Bugtraq (thread)

MyNewsGroups <= 0.6b (myng_root) Remote Inclusion Vulnerability, philipp . niedziela, 2006/07/31
Corsaire Security Advisory - VMware ESX Server Password Disclosure in Cookie issue, advisories, 2006/07/31
Corsaire Security Advisory - VMware ESX Server Password Disclosure in Log issue, advisories, 2006/07/31
Corsaire Security Advisory - VMware ESX Server Password Cross Site Request Forgery issue, advisories, 2006/07/31
Oracle and Apache mod_rewrite Vulnerability, tigerblue, 2006/07/31
SQL injection Seir Anphin v666 Community Management System, vulnerabilities, 2006/07/31
PHPAuction 2.1 (maybe higher) with phpAdsNew 2.0.5 RFI, philipp . niedziela, 2006/07/31
ATutor <= 1.5.3.1 'links' blind SQL injection / admin credentials disclosure, rgod, 2006/07/31
com_moskool (admin.moskool.php) Remote File Include Vulnerabilities, saudi . unix, 2006/07/31
[Full-disclosure] Re: Do world's famous companies take care of their security?, Steven M. Christey, 2006/07/31
- Re: [Full-disclosure] Re: Do world's famous companies take care of their security?, Valery Marchuk, 2006/07/31
[Full-disclosure] Multiple vulnerabilities in Open Cubic Player 2.6.0pre6 / 0.1.10_rc5, Luigi Auriemma, 2006/07/31
[Full-disclosure] Do world's famous companies take care of their security?, Valery Marchuk, 2006/07/31
- Re: [Full-disclosure] Do world's famous companies take care of their security?, uncleron, 2006/07/31
  - Re: [Full-disclosure] Do world's famous companies take care of their security?, Dude VanWinkle, 2006/07/31
[Full-disclosure] UPDATE: [ GLSA 200605-08 ] PHP: Multiple vulnerabilities, Sune Kloppenborg Jeppesen, 2006/07/30
Gdiplus.dll division by 0, Mr . Niega, 2006/07/29
- Re: Gdiplus.dll division by 0, Early Warning Team, 2006/07/31
[ MDKSA-2006:134 ] - Updated ruby packages fix safe-level vulnerabilities, security, 2006/07/29
artlinks Mambo Component <= Remote Include Vulnerability, Dr . Jr7, 2006/07/29
mambatstaff Mambo Component <= Remote Include Vulnerability, Dr . Jr7, 2006/07/29
[ MDKSA-2006:133 ] - Updated apache packages fix mod_rewrite vulnerability, security, 2006/07/29
[KAPDA::#53] MYBB XSS and Dir Traversal in usercp.php, roozbeh_afrasiabi, 2006/07/29
Mambo Gallery Manager v095.r3 Remote File Inclusion Vulnerabilities, A-S-T2006, 2006/07/29
[Full-disclosure] [ GLSA 200607-13 ] Audacious: Multiple heap and buffer overflows, Matthias Geerdsen, 2006/07/29
XSS vulnerability on AWBS, newbinaryfile, 2006/07/29
Coppermine Photo Gallery v1.2.2b-Nuke Remote File Inclusion Vulnerabilities, A-S-T2006, 2006/07/29
PHP ip2long() function circumvention, rgod, 2006/07/29
- Re: PHP ip2long() function circumvention, darylf, 2006/07/31
PrinceClan Chess Mambo Com <= 0.8 Remote Inclusion Vulnerability, tr_zindan, 2006/07/28
Hustle -- Tumbleweed Email Firewall Remote Vulnerability, Ryan Smith, 2006/07/28
cpanel login problem, ali, 2006/07/28
- Re: cpanel login problem, nate, 2006/07/29
  - RE: cpanel login problem, Bugs, 2006/07/31
  - Re: cpanel login problem, Scott Gemma, 2006/07/31
    - RE: cpanel login problem, Alan, 2006/07/31
- Re: cpanel login problem, usar_y_tirar, 2006/07/31
Lan-Aces Office Logic, Mike, 2006/07/28
[Full-disclosure] [ GLSA 200607-12 ] OpenOffice.org: Multiple vulnerabilities, Stefan Cornelius, 2006/07/28
Guestbook Mambo Module <== v1.3.0 Multiple Remote File Include Vulnerabilities, matdhule, 2006/07/28
[Full-disclosure] [USN-329-1] Thunderbird vulnerabilities, Martin Pitt, 2006/07/28
PHP-Nuke INP XSS, l2odon, 2006/07/28
[Full-disclosure] [ GLSA 200607-11 ] TunePimp: Buffer overflow, Stefan Cornelius, 2006/07/28
Apache mod_rewrite Buffer Overflow Vulnerability, Avert, 2006/07/28
[Full-disclosure] rPSA-2006-0139-1 httpd mod_ssl, Justin M. Forbes, 2006/07/28
Remote Include Vulnerability ====> in Dr.Jr7 Gallery 3.2 RC1, R0t-K33Y, 2006/07/28
[ MDKSA-2006:132 ] - Updated libwmf packages fixes integer overflow vulnerability, security, 2006/07/28
[OpenPKG-SA-2006.017] OpenPKG Security Advisory (freetype), OpenPKG, 2006/07/28
[Full-disclosure] Oracle 10g R2 and, probably, all previous versions, Russell Lowenthal, 2006/07/28
- Re: [Full-disclosure] Oracle 10g R2 and, probably, all previous versions, rjamya, 2006/07/28
  - Re: [Full-disclosure] Oracle 10g R2 and, probably, all previous versions, Russell Lowenthal, 2006/07/28
[OpenPKG-SA-2006.016] OpenPKG Security Advisory (ruby), OpenPKG, 2006/07/28
Portail PHP v1.7 Remote File Include, Meftun, 2006/07/28
- Re: Portail PHP v1.7 Remote File Include, x0r0n, 2006/07/31
[OpenPKG-SA-2006.015] OpenPKG Security Advisory (apache), OpenPKG, 2006/07/28
[Full-disclosure] [Announcement] Apache HTTP Server 2.2.3 (2.0.59, 1.3.37) Released, William A. Rowe, Jr., 2006/07/28
[Full-disclosure] [FLSA-2006:175040] Updated php packages fix security issues, Marc Deslauriers, 2006/07/27
[Full-disclosure] [USN-328-1] Apache vulnerability, Martin Pitt, 2006/07/27
[Full-disclosure] Heartbeat Shared Memory - Local Denial of Service Exploit, Nash Leon, 2006/07/27
[Full-disclosure] [USN-327-1] firefox vulnerabilities, Martin Pitt, 2006/07/27
Re: HYSA-2006-008 myBloggie 2.1.3 CRLF & SQL Injection, Steven M. Christey, 2006/07/27
[Full-disclosure] rPSA-2006-0138-1 thunderbird, Justin M. Forbes, 2006/07/27
Oracle 10g R2 and, probably, all previous versions, putosoft softputo, 2006/07/27
- [Full-disclosure] chaseonline security, Geo., 2006/07/28
AIM Triton 1.0.4 (SipXtapi) Remote Buffer Overflow Exploit (PoC), c0rrupt, 2006/07/27
Xss in MttKe-php v2.6, R0t-K33Y, 2006/07/27
- Re: Xss in MttKe-php v2.6, Steven M. Christey, 2006/07/31
Bypassing Oracle dbms_assert, ak, 2006/07/27
- Re: Bypassing Oracle dbms_assert, David Litchfield, 2006/07/28
  - RE: Bypassing Oracle dbms_assert, Alexander Kornbrust, 2006/07/28
    - Re: Bypassing Oracle dbms_assert, David Litchfield, 2006/07/28
Secunia Research: Mozilla Firefox XPCOM Event Handling Memory Corruption, Secunia Research, 2006/07/27
Re: Low security hole affecting IPCalc's CGI wrapper, krischan, 2006/07/27
Buffer Overflow Vulnerability in Winlpd, Meftun, 2006/07/27
Cross-Site Scripting and Local File Inclusion in Phorum, Meftun, 2006/07/27
GeoClassifieds Enterprise <= 2.0.5.2 Cross Site Scripting, securityconnection, 2006/07/27
a6mambohelpdesk Mambo Component <= 18RC1 Remote Include Vulnerability, Dr . Jr7, 2006/07/27
NSFOCUS SA2006-07 : ISS RealSecure/BlackICE MailSlot Heap Overflow Detection Remote DoS Vulnerability, NSFOCUS Security Team, 2006/07/27
[Full-disclosure] [USN-326-1] heartbeat vulnerability, Martin Pitt, 2006/07/27
[Full-disclosure] [USN-325-1] ruby1.8 vulnerability, Martin Pitt, 2006/07/27
[Full-disclosure] [USN-324-1] freetype vulnerability, Martin Pitt, 2006/07/27
[Full-disclosure] Yahoo! Mail + Firefox Filter Bypass, simo, 2006/07/26
[Full-disclosure] rPSA-2006-0137-1 firefox, Justin M. Forbes, 2006/07/26
Phpprobid <= 5.24 XSS SQL injection Vulnerability, securityconnection, 2006/07/26
Secunia Research: FileCOPA Directory Argument Handling Buffer Overflow, Secunia Research, 2006/07/26
[OpenPKG-SA-2006.014] OpenPKG Security Advisory (shiela), OpenPKG, 2006/07/26
[vuln.sg] PowerArchiver DZIPS32.DLL Buffer Overflow Vulnerability, vulnpost-remove, 2006/07/26
[ECHO_ADV_41$2006] BufferOverflow in Midirecord2, the_day, 2006/07/26
[Full-disclosure] ZDI-06-025: Mozilla Firefox Javascript navigator Object Vulnerability, zdi-disclosures, 2006/07/26
Etomite CMS <= 0.6.1 'rfiles.php' remote command execution, rgod, 2006/07/26
Cisco VPN Concentrator IKE resource exhaustion DoS Advisory, Roy Hills, 2006/07/26
- Re: Cisco VPN Concentrator IKE resource exhaustion DoS Advisory, Eloy Paris, 2006/07/29
  - Re: Cisco VPN Concentrator IKE resource exhaustion DoS Advisory, Pavel Kankovsky, 2006/07/31
TP-Book <= 1.00 Cross Site Scripting Vulnerabilities, tamriel, 2006/07/26
wwwThreads XSS, l2odon, 2006/07/26
Professional Home Page Tools Login Script Cross Site Scripting Vulnerabilities, tamriel, 2006/07/26
PHP-Auction SQL injection, l2odon, 2006/07/26
Zyxel Prestige 660H-61 Cross-Site Scripting, jose . palanco, 2006/07/26
EzUpload multi file vulnerabilities, hack2prison, 2006/07/26
Secunia Research: AutoVue SolidModel Professional Buffer Overflow Vulnerability, Secunia Research, 2006/07/26
Full Path Disclosure xGuestBook v1.02, dicomdk, 2006/07/26
[ MDKSA-2006:131 ] - Updated perl-Net-Server packages fix format string vulnerability, security, 2006/07/26
Trojan downloader may be dropping FireFox and IE specific components, Hayes, Bill, 2006/07/26
- Re: [security] Trojan downloader may be dropping FireFox and IE specific components, Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP], 2006/07/26
- Re: Trojan downloader may be dropping FireFox and IE specific components, Hayes, Bill, 2006/07/28
[Full-disclosure] Multiple vulnerabilities in OpenCMS, Meder Kydyraliev, 2006/07/26
[Full-disclosure] [USN-320-2] php4 regression, Martin Pitt, 2006/07/26
[Full-disclosure] [USN-297-3] Thunderbird vulnerabilities, Martin Pitt, 2006/07/26
[Full-disclosure] MS06-034 lies? IIS 6 can still be owned?, Cesar, 2006/07/25
[Full-disclosure] TSRT-06-03: eIQnetworks Enterprise Security Analyzer Syslog Server Buffer Overflow Vulnerabilities, TSRT, 2006/07/25
- [Full-disclosure] RE: TSRT-06-03: eIQnetworks Enterprise Security Analyzer Syslog Server Buffer Overflow Vulnerabilities, Desai, Deepen, 2006/07/28
[Full-disclosure] TSRT-06-04: eIQnetworks Enterprise Security Analyzer Topology Server Buffer Overflow Vulnerability, TSRT, 2006/07/25
- [Full-disclosure] RE: TSRT-06-04: eIQnetworks Enterprise Security Analyzer Topology Server Buffer Overflow Vulnerability, Desai, Deepen, 2006/07/28
[Full-disclosure] ZDI-06-023: eIQNetworks Enterprise Security Analyzer Syslog Server Buffer Overflow Vulnerability, zdi-disclosures, 2006/07/25
[Full-disclosure] ZDI-06-024: eIQNetworks Enterprise Security Analyzer License Manager Buffer Overflow Vulnerability, zdi-disclosures, 2006/07/25
[security bulletin] HPSBUX02087 SSRT4728 rev.2 - HP-UX running TCP/IP Remote Denial of Service (DoS), security-alert, 2006/07/25
[Full-disclosure] [ GLSA 200607-10 ] Samba: Denial of Service vulnerability, Sune Kloppenborg Jeppesen, 2006/07/25
[Full-disclosure] ZDI-06-025: eIQNetworks, zdi-disclosures, 2006/07/25
[Full-disclosure] [USN-323-1] mozilla vulnerabilities, Martin Pitt, 2006/07/25
LinksCaffe 3.0 SQL injection/Command Execution Vulnerabilties, simo64, 2006/07/25
[vuln.sg] AGEphone "sipd.dll" SIP Packet Handling Buffer Overflow, vulnpost-remove, 2006/07/25
[vuln.sg] TurboZIP ZIP Repair Buffer Overflow Vulnerability, vulnpost-remove, 2006/07/25
[vuln.sg] DynaZip DZIP32.DLL/DZIPS32.DLL Buffer Overflow Vulnerabilities, vulnpost-remove, 2006/07/25
Advisory: VMware Possible Incorrect Permissions On SSL Key Files, Nick Breese, 2006/07/25
[Full-disclosure] [ GLSA 200607-09 ] Wireshark: Multiple vulnerabilities, Sune Kloppenborg Jeppesen, 2006/07/25
[Full-disclosure] Cookie-stealing XSS on msn.com, SecuriTeam Assisted Disclosure, 2006/07/25
[Full-disclosure] [USN-296-2] Firefox vulnerabilities, Martin Pitt, 2006/07/25
SYMSA-2006-008:Password Safe - Lock Password Database Configuration Not Enforced, research, 2006/07/24
Opsware NAS 6.0 reveals MySQL 'root' password, Freeman, Michael, 2006/07/24
- Re: Opsware NAS 6.0 reveals MySQL 'root' password, security-alert, 2006/07/27
[Full-disclosure] Hustle -- Tumbleweed Email Firewall Remote Vulnerability, Ryan Smith, 2006/07/24
- Re: [Full-disclosure] Hustle -- Tumbleweed Email Firewall Remote Vulnerability, The Shadow, 2006/07/25
Digital Armaments Security Advisory 24.07.2006: Siemens Speedstream Wireless/Router Denial of Service Vulnerability, info, 2006/07/24
[MajorSecurity #26] Woltlab Burning Board - Multiple Cookie manipulation and session fixation vulnerabilities, admin, 2006/07/24
SQuery v.x (devi.php) (armygame.php) Remote File Inclusion, saudi . unix, 2006/07/24
Write-up by Amit Klein: "Forging HTTP request headers with Flash", Amit Klein (AKsecurity), 2006/07/24
- Re: Write-up by Amit Klein: "Forging HTTP request headers with Flash", Amit Klein (AKsecurity), 2006/07/26
  - Re: Write-up by Amit Klein: "Forging HTTP request headers with Flash", 3CO, 2006/07/27
    - Re: Write-up by Amit Klein: "Forging HTTP request headers with Flash", Amit Klein (AKsecurity), 2006/07/27
[Full-disclosure] rPSA-2006-0135-1 gimp, Justin M. Forbes, 2006/07/24
Windows XP/NT/SMB2003/2000 Denial of Service attack, J. Oquendo, 2006/07/24
MusicBox <= 2.3.4 XSS SQL injection Vulnerability, securityconnection, 2006/07/24
[Full-disclosure] Heap overflow in the GT2 loader of libmikmod 3.2.2, Luigi Auriemma, 2006/07/24
[Full-disclosure] ERRATA: [ GLSA 200607-08 ] GIMP: Buffer overflow, Sune Kloppenborg Jeppesen, 2006/07/24
Check Point R55W Directory Traversal, Sec-Tec Lists, 2006/07/24
- Re: Check Point R55W Directory Traversal, Hugo van der Kooij, 2006/07/31
- Re: Check Point R55W Directory Traversal, dave_kwek, 2006/07/28
PHP Live! v3.2 (header.php) Remote File Include Vulnerabilities, saudi . unix, 2006/07/24
[CYBSEC] TippingPoint detection bypass, Andres Riancho, 2006/07/24
[Full-disclosure] [USN-322-1] Konqueror vulnerability, Martin Pitt, 2006/07/24
Vanilla CMS <= 1.0.1 (RootDirectory) Remote file inclusion Vuln., mfoxhacker, 2006/07/24
[Kurdish Security # 14] MoSpray [base_dir] Remote Command Execution [ Mambo & Joomla], botan, 2006/07/24
[Full-disclosure] Two crash vulnerabilities in Freeciv 2.1.0-beta1 (SVN 15 Jul 2006), Luigi Auriemma, 2006/07/23
[Full-disclosure] Buffer-overflow in recvTextMessage and NETrecvFile in Warzone Resurrection 2.0.3 (SVN 127), Luigi Auriemma, 2006/07/23
[Full-disclosure] Buffer-overflow in the XM loader of Cheese Tracker 0.9.9, Luigi Auriemma, 2006/07/23
[Full-disclosure] [ GLSA 200607-08 ] GIMP: Buffer overflow, Sune Kloppenborg Jeppesen, 2006/07/23
- Re: [Full-disclosure] [ GLSA 200607-08 ] GIMP: Buffer overflow, Alberto Devesa, 2006/07/24
- Re: [ GLSA 200607-08 ] GIMP: Buffer overflow, Michael Shigorin, 2006/07/24
[Full-disclosure] To XSS or not?, Gadi Evron, 2006/07/23
- Re: [Full-disclosure] To XSS or not?, Aaron Gray, 2006/07/23
  - Re: [Full-disclosure] To XSS or not?, ad@heapoverflow.com, 2006/07/23
    - Re: [Full-disclosure] To XSS or not?, Aaron Gray, 2006/07/23
    - Re: [Full-disclosure] To XSS or not?, Valery Marchuk, 2006/07/23
    - Re: [Full-disclosure] To XSS or not?, Javor Ninov, 2006/07/24
    - Re: [Full-disclosure] To XSS or not?, Aaron Gray, 2006/07/24
    - Re: [Full-disclosure] To XSS or not?, Michael Simpson, 2006/07/25
[Full-disclosure] news XSS on paypal.com, Pigrelax, 2006/07/23
- Re: [Full-disclosure] news XSS on paypal.com, ad@heapoverflow.com, 2006/07/23
DotClear : Multiples Full Path Disclosure, Silitix, 2006/07/22
Map MS Security Bulletins to MS KB numbers, Matthew Leeds, 2006/07/22
Blackboard Academic Suite 6.2.23 +/-: Persistent cross-site scripting vulnerability, harbl, 2006/07/22
[MajorSecurity #23] BLOG:CMS <= 4.0.0j - XSS and cookie disclosure, admin, 2006/07/22
Com Multibanners Remote File Inclusion (mosConfig_absolute_path), mail, 2006/07/22
MiniBB Forum <= 1.5a Remote File Include (news.php), AG Spider, 2006/07/22
[Kurdish Security # 13] Savant2 Remote File Include Vulnerability [For Mambo, Joomla], botan, 2006/07/22
SolpotCrew Advisory #3 - com_trade Remote File Inclusion (mosConfig_absolute_path), mail, 2006/07/22
new shell bypass safe mode, d3nger, 2006/07/22
- Re: new shell bypass safe mode, cxib, 2006/07/26
about bid 17404, crack, 2006/07/22
MicroGuestBook Remote XSS Attack, omnipresent, 2006/07/22
[MajorSecurity #24] Fire-Mouse TopList <=v1.1 - Cross Site Scripting, admin, 2006/07/22
[MajorSecurity #25] Advanced Guestbook 2.4 for phpBB - Multiple XSS and SQL-Injection Vulnerabilities, admin, 2006/07/22
Microsoft Internet Explorer DOS Vulnerability, SnoBmsn, 2006/07/22
Re: [EEYEB-20060227] D-Link Router UPNP Stack Overflow, kala_z, 2006/07/22
- RE: [EEYEB-20060227] D-Link Router UPNP Stack Overflow, m, 2006/07/22
MiniBB Forum <= 1.5a Remote File Include (search.php-whosOnline.php), AG Spider, 2006/07/22
[Full-disclosure] Low security hole affecting IPCalc's CGI wrapper, Tim Brown, 2006/07/22
[Full-disclosure] Re: Windows Security Checklists - 10 Parts, Paul Laudanski, 2006/07/21
[Full-disclosure] iDefense Security Advisory 07.20.06: Sun Microsystems Solaris sysinfo() Kernel Memory Disclosure Vulnerability, labs-no-reply, 2006/07/21
- Re: [Full-disclosure] iDefense Security Advisory 07.20.06: Sun Microsystems Solaris sysinfo() Kernel Memory Disclosure Vulnerability, Micheal Turner, 2006/07/21
  - Re: Re: [Full-disclosure] iDefense Security Advisory 07.20.06: Sun Microsystems Solaris sysinfo() Kernel Memory Disclosure Vulnerability, Micheal Turner, 2006/07/24
[Full-disclosure] Directory Listing in Apache Tomcat 5.x.x, Joseph Pierini, 2006/07/21
- [Full-disclosure] Directory Listing in Apache Tomcat 5.x.x, Joseph Pierini, 2006/07/21
SolpotCrew Advisory #2 - Advanced Poll ver 2.02 (base_path) Remote File Inclusion, chris_hasibuan, 2006/07/21
[ MDKSA-2006:130 ] - Updated kdelibs packages fix konqueror crash vulnerability., security, 2006/07/21
TSLSA-2006-0042 - multi, Trustix Security Advisor, 2006/07/21
Unidomedia Chameleon LE/Pro Directory Traversal, kicktd, 2006/07/21
LoudBlog <=0.5 Sql injection, rgod, 2006/07/21
SECURITY UPDATE::Farsinews release FarsiNewsPro3.0Stable1SecurityPath1, armin390, 2006/07/21
[security bulletin] HPSBMA02133 SSRT061201 rev.1 - HP Oracle for OpenView (OfO) Critical Patch Update July 2006, security-alert, 2006/07/21
[Full-disclosure] rPSA-2006-0134-1 sendmail sendmail-cf, Justin M. Forbes, 2006/07/21
[Full-disclosure] [USN-321-1] mysql-dfsg-4.1 vulnerability, Martin Pitt, 2006/07/21
Re: [Full-disclosure] Re: New PowerPoint Trojan installs itself as LSP, Juha-Matti Laurio, 2006/07/21
[Full-disclosure] Samba Internal Data Structures DOS Vulnerability Exploit, Alexander Hristov, 2006/07/20
- [Full-disclosure] Re: Samba Internal Data Structures DOS Vulnerability Exploit, Gerald (Jerry) Carter, 2006/07/21
[Full-disclosure] [ GLSA 200607-07 ] xine-lib: Buffer overflow, Thierry Carrez, 2006/07/20
[security bulletin] HPSBUX02108 SSRT061133 rev.12 - HP-UX Running Sendmail, Remote Execution of Arbitrary Code, security-alert, 2006/07/20
[ MDKSA-2006:129 ] - Updated freetype2 packages fixes overflow vulnerability., security, 2006/07/20
[MajorSecurity #22] Top XL <=1.1 - XSS and cookie disclosure, admin, 2006/07/20
- Re: [MajorSecurity #22] Top XL <=1.1 - XSS and cookie disclosure, admin, 2006/07/22
[MajorSecurity #21] phpFaber TopSites <=2.0.9 - SQL Injection Vulnerability, admin, 2006/07/20
[MajorSecurity #20]SiteDepth CMS <= 3.01 - Remote File Include Vulnerability, admin, 2006/07/20
Advisory: Remote command execution in planetGallery, RedTeam Pentesting, 2006/07/20
[ECHO_ADV_40$2006] iManage CMS <= 4.0.12 (absolute_path) Remote File Inclusion, matdhule, 2006/07/20
Cisco MARS < 4.2.1 remote compromise, Jon Hart, 2006/07/20
Security point-of-contact for Ameritrade?, James M. Blackburn, 2006/07/19
AFCommerce Shopping Cart, sledge, 2006/07/19
- Re: AFCommerce Shopping Cart, contact, 2006/07/22
Re: imageVue16.1 upload vulnerability, info, 2006/07/19
[Full-disclosure] rPSA-2006-0133-1 libpng, Justin M. Forbes, 2006/07/19
[ MDKSA-2006:128 ] - Updated wireshark packages fix numerous vulnerabilities, security, 2006/07/19
[Full-disclosure] [ GLSA 200607-06 ] libpng: Buffer overflow, Thierry Carrez, 2006/07/19
[ MDKSA-2006:126 ] - Updated libtunepimp packages fixes buffer overflow vulnerabilities., security, 2006/07/19
[ MDKSA-2006:127 ] - Updated gimp packages fix buffer overflow vulnerability., security, 2006/07/19
[ MDKSA-2006:125 ] - Updated webmin packages fix arbitray file read vulnerability., security, 2006/07/19
[USN-320-1] PHP vulnerabilities, Martin Pitt, 2006/07/19
[Full-disclosure] rPSA-2006-0132-1 tshark wireshark, Justin M. Forbes, 2006/07/19
[Full-disclosure] [USN-319-2] Linux kernel vulnerability, Martin Pitt, 2006/07/19
[Full-disclosure] [USN-313-2] OpenOffice.org vulnerabilities, Martin Pitt, 2006/07/19
[Full-disclosure] VMSA-2006-0003 VMware possible incorrect permissions on SSL key files, VMware Security Team, 2006/07/19
[Full-disclosure] Multiple Vulnerabilities RPS, 0o_zeus_o0 elitemexico.org, 2006/07/19
osDate 1.1.7 multiple vulnerabilities, binary . loc, 2006/07/19
- Re: osDate 1.1.7 multiple vulnerabilities, binary . loc, 2006/07/19
Escalation of privileges in Outpost and Lavasoft Firewalls -Unusual ShellExecute behavior, mullware, 2006/07/18
ASP.DLL Include File Buffer Overflow, Brett Moore, 2006/07/18
About the latest three Powerpoint vulnerabilities: exploitable?, ewt, 2006/07/18
hdweGUEST <= 2.1.1 Cross Site Scripting Vulnerabilities, tamriel, 2006/07/18
Oracle Database - SQL Injection in SYS.DBMS_UPGRADE [DB22], ak, 2006/07/18
[security bulletin] HPSBTU02132 SSRT061154 rev.1 - HP Tru64 UNIX running NIS ypserv, Remote Denial of Service (DoS), security-alert, 2006/07/18
Oracle Database - SQL Injection in SYS.DBMS_STATS [DB21], ak, 2006/07/18
Invision Power Board v2.1 <= 2.1.6 sql injection exploit, paul14075, 2006/07/18
PcAnywhere > 12 Local Privilege Escalation, root, 2006/07/18
ExtCalendar Mambo Module <= v2( extcalendar.php ) Remote File Include Vulnerabilities, saudi . unix, 2006/07/18
- Re: ExtCalendar Mambo Module <= v2( extcalendar.php ) Remote File Include Vulnerabilities, matdhule, 2006/07/22
Consumers of Broadband Providers (ISP) may be open to hijack attacks, peter_philipp, 2006/07/18
[Full-disclosure] New PowerPoint Trojan installs itself as LSP, Juha-Matti Laurio, 2006/07/18
- [Full-disclosure] Re: New PowerPoint Trojan installs itself as LSP, Mike Healan, 2006/07/20
Oracle Database - SQL Injection in SYS.DBMS_CDC_IMPDP [DB01], ak, 2006/07/18
Oracle Database - SQL Injection in SYS.KUPW$WORKER [DB03], ak, 2006/07/18
$100 plus several of my books if you can crack my Windows password hashes., Roger A. Grimes, 2006/07/18
- RE: $100 plus several of my books if you can crack my Windows password hashes., Roger A. Grimes, 2006/07/22
- RE: $100 plus several of my books if you can crack my Windows password hashes., Michael Scheidell, 2006/07/22
  - RE: $100 plus several of my books if you can crack my Windows password hashes., Roger A. Grimes, 2006/07/22
[Full-disclosure] WebScarab <= 20060621-0003 cross site scripting, security, 2006/07/18
[KAPDA::#52] - PHP-Post 1.0 Cookie Modification Privilege Escalation Vulnerability, farhadkey, 2006/07/18
DeluxeBB mutiple vulnerabilities, Jessica Hope, 2006/07/18
[ MDKSA-2006:124 ] - Updated kernel packages fix privilege escalation vulnerability, security, 2006/07/18
Keyif Portal v2.0 - Microsoft Access Driver ( MDB ) Download, x0r0n, 2006/07/18
ToendaCMS <= 1.0.0 arbitrary file upload, rgod, 2006/07/18
Professional PHP Tools Guestbook Multiple Vulnerabilities, tamriel, 2006/07/18
Cross Site Scripting Vulnerability in Zoho Virtual Office, ss_team, 2006/07/18
Unauthenticated access to BT Voyager config file and PPP credentials embedded in HTML form, pagvacito, 2006/07/18
Calendar Mambo Module <= 1.5.7 Remote File Include Vulnerabilities, matdhule, 2006/07/18
New Article Mambo Component <= 1.0 (com_articles.php) Remote File Include Vulnerabilities, matdhule, 2006/07/18
RUXCON 2006 Final Call For Papers, cfp, 2006/07/18
ToorCon 2006 Call for Papers, h1kari@toorcon.org, 2006/07/18
[Full-disclosure] Hustle -- RARLab's WinRAR stack overflow, Ryan Smith, 2006/07/18
[Full-disclosure] [USN-319-1] Linux kernel vulnerability, Martin Pitt, 2006/07/18
ListMessenger v0.9.3 Remote File Inclusion Vulnerability, x0r0n, 2006/07/18
boastMachine <= 3.1 SQL Injection Exploit, gmdarkfig, 2006/07/18
PacSec 2006 CALL FOR PAPERS (Deadline Aug. 4; Event Nov. 27-30), Dragos Ruiu, 2006/07/18
Secunia Research: BitZipper unacev2.dll Buffer Overflow Vulnerability, Secunia Research, 2006/07/18
Secunia Research: VisNetic Mail Server Two File Inclusion Vulnerabilities, Secunia Research, 2006/07/18
Secunia Research: IceWarp Web Mail Two File Inclusion Vulnerabilities, Secunia Research, 2006/07/18
Plesk Control Panel <= 8.0.0 XSS vulnerability, vuln . invent, 2006/07/18
[Full-disclosure] New CVE identifiers for separate PowerPoint 0-day issues assigned, Juha-Matti Laurio, 2006/07/17
[Full-disclosure] Outpost Firewall Pro secrately fixing security flaws?, Bipin Gautam, 2006/07/17
Calendar Module <= 1.5.7 Remote File Include Vulnerabilities, matdhule, 2006/07/17
PHP Event Calendar versi 1.4 (path_to_calendar) Remote File Inclusion, chris_hasibuan, 2006/07/17
[Full-disclosure] [EEYEB-20060227] D-Link Router UPNP Stack Overflow, eEye Advisories, 2006/07/17
- [Full-disclosure] Re: [EEYEB-20060227] D-Link Router UPNP Stack Overflow, scott, 2006/07/18
- [Full-disclosure] Re: [EEYEB-20060227] D-Link Router UPNP Stack Overflow, solutions_PHP, 2006/07/31
Mercury Messenger, Hans Wolters, 2006/07/17
[Full-disclosure] information warfare in the middle east crisis, Google Earth and Sky News, Gadi Evron, 2006/07/17
[Full-disclosure] rPSA-2006-0130-1 kernel, Justin M. Forbes, 2006/07/17
[Full-disclosure] Team Evil Incident (Cyber-terrorism defacement analysis and response), Gadi Evron, 2006/07/16
[Full-disclosure] Multiple vulnerabilities in UFO2000 svn 1057, Luigi Auriemma, 2006/07/16
[Full-disclosure] 23rd Chaos Communication Congress 2006: Call for Participation, fukami, 2006/07/16
MyBulletinBoard (MyBB) 1.1.5 'CLIENT-IP' sql injection, rgod, 2006/07/15
VBZooM <=V1.11 " ignore-pm.php" SQL Injection, Breeeeh, 2006/07/15
[Full-disclosure] Several updates in MS PowerPoint 0-day Vulnerability FAQ at SecuriTeam Blogs, Juha-Matti Laurio, 2006/07/15
Invision Power Board 2.1 <= 2.1.6 sql injection, rst, 2006/07/15
- Re: Invision Power Board 2.1 <= 2.1.6 sql injection, paul dansing, 2006/07/18
  - Re: Invision Power Board 2.1 <= 2.1.6 sql injection, str0ke, 2006/07/18
- Re: Invision Power Board 2.1 <= 2.1.6 sql injection, mattmecham, 2006/07/18
- Re: Re: Invision Power Board 2.1 <= 2.1.6 sql injection, paul14075, 2006/07/18
[OpenPKG-SA-2006.013] OpenPKG Security Advisory (mutt), OpenPKG, 2006/07/15
Fantastic Guestbook v2.0.1 Advisory, omnipresent, 2006/07/15
Crtical Shockwave Embeded XSS Execution, spammeanddie, 2006/07/15
VBZooM <=V1.11 "sub-join.php" SQL Injection, Breeeeh, 2006/07/15
SubberZ[Lite] - Remote File Include, ChironeX . FleckeriX, 2006/07/15
- Re: SubberZ[Lite] - Remote File Include, the . jalal, 2006/07/22
VBZooM <=V1.11 " reply.php" SQL Injection, Breeeeh, 2006/07/15
MiniBB Forum <= 1.5a Remote File Include Vulnerabilities, matdhule, 2006/07/15
VBZooM "sendmail.php" SQL Injection, Breeeeh, 2006/07/15
Phorum 5.1.14 XSS SQL injection Vulnerability, securityconnection, 2006/07/15
- Re: Phorum 5.1.14 XSS SQL injection Vulnerability, Maurice Makaay, 2006/07/18
Rocks Clusters <=4.1 local root, Xavier, 2006/07/15
MyGallery "Room.php" SQL Injection, Breeeeh, 2006/07/15
XSS phpBB 2.0.21 in administration, renatrix, 2006/07/15
- Re: XSS phpBB 2.0.21 in administration, Jessica Hope, 2006/07/18
  - RE: XSS phpBB 2.0.21 in administration, David Thomson, 2006/07/22
    - Re: XSS phpBB 2.0.21 in administration, Jessica Hope, 2006/07/22
  - Message not available
    - Re: XSS phpBB 2.0.21 in administration, Jessica Hope, 2006/07/22
saphp "add.php" forumid Parameter SQL Injection, Breeeeh, 2006/07/15
crashing firefox <= 1.5.0.4, reywen, 2006/07/15
- Re: crashing firefox <= 1.5.0.4, bugtraq, 2006/07/19
Linux sys_prctl LKM based hotfix, Abhisek Datta, 2006/07/15
Kerio Terminating 'kpf4ss.exe' using internal runtime error Vulnerability, David Matousek, 2006/07/15
Norton Insufficient protection of Norton service registry keys, David Matousek, 2006/07/15
MS Power Point Multiple Vulnerabilities - (memory corruption) POC, naveed, 2006/07/15
MS Power Point Multiple Vulnerabilities - (mso.dll) POC, naveed, 2006/07/15
MS Power Point Multiple Vulnerabilities (powerpnt.exe)- POC, naveed, 2006/07/15
Bybass HTTP ( extension files ) in ISA 2004, medozero, 2006/07/15
- Re: Bybass HTTP ( extension files ) in ISA 2004, Thor (Hammer of God), 2006/07/17
- RE: Bybass HTTP ( extension files ) in ISA 2004, Edward Tripovich, 2006/07/18
- Re: Bybass HTTP ( extension files ) in ISA 2004, medozero, 2006/07/18
  - Re: Bybass HTTP ( extension files ) in ISA 2004, Thor (Hammer of God), 2006/07/19
- Re: Bybass HTTP ( extension files ) in ISA 2004, medozero, 2006/07/18
[Full-disclosure] Webmin / Usermin Arbitrary File Disclosure Vulnerability Perl, Alexander Hristov, 2006/07/15
EEYE: McAfee ePolicy Orchestrator Remote Compromise, eEye Advisories, 2006/07/14
Microsoft Works - Buffer Overflows / Denial of Service (DoS)-Vulnerabilities, Benjamin Tobias Franz, 2006/07/14
[Full-disclosure] Microsoft PowerPoint 0-day Vulnerability FAQ document written, Juha-Matti Laurio, 2006/07/14
Phorum 5.1.15 security release (fixes "PHORUM 5 arbitrary local inclusion"), Maurice Makaay, 2006/07/14
IE <= 6 DoS vulnerability, jonasschaub, 2006/07/14
[Full-disclosure] Looking for any vulnerabilities in GreenBorder Pro - Download please, and let me know, Bill Stout, 2006/07/13
- Re: [Full-disclosure] Looking for any vulnerabilities in GreenBorder Pro - Download please, and let me know, mikeiscool, 2006/07/13
[security bulletin] HPSBUX02120 SSRT051057 rev.2 - HP-UX Local Denial of Service (DoS), security-alert, 2006/07/13
[Full-disclosure] rPSA-2006-0122-2 kernel, Justin M. Forbes, 2006/07/13
- Linux Kernel 2.6.x PRCTL Core Dump Handling -- Simple workaround, Caveo Internet BV - Security, 2006/07/14
  - Re: Linux Kernel 2.6.x PRCTL Core Dump Handling -- Simple workaround, Hugo van der Kooij, 2006/07/14
  - Re: Linux Kernel 2.6.x PRCTL Core Dump Handling -- Simple workaround, Michael Shigorin, 2006/07/15
  - Re: Linux Kernel 2.6.x PRCTL Core Dump Handling -- Simple workaround, Lukasz Trabinski, 2006/07/15
    - Re: Linux Kernel 2.6.x PRCTL Core Dump Handling -- Simple workaround, Michal Zalewski, 2006/07/18
perForms <= 1.0 ([mosConfig_absolute_path]) Remote File Inclusion, endeneu, 2006/07/13
[ MDKSA-2006:123 ] - Updated kernel packages fixes multiple vulnerabilities, security, 2006/07/13
phpbb 3.x sql injection (with global moderator rights), rgod, 2006/07/13
- Re: phpbb 3.x sql injection (with global moderator rights), bugtraq, 2006/07/15
PHORUM 5 arbitrary local inclusion, rgod, 2006/07/13
flatnuke <= 2.5.7 arbitrary php file upload, rgod, 2006/07/13
[ MDKSA-2006:122 ] - Updated php packages fix multiple vulnerabilities, security, 2006/07/13
Flipper Poll <= 1.1.0 Remote File Inclusion Vulnerability, x0r0n, 2006/07/13
Orbitmatrix PHP Script v1.0, luny, 2006/07/13
ScozNews Final-Php <=1.1 Remote File Inclusion Vulnerability, x0r0n, 2006/07/13
Photocycle v1.0 - XSS, luny, 2006/07/13
- Re: Photocycle v1.0 - XSS, securityfocus, 2006/07/14
SYMSA-2006-004 (Full Details): Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution, research, 2006/07/13
[ECHO_ADV_38$2006] Multiple Mambo/Joomla Component Remote File Include Vulnerabilities, matdhule, 2006/07/13
- Re: [ECHO_ADV_38$2006] Multiple Mambo/Joomla Component Remote File Include Vulnerabilities, Joxean Koret, 2006/07/13
[Full-disclosure] [USN-318-1] libtunepimp vulnerability, Martin Pitt, 2006/07/13
[Full-disclosure] [USN-317-1] zope2.8 vulnerability, Martin Pitt, 2006/07/13
[ MDKSA-2006:117-1 ] - Updated libmms packages fix buffer overflow vulnerability, security, 2006/07/13
[ MDKSA-2006:121 ] - Updated xine-lib packages fix buffer overflow vulnerability, security, 2006/07/13
Cisco Security Advisory: Cisco Router Web Setup Ships with Insecure Default IOS Configuration, Cisco Systems Product Security Incident Response Team, 2006/07/13
FLV Players Multiple Input Validation Vulnerabilities, xzerox, 2006/07/13
New CVE number states Excel Style handling as a separate issue, Juha-Matti Laurio, 2006/07/13
[ MDKSA-2006:120 ] - Updated samba packages fix DoS vulnerability, security, 2006/07/13
Lazarus Guestbook Cross Site Scripting Vulnerabilities, simo64, 2006/07/13
S21Sec-032-en: Vulnerability in Fatwire Content Server, labs, 2006/07/13
TOPo v.2.2.178 Account Reset, darkz . gsa, 2006/07/13
[SECURITY] [DSA 1108-1] New mutt packages fix arbitrary code execution, Moritz Muehlenhoff, 2006/07/13
SMB Information Disclosure Vulnerability, Avert, 2006/07/13
SQuery <= 4.5(libpath) Remote File Inclusion Exploit, SHiKaA-, 2006/07/13
[ MDKA-2006:119 ] - Updated ppp packages fix plugin vulnerability, security, 2006/07/13
[VulnWatch] NSFOCUS SA2006-06 : Microsoft Excel COLINFO Record Buffer Overflow Vulnerability, NSFOCUS Security Team, 2006/07/13
[VulnWatch] NSFOCUS SA2006-05 : Microsoft Excel SELECTION Record Memory Corruption Vulnerability, NSFOCUS Security Team, 2006/07/13
[Full-disclosure] [USN-315-1] libmms, xine-lib vulnerabilities, Martin Pitt, 2006/07/13
[Full-disclosure] [USN-314-1] samba vulnerability, Martin Pitt, 2006/07/13
[Full-disclosure] [USN-316-1] installer vulnerability, Martin Pitt, 2006/07/13
[VulnWatch] NSFOCUS SA2006-04 : Microsoft Office GIF Filter Buffer Overflow Vulnerability, NSFOCUS Security Team, 2006/07/13
[Full-disclosure] [USN-313-1] OpenOffice.org vulnerabilities, Martin Pitt, 2006/07/13
[Full-disclosure] Microsoft Excel Array Index Error Remote Code Execution, Sowhat, 2006/07/13
[Full-disclosure] Linux Kernel 2.6.x PRCTL Core Dump Handling - Local r00t Exploit ( BID 18874 / CVE-2006-2451 ), Roman Medina-Heigl Hernandez, 2006/07/13
- [Full-disclosure] Re: Linux Kernel 2.6.x PRCTL Core Dump Handling - Local r00t Exploit ( BID 18874 / CVE-2006-2451 ), Ariel Biener, 2006/07/13
- [Full-disclosure] Re: Linux Kernel 2.6.x PRCTL Core Dump Handling - Local r00t Exploit ( BID 18874 / CVE-2006-2451 ), Ariel Biener, 2006/07/13
  - Re: [Full-disclosure] Re: Linux Kernel 2.6.x PRCTL Core Dump Handling - Local r00t Exploit ( BID 18874 / CVE-2006-2451 ), Jon Hart, 2006/07/13
- Re: [Full-disclosure] Linux Kernel 2.6.x PRCTL Core Dump Handling - simple workaround, lars brun nielsen, 2006/07/13
[Full-disclosure] rPSA-2006-0128-1 samba samba-swat, Justin M. Forbes, 2006/07/13
TSRT-06-02: Microsoft SRV.SYS Mailslot Ring0 Memory Corruption Vulnerability, Tippingpoint Security Research Team, 2006/07/13
[Full-disclosure] ZDI-06-022: Microsoft Office Excel File Rebuilding Code Execution Vulnerability, zdi-disclosures, 2006/07/13
CYBSEC - Security Pre-Advisory: Microsoft Windows DHCP Client Service Remote Buffer Overflow, Mariano Nuñez Di Croce, 2006/07/13
SYMSA-2006-007: Microsoft Office Malformed String Parsing Vulnerability, research, 2006/07/13
[Full-disclosure] Fuzzing Microsoft Office, naveed, 2006/07/13
[Full-disclosure] [SECURITY] Plain text password in Finjan Appliance 5100/8100 NG backup file, finde_schwachstelle, 2006/07/13
[Full-disclosure] [USN-311-1] Linux kernel vulnerabilities, Martin Pitt, 2006/07/13
[Full-disclosure] Google PR Mechanism Possible Vulnerability, cumhur onat, 2006/07/13
- Re: [Full-disclosure] Google PR Mechanism Possible Vulnerability, bugtraq, 2006/07/13
randshop <= 1.1.x (index.php) Remote File Inclusion Vulnerability, Saudi . Unix, 2006/07/13
[ANNOUNCEMENT] Samba 3.0.1 - 3.0.22: memory exhaustion DoS against smbd, Gerald (Jerry) Carter, 2006/07/13
- Re: [ANNOUNCEMENT] Samba 3.0.1 - 3.0.22: memory exhaustion DoS against smbd, Gerald (Jerry) Carter, 2006/07/13
Local file inclusion in Farsinews3.0BETA1, armin390, 2006/07/13
[SECURITY] [DSA 1107-1] New GnuPG packages fix denial of service, Martin Schulze, 2006/07/13
Old vulnerable sotwares collection, Jerome Athias, 2006/07/13
- RE: Old vulnerable sotwares collection, John Rigali, 2006/07/13
MS Word Unchecked Boundary Condition Vulnerability, naveed, 2006/07/13
Digital Armaments Security Advisory 10.07.2006: Flexwath Authorization Bypassing and XSS Vulnerability, info, 2006/07/13
- Re: Digital Armaments Security Advisory 10.07.2006: Flexwath Authorization Bypassing and XSS Vulnerability, sales, 2006/07/22
CC announces new Rootkit help forum insync with Book, Paul Laudanski, 2006/07/13
phpPolls 1.0.3 Administration ByPass, alp_eren, 2006/07/13
[SECURITY] [DSA 1106-1] New ppp packages fix privilege escalation, Martin Schulze, 2006/07/13
[ECHO_ADV_37$2006] pc_cookbook Mambo/Joomla Component <= v0.3 Remote File Include Vulnerabilities, matdhule, 2006/07/13
Re: RE: Invision Vulnerabilities, including remote code execution, mattmecham, 2006/07/13
LAMP vs Microsoft, Darren Reed, 2006/07/13
- Re: LAMP vs Microsoft, Jarrod Frates, 2006/07/13
- Re: LAMP vs Microsoft, Bob Beck, 2006/07/13
  - Re: LAMP vs Microsoft, Darren Reed, 2006/07/15
    - Re: LAMP vs Microsoft, Bob Beck, 2006/07/15
    - Re: LAMP vs Microsoft, Darren Reed, 2006/07/15
    - Re: LAMP vs Microsoft, Bob Beck, 2006/07/15
    - Re: LAMP vs Microsoft, Bob Beck, 2006/07/18
    - Re: LAMP vs Microsoft, Darren Reed, 2006/07/22
    - Re: LAMP vs Microsoft, George Capehart, 2006/07/18
    - Re: LAMP vs Microsoft, Darren Reed, 2006/07/18
    - Re: LAMP vs Microsoft, Hugo van der Kooij, 2006/07/18
  - Re: LAMP vs Microsoft, Joel Maslak, 2006/07/15
- Re: LAMP vs Microsoft, Steven M. Christey, 2006/07/13
MT rmcek Toplist v2.2 Version Microsoft Access Driver ( MDB ) Download, StorMBoY, 2006/07/13
[Full-disclosure] Juniper Networks DX Web Administration Persistent System Log XSS Vulnerability, Darren Bounds, 2006/07/13
Graffiti Forums v1.0 SQL Injection Vulnerabilities, paisterist . nst, 2006/07/13
Webvizyon Portal 2006 Version SQL Injection, StorMBoY, 2006/07/13
[Full-disclosure] [USN-312-1] gimp vulnerability, Martin Pitt, 2006/07/13
[Full-disclosure] RE: MIMESweeper For Web 5.X Cross Site Scripting, Erez Metula, 2006/07/13
- [Full-disclosure] RE: MIMESweeper For Web 5.X Cross Site Scripting, Erez Metula, 2006/07/13
[Full-disclosure] ERNW Security Advisory 02/2006 - Buffer Overflow in sipXtapi (used in AOL Triton), mozilla, 2006/07/13
- Re: [Full-disclosure] ERNW Security Advisory 02/2006 - Buffer Overflow in sipXtapi (used in AOL Triton), Test Drive, 2006/07/13
  - Re: [Full-disclosure] ERNW Security Advisory 02/2006 - Buffer Overflow in sipXtapi (used in AOL Triton), Mailinglists, 2006/07/13
[Full-disclosure] MIMESweeper For Web 5.X Cross Site Scripting, Erez Metula, 2006/07/13
[Full-disclosure] [ GLSA 200607-05 ] SHOUTcast server: Multiple vulnerabilities, Sune Kloppenborg Jeppesen, 2006/07/13
- Re: [ GLSA 200607-05 ] SHOUTcast server: Multiple vulnerabilities, Cyneox, 2006/07/15
[Full-disclosure] [ GLSA 200607-04 ] PostgreSQL: SQL injection, Sune Kloppenborg Jeppesen, 2006/07/13
[Full-disclosure] [ GLSA 200607-03 ] libTIFF: Multiple buffer overflows, Sune Kloppenborg Jeppesen, 2006/07/13
[Full-disclosure] [ GLSA 200607-02 ] FreeType: Multiple integer overflows, Sune Kloppenborg Jeppesen, 2006/07/13
[Full-disclosure] Webmin / Usermin Arbitrary File Disclosure Vulnerability exploit, Alexander Hristov, 2006/07/13
- Re: Webmin / Usermin Arbitrary File Disclosure Vulnerability exploit, José Parrella, 2006/07/15
  - [Full-disclosure] Re: Webmin / Usermin Arbitrary File Disclosure Vulnerability exploit, str0ke, 2006/07/15
[Full-disclosure] Re: Mico crashes when contected with wrong IOR / DoS, tuergeist, 2006/07/13
- [Full-disclosure] Re: Mico crashes when contected with wrong IOR / DoS, Karel Gardas, 2006/07/13
  - [Full-disclosure] Re: Mico crashes when contected with wrong IOR / DoS, tuergeist, 2006/07/13
    - [Full-disclosure] Re: Mico crashes when contected with wrong IOR / DoS, Karel Gardas, 2006/07/13
    - [Full-disclosure] Gracenote buffer overflow, MNV, 2006/07/13
RW::Download stats.php Remote File Inc., StorMBoY, 2006/07/13
ATutor 1.5.3 Cross Site Scripting, securityconnection, 2006/07/13
- Re: ATutor 1.5.3 Cross Site Scripting, info, 2006/07/13
- Re: ATutor 1.5.3 Cross Site Scripting, Steven M. Christey, 2006/07/22
[KAPDA::#46] - AjaxPortal Authentication Bypass, alireza hassani, 2006/07/13
- Re: [KAPDA::#46] - AjaxPortal Authentication Bypass, earthquake, 2006/07/13
Re: [Bugtraq] Re: flock d0s exploit remote. beta 1 (v0.7), flockoyd, 2006/07/13
PAPOO <=3RC3 sql injection / admin credentials disclosure, rgod, 2006/07/13
[ MDKSA-2006:118 ] - Updated OpenOffice.org packages fix various vulnerabilities, security, 2006/07/13
[SECURITY] [DSA 1105-1] New xine-lib packages fix denial of service, Martin Schulze, 2006/07/13
lintah_|adv|_01@2006>=========<[Aura-CMS v1.62]<===>[XSS vulnerable]&[bug], k07iX, 2006/07/13
Pivot <=1.30rc2 privilege escalation / remote commands execution, rgod, 2006/07/13
Sport-slo.net Guestbook v1.0, luny, 2006/07/13
HostingController: An attacker can gain reseller privileges and after that can gain admin privileges, Irsdl, 2006/07/13
[Full-disclosure] MS Word Unchecked Boundary Condition Vulnerability - POC, naveed, 2006/07/13
- [Full-disclosure] Re: MS Word Unchecked Boundary ConditionVulnerability - POC, Dave \"No, not that one\" Korn, 2006/07/13
  - Re: [Full-disclosure] Re: MS Word Unchecked Boundary ConditionVulnerability - POC, naveed, 2006/07/13
[ MDKSA-2006:117 ] - Updated libmms packages fix buffer overflow vulnerability, security, 2006/07/13
PBL Guestbook <= 1.32 XSS & SQL Querys Vulnerabilities, paisterist . nst, 2006/07/13
[ECHO_ADV_36$2006] ExtCalendar <== v2.0 Remote File Include Vulnerabilities, matdhule, 2006/07/13
ATutor : Cross-Site Scripting Vulnerabilities, bug@securitynews.ir, 2006/07/13
[Full-disclosure] rPSA-2006-0122-1 kernel, Justin M. Forbes, 2006/07/13
- [Full-disclosure] Re: rPSA-2006-0122-1 kernel, Paul Starzetz, 2006/07/13
PHP-Blogger Multiple Cross Site Scripting Vulnerabilities, OS2A BTO, 2006/07/13
WebEx Downloader Plug-in Multiple Vulnerabilities + rant, Mark Litchfield, 2006/07/13
- Re: WebEx Downloader Plug-in Multiple Vulnerabilities + rant, Mark Rowe, 2006/07/14
  - Re: WebEx Downloader Plug-in Multiple Vulnerabilities + rant, Mark Litchfield, 2006/07/18
- RE: WebEx Downloader Plug-in Multiple Vulnerabilities + rant, Web Ex, 2006/07/13
TSLSA-2006-0040 - kernel, Trustix Security Advisor, 2006/07/13
McAfee VirusScan Enterprise 8.0.0 Buffer Overflow, johndoe1529, 2006/07/13
Major updates to Excel 0-day Vulnerability FAQ at SecuriTeam Blogs, Juha-Matti Laurio, 2006/07/13
[Full-disclosure] ZDI-06-021: WebEx Downloader Plug-in Code Execution Vulnerability, zdi-disclosures, 2006/07/13
[Full-disclosure] IBM AIX Security contact?, Joxean Koret, 2006/07/13
- Re: [Full-disclosure] IBM AIX Security contact?, Bart . Lansing, 2006/07/13
  - Re: [Full-disclosure] IBM AIX Security contact?, COURTNEY ROGERS, 2006/07/13
- [Full-disclosure] Re: IBM AIX Security contact?, Troy Bollinger, 2006/07/13
[Full-disclosure] Mico crashes when contected with wrong IOR / DoS, tuergeist, 2006/07/13
[Full-disclosure] Various heap and stack overflow bugs in AdPlug library 2.0 (CVS 04 Jul 2006), Luigi Auriemma, 2006/07/13
[Full-disclosure] Possible code execution in Kaillera 0.86, Luigi Auriemma, 2006/07/13
[Full-disclosure] Format string bug in Sparklet 0.9.4try3, Luigi Auriemma, 2006/07/13
Public Advisory: Horde 3.1.1, 3.0.10 Multiple Security Issues, Moritz Naumann, 2006/07/13
RE: [Full-disclosure] Re: [WEB SECURITY] Cross Site Scripting in Google, Martin O'Neal, 2006/07/13
- RE: [Full-disclosure] Re: [WEB SECURITY] Cross Site Scripting in Google, Mike Duncan, 2006/07/13
  - Re: [Full-disclosure] Re: [WEB SECURITY] Cross Site Scripting in Google, Peter Dawson, 2006/07/13
- RE: [Full-disclosure] Re: [WEB SECURITY] Cross Site Scripting in Google, PPowenski, 2006/07/13
RE: [Full-disclosure] Re: [WEB SECURITY] Cross Site Scripting in Google, Martin O'Neal, 2006/07/13
- RE: [Full-disclosure] Re: [WEB SECURITY] Cross Site Scripting in Google, tcp fin, 2006/07/13
[Full-disclosure] [USN-310-1] ppp vulnerability, Martin Pitt, 2006/07/13
[Full-disclosure] [USN-309-1] libmms vulnerability, Martin Pitt, 2006/07/13
[Full-disclosure] [USN-308-1] shadow vulnerability, Martin Pitt, 2006/07/13
TigerTom Scripts, luny, 2006/07/13
vBulletin 3.5.4 (install_path) Exploit, CarcaBotx, 2006/07/13
- Re: vBulletin 3.5.4 (install_path) Exploit, mikathebest2003, 2006/07/13
- Re: vBulletin 3.5.4 (install_path) Exploit, scott, 2006/07/13
- Re: Re: vBulletin 3.5.4 (install_path) Exploit, mikathebest2003, 2006/07/13
  - RE: Re: vBulletin 3.5.4 (install_path) Exploit, Robert Marquardt, 2006/07/15
[ MDKSA-2006:116 ] - Updated kernel packages fixes multiple vulnerabilities, security, 2006/07/13
- Re: [ MDKSA-2006:116 ] - Updated kernel packages fixes multiple vulnerabilities, Paul Starzetz, 2006/07/13
BLOG:CMS 4.1.0 SQL injection File Include Vulnerability, securityconnection, 2006/07/13
sNews 1.3 XSS SQL, securityconnection, 2006/07/13
Windows Explorer URL File format overflow, nanika, 2006/07/13
- Re: Windows Explorer URL File format overflow, naveed, 2006/07/13
Shopping Cart V0.9, luny, 2006/07/13
Invision Power Board "v1.X & 2.X" SQL Injection, CrAzY . CrAcKeR, 2006/07/13
- Re: Invision Power Board "v1.X & 2.X" SQL Injection, mattmecham, 2006/07/13
[Full-disclosure] Touch arbitrary file execute vulnerability, Alex Park, 2006/07/13
[Full-disclosure] Cross Site Scripting in Google, RSnake, 2006/07/13
- Re: [WEB SECURITY] Cross Site Scripting in Google, bugtraq, 2006/07/13
  - [Full-disclosure] Re: [WEB SECURITY] Cross Site Scripting in Google, RSnake, 2006/07/13
    - Re: [Full-disclosure] Re: [WEB SECURITY] Cross Site Scripting in Google, Javor Ninov, 2006/07/13
Re: file include exploits in randshop v1.2, Rainer Duffner, 2006/07/13
PhpWebGallery Cross Site Scripting Vulnerability, iss4m . h, 2006/07/13
galleria <= 1.0 Remote File Inclusion Vulnerability, ineal, 2006/07/13
- Re: galleria <= 1.0 Remote File Inclusion Vulnerability, counterpoint, 2006/07/13
[Full-disclosure] [scip_Advisory 2352] F5 FirePass 4100 prior 6.x multiple Cross Site Scripting, Marc Ruef, 2006/07/13
- [Full-disclosure] [scip_Advisory 2352] F5 FirePass 4100 prior 6.x multiple Cross Site Scripting, Marc Ruef, 2006/07/13
[Full-disclosure] [scip_Advisory 2351] Kyberna AG ky2help various form fields SQL Injection, Marc Ruef, 2006/07/13
imgsvr dos exploit by n00b, co296, 2006/07/13
TBE 4.0 XSS, securityconnection, 2006/07/13
ZoneAlarm Insufficient protection of registry key 'VETFDDNT\Enum' Vulnerability, David Matousek, 2006/07/13
Call For Papers - No cON Name 2006 Edition Spain, deese, 2006/07/13
5 php scripts remote database password disclosure, gmdarkfig, 2006/07/13
Excel 2000/XP/2003 Style 0day POC, nanika, 2006/07/13
Contact for nhl.com, C. Hamby, 2006/07/13
Invision Power Board v1.3 Final SQL Injection, Breeeeh, 2006/07/13
- Re: Invision Power Board v1.3 Final SQL Injection, mattmecham, 2006/07/13
QTOFileManager 1.0, securityconnection, 2006/07/13
popup Vacation Rentals[calendar_year.php] SQL Injection, BoNy-m, 2006/07/13
Multiple vulnerabilities in TK8 Safe v.3.0.5, clappymonkey, 2006/07/13
Re: [Full Disclosure] [Kil13r-SA-20060701-2] MoniWiki 1.1.1 Cross-Site Scripting Vulnerability, mac68k, 2006/07/13
free QBoard v1.1 Multiple Remote File include, KARKOR23, 2006/07/13
Pearl Products Multiple Remote File Inclusion, xzerox, 2006/07/13
plume-cms v1.0.4 Multiple Remote File include, KARKOR23, 2006/07/13
WordPress 2.0.3 SQL Error and Full Path Disclosure, xzerox, 2006/07/13
- Re: WordPress 2.0.3 SQL Error and Full Path Disclosure, James Davis, 2006/07/13
- Re: WordPress 2.0.3 SQL Error and Full Path Disclosure, Jaroslaw Sajko, 2006/07/13
- Re: WordPress 2.0.3 SQL Error and Full Path Disclosure, zck zck, 2006/07/13
  - RE: WordPress 2.0.3 SQL Error and Full Path Disclosure, Aaron Newman, 2006/07/13
    - Re: WordPress 2.0.3 SQL Error and Full Path Disclosure, nate, 2006/07/15
- Re: WordPress 2.0.3 SQL Error and Full Path Disclosure, jholguin, 2006/07/15
[Full-disclosure] [ GLSA 200607-01 ] mpg123: Heap overflow, Sune Kloppenborg Jeppesen, 2006/07/13
[MajorSecurity #19] AutoRank <= 5.01 - Multiple XSS and cookie disclosure, admin, 2006/07/13
call for papers - IT Underground, Italy 2006, it_underground, 2006/07/13
Glossaire<<--v1.7 Remote File Include, CrAzY . CrAcKeR, 2006/07/13
Php-Fusion (Xss) With Avatar Upload, zeberus_, 2006/07/13
Whitepaper: IT (in)security implementation in a real world example, Denis Jedig, 2006/07/13
SturGeoN Upload v1 Remote Command Execution Exploit, gmdarkfig, 2006/07/13
SmS Script SQL Injection, Breeeeh, 2006/07/13
Internet Crna Gora SQL Injection, Breeeeh, 2006/07/13
OPERA Web Browser 9 Denial OF Service, y3dips, 2006/07/13
DEF CON 14: Speakers Selected and more., The Dark Tangent, 2006/07/13
phpMyAdmin : Cross-Site Scripting Vulnerability, bug@securitynews.ir, 2006/07/13
mAds v1.0, lunY, 2006/07/13
Buddy Zone Version 1.0.1 - XSS, luny, 2006/07/13
- Re: Buddy Zone Version 1.0.1 - XSS, support, 2006/07/15
[security bulletin] HPSBUX02103 SSRT5953 rev.3 - HP-UX passwd(1) Local Denial of Service (DoS), security-alert, 2006/07/13
[security bulletin] HPSBUX02128 SSRT5996 - rev.1 HP-UX mkdir(1) Local Unauthorized Access, security-alert, 2006/07/13
phpBB 2.0.21 Full Path Disclosure, xzerox, 2006/07/13
News <= 5.2 XSS, SQL Injection, Full Path Disclosure, gmdarkfig, 2006/07/13
NewsPHP 2006 PRO XSS SQL injection Vulnerability, securityconnection, 2006/07/13
Hobbit monitor: Security issue with Hobbit 4.2-beta client, Henrik Stoerner, 2006/07/13
My smiles "browse.php" SQL Injection, CrAzY . CrAcKeR, 2006/07/13
Module's Name "Classifieds" SQL Injection, CrAzY . CrAcKeR, 2006/07/13
[VulnWatch] Heap overflow in OpenOffice.org suite leads to code execution, NGSSoftware Insight Security Research, 2006/07/13
CDJ<<--V NITKID 2.0 "category.php" SQL Injection, CrAzY . CrAcKeR, 2006/07/13
MyNewsGroups<<--v. 0.6 "tree.php" SQL Injection, CrAzY . CrAcKeR, 2006/07/13
FreeHost "misc.php & news.php" SQL Injection, CrAzY . CrAcKeR, 2006/07/13
[Kil13r-SA-20060701-3] Massting Cross-Site Scripting Vulnerability, mac68k, 2006/07/13
[Kil13r-SA-20060701-2] MoniWiki 1.1.1 Cross-Site Scripting Vulnerability, mac68k, 2006/07/13
[Kil13r-SA-20060701-1] Ahnlab Search Cross-Site Scripting Vulnerability, mac68k, 2006/07/13
Zen-Cart 1.3.0.2 Full Path Disclosure, o . y . 6, 2006/07/13
libwmf integer/heap overflow, sean, 2006/07/13
[SECURITY] [DSA 1104-1] New OpenOffice.org packages fix several vulnerabilities, Martin Schulze, 2006/07/13
ezWaiter v3.0 - XSS, luny, 2006/07/13
[Full-disclosure] ZDI-06-020: Apple iTunes AAC File Parsing Integer Overflow Vulnerability, zdi-disclosures, 2006/07/13
[Full-disclosure] ISC: Firefox immune to outerHTML flaw in MSIE [Was: Browser bugs hit IE, Firefox], Juha-Matti Laurio, 2006/07/13
[Full-disclosure] [ GLSA 200606-30 ] Kiax: Arbitrary code execution, Sune Kloppenborg Jeppesen, 2006/07/13
[Full-disclosure] NCP VPN/PKI Client: UDP Bypassing, ml3@portsonline.net, 2006/07/13
[Full-disclosure] [FLSA-2006:189672] Updated thunderbird package fixes security issues, Marc Deslauriers, 2006/07/13
[Full-disclosure] Browser bugs hit IE, Firefox today (SANS), Bill Stout, 2006/07/13
- [Full-disclosure] Browser bugs hit IE, Firefox today (SANS), Bill Stout, 2006/07/13
  - [Full-disclosure] RE: Browser bugs hit IE, Firefox today (SANS), Carey, Steve T GARRISON, 2006/07/13
  - Re: Browser bugs hit IE, Firefox today (SANS), Alex Potter, 2006/07/13
    - Re: Browser bugs hit IE, Firefox today (SANS), Thor Larholm, 2006/07/13
    - Re: Browser bugs hit IE, Firefox today (SANS), Paul Szabo, 2006/07/13
    - Re: Browser bugs hit IE, Firefox today (SANS), 3CO, 2006/07/13
- Re: [Full-disclosure] Browser bugs hit IE, Firefox today (SANS), Juha-Matti Laurio, 2006/07/13
- RE: [Full-disclosure] Browser bugs hit IE, Firefox today (SANS), Schmehl, Paul L, 2006/07/13
Msie 7.0 beta Crash, Mr . Niega, 2006/07/13
- Re: Msie 7.0 beta Crash, mike, 2006/07/13
[Full-disclosure] rPSA-2006-0120-1 gnupg, Justin M. Forbes, 2006/07/13
[security bulletin] HPSBUX02122 SSRT061158 rev.2 - HP-UX Mozilla Remote Execution of Arbitrary Code, Denial of Service (DoS), security-alert, 2006/07/13
[security bulletin] HPSBTU02125 SSRT061105 rev.1 - HP Tru64 UNIX Running Perl 5.8.2 and earlier, Local Unauthorized Code Execution, security-alert, 2006/07/13
Novell Security Announcement NOVELL-SA:2006:001, Jim Short, 2006/07/13
Multiple Vulnerabilities in PatchLink Update Server 6, Chris Steipp, 2006/07/13
Novell Security contact address change, Roman Drahtmueller, 2006/07/13
Digital Armaments Security Advisory 29.06.2006: Siemens Speedstream Wireless Router Password Protection Bypass Vulnerability, info, 2006/07/13
Secunia Research: phpRaid SQL Injection and File Inclusion Vulnerabilities, Secunia Research, 2006/07/13
Softbiz Banner Exchange 1.0 XSS, securityconnection, 2006/07/13
[ MDKSA-2006:115 ] - Updated mutt packages fix buffer overflow vulnerability, security, 2006/07/13
[Full-disclosure] rPSA-2006-0116-1 mutt, Justin M. Forbes, 2006/07/13
CSRF in Nuked Klan 1.7 SP4.2, blwood, 2006/07/13
DMA[2006-0628a] - 'Apple OSX launchd unformatted syslog() vulnerability', K F (lists), 2006/07/13
[Full-disclosure] Corporate Virus Threats, Terminal Entry, 2006/07/13
[Full-disclosure] [ GLSA 200606-29 ] Tikiwiki: SQL injection and multiple XSS vulnerabilities, Sune Kloppenborg Jeppesen, 2006/07/13
[Full-disclosure] [ GLSA 200606-28 ] Horde Web Application Framework: XSS vulnerability, Sune Kloppenborg Jeppesen, 2006/07/13
[KAPDA]http://myimei.com/security/2006-06-24/mybb104archive-modelight-parameter-extractionvarable-overwriting.html, addmimistrator, 2006/07/13
[Full-disclosure] [MailServer Notification]Security Notification, mikejoslyn, 2006/07/13
Re: Files and cvars overwriting in Quake 3 engine (1.32c / rev 803 / ...), Luigi Auriemma, 2006/07/13
Layered Defense Advisory: Format String Vuln in CA eTrust, dh, 2006/07/13
PHPClassifieds General, luny, 2006/07/13
Cisco Security Advisory: Access Point Web-Browser Interface Vulnerability, Cisco Systems Product Security Incident Response Team, 2006/07/13
Secunia Research: Opera SSL Certificate "Stealing" Weakness, Secunia Research, 2006/07/13
[ MDKSA-2006:113 ] - Updated tetex packages fix embedded GD vulnerabilities, security, 2006/07/13
Re: [MajorSecurity #18] Ralf Image Gallery <=0.7.4 - Multiple XSS, Remote File Include and directory traversal vulnerabilities, Ralf, 2006/07/13
[OpenPKG-SA-2006.011] OpenPKG Security Advisory (png), OpenPKG, 2006/07/13
Cisco Security Advisory: Multiple Vulnerabilities in Wireless Control System, Cisco Systems Product Security Incident Response Team, 2006/07/13
PHP iCalendar Cross Site Scripting, botan, 2006/07/13
MKPortal 1.0.1 Final ($ind) File Include Vulnerability (perl), stormhacker, 2006/07/13
AzDGDatingPlatinum<<--v1.1.0 "view.php" SQL Injection, CrAzY . CrAcKeR, 2006/07/13
[Full-disclosure] [ GLSA 200606-27 ] Mutt: Buffer overflow, Sune Kloppenborg Jeppesen, 2006/07/13
BLOG:CMS <= 4.0.0k sql injection, rgod, 2006/07/13
PHP-Nuke Module's Name Sections<<--V3 SQL Injection, CrAzY . CrAcKeR, 2006/07/13
[ MDKSA-2006:112 ] - Updated gd packages fix DoS vulnerability., security, 2006/07/13
[ MDKSA-2006:114 ] - Updated libwmf packages fixes embedded GD vulnerability, security, 2006/07/13
- [ MDKSA-2006:114 ] - Updated libwmf packages fixes embedded GD vulnerability, security, 2006/07/13
vCard PRO SQL Injection, CrAzY . CrAcKeR, 2006/07/13
[KAPDA]MyBB 1.1.4~function_post.php~XSS Attack In URL tag, addmimistrator, 2006/07/13
smartsite cms v1.0 Remote File include, KARKOR23, 2006/07/13
[Full-disclosure] Presentation: AT&T ISNN - "Case Studies in Finding Previously Unknown Vulnerabilities in Web Applications.", Kenneth F. Belva, 2006/07/13
[Full-disclosure] [USN-307-1] mutt vulnerability, Martin Pitt, 2006/07/13
SyScan'06 Highlight - Is Phone Banking Safe?, thomas48, 2006/07/13
[Full-disclosure] SEC Consult SA-20060613-0 v2 :: OWA XSS Vulnerability Details, SEC Consult Research, 2006/07/13
[Kil13r-SA-20060628] Hanaro Search Cross-Site Scripting Vulnerability, mac68k, 2006/07/13
CAID 34325 - CA ITM, eAV, ePP scan job description field format string vulnerability, Williams, James K, 2006/07/13
[Kurdish Security # 10 ] MF Piadas 1.0 Remote File Include Vulnerability, botan, 2006/07/13
SUSE Security Announcement: freetype2 (SUSE-SA:2006:037), Thomas Biege, 2006/07/13
[Full-disclosure] Files and cvars overwriting in Quake 3 engine (1.32c / rev 803 / ...), Luigi Auriemma, 2006/07/13
NTA-Monitor releases arp-scan detection and fingerprinting tool, Adrian Chiang, 2006/07/13
[Kurdish Security # 11] SiteBar Cross-Site Scripting, botan, 2006/07/13
phpvillage "funshow.php" SQL Injection, CrAzY . CrAcKeR, 2006/07/13
SYMSA-2006-006: Lotus Domino SMTP Based Denial of Service, research, 2006/07/13
CrisoftRicette<<--1.0pre15b Remote File Inclusion, CrAzY . CrAcKeR, 2006/07/13
Re: [ECHO_ADV_34$2006] W-Agora (Web-Agora) <= 4.2.0 (inc_dir) Remote File Inclusion, Steven M. Christey, 2006/07/13
[Full-disclosure] ZDI-06-019: GraceNote CDDBControl ActiveX Buffer Overflow Vulnerability, zdi-disclosures, 2006/07/13
[SECURITY] [DSA 1103-1] New Linux kernel 2.6.8 packages fix several vulnerabilities, Moritz Muehlenhoff, 2006/07/13
[Full-disclosure] [USN-306-1] MySQL 4.1 vulnerability, Martin Pitt, 2006/07/13
Usenet Script v0.5, luny, 2006/07/13
[Full-disclosure] Microsoft's Real Test with Vista is Vulnerabilities, Gadi Evron, 2006/07/13
- Re: [Full-disclosure] Microsoft's Real Test with Vista is Vulnerabilities, Brate Sanders, 2006/07/13
  - Re: [Full-disclosure] Microsoft's Real Test with Vista is Vulnerabilities, Gadi Evron, 2006/07/13
  - Re: [Full-disclosure] Microsoft's Real Test with Vista is Vulnerabilities, James Tucker, 2006/07/13
    - Re: [Full-disclosure] Microsoft's Real Test with Vista is Vulnerabilities, Brate Sanders, 2006/07/13
- [Full-disclosure] Re: [funsec] Microsoft's Real Test with Vista is Vulnerabilities, thomas48, 2006/07/13
  - [Full-disclosure] RE: [funsec] Microsoft's Real Test with Vista is Vulnerabilities, Larry Seltzer, 2006/07/13
- [Full-disclosure] Re: Microsoft's Real Test with Vista is Vulnerabilities, Susan Bradley, 2006/07/13
Windows Live Messenger 8.0 ( Contact List *.ctt ) Heap Overflow, Alexander Hristov, 2006/07/13
Jaws <= 0.6.2 'Search gadget' SQL injection, rgod, 2006/07/13
error_log() Safe Mode Bypass PHP 5.1.4 and 4.4.2, cxib, 2006/07/13
[Full-disclosure] [USN-305-1] OpenLDAP vulnerability, Martin Pitt, 2006/07/13
Winged Gallery v1.0, luny, 2006/07/13
[Full-disclosure] Re: Is Windows TCP/IP source routing PoC code available?, 3APA3A, 2006/07/13
- Re[2]: Is Windows TCP/IP source routing PoC code available?, "Ìèíàåâ_Àíäðåé", 2006/07/13
  - Re: [Full-disclosure] Re[2]: Is Windows TCP/IP source routing PoC code available?, 3APA3A, 2006/07/13
Taking Over Laptops by Fuzzing Wireless Drivers, Gadi Evron, 2006/07/13
[OpenPKG-SA-2006.010] OpenPKG Security Advisory (gnupg), OpenPKG, 2006/07/13
OpenGuestbook Cross Site Scripting & SQL Injection, simo64, 2006/07/13
Amazon and Msn vulnerabilities, dcrab, 2006/07/13
Universal Hooker - Tool release, Hernan Ochoa, 2006/07/13
Undisclosed cross site scripting vulnerabilities in domaintools.com - requesting contacts, admin, 2006/07/13
Mailenable SMTP Service DoS, db0, 2006/07/13
GlobeTrotter Mobility Manager - security issue, dzelek, 2006/07/13
[ MDKSA-2006:111 ] - Updated MySQL packages fixes authorized user DoS(crash) vulnerability., security, 2006/07/13
XSS in Cpanel 10, preth00nker, 2006/07/13
- Re: XSS in Cpanel 10, bug, 2006/07/13
[Full-disclosure] [ GLSA 200606-26 ] EnergyMech: Denial of Service, Thierry Carrez, 2006/07/13
[Full-disclosure] [ GLSA 200606-25 ] Hashcash: Possible heap overflow, Thierry Carrez, 2006/07/13
[SECURITY] [DSA 1102-1] New pinball packages fix privilege escalation, Steve Kemp, 2006/07/13
Planetnews Authecnication Admin ByPass, alp_eren, 2006/07/13
DeluxeBB 1.07 Create admin Exploit, Hessamx, 2006/07/13
Claroline Cross-Site Scripting Vulnerabilities, bug@securitynews.ir, 2006/07/13
[Kurdish Security # 9] MyMail Directory Traversal And XSS Attacking Vulnerability, botan, 2006/07/13
[Full-disclosure] [USN-304-1] gnupg vulnerability, Martin Pitt, 2006/07/13
[Full-disclosure] ERNW Security Advisory 01/2006, mozilla, 2006/07/13
Softbiz Dating 1.0 SQL injection, securitycon