Bugtraq (thread)

MyBB 1.0 SQL injection in uploading file, addmimistrator, 2005/12/31
MyBB XSS cross-site scripting, addmimistrator, 2005/12/31
[Full-disclosure] PHPDocumentor Cross-Site Scripting, zeus olimpusklan, 2005/12/31
[KAPDA::#18] - WebWiz Products SQL Injection, advisory, 2005/12/30
WMF browser-ish exploit vectors, Evans, Arian, 2005/12/30
WTF??, veil_of_darkness, 2005/12/30
Secunia Research: TUGZip ARJ Archive Handling Buffer Overflow Vulnerability, Secunia Research, 2005/12/30
phpbb2.0.19 fixes security issues, Paul Laudanski, 2005/12/30
[Full-disclosure] rssh: root privilege escalation flaw, Derek Martin, 2005/12/30
[Full-disclosure] [ GLSA 200512-18 ] XnView: Privilege escalation, Thierry Carrez, 2005/12/30
Black Hat Federal and Europe Call for Papers, Jeff Moss, 2005/12/29
[Full-disclosure] Advisory 26/2005: TinyMCE Compressor Vulnerabilities, Stefan Esser, 2005/12/29
Airscanner Mobile Security Advisory #05083102 Spb Kiosk Engine Program Bypass, contact . removethis, 2005/12/29
PhpDocumentor <= 1.3.0 rc4 Arbitrary remote/local inclusion, retrogod, 2005/12/29
[Full-disclosure] [ GLSA 200512-17 ] scponly: Multiple privilege escalation issues, Thierry Carrez, 2005/12/29
WMF Exploit, davidribyrne, 2005/12/29
- WMF Exploit, davidribyrne, 2005/12/29
- RE: WMF Exploit, Hayes, Bill, 2005/12/29
  - RE: WMF Exploit, Bill Busby, 2005/12/30
    - Re: WMF Exploit, Paul Laudanski, 2005/12/30
- WMF exploit, ninjapicook, 2005/12/29
- RE: WMF Exploit, Derick Anderson, 2005/12/30
[BUGZILLA] Security advisory for Bugzilla < 2.16.11, David Miller, 2005/12/28
Exploitation of Windows WMF on the web, Daniel Bonekeeper, 2005/12/28
- Re: Exploitation of Windows WMF on the web, psgw, 2005/12/30
MDKSA-2005:238 - Updated php/php-mbstring packages fix mail injection vulnerability, Mandriva Security Team, 2005/12/28
[Full-disclosure] [ GLSA 200512-16 ] OpenMotif, AMD64 x86 emulation X libraries: Buffer overflows in libUil library, Thierry Carrez, 2005/12/28
RE: [Full-disclosure] Someone wasted a nice bug on spyware..., Paul, 2005/12/28
- Re: [Full-disclosure] Someone wasted a nice bug on spyware..., Tomasz Kokowski, 2005/12/29
- RE: [Full-disclosure] Someone wasted a nice bug on spyware..., Jim Serino, 2005/12/29
Is this a new exploit?, noemailpls, 2005/12/27
- Re: Is this a new exploit?, H D Moore, 2005/12/28
- Re: Is this a new exploit?, redxii1234, 2005/12/28
- Re: Is this a new exploit?, Andreas Marx, 2005/12/28
- RE: Is this a new exploit?, Portz, Jon, 2005/12/28
[Full-disclosure] Juniper NSM remote Denial Of Service, David Maciejak, 2005/12/27
[Full-disclosure] bug in oscomerce, zeus olimpusklan, 2005/12/27
Malware sample site, mvalsmith, 2005/12/27
Obsidis n1 released!, angelo, 2005/12/27
Secunia Research: IceWarp Web Mail Multiple File Inclusion Vulnerabilities, Secunia Research, 2005/12/27
Cerberus Helpdesk multiple vulnerabilities., A. Ramos, 2005/12/27
CFP - IT Underground 2006, Prague, Czech Republic, Piotr Sobolewski, 2005/12/27
[BuHa-Security] DoS Vulnerability in M$ IE 6 SP2 #3, bugtraq, 2005/12/27
[BuHa-Security] DoS Vulnerability in M$ IE 6 SP2 #2, bugtraq, 2005/12/27
Found new bug, hackeriri, 2005/12/27
[BuHa-Security] DoS Vulnerability in M$ IE 6 SP2 #1, bugtraq, 2005/12/27
Airscanner Mobile Security Advisory #0508310 Spb Kiosk Engine Administrator Password & Information Disclosure, contact . removethis, 2005/12/27
Dev web management system <= 1.5 SQL injection / cross site scripting, retrogod, 2005/12/27
[Full-disclosure] [ GLSA 200512-15 ] rssh: Privilege escalation, Stefan Cornelius, 2005/12/27
MDKSA-2005:237 - Updated cpio packages fix buffer overflow on x86_64, Mandriva Security Team, 2005/12/27
MDKSA-2005:236 - Updated fetchmail packages fix vulnerability, Mandriva Security Team, 2005/12/27
[Full-disclosure] Yahoo mail Cross Site Scripting vulnerability, simo, 2005/12/25
- Yahoo mail Cross Site Scripting vulnerability, simo, 2005/12/30
[Full-disclosure] Multiple Translation websites Cross Site Scripting vulnerability: Google, Altavista, IBM, freetranslation, worldlingo, etc, simo, 2005/12/25
Electric Sheep window-id stack overflow, MichaelAiello, 2005/12/23
Multiple Network-related Vulnerabilities in Electric Sheep, MichaelAiello, 2005/12/23
[Full-disclosure] [TKADV2005-12-001] Multiple SQL Injection vulnerabilities in MyBB, tk, 2005/12/23
[Full-disclosure] [ GLSA 200512-14 ] NBD Tools: Buffer overflow in NBD server, Thierry Carrez, 2005/12/23
[Full-disclosure] RE: Webwasher CSM Appliance Script Security Restriction Bypass, Frank Berzau, 2005/12/23
[Full-disclosure] html in simpbook, zeus olimpusklan, 2005/12/23
[Full-disclosure] Blind MySQL injection database stressing tool.. for hackers!, kanutron (lists), 2005/12/23
[Full-disclosure] New site location, shadown, 2005/12/23
- New site location, shadown, 2005/12/23
[Full-disclosure] [USN-232-1] PHP vulnerabilities, Martin Pitt, 2005/12/23
[Full-disclosure] [ GLSA 200512-13 ] Dropbear: Privilege escalation, Stefan Cornelius, 2005/12/23
[Full-disclosure] SEC Consult SA-20051223-1 :: File Disclosure using df_next_page parameter in OracleAS Discussion Forum Portlet, Johannes Greil, 2005/12/23
[Full-disclosure] SEC Consult SA-20051223-0 :: Multiple Cross Site Scripting Vulnerabilities in OracleAS Discussion Forum Portlet, Johannes Greil, 2005/12/23
[Full-disclosure] dtSearch DUNZIP32.dll Buffer Overflow Vulnerability, Juha-Matti Laurio, 2005/12/23
[Full-disclosure] [ GLSA 200512-12 ] Mantis: Multiple vulnerabilities, Stefan Cornelius, 2005/12/22
XSS&Sql injection attack in PHP-Fusion 6.00.3 Released, krasza, 2005/12/22
[Full-disclosure] Webwasher CSM Appliance Script Security Restriction Bypass, d0t v0rt3x, 2005/12/22
Re: [Full-disclosure] Privilege escalation in McAfee VirusScanEnterprise 8.0i (patch 11) and CMA 3.5 (patch 5), Steven Rakick, 2005/12/22
- Re: [Full-disclosure] Privilege escalation in McAfee VirusScanEnterprise 8.0i (patch 11) and CMA 3.5 (patch 5), Steven Rakick, 2005/12/23
CYBSEC - Security Advisory: httprint Multiple Vulnerabilities, Mariano Nuñez Di Croce, 2005/12/22
fetchmail security announcement fetchmail-SA-2005-03 (CVE-2005-4348), ma+bt, 2005/12/22
MDKSA-2005:235 - Updated kernel packages fix numerous vulnerabilities, Mandriva Security Team, 2005/12/22
[Full-disclosure] Privilege escalation in McAfee VirusScan Enterprise 8.0i (patch 11) and CMA 3.5 (patch 5), Reed Arvin, 2005/12/22
- Privilege escalation in McAfee VirusScan Enterprise 8.0i (patch 11) and CMA 3.5 (patch 5), Reed Arvin, 2005/12/22
[Full-disclosure] iDefense Security Advisory 12.22.05: Linux Kernel Socket Buffer Memory Exhaustion DoS Vulnerability, labs-no-reply@idefense.com, 2005/12/22
[Full-disclosure] [USN-231-1] Linux kernel vulnerabilities, Martin Pitt, 2005/12/22
Cisco PIX / CS ACS: Downloadable RADIUS ACLs vulnerability, ovt, 2005/12/21
- Re: Cisco PIX / CS ACS: Downloadable RADIUS ACLs vulnerability, 3APA3A, 2005/12/22
XSS vulnerabilities in Google.com, Watchfire Research, 2005/12/21
VMware vulnerability in NAT networking, vmware-security-alert, 2005/12/21
WinRAR - Processing Filename Incorrectly Vulnerability, agoanywhere, 2005/12/21
[Full-disclosure] iDefense Security Advisory 12.21.05: Macromedia JRun 4 Web Server URL Parsing Buffer Overflow Vulnerability, labs-no-reply@idefense.com, 2005/12/21
Cisco Security Response: DoS in Cisco Clean Access, Clayton Kossmeyer, 2005/12/21
Re: XSS bypass in PHPNuke - FIX ?, Paul Laudanski, 2005/12/21
[KAPDA::#17] - beehiveforum Script Injection, alireza hassani, 2005/12/21
mIRC buffer overflow, Crowdat Kurobudetsu, 2005/12/21
[Security-Advisories@acs-inc.com: [Full-disclosure] [ACSSEC-2005-11-25-0x1] VMWare Workstation 5.5.0 <= build-18007 G SX Server Variants And Others], Andrew Griffiths, 2005/12/21
Tolva PHP website system Remote File Include, beford, 2005/12/21
Re: Symantec Antivirus Library Remote Heap Overflows, ltr, 2005/12/21
[ECHO_ADV_24$2005] Full path disclosure on WordPress < 1.5.2, the_day, 2005/12/21
- [ECHO_ADV_24$2005] Full path disclosure on WordPress < 1.5.2, the_day@echo.or.id, 2005/12/21
security patch for Linux Kernel 2.6, breno, 2005/12/21
Workshop "Dependability Aspects in DWH and Mining applications"Deadline:15-01-06, Manh Tho, 2005/12/21
Call for Paper - VI National Computer and Information Security Conference - COLOMBIA, Jeimy José Cano Martínez, 2005/12/21
[Hat-Squad] Remote Heap Corruption Vulnerability in Interaction SIP Proxy, service, 2005/12/21
[VulnWatch] [ACSSEC-2005-11-25-0x1] VMWare Workstation 5.5.0 <= build-18007 G SX Server Variants And Others, Security Advisories, 2005/12/21
[Full-disclosure] [ACSSEC-2005-11-25-0x1] VMWare Workstation 5.5.0 <= build-18007 G SX Server Variants And Others, Security Advisories, 2005/12/21
[Full-disclosure] Re: Guidance, Jason Coombs, 2005/12/20
- Re: [Full-disclosure] Re: Guidance, J.A. Terranson, 2005/12/20
- Re: [Full-disclosure] Re: Guidance, Jason Coombs, 2005/12/21
  - Re: [Full-disclosure] Re: Guidance, J.A. Terranson, 2005/12/21
MDKSA-2005:234 - Updated sudo packages fix vulnerability, Mandriva Security Team, 2005/12/20
IRM 012: Portfolio Netpublish Server 7 is vulnerable to a Directory Traversal Attack, Advisories, 2005/12/20
IRM 013: Ultraapps Issue Manager is vulnerable to Privilege Escalation, Advisories, 2005/12/20
IRM 014: Sygate Protection Agent 5.0 vulnerability - A low privileged user can disable the security agent, Advisories, 2005/12/20
Secunia Research: Pegasus Mail Buffer Overflow and Off-by-One Vulnerabilities, Secunia Research, 2005/12/20
[Overflow.pl] Blender BlenLoader Integer Overflow, Damian Put, 2005/12/20
PHPGedView <= 3.3.7 remote code execution, retrogod, 2005/12/20
Acidcat ASP CMS Multiple Vulnerabilities, h e, 2005/12/20
Digital Armaments Security Advisory 12.20.2005: WEBsweeper/MIMEsweeper Executable File Content Check bypass Vulnerability, info, 2005/12/20
[security bulletin] SSRT5983 rev.1 - HP-UX Running Software Distributor (SD) Remote Unauthorized Access, security-alert, 2005/12/20
Enterprise Connector v.1.02 Multiple SQL Vulnerabilities and Login Bypass, darkz . gsa, 2005/12/20
[Full-disclosure] iDefense Security Advisory 12.20.05: Qualcomm WorldMail IMAP Server String Literal Processing Overflow Vulnerability, labs-no-reply@idefense.com, 2005/12/20
[Full-disclosure] iDefense Security Advisory 12.20.05: McAfee Security Center MCINSCTL.DLL ActiveX Control File Overwrite, labs-no-reply@idefense.com, 2005/12/20
[Full-disclosure] Symantec Antivirus Library Remote Heap Overflows, list, 2005/12/20
[Full-disclosure] [ GLSA 200512-11 ] CenterICQ: Multiple vulnerabilities, Thierry Carrez, 2005/12/20
[Full-disclosure] [ACSSEC-2005-11-25-0x4] FTGate 4.4 [Build 4.4.000 Oct 26 2005] St ack Buffer Overflow, Security Advisories, 2005/12/20
[Full-disclosure] [ACSSEC-2005-11-25-0x6] FTGate 4.4 [Build 4.4.000 Oct 26 2005] Fo rmat String Overflow, Security Advisories, 2005/12/20
[Full-disclosure] [ACSSEC-2005-11-25-0x5] FTGate 4.4 [Build 4.4.000 Oct 26 2005] Fo rmat String Overflow, Security Advisories, 2005/12/20
[Full-disclosure] [ACSSEC-2005-11-25-0x3] FTGate 4.4 [Build 4.4.000 Oct 26 2005] Cr oss Site Scripting Vulnerability, Security Advisories, 2005/12/20
[Full-disclosure] [ACSSEC-2005-11-27-0x1] Eudora Qualcomm WorldMail 3.0 IMAP4 Servi ce 6.1.19.0, Security Advisories, 2005/12/20
[Full-disclosure] [ACSSEC-2005-11-27-0x2] Remote Overflows in Mailenable Enterprise 1.1 / Professional 1.7, Security Advisories, 2005/12/20
[Full-disclosure] Vulnerability in Metadot portal server allows users to gain administrative privileges, Gerry Chng, 2005/12/20
[Full-disclosure] RE: Authenticated EIGRP DoS / Information leak, Paul Oxman $poxman$, 2005/12/19
[Full-disclosure] Re: Unauthenticated EIGRP DoS, Paul Oxman $poxman$, 2005/12/19
MDKSA-2005:233 - Updated apache2 packages fix vulnerability in worker MPM, Mandriva Security Team, 2005/12/19
[security bulletin] SSRT051026 rev. 1 - HP-UX running WBEM Services Denial of Service (DoS), security-alert, 2005/12/19
about phpMyAdmin's server_privileges.php announced vulnerability, Marc Delisle, 2005/12/19
[Full-disclosure] Re: Making unidirectional VLAN and PVLAN jumping bidirectional, Clayton Kossmeyer, 2005/12/19
[Full-disclosure] Making unidirectional VLAN and PVLAN jumping bidirectional, Andrew A. Vladimirov, 2005/12/19
[Full-disclosure] Authenticated EIGRP DoS / Information leak, Andrew A. Vladimirov, 2005/12/19
[Full-disclosure] Unauthenticated EIGRP DoS, Andrew A. Vladimirov, 2005/12/19
[Full-disclosure] Re: Guidance Software Customer Database Hacked?, Jason Coombs, 2005/12/18
- Re: [Full-disclosure] Re: Guidance Software Customer Database Hacked?, J.A. Terranson, 2005/12/18
[Full-disclosure] [ GLSA 200512-10 ] Opera: Command-line URL shell command injection, Thierry Carrez, 2005/12/18
[Full-disclosure] [FLSA-2005:168326] Updated util-linux and mount packages fix security issue, Marc Deslauriers, 2005/12/18
[Full-disclosure] [FLSA-2005:152870] Updated a2ps package fixes security issue, Marc Deslauriers, 2005/12/18
[Full-disclosure] [FLSA-2005:166939] Updated openssl packages fix security issues, Marc Deslauriers, 2005/12/18
[Full-disclosure] [FLSA-2005:155510] Updated gtk2 packages fixes security issues, Marc Deslauriers, 2005/12/18
[Full-disclosure] [FLSA-2005:152892] Updated enscript package fixes security issues, Marc Deslauriers, 2005/12/18
[Full-disclosure] [FLSA-2005:152832] Updated lynx package fixes security issues, Marc Deslauriers, 2005/12/18
[Full-disclosure] [FLSA-2005:152787] Updated redhat-config-nfs package fixes security issue, Marc Deslauriers, 2005/12/18
phpMyAdmin server_privileges.php SQL Injection Vulnerabilities., Alice Bryson, 2005/12/17
- Re: phpMyAdmin server_privileges.php SQL Injection Vulnerabilities., michal, 2005/12/19
Fullpath disclosure in roundcube webmail, king_purba, 2005/12/17
- Re: Fullpath disclosure in roundcube webmail, Steven M. Christey, 2005/12/17
Microsoft IIS Remote Denial of Service (DoS) .DLL Url exploit, inge . henriksen, 2005/12/17
Bug in HC, hackeriri, 2005/12/17
RE: RLA ("Remote LanD Attack"), Patrick Galligan, 2005/12/16
Update on the PGP NTFS File Wipe Issue, 16 Dec 2005, Jon Callas, 2005/12/16
exploit (html) for Advanced Guestbook 2.2, irc0d3r, 2005/12/16
[Full-disclosure] Advisory: XSS in WebCal (v1.11-v3.04), Stan Bubrouski, 2005/12/16
DoS in Cisco Clean Access, alex, 2005/12/16
DMA[2005-1214a] - 'Widcomm BTW - Bluetooth for Windows Remote Audio Eavesdropping', Kevin Finisterre, 2005/12/16
[Full-disclosure] iDefense Security Advisory 12.16.05: Citrix Program Neighborhood Name Heap Corruption Vulnerability, labs-no-reply@idefense.com, 2005/12/16
phpCOIN-1.2.2-Full-2005 SQL Injection, stranger-killer, 2005/12/16
ZRCSA-200505: libremail - "pop.c" Format String Vulnerability, deepfear, 2005/12/16
[Full-disclosure] [ GLSA 200512-09 ] cURL: Off-by-one errors in URL handling, Sune Kloppenborg Jeppesen, 2005/12/16
Countering Trusting Trust through Diverse Double-Compiling, David A. Wheeler, 2005/12/16
- Re: Countering Trusting Trust through Diverse Double-Compiling, Mike Lisanke, 2005/12/15
  - Re: Countering Trusting Trust through Diverse Double-Compiling, David A. Wheeler, 2005/12/15
[Full-disclosure] [USN-230-2] ffmpeg/xine-lib vulnerability, Martin Pitt, 2005/12/16
Bios Information Leakage, Jonathan Brossard, 2005/12/16
- Re: Bios Information Leakage, Ron van Daal, 2005/12/16
[Full-disclosure] [ GLSA 200512-08 ] Xpdf, GPdf, CUPS, Poppler: Multiple vulnerabilities, Sune Kloppenborg Jeppesen, 2005/12/16
AIX Heap Overflow paper, David Litchfield, 2005/12/15
[security bulletin] SSRT4728 rev.1 - HP-UX running TCP/IP Remote Denial of Service (DoS), security-alert, 2005/12/15
MarmaraWeb E-commerce Script Cross Site Scripting, B3g0k, 2005/12/15
MarmaraWeb E-commerce Remote Command Exucetion, B3g0k, 2005/12/15
CYBSEC - Security Advisory: Watchfire AppScan QA Remote Code Execution, Mariano Nuñez Di Croce, 2005/12/15
Notacon Call for Proposals open, Paul Schneider, 2005/12/15
Patches available for IBM AIX flaws, NGSSoftware Insight Security Research, 2005/12/15
- Re: Patches available for IBM AIX flaws, David Litchfield, 2005/12/16
- Re: Patches available for IBM AIX flaws, Shiva Persaud, 2005/12/16
[Full-disclosure] RE: RLA ("Remote LanD Attack"), Roger A. Grimes, 2005/12/15
- [Full-disclosure] Re: RLA ("Remote LanD Attack"), Synister Syntax, 2005/12/15
- [Full-disclosure] Re: RLA ("Remote LanD Attack"), Synister Syntax, 2005/12/15
- [Full-disclosure] RE: RLA ("Remote LanD Attack"), alessandroa, 2005/12/19
  - [Full-disclosure] Re: RLA ("Remote LanD Attack"), Synister Syntax, 2005/12/19
    - Message not available
    - Re: [Full-disclosure] Re: RLA ("Remote LanD Attack"), Synister Syntax, 2005/12/20
Metasploit Framework v3.0 Alpha Release 1, H D Moore, 2005/12/15
MDKSA-2005:232 - Updated gstreamer-ffmpeg packages fix buffer overflow vulnerability, Mandriva Security Team, 2005/12/15
MDKSA-2005:231 - Updated ffmpeg packages fix buffer overflow vulnerability, Mandriva Security Team, 2005/12/15
MDKSA-2005:230 - Updated mplayer packages fix buffer overflow vulnerability, Mandriva Security Team, 2005/12/15
MDKSA-2005:229 - Updated xmovie packages fix buffer overflow vulnerability, Mandriva Security Team, 2005/12/15
MDKSA-2005:228 - Updated xine-lib packages fix buffer overflow vulnerability, Mandriva Security Team, 2005/12/15
MDKSA-2005:227 - Updated ethereal packages fix vulnerability, Mandriva Security Team, 2005/12/15
[Full-disclosure] [ GLSA 200512-07 ] OpenLDAP, Gauche: RUNPATH issues, Thierry Carrez, 2005/12/15
[Full-disclosure] [scip_Advisory 1910] Alkacon OpenCms 6.0.2 login Cross Site Scripting, Marc Ruef, 2005/12/15
Secunia Research: Microsoft Internet Explorer Keyboard Shortcut Processing Vulnerability, Secunia Research, 2005/12/15
CodeCon submission deadline reminder, Len Sassaman, 2005/12/15
SUSE Security Announcement: kernel various security and bugfixes (SUSE-SA:2005:068), Marcus Meissner, 2005/12/15
Business Objects WebIntelligence 6.5x Account Lockout and System DoS, mkemp4, 2005/12/14
SUSE Security Announcement: php4, php5 (SUSE-SA:2005:069), Ludwig Nussel, 2005/12/14
DIMVA 2006 - 2nd Call for Papers, Thomas Biege, 2005/12/14
Bypass XSS filter in PHPNUKE 7.9=>x, max, 2005/12/14
- Re: Bypass XSS filter in PHPNUKE 7.9=>x, Paul Laudanski, 2005/12/17
[OpenPKG-SA-2005.029] OpenPKG Security Advisory (apache), OpenPKG, 2005/12/14
[Full-disclosure] iDefense Security Advisory 12.14.05: Trend Micro ServerProtect EarthAgent Remote DoS Vulnerability, labs-no-reply@idefense.com, 2005/12/14
[Full-disclosure] iDefense Security Advisory 12.14.05: Trend Micro ServerProtect relay.dll Chunked Overflow Vulnerability, labs-no-reply@idefense.com, 2005/12/14
[Full-disclosure] iDefense Security Advisory 12.14.05: Trend Micro ServerProtect isaNVWRequest.dll Chunked Overflow, labs-no-reply@idefense.com, 2005/12/14
[Full-disclosure] iDefense Security Advisory 12.14.05: Trend Micro ServerProtect Crystal Reports ReportServer File Disclosure, labs-no-reply@idefense.com, 2005/12/14
[Full-disclosure] iDefense Security Advisory 12.14.05: Trend Micro PC-Cillin Internet Security Insecure File Permission Vulnerability, labs-no-reply@idefense.com, 2005/12/14
[Full-disclosure] Disclosure timelines from vendors - a promising practice?, Steven M. Christey, 2005/12/14
LIMBO CMS <= v1.0.4.2 _SERVER[] array overwrite / remote code execution, retrogod, 2005/12/14
[Full-disclosure] [ GLSA 200512-06 ] Ethereal: Buffer overflow in OSPF protocol dissector, Thierry Carrez, 2005/12/14
[Full-disclosure] [ GLSA 200512-05 ] Xmail: Privilege escalation through sendmail, Thierry Carrez, 2005/12/14
[Full-disclosure] [USN-230-1] ffmpeg vulnerability, Martin Pitt, 2005/12/14
[Full-disclosure] Business Objects WebIntelligence 6.5x Account Lockout and System DoS, Michael M Kemp, 2005/12/14
[Full-disclosure] Re: [ GLSA 200512-04 ] Openswan, IPsec-Tools: Vulnerabilities in ISAKMP Protocol implementation, Thierry Carrez, 2005/12/14
[Full-disclosure] RLA ("Remote LanD Attack"), Synister Syntax, 2005/12/14
- Message not available
  - [Full-disclosure] Re: RLA ("Remote LanD Attack"), Synister Syntax, 2005/12/15
    - Message not available
    - [Full-disclosure] Re: RLA ("Remote LanD Attack"), Synister Syntax, 2005/12/15
    - [Full-disclosure] Re: RLA ("Remote LanD Attack"), Synister Syntax, 2005/12/15
ADP Forum 2.0,ADP Forum 2.0.1,ADP Forum 2.0.2,ADP Forum 2.0.3 versiyon user md5 hash bug, liz0, 2005/12/13
Secunia Research: Internet Explorer Suppressed "Download Dialog" Vulnerability, Secunia Research, 2005/12/13
RE: [Full-disclosure] [EEYEB-20050523] Windows Kernel APC Data-FreeLocal Privilege Escalation Vulnerability, Marc Maiffret, 2005/12/13
MDKSA-2005:226 - Updated mozilla-thunderbird package fix vulnerability in enigmail, Mandriva Security Team, 2005/12/13
phpCOIN 1.2.2 multiple vulnerabilities, retrogod, 2005/12/13
[Full-disclosure] [EEYEB-20050523] Windows Kernel APC Data-Free Local Privilege Escalation Vulnerability, Advisories, 2005/12/13
- Re: [Full-disclosure] [EEYEB-20050523] Windows Kernel APC Data-Free Local Privilege Escalation Vulnerability, Joshua Russel, 2005/12/13
  - Re: [Full-disclosure] [EEYEB-20050523] Windows Kernel APC Data-Free Local Privilege Escalation Vulnerability, Ron, 2005/12/13
  - [Full-disclosure] Re: [EEYEB-20050523] Windows Kernel APC Data-FreeLocal Privilege Escalation Vulnerability, Dave Korn, 2005/12/13
    - Re: [Full-disclosure] Re: [EEYEB-20050523] Windows Kernel APC Data-FreeLocal Privilege Escalation Vulnerability, Tom Ferris, 2005/12/13
[Full-disclosure] [USN-229-1] Zope vulnerability, Martin Pitt, 2005/12/13
[OpenPKG-SA-2005.028] OpenPKG Security Advisory (curl), OpenPKG, 2005/12/12
Status on PGP NTFS File Wipe issue, 11 Dec 2005, Jon Callas, 2005/12/12
[PHP-CHECKER] 99 potential SQL injection vulnerabilities, php-checker, 2005/12/12
- Re: [PHP-CHECKER] 99 potential SQL injection vulnerabilities, Andy Lindeman, 2005/12/14
- [PHP-CHECKER] 99 potential SQL injection vulnerabilities, Yichen Xie, 2005/12/14
Arab Portal v2 Beta2 SQL Injections, stranger-killer, 2005/12/12
Re: Re: [Full-disclosure] Kerio Personal Firewall and Kerio Server Firewall FWDRV driver Local Denial of Service, JHannah01, 2005/12/12
oracle not only offeder - researchers NOT responsible?, Gadi Evron, 2005/12/12
Guestserver guestbook system vulnerabilities, jaakko, 2005/12/12
IMOEL CMS Sql password discovery, silversmith, 2005/12/12
- Re: IMOEL CMS Sql password discovery, Steven M. Christey, 2005/12/14
BTGrup Admin WebController Script SQL injection, khc, 2005/12/12
[Full-disclosure] [USN-228-1] curl library vulnerability, Martin Pitt, 2005/12/12
[Full-disclosure] iDEFENSE Security Advisory 12.12.05: SCO Unixware Setuid 'uidadmin' Scheme Buffer Overflow Vulnerability, labs-no-reply@idefense.com, 2005/12/12
[Full-disclosure] [USN-222-2] Perl vulnerability, Martin Pitt, 2005/12/12
[Full-disclosure] [USN-227-1] xpdf vulnerabilities, Martin Pitt, 2005/12/12
[Full-disclosure] [ GLSA 200512-04 ] Openswan, IPsec-Tools: Vulnerabilities in ISAKMP Protocol implementation, Thierry Carrez, 2005/12/12
- [Full-disclosure] Re: [ GLSA 200512-04 ] Openswan, IPsec-Tools: Vulnerabilities in ISAK MP Protocol implementation, Paul Wouters, 2005/12/13
  - [Full-disclosure] Re: [ GLSA 200512-04 ] Openswan, IPsec-Tools: Vulnerabilities in ISAK MP Protocol implementation, VANHULLEBUS Yvan, 2005/12/14
[Full-disclosure] [scip_Advisory] NetGear RP114 Flooding Denial of Service, Marc Ruef, 2005/12/12
- Re: [Full-disclosure] [scip_Advisory] NetGear RP114 Flooding Denial ofService, Morning Wood, 2005/12/12
- [Full-disclosure] Re: [scip_Advisory] NetGear RP114 Flooding Denial of Service, Thierry Zoller, 2005/12/13
[Full-disclosure] SEC Consult SA-20051211-0 :: Nortel SSL VPN Cross Site Scripting/Command Execution, SEC Consult Research, 2005/12/12
[Full-disclosure] [ GLSA 200512-03 ] phpMyAdmin: Multiple vulnerabilities, Sune Kloppenborg Jeppesen, 2005/12/11
[Full-disclosure] SEC Consult SA-20051211-0 :: Several XSS issues in Horde Framework, Kronolith Calendar, Mnemo Notes, Nag Tasks and Turba Addressbook, Johannes Greil, 2005/12/11
Torrential 1.2 Directory Traversal, Shell, 2005/12/10
DEFCON London group - DC4420 - inaugural meeting and Christmas Drinks!, Major Malfunction, 2005/12/10
- [Full-disclosure] Re: [DCG] DEFCON London group - DC4420 - inaugural meeting and Christmas Drinks!, racerx, 2005/12/10
MDKSA-2005:206-1 - Updated openvpn packages fix multiple vulnerabilities, Mandriva Security Team, 2005/12/10
Flatnuke 2.5.6 privilege escalation / remote commands execution exploit, retrogod, 2005/12/10
Apani Network Response to ISAKMP cert-fi:7710 Alert, mkuch, 2005/12/10
TSLSA-2005-0070 - multi, Trustix Security Advisor, 2005/12/09
MDKSA-2005:225 - Updated perl package fixes format string vulnerability, Mandriva Security Team, 2005/12/09
PGP Wipe Free Space, Lyris ListManager Flaws, Windows Timestamps, Sam Juicer, H D Moore, 2005/12/09
Motorola SB5100E Cable Modem DoS, Алексей Синцов, 2005/12/09
[VulnWatch] Milliscript 1.4 Multiple Vulnerabilities, NaPa, 2005/12/09
[Full-disclosure] iDefense Security Advisory 12.09.05: Ethereal OSPF Protocol Dissector Buffer Overflow Vulnerability, labs-no-reply@idefense.com, 2005/12/09
MDKSA-2005:224 - Updated curl package fixes format string vulnerability, Mandriva Security Team, 2005/12/09
Milliscript 1.4 Multiple Vulnerabilities, NaPa, 2005/12/09
[KAPDA::#16] - SMF SQL Injection, alireza hassani, 2005/12/09
- Re: [KAPDA::#16] - SMF SQL Injection, grudge, 2005/12/10
  - [Full-disclosure] Re: [KAPDA::#16] - SMF SQL Injection, ascii, 2005/12/11
- Re: Re: [KAPDA::#16] - SMF SQL Injection, retrogod, 2005/12/12
- Re: Re: [KAPDA::#16] - SMF SQL Injection, polnby, 2005/12/12
- Re: Re: [KAPDA::#16] - SMF SQL Injection, Steven M. Christey, 2005/12/12
- Re: Re: Re: [KAPDA::#16] - SMF SQL Injection, grudge, 2005/12/15
[Full-disclosure] Milliscript 1.4 Multiple Vulnerabilities, NaPa, 2005/12/09
[Full-disclosure] [TKPN2005-12-001] Multiple critical vulnerabilities in MyBB, tk, 2005/12/09
[security bulletin] SSRT051069 - HP Tru64 Unix Secure Web Server (SWS 6.4.1 and earlier) PHP/XMLRPC Remote Unauthorized Execution of Arbitrary Code, security-alert, 2005/12/09
[Full-disclosure] [USN-226-1] Courier vulnerability, Martin Pitt, 2005/12/09
[Full-disclosure] New Project Started, NaPa, 2005/12/08
= 1.2.6d blind SQL injection / remote commands execution:, retrogod, 2005/12/08
Website Baker <=2.6.0 SQL Injection -> Login bypass -> remote code execution, retrogod, 2005/12/08
- Re: Website Baker <=2.6.0 SQL Injection -> Login bypass -> remote code execution, ryan, 2005/12/12
3com product security hole, jaime . blasco, 2005/12/08
- Re: 3com product security hole, Nicob, 2005/12/09
- Re: 3com product security hole, Juha-Matti Laurio, 2005/12/09
-Exploiting Freelist[0] On Windows XP Service Pack 2-, Brett Moore, 2005/12/08
Airscanner Mobile Security Advisory: Remote Hard Reset Data Wipe and DoS of Pocket Controller v5.0 (#AS05080401), contact . removethis, 2005/12/08
[security bulletin] SSRT051037 HP-UX Running IPSec Remote Unauthorized Access, security-alert, 2005/12/07
[security bulletin] SSRT5954 Revised - HP-UX TCP/IP Remote Denial of Service (DoS), security-alert, 2005/12/07
[KDE Security Advisory] multiple buffer overflows in kpdf/koffice, Dirk Mueller, 2005/12/07
[Full-disclosure] iDefense Security Advisory 12.07.05: Dell TrueMobile 2300 Wireless Broadband Router Authentication Bypass Vulnerability, labs-no-reply@idefense.com, 2005/12/07
[security bulletin] SSRT4884 HP-UX TCP/IP Remote Denial of Service (DoS), security-alert, 2005/12/07
[Full-disclosure] [ GLSA 200512-02 ] Webmin, Usermin: Format string vulnerability, Sune Kloppenborg Jeppesen, 2005/12/07
[Full-disclosure] [ GLSA 200512-01 ] Perl: Format string errors can lead to code execution, Sune Kloppenborg Jeppesen, 2005/12/07
Journal of Computer Virology-Call for Papers, Saeed Abu Nimeh, 2005/12/07
DRZES HMS XSS and SQL Injection Vulnerabilities, vipsta, 2005/12/07
Mobile Antivirus Researchers Assoc. Call for White Papers, contact . removethis, 2005/12/07
SugarSuite Open Source <= 4.0beta Remote code execution, retrogod, 2005/12/07
SimpleBBS <= v1.1 remote commands execution in c by: unitedasia security crew, unitedasia, 2005/12/07
[KAPDA::#15] - ThWboard multiple vulnerabilities, alireza hassani, 2005/12/07
Critical Myspace.com Vulnerabilites, silentproducts, 2005/12/07
[Full-disclosure] Advisory 25/2005: phpMyAdmin Variables Overwrite Vulnerability, Stefan Esser, 2005/12/07
[Full-disclosure] Advisory 24/2005: libcurl URL parsing vulnerability, Stefan Esser, 2005/12/07
[Full-disclosure] iDEFENSE Security Advisory 12.06.05: Ipswitch IMail IMAP List Command DoS Vulnerability, labs-no-reply@idefense.com, 2005/12/06
[Full-disclosure] iDEFENSE Security Advisory 12.06.05: Ipswitch Collaboration Suite SMTP Format String Vulnerability, labs-no-reply@idefense.com, 2005/12/06
- Re: [Full-disclosure] iDEFENSE Security Advisory 12.06.05: Ipswitch Collaboration Suite SMTP Format String Vulnerability, Owen Dhu, 2005/12/13
[Full-disclosure] IMF 2006- Call for Papers, Oliver Goebel, 2005/12/06
[Full-disclosure] iDefense Security Advisory 12.05.05: Multiple Vendor xpdf DCTStream Progressive Heap Overflow, iDEFENSE Labs, 2005/12/06
[Full-disclosure] iDefense Security Advisory 12.05.05: Multiple Vendor xpdf StreamPredictor Heap Overflow Vulnerability, iDEFENSE Labs, 2005/12/06
[Full-disclosure] iDefense Security Advisory 12.05.05: Multiple Vendor xpdf DCTStream Baseline Heap Overflow Vulnerability, iDEFENSE Labs, 2005/12/06
[Full-disclosure] iDefense Security Advisory 12.05.05: Multiple Vendor xpdf JPX Stream Reader Heap Overflow Vulnerability, iDEFENSE Labs, 2005/12/06
SUSE Security Announcement: kernel various security and bugfixes (SUSE-SA:2005:067), Marcus Meissner, 2005/12/06
[Full-disclosure] [USN-225-1] Apache 2 vulnerability, Martin Pitt, 2005/12/06
[Full-disclosure] Horde IMP Webmail Client XSS all versions, Igor, 2005/12/06
- Re: [Full-disclosure] Horde IMP Webmail Client XSS all versions, Jan Schneider, 2005/12/06
[Full-disclosure] [USN-224-1] Kerberos vulnerabilities, Martin Pitt, 2005/12/06
Outpost24 Public Security Note: Linux/Elxbot, David Jacoby, 2005/12/05
[security bulletin] HPSBUX01059 SSRT4704 Revised - HP-UX Running wu-ftpd Local Unauthorized Access, security-alert, 2005/12/05
Blog System v1.2 Multiple SQL Injection Vulnerabilities, vipsta, 2005/12/05
have you ever been BluePIMped?, KF (lists), 2005/12/05
[Full-disclosure] Buffer Overflow in MultiTech VoIP Implementations, SecurityLab Research, 2005/12/05
[Full-disclosure] [USN-180-2] MySQL 4.1 vulnerability, Martin Pitt, 2005/12/05
[Full-disclosure] [USN-223-1] Inkscape vulnerability, Martin Pitt, 2005/12/05
[Full-disclosure] [scip_Advisory] e107 v0.6 rate.php manipulation, Marc Ruef, 2005/12/05
[Full-disclosure] Bug with .php extension?, Ron, 2005/12/05
- Re: [Full-disclosure] Bug with .php extension?, Chris Umphress, 2005/12/05
- Re: [Full-disclosure] Bug with .php extension?, Simon Richter, 2005/12/05
  - Re: [Full-disclosure] Bug with .php extension?, Michael Ligh, 2005/12/05
  - Re: [Full-disclosure] Bug with .php extension?, Ron, 2005/12/05
more MD5 colliding examples, Gerardo Richarte, 2005/12/03
Zen-Cart <= 1.2.6d blind SQL injection / remote commands execution:, retrogod, 2005/12/03
PHP-Fusion v6.00.109 SQL Injection and Info. Disclosure, xer0x . west, 2005/12/03
[OpenPKG-SA-2005.027] OpenPKG Security Advisory (php), OpenPKG, 2005/12/03
DMA[2005-1202a] - 'sobexsrv - Scripting/Secure OBEX Server format string vulnerability', KF (lists), 2005/12/03
MDKSA-2005:222 - Updated mailman packages fix various vulnerabilities, Mandriva Security Team, 2005/12/03
Re: WebCalendar, Louis Wang, 2005/12/03
Alisveristr E-Commerce Admin Login SQL İnjection, B3g0k, 2005/12/03
[OpenPKG-SA-2005.025] OpenPKG Security Advisory (perl), OpenPKG, 2005/12/03
[Full-disclosure] QNX 4.25 suided dhcp.client binary, lms, 2005/12/03
- [Full-disclosure] RE: QNX 4.25 suided dhcp.client binary, Dan Drinnon, 2005/12/03
eXtreme Styles mod <= 2.2.1 Multiple Vulnerabilities, tommie1, 2005/12/03
- eXtreme Styles mod <= 2.2.1 Multiple Vulnerabilities, tommie1, 2005/12/03
MDKSA-2005:221 - Updated spamassassin packages fixes vulnerability, Mandriva Security Team, 2005/12/03
[OpenPKG-SA-2005.026] OpenPKG Security Advisory (lynx), OpenPKG, 2005/12/03
MDKSA-2005:223 - Updated webmin package fixes format string vulnerability, Mandriva Security Team, 2005/12/03
[Full-disclosure] [Updated] [FLSA-2005:166943] Updated php packages fix security issues, Marc Deslauriers, 2005/12/02
phpMyChat Multiple XSS vulnerabilities., secresearch, 2005/12/02
[Full-disclosure] SEC Consult SA-XXXXXXXXXXX, Bernhard Mueller, 2005/12/02
- [Full-disclosure] 22nd CCC conference in Berlin, Harry Behrens, 2005/12/02
[Full-disclosure] SEC Consult SA-20050212-1 :: A Word on Webmail Security and Browser related XSS Bugs, Sec Consult Research, 2005/12/02
[Full-disclosure] SEC Consult SA-20051202-1 :: GMX Webmail XSS, Sec Consult Research, 2005/12/02
[Full-disclosure] [USN-222-1] Perl vulnerability, Martin Pitt, 2005/12/02
[Full-disclosure] Format String Vulnerabilities in Perl Programs, Steven M. Christey, 2005/12/02
- [Full-disclosure] Re: Format String Vulnerabilities in Perl Programs, Michael J. Pomraning, 2005/12/04
  - Re: [Full-disclosure] Re: Format String Vulnerabilities in Perl Programs, Stan Bubrouski, 2005/12/04
    - Re: [Full-disclosure] Re: Format String Vulnerabilities in Perl Programs, Steven M. Christey, 2005/12/04
- Re: [Full-disclosure] Format String Vulnerabilities in Perl Programs, Chris Umphress, 2005/12/04
  - Re: [Full-disclosure] Format String Vulnerabilities in Perl Programs, Steven M. Christey, 2005/12/04
Perl format string integer wrap vulnerability, robert, 2005/12/02
[Full-disclosure] WinEggDropShell Multiple Remote Stack Overflow, Sowhat, 2005/12/02
[Full-disclosure] [xfocus-SD-051202]openMotif libUil Multiple vulnerability, alert7@xfocus.org, 2005/12/02
Edgewall Trac SQL Injection Vulnerability, David Maciejak, 2005/12/01
Microsoft Windows CreateRemoteThread Exploit, q7x, 2005/12/01
- Re: Microsoft Windows CreateRemoteThread Exploit, Anton, 2005/12/02
- RE: Microsoft Windows CreateRemoteThread Exploit, Michael Wojcik, 2005/12/02
- Re: Re: Microsoft Windows CreateRemoteThread Exploit, warl0ck, 2005/12/03
WebCalendar Multiple Vulnerabilities., lwang, 2005/12/01
[security bulletin] SSRT4787 Revised - HP Systems Insight Manager (SIM) for HP-UX Remote Denial of Service (DoS), security-alert, 2005/12/01
Re: Opera 8.50 DoS with simple java applet, Yngve N. Pettersen (Developer Opera Software ASA), 2005/12/01
Sunbelt set to acquire Kerio Personal Firewall, Paul Laudanski, 2005/12/01
- Re: Sunbelt set to acquire Kerio Personal Firewall, Nick Boyce, 2005/12/02
Re: WebCalendar Multiple Vulnerabilities, craig, 2005/12/01
[Full-disclosure] [DRUPAL-SA-2005-008] Drupal 4.6.4 / 4.5.6 fixes XSS and HTTP header injection issue, Uwe Hermann, 2005/12/01
- [Full-disclosure] Re: [DRUPAL-SA-2005-008] Drupal 4.6.4 / 4.5.6 fixes XSS and HTTP header injection issue, Amit Klein (AKsecurity), 2005/12/02
[Full-disclosure] [DRUPAL-SA-2005-009] Drupal 4.6.4 / 4.5.6 fixes minor access control issue, Uwe Hermann, 2005/12/01
[Full-disclosure] [DRUPAL-SA-2005-007] Drupal 4.6.4 / 4.5.6 fixes XSS issue, Uwe Hermann, 2005/12/01
PhpX <= 3.5.9 SQL Injection -> login bypass -> remote command/code execution, retrogod, 2005/12/01
Re: What is wrong with these people?, Steve Shockley, 2005/12/01
Re: - Cisco IOS HTTP Server code injection/execution vulnerability-, Florian Weimer, 2005/12/01
- Re: - Cisco IOS HTTP Server code injection/execution vulnerability-, Mike Caudill, 2005/12/03
Re: DNS query spam, fugi, 2005/12/01
- Re: DNS query spam, Piotr Kamisiski, 2005/12/01
[Full-disclosure] [USN-221-1] racoon vulnerability, Martin Pitt, 2005/12/01
[Full-disclosure] [USN-220-1] w3c-libwww vulnerability, Martin Pitt, 2005/12/01