Mail Thread Index

• Date Index

• Protty v.01A (beta) - shellcode execution protection library for Windows NT based systems, Piotr Bania
• [SECURITY] [DSA 818-1] New kdeedu packages fix insecure temporary files, Martin Schulze
• Platinum Secure smartcard security bypass, acidemon
• HTTP Request Smuggling - ERRATA (the IIS 48K buffer phenomenon), Amit Klein (AKsecurity)
• OpenServer 6.0.0 : TCP Remote ICMP Denial Of Service Vulnerabilities, please_reply_to_security
• [SECURITY] [DSA 817-1] New python2.2 packages fix arbitrary code execution, Martin Schulze
  • <Possible follow-ups>
  • [SECURITY] [DSA 817-1] New python2.2 packages fix arbitrary code execution, joey
• My Little Forum 1.5 / 1.6beta SQL Injection, retrogod
  • <Possible follow-ups>
  • My Little Forum 1.5 / 1.6beta SQL Injection, retrogod
• Hack Dot AE v2, SpyHat
• [security bulletin] SSRT5998 Rev.2 HP System Management Homepage (v2.0.x) Denial of Service (DoS) and XSS, security-alert
• [scip_Advisory 1746] Microsoft Internet Explorer 6.0 embedded content cross site scripting, Marc Ruef
  • Re: [Full-disclosure] [scip_Advisory 1746] Microsoft Internet Explorer 6.0 embedded content cross site scripting, Brion Vibber
• Secunia Research: PowerArchiver ACE/ARJ Archive Handling Buffer Overflow, Secunia Research
• Sql injection in jPortal version 2.3.1 (module download), krasza
• TSLSA-2005-0051 - clamav, Trustix Security Advisor
• [SECURITY] [DSA 819-1] New python2.1 packages fix arbitrary code execution, Martin Schulze
• Secunia Research: 7-Zip ARJ Archive Handling Buffer Overflow, Secunia Research
• PhpMyFAQ 1.5.1 multiple vulnerabilities, retrogod
• Rita Scams Call to Arms - Update, Gadi Evron
• "Exploiting the XmlHttpRequest object in IE" - paper by Amit Klein, Amit Klein (AKsecurity)
  • Re: "Exploiting the XmlHttpRequest object in IE" - paper by Amit Klein, Yutaka OIWA
    • Re: "Exploiting the XmlHttpRequest object in IE" - paper by Amit Klein, Amit Klein (AKsecurity)
  • <Possible follow-ups>
  • Re: "Exploiting the XmlHttpRequest object in IE" - paper by Amit Klein, anonymous
  • RE: "Exploiting the XmlHttpRequest object in IE" - paper by Amit Klein, Sergey V. Gordeychik
• AlstraSoft E-Friends Remote Command Exucetion, khc
• [ GLSA 200509-17 ] Webmin, Usermin: Remote code execution through PAM authentication, Thierry Carrez
• Hijacking Bluetooth Headsets for Fun and Profit?, KF (lists)
• MailGust 1.9 SQL Injection, retrogod
• [SECURITY] [DSA 820-1] New courier packages fix cross-site scripting, Martin Schulze
• [USN-186-1] Mozilla and Firefox vulnerabilities, Martin Pitt
• [ GLSA 200509-16 ] Mantis: XSS and SQL injection vulnerabilities, Thierry Carrez
• Server crash and motd deletion in MultiTheftAuto 0.5 patch 1, Luigi Auriemma
• FL Studio 5 (.flp file processing) Heap Overflow, varunuppal
• SUSE Security Announcement: XFree86-server,xorg-x11-server (SUSE-SA:2005:056), Thomas Biege
• [ GLSA 200509-18 ] Qt: Buffer overflow in the included zlib library, Sune Kloppenborg Jeppesen
• [USN-186-2] Ubuntu 4.10 packages for USN-186-1 Firefox security update, Martin Pitt
• [USN-187-1] Linux kernel vulnerabilities, Martin Pitt
• [ISR] - Novell GroupWise Client Integer Overflow, Francisco Amato
  • Re: [ISR] - Novell GroupWise Client Integer Overflow, Crist J. Clark
• MDKSA-2005:170 - Updated mozilla packages fix multiple vulnerabilities, Mandriva Security Team
• lucidCMS 1.0.11 is susceptible to a cross site scripting attack, x1ngbox
• ElseNot project, layne
• Announce: RSBAC v1.2.5 released, Amon Ott
• Nokia 7610, 3210 denial of service in OBEX., A. Ramos
• SEO borad: SQL injection, ghc
• FreeBSD GNU Mailutils 0.6 imap4d exploit, angelo
• CMS Made Simple 0.10 is susceptible to a cross site scripting attack., X1ngBox
• RealPlayer && HelixPlayer Remote Format String Exploit, c0ntexb
• PacSec 05, Dragos Ruiu