BugTraq@security-focus.com List Archive

BugTraq@security-focus.com List Archive

Thread Index

POC & exploit for Apache mod_rewrite off-by-one, Jacobo Avariento,

LBlog <= "comments.asp" SQL Injection Exploit, ChironeX . FleckeriX,

WoltLab Burning Board 2.3.5(WBB) in XSS, ZeberuS,

[SECURITY] [DSA 1154-1] New squirrelmail packages fix information disclosure, Moritz Muehlenhoff,

New PowerPoint 0-day and Trojan - FAQ document ready, Juha-Matti Laurio,

Re: [SECURITY] [DSA 1150-1] New shadow packages fix privilege escalation, Henry Jensen,

[XSec-06-08]: Windows 2000 Multiple COM Object Instantiation Vulnerability, nop,

Mambo Component - Display MOSBot Manager Remote File Inclusion Vuln, Outlaw,

Mambo Component - Display MOSBot Manager Remote File Inclusion Vuln, Outlaw,

DoS 2wire Gateway, preth00nker,

[XSec-06-09]: Internet Explorer Multiple COM Objects Color Property DoS Vulnerability, nop,

Mambo Component - EstateAgent Remote File Inclusion, Outlaw,

ToendaCMS <= 1.0.3 -(tcms_administer_site) Remote File Include, h4ck3riran,

Re: Startpage <= 1.0 (cfgLanguage) Remote File Inclusion Vulnerability, securityfocus,

SimpleBlog 2.0 <= "comments.asp" SQL Injection Exploit, ChironeX . FleckeriX,

Diesel Job Site forgot.php Cross-Site Scripting, night_warrior-,

Diesel Paid Mail getad.php Cross-Site Scripting Vulnerability, night_warrior-,

Smart Traffic Remote File Include Vulnerability, night_warrior-,

DieselPay İndex.php Cross-Site Scripting Vulnerability, night_warrior-,

[ MDKSA-2006:144 ] - Updated php packages fix vulnerability, security,

[ MDKSA-2006:145 ] - Updated Firefox packages fix multiple vulnerabilities, security,

MDaemon POP3 server remote buffer overflow (preauth), infocus,

[ MDKSA-2006:146 ] - Updated Thunderbird packages fix multiple vulnerabilities, security,

TTG0601 - Alt-N WebAdmin Multiple Vulnerabilities, TTG,

Vendor Statement: fixed Mobotix IP Network Cameras Multiple XSS bug, dkabs,

Simpliciti Locked Browser Jail Breakout Vulnerability, dc,

EEYE:ALERT: MS06-042 Related Internet Explorer 'Crash' is Exploitable, Marc Maiffret,

Major updates in PowerPoint FAQ document - not a 0-day issue, Juha-Matti Laurio,

Simple Machines Forum <=1.1RC2 unset() vulnerabilities, rgod,

Re: Joomla x-shop <= 1.7 Remote File Include Vulnerability, Carsten Eilers,

Re: Joomla Rssxt <= 1.0 Remote File Include Vulnerability, Carsten Eilers,

unauthorized VNC access in AK-Systems Windows Terminals, Victor Sudakov,

Re: Mambo Component - Display MOSBot Manager Remote File Inclusion Vuln, Jan de Groot,

Re: mtg_myhomepage Component For Mambo R.F.I, Carsten Eilers,

(exploit) firefox 1.5.0.6 linux DoS, tomas,

Linux Kernel SCTP Privilege Elevation Vulnerability, Avert,

Tons of SQL-injections and XSS in Eichhorn Portal and vendor page, MC Iglo,

Re: mambo-phphop Product Scroller Module R.F.I, Carsten Eilers,

Symantec Enterprise Security Manager Denial-of-Service Vulnerability, Avert,

BlackBoard Multiple Vulnerabilities (XSS), Pr070n,

PHProjekt v0.6.1 Remote File Inclusion Vulnerability (2), D3nGeR,

Re: discloser 0.0.4 Remote File Inclusion (with Exploit), Carsten Eilers,

PHlyMail Lite [PM_[path][lib]=] Remote File Include Vulnerability, D3nGeR,

Re: anjel Mambo Component Remote File Include, Carsten Eilers,

[ MDKSA-2006:147 ] - Updated squirrelmail packages fix vulnerabilities, security,

faille include in "VeriTECH" isreal, king-hacker,

Re: BlackBoard Multiple Vulnerabilities (XSS), C. Hamby,

Symantec Gateway Security DNS exploit, Gianstefano Monni,

Re: BlackBoard Multiple Vulnerabilities (XSS), pr0t0n,

Cisco Security Advisory: Cisco VPN 3000 Concentrator FTP Management Vulnerabilities, Cisco Systems Product Security Incident Response Team,

Cisco Security Advisory: Unintentional Password Modification in Cisco Firewall Products, Cisco Systems Product Security Incident Response Team,

AW: Symantec Gateway Security DNS exploit, Andre Braun,

RE: Symantec Gateway Security DNS exploit, Pretorius, Wynand (ZA - Johannesburg),

Bugtraq ID: 18402, The Cute Group,

New malware names and updates to PowerPoint FAQ document, Juha-Matti Laurio,

[ GLSA 200608-21 ] Heimdal: Multiple local privilege escalation vulnerabilities, Raphael Marichez,

[ GLSA 200608-22 ] fbida: Arbitrary command execution, Raphael Marichez,

Advisory: VistaBB <= 2.x Multiple File Inclusion Vulnerabilities, Mustafa Can Bjorn IPEKCI,

Advisory: Integramod Portal <= 2.x File Inclusion Vulnerability, Mustafa Can Bjorn IPEKCI,

Re: Modification For OpenSEF Remote file Inclusion, Carsten Eilers,

FreeBSD Security Advisory FreeBSD-SA-06:18.ppp, FreeBSD Security Advisories,

Re: Joomla RFİ ( ERNE ), Carsten Eilers,

Re: Opsware NAS 6.0 reveals MySQL 'root' password, danil9470,

[SECURITY] [DSA 1155-1] New sendmail packages fix denial of service, Martin Schulze,

Re: Directory Traversal vulnerability in IPCheck Monitor Server, support,

Re: PHlyMail Lite [PM_[path][lib]=] Remote File Include Vulnerability, Carsten Eilers,

Re: PHProjekt v0.6.1 Remote File Inclusion Vulnerability (2), Carsten Eilers,

Re: Mambo Component - EstateAgent Remote File Inclusion, Carsten Eilers,

[ GLSA 200608-23 ] Heartbeat: Denial of Service, Sune Kloppenborg Jeppesen,

[SECURITY] [DSA 1155-2] New sendmail packages fix denial of service, Martin Schulze,

Re: ToendaCMS <= 1.0.3 -(tcms_administer_site) Remote File Include, Carsten Eilers,

EEYE: Internet Explorer Compressed Content URL Heap Overflow Vulnerability, Marc Maiffret,

[ MDKSA-2006:149 ] - Updated MySQL packages fix user privilege vulnerabilities, security,

[ MDKSA-2006:148 ] - Updated xorg-x11 packages fix vulnerabilities, security,

pSlash v0.7 (lvc_include_dir) Remote Include Vulnerability, x0r0n,

Advisory 05/2006: Zend Platform Multiple Remote Vulnerabilities, Stefan Esser,

Re: contentpublisher Mambo Component Remote File Include Vulnerabilities, Carsten Eilers,

Re: [eVuln] B-net Software Multiple XSS Vulnerabilities, anon,

Multiple Vulnerabilities in Asterisk 1.2.10 (Fixed in 1.2.11), Matt Riddell (IT),

NSFOCUS SA2006-08 : Microsoft IE6 urlmon.dll Long URL Buffer Overflow Vulnerability, NSFOCUS Security Team,

rPSA-2006-0158-1 tshark wireshark, Justin M. Forbes,

TSLSA-2006-0048 - multi, Trustix Security Advisor,

rPSA-2006-0157-1 xorg-x11 xorg-x11-fonts xorg-x11-tools xorg-x11-xfs, Justin M. Forbes,

FreeBSD Security Advisory FreeBSD-SA-06:18.ppp [REVISED], FreeBSD Security Advisories,

Indiana University Security Advisory: Fuji Xerox Printing Systems (FXPS) print engine vulnerabilities, Krulewitch, Sean V,

YaPiG thanks_comment.php Cross-Site Scripting Vulnerability, Kuon_at_Armorize_dot_com,

Re: Symantec Gateway Security DNS exploit, axel,

[ MDKSA-2006:150 ] - Updated kernel packages fix multiple vulnerabilities, security,

[ MDKSA-2006:151 ] - Updated kernel packages fix multiple vulnerabilities, security,

CuteNews 1.3.* Remote File Include Vulnerability, stormhacker,

[ MDKSA-2006:152 ] - Updated wireshark packages fix multiple vulnerabilities, security,

MyBB Html Injection ( XSS ), Redworm,

AlstraSoft Video Share Enterprise Remote File Include Vulnerability, night_warrior-,

[ GLSA 200608-24 ] AlsaPlayer: Multiple buffer overflows, Raphael Marichez,

Bigace 1.8.2 (GLOBALS) Remote File Inclusion, vampire_chiristof,

Sql injection in Mambo & Joomla, Omid,

Sql injection in Xoops, Omid,

Jupiter CMS 1.1.5 index.php Remote File Include, D3nGeR,

Jetbox CMS search_function.php Remote File, D3nGeR,

Suggested Fix for CVE-2006-4299, Michael Jennings,

Cisco NAC Appliance Agent Installation Bypass Vulnerability, Andreas Gal,

Mambo/Joomla com_comprofiler Components <== v1.0 RC 2 Multiple Remote File Include Vulnerabilities, matdhule,

Mail converted by MHonArc

This archive provided courtesy of JSW4.NET, Internet Hosting Services for Small Business.
The main JSW4.NET technical listserv archive and search page.
The main archive page for this list.