Mail Index

• Thread Index

• [security bulletin] HPSBUX02784 SSRT100871 rev.1 - HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
  • From: security-alert
• script-fu buffer overflow in GIMP 2.6
  • From: Joseph Sheridan
• [ MDVSA-2012:086 ] acpid
  • From: security
• [security bulletin] HPSBMU02785 SSRT100526 rev.1 - HP LoadRunner Running on Windows, Remote Execution of Arbitrary Code
  • From: security-alert
• OpenSSL 1.0.1 Buffer Overflow Vulnerability
  • From: chenz9187
• [SECURITY] [DSA 2483-1] strongswan security update
  • From: Yves-Alexis Perez
• [SECURITY] [DSA 2484-1] nut security update
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 2481-1] arpwatch security update
  • From: Yves-Alexis Perez
• [SECURITY] [DSA 2482-1] arpwatch security update
  • From: Yves-Alexis Perez
• [SECURITY] [DSA 2482-1] libgdata security update
  • From: Yves-Alexis Perez
• [SECURITY] [DSA 2485-1] imp4 security update
  • From: Thijs Kinkhorst
• EUSecWest 2012 - Amsterdam, Sept 19/20 featuring Mobile PWN2OWN - CFP Deadline June 15
  • From: Dragos Ruiu
• Arbitrary File Upload/Execution in Collabtive
  • From: Mark Hoopes
• [ MDVSA-2012:087 ] nut
  • From: security
• Sielco Sistemi Winlog Buffer Overflow <= v2.07.14
  • From: devnull
• SQL injection in Bigware shop software
  • From: rwenzel
• [SECURITY] [DSA 2486-1] bind9 security update
  • From: Florian Weimer
• SQL injection in Serendipity
  • From: advisory
• Re: rssh security announcement
  • From: Derek Martin
• ZDI-12-075 : Apple Quicktime RLE Sample Decoding Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-076 : Apple QuickTime MPEG Stream Padding Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-077 : Apple QuickTime QTVR QTVRStringAtom Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-078 : Apple QuickTime SVQ3 Codec mb_skip_run Parsing Remote Code Execution
  • From: ZDI Disclosures
• ZDI-12-079 : Apple QuickTime H264 Picture Width Parsing Remote Code Execution Vulnerability
  • From: Zero Day Initiative
• ZDI-12-080 : Adobe Flash Player MP4 Stream Decoding Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-081 : Oracle Java GlueGen Arbitrary Native Library Loading Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-083 : Oracle Java OpenAL Library Pointer Manipulation Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-084 : RealNetworks RealPlayer RV10 Encoded Height/Width Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-085 : RealNetworks RealPlayer dmp4 esds Width Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-086 : RealNetworks RealPlayer rvrender RMFF Flags Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-087 : RealNetworks RealPlayer raac.dll stsz Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-088 : HP DataDirect OpenAccess GIOP Opcode 0x0E Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-089 : HP DataDirect OpenAccess GIOP Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Secunia Research: Network Instruments Observer SNMP OID Processing Denial of Service
  • From: Secunia Research
• Secunia Research: Network Instruments Observer SNMP Processing Buffer Overflows
  • From: Secunia Research
• Mybb 1.6.8 Sql Injection Vulnerabilitiy
  • From: Amir
• ComSndFTP Server Remote Format String Overflow Vulnerability
  • From: demonalex
• [SECURITY] [DSA 2480-3] request-tracker3.8 regression update
  • From: Florian Weimer
• CVE-2012-3287: md5crypt is no longer considered safe
  • From: phk
• Re: Mybb 1.6.8 Sql Injection Vulnerabilitiy
  • From: Henri Salo
• Re: Mybb 1.6.8 Sql Injection Vulnerabilitiy
  • From: Henri Salo
• [SECURITY] [DSA 2487-1] openoffice.org security update
  • From: Florian Weimer
• [SECURITY] [DSA 2489-1] iceape security update
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 2490-1] nss security update
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 2488-1] iceweasel security update
  • From: Thijs Kinkhorst
• Analysis: Vast IPv6 address space actually enables IPv6 attacks
  • From: Fernando Gont
• Re: Analysis: Vast IPv6 address space actually enables IPv6 attacks
  • From: Fernando Gont
• ZDI-12-090 : Symantec Web Gateway Shell Command Injection Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-091 : Symantec Web Gateway upload_file Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-092 : RealNetworks RealPlayer QCELP Stream Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [SECURITY] [DSA 2491-1] postgresql-8.4 security update
  • From: Florian Weimer
• [ MDVSA-2012:089 ] bind
  • From: security
• [SECURITY] [DSA 2492-1] php5 security update
  • From: Florian Weimer
• [MATTA-2012-002] CVE-2012-1493; F5 BIG-IP remote root authentication bypass Vulnerability
  • From: Florent Daigniere
• [security bulletin] HPSBMU02790 SSRT100872 rev.1 - HP Server Automation, Remote Execution of Arbitrary Code
  • From: security-alert
• [security bulletin] HPSBMU02776 SSRT100852 rev.1 - HP Onboard Administrator (OA), Remote Unauthorized Access to Data, Unauthorized Disclosure of Information Denial of Service (DoS)
  • From: security-alert
• APPLE-SA-2012-06-11-1 iTunes 10.6.3
  • From: Apple Product Security
• FreeBSD Security Advisory FreeBSD-SA-12:03.bind
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-12:04.sysret
  • From: FreeBSD Security Advisories
• Re: Analysis: Vast IPv6 address space actually enables IPv6 attacks
  • From: Lee Dilkie
• Re: Analysis: Vast IPv6 address space actually enables IPv6 attacks
  • From: Fernando Gont
• Re: CVE-2012-3287: md5crypt is no longer considered safe
  • From: Solar Designer
• [ MDVSA-2012:088 ] mozilla
  • From: security
• IIS 6.0/7.5 Vulnerabilities [moderate risk] - ISOWAREZ BDAY RELEASE
  • From: king cope
• Re: ZDI-12-088 : HP DataDirect OpenAccess GIOP Opcode 0x0E Remote Code Execution Vulnerability
  • From: Steve Shockley
• [CVE-2012-3238] Astaro Security Gateway <= v8.304 Persistent Cross-Site Scripting Vulnerability
  • From: Inshell Security
• [php<=5.4.3] Parsing Bug in PHP PDO prepared statements may lead to access violation
  • From: 0x721427D8 0x721427D8
• [SECURITY] [DSA 2493-1] asterisk security update
  • From: Florian Weimer
• ZDI-12-093 : (Pwn2Own) Microsoft Internet Explorer Fixed Table Colspan Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• APPLE-SA-2012-06-12-1 Java for OS X 2012-004 and Java for Mac OS X 10.6 Update 9
  • From: Apple Product Security
• CVE-2012-1661 - ESRI ArcMap arbitrary code execution via crafted map file.
  • From: Boston Cyber Defense
• [CAL-2012-0026] Microsfot IE Same ID Property Remote Code Execution Vulnerability
  • From: Code Audit Labs
• [CAL-2012-0023]Microsoft IE Developer Toolbar Remote Code Execution Vulnerability
  • From: Code Audit Labs
• [SE-2012-01] Regarding Oracle's Critical Patch Update for Java SE
  • From: Security Explorations
• Security Advisory - Checkpoint Endpoint Connect VPN - DLL Hijack
  • From: moshez
• [Suspected Spam] eSyndiCat Pro v2.4.1 - Multiple Web Vulnerabilities
  • From: Research
• Boonex Dolphin v7.0.9 CMS & Mobile App - Multiple Web Vulnerabilities
  • From: Research
• QuickBlog v0.8 CMS - Multiple Web Vulnerabilities
  • From: Research
• ADICO CMS v1.1 - Blind SQL Injection Vulnerability
  • From: Research
• iScripts EasyCreate CMS v2.0 - Multiple Web Vulnerabilites
  • From: Research
• Interspire Shopping Cart v6 - Multiple Web Vulnerabilities
  • From: Research
• Nuked Klan SP CMS v4.5 - SQL injection Vulnerability
  • From: Research
• VMSA-2012-0011 VMware hosted products and ESXi and ESX patches address security issues
  • From: VMware Security Team
• [ MDVSA-2012:090 ] openoffice.org
  • From: security
• [ MDVSA-2012:091 ] libreoffice
  • From: security
• [security bulletin] HPSBOV02774 SSRT100684 rev.1 - HP TCP/IP Services for OpenVMS, BIND 9 Resolver, Remote Denial of Service (DoS)
  • From: security-alert
• Re: Bugtraq ID# 53694 is invalid/fake
  • From: Information Booth
• [SECURITY] [DSA 2494-1] ffmpeg security update
  • From: Florian Weimer
• [slackware-security] mozilla-firefox (SSA:2012-166-02)
  • From: Slackware Security Team
• [slackware-security] seamonkey (SSA:2012-166-04)
  • From: Slackware Security Team
• [slackware-security] bind (SSA:2012-166-01)
  • From: Slackware Security Team
• [ MDVSA-2012:091 ] libreoffice
  • From: security
• [ MDVSA-2012:092 ] postgresql
  • From: security
• [ MDVSA-2012:093 ] php
  • From: security
• IObit Protected Folder Authentication Bypass
  • From: Adam Behnke
• Squirrelcart Cart Shop v3.3.4 - Multiple Web Vulnerabilities
  • From: Research
• [Suspected Spam] Swoopo Gold Shop CMS v8.4.56 - Multiple Web Vulnerabilities
  • From: Research
• Simple Forum PHP 2.1 - SQL Injection Vulnerabilities
  • From: Research
• Jobs Portal v3.0 NetArtMedia - Multiple Web Vulnerabilites
  • From: Research
• Cells Blog CMS v1.1 - Multiple Web Vulnerabilites
  • From: Research
• MYRE Real Estate Mobile 2012|2 - Multiple Vulnerabilities
  • From: Research
• [CAL-2012-0015] opera website spoof
  • From: Code Audit Labs
• CSNC-2012-004 Generic XSS in AdNovum nevisProxy
  • From: Cyrill Brunschwiler
• 0A29-12-1 : Cross-Site Scripting vulnerabilities in Nagios XI < 2011R3.0
  • From: 0a29 40
• AdNovum NevisWeb Security Proxy Vulnerability - Cross-site scripting (XSS) within 302 Redirections
  • From: Ivan Buetler
• AST-2012-009: Skinny Channel Driver Remote Crash Vulnerability
  • From: Asterisk Security Team
• nullcon Delhi 2012 Final call for Paper/Events (extended to 10th July) and First round of speakers
  • From: nullcon
• News Script PHP v1.2 - Multiple Web Vulnerabilites
  • From: Research
• Webify Product Series - Multiple Web Vulnerabilities
  • From: Research
• [Suspected Spam] Swoopo Gold Shop CMS v8.4.56 - Multiple Web Vulnerabilities
  • From: Research
• [SECURITY] [DSA 2495-1] openconnect security update
  • From: Moritz Muehlenhoff
• Re: [CAL-2012-0015] opera website spoof
  • From: Code Audit Labs
• QNAP Turbo NAS Multiple Vulnerabilities - Security Advisory
  • From: Lists
• Squiz CMS Multiple Vulnerabilities - Security Advisory - SOS-12-007
  • From: Lists
• [ MDVSA-2012:094 ] clamav
  • From: security
• [ MDVSA-2012:095 ] java-1.6.0-openjdk
  • From: security
• SEC Consult SA-20120618-0 :: Western Digital ShareSpace WEB GUI Sensitive Data Disclosure
  • From: SEC Consult Vulnerability Lab
• SEC Consult SA-20120618-1 :: Airlock WAF overlong UTF-8 sequence bypass
  • From: SEC Consult Vulnerability Lab
• DC4420 - London DEFCON - June meet - Tuesday June 19th 2012
  • From: Major Malfunction
• Re: SAXoPRESS - directory traversal
  • From: foo
• [SECURITY] [DSA 2496-1] mysql-5.1 security update
  • From: Thijs Kinkhorst
• [security bulletin] HPSBUX02789 SSRT100824 rev.1 - HP-UX CIFS Server (Samba), Remote Execution of Arbitrary Code, Elevation of Privileges
  • From: security-alert
• [security bulletin] HPSBUX02791 SSRT100856 rev.1 - HP-UX Apache Web Server running PHP, Remote Execution of Arbitrary Code, Privilege Elevation, Denial of Service (DoS)
  • From: security-alert
• FreeBSD Security Advisory FreeBSD-SA-12:04.sysret [REVISED]
  • From: FreeBSD Security Advisories
• [security bulletin] HPSBMU02792 SSRT100820 rev.1 - HP Business Service Management (BSM), Remote Unauthorized Disclosure of Information, Unauthorized Modification, Denial of Service (DoS)
  • From: security-alert
• VUPEN Security Research - Microsoft Internet Explorer "CollectionCache" Remote Use-after-free (MS12-037)
  • From: VUPEN Security Research
• VUPEN Security Research - Microsoft Internet Explorer "GetAtomTable" Remote Use-after-free (MS12-037 / CVE-2012-1875)
  • From: VUPEN Security Research
• VUPEN Security Research - Microsoft Internet Explorer "Col" Element Remote Heap Overflow (MS12-037 / CVE-2012-1876)
  • From: VUPEN Security Research
• [Win32-API] SetNamedSecurityInfo() IGNORES and DESTROYS protected DACLs/SACLs
  • From: Stefan Kanthak
• [Announcement] ClubHack Magazine Issue 29, June 2012 Released
  • From: abhijeet
• Multiple vulnerabilities in web@all
  • From: advisory
• Commentics 2.0 <= Multiple Vulnerabilities
  • From: pereira
• [ MDVSA-2012:096 ] python
  • From: security
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Application Control Engine Administrator IP Address Overlap Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [ MDVSA-2012:097 ] python
  • From: security
• [SECURITY] [DSA 2497-1] quagga security update
  • From: Florian Weimer
• [ MDVSA-2012:098 ] libxml2
  • From: security
• Mybb 1.6.8 'announcements.php' Sql Injection Vulnerabilitiy
  • From: Amir
• [ MDVSA-2012:099 ] net-snmp
  • From: security
• CORE-2012-0530 - Lattice Diamond Programmer Buffer Overflow
  • From: CORE Security Technologies Advisories
• ZDI-12-094 : RealNetworks Helix Server rn5auth Credential Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-095 : Apple Quicktime TeXML transform Attribute Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-096 : HP Data Protector Express Opcode 0x330 Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-097 : HP Data Protector Express Opcode 0x320 Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-098 : AOL Products dnUpdater ActiveX Uninitialized Pointer Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-099 : DataDirect OpenAccess oaagent.exe GIOP Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-100 : HP OpenView Performance Manager PMParamHandler Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [security bulletin] HPSBOV02780 SSRT100766 rev.2 - HP OpenVMS ACMELOGIN, Local Unauthorized Access and Increased Privileges
  • From: security-alert
• [security bulletin] HPSBOV02793 SSRT100891 rev.1 - HP OpenVMS running SSL, Remote Denial of Service (DoS), Unauthorized Access
  • From: security-alert
• Re: Mybb 1.6.8 'announcements.php' Sql Injection Vulnerabilitiy
  • From: Henri Salo
• Re: Sielco Sistemi Winlog Buffer Overflow <= v2.07.14
  • From: devnull
• [ MDVSA-2012:088-1 ] mozilla
  • From: security
• [SECURITY] [DSA 2499-1] icedove security update
  • From: Florian Weimer
• [SECURITY] [DSA 2500-1] mantis security update
  • From: Florian Weimer
• [SECURITY] [DSA 2501-1] xen security update
  • From: Florian Weimer
• [SECURITY] [DSA 2502-1] python-crypto security update
  • From: Moritz Muehlenhoff
• hashdays 2012 - Call for Papers (#days CFP)
  • From: Hashdays CFP
• [ MDVSA-2012:100 ] rsyslog
  • From: security
• [slackware-security] freetype (SSA:2012-176-01)
  • From: Slackware Security Team
• Re: The history of a -probably- 13 years old Oracle bug: TNS Poison
  • From: prpgk1
• CVE-2012-2381: Apache Roller Cross-Site-Scripting (XSS) vulnerability
  • From: Dave
• CVE-2012-2380: Apache Roller Cross-Site-Resource-Forgery (XSRF) vulnerability
  • From: Dave
• [SECURITY] [DSA 2498-1] dhcpcd security update
  • From: Yves-Alexis Perez
• [SE-2012-01] Security weakness in Apple QuickTime Java extensions (details released)
  • From: Security Explorations
• Re: Mybb 1.6.8 'announcements.php' Sql Injection Vulnerabilitiy
  • From: Yaniv Shaked
• Re: Mybb 1.6.8 'announcements.php' Sql Injection Vulnerabilitiy
  • From: coptang
• [CVE-2012-0694] SugarCRM CE <= 6.3.1 "unserialize()" PHP Code Execution
  • From: n0b0d13s
• OpenLimit Reader for Windows contains completely outdated, superfluous and VULNERABLE system components
  • From: Stefan Kanthak
• Re: Re: Mybb 1.6.8 'announcements.php' Sql Injection Vulnerabilitiy
  • From: nathan
• [CVE-2012-0694] SugarCRM CE <= 6.3.1 "unserialize()" PHP Code Execution
  • From: n0b0d13s
• SEC Consult SA-20120626-0 :: Zend Framework - Local file disclosure via XXE injection
  • From: SEC Consult Vulnerability Lab
• [security bulletin] HPSBMU02792 SSRT100820 rev.2 - HP Business Service Management (BSM), Remote Unauthorized Disclosure of Information, Unauthorized Modification, Denial of Service (DoS)
  • From: security-alert
• Re: The history of a -probably- 13 years old Oracle bug: TNS Poison
  • From: Gary Driggs
• Re: Mybb 1.6.8 'announcements.php' Sql Injection Vulnerabilitiy
  • From: Gianluca Brindisi
• [security bulletin] HPSBMU02786 SSRT100877 rev.1 - HP System Management Homepage (SMH) Running on Linux and Windows, Remote Unauthorized Access, Disclosure of Information, Data Modification, Denial of Service (DoS), Execution of Arbitrary Code
  • From: security-alert
• ZDI-12-101 : IBM Cognos tm1admsd.exe Multiple Operations Remote Code Execution Vulnerabilities
  • From: ZDI Disclosures
• ZDI-12-102 : Novell iPrint Client nipplib.dll GetDriverSettings realm Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-103 : Apple Quicktime Dataref URI Buffer Remote Code Execution
  • From: ZDI Disclosures
• ZDI-12-104 : SAP Netweaver ABAP msg_server.exe Parameter Value Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-105 : Apple Quicktime Text Track Descriptor Parsing Remote Code Execution
  • From: ZDI Disclosures
• Cisco Security Advisory: Buffer Overflow Vulnerabilities in the Cisco WebEx Player
  • From: Cisco Systems Product Security Incident Response Team
• [security bulletin] HPSBPI02794 SSRT100542 rev.1 - Certain HP Photosmart Printers, Remote Denial of Service (DoS)
  • From: security-alert
• ZDI-12-106 : Avaya IP Office Customer Call Reporter ImageUpload Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [SECURITY] [DSA 2503-1] bcfg2 security update
  • From: Florian Weimer
• [SECURITY] [DSA 2504-1] libspring-2.5-java security update
  • From: Florian Weimer
• ZDI-12-107 : Apple Quicktime TeXML Style Element Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-108 : Apple Quicktime TeXML sampleData Element Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-109 : Apple Quicktime TeXML Karaoke Element Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-110 : Mozilla Firefox AttributeChildRemoved Use-After-Free Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-111 : SAP Netweaver ABAP msg_server.exe Opcode 0x43 Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-112 : SAP Netweaver ABAP msg_server.exe Parameter Name Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-113 : IBM Rational ClearQuest CQOle ActiveX Control Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• REWTERZ-20120629 - TEMENOS T24 Cross-Site Scripting (XSS) Vulnerability
  • From: Rewterz - Research Group
• Vulnerabilities in Winlog 2.07.16
  • From: Luigi Auriemma
• Irfanview Plugins JLS Decompression
  • From: Joseph Sheridan
• GIMP FIT File Format DoS
  • From: Joseph Sheridan