Bugtraq (thread)

[HSC Security Group] Multiple CSRF in Joomla all versions - Complete compromise, zinho, 2007/12/31
Re: TalkBack 2.2.7 Multiple Remote File Inclusion Vulnerabilities, oldguy, 2007/12/31
Instant Softwares DatingSite SQL Injection, The-0utl4w-noreply, 2007/12/31
LiveCart Multiple Cross-Site Scripting Vulnerabilities, DoZ, 2007/12/31
milliscripts (dir.php) Cross-Site Scripting Vulnerability, sys-project, 2007/12/31
Bitweaver source code disclosure, arbitrary file upload, admin, 2007/12/31
Fingerprints in Astaro Security Gateway v7.1, morin . josh, 2007/12/31
[Full-disclosure] [ GLSA 200712-25 ] OpenOffice.org: User-assisted arbitrary code execution, Pierre-Yves Rofes, 2007/12/30
[Full-disclosure] [ GLSA 200712-24 ] AMD64 x86 emulation GTK+ library: User-assisted execution of arbitrary code, Robert Buchholz, 2007/12/30
[Full-disclosure] [ GLSA 200712-23 ] Wireshark: Multiple vulnerabilities, Robert Buchholz, 2007/12/30
[Full-disclosure] [ GLSA 200712-22 ] Opera: Multiple vulnerabilities, Pierre-Yves Rofes, 2007/12/30
CCMS v3.1 Demo <= SQL Injection Vulnerability 0day, pawel2827, 2007/12/29
CuteNews Arbitrary File Download AllVersion, pawel2827, 2007/12/29
TK53 Advisory #2: Multiple vulnerabilities in ClamAV, Lolek of TK53, 2007/12/29
[Full-disclosure] [ GLSA 200712-21 ] Mozilla Firefox, SeaMonkey: Multiple vulnerabilities, Robert Buchholz, 2007/12/29
[Full-disclosure] [ GLSA 200712-20 ] ClamAV: Multiple vulnerabilities, Robert Buchholz, 2007/12/29
[Full-disclosure] [ GLSA 200712-19 ] Syslog-ng: Denial of Service, Robert Buchholz, 2007/12/29
[Full-disclosure] [ GLSA 200712-18 ] Multi-Threaded DAAP Daemon: Multiple vulnerabilities, Robert Buchholz, 2007/12/29
[Full-disclosure] [ GLSA 200712-17 ] exiftags: Multiple vulnerabilities, Pierre-Yves Rofes, 2007/12/29
[Full-disclosure] [ GLSA 200712-16 ] Exiv2: Integer overflow, Pierre-Yves Rofes, 2007/12/29
[Full-disclosure] [ GLSA 200712-15 ] libexif: Multiple vulnerabilities, Pierre-Yves Rofes, 2007/12/29
[Full-disclosure] Buffer-overflow in CoolPlayer 217, Luigi Auriemma, 2007/12/28
[SECURITY] [DSA 1441-1] New peercast packages fix arbitrary code execution, Thijs Kinkhorst, 2007/12/28
[SECURITY] [DSA 1439-1] New typo3-src packages fix SQL injection, Thijs Kinkhorst, 2007/12/28
[SECURITY] [DSA 1405-3] New zope-cmfplone packages fix regression, Thijs Kinkhorst, 2007/12/28
[SECURITY] [DSA 1438-1] New tar packages fix several vulnerabilities, Florian Weimer, 2007/12/28
2z-project 0.9.6.1 Multiple Security Vulnerabilities, Digital Security Research Group [DSecRG], 2007/12/28
FAQMasterFlexPlus multiple vulnerabilities, Juan Galiana, 2007/12/28
OpenBiblio 0.5.2-pre4 and prior multiple vulnerabilities, Juan Galiana, 2007/12/28
[Full-disclosure] OpenBiblio 0.5.2-pre4 and prior multiple vulnerabilities, Juan Galiana, 2007/12/28
[Full-disclosure] Multiple vulnerabilities in libnemesi 0.6.4-rc1, Luigi Auriemma, 2007/12/27
[Full-disclosure] Multiple vulnerabilities in Feng 0.1.15, Luigi Auriemma, 2007/12/27
[Full-disclosure] Buffer-overflow in Extended Module Player 2.5.1, Luigi Auriemma, 2007/12/27
[Full-disclosure] rIP BETA - reverse IP tool, disfigure, 2007/12/27
PHP -> set_time_limit, brancohat, 2007/12/27
[security bulletin] HPSBGN02298 SSRT071502 rev.2 - HP Quick Launch Button (QLB) Running on Windows, Remote Execution of Arbitrary Code, Gain Privileged Access, security-alert, 2007/12/27
Latest round of web hacking incidents for 2007 & Project news, Ofer Shezaf, 2007/12/27
IPortalX Forums Cross-Site Scripting Vulnerability, DoZ, 2007/12/27
XZero Community Classifieds <= v4.95.11 LFI & SQL Injection, office, 2007/12/27
Blakord Portal <= Beta 1.3.A (all modules) Blind Sql Injection, sys-project, 2007/12/27
Bid 24744 ?, balrog, 2007/12/26
Confixx Professional RFİ, erne, 2007/12/26
TotalPlayer 3.0 .m3u crash, david130490, 2007/12/25
- Re: TotalPlayer 3.0 .m3u crash, Luigi Auriemma, 2007/12/27
- Re: TotalPlayer 3.0 .m3u crash, Luigi Auriemma, 2007/12/27
- Re: Re: TotalPlayer 3.0 .m3u crash, david130490, 2007/12/27
- Re: Re: Re: TotalPlayer 3.0 .m3u crash, david130490, 2007/12/27
Multiple vulnerabilities in RUNCMS 1.6 by DSecRG, Digital Security Research Group, 2007/12/25
Double directory traversal in ImgSvr 0.6.21, Luigi Auriemma, 2007/12/24
[Full-disclosure] Unicode buffer-overflow in Zoom Player 6.00b2, Luigi Auriemma, 2007/12/24
Buffer-overflow and format string in VideoLAN VLC 0.8.6d, Luigi Auriemma, 2007/12/24
Update: Clients buffer-overflow in Live for Speed 0.5X10, Luigi Auriemma, 2007/12/24
SimpleForum <= 4.6.2 - Cross-Site Scripting Vulnerability, sys-project, 2007/12/24
[CVE-2007-5342] Apache Tomcat's default security policy is too open, Mark Thomas, 2007/12/24
PHP <= 5.2.5 Safe Mode Bypass, admin, 2007/12/24
- Re: PHP <= 5.2.5 Safe Mode Bypass, shsuff, 2007/12/24
- Re: Re: PHP <= 5.2.5 Safe Mode Bypass, Alireza Hassani, 2007/12/26
Jupiter Cms Multiple Vulnerabilities, admin, 2007/12/24
[waraxe-2007-SA#060] - Sensitive info disclosure in CuteNews <= 1.4.5, come2waraxe, 2007/12/24
pdflib long filename multiple bufferoverflows, poplix, 2007/12/24
Tikiwiki 1.9.8.3 tiki-special_chars.php XSS Vulnerability, Mesut Timur, 2007/12/24
[ISecAuditors Security Advisories] Tikiwiki CMS is vulnerable to path traversal attack, ISecAuditors Security Advisories, 2007/12/24
Logaholic Web Analytics Software, malibu . r, 2007/12/24
[HSC] Dokeos Multiple Cross-Site Scripting Vulnerabilities, DoZ, 2007/12/22
- Re: [HSC] Dokeos Multiple Cross-Site Scripting Vulnerabilities, yannick . warnier, 2007/12/24
Microsoft Office Publisher, jplopezy, 2007/12/22
- Re: Microsoft Office Publisher, fagian, 2007/12/26
My Blog Rfi, beenudel1986, 2007/12/22
America Online AOL Instant Messenger AIM6.0 or 6.5 or higher XSS remote execution, evanchik, 2007/12/21
Word 2003 denial of service, jplopezy, 2007/12/21
HPSBGN2301 SSRT071508 rev.1 - HP Software Update Running on Windows, Remote Execution of Arbitrary Code, Gain Privileged Access, security-alert, 2007/12/21
[CAID 35970]: CA Products That Embed Ingres Authentication Vulnerability, Williams, James K, 2007/12/21
[Full-disclosure] Buffer-overflow in WinUAE 1.4.4, Luigi Auriemma, 2007/12/21
Cryptome: NSA has real-time access to Hushmail servers, Juha-Matti Laurio, 2007/12/21
- RE: Cryptome: NSA has real-time access to Hushmail servers, Jim Harrison, 2007/12/21
  - RE: Cryptome: NSA has real-time access to Hushmail servers, M. Burnett, 2007/12/26
- RE: Cryptome: NSA has real-time access to Hushmail servers, Thor (Hammer of God), 2007/12/21
- RE: Cryptome: NSA has real-time access to Hushmail servers, Juha-Matti Laurio, 2007/12/26
  - Re: Cryptome: NSA has real-time access to Hushmail servers, Valdis . Kletnieks, 2007/12/27
    - Re: Cryptome: NSA has real-time access to Hushmail servers, Kurt Buff, 2007/12/27
    - Re: Cryptome: NSA has real-time access to Hushmail servers, Seth, 2007/12/31
    - RE: Cryptome: NSA has real-time access to Hushmail servers, Kevin Reiter, 2007/12/31
    - Re: Cryptome: NSA has real-time access to Hushmail servers, Steve Shockley, 2007/12/27
    - Re: Cryptome: NSA has real-time access to Hushmail servers, J. Oquendo, 2007/12/31
    - RE: Cryptome: NSA has real-time access to Hushmail servers, Thor (Hammer of God), 2007/12/31
    - RE: Cryptome: NSA has real-time access to Hushmail servers, Craig Wright, 2007/12/31
    - Re: Cryptome: NSA has real-time access to Hushmail servers, Rob Thompson, 2007/12/31
    - Re: Cryptome: NSA has real-time access to Hushmail servers, mark seiden-via mac, 2007/12/31
    - Re: Cryptome: NSA has real-time access to Hushmail servers, Jay Hennigan, 2007/12/31
- Re: Re: Cryptome: NSA has real-time access to Hushmail servers, gb, 2007/12/31
- RE: Cryptome: NSA has real-time access to Hushmail servers, Juha-Matti Laurio, 2007/12/31
Moodle SQL Injection, root, 2007/12/21
- Re: Moodle SQL Injection, foo, 2007/12/22
- Re: Re: Moodle SQL Injection, bar, 2007/12/22
CFP CISIS '08, hjan, 2007/12/21
[Full-disclosure] [USN-559-1] MySQL vulnerabilities, Jamie Strandboge, 2007/12/21
Re: Design flaw in AS3 socket handling allows port probing, fukami, 2007/12/20
[SECURITY] [DSA 1436-1] New Linux 2.6.18 packages fix several vulnerabilities, dann frazier, 2007/12/20
Re: Morcego CMS <= 0.9.6 Remote File Inclue Vulnerability, antonio, 2007/12/20
- Re: Morcego CMS <= 0.9.6 Remote File Inclue Vulnerability, antonio, 2007/12/20
PHP iCalendar <= 2.24 - Cross-Site Scripting Vulnerability, sys-project, 2007/12/20
[security bulletin] HPSBUX02284 SSRT071483 rev.4 - HP-UX Running Java JRE and JDK, Remote Unauthorized Access, security-alert, 2007/12/20
- Woltlab Burning Board 1.0.2 SQL-Injection Vulnerability, nbbn, 2007/12/20
[security bulletin] HPSBUX02295 SSRT071333 rev.1 - HP-UX Running rpc.yppasswdd, Remote Denial of Service (DoS), security-alert, 2007/12/20
SiteScape Forum TCL injection, lolo lolo, 2007/12/20
[security bulletin] HPSBTU02300 SSRT071452 rev.1 - HP Tru64 UNIX running FFM, Local Denial of Service (Dos), security-alert, 2007/12/20
[Aria-Security.net] ABI Version 3.7.9.17 Remote SQL Injection, The-0utl4w-noreply, 2007/12/20
Re: Re: NETGEAR WGT624 Wireless DSL router default user name/password vulnerability, mj, 2007/12/20
iSupport v1.8 Local file include vulnerability, ahcrew, 2007/12/20
Black Hat Briefings Call for Papers and Happy Happy Joy Joy, jmoss, 2007/12/20
xeCMS 1.x.x Remote File Disclosure Vulnerability., p4imi0, 2007/12/19
HP laptops Software Update tool vulnerability, porkythepig, 2007/12/19
Array overflow in id3lib (devel CVS), Luigi Auriemma, 2007/12/19
SYMSA-2007-015, research, 2007/12/19
Cisco Security Advisory: Application Inspection Vulnerability in Cisco Firewall Services Module, Cisco Systems Product Security Incident Response Team, 2007/12/19
smbfs and apache+php source code disclosure, Maciej Gąsiorowski, 2007/12/19
[Full-disclosure] [USN-558-1] Linux kernel vulnerabilities, Kees Cook, 2007/12/19
[Full-disclosure] [USN-557-1] GD library vulnerability, Jamie Strandboge, 2007/12/18
[Full-disclosure] [ GLSA 200712-14 ] CUPS: Multiple vulnerabilities, Robert Buchholz, 2007/12/18
[Full-disclosure] [ GLSA 200712-13 ] E2fsprogs: Multiple buffer overflows, Robert Buchholz, 2007/12/18
AST-2007-027 - Database matching order permits host-based authentication to be ignored, Security Officer, 2007/12/18
[Full-disclosure] Google Toolbar Dialog Spoofing Vulnerability, avivra, 2007/12/18
Tiger Team: New TV series about pen testers airing on CourtTV Dec 25 11 pm, blackredyellow, 2007/12/18
- Re: Tiger Team: New TV series about pen testers airing on CourtTV Dec 25 11 pm, blackredyellow, 2007/12/27
rPSA-2007-0269-1 kernel, rPath Update Announcements, 2007/12/18
[USN-556-1] Samba vulnerability, Kees Cook, 2007/12/18
[Full-disclosure] iDefense Security Advisory 12.18.07: ClamAV libclamav MEW PE File Integer Overflow Vulnerability, iDefense Labs, 2007/12/18
[Full-disclosure] iDefense Security Advisory 12.17.07: Apple Mac OS X mount_smbfs Stack Based Buffer Overflow Vulnerability, iDefense Labs, 2007/12/18
[security bulletin] HPSBST02299 SSRT071506 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS07-063 to MS07-069, security-alert, 2007/12/18
SyScan'08 Call For Paper/Training, organiser@syscan.org, 2007/12/18
iMesh <= 7.1.0.x IMWebControl Class (IMWeb.dll 7.0.0.x) remote exploit, retrog, 2007/12/18
Multiple xss in mambo 4.6.2, beenudel1986, 2007/12/18
- Re: Multiple xss in mambo 4.6.2, Hanno BÃck, 2007/12/27
Rosoft Media Player 4.1.7 crash, jplopezy, 2007/12/18
[Full-disclosure] ZDI-07-079: Hewlett-Packard HP-UX swagentd Buffer Overflow Vulnerability, zdi-disclosures, 2007/12/17
[Full-disclosure] ZDI-07-078: St. Bernard Open File Manager Heap Overflow Vulnerability, zdi-disclosures, 2007/12/17
[Full-disclosure] ZDI-07-077: Trend Micro ServerProtect StRpcSrv.dll Insecure Method Exposure Vulnerability, zdi-disclosures, 2007/12/17
rPSA-2007-0268-1 kdebase, rPath Update Announcements, 2007/12/17
Apple OS X Software Update Remote Command Execution, Moritz Jodeit, 2007/12/17
Uber Uploader <= 5.3.6 Remote File Upload Vulnerability, sys-project, 2007/12/17
- Re: Uber Uploader <= 5.3.6 Remote File Upload Vulnerability, recklessb, 2007/12/18
SurgeMail v.38k4 webmail Host header crash, retrog, 2007/12/17
RaidenHTTPD 2.0.19 ulang cmd exec poc exploit, retrog, 2007/12/17
rPSA-2007-0266-1 tetex tetex-afm tetex-dvips tetex-fonts tetex-latex tetex-xdvi, rPath Update Announcements, 2007/12/17
[Full-disclosure] Heap overflow in PeerCast 0.1217, Luigi Auriemma, 2007/12/17
PHP Security Framework: Vuln and Security Bypass, gmdarkfig, 2007/12/17
release uhooker v1.3, Hernan Ochoa, 2007/12/17
jetAudio 7.0.5 COWON Media Center MP4 Stack Overflow, gforce, 2007/12/17
neuron news1.0 Multiple Remote Vulnerabilities (sql injection/xss), hadihadi_zedehal_2006, 2007/12/17
ZSA-2007-029: syslog-ng Denial of Service, Balazs Scheidler, 2007/12/17
- Re: [syslog-ng] ZSA-2007-029: syslog-ng Denial of Service, Balazs Scheidler, 2007/12/17
Wordpress - Broken Access Control, th3 . r00k . nospam, 2007/12/15
- Re: Wordpress - Broken Access Control, otto, 2007/12/17
  - Re: Wordpress - Broken Access Control, Abel Cheung, 2007/12/19
- Re: Wordpress - Broken Access Control, th3 . r00k . nospam, 2007/12/18
- Re: Wordpress - Broken Access Control, otto, 2007/12/19
PHP RPG - Sql Injection and Session Information Disclosure., th3 . r00k . nospam, 2007/12/15
ClubHack2007: Presentation are online now, `ClubHack `, 2007/12/15
Oreon/Centreon - Multiple Remote File Inclusion, th3 . r00k . nospam, 2007/12/15
Anon Proxy Server - Remote Code Execution, th3 . r00k . nospam, 2007/12/15
[security bulletin] HPSBGN02298 SSRT071502 rev.1 - HP Quick Launch Button (QLB) Running on Windows, Remote Execution of Arbitrary Code, Gain Privileged Access, security-alert, 2007/12/15
Phpay - Local File Inclusion, th3 . r00k . nospam, 2007/12/15
[Full-disclosure] BackTrack 3 Beta Released, Mati Aharoni, 2007/12/14
POC for samba send_mailslot(), x 86, 2007/12/14
ANNOUNCE: SquirrelMail 1.4.13 Released, Jon Angliss, 2007/12/14
[ MDKSA-2007:246 ] - Updated Firefox packages fix multiple vulnerabilities, security, 2007/12/14
[ISR] - Novell Groupwise client remote stack overflow silently patched., ISR-noreply, 2007/12/14
HPSBUX02296 SSRT071504 rev.2 - HP-UX Running OpenSSL, Remote Execution of Arbitrary Code, security-alert, 2007/12/14
PHP MySQL Banner Exchange 2.2.1 remote mysql database bug, arsalan1991, 2007/12/14
- Re: PHP MySQL Banner Exchange 2.2.1 remote mysql database bug, theredc0ders, 2007/12/17
- Re: Re: PHP MySQL Banner Exchange 2.2.1 remote mysql database bug, arsalan1991, 2007/12/18
Re: AW: MS Office 2007: Digital Signature does not protect Meta-Data, webmaster@networkdefense.biz, 2007/12/13
+ Trivantis CourseMill Enterprise Learning Management System - SQL Injection - CVE-2007-6338, swhite, 2007/12/13
[ MDKSA-2007:245 ] - Updated wpa_supplicant package fixes remote denial of service, security, 2007/12/13
[Full-disclosure] [ GLSA 200712-12 ] IRC Services: Denial of Service, Pierre-Yves Rofes, 2007/12/13
[Full-disclosure] [ GLSA 200712-11 ] Portage: Information disclosure, Pierre-Yves Rofes, 2007/12/13
SECURITY: 1.4.12 Package Compromise, Jon Angliss, 2007/12/13
MS Office 2007: Target of Hyperlinks not covered by Digital Signatures, poehls, 2007/12/13
Hosting Controller - Multiple Security Bugs (Extremely Critical), admin, 2007/12/13
SQL MKPortal M1.1 Rc1, Sw33t . h4cK3r, 2007/12/13
[security bulletin] HPSBUX02294 SSRT071451 rev.1 - HP-UX Running DCE, Remote Denial of Service (DoS), security-alert, 2007/12/13
OpenOffice: Duplicated, Unprotected Certificate Information shown in Signed ODF Documents, poehls, 2007/12/13
[security bulletin] HPSBUX02296 SSRT071504 rev.1 - HP-UX Running OpenSSL, Remote Execution of Arbitrary Code, security-alert, 2007/12/13
QK SMTP Server 3 - Denial of service, jplopezy, 2007/12/13
[Full-disclosure] [USN-550-3] Cairo regression, Kees Cook, 2007/12/13
[Full-disclosure] Fwd: Websense 6.3.1 Filtering Bypass, The Security Community, 2007/12/12
- RE: [Full-disclosure] Fwd: Websense 6.3.1 Filtering Bypass, Hubbard, Dan, 2007/12/13
rPSA-2007-0264-1 mod_dav_svn subversion, rPath Update Announcements, 2007/12/12
[Full-disclosure] iDefense Security Advisory 12.11.07: Microsoft DirectX 7 and 8 DirectShow Stack Buffer Overflow Vulnerability, iDefense Labs, 2007/12/12
[Full-disclosure] iDefense Security Advisory 12.11.07: Microsoft Internet Explorer JavaScript setExpression Heap Corruption Vulnerability, iDefense Labs, 2007/12/12
MS Office 2007: Digital Signature does not protect Meta-Data, poehls, 2007/12/12
- AW: MS Office 2007: Digital Signature does not protect Meta-Data, Naujoks, Hans-Dietmar, 2007/12/13
  - Re: MS Office 2007: Digital Signature does not protect Meta-Data, Henrich C. Poehls, 2007/12/14
    - AW: MS Office 2007: Digital Signature does not protect Meta-Data, Naujoks, Hans-Dietmar, 2007/12/14
    - Re: MS Office 2007: Digital Signature does not protect Meta-Data, Henrich C. Poehls, 2007/12/19
Cpanel Vulnerability?, Francisco Pecorella, 2007/12/12
- Re: Cpanel Vulnerability?, Charles Hardin, 2007/12/12
- Re: Re: Cpanel Vulnerability?, gdfuego, 2007/12/12
[SECURITY] [DSA 1428-2] New Linux 2.6.18 packages fix several vulnerabilities, dann frazier, 2007/12/12
[ MDKSA-2007:244 ] - Updated samba packages fix vulnerability, security, 2007/12/12
[Full-disclosure] ZDI-07-075: Microsoft Internet Explorer Element Tags Vulnerability, zdi-disclosures, 2007/12/11
[Full-disclosure] ZDI-07-076: Microsoft Windows Message Queuing Service Stack Overflow Vulnerability, zdi-disclosures, 2007/12/11
ZDI-07-074: Microsoft Internet Explorer Node Manipulation Memory Corruption, zdi-disclosures, 2007/12/11
[Full-disclosure] ZDI-07-073: Microsoft Internet Explorer setExpression Vulnerability, zdi-disclosures, 2007/12/11
[Full-disclosure] TOP 10 Vulnerability Trends for 2008, Sowhat, 2007/12/11
Black Hat Briefings Call for Papers, jmoss, 2007/12/11
HP notebooks remote code execution vulnerability (multiple series), porkythepig, 2007/12/11
SupportSuite 3.11.01~ Multiple file ~ PHP SELF XSS, imei Addmimistrator, 2007/12/11
rPSA-2007-0262-1 e2fsprogs, rPath Update Announcements, 2007/12/11
[ MDKSA-2007:241 ] - Updated tomcat5 packages fix multiple vulnerabilities, security, 2007/12/11
[SECURITY] [DSA 1481-1] New Linux 2.6.18 packages fix several vulnerabilities, dann frazier, 2007/12/11
[Full-disclosure] TrendMicro AntiVirus UUE Processing Vulnerability, Sowhat, 2007/12/11
[ MDKSA-2007:243 ] - Updated MySQL packages fix multiple vulnerabilities, security, 2007/12/11
RE: TCP Port randomization paper, Amit Klein, 2007/12/11
- Re: TCP Port randomization paper, Fernando Gont, 2007/12/12
- Re: RE: TCP Port randomization paper, Amit Klein, 2007/12/18
[ MDKSA-2007:242 ] - Updated e2fsprogs packages fix vulnerability, security, 2007/12/11
[Full-disclosure] ZDI-07-072: Novell Netmail AntiVirus Agent Multiple Overflow Vulnerabilities, zdi-disclosures, 2007/12/10
WASC Announcement: The Script Mapping Project Results and Call for Participation, announcements, 2007/12/10
Dell / Dell Financial Services - Contact, Justin@InfoTek, 2007/12/10
- Re: Dell / Dell Financial Services - Contact, Juha-Matti Laurio, 2007/12/10
[Full-disclosure] [USN-550-2] Cairo regression, Kees Cook, 2007/12/10
[Full-disclosure] [ GLSA 200712-10 ] Samba: Execution of arbitrary code, Pierre-Yves Rofes, 2007/12/10
[Full-disclosure] Multiple vulnerabilities in BadBlue 2.72b, Luigi Auriemma, 2007/12/10
[Full-disclosure] Filesystem access in DOSBox 0.72, Luigi Auriemma, 2007/12/10
[Full-disclosure] Multiple vulnerabilities in BarracudaDrive 3.7.2, Luigi Auriemma, 2007/12/10
WordPress Charset SQL injection vulnerability (re-resend), Abel Cheung, 2007/12/10
[Full-disclosure] rPSA-2007-0261-1 samba samba-swat, rPath Update Announcements, 2007/12/10
Re: Windows binary of "GSview 4.8" contain vulnerable zlib (CAN-2005-2096) and vulnerable bz2lib (CAN-2005-0758 & CAN-2005-0953), Stefan Kanthak, 2007/12/10
[SECURITY] Buffer overrun in send_mailslot(), Gerald (Jerry) Carter, 2007/12/10
Advisory: Websense XSS Vulnerability, Liquidmatrix Security Digest, 2007/12/10
[Full-disclosure] WordPress Charset SQL injection vulnerability (resend), Abel Cheung, 2007/12/10
Secunia Research: Samba "send_mailslot()" Buffer Overflow Vulnerability, Secunia Research, 2007/12/10
Falt4 CMS Security Report/Advisory, Mesut Timur, 2007/12/10
squids ICAP implementation lacks a defer check when reading from ICAP server, Martin Huter, 2007/12/10
SQL injection - GestDownV1.00Beta, bebe, 2007/12/10
bttlxeForum Multiple SQL Injection And Cross Site Scripting, noreply, 2007/12/10
Security and hacking papers, Ork, 2007/12/10
Bitweaver XSS & SQL Injection Vulnerability, DoZ, 2007/12/10
CVE-2007-6205, Hanno BÃck, 2007/12/10
Call for Papers - Security and High Performance Computing System 2008, shpcs08, 2007/12/10
Flat PHP Board <= 1.2 Multiple Vulnerabilities, kingoftheworld92, 2007/12/10
Unsanitized scripting in RoundCube webmail, Tomas Kuliavas, 2007/12/10
Two vulnerabilities in SquirrelMail GPG plugin, Tomas Kuliavas, 2007/12/10
webSPELL 4.01.02 (calendar.php, usergallery.php) XSS Vulnerability, brainheadbrainhead, 2007/12/10
[Full-disclosure] WordPress Charset SQL injection vulnerability, Abel Cheung, 2007/12/10
Lotfian.com DATABASE DRIVEN TRAVEL SITE Multiple SQL Injection, no-reply, 2007/12/10
[Full-disclosure] Advisory: Websense XSS Vulnerability, Liquidmatrix Security Digest, 2007/12/10
[Full-disclosure] The Cookie Tools v0.3 -- first public release, michele dallachiesa, 2007/12/10
- Re: [Full-disclosure] The Cookie Tools v0.3 -- first public release, coderman, 2007/12/11
[Full-disclosure] [ GLSA 200712-09 ] Ruby-GNOME2: Format string error, Pierre-Yves Rofes, 2007/12/09
[Full-disclosure] [ GLSA 200712-08 ] AMD64 x86 emulation Qt library: Multiple vulnerabilities, Pierre-Yves Rofes, 2007/12/09
[Full-disclosure] [ GLSA 200712-07 ] Lookup: Insecure temporary file creation, Pierre-Yves Rofes, 2007/12/09
[Full-disclosure] [ GLSA 200712-06 ] Firebird: Multiple buffer overflows, Pierre-Yves Rofes, 2007/12/09
[Full-disclosure] [ GLSA 200712-05 ] PEAR::MDB2: Information disclosure, Pierre-Yves Rofes, 2007/12/09
[Full-disclosure] [ GLSA 200712-03 ] GNU Emacs: Multiple vulnerabilities, Pierre-Yves Rofes, 2007/12/09
[Full-disclosure] [ GLSA 200712-04 ] Cairo: User-assisted execution of arbitrary code, Pierre-Yves Rofes, 2007/12/09
Media Player Classic 6.4.9 MP4 Stack Overflow 0-day, gforce, 2007/12/08
- Message not available
  - Re: Media Player Classic 6.4.9 MP4 Stack Overflow 0-day, Rob Thompson, 2007/12/10
- Re: Media Player Classic 6.4.9 MP4 Stack Overflow 0-day, Matthew Leeds, 2007/12/12
Windows media player 6.4 MP4 Stack Overflow 0-day, gforce, 2007/12/08
Nullsoft Winamp MP4 tags Stack Overflow, gforce, 2007/12/08
[Full-disclosure] [USN-555-1] e2fsprogs vulnerability, Kees Cook, 2007/12/08
[Full-disclosure] Upload directory traversal in Easy File Sharing 4.5, Luigi Auriemma, 2007/12/07
[Full-disclosure] Multiple vulnerabilities in Firefly Media Server (mt-daapd) 2.4.1 / SVN 1699, Luigi Auriemma, 2007/12/07
Two vulnerabilities in Simple HTTPD 1.38, Luigi Auriemma, 2007/12/07
Limited upload directory traversal in HTTP File Server 2.2a / 2.3 beta (build #146), Luigi Auriemma, 2007/12/07
[ MDKSA-2007:240 ] - Updated libnfsidmap packages fix username lookup flaw, security, 2007/12/07
Kvaliitti WebDoc 3.0 CMS SQL Injection vulnerability, jaakkoNOSPAM, 2007/12/07
R7-0031: JFreeChart Image Map Cross-Site Scripting Vulnerabilities, advisory, 2007/12/07
Re: Phorm v3.0 Remote File Upload Vulnerability, security curmudgeon, 2007/12/07
[ISecAuditors Security Advisories] wwwstats is vulnerable to Persistent XSS, ISecAuditors Security Advisories, 2007/12/07
Re: BellaBiblio Admin Login Bypass, security curmudgeon, 2007/12/07
Re: Friend Script 2.5 - 2.4 Remote File İnclude, security curmudgeon, 2007/12/07
Re: RIG Image Gallery (dir_abs_src) Remote File Include Vulnerability, security curmudgeon, 2007/12/07
[ MDKSA-2007:239 ] - Updated heimdal packages fix potential vulnerability, security, 2007/12/07
Potential SQL injection vulnerability in Apache::AuthCAS, Matthias Bethke, 2007/12/07
[CAID 35724, 35725, 35726]: CA BrightStor ARCserve Backup Multiple Vulnerabilities, Williams, James K, 2007/12/07
[Full-disclosure] rPSA-2007-0260-1 firefox, rPath Update Announcements, 2007/12/06
ZDI-07-071: HP OpenView Network Node Manager Multiple CGI Buffer Overflows, zdi-disclosures, 2007/12/06
[Full-disclosure] ZDI-07-070: Skype skype4com URI Handler Remote Heap Corruption Vulnerability, zdi-disclosures, 2007/12/06
[ MDKSA-2007:238 ] - Updated liblcms package fixes buffer overflow, security, 2007/12/06
[Full-disclosure] [USN-554-1] teTeX and TeX Live vulnerabilities, Jamie Strandboge, 2007/12/06
[Security Advisorie] OpenNewsletter v2.5 Multipe XSS Attacks, Sarasa, 2007/12/06
[XSS] OpenNewsletter v2.5 Multipe XSS Attacks, bugtraq, 2007/12/06
Re: Re: Aria-Security.net: NetAuctionHelp SQL Injection, NetAuctionHelp Support, 2007/12/06
SQUID-2007:2, Dec 4, 2007, Adrian Chadd, 2007/12/06
NSFOCUS SA2007-02 : Cisco Security Agent Remote Buffer Overflow Vulnerability, NSFOCUS Security Team, 2007/12/06
[security bulletin] HPSBMA02281 SSRT061261 rev.1 - HP OpenView Network Node Manager (OV NNM) Remote Unauthorized Execution of Arbitrary Code, security-alert, 2007/12/06
HITBSecConf2007 Malaysia Videos Now Available, Praburaajan, 2007/12/06
Aria-Security.Net: PenPals Login and search page SQL Injection, no-reply, 2007/12/06
[Full-disclosure] Avast! AntiVirus TAR Processing Remote Heap Corruption, Sowhat, 2007/12/06
[Full-disclosure] [UPDATE]CA BrightStor ARCServe BackUp Message Engine Remote Stack Overflow Vulnerability, cocoruder, 2007/12/06
- Re: [Full-disclosure] [UPDATE]CA BrightStor ARCServe BackUp Message Engine Remote Stack Overflow Vulnerability, Code Audit Labs, 2007/12/06
[Full-disclosure] UPDATE: [ GLSA 200711-29 ] Samba: Execution of arbitrary code, Pierre-Yves Rofes, 2007/12/05
ezContents Version 1.4.5 Remote File Disclosure Vulnerability., p4imi0, 2007/12/05
SineCMS <= 2.3.4 Calendar SQL Injection 'n something else.., kingoftheworld92, 2007/12/05
- Re: SineCMS <= 2.3.4 Calendar SQL Injection 'n something else.., carlo . feller, 2007/12/18
[Full-disclosure] [ GLSA 200712-02 ] Cacti: SQL injection, Pierre-Yves Rofes, 2007/12/05
[Full-disclosure] [ GLSA 200712-01 ] Hugin: Insecure temporary file creation, Pierre-Yves Rofes, 2007/12/05
Firefox 2.0.0.11 INPUT Denial Of Service, azizov, 2007/12/05
[SECURITY] [DSA 1420-1] New zabbix packages fix privilege escalation, Thijs Kinkhorst, 2007/12/05
[ELEYTT] Public Advisory 05-12-2007, Michal Bucko, 2007/12/05
[Full-disclosure] Information about recent malware exploited vulnerabilities - a blog post, uday kumar, 2007/12/05
Advisory: Cross Site Scripting in CiscoWorks, Liquidmatrix Security Digest, 2007/12/05
Sql Injection in wordpress 2.3.1, beenudel1986, 2007/12/05
- Re: Sql Injection in wordpress 2.3.1, alan, 2007/12/05
- Re: Sql Injection in wordpress 2.3.1, shino, 2007/12/05
[ECHO_ADV_86$2007] Mambo/Joomla Component rsgallery <= 2.0 beta 5 (catid) Remote SQL Injection Vulnerability, erdc, 2007/12/05
Opera 9.50 beta and prior remote DoS (freeze), gynvael, 2007/12/05
Re: 27Mhz based wireless security insecurities - Aka - "We know what you typed last summer", Michal Bucko, 2007/12/05
Blind Sql-Injection in Joomla 1.5 RC3, beenudel1986, 2007/12/05
[ MDKSA-2007:237 ] - Updated openssl packages fix DTLS vulnerability, security, 2007/12/05
[ MDKSA-2007:236 ] - Updated openssh packages fix X11 cookie vulnerability, security, 2007/12/05
[Full-disclosure] rPSA-2007-0257-1 rsync, rPath Update Announcements, 2007/12/05
[Full-disclosure] The recent number of unpatched QuickTime flaws is: two, Juha-Matti Laurio, 2007/12/04
[Full-disclosure] [USN-553-1] Mono vulnerability, Kees Cook, 2007/12/04
[Full-disclosure] [USN-552-1] Perl vulnerability, Kees Cook, 2007/12/04
[Full-disclosure] [USN-546-2] Firefox regression, Kees Cook, 2007/12/04
RFI and Multiple XSS in PhpMyChat, beenudel1986, 2007/12/04
[Full-disclosure] SecNiche Garbage Dumps on mailinglists, Lamer Buster, 2007/12/04
CORE-2007-1004: VLC Activex Bad Pointer Initialization Vulnerability, CORE Security Technologies Advisories, 2007/12/04
Re: Powerschool 404 Admin Exposure, bob, 2007/12/04
[security bulletin] HPSBMA02293 SSRT071494 rev.1 - HP Select Identity, Remote Unauthorized Access, security-alert, 2007/12/04
[Full-disclosure] TIBCO Rendezvous Exploitation Video, IRM Research, 2007/12/04
PR07-39: Multiple vulnerabilities on Absolute News Manager.NET 5.1 including file retrieval and SQL injection, research, 2007/12/04
The first release of SWFIntruder is out !, Stefano Di Paola, 2007/12/04
(Re-post) ATC-08 CFP, atc08, 2007/12/04
Re: [dns-operations] Web Proxy Auto-Discovery (WPAD) Information Disclosure (fwd), Gadi Evron, 2007/12/04
[ MDKSA-2007:234 ] - Updated vixie-cron packages fix DoS vulnerability, security, 2007/12/04
Snitz2000 SQL Injection: A user can gain admin level, admin, 2007/12/04
[ MDKSA-2007:235 ] - Updated apache packages fix vulnerabilities, security, 2007/12/04
[MacOS X] Insecure eval() in Twitgit and Twitterlex dashboard widgets, Thomas Roessler, 2007/12/04
- Some more widgets: Facebook, Hockey, FlickrInterestingNess (Re: [MacOS X] Insecure eval() in Twitgit and Twitterlex dashboard widgets), Thomas Roessler, 2007/12/04
[Full-disclosure] SEC Consult SA-20071204-0 :: SonicWALL Global VPN Client Format String Vulnerability, Bernhard Mueller, 2007/12/04
[Full-disclosure] [USN-549-2] PHP regression, Kees Cook, 2007/12/04
[Full-disclosure] [USN-551-1] OpenLDAP vulnerabilities, Jamie Strandboge, 2007/12/04
[USN-550-1] Cairo vulnerability, Kees Cook, 2007/12/03
SYMSA-2007-014: SQL Injection Vulnerability in Beehive Forum Software, research, 2007/12/03
McAfee SecurityCenter Privacy Service HTML Execution Vulnerability, DoZ, 2007/12/03
Re: SQL Injection in SaphpLesson2.0 "show.php", security curmudgeon, 2007/12/03
sing (debian) vunlerability?, Milen Rangelov, 2007/12/03
- Re: sing (debian) vunlerability?, Moritz Muehlenhoff, 2007/12/04
Lotfian Brochure and cataloge Script XSS And SQL Injection, noreply, 2007/12/03
PR06-09: BEA Plumtree portal full version disclosure vulnerability, research, 2007/12/03
PR06-11: BEA Plumtree portal search facility leaks usernames to unauthenticated users, research, 2007/12/03
[WhitePaper (SecNiche)] Information Prone LDAP Garbage Dumps, AKS aka (0kn0ck), 2007/12/03
Re: SQL Injection in saphp "showcat.php", security curmudgeon, 2007/12/03
PR06-08: BEA Plumtree portal internal hostname disclosure vulnerability, research, 2007/12/03
- Re: PR06-08: BEA Plumtree portal internal hostname disclosure vulnerability, guiness.stout, 2007/12/03
  - Message not available
    - Fwd: PR06-08: BEA Plumtree portal internal hostname disclosure vulnerability, imipak, 2007/12/03
Realplayer 11 DOS attack when processing a malformed AU file on MS Vista and XP, thesinoda, 2007/12/01
[Full-disclosure] rPSA-2007-0255-1 nss_ldap, rPath Update Announcements, 2007/12/01
[Full-disclosure] DC4420 - London DEFCON chapter Christmas Party - 11th December, Major Malfunction, 2007/12/01
- [Full-disclosure] need help in managing administrators, happy nino, 2007/12/02
  - Re: [Full-disclosure] need help in managing administrators, Valdis . Kletnieks, 2007/12/02
    - Re: [Full-disclosure] need help in managing administrators, James Matthews, 2007/12/02
    - Re: [Full-disclosure] need help in managing administrators, Valdis . Kletnieks, 2007/12/02
  - Re: [Full-disclosure] need help in managing administrators, Joel R. Helgeson, 2007/12/03
    - Re: [Full-disclosure] need help in managing administrators, happy nino, 2007/12/05