[bugtraq] Thread Index

• Chronological Index · RSS feed

• TK53 Advisory #2: Multiple vulnerabilities in ClamAV, Lolek of TK53   (December 29, 2007)
• CuteNews Arbitrary File Download AllVersion, pawel2827   (December 29, 2007)
• CCMS v3.1 Demo <= SQL Injection Vulnerability 0day, pawel2827   (December 29, 2007)
• [ GLSA 200712-23 ] Wireshark: Multiple vulnerabilities, Robert Buchholz   (December 31, 2007)
• [ GLSA 200712-24 ] AMD64 x86 emulation GTK+ library: User-assisted execution of arbitrary code, Robert Buchholz   (December 31, 2007)
• [ GLSA 200712-25 ] OpenOffice.org: User-assisted arbitrary code execution, Pierre-Yves Rofes   (December 31, 2007)
• Fingerprints in Astaro Security Gateway v7.1, morin . josh   (December 31, 2007)
• Bitweaver source code disclosure, arbitrary file upload, admin   (December 31, 2007)
• [ GLSA 200712-22 ] Opera: Multiple vulnerabilities, Pierre-Yves Rofes   (December 31, 2007)
• milliscripts (dir.php) Cross-Site Scripting Vulnerability, sys-project   (December 31, 2007)
• LiveCart Multiple Cross-Site Scripting Vulnerabilities, DoZ   (December 31, 2007)
• Instant Softwares DatingSite SQL Injection, The-0utl4w-noreply   (December 31, 2007)
• [HSC Security Group] Multiple CSRF in Joomla all versions - Complete compromise, zinho   (December 31, 2007)
• Cross-Site Scripting (XSS) in phpWebSite 1.4.0 search, Audun Larsen   (January 01, 2008)
• MODx CMS Source code disclosure, local file inclusion, admin   (January 02, 2008)
• phpBB2 2.0.22 Cross Site Scripting Vulnerability, bugtraq   (January 02, 2008)
  • <Possible follow-ups>
  • Re: phpBB2 2.0.22 Cross Site Scripting Vulnerability, neothermic   (January 03, 2008)  
  • Re: Re: phpBB2 2.0.22 Cross Site Scripting Vulnerability, admin   (January 03, 2008)  
  • Re: phpBB2 2.0.22 Cross Site Scripting Vulnerability, neothermic   (January 03, 2008)
    • AW: phpBB2 2.0.22 Cross Site Scripting Vulnerability, Aufmuth Andreas   (January 04, 2008)  
     
   
• Multiple vulnerabilities in Georgia SoftWorks SSH2 Server 7.01.0003, Luigi Auriemma   (January 02, 2008)
• Buffer-overflow and format string in White_Dune 0.29beta791, Luigi Auriemma   (January 02, 2008)
• AST-2008-001: Crash from transfer using BYE with Also header, Asterisk Security Team   (January 02, 2008)
• Yet another Dialog Spoofing Vulnerability - Firefox Basic Authentication, avivra   (January 03, 2008)
  • Re: [Full-disclosure] Yet another Dialog Spoofing Vulnerability - Firefox Basic Authentication, Michal Zalewski   (January 03, 2008)
    • Re: [Full-disclosure] Yet another Dialog Spoofing Vulnerability - Firefox Basic Authentication, avivra   (January 03, 2008)  
     
   
• [security bulletin] HPSBGN02301 SSRT071508 rev.2 - HP Software Update Running on Windows, Remote Execution of Arbitrary Code, Gain Privileged Access, security-alert   (January 03, 2008)
• xss in w3-msql error page, vivek_infosec   (January 03, 2008)
• [ MDVSA-2008:1 ] - Updated wireshark packages fix multiple vulnerabilities, security   (January 03, 2008)
• [SECURITY] [DSA 1443-1] New tcpreen packages fix denial of service, Moritz Muehlenhoff   (January 03, 2008)