Network Security Archives

Securiteam Exploits/Hacking Tools Newsletter (date)

[Thread Index] [Top] [All Lists]

January 31, 2005

[UNIX] phpEventCalendar HTML Injection, SecuriTeam, 05:43
[UNIX] JShop Cross Site Scripting, SecuriTeam, 05:12
[NT] Defeating Microsoft Windows XP SP2 Heap Protection and DEP Bypass, SecuriTeam, 04:52
[NT] Multiple Vulnerabilities in Alt-N WebAdmin, SecuriTeam, 04:42

January 27, 2005

[NT] Buffer Overflow in WinAMP in_cdda.dll CDA Device Name, SecuriTeam, 15:20
[NT] HKLM CurrentVersion Locking, SecuriTeam, 11:18
[NT] Multiple Pocket IE Vulnerabilities, SecuriTeam, 11:18
[NEWS] Cisco IOS Misformed BGP Packet Causes Reload, SecuriTeam, 11:08

January 26, 2005

[NEWS] Spectrum Cash Receipting System Weak Password Encryption, SecuriTeam, 15:59
[NEWS] Crafted Packet Causes Reload on Cisco Routers, SecuriTeam, 15:49
[NEWS] Multiple Crafted IPv6 Packets Cause Reload, SecuriTeam, 15:39
[NEWS] Opensawn XAUTH/PAM Buffer Overflow, SecuriTeam, 15:19
[NEWS] Crafted Packet Causes Reload on Cisco Routers, SecuriTeam, 15:08
[UNIX] gpsd Format String Vulnerability, SecuriTeam, 14:48
[TOOL] KSB26 - Kernel Socks Bouncer, SecuriTeam, 14:38
[UNIX] Comdev eCommerce Cross Site Scripting, SecuriTeam, 14:18
[TOOL] L7-Filter - Application Layer Packet Classifier for Linux, SecuriTeam, 07:25
[TOOL] Skeeve - Software For Creating Cover Channel With ICMP Tunnel, SecuriTeam, 07:14
[REVS] Data Tastes Better Seasoned: Introducing the ASH Family of Hashing Algorithms, SecuriTeam, 07:04
[NT] Multiple Buffer Overflows in Golden FTP Server, SecuriTeam, 06:54
[NT] W32Dasm Local Buffer Overflow, SecuriTeam, 06:44
[UNIX] Multiple Vulnerabilities in MercuryBoard, SecuriTeam, 06:34
[NEWS] Multi Vendor fd_set Structure Bitmap Array Index Overflow, SecuriTeam, 06:24
[NEWS] DataRescue Interactive Disassembler Pro Buffer Overflow Vulnerability, SecuriTeam, 06:14
[NT] MSN Heartbeat Control Buffer Overflow (MS04-038), SecuriTeam, 06:14
[TOOL] Cctde - Covert Channel and Tunneling Over the HTTP Protocol Detection, SecuriTeam, 06:04
[EXPL] Microsoft Internet Explorer .ANI Files Handling Exploit (MS05-002), SecuriTeam, 05:54
[UNIX] Darwin Kernel ncmds Vulnerability, SecuriTeam, 05:44
[REVS] SQL Injection Attacks by Example, SecuriTeam, 05:34

January 23, 2005

[EXPL] Multiple Vulnerabilities in Konversation (Exploit), SecuriTeam, 14:02
[NT] Multiple Vulnerabilities in the AtHoc Toolbar for MSIE, SecuriTeam, 13:52
[NEWS] Vulnerability in Cisco IOS Embedded Call Processing Solutions, SecuriTeam, 13:42
[UNIX] GForge Directory Traversal Vulnerability, SecuriTeam, 13:32
[NT] RealPlayer Miscellaneous Vulnerabilities (RMP, RJS), SecuriTeam, 13:22
[NT] RealPlayer Arbitrary File Deletion Vulnerability, SecuriTeam, 13:12
[NT] RealPlayer 'ShowPreferences' Buffer Overflow Vulnerability, SecuriTeam, 13:02
[NT] Microsoft Internet Explorer Install Engine Control Buffer Overflow (MS04-038), SecuriTeam, 12:51
[UNIX] JSBoard Arbitrary File Reading, SecuriTeam, 12:41
[EXPL] fkey Symblink Vulnerability, SecuriTeam, 12:21
[UNIX] Multiple Vulnerabilities in Konversation, SecuriTeam, 12:01
[NT] DivX Player Skin Directory Traversal, SecuriTeam, 11:51
[NT] Multiple Vulnerabilities in Comersus BackOffice Lite, SecuriTeam, 11:51
[NEWS] 3Com OfficeConnect Wireless 11g AP Information Disclosure, SecuriTeam, 11:41
[UNIX] KOffice PDF Import Filter Vulnerability, SecuriTeam, 11:31
[UNIX] Mac OS X 10.3 iSync Local Privilege Escalation (mRouter), SecuriTeam, 11:21
[NT] Microsoft NetDDE Service Unauthenticated Remote Buffer Overflow (MS04-031), SecuriTeam, 11:21
[UNIX] Multiple UNIX/Linux Vendor Xpdf makeFileKey2 Stack Overflow, SecuriTeam, 11:11
[TOOL] MsnShell - Covert Shell Tunneling Through MSN Protocol, SecuriTeam, 11:01
[UNIX] Siteman User Database Line Insertion Vulnerability, SecuriTeam, 10:51
[NEWS] Multiple Vulnerabilities in Netgear FVS318 Router, SecuriTeam, 10:41
[UNIX] MySQL MaxDB Web Agent Multiple DoS Vulnerabilities (sapdbwa_GetUserData), SecuriTeam, 10:30
[TOOL] Bilbo - An Automated Nmap Scanner and Reporter Tool, SecuriTeam, 10:20
[UNIX] Gallery Cross Site Scripting Vulnerability, SecuriTeam, 10:10

January 19, 2005

[NT] NodeManager Professional Buffer Overflow (%DATA), SecuriTeam, 18:39
[NT] Netegrity SiteMinder smpwservicescgi.exe Target Redirection, SecuriTeam, 18:39
[UNIX] Multiple Vendor ImageMagick .psd Image File Decode Heap Overflow Vulnerability, SecuriTeam, 18:39
[NEWS] AWStats Remote Command Execution Vulnerability (configdir), SecuriTeam, 18:39
[NT] Internet Explorer Handling of %20 Allows Spoofing, SecuriTeam, 18:38
[UNIX] SGallery Multiple Vulnerabilities (SQL Injection, Path Disclosure, File Inclusion), SecuriTeam, 18:38
[NT] Breed Malfored UDP DoS, SecuriTeam, 18:38
[NT] Halocon Malformed UDP DoS, SecuriTeam, 18:38
[UNIX] PHP Gift Registry SQL Injection, SecuriTeam, 18:37
[UNIX] Apache mod_auth_radius Remote Integer Overflow (Exploit), SecuriTeam, 18:37
[UNIX] Horde Cross Site Scripting Holes, SecuriTeam, 18:37
[EXPL] ITA Forum SQL Injection, SecuriTeam, 18:37
[UNIX] SparkleBlog SQL Injection, SecuriTeam, 18:37
[EXPL] Linux Kernel i386 SMP Page Fault Handler Privilege Escalation (Exploit), SecuriTeam, 18:37
[EXPL] Apple iTunes Playlist Parsing Buffer Overflow (Exploit), SecuriTeam, 18:37
[UNIX] SGI IRIX inpview Design Error Vulnerability, SecuriTeam, 18:37
[UNIX] MySQL MaxDB WebAgent websql logon Buffer Overflow Vulnerability, SecuriTeam, 18:37
[NT] Apple iTunes Playlist Parsing Buffer Overflow, SecuriTeam, 18:37
[NEWS] Froogle Cross Site Scripting Leads to Cookie Theft, SecuriTeam, 18:37
[EXPL] Exim dns_buld_reverse() Exploit, SecuriTeam, 18:37
[UNIX] Exim dns_buld_reverse() Buffer Overflow Vulnerability, SecuriTeam, 18:37
Re: [Full-Disclosure] Multi-vendor AV gateway image inspection bypass vulnerability, Trog, 18:36
[UNIX] ZeroBoard Multiple Vulnerabilities, SecuriTeam, 18:34
[EXPL] Veritas Backup Exec Agent Browser Registration Request Exploit, SecuriTeam, 18:33
[UNIX] Linux Kernel i386 SMP Page Fault Handler Privilege Escalation, SecuriTeam, 18:33
[NT] Vulnerability in HTML Help Allows Code Execution (MS05-001), SecuriTeam, 18:33
[NEWS] Using data: URLs for Malware Injection (Opera), SecuriTeam, 18:33
[NT] Windows ANI File Parsing Buffer Overflow (MS05-002), SecuriTeam, 18:33
[NT] Vulnerability in the Indexing Service Allows Remote Code Execution (MS05-003), SecuriTeam, 18:33
[NT] Vulnerability in Cursor and Icon Format Handling Allows Remote Code Execution (MS05-002), SecuriTeam, 18:33

January 11, 2005

Re: [Full-Disclosure] Multi-vendor AV gateway image inspection bypass vulnerability, Danny, 16:34
[NT] Microsoft Windows LPC Heap Overflow, SecuriTeam, 09:51
[NT] Mozilla Firefox Window Spoofing (Firespoofing), SecuriTeam, 09:51
[NEWS] Multi-Vendor AntiVirus Gateway Image Inspection Bypass (data:), SecuriTeam, 09:01
[NT] Microsoft Windows Improper Token Validation, SecuriTeam, 08:51
[EXPL] Windows LSASS Exploit Code (MS04-044), SecuriTeam, 08:41

January 10, 2005

[Full-Disclosure] Multi-vendor AV gateway image inspection bypass vulnerability, Darren Bounds, 18:15
[UNIX] PHP-Calendar File Inclusion Vulnerability (phpc_root_path), SecuriTeam, 12:52
[UNIX] WPkontakt Message Parsing Error, SecuriTeam, 12:42
[UNIX] QNX Crrtrap Arbitrary File Read/Write Vulnerability, SecuriTeam, 11:11
[UNIX] htget Remotely Exploitable Buffer Overflow (ReadLine), SecuriTeam, 10:51
[UNIX] Simple PHP Blog Directory Traversal, SecuriTeam, 10:31

January 09, 2005

[NEWS] Multiple IBM DB2 Vulnerabilities, SecuriTeam, 14:58
[REVS] Hacking Bluetooth Enabled Mobile Phones and Beyond, SecuriTeam, 14:48
[TOOL] Libvg - Runtime Process Manipulation Library, SecuriTeam, 14:17
[NT] Multiple Firewall Products Bypass Vulnerability, SecuriTeam, 12:45
[NT] Amp II 3D Engine Unreacheable Socket, SecuriTeam, 12:35
[UNIX] SugarCRM Arbitrary File Inclusion, SecuriTeam, 12:15
[NT] Multiple Vulnerabilities in WinAce and WinHKI File Archievers, SecuriTeam, 11:13
[NEWS] Mozilla XBM DoS, SecuriTeam, 08:11
[NEWS] PRADO 'page' Parameter Allows Code Execution, SecuriTeam, 08:01
[NT] Multiple Vulnerabilities in Jeuce Personal Web Server, SecuriTeam, 07:00
[UNIX] Exim host_aton() Buffer Overflow Vulnerability, SecuriTeam, 06:50
[UNIX] b2Evolution 'title' SQL Injection, SecuriTeam, 06:50
[UNIX] PHPWind Skin Vulnerability (Exploit), SecuriTeam, 06:40
[UNIX] Linux Kernel uselib() Privilege Elevation, SecuriTeam, 06:29
[UNIX] Exim auth_spa_server() Buffer Overflow Vulnerability, SecuriTeam, 06:29

January 07, 2005

[Full-Disclosure] WinHKI BH File Incorrect Filename Handeling Leads to 100 CPU%, Rafel Ivgi, The-Insider, 02:22

January 06, 2005

[Full-Disclosure] All Symantec Products All Versions Until 2005 - Remote Stack Buffer Overflow, Rafel Ivgi, The-Insider, 07:00

January 05, 2005

[UNIX] Various Vulnerabilities in OWL Intranet Engine, SecuriTeam, 14:18
[UNIX] MyCart Discloses Settings Information to Remote Users, SecuriTeam, 14:08
[UNIX] Jacks FormMail.php Remote File Access Vulnerability, SecuriTeam, 13:57
[UNIX] Multiple PhotoPost Pro Vulnerabilities, SecuriTeam, 12:57
[UNIX] Apache "htdigest" Buffer Overflow, SecuriTeam, 12:47
[UNIX] FTP Kioslave Command Injection, SecuriTeam, 12:37
[NT] SOLDNER Multiple Vulnerabilities, SecuriTeam, 12:16
[UNIX] QWikiWiki Directory Traversal Vulnerability, SecuriTeam, 12:06
[UNIX] MyBB member.php SQL Injection, SecuriTeam, 11:46
[UNIX] PHPKIT userinfo.php SQL Injection, SecuriTeam, 11:06
[TOOL] THC PPTP Bruter, SecuriTeam, 10:56

January 04, 2005

[NT] Internet Explorer FTP Client Directory Traversal, SecuriTeam, 14:07
[UNIX] Multiple Vulnerabilities in FlatNuke, SecuriTeam, 10:55
[NT] Remote DoS in GFI MailEssentials (Microsoft HTML Parser), SecuriTeam, 09:55
[UNIX] William LeFebvre "top" Format String Vulnerability, SecuriTeam, 08:44
[EXPL] iWebNegar Configuration Nullification (DoS), SecuriTeam, 08:24
[TOOL] VoIPong - VOIP Detector and Sniffer, SecuriTeam, 06:24

January 03, 2005

[UNIX] GNUBoard Multiple Extensions Vulnerability, SecuriTeam, 15:17
[UNIX] HTTP Response Splitting and Cross Site Scripting in ViewCVS, SecuriTeam, 13:06
[NT] ArGoSoft FTP Server Reveals Valid Usernames and Allows Brute Forcing Attacks, SecuriTeam, 12:56

January 02, 2005

[UNIX] SQL Injection Vulnerability in IBProArcade (Arcade.php), SecuriTeam, 13:46
[UNIX] vBulletin init.php SQL Injection (specialtemplates), SecuriTeam, 13:35
[UNIX] Mozilla Browser NNTP Heap Overflow, SecuriTeam, 12:55
[EXPL] NetDDE MS04-031 Exploit Code, SecuriTeam, 07:52
[EXPL] WINS MS04-045 Exploit Code, SecuriTeam, 07:52
[UNIX] KorWeblog PHP Injection Vulnerability, SecuriTeam, 07:12