Mail Index

• Thread Index

• GreHack 2013 - CFP EXTENDED TO JULY,16 - Conf: Nov. 15, Grenoble, France
  • From: F. Duchene
• [slackware-security] mozilla-thunderbird (SSA:2013-180-02)
  • From: Slackware Security Team
• joomla com_football Components Sql Injection vulnerability
  • From: iedb . team
• [slackware-security] mozilla-firefox (SSA:2013-180-01)
  • From: Slackware Security Team
• Re: ESA-2013-029: RSA SecurID Sensitive Information Disclosure Vulnerability
  • From: security_alert
• [security bulletin] HPSBST02846 SSRT100798 rev.2 - HP LeftHand Virtual SAN Appliance hydra, Remote Execution of Arbitrary Code
  • From: security-alert
• [security bulletin] HPSBHF02888 rev.1 - HP ProCurve, H3C, 3COM Routers and Switches, Remote Information Disclosure and Code Execution
  • From: security-alert
• [SECURITY] CVE-2013-1777: Apache Geronimo 3 RMI classloader exposure
  • From: Jarek Gawor
• [CVE-2013-4694] WinAmp v5.63 gen_jumpex.dll and ml_local.dll Multiple Buffer Overflows
  • From: Inshell Security
• [CVE-2013-4695] WinAmp v5.63 gen_ff.dll links.xml Value Parsing Invalid Pointer Dereference
  • From: Inshell Security
• Re: joomla com_football Components Sql Injection vulnerability
  • From: Packet Storm
• Linksys EA - 2700, 3500, 4200, 4500 w/ Lighttpd 1.4.28 Unauthenticated Remote Administration Access
  • From: kyle Lovett
• [ MDVSA-2013:187 ] apache-mod_security
  • From: security
• WordPress feed plugin Sql Injection
  • From: iedb . team
• [ MDVSA-2013:188 ] otrs
  • From: security
• [ MDVSA-2013:189 ] wordpress
  • From: security
• [ MDVSA-2013:190 ] autotrace
  • From: security
• WordPress category-grid-view-galler plugin Cross-Site Scripting Vulnerabilities
  • From: iedb . team
• Real player resource exhaustion Vulnerability
  • From: akshay . vaghela
• [ MDVSA-2013:191 ] fail2ban
  • From: security
• [ MDVSA-2013:192 ] php-radius
  • From: security
• [SECURITY] [DSA 2718-1] wordpress security update
  • From: Yves-Alexis Perez
• [security bulletin] HPSBUX02893 rev.1 - HP-UX Apache Running Tomcat Servlet Engine, Remote Denial of Service (DoS), Cross Site Scripting (XSS)
  • From: security-alert
• [security bulletin] HPSBUX02889 SSRT101252 rev.1 - HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
  • From: security-alert
• APPLE-SA-2013-07-02-1 Security Update 2013-003
  • From: Apple Product Security
• Slots open for Security Projects :Open Source Showcase at AppSec Research / EU 2013
  • From: Dirk W
• Multiple Vulnerabilities in Kasseler CMS
  • From: advisory
• Multiple Vulnerabilities in OpenX
  • From: advisory
• Re: Linksys EA - 2700, 3500, 4200, 4500 w/ Lighttpd 1.4.28 Unauthenticated Remote Administration Access
  • From: krlovett
• re: Real player resource exhaustion Vulnerability
  • From: security curmudgeon
• Mobile Atlas Creator 1.9.12 - Persistent Command Injection Vulnerability
  • From: Vulnerability Lab
• AVAST Internet Security Suite - Persistent Vulnerabilities
  • From: Vulnerability Lab
• AVAST Universal Core Installer - Multiple Vulnerabilities
  • From: Vulnerability Lab
• Paypal Bug Bounty #102 QR Dev Labs - Auth Bypass Vulnerability
  • From: Vulnerability Lab
• AVAST Antivirus v8.0.1489 - Multiple Core Vulnerabilities
  • From: Vulnerability Lab
• LSE Leading Security Experts GmbH - LSE-2013-07-03 - rsyslog ElasticSearch Plugin
  • From: LSE Leading Security Experts GmbH (Security Advisories)
• [SECURITY] [DSA 2720-1] icedove security update
  • From: Moritz Muehlenhoff
• OS-Command Injection via UPnP Interface in multiple D-Link devices
  • From: devnull
• [oCERT-2013-001] File Roller path sanitization errors
  • From: Daniele Bianco
• [SECURITY] [DSA 2721-1] nginx security update
  • From: Nico Golde
• VUPEN Security Research - Mozilla Firefox Maintenance Service Privilege Escalation Vulnerabilities
  • From: VUPEN Security Research
• VUPEN Security Research - Oracle Java Preloader Click-2-Play Warning Bypass Vulnerability
  • From: VUPEN Security Research
• Avira Analysis Web Service - SQL Injection Vulnerability
  • From: Vulnerability Lab
• Authentication bypass in D-Link routers
  • From: doylej . ia
• ESA-2013-050: EMC Replication Manager Sensitive Information Disclosure Vulnerability
  • From: Security Alert
• ESA-2013-052: RSA(r) Authentication Manager Sensitive Information Disclosure Vulnerability
  • From: Security Alert
• Authentication bypass in D-Link devices (session cookies not validated)
  • From: doylej . ia
• Re: OS-Command Injection via UPnP Interface in multiple D-Link devices
  • From: krlovett
• Re: OS-Command Injection via UPnP Interface in multiple D-Link devices
  • From: devnull
• [security bulletin] HPSBST02890 rev.2 - HP StoreOnce D2D Backup System, Remote Unauthorized Access and Modification
  • From: security-alert
• Re: [security bulletin] HPSBST02890 rev.2 - HP StoreOnce D2D Backup System, Remote Unauthorized Access and Modification
  • From: Neusbeer
• Re: WordPress feed plugin Sql Injection
  • From: Henri Salo
• Re: re: Real player resource exhaustion Vulnerability
  • From: akshay . vaghela
• [HITB-Announce] REMINDER: #HITB2013KUL CFP Closes 25th July
  • From: Hafez Kamal
• SEC Consult SA-20130709-0 :: Denial of service vulnerability in Apache CXF
  • From: SEC Consult Vulnerability Lab
• Re: re: Real player resource exhaustion Vulnerability
  • From: Henri Salo
• Zoom X4/X5 ADSL Modem and Router -Unauthenticated Remote Root Command Execution
  • From: kyle Lovett
• (CVE-2013-1059) Linux Kernel libceph Null Pointer Dereference Vulnerability
  • From: chanam . park
• [security bulletin] HPSBST02896 rev.1 - HP StoreVirtual Storage, Remote Unauthorized Access
  • From: security-alert
• Re: Project Pier Web Vulnerabilities
  • From: the infinitenigma
• Re: Cisco/Linksys E1200 N300 Reflected XSS
  • From: the infinitenigma
• [slackware-security] dbus (SSA:2013-191-01)
  • From: Slackware Security Team
• VULNERABLE (3rd party) components in Adobe Reader 11.0.03, and dangling reference to Acrobat.exe
  • From: Stefan Kanthak
• [Foreground Security 2013-001]: Joomla AICONTACTSAFE 2.0.19 Extension Cross-Site Scripting (XSS) vulnerability
  • From: Jose Carlos de Arriba
• Air Drive Plus v2.4 iOS - Arbitrary File Upload Vulnerability
  • From: Vulnerability Lab
• [SECURITY] [DSA 2719-1] poppler security update
  • From: Michael Gilbert
• Hard-coded accounts on multiple network cameras
  • From: roberto . paleari
• [ MDVSA-2013:193 ] apache
  • From: security
• Facebook Url Redirection Vuln.
  • From: CANSIN YILDIRIM
• Re: Wordpress wp-private-messages Plugin Sql Injection vulnerability
  • From: Henri Salo
• [ MDVSA-2013:194 ] kernel
  • From: security
• Re: [Full-disclosure] XSS and SQL Injection Vulnerabilities in MiniBB
  • From: Henri Salo
• Re: Facebook Url Redirection Vuln.
  • From: Anthony Dubuissez
• Re: Facebook Url Redirection Vuln.
  • From: Jann Horn
• Windows 7/8 admin account installation password stored in the clear in LSA Secrets
  • From: Dnegel X.
• Re: Windows 7/8 admin account installation password stored in the clear in LSA Secrets
  • From: Rob
• CVE-2012-6297 - Command Injection via CSRF on DD-WRT v24-sp2
  • From: cyoung
• Re: Windows 7/8 admin account installation password stored in the clear in LSA Secrets
  • From: Dnegel X.
• CVE-2013-3568 - Linksys CSRF + Root Command Injection
  • From: vuln-report
• Re: Windows 7/8 admin account installation password stored in the clear in LSA Secrets
  • From: Marco Ivaldi
• Multiple vulnerabilities in McAfee ePO 4.6.6
  • From: NCIRC INFOSEC EVAL
• Multiple vulnerabilities in BMC SERVICE DESK EXPRESS (SDE) Version 10.2.1.95
  • From: NCIRC INFOSEC EVAL
• [security bulletin] HPSBST02890 rev.3 - HP StoreOnce D2D Backup System, Remote Unauthorized Access, Modification, and Escalation of Privilege
  • From: security-alert
• [Foreground Security 2013-002]: Corda Path Disclosure and XSS
  • From: Adam Willard
• MiniUPnPd Information Disclosure (CVE-2013-2600)
  • From: cyoung
• Re: MiniUPnPd Information Disclosure (CVE-2013-2600)
  • From: Jeffrey Walton
• Botconf 2013 - Call for short talks - Deadline Aug 31 2013
  • From: Eric Freyssinet
• Full Disclosure ASUS Wireless Routers Ten Models - Multiple Vulnerabilities on AiCloud enabled units
  • From: kyle Lovett
• [waraxe-2013-SA#106] - Multiple Vulnerabilities in Saurus CMS 4.7.1
  • From: come2waraxe
• [CVE-2012-6458] Multiple Persistent XSS in silverstripe-ecommerce
  • From: Craig Young
• Ruxcon 2013 Final Call For Papers
  • From: cfp
• [ MDVSA-2013:195 ] php
  • From: security
• [ MDVSA-2013:196 ] java-1.6.0-openjdk
  • From: security
• Huawei E587 3G Mobile Hotspot Web UI Cross Site Scripting vulnerability
  • From: Frédéric Basse
• [CVE-2013-2612] Huawei E587 3G Mobile Hotspot Command Injection
  • From: Frédéric Basse
• [SECURITY] [DSA 2722-1] openjdk-7 security update
  • From: Moritz Muehlenhoff
• CVE-2013-4788 - Eglibc PTR MANGLE bug
  • From: Hector Marco
• [security bulletin] HPSBPV02891 rev.1 - HP ProCurve Switches, Remote Unauthorized Information Disclosure
  • From: security-alert
• Squid-3.3.5 DoS PoC
  • From: king cope
• [CVE-2013-2745, CVE-2013-2738, CVE-2013-2739] MiniDLNA v1.0.25 Multiple Vulnerabilities
  • From: Craig Young
• Re: Multiple vulnerabilities in McAfee ePO 4.6.6
  • From: Harold_Toomey
• Nikon CoolPix L Series Fw1.0 - Information Disclosure Issue
  • From: Vulnerability Lab
• FTP Sprite v1.2.1 iOS - Persistent Web Vulnerability
  • From: Vulnerability Lab
• Barracuda CudaTel 2.6.02.040 - Client Side Cross Site Scripting Vulnerability
  • From: Vulnerability Lab
• Dell Kace 1000 SMA v5.4.70402 - Persistent Vulnerabilities
  • From: Vulnerability Lab
• Olive File Manager v1.0.1 iOS - Multiple Vulnerabilities
  • From: Vulnerability Lab
• Re: [ MDVSA-2013:195 ] php
  • From: Gabriel Maggiotti
• [CVE-2013-4763|CVE-2013-4764] Vulnerability in built-in system app of Samsung Galaxy S3/S4
  • From: 醉麻
• Voice Logger astTECS - bypass login & arbitrary file download
  • From: Michał Błaszczak
• [security bulletin] HPSBMU02870 SSRT101012 rev.2 - HP Network Node Manager I (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Unauthorized Access
  • From: security-alert
• [security bulletin] HPSBGN02882 rev.1 - HP Database and Middleware Automation (DMA) using SSL, Remote Disclosure of Information
  • From: security-alert
• [slackware-security] php (SSA:2013-197-01)
  • From: Slackware Security Team
• XSS Vulnerabilities in OpenCms
  • From: advisory
• ESA-2013-055: EMC Avamar Multiple Vulnerabilities
  • From: Security Alert
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified Communications Manager
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Intrusion Prevention System Software
  • From: Cisco Systems Product Security Incident Response Team
• Re: Full Disclosure ASUS Wireless Routers Ten Models - Multiple Vulnerabilities on AiCloud enabled units
  • From: krlovett
• [security bulletin] HPSBHF02888 rev.2 - HP Network Products including H3C and 3COM Routers and Switches, Remote Information Disclosure and Code Execution
  • From: security-alert
• Re: Full Disclosure ASUS Wireless Routers Ten Models - Multiple Vulnerabilities on AiCloud enabled units
  • From: krlovett
• [SECURITY] [DSA 2723-1] php5 security update
  • From: Florian Weimer
• WiFly 1.0 Pro iOS - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• Flux Player v3.1.0 iOS - File Include & Arbitrary File Upload Vulnerability
  • From: Vulnerability Lab
• Barracuda CudaTel 2.6.02.04 - Multiple Client Side Cross Site Vulnerabilities (Bug Bounty #17)
  • From: Vulnerability Lab
• ePhoto Transfer v1.2.1 iOS - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• Dell PacketTrap MSP RMM 6.6.x - Multiple Persistent Web Vulnerabilities
  • From: Vulnerability Lab
• [security bulletin] HPSBST02896 rev.2 - HP StoreVirtual Storage, Remote Unauthorized Access
  • From: security-alert
• [SE-2012-01] New Reflection API affected by a known 10+ years old attack
  • From: Security Explorations
• Symantec Workspace Virtualization 6.4.1895.0 Local Kernel Mode Privilege Escalation Exploit
  • From: th_decoder
• [security bulletin] HPSBMU02900 rev.1 - HP System Management Homepage (SMH) running on Linux and Windows, Multiple Remote and Local Vulnerabilities
  • From: security-alert
• [SECURITY] [DSA 2725-1] tomcat6 security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2724-1] chromium-browser security update
  • From: Michael Gilbert
• DeepSec 2013 - Call for Papers - REMINDER
  • From: deepsec
• Western Digital My Net N600, N750, N900 and N900C - Plain text disclosure of administrative credentials
  • From: kyle Lovett
• SEC Consult SA-20130719-0 :: Multiple vulnerabilities in Sybase EAServer
  • From: SEC Consult Vulnerability Lab
• Re: [Full-disclosure] XSS Vulnerabilities in Serendipity
  • From: Henri Salo
• [security bulletin] HPSBMU02900 rev.2 - HP System Management Homepage (SMH) running on Linux and Windows, Multiple Remote and Local Vulnerabilities
  • From: security-alert
• Download Lite v4.3 iOS - Persistent File Web Vulnerability
  • From: Vulnerability Lab
• Barracuda LB, SVF, WAF & WEF - Multiple Vulnerabilities
  • From: Vulnerability Lab
• Barracuda CudaTel 2.6.02.040 - Remote SQL Injection Vulnerability
  • From: Vulnerability Lab
• Re: [Full-disclosure] [SE-2012-01] New Reflection API affected by a known 10+ years old attack
  • From: Jeffrey Walton
• Samsung TV - DoS vulnerability
  • From: malik
• DirectShow Arbitrary Memory Overwrite Vulnerability ms13-056
  • From: Andres Gomez Ramirez
• [CVE-2013-2250] Apache OFBiz Nested expression evaluation allows remote users to execute arbitrary UEL functions in OFBiz
  • From: Jacopo Cappellato
• [CVE-2013-2137] Apache OFBiz XSS vulnerability in the "View Log" screen of the Webtools application
  • From: Jacopo Cappellato
• Barracuda CudaTel 2.6.02.040 - SQL Injection Vulnerability
  • From: Vulnerability Lab
• Full Disclosure - WD My Net N600, N750, N900, N900C - Plain Text Disclosure of Admin Credentials
  • From: kyle Lovett
• Dell Kace 1000 SMA 5.4.742 - SQL Injection Vulnerabilities
  • From: Vulnerability Lab
• Juniper Secure Access XSS Vulnerability
  • From: Anil Pazvant
• SurgeFtp Server BufferOverflow Vulnerability
  • From: Anil Pazvant
• Defense in depth -- the Microsoft way (part 4)
  • From: Stefan Kanthak
• Photo Server 2.0 iOS - Multiple Critical Vulnerabilities
  • From: Vulnerability Lab
• Re: Samsung TV - DoS vulnerability
  • From: malik
• CORE-2013-0705 - XnView Buffer Overflow Vulnerability
  • From: CORE Advisories Team
• CORE-2013-0701 - Artweaver Buffer Overflow Vulnerability
  • From: CORE Advisories Team
• [ MDVSA-2013:197 ] mysql
  • From: security
• Orbit Downloader versions causing massive SYN flooding. Cyberoam cautions!
  • From: bhadresh . k . patel
• CORE-2013-0613 - FOSCAM IP-Cameras Improper Access Restrictions
  • From: CORE Advisories Team
• [ MDVSA-2013:198 ] libxml2
  • From: security
• Re: [Full-disclosure] nginx exploit documentation, about a generic way to exploit Linux targets
  • From: Albert Puigsech Galicia
• Cross-Site Scripting (XSS) in Magnolia CMS
  • From: advisory
• Cross-Site Scripting (XSS) in Duplicator WordPress Plugin
  • From: advisory
• Easy Blog by JM LLC - Multiple Vulnerabilities
  • From: Sp3ctrecore ­
• Cisco Security Advisory: Multiple Vulnerabilities in the Cisco Video Surveillance Manager
  • From: Cisco Systems Product Security Incident Response Team
• Basic Forum by JM LLC - Multiple Vulnerabilities
  • From: Sp3ctrecore ­
• iPic Sharp v1.2.1 Wifi iOS - Persistent Foldername Web Vulnerability
  • From: Vulnerability Lab
• [security bulletin] HPSBGN02905 rev.1 - HP LoadRunner, Remote Code Execution and Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBGN02906 rev.1 - HP Application Lifecycle Management Quality Center (ALM), Remote Cross Site Scripting (XSS)
  • From: security-alert
• [ MDVSA-2013:199 ] squid
  • From: security
• [SECURITY] [DSA 2726-1] php-radius security update
  • From: Thijs Kinkhorst
• Xymon Systems and Network Monitor - remote file deletion vulnerability
  • From: Henrik Størner
• [security bulletin] HPSBMU02894 rev.1 - HP Network Node Manager I (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Denial of Service (DoS), Unauthorized Access, Execution of Arbitrary Code
  • From: security-alert
• [SECURITY] [DSA 2727-1] openjdk-6 security update
  • From: Moritz Muehlenhoff
• CA20130725-01: Security Notice for CA Service Desk Manager
  • From: Kotas, Kevin J
• CVE-2013-2189: OpenOffice DOC Memory Corruption Vulnerability
  • From: Herbert Duerr
• CVE-2013-4156: OpenOffice DOCM Memory Corruption Vulnerability
  • From: Herbert Duerr
• Re: [Full-disclosure] nginx exploit documentation, about a generic way to exploit Linux targets
  • From: Kingcope
• Meet the folks of ws-attacker, BeEF, WAHH, sqlmap, Zed Attack Proxy, OWASP Top10, DOMinator, Minion, Mallodroid, and the inglorious bastards aka HackPra Allstars
  • From: Dirk Wetter
• SEC Consult SA-20130726-0 :: Multiple vulnerabilities - Surveillance via Symantec Web Gateway
  • From: SEC Consult Vulnerability Lab
• [ MDVSA-2013:200 ] ruby
  • From: security
• [ MDVSA-2013:201 ] ruby
  • From: security
• FreeBSD Security Advisory FreeBSD-SA-13:08.nfsserver
  • From: FreeBSD Security Advisories
• [SECURITY] [DSA 2728-1] bind9 security update
  • From: Salvatore Bonaccorso
• FreeBSD Security Advisory FreeBSD-SA-13:07.bind
  • From: FreeBSD Security Advisories
• Defense in depth -- the Microsoft way (part 5): sticky, persistent vulnerabilities
  • From: Stefan Kanthak
• [Announcement] CHMag - Call for Articles
  • From: abhijeet
• Re: DEFCON London - DC4420 July - social event - Tuesday 30th July 2013
  • From: Tony Naggs
• [SECURITY] [DSA 2729-1] openafs security update
  • From: Moritz Muehlenhoff
• Private Photos v1.0 iOS - Persistent Path Web Vulnerability
  • From: Vulnerability Lab
• Private Photos v1.0 iOS - Persistent Path Web Vulnerability
  • From: Vulnerability Lab
• WebDisk 3.0.2 PhotoViewer iOS - Command Execution Vulnerability
  • From: Vulnerability Lab
• [ MDVSA-2013:202 ] bind
  • From: security
• DEFCON London - DC4420 July - social event - Tuesday 30th July 2013
  • From: Tony Naggs
• ESA-2013-033: EMC NetWorker Information Disclosure Vulnerability
  • From: Security Alert
• WorldCIST'14 - World Conference on IST, 15 - 18 April 2014, at Madeira Island
  • From: maria Lemos
• [security bulletin] HPSBGN02904 rev.1 - HP SiteScope running SOAP, Remote Code Execution
  • From: security-alert
• [SECURITY] [DSA 2731-1] libgcrypt11 security update
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 2730-1] gnupg security update
  • From: Thijs Kinkhorst
• [ MDVSA-2013:203 ] phpmyadmin
  • From: security
• [ MDVSA-2013:204 ] wireshark
  • From: security
• MojoPortal XSS
  • From: vulns
• NGS00434 Technical Advisory: Oracle Hyperion 11 Directory Traversal
  • From: NCC Group Research
• NGS00500 Technical Advisory: Bit51 Better WP Security Plugin - Unauthenticated Stored XSS to RCE
  • From: NCC Group Research