Mail Index

• Thread Index

• NetCat CMS v5.0.1 - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• PrestaShop <= 1.5.1 Persistent XSS
  • From: David Sopas
• PG Dating Pro v1.0 CMS - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• VaM Shop v1.69 - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• Medium risk security flaws in Konqueror
  • From: Tim Brown
• XSS in dokeos 2.1.1
  • From: marcelavbx
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified MeetingPlace Web Conferencing
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Prime Data Center Network Manager Remote Command Execution Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [SECURITY] [DSA 2570-1] openoffice.org security update
  • From: Yves-Alexis Perez
• Re: [BUGTRAQ]Security Advisory - TP-LINK TL-WR841N LFI - [UPDATE]
  • From: osoriojr
• [ MDVSA-2012:169 ] java-1.6.0-openjdk
  • From: security
• APPLE-SA-2012-11-01-1 iOS 6.0.1
  • From: Apple Product Security
• APPLE-SA-2012-11-01-2 Safari 6.0.2
  • From: Apple Product Security
• [security bulletin] HPSBMU02827 SSRT100924 rev.1 - HP Performance Insight with Sybase, Remote Denial of Service (DoS) and Loss of Data
  • From: security-alert
• [security bulletin] HPSBMU02815 SSRT100715 rev.4 - HP SiteScope SOAP Security Issues, Remote Disclosure of Information, Remote Code Execution
  • From: security-alert
• Re: [Full-disclosure] XSS, LFI and SQL Injection Vulnerabilities in Achievo
  • From: Henri Salo
• [security bulletin] HPSBUX02824 SSRT100970 rev.2 - HP-UX Running Java, Remote Execution of Arbitrary Code, and Other Vulnerabilities
  • From: security-alert
• [CVE-2012-5692] Invision Power Board <= 3.3.4 "unserialize()" PHP Code Execution Vulnerability
  • From: n0b0d13s
• [ MDVSA-2012:170 ] firefox
  • From: security
• [SECURITY] [DSA 2571-1] libproxy security update
  • From: Raphael Geissert
• [SECURITY] [DSA 2572-1] iceape security update
  • From: Thijs Kinkhorst
• PR11-07 Multiple peristent XSS, XSS, XSRF, offsite redirection and information disclosure flaws within CheckPoint/Sofaware firewalls
  • From: research
• Vulnerable MSVC++ 2008 runtime libraries distributed with and installed by eM client
  • From: Stefan Kanthak
• iCompel Digital Signage risks
  • From: Chris S
• XSS in answer my question plugin
  • From: marcelavbx
• VideoLAN VLC Media Player <= 2.0.4 Crash Bug
  • From: bingxuefenggu
• [CVE-2012-5777]EmpireCMS Template Parser Remote PHP Code Execution Vulnerability
  • From: machuanlei
• Multiple Vulnerabilities in LibreOffice
  • From: advisory
• SQL Injection Vulnerability in OrangeHRM
  • From: advisory
• multiple critical vulnerabilities in sophos products
  • From: Tavis Ormandy
• Wisecracker 1.0 - A high performance distributed cryptanalysis framework
  • From: Vikas N Kumar
• [security bulletin] HPSBHF02699 SSRT100592 rev.2 - HP ProLiant SL Advanced Power Manager (SL-APM), Remote User Validation Failure
  • From: security-alert
• Vulnerable, superfluous/outdated/deprecated/superseded 3rd party OCXs and DLLs distributed by and installed with Dataram RamDisk 4.0.0
  • From: Stefan Kanthak
• Sql injection in AJAX post Search wordpress plugin
  • From: marcelavbx
• Cross-Site Request Forgery (CSRF) in CMS Made Simple
  • From: advisory
• Cisco Security Advisory: Cisco Nexus 1000V Series Switch Software Release 4.2(1)SV1(5.2) Virtual Security Gateway Bypass Issue
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Secure Access Control System TACACS+ Authentication Bypass Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• APPLE-SA-2012-11-07-1 QuickTime 7.7.3
  • From: Apple Product Security
• Vulnerability Report on AWCM 2.2
  • From: Sooel Postman
• Cisco Security Advisory: Cisco Ironport Appliances Sophos Anti-virus Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• [ MDVSA-2012:171 ] icedtea-web
  • From: security
• [SECURITY] [DSA 2573-1] radsecproxy security update
  • From: Luciano Bello
• BananaDance Wiki b2.2 - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• [DC-2012-11-001] DefenseCode ThunderScan PHP Advisory: Wordpress WP e-Commerce Plugin Multiple Security Vulnerabilities
  • From: DefenseCode
• Eventy CMS v1.8 Plus - Multiple Web Vulnerablities
  • From: Vulnerability Lab
• Weak password encryption on Huawei products
  • From: roberto . paleari
• [OVSA20121112] OpenVAS Manager Vulnerable To Command Injection
  • From: Tim Brown
• Zoner Photo Studio v15 b3 - Buffer Overflow Vulnerabilities
  • From: Vulnerability Lab
• Re: [OVSA20121112] OpenVAS Manager Vulnerable To Command Injection
  • From: Tim Brown
• ESA-2012-055: RSA® Data Protection Manager Multiple Vulnerabilities
  • From: Security Alert
• Reflective XSS in uk cookie plugin
  • From: nauty . me04
• Re: Wisecracker 1.0 - A high performance distributed cryptanalysis framework
  • From: Jann Horn
• Re: Wisecracker 1.0 - A high performance distributed cryptanalysis framework
  • From: Vikas N Kumar
• 0-day vulnerabilities in Call of Duty MW3 and CryEngine 3
  • From: ReVuln
• Re: [oss-security] Re: [OVSA20121112] OpenVAS Manager Vulnerable To Command Injection
  • From: Jan Lieskovsky
• Multiple vulnerabilities in BabyGekko
  • From: advisory
• Security advisory for Bugzilla 4.4rc1, 4.2.4, 4.0.9 and 3.6.12
  • From: LpSolit
• iDev Rentals v1.0 - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• Re: Re: [oss-security] Re: [OVSA20121112] OpenVAS Manager Vulnerable To Command Injection
  • From: Michal Ambroz
• SEC Consult SA-20121115-0 :: Applicure dotDefender WAF format string vulnerability
  • From: SEC Consult Vulnerability Lab
• [CVE-2012-5858] [CVE-2012-5859] DoS/Authorization Bypass - Kies Air
  • From: cjlacayo
• [SECURITY] [DSA 2574-1] typo3-src security update
  • From: Florian Weimer
• DC4420 - London DEFCON - November meet - Tuesday 20th November
  • From: alien DC4420
• [SE-2012-01] Security vulnerabilities in Java SE (details released)
  • From: Security Explorations
• Open-Realty CMS 2.5.8 (2.x.x) <= Cross Site Request Forgery (CSRF) Vulnerability
  • From: YGN Ethical Hacker Group
• [SECURITY] [DSA 2575-1] tiff security update
  • From: Nico Golde
• [ MDVSA-2012:172 ] libproxy
  • From: security
• Akeni LAN v1.2.118 - Filter Bypass Vulnerability (Local)
  • From: Vulnerability Lab
• Manage Engine Exchange Reporter v4.1 - Multiple Web Vulnerabilites
  • From: Vulnerability Lab
• CVE-2012-4366: Insecure default WPA2 passphrase in multiple Belkin wireless routers
  • From: Jakob Lell
• n.runs-SA-2012.004 - SPLUNK Unauthenticated remote DoS
  • From: security
• [security bulletin] HPSBHF02821 SSRT100934 rev.1 - HP Integrated Lights-Out iLO3 and iLO4, Remote Disclosure of Information
  • From: security-alert
• SonicWALL CDP 5040 v6.x - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• Re: [SE-2012-01] Security vulnerabilities in Java SE (details released)
  • From: Security Explorations
• OSSIM 4.0.2 open-source SIEM solution does not verify .deb signatures
  • From: roman . fiedler
• FW: =| Security Advisory - TP-LINK TL-WR841N XSS (Cross Site Scripting) |=
  • From: Matan Azugi
• Wordpress Facebook Survey v1 - SQL Injection Vulnerability
  • From: Vulnerability Lab
• Re: CVE-2012-4366: Insecure default WPA2 passphrase in multiple Belkin wireless routers
  • From: Jakob Lell
• n.runs-SA-2012.004 - SPLUNK Unauthenticated remote DoS
  • From: security
• ManageEngine ServiceDesk 8.0 - Multiple Vulnerabilities
  • From: Vulnerability Lab
• Multiple vulnerabilities in dotProject
  • From: advisory
• [ MDVSA-2012:173 ] firefox
  • From: security
• [slackware-security] mozilla-firefox (SSA:2012-326-02)
  • From: Slackware Security Team
• [slackware-security] seamonkey (SSA:2012-326-01)
  • From: Slackware Security Team
• [slackware-security] mozilla-thunderbird (SSA:2012-326-03)
  • From: Slackware Security Team
• [ MDVSA-2012:174 ] libtiff
  • From: security
• FreeBSD Security Advisory FreeBSD-SA-12:06.bind
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-12:07.hostapd
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-12:08.linux
  • From: FreeBSD Security Advisories
• XSS Vulnerability in Simple Slider Wordpress Plugin
  • From: nauty . me04
• Twitter App 5.0 vulnerable to eavesdropping
  • From: Carlos Reventlov
• [SECURITY] [DSA 2576-1] trousers security update
  • From: Yves-Alexis Perez
• [oCERT-2012-001] multiple implementations denial-of-service via MurmurHash algorithm collision
  • From: Andrea Barisani
• VUPEN Security Research - Mozilla Firefox "DocumentViewerImpl" Class Remote Use-After-Free Vulnerability
  • From: VUPEN Security Research
• ESA-2012-057: EMC Smarts Network Configuration Manager Multiple Vulnerabilities
  • From: Security Alert
• ESA-2012-054: RSA ® Adaptive Authentication (On-Premise) Cross-Site Scripting Vulnerabilities
  • From: Security Alert
• [DC-2012-11-002] DefenseCode ThunderScan ASP.Net C# Advisory: BugTracker.Net Multiple Security Vulnerabilities
  • From: DefenseCode
• Forescout NAC (Network Access Control) multiple vulnerabilities
  • From: Joseph Sheridan
• [SE-2011-01] Additional materials released for SAT TV research
  • From: Security Explorations
• [SECURITY] [DSA 2578-1] rssh security update
  • From: Yves-Alexis Perez
• Re: rssh security announcement
  • From: Derek Martin
• Re: rssh security announcement
  • From: Russ Allbery
• Re: rssh security announcement
  • From: Nico Kadel-Garcia
• [ MDVSA-2012:175 ] libssh
  • From: security
• Re: rssh security announcement
  • From: Russ Allbery
• Oracle Exadata leaf switch logins
  • From: larry0
• ideo Lead Form Plugin Cross-Site Scripting Vulnerabilities which affects Wordpress URL
  • From: nauty . me04
• Wordpress Plugin Simple Gmail Login Stack Trace Vulnerability
  • From: nauty . me04
• Safend Data Protector Multiple Vulnerabilities
  • From: Joseph Sheridan
• VUPEN Security Research - Mozilla Firefox "imgRequestProxy" Remote Use-After-Free Vulnerability
  • From: VUPEN Security Research
• APPLE-SA-2012-11-29-1 Apple TV 5.1.1
  • From: Apple Product Security