Mail Index

• Thread Index

• [SECURITY] [DSA 3209-1] openldap security update
  • From: Yves-Alexis Perez
• [security bulletin] HPSBHF03271 rev.1 - HP PCs and Workstations Running Windows 7 with NVidia Graphics Driver, Elevation of Privileges
  • From: security-alert
• [ MDVSA-2015:185 ] dokuwiki
  • From: security
• [ MDVSA-2015:186 ] phpmyadmin
  • From: security
• [SECURITY] [DSA 3210-1] wireshark security update
  • From: Moritz Muehlenhoff
• [SECURITY ANNOUNCEMENT] CVE-2015-0225
  • From: Jake Luciani
• ESA-2015-056: EMC PowerPath Virtual Appliance Undocumented User Accounts Vulnerability
  • From: Security Alert
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unity Connection
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Prime Data Center Network Manager File Information Disclosure Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [SECURITY] [DSA 3211-1] iceweasel security update
  • From: Salvatore Bonaccorso
• [security bulletin] HPSBMU03304 rev.1 - HP Insight Control server deployment on Linux and Windows, Remote Disclosure of Information
  • From: security-alert
• [security bulletin] HPSBGN03307 rev.1 - HP Intelligent Provisioning, Disclosure of Information
  • From: security-alert
• [security bulletin] HPSBST03298 rev.2 - HP XP Service Processor Software for Windows, Multiple Vulnerabilities
  • From: security-alert
• SECUREDROP >= 0.3 - Possible Backdoor & Privileges Escalation by Unauth User
  • From: ~~~ Elliptic TAO Team ~~~
• [ MDVSA-2015:187 ] graphviz
  • From: security
• Wordpress plugin Simple Ads Manager - SQL Injection
  • From: ITAS Team
• [ MDVSA-2015:188 ] flac
  • From: security
• Security Audit Notes - OpenSSL v1.0.2a (latest) Issues - Advanced Information Security Corporation
  • From: Nicholas Lemonias.
• Wordpress plugin Simple Ads Manager - Multiple SQL Injection
  • From: ITAS Team
• Wordpress plugin Simple Ads Manager - Arbitrary File Upload
  • From: ITAS Team
• Wordpress plugin Simple Ads Manager - Information Disclosure
  • From: ITAS Team
• [ MDVSA-2015:189 ] tor
  • From: security
• [ MDVSA-2015:190 ] owncloud
  • From: security
• [ MDVSA-2015:191 ] owncloud
  • From: security
• [ MDVSA-2015:161-1 ] icu
  • From: security
• Security Audit Notes - OpenSSH 6.8 - Advanced Information Security Corp
  • From: Nicholas Lemonias.
• [security bulletin] HPSBGN03302 rev.1 - HP IceWall Federation Agent, Remote Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBHF03300 rev.1 - HP Network Products running OpenSSL, Remote Denial of Service (DoS), Unauthorized Access, Disclosure of Information
  • From: security-alert
• [SECURITY] [DSA 3212-1] icedove security update
  • From: Yves-Alexis Perez
• [security bulletin] HPSBST03195 rev.1 - HP 3PAR Service Processor (SP) running OpenSSL and Bash, Remote Code Execution, Unauthorized Access, Disclosure of Information
  • From: security-alert
• NEW : VMSA-2015-0003 VMware product updates address critical information disclosure issue in JRE
  • From: VMware Security Response Center
• Remote file upload vulnerability in videowhisper-video-conference-integration wordpress plugin v4.91.8
  • From: Larry W. Cashdollar
• Remote file upload vulnerability in wordpress plugin videowhisper-video-presentation v3.31.17
  • From: Larry W. Cashdollar
• [ MDVSA-2015:192 ] subversion
  • From: security
• HotExBilling Manager Cross-site scripting (XSS) vulnerability
  • From: bhadresh . patel
• Security Audit Notes - Kerberos Security Issues (krb5-1.13 stable) - Advanced Information Security Corp.
  • From: lem . nikolas
• Security Audit Notes = Kerberos (krb5-1.13) issues - Advanced Information Security Corp
  • From: Nicholas Lemonias.
• [SECURITY] [DSA 3213-1] arj security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 3214-1] mailman security update
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 3215-1] libgd2 security update
  • From: Alessandro Ghedini
• [security bulletin] HPSBMU03296 rev.1 - HP BladeSystem c-Class Onboard Administrator running OpenSSL, Remote Denial of Service (DoS)
  • From: security-alert
• [SECURITY] [DSA 3216-1] tor security update
  • From: Moritz Muehlenhoff
• [security bulletin] HPSBGN03306 rev.1 - HP IceWall SSO MCRP, SSO Dfw, and SSO Agent running OpenSSL, Remote Denial of Service (DoS)
  • From: security-alert
• [ MDVSA-2015:193 ] libtasn1
  • From: security
• [ MDVSA-2015:195 ] python-django
  • From: security
• [ MDVSA-2015:196 ] cups-filters
  • From: security
• [CVE-2015-0779]: Novell ZenWorks Configuration Management remote code execution
  • From: Pedro Ribeiro
• CVE-2015-1773 Apache Flex reflected XSS vulnerability
  • From: Tom Chiverton
• [SECURITY] [DSA 3057-2] libxml2 regression update
  • From: Salvatore Bonaccorso
• [ MDVSA-2015:198 ] java-1.8.0-openjdk
  • From: security
• SEC Consult SA-20150409-0 :: Multiple XSS & XSRF vulnerabilities in Comalatech Comala Workflows
  • From: SEC Consult Vulnerability Lab
• [SECURITY] [DSA 3217-1] dpkg security update
  • From: Salvatore Bonaccorso
• [ MDVSA-2015:199 ] less
  • From: security
• [ MDVSA-2015:200 ] mediawiki
  • From: security
• [ MDVSA-2015:202 ] ntp
  • From: security
• [ MDVSA-2015:201 ] arj
  • From: security
• SEC Consult SA-20150410-0 :: Unauthenticated Local File Disclosure in multiple TP-LINK products (CVE-2015-3035)
  • From: SEC Consult Vulnerability Lab
• Hidden backdoor API to root privileges in Apple OS X
  • From: Jeffrey Walton
• [SECURITY] [DSA 3218-1] wesnoth-1.10 security update
  • From: Moritz Muehlenhoff
• [security bulletin] HPSBGN03316 rev.1 - HP Support Solution Framework on Windows, Remote Execution of Code, Disclosure of Information
  • From: security-alert
• [ MDVSA-2015:203 ] batik
  • From: security
• OrangeHRM Blind SQL Injection & XSS Vulnerabilities
  • From: Rehan Ahmed
• [SECURITY] [DSA 3219-1] libdbd-firebird-perl security update
  • From: Alessandro Ghedini
• Hijacking any Weebly Website [Insecure Direct Object Reference Vulnerability]
  • From: huehuehuehue10
• [SECURITY] [DSA 3220-1] libtasn1-3 security update
  • From: Salvatore Bonaccorso
• Safari iOS/OS X/Windows cookie access vulnerability
  • From: Jouko Pynnonen
• [SECURITY] [DSA 3221-1] das-watchdog security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 3222-1] chrony security update
  • From: Alessandro Ghedini
• [SECURITY] [DSA 3223-1] ntp security update
  • From: Alessandro Ghedini
• [SECURITY] [DSA 3224-1] libx11 security update
  • From: Moritz Muehlenhoff
• Ruxcon 2015 Call For Presentations
  • From: cfp
• Apache HTTPD 2.4.12/ 2.2.29 Security Audit Notes - Advanced Information Security Corp
  • From: Nicholas Lemonias.
• Apache HTTPD 2.4.12, 2.2.29 Security Audit - Advanced Information Security Corp
  • From: lem . nikolas
• [security bulletin] HPSBHF03310 rev.2 - HP Thin Clients running Windows Embedded Standard 7 (WES7) or Windows Embedded Standard 2009 (WES09) with HP Easy Deploy, Remote Elevation of Privilege, Execution of Code
  • From: security-alert
• [security bulletin] HPSBOV03318 rev.1 - HP SSL for OpenVMS, Remote Denial of Service (DoS) and other Vulnerabilities
  • From: security-alert
• [CVE-2015-2810] Integer Overflow leading to heap corruption when assigning a long paragraph size value to a HanWord document
  • From: Daniel Regalado
• Security Advisory - Apache HTTP Server 2.2.29 / 2.4.12 NULL Pointer dereference in protocol.c
  • From: Nicholas Lemonias.
• Security Advisory - Apache HTTP Server 2.2.29 / 2.4.12 NULL Pointer dereference in protocol.c
  • From: lem . nikolas
• [SYSS-2015-012] Panda Internet Security 2015 - Authentication Bypass
  • From: matthias . deeg
• [SYSS-2015-013] Panda Antivirus Pro 2015 - Authentication Bypass
  • From: matthias . deeg
• [SYSS-2015-014] Panda Global Protection 2015 - Authentication Bypass
  • From: matthias . deeg
• [SYSS-2015-015] Panda Gold Protection 2015 - Authentication Bypass
  • From: matthias . deeg
• whitepaper: Identifier based XSSI attacks
  • From: Takeshi Terada
• several issues in SQLite (+ catching up on several other bugs)
  • From: Michal Zalewski
• Wordpress WP Statistics persistent cross site scripting
  • From: kingkaustubh
• Secunia Research: Microsoft Windows GDI "MRSETDIBITSTODEVICE ::bPlay()" EMF Parsing Memory Corruption Vulnerability
  • From: Secunia Research
• Security Advisory - Apache HTTP Server 2.2.29 / 2.4.12 NULL Pointer dereference in protocol.c
  • From: Nicholas Lemonias.
• [IMF2015] Call for Participation
  • From: Oliver Goebel
• [SECURITY] [DSA 3225-1] gst-plugins-bad0.10 security update
  • From: Moritz Muehlenhoff
• ESA-2015-069: EMC NetWorker Buffer Overflow Vulnerability
  • From: Security Alert
• [SECURITY] [DSA 3226-1] inspircd security update
  • From: Sebastien Delafond
• Cisco Security Advisory: Cisco IOS XR Software BVI Routed Packet Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Secure Desktop Cache Cleaner Command Execution Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [SECURITY] [DSA 3227-1] movabletype-opensource security update
  • From: Salvatore Bonaccorso
• [security bulletin] HPSBMU03264 rev.1 - HP Network Automation, Multiple Remote Vulnerabilities
  • From: security-alert
• Secunia Research: Oracle Outside In ibpsd2.dll PSD File Processing Buffer Overflow Vulnerability
  • From: Secunia Research
• [CVE-2014-5361][CVE-2014-5362]Landesk Management Suite RFI & CSRF Security Vulnerabilities
  • From: alex_haynes
• [SECURITY] [DSA 3228-1] ppp security update
  • From: Sebastien Delafond
• Wolf CMS 0.8.2 Arbitrary File Upload Vulnerability
  • From: prathan . ptr
• Lychee 2.7.1 remote code execution
  • From: Filippo Cavallarin
• 112 ipTIME Routers/WiFi APs/Modems/Firewalls models vulnerable with RCE with root privileges
  • From: Pierre Kim
• CVE-2014-7954 MTP path traversal vulnerability in Android
  • From: Imre RAD
• CVE-2014-7951 adb backup archive path traversal file overwrite
  • From: Imre RAD
• CVE-2014-7953 Android backup agent code execution
  • From: Imre RAD
• Security Audit Notes - OpenSSL v1.0.2a (latest) Issues - Advanced Information Security Corporation
  • From: lem . nikolas
• [SECURITY] [DSA 3229-1] mysql-5.5 security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 3230-1] django-markupfield security update
  • From: Alessandro Ghedini
• [security bulletin] HPSBMU03321 rev.1 - HP Data Protector, Remote Increase of Privilege, Denial of Service (DoS), Execution of Arbitrary Code
  • From: security-alert
• Photo Manager Pro 4.4.0 iOS - Code Execution Vulnerability
  • From: Vulnerability Lab
• Mobile Drive HD v1.8 - File Include Web Vulnerability
  • From: Vulnerability Lab
• Wifi Drive Pro v1.2 iOS - File Include Web Vulnerability
  • From: Vulnerability Lab
• Photo Manager Pro v4.4.0 iOS - File Include Vulnerability
  • From: Vulnerability Lab
• Ebay Inc Xcom #4 - (Item Preview) Persistent Vulnerability
  • From: Vulnerability Lab
• Ebay Inc Xcom #6 - Persistent POST Inject Vulnerability
  • From: Vulnerability Lab
• Ebay Inc Xcom #7 - (Policy) Persistent Vulnerability
  • From: Vulnerability Lab
• PayPal Inc Bug Bounty #113 - Client Side Cross Site Scripting Vulnerability
  • From: Vulnerability Lab
• SevenIT SevDesk 3.10 - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• Google Analytics by Yoast stored XSS #2
  • From: Jouko Pynnonen
• GoAutoDial 3.3 multiple vulnerabilities
  • From: root
• [security bulletin] HPSBGN03305 rev.1 - HP Business Service Management (BSM) products running SSLv3, Remote Disclosure of Information
  • From: security-alert
• Linux ASLR mmap weakness: Reducing entropy by half
  • From: Hector Marco-Gisbert
• AMD Bulldozer Linux ASLR weakness: Reducing entropy by 87.5%
  • From: Hector Marco-Gisbert
• [SECURITY] [DSA 3231-1] subversion security update
  • From: Salvatore Bonaccorso
• Stored Cross Site Scripting Vulnerability in Add Link to Facebook WordPress Plugin
  • From: kumarrohit2255
• Reflected XSS Vulnerability In Manage Engine Firewall Analyzer
  • From: kkulkarni
• Reflected XSS Vulnerability In Manage Engine Event Log Analyzer
  • From: kkulkarni
• Apple iOS 8.0 - 8.0.2 - Controls Re Auth Bypass Vulnerability
  • From: Vulnerability Lab
• iPassword Manager v2.6 iOS - Persistent Vulnerabilities
  • From: Vulnerability Lab
• [SECURITY] [DSA 3232-1] curl security update
  • From: Alessandro Ghedini
• Netgear WNR2000v4 Multiple Vulnerabilities
  • From: endeavor
• Multiple Cross-Site Scripting (XSS) in FreePBX
  • From: High-Tech Bridge Security Research
• [security bulletin] HPSBGN03308 rev.1 - HP TippingPoint Security Management System (SMS) and TippingPoint Virtual Security Management System (vSMS), Remote Code Execution
  • From: security-alert
• [slackware-security] mozilla-firefox (SSA:2015-111-05)
  • From: Slackware Security Team
• [slackware-security] mozilla-thunderbird (SSA:2015-111-06)
  • From: Slackware Security Team
• [slackware-security] qt (SSA:2015-111-13)
  • From: Slackware Security Team
• [slackware-security] libssh (SSA:2015-111-04)
  • From: Slackware Security Team
• [slackware-security] mutt (SSA:2015-111-07)
  • From: Slackware Security Team
• [slackware-security] php (SSA:2015-111-10)
  • From: Slackware Security Team
• [slackware-security] ppp (SSA:2015-111-11)
  • From: Slackware Security Team
• [slackware-security] seamonkey (SSA:2015-111-14)
  • From: Slackware Security Team
• [slackware-security] proftpd (SSA:2015-111-12)
  • From: Slackware Security Team
• [slackware-security] gnupg (SSA:2015-111-02)
  • From: Slackware Security Team
• [slackware-security] ntp (SSA:2015-111-08)
  • From: Slackware Security Team
• [slackware-security] httpd (SSA:2015-111-03)
  • From: Slackware Security Team
• [slackware-security] bind (SSA:2015-111-01)
  • From: Slackware Security Team
• [slackware-security] openssl (SSA:2015-111-09)
  • From: Slackware Security Team
• [ALICLOUDSEC-VUL2015-001]Android wpa_supplicant WLAN Direct remote buffer overflow
  • From: 朱东海
• Dnsmasq 2.72 Unchecked returned value
  • From: Nick Sampanis
• Socrata Bug Bounty #1 - Persistent Encoding Vulnerability
  • From: Vulnerability Lab
• [ALICLOUDSEC-VUL2015-001]Android wpa_supplicant WLAN Direct remote buffer overflow
  • From: xing_fang
• Pligg CMS 2.0.2 - Stored XSS
  • From: joelvarghese7
• Avsarsoft Matbaa Script - Multiple Vulnerabilities
  • From: ZoRLu Bugrahan
• 4k ULTRA HIGH DEFINITION Satellite Security Research - DVB-S2X Security Evaluation Draft Notes
  • From: Nicholas Lemonias.
• Zeppelin - SSH script - Advanced Information Security Corporation
  • From: lem . nikolas
• SSH Network Security Assessment utility - Zeppelin - -=[Advanced Information Security Corp]=-
  • From: lem . nikolas
• Incorrect handling of self signed certificates in OpenFire XMPP Server
  • From: Simon Waters
• Encaps PHP/Flash Gallery 2.3.22s Database Puffing Up Exploit
  • From: ZoRLu Bugrahan
• 4k ULTRA HIGH DEFINITION Satellite Security Research - DVB-S2X Security Evaluation Draft Notes - Advanced Information Security Corporation
  • From: Nicholas Lemonias.
• [SECURITY] [DSA 3233-1] wpa security update
  • From: Salvatore Bonaccorso
• [security bulletin] HPSBPI03315 rev.1 - HP Capture and Route Software, Remote Information Disclosure
  • From: security-alert
• [security bulletin] HPSBHF03272 rev.1 - HP Servers with NVidia GPU Computing Driver running Windows Server 2008, Elevation of Privilege
  • From: security-alert
• [SECURITY] [DSA 3234-1] openjdk-6 security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 3235-1] openjdk-7 security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 3236-1] libreoffice security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 3237-1] linux security update
  • From: Ben Hutchings
• WordPress 4.2 stored XSS
  • From: Jouko Pynnonen
• [SECURITY] [DSA 3238-1] chromium-browser security update
  • From: Michael Gilbert
• [ MDVSA-2015:204 ] librsync
  • From: security
• [ MDVSA-2015:205 ] tor
  • From: security
• [ MDVSA-2015:206 ] asterisk
  • From: security
• [ MDVSA-2015:207 ] perl-Module-Signature
  • From: security
• [ MDVSA-2015:208 ] setup
  • From: security
• [ MDVSA-2015:209 ] php
  • From: security
• [ MDVSA-2015:210 ] qemu
  • From: security
• Elasticsearch vulnerability CVE-2015-3337
  • From: Kevin Kluge
• [ MDVSA-2015:211 ] glusterfs
  • From: security
• Open-Xchange Security Advisory 2015-04-27
  • From: Martin Heiland
• [ MDVSA-2015:212 ] java-1.7.0-openjdk
  • From: security
• [CORE-2015-0008] - InFocus IN3128HD Projector Multiple Vulnerabilities
  • From: CORE Advisories Team
• SonicWall SonicOS 7.5.0.12 & 6.x - Client Side Cross Site Scripting Vulnerability
  • From: Vulnerability Lab
• PayPal Inc Bug Bounty #114 - JDWP Remote Code Execution Vulnerability
  • From: Vulnerability Lab
• CSRF & XSS Wing FTP Server Admin <= v4.4.5
  • From: apparitionsec
• Multiple Vulnerabilities in TheCartPress WordPress plugin
  • From: High-Tech Bridge Security Research
• [oCERT-2015-003] MySQL SSL/TLS downgrade
  • From: Andrea Barisani
• [ MDVSA-2015:213 ] lftp
  • From: security
• [ MDVSA-2015:215 ] t1utils
  • From: security
• [ MDVSA-2015:214 ] libksba
  • From: security
• [ MDVSA-2015:216 ] ntop
  • From: security
• [security bulletin] HPSBUX03320 SSRT101952 rev.1 - HP-UX CIFS Server (Samba), Remote Denial of Service (DoS), Execution of Arbitrary Code, Unauthorized Access
  • From: security-alert
• [security bulletin] HPSBMU03241 rev.1 - HP Network Automation running SSLv3, Remote Disclosure of Information
  • From: security-alert
• ESA-2015-078: RSA® Identity Management and Governance (IMG) Insecure Password Reset Vulnerability
  • From: Security Alert
• [SECURITY] [DSA 3240-1] curl security update
  • From: Alessandro Ghedini
• [SECURITY] [DSA 3239-1] icecast2 security update
  • From: Alessandro Ghedini
• [security bulletin] HPSBGN03323 rev.1 - HP Business Service Automation Essentials Core with JBOSS, Remote Disclosure of Information
  • From: security-alert
• [security bulletin] HPSBGN03324 rev.1 - HP Business Service Automation Essentials Core, Remote Disclosure of Information
  • From: security-alert
• [SECURITY] [DSA 3241-1] elasticsearch security update
  • From: Moritz Muehlenhoff
• [ MDVSA-2015:217 ] sqlite3
  • From: security
• [ MDVSA-2015:218 ] glibc
  • From: security
• [SYSS-2014-007] FrontRange DSM - Multiple Vulnerabilities
  • From: matthias . deeg
• SevDesk v1.1 iOS - Persistent Dashboard Vulnerability
  • From: Vulnerability Lab