[bugtraq] Thread Index

• Chronological Index · RSS feed

• Metasploit Framework v3.1 Released, H D Moore   (January 28, 2008)
• Mambo 4.6.3 Path Disclosure, XSS , XSRF, DOS, admin   (January 28, 2008)
  • <Possible follow-ups>
  • Re: Mambo 4.6.3 Path Disclosure, XSS , XSRF, DOS, jamboomla   (February 27, 2008)  
   
• [ GLSA 200801-14 ] Blam: User-assisted execution of arbitrary code, Robert Buchholz   (January 28, 2008)
• [ GLSA 200801-11 ] CherryPy: Directory traversal vulnerability, Robert Buchholz   (January 28, 2008)
• [SECURITY] [DSA 1476-1] New pulseaudio packages fix privilege escalation, Moritz Muehlenhoff   (January 28, 2008)
• Facebook security contact, Alexander Sotirov   (January 28, 2008)
• ClanSphere 2007.4.4 Remote File Disclosure Vulnerability., p4imi0   (January 28, 2008)
• [SECURITY] [DSA 1477-1] New yarssr packages fix arbitrary shell command execution, Moritz Muehlenhoff   (January 28, 2008)
• eTicket 'index.php' Cross Site Scripting Path Vulnerability, Alessandro Tanasi   (January 28, 2008)
• [ GLSA 200801-13 ] ngIRCd: Denial of Service, Robert Buchholz   (January 28, 2008)
• [ GLSA 200801-12 ] xine-lib: User-assisted execution of arbitrary code, Robert Buchholz   (January 28, 2008)
• ASPired2Protect bypass, milad_sa2007   (January 28, 2008)
• WoltLab Burning Board 3.x.x Private Message Delete XSRF Vulnerability, nbbn   (January 28, 2008)
• CORE-2007-1219: Firebird Remote Memory Corruption, Core Security Technologies Advisories   (January 28, 2008)
• VB Marketing "tseekdir.cgi" Local File Inclusion, Sw33t . h4cK3r   (January 28, 2008)
• Uninformed Journal Release Announcement: Volume 9, Uninformed Journal   (January 28, 2008)
• [SECURITY] [DSA 1478-1] New mysql-dfsg-5.0 packages fix several vulnerabilities, Moritz Muehlenhoff   (January 28, 2008)
• Exploit in IE6,7, r2t   (January 28, 2008)
  • Re: Exploit in IE6,7, Nick FitzGerald   (January 28, 2008)  
   
• Advisory: Tripwire Enterprise/Server XSS Vulnerability, Liquidmatrix Security Digest   (January 29, 2008)
• [ GLSA 200801-15 ] PostgreSQL: Multiple vulnerabilities, Raphael Marichez   (January 29, 2008)
• CSRF/XSS in Sungard Banner, banner   (January 29, 2008)
• Nucleus 3.31 XSS in path, Digital Security Research Group   (January 29, 2008)
• Remote File Disclosure in phpCMS 1.2.2, Digital Security Research Group   (January 29, 2008)
  • Re: Remote File Disclosure in phpCMS 1.2.2, 3APA3A   (January 29, 2008)  
   
• PHPKIT 1.6.4 PL1 2 XSRF Vulnerabilities, nbbn   (January 29, 2008)
• [!!FIX Information ] Nucleus 3.31 XSS in path, Digital Security Research Group   (January 29, 2008)
• AmpJuke-0.7.0 (index.php) Xss VuLn., g0rk3m-31   (January 29, 2008)
• Insecure Use of RC4 in LSrunasE and Supercrypt (CVE-2007-6340), Daniel Roethlisberger   (January 29, 2008)