bugtraq mailing list - 2006/06

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2006/06

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 12	² 39	³ 4	⁴ 18
⁵ 39	⁶ 27	⁷ 30	⁸ 39	⁹ 39	¹⁰ 27	¹¹ 7
¹² 34	¹³ 40	¹⁴ 52	¹⁵ 29	¹⁶ 18	¹⁷ 43	¹⁸ 12
¹⁹ 28	²⁰ 24	²¹ 11	²² 30	²³ 27	²⁴ 25	²⁵ 1
²⁶ 23	²⁷ 50	²⁸ 23	²⁹ 33	³⁰ 23

Messages by day:

June 1 (12 messages)

Re: New SecurityFocus mailing list: Focus-Apple (Marc Fossi <mfossi@...urityfocus.com>)
Re: Fire fox dos exploit (anoni.mouse@...il.com)
Internet explorer Vulnerbility (Mr.Niega@...il.com)
[SECURITY] [DSA 1084-1] New typespeed packages fix arbitrary code execution (skx@...ian.org (Steve Kemp))
[security bulletin] HPSBUX02122 SSRT061158 rev.1 - HP-UX Mozilla Remote Execution of Arbitrary Code, Denial of Service (DoS) (security-alert@...com)
SUSE Security Announcement: rug (SUSE-SA:2006:029) (Thomas Biege <thomas@...e.de>)
SyScan'06 - The Hackers' Conference in Asia (thomas48 <thomas48@...gnet.com.sg>)
Fwd: hi! (you might help) ("ßµªSKãR †|wãri" <ebhakt@...il.com>)
rPSA-2006-0089-1 mysql mysql-bench mysql-server ("Justin M. Forbes" <jmforbes@...th.com>)
multiple file inclusion exploits in ovidentia v5.8.0 ("black code" <black-cod3@...mail.com>)
FreeBSD Security Advisory FreeBSD-SA-06:16.smbfs (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-06:15.ypserv (FreeBSD Security Advisories <security-advisories@...ebsd.org>)

June 2 (39 messages)

multiple file inclusion exploits in ovidentia v5.8.0 (black-cod3@...mail.com)
ishopcart cgi 0day and multiple vulnerabilities (bugtraq@....gov)
TAL RateMyPic v1.0 (luny@...fucktard.com)
Snort HTTP Inspect Pre-Processor Uricontent Bypass ("Christian Swartzbaugh" <feofil@...il.com>)
Squirrelmail local file inclusion (brokejunker@...oo.com)
VMSA-2006-0001 - VMware ESX Server Cross Site Scripting issue (VMware Security Team <security@...are.com>)
Joomla/Mambo CMS Component SimpleBoard 1.1 XSS-Vulnerabilities (Yannick von Arx <yannick.vonarx@...ux.ch>)
[SECURITY] [DSA 1085-1] New lynx-cur packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
Re: Internet explorer Vulnerbility (Alexander Sotirov <asotirov@...ermina.com>)
Corsaire Security Advisory - VMware ESX Server Cross Site Scripting issue ("advisories" <advisories@...saire.com>)
Re: # MHG Security Team --- PHP NUKE All version Remote File Inc. (rgod@...istici.org)
[ MDKSA-2006:094 ] - Updated evolution packages fix DoS (crash) vulnerability on certain messages. (security@...driva.com)
CA Forum Remote SQL Injection (omnipresent@...il.it)
Forensic memory dumping intricacies - PhysicalMemory, DD, and caching issues (Arne Vidstrom <arne.vidstrom@...ecurity.nu>)
RE: Internet explorer Vulnerbility ("Peter Kruse" <kruse@...sesecurity.dk>)
VMSA-2006-0002 - VMware Server sensitive information lifetime issue (VMware Security Team <security@...are.com>)
New Snort Bypass - Patch - Bypass of Patch (Sigint Consulting <info@...int-consulting.com>)
Re: PHPSimple Choose v0.3 (prattmic@...il.com)
northstudio Cross Site Scripting Vulnerability (CrAzY.CrAcKeR@...mail.com)
Re: [SECURITY] [DSA 1085-1] New lynx-cur packages fix several vulnerabilities (Thomas Dickey <dickey@...ix.net>)
SMF 1.0.7 and lower plus 1.1rc2 and lower - IP spoofing vulnerability/IP ban evasion vulnerability ("Jessica Hope" <jessicasaulhope@...glemail.com>)
Re: my Web Server << v-1.0 Denial of Service Exploit ("Steven M. Christey" <coley@...re.org>)
Re: Re: # MHG Security Team --- PHP NUKE All version Remote File Inc. (nukedx@...edx.com)
Weblog Oggi v1.0 (luny@...fucktard.com)
PHP ManualMaker v1.0 (luny@...fucktard.com)
Bytehoard 2.1 Remote File Include (beford <xbefordx@...il.com>)
Re: Jiwa Financials - Reporting allows execution of arbitrary reports as SQL user with full permissions. (mikes@...a.com.au)
newsfactory Cross Site Scripting & SQL injection (CrAzY.CrAcKeR@...mail.com)
Re: Squirrelmail local file inclusion (Paul Schmehl <pauls@...allas.edu>)
[DRUPAL-SA-2006-005] Drupal 4.6.7 / 4.7.1 fixes SQL injection issue (Uwe Hermann <uwe@...mann-uwe.de>)
[DRUPAL-SA-2006-006] Drupal 4.6.7 / 4.7.1 fixes arbitrary file execution issue (Uwe Hermann <uwe@...mann-uwe.de>)
[DRUPAL-SA-2006-007] Drupal 4.6.8 / 4.7.2 fixes arbitrary file execution issue (Uwe Hermann <uwe@...mann-uwe.de>)
[DRUPAL-SA-2006-008] Drupal 4.6.8 / 4.7.2 fixes XSS issue (Uwe Hermann <uwe@...mann-uwe.de>)
Redaxo CMS <= 3.2 Remote File Include (beford <xbefordx@...il.com>)
aspWebLinks 2.0 Remote SQL Injection / Admin Pass Change Exploit (ajannhwt@...mail.com)
rPSA-2006-0091-1 firefox thunderbird ("Justin M. Forbes" <jmforbes@...th.com>)
MyTrueHood.com - XSS (luny@...fucktard.com)
[SECURITY] [DSA 1086-1] New xmcd packages fix denial of service (joey@...odrom.org (Martin Schulze))
new bug (webmaster@...team.com)

June 3 (4 messages)

Pro Publish SQL Injection and XSS Vulnerabilities (Soothackers@...il.com)
# MHG Security Team --- MyBloggie 2.1.1 version Remote File Include Vulnerabilit ("erne ayaz" <beceriksiz1986@...mail.com>)
Re: Re: # MHG Security Team --- PHP NUKE All version Remote File Inc. ("Steven M. Christey" <coley@...re.org>)
Re: New Snort Bypass - Patch - Bypass of Patch ("M. Dodge Mumford" <dodge@....net>)

June 4 (18 messages)

Re: New Snort Bypass - Patch - Bypass of Patch (Sigint Consulting <info@...int-consulting.com>)
Client buffer-overflow in Quake 3 engine (1.32c / rev 795) (Luigi Auriemma <aluigi@...istici.org>)
Re: bug in oscomerce (Frank Laszlo <laszlof@...ostingroup.com>)
Multiple Vendor NTFS Data Stream Malware Stealth Technique (Joxean Koret <joxeankoret@...oo.es>)
Pixelpost <= 1-5rc1-2 multiple vulnerabilities (rgod@...istici.org)
[SECURITY] [DSA 1087-1] New PostgreSQL packages fix encoding vulnerabilities (joey@...odrom.org (Martin Schulze))
[ECHO_ADV_32$2006] SCart 2.0 Remote Code Execution (eufrato@...il.com)
Critical SQL Injection in CoolForum (gmdarkfig@...il.com)
[SECURITY] [DSA 1088-1] New centericq packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
Blackhat USA 2006 - Review , remarks and proposal agenda ("newslist@...urity-briefings.com" <newslist@...urity-briefings.com>)
Re: # MHG Security Team --- MyBloggie 2.1.1 version Remote File Include Vulnerabilit (nukedx@...edx.com)
LocazoList Classifieds <= v1.05e(viewmsg.asp) Remote SQL Injection Vulnerability (ajannhwt@...mail.com)
phpBB2 (template.php) Remote File Inclusion (canberx@...uxmail.org)
[MajorSecurity #7]dotWidget CMS <= 1.0.6 - Remote File Include Vulnerability (admin@...orsecurity.de)
[SECURITY] [DSA 1089-1] New freeradius packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
Re: New Snort Bypass - Patch - Bypass of Patch ("M. Dodge Mumford" <dodge@....net>)
DotClear <= 1.2.4 'blog_dc_path' (php5) arbitrary remote inclusion (rgod@...istici.org)
LifeType <=1.0.4 'articleId' SQL injection (rgod@...istici.org)

June 5 (39 messages)

Re: WBB<--v2.3.4"misc.php" SQL injection Vulnerability (nukedx@...edx.com)
Re: OaBoard 1.0 Remote File inclusion ("Botan Rizgar" <botan@...uxmail.org>)
Re: [Info Disclosure] Diesel PHP Job Site Latest Version (John F Flynn III <flynnj@...fiu.edu>)
Re: Fire fox dos exploit (pagvac <unknown.pentester@...il.com>)
RE: Fire fox dos exploit ("Andy" <andy@....uk.com>)
Re: Fire fox dos exploit (Ronald van den Blink <ronald@...urityview.org>)
Re: Fire fox dos exploit (Yannick von Arx <yannick.vonarx@...ux.ch>)
Re: Re: Fire fox dos exploit (vincenzo.ampolo@...il.com)
Re: Fire fox dos exploit (Phil Trainor <ptrainor@...erfectnetworks.com>)
Re: Internet explorer Vulnerbility ("Hariharan" <harij22@...il.com>)
Re: phpFoX All Version Login Exploit (purefan@...fox.com)
Re: Fire fox dos exploit (Ronald van den Blink <ronald@...urityview.org>)
Re: Fire fox dos exploit (Aaron Hopkins <lists@....net>)
Timberland Search XSS Vulnerability (try_og@...mail.com)
New <<BackTrack release announcement ("Max Moser" <max.moser@...il.com>)
SMS "messages.php" SQL injection (CrAzY.CrAcKeR@...mail.com)
XSS in ICQ.com (sn4k3.23@...il.com)
Advisory 04/2006: DokuWiki PHP code execution vulnerability in spellchecker (Stefan Esser <sesser@...dened-php.net>)
Bookmark4U Remote File Include (selfar2002@...mail.com)
# MHG Security Team ---Rumble 1.02 version Remote File Inc. (erne@...ealizm.com)
# MHG Security Team ---Rumble 1.02 version Remote File Inc. ("MSN : erne [at] ernealizm [dot] com" <beceriksiz1986@...mail.com>)
CyBoards PHP Lite v1.25 (common.PHP) Remote File Inclusion (SpC-x@...mail.Org)
RE: phpBB2 (template.php) Remote File Inclusion ("Scrouaf _" <scrouaf@...mail.com>)
LabWiki v1.0 (luny@...fucktard.com)
Kmita FAQ v1.0 (luny@...fucktard.com)
RE: Fire fox dos exploit (Sanjay Rawat <sanjayr@...oto.com>)
TSLSA-2006-0032 - multi (Trustix Security Advisor <tsl@...stix.org>)
LocazoList Classifieds <= v1.05e(viewmsg.asp) Remote SQL Injection Vulnerability (ajannhwt@...mail.com)
FunkBoard CF0.71 (profile.php) Remote User Pass Change Exploit (ajannhwt@...mail.com)
ewsEngine <= 1.5.0(newscomments.php) Remote SQL Injection Vulnerability (ajannhwt@...mail.com)
Re: [Full Disclosure] [Kil13r-SA-20060520] Microsoft Internet Explorer Crash Vulnerability (mac68k@...il.com)
[MajorSecurity #8]DreamAccount <= 3.1 - Remote File Include Vulnerability (admin@...orsecurity.de)
[MajorSecurity #9]HostAdmin <= 3.1 - Remote File Include Vulnerability (admin@...orsecurity.de)
Re: phpBB2 (template.php) Remote File Inclusion ("ad@...poverflow.com" <ad@...poverflow.com>)
Personal Information Disclosure/Account Hijacking Vulerability in mafia online games (Ulrich Keil <securityfocus@...-keiler.de>)
Dmx Forum <= v2.1a Remote Passwords Disclosure (gmdarkfig@...il.com)
Re: New Snort Bypass - Patch - Bypass of Patch ("Pukhraj Singh" <pukhraj.singh@...il.com>)
[Kil13r-SA-20060605] Syworks SafeNET Policy File Vulnerability (mac68k@...il.com)
[Kil13r-SA-20060606] ESTsoft InternetDISK Arbitary Code Execution Vulnerability (mac68k@...il.com)

June 6 (27 messages)

Re: New Snort Bypass - Patch - Bypass of Patch ("Pukhraj Singh" <pukhraj.singh@...il.com>)
[KAPDA::#47] - myNewsletter 1.1.2 SQL_Injection (farhadkey@...oo.com)
Re: [Full-disclosure] RealVNC 4.1.1 Remote Compromise (Tobias Kreidl <Tobias.Kreidl@....EDU>)
Re: Bookmark4U Remote File Include (str0ke <str0ke@...w0rm.com>)
ASPScriptz Guest Book 2.0 XSS (omnipresent@...il.it)
Re: PCPIN Chat <= 5.0.4 "login/language" remote cmmnds xctn (k.reznichak@...in.com)
Re: Multiple Vendor NTFS Data Stream Malware Stealth Technique (Andreas Marx <gega-it@....de>)
WH'06 Call for papers ("Francisco Caballero" <mitrein@...il.com>)
file include in Xtreme Downloads v.1.0 (gamr-14@...mail.com)
Re: phpBB2 (template.php) Remote File Inclusion ("Jessica Hope" <jessicasaulhope@...glemail.com>)
Multiple file include exploits in Xtreme Downloads v.1.0 ("black code" <black-cod3@...mail.com>)
Re: [Full-disclosure] RealVNC 4.1.1 Remote Compromise ("Kurt Seifried" <bt@...fried.org>)
Particle Gallery v1.0.0 (luny@...fucktard.com)
Partial Links v1.2.2 (luny@...fucktard.com)
ParticleSoft Whois v1.0.3 (luny@...fucktard.com)
Re: phpBB2 (template.php) Remote File Inclusion ("Aaron Klein" <klein.aaron@...il.com>)
ParticleSoft Wiki v1.0.2 (luny@...fucktard.com)
[ MDKSA-2006:095 ] - Updated libtiff packages fixes tiffsplit vulnerability (security@...driva.com)
Re: phpBB2 (template.php) Remote File Inclusion (Paul Laudanski <zx@...tlecops.com>)
Re: # MHG Security Team --- MyBloggie 2.1.1 version Remote File Include Vulnerabilit ("Steven M. Christey" <coley@...re.org>)
GANTTy v1.0.3 (luny@...fucktard.com)
Asterisk 1.2.9 and Asterisk 1.0.11 Released - Security Fix ("Matt Riddell (IT)" <matt.riddell@...eapps.com>)
IRM 019: MailMarshal 6.1 SMTP MTA Content Filter Bypass ("IRM Advisories" <advisories@...plc.com>)
[SECURITY] [DSA 1090-1] New spamassassin packages fix remote command execution (joey@...odrom.org (Martin Schulze))
libgd 2.0.33 infinite loop in GIF decoding ? (rocheml@...rack.com)
Re: [MajorSecurity #8]DreamAccount <= 3.1 - Remote File Include Vulnerability (admin@...orsecurity.de)
Re: Squirrelmail local file inclusion ("Steven M. Christey" <coley@...re.org>)

June 7 (30 messages)

[FLSA-2006:189137-1] Updated mozilla packages fix security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
[FLSA-2006:189137-2] Updated firefox package fixes security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
[FLSA-2006:190777] Updated X.org packages fix security issue (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
[FLSA-2006:190884] Updated squirrelmail package fixes security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
[FLSA-2006:190941] Updated ipsec-tools package fixes security issue (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
[HV-LOW] Microsoft NetMeeting memory corruption (Brief) (vuln@...view.com)
[ GLSA 200606-01 ] Opera: Buffer overflow (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[ GLSA 200606-02 ] shadow: Privilege escalation (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
RE: Fire fox dos exploit (Jaroslaw Sajko <sloik@...areal.net>)
Re: Buffer-overflow and crash in Fenice OMS 1.10 (giampaolo.mancini@...ito.it)
bug on showwich.asp (ip.chat@...oo.com)
BloggIT <= 1.01 (admin.php) Arbitrary code execution (Federico Fazzi <federico@...istici.org>)
TinyPHP forum <= 3.6 Remote Command Execution Exploit (hessamx@...samx.net)
Re: [Full-disclosure] RealVNC 4.1.1 Remote Compromise (Ray Van Dolson <rayvd@...italpath.net>)
Re: Re: Fire fox dos exploit (al4321@...il.com)
[ GLSA 200606-03 ] Dia: Format string vulnerabilities (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Re: WebCalendar-1.0.3 reading of any files (craig@....us)
[ GLSA 200606-04 ] Tor: Several vulnerabilities (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Re: [Info Disclosure] Diesel PHP Job Site Latest Version (Ronald van den Blink <ronald@...urityview.org>)
XSS on LarkinWEB & Company (spymeta@...oo.com)
rPSA-2006-0096-1 spamassassin ("Justin M. Forbes" <jmforbes@...th.com>)
[ GLSA 200606-05 ] Pound: HTTP request smuggling (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Re: Squirrelmail local file inclusion (pauls@...allas.edu)
ADVISORY - D-Link Wireless Access-Point (news@...urityopensource.org.br)
[ GLSA 200606-06 ] AWStats: Remote execution of arbitrary code (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Re: XSS in ICQ.com (321_321@...l.ru)
Vice Stats 0.5b SQL injection (CrAzY.CrAcKeR@...mail.com)
Re: XSS in ICQ.com (321_321@...l.ru)
Re: IRM 019: MailMarshal 6.1 SMTP MTA Content Filter Bypass (phil.mccracken@...chickswithglamourshots.com)
MyBB 1.1.2 New XSS (o.y.6@...mail.com)

June 8 (39 messages)

aWebNews <= 1.0 (login.php) Remote DocumentRoot file disclosure (Federico Fazzi <federico@...istici.org>)
MiraksGalerie <= 2.62 Multiple Remote command execution (Federico Fazzi <federico@...istici.org>)
Re: XSS in ICQ.com (321_321@...l.ru)
Re: [Full-disclosure] RealVNC 4.1.1 Remote Compromise ("Bojan Zdrnja" <bojan.zdrnja@...il.com>)
[USN-289-1] tiff vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
Calendar Express 2 SQL injection (CrAzY.CrAcKeR@...mail.com)
[USN-291-1] FreeType vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
rPSA-2006-0098-1 gdm ("Justin M. Forbes" <jmforbes@...th.com>)
[ MDKSA-2006:096 ] - Updated openldap packages fixes buffer overflow vulnerability. (security@...driva.com)
[ MDKSA-2006:097 ] - Updated MySQL packages fixes SQL injection vulnerability. (security@...driva.com)
PBL Guestbook v1.31 - XSS (luny@...fucktard.com)
[ MDKSA-2006:098 ] - Updated postgresql packages fixes SQL injection vulnerabilities. (security@...driva.com)
Mafia Moblog Full Path Disclosure / SQL injection (simo64@...il.com)
Babykatmedia.com scripts - vSCAL & vREAL - XSS Vulns (luny@...fucktard.com)
Chemical Directory - XSS (luny@...fucktard.com)
Easy Ad-Manager (luny@...fucktard.com)
[NOBYTES.COM: #12] ViArt Shop v2.5.5 - XSS Vulnerability ("John Cobb" <johnc@...ytes.com>)
MiraksGalerie <= 2.62 Multiple Remote command execution (Federico Fazzi <federico@...istici.org>)
E-Dating System from scriptsez.net - XSS (luny@...fucktard.com)
[MajorSecurity #10]i.List <= 1.5 - XSS (admin@...orsecurity.de)
Ez Ringtone Manager from scriptez.net - XSS (luny@...fucktard.com)
GUESTEX guestbook code execution (root <root@...iroz.net>)
[SECURITY] [DSA 1093-1] New xine-ui packages fix denial of service (joey@...odrom.org (Martin Schulze))
cms-bandits 2.5, Remote command execution (Federico Fazzi <federico@...istici.org>)
Tikiwiki 1.9.3.2 security release (marc@...claporte.com)
Re: aWebNews <= 1.0 (login.php) Remote DocumentRoot file disclosure (str0ke <str0ke@...w0rm.com>)
Internet Explorer vulnerbility (Mr.Niega@...il.com)
Uninformed Journal Release Announcement: Volume 4 (Uninformed Journal <sflist@...italoffense.net>)
Mathcad Area Lock Vulnerability (bugtraq@...ewraith.co.uk)
NPDS <= 5.10 Local Inclusion, XSS, Full path disclosure (gmdarkfig@...il.com)
Back-end = 0.7.2.1 (jpcache.php) Remote command execution (Federico Fazzi <federico@...istici.org>)
PHP-Nuke <= 7.9 Search XSS Vulnerability (try_og@...mail.com)
SSL VPNs and security (Michal Zalewski <lcamtuf@...ne.ids.pl>)
[SECURITY] [DSA 1091-1] New TIFF packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
Re: phpBannerExchange 2.0 Directory Traversal Vulnerability (mopeygoff@...il.com)
bug of script injection in shoutcast servers (mantasjadzevicius@...ro.lt)
Re: IRM 019: MailMarshal 6.1 SMTP MTA Content Filter Bypass ("Hayden Searle" <hayden.searle@...ecom.co.nz>)
Re: Tiny Web Gallery <= 1.4 XSS (tinywebgallery@...mpfle.de)
Ie opera dos exploit (co296@....com)

June 9 (39 messages)

'Multiple Sql injection and XSS in integramod portal (ahwaz@...iran.com)
Re: Multiple Vendor NTFS Data Stream Malware Stealth Technique (Gadi Evron <ge@...uxbox.org>)
[SECURITY] [DSA 1092-1] New MySQL 4.1 packages fix SQL injection (joey@...odrom.org (Martin Schulze))
Re: [Full-disclosure] RealVNC 4.1.1 Remote Compromise (Jose Ramirez <jose.ramirez@...et.com.mx>)
[security bulletin] HPSBMA02121 SSRT061157 rev.2 - HP OpenView Storage Data Protector Remote Arbitrary Command Execution (security-alert@...com)
[security bulletin] HPSBUX02090 SSRT051058 rev.2 - HP-UX Secure Shell Remote Denial of Service (DoS) (security-alert@...com)
Re: SSL VPNs and security (Michal Zalewski <lcamtuf@...ne.ids.pl>)
[USN-288-2] PostgreSQL server/client vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
Windows Software Restriction Policy Protection Bypass (3APA3A <3APA3A@...URITY.NNOV.RU>)
Docebo CMS 3.0.3, Remote command execution (Federico Fazzi <federico@...istici.org>)
Re: SSL VPNs and security ("E Mintz" <net4n6@...il.com>)
Re: SSL VPNs and security ("E Mintz" <net4n6@...il.com>)
Re: SSL VPNs and security (<wnorth@...izon.net>)
[USN-293-1] gdm vulnerability (Martin Pitt <martin.pitt@...onical.com>)
[USN-292-1] binutils vulnerability (Martin Pitt <martin.pitt@...onical.com>)
[USN-288-3] PostgreSQL client vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
[USN-294-1] courier vulnerability (Martin Pitt <martin.pitt@...onical.com>)
[USN-295-1] xine-lib vulnerability (Martin Pitt <martin.pitt@...onical.com>)
Re: Windows Software Restriction Policy Protection Bypass ("Dinis Cruz" <dinis.cruz@...glemail.com>)
[USN-296-1] firefox vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
Re: SSL VPNs and security ("Amit Klein (AKsecurity)" <aksecurity@...pop.com>)
[ GLSA 200606-07 ] Vixie Cron: Privilege Escalation (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[SECURITY] [DSA 1094-1] New gforge packages fix cross-site scripting (Moritz Muehlenhoff <jmm@...ian.org>)
okscripts.com - XSS Vulns (luny@...fucktard.com)
Dell Openmanage CD Vulnerability (wiz561@...il.com)
iFoto v0.20-06/06/06 (luny@...fucktard.com)
phazizGuestbook v2.0 - XSS (luny@...fucktard.com)
Re: PHP-Nuke <= 7.9 Search XSS Vulnerability (try_og@...mail.com)
Docebo Core 3.0.3, Remote command execution (Federico Fazzi <federico@...istici.org>)
Re: libgd 2.0.33 infinite loop in GIF decoding ? (Xavier Roche <rocheml@...rack.com>)
mole.com.ua Booking Script (luny@...fucktard.com)
mole.com.ua Ticket Booking Script - XSS (luny@...fucktard.com)
Docebo Kms 3.0.3, Remote command execution (Federico Fazzi <federico@...istici.org>)
MobeSpace v2.0 - XSS (luny@...fucktard.com)
rPSA-2006-0099-1 openldap openldap-clients openldap-servers ("Justin M. Forbes" <jmforbes@...th.com>)
Docebo Lms 3.0.3, Remote command execution (Federico Fazzi <federico@...istici.org>)
[ GLSA 200606-08 ] WordPress: Arbitrary command execution (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Re: DGbook v1.0 - XSS (diangemilang@...il.com)
Secunia Research: SelectaPix Cross-Site Scripting and SQL Injection Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)

June 10 (27 messages)

Secunia Research: AutoMate unacev2.dll Buffer Overflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
TinyMuw v1.0 - XSS (luny@...fucktard.com)
PHP-Nuke Download Module Remote SQL Injection (BuNy-m@...mail.com)
CORE-2006-0327: IAXclient truncated frames vulnerabilities (Core Security Technologies advisories <advisories@...esecurity.com>)
Contensis CMS XSS vunerability (smigofthedump@...oo.com)
Re: IRM 019: MailMarshal 6.1 SMTP MTA Content Filter Bypass (alberto <albertodiaz@...cali.co.uk>)
RE: Windows Software Restriction Policy Protection Bypass ("Roger A. Grimes" <roger@...neretcs.com>)
P.A.I.D v2.2 (luny@...fucktard.com)
ST AdManager Lite v1 (luny@...fucktard.com)
0verkill 0.6, Remote integer overflow (Federico Fazzi <federico@...istici.org>)
TSLSA-2006-0034 - multi (Trustix Security Advisor <tsl@...stix.org>)
[Kil13r-SA-20060609-1] Daum Search Cross-Site Scripting Vulnerability (mac68k@...il.com)
[Kil13r-SA-20060609-2] DaNaWa Search Cross-Site Scripting Vulnerability (mac68k@...il.com)
[Kil13r-SA-20060609-3] DreamWiz Search Cross-Site Scripting Vulnerability (mac68k@...il.com)
CORE-2006-0330: Asterisk PBX truncated video frame vulnerability (Core Security Technologies advisories <advisories@...esecurity.com>)
[SECURITY] [DSA 1095-1] New freetype packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
Ringlink v3.2 - XSS (luny@...fucktard.com)
fx-APP Version 0.0.8.1 (luny@...fucktard.com)
AsianXO.com - XSS with cookie data include (luny@...fucktard.com)
Tempinbox.com (luny@...fucktard.com)
ERRATA: [ GLSA 200604-10 ] zgv: Heap overflow (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[MajorSecurity #11]OpenCMS<= 6.2.1 - XSS (admin@...orsecurity.de)
[MajorSecurity #13]Cabacos Web CMS<= 3.8 - XSS (admin@...orsecurity.de)
[MajorSecurity #14]CFXe-CMS <= 2.0 - XSS (admin@...orsecurity.de)
Joomla! 1.0 Remote File Inclusion (c4nberx@...il.com)
[MajorSecurity #12]ZMS<= 2.9 - XSS (admin@...orsecurity.de)
[KAPDA::#47] - Snitz Forum <= 3.4.05 SQL-Injection Vulnerability (farhadkey@...oo.com)

June 11 (7 messages)

NTFS Streams rootkit? (Gadi Evron <ge@...uxbox.org>)
[ GLSA 200606-09 ] SpamAssassin: Execution of arbitrary code (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[ GLSA 200606-10 ] Cscope: Many buffer overflows (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[ GLSA 200606-11 ] JPEG library: Denial of Service (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[ GLSA 200606-12 ] Mozilla Firefox: Multiple vulnerabilities (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[ GLSA 200606-13 ] MySQL: SQL Injection (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Call For Papers - No cON Name 2006 Edition Spain (Jose Nicolas Castellano <jncastellano@...onname.org>)

June 12 (34 messages)

igloo DoubleSpeak v 0.1 Multiple remote file inclusion (aminrayden@...oo.com)
Diaryland.com - XSS (luny@...fucktard.com)
Mydeardiary.com - XSS (luny@...fucktard.com)
5 Star Review - review-script.com - XSS w/ cookie output (luny@...fucktard.com)
Secunia Research: MyBB "domecode()" PHP Code Execution Vulnerability (Secunia Research <vuln-remove@...unia.com>)
Lycos.com - XSS vulnerability (admin@...orsecurity.de)
Re: iFoto v0.20-06/06/06 (aizu.ikmal@...il.com)
Hotbot.com - XSS vulnerability in search engine (admin@...orsecurity.de)
vbulletin.com Multiple XSS Vulnerabilities (chris@...ices.org)
WinSCP - URI Handler Command Switch Parsing (Jelmer Kuperus <jkuperus@...net.nl>)
RCblog 1.03 Directory Traversal [index.php] (irc0d3r@...oo.com)
CS-Forum <= 0.81 Cross Site Scripting, SQL Injection, Full Path Disclosure (gmdarkfig@...il.com)
tempnam() Bypass unique file name PHP 5.1.4 (cxib@...urityreason.com)
Wanderlist.com - XSS vuln with sessions disclosure (luny@...fucktard.com)
Myscrapbook v3.1 - XSS (luny@...fucktard.com)
rPSA-2006-0100-1 freetype ("Justin M. Forbes" <jmforbes@...th.com>)
PaintedOver.com, Inc. 2004-2006 Xss Vulnerabilities (redl_ine@...mail.com)
[KAPDA::48]CopperminePhotoGallery1.4.8~ addhit() function~ SQLinjection attack (addmimistrator@...il.com)
Opengaia.com - XSS Vuln & Session Include (luny@...fucktard.com)
Foing (manage_songs.php) Remote File Inclusion[phpBB] (darkfire@...elive.zzn.com)
sorry i wrong something, this is original AWF CMS 1.11 adv (Federico Fazzi <federico@...istici.org>)
Wireclub.com - XSS & cookie disclosure (luny@...fucktard.com)
Nowtalking.com - XSS (luny@...fucktard.com)
cescripts.com - XSS (luny@...fucktard.com)
ThWboard 3.0 <= SQL Injection (666@...l.de.tk)
Windows XP Task Scheduler Local Privilege Escalation (Advisory) (zipk0der <zipk0der@...dora-security.com>)
Stargazer.org - XSS with Session output (luny@...fucktard.com)
[ GLSA 200606-14 ] GDM: Privilege escalation (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Re: igloo DoubleSpeak v 0.1 Multiple remote file inclusion (str0ke <str0ke@...w0rm.com>)
Virtualtourist.com - XSS with cookie disclosure (luny@...fucktard.com)
[ MDKSA-2006:099 ] - Updated freetype2 packages fixes multiple vulnerabilities. (security@...driva.com)
RE: Internet Explorer vulnerbility ("Greg Merideth (Forward Technology)" <gmerideth@...wardtechnology.net>)
myPHP Guestbook 2.0.2 XSS Vulnerabilitie (x0r_1@...mail.de)
Re: SSL VPNs and security (thanekamp@...mail.com)

June 13 (40 messages)

Flork.com (luny@...fucktard.com)
[EEYEB-20060524] Symantec Remote Management Stack Buffer Overflow ("eEye Advisories" <Advisories@...e.com>)
Vampirefreaks.com - XSS with cookie disclosure (luny@...fucktard.com)
# MHG Security Team --- PHORUM 5.1.13 Remote File Inc. (erne@...ealizm.com)
Meefo.com - XSS with cookie include (luny@...fucktard.com)
Onlinenode.com - XSS (luny@...fucktard.com)
Re: Internet Explorer vulnerbility (Andrei Ponomarev <iceman@...meaonline.net>)
ZoneEdit.com Forcing Pop-Unders on WebForward-Configured Domains (Jason Coombs <jasonc@...ence.org>)
Yourfacesucks.com - XSS & cookie disclosure (luny@...fucktard.com)
Blackplanet.com - XSS & cookie disclosure vuln. (luny@...fucktard.com)
Re: Ie opera dos exploit (Daniel Hoffmann <daniel@...pel.nerdcamp.net>)
Invision Power Board XSS (kepche@....com)
Re: Windows XP Task Scheduler Local Privilege Escalation (Advisory) ("Eliah Kagan" <degeneracypressure@...il.com>)
Re: Internet Explorer vulnerbility ("Michael N. Telnov" <Telnov_MN@...s.region.tambov.ru>)
internet explorer vulnerability based on MarjinZ & Mr.Niega discovered (Kevin Berkane <kberkane@...o-montevideo.org>)
[FSA013] phpCMS 1.2.1pl2, Remote command execution (Federico Fazzi <federico@...istici.org>)
Emllabs.com - XSS (luny@...fucktard.com)
Content-Builder (CMS) 0.7.5, Remote command execution (Federico Fazzi <federico@...istici.org>)
DCP-Portal 6.1.x, Remote command execution (Federico Fazzi <federico@...istici.org>)
Re: BUGTRAQ:20060611 ThWboard 3.0 <= SQL Injection ("Steven M. Christey" <coley@...re.org>)
VBZooM <<-- V1.11 "show.php" SQL injection (CrAzY.CrAcKeR@...mail.com)
VBZooM <<--V1.02 "meaning.php" SQL injection (CrAzY.CrAcKeR@...mail.com)
Re: SSL VPNs and security (Michal Zalewski <lcamtuf@...ne.ids.pl>)
VBZooM <<--V1.11 "subject.php" SQL injection (CrAzY.CrAcKeR@...mail.com)
[SECURITY] [DSA 1096-1] New webcalendar packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
VBZooM <<--V1.01 "language.php" SQL injection (CrAzY.CrAcKeR@...mail.com)
iDefense Security Advisory 06.13.06: Windows Media Player PNG Chunk Decoding Stack-Based Buffer Overflow (labs-no-reply <labs-no-reply@...fense.com>)
iDefense Security Advisory 06.13.06: Microsoft Internet Explorer ART File Heap Corruption Vulnerability (labs-no-reply <labs-no-reply@...fense.com>)
iDefense Security Advisory 06.13.06: Windows MRXSMB.SYS MrxSmbCscIoctlCloseForCopyChunk DoS (labs-no-reply <labs-no-reply@...fense.com>)
iDefense Security Advisory 06.13.06: Windows MRXSMB.SYS MRxSmbCscIoctlOpenForCopyChunk Overflow (labs-no-reply <labs-no-reply@...fense.com>)
Simpnews <= All version - Remote File Include Vulnerabilities (SpC-x@...mail.Org)
ZDI-06-018: Microsoft Internet Explorer DXImageTransform ActiveX Memory Corruption Vulnerability (zdi-disclosures@...m.com)
ZDI-06-017: Microsoft Internet Explorer UTF-8 Decoding Heap Overflow Vulnerability (zdi-disclosures@...m.com)
multiple Xss exploits in 35mmslidegallery V6 ("black code" <black-cod3@...mail.com>)
High Risk Vulnerability in Microsoft Windows RASMAN Service ("Peter Winter-Smith" <peter@...software.com>)
PHP MESSENGER 1.0 Version - Remote File Include Vulnerability (SpC-x@...mail.Org)
Jobline 1 1 1 Version - Remote File Include Vulnerability (SpC-x@...mail.Org)
Amr Talkbox talkbox.PHP - Remote File Include Vulnerabilities (SpC-x@...mail.Org)
S H O U T B O X (v1.5) Version - Remote File Include Vulnerability (SpC-x@...mail.Org)
Re: Shoutpro 1.0 Version - Remote File Include Vulnerability ("Steven M. Christey" <coley@...re.org>)

June 14 (52 messages)

Ltwcalendar 4.1.3 version - Remote File Include Vulnerabilities (SpC-x@...mail.org)
[REVERSEMODE ADVISORY] MS06-030 - Microsoft Mrxsmb.sys privilege escalation advisory (Reversemode <advisories@...ersemode.com>)
# MHG Security Team --- PHPAskIt v2.0.1 Remote File Inc. (erne@...ealizm.com <erne@...ealizm.com>)
Web-CMS <<--1.0 "print.php" SQL injection (CrAzY.CrAcKeR@...mail.com)
Re: Simpnews <= All version - Remote File Include Vulnerabilities (str0ke <str0ke@...w0rm.com>)
[REVERSEMODE ADVISORY] MS06-030 NtClose DeadLock. (Reversemode <advisories@...ersemode.com>)
TikiWiki Sql injection & XSS Vulnerabilities ("bug@...uritynews.ir" <bug@...uritynews.ir>)
blur6ex <= 0.3.462 'ID' blind sql injection (rgod@...istici.org)
Re: vbulletin.com Multiple XSS Vulnerabilities (contact@...lletin.com)
Re: PHP-Nuke <= 7.9 Search XSS Vulnerability (Paul Laudanski <zx@...tlecops.com>)
REMOTE FILE INCLUSION ( ALL ) (SpC-x@...mail.org)
RE: Dell Openmanage CD Vulnerability ("Michael Scheidell" <scheidell@...nap.net>)
Chipmailer <= 1.09 Multiple Vulnerabilities (tamriel@....net)
GamePlay.co.uk XSS (charlie@...hackersplace.org)
PhpMyFactures 1.0 Cross Site Scripting, SQL Injection, Full Path Disclosure and others (gmdarkfig@...il.com)
Oracle DBMS_STANDARD security problem ("putosoft softputo" <hasecorp@...mail.com>)
Re: SSL VPNs and security (Eloy Paris <elparis@...co.com>)
Re: PaintedOver.com, Inc. 2004-2006 Xss Vulnerabilities (reports@...ntedover.com)
file include exploits in mcGuestbook 1.3 (gamr-14@...mail.com)
SYMSA-2006-004: Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution (research@...antec.com)
Simpleshout 1.6.0 Version - Remote File Include Vulnerability (SpC-x@...mail.Org)
Shoutpro 1.0 Version - Remote File Include Vulnerability (SpC-x@...mail.Org)
OpenOffice.org XSS ("Alexander Hristov" <joffer@...il.com>)
[MajorSecurity #17] SixCMS <= 6 - Multiple XSS and directory traversal vulnerabilities (admin@...orsecurity.de)
G Shout 1.3.1 Version - Remote File Include Vulnerability (SpC-x@...mail.Org)
SEC Consult SA-20060613-0 :: Outlook Web Access Cross Site Scripting Vulnerability ("SEC Consult Research" <research@...-consult.com>)
[USN-297-1] Thunderbird vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
[USN-288-4] dovecot regression fix (Martin Pitt <martin.pitt@...onical.com>)
[USN-298-1] libgd2 vulnerability (Martin Pitt <martin.pitt@...onical.com>)
[USN-299-1] dhcdbd vulnerability (Martin Pitt <martin.pitt@...onical.com>)
Secunia Resaerch: Internet Explorer Exception Handling Memory Corruption Vulnerability (Secunia Research <vuln-remove@...unia.com>)
Black Hat Speakers + 2005 Content on-line (Jeff Moss <jmoss@...ckhat.com>)
Secunia Research: PicoZip "zipinfo.dll" Multiple Archives Buffer Overflow (Secunia Research <vuln-remove@...unia.com>)
[ MDKSA-2006:099-1 ] - Updated freetype2 packages fixes multiple vulnerabilities. (security@...driva.com)
[ MDKSA-2006:100 ] - Updated gdm packages fix vulnerability (security@...driva.com)
MySQL DoS (Kanatoko <anvil@...perz.net>)
Freeze Greetings Cards PWD.txt (alp_eren@...ildiz.org)
bbrss PhpBB (phpbb_root_path) Remote File Inclusion (SpC-x@...mail.Org)
[ GLSA 200606-15 ] Asterisk: IAX2 video frame buffer overflow (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Re: REMOTE FILE INCLUSION ( ALL ) ("Steven M. Christey" <coley@...re.org>)
wbb<<--v 2.2.2 "thread.php" SQL injection (CrAzY.CrAcKeR@...mail.com)
[ GLSA 200606-16 ] DokuWiki: PHP code injection (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
wbb<<--v 2.2.1 "studienplatztausch.php" SQL injection (CrAzY.CrAcKeR@...mail.com)
wbb<<--v 2.1.6 "profile.php" SQL injection (CrAzY.CrAcKeR@...mail.com)
[KDE Security Advisory] KDM symlink attack vulnerability (Dirk Mueller <mueller@....org>)
Flipper Poll (root_path) Remote File Inclusion (SpC-x@...mail.Org)
Fusion Polls (xtrphome) Remote File Inclusion (SpC-x@...mail.Org)
[USN-300-1] wv2 vulnerability (Martin Pitt <martin.pitt@...onical.com>)
[USN-301-1] kdm vulnerability (Martin Pitt <martin.pitt@...onical.com>)
PhpBlueDragon CMS 2.9.1, File inclusion vulnerability (Federico Fazzi <federico@...istici.org>)
[SECURITY] [DSA 1097-1] New Kernel 2.4.27 packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
[ MDKSA-2006:101 ] - Updated squirrelmail packages fix vulnerabilities (security@...driva.com)

June 15 (29 messages)

[SECURITY] [DSA 1098-1] New horde3 packages fix cross-site scripting (Moritz Muehlenhoff <jmm@...ian.org>)
[ MDKSA-2006:102 ] - Updated libtiff packages fixes tiff2pdf vulnerability (security@...driva.com)
[FSA016] ISPConfig 2.2.3, File inclusion vulnerability (Federico Fazzi <federico@...istici.org>)
[ MDKSA-2006:103 ] - Updated spamassassin packages fix vulnerability (security@...driva.com)
Secunia Research: CMS Mundo SQL Injection and File Upload Vulnerabilities (Secunia Research <vuln-remove@...unia.com>)
EC2ND - Call for Papers ("Blyth A J C (Comp)" <ajcblyth@...m.ac.uk>)
[SECURITY] [DSA 1099-1] New horde2 packages fix cross-site scripting (Moritz Muehlenhoff <jmm@...ian.org>)
FreeBSD Security Advisory FreeBSD-SA-06:17.sendmail (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
Secunia Research: DeluxeBB SQL Injection and File Inclusion Vulnerabilities (Secunia Research <vuln-remove@...unia.com>)
Re: MySQL DoS (Tonnerre Lombard <tonnerre.lombard@...roup.ch>)
[USN-297-2] Thunderbird extensions update for recent security update (Martin Pitt <martin.pitt@...onical.com>)
[USN-302-1] Linux kernel vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
Re: Amr Talkbox talkbox.PHP - Remote File Include Vulnerabilities ("Steven M. Christey" <coley@...re.org>)
ePrayver v.Alpha - XSS (luny@...fucktard.com)
[ GLSA 200606-17 ] OpenLDAP: Buffer overflow (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[ GLSA 200606-18 ] PAM-MySQL: Multiple vulnerabilities (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
APBoard 2.2-r3 <= SQL Injections (666@...l.de.tk)
[ GLSA 200606-19 ] Sendmail: Denial of Service (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[ MDKSA-2006:104 ] - Updated sendmail packages fix remotely exploitable vulnerability (security@...driva.com)
[SECURITY] [DSA 1100-1] New wv2 packages fix integer overflow (joey@...odrom.org (Martin Schulze))
MP3 Search/Archive v1.2 - XSS (luny@...fucktard.com)
Advisory: Authentication bypass in phpBannerExchange (RedTeam Pentesting <release@...team-pentesting.de>)
Advisory: Unauthorized password recovery in phpBannerExchange (RedTeam Pentesting <release@...team-pentesting.de>)
HotPlugCMS_1.0 - SQL Injection Vulnerability (guest01@...il.com)
Andys Chat 4.5 (action) Remote File Inclusion (SpC-x@...mail.Org)
rPSA-2006-0105-1 arts ("Justin M. Forbes" <jmforbes@...th.com>)
rPSA-2006-0106-1 kdebase ("Justin M. Forbes" <jmforbes@...th.com>)
Regarding "SMB Invalid Handle Value" - MS06-030. Vulnerability not fixed. (Reversemode <advisories@...ersemode.com>)
RE: MySQL DoS ("Brent Meshier" <brent@...cia-co.com>)

June 16 (18 messages)

HotPlugCMS 1.0, Cross-Site Scripting Vulnerabilities (Federico Fazzi <federico@...istici.org>)
RE: MySQL DoS (Tonnerre Lombard <tonnerre.lombard@...roup.ch>)
[USN-303-1] MySQL vulnerability (Martin Pitt <martin.pitt@...onical.com>)
TSLSA-2006-0036 - multi (Trustix Security Advisor <tsl@...stix.org>)
dvdwolf SQL injection/XSS (CrAzY.CrAcKeR@...mail.com)
Boardhost.com - XSS (luny@...fucktard.com)
Develooping Flash Chat (banned_file) Remote File Inclusion (SpC-x@...mail.Org)
Indexu v 5.0.01 Multiple Remote File Include Vulnerabilities (KARKOR23@...mail.com)
Re: Several flaws in e-business designer (eBD) (ebd.soporte@...yssoft.com)
[security bulletin] HPSBUX02115 SSRT061077 rev.1 - HP-UX running Support Tools Manager (xstm, cstm, stm) Local Denial of Service (DoS) (security-alert@...com)
file include exploits in nucleus 3.23 (gamr-14@...mail.com)
Re: [FSA016] ISPConfig 2.2.3, File inclusion vulnerability (t.brehm@...config.org)
aXentForum II XSS vuLLn (SnoBmsn@...mail.de)
Chatizens.com - XSS with cookie disclosure (luny@...fucktard.com)
Calendarix 0.7.20060401, SQL Injection Vulnerabilities (Federico Fazzi <federico@...istici.org>)
Ji-takz Chat (mycfg) Remote File Inclusion (SpC-x@...mail.Org)
Carspace.com - XSS with cookie disclosure (luny@...fucktard.com)
Zeroboard File Upload & extension bypass Vulnerability (mins@...s21.com)

June 17 (43 messages)

Cisco Secure ACS Cross Site Scripting Vulnerability. (liam.romanis@...fujitsu.com)
Blacksingles.com - XSS & cookie disclosure (luny@...fucktard.com)
file include exploits in mcGuestbook 1.3 ("SWEET SWEET" <gamr-14@...mail.com>)
[ MDKSA-2006:105 ] - Updated kdebase packages fix local vulnerability in kdm (security@...driva.com)
Re: Secunia Research: PicoZip "zipinfo.dll" Multiple Archives BufferOverflow (c0rrupt@...r.us)
[ MDKSA-2006:106 ] - Updated mdkkdm packages fix local vulnerability (security@...driva.com)
PHP security (or the lack thereof) (Darren Reed <avalon@...igula.anu.edu.au>)
PictureDis Products "lang" Parameter File Inclusion Vulnerability (root-hacked@...mail.com)
Re: [Bugtraq ID: 17909] ISPConfig Session.INC.PHP Remote File Include Vulnerability (t.brehm@...config.org)
Youtube.com - XSS & cookie disclosure (luny@...fucktard.com)
Bingbox.com - XSS & cookie disclosure (luny@...fucktard.com)
RE: Cisco Secure ACS Cross Site Scripting Vulnerability. ("Paul Oxman (poxman)" <poxman@...co.com>)
file include exploits in dotwidgeta Version 2 ("SWEET SWEET" <gamr-14@...mail.com>)
Simple PHP Poll Authecnication Admin ByPass (alp_eren@...ildiz.org)
Netscape.com - Cross site scripting vulnerability (admin@...orsecurity.de)
webcrawler.com - Cross site scripting vulnerability (admin@...orsecurity.de)
GreatDomains.com - XSS with cookie disclosure (admin@...orsecurity.de)
Re: PHP security (or the lack thereof) ("Bojan Zdrnja" <bojan.zdrnja@...il.com>)
Re: PHP security (or the lack thereof) ("Steven M. Christey" <coley@...re.org>)
bitweaver <= v1.3 multiple vulnerabilities (rgod@...istici.org)
[ECHO_ADV_33$2006] CMS Faethon 1.3.2 mainpath Remote File Inclusion (eufrato@...il.com)
Re: PHP security (or the lack thereof) (Jose Nazario <jose@...key.org>)
Housecarers.com - XSS & cookie disclosure (luny@...fucktard.com)
Dealgates.com - XSS with cookie disclosure (luny@...fucktard.com)
Re: Bingbox.com - XSS & cookie disclosure ("Sven Vetsch" <sven.vetsch@...enchant.ch>)
Mambo <= 4.6rc1 sql injection (rgod@...istici.org)
Cline Communications Sql injection (liz0@...mail.com)
XSS in GardenWeb (nanoymaster@...il.com)
Apnaspace.com - XSS with cookie disclosure (luny@...fucktard.com)
hi5.com - XSS with cookie disclosure (luny@...fucktard.com)
Re: GamePlay.co.uk XSS (Patrick Morris <patrick.morris@...com>)
Re: RE: Internet Explorer vulnerbility (Charles Hamby <fixer@....net>)
ISO.org - XSS vulnerability (admin@...orsecurity.de)
alipager xss attack (s3rv3r_hack3r@...oo.com)
Hotscripts.com - XSS with cookie disclosure (luny@...fucktard.com)
Proof of concept: mybb 1.1.2 remote code execution (Javier Olascoaga <jolascoaga@....es>)
[Kurdish Security # 8] DCP-Portal Remote File Include Vulnerability [Editor DHTML] (botan@...uxmail.org)
Facerave.com - XSS & sessions disclosure (luny@...fucktard/com.securityfocus.com)
animesuki XSS (nanoymaster@...il.com)
Re: PHP Advanced Transfer Manager Download users password hashes (jn@....de)
Windowsitpro.com - XSS with cookie disclosure (luny@...fucktard.com)
Cybersocieties.com - XSS & cookie disclosure (luny@...fucktard.com)
Ratescene.co.uk - XSS with session disclosure (luny@...fucktard.com)

June 18 (12 messages)

Macworld.com - XSS vulnerability (admin@...orsecurity.de)
About.com - XSS with cookie disclosure (luny@...fucktard.com)
Ratemylook.co.uk - XSS with session disclosure (luny@...fucktard.com)
Re: Ie opera dos exploit (Nathaniel Hasenfus <nhasnews@...il.com>)
Palm.com - XSS vulnerability (admin@...orsecurity.de)
webcrawler.com - XSS vulnerability in search-engine (admin@...orsecurity.de)
VampireFreaks journal XSS (nanoymaster@...il.com)
Ashop Search Module SQL injection (entrika_fs@...oo.com)
Facetherating.com - XSS & session disclosure (luny@...fucktard.com)
SyScan'06 Highlight - Attacking Microsoft New Operating System (Vista) (thomas48 <thomas48@...gnet.com.sg>)
Confixx <= 3 (kr4ch@....de)
Confixx <= 3 (kr4ch@....de)

June 19 (28 messages)

B3ta.com - XSS with cookie disclosure (luny@...fucktard.com)
Biblenet.net - XSS (luny@...fucktard.com)
SinFP 2.00 - a major release with many new features (GomoR <bt@...or.org>)
RahnemaCo Remote File Inclusion Exploit (Breeeeh@...mail.com)
Re: REMOTE FILE INCLUSION ( ALL ) (eufrato@...il.com)
Blogspot.com - XSS with cookie disclosure (luny@...fucktard.com)
43things.com - XSS with cookie disclosure (luny@...fucktard.com)
Technorati.com - XSS with cookie disclosure (luny@...fucktard.com)
Re: MySQL DoS (xhire@...niklasika.cz)
PTT.yu Guestbook Vulnebility (us3rg0d <us3r_g0d@...oo.com>)
vbzoom V1.11 forum.php SQL Injection Vulnerabilities (KARKOR23@...mail.com)
mp3.com - Cross site scripting vulnerability (admin@...orsecurity.de)
XSS in http://www.newscientist.com/ - Search (viz.security@...il.com)
[ GLSA 200606-20 ] Typespeed: Remote execution of arbitrary code (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
MPCS v0.2 - XSS (luny@...fucktard.com)
Microsoft Excel 0-day Vulnerability FAQ document written (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
[ GLSA 200606-21 ] Mozilla Thunderbird: Multiple vulnerabilities (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[security bulletin] HPSBTU02116 SSRT061135 rev.2 - HP Tru64 UNIX and HP Internet Express for Tru64 UNIX Running sendmail, Remote Execution… (security-alert@...com)
e107 v0.7.5 XSS (securityconnection@...il.com)
Re: [MajorSecurity #17] SixCMS <= 6 - Multiple XSS and directory traversal vulnerabilities (ellinger@....de)
XSS Vulnerability in Maximus SchoolMAX (Fixer <fixer@....net>)
VBZooM <<--V1.00 "rank.php" SQL injection (CrAzY.CrAcKeR@...mail.com)
VBZooM <<--V1.11 "message.php" SQL injection (CrAzY.CrAcKeR@...mail.com)
vuBB <= 0.2.1 [BFA] SQL Injection Exploit + Advisory link (gmdarkfig@...il.com)
VBZooM <<--V1.00 "lng.php" SQL injection (CrAzY.CrAcKeR@...mail.com)
SaphpLesson<<--1.1 "misc.php" SQL injection (CrAzY.CrAcKeR@...mail.com)
PHP Live Helper <=([abs_path]) Remote File Include Vulnerabilities (selfar2002@...mail.com)
onedotoh xss atack (alijsb@...oo.com)

June 20 (24 messages)

Re: PHP security (or the lack thereof) ("Geo." <geoincidents@....net>)
singapore gallery <= 0.10.0 Multiple Vulnerabilities (simo64@...il.com)
Easy CMS 0.1.2 Php Shell Upload Vulnerabilities (liz0@...mail.com)
WeBBoA Hosting Script SQL Injection (entrika_fs@...oo.com)
Re: PHP Live Helper <=([abs_path]) Remote File Include Vulnerabilities (stormhacker@...mail.com)
Dragons Kingdom v1.0 - XSS & cookie disclosure (luny@...fucktard.com)
Re: PHP security (or the lack thereof) (Neil Neely <neil@...i.com>)
Vm ware 0day dos exploit by n00b. (co296@....com)
qtofilemanager xss attack ! (alijsb@...oo.com)
V3Chat Instant Messenger - XSS (luny@...fucktard.com)
Input Validation/Output Encoding Vulnerabilities in Cisco CallManager Allow Script Injection Attacks ("Reynolds, Jake" <Jake.Reynolds@...hnetsecurity.com>)
trifinite Security Advisory: Buffer Overrun in Toshiba Bluetooth Stack for Windows (Martin Herfurt <martin.herfurt@...finite.org>)
Janus Contact (Charles Hamby <fixer@....net>)
Re: Vm ware 0day dos exploit by n00b. (Paul Szabo <psz@...hs.usyd.edu.au>)
Re: Vm ware 0day dos exploit by n00b. ("Eliah Kagan" <degeneracypressure@...il.com>)
display.cgi (soltan_defacer@...oo.com)
Multiple Bypass and Integrity Lost Vulnerabilities (egavriil@...tinel.gr)
vBulletin<<--v3.5.X "member.php" Cross Site Scripting (CrAzY.CrAcKeR@...mail.com)
[MajorSecurity #18] Ralf Image Gallery <=0.7.4 - Multiple XSS, Remote File Include and directory traversal vulnerabilities (admin@...orsecurity.de)
Re: MAXDEV CMS Multiple vulnerabilities (pete@...dev.com)
Module's Name Downloads <<--V 7 SQL injection (CrAzY.CrAcKeR@...mail.com)
Module's Name Content<<--V1.0 SQL injection (CrAzY.CrAcKeR@...mail.com)
RahnemaCo "page.php" Remote File Inclusion[2] (CrAzY.CrAcKeR@...mail.com)
ULtimate PHP Board <= 1.96 GOLD Code Execution (exploit code) (mbrooks@...consulting.com)

June 21 (11 messages)

[ MDKSA-2006:107 ] - Updated arts packages fix vulnerability in artswrapper (security@...driva.com)
JEdit ActiveX Control Information Disclosure vulnerability (bulten@...abs.net)
Sendmail MIME DoS vulnerability ("Jain, Siddhartha" <Siddhartha.Jain@...-tencor.com>)
Re: Vacation Retal Script v1.0 (radu@...rafox.info)
[ MDKSA-2006:108 ] - Updated xine-lib packages fix buffer overflow vulnerabilities (security@...driva.com)
Opera 9 DoS PoC (N9@...tical.lt)
Bypassing of web filters by using ASCII (k.huwig@...-ag.de)
Re: display.cgi (eufrato@...il.com)
Re: Bypassing of web filters by using ASCII (Fixer <fixer@....net>)
Re: possible SQL injection in Subdreamer (ziad@...dreamer.com)
[ MDKSA-2006:110 ] - Updated gnupg packages fix vulnerability (security@...driva.com)

June 22 (30 messages)

Re: file include exploits in nucleus 3.23 (nukedx@...edx.com)
Re: # MHG Security Team --- PHORUM 5.1.13 Remote File Inc. (brian@...rum.org)
Re: PHP security (or the lack thereof) ("Jessica Hope" <jessicasaulhope@...glemail.com>)
Eduha Meeting php shell upload Vulnerabilities (liz0@...mail.com)
phishing and comment spam (Gadi Evron <ge@...uxbox.org>)
Re: PHP security (or the lack thereof) (flaps@....toronto.edu (Alan J Rosenthal))
Re: PHP security (or the lack thereof) ("kicktd" <cooljay1804ml@...lsouth.net>)
Re: PHP security (or the lack thereof) ("Geo." <geoincidents@....net>)
Digital Armaments July-August Hacking Challange: Microsoft (info@...italarmaments.com)
cjGuestbook v1.3 - XSS (luny@...fucktard.com)
Excel 0-day FAQ updated with Microsoft advisory information (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Somechess v1.5 rc1 - XSS (luny@...fucktard.com)
Re: Bypassing of web filters by using ASCII (Paul <pvnick@...il.com>)
[ MDKSA-2006:109 ] - Updated wv2 packages fix vulnerability (security@...driva.com)
MS Excel Remote Code Execution POC Exploit (naveed <naveedafzal@...il.com>)
Re: Bypassing of web filters by using ASCII (Kurt Huwig <k.huwig@...-ag.de>)
Re: Bypassing of web filters by using ASCII (Kurt Huwig <k.huwig@...-ag.de>)
Re: Bypassing of web filters by using ASCII (RSnake <rsnake@...cking.com>)
Re: Bypassing of web filters by using ASCII (Kurt Huwig <k.huwig@...-ag.de>)
Re: PHP security (or the lack thereof) (Crispin Cowan <crispin@...ell.com>)
MS Excel Remote Code Execution POC Exploit (naveed <naveedafzal@...il.com>)
Re: aXentForum II XSS vuLLn ("Steven M. Christey" <coley@...re.org>)
Re: Bypassing of web filters by using ASCII ("Amit Klein (AKsecurity)" <aksecurity@...pop.com>)
Re: V3Chat Instant Messenger - XSS (support@...hat.com)
VigilantMinds Advisory: Opera JPEG Processing Integer Overflow Vulnerability (VMSA-20060621-01) ("VigilantMinds Advisories" <advisories@...ilantminds.com>)
Re: Bypassing of web filters by using ASCII (Hubert Seiwert <hubert@...tpoint.ltd.uk>)
[ GLSA 200606-22 ] aRts: Privilege escalation (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[ GLSA 200606-23 ] KDM: Symlink vulnerability (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
RE: MS Excel Remote Code Execution POC Exploit ("Jain, Siddhartha" <Siddhartha.Jain@...-tencor.com>)
Re: MS Excel Remote Code Execution POC Exploit (naveed <naveedafzal@...il.com>)

June 23 (27 messages)

Re: Bypassing of web filters by using ASCII ("Amit Klein (AKsecurity)" <aksecurity@...pop.com>)
Trend Micro Control Manager (TMCM) Persistent XSS Vulnerability ("Darren Bounds" <dbounds@...il.com>)
Cisco Secure ACS Weak Session Management Vulnerability ("Darren Bounds" <dbounds@...il.com>)
[ GLSA 200606-24 ] wv2: Integer overflow (Stefan Cornelius <dercorny@...too.org>)
flock d0s exploit remote. beta 1 (v0.7) (co296@....com)
[SECURITY] [DSA 1101-1] New courier packages fix denial of service (joey@...odrom.org (Martin Schulze))
Re: MS Excel Remote Code Execution POC Exploit ("Steven M. Christey" <coley@...re.org>)
vlbook 1.2 XSS Bug (omnipresent@...il.it)
[SNS Advisory No.88] Webmin Directory Traversal Vulnerability ("snsadv@....co.jp" <snsadv@....co.jp>)
QaTraq 6.5 RC: Multiple XSS Vulnerabilities (enji@...lab.tuwien.ac.at)
[KAPDA]Coppermine 1.4.8~Parameter Cleanup System ByPass~Registering Global Varables (addmimistrator@...il.com)
[security bulletin] HPSBUX02127 SSRT051056 - rev.1 HP-UX Kernel Local Denial of Service (DoS) (security-alert@...com)
RE: Bypassing of web filters by using ASCII ("James C. Slora Jr." <james.slora@...a.com>)
Vishing (voice/phone phishing) - public incident (Gadi Evron <ge@...uxbox.org>)
TSLSA-2006-0037 - multi (Trustix Security Advisor <tsl@...stix.org>)
aeDating 4.1 XSS (securityconnection@...il.com)
rPSA-2006-0110-1 kernel ("Justin M. Forbes" <jmforbes@...th.com>)
Dating Agent PRO 4.7.1 Vulnerability (securityconnection@...il.com)
Re: Bypassing of web filters by using ASCII ("Amit Klein (AKsecurity)" <aksecurity@...pop.com>)
Re: Re: PHP security (or the lack thereof) (nabiy@...mail.com)
[Kil13r-SA-20060622-1] NetSoft SmartNet 2.0 Cross-Site Scripting Vulnerability (mac68k@...il.com)
DREAMACCOUNT V3.1 Remote Command Execution Exploit (KARKOR23@...mail.com)
Linux VNC evil client patch - BID 17978 (embyte@...lab.it)
Re: Digital Armaments July-August Hacking Challange: Microsoft (Alexander Sotirov <asotirov@...ermina.com>)
productcart soltan_defacer (soltan_defacer@...oo.com)
Re: [funsec] Vishing (voice/phone phishing) - public incident ("Dude VanWinkle" <dudevanwinkle@...il.com>)
Dating biz@ dating script v1.0 - XSS (luny@...fucktard.com)

June 24 (25 messages)

WBB<<---v1.2 "showmods.php" SQL Injection (CrAzY.CrAcKeR@...mail.com)
Re: Opera 9 DoS PoC ("Darren Clarke" <mailcentre2@...il.com>)
Re: Cisco Secure ACS Weak Session Management Vulnerability (Clayton Kossmeyer <ckossmey@...co.com>)
[KAPDA]MyBB1.1.3~Option update for code buttons~Sql Injection Admin Access (addmimistrator@...il.com)
Calendar ( Provided by Codewalkers ) - SQL Injection (Silitix@...il.com)
Re: PHP security (or the lack thereof) (Crispin Cowan <crispin@...ell.com>)
Re: PHP security (or the lack thereof) (john mullee <jmullee@...oo.com>)
[ECHO_ADV_34$2006] W-Agora (Web-Agora) <= 4.2.0 (inc_dir) Remote File Inclusion (the_day@...o.or.id)
Amazon, MSN vulns and.. Yes, we know! Most sites have vulnerabilities (Gadi Evron <ge@...uxbox.org>)
WBB<<---v2.3.1"report.php" SQL Injection (CrAzY.CrAcKeR@...mail.com)
Re: Amazon, MSN vulns and.. Yes, we know! Most sites have vulnerabilities (David Taylor <ltr@....upenn.edu>)
SYMSA-2006-005 (research@...antec.com)
phpBlueDragon CMS 2.9.1 multiple remote file inclusion vuln (rozowa.landrynka@...m.nation.pl)
Re: Bypassing of web filters by using ASCII ("Thor (Hammer of God)" <thor@...merofgod.com>)
[Kil13r-SA-20060622-2] Namo DeepSearch 4.5 Cross-Site Scripting Vulnerability (mac68k@...il.com)
Re: Sendmail MIME DoS vulnerability (Gadi Evron <ge@...uxbox.org>)
Re: PHP security (or the lack thereof) ("Geo." <geoincidents@....net>)
Re: Opera 9 DoS PoC ("Bruno Lustosa" <bruno.lists@...il.com>)
WBB<<---v2.0 RC2 "newthread.php" SQL Injection (CrAzY.CrAcKeR@...mail.com)
Re: Re: MS Excel Remote Code Execution POC Exploit (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Softbiz Dating 1.0 SQL injection (securityconnection@...il.com)
Re: Amazon, MSN vulns and.. Yes, we know! Most sites have vulnerabilities (David Taylor <ltr@....upenn.edu>)
Re: Amazon, MSN vulns and.. Yes, we know! Most sites have vulnerabilities (David Taylor <ltr@....upenn.edu>)
Re: Amazon, MSN vulns and.. Yes, we know! Most sites have vulnerabilities (Gadi Evron <ge@...uxbox.org>)
Re: Amazon, MSN vulns and.. Yes, we know! Most sites have vulnerabilities (Gadi Evron <ge@...uxbox.org>)

June 25 (1 message)

Re: Amazon, MSN vulns and.. Yes, we know! Most sites have vulnerabilities (Gadi Evron <ge@...uxbox.org>)

June 26 (23 messages)

ERNW Security Advisory 01/2006 (mozilla@...-guide.de)
Re: PHP security (or the lack thereof) (Ronald Chmara <ron@...s1.COM>)
[USN-304-1] gnupg vulnerability (Martin Pitt <martin.pitt@...onical.com>)
[Kurdish Security # 9] MyMail Directory Traversal And XSS Attacking Vulnerability (botan@...uxmail.org)
Re: Opera 9 DoS PoC (Laurent <lsaplai_list@...w.ca>)
RE: PHP security (or the lack thereof) ("Geo." <geoincidents@....net>)
DeluxeBB 1.07 Create admin Exploit (Hessamx@...samx.net)
Claroline Cross-Site Scripting Vulnerabilities ("bug@...uritynews.ir" <bug@...uritynews.ir>)
Planetnews Authecnication Admin ByPass (alp_eren@...ildiz.org)
[SECURITY] [DSA 1102-1] New pinball packages fix privilege escalation (skx@...ian.org (Steve Kemp))
[ GLSA 200606-25 ] Hashcash: Possible heap overflow (Thierry Carrez <koon@...too.org>)
XSS in Cpanel 10 (preth00nker@...il.com)
[ GLSA 200606-26 ] EnergyMech: Denial of Service (Thierry Carrez <koon@...too.org>)
RE: Bypassing of web filters by using ASCII ("James C. Slora Jr." <james.slora@...a.com>)
Re: PHP security (or the lack thereof) (Paul Schmehl <pauls@...allas.edu>)
Re: PHP security (or the lack thereof) (Matthias Kestenholz <lists@...nlock.ch>)
Re: PHP security (or the lack thereof) (Mrten <bugtraq@...nl>)
Re: vBulletin<<--v3.5.X "member.php" Cross Site Scripting (scott@...lletin.com)
Re: flock d0s exploit remote. beta 1 (v0.7) ("Chris Rothecker" <chris@...eglobalbid.com>)
Re: Bypassing of web filters by using ASCII (Vincent Archer <varcher@...yall.com>)
[ MDKSA-2006:111 ] - Updated MySQL packages fixes authorized user DoS(crash) vulnerability. (security@...driva.com)
Re: Bypassing of web filters by using ASCII (David Huecking <d.huecking@....net>)
[KAPDA]MyBB1.1.3~Option update for code buttons~Sql Injection Admin Access (addmimistrator@...il.com)

June 27 (50 messages)

Re: MS Excel Remote Code Execution POC Exploit (naveed <naveedafzal@...il.com>)
Re: Linux VNC evil client patch - BID 17978 (embyte@...lab.it)
RE: Bypassing of web filters by using ASCII ("Amit Klein (AKsecurity)" <aksecurity@...pop.com>)
GlobeTrotter Mobility Manager - security issue (dzelek@...il.com)
Mailenable SMTP Service DoS (db0 <divisionbyzerodotbe@...il.com>)
RE: Bypassing of web filters by using ASCII (RSnake <rsnake@...cking.com>)
Re: PHP security (or the lack thereof) (Daniel Hulme <bugtraq@...blezero.uklinux.net>)
Undisclosed cross site scripting vulnerabilities in domaintools.com - requesting contacts (admin@...orsecurity.de)
Re: Opera 9 DoS PoC (Bastian Ahrens <mail@...ks.com>)
Re: Opera 9 DoS PoC ("Eric Furman" <ericfurman@...tmail.net>)
Universal Hooker - Tool release (Hernan Ochoa <lists@...e-sdi.com>)
Amazon and Msn vulnerabilities (dcrab@...kerscenter.com)
OpenGuestbook Cross Site Scripting & SQL Injection (simo64@...il.com)
[OpenPKG-SA-2006.010] OpenPKG Security Advisory (gnupg) (OpenPKG <openpkg@...npkg.org>)
Re: PHP security (or the lack thereof) (Darren Reed <avalon@...igula.anu.edu.au>)
Re: PHP security (or the lack thereof) ("Tobias J. Kreidl" <Tobias.Kreidl@....EDU>)
Taking Over Laptops by Fuzzing Wireless Drivers (Gadi Evron <ge@...uxbox.org>)
Re: Bypassing of web filters by using ASCII ("Balazs Attila-Mihaly (Cd-MaN)" <x_at_y_or_z@...oo.com>)
Re: Bypassing of web filters by using ASCII (Hubert Seiwert <hubert@...tpoint.ltd.uk>)
Re: PHP security (or the lack thereof) (Glynn Clements <glynn@...ements.plus.com>)
Winged Gallery v1.0 (luny@...fucktard.com)
Re: Is Windows TCP/IP source routing PoC code available? (3APA3A <3APA3A@...URITY.NNOV.RU>)
Re: Sendmail MIME DoS vulnerability (Claus Assmann <ca+bugtraq@...doc.endmail.org>)
error_log() Safe Mode Bypass PHP 5.1.4 and 4.4.2 (cxib@...urityreason.com)
[USN-305-1] OpenLDAP vulnerability (Martin Pitt <martin.pitt@...onical.com>)
Jaws <= 0.6.2 'Search gadget' SQL injection (rgod@...istici.org)
Windows Live Messenger 8.0 ( Contact List *.ctt ) Heap Overflow ("Alexander Hristov" <joffer@...il.com>)
Microsoft's Real Test with Vista is Vulnerabilities (Gadi Evron <ge@...uxbox.org>)
Usenet Script v0.5 (luny@...fucktard.com)
Re: Microsoft's Real Test with Vista is Vulnerabilities (Brate Sanders <brate_sanders@...oo.co.uk>)
[USN-306-1] MySQL 4.1 vulnerability (Martin Pitt <martin.pitt@...onical.com>)
[SECURITY] [DSA 1103-1] New Linux kernel 2.6.8 packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Microsoft's Real Test with Vista is Vulnerabilities (Gadi Evron <ge@...uxbox.org>)
Re: Microsoft's Real Test with Vista is Vulnerabilities (James Tucker <jftucker@...il.com>)
ZDI-06-019: GraceNote CDDBControl ActiveX Buffer Overflow Vulnerability (zdi-disclosures@...m.com)
Re: [ECHO_ADV_34$2006] W-Agora (Web-Agora) <= 4.2.0 (inc_dir) Remote File Inclusion ("Steven M. Christey" <coley@...re.org>)
CrisoftRicette<<--1.0pre15b Remote File Inclusion (CrAzY.CrAcKeR@...mail.com)
SYMSA-2006-006: Lotus Domino SMTP Based Denial of Service (research@...antec.com)
phpvillage "funshow.php" SQL Injection (CrAzY.CrAcKeR@...mail.com)
[Kurdish Security # 11] SiteBar Cross-Site Scripting (botan@...uxmail.org)
NTA-Monitor releases arp-scan detection and fingerprinting tool (Adrian Chiang <ajack2001my@...oo.com>)
Re: [MajorSecurity #18] Ralf Image Gallery <=0.7.4 - Multiple XSS, Remote File Include and directory traversal vulnerabilit… (Marc MERLIN <marc_news@...lins.org>)
Re: XSS in Cpanel 10 (bug@...uritynews.ir)
Re: Re: PHP security (or the lack thereof) (nabiy@...mail.com)
Files and cvars overwriting in Quake 3 engine (1.32c / rev 803 / ...) (Luigi Auriemma <aluigi@...istici.org>)
Re: PHP security (or the lack thereof) (Ronald Chmara <ron@...s1.COM>)
RE: PHP security (or the lack thereof) ("Geo." <geoincidents@....net>)
SUSE Security Announcement: freetype2 (SUSE-SA:2006:037) (Thomas Biege <thomas@...e.de>)
[Kurdish Security # 10 ] MF Piadas 1.0 Remote File Include Vulnerability (botan@...uxmail.org)
CAID 34325 - CA ITM, eAV, ePP scan job description field format string vulnerability ("Williams, James K" <James.Williams@...com>)

June 28 (23 messages)

[Kil13r-SA-20060628] Hanaro Search Cross-Site Scripting Vulnerability (mac68k@...il.com)
Re: Microsoft's Real Test with Vista is Vulnerabilities (Brate Sanders <brate_sanders@...oo.co.uk>)
SEC Consult SA-20060613-0 v2 :: OWA XSS Vulnerability Details ("SEC Consult Research" <research@...-consult.com>)
RE: [funsec] Microsoft's Real Test with Vista is Vulnerabilities ("Larry Seltzer" <larry@...ryseltzer.com>)
SyScan'06 Highlight - Is Phone Banking Safe? (thomas48 <thomas48@...gnet.com.sg>)
[USN-307-1] mutt vulnerability (Martin Pitt <martin.pitt@...onical.com>)
Re: [funsec] Microsoft's Real Test with Vista is Vulnerabilities (thomas48 <thomas48@...gnet.com.sg>)
Presentation: AT&T ISNN - "Case Studies in Finding Previously Unknown Vulnerabilities in Web Applications." ("Kenneth F. Belva" <ken@...security.com>)
smartsite cms v1.0 Remote File include (KARKOR23@...mail.com)
[KAPDA]MyBB 1.1.4~function_post.php~XSS Attack In URL tag (addmimistrator@...il.com)
vCard PRO SQL Injection (CrAzY.CrAcKeR@...mail.com)
[ MDKSA-2006:112 ] - Updated gd packages fix DoS vulnerability. (security@...driva.com)
[ MDKSA-2006:114 ] - Updated libwmf packages fixes embedded GD vulnerability (security@...driva.com)
Re: Calendar ( Provided by Codewalkers ) - SQL Injection (krustevs@...il.com)
PHP-Nuke Module's Name Sections<<--V3 SQL Injection (CrAzY.CrAcKeR@...mail.com)
Secunia Research: DeluxeBB SQL Injection and File Inclusion Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
BLOG:CMS <= 4.0.0k sql injection (rgod@...istici.org)
[ GLSA 200606-27 ] Mutt: Buffer overflow (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
AzDGDatingPlatinum<<--v1.1.0 "view.php" SQL Injection (CrAzY.CrAcKeR@...mail.com)
Re[2]: Is Windows TCP/IP source routing PoC code available? ("Ìèíàåâ_Àíäðåé" <angel3000@...box.ru>)
MKPortal 1.0.1 Final ($ind) File Include Vulnerability (perl) (stormhacker@...mail.com)
PHP iCalendar Cross Site Scripting (botan@...uxmail.org)
Cisco Security Advisory: Multiple Vulnerabilities in Wireless Control System (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)

June 29 (33 messages)

[OpenPKG-SA-2006.011] OpenPKG Security Advisory (png) (OpenPKG <openpkg@...npkg.org>)
RE: PHP security (or the lack thereof) ("Geo." <geoincidents@....net>)
Re: [MajorSecurity #18] Ralf Image Gallery <=0.7.4 - Multiple XSS, Remote File Include and directory traversal vulnerabilities (Ralf <ralfoide@...il.com>)
Re: Microsoft's Real Test with Vista is Vulnerabilities (Susan Bradley <sbradcpa@...bell.net>)
Cisco Security Advisory: Access Point Web-Browser Interface Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
[ MDKSA-2006:113 ] - Updated tetex packages fix embedded GD vulnerabilities (security@...driva.com)
Re: PHP security (or the lack thereof) (Tonnerre Lombard <tonnerre.lombard@...roup.ch>)
Secunia Research: Opera SSL Certificate "Stealing" Weakness (Secunia Research <remove-vuln@...unia.com>)
Re: PHP security (or the lack thereof) (Darren Reed <avalon@...igula.anu.edu.au>)
Layered Defense Advisory: Format String Vuln in CA eTrust (dh@...ereddefense.com)
PHPClassifieds General (luny@...fucktard.com)
Re: Files and cvars overwriting in Quake 3 engine (1.32c / rev 803 / ...) (Luigi Auriemma <aluigi@...istici.org>)
[MailServer Notification]Security Notification (<mikejoslyn@...nemelhuish.com>)
[KAPDA]http://myimei.com/security/2006-06-24/mybb104archive-modelight-parameter-extractionvarable-overwriting.html (addmimistrator@...il.com)
[ GLSA 200606-28 ] Horde Web Application Framework: XSS vulnerability (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
[ GLSA 200606-29 ] Tikiwiki: SQL injection and multiple XSS vulnerabilities (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
Re: Re[2]: Is Windows TCP/IP source routing PoC code available? (3APA3A <3APA3A@...URITY.NNOV.RU>)
Corporate Virus Threats (Terminal Entry <Security@...dro.net>)
DMA[2006-0628a] - 'Apple OSX launchd unformatted syslog() vulnerability' ("K F (lists)" <kf_lists@...italmunition.com>)
CSRF in Nuked Klan 1.7 SP4.2 (blwood@...net.be)
rPSA-2006-0116-1 mutt ("Justin M. Forbes" <jmforbes@...th.com>)
Softbiz Banner Exchange 1.0 XSS (securityconnection@...il.com)
[ MDKSA-2006:115 ] - Updated mutt packages fix buffer overflow vulnerability (security@...driva.com)
Secunia Research: phpRaid SQL Injection and File Inclusion Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
Digital Armaments Security Advisory 29.06.2006: Siemens Speedstream Wireless Router Password Protection Bypass Vulnerability (info@...italarmaments.com)
Novell Security contact address change (Roman Drahtmueller <draht@...ell.com>)
Multiple Vulnerabilities in PatchLink Update Server 6 ("Chris Steipp" <csteipp@...acoast.com>)
Novell Security Announcement NOVELL-SA:2006:001 (Jim Short <jshort@...ell.com>)
[security bulletin] HPSBTU02125 SSRT061105 rev.1 - HP Tru64 UNIX Running Perl 5.8.2 and earlier, Local Unauthorized Code Execution (security-alert@...com)
[security bulletin] HPSBUX02122 SSRT061158 rev.2 - HP-UX Mozilla Remote Execution of Arbitrary Code, Denial of Service (DoS) (security-alert@...com)
rPSA-2006-0120-1 gnupg ("Justin M. Forbes" <jmforbes@...th.com>)
[ MDKSA-2006:114 ] - Updated libwmf packages fixes embedded GD vulnerability (security@...driva.com)
Msie 7.0 beta Crash (Mr.Niega@...il.com)

June 30 (23 messages)

Browser bugs hit IE, Firefox today (SANS) ("Bill Stout" <bill.stout@...enborder.com>)
Browser bugs hit IE, Firefox today (SANS) ("Bill Stout" <bill.stout@...enborder.com>)
Re: Browser bugs hit IE, Firefox today (SANS) (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
[FLSA-2006:189672] Updated thunderbird package fixes security issues (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
NCP VPN/PKI Client: UDP Bypassing ("ml3@...tsonline.net" <ml3@...tsonline.net>)
[ GLSA 200606-30 ] Kiax: Arbitrary code execution (Sune Kloppenborg Jeppesen <jaervosz@...too.org>)
ISC: Firefox immune to outerHTML flaw in MSIE [Was: Browser bugs hit IE, Firefox] (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
ZDI-06-020: Apple iTunes AAC File Parsing Integer Overflow Vulnerability (zdi-disclosures@...m.com)
RE: Browser bugs hit IE, Firefox today (SANS) ("Schmehl, Paul L" <pauls@...allas.edu>)
ezWaiter v3.0 - XSS (luny@...fucktard.com)
[SECURITY] [DSA 1104-1] New OpenOffice.org packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
libwmf integer/heap overflow (sean <infamous41md@...pop.com>)
Zen-Cart 1.3.0.2 Full Path Disclosure (o.y.6@...mail.com)
[Kil13r-SA-20060701-1] Ahnlab Search Cross-Site Scripting Vulnerability (mac68k@...il.com)
RE: Browser bugs hit IE, Firefox today (SANS) ("Carey, Steve T GARRISON" <steven-carey@...army.mil>)
[Kil13r-SA-20060701-2] MoniWiki 1.1.1 Cross-Site Scripting Vulnerability (mac68k@...il.com)
[Kil13r-SA-20060701-3] Massting Cross-Site Scripting Vulnerability (mac68k@...il.com)
Heap overflow in OpenOffice.org suite leads to code execution ("NGSSoftware Insight Security Research" <nisr@...tgenss.com>)
FreeHost "misc.php & news.php" SQL Injection (CrAzY.CrAcKeR@...mail.com)
MyNewsGroups<<--v. 0.6 "tree.php" SQL Injection (CrAzY.CrAcKeR@...mail.com)
CDJ<<--V NITKID 2.0 "category.php" SQL Injection (CrAzY.CrAcKeR@...mail.com)
Module's Name "Classifieds" SQL Injection (CrAzY.CrAcKeR@...mail.com)
My smiles "browse.php" SQL Injection (CrAzY.CrAcKeR@...mail.com)

807 messages

Powered by blists - more mailing lists