Mail Index

• Thread Index

• [ MDVSA-2013:264 ] firefox
  • From: security
• [security bulletin] HPSBMU02933 rev.1 - HP SiteScope, issueSiebelCmd SOAP Request, Remote Code Execution
  • From: security-alert
• [security bulletin] HPSBMU02872 SSRT101185 rev.3 - HP Service Manager, Remote Disclosure of Information, Cross Site Scripting(XSS)
  • From: security-alert
• [security bulletin] HPSBMU02932 rev.1 - HP Application LifeCycle Management, ALM client component, Remote Execution of Arbitrary Code
  • From: security-alert
• [security bulletin] HPSBMU02935 rev.1 - HP LoadRunner Virtual User Generator, Remote Code Execution
  • From: security-alert
• [SECURITY] [DSA 2789-1] strongswan security update
  • From: Yves-Alexis Perez
• [security bulletin] HPSBMU02874 SSRT101184 rev.2 - HP Service Manager, Java Runtime Environment (JRE) Security Update
  • From: security-alert
• [security bulletin] HPSBMU02934 rev.1 - HP Application LifeCycle Management, GossipService SOAP Request, Remote Code Execution
  • From: security-alert
• pdirl PHP Directory Listing 1.0.4 - Cross Site Scripting Web Vulnerabilities
  • From: Vulnerability Lab
• [security bulletin] HPSBMU02931 rev.2 - HP Service Manager, Injection of Arbitrary Code, Remote Privilege Elevation, Remote Disclosure of Privileged Information and Cross Site Scripting (XSS)
  • From: security-alert
• [SECURITY] [DSA 2790-1] nss security update
  • From: Salvatore Bonaccorso
• [slackware-security] mozilla-thunderbird (SSA:2013-307-01)
  • From: Slackware Security Team
• XSS and CSRF Horde Groupware Web mail Edition
  • From: m . benetrix
• CSRF Horde Groupware Web mail Edition
  • From: m . benetrix
• XADV-2013003 Linux Kernel eCryptfs write_tag_3_packet Heap Buffer Overflow Vulnerability
  • From: geinblues
• [SECURITY] [DSA 2791-1] tryton-client security update
  • From: Florian Weimer
• Cisco Mars Cross-Site Scripting Vulnerability - CVE-2013-5563
  • From: g . delvecchio
• [SECURITY] [DSA 2792-1] wireshark security update
  • From: Salvatore Bonaccorso
• ESA-2013-070: EMC Documentum Cross Site Scripting Vulnerability.
  • From: Security Alert
• ESA-2013-073: EMC Documentum eRoom Multiple Cross Site Scripting Vulnerabilities.
  • From: Security Alert
• [ISecAuditors Security Advisories] SQL Injection vulnerability in "Project'Or RIA" allow arbitrary access to the database and the file system
  • From: ISecAuditors Security Advisories
• [ISecAuditors Security Advisories] Multiple XSS vulnerabilities in "Project'Or RIA"
  • From: ISecAuditors Security Advisories
• [ISecAuditors Security Advisories] LinkedIn social network is affected by Persistent Cross-Site Scripting vulnerability
  • From: ISecAuditors Security Advisories
• wordpress jigoshop Plugin path disclosure vulnerabilities
  • From: iedb . team
• [SOJOBO-ADV-13-03] - Wordpress plugin Gallery Bank 2.0.19 Reflected Cross Site Scripting
  • From: advisories
• Open-Xchange Security Advisory 2013-11-06
  • From: Martin Braun
• SQL Injection in appRain
  • From: High-Tech Bridge Security Research
• CORE-2013-0704 - Vivotek IP Cameras RTSP Authentication Bypass
  • From: CORE Advisories Team
• Cisco Security Advisory: Cisco TelePresence VX Clinical Assistant Administrative Password Reset Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• CVE-2013-4425: Private key disclosure, Osirix (lite, 64bit and FDA cleader version) (Medical Application)
  • From: Dirk-Willem van Gulik
• Cisco Security Advisory: Cisco WAAS Mobile Remote Code Execution Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• CFP BugCON 2014 - Mexico City
  • From: Carlos A. Lozano
• Cisco Security Advisory: Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Apple MacOSX 10.9 Hard Link Memory Corruption
  • From: submit
• RE: FP BugCON 2014 - Mexico City
  • From: Tamara Vera
• Word 2003 SP2 .doc fork bomb on WinXP SP3
  • From: jsibley1
• WorldCIST'14 - World Conference on IST; Submission deadline: November 29
  • From: Maria Lemos
• Belkin WiFi NetCam video stream backdoor with unchangeable admin/admin credentials
  • From: Johannes . Ernst
• Re: Word 2003 SP2 .doc fork bomb on WinXP SP3
  • From: Stefan Kanthak
• [SECURITY] [DSA 2793-1] libav security update
  • From: Moritz Muehlenhoff
• XADV-2013003 Linux Kernel bt8xx Video Driver IOCTL Heap Overflow
  • From: geinblues
• [ MDVSA-2013:265 ] kernel
  • From: security
• Vulnerability in Pydio/AjaXplorer < = 5.0.3
  • From: advisories
• Vulnerability in Pydio/AjaXplorer <= 5.0.3
  • From: advisories
• [SECURITY] [DSA 2794-1] spip security update
  • From: Salvatore Bonaccorso
• Re: Word 2003 SP2 .doc fork bomb on WinXP SP3
  • From: jsibley1
• vulnerability issue for DB2 express
  • From: bhavyasethi . atcs
• XSS on Juniper JUNOS 11.4 Embedthis Appweb 3.2.3
  • From: info
• WebSurgery v1.1 released (Web application security testing suite)
  • From: John Stamatakis
• WebSurgery v1.1 released (Web application security testing suite)
  • From: John Stamatakis
• RUCKUS ADVISORY ID 111113-1: Authenticated code injection vulnerability in ZoneDirector administrative web interface
  • From: Ruckus Product Security Team
• Re: Apple MacOSX 10.9 Hard Link Memory Corruption
  • From: Stefan Arentz
• Fwd: vulnerability issue for DB2 express
  • From: Jonathan Yu
• Fwd: RUCKUS ADVISORY ID 111113-2: Authenticated persistent cross site scripting vulnerability in guest pass provisioning web interface on ZoneDirector controllers
  • From: Ruckus Product Security Team
• [security bulletin] HPSBHF02939 rev.1 - HP Integrated Lights-Out 4 (iLO4), Remote Cross Site Scripting (XSS), Unauthorized Disclosure of Information
  • From: security-alert
• [SECURITY] [DSA 2795-1] lighttpd security update
  • From: Michael Gilbert
• LastPass Android container PIN and auto-wipe security feature bypass (CVE-2013-5113/5114)
  • From: Chris John Riley
• Cross-Site Scripting (XSS) in Zikula Application Framework
  • From: High-Tech Bridge Security Research
• [SECURITY] [DSA 2796-1] torque security update
  • From: Salvatore Bonaccorso
• Android Superuser shell character escape vulnerability
  • From: Kevin Cernekee
• Superuser "su --daemon" vulnerability on Android >= 4.3
  • From: Kevin Cernekee
• Superuser unsanitized environment vulnerability on Android <= 4.2.x
  • From: Kevin Cernekee
• [SECURITY] [DSA 2797-1] icedove security update
  • From: Moritz Muehlenhoff
• Dahua DVR Authentication Bypass - CVE-2013-6117
  • From: Jake Reynolds
• Re: DS3 Authentication Server - Multiple Issues
  • From: support
• Re: Cisco Security Advisory: Multiple Vulnerabilities in Cisco Prime Data Center Network Manager
  • From: Rodzbry27
• Re: Cisco Security Advisory: Multiple Vulnerabilities in Cisco Prime Data Center Network Manager
  • From: Rodzbry27
• Re: [security bulletin] HPSBUX02922 SSRT101305 rev.1 - HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
  • From: Rodzbry27
• APPLE-SA-2013-11-14-1 iOS 7.0.4
  • From: Apple Product Security
• Re: Superuser unsanitized environment vulnerability on Android <= 4.2.x
  • From: Kevin Cernekee
• NEW VMSA-2013-0013 VMware Workstation host privilege escalation vulnerability
  • From: "VMware Security Response Center"
• Re: Superuser unsanitized environment vulnerability on Android <= 4.2.x
  • From: Gleb O. Raiko
• Cross-Site Scripting (XSS) in Tweet Blender Wordpress Plugin
  • From: High-Tech Bridge Security Research
• [CVE-2013-6356] Avira Secure Backup v1.0.0.1 Multiple Registry Key Value Parsing Local Buffer Overflow Vulnerability
  • From: Julien Ahrens
• XADV-2013005 FreeBSD 10 <= nand Driver IOCTL Kernel Memory Leak Bug
  • From: geinblues
• XADV-2013006 FreeBSD <= 10 kernel qlxge/qlxgbe Driver IOCTL Multiple Kernel Memory Leak Bugs
  • From: geinblues
• [SECURITY] [DSA 2795-2] lighttpd regression update
  • From: Michael Gilbert
• [SECURITY] [DSA 2797-1] chromium-browser security update
  • From: Michael Gilbert
• [SECURITY] [DSA 2798-1] curl security update
  • From: Michael Gilbert
• Information Security Forecast 2014
  • From: Jeimy Cano
• [OVSA20131108] OpenVAS Manager And OpenVAS Administrator Vulnerable To Partial Authentication Bypass
  • From: Tim Brown
• Re: Fwd: vulnerability issue for DB2 express
  • From: shatter
• [SOJOBO-ADV-13-04] - PHP-Nuke 8.2.4 multiple vulnerabilities
  • From: advisories
• [slackware-security] mozilla-firefox (SSA:2013-322-01)
  • From: Slackware Security Team
• [slackware-security] openssh (SSA:2013-322-02)
  • From: Slackware Security Team
• [slackware-security] samba (SSA:2013-322-03)
  • From: Slackware Security Team
• PayPal Inc Bug Bounty #65 China - Redirect Web Vulnerability
  • From: Vulnerability Lab
• [slackware-security] seamonkey (SSA:2013-322-04)
  • From: Slackware Security Team
• PayPal Inc Bug Bounty #42 - Persistent POST Inject Vulnerability
  • From: Vulnerability Lab
• Paypal Inc Bug Bounty #47 ALYZ - Persistent Search Vulnerability
  • From: Vulnerability Lab
• SKIDATA RFID Freemotion.Gate Unauthenticated Web Service Aribtrary Remote Command Execution
  • From: Dennis Kelly
• FreeBSD Security Advisory FreeBSD-SA-13:14.openssh
  • From: FreeBSD Security Advisories
• 16TH AVAR INTERNATIONAL SECURITY CONFERENCE 2013 - (4th-7th Dec'13, Chennai. India)
  • From: Gregory Panakkal
• [ MDVSA-2013:266 ] java-1.6.0-openjdk
  • From: security
• [ MDVSA-2013:267 ] java-1.7.0-openjdk
  • From: security
• ESA-2013-078: EMC Document Sciences xPression Multiple Vulnerabilities
  • From: Security Alert
• pineapp mailsecure remote no authenticated privilege escalation & remote execution code
  • From: rubengarrote
• XADV-2013003 Linux Kernel fbdev Driver arcfb_write() Overflow
  • From: geinblues
• XADV-2013008 Linux Kernel 3.11.7 <= sk_attach_filter Kernel Heap Corruption
  • From: geinblues
• XADV-2013007 Linux Kernel bt8xx Video Driver IOCTL Heap Overflow
  • From: geinblues
• Intersystems Cache Remote Code Execution (via Default 'Minimal Security' Install)
  • From: bruk0ut . sec
• [ MDVSA-2013:268 ] torque
  • From: security
• Paypal Bug Bounty #14 - Persistent Payment Mail Encoding Vulnerability
  • From: Vulnerability Lab
• Mybb Ajaxfs Plugin Sql Injection vulnerability
  • From: iedb . team
• Appologics AirBeam v1.9.2 iOS - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• [ MDVSA-2013:269 ] firefox
  • From: security
• [ MDVSA-2013:270 ] nss
  • From: security
• [SECURITY] [DSA 2798-2] curl security update
  • From: Salvatore Bonaccorso
• [ MDVSA-2013:273 ] libjpeg
  • From: security
• [ MDVSA-2013:271 ] pmake
  • From: security
• [ MDVSA-2013:272 ] poppler
  • From: security
• [ MDVSA-2013:275 ] krb5
  • From: security
• [ MDVSA-2013:277 ] lighttpd
  • From: security
• Facebook Vulnerability Discloses Friends Lists Defined as Private
  • From: qsrc Quotium
• Instagram Photo Upload and Flattr Money Redirection Vulnerability
  • From: pfohl
• [ MDVSA-2013:276 ] curl
  • From: security
• [ MDVSA-2013:274 ] libjpeg
  • From: security
• [ MDVSA-2013:278 ] samba
  • From: security
• [SECURITY] [DSA 2801-1] libhttp-body-perl security update
  • From: Salvatore Bonaccorso
• DC4420 (DefCon London) meeting next Tuesday, 26th November 2013
  • From: Tony Naggs
• ESA-2013-077: RSA Data Protection Manager Appliance Multiple Vulnerabilities
  • From: Security Alert
• [SECURITY] [DSA 2802-1] nginx security update
  • From: Thijs Kinkhorst
• CVE-2013-6795 Vulnerability in the Rackspace Windows Agent and Updater
  • From: andrew
• Unauthorized console access on Satechi travel router v1.5
  • From: Luc Dore
• [ MDVSA-2013:279 ] wireshark
  • From: security
• [ MDVSA-2013:280 ] memcached
  • From: security
• [ MDVSA-2013:281 ] nginx
  • From: security
• Defense in depth -- the Microsoft way (part 14): incomplete, misleading and dangerous documentation
  • From: Stefan Kanthak
• Open-Xchange Security Advisory 2013-11-25
  • From: Martin Braun
• [ MDVSA-2013:282 ] perl-HTTP-Body
  • From: security
• [ MDVSA-2013:283 ] glibc
  • From: security
• [ MDVSA-2013:284 ] glibc
  • From: security
• [SECURITY] [DSA 2800-1] nss security update
  • From: Salvatore Bonaccorso
• [ MDVSA-2013:285 ] bugzilla
  • From: security
• [ MDVSA-2013:286 ] ruby
  • From: security
• [SECURITY] [DSA 2803-1] quagga security update
  • From: Moritz Muehlenhoff
• [ MDVSA-2013:287 ] drupal
  • From: security
• [SECURITY] [DSA 2804-1] drupal7 security update
  • From: Moritz Muehlenhoff
• [security bulletin] HPSBGN02942 rev.1 - HP Service Manager and ServiceCenter, Remote Code Execution
  • From: security-alert
• Multiple Cross-Site Scripting (XSS) in Claroline
  • From: High-Tech Bridge Security Research
• SQL Injection in Dokeos
  • From: High-Tech Bridge Security Research
• SQL Injection in Chamilo LMS
  • From: High-Tech Bridge Security Research
• [HITB-Announce] #HITB2014AMS Call for Papers Now Open
  • From: Hafez Kamal
• [SECURITY] [DSA 2805-1] sup-mail security update
  • From: Luciano Bello
• RUCKUS ADVISORY ID 10282013 - User authentication bypass vulnerability in Ruckus Access Point's administrative web interface
  • From: Ruckus Product Security Team
• NewsAktuell PressePortal DE - Remote SQL Injection Web Vulnerability
  • From: Vulnerability Lab
• FreeBSD Security Advisory FreeBSD-SA-13:14.openssh [REVISED]
  • From: FreeBSD Security Advisories
• [SECURITY] [DSA 2806-1] nbd security update
  • From: Thijs Kinkhorst