Mail Index

• Thread Index

• [FD] Major Internet Explorer Vulnerability - NOT Patched
  • From: David Leo
• [FD] CVE-2014-9559 SnipSnap XSS (Cross-Site Scripting) Security Vulnerabilities
  • From: Jing Wang
• [FD] Banner Effect Header Security Advisory - XSS Vulnerability - CVE-2015-1384
  • From: Onur Yilmaz
• [FD] Defense in depth -- the Microsoft way (part 27): the command line you get differs from the command line I use to call you
  • From: Stefan Kanthak
• [FD] SQL injection vulnerabilities in zerocms <= v.1.3.3
  • From: Steffen Rösemann
• [FD] iTunes 12.1 for Windows: still outdated and VULNERABLE 3rd party libraries, still UNQUOTED and VULNERABLE pathnames C:\Program Files\...
  • From: Stefan Kanthak
• [FD] CVE-2014-5360 Landesk Management Suite XSS (Cross-Site Scripting) Security Vulnerability
  • From: Alex Haynes
• [FD] Sefrengo CMS v1.6.1 - Multiple SQL Injection Vulnerabilities
  • From: ITAS TEAM
• [FD] CVE-2014-9562 OptimalSite Content Management System (CMS) XSS (Cross-Site Scripting) Security Vulnerabilities
  • From: Jing Wang
• [FD] About Group (about.com) All Topics (At least 99.88% links) Vulnerable to XSS & Iframe Injection Security Attacks, About.com Open Redirect Security Vulnerabilities
  • From: Jing Wang
• Re: [FD] Major Internet Explorer Vulnerability - NOT Patched
  • From: Joey Fowler
• Re: [FD] iTunes 12.1 for Windows: still outdated and VULNERABLE 3rd party libraries, still UNQUOTED and VULNERABLE pathnames C:\Program Files\...
  • From: Stefan Kanthak
• Re: [FD] iTunes 12.1 for Windows: still outdated and VULNERABLE 3rd party libraries, still UNQUOTED and VULNERABLE pathnames C:\Program Files\...
  • From: Stefan Kanthak
• [FD] [Call For Papers] BSides Knoxville, TN - May 15th 2015
  • From: Adam Caudill
• [FD] Maldrone for drones.
  • From: Rahul Sasi
• [FD] My Little Forum Multiple XSS Security Vulnerabilities
  • From: Jing Wang
• [FD] MSA-2015-02: Hewlett-Packard UCMDB - JMX-Console Authentication Bypass
  • From: Advisories
• [FD] Capstone disassembly engine 3.0.1 released!
  • From: Nguyen Anh Quynh
• [FD] SQL injection vulnerability in Pragyan CMS v.3.0
  • From: Steffen Rösemann
• Re: [FD] Major Internet Explorer Vulnerability - NOT Patched
  • From: David Leo
• Re: [FD] Major Internet Explorer Vulnerability - NOT Patched
  • From: Ben Lincoln (F7EFC8C9 - FD)
• Re: [FD] Major Internet Explorer Vulnerability - NOT Patched
  • From: Zaakiy Siddiqui
• [FD] CFP: Extended submission deadline:: ISSRMET2015 Dubai
  • From: Hazel Ann
• Re: [FD] Major Internet Explorer Vulnerability - NOT Patched
  • From: Dimitris Strevinas
• Re: [FD] Major Internet Explorer Vulnerability - NOT Patched
  • From: David Leo
• [FD] Very Important Info About "Major Internet Explorer Vulnerability - NOT Patched"
  • From: David Leo
• Re: [FD] Major Internet Explorer Vulnerability - NOT Patched
  • From: David Leo
• [FD] LG On Screen Phone authentication bypass (CVE-2014-8757)
  • From: Imre Rad
• [FD] Responder Windows Version
  • From: laurent gaffie
• [FD] Multiple CSRF vulnerabilities in eFront v. 3.6.15.2 (CE)
  • From: Steffen Rösemann
• Re: [FD] Major Internet Explorer Vulnerability - NOT Patched
  • From: Barkley, Peter
• Re: [FD] Major Internet Explorer Vulnerability - NOT Patched
  • From: Justin Steven
• Re: [FD] Major Internet Explorer Vulnerability - NOT Patched
  • From: Ben Lincoln (F7EFC8C9 - FD)
• [FD] [RT-SA-2014-013] Cross-Site Scripting in IBM Endpoint Manager Relay Diagnostics Page
  • From: RedTeam Pentesting GmbH
• [FD] Barracuda Cloud Series - Filter Bypass Vulnerability (ID 731)
  • From: Vulnerability Lab
• [FD] Facebook Bug Bounty #23 - Session ID & CSRF Vulnerability
  • From: Vulnerability Lab
• [FD] BlinkSale Bug Bounty #1 - Encode & Validation Vulnerability
  • From: Vulnerability Lab
• [FD] Pandora FMS v5.1 SP1 - SQL Injection Web Vulnerability
  • From: Vulnerability Lab
• [FD] T-Mobile Internet Manager - DLL Hijacking (mfc71enu.dll)
  • From: Vulnerability Lab
• [FD] Radexscript CMS 2.2.0 - SQL Injection vulnerability
  • From: ITAS Team
• Re: [FD] Suspicious URL:Re: Major Internet Explorer Vulnerability - NOT Patched
  • From: Christoph Gruber
• [FD] MooPlayer 1.3.0 'm3u' SEH Buffer Overflow POC
  • From: Samandeep Singh
• [FD] CVE-2014-6412 - WordPress (all versions) lacks CSPRNG
  • From: Scott Arciszewski
• Re: [FD] Facebook Bug Bounty #23 - Session ID & CSRF Vulnerability
  • From: Scott Arciszewski
• Re: [FD] Major Internet Explorer Vulnerability - NOT Patched
  • From: Sijmen Ruwhof
• [FD] [ANN] MSKB 3004375 available for Windows 2000 and later too (but NOT from Mcirosoft)
  • From: Stefan Kanthak
• [FD] Shakacon 2015 Last Call for Papers (July 6-9 2015, Honolulu, Hawaii)
  • From: Jonathan Brossard
• [FD] eTouch SamePage v4.4.0.0.239 multiple vulnerabilities
  • From: Brandon Perry
• [FD] CVE-2014-8753 Cit-e-Net Multiple XSS (Cross-Site Scripting) Security Vulnerabilities
  • From: Jing Wang
• [FD] CVE-2014-9469 vBulletin XSS (Cross-Site Scripting) Security Vulnerabilities
  • From: Jing Wang
• [FD] Followup on CVE-2014-6412
  • From: Scott Arciszewski
• Re: [FD] CVE-2014-6412 - WordPress (all versions) lacks CSPRNG
  • From: Paul McMillan
• [FD] Vanilla forum Stored XSS on any private message / thread post
  • From: W S
• [FD] NetGear WNDR Authentication Bypass / Information Disclosure
  • From: Peter Adkins
• [FD] Reflecting XSS vulnerabitlies, unrestricted file upload and underlaying CSRF in Landsknecht Adminsystems CMS v. 4.0.1 (DEV, beta version)
  • From: Steffen Rösemann
• Re: [FD] Facebook Bug Bounty #23 - Session ID & CSRF Vulnerability
  • From: Alfie John
• Re: [FD] Major Internet Explorer Vulnerability - NOT Patched
  • From: Dan Ballance
• Re: [FD] Facebook Bug Bounty #23 - Session ID & CSRF Vulnerability
  • From: Julius Kivimäki
• [FD] CVE-2015-1574 - Google Email App 4.2.2 remote denial of service
  • From: Hector Marco
• [FD] CVE-2015-1593 - Linux ASLR integer overflow: Reducing stack entropy by four
  • From: Hector Marco
• [FD] HumHub .htaccess file upload vulnerability and remote code execution
  • From: A. W.
• [FD] Siemens SIMATIC TIA Portal (Step 7/WinCC) fixes
  • From: SCADA StrangeLove
• [FD] Ebay Inc Magento Bug Bounty #5 - Persistent Validation & Mail Encoding Web Vulnerability
  • From: Vulnerability Lab
• [FD] [RT-SA-2014-016] Directory Traversal and Arbitrary File Disclosure in hybris Commerce Software Suite
  • From: RedTeam Pentesting GmbH
• [FD] Agora Marketplace CSRF to Steal Bitcoins (agorahooawayyfoe.onion)
  • From: agoraagoraagora
• [FD] Bug in TradeWinds
  • From: Juan Martinez
• [FD] DLGuard Multiple XSS (Cross-Site Scripting) Security Vulnerabilities
  • From: Jing Wang
• [FD] DLGuard Full Path Disclosure (Information Leakage) Security Vulnerabilities
  • From: Jing Wang
• [FD] DLGuard SQL Injection Security Vulnerabilities
  • From: Jing Wang
• [FD] CVE-2014-9468 InstantASP InstantForum.NET Multiple XSS (Cross-Site Scripting) Security Vulnerabilities
  • From: Jing Wang
• [FD] Crushftp 7.2.0 - Multiple CSRF & XSS Vulnerabilities
  • From: Rehan Ahmed
• [FD] [CVE-REQUEST] Multiple vulnerabilities on GLPI
  • From: Stiehl
• [FD] PHP Code Execution in jui_filter_rules Parsing Library
  • From: Timo Schmid
• [FD] Reflecting XSS- and SQL injection-vulnerabilities in the administrative backend of Piwigo <= v. 2.7.3
  • From: Steffen Rösemann
• [FD] Reflected File Download in AOL Search Website
  • From: Ricardo Iramar dos Santos
• [FD] WooCommerce WordPress plugin 2.2.10 Reflected XSS
  • From: Eric Flokstra
• [FD] Easy Social Icons WordPress plugin v1.2.2 Persistent XSS and CSRF
  • From: Eric Flokstra
• [FD] New version of Hyperion PE runtime encrypter
  • From: Levon Kayan
• [FD] VLC for Android beta crash
  • From: Paweł
• [FD] Samsung iPolis XnsSdkDeviceIpInstaller.ocx ActiveX Remote Code Execution Vulnerabilities
  • From: Praveen D
• [FD] Defense in depth -- the Microsoft way (part 28): yes, we can (create even empty, but properly quoted pathnames)
  • From: Stefan Kanthak
• [FD] iTunes 12.1.1 for Windows: still outdated and VULNERABLE 3rd party libraries, still UNQUOTED and VULNERABLE pathnames C:\Program Files\...
  • From: Stefan Kanthak
• [FD] Multiple stored XSS-vulnerabilities in MyBB v. 1.8.3
  • From: Steffen Rösemann
• [FD] Multiple SQLi-, stored/reflected XSS- and CSRF-vulnerabilities in phpBugTracker v. 1.6.0
  • From: Steffen Rösemann
• [FD] Use After Free Vulnerability in unserialize() with DateTime* [CVE-2015-0273]
  • From: Taoguang Chen
• [FD] Type Confusion Infoleak Vulnerability in unserialize() with DateTimeZone
  • From: Taoguang Chen
• [FD] xaviershay-dm-rails v0.10.3.8 mysql credential exposure
  • From: Larry W. Cashdollar
• [FD] Defense in depth -- the Microsoft way (part 29): contradicting, ambiguous, incomplete documentation
  • From: Stefan Kanthak
• [FD] Fwd: Apple OS X: Don't trust, and don't prompt to trust certificates
  • From: Douglas Held
• [FD] ECommerce-Shopping Cart Zeuscart v. 4: Multiple reflecting XSS-, SQLi and InformationDisclosure-vulnerabilities
  • From: Steffen Rösemann
• [FD] WESP SDK multiple Remote Code Execution Vulnerabilities
  • From: Praveen D
• [FD] [Onapsis Security Advisory 2015-001] Multiple Reflected Cross Site Scripting Vulnerabilities in SAP HANA Web-based Development Workbench
  • From: Onapsis Research Labs
• [FD] [Onapsis Security Advisory 2015-002] SAP Business Objects Unauthorized File Repository Server Read via CORBA
  • From: Onapsis Research Labs
• [FD] [Onapsis Security Advisory 2015-003] SAP Business Objects Unauthorized File Repository Server Write via CORBA
  • From: Onapsis Research Labs
• [FD] [Onapsis Security Advisory 2015-005] SAP Business Objects Unauthorized Audit Information Access via CORBA
  • From: Onapsis Research Labs
• [FD] [Onapsis Security Advisory 2015-004] SAP Business Objects Unauthorized Audit Information Delete via CORBA
  • From: Onapsis Research Labs
• [FD] DSS TFTP 1.0 Server - Path Traversal Vulnerability
  • From: Vulnerability Lab
• [FD] Data Source: Scopus CMS - SQL Injection Web Vulnerability
  • From: Vulnerability Lab
• [FD] Wireless File Transfer Pro Android - Multiple CSRF Vulnerabilities
  • From: Vulnerability Lab
• [FD] SEC Consult SA-20150227-0 :: Multiple vulnerabilities in Loxone Smart Home
  • From: SEC Consult Vulnerability Lab
• [FD] Swiss File Knife v1.7.4 HTTP - Buffer Overflow Vulnerability
  • From: Vulnerability Lab