Vulnerability Development (thread)

WheatBlog 1.1 RFI/SQL Injection, underwater, 2007/06/30
Re: Re: Progress Webspeed exploit for all releases, suresync, 2007/06/30
[Full-disclosure] Advisory : Internet Explorer Zone Domain Specification Dos and Page suppressing., Aditya K Sood, 2007/06/30
Airscanner Advisory #07062901: FlexiSPY Victim/User Database Exposure (Full world readable access to ALL SMS/Emails/Voice data from victims/users), Airscanner Corp., 2007/06/29
SQL Injection In Script VBZooM V1.12, RaeD, 2007/06/29
flac123 0.0.9 - Stack overflow in comment parsing, David Thiel, 2007/06/29
TSLSA-2007-0021 - kerberos5, Trustix Security Advisor, 2007/06/29
[Full-disclosure] youtube flagged content age verification bypass, auto111760, 2007/06/29
- Re: [Full-disclosure] youtube flagged content age verification bypass, Nikolay Kichukov, 2007/06/30
[Full-disclosure] [USN-479-1] MadWifi vulnerabilities, Kees Cook, 2007/06/29
[security bulletin] HPSBTU02232 SSRT071429 rev.1 - Secure Web Server for HP Tru64 UNIX Powered by Apache (SWS) or HP Internet Express for Tru64 UNIX running PHP, Remote Arbitrary Code Execution, Unauthorized Disclosure of Information, or Denial of Service (DoS), security-alert, 2007/06/28
Secunia Research: KVIrc irc:// URI Handler Command Execution Vulnerability, Secunia Research, 2007/06/28
Secunia Research: Symantec Mail Security for SMTP Boundary Errors, Secunia Research, 2007/06/28
[SecurInfos] PCSoft WinDEV .wdp Project File Handling Buffer Overflow, Jerome Athias, 2007/06/28
XEForum Cookie Modification Privilege Escalation Vulnerability, Firewall1954, 2007/06/28
eTicket version 1.5.5 XSS Attack Vulnerability, securityresearch, 2007/06/28
- Re: eTicket version 1.5.5 XSS Attack Vulnerability, sf, 2007/06/29
eTicket version 1.5.5 Path Disclosure Vulnerability, securityresearch, 2007/06/28
[Full-disclosure] FLEA-2007-0030-1: avahi avahi-glib avahi-sharp, Foresight Linux Essential Announcement Service, 2007/06/28
[Full-disclosure] FLEA-2007-0029-1: krb5 krb5-workstation, Foresight Linux Essential Announcement Service, 2007/06/27
[Full-disclosure] rPSA-2007-0136-1 httpd mod_ssl, rPath Update Announcements, 2007/06/27
[GOODFELLAS - VULN] hpqxml.dll 2.0.0.133 from HP Digital Imaging Arbitary Data Write., Goodfellas SRT, 2007/06/27
rPSA-2007-0135-1 krb5 krb5-server krb5-services krb5-test krb5-workstation, rPath Update Announcements, 2007/06/27
Juniper SBR V 6.0.1 CRL-Checking problem, USprotte, 2007/06/27
Contact request - nVidia, john-lindsay, 2007/06/27
HPSBTU02207 SSRT061239 rev.2 - HP Tru64 UNIX OpenSSL and BIND Remote Arbitrary Code Execution or Denial of Service (DoS), security-alert, 2007/06/27
[ MDKSA-2007:136 ] - Updated evolution packages fix vulnerability, security, 2007/06/27
Conti FTP Server v1.0 DoS, esc6, 2007/06/27
Openedge _mprosrv buffer overflow, suresync, 2007/06/27
SAP Internet Communication Framework (BC-MID-ICF) Vulnerability, Ivan Buetler, 2007/06/27
PHP 4/5 htaccess safemode and open_basedir Bypass, cxib, 2007/06/27
SAP Web Dynpro Java (BC-WD-JAV) Vulnerability, Ivan Buetler, 2007/06/27
[ MDKSA-2007:137 ] - Updated krb5 packages fix vulnerabilities, security, 2007/06/27
[Full-disclosure] CheckPoint VPN-1 UTM Edge Cross Site Request Forgery vulnerability, Henri Lindberg - Louhi Networks Oy, 2007/06/27
[Full-disclosure] deviantArt does not check authorization for image download, Timothy Redaelli, 2007/06/27
[Full-disclosure] [USN-477-1] krb5 vulnerabilities, Kees Cook, 2007/06/26
[Full-disclosure] [USN-478-1] libexif vulnerability, Kees Cook, 2007/06/26
[Full-disclosure] [ GLSA 200706-09 ] libexif: Buffer overflow, Raphael Marichez, 2007/06/26
[Full-disclosure] [ GLSA 200706-08 ] emul-linux-x86-java: Multiple vulnerabilities, Raphael Marichez, 2007/06/26
[Full-disclosure] [GOODFELLAS - VULN ] Avaxswf.dll v.1.0.0.1 from Avax Vector software ActiveX Arbitrary Data Write, GOODFELLAS SRT, 2007/06/26
[Full-disclosure] iDefense Security Advisory 06.26.07: RealNetworks RealPlayer/HelixPlayer SMIL wallclock Stack Overflow Vulnerability, iDefense Labs, 2007/06/26
Calyptix Security Advisory CX-2007-04 - Cross-Site Request Forgery Attack Against Check Point Safe@Office Device, Calyptix Security, 2007/06/26
[Full-disclosure] iDefense Security Advisory 06.26.07: Multiple Vendor Kerberos kadmind Rename Principal Buffer Overflow Vulnerability, iDefense Labs, 2007/06/26
MITKRB5-SA-2007-005: kadmind vulnerable to buffer overflow, Tom Yu, 2007/06/26
MITKRB5-SA-2007-004: kadmind multiple RPC lib vulnerabilities, Tom Yu, 2007/06/26
SYMSA-2007-004: Multiple Vulnerabilities in Xythos Server Products, research, 2007/06/26
[Full-disclosure] rPSA-2007-0133-1 emacs emacs-leim, rPath Update Announcements, 2007/06/26
[Full-disclosure] CFP: ISOI III (a DA workshop), Gadi Evron, 2007/06/26
[ISR] :: Infobyte Security Research :: release (ISR-sqlget.pl) v1.0.0, Francisco Amato, 2007/06/25
Calendarix version 0.7. 20070307 Multiple SQL Injection Vulnerabilities, securityresearch, 2007/06/25
MyNews version 0.10 SQL Injection Vulnerability, securityresearch, 2007/06/25
[security bulletin] HPSBUX02225 SSRT071295 rev.1 - HP-UX Running Xserver, Local Denial of Service (DoS), security-alert, 2007/06/25
Calendarix version 0.7. 20070307 Multiple XSS Attacks, securityresearch, 2007/06/25
Papoo CMS 3.6 - Access Restriction Bypass, Nico Leidecker, 2007/06/25
phpTrafficA < 1.4.2, laurent . gaffie, 2007/06/25
Safari Bookmarks Buffer Overflow Vulnerability, azizov, 2007/06/25
Calendarix version 0.7. 20070307 Multiple Path Disclosure Vulnerabilities, securityresearch, 2007/06/25
- Calendarix version 0.7. 20070307 Multiple Path Disclosure Vulnerabilities, securityresearch, 2007/06/25
Pluxml 0.3.1 Remote Code Execution Exploit, gmdarkfig, 2007/06/25
[Full-disclosure] rPSA-2007-0131-1 libexif, rPath Update Announcements, 2007/06/25
LiteWEB 2.7 404 Denial of Services, imprili, 2007/06/25
Ingres wakeup setuid(ingres) file truncation, NGSSoftware Insight Security Research, 2007/06/25
Ingres stack overflow in uuid_from_char function, NGSSoftware Insight Security Research, 2007/06/25
POWER PHLOGGER v.2.2.5 (username) SQL Injection, darkz . gsa, 2007/06/25
Ingres Unauthenticated Pointer Overwrite 1, NGSSoftware Insight Security Research, 2007/06/25
Papoo CMS 3.6 - SQL Injection, Nico Leidecker, 2007/06/25
Ingres verifydb local stack overflow, NGSSoftware Insight Security Research, 2007/06/25
Ingres Unauthenticated Pointer Overwrite 2, NGSSoftware Insight Security Research, 2007/06/25
KF Web Server 3.1.0 admin console XSS, imprili, 2007/06/25
- Re: KF Web Server 3.1.0 admin console XSS, support, 2007/06/26
SHTTPD V1.38 server source code disclosure, imprili, 2007/06/25
[GOODFELLAS - VULN] BarCodeAx.dll v. 4.9 ActiveX Control Remote Stack Buffer Overflow, GOODFELLAS SRT, 2007/06/25
[Full-disclosure] Safari XMLHttpRequest HTTP header injection, Richard Moore, 2007/06/25
[Full-disclosure] "run as" local denial-of-service enables administrative account processes to be killed, Eitan Caspi, 2007/06/23
- Re: [Full-disclosure] "run as" local denial-of-service enables administrative account processes to be killed, KJK::Hyperion, 2007/06/23
- RE: "run as" local denial-of-service enables administrative account processes to be killed, James C. Slora Jr., 2007/06/26
[Full-disclosure] The Harry Potter hoax, or manipulating the mass media for fun and for profit., PSYOP HARRY POTTER, 2007/06/23
[ MDKSA-2007:135 ] - Updated webmin packages fix XSS vulnerability, security, 2007/06/23
[Full-disclosure] FLEA-2007-0028-1: libexif, Foresight Linux Essential Announcement Service, 2007/06/22
- [Full-disclosure] FLEA-2007-0028-1: libexif, Foresight Linux Essential Announcement Service, 2007/06/23
- [Full-disclosure] FLEA-2007-0028-1: libexif, Foresight Linux Essential Announcement Service, 2007/06/23
eNdonesia 8.4 [multiple injection sql], laurent . gaffie, 2007/06/22
[Full-disclosure] [USN-476-1] redhat-cluster-suite vulnerability, Kees Cook, 2007/06/22
[CAID 35450, 35451, 35452, 35453]: CA Products That Embed Ingres Multiple Vulnerabilities, Williams, James K, 2007/06/22
All Of the Mambo & Joomla Script Remote File Inclussion Bugs.., spymeta, 2007/06/22
[ MDKSA-2007:134 ] - Updated xfsdump packages fix unsafe temporary directory creation issue, security, 2007/06/22
[ MDKSA-2007:133 ] - Updated emacs packages fix DoS vulnerability, security, 2007/06/22
[Full-disclosure] MS07-034: Executing arbitrary script with mhtml: protocol handler, HASEGAWA Yosuke , 2007/06/22
[Full-disclosure] [USN-475-1] evolution-data-server vulnerability, Kees Cook, 2007/06/21
Re: New Include Redirect Bug XSS All vBulletin(r) v 3.x.x, Steven M. Christey, 2007/06/21
- Re: Re: New Include Redirect Bug XSS All vBulletin(r) v 3.x.x, scott-REMOVE-, 2007/06/22
[Full-disclosure] iDefense Security Advisory 06.21.07: Ingres Database Multiple Heap Corruption Vulnerabilities, iDefense Labs, 2007/06/21
HPSBST02231 SSRT071438 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS07-030 to MS07-035, security-alert, 2007/06/21
[security bulletin] HPSBGN02199 SSRT071312 rev.3 - Mercury Quality Center ActiveX, Remote Unauthorized Arbitrary Code Executio, security-alert, 2007/06/21
NetClassifieds [multiple vulnerabilities], laurent . gaffie, 2007/06/21
[ MDKSA-2007:132 ] - Updated madwifi-source, wpa_supplicant packages fix vulnerabilities, security, 2007/06/21
VLC 0.8.6b format string vulnerability & integer overflow, David Thiel, 2007/06/21
[ MDKSA-2007:131 ] - Updated Thunderbird packages fix multiple vulnerabilities, security, 2007/06/21
[ MDKSA-2007:130 ] - Updated proftpd packages fix authentication bypass vulnerability, security, 2007/06/21
HTTP SERVER (httpsv1.6.2) 404 Denial of Service, imprili, 2007/06/21
MyServer-0.8.9 - xss in sample cgi page, imprili, 2007/06/21
MyServer-0.8.9 - source code disclosure, imprili, 2007/06/21
[Full-disclosure] [Advisory] Phishing Vulnerability in Yahoo Search Engine and Yahoo Network. [Multiple], Aditya K Sood, 2007/06/21
HTTP SERVER (httpsv1.6.2) source code disclosure, imprili, 2007/06/20
[security bulletin] HPSBTU02218 SSRT071424 rev.1 - HP Tru64 UNIX Internet Express running Samba, Remote Arbitrary Code Execution or Local Unauthorized Privilege Elevation, security-alert, 2007/06/20
[security bulletin] HPSBPI02226 SSRT061274 rev.1 - HP Help and Support Center Running on HP Notebook Computers Running with Windows XP, Remote Unauthorized Access, security-alert, 2007/06/20
fusetalk CSS (autherror.cfm), Ivan Almuina, 2007/06/20
fusetalk CSS (comfinish.cfm), Ivan Almuina, 2007/06/20
[ MDKSA-2007:128 ] - Updated libexif packages fix integer overflow flaw, security, 2007/06/20
Pixy - An Open-Source Vulnerability Scanner for PHP Applications, pixy-noreply, 2007/06/20
New Include Redirect Bug XSS All vBulletin v 3.x.x, stormhacker, 2007/06/20
- Re: New Include Redirect Bug XSS All vBulletin v 3.x.x, scott-REMOVE-, 2007/06/21
  - Re: New Include Redirect Bug XSS All vBulletin v 3.x.x, kaneda, 2007/06/21
- Re: Re: New Include Redirect Bug XSS All vBulletin v 3.x.x, scott-REMOTE-, 2007/06/22
[ MDKSA-2007:129 ] - Updated jasper packages fix vulnerability, security, 2007/06/20
[Full-disclosure] FLEA-2007-0027-1: thunderbird, Foresight Linux Essential Announcement Service, 2007/06/20
Comersus Shop Cart 7.07 SQL Injection & XSS, DoZ, 2007/06/20
New post Topic Hijacking XSS All vBulletin v 3.x.x (2), stormhacker, 2007/06/20
- Re: New post Topic Hijacking XSS All vBulletin v 3.x.x (2), scott-REMOVE-, 2007/06/21
[ MDKSA-2007:127 ] - Updated apache packages fix mod_mem_cache issue, security, 2007/06/20
[Full-disclosure] Apache Prefork MPM vulnerabilities - Report, Blazej Miga, 2007/06/20
[Full-disclosure] [ GLSA 200706-07 ] PHProjekt: Multiple vulnerabilities, Raphael Marichez, 2007/06/19
[Full-disclosure] [ GLSA 200706-06 ] Mozilla products: Multiple vulnerabilities, Raphael Marichez, 2007/06/19
W1L3D4 WEBmarket v0,1 SQL Injection Vuln, crackers_child, 2007/06/19
Persistent cross-site scripting in wordpress.com dashboard, Matteo Carli, 2007/06/19
Local File Include Vulnerabilities in YaBB <= 2.1(all version), krasza, 2007/06/19
MaraDNS denial of service vulnerabilities, jantunes, 2007/06/19
iG Shop 1.4 eval Inclusion Vulnerability, ifx, 2007/06/19
CfP: 5th ACM Workshop on Recurring Malware (WORM) - Deadline extension, chris, 2007/06/19
rPSA-2007-0127-1 fetchmail, rPath Update Announcements, 2007/06/19
fusetalk SQL (autherror.cfm), Ivan Almuina, 2007/06/19
[Full-disclosure] Local File Include Vulnerabilities in YaBB <= 2.1(all version), krasza, 2007/06/19
[Full-disclosure] FLEA-2007-0026-1: evolution-data-server, Foresight Linux Essential Announcement Service, 2007/06/19
[Full-disclosure] [CVE-2007-1358] Apache Tomcat XSS vulnerability in Accept-Language header processing, Mark Thomas, 2007/06/18
- Re: [Full-disclosure] [CVE-2007-1358] Apache Tomcat XSS vulnerability in Accept-Language header processing, Debasis Mohanty, 2007/06/19
[Full-disclosure] iDefense Security Advisory 06.18.07: Cerulean Studios Trillian UTF-8 Word Wrap Heap Overflow Vulnerability, iDefense Labs, 2007/06/18
Fusetalk SQL injection submission., Charles Kim, 2007/06/18
fuzzylime (forum) XSS, rm, 2007/06/18
Webif.cgi local file inclusion, maiosyet, 2007/06/18
[security bulletin] HPSBMA02224 SSRT071334 rev.1 - HP System Management Homepage (SMH) for Linux, Remote Privileged Access, security-alert, 2007/06/18
PHP hosting Biller, rm, 2007/06/18
WSPortal version 1.0 SQL Injection Vulnerability, securityresearch, 2007/06/18
Utopia News Pro version 1.4.0 XSS Attack Vulnerability, securityresearch, 2007/06/18
WSPortal version 1.0 Path Disclosure Vulnerability, securityresearch, 2007/06/18
[ MDKSA-2007:126-1 ] - Updated Firefox packages fix multiple vulnerabilities, security, 2007/06/18
[Full-disclosure] ShAnKaR: Simle machines forum CAPTCHA bypass and PHP injection, 3APA3A, 2007/06/18
[Full-disclosure] H4CREW-000005 EasyNews Pro 4.0 XSS & CSRF, tHe cReW n0 c0ntend3rs, 2007/06/17
Having Fun With PostgreSQL, Nico Leidecker, 2007/06/16
- Re: Having Fun With PostgreSQL, Ray Stell, 2007/06/18
- Re: Having Fun With PostgreSQL, Frank Berek, 2007/06/19
Local Denial of Service in Safari, azizov, 2007/06/16
Sitellite cms <= 4.2.12 RFI Vuln, CarcaBot, 2007/06/16
- Re: Sitellite cms <= 4.2.12 RFI Vuln, lux, 2007/06/19
[SECURITY] [DSA 1304-1] New Linux kernel 2.6.8 packages fix several vulnerabilities, dann frazier, 2007/06/16
[ MDKSA-2007:126 ] - Updated Firefox packages fix multiple vulnerabilities, security, 2007/06/16
PhpListPro Persistent XSS Vulnerability, corrado . liotta, 2007/06/15
Papoo CMS - Multiple Cross Site Scripting, Nico Leidecker, 2007/06/15
[Full-disclosure] [ GLSA 200706-05 ] ClamAV: Multiple Denials of Service, Raphael Marichez, 2007/06/15
rPSA-2007-0126-1 util-linux, rPath Update Announcements, 2007/06/15
Kaspersky Multiple insufficient argument validation of hooked SSDT function Vulnerability, Matousec - Transparent security Research, 2007/06/15
[Full-disclosure] rPSA-2007-0124-1 kernel xen, rPath Update Announcements, 2007/06/15
[Full-disclosure] rPSA-2007-0123-1 squirrelmail, rPath Update Announcements, 2007/06/15
[Full-disclosure] rPSA-2007-0122-1 evolution-data-server, rPath Update Announcements, 2007/06/15
Re: [MajorSecurity Advisory #47]Simple Machines Forum (SMF) - Session fixation Issue, nobody, 2007/06/14
- Re: Re: [MajorSecurity Advisory #47]Simple Machines Forum (SMF) - Session fixation Issue, motokochan, 2007/06/25
[ MDKSA-2007:125 ] - Updated spamassassin packages fix possible DoS condition, security, 2007/06/14
RFI In Script SH-News 3.1, Raed, 2007/06/14
ByPass In PortalApp, Raed, 2007/06/14
Re: RedLevel Advisory #23 - SalesCart Shopping Cart SQL Injection Vulnerability, accounting, 2007/06/14
- Re: RedLevel Advisory #23 - SalesCart Shopping Cart SQL Injection Vulnerability, John M. Martinelli, 2007/06/14
  - Re: RedLevel Advisory #23 - SalesCart Shopping Cart SQL Injection Vulnerability, Jon Ribbens, 2007/06/19
Elxis CMS <= 2006.4 - banner module - sql injection, Nico Leidecker, 2007/06/14
[Full-disclosure] iDefense Security Advisory 06.14.07: Apache MyFaces Tomahawk JSF Framework Cross-Site Scripting (XSS) Vulnerability, iDefense Labs, 2007/06/14
Re: Re: BlackBoard Multiple Vulnerabilities (XSS), anonymous, 2007/06/14
[ MDKSA-2007:121 ] - Updated freetype2 packages fix integer overflow vulnerability, security, 2007/06/14
[ MDKSA-2007:124 ] - Updated tetex packages fix vulnerability, security, 2007/06/14
[ MDKSA-2007:122 ] - Updated gd packages fix vulnerability, security, 2007/06/14
Singapore Gallery fullpath disclosure, hack2prison, 2007/06/14
[ MDKSA-2007:123 ] - Updated libwmf packages fix vulnerability, security, 2007/06/14
[Full-disclosure] [CVE-2007-2450]: Apache Tomcat XSS vulnerability in Manager, Mark Thomas, 2007/06/14
[Full-disclosure] [CVE-2007-2449] Apache Tomcat XSS vulnerabilities in the JSP examples, Mark Thomas, 2007/06/14
[Full-disclosure] rPSA-2007-0119-1 spamassassin, rPath Update Announcements, 2007/06/14
[Full-disclosure] FLEA-2007-0025-1: openoffice.org, Foresight Linux Essential Announcement Service, 2007/06/13
High risk vulnerability in OpenOffice RTF parser, NGSSoftware Insight Security Research, 2007/06/13
[Full-disclosure] iDefense Security Advisory 06.13.07: Multiple Vendor libexif Integer Overflow Heap Corruption Vulnerability, iDefense Labs, 2007/06/13
[Full-disclosure] Apple Safari: cookie stealing, Robert Swiecki, 2007/06/13
- Re: [Full-disclosure] Apple Safari: cookie stealing, Michal Zalewski, 2007/06/13
- Re: [Full-disclosure] Apple Safari: urlbar/window title spoofing, Robert Swiecki, 2007/06/14
  - Re: [Full-disclosure] Apple Safari: urlbar/window title spoofing, Mark Senior, 2007/06/15
  - Re: [Full-disclosure] Apple Safari: idn urlbar spoofing, Robert Swiecki, 2007/06/25
    - Re: [Full-disclosure] Apple Safari: idn urlbar spoofing, Larry Seltzer, 2007/06/25
    - Re: [Full-disclosure] Apple Safari: idn urlbar spoofing, Michal Zalewski, 2007/06/25
    - Re: [Full-disclosure] Apple Safari: idn urlbar spoofing, Robert Swiecki, 2007/06/27
- Re: [Full-disclosure] Apple Safari: cookie stealing, Joey Mengele, 2007/06/13
[Full-disclosure] [USN-474-1] xscreensaver vulnerability, Kees Cook, 2007/06/12
Re: [Full-disclosure] Windows Oday release, Johnson, Richard \(NY Int\), 2007/06/12
- Re: [Full-disclosure] Windows Oday release, Joey Mengele, 2007/06/13
  - Re: [Full-disclosure] Windows Oday release, crazy frog crazy frog, 2007/06/13
[Full-disclosure] iDefense Security Advisory 06.12.07: YaBB Forum member.vars CRLF Injection Privilege Escalation Vulnerability, iDefense Labs, 2007/06/12
[Full-disclosure] iDefense Security Advisory 06.12.07: Microsoft License Manager and urlmon.dll COM Object Interaction Invalid Memory Access Vulnerability, iDefense Labs, 2007/06/12
Menu Manager Mod for WebAPP - No Input Filtering, web-app, 2007/06/12
- Re: Menu Manager Mod for WebAPP - No Input Filtering, webapp, 2007/06/18
[ MDKSA-2007:120 ] - Updated Firefox packages fix multiple vulnerabilities, security, 2007/06/12
[Full-disclosure] ZDI-07-038: Microsoft Internet Explorer Prototype Dereference Code Execution Vulnerability, zdi-disclosures, 2007/06/12
[Full-disclosure] ZDI-07-037: Microsoft Internet Explorer Language Pack Installation Remote Code Execution Vulnerability, zdi-disclosures, 2007/06/12
Windows Oday release, Thomas Lim, 2007/06/12
- Re: Windows Oday release, ge, 2007/06/12
  - Re: Windows Oday release, Joanna Rutkowska, 2007/06/13
    - Re: [Full-disclosure] Windows Oday release, Jared DeMott, 2007/06/13
- Re: Windows Oday release, Steven M. Christey, 2007/06/13
  - Re: Windows Oday release, ge, 2007/06/14
    - Re: Windows Oday release, Hugo van der Kooij, 2007/06/19
[ MDKSA-2007:119 ] - Updated Thunderbird packages fix multiple vulnerabilities, security, 2007/06/12
[security bulletin] HPSBUX02219 SSRT061273 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS), security-alert, 2007/06/12
ZDI-07-036: Arris Cadant C3 CMTS Remote DoS Vulnerability, zdi-disclosures, 2007/06/12
PHP parse_str() arbitrary variable overwrite, gmdarkfig, 2007/06/12
- Re: PHP parse_str() arbitrary variable overwrite, admin, 2007/06/12
- Re: PHP parse_str() arbitrary variable overwrite, Steven M. Christey, 2007/06/13
  - Re: PHP parse_str() arbitrary variable overwrite, Chuck Swiger, 2007/06/13
- Re: Re: PHP parse_str() arbitrary variable overwrite, gmdarkfig, 2007/06/13
[Full-disclosure] Safari for Windows, 0day URL protocol handler command injection, Thor Larholm, 2007/06/12
- Re: [Full-disclosure] Safari for Windows, 0day URL protocol handler command injection, Larry Seltzer, 2007/06/12
- Re: [Full-disclosure] Safari for Windows, 0day URL protocol handler command injection, Steven Adair, 2007/06/12
  - Re: [Full-disclosure] Safari for Windows, 0day URL protocol handler command injection, dump, 2007/06/12
- Re: [Full-disclosure] Safari for Windows, 0day URL protocol handler command injection, Jay, 2007/06/12
[Full-disclosure] [USN-473-1] libgd2 vulnerabilities, Kees Cook, 2007/06/11
[Full-disclosure] [USN-472-1] libpng vulnerability, Kees Cook, 2007/06/11
[USN-471-1] libexif vulnerability, Kees Cook, 2007/06/11
[USN-439-2] file vulnerability, Kees Cook, 2007/06/11
[Full-disclosure] [ GLSA 200706-04 ] MadWifi: Multiple vulnerabilities, Raphael Marichez, 2007/06/11
PHPMailer command execution, Thor Larholm, 2007/06/11
[Full-disclosure] SECNICHE : Dwelling Security is On the Run, Aditya K Sood, 2007/06/11
- Re: [Full-disclosure] SECNICHE : Dwelling Security is On the Run, dcdave, 2007/06/12
  - Re: [Full-disclosure] [WEB SECURITY] Re: SECNICHE : Dwelling Security is On the Run, Thierry Zoller, 2007/06/12
  - Re: [Full-disclosure] [WEB SECURITY] Re: SECNICHE : Dwelling Security is On the Run, Aditya K Sood, 2007/06/12
MLabs is Shifted Fully : SecNiche Initiative, Aditya K Sood, 2007/06/11
Webwiz vulnerable, spymaster, 2007/06/11
WinPT User ID Spoofing Vulnerability, nnposter, 2007/06/11
SpyBye 0.3 released, Niels Provos, 2007/06/11
Maran Blog XSS vulnerability, ls, 2007/06/11
Re: [SECURITY] [DSA 1299-1] New ipsec-tools packages fix denial of service, 3APA3A, 2007/06/11
- Re: [SECURITY] [DSA 1299-1] New ipsec-tools packages fix denial of service, dann frazier, 2007/06/12
Cisco Trust Agent Vulnerability, adblake, 2007/06/11
[Full-disclosure] Snitches, FBI backdoors and Dishonour amongst Hackers, honourable, 2007/06/11
[Full-disclosure] Serious holes affecting JFFNMS, Tim Brown, 2007/06/10
[Full-disclosure] [TOOL] w3af - Web Application Attack and Audit Framework, Andres Riancho, 2007/06/10
Project CERA Is Up Again : Secniche Initiative, Aditya K Sood, 2007/06/10
myBloggie 2.1.5 Remote File Include, yaser, 2007/06/09
- Re: myBloggie 2.1.5 Remote File Include, the . tiger100, 2007/06/11
[SECURITY] [DSA 1301-1] New Gimp packages fix arbitrary code execution, Noah Meyerhans, 2007/06/09
vSupport Integrated Ticket System 3.*.* SQL injection, stormhacker, 2007/06/09
[ MDKSA-2007:118 ] - Updated libexif packages fix crash and possible arbitrary code execution issue, security, 2007/06/09
[Full-disclosure] [USN-470-1] Linux kernel vulnerabilities, Kees Cook, 2007/06/08
EEYE: Yahoo Webcam ActiveX Controls Multiple Buffer Overflows, eEye Advisories, 2007/06/08
TSLSA-2007-0020 - clamav, Trustix Security Advisor, 2007/06/08
[Full-disclosure] iDefense Security Advisory 06.07.07: Linux Kernel cpuset tasks Information Disclosure Vulnerability, iDefense Labs, 2007/06/08
[OpenPKG-SA-2007.021] OpenPKG Security Advisory (wordpress), OpenPKG GmbH, 2007/06/08
PHPMyDesk Beta Release 1.0b ==> RFI, titanichacker titanichacker, 2007/06/08
- Re: PHPMyDesk Beta Release 1.0b ==> RFI, the . tiger100, 2007/06/11
- Re: Re: PHPMyDesk Beta Release 1.0b ==> RFI, no-spam, 2007/06/23
Packeteer PacketShaper Web Management Denial of Service, nnposter, 2007/06/08
Second Call for Papers: DeepSec IDSC 2007 Europe/Vienna: 20-23 Nov 2007, Paul Böhm, 2007/06/08
CSIS Advisory: BlueCoat K9 Web Protection 3.2.36 Overflow, Dennis Rand, 2007/06/08
[Full-disclosure] Wordpress default theme XSS (admin) and other problems, John Smith, 2007/06/08
[Full-disclosure] rPSA-2007-0117-1 gd php php-mysql php-pgsql, rPath Update Announcements, 2007/06/07
Zen Help Desk ==> Version 2.1 Bypass/, titanichacker titanichacker, 2007/06/07
Re: LuckyBot v3 Remote File Include, info, 2007/06/07
Re: Monkey CMS v0.0.3 Remote File Include Vulnerabilitiy, www, 2007/06/07
phpWebThings ==>1.5.2 RFI, titanichacker titanichacker, 2007/06/07
OWASP and WASC Cocktail party at Blackhat USA 2007, Anurag Agarwal, 2007/06/07
Sudo: local root compromise with krb5 enabled, Thor Lancelot Simon, 2007/06/07
- Re: Sudo: local root compromise with krb5 enabled, Thor Lancelot Simon, 2007/06/07
  - MIT krb5: makes sudo authentication issue MUCH worse., Thor Lancelot Simon, 2007/06/07
- Re: Sudo: local root compromise with krb5 enabled, James Downs, 2007/06/07
  - Re: Sudo: local root compromise with krb5 enabled, Mark Senior, 2007/06/07
    - Re: Sudo: local root compromise with krb5 enabled, Todd C. Miller, 2007/06/07
- Re: Sudo: local root compromise with krb5 enabled, Ken Raeburn, 2007/06/12
  - Re: Sudo: local root compromise with krb5 enabled, Kyle Wheeler, 2007/06/14
    - Re: Sudo: local root compromise with krb5 enabled, Ken Raeburn, 2007/06/15
WmsCMS < = 2.0 Multiple XSS Vulnerabilities, glafkos, 2007/06/07
[CAID 35395, 35396]: CA Anti-Virus Engine CAB File Buffer Overflow Vulnerabilities, Williams, James K, 2007/06/07
Atom PhotoBlog v1.0.9 XSS vulnerability, ls, 2007/06/07
W1L3D4 WEBmarket Remote SQL İnjection, Dj_ReMix_20, 2007/06/07
CSIS Advisory: Microsoft GDI+ Integer division by zero flaw handling .ICO files, Dennis Rand, 2007/06/07
- Re: CSIS Advisory: Microsoft GDI+ Integer division by zero flaw handling .ICO files, H D Moore, 2007/06/07
Hnkaray Duyuru Script Remote SQL İnjection, Dj_ReMix_20, 2007/06/07
[Full-disclosure] RUS-CERT 2007-06:01 (1380): Insecure Defaults in A-L OmniPCX 7.0, Oliver Goebel, 2007/06/07
Remote log injection on DenyHosts, Fail2ban and BlockHosts, Daniel Cid, 2007/06/06
IE 6 / MS Office Outlook Express Address Book Activex DoS, no-reply, 2007/06/06
IE 6/Microsoft Html Popup Window (mshtml.dll) DoS, no-reply, 2007/06/06
[Full-disclosure] [ GLSA 200706-03 ] ELinks: User-assisted execution of arbitrary code, Raphael Marichez, 2007/06/06
[Full-disclosure] [ GLSA 200706-02 ] Evolution: User-assisted execution of arbitrary code, Raphael Marichez, 2007/06/06
Light Blog 4.1 XSS Vulnerability, ls, 2007/06/06
ASP Folder Gallery Vulnerabilities, hack2prison, 2007/06/06
[Full-disclosure] FLEA-2007-0021-2: madwifi, Foresight Linux Essential Announcement Service, 2007/06/06
Announce - Release RFIDIOt ver 0.1n (June 2007), Adam Laurie, 2007/06/06
[ MDKSA-2007:117 ] - Updated lha packages fix unsafe temporary files creation issue, security, 2007/06/06
[ MDKSA-2007:116 ] - Updated libpng packages fix vulnerability, security, 2007/06/06
[ MDKSA-2007:114 ] - Updated file packages fix vulnerabilities, security, 2007/06/06
[Full-disclosure] iDefense Security Advisory 06.05.07: Symantec Ghost Multiple Denial of Service Vulnerabilities, iDefense Labs, 2007/06/06
[Full-disclosure] [USN-469-1] Thunderbird vulnerabilities, Kees Cook, 2007/06/06
SYM07-011 Symantec Reporting Server password disclosure, secure, 2007/06/05
Comicsense SQL Injection Advisory/Exploit, s0cratex, 2007/06/05
[security bulletin] HPSBUX02218 SSRT071424 rev.1 - HP-UX running CIFS Server (Samba), Remote Arbitrary Code Execution, security-alert, 2007/06/05
[Full-disclosure] ZDI-07-034: CA Multiple Product AV Engine CAB Filename Parsing Stack Overflow Vulnerability, zdi-disclosures, 2007/06/05
SYM07-012 Symantec Reporting Server elevation of privilege, secure, 2007/06/05
ZDI-07-035: CA Multiple Product AV Engine CAB Header Parsing Stack Overflow Vulnerability, zdi-disclosures, 2007/06/05
[Full-disclosure] [ GLSA 200706-01 ] libexif: Integer overflow vulnerability, Raphael Marichez, 2007/06/05
[ MDKSA-2007:111 ] - Updated util-linux packages address login access policies bypassing issue, security, 2007/06/05
[ MDKSA-2007:112 ] - Updated mplayer packages fix buffer overflow vulnerability, security, 2007/06/05
[security bulletin] HPSBUX02217 SSRT071337 rev.2 - HP-UX running Kerberos, Remote Arbitrary Code Execution, security-alert, 2007/06/05
[ MDKSA-2007:115 ] - Updated clamav packages fix vulnerabilities, security, 2007/06/05
[ MDKSA-2007:113 ] - Updated mutt packages fix vulnerabilities, security, 2007/06/05
[Full-disclosure] TPTI-07-09: Macrovision FLEXnet boisweb.dll ActiveX Control Buffer Overflow Vulnerability, TSRT, 2007/06/04
[Full-disclosure] TPTI-07-08: Symantec Veritas Storage Foundation Scheduler Service Authentication Bypass Vulnerability, TSRT, 2007/06/04
[Full-disclosure] TPTI-07-10: Centennial Software XferWan.exe Stack Overflow Vulnerability, TSRT, 2007/06/04
[ MDKSA-2007:110 ] - Updated php-pear packages fix directory traversal vulnerability, security, 2007/06/04
Re: [PLESK 7.5 Reload] & [PLESK 7.6 for MS Windows] path passing and disclosure vulnerability, leo, 2007/06/04
rPSA-2007-0115-1 libexif, rPath Update Announcements, 2007/06/04
rPSA-2007-0114-1 mutt, rPath Update Announcements, 2007/06/04
SYM07-009,Symantec Storage Foundation for Windows Volume Manager: Authentication Bypass and Potential Code Execution in Scheduler Service, secure, 2007/06/04
[Full-disclosure] FLEA-2007-0024-1: libexif, Foresight Linux Essential Advisory Service, 2007/06/04
[Full-disclosure] (no subject), Foresight Linux Essential Advisory Service, 2007/06/04
Unpatched input validation flaw in Firefox 2.0.0.4, Thor Larholm, 2007/06/04
My Datebook SQL Injection + XSS, ls, 2007/06/04
[Full-disclosure] n.runs-SA-2007.015 - F-Secure Antivirus FSG packed files parsing Infinite Loop Advisory, security, 2007/06/04
uTorrent overflow, Dj . r4iDeN, 2007/06/04
- Re: uTorrent overflow, Jon Ribbens, 2007/06/06
  - Re: uTorrent overflow, Andreas Beck, 2007/06/07
  - Re: uTorrent overflow, Gavin Hanover, 2007/06/07
  - Message not available
    - Re: uTorrent overflow, Pavel Konov, 2007/06/07
- Re: uTorrent overflow, Dj . r4iDeN, 2007/06/06
[Full-disclosure] n.runs-SA-2007.014 - F-Secure Antivirus ARJ parsing Infinite Loop Advisory, security, 2007/06/04
CERN İmage Map Dispatcher, h0tturk, 2007/06/04
Dansie Cart Script Exploit Reported, h0tturk, 2007/06/04
- Re: Dansie Cart Script Exploit Reported, Steven M. Christey, 2007/06/06
2007-06-03: PeerCast streaming server submits cleartext password, mpeg, 2007/06/04
Redlevel Advisory #025 - Vonage VoIP Telephone Adapter Default Misconfiguration, john, 2007/06/04
[Full-disclosure] Portcullis Computer Security Ltd - Advisories, advisories, 2007/06/04
Re: Buffer overflow in BusinessMail email server system 4.60.00, iant, 2007/06/04
- Re: Buffer overflow in BusinessMail email server system 4.60.00, Steve Tornio, 2007/06/04
WebStudio Multiple XSS Vulnerabilities, glafkos, 2007/06/04
S21Sec-035: F5 FirePass command execution vulnerability, S21sec Labs, 2007/06/04
CACTUSHOP 6 Default Installation Allows Remote Database Disclosure, DoZ, 2007/06/04
BCS'07 Call For Papers, Jim Geovedi, 2007/06/04
Comdev eCommerce 4.1 RFI Vulnerability, johnnytalker, 2007/06/04
Comdev Web Blogger 4.1 RFI Vulnerability, johnnytalker, 2007/06/04
[Full-disclosure] Assorted browser vulnerabilities, Michal Zalewski, 2007/06/04
[Full-disclosure] Disinfectors for the calculator virus (ti89.Gaara), Piotr Bania, 2007/06/03
MyEvent1.6 (template.php) Remote File Inclusion Vulnerability, yaser, 2007/06/02
- Re: MyEvent1.6 (template.php) Remote File Inclusion Vulnerability, str0ke, 2007/06/02
  - Recent OpenSSL exploits, Ryan's spam address, 2007/06/04
Linker index.php - Cross-Site Scripting Vulnerability, vagrant - e-hack.org, 2007/06/02
jumping sudo using ptrace on Linux/i386, Trent Waddington, 2007/06/02
[Full-disclosure] iDefense Security Advisory 06.01.07: Symantec VERITAS Storage Foundation Administration Service DoS Vulnerability, iDefense Labs, 2007/06/01
[Full-disclosure] [USN-468-1] Firefox vulnerabilities, Kees Cook, 2007/06/01
Evenzia CMS XSS, glafkos, 2007/06/01
RevokeBB Blind SQL Injection / Hash Extractor, BlackHawk, 2007/06/01
[MajorSecurity Advisory #50]chameleon cms - Session fixation Issue, admin, 2007/06/01
- Re: [MajorSecurity Advisory #50]chameleon cms - Session fixation Issue, admin, 2007/06/07
Outpost Enforcing system reboot with 'outpost_ipc_hdr' mutex Vulnerability, Matousec - Transparent security Research, 2007/06/01
[MajorSecurity Advisory #49]Calimero.CMS - Session fixation Issue, admin, 2007/06/01
bugtraq submission, dr . rezen, 2007/06/01
- RE: bugtraq submission, Warner Moore, 2007/06/04
[Full-disclosure] n.runs-SA-2007.013 - F-Secure Antivirus LZH parsing BufferOverflow Advisory, security, 2007/06/01
Full Path Disclosure in SendCard, xx_hack_xx_2004, 2007/06/01
Prototype of an PHP application ===> RFI, pito pito, 2007/06/01
static XSS / SQL-Injection in Omegasoft Insel, MC Iglo, 2007/06/01
PBSite - PHP Bulletin Site | CMS ====> RFI, pito pito, 2007/06/01
- PBSite - PHP Bulletin Site | CMS ====> RFI, pito pito, 2007/06/02
phpreactor <===1.2.7 remote file include, pito pito, 2007/06/01
[OpenPKG-SA-2007.020] OpenPKG Security Advisory (php), OpenPKG GmbH, 2007/06/01
Z-Blog 1.7 Authentication Bypass Database Download Vulnerability, Raed, 2007/06/01
[Full-disclosure] SEC Consult SA-20070601-0 :: PHP chunk_split() integer overflow, Gerhard Wagner, 2007/06/01