Bugtraq (thread)

[SECURITY] [DSA 1536-1] New libxine packages fix several vulnerabilities, Thijs Kinkhorst, 2008/03/31
EasyNews-40tr Multiple Remote Vulnerabilities (SQL Injection Exploit/XSS/LFI), irancrash, 2008/03/31
[Full-disclosure] CAU-2008-0001 - Slowly Closing Door Race Condition, I)ruid, 2008/03/31
- Re: [Full-disclosure] CAU-2008-0001 - Slowly Closing Door Race Condition, Nate McFeters, 2008/03/31
  - Re: [Full-disclosure] CAU-2008-0001 - Slowly Closing Door Race Condition, evilrabbi, 2008/03/31
    - Re: [Full-disclosure] CAU-2008-0001 - Slowly Closing Door Race Condition, Razi Shaban, 2008/03/31
[Full-disclosure] iDefense Security Advisory 03.31.08: Macrovision InstallShield InstallScript One-Click Install Untrusted Library Loading Vulnerability, iDefense Labs, 2008/03/31
Paper by Amit Klein (Trusteer): "PowerDNS Recursor DNS Cache Poisoning [pharming]", Amit Klein, 2008/03/31
rPSA-2008-0132-1 lighttpd, rPath Update Announcements, 2008/03/31
PacketTrap Networks pt360 2.0.39 TFTPD Remote DoS Exploit, r57blg, 2008/03/31
[Full-disclosure] Directory traversal in 2X ThinClientServer v5.0_sp1-r3497, Luigi Auriemma, 2008/03/31
Efestech Video v5,0 (id) Remote Sql Injection, dj_remix_20, 2008/03/31
Proviso SiteKiosk File Download Vulnerability, nebelfrost23, 2008/03/31
[Full-disclosure] London DEFCON meet - DC4420 - New Venue - Wednesday 2nd April, 2008, Major Malfunction, 2008/03/30
[Full-disclosure] [TKADV2008-002] avast! 4.7 aavmker4.sys Kernel Memory Corruption, Tobias Klein, 2008/03/29
CuteFlow Version 1.5.0 Multiple Remote Vulnerabilities, hadihadi_zedehal_2006, 2008/03/29
[ MDVSA-2008:080 ] - Updated Firefox packages fix multiple vulnerabilities, security, 2008/03/29
[Full-disclosure] VMSA-2008-0006 Updated libxml2 service console package, VMware Security team, 2008/03/28
Internet explorer 7.0 spoofing, jplopezy, 2008/03/28
- Re: Internet explorer 7.0 spoofing, w0lfd33m, 2008/03/29
  - Re: Internet explorer 7.0 spoofing, mouss, 2008/03/31
Immunity Debugger 1.5, Nicolas Waisman, 2008/03/28
XChat 2.8.4-1 - Multiple Vulnerabilities, evilcry, 2008/03/28
- Re: XChat 2.8.4-1 - Multiple Vulnerabilities, fabio, 2008/03/28
- Re: Re: XChat 2.8.4-1 - Multiple Vulnerabilities, omnipresent, 2008/03/31
CA Multiple Products DSM ListCtrl ActiveX Control Buffer Overflow Vulnerability, Williams, James K, 2008/03/28
[security bulletin] HPSBOV02278 SSRT071479 rev.1 - HP OpenVMS SSH Using TCP/IP Services for OpenVMS, Remote Unauthorized Access, security-alert, 2008/03/28
Re: Heap overflow in Sybase MobiLink 10.0.1.3629, jsavill, 2008/03/28
[security bulletin] HPSBGN02319 SSRT080027 rev.1 - HP Compaq Notebook PC BIOS, Local Unauthorized Access, security-alert, 2008/03/28
[security bulletin] HPSBGN02305 SSRT080004 rev.1 - HP Compaq Business Notebook PC BIOS, Local Denial of Service (DoS), security-alert, 2008/03/28
Smf 1.1.4 Remote File Inclusion Vulnerabilities, sibertrwolf, 2008/03/28
- Re: Smf 1.1.4 Remote File Inclusion Vulnerabilities, Jindrich Kubec, 2008/03/28
  - Re: Smf 1.1.4 Remote File Inclusion Vulnerabilities, Mike Duncan, 2008/03/28
- Re: Smf 1.1.4 Remote File Inclusion Vulnerabilities, fake, 2008/03/28
[ MDVSA-2008:079 ] - Updated sarg packages fix multiple vulnerabilities, security, 2008/03/28
rPSA-2008-0128-1 firefox, rPath Update Announcements, 2008/03/27
[SECURITY] [DSA 1531-1] New policyd-weight packages fix insecure temporary files, Thijs Kinkhorst, 2008/03/27
JAF-CMS 4.0 RC2 Multiple Remote File Inclusion Vulnerabilities, r57blg, 2008/03/27
- Re: JAF-CMS 4.0 RC2 Multiple Remote File Inclusion Vulnerabilities, str0ke, 2008/03/27
[securityreason] *BSD libc (strfmon) Multiple vulnerabilities, cxib, 2008/03/27
- Re: [securityreason] *BSD libc (strfmon) Multiple vulnerabilities, Christos Zoulas, 2008/03/27
TopperMod 2.0 Remote SQL Injection Vulnerability, r57blg, 2008/03/27
[ MDVSA-2008:078 ] - Updated openssh packages fix X connection hijacking, security, 2008/03/27
Multiple XSS in DigiDomain, xx_hack_xx_2004, 2008/03/26
[ MDVSA-2008:077 ] - Updated perl-Tk packages fix GIF processing vulnerability, security, 2008/03/26
[Full-disclosure] [USN-596-1] Ruby vulnerabilities, Kees Cook, 2008/03/26
[Full-disclosure] [USN-595-1] SDL_image vulnerabilities, Kees Cook, 2008/03/26
[Full-disclosure] [USN-594-1] libnet-dns-perl vulnerability, Kees Cook, 2008/03/26
[Full-disclosure] [USN-593-1] Dovecot vulnerabilities, Kees Cook, 2008/03/26
[ MDVSA-2008:076 ] - Updated wml packages fix symlink vulnerabilities, security, 2008/03/26
[Full-disclosure] Multiple vulnerabilities in solidDB 06.00.1018, Luigi Auriemma, 2008/03/26
Invision Power Board <=2.3.x iFrame Vuln, shaheemirza, 2008/03/26
[Full-disclosure] ZDI-08-013: Novell eDirectory for Linux Stack Overflow, zdi-disclosures, 2008/03/26
Cisco Security Advisory: Multiple DLSw Denial of Service Vulnerabilities in Cisco IOS, Cisco Systems Product Security Incident Response Team, 2008/03/26
[Full-disclosure] [USN-592-1] Firefox vulnerabilities, Jamie Strandboge, 2008/03/26
Re: Logaholic Web Analytics Software, andre, 2008/03/26
php-addressbook v2.0 SQL Injection Vulnerbility, hadihadi_zedehal_2006, 2008/03/26
Aztech ADSL2/2+ 4 Port remote root, sipherr, 2008/03/25
[security bulletin] HPSBTU02322 SSRT080011 rev.1 - HP Tru64 UNIX running SSH/SFTP Server, Remote Execution of Arbitrary Code or Denial of Service (DoS), security-alert, 2008/03/25
Blackboard Academic Suite Multiple XSS Vulnerabilities, knight4vn, 2008/03/25
phpBB PJIRC mod LFI, 0in . email, 2008/03/25
[Full-disclosure] CORE-2007-1212: SILC pkcs_decode buffer overflow, Core Security Technologies Advisories, 2008/03/25
[DSECRG-08-022] Multiple Security Vulnerabilities in Bolinos 4.6.1, Digital Security Research Group, 2008/03/25
rPSA-2008-0123-1 ruby, rPath Update Announcements, 2008/03/25
Cuteflow Bin v1.5.0 Local File Inclusion Vuln, r57blg, 2008/03/25
rPSA-2008-0120-1 gnome-ssh-askpass openssh openssh-client openssh-server, rPath Update Announcements, 2008/03/25
e107 My_Gallery Plugin Arbitrary File Download Vulnerability, Jerome Athias, 2008/03/25
[SECURITY] [DSA 1530-1] New cupsys packages fix multiple vulnerabilities, Noah Meyerhans, 2008/03/25
aeries browser interface(ABI) 3.8.3.14 Remote SQL Injection, arsalan1991, 2008/03/24
[Full-disclosure] [ GLSA 200803-32 ] Wireshark: Denial of Service, Pierre-Yves Rofes, 2008/03/24
[Full-disclosure] [USN-590-1] bzip2 vulnerability, Kees Cook, 2008/03/24
[Full-disclosure] [ GLSA 200803-31 ] MIT Kerberos 5: Multiple vulnerabilities, Robert Buchholz, 2008/03/24
[Full-disclosure] [USN-591-1] libicu vulnerabilities, Jamie Strandboge, 2008/03/24
[SECURITY] [DSA 1528-1] New serendipity packages fix cross site scripting, Thijs Kinkhorst, 2008/03/24
HIS-webshop is vulnerable against Directory-Traversal (www.shoppark.de), zero-x, 2008/03/24
Hamachi Password Disclosure Vulnerability, evilcry, 2008/03/24
[DSECRG-08-021] Multiple LFI in PowerPHPBoard 1.00b, Digital Security Research Group, 2008/03/24
[DSECRG-08-020] RFI-LFI in PowerClan 1.14a, Digital Security Research Group, 2008/03/24
[DSECRG-08-019] LFI in PowerBook 1.21, Digital Security Research Group, 2008/03/24
[SECURITY] [DSA 1527-1] New debian-goodies packages fix privilege escalation, Thijs Kinkhorst, 2008/03/24
Alkacon OpenCms users_list.jsp searchfilter XSS, nnposter, 2008/03/24
Linksys phone adapter denial of service, sipherr, 2008/03/24
- Re: Linksys phone adapter denial of service, J. Oquendo, 2008/03/24
  - Re: Linksys phone adapter denial of service, orsino, 2008/03/24
    - Re: Linksys phone adapter denial of service, J. Oquendo, 2008/03/24
    - Re: Linksys phone adapter denial of service, Michael VERGOZ, 2008/03/24
- Re: Re: Linksys phone adapter denial of service, sipherr, 2008/03/24
F5 BIG-IP Web Management Audit Log XSS, nnposter, 2008/03/24
[ MDVSA-2008:075 ] - Updated bzip2 packages fix denial of service vulnerability, security, 2008/03/24
Re: Potential SQL injection vulnerability in Apache::AuthCAS, dcastro, 2008/03/24
EfesTech E-Kontr (id) Remote SQL INJECTION, dj_remix_20, 2008/03/24
[Full-disclosure] ircu/snircd remote crash vulnerability, Chris Porter, 2008/03/23
Safari browser 3.1 (525.13) spoofing, jplopezy, 2008/03/22
Google SoC 2008: Security Projects, jkouns, 2008/03/22
phpAddressBook v2.11 Multiple Local File Inclusion Vulnerabilities, Guns, 2008/03/22
hacking the mitsubishi GB-50A, Chris Withers, 2008/03/22
- RE: hacking the mitsubishi GB-50A, Desai, Ashish, 2008/03/24
  - RE: hacking the mitsubishi GB-50A, James C. Slora Jr., 2008/03/24
    - Re: hacking the mitsubishi GB-50A, Vincent Archer, 2008/03/25
    - Re: [BUGTRAQ] RE: hacking the mitsubishi GB-50A, Joe, 2008/03/25
  - Re: hacking the mitsubishi GB-50A, Chris Withers, 2008/03/25
- Re: hacking the mitsubishi GB-50A, Steven M. Christey, 2008/03/25
  - Re: hacking the mitsubishi GB-50A, Chris Withers, 2008/03/26
Fedora, Ubuntu publish wrong advisories for CVE-2007-6318, Abel Cheung, 2008/03/22
rPSA-2008-0118-1 bzip2, rPath Update Announcements, 2008/03/22
rPSA-2008-0116-1 unzip, rPath Update Announcements, 2008/03/22
Safari 3.1 for windows download bug, jplopezy, 2008/03/22
Re: Simple Machines Forum "SMF Shoutbox" Mod Persistent XSS, vermsky, 2008/03/22
XSS in cPanel 11.x, xx_hack_xx_2004, 2008/03/22
- Re: XSS in cPanel 11.x, morin . josh, 2008/03/24
[Full-disclosure] Buffer-overflow in ASUS Remote Console 2.0.0.24, Luigi Auriemma, 2008/03/21
{securityreason.com}PHP 5 *printf() - Integer Overflow, cxib, 2008/03/21
webutil.pl is still vulnerable against Remote Command Execution., zero-x, 2008/03/21
DotNetNuke Default Machine Key Exposure, labs, 2008/03/21
[ MDVSA-2008:074 ] - Updated audacity package fixes insecure temporary directory creation, security, 2008/03/21
[MSA01240108] IE7 Transfer-Encoding: chunked allows Request Splitting/Smuggling., Minded Security Research Labs, 2008/03/21
MS08-014, Anonymous, 2008/03/21
[INFIGO-2008-03-07]: Surgemail 38k4 IMAP server remote stack overflow, infocus, 2008/03/21
CanSecWest 2008 PWN2OWN - Mar 26-28, Dragos Ruiu, 2008/03/21
[MSA02240108] IE7 allows overwriting of several headers leading to Http request Splitting and smuggling., Minded Security Research Labs, 2008/03/21
[ MDVSA-2008:073 ] - Updated perl-Net-DNS packages fix DoS vulnerability, security, 2008/03/20
[ MDVSA-2008:072 ] - Updated kernel packages fix vulnerability, security, 2008/03/20
[Full-disclosure] [USN-589-1] unzip vulnerability, Kees Cook, 2008/03/20
[Full-disclosure] Multiple heap overflows in xine-lib 1.1.11, Luigi Auriemma, 2008/03/20
Note about recently publicized CA BrightStor ActiveX exploit code, Williams, James K, 2008/03/20
KAPhotoservice (album.asp) Remote SQL Injection Exploit, sys-project, 2008/03/20
Easy-Clanpage 2.2 (id) Remote SQL Injection Vulnerability, info, 2008/03/20
Pizco vulnerable to buffer overflow in activex, david130490, 2008/03/20
[ MDVSA-2008:071 ] - Updated Kerberos packages fix multiple vulnerabilities, security, 2008/03/20
[ MDVSA-2008:070 ] - Updated Kerberos packages fix multiple vulnerabilities, security, 2008/03/20
[ MDVSA-2008:069 ] - Updated Kerberos packages fix multiple vulnerabilities, security, 2008/03/20
[Full-disclosure] [USN-588-1] MySQL vulnerabilities, Jamie Strandboge, 2008/03/20
[Full-disclosure] Adobe Flash CS3 Professional FLA File Parsing Multiple Local Code Execute Vulnerabilities, cocoruder, 2008/03/20
[Full-disclosure] rPSA-2008-0112-1 krb5 krb5-server krb5-services krb5-test krb5-workstation, rPath Update Announcements, 2008/03/19
[Full-disclosure] [ GLSA 200803-30 ] ssl-cert eclass: Certificate disclosure, Robert Buchholz, 2008/03/19
[Full-disclosure] [ GLSA 200803-29 ] ViewVC: Multiple vulnerabilities, Tobias Heinlein, 2008/03/19
[Full-disclosure] [ GLSA 200803-28 ] OpenLDAP: Denial of Service vulnerabilities, Pierre-Yves Rofes, 2008/03/19
IBM Rational ClearQuest Web Multiple XSS Vulnerabilities, swhite, 2008/03/19
CS-Cart XSS, swhite, 2008/03/19
Question on CERT-FI and CPNI Joint Vulnerability Advisory on Archive Formats?, James Connery, 2008/03/19
HPSBST02321 SSRT080029 rev.1 - HP StorageWorks Library and Tape Tools (LTT) Running on HP-UX, Local Unauthorized Access, security-alert, 2008/03/19
AST-2008-004: Format String Vulnerability in Logger and Manager, Asterisk Security Team, 2008/03/19
[ MDVSA-2008:068 ] - Updated unzip packages vulnerability, security, 2008/03/19
AST-2008-002: Two buffer overflows in RTP Codec Payload Handling, Asterisk Security Team, 2008/03/19
AST-2008-003: Unauthenticated calls allowed from SIP channel driver, Asterisk Security Team, 2008/03/19
Mambo/joomla com_intellect "page" LFI [Aria-Security], no-reply, 2008/03/19
phpBB 2.0.23 Session Hijacking Vulnerability, nbbn@gmx.net, 2008/03/19
AST-2008-005: HTTP Manager ID is predictable, Asterisk Security Team, 2008/03/19
[Full-disclosure] [USN-587-1] Kerberos vulnerabilities, Kees Cook, 2008/03/19
[Full-disclosure] [ GLSA 200803-27 ] MoinMoin: Multiple vulnerabilities, Pierre-Yves Rofes, 2008/03/18
[ MDVSA-2008:067 ] - Updated nagios packages fix multiple vulnerabilities, security, 2008/03/18
iDefense Security Advisory 03.18.08: Multiple Vendor CUPS CGI Heap Overflow Vulnerability, iDefense Labs, 2008/03/18
[SECURITY] [DSA 1524-1] New krb5 packages fix multiple vulnerabilities, Noah Meyerhans, 2008/03/18
MITKRB5-SA-2008-002: array overrun in RPC library used by kadmin (resend, corrected subject), raeburn, 2008/03/18
[Full-disclosure] CORE-2008-0123: Leopard Server Remote Path Traversal, Core Security Technologies Advisories, 2008/03/18
MITKRB5-SA-2008-001: double-free, uninitialized data vulnerabilities in krb5kdc, raeburn, 2008/03/18
- MITKRB5-SA-2008-001: double-free, uninitialized data vulnerabilities in krb5kdc, raeburn, 2008/03/18
Digital Armaments March-April Hacking Challenge: 5,000$ Prize - Client Vulnerabilities and Exploit, info, 2008/03/18
[Full-disclosure] [ GLSA 200803-26 ] Adobe Acrobat Reader: Insecure temporary file creation, Robert Buchholz, 2008/03/18
cPanel 11.x => List Directories and Folders, xx_hack_xx_2004, 2008/03/18
[security bulletin] HPSBST02320 SSRT080028 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-014 to MS08-017, security-alert, 2008/03/18
Internet Explorer 7.0 crash, jplopezy, 2008/03/18
eForum 0.4 XSS, omnipresent, 2008/03/18
[Full-disclosure] [ GLSA 200803-25 ] Dovecot: Multiple vulnerabilities, Robert Buchholz, 2008/03/18
[Full-disclosure] Airscanner Mobile Security Advisory #08031201: FlexiSPY Multiple Issues, Seth Fogie, 2008/03/18
[Full-disclosure] VMSA-2008-0005 Updated VMware Workstation, VMware Player, VMware Server, VMware ACE, and VMware Fusion resolve critical security issues, VMware Security team, 2008/03/17
[Full-disclosure] [ GLSA 200803-24 ] PCRE: Buffer overflow, Tobias Heinlein, 2008/03/17
[Full-disclosure] Cross Site Scripting (XSS) in phpstats 0.1_alpha, CVE-2008-0125, Hanno BÃck, 2008/03/17
Agile Hacking, Petko D. Petkov, 2008/03/17
Home FTP Server DoS, 0in . email, 2008/03/17
Multiple vulnerabilities in Net Inspector 6.5.0.828, Luigi Auriemma, 2008/03/17
[Full-disclosure] Buffer-overflow in BootManage TFTPD 1.99, Luigi Auriemma, 2008/03/17
[Full-disclosure] VLC highlander bug, Luigi Auriemma, 2008/03/17
Re: Format string in McAfee Framework 3.6.0.569 (ePolicy Orchestrator 4.0), greentea-lemon, 2008/03/17
Mutiple Timesheets <= 5.0 - Multiple Remote Vulnerabilities, sys-project, 2008/03/17
Security Advisory on RSA Web ID (XSS), quentin . berdugo, 2008/03/17
raidsonic nas-4220 crypt disk key leak (stored in plain on unencrypted partition), Collin R. Mulliner, 2008/03/17
EasyCalendar <= 4.0tr - Multiple Remote Vulnerabilities, sys-project, 2008/03/17
vuln in snewscms Rus v 2.3, www . yo . by, 2008/03/17
Re: Format string in McAfee Framework 3.6.0.569 (ePolicy Orchestrator 4.0), neodwija, 2008/03/17
Joomla components com_guide "category" Remote SQL Injection [Aria-Security], no-reply, 2008/03/17
[Full-disclosure] eeye diffing suite?, crazy frog crazy frog, 2008/03/16
[Full-disclosure] [ GLSA 200803-23 ] Website META Language: Insecure temporary file usage, Pierre-Yves Rofes, 2008/03/15
XNview 1.92.1 Long Filename Overflow, Sylvain, 2008/03/15
Rosoft Media Player 4.1.8 RML Stack Based Buffer Overflow, opexoc, 2008/03/15
- Re: Rosoft Media Player 4.1.8 RML Stack Based Buffer Overflow, david130490, 2008/03/17
- Re: Re: Rosoft Media Player 4.1.8 RML Stack Based Buffer Overflow, opexoc, 2008/03/18
- Re: Re: Rosoft Media Player 4.1.8 RML Stack Based Buffer Overflow, opexoc, 2008/03/18
Troopers08 Security Conference, April 23/24 (Munich/Germany), Enno Rey, 2008/03/15
[Full-disclosure] [USN-586-1] mailman vulnerability, Kees Cook, 2008/03/15
Local persistent DoS in Windows XP SP2 Taskmgr, SkyOut, 2008/03/15
- Re: Local persistent DoS in Windows XP SP2 Taskmgr, paraw, 2008/03/17
- RE: Local persistent DoS in Windows XP SP2 Taskmgr, Thor (Hammer of God), 2008/03/17
Black Hat Announcements: New CFP system and Japan '08 confirmed, jmoss, 2008/03/15
EasyGallery <= 5.0tr - Multiple Remote Vulnerabilities, sys-project, 2008/03/14
Airspan WiMAX ProST Authentication Bypass Vulnerability, admin, 2008/03/14
[ MDVSA-2008:066 ] - Updated gcc packages fix directory traversal vulnerability in fastjar, security, 2008/03/13
Office XP Remote SQL Injection, no-reply, 2008/03/13
- Re: Office XP Remote SQL Injection, Steve Shockley, 2008/03/14
PR08-02: Plone CMS Security Research - the Art of Plowning, ProCheckUp Research, 2008/03/13
[Full-disclosure] [ GLSA 200803-22 ] LIVE555 Media Server: Denial of Service, Pierre-Yves Rofes, 2008/03/13
Update+Errata: Re: A paper by Amit Klein (Trusteer): "OpenBSD DNS Cache Poisoning and Multiple O/S Predictable IP ID Vulnerability", Amit Klein, 2008/03/13
[Full-disclosure] ZDI-08-012: IBM Informix Dynamic Server Authentication Password Stack Overflow Vulnerability, zdi-disclosures, 2008/03/13
[Full-disclosure] ZDI-08-011: IBM Informix Dynamic Server DBPATH Buffer Overflow Vulnerability, zdi-disclosures, 2008/03/13
Zabbix (zabbix_agentd) denial of service, Milen Rangelov, 2008/03/13
Rapid7 Advisory R7-0032: Microsoft Internet Explorer FTP Command Injection Vulnerability, kralor, 2008/03/13
Rise of the spammers, vulns, 2008/03/13
Directory traversal in EdiorCMS V3.0, wsn1983, 2008/03/13
XSS in PHP-Nuke (eWeather module), nima_501, 2008/03/13
Re: Directory traversal and DoS in WinIPDS G52-33-021, ph, 2008/03/13
rPSA-2008-0108-1 dovecot, rPath Update Announcements, 2008/03/12
[Full-disclosure] Format string in McAfee Framework 3.6.0.569 (ePolicy Orchestrator 4.0), Luigi Auriemma, 2008/03/12
[Full-disclosure] [ GLSA 200803-21 ] Sarg: Remote execution of arbitrary code, Raphael Marichez, 2008/03/12
Powered by phpBB 2001, 2006 (SQL), turkish-warriorr, 2008/03/12
[Full-disclosure] rPSA-2008-0106-1 lighttpd, rPath Update Announcements, 2008/03/12
[Full-disclosure] ZDI-08-010: Java Web Start encoding Stack Buffer Overflow, zdi-disclosures, 2008/03/12
[Full-disclosure] ZDI-08-009: Java Web Start tempbuff Stack Buffer Overflow, zdi-disclosures, 2008/03/12
Cisco ACS UCP Remote Pre-Authentication Buffer Overflows, Felix 'FX' Lindner, 2008/03/12
hacking a pacemaker, Gadi Evron, 2008/03/12
- Re: [Full-disclosure] hacking a pacemaker, Randal T. Rioux, 2008/03/14
travelsized cms 0.4.1 multiple local file inclusion vulnerabilities, muuratsalo experimental hack lab, 2008/03/12
uberghey cms 0.3.1 multiple local file inclusion vulnerabilities, muuratsalo experimental hack lab, 2008/03/12
[Full-disclosure] iDefense Security Advisory 03.11.08: Microsoft Outlook mailto Command Line Switch Injection, iDefense Labs, 2008/03/11
[Full-disclosure] iDefense Security Advisory 03.11.08: Microsoft Excel 2003 Malformed Formula Memory Corruption Vulnerability, iDefense Labs, 2008/03/11
[Full-disclosure] iDefense Security Advisory 03.11.08: Microsoft Excel DVAL Heap Corruption Vulnerability, iDefense Labs, 2008/03/11
TPTI-08-03: Microsoft Excel Rich Text Memory Corruption Vulnerability, DVLabs, 2008/03/11
PHP-Nuke Module ZClassifieds [cat] SQL Injection, lovebug, 2008/03/11
[Full-disclosure] [ GLSA 200803-20 ] International Components for Unicode: Multiple vulnerabilities, Pierre-Yves Rofes, 2008/03/11
[Full-disclosure] [ GLSA 200803-19 ] Apache: Multiple vulnerabilities, Pierre-Yves Rofes, 2008/03/11
[Full-disclosure] ZDI-08-008: Microsoft Excel BIFF File Format Cell Record Parsing Memory Corruption Vulnerability, zdi-disclosures, 2008/03/11
[Full-disclosure] CORE-2008-0204: Timbuktu Pro Remote Path Traversal and Log Injection, Core Security Technologies Advisories, 2008/03/11
[Full-disclosure] Advisory Adobe LiveCycle Workflow XSS Vulnerability, Liquidmatrix Security Digest, 2008/03/11
ACROS Security: HTML Injection in BEA WebLogic Server Console (ASPR #2008-03-11-1), ACROS Security, 2008/03/11
ACROS Security: Session Fixation Vulnerability in WebLogic Administration Console (#2008-03-11-2), ACROS Security, 2008/03/11
Re: Remotely Anywhere 'Accept-Charset' Parameter NULL Pointer, patrick, 2008/03/11
PHP-Nuke Module NukeC30 sql injection, houssamix, 2008/03/11
- Re: PHP-Nuke Module NukeC30 sql injection, my_msn_my_msn_my, 2008/03/13
[security bulletin] HPSBUX02313 SSRT080015 rev.2 - HP-UX Running Apache, Remote Cross Site Scripting (XSS), security-alert, 2008/03/11
Mambo Components ensenanzas "id" Remote SQL Injection, no-reply, 2008/03/11
Advisory: SQL-Injections in Mapbender, RedTeam Pentesting GmbH, 2008/03/11
[security bulletin] HPSBUX02316 SSRT071495 rev.1 - HP-UX running HP CIFS Server (Samba), Remote Execution of Arbitrary Code, security-alert, 2008/03/11
[Full-disclosure] [USN-585-1] Python vulnerabilities, Kees Cook, 2008/03/11
[Full-disclosure] Vulnerabilities in Timbuktu Pro 8.6.5, Luigi Auriemma, 2008/03/10
- Re: [Full-disclosure] Vulnerabilities in Timbuktu Pro 8.6.5, titon, 2008/03/11
  - Re: [Full-disclosure] Vulnerabilities in Timbuktu Pro 8.6.5, Luigi Auriemma, 2008/03/11
[Full-disclosure] Invalid memory access in Acronis True Image Group Server 1.5.19.191, Luigi Auriemma, 2008/03/10
- Re: [Full-disclosure] Invalid memory access in Acronis True Image Group Server 1.5.19.191, Dmitry, 2008/03/10
NULL pointer in Remotely Anywhere 8.0.668, Luigi Auriemma, 2008/03/10
[Full-disclosure] Multiple vulnerabilities in ASG-Sentry 7.0.0, Luigi Auriemma, 2008/03/10
[Full-disclosure] Directory traversal and NULL pointer in Acronis PXE Server 2.0.0.1076, Luigi Auriemma, 2008/03/10
[Full-disclosure] NULL pointer in Acronis True Image Windows Agent 1.0.0.54, Luigi Auriemma, 2008/03/10
Denial of Service in PacketTrap TFTP server 2.0.3901.0, Luigi Auriemma, 2008/03/10
[Full-disclosure] Directory traversal in Argon Client Management Services 1.31, Luigi Auriemma, 2008/03/10
[Full-disclosure] [ GLSA 200803-18 ] Cacti: Multiple vulnerabilities, Pierre-Yves Rofes, 2008/03/10
[Full-disclosure] iDefense Security Advisory 03.10.08: SAP MaxDB sdbstarter Privilege Escalation Vulnerability, iDefense Labs, 2008/03/10
[Full-disclosure] iDefense Security Advisory 03.10.08: SAP MaxDB Signedness Error Heap Corruption Vulnerability, iDefense Labs, 2008/03/10
[Full-disclosure] [ GLSA 200803-17 ] PDFlib: Multiple buffer overflows, Pierre-Yves Rofes, 2008/03/10
- Re: [Full-disclosure] [ GLSA 200803-17 ] PDFlib: Multiple buffer overflows, Philip Thiessen, 2008/03/14
[Full-disclosure] [ GLSA 200803-16 ] MPlayer: Multiple buffer overflows, Pierre-Yves Rofes, 2008/03/10
Summer Camp 2008 - La Garrotxa, Gerardo García Peña, 2008/03/10
Firebird remote BOF POC, underwater, 2008/03/10
PHP-Nuke SQL injection Module "Hadith" [cat], lovebug, 2008/03/10
[ MDVSA-2008:065 ] - Updated pulseaudio packages fix denial of service vulnerabilities, security, 2008/03/10
VHCS <= 2.4.7.1 (vhcs2_daemon) Remote Root Exploit, gmdarkfig, 2008/03/10
- Re: VHCS <= 2.4.7.1 (vhcs2_daemon) Remote Root Exploit, Maximiliano MÃller, 2008/03/12
- Re: Re: VHCS <= 2.4.7.1 (vhcs2_daemon) Remote Root Exploit, app, 2008/03/13
- Re: Re: Re: VHCS <= 2.4.7.1 (vhcs2_daemon) Remote Root Exploit, sad_wabi_user, 2008/03/13
[security bulletin] HPSBUX02306 SSRT071463 rev.2 - HP-UX Running ARPA Transport, Remote Denial of Service (DoS), security-alert, 2008/03/10
[Full-disclosure] [ GLSA 200803-15 ] phpMyAdmin: SQL injection vulnerability, Pierre-Yves Rofes, 2008/03/09
WoltLab Burning Board Lite 2 Beta 1 Thread Delete CSRF Vulnerability, nbbn, 2008/03/08
[TKADV2008-001] Panda Internet Security/Antivirus+Firewall 2008 cpoint.sys Kernel Driver Memory Corruption Vulnerability, Tobias Klein, 2008/03/08
Alkacon OpenCms logfileViewSettings.jsp XSS, file disclosure, nnposter, 2008/03/08
F5 BIG-IP Web Management Console XSS, nnposter, 2008/03/08
[Full-disclosure] [ GLSA 200803-14 ] Ghostscript: Buffer overflow, Pierre-Yves Rofes, 2008/03/08
[Full-disclosure] [TKADV2008-001] Panda Internet Security/Antivirus+Firewall 2008 cpoint.sys Kernel Driver Memory Corruption Vulnerability, Tobias Klein, 2008/03/08
[Full-disclosure] [ GLSA 200803-13 ] VLC: Multiple vulnerabilities, Pierre-Yves Rofes, 2008/03/07
XSS in Neptune Web Server, nima_501, 2008/03/07
[ MDVSA-2008:064 ] - Updated tomboy packages fix improper LD_LIBRARY_PATH handling, security, 2008/03/07
rPSA-2008-0099-1 dbus dbus-glib dbus-qt dbus-x11, rPath Update Announcements, 2008/03/07
[Full-disclosure] Multiple vulnerabilities in MailEnable Professional/Enterprise 3.13, Luigi Auriemma, 2008/03/07
PHP-Nuke KutubiSitte "kid" SQL Injection exploit code adding, r080cy90r, 2008/03/07
[ MDVSA-2008:063 ] - Updated Evolution packages fix critical vulnerability, security, 2008/03/07
Horde Webmail file inclusion proof of concept & patch., ppelanne, 2008/03/07
- Re: Horde Webmail file inclusion proof of concept & patch., Ben Klang, 2008/03/08
  - Re: Horde Webmail file inclusion proof of concept & patch., David Morton, 2008/03/21
WordPress Multiple Cross-Site Scripting Vulnerabilities, DoZ, 2008/03/07
[ MDVSA-2008:062 ] - Updated Thunderbird packages fix multiple vulnerabilities, security, 2008/03/07
[Full-disclosure] [USN-582-2] Thunderbird vulnerabilities, Jamie Strandboge, 2008/03/06
Re: Multiple vulnerabilities in Double-Take 5.0.0.2865, Steve Shockley, 2008/03/06
[ MDVSA-2008:061 ] - Updated mailman packages fix multiple XSS vulnerabilities, security, 2008/03/06
PHP-Nuke KutubiSitte "kid" SQL Injection, lovebug, 2008/03/06
[Full-disclosure] Directory traversal in MicroWorld eScan Server 9.0.742.98, Luigi Auriemma, 2008/03/06
Checkpoint VPN-1 UTM Edge cross-site scripting, Henri Lindberg - Smilehouse Oy, 2008/03/06
Sun JDK image parsing vulnerabilities, Chris Evans, 2008/03/06
[DSECRG-08-018] Ruby 1.8.6 (Webrick Httpd 1.3.1) Directory traversal file Download Vulnerability, Alexandr Polyakov, 2008/03/06
- Re: [DSECRG-08-018] Ruby 1.8.6 (Webrick Httpd 1.3.1) Directory traversal file Download Vulnerability, H D Moore, 2008/03/06
[ MDVSA-2008:060 ] - Updated Joomla! packages fix multiple vulnerabilities, security, 2008/03/06
[ MDVSA-2008:058 ] - Updated openldap packages fix multiple vulnerabilities, security, 2008/03/06
[Full-disclosure] [USN-584-1] OpenLDAP vulnerabilities, Jamie Strandboge, 2008/03/05
[Full-disclosure] [ GLSA 200803-11 ] Vobcopy: Insecure temporary file creation, Pierre-Yves Rofes, 2008/03/05
[Full-disclosure] [ GLSA 200803-12 ] Evolution: Format string vulnerability, Pierre-Yves Rofes, 2008/03/05
[ MDVSA-2008:059 ] - Updated tcl packages fix vulnerability, security, 2008/03/05
[Full-disclosure] [USN-583-1] Evolution vulnerability, Kees Cook, 2008/03/05
Multiple vulnerabilities in Perforce Server 2007.3/143793, Luigi Auriemma, 2008/03/05
[Full-disclosure] [ GLSA 200803-10 ] lighttpd: Multiple vulnerabilities, Pierre-Yves Rofes, 2008/03/05
[Full-disclosure] ERRATA: [ GLSA 200801-09 ] X.Org X server and Xfont library: Multiple vulnerabilities, Robert Buchholz, 2008/03/05
[Full-disclosure] Firewire Attack on Windows Vista, Bernhard Mueller, 2008/03/05
- Re: Firewire Attack on Windows Vista, Thierry Zoller, 2008/03/05
- RE: Firewire Attack on Windows Vista, Roger A. Grimes, 2008/03/05
  - Re: [Full-disclosure] Firewire Attack on Windows Vista, TheM ., 2008/03/06
  - Re: [Full-disclosure] Firewire Attack on Windows Vista, Daniel O'Connor, 2008/03/06
  - Re: [Full-disclosure] Firewire Attack on Windows Vista, Peter Watkins, 2008/03/06
    - Re: [Full-disclosure] Firewire Attack on Windows Vista, Larry Seltzer, 2008/03/06
    - Re: [Full-disclosure] Firewire Attack on Windows Vista, Tim, 2008/03/06
    - Re: [Full-disclosure] Firewire Attack on Windows Vista, Larry Seltzer, 2008/03/06
    - Re: [Full-disclosure] Firewire Attack on Windows Vista, Tim, 2008/03/06
    - Re: [Full-disclosure] Firewire Attack on Windows Vista, Larry Seltzer, 2008/03/06
    - Re: [Full-disclosure] Firewire Attack on Windows Vista, Tim, 2008/03/06
    - Re: [Full-disclosure] Firewire Attack on Windows Vista, Thor (Hammer of God), 2008/03/07
    - Re: [Full-disclosure] Firewire Attack on Windows Vista, Thor (Hammer of God), 2008/03/07
    - Re: [Full-disclosure] Firewire Attack on Windows Vista, Larry Seltzer, 2008/03/07
    - Re: [Full-disclosure] Firewire Attack on Windows Vista, Larry Seltzer, 2008/03/07
    - Re: [Full-disclosure] Firewire Attack on Windows Vista, Thor (Hammer of God), 2008/03/07
    - Re: [Full-disclosure] Firewire Attack on Windows Vista, Bryon Roche, 2008/03/07
    - Re: [Full-disclosure] Firewire Attack on Windows Vista, Larry Seltzer, 2008/03/08
    - Re: [Full-disclosure] Firewire Attack on Windows Vista, Tim, 2008/03/08
    - Re: [Full-disclosure] Firewire Attack on Windows Vista, Larry Seltzer, 2008/03/08
    - Re: [Full-disclosure] Firewire Attack on Windows Vista, Tim, 2008/03/08
    - Re: [Full-disclosure] Firewire Attack on Windows Vista, Jacob Appelbaum, 2008/03/10
    - Re: [Full-disclosure] Firewire Attack on Windows Vista, Larry Seltzer, 2008/03/09
    - Re: [Full-disclosure] Firewire Attack on Windows Vista, Jacob Appelbaum, 2008/03/11
    - Re: [Full-disclosure] Firewire Attack on Windows Vista, Stefan Kanthak, 2008/03/09
    - Re: [Full-disclosure] Firewire Attack on Windows Vista, Larry Seltzer, 2008/03/09
    - Re: [Full-disclosure] Firewire Attack on Windows Vista, Jardel Weyrich, 2008/03/10
    - Re: [Full-disclosure] Firewire Attack on Windows Vista, Kern, 2008/03/10
    - Re: [Full-disclosure] Firewire Attack on Windows Vista, Stefan Kanthak, 2008/03/10
    - Re: [Full-disclosure] Firewire Attack on Windows Vista, Ansgar -59cobalt- Wiechers, 2008/03/10
    - Re: Firewire Attack on Windows Vista, Steve Shockley, 2008/03/11
    - Re: Firewire Attack on Windows Vista, Stefan Kanthak, 2008/03/13
    - Re: [Full-disclosure] Firewire Attack on Windows Vista, FD, 2008/03/11
    - Re: [Full-disclosure] Firewire Attack on Windows Vista, Eric Rachner, 2008/03/13
    - Re: [Full-disclosure] Firewire Attack on Windows Vista, Erik Trulsson, 2008/03/09
    - Re: [Full-disclosure] Firewire Attack on Windows Vista, Pavel Kankovsky, 2008/03/15
    - Re: [Full-disclosure] Firewire Attack on Windows Vista, Thor (Hammer of God), 2008/03/06
  - Re: [Full-disclosure] Firewire Attack on Windows Vista, Tonnerre Lombard, 2008/03/06
  - RE: Firewire Attack on Windows Vista, bzhbfzj3001, 2008/03/06
    - Re: Firewire Attack on Windows Vista, Tonnerre Lombard, 2008/03/07
    - Re: Firewire Attack on Windows Vista, Nathanael Hoyle, 2008/03/07
- Re: [Full-disclosure] Firewire Attack on Windows Vista, Glenn.Everhart, 2008/03/06
  - Re: [Full-disclosure] Firewire Attack on Windows Vista, Tim, 2008/03/06
[SECURITY] [DSA 1512-1] New evolution packages fix arbitrary code execution, Thijs Kinkhorst, 2008/03/05
Dovecot mail_extra_groups setting is often used insecurely, Timo Sirainen, 2008/03/04
Minigal 2 critical XSS, jose, 2008/03/04
[Full-disclosure] [ GLSA 200803-09 ] Opera: Multiple vulnerabilities, Pierre-Yves Rofes, 2008/03/04
[Full-disclosure] [ GLSA 200803-08 ] Win32 binary codecs: Multiple vulnerabilities, Pierre-Yves Rofes, 2008/03/04
SolpotCrew Advisory #16 - Mitra Informatika Solusindo cart Remote Sql Injection Exploit, nyubicrew, 2008/03/04
[Full-disclosure] Arbitrary commands execution in Versant Object Database 7.0.1.3, Luigi Auriemma, 2008/03/04
[Full-disclosure] CORE-2008-0124: Multiple vulnerabilities in Google's Android SDK, Core Security Technologies Advisories, 2008/03/04
PHP-Nuke Module "seminar" Local FIle Inclusion, no-reply, 2008/03/04
PHP-Nuke Module eGallery "pid" Remote SQL Injection, no-reply, 2008/03/04
[ MDVSA-2008:057 ] - Updated wireshark packages fix denial of service vulnerabilities, security, 2008/03/04
[Full-disclosure] VMSA-2008-0004 Low: Updated e2fsprogs service console package, VMware Security team, 2008/03/03
Airscanner Mobile Security Advisory #07122001: Eye-Fi Multiple Vulnerabilities, Seth Fogie, 2008/03/03
[SECURITY] [DSA 1511-1] New libicu packages fix multiple problems, Steve Kemp, 2008/03/03
[Full-disclosure] [ GLSA 200803-07 ] Paramiko: Information disclosure, Pierre-Yves Rofes, 2008/03/03
DDIVRT-2008-09 PacketTrap PT360 Tool Suite TFTP Denial of Service Vulnerability, vulnerabilityresearch, 2008/03/03
[Full-disclosure] [ GLSA 200803-06 ] SWORD: Shell command injection, Pierre-Yves Rofes, 2008/03/03
[Full-disclosure] [ GLSA 200803-05 ] SplitVT: Privilege escalation, Pierre-Yves Rofes, 2008/03/03
[Full-disclosure] [ GLSA 200803-04 ] Mantis: Cross-Site Scripting, Pierre-Yves Rofes, 2008/03/03
[Full-disclosure] Airscanner Mobile Security Advisory #07122001: Eye-Fi Multiple Vulnerabilities, Seth Fogie, 2008/03/03
LayerOne 2008 Update, Layer One, 2008/03/03
[Full-disclosure] Heap overflow in Borland VisiBroker Smart Agent 08.00.00.C1.03, Luigi Auriemma, 2008/03/03
Cross-site Scripting and CSRF in TorrentTrader Classic v1.08, Valery Marchuk, 2008/03/03
Multiple integer overflows in Borland StarTeam server 10.0.0.57, Luigi Auriemma, 2008/03/03
DDIVRT-2008-10 PacketTrap TFTP Directory Traversal Vulnerability, vulnerabilityresearch, 2008/03/03
CSRF in joomla 1.0.11 stable version, vivek_infosec, 2008/03/03
- Re: CSRF in joomla 1.0.11 stable version, zinho, 2008/03/03
[DSECRG-08-017] Flyspray 0.9.9.4 Multiple Security Vulnerabilities, Digital Security Research Group, 2008/03/03
XSS in XP Book version 3.0, xx_hack_xx_2004, 2008/03/03
Re: Crafty Syntax Xss Vulnerability, erics, 2008/03/03
- Re: Crafty Syntax Xss Vulnerability, cmzs, 2008/03/04
Squid Analysis Report Generator <= 2.2.3.1 buffer overflow, L4teral, 2008/03/03
Recon 2008 - Call For Paper, Recon, 2008/03/03
kcwiki 1.0 multiple remote file inclusion vulnerabilities., muuratsalo experimental hack lab, 2008/03/03
Dynamic photo gallery V1.02 SQL Injection, no-reply, 2008/03/03
[Full-disclosure] [ GLSA 200803-03 ] Audacity: Insecure temporary file creation, Pierre-Yves Rofes, 2008/03/02
[Full-disclosure] [ GLSA 200803-02 ] Firebird: Multiple vulnerabilities, Pierre-Yves Rofes, 2008/03/02
[Full-disclosure] [ GLSA 200803-01 ] Adobe Acrobat Reader: Multiple vulnerabilities, Pierre-Yves Rofes, 2008/03/02
The Router Hacking Challenge is Over!, Petko D. Petkov, 2008/03/01
Livebox Router vulnerability to REMOTE BUFFER OVERFLOW DoS (FTPD)_, 0in . email, 2008/03/01
PHP-Nuke Copyright 2005 SQL, turkish-warriorr, 2008/03/01
h2desk helpdesk path disclosure vulnerability, joseph . giron13, 2008/03/01
Koobi CMS 4.3.0 - 4.2.3 (categ) Remote SQL Injection Vulnerability, sys-project, 2008/03/01
Mambo com_Musica "id" Remote SQL Injection, no-reply, 2008/03/01