Bugtraq: by author

485 messages starting Mar 17 07 and ending Mar 29 07
Date index | Thread index | Author index


3APA3A

Re: Bypassing Mcafee Entreprise Password Protection 3APA3A (Mar 17)
Pre-open files attack agains locked file 3APA3A (Mar 10)
Re[2]: Microsoft Windows Vista/2003/XP/2000 file management security issues 3APA3A (Mar 14)
Re[2]: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues 3APA3A (Mar 12)
Re[2]: Microsoft Windows Vista/2003/XP/2000 file management security issues 3APA3A (Mar 13)
Microsoft Windows Vista/2003/XP/2000 file management security issues 3APA3A (Mar 08)
Re: [VulnWatch] Microsoft Windows Vista Slideshow Unspecified Blue Screen Of Death Vulnerability 3APA3A (Mar 29)
Re[2]: Microsoft Windows Vista/2003/XP/2000 file management security issues 3APA3A (Mar 15)
Re[2]: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues 3APA3A (Mar 09)

5150sd

Re: RE: Xbox 360 Hypervisor Privilege Escalation Vulnerability 5150sd (Mar 27)

acme

Re: Re: [Full-disclosure] Linux Kernel DCCP Memory Disclosure Vulnerability acme (Mar 29)

aeroxteam------nospam-----

MetaForum <= 0.513 Beta - Remote file upload Vulnerability aeroxteam------nospam----- (Mar 19)

ajannhwt

Xoops Module Friendfinder <= 3.3 (view.php id) BLIND SQL Injection Exploit ajannhwt (Mar 29)

Alexander Sotirov

Re: 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038) Alexander Sotirov (Mar 31)
0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038) Alexander Sotirov (Mar 30)
Re: 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038) Alexander Sotirov (Mar 31)

Alex Belits

Re: Your Opinion + Alex Belits (Mar 19)

Alex Eckelberry

RE: Your Opinion Alex Eckelberry (Mar 19)

alfa

xss in phpmyadmin >=2.8.0 and < 2.10.0 alfa (Mar 07)

Alfred Huger

SecurityFocus is turning seven. What's next? - OFFTOPIC - Please excuse the X-Post Alfred Huger (Mar 09)

alireza hassani

[KAPDA::#64] - Flexbb Sql Injection alireza hassani (Mar 27)

Andrew Kramer

Re: Your Opinion Andrew Kramer (Mar 20)

andy

Re: Xoops All Version -Articles- Print.PHP (ID) Blind SQL Injection Exploit And PoC andy (Mar 28)

anon

Re: RIM BlackBerry Pearl 8100 Browser DoS anon (Mar 13)
**SubHub v2.3.0** anon (Mar 22)

Anonymous

Re: Bypass phishing protection in Firefox / Opera Anonymous (Mar 29)

Arne Vidstrom

Re: Evading the Norman SandBox Analyzer Arne Vidstrom (Mar 03)

asamad

Remote File Inclusion in ViperWeb asamad (Mar 15)

ascii

Re: [Full-disclosure] PHP import_request_variables() arbitrary variable overwrite ascii (Mar 10)
Php Nuke POST XSS on steroids ascii (Mar 09)
Re: Php Nuke POST XSS on steroids ascii (Mar 12)

avivra

RE: Phishing using IE7 local resource vulnerability avivra (Mar 15)
Phishing using IE7 local resource vulnerability avivra (Mar 14)

Bartłomiej Ochman

Re: Linksys WAG200G - Information disclosure Bartłomiej Ochman (Mar 26)

Bastian Ahrens

Re: [Full-disclosure] Woltab Burning Board SQL Injection usergroups.php Bastian Ahrens (Mar 16)

bithedz

Advanced Login <= 0.7 (root) Remote File Inclusion Vulnerability bithedz (Mar 29)

bob

Re: Re: Bypass phishing protection in Firefox / Opera bob (Mar 29)

Bob Beck

Re: Firekeeper - IDS for Firefox available Bob Beck (Mar 13)
Re: Firekeeper - IDS for Firefox available Bob Beck (Mar 10)

BorN To K!LL BorN To K!LL

Rot 13 <= (enkrypt.php) Remote File Disclosure Vulnerability BorN To K!LL BorN To K!LL (Mar 16)
Weekly Drawing Contest <= (check_vote.php) Remote File Disclosure Vuln BorN To K!LL BorN To K!LL (Mar 13)
CLBOX <= (signup.php header) Remote File Include Vulnerability BorN To K!LL BorN To K!LL (Mar 17)
PHP Point Of Sale for osCommerce <= (index.php) Remote File Include Vuln BorN To K!LL BorN To K!LL (Mar 15)
AssetMan 2.4a <= (download_pdf.php) Remote File Disclosure Vulnerability BorN To K!LL BorN To K!LL (Mar 12)

bugtraq

Sava's GuestBook Multiple Vulnerabilities bugtraq (Mar 05)
Re: Your Opinion bugtraq (Mar 16)
LI-Guestbook SQL Injection Vulnerability bugtraq (Mar 05)

Casper . Dik

Re: Your Opinion Casper . Dik (Mar 17)

cassio

XSS vulnerability in the online help system of several Cisco products cassio (Mar 15)

Cesar

[Argeniss] Practical 10 minutes security audit: Oracle Case (Paper) Cesar (Mar 10)

Chris Travers

Full disclosure: Directory Transversal and Arbitrary Code Execution Vulnerability in SQL-Ledger and LedgerSMB Chris Travers (Mar 01)
Full Disclosure: Arbitrary execution vulnerability in SQL-Ledger and LedgerSMB Chris Travers (Mar 19)
Security bypass vulnerability in LedgerSMB and SQL-Ledger (fixes released today) Chris Travers (Mar 09)
DoS and code execution issue in LedgerSMB < 1.1.5 and SQL-Ledger < 2.6.25 Chris Travers (Mar 05)

ciri

Wordpress <= v2.1.0 ciri (Mar 05)
Re: Re: Wordpress <= v2.1.0 ciri (Mar 07)

Cisco Systems Product Security Incident Response Team

Cisco Security Advisory: Multiple Cisco Unified CallManager and Presence Server Denial of Service Vulnerabilities Cisco Systems Product Security Incident Response Team (Mar 28)

clappymonkey

RIM BlackBerry Pearl 8100 Browser DoS clappymonkey (Mar 12)
Re: Re: RIM BlackBerry Pearl 8100 Browser DoS clappymonkey (Mar 13)

C. Michael Pilato

Re: [viewvc-users] Update: ViewCVS and ViewVC 'checkout view' content type fixation issue C. Michael Pilato (Mar 28)

Cold - Zero

Joomla com_joomlaboard 1.1.x Branch (sbp) Multiple Remote File Include Vulnerabi Cold - Zero (Mar 23)

CORE Security Technologies Advisories

CORE-2007-0115: GnuPG and GnuPG clients unsigned data injection vulnerability CORE Security Technologies Advisories (Mar 05)
CORE-2007-0219: OpenBSD's IPv6 mbufs remote kernel buffer overflow CORE Security Technologies Advisories (Mar 13)

Cornelius Riemenschneider

BOGUS: Remote File Include In phpBB-2.0.19 Cornelius Riemenschneider (Mar 26)

corrado . liotta

Tyger Bug Tracking System Multiple Vulnerability corrado . liotta (Mar 03)

craig

Re: WebCalendar v0.9.45 (13 Dec 2004) (login.php) Remote File include craig (Mar 20)

crazy frog crazy frog

Re: Conflict of Interest - My summary crazy frog crazy frog (Mar 20)

crazy_king

F&#305;st&#305;q Duyuru Scripti Remote Sql &#304;njection Exploit crazy_king (Mar 10)

c_r_ck

Lazarus Guestbook (admin.php)Remote File Include Expliot c_r_ck (Mar 07)

Crispin Cowan

Re: Your Opinion Crispin Cowan (Mar 16)

CrYpTiC MauleR

Fizzle : Firefox Extension Vulnerability CrYpTiC MauleR (Mar 26)

Daniel Hazelton

Re: Microsoft Windows Vista/2003/XP/2000 file management security issues Daniel Hazelton (Mar 13)

Daniel Roethlisberger

Buffer Overflow in Linux Drivers for Omnikey CardMan 4040 (CVE-2007-0005) Daniel Roethlisberger (Mar 09)

David Matscheko

SEC Consult SA-20070314-0 :: Apache HTTP Server / Tomcat directory traversal David Matscheko (Mar 14)

devcode29

Windows .ANI Stack Overflow Exploit devcode29 (Mar 31)

dh

Layered Defense Research Advisory: F-Secure Anti-Virus Client Security 6.02 Format String Vulnerability dh (Mar 19)

Dirk Mueller

[KDE Security Advisory] KDE ioslave PASV port scanning vulnerability Dirk Mueller (Mar 27)

disfigure

vbulletin admincp sql injection disfigure (Mar 15)

dniggebrugge

Linksys WAG200G - Information disclosure dniggebrugge (Mar 20)

don bailey

[Fwd: Re: Angel LMS 7.1 - Remote SQL Injection] don bailey (Mar 03)

DoZ

Horde Webmail Multiple HTML Injection vulnerability DoZ (Mar 26)
Wiki Remote Authentication Bypass Vulnerability DoZ (Mar 12)

drackanz

WebCalendar v0.9.45 (13 Dec 2004) (login.php) Remote File include drackanz (Mar 15)

Dr Joe

RE: Xbox 360 Hypervisor Privilege Escalation Vulnerability Dr Joe (Mar 13)

Elliot Kendall

Arbitrary Command Execution in DataDomain Administrator Interface Elliot Kendall (Mar 28)

Eloy Paris

Re: XSS vulnerability in the online help system of several Cisco products Eloy Paris (Mar 15)

emptysands

Re: VMware Workstation multiple denial of service and isolation manipulation vulnerabilities emptysands (Mar 03)

erdc

[ECHO_ADV_75$2007] Groupit 2.00b5 (c_basepath) Remote File Inclusion Vulnerability erdc (Mar 15)
[ECHO_ADV_69$2007] OES (Open Educational System) 0.1beta Remote File Inclusion Vulnerability erdc (Mar 13)
[ECHO_ADV_68$2007] PMB Services <= 3.0.13 Multiple Remote File Inclusion Vulnerability erdc (Mar 10)
[ECHO_ADV_76$2007] Company WebSite Builder PRO (INCLUDE_PATH) Remote File Inclusion Vulnerability erdc (Mar 15)
[ECHO_ADV_78$2007] C-Arbre <= 0.6PR7 (root_path) Remote File Inclusion Vulnerability erdc (Mar 27)
[ECHO_ADV_71$2007] AMP v3.2 (base_path) Remote File Inclusion Vulnerability erdc (Mar 14)
[ECHO_ADV_67$2007] WEBO (Web Organizer) <= 1.0 (baseDir) Remote File Inclusion Vulnerability erdc (Mar 09)
[ECHO_ADV_80$2007] Softerra Time-Assistant <= 6.2 (inc_dir) Remote File Inclusion Vulnerability erdc (Mar 30)
[ECHO_ADV_73$2007] MySQL Commander <= 2.7 (home) Remote File Inclusion Vulnerability erdc (Mar 13)
[ECHO_ADV_74$2007] WebCreator <= 0.2.6-rc3 (moddir) Remote File Inclusion Vulnerability erdc (Mar 14)
[ECHO_ADV_77$2007] Study planner (Studiewijzer) <= 0.15 Remote File Inclusion Vulnerability erdc (Mar 22)
[ECHO_ADV_72$2007] CARE2X (root_path) Remote File Inclusion Vulnerability erdc (Mar 14)

Eric Sites

RE: [Full-disclosure] 0-day ANI vulnerability in Microsoft Windows(CVE-2007-0038) Eric Sites (Mar 31)

eticket

Re: [SECURITY ALERT] osTicket bugs eticket (Mar 28)
Re: Multiple Vulnerabilities In osTicket eticket (Mar 28)

fangxiaodun

CRLF injection in PHP ftp function fangxiaodun (Mar 23)

Foresight Linux Essential Announcement Service

FLEA-2007-0003-1: cups Foresight Linux Essential Announcement Service (Mar 26)
FLEA-2007-0005-1: slocate Foresight Linux Essential Announcement Service (Mar 29)
FLEA-2007-0004-1: openoffice.org Foresight Linux Essential Announcement Service (Mar 29)
FLEA-2007-0001-1: firefox Foresight Linux Essential Announcement Service (Mar 22)
FLEA-2007-0002-1: inkscape Foresight Linux Essential Announcement Service (Mar 24)

Forrest J. Cavalier III

Re: Your Opinion Forrest J. Cavalier III (Mar 19)

Francesco Laurita

Re: Word Press Sensitive Directory exposure (SQL) Francesco Laurita (Mar 09)

fukami

Call for Participation Chaos Communication Camp 2007 fukami (Mar 06)

g30rg3_x

WordPress XSS under function wp_title() g30rg3_x (Mar 09)

Gadi Evron

month of PHP bugs, secondary message? Gadi Evron (Mar 07)
Re: Iframe-Cash/Iframe-Dollars Adware bundle...oooh... my ....god.. Gadi Evron (Mar 13)
On-going Internet Emergency and Domain Names Gadi Evron (Mar 31)
Re: Firekeeper - IDS for Firefox available Gadi Evron (Mar 15)

gmdarkfig

NukeSentinel <= 2.5.06 SQL Injection (mysql >= 4.0.24) Exploit gmdarkfig (Mar 10)
webSPELL <= 4.01.02 Remote PHP Code Execution Exploit gmdarkfig (Mar 03)
Net Portal Dynamic System (NPDS) <= 5.10 Remote Code Execution 0day gmdarkfig (Mar 19)

Greg Sinclair

MS07-012 Not Fixed Greg Sinclair (Mar 16)

Guns

Angel LMS 7.1 - Remote SQL Injection Guns (Mar 01)

H D Moore

Metasploit Framework 3.0 RELEASED! H D Moore (Mar 27)

hugo

Re: Digital Armaments Security Advisory 20.01.2007: Grsecurity Kernel PaX Vulnerability hugo (Mar 09)

ichbin

Re: Tinyportal Shoutbox ichbin (Mar 06)

iDefense Labs

iDefense Security Advisory 03.28.07: IBM Lotus Domino Server LDAP Request Invalid DN Message Heap Overflow Vulnerability iDefense Labs (Mar 28)
iDefense Security Advisory 03.07.07: Ipswitch IMail Server 2006 Multiple ActiveX Control Buffer Overflow Vulnerabilities iDefense Labs (Mar 07)
iDefense Security Advisory 03.14.07: Trend Micro Antivirus UPX Parsing Kernel Divide by Zero Vulnerability iDefense Labs (Mar 14)
iDefense Security Advisory 03.29.07: IBM Lotus Sametime JNILoader Arbitrary DLL Load Vulnerability iDefense Labs (Mar 29)
iDefense Security Advisory 03.05.07: Apple QuickTime Color Table ID Heap Corruption Vulnerability iDefense Labs (Mar 05)
iDefense Security Advisory 03.15.07: Horde Project Cleanup Script Arbitrary File Deletion Vulnerability iDefense Labs (Mar 15)
iDefense Security Advisory 03.16.07: Multiple Vendor libwpd Multiple Buffer Overflow Vulnerabilities iDefense Labs (Mar 16)
iDefense Security Advisory 03.02.07: Kaspersky AntiVirus UPX File Decompression DoS Vulnerability iDefense Labs (Mar 02)
iDefense Security Advisory 03.23.07: Sun Java System Directory Server 5.2 Uninitialized Pointer Cleanup Design Error Vulnerability iDefense Labs (Mar 23)
iDefense Security Advisory 03.23.07: DataRescue IDA Pro Remote Debugger Server Authentication Bypass Vulnerability iDefense Labs (Mar 23)
iDefense Security Advisory 03.28.07: IBM Lotus Domino Web Access Cross Site Scripting Vulnerability iDefense Labs (Mar 28)

ifsecure

WordPress source code compromised to enable remote code execution ifsecure (Mar 03)

irondell

Re: Re: Firekeeper - IDS for Firefox available irondell (Mar 13)

Ivan Fratric

Web Wiz Forums 8.05 (MySQL version) SQL Injection Ivan Fratric (Mar 20)

Jack Lloyd

Re: Your Opinion Jack Lloyd (Mar 20)

james

IBM Rational ClearQuest Web - Cross Site Scripting james (Mar 15)

Jan Schneider

Re: Horde Webmail Multiple HTML Injection vulnerability Jan Schneider (Mar 27)

Jan Wrobel

Firekeeper - IDS for Firefox available Jan Wrobel (Mar 07)
Re: Firekeeper - IDS for Firefox available Jan Wrobel (Mar 13)
Re: Firekeeper - IDS for Firefox available Jan Wrobel (Mar 13)
Re: 0-day ANI vulnerability in Microsoft Windows (CVE-2007-0038) Jan Wrobel (Mar 31)

Javier Olascoaga

Multiple XSS in IronMail Javier Olascoaga (Mar 26)

jay.tomas

RE: Your Opinion jay.tomas (Mar 20)

jeffh

CFP for RAID 2007: Extended due date for papers: April 8th jeffh (Mar 22)

Jeff Moss

Black Hat USA CFP Now Open! Jeff Moss (Mar 08)

Jeimy Cano

- Call for chapters - Handbook of Research on Digital Anti-forensics and In-security Governance Jeimy Cano (Mar 15)

jesper . jurcenoks

w-agora version 4.2.1 Multiple Path Disclosure Vulnerabilities jesper . jurcenoks (Mar 19)
w-agora version 4.2.1 Information Disclosure Vulnerability jesper . jurcenoks (Mar 19)

Jex

Re: Firekeeper - IDS for Firefox available Jex (Mar 09)

Jim Harrison

RE: Your Opinion Jim Harrison (Mar 20)
RE: Your Opinion Jim Harrison (Mar 17)
RE: Your Opinion Jim Harrison (Mar 20)

Jim Hoagland

New report on Windows Vista network attack surface Jim Hoagland (Mar 14)

jm

Re: Path Disclosure - Wordpress 2.1.2 jm (Mar 27)

John Smith

Re: Evading the Norman SandBox Analyzer John Smith (Mar 03)

Jonathan Glass (GM)

Re: Your Opinion Jonathan Glass (GM) (Mar 16)

Jonathan Smith

FLSA - foresight linux security announcements Jonathan Smith (Mar 07)

jonny

Corel Wordperfect Office X3 Stack Overflow jonny (Mar 28)

Joxean Koret

ZynOS v3.40 One packet killer Joxean Koret (Mar 19)

jrgong420

Re: Xbox 360 Hypervisor Privilege Escalation Vulnerability jrgong420 (Mar 01)

Justin Seitz

AOL 9.0 Deskbar.dll/Toolbar.dll DoS Vulnerability Justin Seitz (Mar 29)

Kees Cook

[USN-445-1] XMMS vulnerabilities Kees Cook (Mar 28)
[USN-434-1] Ekiga vulnerability Kees Cook (Mar 09)
[USN-432-1] GnuPG vulnerability Kees Cook (Mar 08)
[USN-442-1] Evolution vulnerability Kees Cook (Mar 26)
[USN-428-2] Firefox regression Kees Cook (Mar 02)
[USN-430-1] mod_python vulnerability Kees Cook (Mar 06)
[USN-435-1] Xine vulnerability Kees Cook (Mar 13)
[USN-439-1] file vulnerability Kees Cook (Mar 22)
[USN-437-1] libwpd vulnerability Kees Cook (Mar 19)
[USN-424-2] PHP regression Kees Cook (Mar 08)
[Full-disclosure] [USN-447-1] KDE library vulnerabilities Kees Cook (Mar 29)
[USN-436-1] KTorrent vulnerabilities Kees Cook (Mar 13)
[USN-446-1] NAS vulnerabilities Kees Cook (Mar 28)
[USN-438-1] Inkscape vulnerability Kees Cook (Mar 21)
[USN-431-1] Thunderbird vulnerabilities Kees Cook (Mar 07)
[USN-443-1] Firefox vulnerability Kees Cook (Mar 27)
[USN-441-1] Squid vulnerability Kees Cook (Mar 26)
[USN-433-1] Xine vulnerability Kees Cook (Mar 09)
[USN-440-1] MySQL vulnerability Kees Cook (Mar 22)
[USN-444-1] OpenOffice.org vulnerabilities Kees Cook (Mar 28)
[USN-432-2] GnuPG2, GPGME vulnerability Kees Cook (Mar 13)
[USN-429-1] tcpdump vulnerability Kees Cook (Mar 06)

Kevin Finisterre (lists)

Microsoft coverup ? Stolen Xbox live accounts list of known victims - Please Help Kevin Finisterre (lists) (Mar 20)

kishor . tech

Yahoo! Messenger Auth Bypass Vulnerability kishor . tech (Mar 27)

KJKHyperion

Re: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues KJKHyperion (Mar 09)

Laundrup, Jens

RE: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues Laundrup, Jens (Mar 09)

Layer One

LayerOne 2007 - Call for Papers and Pre-Registration Layer One (Mar 01)

legolas558

Re: Drake CMS v0.3.2 < = RFi Vulnerabilities legolas558 (Mar 07)

lj

Path Disclosure - Wordpress 2.1.2 lj (Mar 26)

Lluis Mora

[NB07-07] Multiple vulnerabilities in Takebishi Electric DeviceXplorer HIDIC OPC server Lluis Mora (Mar 22)
[NB07-08] Multiple vulnerabilities in Takebishi Electric DeviceXplorer MELSEC OPC server Lluis Mora (Mar 22)
[NB07-22] Multiple vulnerabilities in NETxEIB OPC server Lluis Mora (Mar 22)
[NB07-10] Multiple vulnerabilities in Takebishi Electric DeviceXplorer MODBUS OPC server Lluis Mora (Mar 22)
[NB07-17] Multiple vulnerabilities in Takebishi Electric DeviceXplorer SYSMAC OPC server Lluis Mora (Mar 22)
[NB07-09] Multiple vulnerabilities in Takebishi Electric DeviceXplorer FA-M3 OPC server Lluis Mora (Mar 22)

localexploit

CcCounter 2.0 cross-site scripting vulnerability localexploit (Mar 26)

Luigi Auriemma

Buffer-overflow in Conquest client 8.2a (svn 691) Luigi Auriemma (Mar 07)
Limited format string in Netrek 2.12.0 Luigi Auriemma (Mar 02)

Łukasz Pilorz

Re: Bypass phishing protection in Firefox / Opera Łukasz Pilorz (Mar 30)

Mailinglists Address

Re: Weekly Drawing Contest <= (check_vote.php) Remote File Disclosure Vuln Mailinglists Address (Mar 13)
Re: [Bogus] Lazarus Guestbook (admin.php)Remote File Include Expliot - Mailinglists Address (Mar 08)

mak0b

Playstation 3 "Remote Play" Remote DoS Exploit mak0b (Mar 26)

Mandr4ke . root

DirectAdmin Cross Site Scripting XSS Mandr4ke . root (Mar 16)

marcin . tkaczyk

Call For Papers - IT Underground Dublin marcin . tkaczyk (Mar 20)

Marcin Tkaczyk

Call For Papers - IT Underground Dublin Marcin Tkaczyk (Mar 16)

Marc Maiffret

ANI Zeroday, Third Party Patch Marc Maiffret (Mar 30)

Marcus Meissner

Re: [Full-disclosure] month of PHP bugs, secondary message? Marcus Meissner (Mar 07)

Mario Contestabile

RE: Your Opinion Mario Contestabile (Mar 16)

mark

Extending JavaScript Portscanning to Include Banner Grabbing mark (Mar 05)
Konqueror DoS Via JavaScript Read Of FTP Iframe mark (Mar 05)

Mark Litchfield

Your Opinion Mark Litchfield (Mar 16)
Conflict of Interest - My summary Mark Litchfield (Mar 19)
Your Opinion + Mark Litchfield (Mar 17)

martin

Re: Remote File Include In Script moodle-1.7.1 martin (Mar 13)

Martin Pitt

[USN-416-2] nvidia-glx-config regression Martin Pitt (Mar 01)

Martin Schulze

[SECURITY] [DSA 1265-1] New Mozilla packages fix several vulnerabilities Martin Schulze (Mar 10)
[SECURITY] [DSA 1270-2] New OpenOffice.org packages fix several vulnerabilities Martin Schulze (Mar 28)
[SECURITY] [DSA 1268-1] New libwpd packages fix arbitrary code execution Martin Schulze (Mar 17)
[SECURITY] [DSA 1270-1] New OpenOffice.org packages fix several vulnerabilities Martin Schulze (Mar 20)
[SECURITY] [DSA 1269-1] New lookup-el packages fix insecure temporary file Martin Schulze (Mar 19)

Mathew Rowley

MS07-016 FTP Response DOS PoC Mathew Rowley (Mar 09)

Matousec - Transparent security Research

Comodo Bypassing settings protection using magic pipe Vulnerability Matousec - Transparent security Research (Mar 01)
Norton Insufficient validation of 'SymTDI' driver input buffer Matousec - Transparent security Research (Mar 15)
SymEvent Driver Local Access System Denial of Service Matousec - Transparent security Research (Mar 14)

Matt D. Harris

Re: Wiki Remote Authentication Bypass Vulnerability Matt D. Harris (Mar 12)

Matteo G.P. Flora

[Full-Disclosure] Another XSS vulnerability in italian Libero.it Matteo G.P. Flora (Mar 28)

Matthias Geerdsen

[ GLSA 200703-12 ] SILC Server: Denial of Service Matthias Geerdsen (Mar 14)
[ GLSA 200703-07 ] STLport: Possible remote execution of arbitrary code Matthias Geerdsen (Mar 06)

Matt Riddell (NZ)

Two new DoS Vulnerabilities in Asterisk Fixed Matt Riddell (NZ) (Mar 21)

Maurice Makaay

Re: XXS in script Phorum Maurice Makaay (Mar 06)

Max Moser

Busting The Bluetooth Myth Max Moser (Mar 30)

M. Burnett

RE: Re[2]: Microsoft Windows Vista/2003/XP/2000 file management security issues M. Burnett (Mar 09)
RE: Microsoft Windows Vista/2003/XP/2000 file management security issues M. Burnett (Mar 09)

McCarty, Eric C.

RE: Wordpress <= v2.1.0 McCarty, Eric C. (Mar 05)

MC Iglo

Re: Woltlab Burning Board (wbb) 2.3.6 CSRF/XSS - 0day MC Iglo (Mar 02)

Metaeye SG

Advisory - Redirection Vulnerability in wp-login.php. Metaeye SG (Mar 20)

meto5757

vBulletin v3.6.5 admincp/index.php ( rss feed ) xss vuln. meto5757 (Mar 02)

mondo_armando

April, 2007 is the "Month of Myspace Bugs" mondo_armando (Mar 16)

Moritz Muehlenhoff

[SECURITY] [DSA 1266-1] New gnupg packages fix signature forgery Moritz Muehlenhoff (Mar 14)
[SECURITY] [DSA 1263-1] New clamav packages fix denial of service Moritz Muehlenhoff (Mar 07)
[SECURITY] [DSA 1264-1] New php4 packages fix several vulnerabilities Moritz Muehlenhoff (Mar 07)
[SECURITY] [DSA 1267-1] New webcalendar packages fix remote file inclusion Moritz Muehlenhoff (Mar 16)
[SECURITY] [DSA 1262-1] New gnomemeeting packages fix arbitrary code execution Moritz Muehlenhoff (Mar 05)
[SECURITY] [DSA 1272-1] New tcpdump packages fix denial of service Moritz Muehlenhoff (Mar 22)

Moritz Naumann

Horde 3.1.4 (RC1) fixes XSS issue Moritz Naumann (Mar 15)
Update: ViewCVS and ViewVC 'checkout view' content type fixation issue Moritz Naumann (Mar 28)
Horde IMP Webmail Client version H3 (4.1.4) fixes multiple XSS issues Moritz Naumann (Mar 15)

mostafa_ragab

aWebNews V 1.1 mostafa_ragab (Mar 01)
aWebNews v 1.1=>RFI mostafa_ragab (Mar 01)
WB News Remote File Include in all versions mostafa_ragab (Mar 01)

M. Shirk

CA Brightstor Backup Mediasvr.exe Remote Code Vulnerability M. Shirk (Mar 30)

Neale Green

RE: Your Opinion Neale Green (Mar 21)

Neil Dickey

Re: Your Opinion Neil Dickey (Mar 16)

neothermic

Re: Remote File Include In phpBB-2.0.19 neothermic (Mar 26)

Netragard Security Advisories

[NETRAGARD-20070316 SECURITY ADVISORY][FrontBase Database <= 4.2.7 ALL PLATFORMS][REMOTE BUFFER OVERFLOW CONDITION][LEVEL: EASY][RISK:MEDIUM] Netragard Security Advisories (Mar 16)

ngevedBangetAsli

File Upload System V1.0 (AD_BODY_TEMP) multiple file include ngevedBangetAsli (Mar 24)

Nicolas RUFF

Re: Iframe-Cash/Iframe-Dollars Adware bundle...oooh... my ....god.. Nicolas RUFF (Mar 15)

Nikolay Kichukov

Re: [Full-disclosure] XSS at Aon.at, Austrian ISP Nikolay Kichukov (Mar 26)

Noah Meyerhans

[SECURITY] [DSA 1273-1] New nas packages fix multiple remote vulnerabilities Noah Meyerhans (Mar 27)
[SECURITY] [DSA 1271-1] New openafs packages fix remote privilege escalation bug Noah Meyerhans (Mar 20)

none

Re: Re: WordPress Search Function SQL-Injection none (Mar 02)
Unclassified NewsBoard 1.6.3 multiples logs disclosure none (Mar 19)
phpx 3.5.15 multiples vulnerabilities none (Mar 19)
w-agora [multiples file upload,xss,full path disclosure,error sql] none (Mar 20)
Re: Word Press Sensitive Directory exposure (SQL) none (Mar 08)

Omid

Sql injection in WordPress 2.1.2 Omid (Mar 09)

omnipresent

Grayscale <= 0.8.0 Multiple Vulnerabilities omnipresent (Mar 10)

organiser () syscan org

SyScan'07 - Call for Paper - NEW UPDATES organiser () syscan org (Mar 09)

osdesk

Re: fx-APP Version 0.0.8.1 osdesk (Mar 16)

paolo . difebbo

Windows Live Spaces logged user NetworkSetup.aspx cross site scripting paolo . difebbo (Mar 29)

Paul Böhm

Call for Papers: DeepSec IDSC 2007 Europe/Vienna: 20-23 Nov 2007 Paul Böhm (Mar 13)

Paul Laudanski

Re: Php Nuke POST XSS on steroids Paul Laudanski (Mar 12)
Re: Php Nuke POST XSS on steroids Paul Laudanski (Mar 13)
Re: PHP-Nuke <= 8.0 Cookie Manipulation (lang) Paul Laudanski (Mar 12)

Paul Stepowski

Re: Your Opinion Paul Stepowski (Mar 20)

Paweł Goleń

Re: Microsoft Windows Vista/2003/XP/2000 file management security issues Paweł Goleń (Mar 13)

Piotr Bania

Apple QuickTime Player Remote Heap Overflow Piotr Bania (Mar 06)

pr1nce_empire

AIX 4.3 lsmcode local root command execution pr1nce_empire (Mar 30)

Praburaajan

HITBSecConf2007 - Malaysia: Call for Papers now Open Praburaajan (Mar 05)

programmer

PHP-Nuke <= 8.0 Cookie Manipulation (lang) programmer (Mar 10)

r00t2000

WWWboard password disclosure r00t2000 (Mar 10)
Word Press Sensitive Directory exposure (SQL) r00t2000 (Mar 08)

RaeD Hasadya

Remote File Include In Script PHP Photo Album RaeD Hasadya (Mar 12)
Remot File Include In SLAED_CMS_2 RaeD Hasadya (Mar 31)
Remote File Include In Script Premod SubDog 2 RaeD Hasadya (Mar 10)
Remote File Include In Script moodle-1.7.1 RaeD Hasadya (Mar 12)
Remot File Include In Aardvark Topsites PHP 5 RaeD Hasadya (Mar 31)
Show Password Admin In Script Uploadscript RaeD Hasadya (Mar 05)
Remote File Include In Script copyright (c) James Coyle; JCcorp RaeD Hasadya (Mar 09)
Remote File Include In phpBB-2.0.19 RaeD Hasadya (Mar 24)
Remot File Include In Shop-SCRIPT FREE RaeD Hasadya (Mar 31)
Remote File Include In DBImageGallery RaeD Hasadya (Mar 02)
SPAW Editor PHP Edition RaeD Hasadya (Mar 02)
Remote File Include In Script Coppermine Photo Gallery RaeD Hasadya (Mar 09)
XSS In Script deviantART RaeD Hasadya (Mar 09)
XXS in script Phorum RaeD Hasadya (Mar 05)
Remote File Include In ClipShare.v1.5.3 RaeD Hasadya (Mar 12)
XSS Remote In vCard 2.6 (c)2002 RaeD Hasadya (Mar 05)
Remote File Include In Coppermine Photo Gallery RaeD Hasadya (Mar 22)
Remote File Include In Script SoftNews Media Group RaeD Hasadya (Mar 10)
Remote File Include In copyright © James Coyle; JCcorp RaeD Hasadya (Mar 22)

Raphael Marichez

[ GLSA 200703-16 ] Apache JK Tomcat Connector: Remote execution of arbitrary code Raphael Marichez (Mar 17)
[ GLSA 200703-20 ] LSAT: Insecure temporary file creation Raphael Marichez (Mar 19)
[ GLSA 200703-05 ] Mozilla Suite: Multiple vulnerabilities Raphael Marichez (Mar 03)
[ GLSA 200703-09 ] Smb4K: Multiple vulnerabilities Raphael Marichez (Mar 09)
[ GLSA 200703-08 ] SeaMonkey: Multiple vulnerabilities Raphael Marichez (Mar 09)
[ GLSA 200703-17 ] ulogd: Remote execution of arbitrary code Raphael Marichez (Mar 19)
[ GLSA 200703-13 ] SSH Communications Security's Secure Shell Server: SFTP privilege escalation Raphael Marichez (Mar 14)
[ GLSA 200703-06 ] AMD64 x86 emulation Qt library: Integer overflow Raphael Marichez (Mar 05)
[ GLSA 200703-03 ] ClamAV: Denial of Service Raphael Marichez (Mar 02)
ERRATA: [ GLSA 200703-01 ] Snort: Remote execution of arbitrary code Raphael Marichez (Mar 03)
[ GLSA 200703-26 ] file: Integer underflow Raphael Marichez (Mar 30)
[ GLSA 200703-22 ] Mozilla Network Security Service: Remote execution of arbitrary code Raphael Marichez (Mar 20)
[ GLSA 200703-19 ] LTSP: Authentication bypass in included LibVNCServer code Raphael Marichez (Mar 19)
[ GLSA 200703-02 ] SpamAssassin: Long URI Denial of Service Raphael Marichez (Mar 02)
[ GLSA 200703-04 ] Mozilla Firefox: Multiple vulnerabilities Raphael Marichez (Mar 03)
[ GLSA 200703-01 ] Snort: Remote execution of arbitrary code Raphael Marichez (Mar 02)
[ GLSA 200703-24 ] mgv: Stack overflow in included gv code Raphael Marichez (Mar 26)
[ GLSA 200703-15 ] PostgreSQL: Multiple vulnerabilities Raphael Marichez (Mar 17)
[ GLSA 200703-11 ] Amarok: User-assisted remote execution of arbitrary code Raphael Marichez (Mar 14)
[ GLSA 200703-23 ] WordPress: Multiple vulnerabilities Raphael Marichez (Mar 20)
[ GLSA 200703-10 ] KHTML: Cross-site scripting (XSS) vulnerability Raphael Marichez (Mar 10)
[ GLSA 200703-25 ] Ekiga: Format string vulnerability Raphael Marichez (Mar 29)
[ GLSA 200703-18 ] Mozilla Thunderbird: Multiple vulnerabilities Raphael Marichez (Mar 19)
[ GLSA 200703-21 ] PHP: Multiple vulnerabilities Raphael Marichez (Mar 20)
[ GLSA 200703-14 ] Asterisk: SIP Denial of Service Raphael Marichez (Mar 17)

research

Helix Server heap overflow research (Mar 20)
SEC Consult SA-20070309-0 :: MySQL 5 Single Row Subselect Denial of Service research (Mar 09)

retrog

PHP <= 4.4.6 mssql_connect() & mssql_pconnect() local buffer overflow and safe_mode bypass retrog (Mar 06)
PHP <= 4.4.6 ibase_connect() local buffer overflow retrog (Mar 15)
PHP 4.4.6 crack_opendict() local buffer overflow poc exploit retrog (Mar 08)
Re: Re: [Full-disclosure] PHP import_request_variables() arbitrary variable overwrite retrog (Mar 14)
PHP 5.2.1 with PECL phpDOC local buffer overflow retrog (Mar 26)

revenge

Re: ProFTPD 1.3.0/1.3.0a (mod_ctrls support) Local Buffer Overflow Exploit revenge (Mar 01)

Reversemode

[Reversemode Advisory] Apple Quicktime Color ID remote heap corruption Reversemode (Mar 06)
[Reversemode Advisory] Microsoft Windows Ndistapi.sys IRQL escalation Reversemode (Mar 19)
Re: Iframe-Cash/Iframe-Dollars Adware bundle...oooh... my ....god.. Reversemode (Mar 13)

Richard Huxton

Re: Microsoft Windows Vista/2003/XP/2000 file management security issues Richard Huxton (Mar 13)

robert

Re: Phishing using IE7 local resource vulnerability robert (Mar 15)

Robert Święcki

Linux Kernel DCCP Memory Disclosure Vulnerability Robert Święcki (Mar 27)
Re: [Full-disclosure] Linux Kernel DCCP Memory Disclosure Vulnerability Robert Święcki (Mar 27)

Roger A. Grimes

RE: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues Roger A. Grimes (Mar 09)
RE: Re[4]: Microsoft Windows Vista/2003/XP/2000 file management security issues Roger A. Grimes (Mar 09)
RE: Re[2]: Microsoft Windows Vista/2003/XP/2000 file management security issues Roger A. Grimes (Mar 09)
RE: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues Roger A. Grimes (Mar 10)
RE: Re[2]: Microsoft Windows Vista/2003/XP/2000 file management security issues Roger A. Grimes (Mar 09)
RE: Microsoft Windows Vista/2003/XP/2000 file management security issues Roger A. Grimes (Mar 09)

Rogheden Anders

RE: Bypassing Mcafee Entreprise Password Protection Rogheden Anders (Mar 19)

ron . kleinman

Re: Xbox 360 Hypervisor Privilege Escalation Vulnerability ron . kleinman (Mar 03)

rosario . valotta

Libero.it (italian ISP) XSS vulnerability rosario . valotta (Mar 26)
Widespread vulnerabilities in Libero.it/Infostrada.it web portals rosario . valotta (Mar 29)

rPath Update Announcements

rPSA-2007-0061-1 inkscape rPath Update Announcements (Mar 29)
rPSA-2007-0056-1 gnupg rPath Update Announcements (Mar 16)
rPSA-2007-0048-1 tcpdump rPath Update Announcements (Mar 03)
rPSA-2007-0050-1 kernel rPath Update Announcements (Mar 06)
rPSA-2007-0051-1 mod_python rPath Update Announcements (Mar 07)
rPSA-2007-0057-1 libwpd rPath Update Announcements (Mar 16)
rPSA-2007-0052-1 kdelibs rPath Update Announcements (Mar 07)
rPSA-2007-0040-3 firefox thunderbird rPath Update Announcements (Mar 03)
rPSA-2007-0059-1 file rPath Update Announcements (Mar 22)

s0cratex

RPS 6.2 SQL Injection Exploit s0cratex (Mar 07)

SaMuschie

Woltlab Burning Board (wbb) 2.3.6 CSRF/XSS - 0day SaMuschie (Mar 02)
Serendipity unauthenticated SQL-Injection SaMuschie (Mar 01)

saw_xyz

wwwpaintboar(newsfile) Remote File Inclusion Vulnerability saw_xyz (Mar 09)

Scott Blake

RE: Your Opinion Scott Blake (Mar 16)

Sea Shark

Oracle Portal PORTAL.wwv_main.render_warning_screen XSS Sea Shark (Mar 16)
Oracle 10g Dynamic Monitoring Services XSS /servlet/Spy Sea Shark (Mar 20)

Sebastian Wolfgarten

Arbitrary file disclosure vulnerability in rrdbrowse <= 1.6 Sebastian Wolfgarten (Mar 05)

Secunia Research

Secunia Research: InterActual Player / CinePlayer IASystemInfo.dll ActiveX Control Buffer Overflow Secunia Research (Mar 21)
Secunia Research: XMMS Integer Overflow and Underflow Vulnerabilities Secunia Research (Mar 21)
Secunia Research: Evolution Shared Memo Categories Format String Vulnerability Secunia Research (Mar 21)

security

[ MDKSA-2007:055 ] - Updated mplayer packages to address buffer overflow vulnerability security (Mar 08)
[ MDKSA-2007:064 ] - Updated openoffice.org packages to address libwpd heap overflow vulnerabilities security (Mar 16)
[ MDKSA-2007:054 ] - Updated kdelibs packages to address DoS issue in KDE Javascript security (Mar 08)
[ MDKSA-2007:052 ] - Updated Thunderbird packages fix multiple vulnerabilities security (Mar 07)
[ MDKSA-2007:057 ] - Updated xine-lib packages to address buffer overflow vulnerability security (Mar 08)
[ MDKSA-2007:051 ] - Updated snort packages fix DoS vulnerability security (Mar 01)
[ MDKSA-2007:058 ] - Updated ekiga packages fix string vulnerabilities. security (Mar 09)
[ MDKSA-2007:050-1 ] - Updated Firefox packages fix multiple vulnerabilities security (Mar 03)
[ MDKSA-2007:067 ] - Updated file packages fix heap-based buffer overflow vulnerability security (Mar 22)
[ MDKSA-2007:059 ] - Updated gnupg packages provide enhanced forgery detection security (Mar 09)
[ MDKSA-2007:069 ] - Updated inkscape packages to format string vulnerability security (Mar 23)
[ MDKSA-2007:056 ] - Updated tcpdump packages address off-by-one overflow security (Mar 08)
[ MDKSA-2007:063 ] - Updated libwpd packages to address heap overflow vulnerabilities security (Mar 16)
[ MDKSA-2007:073 ] - Updated openoffice.org packages to address vulnerabilities security (Mar 29)
[ MDKSA-2007:072 ] - Updated kdelibs packages to address FTP PASV issue in konqueror security (Mar 29)
[ MDKSA-2007:071 ] - Updated xmms packages to address integer vulnerabilities security (Mar 29)
[ MDKSA-2007:065 ] - Updated nas packages address multiple vulnerabilities security (Mar 21)
n.runs-SA-2007.005 - PHProjekt 5.2.0 - Cross Site Request Forgery security (Mar 14)
[ MDKSA-2007:068 ] - Updated squid packages fix DoS vulnerability security (Mar 22)
[ MDKSA-2007:061 ] - Updated mplayer packages to address buffer overflow vulnerability security (Mar 13)
n.runs-SA-2007.003 - PHProjekt 5.2.0 - SQL Injection security (Mar 14)
[ MDKSA-2007:053 ] - Updated util-linux packages address umount crash issue security (Mar 07)
[ MDKSA-2007:070 ] - Updated evolution packages to address vulnerability security (Mar 27)
[ MDKSA-2007:066 ] - Updated OpenAFS packages address vulnerability security (Mar 21)
n.runs-SA-2007.006 - PHProjekt 5.2.0 - Privilege escalation security (Mar 14)
n.runs-SA-2007.004 - PHProjekt 5.2.0 - Cross Site Scripting and Filter Evasion security (Mar 14)
[ MDKSA-2007:060 ] - Updated kernel packages fix multiple vulnerabilities and bugs security (Mar 09)
Mybb Change Password Vulnerability security (Mar 30)
DrakeCMS multiple vulerabilities security (Mar 30)
[ MDKSA-2007:062 ] - Updated xine-lib packages to address buffer overflow vulnerability security (Mar 13)

security-alert

[security bulletin] HPSBUX02196 SSRT071318 rev.2 - HP-UX Java (JRE and JDK) Remote Execution of Arbitrary Code security-alert (Mar 12)
[security bulletin] HPSBUX02156 SSRT061236 rev.2 - HP-UX Running Thunderbird, Remote Unauthorized Access or Elevation of Privileges or Denial of Service (DoS) security-alert (Mar 21)
HPSBGN02189 SSRT071297 rev.2 - ServiceGuard for Linux, Remote Unauthorized Access security-alert (Mar 21)
[security bulletin] HPSBUX02153 SSRT061181 rev.3 - HP-UX Running Firefox, Remote Unauthorized Access or Elevation of Privileges or Denial of Service (DoS) security-alert (Mar 06)
[security bulletin] HPSBUX02129 SSRT061149 rev.2 - HP-UX running SLP, Remote Unauthorized Access security-alert (Mar 12)
[security bulletin] HPSBUX02195 SSRT061237 rev.1 - HP-UX Running Software Distributor (SD), Remote Denial of Service (DoS) security-alert (Mar 06)

Sergey Tikhonov

Mephisto blog is vulnerable to XSS Sergey Tikhonov (Mar 26)

Shawn Merdinger

Re: Linksys WAG200G - Information disclosure Shawn Merdinger (Mar 20)

sithlordstorm

Re: Re: MSIE7 browser entrapment vulnerability (probably Firefox, too) sithlordstorm (Mar 01)

skillTube.com

Buffer Overflow in InterVetions' NaviCopa HTTP server 2.01 skillTube.com (Mar 27)

sn0oPy . team

BJ Webring XSS sn0oPy . team (Mar 03)
dynaliens v2.0/v2.1 bypass admin authentification + XSS sn0oPy . team (Mar 08)
GuppY v4.0 remote del files/index sn0oPy . team (Mar 12)

snakeapollon

CCleaguePro_V1.0.1RC1 Directory Traversal Vulnerability snakeapollon (Mar 19)

Sowhat

Apple QuickTime udta ATOM Integer Overflow Sowhat (Mar 06)

starcadi

Rhapsody IRC 0.28b (NICK) Multiple fs and bof vulnerability starcadi (Mar 17)

starcadi starcadi

QFTP (LIBFtp 3.1-1) (command line) sprintf() local buffer overflow starcadi starcadi (Mar 15)
Fwd: Python 2.5 (Modules/zlib) minigzip local buffer overflow vulnerability starcadi starcadi (Mar 14)
LIBFtp 5.0 (sprintf(), strcpy()) Multiple local buffer overflow starcadi starcadi (Mar 15)

Stefan Esser

Re: [Full-disclosure] PHP import_request_variables() arbitrary variable overwrite Stefan Esser (Mar 10)
Re: [Full-disclosure] PHP import_request_variables() arbitrary variable overwrite Stefan Esser (Mar 10)

Stefan Friedli

ePortfolio version 1.0 Java Multiple Input Validation Vulnerabilities Stefan Friedli (Mar 05)

Stefano Di Paola

Re: [Full-disclosure] PHP import_request_variables() arbitrary variable overwrite Stefano Di Paola (Mar 10)
PHP import_request_variables() arbitrary variable overwrite Stefano Di Paola (Mar 08)

steven

Re: Sql injection in WordPress 2.1.2 steven (Mar 09)

Steven M. Christey

Re: [Full-disclosure] PHP import_request_variables() arbitrary variable overwrite Steven M. Christey (Mar 13)
Re: [Bogus] Lazarus Guestbook (admin.php)Remote File Include Expliot Steven M. Christey (Mar 16)
Re: Remote File Include In Script PHP Photo Album Steven M. Christey (Mar 14)
Re: Microsoft Windows Vista/2003/XP/2000 file management security issues Steven M. Christey (Mar 13)

Steve Watt

Re: SPAW Editor PHP Edition Steve Watt (Mar 03)

stormhacker

Satel Lite for PhpNuke (Satellite.php) <= Local File Inclusion stormhacker (Mar 26)

str0ke

Re: Angel LMS 7.1 - Remote SQL Injection str0ke (Mar 01)
Re: CCleaguePro_V1.0.1RC1 Directory Traversal Vulnerability str0ke (Mar 19)

support

Re: PHP Classifieds 7.1 - Remote File Include Vulnerability support (Mar 10)
Re: ManageEngine Firewall Analyzer arbitrary file disclosure to authorized user support (Mar 29)
Re: ManageEngine Firewall Analyzer arbitrary file disclosure to authorized user support (Mar 30)

tg

Re: Remote File Include In DBImageGallery tg (Mar 07)

the_3dit0r

Built2Go v.1.0 => ( news.php & rating.php ) Cross Site Scripting the_3dit0r (Mar 01)

The Fungi

Re: Your Opinion The Fungi (Mar 17)

thesinoda

Bypassing Mcafee Entreprise Password Protection thesinoda (Mar 17)

Thierry Zoller

Ann: Backtrack 2.0 released Thierry Zoller (Mar 08)
Iframe-Cash/Iframe-Dollars Adware bundle...oooh... my ....god.. Thierry Zoller (Mar 13)

Thor (Hammer of God)

Re: Re[2]: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues Thor (Hammer of God) (Mar 12)
Re: Your Opinion + Thor (Hammer of God) (Mar 20)
Re: Re[2]: Microsoft Windows Vista/2003/XP/2000 file management security issues Thor (Hammer of God) (Mar 09)
Re: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues Thor (Hammer of God) (Mar 10)

Tim

Re: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues Tim (Mar 09)
Re: [Full-disclosure] Microsoft Windows Vista/2003/XP/2000 file management security issues Tim (Mar 09)

Tim Rees

Denial of Service Vulnerabilities in TrueCrypt 4.3 Linux (re. bid 23180) Tim Rees (Mar 28)

Topolski, Leo

RE: [VulnWatch] iDefense Security Advisory 03.14.07: Trend Micro Antivirus UPX Parsing Kernel Divide by Zero Vulnerability Topolski, Leo (Mar 16)

Trustix Security Advisor

TSLSA-2007-0009 - multi Trustix Security Advisor (Mar 09)

TSRT

TSRT-07-03: America Online SuperBuddy ActiveX Control Code Execution Vulnerability TSRT (Mar 30)

TWOVB Team

The Week Of Vista Bugs [TWOVB] TWOVB Team (Mar 30)

UniquE

Absolute Image Gallery Gallery.ASP (categoryid) MSSQL Injection Exploit UniquE (Mar 15)
JGBBS 3.0beta1 Version Search.ASP "Author" SQL Injection Exploit UniquE (Mar 13)
Xoops All Version -Articles- Print.PHP (ID) Blind SQL Injection Exploit And PoC UniquE (Mar 27)
HC NEWSSYSTEM 1.0-4 (index.php "ID") Blind SQL Injection UniquE (Mar 09)
WSN Guest 1.21 Version Comments.PHP "ID" SQL Injection Exploit UniquE (Mar 14)
Particle Blogger All Version Post.PHP (PostID) Remote SQL Injection Exploit UniquE (Mar 16)
Orion-Blog v2.0 Version Remote Privilege Escalation Exploit UniquE (Mar 15)
PHP-Fusion 'Calendar_Panel' Module show_event.PHP (m_month) SQL Injection Exploit And PoC UniquE (Mar 31)

Vincent Archer

Re: Extending JavaScript Portscanning to Include Banner Grabbing Vincent Archer (Mar 06)

VMware Security team

VMSA-2007-0002 VMware ESX security updates VMware Security team (Mar 30)

vvitkov () intergenia de

Re: Wordpress <= v2.1.0 vvitkov () intergenia de (Mar 06)

webmaster

Re: **SubHub v2.3.0** webmaster (Mar 26)

William A. Rowe, Jr.

Re: Your Opinion William A. Rowe, Jr. (Mar 16)
Re: SecurityVulns.com: Microsoft Visual C++ 8.0 standard library time functions invalid assertion DoS (Problem 3000). William A. Rowe, Jr. (Mar 28)

Williams, James K

[CAID 34817, 35058, 35158, 35159]: CA BrightStor ARCserve Backup Tape Engine and Portmapper Vulnerabilities Williams, James K (Mar 16)
[CAID 35145]: CA eTrust Admin Privilege Escalation Vulnerability Williams, James K (Mar 09)
CA BrightStor ARCserve Backup Mediasvr.exe vulnerability Williams, James K (Mar 31)

x666

Woltab Burning Board SQL Injection usergroups.php x666 (Mar 14)

yearsilent

ManageEngine Firewall Analyzer arbitrary file disclosure to authorized user yearsilent (Mar 22)

z3r0 z3r0.2.z3r0

Fantastico In all Version Cpanel 10.x <= local File Include z3r0 z3r0.2.z3r0 (Mar 12)

zdi-disclosures

ZDI-07-010: Apple Quicktime UDTA Parsing Heap Overflow Vulnerability zdi-disclosures (Mar 07)
ZDI-07-011: IBM Lotus Domino IMAP Server CRAM-MD5 Authentication Buffer Overflow Vulnerability zdi-disclosures (Mar 28)
ZDI-07-008: Apache Tomcat JK Web Server Connector Long URL Stack Overflow Vulnerability zdi-disclosures (Mar 02)
ZDI-07-009: Novell Netmail WebAdmin Buffer Overflow Vulnerability zdi-disclosures (Mar 07)

zonafirefox

Bypass phishing protection in Firefox / Opera zonafirefox (Mar 28)
Re: Re: Bypass phishing protection in Firefox / Opera zonafirefox (Mar 29)