bugtraq mailing list - 2006/10

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2006/10

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹
² 27	³ 10	⁴ 17	⁵ 4	⁶ 29	⁷ 17	⁸
⁹ 22	¹⁰ 25	¹¹ 17	¹² 17	¹³ 26	¹⁴ 26	¹⁵
¹⁶ 23	¹⁷ 16	¹⁸ 36	¹⁹ 27	²⁰ 16	²¹ 6	²²
²³ 35	²⁴ 16	²⁵ 9	²⁶ 7	²⁷ 32	²⁸ 7	²⁹
³⁰ 28	³¹ 29

Messages by day:

October 2 (27 messages)

Advisory 07/2006: phpMyAdmin Multiple CSRF Vulnerabilities (Stefan Esser <sesser@...dened-php.net>)
ZERT patch for setSlice() (Gadi Evron <ge@...uxbox.org>)
0day in Firefox from ToorCon '06 (Thor Larholm <thor@...ypath.com>)
zero-day flaws in Firefox: about 30 unpatched Firefox flaws (ragan@...il.com)
phpMyWebmin 1.0 <= (target) Remote File Include Vulnerability (x0r0n@...mail.com)
Layered Defense Advisory: TrendMicro OfficesScan Corporate Edition Format String Vulnerability (dh@...ereddefense.com)
EasyBannerFree (functions.php) Remote File Include Exploit (las_kid@...oo.com)
[OpenPKG-SA-2006.022] OpenPKG Security Advisory (openssh) (OpenPKG <openpkg@...npkg.org>)
IBM Informix Dynamic Server V10.0 File Clobbering during Install ("Larry Cashdollar" <lcashdol@...il.com>)
Pebble 2.0.0 RC[1,2] XSS vulnerability ("Paolo Perego" <thesp0nge@...il.com>)
[security bulletin] HPSBUX02157 SSRT061220 rev.1 HP-UX Running Ignite-UX Server, Remote Unauthorized Access and Privilege Elevation (security-alert@...com)
IE UXSS (Universal XSS in IE, was Re: Microsoft Internet Information Services UTF-7 XSS Vulnerability [MS06-053]) (Paul Szabo <psz@...hs.usyd.edu.au>)
"POC 2006" by Korean hackers ("securityproof" <securityproof@...il.com>)
Dayfox Blog v2.0 Remote file include (dj_remix_20@...mail.com)
[USN-355-1] openssh vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
[USN-356-1] gdb vulnerability (Martin Pitt <martin.pitt@...onical.com>)
digishop v 4.0.0 Xss Vuln. (meto5757@...mail.com)
Re: [Full-disclosure] IE UXSS (Universal XSS in IE, was Re: Microsoft Internet Information Services UTF-7 XSS Vulnerabilit… ("Brian Eaton" <eaton.lists@...il.com>)
Kerio Multiple insufficient argument validation of hooked SSDT function Vulnerability (David Matousek <david@...ousec.com>)
[USN-354-1] Firefox vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
Security contact for Myspace/Fox? ("E Mintz" <net4n6@...il.com>)
Microsoft Internet Information Services UTF-7 XSS Vulnerability [MS06-053] ("Eiji James Yoshida" <ptrs-ejy@...iij4u.or.jp>)
Portable shell-exploit for buffer-overflow bugs (Roman Medina-Heigl Hernandez <roman@...labs.com>)
Re: WebCalendar-1.0.3 reading of any files (webcalendar@...wmansgoed.nl)
Re: net2ftp: a web based FTP client :) <= Remote File Inclusion (securfrog@...il.com)
[security bulletin] HPSBUX02129 SSRT061149 rev.1 - HP-UX running SLP, Remote Unauthorized Access (security-alert@...com)
FreeBSD Security Advisory FreeBSD-SA-06:22.openssh (FreeBSD Security Advisories <security-advisories@...ebsd.org>)

October 3 (10 messages)

[SECURITY] [DSA 1185-2] New openssl packages fix arbitrary code execution (Noah Meyerhans <noahm@...ian.org>)
[ MDKSA-2006:172-1 ] - Updated openssl packages fix vulnerabilities (security@...driva.com)
[ MDKSA-2006:177 ] - Updated MySQL packages rebuilt against updated openssl. (security@...driva.com)
Re: [Full-disclosure] IE UXSS (Universal XSS in IE, was Re: Microsoft Internet Information Services UTF-7 XSS Vulnerability [… (Paul Szabo <psz@...hs.usyd.edu.au>)
[ MDKSA-2006:178 ] - Updated ntp packages rebuilt against updated openssl. (security@...driva.com)
Re: WebspotBlogging => 3.0 Remote File Include Vulnerabilities ("Steven M. Christey" <coley@...re.org>)
Security flaw in IBM Client Security Password Manager (Luís Miguel Silva <lms@...gaya.pt>)
Re: [Full-disclosure] IE UXSS (Universal XSS in IE, was Re: Microsoft Internet Information Services UTF-7 XSS Vulnerability [… (Paul Szabo <psz@...hs.usyd.edu.au>)
PacSec 2006 Papers announcement and EUSecWest Call For Papers (Dragos Ruiu <dr@....net>)
iDefense Security Advisory 10.02.06: Novell GroupWise Messenger nmma.exe DoS Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)

October 4 (17 messages)

phpMyProfiler remote file include (mozi2weed@...oo.com)
[CAID 34661]: CA Unicenter WSDM File System Read Access Vulnerability ("Williams, James K" <James.Williams@...com>)
Advisory 08/2006: PHP open_basedir Race Condition Vulnerability (Stefan Esser <sesser@...dened-php.net>)
[ MDKSA-2006:179 ] - Updated openssh packages fix DoS vulnerabilities (security@...driva.com)
[SECURITY] [DSA 1188-1] New mailman packages fix several problems (joey@...odrom.org (Martin Schulze))
Directory Traversal Vulnerability in Goop Gallery 2.0.2 (security@...orize.com)
Yener Haber Script v2.0 SQL injection (dj_remix_20@...mail.com)
Technical Paper on the ZERT Patch and VML [was: Re: ZERT patch for setSlice()] (Gadi Evron <ge@...uxbox.org>)
Re: [funsec] Technical Paper on the ZERT Patch and VML [was: Re: ZERT patch for setSlice()] (Alexander Sotirov <asotirov@...ermina.com>)
[USN-358-1] ffmpeg, xine-lib vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
[USN-353-2] OpenSSL vulnerability (Martin Pitt <martin.pitt@...onical.com>)
[USN-357-1] Mono vulnerability (Martin Pitt <martin.pitt@...onical.com>)
Invision Power Board Multiple Vulnerabilities (Rapigator <rapigator@...oo.com>)
[ GLSA 200610-01 ] Mozilla Thunderbird: Multiple vulnerabilities (Matthias Geerdsen <vorlon@...too.org>)
[SECURITY] [DSA 1189-1] New openssh-krb5 packages fix denial of service and potential execution of arbitrary code (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 1190-1] New maxdb-7.5.00 packages fix execution of arbitrary code (Moritz Muehlenhoff <jmm@...ian.org>)
[ GLSA 200610-02 ] Adobe Flash Player: Arbitrary code execution (Matthias Geerdsen <vorlon@...too.org>)

October 5 (4 messages)

Vulnerability Type Distributions in CVE ("Steven M. Christey" <coley@...us.mitre.org>)
WikyBlog <= v1.4 (WN_BASEDIR) Remote File Inclusion Exploit (xp1o@....com)
Re: Concurrency-related vulnerabilities in browsers - expect problems (Mike@...il.com)
[SECURITY] [DSA 1191-1] New Mozilla Thunderbird packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))

October 6 (29 messages)

iDefense Security Advisory 10.05.06: Symantec AntiVirus IOCTL Kernel Privilege Escalation Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
[ MDKSA-2006:180 ] - Updated php packages fix integer overflow vulnerability (security@...driva.com)
Vulnerable function in newest PowerPoint case (MS Advisory #925984) (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Hazir Site v2.0 Admin SQL Injection (dj_remix_20@...mail.com)
SUSE Security Summary Report SUSE-SR:2006:024 (Thomas Biege <thomas@...e.de>)
[SECURITY] [DSA 1192-1] New Mozilla packages fix several vulnerabilities (joey@...odrom.org (Martin Schulze))
TSLSA-2006-0055 - multi (Trustix Security Advisor <tsl@...stix.org>)
TorrentFlux User-Agent XSS Vulnerability (sec@...sg.stevenroddis.com.au)
Re: Concurrency-related vulnerabilities in browsers - expect problems ("Nick Boyce" <nick.boyce@...il.com>)
[USN-359-1] Python vulnerability (Martin Pitt <martin.pitt@...onical.com>)
Re: Concurrency-related vulnerabilities in browsers - expect problems (Josh Bressers <josh@...ss.net>)
phpMyTeam v2.0 <= (smileys_dir) Remote File Include Vulnerability (x0r0n@...mail.com)
ackerTodo 4.2 SQL Injection Vulnerability (Francesco Laurita <francesco@...ncesco-laurita.info>)
ZDI-06-030: CA Multiple Product Discovery Service Remote Buffer Overflow Vulnerability (zdi-disclosures@...m.com)
ZDI-06-031: CA Multiple Product Message Engine RPC Server Code Execution Vulnerability (zdi-disclosures@...m.com)
[Reversemode Advisory] Symantec Antivirus Engine Privilege Escalation (Reversemode <advisories@...ersemode.com>)
[CAID 34693, 34694]: CA BrightStor ARCserve Backup Multiple Buffer Overflow Vulnerabilities ("Williams, James K" <James.Williams@...com>)
TSRT-06-12: CA BrightStor Discovery Service Mailslot Buffer Overflow Vulnerability (TSRT@...m.com)
rPSA-2006-0183-1 nss_ldap (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2006-0185-1 gnome-ssh-askpass openssh openssh-client openssh-server (rPath Update Announcements <announce-noreply@...th.com>)
TSRT-06-11: CA Multiple Product DBASVR RPC Server Multiple Buffer Overflow Vulnerabilities (TSRT@...m.com)
rPSA-2006-0182-1 php php-mysql php-pgsql (rPath Update Announcements <announce-noreply@...th.com>)
FreeWPS File Upload Command Execution (security@...or.net)
Details of Lotus Notes Java Applet vulnerabilities ("Jouko Pynnonen" <jouko@....fi>)
Re: WikyBlog <= v1.4 (WN_BASEDIR) Remote File Inclusion Exploit ("Steven M. Christey" <coley@...re.org>)
Emek Portal v2.1 SQL Injection (dj_remix_20@...mail.com)
phponline <= (LangFile) Remote File Inclusion Exploit (xp1o@....com)
[ GLSA 200610-03 ] ncompress: Buffer Underflow (Raphael Marichez <falco@...too.org>)
Re: net2ftp Remote File Inclusion - bogus report (david@...2ftp.com)

October 7 (17 messages)

LS-20060330 - CA BrightStor ARCserve Backup Remote Buffer Overflow Vulnerability (advisories@...ec.com)
Vulnerability in Btitracker (aeroxteam@...il.com)
LS-20060220 - CA BrightStor ARCserve Backup Remote Buffer Overflow Vulnerability (advisories@...ec.com)
FreeForum 0.9.7 (fpath) Remote File Include Vulnerability (x0r0n@...mail.com)
phpBB User Viewed Posts Tracker Version <= 1.0 [phpbb_root_path] File Include Vulnerability (x0r0n@...mail.com)
LS-20060313 - CA BrightStor ARCserve Backup Remote Buffer Overflow Vulnerability (advisories@...ec.com)
Cahier de textes 2.0 Remote SQL injection Exploit (sami@...uxmail.org)
Sorry....My Message With Out Live Site.... (Dr.Ninux@...mail.com)
Re: Invision Power Board Multiple Vulnerabilities (Rapigator <rapigator@...oo.com>)
Observations on Mandatory Integrity Control (MIC) in Windows Vista (Enno Rey <erey@...w.de>)
Re: Security contact for Myspace/Fox? (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
RE: Informing Companies about security vulnerabilities... (bugtraq@...security.net)
PHP Live! <= 3.1 help.php Remote File Inclusion vulnerability (paisterist.nst@...il.com)
RE: Informing Companies about security vulnerabilities... ("Arian J. Evans" <arian.evans@...chronic.com>)
Re: zero-day flaws in Firefox: about 30 unpatched Firefox flaws (Mailinglists Address <mailinglist@...resshosting.net>)
RE: Informing Companies about security vulnerabilities... (Wolf Halton <saphil@...oo.com>)
JavaScript Spider (code that can traverse the web) ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)

October 9 (22 messages)

The latest version of iSearch is V2.16 <= (index.php) Remote File Inclusion Exploit (xp1o@....com)
Re: [funsec] Technical Paper on the ZERT Patch and VML [was: Re: ZERT patch for setSlice()] (Gadi Evron <ge@...uxbox.org>)
Advanced Poll v2.02 :) <= Remote File Inclusion (alguidy@...mail.com)
PHPMyNews 1.4 <= (cfg_include_dir) Remote File Include Vulnerability (xorontr@...il.com)
[ECHO_ADV_50$2006]OpenDock Easy Blog <=1.4 (doc_directory) Multiple Remote File Inclusion Vulnerability (erdc@...o.or.id)
XSS IN paFileDB 3.1 (zarloule04@...mail.fr)
[ECHO_ADV_51$2006] docmint <= 2.0 (MY_ENV[BASE_ENGINE_LOC]) Remote File Inclusion Vulnerability (erdc@...o.or.id)
Freenews v1.1 <= (chemin) Remote File Include Vulnerability (xorontr@...il.com)
Advisory 09/2006: PHP unserialize() Array Creation Integer Overflow (Stefan Esser <sesser@...dened-php.net>)
SQL injection - 4images (disfigure <disfigure@...il.com>)
PHP open_basedir with symlink() function Race Condition PoC exploit (paisterist.nst@...il.com)
SQL injection - moodle (disfigure <disfigure@...il.com>)
HITBSecConf2006 CTF Source code and daemons (Praburaajan <prabu@...kinthebox.org>)
[ECHO_ADV_48$2006] WebYep <= 1.1.9 (webyep_sIncludePath) Multiple Remote File Inclusion Vulnerability (erdc@...o.or.id)
SUSE Security Announcement: php4,php5 (SUSE-SA:2006:059) (Ludwig Nussel <ludwig.nussel@...e.de>)
[ECHO_ADV_49$2006]OpenDock Easy Doc <=1.4 (doc_directory) Multiple Remote File Inclusion Vulnerability (erdc@...o.or.id)
Cisco Security Advisory: Limitations in Cisco Secure Desktop (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Re: [Full-disclosure] SQL injection - moodle ("scsantos@...granrio com br" <scsantos@...granrio.com.br>)
[ECHO_ADV_52$2006]OpenDock Easy Gallery <=1.4 (doc_directory) Multiple Remote File Inclusion Vulnerability (erdc@...o.or.id)
yet another OpenSSH timing leak? (Marco Ivaldi <raptor@...eadbeef.info>)
[SECURITY] [DSA 1194-1] New libwmf packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
Re: net2ftp: a web based FTP client :) <= Remote File Inclusion ("Steven M. Christey" <coley@...re.org>)

October 10 (25 messages)

[USN-361-1] Mozilla vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
[USN-360-1] awstats vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
7 php scripts File Inclusion / Source disclosure Vuln (gmdarkfig@...il.com)
[ECHO_ADV_54$2006]vtiger CRM <=4.2 (calpath) Multiple Remote File Inclusion Vulnerability (erdc@...o.or.id)
MS Windows DRM software Memory Corruption (Joxean Koret <joxeankoret@...oo.es>)
phpWebSite 0.10.2 Remote File Include Vulnerabilities (crackers_child@...ersavascilar.com)
Re: The latest version of iSearch is V2.16 <= (index.php) Remote File Inclusion Exploit (str0ke <str0ke@...w0rm.com>)
eXpBlog <= 0.3.5 Cross Site Scripting Vulnerabilities (Tamriel <tamriel@....net>)
Re: yet another OpenSSH timing leak? (Gianluca Varisco <giangy@...htemple.org>)
MHL-2006-001 Public Advisory: "Eazy Cart" Multiple Security Issues (Mayhemic Labs Security <security@...hemiclabs.com>)
[security bulletin] HPSBUX02087 SSRT4728 rev.4 - HP-UX running TCP/IP Remote Denial of Service (DoS) (security-alert@...com)
ZDI-06-033: Microsoft Office Excel File Format DATETIME Record Parsing Vulnerability (zdi-disclosures@...m.com)
ZDI-06-032: Microsoft Office PowerPoint Malformed Slide Notes Rebuilding Vulnerability (zdi-disclosures@...m.com)
ZDI-06-034: Microsoft Office Word Malformed Chart Code Execution Vulnerability (zdi-disclosures@...m.com)
[USN-362-1] PHP vulnerabilities (Martin Pitt <martin.pitt@...onical.com>)
[Fedora] libtool-ltdl uses relative paths to resolve and load libraries (Enrico Scholz <enrico.scholz@...ormatik.tu-chemnitz.de>)
Re: yet another OpenSSH timing leak? (Marco Ivaldi <raptor@...eadbeef.info>)
[SECURITY] [DSA 1195-1] new openssl096 packages fix denial of service (Noah Meyerhans <noahm@...cker.debian.org>)
PHPLibrary <= 1.5.3 Remote File Inclusion (k1tk4t@...hack.org)
tagit2b -- Remote File Inclusion (k1tk4t@...hack.org)
claroline <= 180rc1 Remote File Inclusion (k1tk4t@...hack.org)
blueshoes <= 4.6_public Remote File Inclusion (k1tk4t@...hack.org)
pacsec hype security team: 7 words of warning about Macromedia Flash Player 9+ (Dragos Ruiu <dr@....net>)
iDefense Security Advisory 10.10.06: FreeBSD ptrace PT_LWPINFO Denial of Service Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
[ MDKSA-2006:181 ] - Updated python packages fix vulnerability (security@...driva.com)

October 11 (17 messages)

Re: The latest version of iSearch is V2.16 <= (index.php) Remote File Inclusion Exploit ("Steven M. Christey" <coley@...re.org>)
rPSA-2006-0187-1 idle python (rPath Update Announcements <announce-noreply@...th.com>)
Directory Traversal Vulnerability in Goop Gallery 2.0.2 (security@...orize.com)
ShmooCon 2006 CFP Announcement (B Potter <gdead@...oo.com>)
Microsoft Office Malformed Record Memory Corruption Vulnerability (Sowhat <smaillist@...il.com>)
MysqlDumper Version 1.21 b6 Xss Vulnerability (crackers_child@...ersavascilar.com)
Secunia Research: Microsoft Windows Object Packager Dialog Spoofing (Secunia Research <remove-vuln@...unia.com>)
[USN-363-1] libmusicbrainz vulnerability (Kees Cook <kees@...ntu.com>)
Jinzora <= 2.1 Remote File Inclusion (k1tk4t@...hack.org)
gcards (languagefile) <= Remote File Include (D-virus@...uxmail.org)
Noah's Classifieds Cross Site Scripting Vulnerability (raphael.huck@...e.fr)
New tool release today - "wyd" - password profiling ("Max Moser" <max.moser@...il.com>)
Re: phpWebSite 0.10.2 Remote File Include Vulnerabilities (kevin@....appstate.edu)
CommunityPortals <= 1.0 Remote File Include Vulnerability (nima.salehi@...oo.com)
Re: gcards (languagefile) <= Remote File Include (str0ke <str0ke@...w0rm.com>)
AlberT-EasySite <= 1.0.a5 Remote File Inclusion (k1tk4t@...hack.org)
[ MDKSA-2006:182 ] - Updated kernel packages fix multiple vulnerabilities and bugs (security@...driva.com)

October 12 (17 messages)

zenphoto Multiple Path Disclosure and Cross Site Scripting Vulnerabilities (raphael.huck@...e.fr)
iDefense Security Advisory 10.11.06: AOL YGPPDownload SetAlbumName ActiveX Control Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
new version of phplist fix XSS vulnerability (info@...list.com)
iDefense Security Advisory 10.11.06: Sun Microsystems Solaris NSPR Library Arbitrary File Creation Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
MS06-060 Microsoft Word Memmove Code Execution (Avert@...rtlabs.com)
SecureWorks Research Client Advisory: Multiple Vendor Bluetooth Memory Stack Corruption Vulnerability ("Research" <research@...ureworks.com>)
MHL-2006-002 Public Advisory: "Call-Center-Software" Multiple Security Issues (Mayhemic Labs Security <security@...hemiclabs.com>)
XeoPort <= 0.81 SQL Injection Vulnerability (Tamriel <tamriel@....net>)
Xeobook <= 0.93 Multiple SQL Injection Vulnerabilities (Tamriel <tamriel@....net>)
[security bulletin] HPSBMA02158 SSRT061251 rev.1 - HP Version Control Agent, Remote Unauthorized Access and Possible Elevation of Privileg… (security-alert@...com)
ExtCalThai_Component <= 0.9.1 Remote File Inclusion (k1tk4t@...hack.org)
Cisco Security Advisory: Default Password in Wireless Location Appliance (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Journals System <= 1.0.2 [RC2] Remote File Include Vulnerability (nima.salehi@...oo.com)
Admin User Viewed Posts Tracker Remote File Include Vulnerability (nima.salehi@...oo.com)
Iono all version fullpath disclosure (hack2prison@...oo.com)
Security Suite IP Logger Remote File Inclusion (ReeM_HaCk@...mAiL.cOm)
Download-Engine Remote File Include (v1per-hacker@...mail.com)

October 13 (26 messages)

Black Hat CFP, Registration, and Announcements for October (Jeff Moss <jmoss@...ckhat.com>)
Phpbb insert mod Remote file include (By_KorsaN_Son@...mail.com)
Google Earth (kml & kmz files) buffer overflow ("Alexander Hristov" <joffer@...il.com>)
Mcafee Network Agent (mcnasvc.exe) Remote DoS ("Alexander Hristov" <joffer@...il.com>)
[security bulletin] HPSBST02160 SSRT061254 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS06-055 (security-alert@...com)
[security bulletin] HPSBST02134 SSRT061187 rev.2 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS06-052, MS06-053 an… (security-alert@...com)
CMS contenido Remote File Inclusion (CvIr.System@...il.com)
RamaCMS (adodb.inc.php) Remote File Inclue Vulnerability (Le.CoPrA@...mail.com)
PacSec Hype Security Team: CGI.pm param injection (Dragos Ruiu <dr@....net>)
Morcego CMS <= 0.9.6 Remote File Inclue Vulnerability (Le.CoPrA@...mail.com)
CMS contenido Path Disclosure (CvIr.System@...il.com)
SpamBlockerMODv <= 1.0.2 Remote File Include Vulnerability (nima.salehi@...oo.com)
Download-Engine Remote File İnclude (By_KorsaN_Son@...mail.com)
ISOI II - a DA Workshop (announcement and CFP) (Gadi Evron <ge@...uxbox.org>)
PHP Cards <= 1.3 Remote File Inclue Vulnerability (Le.CoPrA@...mail.com)
Utimaco Safeguard Easy vulnerability (boomboom999@...oo.com)
Bloq 0.5.4 Remote File İnclude (By_KorsaN_Son@...mail.com)
phpBB Security <= 1.0.1 Remote File Include Vulnerability (nima.salehi@...oo.com)
PHPht Topsites Remote File İnclude (By_KorsaN_Son@...mail.com)
news7 <= (news.php) Remote File Inclusion Exploit (xp1o@....com)
Jax Newspage Remote File include (dj_remix_20@...mail.com)
TorrentFlux startpop.php torrent Script Insertion (566d9bfe@...sg.stevenroddis.com.au)
[SECURITY] [DSA 1166-2] New cheesetraceker packages fix buffer overflow (Steve Kemp <skx@...ian.org>)
pbpbb archive for search engines Remote File Include Vulnerability (nima.salehi@...oo.com)
Jax LinkLists Remote File include (dj_remix_20@...mail.com)
MNews <= 2.0 (noticias.php) Remote File Inclue Vulnerability (Le.CoPrA@...mail.com)

October 14 (26 messages)

phpMyConferences <= 8.0.2 Remote File Inclusion (k1tk4t@...hack.org)
phpBB Add Name Remote File Include Vulnerability (nima.salehi@...oo.com)
SpamOborona PHPBB Plugin Remote File Include Vulnerability (nima.salehi@...oo.com)
Open Conference Systems <= 1.1.3 Remote File Inclusion (k1tk4t@...hack.org)
maluinfo version 206.2.38l Remote File Include Vulnerability (nima.salehi@...oo.com)
AMAZONIA MOD Remote File Include Vulnerability (nima.salehi@...oo.com)
phpBB PlusXL 2.x <= biuld 272 Remote File Include Vulnerability (nima.salehi@...oo.com)
news defilante horizontale <= 4.1.1 Remote File Include Vulnerability (nima.salehi@...oo.com)
phpBB lat2cyr <= 1.0.1 Remote File Include Vulnerability (nima.salehi@...oo.com)
RPG Events 1.0.0 Remote File Include Vulnerability (nima.salehi@...oo.com)
PhpBB Prillian French Remote File Include Vulnerability (nima.salehi@...oo.com)
PHP Top webs (config.php) Remote File Inclue Vulnerability (Le.CoPrA@...mail.com)
Buzlas <= v2006-1 Full Remote File Include Vulnerability (nima.salehi@...oo.com)
iDefense Security Advisory 10.13.06: Apache HTTP Server mod_tcl set_var Format String Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
EXlor 1.0 (/fonctions/template.php) Remote File Include Vulnerability ("mahmood ali" <mah_k_2000@...mail.com>)
Re: iDefense Security Advisory 10.11.06: Sun Microsystems Solaris NSPR Library Arbitrary File Creation Vulnerability (Marco Ivaldi <raptor@...eadbeef.info>)
Multiple XSS Vulnerability in Gcontact (security@...orize.com)
Re: DanPHPSupport => 0.5 Cross Site Scripting Vulnerabilities (dansoftaus@...oo.com.au)
@lex Guestbook <=(ModeliXe.php) Remote File Inclusion Exploit (xp1o@....com)
Re: Secunia Research: Microsoft Windows Object Packager Dialog Spoofing (edubp2002@...mail.com)
Re: Jax LinkLists Remote File include (xorontr@...il.com)
WDT:- osTicket File Include all V (stormhacker@...mail.com)
Re: Multiple XSS Vulnerabilities in Zen Cart 1.3.5 (security@...orize.com)
Jinzora 2.6 - Remote File Include Vulnerabilities (erne@...ealizm.com)
Spoofing security dialog in object packager - 2 (seejay.11@...il.com)
Re: yet another OpenSSH timing leak? (Marco Ivaldi <raptor@...eadbeef.info>)

October 16 (23 messages)

ISS BlackICE PC Protection Filelock protection bypass Vulnerability (Matousec - Transparent security Research <research@...ousec.com>)
Re: @lex Guestbook <=(ModeliXe.php) Remote File Inclusion Exploit (ptitgal@...mail.com)
Re: [Full-disclosure] Kmail <= 1.9.1 (table/frameset) DOS (Vidar Løkken <vidarlo@...tdata.no>)
Kmail <= 1.9.1 (table/frameset) DOS (nnp <version5@...il.com>)
bbsNew ( File Include Vulnerability Exploit ) (h4ck3riran@...oo.com)
SYMSA-2006-010: Directory Traversal in IronWebMail (research@...antec.com)
vbulletin Exploit Tool Box (m4k3@...security.securityfocus.com, "[dot]"@securityfocus.com, de@...urityfocus.com)
Back-end ( File Include Vulnerability Exploit ) (h4ck3riran@...oo.com)
maintain-3.0.0-RC2 - Remote File Include Vulnerabilities (erne@...ealizm.com)
Security Advisory for Bugzilla 2.18.5, 2.20.2, 2.22, and 2.23.2 (mkanat@...zilla.org)
Full Path Disclosure in PHP-Wyana (xx_hack_xx_2004@...mail.com)
:ShAnKaR: WoltLab Burning Book <=1.1.2 multiple vulnerabilities (3APA3A <3APA3A@...urity.nnov.ru>)
MOStlyCEV454 - Remote File Include Vulnerabilities (erne@...ealizm.com)
VoMM: Taking browser exploits to the next level (avivra <avivra@...il.com>)
WebYep-1.1.9 - Remote File Include Vulnerabilities (erne@...ealizm.com)
[USN-364-1] Xsession vulnerability (Kees Cook <kees@...ntu.com>)
[ GLSA 200610-04 ] Seamonkey: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
osprey 1.0 (ListRecords.php) Remote File Include Vulnerability (KaBaRa.HaCk.eGy@...il.com)
iDefense Security Advisory 10.15.06: Clam AntiVirus ClamAV CHM Chunk Name Length DoS Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Full Path Disclosure in PHP-Wyana (2) (xx_hack_xx_2004@...mail.com)
patchlodel-0.7.3 - Remote File Include Vulnerabilities (erne@...ealizm.com)
iDefense Security Advisory 10.15.06: Clam AntiVirus ClamAV rebuildpe Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Rapid7 Advisory R7-0025: Buffer Overflow in NVIDIA Binary Graphics Driver For Linux (advisory@...id7.com)

October 17 (16 messages)

PHP Forge 3b2 (/inc/inc.php) Remote File Include Vulnerability ("mahmood ali" <mah_k_2000@...mail.com>)
Advisory 10/2006: ViewVC Undefined Charset UTF-7 XSS Vulnerability (Stefan Esser <sesser@...dened-php.net>)
About.com contact ("C. Hamby" <fixer@....net>)
Re: vbulletin Exploit Tool Box (scottREMOVE@...lletin.com)
[Xss] IN phplist v 2.10.2, (the-free_kernel@...izq.net)
[USN-365-1] libksba vulnerability (Kees Cook <kees@...ntu.com>)
Re: Directory Traversal Vulnerability in Goop Gallery 2.0.2 (gene@...terfamily.org)
PR06-03b: F5 Firepass 1000 SSL VPN version 5.5 vulnerable to Cross-Site Scripting (research@...checkup.com)
TorrentFlux action Script Insertion (3cab7cc7@...sg.stevenroddis.com.au)
TorrentFlux file Script Insertion (3cab7cc7@...sg.stevenroddis.com.au)
TorrentFlux user_id Script Insertion (3cab7cc7@...sg.stevenroddis.com.au)
[OpenPKG-SA-2006.023] OpenPKG Security Advisory (php) (OpenPKG <openpkg@...npkg.org>)
[ECHO_ADV_55$2006]Phpmybibli <=2.1 Multiple Remote File Inclusion Vulnerability (erdc@...o.or.id)
Flaw in Firefox 2.0 RC2 (Mike@...il.com)
[security bulletin] HPSBUX02155 SSRT061235 rev.2 HP-UX CIFS Server (Samba) Local Unauthorized Access, Elevated Privileges (security-alert@...com)
Re: Flaw in Firefox 2.0 RC2 (Jose Nazario <jose@...key.org>)

October 18 (36 messages)

rPSA-2006-0194-1 kernel (rPath Update Announcements <announce-noreply@...th.com>)
Rapid7 Advisory R7-0026: HTTP Header Injection Vulnerabilities in the Flash Player Plugin (advisory@...id7.com)
iDefense Security Advisory 10.17.06: Opera Software Opera Web Browser URL Parsing Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
[ MDKSA-2006:183 ] - Updated libksba packages correct DoS vulnerability (security@...driva.com)
[ GLSA 200610-06 ] Mozilla Network Security Service (NSS): RSA signature forgery (Raphael Marichez <falco@...too.org>)
[ GLSA 200610-05 ] CAPI4Hylafax fax receiver: Execution of arbitrary code (Raphael Marichez <falco@...too.org>)
[ GLSA 200610-07 ] Python: Buffer Overflow (Raphael Marichez <falco@...too.org>)
phpAdsNew include bug! (wacky@...ck.pl)
Re: Flaw in Firefox 2.0 RC2 ("Eliah Kagan" <degeneracypressure@...il.com>)
Re: Flaw in Firefox 2.0 RC2 (jm <jm@....com.au>)
[ MDKSA-2006:185 ] - Updated php packages to address multiple vulnerabilities (security@...driva.com)
Re: phpAdsNew include bug! (Wim Godden <security@...stlinknetworks.com>)
Comdev One Admin 4.1 Remote File Inclusion (disfigure <disfigure@...il.com>)
Boonex Dolphin 5.2 Remote File Inclusion (disfigure <disfigure@...il.com>)
Simplog 0.9.3.1 SQL Injection (disfigure <disfigure@...il.com>)
Re: Flaw in Firefox 2.0 RC2 (Shane Lahey <s.lahey@...rogers.com>)
zorum_3_5 <=(dbproperty.php) Remote File Inclusion Exploit (xp1o@....com ( MoHaNdKo ))
[ECHO_ADV_46$2006] P-Book <= 1.17 (pb_lang) Remote File Inclusion (erdc@...o.or.id)
Analysis of the Oracle October 2006 Critical Patch Update ("David Litchfield" <davidl@...software.com>)
TSLSA-2006-0057 - multi (Trustix Security Advisor <tsl@...stix.org>)
CS-Forum 0.82 (ajouter.php) Remote File Include Vulnerability ("mahmood ali" <mah_k_2000@...mail.com>)
PhpBB<=2.0.10 (groupcp.php) Remote File Include Vulnerability ("mahmood ali" <mah_k_2000@...mail.com>)
PHPRecipeBook <= 2.35 ((g_rb_basedir)) Remote File Include Exploit (CarcaBotx@...oo.com)
Call for Papers - First International Workshop on Secure Software Engineering (SecSE 2007) (Lillian Røstad <lilliaro@....ntnu.no>)
Multiple vulnerabilities in Highwall Enterprise and Highwall Endpoint management interface (noreply@...ecurity.ru)
Airmagnet management interfaces multiple vulnerabilities (noreply@...ecurity.ru)
Re: Utimaco Safeguard Easy vulnerability (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
{x0n3-h4ck} DEV Web Manager System <= 1.5 XSS Exploit (corrado.liotta@...ce.it)
Re: Flaw in Firefox 2.0 RC2 (Paul Schmehl <pauls@...allas.edu>)
Secunia Research: Joomla BSQ Sitestats Script Insertion and SQL Injection (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: IBM Lotus Notes Insecure Default Folder Permissions (Secunia Research <remove-vuln@...unia.com>)
Re: Flaw in Firefox 2.0 RC2 (arny <arny@...y.ro>)
Static fmat exploits with random va (root <root@...iroz.net.net>)
Security-Assessment.com Advisory: Asterisk remote heap overflow (Adam Boileau <adam.boileau@...urity-assessment.com>)
[ MDKSA-2006:184 ] - Updated clamav packages fix vulnerabilities (security@...driva.com)
Re: PHPRecipeBook <= 2.35 ((g_rb_basedir)) Remote File Include Exploit (str0ke <str0ke@...w0rm.com>)

October 19 (27 messages)

[USN-366-1] binutils vulnerability (Kees Cook <kees@...ntu.com>)
rPSA-2006-0195-1 kdelibs (rPath Update Announcements <announce-noreply@...th.com>)
[USN-367-1] Pike vulnerability (Kees Cook <kees@...ntu.com>)
[security bulletin] HPSBST02161 SSRT061264 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS06-056 Through MS06… (security-alert@...com)
[SECURITY] [DSA 1196-1] New clamav packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
[OpenPKG-SA-2006.024] OpenPKG Security Advisory (asterisk) (OpenPKG <openpkg@...npkg.org>)
Re: Flaw in Firefox 2.0 RC2 (Lubomir Kundrak <lkundrak@...hat.com>)
Advisory 11/2006: Serendipity Weblog XSS Vulnerabilities (Stefan Esser <sesser@...dened-php.net>)
[DRUPAL-SA-2006-024] Drupal 4.6.10 / 4.7.4 fixes multiple XSS issues (Uwe Hermann <uwe@...mann-uwe.de>)
[DRUPAL-SA-2006-025] Drupal 4.6.10 / 4.7.4 fixes CRF issue (Uwe Hermann <uwe@...mann-uwe.de>)
[DRUPAL-SA-2006-026] Drupal 4.6.10 / 4.7.4 fixes HTML attribute injection issue (Uwe Hermann <uwe@...mann-uwe.de>)
Re: phpAdsNew include bug! (matteo@...adsnew.com)
DigitalHive 2.0 RC2 (base_include.php)File Include ("mahmood ali" <mah_k_2000@...mail.com>)
UltraCMS 0.9 sql injection (fireboy2006@...il.com)
KICS CMS sql injection (fireboy2006@...il.com)
SQL Injection simplog (navairum@...il.com)
Multiple XSS Vulnerabilities in KnowledgeBank 1.01 (security@...orize.com)
Re: PhpBB<=2.0.10 (groupcp.php) Remote File Include Vulnerability (neothermic@...bb.com)
PHP "exec", "system", "popen" problem ("Дмитрий Borgir" <dimmoborgir@...il.com>)
ERRATA: [ GLSA 200610-07 ] Python: Buffer Overflow (Raphael Marichez <falco@...too.org>)
Re: PHPRecipeBook <= 2.35 ((g_rb_basedir)) Remote File Include Exploit (theif@...il.com)
ATutor 1.5.3.2=> Remote File Include Vulnerability (subzero.0000@...mail.com)
RE: Flaw in Firefox 2.0 RC2 ("Sean Warnock" <swarnock@...nocksolutions.com>)
[Xss] IN SMF 1.1 RC2 (the_free_kernel@...izq.net)
Re: Flaw in Firefox 2.0 RC2 (Mark A Basil <mark.basil@...kmonitor.com>)
[ MDKSA-2006:186 ] - Updated kdelibs packages fix KHTML vulnerability (security@...driva.com)
TORQUE Spool Job Race condition (torque <= 2.0.0p8) (Luís Miguel Silva <lms@...gaya.pt>)

October 20 (16 messages)

RE: Flaw in Firefox 2.0 RC2 ("Aras \"Russ\" Memisyazici" <arasm@...edu>)
iDefense Security Advisory 10.19.06: Kaspersky Labs Anti-Virus IOCTL Local Privilege Escalation Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Re: PHP "exec", "system", "popen" (+small POC) (Bernhard Mueller <research@...-consult.com>)
Re: iDefense Security Advisory 10.19.06: Kaspersky Labs Anti-Virus IOCTL Local Privilege Escalation Vulnerability (abel.andrade@...os.com)
[CAID 34693, 34694]: CA BrightStor ARCserve Backup Multiple Buffer Overflow Vulnerabilities (UPDATED) ("Williams, James K" <James.Williams@...com>)
[KAPDA::#60] Mambo V4.6.x vulnerabilities (alireza hassani <trueend5@...oo.com>)
HPSBUX02162 SSRT061223 rev.1 - HP-UX Running dtmail, Local Execution of Arbitrary Code (security-alert@...com)
Simple Machines Forum (SMF) XSS issue (josecarlos.norte@...il.com)
PHP Classifieds 7.1 - Remote File Include Vulnerability (Le.CoPrA@...mail.com)
[ GLSA 200610-08 ] Cscope: Multiple buffer overflows (Raphael Marichez <falco@...too.org>)
[security bulletin] HPSBTU02163 SSRT061223 rev.1 - HP Tru64 UNIX Running dtmail, Local Execution of Arbitrary Code (security-alert@...com)
PHP Poll Creator 1.04 (poll_vote.php)File Include ("mahmood ali" <mah_k_2000@...mail.com>)
[Reversemode Advisory] Kaspersky Anti-Virus Privilege Escalation (Reversemode <advisories@...ersemode.com>)
Advisory for Oneorzero helpdesk ("Mike Klingler" <whitehatguru@...il.com>)
PHPLibrary-1.5.3(Description.php) Remote File Include (arab_anaconda@...mail.com)
Re: Flaw in Firefox 2.0 RC2 (Jure Pečar <pegasus@...v.eu.org>)

October 21 (6 messages)

[OpenPKG-SA-2006.025] OpenPKG Security Advisory (drupal) (OpenPKG <openpkg@...npkg.org>)
Re: Simple Machines Forum (SMF) XSS issue (mrapples@...il.com)
Open Meetings Filing Application (PROJECT_ROOT) Remote File Include Vulnerability (xorontr@...il.com)
Hustle Labs & MNIN eDirectory Vulnerability ("Ryan Smith" <whatstheaddress@...il.com>)
Virtual Law Office (phpc_root_path) Remote File Include Vulnerability (xorontr@...il.com)
Re: iDefense Security Advisory 10.19.06: Kaspersky Labs Anti-Virus IOCTL Local Privilege Escalation Vulnerability ("Steven M. Christey" <coley@...re.org>)

October 23 (35 messages)

[USN-368-1] Qt vulnerability (Martin Pitt <martin.pitt@...onical.com>)
[ GLSA 200610-09 ] libmusicbrainz: Multiple buffer overflows (Matthias Geerdsen <vorlon@...too.org>)
RMSOFT Cross Site Scripting (FREAK_PR@...MAIL.COM)
trawler <= 1.8.1 Remote File Inclusion (k1tk4t@...hack.org)
IPEER Remote file inclusion (navairum@...il.com)
iDefense Security Advisory 10.21.06: Novell eDirectory evtFilteredMonitorEventsRequest Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 10.21.06: Novell eDirectory NCP over IP length Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 10.21.06: Novell eDirectory evtFilteredMonitorEventsRequest Invalid Free Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
XSS in Zwahlen Online Shop ("MC Iglo" <mc.iglo@...lan.de>)
speedberg <= 1.2beta1 Remote File Inclusion (k1tk4t@...hack.org)
WHM 10.8.0 cPanel 10.9.0 R50 CentOS 4.4 i686 WHM X v3.1.0 Xss Vulnerability (crackers_child@...ersavascilar.com)
PHP Generator of Object SQL Database (path) Remote File Include Vulnerability (xorontr@...il.com)
AROUNDMe 0.6.9 remonte file inclusion (noislet.nospam@...il.com)
Re: Simple Machines Forum (SMF) XSS issue (RSnake <rsnake@...cking.com>)
[SECURITY] [DSA 1197-1] New python2.4 packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
-==PHP Nuke <= 7.9 SQL Injection and Bypass SQL Injection Protection vulnerabilities==- (paisterist.nst@...il.com)
[PHPADSNEW-SA-2006-002] phpAdsNew and phpPgAds 2.0.8-pr1 fix XSS vulnerability (Matteo Beccati <security@...adsnew.com>)
D-Link DSL-G624T several vulnerabilities (jose.palanco@...el.es)
Flaw in Firefox 2.0 Final (mike@...il.com)
Smarty-2.6.1 Remote File Include Vulnerabilities (crackers_child@...ersavascilar.com)
SQL Injection Vulnerability in Oracle WWV_FLOW_UTILITIES (ak@...-database-security.com)
Cross-Site-Scripting Vulnerability in Oracle APEX WWV_FLOW_ITEM_HELP (ak@...-database-security.com)
http://www.red-database-security.com/advisory/oracle_apex_css_notification_msg.html (ak@...-database-security.com)
Various Cross-Site-Scripting Vulnerabilities in Oracle Reports (ak@...-database-security.com)
hack.lu Bluetooth demo ("K F (lists)" <kf_lists@...italmunition.com>)
Modify Data via Inline Views (ak@...-database-security.com)
SQL Injection in package SYS.DBMS_SQLTUNE_INTERNAL (ak@...-database-security.com)
SQL Injection in package XDB.DBMS_XDBZ0 (ak@...-database-security.com)
SQL Injection in package SYS.DBMS_CDC_IMPDP (ak@...-database-security.com)
SQL Injection in Oracle package MDSYS.SDO_LRS (ak@...-database-security.com)
INCA IM-204 Dsl several vulnerabilities (crackers_child@...ersavascilar.com)
Re: [Full-disclosure] hack.lu Bluetooth demo (Thierry Zoller <Thierry@...ler.lu>)
Multiple HTTP response splitting vulnerabilities in SHOP-SCRIPT ("Debasis Mohanty" <debasis.mohanty.listmails@...il.com>)
Application orders Linux in WebAPP v0.9.9.2.1 (the_free_kernel@...izq.net)
WikiNi Multiple Cross Site Scripting Vulnerabilities (raphael.huck@...e.fr)

October 24 (16 messages)

[SECURITY] [DSA 1198-1] New python2.3 packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
Symantec Product Security: Symantec Device Driver Elevation of Privileg (secure@...antec.com)
Re: Smarty-2.6.1 Remote File Include Vulnerabilities ("J. Carlos Nieto" <xiamkong@...oo.com.mx>)
[ GLSA 200610-10 ] ClamAV: Multiple Vulnerabilities (Raphael Marichez <falco@...too.org>)
[ GLSA 200610-11 ] OpenSSL: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
Month of Kernel Bugs and fsfuzzer release (0.6) (L.M.H. <lmh@...o-pull.com>)
[SECURITY] [DSA 1199-1] New webmin packages fix input validation problems (Noah Meyerhans <noahm@...ian.org>)
ProgSys verion 0.151 XSS vulnerability (security@...ilon.com)
[vuln.sg] CruiseWorks Directory Traversal and Buffer Overflow Vulnerabilities (vulnpost-remove@...n.sg)
Re: Application orders Linux in WebAPP v0.9.9.2.1 (nicolascamino@...il.com)
who needs a server ... (<auto113922@...h.ai>)
CSLH2.9.9 Remote File Include Vulnerabilities (crackers_child@...ersavascilar.com)
adobe php sdk Remote File Include Vulnerabilities (crackers_child@...ersavascilar.com)
InteliEditor (sys_path) Remote File Include Vulnerability (xorontr@...il.com)
[ GLSA 200610-12 ] Apache mod_tcl: Format string vulnerability (Raphael Marichez <falco@...too.org>)
Re: adobe php sdk Remote File Include Vulnerabilities (Mailinglists Address <mailinglist@...resshosting.net>)

October 25 (9 messages)

Cisco Security Advisory: Cisco Security Agent for Linux Port Scan Denial of Service (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Re: Yahoo! Messenger Service 18 Remote Buffer Overflow Vulnerability (Gadi Evron <ge@...uxbox.org>)
[KAPDA::#61] - PacPoll <= 4.0 Multiple Vulnerabilities (farhadkey@...oo.com)
phpMyConferences_8.0.2 Remote File Inclusion (Outlaw@...a-security.net)
[ MDKSA-2006:187 ] - Updated Qt packages fix vulnerability (security@...driva.com)
iDefense Security Advisory 10.25.06: AOL Nullsoft Winamp Ultravox 'ultravox-max-msg' Header Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.c…)
Re: phpMyConferences_8.0.2 Remote File Inclusion (Tamriel <tamriel@....net>)
Mozilla Firefox JavaScript Handler Race Condition Memory Corruption Vulnerability (erreale@...il.com)
iDefense Security Advisory 10.25.06: AOL YGPPDownload AddPictureNoAlbum ActiveX Control Heap Corruption Vulnerability (iDefense Labs <labs-no-reply@...fense.co…)

October 26 (7 messages)

iDefense Security Advisory 10.25.06: AOL YGPPDownload downloadFileDirectory ActiveX Control Heap Corruption Vulnerabili… (iDefense Labs <labs-no-reply@...fense.c…)
Web-style Wireless IDS attacks (noreply@...ecurity.ru)
iDefense Security Advisory 10.25.06: AOL Nullsoft Winamp Ultravox Lyrics3 v2.00 tags Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
[security bulletin] HPSBMA02133 SSRT061201 rev.2 - HP Oracle for OpenView (OfO) Critical Patch Update (security-alert@...com)
[OpenPKG-SA-2006.026] OpenPKG Security Advisory (screen) (OpenPKG <openpkg@...npkg.org>)
rPSA-2006-0195-2 kdelibs qt-x11-free (rPath Update Announcements <announce-noreply@...th.com>)
rPSA-2006-0198-1 screen (rPath Update Announcements <announce-noreply@...th.com>)

October 27 (32 messages)

IE7 is a Source of Problem - Secunia IE7 Release Incident of October 2006 ("LIUDIEYU dot COM" <liudieyu.com@...il.com>)
TSLSA-2006-0059 - postgresql (Trustix Security Advisor <tsl@...stix.org>)
MHL-2006-003 Public Advisory: "ezOnlineGallery" Multiple Security Issues (Mayhemic Labs Security <security@...hemiclabs.com>)
MiniBILL v2006-10-10 (config[page_dir] Remote File Include Vulnerability (xorontr@...il.com)
Insecure storage of passwords in Axalto Protiva (nnposter@...closed.not)
Joomla extended_registration mod Remote File Include Vulnerabilities (crackers_child@...ersavascilar.com)
Directory Traversal in TorrentFlux 2.1 (Christopher <vooduhal@...il.com>)
phpFaber CMS Cross Site Scripting (security@...ilon.com)
iDefense Security Advisory 10.26.06: Multiple Vendor wvWare LVL Count Integer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 10.26.06: Multiple Vendor wvWare LFO Count Integer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
ZDI-06-035: Novell eDirectory NDS Server Host Header Buffer Overflow Vulnerability (zdi-disclosures@...m.com)
Re: Mozilla Firefox JavaScript Handler Race Condition Memory Corruption Vulnerability (Christian Kalkhoff <me@...an.info>)
[ GLSA 200610-13 ] Cheese Tracker: Buffer Overflow (Raphael Marichez <falco@...too.org>)
vulnerability in Symantec products (security@...ichsoft.com)
Re: IE7 is a Source of Problem - Secunia IE7 Release Incident of October 2006 (Reversemode <advisories@...ersemode.com>)
Re: [Full-disclosure] IE7 is a Source of Problem - Secunia IE7 Release Incident of October 2006 ("HASEGAWA Yosuke " <yosuke.hasegawa@...il.com>)
TextPattern <=1.19 Remote File Inclusion Vulnerability (Bithedz@...il.com)
SMF fgets off-by-one issue and filter size evasion (josecarlos.norte@...il.com)
IE7 status: 8 days after release, 3 unfixed issues (Moritz Naumann <security@...itz-naumann.com>)
UNISOR CMS sql injection (fireboy2006@...il.com)
PHP-Nuke <= 7.9 Search module "author" SQL Injection vulnerability (paisterist.nst@...il.com)
ArticleBeach Script <= 2.0 Remote File Inclusion Vulnerability (Bithedz@...il.com)
GestArt <= vbeta 1 Remote File Include Vulnerabilities (ip.123.456.78.90@...mail.com)
RFID enabled e-passport skimming proof of concept code released (RFIDIOt) (Adam Laurie <adam.laurie@...bunker.net>)
PLS-Bannieres 1.21 (bannieres.php) File Include ("mahmood ali" <mah_k_2000@...mail.com>)
phpLedAds 2.0(dir) File Include ("mahmood ali" <mah_k_2000@...mail.com>)
[funsec] Haxdoor: UK Police Count 8, 500 Victims in Data Theft (So Far) (fwd) (Gadi Evron <ge@...uxbox.org>)
phpAdsNew-2.0.8 <= (adlayer.php) Remote File Include (zooz_998@...mail.com)
Ban v0.1 (bannieres.php) File Include ("mahmood ali" <mah_k_2000@...mail.com>)
Thepeak File Upload v1.3 : Read file vulneability (loveha@...il.com)
Hosting Controller 6.1 Hotfix <= 3.2 Vulnerability (playpacific.emulacaid@...il.com)
Microsoft .NET request filtering bypass vulnerability (research@...checkup.com)

October 28 (7 messages)

[ MDKSA-2006:189 ] - Updated xsupplicant fixes possible remote root stack smash vulnerability (security@...driva.com)
Re: phpAdsNew-2.0.8 <= (adlayer.php) Remote File Include (emme0032@....edu)
[ MDKSA-2006:188 ] - Updated mono packages fix vulnerability (security@...driva.com)
[ MDKSA-2006:190 ] - Updated mutt packages fix multiple vulnerabilities (security@...driva.com)
[ MDKSA-2006:192 ] - Updated ruby packages fix DoS vulnerability (security@...driva.com)
Re: Ban v0.1 (bannieres.php) File Include (Francesco Laurita <francesco@...ncesco-laurita.info>)
[ MDKSA-2006:191 ] - Updated screen packages fix vulnerability (security@...driva.com)

October 30 (28 messages)

[ GLSA 200610-14 ] PHP: Integer overflow (Raphael Marichez <falco@...too.org>)
[SECURITY] [DSA 1200-1] New Qt packages fix integer overflow (Noah Meyerhans <noahm@...ian.org>)
[OpenPKG-SA-2006.027] OpenPKG Security Advisory (wordpress) (OpenPKG <openpkg@...npkg.org>)
Re: [Full-disclosure] ZDI-06-035: Novell eDirectory NDS Server Host Header Buffer Overflow Vulnerability ("Matt Richard" <matt.richard@...il.com>)
CentiPaid <= 1.4.2 [$class_pwd] Remote File Include (firewall1954@...mail.com)
Exporia => 0.3.0 Remote File Include Vulnerability Exploit (h4ck3riran@...oo.com)
bbsNew => 2.0.1 Remote File Include Vulnerability Exploit (h4ck3riran@...oo.com)
Back-end => 0.4.5 Remote File Include Vulnerability Exploit (h4ck3riran@...oo.com)
SQL in WebWizForum by almaster hacker (almaster@...mail.com)
Re: vulnerability in Symantec products (<jay.tomas@...osecguru.com>)
Re: phpAdsNew-2.0.8 <= (adlayer.php) Remote File Include (simo@...x.org)
freenews---> fileinclude (xp1o@....com ( MoHaNdKo ))
easy notes manager sql injection and authentication bypass (poplix@...uasia.org)
Re: imageVue16.1 upload vulnerability (mjau@...u-mjau.com)
Simple Website Software v0.99 (common.php) Remote File Include (cw.cybersecurity@...il.com)
PHPEasyData Pro 1.4.1 (index.php) Remote SQL Injection Vulnerability (ajannhwt@...mail.com)
PHPEasyData Pro 2.2.1 (index.php) Remote SQL Injection Vulnerability (ajannhwt@...mail.com)
Nucleus Core v3.23 - Remote File Include (firewall1954@...mail.com)
Punbb <= 1.2.13 Multiple Vulnerabilities (Nms <nms@...gan.org>)
[ECHO_ADV_53$2006] QnECMS <= 2.5.6 (adminfolderpath) Remote File Inclusion Vulnerability (erdc@...o.or.id)
opendocman <= 1.2p3 Bypass admin/user Login (k1tk4t@...hack.org)
Metasploit Framework 2.7 Released (H D Moore <sflist@...italoffense.net>)
[ GLSA 200610-15 ] Asterisk: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
CORE FORCE R0.95 released! ("CORE FORCE Team" <force@...ce.coresecurity.com>)
Multiple Remote File Include (firewall1954@...mail.com)
Re: CentiPaid <= 1.4.2 [$class_pwd] Remote File Include (Francesco Laurita <francesco@...ncesco-laurita.info>)
unreliable vulnerability reports en-masee [was:Re: vulnerability in Symantec products] (Gadi Evron <ge@...uxbox.org>)
[security bulletin] HPSBMA02138 SSRT061184 rev.2 - HP OpenView Storage Data Protector, Remote Unauthorized Arbitrary Command Execution (security-alert@...com)

October 31 (29 messages)

[security bulletin] HPSBMA02121 SSRT061157 rev.3 - HP OpenView Storage Data Protector Remote Unauthorized Arbitrary Command Execution (security-alert@...com)
[MajorSecurity Advisory #29]foresite CMS - Cross Site Scripting Issue (admin@...orsecurity.de)
[security bulletin] HPSBTU02168 SSRT061237 rev.1 - HP Tru64 UNIX Running gzip, gunzip, and gzcat, Remote Unauthorized Arbitrary Code Execu… (security-alert@...com)
Re: CentiPaid <= 1.4.2 [$class_pwd] Remote File Include (Tamriel <tamriel@....net>)
Re: freenews---> fileinclude (Tamriel <tamriel@....net>)
Re: Nucleus Core v3.23 - Remote File Include (Francesco Laurita <francesco@...ncesco-laurita.info>)
Re: Free Rainbow Tables.com (Jerome Athias <jerome.athias@...e.fr>)
ModSecurity 2.0, A Core Rule Set and Console now available ("Ofer Shezaf" <OferS@...ach.com>)
phpMyConferences <= 8.0.2 Remote File Inclusion (mfp.c@...mail.com)
ActiveX security leaks in the TV owned web game platform (maxgipeh@...oo.com)
Hawking Technology wireless router WR254-CA DNS issue ("Nikolai Grigoriev" <ngrigoriev@...il.com>)
[ MDKSA-2006:193 ] - Updated ImageMagick packages fix vulnerabilities (security@...driva.com)
[ MDKSA-2006:194 ] - Updated PostgreSQL packages fix vulnerabilities (security@...driva.com)
SQL Injection Vulnerability in bfExplorer 0.0.6 (security@...orize.com)
Sun java System Messenger Express XSS (handrix@...il.com)
New Flaw in Firefox 2.0: DoS and possible remote code execution (xxxx@...il.com)
Re: freenews---> fileinclude (pokley <pokleyzz@...n-associates.net>)
Re: freenews---> fileinclude (pokley <saleh@...n-associates.net>)
Authentication bypass in BytesFall Explorer (RedTeam Pentesting <release@...team-pentesting.de>)
Re: New Flaw in Firefox 2.0: DoS and possible remote code execution (Gouki <Gouki@...kiHQ.org>)
Re: New Flaw in Firefox 2.0: DoS and possible remote code execution (Josh Bressers <josh@...ss.net>)
Re: Re: New Flaw in Firefox 2.0: DoS and possible remote code execution (xxxx@...il.com)
[SECURITY] [DSA 1201-1] New ethereal packages fix denial of service (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 1202-1] New screen packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
PHP-Nuke <= 7.9 Journal module (search.php) "forwhat" SQL Injection vulnerability (paisterist.nst@...il.com)
Cross Site Scripting (XSS) Vulnerability in iPlanet Messaging Server Messenger Express by "Sun" ("LegendaryZion" <moskito@...le.net.il>)
Directory listing on B-FOCuS Wireless 802.11b/g ADSL2+ Router by "ECI Telecom LTD" ("LegendaryZion" <moskito@...le.net.il>)
Cross Site Scripting (XSS) Vulnerability in Web Mail service by "Walla! Communications LTD" ("LegendaryZion" <moskito@...le.net.il>)
Re: New Flaw in Firefox 2.0: DoS and possible remote code execution (Daniel Veditz <dveditz@...zio.com>)

524 messages

Powered by blists - more mailing lists