Mail Index

• Thread Index

• [SECURITY] [DSA 2939-1] chromium-browser security update
  • From: Michael Gilbert
• [SECURITY] [DSA 2943-1] php5 security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2941-1] lxml security update
  • From: Moritz Muehlenhoff
• Yarubo #1: Arbitrary SQL Execution in Participants Database for Wordpress
  • From: Yarubo Internet Security Scan
• [SECURITY] [DSA 2944-1] gnutls26 security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2942-1] typo3-src security update
  • From: Moritz Muehlenhoff
• Re: OpenCart 1.5.6.4 Directory Traversal Vulnerability
  • From: Henri Salo
• [slackware-security] mariadb (SSA:2014-152-01)
  • From: Slackware Security Team
• CVE-2014-2232 - "Absolute Path Traversal" (CWE-36) vulnerability in "infoware MapSuite"
  • From: Christian Schneider
• CVE-2014-2233 - "Server-Side Request Forgery" (CWE-918) vulnerability in "infoware MapSuite"
  • From: Christian Schneider
• CVE-2014-2843 - "Reflected Cross-Site Scripting (XSS)" (CWE-79) vulnerability in "infoware MapSuite"
  • From: Christian Schneider
• ESA-2014-032: RSA® Adaptive Authentication (Hosted) DOM Cross-Site Scripting Vulnerability
  • From: Security Alert
• [FD] CVE-2013-6876 s3dvt Root shell
  • From: Hector Marco
• VUPEN Security Research - Adobe Acrobat & Reader XI-X "AcroBroker" Sandbox Bypass (Pwn2Own)
  • From: VUPEN Security Research
• FCKedtior 2.6.10 Reflected Cross-Site Scripting (XSS)
  • From: Robin Bailey
• CVE-2014-1226 s3dvt Root shell (still)
  • From: Hector Marco
• CVE-2013-6825 DCMTK Root Privilege escalation
  • From: Hector Marco
• LSE Leading Security Experts GmbH - LSE-2014-05-22 - F*EX - Multiple Issues
  • From: advisories
• NG WifiTransfer Pro 1.1 - File Include Vulnerability
  • From: Vulnerability Lab
• Files Desk Pro v1.4 iOS - File Include Web Vulnerability
  • From: Vulnerability Lab
• AllReader v1.0 iOS - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• Privacy Pro v1.2 HZ iOS - File Include Web Vulnerability
  • From: Vulnerability Lab
• TigerCom My Assistant v1.1 iOS - File Include Vulnerability
  • From: Vulnerability Lab
• Bluetooth Photo-File Share v2.1 iOS - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• iScan Online Mobile 2.0.1 iOS - Command Inject Vulnerability
  • From: Vulnerability Lab
• CVE-2013-6876 s3dvt Root shell
  • From: Hector Marco
• CVE-2013-6825 DCMTK Root Privilege escalation
  • From: Hector Marco
• CVE-2014-1226 s3dvt Root shell (still)
  • From: Hector Marco
• Bug in bash <= 4.3 [security feature bypassed]
  • From: Hector Marco
• CVE-2014-0907 - SetUID/SetGID Programs Allow Privilege Escalation Via Insecure RPATH In IBM DB2
  • From: Portcullis Advisories
• FreeBSD Security Advisory FreeBSD-SA-14:13.pam
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-14:11.sendmail
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-14:12.ktrace
  • From: FreeBSD Security Advisories
• [SECURITY] [DSA 2945-1] chkrootkit security update
  • From: Giuseppe Iuculano
• [CVE-2014-2577] XSS on Transform Foundation Server 4.3.1 and 5.2 from Bottomline Technologies
  • From: Fran
• Re: [oss-security] Bug in bash <= 4.3 [security feature bypassed]
  • From: Jose Carlos Luna Duran
• ESA-2014-024: EMC Documentum Digital Asset Manager Blind DQL Injection Vulnerability
  • From: Security Alert
• [SECURITY] [DSA 2947-1] libav security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2948-1] python-bottle security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2946-1] python-gnupg security update
  • From: Moritz Muehlenhoff
• [security bulletin] HPSBMU03033 rev.3 - HP Insight Control Software Components running OpenSSL, Remote Disclosure of Information
  • From: security-alert
• Re: [FD] [oss-security] Bug in bash <= 4.3 [security feature bypassed]
  • From: Hector Marco
• Re: [FD] [oss-security] Bug in bash <= 4.3 [security feature bypassed]
  • From: lists
• Re: Bug in bash <= 4.3 [security feature bypassed]
  • From: Daryl Tester
• [RT-SA-2014-006] Directory Traversal in DevExpress ASP.NET File Manager
  • From: RedTeam Pentesting GmbH
• [SECURITY] [DSA 2950-1] openssl security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2949-1] linux security update
  • From: Salvatore Bonaccorso
• FreeBSD Security Advisory FreeBSD-SA-14:14.openssl
  • From: FreeBSD Security Advisories
• multiple Vulnerability in "WahmShoppes eStore"
  • From: cseye_ut
• [security bulletin] HPSBMU03028 rev.2 - HP Matrix Operating Environment and HP CloudSystem Matrix Software Components running OpenSSL, Remote Disclosure of Information
  • From: security-alert
• ESA-2014-046: EMC Documentum Content Server Multiple Vulnerabilities
  • From: Security Alert
• [security bulletin] HPSBMU03029 rev.2 - HP Insight Control Server Migration running OpenSSL, Remote Disclosure of Information
  • From: security-alert
• Details for CVE-2014-0220
  • From: tucu
• [SECURITY] [DSA 2951-1] mupdf security update
  • From: Moritz Muehlenhoff
• Re: Bug in bash <= 4.3 [security feature bypassed]
  • From: Hector Marco
• Cisco Security Advisory: Multiple Vulnerabilities in OpenSSL Affecting Cisco Products
  • From: Cisco Systems Product Security Incident Response Team
• [SECURITY] [DSA 2952-1] kfreebsd-9 security update
  • From: Nico Golde
• Re: [FD] [oss-security] Bug in bash <= 4.3 [security feature bypassed]
  • From: Jeffrey Walton
• [slackware-security] libtasn1 (SSA:2014-156-02)
  • From: Slackware Security Team
• [slackware-security] gnutls (SSA:2014-156-01)
  • From: Slackware Security Team
• SEC Consult SA-20140606-0 :: Multiple critical vulnerabilities in WebTitan
  • From: SEC Consult Vulnerability Lab
• [slackware-security] sendmail (SSA:2014-156-04)
  • From: Slackware Security Team
• [slackware-security] openssl (SSA:2014-156-03)
  • From: Slackware Security Team
• [Onapsis Security Advisory 2014-020] SAP SLD Information Tampering
  • From: Onapsis Research Labs
• [Onapsis Security Advisories] Multiple Hard-coded Usernames in SAP Components
  • From: Onapsis Research Labs
• NeginGroup CMS Multiple Vulnerability
  • From: iedb . team
• CVE-2014-3740 - SpiceWorks Cross-site scripting
  • From: Dolev Farhi
• [slackware-security] mozilla-firefox (SSA:2014-157-01)
  • From: Slackware Security Team
• [SECURITY] [DSA 2953-1] dpkg security update
  • From: Raphael Geissert
• DNN (DotNetNukeŽ) ASPSlideshow Module Arbitrary File Download Vulnerability
  • From: cseye_ut
• DNN (DotNetNukeŽ) CodeEditor Module Arbitrary File Download Vulnerability
  • From: cseye_ut
• DNN (DotNetNukeŽ) EasyDnnGallery Module Arbitrary File Download Vulnerability
  • From: cseye_ut
• DNN (DotNetNukeŽ) eventscalendar Module Arbitrary File Download Vulnerability
  • From: cseye_ut
• DNN (DotNetNukeŽ) responsivesidebar Module Arbitrary File Download Vulnerability
  • From: cseye_ut
• DNN (DotNetNukeŽ) dnnUI_NewsArticlesSlider Module Arbitrary File Download Vulnerability
  • From: cseye_ut
• [security bulletin] HPSBMU03024 rev.3 - HP Insight Control Server Deployment on Linux and Windows running OpenSSL with System Management Homepage and Systems Insight Manager, Remote Disclosure of Information
  • From: security-alert
• [ MDVSA-2014:105 ] openssl
  • From: security
• [SECURITY] [DSA 2954-1] dovecot security update
  • From: Salvatore Bonaccorso
• [ MDVSA-2014:106 ] openssl
  • From: security
• [ MDVSA-2014:107 ] libtasn1
  • From: security
• [ MDVSA-2014:109 ] gnutls
  • From: security
• [ MDVSA-2014:108 ] gnutls
  • From: security
• [slackware-security] php (SSA:2014-160-01)
  • From: Slackware Security Team
• [ MDVSA-2014:111 ] otrs
  • From: security
• [ MDVSA-2014:112 ] python-django
  • From: security
• [ MDVSA-2014:110 ] curl
  • From: security
• Re: MacOSX Safari Firefox Kaspersky RegExp Remote/Local Denial of Service
  • From: Pavel Machek
• [ MDVSA-2014:113 ] python-django
  • From: security
• [ MDVSA-2014:114 ] squid
  • From: security
• [ MDVSA-2014:115 ] php
  • From: security
• [ MDVSA-2014:116 ] file
  • From: security
• [ MDVSA-2014:117 ] libcap-ng
  • From: security
• CodeIgniter <= 2.1.4 Session Decoding Vulnerability
  • From: Robin Bailey
• [ MDVSA-2014:119 ] mediawiki
  • From: security
• [ MDVSA-2014:121 ] libgadu
  • From: security
• [ MDVSA-2014:118 ] emacs
  • From: security
• [ MDVSA-2014:120 ] miniupnpc
  • From: security
• [security bulletin] HPSBMU03045 rev.1 - HP Service Virtualization Running AutoPass License Server, Remote Code Execution
  • From: security-alert
• NEW : VMSA-2014-0006 - VMware product updates address OpenSSL security vulnerabilities
  • From: "VMware Security Response Center"
• CVE-2014-3977 - Privilege Escalation in IBM AIX
  • From: Portcullis Advisories
• [ MDVSA-2014:123 ] tor
  • From: security
• [ MDVSA-2014:122 ] chkrootkit
  • From: security
• [SECURITY] [DSA 2956-1] icinga security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2955-1] iceweasel security update
  • From: Moritz Muehlenhoff
• Cisco Security Advisory: Cisco IOS XR Software IPv6 Malformed Packet Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• CVE-2014-3427 CRLF Injection and CVE-2014-3428 XSS Injection in Yealink VoIP Phones
  • From: J. Oquendo
• [slackware-security] mozilla-thunderbird (SSA:2014-163-01)
  • From: Slackware Security Team
• [SECURITY] [DSA 2957-1] mediawiki security update
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 2958-1] apt security update
  • From: Thijs Kinkhorst
• AST-2014-005: Remote Crash in PJSIP Channel Driver's Publish/Subscribe Framework
  • From: Asterisk Security Team
• AST-2014-007: Exhaustion of Allowed Concurrent HTTP Connections
  • From: Asterisk Security Team
• AST-2014-008: Denial of Service in PJSIP Channel Driver Subscriptions
  • From: Asterisk Security Team
• [security bulletin] HPSBST03016 rev.4 - HP P2000 G3 MSA Array Systems, HP MSA 2040 Storage, and HP MSA 1040 Storage running OpenSSL, Remote Disclosure of Information
  • From: security-alert
• CVE-2014-0228: Apache Hive Authorization vulnerability
  • From: Thejas Nair
• AST-2014-006: Asterisk Manager User Unauthorized Shell Access
  • From: Asterisk Security Team
• [security bulletin] HPSBUX03046 SSRT101590 rev.1 - HP-UX Running OpenSSL, Remote Denial of Service (DoS), Code Execution, Security Restriction Bypass, Disclosure of Information, or Unauthorized Access
  • From: security-alert
• [SECURITY] CVE-2013-2251: Apache Continuum affected by Remote Command Execution
  • From: Brett Porter
• [ MDVSA-2014:124 ] kernel
  • From: security
• [ MDVSA-2014:125 ] nspr
  • From: security
• ClipBucket CMS Xss Vulnerability
  • From: iedb . team
• [SECURITY] [DSA 2959-1] chromium-browser security update
  • From: Michael Gilbert
• [SE-2014-01] Security vulnerabilities in Oracle Database Java VM
  • From: Security Explorations
• [CFP] Hacktivity 2014 CFP is open
  • From: ferenc . spala
• [SECURITY] [DSA 2960-1] icedove security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2950-2] openssl update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2961-1] php5 security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 2962-1] nspr security update
  • From: Moritz Muehlenhoff
• [security bulletin] HPSBUX03046 SSRT101590 rev.2 - HP-UX Running OpenSSL, Remote Denial of Service (DoS), Code Execution, Security Restriction Bypass, Disclosure of Information, or Unauthorized Access
  • From: security-alert
• [SECURITY] [DSA 2963-1] lucene-solr security update
  • From: Moritz Muehlenhoff
• [security bulletin] HPSBMU03048 rev.1 - HP Software Executive Scorecard, Remote Execution of Code, Directory Traversal
  • From: security-alert
• SQL Injection in Dolphin
  • From: High-Tech Bridge Security Research
• Multiple SQL Injection Vulnerabilities in web2Project
  • From: High-Tech Bridge Security Research
• Paypal Inc Bug Bounty #36 - SecurityKey Card Serialnumber Module Vulnerability
  • From: Vulnerability Lab
• Secunia CSI/VIM - Filter Bypass & Persistent Validation Vulnerabilities
  • From: Vulnerability Lab
• [security bulletin] HPSBOV03047 rev.1 - HP OpenVMS running OpenSSL, Remote Denial of Service (DoS), Code Execution, Unauthorized Access, Disclosure of Information
  • From: security-alert
• [SECURITY] [DSA 2964-1] iodine security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 2965-1] tiff security update
  • From: Michael Gilbert
• [SECURITY] [DSA 2966-1] samba security update
  • From: Yves-Alexis Perez
• [security bulletin] HPSBHF03052 rev.1 - HP Intelligent Management Center (iMC), HP Network Products including H3C and 3COM Routers and Switches running OpenSSL, Remote Denial of Service (DoS), Code Execution, Unauthorized Access, Modification or Disclosure of Information
  • From: security-alert
• Android KeyStore Stack Buffer Overflow (CVE-2014-3100)
  • From: Roee Hay
• Boolean algebra and CSS history theft
  • From: Michal Zalewski
• [security bulletin] HPSBMU03051 rev.1 - HP System Management Homepage running OpenSSL on Linux and Windows, Remote Denial of Service (DoS), Code Execution, Unauthorized Access, Disclosure of Information
  • From: security-alert
• [HITB-Announce] #HITB2014KUL round 1 CFP submission deadline in < 1 week
  • From: Hafez Kamal
• [security bulletin] HPSBMU03053 rev.1 - HP Software Database and Middleware Automation, OpenSSL Vulnerability, Remote Unauthorized Access or Disclosure of Information
  • From: security-alert
• FreeBSD Security Advisory FreeBSD-SA-14:15.iconv
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-14:16.file
  • From: FreeBSD Security Advisories
• [slackware-security] gnupg2 (SSA:2014-175-03)
  • From: Slackware Security Team
• [slackware-security] gnupg (SSA:2014-175-02)
  • From: Slackware Security Team
• [slackware-security] bind (SSA:2014-175-01)
  • From: Slackware Security Team
• [slackware-security] samba (SSA:2014-175-04)
  • From: Slackware Security Team
• [slackware-security] seamonkey (SSA:2014-175-05)
  • From: Slackware Security Team
• NEW VMSA-2014-0007 - VMware product updates address security vulnerabilities in Apache Struts library
  • From: "VMware Security Response Center"
• Reflected Cross-Site Scripting (XSS) Vulnerability in Storesprite
  • From: High-Tech Bridge Security Research
• [RT-SA-2013-002] Endeca Latitude Cross-Site Request Forgery
  • From: RedTeam Pentesting GmbH
• [RT-SA-2013-003] Endeca Latitude Cross-Site Scripting
  • From: RedTeam Pentesting GmbH
• CVE-2014-2385 - Multiple Cross Site Scripting in Sophos Antivirus Configuration Console (Linux)
  • From: Portcullis Advisories
• CVE-2014-3752 - Arbitrary Code Execution in G Data TotalProtection 2014
  • From: Portcullis Advisories
• [SECURITY] [DSA 2967-1] gnupg security update
  • From: Salvatore Bonaccorso
• [RT-SA-2014-008] Python CGIHTTPServer File Disclosure and Potential Code Execution
  • From: RedTeam Pentesting GmbH
• CFP 1st International Conference on Information Systems Security and Privacy - ICISSP 2015
  • From: calendarsites
• [security bulletin] HPSBMU03058 rev.1 - HP BladeSystem c-Class Onboard Administrator (OA) running OpenSSL, Remote Disclosure of Information
  • From: security-alert
• [SECURITY] [DSA 2968-1] gnupg2 security update
  • From: Salvatore Bonaccorso
• [security bulletin] HPSBMU03061 rev.1 - HP Release Control, Disclosure of Privileged Information and Elevation of Privilege
  • From: security-alert
• [security bulletin] HPSBMU03057 rev.1 - HP Version Control Agent (HP VCA) running OpenSSL on Linux and Windows, Remote Denial of Service (DoS), Code Execution, Unauthorized Access, Disclosure of Information
  • From: security-alert
• [security bulletin] HPSBMU03056 rev.1 - HP Version Control Repository Manager (HP VCRM) running OpenSSL on Linux and Windows, Remote Denial of Service (DoS), Code Execution, Unauthorized Access, Disclosure of Information
  • From: security-alert
• [SECURITY] [DSA 2969-1] libemail-address-perl security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 2970-1] cacti security update
  • From: Moritz Muehlenhoff