BugTraq@security-focus.com List Archive

• Date Index

• JavaScript Spider (code that can traverse the web), pdp (architect)
• PHP Live! <= 3.1 help.php Remote File Inclusion vulnerability, paisterist . nst
• RE: Informing Companies about security vulnerabilities..., bugtraq
  • RE: Informing Companies about security vulnerabilities..., Wolf Halton
  • <Possible follow-ups>
  • RE: Informing Companies about security vulnerabilities..., Arian J. Evans
• Observations on Mandatory Integrity Control (MIC) in Windows Vista, Enno Rey
• Sorry....My Message With Out Live Site...., Dr . Ninux
• Cahier de textes 2.0 Remote SQL injection Exploit, sami
• LS-20060313 - CA BrightStor ARCserve Backup Remote Buffer Overflow Vulnerability, advisories
  • Re: Invision Power Board Multiple Vulnerabilities, Rapigator
• phpBB User Viewed Posts Tracker Version <= 1.0 [phpbb_root_path] File Include Vulnerability, x0r0n
• FreeForum 0.9.7 (fpath) Remote File Include Vulnerability, x0r0n
• LS-20060220 - CA BrightStor ARCserve Backup Remote Buffer Overflow Vulnerability, advisories
• Vulnerability in Btitracker, aeroxteam
• LS-20060330 - CA BrightStor ARCserve Backup Remote Buffer Overflow Vulnerability, advisories
• Re: net2ftp Remote File Inclusion - bogus report, david
• [ GLSA 200610-03 ] ncompress: Buffer Underflow, Raphael Marichez
• phponline <= (LangFile) Remote File Inclusion Exploit, xp1o
• Emek Portal v2.1 SQL Injection, dj_remix_20
• Details of Lotus Notes Java Applet vulnerabilities, Jouko Pynnonen
• FreeWPS File Upload Command Execution, security
• rPSA-2006-0182-1 php php-mysql php-pgsql, rPath Update Announcements
• TSRT-06-11: CA Multiple Product DBASVR RPC Server Multiple Buffer Overflow Vulnerabilities, TSRT
• rPSA-2006-0185-1 gnome-ssh-askpass openssh openssh-client openssh-server, rPath Update Announcements
• rPSA-2006-0183-1 nss_ldap, rPath Update Announcements
• TSRT-06-12: CA BrightStor Discovery Service Mailslot Buffer Overflow Vulnerability, TSRT
• [CAID 34693, 34694]: CA BrightStor ARCserve Backup Multiple Buffer Overflow Vulnerabilities, Williams, James K
• [Reversemode Advisory] Symantec Antivirus Engine Privilege Escalation, Reversemode
• ZDI-06-031: CA Multiple Product Message Engine RPC Server Code Execution Vulnerability, zdi-disclosures
• ZDI-06-030: CA Multiple Product Discovery Service Remote Buffer Overflow Vulnerability, zdi-disclosures
• ackerTodo 4.2 SQL Injection Vulnerability, Francesco Laurita
• phpMyTeam v2.0 <= (smileys_dir) Remote File Include Vulnerability, x0r0n
• [USN-359-1] Python vulnerability, Martin Pitt
• TorrentFlux User-Agent XSS Vulnerability, sec
• TSLSA-2006-0055 - multi, Trustix Security Advisor
• [SECURITY] [DSA 1192-1] New Mozilla packages fix several vulnerabilities, Martin Schulze
• SUSE Security Summary Report SUSE-SR:2006:024, Thomas Biege
• Hazir Site v2.0 Admin SQL Injection, dj_remix_20
• Vulnerable function in newest PowerPoint case (MS Advisory #925984), Juha-Matti Laurio
• [ MDKSA-2006:180 ] - Updated php packages fix integer overflow vulnerability, security
• iDefense Security Advisory 10.05.06: Symantec AntiVirus IOCTL Kernel Privilege Escalation Vulnerability, iDefense Labs
• [SECURITY] [DSA 1191-1] New Mozilla Thunderbird packages fix several vulnerabilities, Martin Schulze
• Re: Concurrency-related vulnerabilities in browsers - expect problems, Mike
  • Re: Concurrency-related vulnerabilities in browsers - expect problems, Nick Boyce
  • Re: Concurrency-related vulnerabilities in browsers - expect problems, Josh Bressers
• WikyBlog <= v1.4 (WN_BASEDIR) Remote File Inclusion Exploit, xp1o
  • <Possible follow-ups>
  • Re: WikyBlog <= v1.4 (WN_BASEDIR) Remote File Inclusion Exploit, Steven M. Christey
• Vulnerability Type Distributions in CVE, Steven M. Christey
• [ GLSA 200610-02 ] Adobe Flash Player: Arbitrary code execution, Matthias Geerdsen
• [SECURITY] [DSA 1190-1] New maxdb-7.5.00 packages fix execution of arbitrary code, Moritz Muehlenhoff
• [SECURITY] [DSA 1189-1] New openssh-krb5 packages fix denial of service and potential execution of arbitrary code, Moritz Muehlenhoff
• [ GLSA 200610-01 ] Mozilla Thunderbird: Multiple vulnerabilities, Matthias Geerdsen
• Invision Power Board Multiple Vulnerabilities, Rapigator
• [USN-357-1] Mono vulnerability, Martin Pitt
• [USN-353-2] OpenSSL vulnerability, Martin Pitt
• [USN-358-1] ffmpeg, xine-lib vulnerabilities, Martin Pitt
• Technical Paper on the ZERT Patch and VML [was: Re: ZERT patch for setSlice()], Gadi Evron
  • Re: [funsec] Technical Paper on the ZERT Patch and VML [was: Re: ZERT patch for setSlice()], Alexander Sotirov
• Yener Haber Script v2.0 SQL injection, dj_remix_20
• Directory Traversal Vulnerability in Goop Gallery 2.0.2, security
• [SECURITY] [DSA 1188-1] New mailman packages fix several problems, Martin Schulze
• [ MDKSA-2006:179 ] - Updated openssh packages fix DoS vulnerabilities, security
• Advisory 08/2006: PHP open_basedir Race Condition Vulnerability, Stefan Esser
• [CAID 34661]: CA Unicenter WSDM File System Read Access Vulnerability, Williams, James K
• phpMyProfiler remote file include, mozi2weed
• iDefense Security Advisory 10.02.06: Novell GroupWise Messenger nmma.exe DoS Vulnerability, iDefense Labs
• PacSec 2006 Papers announcement and EUSecWest Call For Papers, Dragos Ruiu
• Re: [Full-disclosure] IE UXSS (Universal XSS in IE, was Re: Microsoft Internet Information Services UTF-7 XSS Vulnerability [MS06-053]), Paul Szabo
• Security flaw in IBM Client Security Password Manager, Luís Miguel Silva
• Re: WebspotBlogging => 3.0 Remote File Include Vulnerabilities, Steven M. Christey
• [ MDKSA-2006:178 ] - Updated ntp packages rebuilt against updated openssl., security
• [ MDKSA-2006:177 ] - Updated MySQL packages rebuilt against updated openssl., security
• [ MDKSA-2006:172-1 ] - Updated openssl packages fix vulnerabilities, security
• [SECURITY] [DSA 1185-2] New openssl packages fix arbitrary code execution, Noah Meyerhans
• [security bulletin] HPSBUX02129 SSRT061149 rev.1 - HP-UX running SLP, Remote Unauthorized Access, security-alert
• FreeBSD Security Advisory FreeBSD-SA-06:22.openssh, FreeBSD Security Advisories
• Re: net2ftp: a web based FTP client :) <= Remote File Inclusion, securfrog
• Re: WebCalendar-1.0.3 reading of any files, webcalendar
• Portable shell-exploit for buffer-overflow bugs, Roman Medina-Heigl Hernandez
• Security contact for Myspace/Fox?, E Mintz
  • <Possible follow-ups>
  • Re: Security contact for Myspace/Fox?, Juha-Matti Laurio
• Microsoft Internet Information Services UTF-7 XSS Vulnerability [MS06-053], Eiji James Yoshida
• [USN-354-1] Firefox vulnerabilities, Martin Pitt
• digishop v 4.0.0 Xss Vuln., meto5757
• [USN-356-1] gdb vulnerability, Martin Pitt
• [USN-355-1] openssh vulnerabilities, Martin Pitt
• IE UXSS (Universal XSS in IE, was Re: Microsoft Internet Information Services UTF-7 XSS Vulnerability [MS06-053]), Paul Szabo
  • Re: [Full-disclosure] IE UXSS (Universal XSS in IE, was Re: Microsoft Internet Information Services UTF-7 XSS Vulnerability [MS06-053]), Brian Eaton
    • Re: [Full-disclosure] IE UXSS (Universal XSS in IE, was Re: Microsoft Internet Information Services UTF-7 XSS Vulnerability [MS06-053]), Paul Szabo
• [security bulletin] HPSBUX02157 SSRT061220 rev.1 HP-UX Running Ignite-UX Server, Remote Unauthorized Access and Privilege Elevation, security-alert
• Dayfox Blog v2.0 Remote file include, dj_remix_20
• "POC 2006" by Korean hackers, securityproof
• Pebble 2.0.0 RC[1,2] XSS vulnerability, Paolo Perego
• Kerio Multiple insufficient argument validation of hooked SSDT function Vulnerability, David Matousek
• IBM Informix Dynamic Server V10.0 File Clobbering during Install, Larry Cashdollar
• EasyBannerFree (functions.php) Remote File Include Exploit, las_kid
• Layered Defense Advisory: TrendMicro OfficesScan Corporate Edition Format String Vulnerability, dh
• 0day in Firefox from ToorCon '06, Thor Larholm
• [OpenPKG-SA-2006.022] OpenPKG Security Advisory (openssh), OpenPKG
• phpMyWebmin 1.0 <= (target) Remote File Include Vulnerability, x0r0n
• zero-day flaws in Firefox: about 30 unpatched Firefox flaws, ragan
  • Re: zero-day flaws in Firefox: about 30 unpatched Firefox flaws, Mailinglists Address
• Advisory 07/2006: phpMyAdmin Multiple CSRF Vulnerabilities, Stefan Esser
• ZERT patch for setSlice(), Gadi Evron

This archive provided courtesy of JSW4.NET, Internet Hosting Services for Small Business.
The main JSW4.NET technical listserv archive and search page.
The main archive page for this list.