Bugtraq (date)
April 30, 2007
- E-Annu (home.php) Remote SQL Injection Vulnerability, ilkerkandemir, 17:08
- [Full-disclosure] FLEA-2007-0015-1: gimp, Foresight Linux Essential Announcement Service, 16:25
- Re: Sphider Version 1.2.x (include_dir) file include, ijoo . keren, 16:25
- [security bulletin] HPSBMA02197 SSRT061285 rev.1 - HP-UX Running HP Power Manager Remote Agent (RA), Local Execution of Arbitrary Code with Root Privileges, security-alert, 15:53
- [Full-disclosure] FLEA-2007-0014-1: vim, Foresight Linux Essential Announcement Service, 14:48
- Re: GHH Portal 1.1 (passwd.txt) Remote Password Disclosure Vulnerability, Jamie Riden, 14:38
- 3proxy[v0.5.3g]: (linux/win32 service) remote buffer overflow exploits., v9, 14:38
- [Full-disclosure] iDefense Security Advisory 04.27.07: VMware Workstation Shared Folders Directory Traversal Vulnerability, iDefense Labs, 14:27
- GHH Portal 1.1 (passwd.txt) Remote Password Disclosure Vulnerability, crazy_king, 13:43
- please retract CVE-2007-2056 "Time-of-Check-Time-of-Use File Race in AFFLIB", Simson Garfinkel, 13:23
- Re: please retract CVE-2007-2056 "Time-of-Check-Time-of-Use File Race in AFFLIB", Tim, 13:01
- Flaw in about.r OS and Progress version disclosure, suresync, 13:01
April 27, 2007
- [Full-disclosure] [ GLSA 200704-23 ] capi4k-utils: Buffer overflow, Raphael Marichez, 18:40
- [Full-disclosure] [ GLSA 200704-22 ] BEAST: Denial of Service, Raphael Marichez, 18:08
- AFFLIB(TM): Multiple Shell Metacharacter Injections, VSR Advisories, 17:47
- AFFLIB(TM): Multiple Format String Injections, VSR Advisories, 17:35
- AFFLIB(TM): Time-of-Check-Time-of-Use File Race, VSR Advisories, 17:25
- AFFLIB(TM): Multiple Buffer Overflows, VSR Advisories, 16:52
- Security Concerns in Web 2.0, dharmeshmm, 14:48
- [Full-disclosure] iDefense Security Advisory 04.26.07: Symantec Norton Ghost 10 Recovery Points Insecure Password Storage Vulnerability, iDefense Labs, 14:06
- [Full-disclosure] iDefense Security Advisory 04.26.07: Symantec Norton Ghost 10 Service Manager Buffer Overflow Vulnerability, iDefense Labs, 14:06
- FreeBSD Security Advisory FreeBSD-SA-07:03.ipv6, FreeBSD Security Advisories, 13:23
- TSLSA-2007-0015 - postgresql, Trustix Security Advisor, 13:12
- [Full-disclosure] [USN-454-1] PostgreSQL vulnerability, Martin Pitt, 11:07
- [Full-disclosure] [USN-455-1] PHP vulnerabilities, Martin Pitt, 09:45
April 26, 2007
- [Full-disclosure] iDefense Security Advisory 04.26.07: Novell eDirectory NCP Fragment Denial of Service Vulnerability, iDefense Labs, 17:45
- Re: Steganos Encrypted Safe NOT so safe, support, 16:51
- Burak Yılmaz Blog (tr) v1.0 SQL injection vulnerability, dj_remix_20, 16:30
- Re: Chicken of the VNC 2.0 remote DoS, support, 15:57
- SineCMS, nexus, 15:25
- Re: [Full-disclosure] WordPress v2.1.3 >> remote file include~, Tod Beardsley, 15:14
- Re: WordPress v2.1.3 >> remote file include~, otto, 14:43
- modbuild >> 4.1 Remote File Inclusion, s433d_only_linux, 14:32
- [ MDKSA-2007:094 ] - Updated postgresql packages fix vulnerability, security, 14:22
- [CAID 35198, 35276]: CA BrightStor ARCserve Backup Media Server Vulnerabilities, Williams, James K, 14:01
- [CAID 35277]: CA CleverPath Portal SQL Injection Vulnerability, Williams, James K, 13:29
- [Full-disclosure] [USN-453-2] rdesktop regression, Martin Pitt, 09:00
April 25, 2007
- :doruk100net >> RFI, alijsb, 22:18
- ASA-2007-012: Remote Crash Vulnerability in Manager Interface, Kevin P. Fleming, 21:56
- IE 7 and Firefox Browsers Digest Authentication Request Splitting, Stefano Di Paola, 21:35
- VirtuaNews.Pro.v1.0.3.Retail.+All.Plugins Remote file Include, s433d_only_linux, 21:14
- Remote File Inclusion, s433d_only_linux, 20:53
- CFP: 3rd European Conference on Computer Network Defense (EC2ND), Stefano Zanero, 20:21
- Re: 3Com's TippingPoint Denial of Service, Secure, 20:00
- download engine V1.4.1 >> RFI (local), alijsb, 19:50
- ASA-2007-011: Multiple problems in SIP channel parser handling response codes, Kevin P. Fleming, 19:39
- nucleus 3.22 >> RFI, alijsb, 19:39
- ASA-2007-010: Two stack buffer overflows in SIP channel's T.38 SDP parsing code, Kevin P. Fleming, 19:07
- blogsystem 1.4 >> local & remote = -rfi & lfi & -xss, info, 18:25
- Re: 3Com's TippingPoint Denial of Service, Steven M. Christey, 17:53
- comus 2.0 Final >> RFI, alijsb, 17:43
- Searchactivity >> RFI, alijsb, 17:21
- Built2Go_PHP_Link_Portal_v1.79 >> RFI, alijsb, 17:21
- B2 Weblog and News Publishing Tool v0.6.1 >> RFI, alijsb, 17:00
- sunshop v4 >> RFI, info, 16:49
- adrevenue script (CyKuH.com)>> RFI, alijsb, 16:38
- Shop-Script v 2.0 >> RFI, alijsb, 16:28
- phpMYTGP v v1.4b >> RFI, alijsb, 16:07
- DynaTracker &v151>> RFI, alijsb, 15:56
- netbingo v 2000 >> RFI, alijsb, 15:55
- HTMLeditbox & 2.2 >> RFI, alijsb, 15:35
- WordPress v2.1.3 >> remote file include~, s433d_only_linux, 15:24
- HYIP Manager Pro Script >> Remote file Include, alijsb, 15:13
- MyNewsGroups >> RFI in include.php, alijsb, 15:02
April 24, 2007
- Re: 3Com's TippingPoint Denial of Service, Simple Nomad, 20:34
- dcp-portal v611 >> RFi, s433d_only_linux, 19:42
- Re: ImageProcessing ... Local (Denial of Service Exploit), Tim Newsham, 19:31
- [Full-disclosure] ZDI-07-022: CA BrightStor ArcServe Media Server Multiple Buffer Overflow Vulnerabilities, zdi-disclosures, 19:31
- 3Com's TippingPoint Denial of Service, mike20061005, 19:20
- [MajorSecurity Advisory #46]Plogger - Session fixation Issue, admin, 17:18
- Progress Webspeed exploit for all releases, suresync, 17:04
- [security bulletin] HPSBST02200 SSRT071330 rev.1 - HP StorageWorks Command View Advanced Edition for XP, Local Unauthorized Access, security-alert, 15:50
- Re: gallery >> 1.5.6 Remote File Inclusion, Chris Kelly, 15:29
- Security Advisory: CA CleverPath SQL Injection, Irene Abezgauz, 15:18
- Re: gallery >> 1.5.6 Remote File Inclusion, the . tiger100, 14:58
- ImageProcessing ... Local (Denial of Service Exploit), Dr . Ninux, 14:36
- Re: claroline <= Multiple Remote File Include Vulnerablitiy, BlackHawk, 13:53
- gallery >> 1.5.6 Remote File Inclusion, s433d_only_linux, 13:53
- YA Book 0.98 Persistent XSS, omnipresent, 13:31
- [Full-disclosure] [ GLSA 200704-21 ] ClamAV: Multiple vulnerabilities, Matthias Geerdsen, 13:10
- [Full-disclosure] rPSA-2007-0081-1 postgresql postgresql-server, rPath Update Announcements, 10:34
- [Full-disclosure] Apache Illegal Request Handling Possible XSS Vulnerability, Michal Majchrowicz, 06:56
- Re: [Full-disclosure] Apache Illegal Request Handling Possible XSS Vulnerability, Richard Moore, 06:45
April 23, 2007
- Post Revolution Remote File Inclusion, InyeXion, 21:19
- phpMySpace Gold (v8.10) - Blind SQL/XPath Injection Exploit, john, 21:09
- DmCMS Shell Uploading, security, 20:58
- acvsws_php5_v1.0 <= Multiple Remote File Include Vulnerablitiy, Mohandko, 20:37
- RE: Yet another SQL injection framework, Greg Merideth, 20:15
- [ MDKSA-2007:093 ] - Updated zziplib packages fix vulnerability, security, 20:05
- [security bulletin] HPSBUX02183 SSRT061243 rev.1 - HP-UX sendmail, Remote Denial of Service (DoS), security-alert, 19:54
- [ MDKSA-2007:092 ] - Updated freeradius packages fix vulnerability, security, 19:22
- TJSChat Version 0.95 Cross Site Scripting, the_3dit0r, 19:11
- [Full-disclosure] Apache/PHP REQUEST_METHOD XSS Vulnerability, Michal Majchrowicz, 19:11
- Big Blue Guestbook HTML Injection Vulnerabilities, seko, 18:50
- WASC-Articles: 'The business case for security frameworks', announcements, 18:39
- [Full-disclosure] [ GLSA 200704-20 ] NAS: Multiple vulnerabilities, Raphael Marichez, 18:28
- [Full-disclosure] [ GLSA 200704-19 ] Blender: User-assisted remote execution of arbitrary code, Raphael Marichez, 18:07
- bibtex mase Remote File Inclusion, InyeXion, 17:56
- c-arbre <= Multiple Remote File Include Vulnerablitiy, Mohandko, 17:45
- [Full-disclosure] FLEA-2007-0013-1: xine-lib, Foresight Linux Essential Announcement Service, 17:34
- Remote file inclusion in Joomla 1.5.0 Beta, Omid, 17:24
- Ripe Website Manager (<= 0.8.4) - SQL Injection Vulnerability and Cross-Site Scripting Exploit, john, 16:21
- File117 Remote File Inclusion, InyeXion, 15:49
- PHPMyBibli <= Multiple Remote File Include, Mohandko, 14:57
- EsForum <= 3.0 SQL Injection Vulnerability, ilkerkandemir, 14:46
- lms 1.5.3 Remote File Inclusion, InyeXion, 14:25
- [Reversemode advisory] CheckPoint Zonelabs - ZoneAlarm SRESCAN driver local privilege escalation, Reversemode, 14:15
- claroline <= Multiple Remote File Include Vulnerablitiy, Mohandko, 14:04
- Re: WS_FTP Home 2007 NetscapeFTPHandler denial of service, sapheal, 13:10
- Allfaclassfieds (level2.php dir) remote file inclusion, asdasd asdsadas, 12:49
- [Full-disclosure] 3proxy 0.5.3i bugfix release, Vladimir Dubrovin, 07:48
- [Full-disclosure] FLEA-2007-0012-1: madwifi, Foresight Linux Essential Announcement Service, 00:14
April 20, 2007
- UseBB Version 1.0.4 Path Disclosure Vulnerability, securityresearch, 19:54
- [Full-disclosure] FLEA-2007-0011-1: lighttpd, Foresight Linux Essential Announcement Service, 18:09
- [Full-disclosure] iDefense Security Advisory 04.20.07: Check Point Zone Labs SRESCAN IOCTL Local Privilege Escalation Vulnerability, iDefense Labs, 16:21
- TSLSA-2007-0013 - multi, Trustix Security Advisor, 14:34
- Re: Yet another SQL injection framework, Nick Boyce, 14:12
- Eba News Version : v1.1 <= (webpages.php) Remote File Include // starhack.org, seko, 13:51
- NeatUpload vulnerability and fix, dean, 13:19
- Re: [Full-disclosure] [VulnWatch] Cross Domain XMLHttpRequest, anurag . agarwal, 11:05
- Re: Yet another SQL injection framework (file corruption), Guillermo Marro, 10:43
- [Full-disclosure] ZDI-07-021: GraceNote CDDBControl ActiveX Buffer Overflow Vulnerability, zdi-disclosures, 03:07
April 19, 2007
- Re: Internet Explorer Crash, "C. Bergström", 21:12
- [security bulletin] HPSBST02208 SSRT071365 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS07-018 to MS07-022, security-alert, 21:01
- [ MDKSA-2007:091 ] - Updated sqlite packages fix vulnerability, security, 20:41
- [ MDKSA-2007:090 ] - Updated php packages fix multiple vulnerabilities, security, 20:30
- [security bulletin] HPSBMA02133 SSRT061201 rev.4 - HP Oracle for OpenView (OfO) Critical Patch Update, security-alert, 20:09
- Re: Internet Explorer Crash, Dave Walker, 19:38
- Re: Internet Explorer Crash, simone colombo, 19:27
- RaidenFTPd IXceedCompression multiple denial of service vulnerabilities, Michal Bucko, 19:17
- Yet another SQL injection framework, Guillermo Marro, 16:48
- Winamp <= (WMV) 5.3 Buffer Overflow DOS Exploit (0-DAY), UniquE, 16:06
- [waraxe-2007-SA#049] - Multiple vulnerabilities in Phorum 5.1.20, come2waraxe, 15:34
- IPB (Invision Power Board) Full Path Disclusure, security, 14:29
- Re: [Full-disclosure] ZDI-07-020: BMC Performance Manager SNMP Command Execution Vulnerability, rashbi, 14:08
- CfP Hack.lu 2007, info, 14:08
- [ MDKSA-2007:089 ] - Updated php packages fix multiple vulnerabilities, security, 13:57
- [ MDKSA-2007:088 ] - Updated php packages fix multiple vulnerabilities, security, 13:47
- [ MDKSA-2007:087 ] - Updated php packages fix multiple vulnerabilities, security, 13:36
- Re: Internet Explorer Crash, Kevin Finisterre (lists), 13:25
- RE: Re[2]: Windows DNS Cache Poisoning by Forwarder DNS Spoofing, Oliver Friedrichs, 13:04
April 18, 2007
- Re: Internet Explorer Crash, Rob Bartlett, 22:06
- Re: PHP Nuke <= 8.0.0.3.3b SQL Injections and Bypass SQL Injection Protection vulnerabilities, Paul Laudanski, 21:55
- [Full-disclosure] [USN-453-1] X.org vulnerability, Kees Cook, 20:52
- NuclearBB Alpha 1 - Multiple Blind SQL/XPath Injection Vulnerabilities, john, 20:52
- Re: Windows DNS Cache Poisoning by Forwarder DNS Spoofing, Matthew Dixon Cowles, 20:09
- RE: Re[2]: Windows DNS Cache Poisoning by Forwarder DNS Spoofing, Roger A. Grimes, 19:58
- Re: Internet Explorer Crash, Thor (Hammer of God), 19:37
- [security bulletin] HPSBST02206 SSRT071354 rev.2 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS07-017, security-alert, 19:27
- Re: Internet Explorer Crash, elflord91, 19:27
- Re: Windows DNS Cache Poisoning by Forwarder DNS Spoofing, Tim, 19:05
- Re: Linksys WAG200G - Information disclosure, no-mail, 18:44
- Re: Windows DNS Cache Poisoning by Forwarder DNS Spoofing, Bojan Zdrnja, 18:44
- [Full-disclosure] ZDI-07-020: BMC Performance Manager SNMP Command Execution Vulnerability, zdi-disclosures, 18:44
- Re: Windows DNS Cache Poisoning by Forwarder DNS Spoofing, Tim, 18:33
- EclipseBB Remote File Inclusion, security, 18:23
- Re: Windows DNS Cache Poisoning by Forwarder DNS Spoofing, Makoto Shiotsuki, 18:12
- [Full-disclosure] ZDI-07-019: BMC Patrol PerformAgent bgs_sdservice Memory Corruption Vulnerability, zdi-disclosures, 18:11
- RE: Windows DNS Cache Poisoning by Forwarder DNS Spoofing, Roger A. Grimes, 18:01
- [Full-disclosure] ZDI-07-018: IBM Tivoli Monitoring Express Universal Agent Heap Overflow Vunlerability, zdi-disclosures, 17:50
- [Full-disclosure] ZDI-07-017: Oracle E-Business Suite Arbitrary Document Download Vulnerability, zdi-disclosures, 17:50
- Extreme PHPBB2 Remote File Inclusion, security, 17:50
- [Full-disclosure] ZDI-07-016: Oracle E-Business Suite Arbitrary Node Deletion Vulnerability, zdi-disclosures, 17:50
- [Full-disclosure] ZDI-07-015: Novell Groupwise WebAccess Base64 Decoding Stack Overflow Vulnerability, zdi-disclosures, 17:50
- Re: Internet Explorer Crash, Tom Gregory, 17:28
- FullyModdedphpBB2 Remote File Inclusion, security, 17:28
- MediaBeez Sql query Execution .. Wear isn't ?? :), security, 17:07
- [Full-disclosure] Oracle Database Buffer overflow vulnerabilities in package DBMS_SNAP_INTERNAL, Team SHATTER, 16:02
- Advisory: Shutdown unprotected Oracle TNS Listener via Oracle Discoverer Servlet [AS01], ak, 15:40
- Advisory: XSS Vulnerability in Oracle Secure Enterprise Search [SES01], ak, 15:19
- Advisory: SQL Injection in package SYS.DBMS_UPGRADE_INTERNAL, ak, 14:58
- Advisory: SQL Injection in package SYS.DBMS_AQADM_SYS, ak, 14:47
- Re: Internet Explorer Crash, Mike Ely, 14:47
- [Full-disclosure] rPSA-2007-0074-1 dovecot, rPath Update Announcements, 14:35
- [Full-disclosure] rPSA-2007-0073-1 php php-mysql php-pgsql, rPath Update Announcements, 14:35
- [Full-disclosure] rPSA-2007-0072-1 lighttpd, rPath Update Announcements, 14:35
- Advisory: Bypass Oracle Logon Trigger, ak, 14:35
- NukeSentinel Bypass SQL Injection & Nuke Evolution <= 2.0.3 SQL Injections, programmer, 14:35
- Reminder: HITBSecConf2007 - Malaysia: Call for Papers closing in 2 weeks, Praburaajan, 13:53
- [Full-disclosure] Analysis of the Oracle April 2007 Critical Patch Update, David Litchfield, 12:39
April 17, 2007
- Re: [Full-disclosure] [funsec] Re: A Botted Fortune 500 a Day, Fergie, 22:24
- [Full-disclosure] iDefense Security Advisory 04.17.07: McAfee E-Business Admin Server Invalid Data Length DoS Vulnerability, iDefense Labs, 22:02
- [Full-disclosure] iDefense Security Advisory 04.17.07: McAfee VirusScan On-Access Scanner Long Unicode File Name Buffer Overflow, iDefense Labs, 21:51
- Re: Windows DNS Cache Poisoning by Forwarder DNS Spoofing, Makoto Shiotsuki, 21:40
- Mambo/Joomla Component New Article Component RFI, meftun, 21:19
- Re: Windows DNS Cache Poisoning by Forwarder DNS Spoofing, Tim, 20:47
- Re: [Full-disclosure] A Botted Fortune 500 a Day, Nick FitzGerald, 20:46
- [Full-disclosure] [ GLSA 200704-15 ] MadWifi: Multiple vulnerabilities, Raphael Marichez, 20:14
- [Full-disclosure] [ GLSA 200704-14 ] FreeRADIUS: Denial of Service, Raphael Marichez, 20:14
- [Full-disclosure] [ GLSA 200704-13 ] File: Denial of Service, Raphael Marichez, 20:04
- Re: Internet Explorer Crash, Thor (Hammer of God), 19:42
- WASC-Articles: 'The Importance of Application Classification in Secure Application Development', contact, 19:42
- ShoutPro 1.5.2 - arbitrary code execution, jd2k2000, 19:31
- Re: Internet Explorer Crash, The Anarcat, 19:19
- SYMSA-2007-003 Macrovision InstallAnywhere Password and Serial Number Bypass, research, 19:08
- BlueArc Firmware 4.2.944b FTP bounce, Tim Rupp, 19:08
- Gizzar <= (basePath) Remote File Include Vulnerability, BorN To K!LL BorN To K!LL, 18:47
- Re[2]: Windows DNS Cache Poisoning by Forwarder DNS Spoofing, 3APA3A, 18:47
- [Full-disclosure] n.runs-SA-2007.007 - Sun Solaris 10 - Format string vulnerability, security, 18:46
- Multiple Ask IE Toolbar denial of service vulnerabilities, Michal Bucko, 18:04
- [security bulletin] HPSBTU02207 SSRT061213, SSRT061239, SSRT071304 rev.1 - HP Tru64 UNIX SSL and BIND Remote Arbitrary Code Execution or Denial of Service (DoS), security-alert, 17:52
- Internet Explorer Crash, J. Oquendo, 17:31
- Re: bloofoxCMS 0.2.2 Remote File Include Vulnerabilitiy, info, 17:20
- RE: Windows DNS Cache Poisoning by Forwarder DNS Spoofing, Roger A. Grimes, 16:59
- webMethods Security Advisory: Glue console directory traversal vu lnerability, Jeremy Epstein, 15:22
- Re: Netsprint Toolbar 1.1 arbitrary remote code vulnerability, Michal Zalewski, 15:01
- RE: Windows DNS Cache Poisoning by Forwarder DNS Spoofing, Roger A. Grimes, 14:39
- my little forum 1.7 Remote File Include Vulnerabilitiy, the_3dit0r, 14:18
- my little weblog Cross Site Scripting, the_3dit0r, 14:07
- Wabbit PHP Gallery v0.9 Cross Site Scripting, the_3dit0r, 13:46
- Remot File Include download_engine_V1.4.3, RaeD, 13:36
- Remot File Include In Script phphd_downloads, RaeD, 13:25
- PHP Nuke <= 8.0.0.3.3b SQL Injections and Bypass SQL Injection Protection vulnerabilities, programmer, 13:15
- Netsprint Toolbar 1.1 arbitrary remote code vulnerability, Michal Bucko, 13:04
April 16, 2007
- Re: [Full-disclosure] [WEB SECURITY] Persistent CSRF and The Hotlink Hell, Blue Boar, 22:45
- Re: [Full-disclosure] [WEB SECURITY] Persistent CSRF and The Hotlink Hell, Ryan Barnett, 22:23
- [Full-disclosure] iDefense Security Advisory 04.16.07: Akamai Download Manager ActiveX Stack Buffer Overflow Vulnerability, iDefense Labs, 20:57
- [ MDKSA-2007:085 ] - Updated freeradius packages fix DoS vulnerability, security, 20:36
- [ MDKSA-2007:084 ] - Updated ipsec-tools packages fix DoS vulnerability, security, 20:16
- [ MDKSA-2007:086 ] - Updated cups packages fix DoS vulnerability, security, 20:16
- Akamai Technologies Security Advisory 2007-0001, Akamai Security Team, 20:05
- [Full-disclosure] [ GLSA 200704-12 ] OpenOffice.org: Multiple vulnerabilities, Raphael Marichez, 19:54
- rPSA-2007-0071-1 kernel, rPath Update Announcements, 19:32
- Ivan Gallery Script V.0.1 (index.php) Remote File Include Exploit, seko, 18:38
- Persistent CSRF and The Hotlink Hell, pdp (architect), 17:56
- Re: Critical phpwiki c99shell exploit, Taneli Leppä, 17:34
- Windows DNS Cache Poisoning by Forwarder DNS Spoofing, Makoto Shiotsuki, 17:13
- Microsoft DNS Server Remote Code execution: Analysis and exploit, mballano, 16:52
- Re: phpMyChat-0.14.5, stuart_smith, 16:41
- [Full-disclosure] [ GLSA 200704-11 ] Vixie Cron: Denial of Service, Matthias Geerdsen, 16:31
- MyBlog <= 0.9.8 Remote Command Execution Exploit, BlackHawk, 16:20
- ActionPoll Script (actionpoll.php) Remote File Include // starhack.org, seko, 16:09
- ZoneAlarm Multiple insufficient argument validation of hooked SSDT function Vulnerability, Matousec - Transparent security Research, 15:58
- [MajorSecurity Advisory #45]oe2edit CMS - Cross Site Scripting and Cookie Manipulation Issue, admin, 15:37
- Joomla/Mambo Jambook v1.0 beta7 Rfi Vuln., crazy_king, 15:27
- LS simple guestbook - arbitrary code execution, jd2k2000, 15:16
- Sitebar 3.3.5 (index.php writerFile)Remote File Include Vulnerabilities, ?? ???? ??????, 14:33
- Re: Maian Search v1.1, support, 14:12
- [Full-disclosure] iDefense Security Advisory 04.16.07: ClamAV CAB File Unstore Buffer Overflow Vulnerability, iDefense Labs, 14:12
- Re: Maian Gallery v1.0, support, 14:01
- Re: sitex multiple vulnerabilities, Lostmon, 13:40
- Pixaria Gallery 1.0 (class.Smarty.php) Remote File Include Vulnerability, irvian_yoe, 13:30
- Re: VCDGear <= 3.56 Build 050213 (FILE) Local Code Execution Exploit, str0ke, 13:09
- [Full-disclosure] [ GLSA 200704-10 ] Inkscape: Two format string vulnerabilities, Matthias Geerdsen, 12:17
April 14, 2007
- [Full-disclosure] [ GLSA 200704-09 ] xine-lib: Heap-based buffer overflow, Raphael Marichez, 20:27
- phpMyChat-0.14.5, k4rtal, 17:11
- bloofoxCMS 0.2.2 Remote File Include Vulnerabilitiy, the_3dit0r, 17:01
- Maian Weblog v3.1, k4rtal, 16:40
- Flip-search-add-on 2.0, k4rtal, 16:29
- Back-End CMS Database Tables v0.4.7 Remote File Include Vulnerabilities, the_3dit0r, 16:18
- MySpeach v1.9, k4rtal, 15:58
- B2evolution 1.6 RFi, k4rtal, 15:58
- Maian Gallery v1.0, k4rtal, 15:37
- Maian Search v1.1, k4rtal, 15:26
- FloweRS v2.0 Cross Site Scripting, the_3dit0r, 15:05
- MobilePublisherphp v1.1.2 Remote File Include Vulnerabilities, the_3dit0r, 14:55
- Back-End CMS Database Tables v0.4.7 Cross Site Scripting, the_3dit0r, 14:34
- Re: Steganos Encrypted Safe NOT so safe, Andreas Beck, 14:23
- VCDGear <= 3.56 Build 050213 (FILE) Local Code Execution Exploit, meftun, 14:13
- Re: Vbulletin 3.6.5 Sql Injection ! [misc.php], scott-REMOVE, 14:02
- bloofoxCMS 0.2.2 Cross Site Scripting, the_3dit0r, 13:51
April 13, 2007
- Vbulletin 3.6.5 Sql Injection ! [misc.php], seko, 18:32
- [Full-disclosure] TSRT-07-04: LANDesk Management Suite Alert Service Stack Overflow Vulnerability, TSRT, 17:19
- [waraxe-2007-SA#048] - Multiple vulnerabilities in Virtual War 1.5 module for PhpNuke, come2waraxe, 14:10
- Re: [Full-disclosure] A Botted Fortune 500 a Day, Simon Smith, 13:48
- [MajorSecurity Advisory #44]MailBee WebMail Pro - Cross Site Scripting Issue, admin, 13:48
- Re: [Full-disclosure] A Botted Fortune 500 a Day, Jamie Riden, 12:44
- Re: [Full-disclosure] A Botted Fortune 500 a Day, Steven Adair, 12:02
- Re: [Full-disclosure] A Botted Fortune 500 a Day, Jamie Riden, 11:51
- Re: [Full-disclosure] A Botted Fortune 500 a Day, Steven Adair, 11:19
- [Full-disclosure] [OPENADS-SA-2007-004] Max Media Manager v0.1.29-rc and v0.3.31-alpha-pr2 vulnerability fixed, Matteo Beccati, 08:04
- [Full-disclosure] [OPENADS-SA-2007-003] Openads 2.0.11 vulnerability fixed, Matteo Beccati, 08:04
April 12, 2007
- [Full-disclosure] [Argeniss] Hacking Databases for owning your data (paper), Cesar, 20:59
- Aircrack-ng (airodump-ng) remote buffer overflow vulnerability, jonny, 20:05
- RE: Critical phpwiki c99shell exploit, Ryan Neufeld, 19:55
- FAC GuestBook v2.0 remote database disclosure vulnerability, the_3dit0r, 19:55
- Re: Cross site scripting in mephisto 0.7.3, encytemedia, 19:34
- Chatness <= 2.5.3 - Arbitrary Code Execution, jd2k2000, 19:34
- phpwebnews v.1 Multiple Cross Site Scripting Vulnerabilites, the_3dit0r, 19:13
- [Full-disclosure] iDefense Security Advisory 04.12.07: Hewlett Packard HP-UX Remote pfs_mountd.rpc Buffer Overflow Vulnerability, iDefense Labs, 17:59
- TuMusika Evolution 1.6 Cross Site Scripting Vulnerabilitiy, the_3dit0r, 17:58
- [security bulletin] HPSBUX02203 SSRT071339 rev.1 - HP-UX Running Portable File System (PFS), Remote Increase in Privilege, security-alert, 16:54
- Re: Critical phpwiki c99shell exploit, Jamie Riden, 16:33
- Re: Critical phpwiki c99shell exploit, Gadi Evron, 16:12
- [security bulletin] HPSBGN02199 SSRT071312 rev.1 - Mercury Quality Center ActiveX, Remote Unauthorized Arbitrary Code Execution, security-alert, 16:12
- Re: [Full-disclosure] A Botted Fortune 500 a Day, James Matthews, 16:12
- [security bulletin] HPSBUX01137 SSRT5954 rev.9 - HP-UX Running TCP/IP (IPv4), Remote Denial of Service (DoS), security-alert, 15:09
- [security bulletin] HPSBST02206 SSRT071354 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS07-014, security-alert, 14:38
- Critical phpwiki c99shell exploit, rurban, 14:27
- [Full-disclosure] A Botted Fortune 500 a Day, Gadi Evron, 13:23
- [Full-disclosure] INFIGO-2007-04-05: Enterprise Security Analyzer server remote buffer overflows, infocus, 13:23
- [Full-disclosure] Cross site scripting in mephisto 0.7.3, Hanno BÃck, 13:23
- HPSBUX02205 SSRT061120 rev.1 - HP-UX Running ARPA Transport, Local Denial of Service (DoS), security-alert, 13:23
- [Full-disclosure] CVE-2007-1872: Cross site scripting in toendaCMS 1.5.3, Hanno BÃck, 13:12
- [Full-disclosure] CVE-2007-1871: Cross site scripting in chcounter 3.1.3, Hanno BÃck, 13:12
- E107 - (v0.7.8) Access Escalation Vulnerbility - PoC, jd2k2000, 13:02
- [Full-disclosure] [ GLSA 200704-08 ] DokuWiki: Cross-site scripting vulnerability, Matthias Geerdsen, 12:00
April 11, 2007
- [ MDKSA-2007:082 ] - Updated madwifi-source, wpa_supplicant packages fix vulnerabilities, security, 22:26
- [ MDKSA-2007:075-1 ] - Updated qt4 packages to address utf8 decoder bug, security, 20:51
- [Full-disclosure] [USN-452-1] KDE library vulnerability, Kees Cook, 19:58
- [ MDKSA-2007:083 ] - Updated apache-mod_perl packages fix DoS vulnerability, security, 19:26
- [Full-disclosure] iDefense Security Advisory 04.11.07: Apache HTTPD suEXEC Multiple Vulnerabilities, iDefense Labs, 18:33
- [ MDKSA-2007:079-1 ] - Updated xorg-x11/XFree86 packages fix integer overflow vulnerabilities, security, 18:22
- Steganos Encrypted Safe NOT so safe, frankrizzo604, 17:50
- PunBB <= 1.2.14 Multiple Vulnerabilities (Advisory), gmdarkfig, 17:39
- PunBB <= 1.2.14 Remote Code Execution (Exploit), gmdarkfig, 17:28
- Re: Latinchat Denial Of Service, d4rksoft, 17:18
- Re: On-going Internet Emergency and Domain Names, Alexander Klimov, 16:57
- CodeBreak (codebreak.php process_method) - Remote File Inclusion Vulnerability, john, 16:24
- [MajorSecurity Advisory #43]Calacode ATMail 5.0 - Cross Site Scripting and Cookie Manipulation Issue, admin, 16:13
- pL-PHP beta 0.9 - Multiple Vulnerabilities, omnipresent, 15:09
- New bug :), asdasd asdsadas, 14:37
- nEw Bug :D, asdasd asdsadas, 13:23
- [ MDKSA-2007:080-1 ] - Updated tightvnc packages fix integer overflow vulnerabilities, security, 13:12
- webMethods Glue Management Console Directory Traversal, Patrick Webster, 13:01
- [Full-disclosure] Cosign SSO Authentication Bypass, Jon Oberheide, 12:50
- [Full-disclosure] com_zoom2 Mambo Module Remote File Include Vulnerability, 0o_zeus_o0 elitemexico.org, 12:29
April 10, 2007
- [Full-disclosure] [USN-451-1] Linux kernel vulnerabilities, Kees Cook, 22:01
- [ MDKSA-2007:081-1 ] - Updated freetype2 packages fix vulnerability, security, 19:33
- Re: vbulletin admincp sql injection, rjmjr69, 18:38
- [ MDKSA-2007:077-1 ] - Updated krb5 packages fix vulnerabilities, security, 17:34
- [Full-disclosure] iDefense Security Advisory 04.10.07: Microsoft Windows Universal Plug and Play Memory Corruption Vulnerability, iDefense Labs, 16:41
- Secunia Research: Microsoft Agent URL Parsing Memory Corruption Vulnerability, Secunia Research, 16:30
- PhpOpenChat <= 3.0.1 (poc.php) Multiple Remote File Include Vulnerabilities, seko, 16:30
- EEYE: Windows Vista CSRSS Dangling Process Pointer Privilege Escalation, eEye Advisories, 16:20
- EEYE: Windows VDM Zero Page Race Condition Privilege Escalation, eEye Advisories, 16:09
- DEF CON One Five CfP in effect!, The Dark Tangent, 13:32
- phpGalleryScript 1.0 - File Inclusion Vulnerabilities, z12xxa, 13:11
April 09, 2007
- [Full-disclosure] [USN-450-1] ipsec-tools vulnerability, Kees Cook, 19:45
- [Full-disclosure] iDefense Security Advisory 04.09.07: AOL AIM and ICQ File Transfer Path-Traversal Vulnerability, iDefense Labs, 19:13
- Re: Re: Mybb Hot Editor Plugin Local File Inclusion, liz0, 17:38
- rPSA-2007-0070-1 openoffice.org, rPath Update Announcements, 17:06
- Re: Mybb Hot Editor Plugin Local File Inclusion, Kevin Finisterre (lists), 15:10
- xodagallery Remote Code Execution Vulnerability, the_3dit0r, 15:10
- Hot Editor v4.0 Local File Inclusion, liz0, 14:39
- Mybb Hot Editor Plugin Local File Inclusion, liz0, 14:28
- QuizShock 1.6.1 - Cross-Site Scripting Vulnerability, john, 14:28
- Request It : Song Request System 1.0b - remote file inclusion, mail, 14:17
- Gsylvain35 Portail Web Remote File Include Vulnerabilities, the_3dit0r, 14:06
- DeskPRO v2.0.1 - Cross-Site Scripting Vulnerability, john, 13:56
- Remot File Include In Script Lore v1, RaeD, 13:45
- phpMyAdmin 2.6.1 Local Cross Site Scripting, the_3dit0r, 13:34
- Take Control In Script Jeebles Directory, RaeD, 13:34
- Scorp Book <== v1.0 (smilies.php) Remote File Include Exploit, k4rtal, 13:24
- UBB.threads (<= 6.1.1) SQL Injection Vulnerability, john, 13:13
April 07, 2007
- witshare 0.9 Remote File Include Vulnerabilitiy, the_3dit0r, 17:54
- CmailServer WebMail <= V.5.3.4 (signup) Remote XSS Exploit, ajannhwt, 16:42
- Re: Nine Vista CVEs, including Microsoft inaccurate Teredo use case documentation, GomoR, 13:47
- [MajorSecurity Advisory #42]webblizzard CMS - Cross Site Scripting and Session fixation Issues, Securityaudit, 13:36
- PHP <= 5.2.1 wbmp file handling integer overflow, Ivan Fratric, 13:36
April 06, 2007
- [Full-disclosure] [ GLSA 200704-07 ] libwpd: Multiple vulnerabilities, Raphael Marichez, 20:57
- [Full-disclosure] [ GLSA 200704-06 ] Evince: Stack overflow in included gv code, Raphael Marichez, 20:47
- LayerOne 2007 - Speaker Line up Announced, Layer One, 19:24
- [SECURITY] [DSA 1278-1] New man-db packages fix arbitrary code execution, Noah Meyerhans, 19:13
- livor 2.5 Cross-Site Scripting Vulnerability, rko . thelegendkiller, 14:28
- [MajorSecurity Advisory #41]onelook courts online - Session fixation Issue, Securityaudit, 14:17
- [MajorSecurity Advisory #40]onelook oboShop - Session fixation Issue, Securityaudit, 14:07
- [MajorSecurity Advisory #39]onelook onebyone CMS - Session fixation Issue, Securityaudit, 13:56
- phpContact Multiple Remote File Inclusion Vulnerabilities, rko . thelegendkiller, 13:44
- ACLS ineffective in SQL-Ledger and LedgerSMB, Chris Travers, 13:34
- Re: Nine Vista CVEs, including Microsoft inaccurate Teredo use case documentation, Jim Hoagland, 13:34
- Re: Firefox extensions go Evil - Critical Vulnerabilities in Firefox/Firebug, Thor Larholm, 13:23
- [Full-disclosure] AOL Nullsoft Winamp IT Module "IN_MOD.DLL" Remote Heap Memory Corruption, Piotr Bania, 07:40
- [Full-disclosure] AOL Nullsoft Winamp LIBSNDFILE.DLL Remote Memory Corruption (Off By Zero), Piotr Bania, 07:30
- [Full-disclosure] AOL Nullsoft Winamp S3M Module "IN_MOD.DLL" Remote Heap Memory Corruption, Piotr Bania, 07:30
April 05, 2007
- [Full-disclosure] ZDI-07-014: Kaspersky Anti-Virus ActiveX Control Unsafe Method Exposure Vulnerablity, zdi-disclosures, 20:41
- [Full-disclosure] ZDI-07-013: Kaspersky AntiVirus Engine ARJ Archive Parsing Heap Overflow Vulnerability, zdi-disclosures, 20:41
- [security bulletin] HPSBUX02204 SSRT071341 rev.1 - HP-UX Running CIFS Server (Samba), Remote Denial of Service (DoS), security-alert, 18:44
- [Full-disclosure] FLEA-2007-0010-1: evolution, Foresight Linux Essential Announcement Service, 17:19
- Wserve HTTP Server 4.6 Version (Long Directory Name) Buffer Overflow - Denial Of Service, UniquE, 17:08
- [Full-disclosure] FLEA-2007-0009-1: xorg-x11 freetype, Foresight Linux Essential Announcement Service, 16:36
- [Full-disclosure] FLEA-2007-0008-1: krb5, Foresight Linux Essential Announcement Service, 16:25
- Microsoft .NET request filtering bypass vulnerability (BID 20753), research, 15:01
- [ MDKSA-2007:081 ] - Updated freetype2 packages fix vulnerability, security, 15:01
- [ MDKSA-2007:080 ] - Updated tightvnc packages fix integer overflow vulnerabilities, security, 15:01
- LedgerSMB 1.2.0 finally released, fixes CVE-2006-5589, Chris Travers, 15:01
- [ MDKSA-2007:079 ] - Updated xorg-x11/XFree86 packages fix integer overflow vulnerabilities, security, 15:01
- [Full-disclosure] iDefense Security Advisory 04.04.07: ESRI ArcSDE Buffer Overflow Vulnerability, iDefense Labs, 14:59
- Re: [Full-disclosure] [WEB SECURITY] Firefox extensions go Evil - Critical Vulnerabilities in Firefox/Firebug, Daniel Veditz, 14:58
- [Full-disclosure] iDefense Security Advisory 04.04.07: Kaspersky Internet Security Suite klif.sys Heap Overflow Vulnerability, iDefense Labs, 14:58
- [ MDKSA-2007:078 ] - Updated kernel packages fix multiple vulnerabilities and bugs, security, 14:58
- [Full-disclosure] iDefense Security Advisory 04.04.07: Kaspersky AntiVirus SysInfo ActiveX Control Information Disclosure Vulnerability, iDefense Labs, 14:58
- Firefox extensions go Evil - Critical Vulnerabilities in Firefox/Firebug, pdp (architect), 14:58
- [ MDKSA-2007:077 ] - Updated krb5 packages fix vulnerabilities, security, 14:58
- Gazi Okul Sitesi 2007(tr)(fotokategori.asp) Remote SQL Injection, r00t-balance, 14:58
- [SECURITY] [DSA 1277-1] New XMMS packages fix arbitrary code execution, Noah Meyerhans, 14:58
April 04, 2007
- Several Windows image viewers vulnerabilities, Ivan Fratric, 16:20
- High Risk Vulnerability in OpenOffice, NGSSoftware Insight Security Research, 16:09
- Re: Denial of Service Vulnerabilities in TrueCrypt 4.3 Linux (re. bid 23180), Marco Ivaldi, 15:48
- [Full-disclosure] VMSA-2007-0003 VMware ESX 3.0.1 and 3.0.0 server security updates, VMware Security team, 15:38
- [ MDKSA-2007:076 ] - Updated kdelibs packages to address UTF8 issue in KJS, security, 15:38
- MyBlog: PHP and MySQL Blog/CMS software Remote File Include Vulnerabilitiy, the_3dit0r, 15:38
- MyBlog: PHP and MySQL Blog/CMS software Cross-Site Scripting Vulnerabilitiy, the_3dit0r, 15:37
- phpechocms2 Remote File Include Vulnerabilities, the_3dit0r, 15:27
- phpechocms v.2 Cross-Site Scripting Vulnerabilitiy, the_3dit0r, 15:27
- Monkey CMS v0.0.3 Remote File Include Vulnerabilitiy, the_3dit0r, 15:27
- rPSA-2007-0067-1 nas, rPath Update Announcements, 15:26
- K-CMS v1.0 Remote File Include Vulnerabilities, the_3dit0r, 15:26
- iXon_CMS 0.30 Remote File Include Vulnerabilities, the_3dit0r, 15:26
- Remot File Include In phpexplorator_2_0, RaeD, 15:26
- [MajorSecurity Advisory #38]eXV2 CMS - Session fixation and Cross-Site-Scripting Issues, Securityaudit, 15:26
- [ MDKSA-2007:074 ] - Updated qt3 packages to address utf8 decoder bug, security, 15:26
- CYBSEC Release: SAP Security - Paper & Tool release, Mariano Nuñez Di Croce, 15:26
- CYBSEC Security Pre-Advisory: SAP RFC_SET_REG_SERVER_PROPERTY RFC Function Denial Of Service, CYBSEC Advisories, 15:26
- CYBSEC Security Pre-Advisory: SAP SYSTEM_CREATE_INSTANCE RFC Function Buffer Overflow, CYBSEC Advisories, 15:26
- CYBSEC Security Pre-Advisory: SAP RFC_START_GUI RFC Function Buffer Overflow, CYBSEC Advisories, 15:26
- lite-cms-0.2.1 Remote File Include Vulnerabilities, the_3dit0r, 15:26
- CYBSEC Security Pre-Advisory: SAP RFC_START_PROGRAM RFC Function Multiple Vulnerabilities, CYBSEC Advisories, 15:26
- CYBSEC Pre-Advisory: SAP TRUSTED_SYSTEM_SECURITY RFC Function Information Disclosure, CYBSEC Advisories, 15:26
- Re: [Full-disclosure] Mozilla Firefox Insecure Element Stealth Injection Vulnerability, 3APA3A, 15:26
- [ MDKSA-2007:075 ] - Updated qt4 packages to address utf8 decoder bug, security, 15:26
- [Full-disclosure] Three New Papers on Oracle Forensics, David Litchfield, 15:26
- Re: [Full-disclosure] More information on ZERT patch for ANI 0day, Jason Frisvold, 15:25
- Re: [Full-disclosure] More information on ZERT patch for ANI 0day, Jason Frisvold, 15:25
- [Full-disclosure] rPSA-2007-0066-1 kdelibs qt-x11-free, rPath Update Announcements, 15:25
- [Full-disclosure] Mozilla Firefox Insecure Element Stealth Injection Vulnerability, Michal Majchrowicz, 15:25
- [Full-disclosure] rPSA-2007-0065-1 freetype xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs, rPath Update Announcements, 15:25
- [Full-disclosure] rPSA-2007-0063-1 krb5 krb5-server krb5-services krb5-test krb5-workstation, rPath Update Announcements, 15:25
- [Full-disclosure] rPSA-2007-0064-1 ImageMagick, rPath Update Announcements, 15:25
- [Full-disclosure] rPSA-2007-0062-1 firefox, rPath Update Announcements, 15:25
- [Full-disclosure] [USN-449-1] krb5 vulnerabilities, Kees Cook, 15:25
- Re: [Full-disclosure] More information on ZERT patch for ANI 0day, Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP], 15:25
- [Full-disclosure] [USN-448-1] X.org vulnerabilities, Kees Cook, 15:25
- [Full-disclosure] iDefense Security Advisory 04.03.07: Multiple Vendor X Server XC-MISC Extension Memory Corruption Vulnerability, iDefense Labs, 15:25
- [Full-disclosure] iDefense Security Advisory 04.03.07: Multiple Vendor X Server fonts.dir File Parsing Integer Overflow Vulnerability, iDefense Labs, 15:25
- [Full-disclosure] iDefense Security Advisory 04.03.07: Multiple Vendor X Server BDF Font Parsing Integer Overflow Vulnerability, iDefense Labs, 15:25
- [Full-disclosure] [ GLSA 200704-04 ] OpenPBS: Multiple vulnerabilities, Raphael Marichez, 15:25
- [Full-disclosure] [ GLSA 200704-03 ] OpenAFS: Privilege escalation, Raphael Marichez, 15:25
- [Full-disclosure] [ GLSA 200704-05 ] zziplib: Buffer Overflow, Raphael Marichez, 15:25
- Nine Vista CVEs, including Microsoft inaccurate Teredo use case documentation, Jim Hoagland, 15:25
- [SECURITY] [DSA 1276-1] New krb5 packages fix several vulnerabilities, Moritz Muehlenhoff, 15:25
- [Full-disclosure] [ GLSA 200704-02 ] MIT Kerberos 5: Arbitrary remote code execution, Sune Kloppenborg Jeppesen, 15:25
- [Full-disclosure] ZDI-07-012: Yahoo! Messenger AudioConf ActiveX Control Buffer Overflow, zdi-disclosures, 15:25
- Re: On-going Internet Emergency and Domain Names, Bob Fiero, 15:25
- [Full-disclosure] FLEA-2007-0007-1: nas, Foresight Linux Essential Announcement Service, 15:25
- MITKRB5-SA-2007-001: telnetd allows login as arbitrary user [CVE-2007-0956], Tom Yu, 15:25
- MITKRB5-SA-2007-003: double-free vulnerability in kadmind (via GSS-API library) [CVE-2007-1216], Tom Yu, 15:25
- [Full-disclosure] iDefense Security Advisory 04.03.07: Multiple Vendor Kerberos kadmind Buffer Overflow Vulnerability, iDefense Labs, 15:25
- Re: [Full-disclosure] More information on ZERT patch for ANI 0day, neal.krawetz, 15:25
- Re: [Full-disclosure] More information on ZERT patch for ANI 0day, Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP], 15:25
- MITKRB5-SA-2007-002: KDC, kadmind stack overflow in krb5_klog_syslog [CVE-2007-0957], Tom Yu, 15:25
- [Full-disclosure] FLEA-2007-0006-2: ImageMagick, Foresight Linux Essential Announcement Service, 15:25
- [Full-disclosure] FLEA-2007-0006-1: ImageMagick, Foresight Linux Essential Announcement Service, 15:25
- Re[2]: APOP vulnerability, 3APA3A, 15:24
- Re: [Full-disclosure] More information on ZERT patch for ANI 0day, Matthew Murphy, 15:24
- [Full-disclosure] iDefense Security Advisory 04.03.07: Microsoft Windows WMF Triggerable Kernel Design Error DoS Vulnerability, iDefense Labs, 15:24
- Re: APOP vulnerability, Gaëtan LEURENT, 15:24
- Remote File Include In Script stat12, RaeD, 15:24
- Re: [Full-disclosure] More information on ZERT patch for ANI 0day, Stefan Kelm, 15:24
- MyBulletinBoard (MyBB) <= 1.2.3 Remote Code Execution Exploit, gmdarkfig, 15:24
- [MajorSecurity Advisory #37]HolaCMS - Cross Site Scripting Issue, SecurityAudit, 15:24
- Re: APOP vulnerability, 3APA3A, 15:24
- Re: [Full-disclosure] Exploiting Microsoft dynamic Dns updates, Andres Tarasco, 15:24
- TWOVB][ The Week Of Vista Bugs: the truth is out there, TWOVB Team, 15:24
- Re: [Full-disclosure] Exploiting Microsoft dynamic Dns updates, Denis Jedig, 15:24
- Re: [Full-disclosure] [RECTIFY] Oracle 10g exploit - dbms_aq.enqueue - become DBA, Andrea \"bunker\" Purificato, 15:24
- Re: [Full-disclosure] More information on ZERT patch for ANI 0day, Gadi Evron, 15:24
- Re: [Full-disclosure] More information on ZERT patch for ANI 0day, Gadi Evron, 15:24
- Re: [Full-disclosure] 0day Oracle 10g exploit - dbms_aq.enqueue - become DBA, Gadi Evron, 15:24
- Re: [Full-disclosure] More information on ZERT patch for ANI 0day, Gadi Evron, 15:24
- Re: [Full-disclosure] More information on ZERT patch for ANI 0day, Gadi Evron, 15:24
- [ GLSA 200704-01 ] Asterisk: Two SIP Denial of Service vulnerabilities, Sune Kloppenborg Jeppesen, 15:24
- [CFP] VNSECON 07 - Call for Papers / HCMC - August 03-04, 2007, rd, 15:24
- Re: Maplab <= 2.2.1 (gszAppPath) Remote File Inclusion Vulnerability, str0ke, 15:24
- [Full-disclosure] iDefense Security Advisory 03.31.07: IBM Tivoli Provisioning Manager for OS Deployment Multiple Vulnerabilities, iDefense Labs, 15:24
- Re: [Full-disclosure] More information on ZERT patch for ANI 0day, James (njan) Eaton-Lee, 15:24
- Re: [Full-disclosure] More information on ZERT patch for ANI 0day, wac, 15:24
- Re: [Full-disclosure] More information on ZERT patch for ANI 0day, James (njan) Eaton-Lee, 15:24
- Re: Maplab <= 2.2.1 (gszAppPath) Remote File Inclusion Vulnerability, jasus, 15:24
- Re: [Full-disclosure] 0day Oracle 10g exploit - dbms_aq.enqueue - become DBA, Andrea Purificato - bunker, 15:24
- Re: [Full-disclosure] More information on ZERT patch for ANI 0day, James (njan) Eaton-Lee, 15:24
- [Full-disclosure] iDefense Security Advisory 04.02.07: Hewlett-Packard Mercury Quality Center ActiveX Control ProgColor Buffer Overflow Vulnerability, iDefense Labs, 15:24
- Re: AIX 4.3 lsmcode local root command execution, Shiva Persaud, 15:24
- APOP vulnerability, Gaëtan LEURENT, 15:24
- WOVB #01: Bypassing Vista Firewall, Flying over obstructive line, TWOVB Team, 15:24
- Maplab <= 2.2.1 (gszAppPath) Remote File Inclusion Vulnerability, mufti . rizal, 15:24
- Re: Denial of Service Vulnerabilities in TrueCrypt 4.3 Linux (re. bid 23180), Pavel Kankovsky, 15:24
- Windows XP/Vista (.ANI) Remote Exploit (bypass eeye patch), jamikazu, 15:24
- Norton Multiple insufficient argument validation of hooked SSDT function Vulnerability, Matousec - Transparent security Research, 15:24
- Re: Drake CMS v0.3.2 < = RFi Vulnerabilities, legolas558, 15:24
- Re: [Full-disclosure] More information on ZERT patch for ANI 0day, James (njan) Eaton-Lee, 15:24
- DirectAdmin persistant XSS [takeover an Administrator`s account], Kanedaaa Bohater, 15:24
- [security bulletin] HPSBMA02198 SSRT061177 rev.1 - HP OpenView Network Node Manager (OV NNM) Remote Unauthorized Access, security-alert, 15:24
- [Full-disclosure] More information on ZERT patch for ANI 0day, Gadi Evron, 15:24
- [Full-disclosure] iDefense Security Advisory 03.31.07: Multiple Vendor ImageMagick DCM and XWD Buffer Overflow Vulnerabilities, iDefense Labs, 15:24
- 2BGal 3.1.1 <= (admin/index.php) Remote File Include Vulnerability, BorN To K!LL BorN To K!LL, 15:24
- MS announces out-of-band patch for ANI 0day, Gadi Evron, 15:24
- Re: Xoops All Version -Articles- Print.PHP (ID) Blind SQL Injection Exploit And PoC, vaughan . montgomery, 15:24
- [Full-disclosure] 0day Oracle 10g exploit - dbms_aq.enqueue - become DBA, Andrea \"bunker\" Purificato, 15:23
- [Full-disclosure] CAU-2007-0001: Window Transparency Information Disclosure, I)ruid, 15:23
- [Full-disclosure] [ GLSA 200703-28 ] CUPS: Denial of Service, Raphael Marichez, 15:23
- [Full-disclosure] [ GLSA 200703-27 ] Squid: Denial of Service, Raphael Marichez, 15:22
- Remot File Include In Aardvark Topsites PHP 5, RaeD Hasadya, 15:22
- Remot File Include In Shop-SCRIPT FREE, RaeD Hasadya, 15:22
- Remot File Include In SLAED_CMS_2, RaeD Hasadya, 15:22
- PHP-Fusion 'Calendar_Panel' Module show_event.PHP (m_month) SQL Injection Exploit And PoC, UniquE, 15:22
- Windows .ANI Stack Overflow Exploit, devcode29, 15:22
- CA BrightStor ARCserve Backup Mediasvr.exe vulnerability, Williams, James K, 15:22
- Re: [Full-disclosure] 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038), Alexander Sotirov, 15:22
- Re: [Full-disclosure] 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038), Jan Wrobel, 15:22
- [Full-disclosure] On-going Internet Emergency and Domain Names, Gadi Evron, 15:22
- Re: [Full-disclosure] 0-day ANI vulnerability in Microsoft Windows(CVE-2007-0038), Eric Sites, 15:22
- Re: [Full-disclosure] 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038), Alexander Sotirov, 15:22
- [Full-disclosure] TSRT-07-03: America Online SuperBuddy ActiveX Control Code Execution Vulnerability, TSRT, 15:22
- Busting The Bluetooth Myth, Max Moser, 15:22
- [Full-disclosure] [ GLSA 200703-26 ] file: Integer underflow, Raphael Marichez, 15:22
- Re: [Full-disclosure] 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038), James Matthews, 15:22
- ANI Zeroday, Third Party Patch, Marc Maiffret, 15:22
- Re: ManageEngine Firewall Analyzer arbitrary file disclosure to authorized user, support, 15:22
- [ECHO_ADV_80$2007] Softerra Time-Assistant <= 6.2 (inc_dir) Remote File Inclusion Vulnerability, erdc, 15:22
- Re: Bypass phishing protection in Firefox / Opera, Åukasz Pilorz, 15:22
- The Week Of Vista Bugs [TWOVB], TWOVB Team, 15:22
- AIX 4.3 lsmcode local root command execution, pr1nce_empire, 15:22
- DrakeCMS multiple vulerabilities, security, 15:22
- Mybb Change Password Vulnerability, security, 15:22
- [Full-disclosure] Microsoft Windows Vista Slideshow Unspecified Blue Screen Of Death Vulnerability, Michal Majchrowicz, 15:22
- Re: [Full-disclosure] 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038), James Rankin, 15:22
- [Full-disclosure] 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038), Alexander Sotirov, 15:22
- [Full-disclosure] VMSA-2007-0002 VMware ESX security updates, VMware Security team, 15:22
- [Full-disclosure] CA Brightstor Backup Mediasvr.exe Remote Code Vulnerability, M. Shirk, 15:22
- Re: Re: Bypass phishing protection in Firefox / Opera, zonafirefox, 15:22
- [Full-disclosure] FLEA-2007-0005-1: slocate, Foresight Linux Essential Announcement Service, 15:22
- [ MDKSA-2007:073 ] - Updated openoffice.org packages to address vulnerabilities, security, 15:22
- [ GLSA 200703-25 ] Ekiga: Format string vulnerability, Raphael Marichez, 15:22
- [ MDKSA-2007:072 ] - Updated kdelibs packages to address FTP PASV issue in konqueror, security, 15:22
- [Full-disclosure] FLEA-2007-0004-1: openoffice.org, Foresight Linux Essential Announcement Service, 15:22
- [ MDKSA-2007:071 ] - Updated xmms packages to address integer vulnerabilities, security, 15:22
- [Full-disclosure] iDefense Security Advisory 03.29.07: IBM Lotus Sametime JNILoader Arbitrary DLL Load Vulnerability, iDefense Labs, 15:22
- AOL 9.0 Deskbar.dll/Toolbar.dll DoS Vulnerability, Justin Seitz, 15:22
- Re: Re: Bypass phishing protection in Firefox / Opera, bob, 15:22
- Windows Live Spaces logged user NetworkSetup.aspx cross site scripting, paolo . difebbo, 15:22
- Re: Re: [Full-disclosure] Linux Kernel DCCP Memory Disclosure Vulnerability, acme, 15:22
- Widespread vulnerabilities in Libero.it/Infostrada.it web portals, rosario . valotta, 15:22
- Advanced Login <= 0.7 (root) Remote File Inclusion Vulnerability, bithedz, 15:22
- Re: ManageEngine Firewall Analyzer arbitrary file disclosure to authorized user, support, 15:22
- Re: Bypass phishing protection in Firefox / Opera, Anonymous, 15:22
- Xoops Module Friendfinder <= 3.3 (view.php id) BLIND SQL Injection Exploit, ajannhwt, 15:22
- Re: [VulnWatch] Microsoft Windows Vista Slideshow Unspecified Blue Screen Of Death Vulnerability, 3APA3A, 15:22
- [Full-disclosure] rPSA-2007-0061-1 inkscape, rPath Update Announcements, 15:22
- [VulnWatch] Microsoft Windows Vista Slideshow Unspecified Blue Screen Of Death Vulnerability, Michał Majchrowicz, 15:22
- [Full-disclosure] [USN-447-1] KDE library vulnerabilities, Kees Cook, 15:22
- Arbitrary Command Execution in DataDomain Administrator Interface, Elliot Kendall, 15:22
- [SECURITY] [DSA 1270-2] New OpenOffice.org packages fix several vulnerabilities, Martin Schulze, 15:22
- Re: [viewvc-users] Update: ViewCVS and ViewVC 'checkout view' content type fixation issue, C. Michael Pilato, 15:22
- Denial of Service Vulnerabilities in TrueCrypt 4.3 Linux (re. bid 23180), Tim Rees, 15:22
- [Full-disclosure] Update: ViewCVS and ViewVC 'checkout view' content type fixation issue, Moritz Naumann, 15:22
- [Full-disclosure] [Full-Disclosure] Another XSS vulnerability in italian Libero.it, Matteo G.P. Flora, 15:22
- Re: [SECURITY ALERT] osTicket bugs, eticket, 15:22
- [Full-disclosure] ZDI-07-011: IBM Lotus Domino IMAP Server CRAM-MD5 Authentication Buffer Overflow Vulnerability, zdi-disclosures, 15:22
- Re: Multiple Vulnerabilities In osTicket, eticket, 15:22
- Re: [Full-disclosure] SecurityVulns.com: Microsoft Visual C++ 8.0 standard library time functions invalid assertion DoS (Problem 3000)., William A. Rowe, Jr., 15:21
- Corel Wordperfect Office X3 Stack Overflow, jonny, 15:21
- Bypass phishing protection in Firefox / Opera, zonafirefox, 15:21
- [Full-disclosure] iDefense Security Advisory 03.28.07: IBM Lotus Domino Server LDAP Request Invalid DN Message Heap Overflow Vulnerability, iDefense Labs, 15:21
- Re: Xoops All Version -Articles- Print.PHP (ID) Blind SQL Injection Exploit And PoC, andy, 15:21
- [Full-disclosure] iDefense Security Advisory 03.28.07: IBM Lotus Domino Web Access Cross Site Scripting Vulnerability, iDefense Labs, 15:21
- [Full-disclosure] [USN-446-1] NAS vulnerabilities, Kees Cook, 15:21
- [Full-disclosure] [USN-445-1] XMMS vulnerabilities, Kees Cook, 15:21
- [Full-disclosure] [USN-444-1] OpenOffice.org vulnerabilities, Kees Cook, 15:21
- Re: RE: Xbox 360 Hypervisor Privilege Escalation Vulnerability, 5150sd, 15:21
- [USN-443-1] Firefox vulnerability, Kees Cook, 15:21
- Re: [Full-disclosure] Linux Kernel DCCP Memory Disclosure Vulnerability, Robert Święcki, 15:21
- [SECURITY] [DSA 1273-1] New nas packages fix multiple remote vulnerabilities, Noah Meyerhans, 15:21
- [ MDKSA-2007:070 ] - Updated evolution packages to address vulnerability, security, 15:21
- Buffer Overflow in InterVetions' NaviCopa HTTP server 2.01, skillTube.com, 15:21
- Yahoo! Messenger Auth Bypass Vulnerability, kishor . tech, 15:21
- [KDE Security Advisory] KDE ioslave PASV port scanning vulnerability, Dirk Mueller, 15:21
- [ECHO_ADV_78$2007] C-Arbre <= 0.6PR7 (root_path) Remote File Inclusion Vulnerability, erdc, 15:21
- [KAPDA::#64] - Flexbb Sql Injection, alireza hassani, 15:21
- Metasploit Framework 3.0 RELEASED!, H D Moore, 15:21
- Xoops All Version -Articles- Print.PHP (ID) Blind SQL Injection Exploit And PoC, UniquE, 15:21
- Re: Path Disclosure - Wordpress 2.1.2, jm, 15:21
- Re: Horde Webmail Multiple HTML Injection vulnerability, Jan Schneider, 15:21
- [Full-disclosure] Linux Kernel DCCP Memory Disclosure Vulnerability, Robert Święcki, 15:21
- [Full-disclosure] SignKorea's ActiveX Buffer Overflow Vulnerability, Alex Park, 15:21
- [Full-disclosure] [ GLSA 200703-24 ] mgv: Stack overflow in included gv code, Raphael Marichez, 15:21
- [Full-disclosure] [USN-442-1] Evolution vulnerability, Kees Cook, 15:21
- [USN-441-1] Squid vulnerability, Kees Cook, 15:21
- Libero.it (italian ISP) XSS vulnerability, rosario . valotta, 15:20
- Playstation 3 "Remote Play" Remote DoS Exploit, mak0b, 15:20
- Re: **SubHub v2.3.0**, webmaster, 15:20
- PHP 5.2.1 with PECL phpDOC local buffer overflow, retrog, 15:20
- Multiple XSS in IronMail, Javier Olascoaga, 15:20
- Re: Linksys WAG200G - Information disclosure, Bartłomiej Ochman, 15:20
- Satel Lite for PhpNuke (Satellite.php) <= Local File Inclusion, stormhacker, 15:20
- Mephisto blog is vulnerable to XSS, Sergey Tikhonov, 15:20
- Horde Webmail Multiple HTML Injection vulnerability, DoZ, 15:20
- Path Disclosure - Wordpress 2.1.2, lj, 15:20
- CcCounter 2.0 cross-site scripting vulnerability, localexploit, 15:20
- BOGUS: Remote File Include In phpBB-2.0.19, Cornelius Riemenschneider, 15:20
- Re: Remote File Include In phpBB-2.0.19, neothermic, 15:20
- [Full-disclosure] FLEA-2007-0003-1: cups, Foresight Linux Essential Announcement Service, 15:20
- [Full-disclosure] Redirection vulnerability in oracle entreprise manager, handrix cobra, 15:19
- Re: [Full-disclosure] XSS at Aon.at, Austrian ISP, Nikolay Kichukov, 15:19
- [Full-disclosure] Fizzle : Firefox Extension Vulnerability, CrYpTiC MauleR, 15:19
- [Full-disclosure] Fizzle : Firefox Extension Vulnerability, CrYpTiC MauleR, 15:19
- [Full-disclosure] Fizzle : Firefox Extension Vulnerability, CrYpTiC MauleR, 15:19
- Remote File Include In phpBB-2.0.19, RaeD Hasadya, 15:19
- File Upload System V1.0 (AD_BODY_TEMP) multiple file include, ngevedBangetAsli, 15:19
- [Full-disclosure] FLEA-2007-0002-1: inkscape, Foresight Linux Essential Announcement Service, 15:19
- Joomla com_joomlaboard 1.1.x Branch (sbp) Multiple Remote File Include Vulnerabi, Cold - Zero, 15:19
- iDefense Security Advisory 03.23.07: Sun Java System Directory Server 5.2 Uninitialized Pointer Cleanup Design Error Vulnerability, iDefense Labs, 15:19
- [Full-disclosure] iDefense Security Advisory 03.23.07: DataRescue IDA Pro Remote Debugger Server Authentication Bypass Vulnerability, iDefense Labs, 15:19
- [ MDKSA-2007:069 ] - Updated inkscape packages to format string vulnerability, security, 15:19
- CRLF injection in PHP ftp function, fangxiaodun, 15:19
- [ MDKSA-2007:068 ] - Updated squid packages fix DoS vulnerability, security, 15:19
- [NB07-10] Multiple vulnerabilities in Takebishi Electric DeviceXplorer MODBUS OPC server, Lluis Mora, 15:19
- [NB07-09] Multiple vulnerabilities in Takebishi Electric DeviceXplorer FA-M3 OPC server, Lluis Mora, 15:19
- [SECURITY] [DSA 1272-1] New tcpdump packages fix denial of service, Moritz Muehlenhoff, 15:19
- [NB07-08] Multiple vulnerabilities in Takebishi Electric DeviceXplorer MELSEC OPC server, Lluis Mora, 15:19
- [NB07-07] Multiple vulnerabilities in Takebishi Electric DeviceXplorer HIDIC OPC server, Lluis Mora, 15:19
- [NB07-17] Multiple vulnerabilities in Takebishi Electric DeviceXplorer SYSMAC OPC server, Lluis Mora, 15:19
- [NB07-22] Multiple vulnerabilities in NETxEIB OPC server, Lluis Mora, 15:19
- [ MDKSA-2007:067 ] - Updated file packages fix heap-based buffer overflow vulnerability, security, 15:19
- Remote File Include In Coppermine Photo Gallery, RaeD Hasadya, 15:19
- Remote File Include In copyright © James Coyle; JCcorp, RaeD Hasadya, 15:19
- ManageEngine Firewall Analyzer arbitrary file disclosure to authorized user, yearsilent, 15:19
- CFP for RAID 2007: Extended due date for papers: April 8th, jeffh, 15:19
- [ECHO_ADV_77$2007] Study planner (Studiewijzer) <= 0.15 Remote File Inclusion Vulnerability, erdc, 15:19
- **SubHub v2.3.0**, anon, 15:19
- [Full-disclosure] Exploiting Microsoft dynamic Dns updates, Andres Tarasco, 15:19
- [Full-disclosure] rPSA-2007-0059-1 file, rPath Update Announcements, 15:19
- [Full-disclosure] FLEA-2007-0001-1: firefox, Foresight Linux Essential Announcement Service, 15:19
- [Full-disclosure] [USN-439-1] file vulnerability, Kees Cook, 15:18
- [Full-disclosure] [USN-440-1] MySQL vulnerability, Kees Cook, 15:18
- RE: Your Opinion, Neale Green, 15:18
- Two new DoS Vulnerabilities in Asterisk Fixed, Matt Riddell (NZ), 15:18
- [security bulletin] HPSBUX02156 SSRT061236 rev.2 - HP-UX Running Thunderbird, Remote Unauthorized Access or Elevation of Privileges or Denial of Service (DoS), security-alert, 15:18
- HPSBGN02189 SSRT071297 rev.2 - ServiceGuard for Linux, Remote Unauthorized Access, security-alert, 15:18
- Secunia Research: XMMS Integer Overflow and Underflow Vulnerabilities, Secunia Research, 15:18
- Secunia Research: Evolution Shared Memo Categories Format String Vulnerability, Secunia Research, 15:18
- Secunia Research: InterActual Player / CinePlayer IASystemInfo.dll ActiveX Control Buffer Overflow, Secunia Research, 15:18
- [ MDKSA-2007:066 ] - Updated OpenAFS packages address vulnerability, security, 15:18
- [ MDKSA-2007:065 ] - Updated nas packages address multiple vulnerabilities, security, 15:18
- [Full-disclosure] [USN-438-1] Inkscape vulnerability, Kees Cook, 15:17
- Re: Linksys WAG200G - Information disclosure, Shawn Merdinger, 15:17
- [ GLSA 200703-23 ] WordPress: Multiple vulnerabilities, Raphael Marichez, 15:17
- [SECURITY] [DSA 1270-1] New OpenOffice.org packages fix several vulnerabilities, Martin Schulze, 15:17
- [Full-disclosure] [ GLSA 200703-22 ] Mozilla Network Security Service: Remote execution of arbitrary code, Raphael Marichez, 15:17
- Re: Your Opinion +, Thor (Hammer of God), 15:17
- [Full-disclosure] [ GLSA 200703-21 ] PHP: Multiple vulnerabilities, Raphael Marichez, 15:17
- Linksys WAG200G - Information disclosure, dniggebrugge, 15:17
- RE: Your Opinion, jay.tomas, 15:17
- [SECURITY] [DSA 1271-1] New openafs packages fix remote privilege escalation bug, Noah Meyerhans, 15:17
- Helix Server heap overflow, research, 15:17
- RE: Your Opinion, Jim Harrison, 15:17
- Re: Your Opinion, Jack Lloyd, 15:17
- RE: Your Opinion, Jim Harrison, 15:17
- Re: Your Opinion, Paul Stepowski, 15:17
- Re: Conflict of Interest - My summary, crazy frog crazy frog, 15:17
- Re: Your Opinion, Andrew Kramer, 15:17
- Microsoft coverup ? Stolen Xbox live accounts list of known victims - Please Help, Kevin Finisterre (lists), 15:17
- Call For Papers - IT Underground Dublin, marcin . tkaczyk, 15:17
- w-agora [multiples file upload,xss,full path disclosure,error sql], none, 15:17
- Advisory - Redirection Vulnerability in wp-login.php., Metaeye SG, 15:17
- Web Wiz Forums 8.05 (MySQL version) SQL Injection, Ivan Fratric, 15:17
- Re: WebCalendar v0.9.45 (13 Dec 2004) (login.php) Remote File include, craig, 15:17
- Oracle 10g Dynamic Monitoring Services XSS /servlet/Spy, Sea Shark, 15:17
- [Full-disclosure] [USN-437-1] libwpd vulnerability, Kees Cook, 15:17
- [Full-disclosure] ZynOS v3.40 One packet killer, Joxean Koret, 15:17
- Re: CCleaguePro_V1.0.1RC1 Directory Traversal Vulnerability, str0ke, 15:17
- w-agora version 4.2.1 Information Disclosure Vulnerability, jesper . jurcenoks, 15:17
- w-agora version 4.2.1 Multiple Path Disclosure Vulnerabilities, jesper . jurcenoks, 15:16
- [Reversemode Advisory] Microsoft Windows Ndistapi.sys IRQL escalation, Reversemode, 15:16
- Re: Your Opinion +, Alex Belits, 15:16
- Conflict of Interest - My summary, Mark Litchfield, 15:16
- RE: Your Opinion, Alex Eckelberry, 15:16
- Re: Your Opinion, Forrest J. Cavalier III, 15:16
- CCleaguePro_V1.0.1RC1 Directory Traversal Vulnerability, snakeapollon, 15:16
- phpx 3.5.15 multiples vulnerabilities, none, 15:16
- Layered Defense Research Advisory: F-Secure Anti-Virus Client Security 6.02 Format String Vulnerability, dh, 15:16
- RE: Bypassing Mcafee Entreprise Password Protection, Rogheden Anders, 15:16
- Unclassified NewsBoard 1.6.3 multiples logs disclosure, none, 15:16
- MetaForum <= 0.513 Beta - Remote file upload Vulnerability, aeroxteam------nospam-----, 15:16
- Full Disclosure: Arbitrary execution vulnerability in SQL-Ledger and LedgerSMB, Chris Travers, 15:16
- Net Portal Dynamic System (NPDS) <= 5.10 Remote Code Execution 0day, gmdarkfig, 15:16
- [Full-disclosure] [ GLSA 200703-20 ] LSAT: Insecure temporary file creation, Raphael Marichez, 15:16
- [Full-disclosure] [ GLSA 200703-19 ] LTSP: Authentication bypass in included LibVNCServer code, Raphael Marichez, 15:16
- [Full-disclosure] [ GLSA 200703-18 ] Mozilla Thunderbird: Multiple vulnerabilities, Raphael Marichez, 15:16
- [Full-disclosure] [ GLSA 200703-17 ] ulogd: Remote execution of arbitrary code, Raphael Marichez, 15:16
- [SECURITY] [DSA 1268-1] New libwpd packages fix arbitrary code execution, Martin Schulze, 15:16
- Re: Bypassing Mcafee Entreprise Password Protection, 3APA3A, 15:16
- Rhapsody IRC 0.28b (NICK) Multiple fs and bof vulnerability, starcadi, 15:16
- Re: Your Opinion, Casper . Dik, 15:16
- RE: Your Opinion, Jim Harrison, 15:16
- Your Opinion +, Mark Litchfield, 15:16
- Re: Your Opinion, The Fungi, 15:16
- CLBOX <= (signup.php header) Remote File Include Vulnerability, BorN To K!LL BorN To K!LL, 15:16
- [ GLSA 200703-15 ] PostgreSQL: Multiple vulnerabilities, Raphael Marichez, 15:16
- Bypassing Mcafee Entreprise Password Protection, thesinoda, 15:16
- [Full-disclosure] [ GLSA 200703-16 ] Apache JK Tomcat Connector: Remote execution of arbitrary code, Raphael Marichez, 15:16
- [Full-disclosure] [ GLSA 200703-14 ] Asterisk: SIP Denial of Service, Raphael Marichez, 15:16
- [Full-disclosure] Call For Papers - IT Underground Dublin, Marcin Tkaczyk, 15:16
- [NETRAGARD-20070316 SECURITY ADVISORY][FrontBase Database <= 4.2.7 ALL PLATFORMS][REMOTE BUFFER OVERFLOW CONDITION][LEVEL: EASY][RISK:MEDIUM], Netragard Security Advisories, 15:16
- Re: Your Opinion, William A. Rowe, Jr., 15:16
- RE: Your Opinion, Scott Blake, 15:16
- Re: Your Opinion, Neil Dickey, 15:16
- [ MDKSA-2007:064 ] - Updated openoffice.org packages to address libwpd heap overflow vulnerabilities, security, 15:16
- [ MDKSA-2007:063 ] - Updated libwpd packages to address heap overflow vulnerabilities, security, 15:16
- Re: [Bogus] Lazarus Guestbook (admin.php)Remote File Include Expliot, Steven M. Christey, 15:16
- Re: Your Opinion, Crispin Cowan, 15:16
- RE: Your Opinion, Mario Contestabile, 15:16
- Re: Your Opinion, Jonathan Glass (GM), 15:16
- Re: Your Opinion, bugtraq, 15:16
- rPSA-2007-0057-1 libwpd, rPath Update Announcements, 15:16
- rPSA-2007-0056-1 gnupg, rPath Update Announcements, 15:16
- Your Opinion, Mark Litchfield, 15:16
- Particle Blogger All Version Post.PHP (PostID) Remote SQL Injection Exploit, UniquE, 15:16
- iDefense Security Advisory 03.16.07: Multiple Vendor libwpd Multiple Buffer Overflow Vulnerabilities, iDefense Labs, 15:16
- April, 2007 is the "Month of Myspace Bugs", mondo_armando, 15:16
- Call For Papers - IT Underground Dublin, Marcin Tkaczyk, 15:16
- Re: fx-APP Version 0.0.8.1, osdesk, 15:16
- RE: [VulnWatch] iDefense Security Advisory 03.14.07: Trend Micro Antivirus UPX Parsing Kernel Divide by Zero Vulnerability, Topolski, Leo, 15:15
- Rot 13 <= (enkrypt.php) Remote File Disclosure Vulnerability, BorN To K!LL BorN To K!LL, 15:15
- Oracle Portal PORTAL.wwv_main.render_warning_screen XSS, Sea Shark, 15:15
- MS07-012 Not Fixed, Greg Sinclair, 15:15
- [CAID 34817, 35058, 35158, 35159]: CA BrightStor ARCserve Backup Tape Engine and Portmapper Vulnerabilities, Williams, James K, 15:15
- DirectAdmin Cross Site Scripting XSS, Mandr4ke . root, 15:15
- Re[2]: Microsoft Windows Vista/2003/XP/2000 file management security issues, 3APA3A, 15:15
- Re: [Full-disclosure] Woltab Burning Board SQL Injection usergroups.php, Bastian Ahrens, 15:15
- PHP Point Of Sale for osCommerce <= (index.php) Remote File Include Vuln, BorN To K!LL BorN To K!LL, 15:15
- Absolute Image Gallery Gallery.ASP (categoryid) MSSQL Injection Exploit, UniquE, 15:15
- WebCalendar v0.9.45 (13 Dec 2004) (login.php) Remote File include, drackanz, 15:15
- Re: Firekeeper - IDS for Firefox available, Gadi Evron, 15:15
- LIBFtp 5.0 (sprintf(), strcpy()) Multiple local buffer overflow, starcadi starcadi, 15:15
- - Call for chapters - Handbook of Research on Digital Anti-forensics and In-security Governance, Jeimy Cano, 15:15
- QFTP (LIBFtp 3.1-1) (command line) sprintf() local buffer overflow, starcadi starcadi, 15:15
- RE: Phishing using IE7 local resource vulnerability, avivra, 15:15
- Re: XSS vulnerability in the online help system of several Cisco products, Eloy Paris, 15:15
- Re: Phishing using IE7 local resource vulnerability, robert, 15:15
- PHP <= 4.4.6 ibase_connect() local buffer overflow, retrog, 15:15
- Remote File Inclusion in ViperWeb, asamad, 15:15
- Re: Iframe-Cash/Iframe-Dollars Adware bundle...oooh... my ....god.., Nicolas RUFF, 15:15
- XSS vulnerability in the online help system of several Cisco products, cassio, 15:15
- [Full-disclosure] iDefense Security Advisory 03.15.07: Horde Project Cleanup Script Arbitrary File Deletion Vulnerability, iDefense Labs, 15:15
- Norton Insufficient validation of 'SymTDI' driver input buffer, Matousec - Transparent security Research, 15:15
- Orion-Blog v2.0 Version Remote Privilege Escalation Exploit, UniquE, 15:15
- [ECHO_ADV_75$2007] Groupit 2.00b5 (c_basepath) Remote File Inclusion Vulnerability, erdc, 15:15
- IBM Rational ClearQuest Web - Cross Site Scripting, james, 15:15
- [ECHO_ADV_76$2007] Company WebSite Builder PRO (INCLUDE_PATH) Remote File Inclusion Vulnerability, erdc, 15:15
- [Full-disclosure] Horde 3.1.4 (RC1) fixes XSS issue, Moritz Naumann, 15:14
- [Full-disclosure] Horde IMP Webmail Client version H3 (4.1.4) fixes multiple XSS issues, Moritz Naumann, 15:14
- Woltab Burning Board SQL Injection usergroups.php, x666, 15:14
- [ GLSA 200703-13 ] SSH Communications Security's Secure Shell Server: SFTP privilege escalation, Raphael Marichez, 15:14
- Re: [Full-disclosure] Phishing using IE7 local resource vulnerability, pdp (architect), 15:14
- Re: [Full-disclosure] Php Nuke POST XSS on steroids, Paul Laudanski, 15:14
- [Full-disclosure] Phishing using IE7 local resource vulnerability, avivra, 15:14
- Re: Remote File Include In Script PHP Photo Album, Steven M. Christey, 15:14
- WSN Guest 1.21 Version Comments.PHP "ID" SQL Injection Exploit, UniquE, 15:14
- [ECHO_ADV_74$2007] WebCreator <= 0.2.6-rc3 (moddir) Remote File Inclusion Vulnerability, erdc, 15:14
- [ECHO_ADV_72$2007] CARE2X (root_path) Remote File Inclusion Vulnerability, erdc, 15:14
- [ECHO_ADV_71$2007] AMP v3.2 (base_path) Remote File Inclusion Vulnerability, erdc, 15:14
- iDefense Security Advisory 03.14.07: Trend Micro Antivirus UPX Parsing Kernel Divide by Zero Vulnerability, iDefense Labs, 15:14
- Re: Re: [Full-disclosure] PHP import_request_variables() arbitrary variable overwrite, retrog, 15:14
- Re[2]: Microsoft Windows Vista/2003/XP/2000 file management security issues, 3APA3A, 15:14
- Fwd: Python 2.5 (Modules/zlib) minigzip local buffer overflow vulnerability, starcadi starcadi, 15:14
- New report on Windows Vista network attack surface, Jim Hoagland, 15:14
- SymEvent Driver Local Access System Denial of Service, Matousec - Transparent security Research, 15:14
- [SECURITY] [DSA 1266-1] New gnupg packages fix signature forgery, Moritz Muehlenhoff, 15:14
- n.runs-SA-2007.005 - PHProjekt 5.2.0 - Cross Site Request Forgery, security, 15:14
- [Full-disclosure] [ GLSA 200703-12 ] SILC Server: Denial of Service, Matthias Geerdsen, 15:14
- [Full-disclosure] SEC Consult SA-20070314-0 :: Apache HTTP Server / Tomcat directory traversal, David Matscheko, 15:14
- [Full-disclosure] n.runs-SA-2007.003 - PHProjekt 5.2.0 - SQL Injection, security, 15:14
- [Full-disclosure] n.runs-SA-2007.006 - PHProjekt 5.2.0 - Privilege escalation, security, 15:14
- [Full-disclosure] n.runs-SA-2007.004 - PHProjekt 5.2.0 - Cross Site Scripting and Filter Evasion, security, 15:14
- Re: [Full-disclosure] Php Nuke POST XSS on steroids, Paul Laudanski, 15:14
- [Full-disclosure] [ GLSA 200703-11 ] Amarok: User-assisted remote execution of arbitrary code, Raphael Marichez, 15:14
- CORE-2007-0219: OpenBSD's IPv6 mbufs remote kernel buffer overflow, CORE Security Technologies Advisories, 15:13
- Re: Microsoft Windows Vista/2003/XP/2000 file management security issues, Paweł Goleń, 15:13
- [ MDKSA-2007:062 ] - Updated xine-lib packages to address buffer overflow vulnerability, security, 15:13
- Re: Firekeeper - IDS for Firefox available, Bob Beck, 15:13
- [ MDKSA-2007:061 ] - Updated mplayer packages to address buffer overflow vulnerability, security, 15:13
- Re: Re: RIM BlackBerry Pearl 8100 Browser DoS, clappymonkey, 15:13
- Re: Weekly Drawing Contest <= (check_vote.php) Remote File Disclosure Vuln, Mailinglists Address, 15:13
- JGBBS 3.0beta1 Version Search.ASP "Author" SQL Injection Exploit, UniquE, 15:13
- [Full-disclosure] vbulletin admincp sql injection, disfigure, 15:13
- Re: Microsoft Windows Vista/2003/XP/2000 file management security issues, Daniel Hazelton, 15:13
- Re: Firekeeper - IDS for Firefox available, Jan Wrobel, 15:13
- Re: Microsoft Windows Vista/2003/XP/2000 file management security issues, Richard Huxton, 15:13
- Re: Iframe-Cash/Iframe-Dollars Adware bundle...oooh... my ....god.., Reversemode, 15:13
- Re: Iframe-Cash/Iframe-Dollars Adware bundle...oooh... my ....god.., Gadi Evron, 15:13
- [ECHO_ADV_73$2007] MySQL Commander <= 2.7 (home) Remote File Inclusion Vulnerability, erdc, 15:13
- Weekly Drawing Contest <= (check_vote.php) Remote File Disclosure Vuln, BorN To K!LL BorN To K!LL, 15:13
- Re[2]: Microsoft Windows Vista/2003/XP/2000 file management security issues, 3APA3A, 15:13
- Re: Remote File Include In Script moodle-1.7.1, martin, 15:13
- Re: Re: Firekeeper - IDS for Firefox available, irondell, 15:13
- Call for Papers: DeepSec IDSC 2007 Europe/Vienna: 20-23 Nov 2007, Paul Böhm, 15:13
- Iframe-Cash/Iframe-Dollars Adware bundle...oooh... my ....god.., Thierry Zoller, 15:13
- RE: Xbox 360 Hypervisor Privilege Escalation Vulnerability, Dr Joe, 15:13
- [ECHO_ADV_69$2007] OES (Open Educational System) 0.1beta Remote File Inclusion Vulnerability, erdc, 15:13
- Re: Firekeeper - IDS for Firefox available, Jan Wrobel, 15:13
- [Full-disclosure] [USN-432-2] GnuPG2, GPGME vulnerability, Kees Cook, 15:13
- Re: RIM BlackBerry Pearl 8100 Browser DoS, anon, 15:13
- Re: Microsoft Windows Vista/2003/XP/2000 file management security issues, Steven M. Christey, 15:13
- Re: SecurityFocus is turning seven. What's next? - OFFTOPIC - Please excuse the X-Post, crazy frog crazy frog, 15:13
- [Full-disclosure] XSS at Aon.at, Austrian ISP, Florian Stinglmayr, 15:12
- [Full-disclosure] [USN-436-1] KTorrent vulnerabilities, Kees Cook, 15:12
- [Full-disclosure] [USN-435-1] Xine vulnerability, Kees Cook, 15:12
- Re: [Full-disclosure] PHP import_request_variables() arbitrary variable overwrite, Steven M. Christey, 15:12
- [security bulletin] HPSBUX02196 SSRT071318 rev.2 - HP-UX Java (JRE and JDK) Remote Execution of Arbitrary Code, security-alert, 15:12
- [Full-disclosure] XSS on eplus.de, german mobile telephony provider, Hanno BÃck, 15:12
- Re: PHP-Nuke <= 8.0 Cookie Manipulation (lang), Paul Laudanski, 15:12
- RIM BlackBerry Pearl 8100 Browser DoS, clappymonkey, 15:12
- GuppY v4.0 remote del files/index, sn0oPy . team, 15:12
- Re: Wiki Remote Authentication Bypass Vulnerability, Matt D. Harris, 15:12
- Fantastico In all Version Cpanel 10.x <= local File Include, z3r0 z3r0.2.z3r0, 15:12
- AssetMan 2.4a <= (download_pdf.php) Remote File Disclosure Vulnerability, BorN To K!LL BorN To K!LL, 15:12
- Wiki Remote Authentication Bypass Vulnerability, DoZ, 15:12
- [security bulletin] HPSBUX02129 SSRT061149 rev.2 - HP-UX running SLP, Remote Unauthorized Access, security-alert, 15:12
- Remote File Include In ClipShare.v1.5.3, RaeD Hasadya, 15:12
- Remote File Include In Script moodle-1.7.1, RaeD Hasadya, 15:12
- Re: Re[2]: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues, Thor (Hammer of God), 15:12
- Remote File Include In Script PHP Photo Album, RaeD Hasadya, 15:12
- [Full-disclosure] TinyMCE_exp Remote File Include Vulnerability, 0o_zeus_o0 elitemexico.org, 15:12
- Re: [Full-disclosure] Php Nuke POST XSS on steroids, Paul Laudanski, 15:12
- Re: [Full-disclosure] Php Nuke POST XSS on steroids, ascii, 15:12
- [Full-disclosure] Firefox: about:blank is phisher's best friend, Michal Zalewski, 15:12
- Re: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues, 3APA3A, 15:12
- [SECURITY] [DSA 1265-1] New Mozilla packages fix several vulnerabilities, Martin Schulze, 15:12
- Re: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues, Roger A. Grimes, 15:12
- Re: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues, Thor (Hammer of God), 15:12
- Re: [Full-disclosure] PHP import_request_variables() arbitrary variable overwrite, Stefano Di Paola, 15:12
- Re: Firekeeper - IDS for Firefox available, Bob Beck, 15:12
- [ GLSA 200703-10 ] KHTML: Cross-site scripting (XSS) vulnerability, Raphael Marichez, 15:12
- Re: [Full-disclosure] PHP import_request_variables() arbitrary variable overwrite, Stefan Esser, 15:12
- Re: PHP Classifieds 7.1 - Remote File Include Vulnerability, support, 15:12
- NukeSentinel <= 2.5.06 SQL Injection (mysql >= 4.0.24) Exploit, gmdarkfig, 15:12
- [ECHO_ADV_68$2007] PMB Services <= 3.0.13 Multiple Remote File Inclusion Vulnerability, erdc, 15:12