Mail Index

• Thread Index

• [FD] Mogwai Security Advisory MSA-2014-01: ManageEngine EventLog Analyzer Multiple Vulnerabilities
  • From: Advisories
• [FD] XSS vulnerability in In-Portal CMS
  • From: MustLive
• [FD] [The ManageOwnage Series, part III]: Multiple vulnerabilities / RCE in ManageEngine Desktop Central
  • From: Pedro Ribeiro
• [FD] SSH host key fingerprint - through HTTPS
  • From: John Leo
• [FD] [The ManageOwnage Series, part IV]: RCE / file upload in Eventlog Analyzer, feat. special guests h0ng10 and Mogwai Security
  • From: Pedro Ribeiro
• [FD] Few bugs in Wonderware Information Server
  • From: SCADA StrangeLove
• [FD] Avira License Application - Cross Site Request Forgery Vulnerability
  • From: Vulnerability Lab
• [FD] WWW File Share Pro v7.0 - Denial of Service Vulnerability
  • From: Vulnerability Lab
• Re: [FD] SSH host key fingerprint - through HTTPS
  • From: Stephanie Daugherty
• Re: [FD] SSH host key fingerprint - through HTTPS
  • From: Jeroen van der Ham
• Re: [FD] SSH host key fingerprint - through HTTPS
  • From: Jeroen van der Ham
• Re: [FD] SSH host key fingerprint - through HTTPS
  • From: maxigas
• [FD] Apple iOS v7.1.2 - Merge Apps Service Local Bypass Vulnerability
  • From: Vulnerability Lab
• [FD] XSS Reflected JQuery 1.4.2 - Create object option in runtime client-side
  • From: Mauro Risonho de Paula Assumpção
• [FD] Wordpress Plugin Vulnerability Dump - Part 1
  • From: Voxel@Night
• [FD] Defense in depth -- the Microsoft way (part 18): Microsoft Office 2010 registers command lines with unquoted pathnames
  • From: Stefan Kanthak
• [FD] Reflected XSS Attacks vulnerabilities used MIME Sniffing in Facebook Messenger and Facebook App for iOS.
  • From: William Costa
• Re: [FD] SSH host key fingerprint - through HTTPS
  • From: John Leo
• Re: [FD] SSH host key fingerprint - through HTTPS
  • From: John Leo
• [FD] [CORE-2014-0005] - Advantech WebAccess Vulnerabilities
  • From: CORE Advisories Team
• [FD] Syslog LogAnalyzer persistent XSS injection CVE-2014-6070
  • From: Dolev Farhi
• [FD] Uninit memory disclosure via truncated images in Firefox
  • From: Michal Zalewski
• Re: [FD] Mogwai Security Advisory MSA-2014-01: ManageEngine EventLog Analyzer Multiple Vulnerabilities
  • From: Pedro Ribeiro
• Re: [FD] Mogwai Security Advisory MSA-2014-01: ManageEngine EventLog Analyzer Multiple Vulnerabilities
  • From: Pedro Ribeiro
• [FD] Advanced Access Manager allows admin users to write arbitrary files and execute arbitrary php (WordPress plugin)
  • From: dxw Security
• Re: [FD] ntopng 1.2.0 XSS injection using monitored network traffic
  • From: Steffen Bauch
• [FD] Mpay24 prestashop payment module multiple vulnerabilities
  • From: Wire Ghoul
• Re: [FD] SSH host key fingerprint - through HTTPS
  • From: Árpád Magosányi
• [FD] Defense in depth -- the Microsoft way (part 19): still no "perfect forward secrecy" per default in Windows 8/7/Vista/Server 2012/Server 2008 [R2]
  • From: Stefan Kanthak
• [FD] ALCASAR <= 2.8 Remote Root Code Execution Vulnerability
  • From: john doe
• Re: [FD] SSH host key fingerprint - through HTTPS
  • From: Busindre ™
• Re: [FD] ntopng 1.2.0 XSS injection using monitored network traffic
  • From: Luca Carettoni
• [FD] WordPress Plugin Vulnerability Dump - Part 2
  • From: Voxel@Night
• [FD] Public WiFi Pcaps
  • From: Bryan Bickford
• Re: [FD] Public WiFi Pcaps
  • From: Eric Rand
• Re: [FD] Public WiFi Pcaps
  • From: uname -a
• [FD] NEW VMSA-2014-0008 VMware vSphere product updates to third party libraries
  • From: VMware Security Response Center
• [FD] [SECURITY] CVE-2013-4444 Remote Code Execution in Apache Tomcat
  • From: Mark Thomas
• [FD] rcrypt 1.5 public release and website
  • From: rage
• [FD] Ammyy Admin 0day
  • From: Matt Weeks
• Re: [FD] Public WiFi Pcaps
  • From: Wesley Spikes
• [FD] CSRF vulnerabilities in CacheGuard-OS v5.7.7 (CVE-2014-4865)
  • From: William Costa
• [FD] Photorange v1.0 iOS - File Include Web Vulnerability
  • From: Vulnerability Lab
• [FD] ChatSecure IM v2.2.4 iOS - Persistent Web Vulnerability
  • From: Vulnerability Lab
• [FD] NEW VMSA-2014-0009 VMware NSX and vCNS product updates address a critical information disclosure vulnerability
  • From: VMware Security Response Center
• [FD] Fwd: Security Access
  • From: Pedrov Jovovic
• [FD] Rooted SSH/SFTP Daemon Default Login Credentials
  • From: Larry W. Cashdollar
• Re: [FD] Fwd: Security Access
  • From: Fernando Mercês
• [FD] Briefcase 4.0 iOS - Code Execution & File Include Vulnerability
  • From: Vulnerability Lab
• [FD] ALCASAR <= 2.8.1 Remote Root Code Execution Vulnerability
  • From: john doe
• Re: [FD] Fwd: Security Access
  • From: Артур Истомин
• [FD] SingleClick Connect
  • From: Rob Fuller
• [FD] Wordfence v5.2.3 (Wordpress Security Plugin) - Multiple Vulnerabilities
  • From: Voxel@Night
• [FD] libre office listening on port 1599
  • From: Kemble Wagner
• [FD] USB&WiFi Flash Drive v1.3 iOS - Code Execution Vulnerability
  • From: Vulnerability Lab
• Re: [FD] libre office listening on port 1599
  • From: Brandon Vincent
• Re: [FD] Wordfence v5.2.3 (Wordpress Security Plugin) - Multiple Vulnerabilities
  • From: Mark Maunder
• [FD] Vulnerabilities in In-Portal CMS
  • From: MustLive
• [FD] [Quantum Leap Advisory] #QLA140808 Cart Engine 3.0 Multiple vulnerabilities - SQL Injection, XSS Reflected, Open Redirect
  • From: Pietro Minniti
• [FD] Laravel 2.1 Hash::make() bcrypt truncation
  • From: Pichaya Morimoto
• [FD] [CORE-2014-0006] - Delphi and C++ Builder VCL library Heap Buffer Overflow
  • From: CORE Advisories Team
• [FD] CSRF/XSS vulnerablity in Login Widget With Shortcode allows unauthenticated attackers to do anything an admin can do (WordPress plugin)
  • From: dxw Security
• [FD] Reflected XSS in WooCommerce – excelling eCommerce allows attackers ability to do almost anything an admin user can do (WordPress plugin)
  • From: dxw Security
• [FD] Vulnerability in WP-Ban allows visitors to bypass the IP blacklist in some configurations (WordPress plugin)
  • From: dxw Security
• Re: [FD] Laravel 2.1 Hash::make() bcrypt truncation
  • From: beloumi
• [FD] Multiple SQL Injection Vulnerabilities in ClassApps SelectSurvey.net
  • From: BillV-Lists
• [FD] ccnet-server remote DoS (assert) seafile-server 3.1.5
  • From: nop nop
• [FD] DoS seafile-server 3.1.5 ( ccnet-server - assert)
  • From: nop nop
• [FD] CVE ID Syntax Change - Deadline Approaching
  • From: Christey, Steven M.
• [FD] Oracle Corporation MyOracle - Persistent Vulnerability
  • From: Vulnerability Lab
• [FD] AST-2014-009: Remote crash based on malformed SIP subscription requests
  • From: Asterisk Security Team
• [FD] AST-2014-010: Remote crash when handling out of call message in certain dialplan configurations
  • From: Asterisk Security Team
• [FD] Apple iOS / OSX Foundation NSXMLParser XML eXternal Entity (XXE) Flaw
  • From: VSR Advisories
• [FD] Reflected XSS Attacks vulnerabilities in WatchGuard XTM 11.8.3 (CVE-2014-6413)
  • From: William Costa
• [FD] M/Monit - Account hijacking via CSRF
  • From: Dolev Farhi
• Re: [FD] Fwd: Security Access
  • From: gold flake
• [FD] Glype proxy cookie jar path traversal allows code execution
  • From: Securify B.V.
• [FD] Glype proxy privacy settings can be disabled via CSRF
  • From: Securify B.V.
• [FD] Glype proxy privacy settings can be disabled via CSRF
  • From: Securify B.V.
• [FD] Glype proxy local address filter bypass
  • From: Securify B.V.
• [FD] [KIS-2014-09] X2Engine <= 4.1.7 (SiteController.php) PHP Object Injection Vulnerability
  • From: Egidio Romano
• [FD] [KIS-2014-10] X2Engine <= 4.1.7 (FileUploadsFilter.php) Unrestricted File Upload Vulnerability
  • From: Egidio Romano
• [FD] CVE-2014-6603 suricata 2.0.3 Out-of-bounds access in SSH parser
  • From: Steffen Bauch
• [FD] TP-LINK WDR4300 - Stored XSS & DoS
  • From: Oz Elisyan
• [FD] Strength and Weakness of Methods to Confirm SSH Host Key
  • From: John Leo
• Re: [FD] Strength and Weakness of Methods to Confirm SSH Host Key
  • From: Gunnar Wolf
• Re: [FD] Strength and Weakness of Methods to Confirm SSH Host Key
  • From: Paul Vixie
• [FD] LSE Leading Security Experts GmbH - LSE-2014-06-10 - Perl CORE - Deep Recursion Stack Overflow
  • From: advisories
• [FD] Critical bash vulnerability CVE-2014-6271
  • From: Philip Cheong
• [FD] [TOOL] Hakabana release
  • From: Mehdi Talbi
• Re: [FD] Critical bash vulnerability CVE-2014-6271
  • From: Michal Zalewski
• Re: [FD] Critical bash vulnerability CVE-2014-6271
  • From: Paul Vixie
• [FD] MSA-2014-02: Typo3 Extension dmmjobcontrol Multiple Vulnerabilities (typo3-ext-sa-2014-012)
  • From: Advisories
• Re: [FD] Critical bash vulnerability CVE-2014-6271
  • From: Tony Arcieri
• Re: [FD] Critical bash vulnerability CVE-2014-6271
  • From: Yvan Janssens
• Re: [FD] Critical bash vulnerability CVE-2014-6271
  • From: Evan Teitelman
• Re: [FD] Critical bash vulnerability CVE-2014-6271
  • From: Godin, Erik
• Re: [FD] Critical bash vulnerability CVE-2014-6271
  • From: g@xxxxxxx
• Re: [FD] Critical bash vulnerability CVE-2014-6271
  • From: Tim
• Re: [FD] Critical bash vulnerability CVE-2014-6271
  • From: Paul Vixie
• Re: [FD] Critical bash vulnerability CVE-2014-6271
  • From: Paul Vixie
• Re: [FD] Critical bash vulnerability CVE-2014-6271
  • From: Seth Arnold
• Re: [FD] Critical bash vulnerability CVE-2014-6271
  • From: Paul Vixie
• [FD] GS Foto Uebertraeger v3.0 iOS - File Include Vulnerability
  • From: Vulnerability Lab
• [FD] Oracle Corporation MyOracle - Persistent Vulnerability
  • From: Vulnerability Lab
• [FD] SmarterTools Smarter Track 6-10 - Information Disclosure Vulnerability
  • From: Vulnerability Lab
• [FD] Paypal Inc Bug Bounty #16 - Persistent Mail Encoding Vulnerability
  • From: Vulnerability Lab
• [FD] Paypal Inc Bug Bounty #32 - Multiple Persistent Vulnerabilities
  • From: Vulnerability Lab
• Re: [FD] Critical bash vulnerability CVE-2014-6271 (slightly OT logo discussion)
  • From: Ben Lincoln (F7EFC8C9 - FD)
• [FD] uni-konstanz.de subdomain, arbitrary file download
  • From: b4mbi
• Re: [FD] Critical bash vulnerability CVE-2014-6271
  • From: Matt Hazinski
• [FD] XSS Reflected vulnerabilities and CSRF in Exinda WAN Optimization Suite (CVE-2014-7157, CVE-2014-7158)
  • From: William Costa
• [FD] Openfiler DoS via CSRF (CVE-2014-7190)
  • From: Dolev Farhi
• [FD] [The ManageOwnage Series, part V]: RCE / file upload / arbitrary file deletion in OpManager, Social IT and IT360
  • From: Pedro Ribeiro
• [FD] WPScan Vulnerability Database
  • From: Ryan Dewhurst
• [FD] All In One Wordpress Firewall 3.8.3 - Persistent Vulnerability
  • From: Vulnerability Lab
• [FD] PayPal Inc Bug Bounty #59 - Persistent Mail Encoding Vulnerability
  • From: Vulnerability Lab
• [FD] PayPal Inc Bug Bounty #71 PPM - Persistent Filter Vulnerability
  • From: Vulnerability Lab