Bugtraq: by author

0in.email_at_gmail.com
- Smeego CMS vulnerability (May 17 2008)
16.her0_at_gmail.com
- Flash Blog Sql Injection (May 28 2008)
a.jasbi_at_yahoo.com
- Ablespace 1.0 'cat_id' Parameter SQL Injection Vulnerability (May 25 2008)
- dzoic handshakes sql injection >> index.php on $fname (May 24 2008)
- abledating 2.4 >> Sql injection and cross site scripting on search_results.php (May 22 2008)
- Vbulletin 3.7.0 Gold >> Sql injection on faq.php (May 20 2008)
- Cpanel all version >> root access with a reseller account. (May 18 2008)
Admin_at_bugreport.ir
- Dot Net Nuke (DNN) <= 4.8.3 XSS Vulnerability (May 30 2008)
admin_at_majorsecurity.de
- [MajorSecurity Advisory #52]ActualAnalyzer family - Cross Site Scripting Issues (May 12 2008)
admin_at_pcpin.com
- PCPIN Chat 6: potential XSS vulnerability in URL redirection script (May 24 2008)
Adrian Pastor
- Re: MDAP ANTs PWNAGE: dumping the admin password of the BT Home Hub (May 27 2008)
- MDAP ANTs PWNAGE: dumping the admin password of the BT Home Hub (May 21 2008)
alighieri_m_at_libero.it
- Re: mjguest 6.7 (ALL VERSION) Xss & Redirection Vuln (May 21 2008)
Alireza Hassani
- LokiCMS Multiple Vulnerabilities through Authorization weakness (May 31 2008)
Amit Klein
- Re: After 6 months - fix available for Microsoft DNS cache poisoning attack (May 08 2008)
andy.huang_at_vbulletin.com
- Re: Re: Vbulletin 3.7.0 Gold >> Sql injection on faq.php (May 22 2008)
Arshan Dabirsiaghi
- Bypassing URL Authentication and Authorization with HTTP Verb Tampering (May 28 2008)
ascii
- Mantis Bug Tracker 1.1.1 Multiple Vulnerabilities (May 20 2008)
Asterisk Security Team
- /home/putnopvut/asa/AST-2008-007/AST-2008-007: AST-2008-007 Cryptographic keys generated by OpenSSL on Debian-based systems compromised (May 22 2008)
Aviram Jenik
- Advisory - Rsyncrypto maybe affected from Debian OpenSSL reduced entropy problem (May 26 2008)
Bojan Zdrnja
- Re: Exploiting Google MX servers as Open SMTP Relays (May 11 2008)
brad.antoniewicz_at_foundstone.com
- Cisco BBSM Captive Portal Cross-site Scripting (May 13 2008)
Breeeeh_at_hotmail.com
- OtherLogic[vocourse.php]SQL Injection Exploit (May 09 2008)
Brett Moore
- Insomnia : ISVA-080516.1 - Altiris Deployment Solution - SQL Injection (May 18 2008)
- Insomnia : ISVA-080516.2 - Altiris Deployment Solution - Domain Account Disclosure (May 18 2008)
bugtraq_at_opencosmo.com
- VisualSentinel 0.7 Cross Agent Scripting Vulnerability (May 30 2008)
catalina.danila_at_romedchim.com
- Re: [ECHO_ADV_91$2008] Online Rental Property Script <= 4.5 (pid) Blind Sql Injection Vulnerability (May 07 2008)
Charles Morris
- Re: function sleep() in all versions of PHP (May 27 2008)
Charles Vaughn
- SQL Injection leading to authorization bypass in Torrent Trader Classic v1.08 and earlier (May 31 2008)
Cisco Systems Product Security Incident Response Team
- Cisco Security Advisory: CiscoWorks Common Services Arbitrary Code Execution Vulnerability (May 28 2008)
- Cisco Security Advisory: Cisco Voice Portal Privilege Escalation Vulnerability (May 21 2008)
- Cisco Security Advisory: Cisco IOS Secure Shell Denial of Service (May 21 2008)
- Cisco Security Advisory: Cisco Unified Presence Denial of Service Vulnerabilities (May 14 2008)
- Cisco Security Advisory: Cisco Content Switching Module Memory Leak Vulnerability (May 14 2008)
- Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service Vulnerabilities (May 14 2008)
Clifton Royston
- Re: Exploiting Google MX servers as Open SMTP Relays (May 10 2008)
cocoruder
- Microsoft Office Publisher PUB File Parsing Remote Memory Corruption Vulnerability (May 13 2008)
- Adobe Acrobat Professional Javascript For PDF Security Feature Bypass and Memory Corruption Vulnerabilities (May 06 2008)
- [Advisory Update]Adobe Reader/Acrobat Remote PDF Print Silently Vulnerability (May 06 2008)
CORE Security Technologies
- CORE-2008-0415: Borland Interbase 2007 Integer Overflow (May 20 2008)
Core Security Technologies Advisories
- CORE-2008-0126: Multiple vulnerabilities in iCal (May 21 2008)
- CORE-2008-0129 - Wonderware SuiteLink Denial of Service vulnerability (May 05 2008)
Cr4zY.CrAcKeR_at_hotmail.com
- VBZooM <=V1.11 "reply.php" SQL Injection Vulnerability (May 07 2008)
- Re: QTOFileManager V 1.0<== Remote File Upload Vulnerability (May 06 2008)
- QTOFileManager V 1.0<== Remote File Upload Vulnerability (May 05 2008)
cxib_at_securityreason.com
- Re: function sleep() in all versions of PHP (May 27 2008)
- Re: Re: Re: Apache Server HTML Injection and UTF-7 XSS Vulnerability (May 12 2008)
- Re: Apache Server HTML Injection and UTF-7 XSS Vulnerability (May 10 2008)
dann frazier
- [SECURITY] [DSA 1588-2] New Linux 2.6.18 packages fix several vulnerabilities (May 30 2008)
- [SECURITY] [DSA 1588-1] New Linux 2.6.18 packages fix several vulnerabilities (May 27 2008)
- [SECURITY] [DSA 1575-1] New Linux 2.6.18 packages fix denial of service (May 12 2008)
- [SECURITY] [DSA 1565-1] New Linux 2.6.18 packages fix several vulnerabilities (May 01 2008)
dave_at_cpanel.net
- Re: Cpanel all version >> root access with a reseller account. (May 19 2008)
decoder-bugtraq_at_own-hero.net
- xt:Commerce possible DoS (May 23 2008)
- mvnForum 1.1 Cross Site Scripting (May 06 2008)
- Sphider 1.3.4 Cross Site Scripting (May 06 2008)
Deniz Cevik
- Oracle Application Server 10G ORA_DAV Basic Authentication Bypass Vulnerability (May 09 2008)
- ZYWALL Referer Header XSS Vulnerability (May 08 2008)
Devin Carraway
- [SECURITY] [DSA 1586-1] New xine-lib packages fix several vulnerabilities (May 22 2008)
- [SECURITY] [DSA 1579-1] New netpbm-free packages fix arbitrary code execution (May 18 2008)
- [SECURITY] [DSA 1567-1] New blender packages fix arbitrary code execution (May 05 2008)
Digital Security Research Group
- [DSECRG-08-025] Local File Include in OneCMS 2.5 (May 23 2008)
- [DSECRG-08-024] Multiple Security Vulnerabilities (RFI,LFI,XSS) in QuateCMS (May 23 2008)
- [DSECRG-08-020] Alcatel OmniPCX Office Remote Comand Execution (May 21 2008)
- [DSECRG-08-023] SAP Web Application Server XSS Security Vulnerability (May 21 2008)
DoZ_at_HackersCenter.com
- XEROX DocuShare URL XSS Injection Vulnerabilities (May 29 2008)
Dragos Ruiu
- FInal EUSecWest 2008 Speakers (May 08 2008)
DVLabs
- TPTI-08-04: Microsoft Office Jet Database Engine Column Parsing Stack Overflow Vulnerability (May 13 2008)
Eloy Paris
- Re: Cisco BBSM Captive Portal Cross-site Scripting (May 14 2008)
erdc_at_echo.or.id
- [ECHO_ADV_93$2008] Kmita Tellfriend <= 2.0 (file) Remote File Inclusion Vulnerability (May 05 2008)
- [ECHO_ADV_94$2008] Kmita Mail <= 3.0 (file) Remote File Inclusion Vulnerability (May 05 2008)
- [ECHO_ADV_90$2008] PostNuke Module pnEncyclopedia <= 0.2.0 (id) Blind Sql Injection Vulnerability (May 05 2008)
- [ECHO_ADV_95$2008] BackLinkSpider (cat_id) Blind Sql Injection Vulnerability (May 05 2008)
- [ECHO_ADV_92$2008] Anserv Auction XL (viewfaqs.php cat) Blind Sql Injection Vulnerability (May 05 2008)
- [ECHO_ADV_91$2008] Online Rental Property Script <= 4.5 (pid) Blind Sql Injection Vulnerability (May 05 2008)
Felix 'FX' Lindner
- Re: IOS Rookit: the sky isn't falling (yet) (May 27 2008)
Ferruh Mavituna
- DoS attacks using SQL Wildcards - White Paper (May 19 2008)
Florian Weimer
- [SECURITY] [DSA 1590-1] New samba packages fix arbitrary code execution (May 30 2008)
- Re: /home/putnopvut/asa/AST-2008-007/AST-2008-007: AST-2008-007 Cryptographic keys generated by OpenSSL on Debian-based systems compromised (May 22 2008)
- [SECURITY] [DSA 1581-1] New gnutls13 packages fix potential code execution (May 20 2008)
- [SECURITY] [DSA 1576-1] New openssh packages fix predictable randomness (May 14 2008)
- [SECURITY] [DSA 1571-1] New openssl packages fix predictable random number generator (May 13 2008)
Foresight Linux Essential Announcement Service
- FLEA-2008-0008-1 firefox (May 08 2008)
Gadi Evron
- Re: IOS rootkits (fwd) (May 25 2008)
- RE: An account of the Estonian Internet War (May 20 2008)
- An account of the Estonian Internet War (May 20 2008)
- IOS rootkits (May 16 2008)
- Re: Exploiting Google MX servers as Open SMTP Relays (May 07 2008)
Gerald (Jerry) Carter
- [SAMBA] CVE-2008-1105 - Boundary failure when parsing SMB responses (May 28 2008)
Glynn Clements
- Re: function sleep() in all versions of PHP (May 27 2008)
gogulas_at_wp.pl
- function sleep() in all versions of PHP (May 24 2008)
GomoR
- [TOOL] SSL Capable NetCat (and more) (May 03 2008)
hackerb_at_hotmail.com
- dvbbs8.2(access/sql)version login.asp remote sql injection (May 29 2008)
hadihadi_zedehal_2006_at_yahoo.com
- RoomPHPlanning 1.5 (weekview.php) SQL Injection Vulnerability (May 26 2008)
- e107 Plugin BLOG Engine v2.2 (macgurublog.php/uid) Blind SQL Injection Vulnerability (May 22 2008)
- eCMS-v0.4.2 (SQL/PB) Multiple Remote Vulnerabilities (May 20 2008)
- Kostenloses Linkmanagementscript SQL Injection Vulnerabilities (May 14 2008)
- ezContents CMS Version 2.0.0 SQL Injection Vulnerabilities (May 07 2008)
- Power Editor LOCAL FILE INCLUSION Vulnerbility (May 05 2008)
- blur6ex-0.3.462 LOCAL FILE INCLUSION Vulnerbility (May 02 2008)
- project alumni v1.0.9 (info.php) SQL Injection Vulnerability (May 02 2008)
hadikiamarsi_at_hotmail.com
- Multiple XSS In TuxCMS All Version (May 07 2008)
- SiteXS CMS Remote File Upload Vulnerability (May 03 2008)
- chicomas.2.0.4 (May 02 2008)
hollebcons_at_aol.com
- Re: GroupWise 7.0 mailto: scheme buffer overflow (May 02 2008)
houssamix_at_hotmail.fr
- Joomla Component xsstream-dm 0.01 Beta SQL Injection (May 11 2008)
iDefense Labs
- iDefense Security Advisory 05.27.08: EMC AlphaStor Server Agent Multiple Stack Buffer Overflow Vulnerabilities (May 27 2008)
- iDefense Security Advisory 05.27.08: EMC AlphaStor Library Manager Arbitrary Command Execution Vulnerability (May 27 2008)
- iDefense Security Advisory 05.21.08: Multiple Vendor Snort IP Fragment TTL Evasion Vulnerability (May 21 2008)
- iDefense Security Advisory 05.13.08: Microsoft Word CSS Processing Memory Corruption Vulnerability (May 13 2008)
- iDefense Security Advisory 05.12.08: Microsoft Windows I2O Filter Utility Driver (i2omgmt.sys) Local Privilege Escalation Vulnerability (May 12 2008)
- iDefense Security Advisory 05.07.08: Multiple Vendor rdesktop process_redirect_pdu() BSS Overflow Vulnerability (May 07 2008)
- iDefense Security Advisory 05.07.08: Multiple Vendor rdesktop channel_process() Integer Signedness Vulnerability (May 07 2008)
- iDefense Security Advisory 05.07.08: Multiple Vendor rdesktop iso_recv_msg() Integer Underflow Vulnerability (May 07 2008)
- iDefense Security Advisory 04.30.08: Akamai Download Manager Arbitrary Program Execution Vulnerability (May 01 2008)
info
- Hack.lu 2008 CfP (May 15 2008)
ipsdix_at_gmail.com
- [NSG_28-5-08] CA Internet Security Suite 2008 (UmxEventCli.dll/SaveToFile()) remote file corruption poc (May 28 2008)
irancrash_at_gmail.com
- Zina 1.0rc3 Remote Directory Traversal Vulnerability & XSS Vulnerability (May 25 2008)
- LifeType 1.2.8 (May 05 2008)
- Maian Uploader v4.0 XSS Vulnerabilities (May 05 2008)
- Maian Links v3.1 XSS Vulnerabilities (May 03 2008)
- Maian Music v1.1 Multiple Vulnerabilities (Xss/SQL Injection) (May 03 2008)
- Maian Recipe v1.2 Xss Vulnerabilities (May 03 2008)
- Maian Support v1.3 Xss Vulnerabilities (May 03 2008)
- Maian Greeting v2.1 Multiple Vulnerabilities (XSS/SQL INJECTION) (May 03 2008)
- Maian Weblog v4.0 XSS Vulnerabilities (May 03 2008)
- Maian Guestbook v3.2 XSS Vulnerabilities (May 03 2008)
- Maian Search v1.1 Multiple Vulnerabilities (XSS/SQL INJECTION) (May 03 2008)
- Maian Cart v1.1 XSS Vulnerabilities (May 03 2008)
- Maian Gallery v2.0 XSS Vulnerability (May 03 2008)
- Zomplog 3.8.2 XSS Vulnerability (May 02 2008)
- Lifetype 1.2.7 XSS Vulnerability (May 02 2008)
- BlackBook v1.0 Multiple XSS Vulnerabilities (May 01 2008)
- php-addressbook v2.0 Multiple Remote Vulnerabilities (LFI/XSS) (May 01 2008)
- vlBook 1.21 (ALL VERSION) (May 01 2008)
- mjguest 6.7 (ALL VERSION) Xss & Redirection Vuln (May 01 2008)
irvian.info_at_gmail.com
- SunShop Version 3.5.1 Remote Blind Sql Injection (May 15 2008)
J. Oquendo
- Re: Microsot DID DISCLOSE potential Backdoor (May 06 2008)
- Re: Microsot DID DISCLOSE potential Backdoor (May 06 2008)
- Microsot DID DISCLOSE potential Backdoor (May 03 2008)
Jamie Strandboge
- [USN-612-8] openssl-blacklist update (May 21 2008)
- [USN-612-6] OpenVPN regression (May 14 2008)
- [USN-612-5] OpenSSH update (May 14 2008)
- [USN-612-2] OpenSSH vulnerability (May 13 2008)
- [USN-612-1] OpenSSL vulnerability (May 13 2008)
- [USN-611-3] GStreamer Good Plugins vulnerability (May 08 2008)
- [USN-611-2] vorbis-tools vulnerability (May 08 2008)
- [USN-611-1] Speex vulnerability (May 08 2008)
- [USN-605-1] Thunderbird vulnerabilities (May 06 2008)
- [USN-607-1] Emacs vulnerabilities (May 06 2008)
- [USN-608-1] KDE vulnerability (May 06 2008)
- [USN-606-1] CUPS vulnerability (May 05 2008)
Jim Harrison
- RE: Bypassing URL Authentication and Authorization with HTTP Verb Tampering (May 28 2008)
Jon Ribbens
- Re: Re: Re: Apache Server HTML Injection and UTF-7 XSS Vulnerability (May 16 2008)
Josh Bressers
- Security, Open Source Style (May 27 2008)
josh_at_codenomicon.com
- Vulnerability Advisory on OpenSSL (May 28 2008)
- Vulnerability Advisory on GnuTLS (May 20 2008)
jplopezy_at_gmail.com
- Microsoft word javascript execution (May 18 2008)
- Re: Re: GroupWise 7.0 mailto: scheme buffer overflow (May 03 2008)
Juan Miguel - Prisma Virtual -
- Re: function sleep() in all versions of PHP (May 26 2008)
Kees Cook
- [USN-613-1] GnuTLS vulnerabilities (May 21 2008)
- [USN-612-7] OpenSSH update (May 20 2008)
- [USN-612-4] ssl-cert vulnerability (May 14 2008)
- [USN-610-1] LTSP vulnerability (May 06 2008)
- [USN-609-1] OpenOffice.org vulnerabilities (May 06 2008)
Ken Schaefer
- RE: Microsot DID DISCLOSE potential Backdoor (May 06 2008)
- RE: Microsot DID DISCLOSE potential Backdoor (May 06 2008)
lament hero
- Re: Re: Re: Apache Server HTML Injection and UTF-7 XSS Vulnerability (May 14 2008)
- Apache Server HTML Injection and UTF-7 XSS Vulnerability (May 08 2008)
Lamont Granquist
- Re: Exploiting Google MX servers as Open SMTP Relays (May 10 2008)
laurent.gaffie_at_gmail.com
- Novell Client <= 4.91 SP4 Local Stack overflow / B.S.O.D (unauthentificated user) (May 08 2008)
linux0day_at_yahoo.com
- Vulnerability in Multiple Web Application (May 06 2008)
LiveCart
- Fixed: LiveCart SQL injection vulnerability fixed since version 1.1.2 (May 03 2008)
lovebug_at_hotmail.it
- PHP-Nuke Module KuraniKerim [sid] SQL Injection (May 17 2008)
Luigi Auriemma
- Multiple vulnerabilities in WebMod 0.48 (May 03 2008)
- Denial of Service in Call of Duty 4 1.5 (May 02 2008)
luiswang_at_user.sourceforge.net
- Re: netOffice Dwins 1.3 Remote code execution. (May 01 2008)
m.morcote_at_hotmail.com
- Re: VisualSentinel 0.7 Cross Agent Scripting Vulnerability (May 31 2008)
Mark Crowther
- IRM Security Advisory : Barracuda Networks Spam Firewall Cross-Site Scripting Vulnerability (May 22 2008)
Mark Sanders
- Re: function sleep() in all versions of PHP (May 26 2008)
martin.meredith_at_vbulletin.com
- Re: Vbulletin 3.7.0 Gold >> Sql injection on faq.php (May 21 2008)
Marvin Simkin
- Calcium web calendar: Reflected XSS (May 28 2008)
Matias Blanco
- Re: Vbulletin 3.7.0 Gold >> Sql injection on faq.php (May 21 2008)
Matteo Carli
- XSS and CSRF vulnerability on Cpanel 11 (May 08 2008)
mefisto_at_hackermail.com
- FlashBlog Remote File Upload Vulnerability (May 28 2008)
Michael G. Reed
- Re: function sleep() in all versions of PHP (May 27 2008)
Michael Scheidell
- Re: Exploiting Google MX servers as Open SMTP Relays (May 10 2008)
Michael Wojcik
- RE: function sleep() in all versions of PHP (May 28 2008)
Michal Zalewski
- [tool announcement] tmin - a handy fuzzing test case optimizer (May 06 2008)
mkanat_at_bugzilla.org
- Security Advisory for Bugzilla 3.0.3, 3.1.3, 2.22.3, and 2.20.5 (May 05 2008)
mm_at_deadbeef.de
- Debian generated SSH-Keys working exploit (May 14 2008)
Moritz Muehlenhoff
- [SECURITY] [DSA 1574-1] New icedove packages fix several vulnerabilities (May 12 2008)
my_at_eserg.ru
- vuln in WordPress plugin Upload File(UP) (May 23 2008)
narita.hiroo
- rPSA-2008-0157-1 kernel (May 06 2008)
Nicob
- Novell eDirectory unauthenticated access to SOAP interface (May 05 2008)
- Novell eDirectory DoS via HTTP headers (May 05 2008)
Nicolas FISCHBACH
- IOS Rookit: the sky isn't falling (yet) (May 27 2008)
Noah Meyerhans
- [SECURITY] [DSA 1576-2] New openssh packages fix predictable randomness (May 16 2008)
none_at_none.com
- Re: vuln in WordPress plugin Upload File(UP) (May 25 2008)
organiser_at_syscan.org
- Confirmed Program for SyScan'08 Hong Kong (May 11 2008)
output_at_email.it
- www file share pro 5.30 insecure multiple (May 21 2008)
pablo.ximenes_at_upr.edu
- Re: Re: Re: Exploiting Google MX servers as Open SMTP Relays (May 21 2008)
- Re: Re: Exploiting Google MX servers as Open SMTP Relays (May 10 2008)
- Exploiting Google MX servers as Open SMTP Relays (May 07 2008)
Paul Craig
- Malformed Acrobat Distiller 8 .joboptions (May 13 2008)
Paul Szabo
- Re: Re: Re: Re: Apache Server HTML Injection and UTF-7 XSS Vulnerability (May 17 2008)
pi3_at_itsec.pl
- Mtr - remote and local stack overflow - uncomment situation in libresolv. (May 19 2008)
Pierre-Yves Rofes
- [ GLSA 200805-14 ] Common Data Format library: User-assisted execution of arbitrary code (May 13 2008)
- [ GLSA 200805-13 ] PTeX: Multiple vulnerabilities (May 12 2008)
- [ GLSA 200805-12 ] Blender: Multiple vulnerabilities (May 12 2008)
- [ GLSA 200805-11 ] Chicken: Multiple vulnerabilities (May 12 2008)
- [ GLSA 200805-10 ] Pngcrush: User-assisted execution of arbitrary code (May 11 2008)
- [ GLSA 200805-09 ] MoinMoin: Privilege escalation (May 11 2008)
- [ GLSA 200805-04 ] eGroupWare: Multiple vulnerabilities (May 07 2008)
- [ GLSA 200805-02 ] phpMyAdmin: Information disclosure (May 05 2008)
- [ GLSA 200805-01 ] Horde Application Framework: Multiple vulnerabilities (May 05 2008)
Praburaajan
- CFP for HITBSecConf2008 - Malaysia now open (May 16 2008)
- Photos and Presentation Materials from HITBSecConf2008 - Dubai Released (May 02 2008)
Ricardo Martins - Chief Security Officers
- PR07-15: Cross-site Scripting (XSS) / HTML injection on F5 FirePass 4100 SSL VPN 'my.logon.php3' server-side script (May 23 2008)
rick.a.cook_at_gmail.com
- Re: After 6 months - fix available for Microsoft DNS cache poisoning attack (May 08 2008)
Robbie (Rupinder) Gill
- Aruba Mobility Controller TACACS User Authentication and Cross Site Scripting Vulnerabilities (Aruba Advisory ID: AID-051408) (May 14 2008)
Robert Buchholz
- [ GLSA 200805-20 ] GnuTLS: Execution of arbitrary code (May 21 2008)
- [ GLSA 200805-19 ] ClamAV: Multiple vulnerabilities (May 20 2008)
- [ GLSA 200805-18 ] Mozilla products: Multiple vulnerabilities (May 20 2008)
- [ GLSA 200805-16 ] OpenOffice.org: Multiple vulnerabilities (May 14 2008)
- [ GLSA 200805-06 ] Firebird: Data disclosure (May 09 2008)
- [ GLSA 200805-07 ] Linux Terminal Server Project: Multiple vulnerabilities (May 09 2008)
- [ GLSA 200805-08 ] InspIRCd: Denial of Service (May 09 2008)
rPath Update Announcements
- rPSA-2008-0105-1 evolution (May 28 2008)
- rPSA-2008-0178-1 php php-mysql php-pgsql (May 27 2008)
- rPSA-2008-0177-1 emacs emacs-leim (May 27 2008)
- rPSA-2008-0176-1 php php-cgi php-imap php-mcrypt php-mysql php-mysqli php-pgsql php-soap php-xsl php5 php5-cgi php5-imap php5-mcrypt php5-mysql php5-mysqli php5-pear php5-pgsql php5-soap php5-xsl (May 23 2008)
- rPSA-2008-0174-1 gnutls (May 22 2008)
- rPSA-2008-0162-1 kernel (May 07 2008)
- rPSA-2008-0157-1 kernel (May 02 2008)
rwann_at_enovatech.com
- Re: [HV-INFO] Enova hardware encryption: false sense of security (May 29 2008)
- Re: [HV-INFO] Enova hardware encryption: false sense of security (May 28 2008)
sales_at_bosdev.com
- Re: BosNews v4.0 Remote add user admin (May 24 2008)
Sebastien Deleersnyder
- Invitation - OWASP AppSec Europe May 19-22 2008 - Belgium (May 05 2008)
Secunia Research
- Secunia Research: imlib2 PNM and XPM Buffer Overflow (May 29 2008)
- Secunia Research: Samba "receive_smb_raw()" Buffer Overflow Vulnerability (May 29 2008)
- Secunia Research: Foxit Reader "util.printf()" Buffer Overflow (May 20 2008)
security curmudgeon
- Re: CORE-2008-0126: Multiple vulnerabilities in iCal (May 26 2008)
Security Objectives, Inc.
- SECOBJADV-2008-01: Lenovo SystemUpdate SSL Certificate Issuer Spoofing Vulnerability (May 25 2008)
security-alert_at_hp.com
- [security bulletin] HPSBUX02334 SSRT071403 rev.2 - HP-UX Running ftp, Remote Denial of Service (DoS) (May 28 2008)
- [security bulletin] HPSBUX02335 SSRT071454 rev.2 - HP-UX Running useradd(1M), Local Unauthorized Access (May 27 2008)
- [security bulletin] HPSBUX02337 SSRT080072 rev.1 - HP-UX Running HP-UX Secure Shell, Local Unauthorized Access and Denial of Service (DoS) (May 22 2008)
- [security bulletin] HPSBUX02332 SSRT080056 rev.2 - HP-UX Running Apache With PHP, Remote Denial of Service (DoS), Gain Extended Privileges (May 19 2008)
- [security bulletin] HPSBUX02335 SSRT071454 rev.1 - HP-UX Running useradd(1M), Local Unauthorized Access (May 19 2008)
- [security bulletin] HPSBST02336 SSRT080071 rev.1 - Storage Management Appliance (SMA), Microsoft Patch Applicability MS08-026 to MS08-029 (May 19 2008)
- [security bulletin] HPSBUX02334 SSRT071403 rev.1 - HP-UX Running ftp, Remote Denial of Service (DoS) (May 12 2008)
- [security bulletin] HPSBMA02331 SSRT080000 rev.2 - HP-UX running WBEM Services, Remote Execution of Arbitrary Code, Gain Extended Privileges (May 06 2008)
- HPSBUX02332 SSRT080056 rev.1 - HP-UX running Apache with PHP, Remote Denial of Service (DoS), Gain Extended Privileges (May 06 2008)
- HPSBUX02324 SSRT080034 rev.1 - HP-UX Running Netscape Directory Server (NDS), Local Gain Extended Privileges (May 06 2008)
security_at_mandriva.com
- [ MDVSA-2008:108 ] - Updated samba packages fix arbitrary code execution vulnerability (May 28 2008)
- [ MDVSA-2008:107 ] - Updated openssl package fixes denial of service vulnerabilities (May 28 2008)
- [ MDVSA-2008:106 ] - Updated gnutls packages fix denial of service vulnerabilities (May 23 2008)
- [ MDVSA-2008:105 ] - Updated kernel packages fix vulnerabilities (May 21 2008)
- [ MDVSA-2008:103 ] - Updated libid3tag packages fix denial of service vulnerability (May 19 2008)
- [ MDVSA-2008:101 ] - Updated rdesktop packages fix vulnerabilities (May 16 2008)
- [ MDVSA-2008:102 ] - Updated libvorbis packages fix vulnerabilities (May 16 2008)
- [ MDVSA-2008:100 ] - Updated perl packages fix denial of service vulnerability (May 11 2008)
- [ MDVSA-2008:099 ] - Updated ImageMagick packages fix vulnerabilities (May 08 2008)
- [ MDVSA-2008:098 ] - Updated openssh packages fix vulnerability (May 06 2008)
- [ MDVSA-2008:096 ] - Updated emacs packages fix vulnerability in vcdiff (May 06 2008)
- [ MDVSA-2008:097 ] - Updated kdelibs packages fix vulnerability in start_kdeinit (May 06 2008)
- [ MDVSA-2008:095 ] - Updated OpenOffice.org packages fix vulnerabilities (May 02 2008)
securityfocus_at_jon.limedaley.com
- Re: Lifetype 1.2.7 XSS Vulnerability (May 04 2008)
skyline_at_yahoo.com
- Re: Vbulletin 3.7.0 Gold >> Sql injection on faq.php (May 26 2008)
sohotguy_at_mac.com
- Re: Apple iPhone 1.1.3 remote DoS exploit (May 19 2008)
Stefan Esser
- Advisory SE-2008-03: PHP Multibyte Shell Command Escaping Bypass Vulnerability (May 06 2008)
- Advisory SE-2008-02: PHP GENERATE_SEED() Weak Random Number Seed Vulnerability (May 06 2008)
Stefano Zanero
- CFP: European Conference on Computer Network Defense (May 14 2008)
Steffen Wendzel
- XSS in AstroCam (May 01 2008)
Steve Kemp
- [SECURITY] [DSA 1587-1] New mtr packages fix execution of arbitrary code (May 26 2008)
- [SECURITY] [DSA 1584-1] New libfissound packages fix execution of arbitrary code (May 21 2008)
- [SECURITY] [DSA 1570-1] New kazehakase packages fix execution of arbitrary code (May 06 2008)
- [SECURITY] [DSA 1566-1] New cpio packages fix denial of service (May 02 2008)
Steven M. Christey
- Re: CORE-2008-0126: Multiple vulnerabilities in iCal (May 28 2008)
sys-project_at_hotmail.com
- StanWeb.CMS (default.asp id) Remote SQL Injection Exploit (May 17 2008)
- SazCart <= 1.5.1 (prodid) Remote SQL Injection Exploit (May 09 2008)
- Scout Portal Toolkit <= 1.4.0 (ParentId) Remote SQL Injection Exploit (May 05 2008)
tan_prathan_at_hotmail.com
- Mini-CWB <= 2.1.1 Remote XSS Vulnerability (May 25 2008)
- BMForum Remote 5.6 Miltiple XSS Vulnerability (May 22 2008)
- Exteen Blog XSS Remote Cookie Disclosure Exploit (May 22 2008)
- phpSQLiteCMS Multiple Remote XSS Vulnerability (May 22 2008)
- PHPFreeForum <= 1.0 RC2 Remote XSS Vulnerability (May 22 2008)
- Starsgames Control Panel <= 4.6.2 Remote XSS Vulnerability (May 19 2008)
- AppServ Open Project < = 2.5.10 Remote XSS Vulnerability (May 19 2008)
- Wordpress Malicious File Execution Vulnerability (May 18 2008)
Team SHATTER
- Team SHATTER Security Advisory: Oracle Database Buffer Overflow in SYS.KUPF$FILE_INT.GET_FULL_FILENAME (DB11) (May 01 2008)
- Team SHATTER Security Advisory: Oracle Database SQL Injection in SYS.DBMS_CDC_UTILITY.LOCK_CHANGE_SET (DB02) (May 01 2008)
- Team SHATTER Security Advisory: Oracle Database Buffer Overflow in SYS.DBMS_AQJMS_INTERNAL (DB15) (May 01 2008)
Thijs Kinkhorst
- [SECURITY] [DSA 1583-1] New gnome-peercast packages fix several vulnerabilities (May 20 2008)
- [SECURITY] [DSA 1582-1] New peercast packages fix arbitrary code execution (May 20 2008)
- [SECURITY] [DSA 1580-1] New phpgedview packages fix privilege escalation (May 20 2008)
- [SECURITY] [DSA 1578-1] New php4 packages fix several vulnerabilities (May 17 2008)
- [SECURITY] [DSA 1577-1] New gforge packages fix insecure temporary files (May 14 2008)
- [SECURITY] [DSA 1573-1] New php5 packages fix several vulnerabilities (May 11 2008)
- [SECURITY] [DSA 1572-1] New php5 packages fix several vulnerabilities (May 11 2008)
- [SECURITY] [DSA 1573-1] New rdesktop packages fix several vulnerabilities (May 12 2008)
- [SECURITY] [DSA 1554-2] New roundup packages fix regression (May 06 2008)
- [SECURITY] [DSA 1569-2] New cacti packages fix regression (May 06 2008)
- [SECURITY] [DSA 1569-1] New cacti packages fix multiple vulnerabilities (May 05 2008)
- [SECURITY] [DSA 1568-1] New b2evolution packages fix cross site scripting (May 05 2008)
- [SECURITY] [DSA 1564-1] New wordpress packages fix several vulnerabilities (May 01 2008)
Tim
- Re: Re: Re: Re: Apache Server HTML Injection and UTF-7 XSS Vulnerability (May 17 2008)
Tobias Heinlein
- [ GLSA 200805-22 ] MPlayer: User-assisted execution of arbitrary code (May 29 2008)
- [ GLSA 200805-23 ] Samba: Heap-based buffer overflow (May 29 2008)
- [ GLSA 200805-21 ] Roundup: Permission bypass (May 27 2008)
- [ GLSA 200805-17 ] Perl: Execution of arbitrary code (May 20 2008)
- [ GLSA 200805-15 ] libid3tag: Denial of Service (May 14 2008)
- [ GLSA 200805-03 ] Multiple X11 terminals: Local privilege escalation (May 07 2008)
Todd T. Fries
- Re: Exploiting Google MX servers as Open SMTP Relays (May 10 2008)
- Re: Exploiting Google MX servers as Open SMTP Relays (May 10 2008)
Tom.Donovan_at_acm.org
- Re: Re: Re: Re: Re: Apache Server HTML Injection and UTF-7 XSS Vulnerability (May 17 2008)
- Re: Re: Re: Apache Server HTML Injection and UTF-7 XSS Vulnerability (May 14 2008)
Tomi Tuominen
- T2'08: Call for Papers 2008 (Helsinki / Finland) (May 26 2008)
unohope_at_chroot.org
- Repair Online v1.2 (sentout) Create Admin Vulnerability (May 26 2008)
- Campus Bulletin Board v3.4 Multiple Remote Vulnerabilities (May 26 2008)
- Class System v2.3 Multiple Remote Vulnerabilities (May 26 2008)
- phpFix v2 Multiple SQL Injection Vulnerability (May 26 2008)
- Excuse Online (pwd) SQL Injection Vulnerability (May 26 2008)
Viktor Larionov
- RE: An account of the Estonian Internet War (May 20 2008)
VMware Security team
- VMSA-2008-0008 Updates to VMware Workstation, VMware Player, VMware ACE, VMware Fusion resolve critical security issues (May 30 2008)
Walker, Theresa A CIV DISA CSD
- RE: Cisco Security Advisory: Cisco Unified Presence Denial of Service Vulnerabilities (UNCLASSIFIED) (May 14 2008)
William A. Rowe, Jr.
- Re: Apache Server HTML Injection and UTF-7 XSS Vulnerability (May 17 2008)
- Correction to BID 29112 "Apache Server HTML Injection and UTF-7 XSS Vulnerability" (May 14 2008)
Williams, James K
- CA ARCserve Backup caloggerd and xdr Functions Vulnerabilities (May 19 2008)
yos20053_at_gmail.com
- Re: Re: Re: Re: Apache Server HTML Injection and UTF-7 XSS Vulnerability (May 17 2008)
- Re: Re: Apache Server HTML Injection and UTF-7 XSS Vulnerability (May 10 2008)
zdi-disclosures_at_3com.com
- ZDI-08-033: Motorola RAZR JPG Processing Stack Overflow Vulnerability (May 27 2008)
- ZDI-08-031: Trillian MSN MIME Header Stack-Based Overflow Vulnerability (May 21 2008)
- ZDI-08-030: Trillian Multiple Protocol XML Parsing Memory Corruption Vulnerability (May 21 2008)
- ZDI-08-029: Trillian AIM.DLL Long HTML Font Parameter Stack Overflow Vulnerability (May 21 2008)
- ZDI-08-028: IBM Lotus Sametime Community Services Multiplexer Stack Overflow Vulnerability (May 21 2008)
- ZDI-08-026: CA BrightStor ARCserve Backup Remote Buffer Overflow (May 19 2008)
- ZDI-08-027: CA BrightStor ARCserve Backup Arbitrary File Writing Vulnerability (May 19 2008)
- ZDI-08-025: Symantec Altiris Deployment Solution Domain Credential Disclosure Vulnerability (May 15 2008)
- ZDI-08-024: Symantec Altiris Deployment Solution SQL Injection Vulnerability (May 15 2008)
- ZDI-08-023: Microsoft Office RTF Parsing Engine Memory Corruption Vulnerability (May 13 2008)