Bugtraq

• Thread Index

• [ MDVSA-2013:171 ] gnutls
  • From: security
• [security bulletin] HPSBPI02869 SSRT100936 rev.2 - HP LaserJet MFP Printers, HP Color LaserJet MFP Printers, Certain HP LaserJet Printers, Remote Unauthorized Access to Files
  • From: security-alert
• [SECURITY] [DSA 2697-1] gnutls26 security update
  • From: Florian Weimer
• Re: [oss-security] KDE Paste Applet
  • From: Kurt Seifried
• [SECURITY] [DSA 2695-1] chromium-browser security update
  • From: Michael Gilbert
• [SECURITY] [DSA 2696-1] otrs2 security update
  • From: Giuseppe Iuculano
• CORE-2013-0302 - Zavio IP Cameras multiple vulnerabilities
  • From: CORE Security Technologies Advisories
• [SECURITY][CVE-2013-2765][ModSecurity] Remote Null Pointer Dereference
  • From: yjaaidi
• CORE-2013-0318 - TP-Link IP Cameras Multiple Vulnerabilities
  • From: CORE Security Technologies Advisories
• CORE-2013-0322 - MayGion IP Cameras multiple vulnerabilities
  • From: CORE Security Technologies Advisories
• RUCKUS ADVISORY ID 031813-2: User authentication bypass vulnerability in ZoneDirector administrative web interface
  • From: Ruckus Product Security Team
• RUCKUS ADVISORY ID 031813-1: Unauthenticated TCP tunneling on Ruckus devices via SSH server process
  • From: Ruckus Product Security Team
• [ MDVSA-2013:170 ] socat
  • From: security
• [ MDVSA-2013:169 ] socat
  • From: security
• CA20130528-01: Security Notice for CA Process Automation (CA PAM)
  • From: Kotas, Kevin J
• Monkey HTTPD 1.1.1 - Denial of Service Vulnerability
  • From: dougtko
• ESA-2013-040: RSA® Authentication Manager 8.0 Multiple Vulnerabilities
  • From: Security Alert
• KDE Paste Applet
  • From: Michael Samuel
• Barracuda SSL VPN 680 2.2.2.203 - Redirect Web Vulnerability
  • From: Vulnerability Lab
• [ MDVSA-2013:168 ] python-httplib2
  • From: security
• [ MDVSA-2013:167 ] openvpn
  • From: security
• GreHack 2013 - 2nd Call For Papers - November 15, Grenoble, France
  • From: F. Duchene
• DC4420 - London DEFCON - May meet - Tuesday 28th May 2013
  • From: Tony Naggs
• [SECURITY] [DSA 2693-1] libx11 security update
  • From: Raphael Geissert
• [SECURITY] [DSA 2675-2] libxvmc regression update
  • From: Thijs Kinkhorst
• [security bulletin] HPSBUX02881 SSRT101189 rev.1 - HP-UX Directory Server, Remote Disclosure of Information
  • From: security-alert
• [SECURITY] [DSA 2676-1] libxfixes security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2692-1] libxxf86vm security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2691-1] libxinerama security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2690-1] libxxf86dga security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2673-1] libdmx security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2674-1] libxv security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2675-1] libxvmc security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2689-1] libxtst security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2688-1] libxres security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2687-1] libfs security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2686-1] libxcb security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2685-1] libxp security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2684-1] libxrandr security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2683-1] libxi security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2682-1] libxext security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2681-1] libxcursor security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2680-1] libxt security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2679-1] xserver-xorg-video-openchrome security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2678-1] mesa security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2677-1] libxrender security update
  • From: Moritz Muehlenhoff
• CFP: IEEE SafeConfig: 6th Symposium on Security Analytics and Automation
  • From: James Joshi
• SEC Consult SA-20130523-0 :: JavaScript Execution in IBM WebSphere DataPower Services
  • From: SEC Consult Vulnerability Lab
• [ANN] Struts 2.3.14.1 GA (fast track | security)
  • From: Lukasz Lenart
• APPLE-SA-2013-05-22-1 QuickTime 7.7.4
  • From: Apple Product Security
• [SECURITY] [DSA 2672-1] kfreebsd-9 security update
  • From: Florian Weimer
• [waraxe-2013-SA#105] - Multiple Vulnerabilities in Spider Catalog Wordpress Plugin
  • From: come2waraxe
• [waraxe-2013-SA#104] - Multiple Vulnerabilities in Spider Event Calendar Wordpress Plugin
  • From: come2waraxe
• Trend Micro DirectPass 1.5.0.1060 - Multiple Vulnerabilities
  • From: Vulnerability Lab
• VUPEN Security Research - Microsoft Internet Explorer 10-9 Object Confusion Sandbox Bypass (MS13-037 / Pwn2Own)
  • From: VUPEN Security Research
• VUPEN Security Research - Microsoft Internet Explorer 10-9-8-7-6 VML Remote Integer Overflow (MS13-037 / Pwn2Own)
  • From: VUPEN Security Research
• [ MDVSA-2013:166 ] krb5
  • From: security
• [slackware-security] kernel (SSA:2013-140-01)
  • From: Slackware Security Team
• Sony PS3 Firmware v4.31 - Code Execution Vulnerability
  • From: Vulnerability Lab
• CVE-2013-3496. Local privilege escalation vulnerability in Infotecs products (ViPNet Client\Coordinator, SafeDisk, Personal Firewall)
  • From: chudakovma
• Static analysis tool exposition (SATE) V Call for participation
  • From: aure
• Revision of "IPv6 Stable Privacy Addresses" (Fwd: I-D Action: draft-ietf-6man-stable-privacy-addresses-07.txt)
  • From: Fernando Gont
• Defense in depth -- the Microsoft way
  • From: Stefan Kanthak
• CONFidence - May, 28-29, Krakow, Poland - a conference adventure that never stops!
  • From: Sławomir Jabs
• [slackware-security] ruby (SSA:2013-136-02)
  • From: Slackware Security Team
• [slackware-security] mozilla-thunderbird x86_64 packages (SSA:2013-136-01)
  • From: Slackware Security Team
• APPLE-SA-2013-05-16-1 iTunes 11.0.3
  • From: Apple Product Security
• ESA-2013-029: RSA SecurID Sensitive Information Disclosure Vulnerability
  • From: Security Alert
• ESA-2013-041: EMC VNX and Celerra Control Station Elevation of Privilege Vulnerability
  • From: Security Alert
• [slackware-security] mozilla-thunderbird (SSA:2013-135-02)
  • From: Slackware Security Team
• [slackware-security] mozilla-firefox (SSA:2013-135-01)
  • From: Slackware Security Team
• [SECURITY] [DSA 2669-1] linux security update
  • From: dann frazier
• Cisco Security Advisory: Cisco TelePresence Supervisor MSE 8050 Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Multiple Vulnerabilities in Exponent CMS
  • From: advisory
• [ MDVSA-2013:165 ] firefox
  • From: security
• [security bulletin] HPSBUX02859 SSRT101144 rev.3 - HP-UX Running XNTP, Remote Denial of Service (DoS) and Execution of Arbitrary Code
  • From: security-alert
• [SECURITY] [DSA 2668-1] linux-2.6 security update
  • From: dann frazier
• WASC Announcement: Static Analysis Technologies Evaluation Criteria Published
  • From: announcements
• File Lite 3.3 & 3.5 PRO iOS - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• SimpleTransfer 2.2.1 - Command Injection Vulnerabilities
  • From: Vulnerability Lab
• Wireless Photo Access 1.0.10 iOS - Multiple Vulnerabilities
  • From: Vulnerability Lab
• Wifi Album v1.47 iOS - Command Injection Vulnerability
  • From: Vulnerability Lab
• Wifi Photo Transfer 2.1 & 1.1 PRO - Multiple Vulnerabilities
  • From: Vulnerability Lab
• Wireless Disk PRO v2.3 iOS - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• [RT-SA-2013-001] Advisory: Exim with Dovecot: Typical Misconfiguration Leads to Remote Command Execution
  • From: RedTeam Pentesting GmbH
• [ MDVSA-2013:164 ] mesa
  • From: security
• [SECURITY] [DSA 2667-1] mysql-5.5 security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2666-1] xen security update
  • From: Salvatore Bonaccorso
• CVE-2013-2071 Request mix-up if AsyncListener method throws RuntimeException
  • From: Mark Thomas
• ESA-2013-031: RSA® Authentication Agent Cross-Site Scripting (XSS) Vulnerability
  • From: Security Alert
• [SECURITY] CVE-2012-3544 Chunked transfer encoding extension size is not limited
  • From: Mark Thomas
• CFP: Hacktivity 2013, October 11-12, Budapest, Hungary
  • From: cfp
• [SECURITY] CVE-2013-2067 Session fixation with FORM authenticator
  • From: Mark Thomas
• DDIVRT-2013-53 Actuate 'ActuateJavaComponent' Multiple Vulnerabilities
  • From: ddivulnalert
• ESA-2013-021: EMC Documentum Multiple Vulnerabilities
  • From: Security Alert
• Re: Vulnerabilities in Windows 8 Professional x64 factory preinstallation of Fujitsu Lifebook A512 [continued]
  • From: Stefan Kanthak
• ESA-2013-037: EMC AlphaStor Buffer Overflow Vulnerability
  • From: Security Alert
• Vulnerability in "Fujitsu Desktop Update" (for Windows)
  • From: Stefan Kanthak
• [security bulletin] HPSBMU02786 SSRT100877 rev.2 - HP System Management Homepage (SMH) Running on Linux, Windows, and VMware ESX, Remote Unauthorized Access, Disclosure of Information, Data Modification, Denial of Service (DoS), Execution of Arbitrary Code
  • From: security-alert
• [security bulletin] HPSBUX02876 SSRT101148 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS)
  • From: security-alert
• [2.0 Update] Cisco Security Advisory: Cisco Prime Data Center Network Manager Remote Command Execution Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified Customer Voice Portal Software
  • From: Cisco Systems Product Security Incident Response Team
• Cross-Site Request Forgery (CSRF) in UMI.CMS
  • From: advisory
• [ MDVSA-2013:163 ] glibc
  • From: security
• [ MDVSA-2013:162 ] glibc
  • From: security
• SEC Consult SA-20130507-0 :: Multiple vulnerabilities in NetApp OnCommand System Manager
  • From: SEC Consult Vulnerability Lab
• Apache VCL improper input validation
  • From: Josh Thompson
• [ MDVSA-2013:161 ] java-1.7.0-openjdk
  • From: security
• ESA-2013-015: RSA Archer® GRC Multiple Vulnerabilities
  • From: Security Alert
• VULNERABLE and COMPLETELY outdated 3rd-party libraries/components used in 3CX Phone 6
  • From: Stefan Kanthak
• Multiple buffer overflows on Huawei SNMPv3 service
  • From: roberto . paleari
• Vulnerability in Microsoft Security Essentials <v4.2
  • From: Stefan Kanthak
• [SE-2012-01] New security vulnerabilities and broken fixes in IBM Java
  • From: Security Explorations
• Multiple Vulnerabilities in D-Link DSL-320B
  • From: devnull
• [ MDVSA-2013:160 ] phpmyadmin
  • From: security
• VUPEN Security Research - Microsoft Internet Explorer 10-9-8-7-6 "CDisplayPointer" Use-after-free (MS13-028)
  • From: VUPEN Security Research
• VUPEN Security Research - Microsoft Internet Explorer 10-9-8-7-6 "Scroll" Use-after-free (MS13-028)
  • From: VUPEN Security Research
• ESA-2013-035: EMC Avamar Client Improper Certificate Validation Vulnerability
  • From: Security Alert
• ESA-2013-028: EMC NetWorker Elevation of Privilege Vulnerability
  • From: Security Alert
• ESA-2013-034: EMC Avamar Improper Authorization vulnerability
  • From: Security Alert
• [SECURITY] [DSA 2664-1] stunnel4 security update
  • From: Salvatore Bonaccorso
• NGS00415 Patch Notification: Oracle 11g TNS listener remote Null Pointer Dereference (pre-auth)
  • From: NCC Group Research
• WordPress Plugin: Advanced XML Reader v0.3.4 XXE Vulnerability
  • From: admin
• NGS00416 Patch Notification: Oracle 11g TNS listener remote Invalid Pointer Read (pre-auth)
  • From: NCC Group Research
• NGS00422 Patch Notification: Oracle Retail Integration Bus Manager Directory Traversal
  • From: NCC Group Research
• NGS00423 Patch Notification: Oracle Retail Invoice Manager SQL Injection
  • From: NCC Group Research
• Multiple Cross-Site Scripting (XSS) vulnerabilities in GetSimple CMS
  • From: advisory
• SQL Injection in b2evolution
  • From: advisory
• [HITB-Announce] #HITB2013KUL Call for Papers
  • From: Hafez Kamal
• Unchecked Buffer in Microchip TCP/IP Stack Could Allow Remote Code Execution
  • From: az . bugreport . subscriber
• [ MDVSA-2013:159 ] clamav
  • From: security
• [ MDVSA-2013:158 ] krb5
  • From: security
• Syslog Watcher Pro 'Date' Parameter Cross Site Scripting Vulnerability
  • From: demonalex
• [SECURITY] [DSA 2665-1] strongswan security update
  • From: Yves-Alexis Perez
• [ MDVSA-2013:157 ] krb5
  • From: security
• [security bulletin] HPSBMU02872 SSRT101185 rev.1 - HP Service Manager, Remote Disclosure of Information, Cross Site Scripting(XSS)
  • From: security-alert
• FreeBSD Security Advisory FreeBSD-SA-13:05.nfsserver [REVISED]
  • From: FreeBSD Security Advisories
• WowzaMediaServer SecureToken bypass (and worse)
  • From: Michal J.
• WowzaMediaServer StorageDir escape (regression)
  • From: Michal J.
• Personal File Share HTTP Server Remote Overflow Vulnerability
  • From: demonalex
• CORE-2013-0303 - D-Link IP Cameras Multiple Vulnerabilities
  • From: CORE Security Technologies Advisories
• FreeBSD Security Advisory FreeBSD-SA-13:05.nfsserver
  • From: FreeBSD Security Advisories
• [ MDVSA-2013:156 ] apache-mod_security
  • From: security
• [security bulletin] HPSBMU02874 SSRT101184 rev.1 - HP Service Manager, Java Runtime Environment (JRE) Security Update
  • From: security-alert
• [security bulletin] HPSBMU02873 SSRT101182 rev.1 - HP Service Manager, Apache Tomcat Security Update
  • From: security-alert
• Re: Nginx ngx_http_close_connection function integer overflow
  • From: Maxim Konovalov
• [ MDVSA-2013:155 ] fuse
  • From: security
• [ MDVSA-2013:154 ] util-linux
  • From: security
• Cisco/Linksys E1200 N300 Reflected XSS
  • From: Carl Benedict
• [KIS-2013-04] Joomla! <= 3.0.3 (remember.php) PHP Object Injection Vulnerability
  • From: Egidio Romano
• [ MDVSA-2013:153 ] subversion
  • From: security
• [ MDVSA-2013:152 ] subversion
  • From: security
• [ MDVSA-2013:151 ] curl
  • From: security
• EDSC 2013 CFP Open
  • From: Michael Eddington
• Hacking IPv6 networks training (slideware, upcoming trainings, etc.)
  • From: Fernando Gont
• [security bulletin] HPSBPI02869 SSRT100936 rev.1 - HP LaserJet MFP Printers, HP Color LaserJet MFP Printers, Certain HP LaserJet Printers, Remote Unauthorized Access to Files
  • From: security-alert
• [security bulletin] HPSBPI02868 SSRT101017 rev.1 - HP Managed Printing Administration (MPA), Remote Cross Site Scripting (XSS)
  • From: security-alert
• Re: Nginx ngx_http_close_connection function integer overflow
  • From: Maxim Konovalov
• [security bulletin] HPSBMU02830 SSRT100889 rev.2 - HP Data Protector, Local Increase of Privilege
  • From: security-alert
• Borland Caliber 11.0 Quiksoft EasyMail SMTP Object Buffer Overflows
  • From: nospam
• Multiple Vulnerabilities in D'Link DIR-635
  • From: devnull
• Borland Silk Central 12.1 TeeChart Pro Activex control AddSeries Remote Code Execution
  • From: nospam
• Nginx ngx_http_close_connection function integer overflow
  • From: safe3q
• [waraxe-2013-SA#103] - Multiple Vulnerabilities in phpMyAdmin
  • From: come2waraxe
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco NX-OS-Based Product
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified Computing System
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Device Manager Command Execution Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [ESNC-2013-004] Remote ABAP Code Injection in OpenText/IXOS ECM for SAP NetWeaver
  • From: ESNC Security
• Cisco/Linksys HTTP Service Remote DoS (Denial of Service)
  • From: Carl Benedict
• [security bulletin] HPSBHF02865 SSRT101158 rev.1 - HP ElitePad 900, Secure Boot Configuration Inconsistency
  • From: security-alert
• [ MDVSA-2013:150 ] mysql
  • From: security
• [ MDVSA-2013:148 ] roundcubemail
  • From: security
• [SECURITY] [DSA 2663-1] tinc security update
  • From: Yves-Alexis Perez
• [ MDVSA-2013:149 ] roundcubemail
  • From: security
• Multiple Vulnerabilities in D'Link DIR-615 - Hardware revision D3 / DIR-300 - Hardware revision A
  • From: devnull
• [SQLi] vBilling for FreeSWITCH
  • From: Michał Błaszczak
• [SECURITY] [DSA 2660-1] curl security update
  • From: Salvatore Bonaccorso
• 44Café 23rd April details
  • From: Steve
• [SE-2012-01] Yet another Reflection API flaw affecting Oracle's Java SE
  • From: Security Explorations
• [ MDVSA-2013:147 ] libarchive
  • From: security
• [ MDVSA-2013:145 ] java-1.6.0-openjdk
  • From: security
• [ MDVSA-2013:146 ] icedtea-web
  • From: security
• VUPEN Security Research - Adobe Flash Player RTMP Data Processing Object Confusion (CVE-2013-2555)
  • From: VUPEN Security Research
• Re: SEC Consult SA-20130417-1 :: Java ActiveX Control Memory Corruption
  • From: SEC Consult Vulnerability Lab
• TWSL2013-004: Group Name Enumeration Vulnerability in Cisco IKE Implementation
  • From: Trustwave Advisories
• [SECURITY] [DSA 2662-1] xen security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 2661-1] xorg-server security update
  • From: Yves-Alexis Perez
• SEC Consult 20130417-0 :: Multiple vulnerabilities in Sosci Survey
  • From: SEC Consult Vulnerability Lab
• CVE-2013-2504 : Matrix42 Service Desk XSS
  • From: 43z sec
• VUPEN Security Research - Oracle Java JavaFX Video Frame Decoding Remote Heap Overflow (Pwn2Own 2013)
  • From: VUPEN Security Research
• DC4420 - London DEFCON - April meet - Tuesday 23rd April 2013
  • From: Major Malfunction
• Cisco Security Advisory: Cisco TelePresence Infrastructure Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Network Admission Control Manager SQL Injection Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• SEC Consult SA-20130417-2 :: HTTP header injection/Cache poisoning in Oracle WebCenter Sites Satellite Server
  • From: SEC Consult Vulnerability Lab
• SEC Consult SA-20130417-1 :: Java ActiveX Control Memory Corruption
  • From: SEC Consult Vulnerability Lab
• [ MDVSA-2013:144 ] phpmyadmin
  • From: security
• Re: [SE-2012-01] Details of issues fixed by Java SE 7 Update 21
  • From: Security Explorations
• [ESNC-2013-001] Privilege Escalation in SAP Healthcare Industry Solution
  • From: ESNC Security
• SI6 Networks' IPv6 Toolkit v1.3.4 released!
  • From: Fernando Gont
• Multiple Vulnerabilities in KrisonAV CMS
  • From: advisory
• Open-Xchange Security Advisory 2013-04-17
  • From: Martin Braun
• APPLE-SA-2013-04-16-2 Java for OS X 2013-003 and Mac OS X v10.6 Update 15
  • From: Apple Product Security
• APPLE-SA-2013-04-16-1 Safari 6.0.4
  • From: Apple Product Security
• [ESNC-2013-003] Remote OS Command Execution in SAP BASIS Communication Services
  • From: ESNC Security
• [ESNC-2013-002] Privilege Escalation in SAP Production Planning and Control
  • From: ESNC Security
• [SE-2012-01] Details of issues fixed by Java SE 7 Update 21
  • From: Security Explorations
• Sitecom WLM-3500 backdoor accounts
  • From: roberto . paleari
• [ MDVSA-2013:143 ] poppler
  • From: security
• [security bulletin] HPSBUX02866 SSRT101139 rev.1 - HP-UX Running Apache, Remote Denial of Service (DoS), Execution of Arbitrary Code and other vulnerabilities
  • From: security-alert
• DDIVRT-2013-52 Dell EqualLogic PS6110X Directory Traversal
  • From: ddivulnalert
• Remote command injection in Ruby Gem kelredd-pruview 0.3.8
  • From: larry0
• [ MDVSA-2013:142 ] postgresql
  • From: security
• MacOSX 10.8.3 ftpd Remote Resource Exhaustion
  • From: submit
• [ MDVSA-2013:141 ] libxslt
  • From: security
• Cisco Security Advisory: Cisco Prime Network Control Systems Database Default Credentials Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco IOS XE Software for 1000 Series Aggregation Services Routers
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Firewall Services Module Software
  • From: Cisco Systems Product Security Incident Response Team
• [ MDVSA-2013:134 ] viewvc
  • From: security
• [security bulletin] HPSBUX02859 SSRT101144 rev.2 - HP-UX Running XNTP, Remote Denial of Service (DoS) and Execute Arbitrary Code
  • From: security-alert
• [ MDVSA-2013:136 ] weechat
  • From: security
• [ MDVSA-2013:132 ] tor
  • From: security
• [ MDVSA-2013:131 ] taglib
  • From: security
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA Software
  • From: Cisco Systems Product Security Incident Response Team
• [SECURITY] [DSA 2659-1] libapache-mod-security security update
  • From: Salvatore Bonaccorso
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified MeetingPlace Solution
  • From: Cisco Systems Product Security Incident Response Team
• [security bulletin] HPSBUX02864 SSRT101156 rev.1 - HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
  • From: security-alert
• [ MDVSA-2013:139 ] x11-server
  • From: security
• [ MDVSA-2013:138 ] x11-driver-video-qxl
  • From: security
• [ MDVSA-2013:137 ] wordpress
  • From: security
• [ MDVSA-2013:135 ] vte
  • From: security
• [ MDVSA-2013:133 ] usbmuxd
  • From: security
• [ MDVSA-2013:130 ] stunnel
  • From: security
• [ MDVSA-2013:124 ] ruby
  • From: security
• [ MDVSA-2013:129 ] squid
  • From: security
• [ MDVSA-2013:128 ] squashfs-tools
  • From: security
• [ MDVSA-2013:127 ] socat
  • From: security
• [ MDVSA-2013:126 ] snack
  • From: security
• [ MDVSA-2013:125 ] sleuthkit
  • From: security
• [ MDVSA-2013:123 ] rpmdevtools
  • From: security
• [ MDVSA-2013:122 ] quagga
  • From: security
• [ MDVSA-2013:121 ] qemu
  • From: security
• [ MDVSA-2013:116 ] pixman
  • From: security
• DeepSec 2013 - Call for Papers
  • From: DeepSec Conference
• [ MDVSA-2013:120 ] python-pycrypto
  • From: security
• [ MDVSA-2013:119 ] python-httplib2
  • From: security
• [ MDVSA-2013:118 ] python-feedparser
  • From: security
• [ MDVSA-2013:117 ] python
  • From: security
• [ MDVSA-2013:115 ] php-ZendFramework
  • From: security
• [ MDVSA-2013:114 ] php
  • From: security
• [ MDVSA-2013:113 ] perl
  • From: security
• [ MDVSA-2013:112 ] otrs
  • From: security
• [ MDVSA-2013:111 ] openslp
  • From: security
• [ MDVSA-2013:110 ] openjpeg
  • From: security
• [ MDVSA-2013:109 ] open-iscsi
  • From: security
• [ MDVSA-2013:108 ] openconnect
  • From: security
• [ MDVSA-2013:107 ] ocaml-xml-light
  • From: security
• [ MDVSA-2013:106 ] nss-pam-ldapd
  • From: security
• [ MDVSA-2013:105 ] munin
  • From: security
• [ MDVSA-2013:104 ] mosh
  • From: security
• [ MDVSA-2013:103 ] mesa
  • From: security
• [ MDVSA-2013:102 ] mariadb
  • From: security
• [ MDVSA-2013:101 ] lynx
  • From: security
• [ MDVSA-2013:100 ] lighttpd
  • From: security
• [ MDVSA-2013:099 ] libytnef
  • From: security
• [ MDVSA-2013:098 ] libupnp
  • From: security
• [ MDVSA-2013:097 ] libotr
  • From: security
• [ MDVSA-2013:096 ] keepalived
  • From: security
• [ MDVSA-2013:095 ] java-1.7.0-openjdk
  • From: security
• [ MDVSA-2013:094 ] jakarta-poi
  • From: security
• [ MDVSA-2013:093 ] ircd-hybrid
  • From: security
• [ MDVSA-2013:077 ] ettercap
  • From: security
• CVE-2013-0798 : World read and write access to app_tmp directory on Android
  • From: suzuki
• Hackito Ergo Sum 2013 Speaker Announcement!
  • From: Alexandre De Oliveira
• [ MDVSA-2013:092 ] imagemagick
  • From: security
• [ MDVSA-2013:083 ] glib2.0
  • From: security
• [ MDVSA-2013:078 ] fail2ban
  • From: security
• [waraxe-2013-SA#102] - Reflected XSS in phpMyAdmin 3.5.7
  • From: come2waraxe
• [ MDVSA-2013:091 ] icecast
  • From: security
• [ MDVSA-2013:090 ] argyllcms
  • From: security
• [ MDVSA-2013:089 ] icclib
  • From: security
• [ MDVSA-2013:088 ] hplip
  • From: security
• [ MDVSA-2013:084 ] gnome-keyring
  • From: security
• [ MDVSA-2013:087 ] firefox
  • From: security
• [ MDVSA-2013:086 ] groff
  • From: security
• [ MDVSA-2013:085 ] groff
  • From: security
• [ MDVSA-2013:082 ] gimp
  • From: security
• [ MDVSA-2013:081 ] gegl
  • From: security
• [ MDVSA-2013:074 ] drupal
  • From: security
• [ MDVSA-2013:076 ] emacs
  • From: security
• [ MDVSA-2013:073 ] dokuwiki
  • From: security
• [ MDVSA-2013:075 ] elinks
  • From: security
• [ MDVSA-2013:072 ] dnsmasq
  • From: security
• [ MDVSA-2013:050 ] nss
  • From: security
• [ MDVSA-2013:049 ] net-snmp
  • From: security
• [ MDVSA-2013:046 ] libtiff
  • From: security
• [ISecAuditors Security Advisories] Multiple Full Path Disclosure Vulnerabilities in TinyWebGallery <= v1.8.9
  • From: ISecAuditors Security Advisories
• [CVE-REQUEST] Multiple CSRF vulnerabilities on Foscam IP cameras web UI
  • From: shekyan
• [ MDVSA-2013:066 ] bugzilla
  • From: security
• [CVE-2012-5389] Null Pointer Derefence in Dart Webserver <= 1.9.2
  • From: Ken
• [ MDVSA-2013:071 ] dbus-glib
  • From: security
• [ MDVSA-2013:070 ] dbus
  • From: security
• [ MDVSA-2013:069 ] cups-pk-helper
  • From: security
• [ MDVSA-2013:068 ] courier-authlib
  • From: security
• [ MDVSA-2013:067 ] couchdb
  • From: security
• [ MDVSA-2013:065 ] boost
  • From: security
• [ MDVSA-2013:064 ] bogofilter
  • From: security
• [ MDVSA-2013:063 ] bip
  • From: security
• [ MDVSA-2013:057 ] xinetd
  • From: security
• [ MDVSA-2013:055 ] wireshark
  • From: security
• [ MDVSA-2013:062 ] backuppc
  • From: security
• [ MDVSA-2013:061 ] awstats
  • From: security
• [ MDVSA-2013:060 ] accountsservice
  • From: security
• [ MDVSA-2013:059 ] dhcp
  • From: security
• [ MDVSA-2013:058 ] bind
  • From: security
• [ MDVSA-2013:056 ] libxml2
  • From: security
• [slackware-security] seamonkey (SSA:2013-097-01)
  • From: Slackware Security Team
• Multiple Vulnerabilities in D-Link devices
  • From: devnull
• [ MDVSA-2013:037 ] fetchmail
  • From: security
• [ MDVSA-2013:035 ] libexif
  • From: security
• Aastra IP Telephone hardcoded telnet admin password
  • From: Timo Juhani Lindfors
• [ MDVSA-2013:033 ] cronie
  • From: security
• [ MDVSA-2013:023-1 ] coreutils
  • From: security
• Vanilla Forums 2.0.18 / SQL-Injection / Insert arbitrary user & dump usertable
  • From: mschratt
• [ MDVSA-2013:054 ] sudo
  • From: security
• [ MDVSA-2013:053 ] proftpd
  • From: security
• [ MDVSA-2013:052 ] openssl
  • From: security
• [ MDVSA-2013:051 ] openssh
  • From: security
• [ MDVSA-2013:048 ] ncpfs
  • From: security
• [ MDVSA-2013:047 ] libxslt
  • From: security
• [ MDVSA-2013:031 ] automake
  • From: security
• [ MDVSA-2013:045 ] libssh
  • From: security
• [ MDVSA-2013:044 ] libjpeg
  • From: security
• [ MDVSA-2013:043 ] libgssglue
  • From: security
• [ MDVSA-2013:042 ] krb5
  • From: security
• [security bulletin] HPSBMU02785 SSRT100526 rev.2 - HP LoadRunner Running on Windows, Remote Execution of Arbitrary Code, Denial of Service (DoS)
  • From: security-alert
• [ MDVSA-2013:041 ] html2ps
  • From: security
• [ MDVSA-2013:040 ] gnutls
  • From: security
• [ MDVSA-2013:001-1 ] gnupg
  • From: security
• [ MDVSA-2013:039 ] freetype2
  • From: security
• [ MDVSA-2013:029 ] apache-mod_security
  • From: security
• [ MDVSA-2013:038 ] freeradius
  • From: security
• [ MDVSA-2013:036 ] exif
  • From: security
• [ MDVSA-2013:034 ] cups
  • From: security
• [ MDVSA-2013:032 ] bash
  • From: security
• [ MDVSA-2013:030 ] arpwatch
  • From: security
• [slackware-security] subversion (SSA:2013-095-01)
  • From: Slackware Security Team
• [ MDVSA-2013:019 ] bash
  • From: security
• [ MDVSA-2013:027-1 ] clamav
  • From: security
• [ MDVSA-2013:017 ] arpwatch
  • From: security
• [ MDVSA-2013:018 ] automake
  • From: security
• [ MDVSA-2013:016 ] apache-mod_security
  • From: security
• Groovy Media Player buffer overflow Vulnerability
  • From: akshay . vaghela
• Hackersh 0.1 Release Announcement
  • From: Itzik Kotler
• GreHack 2013 - Call For Papers - November 15, Grenoble, France
  • From: F. Duchene
• SEC Consult 20130404-0 :: Multiple Vulnerabilities in Censornet Professional v4 (2.1.7)
  • From: SEC Consult Vulnerability Lab
• [ MDVSA-2013:015-1 ] apache
  • From: security
• [ MDVSA-2013:015-1 ] apache
  • From: security
• [SECURITY] [DSA 2658-1] postgresql-9.1 security update
  • From: Giuseppe Iuculano
• [SECURITY] [DSA 2654-1] libxslt security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 2657-1] postgresql-8.4 security update
  • From: Giuseppe Iuculano
• Google AD Sync Tool - Exposure of Sensitive Information Vulnerability - Security Advisory - SOS-13-001
  • From: Lists
• Novell GroupWise Multiple Remote Code Execution Vulnerabilities
  • From: advisory
• TC-SA-2013-01: Reflected Cross-Site-Scripting (XSS) vulnerability in e107 CMS v1.0.2
  • From: Simon Bieber
• PHP Code Injection in FUDforum
  • From: advisory
• SQL Injection Vulnerability in Symphony
  • From: advisory
• [slackware-security] mozilla-firefox (SSA:2013-093-01)
  • From: Slackware Security Team
• [slackware-security] mozilla-thunderbird (SSA:2013-093-02)
  • From: Slackware Security Team
• SEC Consult SA-20130403-0 :: Multiple vulnerabilities in Sophos Web Protection Appliance
  • From: SEC Consult Vulnerability Lab
• FreeBSD Security Advisory FreeBSD-SA-13:04.bind
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-13:03.openssl
  • From: FreeBSD Security Advisories
• NGS00248 Patch Notification: Virtual Access Monitor Multiple SQL Injection Vulnerabilities
  • From: NCC Group Research
• Remote command execution in Ruby Gem ldoce 0.0.2
  • From: larry0
• [security bulletin] HPSBUX02860 SSRT101146 rev.1 - HP-UX Apache Running Tomcat Servlet Engine, Remote Denial of Service (DoS), Access Restriction Bypass, Unauthorized Modification and Other Vulnerabilities
  • From: security-alert
• [SECURITY] [DSA 2656-1] bind9 security update
  • From: Salvatore Bonaccorso
• US-CERT Alert TA13-088A: DNS Amplification Attacks
  • From: US-CERT Alerts
• Authentication bypass on Netgear WNR1000
  • From: roberto
• [waraxe-2013-SA#101] - Update Spoofing Vulnerability in Royal TS 2.1.5
  • From: come2waraxe
• [waraxe-2013-SA#100] - Update Spoofing Vulnerability in mRemote 1.50
  • From: come2waraxe
• [Suspected Spam] [slackware-security] libssh (SSA:2013-087-01)
  • From: Slackware Security Team
• [security bulletin] HPSBUX02859 SSRT101144 rev.1 - HP-UX Running XNTP, Remote Denial of Service (DoS) and Execute Arbitrary Code
  • From: security-alert
• MailOrderWorks v5.907 - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• AST-2013-002: Denial of Service in HTTP server
  • From: Asterisk Security Team
• [SECURITY] [DSA 2655-1] rails security update
  • From: Moritz Muehlenhoff
• Workshop Proposal/Paper Submission Deadlines
  • From: asemailing
• AST-2013-003: Username disclosure in SIP channel driver
  • From: Asterisk Security Team
• AST-2013-001: Buffer Overflow Exploit Through SIP SDP Header
  • From: Asterisk Security Team
• WordPress podPress Plugin XSS in SWF
  • From: hip
• Cisco Security Advisory: Cisco IOS Software Resource Reservation Protocol Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [security bulletin] HPSBST02848 SSRT101112 rev.1 - HP XP P9000 Command View Advanced Edition Suite Products, Remote Disclosure of Information
  • From: security-alert
• Cisco Security Advisory: Cisco IOS Software IP Service Level Agreement Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• ESA-2013-018: EMC Smarts Product - Cross Site Scripting Vulnerability
  • From: Security Alert
• Cisco Security Advisory: Cisco IOS Software Internet Key Exchange Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Software Network Address Translation Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Software Smart Install Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Software Protocol Translation Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS Software Zone-Based Policy Firewall Session Initiation Protocol Inspection Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Path Traversal in AWS XMS
  • From: advisory
• [slackware-security] bind (SSA:2013-086-01)
  • From: Slackware Security Team
• [slackware-security] dhcp (SSA:2013-086-02)
  • From: Slackware Security Team
• McAfee Virtual Technician ActiveX Control Insecure Method
  • From: advisory
• Re: Report OWASP WAF Naxsi bypass Vulnerability
  • From: Jeffrey Walton
• [SECURITY] [DSA 2653-1] icinga security update
  • From: Florian Weimer
• [security bulletin] HPSBUX02857 SSRT101103 rev.1 - HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
  • From: security-alert
• [security bulletin] HPSBOV02852 SSRT101108 rev.1 - HP SSL for OpenVMS, Remote Denial of Service (DoS), Unauthorized Disclosure of Information, Unauthorized Modification
  • From: security-alert
• [SECURITY] [DSA 2652-1] libxml2 security update
  • From: Michael Gilbert
• [security bulletin] HPSBPV02855 SSRT100512 rev.1 - HP ProCurve 1700-8(J9079A) and 1700-24(J9080A) Switches, Cross Site Request Forgery (CSRF)
  • From: security-alert
• [slackware-security] php (SSA:2013-081-01)
  • From: Slackware Security Team
• SynConnect PMS SQL Injection Vulnerability
  • From: bhadresh . k . patel
• Report OWASP WAF Naxsi bypass Vulnerability
  • From: safe3q
• ESA-2013-016: EMC Smarts Network Configuration Manager
  • From: Security Alert
• [waraxe-2013-SA#099] - Update Spoofing Vulnerability in LibreOffice 4.0.1.2
  • From: come2waraxe
• DC4420 - London DEFCON - March meet - Tuesday 26th March 2013
  • From: Major Malfunction
• [security bulletin] HPSBUX02856 SSRT101104 rev.1 - HP-UX Running OpenSSL, Remote Denial of Service (DoS) and Unauthorized Disclosure
  • From: security-alert
• [SE-2011-01] PoC code for digital SAT TV research released
  • From: Security Explorations
• [SECURITY] [DSA 2651-1] smokeping security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 2641-2] libapache2-mod-perl2 update related to DSA 2641-1
  • From: Salvatore Bonaccorso
• [IA49] Photodex ProShow Producer v5.0.3310 ScsiAccess Local Privilege Escalation
  • From: Inshell Security
• APPLE-SA-2013-03-19-2 Apple TV 5.2.1
  • From: Apple Product Security
• APPLE-SA-2013-03-19-1 iOS 6.1.3
  • From: Apple Product Security
• Re: VUPEN Security Research - Microsoft Internet Explorer 10-9-8-7-6 "OnResize" Use-after-free (MS13-021 / CVE-2013-0087)
  • From: Thomas D.
• CA20130319-01: Security Notice for SiteMinder products using SAML
  • From: Kotas, Kevin J
• [waraxe-2013-SA#098] - Directory Traversal Vulnerabilities in OpenCart 1.5.5.1
  • From: come2waraxe
• VUPEN Security Research - Microsoft Internet Explorer 10-9-8-7-6 "OnMove" Use-after-free (MS13-021 / CVE-2013-0087)
  • From: VUPEN Security Research
• VUPEN Security Research - Microsoft Internet Explorer 10-9-8-7-6 "OnResize" Use-after-free (MS13-021 / CVE-2013-0087)
  • From: VUPEN Security Research
• VUPEN Security Research - Mozilla Firefox "nsHTMLEditRules" Use-After-Free (MFSA-2013-29 / CVE-2013-0787)
  • From: VUPEN Security Research
• Remote command execution in Ruby Gem Command Wrap
  • From: Larry0
• NOPcon 2013 - Call for paper - Istanbul , Turkey
  • From: info
• Cisco Security Response: Cisco IOS and Cisco IOS XE Type 4 Passwords Issue
  • From: Cisco Systems Product Security Incident Response Team
• NGS00440 Patch Notification: Windows USB RNDIS driver kernel pool overflow
  • From: NCC Group Research
• [ MDVSA-2013:028 ] nagios
  • From: security
• [ MDVSA-2013:027 ] clamav
  • From: security
• [ MDVSA-2013:026 ] sudo
  • From: security
• [SE-2012-01] The "allowed behavior" in Java SE 7 (Issue 54)
  • From: Security Explorations
• [SECURITY] [DSA 2650-2] libvirt regression update
  • From: Yves-Alexis Perez
• Remote command execution in fastreader ruby gem
  • From: larry0
• [SECURITY] [DSA 2646-1] typo3-src security update
  • From: Yves-Alexis Perez
• [slackware-security] ruby (SSA:2013-075-01)
  • From: Slackware Security Team
• [SECURITY] [DSA 2650-1] libvirt-bin security update
  • From: Yves-Alexis Perez
• [SECURITY] [DSA 2649-1] lighttpd security update
  • From: Yves-Alexis Perez
• n.runs-SA-2013.001 - Polycom - Command Shell Grants System-Level Access
  • From: security
• n.runs-SA-2013.004 - Polycom - H.323 Format String Vulnerability
  • From: security
• n.runs-SA-2013.003 - Polycom - H.323 CDR Database SQL Injection
  • From: security
• n.runs-SA-2013.002 - Polycom - Firmware Update Command Injection
  • From: security
• [SECURITY] [DSA 2648-1] firebird2.5 security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2647-1] firebird2.1 security update
  • From: Moritz Muehlenhoff
• Skype Click to Call Update Service local privilege escalation
  • From: Oliver-Tobias Ripka
• DDIVRT-2013-50 EverFocus EPARA264-16X1 Directory Traversal
  • From: ddivulnalert
• MiniMagic ruby gem remote code execution
  • From: Larry0
• Curl Ruby Gem Remote command execution
  • From: Larry0
• [SECURITY] [DSA 2645-1] inetutils security update
  • From: Yves-Alexis Perez
• APPLE-SA-2013-03-14-2 Safari 6.0.3
  • From: Apple Product Security
• APPLE-SA-2013-03-14-1 OS X Mountain Lion v10.8.3 and Security Update 2013-001
  • From: Apple Product Security
• [SECURITY] [DSA 2640-1] zoneminder security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 2644-1] wireshark security update
  • From: Moritz Muehlenhoff
• [ MDVSA-2013:025 ] pidgin
  • From: security
• [slackware-security] seamonkey (SSA:2013-072-02)
  • From: Slackware Security Team
• [slackware-security] perl (SSA:2013-072-01)
  • From: Slackware Security Team
• Re: SQLi found in Kodak Insite
  • From: chris . joughin
• [ MDVSA-2013:024 ] firefox
  • From: security
• Re: [CVE-REQUEST] Foscam <= 11.37.2.48 path traversal vulnerability
  • From: Frédéric BASSE
• Cisco Video Surveillance Operations Manager Multiple vulnerabilities
  • From: b . saleh
• [ MDVSA-2013:023 ] coreutils
  • From: security
• SEC Consult SA-20130313-0 :: QlikView Desktop Client Integer Overflow
  • From: SEC Consult Vulnerability Lab
• [CVE-2013-1814] Apache Rave exposes User over API
  • From: Matt Franklin
• [ MDVSA-2013:022 ] openssh
  • From: security
• Open-Xchange Security Advisory 2013-03-13
  • From: Martin Braun
• [SECURITY] [DSA 2643-1] puppet security update
  • From: Yves-Alexis Perez
• TagScanner v5.1 - Stack Buffer Overflow Vulnerability
  • From: Vulnerability Lab
• Re: Squid 3.2.7 DoS (loop, 100% cpu) strHdrAcptLangGetItem() at errorpage.cc
  • From: Kurt Seifried
• Announcing ChronIC - a wearable Sub-GHz RF hacking tool
  • From: Adam Laurie
• Privoxy Proxy Authentication Credential Exposure - CVE-2013-2503
  • From: contact
• Re: Squid 3.2.7 DoS (loop, 100% cpu) strHdrAcptLangGetItem() at errorpage.cc
  • From: Amos Jeffries
• Re: Squid 3.2.7 DoS (loop, 100% cpu) strHdrAcptLangGetItem() at errorpage.cc
  • From: Amos Jeffries
• Results of a XSLT fuzzing effort
  • From: Nicolas Grégoire
• AthCon 2013 Rev. Challenge 2013
  • From: info
• SEC Consult SA-20130311-0 :: Persistent cross-site scripting in jforum
  • From: SEC Consult Vulnerability Lab
• Host tracking in IPv6 (SI6 Networks' IPv6 toolkit v1.3.3)
  • From: Fernando Gont
• Privoxy Proxy Authentication Credential Exposure - CVE-2013-2503
  • From: Chris John Riley
• [ISecAuditors Security Advisories] Reflected XSS in Asteriskguru Queue Statistics
  • From: ISecAuditors Security Advisories
• OpenFabrics ibutils 1.5.7 /tmp clobbering vulnerability
  • From: larry0
• Recon 2013 Call For Papers - June 21-23, 2013 - Montreal, Quebec
  • From: cfp2013@xxxxxxxx
• [SECURITY] [DSA 2641-1] perl security update
  • From: Salvatore Bonaccorso
• [slackware-security] mozilla-firefox (SSA:2013-068-01)
  • From: Slackware Security Team
• [slackware-security] mozilla-thunderbird (SSA:2013-068-02)
  • From: Slackware Security Team
• [SECURITY] [DSA 2642-1] sudo security update
  • From: Michael Gilbert
• Stored XSS in Terillion Reviews Wordpress Plugin
  • From: nauty . me04
• SEC Consult SA-20130308-1 :: Multiple vulnerabilities in GroundWork Monitor Enterprise (part 2)
  • From: SEC Consult Vulnerability Lab
• SEC Consult SA-20130308-0 :: Multiple critical vulnerabilities in GroundWork Monitor Enterprise (part 1)
  • From: SEC Consult Vulnerability Lab
• [ MDVSA-2013:021 ] java-1.6.0-openjdk
  • From: security
• [ MDVSA-2013:020 ] wireshark
  • From: security
• Re: Squid 3.2.7 DoS (loop, 100% cpu) strHdrAcptLangGetItem() at errorpage.cc
  • From: Kurt Seifried
• Re: Oracle Auto Service Request /tmp file clobbering vulnerability
  • From: larry0
• Multiple NULL Pointer Dereference Vulnerabilities in Corel Quattro Pro X6
  • From: advisory
• Untrusted Pointer Dereference Vulnerability in Corel WordPerfect X6
  • From: advisory
• [security bulletin] HPSBGN02854 SSRT100881 rev.1 - HP Intelligent Management Center (iMC), iMC TACACS+ Authentication Manager (TAM), and iMC User Access Manager (UAM), Cross Site Scripting (XSS), Remote Code Execution, Remote Disclosure of Information
  • From: security-alert
• [ MDVSA-2013:019 ] gnutls
  • From: security
• [security bulletin] HPSBPI02851 SSRT101078 rev.1 - Certain HP LaserJet Pro Printers, Unauthorized Access to Data
  • From: security-alert
• [slackware-security] sudo (SSA:2013-065-01)
  • From: Slackware Security Team
• [security bulletin] HPSBMU02849 SSRT101124 rev.1 - HP ServiceCenter, Remote Denial of Service (DoS)
  • From: security-alert
• DDIVRT-2013-51 DALIM Dialog Server 'logfile' Local File Inclusion
  • From: ddivulnalert
• [ MDVSA-2013:018 ] openssl
  • From: security
• Verax NMS Password Disclosure (CVE-2013-1631)
  • From: Just Bugs
• Verax NMS Hardcoded Private Key (CVE-2013-1352)
  • From: Just Bugs
• Verax NMS Password Replay Attack (CVE-2013-1351)
  • From: Just Bugs
• Verax NMS Authenication Bypass (CVE-2013-1350)
  • From: Just Bugs
• [SECURITY] CVE-2013-0248 Apache Commons FileUpload - Insecure examples
  • From: Mark Thomas
• Multiple XSS vulnerabilities in Events Manager WordPress plugin
  • From: advisory
• OS Command Injection in CosCms
  • From: advisory
• Re: rpi-update tmpfile vulnerability
  • From: larry0
• Re: Kingcopes AthCon 2012 Slides & Notes --> Video online
  • From: king cope
• Apache Subversion mod_dav_svn DoS via MKACTIVITY/PROPFIND
  • From: tytusromekiatomek
• Varnish 2.1.5 DoS in fetch_straight() while parsing Content-Length header
  • From: tytusromekiatomek
• Squid 3.2.5 httpMakeVaryMark() header value DoS, 2.7.Stable9 memory corruption.
  • From: tytusromekiatomek
• Varnish 2.1.5, 3.0.3 DoS in http_GetHdr() while parsing Vary header
  • From: tytusromekiatomek
• SIP Witch 0.7.4 w/libosip2-4.0.0 DoS via NULL pointer derefence in libosip2
  • From: tytusromekiatomek
• Squid 3.2.7 DoS (loop, 100% cpu) strHdrAcptLangGetItem() at errorpage.cc
  • From: tytusromekiatomek
• Varnish 2.1.5 DoS in STV_alloc() while parsing Content-Length header
  • From: tytusromekiatomek
• Samsung TV DoS (possible overflow) via SOAPACTION
  • From: tytusromekiatomek
• Varnish 2.1.5, 3.0.3 DoS in VRY_Create() while parsing Vary header
  • From: tytusromekiatomek
• [ MDVSA-2013:017 ] libxml2
  • From: security
• [SECURITY] [DSA 2639-1] php5 security update
  • From: Thijs Kinkhorst
• RE: [Full-disclosure] Remote system freeze thanks to Kaspersky Internet Security 2013 (SA52053)
  • From: Vulnerability Mailbox
• [PT-2013-17] Arbitrary Files Reading in mnoGoSearch
  • From: noreply
• WordPress Count-Per-Day plugin 3.2.5. Type-1 (reflected) Cross Site Scripting (XSS)
  • From: alej andr0
• [SECURITY] [DSA 2638-1] openafs security update
  • From: Moritz Muehlenhoff
• [IA32] HP Intelligent Management Center v5.1 E0202 topoContent.jsf Non-Persistent Cross-Site Scripting
  • From: Inshell Security
• APPLE-SA-2013-03-04-1 Java for OS X 2013-002 and Mac OS X v10.6 Update 14
  • From: Apple Product Security
• [SECURITY] [DSA 2637-1] apache2 security update
  • From: Stefan Fritsch
• Remote system freeze thanks to Kaspersky Internet Security 2013
  • From: Marc Heuse
• Remote command execution for Ruby Gem ftpd-0.2.1
  • From: larry0
• Proofpoint Protection Server Session Persistence
  • From: BugsNotHugs
• [CVE-REQUEST] Foscam <= 11.37.2.48 path traversal vulnerability
  • From: Frédéric Basse
• [slackware-security] httpd (SSA:2013-062-01)
  • From: Slackware Security Team
• CVE-2013-1413
  • From: stephan . rickauer
• rpi-update tmpfile vulnerability
  • From: Technion
• [SE-2012-01] One more attack affecting Oracle's Java SE 7u15
  • From: Security Explorations
• [SECURITY] [DSA 2636-2] xen regression update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2636-1] xen security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2635-1] cfingerd security update
  • From: Salvatore Bonaccorso
• ESA-2013-012: RSA® Authentication Agent 7.1.1 for Microsoft Windows® Access Control Vulnerability
  • From: Security Alert
• Fileutils ruby gem possible remote command execution and insecure file handling in /tmp
  • From: larry0
• PHEARCON Call For Papers
  • From: AA
• Stored Cross-site Scripting ('XSS') in Airvana HubBub C1-600-RT Femtocell
  • From: scott . behrens
• Cross-Site Scripting (XSS) in Geeklog
  • From: advisory
• Multiple Vulnerabilities in Piwigo
  • From: advisory
• [KIS-2013-03] Joomla! <= 3.0.2 (highlight.php) PHP Object Injection Vulnerability
  • From: Egidio Romano
• Unauthenticated remote access to D-Link DIR-645 devices
  • From: roberto
• Cisco Security Advisory: Cisco Prime Central for Hosted Collaboration Solution Assurance Excessive CPU Utilization Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [waraxe-2013-SA#097] - Multiple Vulnerabilities in PHP-Fusion 7.02.05
  • From: come2waraxe
• [ MDVSA-2013:016 ] php
  • From: security
• Cisco Security Advisory: Cisco Unified Communications Manager Multiple Denial of Service Vulnerabilities
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Unified Presence Server Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [SECURITY] [DSA 2634-1] python-django security update
  • From: Nico Golde
• [SECURITY] [DSA 2633-1] fusionforge security update
  • From: Yves-Alexis Perez
• Denial of Service vulnerability in War FTP Daemon 1.82
  • From: Jarle Aase
• [ MDVSA-2013:015 ] apache
  • From: security
• [slackware-security] seamonkey (SSA:2013-056-01)
  • From: Slackware Security Team
• [SECURITY] [DSA 2632-1] linux-2.6 security update
  • From: dann frazier
• [Onapsis Security Advisory 2013-006] SAP SMD Agent Code Injection
  • From: Onapsis Research Labs
• Fwd: [SECURITY] CVE-2013-0253 Apache Maven 3.0.4
  • From: Olivier Lamy
• [IA48] Photodex ProShow Producer v5.0.3297 Insecure Library Loading Vulnerability
  • From: Inshell Security
• Kayako Fusion v4.51.1891 - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• [Onapsis Security Advisory 2013-005] SAP CCMS Agent Code Injection
  • From: Onapsis Research Labs
• [Onapsis Security Advisory 2013-004] SAP J2EE Core Service Arbitrary File Access
  • From: Onapsis Research Labs
• [Onapsis Security Advisory 2013-003] SAP Enterprise Portal Cross-Site-Scripting
  • From: Onapsis Research Labs
• [Onapsis Security Advisory 2013-002] SAP SDM Denial of Service
  • From: Onapsis Research Labs
• [Onapsis Security Advisory 2013-001] SAP Portal PDC Information Disclosure
  • From: Onapsis Research Labs
• [SECURITY] [DSA 2629-1] openjpeg security update
  • From: Michael Gilbert
• VUPEN Security Research - Microsoft Windows OLE Automation Code Execution Vulnerability
  • From: VUPEN Security Research
• DC4420 - London DEFCON Tuesday 26th Feb 2013
  • From: Major Malfunction
• [SE-2012-01] New security issues affecting Oracle's Java SE 7u15
  • From: Security Explorations
• NoSuchCon CFP 2.0 / 15-17 May 2013 / Paris, France
  • From: Jonathan Brossard
• [SECURITY] [DSA 2631-1] squid3 security update
  • From: Salvatore Bonaccorso
• [ MDVSA-2013:014 ] java-1.6.0-openjdk
  • From: security
• TeamSHATTER Security Advisory: Oracle EM Cross Site Scripting in XDBResource cancelURL parameter (CVE-2013-0352)
  • From: Shatter
• Samsung Galaxy S3 partial screen-lock bypass
  • From: ukpentestinfo
• TeamSHATTER Security Advisory: Cross-site scripting in Oracle EM (advReplicationAdmin) (CVE-2013-0355)
  • From: Shatter
• OSEC-2013-01: nagios metacharacter filtering omission
  • From: Rudolph Pereira
• CVE-2013-0162 rubygem-ruby_parser: incorrect temporary file usage / Public Service Announcement
  • From: Kurt Seifried
• TeamSHATTER Security Advisory: SQL Injection in Oracle EM (Resource Manager) (CVE-2013-0358)
  • From: Shatter
• TeamSHATTER Security Advisory: Oracle EM Segment Advisor Arbitrary URL redirection/phishing (CVE-2012-3219)
  • From: Shatter
• TeamSHATTER Security Advisory: SQL Injection in Oracle EM (streams queue) (CVE-2013-0373)
  • From: Shatter
• TeamSHATTER Security Advisory: SQL Injection in Oracle EM (SCPLBL_COLLECTED parameters) (CVE-2013-0353)
  • From: Shatter
• TeamSHATTER Security Advisory: Oracle Database GeoRaster API overflow (CVE-2012-3220)
  • From: Shatter
• TeamSHATTER Security Advisory: SQL Injection in Oracle EM (dBClone) (CVE-2013-0374)
  • From: Shatter
• TeamSHATTER Security Advisory: SQL Injection in Oracle EM (advReplicationAdmin) (CVE-2013-0372)
  • From: Shatter
• TeamSHATTER Security Advisory: HTTP Response Splitting in Oracle EM (policyViewSettings) (CVE-2013-0354)
  • From: Shatter
• Paper - Hiding Data in Hard-drive Service Areas
  • From: Ariel Berkman
• Re: Alt-N MDaemon Email Body HTML/JS Injection Vulnerability
  • From: brad . wyro
• MyFi Wireless Disk 1.2 iPad iPhone - Multiple Vulnerabilities
  • From: Vulnerability Lab
• Sonicwall Scrutinizer v9.5.2 - SQL Injection Vulnerability
  • From: Vulnerability Lab
• TeamSHATTER Security Advisory: Oracle 11g Stealth Password Cracking Vulnerability (CVE-2012-3137)
  • From: Shatter
• TeamSHATTER Security Advisory: SQL Injection in Oracle Alter FBA Table (CVE-2012-1751)
  • From: Shatter
• [security bulletin] HPSBMU02836 SSRT101056 rev.1 - HP ArcSight Connector Appliance and ArcSight Logger, Remote Disclosure of Information, Command Injection, Cross-Site Scripting (XSS)
  • From: security-alert
• [SECURITY] [DSA 2630-1] postgresql-8.4 security update
  • From: Moritz Muehlenhoff
• [CVE-2013-1636]Wordpress pretty-link plugin XSS in SWF&#8207;
  • From: hip
• [ MDVSA-2013:013 ] squid
  • From: security
• Alt-N MDaemon's WorldClient & WebAdmin Cross-Site Request Forgery Vulnerability
  • From: demetris papapetrou
• Alt-N MDaemon's WorldClient Predictable Session ID Vulnerability
  • From: demetris papapetrou
• Alt-N MDaemon Email Body HTML/JS Injection Vulnerability
  • From: demetris papapetrou
• Alt-N MDaemon's WorldClient Username Enumeration Vulnerability
  • From: demetris papapetrou
• Alt-N MDaemon's WebAdmin Remote Code Execution Vulnerability
  • From: demetris papapetrou
• Alt-N MDaemon's WorldClient Disclosure of Authentication Credentials Vulnerability
  • From: demetris papapetrou
• Multiple Cross-Site Scripting (XSS) in glFusion
  • From: advisory
• [slackware-security] mozilla-thunderbird (SSA:2013-050-02)
  • From: Slackware Security Team
• [slackware-security] mozilla-firefox (SSA:2013-050-01)
  • From: Slackware Security Team
• APPLE-SA-2013-02-19-1 Java for OS X 2013-001 and Mac OS X v10.6 Update 13
  • From: Apple Product Security
• SQLi found in Kodak Insite
  • From: robert
• Foswiki Security: Alert CVE-2013-1666 - Remote Code Execution Vulnerability in MAKETEXT macro.
  • From: George Clark
• FreeBSD Security Advisory FreeBSD-SA-13:02.libc
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-13:01.bind
  • From: FreeBSD Security Advisories
• Re: Scanning the IPv6 Internet with the scan6 tool (SI6 IPv6 toolkit)
  • From: Marc Heuse
• Reflective/Stored XSS in Responsive Logo Slideshow Plugin Cross-Site Scripting Vulnerability
  • From: nauty . me04
• Reflective XSS in Marekkis Watermark-Plugin Cross-Site Scripting Vulnerability
  • From: nauty . me04
• [SECURITY] [DSA 2628-1] nss-pam-ldapd security update
  • From: Moritz Muehlenhoff
• Re: Aastra IP Telephone encrypted .tuz configuration file leakage
  • From: Timo Juhani Lindfors
• PHP-Fusion 7.02.05 SQL Injection
  • From: Krzysztof Katowicz-Kowalewski
• [IA47] Photodex ProShow Producer v5.0.3297 PXT File title Value Handling Buffer Overflow
  • From: Inshell Security
• Multiple Vulnerabilities in Netgear DGN2200B
  • From: devnull
• Sniffing HDCP crypto keys with a $30 Bus Pirate and a broken HDMI cable
  • From: Adam Laurie
• [SECURITY] [DSA 2627-1] nginx security update
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 2626-1] lighttpd security update
  • From: Thijs Kinkhorst
• Scanning the IPv6 Internet with the scan6 tool (SI6 IPv6 toolkit)
  • From: Fernando Gont
• [SECURITY] [DSA 2625-1] wireshark security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2624-1] ffmpeg security update
  • From: Moritz Muehlenhoff
• SI6 Networks IPv6 Toolkit v1.3 released!
  • From: Fernando Gont
• CORE-2012-1128 - SAP Netweaver Message Server Multiple Vulnerabilities
  • From: CORE Security Technologies Advisories
• Empirum Password Obfuscation Design Flaw
  • From: otr
• [ MDVSA-2013:012 ] postgresql
  • From: security
• Re: CFP: InfoSec Southwest 2013
  • From: Tod Beardsley
• [IA46] Photodex ProShow Producer v5.0.3297 ColorPickerProc() Memory Corruption
  • From: Inshell Security
• [SECURITY] [DSA 2623-1] openconnect security update
  • From: Florian Weimer
• Multiple Vulnerabilities in Edimax EW-7206-APg and EW-7209APg
  • From: devnull
• Multiple Vulnerabilities in TP-Link TL-WA701N / TL-WA701ND
  • From: devnull
• [security bulletin] HPSBMU02815 SSRT100715 rev.5 - HP SiteScope SOAP Security Issues, Remote Disclosure of Information, Remote Code Execution
  • From: security-alert
• Re: Aastra IP Telephone encrypted .tuz configuration file leakage
  • From: noreply
• [slackware-security] pidgin (SSA:2013-044-01)
  • From: Slackware Security Team
• Sonicwall Scrutinizer v9.5.2 - SQL Injection Vulnerability
  • From: Vulnerability Lab
• Sonicwall OEM Scrutinizer v9.5.2 - Multiple Vulnerabilities
  • From: Vulnerability Lab
• CA20130213-01: Security Notice for CA ControlMinder
  • From: Kotas, Kevin J
• [SECURITY] [DSA 2621-1] openssl security update
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 2622-1] polarssl security update
  • From: Thijs Kinkhorst
• Multiple Vulnerabilities in OpenPLI
  • From: devnull
• [ MDVSA-2013:011 ] samba
  • From: security
• [SECURITY] [DSA 2620-1] rails security update
  • From: Florian Weimer
• Simple password obfuscation in Enterprise Architect
  • From: Diening, Holm
• [slackware-security] openssl (SSA:2013-042-01)
  • From: Slackware Security Team
• Re: Atmel "secure" crypto co-processor series microprocessors (AT91SAM7XC) leaking keys, plus bonus DESFire hack
  • From: Adam Laurie
• I Read It Somewhere (IRIS) citations management tool <= v1.3 (post auth) Remote Command Execution
  • From: aeon . s . flux
• Multiple Vulnerabilities in Linksys WAG200G
  • From: devnull
• Multiple Vulnerabilities in Linksys WRT160Nv2
  • From: devnull
• Atmel "secure" crypto co-processor series microprocessors (AT91SAM7XC) leaking keys, plus bonus DESFire hack
  • From: Adam Laurie
• [ MDVSA-2013:010 ] java-1.6.0-openjdk
  • From: security
• [SECURITY] [DSA 2612-2] ircd-ratbox update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2619-1] xen-qemu-dm-4.0 security update
  • From: Moritz Muehlenhoff
• [ MDVSA-2013:009 ] libssh
  • From: security
• Mathematica9.0.1 on Linux /tmp/MathLink vulnerability
  • From: paul . szabo
• [slackware-security] curl (SSA:2013-038-01)
  • From: Slackware Security Team
• [SECURITY] [DSA 2618-1] ircd-hybrid security update
  • From: Luciano Bello
• DIMVA 2013 - Extended deadline for paper submission: February 17, 2013!
  • From: Collin Mulliner
• [CVE-2013-1464]Wordpress Audio Player Plugin XSS in SWF&#8207;&#8207;
  • From: hip
• Cisco Security Advisory: Cisco ATA 187 Analog Telephone Adaptor Remote Access Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• DefenseCode Security Advisory: Cisco Linksys Remote Preauth 0day Root Exploit Follow-Up
  • From: DefenseCode
• [ MDVSA-2013:008 ] mysql
  • From: security
• [KIS-2013-02] CubeCart <= 5.2.0 (cubecart.class.php) PHP Object Injection Vulnerability
  • From: Egidio Romano
• Cross-Site Scripting (XSS) Vulnerability in CommentLuv WordPress Plugin
  • From: advisory