Mail Thread Index

• Date Index

• [FD] CVE-2016-3078: php: integer overflow in ZipArchive::getFrom*, Hans Jerry Illikainen
• [FD] CONFidence - May, 19-20th, Krakow - join the biggest hacker meeting in Poland!, Aleksandra Woźniak
• [FD] Mozilla doesn't care for upstream security fixes, and doesn't bother to send own security fixes upstream, Stefan Kanthak
• [FD] New BlackArch Linux ISOs (2016.04.28) and Installer released, Black Arch
• [FD] Garage4hackers Ranchoddas Webcast Series CTF Challenge, Sandeep Kamble
• [FD] Observium Commercial - CSRF & Authenticated Code Execution, Dolev Farhi
• [FD] real dangers of gsm setups, Gavrill Klimov
• [FD] Moxa MiiNePort - Multiple Vulnerabilities, Karn Ganeshen
• [FD] Mobile Security Framework (MobSF) v0.9.2 Released, Ajin Abraham
• [FD] CVE-2016-4338: Zabbix Agent 3.0.1 mysql.size shell command injection, Timo Juhani Lindfors
• [FD] CVE-2016-3627 CVE-2016-3705: libxml2: stack overflow in xml validator (parser), Simon Lees
• [FD] LSE Leading Security Experts GmbH - LSE-2016-02-03 - OXID eShop Path Traversal Vulnerability, LSE-Advisories
• [FD] APPLE-SA-2016-05-03-1 Xcode 7.3.1, Apple Product Security
• [FD] NetCommWireless HSPA 3G10WVE Wireless Router – Multiple vulnerabilities, Bhadresh Patel
  • Re: [FD] NetCommWireless HSPA 3G10WVE Wireless Router – Multiple vulnerabilities, Bhadresh Patel
• [FD] Swagger Editor v2.9.9 "description" Key DOM-based Cross-Site Scripting, Julien Ahrens
• [FD] CVE-2016-2784: CMS Made Simple < 2.1.3 & < 1.12.2 Web server Cache Poisoning, Lab I-Tracing
• [FD] CVE Request for ManageEngine Applications Manager Build No: 12700 Information Disclosure and Un-Authenticated SQL injection., Saif El-Sherei
  • Re: [FD] CVE Request for ManageEngine Applications Manager Build No: 12700 Information Disclosure and Un-Authenticated SQL injection., Saif El-Sherei
• [FD] Give a warm welcome to Faraday v1.0.19! New GTK interface, Custom Reports & Bug fixing, Francisco Amato
• [FD] Aruba ArubaOS/Aruba Instant/AirWave Management - Multiple Vulnerabilities (CVE-2016-2031, CVE-2016-2032), Sven Blumenstein
• [FD] WheresMyDroid Android App issues, 0x3d5157636b525761 iddqd
• [FD] t2'16: Call For Papers 2016 (Helsinki, Finland), Tomi Tuominen
• [FD] Skype Manager - (Email Change) Filter Bypass Vulnerability, Vulnerability Lab
• [FD] Notes v4.5 iOS - Arbitrary File Upload Vulnerability, Vulnerability Lab
• [FD] Wordpress Truemag Theme - Client Side Cross Site Scripting Web Vulnerability, Vulnerability Lab
• [FD] Trend Micro Direct Pass - Filter Bypass & Cross Site Scripting Vulnerability, Vulnerability Lab
• [FD] Stanford University - Multiple SQL Injection Vulnerabilities, Vulnerability Lab
• [FD] Nfdump Nfcapd 1.6.14 Multiple Vulnerabilities, Denis Andzakovic
• [FD] Intuit QuickBooks 2007 - 2016 Arbitrary Code Execution, Thegrideon Software
• [FD] CFP: Passwords 2016, Ruhr-University Bochum, Germany, Dec 5-7, Per Thorsheim
• [FD] BulletProof Security 53.3 - Security Advisory - Multiple XSS Vulnerabilities, Onur Yilmaz
• [FD] Skype Phishing Attack, Danny Kopping
  • Re: [FD] Skype Phishing Attack, Reindl Harald
    • Re: [FD] Skype Phishing Attack, Sebastian
      • Re: [FD] Skype Phishing Attack, Danny Kopping
  • Re: [FD] Skype Phishing Attack, Wim Remes
• [FD] CakePHP Framework <= 3.2.4 IP Spoofing Vulnerability, Dawid Golunski
• [FD] Huawei Mobile Broadband HL Service Local Privilege Escalation, Bogner Florian
• [FD] Webshell for IIS, Savio Bot
• [FD] runAV mod_security Remote Command Execution, Rio Sherri
  • Re: [FD] runAV mod_security Remote Command Execution, Reindl Harald
• [FD] [ERPSCAN-16-008] SAP NetWeaver AS JAVA - XSS vulnerability in ProxyServer servlet, ERPScan inc
• [FD] [ERPSCAN-16-009] SAP xMII - directory traversal vulnerability, ERPScan inc
• [FD] APPLE-SA-2016-05-16-1 tvOS 9.2.1, Apple Product Security
• [FD] APPLE-SA-2016-05-16-2 iOS 9.3.2, Apple Product Security
• [FD] APPLE-SA-2016-05-16-3 watchOS 2.2.1, Apple Product Security
• [FD] APPLE-SA-2016-05-16-4 OS X El Capitan 10.11.5 and Security Update 2016-003, Apple Product Security
• [FD] APPLE-SA-2016-05-16-5 Safari 9.1.1, Apple Product Security
• [FD] APPLE-SA-2016-05-16-6 iTunes 12.4, Apple Product Security
• [FD] Code Execution Vulnerabilities In 7zip, Nick Boyce
  • Re: [FD] Code Execution Vulnerabilities In 7zip, Nick Boyce
• [FD] OWTF 2.0a "Tikka Masala" released!, Abraham Aranguren
• [FD] [ICS] Meteocontrol WEB’log Multiple Vulnerabilities, Karn Ganeshen
• [FD] WSO2 SOA Enablement Server - Reflected Cross-Site Scripting, Etnies
• [FD] [ERPSCAN-16-010] SAP NetWeaver AS JAVA – information disclosure vulnerability, ERPScan inc
• [FD] [ERPSCAN-16-011] SAP NetWeaver AS JAVA – SQL injection vulnerability, ERPScan inc
• [FD] Linknat VOS2009/VOS3000 SQL injection, Osama Khalid
• [FD] Multiple Reflected XSS vulnerabilities in Infobae Website, Niemand Nie
• [FD] [RCESEC-2016-001] Postfix Admin v2.93 Generic POST Cross-Site Request Forgeries, Julien Ahrens
• [FD] MediaLink router MWN-WAPR300N - Several Vulnerabilities, David Spector
• [FD] poisoning / hijacking DNS locally of a third party domain: in shared and custom web hosting and in ISP, in automated /custom control panel software, Bipin Gautam
• [FD] MSA-2016-01: PowerFolder Remote Code Execution Vulnerability, Advisories Advisories
• [FD] Teampass v2.1.25 - Arbitrary File Download Vulnerability, Vulnerability Lab
• [FD] Teampass v2.1.25 - Unauthenticated Access Vulnerability, Vulnerability Lab
• [FD] Teampass v2.1.26 - Stored Cross Site Scripting Vulnerability, Vulnerability Lab
  • Re: [FD] Teampass v2.1.26 - Stored Cross Site Scripting Vulnerability, Ulisses Montenegro
    • Re: [FD] Teampass v2.1.26 - Stored Cross Site Scripting Vulnerability, Peter Kok
• [FD] Bugcrowd Bug Bounty #7 - Persistent Web Vulnerability, Vulnerability Lab
• [FD] Bashi v1.6 iOS - Persistent Mail Encoding Vulnerability, Vulnerability Lab
• [FD] [RCESEC-2016-002] XenAPI v1.4.1 for XenForo Multiple Unauthenticated SQL Injections, Julien Ahrens
• [FD] CVE-2016-4803 dotCMS - Email Header Injection, Elar Lang
• [FD] CVE-2015-3854 Battery permission leakage in Android, flanker
  • Re: [FD] CVE-2015-3854 Battery permission leakage in Android, flanker
• [FD] [RT-SA-2015-012] XML External Entity Expansion in Paessler PRTG Network Monitor, RedTeam Pentesting GmbH
• [FD] [RT-SA-2016-004] Websockify: Remote Code Execution via Buffer Overflow, RedTeam Pentesting GmbH
• [FD] [RT-SA-2016-005] Unauthenticated File Upload in Relay Ajax Directory Manager may Lead to Remote Command Execution, RedTeam Pentesting GmbH