[bugtraq] Thread Index

• Chronological Index · RSS feed

• FTPoed Blog Engine =>v1.1 HTML Injection Vulnerability, sikik   (March 06, 2006)
• SyScan'06 Call For Papers, organiser@xxxxxxxxxx   (March 06, 2006)
• htpasswd bufferoverflow and command execution in thttpd-2.25b., Larry Cashdollar   (March 06, 2006)
• Microsoft Visual Studio 6.0 Sp6 Malformed .dbp File BoF Exploit, kozan   (March 06, 2006)
• [ GLSA 200603-04 ] IMAP Proxy: Format string vulnerabilities, Thierry Carrez   (March 06, 2006)
• [ GLSA 200603-05 ] zoo: Stack-based buffer overflow, Thierry Carrez   (March 06, 2006)
• Multiple vulnerabilities in Cube engine 2005_08_29, Luigi Auriemma   (March 06, 2006)
• Multiple vulnerabilities in Sauerbraten engine 2006_02_28, Luigi Auriemma   (March 06, 2006)
• Out of memory crash in Freeciv 2.0.7, Luigi Auriemma   (March 06, 2006)
• Multiple vulnerabilities in Liero Xtreme 0.62b, Luigi Auriemma   (March 06, 2006)
• SQL injection & XSS IN vbzoom v1.11, ???? ????   (March 06, 2006)
• SQL injection in Invision Power Board v2.1.5, ???? ????   (March 06, 2006)
  • <Possible follow-ups>
  • Re: SQL injection in Invision Power Board v2.1.5, mattmecham   (March 07, 2006)  
  • Re: SQL injection in Invision Power Board v2.1.5, optix_prorat100   (April 10, 2006)  
   
• [USN-260-1] flex vulnerability, Martin Pitt   (March 07, 2006)
• histhost v1.0.0 xss and possible rmdir, retard   (March 07, 2006)
  • <Possible follow-ups>
  • Re: histhost v1.0.0 xss and possible rmdir, Steven M. Christey   (March 14, 2006)
    • Re: histhost v1.0.0 xss and possible rmdir, Chris Kuethe   (March 15, 2006)  
     
   
• link bank code execution and xss, retard   (March 07, 2006)
• phpBannerExchange 2.0 Directory Traversal Vulnerability, h4cky0u . org   (March 07, 2006)
  • <Possible follow-ups>
  • Re: phpBannerExchange 2.0 Directory Traversal Vulnerability, mopeygoff   (June 08, 2006)  
   
• PHP-based CMS mass-exploitation, Daniel Bonekeeper   (March 07, 2006)
  • Re: PHP-based CMS mass-exploitation, Paul Laudanski   (March 08, 2006)  
   
• [SECURITY] [DSA 987-1] New tar packages fix arbitrary code execution, Moritz Muehlenhoff   (March 07, 2006)
• IM Lock 2006 - Insecure Registry Permission Vulnerability, unsecure   (March 07, 2006)
• Cpanel Path Disclosure Vulnerability, Silversmith   (March 07, 2006)
• Purple Paper: Exegesis Of Virtual Hosts Hacking, unknown . pentester   (March 07, 2006)
  • Re: Purple Paper: Exegesis Of Virtual Hosts Hacking, Anders Henke   (March 15, 2006)  
  • <Possible follow-ups>
  • RE: Purple Paper: Exegesis Of Virtual Hosts Hacking, Craig Wright   (March 10, 2006)  
   
• Loudblog 0.41 SQL Injection, Local file read/include, tzitaroth   (March 07, 2006)