Bugtraq: by date

Wednesday, 31 May
- multiple file inclusion exploits in ovidentia v5.8.0 black code
- FreeBSD Security Advisory FreeBSD-SA-06:16.smbfs FreeBSD Security Advisories
- FreeBSD Security Advisory FreeBSD-SA-06:15.ypserv FreeBSD Security Advisories
- multiple file inclusion exploits in ovidentia v5.8.0 black-cod3_at_hotmail.com
- ishopcart cgi 0day and multiple vulnerabilities bugtraq_at_fbi.gov
- TAL RateMyPic v1.0 luny_at_youfucktard.com
- Snort HTTP Inspect Pre-Processor Uricontent Bypass Christian Swartzbaugh
- Squirrelmail local file inclusion brokejunker_at_yahoo.com
- SyScan'06 - The Hackers' Conference in Asia thomas48
Thursday, 1 June
- [SECURITY] [DSA 1085-1] New lynx-cur packages fix several vulnerabilities Martin Schulze
- Re: Internet explorer Vulnerbility Alexander Sotirov
- Corsaire Security Advisory - VMware ESX Server Cross Site Scripting issue advisories
- Re: # MHG Security Team --- PHP NUKE All version Remote File Inc. rgod_at_autistici.org
- [ MDKSA-2006:094 ] - Updated evolution packages fix DoS (crash) vulnerability on certain messages. security_at_mandriva.com
- CA Forum Remote SQL Injection omnipresent_at_email.it
- Forensic memory dumping intricacies - PhysicalMemory, DD, and caching issues Arne Vidstrom
- Joomla/Mambo CMS Component SimpleBoard 1.1 XSS-Vulnerabilities Yannick von Arx
- RE: Internet explorer Vulnerbility Peter Kruse
- Re: PHPSimple Choose v0.3 prattmic_at_gmail.com
Friday, 2 June
- northstudio Cross Site Scripting Vulnerability CrAzY.CrAcKeR_at_hotmail.com
Thursday, 1 June
- SMF 1.0.7 and lower plus 1.1rc2 and lower - IP spoofing vulnerability/IP ban evasion vulnerability Jessica Hope
- Re: my Web Server << v-1.0 Denial of Service Exploit Steven M. Christey
Friday, 2 June
- Re: [SECURITY] [DSA 1085-1] New lynx-cur packages fix several vulnerabilities Thomas Dickey
Thursday, 1 June
- Re: Re: # MHG Security Team --- PHP NUKE All version Remote File Inc. nukedx_at_nukedx.com
- VMSA-2006-0002 - VMware Server sensitive information lifetime issue VMware Security Team
- Weblog Oggi v1.0 luny_at_youfucktard.com
- PHP ManualMaker v1.0 luny_at_youfucktard.com
- Bytehoard 2.1 Remote File Include beford
- Re: Jiwa Financials - Reporting allows execution of arbitrary reports as SQL user with full permissions. mikes_at_jiwa.com.au
Friday, 2 June
- newsfactory Cross Site Scripting & SQL injection CrAzY.CrAcKeR_at_hotmail.com
Thursday, 1 June
- Re: Squirrelmail local file inclusion Paul Schmehl
- Redaxo CMS <= 3.2 Remote File Include beford
- New Snort Bypass - Patch - Bypass of Patch Sigint Consulting
Friday, 2 June
- aspWebLinks 2.0 Remote SQL Injection / Admin Pass Change Exploit ajannhwt_at_hotmail.com
- MyTrueHood.com - XSS luny_at_youfucktard.com
- [SECURITY] [DSA 1086-1] New xmcd packages fix denial of service Martin Schulze
- new bug webmaster_at_azhteam.com
- Pro Publish SQL Injection and XSS Vulnerabilities Soothackers_at_gmail.com
- # MHG Security Team --- MyBloggie 2.1.1 version Remote File Include Vulnerabilit erne ayaz
- [DRUPAL-SA-2006-005] Drupal 4.6.7 / 4.7.1 fixes SQL injection issue Uwe Hermann
- [DRUPAL-SA-2006-007] Drupal 4.6.8 / 4.7.2 fixes arbitrary file execution issue Uwe Hermann
- [DRUPAL-SA-2006-008] Drupal 4.6.8 / 4.7.2 fixes XSS issue Uwe Hermann
- [DRUPAL-SA-2006-006] Drupal 4.6.7 / 4.7.1 fixes arbitrary file execution issue Uwe Hermann
- rPSA-2006-0091-1 firefox thunderbird Justin M. Forbes
- Re: Re: # MHG Security Team --- PHP NUKE All version Remote File Inc. Steven M. Christey
- Re: New Snort Bypass - Patch - Bypass of Patch M. Dodge Mumford
- Pixelpost <= 1-5rc1-2 multiple vulnerabilities rgod_at_autistici.org
Saturday, 3 June
- [SECURITY] [DSA 1087-1] New PostgreSQL packages fix encoding vulnerabilities Martin Schulze
- [ECHO_ADV_32$2006] SCart 2.0 Remote Code Execution eufrato_at_gmail.com
- Critical SQL Injection in CoolForum gmdarkfig_at_gmail.com
- [SECURITY] [DSA 1088-1] New centericq packages fix arbitrary code execution Martin Schulze
- Blackhat USA 2006 - Review , remarks and proposal agenda newslist_at_security-briefings.com
- Re: # MHG Security Team --- MyBloggie 2.1.1 version Remote File Include Vulnerabilit nukedx_at_nukedx.com
- LocazoList Classifieds <= v1.05e(viewmsg.asp) Remote SQL Injection Vulnerability ajannhwt_at_hotmail.com
- phpBB2 (template.php) Remote File Inclusion canberx_at_linuxmail.org
- [MajorSecurity #7]dotWidget CMS <= 1.0.6 - Remote File Include Vulnerability admin_at_majorsecurity.de
- [SECURITY] [DSA 1089-1] New freeradius packages fix arbitrary code execution Martin Schulze
- Re: New Snort Bypass - Patch - Bypass of Patch M. Dodge Mumford
- DotClear <= 1.2.4 'blog_dc_path' (php5) arbitrary remote inclusion rgod_at_autistici.org
- LifeType <=1.0.4 'articleId' SQL injection rgod_at_autistici.org
Wednesday, 31 May
- Re: WBB<--v2.3.4"misc.php" SQL injection Vulnerability nukedx_at_nukedx.com
- Re: OaBoard 1.0 Remote File inclusion Botan Rizgar
- Re: [Info Disclosure] Diesel PHP Job Site Latest Version John F Flynn III
- Re: Fire fox dos exploit pagvac
- RE: Fire fox dos exploit Andy
- Re: Fire fox dos exploit Ronald van den Blink
- Re: Fire fox dos exploit Yannick von Arx
- Re: Re: Fire fox dos exploit vincenzo.ampolo_at_gmail.com
- Re: Fire fox dos exploit Phil Trainor
Thursday, 1 June
- Re: Internet explorer Vulnerbility Hariharan
- Re: phpFoX All Version Login Exploit purefan_at_phpfox.com
- VMSA-2006-0001 - VMware ESX Server Cross Site Scripting issue VMware Security Team
- Re: Fire fox dos exploit Ronald van den Blink
- Re: Fire fox dos exploit Aaron Hopkins
- Timberland Search XSS Vulnerability try_og_at_hotmail.com
Friday, 2 June
- New <<BackTrack release announcement Max Moser
- SMS "messages.php" SQL injection CrAzY.CrAcKeR_at_hotmail.com
- XSS in ICQ.com sn4k3.23_at_gmail.com
- Client buffer-overflow in Quake 3 engine (1.32c / rev 795) Luigi Auriemma
Sunday, 4 June
- Bookmark4U Remote File Include selfar2002_at_hotmail.com
- # MHG Security Team ---Rumble 1.02 version Remote File Inc. erne_at_ernealizm.com
- # MHG Security Team ---Rumble 1.02 version Remote File Inc. MSN : erne [at] ernealizm [dot] com
- Re: [Full-disclosure] bug in oscomerce Frank Laszlo
- CyBoards PHP Lite v1.25 (common.PHP) Remote File Inclusion SpC-x_at_Bsdmail.Org
- Multiple Vendor NTFS Data Stream Malware Stealth Technique Joxean Koret
- RE: phpBB2 (template.php) Remote File Inclusion Scrouaf _
- LabWiki v1.0 luny_at_youfucktard.com
- Kmita FAQ v1.0 luny_at_youfucktard.com
- RE: Fire fox dos exploit Sanjay Rawat
- TSLSA-2006-0032 - multi Trustix Security Advisor
Monday, 5 June
- LocazoList Classifieds <= v1.05e(viewmsg.asp) Remote SQL Injection Vulnerability ajannhwt_at_hotmail.com
- FunkBoard CF0.71 (profile.php) Remote User Pass Change Exploit ajannhwt_at_hotmail.com
- ewsEngine <= 1.5.0(newscomments.php) Remote SQL Injection Vulnerability ajannhwt_at_hotmail.com
- Advisory 04/2006: DokuWiki PHP code execution vulnerability in spellchecker Stefan Esser
- Re: [Full Disclosure] [Kil13r-SA-20060520] Microsoft Internet Explorer Crash Vulnerability mac68k_at_gmail.com
- [MajorSecurity #8]DreamAccount <= 3.1 - Remote File Include Vulnerability admin_at_majorsecurity.de
- [MajorSecurity #9]HostAdmin <= 3.1 - Remote File Include Vulnerability admin_at_majorsecurity.de
- Re: phpBB2 (template.php) Remote File Inclusion ad_at_heapoverflow.com
- Personal Information Disclosure/Account Hijacking Vulerability in mafia online games Ulrich Keil
- Dmx Forum <= v2.1a Remote Passwords Disclosure gmdarkfig_at_gmail.com
- Re: New Snort Bypass - Patch - Bypass of Patch Pukhraj Singh
- [Kil13r-SA-20060605] Syworks SafeNET Policy File Vulnerability mac68k_at_gmail.com
- [Kil13r-SA-20060606] ESTsoft InternetDISK Arbitary Code Execution Vulnerability mac68k_at_gmail.com
- [KAPDA::#47] - myNewsletter 1.1.2 SQL_Injection farhadkey_at_yahoo.com
- Re: [Full-disclosure] RealVNC 4.1.1 Remote Compromise Tobias Kreidl
- Re: Bookmark4U Remote File Include str0ke
- ASPScriptz Guest Book 2.0 XSS omnipresent_at_email.it
Sunday, 4 June
- Re: PCPIN Chat <= 5.0.4 "login/language" remote cmmnds xctn k.reznichak_at_pcpin.com
Monday, 5 June
- Re: Multiple Vendor NTFS Data Stream Malware Stealth Technique Andreas Marx
- file include in Xtreme Downloads v.1.0 gamr-14_at_hotmail.com
- Re: phpBB2 (template.php) Remote File Inclusion Jessica Hope
- Multiple file include exploits in Xtreme Downloads v.1.0 black code
- Re: [Full-disclosure] RealVNC 4.1.1 Remote Compromise Kurt Seifried
- Particle Gallery v1.0.0 luny_at_youfucktard.com
- Partial Links v1.2.2 luny_at_youfucktard.com
- ParticleSoft Whois v1.0.3 luny_at_youfucktard.com
- Re: phpBB2 (template.php) Remote File Inclusion Aaron Klein
- ParticleSoft Wiki v1.0.2 luny_at_youfucktard.com
- [ MDKSA-2006:095 ] - Updated libtiff packages fixes tiffsplit vulnerability security_at_mandriva.com
- Re: phpBB2 (template.php) Remote File Inclusion Paul Laudanski
- Re: # MHG Security Team --- MyBloggie 2.1.1 version Remote File Include Vulnerabilit Steven M. Christey
- GANTTy v1.0.3 luny_at_youfucktard.com
Tuesday, 6 June
- Asterisk 1.2.9 and Asterisk 1.0.11 Released - Security Fix Matt Riddell (IT)
- IRM 019: MailMarshal 6.1 SMTP MTA Content Filter Bypass IRM Advisories
- [SECURITY] [DSA 1090-1] New spamassassin packages fix remote command execution Martin Schulze
- libgd 2.0.33 infinite loop in GIF decoding ? rocheml_at_httrack.com
- Re: [MajorSecurity #8]DreamAccount <= 3.1 - Remote File Include Vulnerability admin_at_majorsecurity.de
- Re: Squirrelmail local file inclusion Steven M. Christey
Wednesday, 7 June
- [ GLSA 200606-02 ] shadow: Privilege escalation Sune Kloppenborg Jeppesen
- RE: Fire fox dos exploit Jaroslaw Sajko
- Re: Buffer-overflow and crash in Fenice OMS 1.10 giampaolo.mancini_at_polito.it
Tuesday, 6 June
- bug on showwich.asp ip.chat_at_yahoo.com
- BloggIT <= 1.01 (admin.php) Arbitrary code execution Federico Fazzi
Wednesday, 7 June
- Re: IRM 019: MailMarshal 6.1 SMTP MTA Content Filter Bypass phil.mccracken_at_fatchickswithglamourshots.com
Tuesday, 6 June
- TinyPHP forum <= 3.6 Remote Command Execution Exploit hessamx_at_hessamx.net
- aWebNews <= 1.0 (login.php) Remote DocumentRoot file disclosure Federico Fazzi
- Re: [Full-disclosure] RealVNC 4.1.1 Remote Compromise Ray Van Dolson
Sunday, 4 June
- Re: Re: Fire fox dos exploit al4321_at_gmail.com
Wednesday, 7 June
- Re: WebCalendar-1.0.3 reading of any files craig_at_k5n.us
Monday, 5 June
- Re: [Info Disclosure] Diesel PHP Job Site Latest Version Ronald van den Blink
Sunday, 4 June
- XSS on LarkinWEB & Company spymeta_at_yahoo.com
Tuesday, 6 June
- Re: Squirrelmail local file inclusion pauls_at_utdallas.edu
- ADVISORY - D-Link Wireless Access-Point news_at_securityopensource.org.br
Monday, 5 June
- Re: XSS in ICQ.com 321_321_at_mail.ru
Tuesday, 6 June
- [HV-LOW] Microsoft NetMeeting memory corruption (Brief) vuln_at_hexview.com
Wednesday, 7 June
- [ GLSA 200606-03 ] Dia: Format string vulnerabilities Sune Kloppenborg Jeppesen
- rPSA-2006-0096-1 spamassassin Justin M. Forbes
Tuesday, 6 June
- Vice Stats 0.5b SQL injection CrAzY.CrAcKeR_at_hotmail.com
Wednesday, 7 June
- [ GLSA 200606-05 ] Pound: HTTP request smuggling Sune Kloppenborg Jeppesen
Monday, 5 June
- Re: XSS in ICQ.com 321_321_at_mail.ru
Tuesday, 6 June
- MyBB 1.1.2 New XSS o.y.6_at_hotmail.com
- [FLSA-2006:189137-1] Updated mozilla packages fix security issues Marc Deslauriers
Wednesday, 7 June
- [ GLSA 200606-04 ] Tor: Several vulnerabilities Sune Kloppenborg Jeppesen
Tuesday, 6 June
- [ GLSA 200606-01 ] Opera: Buffer overflow Sune Kloppenborg Jeppesen
- [FLSA-2006:190777] Updated X.org packages fix security issue Marc Deslauriers
- MiraksGalerie <= 2.62 Multiple Remote command execution Federico Fazzi
- Calendar Express 2 SQL injection CrAzY.CrAcKeR_at_hotmail.com
- [FLSA-2006:189137-2] Updated firefox package fixes security issues Marc Deslauriers
Monday, 5 June
- Re: XSS in ICQ.com 321_321_at_mail.ru
Tuesday, 6 June
- [FLSA-2006:190941] Updated ipsec-tools package fixes security issue Marc Deslauriers
- Re: [Full-disclosure] RealVNC 4.1.1 Remote Compromise Bojan Zdrnja
- [FLSA-2006:190884] Updated squirrelmail package fixes security issues Marc Deslauriers
Wednesday, 7 June
- [ MDKSA-2006:096 ] - Updated openldap packages fixes buffer overflow vulnerability. security_at_mandriva.com
- [ MDKSA-2006:097 ] - Updated MySQL packages fixes SQL injection vulnerability. security_at_mandriva.com
- PBL Guestbook v1.31 - XSS luny_at_youfucktard.com
- [ MDKSA-2006:098 ] - Updated postgresql packages fixes SQL injection vulnerabilities. security_at_mandriva.com
- Mafia Moblog Full Path Disclosure / SQL injection simo64_at_gmail.com
- Babykatmedia.com scripts - vSCAL & vREAL - XSS Vulns luny_at_youfucktard.com
- Chemical Directory - XSS luny_at_youfucktard.com
- Easy Ad-Manager luny_at_youfucktard.com
- [NOBYTES.COM: #12] ViArt Shop v2.5.5 - XSS Vulnerability John Cobb
- [ GLSA 200606-06 ] AWStats: Remote execution of arbitrary code Sune Kloppenborg Jeppesen
Thursday, 8 June
- [MajorSecurity #10]i.List <= 1.5 - XSS admin_at_majorsecurity.de
Wednesday, 7 June
- MiraksGalerie <= 2.62 Multiple Remote command execution Federico Fazzi
- E-Dating System from scriptsez.net - XSS luny_at_youfucktard.com
Thursday, 8 June
- [SECURITY] [DSA 1093-1] New xine-ui packages fix denial of service Martin Schulze
Wednesday, 7 June
- Ez Ringtone Manager from scriptez.net - XSS luny_at_youfucktard.com
- GUESTEX guestbook code execution root
Thursday, 8 June
- [USN-291-1] FreeType vulnerabilities Martin Pitt
- cms-bandits 2.5, Remote command execution Federico Fazzi
Wednesday, 7 June
- Tikiwiki 1.9.3.2 security release marc_at_marclaporte.com
Thursday, 8 June
- Internet Explorer vulnerbility Mr.Niega_at_gmail.com
- Uninformed Journal Release Announcement: Volume 4 Uninformed Journal
- Mathcad Area Lock Vulnerability bugtraq_at_firewraith.co.uk
- NPDS <= 5.10 Local Inclusion, XSS, Full path disclosure gmdarkfig_at_gmail.com
Wednesday, 7 June
- Back-end = 0.7.2.1 (jpcache.php) Remote command execution Federico Fazzi
Thursday, 8 June
- PHP-Nuke <= 7.9 Search XSS Vulnerability try_og_at_hotmail.com
- [SECURITY] [DSA 1091-1] New TIFF packages fix arbitrary code execution Martin Schulze
- Re: phpBannerExchange 2.0 Directory Traversal Vulnerability mopeygoff_at_gmail.com
- bug of script injection in shoutcast servers mantasjadzevicius_at_vecro.lt
Wednesday, 7 June
- Re: IRM 019: MailMarshal 6.1 SMTP MTA Content Filter Bypass Hayden Searle
Tuesday, 6 June
- Re: Tiny Web Gallery <= 1.4 XSS tinywebgallery_at_mdempfle.de
Thursday, 8 June
- Ie opera dos exploit co296_at_aol.com
- [USN-289-1] tiff vulnerabilities Martin Pitt
- rPSA-2006-0098-1 gdm Justin M. Forbes
Tuesday, 6 June
- 'Multiple Sql injection and XSS in integramod portal ahwaz_at_setiran.com
- Re: Multiple Vendor NTFS Data Stream Malware Stealth Technique Gadi Evron
Thursday, 8 June
- [SECURITY] [DSA 1092-1] New MySQL 4.1 packages fix SQL injection Martin Schulze
Wednesday, 7 June
- Re: [Full-disclosure] RealVNC 4.1.1 Remote Compromise Jose Ramirez
Thursday, 8 June
- Re: aWebNews <= 1.0 (login.php) Remote DocumentRoot file disclosure str0ke
- [security bulletin] HPSBMA02121 SSRT061157 rev.2 - HP OpenView Storage Data Protector Remote Arbitrary Command Execution security-alert_at_hp.com
- [security bulletin] HPSBUX02090 SSRT051058 rev.2 - HP-UX Secure Shell Remote Denial of Service (DoS) security-alert_at_hp.com
- SSL VPNs and security Michal Zalewski
Friday, 9 June
- [USN-295-1] xine-lib vulnerability Martin Pitt
- Re: SSL VPNs and security Amit Klein (AKsecurity)
- [ GLSA 200606-07 ] Vixie Cron: Privilege Escalation Sune Kloppenborg Jeppesen
- [USN-294-1] courier vulnerability Martin Pitt
Thursday, 8 June
- [SECURITY] [DSA 1094-1] New gforge packages fix cross-site scripting Moritz Muehlenhoff
- okscripts.com - XSS Vulns luny_at_youfucktard.com
- Dell Openmanage CD Vulnerability wiz561_at_gmail.com
- iFoto v0.20-06/06/06 luny_at_youfucktard.com
Friday, 9 June
- [USN-292-1] binutils vulnerability Martin Pitt
Thursday, 8 June
- phazizGuestbook v2.0 - XSS luny_at_youfucktard.com
Friday, 9 June
- [USN-293-1] gdm vulnerability Martin Pitt
Thursday, 8 June
- Re: PHP-Nuke <= 7.9 Search XSS Vulnerability try_og_at_hotmail.com
- Docebo CMS 3.0.3, Remote command execution Federico Fazzi
- Docebo Core 3.0.3, Remote command execution Federico Fazzi
- mole.com.ua Booking Script luny_at_youfucktard.com
Friday, 9 June
- Re: libgd 2.0.33 infinite loop in GIF decoding ? Xavier Roche
Thursday, 8 June
- mole.com.ua Ticket Booking Script - XSS luny_at_youfucktard.com
Friday, 9 June
- Re: DGbook v1.0 - XSS diangemilang_at_gmail.com
Thursday, 8 June
- Docebo Kms 3.0.3, Remote command execution Federico Fazzi
- MobeSpace v2.0 - XSS luny_at_youfucktard.com
- Docebo Lms 3.0.3, Remote command execution Federico Fazzi
- Re: SSL VPNs and security E Mintz
- Re: SSL VPNs and security Michal Zalewski
Friday, 9 June
- [ GLSA 200606-08 ] WordPress: Arbitrary command execution Sune Kloppenborg Jeppesen
- Secunia Research: SelectaPix Cross-Site Scripting and SQL Injection Vulnerabilities Secunia Research
- Secunia Research: AutoMate unacev2.dll Buffer Overflow Vulnerability Secunia Research
- TinyMuw v1.0 - XSS luny_at_youfucktard.com
- PHP-Nuke Download Module Remote SQL Injection BuNy-m_at_hotmail.com
- CORE-2006-0327: IAXclient truncated frames vulnerabilities Core Security Technologies advisories
- Contensis CMS XSS vunerability smigofthedump_at_yahoo.com
- Re: IRM 019: MailMarshal 6.1 SMTP MTA Content Filter Bypass alberto
- [USN-288-2] PostgreSQL server/client vulnerabilities Martin Pitt
- [USN-288-3] PostgreSQL client vulnerabilities Martin Pitt
- Windows Software Restriction Policy Protection Bypass 3APA3A
- P.A.I.D v2.2 luny_at_youfucktard.com
- ST AdManager Lite v1 luny_at_youfucktard.com
- Re: [Full-disclosure] Windows Software Restriction Policy Protection Bypass Dinis Cruz
- 0verkill 0.6, Remote integer overflow Federico Fazzi
- TSLSA-2006-0034 - multi Trustix Security Advisor
- [USN-296-1] firefox vulnerabilities Martin Pitt
- [Kil13r-SA-20060609-1] Daum Search Cross-Site Scripting Vulnerability mac68k_at_gmail.com
- [Kil13r-SA-20060609-2] DaNaWa Search Cross-Site Scripting Vulnerability mac68k_at_gmail.com
- [Kil13r-SA-20060609-3] DreamWiz Search Cross-Site Scripting Vulnerability mac68k_at_gmail.com
- CORE-2006-0330: Asterisk PBX truncated video frame vulnerability Core Security Technologies advisories
- rPSA-2006-0099-1 openldap openldap-clients openldap-servers Justin M. Forbes
- [SECURITY] [DSA 1095-1] New freetype packages fix several vulnerabilities Martin Schulze
- Ringlink v3.2 - XSS luny_at_youfucktard.com
Saturday, 10 June
- fx-APP Version 0.0.8.1 luny_at_youfucktard.com
- AsianXO.com - XSS with cookie data include luny_at_youfucktard.com
- Tempinbox.com luny_at_youfucktard.com
- [MajorSecurity #11]OpenCMS<= 6.2.1 - XSS admin_at_majorsecurity.de
- [MajorSecurity #13]Cabacos Web CMS<= 3.8 - XSS admin_at_majorsecurity.de
- [MajorSecurity #14]CFXe-CMS <= 2.0 - XSS admin_at_majorsecurity.de
- Joomla! 1.0 Remote File Inclusion c4nberx_at_gmail.com
- [MajorSecurity #12]ZMS<= 2.9 - XSS admin_at_majorsecurity.de
- ERRATA: [ GLSA 200604-10 ] zgv: Heap overflow Sune Kloppenborg Jeppesen
- [KAPDA::#47] - Snitz Forum <= 3.4.05 SQL-Injection Vulnerability farhadkey_at_yahoo.com
Sunday, 11 June
- [ GLSA 200606-10 ] Cscope: Many buffer overflows Sune Kloppenborg Jeppesen
- igloo DoubleSpeak v 0.1 Multiple remote file inclusion aminrayden_at_yahoo.com
Monday, 12 June
- Mydeardiary.com - XSS luny_at_youfucktard.com
Sunday, 11 June
- Diaryland.com - XSS luny_at_youfucktard.com
- [ GLSA 200606-11 ] JPEG library: Denial of Service Sune Kloppenborg Jeppesen
- [ GLSA 200606-12 ] Mozilla Firefox: Multiple vulnerabilities Sune Kloppenborg Jeppesen
- [ GLSA 200606-13 ] MySQL: SQL Injection Sune Kloppenborg Jeppesen
- 5 Star Review - review-script.com - XSS w/ cookie output luny_at_youfucktard.com
Monday, 12 June
- Secunia Research: MyBB "domecode()" PHP Code Execution Vulnerability Secunia Research
Saturday, 10 June
- Lycos.com - XSS vulnerability admin_at_majorsecurity.de
- Hotbot.com - XSS vulnerability in search engine admin_at_majorsecurity.de
Sunday, 11 June
- Re: iFoto v0.20-06/06/06 aizu.ikmal_at_gmail.com
Saturday, 10 June
- vbulletin.com Multiple XSS Vulnerabilities chris_at_splices.org
Friday, 10 March
- WinSCP - URI Handler Command Switch Parsing Jelmer Kuperus
Sunday, 11 June
- RCblog 1.03 Directory Traversal [index.php] irc0d3r_at_yahoo.com
- CS-Forum <= 0.81 Cross Site Scripting, SQL Injection, Full Path Disclosure gmdarkfig_at_gmail.com
- tempnam() Bypass unique file name PHP 5.1.4 cxib_at_securityreason.com
- Wanderlist.com - XSS vuln with sessions disclosure luny_at_youfucktard.com
Saturday, 10 June
- Myscrapbook v3.1 - XSS luny_at_youfucktard.com
Sunday, 11 June
- PaintedOver.com, Inc. 2004-2006 Xss Vulnerabilities redl_ine_at_hotmail.com
- [KAPDA::48]CopperminePhotoGallery1.4.8~ addhit() function~ SQLinjection attack addmimistrator_at_gmail.com
Monday, 12 June
- Foing (manage_songs.php) Remote File Inclusion[phpBB] darkfire_at_f4kelive.zzn.com
Saturday, 10 June
- Opengaia.com - XSS Vuln & Session Include luny_at_youfucktard.com
Sunday, 11 June
- sorry i wrong something, this is original AWF CMS 1.11 adv Federico Fazzi
Saturday, 10 June
- Nowtalking.com - XSS luny_at_youfucktard.com
Sunday, 11 June
- Wireclub.com - XSS & cookie disclosure luny_at_youfucktard.com
- cescripts.com - XSS luny_at_youfucktard.com
Monday, 12 June
- Virtualtourist.com - XSS with cookie disclosure luny_at_youfucktard.com
Saturday, 10 June
- ThWboard 3.0 <= SQL Injection 666_at_hell.de.tk
Sunday, 11 June
- Windows XP Task Scheduler Local Privilege Escalation (Advisory) zipk0der
- Stargazer.org - XSS with Session output luny_at_youfucktard.com
Saturday, 10 June
- Onlinenode.com - XSS luny_at_youfucktard.com
Monday, 12 June
- [ GLSA 200606-14 ] GDM: Privilege escalation Sune Kloppenborg Jeppesen
- Re: igloo DoubleSpeak v 0.1 Multiple remote file inclusion str0ke
- rPSA-2006-0100-1 freetype Justin M. Forbes
- [ MDKSA-2006:099 ] - Updated freetype2 packages fixes multiple vulnerabilities. security_at_mandriva.com
Thursday, 8 June
- Re: SSL VPNs and security wnorth_at_verizon.net
- RE: Internet Explorer vulnerbility Greg Merideth (Forward Technology)
Friday, 9 June
- myPHP Guestbook 2.0.2 XSS Vulnerabilitie x0r_1_at_hotmail.de
- Re: SSL VPNs and security thanekamp_at_hotmail.com
Saturday, 10 June
- Flork.com luny_at_youfucktard.com
Sunday, 11 June
- Vampirefreaks.com - XSS with cookie disclosure luny_at_youfucktard.com
Saturday, 10 June
- # MHG Security Team --- PHORUM 5.1.13 Remote File Inc. erne_at_ernealizm.com
Monday, 12 June
- [EEYEB-20060524] Symantec Remote Management Stack Buffer Overflow eEye Advisories
Sunday, 11 June
- [ GLSA 200606-09 ] SpamAssassin: Execution of arbitrary code Sune Kloppenborg Jeppesen
Saturday, 10 June
- Meefo.com - XSS with cookie include luny_at_youfucktard.com
Thursday, 8 June
- Re: SSL VPNs and security E Mintz
- Re: Internet Explorer vulnerbility Andrei Ponomarev
Monday, 12 June
- Yourfacesucks.com - XSS & cookie disclosure luny_at_youfucktard.com
Sunday, 11 June
- Blackplanet.com - XSS & cookie disclosure vuln. luny_at_youfucktard.com
Thursday, 8 June
- Re: Ie opera dos exploit Daniel Hoffmann
Monday, 12 June
- Re: Windows XP Task Scheduler Local Privilege Escalation (Advisory) Eliah Kagan
Friday, 9 June
- Invision Power Board XSS kepche_at_msn.com
Thursday, 8 June
- Re: Internet Explorer vulnerbility Michael N. Telnov
- internet explorer vulnerability based on MarjinZ & Mr.Niega discovered Kevin Berkane
Monday, 12 June
- [FSA013] phpCMS 1.2.1pl2, Remote command execution Federico Fazzi
Sunday, 11 June
- Call For Papers - No cON Name 2006 Edition Spain Jose Nicolas Castellano
Thursday, 8 June
- Emllabs.com - XSS luny_at_youfucktard.com
Sunday, 11 June
- Content-Builder (CMS) 0.7.5, Remote command execution Federico Fazzi
Monday, 12 June
- DCP-Portal 6.1.x, Remote command execution Federico Fazzi
- Re: BUGTRAQ:20060611 ThWboard 3.0 <= SQL Injection Steven M. Christey
- Re: SSL VPNs and security Michal Zalewski
- VBZooM <<-- V1.11 "show.php" SQL injection CrAzY.CrAcKeR_at_hotmail.com
- VBZooM <<--V1.02 "meaning.php" SQL injection CrAzY.CrAcKeR_at_hotmail.com
- VBZooM <<--V1.11 "subject.php" SQL injection CrAzY.CrAcKeR_at_hotmail.com
- [SECURITY] [DSA 1096-1] New webcalendar packages fix arbitrary code execution Martin Schulze
- VBZooM <<--V1.01 "language.php" SQL injection CrAzY.CrAcKeR_at_hotmail.com
Tuesday, 13 June
- multiple Xss exploits in 35mmslidegallery V6 black code
Monday, 12 June
- Simpnews <= All version - Remote File Include Vulnerabilities SpC-x_at_Bsdmail.Org
Tuesday, 13 June
- High Risk Vulnerability in Microsoft Windows RASMAN Service Peter Winter-Smith
- iDefense Security Advisory 06.13.06: Windows MRXSMB.SYS MRxSmbCscIoctlOpenForCopyChunk Overflow labs-no-reply
- iDefense Security Advisory 06.13.06: Microsoft Internet Explorer ART File Heap Corruption Vulnerability labs-no-reply
- ZDI-06-017: Microsoft Internet Explorer UTF-8 Decoding Heap Overflow Vulnerability zdi-disclosures_at_3com.com
- PHP MESSENGER 1.0 Version - Remote File Include Vulnerability SpC-x_at_Bsdmail.Org
- Jobline 1 1 1 Version - Remote File Include Vulnerability SpC-x_at_Bsdmail.Org
- Amr Talkbox talkbox.PHP - Remote File Include Vulnerabilities SpC-x_at_Bsdmail.Org
- S H O U T B O X (v1.5) Version - Remote File Include Vulnerability SpC-x_at_Bsdmail.Org
- iDefense Security Advisory 06.13.06: Windows MRXSMB.SYS MrxSmbCscIoctlCloseForCopyChunk DoS labs-no-reply
- Re: Shoutpro 1.0 Version - Remote File Include Vulnerability Steven M. Christey
- Ltwcalendar 4.1.3 version - Remote File Include Vulnerabilities SpC-x_at_Bsdmail.org
- [REVERSEMODE ADVISORY] MS06-030 - Microsoft Mrxsmb.sys privilege escalation advisory Reversemode
Monday, 12 June
- # MHG Security Team --- PHPAskIt v2.0.1 Remote File Inc. erne_at_ernealizm.com
Tuesday, 13 June
- Re: Simpnews <= All version - Remote File Include Vulnerabilities str0ke
Monday, 12 June
- Web-CMS <<--1.0 "print.php" SQL injection CrAzY.CrAcKeR_at_hotmail.com
Tuesday, 13 June
- [REVERSEMODE ADVISORY] MS06-030 NtClose DeadLock. Reversemode
- TikiWiki Sql injection & XSS Vulnerabilities bug_at_securitynews.ir
- Re: vbulletin.com Multiple XSS Vulnerabilities contact_at_vbulletin.com
Monday, 12 June
- blur6ex <= 0.3.462 'ID' blind sql injection rgod_at_autistici.org
Tuesday, 13 June
- Re: PHP-Nuke <= 7.9 Search XSS Vulnerability Paul Laudanski
- REMOTE FILE INCLUSION ( ALL ) SpC-x_at_Bsdmail.org
- iDefense Security Advisory 06.13.06: Windows Media Player PNG Chunk Decoding Stack-Based Buffer Overflow labs-no-reply
Friday, 9 June
- RE: Dell Openmanage CD Vulnerability Michael Scheidell
Tuesday, 13 June
- Chipmailer <= 1.09 Multiple Vulnerabilities tamriel_at_gmx.net
Friday, 9 June
- RE: Windows Software Restriction Policy Protection Bypass Roger A. Grimes
- GamePlay.co.uk XSS charlie_at_thehackersplace.org
Saturday, 10 June
- PhpMyFactures 1.0 Cross Site Scripting, SQL Injection, Full Path Disclosure and others gmdarkfig_at_gmail.com
Monday, 12 June
- Oracle DBMS_STANDARD security problem putosoft softputo
- Re: PaintedOver.com, Inc. 2004-2006 Xss Vulnerabilities reports_at_paintedover.com
Tuesday, 13 June
- file include exploits in mcGuestbook 1.3 gamr-14_at_hotmail.com
Monday, 12 June
- SYMSA-2006-004: Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution research_at_symantec.com
Tuesday, 13 June
- Simpleshout 1.6.0 Version - Remote File Include Vulnerability SpC-x_at_Bsdmail.Org
- ZDI-06-018: Microsoft Internet Explorer DXImageTransform ActiveX Memory Corruption Vulnerability zdi-disclosures_at_3com.com
- Shoutpro 1.0 Version - Remote File Include Vulnerability SpC-x_at_Bsdmail.Org
- G Shout 1.3.1 Version - Remote File Include Vulnerability SpC-x_at_Bsdmail.Org
Monday, 12 June
- [MajorSecurity #17] SixCMS <= 6 - Multiple XSS and directory traversal vulnerabilities admin_at_majorsecurity.de
Wednesday, 14 June
- [USN-297-1] Thunderbird vulnerabilities Martin Pitt
- [USN-298-1] libgd2 vulnerability Martin Pitt
- [USN-288-4] dovecot regression fix Martin Pitt
- Secunia Resaerch: Internet Explorer Exception Handling Memory Corruption Vulnerability Secunia Research
- [USN-299-1] dhcdbd vulnerability Martin Pitt
Tuesday, 13 June
- Black Hat Speakers + 2005 Content on-line Jeff Moss
Wednesday, 14 June
- Secunia Research: PicoZip "zipinfo.dll" Multiple Archives Buffer Overflow Secunia Research
Tuesday, 13 June
- [ MDKSA-2006:099-1 ] - Updated freetype2 packages fixes multiple vulnerabilities. security_at_mandriva.com
- [ MDKSA-2006:100 ] - Updated gdm packages fix vulnerability security_at_mandriva.com
- Re: REMOTE FILE INCLUSION ( ALL ) Steven M. Christey
Wednesday, 14 June
- Freeze Greetings Cards PWD.txt alp_eren_at_ayyildiz.org
Tuesday, 13 June
- bbrss PhpBB (phpbb_root_path) Remote File Inclusion SpC-x_at_Bsdmail.Org
- wbb<<--v 2.2.2 "thread.php" SQL injection CrAzY.CrAcKeR_at_hotmail.com
- wbb<<--v 2.2.1 "studienplatztausch.php" SQL injection CrAzY.CrAcKeR_at_hotmail.com
- wbb<<--v 2.1.6 "profile.php" SQL injection CrAzY.CrAcKeR_at_hotmail.com
Wednesday, 14 June
- [ GLSA 200606-16 ] DokuWiki: PHP code injection Sune Kloppenborg Jeppesen
- SEC Consult SA-20060613-0 :: Outlook Web Access Cross Site Scripting Vulnerability SEC Consult Research
- Flipper Poll (root_path) Remote File Inclusion SpC-x_at_Bsdmail.Org
- [ GLSA 200606-15 ] Asterisk: IAX2 video frame buffer overflow Sune Kloppenborg Jeppesen
- Fusion Polls (xtrphome) Remote File Inclusion SpC-x_at_Bsdmail.Org
- [KDE Security Advisory] KDM symlink attack vulnerability Dirk Mueller
- [SECURITY] [DSA 1097-1] New Kernel 2.4.27 packages fix several vulnerabilities Moritz Muehlenhoff
- PhpBlueDragon CMS 2.9.1, File inclusion vulnerability Federico Fazzi
- MySQL DoS Kanatoko
- [ MDKSA-2006:101 ] - Updated squirrelmail packages fix vulnerabilities security_at_mandriva.com
- [SECURITY] [DSA 1098-1] New horde3 packages fix cross-site scripting Moritz Muehlenhoff
- [ MDKSA-2006:102 ] - Updated libtiff packages fixes tiff2pdf vulnerability security_at_mandriva.com
- [FSA016] ISPConfig 2.2.3, File inclusion vulnerability Federico Fazzi
- [USN-301-1] kdm vulnerability Martin Pitt
- [ MDKSA-2006:103 ] - Updated spamassassin packages fix vulnerability security_at_mandriva.com
- Secunia Research: CMS Mundo SQL Injection and File Upload Vulnerabilities Secunia Research
- EC2ND - Call for Papers Blyth A J C (Comp)
- [SECURITY] [DSA 1099-1] New horde2 packages fix cross-site scripting Moritz Muehlenhoff
- FreeBSD Security Advisory FreeBSD-SA-06:17.sendmail FreeBSD Security Advisories
- Secunia Research: DeluxeBB SQL Injection and File Inclusion Vulnerabilities Secunia Research
- [USN-300-1] wv2 vulnerability Martin Pitt
- Re: Amr Talkbox talkbox.PHP - Remote File Include Vulnerabilities Steven M. Christey
- ePrayver v.Alpha - XSS luny_at_youfucktard.com
- APBoard 2.2-r3 <= SQL Injections 666_at_hell.de.tk
- [ MDKSA-2006:104 ] - Updated sendmail packages fix remotely exploitable vulnerability security_at_mandriva.com
- Re: MySQL DoS Tonnerre Lombard
- [SECURITY] [DSA 1100-1] New wv2 packages fix integer overflow Martin Schulze
Thursday, 15 June
- MP3 Search/Archive v1.2 - XSS luny_at_youfucktard.com
- Advisory: Authentication bypass in phpBannerExchange RedTeam Pentesting
- Advisory: Unauthorized password recovery in phpBannerExchange RedTeam Pentesting
- HotPlugCMS_1.0 - SQL Injection Vulnerability guest01_at_gmail.com
- Andys Chat 4.5 (action) Remote File Inclusion SpC-x_at_Bsdmail.Org
- [USN-297-2] Thunderbird extensions update for recent security update Martin Pitt
- [ GLSA 200606-18 ] PAM-MySQL: Multiple vulnerabilities Sune Kloppenborg Jeppesen
- Regarding "SMB Invalid Handle Value" - MS06-030. Vulnerability not fixed. Reversemode
- [ GLSA 200606-19 ] Sendmail: Denial of Service Sune Kloppenborg Jeppesen
- [ GLSA 200606-17 ] OpenLDAP: Buffer overflow Sune Kloppenborg Jeppesen
- rPSA-2006-0106-1 kdebase Justin M. Forbes
- HotPlugCMS 1.0, Cross-Site Scripting Vulnerabilities Federico Fazzi
- rPSA-2006-0105-1 arts Justin M. Forbes
Friday, 16 June
- TSLSA-2006-0036 - multi Trustix Security Advisor
- dvdwolf SQL injection/XSS CrAzY.CrAcKeR_at_hotmail.com
- [USN-303-1] MySQL vulnerability Martin Pitt
Thursday, 15 June
- Boardhost.com - XSS luny_at_youfucktard.com
Friday, 16 June
- [security bulletin] HPSBUX02115 SSRT061077 rev.1 - HP-UX running Support Tools Manager (xstm, cstm, stm) Local Denial of Service (DoS) security-alert_at_hp.com
Thursday, 15 June
- Develooping Flash Chat (banned_file) Remote File Inclusion SpC-x_at_Bsdmail.Org
Friday, 16 June
- Re: Several flaws in e-business designer (eBD) ebd.soporte_at_oasyssoft.com
- aXentForum II XSS vuLLn SnoBmsn_at_hotmail.de
- Indexu v 5.0.01 Multiple Remote File Include Vulnerabilities KARKOR23_at_hotmail.com
- file include exploits in nucleus 3.23 gamr-14_at_hotmail.com
- Re: [FSA016] ISPConfig 2.2.3, File inclusion vulnerability t.brehm_at_ispconfig.org
Thursday, 15 June
- Chatizens.com - XSS with cookie disclosure luny_at_youfucktard.com
- Calendarix 0.7.20060401, SQL Injection Vulnerabilities Federico Fazzi
Friday, 16 June
- Ji-takz Chat (mycfg) Remote File Inclusion SpC-x_at_Bsdmail.Org
Thursday, 15 June
- Carspace.com - XSS with cookie disclosure luny_at_youfucktard.com
- Zeroboard File Upload & extension bypass Vulnerability mins_at_wins21.com
- Cisco Secure ACS Cross Site Scripting Vulnerability. liam.romanis_at_uk.fujitsu.com
- Blacksingles.com - XSS & cookie disclosure luny_at_youfucktard.com
Friday, 16 June
- file include exploits in mcGuestbook 1.3 SWEET SWEET
- PHP security (or the lack thereof) Darren Reed
Thursday, 15 June
- [ MDKSA-2006:105 ] - Updated kdebase packages fix local vulnerability in kdm security_at_mandriva.com
- PictureDis Products "lang" Parameter File Inclusion Vulnerability root-hacked_at_hotmail.com
- Re: Secunia Research: PicoZip "zipinfo.dll" Multiple Archives BufferOverflow c0rrupt_at_f34r.us
- [ MDKSA-2006:106 ] - Updated mdkkdm packages fix local vulnerability security_at_mandriva.com
Friday, 16 June
- Re: [Bugtraq ID: 17909] ISPConfig Session.INC.PHP Remote File Include Vulnerability t.brehm_at_ispconfig.org
- Youtube.com - XSS & cookie disclosure luny_at_youfucktard.com
Thursday, 15 June
- Bingbox.com - XSS & cookie disclosure luny_at_youfucktard.com
Saturday, 17 June
- RE: Cisco Secure ACS Cross Site Scripting Vulnerability. Paul Oxman (poxman)
Friday, 16 June
- file include exploits in dotwidgeta Version 2 SWEET SWEET
- Simple PHP Poll Authecnication Admin ByPass alp_eren_at_ayyildiz.org
- Netscape.com - Cross site scripting vulnerability admin_at_majorsecurity.de
- webcrawler.com - Cross site scripting vulnerability admin_at_majorsecurity.de
- GreatDomains.com - XSS with cookie disclosure admin_at_majorsecurity.de
- Re: PHP security (or the lack thereof) Bojan Zdrnja
- Re: PHP security (or the lack thereof) Steven M. Christey
- bitweaver <= v1.3 multiple vulnerabilities rgod_at_autistici.org
- [ECHO_ADV_33$2006] CMS Faethon 1.3.2 mainpath Remote File Inclusion eufrato_at_gmail.com
- Re: PHP security (or the lack thereof) Jose Nazario
- Housecarers.com - XSS & cookie disclosure luny_at_youfucktard.com
Saturday, 17 June
- Dealgates.com - XSS with cookie disclosure luny_at_youfucktard.com
- Re: Bingbox.com - XSS & cookie disclosure Sven Vetsch
- Mambo <= 4.6rc1 sql injection rgod_at_autistici.org
- Cline Communications Sql injection liz0_at_bsdmail.com
Monday, 12 June
- Hotscripts.com - XSS with cookie disclosure luny_at_youfucktard.com
- XSS in GardenWeb nanoymaster_at_gmail.com
- Apnaspace.com - XSS with cookie disclosure luny_at_youfucktard.com
- Cybersocieties.com - XSS & cookie disclosure luny_at_youfucktard.com
Tuesday, 13 June
- Re: SSL VPNs and security Eloy Paris
- hi5.com - XSS with cookie disclosure luny_at_youfucktard.com
- Re: GamePlay.co.uk XSS Patrick Morris
Monday, 12 June
- Re: RE: Internet Explorer vulnerbility Charles Hamby
Tuesday, 13 June
- ISO.org - XSS vulnerability admin_at_majorsecurity.de
- alipager xss attack s3rv3r_hack3r_at_yahoo.com
- Proof of concept: mybb 1.1.2 remote code execution Javier Olascoaga
- [Kurdish Security # 8] DCP-Portal Remote File Include Vulnerability [Editor DHTML] botan_at_linuxmail.org
Monday, 12 June
- Facerave.com - XSS & sessions disclosure luny_at_youfucktard/com.securityfocus.com
- animesuki XSS nanoymaster_at_gmail.com
Tuesday, 13 June
- Re: PHP Advanced Transfer Manager Download users password hashes jn_at_hz6.de
Monday, 12 June
- Windowsitpro.com - XSS with cookie disclosure luny_at_youfucktard.com
Tuesday, 13 June
- Ratescene.co.uk - XSS with session disclosure luny_at_youfucktard.com
- Macworld.com - XSS vulnerability admin_at_majorsecurity.de
Monday, 12 June
- About.com - XSS with cookie disclosure luny_at_youfucktard.com
Tuesday, 13 June
- Ratemylook.co.uk - XSS with session disclosure luny_at_youfucktard.com
- Re: Ie opera dos exploit Nathaniel Hasenfus
- Palm.com - XSS vulnerability admin_at_majorsecurity.de
- webcrawler.com - XSS vulnerability in search-engine admin_at_majorsecurity.de
Monday, 12 June
- VampireFreaks journal XSS nanoymaster_at_gmail.com
Tuesday, 13 June
- Ashop Search Module SQL injection entrika_fs_at_yahoo.com
- Facetherating.com - XSS & session disclosure luny_at_youfucktard.com
Wednesday, 14 June
- Confixx <= 3 kr4ch_at_web.de
- Confixx <= 3 kr4ch_at_web.de
- B3ta.com - XSS with cookie disclosure luny_at_youfucktard.com
Thursday, 15 June
- Biblenet.net - XSS luny_at_youfucktard.com
- SinFP 2.00 - a major release with many new features GomoR
Wednesday, 14 June
- RahnemaCo Remote File Inclusion Exploit Breeeeh_at_hotmail.com
- Re: REMOTE FILE INCLUSION ( ALL ) eufrato_at_gmail.com
- Blogspot.com - XSS with cookie disclosure luny_at_youfucktard.com
- 43things.com - XSS with cookie disclosure luny_at_youfucktard.com
- Technorati.com - XSS with cookie disclosure luny_at_youfucktard.com
Thursday, 15 June
- Re: MySQL DoS xhire_at_herniklasika.cz
- PTT.yu Guestbook Vulnebility us3rg0d
Friday, 16 June
- vbzoom V1.11 forum.php SQL Injection Vulnerabilities KARKOR23_at_hotmail.com
- mp3.com - Cross site scripting vulnerability admin_at_majorsecurity.de
- XSS in http://www.newscientist.com/ - Search viz.security_at_gmail.com
Saturday, 17 June
- MPCS v0.2 - XSS luny_at_youfucktard.com
Sunday, 18 June
- Microsoft Excel 0-day Vulnerability FAQ document written Juha-Matti Laurio
Monday, 19 June
- [security bulletin] HPSBTU02116 SSRT061135 rev.2 - HP Tru64 UNIX and HP Internet Express for Tru64 UNIX Running sendmail, Remote Execution of Arbitrary Code or Denial of Service (DoS) security-alert_at_hp.com
Sunday, 18 June
- e107 v0.7.5 XSS securityconnection_at_gmail.com
Monday, 19 June
- Re: [MajorSecurity #17] SixCMS <= 6 - Multiple XSS and directory traversal vulnerabilities ellinger_at_six.de
- VBZooM <<--V1.00 "rank.php" SQL injection CrAzY.CrAcKeR_at_hotmail.com
Sunday, 18 June
- XSS Vulnerability in Maximus SchoolMAX Fixer
Monday, 19 June
- VBZooM <<--V1.11 "message.php" SQL injection CrAzY.CrAcKeR_at_hotmail.com
Sunday, 18 June
- vuBB <= 0.2.1 [BFA] SQL Injection Exploit + Advisory link gmdarkfig_at_gmail.com
Monday, 19 June
- VBZooM <<--V1.00 "lng.php" SQL injection CrAzY.CrAcKeR_at_hotmail.com
- SaphpLesson<<--1.1 "misc.php" SQL injection CrAzY.CrAcKeR_at_hotmail.com
Sunday, 18 June
- PHP Live Helper <=([abs_path]) Remote File Include Vulnerabilities selfar2002_at_hotmail.com
Monday, 19 June
- [ GLSA 200606-21 ] Mozilla Thunderbird: Multiple vulnerabilities Sune Kloppenborg Jeppesen
Sunday, 18 June
- onedotoh xss atack alijsb_at_yahoo.com
- [ GLSA 200606-20 ] Typespeed: Remote execution of arbitrary code Sune Kloppenborg Jeppesen
Saturday, 17 June
- Re: PHP security (or the lack thereof) Geo.
Sunday, 18 June
- Easy CMS 0.1.2 Php Shell Upload Vulnerabilities liz0_at_bsdmail.com
- singapore gallery <= 0.10.0 Multiple Vulnerabilities simo64_at_gmail.com
- WeBBoA Hosting Script SQL Injection entrika_fs_at_yahoo.com
Monday, 19 June
- Re: PHP Live Helper <=([abs_path]) Remote File Include Vulnerabilities stormhacker_at_hotmail.com
Sunday, 18 June
- Dragons Kingdom v1.0 - XSS & cookie disclosure luny_at_youfucktard.com
Monday, 19 June
- Re: PHP security (or the lack thereof) Neil Neely
Sunday, 18 June
- Vm ware 0day dos exploit by n00b. co296_at_aol.com
- qtofilemanager xss attack ! alijsb_at_yahoo.com
Saturday, 17 June
- V3Chat Instant Messenger - XSS luny_at_youfucktard.com
Monday, 19 June
- Input Validation/Output Encoding Vulnerabilities in Cisco CallManager Allow Script Injection Attacks Reynolds, Jake
- Janus Contact Charles Hamby
- Re: Vm ware 0day dos exploit by n00b. Paul Szabo
- Re: Vm ware 0day dos exploit by n00b. Eliah Kagan
Tuesday, 20 June
- trifinite Security Advisory: Buffer Overrun in Toshiba Bluetooth Stack for Windows Martin Herfurt
- display.cgi soltan_defacer_at_yahoo.com
- Multiple Bypass and Integrity Lost Vulnerabilities egavriil_at_sentinel.gr
- vBulletin<<--v3.5.X "member.php" Cross Site Scripting CrAzY.CrAcKeR_at_hotmail.com
- [MajorSecurity #18] Ralf Image Gallery <=0.7.4 - Multiple XSS, Remote File Include and directory traversal vulnerabilities admin_at_majorsecurity.de
- Re: MAXDEV CMS Multiple vulnerabilities pete_at_maxdev.com
Saturday, 17 June
- Module's Name Downloads <<--V 7 SQL injection CrAzY.CrAcKeR_at_hotmail.com
- Module's Name Content<<--V1.0 SQL injection CrAzY.CrAcKeR_at_hotmail.com
- RahnemaCo "page.php" Remote File Inclusion[2] CrAzY.CrAcKeR_at_hotmail.com
Tuesday, 20 June
- ULtimate PHP Board <= 1.96 GOLD Code Execution (exploit code) mbrooks_at_kliconsulting.com
- [ MDKSA-2006:107 ] - Updated arts packages fix vulnerability in artswrapper security_at_mandriva.com
Wednesday, 21 June
- JEdit ActiveX Control Information Disclosure vulnerability bulten_at_srlabs.net
Tuesday, 20 June
- Sendmail MIME DoS vulnerability Jain, Siddhartha
Wednesday, 21 June
- Re: Vacation Retal Script v1.0 radu_at_matrafox.info
Tuesday, 20 June
- [ MDKSA-2006:108 ] - Updated xine-lib packages fix buffer overflow vulnerabilities security_at_mandriva.com
- Opera 9 DoS PoC N9_at_critical.lt
Wednesday, 21 June
- Bypassing of web filters by using ASCII k.huwig_at_iku-ag.de
- Re: display.cgi eufrato_at_gmail.com
- Re: Bypassing of web filters by using ASCII Fixer
Tuesday, 20 June
- [ MDKSA-2006:110 ] - Updated gnupg packages fix vulnerability security_at_mandriva.com
Wednesday, 21 June
- Re: possible SQL injection in Subdreamer ziad_at_subdreamer.com
Saturday, 17 June
- Re: file include exploits in nucleus 3.23 nukedx_at_nukedx.com
Monday, 19 June
- Re: # MHG Security Team --- PHORUM 5.1.13 Remote File Inc. brian_at_phorum.org
Saturday, 17 June
- Re: PHP security (or the lack thereof) Jessica Hope
- Eduha Meeting php shell upload Vulnerabilities liz0_at_bsdmail.com
Monday, 19 June
- Re: PHP security (or the lack thereof) Alan J Rosenthal
- Re: PHP security (or the lack thereof) kicktd
Tuesday, 20 June
- Re: PHP security (or the lack thereof) Geo.
- Digital Armaments July-August Hacking Challange: Microsoft info_at_digitalarmaments.com
- cjGuestbook v1.3 - XSS luny_at_youfucktard.com
- Excel 0-day FAQ updated with Microsoft advisory information Juha-Matti Laurio
- Somechess v1.5 rc1 - XSS luny_at_youfucktard.com
Wednesday, 21 June
- Re: Bypassing of web filters by using ASCII Paul
Tuesday, 20 June
- [ MDKSA-2006:109 ] - Updated wv2 packages fix vulnerability security_at_mandriva.com
Wednesday, 21 June
- Re: Bypassing of web filters by using ASCII Kurt Huwig
- Re: Bypassing of web filters by using ASCII RSnake
- Re: Bypassing of web filters by using ASCII Kurt Huwig
- Re: PHP security (or the lack thereof) Crispin Cowan
- MS Excel Remote Code Execution POC Exploit naveed
- Re: aXentForum II XSS vuLLn Steven M. Christey
Thursday, 22 June
- Re: Bypassing of web filters by using ASCII Amit Klein (AKsecurity)
- Re: V3Chat Instant Messenger - XSS support_at_v3chat.com
- Re: Bypassing of web filters by using ASCII Kurt Huwig
- VigilantMinds Advisory: Opera JPEG Processing Integer Overflow Vulnerability (VMSA-20060621-01) VigilantMinds Advisories
- Re: Bypassing of web filters by using ASCII Hubert Seiwert
- [ GLSA 200606-22 ] aRts: Privilege escalation Sune Kloppenborg Jeppesen
- RE: MS Excel Remote Code Execution POC Exploit Jain, Siddhartha
- Re: MS Excel Remote Code Execution POC Exploit naveed
- [ GLSA 200606-23 ] KDM: Symlink vulnerability Sune Kloppenborg Jeppesen
- Re: Bypassing of web filters by using ASCII Amit Klein (AKsecurity)
- flock d0s exploit remote. beta 1 (v0.7) co296_at_aol.com
- [SECURITY] [DSA 1101-1] New courier packages fix denial of service Martin Schulze
- Re: MS Excel Remote Code Execution POC Exploit Steven M. Christey
Friday, 23 June
- vlbook 1.2 XSS Bug omnipresent_at_email.it
- [SNS Advisory No.88] Webmin Directory Traversal Vulnerability snsadv_at_lac.co.jp
- QaTraq 6.5 RC: Multiple XSS Vulnerabilities enji_at_seclab.tuwien.ac.at
- [KAPDA]Coppermine 1.4.8~Parameter Cleanup System ByPass~Registering Global Varables addmimistrator_at_gmail.com
- [security bulletin] HPSBUX02127 SSRT051056 - rev.1 HP-UX Kernel Local Denial of Service (DoS) security-alert_at_hp.com
- RE: Bypassing of web filters by using ASCII James C. Slora Jr.
- TSLSA-2006-0037 - multi Trustix Security Advisor
Thursday, 22 June
- aeDating 4.1 XSS securityconnection_at_gmail.com
Friday, 23 June
- Trend Micro Control Manager (TMCM) Persistent XSS Vulnerability Darren Bounds
Thursday, 22 June
- Dating Agent PRO 4.7.1 Vulnerability securityconnection_at_gmail.com
Friday, 23 June
- Cisco Secure ACS Weak Session Management Vulnerability Darren Bounds
- Re: Bypassing of web filters by using ASCII Amit Klein (AKsecurity)
Wednesday, 21 June
- Re: Re: PHP security (or the lack thereof) nabiy_at_hotmail.com
Friday, 23 June
- [ GLSA 200606-24 ] wv2: Integer overflow Stefan Cornelius
- DREAMACCOUNT V3.1 Remote Command Execution Exploit KARKOR23_at_hotmail.com
Thursday, 22 June
- [Kil13r-SA-20060622-1] NetSoft SmartNet 2.0 Cross-Site Scripting Vulnerability mac68k_at_gmail.com
Friday, 23 June
- Linux VNC evil client patch - BID 17978 embyte_at_madlab.it
- rPSA-2006-0110-1 kernel Justin M. Forbes
Wednesday, 21 June
- Re: Digital Armaments July-August Hacking Challange: Microsoft Alexander Sotirov
- productcart soltan_defacer soltan_defacer_at_yahoo.com
Thursday, 22 June
- Dating biz@ dating script v1.0 - XSS luny_at_youfucktard.com
- WBB<<---v1.2 "showmods.php" SQL Injection CrAzY.CrAcKeR_at_hotmail.com
- [KAPDA]MyBB1.1.3~Option update for code buttons~Sql Injection Admin Access addmimistrator_at_gmail.com
- Re: Opera 9 DoS PoC Darren Clarke
Friday, 23 June
- Re: PHP security (or the lack thereof) Crispin Cowan
Wednesday, 21 June
- Calendar ( Provided by Codewalkers ) - SQL Injection Silitix_at_gmail.com
Thursday, 22 June
- Re: PHP security (or the lack thereof) john mullee
- [ECHO_ADV_34$2006] W-Agora (Web-Agora) <= 4.2.0 (inc_dir) Remote File Inclusion the_day_at_echo.or.id
- WBB<<---v2.3.1"report.php" SQL Injection CrAzY.CrAcKeR_at_hotmail.com
- SYMSA-2006-005 research_at_symantec.com
- phpBlueDragon CMS 2.9.1 multiple remote file inclusion vuln rozowa.landrynka_at_spam.nation.pl
Wednesday, 21 June
- Re: Bypassing of web filters by using ASCII Thor (Hammer of God)
Thursday, 22 June
- [Kil13r-SA-20060622-2] Namo DeepSearch 4.5 Cross-Site Scripting Vulnerability mac68k_at_gmail.com
Wednesday, 21 June
- Re: Sendmail MIME DoS vulnerability Gadi Evron
Thursday, 22 June
- Re: PHP security (or the lack thereof) Geo.
Wednesday, 21 June
- Re: Opera 9 DoS PoC Bruno Lustosa
Thursday, 22 June
- WBB<<---v2.0 RC2 "newthread.php" SQL Injection CrAzY.CrAcKeR_at_hotmail.com
Friday, 23 June
- Re: Re: MS Excel Remote Code Execution POC Exploit Juha-Matti Laurio
Thursday, 22 June
- Softbiz Dating 1.0 SQL injection securityconnection_at_gmail.com
Friday, 23 June
- Re: Cisco Secure ACS Weak Session Management Vulnerability Clayton Kossmeyer
- Re: PHP security (or the lack thereof) Ronald Chmara
Monday, 26 June
- ERNW Security Advisory 01/2006 mozilla_at_ids-guide.de
- [Kurdish Security # 9] MyMail Directory Traversal And XSS Attacking Vulnerability botan_at_linuxmail.org
Friday, 23 June
- Re: Opera 9 DoS PoC Laurent
Monday, 26 June
- RE: PHP security (or the lack thereof) Geo.
- Claroline Cross-Site Scripting Vulnerabilities bug_at_securitynews.ir
Sunday, 25 June
- DeluxeBB 1.07 Create admin Exploit Hessamx_at_hessamx.net
Monday, 26 June
- Planetnews Authecnication Admin ByPass alp_eren_at_ayyildiz.org
Sunday, 25 June
- [SECURITY] [DSA 1102-1] New pinball packages fix privilege escalation Steve Kemp
Monday, 26 June
- [USN-304-1] gnupg vulnerability Martin Pitt
- Re: Bypassing of web filters by using ASCII Vincent Archer
Sunday, 25 June
- XSS in Cpanel 10 preth00nker_at_gmail.com
Monday, 26 June
- [ GLSA 200606-25 ] Hashcash: Possible heap overflow Thierry Carrez
- [ GLSA 200606-26 ] EnergyMech: Denial of Service Thierry Carrez
- RE: Bypassing of web filters by using ASCII James C. Slora Jr.
- Re: PHP security (or the lack thereof) Paul Schmehl
- Re: PHP security (or the lack thereof) Matthias Kestenholz
- Re: PHP security (or the lack thereof) Mrten
Friday, 23 June
- Re: vBulletin<<--v3.5.X "member.php" Cross Site Scripting scott_at_vbulletin.com
- Re: flock d0s exploit remote. beta 1 (v0.7) Chris Rothecker
- [ MDKSA-2006:111 ] - Updated MySQL packages fixes authorized user DoS(crash) vulnerability. security_at_mandriva.com
Sunday, 25 June
- Re: Bypassing of web filters by using ASCII David Huecking
Friday, 23 June
- [KAPDA]MyBB1.1.3~Option update for code buttons~Sql Injection Admin Access addmimistrator_at_gmail.com
- Re: MS Excel Remote Code Execution POC Exploit naveed
Saturday, 24 June
- Re: Linux VNC evil client patch - BID 17978 embyte_at_madlab.it
Friday, 23 June
- RE: Bypassing of web filters by using ASCII Amit Klein (AKsecurity)
- GlobeTrotter Mobility Manager - security issue dzelek_at_gmail.com
Saturday, 24 June
- Mailenable SMTP Service DoS db0
Friday, 23 June
- RE: Bypassing of web filters by using ASCII RSnake
Saturday, 24 June
- Re: PHP security (or the lack thereof) Daniel Hulme
Sunday, 25 June
- Undisclosed cross site scripting vulnerabilities in domaintools.com - requesting contacts admin_at_majorsecurity.de
Saturday, 24 June
- Re: Opera 9 DoS PoC Bastian Ahrens
- Re: Opera 9 DoS PoC Eric Furman
Friday, 23 June
- Amazon and Msn vulnerabilities dcrab_at_hackerscenter.com
Sunday, 25 June
- OpenGuestbook Cross Site Scripting & SQL Injection simo64_at_gmail.com
- [OpenPKG-SA-2006.010] OpenPKG Security Advisory (gnupg) OpenPKG
Friday, 23 June
- Amazon, MSN vulns and.. Yes, we know! Most sites have vulnerabilities Gadi Evron
Saturday, 24 June
- Re: PHP security (or the lack thereof) Darren Reed
Monday, 26 June
- Universal Hooker - Tool release Hernan Ochoa
Friday, 23 June
- Re: PHP security (or the lack thereof) Tobias J. Kreidl
Sunday, 25 June
- Taking Over Laptops by Fuzzing Wireless Drivers Gadi Evron
Saturday, 24 June
- Re: Bypassing of web filters by using ASCII Balazs Attila-Mihaly (Cd-MaN)
Monday, 26 June
- Re: Bypassing of web filters by using ASCII Hubert Seiwert
Saturday, 24 June
- Re: PHP security (or the lack thereof) Glynn Clements
- Winged Gallery v1.0 luny_at_youfucktard.com
Friday, 23 June
- Re: Sendmail MIME DoS vulnerability Claus Assmann
Sunday, 25 June
- error_log() Safe Mode Bypass PHP 5.1.4 and 4.4.2 cxib_at_securityreason.com
Monday, 26 June
- Jaws <= 0.6.2 'Search gadget' SQL injection rgod_at_autistici.org
Sunday, 25 June
- Windows Live Messenger 8.0 ( Contact List *.ctt ) Heap Overflow Alexander Hristov
- Usenet Script v0.5 luny_at_youfucktard.com
Tuesday, 27 June
- [USN-306-1] MySQL 4.1 vulnerability Martin Pitt
- [USN-305-1] OpenLDAP vulnerability Martin Pitt
Monday, 26 June
- [SECURITY] [DSA 1103-1] New Linux kernel 2.6.8 packages fix several vulnerabilities Moritz Muehlenhoff
- Re: [ECHO_ADV_34$2006] W-Agora (Web-Agora) <= 4.2.0 (inc_dir) Remote File Inclusion Steven M. Christey
Tuesday, 27 June
- CrisoftRicette<<--1.0pre15b Remote File Inclusion CrAzY.CrAcKeR_at_hotmail.com
Monday, 26 June
- SYMSA-2006-006: Lotus Domino SMTP Based Denial of Service research_at_symantec.com
Tuesday, 27 June
- phpvillage "funshow.php" SQL Injection CrAzY.CrAcKeR_at_hotmail.com
- [Kurdish Security # 11] SiteBar Cross-Site Scripting botan_at_linuxmail.org
- Re: [MajorSecurity #18] Ralf Image Gallery <=0.7.4 - Multiple XSS, Remote File Include and directory traversal vulnerabilities Marc MERLIN
Monday, 26 June
- Re: XSS in Cpanel 10 bug_at_securitynews.ir
- Re: Re: PHP security (or the lack thereof) nabiy_at_hotmail.com
- Re: PHP security (or the lack thereof) Ronald Chmara
Tuesday, 27 June
- Re: Is Windows TCP/IP source routing PoC code available? 3APA3A
- RE: PHP security (or the lack thereof) Geo.
- SUSE Security Announcement: freetype2 (SUSE-SA:2006:037) Thomas Biege
- [Kurdish Security # 10 ] MF Piadas 1.0 Remote File Include Vulnerability botan_at_linuxmail.org
- CAID 34325 - CA ITM, eAV, ePP scan job description field format string vulnerability Williams, James K
- Files and cvars overwriting in Quake 3 engine (1.32c / rev 803 / ...) Luigi Auriemma
- [Kil13r-SA-20060628] Hanaro Search Cross-Site Scripting Vulnerability mac68k_at_gmail.com
- smartsite cms v1.0 Remote File include KARKOR23_at_hotmail.com
- Layered Defense Advisory: Format String Vuln in CA eTrust dh_at_layereddefense.com
- [KAPDA]MyBB 1.1.4~function_post.php~XSS Attack In URL tag addmimistrator_at_gmail.com
Wednesday, 28 June
- vCard PRO SQL Injection CrAzY.CrAcKeR_at_hotmail.com
Tuesday, 27 June
- [ MDKSA-2006:112 ] - Updated gd packages fix DoS vulnerability. security_at_mandriva.com
- [ MDKSA-2006:114 ] - Updated libwmf packages fixes embedded GD vulnerability security_at_mandriva.com
- Re: Calendar ( Provided by Codewalkers ) - SQL Injection krustevs_at_gmail.com
Wednesday, 28 June
- PHP-Nuke Module's Name Sections<<--V3 SQL Injection CrAzY.CrAcKeR_at_hotmail.com
- Secunia Research: DeluxeBB SQL Injection and File Inclusion Vulnerabilities Secunia Research
- BLOG:CMS <= 4.0.0k sql injection rgod_at_autistici.org
- [USN-307-1] mutt vulnerability Martin Pitt
- [ GLSA 200606-27 ] Mutt: Buffer overflow Sune Kloppenborg Jeppesen
- AzDGDatingPlatinum<<--v1.1.0 "view.php" SQL Injection CrAzY.CrAcKeR_at_hotmail.com
Tuesday, 27 June
- SyScan'06 Highlight - Is Phone Banking Safe? thomas48
Wednesday, 28 June
- Re[2]: Is Windows TCP/IP source routing PoC code available? ��_��
- MKPortal 1.0.1 Final ($ind) File Include Vulnerability (perl) stormhacker_at_hotmail.com
- PHP iCalendar Cross Site Scripting botan_at_linuxmail.org
- Cisco Security Advisory: Multiple Vulnerabilities in Wireless Control System Cisco Systems Product Security Incident Response Team
Tuesday, 27 June
- Microsoft's Real Test with Vista is Vulnerabilities Gadi Evron
Wednesday, 28 June
- [OpenPKG-SA-2006.011] OpenPKG Security Advisory (png) OpenPKG
Tuesday, 27 June
- RE: PHP security (or the lack thereof) Geo.
- Re: [MajorSecurity #18] Ralf Image Gallery <=0.7.4 - Multiple XSS, Remote File Include and directory traversal vulnerabilities Ralf
- Re: [funsec] Microsoft's Real Test with Vista is Vulnerabilities thomas48
Wednesday, 28 June
- Cisco Security Advisory: Access Point Web-Browser Interface Vulnerability Cisco Systems Product Security Incident Response Team
- RE: [funsec] Microsoft's Real Test with Vista is Vulnerabilities Larry Seltzer
Tuesday, 27 June
- [ MDKSA-2006:113 ] - Updated tetex packages fix embedded GD vulnerabilities security_at_mandriva.com
Monday, 26 June
- Re: PHP security (or the lack thereof) Tonnerre Lombard
Wednesday, 28 June
- Secunia Research: Opera SSL Certificate "Stealing" Weakness Secunia Research
Tuesday, 27 June
- Presentation: AT&T ISNN - "Case Studies in Finding Previously Unknown Vulnerabilities in Web Applications." Kenneth F. Belva
- Re: PHP security (or the lack thereof) Darren Reed
Wednesday, 28 June
- PHPClassifieds General luny_at_youfucktard.com
- Re: Files and cvars overwriting in Quake 3 engine (1.32c / rev 803 / ...) Luigi Auriemma
Tuesday, 27 June
- [KAPDA]http://myimei.com/security/2006-06-24/mybb104archive-modelight-parameter-extractionvarable-overwriting.html addmimistrator_at_gmail.com
Wednesday, 28 June
- DMA[2006-0628a] - 'Apple OSX launchd unformatted syslog() vulnerability' K F (lists)
- [ GLSA 200606-29 ] Tikiwiki: SQL injection and multiple XSS vulnerabilities Sune Kloppenborg Jeppesen
Thursday, 29 June
- CSRF in Nuked Klan 1.7 SP4.2 blwood_at_skynet.be
Wednesday, 28 June
- [ MDKSA-2006:115 ] - Updated mutt packages fix buffer overflow vulnerability security_at_mandriva.com
Thursday, 29 June
- Softbiz Banner Exchange 1.0 XSS securityconnection_at_gmail.com
- Secunia Research: phpRaid SQL Injection and File Inclusion Vulnerabilities Secunia Research
Wednesday, 28 June
- [ GLSA 200606-28 ] Horde Web Application Framework: XSS vulnerability Sune Kloppenborg Jeppesen
Thursday, 29 June
- Digital Armaments Security Advisory 29.06.2006: Siemens Speedstream Wireless Router Password Protection Bypass Vulnerability info_at_digitalarmaments.com
- rPSA-2006-0116-1 mutt Justin M. Forbes
- Novell Security contact address change Roman Drahtmueller
Wednesday, 28 June
- Multiple Vulnerabilities in PatchLink Update Server 6 Chris Steipp
Thursday, 29 June
- Novell Security Announcement NOVELL-SA:2006:001 Jim Short
- [security bulletin] HPSBTU02125 SSRT061105 rev.1 - HP Tru64 UNIX Running Perl 5.8.2 and earlier, Local Unauthorized Code Execution security-alert_at_hp.com
- [security bulletin] HPSBUX02122 SSRT061158 rev.2 - HP-UX Mozilla Remote Execution of Arbitrary Code, Denial of Service (DoS) security-alert_at_hp.com
- [ MDKSA-2006:114 ] - Updated libwmf packages fixes embedded GD vulnerability security_at_mandriva.com
- Msie 7.0 beta Crash Mr.Niega_at_gmail.com
- rPSA-2006-0120-1 gnupg Justin M. Forbes
- Browser bugs hit IE, Firefox today (SANS) Bill Stout
- Re: [Full-disclosure] Browser bugs hit IE, Firefox today (SANS) Juha-Matti Laurio
- ezWaiter v3.0 - XSS luny_at_youfucktard.com
- [SECURITY] [DSA 1104-1] New OpenOffice.org packages fix several vulnerabilities Martin Schulze
Friday, 30 June
- libwmf integer/heap overflow sean
- [ GLSA 200606-30 ] Kiax: Arbitrary code execution Sune Kloppenborg Jeppesen
- Zen-Cart 1.3.0.2 Full Path Disclosure o.y.6_at_hotmail.com
- [Kil13r-SA-20060701-1] Ahnlab Search Cross-Site Scripting Vulnerability mac68k_at_gmail.com
- [Kil13r-SA-20060701-2] MoniWiki 1.1.1 Cross-Site Scripting Vulnerability mac68k_at_gmail.com