Securiteam Exploits/Hacking Tools Newsletter (thread)

[UNIX] phpEventCalendar HTML Injection, SecuriTeam, 2005/01/31
[UNIX] JShop Cross Site Scripting, SecuriTeam, 2005/01/31
[NT] Defeating Microsoft Windows XP SP2 Heap Protection and DEP Bypass, SecuriTeam, 2005/01/31
[NT] Multiple Vulnerabilities in Alt-N WebAdmin, SecuriTeam, 2005/01/31
[NT] Buffer Overflow in WinAMP in_cdda.dll CDA Device Name, SecuriTeam, 2005/01/27
[NT] HKLM CurrentVersion Locking, SecuriTeam, 2005/01/27
[NT] Multiple Pocket IE Vulnerabilities, SecuriTeam, 2005/01/27
[NEWS] Cisco IOS Misformed BGP Packet Causes Reload, SecuriTeam, 2005/01/27
[NEWS] Spectrum Cash Receipting System Weak Password Encryption, SecuriTeam, 2005/01/26
[NEWS] Multiple Crafted IPv6 Packets Cause Reload, SecuriTeam, 2005/01/26
[NEWS] Opensawn XAUTH/PAM Buffer Overflow, SecuriTeam, 2005/01/26
[NEWS] Crafted Packet Causes Reload on Cisco Routers, SecuriTeam, 2005/01/26
- [NEWS] Crafted Packet Causes Reload on Cisco Routers, SecuriTeam, 2005/01/26
[UNIX] gpsd Format String Vulnerability, SecuriTeam, 2005/01/26
[TOOL] KSB26 - Kernel Socks Bouncer, SecuriTeam, 2005/01/26
[UNIX] Comdev eCommerce Cross Site Scripting, SecuriTeam, 2005/01/26
[TOOL] L7-Filter - Application Layer Packet Classifier for Linux, SecuriTeam, 2005/01/26
[TOOL] Skeeve - Software For Creating Cover Channel With ICMP Tunnel, SecuriTeam, 2005/01/26
[REVS] Data Tastes Better Seasoned: Introducing the ASH Family of Hashing Algorithms, SecuriTeam, 2005/01/26
[NT] Multiple Buffer Overflows in Golden FTP Server, SecuriTeam, 2005/01/26
[NT] W32Dasm Local Buffer Overflow, SecuriTeam, 2005/01/26
[UNIX] Multiple Vulnerabilities in MercuryBoard, SecuriTeam, 2005/01/26
[NEWS] Multi Vendor fd_set Structure Bitmap Array Index Overflow, SecuriTeam, 2005/01/26
[NEWS] DataRescue Interactive Disassembler Pro Buffer Overflow Vulnerability, SecuriTeam, 2005/01/26
[NT] MSN Heartbeat Control Buffer Overflow (MS04-038), SecuriTeam, 2005/01/26
[TOOL] Cctde - Covert Channel and Tunneling Over the HTTP Protocol Detection, SecuriTeam, 2005/01/26
[EXPL] Microsoft Internet Explorer .ANI Files Handling Exploit (MS05-002), SecuriTeam, 2005/01/26
[UNIX] Darwin Kernel ncmds Vulnerability, SecuriTeam, 2005/01/26
[REVS] SQL Injection Attacks by Example, SecuriTeam, 2005/01/26
[EXPL] Multiple Vulnerabilities in Konversation (Exploit), SecuriTeam, 2005/01/23
[NT] Multiple Vulnerabilities in the AtHoc Toolbar for MSIE, SecuriTeam, 2005/01/23
[NEWS] Vulnerability in Cisco IOS Embedded Call Processing Solutions, SecuriTeam, 2005/01/23
[UNIX] GForge Directory Traversal Vulnerability, SecuriTeam, 2005/01/23
[NT] RealPlayer Miscellaneous Vulnerabilities (RMP, RJS), SecuriTeam, 2005/01/23
[NT] RealPlayer Arbitrary File Deletion Vulnerability, SecuriTeam, 2005/01/23
[NT] RealPlayer 'ShowPreferences' Buffer Overflow Vulnerability, SecuriTeam, 2005/01/23
[NT] Microsoft Internet Explorer Install Engine Control Buffer Overflow (MS04-038), SecuriTeam, 2005/01/23
[UNIX] JSBoard Arbitrary File Reading, SecuriTeam, 2005/01/23
[EXPL] fkey Symblink Vulnerability, SecuriTeam, 2005/01/23
[UNIX] Multiple Vulnerabilities in Konversation, SecuriTeam, 2005/01/23
[NT] DivX Player Skin Directory Traversal, SecuriTeam, 2005/01/23
[NT] Multiple Vulnerabilities in Comersus BackOffice Lite, SecuriTeam, 2005/01/23
[NEWS] 3Com OfficeConnect Wireless 11g AP Information Disclosure, SecuriTeam, 2005/01/23
[UNIX] KOffice PDF Import Filter Vulnerability, SecuriTeam, 2005/01/23
[UNIX] Mac OS X 10.3 iSync Local Privilege Escalation (mRouter), SecuriTeam, 2005/01/23
[NT] Microsoft NetDDE Service Unauthenticated Remote Buffer Overflow (MS04-031), SecuriTeam, 2005/01/23
[UNIX] Multiple UNIX/Linux Vendor Xpdf makeFileKey2 Stack Overflow, SecuriTeam, 2005/01/23
[TOOL] MsnShell - Covert Shell Tunneling Through MSN Protocol, SecuriTeam, 2005/01/23
[UNIX] Siteman User Database Line Insertion Vulnerability, SecuriTeam, 2005/01/23
[NEWS] Multiple Vulnerabilities in Netgear FVS318 Router, SecuriTeam, 2005/01/23
[UNIX] MySQL MaxDB Web Agent Multiple DoS Vulnerabilities (sapdbwa_GetUserData), SecuriTeam, 2005/01/23
[TOOL] Bilbo - An Automated Nmap Scanner and Reporter Tool, SecuriTeam, 2005/01/23
[UNIX] Gallery Cross Site Scripting Vulnerability, SecuriTeam, 2005/01/23
[NT] NodeManager Professional Buffer Overflow (%DATA), SecuriTeam, 2005/01/19
[NT] Netegrity SiteMinder smpwservicescgi.exe Target Redirection, SecuriTeam, 2005/01/19
[UNIX] Multiple Vendor ImageMagick .psd Image File Decode Heap Overflow Vulnerability, SecuriTeam, 2005/01/19
[NEWS] AWStats Remote Command Execution Vulnerability (configdir), SecuriTeam, 2005/01/19
[NT] Internet Explorer Handling of %20 Allows Spoofing, SecuriTeam, 2005/01/19
[UNIX] SGallery Multiple Vulnerabilities (SQL Injection, Path Disclosure, File Inclusion), SecuriTeam, 2005/01/19
[NT] Breed Malfored UDP DoS, SecuriTeam, 2005/01/19
[NT] Halocon Malformed UDP DoS, SecuriTeam, 2005/01/19
[UNIX] PHP Gift Registry SQL Injection, SecuriTeam, 2005/01/19
[UNIX] Apache mod_auth_radius Remote Integer Overflow (Exploit), SecuriTeam, 2005/01/19
[UNIX] Horde Cross Site Scripting Holes, SecuriTeam, 2005/01/19
[EXPL] ITA Forum SQL Injection, SecuriTeam, 2005/01/19
[UNIX] SparkleBlog SQL Injection, SecuriTeam, 2005/01/19
[EXPL] Linux Kernel i386 SMP Page Fault Handler Privilege Escalation (Exploit), SecuriTeam, 2005/01/19
[EXPL] Apple iTunes Playlist Parsing Buffer Overflow (Exploit), SecuriTeam, 2005/01/19
[UNIX] SGI IRIX inpview Design Error Vulnerability, SecuriTeam, 2005/01/19
[UNIX] MySQL MaxDB WebAgent websql logon Buffer Overflow Vulnerability, SecuriTeam, 2005/01/19
[NT] Apple iTunes Playlist Parsing Buffer Overflow, SecuriTeam, 2005/01/19
[NEWS] Froogle Cross Site Scripting Leads to Cookie Theft, SecuriTeam, 2005/01/19
[EXPL] Exim dns_buld_reverse() Exploit, SecuriTeam, 2005/01/19
[UNIX] Exim dns_buld_reverse() Buffer Overflow Vulnerability, SecuriTeam, 2005/01/19
Re: [Full-Disclosure] Multi-vendor AV gateway image inspection bypass vulnerability, Trog, 2005/01/19
[UNIX] ZeroBoard Multiple Vulnerabilities, SecuriTeam, 2005/01/19
[EXPL] Veritas Backup Exec Agent Browser Registration Request Exploit, SecuriTeam, 2005/01/19
[UNIX] Linux Kernel i386 SMP Page Fault Handler Privilege Escalation, SecuriTeam, 2005/01/19
[NT] Vulnerability in HTML Help Allows Code Execution (MS05-001), SecuriTeam, 2005/01/19
[NEWS] Using data: URLs for Malware Injection (Opera), SecuriTeam, 2005/01/19
[NT] Windows ANI File Parsing Buffer Overflow (MS05-002), SecuriTeam, 2005/01/19
[NT] Vulnerability in the Indexing Service Allows Remote Code Execution (MS05-003), SecuriTeam, 2005/01/19
[NT] Vulnerability in Cursor and Icon Format Handling Allows Remote Code Execution (MS05-002), SecuriTeam, 2005/01/19
[NT] Microsoft Windows LPC Heap Overflow, SecuriTeam, 2005/01/11
[NT] Mozilla Firefox Window Spoofing (Firespoofing), SecuriTeam, 2005/01/11
[NEWS] Multi-Vendor AntiVirus Gateway Image Inspection Bypass (data:), SecuriTeam, 2005/01/11
[NT] Microsoft Windows Improper Token Validation, SecuriTeam, 2005/01/11
[EXPL] Windows LSASS Exploit Code (MS04-044), SecuriTeam, 2005/01/11
[Full-Disclosure] Multi-vendor AV gateway image inspection bypass vulnerability, Darren Bounds, 2005/01/10
- Re: [Full-Disclosure] Multi-vendor AV gateway image inspection bypass vulnerability, Danny, 2005/01/11
[UNIX] PHP-Calendar File Inclusion Vulnerability (phpc_root_path), SecuriTeam, 2005/01/10
[UNIX] WPkontakt Message Parsing Error, SecuriTeam, 2005/01/10
[UNIX] QNX Crrtrap Arbitrary File Read/Write Vulnerability, SecuriTeam, 2005/01/10
[UNIX] htget Remotely Exploitable Buffer Overflow (ReadLine), SecuriTeam, 2005/01/10
[UNIX] Simple PHP Blog Directory Traversal, SecuriTeam, 2005/01/10
[NEWS] Multiple IBM DB2 Vulnerabilities, SecuriTeam, 2005/01/09
[REVS] Hacking Bluetooth Enabled Mobile Phones and Beyond, SecuriTeam, 2005/01/09
[TOOL] Libvg - Runtime Process Manipulation Library, SecuriTeam, 2005/01/09
[NT] Multiple Firewall Products Bypass Vulnerability, SecuriTeam, 2005/01/09
[NT] Amp II 3D Engine Unreacheable Socket, SecuriTeam, 2005/01/09
[UNIX] SugarCRM Arbitrary File Inclusion, SecuriTeam, 2005/01/09
[NT] Multiple Vulnerabilities in WinAce and WinHKI File Archievers, SecuriTeam, 2005/01/09
[NEWS] Mozilla XBM DoS, SecuriTeam, 2005/01/09
[NEWS] PRADO 'page' Parameter Allows Code Execution, SecuriTeam, 2005/01/09
[NT] Multiple Vulnerabilities in Jeuce Personal Web Server, SecuriTeam, 2005/01/09
[UNIX] Exim host_aton() Buffer Overflow Vulnerability, SecuriTeam, 2005/01/09
[UNIX] b2Evolution 'title' SQL Injection, SecuriTeam, 2005/01/09
[UNIX] PHPWind Skin Vulnerability (Exploit), SecuriTeam, 2005/01/09
[UNIX] Linux Kernel uselib() Privilege Elevation, SecuriTeam, 2005/01/09
[UNIX] Exim auth_spa_server() Buffer Overflow Vulnerability, SecuriTeam, 2005/01/09
[Full-Disclosure] WinHKI BH File Incorrect Filename Handeling Leads to 100 CPU%, Rafel Ivgi, The-Insider, 2005/01/07
[Full-Disclosure] All Symantec Products All Versions Until 2005 - Remote Stack Buffer Overflow, Rafel Ivgi, The-Insider, 2005/01/06
[UNIX] Various Vulnerabilities in OWL Intranet Engine, SecuriTeam, 2005/01/05
[UNIX] MyCart Discloses Settings Information to Remote Users, SecuriTeam, 2005/01/05
[UNIX] Jacks FormMail.php Remote File Access Vulnerability, SecuriTeam, 2005/01/05
[UNIX] Multiple PhotoPost Pro Vulnerabilities, SecuriTeam, 2005/01/05
[UNIX] Apache "htdigest" Buffer Overflow, SecuriTeam, 2005/01/05
[UNIX] FTP Kioslave Command Injection, SecuriTeam, 2005/01/05
[NT] SOLDNER Multiple Vulnerabilities, SecuriTeam, 2005/01/05
[UNIX] QWikiWiki Directory Traversal Vulnerability, SecuriTeam, 2005/01/05
[UNIX] MyBB member.php SQL Injection, SecuriTeam, 2005/01/05
[UNIX] PHPKIT userinfo.php SQL Injection, SecuriTeam, 2005/01/05
[TOOL] THC PPTP Bruter, SecuriTeam, 2005/01/05
[NT] Internet Explorer FTP Client Directory Traversal, SecuriTeam, 2005/01/04
[UNIX] Multiple Vulnerabilities in FlatNuke, SecuriTeam, 2005/01/04
[NT] Remote DoS in GFI MailEssentials (Microsoft HTML Parser), SecuriTeam, 2005/01/04
[UNIX] William LeFebvre "top" Format String Vulnerability, SecuriTeam, 2005/01/04
[EXPL] iWebNegar Configuration Nullification (DoS), SecuriTeam, 2005/01/04
[TOOL] VoIPong - VOIP Detector and Sniffer, SecuriTeam, 2005/01/04
[UNIX] GNUBoard Multiple Extensions Vulnerability, SecuriTeam, 2005/01/03
[UNIX] HTTP Response Splitting and Cross Site Scripting in ViewCVS, SecuriTeam, 2005/01/03
[NT] ArGoSoft FTP Server Reveals Valid Usernames and Allows Brute Forcing Attacks, SecuriTeam, 2005/01/03
[UNIX] SQL Injection Vulnerability in IBProArcade (Arcade.php), SecuriTeam, 2005/01/02
[UNIX] vBulletin init.php SQL Injection (specialtemplates), SecuriTeam, 2005/01/02
[UNIX] Mozilla Browser NNTP Heap Overflow, SecuriTeam, 2005/01/02
[EXPL] NetDDE MS04-031 Exploit Code, SecuriTeam, 2005/01/02
[EXPL] WINS MS04-045 Exploit Code, SecuriTeam, 2005/01/02
[UNIX] KorWeblog PHP Injection Vulnerability, SecuriTeam, 2005/01/02