Mail Index

• Thread Index

• [FD] FormatFactory 3.9.0 - (.task) Stack Overflow Vulnerability
  • From: Vulnerability Lab
• [FD] Kaspersky Company Account - Response XSS Vulnerability
  • From: Vulnerability Lab
• [FD] Kaspersky Company Account - FileManager Vulnerability
  • From: Vulnerability Lab
• [FD] SEC Consult SA-20160906-0 :: Private key for browser-trusted certificate embedded in multiple Aruba Networks / Alcatel-Lucent products
  • From: SEC Consult Vulnerability Lab
• [FD] Picosmos Shows v1.6.0 - Stack Buffer Overflow Vulnerability
  • From: Vulnerability Lab
• [FD] PHPHolidays CMS v3.00.50 - Cross Site Scripting Web Vulnerability
  • From: Vulnerability Lab
• [FD] Persistent Cross-Site Scripting vulnerability in WordPress due to unsafe processing of file names
  • From: Summer of Pwnage
• ***UNCHECKED*** [FD] Unrar 0.0.1 Memory Corruption
  • From: Rio Sherri
• [FD] Multiple vulnerabilities - Powerlogic/Schneider Electric IONXXXX series Smart Meters
  • From: Karn Ganeshen
• [FD] ELNet Energy & Electrical Power Meter - Mulitple Vulnerabilities
  • From: Karn Ganeshen
• [FD] Heap 'two-write-where-and-what' format string (FMS) technique
  • From: bashis
• [FD] Defense in depth -- the Microsoft way (part 43): restricting the DLL load order fails
  • From: Stefan Kanthak
• [FD] cve request: Airmail URLScheme render and file:// xss vulnerability
  • From: redrain root
• [FD] CVE-2016-4264 Adobe ColdFusion <= 11 XXE Vulnerability
  • From: Dawid Golunski
• [FD] CVE request - Samsumg Mobile Phone SVE-2016-6248: SystemUI Security issue
  • From: 0xr0ot
• [FD] AST-2016-006: Crash on ACK from unknown endpoint
  • From: Asterisk Security Team
• [FD] AST-2016-007: RTP Resource Exhaustion
  • From: Asterisk Security Team
• [FD] Reflected Cross-Site Scripting vulnerability in MailPoet Newsletters plugin
  • From: Summer of Pwnage
• [FD] Command injection in InfiniteWP Admin Panel
  • From: Summer of Pwnage
• [FD] Authorization bypass in InfiniteWP Admin Panel
  • From: Summer of Pwnage
• [FD] Persistent Cross-Site Scripting in Woocommerce WordPress plugin
  • From: Summer of Pwnage
• [FD] [oss-security] CVE request - Airmail URLScheme render and file:// xss vulnerability
  • From: redrain root
• [FD] Brute force every Samsung repair customer's info with ease
  • From: Justa Person
• [FD] CVE-2016-6662 - MySQL Remote Root Code Execution / Privilege Escalation ( 0day )
  • From: Dawid Golunski
• [FD] [RCESEC-2016-006] XenForo ToggleME 3.1.2 "/admin.php?options/list/toggleME" Multiple Persistent Cross-Site Scriptings
  • From: Julien Ahrens
• [FD] XSS found on www.google.fr
  • From: Sysdream Labs
• [FD] APPLE-SA-2016-09-13-1 iOS 10
  • From: Apple Product Security
• [FD] APPLE-SA-2016-09-13-2 Xcode 8
  • From: Apple Product Security
• [FD] APPLE-SA-2016-09-13-3 watchOS 3
  • From: Apple Product Security
• [FD] APPLE-SA-2016-09-14-1 iOS 10.0.1
  • From: Apple Product Security
• Re: [FD] Brute force every Samsung repair customer's info with ease
  • From: Nick
• Re: [FD] Brute force every Samsung repair customer's info with ease
  • From: Justa Person
• [FD] Security Advisory -- Multiple Vulnerabilities - MuM Map Edit
  • From: Paul Baade
• Re: [FD] Brute force every Samsung repair customer's info with ease
  • From: Justa Person
• Re: [FD] CVE-2016-6662 - MySQL Remote Root Code Execution / Privilege Escalation ( 0day )
  • From: Mark Koek
• [FD] Keypatch v2.0 is out!
  • From: Nguyen Anh Quynh
• [FD] Multiple vulnerabilities in ASUS RT-N10
  • From: MustLive
• [FD] Insecure transmission of data in Android applications developed with Adobe AIR [CVE-2016-6936]
  • From: Nightwatch Cybersecurity
• [FD] Peel Shopping 8.0.2: Object Injection
  • From: Curesec Research Team (CRT)
• [FD] Kajona 4.7: XSS & Directory Traversal
  • From: Curesec Research Team (CRT)
• [FD] MyBB 1.8.6: CSRF, Weak Hashing, Plaintext Passwords
  • From: Curesec Research Team (CRT)
• [FD] MyBB 1.8.6: SQL Injection
  • From: Curesec Research Team (CRT)
• [FD] MyBB 1.8.6: Improper validation of data passed to eval
  • From: Curesec Research Team (CRT)
• [FD] Oxwall 1.8.0: XSS & Open Redirect
  • From: Curesec Research Team (CRT)
• [FD] BINOM3 Electric Power Quality Meter Vulnerabilities
  • From: Karn Ganeshen
• [FD] Segmentation fault in Oracle Outside In File ID 8.5.3
  • From: Brandon Perry
• [FD] Facebook Privacy Issue - IRL Direct Human Reference
  • From: Hicham A. Tolimat
• [FD] ShoreTel Connect ONSITE Blind SQL Injection Vulnerability
  • From: Iraklis A. Mathiopoulos
• [FD] Unrestricted Upload/RCE in Neosense theme for WordPress
  • From: Walter Hop
• [FD] Critical Vulnerabilities in Sparkassen Bank Server discovered by German Security Researchers
  • From: Vulnerability Lab
• [FD] Joomla! session id not hashed.
  • From: Blazej Adamczyk
• [FD] Blind SQL Injection in Exponent CMS <= v2.3.9
  • From: Manuel Garcia Cardenas
• [FD] XSS Wordpress W3 Total Cache <= 0.9.4.1
  • From: Fernando A. Lagos Berardi
• [FD] CVE-2016-5725 - JCraft/JSch Java Secure Channel <= 0.1.53 recursive sftp-get path traversal (client-side, windows)
  • From: oststrom (public)
• [FD] SEC Consult SA-20160922-0 :: Potential backdoor access through multiple vulnerabilities in Kerio Control Unified Threat Management
  • From: SEC Consult Vulnerability Lab
• [FD] DllHijackAuditor 3.5 - Stack Buffer Overflow Vulnerability
  • From: Vulnerability Lab
• [FD] 3GP Player 4.7.0 - DLL Hijacking Vulnerability
  • From: Vulnerability Lab
• [FD] Recon Europe 2017 Call For Papers - January 27 - 29, 2017 - Brussels, Belgium
  • From: cfpbrussels2017
• [FD] Call for Papers 0x7E0 hack4 in Berlin
  • From: Daniel Ashton
• Re: [FD] CVE-2016-6662 - MySQL Remote Root Code Execution / Privilege Escalation ( 0day )
  • From: Dawid Golunski
• [FD] Vulnerability Note VU#667480 - AVer EH6108H+ hybrid DVR contains multiple vulnerabilities
  • From: Travis Lee
• [FD] Welcome Faraday 2.1! Collaborative Penetration Test & Vulnerability Management Platform
  • From: Francisco Amato
• Re: [FD] XSS Wordpress W3 Total Cache <= 0.9.4.1
  • From: Fernando A. Lagos Berardi
• [FD] skype installer dll hijacking vulnerability - CVE-2016-5720
  • From: Tien Phan
• [FD] [Adobe Flash] local-with-filesystem sandbox bypass via navigateToURL() and UI redressing
  • From: TRUEL IT | Leone Pontorieri
• Re: [FD] CVE-2016-6662 - MySQL Remote Root Code Execution / Privilege Escalation ( 0day )
  • From: Mark Koek
• Re: [FD] CVE-2016-6662 - MySQL Remote Root Code Execution / Privilege Escalation ( 0day )
  • From: Mark Koek
• [FD] IE11 is not following CORS specification for local files
  • From: Ricardo Iramar dos Santos
• Re: [FD] XSS Wordpress W3 Total Cache <= 0.9.4.1
  • From: Simon Rawet
• [FD] Edward Snowden won Glas of Reason - (Glas der Vernunft) Award 2016
  • From: Vulnerability Lab
• [FD] Multiple vulnerabilities found in the Dlink DWR-932B (backdoor, backdoor accounts, weak WPS, RCE ...)
  • From: Pierre Kim
• [FD] Symantec Messaging Gateway <= 10.6.1 Directory Traversal
  • From: Rio Sherri
• [FD] [REVIVE-SA-2016-002] Revive Adserver - Multiple vulnerabilities
  • From: Matteo Beccati
• [FD] Unauthenticated SQL Injection in Huge-IT Video Gallery v1.0.9 for Joomla
  • From: Larry W. Cashdollar
• [FD] Unauthenticated SQL Injection in Huge-IT Catalog v1.0.7 for Joomla
  • From: Larry W. Cashdollar
• [FD] KeepNote 0.7.8 Remote Command Execution
  • From: Rio Sherri
• [FD] Persistent XSS in Abus Security Center - CVSS 8.0
  • From: Tim Schughart