[bugtraq] Thread Index

• Chronological Index · RSS feed

• iDefense Security Advisory 10.21.06: Novell eDirectory evtFilteredMonitorEventsRequest Invalid Free Vulnerability, iDefense Labs   (October 23, 2006)
• XSS in Zwahlen Online Shop, MC Iglo   (October 23, 2006)
• speedberg <= 1.2beta1 Remote File Inclusion, k1tk4t   (October 23, 2006)
• WHM 10.8.0 cPanel 10.9.0 R50 CentOS 4.4 i686 WHM X v3.1.0 Xss Vulnerability, crackers_child   (October 23, 2006)
• PHP Generator of Object SQL Database (path) Remote File Include Vulnerability, xorontr   (October 23, 2006)
• AROUNDMe 0.6.9 remonte file inclusion, noislet . nospam   (October 23, 2006)
• [SECURITY] [DSA 1197-1] New python2.4 packages fix arbitrary code execution, Moritz Muehlenhoff   (October 23, 2006)
• -==PHP Nuke <= 7.9 SQL Injection and Bypass SQL Injection Protection vulnerabilities==-, paisterist . nst   (October 23, 2006)
• [PHPADSNEW-SA-2006-002] phpAdsNew and phpPgAds 2.0.8-pr1 fix XSS vulnerability, Matteo Beccati   (October 23, 2006)
• D-Link DSL-G624T several vulnerabilities, jose . palanco   (October 23, 2006)
• Flaw in Firefox 2.0 Final, mike   (October 23, 2006)
• Smarty-2.6.1 Remote File Include Vulnerabilities, crackers_child   (October 23, 2006)
  • Re: Smarty-2.6.1 Remote File Include Vulnerabilities, J. Carlos Nieto   (October 24, 2006)  
   
• SQL Injection Vulnerability in Oracle WWV_FLOW_UTILITIES, ak   (October 23, 2006)
• Cross-Site-Scripting Vulnerability in Oracle APEX WWV_FLOW_ITEM_HELP, ak   (October 23, 2006)
• http://www.red-database-security.com/advisory/oracle_apex_css_notification_msg.html, ak   (October 23, 2006)
• Various Cross-Site-Scripting Vulnerabilities in Oracle Reports, ak   (October 23, 2006)
• hack.lu Bluetooth demo, K F (lists)   (October 23, 2006)
  • Re: [Full-disclosure] hack.lu Bluetooth demo, Thierry Zoller   (October 23, 2006)  
   
• Modify Data via Inline Views, ak   (October 23, 2006)
• SQL Injection in package SYS.DBMS_SQLTUNE_INTERNAL, ak   (October 23, 2006)
• SQL Injection in package XDB.DBMS_XDBZ0, ak   (October 23, 2006)
• SQL Injection in package SYS.DBMS_CDC_IMPDP, ak   (October 23, 2006)
• SQL Injection in Oracle package MDSYS.SDO_LRS, ak   (October 23, 2006)
• Multiple HTTP response splitting vulnerabilities in SHOP-SCRIPT, Debasis Mohanty   (October 23, 2006)
• Application orders Linux in WebAPP v0.9.9.2.1, the_free_kernel   (October 23, 2006)
  • <Possible follow-ups>
  • Re: Application orders Linux in WebAPP v0.9.9.2.1, nicolascamino   (October 24, 2006)  
   
• WikiNi Multiple Cross Site Scripting Vulnerabilities, raphael . huck   (October 23, 2006)
• INCA IM-204 Dsl several vulnerabilities, crackers_child   (October 23, 2006)
• [SECURITY] [DSA 1198-1] New python2.3 packages fix arbitrary code execution, Moritz Muehlenhoff   (October 24, 2006)