Mail Index

• Thread Index

• [SECURITY] [DSA 2593-1] moin security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2594-1] virtualbox-ose security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2596-1] mediawiki-extensions security update
  • From: Jonathan Wiltshire
• [SECURITY] [DSA 2595-1] ghostscript security update
  • From: Moritz Muehlenhoff
• Re: CubeCart 5.0.7 and lower versions | Insecure Backup File Handling
  • From: YGN Ethical Hacker Group
• CubeCart 5.x | Multiple Cross Site Scripting Vulnerabilities
  • From: YGN Ethical Hacker Group
• Charybdis: Improper assumptions in the server handshake code may lead to a remote crash
  • From: muztapha
• CubeCart 5.x | Cross Site Request Forgery (CSRF) Vulnerability
  • From: YGN Ethical Hacker Group
• Re: GnuPG 1.4.12 and lower - memory access errors and keyring database corruption
  • From: Kurt Seifried
• AthCon 2013 CFP OPEN
  • From: cfp
• Re: GnuPG 1.4.12 and lower - memory access errors and keyring database corruption
  • From: Kurt Seifried
• ShakaCon 2013 - Call for Papers
  • From: Shakacon
• [ MDVSA-2013:001 ] gnupg
  • From: security
• AST-2012-014: Crashes due to large stack allocations when using TCP
  • From: Asterisk Security Team
• AST-2012-015: Denial of Service Through Exploitation of Device State Caching
  • From: Asterisk Security Team
• Aastra IP Telephone encrypted .tuz configuration file leakage
  • From: Timo Juhani Lindfors
• Simple Webserver 2.3-rc1 Directory Traversal
  • From: cwggenius
• CVE-2012-6493 - Nexpose Security Console - Cross-Site Request Forgery (CSRF)
  • From: i@xxxxxxxxxx
• CVE-2012-6494 - Nexpose Security Console - Session Hijacking
  • From: i@xxxxxxxxxx
• TomatoCart 1.x | Unrestricted File Creation
  • From: YGN Ethical Hacker Group
• CFP: InfoSec Southwest 2013
  • From: todb
• [SECURITY] [DSA 2597-1] rails security update
  • From: Nico Golde
• [SECURITY] [DSA 2598-1] weechat security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2599-1] nss security update
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 2600-1] cups security update
  • From: Nico Golde
• [security bulletin] HPSBOV02833 SSRT101043 rev.1 - OpenVMS running Java on Integrity Servers, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
  • From: security-alert
• Chrome for Android - UXSS via com.android.browser.application_id Intent extra
  • From: mbsdtest01
• Chrome for Android - Download Function Information Disclosure
  • From: mbsdtest01
• Chrome for Android - Android APIs exposed to JavaScript
  • From: mbsdtest01
• Chrome for Android - Bypassing SOP for Local Files By Symlinks
  • From: mbsdtest01
• Chrome for Android - Cookie theft from Chrome by malicious Android app
  • From: mbsdtest01
• Facebook for Android - Information Diclosure Vulnerability
  • From: mbsdtest01
• ESA-2013-001: EMC NetWorker Buffer Overflow vulnerability
  • From: Security Alert
• [security bulletin] HPSBUX02829 SSRT100883 rev.1 - HP-UX Running X Font Server (xfs) Software, Local Denial of Service (DoS), Unauthorized Access
  • From: security-alert
• [SECURITY] [DSA 2602-1] zendframework security update
  • From: Florian Weimer
• Cisco Security Advisory: Cisco Prime LAN Management Solution Command Execution Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Unified IP Phone Local Kernel System Call Input Validation Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [ MDVSA-2013:002 ] firefox
  • From: security
• Cross-Site Scripting (XSS) vulnerability in Quick.Cms and Quick.Cart
  • From: advisory
• Remote Buffer Overflow Vulnerability in Samsung Kies
  • From: advisory
• Nero MediaHome Multiple Remote DoS Vulnerabilities
  • From: advisory
• [ MDVSA-2013:003 ] rootcerts
  • From: security
• [SECURITY] [DSA 2603-1] emacs23 security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2604-1] rails security update
  • From: Thijs Kinkhorst
• [slackware-security] mozilla-firefox (SSA:2013-009-01)
  • From: Slackware Security Team
• [slackware-security] seamonkey (SSA:2013-009-03)
  • From: Slackware Security Team
• [slackware-security] mozilla-thunderbird (SSA:2013-009-02)
  • From: Slackware Security Team
• [ MDVSA-2013:004 ] tomcat5
  • From: security
• OrangeHRM 2.7.1 Vacancy Name Persistent XSS
  • From: SBV Research
• Wordpress gallery-3.8.3 plugin Arbitrary File Read Vulnerability
  • From: Beni_vanda
• Detailed examples of two vulnerabilities in whitelisting software: SE46 (Cryptzone) and Application Control (McAfee)
  • From: Arne Vidström
• DefenseCode Security Advisory (UPCOMING): Cisco Linksys Remote Preauth 0day Root Exploit
  • From: DefenseCode
• [SE-2012-01] 'Fix' for Issue 32 exploited by new Java 0-day code
  • From: Security Explorations
• [security bulletin] HPSBMU02838 SSRT100789 rev.1 - HP Serviceguard on Linux, Remote Denial of Service (DoS)
  • From: security-alert
• Re: Wordpress gallery-3.8.3 plugin Arbitrary File Read Vulnerability
  • From: Henri Salo
• CVE-2012-5641 Apache CouchDB Information disclosure via unescaped backslashes in URLs on Windows
  • From: Jan Lehnardt
• [SECURITY] [DSA 2606-1] proftpd-dfsg security update
  • From: Thijs Kinkhorst
• CVE-2012-5650 Apache CouchDB DOM based Cross-Site Scripting via Futon UI
  • From: Jan Lehnardt
• [SECURITY] [DSA 2605-1] asterisk security update
  • From: Thijs Kinkhorst
• CVE-2012-5649 Apache CouchDB JSONP arbitrary code execution with Adobe Flash
  • From: Jan Lehnardt
• Arbitrary File Upload and Code Execution in Accusoft Prizm Content Connect
  • From: Include Security Research
• [IA33] Serva v2.0.0 DNS Server Remote Denial of Service
  • From: Inshell Security
• Updated - CA20121018-01: Security Notice for CA ARCserve Backup
  • From: Kotas, Kevin J
• [IA34] Serva v2.0.0 HTTP Server GET Remote Denial of Service
  • From: Inshell Security
• [SECURITY] [DSA 2607-1] qemu-kvm security update
  • From: Florian Weimer
• [SECURITY] [DSA 2608-1] qemu security update
  • From: Florian Weimer
• Trimble® Infrastructure GNSS Series Receivers Cross Site Scripting (XSS) vulnerability
  • From: Rustein, Fara Denise \(LATCO - Buenos Aires\)
• [slackware-security] freetype (SSA:2013-015-01)
  • From: Slackware Security Team
• Re: Wordpress gallery-3.8.3 plugin Arbitrary File Read Vulnerability
  • From: Paolo Perego
• Re: [CVE-ID REQUEST] Atlassian Confluence - Multiple Cross-Site Request Forgery (CSRF) Vulnerabilities
  • From: rgilbert
• Re: [CVE-ID REQUEST] vBulletin - Multiple Open Redirects
  • From: rgilbert
• Cisco Security Advisory: Cisco ASA 1000V Cloud Firewall H.323 Inspection Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• DC4420 - 2013 CFP
  • From: Major Malfunction
• [SECURITY] [DSA 2609-1] rails security update
  • From: Florian Weimer
• Cisco Security Advisory Update v1.1: Cisco Unified IP Phone Local Kernel System Call Input Validation Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Secunia Research: Oracle Outside In Technology Paradox Database Handling Denial of Service
  • From: Secunia Research
• Secunia Research: Oracle Outside In Technology Paradox Database Handling Buffer Overflow
  • From: Secunia Research
• NSOADV-2013-001: DELL SonicWALL GMS/Viewpoint/Analyzer Authentication Bypass (/appliance/)
  • From: NSO Research
• NSOADV-2013-002: DELL SonicWALL GMS/Viewpoint/Analyzer Authentication Bypass (/sgms/)
  • From: NSO Research
• CVE-2012-6452 Axway Secure Messenger Username Disclosure
  • From: jason . doyle
• Recently-revised IETF I-Ds about IPv6 security
  • From: Fernando Gont
• [SE-2012-01] Java 7 Update 11 confirmed to be vulnerable
  • From: Security Explorations
• ESA-2013-008: EMC AlphaStor Multiple Vulnerabilities
  • From: Security Alert
• CA20121220-01: Security Notice for CA IdentityMinder [updated]
  • From: Williams, James K
• [SECURITY] [DSA 2605-2] asterisk regression update
  • From: Thijs Kinkhorst
• Mozilla Firefox and Microsoft Internet Explorer stall when using workaround from MS06-020 or MS06-069
  • From: Stefan Kanthak
• NoSuchCon CFP / 15-17 May 2013 / Paris, France
  • From: Jonathan Brossard
• (AUSCERT#20131775e) AusCERT 2013 Call For Presentations - closing in 10 days
  • From: auto-bulletins
• Multiple Vulnerabilities in Linksys WRT54GL
  • From: devnull
• Re: EMC Avamar: World writable cache files
  • From: security_alert
• Multiple SQL injection vulnerabilities in Cardoza Wordpress poll plugin
  • From: marcelavbx
• [SECURITY] [DSA 2610-1] ganglia security update
  • From: Yves-Alexis Perez
• [HITB-Announce] REMINDER: #HITB2013AMS Call for Papers Closes 8th Feb
  • From: Hafez Kamal
• [SECURITY] [DSA 2611-1] movabletype-opensource security update
  • From: Yves-Alexis Perez
• Looking for security contacts
  • From: DefenseCode
• Wordpress Developer Formatter CSRF Vulnerability
  • From: illSecResearchGroup
• SEC Consult SA-20130122-0 :: F5 BIG-IP XML External Entity Injection vulnerability
  • From: SEC Consult Vulnerability Lab
• SEC Consult SA-20130122-1 :: F5 BIG-IP SQL injection vulnerability
  • From: SEC Consult Vulnerability Lab
• CVE-2013-1402 - DigiLIBE Management Console - Execution After Redirect (EAR) Vulnerability
  • From: i
• Wordpress Valums Uploader - File Upload Vulnerability
  • From: Vulnerability Lab
• Re: [SE-2012-01] Java 7 Update 11 confirmed to be vulnerable
  • From: Security Explorations
• [security bulletin] HPSBMU02841 SSRT100724 rev.1 - HP Diagnostics Server, Remote Execution of Arbitrary Code
  • From: security-alert
• [slackware-security] mysql (SSA:2013-022-01)
  • From: Slackware Security Team
• DC4420 - London DEFCON - January 2013 meet. Tuesday 29th January 2013
  • From: Major Malfunction
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Wireless LAN Controllers
  • From: Cisco Systems Product Security Incident Response Team
• CVE ID Syntax Change - Call for Public Feedback
  • From: cve-id-change
• CVE-2013-0805 / CSNC-2013-001
  • From: stephan . rickauer
• Cross-Site Scripting (XSS) vulnerability in gpEasy
  • From: advisory
• SQL Injection Vulnerability in ImageCMS
  • From: advisory
• New Blog Post: Attacking the Windows 7/8 Address Space Randomization
  • From: king cope
• IPv6: How to avoid security issues with VPN leaks on dual-stack networks
  • From: Fernando Gont
• SEC Consult SA-20130124-0 :: Critical SSH Backdoor in multiple Barracuda Networks Products
  • From: SEC Consult Vulnerability Lab
• [SECURITY] [DSA 2612-1] ircd-ratbox security update
  • From: Moritz Muehlenhoff
• WordPress SolveMedia 1.1.0 CSRF Vulnerability
  • From: illSecResearchGroup
• [SE-2012-01] An issue with new Java SE 7 security features
  • From: Security Explorations
• [ MDVSA-2013:005 ] perl
  • From: security
• nCircle PureCloud Vulnerability Scanner - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• ESA-2013-010: EMC AlphaStor Buffer Overflow Vulnerability
  • From: Security Alert
• Fortinet FortiMail 400 IBE - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• Kohana Framework v2.3.3 - Directory Traversal Vulnerability
  • From: Vulnerability Lab
• [KIS-2013-01] DataLife Engine 9.7 (preview.php) PHP Code Injection Vulnerability
  • From: Egidio Romano
• APPLE-SA-2013-01-28-1 iOS 6.1 Software Update
  • From: Apple Product Security
• APPLE-SA-2013-01-28-2 Apple TV 5.2
  • From: Apple Product Security
• Unauthenticated remote access to D-Link DCS cameras
  • From: roberto
• XSS in Elgg 1.8.12, 1.7.16 (core module "Twitter widget")
  • From: Moritz Naumann
• Adobe Reader XI versions are vulnerable to a heap overflow
  • From: n1s0o
• Re: Wordpress Valums Uploader - File Upload Vulnerability
  • From: fineuploader
• Cisco Security Advisory: Portable SDK for UPnP Devices Contains Buffer Overflow Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• [SECURITY] [DSA 2613-1] rails security update
  • From: Thijs Kinkhorst