来源：milw0rm
=============================================
vBulletin Google Site Map Creator (base) Remote File Include Vulnerability
=============================================
Found by : Host4vb.com & Cold z3ro
Contact : Admin@host4vb.com , Cold-z3ro@hotmail.com
Homepage : Host4vb.com , Hack-Teach.Org
=============================================
鬼仔注：XAMPP（Apache+MySQL+PHP+PERL）是一个功能强大的建站集成软件包。我见过有不少站为了省事直接用这个做，我以前测试东西也用这个搭建过环境。影响的版本挺多：
XAMPP Apache Distribution 1.4.14
XAMPP Apache Distribution 1.4.13
XAMPP Apache Distribution 1.4.12
XAMPP Apache Distribution 1.4.11
XAMPP Apache Distribution 1.4.10 a
XAMPP Apache Distribution 1.4.10
XAMPP Apache Distribution 1.4.9
XAMPP Apache Distribution 1.4.8
鬼仔：我用的是 firefox 2.0 ，测试成功。
看了下源文件，只要你输入的文字里面的字符里面包含了C:\boot.ini之后就会触发（不需要连在一起，分散的就可以），
C:\boot.ini对应的一个数组 var needstr = [ 67, 59, 220, 66, 79, 79, 84, 190, 73, 78, 73 ];
这个是指定读取C:\boot.ini
你可以通过改下这个读取其他文件。
来源：幻影的邮件列表
There is an interesting logic flaw in Mozilla Firefox web browser.
The vulnerability allows the
来源：Sebug.net
危害级别:★★★★★★
影响版本:
QQ2006 beta3 and previous versions
详细说明:
QQ is a very popular IM in China developed by Tencent.There exists a remote denial of service vulnerability in QQ when using the SuperVideo chat.Current study showed that the attacker who successfully exploited the vulnerability would cause the remote client crash.
信息来源：Sebug.net
neeao那里看到的
Adivisory Name : Hotmail and Windows Live Mail XSS Vulnerabilities
Release Date : 2006.11.03
Test On : Microsoft IE 6.0
Discover : Cheng Peng Su(applesoup_at_gmail.com)
Introduction:
Hotmail and Windows Live Mail are both web-based e-mail services by Microsoft.
Details:
Hotmail's filter identifies "expression()" syntax in a CSS attribute. According to Hasegawa Yosuke's post(http://