Vulnerability Development (thread)

Re: [Full-disclosure] PocketPC MMS - Remote Code Injection/Execution Vulnerability and Denial-of-Service, Collin R. Mulliner, 2006/12/31
Enigma WordPress Bridge (boarddir) Remote File Include, xorontr, 2006/12/30
Enigma Coppermine Bridge (boarddir) Remote File Include, xorontr, 2006/12/30
[vuln.sg] iso_wincmd Plugin for Total Commander Buffer Overflow Vulnerability, vulnpost-remove, 2006/12/30
SoftArtisans FileUp(TM) viewsrc.asp remote script source disclosure exploit, inge_eivind . henriksen, 2006/12/30
MythControl (MythTV remote control) arbitrary code execution, sapheal, 2006/12/30
csrss.exe double-free vulnerability - arbitrary DWORD overwrite exploit, Reversemode, 2006/12/30
DoceboLMS Xss Vuln., starext, 2006/12/29
LDU <= 8.x (journal.php) SQL Injection Vulnerability, starext, 2006/12/29
QuickCam linux device driver allows arbitrary code execution, sapheal, 2006/12/29
XSS with default page parameter in Oracle Portal 10g, duchaikhtn, 2006/12/29
XSS in script Mobilelib GOLD v2, gamr-14, 2006/12/29
- Re: XSS in script Mobilelib GOLD v2, gamr-14, 2006/12/29
[Full-disclosure] Information Security Behavior Management System, no me, 2006/12/29
[OpenPKG-SA-2006.044] OpenPKG Security Advisory (w3m), OpenPKG GmbH, 2006/12/28
SMS handling OpenSER remote code executing, sapheal, 2006/12/28
OpenSER OSP Module remote code execution, sapheal, 2006/12/28
Limbo CMS event module (lm_absolute_path) Remote File Include Vulnerabilities, xorontr, 2006/12/28
ShmooCon Announcement, B Potter, 2006/12/28
NtRaiseHardError Csrss.exe memory Disclosure exploit, Reversemode, 2006/12/28
Re: Cross site scripting & fullpath disclosure, james . brown, 2006/12/28
Secure Login Manager Multiple Input Validation Vulnerabilities, DoZ, 2006/12/28
Host directory full disclosure and input error, hack2prison, 2006/12/28
[OpenPKG-SA-2006.043] OpenPKG Security Advisory (links), OpenPKG GmbH, 2006/12/28
[OpenPKG-SA-2006.042] OpenPKG Security Advisory (openser), OpenPKG GmbH, 2006/12/28
LuckyBot v3 Remote File Include, i-k-t, 2006/12/28
- Re: LuckyBot v3 Remote File Include, Stuart Moore, 2006/12/28
logahead UNU edition 1.0 Remote File Upload & code execution, corrado . liotta, 2006/12/28
XSS - CMS Made Simple v1.0.2, Curtis Zimmerman, 2006/12/28
- Re: XSS - CMS Made Simple v1.0.2, nanoymaster, 2006/12/28
HLStats Remote SQL Injection Exploit, nospam, 2006/12/28
PhpbbXtra v2.0 (phpbb_root_path) Remote File Include Vulnerability, xorontr, 2006/12/28
phpcms <=- 1.1.7 Remote File Inclusion, Zarloule04, 2006/12/28
- Re: phpcms <=- 1.1.7 Remote File Inclusion, Hugo van der Kooij, 2006/12/28
- Re: phpcms <=- 1.1.7 Remote File Inclusion, Stuart Moore, 2006/12/28
Cahier de texte V2.2 Bypass general access protection exploit, gmdarkfig, 2006/12/28
PHP Live! 3.2.2 Multiple Cross-Site Scripting Vulnerabilities, DoZ, 2006/12/28
XSS with Vbulletin (new idea !), ashraf1984, 2006/12/28
- Re: XSS with Vbulletin (new idea !), bas, 2006/12/28
- Re: XSS with Vbulletin (new idea !), l . d . 0, 2006/12/28
- Re: XSS with Vbulletin (new idea !), micmast, 2006/12/28
ERRATA (Re: "Host header cannot be trusted as an anti anti DNS-pinning measure"), Amit Klein, 2006/12/28
- Re: ERRATA (Re: "Host header cannot be trusted as an anti anti DNS-pinning measure"), Martin Johns, 2006/12/28
Forum AnyBoard - Sql Inyection By Firewall, Firewall1954, 2006/12/28
TimberWolf 1.2.2 vulnerable to XSS, corrado . liotta, 2006/12/28
Fishyshoop Security Vulnerability, James Gray, 2006/12/28
Chatwm V1.0 SqL Injection Vuln., ShaFuq31, 2006/12/28
Okul Merkezi Portal v1.0 Remote File IncLude Vuln., ShaFuq31, 2006/12/28
[Full-disclosure] iDefense Security Advisory 12.23.06: Novell Netmail IMAP append Denial of Service Vulnerability, iDefense Labs, 2006/12/28
[Full-disclosure] iDefense Security Advisory 12.23.06: Novell NetMail IMAPD subscribe Buffer Overflow Vulnerability, iDefense Labs, 2006/12/28
Multiple Bugs in Future Internet ( XSS & SQL Injection ), xx_hack_xx_2004, 2006/12/28
Efkan Forum v1.0 SqL Inj. Vuln., ShaFuq31, 2006/12/28
[Full-disclosure] Multiple Remote Vulnerabilities in KISGB, 0o_zeus_o0 elitemexico.org, 2006/12/28
- Re: [Full-disclosure] Multiple Remote Vulnerabilities in KISGB, 3APA3A, 2006/12/28
- Re: [Full-disclosure] Multiple Remote Vulnerabilities in KISGB, str0ke, 2006/12/28
[Full-disclosure] Botnets: a retrospective to 2006, and where we are headed in 2007, Gadi Evron, 2006/12/28
[Full-disclosure] ZDI-06-053: Novell NetMail IMAP Verb Literal Heap Overflow Vulnerability, zdi-disclosures, 2006/12/28
[Full-disclosure] ZDI-06-054: Novell NetMail IMAP APPEND Buffer Overflow Vulnerability, zdi-disclosures, 2006/12/28
[Full-disclosure] ZDI-06-052: Novell NetMail NMAP STOR Buffer Overflow Vulnerability, zdi-disclosures, 2006/12/28
SQID v0.2 - SQL Injection Digger., contact, 2006/12/28
Re: Re: [Full-disclosure] Microsoft Windows XP/2003/Vista memory corruption 0day, Mike, 2006/12/28
TSLSA-2006-0074 - multi, Trustix Security Advisor, 2006/12/28
Xt-News 0.1 : SQL Injection Vulnerability & XSS, mr_kaliman, 2006/12/28
[Full-disclosure] Oracle Applications/Portal 9i/10g Cross Site Scripting, putosoft softputo, 2006/12/28
Re: [Full-disclosure] Oracle Portal 10g HTTP Response Splitting, putosoft softputo, 2006/12/28
[Full-disclosure] rPSA-2006-0234-1 firefox, rPath Update Announcements, 2006/12/28
PWDumpX updated (includes CacheDump functionality), Reed Arvin, 2006/12/28
OpenSER 1.1.0 parse_config buffer overflow vulnerability, sapheal, 2006/12/28
[OpenPKG-SA-2006.040] OpenPKG Security Advisory (ruby), OpenPKG GmbH, 2006/12/28
[TOOL] untidy - XML Fuzzer, Andres Riancho, 2006/12/28
Re: Vulnerability in MG2 php based Image Gallery - bypass security, view password protected images, matthieu . paineauSTOPSPAM, 2006/12/28
SQID v0.1 - SQL Inhection Digger., contact, 2006/12/28
Ixprim CMS 1.2 Remote Blind SQL Injection Exploit, gmdarkfig, 2006/12/28
Re: Enforcing Java Security Manager in Restricted Windows Environments?, jim, 2006/12/28
- RE: Enforcing Java Security Manager in Restricted Windows Environments?, Jan P. Monsch, 2006/12/28
[ MDKSA-2006:234 ] - Updated mono packages fix vulnerability, security, 2006/12/28
[CAID 34876]: CA CleverPath Portal Session Inheritance Vulnerability, Williams, James K, 2006/12/28
[OpenPKG-SA-2006.041] OpenPKG Security Advisory (dbus), OpenPKG GmbH, 2006/12/28
[Full-disclosure] Fun with event logs (semi-offtopic), 3APA3A, 2006/12/28
- Re: [Full-disclosure] Fun with event logs (semi-offtopic), endrazine, 2006/12/28
- Re: [Full-disclosure] Fun with event logs (semi-offtopic), Michele Cicciotti, 2006/12/28
- Re: [Full-disclosure] Fun with event logs (semi-offtopic), Michele Cicciotti, 2006/12/28
  - Re: [Full-disclosure] Fun with event logs (semi-offtopic), 3APA3A, 2006/12/28
  - Message not available
    - Re: [Full-disclosure] Fun with event logs (semi-offtopic), Michele Cicciotti, 2006/12/28
[Full-disclosure] Microsoft Windows XP/2003/Vista memory corruption 0day, 3APA3A, 2006/12/28
- Re: [Full-disclosure] Microsoft Windows XP/2003/Vista memory corruption 0day, 3APA3A, 2006/12/28
  - Re: [Full-disclosure] Microsoft Windows XP/2003/Vista memory corruption 0day, Alexander Sotirov, 2006/12/28
    - Re: [Full-disclosure] Microsoft Windows XP/2003/Vista memory corruption 0day, Pukhraj Singh, 2006/12/28
    - Message not available
    - Re: [Full-disclosure] Microsoft Windows XP/2003/Vista memory corruption 0day, Michele Cicciotti, 2006/12/28
[Full-disclosure] NOD32 Antivirus CAB parsing Arbitrary Code Execution Advisory, security, 2006/12/28
[Full-disclosure] [USN-397-1] mono vulnerability, Kees Cook, 2006/12/28
critical Flaw in Firefox 2.0.0.1 allows to steal the user passwords with a videoclip, quincy, 2006/12/28
- Re: critical Flaw in Firefox 2.0.0.1 allows to steal the user passwords with a videoclip, 3APA3A, 2006/12/28
- Re: critical Flaw in Firefox 2.0.0.1 allows to steal the user passwords with a videoclip, Juha-Matti Laurio, 2006/12/28
  - Re[2]: critical Flaw in Firefox 2.0.0.1 allows to steal the user passwords with a videoclip, Thierry Zoller, 2006/12/28
[Full-disclosure] [ GLSA 200612-21 ] Ruby: Denial of Service vulnerability, Raphael Marichez, 2006/12/28
[Full-disclosure] [ GLSA 200612-20 ] imlib2: Multiple vulnerabilities, Raphael Marichez, 2006/12/28
[Full-disclosure] [ GLSA 200612-19 ] pam_ldap: Authentication bypass vulnerability, Raphael Marichez, 2006/12/28
[security bulletin] HPSBST02180 SSRT061288 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS06-072 Through MS06-078, security-alert, 2006/12/28
[security bulletin] HPSBUX02174 SSRT061239 rev.2 HP-UX Running OpenSSL Denial of Service (DoS), Increase Privilege, security-alert, 2006/12/28
Mono XSP ASP.NET Server sourcecode disclosure vulnerability, jose . palanco, 2006/12/28
Oracle Portal 10g HTTP Response Splitting, putosoft softputo, 2006/12/28
- Re: [Full-disclosure] Oracle Portal 10g HTTP Response Splitting, Brian Eaton, 2006/12/28
- Re: Oracle Portal 10g HTTP Response Splitting, majororacle, 2006/12/28
[Full-disclosure] NOD32 Antivirus DOC parsing Arbitrary Code Execution Advisory, security, 2006/12/28
[Full-disclosure] SEC Consult SA-20061220-0 :: Typo3 Command Execution Vulnerability, SEC Consult Research, 2006/12/28
[Full-disclosure] ZDI-06-051: Mozilla Firefox SVG Processing Remote Code Execution Vulnerability, zdi-disclosures, 2006/12/28
MkPortal Urlobox Cross Site Request Forgery, info, 2006/12/28
- Re: MkPortal Urlobox Cross Site Request Forgery, securityfocus, 2006/12/28
- Re: MkPortal Urlobox Cross Site Request Forgery, securityfocus, 2006/12/28
Multiple Bugs in MINI WEB SHOP, xx_hack_xx_2004, 2006/12/28
Oracle <= 9i / 10g File System Access via utl_file Exploit, none, 2006/12/28
- Re: Oracle <= 9i / 10g File System Access via utl_file Exploit, sumit kumar soni, 2006/12/28
- Re: Oracle <= 9i / 10g File System Access via utl_file Exploit, Marco Ivaldi, 2006/12/28
Oracle <= 9i / 10g (extproc) Local/Remote Command Execution Exploit, none, 2006/12/28
Burak Yilmaz Download Portal Sql Injection Vuln., ShaFuq31, 2006/12/28
xss in Support Cards v1 ( oSTicket ), l . d . 0, 2006/12/28
Trend Micro's Vista "0day exploit auction" claim, Ryan Meyer, 2006/12/28
- RE: Trend Micro's Vista "0day exploit auction" claim, Roger A. Grimes, 2006/12/28
  - RE: Trend Micro's Vista "0day exploit auction" claim, Simple Nomad, 2006/12/28
    - Message not available
    - Re: Trend Micro's Vista "0day exploit auction" claim, Simple Nomad, 2006/12/28
- Re: RE: Trend Micro's Vista "0day exploit auction" claim, agoodhez1, 2006/12/28
New Skype Worm, Christopher Mosby, 2006/12/28
- RE: [BULK] - New Skype Worm, Hubbard, Dan, 2006/12/28
[Full-disclosure] HP Printers FTP Server Denial Of Service, Joxean Koret, 2006/12/28
Multiple XSS vulnerabiliteies in Inetmedia's information service - cityinfo., filip . palian, 2006/12/28
WebCalendar >=1.0 Cross-Site Scripting Vulnerabilities, 7all7, 2006/12/28
[ MDKSA-2006:233 ] - Updated dbus packages fix vulnerability, security, 2006/12/28
[ MDKSA-2006:232 ] - Updated proftpd packages fix mod_ctrls vulnerability, security, 2006/12/28
HITBSecConf2007 - Dubai - Call for Papers now open!, Praburaajan, 2006/12/28
[security bulletin] HPSBUX02178 SSRT061267 rev.2 - HP-UX Secure Shell Remote Unauthorized Denial of Service (DoS), security-alert, 2006/12/28
[Full-disclosure] [ GLSA 200612-18 ] ClamAV: Denial of Service, Sune Kloppenborg Jeppesen, 2006/12/28
Checkpoint NG3 ICMP Flood, bdmoraes, 2006/12/28
- Re: Checkpoint NG3 ICMP Flood, Michael Schwartzkopff, 2006/12/28
- Re: Checkpoint NG3 ICMP Flood, Hugo van der Kooij, 2006/12/28
Secunia Research: MailEnable POP Service "PASS" Command Buffer Overflow, Secunia Research, 2006/12/28
SYMSA-2006-013: Multiple Vulnerabilities in Mandiant First Response, research, 2006/12/28
RateMe <= all versions => ( main.inc.php ) Remote File Include Vulnerability, saudi, 2006/12/28
HyperVM Cross-Site Scripting, Advisory, 2006/12/28
Cisco not honoring update promises?, Michael Scheidell, 2006/12/28
- Re: Cisco not honoring update promises?, rsmoak, 2006/12/28
- RE: Cisco not honoring update promises?, Michael Scheidell, 2006/12/28
Allied Telesis AT-9000/24 Ethernet switch management can be accessed from all VLANs., Pasi Sjoholm, 2006/12/28
[HSC Security Group] SiteCatalyst Web Login Cross Site Vulrnabilities, DoZ, 2006/12/28
Contra Haber Sistemi v1.0 SqL Injection Vuln., ShaFuq31, 2006/12/28
Odysseus 2.0 / Telemachus 1.0 (Beta), Dave, 2006/12/28
Doğantepe Ziyareti Defteri (tr) Sql Injection Vuln., ShaFuq31, 2006/12/28
XSS in gmial google, gamr-14, 2006/12/28
Drone Armies C&C Report - 15 Dec 2006, c2report, 2006/12/28
[OpenPKG-SA-2006.039] OpenPKG Security Advisory (proftpd), OpenPKG GmbH, 2006/12/28
[ MDKSA-2006:206 ] - Updated Thunderbird packages fix multiple vulnerabilities, security, 2006/12/28
Bypassing process identification of several personal firewalls and HIPS, Matousec - Transparent security Research, 2006/12/28
Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!, gplit, 2006/12/28
- Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!, Bruno Lustosa, 2006/12/28
  - Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!, Dragos Ruiu, 2006/12/28
  - Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!, George Yobst, 2006/12/28
  - Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!, Kamchybek Jusupov, 2006/12/28
    - Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!, Marcus Meissner, 2006/12/28
- Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!, Josh Bressers, 2006/12/28
- Re: Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!, gplit, 2006/12/28
- Re: Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!, bastyaelvtars, 2006/12/28
  - Re: Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!, Hunger, 2006/12/28
- Re: Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!, ox90x86, 2006/12/28
- Re: Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!, willysr, 2006/12/28
- Re: Flaw in OpenOffice.org 2.1: OpenOffice 2.1 is vulnerable to MS Word 0 day vulnerability!!!, p . kerr, 2006/12/28
Project Server 2003 - Credential Disclosure, Brett Moore, 2006/12/28
[security bulletin] HPSBMA02173 SSRT061230 rev. 1 - HP Integrated Lights Out (iLO & iLO 2) Running SSH Key Based Authentication Remote Unauthorized Access, security-alert, 2006/12/28
Windows Media MID File Denial Of Service Vulnerability, sehato, 2006/12/28
Windows Explorer WMV File Denial Of Service Vulnerability, sehato, 2006/12/28
- RE: Windows Explorer WMV File Denial Of Service Vulnerability, Ulises Cuñé, 2006/12/28
TSLSA-2006-0072 - clamav, Trustix Security Advisor, 2006/12/28
[ MDKSA-2006:231 ] - Updated gdm packages fix string vulnerability, security, 2006/12/28
[Full-disclosure] BitDefender AV Packed PE File Parsing Engine Heap Overflow, security, 2006/12/28
[Full-disclosure] Fuzzers and brute forcers, Joxean Koret, 2006/12/28
Top 10 Real Computer Crimes for 2007, Pete Herzog, 2006/12/28
CanSecWest 2007 (April 18-20) Call For Papers (Deadline January 7th), Dragos Ruiu, 2006/12/28
[Full-disclosure] [USN-396-1] gdm vulnerability, Kees Cook, 2006/12/28
[Full-disclosure] Kerio MailServer < 6.3.1 remote Denial of Service, research, 2006/12/28
[ MDKSA-2006:164-2 ] - Updated xorg-x11/XFree86 packages fix integer overflow vulnerabilities, security, 2006/12/28
Re: [Full-disclosure] [fuzzing] NOT a 0day! Re: OWASP Fuzzing page, Juha-Matti Laurio, 2006/12/28
- Re: [Full-disclosure] [fuzzing] NOT a 0day! Re: OWASP Fuzzing page, Gadi Evron, 2006/12/28
[CAID 34870]: CA Anti-Virus vetfddnt.sys, vetmonnt.sys Local Denial of Service Vulnerabilities, Williams, James K, 2006/12/28
[ MDKSA-2006:230 ] - Updated clamav packages fix vulnerability, security, 2006/12/28
[ MDKSA-2006:229 ] - Updated evince packages fix buffer overflow vulnerability, security, 2006/12/28
Re: [Full-disclosure] The newest Word flaw is due to malformed data structure handling, Juha-Matti Laurio, 2006/12/28
[Full-disclosure] iDefense Security Advisory 12.14.06: GNOME Foundation Display Manager gdmchooser Format String Vulnerability, iDefense Labs, 2006/12/28
- Re: [Full-disclosure] iDefense Security Advisory 12.14.06: GNOME Foundation Display Manager gdmchooser Format String Vulnerability, iDefense Labs, 2006/12/28
HyperAccess - Multiple Vulnerabilities, Brett Moore, 2006/12/28
Call for papers and presenters - Dec. 15th deadline, Mike Allgeier, 2006/12/28
The (in)security of Xorg and DRI, Darren Reed, 2006/12/28
- Re: The (in)security of Xorg and DRI, Nicolas RUFF, 2006/12/28
  - Re: The (in)security of Xorg and DRI, Darren Reed, 2006/12/28
  - Re: The (in)security of Xorg and DRI, Darren Reed, 2006/12/28
- Re: The (in)security of Xorg and DRI, Pavel Kankovsky, 2006/12/28
GenesisTrader v1.0 - Multiple Vulnerabilities, mr_kaliman, 2006/12/28
[Full-disclosure] [ GLSA 200612-17 ] GNU Radius: Format string vulnerability, Raphael Marichez, 2006/12/28
[Full-disclosure] [ GLSA 200612-16 ] Links: Arbitrary Samba command execution, Raphael Marichez, 2006/12/28
[Full-disclosure] [USN-380-2] avahi regression, Martin Pitt, 2006/12/28
[Full-disclosure] rPSA-2006-0232-1 libgsf, rPath Update Announcements, 2006/12/28
[Full-disclosure] [ GLSA 200612-15 ] McAfee VirusScan: Insecure DT_RPATH, Sune Kloppenborg Jeppesen, 2006/12/14
CORE-2006-1127: ProFTPD Controls Buffer Overflow, CORE Security Technologies Advisories, 2006/12/13
[Full-disclosure] ZDI-06-049: Symantec Veritas NetBackup Long Request Buffer Overflow Vulnerability, zdi-disclosures, 2006/12/13
[Full-disclosure] ZDI-06-050: Symantec Veritas NetBackup CONNECT_OPTIONS Buffer Overflow Vulnerability, zdi-disclosures, 2006/12/13
[Full-disclosure] IBM DB2 Remote DoS during CONNECT processing, Team SHATTER, 2006/12/13
ASP Cmd Shell On IIS 5.1, Brett Moore, 2006/12/13
Re: worksystem => Remote File Include Vulnerability Exploit, Laurent . van_den_reysen, 2006/12/13
[Full-disclosure] [USN-395-1] Linux kernel vulnerabilities, Martin Pitt, 2006/12/13
ZDI-06-046: Sophos Anti-Virus SIT Archive Parsing Buffer Overflow Vulnerability, zdi-disclosures, 2006/12/12
[Full-disclosure] [ GLSA 200612-14 ] Trac: Cross-site request forgery, Sune Kloppenborg Jeppesen, 2006/12/12
[Full-disclosure] [ GLSA 200612-13 ] libgsf: Buffer overflow, Sune Kloppenborg Jeppesen, 2006/12/12
[Full-disclosure] [ GLSA 200612-12 ] F-PROT Antivirus: Multiple vulnerabilities, Sune Kloppenborg Jeppesen, 2006/12/12
Secunia Research: Internet Explorer Script Error Handling Memory Corruption, Secunia Research, 2006/12/12
BLOG:CMS Remote file include Vulnerability, security, 2006/12/12
rPSA-2006-0230-1 evince, rPath Update Announcements, 2006/12/12
[Full-disclosure] iDefense Security Advisory 12.12.06: Sun Microsystems Solaris ld.so Directory Traversal Vulnerability, iDefense Labs, 2006/12/12
[Full-disclosure] iDefense Security Advisory 12.12.06: Sun Microsystems Solaris ld.so 'doprf()' Buffer Overflow Vulnerability, iDefense Labs, 2006/12/12
[Full-disclosure] ZDI-06-045: Sophos Anti-Virus CPIO Archive Parsing Buffer Overflow Vulnerability, zdi-disclosures, 2006/12/12
[Full-disclosure] ZDI-06-048: Microsoft Internet Explorer normalize() Function Memory Corruption Vulnerability, zdi-disclosures, 2006/12/12
[Full-disclosure] ZDI-06-047: Microsoft Visual Studio WmiScriptUtils.dll Cross-Zone Scripting Vulnerability, zdi-disclosures, 2006/12/12
rPSA-2006-0231-1 squirrelmail, rPath Update Announcements, 2006/12/12
Re: [Full-disclosure] [fuzzing] OWASP Fuzzing page, Joxean Koret, 2006/12/12
- [Full-disclosure] NOT a 0day! Re: [fuzzing] OWASP Fuzzing page, Gadi Evron, 2006/12/28
  - Re: [fuzzing] NOT a 0day! Re: [Full-disclosure] OWASP Fuzzing page, Jerome Athias, 2006/12/28
    - Re: [Full-disclosure] [fuzzing] NOT a 0day! Re: OWASP Fuzzing page, Gadi Evron, 2006/12/28
Web Apps- Rad Upload Version 3.02 Remote File Include Vulnerability, rko . thelegendkiller, 2006/12/12
[SBDA] SiteKiosk - FileSystem Access, Brett Moore, 2006/12/12
[ MDKSA-2006:228 ] - Updated gnupg packages fix vulnerability, security, 2006/12/12
[Full-disclosure] OpenLDAP kbind authentication buffer overflow, Solar Eclipse, 2006/12/12
[ MDKSA-2006:227 ] - Updated kdegraphics packages fix EXIF vulnerability, security, 2006/12/12
Secunia Research: AOL CDDBControl ActiveX Control "SetClientInfo()" Buffer Overflow, Secunia Research, 2006/12/11
RFID access control tokens widely open to cloning, Adam Laurie, 2006/12/11
Re: LS-20060908 - Computer Associates BrightStor ARCserve Backup, Williams, James K, 2006/12/11
The newest Word flaw is due to malformed data structure handling, Juha-Matti Laurio, 2006/12/11
- Re: [Full-disclosure] The newest Word flaw is due to malformed data structure handling, Alexander Sotirov, 2006/12/12
- Re: The newest Word flaw is due to malformed data structure handling, Dave \"No, not that one\" Korn, 2006/12/12
- Re: Re: The newest Word flaw is due to malformed data structure handling, test, 2006/12/12
- Re: The newest Word flaw is due to malformed data structure handling, Steven M. Christey, 2006/12/28
[ GLSA 200612-10 ] Tar: Directory traversal vulnerability, Matthias Geerdsen, 2006/12/11
Re: LS-20061001 - Computer Associates BrightStor ARCserve Backup, Williams, James K, 2006/12/11
Secunia Research: MailEnable IMAP Service Buffer Overflow Vulnerability, Secunia Research, 2006/12/11
shopsite advisory, DoZ, 2006/12/11
- Re: shopsite advisory, bugtraq, 2006/12/12
Firefox 2.0 security bug: Extensions can hide themself, azurIt, 2006/12/11
[ MDKSA-2006:226 ] - Updated squirrelmail packages fix vulnerabilities, security, 2006/12/11
D-LINK DWL-2000AP+ remote DoS, poplix, 2006/12/11
Unauthenticated access to IBM Host On-Demand administration pages, Ferguson, David (Kansas City), 2006/12/11
[SBDA] - ColdFusion MX7 - Multiple Vulnerabilities, Brett Moore, 2006/12/11
WASC-Announcement: MX Injection - Capturing and Exploiting Hidden Mail Servers By Vicente Aguilera Diaz, robert, 2006/12/11
[Full-disclosure] ERRATA: [ GLSA 200612-03 ] GnuPG: Multiple vulnerabilities, Raphael Marichez, 2006/12/11
[Full-disclosure] looking for security community input, Gadi Evron, 2006/12/10
- Re: [Full-disclosure] looking for security community input, Stack Smasher, 2006/12/10
- Re: [Full-disclosure] looking for security community input, ZYRO, 2006/12/12
[Full-disclosure] Another, different MS Word 0-day vulnerability reported, Juha-Matti Laurio, 2006/12/10
- Re: [Full-disclosure] Another, different MS Word 0-day vulnerability reported, Juha-Matti Laurio, 2006/12/10
- Re: [Full-disclosure] Another, different MS Word 0-day vulnerability reported, Juha-Matti Laurio, 2006/12/10
[Full-disclosure] Several updates in Microsoft Word 0-day (CVE-2006-5994) FAQ document, Juha-Matti Laurio, 2006/12/10
[Full-disclosure] [ GLSA 200612-09 ] MadWifi: Kernel driver buffer overflow, Raphael Marichez, 2006/12/10
- [Full-disclosure] [ GLSA 200612-09 ] MadWifi: Kernel driver buffer overflow, Raphael Marichez, 2006/12/12
[Full-disclosure] RFIDIOt release - version 0.1i, Adam Laurie, 2006/12/10
[Full-disclosure] Multiple vulnerabilities in Winamp Web Interface 7.5.13, Luigi Auriemma, 2006/12/10
[Full-disclosure] [ GLSA 200612-08 ] SeaMonkey: Multiple vulnerabilities, Raphael Marichez, 2006/12/10
[Full-disclosure] [ GLSA 200612-07 ] Mozilla Firefox: Multiple vulnerabilities, Raphael Marichez, 2006/12/10
[Full-disclosure] [ GLSA 200612-06 ] Mozilla Thunderbird: Multiple vulnerabilities, Raphael Marichez, 2006/12/10
[Full-disclosure] [ GLSA 200612-05 ] KOffice shared libraries: Heap corruption, Sune Kloppenborg Jeppesen, 2006/12/10
[Full-disclosure] [ GLSA 200612-04 ] ModPlug: Multiple buffer overflows, Raphael Marichez, 2006/12/10
[Full-disclosure] [ GLSA 200612-03 ] GnuPG: Multiple vulnerabilities, Raphael Marichez, 2006/12/10
AnnonceScriptHP V2.0 Multiple Vulnerabilities, mr_kaliman, 2006/12/09
Messageriescripthp V2.0 XSS & SQL Injection, mr_kaliman, 2006/12/09
ProNews V1.5 XSS & SQL Injection, mr_kaliman, 2006/12/09
KDPics Multiple Vulnerabities, mr_kaliman, 2006/12/09
[Full-disclosure] [ GLSA 200612-02 ] xine-lib: Buffer overflow, Sune Kloppenborg Jeppesen, 2006/12/09
[Full-disclosure] Call For Papers: SecurityOPUS 2007, Sharkey, 2006/12/09
PhpBB Toplist 1.3.7 Xss Vuln., starext, 2006/12/08
ASX Playlists and Jumping to Conclusions, Sûnnet Beskerming, 2006/12/08
[Full-disclosure] iDefense Security Advisory 12.08.06: Sophos Antivirus CHM File Heap Overflow Vulnerability, iDefense Labs, 2006/12/08
[Full-disclosure] iDefense Security Advisory 12.08.06: Sophos Antivirus CHM Chunk Name Length Memory Corruption Vulnerability, iDefense Labs, 2006/12/08
[Full-disclosure] iDefense Security Advisory 12.08.06: Multiple Vendor Antivirus RAR File Denial of Service Vulnerability, iDefense Labs, 2006/12/08
PHP 5.2.0 session.save_path safe_mode and open_basedir bypass, cxib, 2006/12/08
- Re: PHP 5.2.0 session.save_path safe_mode and open_basedir bypass, Ismail Donmez, 2006/12/12
Animated Smiley Generator File Include Vul., starext, 2006/12/08
LS-20061001 - Computer Associates BrightStor ARCserve Backup v11.5 Remote Buffer Overflow Vulnerability, advisories, 2006/12/08
LS-20060908 - Computer Associates BrightStor ARCserve Backup v11.5 Remote Buffer Overflow Vulnerability, advisories, 2006/12/08
[CAID 34846]: CA BrightStor ARCserve Backup Discovery Service Buffer Overflow Vulnerability, Williams, James K, 2006/12/08
Midicart vulerable, ifx, 2006/12/08
[OpenPKG-SA-2006.038] OpenPKG Security Advisory (tar), OpenPKG GmbH, 2006/12/08
TSLSA-2006-0070 - multi, Trustix Security Advisor, 2006/12/08
[Aria-Security Team] cPanel BoxTrapper Cross Site Scripting, Advisory, 2006/12/08
[Aria-Security Team] cPanel 11 pops.html Cross-Site Scripting, Advisory, 2006/12/08
[Full-disclosure] Enforcing Java Security Manager in Restricted Windows Environments?, Jan P. Monsch, 2006/12/08
[Aria-Security Team] CentOS 4.2 i686 - WHM X v3.1.0 Cross-Site Scripting, Advisory, 2006/12/08
[Full-disclosure] [USN-394-1] Ruby vulnerability, Kees Cook, 2006/12/08
EEYE: Intel Network Adapter Driver Local Privilege Escalation, eEye Advisories, 2006/12/08
[OpenPKG-SA-2006.037] OpenPKG Security Advisory (gnupg), OpenPKG GmbH, 2006/12/07
[Full-disclosure] Microsoft Word 0-day Vulnerability FAQ (CVE-2006-5994) written, Juha-Matti Laurio, 2006/12/07
DUdirectory Admin Panel SQL Injection, Meftun, 2006/12/07
phpAdsNew-2.0.4-pr2 Remote File Inclusion Exploit, crackers_child, 2006/12/07
[Full-disclosure] [USN-393-2] GnuPG2 vulnerabilities, Kees Cook, 2006/12/07
phpbb 2.0.x [xss], saps . audit, 2006/12/07
Re: The Week of Oracle Database Bugs, Tony Jambu, 2006/12/07
[Full-disclosure] Some Thoughts about Office Open XML and Malware Detection, Jan P. Monsch, 2006/12/07
- Re: [Full-disclosure] Some Thoughts about Office Open XML and Malware Detection, Robert Kim Wireless Internet Advisor, 2006/12/08
Digital Armaments Security Advisory 07.12.2006: Yahoo multiple services authentication bypass Vulnerability, info, 2006/12/07
Linksys WIP 330 VoIP wireless phone crash from Nmap scan, Shawn Merdinger, 2006/12/07
[Full-disclosure] [ GLSA 200612-01 ] wv library: Multiple integer overflows, Sune Kloppenborg Jeppesen, 2006/12/07
[Full-disclosure] New MySpace worm could be on its way, pdp (architect), 2006/12/07
[Full-disclosure] [USN-393-1] GnuPG vulnerability, Kees Cook, 2006/12/07
[Full-disclosure] TSRT-06-15: Citrix Presentation Server Client ActiveX Heap Overflow Vulnerability, TSRT, 2006/12/06
Microsoft 0-day word vulnerability - Secunia - Extremely critical, Ryan Buena, 2006/12/06
- Re: Microsoft 0-day word vulnerability - Secunia - Extremely critical, Andrew Simmons, 2006/12/07
- Re: Microsoft 0-day word vulnerability - Secunia - Extremely critical, Juha-Matti Laurio, 2006/12/07
- Re: Microsoft 0-day word vulnerability - Secunia - Extremely critical, schafer_jeffrey, 2006/12/28
- Re: Re: Microsoft 0-day word vulnerability - Secunia - Extremely critical, schafer_jeffrey, 2006/12/28
[Full-disclosure] ZDI-06-044: Adobe Download Manager AOM Parsing Buffer Overflow Vulnerability, zdi-disclosures, 2006/12/06
[Full-disclosure] [USN-390-3] evince-gtk vulnerability, Kees Cook, 2006/12/06
rPSA-2006-0227-1 gnupg, rPath Update Announcements, 2006/12/06
[ MDKSA-2006:225 ] - Updated ruby packages fix DoS vulnerability, security, 2006/12/06
GnuPG: remotely controllable function pointer [CVE-2006-6235], Werner Koch, 2006/12/06
SYMSA-2006-012: 2X ThinClientServer Create Admin Account Replay Vulnerability, research, 2006/12/06
Multiple Vendor Unusual MIME Encoding Content Filter Bypass, Hendrik Weimer, 2006/12/06
- Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass, Tomasz Kojm, 2006/12/07
  - Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass, Luke Borg, 2006/12/07
  - Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass, michele.sandrelli@katamail.com, 2006/12/07
  - Re[2]: Multiple Vendor Unusual MIME Encoding Content Filter Bypass, 3APA3A, 2006/12/07
    - Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass, Tomasz Kojm, 2006/12/07
- Re: Multiple Vendor Unusual MIME Encoding Content Filter Bypass, Gadi Evron, 2006/12/07
BTSaveMySql 1.2 (acces to config files), sn0oPy . team, 2006/12/06
[Full-disclosure] rPSA-2006-0226-1 kernel, rPath Update Announcements, 2006/12/06
FreeBSD Security Advisory FreeBSD-SA-06:26.gtar, FreeBSD Security Advisories, 2006/12/06
FreeBSD Security Advisory FreeBSD-SA-06:25.kmem, FreeBSD Security Advisories, 2006/12/06
Uploadscript Vulnerabilities: Text file Hash password, hack2prison, 2006/12/06
Re: Internet Explorer 6 CSS "expression" Denial of Service Exploit (P.o.C.), José Carlos Nieto Jarquín, 2006/12/06
- Re: Internet Explorer 6 CSS "expression" Denial of Service Exploit (P.o.C.), Andrius Paurys, 2006/12/07
  - Re: Internet Explorer 6 CSS "expression" Denial of Service Exploit (P.o.C.), chinese soup, 2006/12/08
    - Re: Internet Explorer 6 CSS "expression" Denial of Service Exploit (P.o.C.), chinese soup, 2006/12/12
Internet Explorer 6. CSS Expression Denial of Service (P.o.C.), José Carlos Nieto Jarquín, 2006/12/06
Barracuda Convert-UUlib library buffer overflow leads to remote compromise, Jean-Sébastien Guay-Leroux, 2006/12/06
[ MDKSA-2006:224 ] - Updated xine-lib packages fix buffer overflow vulnerability, security, 2006/12/06
EEYE: Adobe Download Manager AOM Stack Buffer Overflow Vulnerability, eEye Advisories, 2006/12/06
[Full-disclosure] Oracle PL/SQL Fuzzing Tool, Joxean Koret, 2006/12/06
[Full-disclosure] [USN-390-2] evince vulnerability, Kees Cook, 2006/12/06
HPSBUX02178 SSRT061267 rev.1 - HP-UX Secure Shell Remote Denial of Service (DoS), security-alert, 2006/12/05
[security bulletin] HPSBUX02145 SSRT061202 rev.2 - HP-UX running Apache Remote Execution of Arbitrary Code, Denial of Service (DoS), and Unauthorized Access, security-alert, 2006/12/05
eEye's Zero-Day Tracker Launch, chinese soup, 2006/12/05
Re: Symantec LiveState Agent for Windows vulnerabi, Damjan, 2006/12/05
- Re: Symantec LiveState Agent for Windows vulnerabi, eugeny gladkih, 2006/12/05
EasyPage Portal ( all ver )SQL Injection, matrix, 2006/12/05
- Re: EasyPage Portal ( all ver )SQL Injection, saps . audit, 2006/12/05
DistrRTgen 1.0 launched!, Martin Jørgensen, 2006/12/05
CYBSEC - Security Pre-Advisory: SAP Internet Graphics Service (IGS) Remote Arbitrary File Removal, Mariano Nuñez Di Croce, 2006/12/05
CYBSEC - Security Pre-Advisory: SAP Internet Graphics Service (IGS) Undocumented Features, Mariano Nuñez Di Croce, 2006/12/05
URL Rdirecction Bug Yahoo, matrix, 2006/12/05
Re: Evolve Merchant[ injection sql ], tony, 2006/12/05
Re: GnuPG 1.4 and 2.0 buffer overflow, Damien Miller, 2006/12/05
[KOffice security advisory] KOffice OLEfilter integer overflow, Dirk Mueller, 2006/12/05
SNORT Covered channels detector patch, fryxar fryxar, 2006/12/05
new xss in modbb forum, h angel, 2006/12/04
[Full-disclosure] TSRT-06-14: IBM Tivoli Storage Manager Mutiple Buffer Overflow Vulnerabilities, TSRT, 2006/12/04
XSS in JAB Guest Book, nj, 2006/12/04
- Re: XSS in JAB Guest Book, Steven M. Christey, 2006/12/07
- Re: XSS in JAB Guest Book, Barnz, 2006/12/09
Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation, ss_team, 2006/12/04
- RE: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation, Michael Scheidell, 2006/12/05
  - Re: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation, eugeny gladkih, 2006/12/05
    - Re: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation, Steve Shockley, 2006/12/05
    - Re: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation, Ansgar -59cobalt- Wiechers, 2006/12/05
- Re: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation, Thor (Hammer of God), 2006/12/05
- RE: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation, Michael Scheidell, 2006/12/06
[ MDKSA-2006:214-1 ] - Updated gv packages fix buffer overflow vulnerability, security, 2006/12/04
Re: aBitWhizzy [local file include], john . goodman, 2006/12/04
[Full-disclosure] [USN-391-1] libgsf vulnerability, Kees Cook, 2006/12/04
[Full-disclosure] [USN-392-1] xine-lib vulnerability, Kees Cook, 2006/12/04
Multiple bugs in TFT-Gallery, nj, 2006/12/04
- Re: Multiple bugs in TFT-Gallery, simo64, 2006/12/04
[Aria-Security Team] uGestBook SQL Injection Vuln, Advisory, 2006/12/04
- Re: [Aria-Security Team] uGestBook SQL Injection Vuln, Stuart Moore, 2006/12/05
- Re: Re: [Aria-Security Team] uGestBook SQL Injection Vuln, saps . audit, 2006/12/05
Re: UPublisher Exploit - Superfreaker, me, 2006/12/04
Vt-Forum Lite System V.1.3 Xss Vuln., starext, 2006/12/04
MS Internet Explorer 6.0 (mshtml.dll) Denial of Service Exploit, ajannhwt, 2006/12/04
- Re: MS Internet Explorer 6.0 (mshtml.dll) Denial of Service Exploit, 3APA3A, 2006/12/05
PhpMyAdmin 2.7.0-pl2 Path Disclosure | Multiple CRLF/Http Response Splitting, ajannhwt, 2006/12/04
2[xss]Vulnerabilities in Script Mobile Ac4p.com, gamr-14, 2006/12/04
SMF upload XSS vulnerability, Jessica Hope, 2006/12/04
Online BookMarks Multiple SQL Injection/XSS Vulnerabilities, security, 2006/12/04
[ISecAuditors Security Advisories] XSS vulnerability in error page of ISMail, ISecAuditors Security Advisories, 2006/12/04
[Full-disclosure] rPSA-2006-0211-2 doxygen libpng, rPath Update Announcements, 2006/12/04
Metyus Okul Ynetim Sistemi V.1.0 (tr) Sql injection Vuln., ShaFuq31, 2006/12/04
[ISecAuditors Security Advisories] IMAP/SMTP Injection in Hastymail, ISecAuditors Security Advisories, 2006/12/04
listpics v5, blasterim, 2006/12/04
[ISecAuditors Advisories] BlueSocket web administration is vulnerable to XSS, ISecAuditors Security Advisories, 2006/12/04
[Full-disclosure] F-Prot Antivirus for Unix: heap overflow and Denial of Service, research, 2006/12/04
[Full-disclosure] fl0p - passive L7 flow fingerprinting, Michal Zalewski, 2006/12/03
[VulnWatch] iDefense Security Advisory 11.29.06: Horde Kronolith Arbitrary Local File Inclusion Vulnerability, iDefense Labs, 2006/12/03
[Aria-Security Team] DuWare DuPaypal SQL Injection Vuln, Advisory, 2006/12/02
[Aria-Security Team] DuWare DuForum SQL Injection Vuln, Advisory, 2006/12/02
CuteNews 1.3.6 XSS, emulamex, 2006/12/02
[Aria-Security Team] DuWare DuDownloads SQL Injection Vuln, Advisory, 2006/12/02
[ MDKSA-2006:222 ] - Updated koffice packages fixes integer overflow vulnerability, security, 2006/12/02
KhaledMuratList mdb, blasterim, 2006/12/02
PHPNews 1.3.0 XSS, emulamex, 2006/12/02
[Aria-Security Team] DuWare DuPortal SQL Injection Vuln, Advisory, 2006/12/02
[Aria-Security Team] DuWare DuClassMate SQL Injection Vuln, Advisory, 2006/12/02
[Aria-Security Team] DuWare DuNews SQL Injection Vuln, Advisory, 2006/12/02
[ MDKSA-2006:223 ] - Updated ImageMagick packages fixes vulnerability, security, 2006/12/02
freeqboard <= 1.1 (qb_path) Remote File Include Vulnerability, -= SHELL =- -= SHELL =-, 2006/12/02
Re: safely concatenating strings in portable C (Re: GnuPG 1.4 and 2.0 buffer overflow), Simon Josefsson, 2006/12/02
TSLSA-2006-0068 - multi, Trustix Security Advisor, 2006/12/02
Aspee Ziyareti Defteri (tr) Sql injection Vuln., ShaFuq31, 2006/12/02
[Full-disclosure] iDefense Security Advisory 12.01.06: Novell ZENworks Asset Management Msg.dll Heap Overflow Vulnerability, iDefense Labs, 2006/12/01
[Full-disclosure] iDefense Security Advisory 12.01.06: Novell ZENworks Asset Management Collection Client Heap Overflow Vulnerability, iDefense Labs, 2006/12/01
Outpost Bypassing Self-Protection via Advanced DLL injection with handle stealing Vulnerability, Matousec - Transparent security Research, 2006/12/01
Layered Defense Advisory: Novell Client 4.91 Format String Vulnerability, dh, 2006/12/01
[Aria-Security.Net] Web Hosting Control Panel - cPanel 11 Multiple Cross-Site Scripting Vulnerabilites, Advisory, 2006/12/01
[ MDKSA-2006:221 ] - Updated gnupg packages fix vulnerability, security, 2006/12/01
[ MDKSA-2006:220 ] - Updated libgsf packages fix heap buffer overflow vulnerability, security, 2006/12/01
Re: Invision Community Blog Mod 1.2.4 .PHP SQL Injection Vulnerability, emin, 2006/12/01
Invision Gallery 2.0.7 SQL Injection Vulnerability, infection, 2006/12/01
- Re: Invision Gallery 2.0.7 SQL Injection Vulnerability, emin, 2006/12/04
[Full-disclosure] Financial firms warned of Qaeda cyber attack, Juha-Matti Laurio, 2006/12/01
- Re: [Full-disclosure] Financial firms warned of Qaeda cyber attack, SDALAN04, 2006/12/01
[Full-disclosure] deV!L`z Clanportal - Arbitrary File Upload [061124b], Tim Weber, 2006/12/01
[Full-disclosure] deV!L`z Clanportal - SQL Injection [061124a], Tim Weber, 2006/12/01
[Full-disclosure] rPSA-2006-0224-1 gnupg, rPath Update Announcements, 2006/12/01
[Full-disclosure] rPSA-2006-0222-1 tar, rPath Update Announcements, 2006/12/01
[Full-disclosure] rPSA-2006-0220-1 dovecot, rPath Update Announcements, 2006/12/01
[Full-disclosure] rPSA-2006-0221-1 openldap openldap-clients openldap-servers, rPath Update Announcements, 2006/12/01
LifeType version 1.1.2 Multiple Path Disclosure Vulnerabilities, jesper . jurcenoks, 2006/12/01