Mail Index

• Thread Index

• CVE-2012-3819: Stack Overflow in DartWebserver.dll <= 1.9
  • From: Ken
• [ MDVSA-2012:154-1 ] apache
  • From: security
• [security bulletin] HPSBST02818 SSRT100960 rev.1 - HP IBRIX X9000 Storage, Remote Disclosure of Information
  • From: security-alert
• [security bulletin] HPSBUX02814 SSRT100930 rev.1 - HP-UX Running OpenSSL, Remote Denial of Service (DoS)
  • From: security-alert
• [ MDVSA-2012:152-1 ] bind
  • From: security
• [ MDVSA-2012:156 ] inn
  • From: security
• [ MDVSA-2012:155-1 ] xinetd
  • From: security
• GTA UTM Firewall GB 6.0.3 - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• Switchvox Asterisk v5.1.2 - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• Better WP Security v3.4.3 Wordpress - Web Vulnerabilities
  • From: Vulnerability Lab
• CA20121001-01: Security Notice for CA License
  • From: Williams, James K
• Switchvox Asterisk v5.1.2 - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• Reminder: ClubHack2012 Call for Papers Closing Soon
  • From: abhijeet
• phptax 0.8 <= Remote Code Execution Vulnerability
  • From: pereira
• XSS Vulnerabilities in phpFreeChat
  • From: Netsparker Advisories
• [ MDVSA-2012:153-1 ] dhcp
  • From: security
• [ MDVSA-2012:157 ] openjpeg
  • From: security
• [ MDVSA-2012:158 ] gc
  • From: security
• Multiple vulnerabilities in Template CMS
  • From: advisory
• Omnistar Mailer v7.2 - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• [security bulletin] HPSBMU02817 SSRT100950 rev.1 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Disclosure of Information
  • From: security-alert
• [ MDVSA-2012:159 ] freeradius
  • From: security
• One week left! CFP for ZeroNights Conference in Moscow 19-20 November 2012
  • From: Alexander Polyakov
• ANNOUNCE: RFIDIOt v1.0d released and code migration
  • From: Adam Laurie
• XnView JLS File Decompression Heap Overflow
  • From: Joseph Sheridan
• Vulnerable MSVC++ 2008 runtime libraries distributed with and installed by Ogg DirectShow filters
  • From: Stefan Kanthak
• [DCA-2011-0013] - IBM Informix Dynamic Server 11.50 SET COLLATION Stack OverFlow
  • From: Ewerson Guimarães (Crash) - Dclabs
• Team SHATTER Security Advisory: XML file disclosure vulnerability via GET_WRAP_CFG_C and GET_WRAP_CFG_C2
  • From: Shatter
• Team SHATTER Security Advisory: Multiple SQL Injection in Oracle Enterprise Manager (SQL Tunning Sets components)
  • From: Shatter
• Team SHATTER Security Advisory: Elevated roles through DBCC
  • From: Shatter
• Team SHATTER Security Advisory: Java Operating System command execution
  • From: Shatter
• [ MDVSA-2012:151-1 ] ghostscript
  • From: security
• [ MDVSA-2012:150-1 ] java-1.6.0-openjdk
  • From: security
• [ MDVSA-2012:160 ] imagemagick
  • From: security
• [SECURITY] [DSA 2555-1] libxslt security update
  • From: Moritz Muehlenhoff
• ESA-2012-035: RSAR Adaptive Authentication (On-Premise) Information Disclosure Vulnerability
  • From: Security Alert
• Blender 2.63 Exploitable User Mode Write AV
  • From: beford
• [ MDVSA-2012:161 ] html2ps
  • From: security
• utempter allows fake host setting
  • From: paul . szabo
• [SECURITY] [DSA 2556-1] icedove security update
  • From: Nico Golde
• [SECURITY] [DSA 2557-1] hostapd security update
  • From: Nico Golde
• [PRE-SA-2012-07] hostapd: Missing EAP-TLS message length validation
  • From: Timo Warns
• Interspire Email Marketer v6.0.1 - Multiple Vulnerabilites
  • From: Vulnerability Lab
• GTA UTM Firewall GB 6.0.3 - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• Endpoint Protector v4.0.4.0 - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• [SECURITY] [DSA 2558-1] bacula security update
  • From: Raphael Geissert
• [security bulletin] HPSBOV02822 SSRT100966 rev.1 - HP Secure Web Server (SWS) for OpenVMS, Remote Denial of Service (DoS), Unauthorized Access, Disclosure of Information
  • From: security-alert
• Privilege Escalation Vulnerability in Microsoft Windows
  • From: advisory
• soapbox Local Root / Privilege Escalation Vulnerability
  • From: pereira
• WingFTP Server Denial of Service Vulnerability
  • From: Anil Pazvant
• BufferOverflow Vulnerability on Logica HotScan SWIFT Alliance Access Interface
  • From: Anil Pazvant
• WingFTP Server Denial of Service Vulnerability
  • From: Anil Pazvant
• Hardcoreview WriteAV Arbitrary Code Execution
  • From: pereira
• FastStone Image Viewer 4.6 <= ReadAVonIP Arbitrary Code Execution
  • From: pereira
• Key Systems Electronic Key Lockers command injection and weak authentication vulnerabilities
  • From: Travis Lee
• Re: FastStone Image Viewer 4.6 <= ReadAVonIP Arbitrary Code Execution
  • From: pereira
• [slackware-security] mozilla-firefox (SSA:2012-283-01)
  • From: Slackware Security Team
• [ MDVSA-2012:162 ] bind
  • From: security
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Firewall Services Module
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Multiple Vulnerabilities in the Cisco WebEx Recording Format Player
  • From: Cisco Systems Product Security Incident Response Team
• [CVE-2012-4501] CloudStack configuration vulnerability
  • From: John Kinsella
• VLC Player 2.0.3 <= ReadAV Arbitrary Code Execution (Update)
  • From: pereira
• Microsoft Office Excel ReadAV Arbitrary Code Execution
  • From: pereira
• Multiple vulnerabilities in OpenX
  • From: advisory
• Omnistar Document Manager v8.0 - Multiple Vulnerabilities
  • From: Vulnerability Lab
• vOlk Botnet Framework v4.0 - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• ESA-2012-025: EMC NetWorker Module for Microsoft Applications (NMM) Multiple Vulnerabilities
  • From: Security Alert
• VMSA-2012-0014 VMware vCenter Operations, CapacityIQ, and Movie Decoder security updates
  • From: VMware Security Response Center
• FileBound - Privilege Escalation Vulnerability - Security Advisory - SOS-12-010
  • From: Lists
• [slackware-security] bind (SSA:2012-284-01)
  • From: Slackware Security Team
• Hard-coded credentials and command-injection vulnerabilities on BigPond 3G21WB
  • From: roberto
• [ MDVSA-2012:163 ] firefox
  • From: security
• [ MDVSA-2012:164 ] libxslt
  • From: security
• Last reminder for ClubHack 2012 : Call for Papers
  • From: abhijeet
• [slackware-security] mozilla-thunderbird (SSA:2012-285-02)
  • From: Slackware Security Team
• [ MDVSA-2012:165 ] graphicsmagick
  • From: security
• [ MDVSA-2012:166 ] bacula
  • From: security
• [slackware-security] mozilla-firefox (SSA:2012-285-01)
  • From: Slackware Security Team
• [ MDVSA-2012:167 ] firefox
  • From: security
• [CVE-2012-4750] Ezhometech EzServer 7.0 Remote Heap Corruption Vulnerability
  • From: lorenzo . cantoni86
• Re: VLC Player 2.0.3 <= ReadAV Arbitrary Code Execution (Update)
  • From: pereira
• SilverStripe CMS 2.4.7 <= Arbitrary URL Redirection
  • From: YGN Ethical Hacker Group
• SilverStripe CMS 2.4.7 <= Persistent Cross Site Scripting Vulnerability
  • From: YGN Ethical Hacker Group
• Multiple vulnerabilities in Samsung Kies
  • From: advisory
• Critical issues affecting Steam users
  • From: ReVuln
• [slackware-security] seamonkey (SSA:2012-288-01)
  • From: Slackware Security Team
• Visual Tools DVR multiple vulnerabilities
  • From: Andrea Fabrizi
• APPLE-SA-2012-10-16-1 Java for OS X 2012-006 and Java for Mac OS X 10.6 Update 11
  • From: Apple Product Security
• [SECURITY] [DSA 2559-1] libexif security update
  • From: Yves-Alexis Perez
• SEC Consult SA-20121017-0 :: ModSecurity multipart/invalid part ruleset bypass
  • From: SEC Consult Vulnerability Lab
• SEC Consult SA-20121017-1 :: Unirgy uStoreLocator SQL Injection - Magento extension
  • From: SEC Consult Vulnerability Lab
• [IMF 2013] 3rd Call for Papers: Deadline Extended
  • From: Oliver Goebel
• SEC Consult SA-20121017-2 :: Multiple vulnerabilities in Oracle WebCenter Sites (former FatWire Content Server)
  • From: SEC Consult Vulnerability Lab
• Multiple vulnerabilities in AContent
  • From: advisory
• Multiple vulnerabilities in Subrion CMS
  • From: advisory
• Multiple vulnerabilities in jCore
  • From: advisory
• [waraxe-2012-SA#092] - Multiple Vulnerabilities in Wordpress Slideshow Plugin
  • From: come2waraxe
• [waraxe-2012-SA#093] - Multiple Vulnerabilities in Wordpress Social Discussions Plugin
  • From: come2waraxe
• MitM-vulnerability in Palo Alto Networks GlobalProtect
  • From: Micha Borrmann
• Internet Explorer 9 XSS Filter Bypass
  • From: pereira
• CA20121018-01: Security Notice for CA ARCserve Backup
  • From: Kotas, Kevin J
• Multiple Vulnerabilities in Campaign Enterprise <= 11.0.538
  • From: Ken
• CMSQLITE v1.3.2 - Multiple Web Vulnerabiltiies
  • From: Vulnerability Lab
• Old Habits Die Hard: Cross-Zone Scripting in Dropbox & Google Drive Mobile Apps
  • From: Roi Saltzman
• XSS Vulnerabilities in TaskFreak
  • From: Netsparker Advisories
• XSS Vulnerabilities in CMSMini
  • From: Netsparker Advisories
• XSS Vulnerabilities in ClipBucket
  • From: Netsparker Advisories
• F5 FirePass SSL VPN 4xxx Series | Arbitrary URL Redirection
  • From: YGN Ethical Hacker Group
• [SECURITY] [DSA 2560-1] bind9 security update
  • From: Florian Weimer
• [SECURITY] [DSA 2561-1] tiff security update
  • From: Moritz Muehlenhoff
• Re: [Full-disclosure] F5 FirePass SSL VPN 4xxx Series | Arbitrary URL Redirection
  • From: Gary Driggs
• VaM Shop Cross-Site Scripting and Blind SQL Injection Vulnerabilities
  • From: sec . team
• [ MDVSA-2012:168 ] hostapd
  • From: security
• DC4420 - London DEFCON - October meet - tomorrow, Tuesday 23rd October.
  • From: alien DC4420
• [security bulletin] HPSBHF02819 SSRT100920 rev.1 - HP, 3COM, and H3C Routers & Switches, Remote Disclosure of Information
  • From: security-alert
• [security bulletin] HPSBUX02824 SSRT100970 rev.1 - HP-UX Running Java, Remote Execution of Arbitrary Code, and Other Vulnerabilities
  • From: security-alert
• VUPEN Security Research - Microsoft Internet Explorer "OnMove" Use-After-Free Vulnerability (MS12-063)
  • From: VUPEN Security Research
• VUPEN Security Research - Microsoft Internet Explorer "scrollIntoView" Use-After-Free Vulnerability (MS12-063)
  • From: VUPEN Security Research
• VUPEN Security Research - Oracle Java Font Processing "maxPointCount" Heap Overflow Vulnerability
  • From: VUPEN Security Research
• VUPEN Security Research - Oracle Java Font Processing Glyph Element Memory Corruption Vulnerability
  • From: VUPEN Security Research
• [SECURITY] [DSA 2565-1] iceweasel security update
  • From: Florian Weimer
• HP/H3C and Huawei SNMP Weak Access to Critical Data
  • From: Kurt Grutzmacher
• [SECURITY] [DSA 2563-1] viewvc security update
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 2562-1] cups-pk-helper security update
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 2564-1] tinyproxy security update
  • From: Thijs Kinkhorst
• [waraxe-2012-SA#094] - Multiple Vulnerabilities in Wordpress GRAND Flash Album Gallery Plugin
  • From: come2waraxe
• Smf 2.0.2 Cross-Site Scripting Vulnerability
  • From: irist . ir
• Wordpress 3.4 Cross-Site Scripting Vulnerability
  • From: irist . ir
• [security bulletin] HPSBHF02819 SSRT100920 rev.2 - HP, 3COM, and H3C Routers & Switches, Remote Disclosure of Information
  • From: security-alert
• [SECURITY] [DSA 2566-1] exim4 security update
  • From: Nico Golde
• Inventory 1.0 Multiple SQL Vulnerabilities
  • From: Thomas Richards
• Inventory 1.0 Multiple XSS Vulnerabilities
  • From: Thomas Richards
• [SECURITY] [DSA 2567-1] request-tracker3.8 security update
  • From: Florian Weimer
• [SECURITY] [DSA 2568-1] rtfm security update
  • From: Florian Weimer
• [slackware-security] mozilla-firefox (SSA:2012-300-01)
  • From: Slackware Security Team
• EMC Avamar Client for VMware Sensitive Information Disclosure Vulnerability
  • From: Security Alert
• Exploit - EasyITSP by Lemens Telephone Systems 2.0.2
  • From: Michał Błaszczak
• KmPlayer v3.0.0.1440 Local Crash PoC
  • From: irist . ir
• PIAF H.M.S - SQL Injection
  • From: Michał Błaszczak
• Call for Papers: DIMVA 2013
  • From: Collin Mulliner
• [SECURITY] [DSA 2569-1] icedove security update
  • From: Florian Weimer
• [security bulletin] HPSBUX02825 SSRT100974 rev.1 - HP-UX Running Java, Remote Indirect Vulnerabilities
  • From: security-alert
• [waraxe-2012-SA#095] - Multiple Vulnerabilities in Wordpress FoxyPress Plugin
  • From: come2waraxe
• [slackware-security] mozilla-thunderbird (SSA:2012-304-01)
  • From: Slackware Security Team
• [slackware-security] seamonkey (SSA:2012-304-02)
  • From: Slackware Security Team
• [BUGTRAQ]Security Advisory - TP-LINK TL-WR841N LFI - [UPDATE]
  • From: Matan Azugi