Bugtraq

• Thread Index

• [ MDVSA-2013:242 ] kernel
  • From: security
• XAMPP 1.8.1 Local Write Access Vulnerability
  • From: ISecAuditors Security Advisories
• [SECURITY] [DSA 2764-1] libvirt security update
  • From: Moritz Muehlenhoff
• joomla com_zimbcomment Components Local File Include vulnerability
  • From: iedb . team
• Cisco Security Advisory: Cisco IOS Software Resource Reservation Protocol Interface Queue Wedge Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Software DHCP Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Software Multicast Network Time Protocol Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Software Queue Wedge Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Software Zone-Based Firewall and Content Filtering Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Software Network Address Translation Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Software IPv6 Virtual Fragmentation Reassembly Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [security bulletin] HPSBMU02872 SSRT101185 rev.2 - HP Service Manager, Remote Disclosure of Information, Cross Site Scripting(XSS)
  • From: security-alert
• [ MDVSA-2013:240 ] glpi
  • From: security
• [ MDVSA-2013:241 ] perl-Crypt-DSA
  • From: security
• Multiple Vulnerabilities in X2CRM
  • From: High-Tech Bridge Security Research
• GreHack 2013 - 15 Nov. Grenoble, France - Conf. Registration OPEN
  • From: Fab Duchene
• [SECURITY] [DSA 2763-1] pyopenssl security update
  • From: Salvatore Bonaccorso
• CVE-2013-5118 - XSS Good for Enterprise iOS
  • From: mario
• Re: DC4420 - London DEFCON - September meet - Tuesday 24th September 2013
  • From: Tony Naggs
• [IBliss Security Advisory] Cross-site scripting ( XSS ) in Bradesco gateway wordpress plugin
  • From: Alexandro Silva
• [SECURITY] [DSA 2762-1] icedove security update
  • From: Moritz Muehlenhoff
• Re: [ANN] Struts 2.3.15.2 GA release available - security fix
  • From: Emi Lu
• Wordpress fgallery_plus Plugin Xss vulnerabilities
  • From: iedb . team
• Wordpress fgallery_plus Plugin Xss vulnerabilities
  • From: iedb . team
• [ANN] Struts 2.3.15.2 GA release available - security fix
  • From: Lukasz Lenart
• Wordpress fgallery_plus Plugin Xss vulnerabilities
  • From: iedb . team
• [security bulletin] HPSBST02919 rev.1 - HP XP P9000 Command View Advanced Edition Suite Software, Remote Cross Site Scripting (XSS)
  • From: security-alert
• APPLE-SA-2013-09-20-1 Apple TV 6.0
  • From: Apple Product Security
• Monstra CMS v1.2.0 - Blind SQL Injection Vulnerability
  • From: Vulnerability Lab
• [iBliss Security Advisory] Blind SQL injection vulnerability in NOSpamPTI wordpress plugin
  • From: Alexandro Silva
• [security bulletin] HPSBGN02923 rev.1 - HP ArcSight Enterprise Security Manager Management Web Interface, Remote Cross Site Scripting (XSS)
  • From: security-alert
• Paypal Inc Bug Bounty #99 - Filter Bypass & Persistent Web Vulnerability
  • From: Vulnerability Lab
• [security bulletin] HPSBGN02925 rev.1 - HP IceWall SSO, IceWall File Manager and IceWall Federation Agent, Multiple Remote Unauthorized Access Vulnerabilities
  • From: security-alert
• [SECURITY] [DSA 2761-1] puppet security update
  • From: Raphael Geissert
• [ MDVSA-2013:239 ] wordpress
  • From: security
• Re: %windir%\temp\sso\ssoexec.dll (or: howtrustworthy is Microsoft's build process)
  • From: Stefan Kanthak
• [ MDVSA-2013:238 ] wireshark
  • From: security
• [PT-2013-41] Arbitrary Code Execution in Ajax File and Image Manager
  • From: noreply
• An Analysis of the (In)Security State of the GameHouse Game Installation Mechanism
  • From: RBS Research
• [slackware-security] glibc (SSA:2013-260-01)
  • From: Slackware Security Team
• [security bulletin] HPSBMU02900 rev.3 - HP System Management Homepage (SMH) running on Linux and Windows, Multiple Remote and Local Vulnerabilities
  • From: security-alert
• Wordpress Plugin Complete Gallery Manager 3.3.3 - Arbitrary File Upload Vulnerability
  • From: Vulnerability Lab
• [security bulletin] HPSBUX02927 SSRT101288 rev.1 - HP-UX Apache Web Server, Remote Execution of Arbitrary Code, Denial of Service (DoS)
  • From: security-alert
• CVE-2013-5210 Adtran Netvanta Remote Code Injection via XSS
  • From: J. Oquendo
• APPLE-SA-2013-09-18-3 Xcode 5.0
  • From: Apple Product Security
• APPLE-SA-2013-09-18-1 iTunes 11.1
  • From: Apple Product Security
• APPLE-SA-2013-09-18-2 iOS 7
  • From: Apple Product Security
• Cisco Security Advisory: Cisco Prime Central for Hosted Collaboration Solution Assurance Unauthenticated Username and Password Enumeration Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Prime Data Center Network Manager
  • From: Cisco Systems Product Security Incident Response Team
• [security bulletin] HPSBMU02917 rev.1 - HP System Management Homepage (SMH) running on Linux and Windows, Remote Command Execution and Privilege Escalation
  • From: security-alert
• [SECURITY] [DSA 2760-1] chrony security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2759-1] iceweasel security update
  • From: Moritz Muehlenhoff
• [ MDVSA-2013:237 ] firefox
  • From: security
• [slackware-security] mozilla-thunderbird (SSA:2013-260-03)
  • From: Slackware Security Team
• SQL Injection in vtiger CRM
  • From: High-Tech Bridge Security Research
• [slackware-security] mozilla-firefox (SSA:2013-260-02)
  • From: Slackware Security Team
• [SECURITY] [DSA 2758-1] python-django security update
  • From: Salvatore Bonaccorso
• APPLE-SA-2013-09-17-1 OS X Server v2.2.2
  • From: Apple Product Security
• [ MDVSA-2013:236 ] subversion
  • From: security
• ExpressionEngine 2.6 Persistent XSS
  • From: Richard Clifford
• EarthVPN certificate configuration vulnerabilities
  • From: y6whynrzab
• OWASP ESAPI Security Advisory: MAC Bypass in ESAPI Symmetric Encryption
  • From: Kevin W. Wall
• [ MDVSA-2013:235 ] mediawiki
  • From: security
• Botconf 2013 - Pre-programme pubished & registration open (Nantes, France, 5-6/12/2013)
  • From: Eric Freyssinet
• Moodle 2.5.0-1 (badges/external.php) PHP Object Injection Vulnerability
  • From: emilio . pinn
• [SECURITY] [DSA 2757-1] wordpress security update
  • From: Yves-Alexis Perez
• [ MDVSA-2013:234 ] python-django
  • From: security
• [ MDVSA-2013:232 ] libmodplug
  • From: security
• Zimbra Collaboration Suite (ZCS) Session Replay Vulnerability
  • From: brianwarehime
• [SECURITY] [DSA 2756-1] wireshark security update
  • From: Moritz Muehlenhoff
• [ MDVSA-2013:233 ] python-OpenSSL
  • From: security
• [SECURITY] [DSA 2753-1] mediawiki security update
  • From: Thijs Kinkhorst
• OpenSSL,OpenSSH ecdsa authentication code inconsistent return values.. no vulnerability?
  • From: king cope
• WordPress Fixes Multiple Vulnerabilities With 3.6.1 Release
  • From: danielthomson72
• APPLE-SA-2013-09-12-2 Safari 5.1.10
  • From: Apple Product Security
• APPLE-SA-2013-09-12-1 OS X Mountain Lion v10.8.5 and Security Update 2013-004
  • From: Apple Product Security
• [iBliss Security Advisory] Cross-Site Scripting (XSS) vulnerability in Design-approval-system wordpress plugin
  • From: Alexandro Silva
• [ MDVSA-2013:231 ] openswan
  • From: security
• [security bulletin] HPSBUX02928 SSRT101274 rev.1 - HP-UX running perl, Remote Denial of Service (DoS)
  • From: security-alert
• [ MDVSA-2013:230 ] gdm
  • From: security
• OWASP Zed Attack Proxy 2.2.0
  • From: psiinon
• [SECURITY] [DSA 2755-1] python-django security update
  • From: Salvatore Bonaccorso
• ProFTPd mod_sftp/mod_sftp_pam invalid pool allocation in kbdint authentication
  • From: king cope
• Cross-Site Scripting (XSS) in WikkaWiki
  • From: High-Tech Bridge Security Research
• Insecure CHIASMUS encryption in GSTOOL
  • From: Jan Schejbal
• Microsoft SharePoint 2013 (Cloud) - Persistent Exception Handling Web Vulnerability
  • From: Vulnerability Lab
• Talkie Bluetooth Video iFiles 2.0 iOS - Multiple Vulnerabilities
  • From: Vulnerability Lab
• [SECURITY] [DSA 2754-1] exactimage security update
  • From: Raphael Geissert
• [security bulletin] HPSBUX02926 SSRT101281 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS)
  • From: security-alert
• Synology DSM multiple vulnerabilities
  • From: Andrea Fabrizi
• eTransfer Lite v1.0 iOS - Persistent Filename Vulnerability
  • From: Vulnerability Lab
• [security bulletin] HPSBPV02918 rev.1 - HP ProCurve Manager (PCM), HP PCM+ and HP Identity Driven Manager (IDM), SQL Injection, Remote Code Execution, Session Reuse
  • From: security-alert
• [ MDVSA-2013:229 ] bzr
  • From: security
• FreeBSD Security Advisory FreeBSD-SA-13:09.ip_multicast [REVISED]
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-13:11.sendfile
  • From: FreeBSD Security Advisories
• [ MDVSA-2013:228 ] cacti
  • From: security
• FreeBSD Security Advisory FreeBSD-SA-13:10.sctp [REVISED]
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-13:13.nullfs
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-13:12.ifioctl
  • From: FreeBSD Security Advisories
• Open-Xchange Security Advisory 2013-09-10
  • From: Martin Braun
• Multiple vulnerabilities on D-Link Dir-505 devices
  • From: alessandro . dipinto
• [ MDVSA-2013:227 ] python-setuptools
  • From: security
• Event Easy Calendar 1.0.0 WP plugin
  • From: roguecoder
• [slackware-security] subversion (SSA:2013-251-01)
  • From: Slackware Security Team
• [CVE-2013-5701] Watchguard Server Center v11.7.4 wgpr.dll Insecure Library Loading Local Privilege Escalation Vulnerability
  • From: Julien Ahrens
• [SECURITY] [DSA 2752-1] phpbb3 security update
  • From: Thijs Kinkhorst
• [CORE-2013-0809] Sophos Web Protection Appliance Multiple Vulnerabilities
  • From: CORE Advisories Team
• APPLE-SA-2013-09-06-1 AirPort Base Station Firmware Update 7.6.4
  • From: Apple Product Security
• APPLE-SA-2013-09-06-1 AirPort Base Station Firmware Update 7.6.4
  • From: Mihaela Popescu-Stanesti
• CFP: WorldCIST'14 - World Conference on IST; Best papers published in ISI Journals
  • From: Maria Lemos
• [ MDVSA-2013:226 ] roundcubemail
  • From: security
• [SECURITY] [DSA 2751-1] libmodplug security update
  • From: Raphael Geissert
• Cisco Security Advisory: Multiple Vulnerabilities in the Cisco WebEx Recording Format and Advanced Recording Format Players
  • From: Cisco Systems Product Security Incident Response Team
• SEC Consult SA-20130904-0 :: GroupLink everything HelpDesk - undocumented password reset/admin takeover and XSS vulnerabilities
  • From: SEC Consult Vulnerability Lab
• Call for Paper/Event - nullcon Goa 2014
  • From: nullcon
• [PSA-2013-0903-1] Apple Safari Heap Buffer Overflow
  • From: bugtraq
• [SECURITY] [DSA 2750-1] imagemagick security update
  • From: Florian Weimer
• PayPal's "invalid" aksession Padding Oracle Flaw
  • From: Timothy D. Morgan
• ESA-2013-057: RSA Archer(r) GRC Multiple Vulnerabilities
  • From: Security Alert
• [ MDVSA-2013:225 ] libdigidoc
  • From: security
• [ MDVSA-2013:224 ] libtiff
  • From: security
• [SECURITY] [DSA 2749-1] asterisk security update
  • From: Moritz Muehlenhoff
• Mikrotik RouterOS 5.* and 6.* sshd remote preauth heap corruption
  • From: king cope
• [SECURITY] [DSA 2748-1] exactimage security update
  • From: Florian Weimer
• [SECURITY] [DSA 2740-2] python-django regression update
  • From: Florian Weimer
• IndiaNIC Testimonail WP plugin - Multiple vulnerabilities
  • From: roguecoder
• Full Disclosure - Multiple vulnerabilities in five Zoom ADSL Modem/Routers
  • From: kyle Lovett
• Defense in depth -- the Microsoft way (part 9): erroneous documentation
  • From: Stefan Kanthak
• list of vulnerability discovered by RealPentesting
  • From: Pedro Guillen
• [SECURITY] [DSA 2747-1] cacti security update
  • From: Florian Weimer
• [slackware-security] gnutls (SSA:2013-242-03)
  • From: Slackware Security Team
• [slackware-security] gnutls (SSA:2013-242-01)
  • From: Slackware Security Team
• VUPEN Security Research - Microsoft Internet Explorer "ReplaceAdjacentText" Use-after-free (MS13-059)
  • From: VUPEN Security Research
• [ MDVSA-2013:223 ] asterisk
  • From: security
• VUPEN Security Research - Microsoft Internet Explorer Protected Mode Sandbox Bypass (Pwn2Own 2013 / MS13-059)
  • From: VUPEN Security Research
• VUPEN Security Research - Microsoft Windows "LdrHotPatchRoutine" Remote ASLR Bypass (Pwn2Own 2013 / MS13-063)
  • From: VUPEN Security Research
• [slackware-security] php (SSA:2013-242-02)
  • From: Slackware Security Team
• NEW VMSA-2013-0011 VMware ESXi and ESX address an NFC Protocol Unhandled Exception
  • From: VMware Security Team
• Microsoft MSRC RSS ASPX - CS Cross Site Web Vulnerability
  • From: Vulnerability Lab
• Department of Transport UK - SQL Injection Vulnerability
  • From: Vulnerability Lab
• UTA EDU University ENG - SQL Injection Vulnerability
  • From: Vulnerability Lab
• [SECURITY] [DSA 2746-1] icedove security update
  • From: Moritz Muehlenhoff
• CyberArk User Enumeration - Multiple vulnerabilities
  • From: moshez
• CVE-2013-5216 CapaSystems Performance Guard Path Traversal Vulnerability
  • From: kerem . kocaer
• Drupal Node View Permissions module and Flag module Vulnerabilities
  • From: danielthomson72
• [SECURITY] [DSA 2745-1] linux security update
  • From: dann frazier
• 30C3 Call for Participation
  • From: fukami
• CORE-2013-0726 - AVTECH DVR multiple vulnerabilities
  • From: CORE Advisories Team
• CORE-2013-0808 - EPS Viewer Buffer Overflow Vulnerability
  • From: CORE Advisories Team
• [CORE-2013-0805] Aloaha PDF Suite Buffer Overflow Vulnerability
  • From: CORE Advisories Team
• Cisco Security Advisory: Cisco Secure Access Control Server Remote Command Execution Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [security bulletin] HPSBHF02888 rev.3 - HP Network Products including H3C and 3COM Routers and Switches, Remote Information Disclosure and Code Execution
  • From: security-alert
• Two Instagram Android App Security Vulnerabilities
  • From: Georg Lukas
• AST-2013-004: Remote Crash From Late Arriving SIP ACK With SDP
  • From: Asterisk Security Team
• AST-2013-005: Remote Crash when Invalid SDP is sent in SIP Request
  • From: Asterisk Security Team
• IBM Lotus iNotes 8.5.x cross-site scripting vulnerabilities
  • From: danielthomson72
• [ MDVSA-2013:222 ] puppet
  • From: security
• [SECURITY] [DSA 2744-1] tiff security update
  • From: Moritz Muehlenhoff
• [ MDVSA-2013:221 ] php
  • From: security
• [ MDVSA-2013:220 ] lcms
  • From: security
• POC2013 Call for Paper
  • From: pocadm
• [SECURITY] [DSA 2743-1] kfreebsd-9 security update
  • From: Aurelien Jarno
• [SECURITY] [DSA 2742-1] php5 security update
  • From: Florian Weimer
• Re: [Full-disclosure] Defense in depth -- the Microsoft way (part 8): execute everywhere!
  • From: Heavenly Avenger
• Re: [Full-disclosure] Defense in depth -- the Microsoft way (part 8): execute everywhere!
  • From: James Lay
• Defense in depth -- the Microsoft way (part 8): execute everywhere!
  • From: Stefan Kanthak
• Re: [Full-disclosure] Defense in depth -- the Microsoft way (part 8): execute everywhere!
  • From: James Lay
• DC4420 - London DEFCON - August Meet - Tuesday 27th August 2013
  • From: Major Malfunction
• [SECURITY] [DSA 2741-1] chromium-browser security update
  • From: Michael Gilbert
• Re: [Full-disclosure] Defense in depth -- the Microsoft way (part 8): execute everywhere!
  • From: Stefan Kanthak
• Re: [Full-disclosure] Defense in depth -- the Microsoft way (part 8): execute everywhere!
  • From: Jeffrey Walton
• Wordpress post-gallery Plugin Xss vulnerabilities
  • From: iedb . team
• libtiff <= 3.9.5 integer overflow bug
  • From: geinblues
• [SECURITY] [DSA 2740-1] python-django security update
  • From: Salvatore Bonaccorso
• PayPal Bug Bounty #110 - Auth Bypass (Session) Vulnerability
  • From: Vulnerability Lab
• Wordpress videowhisper-live-streaming-integration Plugin Xss vulnerabilities
  • From: iedb . team
• [ MDVSA-2013:219 ] libtiff
  • From: security
• [ MDVSA-2013:218 ] python-django
  • From: security
• [ MDVSA-2013:216 ] perl-Proc-ProcessTable
  • From: security
• [ MDVSA-2013:217 ] spice
  • From: security
• NEW VMSA-2013-0010 VMware Workstation host privilege escalation vulnerability
  • From: VMware Security Team
• CVE-2013-4124 samba dos exploit
  • From: geinblues
• [security bulletin] HPSBST02897 rev.1 - HP StoreOnce D2D Backup System, Remote Denial of Service (DoS)
  • From: security-alert
• Joomla! VirtueMart component <= 2.0.22a - SQL Injection
  • From: Matias Fontanini
• CVE-2013-4152 XML External Entity (XXE) injection in Spring Framework
  • From: Pivotal Security Team
• [ MDVSA-2013:215 ] cacti
  • From: security
• FreeBSD Security Advisory FreeBSD-SA-13:09.ip_multicast
  • From: FreeBSD Security Advisories
• [slackware-security] xpdf (SSA:2013-233-02)
  • From: Slackware Security Team
• [slackware-security] hplip (SSA:2013-233-01)
  • From: Slackware Security Team
• [slackware-security] poppler (SSA:2013-233-03)
  • From: Slackware Security Team
• FreeBSD Security Advisory FreeBSD-SA-13:10.sctp
  • From: FreeBSD Security Advisories
• [SECURITY] [DSA 2739-1] cacti security update
  • From: Moritz Muehlenhoff
• [security bulletin] HPSBGN02905 rev.2 - HP LoadRunner, HP Business Process Monitor, Remote Code Execution and Denial of Service (DoS)
  • From: security-alert
• Windows Embedded POSReady 2009: cruft, not craft
  • From: Stefan Kanthak
• Cisco Security Advisory: Cisco Prime Central for Hosted Collaboration Solution Assurance Denial of Service Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Unified Communications Manager IM and Presence Service Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified Communications Manager
  • From: Cisco Systems Product Security Incident Response Team
• Netgear ProSafe switches: Unauthenticated startup-config disclosure and Denial of Service
  • From: post
• [ MDVSA-2013:214 ] python
  • From: security
• CVE-2013-4124 samba nttrans dos private exploit
  • From: geinblues
• Cross-Site Scripting (XSS) in Twilight CMS
  • From: High-Tech Bridge Security Research
• Cross-Site Scripting (XSS) in BackWPup WordPress Plugin
  • From: High-Tech Bridge Security Research
• Path Traversal in DeWeS Web Server (Twilight CMS)
  • From: High-Tech Bridge Security Research
• [security bulletin] HPSBUX02922 SSRT101305 rev.1 - HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
  • From: security-alert
• Samsung DVR authentication bypass
  • From: Andrea Fabrizi
• ESA-2013-047: RSA® Authentication Agent for PAM Unlimited Login Attempts Vulnerability
  • From: Security Alert
• [PSA-2013-0819-1] Oracle Java BytePackedRaster.verify() Signed Integer Overflow
  • From: bugtraq
• [security bulletin] HPSBMU02902 rev.2 - HP Integrated Lights-Out iLO3, iLO4, and iLO CM IPMI, Cipher Suite 0 Authentication Bypass Vulnerability
  • From: security-alert
• Multiple vulnerabilities on Sitecom N300/N600 devices
  • From: roberto . paleari
• [SECURITY] [DSA 2738-1] ruby1.9.1 security update
  • From: Thijs Kinkhorst
• Defense in depth -- the Microsoft way (part 7): executable files in data directories
  • From: Stefan Kanthak
• x90c WOFF Firefox 1day exploit
  • From: geinblues
• MS Excel 2002/2003 CRN record 0day PoC
  • From: geinblues
• Open-Xchange Security Advisory 2013-08-16
  • From: Martin Braun
• Photo Transfer Upload v1.0 iOS - Multiple Vulnerabilities
  • From: Vulnerability Lab
• Update: Linksys EA2700, EA3500, E4200v2, EA4500 Unspecified unauthenticated remote access
  • From: kyle Lovett
• Copy to WebDAV v1.1 iOS - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• CFP: WorldCIST'14 - World Conference on IST; Best papers published in JCR/ISI Journals
  • From: WorldCIST
• [security bulletin] HPSBMU02915 rev.1 - HP Service Manager, Remote Unauthenticated Access and Elevation of Privilege
  • From: security-alert
• Subverting BIND's SRTT Algorithm: Derandomizing NS Selection
  • From: Roee Hay
• [PSA-2013-0813-1] Oracle Java IntegerInterleavedRaster.verify() Signed Integer Overflow
  • From: bugtraq
• Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure
  • From: Jorge Dorantes
• Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure
  • From: Mike Ely
• Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure
  • From: Reindl Harald
• Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure
  • From: Stefan Kanthak
• Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure
  • From: Chris Meisinger
• Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure
  • From: Matthew Caron
• Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure
  • From: James Birk
• [ MDVSA-2013:213 ] xymon
  • From: security
• [ MDVSA-2013:212 ] otrs
  • From: security
• Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure
  • From: terry white
• Re: Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure
  • From: Marco Floris
• Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure
  • From: Reindl Harald
• Struts2 Prefixed Parameters Open Redirect Vulnerability
  • From: 検査検査
• Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure
  • From: Reindl Harald
• Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure
  • From: Reindl Harald
• Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure
  • From: coderaptor
• Struts2 Prefixed Parameters OGNL Injection Vulnerability
  • From: 検査検査
• Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure
  • From: coderaptor
• Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure
  • From: Brandon M. Graves
• Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure
  • From: coderaptor
• CakePHP AssetDispatcher Local File Inclusion Vulnerability
  • From: 検査検査
• Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure
  • From: Jeffrey Walton
• Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure
  • From: George Machitidze
• Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure
  • From: Reindl Harald
• RE: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure
  • From: Peter Gregory
• [SECURITY] [DSA 2737-1] swift security update
  • From: Thijs Kinkhorst
• Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure
  • From: Coderaptor
• [ MDVSA-2013:211 ] lcms2
  • From: security
• Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure
  • From: Reindl Harald
• Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure
  • From: Reindl Harald
• Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure
  • From: Stefan Kanthak
• Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure
  • From: Stefan Kanthak
• [PSA-2013-0811-1] Oracle Java storeImageArray() Invalid Array Indexing
  • From: bugtraq
• [SECURITY] [DSA 2736-1] putty security update
  • From: Salvatore Bonaccorso
• Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure
  • From: Tobias Kreidl
• Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure
  • From: Reindl Harald
• Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure
  • From: Michal Zalewski
• Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure
  • From: Ansgar Wiechers
• Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure
  • From: Tobias Kreidl
• Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure
  • From: Reindl Harald
• Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure
  • From: terry white
• Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure
  • From: Gichuki John Chuksjonia
• Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure
  • From: Reindl Harald
• Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure
  • From: Jeffrey Walton
• Re: Apache suEXEC privilege elevation / information disclosure
  • From: Reindl Harald
• ReviewBoard Vulnerabilities
  • From: Craig Young
• RE: [Full-disclosure] Apache suEXEC privilege elevation /
  • From: Dico Emil
• Re: Apache suEXEC privilege elevation / information disclosure
  • From: Kingcope
• Re: Apache suEXEC privilege elevation / information disclosure
  • From: Kingcope
• [RCA-201308-01] HMS Testimonials 2.0.10 WP plugin - Multiple vulnerabilities
  • From: roguecoder
• OUTDATED, UNSUPPORTED and VULNERABLE 3rd party components installed with Exact Audio Copy
  • From: Stefan Kanthak
• [security bulletin] HPSBHF02912 rev.1 - HP Networking Products including H3C and 3COM Routers and Switches, OSPF Remote Information Disclosure and Denial of Service
  • From: security-alert
• Joomla! redSHOP component v1.2 SQL Injection
  • From: Matias Fontanini
• Re: Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure
  • From: Hv5hA5ms
• [slackware-security] mozilla-thunderbird (SSA:2013-219-02)
  • From: Slackware Security Team
• [slackware-security] seamonkey (SSA:2013-219-03)
  • From: Slackware Security Team
• [slackware-security] mozilla-firefox (SSA:2013-219-01)
  • From: Slackware Security Team
• HP Data Protector Arbitrary Remote Command Execution
  • From: alessandro . dipinto
• Two Vulnerabilities in NetworkMiner : DLL Hijacking + Directory Traversal
  • From: Erik Hjelmvik
• PHPFox v3.6.0 (build3) Multiple SQL Injection vulnerabilities
  • From: Matias Fontanini
• Updated [CVE-2013-2136] Apache CloudStack Cross-site scripting (XSS) vulnerabiliity
  • From: Chip Childers
• CORE-2013-0708 - Hikvision IP Cameras Multiple Vulnerabilities
  • From: CORE Advisories Team
• Cisco Security Advisory: Cisco TelePresence System Default Credentials Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure
  • From: king cope
• Trustport Webfilter Remote File Access Vulnerability
  • From: oliver
• Apache suEXEC privilege elevation / information disclosure
  • From: king cope
• [SECURITY] [DSA 2735-1] iceweasel security update
  • From: Moritz Muehlenhoff
• [ MDVSA-2013:210 ] firefox
  • From: security
• Multiple Vulnerabilities in BigTree CMS
  • From: advisory
• Defense in depth -- the Microsoft way (part 6): beginner's errors, QA sound asleep or out of sight!
  • From: Stefan Kanthak
• Microsoft Yammer Social Network - oAuth Bypass (Session Token) Vulnerability
  • From: Vulnerability Lab
• Attacking Google Accounts with 'weblogin:' Tokens
  • From: Craig Young
• Re: XSS vulnerability in guestbook-php-script
  • From: yjtdgs
• [CVE-2013-2136] Apache CloudStack Cross-site scripting (XSS) vulnerabiliity
  • From: Chip Childers
• [ MDVSA-2013:209 ] subversion
  • From: security
• [ MDVSA-2013:208 ] libtiff
  • From: security
• [ MDVSA-2013:207 ] samba
  • From: security
• [slackware-security] bind (SSA:2013-218-01)
  • From: Slackware Security Team
• [slackware-security] httpd (SSA:2013-218-02)
  • From: Slackware Security Team
• [slackware-security] samba (SSA:2013-218-03)
  • From: Slackware Security Team
• [SECURITY] [DSA 2734-1] wireshark security update
  • From: Moritz Muehlenhoff
• Re: Joomla core <= 3.1.5 reflected XSS vulnerability
  • From: michael . babker
• SocialEngine 4.5 TimeLine 4.2.5p9 upload file "PHP" in the Cover Image
  • From: Wesley Henrique
• Usernoise 3.7.8 WP plugin cross-site scripting vulnerability
  • From: roguecoder
• Re: Joomla core <= 3.1.5 reflected XSS vulnerability
  • From: no
• Huawei B153 3G/UMTS router WPS weakness
  • From: roberto . paleari
• Joomseller "Events Booking Pro" and "JSE Event" reflected XSS
  • From: samelat
• Joomla com_sectionex v2.5.96 SQL Injection vulnerabilities
  • From: Matias Fontanini
• [ MDVSA-2013:206 ] owncloud
  • From: security
• HP LaserJet Pro printers remote admin password extraction
  • From: michal . sajdak
• Joomla core <= 3.1.5 reflected XSS vulnerability
  • From: Emilio Pinna
• PuTTY SSH handshake heap overflow
  • From: Gergely Eberhardt
• SEC Consult SA-20130805-0 :: Vodafone EasyBox Default WPS PIN Algorithm Weakness
  • From: SEC Consult Vulnerability Lab
• Rgpg 0.2.2 Ruby Gem Remote Command Injection
  • From: larry0
• FTP OnConnect v1.4.11 iOS - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• withU Music Share v1.3.7 iOS - Command Inject Vulnerability
  • From: Vulnerability Lab
• [slackware-security] gnupg / libgcrypt (SSA:2013-215-01)
  • From: Slackware Security Team
• [SECURITY] [DSA 2732-1] chromium-browser security update
  • From: Michael Gilbert
• [SECURITY] [DSA 2733-1] otrs2 security update
  • From: Salvatore Bonaccorso
• [security bulletin] HPSBUX02909 SSRT101289 rev.1 - HP-UX Apache Web Server, Remote Denial of Service (DoS)
  • From: security-alert
• Multiple vulnerabilities on D-Link DIR-645 devices
  • From: roberto
• [security bulletin] HPSBUX02908 rev.1 - HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
  • From: security-alert
• [security bulletin] HPSBUX02907 rev.1 - HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
  • From: security-alert
• [ MDVSA-2013:205 ] gnupg
  • From: security
• Cisco Security Advisory: OSPF LSA Manipulation Vulnerability in Multiple Cisco Products
  • From: Cisco Systems Product Security Incident Response Team
• SilverStripe(R) Information Exposure Through Query Strings in GET Request (CWE-598)
  • From: Rustein, Fara Denise (LATCO - Buenos Aires)
• Update: Full Disclosure - WD My Net N600, N750, N900, N900C - Plain Text Disclosure of Admin Credentials
  • From: krlovett
• [KIS-2013-06] vtiger CRM <= 5.4.0 (SOAP Services) Multiple SQL Injection Vulnerabilities
  • From: Egidio Romano
• Multiple XSS Vulnerabilities in Jahia xCM
  • From: advisory
• Cisco Security Advisory: Authenticated Command Injection Vulnerability in Multiple Cisco Content Network and Video Delivery Products
  • From: Cisco Systems Product Security Incident Response Team
• [KIS-2013-08] vtiger CRM <= 5.4.0 (SOAP Services) Authentication Bypass Vulnerability
  • From: Egidio Romano
• [KIS-2013-07] vtiger CRM <= 5.4.0 (vtigerolservice.php) PHP Code Injection Vulnerability
  • From: Egidio Romano
• [KIS-2013-05] vtiger CRM <= 5.4.0 (customerportal.php) Two Local File Inclusion Vulnerabilities
  • From: Egidio Romano
• Cisco Security Advisory: Cisco WAAS Central Manager Remote Code Execution Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [security bulletin] HPSBMU02902 rev.1 - HP Integrated Lights-Out iLO3, iLO4 IPMI Cipher Suite 0 Authentication Bypass Vulnerability
  • From: security-alert
• SQL Injection in Cotonti
  • From: advisory
• Open-Xchange Security Advisory 2013-07-31
  • From: Martin Braun
• CORE-2013-0618 - Multiple Vulnerabilities in TP-Link TL-SC3171 IP Cameras
  • From: CORE Advisories Team
• NGS00500 Technical Advisory: Bit51 Better WP Security Plugin - Unauthenticated Stored XSS to RCE
  • From: NCC Group Research
• NGS00434 Technical Advisory: Oracle Hyperion 11 Directory Traversal
  • From: NCC Group Research
• MojoPortal XSS
  • From: vulns
• [ MDVSA-2013:204 ] wireshark
  • From: security
• [ MDVSA-2013:203 ] phpmyadmin
  • From: security
• [SECURITY] [DSA 2730-1] gnupg security update
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 2731-1] libgcrypt11 security update
  • From: Thijs Kinkhorst
• [security bulletin] HPSBGN02904 rev.1 - HP SiteScope running SOAP, Remote Code Execution
  • From: security-alert
• WorldCIST'14 - World Conference on IST, 15 - 18 April 2014, at Madeira Island
  • From: maria Lemos
• ESA-2013-033: EMC NetWorker Information Disclosure Vulnerability
  • From: Security Alert
• Private Photos v1.0 iOS - Persistent Path Web Vulnerability
  • From: Vulnerability Lab
• FreeBSD Security Advisory FreeBSD-SA-13:08.nfsserver
  • From: FreeBSD Security Advisories
• DEFCON London - DC4420 July - social event - Tuesday 30th July 2013
  • From: Tony Naggs
• [ MDVSA-2013:202 ] bind
  • From: security
• WebDisk 3.0.2 PhotoViewer iOS - Command Execution Vulnerability
  • From: Vulnerability Lab
• Private Photos v1.0 iOS - Persistent Path Web Vulnerability
  • From: Vulnerability Lab
• [SECURITY] [DSA 2729-1] openafs security update
  • From: Moritz Muehlenhoff
• Re: DEFCON London - DC4420 July - social event - Tuesday 30th July 2013
  • From: Tony Naggs
• [Announcement] CHMag - Call for Articles
  • From: abhijeet
• Defense in depth -- the Microsoft way (part 5): sticky, persistent vulnerabilities
  • From: Stefan Kanthak
• FreeBSD Security Advisory FreeBSD-SA-13:07.bind
  • From: FreeBSD Security Advisories
• [SECURITY] [DSA 2728-1] bind9 security update
  • From: Salvatore Bonaccorso
• [ MDVSA-2013:201 ] ruby
  • From: security
• [ MDVSA-2013:200 ] ruby
  • From: security
• [SECURITY] [DSA 2726-1] php-radius security update
  • From: Thijs Kinkhorst
• Meet the folks of ws-attacker, BeEF, WAHH, sqlmap, Zed Attack Proxy, OWASP Top10, DOMinator, Minion, Mallodroid, and the inglorious bastards aka HackPra Allstars
  • From: Dirk Wetter
• SEC Consult SA-20130726-0 :: Multiple vulnerabilities - Surveillance via Symantec Web Gateway
  • From: SEC Consult Vulnerability Lab
• Re: [Full-disclosure] nginx exploit documentation, about a generic way to exploit Linux targets
  • From: Kingcope
• CVE-2013-4156: OpenOffice DOCM Memory Corruption Vulnerability
  • From: Herbert Duerr
• CVE-2013-2189: OpenOffice DOC Memory Corruption Vulnerability
  • From: Herbert Duerr
• CA20130725-01: Security Notice for CA Service Desk Manager
  • From: Kotas, Kevin J
• [SECURITY] [DSA 2727-1] openjdk-6 security update
  • From: Moritz Muehlenhoff
• [security bulletin] HPSBMU02894 rev.1 - HP Network Node Manager I (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Denial of Service (DoS), Unauthorized Access, Execution of Arbitrary Code
  • From: security-alert
• Xymon Systems and Network Monitor - remote file deletion vulnerability
  • From: Henrik Størner
• [ MDVSA-2013:199 ] squid
  • From: security
• [security bulletin] HPSBGN02906 rev.1 - HP Application Lifecycle Management Quality Center (ALM), Remote Cross Site Scripting (XSS)
  • From: security-alert
• iPic Sharp v1.2.1 Wifi iOS - Persistent Foldername Web Vulnerability
  • From: Vulnerability Lab
• [security bulletin] HPSBGN02905 rev.1 - HP LoadRunner, Remote Code Execution and Denial of Service (DoS)
  • From: security-alert
• Basic Forum by JM LLC - Multiple Vulnerabilities
  • From: Sp3ctrecore ­
• Cisco Security Advisory: Multiple Vulnerabilities in the Cisco Video Surveillance Manager
  • From: Cisco Systems Product Security Incident Response Team
• Easy Blog by JM LLC - Multiple Vulnerabilities
  • From: Sp3ctrecore ­
• Cross-Site Scripting (XSS) in Duplicator WordPress Plugin
  • From: advisory
• Cross-Site Scripting (XSS) in Magnolia CMS
  • From: advisory
• [ MDVSA-2013:198 ] libxml2
  • From: security
• Re: [Full-disclosure] nginx exploit documentation, about a generic way to exploit Linux targets
  • From: Albert Puigsech Galicia
• CORE-2013-0613 - FOSCAM IP-Cameras Improper Access Restrictions
  • From: CORE Advisories Team
• Orbit Downloader versions causing massive SYN flooding. Cyberoam cautions!
  • From: bhadresh . k . patel
• [ MDVSA-2013:197 ] mysql
  • From: security
• CORE-2013-0705 - XnView Buffer Overflow Vulnerability
  • From: CORE Advisories Team
• CORE-2013-0701 - Artweaver Buffer Overflow Vulnerability
  • From: CORE Advisories Team
• Re: Samsung TV - DoS vulnerability
  • From: malik
• Juniper Secure Access XSS Vulnerability
  • From: Anil Pazvant
• Photo Server 2.0 iOS - Multiple Critical Vulnerabilities
  • From: Vulnerability Lab
• Defense in depth -- the Microsoft way (part 4)
  • From: Stefan Kanthak
• SurgeFtp Server BufferOverflow Vulnerability
  • From: Anil Pazvant
• Dell Kace 1000 SMA 5.4.742 - SQL Injection Vulnerabilities
  • From: Vulnerability Lab
• Full Disclosure - WD My Net N600, N750, N900, N900C - Plain Text Disclosure of Admin Credentials
  • From: kyle Lovett
• Barracuda CudaTel 2.6.02.040 - SQL Injection Vulnerability
  • From: Vulnerability Lab
• [CVE-2013-2137] Apache OFBiz XSS vulnerability in the "View Log" screen of the Webtools application
  • From: Jacopo Cappellato
• [CVE-2013-2250] Apache OFBiz Nested expression evaluation allows remote users to execute arbitrary UEL functions in OFBiz
  • From: Jacopo Cappellato
• DirectShow Arbitrary Memory Overwrite Vulnerability ms13-056
  • From: Andres Gomez Ramirez
• Barracuda LB, SVF, WAF & WEF - Multiple Vulnerabilities
  • From: Vulnerability Lab
• Samsung TV - DoS vulnerability
  • From: malik
• Re: [Full-disclosure] [SE-2012-01] New Reflection API affected by a known 10+ years old attack
  • From: Jeffrey Walton
• Barracuda CudaTel 2.6.02.040 - Remote SQL Injection Vulnerability
  • From: Vulnerability Lab
• Download Lite v4.3 iOS - Persistent File Web Vulnerability
  • From: Vulnerability Lab
• [security bulletin] HPSBMU02900 rev.2 - HP System Management Homepage (SMH) running on Linux and Windows, Multiple Remote and Local Vulnerabilities
  • From: security-alert
• Re: [Full-disclosure] XSS Vulnerabilities in Serendipity
  • From: Henri Salo
• [SECURITY] [DSA 2724-1] chromium-browser security update
  • From: Michael Gilbert
• SEC Consult SA-20130719-0 :: Multiple vulnerabilities in Sybase EAServer
  • From: SEC Consult Vulnerability Lab
• Western Digital My Net N600, N750, N900 and N900C - Plain text disclosure of administrative credentials
  • From: kyle Lovett
• DeepSec 2013 - Call for Papers - REMINDER
  • From: deepsec
• [SECURITY] [DSA 2725-1] tomcat6 security update
  • From: Moritz Muehlenhoff
• [security bulletin] HPSBMU02900 rev.1 - HP System Management Homepage (SMH) running on Linux and Windows, Multiple Remote and Local Vulnerabilities
  • From: security-alert
• Symantec Workspace Virtualization 6.4.1895.0 Local Kernel Mode Privilege Escalation Exploit
  • From: th_decoder
• [SE-2012-01] New Reflection API affected by a known 10+ years old attack
  • From: Security Explorations
• [security bulletin] HPSBST02896 rev.2 - HP StoreVirtual Storage, Remote Unauthorized Access
  • From: security-alert
• Dell PacketTrap MSP RMM 6.6.x - Multiple Persistent Web Vulnerabilities
  • From: Vulnerability Lab
• ePhoto Transfer v1.2.1 iOS - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• Barracuda CudaTel 2.6.02.04 - Multiple Client Side Cross Site Vulnerabilities (Bug Bounty #17)
  • From: Vulnerability Lab
• Flux Player v3.1.0 iOS - File Include & Arbitrary File Upload Vulnerability
  • From: Vulnerability Lab
• WiFly 1.0 Pro iOS - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• [SECURITY] [DSA 2723-1] php5 security update
  • From: Florian Weimer
• Re: Full Disclosure ASUS Wireless Routers Ten Models - Multiple Vulnerabilities on AiCloud enabled units
  • From: krlovett
• [security bulletin] HPSBHF02888 rev.2 - HP Network Products including H3C and 3COM Routers and Switches, Remote Information Disclosure and Code Execution
  • From: security-alert
• Re: Full Disclosure ASUS Wireless Routers Ten Models - Multiple Vulnerabilities on AiCloud enabled units
  • From: krlovett
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Intrusion Prevention System Software
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified Communications Manager
  • From: Cisco Systems Product Security Incident Response Team
• [slackware-security] php (SSA:2013-197-01)
  • From: Slackware Security Team
• ESA-2013-055: EMC Avamar Multiple Vulnerabilities
  • From: Security Alert
• XSS Vulnerabilities in OpenCms
  • From: advisory
• [security bulletin] HPSBGN02882 rev.1 - HP Database and Middleware Automation (DMA) using SSL, Remote Disclosure of Information
  • From: security-alert
• [security bulletin] HPSBMU02870 SSRT101012 rev.2 - HP Network Node Manager I (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Unauthorized Access
  • From: security-alert
• Voice Logger astTECS - bypass login & arbitrary file download
  • From: Michał Błaszczak
• [CVE-2013-4763|CVE-2013-4764] Vulnerability in built-in system app of Samsung Galaxy S3/S4
  • From: 醉麻
• Re: [ MDVSA-2013:195 ] php
  • From: Gabriel Maggiotti
• Olive File Manager v1.0.1 iOS - Multiple Vulnerabilities
  • From: Vulnerability Lab
• Dell Kace 1000 SMA v5.4.70402 - Persistent Vulnerabilities
  • From: Vulnerability Lab
• Barracuda CudaTel 2.6.02.040 - Client Side Cross Site Scripting Vulnerability
  • From: Vulnerability Lab
• FTP Sprite v1.2.1 iOS - Persistent Web Vulnerability
  • From: Vulnerability Lab
• Nikon CoolPix L Series Fw1.0 - Information Disclosure Issue
  • From: Vulnerability Lab
• Re: Multiple vulnerabilities in McAfee ePO 4.6.6
  • From: Harold_Toomey
• [CVE-2013-2745, CVE-2013-2738, CVE-2013-2739] MiniDLNA v1.0.25 Multiple Vulnerabilities
  • From: Craig Young
• CVE-2013-4788 - Eglibc PTR MANGLE bug
  • From: Hector Marco
• Squid-3.3.5 DoS PoC
  • From: king cope
• [security bulletin] HPSBPV02891 rev.1 - HP ProCurve Switches, Remote Unauthorized Information Disclosure
  • From: security-alert
• [SECURITY] [DSA 2722-1] openjdk-7 security update
  • From: Moritz Muehlenhoff
• [CVE-2013-2612] Huawei E587 3G Mobile Hotspot Command Injection
  • From: Frédéric Basse
• Huawei E587 3G Mobile Hotspot Web UI Cross Site Scripting vulnerability
  • From: Frédéric Basse
• [ MDVSA-2013:196 ] java-1.6.0-openjdk
  • From: security
• [ MDVSA-2013:195 ] php
  • From: security
• Ruxcon 2013 Final Call For Papers
  • From: cfp
• Botconf 2013 - Call for short talks - Deadline Aug 31 2013
  • From: Eric Freyssinet
• [CVE-2012-6458] Multiple Persistent XSS in silverstripe-ecommerce
  • From: Craig Young
• [waraxe-2013-SA#106] - Multiple Vulnerabilities in Saurus CMS 4.7.1
  • From: come2waraxe
• Full Disclosure ASUS Wireless Routers Ten Models - Multiple Vulnerabilities on AiCloud enabled units
  • From: kyle Lovett
• Re: MiniUPnPd Information Disclosure (CVE-2013-2600)
  • From: Jeffrey Walton
• MiniUPnPd Information Disclosure (CVE-2013-2600)
  • From: cyoung
• [Foreground Security 2013-002]: Corda Path Disclosure and XSS
  • From: Adam Willard
• [security bulletin] HPSBST02890 rev.3 - HP StoreOnce D2D Backup System, Remote Unauthorized Access, Modification, and Escalation of Privilege
  • From: security-alert
• Multiple vulnerabilities in BMC SERVICE DESK EXPRESS (SDE) Version 10.2.1.95
  • From: NCIRC INFOSEC EVAL
• Multiple vulnerabilities in McAfee ePO 4.6.6
  • From: NCIRC INFOSEC EVAL
• Re: Windows 7/8 admin account installation password stored in the clear in LSA Secrets
  • From: Marco Ivaldi
• CVE-2013-3568 - Linksys CSRF + Root Command Injection
  • From: vuln-report
• Re: Windows 7/8 admin account installation password stored in the clear in LSA Secrets
  • From: Dnegel X.
• CVE-2012-6297 - Command Injection via CSRF on DD-WRT v24-sp2
  • From: cyoung
• Re: Windows 7/8 admin account installation password stored in the clear in LSA Secrets
  • From: Rob
• Windows 7/8 admin account installation password stored in the clear in LSA Secrets
  • From: Dnegel X.
• Re: Facebook Url Redirection Vuln.
  • From: Jann Horn
• Re: Facebook Url Redirection Vuln.
  • From: Anthony Dubuissez
• Re: [Full-disclosure] XSS and SQL Injection Vulnerabilities in MiniBB
  • From: Henri Salo
• [ MDVSA-2013:194 ] kernel
  • From: security
• Re: Wordpress wp-private-messages Plugin Sql Injection vulnerability
  • From: Henri Salo
• Facebook Url Redirection Vuln.
  • From: CANSIN YILDIRIM
• [ MDVSA-2013:193 ] apache
  • From: security
• Hard-coded accounts on multiple network cameras
  • From: roberto . paleari
• [SECURITY] [DSA 2719-1] poppler security update
  • From: Michael Gilbert
• Air Drive Plus v2.4 iOS - Arbitrary File Upload Vulnerability
  • From: Vulnerability Lab
• [Foreground Security 2013-001]: Joomla AICONTACTSAFE 2.0.19 Extension Cross-Site Scripting (XSS) vulnerability
  • From: Jose Carlos de Arriba
• VULNERABLE (3rd party) components in Adobe Reader 11.0.03, and dangling reference to Acrobat.exe
  • From: Stefan Kanthak
• [slackware-security] dbus (SSA:2013-191-01)
  • From: Slackware Security Team
• Re: Cisco/Linksys E1200 N300 Reflected XSS
  • From: the infinitenigma
• Re: Project Pier Web Vulnerabilities
  • From: the infinitenigma
• [security bulletin] HPSBST02896 rev.1 - HP StoreVirtual Storage, Remote Unauthorized Access
  • From: security-alert
• (CVE-2013-1059) Linux Kernel libceph Null Pointer Dereference Vulnerability
  • From: chanam . park
• Zoom X4/X5 ADSL Modem and Router -Unauthenticated Remote Root Command Execution
  • From: kyle Lovett
• Re: re: Real player resource exhaustion Vulnerability
  • From: Henri Salo
• SEC Consult SA-20130709-0 :: Denial of service vulnerability in Apache CXF
  • From: SEC Consult Vulnerability Lab
• [HITB-Announce] REMINDER: #HITB2013KUL CFP Closes 25th July
  • From: Hafez Kamal
• Re: re: Real player resource exhaustion Vulnerability
  • From: akshay . vaghela
• Re: WordPress feed plugin Sql Injection
  • From: Henri Salo
• Re: [security bulletin] HPSBST02890 rev.2 - HP StoreOnce D2D Backup System, Remote Unauthorized Access and Modification
  • From: Neusbeer
• [security bulletin] HPSBST02890 rev.2 - HP StoreOnce D2D Backup System, Remote Unauthorized Access and Modification
  • From: security-alert
• Re: OS-Command Injection via UPnP Interface in multiple D-Link devices
  • From: devnull
• Re: OS-Command Injection via UPnP Interface in multiple D-Link devices
  • From: krlovett
• Authentication bypass in D-Link devices (session cookies not validated)
  • From: doylej . ia
• ESA-2013-052: RSA(r) Authentication Manager Sensitive Information Disclosure Vulnerability
  • From: Security Alert
• ESA-2013-050: EMC Replication Manager Sensitive Information Disclosure Vulnerability
  • From: Security Alert
• Authentication bypass in D-Link routers
  • From: doylej . ia
• Avira Analysis Web Service - SQL Injection Vulnerability
  • From: Vulnerability Lab
• VUPEN Security Research - Oracle Java Preloader Click-2-Play Warning Bypass Vulnerability
  • From: VUPEN Security Research
• VUPEN Security Research - Mozilla Firefox Maintenance Service Privilege Escalation Vulnerabilities
  • From: VUPEN Security Research
• [SECURITY] [DSA 2721-1] nginx security update
  • From: Nico Golde
• [oCERT-2013-001] File Roller path sanitization errors
  • From: Daniele Bianco
• OS-Command Injection via UPnP Interface in multiple D-Link devices
  • From: devnull
• [SECURITY] [DSA 2720-1] icedove security update
  • From: Moritz Muehlenhoff
• Paypal Bug Bounty #102 QR Dev Labs - Auth Bypass Vulnerability
  • From: Vulnerability Lab
• LSE Leading Security Experts GmbH - LSE-2013-07-03 - rsyslog ElasticSearch Plugin
  • From: LSE Leading Security Experts GmbH (Security Advisories)
• Mobile Atlas Creator 1.9.12 - Persistent Command Injection Vulnerability
  • From: Vulnerability Lab
• AVAST Antivirus v8.0.1489 - Multiple Core Vulnerabilities
  • From: Vulnerability Lab
• AVAST Universal Core Installer - Multiple Vulnerabilities
  • From: Vulnerability Lab
• AVAST Internet Security Suite - Persistent Vulnerabilities
  • From: Vulnerability Lab
• re: Real player resource exhaustion Vulnerability
  • From: security curmudgeon
• Re: Linksys EA - 2700, 3500, 4200, 4500 w/ Lighttpd 1.4.28 Unauthenticated Remote Administration Access
  • From: krlovett
• Multiple Vulnerabilities in OpenX
  • From: advisory
• Multiple Vulnerabilities in Kasseler CMS
  • From: advisory
• Slots open for Security Projects :Open Source Showcase at AppSec Research / EU 2013
  • From: Dirk W
• APPLE-SA-2013-07-02-1 Security Update 2013-003
  • From: Apple Product Security
• [security bulletin] HPSBUX02889 SSRT101252 rev.1 - HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
  • From: security-alert
• [security bulletin] HPSBUX02893 rev.1 - HP-UX Apache Running Tomcat Servlet Engine, Remote Denial of Service (DoS), Cross Site Scripting (XSS)
  • From: security-alert
• [SECURITY] [DSA 2718-1] wordpress security update
  • From: Yves-Alexis Perez
• [ MDVSA-2013:192 ] php-radius
  • From: security
• [ MDVSA-2013:191 ] fail2ban
  • From: security
• Real player resource exhaustion Vulnerability
  • From: akshay . vaghela
• WordPress category-grid-view-galler plugin Cross-Site Scripting Vulnerabilities
  • From: iedb . team
• [ MDVSA-2013:190 ] autotrace
  • From: security
• [ MDVSA-2013:189 ] wordpress
  • From: security
• [ MDVSA-2013:188 ] otrs
  • From: security
• WordPress feed plugin Sql Injection
  • From: iedb . team
• [ MDVSA-2013:187 ] apache-mod_security
  • From: security
• Linksys EA - 2700, 3500, 4200, 4500 w/ Lighttpd 1.4.28 Unauthenticated Remote Administration Access
  • From: kyle Lovett
• Re: joomla com_football Components Sql Injection vulnerability
  • From: Packet Storm
• [CVE-2013-4695] WinAmp v5.63 gen_ff.dll links.xml Value Parsing Invalid Pointer Dereference
  • From: Inshell Security
• [CVE-2013-4694] WinAmp v5.63 gen_jumpex.dll and ml_local.dll Multiple Buffer Overflows
  • From: Inshell Security
• [SECURITY] CVE-2013-1777: Apache Geronimo 3 RMI classloader exposure
  • From: Jarek Gawor
• [security bulletin] HPSBHF02888 rev.1 - HP ProCurve, H3C, 3COM Routers and Switches, Remote Information Disclosure and Code Execution
  • From: security-alert
• [security bulletin] HPSBST02846 SSRT100798 rev.2 - HP LeftHand Virtual SAN Appliance hydra, Remote Execution of Arbitrary Code
  • From: security-alert
• Re: ESA-2013-029: RSA SecurID Sensitive Information Disclosure Vulnerability
  • From: security_alert
• [slackware-security] mozilla-firefox (SSA:2013-180-01)
  • From: Slackware Security Team
• joomla com_football Components Sql Injection vulnerability
  • From: iedb . team
• [slackware-security] mozilla-thunderbird (SSA:2013-180-02)
  • From: Slackware Security Team
• GreHack 2013 - CFP EXTENDED TO JULY,16 - Conf: Nov. 15, Grenoble, France
  • From: F. Duchene
• Wordpress wp-private-messages Plugin Sql Injection vulnerability
  • From: iedb . team
• [SECURITY] [DSA 2717-1] xml-security-c security update
  • From: Salvatore Bonaccorso
• Re: EMC Avamar: World writable cache files
  • From: security_alert
• [ MDVSA-2013:186 ] puppet
  • From: security
• Re: Barracuda CudaTel 2.6.02.04 - Persistent Web Vulnerability
  • From: Henri Salo
• Barracuda CudaTel 2.6.02.04 - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• [slackware-security] ruby (SSA:2013-178-01)
  • From: Slackware Security Team
• Barracuda CudaTel 2.6.02.04 - Persistent Web Vulnerability
  • From: Vulnerability Lab
• Mobile USB Drive HD 1.2 - Arbitrary File Upload Vulnerability
  • From: Vulnerability Lab
• eFile Wifi Transfer Manager 1.0 iOS - Multiple Vulnerabilities
  • From: Vulnerability Lab
• Re: Re: EMC Avamar: World writable cache files
  • From: security_alert
• [ MDVSA-2013:185 ] perl-Module-Signature
  • From: security
• [ MDVSA-2013:184 ] perl-Dancer
  • From: security
• [ MDVSA-2013:183 ] java-1.7.0-openjdk
  • From: security
• [ MDVSA-2013:182 ] mesa
  • From: security
• [ MDVSA-2013:181 ] mesa
  • From: security
• [ MDVSA-2013:180 ] curl
  • From: security
• CVE-2013-2210
  • From: Cantor, Scott
• [security bulletin] HPSBUX02886 rev.1 - HP-UX Running HP Secure Shell, Remote Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBST02890 rev.1 - HP StoreOnce D2D Backup System, Unauthorized Remote Access and Modification
  • From: security-alert
• [SECURITY] [DSA 2715-1] puppet security update
  • From: Raphael Geissert
• Cisco Security Advisory: Cisco ASA Next-Generation Firewall Fragmented Traffic Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Content Security Management Appliance
  • From: Cisco Systems Product Security Incident Response Team
• [ MDVSA-2013:179 ] firefox
  • From: security
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Web Security Appliance
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Email Security Appliance
  • From: Cisco Systems Product Security Incident Response Team
• Security focus, we need your help
  • From: Adnan Ahmad
• [SECURITY] [DSA 2716-1] iceweasel security update
  • From: Moritz Muehlenhoff
• Multiple XSS Vulnerabilities in Xaraya
  • From: advisory
• [SECURITY] [DSA 2714-1] kfreebsd-9 security update
  • From: Moritz Muehlenhoff
• [Full-disclosure] Magnolia CMS multiple access control vulnerabilities
  • From: Adrian Furtuna
• [ MDVSA-2013:178 ] nfs-utils
  • From: security
• [ MDVSA-2013:177 ] dbus
  • From: security
• Barnraiser Prairie OpenID idp: Directory traversal attack
  • From: prairie
• SEC Consult SA-20130625-0 :: Multiple vulnerabilities in IceWarp Mail Server
  • From: SEC Consult Vulnerability Lab
• Re: Facebook Information Disclosure
  • From: terry white
• [ MDVSA-2013:176 ] kernel
  • From: security
• [SECURITY] [DSA 2713-1] curl security update
  • From: Salvatore Bonaccorso
• Re: Facebook Information Disclosure
  • From: Jeffrey Walton
• [security bulletin] HPSBHF02878 rev.1 - HP Smart Zero Client, Unauthorized Access
  • From: security-alert
• CFP: IEEE SafeConfig: 6th Symposium on Security Analytics and Automation (Deadline Extended)
  • From: James Joshi
• [slackware-security] curl (SSA:2013-174-01)
  • From: Slackware Security Team
• Linksys X3000 - Multiple Vulnerabilities
  • From: devnull
• GreHack 2013 - CFP ends on June, 30 - Conf: Nov. 15, Grenoble, France
  • From: F. Duchene
• ASUS RT-N66U Router - HTTPS Directory traversal and full file access and credential disclosure vuln
  • From: kyle Lovett
• Facebook Information Disclosure
  • From: Packet Storm
• FreeBSD Security Advisory FreeBSD-SA-13:06.mmap [REVISED]
  • From: FreeBSD Security Advisories
• DC4420 - London DEFCON - June meet - Lightning Talks!!! - Tuesday 25th June 2013
  • From: Tony Naggs
• [security bulletin] HPSBUX02876 SSRT101148 rev.2 - HP-UX Running BIND, Remote Denial of Service (DoS)
  • From: security-alert
• Android ICS "adb restore" directory traversal vulnerability (resending after bounce)
  • From: Ariel Berkman
• [SECURITY] [DSA 2712-1] otrs2 security update
  • From: Florian Weimer
• Joomla crypto vulnerability (all versions)
  • From: Marco Beierer
• Re: Happy Birthday FreeBSD! Now you are 20 years old and your security is the same as 20 years ago... :)
  • From: Emiel Kollof
• Happy Birthday FreeBSD! Now you are 20 years old and your security is the same as 20 years ago... :)
  • From: Hunger
• [CVE-2013-0523] IBM WebSphere Commerce: Encrypted URL Parameter Vulnerable to Padding Oracle Attacks
  • From: VSR Advisories
• [SECURITY] [DSA 2711-1] haproxy security update
  • From: Moritz Muehlenhoff
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence TC and TE Software
  • From: Cisco Systems Product Security Incident Response Team
• Facebook critical design flaw
  • From: jjshoe
• Remote code execution in Puppet
  • From: andreas . lindqvist
• ESA-2013-045: RSA BSAFE® SSL-C Security Update for SSL/TLS Plaintext Recovery (aka “Lucky Thirteen”) Vulnerability
  • From: Security Alert
• ESA-2013-032 RSA BSAFE® Micro Edition Suite Security Update for SSL/TLS Plaintext Recovery (aka “Lucky Thirteen”) Vulnerability
  • From: Security Alert
• ESA-2013-039: RSA BSAFE® SSL-J Multiple Vulnerabilities
  • From: Security Alert
• [SECURITY] [DSA 2628-2] nss-pam-ldapd update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2698-1] tiff security update
  • From: Michael Gilbert
• APPLE-SA-2013-06-18-1 Java for OS X 2013-004 and Mac OS X v10.6 Update 16
  • From: Apple Product Security
• Apple and Wifi Hotspot Credentials Management Vulnerability
  • From: Jeffrey Walton
• Re: Apple and Wifi Hotspot Credentials Management Vulnerability
  • From: Jeffrey Walton
• FreeBSD Security Advisory FreeBSD-SA-13:06.mmap
  • From: FreeBSD Security Advisories
• [SECURITY] [DSA 2710-1] xml-security-c security update
  • From: Salvatore Bonaccorso
• Re: CVE-2013-2156: Apache Santuario C++ heap overflow vulnerability
  • From: Cantor, Scott
• CVE-2013-2154: Apache Santuario C++ stack overflow vulnerability
  • From: Cantor, Scott
• CVE-2013-2155: Apache Santuario C++ denial of service vulnerability
  • From: Cantor, Scott
• CVE-2013-2153: Apache Santuario C++ signature bypass vulnerability
  • From: Cantor, Scott
• [security bulletin] HPSBHF02885 rev.2 - HP Integrated Lights-Out iLO3 and iLO4 using Single-Sign-On (SSO), Remote Unauthorized Access
  • From: security-alert
• [ MDVSA-2013:173 ] subversion
  • From: security
• Re: WordPress 3.5.1, Denial of Service
  • From: Henri Salo
• LSE Leading Security Experts GmbH - LSE-2013-06-13 - Avira AntiVir Engine
  • From: LSE Leading Security Experts GmbH (Security Advisories)
• [SECURITY] [DSA 2707-1] dbus security update
  • From: Yves-Alexis Perez
• Slideware of recent presentations about IPv6 security
  • From: Fernando Gont
• [ MDVSA-2013:172 ] wireshark
  • From: security
• CORE-2013-0430 - Buffer overflow in Ubiquiti airCam RTSP service
  • From: CORE Security Technologies Advisories
• SQL Injection in Dolphin
  • From: advisory
• Re: WordPress 3.5.1, Denial of Service
  • From: Solar Designer
• [security bulletin] HPSBMU02884 rev.1 - HP Service Manager and HP ServiceCenter, Cross Site Scripting (XSS) and Disclosure of Information
  • From: security-alert
• Re: WordPress 3.5.1, Denial of Service
  • From: Peter Bex
• t2'13: Call for Papers 2013 (Helsinki / Finland)
  • From: Tomi Tuominen
• [security bulletin] HPSBHF02885 rev.1 - HP Integrated Lights-Out iLO3 and iLO4 using Single-Sign-On (SSO), Remote Unauthorized Access
  • From: security-alert
• [SECURITY] [DSA 2704-1] mesa security update
  • From: Raphael Geissert
• CFP: IEEE SafeConfig: 6th Symposium on Security Analytics and Automation
  • From: James Joshi
• [slackware-security] php (SSA:2013-161-01)
  • From: Slackware Security Team
• [SECURITY] [DSA 2706-1] chromium-browser security update
  • From: Giuseppe Iuculano
• [SECURITY] [DSA 2705-1] pymongo security update
  • From: Giuseppe Iuculano
• CVE-2013-3739 Local File Inclusion in Weathermap <= 0.97C
  • From: Anthony Dubuissez
• [SECURITY] [DSA 2703-1] subversion security update
  • From: Salvatore Bonaccorso
• Bluetooth Chat Connect v1.0 iOS - Multiple Vulnerabilities
  • From: Vulnerability Lab
• Fail2ban 0.8.9, Denial of Service (Apache rules only)
  • From: Krzysztof Katowicz-Kowalewski
• Re: Re: Netgear FVG318 is vunerable to DOS attack
  • From: no
• Re: Netgear FVG318 is vunerable to DOS attack
  • From: No
• WordPress 3.5.1, Denial of Service
  • From: Krzysztof Katowicz-Kowalewski
• DEFCON London - DC4420 - June CFP - Lightning talks!!! - Tuesday 25th June 2013
  • From: Major Malfunction
• Re: [#1298868584] Copy&paste from web browser considered dangerous
  • From: Google Security
• APPLE-SA-2013-06-04-1 OS X Mountain Lion v10.8.4 and Security Update 2013-002
  • From: Apple Product Security
• APPLE-SA-2013-06-04-2 Safari 6.0.5
  • From: Apple Product Security
• CORE-2013-0517 - Xpient Cash Drawer Operation Vulnerability
  • From: CORE Security Technologies Advisories
• CVE-2013-3734 - JBoss AS Administration Console - Password Returned in Later Response
  • From: amroot
• SEC Consult SA-20130605-0 :: Multiple vulnerabilities in CTERA Portal
  • From: SEC Consult Vulnerability Lab
• [ANN] Struts 2.3.14.3 GA (fast-track) release available
  • From: Lukasz Lenart
• [CORE-2013-0103] Mac OSX Server DirectoryService buffer overflow
  • From: CORE Security Technologies Advisories
• [security bulletin] HPSBMU02883 SSRT101227 rev.1 - HP Data Protector, Remote Increase of Privilege, Denial of Service (DoS), Execution of Arbitrary Code
  • From: security-alert
• Re: Monkey HTTPD 1.1.1 - Denial of Service Vulnerability
  • From: dougtko
• [SECURITY] [DSA 2702-1] telepathy-gabble security update
  • From: Salvatore Bonaccorso
• CVE-2013-3843 Monkey HTTPD 1.2.0 - Buffer Overflow DoS Vulnerability With Possible Arbitrary Code Execution
  • From: dougtko
• CVE-2013-3724 Monkey HTTPD 1.1.1 - Denial of Service Vulnerability
  • From: dougtko
• [SECURITY] [DSA 2699-1] iceweasel security update
  • From: Moritz Muehlenhoff
• [ISecAuditors Security Advisories] Multiple Vulnerabilities in Telaen <= 1.3.0
  • From: ISecAuditors Security Advisories
• Open-Xchange Security Advisory 2013-06-03
  • From: Martin Braun
• DS3 Authentication Server - Multiple Issues
  • From: Pedro Andujar
• Imperva SecureSphere Operations Manager version 9.0.0.5 - Multiple issues
  • From: Pedro Andujar
• Unauthenticated command execution on Netgear DGN devices
  • From: roberto
• CVE-2013-3664 - Sketchup Multiple Vulnerabilities
  • From: Felipe Manzano
• CVE-2013-3663 - SketchUp BMP RLE8 Heap Overflow
  • From: Felipe Manzano
• CVE-2013-3662 - Sketchup MAC Pict Material Palette Stack Corruption
  • From: Felipe Manzano
• Vulnerable Microsoft VC++ 2005 RTM runtime libraries installed with "Microsoft Security Essentials" (and numerous other Microsoft products)
  • From: Stefan Kanthak
• [SECURITY] [DSA 2701-1] krb5 security update
  • From: Michael Gilbert
• [SECURITY] [DSA 2700-1] wireshark security update
  • From: Moritz Muehlenhoff