Mail Thread Index

• Date Index

• [FD] DefenseCode WebScanner DAST Advisory: WordPress Tribulant Newsletters Plugin Multiple Security Vulnerabilities, DefenseCode
• [FD] DefenseCode ThunderScan SAST Advisory: WordPress Simple Slideshow Manager Plugin Multiple Security Vulnerabilities, DefenseCode
• [FD] DefenseCode ThunderScan SAST Advisory: WordPress No External Links Plugin Security Vulnerability, DefenseCode
• [FD] Qualys Security Advisory - CVE-2017-1000367 in Sudo's get_process_ttyname() for Linux, Qualys Security Advisory
• [FD] [CVE-2017-5688] Executable installers are vulnerable^WEVIL (case 52): Intel installation framework allows arbitrary code execution with escalation of privilege, Stefan Kanthak
• [FD] X41-2017-005 - Multiple Vulnerabilities in peplink balance routers, X41 D-Sec GmbH Advisories
• [FD] CVE-2017-8083 CompuLab IntensePC lacks BIOS Write Protection, Hal Martin
• [FD] Perch v3.0.3 CMS - Multiple Web Vulnerabilities, Vulnerability Lab
• [FD] Xavier v2.4 PHP MP - SQL Injection Web Vulnerabilities, Vulnerability Lab
• [FD] SEC Consult SA-20170607-0 :: Various WiMAX CPEs Authentication Bypass, SEC Consult Vulnerability Lab
• [FD] libcroco multiple vulnerabilities, qflb.wu
  • Re: [FD] libcroco multiple vulnerabilities, Alan Coopersmith
• [FD] libquicktime multiple vulnerabilities, qflb.wu
  • Re: [FD] libquicktime multiple vulnerabilities, Brandon Perry
• [FD] Evolution Script CMS v5.3 - Cross Site Scripting Vulnerability, Vulnerability Lab
• [FD] Composr CMS v10.0.0 - Cross Site Scripting Vulnerability, Vulnerability Lab
• [FD] Zenbership 1.0.8 CMS - Multiple SQL Injection Vulnerabilities, Vulnerability Lab
• [FD] SEC Consult SA-20170613-0 :: Access Restriction Bypass in Atlassian Confluence, SEC Consult Vulnerability Lab
• [FD] t2'17: Call For Papers 2017 (Helsinki, Finland), Tomi Tuominen
• [FD] New BlackArch Linux ISOs (2017.06.13) released!, Black Arch
• [FD] APC UPS Daemon <= 3.14.14 Local Privilege Escalation, Richard Young
• [FD] Freeware Advanced Audio Coder (FAAC) multiple vulnerabilities, qflb.wu
• [FD] Path traversal in Photo Gallery may allow admins to read most files on the filesystem (WordPress plugin), dxw Security
• [FD] Reflected XSS in WordPress Download Manager could allow an attacker to do almost anything an admin can (WordPress plugin), dxw Security
• [FD] SEC Consult SA-20170622-0 :: XXE, SQLi, XSS & local file disclosure in Cisco Prime Infrastructure, SEC Consult Vulnerability Lab
• [FD] PayPal Inc BB #149 - (Gift) Insufficient Authentication Vulnerability, Vulnerability Lab
• [FD] OffensiveCon Berlin 2018 Call for Papers, Moritz Jodeit
• [FD] Vaadin Javascript Injection, Caleb Cushing
• [FD] Microsoft Skype v7.2, v7.35 & v7.36 - Stack Buffer Overflow Vulnerability, Vulnerability Lab
• [FD] malicious hypervisor aka root-kit hypervisor threat is rel, Mikhail Utin
• [FD] Vulnerabilities in D-Link DIR-100, MustLive
• [FD] DefenseCode Security Advisory: IBM DB2 Command Line Processor Buffer Overflow, DefenseCode
• [FD] [CORE-2017-0003] - Kaspersky Anti-Virus File Server Multiple Vulnerabilities, Core Security Advisories Team
• [FD] Executable installers are vulnerable^WEVIL (case 52): escalation of privilege with Microsoft's .NET Framework installers, Stefan Kanthak
• Re: [FD] Freeware Advanced Audio Decoder 2 (FAAD2) multiple vulnerabilities, Robert Święcki
• [FD] Microsoft Office Patch Installer Executables - Insecure Library Loading Allows Code Execution, Karn Ganeshen
• [FD] Microsoft Machine Debug Manager (mdm) DLL side loading vulnerability, Karn Ganeshen
• [FD] Digital Canal Structural Wind Analysis Stack Buffer Overflow, Karn Ganeshen
• [FD] Trihedral VTScada Multiple Vulnerabilities, Karn Ganeshen
• [FD] Schneider Electric Wonderware InduSoft Web Studio Privilege Escalation, Karn Ganeshen
• [FD] BLF-Tech LLC VisualView HMI Software – Insecure Library Loading Allows Code Execution, Karn Ganeshen
• [FD] Schneider Electric Interactive Graphical SCADA System Software – Insecure Library Loading Allows Code Execution, Karn Ganeshen
• [FD] Local file inclusion in cmsmadesimple <=2.2.1, Wester Zeng
• [FD] SEC Consult SA-20170630-0 :: Multiple critical vulnerabilities in OSCI-Transport library 1.2 for German e-Government, SEC Consult Vulnerability Lab