Mail Index

• Thread Index

• [FD] CVE-2016-3078: php: integer overflow in ZipArchive::getFrom*
  • From: Hans Jerry Illikainen
• [FD] CONFidence - May, 19-20th, Krakow - join the biggest hacker meeting in Poland!
  • From: Aleksandra Woźniak
• [FD] Mozilla doesn't care for upstream security fixes, and doesn't bother to send own security fixes upstream
  • From: Stefan Kanthak
• [FD] New BlackArch Linux ISOs (2016.04.28) and Installer released
  • From: Black Arch
• [FD] Garage4hackers Ranchoddas Webcast Series CTF Challenge
  • From: Sandeep Kamble
• [FD] Observium Commercial - CSRF & Authenticated Code Execution
  • From: Dolev Farhi
• [FD] real dangers of gsm setups
  • From: Gavrill Klimov
• [FD] Moxa MiiNePort - Multiple Vulnerabilities
  • From: Karn Ganeshen
• [FD] Mobile Security Framework (MobSF) v0.9.2 Released
  • From: Ajin Abraham
• [FD] CVE-2016-4338: Zabbix Agent 3.0.1 mysql.size shell command injection
  • From: Timo Juhani Lindfors
• [FD] CVE-2016-3627 CVE-2016-3705: libxml2: stack overflow in xml validator (parser)
  • From: Simon Lees
• [FD] LSE Leading Security Experts GmbH - LSE-2016-02-03 - OXID eShop Path Traversal Vulnerability
  • From: LSE-Advisories
• [FD] APPLE-SA-2016-05-03-1 Xcode 7.3.1
  • From: Apple Product Security
• [FD] NetCommWireless HSPA 3G10WVE Wireless Router – Multiple vulnerabilities
  • From: Bhadresh Patel
• [FD] Swagger Editor v2.9.9 "description" Key DOM-based Cross-Site Scripting
  • From: Julien Ahrens
• [FD] CVE-2016-2784: CMS Made Simple < 2.1.3 & < 1.12.2 Web server Cache Poisoning
  • From: Lab I-Tracing
• [FD] CVE Request for ManageEngine Applications Manager Build No: 12700 Information Disclosure and Un-Authenticated SQL injection.
  • From: Saif El-Sherei
• [FD] Give a warm welcome to Faraday v1.0.19! New GTK interface, Custom Reports & Bug fixing
  • From: Francisco Amato
• Re: [FD] NetCommWireless HSPA 3G10WVE Wireless Router – Multiple vulnerabilities
  • From: Bhadresh Patel
• [FD] Aruba ArubaOS/Aruba Instant/AirWave Management - Multiple Vulnerabilities (CVE-2016-2031, CVE-2016-2032)
  • From: Sven Blumenstein
• Re: [FD] CVE Request for ManageEngine Applications Manager Build No: 12700 Information Disclosure and Un-Authenticated SQL injection.
  • From: Saif El-Sherei
• [FD] WheresMyDroid Android App issues
  • From: 0x3d5157636b525761 iddqd
• [FD] t2'16: Call For Papers 2016 (Helsinki, Finland)
  • From: Tomi Tuominen
• [FD] Skype Manager - (Email Change) Filter Bypass Vulnerability
  • From: Vulnerability Lab
• [FD] Notes v4.5 iOS - Arbitrary File Upload Vulnerability
  • From: Vulnerability Lab
• [FD] Wordpress Truemag Theme - Client Side Cross Site Scripting Web Vulnerability
  • From: Vulnerability Lab
• [FD] Trend Micro Direct Pass - Filter Bypass & Cross Site Scripting Vulnerability
  • From: Vulnerability Lab
• [FD] Stanford University - Multiple SQL Injection Vulnerabilities
  • From: Vulnerability Lab
• [FD] Nfdump Nfcapd 1.6.14 Multiple Vulnerabilities
  • From: Denis Andzakovic
• [FD] Intuit QuickBooks 2007 - 2016 Arbitrary Code Execution
  • From: Thegrideon Software
• [FD] CFP: Passwords 2016, Ruhr-University Bochum, Germany, Dec 5-7
  • From: Per Thorsheim
• [FD] BulletProof Security 53.3 - Security Advisory - Multiple XSS Vulnerabilities
  • From: Onur Yilmaz
• [FD] Skype Phishing Attack
  • From: Danny Kopping
• [FD] CakePHP Framework <= 3.2.4 IP Spoofing Vulnerability
  • From: Dawid Golunski
• [FD] Huawei Mobile Broadband HL Service Local Privilege Escalation
  • From: Bogner Florian
• [FD] Webshell for IIS
  • From: Savio Bot
• Re: [FD] Skype Phishing Attack
  • From: Reindl Harald
• Re: [FD] Skype Phishing Attack
  • From: Wim Remes
• [FD] runAV mod_security Remote Command Execution
  • From: Rio Sherri
• [FD] [ERPSCAN-16-008] SAP NetWeaver AS JAVA - XSS vulnerability in ProxyServer servlet
  • From: ERPScan inc
• [FD] [ERPSCAN-16-009] SAP xMII - directory traversal vulnerability
  • From: ERPScan inc
• [FD] APPLE-SA-2016-05-16-1 tvOS 9.2.1
  • From: Apple Product Security
• [FD] APPLE-SA-2016-05-16-2 iOS 9.3.2
  • From: Apple Product Security
• [FD] APPLE-SA-2016-05-16-3 watchOS 2.2.1
  • From: Apple Product Security
• [FD] APPLE-SA-2016-05-16-4 OS X El Capitan 10.11.5 and Security Update 2016-003
  • From: Apple Product Security
• [FD] APPLE-SA-2016-05-16-5 Safari 9.1.1
  • From: Apple Product Security
• [FD] APPLE-SA-2016-05-16-6 iTunes 12.4
  • From: Apple Product Security
• Re: [FD] runAV mod_security Remote Command Execution
  • From: Reindl Harald
• Re: [FD] Skype Phishing Attack
  • From: Sebastian
• [FD] Code Execution Vulnerabilities In 7zip
  • From: Nick Boyce
• Re: [FD] Code Execution Vulnerabilities In 7zip
  • From: Nick Boyce
• [FD] OWTF 2.0a "Tikka Masala" released!
  • From: Abraham Aranguren
• [FD] [ICS] Meteocontrol WEB’log Multiple Vulnerabilities
  • From: Karn Ganeshen
• [FD] WSO2 SOA Enablement Server - Reflected Cross-Site Scripting
  • From: Etnies
• Re: [FD] Skype Phishing Attack
  • From: Danny Kopping
• [FD] [ERPSCAN-16-010] SAP NetWeaver AS JAVA – information disclosure vulnerability
  • From: ERPScan inc
• [FD] [ERPSCAN-16-011] SAP NetWeaver AS JAVA – SQL injection vulnerability
  • From: ERPScan inc
• [FD] Linknat VOS2009/VOS3000 SQL injection
  • From: Osama Khalid
• [FD] Multiple Reflected XSS vulnerabilities in Infobae Website
  • From: Niemand Nie
• [FD] [RCESEC-2016-001] Postfix Admin v2.93 Generic POST Cross-Site Request Forgeries
  • From: Julien Ahrens
• [FD] MediaLink router MWN-WAPR300N - Several Vulnerabilities
  • From: David Spector
• [FD] poisoning / hijacking DNS locally of a third party domain: in shared and custom web hosting and in ISP, in automated /custom control panel software
  • From: Bipin Gautam
• [FD] MSA-2016-01: PowerFolder Remote Code Execution Vulnerability
  • From: Advisories Advisories
• [FD] Teampass v2.1.25 - Arbitrary File Download Vulnerability
  • From: Vulnerability Lab
• [FD] Teampass v2.1.25 - Unauthenticated Access Vulnerability
  • From: Vulnerability Lab
• [FD] Teampass v2.1.26 - Stored Cross Site Scripting Vulnerability
  • From: Vulnerability Lab
• [FD] Bugcrowd Bug Bounty #7 - Persistent Web Vulnerability
  • From: Vulnerability Lab
• [FD] Bashi v1.6 iOS - Persistent Mail Encoding Vulnerability
  • From: Vulnerability Lab
• [FD] [RCESEC-2016-002] XenAPI v1.4.1 for XenForo Multiple Unauthenticated SQL Injections
  • From: Julien Ahrens
• [FD] CVE-2016-4803 dotCMS - Email Header Injection
  • From: Elar Lang
• Re: [FD] Teampass v2.1.26 - Stored Cross Site Scripting Vulnerability
  • From: Ulisses Montenegro
• [FD] CVE-2015-3854 Battery permission leakage in Android
  • From: flanker
• Re: [FD] CVE-2015-3854 Battery permission leakage in Android
  • From: flanker
• Re: [FD] Teampass v2.1.26 - Stored Cross Site Scripting Vulnerability
  • From: Peter Kok
• [FD] [RT-SA-2015-012] XML External Entity Expansion in Paessler PRTG Network Monitor
  • From: RedTeam Pentesting GmbH
• [FD] [RT-SA-2016-004] Websockify: Remote Code Execution via Buffer Overflow
  • From: RedTeam Pentesting GmbH
• [FD] [RT-SA-2016-005] Unauthenticated File Upload in Relay Ajax Directory Manager may Lead to Remote Command Execution
  • From: RedTeam Pentesting GmbH