Mail Index

• Thread Index

• [FD] Wordpress Scoreme Theme - Client Side Cross Site Scripting Web Vulnerability
  • From: Vulnerability Lab
• [FD] Techsoft Web Solutions CMS 2016 Q2 - SQL Injection Web Vulnerability
  • From: Vulnerability Lab
• [FD] FortiManager & FortiAnalyzer 5.x (Appliance Application) - (filename) Persistent Web Vulnerability
  • From: Vulnerability Lab
• [FD] [SE-2012-01] Broken security fix in IBM Java 7/8
  • From: Security Explorations
• [FD] [CVE-2016-3659]Cacti graph_view.php SQL Injection Vulnerability
  • From: xiaotian.wang@dbappsecurity.com.cn
• [FD] DotCMS injection Vulnerability
  • From: =?gb18030?b?cDB4MjAxNQ==?=
• [FD] Daily Edition theme for WordPress
  • From: MustLive
• [FD] APPLE-SA-2016-03-31-1 iBooks Author 2.4.1
  • From: Apple Product Security
• [FD] Unauthenticated CSRF reboot flaw in ARRIS (Motorola) SURFboard modems
  • From: David Longenecker
• [FD] Daily Edition theme for WordPress
  • From: MustLive
• [FD] Multiple vulnerabilities found in Quanta LTE routers (backdoor, backdoor accounts, RCE, weak WPS ...)
  • From: Pierre Kim
• [FD] SQL Injection Vulnerability in DotCms v3.3
  • From: xiong piaox
• [FD] MeshCMS Command Execution Vulnerability
  • From: xiong piaox
• [FD] Pulse CMS Multiple Vulnerabilities
  • From: xiong piaox
• [FD] ManageEngine Password Manager Pro Multiple Vulnerabilities
  • From: Sebastian Perez
• [FD] CVE-2016-2191: optipng: invalid write
  • From: Hans Jerry Illikainen
• [FD] Reprint your I$ACA CPE's using Burp Suite! ( the no refund addition ! )
  • From: robert mccurdy
• [FD] Tradukka affected by Cross-Site Scripting
  • From: Francisco Javier Santiago Vázquez
• [FD] Bitcoin/Altcoin Stratum Pool Mass Duplicate Shares Exploit
  • From: exploits4coins.com 2
• [FD] Apple iOS 9.3.1 (iPhone 6S & iPhone Plus) - (3D Touch) Passcode Bypass Vulnerability
  • From: Vulnerability Lab
• Re: [FD] [SE-2012-01] Broken security fix in IBM Java 7/8
  • From: Security Explorations
• [FD] MeshCMS 3.6 – Multiple vulnerabilities
  • From: xiong piaox
• [FD] Fireware XTM Web UI - Open Redirect
  • From: Manuel Mancera
• [FD] hardwear.io CFP 2016 - Hardware Security Conference Call for Papers
  • From: Hardwear Team
• [FD] Panda Security Multiple Business Products - Privilege Escalation
  • From: Kyriakos Economou
• [FD] Panda Security 2016 Home User Products - Privilege Escalation
  • From: Kyriakos Economou
• [FD] CVE-2016-3672 - Unlimiting the stack not longer disables ASLR
  • From: Hector Marco-Gisbert
• [FD] Check out faraday v1.0.18! New CLI mode, Jira support & bug fixes!
  • From: Francisco Amato
• [FD] Techsoft WS CMS (2016 Q2) - SQL Injection Web Vulnerability
  • From: Vulnerability Lab
• [FD] Virtual Freer v1.58 - Client Side Cross Site Scripting Vulnerability
  • From: Vulnerability Lab
• [FD] Quicksilver HQ VoHo Concept4E CMS v1.0 - Multiple SQL Injection Web Vulnerabilities
  • From: Vulnerability Lab
• [FD] Eight Webcom CMS (2016 Q2) - SQL Injection Vulnerability
  • From: Vulnerability Lab
• [FD] Perli v2.6 iOS - Filter Bypass & Persistent Vulnerability
  • From: Vulnerability Lab
• [FD] Monsta Box WebFTP 1.8.2 and below arbitrary file read and path traversal vulnerabilities
  • From: Imre RAD
• [FD] AccelSite Content Manager v1.0 - SQL Injection Vulnerability
  • From: Vulnerability Lab
• [FD] WP Multiple Meta Box v1.0 - SQL Injection Vulnerability
  • From: Vulnerability Lab
• [FD] [CVE-2016-3972]DotCMS Directory traversal vulnerability
  • From: xiong piaox
• [FD] [CVE-2016-3971]DotCMS xss vulnerability
  • From: xiong piaox
• [FD] Blind SQL injections in CivicRM
  • From: Simon Waters (Surevine)
• [FD] Express Zip <= 2.40 Path Traversal
  • From: Rio Sherri
• [FD] end of useable crypto in browsers?
  • From: Árpád Magosányi
• [FD] Wordpress Robo Gallery v2.0.14 - Code Execution Vulnerability
  • From: Vulnerability Lab
• [FD] .NET Framework 4.6 allows side loading of Windows API Set DLL
  • From: Securify B.V.
• [FD] [SE-2012-01] Yet another broken security fix in IBM Java 7/8
  • From: Security Explorations
• [FD] Webline CMS (2016Q2) - SQL Injection Vulnerability
  • From: Vulnerability Lab
• [FD] Django CMS v3.2.3 - Filter Bypass & Persistent Vulnerability
  • From: Vulnerability Lab
• [FD] DAVOSET v.1.2.8
  • From: MustLive
• Re: [FD] end of useable crypto in browsers?
  • From: Seth Arnold
• Re: [FD] end of useable crypto in browsers?
  • From: Sebastian
• Re: [FD] end of useable crypto in browsers?
  • From: Árpád Magosányi
• Re: [FD] end of useable crypto in browsers?
  • From: Sebastian
• [FD] Call for Papers for 4th Balkan Computer Congress – BalCCon2k16
  • From: Milos Krasojevic
• [FD] AST-2016-004: Long Contact URIs in REGISTER requests can crash Asterisk
  • From: Asterisk Security Team
• [FD] AST-2016-005: TCP denial of service in PJProject
  • From: Asterisk Security Team
• Re: [FD] end of useable crypto in browsers?
  • From: Reindl Harald
• Re: [FD] end of useable crypto in browsers?
  • From: Sebastian
• Re: [FD] end of useable crypto in browsers?
  • From: Tony Arcieri
• [FD] PfSense Community Edition Multiple Vulnerabilities
  • From: Francesco Oddo
• [FD] [ERPSCAN-16-001] SAP NetWeaver 7.4 - XSS vulnerability
  • From: ERPScan inc
• [FD] [ERPSCAN-16-002] SAP HANA - log injection and no size restriction
  • From: ERPScan inc
• [FD] [ERPSCAN-16-003] SAP NetWeaver 7.4 - cryptographic issues
  • From: ERPScan inc
• [FD] Microsoft Internet Explorer 11 MSHTML.DLL Remote Binary Planting Vulnerability
  • From: Sandro Poppi
• [FD] Announcing NorthSec 2016 - Montreal, May 19-22
  • From: Pierre-David / NorthSec Conference
• [FD] Executable installers are vulnerable^WEVIL (case 33): GData's installers allow escalation of privilege
  • From: Stefan Kanthak
• [FD] [ERPSCAN-16-004] SAP NetWeaver 7.4 (Pmitest servlet) – XSS vulnerability
  • From: ERPScan inc
• [FD] [ERPSCAN-16-005] SAP HANA hdbxsengine JSON – DoS vulnerability
  • From: ERPScan inc
• [FD] Multiple Reflected XSS vulnerabilities in Oliver (formerly Webshare) v1.3.1
  • From: research@xxxxxxxxxx
• [FD] Lock Browser 5.3 (Browser Security, Open Source, Python)
  • From: David Leo
• [FD] Avast SandBox Escape via IOCTL Requests
  • From: Kyriakos Economou
• [FD] Time-based SQL Injection in Admin panel ImpressCMS <= v1.3.9
  • From: Manuel Garcia Cardenas
• [FD] Wordpress iThemes Security (Better WP Security) Insecure Backup/Logfile Generation (access rights)
  • From: Sysdream Labs
• [FD] Wordpress iThemes Security (Better WP Security) Insecure Backup/Logfile Generation (predicatable filename)
  • From: Sysdream Labs
• [FD] CVE-2016-3074: libgd: signedness vulnerability
  • From: Hans Jerry Illikainen
• [FD] SEC Consult SA-20160422-0 :: Insecure credential storage in my devolo Android app
  • From: SEC Consult Vulnerability Lab
• [FD] SEC Consult SA-20160422-1 :: Multiple vulnerabilities in Digitalstrom Konfigurator
  • From: SEC Consult Vulnerability Lab
• [FD] C & C++ for OS - Filter Bypass & Persistent Vulnerability
  • From: Vulnerability Lab
• [FD] Totemomail v4.x & v5.x - Filter Bypass & Persistent Vulnerability
  • From: Vulnerability Lab
• [FD] UBNT Bug Bounty #2 - XML External Entity Vulnerability
  • From: Vulnerability Lab
• [FD] Cyberoam Central Console v02.03.1 - Multiple Persistent Vulnerabilities
  • From: Vulnerability Lab
• [FD] Django CMS v3.2.3 - Filter Bypass & Persistent Vulnerability
  • From: Vulnerability Lab
• [FD] Negin Group CMS - (v) Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• [FD] VoipNow v4.0.1 - (xajax_handler) Persistent Vulnerability
  • From: Vulnerability Lab
• [FD] Trend Micro (Account) - Email Spoofing Web Vulnerability
  • From: Vulnerability Lab
• [FD] Sophos XG Firewall (SF01V) - Persistent Web Vulnerability
  • From: Vulnerability Lab
• [FD] Remote Code Execution in Shopware <5.1.5 (CVE-2016-3109)
  • From: David Vieira-Kurz
• [FD] [CFP] GreHack 2016
  • From: Paget Philippe
• [FD] Request For Comment: Possible Flaw of Bypassing CAPTCHA in AWS Login?
  • From: David Leo
• [FD] Multiple Vulnerabilities in Voo branded Netgear CG3700b
  • From: dev
• [FD] Oracle Discoverer Viewer BI - Open Redirect Vulnerability
  • From: Vulnerability Lab
• [FD] EMC M&R (Watch4net) lacks Cross-Site Request Forgery protection
  • From: Securify B.V.
• [FD] Bug bounty submission
  • From: test111 tesla
• [FD] Xerox Phaser 6700 - Remote Root-Exploits utilizing Clone Files
  • From: Raphael Ernst
• [FD] Wordpress Truemag Theme - Client Side Cross Site Scripting Web Vulnerability
  • From: Vulnerability Lab