Bugtraq (thread)

Woltlab Burning Board 2.3.X XSS Vulnerability (0-Day) FIXED VERSION, blueshisha, 2006/11/30
LDU <= 8.x (polls.php) Remote SQL Injection Vulnerability, ajannhwt, 2006/11/30
contentserv 4.x, capt . nem0, 2006/11/30
Invision Community Blog Mod 1.2.4 .PHP SQL Injection Vulnerability, infection, 2006/11/30
Seditio <= 1.10 (pollid) Remote SQL Injection Vulnerability, ajannhwt, 2006/11/30
@lex Guestbook 4.0.1 : Full Path Disclosure & XSS, mr_kaliman, 2006/11/30
[Full-disclosure] [ GLSA 200611-26 ] ProFTPD: Remote execution of arbitrary code, Raphael Marichez, 2006/11/30
[Full-disclosure] [USN-390-1] evince vulnerability, Kees Cook, 2006/11/30
[security bulletin] HPSBUX02153 SSRT061181 rev.2 - HP-UX Running Firefox, Remote Unauthorized Access or Elevation of Privileges or Denial of Service (DoS), security-alert, 2006/11/30
Secunia Research: MailEnable IMAP Service Two Vulnerabilities, Secunia Research, 2006/11/30
[ MDKSA-2006:217-1 ] - Updated proftpd packages fix vulnerabilities, security, 2006/11/30
[Full-disclosure] iDefense Security Advisory 11.30.06: Multiple Vendor libgsf Heap Overflow Vulnerability, iDefense Labs, 2006/11/30
[Full-disclosure] msf3 3Com TFTP exploit, Kurt Grutzmacher, 2006/11/30
[Full-disclosure] [USN-389-1] GnuPG vulnerability, Kees Cook, 2006/11/29
Potentially OT: AJAX article, clappymonkey, 2006/11/29
[Aria-Security Team] FipsSHOP SQL Injection, Advisory, 2006/11/29
[Full-disclosure] [USN-388-1] KOffice vulnerability, Kees Cook, 2006/11/29
Monkey Boards version 0.3.5 Multiple Path Disclosure Vulnerabilities, jesper . jurcenoks, 2006/11/29
New Windows tool - PWDumpX v1.0, Reed Arvin, 2006/11/29
OWASP JBroFuzz 0.3 Fuzzer Released!, subere, 2006/11/29
REMLAB Web Mech Designer 2.0.5 Path Disclosure Vulnerability, jesper . jurcenoks, 2006/11/29
SYM06-023, Symantec NetBackup PureDisk: PHP update to Address Reported Security Vulnerability, Mike Prosser, 2006/11/29
Multiple Vulnerabilities in AlternC version 0.9.5, Vincent A.Menard, 2006/11/29
Secunia Research: Borland Products idsql32.dll Buffer Overflow Vulnerability, Secunia Research, 2006/11/29
[ MDKSA-2006:219 ] - Updated tar packages fix vulnerability, security, 2006/11/29
PHP Event Calendar 1.5.1 (index.php) Remote File Include Vulnerability, philip anselmo, 2006/11/29
- Re: PHP Event Calendar 1.5.1 (index.php) Remote File Include Vulnerability, Stuart Moore, 2006/11/29
[Full-disclosure] ZDI-06-043: Novell Netware Client Print Provider Buffer Overflow Vulnerability, zdi-disclosures, 2006/11/29
- Re: [Full-disclosure] ZDI-06-043: Novell Netware Client Print Provider Buffer Overflow Vulnerability, Dude VanWinkle, 2006/11/30
  - Re: [Full-disclosure] ZDI-06-043: Novell Netware Client Print Provider Buffer Overflow Vulnerability, zdi-disclosures, 2006/11/30
    - Re: [Full-disclosure] ZDI-06-043: Novell Netware Client Print Provider Buffer Overflow Vulnerability, Dude VanWinkle, 2006/11/30
b2evolution Remote File inclusion Vulnerability, tarkus, 2006/11/29
[Full-disclosure] iDefense Security Advisory 11.29.06: Horde Kronolith Arbitrary Local File Inclusion Vulnerability, iDefense Labs, 2006/11/29
[Full-disclosure] New report on Teredo security, Jim Hoagland, 2006/11/28
- Re: [Full-disclosure] New report on Teredo security, Jeroen Massar, 2006/11/29
b2evolution XSS Vulnerabilities, tarkus, 2006/11/28
[Full-disclosure] [USN-387-1] Dovecot vulnerability, Kees Cook, 2006/11/28
[Full-disclosure] [ GLSA 200611-23 ] Mono: Insecure temporary file creation, Raphael Marichez, 2006/11/28
[Full-disclosure] [ GLSA 200611-25 ] OpenLDAP: Denial of Service vulnerability, Raphael Marichez, 2006/11/28
[Full-disclosure] [ GLSA 200611-24 ] LHa: Multiple vulnerabilities, Raphael Marichez, 2006/11/28
TSLSA-2006-0066 - multi, Trustix Security Advisor, 2006/11/28
evince buffer overflow exploit (gv), kspecial, 2006/11/28
[Full-disclosure] ProFTPD mod_tls pre-authentication buffer overflow, research, 2006/11/28
- Re: [Full-disclosure] ProFTPD mod_tls pre-authentication buffer overflow, Mark Wadham, 2006/11/29
uPhotoGallery (v 1.1) SQL Injection, Advisory, 2006/11/28
CVE-2006-5815: remote code execution in ProFTPD, John Morrissey, 2006/11/28
GnuPG 1.4 and 2.0 buffer overflow, Werner Koch, 2006/11/28
- safely concatenating strings in portable C (Re: GnuPG 1.4 and 2.0 buffer overflow), Solar Designer, 2006/11/30
SYMSA-2006-011: JBoss Java Class DeploymentFileRepository Directory Traversal, research, 2006/11/28
- Re: SYMSA-2006-011: JBoss Java Class DeploymentFileRepository Directory Traversal, Jon Hart, 2006/11/28
ClickContact SQL Injection, Advisory, 2006/11/28
AIDE problem handling symlinks, fryxar fryxar, 2006/11/28
Cursor snarfing - a new class of vulnerability and attack in Oracle, David Litchfield, 2006/11/27
[Full-disclosure] [USN-386-1] ImageMagick vulnerability, Kees Cook, 2006/11/27
2nd European Conference on Computer Network Defense (EC2ND), Blyth A J C (AT), 2006/11/27
Re: New Flaw in Firefox 2.0: DoS and possible remote code execution, sflist, 2006/11/27
[Full-disclosure] [USN-385-1] tar vulnerability, Kees Cook, 2006/11/27
[Full-disclosure] ProFTPD 1.3.0 remote stack overflow, research, 2006/11/27
PhpGedView 4.0.2 (DOCUMENT_ROOT) File inclusion Vulnerablity, x___ . _, 2006/11/27
- Re: PhpGedView 4.0.2 (DOCUMENT_ROOT) File inclusion Vulnerablity, Mefisto, 2006/11/28
- Re: PhpGedView 4.0.2 (DOCUMENT_ROOT) File inclusion Vulnerablity, yalnifj, 2006/11/28
CuteNews v1.4.5 (search.php) Remote file include vulnerability, philip anselmo, 2006/11/27
- Re: CuteNews v1.4.5 (search.php) Remote file include vulnerability, Francesco Laurita, 2006/11/27
- Re: CuteNews v1.4.5 (search.php) Remote file include vulnerability, raven, 2006/11/29
TFTP Server 3CTftpSvc Buffer Overflow Vulnerability (Long transporting mode), liuqx, 2006/11/27
VMware 5.5.1 Local Buffer Overflow (HTML Exploit), NormandiaN_MailID, 2006/11/27
- Re: VMware 5.5.1 Local Buffer Overflow (HTML Exploit), str0ke, 2006/11/27
ClickGallery Sql Injection, Advisory, 2006/11/27
Clickblog Sql Injection, Advisory, 2006/11/27
TFTP Server AT-TFTP Server v 1.9 Buffer Overflow Vulnerability (Long filename), liuqx, 2006/11/27
[Full-disclosure] rPSA-2006-0219-1 info install-info texinfo, rPath Update Announcements, 2006/11/27
[Full-disclosure] rPSA-2006-0218-1 ImageMagick, rPath Update Announcements, 2006/11/27
[Aria-Security Team] General Shopping Cart SQL Injection Vulnerability, Advisory, 2006/11/27
[Aria-Security Team] Evolve shopping cart SQL Injection Vulnerability, Advisory, 2006/11/27
[Full-disclosure] The state of JavaScript Hacking, pdp (architect), 2006/11/27
- Re: [Full-disclosure] The state of JavaScript Hacking, Martin Johns, 2006/11/27
- Re: [WEB SECURITY] The state of JavaScript Hacking, bugtraq, 2006/11/28
[Full-disclosure] MHL-2006-003 Public Advisory: "mboard" file creation issue, Mayhemic Labs Security, 2006/11/27
[Full-disclosure] [ GLSA 200611-21 ] Kile: Incorrect backup file permission, Sune Kloppenborg Jeppesen, 2006/11/27
[Full-disclosure] [ GLSA 200611-22 ] Ingo H3: Folder name shell command injection, Sune Kloppenborg Jeppesen, 2006/11/27
[Full-disclosure] iDefense Security Advisory 11.26.06: Qbik WinGate Compressed Name Pointer Denial of Service Vulnerability, iDefense Labs, 2006/11/26
[Full-disclosure] iDefense Security Advisory 11.26.06: GNU Radius Format String Vulnerability, iDefense Labs, 2006/11/26
[Full-disclosure] Mambo component "jambook" Html injection Vulnerability, 0o_zeus_o0 elitemexico.org, 2006/11/26
mAlbum v0.3 local file inclusion, tux025, 2006/11/25
Free tool for pattern identification (for researchers), Gary Golomb, 2006/11/25
Wisi Portal [Sql Injection By Jesus Tovar], nagazakig74, 2006/11/25
Siap Cms Sql Injection (login.asp), nagazakig74, 2006/11/25
[Full-disclosure] AttackAPI 2.0 alpha, pdp (architect), 2006/11/25
Re: Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?), stopmakingnoise, 2006/11/24
- Re: Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?), Steve Friedl, 2006/11/25
  - Re: Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?), Tim Newsham, 2006/11/27
    - Re: Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?), David Litchfield, 2006/11/27
- Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?), Thor (Hammer of God), 2006/11/25
  - Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?), Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP], 2006/11/25
- Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?), Thor (Hammer of God), 2006/11/25
- Re: Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?), Steven M. Christey, 2006/11/28
  - Re: Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?), David Litchfield, 2006/11/28
- Re: Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?), David Litchfield, 2006/11/29
- RE: Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?), Shawn Fitzgerald, 2006/11/29
New Windows tool - NBTEnum 3.3, Reed Arvin, 2006/11/24
DoS in Microsoft Windows Live Messenger <= 8.0, dragonjar, 2006/11/24
- Re: DoS in Microsoft Windows Live Messenger <= 8.0, astralbabz, 2006/11/25
WebHost Manager (WHM) Multiple Cross-Site Scripting, Advisory, 2006/11/24
CPanel 11 Multiple Cross-Site Scription, Advisory, 2006/11/24
PHP-Nuke Mermaid Module V1.2 (formdisp.php) Remote File Include Exploit, crackers_child, 2006/11/24
[Aria-Security Team] Ultimate Survey Pro SQL Injection, Advisory, 2006/11/24
Cahier de texte V2.0 SQL Code Execution Exploit, gmdarkfig, 2006/11/24
[Full-disclosure] [ GLSA 200611-20 ] GNU gv: Stack overflow, Sune Kloppenborg Jeppesen, 2006/11/24
[Full-disclosure] [ GLSA 200611-19 ] ImageMagick: PALM and DCM buffer overflows, Sune Kloppenborg Jeppesen, 2006/11/24
[Aria-Security Team] iNews News Manager SQL Injection, Advisory, 2006/11/24
[Aria-Security Team] MidiCart ASP Shopping Cart SQL Injection, Advisory, 2006/11/24
[Aria-Security Team] ASP ListPics 5.0 SQL Injection, Advisory, 2006/11/24
[Aria-Security Team] Fixit iDMS Pro Image Gallery SQL Injection, Advisory, 2006/11/24
PHP-Nuke <= 7.9 News module "sid" SQL Injection vulnerabilities, paisterist . nst, 2006/11/24
[Aria-Security Team] MidiCart ASP Plus Shopping Cart SQL Injection, Advisory, 2006/11/24
Wolflab Burning Board Lite 1.0.2 two sql injections, retrog, 2006/11/24
mmgallery Multiple vulnerabilities, saudi, 2006/11/24
Cross site scripting & fullpath disclosure, saudi, 2006/11/24
[Full-disclosure] [ GLSA 200611-18 ] TIN: Multiple buffer overflows, Sune Kloppenborg Jeppesen, 2006/11/24
Cracking String Encryption in Java Obfuscated Bytecode, subere, 2006/11/23
- Re: Cracking String Encryption in Java Obfuscated Bytecode, Jim Manico, 2006/11/24
  - Re: Cracking String Encryption in Java Obfuscated Bytecode, John GALLET, 2006/11/24
- RE: Cracking String Encryption in Java Obfuscated Bytecode, Jeremy Epstein, 2006/11/27
Active PHP Bookmarks (apb.php) Remote file include, philip anselmo, 2006/11/23
- Re: Active PHP Bookmarks (apb.php) Remote file include, Mefisto, 2006/11/24
LS-20061102 - Business Objects Crystal Reports Stack Overflow Vulnerability, advisories, 2006/11/23
[Full-disclosure] [ GLSA 200611-17 ] fvwm: fvwm-menu-directory fvwm command injection, Matthias Geerdsen, 2006/11/23
[ MDKSA-2006:218 ] - Updated apache-mod_auth_kerb packages fixes DoS vulnerability, security, 2006/11/23
Re: SolpotCrew Advisory #10 - phpBB XS (phpbb_root_path) Remote File Include, webmaster, 2006/11/23
Password Flaw also in Firefox 1.5.08. Was: Big Flaw in Firefox 2: Password Manager Bug Exposes Passwords, Michael Scheidell, 2006/11/23
- Re: Password Flaw also in Firefox 1.5.08. Was: Big Flaw in Firefox 2: Password Manager Bug Exposes Passwords, Juha-Matti Laurio, 2006/11/23
[ECHO_ADV_61_2006] a-ConMan <= v3.2beta Remote File Inclusion, erdc, 2006/11/23
CFP - VII National Computer and Information Security Conference, Jeimy Cano, 2006/11/23
NVIDIA nView (keystone) local Denial Of service, no-reply, 2006/11/23
Big Flaw in Firefox 2: Password Manager Bug Exposes Passwords, fash1on, 2006/11/22
- Re: Big Flaw in Firefox 2: Password Manager Bug Exposes Passwords, 3APA3A, 2006/11/23
XSS in scriptat support InverseFlow Help Desk v2.31, gamr-14, 2006/11/22
Perl proxy checker using samair.ru, Iko Riyadi, 2006/11/22
CONFidence 2007 CFP, andrzej . targosz, 2006/11/22
Lack of environment sanitization in the FreeBSD, OpenBSD, NetBSD dynamic loaders., In Cognito, 2006/11/22
- Re: Lack of environment sanitization in the FreeBSD, OpenBSD, NetBSD dynamic loaders., Casper . Dik, 2006/11/23
- Lack of environment sanitization in the FreeBSD, OpenBSD, NetBSD dynamic loaders., In Cognito, 2006/11/22
[ MDKSA-2006:208-1 ] - Updated openldap packages fixes Bind vulnerability, security, 2006/11/22
Windows Media ASX PlayList File Denial Of Service Vulnerability, sehato, 2006/11/22
Re: [ECHO_ADV_53$2006] QnECMS <= 2.5.6 (adminfolderpath) Remote File Inclusion Vulnerability, jim, 2006/11/22
*BSD banner INT overflow vulnerability, Gruzicki Wlodek, 2006/11/22
- Re: *BSD banner INT overflow vulnerability, Steve Shockley, 2006/11/22
  - Re: *BSD banner INT overflow vulnerability, admin, 2006/11/23
- Re: Re: *BSD banner INT overflow vulnerability, evilrabbi, 2006/11/22
  - Re: *BSD banner INT overflow vulnerability, Bob Beck, 2006/11/22
Secunia Research: PassGo SSO Plus Insecure Default Directory Permissions, Secunia Research, 2006/11/22
VMSA-2006-0010 - SSL sessions not authenticated by VC Clients, VMware Security team, 2006/11/21
Advisory: Seditio <= 1.10 Remote SQL Injection Vulnerability., Mustafa Can Bjorn IPEKCI, 2006/11/21
Vulnerability in PostNuke, sni-labs, 2006/11/21
Clarifying integer overflows vs. signedness errors, Steven M. Christey, 2006/11/21
- Re: Clarifying integer overflows vs. signedness errors, Thiago Zaninotti, 2006/11/22
- Re: Clarifying integer overflows vs. signedness errors, Pavel Kankovsky, 2006/11/25
Advisory: LDU <= 8.x Remote SQL Injection Vulnerability., Mustafa Can Bjorn IPEKCI, 2006/11/21
JiRos Links Manager[injection sql & xss permanent], saps . audit, 2006/11/21
creadirectory [injection sql & xss], saps . audit, 2006/11/21
Link Exchange Lite [injection sql], saps . audit, 2006/11/21
Re: Re: Phpjobscheduler 3.0 - Multiple Remote File Include, admin, 2006/11/21
ContentNow CMS 1.39 Sql Injection + Path Disclosure Vulnerabilities, revenge, 2006/11/21
aBitWhizzy [local file include], saps . audit, 2006/11/21
[Full-disclosure] [USN-381-1] Firefox vulnerabilities, Kees Cook, 2006/11/21
[Full-disclosure] [USN-382-1] Thunderbird vulnerabilities, Kees Cook, 2006/11/21
Secunia Research: My Firewall Plus Privilege Escalation Vulnerability, Secunia Research, 2006/11/21
Re: [ GLSA 200611-11 ] TikiWiki: Multiple vulnerabilities, saps . audit, 2006/11/21
- Re: [ GLSA 200611-11 ] TikiWiki: Multiple vulnerabilities, Chris Gianelloni, 2006/11/21
New Correction: Re: Serious crypto problem fixed by envelope HMAC method instead of currently used prefix, Omirjan Batyrbaev, 2006/11/21
[KAPDA]::Security analysis of cutenews 1.4.5, alireza hassani, 2006/11/21
LS-20061113 - CA BrightStor ARCserve Backup Remote Buffer Overflow Vulnerability, advisories, 2006/11/21
- RE: LS-20061113 - CA BrightStor ARCserve Backup Remote Buffer Overflow Vulnerability, Williams, James K, 2006/11/22
Which is more secure? Oracle vs. Microsoft, David Litchfield, 2006/11/21
- "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?), Matthew Conover, 2006/11/22
  - Re: "Which is more secure? Oracle vs. Microsoft" (is it a fair comparison?), David Litchfield, 2006/11/22
[Full-disclosure] [ GLSA 200611-16 ] Texinfo: Buffer overflow, Sune Kloppenborg Jeppesen, 2006/11/21
[Full-disclosure] [ GLSA 200611-15 ] qmailAdmin: Buffer overflow, Sune Kloppenborg Jeppesen, 2006/11/21
The Classified Ad System [multiple xss & injection sql], saps . audit, 2006/11/21
[ MDKSA-2006:216 ] - Updated links packages fix smb vulnerability, security, 2006/11/21
ltwCalendar => 4.2.1 Remote File Include Vulnerabilities, the_3dit0r, 2006/11/21
Classified System [injection sql], saps . audit, 2006/11/21
my little weblog => Cross Site Scripting, the_3dit0r, 2006/11/21
mAlbum v0.3 Multiple vulnerabilitizzz, tux025, 2006/11/21
Wabbit PHP Gallery => 0.9 Remote Traversal Directory, the_3dit0r, 2006/11/21
[ MDKSA-2006:215 ] - Updated avahi packages fix netlink vulnerability, security, 2006/11/20
BirdBlog => v1.4.0 Cross Site Scripting, the_3dit0r, 2006/11/20
[Full-disclosure] [USN-384-1] OpenLDAP vulnerability, Kees Cook, 2006/11/20
MyAlbum <= 3.02 (langs_dir) Remote File Inclusion Exploit, the_3dit0r, 2006/11/20
The Week of Oracle Database Bugs, Cesar, 2006/11/20
[ MDKSA-2006:217 ] - Updated proftpd packages fix vulnerabilities, security, 2006/11/20
- Re: [Full-disclosure] [ MDKSA-2006:217 ] - Updated proftpd packages fix vulnerabilities, research, 2006/11/21
LoudMouth => 2.4 Remote File Include Vulnerabilities, the_3dit0r, 2006/11/20
Telaen => 1.1.0 Remote File Include Vulnerability, the_3dit0r, 2006/11/20
mxBB calsnails module 1.06 Remote File Inclusion Exploit, the_3dit0r, 2006/11/20
mg.applanix <= 1.3.1 Remote File Include Exploit, the_3dit0r, 2006/11/20
iPrimal Forums (index.php) Remote File Include Exploit, the_3dit0r, 2006/11/20
enomphp => 4.0 Remote Traversal Directory, the_3dit0r, 2006/11/20
klf-realty [injection sql], saps . audit, 2006/11/20
DodosMail <= 2.0.1(dodosmail.php) Remote File Inclusion Exploit, the_3dit0r, 2006/11/20
dicshunary 0.1 alpha Remote File Inclusion Exploit, the_3dit0r, 2006/11/20
[Full-disclosure] [ GLSA 200611-14 ] TORQUE: Insecure temproary file creation, Sune Kloppenborg Jeppesen, 2006/11/20
[Full-disclosure] [ GLSA 200611-12 ] Ruby: Denial of Service vulnerability, Sune Kloppenborg Jeppesen, 2006/11/20
Shopping_Catalog Remote File Include exploit, the_3dit0r, 2006/11/20
RE: FreeBSD all versions FireWire IOCTL kernel integer overflow information disclousure, Rogier Mulhuijzen, 2006/11/20
[Full-disclosure] [ GLSA 200611-13 ] Avahi: "netlink" message vulnerability, Sune Kloppenborg Jeppesen, 2006/11/20
[Full-disclosure] [ GLSA 200611-11 ] TikiWiki: Multiple vulnerabilities, Sune Kloppenborg Jeppesen, 2006/11/20
gNews Publisher SQL Injection Vulnerabilites, Advisory, 2006/11/20
PhpQuickGallery <= 1.9 Remote File Inclusion Exploit, the_3dit0r, 2006/11/20
Rialto 1.6[admin login bypass & multiples injections sql], saps . audit, 2006/11/20
eClassifieds [injection sql], saps . audit, 2006/11/20
Serious crypto problem fixed by envelope HMAC method insteadof currently used prefix, Omirjan Batyrbaev, 2006/11/20
- Re: Serious crypto problem fixed by envelope HMAC method insteadof currently used prefix, Omirjan Batyrbaev, 2006/11/20
- Correction: Re: Serious crypto problem fixed by envelope HMAC method insteadof currently used prefix, Omirjan Batyrbaev, 2006/11/21
  - Re: Correction: Re: Serious crypto problem fixed by envelope HMAC method insteadof currently used prefix, Steve Friedl, 2006/11/21
PHPOLL => 0.96 Cross Site Scripting, the_3dit0r, 2006/11/20
ehomes [multiples injections sql], saps . audit, 2006/11/20
ASPNuke <= 0.80 (register.asp) Remote SQL Injection Vulnerability, ajannhwt, 2006/11/20
Telaen <= 1.1.0 Remote File Include Exploit, the_3dit0r, 2006/11/20
Rapid Classified v3.1 [multiple xss (get) & injection sql], saps . audit, 2006/11/20
Digital Armaments November-Decemberr Hacking Challenge: KERNEL, info, 2006/11/20
Ixprim CMS 1.2 Remote File Include Vulnerability, vitux . manis, 2006/11/20
Dovecot IMAP/POP3 server: Off-by-one buffer overflow, Timo Sirainen, 2006/11/20
GPhotos 1.5 Multiple vulnerabilities, tux025, 2006/11/18
- Re: GPhotos 1.5 Multiple vulnerabilities, packet, 2006/11/21
A-Cart 2.0 SQL Injection, Advisory, 2006/11/18
[Aria-Security's Research Team] Texas Rank'em SQL Injection Vulnerabilite, Advisory, 2006/11/18
[MajorSecurity Advisory #35]Travelsized CMS - Multiple Cross Site Scripting Issues, admin, 2006/11/18
[Aria-Security's Research Team] ActiveNews Manager SQL Injection Vulnerabilite, Advisory, 2006/11/18
- Re: [Aria-Security's Research Team] ActiveNews Manager SQL Injection Vulnerabilite, gmdarkfig, 2006/11/18
PhpBB Module Dimension Remote File Include, bluespy . ok, 2006/11/18
- PhpBB Module Dimension Remote File Include, bluespy . ok, 2006/11/20
BLOG:CMS <= 4.1.3 XSS, katatafish, 2006/11/18
[ MDKSA-2006:164-1 ] - Updated xorg-x11/XFree86 packages fix integer overflow vulnerabilities, security, 2006/11/18
Vikingboard (0.1.2) [ multiples vulnerability ], saps . audit, 2006/11/18
Drone Armies C&C Report - 17 Nov 2006, c2report, 2006/11/18
Oxygen <= 1.1.3 (O2PHP Bulletin Board) SQL Injection, gmdarkfig, 2006/11/18
[MajorSecurity Advisory #36]dev4u CMS - Multiple SQL Injection and Cross Site Scripting Issues, admin, 2006/11/18
A-Cart PRO SQL Injection, Advisory, 2006/11/18
- Re: A-Cart PRO SQL Injection, gmdarkfig, 2006/11/18
[Full-disclosure] Sage cross-context scripting -> LOCAL-CONTEXT SCRIPTING, pagvac, 2006/11/18
[Full-disclosure] linksys wrt54g v5 authentication bypass fixed, Ginsu Rabbit, 2006/11/17
[ MDKSA-2006:214 ] - Updated gv packages fix buffer overflow vulnerability, security, 2006/11/17
Infinitytechs Restaurants CM, saps . audit, 2006/11/17
Re: Airmagnet management interfaces multiple vulnerabilities, ckuan, 2006/11/17
Dating Site [ login bypass & xss], saps . audit, 2006/11/17
MosReporter Joomla Component Remote File Inclusion Exploi, crackers_child, 2006/11/17
XSS vBulletin 3.6.X Admin Control Painel, insanity, 2006/11/17
20/20 datashed [ multiples injection sql ], saps . audit, 2006/11/17
igital Armaments November-Decemberr Hacking Challenge: KERNEL Remote, info, 2006/11/17
Aspmforum [ multiples injection sql (get&post)], saps . audit, 2006/11/17
Sphpblog => 0.8 Remote File Include Vulnerabilities, the_3dit0r, 2006/11/17
[Reversemode advisory] Computer Associates HIPS Drivers - multiple local privilege escalation vulnerabilities., Reversemode, 2006/11/17
- RE: [Reversemode advisory] Computer Associates HIPS Drivers - multiple local privilege escalation vulnerabilities., Williams, James K, 2006/11/21
TFTPD32 v3.01 TFTP Server Long File Name Buffer Overflow Vulnerability, liuqx, 2006/11/17
20/20 real estate [ multiples injection sql ], saps . audit, 2006/11/17
20/20 auto gallery [ multiples injection sql ], saps . audit, 2006/11/17
[Aria-Security] CPanel Network Tools Cross Site Scripting [Advisory], Advisory, 2006/11/17
TSLSA-2006-0065 - libpng, Trustix Security Advisor, 2006/11/17
[security bulletin] HPSBMA02088 SSRT051026 rev. 2 - HP-UX running WBEM Services Denial of Service (DoS), security-alert, 2006/11/17
[OpenPKG-SA-2006.036] OpenPKG Security Advisory (png), OpenPKG, 2006/11/17
[ MDKSA-2006:213 ] - Updated chromium packages to fix embedded libpng vulnerabilities, security, 2006/11/17
[Full-disclosure] [ GLSA 200611-10 ] WordPress: Multiple vulnerabilities, Sune Kloppenborg Jeppesen, 2006/11/17
[Full-disclosure] [ GLSA 200611-09 ] libpng: Denial of Service, Sune Kloppenborg Jeppesen, 2006/11/17
[Full-disclosure] [USN-383-1] libpng vulnerability, Kees Cook, 2006/11/17
[ MDKSA-2006:212 ] - Updated doxygen packages to fix embedded libpng vulnerabilities, security, 2006/11/17
Active News Manager [ injection sql (post&get)], saps . audit, 2006/11/17
[OpenPKG-SA-2006.035] OpenPKG Security Advisory (proftpd), OpenPKG, 2006/11/17
[ MDKSA-2006:210 ] - Updated syslinux packages to fix embedded libpng vulnerabilities, security, 2006/11/17
[ MDKSA-2006:211 ] - Updated pxelinux packages to fix embedded libpng vulnerabilities, security, 2006/11/17
Kerio WebSTAR local privilege escalation, K F (lists), 2006/11/17
[ MDKSA-2006:209 ] - Updated libpng packages fix vulnerabilities, security, 2006/11/17
Pilot Cart V.7.2 [ injection sql (post) ], saps . audit, 2006/11/17
Storystream => 4.0 Remote File Include Vulnerability Exploit, the_3dit0r, 2006/11/17
RED Blog => Remote File Include Vulnerability Exploit, the_3dit0r, 2006/11/17
blogcms => 4.0.0 Remote File Include, the_3dit0r, 2006/11/17
- Re: blogcms => 4.0.0 Remote File Include, Stefano Zanero, 2006/11/17
My-BIC => 0.6.5 Remote File Include Vulnerability Exploit, the_3dit0r, 2006/11/17
Image gallery with Access Database SQL Injection, Advisory, 2006/11/17
UK Security Convention - Continuity 2006, Manchester 2600, 2006/11/17
Secunia Research: Panda ActiveScan Multiple Vulnerabilities, Secunia Research, 2006/11/17
eggblog=> 3.1.0 Cross Site Scripting, the_3dit0r, 2006/11/17
Hot Links download backup authorized vulnerabilities (re-post with some edit), hack2prison, 2006/11/17
worksystem => Remote File Include Vulnerability Exploit, the_3dit0r, 2006/11/16
ASP Cart [multiples injection sql (post & get)], saps . audit, 2006/11/16
Comdev One Admin Pro.v4.1 ( path[skin] ) Remote File include, AG- Spider, 2006/11/16
BlogTorrent-preview => 0.92 Cross Site Scripting, the_3dit0r, 2006/11/16
Sphpblog => 0.8 Cross Site Scripting, the_3dit0r, 2006/11/16
i-Gallery 3.4 Cross Site Scripting, Advisory, 2006/11/16
Myphotos => Remote File Include Vulnerability Exploit, the_3dit0r, 2006/11/16
Helm Cross Site Scripting, Advisory, 2006/11/16
BaalAsp forum [login bypass ,injections sql(post), xss(post)], saps . audit, 2006/11/16
CandyPress Store[ multiples injection sql ], saps . audit, 2006/11/16
Vulnerabilities in Client Service for NetWare, Avert, 2006/11/16
Whitepaper: Implementing and Detecting a PCI Rootkit, John Heasman, 2006/11/16
eShopping Cart [injection sql], saps . audit, 2006/11/16
Etomite CMS 0.6.1.2 Multiple Vulnerabilities ( Sql Injection + Local file inclusion ), revenge, 2006/11/16
- Re: Etomite CMS 0.6.1.2 Multiple Vulnerabilities ( Sql Injection + Local file inclusion ), dean, 2006/11/17
discloser => 0.0.4 Remote File Include Vulnerability Exploit, the_3dit0r, 2006/11/16
dev_wms => 1.5 Remote File Include Vulnerabilities, the_3dit0r, 2006/11/16
- Re: dev_wms => 1.5 Remote File Include Vulnerabilities, Stefano Zanero, 2006/11/17
Secunia Research: MDaemon Insecure Default Directory Permissions, Secunia Research, 2006/11/16
Chetcpasswd 2.x: multiple vulnerabilities, riclem, 2006/11/16
[MajorSecurity Advisory #34]Plesk 8 - Multiple Cross Site Scripting Issues, admin, 2006/11/16
Bloo => 1.00 Remote File Include Vulnerability, the_3dit0r, 2006/11/16
OdysseusBlog => 1.0.0 Cross Site Scripting, the_3dit0r, 2006/11/16
PhpMyAdmin all version [multiples vulnerability], saps . audit, 2006/11/16
Hot Links download backup authorized vulnerabilities, hack2prison, 2006/11/16
discloser => 0.0.4 Remote File Include Vulnerabilities, the_3dit0r, 2006/11/16
Xtreme ASP Photo Gallery Cross Site Scripting And SQL Injection, Advisory, 2006/11/16
MetaCart e-Shop [multiples injection sql (get & post)], saps . audit, 2006/11/16
E-commerce Kit 1 PayPal Edition [ injection sql ], saps . audit, 2006/11/16
Bloo => 1.00 Cross Site Scripting, the_3dit0r, 2006/11/16
[Full-disclosure] rPSA-2006-0211-1 libpng, rPath Update Announcements, 2006/11/16
[ MDKSA-2006:208 ] - Updated openldap packages fixes Bind vulnerability, security, 2006/11/16
Helm Cross-Site Scripting (XSS), Advisory, 2006/11/16
Outpost Multiple insufficient argument validation of hooked SSDT function Vulnerability, Matousec - Transparent security Research, 2006/11/16
E-Calendar Pro 3.0 [ login bypass & injection sql (post)], saps . audit, 2006/11/16
[ MDKSA-2006:207 ] - Updated bind packages fixes RSA signature verification vulnerability, security, 2006/11/15
TSLSA-2006-0063 - multi, Trustix Security Advisor, 2006/11/15
[Full-disclosure] ZDI-06-042: Verity Ultraseek Request Proxying Vulnerability, zdi-disclosures, 2006/11/15
[OpenPKG-SA-2006.034] OpenPKG Security Advisory (texinfo), OpenPKG, 2006/11/15
MultiCalendars [ multiples injection sql ], saps . audit, 2006/11/15
[Full-disclosure] TrustedBSD* all versions FireWire IOCTL kernel integer overflow information disclousure, Rodrigo Rubira Branco (BSDaemon), 2006/11/15
[Full-disclosure] FreeBSD all versions FireWire IOCTL kernel integer overflow information disclousure, Rodrigo Rubira Branco (BSDaemon), 2006/11/15
- Re: [Full-disclosure] FreeBSD all versions FireWire IOCTL kernel integer overflow information disclousure, Lucas Holt, 2006/11/16
[Full-disclosure] DragonFlyBSD all versions FireWire IOCTL kernel integer overflow information disclousure, Rodrigo Rubira Branco (BSDaemon), 2006/11/15
[Full-disclosure] NetBSD all versions FireWire IOCTL kernel integer overflow information disclousure, Rodrigo Rubira Branco (BSDaemon), 2006/11/15
Dragon calendar [ login bypass & injection sql ], saps . audit, 2006/11/15
hpecs shopping cart[login bypass & injection sql (post)], saps . audit, 2006/11/15
A-Cart pro[ injection sql (post&get)], saps . audit, 2006/11/15
A+ Store E-Commerce[ injection sql & xss (post) ], saps . audit, 2006/11/14
[Full-disclosure] Links smbclient command execution, Teemu Salmela, 2006/11/14
EEYE: Workstation Service NetpManageIPCConnect Buffer Overflow, eEye Advisories, 2006/11/14
- Re: EEYE: Workstation Service NetpManageIPCConnect Buffer Overflow, security-list, 2006/11/18
[Fwd: OpenBase SQL multiple vulnerabilities Part Deux], K F (lists), 2006/11/14
[Fwd: DMA[2006-1031a] - 'Intego VirusBarrier X4 definition bypass exploit'], K F (lists), 2006/11/14
Property Site Manager [login bypass ,multiples injection sql & xss (get)], saps . audit, 2006/11/14
Blogme v3 [admin login bypass & xss (post)], saps . audit, 2006/11/14
FunkyASP Glossary v1.0 [injection sql], saps . audit, 2006/11/14
Evolve Merchant[ injection sql ], saps . audit, 2006/11/14
Car Site Manager [injection sql & xss (get)], saps . audit, 2006/11/14
Inventory Manager [injection sql & xss (get)], saps . audit, 2006/11/14
[Full-disclosure] ZDI-06-041: Microsoft Internet Explorer CSS Float Property Memory Corruption Vulnerability, zdi-disclosures, 2006/11/14
Apple Safari "match" Buffer Overflow Vulnerability, jbh_cg, 2006/11/14
- Re: Apple Safari "match" Buffer Overflow Vulnerability, J. Oquendo, 2006/11/16
BPG Content Management System SQL Injection, Advisory, 2006/11/14
Engine Manager SQL Injection, Advisory, 2006/11/14
ECommerce Store Shop Builder, Advisory, 2006/11/14
[Full-disclosure] ZDI-06-040: WinZip FileView ActiveX Control Unsafe Method Exposure Vulnerability, zdi-disclosures, 2006/11/14
- Re: [Full-disclosure] ZDI-06-040: WinZip FileView ActiveX Control Unsafe Method Exposure Vulnerability, Micheal Turner, 2006/11/14
  - Re: [Full-disclosure] ZDI-06-040: WinZip FileView ActiveX Control Unsafe Method Exposure Vulnerability, Micheal Turner, 2006/11/15
eShopping SQL Injection, Advisory, 2006/11/14
Ustore SQL Injection, Advisory, 2006/11/14
WWWeb Cocepts SQL Injection, Advisory, 2006/11/14
SiteXpress SQL Injection, Advisory, 2006/11/14
[Full-disclosure] Advisory 14/2006: Dotdeb PHP Email Header Injection Vulnerability, Stefan Esser, 2006/11/14
- Re: Advisory 14/2006: Dotdeb PHP Email Header Injection Vulnerability, Marcello Barnaba, 2006/11/16
ASPintranet SQL Injection, Advisory, 2006/11/14
- ASPintranet SQL Injection, Advisory, 2006/11/17
Real Estate Listing System SQL Injection, Advisory, 2006/11/14
Online Event Registration <= v2.0 (save_profile.asp) Remote User Pass Change Exploit, ajannhwt, 2006/11/14
New Bug MiniBB Forum <= 2 Remote File Include (index.php), philip anselmo, 2006/11/14
- Re: New Bug MiniBB Forum <= 2 Remote File Include (index.php), navairum, 2006/11/14
[Full-disclosure] VMSA-2006-0009 - VMware ESX Server 3.0.0 AMD fxsave/restore issue, VMware Security team, 2006/11/14
[Full-disclosure] VMSA-2006-0008 - VMware ESX Server 2.0.2 Upgrade Patch 2, VMware Security team, 2006/11/14
[Full-disclosure] VMSA-2006-0007 - VMware ESX Server 2.1.3 Upgrade Patch 2, VMware Security team, 2006/11/14
[Full-disclosure] VMSA-2006-0005 - VMware ESX Server 2.5.4 Upgrade Patch 1, VMware Security team, 2006/11/14
SinFP 2.04 release, works under Windows, GomoR, 2006/11/14
Estate Agent Manager <= v1.3 (default.asp) Remote Login ByPass SQL Injection Vulnerability, ajannhwt, 2006/11/13
VMSA-2006-0006 - VMware ESX Server 2.5.3 Upgrade Patch 4, VMware Security team, 2006/11/13
DirectAdmin Multiple Cross Site Scription, Advisory, 2006/11/13
Challenges faced by automated web application security assessment tools, bugtraq, 2006/11/13
- Challenges faced by automated web application security assessment tools, bugtraq, 2006/11/14
UPublisher 1.0 (viewarticle.asp) Remote SQL Injection Vulnerability, ajannhwt, 2006/11/13
ASPPortal <= 4.0.0 (default1.asp) Remote SQL Injection Exploit, ajannhwt, 2006/11/13
Property Pro v1.0 (vir_Login.asp) Remote Login ByPass SQL Injection Vulnerability, ajannhwt, 2006/11/13
CPanel Multiple Cross Site Scription, Advisory, 2006/11/13
[Full-disclosure] [ GLSA 200611-06 ] OpenSSH: Multiple Denial of Service vulnerabilities, Raphael Marichez, 2006/11/13
Asp Scripter Products (cpLogin.asp) Remote SQL ByPass Injection Vulnerability, ajannhwt, 2006/11/13
[Full-disclosure] [ GLSA 200611-08 ] RPM: Buffer overflow, Raphael Marichez, 2006/11/13
[Full-disclosure] [ GLSA 200611-07 ] GraphicsMagick: PALM and DCM buffer overflows, Raphael Marichez, 2006/11/13
UltraSite 1.0 (update.asp) Remote SQL Injection Vulnerability, ajannhwt, 2006/11/13
Phpdebug 1.1.0 - Remote File Include by Firewall, Firewall1954, 2006/11/13
Phpjobscheduler 3.0 - Multiple Remote File Include, Firewall1954, 2006/11/13
- Re: Phpjobscheduler 3.0 - Multiple Remote File Include, Stefano Zanero, 2006/11/18
  - Re: Phpjobscheduler 3.0 - Multiple Remote File Include, str0ke, 2006/11/18
Digipass Go3 Token Dumper (at least for 2006), fcollyer, 2006/11/13
- Re: Digipass Go3 Token Dumper (at least for 2006), Hugo van der Kooij, 2006/11/24
- Re: Re: Digipass Go3 Token Dumper (at least for 2006), fcollyer, 2006/11/25
Web Interface remote file inclusion, navairum, 2006/11/13
VBulletin DoS Exploit [ all Versions ], root, 2006/11/13
- RE: VBulletin DoS Exploit [ all Versions ], Bart Seresia, 2006/11/17
infinicart [ multiples injection sql & xss (post) ], saps . audit, 2006/11/13
shambo2 Component For Mambo 4.5 Remote File Inclusion Exploit, crackers_child, 2006/11/13
XSS in Email Signature Script, miladkaleh, 2006/11/13
NuSchool 1.0 (CampusNewsDetails.asp) Remote SQL Injection Exploit, ajannhwt, 2006/11/13
Re: feedsplitter considered harmful, wmodes, 2006/11/13
NuStore 1.0 (Products.asp) Remote SQL Injection Vulnerability, ajannhwt, 2006/11/13
NuRems 1.0 Remote XSS/SQL Injection Exploit, ajannhwt, 2006/11/13
NuCommunity 1.0 (cl_CatListing.asp) Remote SQL Injection Exploit, ajannhwt, 2006/11/13
UStore 1.0 (detail.asp) Remote SQL Injection Vulnerability, ajannhwt, 2006/11/13
AspPired2 Poll <= 1.0 (MoreInfo.asp) Remote SQL Injection Exploit, ajannhwt, 2006/11/13
phpManta - Mdoc <= 1.0.2 (view-sourcecode.php) Local File Include Exploit, ajannhwt, 2006/11/13
MyStats <=1.0.8 [injection sql, multiples xss, array & full path disclosure], benjilenoob, 2006/11/13
[MajorSecurity Advisory #33]ShopSystems - SQL Injection Issue, admin, 2006/11/13
TOPSTORY BASIC Version 1.0 => Remote File Include Vulnerability, stormhacker, 2006/11/13
Wordpress File Inclusion, vannovax, 2006/11/13
- Re: Wordpress File Inclusion, Expanders, 2006/11/14
- Re: Wordpress File Inclusion, emc3, 2006/11/13
Mega Mall [ multiples injection sql & full path disclosure ], saps . audit, 2006/11/13
Exophpdesk V1.2 - Remote File Include, firewall1954, 2006/11/13
PHPKit 1.6.1 RC2 (faq/faq.php) Remote SQL Injection Exploit, philipp . niedziela, 2006/11/13
[Full-disclosure] Team Evil - Incident #2, beSIRT, 2006/11/13
encapscms 0.3.6 - Remote File Include by Firewall, firewall1954, 2006/11/13
[Full-disclosure] AVG Anti-Virus - Arbitrary Code Execution (remote), security, 2006/11/13
[Full-disclosure] [FLSA-2006:211760] Updated gzip package fixes security issues, David Eisenstein, 2006/11/13
[Full-disclosure] ELOG Web Logbook Remote Denial of Service Vulnerability, OS2A BTO, 2006/11/13
[Full-disclosure] Old SAP exploits, Nicob, 2006/11/12
[Full-disclosure] [USN-380-1] Avahi vulnerability, Kees Cook, 2006/11/10
[x0n3-h4ck]Drake CMS v 0.2 XSS exploit, corrado . liotta, 2006/11/10
[x0n3-h4ck]Essentia Web Server v.2.15 Buffer Overflow, corrado . liotta, 2006/11/10
- Re: [x0n3-h4ck]Essentia Web Server v.2.15 Buffer Overflow, Noam Rathaus, 2006/11/13
[OpenPKG-SA-2006.033] OpenPKG Security Advisory (openldap), OpenPKG, 2006/11/10
[ MDKSA-2006:206 ] - Updated Thunderbird packages fix multiple vulnerabilities, security, 2006/11/10
[Full-disclosure] ZDI-06-039: Marshal MailMarshal ARJ Extraction Directory Traversal Vulnerability, zdi-disclosures, 2006/11/10
[ MDKSA-2006:205 ] - Updated Firefox packages fix multiple vulnerabilities, security, 2006/11/10
[Full-disclosure] [ GLSA 200611-05 ] Netkit FTP Server: Privilege escalation, Raphael Marichez, 2006/11/10
[Full-disclosure] rPSA-2006-0207-1 openssh openssh-client openssh-server, rPath Update Announcements, 2006/11/09
[Full-disclosure] rPSA-2006-0206-1 firefox thunderbird, rPath Update Announcements, 2006/11/09
[Full-disclosure] rPSA-2006-0205-1 php php-mysql php-pgsql, rPath Update Announcements, 2006/11/09
[Full-disclosure] rPSA-2006-0204-1 kernel, rPath Update Announcements, 2006/11/09
[security bulletin] HPSBMA02167 SSRT061262 rev.2 - HP OpenView Client Configuration Manager (CCM), Remote Unauthorized Arbitrary Code Execution or Denial of Service (DoS), security-alert, 2006/11/09
Wheatblog [multiple xss (post) & full path disclosure], saps . audit, 2006/11/09
LandShop Real Estate [multiple injection sql & xss], saps . audit, 2006/11/09
GNU gv Stack Overflow Vulnerability, Renaud Lifchitz, 2006/11/09
- Re: GNU gv Stack Overflow Vulnerability, Noam Rathaus, 2006/11/14
bitweaver <=1.3.1 [injection sql (post) & xss (post)], saps . audit, 2006/11/09
[ MDKSA-2006:204 ] - Updated openssh packages fix vulnerability, security, 2006/11/09
omnistar article manager [multiples injection sql], saps . audit, 2006/11/09
[Full-disclosure] [ GLSA 200611-04 ] Bugzilla: Multiple Vulnerabilities, Matthias Geerdsen, 2006/11/09
[Full-disclosure] [USN-379-1] texinfo vulnerability, Kees Cook, 2006/11/09
[Full-disclosure] ZDI-06-038: Citrix MetaFrame IMA Management Module Remote Heap Overflow, zdi-disclosures, 2006/11/09
[Full-disclosure] iDefense Security Advisory 11.09.06: Citrix Presentation Server 4.0 IMA Service Invalid Name Length DoS Vulnerability, iDefense Labs, 2006/11/09
FreeBSD Security Advisory FreeBSD-SA-06:24.libarchive, FreeBSD Security Advisories, 2006/11/08
FreeWebshop <=2.2.2 [local file include & xss], saps . audit, 2006/11/08
Immediacy .NET CMS possibly vulnerable to Cross Site Scripting through a malformed cookie, ProCheckUp Research, 2006/11/08
[ MDKSA-2006:202 ] - Updated wv packages fix vulnerabilities, security, 2006/11/08
Speedwiki 2.0 Arbitrary File Upload Vulnerability, saps . audit, 2006/11/08
knowledgeBuilder v.2.2.php.NuLL-WDYL=> Remote File Include Vulnerability, h4ck3riran, 2006/11/08
Abarcar Realty Portal [injection sql], saps . audit, 2006/11/08
phpsatk => Remote File Include Vulnerability EXploit, h4ck3riran, 2006/11/08
Portix-PHP [login bypass & xss (post)], saps . audit, 2006/11/08
[ MDKSA-2006:203 ] - Updated texinfo packages fix vulnerability, security, 2006/11/08
Y.A.N.S sql injection, navairum, 2006/11/08
PhpMyChat <= 0.14.5 Source Code Disclosure Vulnerability, ajannhwt, 2006/11/08
[Full-disclosure] TSRT-06-13: HP OpenView Client Configuration Manager Device Code Execution Vulnerability, TSRT, 2006/11/08
PhpMyChat Plus <= 1.9 Multiple Source Code Disclosure Vulnerabilities, ajannhwt, 2006/11/08
[Full-disclosure] iDefense Security Advisory 11.08.06: Cisco Secure Desktop Privilege Escalation Vulnerability, iDefense Labs, 2006/11/08
[ MDKSA-2006:198-1 ] - Updated imlib2 packages fix several vulnerabilities, security, 2006/11/08
Call for papers: ARES 2007 submission deadline approaches in 2 weeks: 19-11-2006, Manh Tho, 2006/11/08
[OpenPKG-SA-2006.032] OpenPKG Security Advisory (openssh), OpenPKG, 2006/11/08
[ MDKSA-2006:201 ] - Updated pam_ldap packages fix PasswordPolicyReponse coding error, security, 2006/11/08
[Full-disclosure] iDefense Security Advisory 11.08.06: IBM Lotus Domino 7 tunekrnl Multiple Vulnerabilities, iDefense Labs, 2006/11/08
[Full-disclosure] Lotus Notes pre-login User.ID key leak, Andrew Christensen, 2006/11/08
XSS in Kayako SupportSuite v3.00.32, hacker hackers, 2006/11/07
[Full-disclosure] [ GLSA 200611-03 ] NVIDIA binary graphics driver: Privilege escalation vulnerability, Raphael Marichez, 2006/11/07
- Re: [ GLSA 200611-03 ] NVIDIA binary graphics driver: Privilege escalation vulnerability, Nick Boyce, 2006/11/13
  - Re: [Full-disclosure] [ GLSA 200611-03 ] NVIDIA binary graphics driver: Privilege escalation vulnerability, Raphael Marichez, 2006/11/13
    - Re: [Full-disclosure] [ GLSA 200611-03 ] NVIDIA binary graphics driver: Privilege escalation vulnerability, Nick FitzGerald, 2006/11/14
  - Re: [Full-disclosure] [ GLSA 200611-03 ] NVIDIA binary graphics driver: Privilege escalation vulnerability, Glynn Clements, 2006/11/14
Minimizing error cascades in vulnerability information management, Steven M. Christey, 2006/11/07
[ MDKSA-2006:200 ] - Updated rpm packages fix vulnerability, security, 2006/11/07
DigiOz Guestbook version 1.7 Path Disclosure Vulnerability in list.php, jesper . jurcenoks, 2006/11/07
News publication system remote File include, navairum, 2006/11/07
[ MDKSA-2006:198 ] - Updated imlib2 packages fix several vulnerabilities, security, 2006/11/07
GreenBeast CMS <= 1.3 PHP Arbitrary File Upload Vulnerability, skulmatic, 2006/11/07
[ MDKSA-2006:199 ] - Updated libx11 packages fix file descriptor leak vulnerability, security, 2006/11/07
[Full-disclosure] WarFTPd 1.82.00-RC11 Remote Denial Of Service, Joxean Koret, 2006/11/07
[Full-disclosure] WFTPD Pro Server 3.23 Buffer Overflow, Joxean Koret, 2006/11/07
- [Full-disclosure] WFTPD Pro Server 3.23 Buffer Overflow, Joxean Koret, 2006/11/07
  - Re: [Full-disclosure] WFTPD Pro Server 3.23 Buffer Overflow, Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP], 2006/11/08
[Full-disclosure] DigiOz Guestbook version 1.7 Path Disclosure Vulnerability in list.php, Jesper Jurcenoks, 2006/11/07
IE7 website security certificate discrediting exploit, inge_eivind . henriksen, 2006/11/06
- Re: IE7 website security certificate discrediting exploit, inge_eivind . henriksen, 2006/11/07
[Full-disclosure] [USN-376-2] imlib2 regression fix, Kees Cook, 2006/11/06
VulnDisco Pack for Metasploit, Evgeny Legerov, 2006/11/06
Advanced Guestbook 2.3.1 (Admin.php) Remote File Include, broken-proxy, 2006/11/06
- Re: Advanced Guestbook 2.3.1 (Admin.php) Remote File Include, simo64, 2006/11/07
Hotmail and Windows Live Mail XSS Vulnerabilities, applesoup, 2006/11/06
- Message not available
  - Re: Hotmail and Windows Live Mail XSS Vulnerabilities, HASEGAWA Yosuke , 2006/11/08
XSS Vulnerability in Zend Framework Preview 0.2.0, security, 2006/11/06
Ariadne <= 2.4.1 Multiple Remote File Include Vulnerabilities(New), ajannhwt, 2006/11/06
MajorSecurity Advisory #32]phpComasy CMS - Multiple Cross Site Scripting Issues, admin, 2006/11/06
TSLSA-2006-0061 - multi, Trustix Security Advisor, 2006/11/06
Cross Site Scripting (XSS) Vulnerability in IBM WebSphere Application Server, ProCheckUp Research, 2006/11/06
Joomla 1.0.11 Remote File Include, root, 2006/11/06
- Antwort: Joomla 1.0.11 Remote File Include, srunschke, 2006/11/09
MWChat pro V 7.0 <= (CONFIG[MWCHAT_Libs]) Remote File Include Vulnerability, -= SHELL =- -= SHELL =-, 2006/11/06
AIOCP <=1.3.007 multiples vulnerabilities [sql , remote file include , xss], saps . audit, 2006/11/06
[ECHO_ADV_60_2006] OpenEMR <=2.8.1 Multiple Remote File Inclusion Vulnerability, erdc, 2006/11/06
[ECHO_ADV_59_2006]Agora 1.4 RC1 "$_SESSION[PATH_COMPOSANT]" Remote File Inclusion Vulnerability, erdc, 2006/11/06
[ECHO_ADV_58_2006]Cyberfolio <=2.0 RC1 $av Remote File Inclusion Vulnerability, erdc, 2006/11/06
Mail Drives Security Considerations, darkz . gsa, 2006/11/06
[Full-disclosure] ZDI-06-037: America Online ICQ ActiveX Control Code Execution Vulnerability, zdi-disclosures, 2006/11/06
[ECHO_ADV_57_2006]Soholaunch Pro <=4.9 r36 Multiple Remote File Inclusion Vulnerability, erdc, 2006/11/06
PHP Rapid Kill All Version File Injection, null_hack, 2006/11/06
Stanford university SCARF user editing, navairum, 2006/11/06
Article Script v1.*and v1.6.3 Sql injection, liz0, 2006/11/06
@cid stats v2.3 File Include, mahmood ali, 2006/11/06
- Re: @cid stats v2.3 File Include, Heiko Wundram, 2006/11/06
[Full-disclosure] [ GLSA 200611-02 ] Qt: Integer overflow, Matthias Geerdsen, 2006/11/06
IF-CMS multiples XSS vunerabilities, saps . audit, 2006/11/04
[MajorSecurity Advisory #30]admin.tool 3 CMS - Multiple Cross Site Scripting Issues, admin, 2006/11/04
[OpenPKG-SA-2006.029] OpenPKG Security Advisory (bind), OpenPKG, 2006/11/04
Web Directory Pro bypass Vulnerabilities, hack2prison, 2006/11/04
[OpenPKG-SA-2006.028] OpenPKG Security Advisory (php), OpenPKG, 2006/11/04
MajorSecurity Advisory #31]Xenis.creator CMS - Multiple Cross Site Scripting and SQL Injection Issues, admin, 2006/11/04
- Re: MajorSecurity Advisory #31]Xenis.creator CMS - Multiple Cross Site Scripting and SQL Injection Issues, saps . audit, 2006/11/04
[OpenPKG-SA-2006.030] OpenPKG Security Advisory (ruby), OpenPKG, 2006/11/04
[Full-disclosure] [USN-378-1] RPM vulnerability, Kees Cook, 2006/11/04
[Full-disclosure] [USN-377-1] NVIDIA vulnerability, Kees Cook, 2006/11/03
[Full-disclosure] [USN-376-1] imlib2 vulnerabilities, Kees Cook, 2006/11/03
[Full-disclosure] ZDI-06-036: Novell Netmail User Authentication Buffer Overflow Vulnerability, zdi-disclosures, 2006/11/03
XSS in script Mobile, m-0-t, 2006/11/03
[ MDKSA-2006:197 ] - Updated kernel packages fix multiple vulnerabilities and bugs, security, 2006/11/03
SIMPLOG 0.9.3 injection sql & multiple xss, saps . audit, 2006/11/03
Re: Multiple vulnerabilities in SAP Web Application Server 6.40 and7.00, harrisonholland, 2006/11/03
- Re: Multiple vulnerabilities in SAP Web Application Server 6.40 and7.00, Nicob, 2006/11/07
  - Re: [Full-disclosure] Multiple vulnerabilities in SAP Web Application Server 6.40 and7.00, Nicob, 2006/11/09
Re: Digital Armaments Security Advisory 10.07.2006: Flexwath Authorization Bypassing and XSS Vulnerability, sales, 2006/11/03
[ MDKSA-2006:195 ] - Updated wireshark packages fix multiple vulnerabilities, security, 2006/11/03
[ MDKSA-2006:196 ] - Updated php packages to address buffer overflow issue, security, 2006/11/03
Re: phpMyConferences <= 8.0.2 Remote File Inclusion, Steven M. Christey, 2006/11/03
EUSecWest/London CFP extended to Nov. 7, Dragos Ruiu, 2006/11/03
[Full-disclosure] [ GLSA 200611-01 ] Screen: UTF-8 character handling vulnerability, Matthias Geerdsen, 2006/11/03
[Full-disclosure] Advisory 13/2006: PHP HTML Entity Encoder Heap Overflow Vulnerability, Stefan Esser, 2006/11/02
Educational write-up by Amit Klein: "A Refreshing Look at Redirection", Amit Klein, 2006/11/02
[security bulletin] HPSBMA02159 SSRT061238 rev.1 - HP System Management Homepage (SMH), Remote Bypassing of Security Features or Cross Site Scripting or Denial of Service (DoS), security-alert, 2006/11/02
iodine client 0.3.2 buffer overflow, poplix, 2006/11/02
Firefox 1.5.0.7 Exploit, koenig, 2006/11/02
- Re: Firefox 1.5.0.7 Exploit, Robert McGrew, 2006/11/02
- Re: Firefox 1.5.0.7 Exploit, Bram Dumolin, 2006/11/02
- Re: Firefox 1.5.0.7 Exploit, Martin Pitt, 2006/11/03
- Re: Firefox 1.5.0.7 Exploit, Lubomir Kundrak, 2006/11/06
- Re: Firefox 1.5.0.7 Exploit, OOZIE, 2006/11/06
[Full-disclosure] [USN-375-1] PHP vulnerability, Martin Pitt, 2006/11/02
how to trick most of cms avatar upload filter [exemple for : RunCms (PoC)], securfrog, 2006/11/02
- Re: how to trick most of cms avatar upload filter [exemple for : RunCms (PoC)], Taneli Leppä, 2006/11/02
  - Re: how to trick most of cms avatar upload filter [exemple for : RunCms (PoC)], Taneli Leppä, 2006/11/02
    - RE: how to trick most of cms avatar upload filter [exemple for : RunCms (PoC)], Richard Stanway, 2006/11/02
- Re: how to trick most of cms avatar upload filter [exemple for : RunCms (PoC)], Paul Laudanski, 2006/11/04
[Full-disclosure] Internet Explorer 7.0 mhtml stack overflow, noreply, 2006/11/02
[Full-disclosure] Multiple vulnerabilities in SAP Web Application Server 6.40 and 7.00, Nicob, 2006/11/02
[Full-disclosure] Advisory 12/2006: phpMyAdmin - error.php XSS Vulnerability, Stefan Esser, 2006/11/02
[security bulletin] HPSBUX02091 SSRT061099 rev.2 - HP-UX Local Increased Privilege, security-alert, 2006/11/01
[security bulletin] HPSBUX02165 SSRT061266 rev.1 - HP-UX VirtualVault Remote Unauthorized Access, security-alert, 2006/11/01
[security bulletin] HPSBUX02164 SSRT061265 rev.1 - HP-UX VirtualVault Running Apache 1.3.X Remote Denial of Service (DoS) and Arbitrary Code Execution, security-alert, 2006/11/01
[Full-disclosure] Internet Explorer 7 - Still Spyware Writers' Heaven, avivra, 2006/11/01
- Re: [Full-disclosure] Internet Explorer 7 - Still Spyware Writers' Heaven, Roger A. Grimes, 2006/11/02
  - Re: [Full-disclosure] Internet Explorer 7 - Still Spyware Writers' Heaven, Eliah Kagan, 2006/11/04
    - Re: [Full-disclosure] Internet Explorer 7 - Still Spyware Writers' Heaven, Thierry Zoller, 2006/11/04
    - Re: [Full-disclosure] Internet Explorer 7 - Still Spyware Writers' Heaven, Joshua Gimer, 2006/11/05
    - Re: [Full-disclosure] Internet Explorer 7 - Still Spyware Writers' Heaven, Eliah Kagan, 2006/11/04
    - Re: [Full-disclosure] Internet Explorer 7 - Still Spyware Writers' Heaven, Roger A. Grimes, 2006/11/06
Re: PLS-Bannieres 1.21 (bannieres.php) File Include, Stefano Zanero, 2006/11/01
[security bulletin] HPSBUX02172 SSRT061269 rev.1 - HP-UX VirtualVault running Apache Remote Execution of Arbitrary Code, Denial of Service (DoS), and Unauthorized Access, security-alert, 2006/11/01
rPSA-2006-0202-1 tshark wireshark, rPath Update Announcements, 2006/11/01
Outpost Insufficient validation of 'SandBox' driver input buffer, Matousec - Transparent security Research, 2006/11/01
tikiwiki 1.9.5 mysql password disclosure & xss, securfrog, 2006/11/01
- Re: tikiwiki 1.9.5 mysql password disclosure & xss, FBI, 2006/11/23
- Re: tikiwiki 1.9.5 mysql password disclosure & xss, drunken_chin, 2006/11/25
[Full-disclosure] [USN-374-1] wvWare vulnerability, Kees Cook, 2006/11/01
Asterisk Local and Remote Denial of Service vulnerability, sil, 2006/11/01
Re: phpLedAds 2.0(dir) File Include, Stefano Zanero, 2006/11/01
Cross Site Scripting (XSS) Vulnerability in Netquery by "VIRtech", LegendaryZion, 2006/11/01
- Re: Cross Site Scripting (XSS) Vulnerability in Netquery by "VIRtech", rvirtue, 2006/11/13
[Full-disclosure] [USN-373-1] mutt vulnerabilities, Kees Cook, 2006/11/01
[Full-disclosure] [USN-371-1] Ruby vulnerability, Kees Cook, 2006/11/01
[Full-disclosure] [USN-370-1] screen vulnerability, Kees Cook, 2006/11/01
Re[3]: New Flaw in Firefox 2.0: DoS and possible remote code execution, 3APA3A, 2006/11/01
- Re: New Flaw in Firefox 2.0: DoS and possible remote code execution, Jerome Athias, 2006/11/06
  - Re[2]: New Flaw in Firefox 2.0: DoS and possible remote code execution, 3APA3A, 2006/11/03
- Re: New Flaw in Firefox 2.0: DoS and possible remote code execution, Jan Heisterkamp, 2006/11/06
Re: Re: Simple Machines Forum (SMF) XSS issue, oldiesmann, 2006/11/01
Multiple XSS Vulnerabilities in Zend Google Data Client Library Preview 0.2.0, security, 2006/11/01
[Full-disclosure] [USN-369-2] postgresql-8.1 vulnerabilities, Martin Pitt, 2006/11/01
[Full-disclosure] [USN-372-1] imagemagick vulnerability, Martin Pitt, 2006/11/01