Network Security Archives

Securiteam Exploits/Hacking Tools Newsletter (date)

[Thread Index] [Top] [All Lists]

September 29, 2005

[EXPL] BlenderPlayer Local Buffer Overflow (Exploit), SecuriTeam, 15:16
[UNIX] Serendipity Account Hijacking and CSRF Vulnerability, SecuriTeam, 15:05
[UNIX] SquirrelMail Address Add Plugin XSS, SecuriTeam, 14:55
[REVS] Exploring Windows CE Shellcode, SecuriTeam, 14:45
[EXPL] Mercury/32 Mail Buffer Overflow (LIST, Exploit), SecuriTeam, 13:54
[UNIX] TWiki Command Execution Vulnerability, SecuriTeam, 13:44
[EXPL] MCCS Server and Client Command DoS (Exploit), SecuriTeam, 13:24
[UNIX] UMN Gopher Client Buffer Overflows (Exploit), SecuriTeam, 13:14
[UNIX] MAXdev MD-Pro Multiple Vulnerabilities (Code Execution, Path Disclosure and CSS), SecuriTeam, 13:03
[UNIX] Alstrasoft Epay Pro Directory Traversal, SecuriTeam, 12:53
[NEWS] HP LaserJet Information Disclosure, SecuriTeam, 12:43
[NEWS] Nokia OBEX DoS, SecuriTeam, 12:12
[EXPL] GNU Mailutils Imap4d 'search' Format String (Exploit, C), SecuriTeam, 12:02
[NT] Novell GroupWise Client Integer Overflow, SecuriTeam, 11:52
[NEWS] Mac OS X malloc() Local Privilege Escalation, SecuriTeam, 11:01
[NT] FL Studio Heap Overflow, SecuriTeam, 11:01
[EXPL] Barracuda Spam Firewall img.pl Command Execution (Exploit), SecuriTeam, 10:51
[NT] PowerArchiver ACE and ARJ Archive Handling Buffer Overflow, SecuriTeam, 08:00
[REVS] Exploiting kmalloc Based Buffer Overflows, SecuriTeam, 07:50
[NT] 7-Zip ARJ Archive Buffer Overflow, SecuriTeam, 07:49
[UNIX] PHP-Fusion msg_send SQL Injection, SecuriTeam, 07:29
[NT] AntiVirus Filename Bypassing, SecuriTeam, 07:29

September 28, 2005

[UNIX] WordPress User Privilege Escalation, SecuriTeam, 10:07
[NEWS] Opera Mail Client Attachment Spoofing and Script Injection, SecuriTeam, 10:07
[UNIX] Bacula Insecure Temporary File Creation and Information Disclosure, SecuriTeam, 09:57

September 27, 2005

[UNIX] CuteNews Code Execution (ip2long), SecuriTeam, 13:55
[UNIX] Perl Module pam_per_user Authentication Bypassing, SecuriTeam, 13:45
[UNIX] myBloggie SQL Injection/Privilege Escalation, SecuriTeam, 13:35
[NEWS] HelixPlayer Based Players Format String, SecuriTeam, 13:25
[NT] SecureW2 Weak Random Seeding for PMS, SecuriTeam, 13:14
[EXPL] Qpopper Poppassd Local Root (Linux, FreeBSD, Exploit, ld.so.preload), SecuriTeam, 13:04
[EXPL] Gadu-Gadu Invisible Users Detection Vulnerability, SecuriTeam, 12:54
[EXPL] Mozilla Browsers Remote Heap Buffer Overrun (Exploit , 0xAD HOST), SecuriTeam, 12:44
[UNIX] Webmin and Usermin PAM Authentication Bypass Vulnerability, SecuriTeam, 12:34
[EXPL] HP LaserJet Network Username and Information Enumeration, SecuriTeam, 12:24
[NEWS] Gecko Based Browsers Proxy Auto-Config Script DoS, SecuriTeam, 12:14

September 26, 2005

[UNIX] kcheckpass Insecure File Operation, SecuriTeam, 14:03
[NEWS] MultiTheftAuto Privileges Escalation and DoS Vulnerabilities, SecuriTeam, 13:52
[UNIX] My Little Forum SQL Injection, SecuriTeam, 13:42
[TOOL] GreenPlaque - Multi-dongle Bluetooth Discovery Scanner, SecuriTeam, 13:32
[NEWS] Gecko based browsers Stack Corruption, SecuriTeam, 13:22
[REVS] Exploiting The XmlHttpRequest Object In IE, SecuriTeam, 13:12
[EXPL] Wzdftpd Code Execution (Unfiltered Pipe in Popen), SecuriTeam, 13:02
[REVS] Writing Small Shellcode In Windows, SecuriTeam, 12:51

September 20, 2005

[NT] Antigen for Exchange and SMTP Rule Bypassing Vulnerability, SecuriTeam, 07:48
[NEWS] Mozilla / Mozilla Firefox Authentication Weakness, SecuriTeam, 06:58

September 19, 2005

[UNIX] Two Bugzilla Information Disclosure Vulnerabilities, SecuriTeam, 07:24
[UNIX] vBulletin Information Disclosure (backup.php), SecuriTeam, 07:14
[UNIX] ncompress Insecure Temporary File Creation, SecuriTeam, 07:14
[NT] FileZilla Weak Password Encryption, SecuriTeam, 07:04
[NEWS] QNX RTOS inputtrap Arbitrary File Reading, SecuriTeam, 06:54
[NEWS] Silc Server and Toolkit Symlink Attack, SecuriTeam, 06:54
[EXPL] Stoney FTPd Buffer Overflow (PORT, Exploit), SecuriTeam, 06:44
[UNIX] GWCC Insecure Temporary File Creation, SecuriTeam, 06:44
[UNIX] ARC Insecure Temporary File Creation, SecuriTeam, 06:34
[TOOL] Analyzer - PHP Security Prober, SecuriTeam, 06:24
[NT] BNBT EasyTracker DoS, SecuriTeam, 06:14
[NT] Computer Associates BrightStor ARCserve/Enterprise Backup Agents Buffer Overflow, SecuriTeam, 06:14
[NEWS] Oracle Reports Lexical References SQL Injection, SecuriTeam, 06:03
[EXPL] CuteNews Code Execution (Exploit), SecuriTeam, 06:03

September 15, 2005

[TOOL] OpenAAPD - Anti ARP Poisoning Daemon, SecuriTeam, 08:45
[UNIX] Gtkdiskfree Insecure Temporary File Creation, SecuriTeam, 08:25
[EXPL] Wireless Tools Local Buffer Overflow (Iwconfig, Exploit), SecuriTeam, 08:15
[EXPL] Fastream NETFile FTP/Web Server HTTP HEAD DoS (Exploit), SecuriTeam, 08:05
[EXPL] GNU Mailutils imap4d 'search' Format String (Exploit), SecuriTeam, 08:05
[UNIX] GNU Mailutils imap4d 'search' Format String Vulnerability, SecuriTeam, 07:55
[UNIX] Jaws Multiple Code Execution Vulnerabilities (XML_RPC, path), SecuriTeam, 07:35
[NT] AVIRA Antivirus ACE Archive Handling Buffer Overflow, SecuriTeam, 07:24

September 14, 2005

[NEWS] Linksys WRT54G Router Multiple Vulnerabilities (Buffer Overflow, Multiple Authentication Bypass, DoS), SecuriTeam, 15:36
[EXPL] VisualBoy Advanced Local Buffer Overflow (Exploit), SecuriTeam, 15:16
[TOOL] OpenSC Smart Card Library, SecuriTeam, 14:35

September 13, 2005

[EXPL] Counter Strike 2D DoS (Exploit), SecuriTeam, 13:26
[UNIX] PPPd DoS, SecuriTeam, 13:25
[UNIX] URBAN Multiple Vulnerabilities, SecuriTeam, 13:14
[NEWS] Gecko Based Browser IDN Buffer Overflow, SecuriTeam, 12:49
[TOOL] Ycrack - Yahoo Mail Password Brute Forcer, SecuriTeam, 12:38
[NEWS] Mercury Mail Multiple Buffer Overflows, SecuriTeam, 12:28
[NT] Windows XP Firewall Bypassing (Registry Based), SecuriTeam, 12:28
[NT] KillProcess "FileDescription" Local Buffer Overflow, SecuriTeam, 12:18
[NT] COOL! Remote Control DoS, SecuriTeam, 12:08
[NT] Ipswitch Whatsup Multiple Vulnerabilities, SecuriTeam, 11:58
[NEWS] Zebedee DoS, SecuriTeam, 11:58
[TOOL] TAPiON - Polymorphic Deciphering Algorithm Generator Project, SecuriTeam, 11:48
[NT] Rediff Bol Exposes WAB Contacts, SecuriTeam, 11:27
[UNIX] Bluez Hcid popen() Explained, SecuriTeam, 11:17
[UNIX] Frox Aribitary File Access, SecuriTeam, 07:45
[UNIX] Snort SACK TCP Option Handling DoS, SecuriTeam, 07:45

September 08, 2005

[UNIX] mutt mutt_decode_xbit() Buffer Overflow, SecuriTeam, 09:55
[REVS] Understanding and Preventing DNS-related Attacks by Phishers, SecuriTeam, 09:55
[NT] Fastream NETFile FTP/Web Server HTTP HEAD DoS, SecuriTeam, 09:45
[EXPL] Microsoft Windows CSRSS Local Privileges Escalation (MS05-018, Exploit), SecuriTeam, 09:45
[NT] Quake 2 Server Format String (Lithium II), SecuriTeam, 09:35
[UNIX] ncpfs Buffer Overflow, SecuriTeam, 09:25
[NEWS] Mozilla XPCOM Library Race Condition, SecuriTeam, 08:04
[NT] WebArchiveX Unsafe Methods Vulnerability, SecuriTeam, 07:44
[NT] SecureOL VE2 Information Disclosure, SecuriTeam, 06:03
[NEWS] Cisco IOS Firewall Authentication Proxy for FTP and Telnet Sessions Buffer Overflow, SecuriTeam, 05:43

September 07, 2005

[NT] IIS 5.1 Source Disclosure Under FAT/FAT32 Volumes Using WebDAV, SecuriTeam, 10:33
[UNIX] phpCommunityCalendar Vulnerable to SQL Injections and Cross Site Scripting Attacks, SecuriTeam, 08:12
[NT] USB Lock Auto-Protect Locally Stored Password Recovery, SecuriTeam, 08:12
[UNIX] Kcheckpass Local Root Vulnerability, SecuriTeam, 08:02
[NT] Microsoft Windows keybd_event Validation Vulnerability, SecuriTeam, 07:02
[UNIX] SqWebMail Conditional Comments Script Insertion, SecuriTeam, 06:52
[EXPL] Man2web CGI Command Execution, SecuriTeam, 06:31
[EXPL] CUPS Dot-Slash DoS, SecuriTeam, 06:21
[NT] ZipTorrent Local Information Disclosure, SecuriTeam, 06:21

September 05, 2005

[NEWS] Barracuda Spam Firewall Appliance (Directory Traveral, Remote Execution, Password Retrieving), SecuriTeam, 12:21
[NT] P2P Pro Command DoS, SecuriTeam, 12:00
[NT] DC++ bzip2 Decompression Routine DoS, SecuriTeam, 12:00
[EXPL] Adobe Version Cue VCNative Privileges Escalation (Exploit), SecuriTeam, 09:49
[NT] 3Com Network Supervisor Directory Traversal, SecuriTeam, 09:49
[NEWS] Novell NetMail Multiple Vulnerabilities (Buffer Overflow and XSS), SecuriTeam, 09:39
[NEWS] Multiple Vendor Web Vulnerability Scanner Arbitrary DHTML Injection, SecuriTeam, 09:39
[NT] FREE SMTP Open Relay Vulnerability, SecuriTeam, 07:28
[EXPL] Adobe Version Cue VCNative Symlink Attack (Exploit), SecuriTeam, 07:18
[TOOL] NotSPIKEfile - Linux Based File Format Fuzzing Tool, SecuriTeam, 07:08
[TOOL] SPIKEfile - Linux Based File Format Fuzzing Tool, SecuriTeam, 07:08
[TOOL] FileFuzz - Windows Based File Format Fuzzing Tool, SecuriTeam, 07:08
[UNIX] PHP Images Galleries EXIF Metadata XSS Multiple Vulnerabilities, SecuriTeam, 06:58

September 04, 2005

[NEWS] HOCR Local Buffer Overflows, SecuriTeam, 09:30
[NT] Slim FTPd DoS (Exploit), SecuriTeam, 06:28
[EXPL] phpLDAPadmin Command Execution (Exploit), SecuriTeam, 06:18

September 01, 2005

[TOOL] RWKG Random WEP/WPA Keys Generator, SecuriTeam, 14:30
[NT] Indiatimes Messenger Buffer Overflow (Exploit), SecuriTeam, 14:10
[EXPL] SimpleProxy Local Format String (Exploit), SecuriTeam, 05:15