Mail Index

• Thread Index

• DDIVRT-2011-33 IBM WebSphere Application Server 'help' Servlet Plug-in Bundle Directory Traversal [CVE-2011-1359]
  • From: ddivulnalert
• CVE-2011-3682: 2WIRE-SINGTEL 2701HGV-E/2700HGV-2/2700HG GATEWAY ROUTER MANAGEMENT AND DIAGNOSTIC CONSOLE VULNERABILITY
  • From: tan
• IBSng all version Cross-Site Scripting Vulnerability
  • From: apa-iutcert
• [ GLSA 201111-01 ] Chromium, V8: Multiple vulnerabilities
  • From: Alex Legler
• GDTelcom Speedtest ActiveX Control "FTPDownLoad Class"-ActiveX.dll Remote Denial of Service Vulnerability
  • From: demonalex
• [security bulletin] HPSBMU02712 SSRT100649 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
  • From: security-alert
• XSS Vulnerabilities in eFront
  • From: Netsparker Advisories
• XSS and SQL Injection Vulnerabilities on Symphony CMS 2.2.3
  • From: Netsparker Advisories
• Oracle Hyperion Financial Management TList6 ActiveX Control Remote Code Execution Vulnerability
  • From: nospam
• [ MDVSA-2011:162 ] kdelibs4
  • From: security
• Multiple vulnerabilities in Efront
  • From: advisory
• [ MDVSA-2011:163 ] phpldapadmin
  • From: security
• NGS00042 Technical Advisory: Solaris 11 USB hub class descriptor kernel stack overflow (CVE-2011-2295)
  • From: Research@NGSSecure
• [ MDVSA-2011:164 ] wireshark
  • From: security
• Cisco Security Advisory: Cisco Small Business SRP500 Series Command Injection Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Serendipity 'serendipity[filter][bp.ALT]' Cross-Site Scripting vulnerability
  • From: sschurtz
• ESA-2011-032: EMC Documentum eRoom arbitrary file upload vulnerability.
  • From: Security_Alert
• CmyDocument Content Management Application - XSS Vulnerabilities
  • From: demonalex
• [security bulletin] HPSBMU02704 SSRT100619 rev.1 - HP OpenView Network Node Manager (OV NNM) Running Apache, Remote Denial of Service (DoS)
  • From: security-alert
• ESA-2011-035: RSA, The Security Division of EMC, announces the release of Hotfix 6 with security updates for RSA Key Manager Appliance 2.7 Service Pack 1
  • From: Security_Alert
• Serendipity Plugin 'Karma Ranking' Multiple Cross-Site Scripting
  • From: sschurtz
• [ MDVSA-2011:165 ] php
  • From: security
• [ MDVSA-2011:166 ] php
  • From: security
• Multiple BSD libc/regcomp(3) Multiple Vulnerabilities
  • From: cxib
• [security bulletin] HPSBOV02470 SSRT080123 rev.1 - HP TCP/IP Services for OpenVMS Running SMTP Server, Remote Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBOV02467 SSRT090152 rev.1 - HP TCP/IP Services for OpenVMS Running POP or IMAP, Remote Unauthorized Access
  • From: security-alert
• [ MDVSA-2011:167 ] gimp
  • From: security
• [SECURITY] [DSA 2334-1] mahara security update
  • From: Moritz Muehlenhoff
• Malware detection evasion in antivirus software
  • From: reset557
• [ GLSA 201111-02 ] Oracle JRE/JDK: Multiple vulnerabilities
  • From: Alex Legler
• [SECURITY] [DSA 2335-1] man2html security update
  • From: Nico Golde
• [SECURITY] [DSA 2337-1] xen security update
  • From: Thijs Kinkhorst
• foofus.net security advisory - Lexmark Multifunction Printer Information Leakage
  • From: percx
• [SECURITY] [DSA 2338-1] moodle security update
  • From: Moritz Muehlenhoff
• TWSL2011-017: Multiple Vulnerabilities in Merethis Centreon
  • From: Trustwave Advisories
• [SECURITY] [DSA 2339-1] nss security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2336-1] ffmpeg security update
  • From: Yves-Alexis Perez
• [SECURITY] [DSA 2340-1] postgresql security update
  • From: Thijs Kinkhorst
• Cisco CUCM - Multiple Vulnerabilities
  • From: entomology
• IPv6 security (slides and training)
  • From: Fernando Gont
• New online security challenge - GotWurzel
  • From: Ivan Buetler
• [security bulletin] HPSBHF02706 SSRT100613 rev.1 - HP Integrated Lights-Out iLO2 and iLO3 running SSL/TLS, Denial of Service (DoS), Unauthorized Modification
  • From: security-alert
• osCSS2 "_ID" parameter Local file inclusion
  • From: sschurtz
• [SECURITY] CVE-2011-3376 Apache Tomcat - Privilege Escalation via Manager app
  • From: Mark Thomas
• OrderSys <= 1.6.4 Sql Injection Vulnerabilities
  • From: muuratsalo experimental hack lab
• LabStoRe <= 1.5.4 Sql Injection Vulnerabilities
  • From: muuratsalo experimental hack lab
• APPLE-SA-2011-11-08-1 Java for Mac OS X 10.7 Update 1 and Java for Mac OS X 10.6 Update 6
  • From: Apple Product Security
• [CAL-2011-0054]Adobe Shockwave Player Director File Parsing data of rcsl chunk multiple DOS vulnerabilities
  • From: Code Audit Labs
• [CAL-2011-0052]Adobe Shockwave Player Director File Parsing PAMM memory corruption vulnerability
  • From: Code Audit Labs
• Local file inclusion in VtigerCRM
  • From: advisory
• LabWiki <= 1.1 Multiple Vulnerabilities
  • From: muuratsalo experimental hack lab
• Multiple Cross-Site-Scripting vulnerabilities in Dolibarr 3.1.0
  • From: security
• Re: LabWiki <= 1.1 Multiple Vulnerabilities
  • From: muuratsalo experimental hack lab
• Multiple security vulnerabilities in AShop
  • From: security
• DC4420 - London DEFCON - November 2011 meet - Tuesday 15th November
  • From: Major Malfunction
• [ MDVSA-2011:168 ] apache
  • From: security
• Cisco Security Advisory: Cisco TelePresence System Integrator C Series and Cisco TelePresence EX Series Device Default Root Account Manufacturing Error
  • From: Cisco Systems Product Security Incident Response Team
• [SECURITY] [DSA 2341-1] iceweasel security update
  • From: Moritz Muehlenhoff
• [ MDVSA-2011:168 ] apache
  • From: security
• [SECURITY] [DSA 2343-1] openssl security update
  • From: Raphael Geissert
• [SECURITY] [DSA 2342-1] iceape security update
  • From: Moritz Muehlenhoff
• Re: Local file inclusion in VtigerCRM
  • From: n0b0d13s
• Re: foofus.net security advisory - Lexmark Multifunction Printer Information Leakage
  • From: Sergio Gelato
• [security bulletin] HPSBMU02708 SSRT100633 rev.1 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Cross Site Scripting (XSS)
  • From: security-alert
• [security bulletin] HPSBMA02659 SSRT100440 rev.2 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Unauthorized Access
  • From: security-alert
• XSS vulnerability in Joomla 1.6.3
  • From: Netsparker Advisories
• Re: Re: foofus.net security advisory - Lexmark Multifunction Printer Information Leakage
  • From: percx
• [security bulletin] HPSBMU02714 SSRT100244 rev.2 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Unauthorized Disclosure of Information
  • From: security-alert
• APPLE-SA-2011-11-10-1 iOS 5.0.1 Software Update
  • From: Apple Product Security
• CORE-2011-0919: Apple OS X Sandbox Predefined Profiles Bypass
  • From: CORE Security Technologies Advisories
• APPLE-SA-2011-11-10-2 Time Capsule and AirPort Base Station (802.11n) Firmware 7.6
  • From: Apple Product Security
• iGuard Biometric Access Control - Multiple Vulnerabilities
  • From: research@xxxxxxxxxxxxxxxxxxxxx
• [ MDVSA-2011:170 ] java-1.6.0-openjdk
  • From: security
• [security bulletin] HPSBST02722 SSRT100279 rev.1 - HP StorageWorks P4000 Virtual SAN Appliance, Execution of Arbitrary Code
  • From: security-alert
• [SECURITY] [DSA 2344-1] python-django-piston security update
  • From: Florian Weimer
• [security bulletin] HPSBHF02721 SSRT100605 rev.1 - HP Directories Support for ProLiant Management Processors for Integrated Lights-Out iLO2 and iLO3, Unauthorized Access
  • From: security-alert
• [ GLSA 201111-03 ] OpenTTD: Multiple vulnerabilities
  • From: Tim Sammut
• [FOREGROUND SECURITY 2011-004] Infoblox NetMRI 6.2.1 Multiple Cross-Site Scripting (XSS) vulnerabilities
  • From: Jose Carlos de Arriba
• [ GLSA 201111-04 ] phpDocumentor: Function call injection
  • From: Tim Sammut
• [Announcement] ClubHack Mag Issue 22- Nov 2011 Released
  • From: abhijeet
• [ MDVSA-2011:172 ] libreoffice
  • From: security
• Wordpress Zingiri Web Shop Plugin <= 2.2.3 Remote Code Execution Vulnerability
  • From: n0b0d13s
• [Announcement] ClubHack 2011 Hacking and Security Conference
  • From: abhijeet
• [ MDVSA-2011:173 ] openssl0.9.8
  • From: security
• [ MDVSA-2011:171 ] networkmanager
  • From: security
• [ MDVSA-2011:174 ] graphite2
  • From: security
• APPLE-SA-2011-11-14-1 iTunes 10.5.1
  • From: Apple Product Security
• [ MDVSA-2011:175 ] poppler
  • From: security
• [SECURITY] [DSA 2346-1] proftpd-dfsg security update
  • From: Florian Weimer
• FreeWebshop <= 2.2.9 R2 (ajax_save_name.php) Remote Code Execution Vulnerability
  • From: n0b0d13s
• wordpress Flexible Custom Post Type plugin Xss Vulnerabilities
  • From: Amir
• [security bulletin] HPSBOV02470 SSRT080123 rev.2 - HP TCP/IP Services for OpenVMS Running SMTP Server, Remote Denial of Service (DoS)
  • From: security-alert
• ZDI-11-329 : InduSoft WebStudio CEServer Operation 0x15 Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [SECURITY] [DSA 2346-2] proftpd-dfsg regression fix
  • From: Florian Weimer
• ZDI-11-330 : InduSoft WebStudio Unauthenticated Remote Operations Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [SECURITY] [DSA 2347-1] bind9 security update
  • From: Florian Weimer
• wordpress Flexible Custom Post Type plugin Xss Vulnerabilities
  • From: Amir
• CA20111116-01: Security Notice for CA Directory
  • From: Kotas, Kevin J
• [ MDVSA-2011:176 ] bind
  • From: security
• Secunia Research: DVR Remote ActiveX Control DVRobot Library Loading Vulnerability
  • From: Secunia Research
• Tiki Wiki CMS Groupware Multiple XSS vulnerabilities
  • From: security
• [DSECRG-11-030] SAP NetWeaver JavaMailExamples - XSS
  • From: Alexandr Polyakov
• [DSECRG-11-031] SAP RFC EPS_DELETE_FILE - Authorisation bypass, smbrelay
  • From: Alexandr Polyakov
• [DSECRG-11-032] SAP NetWeaver ipcpricing - information disclose
  • From: Alexandr Polyakov
• [DSECRG-11-034] SAP NetWeaver J2EE MeSync – information disclose
  • From: Alexandr Polyakov
• [DSECRG-11-036] SAP NetWaver Virus Scan Interface - multiple XSS
  • From: Alexandr Polyakov
• [DSECRG-11-037] SAP BW Doc - Multiple XSS
  • From: Alexandr Polyakov
• [DSECRG-11-038] SAP RSTXSCRP report - smb relay vulnerability
  • From: Alexandr Polyakov
• [DSECRG-11-039] SAP NetWeaver TH_GREP module - Code injection vulnerability (NEW)
  • From: Alexandr Polyakov
• [DSECRG-11-040] SAP NetWeaver SPML - XML CSRF user creation
  • From: Alexandr Polyakov
• [DSECRG-11-041] SAP NetWeaver - Authentication bypass (Verb Tampering)
  • From: Alexandr Polyakov
• [DSECRG-11-033] SAP Crystal Report Server pubDBLogon - Linked ХSS vulnerability
  • From: Alexandr Polyakov
• Multiple vulnerabilities in webERP
  • From: advisory
• Cross-Site Scripting Vuln in Zoho ManageEngine ADSelfServicePlus
  • From: James Webb
• VMSA-2011-0014 VMware vCenter Update Manager fix for Jetty Web server addresses directory traversal vulnerability
  • From: VMware Security Team
• [ MDVSA-2011:176-1 ] bind
  • From: security
• [ MDVSA-2011:176-2 ] bind
  • From: security
• Blogs manager <= 1.101 SQL Injection Vulnerability
  • From: muuratsalo experimental hack lab
• Valid tiny-erp <= 1.6 SQL Injection Vulnerability
  • From: muuratsalo experimental hack lab
• Freelancer calendar <= 1.01 SQL Injection Vulnerability
  • From: muuratsalo experimental hack lab
• wordpress Lanoba Social Plugin Xss Vulnerabilities
  • From: Amir
• [SECURITY] [DSA 2349-1] spip security update
  • From: Moritz Muehlenhoff
• Support Incident Tracker <= 3.65 (translate.php) Remote Code Execution Vulnerability
  • From: n0b0d13s
• [ GLSA 201111-05 ] Chromium, V8: Multiple vulnerabilities
  • From: Tim Sammut
• [ GLSA 201111-06 ] MaraDNS: Arbitrary code execution
  • From: Alex Legler
• [ GLSA 201111-07 ] TinTin++: Multiple vulnerabilities
  • From: Alex Legler
• [ GLSA 201111-08 ] radvd: Multiple vulnerabilities
  • From: Alex Legler
• [ GLSA 201111-09 ] Perl Safe module: Arbitrary Perl code injection
  • From: Alex Legler
• [ GLSA 201111-10 ] Evince: Multiple vulnerabilities
  • From: Alex Legler
• [ GLSA 201111-11 ] GNU Tar: User-assisted execution of arbitrary code
  • From: Alex Legler
• [SECURITY] [DSA 2350-1] freetype security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2348-1] systemtap security update
  • From: Moritz Muehlenhoff
• Implications of IPv6 on network firewalls
  • From: Fernando Gont
• Wordpress advanced-text-widget Plugin Vulnerabilities
  • From: Amir
• Wordpress adminimize Plugin Vulnerabilities
  • From: Amir
• Re: Multiple Cross-Site-Scripting vulnerabilities in Dolibarr 3.1.0
  • From: Henri Salo
• Re: wordpress Lanoba Social Plugin Xss Vulnerabilities
  • From: Henri Salo
• [SECURITY] [DSA 2351-1] wireshark security update
  • From: Moritz Muehlenhoff
• Wordpress alert-before-your-post Plugin Cross-Site Scripting Vulnerabilities
  • From: Amir
• OWASP Academy Portal - FREE OWASP TOP 10 security challenges with Hacking-Lab
  • From: Ivan Buetler
• Re: XSS in Tiki Wiki CMS Groupware
  • From: Henri Salo
• Re: jara 1.6 sql injection vulnerability
  • From: Henri Salo
• [security bulletin] HPSBMU02726 SSRT100685 rev.1 - HP Operations Agent and Performance Agent for AIX, HP-UX, Linux, and Solaris, Local Unauthorized Access
  • From: security-alert
• [SECURITY] [DSA 2352-1] puppet security update
  • From: Moritz Muehlenhoff
• Multiple vulnerabilities in Dolibarr
  • From: advisory
• NGS00144 Patch Notification: FFmpeg Libavcodec buffer overflow remote code execution
  • From: Research@NGSSecure
• NGS00145 Patch Notification: FFmpeg Libavcodec out of bounds write remote code execution
  • From: Research@NGSSecure
• NGS00148 Patch Notification: FFmpeg Libavcodec memory corruption remote code execution
  • From: Research@NGSSecure
• Wordpress featurific-for-wordpress plugin Cross-Site Scripting Vulnerabilities
  • From: Amir
• Wordpress enable-latex plugin Remote File Include Vulnerabilities
  • From: Amir
• Wordpress meenews 5.1 plugin Cross-Site Scripting Vulnerabilities
  • From: Amir
• Wordpress clickdesk-live-support-chat plugin Cross-Site Scripting Vulnerabilities
  • From: Amir
• PmWiki <= 2.2.34 (pagelist) Remote PHP Code Injection Vulnerability
  • From: n0b0d13s
• Debut issue of Web App Pentesting Magazine - Free Download!
  • From: maciej . kozuszek
• TC-SA-2011-02: Multiple web-vulnerabilities in iTop version 1.1.181
  • From: Tobias Glemser
• [ MDVSA-2011:177 ] freetype2
  • From: security
• [security bulletin] HPSBUX02724 SSRT100650 rev.2 - HP-UX Running System Administration Manager (SAM), Local Increase in Privilege
  • From: security-alert
• [security bulletin] HPSBUX02725 SSRT100627 rev.1 - HP-UX Apache Running Tomcat Servlet Engine, Remote Information Disclosure, Authentication Bypass, Cross-Site Scripting (XSS), Unauthorized Access, Denial of Service (DoS)
  • From: security-alert
• [SECURITY] [DSA 2353-1] ldns security update
  • From: Moritz Muehlenhoff
• 0A29-11-1 : Cross-Site Scripting vulnerabilities in HP Network Node Manager i 9.10
  • From: 0a29 40
• [ MDVSA-2011:178 ] glibc
  • From: security
• [ MDVSA-2011:179 ] glibc
  • From: security
• Wordpress skysa-official plugin Cross-Site Scripting Vulnerabilities
  • From: Amir
• Vulnerabilities in Siemens SIMATIC WinCC flexible 2008 SP2
  • From: Luigi Auriemma
• Vulnerabilities in Siemens Automation License Manager
  • From: Luigi Auriemma
• [ MDVSA-2011:180 ] php-suhosin
  • From: security
• ZDI-11-331 : RealNetwork RealPlayer MPG Width Integer Underflow Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-336 : RealNetworks RealPlayer Invalid Codec Name Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-338 : RealNetworks RealPlayer IVR MLTI Chunk Length Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-335 : RealNetworks RealPlayer RV10 Sample Height Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-337 : RealNetworks RealPlayer RV30 Uninitialized Index Value Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-332 : RealNetworks RealPlayer Malformed AAC File Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-334 : RealNetworks RealPlayer genr Sample Size Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-333 : RealNetworks RealPlayer ATRC Code Data Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• MVSA-11-013 - EllisLab xss_clean Filter Bypass - ExpressionEngine and CodeIgniter
  • From: marian . ventuneac
• Security-Assessment.com Release: Hacking Hollywood Slides, Advisories and Exploits
  • From: Nick Freeman
• Oxide M0N0X1D3 HTTP Server Directory Traversal Vulnerability
  • From: demonalex
• Re: Re: wordpress Lanoba Social Plugin Xss Vulnerabilities
  • From: Alex Davis
• Vulnerabilities in 3S CoDeSys 3.4 SP4 Patch 2
  • From: Luigi Auriemma