.net
- PHP-Auction SQL injection l2odon_at_yahoo.com
- ZDI-06-024: eIQNetworks Enterprise Security Analyzer License Manager Buffer Overflow Vulnerability zdi-disclosures_at_3com.com
- TP-Book <= 1.00 Cross Site Scripting Vulnerabilities tamriel_at_gmx.net
- ZDI-06-023: eIQNetworks Enterprise Security Analyzer Syslog Server Buffer Overflow Vulnerability zdi-disclosures_at_3com.com
- TSRT-06-04: eIQnetworks Enterprise Security Analyzer Topology Server Buffer Overflow Vulnerability TSRT_at_3com.com
- TSRT-06-03: eIQnetworks Enterprise Security Analyzer Syslog Server Buffer Overflow Vulnerabilities TSRT_at_3com.com
Wednesday, 26 July
- [SECURITY] [DSA 1125-1] New drupal packages fix execution of arbitrary web script code Moritz Muehlenhoff
- Cisco VPN Concentrator IKE resource exhaustion DoS Advisory Roy Hills
Tuesday, 25 July
- Etomite CMS <= 0.6.1 'rfiles.php' remote command execution rgod_at_autistici.org
- [USN-323-1] mozilla vulnerabilities Martin Pitt
- [ECHO_ADV_41$2006] BufferOverflow in Midirecord2 the_day_at_echo.or.id
- [vuln.sg] PowerArchiver DZIPS32.DLL Buffer Overflow Vulnerability vulnpost-remove_at_vuln.sg
- [OpenPKG-SA-2006.014] OpenPKG Security Advisory (shiela) OpenPKG
- Secunia Research: FileCOPA Directory Argument Handling Buffer Overflow Secunia Research
- Phpprobid <= 5.24 XSS SQL injection Vulnerability securityconnection_at_gmail.com
Sunday, 23 July
- Re: new shell bypass safe mode cxib_at_securityreason.com
Wednesday, 26 July
- Re: Write-up by Amit Klein: "Forging HTTP request headers with Flash" 3CO
- NSFOCUS SA2006-07 : ISS RealSecure/BlackICE MailSlot Heap Overflow Detection Remote DoS Vulnerability NSFOCUS Security Team
- a6mambohelpdesk Mambo Component <= 18RC1 Remote Include Vulnerability Dr.Jr7_at_hotmail.com
- Re: Write-up by Amit Klein: "Forging HTTP request headers with Flash" Amit Klein (AKsecurity)
- GeoClassifieds Enterprise <= 2.0.5.2 Cross Site Scripting securityconnection_at_gmail.com
- Re: Opsware NAS 6.0 reveals MySQL 'root' password security-alert_at_opsware.com
- [SECURITY] [DSA 1126-1] New Asterisk packages fix denial of service Martin Schulze
Thursday, 27 July
- Cross-Site Scripting and Local File Inclusion in Phorum Meftun_at_MeftunNet.Com
- Buffer Overflow Vulnerability in Winlpd Meftun_at_MeftunNet.Com
- Re: Low security hole affecting IPCalc's CGI wrapper krischan_at_jodies.de
- [USN-324-1] freetype vulnerability Martin Pitt
- [USN-325-1] ruby1.8 vulnerability Martin Pitt
- [USN-326-1] heartbeat vulnerability Martin Pitt
- [SECURITY] [DSA 1125-2] New drupal packages fix execution of arbitrary web script code (revised packages) Moritz Muehlenhoff
- Secunia Research: Mozilla Firefox XPCOM Event Handling Memory Corruption Secunia Research
- Bypassing Oracle dbms_assert ak_at_red-database-security.com
Wednesday, 26 July
- ZDI-06-025: Mozilla Firefox Javascript navigator Object Vulnerability zdi-disclosures_at_3com.com
- rPSA-2006-0137-1 firefox Justin M. Forbes
- Xss in MttKe-php v2.6 R0t-K33Y_at_hotmail.com
- AIM Triton 1.0.4 (SipXtapi) Remote Buffer Overflow Exploit (PoC) c0rrupt_at_f34r.us
Thursday, 27 July
- Oracle 10g R2 and, probably, all previous versions putosoft softputo
- Re: HYSA-2006-008 myBloggie 2.1.3 CRLF & SQL Injection Steven M. Christey
- [USN-327-1] firefox vulnerabilities Martin Pitt
- Cisco Security Advisory: Windows VPN Client Local Privilege Escalation Vulnerability Cisco Systems Product Security Incident Response Team
- [USN-328-1] Apache vulnerability Martin Pitt
- [FLSA-2006:175040] Updated php packages fix security issues Marc Deslauriers
- Re: Bypassing Oracle dbms_assert David Litchfield
- [SECURITY] [DSA 1127-1] New ethereal packages fix several vulnerabilities Moritz Muehlenhoff
- [OpenPKG-SA-2006.015] OpenPKG Security Advisory (apache) OpenPKG
Friday, 28 July
- [SECURITY] [DSA 1128-1] New heartbeat packages fix local denial of service Martin Schulze
- Portail PHP v1.7 Remote File Include Meftun_at_MeftunNet.Com
- [OpenPKG-SA-2006.016] OpenPKG Security Advisory (ruby) OpenPKG
- [ MDKSA-2006:132 ] - Updated libwmf packages fixes integer overflow vulnerability security_at_mandriva.com
- [OpenPKG-SA-2006.017] OpenPKG Security Advisory (freetype) OpenPKG
- Remote Include Vulnerability ====> in Dr.Jr7 Gallery 3.2 RC1 R0t-K33Y_at_hotmail.com
- RE: Bypassing Oracle dbms_assert Alexander Kornbrust
- Re: Bypassing Oracle dbms_assert David Litchfield
- [Announcement] Apache HTTP Server 2.2.3 (2.0.59, 1.3.37) Released William A. Rowe, Jr.
- Oracle 10g R2 and, probably, all previous versions Russell Lowenthal
- Apache mod_rewrite Buffer Overflow Vulnerability Avert_at_avertlabs.com
- [SECURITY] [DSA 1129-1] New osiris packages fix arbitrary code execution Martin Schulze
Thursday, 27 July
- PHP-Nuke INP XSS l2odon_at_yahoo.com
- Guestbook Mambo Module <== v1.3.0 Multiple Remote File Include Vulnerabilities matdhule_at_gmail.com
Monday, 24 July
- Re: Fusion Polls (xtrphome) Remote File Inclusion security curmudgeon
Tuesday, 25 July
- Lan-Aces Office Logic Mike_at_chtechnology.com
- Re: Check Point R55W Directory Traversal dave_kwek_at_ida.gov.sg
Wednesday, 26 July
- cpanel login problem ali_at_hackerz.ir
Monday, 24 July
- Hustle -- Tumbleweed Email Firewall Remote Vulnerability Ryan Smith
- PrinceClan Chess Mambo Com <= 0.8 Remote Inclusion Vulnerability tr_zindan_at_wolfsecurity.org
Friday, 28 July
- rPSA-2006-0139-1 httpd mod_ssl Justin M. Forbes
- [USN-329-1] Thunderbird vulnerabilities Martin Pitt
Saturday, 29 July
- PHP ip2long() function circumvention rgod_at_autistici.org
Friday, 28 July
- Coppermine Photo Gallery v1.2.2b-Nuke Remote File Inclusion Vulnerabilities A-S-T2006_at_hotmail.com
Saturday, 29 July
- XSS vulnerability on AWBS newbinaryfile_at_gmail.com
Friday, 28 July
- RE: TSRT-06-04: eIQnetworks Enterprise Security Analyzer Topology Server Buffer Overflow Vulnerability Desai, Deepen
- Re: Cisco VPN Concentrator IKE resource exhaustion DoS Advisory Eloy Paris
- Mambo Gallery Manager v095.r3 Remote File Inclusion Vulnerabilities A-S-T2006_at_hotmail.com
- [KAPDA::#53] MYBB XSS and Dir Traversal in usercp.php roozbeh_afrasiabi_at_yahoo.com
- [ MDKSA-2006:133 ] - Updated apache packages fix mod_rewrite vulnerability security_at_mandriva.com
Saturday, 29 July
- mambatstaff Mambo Component <= Remote Include Vulnerability Dr.Jr7_at_hotmail.com
Friday, 28 July
- [ GLSA 200607-12 ] OpenOffice.org: Multiple vulnerabilities Stefan Cornelius
Saturday, 29 July
- artlinks Mambo Component <= Remote Include Vulnerability Dr.Jr7_at_hotmail.com
Friday, 28 July
- [ MDKSA-2006:134 ] - Updated ruby packages fix safe-level vulnerabilities security_at_mandriva.com
- Re: cpanel login problem nate
- Gdiplus.dll division by 0 Mr.Niega_at_gmail.com
Saturday, 29 July
- [ GLSA 200607-13 ] Audacious: Multiple heap and buffer overflows Matthias Geerdsen
Friday, 28 July
- [ GLSA 200607-11 ] TunePimp: Buffer overflow Stefan Cornelius
Sunday, 30 July
- UPDATE: [ GLSA 200605-08 ] PHP: Multiple vulnerabilities Sune Kloppenborg Jeppesen
Monday, 31 July
- Re: cpanel login problem Scott Gemma
- RE: cpanel login problem Bugs
Saturday, 29 July
- Re: Portail PHP v1.7 Remote File Include x0r0n_at_hotmail.com
- Re: PHP ip2long() function circumvention darylf_at_charter.net
- com_moskool (admin.moskool.php) Remote File Include Vulnerabilities saudi.unix_at_hotmail.com
Monday, 31 July
- Re: cpanel login problem usar_y_tirar_at_hushmail.com
Sunday, 30 July
- ATutor <= 1.5.3.1 'links' blind SQL injection / admin credentials disclosure rgod_at_autistici.org
- PHPAuction 2.1 (maybe higher) with phpAdsNew 2.0.5 RFI philipp.niedziela_at_gmx.de
- SQL injection Seir Anphin v666 Community Management System vulnerabilities_at_mail.ru
- Re: Cisco VPN Concentrator IKE resource exhaustion DoS Advisory Pavel Kankovsky
Monday, 31 July
- Re: Gdiplus.dll division by 0 Early Warning Team
- Re: Check Point R55W Directory Traversal Hugo van der Kooij
- Oracle and Apache mod_rewrite Vulnerability tigerblue_at_puzzleapuma.de
- Corsaire Security Advisory - VMware ESX Server Password Cross Site Request Forgery issue advisories
- Corsaire Security Advisory - VMware ESX Server Password Disclosure in Log issue advisories
- Corsaire Security Advisory - VMware ESX Server Password Disclosure in Cookie issue advisories
- Re: [EEYEB-20060227] D-Link Router UPNP Stack Overflow solutions_PHP
- Multiple vulnerabilities in Open Cubic Player 2.6.0pre6 / 0.1.10_rc5 Luigi Auriemma
- Re: Xss in MttKe-php v2.6 Steven M. Christey
- RE: cpanel login problem Alan
- MyNewsGroups <= 0.6b (myng_root) Remote Inclusion Vulnerability philipp.niedziela_at_gmx.de
- Re: Do world's famous companies take care of their security? Steven M. Christey

Last message date: Jul 31 2006
Archived on: Aug 14 2008 PDT