Bugtraq (thread)

[Full-disclosure] rPSA-2007-0112-1 firefox thunderbird, rPath Update Announcements, 2007/05/31
Re: Progress Webspeed exploit for all releases, sauge, 2007/05/31
[Full-disclosure] [USN-467-1] Gimp vulnerability, Kees Cook, 2007/05/31
[Full-disclosure] FLEA-2007-0023-1: firefox, Foresight Linux Essential Announcement Service, 2007/05/31
PHP JackKnife [multiple vulnerabilities], laurent . gaffie, 2007/05/31
[Full-disclosure] [ GLSA 200705-25 ] file: Integer overflow, Raphael Marichez, 2007/05/31
[Full-disclosure] [ GLSA 200705-24 ] libpng: Denial of Service, Raphael Marichez, 2007/05/31
[Full-disclosure] [ GLSA 200705-23 ] Sun JDK/JRE: Multiple vulnerabilities, Raphael Marichez, 2007/05/31
GNU Findutils release 4.2.31 fixes CVE-2007-2452 (GNU locate heap buffer overrun), James Youngman, 2007/05/31
MyBloggie 2.1.6 SQL Injection, ls, 2007/05/31
[Full-disclosure] [USN-466-1] freetype vulnerability, Kees Cook, 2007/05/30
[Full-disclosure] n.runs-SA-2007.012 - Avira Antivir Antivirus TAR Denial of Service, security, 2007/05/30
[tool] Etherbat - Ethernet topology discovery, bugtraq, 2007/05/30
[Full-disclosure] [ GLSA 200705-22 ] FreeType: Buffer overflow, Raphael Marichez, 2007/05/30
[Full-disclosure] [ GLSA 200705-21 ] MPlayer: Two buffer overflows, Raphael Marichez, 2007/05/30
Practicle Gallery 1.0.1 XSS, ls, 2007/05/30
Particle Blogger 1.2.1 SQL Injection, ls, 2007/05/30
Full Path Disclosure in Almnzm, xx_hack_xx_2004, 2007/05/29
cpcommerce < v1.1.0 [sql injection], laurent . gaffie, 2007/05/29
[security bulletin] HPSBUX02087 SSRT4728 rev.5 - HP-UX running TCP/IP Remote Denial of Service (DoS), security-alert, 2007/05/29
Apache httpd vulenrabilities, Blazej Miga, 2007/05/29
RedLevel Advisory #23 - SalesCart Shopping Cart SQL Injection Vulnerability, john, 2007/05/29
[MajorSecurity Advisory #48]eggblog - Session fixation Issue, admin, 2007/05/29
Mac OS X vpnd local format string, NGSSoftware Insight Security Research, 2007/05/29
- Re: Mac OS X vpnd local format string, lists, 2007/05/29
[Full-disclosure] n.runs-SA-2007.011 - Avira Antivir Antivirus UPX parsing Divide by Zero Advisory, security, 2007/05/29
[Full-disclosure] Uebimiau Webmail Multiple Vulnerabilities, Michal Majchrowicz, 2007/05/28
DGNews version 2.1 XSS Attack Vulnerability, securityresearch, 2007/05/28
Re: fx-APP Version 0.0.8.1, chiweeman, 2007/05/28
myEvent version 1.6 Multiple Path Disclosure Vulnerabilities, securityresearch, 2007/05/28
DGNews version 2.1 SQL Injection Vulnerability, securityresearch, 2007/05/28
- Re: DGNews version 2.1 SQL Injection Vulnerability, laurent . gaffie, 2007/05/29
DGNews version 2.1 Path Disclosure Vulnerability, securityresearch, 2007/05/28
RFI In Script FlashChat_v479, Raed, 2007/05/28
- Re: RFI In Script FlashChat_v479, the . tiger100, 2007/05/28
- Re: RFI In Script FlashChat_v479, mailbox@martinelli.com, 2007/05/30
Inout Meta Searh engine Remote Code Execution, BlackHawk, 2007/05/28
[Full-disclosure] n.runs-SA-2007.010 - Avira Antivir Antivirus LZH parsing Arbitrary Code Execution Advisory, security, 2007/05/28
[Full-disclosure] phpPgAdmin Multiple XSS Vulnerabilities, Michal Majchrowicz, 2007/05/27
RMForum Database Disclosure Vulnerabilitiy, the_3dit0r, 2007/05/26
[Full-disclosure] [ GLSA 200705-20 ] Blackdown Java: Applet privilege escalation, Raphael Marichez, 2007/05/26
[Full-disclosure] [ GLSA 200705-19 ] PHP: Multiple vulnerabilities, Raphael Marichez, 2007/05/26
Zindizayn Okul Web Sistemi v1.0 Sql VulnZ., g0rk3m-31, 2007/05/26
[Full-disclosure] [USN-465-1] PulseAudio vulnerability, Kees Cook, 2007/05/25
webCMS_1.00 Database Disclosure Vulnerabilitiy, the_3dit0r, 2007/05/25
rtpBreak - detects, reconstructs and analyzes any RTP session, michele dallachiesa, 2007/05/25
[Full-disclosure] iDefense Security Advisory 05.25.07: Sun Java System Web Proxy Multiple Buffer Overflow Vulnerabilities, iDefense Labs, 2007/05/25
TSLSA-2007-0019 - multi, Trustix Security Advisor, 2007/05/25
Vulnerability - cpCommerce - XSS, jadoba, 2007/05/25
Web Directory / Search Engine v2.0 Authentication Bypass/Database Download Vulne, pito pito, 2007/05/25
IE 6 / Dart Communications PowerTCP ZIP Compression Control (DartZip.dll 1.8.5.3) remote buffer overflow, retrog, 2007/05/25
BoastMachine index.php Cross Site Scripting Vulnerability, newbinaryfile, 2007/05/25
GTP 3G © Gnuturk Portal System year=**&month= Cross-Site Scripting Vulnerability, vagrant - e-hack.org, 2007/05/25
Pligg critical vulnerability, 242th section, 2007/05/25
- Re: Pligg critical vulnerability, crazy frog crazy frog, 2007/05/26
Multiple XSS in Digirez, xx_hack_xx_2004, 2007/05/25
[Full-disclosure] n.runs-SA-2007.009 - Avast! Antivirus SIS parsing Arbitrary Code Execution Advisory, security, 2007/05/25
[Full-disclosure] [USN-464-1] Linux kernel vulnerabilities, Kees Cook, 2007/05/24
rPSA-2007-0109-1 file, rPath Update Announcements, 2007/05/24
[Full-disclosure] iDefense Security Advisory 05.24.07: Apple Computer Mac OS X pppd Plugin Loading Privilege Escalation Vulnerability, iDefense Labs, 2007/05/24
[Full-disclosure] FLEA-2007-0022-1: file, Foresight Linux Essential Announcement Service, 2007/05/24
[Full-disclosure] FLEA-2007-0021-1: madwifi, Foresight Linux Essential Announcement Service, 2007/05/24
Dart Communications PowerTCP Service Control (DartService.dll 3.1.3.3) remote buffer overflow, retrog, 2007/05/24
WIYS v1.0 Cross-Site Scripting Vulnerability - (05.24.2007) (NEW), vagrant - e-hack.org, 2007/05/24
Vulnerability in Credant Mobile Guardian Shield for Windows, myucebox, 2007/05/24
[ MDKSA-2007:104-1 ] - Updated samba packages fix multiple vulnerabilities, security, 2007/05/24
[ MDKSA-2007:109 ] - Updated tetex packages fix vulnerabilities, security, 2007/05/24
[Full-disclosure] n.runs-SA-2007.008 - Avast! Antivirus CAB parsing Arbitrary Code Execution Advisory, security, 2007/05/24
[Full-disclosure] rPSA-2007-0108-1 freetype, rPath Update Announcements, 2007/05/24
[Full-disclosure] FLEA-2007-0020-1: freetype, Foresight Linux Essential Announcement Service, 2007/05/23
rPSA-2007-0107-1 mysql mysql-bench mysql-server, rPath Update Announcements, 2007/05/23
[Full-disclosure] iDefense Security Advisory 05.23.07: Opera Software Opera Web Browser Transfer Item Pop-up Menu Stack Overflow Vulnerability, iDefense Labs, 2007/05/23
FreeBSD Security Advisory FreeBSD-SA-07:04.file, FreeBSD Security Advisories, 2007/05/23
[waraxe-2007-SA#051] - Sql Injection in 2z Project 0.9.5, come2waraxe, 2007/05/23
Q1 2007 Application Security Trends Report (Corrected Link), Tom Stracener, 2007/05/23
Secunia Research: eScan Products Agent Service Command Decryption Buffer Overflow, Secunia Research, 2007/05/23
[ MDKSA-2007:108 ] - Updated gimp packages fix stack overflow in sunras plugin, security, 2007/05/23
[Full-disclosure] Cisco CallManager 4.1 Input Validation Vulnerability, Stefan Friedli, 2007/05/23
- RE: Cisco CallManager 4.1 Input Validation Vulnerability, Mark-David McLaughlin (marmclau), 2007/05/23
Re: [Full-disclosure] Question Regarding IIS 6.0 / Is this a DoS???, 3APA3A, 2007/05/23
- Re: [Full-disclosure] Question Regarding IIS 6.0 / Is this a DoS???, kingcope, 2007/05/23
  - Re: [Full-disclosure] Question Regarding IIS 6.0 / Is this a DoS???, Michael Silk, 2007/05/23
    - Re: [Full-disclosure] Question Regarding IIS 6.0 / Is this a DoS???, Richard Moore, 2007/05/23
  - Re: [Full-disclosure] Question Regarding IIS 6.0 / Is this a DoS???, 3APA3A, 2007/05/23
- RE: [Full-disclosure] Question Regarding IIS 6.0 / Is this a DoS???, kingcope, 2007/05/23
[Full-disclosure] [USN-463-1] vim vulnerability, Kees Cook, 2007/05/22
ABC Excel Parser Pro v4.0 Remote File Include Exploit, the_3dit0r, 2007/05/22
NOD32 Antivirus Long Path Name Stack Overflow Vulnerabilities, Ismael Briones, 2007/05/22
- Re: NOD32 Antivirus Long Path Name Stack Overflow Vulnerabilities, v9, 2007/05/23
  - Re: NOD32 Antivirus Long Path Name Stack Overflow Vulnerabilities, Ismael Briones, 2007/05/24
BoastMachine v3.0 platinum - Session İd Hacking, vagrant Pest, 2007/05/22
Magic iso heap over flow <Help>, KaCo678, 2007/05/22
- Re: Magic iso heap over flow <Help>, v9, 2007/05/23
- Re: Magic iso heap over flow <Help>, c0ntexb, 2007/05/23
[Full-disclosure] [USN-462-1] PHP vulnerabilities, Kees Cook, 2007/05/22
RedLevel Advisory #021 - CubeCart v3.0.16 SQL Injection Vulnerability, john, 2007/05/22
[Full-disclosure] phpPgAdmin XSS Vulnerability, Michal Majchrowicz, 2007/05/22
phpPgAdmin-4.1.1 Remote File Include & Url Redirecting Vulnerabilitiy, the_3dit0r, 2007/05/22
RedLevel Advisory #020 - HLstats v1.35 Cross-Site Scripting Vulnerability #3, john, 2007/05/22
FINAL Call For Papers: Chaos Communication Camp 2007, Berlin, Paul Böhm, 2007/05/22
RedLevel Advisory #018 - RM EasyMail Plus - Cross-Site Scripting Vulnerability #2, john, 2007/05/22
[Call for Participation] DIMVA 2007, Robin Sommer, 2007/05/22
[USN-460-2] Samba regression, Kees Cook, 2007/05/22
Q1 2007 Application Security Trends Report, Tom Stracener, 2007/05/22
[security bulletin] HPSBUX02217 SSRT071337 rev.1 - HP-UX running Kerberos, Remote Arbitrary Code Execution, security-alert, 2007/05/22
GMTT Music Distro 1.2 XSS Exploit, corrado . liotta, 2007/05/22
Jetbox CMS version 2.1 Multiple Path Disclosure Vulnerabilities, securityresearch, 2007/05/22
RedLevel Advisory #017 - PsychoStats v3.0.6b Multiple Cross-Site Scripting Vulnerabilities, john, 2007/05/22
[waraxe-2007-SA#050] - Sql Injection in WordPress 2.1.3, come2waraxe, 2007/05/22
Oracle Forensics Part 4: Live Response, David Litchfield, 2007/05/22
Security Videos, thejus_mb, 2007/05/22
Jetbox CMS version 2.1 XSS Attack Vulnerability, securityresearch, 2007/05/22
RedLevel Advisory #022 - ClonusWiki .5 Cross-Site Scripting Vulnerability, john, 2007/05/22
[ISecAuditors Security Advisories] Microsoft IIS5 NTLM and Basic authentication bypass, ISecAuditors Security Advisories, 2007/05/22
Remedy for: Remot File Include In phpexplorator_2_0, tchouamou, 2007/05/22
Re: Re: [Bogus] Lazarus Guestbook (admin.php)Remote File Include Expliot -, webmaster, 2007/05/22
Jetbox CMS version 2.1 Multiple SQL Injection Vulnerabilities, securityresearch, 2007/05/22
- RE: DDOS abuse contacts, test, 2007/05/22
Simple Accessible XHTML Online News v4.6 Remote File Include Exploit, the_3dit0r, 2007/05/22
SimpGB v1.46.0 Remote File Include Exploit, the_3dit0r, 2007/05/22
[ MDKSA-2007:107 ] - Updated evolution packages fix APOP weakness, security, 2007/05/22
[Full-disclosure] [USN-459-2] pptpd regression, Kees Cook, 2007/05/21
[Full-disclosure] FLEA-2007-0019-1: python, Foresight Linux Essential Announcement Service, 2007/05/21
[Full-disclosure] POC CODE - TI89 Titanium Resident EPO Calculator Virus (T89.GAARA), Piotr Bania, 2007/05/21
Remider: VNSECON 07 Call for Papers ends on June 08, rd, 2007/05/21
[Full-disclosure] SQL-Injection in IP-TRACKING Mod for phpBB2.0.x, Cornelius Riemenschneider, 2007/05/20
[Full-disclosure] [ GLSA 200705-18 ] PPTPD: Denial of Service attack, Sune Kloppenborg Jeppesen, 2007/05/20
[ MDKSA-2007:106 ] - Updated squirrelmailpackages fix vulnerabilities, security, 2007/05/19
RedLevel Advisory #016 - HLstats v1.35 Cross-Site Scripting Vulnerability, john, 2007/05/19
RedLevel Advisory #017 - HLstats v1.35 Cross-Site Scripting Vulnerability #2, john, 2007/05/19
[CVE-2007-1355] Tomcat documentation XSS vulnerabilities, Mark Thomas, 2007/05/19
NASA Site Bug ( Check URI Input ), matrix, 2007/05/19
[USN-436-2] KTorrent vulnerability, Kees Cook, 2007/05/18
[Full-disclosure] VMSA-2007-0004.1 Updated: Multiple Denial-of-Service issues fixed and directory traversal vulnerability, VMware Security team, 2007/05/18
REWTERZ-20070518 - Authentication Bypass in Rational Soft's Hidden Administrator, rewterz security team, 2007/05/18
ACROS Security: Session Fixation Vulnerability in HP SIM 5.0, ACROS Security, 2007/05/18
Predictable TCP ISN in Packeteer PacketShaper, nnposter, 2007/05/18
eSyndiCat Input Validation Error Vulnerability, hack2prison, 2007/05/18
[Full-disclosure] rPSA-2007-0104-1 idle python, rPath Update Announcements, 2007/05/18
[Full-disclosure] [USN-461-1] Quagga vulnerability, Kees Cook, 2007/05/17
[Full-disclosure] FLEA-2007-0018-1: libpng, Foresight Linux Essential Announcement Service, 2007/05/17
[ MDKSA-2007:105 ] - Updated fetchmail packages fix potential APOP vulnerabilities, security, 2007/05/17
RedLevel Advisory #015 - Redoable 1.2 Cross-Site Scripting Vulnerability (patch included), john, 2007/05/17
[OpenPKG-SA-2007.013] OpenPKG Security Advisory (png), OpenPKG GmbH, 2007/05/17
[security bulletin] HPSBST02214 SSRT071422 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS07-023 to MS07-029, security-alert, 2007/05/17
[OpenPKG-SA-2007.012] OpenPKG Security Advisory (samba), OpenPKG GmbH, 2007/05/17
[security bulletin] HPSBMA02213 SSRT061214 rev.1 - HP Systems Insight Manager (SIM) for Windows, Remote Privileged Access and Arbitrary Code Execution, security-alert, 2007/05/17
[security bulletin] HPSBTU02209 SSRT071323 rev.1 - HP Tru64 UNIX Running Secure Shell (SSH), Remote Unauthorized Identification of Valid Users, security-alert, 2007/05/17
TSLSA-2007-0017 - multi, Trustix Security Advisor, 2007/05/17
VP-ASP Shopping Cart 6.50 - Cross-Site Scripting Vulnerability, john, 2007/05/17
XSS vulnerability on various german online banking sites (sparkasse), Ulrich Keil, 2007/05/17
- Re: XSS vulnerability on various german online banking sites (sparkasse) - CORRECTION, Ulrich Keil, 2007/05/18
[Full-disclosure] [ GLSA 200705-17 ] Apache mod_security: Rule bypass, Raphael Marichez, 2007/05/17
[Full-disclosure] [ GLSA 200705-16 ] PhpWiki: Remote execution of arbitrary code, Raphael Marichez, 2007/05/17
[Full-disclosure] Oracle Forensics Part 4: Live Response, David Litchfield, 2007/05/17
[Full-disclosure] XCon2007 Call For Paper, XFOCUS Security Team, 2007/05/17
[Full-disclosure] rPSA-2007-0102-1 libpng, rPath Update Announcements, 2007/05/17
CA BrightStor ARCserve Backup Mediasvr.exe and caloggerd.exe Vulnerabilities, Williams, James K, 2007/05/16
Symantec Product Security: Norton Personal Firewall 2004 ActiveX Control vulnerability, secure, 2007/05/16
ANNOUNCE: RFIDIOt version 0.1m released (May 16th 2007), Adam Laurie, 2007/05/16
vbulletin < 3.6.6 [permanent xss], laurent . gaffie, 2007/05/16
I, Bot. Taking advantage of robots power (Article), crossbower, 2007/05/16
[Full-disclosure] [USN-460-1] Samba vulnerabilities, Kees Cook, 2007/05/16
[Full-disclosure] ZDI-07-033: Samba lsa_io_trans_names Heap Overflow Vulnerability, zdi-disclosures, 2007/05/15
[Full-disclosure] ZDI-07-032: Samba sec_io_acl Heap Overflow Vulnerability, zdi-disclosures, 2007/05/15
[Full-disclosure] ZDI-07-031: Samba smb_io_notify_option_type_data Heap Overflow Vulnerability, zdi-disclosures, 2007/05/15
[Full-disclosure] ZDI-07-030: Samba netdfs_io_dfs_EnumInfo_d Heap Overflow Vulnerability, zdi-disclosures, 2007/05/15
[Full-disclosure] ZDI-07-029: Samba lsa_io_privilege_set Heap Overflow Vulnerability, zdi-disclosures, 2007/05/15
[Full-disclosure] FLEA-2007-0017-1: samba, Foresight Linux Essential Announcement Service, 2007/05/15
[SECURITY] [DSA 1291-1] New samba packages fix multiple vulnerabilities, Noah Meyerhans, 2007/05/15
Jetbox CMS version 2.1 E-Mail Injection Vulnerability, securityresearch, 2007/05/15
- Re: Jetbox CMS version 2.1 E-Mail Injection Vulnerability, laurent . gaffie, 2007/05/15
[Full-disclosure] Retrieving "deleted" sms/mms from Nokia phone (Symbian S60), Davide Del Vecchio, 2007/05/15
- Re: [Full-disclosure] Retrieving "deleted" sms/mms from Nokia phone (Symbian S60), Aaron Lafferty, 2007/05/15
- Re: [Full-disclosure] Retrieving "deleted" sms/mms from Nokia phone (Symbian S60), Robert McArdle, 2007/05/16
- RE: Retrieving "deleted" sms/mms from Nokia phone (Symbian S60), Zhihao, 2007/05/16
- Re: [Full-disclosure] Retrieving "deleted" sms/mms from Nokia phone (Symbian S60), 3APA3A, 2007/05/16
  - Re[2]: Retrieving "deleted" sms/mms from Nokia phone (Symbian S60), Matthew Leeds, 2007/05/16
  - Re: [Full-disclosure] Retrieving "deleted" sms/mms from Nokia phone (Symbian S60), Davide Del Vecchio, 2007/05/16
    - Re: [Full-disclosure] Retrieving "deleted" sms/mms from Nokia phone (Symbian S60), Randy Wyatt, 2007/05/17
- Re: [Full-disclosure] Retrieving "deleted" sms/mms from Nokia phone (Symbian S60), Eduardo Tongson, 2007/05/21
- Re: [Full-disclosure] Retrieving "deleted" sms/mms from Nokia phone (Symbian S60), diabol the japanophile, 2007/05/25
- Re: Retrieving "deleted" sms/mms from Nokia phone (Symbian S60), diabol the japanophile, 2007/05/25
- Re: [Full-disclosure] Retrieving "deleted" sms/mms from Nokia phone (Symbian S60), mailbox@martinelli.com, 2007/05/17
Bypassing PFW/HIPS open process control with uncommon identifier, Matousec - Transparent security Research, 2007/05/15
[ MDKSA-2007:104 ] - Updated samba packages fix multiple vulnerabilities, security, 2007/05/15
GS07-01 Full-Width and Half-Width Unicode Encoding IDS/IPS/WAF Bypass Vulnerability, Fatih Ozavci, 2007/05/15
Media Player Classic .MPA Div-By-Zero Denial of Service Vulnerability, Michal Bucko (hackpl), 2007/05/15
- Re: Media Player Classic .MPA Div-By-Zero Denial of Service Vulnerability, 3APA3A, 2007/05/16
  - Re: Media Player Classic .MPA Div-By-Zero Denial of Service Vulnerability, Michal Bucko (hackpl), 2007/05/16
ImI image file inclusion in script upload, spriteversus, 2007/05/15
[Full-disclosure] [ GLSA 200705-15 ] Samba: Multiple vulnerabilities, Sune Kloppenborg Jeppesen, 2007/05/15
[Full-disclosure] rPSA-2007-0098-1 samba samba-swat, rPath Update Announcements, 2007/05/15
[Full-disclosure] [USN-459-1] pptpd vulnerability, Kees Cook, 2007/05/14
Apple Safari on MacOSX may reveal user's saved passwords, poplix, 2007/05/14
- RE: Apple Safari on MacOSX may reveal user's saved passwords, Lucas, Mark J., 2007/05/14
  - Re: Apple Safari on MacOSX may reveal user's saved passwords, stephen joseph butler, 2007/05/16
- RE: Apple Safari on MacOSX may reveal user's saved passwords, mailbox@martinelli.com, 2007/05/14
  - RE: Apple Safari on MacOSX may reveal user's saved passwords, samelinux, 2007/05/15
- Re: RE: Apple Safari on MacOSX may reveal user's saved passwords, poplix, 2007/05/15
  - Re: Apple Safari on MacOSX may reveal user's saved passwords, David Cantrell, 2007/05/16
    - Re: Apple Safari on MacOSX may reveal user's saved passwords, graham . coles, 2007/05/16
    - Re: Apple Safari on MacOSX may reveal user's saved passwords, Ian Ward Comfort, 2007/05/16
    - Re: Apple Safari on MacOSX may reveal user's saved passwords, David Cantrell, 2007/05/17
    - Re: Apple Safari on MacOSX may reveal user's saved passwords, graham . coles, 2007/05/17
    - Re: Apple Safari on MacOSX may reveal user's saved passwords, poplix, 2007/05/18
    - Re: Apple Safari on MacOSX may reveal user's saved passwords, Kevin Finisterre (lists), 2007/05/18
    - Re: Apple Safari on MacOSX may reveal user's saved passwords, poplix, 2007/05/19
    - Re: Apple Safari on MacOSX may reveal user's saved passwords, Mark Senior, 2007/05/17
- RE: Apple Safari on MacOSX may reveal user's saved passwords, poplix, 2007/05/16
IMF 2007 - Deadline Extension, Oliver Goebel, 2007/05/14
[Full-disclosure] iDefense Security Advisory 05.14.07: Samba SAMR Change Password Remote Command Injection Vulnerability, iDefense Labs, 2007/05/14
Windows Vista: Non-privileged code can redirect shortcuts to intercept privilege elevation requests, robpaveza, 2007/05/14
[security bulletin] HPSBGN02189 SSRT071297 rev.3 - ServiceGuard for Linux, Remote Unauthorized Access, security-alert, 2007/05/14
[SAMBA-SECURITY] CVE-2007-2447: Remote Command Injection Vulnerability, Gerald (Jerry) Carter, 2007/05/14
SonicBB version 1.0 Multiple SQL Injection Vulnerabilities, securityresearch, 2007/05/14
[SAMBA-SECURITY] CVE-2007-2444: Local SID/Name Translation Failure Can Result in User Privilege Elevation, Gerald (Jerry) Carter, 2007/05/14
MyBB version 1.2.4 Multiple Path Disclosure Vulnerabilities, securityresearch, 2007/05/14
ifdate 2.* unauthorized administrative access bug, expw0rm, 2007/05/14
[SAMBA-SECURITY] CVE-2007-2446: Multiple Heap Overflows Allow Remote Code Execution, Gerald (Jerry) Carter, 2007/05/14
[security bulletin] HPSBMI02210 SSRT071396 rev.2 - ProCurve Series 9300m Switches, Remote Denial of Service (DoS), security-alert, 2007/05/14
SonicBB version 1.0 Multiple Path Disclosure Vulnerabilities, securityresearch, 2007/05/14
Uninformed Journal Release Announcement: Volume 7, sflist, 2007/05/14
SonicBB version 1.0 XSS Attack Vulnerabilities, securityresearch, 2007/05/14
Exim 4.66 in conjunction with spamd Overflow issues, calcite, 2007/05/14
- Re: Exim 4.66 in conjunction with spamd Overflow issues, 3APA3A, 2007/05/15
notepad++[v4.1]: (win32) ruby file processing buffer overflow exploit., v9, 2007/05/14
- Re: notepad++[v4.1]: (win32) ruby file processing buffer overflow exploit., kimhm682000, 2007/05/22
  - Re: notepad++[v4.1]: (win32) ruby file processing buffer overflow exploit., Jerome Athias, 2007/05/23
[Full-disclosure] Thierry@Zoller.lu, winsoc winsoc, 2007/05/14
[Full-disclosure] BTCrack 1.1 Heisec Release, Thierry Zoller, 2007/05/13
[Full-disclosure] [ GLSA 200705-14 ] XScreenSaver: Privilege escalation, Raphael Marichez, 2007/05/13
Re: [Full-disclosure] Broadband routers and botnets - being proactive, Gadi Evron, 2007/05/12
Webspeed OpenEdge Dos exploit, bendeniz_avci, 2007/05/12
[vuln.sg] yEnc32 Decoder Long Filename Buffer Overflow Vulnerability, vulnpost-remove, 2007/05/12
[Full-disclosure] Broadband routers and botnets - being proactive, Gadi Evron, 2007/05/11
Design Flaw in Deutsche Telekom Speedport w700v broadband router, Michael Domberg, 2007/05/11
Cross-Site Scripting in Adobe RoboHelp 6, Server 6 and X5, Michael Domberg, 2007/05/11
W1L3D4 Philboard v0.2 sql injection, ALEMIN KRALI, 2007/05/11
Multiple Denial of Service attacks possible for Webspeed OpenEdge, suresync, 2007/05/11
[CAID 35330, 35331]: CA Anti-Virus, CA Threat Manager, and CA Anti-Spyware Console Login and File Mapping Vulnerabilities, Williams, James K, 2007/05/11
rPSA-2007-0096-1 shadow, rPath Update Announcements, 2007/05/11
TFTPdWin 0.4.2 Server Directory Traversal Vulnerability, VulnerabilityResearch, 2007/05/11
fotolog xss, absamu, 2007/05/11
[ MDKSA-2007:102 ] - Updated php packages fix multiple vulnerabilities, security, 2007/05/11
eFileCabinet Authentication Bypass, VulnerabilityResearch, 2007/05/11
[ MDKSA-2007:103 ] - Updated php packages fix multiple vulnerabilities, security, 2007/05/11
Computer Associates eTrust InoTask.exe Antivirus Buffer Overflow Vulnerability, binagres, 2007/05/11
[Full-disclosure] ZDI-07-028: CA eTrust AntiVirus Server inoweb Buffer Overflow Vulnerability, zdi-disclosures, 2007/05/10
[Full-disclosure] TPTI-07-07: Apple QuickTime STSD Parsing Heap Overflow Vulnerability, TSRT, 2007/05/10
[Full-disclosure] iDefense Security Advisory 05.10.07: Apple Darwin Streaming Proxy Multiple Vulnerabilities, iDefense Labs, 2007/05/10
phpMUR Cross Site Scripting, the_3dit0r, 2007/05/10
[Full-disclosure] iDefense Security Advisory 05.10.07: Novell NetMail NMDMC Buffer Overflow Vulnerability, iDefense Labs, 2007/05/10
[Full-disclosure] [ GLSA 200705-13 ] ImageMagick: Multiple buffer overflows, Sune Kloppenborg Jeppesen, 2007/05/10
[Full-disclosure] [ GLSA 200705-12 ] PostgreSQL: Privilege escalation, Sune Kloppenborg Jeppesen, 2007/05/10
[Full-disclosure] iDefense Security Advisory 05.10.07: Sun Microsystems Solaris SRS Proxy Core srsexec Arbitrary File Read Vulnerability, iDefense Labs, 2007/05/10
[Full-disclosure] iDefense Security Advisory 05.09.07: Computer Associates eTrust InoTask.exe Antivirus Buffer Overflow Vulnerability, iDefense Labs, 2007/05/10
squirrelmail CSRF vulnerability, p3rlhax, 2007/05/10
- Re: squirrelmail CSRF vulnerability, Josh Zlatin-Amishav, 2007/05/10
  - Re: squirrelmail CSRF vulnerability, Tim Newsham, 2007/05/11
    - Re: squirrelmail CSRF vulnerability, Josh Zlatin-Amishav, 2007/05/12
    - Re: squirrelmail CSRF vulnerability, Pavel Kankovsky, 2007/05/14
Secunia Research: Internet Explorer HTML Objects Memory Corruption Vulnerability, Secunia Research, 2007/05/10
Secunia Research: BearShare NCTAudioFile2 ActiveX Control Buffer Overflow, Secunia Research, 2007/05/10
[ MDKSA-2007:101 ] - Updated bind packages fix vulnerability, security, 2007/05/10
- Re: [ MDKSA-2007:101 ] - Updated bind packages fix vulnerability, Stefano, 2007/05/10
2nd OWASP Israel mini conference at the Interdisciplinary Center Herzliya (IDC), Monday, May 21st, 13:30, Ofer Shezaf, 2007/05/09
[ MDKSA-2007:100 ] - Updated bind packages fix vulnerability, security, 2007/05/09
[Full-disclosure] iDefense Security Advisory 05.08.07: Microsoft Exchange Server 2000 IMAP Literal Processing DoS Vulnerability, iDefense Labs, 2007/05/09
[Full-disclosure] iDefense Security Advisory 05.08.07: Microsoft Word RTF File Parsing Heap Corruption Vulnerability, iDefense Labs, 2007/05/09
[Full-disclosure] iDefense Security Advisory 05.08.07: Microsoft Excel Filter Record Code Execution Vulnerability, iDefense Labs, 2007/05/09
[Full-disclosure] iDefense Security Advisory 05.09.07: Symantec Norton Internet Security 2006 COM Object Security ByPass Vulnerability, iDefense Labs, 2007/05/09
Training Classes in SyScan'07, organiser@syscan.org, 2007/05/09
Defeating Citibank Virtual Keyboard protection using screenshot method, yashks, 2007/05/09
- Re: Defeating Citibank Virtual Keyboard protection using screenshot method, Reversemode, 2007/05/09
- Re: Defeating Citibank Virtual Keyboard protection using screenshot method, Gadi Evron, 2007/05/09
- RE: Defeating Citibank Virtual Keyboard protection using screenshot method, Jim Harrison, 2007/05/09
  - Message not available
    - RE: Defeating Citibank Virtual Keyboard protection using screenshot method, Jim Harrison, 2007/05/09
    - RE: Defeating Citibank Virtual Keyboard protection using screenshot method, Gadi Evron, 2007/05/09
    - RE: Defeating Citibank Virtual Keyboard protection using screenshot method, Jim Harrison, 2007/05/09
    - RE: Defeating Citibank Virtual Keyboard protection using screenshot method, Gadi Evron, 2007/05/10
    - RE: Defeating Citibank Virtual Keyboard protection using screenshot method, David Gillett, 2007/05/10
    - Re: Defeating Citibank Virtual Keyboard protection using screenshot method, Florian Weimer, 2007/05/10
    - Re: Defeating Citibank Virtual Keyboard protection using screenshot method, Ansgar -59cobalt- Wiechers, 2007/05/10
    - RE: Defeating Citibank Virtual Keyboard protection using screenshot method, James C. Slora Jr., 2007/05/11
    - RE: Defeating Citibank Virtual Keyboard protection using screenshot method, Debasis Mohanty, 2007/05/10
  - RE: Defeating Citibank Virtual Keyboard protection using screenshot method, Nick FitzGerald, 2007/05/10
    - Re: Defeating Citibank Virtual Keyboard protection using screenshot method, Eli Dart, 2007/05/10
- Re: Defeating Citibank Virtual Keyboard protection using screenshot method, Jan Heisterkamp, 2007/05/11
- Re: Re: Defeating Citibank Virtual Keyboard protection using screenshot method, yashks, 2007/05/09
- Re: RE: Defeating Citibank Virtual Keyboard protection using screenshot method, balazs . zolika, 2007/05/10
- RE: Defeating Citibank Virtual Keyboard protection using screenshot method, Rogier Mulhuijzen, 2007/05/10
  - RE: Defeating Citibank Virtual Keyboard protection using screenshot method, Nick FitzGerald, 2007/05/11
    - RE: Defeating Citibank Virtual Keyboard protection using screenshot method, Omar A. Herrera, 2007/05/11
    - RE: Defeating Citibank Virtual Keyboard protection using screenshot method, Hugo van der Kooij, 2007/05/12
    - Re: Defeating Citibank Virtual Keyboard protection using screenshot method, Seth, 2007/05/15
    - RE: Defeating Citibank Virtual Keyboard protection using screenshot method, Glynn Clements, 2007/05/15
    - Re: Defeating Citibank Virtual Keyboard protection using screenshot method, Bojan Zdrnja, 2007/05/16
- Re: Defeating Citibank Virtual Keyboard protection using screenshot method, Reversemode, 2007/05/11
- Re: Defeating Citibank Virtual Keyboard protection using screenshot method, Paul Foote, 2007/05/14
- Re: Defeating Citibank Virtual Keyboard protection using screenshot method, imipak, 2007/05/15
- RE: Defeating Citibank Virtual Keyboard protection using screenshot method, Rogier Mulhuijzen, 2007/05/16
- Re: Defeating Citibank Virtual Keyboard protection using screenshot method, sethb, 2007/05/17
- Re: Defeating Citibank Virtual Keyboard protection using screenshot method, mailbox@martinelli.com, 2007/05/17
  - Message not available
    - Defeating Citibank Virtual Keyboard protection using screenshot method, aditya kuppa, 2007/05/17
    - Re: Defeating Citibank Virtual Keyboard protection using screenshot method, Bojan Zdrnja, 2007/05/17
- Re: Re: Defeating Citibank Virtual Keyboard protection using screenshot method, balazs . zolika, 2007/05/18
Multiple vulnerabilities, Michal Bucko (hackpl), 2007/05/09
Digital Armaments May-June-2007 Hacking Challenge: VMware, info, 2007/05/09
RDP TLS downgrade, software, 2007/05/09
- RE: RDP TLS downgrade, M. Burnett, 2007/05/09
- RE: RDP TLS downgrade, Roger A. Grimes, 2007/05/10
[ MDKSA-2007:099 ] - Updated python packages fix vulnerabilities, security, 2007/05/09
[ MDKSA-2007:098 ] - Updated clamav packages fix vulnerabilities, security, 2007/05/09
[Full-disclosure] SEC Consult SA-20070509-0 :: Multiple vulnerabilites in Nokia Intellisync Mobile Suite & Wireless Email Express, Johannes Greil, 2007/05/09
[Full-disclosure] Exchange Calendar MODPROPS Denial of Service (CVE-2007-0039), Alexander Sotirov, 2007/05/08
[Full-disclosure] iDefense Security Advisory 05.08.07: McAfee Security Center IsOldAppInstalled ActiveX Buffer Overflow Vulnerability, iDefense Labs, 2007/05/08
[security bulletin] HPSBTU02211 SSRT071326 rev.1 - HP Tru64 UNIX Running the dop command, Local Execution of Arbitrary Code with Privilege Elevation, security-alert, 2007/05/08
- Re: [security bulletin] HPSBTU02211 SSRT071326 rev.1 - HP Tru64 UNIX Running the dop command, Local Execution of Arbitrary Code with Privilege Elevation, Daniele Calore, 2007/05/09
[security bulletin] HPSBMA02138 SSRT061184 rev.3 - HP OpenView Storage Data Protector, Remote Unauthorized Arbitrary Command Execution, security-alert, 2007/05/08
[Full-disclosure] ZDI-07-027: Microsoft Internet Explorer Table Column Deletion Memory Corruption Vulnerability, zdi-disclosures, 2007/05/08
[Full-disclosure] ZDI-07-026: Microsoft Excel BIFF File Format Named Graph Record Parsing Stack Overflow Vulnerability, zdi-disclosures, 2007/05/08
Advanced Guestbook version 2.4.2 Multiple XSS Attack Vulnerabilities, securityresearch, 2007/05/08
WASC Announcement: Distributed Open Proxy Honeypot Project Data Released, announcements, 2007/05/08
AP Newspower software <=4.0.1 allows remote data manipulation, gobbles_fo_evar, 2007/05/08
[Full-disclosure] [ GLSA 200705-11 ] MySQL: Two Denial of Service vulnerabilities, Raphael Marichez, 2007/05/08
Advanced Guestbook version 2.4.2 Directory Traversal Vulnerability, securityresearch, 2007/05/08
[Full-disclosure] [ GLSA 200705-10 ] LibXfont, TightVNC: Multiple vulnerabilities, Raphael Marichez, 2007/05/08
Advanced Guestbook version 2.4.2 Multiple Error Information Leak Vulnerabilities, securityresearch, 2007/05/08
[Full-disclosure] FLEA-2007-0016-1: kernel, Foresight Linux Essential Announcement Service, 2007/05/08
[Full-disclosure] [ GLSA 200705-09 ] IPsec-Tools: Denial of Service, Raphael Marichez, 2007/05/08
[Full-disclosure] rPSA-2007-0092-1 tetex tetex-afm tetex-dvips tetex-fonts tetex-latex tetex-xdvi, rPath Update Announcements, 2007/05/08
[Full-disclosure] rPSA-2007-0094-1 cpio, rPath Update Announcements, 2007/05/08
[Full-disclosure] [USN-458-1] MoinMoin vulnerabilities, Kees Cook, 2007/05/08
[Full-disclosure] VMSA-2007-0004 Multiple Denial-of-Service issues fixed, VMware Security team, 2007/05/07
[Full-disclosure] ZDI-07-025: Trend Micro ServerProtect AgRpcCln.dll Stack Overflow Vulnerability, zdi-disclosures, 2007/05/07
[Full-disclosure] ZDI-07-024: Trend Micro ServerProtect EarthAgent Stack Overflow Vulnerability, zdi-disclosures, 2007/05/07
[Full-disclosure] [ GLSA 200705-08 ] GIMP: Buffer overflow, Raphael Marichez, 2007/05/07
[Full-disclosure] [ GLSA 200705-07 ] Lighttpd: Two Denials of Service, Raphael Marichez, 2007/05/07
Updated: webMethods Security Advisory: Glue console directory traversal vulnerability, Jeremy Epstein, 2007/05/07
OTRS <= 2.0.x XSS/XSRF, ciri, 2007/05/07
Re: NukeSentinel Bypass SQL Injection & Nuke Evolution <= 2.0.3 SQL Injections, technocrat, 2007/05/07
[Full-disclosure] iDefense Security Advisory 05.07.07: Sun Microsystems Solaris ACE_SETACL Integer Signedness DoS Vulnerability, iDefense Labs, 2007/05/07
PHPHtmlLib <= 2.4.0 Remote File Include Exploit, ilkerkandemir, 2007/05/07
american cart 3.* (abs_path) remote file include, kepledehlah, 2007/05/07
phpHoo3 (admin.php) Remote Login Bypass SQL Injection Vulnerability, ilkerkandemir, 2007/05/07
fipsCMS v2.1 Remote SQL injection Vulnerability, ilkerkandemir, 2007/05/07
pfa CMS v6.0 (index.php repinc) Remote File Include Vulnerability, ilkerkandemir, 2007/05/07
[Reversemode Advisory] VMware Products - GPF Denial of Service, Reversemode, 2007/05/07
[SECURITY] [DSA 1287-1] New ldap-account-manager packages fix multiple vulnerabilities, Noah Meyerhans, 2007/05/07
Kayako eSupport v3.00.90 Cross Site Scripting (XSS), e1c4, 2007/05/07
Mini Web Shop v.2 Vulnerable to XSS, corrado . liotta, 2007/05/07
Re: nucleus 3.22 >> RFI, security curmudgeon, 2007/05/07
Drake CMS (v0.4.0) - CRLF Injection Vulnerability, john, 2007/05/07
UPDATED: CubeCart (v3.0.15) - CRLF Injection Vulnerability, john, 2007/05/07
- Re: UPDATED: CubeCart (v3.0.15) - CRLF Injection Vulnerability, info, 2007/05/09
SunShop (v4) Multiple Vulnerabilities, john, 2007/05/07
[Full-disclosure] [USN-457-1] elinks vulnerability, Kees Cook, 2007/05/07
Podium CMS - Cookie Manipulation Exploit, john, 2007/05/07
- Re: Podium CMS - Cookie Manipulation Exploit, Steven M. Christey, 2007/05/09
Taltech Tal Bar Code ActiveX Control Memory Corruption Vulnerability(-ies), sapheal-hack.pl, 2007/05/07
[Full-disclosure] Vulnerabilities Hashes DB needed, shadown, 2007/05/06
- Re: [Full-disclosure] Vulnerabilities Hashes DB needed, Morning Wood, 2007/05/06
- Re: [Full-disclosure] [Dailydave] Vulnerabilities Hashes DB needed, Dave Aitel, 2007/05/07
  - Re: [Full-disclosure] [Dailydave] Vulnerabilities Hashes DB needed, shadown, 2007/05/07
[Full-disclosure] [ GLSA 200705-06 ] X.Org X11 library: Multiple integer overflows, Raphael Marichez, 2007/05/05
Nuked-klaN 1.7.6 Remote Code Execution Exploit, gmdarkfig, 2007/05/05
[MajorSecurity Advisory #47]Simple Machines Forum (SMF) - Session fixation Issue, admin, 2007/05/05
ACP3 (v4.0b3) - Multiple Vulnerabilities, john, 2007/05/05
XSS in Microsoft SharePoint, ville . solarius, 2007/05/05
- RE: XSS in Microsoft SharePoint, Jim Harrison, 2007/05/05
  - Re: XSS in Microsoft SharePoint, Solarius, 2007/05/14
Re: [Full-disclosure] WebScarab <= 20060621-0003 cross site scripting, Rogan Dawes, 2007/05/05
NPDS <= 5.10 - Multiple SQL injections, aeroxteam_PLEASEDONTSPAMUS, 2007/05/04
- Re: NPDS <= 5.10 - Multiple SQL injections, aeroxteam_PLEASEDONTSPAMUS, 2007/05/05
safari's saved password at risk, poplix, 2007/05/04
Re: sunshop v4 >> RFI, lagged2hell, 2007/05/04
RunCms <= 1.5.2 debug_show.php sql injection, retrog, 2007/05/04
Remote File Include In Script impex, RaeD, 2007/05/04
PHPSecurityAdmin Remote File Include Exploit, ilkerkandemir, 2007/05/04
Multiple vendors ZOO file decompression infinite loop DoS, Jean-Sébastien Guay-Leroux, 2007/05/04
rPSA-2007-0088-1 xscreensaver, rPath Update Announcements, 2007/05/03
rPSA-2007-0089-1 net-snmp net-snmp-utils, rPath Update Announcements, 2007/05/03
rPSA-2007-0090-1 gimp, rPath Update Announcements, 2007/05/03
rPSA-2007-0085-1 lftp, rPath Update Announcements, 2007/05/03
[security bulletin] HPSBUX01137 SSRT5954 rev.10 - HP-UX Running TCP/IP (IPv4), Remote Unauthorized Denial of Service (DoS), security-alert, 2007/05/03
[security bulletin] HPSBMI02210 SSRT071396 rev.1 - ProCurve Series 9300m Switches, Remote Denial of Service (DoS), security-alert, 2007/05/03
SchoolBoard (admin.php) Remote Login Bypass SQL Injection Vulnerability, ilkerkandemir, 2007/05/03
[security bulletin] HPSBTU02116 SSRT061135 rev.3 - HP Tru64 UNIX and HP Internet Express for Tru64 UNIX Running sendmail, Remote Execution of Arbitrary Code or Denial of Service (DoS), security-alert, 2007/05/03
Aardvark Topsites PHP Directory Disclosure Vulnerability, DoZ, 2007/05/03
[ MDKSA-2007:097 ] - Updated xscreensaver packages fix vulnerability, security, 2007/05/03
Bradford CampusManager v3.1(6) Sensitive Data Disclosure, john, 2007/05/03
[security bulletin] HPSBTU02179 SSRT061256 rev.1 - HP Tru64 UNIX Running the ps command, Local Disclosure of Sensitive Information, security-alert, 2007/05/03
[security bulletin] HPSBPI02185 SSRT071290 rev.2 - HP Jetdirect Running ftp, Remote Denial of Service (DoS), security-alert, 2007/05/03
12All File Upload Vulnerability, John McGuire, 2007/05/03
- Re: 12All File Upload Vulnerability, info, 2007/05/07
[Full-disclosure] Medium security hole affecting DSL-G624T, Tim Brown, 2007/05/03
- Re: [Full-disclosure] Medium security hole affecting DSL-G624T, 3APA3A, 2007/05/03
  - Re: [Full-disclosure] Medium security hole affecting DSL-G624T, Tim Brown, 2007/05/04
    - Re: [Full-disclosure] Medium security hole affecting DSL-G624T, 3APA3A, 2007/05/03
    - Re: [Full-disclosure] Medium security hole affecting DSL-G624T, Tim Brown, 2007/05/04
[Full-disclosure] TPTI-07-06: Trillian Pro Rendezvous XMPP HTML Decoding Heap Corruption, TSRT, 2007/05/02
[Full-disclosure] TPTI-07-05: IBM Tivoli Provisioning Manager for OS Deployment Multiple Stack Overflow Vulnerabilities, TSRT, 2007/05/02
[ MDKSA-2007:096 ] - Updated quagga packages fix DoS vulnerability, security, 2007/05/02
[SECURITY] [DSA 1286-1] New Linux 2.6.18 packages fix several vulnerabilities, Dann Frazier, 2007/05/02
[Full-disclosure] iDefense Security Advisory 05.02.07: LiveData Protocol Server Heap Overflow Vulnerability, iDefense Labs, 2007/05/02
Post Nuke v4bJournal Module Sql Inject, abbasi, 2007/05/02
response Progress: Denial of Service attack against WebSpeed possible, suresync, 2007/05/02
Disable website access for sites running Webspeed, suresync, 2007/05/02
Vulnerability in InterVations' MailCopa, skillTube.com, 2007/05/02
Atomix Mp3 Buffer Overflow, preth00nker, 2007/05/02
[Full-disclosure] [USN-456-1] net-snmp vulnerability, Kees Cook, 2007/05/02
[ MDKSA-2007:095 ] - Updated ktorrent packages fix vulnerability, security, 2007/05/02
[ECHO_ADV_82$2007] wordpress plugins wp-Table <= 1.43 (wpPATH) Remote File Inclusion Vulnerability, erdc, 2007/05/02
[ECHO_ADV_81$2007] wordpress plugins wordTube <= 1.43 (wpPATH) Remote File Inclusion Vulnerability, erdc, 2007/05/02
Wordpress All versions XSS, jcarlos . norte, 2007/05/02
[Full-disclosure] [ GLSA 200705-05 ] Quagga: Denial of Service, Sune Kloppenborg Jeppesen, 2007/05/02
[Full-disclosure] [ GLSA 200705-04 ] Apache mod_perl: Denial of Service, Sune Kloppenborg Jeppesen, 2007/05/02
[Full-disclosure] rPSA-2007-0084-1 kernel, rPath Update Announcements, 2007/05/02
[Full-disclosure] ZDI-07-023: Apple QTJava toQTPointer() Pointer Arithmetic Memory Overwrite Vulnerability, zdi-disclosures, 2007/05/01
[Full-disclosure] Radware Security Advisory - Yate 1.1.0 Denial of Service Vulnerability, no-reply, 2007/05/01
[Full-disclosure] [ GLSA 200705-03 ] Tomcat: Information disclosure, Raphael Marichez, 2007/05/01
[SECURITY] [DSA 1285-1] New wordpress packages fix multiple vulnerabilities, Noah Meyerhans, 2007/05/01
[Full-disclosure] [ GLSA 200705-02 ] FreeType: User-assisted execution of arbitrary code, Raphael Marichez, 2007/05/01
[Full-disclosure] [ GLSA 200705-01 ] Ktorrent: Multiple vulnerabilities, Raphael Marichez, 2007/05/01
ZoneAlarm Insufficient validation of 'vsdatant' driver input buffer Vulnerability, Matousec - Transparent security Research, 2007/05/01
[Full-disclosure] iDefense Security Advisory 04.30.07: Cerulean Studios Trillian Multiple IRC Vulnerabilities, iDefense Labs, 2007/05/01
- Re: iDefense Security Advisory 04.30.07: Cerulean Studios Trillian Multiple IRC Vulnerabilities, Marvin Frick, 2007/05/04
  - Re: iDefense Security Advisory 04.30.07: Cerulean Studios Trillian Multiple IRC Vulnerabilities, Reversemode, 2007/05/04