[bugtraq] Thread Index

• Chronological Index · RSS feed

• Joomla Com_blog "pid" Remote SQL Injection, no-reply   (February 25, 2008)
• Joomla com_inter "id" Remote SQL Injection, no-reply   (February 25, 2008)
• [ MDVSA-2008:049 ] - Updated nss_ldap package fixes race condition allowing user data theft, security   (February 25, 2008)
• Softbiz jokes and funny pictures (index.php) sql injection, Hamza Almersoumi   (February 25, 2008)
• Pigyard Art Gallery Multiple SQL Injection, No-Reply   (February 25, 2008)
• Alkacon OpenCms tree_files.jsp resource XSS, nnposter   (February 25, 2008)
• S21SEC-040-en: Infinite invalid authentication attempts possible in BEA WebLogic Server, S21sec labs   (February 25, 2008)
• [SECURITY] [DSA 1507-1] New turba2 packages fix permission testing, Steve Kemp   (February 25, 2008)
• [SECURITY] [DSA 1506-1] New iceape packages fix several vulnerabilities, Moritz Muehlenhoff   (February 25, 2008)
• Packeteer Products File Listing XSS, nnposter   (February 25, 2008)
• [ GLSA 200802-10 ] Python: PCRE Integer overflow, Robert Buchholz   (February 25, 2008)
• Php Nuke "Sell" module SQL Injection ("cid"), no-reply   (February 25, 2008)
• CORE-2007-0930 Path Traversal vulnerability in VMware's shared folders implementation, Core Security Technologies Advisories   (February 25, 2008)
• Aria-Security.Net: Joomla Com_publication "pid" Remote SQL Injection, No-Reply   (February 25, 2008)
• Wordpress Plugin Sniplets 1.1.2 Multiple Vulnerabilities, nbbn   (February 25, 2008)
• Powered by Pagetool Ver (1.04-05-06-07), turkish-warrorr   (February 25, 2008)
  • Re: Powered by Pagetool Ver (1.04-05-06-07), packet   (February 25, 2008)  
   
• [SECURITY] [DSA 1508-1] New diatheke packages fix arbirary shell command execution, Thijs Kinkhorst   (February 25, 2008)
• Format string and buffer-overflow in SurgeMail 38k4, Luigi Auriemma   (February 25, 2008)
• NULL pointer in SurgeFTP 2.3a2, Luigi Auriemma   (February 25, 2008)
• Nortel IP Phone DoS, sipherr   (February 26, 2008)
  • <Possible follow-ups>
  • Re: Re: Nortel IP Phone DoS, sipherr   (February 26, 2008)  
  • Re: Nortel IP Phone DoS, amarkov   (February 26, 2008)  
   
• php-nuke sql injection reportaj [secid], lovebug   (February 26, 2008)
• [SECURITY] [DSA 1509-1] New koffice packages fix multiple vulnerabilities, Noah Meyerhans   (February 26, 2008)
• Bypassing OfficeScan Trend Micro AV, Danux   (February 26, 2008)
• SandMan 1.0.080226 is out!, Matthieu Suiche   (February 26, 2008)
• [ MDVSA-2008:050 ] - Updated cups packages fix multiple vulnerabilities, security   (February 26, 2008)
• [ GLSA 200802-12 ] xine-lib: User-assisted execution of arbitrary code, Robert Buchholz   (February 26, 2008)
• [ GLSA 200802-11 ] Asterisk: Multiple vulnerabilities, Pierre-Yves Rofes   (February 26, 2008)