Vulnerability Development (thread)

[Full-disclosure] iDefense Security Advisory 10.27.06: Novell eDirectory NMAS BerDecodeLoginDataRequeset DoS Vulnerability, iDefense Labs, 2006/10/31
[Full-disclosure] iDefense Security Advisory 10.31.06: Sophos Anti-Virus Petite File Denial of Service Vulnerability, iDefense Labs, 2006/10/31
[Full-disclosure] iDefense Security Advisory 10.31.06: Novell iManager Tomcat DoS Vulnerability, iDefense Labs, 2006/10/31
PHP-Nuke <= 7.9 Journal module (search.php) "forwhat" SQL Injection vulnerability, paisterist . nst, 2006/10/31
[Full-disclosure] Cross Site Scripting (XSS) Vulnerability in Netquery by "VIRtech", LegendaryZion, 2006/10/31
[Full-disclosure] Local Heap OverFlow Vulnerability in "Answering Service" of Icq, LegendaryZion, 2006/10/31
[Full-disclosure] Cross Site Scripting (XSS) Vulnerability in iPlanet Messaging Server Messenger Express by "Sun", LegendaryZion, 2006/10/31
[Full-disclosure] Cross Site Scripting (XSS) Vulnerability in "ViewImage.asp" by Daronet Internet Solutions, LegendaryZion, 2006/10/31
[Full-disclosure] Cross Site Scripting (XSS) Vulnerability in Web Mail platform by "Mirapoint", LegendaryZion, 2006/10/31
[Full-disclosure] Cross Site Scripting (XSS) Vulnerability in Web Mail service by "Walla! Communications LTD", LegendaryZion, 2006/10/31
[Full-disclosure] Directory listing on B-FOCuS Wireless 802.11b/g ADSL2+ Router by "ECI Telecom LTD", LegendaryZion, 2006/10/31
Authentication bypass in BytesFall Explorer, RedTeam Pentesting, 2006/10/31
New Flaw in Firefox 2.0: DoS and possible remote code execution, xxxx, 2006/10/31
- Re: New Flaw in Firefox 2.0: DoS and possible remote code execution, Josh Bressers, 2006/10/31
- Re: New Flaw in Firefox 2.0: DoS and possible remote code execution, Gouki, 2006/10/31
- Re: Re: New Flaw in Firefox 2.0: DoS and possible remote code execution, xxxx, 2006/10/31
  - Re: New Flaw in Firefox 2.0: DoS and possible remote code execution, Daniel Veditz, 2006/10/31
Sun java System Messenger Express XSS, handrix, 2006/10/31
SQL Injection Vulnerability in bfExplorer 0.0.6, security, 2006/10/31
[ MDKSA-2006:194 ] - Updated PostgreSQL packages fix vulnerabilities, security, 2006/10/31
[ MDKSA-2006:193 ] - Updated ImageMagick packages fix vulnerabilities, security, 2006/10/31
Hawking Technology wireless router WR254-CA DNS issue, Nikolai Grigoriev, 2006/10/31
ActiveX security leaks in the TV owned web game platform, maxgipeh, 2006/10/31
[Full-disclosure] Parallels Workstation - Rogue autostart.., Thierry Zoller, 2006/10/31
[Full-disclosure] JavaScript Attack Console (Backweb), pdp (architect), 2006/10/31
ModSecurity 2.0, A Core Rule Set and Console now available, Ofer Shezaf, 2006/10/30
Re: Free Rainbow Tables.com, Jerome Athias, 2006/10/30
[security bulletin] HPSBTU02168 SSRT061237 rev.1 - HP Tru64 UNIX Running gzip, gunzip, and gzcat, Remote Unauthorized Arbitrary Code Execution or Denial of Service (DoS), security-alert, 2006/10/30
[security bulletin] HPSBMA02121 SSRT061157 rev.3 - HP OpenView Storage Data Protector Remote Unauthorized Arbitrary Command Execution, security-alert, 2006/10/30
[security bulletin] HPSBMA02138 SSRT061184 rev.2 - HP OpenView Storage Data Protector, Remote Unauthorized Arbitrary Command Execution, security-alert, 2006/10/30
Multiple Remote File Include, firewall1954, 2006/10/30
CORE FORCE R0.95 released!, CORE FORCE Team, 2006/10/30
Metasploit Framework 2.7 Released, H D Moore, 2006/10/30
opendocman <= 1.2p3 Bypass admin/user Login, k1tk4t, 2006/10/30
[ECHO_ADV_53$2006] QnECMS <= 2.5.6 (adminfolderpath) Remote File Inclusion Vulnerability, erdc, 2006/10/30
Punbb <= 1.2.13 Multiple Vulnerabilities, Nms, 2006/10/30
Nucleus Core v3.23 - Remote File Include, firewall1954, 2006/10/30
- Re: Nucleus Core v3.23 - Remote File Include, Francesco Laurita, 2006/10/30
PHPEasyData Pro 2.2.1 (index.php) Remote SQL Injection Vulnerability, ajannhwt, 2006/10/30
PHPEasyData Pro 1.4.1 (index.php) Remote SQL Injection Vulnerability, ajannhwt, 2006/10/30
Simple Website Software v0.99 (common.php) Remote File Include, cw . cybersecurity, 2006/10/30
Re: imageVue16.1 upload vulnerability, mjau, 2006/10/30
[MajorSecurity Advisory #29]foresite CMS - Cross Site Scripting Issue, admin, 2006/10/30
easy notes manager sql injection and authentication bypass, poplix, 2006/10/30
freenews---> fileinclude, MoHaNdKo , 2006/10/30
- Re: freenews---> fileinclude, Tamriel, 2006/10/30
  - Re: freenews---> fileinclude, pokley, 2006/10/31
  - Message not available
    - Re: freenews---> fileinclude, pokley, 2006/10/31
SQL in WebWizForum by almaster hacker, almaster, 2006/10/30
Back-end => 0.4.5 Remote File Include Vulnerability Exploit, h4ck3riran, 2006/10/30
bbsNew => 2.0.1 Remote File Include Vulnerability Exploit, h4ck3riran, 2006/10/30
Exporia => 0.3.0 Remote File Include Vulnerability Exploit, h4ck3riran, 2006/10/30
[Full-disclosure] [ GLSA 200610-15 ] Asterisk: Multiple vulnerabilities, Raphael Marichez, 2006/10/30
CentiPaid <= 1.4.2 [$class_pwd] Remote File Include, firewall1954, 2006/10/30
- Re: CentiPaid <= 1.4.2 [$class_pwd] Remote File Include, Francesco Laurita, 2006/10/30
- Re: CentiPaid <= 1.4.2 [$class_pwd] Remote File Include, Tamriel, 2006/10/30
[OpenPKG-SA-2006.027] OpenPKG Security Advisory (wordpress), OpenPKG, 2006/10/30
[Full-disclosure] [ GLSA 200610-14 ] PHP: Integer overflow, Raphael Marichez, 2006/10/30
[ MDKSA-2006:191 ] - Updated screen packages fix vulnerability, security, 2006/10/28
[ MDKSA-2006:192 ] - Updated ruby packages fix DoS vulnerability, security, 2006/10/28
[ MDKSA-2006:190 ] - Updated mutt packages fix multiple vulnerabilities, security, 2006/10/28
[ MDKSA-2006:188 ] - Updated mono packages fix vulnerability, security, 2006/10/28
[ MDKSA-2006:189 ] - Updated xsupplicant fixes possible remote root stack smash vulnerability, security, 2006/10/28
Microsoft .NET request filtering bypass vulnerability, research, 2006/10/27
Hosting Controller 6.1 Hotfix <= 3.2 Vulnerability, playpacific . emulacaid, 2006/10/27
Thepeak File Upload v1.3 : Read file vulneability, loveha, 2006/10/27
Ban v0.1 (bannieres.php) File Include, mahmood ali, 2006/10/27
- Re: Ban v0.1 (bannieres.php) File Include, Francesco Laurita, 2006/10/28
phpAdsNew-2.0.8 <= (adlayer.php) Remote File Include, zooz_998, 2006/10/27
- Re: phpAdsNew-2.0.8 <= (adlayer.php) Remote File Include, emme0032, 2006/10/28
- Re: phpAdsNew-2.0.8 <= (adlayer.php) Remote File Include, simo, 2006/10/30
phpLedAds 2.0(dir) File Include, mahmood ali, 2006/10/27
PLS-Bannieres 1.21 (bannieres.php) File Include, mahmood ali, 2006/10/27
GestArt <= vbeta 1 Remote File Include Vulnerabilities, ip . 123 . 456 . 78 . 90, 2006/10/27
ArticleBeach Script <= 2.0 Remote File Inclusion Vulnerability, Bithedz, 2006/10/27
[Full-disclosure] RFID enabled e-passport skimming proof of concept code released (RFIDIOt), Adam Laurie, 2006/10/27
PHP-Nuke <= 7.9 Search module "author" SQL Injection vulnerability, paisterist . nst, 2006/10/27
UNISOR CMS sql injection, fireboy2006, 2006/10/27
SMF fgets off-by-one issue and filter size evasion, josecarlos . norte, 2006/10/27
TextPattern <=1.19 Remote File Inclusion Vulnerability, Bithedz, 2006/10/27
[Full-disclosure] Coppermine 1.4.9 SQL injection, disfigure, 2006/10/27
[Full-disclosure] ZDI-06-035: Novell eDirectory NDS Server Host Header Buffer Overflow Vulnerability, zdi-disclosures, 2006/10/27
- Re: [Full-disclosure] ZDI-06-035: Novell eDirectory NDS Server Host Header Buffer Overflow Vulnerability, Matt Richard, 2006/10/28
vulnerability in Symantec products, security, 2006/10/27
- Re: vulnerability in Symantec products, jay.tomas, 2006/10/30
  - [Full-disclosure] unreliable vulnerability reports en-masee [was:Re: vulnerability in Symantec products], Gadi Evron, 2006/10/30
    - Re: [Full-disclosure] unreliable vulnerability reports en-masee [was:Re: vulnerability in Symantec products], Dave \"No, not that one\" Korn, 2006/10/31
phpFaber CMS Cross Site Scripting, security, 2006/10/27
Directory Traversal in TorrentFlux 2.1, Christopher, 2006/10/27
Joomla extended_registration mod Remote File Include Vulnerabilities, crackers_child, 2006/10/27
Insecure storage of passwords in Axalto Protiva, nnposter, 2006/10/27
MiniBILL v2006-10-10 (config[page_dir] Remote File Include Vulnerability, xorontr, 2006/10/27
MHL-2006-003 Public Advisory: "ezOnlineGallery" Multiple Security Issues, Mayhemic Labs Security, 2006/10/27
TSLSA-2006-0059 - postgresql, Trustix Security Advisor, 2006/10/27
[Full-disclosure] [ Capture Skype trafic ], Tyop?, 2006/10/27
[Full-disclosure] [ GLSA 200610-13 ] Cheese Tracker: Buffer Overflow, Raphael Marichez, 2006/10/26
[Full-disclosure] ZDI-06-035: Novell eDirectory NDS Server Host Header Buffer Overflow Vulnerability, zdi-disclosures, 2006/10/26
[Full-disclosure] IE7 is a Source of Problem - Secunia IE7 Release Incident of October 2006, LIUDIEYU dot COM, 2006/10/26
- Re: [Full-disclosure] IE7 is a Source of Problem - Secunia IE7 Release Incident of October 2006, HASEGAWA Yosuke , 2006/10/27
- Re: IE7 is a Source of Problem - Secunia IE7 Release Incident of October 2006, Reversemode, 2006/10/27
- Re: [Full-disclosure] IE7 is a Source of Problem - Secunia IE7 Release Incident of October 2006, Jerome Athias, 2006/10/27
[Full-disclosure] iDefense Security Advisory 10.26.06: Multiple Vendor wvWare LVL Count Integer Overflow Vulnerability, iDefense Labs, 2006/10/26
[Full-disclosure] iDefense Security Advisory 10.26.06: Multiple Vendor wvWare LFO Count Integer Overflow Vulnerability, iDefense Labs, 2006/10/26
[OpenPKG-SA-2006.026] OpenPKG Security Advisory (screen), OpenPKG, 2006/10/26
Re: [Full-disclosure] Vulnerability automation and Botnet "solutions" I expect to see this year, cdejrhymeswithgay, 2006/10/26
- Re: [Full-disclosure] Vulnerability automation and Botnet "solutions" I expect to see this year, poo, 2006/10/27
  - Re: [Full-disclosure] Vulnerability automation and Botnet "solutions" I expect to see this year, Dude VanWinkle, 2006/10/27
[Full-disclosure] rPSA-2006-0195-2 kdelibs qt-x11-free, rPath Update Announcements, 2006/10/26
[Full-disclosure] rPSA-2006-0198-1 screen, rPath Update Announcements, 2006/10/26
[security bulletin] HPSBMA02133 SSRT061201 rev.2 - HP Oracle for OpenView (OfO) Critical Patch Update, security-alert, 2006/10/25
Web-style Wireless IDS attacks, noreply, 2006/10/25
[Full-disclosure] IE7 status: 8 days after release, 3 unfixed issues, Moritz Naumann, 2006/10/25
Mozilla Firefox JavaScript Handler Race Condition Memory Corruption Vulnerability, erreale, 2006/10/25
- Re: Mozilla Firefox JavaScript Handler Race Condition Memory Corruption Vulnerability, Christian Kalkhoff, 2006/10/27
[Full-disclosure] iDefense Security Advisory 10.25.06: AOL YGPPDownload AddPictureNoAlbum ActiveX Control Heap Corruption Vulnerability, iDefense Labs, 2006/10/25
[Full-disclosure] iDefense Security Advisory 10.25.06: AOL YGPPDownload downloadFileDirectory ActiveX Control Heap Corruption Vulnerability, iDefense Labs, 2006/10/25
[Full-disclosure] iDefense Security Advisory 10.25.06: AOL Nullsoft Winamp Ultravox 'ultravox-max-msg' Header Heap Overflow Vulnerability, iDefense Labs, 2006/10/25
[Full-disclosure] iDefense Security Advisory 10.25.06: AOL Nullsoft Winamp Ultravox Lyrics3 v2.00 tags Heap Overflow Vulnerability, iDefense Labs, 2006/10/25
[ MDKSA-2006:187 ] - Updated Qt packages fix vulnerability, security, 2006/10/25
phpMyConferences_8.0.2 Remote File Inclusion, Outlaw, 2006/10/25
- Re: phpMyConferences_8.0.2 Remote File Inclusion, Tamriel, 2006/10/25
[KAPDA::#61] - PacPoll <= 4.0 Multiple Vulnerabilities, farhadkey, 2006/10/25
[Full-disclosure] Vulnerability automation and Botnet "solutions" I expect to see this year, Gadi Evron, 2006/10/24
[Full-disclosure] [funsec] Haxdoor: UK Police Count 8, 500 Victims in Data Theft (So Far) (fwd), Gadi Evron, 2006/10/24
- Re: [Full-disclosure] [funsec] Haxdoor: UK Police Count 8, 500 Victims in Data Theft (So Far) (fwd), Marshall Eubanks, 2006/10/28
- Re: [Full-disclosure] [botnets] [funsec] Haxdoor: UK Police Count 8, 500 Victims in Data Theft (So Far) (fwd), bf, 2006/10/30
  - Re: [Full-disclosure] [botnets] [funsec] Haxdoor: UK Police Count 8, 500 Victims in Data Theft (So Far) (fwd), Gadi Evron, 2006/10/30
[Full-disclosure] Yahoo! Messenger Service 18 Remote Buffer Overflow Vulnerability, Jain, Siddhartha, 2006/10/24
- Re: [Full-disclosure] Yahoo! Messenger Service 18 Remote Buffer Overflow Vulnerability, Gadi Evron, 2006/10/25
- Re: [Full-disclosure] Yahoo! Messenger Service 18 Remote Buffer Overflow Vulnerability, cdejrhymeswithgay, 2006/10/26
  - Re: [Full-disclosure] Yahoo! Messenger Service 18 Remote Buffer Overflow Vulnerability, Gadi Evron, 2006/10/26
- Re: [Full-disclosure] Yahoo! Messenger Service 18 Remote Buffer Overflow Vulnerability, Jain, Siddhartha, 2006/10/27
InteliEditor (sys_path) Remote File Include Vulnerability, xorontr, 2006/10/24
adobe php sdk Remote File Include Vulnerabilities, crackers_child, 2006/10/24
- Re: adobe php sdk Remote File Include Vulnerabilities, Mailinglists Address, 2006/10/24
CSLH2.9.9 Remote File Include Vulnerabilities, crackers_child, 2006/10/24
[Full-disclosure] [USN-369-1] PostgreSQL vulnerabilities, Martin Pitt, 2006/10/24
[vuln.sg] CruiseWorks Directory Traversal and Buffer Overflow Vulnerabilities, vulnpost-remove, 2006/10/24
ProgSys verion 0.151 XSS vulnerability, security, 2006/10/24
[Full-disclosure] [ GLSA 200610-12 ] Apache mod_tcl: Format string vulnerability, Raphael Marichez, 2006/10/24
[Full-disclosure] [ GLSA 200610-11 ] OpenSSL: Multiple vulnerabilities, Raphael Marichez, 2006/10/24
[Full-disclosure] [ GLSA 200610-10 ] ClamAV: Multiple Vulnerabilities, Raphael Marichez, 2006/10/24
[Full-disclosure] who needs a server ..., auto113922, 2006/10/24
- Re: [Full-disclosure] who needs a server ..., cdejrhymeswithgay, 2006/10/24
[Full-disclosure] Month of Kernel Bugs and fsfuzzer release (0.6), L.M.H., 2006/10/24
[Full-disclosure] xxs in Firefox 2.0 ?, auto113922, 2006/10/23
Symantec Product Security: Symantec Device Driver Elevation of Privileg, secure, 2006/10/23
WikiNi Multiple Cross Site Scripting Vulnerabilities, raphael . huck, 2006/10/23
INCA IM-204 Dsl several vulnerabilities, crackers_child, 2006/10/23
Application orders Linux in WebAPP v0.9.9.2.1, the_free_kernel, 2006/10/23
- Re: Application orders Linux in WebAPP v0.9.9.2.1, nicolascamino, 2006/10/24
Multiple HTTP response splitting vulnerabilities in SHOP-SCRIPT, Debasis Mohanty, 2006/10/23
SQL Injection in Oracle package MDSYS.SDO_LRS, ak, 2006/10/23
SQL Injection in package SYS.DBMS_CDC_IMPDP, ak, 2006/10/23
SQL Injection in package XDB.DBMS_XDBZ0, ak, 2006/10/23
SQL Injection in package SYS.DBMS_SQLTUNE_INTERNAL, ak, 2006/10/23
Modify Data via Inline Views, ak, 2006/10/23
Various Cross-Site-Scripting Vulnerabilities in Oracle Reports, ak, 2006/10/23
http://www.red-database-security.com/advisory/oracle_apex_css_notification_msg.html, ak, 2006/10/23
Cross-Site-Scripting Vulnerability in Oracle APEX WWV_FLOW_ITEM_HELP, ak, 2006/10/23
SQL Injection Vulnerability in Oracle WWV_FLOW_UTILITIES, ak, 2006/10/23
Smarty-2.6.1 Remote File Include Vulnerabilities, crackers_child, 2006/10/23
- Re: Smarty-2.6.1 Remote File Include Vulnerabilities, J. Carlos Nieto, 2006/10/24
Flaw in Firefox 2.0 Final, mike, 2006/10/23
D-Link DSL-G624T several vulnerabilities, jose . palanco, 2006/10/23
-==PHP Nuke <= 7.9 SQL Injection and Bypass SQL Injection Protection vulnerabilities==-, paisterist . nst, 2006/10/23
PHP Generator of Object SQL Database (path) Remote File Include Vulnerability, xorontr, 2006/10/23
WHM 10.8.0 cPanel 10.9.0 R50 CentOS 4.4 i686 WHM X v3.1.0 Xss Vulnerability, crackers_child, 2006/10/23
speedberg <= 1.2beta1 Remote File Inclusion, k1tk4t, 2006/10/23
XSS in Zwahlen Online Shop, MC Iglo, 2006/10/23
[Full-disclosure] hack.lu Bluetooth demo, K F (lists), 2006/10/23
- Re: [Full-disclosure] hack.lu Bluetooth demo, Thierry Zoller, 2006/10/23
IPEER Remote file inclusion, navairum, 2006/10/23
trawler <= 1.8.1 Remote File Inclusion, k1tk4t, 2006/10/23
RMSOFT Cross Site Scripting, FREAK_PR, 2006/10/23
[Full-disclosure] [USN-368-1] Qt vulnerability, Martin Pitt, 2006/10/23
[Full-disclosure] [PHPADSNEW-SA-2006-002] phpAdsNew and phpPgAds 2.0.8-pr1 fix XSS vulnerability, Matteo Beccati, 2006/10/23
[Full-disclosure] AROUNDMe 0.6.9 remonte file inclusion, noislet . nospam, 2006/10/22
[Full-disclosure] [ GLSA 200610-09 ] libmusicbrainz: Multiple buffer overflows, Matthias Geerdsen, 2006/10/22
[Full-disclosure] iDefense Security Advisory 10.21.06: Novell eDirectory evtFilteredMonitorEventsRequest Invalid Free Vulnerability, iDefense Labs, 2006/10/22
[Full-disclosure] iDefense Security Advisory 10.21.06: Novell eDirectory evtFilteredMonitorEventsRequest Heap Overflow Vulnerability, iDefense Labs, 2006/10/22
[Full-disclosure] iDefense Security Advisory 10.21.06: Novell eDirectory NCP over IP length Heap Overflow Vulnerability, iDefense Labs, 2006/10/22
Virtual Law Office (phpc_root_path) Remote File Include Vulnerability, xorontr, 2006/10/21
Open Meetings Filing Application (PROJECT_ROOT) Remote File Include Vulnerability, xorontr, 2006/10/21
[OpenPKG-SA-2006.025] OpenPKG Security Advisory (drupal), OpenPKG, 2006/10/20
[Full-disclosure] Hustle Labs & MNIN eDirectory Vulnerability, Ryan Smith, 2006/10/20
PHPLibrary-1.5.3(Description.php) Remote File Include, arab_anaconda, 2006/10/20
Advisory for Oneorzero helpdesk, Mike Klingler, 2006/10/20
[Reversemode Advisory] Kaspersky Anti-Virus Privilege Escalation, Reversemode, 2006/10/20
PHP Poll Creator 1.04 (poll_vote.php)File Include, mahmood ali, 2006/10/20
[security bulletin] HPSBTU02163 SSRT061223 rev.1 - HP Tru64 UNIX Running dtmail, Local Execution of Arbitrary Code, security-alert, 2006/10/20
PHP Classifieds 7.1 - Remote File Include Vulnerability, Le . CoPrA, 2006/10/20
Simple Machines Forum (SMF) XSS issue, josecarlos . norte, 2006/10/20
- Re: Simple Machines Forum (SMF) XSS issue, mrapples, 2006/10/21
  - Re: Simple Machines Forum (SMF) XSS issue, RSnake, 2006/10/23
HPSBUX02162 SSRT061223 rev.1 - HP-UX Running dtmail, Local Execution of Arbitrary Code, security-alert, 2006/10/20
[KAPDA::#60] Mambo V4.6.x vulnerabilities, alireza hassani, 2006/10/20
[CAID 34693, 34694]: CA BrightStor ARCserve Backup Multiple Buffer Overflow Vulnerabilities (UPDATED), Williams, James K, 2006/10/20
Re: iDefense Security Advisory 10.19.06: Kaspersky Labs Anti-Virus IOCTL Local Privilege Escalation Vulnerability, abel . andrade, 2006/10/20
- Re: iDefense Security Advisory 10.19.06: Kaspersky Labs Anti-Virus IOCTL Local Privilege Escalation Vulnerability, Steven M. Christey, 2006/10/21
[Full-disclosure] Web-style Wireless IDS attacks, noreply, 2006/10/20
[Full-disclosure] [ GLSA 200610-08 ] Cscope: Multiple buffer overflows, Raphael Marichez, 2006/10/20
[ MDKSA-2006:186 ] - Updated kdelibs packages fix KHTML vulnerability, security, 2006/10/19
TORQUE Spool Job Race condition (torque <= 2.0.0p8), Luís Miguel Silva, 2006/10/19
[Xss] IN SMF 1.1 RC2, the_free_kernel, 2006/10/19
ATutor 1.5.3.2=> Remote File Include Vulnerability, subzero . 0000, 2006/10/19
PHP "exec", "system", "popen" problem, Дмитрий Borgir, 2006/10/19
- Re: PHP "exec", "system", "popen" (+small POC), Bernhard Mueller, 2006/10/20
Multiple XSS Vulnerabilities in KnowledgeBank 1.01, security, 2006/10/19
SQL Injection simplog, navairum, 2006/10/19
KICS CMS sql injection, fireboy2006, 2006/10/19
UltraCMS 0.9 sql injection, fireboy2006, 2006/10/19
DigitalHive 2.0 RC2 (base_include.php)File Include, mahmood ali, 2006/10/19
[Full-disclosure] iDefense Security Advisory 10.19.06: Kaspersky Labs Anti-Virus IOCTL Local Privilege Escalation Vulnerability, iDefense Labs, 2006/10/19
[Full-disclosure] Genetic method to detect the presence of any virtual machine, Bipin Gautam, 2006/10/19
- Re: [Full-disclosure] Genetic method to detect the presence of anyvirtual machine, Dave \"No, not that one\" Korn, 2006/10/19
[Full-disclosure] [DRUPAL-SA-2006-026] Drupal 4.6.10 / 4.7.4 fixes HTML attribute injection issue, Uwe Hermann, 2006/10/19
[Full-disclosure] [DRUPAL-SA-2006-024] Drupal 4.6.10 / 4.7.4 fixes multiple XSS issues, Uwe Hermann, 2006/10/19
[Full-disclosure] [DRUPAL-SA-2006-025] Drupal 4.6.10 / 4.7.4 fixes CRF issue, Uwe Hermann, 2006/10/19
[OpenPKG-SA-2006.024] OpenPKG Security Advisory (asterisk), OpenPKG, 2006/10/19
[Full-disclosure] Advisory 11/2006: Serendipity Weblog XSS Vulnerabilities, Stefan Esser, 2006/10/19
[security bulletin] HPSBST02161 SSRT061264 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS06-056 Through MS06-065, security-alert, 2006/10/19
[Full-disclosure] [USN-367-1] Pike vulnerability, Kees Cook, 2006/10/18
[Full-disclosure] rPSA-2006-0195-1 kdelibs, rPath Update Announcements, 2006/10/18
[Full-disclosure] Security-Assessment.com Advisory: Asterisk remote heap overflow, Adam Boileau, 2006/10/18
Static fmat exploits with random va, root, 2006/10/18
Secunia Research: IBM Lotus Notes Insecure Default Folder Permissions, Secunia Research, 2006/10/18
Secunia Research: Joomla BSQ Sitestats Script Insertion and SQL Injection, Secunia Research, 2006/10/18
{x0n3-h4ck} DEV Web Manager System <= 1.5 XSS Exploit, corrado . liotta, 2006/10/18
Airmagnet management interfaces multiple vulnerabilities, noreply, 2006/10/18
[Full-disclosure] [USN-366-1] binutils vulnerability, Kees Cook, 2006/10/18
Call for Papers - First International Workshop on Secure Software Engineering (SecSE 2007), Lillian Røstad, 2006/10/18
PHPRecipeBook <= 2.35 ((g_rb_basedir)) Remote File Include Exploit, CarcaBotx, 2006/10/18
- Re: PHPRecipeBook <= 2.35 ((g_rb_basedir)) Remote File Include Exploit, str0ke, 2006/10/18
- Re: PHPRecipeBook <= 2.35 ((g_rb_basedir)) Remote File Include Exploit, theif, 2006/10/19
PhpBB<=2.0.10 (groupcp.php) Remote File Include Vulnerability, mahmood ali, 2006/10/18
- Re: PhpBB<=2.0.10 (groupcp.php) Remote File Include Vulnerability, neothermic, 2006/10/19
CS-Forum 0.82 (ajouter.php) Remote File Include Vulnerability, mahmood ali, 2006/10/18
TSLSA-2006-0057 - multi, Trustix Security Advisor, 2006/10/18
[Full-disclosure] ERRATA: [ GLSA 200610-07 ] Python: Buffer Overflow, Raphael Marichez, 2006/10/18
[ECHO_ADV_46$2006] P-Book <= 1.17 (pb_lang) Remote File Inclusion, erdc, 2006/10/18
zorum_3_5 <=(dbproperty.php) Remote File Inclusion Exploit, MoHaNdKo , 2006/10/18
[ MDKSA-2006:185 ] - Updated php packages to address multiple vulnerabilities, security, 2006/10/18
[ MDKSA-2006:184 ] - Updated clamav packages fix vulnerabilities, security, 2006/10/18
[Full-disclosure] Multiple vulnerabilities in Highwall Enterprise and Highwall Endpoint management interface, noreply, 2006/10/18
[Full-disclosure] Airmagnet management interfaces multiple vulnerabilities, noreply, 2006/10/18
[Full-disclosure] Boonex Dolphin 5.2 Remote File Inclusion, disfigure, 2006/10/18
[Full-disclosure] Analysis of the Oracle October 2006 Critical Patch Update, David Litchfield, 2006/10/18
- Re: [Full-disclosure] Analysis of the Oracle October 2006 Critical Patch Update, Paul Schmehl, 2006/10/18
  - Re: [Full-disclosure] Analysis of the Oracle October 2006 Critical Patch Update, vile, 2006/10/18
[Full-disclosure] Simplog 0.9.3.1 SQL Injection, disfigure, 2006/10/18
[Full-disclosure] Comdev One Admin 4.1 Remote File Inclusion, disfigure, 2006/10/18
[ MDKSA-2006:183 ] - Updated libksba packages correct DoS vulnerability, security, 2006/10/18
Rapid7 Advisory R7-0026: HTTP Header Injection Vulnerabilities in the Flash Player Plugin, advisory, 2006/10/17
[Full-disclosure] rPSA-2006-0194-1 kernel, rPath Update Announcements, 2006/10/17
phpAdsNew include bug!, wacky, 2006/10/17
- Re: phpAdsNew include bug!, Wim Godden, 2006/10/18
- Re: phpAdsNew include bug!, matteo, 2006/10/19
[Full-disclosure] iDefense Security Advisory 10.17.06: Opera Software Opera Web Browser URL Parsing Heap Overflow Vulnerability, iDefense Labs, 2006/10/17
[Full-disclosure] [ GLSA 200610-07 ] Python: Buffer Overflow, Raphael Marichez, 2006/10/17
[security bulletin] HPSBUX02155 SSRT061235 rev.2 HP-UX CIFS Server (Samba) Local Unauthorized Access, Elevated Privileges, security-alert, 2006/10/17
Flaw in Firefox 2.0 RC2, Mike, 2006/10/17
- Re: Flaw in Firefox 2.0 RC2, Jose Nazario, 2006/10/17
  - Re: Flaw in Firefox 2.0 RC2, Eliah Kagan, 2006/10/18
    - Re: Flaw in Firefox 2.0 RC2, Paul Schmehl, 2006/10/18
    - Re: Flaw in Firefox 2.0 RC2, arny, 2006/10/18
- Re: Flaw in Firefox 2.0 RC2, jm, 2006/10/18
  - Re: Flaw in Firefox 2.0 RC2, Mark A Basil, 2006/10/19
    - Re: Flaw in Firefox 2.0 RC2, Jure PeÄar, 2006/10/20
  - RE: Flaw in Firefox 2.0 RC2, Aras \"Russ\" Memisyazici, 2006/10/19
- Re: Flaw in Firefox 2.0 RC2, Shane Lahey, 2006/10/18
- Re: Flaw in Firefox 2.0 RC2, Lubomir Kundrak, 2006/10/19
- RE: Flaw in Firefox 2.0 RC2, Sean Warnock, 2006/10/19
[Full-disclosure] {x0n3-h4ck} DEV Web Manager System <= 1.5 XSS Exploit, corrado.liotta, 2006/10/17
[ECHO_ADV_55$2006]Phpmybibli <=2.1 Multiple Remote File Inclusion Vulnerability, erdc, 2006/10/17
[Full-disclosure] [ GLSA 200610-06 ] Mozilla Network Security Service (NSS): RSA signature forgery, Raphael Marichez, 2006/10/17
[Full-disclosure] [ GLSA 200610-05 ] CAPI4Hylafax fax receiver: Execution of arbitrary code, Raphael Marichez, 2006/10/17
[OpenPKG-SA-2006.023] OpenPKG Security Advisory (php), OpenPKG, 2006/10/17
TorrentFlux user_id Script Insertion, 3cab7cc7, 2006/10/17
TorrentFlux file Script Insertion, 3cab7cc7, 2006/10/17
TorrentFlux action Script Insertion, 3cab7cc7, 2006/10/17
PR06-03b: F5 Firepass 1000 SSL VPN version 5.5 vulnerable to Cross-Site Scripting, research, 2006/10/17
[Xss] IN phplist v 2.10.2,, the-free_kernel, 2006/10/17
About.com contact, C. Hamby, 2006/10/17
PHP Forge 3b2 (/inc/inc.php) Remote File Include Vulnerability, mahmood ali, 2006/10/16
Rapid7 Advisory R7-0025: Buffer Overflow in NVIDIA Binary Graphics Driver For Linux, advisory, 2006/10/16
[Full-disclosure] [USN-365-1] libksba vulnerability, Kees Cook, 2006/10/16
patchlodel-0.7.3 - Remote File Include Vulnerabilities, erne, 2006/10/16
Full Path Disclosure in PHP-Wyana (2), xx_hack_xx_2004, 2006/10/16
[Full-disclosure] NVIDIA Linux/BSD/Solaris Drivers Local Root Buffer Overflow, Alexander Hristov, 2006/10/16
osprey 1.0 (ListRecords.php) Remote File Include Vulnerability, KaBaRa . HaCk . eGy, 2006/10/16
WebYep-1.1.9 - Remote File Include Vulnerabilities, erne, 2006/10/16
[Full-disclosure] iDefense Security Advisory 10.15.06: Clam AntiVirus ClamAV rebuildpe Heap Overflow Vulnerability, iDefense Labs, 2006/10/16
[Full-disclosure] iDefense Security Advisory 10.15.06: Clam AntiVirus ClamAV CHM Chunk Name Length DoS Vulnerability, iDefense Labs, 2006/10/16
[Full-disclosure] [USN-364-1] Xsession vulnerability, Kees Cook, 2006/10/16
MOStlyCEV454 - Remote File Include Vulnerabilities, erne, 2006/10/16
Full Path Disclosure in PHP-Wyana, xx_hack_xx_2004, 2006/10/16
Security Advisory for Bugzilla 2.18.5, 2.20.2, 2.22, and 2.23.2, mkanat, 2006/10/16
maintain-3.0.0-RC2 - Remote File Include Vulnerabilities, erne, 2006/10/16
[Full-disclosure] :ShAnKaR: WoltLab Burning Book <=1.1.2 multiple vulnerabilities, 3APA3A, 2006/10/16
Back-end ( File Include Vulnerability Exploit ), h4ck3riran, 2006/10/16
vbulletin Exploit Tool Box, [dot], 2006/10/16
- Re: vbulletin Exploit Tool Box, scottREMOVE, 2006/10/17
SYMSA-2006-010: Directory Traversal in IronWebMail, research, 2006/10/16
bbsNew ( File Include Vulnerability Exploit ), h4ck3riran, 2006/10/16
Kmail <= 1.9.1 (table/frameset) DOS, nnp, 2006/10/16
[Full-disclosure] VoMM: Taking browser exploits to the next level, avivra, 2006/10/16
ISS BlackICE PC Protection Filelock protection bypass Vulnerability, Matousec - Transparent security Research, 2006/10/16
[Full-disclosure] AttackAPI 0.8 is OUT, pdp (architect), 2006/10/16
[Full-disclosure] [ GLSA 200610-04 ] Seamonkey: Multiple vulnerabilities, Raphael Marichez, 2006/10/16
[Full-disclosure] Advisory 10/2006: ViewVC Undefined Charset UTF-7 XSS Vulnerability, Stefan Esser, 2006/10/15
Spoofing security dialog in object packager - 2, seejay . 11, 2006/10/14
Jinzora 2.6 - Remote File Include Vulnerabilities, erne, 2006/10/14
[Full-disclosure] Kmail <= 1.9.1 (table/frameset) DOS, nnp, 2006/10/14
- Re: [Full-disclosure] Kmail <= 1.9.1 (table/frameset) DOS, Vidar Løkken, 2006/10/15
Re: Multiple XSS Vulnerabilities in Zen Cart 1.3.5, security, 2006/10/14
WDT:- osTicket File Include all V, stormhacker, 2006/10/14
@lex Guestbook <=(ModeliXe.php) Remote File Inclusion Exploit, xp1o, 2006/10/14
- Re: @lex Guestbook <=(ModeliXe.php) Remote File Inclusion Exploit, ptitgal, 2006/10/16
Re: DanPHPSupport => 0.5 Cross Site Scripting Vulnerabilities, dansoftaus, 2006/10/14
Multiple XSS Vulnerability in Gcontact, security, 2006/10/14
EXlor 1.0 (/fonctions/template.php) Remote File Include Vulnerability, mahmood ali, 2006/10/14
Buzlas <= v2006-1 Full Remote File Include Vulnerability, nima . salehi, 2006/10/14
PHP Top webs (config.php) Remote File Inclue Vulnerability, Le . CoPrA, 2006/10/14
PhpBB Prillian French Remote File Include Vulnerability, nima . salehi, 2006/10/14
RPG Events 1.0.0 Remote File Include Vulnerability, nima . salehi, 2006/10/14
phpBB lat2cyr <= 1.0.1 Remote File Include Vulnerability, nima . salehi, 2006/10/14
AMAZONIA MOD Remote File Include Vulnerability, nima . salehi, 2006/10/14
PHP Cards <= 1.3 Remote File Inclue Vulnerability, Le . CoPrA, 2006/10/14
news defilante horizontale <= 4.1.1 Remote File Include Vulnerability, nima . salehi, 2006/10/14
Open Conference Systems <= 1.1.3 Remote File Inclusion, k1tk4t, 2006/10/14
phpBB PlusXL 2.x <= biuld 272 Remote File Include Vulnerability, nima . salehi, 2006/10/14
maluinfo version 206.2.38l Remote File Include Vulnerability, nima . salehi, 2006/10/13
SpamOborona PHPBB Plugin Remote File Include Vulnerability, nima . salehi, 2006/10/13
phpBB Add Name Remote File Include Vulnerability, nima . salehi, 2006/10/13
phpMyConferences <= 8.0.2 Remote File Inclusion, k1tk4t, 2006/10/13
- phpMyConferences <= 8.0.2 Remote File Inclusion, mfp . c, 2006/10/31
MNews <= 2.0 (noticias.php) Remote File Inclue Vulnerability, Le . CoPrA, 2006/10/13
Jax LinkLists Remote File include, dj_remix_20, 2006/10/13
- Re: Jax LinkLists Remote File include, xorontr, 2006/10/14
pbpbb archive for search engines Remote File Include Vulnerability, nima . salehi, 2006/10/13
TorrentFlux startpop.php torrent Script Insertion, 566d9bfe, 2006/10/13
Jax Newspage Remote File include, dj_remix_20, 2006/10/13
news7 <= (news.php) Remote File Inclusion Exploit, xp1o, 2006/10/13
PHPht Topsites Remote File İnclude, By_KorsaN_Son, 2006/10/13
phpBB Security <= 1.0.1 Remote File Include Vulnerability, nima . salehi, 2006/10/13
Bloq 0.5.4 Remote File İnclude, By_KorsaN_Son, 2006/10/13
Utimaco Safeguard Easy vulnerability, boomboom999, 2006/10/13
- Re: Utimaco Safeguard Easy vulnerability, Juha-Matti Laurio, 2006/10/18
Re: [Full-disclosure] iDefense Security Advisory 10.11.06: Sun Microsystems Solaris NSPR Library Arbitrary File Creation Vulnerability, Marco Ivaldi, 2006/10/13
ISOI II - a DA Workshop (announcement and CFP), Gadi Evron, 2006/10/13
Download-Engine Remote File İnclude, By_KorsaN_Son, 2006/10/13
SpamBlockerMODv <= 1.0.2 Remote File Include Vulnerability, nima . salehi, 2006/10/13
CMS contenido Path Disclosure, CvIr . System, 2006/10/13
Morcego CMS <= 0.9.6 Remote File Inclue Vulnerability, Le . CoPrA, 2006/10/13
[Full-disclosure] iDefense Security Advisory 10.13.06: Apache HTTP Server mod_tcl set_var Format String Vulnerability, iDefense Labs, 2006/10/13
PacSec Hype Security Team: CGI.pm param injection, Dragos Ruiu, 2006/10/13
RamaCMS (adodb.inc.php) Remote File Inclue Vulnerability, Le . CoPrA, 2006/10/13
CMS contenido Remote File Inclusion, CvIr . System, 2006/10/13
[security bulletin] HPSBST02134 SSRT061187 rev.2 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS06-052, MS06-053 and MS06-054, security-alert, 2006/10/13
[security bulletin] HPSBST02160 SSRT061254 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS06-055, security-alert, 2006/10/13
Phpbb insert mod Remote file include, By_KorsaN_Son, 2006/10/13
Black Hat CFP, Registration, and Announcements for October, Jeff Moss, 2006/10/13
Download-Engine Remote File Include, v1per-hacker, 2006/10/12
[Full-disclosure] Mcafee Network Agent (mcnasvc.exe) Remote DoS, Alexander Hristov, 2006/10/12
Security Suite IP Logger Remote File Inclusion, ReeM_HaCk, 2006/10/12
Iono all version fullpath disclosure, hack2prison, 2006/10/12
Admin User Viewed Posts Tracker Remote File Include Vulnerability, nima . salehi, 2006/10/12
Journals System <= 1.0.2 [RC2] Remote File Include Vulnerability, nima . salehi, 2006/10/12
[Full-disclosure] Google Earth (kml & kmz files) buffer overflow, Alexander Hristov, 2006/10/12
ExtCalThai_Component <= 0.9.1 Remote File Inclusion, k1tk4t, 2006/10/12
[security bulletin] HPSBMA02158 SSRT061251 rev.1 - HP Version Control Agent, Remote Unauthorized Access and Possible Elevation of Privilege, security-alert, 2006/10/12
SecureWorks Research Client Advisory: Multiple Vendor Bluetooth Memory Stack Corruption Vulnerability, Research, 2006/10/12
MS06-060 Microsoft Word Memmove Code Execution, Avert, 2006/10/12
new version of phplist fix XSS vulnerability, info, 2006/10/12
zenphoto Multiple Path Disclosure and Cross Site Scripting Vulnerabilities, raphael . huck, 2006/10/12
[Full-disclosure] MHL-2006-002 Public Advisory: "Call-Center-Software" Multiple Security Issues, Mayhemic Labs Security, 2006/10/12
[Full-disclosure] Xeobook <= 0.93 Multiple SQL Injection Vulnerabilities, Tamriel, 2006/10/12
[Full-disclosure] XeoPort <= 0.81 SQL Injection Vulnerability, Tamriel, 2006/10/12
[ MDKSA-2006:182 ] - Updated kernel packages fix multiple vulnerabilities and bugs, security, 2006/10/11
AlberT-EasySite <= 1.0.a5 Remote File Inclusion, k1tk4t, 2006/10/11
CommunityPortals <= 1.0 Remote File Include Vulnerability, nima . salehi, 2006/10/11
[Full-disclosure] iDefense Security Advisory 10.11.06: Sun Microsystems Solaris NSPR Library Arbitrary File Creation Vulnerability, iDefense Labs, 2006/10/11
[Full-disclosure] iDefense Security Advisory 10.11.06: AOL YGPPDownload SetAlbumName ActiveX Control Buffer Overflow Vulnerability, iDefense Labs, 2006/10/11
Noah's Classifieds Cross Site Scripting Vulnerability, raphael . huck, 2006/10/11
gcards (languagefile) <= Remote File Include, D-virus, 2006/10/11
- Re: gcards (languagefile) <= Remote File Include, str0ke, 2006/10/11
Jinzora <= 2.1 Remote File Inclusion, k1tk4t, 2006/10/11
Secunia Research: Microsoft Windows Object Packager Dialog Spoofing, Secunia Research, 2006/10/11
- Re: Secunia Research: Microsoft Windows Object Packager Dialog Spoofing, edubp2002, 2006/10/14
[Full-disclosure] [USN-363-1] libmusicbrainz vulnerability, Kees Cook, 2006/10/11
MysqlDumper Version 1.21 b6 Xss Vulnerability, crackers_child, 2006/10/11
Microsoft Office Malformed Record Memory Corruption Vulnerability, Sowhat, 2006/10/11
ShmooCon 2006 CFP Announcement, B Potter, 2006/10/11
Re: The latest version of iSearch is V2.16 <= (index.php) Remote File Inclusion Exploit, Steven M. Christey, 2006/10/11
[Full-disclosure] rPSA-2006-0187-1 idle python, rPath Update Announcements, 2006/10/11
New tool release today - "wyd" - password profiling, Max Moser, 2006/10/11
[ MDKSA-2006:181 ] - Updated python packages fix vulnerability, security, 2006/10/10
pacsec hype security team: 7 words of warning about Macromedia Flash Player 9+, Dragos Ruiu, 2006/10/10
blueshoes <= 4.6_public Remote File Inclusion, k1tk4t, 2006/10/10
claroline <= 180rc1 Remote File Inclusion, k1tk4t, 2006/10/10
tagit2b -- Remote File Inclusion, k1tk4t, 2006/10/10
PHPLibrary <= 1.5.3 Remote File Inclusion, k1tk4t, 2006/10/10
[Full-disclosure] iDefense Security Advisory 10.10.06: FreeBSD ptrace PT_LWPINFO Denial of Service Vulnerability, iDefense Labs, 2006/10/10
- [Full-disclosure] iDefense Security Advisory 10.10.06: FreeBSD ptrace PT_LWPINFO Denial of Service Vulnerability, iDefense Labs, 2006/10/12
[Fedora] libtool-ltdl uses relative paths to resolve and load libraries, Enrico Scholz, 2006/10/10
[Full-disclosure] ZDI-06-034: Microsoft Office Word Malformed Chart Code Execution Vulnerability, zdi-disclosures, 2006/10/10
[Full-disclosure] ZDI-06-032: Microsoft Office PowerPoint Malformed Slide Notes Rebuilding Vulnerability, zdi-disclosures, 2006/10/10
[Full-disclosure] ZDI-06-033: Microsoft Office Excel File Format DATETIME Record Parsing Vulnerability, zdi-disclosures, 2006/10/10
[security bulletin] HPSBUX02087 SSRT4728 rev.4 - HP-UX running TCP/IP Remote Denial of Service (DoS), security-alert, 2006/10/10
[Full-disclosure] [USN-362-1] PHP vulnerabilities, Martin Pitt, 2006/10/10
eXpBlog <= 0.3.5 Cross Site Scripting Vulnerabilities, Tamriel, 2006/10/10
phpWebSite 0.10.2 Remote File Include Vulnerabilities, crackers_child, 2006/10/10
- Re: phpWebSite 0.10.2 Remote File Include Vulnerabilities, kevin, 2006/10/11
[ECHO_ADV_54$2006]vtiger CRM <=4.2 (calpath) Multiple Remote File Inclusion Vulnerability, erdc, 2006/10/10
7 php scripts File Inclusion / Source disclosure Vuln, gmdarkfig, 2006/10/10
[Full-disclosure] [USN-361-1] Mozilla vulnerabilities, Martin Pitt, 2006/10/10
[Full-disclosure] MHL-2006-001 Public Advisory: "Eazy Cart" Multiple Security Issues, Mayhemic Labs Security, 2006/10/10
[Full-disclosure] [USN-360-1] awstats vulnerabilities, Martin Pitt, 2006/10/10
Re: net2ftp: a web based FTP client :) <= Remote File Inclusion, Steven M. Christey, 2006/10/09
yet another OpenSSH timing leak?, Marco Ivaldi, 2006/10/09
- Re: yet another OpenSSH timing leak?, Gianluca Varisco, 2006/10/10
- Re: yet another OpenSSH timing leak?, Marco Ivaldi, 2006/10/10
- Re: yet another OpenSSH timing leak?, Marco Ivaldi, 2006/10/14
[ECHO_ADV_52$2006]OpenDock Easy Gallery <=1.4 (doc_directory) Multiple Remote File Inclusion Vulnerability, erdc, 2006/10/09
[ECHO_ADV_49$2006]OpenDock Easy Doc <=1.4 (doc_directory) Multiple Remote File Inclusion Vulnerability, erdc, 2006/10/09
SUSE Security Announcement: php4,php5 (SUSE-SA:2006:059), Ludwig Nussel, 2006/10/09
[ECHO_ADV_48$2006] WebYep <= 1.1.9 (webyep_sIncludePath) Multiple Remote File Inclusion Vulnerability, erdc, 2006/10/09
HITBSecConf2006 CTF Source code and daemons, Praburaajan, 2006/10/09
PHP open_basedir with symlink() function Race Condition PoC exploit, paisterist . nst, 2006/10/09
SQL injection - 4images, disfigure, 2006/10/09
Freenews v1.1 <= (chemin) Remote File Include Vulnerability, xorontr, 2006/10/09
[ECHO_ADV_51$2006] docmint <= 2.0 (MY_ENV[BASE_ENGINE_LOC]) Remote File Inclusion Vulnerability, erdc, 2006/10/09
XSS IN paFileDB 3.1, zarloule04, 2006/10/09
[ECHO_ADV_50$2006]OpenDock Easy Blog <=1.4 (doc_directory) Multiple Remote File Inclusion Vulnerability, erdc, 2006/10/09
PHPMyNews 1.4 <= (cfg_include_dir) Remote File Include Vulnerability, xorontr, 2006/10/09
Advanced Poll v2.02 :) <= Remote File Inclusion, alguidy, 2006/10/09
The latest version of iSearch is V2.16 <= (index.php) Remote File Inclusion Exploit, xp1o, 2006/10/09
- Re: The latest version of iSearch is V2.16 <= (index.php) Remote File Inclusion Exploit, str0ke, 2006/10/10
[Full-disclosure] Advisory 09/2006: PHP unserialize() Array Creation Integer Overflow, Stefan Esser, 2006/10/09
[Full-disclosure] SQL injection - 4images, disfigure, 2006/10/08
[Full-disclosure] SQL injection - moodle, disfigure, 2006/10/08
- Re: [Full-disclosure] SQL injection - moodle, scsantos@unigranrio com br, 2006/10/09
PHP Live! <= 3.1 help.php Remote File Inclusion vulnerability, paisterist . nst, 2006/10/07
Observations on Mandatory Integrity Control (MIC) in Windows Vista, Enno Rey, 2006/10/07
Sorry....My Message With Out Live Site...., Dr . Ninux, 2006/10/07
Cahier de textes 2.0 Remote SQL injection Exploit, sami, 2006/10/07
LS-20060313 - CA BrightStor ARCserve Backup Remote Buffer Overflow Vulnerability, advisories, 2006/10/07
- Re: Invision Power Board Multiple Vulnerabilities, Rapigator, 2006/10/07
phpBB User Viewed Posts Tracker Version <= 1.0 [phpbb_root_path] File Include Vulnerability, x0r0n, 2006/10/07
FreeForum 0.9.7 (fpath) Remote File Include Vulnerability, x0r0n, 2006/10/07
LS-20060220 - CA BrightStor ARCserve Backup Remote Buffer Overflow Vulnerability, advisories, 2006/10/07
Vulnerability in Btitracker, aeroxteam, 2006/10/07
LS-20060330 - CA BrightStor ARCserve Backup Remote Buffer Overflow Vulnerability, advisories, 2006/10/07
[Full-disclosure] Kmail <= 1.9.1 (latest) DOS, nnp, 2006/10/06
Re: net2ftp Remote File Inclusion - bogus report, david, 2006/10/06
phponline <= (LangFile) Remote File Inclusion Exploit, xp1o, 2006/10/06
Emek Portal v2.1 SQL Injection, dj_remix_20, 2006/10/06
Details of Lotus Notes Java Applet vulnerabilities, Jouko Pynnonen, 2006/10/06
[Full-disclosure] [ GLSA 200610-03 ] ncompress: Buffer Underflow, Raphael Marichez, 2006/10/06
FreeWPS File Upload Command Execution, security, 2006/10/06
[CAID 34693, 34694]: CA BrightStor ARCserve Backup Multiple Buffer Overflow Vulnerabilities, Williams, James K, 2006/10/06
[Reversemode Advisory] Symantec Antivirus Engine Privilege Escalation, Reversemode, 2006/10/06
ackerTodo 4.2 SQL Injection Vulnerability, Francesco Laurita, 2006/10/06
phpMyTeam v2.0 <= (smileys_dir) Remote File Include Vulnerability, x0r0n, 2006/10/06
TorrentFlux User-Agent XSS Vulnerability, sec, 2006/10/06
[Full-disclosure] [USN-359-1] Python vulnerability, Martin Pitt, 2006/10/06
TSLSA-2006-0055 - multi, Trustix Security Advisor, 2006/10/06
[Full-disclosure] JavaScript Spider (code that can traverse the web), pdp (architect), 2006/10/06
SUSE Security Summary Report SUSE-SR:2006:024, Thomas Biege, 2006/10/06
Hazir Site v2.0 Admin SQL Injection, dj_remix_20, 2006/10/06
[ MDKSA-2006:180 ] - Updated php packages fix integer overflow vulnerability, security, 2006/10/06
[Full-disclosure] Vulnerable function in newest PowerPoint case (MS Advisory #925984), Juha-Matti Laurio, 2006/10/05
[Full-disclosure] rPSA-2006-0182-1 php php-mysql php-pgsql, rPath Update Announcements, 2006/10/05
[Full-disclosure] rPSA-2006-0185-1 gnome-ssh-askpass openssh openssh-client openssh-server, rPath Update Announcements, 2006/10/05
[Full-disclosure] rPSA-2006-0183-1 nss_ldap, rPath Update Announcements, 2006/10/05
[Full-disclosure] TSRT-06-11: CA Multiple Product DBASVR RPC Server Multiple Buffer Overflow Vulnerabilities, TSRT, 2006/10/05
[Full-disclosure] TSRT-06-12: CA BrightStor Discovery Service Mailslot Buffer Overflow Vulnerability, TSRT, 2006/10/05
[Full-disclosure] ZDI-06-031: CA Multiple Product Message Engine RPC Server Code Execution Vulnerability, zdi-disclosures, 2006/10/05
[Full-disclosure] ZDI-06-030: CA Multiple Product Discovery Service Remote Buffer Overflow Vulnerability, zdi-disclosures, 2006/10/05
[Full-disclosure] iDefense Security Advisory 10.05.06: Symantec AntiVirus IOCTL Kernel Privilege Escalation Vulnerability, iDefense Labs, 2006/10/05
Re: Concurrency-related vulnerabilities in browsers - expect problems, Mike, 2006/10/05
- Re: Concurrency-related vulnerabilities in browsers - expect problems, Nick Boyce, 2006/10/06
- Re: Concurrency-related vulnerabilities in browsers - expect problems, Josh Bressers, 2006/10/06
WikyBlog <= v1.4 (WN_BASEDIR) Remote File Inclusion Exploit, xp1o, 2006/10/05
- Re: WikyBlog <= v1.4 (WN_BASEDIR) Remote File Inclusion Exploit, Steven M. Christey, 2006/10/07
Vulnerability Type Distributions in CVE, Steven M. Christey, 2006/10/05
Invision Power Board Multiple Vulnerabilities, Rapigator, 2006/10/04
[Full-disclosure] [ GLSA 200610-02 ] Adobe Flash Player: Arbitrary code execution, Matthias Geerdsen, 2006/10/04
RE: Informing Companies about security vulnerabilities..., bugtraq, 2006/10/04
- Re: Informing Companies about security vulnerabilities..., Dragos Ruiu, 2006/10/05
- RE: Informing Companies about security vulnerabilities..., Wolf Halton, 2006/10/07
- RE: Informing Companies about security vulnerabilities..., Krpata, Tyler, 2006/10/04
  - Re: Informing Companies about security vulnerabilities..., bugtraq, 2006/10/04
- RE: Informing Companies about security vulnerabilities..., Levenglick, Jeff, 2006/10/05
  - RE: Informing Companies about security vulnerabilities..., Arian J. Evans, 2006/10/05
- RE: Informing Companies about security vulnerabilities..., Craig Wright, 2006/10/06
  - Re: Informing Companies about security vulnerabilities..., Art Cooper, 2006/10/06
[Full-disclosure] [ GLSA 200610-01 ] Mozilla Thunderbird: Multiple vulnerabilities, Matthias Geerdsen, 2006/10/04
[Full-disclosure] [USN-357-1] Mono vulnerability, Martin Pitt, 2006/10/04
[Full-disclosure] [USN-353-2] OpenSSL vulnerability, Martin Pitt, 2006/10/04
[Full-disclosure] [USN-358-1] ffmpeg, xine-lib vulnerabilities, Martin Pitt, 2006/10/04
[Full-disclosure] Technical Paper on the ZERT Patch and VML [was: Re: ZERT patch for setSlice()], Gadi Evron, 2006/10/04
- Re: [Full-disclosure] [funsec] Technical Paper on the ZERT Patch and VML [was: Re: ZERT patch for setSlice()], Alexander Sotirov, 2006/10/04
  - Re: [Full-disclosure] [funsec] Technical Paper on the ZERT Patch and VML [was: Re: ZERT patch for setSlice()], Gadi Evron, 2006/10/08
Yener Haber Script v2.0 SQL injection, dj_remix_20, 2006/10/04
Directory Traversal Vulnerability in Goop Gallery 2.0.2, security, 2006/10/04
- Directory Traversal Vulnerability in Goop Gallery 2.0.2, security, 2006/10/11
- Re: Directory Traversal Vulnerability in Goop Gallery 2.0.2, gene, 2006/10/17
[ MDKSA-2006:179 ] - Updated openssh packages fix DoS vulnerabilities, security, 2006/10/04
[CAID 34661]: CA Unicenter WSDM File System Read Access Vulnerability, Williams, James K, 2006/10/04
phpMyProfiler remote file include, mozi2weed, 2006/10/04
[Full-disclosure] Advisory 08/2006: PHP open_basedir Race Condition Vulnerability, Stefan Esser, 2006/10/03
[Full-disclosure] iDefense Security Advisory 10.02.06: Novell GroupWise Messenger nmma.exe DoS Vulnerability, iDefense Labs, 2006/10/03
PacSec 2006 Papers announcement and EUSecWest Call For Papers, Dragos Ruiu, 2006/10/03
Security flaw in IBM Client Security Password Manager, Luís Miguel Silva, 2006/10/03
Re: WebspotBlogging => 3.0 Remote File Include Vulnerabilities, Steven M. Christey, 2006/10/03
[ MDKSA-2006:178 ] - Updated ntp packages rebuilt against updated openssl., security, 2006/10/03
[ MDKSA-2006:177 ] - Updated MySQL packages rebuilt against updated openssl., security, 2006/10/03
[ MDKSA-2006:172-1 ] - Updated openssl packages fix vulnerabilities, security, 2006/10/03
[security bulletin] HPSBUX02129 SSRT061149 rev.1 - HP-UX running SLP, Remote Unauthorized Access, security-alert, 2006/10/02
FreeBSD Security Advisory FreeBSD-SA-06:22.openssh, FreeBSD Security Advisories, 2006/10/02
Re: net2ftp: a web based FTP client :) <= Remote File Inclusion, securfrog, 2006/10/02
Re: WebCalendar-1.0.3 reading of any files, webcalendar, 2006/10/02
Microsoft Internet Information Services UTF-7 XSS Vulnerability [MS06-053], Eiji James Yoshida, 2006/10/02
Security contact for Myspace/Fox?, E Mintz, 2006/10/02
- Re: Security contact for Myspace/Fox?, Juha-Matti Laurio, 2006/10/07
Kerio Multiple insufficient argument validation of hooked SSDT function Vulnerability, David Matousek, 2006/10/02
digishop v 4.0.0 Xss Vuln., meto5757, 2006/10/02
Dayfox Blog v2.0 Remote file include, dj_remix_20, 2006/10/02
"POC 2006" by Korean hackers, securityproof, 2006/10/02
[security bulletin] HPSBUX02157 SSRT061220 rev.1 HP-UX Running Ignite-UX Server, Remote Unauthorized Access and Privilege Elevation, security-alert, 2006/10/02
Pebble 2.0.0 RC[1,2] XSS vulnerability, Paolo Perego, 2006/10/02
IBM Informix Dynamic Server V10.0 File Clobbering during Install, Larry Cashdollar, 2006/10/02
zero-day flaws in Firefox: about 30 unpatched Firefox flaws, ragan, 2006/10/02
- Re: zero-day flaws in Firefox: about 30 unpatched Firefox flaws, Mailinglists Address, 2006/10/07
[OpenPKG-SA-2006.022] OpenPKG Security Advisory (openssh), OpenPKG, 2006/10/02
EasyBannerFree (functions.php) Remote File Include Exploit, las_kid, 2006/10/02
Layered Defense Advisory: TrendMicro OfficesScan Corporate Edition Format String Vulnerability, dh, 2006/10/02
phpMyWebmin 1.0 <= (target) Remote File Include Vulnerability, x0r0n, 2006/10/02
[Full-disclosure] [USN-354-1] Firefox vulnerabilities, Martin Pitt, 2006/10/02
[Full-disclosure] [USN-356-1] gdb vulnerability, Martin Pitt, 2006/10/02
[Full-disclosure] [USN-355-1] openssh vulnerabilities, Martin Pitt, 2006/10/02
[Full-disclosure] IE UXSS (Universal XSS in IE, was Re: Microsoft Internet Information Services UTF-7 XSS Vulnerability [MS06-053]), Paul Szabo, 2006/10/02
- Re: [Full-disclosure] IE UXSS (Universal XSS in IE, was Re: Microsoft Internet Information Services UTF-7 XSS Vulnerability [MS06-053]), Brian Eaton, 2006/10/02
  - Re: [Full-disclosure] IE UXSS (Universal XSS in IE, was Re: Microsoft Internet Information Services UTF-7 XSS Vulnerability [MS06-053]), Paul Schmehl, 2006/10/02
    - Re: [Full-disclosure] IE UXSS (Universal XSS in IE, was Re: Microsoft Internet Information Services UTF-7 XSS Vulnerability [MS06-053]), Brian Eaton, 2006/10/02
  - Re: [Full-disclosure] IE UXSS (Universal XSS in IE, was Re: Microsoft Internet Information Services UTF-7 XSS Vulnerability [MS06-053]), Paul Szabo, 2006/10/02
- Re: [Full-disclosure] IE UXSS (Universal XSS in IE, was Re: Microsoft Internet Information Services UTF-7 XSS Vulnerability [MS06-053]), Paul Szabo, 2006/10/03
[Full-disclosure] 0day in Firefox from ToorCon '06, Thor Larholm, 2006/10/01
[Full-disclosure] Advisory 07/2006: phpMyAdmin Multiple CSRF Vulnerabilities, Stefan Esser, 2006/10/01
[Full-disclosure] ZERT patch for setSlice(), Gadi Evron, 2006/10/01
Re: [Full-disclosure] Security Rss Feeds, William Knowles, 2006/10/01
- Re: [Full-disclosure] Security Rss Feeds, Gareth Davies, 2006/10/02
- Re: [Full-disclosure] Security Rss Feeds, Tyler Reguly, 2006/10/03