Bugtraq (thread)

[VulnWatch] XSS & Header Injection in Drupal and vBulletin, Paul Laudanski, 2005/11/30
MDKSA-2005:220 - Updated kernel packages fix numerous vulnerabilities, Mandriva Security Team, 2005/11/30
MDKSA-2005:217 - Updated netpbm packages fix pnmtopng vulnerabilities, Mandriva Security Team, 2005/11/30
MDKSA-2005:218 - Updated kernel packages fix numerous vulnerabilities, Mandriva Security Team, 2005/11/30
MDKSA-2005:219 - Updated kernel packages fix numerous vulnerabilities, Mandriva Security Team, 2005/11/30
Opera 8.50 DoS with simple java applet, Marc Schoenefeld, 2005/11/30
- Re: Opera 8.50 DoS with simple java applet, Edward D Wiget, 2005/11/30
Gallery 2.x Security Advisory, Bharat Mediratta, 2005/11/30
possible privilege escalation on QNX Neutrino 6.3.0, pasquale minervini, 2005/11/30
N-13 News Remote SQL/PHP Shell injection, contropotere, 2005/11/30
APPLE-SA-2005-11-29 Security Update 2005-009, noreply, 2005/11/30
Xaraya <= 1.0.0 RC4 D.O.S / file corruption, retrogod, 2005/11/30
- Re: Xaraya <= 1.0.0 RC4 D.O.S / file corruption, Paul Laudanski, 2005/11/30
- Re: Re: Xaraya <= 1.0.0 RC4 D.O.S / file corruption, retrogod, 2005/11/30
Webmin miniserv.pl format string vulnerability, advisory, 2005/11/30
ASP-Rider Default.asp SQL Injection, info, 2005/11/30
[Full-disclosure] Panda Remote Heap Overflow, list, 2005/11/29
Core FORCE and OpenBSD PF's, Ivan Arce, 2005/11/28
[Full-disclosure] [FLSA-2005:166943] Updated php packages fix security issues, Marc Deslauriers, 2005/11/28
What is wrong with these people?, Paul Schmehl, 2005/11/28
Flaw in Syn Attack Protection on non-updated Microsoft OSes can lead to DoS, Luigi Mori, 2005/11/28
Google Talk cleartext credentials in process memory, unknown . pentester, 2005/11/28
Kadu remote DoS, michal, 2005/11/28
- Cisco IOS HTTP Server code injection/execution vulnerability-, picardos, 2005/11/28
- Re: - Cisco IOS HTTP Server code injection/execution vulnerability-, Florian Weimer, 2005/11/28
- Re: Re: - Cisco IOS HTTP Server code injection/execution vulnerability-, limfung, 2005/11/29
- RE: - Cisco IOS HTTP Server code injection/execution vulnerability-, Evans, Arian, 2005/11/30
- Re: Re: - Cisco IOS HTTP Server code injection/execution vulnerability-, picardos, 2005/11/30
Randshop all versiyon Sql İnjection, liz0, 2005/11/28
DNS query spam, Piotr Kamisiski, 2005/11/28
- Re: DNS query spam, Alexander Lourier, 2005/11/30
- Re: DNS query spam, Josep Ma Castells, 2005/11/30
  - Re: DNS query spam, Florian Weimer, 2005/11/30
  - Re: DNS query spam, Joe, 2005/11/30
- Re: DNS query spam, Antone Roundy, 2005/11/30
  - Re: DNS query spam, Stephen Stuart, 2005/11/30
- Re: DNS query spam, Florian Weimer, 2005/11/30
  - Re: DNS query spam, Piotr Kamisiski, 2005/11/30
  - Re: DNS query spam, Jim Pingle, 2005/11/30
Re: phpBB Code EXEC (v2.0.10), deane10, 2005/11/28
- Re: phpBB Code EXEC (v2.0.10), Ron van Daal, 2005/11/28
ZRCSA-200503 - ktools Buffer Overflow Vulnerability, siegfried, 2005/11/28
APC Security Advisory - PowerChute Network Shutdown's Web Interface Only Supports HTTP, Security . advisory, 2005/11/28
Guppy <= 4.5.9 Remote code execution, retrogod, 2005/11/28
ANN: Free endpoint security software released (Core FORCE 070.105), Core FORCE team, 2005/11/28
[Full-disclosure] WebCalendar Multiple Vulnerabilities, ascii, 2005/11/28
- [Full-disclosure] Re: WebCalendar Multiple Vulnerabilities, Paul Laudanski, 2005/11/30
  - [Full-disclosure] Re: WebCalendar Multiple Vulnerabilities, ascii, 2005/11/30
[Full-disclosure] Php Web Statistik Multiple Vulnerabilities, ascii, 2005/11/28
[Full-disclosure] Free Web Stat Multiple XSS Vulnerabilities, ascii, 2005/11/28
[Full-disclosure] [ GLSA 200511-23 ] chmlib, KchmViewer: Stack-based buffer overflow, Thierry Carrez, 2005/11/28
- [Full-disclosure] [ GLSA 200511-23 ] chmlib, KchmViewer: Stack-based buffer overflow, koon, 2005/11/28
[Full-disclosure] [ GLSA 200511-22 ] Inkscape: Buffer overflow, Thierry Carrez, 2005/11/28
Remote file include in phpgreetz, gb . network, 2005/11/26
Remote file include in Q-News, gb . network, 2005/11/26
Remote file include in Athena, gb . network, 2005/11/26
Webistanbul Control Panel Sql Injection, khc, 2005/11/26
XSS in PBLang 4.65 Profile.php/UCP.php, r0xes, 2005/11/26
Advisory 23/2005: vTiger multiple vulnerabilities, Christopher Kunz, 2005/11/25
- RE: Advisory 23/2005: vTiger multiple vulnerabilities, Bug Traq Lists, 2005/11/26
Mandriva Security, [at], 2005/11/25
- Re: Mandriva Security, Vincent Danen, 2005/11/26
eFiction <= 2.0 multiple vulnerabilities, retrogod, 2005/11/25
MDKSA-2005:216 - Updated fuse packages fix vulnerability, Mandriva Security Team, 2005/11/25
[Full-disclosure] [ GLSA 200511-21 ] Macromedia Flash Player: Remote arbitrary code execution, Thierry Carrez, 2005/11/25
[Full-disclosure] SEC Consult SA-20051125-0 :: More Vulnerabilities in vTiger CRM, SEC Consult Research, 2005/11/25
2nd CFP: Workshops at the 1st Int. Conf. on Availability, Reliability & Security, Manh Tho, 2005/11/24
freeFTPd 1.0.10 (Dos,Exploit), Stefan Lochbihler, 2005/11/24
Secunia Research: SpeedProject Products ZIP/UUE File Extraction Buffer Overflow, Secunia Research, 2005/11/24
[Full-disclosure] Advisory 23/2005: vTiger multiple vulnerabilities, Christopher Kunz, 2005/11/24
- Re: Advisory 23/2005: vTiger multiple vulnerabilities, Christopher Kunz, 2005/11/25
[Full-disclosure] MailEnable IMAP DOS, Josh Zlatin, 2005/11/24
MDKSA-2005:215 - Updated binutils packages fix vulnerabilities, Mandriva Security Team, 2005/11/23
XSS on Yahoo Mail, Richard Fuchshuber, 2005/11/23
- RE: XSS on Yahoo Mail, Will Wesley, 2005/11/24
  - Re: XSS on Yahoo Mail, Steven Champeon, 2005/11/26
    - Re: XSS on Yahoo Mail, Will Wesley, 2005/11/26
  - Re: XSS on Yahoo Mail, Jim Ley, 2005/11/26
  - RE: XSS on Yahoo Mail, Richard Fuchshuber, 2005/11/26
- Re: XSS on Yahoo Mail, Personal Account, 2005/11/26
- Re: XSS on Yahoo Mail, little . hacker, 2005/11/26
  - Re: XSS on Yahoo Mail, Matan Peled, 2005/11/26
- Re: XSS on Yahoo Mail, alireza hassani, 2005/11/26
  - Re: XSS on Yahoo Mail, Lance James, 2005/11/28
Google Talk Denial of Service - BenjiBug, James Evans, 2005/11/23
GeSWall Intrusion Prevention System 2.1 Released (Freeware), GentleSecurity Team, 2005/11/23
[security bulletin] SSRT051074 Revised - HP-UX Running xterm Local Unauthorized Access, security-alert, 2005/11/23
OTRS 1.x/2.x Multiple Security Issues, Moritz Naumann, 2005/11/23
Secunia Research: Opera Command Line URL Shell Command Injection, Secunia Research, 2005/11/22
Exploiting the Stack (Part I-IV), [at], 2005/11/22
[Full-disclosure] [ GLSA 200511-20 ] Horde Application Framework: XSS vulnerability, Sune Kloppenborg Jeppesen, 2005/11/22
Horde MIME Viewer vulnerability, daniel . schreckling, 2005/11/22
[Full-disclosure] [ GLSA 200511-19 ] eix: Insecure temporary file creation, Sune Kloppenborg Jeppesen, 2005/11/22
[Full-disclosure] [ GLSA 200511-18 ] phpSysInfo: Multiple vulnerabilities, Sune Kloppenborg Jeppesen, 2005/11/22
VHCS 2.x HTTP Error Cross Site Scripting, Moritz Naumann, 2005/11/22
- Re: VHCS 2.x HTTP Error Cross Site Scripting, Moritz Naumann, 2005/11/24
[KAPDA::#14] - PHPPost XSS and HTML Injection, alireza hassani, 2005/11/22
PmWiki 2.0.12 Cross Site Scripting, Moritz Naumann, 2005/11/22
RE: [Full-disclosure] Re: Your One-Stop Site For Sony Lawsuit Info, Christopher Carpenter, 2005/11/22
- RE: [Full-disclosure] Re: Your One-Stop Site For Sony Lawsuit Info, Paul Schmehl, 2005/11/22
  - Re: [Full-disclosure] Re: Your One-Stop Site For Sony Lawsuit Info, Anonymous Squirrel, 2005/11/22
    - Re: [Full-disclosure] Re: Your One-Stop Site For Sony Lawsuit Info, Eliah Kagan, 2005/11/22
    - Re: [Full-disclosure] Re: Your One-Stop Site For Sony Lawsuit Info, Kurt Buff, 2005/11/22
[Full-disclosure] [ GLSA 200511-17 ] FUSE: mtab corruption through fusermount, Thierry Carrez, 2005/11/22
[Full-disclosure] [USN-219-1] Linux kernel vulnerabilities, Martin Pitt, 2005/11/22
[Full-disclosure] Cisco PIX TCP Connection Prevention, Konstantin V. Gavrilenko, 2005/11/22
IE BUG, Mozilla DOS?, admin, 2005/11/21
- Re: IE BUG, Mozilla DOS?, Kyle Wheeler, 2005/11/23
Computer Terrorism Security Advisory (Reclassification) - Microsoft Internet Explorer JavaScript Window() Vulnerability, securityadvisory, 2005/11/21
Gadu-Gadu several vulnerabilities (version <= 7.20), Jaroslaw Sajko, 2005/11/21
Metro Olografix Crypto Meeting 2006 CFP, Angelo Dell'Aera, 2005/11/21
Re: Cisco Clean Access Agent (Perfigo) bypass, fakemeail, 2005/11/21
Google Search Appliance proxystylesheet Flaws, H D Moore, 2005/11/21
APBoard v [all] ---> [SQL injection], ksa_ksa82, 2005/11/21
[Full-disclosure] [USN-218-1] netpbm vulnerabilities, Martin Pitt, 2005/11/21
Security Advisory: Struts Error Message Cross Site Scripting, Irene Abezgauz, 2005/11/21
[Full-disclosure] cracking safes with thermal imaging, Michal Zalewski, 2005/11/21
[Full-disclosure] [ GLSA 200511-16 ] GNUMP3d: Directory traversal and insecure temporary file creation, Thierry Carrez, 2005/11/21
[Full-disclosure] [USN-217-1] Inkscape vulnerability, Martin Pitt, 2005/11/21
[Full-disclosure] [USN-190-2] ucs-snmp vulnerability, Martin Pitt, 2005/11/21
[Full-disclosure] [TKADV2005-11-004] Multiple Cross Site Scripting vulnerabilities in phpMyFAQ, tk, 2005/11/19
[security - exponentcms], Hans Wolters, 2005/11/19
MDKSA-2005:214 - Updated gdk-pixbuf/gtk+2.0 packages fix vulnerability, Mandriva Security Team, 2005/11/19
Mambo 0day Exploit out in the wild - mambo/skype hacked, rebarz99, 2005/11/19
Secunia Research: Winmail Server Multiple Vulnerabilities, Secunia Research, 2005/11/18
Secunia Research: MailEnable Buffer Overflow and Directory Traversal Vulnerabilities, Secunia Research, 2005/11/18
PHP-Fusion <= 6.00.206 Multiple Vulnerabilities, r . verton, 2005/11/18
- Re: PHP-Fusion <= 6.00.206 Multiple Vulnerabilities, sheldon, 2005/11/19
Snagging Security Tokens to Elevate Privileges, David Litchfield, 2005/11/18
[Full-disclosure] [ GLSA 200511-15 ] Smb4k: Local unauthorized file access, Sune Kloppenborg Jeppesen, 2005/11/18
[Full-disclosure] Snagging Security Tokens to Elevate Privileges, David Litchfield, 2005/11/18
[Full-disclosure] Google Base, Petko Petkov, 2005/11/18
- [Full-disclosure] Re: Google Base, DRE, 2005/11/19
- [Full-disclosure] Re: Google Base, Alexander Klimov, 2005/11/20
  - [Full-disclosure] Your One-Stop Site For Sony Lawsuit Info, Larry Seltzer, 2005/11/21
    - [Full-disclosure] Re: Your One-Stop Site For Sony Lawsuit Info, Anthony R. Nemmer, 2005/11/22
    - Re: [Full-disclosure] Re: Your One-Stop Site For Sony Lawsuit Info, Jason Coombs, 2005/11/22
    - Re: [Full-disclosure] Re: Your One-Stop Site For Sony Lawsuit Info, Paul Schmehl, 2005/11/22
    - Re: [Full-disclosure] Re: Your One-Stop Site For Sony Lawsuit Info, Jason Coombs, 2005/11/22
  - Re: [Full-disclosure] Re: Google Base, Petko Petkov, 2005/11/21
- [Full-disclosure] Re: Google Base, Stefan . Laudat, 2005/11/22
  - [Full-disclosure] Re: Google Base, Petko Petkov, 2005/11/22
- RE: [Full-disclosure] Google Base, Christopher Carpenter, 2005/11/18
  - Re: [Full-disclosure] Google Base, Petko Petkov, 2005/11/18
- RE: [Full-disclosure] Google Base, Krpata, Tyler, 2005/11/18
Re: [Full-disclosure] freeftpd MKD buffer overflow etc... [exploit], Expanders, 2005/11/17
[KAPDA::#13] - XMB HTML Injection & Path Disclosure., alireza hassani, 2005/11/17
MDKSA-2005:213 - Updated php packages fix multiple vulnerabilities, Mandriva Security Team, 2005/11/17
ShmooCon 2006 - Washington DC, B Potter, 2005/11/17
[Full-disclosure] iDEFENSE Security Advisory 11.17.05: Qualcomm WorldMail IMAP Server Directory Traversal Vulnerability, labs-no-reply@idefense.com, 2005/11/17
[security bulletin] SSRT5979 - HP-UX Running IPSec Remote Denial of Service (DoS), security-alert, 2005/11/16
MDKSA-2005:212 - Updated egroupware packages to address phpldapadmin, phpsysinfo vulnerabilities, Mandriva Security Team, 2005/11/16
Buffer OverFlow For Php 4.3.10 and other ?? Local, papipsycho, 2005/11/16
[security bulletin] SSRT5979 - HP Jetdirect 635n IPv6/IPsec Print Server (J7961A) Remote Denial of Service (DoS), Security Alert, 2005/11/16
In response to ISAKMP 'vulnerabilities', sigint, 2005/11/16
[security bulletin] SSRT051251 - Apache-based Web Server on HP-UX mod_ssl, proxy_http, Remote Execution of Arbitrary Code, Denial of Service (DoS), and Unauthorized Access, security-alert, 2005/11/16
Buffer Overrun in FTGate4 Groupware Mail server, io, 2005/11/16
Database servers on XP and the curious flaw, David Litchfield, 2005/11/16
SUSE Security Announcement: gdk-pixbuf, gtk2 (SUSE-SA:2005:065), Thomas Biege, 2005/11/16
Schneier's PasswordSafe password validation flaw, info, 2005/11/16
[Full-disclosure] [ GLSA 200511-14 ] GTK+ 2, GdkPixbuf: Multiple XPM decoding vulnerabilities, Thierry Carrez, 2005/11/16
[Full-disclosure] Database servers on XP and the curious flaw, David Litchfield, 2005/11/16
- Re: [Full-disclosure] Database servers on XP and the curious flaw, Eliah Kagan, 2005/11/16
  - Re: [Full-disclosure] Database servers on XP and the curious flaw, David Litchfield, 2005/11/16
    - Re: [Full-disclosure] Database servers on XP and the curious flaw, Eliah Kagan, 2005/11/16
  - Message not available
    - Re: [Full-disclosure] Database servers on XP and the curious flaw, Eliah Kagan, 2005/11/16
    - RE: [Full-disclosure] Database servers on XP and the curious flaw, James Tucker, 2005/11/16
    - Re: [Full-disclosure] Database servers on XP and the curious flaw, Eliah Kagan, 2005/11/16
[Full-disclosure] [USN-216-1] GDK vulnerabilities, Martin Pitt, 2005/11/16
[Full-disclosure] freeftpd USER bufferoverflow, barabas mutsonline, 2005/11/16
APPLE-SA-2005-11-15 iTunes 6 for Windows, noreply, 2005/11/16
Critical SQL Injection PHPNuke <= 7.8, sp3x, 2005/11/15
[securityzone@macromedia.com: Macromedia Security Bulletins], noreply, 2005/11/15
Authentication vulnerability in Belkin wireless devices, Andrei Mikhailovsky, 2005/11/15
- Message not available
  - Re: Authentication vulnerability in Belkin wireless devices, Andrei Mikhailovsky, 2005/11/16
Template Seller Pro 3.25, r . verton, 2005/11/15
Affiliate Network Pro v7.2 SQL Injections, Arbitrary code execution, XSS, r . verton, 2005/11/15
[Full-disclosure] iDEFENSE Security Advisory 11.15.05: Multiple Vendor Insecure Call to CreateProcess() Vulnerability, labs-no-reply@idefense.com, 2005/11/15
[Full-disclosure] iDEFENSE Security Advisory 11.15.05: Multiple Vendor GTK+ gdk-pixbuf XPM Loader Heap Overflow Vulnerability, labs-no-reply@idefense.com, 2005/11/15
Three years and ten months without a patch, David Litchfield, 2005/11/15
PHPWCMS - Directory traversal vulnerability,CSS attack, Stefan Lochbihler, 2005/11/15
[Full-disclosure] [ GLSA 200511-13 ] Sylpheed, Sylpheed-Claws: Buffer overflow in LDIF importer, Thierry Carrez, 2005/11/15
[Full-disclosure] Three years and ten months without a patch, David Litchfield, 2005/11/15
[Full-disclosure] [ GLSA 200511-12 ] Scorched 3D: Multiple vulnerabilities, Thierry Carrez, 2005/11/15
[Full-disclosure] [FS-05-02] Multiple vulnerabilities in phpMyAdmin, Toni Koivunen, 2005/11/15
[Full-disclosure] [PHPADSNEW-SA-2005-002] phpAdsNew and phpPgAds 2.0.7 fix multiple vulnerabilities, Matteo Beccati, 2005/11/15
[Full-disclosure] [xfocus-AD-051115]Multiple antivirus failed to scan malicous filename bypass vulnerability, alert7@xfocus.org, 2005/11/15
- [Full-disclosure] Re: [xfocus-AD-051115]Multiple antivirus failed to scan malicous filename bypass vulnerability, Thierry Zoller, 2005/11/15
  - RE: [Full-disclosure] Re: [xfocus-AD-051115]Multiple antivirus failedto scan malicous filename bypass vulnerability, Aditya Deshmukh, 2005/11/16
- [Full-disclosure] Re: [xfocus-AD-051115]Multiple antivirus failed to scan malicous filename bypass vulnerability, Marco Monicelli, 2005/11/16
[Full-disclosure] [FLSA-2005:158801] Updated bzip2 packages fix security issues, Marc Deslauriers, 2005/11/14
[Full-disclosure] [FLSA-2005:152794] Updated rp-pppoe package fixes security issue, Marc Deslauriers, 2005/11/14
- [Full-disclosure] Re: [FLSA-2005:152794] Updated rp-pppoe package fixes security issue, David F. Skoll, 2005/11/15
[Full-disclosure] [FLSA-2005:123013] Updated xchat package fixes security issue, Marc Deslauriers, 2005/11/14
Multible Sql injections in Wizz Forum, s2b, 2005/11/14
Midicart sql injection, crazy frog crazy frog, 2005/11/14
- Re: Midicart sql injection, [at], 2005/11/15
Cyphor (Release: 0.19) Sql injection, s2b, 2005/11/14
1-2-All Broadcast E-mail Software vulnerable to a classic SQL admin, bhs_team, 2005/11/14
Malware Removal and Prevention Procedure, Paul Laudanski, 2005/11/14
phpBB 2.0.18 SQL Query problem, max, 2005/11/14
- Re: phpBB 2.0.18 SQL Query problem, Ron van Daal, 2005/11/15
- Re: phpBB 2.0.18 SQL Query problem, max, 2005/11/15
GAO report on e-voting, Atom Smasher, 2005/11/14
List of Security-oriented Fairs/Events/Conferences?, Rainer Duffner, 2005/11/14
- Re: List of Security-oriented Fairs/Events/Conferences?, Saeed Abu Nimeh, 2005/11/15
- RE: List of Security-oriented Fairs/Events/Conferences?, dave kleiman, 2005/11/15
  - Re: List of Security-oriented Fairs/Events/Conferences?, Luca Sambucci, 2005/11/16
- RE: List of Security-oriented Fairs/Events/Conferences?, Jeremy Epstein, 2005/11/15
- RE: List of Security-oriented Fairs/Events/Conferences?, Juha-Matti Laurio, 2005/11/16
MD4 and MD5 collision generators, sflist, 2005/11/14
[security bulletin] HPSBUX02075 SSRT051074 - HP-UX Running xterm Local Unauthorized Access, security-alert, 2005/11/14
Beta product testing, Bill Stout, 2005/11/14
[KAPDA::#12] - ekinboard XSS and HTML Injection, alireza hassani, 2005/11/14
[ADVISORY] CISCO ASA Failover DoS Vulnerability, Amin Tora, 2005/11/14
- RE: [ADVISORY] CISCO ASA Failover DoS Vulnerability, Randy Ivener (rivener), 2005/11/14
fipsCMS light - vulnerable to script injection., preben, 2005/11/14
DMA[2005-1112a] - 'Veritas Storage Foundation VCSI18N_LANG buffer overflow', Kevin Finisterre, 2005/11/14
- Re: DMA[2005-1112a] - 'Veritas Storage Foundation VCSI18N_LANG buffer overflow', Dana Hudes, 2005/11/15
XOOPS 2.2.3 Final arbitrary local inclusion / XOOPS WF-Downloads module v 2.05 SQL Injection, retrogod, 2005/11/14
PHPCalendar (and some more codegrrl.com products) arbitrary code execution, r . verton, 2005/11/14
PollVote Remote File Inclusion, stormhacker, 2005/11/14
ZRCSA-200502 - phpAdsNew SQL Injection Vulnerabilities, Siegfried, 2005/11/14
SQL injection in phpWebThing 1.4.4, A . 1 . M, 2005/11/14
Multiple Bugs in MyBB 1.0 PR2 Rev 686(Updated Nov 1, 2005), syini666, 2005/11/14
MDKSA-2005:211 - Updated lynx packages fix critical vulnerability, Mandriva Security Team, 2005/11/14
[Full-disclosure] Walla TeleSite Multiple Vulnerabilities, sinneR, 2005/11/14
[Full-disclosure] [FLSA-2005:152848] Updated glibc packages fix security issues, Marc Deslauriers, 2005/11/14
[Full-disclosure] [ GLSA 200511-11 ] linux-ftpd-ssl: Remote buffer overflow, Thierry Carrez, 2005/11/13
[Full-disclosure] [ GLSA 200511-10 ] RAR: Format string and buffer overflow vulnerabilities, Thierry Carrez, 2005/11/13
[Full-disclosure] [ GLSA 200511-09 ] Lynx: Arbitrary command execution, Thierry Carrez, 2005/11/13
[Full-disclosure] [ GLSA 200511-08 ] PHP: Multiple vulnerabilities, Thierry Carrez, 2005/11/13
[Full-disclosure] Advisory 22/2005: Multiple vulnerabilities in phpSysInfo, Christopher Kunz, 2005/11/13
High Risk Flaw in RealPlayer, NGSSoftware Insight Security Research, 2005/11/13
[Full-disclosure] phpBB 2.0.18 SQL Query problem, Maksymilian Arciemowicz, 2005/11/13
[Full-disclosure] iDefense Security Advisory 11.11.05: Multiple Vendor Lynx Command Injection Vulnerability, labs-no-reply@idefense.com, 2005/11/13
[Full-disclosure] iDEFENSE Security Advisory 11.10.05: Tikiwiki tiki-user_preferences Command Injection Vulnerability, iDEFENSE Labs, 2005/11/13
[Full-disclosure] iDEFENSE Security Advisory 11.10.05: Tikiwiki tiki-editpage Arbitrary File Exposure Vulnerability, iDEFENSE Labs, 2005/11/13
[Full-disclosure] iDEFENSE Security Advisory 11.10.05: Stack Overflow in Veritas Netbackup Enterprise Server, iDEFENSE Labs, 2005/11/13
[Full-disclosure] [EEYEB-20050701] - RealPlayer Zipped Skin File Buffer Overflow II, Advisories, 2005/11/13
[Full-disclosure] [EEYEB-20050510] - RealPlayer Data Packet Stack Overflow, Advisories, 2005/11/13
Moodle <=1.6dev blind SQL Injection, retrogod, 2005/11/13
Folder Guard exe files protection bypass, ShadowBeast, 2005/11/13
MDKSA-2005:210 - Updated w3c-libwww packages fixes DoS vulnerability., Mandriva Security Team, 2005/11/13
MDKSA-2005:209 - Updated fetchmail packages fixes fetchmailconf vulnerability, Mandriva Security Team, 2005/11/13
MDKSA-2005:208 - Updated emacs packages fix Lisp vulnerability, Mandriva Security Team, 2005/11/13
MDKSA-2005:207 - Updated libungif packages fix various vulnerabilities, Mandriva Security Team, 2005/11/13
[security bulletin] SSRT051012 - HP-UX envd Local Execution of Privileged Code, security-alert, 2005/11/13
[security bulletin] SSRT051014 - HP-UX Trusted Mode remshd Remote Unauthorized Access, security-alert, 2005/11/13
[security bulletin] SSRT051064 Revised - HP-UX ftpd Remote Unauthorized Data Access, security-alert, 2005/11/13
[security bulletin] SSRT051041 Revised - HP-UX Mozilla Remote Unauthorized Execution of Privileged Code or Denial of Service (DoS), security-alert, 2005/11/13
[Full-disclosure] [FS-05-01] Multiple vulnerabilities in phpAdsNew, Toni Koivunen, 2005/11/13
[Full-disclosure] [FLSA-2005:166941] Updated httpd and mod_ssl packages fix two security issues, Marc Deslauriers, 2005/11/13
ASPKnowledgebase vulnerable to XSS injection., preben, 2005/11/13
ASPKnowledgebase vulnerable to SQL-inject, preben, 2005/11/13
New Bug KESM in GoogleTalk, natalylopez380, 2005/11/13
- Re: New Bug KESM in GoogleTalk, crowdat, 2005/11/13
- Re: New Bug KESM in GoogleTalk, Cory Altheide, 2005/11/14
- Re: New Bug KESM in GoogleTalk, kahrny, 2005/11/18
Antville 1.1 Cross Site Scripting, Moritz Naumann, 2005/11/13
Multiple security issues in TikiWiki 1.9.x, Moritz Naumann, 2005/11/13
- Re: Multiple security issues in TikiWiki 1.9.x, mose, 2005/11/28
CYBSEC - Security Advisory: Multiple XSS in SAP WAS, Leandro Meiners, 2005/11/13
CYBSEC - Security Advisory: Phishing Vector in SAP WAS, Leandro Meiners, 2005/11/13
MDKSA-2005:206 - Updated openvpn packages fix multiple vulnerabilities, Mandriva Security Team, 2005/11/13
CYBSEC - Security Advisory: HTTP Response Splitting in SAP WAS, Leandro Meiners, 2005/11/13
[Full-disclosure] [USN-151-4] rpm vulnerability, Martin Pitt, 2005/11/13
[Full-disclosure] [EEYEB-20050329] Windows Metafile Multiple Heap Overflows, Advisories, 2005/11/13
[Full-disclosure] [EEYEB-20050901] Windows Metafile SetPalette Entries Heap OVerflow Vulnerability (Graphics Rendering Engine Vulnerability), Advisories, 2005/11/13
MDKSA-2005:205 - Updated clamav packages fix multiple vulnerabilities, Mandriva Security Team, 2005/11/13
Call For Papers, first-2006papers, 2005/11/13
Oracle DBMS_ASSERT and the October 2005 CPU, NGSSoftware Insight Security Research, 2005/11/13
Oracle October 2005 CPU Problems, NGSSoftware Insight Security Research, 2005/11/13
[Full-disclosure] Advisory 21/2005: Multiple vulnerabilities in PHPKIT, Christopher Kunz, 2005/11/13
Hidden accounts on sony vaio laptops, yash . kadakia, 2005/11/13
- Re: Hidden accounts on sony vaio laptops, Williams, James K, 2005/11/13
LayerOne 2006 CFP Released, Layer One, 2005/11/13
e107 Games System exploit, willey_wonka, 2005/11/13
[Full-disclosure] RANKBOX <= XSS vulnerability, spyburn mexico rlz, 2005/11/13
Zone Labs Products Advance Program Control and OS Firewall (Behavioral Based) Technology Bypass Vulnerability, Debasis Mohanty, 2005/11/13
Advanced Guestbook 2.2 ( SQL Injection Exploit ), bhs_team, 2005/11/13
Asterisk vmail.cgi vulnerability, advisories+asterisk, 2005/11/13
TWiki 20030201 VIEW string remote command execution, [at], 2005/11/13
upload phpshell in PHPFM, [at], 2005/11/13
XSS vulnerability in names.co.uk framed hosting, reuben . 31, 2005/11/13
Path disclosure in CuteNews <= 1.4.0, poizon, 2005/11/13
OSTE v1.0 Remote Command Exucetion, khc, 2005/11/13
[Full-disclosure] [USN-215-1] fetchmailconf vulnerability, Martin Pitt, 2005/11/13
Work in Progress: FileZilla Server Terminal V0.9.4d Buffer Overflow, inge . henriksen, 2005/11/13
- Re: Work in Progress: FileZilla Server Terminal V0.9.4d Buffer Overflow, inge . henriksen, 2005/11/21
Re: [Full-disclosure] Is Flash Player 5 not vulnerable or not supported?... Macromedia Flash Player ActionDefineFunction Memory Corruption, Juha-Matti Laurio, 2005/11/13
[Full-disclosure] Is Flash Player 5 not vulnerable or not supported?... Macromedia Flash Player ActionDefineFunction Memory Corruption, Ken S, 2005/11/13
[Full-disclosure] [ Suresec Advisories ] - Mac OS X (xnu) multiple information leaks., suresec advisories, 2005/11/13
[Full-disclosure] [TKADV2005-11-001] Multiple vulnerabilities in PHPlist, tk, 2005/11/13
EUSecWest/London Call for Papers and PacSec/Tokyo announcements, Dragos Ruiu, 2005/11/13
[Full-disclosure] [USN-214-1] libungif vulnerabilities, Martin Pitt, 2005/11/13
[Full-disclosure] SEC Consult SA-20051107-1 :: Macromedia Flash Player ActionDefineFunction Memory Corruption, Bernhard Mueller, 2005/11/13
[Full-disclosure] SEC Consult SA-20051107-0 :: toendaCMS multiple vulnerabilites, Bernhard Mueller, 2005/11/13
[Full-disclosure] [ GLSA 200511-07 ] OpenVPN: Multiple vulnerabilities, Thierry Carrez, 2005/11/13
[Full-disclosure] [ GLSA 200511-06 ] fetchmail: Password exposure in fetchmailconf, Thierry Carrez, 2005/11/13
[Full-disclosure] [ GLSA 200511-05 ] GNUMP3d: Directory traversal and XSS vulnerabilities, Sune Kloppenborg Jeppesen, 2005/11/13
[Full-disclosure] [ GLSA 200511-04 ] ClamAV: Multiple vulnerabilities, Sune Kloppenborg Jeppesen, 2005/11/13
Gallery_v2.4 SQL Injection, abducter_minds, 2005/11/13
Zoomblog HTML Injection Vulnerability, sikikmail, 2005/11/13
- Zoomblog HTML Injection Vulnerability, sikikmail, 2005/11/13
- Re: Zoomblog HTML Injection Vulnerability, RBA, 2005/11/13
Re: OpenVPN[v2.0.x]: foreign_option() formart string vulnerability., v9, 2005/11/13
[waraxe-2005-SA#043] - Sql injection in Phorum 5.0.20 and earlier, come2waraxe, 2005/11/13
Failles dans Invision Power Board 2.1 [xss], benjilenoob, 2005/11/13
- Invision Power Board 2.1 : Multiple XSS Vulnerabilities, Jerome Athias, 2005/11/13
Xss - Html injection in XMB, s2b, 2005/11/13
Invision Power Board Privilege Esaclation (2.0.1 + more), Anti Matter, 2005/11/13
Apache Tomcat 5.5.x remote Denial Of Service, David Maciejak, 2005/11/13
I-Saudi.Com First K-S-A WarGamE, S3ude, 2005/11/13
XSS & SQL injection in phpWebThing, xx_hack_xx_2004, 2005/11/13
Zoomblog <IMG> BBCode Tag JavaScript Injection Vulnerability, sikikmail, 2005/11/05
Sql injection in ibProArcade, bhfh01, 2005/11/05
DMA[2005-1104a] - 'GpsDrive friendsd2 format string vulnerability', kfinisterre, 2005/11/05
[Full-disclosure] [EEYEB-20050627B] Macromedia Flash Player Improper Memory Access Vulnerability, Advisories, 2005/11/04
[Full-disclosure] iDEFENSE Security Advisory 11.04.05: Clam AntiVirus Cabinet-file handling Denial of Service Vulnerability, iDEFENSE Labs, 2005/11/04
[Full-disclosure] iDEFENSE Security Advisory 11.04.05: Clam AntiVirus tnef_attachment() DoS Vulnerability, iDEFENSE Labs, 2005/11/04
SUSE Security Announcement: pwdutils, shadow (SUSE-SA:2005:064), Ludwig Nussel, 2005/11/04
Parosproxy 3.2.6: Local Exploitation, Command injection vulnerability, Marc Schoenefeld, 2005/11/04
ZDI-05-002: Clam Antivirus Remote Code Execution, zdi-disclosures, 2005/11/04
Secunia Research: cPanel Entropy Chat Script Insertion Vulnerability, Secunia Research, 2005/11/04
Remotely DoSing JBoss 4.0.2 with serialized java objects, Marc Schoenefeld, 2005/11/04
[Full-disclosure] [ GLSA 200511-03 ] giflib: Multiple vulnerabilities, Thierry Carrez, 2005/11/04
[Full-disclosure] Advisory: Apple QuickTime PICT Remote Memory Overwrite, Piotr Bania, 2005/11/04
[Full-disclosure] Advisory: Apple QuickTime Player Remote Denial Of Service, Piotr Bania, 2005/11/04
[Full-disclosure] Advisory: Apple QuickTime Player Remote Integer Overflow (2), Piotr Bania, 2005/11/04
[Full-disclosure] Advisory: Apple QuickTime Player Remote Integer Overflow (1), Piotr Bania, 2005/11/04
[Full-disclosure] H4-CREW-000003 Advirosy: Superclick XSS via popup.php, tHe cReW, 2005/11/03
On Interpretation Conflict Vulnerabilities, Steven M. Christey, 2005/11/03
Mambo Open Source, Path disclosure, alireza hassani, 2005/11/03
- Re: Mambo Open Source, Path disclosure, Vasiliy, 2005/11/05
- Re: Re: Mambo Open Source, Path disclosure, trueend5, 2005/11/13
Norton Unerase - Need Contact, alex cottle, 2005/11/03
CuteNews 1.4.1 remote code execution, retrogod, 2005/11/03
Black Hat Federal and Europe CFP and Registration now open, Jeff Moss, 2005/11/03
Stack Overflow Basics, [a-t], 2005/11/03
Re: [Full-disclosure] Advisory 18/2005: PHP Cross Site Scripting (XSS)XVulnerability in phpinfo(), phole, 2005/11/03
- Re: [Full-disclosure] Advisory 18/2005: PHP Cross Site Scripting (XSS)XVulnerability in phpinfo(), Robert Waters, 2005/11/04
[Full-disclosure] [CIRT.DK] Ipswitch Whatsup small Business 2004 - Directory Traversal, CIRT.DK Advisory, 2005/11/03
MDKSA-2005:204 - Updated wget packages fix vulnerability, Mandriva Security Team, 2005/11/03
Simple PHP Blog: Multiple XSS Vulnerabilities, enji, 2005/11/03
[OpenPKG-SA-2005.023] OpenPKG Security Advisory (openvpn), OpenPKG, 2005/11/03
[Full-disclosure] FW: [SR #:1-40483753] RE: Update for the magic byte bug, Auri Rahimzadeh, 2005/11/03
[Full-disclosure] Socket termination in Battle Carry .005, Luigi Auriemma, 2005/11/03
[Full-disclosure] Buffer-overflow and crash in FlatFrag 0.3, Luigi Auriemma, 2005/11/03
[Full-disclosure] Buffer-overflow and directory traversal in Asus Video Security 3.5.0.0, Luigi Auriemma, 2005/11/03
[Full-disclosure] [ TZO-012005 ] F-Prot/Frisk Anti Virus bypass - ZIP Version Header, Thierry Zoller, 2005/11/03
[Full-disclosure] Limited directory traversal in NeroNET 1.2.0.2, Luigi Auriemma, 2005/11/03
[Full-disclosure] Buffer-overflow in Glider collect'n kill 1.0.0.0, Luigi Auriemma, 2005/11/03
[Full-disclosure] Multiple vulnerabilities in Scorched 3D 39.1, Luigi Auriemma, 2005/11/03
[Full-disclosure] Buffer-overflow in GO-Global for Windows 3.1.0.3270, Luigi Auriemma, 2005/11/03
MDKSA-2005:202 - Updated squirrelmail packages fix vulnerability, Mandriva Security Team, 2005/11/03
MDKSA-2005:203 - Updated gda2.0 packages fix string format vulnerability, Mandriva Security Team, 2005/11/03
[Full-disclosure] Advisory 17/2005: phpBB Multiple Vulnerabilities, Stefan Esser, 2005/11/03
- [Full-disclosure] Advisory 17/2005: phpBB Multiple Vulnerabilities, sesser, 2005/11/03
[security bulletin] SSRT051029 rev.0 - HP OpenVMS Local Denial of Service (DoS), security-alter, 2005/11/03
[Full-disclosure] [ GLSA 200511-02 ] QDBM, ImageMagick, GDAL: RUNPATH issues, Thierry Carrez, 2005/11/03
[Full-disclosure] [ GLSA 200511-01 ] libgda: Format string vulnerabilities, Thierry Carrez, 2005/11/03
[Full-disclosure] On Interpretation Conflict Vulnerabilities, Steven M. Christey, 2005/11/03
- Re: [Full-disclosure] On Interpretation Conflict Vulnerabilities, Florian Weimer, 2005/11/03
HYSA-2005-009 Elite Forum 1.0.0.0 XSS Vulnerability, h4cky0u . org, 2005/11/03
VUBB XSS & path disclosure Vulnerabilities, alireza hassani, 2005/11/03
[tool] multispoof - parallel spoofing for throughput increase, Pawel Pokrywka, 2005/11/03
[Full-disclosure] Gateway 7001 A/B/G AP: Selection of improper regulatory domains and channels, Andrew Lockhart, 2005/11/03
[Full-disclosure] Snort Back Orifice Preprocessor Exploit (Win32 targets), Kira, 2005/11/03
[Full-disclosure] HYSA-2005-009 Elite Forum 1.0.0.0 XSS Vulnerability, h4cky0u, 2005/11/01
[Full-disclosure] Re: Advisory 18/2005: PHP Cross Site Scripting (XSS) Vulnerability in phpinfo(), Stefan Esser, 2005/11/01
[Full-disclosure] readdir_r considered harmful, Ben Hutchings, 2005/11/01
- Re: [Full-disclosure] readdir_r considered harmful, 3APA3A, 2005/11/01
  - Re: [Full-disclosure] readdir_r considered harmful, Ben Hutchings, 2005/11/03
- [Full-disclosure] Re: readdir_r considered harmful, Ben Hutchings, 2005/11/03
- [Full-disclosure] Re: readdir_r considered harmful, Casper . Dik, 2005/11/05
  - Re: [Full-disclosure] Re: readdir_r considered harmful, Ulrich Drepper, 2005/11/13
    - Re: [Full-disclosure] Re: readdir_r considered harmful, Casper . Dik, 2005/11/13
    - Re: [Full-disclosure] Re: readdir_r considered harmful, Ulrich Drepper, 2005/11/13
    - Re: [Full-disclosure] Re: readdir_r considered harmful, Casper . Dik, 2005/11/13
    - Re: [Full-disclosure] Re: readdir_r considered harmful, Andrew Miller, 2005/11/13
    - Re: [Full-disclosure] Re: readdir_r considered harmful, Andrew Farmer, 2005/11/13
    - Re: [Full-disclosure] Re: readdir_r considered harmful, Casper . Dik, 2005/11/13