Search:Author - Computer security: vulnerabilities and exploits database

[EN] securityvulns.ru
no-pyccku

See also
Georgi Guninski <joro_(at)_NAT.BG>
Name: Georgi Guninski
E-mail: guninski_(at)_GUNINSKI.COM

[Full-disclosure] Help poor children in Uganda
[Full-disclosure] 64 bit qmail fun
Georgi Guninski security advisory #68, 2004
[Full-Disclosure] Remote openbsd crash with ip6, yet still openbsd much better than windows
[Full-Disclosure] Lame crash in qmail-smtpd and memory overwrite according to gdb, yet still qmail much better than windows
[Full-Disclosure] OpenBSD kernel panic, yet still *BSD much better than windows
[Full-Disclosure] Fun with /bin/ls, yet still ls better than windows
[Full-Disclosure] Sylpheed-claws format string bug, yet still sylpheed much better than windows
Excel XP xml stylesheet problems
More Office XP problems (version 3.0)
More Office XP problems (Version 2.0)
More Office XP problems
IE GetObject() problems
Several javascript vulnerabilities in Opera
MS Office XP - the more money I give to Microsoft, the more vulnerable my Windows computers are
FreeBSD 4.3 local root, yet Linux and *BSD much better than Windows
OpenBSD 2.9,2.8 local root compromise
$HOME buffer overflow in SunOS 5.8 x86
Elevation of privileges with debug registers on Win2K
IIS 5.0 PROPFIND DOS #2
Security bug in Internet Explorer - MSScriptControl.ScriptControl
Security bugs in interactions between IE 5.x, IIS 5.0 and Exchange 2000
IIS 5.0 SEARCH method overflow
IIS 5.0 PROPFIND DOS
Windows client UDP exhaustion denial of service
Oracle JSP/SQLJSP handlers allow viewing files and executing JSP outside the web root
Windows Media Player 7 and IE java vulnerability - executing arbitrary programs
Oracle XSQL servlet and xml-stylesheet allow executing java on the web server
IIS 5.0 allows viewing files using %3F+.htr
Lotus Domino 5.0.5 Web Server vulnerability - reading files outside the web root
Windows Media Player 7 and IE vulnerability - executing arbitrary programs
IIS 5.0 with patch Q277873 allows executing arbitrary commands on the web server
OBJECT TYPE="text/html" may allow executing arbitrary programs in IE 5.5
IE 5.x/Outlook allows executing arbitrary programs using .chm files and temporary internet files folder
IE 5.x Win2000 Indexing service vulnerability
IIS 5.0 cross site scripting vulnerability - using .htw
IE 5.5/Outlook java security vulnerability - reading arbitrary local files and URLs
IE 5.5/Outlook security vulnerability - com.ms.activeX.ActiveXComponent allows executing arbitrary programs
IE 5.5/Outlook Express security vulnerability - GetObject() expose user's files
Double clicking on MS Office documents from Windows Explorer may execute arbitrary programs in some cases