Mail Index

• Thread Index

• Re: 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038)
  • From: Jan Wrobel
• Re: 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038)
  • From: Alexander Sotirov
• RE: [Full-disclosure] 0-day ANI vulnerability in Microsoft Windows(CVE-2007-0038)
  • From: Eric Sites
• CA BrightStor ARCserve Backup Mediasvr.exe vulnerability
  • From: Williams, James K
• On-going Internet Emergency and Domain Names
  • From: Gadi Evron
• Windows .ANI Stack Overflow Exploit
  • From: devcode29
• Re: 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038)
  • From: Alexander Sotirov
• PHP-Fusion 'Calendar_Panel' Module show_event.PHP (m_month) SQL Injection Exploit And PoC
  • From: UniquE
• Remot File Include In SLAED_CMS_2
  • From: RaeD Hasadya
• Remot File Include In Shop-SCRIPT FREE
  • From: RaeD Hasadya
• Remot File Include In Aardvark Topsites PHP 5
  • From: RaeD Hasadya
• Re: Xoops All Version -Articles- Print.PHP (ID) Blind SQL Injection Exploit And PoC
  • From: vaughan . montgomery
• MS announces out-of-band patch for ANI 0day
  • From: Gadi Evron
• 2BGal 3.1.1 <= (admin/index.php) Remote File Include Vulnerability
  • From: BorN To K!LL BorN To K!LL
• [SECURITY] [DSA 1274-1] New file packages fix arbitrary code execution
  • From: Noah Meyerhans
• [ GLSA 200703-27 ] Squid: Denial of Service
  • From: Raphael Marichez
• [security bulletin] HPSBMA02198 SSRT061177 rev.1 - HP OpenView Network Node Manager (OV NNM) Remote Unauthorized Access
  • From: security-alert
• [ GLSA 200703-28 ] CUPS: Denial of Service
  • From: Raphael Marichez
• Re: Drake CMS v0.3.2 < = RFi Vulnerabilities
  • From: legolas558
• DirectAdmin persistant XSS [takeover an Administrator`s account]
  • From: Kanedaaa Bohater
• Norton Multiple insufficient argument validation of hooked SSDT function Vulnerability
  • From: Matousec - Transparent security Research
• Re: Denial of Service Vulnerabilities in TrueCrypt 4.3 Linux (re. bid 23180)
  • From: Pavel Kankovsky
• 0day Oracle 10g exploit - dbms_aq.enqueue - become DBA
  • From: Andrea \"bunker\" Purificato
• Windows XP/Vista (.ANI) Remote Exploit (bypass eeye patch)
  • From: jamikazu
• Maplab <= 2.2.1 (gszAppPath) Remote File Inclusion Vulnerability
  • From: mufti . rizal
• iDefense Security Advisory 03.31.07: Multiple Vendor ImageMagick DCM and XWD Buffer Overflow Vulnerabilities
  • From: iDefense Labs
• More information on ZERT patch for ANI 0day
  • From: Gadi Evron
• WOVB #01: Bypassing Vista Firewall, Flying over obstructive line
  • From: TWOVB Team
• Re: AIX 4.3 lsmcode local root command execution
  • From: Shiva Persaud
• APOP vulnerability
  • From: Gaëtan LEURENT
• iDefense Security Advisory 04.02.07: Hewlett-Packard Mercury Quality Center ActiveX Control ProgColor Buffer Overflow Vulnerability
  • From: iDefense Labs
• Re: Maplab <= 2.2.1 (gszAppPath) Remote File Inclusion Vulnerability
  • From: jasus
• Re: Maplab <= 2.2.1 (gszAppPath) Remote File Inclusion Vulnerability
  • From: str0ke
• [CFP] VNSECON 07 - Call for Papers / HCMC - August 03-04, 2007
  • From: rd
• [ GLSA 200704-01 ] Asterisk: Two SIP Denial of Service vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• iDefense Security Advisory 03.31.07: IBM Tivoli Provisioning Manager for OS Deployment Multiple Vulnerabilities
  • From: iDefense Labs
• [SECURITY] [DSA 1275-1] New zope2.7 packages fix cross-site scripting flaw
  • From: Noah Meyerhans
• TWOVB][ The Week Of Vista Bugs: the truth is out there
  • From: TWOVB Team
• Re: Exploiting Microsoft dynamic Dns updates
  • From: Denis Jedig
• Re: APOP vulnerability
  • From: 3APA3A
• [MajorSecurity Advisory #37]HolaCMS - Cross Site Scripting Issue
  • From: SecurityAudit
• MyBulletinBoard (MyBB) <= 1.2.3 Remote Code Execution Exploit
  • From: gmdarkfig
• Re: [Full-disclosure] [RECTIFY] Oracle 10g exploit - dbms_aq.enqueue - become DBA
  • From: Andrea \"bunker\" Purificato
• Remote File Include In Script stat12
  • From: RaeD
• Re: APOP vulnerability
  • From: Gaëtan LEURENT
• Re[2]: APOP vulnerability
  • From: 3APA3A
• Re: [Full-disclosure] More information on ZERT patch for ANI 0day
  • From: Matthew Murphy
• Re: More information on ZERT patch for ANI 0day
  • From: Stefan Kelm
• MITKRB5-SA-2007-002: KDC, kadmind stack overflow in krb5_klog_syslog [CVE-2007-0957]
  • From: Tom Yu
• MITKRB5-SA-2007-003: double-free vulnerability in kadmind (via GSS-API library) [CVE-2007-1216]
  • From: Tom Yu
• FLEA-2007-0006-2: ImageMagick
  • From: Foresight Linux Essential Announcement Service
• iDefense Security Advisory 04.03.07: Microsoft Windows WMF Triggerable Kernel Design Error DoS Vulnerability
  • From: iDefense Labs
• Re: 0day Oracle 10g exploit - dbms_aq.enqueue - become DBA
  • From: Gadi Evron
• MITKRB5-SA-2007-001: telnetd allows login as arbitrary user [CVE-2007-0956]
  • From: Tom Yu
• Re: 0day Oracle 10g exploit - dbms_aq.enqueue - become DBA
  • From: Andrea Purificato - bunker
• Re: On-going Internet Emergency and Domain Names
  • From: Bob Fiero
• iDefense Security Advisory 04.03.07: Multiple Vendor Kerberos kadmind Buffer Overflow Vulnerability
  • From: iDefense Labs
• FLEA-2007-0007-1: nas
  • From: Foresight Linux Essential Announcement Service
• Re: More information on ZERT patch for ANI 0day
  • From: Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
• ZDI-07-012: Yahoo! Messenger AudioConf ActiveX Control Buffer Overflow
  • From: zdi-disclosures
• FLEA-2007-0006-1: ImageMagick
  • From: Foresight Linux Essential Announcement Service
• [SECURITY] [DSA 1276-1] New krb5 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• [ GLSA 200704-02 ] MIT Kerberos 5: Arbitrary remote code execution
  • From: Sune Kloppenborg Jeppesen
• Nine Vista CVEs, including Microsoft inaccurate Teredo use case documentation
  • From: Jim Hoagland
• [ GLSA 200704-05 ] zziplib: Buffer Overflow
  • From: Raphael Marichez
• [ MDKSA-2007:075 ] - Updated qt4 packages to address utf8 decoder bug
  • From: security
• iDefense Security Advisory 04.03.07: Multiple Vendor X Server fonts.dir File Parsing Integer Overflow Vulnerability
  • From: iDefense Labs
• [ GLSA 200704-03 ] OpenAFS: Privilege escalation
  • From: Raphael Marichez
• Three New Papers on Oracle Forensics
  • From: David Litchfield
• rPSA-2007-0063-1 krb5 krb5-server krb5-services krb5-test krb5-workstation
  • From: rPath Update Announcements
• CYBSEC Pre-Advisory: SAP TRUSTED_SYSTEM_SECURITY RFC Function Information Disclosure
  • From: CYBSEC Advisories
• iDefense Security Advisory 04.03.07: Multiple Vendor X Server XC-MISC Extension Memory Corruption Vulnerability
  • From: iDefense Labs
• CYBSEC Security Pre-Advisory: SAP RFC_START_PROGRAM RFC Function Multiple Vulnerabilities
  • From: CYBSEC Advisories
• lite-cms-0.2.1 Remote File Include Vulnerabilities
  • From: the_3dit0r
• CYBSEC Security Pre-Advisory: SAP RFC_START_GUI RFC Function Buffer Overflow
  • From: CYBSEC Advisories
• CYBSEC Security Pre-Advisory: SAP SYSTEM_CREATE_INSTANCE RFC Function Buffer Overflow
  • From: CYBSEC Advisories
• CYBSEC Security Pre-Advisory: SAP RFC_SET_REG_SERVER_PROPERTY RFC Function Denial Of Service
  • From: CYBSEC Advisories
• [USN-449-1] krb5 vulnerabilities
  • From: Kees Cook
• CYBSEC Release: SAP Security - Paper & Tool release
  • From: Mariano Nuñez Di Croce
• rPSA-2007-0064-1 ImageMagick
  • From: rPath Update Announcements
• [MajorSecurity Advisory #38]eXV2 CMS - Session fixation and Cross-Site-Scripting Issues
  • From: Securityaudit
• [ MDKSA-2007:074 ] - Updated qt3 packages to address utf8 decoder bug
  • From: security
• Remot File Include In phpexplorator_2_0
  • From: RaeD
• [USN-448-1] X.org vulnerabilities
  • From: Kees Cook
• iXon_CMS 0.30 Remote File Include Vulnerabilities
  • From: the_3dit0r
• rPSA-2007-0067-1 nas
  • From: rPath Update Announcements
• K-CMS v1.0 Remote File Include Vulnerabilities
  • From: the_3dit0r
• rPSA-2007-0066-1 kdelibs qt-x11-free
  • From: rPath Update Announcements
• Monkey CMS v0.0.3 Remote File Include Vulnerabilitiy
  • From: the_3dit0r
• phpechocms v.2 Cross-Site Scripting Vulnerabilitiy
  • From: the_3dit0r
• iDefense Security Advisory 04.03.07: Multiple Vendor X Server BDF Font Parsing Integer Overflow Vulnerability
  • From: iDefense Labs
• phpechocms2 Remote File Include Vulnerabilities
  • From: the_3dit0r
• rPSA-2007-0065-1 freetype xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs
  • From: rPath Update Announcements
• MyBlog: PHP and MySQL Blog/CMS software Cross-Site Scripting Vulnerabilitiy
  • From: the_3dit0r
• MyBlog: PHP and MySQL Blog/CMS software Remote File Include Vulnerabilitiy
  • From: the_3dit0r
• [ MDKSA-2007:076 ] - Updated kdelibs packages to address UTF8 issue in KJS
  • From: security
• Mozilla Firefox Insecure Element Stealth Injection Vulnerability
  • From: Michal Majchrowicz
• Re: Denial of Service Vulnerabilities in TrueCrypt 4.3 Linux (re. bid 23180)
  • From: Marco Ivaldi
• rPSA-2007-0062-1 firefox
  • From: rPath Update Announcements
• High Risk Vulnerability in OpenOffice
  • From: NGSSoftware Insight Security Research
• Several Windows image viewers vulnerabilities
  • From: Ivan Fratric
• Re: More information on ZERT patch for ANI 0day
  • From: Jason Frisvold
• Re: More information on ZERT patch for ANI 0day
  • From: Jason Frisvold
• Re: More information on ZERT patch for ANI 0day
  • From: Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]
• [SECURITY] [DSA 1277-1] New XMMS packages fix arbitrary code execution
  • From: Noah Meyerhans
• Gazi Okul Sitesi 2007(tr)(fotokategori.asp) Remote SQL Injection
  • From: r00t-balance
• [ MDKSA-2007:077 ] - Updated krb5 packages fix vulnerabilities
  • From: security
• Firefox extensions go Evil - Critical Vulnerabilities in Firefox/Firebug
  • From: pdp (architect)
• VMSA-2007-0003 VMware ESX 3.0.1 and 3.0.0 server security updates
  • From: VMware Security team
• [ MDKSA-2007:078 ] - Updated kernel packages fix multiple vulnerabilities and bugs
  • From: security
• [ MDKSA-2007:079 ] - Updated xorg-x11/XFree86 packages fix integer overflow vulnerabilities
  • From: security
• Re: [WEB SECURITY] Firefox extensions go Evil - Critical Vulnerabilities in Firefox/Firebug
  • From: Daniel Veditz
• LedgerSMB 1.2.0 finally released, fixes CVE-2006-5589
  • From: Chris Travers
• [ MDKSA-2007:080 ] - Updated tightvnc packages fix integer overflow vulnerabilities
  • From: security
• [ MDKSA-2007:081 ] - Updated freetype2 packages fix vulnerability
  • From: security
• iDefense Security Advisory 04.04.07: Kaspersky AntiVirus SysInfo ActiveX Control Information Disclosure Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 04.04.07: Kaspersky Internet Security Suite klif.sys Heap Overflow Vulnerability
  • From: iDefense Labs
• Microsoft .NET request filtering bypass vulnerability (BID 20753)
  • From: research
• iDefense Security Advisory 04.04.07: ESRI ArcSDE Buffer Overflow Vulnerability
  • From: iDefense Labs
• FLEA-2007-0008-1: krb5
  • From: Foresight Linux Essential Announcement Service
• FLEA-2007-0009-1: xorg-x11 freetype
  • From: Foresight Linux Essential Announcement Service
• Wserve HTTP Server 4.6 Version (Long Directory Name) Buffer Overflow - Denial Of Service
  • From: UniquE
• FLEA-2007-0010-1: evolution
  • From: Foresight Linux Essential Announcement Service
• [security bulletin] HPSBUX02204 SSRT071341 rev.1 - HP-UX Running CIFS Server (Samba), Remote Denial of Service (DoS)
  • From: security-alert
• Re: Firefox extensions go Evil - Critical Vulnerabilities in Firefox/Firebug
  • From: Thor Larholm
• Re: Nine Vista CVEs, including Microsoft inaccurate Teredo use case documentation
  • From: Jim Hoagland
• ACLS ineffective in SQL-Ledger and LedgerSMB
  • From: Chris Travers
• ZDI-07-014: Kaspersky Anti-Virus ActiveX Control Unsafe Method Exposure Vulnerablity
  • From: zdi-disclosures
• phpContact Multiple Remote File Inclusion Vulnerabilities
  • From: rko . thelegendkiller
• [MajorSecurity Advisory #39]onelook onebyone CMS - Session fixation Issue
  • From: Securityaudit
• ZDI-07-013: Kaspersky AntiVirus Engine ARJ Archive Parsing Heap Overflow Vulnerability
  • From: zdi-disclosures
• [MajorSecurity Advisory #40]onelook oboShop - Session fixation Issue
  • From: Securityaudit
• [MajorSecurity Advisory #41]onelook courts online - Session fixation Issue
  • From: Securityaudit
• livor 2.5 Cross-Site Scripting Vulnerability
  • From: rko . thelegendkiller
• AOL Nullsoft Winamp LIBSNDFILE.DLL Remote Memory Corruption (Off By Zero)
  • From: Piotr Bania
• AOL Nullsoft Winamp S3M Module "IN_MOD.DLL" Remote Heap Memory Corruption
  • From: Piotr Bania
• AOL Nullsoft Winamp IT Module "IN_MOD.DLL" Remote Heap Memory Corruption
  • From: Piotr Bania
• [SECURITY] [DSA 1278-1] New man-db packages fix arbitrary code execution
  • From: Noah Meyerhans
• LayerOne 2007 - Speaker Line up Announced
  • From: Layer One
• [ GLSA 200704-06 ] Evince: Stack overflow in included gv code
  • From: Raphael Marichez
• [ GLSA 200704-07 ] libwpd: Multiple vulnerabilities
  • From: Raphael Marichez
• PHP <= 5.2.1 wbmp file handling integer overflow
  • From: Ivan Fratric
• [MajorSecurity Advisory #42]webblizzard CMS - Cross Site Scripting and Session fixation Issues
  • From: Securityaudit
• Re: Nine Vista CVEs, including Microsoft inaccurate Teredo use case documentation
  • From: GomoR
• CmailServer WebMail <= V.5.3.4 (signup) Remote XSS Exploit
  • From: ajannhwt
• witshare 0.9 Remote File Include Vulnerabilitiy
  • From: the_3dit0r
• UBB.threads (<= 6.1.1) SQL Injection Vulnerability
  • From: john
• Scorp Book <== v1.0 (smilies.php) Remote File Include Exploit
  • From: k4rtal
• Gsylvain35 Portail Web Remote File Include Vulnerabilities
  • From: the_3dit0r
• Take Control In Script Jeebles Directory
  • From: RaeD
• phpMyAdmin 2.6.1 Local Cross Site Scripting
  • From: the_3dit0r
• Remot File Include In Script Lore v1
  • From: RaeD
• DeskPRO v2.0.1 - Cross-Site Scripting Vulnerability
  • From: john
• Request It : Song Request System 1.0b - remote file inclusion
  • From: mail
• QuizShock 1.6.1 - Cross-Site Scripting Vulnerability
  • From: john
• Mybb Hot Editor Plugin Local File Inclusion
  • From: liz0
• Hot Editor v4.0 Local File Inclusion
  • From: liz0
• Re: Mybb Hot Editor Plugin Local File Inclusion
  • From: Kevin Finisterre (lists)
• xodagallery Remote Code Execution Vulnerability
  • From: the_3dit0r
• rPSA-2007-0070-1 openoffice.org
  • From: rPath Update Announcements
• iDefense Security Advisory 04.09.07: AOL AIM and ICQ File Transfer Path-Traversal Vulnerability
  • From: iDefense Labs
• Re: Re: Mybb Hot Editor Plugin Local File Inclusion
  • From: liz0
• [USN-450-1] ipsec-tools vulnerability
  • From: Kees Cook
• phpGalleryScript 1.0 - File Inclusion Vulnerabilities
  • From: z12xxa
• DEF CON One Five CfP in effect!
  • From: The Dark Tangent
• EEYE: Windows VDM Zero Page Race Condition Privilege Escalation
  • From: eEye Advisories
• EEYE: Windows Vista CSRSS Dangling Process Pointer Privilege Escalation
  • From: eEye Advisories
• Secunia Research: Microsoft Agent URL Parsing Memory Corruption Vulnerability
  • From: Secunia Research
• PhpOpenChat <= 3.0.1 (poc.php) Multiple Remote File Include Vulnerabilities
  • From: seko
• iDefense Security Advisory 04.10.07: Microsoft Windows Universal Plug and Play Memory Corruption Vulnerability
  • From: iDefense Labs
• [ MDKSA-2007:077-1 ] - Updated krb5 packages fix vulnerabilities
  • From: security
• Re: vbulletin admincp sql injection
  • From: rjmjr69
• [ MDKSA-2007:081-1 ] - Updated freetype2 packages fix vulnerability
  • From: security
• [USN-451-1] Linux kernel vulnerabilities
  • From: Kees Cook
• webMethods Glue Management Console Directory Traversal
  • From: Patrick Webster
• [ MDKSA-2007:080-1 ] - Updated tightvnc packages fix integer overflow vulnerabilities
  • From: security
• nEw Bug :D
  • From: asdasd asdsadas
• pL-PHP beta 0.9 - Multiple Vulnerabilities
  • From: omnipresent
• New bug :)
  • From: asdasd asdsadas
• [MajorSecurity Advisory #43]Calacode ATMail 5.0 - Cross Site Scripting and Cookie Manipulation Issue
  • From: admin
• CodeBreak (codebreak.php process_method) - Remote File Inclusion Vulnerability
  • From: john
• Cosign SSO Authentication Bypass
  • From: Jon Oberheide
• Re: On-going Internet Emergency and Domain Names
  • From: Alexander Klimov
• Re: Latinchat Denial Of Service
  • From: d4rksoft
• PunBB <= 1.2.14 Remote Code Execution (Exploit)
  • From: gmdarkfig
• PunBB <= 1.2.14 Multiple Vulnerabilities (Advisory)
  • From: gmdarkfig
• Steganos Encrypted Safe NOT so safe
  • From: frankrizzo604
• [ MDKSA-2007:079-1 ] - Updated xorg-x11/XFree86 packages fix integer overflow vulnerabilities
  • From: security
• [ MDKSA-2007:083 ] - Updated apache-mod_perl packages fix DoS vulnerability
  • From: security
• [ MDKSA-2007:075-1 ] - Updated qt4 packages to address utf8 decoder bug
  • From: security
• iDefense Security Advisory 04.11.07: Apache HTTPD suEXEC Multiple Vulnerabilities
  • From: iDefense Labs
• [ MDKSA-2007:082 ] - Updated madwifi-source, wpa_supplicant packages fix vulnerabilities
  • From: security
• E107 - (v0.7.8) Access Escalation Vulnerbility - PoC
  • From: jd2k2000
• HPSBUX02205 SSRT061120 rev.1 - HP-UX Running ARPA Transport, Local Denial of Service (DoS)
  • From: security-alert
• CVE-2007-1871: Cross site scripting in chcounter 3.1.3
  • From: Hanno Böck
• INFIGO-2007-04-05: Enterprise Security Analyzer server remote buffer overflows
  • From: infocus
• CVE-2007-1872: Cross site scripting in toendaCMS 1.5.3
  • From: Hanno Böck
• Critical phpwiki c99shell exploit
  • From: rurban
• [security bulletin] HPSBST02206 SSRT071354 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS07-014
  • From: security-alert
• [security bulletin] HPSBUX01137 SSRT5954 rev.9 - HP-UX Running TCP/IP (IPv4), Remote Denial of Service (DoS)
  • From: security-alert
• [ GLSA 200704-08 ] DokuWiki: Cross-site scripting vulnerability
  • From: Matthias Geerdsen
• [security bulletin] HPSBGN02199 SSRT071312 rev.1 - Mercury Quality Center ActiveX, Remote Unauthorized Arbitrary Code Execution
  • From: security-alert
• Cisco Security Advisory: Multiple Vulnerabilities in the Cisco Wireless LAN Controller and Cisco Lightweight Access Points
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Multiple Vulnerabilities in the Cisco Wireless Control System
  • From: Cisco Systems Product Security Incident Response Team
• Re: Critical phpwiki c99shell exploit
  • From: Gadi Evron
• Re: Critical phpwiki c99shell exploit
  • From: Jamie Riden
• Cross site scripting in mephisto 0.7.3
  • From: Hanno Böck
• [security bulletin] HPSBUX02203 SSRT071339 rev.1 - HP-UX Running Portable File System (PFS), Remote Increase in Privilege
  • From: security-alert
• TuMusika Evolution 1.6 Cross Site Scripting Vulnerabilitiy
  • From: the_3dit0r
• phpwebnews v.1 Multiple Cross Site Scripting Vulnerabilites
  • From: the_3dit0r
• Chatness <= 2.5.3 - Arbitrary Code Execution
  • From: jd2k2000
• Re: Cross site scripting in mephisto 0.7.3
  • From: encytemedia
• RE: Critical phpwiki c99shell exploit
  • From: Ryan Neufeld
• FAC GuestBook v2.0 remote database disclosure vulnerability
  • From: the_3dit0r
• Aircrack-ng (airodump-ng) remote buffer overflow vulnerability
  • From: jonny
• iDefense Security Advisory 04.12.07: Hewlett Packard HP-UX Remote pfs_mountd.rpc Buffer Overflow Vulnerability
  • From: iDefense Labs
• [USN-452-1] KDE library vulnerability
  • From: Kees Cook
• [Argeniss] Hacking Databases for owning your data (paper)
  • From: Cesar
• [OPENADS-SA-2007-003] Openads 2.0.11 vulnerability fixed
  • From: Matteo Beccati
• [OPENADS-SA-2007-004] Max Media Manager v0.1.29-rc and v0.3.31-alpha-pr2 vulnerability fixed
  • From: Matteo Beccati
• [MajorSecurity Advisory #44]MailBee WebMail Pro - Cross Site Scripting Issue
  • From: admin
• [waraxe-2007-SA#048] - Multiple vulnerabilities in Virtual War 1.5 module for PhpNuke
  • From: come2waraxe
• TSRT-07-04: LANDesk Management Suite Alert Service Stack Overflow Vulnerability
  • From: TSRT
• Vbulletin 3.6.5 Sql Injection ! [misc.php]
  • From: seko
• bloofoxCMS 0.2.2 Cross Site Scripting
  • From: the_3dit0r
• Re: Vbulletin 3.6.5 Sql Injection ! [misc.php]
  • From: scott-REMOVE
• VCDGear <= 3.56 Build 050213 (FILE) Local Code Execution Exploit
  • From: meftun
• Re: Steganos Encrypted Safe NOT so safe
  • From: Andreas Beck
• Back-End CMS Database Tables v0.4.7 Cross Site Scripting
  • From: the_3dit0r
• MobilePublisherphp v1.1.2 Remote File Include Vulnerabilities
  • From: the_3dit0r
• FloweRS v2.0 Cross Site Scripting
  • From: the_3dit0r
• Maian Search v1.1
  • From: k4rtal
• Maian Gallery v1.0
  • From: k4rtal
• B2evolution 1.6 RFi
  • From: k4rtal
• MySpeach v1.9
  • From: k4rtal
• Back-End CMS Database Tables v0.4.7 Remote File Include Vulnerabilities
  • From: the_3dit0r
• Flip-search-add-on 2.0
  • From: k4rtal
• Maian Weblog v3.1
  • From: k4rtal
• bloofoxCMS 0.2.2 Remote File Include Vulnerabilitiy
  • From: the_3dit0r
• phpMyChat-0.14.5
  • From: k4rtal
• Re: VCDGear <= 3.56 Build 050213 (FILE) Local Code Execution Exploit
  • From: str0ke
• Pixaria Gallery 1.0 (class.Smarty.php) Remote File Include Vulnerability
  • From: irvian_yoe
• Re: sitex multiple vulnerabilities
  • From: Lostmon
• Re: Maian Gallery v1.0
  • From: support
• Re: Maian Search v1.1
  • From: support
• Sitebar 3.3.5 (index.php writerFile)Remote File Include Vulnerabilities
  • From: ?? ???? ??????
• [ GLSA 200704-09 ] xine-lib: Heap-based buffer overflow
  • From: Raphael Marichez
• Re: [exploits] RPC vuln in DNS Server (fwd)
  • From: Gadi Evron
• LS simple guestbook - arbitrary code execution
  • From: jd2k2000
• Joomla/Mambo Jambook v1.0 beta7 Rfi Vuln.
  • From: crazy_king
• [MajorSecurity Advisory #45]oe2edit CMS - Cross Site Scripting and Cookie Manipulation Issue
  • From: admin
• ZoneAlarm Multiple insufficient argument validation of hooked SSDT function Vulnerability
  • From: Matousec - Transparent security Research
• ActionPoll Script (actionpoll.php) Remote File Include // starhack.org
  • From: seko
• MyBlog <= 0.9.8 Remote Command Execution Exploit
  • From: BlackHawk
• Re: phpMyChat-0.14.5
  • From: stuart_smith
• Microsoft DNS Server Remote Code execution: Analysis and exploit
  • From: mballano
• Windows DNS Cache Poisoning by Forwarder DNS Spoofing
  • From: Makoto Shiotsuki
• Re: Critical phpwiki c99shell exploit
  • From: Taneli Leppä
• [ GLSA 200704-10 ] Inkscape: Two format string vulnerabilities
  • From: Matthias Geerdsen
• Persistent CSRF and The Hotlink Hell
  • From: pdp (architect)
• iDefense Security Advisory 04.16.07: ClamAV CAB File Unstore Buffer Overflow Vulnerability
  • From: iDefense Labs
• Ivan Gallery Script V.0.1 (index.php) Remote File Include Exploit
  • From: seko
• [ GLSA 200704-11 ] Vixie Cron: Denial of Service
  • From: Matthias Geerdsen
• rPSA-2007-0071-1 kernel
  • From: rPath Update Announcements
• Akamai Technologies Security Advisory 2007-0001
  • From: Akamai Security Team
• [ MDKSA-2007:086 ] - Updated cups packages fix DoS vulnerability
  • From: security
• [ MDKSA-2007:084 ] - Updated ipsec-tools packages fix DoS vulnerability
  • From: security
• [ MDKSA-2007:085 ] - Updated freeradius packages fix DoS vulnerability
  • From: security
• [ GLSA 200704-12 ] OpenOffice.org: Multiple vulnerabilities
  • From: Raphael Marichez
• iDefense Security Advisory 04.16.07: Akamai Download Manager ActiveX Stack Buffer Overflow Vulnerability
  • From: iDefense Labs
• Netsprint Toolbar 1.1 arbitrary remote code vulnerability
  • From: Michal Bucko
• PHP Nuke <= 8.0.0.3.3b SQL Injections and Bypass SQL Injection Protection vulnerabilities
  • From: programmer
• Remot File Include In Script phphd_downloads
  • From: RaeD
• Remot File Include download_engine_V1.4.3
  • From: RaeD
• Wabbit PHP Gallery v0.9 Cross Site Scripting
  • From: the_3dit0r
• my little weblog Cross Site Scripting
  • From: the_3dit0r
• my little forum 1.7 Remote File Include Vulnerabilitiy
  • From: the_3dit0r
• Re: [Full-disclosure] [WEB SECURITY] Persistent CSRF and The Hotlink Hell
  • From: Blue Boar
• RE: Windows DNS Cache Poisoning by Forwarder DNS Spoofing
  • From: Roger A. Grimes
• Re: [WEB SECURITY] Persistent CSRF and The Hotlink Hell
  • From: Ryan Barnett
• Re: Netsprint Toolbar 1.1 arbitrary remote code vulnerability
  • From: Michal Zalewski
• webMethods Security Advisory: Glue console directory traversal vu lnerability
  • From: Jeremy Epstein
• RE: Windows DNS Cache Poisoning by Forwarder DNS Spoofing
  • From: Roger A. Grimes
• Re: bloofoxCMS 0.2.2 Remote File Include Vulnerabilitiy
  • From: info
• Internet Explorer Crash
  • From: J. Oquendo
• [security bulletin] HPSBTU02207 SSRT061213, SSRT061239, SSRT071304 rev.1 - HP Tru64 UNIX SSL and BIND Remote Arbitrary Code Execution or Denial of Service (DoS)
  • From: security-alert
• Multiple Ask IE Toolbar denial of service vulnerabilities
  • From: Michal Bucko
• Re[2]: Windows DNS Cache Poisoning by Forwarder DNS Spoofing
  • From: 3APA3A
• Gizzar <= (basePath) Remote File Include Vulnerability
  • From: BorN To K!LL BorN To K!LL
• BlueArc Firmware 4.2.944b FTP bounce
  • From: Tim Rupp
• SYMSA-2007-003 Macrovision InstallAnywhere Password and Serial Number Bypass
  • From: research
• Re: Internet Explorer Crash
  • From: The Anarcat
• Re: [Full-disclosure] Cross Domain XMLHttpRequest
  • From: ascii
• ShoutPro 1.5.2 - arbitrary code execution
  • From: jd2k2000
• Re: Internet Explorer Crash
  • From: Thor (Hammer of God)
• WASC-Articles: 'The Importance of Application Classification in Secure Application Development'
  • From: contact
• Re: [Full-disclosure] A Botted Fortune 500 a Day
  • From: Steven Adair
• n.runs-SA-2007.007 - Sun Solaris 10 - Format string vulnerability
  • From: security
• Re: [Full-disclosure] A Botted Fortune 500 a Day
  • From: Jamie Riden
• Re: [Full-disclosure] A Botted Fortune 500 a Day
  • From: Steven Adair
• Re: [Full-disclosure] A Botted Fortune 500 a Day
  • From: Jamie Riden
• Re: Windows DNS Cache Poisoning by Forwarder DNS Spoofing
  • From: Tim
• Re: [Full-disclosure] A Botted Fortune 500 a Day
  • From: Simon Smith
• Mambo/Joomla Component New Article Component RFI
  • From: meftun
• Cross Domain XMLHttpRequest
  • From: Michal Majchrowicz
• Re: Windows DNS Cache Poisoning by Forwarder DNS Spoofing
  • From: Makoto Shiotsuki
• [ GLSA 200704-14 ] FreeRADIUS: Denial of Service
  • From: Raphael Marichez
• Re: Internet Explorer Crash
  • From: Mike Ely
• NukeSentinel Bypass SQL Injection & Nuke Evolution <= 2.0.3 SQL Injections
  • From: programmer
• Advisory: Bypass Oracle Logon Trigger
  • From: ak
• Advisory: SQL Injection in package SYS.DBMS_AQADM_SYS
  • From: ak
• iDefense Security Advisory 04.17.07: McAfee VirusScan On-Access Scanner Long Unicode File Name Buffer Overflow
  • From: iDefense Labs
• Advisory: SQL Injection in package SYS.DBMS_UPGRADE_INTERNAL
  • From: ak
• Advisory: XSS Vulnerability in Oracle Secure Enterprise Search [SES01]
  • From: ak
• Reminder: HITBSecConf2007 - Malaysia: Call for Papers closing in 2 weeks
  • From: Praburaajan
• Advisory: Shutdown unprotected Oracle TNS Listener via Oracle Discoverer Servlet [AS01]
  • From: ak
• [ GLSA 200704-13 ] File: Denial of Service
  • From: Raphael Marichez
• Analysis of the Oracle April 2007 Critical Patch Update
  • From: David Litchfield
• iDefense Security Advisory 04.17.07: McAfee E-Business Admin Server Invalid Data Length DoS Vulnerability
  • From: iDefense Labs
• rPSA-2007-0072-1 lighttpd
  • From: rPath Update Announcements
• rPSA-2007-0073-1 php php-mysql php-pgsql
  • From: rPath Update Announcements
• [ GLSA 200704-15 ] MadWifi: Multiple vulnerabilities
  • From: Raphael Marichez
• rPSA-2007-0074-1 dovecot
  • From: rPath Update Announcements
• MediaBeez Sql query Execution .. Wear isn't ?? :)
  • From: security
• Oracle Database Buffer overflow vulnerabilities in package DBMS_SNAP_INTERNAL
  • From: Team SHATTER
• FullyModdedphpBB2 Remote File Inclusion
  • From: security
• Re: Internet Explorer Crash
  • From: Tom Gregory
• Re: [Full-disclosure] A Botted Fortune 500 a Day
  • From: Nick FitzGerald
• Extreme PHPBB2 Remote File Inclusion
  • From: security
• RE: Windows DNS Cache Poisoning by Forwarder DNS Spoofing
  • From: Roger A. Grimes
• Re: Windows DNS Cache Poisoning by Forwarder DNS Spoofing
  • From: Makoto Shiotsuki
• EclipseBB Remote File Inclusion
  • From: security
• Re: Windows DNS Cache Poisoning by Forwarder DNS Spoofing
  • From: Tim
• Re: Windows DNS Cache Poisoning by Forwarder DNS Spoofing
  • From: Bojan Zdrnja
• Re: Linksys WAG200G - Information disclosure
  • From: no-mail
• Re: Windows DNS Cache Poisoning by Forwarder DNS Spoofing
  • From: Tim
• Re: Internet Explorer Crash
  • From: elflord91
• [security bulletin] HPSBST02206 SSRT071354 rev.2 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS07-017
  • From: security-alert
• Re: Internet Explorer Crash
  • From: Thor (Hammer of God)
• RE: Re[2]: Windows DNS Cache Poisoning by Forwarder DNS Spoofing
  • From: Roger A. Grimes
• Re: [funsec] Re: [Full-disclosure] A Botted Fortune 500 a Day
  • From: Fergie
• Re: Windows DNS Cache Poisoning by Forwarder DNS Spoofing
  • From: Matthew Dixon Cowles
• NuclearBB Alpha 1 - Multiple Blind SQL/XPath Injection Vulnerabilities
  • From: john
• ZDI-07-015: Novell Groupwise WebAccess Base64 Decoding Stack Overflow Vulnerability
  • From: zdi-disclosures
• ZDI-07-016: Oracle E-Business Suite Arbitrary Node Deletion Vulnerability
  • From: zdi-disclosures
• ZDI-07-017: Oracle E-Business Suite Arbitrary Document Download Vulnerability
  • From: zdi-disclosures
• ZDI-07-018: IBM Tivoli Monitoring Express Universal Agent Heap Overflow Vunlerability
  • From: zdi-disclosures
• Re: PHP Nuke <= 8.0.0.3.3b SQL Injections and Bypass SQL Injection Protection vulnerabilities
  • From: Paul Laudanski
• Re: Internet Explorer Crash
  • From: Rob Bartlett
• ZDI-07-019: BMC Patrol PerformAgent bgs_sdservice Memory Corruption Vulnerability
  • From: zdi-disclosures
• ZDI-07-020: BMC Performance Manager SNMP Command Execution Vulnerability
  • From: zdi-disclosures
• RE: Re[2]: Windows DNS Cache Poisoning by Forwarder DNS Spoofing
  • From: Oliver Friedrichs
• [USN-453-1] X.org vulnerability
  • From: Kees Cook
• Re: Internet Explorer Crash
  • From: Kevin Finisterre (lists)
• [ MDKSA-2007:087 ] - Updated php packages fix multiple vulnerabilities
  • From: security
• [ MDKSA-2007:088 ] - Updated php packages fix multiple vulnerabilities
  • From: security
• [ MDKSA-2007:089 ] - Updated php packages fix multiple vulnerabilities
  • From: security
• CfP Hack.lu 2007
  • From: info
• Re: ZDI-07-020: BMC Performance Manager SNMP Command Execution Vulnerability
  • From: rashbi
• IPB (Invision Power Board) Full Path Disclusure
  • From: security
• [waraxe-2007-SA#049] - Multiple vulnerabilities in Phorum 5.1.20
  • From: come2waraxe
• Winamp <= (WMV) 5.3 Buffer Overflow DOS Exploit (0-DAY)
  • From: UniquE
• RaidenFTPd IXceedCompression multiple denial of service vulnerabilities
  • From: Michal Bucko
• Re: Internet Explorer Crash
  • From: simone colombo
• Re: Internet Explorer Crash
  • From: Dave Walker
• Yet another SQL injection framework
  • From: Guillermo Marro
• [security bulletin] HPSBMA02133 SSRT061201 rev.4 - HP Oracle for OpenView (OfO) Critical Patch Update
  • From: security-alert
• [ MDKSA-2007:090 ] - Updated php packages fix multiple vulnerabilities
  • From: security
• [ MDKSA-2007:091 ] - Updated sqlite packages fix vulnerability
  • From: security
• [security bulletin] HPSBST02208 SSRT071365 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS07-018 to MS07-022
  • From: security-alert
• Re: Internet Explorer Crash
  • From: "C. Bergström"
• NeatUpload vulnerability and fix
  • From: dean
• ZDI-07-021: GraceNote CDDBControl ActiveX Buffer Overflow Vulnerability
  • From: zdi-disclosures
• Re: Yet another SQL injection framework (file corruption)
  • From: Guillermo Marro
• Eba News Version : v1.1 <= (webpages.php) Remote File Include // starhack.org
  • From: seko
• Re: Yet another SQL injection framework
  • From: Nick Boyce
• TSLSA-2007-0013 - multi
  • From: Trustix Security Advisor
• iDefense Security Advisory 04.20.07: Check Point Zone Labs SRESCAN IOCTL Local Privilege Escalation Vulnerability
  • From: iDefense Labs
• FLEA-2007-0011-1: lighttpd
  • From: Foresight Linux Essential Announcement Service
• UseBB Version 1.0.4 Path Disclosure Vulnerability
  • From: securityresearch
• Top Auction 1.0 (viewcat.php) Remote Blind SQL Injection // starhack.org
  • From: seko
• turbolence core 0.0.1 alpha Remote File Inclusion
  • From: omnipresent
• Re: Top Auction 1.0 (viewcat.php) Remote Blind SQL Injection // starhack.org
  • From: str0ke
• WS_FTP Home 2007 NetscapeFTPHandler denial of service
  • From: Michal Bucko
• Allfaclassfieds (level2.php dir) remote file inclusion
  • From: asdasd asdsadas
• Re: WS_FTP Home 2007 NetscapeFTPHandler denial of service
  • From: sapheal
• [ GLSA 200704-17 ] 3proxy: Buffer overflow
  • From: Raphael Marichez
• [Reversemode advisory] CheckPoint Zonelabs - ZoneAlarm SRESCAN driver local privilege escalation
  • From: Reversemode
• claroline <= Multiple Remote File Include Vulnerablitiy
  • From: Mohandko
• lms 1.5.3 Remote File Inclusion
  • From: InyeXion
• EsForum <= 3.0 SQL Injection Vulnerability
  • From: ilkerkandemir
• PHPMyBibli <= Multiple Remote File Include
  • From: Mohandko
• [ GLSA 200704-16 ] Aircrack-ng: Remote execution of arbitrary code
  • From: Raphael Marichez
• File117 Remote File Inclusion
  • From: InyeXion
• Ripe Website Manager (<= 0.8.4) - SQL Injection Vulnerability and Cross-Site Scripting Exploit
  • From: john
• [SECURITY] [DSA 1279-1] New webcalendar packages fix cross-site scripting
  • From: Moritz Muehlenhoff
• [ GLSA 200704-18 ] Courier-IMAP: Remote execution of arbitrary code
  • From: Raphael Marichez
• Remote file inclusion in Joomla 1.5.0 Beta
  • From: Omid
• c-arbre <= Multiple Remote File Include Vulnerablitiy
  • From: Mohandko
• FLEA-2007-0013-1: xine-lib
  • From: Foresight Linux Essential Announcement Service
• bibtex mase Remote File Inclusion
  • From: InyeXion
• FLEA-2007-0012-1: madwifi
  • From: Foresight Linux Essential Announcement Service
• WASC-Articles: 'The business case for security frameworks'
  • From: announcements
• Big Blue Guestbook HTML Injection Vulnerabilities
  • From: seko
• 3proxy 0.5.3i bugfix release
  • From: Vladimir Dubrovin
• TJSChat Version 0.95 Cross Site Scripting
  • From: the_3dit0r
• [ MDKSA-2007:092 ] - Updated freeradius packages fix vulnerability
  • From: security
• [ GLSA 200704-19 ] Blender: User-assisted remote execution of arbitrary code
  • From: Raphael Marichez
• [security bulletin] HPSBUX02183 SSRT061243 rev.1 - HP-UX sendmail, Remote Denial of Service (DoS)
  • From: security-alert
• [ MDKSA-2007:093 ] - Updated zziplib packages fix vulnerability
  • From: security
• RE: Yet another SQL injection framework
  • From: Greg Merideth
• [ GLSA 200704-20 ] NAS: Multiple vulnerabilities
  • From: Raphael Marichez
• acvsws_php5_v1.0 <= Multiple Remote File Include Vulnerablitiy
  • From: Mohandko
• DmCMS Shell Uploading
  • From: security
• phpMySpace Gold (v8.10) - Blind SQL/XPath Injection Exploit
  • From: john
• Post Revolution Remote File Inclusion
  • From: InyeXion
• rPSA-2007-0081-1 postgresql postgresql-server
  • From: rPath Update Announcements
• [ GLSA 200704-21 ] ClamAV: Multiple vulnerabilities
  • From: Matthias Geerdsen
• YA Book 0.98 Persistent XSS
  • From: omnipresent
• gallery >> 1.5.6 Remote File Inclusion
  • From: s433d_only_linux
• Re: claroline <= Multiple Remote File Include Vulnerablitiy
  • From: BlackHawk
• ImageProcessing ... Local (Denial of Service Exploit)
  • From: Dr . Ninux
• Re: gallery >> 1.5.6 Remote File Inclusion
  • From: the . tiger100
• Security Advisory: CA CleverPath SQL Injection
  • From: Irene Abezgauz
• Re: gallery >> 1.5.6 Remote File Inclusion
  • From: Chris Kelly
• [security bulletin] HPSBST02200 SSRT071330 rev.1 - HP StorageWorks Command View Advanced Edition for XP, Local Unauthorized Access
  • From: security-alert
• Progress Webspeed exploit for all releases
  • From: suresync
• [MajorSecurity Advisory #46]Plogger - Session fixation Issue
  • From: admin
• [SECURITY] [DSA 1280-1] New aircrack-ng packages fix arbitrary code execution
  • From: Moritz Muehlenhoff
• 3Com's TippingPoint Denial of Service
  • From: mike20061005
• Re: ImageProcessing ... Local (Denial of Service Exploit)
  • From: Tim Newsham
• dcp-portal v611 >> RFi
  • From: s433d_only_linux
• ZDI-07-022: CA BrightStor ArcServe Media Server Multiple Buffer Overflow Vulnerabilities
  • From: zdi-disclosures
• Re: 3Com's TippingPoint Denial of Service
  • From: Simple Nomad
• Cisco Security Advisory: Default Passwords in NetFlow Collection Engine
  • From: Cisco Systems Product Security Incident Response Team
• MyNewsGroups >> RFI in include.php
  • From: alijsb
• HYIP Manager Pro Script >> Remote file Include
  • From: alijsb
• WordPress v2.1.3 >> remote file include~
  • From: s433d_only_linux
• HTMLeditbox & 2.2 >> RFI
  • From: alijsb
• DynaTracker &v151>> RFI
  • From: alijsb
• netbingo v 2000 >> RFI
  • From: alijsb
• phpMYTGP v v1.4b >> RFI
  • From: alijsb
• [SECURITY] [DSA 1281-1] New clamav packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• sunshop v4 >> RFI
  • From: info
• Shop-Script v 2.0 >> RFI
  • From: alijsb
• adrevenue script (CyKuH.com)>> RFI
  • From: alijsb
• B2 Weblog and News Publishing Tool v0.6.1 >> RFI
  • From: alijsb
• Searchactivity >> RFI
  • From: alijsb
• Built2Go_PHP_Link_Portal_v1.79 >> RFI
  • From: alijsb
• Re: 3Com's TippingPoint Denial of Service
  • From: Steven M. Christey
• comus 2.0 Final >> RFI
  • From: alijsb
• blogsystem 1.4 >> local & remote = -rfi & lfi & -xss
  • From: info
• ASA-2007-010: Two stack buffer overflows in SIP channel's T.38 SDP parsing code
  • From: Kevin P. Fleming
• ASA-2007-011: Multiple problems in SIP channel parser handling response codes
  • From: Kevin P. Fleming
• nucleus 3.22 >> RFI
  • From: alijsb
• download engine V1.4.1 >> RFI (local)
  • From: alijsb
• Re: 3Com's TippingPoint Denial of Service
  • From: Secure
• CFP: 3rd European Conference on Computer Network Defense (EC2ND)
  • From: Stefano Zanero
• Remote File Inclusion
  • From: s433d_only_linux
• VirtuaNews.Pro.v1.0.3.Retail.+All.Plugins Remote file Include
  • From: s433d_only_linux
• IE 7 and Firefox Browsers Digest Authentication Request Splitting
  • From: Stefano Di Paola
• ASA-2007-012: Remote Crash Vulnerability in Manager Interface
  • From: Kevin P. Fleming
• :doruk100net >> RFI
  • From: alijsb
• [CAID 35277]: CA CleverPath Portal SQL Injection Vulnerability
  • From: Williams, James K
• [USN-453-2] rdesktop regression
  • From: Martin Pitt
• [ MDKSA-2007:094 ] - Updated postgresql packages fix vulnerability
  • From: security
• [CAID 35198, 35276]: CA BrightStor ARCserve Backup Media Server Vulnerabilities
  • From: Williams, James K
• modbuild >> 4.1 Remote File Inclusion
  • From: s433d_only_linux
• Re: WordPress v2.1.3 >> remote file include~
  • From: otto
• SineCMS
  • From: nexus
• Re: Chicken of the VNC 2.0 remote DoS
  • From: support
• Burak Y&#305;lmaz Blog (tr) v1.0 SQL injection vulnerability
  • From: dj_remix_20
• Re: Steganos Encrypted Safe NOT so safe
  • From: support
• [SECURITY] [DSA 1282-1] New php4 packages fix several vulnerabilities
  • From: Moritz Muehlenhoff
• iDefense Security Advisory 04.26.07: Novell eDirectory NCP Fragment Denial of Service Vulnerability
  • From: iDefense Labs
• TSLSA-2007-0015 - postgresql
  • From: Trustix Security Advisor
• FreeBSD Security Advisory FreeBSD-SA-07:03.ipv6
  • From: FreeBSD Security Advisories
• [USN-455-1] PHP vulnerabilities
  • From: Martin Pitt
• [USN-454-1] PostgreSQL vulnerability
  • From: Martin Pitt
• iDefense Security Advisory 04.26.07: Symantec Norton Ghost 10 Service Manager Buffer Overflow Vulnerability
  • From: iDefense Labs
• iDefense Security Advisory 04.26.07: Symantec Norton Ghost 10 Recovery Points Insecure Password Storage Vulnerability
  • From: iDefense Labs
• Security Concerns in Web 2.0
  • From: dharmeshmm
• AFFLIB(TM): Time-of-Check-Time-of-Use File Race
  • From: VSR Advisories
• AFFLIB(TM): Multiple Buffer Overflows
  • From: VSR Advisories
• AFFLIB(TM): Multiple Format String Injections
  • From: VSR Advisories
• AFFLIB(TM): Multiple Shell Metacharacter Injections
  • From: VSR Advisories
• [ GLSA 200704-23 ] capi4k-utils: Buffer overflow
  • From: Raphael Marichez
• [ GLSA 200704-22 ] BEAST: Denial of Service
  • From: Raphael Marichez
• Sphider Version 1.2.x (include_dir) file include
  • From: 1one1
• Seir Anphin (file.php a[filepath]) Remote File Disclosure Vulnerability
  • From: ilkerkandemir