Bugtraq (date)
July 31, 2007
- [Full-disclosure] [USN-493-1] Firefox vulnerabilities, Kees Cook, 23:39
- Really, really, penultimate, PacSec CFP deadline, Aug 10., Dragos Ruiu, 18:38
- Re: [BuHa-Security] Winamp 5.35 (Infinite) M3U File Inclusion DoS Vulnerability, 3APA3A, 18:15
- [BuHa-Security] Winamp 5.35 (Infinite) M3U File Inclusion DoS Vulnerability, bugtraq, 13:25
- CAL-20070730-1 BlueSkyCat ActiveX Remote Heap Overflow vulnerability, Code Audit Labs, 13:04
- Re: RFI ====> vBulletin v3.6.5, no-reply, 13:03
- security contact for uat.edu needed, Hans Wolters, 12:52
- Re: RFI ====> vBulletin v3.6.5, scott-REMOVE, 12:30
- BellaBook Admin Bypass/Remote Code Execution, ilkerkandemir, 12:19
- [Full-disclosure] rPSA-2007-0151-1 gvim vim vim-minimal, rPath Update Announcements, 05:25
- [Full-disclosure] [USN-492-1] tcpdump vulnerability, Kees Cook, 00:45
July 30, 2007
- [Full-disclosure] FLEA-2007-0037-1 unrar, Foresight Linux Essential Announcement Service, 22:31
- [Full-disclosure] CAL-20070730-1 BlueSkyCat ActiveX Remote Heap Overflow vulnerability, Code Audit Labs, 21:59
- Re: Exploit In Internet Explorer, Nick FitzGerald, 19:53
- RE: Exploit In Internet Explorer, Larry Seltzer, 19:31
- Re: Exploit In Internet Explorer, paraw, 18:17
- RFI ====> vBulletin v3.6.5, RaeD, 17:35
- Exploit In Internet Explorer, RaeD, 17:35
- BellaBiblio Admin Login Bypass, ilkerkandemir, 17:24
- Dora Emlak Script v1.0 (tr) Admin Login ByPass, ilkerkandemir, 17:13
- phpVoter v0.6 Remote File Include Vulnerability, ilkerkandemir, 17:13
- Phorm v3.0 Remote File Upload Vulnerability, ilkerkandemir, 17:03
- Madoa Poll v1.1 Remote File Include Vulnerabilities, ilkerkandemir, 16:52
- phpWebFileManager v0.5 (PN_PathPrefix) Remote File Include Vulnerability, ilkerkandemir, 16:42
- RIG Image Gallery (dir_abs_src) Remote File Include Vulnerability, ilkerkandemir, 16:41
- [DRUPAL-SA-2007-017] Drupal 5.2 fixes multiple CSRF vulnerabilities, Heine Deelstra, 14:53
- [DRUPAL-SA-2007-018] Drupal 4.7.7 and 5.2 fix multiple cross site scripting vulnerabilities, Heine Deelstra, 14:42
- [Full-disclosure] FLEA-2007-0036-1 vim vim-minimal gvim, Foresight Linux Essential Announcement Service, 13:38
- wolioCMS SQL Injection, k1tk4t, 13:07
- ASA-2007-018: Resource exhaustion vulnerability in IAX2 channel driver, Security Response Team, 12:45
- [Aria-security] community Cross-site Scripting (XSS), h4ck3riran, 12:45
- TS-2007-001-0: BlueCat Networks Adonis Linux-HA heartbeat DoS Vulnerability, anonymous.c7ffa4057a, 12:34
- security@soqor.net, security, 12:34
- [Aria-security] itcms 0.2 Cross-site Scripting (XSS), h4ck3riran, 12:24
- E-commerceScripts ALL Apps (Auction Script, Shopping Cart Script and Multi-Vendor E-Shop Script) admin.aspx SQL, Advisory, 12:24
July 28, 2007
- [Full-disclosure] [ GLSA 200707-14 ] tcpdump: Integer overflow, Raphael Marichez, 19:36
- [Full-disclosure] [ GLSA 200707-13 ] Fail2ban: Denial of Service, Raphael Marichez, 19:25
- [Full-disclosure] [ GLSA 200707-12 ] VLC media player: Format string vulnerabilities, Raphael Marichez, 16:51
- Friend Script 2.5 - 2.4 Remote File İnclude, yollubunlar, 16:09
- WebEvents: Online Event Registration Template Username Fields SQL INJECTION, Advisory, 14:15
- WebEvents: Online Event Registration Template Username Fields SQL INJECTION, Advisory, 13:54
- Re: Anti XSS AJAX, Ronald Chmara, 13:44
- SuskunDuygular - yelik Sistemi v.1 Sql, yollubunlar, 13:43
- TSLSA-2007-0023 - multi, Trustix Security Advisor, 13:22
- phpCoupon Vulnerabilities, hack2prison, 13:12
- PHPBlogger cookie privilege escalation, darthballsbr, 13:01
- Message Board / Threaded Discussion Forum SQL INJECTION, Advisory, 13:01
- Pay Roll - Time Sheet and Punch Card Application With Web Interface SQL Injection, Advisory, 12:51
- Real Estate listing website application template SQL Injection, Advisory, 12:40
- WebStore - Online Store Application Template SQL INJECTION, Advisory, 12:40
- Berthanas Ziyaretci Defteri v2.0 (tr) Sql, yollubunlar, 12:30
- Re: Solaris finger bug, Joep Vesseur, 12:19
July 27, 2007
- Re: "BIND 9 DNS Cache Poisoning" by Amit Klein (Trusteer), Amit Klein, 18:47
- Re: "BIND 9 DNS Cache Poisoning" by Amit Klein (Trusteer), Tim Newsham, 16:21
- Anti XSS AJAX, Fady Anwar, 16:11
- Solaris finger bug, Jim Mellander, 15:49
- Re: "BIND 9 DNS Cache Poisoning" by Amit Klein (Trusteer), Amit Klein, 15:38
- [Full-disclosure] FLEA-2007-0035-1: libvorbis, Foresight Linux Essential Announcement Service, 14:02
- Re: "BIND 9 DNS Cache Poisoning" by Amit Klein (Trusteer), Gadi Evron, 13:40
- Re: "BIND 9 DNS Cache Poisoning" by Amit Klein (Trusteer), Tim, 13:40
- Re: "BIND 9 DNS Cache Poisoning" by Amit Klein (Trusteer), Theo de Raadt, 13:29
- PHP Safe_mode bypass exploit (win32service), nima_501, 13:29
- Metyus Forum Portal v1.0, crazy_king, 13:29
- Re: Retrieving "deleted" sms/mms from Nokia phone (Symbian S60), abrash_han, 13:18
- [Full-disclosure] BTsniff - Bleutooth sniffing under *nix, Thierry Zoller, 13:08
- sBlog 0.7.3 Beta XSS Vulnerabilitie, Guns, 13:07
- rPSA-2007-0150-1 libvorbis, rPath Update Announcements, 12:57
- Re: Guidance Software response to iSEC report on EnCase, Alex Stamos, 12:35
- Re: Guidance Software response to iSEC report on EnCase (fwd), Alexander Sotirov, 12:35
- Breakpoint Security: Encase Pre-Advisory, announce, 12:25
- [Full-disclosure] rPSA-2007-0149-1 bind bind-utils, rPath Update Announcements, 08:15
July 26, 2007
- Re: "BIND 9 DNS Cache Poisoning" by Amit Klein (Trusteer), Jamie Riden, 19:31
- PHPSysInfo Index.php Cross Site Scripting, DoZ, 19:20
- Re: Guidance Software response to iSEC report on EnCase (fwd), jf, 19:10
- [Full-disclosure] iDefense Security Advisory 07.26.07: IBM AIX capture Terminal Control Sequence Buffer Overflow Vulnerability, iDefense Labs, 18:17
- [Full-disclosure] iDefense Security Advisory 07.26.07: IBM AIX ftp gets() Multiple Buffer Overflow Vulnerabilities, iDefense Labs, 18:17
- [Full-disclosure] iDefense Security Advisory 07.26.07: IBM AIX pioout Arbitrary Library Loading Vulnerability, iDefense Labs, 18:06
- Guidance Software response to iSEC report on EnCase, larry . gill, 15:20
- libvorbis 1.1.2 - Multiple memory corruption flaws, David Thiel, 15:10
- [security bulletin] HPSBMA02133 SSRT061201 rev.5 - HP Oracle for OpenView (OfO) Critical Patch Update, security-alert, 13:02
- SolpotCrew Advisory #14 (S4M3K) - PhpHostBot (login_form) Remote File Inclusion, s4m3k, 12:51
- Dependet Forums (Username Field) Remote SQL Injection, Advisory, 12:51
- [Full-disclosure] FLEA-2007-0034-1:, Foresight Linux Essential Announcement Service, 12:40
- RE: [CAID 35525, 35526]: CA Products Arclib Library Denial of Service Vulnerabilities, Williams, James K, 12:40
- [ MDKSA-2007:150 ] - Updated clamav packages fix vulnerabilities, security, 12:29
July 25, 2007
- Re: [Full-disclosure] Mozilla protocol abuse, Thor Larholm, 22:24
- [Full-disclosure] [ GLSA 200707-11 ] MIT Kerberos 5: Arbitrary remote code execution, Raphael Marichez, 18:56
- [ MDKSA-2007:149 ] - Updated BIND9 packages fix vulnerabilities, security, 18:25
- [Full-disclosure] [ GLSA 200707-10 ] Festival: Privilege elevation, Raphael Marichez, 18:25
- [ MDKSA-2007:148 ] - Updated tcpdump packages fix BGP dissector vulnerability, security, 17:11
- Re: [Full-disclosure] Mozilla protocol abuse, bugtraq, 16:50
- [Full-disclosure] [ GLSA 200707-09 ] GIMP: Multiple integer overflows, Raphael Marichez, 16:08
- [Full-disclosure] ZDI-07-044: BakBone NetVault Reporter Scheduler Heap Overflow Vulnerability, zdi-disclosures, 16:08
- Re: [Full-disclosure] Mozilla protocol abuse, Thor Larholm, 15:58
- Re: [Full-disclosure] Mozilla protocol abuse, Nate McFeters, 15:47
- [Full-disclosure] Mozilla protocol abuse, Thor Larholm, 15:36
- Mitridat Form Processor Pro XSS, Charles Kim, 14:55
- [CAID 35527]: CA Message Queuing (CAM / CAFT) Buffer Overflow Vulnerability, Williams, James K, 12:49
- [CAID 35525, 35526]: CA Products Arclib Library Denial of Service Vulnerabilities, Williams, James K, 12:38
- [CAID 35524]: CA eTrust Intrusion Detection caller.dll Vulnerability, Williams, James K, 12:38
- [Full-disclosure] [USN-491-1] Bind vulnerability, Kees Cook, 11:25
- [Full-disclosure] [SecNiche Security] WAZ (v 1.0) : Windows Anti Zomb Killer Released, Aditya K Sood, 11:25
- [Full-disclosure] n.runs-SA-2007.024 - CA eTrust Antivirus Infinite Loop DoS (remote) Advisory, security, 10:01
July 24, 2007
- [Full-disclosure] [ GLSA 200707-08 ] NVClock: Insecure file usage, Raphael Marichez, 19:33
- [Full-disclosure] [ GLSA 200707-07 ] MPlayer: Multiple buffer overflows, Raphael Marichez, 19:22
- [Full-disclosure] iDefense Security Advisory 07.24.07: Computer Associates eTrust Intrusion Detection CallCode ActiveX Control Code Execution Vulnerability, iDefense Labs, 19:22
- [Full-disclosure] iDefense Security Advisory 07.24.07: Computer Associates AntiVirus CHM File Handling DoS Vulnerability, iDefense Labs, 19:11
- [Full-disclosure] TPTI-07-13: Borland Interbase ibserver.exe Create-Request Buffer Overflow Vulnerability, TSRT, 17:37
- Re: "BIND 9 DNS Cache Poisoning" by Amit Klein (Trusteer), Amit Klein, 17:26
- cPanel 10.9.1 XSS, Advisory, 17:15
- [Full-disclosure] ZDI-07-043: Ipswitch IMail IMAP Daemon SUBSCRIBE Stack Overflow Vulnerability, zdi-disclosures, 16:10
- [Full-disclosure] ZDI-07-042: Ipswitch IMail Server GetIMailHostEntry Memory Corruption Vulnerability, zdi-disclosures, 16:10
- [Full-disclosure] ZDI-07-041: Panda Software AdminSecure Agent Heap Overflow Vulnerability, zdi-disclosures, 16:10
- Re: "BIND 9 DNS Cache Poisoning" by Amit Klein (Trusteer), securityfocus, 14:57
- FLEA-2007-0033-1: firefox thunderbird, Foresight Linux Essential Announcement Service, 14:25
- PR07-18: Cross-site Scripting (XSS) / HTML injection on Webbler CMS admin login page (1), research, 13:53
- printenv.pl(all versions) cross site scripting Vulnerability, hadihadi_zedehal_2006, 13:21
- PR07-20: Webroot disclosure on Webbler CMS, research, 13:00
- RE: Internet Explorer 0day exploit, Roger A. Grimes, 12:48
- PR07-19: Cross-site Scripting (XSS) / HTML injection on Webbler CMS admin login page (2), research, 12:37
- "BIND 9 DNS Cache Poisoning" by Amit Klein (Trusteer), Amit Klein, 12:27
- PR07-21: Webbler CMS forms are susceptible to spamming and phishing abuses, research, 12:16
- dbdisplay.pl(all versions) Remote execut Vulnerability, hadihadi_zedehal_2006, 12:05
- RE: Internet Explorer 0day exploit, Hugo van der Kooij, 12:05
- Oracle E-Business Suite - Multiple Vulnerabilities, Integrigy Alerts, 11:54
- Re: [Full-disclosure] Internet Explorer 0day exploit, Anupam Mishra, 10:32
- [Full-disclosure] n.runs-SA-2007.021 - Norman Antivirus LZH parsing Arbitrary Code Execution Advisory, security, 09:50
July 23, 2007
- [Full-disclosure] n.runs-SA-2007.022 - Norman Antivirus DOC parsing Detection Bypass Advisory, security, 20:22
- RE: Internet Explorer 0day exploit, Ken Kousky, 19:18
- Secure Computing - Security Reporter Auth Bypass and Directory Traversal Vulnerability, Oliver Karow, 19:18
- [Full-disclosure] iDefense Security Advisory 07.23.07: Ipswitch Instant Messaging Server Denial of Service Vulnerability, iDefense Labs, 18:24
- The Pwnie Awards!, Alexander Sotirov, 18:24
- [security bulletin] HPSBST02243 SSRT071446 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS07-036 to MS07-041, security-alert, 15:58
- Re: [Eleytt] 7LIPIEC2007, activereports . support, 15:58
- Re: Internet Explorer 0day exploit, Aaron Katz, 15:47
- Minb Is Not A Blog default password directory, Joseph . giron13, 15:25
- Webspell 4.x Local File Inclusion, f00, 15:25
- n.runs-SA-2007.023 - Norman Antivirus DOC parsing Divide by Zero Advisory, security, 14:53
- Re: Internet Explorer 0day exploit, Aaron Katz, 14:42
- Re: Re: Internet Explorer 0day exploit, piercede, 14:32
- [Aria-Security] Image Racer SearchResults.asp SQL INJECTION vuln., Advisory, 14:20
- Re: PHMe CMS 0.0.2 local File Include Vulnerabilitiy, BlackHawk, 14:09
- PHMe CMS 0.0.2 local File Include Vulnerabilitiy, h4ck3riran, 13:48
- [Full-disclosure] n.runs-SA-2007.020 - Norman Antivirus ACE parsing Arbitrary Code Execution Advisory, security, 13:37
- [security bulletin] HPSBUX02153 SSRT061181 rev.4 - HP-UX Running Firefox, Remote Unauthorized Access or Elevation of Privileges or Denial of Service (DoS), security-alert, 13:05
- Re: rare bug in Opera 9.20 browser, kaneda, 12:22
- [Full-disclosure] n.runs-SA-2007.022 - Norman Antivirus DOC parsing Detection Bypass Advisory, security, 12:01
- [Full-disclosure] n.runs-SA-2007.021 - Norman Antivirus LZH parsing Arbitrary Code Execution Advisory, security, 11:50
- [Full-disclosure] n.runs-SA-2007.020 - Norman Antivirus ACE parsing Arbitrary Code Execution Advisory, security, 11:50
- [Full-disclosure] n.runs-SA-2007.023 - Norman Antivirus DOC parsing Divide by Zero Advisory, security, 11:29
- [Full-disclosure] STATCOUNTER.COM: Cross-Site Scripting and Cross-Site Request Forgery, Matteo Carli, 10:57
July 21, 2007
- Re: [Full-disclosure] [WEB SECURITY] [CVE-2007-3816][Advisory] JWIG Context-Dependent Template Calling Dos, Bubba Gump, 17:45
- [Full-disclosure] Russell Harding MacOS X SoftwareUpdate Vulnerability Advisory Missing In Action in Bugtraq Archive, Jason Coombs, 17:45
- Re: [Full-disclosure] [WEB SECURITY] [CVE-2007-3816][Advisory] JWIG Context-Dependent Template Calling Dos, Pranay Kanwar, 13:04
- [MajorSecurity Advisory #51]Virtual Hosting Control System - Session fixation Issue, admin, 12:53
- [Aria-Security] Munch Pro Remote Login ByPass, Advisory, 12:43
- [Aria-Security] Property Pro Remote Login ByPass, Advisory, 12:32
- [ MDKSA-2007:147 ] - Updated ImageMagick packages fix multiple vulnerabilities, security, 12:32
- JBlog 1.0 Creat Admin exploit, xss, Cookie Manipulation, s4mi, 12:22
- [Full-disclosure] Oracle bad Views - Exploit released, bunker, 06:43
July 20, 2007
- Re: Internet Explorer 0day exploit, Chad Perrin, 19:21
- UseBB 1.0.x Cross Site Scripting (XSS), s4mi, 17:23
- FLEA-2007-0032-1: flashplayer, Foresight Linux Essential Announcement Service, 17:01
- [Full-disclosure] 2007-07-20 - n.runs-SA-2007.019 - Panda Antivirus EXE parsing Arbitrary Code Execution Advisory, security, 16:40
- [Full-disclosure] 2007-07-20 - n.runs-SA-2007.018 - NOD32 Antivirus ASPACK and FSG parsing Divide by Zero Advisory, security, 16:40
- [Full-disclosure] 2007-07-20 - n.runs-SA-2007.017 - NOD32 Antivirus ASPACK parsing Infinite Loop Advisory, security, 16:29
- [Full-disclosure] 2007-07-20 - n.runs-SA-2007.016 - NOD32 Antivirus CAB parsing Arbitrary Code Execution Advisory, security, 16:29
- Re: Internet Explorer 0day exploit, Chris Stromblad, 14:56
- Re: Internet Explorer 0day exploit, Chris Stromblad, 14:35
- Re: LFI On SMF 1.1.3, Cornelius Riemenschneider, 14:24
- Re: Internet Explorer 0day exploit, Chris Stromblad, 14:13
- Elite Forum Full HTML ENject versin 1.0.0.0, starext, 14:03
- rPSA-2007-0147-1 tcpdump, rPath Update Announcements, 14:03
- rare bug in Opera 9.20 browser, jplopezy, 13:52
- rPSA-2007-0148-1 firefox thunderbird, rPath Update Announcements, 13:42
- SYMSA-2007-006: Citrix EPA ActiveX Control Design Flaw, research, 12:06
July 19, 2007
- [Full-disclosure] [USN-490-1] Firefox vulnerabilities, Kees Cook, 22:32
- [Full-disclosure] Wii's Internet Channel affected to Flash FLV parser vulnerability, Juha-Matti Laurio, 18:30
- [ANNOUNCE] RSBAC 1.3.5 released, Amon Ott, 17:48
- Re: Internet Explorer 0day exploit, Zow, 17:38
- [CVE-2007-3816][Advisory] JWIG Context-Dependent Template Calling Dos, Aditya K Sood, 16:35
- [CAID 35515]: CA Products Alert Service RPC Procedure Buffer Overflow Vulnerabilities, Williams, James K, 15:12
- DokuWiki suffers XSS, Cyrill Brunschwiler, 13:26
- [Full-disclosure] iDefense Security Advisory 07.19.07: Multiple Vendor Multiple Product URI Handler Input Validation Vulnerability, iDefense Labs, 12:54
- [Full-disclosure] iDefense Security Advisory 07.19.07: Opera Software Opera Web Browser BitTorrent Dangling Pointer Vulnerability, iDefense Labs, 12:32
- Geoblog v1 administrator bypass, joseph . giron13, 12:10
- [Full-disclosure] [USN-489-1] Linux kernel vulnerabilities, Kees Cook, 11:27
- [Full-disclosure] [USN-489-2] redhat-cluster-suite vulnerability, Kees Cook, 11:16
- [Full-disclosure] rPSA-2007-0145-1 lighttpd, rPath Update Announcements, 10:23
July 18, 2007
- [Full-disclosure] [USN-486-1] Linux kernel vulnerabilities, Kees Cook, 20:17
- [Reversemode Advisory] Microsoft DirectX RLE Compressed Targa Image File Heap Overflow, Reversemode, 19:46
- Oracle Database Buffer overflow vulnerabilities in procedure DBMS_DRS.GET_PROPERTY (DB03), Team SHATTER, 19:02
- Oracle Database Buffer overflows and Denial of service vulnerabilities in public procedures of MDSYS.MD (DB12), Team SHATTER, 19:02
- [Full-disclosure] iDefense Security Advisory 07.18.07: Ipswitch IMail Server 2006 IMAP Search Command Buffer Overflow Vulnerability, iDefense Labs, 17:57
- [Full-disclosure] iDefense Security Advisory 07.18.07: Microsoft DirectX RLE Compressed Targa Image File Heap Overflow, iDefense Labs, 17:46
- [SECURITY] [DSA 1334-1] New freetype packages fix arbitary code execution, Steve Kemp, 17:14
- Re: Internet Explorer 0day exploit, Bigby Findrake, 16:08
- Re: Internet Explorer 0day exploit, Zow, 14:12
- Security Advisory: Login bypass in LedgerSMB 1.2.0 through 1.2.6, Chris Travers, 14:01
- Oracle Security: SQL Injection in APEX CHECK_DB_PASSWORD, ak, 13:49
- ASA-2007-017: Remote Crash Vulnerability in STUN implementation, Kevin P. Fleming, 13:39
- Oracle Security: SQL Injection in package DBMS_PRVTAQIS, ak, 13:28
- ASA-2007-015: Remote Crash Vulnerability in IAX2 channel driver, Kevin P. Fleming, 13:28
- Oracle Security: Insert / Update / Delete Data via Views, ak, 13:18
- Re: iDefense Security Advisory 07.11.07: Apple QuickTime SMIL File Processing Integer Overflow Vulnerability, Steve Shockley, 13:07
- Re: Internet Explorer 0day exploit, Chris Stromblad, 12:56
- Re: LFI On SMF 1.1.3, jkloske, 12:56
- Clarifications on LedgerSMB vulnerability with Bugtraq ID:24940, Chris Travers, 12:35
- ASA-2007-016: Remote crash vulnerability in Skinny channel driver, Kevin P. Fleming, 12:35
- ASA-2007-014: Stack buffer overflow in IAX2 channel driver, Kevin P. Fleming, 12:03
July 17, 2007
- [Full-disclosure] [USN-488-1] mod_perl vulnerability, Kees Cook, 21:33
- [Full-disclosure] iDefense Security Advisory 07.17.07: Computer Associates Alert Notification Server Multiple Buffer Overflow Vulnerabilities, iDefense Labs, 21:23
- [Full-disclosure] iDefense Security Advisory 07.17.07: IBM Tivoli Provisioning Manager for OS Deployment TFTP Blocksize DoS Vulnerability, iDefense Labs, 19:49
- [Full-disclosure] [USN-487-1] Dovecot vulnerability, Kees Cook, 18:45
- [Full-disclosure] [USN-485-1] PHP vulnerabilities, Kees Cook, 18:14
- [Full-disclosure] [USN-484-1] curl vulnerability, Kees Cook, 14:53
- Re: iDefense Security Advisory 07.11.07: Apple QuickTime SMIL File Processing Integer Overflow Vulnerability, Dan Harkless, 13:29
- London DC4420 meet - tommorrow, Wednesday 18th July, Adam Laurie, 12:47
- Insanely simple blog - Multiple vulnerabilities, joseph . giron13, 12:14
- LFI On SMF 1.1.3, sirn0n, 12:03
- [Full-disclosure] [0x70xC] Open Redirector ADSERVER.LIBERO.IT, MgpF, 10:48
- [Full-disclosure] [0x70xB] Open Redirector ARIANNA.LIBERO.IT, MgpF, 10:37
- [Full-disclosure] rPSA-2007-0141-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs, rPath Update Announcements, 10:37
- [Full-disclosure] rPSA-2007-0143-1 mysql mysql-bench mysql-server, rPath Update Announcements, 10:27
- [Full-disclosure] rPSA-2007-0142-1 perl-Net-DNS, rPath Update Announcements, 10:16
July 16, 2007
- [Full-disclosure] iDefense Security Advisory 07.16.07: Trend Micro OfficeScan Management Console Authorization Bypass Vulnerability, iDefense Labs, 20:38
- [Full-disclosure] iDefense Security Advisory 07.16.07: Trend Micro OfficeScan Session Cookie Buffer Overflow Vulnerability, iDefense Labs, 20:38
- Re: Re: Menu Manager Mod for WebAPP - No Input Filtering, web-app, 19:05
- Official release of SQL Power Injector 1.2, Francois Larouche, 17:11
- Re: Sudo: local root compromise with krb5 enabled, Thor Lancelot Simon, 14:56
- Re: Opera/Konqueror: data: URL scheme address bar spoofing, lockoom, 12:41
- [security bulletin] HPSBGN02234 SSRT071435 rev.1 - HP ServiceGuard for Linux, Local Unauthorized Access, Increase in Privilege, security-alert, 12:31
- [Full-disclosure] ExLibris Aleph and Metalib Cross Site Scripting Attack, Matthew Cook, 11:29
- CFP now open for ClubHack, India's own hackers' convention, RS, 02:43
July 14, 2007
- Re: [Full-disclosure] Internet Explorer 0day exploit, Dragos Ruiu, 23:10
- RE: zdnet reports on java vulnerabilities, Stephen Shankland, 18:13
- Session Riding and multiple XSS in WebCit, Christopher Schwardt, 18:13
- Re: Opera/Konqueror: data: URL scheme address bar spoofing, Harri Porten, 17:52
- Re: Menu Manager Mod for WebAPP - No Input Filtering, info, 15:18
- The dark side of ajax, Fady Anwar, 15:18
- WhitePapers By SecNiche Security, Aditya K Sood, 15:07
July 13, 2007
- [Full-disclosure] Opera/Konqueror: data: URL scheme address bar spoofing, Robert Swiecki, 20:59
- [Full-disclosure] MSIE7 entrapment again (+ FF tidbit), Michal Zalewski, 19:25
- AzDG Dating Gold v3.0.5 ===> Remote File Include Vulnerability, mostafa_ragab, 18:54
- Calyptix Security Advisory CX-2007-05 - eSoft InstaGate EX2 Cross-Site Request Forgery Attack, Calyptix Security, 18:32
- Bogus BID 24744, urtrapped9, 18:32
- Re: [Eleytt] 12LIPIEC2007 2007-07-12, michal . bucko, 17:20
- [MSA01110707] Flash Player/Plugin Video file parsing Remote Code Execution, Minded Security Research Labs, 16:58
- [Full-disclosure] [USN-483-1] libnet-dns-perl vulnerabilities, Kees Cook, 16:37
- Re: [Full-disclosure] zdnet reports on java vulnerabilities, Justin Klein Keane, 15:14
- [Full-disclosure] zdnet reports on java vulnerabilities, Jonathan Smith, 14:53
- [Eleytt] 12LIPIEC2007 2007-07-12, Michal Bucko, 13:40
- No Patch for IE on Windows Mobile/CE, LIUDIEYU dot COM, 13:40
- ActiveWeb Contentserver CMS Multiple Cross Site Scriptings, RedTeam Pentesting GmbH, 13:29
- ActiveWeb Contentserver CMS SQL Injection Management Interface, RedTeam Pentesting GmbH, 13:19
- ActiveWeb Contentserver CMS Editor Permission Settings Problem, RedTeam Pentesting GmbH, 13:08
- ActiveWeb Contentserver CMS Clientside Filtering of Page Editor Content, RedTeam Pentesting GmbH, 13:08
- [ MDKSA-2007:146 ] - Updated perl-Net-DNS packages fix multiple vulnerabilities, security, 12:25
- [Full-disclosure] Youtube.com flagged video age verification bypass. Take 2, auto386038, 09:59
- [Full-disclosure] [scip_Advisory 3159] SiteScape forum prior 7.3 Cross Site Scripting, Marc Ruef, 04:20
July 12, 2007
- [Full-disclosure] TPTI-07-12: Multiple Vendor Progress Server Heap Overflow Vulnerability, TSRT, 22:19
- [Full-disclosure] ZDI-07-040: Symantec AntiVirus Engine CAB Parsing Heap Overflow Vulnerability, TSRT, 21:58
- [Full-disclosure] ZDI-07-039: Symantec AntiVirus Engine RAR File Parsing DoS Vulnerability, zdi-disclosures, 21:58
- Whitepaper: Command Injection in XML Digital Signatures and Encryption, brad, 17:58
- Command Injection in XML Digital Signatures, brad, 17:47
- FLEA-2007-0031-1: xfs, Foresight Linux Essential Announcement Service, 16:32
- [Full-disclosure] iDefense Security Advisory 07.12.07: Red Hat Enterprise Linux init.d XFS Script chown Race Condition Vulnerability, iDefense Labs, 14:09
- Re: Re: [Eleytt] 7LIPIEC2007, MichaÅ Melewski, 12:44
- MkPortal - Multiple SQL Injection Vulnerabilities, does_not_exist, 12:34
- FreeBSD Security Advisory FreeBSD-SA-07:05.libarchive, FreeBSD Security Advisories, 12:23
- [Full-disclosure] rPSA-2007-0138-1 gimp, rPath Update Announcements, 06:00
- [Full-disclosure] CVE-2007-3693: Cross site scripting and information disclosure in gobi/helma, Hanno BÃck, 06:00
July 11, 2007
- [Full-disclosure] iDefense Security Advisory 07.11.07: Apple QuickTime SMIL File Processing Integer Overflow Vulnerability, iDefense Labs, 19:56
- [Full-disclosure] iDefense Security Advisory 07.11.07: SquirrelMail G/PGP Plugin gpg_help.php Local File Inclusion Vulnerability, iDefense Labs, 18:30
- [Full-disclosure] iDefense Security Advisory 07.11.07: SquirrelMail G/PGP Plugin gpg_recv_key() Command Injection Vulnerability, iDefense Labs, 18:20
- [Full-disclosure] iDefense Security Advisory 07.11.07: SquirrelMail G/PGP Plugin gpg_check_sign_pgp_mime() Command Injection Vulnerability, iDefense Labs, 18:20
- [Full-disclosure] iDefense Security Advisory 07.11.07: SquirrelMail G/PGP Plugin deleteKey() Command Injection Vulnerability, iDefense Labs, 18:20
- RE: TippingPoint IPS Signature Evasion, Paul Craig, 18:09
- [Full-disclosure] [ GLSA 200707-06 ] XnView: Stack-based buffer overflow, Stefan Cornelius, 17:16
- TippingPoint detection bypass, Andres Riancho, 16:33
- Re: XSS Tunnelling White Paper and Tool, Security Guy, 16:22
- 0day linux 2.6 /dev/mem rootkit found, James E. Jones, 16:12
- Dotclear remote script execution, Sacha, 15:39
- [Full-disclosure] iDefense Security Advisory 07.11.07: Symantec AntiVirus symtdi.sys Local Privilege Escalation Vulnerability, iDefense Labs, 15:18
- Re: [Full-disclosure] iDefense Security Advisory 07.09.07: WinPcap NPF.SYS Local Privilege Escalation Vulnerability, KJK::Hyperion, 15:07
- [Full-disclosure] iDefense Security Advisory 07.11.07: Symantec Backup Exec RPC Remote Heap Overflow Vulnerability, iDefense Labs, 15:07
- Powered By Dvbbs Version 7.1.0 Sp1 By Pass, RaeD, 14:14
- SquirrelMail G/PGP Encryption Plug-in Remote Command Execution Vulnerability, does_not_exist, 13:52
- Re: [Full-disclosure] Advisory - Clam AntiVirus RAR File Handling Denial Of Service Vulnerability., Noam Rathaus, 13:21
- [Full-disclosure] Advisory - Clam AntiVirus RAR File Handling Denial Of Service Vulnerability., Metaeye SG, 13:10
- Re: [Full-disclosure] Advisory - Clam AntiVirus RAR File Handling Denial Of Service Vulnerability., Metaeye SG, 12:49
- rPSA-2007-0137-1 tshark wireshark, rPath Update Announcements, 11:46
- Advisory: Arbitrary kernel mode memory writes in AVG, john-lindsay, 11:36
- Re: [Full-disclosure] TippingPoint IPS Signature Evasion, 3APA3A, 11:36
- Low Risk Vulnerability in Active Directory, NGSSoftware Insight Security Research, 11:35
- SUN Java JNLP Overflow, Brett Moore, 11:04
- [ MDKSA-2007:145 ] - Updated wireshark packages fix multiple vulnerabilities, security, 11:04
- [Full-disclosure] [USN-482-1] OpenOffice.org vulnerability, Kees Cook, 06:54
- [Full-disclosure] durito: enVivo!CMS SQL injection, 3APA3A, 05:39
July 10, 2007
- Re: Re: [Eleytt] 7LIPIEC2007, gynvael, 20:19
- Multiple .NET Null Byte Injection Vulnerabilities, Paul Craig, 20:08
- XSS Tunnelling White Paper and Tool, Ferruh Mavituna, 19:57
- TippingPoint IPS Signature Evasion, Paul Craig, 19:47
- EEYE: Microsoft Publisher 2007 Arbitrary Pointer Dereference, eEye Advisories, 19:35
- [ MDKSA-2007:144 ] - Updated OpenOffice.org packages fix RTF import vulnerability, security, 17:03
- Re: Re: WinPcap NPF.SYS Privilege Elevation Vulnerability, mballano, 16:51
- [Full-disclosure] Portcullis Computer Security Ltd - Advisories, advisories, 16:29
- Re: [Full-disclosure] Internet Explorer 0day exploit, Gadi Evron, 16:29
- Re: Whitepaper - DNS pinning and web proxies, Amit Klein, 16:18
- Re: WinPcap NPF.SYS Privilege Elevation Vulnerability, Gerald Combs, 16:06
- SYMSA-2007-005: Vista Windows Firewall Incorrectly Applies Filtering to Teredo Interface, research, 15:24
- iDefense Security Advisory 07.09.07: IBM AIX libodm ODMPATH Stack Overflow Vulnerability, iDefense Labs, 14:20
- Whitepaper - DNS pinning and web proxies, Dafydd Stuttard, 14:09
- Regarding http://www.securityfocus.com/bid/24744, urtrapped9, 13:48
- Entertainment CMS Admin Login Bypass, mata, 13:38
- Flashbb <= 1.1.7 - Remote File Inclusion Exploit, mata, 13:38
- Announce: RFIDIOt PC/SC support - new release 0.1p (July 2007), Adam Laurie, 13:27
- [security bulletin] HPSBTU02233 SSRT071424 rev.1 - HP Tru64 UNIX Internet Express running Samba, Remote Arbitrary Code Execution or Local Unauthorized Privilege Elevation, security-alert, 13:05
- [ MDKSA-2007:143 ] - Updated mplayer packages fix buffer overflow remote vulnerabilities, security, 12:54
- WinPcap NPF.SYS Privilege Elevation Vulnerability, mballano, 12:33
- [Full-disclosure] [USN-481-1] ImageMagick vulnerabilities, Kees Cook, 11:18
- [Full-disclosure] Internet Explorer 0day exploit, Thor Larholm, 02:10
July 09, 2007
- EEYE: Sun Java WebStart JNLP Stack Buffer Overflow Vulnerability, eEye Advisories, 18:57
- [Full-disclosure] iDefense Security Advisory 07.09.07: Multiple Vendor GIMP Multiple Integer Overflow Vulnerabilities, iDefense Labs, 18:25
- [Full-disclosure] iDefense Security Advisory 07.09.07: WinPcap NPF.SYS Local Privilege Escalation Vulnerability, iDefense Labs, 17:54
- Re: Re: [Eleytt] 7LIPIEC2007, michal . bucko, 17:22
- Re: [Eleytt] 7LIPIEC2007, Michal Zalewski, 15:59
- Another You tube clone script vulnerability, Samael De Icaro, 12:39
- Re: An Auction Site for Vulnerabilities, Radoslav Dejanović, 12:39
- CodeIgniter 1.5.3 vulnerabilities, Åukasz Pilorz, 12:28
- PHP Comet-Server, o_0p, 12:17
- [Eleytt] 7LIPIEC2007, sapheal, 12:06
- [Full-disclosure] Firefox wyciwyg:// cache zone bypass, Michal Zalewski, 11:35
July 05, 2007
- [Full-disclosure] [ GLSA 200707-05 ] Webmin, Usermin: Cross-site scripting vulnerabilities, Raphael Marichez, 19:56
- AsteriDex (Asterisk / Trixbox) remote code execution, Carl Livitt, 17:35
- SAP DB Web Server Stack Overflow, NGSSoftware Insight Security Research, 15:49
- [VulnWatch] EnjoySAP, SAP GUI for Windows - Stack Overflow, NGSSoftware Insight Security Research, 15:38
- Internet Communication Manager Denial Of Service Attack, NGSSoftware Insight Security Research, 15:38
- SAP Internet Graphics Server XSS and Heap Overflow, NGSSoftware Insight Security Research, 15:38
- SAP Message Server Heap Overflow, NGSSoftware Insight Security Research, 15:27
- EnjoySAP, SAP GUI for Windows - Stack Overflow, NGSSoftware Insight Security Research, 15:16
- Redirection Vulnerability in wp-pass.php, WordPress 2.2.1, Nick S. Coblentz, 15:04
- Re: Serious holes affecting JFFNMS, not, 14:54
- [security bulletin] HPSBPI02228 SSRT071404 rev.1 - HP Instant Support - Driver Check Running on Windows XP, Remote Unauthorized Access, security-alert, 14:43
- Session fixation in Zen Cart CMS, tomaz . bratusa, 14:21
- [ MDKSA-2007:142 ] - Updated apache packages fix multiple security issues, security, 14:21
- [VulnWatch] EnjoySAP, SAP GUI for Windows - Heap Overflow, NGSSoftware Insight Security Research, 14:11
- [ MDKSA-2007:141 ] - Updated apache packages fix multiple security issues, security, 14:10
- [ MDKSA-2007:140 ] - Updated apache packages fix multiple security issues, security, 13:59
- [ MDKSA-2007:139 ] - Updated MySQL packages fix multiple security issues, security, 13:59
- [Full-disclosure] [NETRAGARD SECURITY ADVISORY][Maia Mailguard 1.0.2 Arbitrary Code Execution][NETRAGARD-20070628], Netragard Security Advisories, 13:18
July 04, 2007
- [Full-disclosure] [USN-480-1] Gimp vulnerability, Kees Cook, 20:58
- PacSec 2007 Call For Papers (Nov. 29/30, deadline July 27), Dragos Ruiu, 14:04
- Multiple Remote unauthenticated stack overflows in Asterisk chan_sip.c, NGSSoftware Insight Security Research, 14:04
- Fujitsu-Siemens PRIMERGY BX300 Switch Blade Information Disclosure, RedTeam Pentesting GmbH, 13:54
- SQL Injection in SaphpLesson2.0 "show.php", Sw33t . h4cK3r, 13:54
- Fujitsu-Siemens ServerView Remote Command Execution, RedTeam Pentesting GmbH, 13:43
- SQL Injection in saphp "showcat.php", Sw33t . h4cK3r, 13:43
- Re: Remote File Include In Script SoftNews Media Group, foster, 13:32
July 03, 2007
- MySQLDumper vulnerability: Bypassing Apache based access control possible, bugtraq, 19:42
- [Full-disclosure] [ GLSA 200707-04 ] GNU C Library: Integer overflow, Raphael Marichez, 18:28
- [ MDKSA-2007:138 ] - Updated kdebase packages fix Flash Player interaction vulnerability, security, 18:18
- Cross Site Scripting in Oliver Library Management System, A. R., 14:59
- Re[2]: Light Blog 4.1 XSS Vulnerability, BlackHawk, 13:55
- [Full-disclosure] Security on AIR: Local file access through JavaScript, fukami, 13:34
- Two Unpublished IE Cases, LIUDIEYU dot COM, 13:23
- [Full-disclosure] This pages crashes browsers, Geo., 11:25
- [Full-disclosure] Buffer overflow in HP Instant Support Driver Check (SDD) ActiveX control, NGSSoftware Insight Security Research, 09:31
- [Full-disclosure] Moodle XSS / Liesbeth base CMS sensitive information disclosure, 3APA3A, 06:47
July 02, 2007
- [Full-disclosure] [ GLSA 200707-03 ] Evolution: User-assisted remote execution of arbitrary code, Raphael Marichez, 19:02
- [Full-disclosure] [ GLSA 200707-02 ] OpenOffice.org: Two buffer overflows, Raphael Marichez, 18:52
- High Risk Flaw in Sun's Java Web Start, NGSSoftware Insight Security Research, 17:40
- AV Arcade 2.1b (COOKIE[ava_userid]) Get Admin Rights, teh_lost_byte, 15:55
- Re: Light Blog 4.1 XSS Vulnerability, prodigy . zero, 15:44
- AV Arcade 2.1b (view_page.php) Remote SQL Injection, teh_lost_byte, 15:44
- PHPDirector <= 0.21 (SQL injection/Upload SHELL) Remote Vulnerabilities, teh_lost_byte, 15:33
- FreeDomain.co.nr Clone SQL Injection, teh_lost_byte, 15:22
- eTicket v.1.5.1.1 Multiple Cross-Site Scripting, darkz . gsa, 15:11
- akocomment SQL INJECTION (all version), Emanuele Gentili, 14:50