bugtraq mailing list - 2006/05

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2006/05

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹ 19	² 28	³ 21	⁴ 18	⁵ 18	⁶ 13	⁷ 11
⁸ 29	⁹ 16	¹⁰ 32	¹¹ 17	¹² 29	¹³ 24	¹⁴ 1
¹⁵ 35	¹⁶ 17	¹⁷ 20	¹⁸ 25	¹⁹ 24	²⁰ 18	²¹ 4
²² 39	²³ 28	²⁴ 32	²⁵ 32	²⁶ 53	²⁷ 42	²⁸ 11
²⁹ 28	³⁰ 20	³¹ 13

Messages by day:

May 1 (19 messages)

[ GLSA 200605-01 ] MPlayer: Heap-based buffer overflow (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
DMCounter Remote File Include (beford <xbefordx@...il.com>)
JMK's Picture Gallery admin login (alp_eren@...ildiz.org)
planetGallery admin login (tugr@...sport.com)
free-php.net Poll 1.0 admin login (tugr@...sport.com)
Secunia Research: WinHKI unacev2.dll Buffer Overflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
[SECURITY] [DSA 1048-1] New Asterisk packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
Re: Apple Mac OS X Safari 2.0.3 Vulnerability (buggy@...ng.li)
[SECURITY] [DSA 1047-1] New resmgr packages fix unauthorised access (joey@...odrom.org (Martin Schulze))
Image file crashes Finder, Safari and other apps (cmertes@...hfak.uni-bielefeld.de)
Thyme 1.3 Cross Site Scripting (outlaw@...a-security.net)
4images<-- 1.7.1 SQL Injection (CrAzY.CrAcKeR@...mail.com)
Invision Power Board v2.1.5 Remote SQL Injection (o.y.6@...mail.com)
OpenBB 1.0.8 Full Path Disclosure (o.y.6@...mail.com)
I-RATER Platinum Remote File Inclusion exploit Cod3d by R@...N (AminRayden@...oo.com)
CoolMenus Event Remote File Inclusion exploit (AminRayden@...oo.com)
XINE format string bugs when handling non existen file (king_purba@...oo.co.uk)
Blog Mod <= 0.2.x SQL Injection (qex@...mail.org)
Re: CoolMenus Event Remote File Inclusion exploit ("Steven M. Christey" <coley@...re.org>)

May 2 (28 messages)

RE: Oracle 10g 10.2.0.2.0 DBA exploit ("putosoft softputo" <hasecorp@...mail.com>)
Re: Poll: Emerging Threats ("Jon R. Kibler" <Jon.Kibler@...t.com>)
Oracle, where are the patches??? ("David Litchfield" <davidl@...software.com>)
FTP Fuzzer ("infocus" <infocus@...igo.hr>)
VHCS --- Virtual Hosting Control System Cross Site Scripting (outlaw@...a-security.net)
[ MDKSA-2006:080 ] - Updated clamav packages fix vulnerability (security@...driva.com)
JSBoard XSS vulnerability (Alexander Klink <alexander@...nk.name>)
Cisco Security Advisory: Cisco Unity Express Expired Password Reset Privilege Escalation (Cisco Systems Product Security Incident Response Team <psirt@...co.com…)
X7 Chat <=2.0 remote commands execution (rgod@...istici.org)
[SECURITY] [DSA 1049-1] New Ethereal packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
zenphoto Multiple Path Disclosure and Cross Site Scripting Vulnerabilities (raphael.huck@...e.fr)
Ejabberd : Symlink vulnerability during installation process ("Julien L." <jlanthea@...mail.com>)
geoBlog Mutiple XSS Vulnerability (admin@...jectzero.net)
sBlog SQL Injection and Path Disclosure Vulnerability (admin@...jectzero.net)
Cmscout <= V1.10 multiple XSS attack vectors (zerogue@...il.com)
SF-Users V1.0 XSS injection (zerogue@...il.com)
FileProtection Express <= 1.0.1 authentification bypass (zerogue@...il.com)
Russcom.net Loginphp multiple vulnerabilties (zerogue@...il.com)
[ GLSA 200605-02 ] X.Org: Buffer overflow in XRender extension (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[ GLSA 200605-03 ] ClamAV: Buffer overflow in Freshclam (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
TyroCms beta V1.0 multiple XSS injections (zerogue@...il.com)
[ GLSA 200605-04 ] phpWebSite: Local file inclusion (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Invision Gallery 2.0.6 ( SQL Injection ) (o.y.6@...mail.com)
Oracle, where are the patches??? ("David Litchfield" <davidl@...software.com>)
MySQL Anonymous Login Handshake - Information Leakage. (Stefano Di Paola <stefano.dipaola@...ec.it>)
MySQL COM_TABLE_DUMP Information Leakage and Arbitrary command execution. (Stefano Di Paola <stefano.dipaola@...ec.it>)
Hola Distro Help me ("Edgardo Zavala" <edgardo.zavala@...il.com>)
RE: Oracle, where are the patches??? ("Kornbrust, Alexander" <ak@...-database-security.com>)

May 3 (21 messages)

Quagga RIPD unauthenticated route table broadcast ("Konstantin V. Gavrilenko" <mlists@...ont.com>)
Quagga RIPD unauthenticated route injection ("Konstantin V. Gavrilenko" <mlists@...ont.com>)
[quagga-users 6836] Re: Quagga RIPD unauthenticated route injection (Paul Jakma <paul-p3WKshh8b8w@...lic.gmane.org>)
[USN-276-1] Thunderbird vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
BankTown's ActiveX Buffer Overflow Vulnerability ("Alex Park" <saintlinu@...il.com>)
[ MDKSA-2006:081 ] - Updated xorg-x11 packages fix vulnerability (security@...driva.com)
SUSE Security Announcement: xorg-x11-server (SUSE-SA:2006:023) (Ludwig Nussel <ludwig.nussel@...e.de>)
Dynamic Evaluation Vulnerabilities in PHP applications ("Steven M. Christey" <coley@...re.org>)
[USN-277-1] TIFF library vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
[SECURITY] [DSA 1050-1] New ClamAV packages fix denial of service or arbitrary code execution (joey@...odrom.org (Martin Schulze))
[quagga-users 6838] Re: Quagga RIPD unauthenticated route injection ("Paul Jakma" <paul-p3WKshh8b8w@...lic.gmane.org>)
Re: RE: Oracle, where are the patches??? (Cesar <cesarc56@...oo.com>)
[USN-278-1] gdm vulnerability (Martin Pitt <martin.pitt@...onical.com>)
[USN-279-1] libnasl/nessus vulnerability (Martin Pitt <martin.pitt@...onical.com>)
Re: FTP Fuzzer (Alexey Biznya <biakus@....ru>)
BankTown's ActiveX Buffer Overflow Vulnerability ("Alex Park" <saintlinu@...il.com>)
Vulnerability in the way Ultr@...-1.0.1 handles MS-Logon Authentication. (gdehanot@...a-global-risk.com)
OpenVPN 2.0.7 and below: Remote OpenVPN Management Interface Flaw (<c0redump@...ers.org.uk>)
[ MDKSA-2006:082 ] - Updated libtiff packages fix vulnerabilities (security@...driva.com)
Re: OpenVPN 2.0.7 and below: Remote OpenVPN Management Interface Flaw ("David F. Skoll" <devnull@...ringpenguin.com>)
Re: Ejabberd : Symlink vulnerability during installation process (mickael.remond@...cess-one.net)

May 4 (18 messages)

[USN-281-1] Linux kernel vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
[USN-280-1] X.org server vulnerability (Martin Pitt <martin.pitt@...onical.com>)
[SECURITY] [DSA 1051-1] New Mozilla Thunderbird packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
[security bulletin] HPSBUX02108 SSRT061133 rev.10 - HP-UX running Sendmail, Remote Execution of Arbitrary Code (security-alert@...com)
ISA Server 2004 Log Manipulation (beSIRT <beSIRT@...ondsecurity.com>)
Re: Invision Power Board v2.1.5 Remote SQL Injection (mattmecham@...il.com)
[REWTERZ-20060504] - Sami FTP Server Remote Buffer Overflow Vulnerability (rewterz <advisories@...terz.com>)
bigwebmaster guestbook multiply XSS (Javor Ninov <drfrancky@...urax.org>)
Re: Invision Gallery 2.0.6 ( SQL Injection ) (mattmecham@...il.com)
CuteGuestbook XSS attack (omnipresent@...il.it)
PunBB 1.2.11 Cross-Site Scripting (o.y.6@...mail.com)
zawhttpd - Buffer Overflow (Kamil Sienicki <K3@...lunca.int.pl>)
Fast Click SQL Lite <= 1.1.3 Remote File Inclusion (Aminrayden@...oo.com)
[REWTERZ-20060503] XM Easy Personal FTP Server Remote Buffer Overflow Vulnerability (rewterz <advisories@...terz.com>)
Fast Click <= 2.3.8 Remote File Inclusion (Aminrayden@...oo.com)
321soft PhP Gallery 0.9 - directory travel & XSS (d4igoro@...il.com)
libero.it XSS vulnerability - HTML injection ("Davide Denicolo" <davide@...urityinfos.com>)
Panda Antivirus Enterprise Secure, Norton Antivirus 2005 and the virus "I Love You" (Joxean Koret <joxeankoret@...oo.es>)

May 5 (18 messages)

Re: gcc 4.1 bug miscompiles pointer range checks, may place you at risk (leonleon77@...mail.com)
Re: Dynamic Evaluation Vulnerabilities in PHP applications (Michael Schlenker <schlenk@...-oldenburg.de>)
Re: OpenVPN 2.0.7 and below: Remote OpenVPN Management Interface Flaw (Joachim Schipper <j.schipper@...h.uu.nl>)
foreseeing (cough) critical problems futile? (was: Oracle, where are the patches???) (Michael Shigorin <mike@...n.org.ua>)
Idle scan rediscovered!!! ("Joel Jose" <joeljose420@...il.com>)
WebCalendar User Account Enumeration Weakness ("David Maciejak" <david.maciejak@...il.com>)
modules name(Sections)SQL Injection Exploit (Mster-X@...mail.com)
modules name(Downloads)SQL Injection Exploit (Mster-X@...mail.com)
CuteNews 1.4.1 Multiple vulnerabilities (k4p0k4p0@...mail.com)
Re: OpenVPN 2.0.7 and below: Remote OpenVPN Management Interface Flaw ("Kurt Seifried" <bt@...fried.org>)
[ MDKSA-2006:081-1 ] - Updated xorg-x11 packages fix vulnerability (security@...driva.com)
Re: ISA Server 2004 Log Manipulation ("Steven M. Christey" <coley@...re.org>)
Re: ISA Server 2004 Log Manipulation (beSIRT <beSIRT@...ondsecurity.com>)
Invision Community Blog .. Bugs (o.y.6@...mail.com)
SaPHPLesson 3.0 Multbugs (o.y.6@...mail.com)
Re: WebCalendar User Account Enumeration Weakness ("David Maciejak" <david.maciejak@...il.com>)
Cryptomathic ActiveX Buffer Overflow (TDC Digital signature) ("CIRT.DK Advisory" <advisory@...t.dk>)
TSLSA-2006-0024 - multi (Trustix Security Advisor <tsl@...stix.org>)

May 6 (13 messages)

[ GLSA 200605-05 ] rsync: Potential integer overflow (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
OpenFAQ - HTML injection and XSS (Cross Site Scripting) (Kamil Sienicki <K3@...lunca.int.pl>)
JetBox CMS Remote File Include (beford <xbefordx@...il.com>)
ChipmunkBlogger improper input sanitizing (zerogue@...il.com)
ChipmunkBoard Multiple Attack vectors (zerogue@...il.com)
[ GLSA 200605-06 ] Mozilla Firefox: Potential remote code execution (Thierry Carrez <koon@...too.org>)
FlexCustomer <= 0.0.4 sql injection (zerogue@...il.com)
myBloggie <= 2.1.3 XSS (zerogue@...il.com)
PassMasterFlex (and PassMasterFlex+) XSS injection (zerogue@...il.com)
VisionSource CMS <= 0.6 XSS vectors (zerogue@...il.com)
WebsiteBaker CMS lack of sanitizing (zerogue@...il.com)
X7Chat <= 2.0.2 avatar XSS injection (zerogue@...il.com)
Re: DB_eSession deleteSession() SQL injection (interact@...eractimpact.com)

May 7 (11 messages)

Alexadex.com players.py XSS Exploit (skinnypuppy@...hmail.ai)
Re: gcc 4.1 bug miscompiles pointer range checks, may place you at risk (Tonnerre Lombard <tonnerre.lombard@...roup.ch>)
Intel wireless service s24evmon.exe confidential information disclosure. (ruben@...ersemode.com)
Re: Re: Invision Gallery 2.0.6 ( SQL Injection ) (an0n@...c.com)
phpBB 2.0.20 Full Path Disclosure and SQL Errors (cxib@...urityreason.com)
Firefox 1.5.0.3 code execution exploit (yesn@...n.com)
Re: ISA Server 2004 Log Manipulation (Shaun Colley <shaun@...software.com>)
URL Bug On 1ASPHost and DomainDLX Hosting Services (spymeta@...oo.com)
Re: OpenVPN 2.0.7 and below: Remote OpenVPN Management Interface Flaw (<c0redump@...ers.org.uk>)
Re: ISA Server 2004 Log Manipulation ("Thor (Hammer of God)" <thor@...merofgod.com>)
[ GLSA 200605-07 ] Nagios: Buffer overflow (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)

May 8 (29 messages)

[USN-282-1] Nagios vulnerability (Martin Pitt <martin.pitt@...onical.com>)
[USN-283-1] MySQL vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
X-POLL admin By-Pass (alp_eren@...ildiz.org)
Limbo CMS (option=weblinks) SQL injection exploit (SnoBMSN@...mail.De)
Phil's Bookmark script admin By-pass (alp_eren@...ildiz.org)
OpenEngine (PHP CMS) (ck@...oli.info)
[KAPDA] MyBB1.1.1~Email Verification in User Activation ~SQL Injection Attack (addmimistrator@...il.com)
ZDI-06-012: Sophos Anti-Virus CAB Unpacking Code Execution Vulnerability (zdi-disclosures@...m.com)
AngelineCMS Multiple Vulnerabilities (admin@...jectzero.net)
Re: BankTown's ActiveX Buffer Overflow Vulnerability (lkh1348@...ktown.com)
[SECURITY] [DSA 1052-1] New cgiirc packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
CAID 34013 - CA Common Services CAIRIM on z/OS LMP SVC vulnerability ("Williams, James K" <James.Williams@...com>)
[ GLSA 200605-08 ] PHP: Multiple vulnerabilities (Thierry Carrez <koon@...too.org>)
Dokeos Learning Management System 1.6.4 Remote File Include (beford <xbefordx@...il.com>)
Multiple Vulnerabilities In IdealBB ASP Bulletin Board ("CodeScan Labs" <advisories@...escan.com>)
[ GLSA 200605-09 ] Mozilla Thunderbird: Multiple vulnerabilities (Thierry Carrez <koon@...too.org>)
Claroline Open Source e-Learning 1.7.5 Remote File Include (beford <xbefordx@...il.com>)
singapore v0.9.7 XSS Vulnerabilities (alp_eren@...ildiz.org)
INFIGO-2006-05-03: Multiple FTP Servers vulnerabilities ("infocus" <infocus@...igo.hr>)
[Kurdish Security # 4] phpRaid Remote File Include Vulnerability (PHPBB) (botan@...uxmail.org)
[Kurdish Security # 5] phpRaid Remote File Include [SMF] (botan@...uxmail.org)
Re: Invision Community Blog .. Bugs (mattmecham@...il.com)
Secunia Research: TZipBuilder ZIP File Handling Buffer Overflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Anti-Trojan unacev2.dll Buffer Overflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
VSR Advisory: WebSense content filter bypass when deployed in conjunction with Cisco filtering devices (VSR Advisories <advisories@...curity.com>)
PHPFusion <= v6.00.306 avatar mod_mime arbitrary file upload & local inclusion vulnerabilities (rgod@...istici.org)
[MajorSecurity] phpListPro <= 2.01 - Multiple Remote File Include Vulnerability (admin@...orsecurity.de)
SYMSA-2006-003: Cisco Secure ACS for Windows - Administrator Password Disclosure (research@...antec.com)
VSR Advisory: WebSense content filter bypass when deployed in conjunction with Cisco filtering devices (Matthew Cerha <mcerha@...co.com>)

May 9 (16 messages)

Re: SYMSA-2006-003: Cisco Secure ACS for Windows - Administrator Password Disclosure (Matthew Cerha <mcerha@...co.com>)
ICQ Client Cross-Application Scripting (XAS) (3APA3A <3APA3A@...URITY.NNOV.RU>)
Re: ISA Server 2004 Log Manipulation ("Steven M. Christey" <coley@...re.org>)
Secunia Research: Where Is It unacev2.dll Buffer Overflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
tseekdir.cgi<--Local File Include (BoNy-m@...mail.com)
[SECURITY] [DSA 1053-1] New Mozilla packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
# MHG Security Team --- OzzyWork Gallery SQL Injection (Dj_ReMix_20@...mail.com)
plaNetStat Admin ByPass (alp_eren@...ildiz.org)
Re: INFIGO-2006-05-03: Multiple FTP Servers vulnerabilities (Andrea Rimicci <arimicci@...taly.com>)
# MHG Security Team --- DuGallery V2.x SQL Injection (Dj_ReMix_20@...mail.com)
[EEYEB20051011B] - Microsoft Distributed Transaction Coordinator Denial of Service ("eEye Advisories" <Advisories@...e.com>)
[EEYEB20051011A] - Microsoft Distributed Transaction Coordinator Heap Overflow ("eEye Advisories" <Advisories@...e.com>)
ZDI-06-013: 3Com TippingPoint SMS Server Information Disclosure Vulnerability (zdi-disclosures@...m.com)
IGNORING SSH CONNECTION USES ARP CACHE POISSONING (king_purba@...oo.co.uk)
Two independent vulnerabilities (client and server side) in Quake3 engine and many derived games (Thilo Schulz <arny@....s.bawue.de>)
[Reversemode] Microsoft Infotech Storage library Heap Corruption (Reversemode <advisories@...ersemode.com>)

May 10 (32 messages)

[TZO-042006] Insecure Auto-Update and File execution (Thierry Zoller <Thierry@...ler.lu>)
Re: Phil's Bookmark script admin By-pass ("Steven M. Christey" <coley@...re.org>)
[SECURITY] [DSA 1054-1] New TIFF packages fix denial of service and arbitrary code execution (joey@...odrom.org (Martin Schulze))
Re: IGNORING SSH CONNECTION USES ARP CACHE POISSONING (Thierry Zoller <Thierry@...ler.lu>)
IBM Websphere Application Server Multiple Vulnerabilities (SnoBmsn@...mail.de)
Oracle - the last word ("David Litchfield" <davidl@...software.com>)
# MHG Security Team --- OzzyWork Gallery Upload Vulnerabilities (Dj_ReMix_20@...mail.com)
[ GLSA 200605-10 ] pdnsd: Denial of Service and potential arbitrary code execution (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[ GLSA 200605-11 ] Ruby: Denial of Service (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[ GLSA 200605-12 ] Quake 3 engine based games: Buffer Overflow (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Multiple SQL Injection Vulnerabilities in Dreamweaver Generated Code ("Brian Gallagher" <brian@...mondsea.com>)
[ MDKSA-2006:083 ] - Updated gdm package fixes symlink attack vulnerability (security@...driva.com)
Hackmaster Group DMCounter Remote File Include (c-w-m@...kmaster.us)
Re: Firefox 1.5.0.3 code execution exploit (James_gmail-ij <ij3n0spam@...il.com>)
Re: tseekdir.cgi<--Local File Include ("Steven M. Christey" <coley@...re.org>)
Re: Firefox 1.5.0.3 code execution exploit (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Re: Firefox 1.5.0.3 code execution exploit (Flavio Visentin <THe_ZiPMaN@...man.it>)
Re: Milliscript 1.4 Multiple Vulnerabilities (webmaster@...liscripts.com)
Re: phpBB 2.0.20 Full Path Disclosure and SQL Errors (Maksymilian Arciemowicz <max@...tsuper.pl>)
Re: Firefox 1.5.0.3 code execution exploit (Daniel Veditz <dveditz@...zio.com>)
UBlog Remote XSS Exploit (SnoBMSN@...mail.De)
Re: OpenVPN 2.0.7 and below: Remote OpenVPN Management Interface Flaw (Giancarlo Razzolini <linux-fan@...a.com.br>)
[ MDKSA-2006:084 ] - Updated MySQL packages fix several vulnerabilities (security@...driva.com)
Re: IGNORING SSH CONNECTION USES ARP CACHE POISSONING (Hugo van der Kooij <hvdkooij@...derkooij.org>)
Firefox 1.5.0.3 - DoS (p4.werterxyz@...il.com)
mybb v1.1.1(showthread.php) SQL Injection Exploit (Breeeeh@...mail.com)
ZDI-06-014: Verisign I-Nav ActiveX Control Code Execution Vulnerability (zdi-disclosures@...m.com)
Re: Firefox 1.5.0.3 - DoS (Chris Horry <zerbey@...ble.co.uk>)
PhpListPro 2.01 Remote File Include Vulnerability (SnoBMSN@...mail.De)
Re: Firefox 1.5.0.3 code execution exploit (Ismail Donmez <ismail@...dus.org.tr>)
Re: modules name(Downloads)SQL Injection Exploit (Paul Laudanski <zx@...tlecops.com>)
vbulletin security Alert (aura@...a-security.net)

May 11 (17 messages)

[48Bits.com Advisory] Path conversion design flaw in Microsoft NTDLL ("48Bits.com [I+D Team]" <vulndev@...its.com>)
Kerio WinRoute Firewall Protocol Inspection Denial (SnoBMSN@...mail.De)
Re: phpBB 2.0.20 Full Path Disclosure and SQL Errors (Paul Laudanski <zx@...tlecops.com>)
Re: SYMSA-2006-003: Cisco Secure ACS for Windows - AdministratorPassword Disclosure ("Greg owens" <gowens@...ad.net>)
Cisco Security Advisory: AVS TCP Relay Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
RE: Oracle - the last word ("Joseph Finley" <jfinley@...urium.net>)
[TZO-042006] Insecure Auto-Update and File execution (2) (Thierry Zoller <Thierry@...ler.lu>)
[ GLSA 200605-13 ] MySQL: Information leakage (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
RE: SYMSA-2006-003: Cisco Secure ACS for Windows - AdministratorPassword Disclosure ("John Stuppi (jstuppi)" <jstuppi@...co.com>)
Re: vbulletin security Alert (scott@...lletin.com)
[ MDKSA-2006:085 ] - Updated xine-ui packages fix format string vulnerabilities (security@...driva.com)
Unclassified NewsBoard <= 1.6.1 patch 1 ABBC[Config][smileset] arbitrary local inclusion (rgod@...istici.org)
Re: Oracle - the last word ("Steven M. Christey" <coley@...re.org>)
[SECURITY] [DSA 1055-1] New Mozilla Firefox packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
Secunia Research: UltimateZip unacev2.dll Buffer Overflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Microsoft MSDTC NdrAllocate Validation Vulnerability (avert@...rtlabs.com)
Verizon Voicewing and Linksys PAP2-VN (securityfocus@...var.com)

May 12 (29 messages)

[EEYEB-20060307] Apple QuickTime FPX Integer Overflow ("eEye Advisories" <Advisories@...e.com>)
phpBB "charts.php" XSS and SQL-Injection (sn4k3.23@...il.com)
ZDI-06-015: Apple QuickTime H.264 Parsing Heap Overflow Vulnerability (zdi-disclosures@...m.com)
Kenshoto Report: IIS 6.0 Remote Exploit PoC (Kenshoto CTF <ctf@...shoto.com>)
How secure is software X? ("David Litchfield" <davidl@...software.com>)
Re: How secure is software X? ("Michael Silk" <michaelslists@...il.com>)
Re: How secure is software X? ("David Litchfield" <davidl@...software.com>)
Apple QuickTime udta ATOM Heap Overflow (Sowhat <smaillist@...il.com>)
SEC Consult SA-20060512-0 :: Symantec Enterprise Firewall NAT/HTTP Proxy Private IP Exposure (Bernhard Mueller <research@...-consult.com>)
Ipswitch WhatsUp Professional multiple flaws ("David Maciejak" <david.maciejak@...il.com>)
Re: Secunia Research: Where Is It unacev2.dll Buffer OverflowVulnerability (jason.gerfen@...il.com)
Re: Firefox 1.5.0.3 - DoS (RSnake <rsnake@...cking.com>)
yet more XSS in older versions of ColdFusion (zuxncwaruio@...linator.com)
[Kurdish Security # 7] Foing Remote File Include Vulnerability [PHPBB] (botan@...uxmail.org)
Apple QuickDraw/QuickTime Multiple Vulnerabilities (Avert@...rtlabs.com)
Re: [Reversemode] Microsoft Infotech Storage library Heap Corruption (marco.correnti@....int)
Re: How secure is software X? (Adam Shostack <adam@...eport.org>)
Re: How secure is software X? (Tim Newsham <newsham@...a.net>)
TSLSA-2006-0026 - kernel (Trustix Security Advisor <tsl@...stix.org>)
RE: Oracle - the last word (Lee Kelly <robert.kelly@...izonbusiness.com>)
RE: How secure is software X? ("Ferguson, Justin (IARC)" <FergusonJ@...doe.gov>)
Re: [Reversemode] Microsoft Infotech Storage library Heap Corruption (Reversemode <advisories@...ersemode.com>)
PHPBB 2.0.20 persistent issues with avatars (rgod@...istici.org)
Multiple vulnerabilities in Raydium rev 309 (Luigi Auriemma <aluigi@...istici.org>)
Buffer-overflow and NULL pointer crash in Genecys 0.2 (Luigi Auriemma <aluigi@...istici.org>)
Server crash in Empire 4.3.2 (Luigi Auriemma <aluigi@...istici.org>)
Multiple vulnerabilities in Outgun 1.0.3 bot 2 (Luigi Auriemma <aluigi@...istici.org>)
Socket unreachable in GNUnet rev 2780 (Luigi Auriemma <aluigi@...istici.org>)
Re: phpBB "charts.php" XSS and SQL-Injection (g30rg3x@...il.com)

May 13 (24 messages)

Dokeos LDAP hole fixed (thomas.depraetere@...eos.com)
Re: IGNORING SSH CONNECTION USES ARP CACHE POISSONING (king_purba@...oo.co.uk)
Re: Re: Phil's Bookmark script admin By-pass (theproffx@...il.com)
Re: How secure is software X? ("Paul B. Saitta" <pbs-sf@...axion.org>)
Dovecot IMAP: Mailbox names list disclosure with mboxes (Timo Sirainen <tss@....fi>)
Re: Firefox 1.5.0.3 - DoS (Flavio Visentin <THe_ZiPMaN@...man.it>)
[FLSA-2006:152868] Updated tetex packages fix security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
[FLSA-2006:152898] Updated emacs packages fix a security issue (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
[FLSA-2006:152904] Updated ncpfs package fixes security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
[FLSA-2006:152923] Updated xloadimage package fixes security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
[FLSA-2006:164512] Updated fetchmail packages fix security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
Several flaws in e-business designer (eBD) ("Pedro Andújar" <pandujar@...fdefense.es>)
[FLSA-2006:185355] Updated gnupg package fixes security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
Re: phpBB 2.0.20 Full Path Disclosure and SQL Errors (Paul Laudanski <zx@...tlecops.com>)
PHP Live Helper ASP(chat.php) XSS (mster-X@...mail.com)
# MHG Security Team --- Gallery Upload Vulnerabilities (Dj_ReMix_20@...mail.com)
Re: Oracle - the last word (Stefano Di Paola <stefano.dipaola@...ec.it>)
Re: modules name(Downloads)SQL Injection Exploit (znx <znxster@...il.com>)
Re: IGNORING SSH CONNECTION USES ARP CACHE POISSONING ("Felipe openglx" <openglx@...rByte.net>)
Re: Firefox 1.5.0.3 - DoS (marrob@...erfree.it)
Re: How secure is software X? ("David Litchfield" <davidl@...software.com>)
Gphotos Directory Traversal and Cross Site Scripting (doz@...mail.com)
Re: How secure is software X? (Mike Hoskins <mhoskins@...pen.com>)
SQL-Injection in e107 allows attacker to become a site admininstrator (socsam@...uxmail.org)

May 14 (1 message)

POC exploit for freeSSHd version 1.0.9 (Tauqeer Ahmad <ahmadtauqeer@...oo.com>)

May 15 (35 messages)

RealVNC 4.1.1 Remote Compromise ("James Evans" <iamjamesevans@...il.com>)
Re: RealVNC 4.1.1 Remote Compromise (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
RE: RealVNC 4.1.1 Remote Compromise ("Dixon, Wayne" <wcdixo@...ora.lib.il.us>)
Re: Re: Firefox 1.5.0.3 - DoS (Ronald@...omain.com)
Re: How secure is software X? (Fabian Becker <neonomicus@....de>)
PhpBB <= 2.0.20 Admin/Restore Database remote cmmnds xctn (works with admin sid) (rgod@...istici.org)
Re: Firefox 1.5.0.3 - DoS (Ronald van den Blink <ronald@...urityview.org>)
RE: Oracle - the last word (Iggy E <iggy_e@...oo.com>)
[USN-274-2] MySQL vulnerability (Martin Pitt <martin.pitt@...onical.com>)
Novell NDPS Remote Vulnerability (Server & Client) ("Ryan Smith" <whatstheaddress@...il.com>)
[SECURITY] [DSA 1057-1] New phpLDAPadmin packages fix cross-site scripting (joey@...odrom.org (Martin Schulze))
Is MS06-018 a DoS or a system compromise ? ("Nick Boyce" <nick.boyce@...il.com>)
JDK 1.4.2_11, 1.5.0_06, unsigned applets consuming all free harddisk space (Marc Schoenefeld <marc.schoenefeld@....org>)
[USN-284-1] Quagga vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
Re: PHPBB 2.0.20 persistent issues with avatars (Paul Laudanski <zx@...tlecops.com>)
Re: RealVNC 4.1.1 Remote Compromise (Joachim Schipper <j.schipper@...h.uu.nl>)
90% of programs made in PHP5 and prior Full Path Disclosure vuln. (sirdarckcat@...il.com)
XSS in FreeTextBox and FCKEditor Basic Toolbar Selection (bonsite@...mail.com)
[SECURITY] [DSA 1056-1] New webcalendar packages fix information leak (joey@...odrom.org (Martin Schulze))
DMA[2006-0514a] - 'ClamAV freshclam incorrect privilege drop' ("KF (lists)" <kf_lists@...italmunition.com>)
Sugar Suite Open Source <= 4.2 "OptimisticLock!" arbitrary remote inclusion exploit (rgod@...istici.org)
Azboard <= 1.0 Multiple Sql Injections (geinblues@...il.com)
tyree[at]users.sourceforge.net (tyree@...myagenda.com)
Secunia Research: FilZip unacev2.dll Buffer Overflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
CYBSEC - Security Advisory: Phishing Vector in SAP BC (Business Connector) (Leandro Meiners <lmeiners@...sec.com>)
CYBSEC - Security Advisory: Arbitrary File Read/Delete in SAP BC (Business Connector) (Leandro Meiners <lmeiners@...sec.com>)
Re: How secure is software X? (Matt.Carpenter@...icor.com)
Secunia Research: Abakt ZIP File Handling Buffer Overflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Soho firewall - OpenWRT -WhiteRussian Question (jfvanmeter@...cast.net)
Confixx 3.1.2 <= Code Injection (Snake_23@...-Crew.de.tk)
Re: POC exploit for freeSSHd version 1.0.9 ("David Maciejak" <david.maciejak@...il.com>)
YapBB <= 1.2 Beta2 'find.php' SQL Injection Vulnerability (geinblues@...il.com)
RE: Is MS06-018 a DoS or a system compromise ? ("Hayes, Bill" <Bill.Hayes@....com>)
DeluxeBB 1.06 Remote SQL Injection Exploit (kingofska@...il.com)
RE: Is MS06-018 a DoS or a system compromise ? ("Maxime Ducharme" <mducharme@...ergeneration.com>)

May 16 (17 messages)

re: RealVNC 4.1.1 Remote Compromise (plato@...geit.com)
Re: RealVNC 4.1.1 Remote Compromise ("Dave \"No, not that one\" Korn" <davek_throwaway@...mail.com>)
PhpRemoteView Multiple Xss Vulnerabilities (Soothackers@...il.com)
Sphider Multiple Xss Vulnerabilities (Soothackers@...il.com)
IceWarp Cross-Site Scripting(XSS) (LiNuX_rOOt1@...mail.com)
Newsportal: code injection vulnerability (newsportal@...rian-amrhein.de)
ScanAlert Security Advisory ("Joseph Pierini" <joep@...nalert.com>)
Checkpoint SYN DoS Vulnerability ("sanjay naik" <sanjaynaik@...mail.com>)
Caucho Resin Windows Directory Traversal Vulnerability (advisory@...id7.com)
The Weakness of Windows Impersonation Model ("Brian L. Walche" <gsw@...tlesecurity.com>)
vulnerability details ("Arnold Grossmann" <arnold.grossmann@...il.com>)
UPDATE: [ GLSA 200605-13 ] MySQL: Information leakage (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Re: Checkpoint SYN DoS Vulnerability ("Pawel Worach" <pawel.worach@...il.com>)
PHP-Fusion <= 6.00.306 "srch_where" SQL injection / admin credentials disclosure (rgod@...istici.org)
Re: Checkpoint SYN DoS Vulnerability ("sanjay naik" <sanjaynaik@...mail.com>)
DeluxeBB <= v1.06 attachment mod_mime exploit (rgod@...istici.org)
ERRATA: [ GLSA 200605-07 ] Nagios: Buffer overflow (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)

May 17 (20 messages)

Re: Checkpoint SYN DoS Vulnerability (Chris Brenton <cbrenton@...isbrenton.org>)
iDefense Q2 2006 Vulnerability Challenge ("labs-no-reply@...fense.com" <labs-no-reply@...fense.com>)
Advisory: Quezza BB <= 1.0 File Inclusion Vulnerability. (Mustafa Can Bjorn IPEKCI <nukedx@...edx.com>)
security open source tools require ("adnan habib" <lifesaver68@...mail.com>)
Re: security open source tools require ("subhag ghosh" <subhag.ghosh@...il.com>)
What's Up Professional Spoofing Authentication Bypass ("Kenneth F. Belva" <ken@...security.com>)
Maksymilian Arciemowicz (cxib@...urityreason.com)
Secunia Research: IZArc unacev2.dll Buffer Overflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Re: Checkpoint SYN DoS Vulnerability ("sanjay naik" <sanjaynaik@...mail.com>)
Newsportal <= 0.36 Remote File Inclusion Vulnerability (philipp.niedziela@....de)
Re: Checkpoint SYN DoS Vulnerability ("Bojan Zdrnja" <bojan.zdrnja@...il.com>)
Re: Zen Cart login.php SQL Injection Vulnerability (noreply@...-cart.com)
VNC_bypauth: vnc scanner multithreaded linux & windows ("ad@...poverflow.com" <ad@...poverflow.com>)
Re[2]: The Weakness of Windows Impersonation Model ("Brian L. Walche" <gsw@...tlesecurity.com>)
Firefox (with IETab Plugin) Null Pointer Dereferences Bug ("Debasis Mohanty" <debasis@...kingspirits.com>)
Two heap overflow in libextractor 0.5.13 (rev 2832) (Luigi Auriemma <aluigi@...istici.org>)
DIMVA 2006 - Call For Participation (thomas@...e.de (Thomas Biege))
Re[2]: The Weakness of Windows Impersonation Model ("Brian L. Walche" <gsw@...tlesecurity.com>)
Secunia Research: Eazel unacev2.dll Buffer Overflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Mobotix IP Network Cameras Multiple XSS (jaime.blasco@...el.es)

May 18 (25 messages)

Re: What's Up Professional Spoofing Authentication Bypass ("David Maciejak" <david.maciejak@...il.com>)
Boastmachine Cross Site Scripting Vulnerability (mail@...usemreyilmaz.com)
OpenWiki<--v0.78 Cross-Site Scripting (LiNuX_rOOt1@...mail.com)
HYSA-2006-008 myBloggie 2.1.3 CRLF & SQL Injection (h4cky0u.org@...il.com)
Re: The Weakness of Windows Impersonation Model ("David Litchfield" <davidl@...software.com>)
RadLance Local Inclusion Exploit ("Hussain Salim" <bo_ali90@...mail.com>)
Wargamming Network.. (Dusty <dusty@...shthestack.org>)
Gawab.com Register Xss Bugtraq (rootter@...kmaster.us)
Multiple Vulns in Bitrix CMS (Gogi The Georgian <gogi__@...l.ru>)
Re: Maksymilian Arciemowicz (frantisek holop <minusf@...it.org>)
CodeScan Advisory: Avatar MOD v1.3 for Snitz Forums v3.4 - Arbitrary File Upload ("CodeScan Labs" <advisories@...escan.com>)
[cosmoshop again] sql injection + view all files as admin user (innate@....de)
[Info Disclosure] Diesel PHP Job Site Latest Version ("Matt Gibson" <diwelf@...il.com>)
AspBB Forum "profile.asp & default.asp" XSS Vulnerability ("TeufeL Online" <teufel@...mail.com>)
Gmail/Gtalk web client DoS (dan@...hology.washington.edu)
[SECURITY] [DSA 1058-1] New awstats packages fix arbitrary command execution (joey@...odrom.org (Martin Schulze))
Re: JDK 1.4.2_11, 1.5.0_06, unsigned applets consuming all free harddisk space ("William Starling" <overlord359@...il.com>)
XSS in orkut.com ("Rohin Koul" <rohin.koul@...il.com>)
FrontRange iHeat Vulnerability (mcdanielar@...hmail.com)
POC exploit for freeFTPd 1.0.10 (Tauqeer Ahmad <ahmadtauqeer@...oo.com>)
Re: Re: Checkpoint SYN DoS Vulnerability (jrh57@...ne.rr.com)
RE: Checkpoint SYN DoS Vulnerability ("Sterling, Chuck" <csterlin@...p3.wstf.nasa.gov>)
Re: Checkpoint SYN DoS Vulnerability ("sanjay naik" <sanjaynaik@...mail.com>)
Re: Is MS06-018 a DoS or a system compromise ? ("Nick Boyce" <nick.boyce@...il.com>)
Re:POC exploit for freeFTPd 1.0.10 (Tauqeer Ahmad <ahmadtauqeer@...oo.com>)

May 19 (24 messages)

Re: MediaSlash Gallery 'rub' variable Remote File inlcusion Vulnerability (gyzmo77@...oo.fr)
Re: Checkpoint SYN DoS Vulnerability (Erick Mechler <emechler@...hometer.net>)
Myspace Friend Train v2.8 (luny@...fucktard.com)
Code Injection via Hidden Form Field Manipulation (mtoren@...rtpool.com)
Re: PHPBB 2.0.20 persistent issues with avatars ("s89df987 s9f87s987f" <a059d8e0a9s8d0@...mail.com>)
Re: JDK 1.4.2_11, 1.5.0_06, unsigned applets consuming all free harddisk space ("Leif Erik Andersen (at Seven)" <leander@...net.dk>)
Sun single-CPU DOS (Doug Hughes <doug@....auburn.edu>)
Re: Checkpoint SYN DoS Vulnerability ("sanjay naik" <sanjaynaik@...mail.com>)
Re: phpBB "charts.php" XSS and SQL-Injection (phpbb@...martian.com)
RE: RealVNC 4.1.1 Remote Compromise ("Krpata, Tyler" <tkrpata@....com>)
Re: Firefox (with IETab Plugin) Null Pointer Dereferences Bug ("Roman Daszczyszak" <romandas@...il.com>)
[ MDKSA-2006:086 ] - Updated kernel packages fix multiple vulnerabilities (security@...driva.com)
Secunia Research: CAM UnZip ZIP File Handling Buffer Overflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
[security bulletin] HPSBUX02108 SSRT061133 rev.11 - HP-UX Running Sendmail, Remote Execution of Arbitrary Code (security-alert@...com)
[security bulletin] HPSBUX02117 SSRT2400 rev.1 - HP-UX Running BINDv4 Domain Name Server (DNS) Remote Unauthorized Access, Denial of Servi… (security-alert@...com)
[security bulletin] HPSBTU02118 SSRT061145 rev.1 - HP Tru64 UNIX Running Firefox or Mozilla Application Suite, Remote Execution of Arbitra… (security-alert@...com)
[SECURITY] [DSA 1059-1] New quagga packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
Yourfreeworld Styleish Text Ads Script (luny@...fucktard.com)
[SECURITY] [DSA 1062-1] New kphone packages fix information disclosure (Moritz Muehlenhoff <jmm@...ian.org>)
Yourfreeworld.com Short Url & Url Tracker Script (luny@...fucktard.com)
[SECURITY] [DSA 1060-1] New kernel-patch-vserver packages fix privilege escalation (Moritz Muehlenhoff <jmm@...ian.org>)
Jemscripts Download Control v1.0 (luny@...fucktard.com)
[SECURITY] [DSA 1061-1] New popfile packages fix denial of service (Moritz Muehlenhoff <jmm@...ian.org>)
CYBSEC - Security Pre-Advisory: Local Privilege Escalation in SAP sapdba Command (Leandro Meiners <lmeiners@...sec.com>)

May 20 (18 messages)

[SECURITY] [DSA 1063-1] New phpgroupware packages fix execution of arbitrary web script code (Moritz Muehlenhoff <jmm@...ian.org>)
Re: RealVNC 4.1.1 Remote Compromise ("Matt Venzke" <mvenzke@...il.com>)
[SECURITY] [DSA 1066-1] New phpbb2 packages fix execution of arbitrary web script code (Moritz Muehlenhoff <jmm@...ian.org>)
phpBazar <= 2.1.0 Multiple vulnerabilites (i6d@...mail.com)
Re: NSA Group Security Advisory NSAG-195-23.02.2006 Vulnerability FCKeditor 2.0 FC (fredck@...editor.net)
[SECURITY] [DSA 1065-1] New hostapd packages fix denial of service (Moritz Muehlenhoff <jmm@...ian.org>)
ActualAnalyzer Server <=8.23 - Remote File Include Vulnerability (i6d@...mail.com)
RaceEventManagement <--v0.7.6 SQL injection & XSS (Mster-X@...mail.com)
Interlink "news_information.php" XSS (Mster-X@...mail.com)
Xtremescripts Topsites v1.1 (luny@...fucktard.com)
[SECURITY] [DSA 1067-1] New Linux kernel 2.4.16 packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
Re: NSA Group Security Advisory NSAG-196-23.02.2006 Vulnerability FCKeditor 2.2 (fredck@...editor.net)
[SECURITY] [DSA 1064-1] New cscope packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
Re: PHPBB 2.0.20 persistent issues with avatars (Paul Laudanski <zx@...tlecops.com>)
cPanel OpenBaseDir Bypass (i6d@...mail.com)
Zix Forum <= 1.12 (layid) SQL Injection Vulnerability (i6d@...mail.com)
Re: XSS in orkut.com ("Google Security Team" <security@...gle.com>)
[SECURITY] [DSA 1068-1] New fbi packages fix denial of service (Moritz Muehlenhoff <jmm@...ian.org>)

May 21 (4 messages)

[TZO-072006]-Xampp - Multiple Priviledge Escalation (SYSTEM) and Rogue Autostart (Thierry Zoller <Thierry@...ler.lu>)
[ GLSA 200605-14 ] libextractor: Two heap-based buffer overflows (Stefan Cornelius <dercorny@...too.org>)
[ GLSA 200605-15 ] Quagga Routing Suite: Multiple vulnerabilities (Stefan Cornelius <dercorny@...too.org>)
PBNJ 1.14 released ("Joshua D. Abraham" <jabra@....neu.edu>)

May 22 (39 messages)

Re: Zix Forum <= 1.12 (layid) SQL Injection Vulnerability (farhadkey@...oo.com)
Hiox Guestbook 3.1 (luny@...fucktard.com)
[SECURITY] [DSA 1069-1] New Linux kernel 2.4.18 packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
PunBB 1.2.11 Cross site scripting (k4p0k4p0@...mail.com)
Destiney Rated Images Script v0.5.0 - XSS Vulnv (luny@...fucktard.com)
Destiney Links Script v2.1.2 (luny@...fucktard.com)
[SECURITY] [DSA 1070-1] New Linux kernel 2.4.19 packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
Captivate 1.0 - XSS Vuln (luny@...fucktard.com)
PHP Easy Galerie Index.PHP Remote File Include Vulnerability (craziest@...il.com)
Firefox 1.5.0.3 Flaw - Page can obtain path to Mozilla installation or profile by examining JavaScript exceptions (milw0rm@...il.com)
XOOPS <= 2.0.13.2 'xoopsOption[nocommon]' exploit (rgod@...istici.org)
[SECURITY] [DSA 1069-1] New Linux kernel 2.4.18 packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
Novell Client login form enables reading and writing from and to the clipboard of the logged-in user ("EitanCaspi@...oo.com" <eitancaspi@...oo.com>)
Generic Browser Crash with Java 1.4.2_11, Java 1.5.0_06 (Marc Schoenefeld <marc.schoenefeld@....org>)
[KAPDA::#43] - phpwcms multiple vulnerabilities (alireza hassani <trueend5@...oo.com>)
Skype - URI Handler Command Switch Parsing ("Brett Moore" <brett.moore@...urity-assessment.com>)
Re: modules name(Sections)SQL Injection Exploit (security curmudgeon <jericho@...rition.org>)
Re: tseekdir.cgi<--Local File Include (security curmudgeon <jericho@...rition.org>)
[SECURITY] [DSA 1071-1] New MySQL 3.23 packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
Perlpodder Remote Arbitrary Command Execution (RedTeam Pentesting <release@...team-pentesting.de>)
ZDI-06-016: Novell eDirectory 8.8 NDS Server Buffer Overflow Vulnerability (zdi-disclosures@...m.com)
Prodder Remote Arbitrary Command Execution (RedTeam Pentesting <release@...team-pentesting.de>)
BitZipper Archive Extraction Directory traversal (h e <het_ebadi@...oo.com>)
Re: WebsiteBaker CMS lack of sanitizing (ryan@...sitebaker.org)
[security bulletin] HPSBUX02119 SSRT4848 rev.1 - HP-UX Running Motif Applications Remote Arbitrary Code Execution, Denial of Service (DoS) (security-alert@...com)
[security bulletin] HPSBUX02120 SSRT051057 rev.1 - HP-UX Local Denial of Service (DoS) (security-alert@...com)
[SECURITY] [DSA 1073-1] New MySQL 4.1 packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
Re: Novell Client login form enables reading and writing from and to the clipboard of the logged-in user (Roman Drahtmueller <draht@...ell.com>)
ACROS Security: Buffer Overflow In EMC (previously Dantz) Retroclient Service ("ACROS Security" <lists@...os.si>)
[SECURITY] [DSA 1072-1] New Nagios packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
Re: Checkpoint SYN DoS Vulnerability (Jim Clausing <clausing@...e.org>)
mybb v1.1.1(rss.php) SQL Injection Exploit (Breeeeh@...mail.com)
CANews Multiple Vulnerabilities (omnipresent@...il.it)
Re: 90% of programs made in PHP5 and prior Full Path Disclosure vuln. (sirdarckcat@...il.com)
Re: Checkpoint SYN DoS Vulnerability ("Bojan Zdrnja" <bojan.zdrnja@...il.com>)
SOE's implementation of Lithium Forums Software allows users to log on as each other. (john@...nhasson.com)
Beoped Portal XSS (outlaw@...a-security.net)
Re: Sun single-CPU DOS ("Mike O'Connor" <mjo@...o.mi.org>)
phpRaid "view.php" XSS Vulnerability ("TeufeL Online" <teufel@...mail.com>)

May 23 (28 messages)

TSLSA-2006-0028 - multi (Trustix Security Advisor <tsl@...stix.org>)
Remote Code Execution in artmedic Newsletter 4.1 [log.php] (c.j.schmitz@....de)
Re: POC exploit for freeFTPd 1.0.10 (Sanjay Rawat <sanjayr@...oto.com>)
Re: POC exploit for freeFTPd 1.0.10 (Tauqeer Ahmad <ahmadtauqeer@...oo.com>)
Re: 90% of programs made in PHP5 and prior Full Path Disclosure vuln. (Kamil Sienicki <K3@...lunca.int.pl>)
Microsoft Internet Explorer - Crash on mouse button click (mac68k@...il.com)
Hackernetwork.Com Mail XSS Vulnerability ("TeufeL Online" <teufel@...mail.com>)
Circumventing quarantine control in Windows 2003 and ISA 2004 ("Memet Anwar" <mmta.gm@...il.com>)
[USN-285-1] awstats vulnerability (Martin Pitt <martin.pitt@...onical.com>)
Server termination in netPanzer 0.8 (rev 952) (Luigi Auriemma <aluigi@...istici.org>)
Buffer-overflow in the WebTool service of PunkBuster for servers (minor than v1.229) (Luigi Auriemma <aluigi@...istici.org>)
Chatty improper input sanitizing (zerogue@...il.com)
Re: Circumventing quarantine control in Windows 2003 and ISA 2004 (3APA3A <3APA3A@...URITY.NNOV.RU>)
DSChat <= 1.0 XSS (zerogue@...il.com)
IpLogger <= 1.7 XSS (zerogue@...il.com)
QBv14 XSS (zerogue@...il.com)
Russcom PHPImages lack of validation (zerogue@...il.com)
Russcom Ping Remote code execution (zerogue@...il.com)
SkyeShoutbox <= v.1.2.0 XSS (zerogue@...il.com)
Kaspersky antivirus 6: HTTP monitor bypassing (john@...-sam.to)
[OpenPKG-SA-2006.008] OpenPKG Security Advisory (openldap) (OpenPKG <openpkg@...npkg.org>)
Non eXecutable Stack Lovin on OSX86 ("KF (lists)" <kf_lists@...italmunition.com>)
Nucleus CMS <= 3.22 arbitrary remote inclusion (rgod@...istici.org)
[security bulletin] HPSBUX02114 SSRT061115 rev.1 - HP-UX Running Software Distributor Local Elevation of Privilege (security-alert@...com)
phpMyDirectory <= 10.4.4 Multiple Remote File Include(new!) (ajannhwt@...mail.com)
AlstraSoft E-Friends - XSS (luny@...fucktard.com)
Alstrasoft Article Manager Pro v1.6 (luny@...fucktard.com)
[security bulletin] HPSBUX02075 SSRT051074 rev.5 - HP-UX Running xterm Local Unauthorized Access (security-alert@...com)

May 24 (32 messages)

Re: Sun single-CPU DOS (Doug Hughes <doug@....auburn.edu>)
RE: Circumventing quarantine control in Windows 2003 and ISA 2004 ("Roger A. Grimes" <roger@...neretcs.com>)
Re: How secure is software X? (Crispin Cowan <crispin@...ell.com>)
DGbook v1.0 - XSS (luny@...fucktard.com)
[security bulletin] HPSBMA02121 SSRT061157 rev.1 - HP OpenView Storage Data Protector Remote Arbitrary Command Execution (security-alert@...com)
[security bulletin] HPSBMA02098 SSRT5911 rev.1 - HP OpenView Network Node Manager (OV NNM) Remote Unauthorized Privileged Access, Arbitrar… (security-alert@...com)
[USN-286-1] Dia vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
Re: Microsoft Internet Explorer - Crash on mouse button click ("unknown user" <mac68k@...il.com>)
Re: Circumventing quarantine control in Windows 2003 and ISA 2004 ("Mark Senior" <senatorfrog@...il.com>)
Re: Sun single-CPU DOS ("Mike O'Connor" <mjo@...o.mi.org>)
Re: Destiney Rated Images Script v0.5.0 - XSS Vulnv (webmaster@...tiney.com)
AlstraSoft Web Host Directory v1.2 (luny@...fucktard.com)
Re: Checkpoint SYN DoS Vulnerability ("Niranjan S Patil" <niranjan.patil@...il.com>)
Publicist v0.95 - XSS And Full Path Errors (luny@...fucktard.com)
Re: Circumventing quarantine control in Windows 2003 and ISA 2004 (Andreas Beck <becka-list-bugtraq@...atec.de>)
Mambo <= 4.6. RC1 xss (rgod@...istici.org)
YLZH(right.php)Cross Site Scripting (Breeeeh@...mail.com)
Default Screen Saver Vulnerability in Microsoft Windows (susam.pal@...il.com)
Vodafone.de XSS Vulnerability (try_og@...mail.com)
NETGEAR WGR614 v6 Wireless DSL router information disclosure vulnerability (info@...mintell.com)
Re: How secure is software X? (Duncan Simpson <dps@...pson.demon.co.uk>)
Diesel Joke Site SQL INJECTION (a_linuxer@...oo.com)
Write-up by Amit Klein: "IE + some popular forward proxy servers = XSS, defacement (browser cache poisoning)" ("Amit Klein (AKsecurity)" <aksecurity@...pop.co…)
OpenCms version 6.0.x Xml Content Demo search engine Cross site scripting (jaime.blasco@...el.es)
[SECURITY] [DSA 1074-1] New mpg123 packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
Cisco Security Advisory: Windows VPN Client Local Privilege Escalation Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
[ MDKSA-2006:087 ] - Updated kernel packages fixes netfilter SNMP NAT memory corruption (security@...driva.com)
[ MDKSA-2006:088 ] - Updated hostapd package to address DoS vulnerability (security@...driva.com)
[ MDKSA-2006:089 ] - Updated kphone packages fixes permissions issue with .qt/kphonerc (security@...driva.com)
Re: Default Screen Saver Vulnerability in Microsoft Windows ("Eliah Kagan" <degeneracypressure@...il.com>)
Re: Default Screen Saver Vulnerability in Microsoft Windows (Ansgar -59cobalt- Wiechers <bugtraq@...netcobalt.net>)
[ MDKSA-2006:090 ] - Updated shadow-utils packages fix mailbox creation vulnerability (security@...driva.com)

May 25 (32 messages)

rPSA-2006-0080-1 postgresql postgresql-server ("Justin M. Forbes" <jmforbes@...th.com>)
Black Frog: next generation botnet. No generation spam fighting (Gadi Evron <ge@...uxbox.org>)
[ MDKSA-2006:091 ] - Updated php packages fix vulnerabilities (security@...driva.com)
VSR Advisory: PDF Tools AG - PDF Form Filling and Flattening Tool Buffer Overflow (advisories@...curity.com)
Re: Default Screen Saver Vulnerability in Microsoft Windows ("Jason V. Miller" <jmiller@...urityfocus.com>)
[CLOSED] SOE's implementation of Lithium Forums Software allows users to log on as each other. (support@...hium.com)
Re: mybb v1.1.1(rss.php) SQL Injection Exploit ("Steven M. Christey" <coley@...re.org>)
Kaspersky antivirus 6: POP3 state machine error (bug.registrator@...il.com)
phpFoX All Version Login Exploit (mx@...kmx.net)
Re: Re: [SECURITYREASON.COM] PhpNuke 7.6=>x Multiple vulnerabilities cXIb8O3.12 (phpnuke@...amazon.com)
AZ Photo Album Script Pro (luny@...fucktard.com)
RE: Microsoft Internet Explorer - Crash on mouse button click ("Jain, Siddhartha" <Siddhartha.Jain@...-tencor.com>)
Re: IpLogger <= 1.7 XSS (thrasher.basher@...il.com)
ChatPat v1.0 (luny@...fucktard.com)
A Nasty Security Bug that affect PGP Virtual Disks & PGP SDA , PGP 8.x & 9.x and Truecrypt. (thesinoda@...mail.com)
sql injection in phpWebSite 0.8.3 (help-users@...mail.com)
iFdate v1.2 (luny@...fucktard.com)
Realty Pro One Property Listing Script (luny@...fucktard.com)
Bulletin Board Elite-Board v.1.1 (luny@...fucktard.com)
GuestbookXL 1.3 (luny@...fucktard.com)
Re: Circumventing quarantine control in Windows 2003 and ISA 2004 ("Memet Anwar" <mmta.gm@...il.com>)
CMS Mundo V1.0 (luny@...fucktard.com)
Pre Shopping Mall v1.0 (luny@...fucktard.com)
[KAPDA::#44] - NewsCMSLite Login ByPass by Cookie (farhadkey@...oo.com)
Pre News Manager v1.0 (luny@...fucktard.com)
Drupal <= 4.7 attachment/mod_mime remote code execution (rgod@...istici.org)
RE: modules name(Sections)SQL Injection Exploit ("Evans, Arian" <Arian.Evans@...hnetsecurity.com>)
rPSA-2006-0082-1 vixie-cron ("Justin M. Forbes" <jmforbes@...th.com>)
rPSA-2006-0082-2 vixie-cron ("Justin M. Forbes" <jmforbes@...th.com>)
iFlance v1.1 (luny@...fucktard.com)
Hackernetwork Mail Xss[Search] Vulnerability (ajannhwt@...mail.com)
PostgreSQL security releases 8.1.4, 8.0.8, 7.4.13, 7.3.15 (PostgreSQL Security <security@...tgresql.org>)

May 26 (53 messages)

Wordpress <=2.0.2 'cache' shell injection (rgod@...istici.org)
ASLR now built into Vista ("David Litchfield" <davidl@...software.com>)
Re: ASLR now built into Vista (c0ntex <c0ntexb@...il.com>)
Graph analysis of stolen credit cards (Lance James <phishing@...urescience.net>)
Re: [General-discussion] Graph analysis of stolen credit cards (Lance James <phishing@...urescience.net>)
Re: [General-discussion] Graph analysis of stolen credit cards (Lance James <phishing@...urescience.net>)
Re: [General-discussion] Graph analysis of stolen credit cards (jm@...son.org (Justin Mason))
Re: Re: [General-discussion] Graph analysis of stolen credit cards (James Eaton-Lee <james.mailing@...il.com>)
Addendum ("ennead@...ecrypt.org" <ennead@...ecrypt.org>)
RE: A Nasty Security Bug that affect PGP Virtual Disks & PGP SDA , PGP 8.x & 9.x and Truecrypt. ("ennead@...ecrypt.org" <ennead@...ecrypt.org>)
TSLSA-2006-0030 - multi (Trustix Security Advisor <tsl@...stix.org>)
[SECURITY] [DSA 1076-1] New lynx packages fix denial of service (joey@...odrom.org (Martin Schulze))
[SECURITY] [DSA 1077-1] New lynx-ssl packages fix denial of service (joey@...odrom.org (Martin Schulze))
Re: [apwg] Graph analysis of stolen credit cards (glennhall@...coverfinancial.com)
Re: Destiney Rated Images Script v0.5.0 - XSS Vulnv ("Steven M. Christey" <coley@...re.org>)
V-Webmail 1.6.4 Remote File Include (beford <xbefordx@...il.com>)
[BuHa-Security] DoS Vulnerability in MS IE 6 SP2 (bugtraq@...ph3us.org)
Re: [apwg] Graph analysis of stolen credit cards (Lance James <phishing@...urescience.net>)
Re: Re: [General-discussion] Graph analysis of stolen credit cards (Lance James <phishing@...urescience.net>)
[BuHa-Security] MS06-013: HTML Tag Memory Corruption Vulnerability in MS IE 6 SP2 (bugtraq@...ph3us.org)
[SECURITY] [DSA 1075-1] New awstats packages fix arbitrary command execution (joey@...odrom.org (Martin Schulze))
Re: Kaspersky antivirus 6: POP3 state machine error (denisov_vit@...l.ru)
Re: Sun single-CPU DOS ("Mike O'Connor" <mjo@...o.mi.org>)
Re: Sun single-CPU DOS ("Mike O'Connor" <mjo@...o.mi.org>)
XSS in Omegasoft's Insel ("MC Iglo" <mc.iglo@...lan.de>)
Docebo LMS 2.05 Remote File Include (beford <xbefordx@...il.com>)
Re: A Nasty Security Bug that affect PGP Virtual Disks & PGP SDA , PGP 8.x & 9.x and Truecrypt. (3APA3A <3APA3A@...URITY.NNOV.RU>)
XSS in Monster Top List | MTL 1.4 (V8f3@...mail.com)
Easy-Content Forums 1.0 Multiple SQL/XSS Vulnerabilities (ajannhwt@...mail.com)
Toasts Forums 1.6.44 in Xss (ajannhwt@...mail.com)
phpjobboard Authecnical admin byPass (alp_eren@...ildiz.org)
qjForum(member.asp) SQL Injection Vulnerability (ajannhwt@...mail.com)
[MajorSecurity #6]Socketmail <= 2.2.6 - Remote File Include Vulnerability (admin@...orsecurity.de)
Tamber Forum <= 1.9.13 Multiple SQL Injection Vulnerabilities (ajannhwt@...mail.com)
my Web Server << v-1.0 Denial of Service Exploit (s3rv3r_hack3r@...oo.com)
Multiple XSS Vulnerabilities in Tikiwiki 1.9.x (blwood@...net.be)
Re[2]: ASLR now built into Vista (3APA3A <3APA3A@...URITY.NNOV.RU>)
RE: Realty Pro One Property Listing Script ("Krpata, Tyler" <tkrpata@....com>)
Re: [BuHa-Security] DoS Vulnerability in MS IE 6 SP2 ("ad@...poverflow.com" <ad@...poverflow.com>)
Plume CMS Remote File Include (beford <xbefordx@...il.com>)
rPSA-2006-0083-1 enscript ("Justin M. Forbes" <jmforbes@...th.com>)
PHPResidence <= 0.6 XSS (zerogue@...il.com)
PHP AGTC-Membership system <= v1.1a XSS (zerogue@...il.com)
ByteHoard <= 2.1 multiple vulnerabilities (zerogue@...il.com)
Assetman <= 2.4a XSS (zerogue@...il.com)
Easy-Content Forums 1.0 Multiple [SQL/XSS] Vulnerabilities (ajannhwt@...mail.com)
Re: Kaspersky antivirus 6: HTTP monitor bypassing (denisov_vit@...l.ru)
Re: PhpListPro 2.01 Remote File Include Vulnerability (not@...ilable.com)
Seditio Cross Site Scripting Vulnerability (mail@...usemreyilmaz.com)
Re: Sun single-CPU DOS (Doug Hughes <doug@....auburn.edu>)
Re: Microsoft Internet Explorer - Crash on mouse button click ("unknown user" <mac68k@...il.com>)
XSS Vulnerability on www.my6d.com Connection Work System (spymeta@...oo.com)
[OpenPKG-SA-2006.009] OpenPKG Security Advisory (binutils) (OpenPKG <openpkg@...npkg.org>)

May 27 (42 messages)

On the Recent PGP and Truecrypt Posting (jon@....com)
Re: Microsoft Internet Explorer - Crash on mouse button click ("unknown user" <mac68k@...il.com>)
Re: Kaspersky antivirus 6: HTTP monitor bypassing (dmitryp.spm@...il.com)
rPSA-2006-0084-1 fetchmail ("Justin M. Forbes" <jmforbes@...th.com>)
XSS Vulnerability on Vodafone (try_og@...mail.com)
iBoutique.MALL - Directory Traversal (luny@...fucktard.com)
PHPSimple Choose v0.3 (luny@...fucktard.com)
Super Link Exchange Script v1.0 (luny@...fucktard.com)
Vacation Retal Script v1.0 (luny@...fucktard.com)
Re: Microsoft Internet Explorer - Crash on mouse button click ("unknown user" <mac68k@...il.com>)
Re: Microsoft Internet Explorer - Crash on mouse button click (mac68k@...il.com)
MyYearBook.com - XSS (luny@...fucktard.com)
Pretty Guestbook v1 (luny@...fucktard.com)
Smile Guestbook v1 (luny@...fucktard.com)
Morris Guestbook v1 (luny@...fucktard.com)
Re: Wordpress <=2.0.2 'cache' shell injection (pokley <saleh@...n-associates.net>)
Re: A Nasty Security Bug that affect PGP Virtual Disks & PGP SDA , PGP 8.x & 9.x and Truecrypt. (Alexander Klimov <alserkli@...ox.ru>)
Re: RE: A Nasty Security Bug that affect PGP Virtual Disks & PGP SDA , PGP 8.x & 9.x and Truecrypt. (ahariri@...amand.edu.lb)
[ MDKSA-2006:092 ] - Updated mpg123 packages fix DoS vulnerability. (security@...driva.com)
LM hashes in a hot-desking environment (feedb4ck@...k.org)
Re: Sun single-CPU DOS (Doug Hughes <doug@....auburn.edu>)
Re: my Web Server << v-1.0 Denial of Service Exploit (str0ke <str0ke@...w0rm.com>)
Re: Re: [General-discussion] Graph analysis of stolen credit cards (James Eaton-Lee <james.mailing@...il.com>)
Re: ASLR now built into Vista (<0x80@...h.ai>)
cURL Safe Mode Bypass PHP 4.4.2 and 5.1.4 (cxib@...urityreason.com)
Wavecon Advisory: Open-Xchange <= 0.8.2 defaultuser with /bin/bash and default password (Cemil Degirmenci <cd@...econ.de>)
Symantec antivirus software exposes computers ("Michael Scheidell" <scheidell@...nap.net>)
InternerExplorer error: ECMAScript interpreter stack overflow (sehato@...dex.ru)
Critical sql injection in saphplesson 2.0 (black-cod3@...mail.com)
Re: LM hashes in a hot-desking environment (3APA3A <3APA3A@...URITY.NNOV.RU>)
Re: LM hashes in a hot-desking environment (Ansgar -59cobalt- Wiechers <bugtraq@...netcobalt.net>)
Xss exploit in Chipmunk guestbook (black-cod3@...mail.com)
Multiple Xss exploits in ar-blog v 5.2 (black-cod3@...mail.com)
sql injection in PHPcafe.net Tutorial Manager (black-cod3@...mail.com)
RE: LM hashes in a hot-desking environment ("Roger A. Grimes" <roger@...neretcs.com>)
Speedy ASP Forum(profileupdate.asp) User Pass Change Exploit (ajannhwt@...mail.com)
[SECURITY] [DSA 1078-1] New tiff packages fix denial of service (joey@...odrom.org (Martin Schulze))
D-Link DSA-3100 Cross-Site Scripting (jaime.blasco@...el.es)
Re: On the Recent PGP and Truecrypt Posting (John Pettitt <jpp@...udview.com>)
Proof of concept that PGP AUTHENTICATION CAN BE BYPASSED WITHOUT PATCHING (thesinoda@...mail.com)
RE: A Nasty Security Bug that affect PGP Virtual Disks & PGP SDA , PGP 8.x & 9.x and Truecrypt. (thesinoda@...mail.com)
RE: [security] A Nasty Security Bug that affect PGP Virtual Disks & PGP SDA , PGP 8.x & 9.x and Truecrypt. (phugo@...hspeedweb.net)

May 28 (11 messages)

Re: Re: A Nasty Security Bug that affect PGP Virtual Disks & PGP SDA , PGP 8.x & 9.x and Truecrypt. (visitbipin@...mail.com)
html Guest Gear (pieisgdvgd@...mail.co.uk)
Motion detectors and cell phones ("Aaron Lewis" <aaron-bLpy1SLQNwkGU2lDnPeEEw@...lic.gmane.org>)
Advisory: tinyBB <= 0.3 Multiple Remote Vulnerabilities. (Mustafa Can Bjorn IPEKCI <nukedx@...edx.com>)
Advisory: Enigma Haber <= 4.3 Multiple Remote SQL Injection Vulnerabilities (Mustafa Can Bjorn IPEKCI <nukedx@...edx.com>)
Advisory: F@...e Interactive Web <= 0.8x Multiple Remote Vulnerabilities. (Mustafa Can Bjorn IPEKCI <nukedx@...edx.com>)
Advisory: Eggblog <= 3.x Multiple Remote Vulnerabilities (Mustafa Can Bjorn IPEKCI <nukedx@...edx.com>)
Advisory: phpBB 2.x (admin/admin_hacks_list.php) Local Inclusion Vulnerability. (Mustafa Can Bjorn IPEKCI <nukedx@...edx.com>)
Advisory: phpBB 2.x (Activity MOD Plus) File Inclusion Vulnerability. (Mustafa Can Bjorn IPEKCI <nukedx@...edx.com>)
Advisory: ASPSitem <= 2.0 Multiple Vulnerabilities. (Mustafa Can Bjorn IPEKCI <nukedx@...edx.com>)
Advisory: UBBThreads 5.x, 6.x Multiple File Inclusion Vulnerabilities. (Mustafa Can Bjorn IPEKCI <nukedx@...edx.com>)

May 29 (28 messages)

Advisory: Blend Portal <= 1.2.0 for phpBB 2.x (blend_data/blend_common.php) File Inclusion Vulnerability (Mustafa Can Bjorn IPEKCI <nukedx@...edx.com>)
[USN-287-1] Nagios vulnerability (Martin Pitt <martin.pitt@...onical.com>)
[USN-288-1] PostgreSQL server/client vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
RE: Advisory: Blend Portal <= 1.2.0 for phpBB 2.x(blend_data/blend_common.php) File Inclusion Vulnerability ("austin best" <austin_inc@...mail.com>)
[SECURITY] [DSA 1079-1] New MySQL 4.0 packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
[SECURITY] [DSA 1080-1] New dovecot packages fix directory traversal (joey@...odrom.org (Steve Kemp))
[SECURITY] [DSA 1081-1] New libextractor packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
Buffer overflow in QuickTime 7.0.4? (John Richard Moser <nigelenki@...cast.net>)
Re: On the Recent PGP and Truecrypt Posting (Jon Callas <jon@....com>)
multiple file include exploits in EzUpload Pro v2.10 (black-cod3@...mail.com)
JAMES 2.2.0 <-- Denial Of Service (y3dips@...o.or.id)
Advisory: MiniNuke v2.x Multiple Remote Vulnerabilities (Mustafa Can Bjorn IPEKCI <nukedx@...edx.com>)
Advisory: ASPBB <= 0.52 (perform_search.asp) XSS vulnerability (Mustafa Can Bjorn IPEKCI <nukedx@...edx.com>)
RE: Advisory: Eggblog <= 3.x Multiple Remote Vulnerabilities ("Egg" <egg@...cdesigns.co.uk>)
VARIOMAT(advanced cms tool)SQL injection/XSS (CrAzY.CrAcKeR@...mail.com)
Xss exploit in Photoalbum B&W v1.3 (black-cod3@...mail.com)
[KAPDA::#45] - geeklog multiple vulnerabilities (alireza hassani <trueend5@...oo.com>)
UBBThreads 5.x,6.x md5 hash disclosure (chris@...ices.org)
Re: Proof of concept that PGP AUTHENTICATION CAN BE BYPASSED WITHOUT PATCHING (Andreas Beck <becka-list-bugtraq@...atec.de>)
Foing Remote File Include Vulnerability [PHPBB] (s3rv3r_hack3r@...oo.com)
New SMB and DCERPC features on Impacket released with doc (Gerardo Richarte <lists@...e-sdi.com>)
WikiNi Persistent Cross Site Scripting Vulnerability (raphael.huck@...e.fr)
[SECURITY] [DSA 1082-1] New Linux kernel 2.4.17 packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
Multiple Xss exploits in Chipmunk Board ("black code" <black-cod3@...mail.com>)
RE: Multiple Xss exploits in coolphp magazine ("black code" <black-cod3@...mail.com>)
multiple Xss exploits in : vCard 2.9 ("black code" <black-cod3@...mail.com>)
[KAPDA::#46] - Nukedit Unauthorized Admin Add (farhadkey@...da.ir)
Re: LM hashes in a hot-desking environment (The Little Prince <thelittleprince@...eroid-b612.org>)

May 30 (20 messages)

Backdoor in RelevantKnowledge adware (What are we fighting for?) (3APA3A <3APA3A@...URITY.NNOV.RU>)
[ GLSA 200605-16 ] CherryPy: Directory traversal vulnerability (Stefan Cornelius <dercorny@...too.org>)
Re: Backdoor in RelevantKnowledge adware (What are wefighting for?) ("Dave \"No, not that one\" Korn" <davek_throwaway@...mail.com>)
Jiwa Financials - Reporting allows execution of arbitrary reports as SQL user with full permissions. (Robert@...ait.com)
[ GLSA 200605-17 ] libTIFF: Multiple vulnerabilities (Stefan Cornelius <dercorny@...too.org>)
4nNukeWare<--V 0.91 SQL Injection exploits (CrAzY.CrAcKeR@...mail.com)
Re: On the Recent PGP and Truecrypt Posting (Jon Callas <jon@....com>)
phpMyDesktop|arcade 1.0 FINAL Code Execution (darkgod.xsf@...il.com)
Bratpack Cross Site Scripting Vulnerability (CrAzY.CrAcKeR@...mail.com)
NorthStudio Cross Site Scripting Vulnerability (CrAzY.CrAcKeR@...mail.com)
WBB<--v2.3.4"misc.php" SQL injection Vulnerability (CrAzY.CrAcKeR@...mail.com)
Re: On the Recent PGP and Truecrypt Posting (Andreas Beck <becka-list-bugtraq@...atec.de>)
OaBoard 1.0 Remote File inclusion (hessamx@...samx.net)
Fire fox dos exploit (co296@....com)
[ MDKSA-2006:093 ] - Updated dia packages fix string format vulnerabilities. (security@...driva.com)
WebCalendar-1.0.3 reading of any files (socsam@...uxmail.org)
Open Searchable Image Catalogue: XSS and SQL Injection Vulnerabilities (enji@...lab.tuwien.ac.at)
Re: [Info Disclosure] Diesel PHP Job Site Latest Version (support@...selscripts.com)
Re: V-Webmail 1.6.4 Remote File Include ("Ventsislav Genchev" <vigour1@...il.com>)
Xss exploit in Chipmunk directory ("black code" <black-cod3@...mail.com>)

May 31 (13 messages)

Re: Re[2]: The Weakness of Windows Impersonation Model (Cesar <cesarc56@...oo.com>)
pppBlog <= 0.3.8 administrative credentials/system disclosure (rgod@...istici.org)
# MHG Security Team --- PHP NUKE All version Remote File Inc. (erne@...ealizm.com)
Re: [Info Disclosure] Diesel PHP Job Site Latest Version (GulfTech Security Research <security@...ftech.org>)
QontentOneCMS v1.0 (luny@...fucktard.com)
[SECURITY] [DSA 1083-1] New motor packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
Re: Fire fox dos exploit (Josh Zlatin-Amishav <josh@...s.co.il>)
toendaCMS 0.7.0 Cross Site Scripting (kubasx@...il.com)
file include exploit in Support Cards v1 ("black code" <black-cod3@...mail.com>)
Secunia Research: Eserv/3 IMAP and HTTP Server Multiple Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: ZipCentral ZIP File Handling Buffer Overflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
rPSA-2006-0087-1 kernel ("Justin M. Forbes" <jmforbes@...th.com>)
New SecurityFocus mailing list: Focus-Apple (Marc Fossi <mfossi@...urityfocus.com>)

717 messages

Powered by blists - more mailing lists