• Home
• Collette Darden's Jokes List
• Ramblings
• Funny Technical Support Calls
• Non-Titanic Seers
• The Teapot Experiment
• Eric
• List archives
• Credits
• Links to Other Places
• Friends
• About the Author
• Geekcode

Save the teapot fund

The key part of installing the script is to copy and past the full contents of this file in place of the tag in your html. Doing so will put the script code where it belongs and will use the tag that appears directly below this comment in place of the one in your current HTML (you need that javascript bit for the script to work). -->

We see you're using Internet Explorer.  Try Firefox, you'll like it better.

      · Firefox blocks pop-up windows.
      · It stops viruses and spyware.
      · It keeps Microsoft from controlling the future of the internet.

Click the button on the right to download Firefox.  It's free.

• Thread Index

• Cisco Security Advisory:Cisco Security Agent Vulnerable to Crafted IP attack
  • From: Cisco Systems Product Security Incident Response Team
• [xfocus-SD-060101]AIX getCommand&getShell two vulnerabilities
  • From: XFOCUS Security Team
• [ GLSA 200601-01 ] pinentry: Local privilege escalation
  • From: Thierry Carrez
• [USN-234-1] cpio vulnerability
  • From: Martin Pitt
• Re: WMF Exploit
  • From: Justin Myers
• [USN-233-1] fetchmail vulnerability
  • From: Martin Pitt
• [KAPDA::#19] - Html Injection in vBulletin 3.5.2
  • From: alireza hassani
• Re: RE: WMF Exploit
  • From: grasshopa
• [eVuln] PHPjournaler SQL Injection Vulnerability
  • From: alex
• [eVuln] Chipmunk Guestbook XSS Vulnerability
  • From: alex
• [eVuln] Chimera Web Portal System Multiple Vulnerabilities
  • From: alex
• NicoFTP Stack Overflow
  • From: k4p0k4p0
• Drupal all versiyon xss cehennem.org
  • From: liz0
• [eVuln] inTouch Authentication Bypass
  • From: alex
• [eVuln] B-net Software Multiple XSS Vulnerabilities
  • From: alex
• [eVuln] ScozBook "adminname" Authentication Bypass
  • From: alex
• SCO Openserver 5.0.x exploit
  • From: rod hedor
• [eVuln] oaBoard PHP Code Execution
  • From: alex
• RE: Webwasher CSM Appliance Script Security Restriction Bypass
  • From: Frank Berzau
• [eVuln] VEGO Web Forum SQL Injection Vulnerability
  • From: alex
• Winrar 3.30 Local Buffer Overflow
  • From: Alpha_Programmer
• WMF round-up, updates and de-mystification
  • From: Gadi Evron
• WMF SETABORTPROC exploit
  • From: SanjayR
• Re: Drupal all versiyon xss cehennem.org
  • From: security
• Re: [Full-disclosure] WMF round-up, updates and de-mystification
  • From: Nancy Kramer
• Re: [Full-disclosure] WMF round-up, updates and de-mystification
  • From: InfoSecBOFH
• RE: WMF Exploit
  • From: Paul
• Re: [funsec] WMF round-up, updates and de-mystification
  • From: Pierre Vandevenne
• Re: Drupal all versiyon xss cehennem.org
  • From: RSnake
• RE: [Full-disclosure] WMF round-up, updates and de-mystification
  • From: Larry Seltzer
• [eVuln] VEGO Links Builder Authentication Bypass
  • From: alex
• Re: WMF round-up, updates and de-mystification
  • From: Gadi Evron
• RE: [funsec] WMF round-up, updates and de-mystification
  • From: Larry Seltzer
• Recruitment Software allows MySQL credentials disclosure
  • From: Rafael San Miguel Carrasco
• [eVuln] phpBook PHP Code Execution
  • From: alex
• WSJ: The new "metasploit" computer virus
  • From: Richard M. Smith
• [eVuln] PHPenpals SQL Injection Vulnerabilit
  • From: alex
• RE: WMF round-up, updates and de-mystification
  • From: Krpata, Tyler
• WMF exploit
  • From: Andreas Marx
• Another WMF exploit workaround
  • From: Ivan Arce
• Download Accelerator Plus can be tricked to download malicious file
  • From: visitbipin
• Re: WMF round-up, updates and de-mystification
  • From: Adam Shostack
• [eVuln] Lizard Cart CMS SQL Injection Vulnerability
  • From: alex
• Re: WMF Exploit
  • From: Paul Laudanski
• New from the MS Advisory
  • From: Larry Seltzer
• Re[2]: [funsec] WMF round-up, updates and de-mystification
  • From: Pierre Vandevenne
• Dumb IE6/XP denial of service found on the web
  • From: 8ux1fpd02
• Re: Cisco PIX / CS ACS: Downloadable RADIUS ACLs vulnerability
  • From: Eloy A. Paris
• MDKSA-2005:239 - Updated printer-filters-utils packages fix local vulnerability
  • From: Mandriva Security Team
• RE: WMF Exploit
  • From: Discussion Lists
• Re: WMF browser-ish exploit vectors
  • From: Nick FitzGerald
• Re: WTF??
  • From: Nick FitzGerald
• Mapping and Remote manipulation of databases
  • From: Gandalf The White
• WMF: New Metasploit Framework Module
  • From: H D Moore
• Re: WTF??
  • From: anthony . aykut
• Re: WMF browser-ish exploit vectors
  • From: Dave Korn
• Re: WMF Exploit
  • From: Joshua
• iDefense Security Advisory 01.05.06: Blue Coat WinProxy Remote DoS Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• Open Letter on the Interpretation of "Vulnerability Statistics"
  • From: Steven M. Christey
• what we REALLY learned from WMF
  • From: Gadi Evron
• MD:Pro - Malware Distribution Project
  • From: anthony . aykut
• [ECHO_ADV_25$2006] Full path disclosure on boastMachine v3.1
  • From: eufrato
• RE: Dumb IE6/XP denial of service found on the web
  • From: Mario Contestabile
• CyberShop User Login Sql Injection
  • From: night_warrior771
• What is sbininitd port 65534 ???
  • From: waltdnes
• [eVuln] TinyPHPForum Multiple Vulnerabilities
  • From: alex
• iDefense Security Advisory 01.05.06: Blue Coat Systems WinProxy Host Header Stack Overflow Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• HylaFAX Security advisory - fixed in HylaFAX 4.2.4
  • From: Aidan Van Dyk
• Contact information for Symantec Vulnerability Management
  • From: secure
• RE: Download Accelerator Plus can be tricked to download malicious file
  • From: NaPa
• SysCP WebFTP local file inclusion vulnerability
  • From: Thomas Henlich
• Uninformed Journal Release Announcement: Volume 3
  • From: Uninformed
• [USN-236-1] xpdf vulnerabilities
  • From: Martin Pitt
• MS released a patch today - MS06-001
  • From: Duran, Jason IT0
• [USN-235-1] sudo vulnerability
  • From: Martin Pitt
• Windows PHP 4.x "0-day" buffer overflow
  • From: mercenary
• Re: Download Accelerator Plus can be tricked to download malicious file
  • From: visitbipin
• Interview: Ilfak Guilfanov
  • From: Matthew Murphy
• RE: WMF browser-ish exploit vectors
  • From: James C Slora Jr
• [eVuln] ADNForum Multiple Vulnerabilities
  • From: alex
• Re: New from the MS Advisory
  • From: Damaged Industries
• iDefense Security Advisory 01.05.06: Blue Coat WinProxy Telnet DoS Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• APPLE-SA-2006-01-05 AirPort firmware update
  • From: noreply
• [security bulletin] SSRT051074 rev.3 - HP-UX Running xterm Local Unauthorized Access
  • From: security-alert
• MD5s of Unofficial patches and other mistakes
  • From: Forrest J. Cavalier III
• [eVuln] TheWebForum Script Insertion and Authentication Bypass
  • From: alex
• Did MS pull an Ilfak? (MS patch bindiff results)
  • From: Gadi Evron
• Re: MS released a patch today - MS06-001
  • From: Anthony R. Nemmer
• MDKSA-2006:006 - Updated gpdf packages fix several vulnerabilities
  • From: Mandriva Security Team
• MDKSA-2006:004 - Updated pdftohtml packages fix several vulnerabilities
  • From: Mandriva Security Team
• Re: Download Accelerator Plus can be tricked to download malicious file
  • From: Dave Korn
• MDKSA-2006:007 - Updated apache2 packages fix vulnerabilities
  • From: Mandriva Security Team
• [USN-238-1] Blender vulnerability
  • From: Martin Pitt
• Re: what we REALLY learned from WMF
  • From: Thor (Hammer of God)
• [USN-237-1] nbd vulnerability
  • From: Martin Pitt
• [eVuln] Proyecto Domus 'email' XSS Vulnerability
  • From: alex
• Re: Dumb IE6/XP denial of service found on the web
  • From: Kim Christensen
• MDKSA-2006:003 - Updated poppler packages fix several vulnerabilities
  • From: Mandriva Security Team
• [ GLSA 200601-02 ] KPdf, KWord: Multiple overflows in included Xpdf code
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200601-03 ] HylaFAX: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• [USN-238-2] Blender vulnerability
  • From: Martin Pitt
• MDKSA-2006:005 - Updated xpdf packages fix several vulnerabilities
  • From: Mandriva Security Team
• Re: Dumb IE6/XP denial of service found on the web
  • From: Francois Labreque
• Re: [USN-237-1] nbd vulnerability
  • From: Florian Weimer
• Re: MD:Pro - Malware Distribution Project
  • From: Rembrandt
• [ GLSA 200601-04 ] VMware Workstation: Vulnerability in NAT networking
  • From: Sune Kloppenborg Jeppesen
• [eVuln] NavBoard BBcode XSS Vulnerability
  • From: alex
• Re: Interview: Ilfak Guilfanov
  • From: Randal L. Schwartz
• Survey on Vuln Disclosure: Request for Participation
  • From: Richard Forno
• Recon2006 - Call for papers
  • From: Hugo Fortier
• xorg server 6.8.2 and below on 64bit arch
  • From: serj
• Microsoft Windows GRE WMF Format Multiple Memory Overrun Vulnerabilities
  • From: frankruder
• [UPDATE]Microsoft Windows GRE WMF Format Multiple Unauthorized Memory Access Vulnerabilities
  • From: frankruder
• [SECURITY] [DSA 929-1] New petris packages fix buffer overflow
  • From: Michael Stone
• [SECURITY] [DSA 930-1] New smstools packages fix format string vulnerability
  • From: Michael Stone
• NetBSD Security Advisory 2006-001: Kernfs kernel memory disclosure
  • From: NetBSD Security Officer
• NetBSD Security Advisory 2006-002: settimeofday() time wrap
  • From: NetBSD Security Officer
• [eVuln] Foxrum BBCode XSS Vulnerabilty
  • From: alex
• [SECURITY] [DSA 931-1] New xpdf packages fix arbitrary code execution
  • From: Martin Schulze
• [eVuln] Venom Board SQL Injection Vulnerability
  • From: alex
• Digital Armaments Security Advisory 01.09.2006: Apache auth_ldap module Multiple Format Strings Vulnerability
  • From: info
• [SECURITY] [DSA 932-1] New kpdf packages fix arbitrary code execution
  • From: Martin Schulze
• Re: Did MS pull an Ilfak? (MS patch bindiff results)
  • From: Brett Glass
• AOL Multiple Cross Site Scripting Vulnerability
  • From: simo
• MDKSA-2006:008 - Updated koffice packages fix several vulnerabilities
  • From: Mandriva Security Team
• iDefense Security Advisory 01.09.06: Multiple Vendor mod_auth_pgsql Format String Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• MDKSA-2006:004 - Updated pdftohtml packages fix several vulnerabilities
  • From: Mandriva Security Team
• Html_Injection in vBulletin 3.5.2
  • From: the_bekir
• AIM Multiple Cross Site Scripting Vulnerability
  • From: simo
• Orjinweb E-commerce
  • From: serxwebun
• Php-Nuke Pool and News Module IMG Tag Cross Site
  • From: night_warrior771
• Re: Interview: Ilfak Guilfanov
  • From: Denis Jedig
• Xoops Pool Module IMG Tag Cross Site Scripting
  • From: night_warrior771
• [eVuln] 427BB Multiple Vulnerabilities (Cookie-based Authentication Bypass, SQL Injections, XSS)
  • From: alex
• MDKSA-2006:009 - Updated apache2-mod_auth_pgsql packages fix several vulnerabilities
  • From: Mandriva Security Team
• MDKSA-2006:005 - Updated xpdf packages fix several vulnerabilities
  • From: Mandriva Security Team
• MDKSA-2006:006 - Updated gpdf packages fix several vulnerabilities
  • From: Mandriva Security Team
• MDKSA-2006:008 - Updated koffice packages fix several vulnerabilities
  • From: Mandriva Security Team
• MDKSA-2006:003 - Updated poppler packages fix several vulnerabilities
  • From: Mandriva Security Team
• Research: Malware Action Detection and Protection
  • From: Arman Nayyeri
• industry standards - current status [was: what we REALLY learned from WMF]
  • From: Gadi Evron
• [SECURITY] [DSA 933-1] New hylafax packages fix arbitrary command execution
  • From: Michael Stone
• [SECURITY] [DSA 934-1] New pound packages fix multiple vulnerabilities
  • From: Michael Stone
• Re: Html_Injection in vBulletin 3.5.2
  • From: Steven M. Christey
• [SECURITY] [DSA 930-2] New smstools packages fix format string vulnerability
  • From: Michael Stone
• [SECURITY] [DSA 935-1] New libapache2-mod-auth-pgsql packages fix arbitrary code execution
  • From: Michael Stone
• Multiple Vulnerabilities in Hummingbird Collaboration
  • From: luca . carettoni
• iDefense Security Advisory 01.10.06: Sun Solaris uustat Buffer Overflow Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• [USN-239-1] libapache2-mod-auth-pgsql vulnerability
  • From: Martin Pitt
• [security bulletin] SSRT051058 rev.1 - HP-UX Secure Shell Remote Denial of Service (DoS)
  • From: security-alert
• [USN-236-2] xpdf vulnerabilities in kword, kpdf
  • From: Martin Pitt
• Re: Html_Injection in vBulletin 3.5.2
  • From: info
• Re: Did MS pull an Ilfak? (MS patch bindiff results)
  • From: Joe Polk
• [FLSA-2006:136323] Updated gettext package fixes security issues
  • From: Marc Deslauriers
• [FLSA-2006:152907] Updated htdig packages fix security issues
  • From: Marc Deslauriers
• Time modification flaw in BSD securelevels on NetBSD and Linux
  • From: RedTeam Pentesting
• [FLSA-2006:152922] Updated ethereal packages fix security issues
  • From: Marc Deslauriers
• Malware - future trends
  • From: Dancho Danchev
• [FLSA-2006:168375] Updated mozilla packages fix security issues
  • From: Marc Deslauriers
• New PEAR / Apache2Triad Exploit
  • From: jd2k2000
• Re: Dumb IE6/XP denial of service found on the web
  • From: rebornrebel
• Microsoft Exchange Critical Vulnerability
  • From: NGSSoftware Insight Security Research
• Microsoft Outlook Critical Vulnerability
  • From: NGSSoftware Insight Security Research
• Updated Advisories - Incorrect CVE Information
  • From: Advisories
• Cisco Security Advisory: Default Administrative Password in Cisco Security Monitoring, Analysis and Response System (CS-MARS)
  • From: Cisco Systems Product Security Incident Response Team
• [EEYEB-20051031] Apple QuickTime Malformed GIF Heap Overflow
  • From: Advisories
• [EEYEB-20051220] Apple QuickTime QTIF Stack Overflow
  • From: Advisories
• [EEYEB-20051117B] Apple iTunes (QuickTime.qts) Heap Overflow
  • From: Advisories
• [RHSA-2006:0157-01] Low: struts security update for Red Hat Application Server
  • From: bugzilla
• [ GLSA 200601-06 ] xine-lib, FFmpeg: Heap-based buffer overflow
  • From: Stefan Cornelius
• RE: Did MS pull an Ilfak? (MS patch bindiff results)
  • From: Greg Wroblewski
• Serial Line Sniffer 0.4.4 Buffer Overflow
  • From: Sintigan
• FreeBSD Security Advisory FreeBSD-SA-06:03.cpio
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-06:01.texindex
  • From: FreeBSD Security Advisories
• PostgreSQL security releases 8.0.6 and 8.1.2
  • From: PostgreSQL Security
• FreeBSD Security Advisory FreeBSD-SA-06:01.texindex [REVISED]
  • From: FreeBSD Security Advisories
• SUSE Security Announcement: xpdf,kpdf,gpdf,kword (SUSE-SA:2006:001)
  • From: Ludwig Nussel
• eStara Softphone SIP stack Buffer Overflow Vulnerability
  • From: zwell
• Re: Did MS pull an Ilfak? (MS patch bindiff results)
  • From: Denis Jedig
• [FLSA-2006:167803] Updated mysql packages fix security issues
  • From: Marc Deslauriers
• Advisory:XSS vulnerability on WebWiz Forums <= 6.34 (search_form.asp)
  • From: nukedx
• [eVuln] MyPhPim Arbitrary File Upload
  • From: alex
• [USN-235-2] sudo vulnerability
  • From: Martin Pitt
• [EEYEB-20051117A] Apple QuickTime STSD Atom Heap Overflow
  • From: Advisories
• MDKSA-2006:010 - Updated cups packages fix several vulnerabilities
  • From: Mandriva Security Team
• Advisory: XSS attack on Superonline.com email service.
  • From: nukedx
• BSD Securelevels: Circumventing protection of files flagged immutable
  • From: RedTeam Pentesting
• H-Sphere Security Vulnerability
  • From: M.Neset KABAKLI
• Advisory 02/2006: PHP ext/mysqli Format String Vulnerability
  • From: Stefan Esser
• Advisory 01/2006: PHP ext/session HTTP Response Splitting Vulnerability
  • From: Stefan Esser
• Cisco Security Advisory: Access Point Memory Exhaustion from ARP Attacks
  • From: Cisco Systems Product Security Incident Response Team
• [SECURITY] [DSA 938-1] New koffice packages fix arbitrary code execution
  • From: Martin Schulze
• EUSecWest papers and CanSecWest CFP
  • From: Dragos Ruiu
• [USN-241-1] Apache vulnerabilities
  • From: Adam Conrad
• Session data pollution vulnerabilities in web applications
  • From: Alla Bezroutchko
• [SECURITY] [DSA 903-2] New unzip packages fix unauthorised permissions modification
  • From: Martin Schulze
• Re: [Full-disclosure] Session data pollution vulnerabilities in web applications
  • From: Frank Knobbe
• Advisory: MiniNuke CMS System <= 1.8.2 (news.asp) SQL Injection vulnerability
  • From: nukedx
• FogBugz Cross Site Scripting Vulnerability
  • From: M.Neset KABAKLI
• [SECURITY] [DSA 937-1] New tetex-bin packages fix arbitrary code execution
  • From: Martin Schulze
• Cisco, haven't we learned anything? (technician reset)
  • From: Gadi Evron
• Multiple PHP Toolkit for PayPal Vulnerabilities
  • From: uinC Team
• Interspire TrackPoint NX XSS Vulnerability
  • From: M.Neset KABAKLI
• ZDI-06-001: Clam AntiVirus UPX Unpacking Code Execution Vulnerability
  • From: zdi-disclosures
• [eVuln] TankLogger SQL Injection Vulnerability
  • From: alex
• [eVuln] ACal Authentication Bypass & PHP Code Insertion
  • From: alex
• [eVuln] Wordcircle Authentication Bypass
  • From: alex
• [eVuln] Wordcircle Multiple SQL Injection & XSS Vulnerabilities
  • From: alex
• Advisory: MiniNuke CMS System <= 1.8.2 (news.asp) SQL Injection vulnerability
  • From: nukedx
• Advisory: MiniNuke CMS System <= 1.8.2 (membership.asp) remote user password change exploit
  • From: nukedx
• [USN-240-1] bogofilter vulnerability
  • From: Martin Pitt
• Re: industry standards - current status [was: what we REALLY learned from WMF]
  • From: D. Hazelton
• Fortinet Advisory - Apple QuickTime Player ImageWidth Denial of Service Vulnerability
  • From: secresearch
• [SECURITY] [DSA 939-1] New fetchmail packages fix denial of service
  • From: Martin Schulze
• [SECURITY] [DSA 940-1] New gpdf packages fix arbitrary code execution
  • From: Martin Schulze
• [ GLSA 200601-09 ] Wine: Windows Metafile SETABORTPROC vulnerability
  • From: Sune Kloppenborg Jeppesen
• SUSE Security Announcement: novell-nrm remote heap overflow (SUSE-SA:2006:002)
  • From: Marcus Meissner
• MDKSA-2006:012 - Updated kdegraphics packages fix several vulnerabilities
  • From: Mandriva Security Team
• [ GLSA 200601-07 ] ClamAV: Remote execution of arbitrary code
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200601-08 ] Blender: Heap-based buffer overflow
  • From: Sune Kloppenborg Jeppesen
• Fortinet Advisory - Apple QuickTime Player StripOffsets Improper Memory Access
  • From: secresearch
• iDefense Security Advisory 01.13.06: Novell SUSE Linux Enterprise Server Remote Manager Heap Overflow
  • From: labs-no-reply@xxxxxxxxxxxx
• Helm XSS Vulnerability
  • From: M.Neset KABAKLI
• Fortinet Advisory - Apple QuickTime Player StripByteCounts Buffer Overflow Vulnerability
  • From: secresearch
• mysec.org Security Advisory : Xmame buffer overflow, with a possibility of privilege escalation
  • From: xwings
• [ GLSA 200601-05 ] mod_auth_pgsql: Multiple format string vulnerabilities
  • From: Stefan Cornelius
• [FLSA-2006:152803] Updated lesstif packages fix security issues
  • From: Marc Deslauriers
• MDKSA-2006:011 - Updated tetex packages fix several vulnerabilities
  • From: Mandriva Security Team
• FreeBSD Security Advisory FreeBSD-SA-06:04.ipfw
  • From: FreeBSD Security Advisories
• PayPal Phishing Site Exploits Google XSS Vulnerability
  • From: Paul Laudanski
• [eVuln] MyPhPim Multiple SQL Injection and XSS Vulnerabilities
  • From: alex
• ezDatabase 2.0 and below
  • From: none
• FullPath disclosure in Xaraya 1.0.1
  • From: king_purba
• [KAPDA::#21] - HomeFtp v1.1 Denial of Service
  • From: [a]
• MyBB 1.0.2 SQL injection in usercp.php
  • From: addmimistrator
• Hacking With The Google Search Engine
  • From: Paul Laudanski
• [NMRC Advisory] Microsoft Windows Wireless Exposure on Laptops
  • From: Advisories
• FreeBSD Security Advisory FreeBSD-SA-06:02.ee
  • From: FreeBSD Security Advisories
• [SECURITY] [DSA 936-1] New libextractor packages fix arbitrary code execution
  • From: Martin Schulze
• [EEYEB-2000801] - Windows Embedded Open Type (EOT) Font Heap Overflow Vulnerability
  • From: Advisories
• WMF vulnerability was a deliberate backdoor?
  • From: Brooks, Shane
• MyBB 1.0.2 SQL injection
  • From: addmimistrator
• DCP Portal Cross-Site Scripting Vulnerability
  • From: night_warrior771
• AlstraSoft Template Seller Pro Cross-Site Scripting Vulnerability
  • From: night_warrior771
• [eVuln] Light Weight Calendar PHP Code Execution
  • From: alex
• Re: MSN Messenger Password Decrypter for WinXP/2003
  • From: kuku
• Linksys VPN Router (BEFVP41) DoS Vulnerability
  • From: paul14075
• DIMVA 2006 Call for Papers
  • From: Thomas Biege
• TSLSA-2006-0002 - multi
  • From: Trustix Security Advisor
• TSL-2006-0001 - postgresql
  • From: Trustix Security Advisor
• DDSN CMS Admin Panel SQL Injection Vulnerability
  • From: khc
• [ISecAuditors Advisories] Arbitrary remote file creation in 123flashchat server
  • From: ISecAuditors Security Advisories
• Visual Studio Remote Code Execution
  • From: priest
• MDKSA-2006:013 - Updated kolab packages fix vulnerability
  • From: Mandriva Security Team
• DMA[2006-0112a] - 'Toshiba Bluetooth Stack Directory Transversal'
  • From: KF (lists)
• [SECURITY] [DSA 943-1] New Perl packages fix arbitrary code execution
  • From: Martin Schulze
• Apache Geronimo 1.0 - CSS and persistent HTML-Injection vulnerabilities
  • From: oliver karow
• Directory traversal in phpXplorer
  • From: Oriol Torrent
• [SECURITY] [DSA 941-1] New tuxpaint packages fix insecure temporary file creation
  • From: Martin Schulze
• [eVuln] Bit 5 Blog JavaScript Insertion Vulnerability
  • From: alex
• RE: WMF vulnerability was a deliberate backdoor?
  • From: Alex Eckelberry
• CounterPath eyeBeam Handing SIP header Vulnerabilities
  • From: zwell
• WehnTrust - When you have to trust Wehntrust
  • From: Thierry Zoller
• Homeftp r1.0.7 Denial of Service
  • From: cvh
• Re: WMF vulnerability was a deliberate backdoor?
  • From: Denis Jedig
• [USN-242-1] mailman vulnerabilities
  • From: Martin Pitt
• Re: WMF vulnerability was a deliberate backdoor?
  • From: Steve Friedl
• iWar 0.07 PSTN auditing tool released...
  • From: Da Beave
• Reverse Proxy Cross Site Scripting
  • From: Shalom Carmel
• Re: [Full-disclosure] WehnTrust - When you have to trust Wehntrust
  • From: H D Moore
• Re: MyBB 1.0.2 SQL injection in usercp.php
  • From: o . y . 6
• [eVuln] Benders Calendar SQL Injection
  • From: alex
• Re: WMF vulnerability was a deliberate backdoor?
  • From: Mike Ely
• Veritas NetBackup "Volume Manager Daemon" Module Stack Overflow - Exploit
  • From: patrickthomassen
• [eVuln] Bit 5 Blog SQL Injection & Authentication Bypass Vulnerability
  • From: alex
• Re: Linksys VPN Router (BEFVP41) DoS Vulnerability
  • From: paul14075
• Microsoft knew about the WMF flaw for years
  • From: Richard M. Smith
• EZDatabase Directory Transversal, XSS and Path Disclosure Vulnerability
  • From: Josh Zlatin
• PunBB BBCode URL Tag Script Injection Vulnerability
  • From: night_warrior771
• Re: MSN Messenger Password Decrypter for WinXP/2003
  • From: James_gmail-ij
• Digital Armaments Security Advisory 01.16.2006: CMU SNMP utilities snmptrad Format String Vulnerability
  • From: info
• Announcement: The Web Application Firewall Evaluation Criteria v1 Released
  • From: contact
• Microsoft(R) Internet Explorer 5 & 6 Remote Denial of Service (DoS) using IMG & XML elements
  • From: inge . henriksen
• MDKSA-2006:014 - Updated wine packages fix WMF vulnerability
  • From: Mandriva Security Team
• [USN-243-1] tuxpaint vulnerability
  • From: Martin Pitt
• MDKSA-2006:015 - Updated hylafax packages fix eval injection vulnerabilities
  • From: Mandriva Security Team
• MDKSA-2006:016 - Updated clamav packages fix vulnerability
  • From: Mandriva Security Team
• IndonesiaHack Advisory HTML injection in PHP Fusebox
  • From: king_purba
• ERRATA: [ GLSA 200601-09 ] Wine: Windows Metafile SETABORTPROC vulnerability
  • From: Sune Kloppenborg Jeppesen
• Re: Reverse Proxy Cross Site Scripting
  • From: Amit Klein (AKsecurity)
• XSS in WBNews < = v1.1.0
  • From: dragonjar
• [eVuln] BlogPHP Authentication Bypass
  • From: alex
• [SECURITY] [DSA 942-1] New albatross packages fix arbitrary code execution
  • From: Martin Schulze
• [eVuln] microBlog SQL Injection Vulnerability
  • From: alex
• [eVuln] microBlog BBCode XSS Vulnerability
  • From: alex
• Re: Microsoft knew about the WMF flaw for years
  • From: Gadi Evron
• Secunia Research: Mozilla Thunderbird Attachment Spoofing Vulnerability
  • From: Secunia Research
• PowerPortal Cross-Site Scripting Vulnerability
  • From: night_warrior771
• [SECURITY] [DSA 944-1] New mantis packages fix several vulnerabilities
  • From: Martin Schulze
• Re: Veritas NetBackup "Volume Manager Daemon" Module Stack Overflow - Exploit
  • From: Dave Korn
• [SECURITY] [DSA 945-1] New antiword packages fix insecure temporary file creation
  • From: Martin Schulze
• Re: Fullpath disclosure in roundcube webmail
  • From: roundcube
• [eVuln] CaLogic Calendars Multiple XSS Vulnerabilities
  • From: alex
• [HSC Security Group] Multiple SQL injection/XSS in SimpleBlog 2.1
  • From: zinho
• White Album Sql &#304;njection biyosecurity.be
  • From: liz0
• [eVuln] geoBlog SQL Injection Vulnerability
  • From: alex
• Cerberus FTP Server 2.32 Denial of Service
  • From: cvh
• Attacking Automatic Wireless Network Selection
  • From: Dino A. Dai Zovi
• Oracle DBMS Access Control Bypass in Login
  • From: shulman
• Oracle Database 10g Rel. 2 - Event 10053 logs TDE wallet password in cleartext
  • From: ak
• Oracle Reports - Read parts of files via desname (fixed after 874 days)
  • From: ak
• Oracle Reports - Overwrite any application server file via desname (fixed after 889 days)
  • From: ak
• Oracle Critical Patch Update - January 2006
  • From: NGSSoftware Insight Security Research
• Oracle Reports - Read parts of files via customize(fixed after 875 days)
  • From: ak
• Oracle Database 10g Rel. 2- Transparent Data Encryption plaintext masterkey in SGA
  • From: ak
• [ TZO-012006 ] Checkpoint VPN-1 SecureClient insecure usage of CreateProcess()
  • From: Thierry Zoller
• Phpclanwebsite BBCode IMG Tag XSS Vulnerability
  • From: [at]
• Re: Linksys VPN Router (BEFVP41) DoS Vulnerability
  • From: paul14075
• Re: Directory traversal in phpXplorer
  • From: Stan Bubrouski
• Re: PunBB BBCode URL Tag Script Injection Vulnerability
  • From: Rickard Andersson
• WEP-Client-Communication-Dumbdown (WCCD) Vulnerability
  • From: Michael.Wade
• [eVuln] Flog Information Disclosure Vulnerability
  • From: alex
• [eVuln] aoblogger Multiple Vulnerabilities
  • From: alex
• Cisco Security Advisory: IOS Stack Group Bidding Protocol Crafted Packet DoS
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Call Manager Denial of Service
  • From: Cisco Systems Product Security Incident Response Team
• ICQ Cross Site Scripting Vulnerability
  • From: simo
• XMB Forum HTML Code Injection
  • From: [at]
• Re: MSN Messenger Password Decrypter for WinXP/2003
  • From: frank boldewin
• [USN-244-1] Linux kernel vulnerabilities
  • From: Martin Pitt
• MyBB Signature HTML Code Injection
  • From: [at]
• HITBSecConf2005 Videos Released
  • From: Praburaajan
• IRM 015: File system path disclosure on TYPO3 Web Content Manager
  • From: Advisories
• [eVuln] WebspotBlogging Authentication Bypass Vulnerability
  • From: alex
• Fortinet Advisory: BitComet URI Buffer Overflow Vulnerability
  • From: Fortinet Research
• Land Down Under Signature HTML Code Injection
  • From: [at]
• Cisco Security Advisory: Cisco Call Manager Privilege Escalation
  • From: Cisco Systems Product Security Incident Response Team
• Re: Re: MSN Messenger Password Decrypter for WinXP/2003
  • From: null
• CAID 33756 - DM Deployment Common Component Vulnerabilities
  • From: Williams, James K
• -2- [XSS] in ar-blog v 5.2
  • From: s3ude
• Google's Blogger.com classic HTTP response splitting vulnerability
  • From: Meder Kydyraliev
• Re: IRM 015: File system path disclosure on TYPO3 Web Content Manager
  • From: Michael Shigorin
• [security bulletin] SSRT5971 rev.1 - HP-UX Running ftpd Remote Denial of Service (DoS)
  • From: security-alert
• Phpclanwebsite BBCode IMG Tag XSS Vulnerability
  • From: [at]
• Re: Directory traversal in phpXplorer
  • From: Stan Bubrouski
• Critical security advisory #006 tftpd32 Format string
  • From: admin
• MDKSA-2006:017 - Updated mod_auth_ldap packages fix vulnerability
  • From: Mandriva Security Team
• FreeBSD Security Advisory FreeBSD-SA-06:05.80211
  • From: FreeBSD Security Advisories
• Change passwd 3.1 (SquirrelMail plugin )
  • From: rod hedor
• Oracle Database 10g Rel. 1 - SQL Injection in SYS.KUPV$FT
  • From: ak
• Oracle Database 10g Rel. 1 - SQL Injection in SYS.KUPV$FT_INT
  • From: ak
• Re: Microsoft knew about the WMF flaw for years
  • From: Steven M. Christey
• iDefense Security Advisory 01.17.06: EMC Legato Networker nsrd.exe DoS Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• iDefense Security Advisory 01.17.06: EMC Legato Networker nsrexecd.exe Heap Overflow Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• iDefense Security Advisory 01.17.06: Cisco Systems IOS 11 Web Service CDP Status Page Code Injection Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• phpXplorer file inclusion biyosecurity.be
  • From: liz0
• [KDE Security Advisory] kjs encodeuri/decodeuri heap overflow
  • From: Dirk Mueller
• MDKSA-2006:018 - Updated kernel packages fix several vulnerabilities
  • From: Mandriva Security Team
• [SECURITY] [DSA 949-1] New crawl packages fix potential group games execution
  • From: Martin Schulze
• DMA[2006-0115a] - 'AmbiCom Bluetooth Object Push Overflow'
  • From: KF (lists)
• Claroline 1.7.2, sso identification vulnerability
  • From: karmaguedon
• BlogPHP config.php SQL injection login bypass
  • From: addmimistrator
• BlogPHP config.php SQL injection login bypass
  • From: addmimistrator
• Re: Digital Armaments Security Advisory 01.16.2006: CMU SNMP utilities snmptrad Format String Vulnerability
  • From: Florian Weimer
• [SECURITY] [DSA 948-1] New kdelibs packages fix buffer overflow
  • From: Michael Stone
• SUSE Security Announcement: kdelibs3 (SUSE-SA:2006:003)
  • From: Ludwig Nussel
• MySQL 5.0 information leak?
  • From: Bernd Wurst
• [SECURITY] [DSA 947-1] New ClamAV packages fix heap overflow
  • From: Michael Stone
• [SECURITY] [DSA 946-1] New sudo packages fix privilege escalation
  • From: Martin Schulze
• [eVuln] RCBlog Directory Traversal & Sensitive Information Disclosure
  • From: alex
• [ GLSA 200601-10 ] Sun and Blackdown Java: Applet privilege escalation
  • From: Thierry Carrez
• MyBB 1.0.2 Sniffing table perfix bug in search.php
  • From: addmimistrator
• [eVuln] eggblog Multiple SQL Injection & XSS Vulnerabilities
  • From: alex
• [eVuln] SaralBlog XSS & Multiple SQL Injection Vulnerabilities
  • From: alex
• Re: WMF vulnerability was a deliberate backdoor?
  • From: Gadi Evron
• MyBB Signature HTML Code Injection
  • From: n
• Re: Digital Armaments Security Advisory 01.16.2006: CMU SNMP utilities snmptrad Format String Vulnerability
  • From: Stan Bubrouski
• MDKSA-2006:019 - Updated kdelibs packages fix vulnerability
  • From: Mandriva Security Team
• Tumbleweed EMF 6.x Processing Issues
  • From: jcary2543
• RE: MySQL 5.0 information leak?
  • From: Burton Strauss
• BlogPHP config.php SQL injection login bypassed
  • From: addmimistrator
• CodeCon program announced, early registration deadline nearing
  • From: Len Sassaman
• Re: MySQL 5.0 information leak?
  • From: Stephen Frost
• [USN-245-1] KDE library vulnerability
  • From: Martin Pitt
• [ GLSA 200601-11 ] KDE kjs: URI heap overflow vulnerability
  • From: Sune Kloppenborg Jeppesen
• High Risk Vulnerability in Red Hat Directory Server and Red Hat Certificate Server
  • From: NGSSoftware Insight Security Research
• Re: Announcement: The Web Application Firewall Evaluation Criteria v1 Released
  • From: Gadi Evron
• fetchmail security announcement fetchmail-SA-2006-01 (CVE-2006-0321)
  • From: ma+bt
• [eVuln] e-moBLOG SQL Injection Vulnerability
  • From: alex
• [eVuln] Note-A-Day Weblog Sensitive Information Disclosure
  • From: alex
• ANN: New release of CORE FORCE free endpoint security package
  • From: Core FORCE team
• [SECURITY] [DSA 954-1] New wine packages fix arbitrary code execution
  • From: Martin Schulze
• Call For Paper - SyScan'06 Singapore
  • From: organiser@xxxxxxxxxx
• [SECURITY] [DSA 955-1] New mailman packages fix denial of service
  • From: Michael Stone
• [eVuln] CheesyBlog XSS Vulnerability
  • From: alex
• Workaround for unpatched Oracle PLSQL Gateway flaw
  • From: David Litchfield
• HYSA-2006-001 phpBB 2.0.19 search.php and profile.php DOS Vulnerability
  • From: h4cky0u . org
• Technical Note by Amit Klein: "XST Strikes Back"
  • From: Amit Klein (AKsecurity)
• [SECURITY] [DSA 947-2] New clamav packages fix heap overflow
  • From: Michael Stone
• FreeBSD Security Advisory FreeBSD-SA-06:07.pf
  • From: FreeBSD Security Advisories
• Updated ipsec-tools packages fix vulnerability
  • From: security
• [eVuln] ExpressionEngine 'Referer' XSS Vulnerability
  • From: alex
• Rosiello Security - Eterm-LibAST Advisory
  • From: angelo
• FreeBSD Security Advisory FreeBSD-SA-06:06.kmem
  • From: FreeBSD Security Advisories
• Re: Tumbleweed EMF 6.x Processing Issues
  • From: support
• [security bulletin] SSRT061099 rev.1 - HP-UX Local Increased Privilege
  • From: security-alert
• [eVuln] miniBloggie Authentication Bypass
  • From: alex
• [SECURITY] [DSA 953-1] New flyspray packages fix cross-site scripting
  • From: Martin Schulze
• [KAPDA::#25] - MyBB 1.x Cross_Site_Scripting
  • From: roozbeh_afrasiabi
• Newsphp Multiple SQL Injection Vulnerabilities
  • From: at
• [eVuln] Text Rider Sensitive Information Disclosure
  • From: alex
• Re: IndonesiaHack Advisory HTML injection in PHP Fusebox
  • From: brian428
• What A Click! [Internet Explorer]
  • From: mikx
• MyBB 1.0.2 XSS attack in search.php redirection
  • From: addmimistrator
• Updated mozilla-thunderbird packages fix vulnerability
  • From: security
• Re: [OSVDB Mods] iNETstore E Commerce Solution - Cross Site Scripting
  • From: iNETstore Support
• [SECURITY] [DSA 956-1] New lsh-utils packages fix local vulnerabilities
  • From: Martin Schulze
• [ GLSA 200601-12 ] Trac: Cross-site scripting vulnerability
  • From: Stefan Cornelius
• [security bulletin] SSRT061104 rev.1 - HP Oracle for OpenView (OfO) Critical Patch Update January 2006
  • From: security-alert
• SUSE Security Announcement: phpMyAdmin (SUSE-SA:2006:004)
  • From: Ludwig Nussel
• HYSA-2006-002 Phpclanwebsite 1.23.1 Multiple Vulnerabilities
  • From: h4cky0u . org
• SUSE Security Announcement: nfs-server/rpc.mountd remote code execution (SUSE-SA:2006:005)
  • From: Marcus Meissner
• BlackWorm: 2 million infected? ISP notifications.
  • From: Gadi Evron
• SamiFTPd buffer overflow
  • From: admin
• Cisco Security Advisory: Cisco VPN 3000 Concentrator Vulnerable to Crafted HTTP Attack
  • From: Cisco Systems Product Security Incident Response Team
• [ISecAuditors Advisories] Arbitrary flash code remote execution in 123flashchat
  • From: ISecAuditors Security Advisories
• [eVuln] AndoNET Blog SQL Injection Vulnerability
  • From: alex
• [HSC] Multiple transversal bug in vis
  • From: spher3
• Windows mem leakage
  • From: endrazine
• [eVuln] "my little homepage" products [link] BBCode XSS Vulnerability
  • From: alex
• [SECURITY] [DSA 957-1] New ImageMagick packages fix arbitrary command execution
  • From: Martin Schulze
• Urgent Alert: Possible BlackWorm DDay February 3rd (Snort signatures included)
  • From: Gadi Evron
• Re: MySQL 5.0 information leak?
  • From: Lance James
• Buffer Overflow /Font on mIRC
  • From: Crowdat Kurobudetsu
• [SECURITY] [DSA 950-1] New CUPS packages fix arbitrary code execution
  • From: Martin Schulze
• Re: MySQL 5.0 information leak?
  • From: Johan De Meersman
• [ Rosiello Security ] Eterm-LibAST Advisory
  • From: angelo
• iDefense Security Advisory 01.23.06: Computer Associates iTechnology iGateway Service Content-Length Buffer Overflow Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• [ MDKSA-2006:022 ] - Updated perl-Convert-UUlib packages fix vulnerability
  • From: security
• Re: [Full-disclosure] Urgent Alert: Possible BlackWorm DDay February 3rd (Snort signatures included)
  • From: Dude VanWinkle
• BitComet URI Proof of Concept
  • From: nick58
• RE: MySQL 5.0 information leak?
  • From: Burton Strauss
• [SECURITY] [DSA 952-1] New libapache-auth-ldap packages fix arbitrary code execution
  • From: Martin Schulze
• [Argeniss] Oracle Database Buffer overflows vulnerabilities in public procedures of XDB.DBMS_XMLSCHEMA{_INT}
  • From: Cesar
• [ MDKSA-2006:023 ] - Updated perl-Net_SSLeay packages fix vulnerability
  • From: security
• hello
  • From: code . shell
• [ MDKSA-2006:025 ] - Updated net-snmp packages fix vulnerabilities
  • From: security
• [SECURITY] [DSA 958-1] New drupal packages fix several vulnerabilities
  • From: Martin Schulze
• Re: [security] What A Click! [Internet Explorer]
  • From: yossarian
• CAID 33778 - CA iGateway Content-Length Buffer Overflow Vulnerability [v1.1]
  • From: Williams, James K
• Shareaza P2P Remote Vulnerability
  • From: Ryan Smith
• [ MDKSA-2006:024 ] - Updated ImageMagick packages fix vulnerabilities
  • From: security
• Re: [security] What A Click! [Internet Explorer]
  • From: Lance James
• Azbb v1.1.00 Cross-Site Scripting
  • From: roozbeh_afrasiabi
• The WorldsEnd.NET - Free Ping Script, written in PHP (2 vulns)
  • From: cvh
• [CORRECTIONS AND ADDITIONS ]Azbb v1.1.00 Cross-Site Scripting
  • From: roozbeh_afrasiabi
• Ege Internet Web Desing Remote Command Exucetion
  • From: botan
• Multiple vulnerabilities in CommuniGate Pro Server
  • From: Evgeny Legerov
• LibAST 0.7 Release Fixes Security Vulnerability
  • From: Michael Jennings
• [USN-246-1] imagemagick vulnerabilities
  • From: Martin Pitt
• BlackWorm naming confusing [CME entry now available]
  • From: Gadi Evron
• [eVuln] Pixelpost Photoblog XSS Vulnerability
  • From: alex
• [FLSA-2006:152845] Updated perl packages fix security issues
  • From: Marc Deslauriers
• BlackWorm technical information
  • From: Gadi Evron
• CAID 33778 - CA iGateway Content-Length Buffer Overflow Vulnerability
  • From: Williams, James K
• [ GLSA 200601-13 ] Gallery: Cross-site scripting vulnerability
  • From: Stefan Cornelius
• [SECURITY] [DSA 951-1] New trac packages fix SQL injection and cross-site scripting
  • From: Martin Schulze
• zbattle.net
  • From: c_lispfedora
• Re: MySQL 5.0 information leak?
  • From: Duncan Simpson
• Cross Site Cooking
  • From: Michal Zalewski
• Re: Re: IndonesiaHack Advisory HTML injection in PHP Fusebox
  • From: pr1nce_empire
• [ GLSA 200601-14 ] LibAST: Privilege escalation
  • From: Sune Kloppenborg Jeppesen
• UebiMiau Webmail System Security Vulnerability
  • From: M.Neset KABAKLI
• Re: BlackWorm naming confusing [CME entry now available]
  • From: Jose Nazario
• [ GLSA 200601-15 ] Paros: Default administrator password
  • From: Sune Kloppenborg Jeppesen
• TSLSA-2006-0004 - multi
  • From: Trustix Security Advisor
• EasyCMS vulnerable to XSS injection.
  • From: preben
• [SECURITY] [DSA 951-2] New trac packages fix SQL injection and cross-site scripting
  • From: Martin Schulze
• Re: [Full-disclosure] [ GLSA 200601-15 ] Paros: Default administrator password
  • From: Yvan Boily
• MyBB 1.2 usercp2.php [ $url ] CrossSiteScripting ( XSS )
  • From:
• [xpl#2] MiniNuke 1.8.2 - change member's passwrod < Perl >
  • From: hessam
• RE: Cross Site Cooking
  • From: Michal Zalewski
• Arescom NetDSL-1000 DoS atack source
  • From: framirez
• Winamp 5.12 - 0day exploit - code execution through playlist
  • From: Process
• sPaiz-Nuke Cross-Site Scripting Vulnerability
  • From: [at]
• Nuked-klaN Cross-Site Scripting Vulnerability
  • From: [at]
• Re: [security] What A Click! [Internet Explorer]
  • From: yossarian
• Re: Airscanner Mobile Security Advisory: Remote Hard Reset Data Wipe and DoS of Pocket Controller v5.0 (#AS05080401)
  • From: orambaldini
• gnome evolution mail client inline text file DoS issue
  • From: Mike Davis
• BlackWorm: statistics and numbers
  • From: Gadi Evron
• XSS flaw in MG2 Image Gallery (v.0.5.1)
  • From: preben
• Re: Arescom NetDSL-1000 DoS atack source
  • From: Pim van Riezen
• MyBB 1.2 Local File Incusion
  • From:
• [SECURITY] [DSA 959-1] New unalz packages fix arbitrary code execution
  • From: Martin Schulze
• CME-24 (BlackWorm) Users' FAQ
  • From: Gadi Evron
• Etomite CMS "Backdoored"
  • From: [at]
• [ MDKSA-2006:026 ] - Updated bzip2 packages fix bzgrep vulnerabilities
  • From: security
• Re: Winamp 5.12 - 0day exploit - code execution through playlist
  • From: Chris Wysopal
• New worm crawling trough blogs?!
  • From: blog . worm
• Re: CME-24 (BlackWorm) Users' FAQ
  • From: Gadi Evron
• [ MDKSA-2006:027 ] - Updated gzip packages fix zgrep vulnerabilities
  • From: security
• [ GLSA 200601-16 ] MyDNS: Denial of Service
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200601-17 ] Xpdf, Poppler, GPdf, libextractor, pdftohtml: Heap overflows
  • From: Sune Kloppenborg Jeppesen
• Etomite followup information
  • From: security curmudgeon
• BrowserCRM vulnerable for XSS
  • From: preben
• Cerberus Helpdesk vulnerable to XSS
  • From: preben
• Re: Re: Winamp 5.12 - 0day exploit - code execution through playlist
  • From: Juha-Matti Laurio
• Re: EasyCMS vulnerable to XSS injection.
  • From: kim
• Proof of concept for CommuniGate Pro Server vulnerability
  • From: Evgeny Legerov
• MyCO multiple vulnerabilities
  • From: revnic
• [SECURITY] [DSA 957-2] New ImageMagick packages fix arbitrary command execution
  • From: Martin Schulze
• FarsiNews 2.1 PHP Remote File Inclusion
  • From: h e
• [SECURITY] [DSA 960-1] New libmail-audit-perl packages fix insecure temporary file use
  • From: Martin Schulze
• Nmap 4.00 Released
  • From: Fyodor
• Xmame 0.102 local vulnerability proof-of-concept
  • From: Rafael San Miguel Carrasco
• [SECURITY] [DSA 960-2] New libmail-audit-perl packages fix insecure temporary file use
  • From: Martin Schulze
• Windows Access Control Demystified
  • From: sudhakar+bugtraq
• [eVuln] Calendarix SQL Injection & Authorization Bypass Vulnerabilities
  • From: alex
• Blackboard Authentication Error
  • From: jdo24
• [eVuln] SZUserMgnt Authentication Bypass
  • From: alex
• ZRCSA-200601: SPIP - Multiple Vulnerabilities
  • From: research
• [SECURITY] [DSA 961-1] New pdfkit.framework packages fix arbitrary code execution
  • From: Martin Schulze
• [SECURITY] [DSA 962-1] New pdftohtml packages fix arbitrary code execution
  • From: Martin Schulze
• [security bulletin] SSRT051007 rev.1 - HP Tru64 UNIX Running DNS BIND Remote Unauthorized Privileged Access
  • From: security-alert
• Re: Winamp 5.12 - 0day exploit - code execution through playlist
  • From: bart sikkes
• DISIT - OPEN SOURCE DISASSEMBLER ENGINE
  • From: Piotr Bania
• Re: Workaround for unpatched Oracle PLSQL Gateway flaw
  • From: x
• Internet Explorer remotely exploitable vulnerability in JScript's document.write() method
  • From: porkythepig
• Verified evasion in Snort
  • From: at
• Database Manager Default pass
  • From: fireboynet
• iDefense Security Advisory 02.01.06: Winamp m3u/pls .WMA Extension Buffer Overflow Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• Re: Blackboard Authentication Error
  • From: George
• RE: Buffer Overflow /Font on mIRC
  • From: Krpata, Tyler
• iDefense Security Advisory 02.01.06: Winamp m3u Parsing Stack Overflow Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• Re: Verified evasion in Snort
  • From: Thierry Zoller
• Re: MyCO multiple vulnerabilities
  • From: office
• Re: Verified evasion in Snort
  • From: mwatchinski
• FreeBSD Security Advisory FreeBSD-SA-06:08.sack
  • From: FreeBSD Security Advisories
• Fcrontab - memory corruption on heap.
  • From: pi3ki31ny
• Daffodil CRM - vulnerable to SQL-injection.
  • From: preben
• [ MDKSA-2006:028 ] - Updated php packages fix XSS and response splitting vulnerabilities
  • From: security
• [SECURITY] [DSA 963-1] New mydns packages fix denial of service
  • From: Martin Schulze
• Black Hat USA CFP opens, Europe early bird reminder, Federal news
  • From: Jeff Moss
• Re: Buffer Overflow /Font on mIRC
  • From: D.C. van Moolenbroek
• Re: Blackboard Authentication Error
  • From: Johan A . van Zanten
• SoftMaker Shop is vulnerable to XSS
  • From: preben
• Re: Blackboard Authentication Error
  • From: Joshua Ogle
• Re: Blackboard Authentication Error
  • From: security-alerts
• Re: Blackboard Authentication Error
  • From: jeremy
• Bug for libs in php link directory 2.0
  • From: Mario Oyorzabal Salgado
• CyberShop Ultimate E-commerce Script Cross Site Scripting
  • From: B3g0k
• security contact @lycos.com
  • From: Spiros Antonatos
• The History of the Oracle PLSQL Gateway Flaw
  • From: David Litchfield
• CAID 33581 - CA Message Queuing Denial of Service Vulnerabilities
  • From: Williams, James K
• More on the workaround for the unpatched Oracle PLSQL Gateway flaw
  • From: David Litchfield
• [ MDKSA-2006:030 ] - Updated poppler packages fixes heap-based buffer overflow vulnerability
  • From: security
• [SLAB] NetBSD / OpenBSD kernfs_xread patch evasion
  • From: SecurityLab Research
• Re: Re: Verified evasion in Snort
  • From: anonpoet
• [ MDKSA-2006:031 ] - Updated kdegraphics packages fixes heap-based buffer overflow vulnerability
  • From: security
• [ MDKSA-2006:032 ] - Updated xpdf packages fixes heap-based buffer overflow vulnerability
  • From: security
• [ MDKSA-2006:029 ] - Updated libast packages fixes buffer overflow vulnerability
  • From: security
• Re: New worm crawling trough blogs?!
  • From: Nick FitzGerald
• [ MDKSA-2006:033 ] - Updated OpenOffice.org packages fix issue with disabled hyperlinks
  • From: security
• Re: Re: Verified evasion in Snort
  • From: Dave Korn
• [KDE Security Advisory] kpdf/xpdf heap based buffer overflow
  • From: Dirk Mueller
• Trend Micro ServerProtect version 5.58 can be easily circumvented via the mechanism that limits how many files to scan.
  • From: Mert Sarıca
• Neomail Cross Site Scripting Vulnerability
  • From: simo
• IronMail-5.0.1-Denial of-Service-Protection-Lets-Remote-Users-Deny-Service
  • From: mark
• cPanel Multiple Cross Site Scripting Vulnerability
  • From: simo
• [SECURITY] [DSA 964-1] New gnocatan packages fix denial of service
  • From: Martin Schulze
• Re: Cross Site Cooking
  • From: Yngve Nysaeter Pettersen
• Exchangepop3 rcpt buffer overflow vulnerability
  • From: securma
• AOL Instant Messenger Version 5.9.3861 Local Buffer Overrun Vulnerability
  • From: shell
• Re: Trend Micro ServerProtect version 5.58 can be easily circumvented via the mechanism that limits how many files to scan.
  • From: Henrik Krohns
• Blacklist defenses as a breeding ground for vulnerability variants
  • From: Steven M. Christey
• Outblaze Cross Site Scripting Vulnerability
  • From: simo
• Re: Trend Micro ServerProtect version 5.58 can be easily circumvented via the mechanism that limits how many files to scan.
  • From: Hugo van der Kooij
• Re: AOL Instant Messenger Version 5.9.3861 Local Buffer Overrun Vulnerability
  • From: Stan Bubrouski
• [eVuln] MyQuiz Arbitrary Command Execution Vulnerability
  • From: alex
• LoudBlog <= 0.4 arbitrary remote inclusion
  • From: rgod
• sql injection in ASP Survey
  • From: mfoxhacker
• [KAPDA::#26] - MyTopix Sql Injection & Path Disclosure
  • From: alireza hassani
• PluggedOut Blog SQL injection and XSS
  • From: h e
• VSR Advisory: IBM Tivoli Access Manager - Web Server Plug-in File Retrieval Vulnerability
  • From: VSR Advisories
• Issues with security software: orbicule.com "Undercover"
  • From: Maximillian Dornseif
• Re: Workaround for unpatched Oracle PLSQL Gateway flaw
  • From: ad@xxxxxxxxxxxxxxxx
• [eVuln] Vanilla Guestbook Multiple XSS & SQL Injection Vulnerabilities
  • From: alex
• Re: security contact @lycos.com
  • From: while
• mwcollect Alliance Launch
  • From: Georg Wicherski
• cleartext passwords get into log files
  • From: innate
• Re: Cross Site Cooking
  • From: Glynn Clements
• Re: AOL Instant Messenger Version 5.9.3861 Local Buffer Overrun Vulnerability
  • From: Stan Bubrouski
• ProtoVer LDAP vs CommuniGate Pro 5.0.7
  • From: Evgeny Legerov
• Easily exploitable Pseudo Random Number generator in phpbb version 2.0.19 and under.
  • From: chinchilla
• [ GLSA 200602-01 ] GStreamer FFmpeg plugin: Heap-based buffer overflow
  • From: Stefan Cornelius
• DarkStarlings.com XSS Vulnerability
  • From: Will Boyce
• [SECURITY] [DSA 965-1] New ipsec-tools packages fix denial of service
  • From: Martin Schulze
• Announcement: Domain Contamination By Amit Klein
  • From: contact
• [xfocus-SD-060206]BCB compiler incorrect deal sizeof operator vulnerability
  • From: XFOCUS Security Team
• PeopleSoft (Oracle) PSCipher Encryption Weakness
  • From: info
• Re: [KDE Security Advisory] kpdf/xpdf heap based buffer overflow
  • From: Dirk Mueller
• SECURITY.NNOV: The Bat! 2.x message headers spoofing
  • From: 3APA3A
• [ GLSA 200602-02 ] ADOdb: PostgresSQL command injection
  • From: Sune Kloppenborg Jeppesen
• [ GLSA 200602-03 ] Apache: Multiple vulnerabilities
  • From: Sune Kloppenborg Jeppesen
• [ Secuobs - Advisory ] Bluetooth : DoS on hcidump 1.29 + PoC
  • From: Research Infratech
• [ Secuobs - Advisory ] Bluetooth : DoS on Sony/Ericsson cell phones
  • From: Research Infratech
• [ Secuobs - Tools release ] BSS (Bluetooth Stack Smasher) fuzzer
  • From: Research Infratech
• CAIDA analysis on CME-24/BlackWorm
  • From: Gadi Evron
• Re: cleartext passwords get into log files
  • From: Ben Wheeler
• cPanel 10 handle.html XSS Vulnerability
  • From: shell
• Re: cleartext passwords get into log files
  • From: Damien Miller
• RE: cPanel Multiple Cross Site Scripting Vulnerability
  • From: Hamish Stanaway
• (OLD) Eudora WorldMail 3.0 Windows 2000 Remote System Exploit
  • From: markus magnus
• mailback script exploit
  • From: coderpunk
• Vulnerabilities in vBulltin(3.0.7 - 3.5.3) and IPB(2.0.0 - 2.1.4).
  • From: h . z
• RE: Trend Micro ServerProtect version 5.58 can be easily circumvented via the mechanism that limits how many files to scan.
  • From: Prashant Meswani
• [ MDKSA-2006:034 ] - Updated openssh packages fix vulnerability
  • From: security
• Re: Cross Site Cooking
  • From: Tim Nelson
• Re: security contact @lycos.com
  • From: sheeponhigh
• Re: CAIDA analysis on CME-24/BlackWorm
  • From: Nick FitzGerald
• Re: [xfocus-SD-060206]BCB compiler incorrect deal sizeof operator vulnerability
  • From: XFOCUS Security Team
• crypt_blowfish 1.0
  • From: Solar Designer
• MyQuiz Arbitrary Command Execution Exploit (perl)
  • From: irc0d3r
• High Risk Vulnerability in Lexmark Printer Sharing Service
  • From: NGSSoftware Insight Security Research
• Re: High Risk Vulnerability in Lexmark Printer Sharing Service
  • From: KF (lists)
• Arbitrary code execution via OProfile
  • From: Luís Miguel Silva
• [ MDKSA-2006:035 ] - Updated php packages fix vulnerability
  • From: security
• eyeOS <= 0.8.9 Remote Code Execution
  • From: GulfTech Security Research
• Re: Vulnerabilities in vBulltin(3.0.7 - 3.5.3) and IPB(2.0.0 - 2.1.4).
  • From: Paul Laudanski
• Re: Vulnerabilities in vBulltin(3.0.7 - 3.5.3) and IPB(2.0.0 - 2.1.4).
  • From: Paul Laudanski
• Re: Vulnerabilities in vBulltin(3.0.7 - 3.5.3) and IPB(2.0.0 - 2.1.4).
  • From: scott
• [myimei]MyBB 1.0.2 XSS attack in search.php
  • From: addmimistrator
• [myimei]MyBB1.0.3~moderation.php~SqlInject while merging posts
  • From: addmimistrator
• [ MDKSA-2006:037 ] - Updated mozilla-firefox packages to address DoS vulnerability
  • From: security
• iDefense Security Advisory 02.07.06: QNX Neutrino RTOS fontsleuth Command Format String Vulnerability
  • From: vendor-disclosure
• iDefense Security Advisory 02.07.06: QNX Neutrino RTOS su Command Buffer Overflow
  • From: labs-no-reply@xxxxxxxxxxxx
• Re: [myimei]MyBB 1.0.2 XSS attack in search.php
  • From: Steven M. Christey
• iDefense Security Advisory 02.07.06: QNX RTOS 6.3.0 Local Denial of Service Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• iDefense Security Advisory 02.07.06: QNX Neutrino RTOS phfont Race Condition Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• Re: Workaround for unpatched Oracle PLSQL Gateway flaw
  • From: a
• iDefense Security Advisory 02.07.06: QNX Neutrino RTOS libph PHOTON_PATH Buffer Overflow Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• Whomp Real Estate Manager XP 2005 Sql Injection
  • From: night_warrior771
• iDefense Security Advisory 02.07.06: QNX Neutrino RTOS libAp ABLPATH Buffer Overflow Vulnerability
  • From: vendor-disclosure
• Re: Workaround for unpatched Oracle PLSQL Gateway flaw
  • From: David Litchfield
• iDefense Security Advisory 02.07.06: QNX Neutrino RTOS phgrafx Command Buffer Overflow
  • From: labs-no-reply@xxxxxxxxxxxx
• iDefense Security Advisory 02.07.06: QNX Neutrino RTOS crttrap Arbitrary Library Loading Vulnerability
  • From: vendor-disclosure
• [eVuln] PHP iCalendar File Inclusion Vulnerability
  • From: alex
• Re: Re: EasyCMS vulnerable to XSS injection.
  • From: kim
• WiredRed EPOP XSS Vulnerability
  • From: Adrian Castro
• [ MDKSA-2006:036 ] - Updated mozilla packages to address DoS vulnerability
  • From: security
• iDefense Security Advisory 02.07.06: QNX Neutrino RTOS passwd Command Buffer Overflow
  • From: labs-no-reply@xxxxxxxxxxxx
• iDefense Security Advisory 02.07.06: QNX RTOS 6.3.0 rc.local Insecure File Permissions Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• CPGNuke Dragonfly 9.0.6.1 remote commands execution through arbitrary local inclusion
  • From: rgod
• [ MDKSA-2006:038 ] - Updated groff packages fix temporary file vulnerabilities
  • From: security
• John the Ripper 1.7; pam_passwdqc 1.0+; tcb 1.0; phpass 0.0
  • From: Solar Designer
• ProtoVer SSL: GnuTLS
  • From: Evgeny Legerov
• [SECURITY] [DSA 966-1] New adzapper packages fix denial of service
  • From: Martin Schulze
• [ECHO_ADV_27$2006] Indexu <= 5.0.1 Remote File Inclusion
  • From: eufrato
• [security bulletin] SSRT051007 rev.2 - HP Tru64 UNIX Running DNS BIND4/BIND8 with Forwarders: Remote Unauthorized Privileged Access
  • From: security-alert
• Fwd: Trend Micro ServerProtect version 5.58 can be easily circumvented via the mechanism that limits how many files to scan.
  • From: Mert SARICA
• What can a Remote Vulnerability Scanner do in Future?
  • From: Alice Bryson
• Re: security contact @lycos.com
  • From: Greg Rubin
• Secunia Research: IBM Lotus Domino iNotes Client Script Insertion Vulnerabilities
  • From: Secunia Research
• [security bulletin] SSRT051102 rev.1 - HP HTTP Server Running on Windows, Forced Use of Weaker Security Protocol
  • From: security-alert
• Re: CPGNuke Dragonfly 9.0.6.1 remote commands execution through arbitrary local inclusion
  • From: noreply
• Secunia Research: Lotus Notes ZIP File Handling Buffer Overflow
  • From: Secunia Research
• ProtoVer Sample LDAP testsuite release
  • From: Evgeny Legerov
• Re: John the Ripper 1.7; pam_passwdqc 1.0+; tcb 1.0; phpass 0.0
  • From: Solar Designer
• Secunia Research: Lotus Notes TAR Reader File Extraction Buffer Overflow
  • From: Secunia Research
• CPAINT AJAX Library Cross Site Scripting
  • From: GulfTech Security Research
• iDEFENSE Security Advisory 02.10.06: IBM Lotus Domino Server LDAP DoS Vulnerability
  • From: labs-no-reply@xxxxxxxxxxxx
• [eVuln] Unknown Domain Shoutbox multiple XSS & SQL Injection Vulnerabilities
  • From: alex
• [ Secuobs - Advisory ] Bluetooth : DoS on Nokia cell phones
  • From: Infratech Research
• Re: mailback script exploit
  • From: erik
• LayerOne 2006 - Event Update and Announcement
  • From: Layer One
• RE: John the Ripper 1.7; pam_passwdqc 1.0+; tcb 1.0; phpass 0.0
  • From: Amin Tora
• Secunia Research: Lotus Notes UUE File Handling Buffer Overflow
  • From: Secunia Research
• [SECURITY] [DSA 967-1] New elog packages fix arbitrary code execution
  • From: Martin Schulze
• TSLSA-2006-0006 - multi
  • From: Trustix Security Advisor
• runCMS <= 1.3a2 possible remote code execution through the integrated FCKEditor package
  • From: rgod
• Secunia Research: Lotus Notes HTML Speed Reader Link Buffer Overflows
  • From: Secunia Research
• [eVuln] GuestBookHost Authentication Bypass
  • From: alex
• FarsiNews 2.5 Multiple Vulnerabilities
  • From: h e
• SUSE Security Announcement: binutils,kdelibs3,kdegraphics3,koffice,dia,lyx (SUSE-SA:2006:007)
  • From: Ludwig Nussel
• Secunia Research: Lotus Notes Multiple Archive Handling Directory Traversal
  • From: Secunia Research
• [security bulletin] SSRT061108 rev.2 - HP Systems Insight Manager Remote Un