Mail Index

• Thread Index

• [SECURITY] [DSA 2505-1] zendframework security update
  • From: Florian Weimer
• Basilic RCE bug
  • From: m . razavi777
• IBM Edge Components Caching Proxy XSS Followup
  • From: BugsNotHugs
• Sun iPlanet Error Page Link Injection
  • From: BugsNotHugs
• IBM developerWorks ncp (Nigel's Capacity Planning) 2.1 Remote Information Disclosure
  • From: BugsNotHugs
• Bookmark4U lostpasswd.php env[include_prefix] Parameter RFI
  • From: BugsNotHugs
• [ MDVSA-2012:096-1 ] python
  • From: security
• [security bulletin] HPSBMU02781 SSRT100617 rev.1 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows running PostgreSQL, Remote Execution of Arbitrary Code, Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBMU02783 SSRT100806 rev.1 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Cross Site Scripting (XSS)
  • From: security-alert
• NGS00196 Patch Notification: Nagios XI Network Monitor OS Command Injection
  • From: Research@NGSSecure
• NGS00194 Patch Notification: Nagios XI Network Monitor Blind SQL Injection
  • From: Research@NGSSecure
• NGS00195 Patch Notification: Nagios XI Network Monitor Stored and Reflected XSS
  • From: Research@NGSSecure
• NGS00162 Patch Notification: Symantec Message Filter Session Hijacking via session fixation
  • From: Research@NGSSecure
• Malicious Code Execution in PCI Expansion ROM
  • From: Adam Behnke
• [IA30] Photodex ProShow Producer v5.0.3256 Local Buffer Overflow Vulnerability
  • From: Inshell Security
• [SECURITY] [DSA 2506-1] libapache-mod-security security update
  • From: Yves-Alexis Perez
• Slideware of IPv6 hacking training (HIP 2012 edition), and future trainings (Portugal & Belgium)
  • From: Fernando Gont
• [security bulletin] HPSBUX02795 SSRT100878 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS)
  • From: security-alert
• [ MDVSA-2012:101 ] libtiff
  • From: security
• [CVE-2012-0911] Tiki Wiki CMS Groupware <= 8.3 "unserialize()" PHP Code Execution
  • From: n0b0d13s
• Cyberoam advisory
  • From: Ben Laurie
• From XSLT code execution to Meterpreter shells
  • From: Nicolas Grégoire
• plow 0.0.5 <= Buffer Overflow Vulnerability
  • From: pereira
• Forum Oxalis 0.1.2 <= SQL Injection Vulnerability
  • From: pereira
• Vulnerable Microsoft VC++ 2005 runtime libraries in "Microsoft Live Meeting 2007 Client" installed in private location
  • From: Stefan Kanthak
• Blind SQL Injection in Webmatic
  • From: advisory
• Just4meeting 3.0 - Lisbon/Portugal - 6 to 8 - July
  • From: Ralf Braga
• Wordpress (editormonkey) Arbitrary File Upload Vulnerability
  • From: Amir
• [SECURITY] [DSA 2507-1] openjdk-6 security update
  • From: Moritz Muehlenhoff
• IIS Short File/Folder Name Disclosure by using tilde ~ character
  • From: bugreport
• .Net Framework Tilde Character DoS
  • From: bugreport
• .Net Framework Tilde Character DoS - Sorry, exploit-db link corrected
  • From: bugreport
• Event Script PHP v1.1 CMS - Multiple Web Vulnerabilites
  • From: Research
• GuestBook Scripts PHP v1.5 - Multiple Web Vulnerabilites
  • From: Research
• Classified Ads Script PHP v1.1 - SQL Injection Vulnerabilities
  • From: Research
• Freeside SelfService CGI|API 2.3.3 - Multiple Vulnerabilities
  • From: Research
• ESA-2012-026: RSA Access Manager Session Replay Vulnerability
  • From: Security_Alert
• CLscript CMS v3.0 - Multiple Web Vulnerabilities
  • From: Research
• ClubHack2012 CFP Open Now
  • From: abhijeet
• IPv6 security tools released
  • From: Fernando Gont
• [security bulletin] HPSBGN02750 SSRT100795 rev.1 - HP ProtectTools Enterprise Device Access Manager Running on Windows, Remote Execution of Arbitrary Code, Denial of Service (DoS)
  • From: security-alert
• [ MDVSA-2012:102 ] krb5
  • From: security
• Re: Basilic RCE bug
  • From: larry0
• [SECURITY] [DSA 2509-1] pidgin security update
  • From: Luciano Bello
• AST-2012-010: Possible resource leak on uncompleted re-invite transactions
  • From: Asterisk Security Team
• AST-2012-011: Remote crash vulnerability in voice mail application
  • From: Asterisk Security Team
• [SECURITY] CVE-2012-2138 Apache Sling denial of service vulnerability
  • From: Bertrand Delacretaz
• BookNux 0.2 <= Multiple Vulnerabilities
  • From: pereira
• [CVE-2012-3376] Apache Hadoop HDFS information disclosure vulnerability
  • From: Aaron T. Myers
• BookNux 0.2 <= Multiple Vulnerabilities
  • From: pereira
• Call for Papers: The 7th International Conference for Internet Technology and Secured Transactions (ICITST-2012)
  • From: Call for papers
• Checkpoint Abra - Vulnerabilities
  • From: komarov
• Re: plow 0.0.5 <= Buffer Overflow Vulnerability
  • From: Henri Salo
• GreHack 2012 - extended deadline CFP 15th August 2012 (Grenoble, France)
  • From: Fabien DUCHENE
• [security bulletin] HPSBMU02796 SSRT100594 rev.1 - HP Operations Agent for AIX, HP-UX, Linux, Solaris and Windows, Remote Execution of Arbitrary Code
  • From: security-alert
• Re: Re: plow 0.0.5 <= Buffer Overflow Vulnerability
  • From: pereira
• Re: CitrusDB 2.4.1 - LFI/SQLi Vulnerability
  • From: mbsarwin
• Multiple Cross-Site Scripting (XSS) in Kajona
  • From: advisory
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Recording Server
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Immersive Endpoint Devices
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Multipoint Switch
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Manager
  • From: Cisco Systems Product Security Incident Response Team
• ESA-2012-027: EMC Celerra/VNX/VNXe Improper Access Control Vulnerability
  • From: Security_Alert
• ESA-2012-023: RSA Authentication Manager Multiple Vulnerabilities
  • From: Security_Alert
• [ MDVSA-2012:103 ] automake
  • From: security
• [ MDVSA-2012:104 ] openjpeg
  • From: security
• [ MDVSA-2012:105 ] pidgin
  • From: security
• TP Link Gateway v3.12.4 - Multiple Web Vulnerabilities
  • From: Admin
• Phonalisa v5.0 VoiP - Multiple Web Vulnerabilities
  • From: Research
• Funeral Script PHP - Multiple Web Vulnerabilites
  • From: Research
• PHP Jobsite v1.36 - Cross Site Scripting Vulnerabilities
  • From: Research
• Reserve Logic v1.2 Booking CMS - Multiple Vulnerabilities
  • From: Research
• ZDI-12-114 : HP OpenView Performance Agent coda.exe Opcode 0x34 Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-115 : HP OpenView Performance Agent coda.exe Opcode 0x8C Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-116 : EMC AutoStart ftAgent Opcode 50 Subcode 04 Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-117 : EMC AutoStart ftAgent Opcode 50 Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-118: EMC AutoStart ftAgent Opcode 0x03 Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-119: EMC AutoStart ftAgent Opcode 0x41 Subcode 0x00 Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-120: EMC AutoStart ftAgent Opcode 85 Subcode 22 Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-121: EMC AutoStart ftAgent Opcode 85 Subcode 01 Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-122: EMC AutoStart ftAgent Opcode 65 Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-123: EMC AutoStart ftAgent Opcode 50 Subcode 60 Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-124: EMC AutoStart ftAgent Opcode 50 Subcode 42 Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-125: Apple Quicktime QTPlugin SetLanguage Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [SECURITY] [DSA 2511-1] puppet security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2512-1] mono security update
  • From: Moritz Muehlenhoff
• security advisory: AirDroid 1.0.4 beta
  • From: Kathrin Schäberle
• [SECURITY] [DSA 2510-1] extplorer security update
  • From: Luciano Bello
• [ MDVSA-2012:106 ] libexif
  • From: security
• [ MDVSA-2012:107 ] exif
  • From: security
• [security bulletin] HPSBMU02796 SSRT100594 rev.2 - HP Operations Agent for AIX, HP-UX, Linux, Solaris and Windows, Remote Execution of Arbitrary Code
  • From: security-alert
• [slackware-security] pidgin (SSA:2012-195-02)
  • From: Slackware Security Team
• [slackware-security] php (SSA:2012-195-01)
  • From: Slackware Security Team
• Google Chrome 19 metro_driver.dll mishandling
  • From: moshez
• Event Calendar PHP 1.2 - Multiple Web Vulnerabilites
  • From: Research
• VamCart v0.9 CMS - Multiple Web Vulnerabilities
  • From: Research
• SMF Board v2.0.2 - Multiple Web Vulnerabilities
  • From: Research
• PBBoard v2.1.4 CMS - Multiple Web Vulnerabilities
  • From: Research
• Blackboard Mobile Learn v3.0 - Persistent Web Vulnerability
  • From: Research
• MGB OpenSource Guestbook 0.6.9.1 Multiple security vulnerabilities
  • From: sschurtz
• WordPress Plugin 'Count Per Day' 3.1.1 Multiple Cross-site scripting vulnerabilities
  • From: sschurtz
• CakePHP 2.x-2.2.0-RC2 XXE Injection
  • From: pawel . wylecial
• libexif project security advisory July 12, 2012
  • From: Dan Fandrich
• [security bulletin] HPSBGN02787 SSRT100876 rev.1 - HP AssetManager, Remote Cross Site Scripting (XSS) and Unauthorized Data Modification
  • From: security-alert
• 0A29-12-2 :Metasploit 'pcap_log' plugin privilege escalation vulnerability
  • From: 0a29 40
• CORE-2011-1123 - Windows Kernel ReadLayoutFile Heap Overflow
  • From: CORE Security Technologies Advisories
• Unpatched IIS Vulnerabilities / Microsoft July Security Bulletin
  • From: king cope
• Re: [Full-disclosure] Unpatched IIS Vulnerabilities / Microsoft July Security Bulletin
  • From: Thor \(Hammer of God\)
• DC4420 - London DEFCON - July meet - Tuesday July 17th 2012
  • From: Major Malfunction
• AVAVoIP v1.5.12 - Multiple Web Vulnerabilities
  • From: Administrator
• KeyPass Password Safe v1.22 - Software Filter Vulnerability
  • From: Research
• DomsHttpd 1.0 <= Remote Denial Of Service
  • From: pereira
• Secunia Research: Cisco Linksys PlayerPT ActiveX Control "SetSource()" Buffer Overflow
  • From: Secunia Research
• [PT-2012-23] SQL Injection in Dr.Web Anti-virus
  • From: noreply
• [security bulletin] HPSBMU02799 SSRT100867 rev.1 - HP Network Node Manager i (NNMi) v9.0x Running JDK for HP-UX, Linux, Solaris, and Windows, Remote Unauthorized Information Disclosure, Modification, Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBMU02797 SSRT100867 rev.1 - HP Network Node Manager i (NNMi) v9.1x Running JDK for HP-UX, Linux, Solaris, and Windows, Remote Unauthorized Information Disclosure, Modification, Denial of Service (DoS)
  • From: security-alert
• [SECURITY] [DSA 2514-1] iceweasel security update
  • From: Nico Golde
• [slackware-security] mozilla-firefox (SSA:2012-200-02)
  • From: Slackware Security Team
• [slackware-security] mozilla-thunderbird (SSA:2012-200-03)
  • From: Slackware Security Team
• [slackware-security] seamonkey (SSA:2012-200-04)
  • From: Slackware Security Team
• [slackware-security] libexif (SSA:2012-200-01)
  • From: Slackware Security Team
• ZDI-12-126 : (0 day) HP StorageWorks File Migration Agent RsaCIFS.dll Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-127 : (0Day) HP StorageWorks File Migration Agent RsaFTP.dll Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• GreHack 2012 - Call For Musicians/Artists/DJs application open till October 5th 2012 (Grenoble, France)
  • From: Fabien DUCHENE
• [SECURITY] [DSA 2515-1] nsd3 security update
  • From: Nico Golde
• [Announcement] ClubHack Magazine's July 2012 Issue Released
  • From: abhijeet
• [ MDVSA-2012:108 ] php
  • From: security
• POC2012 Call for Paper
  • From: pocadm
• NESSUS ANDROID APP - stores login info in plain text
  • From: securityfocus
• CodeIgniter <= 2.1.1 xss_clean() Cross Site Scripting filter bypass
  • From: Krzysztof Kotowicz
• Free Web App Security Challenges - Hackademics Project
  • From: Ivan Buetler
• Wordpress (chenpress Plugin) Arbitrary File Upload Vulnerability
  • From: Amir
• [SECURITY] [DSA 2508-1] kfreebsd-8 security update
  • From: Yves-Alexis Perez
• file clobbering vulnerability in Solaris update manager & local root with SUNWbindr install.
  • From: larry0
• [ MDVSA-2012:109 ] libxslt
  • From: security
• Re: Wordpress (chenpress Plugin) Arbitrary File Upload Vulnerability
  • From: Henri Salo
• [ MDVSA-2012:110 ] mozilla
  • From: security
• Android DNS poisoning: Randomness gone bad (CVE-2012-2808)
  • From: Roee Hay
• [slackware-security] libpng (SSA:2012-206-01)
  • From: Slackware Security Team
• APPLE-SA-2012-07-25-1 Safari 6.0
  • From: Apple Product Security
• [ MDVSA-2012:111 ] libgdata
  • From: security
• Cross-Site Scripting (XSS) in Redaxo
  • From: advisory
• [security bulletin] HPSBUX02789 SSRT100824 rev.3 - HP-UX CIFS Server (Samba), Remote Execution of Arbitrary Code, Elevation of Privileges
  • From: security-alert
• [security bulletin] HPSBUX02795 SSRT100878 rev.2 - HP-UX Running BIND, Remote Denial of Service (DoS)
  • From: security-alert
• APPLE-SA-2012-07-25-2 Xcode 4.4
  • From: Apple Product Security
• tekno.Portal 0.1b - SQLi Vulnerability in "anket.php"
  • From: Socket_0x03
• [ MDVSA-2012:112 ] perl-DBD-Pg
  • From: security
• [SECURITY] [DSA 2516-1] isc-dhcp security update
  • From: Nico Golde
• [ MDVSA-2012:113 ] arpwatch
  • From: security
• [ MDVSA-2012:114 ] apache-mod_auth_openid
  • From: security
• [ MDVSA-2012:115 ] dhcp
  • From: security
• [ MDVSA-2012:116 ] dhcp
  • From: security
• [ MDVSA-2012:117 ] python-pycrypto
  • From: security
• Security advisory for Bugzilla 4.3.2, 4.2.2, 4.0.7 and 3.6.10
  • From: LpSolit
• [ MDVSA-2012:118 ] apache-mod_security
  • From: security
• [slackware-security] bind (SSA:2012-209-01)
  • From: Slackware Security Team
• [ MDVSA-2012:119 ] bind
  • From: security
• [ MDVSA-2012:110-1 ] mozilla
  • From: security
• TWSL2012-014: Multiple Vulnerabilities in Scrutinizer NetFlow & sFlow Analyzer
  • From: Trustwave Advisories
• Spark IM Client Local Password Decryption
  • From: Adam Caudill
• ocPortal 7.1.5 <= | Open URL Redirection Vulnerability
  • From: YGN Ethical Hacker Group
• Security Advisory in LedgerSMBv 1.3.20 and below: Denial of Service vulnerability
  • From: Chris Travers
• Dr. Web Control Center Admin UI Remote Script Code Injection
  • From: Oliver Karow
• DataWatch Monarch BI v5.1 admin section reflected cross-site scripting
  • From: vulns
• DataWatch Monarch Business Intelligence (BI) v5.1 admin section stored cross-site scripting
  • From: vulns
• DataWatch Monarch Business Intelligence (BI) v5.1 client section stored cross-site scripting
  • From: vulns
• DataWatch Monarch Business Intelligence (BI) v5.1 Blind SQL injection
  • From: vulns
• DataWatch Monarch Business Intelligence (BI) v5.1 Admin Section Blind XPath Injection
  • From: vulns
• TEMENOS T24 R07.03 Reflected Cross-Site Scripting
  • From: vulns
• TEMENOS T24 R07.03 Authentication Bypass
  • From: vulns
• [SECURITY] [DSA 2517-1] bind9 security update
  • From: Nico Golde