Mail Index

• Thread Index

• [SECURITY] [DSA 3242-1] chromium-browser security update
  • From: Michael Gilbert
• [SECURITY] [DSA 3243-1] libxml-libxml-perl security update
  • From: Salvatore Bonaccorso
• Code Injection in Epicor Retail Store 3.2.03.01.008
  • From: webmaster
• [SECURITY] [DSA 3244-1] owncloud security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 3245-1] ruby1.8 security update
  • From: Alessandro Ghedini
• [SECURITY] [DSA 3246-1] ruby1.9.1 security update
  • From: Alessandro Ghedini
• [SECURITY] [DSA 3247-1] ruby2.1 security update
  • From: Alessandro Ghedini
• [SECURITY] [DSA 3248-1] libphp-snoopy security update
  • From: Moritz Muehlenhoff
• PhotoWebsite v3.1 iOS - File Include Web Vulnerability
  • From: Vulnerability Lab
• Grindr 2.1.1 iOS Bug Bounty #2 - Denial of Service Software Vulnerability
  • From: Vulnerability Lab
• Grindr v2.1.1 iOS - (eMail) Session Vulnerability
  • From: Vulnerability Lab
• Grindr v2.1.1 iOS Bounty #1 - (Session) Auth Bypass Vulnerabilities
  • From: Vulnerability Lab
• Cisco (Newsroom) - Client Side Cross Site Scripting Vulnerability
  • From: Vulnerability Lab
• HUAWEI MobiConnect 23.9.17.216 - Privilege Escalation Vulnerability
  • From: Vulnerability Lab
• [ MDVSA-2015:220 ] curl
  • From: security
• [ MDVSA-2015:219 ] curl
  • From: security
• [SECURITY] [DSA 3249-1] jqueryui security update
  • From: Sebastien Delafond
• [ MDVSA-2015:221 ] clamav
  • From: security
• [ MDVSA-2015:222 ] ppp
  • From: security
• [ MDVSA-2015:223 ] directfb
  • From: security
• [ MDVSA-2015:224 ] ruby
  • From: security
• [ MDVSA-2015:225 ] cherokee
  • From: security
• ESA-2015-077: EMC SourceOne Email Management Account Lockout
  • From: Security Alert
• [ MDVSA-2015:226 ] fcgi
  • From: security
• European Cyber Security Challenge 2015
  • From: Ivan Buetler
• ESA-2015-084: EMC AutoStart Packet Injection Vulnerability
  • From: Security Alert
• [SECURITY] [DSA 3250-1] wordpress security update
  • From: Alessandro Ghedini
• [CVE-2014-8146/8147] - ICU heap and integer overflows / I-C-U-FAIL
  • From: Pedro Ribeiro
• vPhoto-Album v4.2 iOS - File Include Web Vulnerability
  • From: Vulnerability Lab
• Fortinet FortiAnalyzer & FortiManager - Client Side Cross Site Scripting Vulnerability
  • From: Vulnerability Lab
• [ MDVSA-2015:227 ] mariadb
  • From: security
• [SECURITY] [DSA 3251-1] dnsmasq security update
  • From: Salvatore Bonaccorso
• F5 BIG-IQ Enumeration of users and Information Disclosure
  • From: jplopezy
• [SECURITY] CVE-2014-0230: Apache Tomcat DoS
  • From: Mark Thomas
• Arbitrary Variable Overwrite in eShop WordPress Plugin
  • From: High-Tech Bridge Security Research
• [ MDVSA-2015:228 ] nodejs
  • From: security
• [ MDVSA-2015:229 ] net-snmp
  • From: security
• [ MDVSA-2015:230 ] squid
  • From: security
• PDF Converter & Editor 2.1 iOS - File Include Vulnerability
  • From: Vulnerability Lab
• TORNADO Computer Trading CMS - SQL Injection Vulnerability
  • From: Vulnerability Lab
• Advisory: Filezilla FTP server is vulnerable to FTP PORT bounce
  • From: Amit Klein
• Cisco Security Advisory: Cisco UCS Central Software Arbitrary Command Execution Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• CSRF/XSS In Embed ArticlesWordpress Plugin
  • From: kingkaustubh
• CSRF/XSSIn Ad_InSerter Wordpress
  • From: kingkaustubh
• CSRF/XSS In Manage Engine Asset Explorer
  • From: kingkaustubh
• CSRF/XSS In ClickBank ads Wordpress Plugin
  • From: kingkaustubh
• CSRF/XSS In Ultimate Profile Builder by CMSLive Wordpress Plugin
  • From: kingkaustubh
• [SECURITY] [DSA 3252-1] sqlite3 security update
  • From: Moritz Muehlenhoff
• Alienvault OSSIM/USM Multiple Vulnerabilities
  • From: Peter Lapp
• [SE-2014-02] Some additional GAE Java security sandbox bypasses
  • From: Security Explorations
• APPLE-SA-2015-05-06-1 Safari 8.0.6, Safari 7.1.6, and Safari 6.2.6
  • From: Apple Product Security
• F5 ASM JSON Profile Bypass
  • From: Peter Lapp
• [SYSS-2015-017] BullGuard Internet Security - Authentication Bypass
  • From: matthias . deeg
• [SYSS-2015-019] BullGuard Antivirus - Authentication Bypass
  • From: matthias . deeg
• [SYSS-2015-018] BullGuard Premium Protection - Authentication Bypass
  • From: matthias . deeg
• [ MDVSA-2015:231 ] perl-XML-LibXML
  • From: security
• Wordpress Twenty Fifteen Theme - DOM XSS Vulnerability - CVE-2015-3429
  • From: Onur Yilmaz
• Yahoo eMarketing Bug Bounty #31 - Cross Site Scripting Vulnerability
  • From: Vulnerability Lab
• Album Streamer v2.0 iOS - Directory Traversal Vulnerability
  • From: Vulnerability Lab
• Grindr v2.1.1 iOS & Account System - Breach Attack Vulnerability
  • From: Vulnerability Lab
• [security bulletin] HPSBUX03194 rev.1 - HP-UX running sendmail(1M), Remote Disclosure of Information
  • From: security-alert
• CSRF/XSS in embed-articles Wordpress Plugin
  • From: kingkaustubh
• CSRF/XSS In Ad_Button Wordpress
  • From: kingkaustubh
• [SECURITY] [DSA 3253-1] pound security update
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 3251-2] dnsmasq regression update
  • From: Salvatore Bonaccorso
• [ MDVSA-2015:232 ] libtasn1
  • From: security
• Pimcore v3.0.5 CMS - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• [security bulletin] HPSBGN03328 rev.1 - Network Virtualization for HP LoadRunner and Performance Center, Remote Information Disclosure
  • From: security-alert
• Sqlbuddy Directory Traversal Read Arbitrary Files Vulnerability
  • From: apparitionsec
• Sqlbuddy Path Traversal Vulnerability
  • From: hyp3rlinx
• [SECURITY] [DSA 3254-1] suricata security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 3255-1] zeromq3 security update
  • From: Alessandro Ghedini
• [SECURITY] [DSA 3256-1] libtasn1-6 security update
  • From: Salvatore Bonaccorso
• [oCERT-2015-006] dcraw input sanitization errors
  • From: Andrea Barisani
• [security bulletin] HPSBGN03329 rev.1 - HP SDN VAN Controller, Remote Denial of Service (DoS), Distributed Denial of Service (DDoS)
  • From: security-alert
• [SECURITY] [DSA 3257-1] mercurial security update
  • From: Salvatore Bonaccorso
• [slackware-security] mariadb (SSA:2015-132-01)
  • From: Slackware Security Team
• [slackware-security] wpa_supplicant (SSA:2015-132-03)
  • From: Slackware Security Team
• [slackware-security] mysql (SSA:2015-132-02)
  • From: Slackware Security Team
• [security bulletin] HPSBMU03330 rev.1 - HP Matrix Operating Environment (MOE) running glibc on Linux, Remote Disclosure of Information
  • From: security-alert
• [SECURITY] [DSA 3258-1] quassel security update
  • From: Alessandro Ghedini
• [slackware-security] mozilla-firefox (SSA:2015-132-04)
  • From: Slackware Security Team
• SEC Consult SA-20150513-0 :: Multiple critical vulnerabilities in WSO2 Identity Server
  • From: SEC Consult Vulnerability Lab
• Cisco Security Advisory: Command Injection Vulnerability in Multiple Cisco TelePresence Products
  • From: Cisco Systems Product Security Incident Response Team
• Concrete5 Security Advisory - Multiple XSS Vulnerabilities - CVE-2015-2250
  • From: Onur Yilmaz
• [SECURITY] [DSA 3259-1] qemu security update
  • From: Moritz Muehlenhoff
• Web India Solutions CMS 2015 - SQL Injection Vulnerability
  • From: Vulnerability Lab
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence TC and TE Software
  • From: Cisco Systems Product Security Incident Response Team
• [CORE-2015-0009] - SAP LZC/LZH Compression Multiple Vulnerabilities
  • From: CORE Advisories Team
• [SECURITY] [DSA 3260-1] iceweasel security update
  • From: Moritz Muehlenhoff
• Server buffer overflow in Pure Faction <= 3.0c
  • From: soulsgetnothing
• Certificate trust vulnerability in Websense Content Gateway
  • From: Steve Shockley
• Sidu 5.2 Admin XSS Vulnerability
  • From: apparitionsec
• SEC Consult SA-20150514-0 :: Multiple vulnerabilities in Loxone Smart Home (part 2)
  • From: SEC Consult Vulnerability Lab
• [SECURITY] CVE-2014-7810: Apache Tomcat Security Manager Bypass
  • From: Mark Thomas
• phpMyAdmin 4.4.6 Man-In-the-Middle API Github
  • From: submit
• [SE-2014-02] Unconfirmed / unpatched vulnerabilities in Google App Engine
  • From: Security Explorations
• [SECURITY] [DSA 3261-1] libmodule-signature-perl security update
  • From: Salvatore Bonaccorso
• ESA-2015-087 EMC Document Sciences xPression SQL Injection Vulnerability
  • From: Security Alert
• [slackware-security] mozilla-thunderbird (SSA:2015-137-01)
  • From: Slackware Security Team
• CRUCMS Crucial Networking - SQL Injection Vulnerability
  • From: Vulnerability Lab
• Wireless Photo Transfer v3.0 iOS - File Include Vulnerability
  • From: Vulnerability Lab
• iClassSchedule 1.6 iOS & Android - Persistent UI Vulnerability
  • From: Vulnerability Lab
• OYO File Manager 1.1 iOS&Android - Multiple Vulnerabilities
  • From: Vulnerability Lab
• [SECURITY] [DSA 3262-1] xen security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 3175-2] kfreebsd-9 security update
  • From: Alessandro Ghedini
• WISE-FTP Software v8.0.2 - DLL Hijacking Vulnerability
  • From: metacom27
• [security bulletin] HPSBPI03322 rev.1 - HP Access Control Software, Local Unauthorized Access
  • From: security-alert
• APPLE-SA-2015-05-19-1 Watch OS 1.0.1
  • From: Apple Product Security
• [security bulletin] HPSBGN03286 rev.1 - HP LoadRunner, Buffer Overflow
  • From: security-alert
• [SECURITY] [DSA 3264-1] icedove security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 3263-1] proftpd-dfsg security update
  • From: Sebastien Delafond
• Staff FTP v3.04 Software - DLL Hijacking Vulnerability
  • From: metacom27
• ManageEngine EventLog Analyzer V:10.0 CSRF Vulnerability
  • From: akashchavan0708
• HiDisk 2.4 iOS - (currentFolderPath) Persistent Vulnerability
  • From: Vulnerability Lab
• Staff FTP v3.04 Software - DLL Hijacking Vulnerability
  • From: Vulnerability Lab
• [SECURITY] [DSA 3265-1] zendframework security update
  • From: David Prévot
• WISE-FTP Software v8.0.2 - DLL Hijacking Vulnerability
  • From: Vulnerability Lab
• Stored XSS in WP Photo Album Plus WordPress Plugin
  • From: High-Tech Bridge Security Research
• Eisbär SCADA (All Versions - iOS, Android & W8) - Persistent UI Vulnerability
  • From: Vulnerability Lab
• [security bulletin] HPSBUX03334 SSRT102000 rev.1 - HP-UX Running OpenSSL, Remote Denial of Service (DoS) and Other Vulnerabilities
  • From: security-alert
• [security bulletin] HPSBUX03333 SSRT102029 rev.1 - HP-UX Running NTP, Remote Denial of Service (DoS), or Other Vulnerabilities
  • From: security-alert
• CVE-2015-1833 (Jackrabbit WebDAV XXE vulnerability)
  • From: Julian Reschke
• [SECURITY] [DSA 3261-2] libmodule-signature-perl regression update
  • From: Salvatore Bonaccorso
• CVE for Apple's ECDHE-ECDSA SecureTransport bug?
  • From: Jeffrey Walton
• Webgrind XSS vulnerability
  • From: hyp3rlinx
• [SECURITY] [DSA 3266-1] fuse security update
  • From: Salvatore Bonaccorso
• CVE-2015-4039 - WordPress WP Membership plugin [Stored XSS]
  • From: pan . vagenas
• CVE-2015-4038 - WordPress WP Membership plugin [Privilege escalation]
  • From: pan . vagenas
• [security bulletin] HPSBMU03336 rev.1- HP Helion OpenStack affected by VENOM, Denial of Service (DoS), Execution of Arbitrary Code
  • From: security-alert
• [SECURITY] [DSA 3267-1] chromium-browser security update
  • From: Michael Gilbert
• [SECURITY] [DSA 3268-1] ntfs-3g security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 3270-1] postgresql-9.4 security update
  • From: Christoph Berg
• [CORE-2015-0010] - Sendio ESP Information Disclosure Vulnerability
  • From: CORE Advisories Team
• [security bulletin] HPSBGN03325 rev.1 - HP SiteScope, Remote Elevation of Privilege
  • From: security-alert
• [SECURITY] [DSA 3271-1] nbd security update
  • From: Alessandro Ghedini
• [SECURITY] [DSA 3272-1] ipsec-tools security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 3265-2] zendframework regression update
  • From: Alessandro Ghedini
• Command injection vulnerability in Synology Photo Station
  • From: Securify B.V.
• Reflected Cross-Site Scripting in Synology DiskStation Manager
  • From: Securify B.V.
• Synology Photo Station multiple Cross-Site Scripting vulnerabilities
  • From: Securify B.V.
• [SECURITY] [DSA 3273-1] tiff security update
  • From: Moritz Muehlenhoff
• CVE-2015-4084 - WordPress Free Counter Plugin [Stored XSS]
  • From: pan . vagenas
• [SECURITY] [DSA 3268-2] ntfs-3g security update
  • From: Salvatore Bonaccorso
• Thycotic Password Manager Secret Server iOS Application - MITM SSL Certificate Vulnerability
  • From: David Coomber
• [Onapsis Security Advisory 2015-007] SAP HANA Log Injection Vulnerability
  • From: Onapsis Research Labs
• [Onapsis Security Advisory 2015-006] SAP HANA Information Disclosure via SQL IMPORT FROM statement
  • From: Onapsis Research Labs
• DbNinja 3.2.6 Flash XSS Vulnerabilities
  • From: apparitionsec
• DbNinja 3.2.6 Flash XSS Vulnerabilities
  • From: apparitionsec
• [SEARCH-LAB advisory] More than fifty vulnerabilities in D-Link NAS and NVR devices
  • From: Gergely Eberhardt
• CVE-2015-1835: ...
  • From: Dirk-Willem van Gulik on behalf of Apache Cordova
• Audacity 2.0.5 contains Arbitrary DLL Injection Code Execution
  • From: mystyle_rahul
• [security bulletin] HPSBHF03340 rev.1 - HP ThinPro Linux and HP Smart Zero Core running HP Easy Setup Wizard, Local Unauthorized Access, Elevation of Privilege
  • From: security-alert
• [SECURITY] [DSA 3274-1] virtualbox security update
  • From: Moritz Muehlenhoff
• JSPMyAdmin SQL Injection, CSRF & XSS Vulnerabilities
  • From: apparitionsec
• [security bulletin] HPSBGN03332 rev.1 - HP Operations Analytics running SSLv3, Remote Denial of Service (DoS), Disclosure of Information
  • From: security-alert
• [security bulletin] HPSBMU03263 rev.3 - HP Insight Control running OpenSSL, Remote Disclosure of Information
  • From: security-alert
• [security bulletin] HPSBMU03267 rev.2 - HP Matrix Operating Environment and HP CloudSystem Matrix running OpenSSL, Remote Disclosure of Information
  • From: security-alert
• [security bulletin] HPSBMU03261 rev.2 - HP Systems Insight Manager running OpenSSL on Linux and Windows, Remote Disclosure of Information
  • From: security-alert
• [security bulletin] HPSBMU03223 rev.1 - HP Insight Control server provisioning running SSLv3, Remote Denial of Service (DoS), Disclosure of Information
  • From: security-alert