Bugtraq

• Thread Index

• Cisco Security Advisory: Cisco Unified Presence and Jabber Extensible Communications Platform Stream Header Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [ MDVSA-2012:151 ] ghostscript
  • From: security
• [SECURITY] [DSA 2546-1] freeradius security update
  • From: Nico Golde
• VUPEN - Mozilla Firefox "nsHTMLEditRules" Remote Use-after-free (CVE-2012-3958 / MFSA 2012-58)
  • From: VUPEN Security Research
• VUPEN - Microsoft Windows Common Controls MSCOMCTL.OCX Use-after-free (CVE-2012-1856 / MS12-060)
  • From: VUPEN Security Research
• VUPEN - Adobe Flash Player "Matrix3D" Integer Overflow Code Execution (APSB12-19)
  • From: VUPEN Security Research
• ESA-2012-029: RSA BSAFE(r) SSL-C Multiple Vulnerabilities
  • From: Security Alert
• Multiple vulnerabilities in Ezylog photovoltaic management server
  • From: roberto
• GreHack 2012 - 19th Oct. Grenoble, France - Call For [ Participation, Student Grants Application, Music Bands/Artists/DJ ]
  • From: Fabien DUCHENE
• [PRE-SA-2012-06] FreeRADIUS: Stack Overflow in TLS-based EAP Methods
  • From: Timo Warns
• Wordpress Download Monitor - Download Page Cross-Site Scripting
  • From: Joseph Sheridan
• nullcon CTF HackIM is on
  • From: nullcon
• ESA-2012-032: RSA BSAFE(r) Micro Edition Suite Security Update for BEAST (Browser Exploit Against SSL/TLS) attacks
  • From: Security Alert
• [SE-2012-01] Security vulnerabilities in IBM Java
  • From: Security Explorations
• [ MDVSA-2012:150 ] java-1.6.0-openjdk
  • From: security
• [SECURITY] [DSA 2545-1] qemu security update
  • From: Raphael Geissert
• [SECURITY] [DSA 2544-1] xen security update
  • From: Raphael Geissert
• [SECURITY] [DSA 2543-1] xen-qemu-dm-4.0 security update
  • From: Raphael Geissert
• [SECURITY] [DSA 2542-1] qemu-kvm security update
  • From: Raphael Geissert
• [SECURITY] [DSA 2541-1] beaker security update
  • From: Raphael Geissert
• [SECURITY] [DSA 2540-1] mahara security update
  • From: Raphael Geissert
• [security bulletin] HPSBMU02811 SSRT100937 rev.1 - HP Business Availability Center (BAC) Cross Site Scripting (XSS), Cross Site Request Forgery (CSRF), and Web Session Hijacking
  • From: security-alert
• Internet Explorer Script Interjection Code Execution (updated)
  • From: ds . adv . pub
• [CVE-2012-3373] Apache Wicket XSS vulnerability via manipulated URL parameter
  • From: Carl-Eric Menzel
• [SECURITY] [DSA 2539-1] zabbix security update
  • From: Raphael Geissert
• [SECURITY] [DSA 2538-1] moin security update
  • From: Raphael Geissert
• [Rooted CON 2013] CFP starts!
  • From: Román Ramírez
• eFront Enterprise v3.6.11 - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• APPLE-SA-2012-09-05-1 Java for OS X 2012-005 and Java for Mac OS X 10.6 Update 10
  • From: Apple Product Security
• [IMF 2013] Call for Papers
  • From: Oliver Goebel
• Сross-Site Request Forgery (CSRF) in TestLink
  • From: advisory
• Cross-Site Scripting (XSS) in Kayako Fusion
  • From: advisory
• Cross-Site Scripting (XSS) Vulnerabilities in Flogr
  • From: advisory
• KIWICON: THE ANNUCIATION
  • From: Kiwicon
• Ektron CMS - Multiple Vulnerabilities - Security Advisory - SOS-12-009
  • From: Lists
• Barracuda Web Filter 910 5.0.015 - Multiple Vulnerabilities
  • From: Vulnerability Lab
• ES Job Search Engine v3.0 - SQL injection vulnerability
  • From: Vulnerability Lab
• eFront Educational v3.6.11 - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• IPv6 implications on IPv4 nets: IPv6 RAs, IPv4, and VPN "evasion"
  • From: Fernando Gont
• VMWare Tools susceptible to binary planting by hijack
  • From: moshez
• QNAP Turbo NAS Multiple Path Injection
  • From: Andrea Fabrizi
• Group-Office Calendar SQL Injection
  • From: Joseph Sheridan
• Secunia Research: Adobe Photoshop TIFF SGI24LogLum Decompression Buffer Overflow
  • From: Secunia Research
• Security Advisory AA-004: Directory Traversal Vulnerability in Sitecom Home Storage Center
  • From: mattijs
• Security Advisory AA-003: Directory Traversal Vulnerability in Conceptronic GrabnGo Network Storage
  • From: mattijs
• [slackware-security] slocate (SSA:2012-244-05)
  • From: Slackware Security Team
• [slackware-security] seamonkey (SSA:2012-244-04)
  • From: Slackware Security Team
• Admidio 2.3.5 Multiple security vulnerabilities
  • From: sschurtz
• [slackware-security] mozilla-firefox (SSA:2012-244-02)
  • From: Slackware Security Team
• [ MDVSA-2012:149 ] fetchmail
  • From: security
• [slackware-security] glibc (SSA:2012-244-01)
  • From: Slackware Security Team
• [slackware-security] mozilla-thunderbird (SSA:2012-244-03)
  • From: Slackware Security Team
• [SE-2012-01] New security issue affecting Java SE 7 Update 7
  • From: Security Explorations
• VMSA-2012-0013 VMware vSphere and vCOps updates to third party libraries
  • From: VMware Security Team
• Security advisory for Bugzilla 4.3.3, 4.2.3, 4.0.8 and 3.6.11
  • From: LpSolit
• AST-2012-013: ACL rules ignored when placing outbound calls by certain IAX2 users
  • From: Asterisk Security Team
• AST-2012-012: Asterisk Manager User Unauthorized Shell Access
  • From: Asterisk Security Team
• [SECURITY] [DSA 2537-1] typo3-src security update
  • From: Florian Weimer
• [SECURITY] [DSA 2536-1] otrs2 security update
  • From: Florian Weimer
• ESA-2012-038: EMC NetWorker Format String Vulnerability
  • From: Security Alert
• [ MDVSA-2012:148 ] ffmpeg
  • From: security
• [ MDVSA-2012:074-1 ] ffmpeg
  • From: security
• SEC Consult SA-20120829-0 :: Symantec Messaging Gateway - Support Backdoor
  • From: SEC Consult Vulnerability Lab
• [security bulletin] HPSB3C02809 SSRT100377 rev.1 - HP iNode Management Center, Remote Execution of Arbitrary Code
  • From: security-alert
• ZDI-12-177 : (0Day) HP SiteScope SOAP Call loadFileContent Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [SECURITY] [DSA 2535-1] rtfm security update
  • From: Florian Weimer
• Re: [SE-2012-01] information regarding recently discovered Java 7 attack
  • From: Security Explorations
• ZDI-12-180 : Novell ZENWorks AdminStudio ISGrid.dll ActiveX Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-182 : EMC AppXtender WxSuperCtrl650.ocx ActiveX Control Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Re: [Full-disclosure] [SE-2012-01] information regarding recently discovered Java 7 attack
  • From: Jeffrey Walton
• squidGuard 1.4 - Remote Denial of Service - POC
  • From: Stefan Bauer
• ZDI-12-174 : (0Day) HP SiteScope UploadFilesHandler Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Seeker Adv MS-06 - .Net Cross Site Scripting - Request Validation Bypassing
  • From: Seeker Research Center
• Sistem Biwes Multiple Vulnerability
  • From: admin
• [ MDVSA-2012:147 ] mozilla-thunderbird
  • From: security
• ZDI-12-181 : Novell iPrint nipplib.dll client-file-name Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-179 : EMC ApplicationXtender Desktop Viewer AEXView ActiveX AnnoSave Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-178 : (0Day) HP SiteScope SOAP Call update Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-175 : (0Day) HP SiteScope SOAP Call create Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-176 : (0Day) HP SiteScope SOAP Call getFileInternal Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-173 : (0Day) HP SiteScope SOAP Call getSiteScopeConfiguration Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-172 : (0Day) HP Operations Orchestration RSScheduler Service JDBC Connector Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-170 : (0Day) HP Application Lifecycle Management XGO.ocx ActiveX Control Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-169 : GE Proficy Historian KeyHelp ActiveX LaunchTriPane Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-171 : (0Day) Hewlett-Packard Intelligent Management Center UAM sprintf Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-167 : (0Day) Novell File Reporter NFRAgent.exe VOL Tag Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-168 : InduSoft Thin Client ISSymbol InternationalSeparator Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [ MDVSA-2012:146 ] firefox
  • From: security
• XSS in PrestaShop
  • From: advisory
• Cross-Site Scripting (XSS) in Phorum
  • From: advisory
• t2′12: Challenge to be released 2012-09-01 10:00 EEST
  • From: Tomi Tuominen
• [ MDVSA-2012:145 ] firefox
  • From: security
• ToorCon 14 Call For Papers
  • From: h1kari
• ESA-2012-034: EMC Cloud Tiering Appliance (CTA) Authentication Bypass Vulnerability
  • From: Security Alert
• [security bulletin] HPSBUX02805 SSRT100919 rev.3 - HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
  • From: security-alert
• [SE-2012-01] information regarding recently discovered Java 7 attack
  • From: Security Explorations
• [ MDVSA-2012:144 ] tetex
  • From: security
• CVE-2012-2665 Manifest-processing errors in Apache OpenOffice 3.4.0
  • From: Rob Weir
• CA20111208-01: Security Notice for CA SiteMinder [updated]
  • From: Williams, James K
• CommPort 1.01 <= SQL Injection Vulnerability
  • From: pereira
• Wordpress fckeditor Arbitrary File Upload Vulnerability
  • From: irist . ir
• Exploit Title: Mihalism Multi Host v 5.0
  • From: explo21ter
• Paliz CMS Full Path Disclosure Vulnerability
  • From: advisories
• Chamilo 1.8.8.4 Multiple Vulnerabilities
  • From: beford
• [slackware-security] dhcp (SSA:2012-237-01)
  • From: Slackware Security Team
• Re: [Full-disclosure] XSS and SQL Injection Vulnerabilities in Jara
  • From: Henri Salo
• Elcom CMS - Community Manager Insecure File Upload Vulnerability - Security Advisory - SOS-12-008
  • From: Lists
• Re: [Full-disclosure] XSS Vulnerabilities in LabWiki
  • From: Henri Salo
• [SECURITY] [DSA 2533-1] pcp security update
  • From: Florian Weimer
• [security bulletin] HPSBUX02806 SSRT100789 rev.2 - HP Serviceguard, Remote Denial of Service (DoS)
  • From: security-alert
• ESA-2012-039: EMC ApplicationXtender Arbitrary File Upload Vulnerability
  • From: Security Alert
• [ MDVSA-2012:143 ] python-django
  • From: security
• Ad Manager Pro v. 4 Remote FLI
  • From: CorryL
• SaltOS 3.1 Cross-Site Scripting vulnerability
  • From: sschurtz
• [security bulletin] HPSBUX02791 SSRT100856 rev.2 - HP-UX Apache Web Server running PHP, Remote Execution of Arbitrary Code, Privilege Elevation, Denial of Service (DoS)
  • From: security-alert
• ZDI-12-166 : (0Day) HP LeftHand Virtual SAN Appliance Unauthenticated Access Remote Command Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-165 : (0Day) HP Operations Agent for NonStop Server HEALTH Packet Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-164 : (0Day) HP Intelligent Management Center img.exe Integer Wrap Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-163 : (0Day) HP iNode Management Center iNodeMngChecker.exe Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• This vulnerability is being disclosed publicly without a patch in accordance with the ZDI 180 day deadline.
  • From: ZDI Disclosures
• ZDI-12-161 : EMC AutoStart ftAgent Opcode 0x2d Subcode 0x1194 Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-160 : EMC AutoStart ftAgent Opcode 0x14 Subcode 0x7F8 Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-159 : EMC AutoStart ftAgent Opcode 0x14 Subcode 0x7e7 Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-158 : Microsoft Internet Explorer MSADO CacheSize Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-157 : Microsoft Excel Series Record Parsing Type Mismatch Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-156 : Cisco AnyConnect VPN Client Arbitrary Program Instantiation Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-155 : InduSoft Thin Client ISSymbol InternationalOrder Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-154 : IBM Lotus Notes URL Command Injection Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-153 : Apple QuickTime sean Atom Size Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-152 : Oracle Outside In Excel MergeCells Record Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-151 : Oracle Outside In Excel File TxO Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-150 : Oracle Outside In XPM Processing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-149 : Cisco AnyConnect VPN Client Verification Bypass Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-148 : GE Proficy Real-Time Information Portal Remote Interface Service Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-147 : WebKit ContentEditable swapInNode Use-After-Free Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-146 : Novell eDirectory RelativeToFullDN Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-145 : Symantec Endpoint Protection SemSvc.exe AgentServlet Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• XSS and SQL Injection Vulnerabilities in Jara
  • From: Netsparker Advisories
• XSS Vulnerabilities in LabWiki
  • From: Netsparker Advisories
• XSS and SQL Injection Vulnerabilities in OrderSys
  • From: Netsparker Advisories
• XSS and Blind SQL Injection Vulnerabilities in Banana Dance CMS
  • From: Netsparker Advisories
• [ MDVSA-2012:142 ] gimp
  • From: security
• apache struts2 remote code execute
  • From: voidloafer
• [ MDVSA-2012:141 ] openslp
  • From: security
• APPLE-SA-2012-08-20-1 Apple Remote Desktop 3.6.1
  • From: Apple Product Security
• NGS00242 Patch Notification: SysAid Helpdesk stored XSS
  • From: Research@NGSSecure
• NGS00241 Patch Notification: SysAid Helpdesk blind SQL injection
  • From: Research@NGSSecure
• NGS00208 Patch Notification: Moodle CMS stored XSS
  • From: Research@NGSSecure
• NGS00330 Patch Notification: Squiz CMS Directory Traversal
  • From: Research@NGSSecure
• ocPoral CMS 8.x | Session Hijacking Vulnerability
  • From: YGN Ethical Hacker Group
• ocPoral CMS 8.x | Cross Site Request Forgery (CSRF) Vulnerability
  • From: YGN Ethical Hacker Group
• [ MDVSA-2012:140 ] mono
  • From: security
• [ MDVSA-2012:139 ] postgresql
  • From: security
• [SECURITY] [DSA 2531-1] xen security update
  • From: Luciano Bello
• ZDI-12-144 : EMC AutoStart ftAgent Opcode 0x4B Subcode 0x1D4C Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-143 : Microsoft Visio DWGDP MTEXT Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-142 : Oracle Java WebStart Browser Argument Injection Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-141 : Microsoft .NET Framework Clipboard Unsafe Memory Access Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-140 : McAfee SmartFilter Administration Server SFAdminSrv.exe JBoss RMI Remote Code Execution Vulnerabilty
  • From: ZDI Disclosures
• ZDI-12-139 : SAP Crystal Reports crystalras.exe OBUnmarshal Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-138 : SAP Business Objects Financial Consolidation CtAppReg.dll username Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-137 : Apple Mac OS X libsecurity_cdsa_plugin Malloc Integer Truncation Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-136 : Apple QuickTime Invalid Public Movie Atom Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [slackware-security] emacs (SSA:2012-228-02)
  • From: Slackware Security Team
• Internet Explorer Script Interjection Code Execution
  • From: ds . adv . pub
• [ MDVSA-2012:134 ] wireshark
  • From: security
• [FOREGROUND SECURITY 2012-001] Lsoft ListServ v16 (WA revision R4241) SHOWTPL parameter Cross-SIte Scripting - XSS
  • From: Jose Carlos de Arriba
• ManageEngine OpStor v7.4 - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• Nike+ Panel & Mobile App - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• ShopperPress v2.7 Wordpress - Cross Site Vulnerabilities
  • From: Vulnerability Lab
• ShopperPress v2.7 Wordpress - SQL Injection Vulnerability
  • From: Vulnerability Lab
• Social Engine v4.2.5 - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• GIMP Scriptfu Python Remote Command Execution
  • From: research
• NGS00288 Patch Notification: Windows Remote Desktop Memory Corruption Leading to RCE on XP SP3
  • From: Research@NGSSecure
• [ MDVSA-2012:136 ] phpmyadmin
  • From: security
• [ MDVSA-2012:138 ] acpid
  • From: security
• [ MDVSA-2012:137 ] acpid
  • From: security
• [security bulletin] HPSBUX02806 SSRT100789 rev.1 - HP Serviceguard, Remote Denial of Service (DoS)
  • From: security-alert
• [ MDVSA-2012:135 ] wireshark
  • From: security
• [ MDVSA-2012:133 ] usbmuxd
  • From: security
• vulnerabilities in Samsung Epic 4G Touch with 2.3.6 and probably other Samsung Galaxies
  • From: Alexander Pruss
• [slackware-security] t1lib (SSA:2012-228-01)
  • From: Slackware Security Team
• [SECURITY] [DSA 2530-1] rssh security update
  • From: Florian Weimer
• [SECURITY] [DSA 2528-1] icedove security update
  • From: Florian Weimer
• [ MDVSA-2012:132 ] glpi
  • From: security
• [2.0 Update] Cisco Security Advisory: Cisco IOS XR Software Route Processor Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• CFP for ZeroNights conference Moscow 19-20 November 2012
  • From: Alexander Polyakov
• Group-Office Cleartext Credentials Stored in Cookies
  • From: research
• TCExam Edit Cross-Site Scripting
  • From: research
• Total Shop UK eCommerce Generic Cross-Site Scripting
  • From: research
• 7sepehr CMS 2012 - Multiple SQL Injection Vulnerabilities
  • From: Vulnerability Lab
• NeoInvoice Blind SQL Injection (CVE-2012-3477)
  • From: Adam Caudill
• Re: How well does Microsoft support (and follow) their mantra "keep your PC updated"?
  • From: Thomas D.
• Flynax General Classifieds v4.0 CMS - Multiple Vulnerabilities
  • From: Vulnerability Lab
• [security bulletin] HPSBUX02805 SSRT100919 rev.1 - HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
  • From: security-alert
• [security bulletin] HPSBMU02803 SSRT100926 rev.1 - HP Service Manager and HP Service Center Web Tier, Remote Cross Site Scripting (XSS)
  • From: security-alert
• [security bulletin] HPSBMU02800 SSRT100921 rev.1 - HP Service Manager and HP Service Center Server, Remote Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBMU02802 SSRT100923 rev.1 - HP Fortify Software Security Center, Remote Disclosure of Privileged Information
  • From: security-alert
• [security bulletin] HPSBMU02801 SSRT100879 rev.1 - HP Fortify Software Security Center, Remote Unauthenticated Disclosure of Information
  • From: security-alert
• TCExam Edit SQL Injection
  • From: research
• [Announcement] ClubHack Magazine's Aug 2012 Issue Released
  • From: abhijeet
• GreHack 2012 - LAST Call For Papers (Grenoble, France) till 15th August 2012
  • From: Fabien DUCHENE
• [security bulletin] HPSBHF02804 SSRT100631 rev.1 - HP Integrity Server rx2800 i2, BL860c i2, BL870c i2, BL890c i2, Potential Denial of Service (DoS)
  • From: security-alert
• [SECURITY] [DSA 2527-1] php5 security update
  • From: Moritz Muehlenhoff
• [ MDVSA-2012:131 ] libotr
  • From: security
• Last reminder for Passwords^12 : Call for Presentations
  • From: Per Thorsheim
• [SECURITY] [DSA 2526-1] libotr security update
  • From: Nico Golde
• [ MDVSA-2012:130 ] openldap
  • From: security
• [ MDVSA-2012:129 ] busybox
  • From: security
• [ MDVSA-2012:129-1 ] busybox
  • From: security
• [PRE-SA-2012-05] Multiple heap-based buffer overflows in LibreOffice / OpenOffice
  • From: Timo Warns
• WordPress Plugin 'Quick Post Widget' 1.9.1 Multiple Cross-site scripting vulnerabilities
  • From: sschurtz
• How well does Microsoft support (and follow) their mantra "keep your PC updated"?
  • From: Stefan Kanthak
• Another Solaris 10 Patch Cluster Symlink Attack
  • From: larry Cashdollar
• [HITB-Announce] HITB Magazine Issue 009 - Call for Submissions
  • From: Hafez Kamal
• Arasism (IR) CMS - File Upload Vulnerability
  • From: Vulnerability Lab
• Joomla com_fireboard - SQL Injection Vulnerability
  • From: Vulnerability Lab
• Flogr v2.5.6 & v2.3 - Cross Site Script Vulnerabilities
  • From: Vulnerability Lab
• [ MDVSA-2012:128 ] bash
  • From: security
• Multiple Vulnerabilities in phpList
  • From: advisory
• Multiple vulnerabilities in PBBoard
  • From: advisory
• MobileCartly 1.0 <= Remote Code Execution Vulnerability
  • From: pereira
• ESA-2012-031: Iomega StorCenter/EMC Lifeline Remote Access Vulnerability
  • From: Security Alert
• [ MDVSA-2012:127 ] libtiff
  • From: security
• [ MDVSA-2012:126 ] libxml2
  • From: security
• [security bulletin] HPSBMU02781 SSRT100617 rev.2 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows running PostgreSQL, Remote Execution of Arbitrary Code, Denial of Service (DoS)
  • From: security-alert
• nullcon International security conference Delhi 2012 Highlights
  • From: nullcon
• Oracle Business Transaction Management Server FlashTunnelService Remote File Deletion
  • From: nospam
• Oracle Business Transaction Management Server FlashTunnelService WriteToFile Message Remote Code Execution
  • From: nospam
• FreeBSD Security Advisory FreeBSD-SA-12:05.bind
  • From: FreeBSD Security Advisories
• [SECURITY] [DSA 2525-1] expat security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2524-1] openttd security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2523-1] globus-gridftp-server security update
  • From: Moritz Muehlenhoff
• Dir2web3 Mutiple Vulnerabilities
  • From: Daniel Correa
• [CVE-2012-3873] Openconstructor CMS 3.12.0 'id' parameter multiple SQL injection vulnerabilities
  • From: lorenzo . cantoni86
• [CVE-2012-3871] Openconstructor CMS 3.12.0 'data/hybrid/i_hybrid.php', 'header' parameter Stored Cross-site Scripting Vulnerability
  • From: lorenzo . cantoni86
• [CVE-2012-3872] Openconstructor CMS 3.12.0 Multiple Reflected Cross-site Scrpting vulnerabilities
  • From: lorenzo . cantoni86
• [CVE-2012-3870] Openconstructor CMS 3.12.0 'createobject.php', 'name' and 'description' parameters Stored Cross-site Scrpting vulnerabilities
  • From: lorenzo . cantoni86
• BeneficialBank Business v4.13.1 - Auth Bypass Vulnerability
  • From: Vulnerability Lab
• [SECURITY] [DSA 2522-1] fckeditor security update
  • From: Yves-Alexis Perez
• Joomla com_photo - SQL Injection Vulnerability
  • From: Vulnerability Lab
• Joomla com_package - SQL Injection Vulnerability
  • From: Vulnerability Lab
• [ MDVSA-2012:125 ] wireshark
  • From: security
• Inout Mobile Webmail APP - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• iAuto Mobile Application 2012 - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• AOL Products downloadUpdater2 Plugin SRC Parameter Remote Code Execution
  • From: nospam
• [SECURITY] [DSA 2519-2] isc-dhcp regression
  • From: Nico Golde
• [security bulletin] HPSBMU02798 SSRT100908 rev.1 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Cross Site Scripting (XSS)
  • From: security-alert
• [ MDVSA-2012:124 ] openoffice.org
  • From: security
• [SECURITY] [DSA 2521-1] libxml2 security update
  • From: Moritz Muehlenhoff
• [ MDVSA-2012:123 ] libreoffice
  • From: security
• ZDI-12-135 : Apple QuickTime JPEG2k Sample Size Atom Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-134 : IBM Lotus Quickr QP2 ActiveX _Times Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-133 : GE Proficy Historian ihDataArchiver.exe Multiple Opcode Parsing Remote Code Execution Vulnerabilities
  • From: ZDI Disclosures
• ZDI-12-132 : IBM Lotus iNotes dwa85W ActiveX Attachment_Times Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-131 : Microsoft .NET Framework Undersized Glyph Buffer Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-130 : Apple QuickTime Player MP4A Uninitialized Pointer Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-129 : Microsoft Windows TrueType Font Parsing Remote Code Execution Vulnerability (Remote Kernel)
  • From: ZDI Disclosures
• ZDI-12-128 : Mozilla Firefox nsHTMLSelectElement Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• 29C3: Call for Participation for 29th Chaos Communication Congress
  • From: fukami
• [SECURITY] [DSA 2520-1] openoffice.org security update
  • From: Yves-Alexis Perez
• [ MDVSA-2012:122 ] icedtea-web
  • From: security
• My ROP mitigation
  • From: Young Jun Ko
• Kaspersky Password Manager 5.0.0.164 - Software Filter Vulnerability
  • From: Vulnerability Lab
• Tekno.Portal v0.1b 'link.php' Blind SQL Injection Vulnerability
  • From: Socket_0x03
• [security bulletin] HPSBMU02796 SSRT100594 rev.3 - HP Operations Agent and HP Performance Agent for AIX, HP-UX, Linux, Solaris and Windows, Remote Execution of Arbitrary Code
  • From: security-alert
• [ MDVSA-2012:121 ] libjpeg-turbo
  • From: security
• [SECURITY] [DSA 2519-1] isc-dhcp security update
  • From: Nico Golde
• [ MDVSA-2012:111 ] krb5
  • From: security
• Secunia Research: Citrix Access Gateway Plug-in for Windows nsepacom ActiveX Control Buffer Overflow
  • From: Secunia Research
• Secunia Research: Citrix Access Gateway Plug-in for Windows nsepacom ActiveX Control Integer Overflow
  • From: Secunia Research
• Kaspersky PM 5.0.0.164 - Software Filter Vulnerability
  • From: Vulnerability Lab
• ME Mobile Application Manager v10 - SQL Vulnerabilities
  • From: Vulnerability Lab
• Distimo Monitor 6.0 - Multiple Cross Site Vulnerabilities
  • From: Vulnerability Lab
• ME Application Manager 10 - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• Barracuda SSL VPN 680 - Cross Site Scripting Vulnerabilities
  • From: Vulnerability Lab
• Barracuda Appliances - Validation Filter Bypass Vulnerability
  • From: Vulnerability Lab
• [SECURITY] [DSA 2518-1] krb5 security update
  • From: Yves-Alexis Perez
• MITKRB5-SA-2012-001: KDC heap corruption and crash [CVE-2012-1014 CVE-2012-1015]
  • From: Tom Yu
• DataWatch Monarch Business Intelligence (BI) v5.1 client section stored cross-site scripting
  • From: vulns
• [SECURITY] [DSA 2517-1] bind9 security update
  • From: Nico Golde
• TEMENOS T24 R07.03 Authentication Bypass
  • From: vulns
• TEMENOS T24 R07.03 Reflected Cross-Site Scripting
  • From: vulns
• DataWatch Monarch Business Intelligence (BI) v5.1 Admin Section Blind XPath Injection
  • From: vulns
• DataWatch Monarch Business Intelligence (BI) v5.1 Blind SQL injection
  • From: vulns
• DataWatch Monarch Business Intelligence (BI) v5.1 admin section stored cross-site scripting
  • From: vulns
• DataWatch Monarch BI v5.1 admin section reflected cross-site scripting
  • From: vulns
• Dr. Web Control Center Admin UI Remote Script Code Injection
  • From: Oliver Karow
• Security Advisory in LedgerSMBv 1.3.20 and below: Denial of Service vulnerability
  • From: Chris Travers
• ocPortal 7.1.5 <= | Open URL Redirection Vulnerability
  • From: YGN Ethical Hacker Group
• Spark IM Client Local Password Decryption
  • From: Adam Caudill
• TWSL2012-014: Multiple Vulnerabilities in Scrutinizer NetFlow & sFlow Analyzer
  • From: Trustwave Advisories
• [ MDVSA-2012:110-1 ] mozilla
  • From: security
• [ MDVSA-2012:119 ] bind
  • From: security
• [slackware-security] bind (SSA:2012-209-01)
  • From: Slackware Security Team
• [ MDVSA-2012:118 ] apache-mod_security
  • From: security
• Security advisory for Bugzilla 4.3.2, 4.2.2, 4.0.7 and 3.6.10
  • From: LpSolit
• [ MDVSA-2012:117 ] python-pycrypto
  • From: security
• [ MDVSA-2012:116 ] dhcp
  • From: security
• [ MDVSA-2012:115 ] dhcp
  • From: security
• [ MDVSA-2012:114 ] apache-mod_auth_openid
  • From: security
• [ MDVSA-2012:113 ] arpwatch
  • From: security
• [SECURITY] [DSA 2516-1] isc-dhcp security update
  • From: Nico Golde
• [ MDVSA-2012:112 ] perl-DBD-Pg
  • From: security
• tekno.Portal 0.1b - SQLi Vulnerability in "anket.php"
  • From: Socket_0x03
• APPLE-SA-2012-07-25-2 Xcode 4.4
  • From: Apple Product Security
• [security bulletin] HPSBUX02795 SSRT100878 rev.2 - HP-UX Running BIND, Remote Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBUX02789 SSRT100824 rev.3 - HP-UX CIFS Server (Samba), Remote Execution of Arbitrary Code, Elevation of Privileges
  • From: security-alert
• Cross-Site Scripting (XSS) in Redaxo
  • From: advisory
• [ MDVSA-2012:111 ] libgdata
  • From: security
• APPLE-SA-2012-07-25-1 Safari 6.0
  • From: Apple Product Security
• [slackware-security] libpng (SSA:2012-206-01)
  • From: Slackware Security Team
• [ MDVSA-2012:110 ] mozilla
  • From: security
• Android DNS poisoning: Randomness gone bad (CVE-2012-2808)
  • From: Roee Hay
• Re: Wordpress (chenpress Plugin) Arbitrary File Upload Vulnerability
  • From: Henri Salo
• [ MDVSA-2012:109 ] libxslt
  • From: security
• [SECURITY] [DSA 2508-1] kfreebsd-8 security update
  • From: Yves-Alexis Perez
• Free Web App Security Challenges - Hackademics Project
  • From: Ivan Buetler
• file clobbering vulnerability in Solaris update manager & local root with SUNWbindr install.
  • From: larry0
• NESSUS ANDROID APP - stores login info in plain text
  • From: securityfocus
• POC2012 Call for Paper
  • From: pocadm
• Wordpress (chenpress Plugin) Arbitrary File Upload Vulnerability
  • From: Amir
• CodeIgniter <= 2.1.1 xss_clean() Cross Site Scripting filter bypass
  • From: Krzysztof Kotowicz
• [ MDVSA-2012:108 ] php
  • From: security
• [Announcement] ClubHack Magazine's July 2012 Issue Released
  • From: abhijeet
• [SECURITY] [DSA 2515-1] nsd3 security update
  • From: Nico Golde
• GreHack 2012 - Call For Musicians/Artists/DJs application open till October 5th 2012 (Grenoble, France)
  • From: Fabien DUCHENE
• ZDI-12-127 : (0Day) HP StorageWorks File Migration Agent RsaFTP.dll Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-126 : (0 day) HP StorageWorks File Migration Agent RsaCIFS.dll Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [slackware-security] libexif (SSA:2012-200-01)
  • From: Slackware Security Team
• [slackware-security] seamonkey (SSA:2012-200-04)
  • From: Slackware Security Team
• [slackware-security] mozilla-thunderbird (SSA:2012-200-03)
  • From: Slackware Security Team
• [slackware-security] mozilla-firefox (SSA:2012-200-02)
  • From: Slackware Security Team
• [SECURITY] [DSA 2514-1] iceweasel security update
  • From: Nico Golde
• DomsHttpd 1.0 <= Remote Denial Of Service
  • From: pereira
• [security bulletin] HPSBMU02797 SSRT100867 rev.1 - HP Network Node Manager i (NNMi) v9.1x Running JDK for HP-UX, Linux, Solaris, and Windows, Remote Unauthorized Information Disclosure, Modification, Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBMU02799 SSRT100867 rev.1 - HP Network Node Manager i (NNMi) v9.0x Running JDK for HP-UX, Linux, Solaris, and Windows, Remote Unauthorized Information Disclosure, Modification, Denial of Service (DoS)
  • From: security-alert
• [PT-2012-23] SQL Injection in Dr.Web Anti-virus
  • From: noreply
• Secunia Research: Cisco Linksys PlayerPT ActiveX Control "SetSource()" Buffer Overflow
  • From: Secunia Research
• KeyPass Password Safe v1.22 - Software Filter Vulnerability
  • From: Research
• AVAVoIP v1.5.12 - Multiple Web Vulnerabilities
  • From: Administrator
• DC4420 - London DEFCON - July meet - Tuesday July 17th 2012
  • From: Major Malfunction
• Re: [Full-disclosure] Unpatched IIS Vulnerabilities / Microsoft July Security Bulletin
  • From: Thor (Hammer of God)
• Unpatched IIS Vulnerabilities / Microsoft July Security Bulletin
  • From: king cope
• CORE-2011-1123 - Windows Kernel ReadLayoutFile Heap Overflow
  • From: CORE Security Technologies Advisories
• 0A29-12-2 :Metasploit 'pcap_log' plugin privilege escalation vulnerability
  • From: 0a29 40
• WordPress Plugin 'Count Per Day' 3.1.1 Multiple Cross-site scripting vulnerabilities
  • From: sschurtz
• PBBoard v2.1.4 CMS - Multiple Web Vulnerabilities
  • From: Research
• SMF Board v2.0.2 - Multiple Web Vulnerabilities
  • From: Research
• [security bulletin] HPSBGN02787 SSRT100876 rev.1 - HP AssetManager, Remote Cross Site Scripting (XSS) and Unauthorized Data Modification
  • From: security-alert
• libexif project security advisory July 12, 2012
  • From: Dan Fandrich
• CakePHP 2.x-2.2.0-RC2 XXE Injection
  • From: pawel . wylecial
• MGB OpenSource Guestbook 0.6.9.1 Multiple security vulnerabilities
  • From: sschurtz
• Blackboard Mobile Learn v3.0 - Persistent Web Vulnerability
  • From: Research
• [slackware-security] php (SSA:2012-195-01)
  • From: Slackware Security Team
• VamCart v0.9 CMS - Multiple Web Vulnerabilities
  • From: Research
• Event Calendar PHP 1.2 - Multiple Web Vulnerabilites
  • From: Research
• Google Chrome 19 metro_driver.dll mishandling
  • From: moshez
• [slackware-security] pidgin (SSA:2012-195-02)
  • From: Slackware Security Team
• [security bulletin] HPSBMU02796 SSRT100594 rev.2 - HP Operations Agent for AIX, HP-UX, Linux, Solaris and Windows, Remote Execution of Arbitrary Code
  • From: security-alert
• [ MDVSA-2012:106 ] libexif
  • From: security
• [ MDVSA-2012:107 ] exif
  • From: security
• security advisory: AirDroid 1.0.4 beta
  • From: Kathrin Schäberle
• [SECURITY] [DSA 2510-1] extplorer security update
  • From: Luciano Bello
• [SECURITY] [DSA 2512-1] mono security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2511-1] puppet security update
  • From: Moritz Muehlenhoff
• ZDI-12-125: Apple Quicktime QTPlugin SetLanguage Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-124: EMC AutoStart ftAgent Opcode 50 Subcode 42 Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-123: EMC AutoStart ftAgent Opcode 50 Subcode 60 Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-122: EMC AutoStart ftAgent Opcode 65 Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-121: EMC AutoStart ftAgent Opcode 85 Subcode 01 Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-120: EMC AutoStart ftAgent Opcode 85 Subcode 22 Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-119: EMC AutoStart ftAgent Opcode 0x41 Subcode 0x00 Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Funeral Script PHP - Multiple Web Vulnerabilites
  • From: Research
• ZDI-12-118: EMC AutoStart ftAgent Opcode 0x03 Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-117 : EMC AutoStart ftAgent Opcode 50 Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-116 : EMC AutoStart ftAgent Opcode 50 Subcode 04 Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-115 : HP OpenView Performance Agent coda.exe Opcode 0x8C Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-114 : HP OpenView Performance Agent coda.exe Opcode 0x34 Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Reserve Logic v1.2 Booking CMS - Multiple Vulnerabilities
  • From: Research
• PHP Jobsite v1.36 - Cross Site Scripting Vulnerabilities
  • From: Research
• Phonalisa v5.0 VoiP - Multiple Web Vulnerabilities
  • From: Research
• [ MDVSA-2012:105 ] pidgin
  • From: security
• TP Link Gateway v3.12.4 - Multiple Web Vulnerabilities
  • From: Admin
• [ MDVSA-2012:104 ] openjpeg
  • From: security
• [ MDVSA-2012:103 ] automake
  • From: security
• ESA-2012-023: RSA Authentication Manager Multiple Vulnerabilities
  • From: Security_Alert
• ESA-2012-027: EMC Celerra/VNX/VNXe Improper Access Control Vulnerability
  • From: Security_Alert
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Recording Server
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Manager
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Multipoint Switch
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Immersive Endpoint Devices
  • From: Cisco Systems Product Security Incident Response Team
• Multiple Cross-Site Scripting (XSS) in Kajona
  • From: advisory
• Re: CitrusDB 2.4.1 - LFI/SQLi Vulnerability
  • From: mbsarwin
• Re: Re: plow 0.0.5 <= Buffer Overflow Vulnerability
  • From: pereira
• [security bulletin] HPSBMU02796 SSRT100594 rev.1 - HP Operations Agent for AIX, HP-UX, Linux, Solaris and Windows, Remote Execution of Arbitrary Code
  • From: security-alert
• [SECURITY] [DSA 2509-1] pidgin security update
  • From: Luciano Bello
• GreHack 2012 - extended deadline CFP 15th August 2012 (Grenoble, France)
  • From: Fabien DUCHENE
• Re: plow 0.0.5 <= Buffer Overflow Vulnerability
  • From: Henri Salo
• Checkpoint Abra - Vulnerabilities
  • From: komarov
• Call for Papers: The 7th International Conference for Internet Technology and Secured Transactions (ICITST-2012)
  • From: Call for papers
• BookNux 0.2 <= Multiple Vulnerabilities
  • From: pereira
• [CVE-2012-3376] Apache Hadoop HDFS information disclosure vulnerability
  • From: Aaron T. Myers
• AST-2012-010: Possible resource leak on uncompleted re-invite transactions
  • From: Asterisk Security Team
• BookNux 0.2 <= Multiple Vulnerabilities
  • From: pereira
• [SECURITY] CVE-2012-2138 Apache Sling denial of service vulnerability
  • From: Bertrand Delacretaz
• AST-2012-011: Remote crash vulnerability in voice mail application
  • From: Asterisk Security Team
• Re: Basilic RCE bug
  • From: larry0
• [ MDVSA-2012:102 ] krb5
  • From: security
• CLscript CMS v3.0 - Multiple Web Vulnerabilities
  • From: Research
• [security bulletin] HPSBGN02750 SSRT100795 rev.1 - HP ProtectTools Enterprise Device Access Manager Running on Windows, Remote Execution of Arbitrary Code, Denial of Service (DoS)
  • From: security-alert
• IPv6 security tools released
  • From: Fernando Gont
• ClubHack2012 CFP Open Now
  • From: abhijeet
• ESA-2012-026: RSA Access Manager Session Replay Vulnerability
  • From: Security_Alert
• Freeside SelfService CGI|API 2.3.3 - Multiple Vulnerabilities
  • From: Research
• Classified Ads Script PHP v1.1 - SQL Injection Vulnerabilities
  • From: Research
• GuestBook Scripts PHP v1.5 - Multiple Web Vulnerabilites
  • From: Research
• Event Script PHP v1.1 CMS - Multiple Web Vulnerabilites
  • From: Research
• .Net Framework Tilde Character DoS - Sorry, exploit-db link corrected
  • From: bugreport
• .Net Framework Tilde Character DoS
  • From: bugreport
• IIS Short File/Folder Name Disclosure by using tilde ~ character
  • From: bugreport
• [SECURITY] [DSA 2507-1] openjdk-6 security update
  • From: Moritz Muehlenhoff
• Wordpress (editormonkey) Arbitrary File Upload Vulnerability
  • From: Amir
• Vulnerable Microsoft VC++ 2005 runtime libraries in "Microsoft Live Meeting 2007 Client" installed in private location
  • From: Stefan Kanthak
• Just4meeting 3.0 - Lisbon/Portugal - 6 to 8 - July
  • From: Ralf Braga
• Blind SQL Injection in Webmatic
  • From: advisory
• Forum Oxalis 0.1.2 <= SQL Injection Vulnerability
  • From: pereira
• plow 0.0.5 <= Buffer Overflow Vulnerability
  • From: pereira
• From XSLT code execution to Meterpreter shells
  • From: Nicolas Grégoire
• Cyberoam advisory
  • From: Ben Laurie
• [CVE-2012-0911] Tiki Wiki CMS Groupware <= 8.3 "unserialize()" PHP Code Execution
  • From: n0b0d13s
• [ MDVSA-2012:101 ] libtiff
  • From: security
• [security bulletin] HPSBUX02795 SSRT100878 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS)
  • From: security-alert
• Slideware of IPv6 hacking training (HIP 2012 edition), and future trainings (Portugal & Belgium)
  • From: Fernando Gont
• [SECURITY] [DSA 2506-1] libapache-mod-security security update
  • From: Yves-Alexis Perez
• [IA30] Photodex ProShow Producer v5.0.3256 Local Buffer Overflow Vulnerability
  • From: Inshell Security
• Malicious Code Execution in PCI Expansion ROM
  • From: Adam Behnke
• NGS00162 Patch Notification: Symantec Message Filter Session Hijacking via session fixation
  • From: Research@NGSSecure
• NGS00195 Patch Notification: Nagios XI Network Monitor Stored and Reflected XSS
  • From: Research@NGSSecure
• NGS00194 Patch Notification: Nagios XI Network Monitor Blind SQL Injection
  • From: Research@NGSSecure
• NGS00196 Patch Notification: Nagios XI Network Monitor OS Command Injection
  • From: Research@NGSSecure
• [security bulletin] HPSBMU02781 SSRT100617 rev.1 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows running PostgreSQL, Remote Execution of Arbitrary Code, Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBMU02783 SSRT100806 rev.1 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Cross Site Scripting (XSS)
  • From: security-alert
• [ MDVSA-2012:096-1 ] python
  • From: security
• IBM Edge Components Caching Proxy XSS Followup
  • From: BugsNotHugs
• Bookmark4U lostpasswd.php env[include_prefix] Parameter RFI
  • From: BugsNotHugs
• IBM developerWorks ncp (Nigel's Capacity Planning) 2.1 Remote Information Disclosure
  • From: BugsNotHugs
• Sun iPlanet Error Page Link Injection
  • From: BugsNotHugs
• Basilic RCE bug
  • From: m . razavi777
• [SECURITY] [DSA 2505-1] zendframework security update
  • From: Florian Weimer
• GIMP FIT File Format DoS
  • From: Joseph Sheridan
• Irfanview Plugins JLS Decompression
  • From: Joseph Sheridan
• Vulnerabilities in Winlog 2.07.16
  • From: Luigi Auriemma
• REWTERZ-20120629 - TEMENOS T24 Cross-Site Scripting (XSS) Vulnerability
  • From: Rewterz - Research Group
• ZDI-12-113 : IBM Rational ClearQuest CQOle ActiveX Control Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-112 : SAP Netweaver ABAP msg_server.exe Parameter Name Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-111 : SAP Netweaver ABAP msg_server.exe Opcode 0x43 Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-110 : Mozilla Firefox AttributeChildRemoved Use-After-Free Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-109 : Apple Quicktime TeXML Karaoke Element Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-108 : Apple Quicktime TeXML sampleData Element Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-107 : Apple Quicktime TeXML Style Element Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [SECURITY] [DSA 2504-1] libspring-2.5-java security update
  • From: Florian Weimer
• [SECURITY] [DSA 2503-1] bcfg2 security update
  • From: Florian Weimer
• ZDI-12-106 : Avaya IP Office Customer Call Reporter ImageUpload Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [security bulletin] HPSBPI02794 SSRT100542 rev.1 - Certain HP Photosmart Printers, Remote Denial of Service (DoS)
  • From: security-alert
• Cisco Security Advisory: Buffer Overflow Vulnerabilities in the Cisco WebEx Player
  • From: Cisco Systems Product Security Incident Response Team
• ZDI-12-105 : Apple Quicktime Text Track Descriptor Parsing Remote Code Execution
  • From: ZDI Disclosures
• ZDI-12-104 : SAP Netweaver ABAP msg_server.exe Parameter Value Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-103 : Apple Quicktime Dataref URI Buffer Remote Code Execution
  • From: ZDI Disclosures
• ZDI-12-102 : Novell iPrint Client nipplib.dll GetDriverSettings realm Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-101 : IBM Cognos tm1admsd.exe Multiple Operations Remote Code Execution Vulnerabilities
  • From: ZDI Disclosures
• [security bulletin] HPSBMU02786 SSRT100877 rev.1 - HP System Management Homepage (SMH) Running on Linux and Windows, Remote Unauthorized Access, Disclosure of Information, Data Modification, Denial of Service (DoS), Execution of Arbitrary Code
  • From: security-alert
• Re: Mybb 1.6.8 'announcements.php' Sql Injection Vulnerabilitiy
  • From: Gianluca Brindisi
• [security bulletin] HPSBMU02792 SSRT100820 rev.2 - HP Business Service Management (BSM), Remote Unauthorized Disclosure of Information, Unauthorized Modification, Denial of Service (DoS)
  • From: security-alert
• Re: The history of a -probably- 13 years old Oracle bug: TNS Poison
  • From: Gary Driggs
• SEC Consult SA-20120626-0 :: Zend Framework - Local file disclosure via XXE injection
  • From: SEC Consult Vulnerability Lab
• [CVE-2012-0694] SugarCRM CE <= 6.3.1 "unserialize()" PHP Code Execution
  • From: n0b0d13s
• Re: Re: Mybb 1.6.8 'announcements.php' Sql Injection Vulnerabilitiy
  • From: nathan
• OpenLimit Reader for Windows contains completely outdated, superfluous and VULNERABLE system components
  • From: Stefan Kanthak
• [CVE-2012-0694] SugarCRM CE <= 6.3.1 "unserialize()" PHP Code Execution
  • From: n0b0d13s
• Re: Mybb 1.6.8 'announcements.php' Sql Injection Vulnerabilitiy
  • From: coptang
• Re: Mybb 1.6.8 'announcements.php' Sql Injection Vulnerabilitiy
  • From: Yaniv Shaked
• [SE-2012-01] Security weakness in Apple QuickTime Java extensions (details released)
  • From: Security Explorations
• [SECURITY] [DSA 2498-1] dhcpcd security update
  • From: Yves-Alexis Perez
• CVE-2012-2380: Apache Roller Cross-Site-Resource-Forgery (XSRF) vulnerability
  • From: Dave
• CVE-2012-2381: Apache Roller Cross-Site-Scripting (XSS) vulnerability
  • From: Dave
• Re: The history of a -probably- 13 years old Oracle bug: TNS Poison
  • From: prpgk1
• [slackware-security] freetype (SSA:2012-176-01)
  • From: Slackware Security Team
• [ MDVSA-2012:100 ] rsyslog
  • From: security
• hashdays 2012 - Call for Papers (#days CFP)
  • From: Hashdays CFP
• [SECURITY] [DSA 2502-1] python-crypto security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2501-1] xen security update
  • From: Florian Weimer
• [SECURITY] [DSA 2500-1] mantis security update
  • From: Florian Weimer
• [SECURITY] [DSA 2499-1] icedove security update
  • From: Florian Weimer
• [ MDVSA-2012:088-1 ] mozilla
  • From: security
• Re: Sielco Sistemi Winlog Buffer Overflow <= v2.07.14
  • From: devnull
• Re: Mybb 1.6.8 'announcements.php' Sql Injection Vulnerabilitiy
  • From: Henri Salo
• ZDI-12-098 : AOL Products dnUpdater ActiveX Uninitialized Pointer Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [security bulletin] HPSBOV02793 SSRT100891 rev.1 - HP OpenVMS running SSL, Remote Denial of Service (DoS), Unauthorized Access
  • From: security-alert
• [security bulletin] HPSBOV02780 SSRT100766 rev.2 - HP OpenVMS ACMELOGIN, Local Unauthorized Access and Increased Privileges
  • From: security-alert
• ZDI-12-100 : HP OpenView Performance Manager PMParamHandler Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-099 : DataDirect OpenAccess oaagent.exe GIOP Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-094 : RealNetworks Helix Server rn5auth Credential Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-097 : HP Data Protector Express Opcode 0x320 Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-096 : HP Data Protector Express Opcode 0x330 Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-095 : Apple Quicktime TeXML transform Attribute Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• CORE-2012-0530 - Lattice Diamond Programmer Buffer Overflow
  • From: CORE Security Technologies Advisories
• [ MDVSA-2012:099 ] net-snmp
  • From: security
• Mybb 1.6.8 'announcements.php' Sql Injection Vulnerabilitiy
  • From: Amir
• [SECURITY] [DSA 2497-1] quagga security update
  • From: Florian Weimer
• [ MDVSA-2012:098 ] libxml2
  • From: security
• [ MDVSA-2012:097 ] python
  • From: security
• Cisco Security Advisory: Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Application Control Engine Administrator IP Address Overlap Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client
  • From: Cisco Systems Product Security Incident Response Team
• [ MDVSA-2012:096 ] python
  • From: security
• Commentics 2.0 <= Multiple Vulnerabilities
  • From: pereira
• Multiple vulnerabilities in web@all
  • From: advisory
• [Announcement] ClubHack Magazine Issue 29, June 2012 Released
  • From: abhijeet
• FreeBSD Security Advisory FreeBSD-SA-12:04.sysret [REVISED]
  • From: FreeBSD Security Advisories
• [Win32-API] SetNamedSecurityInfo() IGNORES and DESTROYS protected DACLs/SACLs
  • From: Stefan Kanthak
• VUPEN Security Research - Microsoft Internet Explorer "Col" Element Remote Heap Overflow (MS12-037 / CVE-2012-1876)
  • From: VUPEN Security Research
• VUPEN Security Research - Microsoft Internet Explorer "GetAtomTable" Remote Use-after-free (MS12-037 / CVE-2012-1875)
  • From: VUPEN Security Research
• VUPEN Security Research - Microsoft Internet Explorer "CollectionCache" Remote Use-after-free (MS12-037)
  • From: VUPEN Security Research
• [security bulletin] HPSBMU02792 SSRT100820 rev.1 - HP Business Service Management (BSM), Remote Unauthorized Disclosure of Information, Unauthorized Modification, Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBUX02791 SSRT100856 rev.1 - HP-UX Apache Web Server running PHP, Remote Execution of Arbitrary Code, Privilege Elevation, Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBUX02789 SSRT100824 rev.1 - HP-UX CIFS Server (Samba), Remote Execution of Arbitrary Code, Elevation of Privileges
  • From: security-alert
• [SECURITY] [DSA 2496-1] mysql-5.1 security update
  • From: Thijs Kinkhorst
• [ MDVSA-2012:094 ] clamav
  • From: security
• Re: SAXoPRESS - directory traversal
  • From: foo
• DC4420 - London DEFCON - June meet - Tuesday June 19th 2012
  • From: Major Malfunction
• SEC Consult SA-20120618-1 :: Airlock WAF overlong UTF-8 sequence bypass
  • From: SEC Consult Vulnerability Lab
• SEC Consult SA-20120618-0 :: Western Digital ShareSpace WEB GUI Sensitive Data Disclosure
  • From: SEC Consult Vulnerability Lab
• [ MDVSA-2012:095 ] java-1.6.0-openjdk
  • From: security
• Squiz CMS Multiple Vulnerabilities - Security Advisory - SOS-12-007
  • From: Lists
• QNAP Turbo NAS Multiple Vulnerabilities - Security Advisory
  • From: Lists
• Re: [CAL-2012-0015] opera website spoof
  • From: Code Audit Labs
• [SECURITY] [DSA 2495-1] openconnect security update
  • From: Moritz Muehlenhoff
• Swoopo Gold Shop CMS v8.4.56 - Multiple Web Vulnerabilities
  • From: Research
• Webify Product Series - Multiple Web Vulnerabilities
  • From: Research
• News Script PHP v1.2 - Multiple Web Vulnerabilites
  • From: Research
• [security bulletin] HPSBOV02774 SSRT100684 rev.1 - HP TCP/IP Services for OpenVMS, BIND 9 Resolver, Remote Denial of Service (DoS)
  • From: security-alert
• Nuked Klan SP CMS v4.5 - SQL injection Vulnerability
  • From: Research
• Boonex Dolphin v7.0.9 CMS & Mobile App - Multiple Web Vulnerabilities
  • From: Research
• nullcon Delhi 2012 Final call for Paper/Events (extended to 10th July) and First round of speakers
  • From: nullcon
• AST-2012-009: Skinny Channel Driver Remote Crash Vulnerability
  • From: Asterisk Security Team
• AdNovum NevisWeb Security Proxy Vulnerability - Cross-site scripting (XSS) within 302 Redirections
  • From: Ivan Buetler
• Squirrelcart Cart Shop v3.3.4 - Multiple Web Vulnerabilities
  • From: Research
• 0A29-12-1 : Cross-Site Scripting vulnerabilities in Nagios XI < 2011R3.0
  • From: 0a29 40
• CSNC-2012-004 Generic XSS in AdNovum nevisProxy
  • From: Cyrill Brunschwiler
• [CAL-2012-0015] opera website spoof
  • From: Code Audit Labs
• MYRE Real Estate Mobile 2012|2 - Multiple Vulnerabilities
  • From: Research
• Cells Blog CMS v1.1 - Multiple Web Vulnerabilites
  • From: Research
• Jobs Portal v3.0 NetArtMedia - Multiple Web Vulnerabilites
  • From: Research
• Simple Forum PHP 2.1 - SQL Injection Vulnerabilities
  • From: Research
• Swoopo Gold Shop CMS v8.4.56 - Multiple Web Vulnerabilities
  • From: Research
• IObit Protected Folder Authentication Bypass
  • From: Adam Behnke
• [ MDVSA-2012:093 ] php
  • From: security
• [ MDVSA-2012:092 ] postgresql
  • From: security
• [ MDVSA-2012:091 ] libreoffice
  • From: security
• [slackware-security] bind (SSA:2012-166-01)
  • From: Slackware Security Team
• [slackware-security] seamonkey (SSA:2012-166-04)
  • From: Slackware Security Team
• [slackware-security] mozilla-firefox (SSA:2012-166-02)
  • From: Slackware Security Team
• [SECURITY] [DSA 2494-1] ffmpeg security update
  • From: Florian Weimer
• Re: Bugtraq ID# 53694 is invalid/fake
  • From: Information Booth
• [ MDVSA-2012:091 ] libreoffice
  • From: security
• [ MDVSA-2012:090 ] openoffice.org
  • From: security
• VMSA-2012-0011 VMware hosted products and ESXi and ESX patches address security issues
  • From: VMware Security Team
• Interspire Shopping Cart v6 - Multiple Web Vulnerabilities
  • From: Research
• iScripts EasyCreate CMS v2.0 - Multiple Web Vulnerabilites
  • From: Research
• ADICO CMS v1.1 - Blind SQL Injection Vulnerability
  • From: Research
• QuickBlog v0.8 CMS - Multiple Web Vulnerabilities
  • From: Research
• [Suspected Spam] eSyndiCat Pro v2.4.1 - Multiple Web Vulnerabilities
  • From: Research
• [CAL-2012-0023]Microsoft IE Developer Toolbar Remote Code Execution Vulnerability
  • From: Code Audit Labs
• Security Advisory - Checkpoint Endpoint Connect VPN - DLL Hijack
  • From: moshez
• APPLE-SA-2012-06-12-1 Java for OS X 2012-004 and Java for Mac OS X 10.6 Update 9
  • From: Apple Product Security
• [SE-2012-01] Regarding Oracle's Critical Patch Update for Java SE
  • From: Security Explorations
• [CAL-2012-0026] Microsfot IE Same ID Property Remote Code Execution Vulnerability
  • From: Code Audit Labs
• CVE-2012-1661 - ESRI ArcMap arbitrary code execution via crafted map file.
  • From: Boston Cyber Defense
• ZDI-12-093 : (Pwn2Own) Microsoft Internet Explorer Fixed Table Colspan Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [SECURITY] [DSA 2493-1] asterisk security update
  • From: Florian Weimer
• [php<=5.4.3] Parsing Bug in PHP PDO prepared statements may lead to access violation
  • From: 0x721427D8 0x721427D8
• [security bulletin] HPSBMU02776 SSRT100852 rev.1 - HP Onboard Administrator (OA), Remote Unauthorized Access to Data, Unauthorized Disclosure of Information Denial of Service (DoS)
  • From: security-alert
• [CVE-2012-3238] Astaro Security Gateway <= v8.304 Persistent Cross-Site Scripting Vulnerability
  • From: Inshell Security
• Re: ZDI-12-088 : HP DataDirect OpenAccess GIOP Opcode 0x0E Remote Code Execution Vulnerability
  • From: Steve Shockley
• FreeBSD Security Advisory FreeBSD-SA-12:03.bind
  • From: FreeBSD Security Advisories
• IIS 6.0/7.5 Vulnerabilities [moderate risk] - ISOWAREZ BDAY RELEASE
  • From: king cope
• [ MDVSA-2012:088 ] mozilla
  • From: security
• Re: CVE-2012-3287: md5crypt is no longer considered safe
  • From: Solar Designer
• Re: Analysis: Vast IPv6 address space actually enables IPv6 attacks
  • From: Fernando Gont
• Re: Analysis: Vast IPv6 address space actually enables IPv6 attacks
  • From: Lee Dilkie
• FreeBSD Security Advisory FreeBSD-SA-12:04.sysret
  • From: FreeBSD Security Advisories
• APPLE-SA-2012-06-11-1 iTunes 10.6.3
  • From: Apple Product Security
• [security bulletin] HPSBMU02790 SSRT100872 rev.1 - HP Server Automation, Remote Execution of Arbitrary Code
  • From: security-alert
• [MATTA-2012-002] CVE-2012-1493; F5 BIG-IP remote root authentication bypass Vulnerability
  • From: Florent Daigniere
• [SECURITY] [DSA 2492-1] php5 security update
  • From: Florian Weimer
• [ MDVSA-2012:089 ] bind
  • From: security
• [SECURITY] [DSA 2491-1] postgresql-8.4 security update
  • From: Florian Weimer
• ZDI-12-092 : RealNetworks RealPlayer QCELP Stream Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-091 : Symantec Web Gateway upload_file Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-090 : Symantec Web Gateway Shell Command Injection Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Re: Analysis: Vast IPv6 address space actually enables IPv6 attacks
  • From: Fernando Gont
• Analysis: Vast IPv6 address space actually enables IPv6 attacks
  • From: Fernando Gont
• [SECURITY] [DSA 2488-1] iceweasel security update
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 2490-1] nss security update
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 2489-1] iceape security update
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 2487-1] openoffice.org security update
  • From: Florian Weimer
• Re: Mybb 1.6.8 Sql Injection Vulnerabilitiy
  • From: Henri Salo
• Re: Mybb 1.6.8 Sql Injection Vulnerabilitiy
  • From: Henri Salo
• CVE-2012-3287: md5crypt is no longer considered safe
  • From: phk
• Mybb 1.6.8 Sql Injection Vulnerabilitiy
  • From: Amir
• [SECURITY] [DSA 2480-3] request-tracker3.8 regression update
  • From: Florian Weimer
• ZDI-12-075 : Apple Quicktime RLE Sample Decoding Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ComSndFTP Server Remote Format String Overflow Vulnerability
  • From: demonalex
• Secunia Research: Network Instruments Observer SNMP Processing Buffer Overflows
  • From: Secunia Research
• Secunia Research: Network Instruments Observer SNMP OID Processing Denial of Service
  • From: Secunia Research
• ZDI-12-089 : HP DataDirect OpenAccess GIOP Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-088 : HP DataDirect OpenAccess GIOP Opcode 0x0E Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-087 : RealNetworks RealPlayer raac.dll stsz Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-086 : RealNetworks RealPlayer rvrender RMFF Flags Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-085 : RealNetworks RealPlayer dmp4 esds Width Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-084 : RealNetworks RealPlayer RV10 Encoded Height/Width Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-083 : Oracle Java OpenAL Library Pointer Manipulation Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-081 : Oracle Java GlueGen Arbitrary Native Library Loading Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-080 : Adobe Flash Player MP4 Stream Decoding Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-079 : Apple QuickTime H264 Picture Width Parsing Remote Code Execution Vulnerability
  • From: Zero Day Initiative
• ZDI-12-078 : Apple QuickTime SVQ3 Codec mb_skip_run Parsing Remote Code Execution
  • From: ZDI Disclosures
• ZDI-12-077 : Apple QuickTime QTVR QTVRStringAtom Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-076 : Apple QuickTime MPEG Stream Padding Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Re: rssh security announcement
  • From: Derek Martin
• SQL injection in Serendipity
  • From: advisory
• [SECURITY] [DSA 2486-1] bind9 security update
  • From: Florian Weimer
• [ MDVSA-2012:087 ] nut
  • From: security
• SQL injection in Bigware shop software
  • From: rwenzel
• Sielco Sistemi Winlog Buffer Overflow <= v2.07.14
  • From: devnull
• Arbitrary File Upload/Execution in Collabtive
  • From: Mark Hoopes
• EUSecWest 2012 - Amsterdam, Sept 19/20 featuring Mobile PWN2OWN - CFP Deadline June 15
  • From: Dragos Ruiu
• [SECURITY] [DSA 2482-1] libgdata security update
  • From: Yves-Alexis Perez
• [SECURITY] [DSA 2482-1] arpwatch security update
  • From: Yves-Alexis Perez
• [SECURITY] [DSA 2485-1] imp4 security update
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 2481-1] arpwatch security update
  • From: Yves-Alexis Perez
• [SECURITY] [DSA 2484-1] nut security update
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 2483-1] strongswan security update
  • From: Yves-Alexis Perez
• [security bulletin] HPSBMU02785 SSRT100526 rev.1 - HP LoadRunner Running on Windows, Remote Execution of Arbitrary Code
  • From: security-alert
• OpenSSL 1.0.1 Buffer Overflow Vulnerability
  • From: chenz9187
• [ MDVSA-2012:086 ] acpid
  • From: security
• [security bulletin] HPSBUX02784 SSRT100871 rev.1 - HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
  • From: security-alert
• script-fu buffer overflow in GIMP 2.6
  • From: Joseph Sheridan
• things you can do with downloads
  • From: Michal Zalewski
• AST-2012-008: Skinny Channel Driver Remote Crash Vulnerability
  • From: Asterisk Security Team
• Cisco Security Advisory: Cisco IOS XR Software Route Processor Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• FreeBSD Security Advisory FreeBSD-SA-12:02.crypt
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-12:01.openssl
  • From: FreeBSD Security Advisories
• 2 Buffer Overflows in Wireless Manager Sony VAIO
  • From: advisory
• Re: Progress Webspeed exploit for all releases
  • From: Eelko Neven
• AST-2012-007: Remote crash vulnerability in IAX2 channel driver.
  • From: Asterisk Security Team
• Mapserver for Windows (MS4W) Remote Code Execution
  • From: bruk0ut . sec
• [ MDVSA-2012:085 ] tomcat5
  • From: security
• [SECURITY] [DSA 2480-2] request-tracker3.8 regression update
  • From: Florian Weimer
• DDIVRT-2012-43 SCLIntra Enterprise SQL Injection and Authentication Bypass
  • From: ddivulnalert
• [ MDVSA-2012:084 ] ncpfs
  • From: security
• [ MDVSA-2012:083 ] util-linux
  • From: security
• [ MDVSA-2012:082 ] pidgin
  • From: security
• [SE-2011-01] Security of SAT TV set-to-boxes and DVB chipsets (details released)
  • From: Security Explorations
• WinRadius Server Denial Of Service Vulnerability
  • From: demonalex
• Tftpd32 DNS Server Denial Of Service Vulnerability
  • From: demonalex