Bugtraq

• Thread Index

• [ MDVSA-2012:017 ] firefox
  • From: security
• sqlinjection bug in nova cms
  • From: rezahmail
• eFront Community++ v3.6.10 - SQL Injection Vulnerability
  • From: research@xxxxxxxxxxxxxxxxxxxxx
• Yahoo! Messenger v11.5 - Buffer Overflow Vulnerability
  • From: research@xxxxxxxxxxxxxxxxxxxxx
• [slackware-security] proftpd (SSA:2012-041-04)
  • From: Slackware Security Team
• [slackware-security] glibc (SSA:2012-041-03)
  • From: Slackware Security Team
• [ MDVSA-2012:016 ] glpi
  • From: security
• CubeCart 3.0.20 (3.0.x) and lower | Open URL Redirection Vulnerability
  • From: YGN Ethical Hacker Group
• Kloxo LxCenter Server CP v6.1.10 - Multiple Web Vulnerabilities
  • From: research@xxxxxxxxxxxxxxxxxxxxx
• Dolibarr CMS v3.2.0 Alpha - SQL Injection Vulnerabilities
  • From: research@xxxxxxxxxxxxxxxxxxxxx
• OnxShop CMS v1.5.0 - Multiple Web Vulnerabilities
  • From: research@xxxxxxxxxxxxxxxxxxxxx
• Dolibarr CMS v3.2.0 Alpha - File Include Vulnerabilities
  • From: research@xxxxxxxxxxxxxxxxxxxxx
• eFront Community++ v3.6.10 - Multiple Web Vulnerabilities
  • From: research@xxxxxxxxxxxxxxxxxxxxx
• [SECURITY] CVE-2011-4367 Apache MyFaces information disclosure vulnerability
  • From: Leonardo Uribe
• [ MDVSA-2012:015 ] wireshark
  • From: security
• [SECURITY] [DSA 2407-1] cvs security update
  • From: Florian Weimer
• ZDI-12-031 : Novell iPrint Server attributes-natural-language Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-030 : IBM Rational Rhapsody BBFlashBack.Recorder.1 TestCompatibilityRecordMode Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-029 : IBM Rational Rhapsody BBFlashBack.Recorder.1 InsertMarker Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-028 : IBM Rational Rhapsody BBFlashBack.FBRecorder.1 Control Multiple Remote Code Execution Vulnerabilities
  • From: ZDI Disclosures
• ZDI-12-027 : IBM SPSS VsVIEW6.ocx ActiveX Control SaveDoc Method Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-026 : IBM SPSS ExportHTML.dll ActiveX Control Render Method Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-025 : EMC Networker indexd.exe Opcode 0x01 Parsing Remote Code Execution
  • From: ZDI Disclosures
• ZDI-12-024 : Total Defense Suite UNC Management Web Service uncsp_ViewReportsHomepage SQL Injection Vulnerability
  • From: ZDI Disclosures
• ZDI-12-023 : Total Defense Suite UNC Management Web Service Database Credentials Disclosure Vulnerability
  • From: ZDI Disclosures
• ZDI-12-022 : Total Defense Suite UNC Management Console ExportReport SQL Injection Vulnerability
  • From: ZDI Disclosures
• ZDI-12-021 : Adobe Reader BMP Resource Signedness Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [security bulletin] HPSBMU02742 SSRT100740 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Unauthorized Disclosure of Information
  • From: security-alert
• [security bulletin] HPSBUX02741 SSRT100728 rev.1 - HP-UX Apache Running Tomcat Servlet Engine, Remote Denial of Service (DoS), Access Restriction Bypass
  • From: security-alert
• Multiple vulnerabilities in ZENphoto
  • From: advisory
• Cyberoam Central Console v2.00.2 - File Include Vulnerability
  • From: research@xxxxxxxxxxxxxxxxxxxxx
• Unauthenticated remote code execution on D-Link ShareCenter products
  • From: roberto . paleari
• eFronts Community++ v3.6.10 - Cross Site Vulnerability
  • From: research@xxxxxxxxxxxxxxxxxxxxx
• [security bulletin] HPSBMU02736 SSRT100699 rev.2 - HP Business Availability Center (BAC) and Business Service Management (BSM), Remote Unauthorized Access to Sensitive Information
  • From: security-alert
• CVE-2012-0803: Apache CXF does not validate UsernameToken policies correctly
  • From: Colm O hEigeartaigh
• SQL Injection Vulnerability in Batavi 1.1.2
  • From: Netsparker Advisories
• DEF CON 20 Capture the Flag Announcement
  • From: The Dark Tangent
• SimpleGroupware 0.742 Cross-Site-Scripting vulnerability
  • From: security
• [SECURITY] [DSA 2403-2] php5 security update
  • From: Thijs Kinkhorst
• [ MDVSA-2012:014 ] glpi
  • From: security
• Mathopd - Directory Traversal Vulnerability
  • From: Mateusz Goik
• [SECURITY] [DSA 2405-1] apache2 security update
  • From: Stefan Fritsch
• [SECURITY] [DSA 2404-1] xen-qemu-dm-4.0 security update
  • From: Florian Weimer
• [SECURITY] [DSA 2384-2] cacti regression
  • From: Luk Claes
• [ MDVSA-2012:013 ] mozilla
  • From: security
• ESA-2012-010: EMC Documentum xPlore information disclosure vulnerability
  • From: Security_Alert
• RFC 6528 on Defending against Sequence Number Attacks
  • From: Fernando Gont
• [SECURITY] [DSA 2403-1] php5 security update
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 2402-1] iceape security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2400-1] iceweasel security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2401-1] tomcat6 security update
  • From: Moritz Muehlenhoff
• [security bulletin] HPSBGN02740 SSRT100741 rev.1 - HP Operations Manager, Operations Agent, Performance Agent, Service Health Reporter, Service Health Optimizer, Performance Manager, Remote Execution of Arbitrary Code
  • From: security-alert
• GLSA (Gentoo Linux Security Advisory) publication changes
  • From: Alex Legler
• [security bulletin] HPSBMU02739 SSRT100280 rev.1 - HP Data Protector Media Operations, Remote Execution of Arbitrary Code
  • From: security-alert
• [CAL-2012-0004] opera array integer overflow
  • From: Code Audit Labs
• Fwd: RA-Guard: Advice on the implementation (feedback requested)
  • From: Fernando Gont
• Call For Paper
  • From: asemailing
• APPLE-SA-2012-02-01-1 OS X Lion v10.7.3 and Security Update 2012-001
  • From: Apple Product Security
• [ MDVSA-2012:012 ] apache
  • From: security
• XSS phpLDAPadmin: 1.2.0.5 (Debian package) and 1.2.2 (sourceforge)
  • From: andsarmiento
• ESA-2012-009: EMC Documentum Content Server privilege elevation vulnerability
  • From: Security_Alert
• Multiple vulnerabilities in OpenEMR
  • From: advisory
• Security advisory for Bugzilla 4.2rc2, 4.0.4, 3.6.8 and 3.4.14
  • From: LpSolit
• 802.1X password exploit on many HTC Android devices
  • From: Bret Jordan
• [Announce] Apache HTTP Server 2.2.22 Released
  • From: William A. Rowe Jr.
• [security bulletin] HPSBUX02724 SSRT100650 rev.3 - HP-UX Running System Administration Manager (SAM), Local Increase in Privilege
  • From: security-alert
• ZDI-12-019 : IBM SPSS mraboutb.dll ActiveX Control SetLicenseInfoEx Method Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [SECURITY] [DSA 2399-2] php5 regression fix
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 2399-1] php5 security update
  • From: Thijs Kinkhorst
• VMSA-2012-0001 VMware ESXi and ESX updates to third party library and ESX Service Console
  • From: VMware Security Team
• [security bulletin] HPSBUX02697 SSRT100591 rev.2 - HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
  • From: security-alert
• [SECURITY] [DSA 2398-1] curl security update
  • From: Moritz Muehlenhoff
• [security bulletin] HPSBUX02737 SSRT100747 rev.1 - HP-UX Running OpenSSL, Remote Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBMU02738 SSRT100748 rev.1 - HP Network Automation Running on Linux, Solaris, and Windows, Remote Unauthorized Access
  • From: security-alert
• Advisory: sudo 1.8 Format String Vulnerability
  • From: joernchen of Phenoelit
• [ GLSA 201201-19 ] Adobe Reader: Multiple vulnerabilities
  • From: Alex Legler
• [ GLSA 201201-18 ] bip: Multiple vulnerabilities
  • From: Alex Legler
• Multiple vulnerabilities in OSClass
  • From: Filippo Cavallarin
• Multiple vulnerabilities in postfixadmin
  • From: Filippo Cavallarin
• Mibew messenger multiple XSS
  • From: Filippo Cavallarin
• [ MDVSA-2012:011 ] openssl
  • From: security
• [SECURITY] [DSA 2397-1] icu security update
  • From: Moritz Muehlenhoff
• FAA US Academy (AFS) - Auth Bypass Vulnerability
  • From: research@xxxxxxxxxxxxxxxxxxxxx
• eBank IT Online Banking - Multiple Web Vulnerabilities
  • From: research@xxxxxxxxxxxxxxxxxxxxx
• [ GLSA 201201-17 ] Chromium: Multiple vulnerabilities
  • From: Tim Sammut
• [ GLSA 201201-16 ] X.Org X Server/X Keyboard Configuration Database: Screen lock bypass
  • From: Alex Legler
• [SECURITY] [DSA 2396-1] qemu-kvm security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2395-1] wireshark security update
  • From: Moritz Muehlenhoff
• AdaCore Security Advisory SA-2012-L119-003 Hash collisions in AWS
  • From: Thomas Quinot
• [HITB-Announce] Reminder: HITB2012AMS Call For Papers Closing Soon
  • From: Hafez Kamal
• [ GLSA 201201-15 ] ktsuss: Privilege escalation
  • From: Sean Amoss
• [SECURITY] [DSA 2394-1] libxml2 security update
  • From: Luciano Bello
• ESA-2012-007: RSA, The Security Division of EMC, announces security fixes for RSA enVision
  • From: Security_Alert
• ESA-2012-005: EMC NetWorker buffer overflow vulnerability
  • From: Security_Alert
• Cisco Security Advisory: Cisco IronPort Appliances Telnet Remote Code Execution Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• ZDI-12-018 : Symantec PCAnywhere awhost32 Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• NX Web Companion Spoofing Arbitrary Code Execution Vulnerability
  • From: otr
• [SECURITY] [DSA-2393-1] bip security update
  • From: dann frazier
• D-Link DIR-601 TFTP Directory Traversal Vulnerability
  • From: robkraus
• CSRF (Cross-Site Request Forgery) in DClassifieds
  • From: advisory
• Multiple vulnerabilities in OSclass
  • From: advisory
• NGS00117 Patch Notification: Symantec PCAnywhere Local Privilege Escalation
  • From: Research@NGSSecure
• NGS00118 Patch Notification: Symantec PCAnywhere Remote Code Execution as SYSTEM
  • From: Research@NGSSecure
• [security bulletin] HPSBUX02729 SSRT100687 rev.3 - HP-UX Running BIND, Remote Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBUX02719 SSRT100658 rev.4 - HP-UX Running BIND, Remote Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBUX02734 SSRT100729 rev.1 - HP-UX Running OpenSSL, Remote Denial of Service (DoS), Unauthorized Access
  • From: security-alert
• [security bulletin] HPSBUX02730 SSRT100710 rev.1 - HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
  • From: security-alert
• TWSL2012-002: Multiple Vulnerabilities in WordPress
  • From: Trustwave Advisories
• Only 7 Days Left: SANS AppSec 2012 CFP
  • From: SANS AppSec CFP
• NGS00193 Patch Notification: Trend Micro DataArmor and DriveArmor - Restricted Environment breakout, Privilege Escalation and Full Disk Decryption
  • From: Research@NGSSecure
• [ GLSA 201201-14 ] MIT Kerberos 5 Applications: Multiple vulnerabilities
  • From: Sean Amoss
• [ GLSA 201201-13 ] MIT Kerberos 5: Multiple vulnerabilities
  • From: Sean Amoss
• Wordpress Kish Guest Posting Plugin 1.0 (uploadify.php) Unrestricted File Upload Vulnerability
  • From: n0b0d13s
• [ GLSA 201201-12 ] Tor: Multiple vulnerabilities
  • From: Sean Amoss
• SQL injection in Bigware shop software
  • From: rwenzel
• [SECURITY] [DSA 2392-1] openssl security update
  • From: Florian Weimer
• [SECURITY] [DSA 2301-2] rails regression
  • From: Florian Weimer
• DDIVRT-2011-39 SolarWinds Storage Manager Server SQL Injection Authentication Bypass
  • From: ddivulnalert
• Bart`s CMS - SQL Injection Vulnerability
  • From: research@xxxxxxxxxxxxxxxxxxxxx
• Re: pwgen: non-uniform distribution of passwords
  • From: Solar Designer
• AllWebMenus < 1.1.9 WordPress Menu Plugin Arbitrary file upload
  • From: pavel
• [SECURITY] [DSA 2391-1] phpmyadmin security update
  • From: Thijs Kinkhorst
• ZDI-12-017 : Oracle Outside In OOXML Relationship Tag Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [ GLSA 201201-04 ] Logsurfer: Arbitrary code execution
  • From: Sean Amoss
• [ MDVSA-2012:010 ] cacti
  • From: security
• Webcalendar 1.2.4 'location' XSS
  • From: tom
• DC4420 - London DEFCON - 24 January 2012
  • From: Major Malfunction
• InfoSec Southwest 2012 Open Registration
  • From: I)ruid
• [Suspected Spam] Barracuda Spam/Virus WAF 600 - Multiple Web Vulnerabilities
  • From: research@xxxxxxxxxxxxxxxxxxxxx
• appRain CMF <= 0.1.5 (uploadify.php) Unrestricted File Upload Vulnerability
  • From: n0b0d13s
• Re: pwgen: non-uniform distribution of passwords
  • From: Solar Designer
• Advisory 01/2012: Suhosin PHP Extension Transparent Cookie Encryption Stack Buffer Overflow
  • From: Stefan Esser
• Microsoft Anti-XSS Library Bypass (MS12-007)
  • From: adic
• [security bulletin] HPSBMU02736 SSRT100699 rev.1 - HP Business Availability Center (BAC) and Business Service Management (BSM), Remote Unauthorized Access to Sensitive Information
  • From: security-alert
• Xpra memory disclosure
  • From: Antoine Martin
• Drupal CKEditor 3.0 - 3.6.2 - Persistent EventHandler XSS
  • From: InterN0T Advisories
• Cisco Security Advisory: Cisco IP Video Phone E20 Default Root Account
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Digital Media Manager Privilege Escalation Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [ MDVSA-2012:009 ] perl
  • From: security
• [ MDVSA-2012:008 ] perl
  • From: security
• XSS in OneOrZero AIMS
  • From: advisory
• Reflection Scan: an Off-Path Attack on TCP
  • From: Jan Wrobel
• Re: pwgen: non-uniform distribution of passwords
  • From: Solar Designer
• ESA-2012-003: EMC SourceOne Web Search Sensitive Information Disclosure Vulnerability.
  • From: Security_Alert
• [SECURITY] CVE-2012-0022 Apache Tomcat Denial of Service
  • From: Mark Thomas
• pwgen: non-uniform distribution of passwords
  • From: Solar Designer
• [SECURITY] CVE-2011-3375 Apache Tomcat Information disclosure
  • From: Mark Thomas
• Re: p0f3 release candidate
  • From: Michal Zalewski
• [ MDVSA-2012:007 ] openssl
  • From: security
• [ MDVSA-2012:006 ] openssl
  • From: security
• [ MDVSA-2012:005 ] libxml2
  • From: security
• [SECURITY] [DSA 2390-1] openssl security update
  • From: Florian Weimer
• Re: Multiple XSS in KnowledgeTree Community Edition
  • From: advisory
• [Announcement] ClubHack Mag - Call for Articles
  • From: abhijeet
• (CFP) LACSEC 2012: 7th Network Security Event for Latin America and the Caribbean
  • From: Fernando Gont
• Beehive Forum 101 Multiple XSS vulnerabilities
  • From: sschurtz
• phpVideoPro Multiple XSS vulnerabilities
  • From: sschurtz
• Family Connections 2.7.2 Multiple XSS
  • From: tom
• Re: Multiple XSS in KnowledgeTree Community Edition
  • From: Henri Salo
• First-hop security in IPv6
  • From: Fernando Gont
• [Announcement] ClubHack Mag Issue 24-Jan 2012 Released
  • From: abhijeet
• [SECURITY] [DSA 2389-1] linux-2.6 security update
  • From: dann frazier
• [SECURITY] [DSA 2388-1] t1lib security update
  • From: Yves-Alexis Perez
• ATutor 2.0.3 Multiple XSS vulnerabilities
  • From: sschurtz
• BoltWire 3.4.16 Multiple XSS vulnerabilities
  • From: sschurtz
• PHP 5.3.8 Multiple vulnerabilities
  • From: cxib
• [security bulletin] HPSBST02735 SSRT100516 rev.1 - HP StorageWorks Modular Smart Array P2000 G3, Remote Execution of Arbitrary Code
  • From: security-alert
• ME020567: MailEnable webmail cross-site scripting vulnerability CVE-2012-0389
  • From: Henri Salo
• ZDI-12-014 : HP Easy Printer Care XMLSimpleAccessor Class ActiveX Control Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-016 : (0Day) HP Diagnostics Server magentservice.exe Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-015 : (0Day) HP StorageWorks P2000 G3 Directory Traversal and Default Account Vulnerabilities
  • From: ZDI Disclosures
• ZDI-12-013 : HP Easy Printer Care XMLCacheMgr Class ActiveX Control Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-012 : (0Day) McAfee SaaS myCIOScn.dll ShowReport Method Remote Command Execution
  • From: ZDI Disclosures
• [ MDVSA-2012:004 ] t1lib
  • From: security
• SafeSEH+SEHOP all-at-once bypass explotation method principles
  • From: geinblues
• Revised IETF I-D: IPv6 Neighbor Discovery, SEND, and IPv6 Fragmentation
  • From: Fernando Gont
• AthCon 2012 CFP is now OPEN!
  • From: Christian Papathanasiou
• Office arbitrary ClickOnce application execution vulnerability
  • From: Akita Software Security
• GreenBrowser iframe content Double Free Vulnerability
  • From: vuln
• [security bulletin] HPSBPI02698 SSRT100404 rev.2 - HP Easy Printer Care Software Running on Windows, Remote Execution of Arbitrary Code
  • From: security-alert
• [SECURITY] [DSA 2386-1] openttd security update
  • From: Luk Claes
• [PT-2011-04] Cross-Site Scripting in Kayako Support Suite
  • From: noreply
• [SECURITY] [DSA 2387-1] simplesamlphp security update
  • From: Thijs Kinkhorst
• Secunia Research: NTR ActiveX Control "StopModule()" Input Validation Vulnerability
  • From: Secunia Research
• Secunia Research: NTR ActiveX Control Four Buffer Overflow Vulnerabilities
  • From: Secunia Research
• [PT-2011-03] Information disclosure in Kayako Support Suite
  • From: noreply
• [PT-2011-03] Information disclosure in Kayako Support Suite
  • From: noreply
• Multiple Cross-Site-Scripting vulnerabilities in x3cms
  • From: security
• Multiple XSS in KnowledgeTree Community Edition
  • From: advisory
• [PT-2011-02] PHP code Injection in Kayako Support Suite
  • From: noreply
• [PT-2011-01] Cross-Site Scripting in Kayako Support Suite
  • From: noreply
• VUPEN Security Research - Adobe Acrobat and Reader Image Processing Integer Overflow (APSB12-01)
  • From: VUPEN Security Research
• ZDI-12-009 : Citrix Provisioning Services Stream Service 0x40020000 Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [SECURITY] [DSA 2385-1] pdns security update
  • From: Florian Weimer
• ZDI-12-011 : Novell Netware XNFS caller_name xdrDecodeString Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-010 : Citrix Provisioning Services Stream Service 0x40020006 Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-008 : Citrix Provisioning Services streamprocess.exe vDisk Name Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [ MDVSA-2012:003 ] apache
  • From: security
• Is Your Online Bank Vulnerable To Currency Rounding Attacks?
  • From: ACROS Security Lists
• p0f3 release candidate
  • From: Michal Zalewski
• Re: Simple Mail Server - SMTP Authentication Bypass Vulnerability
  • From: Peter Conrad
• AppSec DC 2012 CFP EXTENDED!
  • From: AppSec DC
• Simple Mail Server - SMTP Authentication Bypass Vulnerability
  • From: demonalex
• DDIVRT-2011-37 HP JetDirect Device Page Directory Traversal (CVE-2011-4785)
  • From: ddivulnalert
• Re: [SE-2011-01] Security vulnerabilities in a digital satellite TV platform
  • From: Security Explorations
• [SECURITY] [DSA 2384-1] cacti security update
  • From: <@securityfocus.com Luk Claes
• [security bulletin] HPSBPI02733 SSRT100646 rev.1 - Certain HP LaserJet Printers, Remote Unauthorized Access to Files
  • From: security-alert
• [security bulletin] HPSBPI02728 SSRT100692 rev.3 - Certain HP Printers and HP Digital Senders, Remote Firmware Update Enabled by Default
  • From: security-alert
• [SECURITY] [DSA 2383-1] super security update
  • From: Moritz Muehlenhoff
• [ GLSA 201201-03 ] Chromium, V8: Multiple vulnerabilities
  • From: Tim Sammut
• [SECURITY] [DSA 2382-1] ecryptfs-utils security update
  • From: Jonathan Wiltshire
• [ GLSA 201201-02 ] MySQL: Multiple vulnerabilities
  • From: Tim Sammut
• ZDI-12-007 : Novell Netware XNFS.NLM STAT Notify Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• IpTools - Rcmd Remote Overflow Vulnerability
  • From: demonalex
• IpTools(Tiny TCP/IP server) - WebServer Directory Traversal Vulnerability
  • From: demonalex
• [SECURITY] [DSA 2381-1] squid3 security update
  • From: Florian Weimer
• ZDI-12-006 : Novell Netware XNFS.NLM NFS Rename Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-005 : Apple Quicktime RLE BGRA Decoding Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-004 : Apple Quicktime JPEG2000 COD Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-003 : HP OpenView NNM webappmon.exe parameter Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-002 : HP OpenView NNM ov.dll _OVBuildPath Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-12-001 : HP Managed Printing Administration img_id Multiple Vulnerabilities
  • From: ZDI Disclosures
• VertrigoServ 2.25 Cross-Site-Scripting vulnerability
  • From: security
• SQLiteManager 1.2.4 Multiple Cross-Site-Scripting vulnerabilities
  • From: security
• VLC media player v1.1.11 (.amr) Local Crash PoC
  • From: hapsec
• Ggb Guestbook - XSS Vulnerabilities
  • From: demonalex
• SEC Consult SA-20120104-0 :: Multiple critical vulnerabilities in Apache Struts2
  • From: SEC Consult Vulnerability Lab
• NGS00106 Technical Advisory: Increased exploitation of Oracle GlassFish Server Administration Console Remote Authentication Bypass Vulnerability
  • From: Research@NGSSecure
• NGS00109 Technical Advisory: Remote Code Execution in ImpressPages CMS
  • From: Research@NGSSecure
• HServer webserver - Directory Traversal Vulnerability
  • From: demonalex
• Revised IETF I-D: Advice on IPv6 RA-Guard Implementation
  • From: Fernando Gont
• [ GLSA 201201-01 ] phpMyAdmin: Multiple vulnerabilities
  • From: Tim Sammut
• [SECURITY] [DSA 2380-1] foomatic-filters security update
  • From: Florian Weimer
• [SECURITY] [DSA 2379-1] krb5 security update
  • From: Florian Weimer
• Open Redirection Vulnerability in Orchard 1.3.9
  • From: Netsparker Advisories
• Multiple vulnerabilities in ImpressCMS
  • From: advisory
• Re: OpenKM 5.1.7 Privilege Escalation
  • From: pavila
• Re: [SE-2011-01] Security vulnerabilities in a digital satellite TV platform
  • From: Security Explorations
• InfoSec Southwest 2012 CFP First-round Speaker Selections
  • From: I)ruid
• Google Chrome HTTPS Address Bar Spoofing
  • From: ACROS Security Lists
• TWSL2012-001: Cross-Site Scripting Vulnerability in Textpattern Content Management System
  • From: Trustwave Advisories
• [SECURITY] [DSA 2378-1] ffmpeg security update
  • From: Moritz Muehlenhoff
• Re: Tinyguestbook XSS
  • From: Henri Salo
• Re: PHP Booking Calendar 10e XSS
  • From: Henri Salo
• SQL Injection Vulnerability in OpenEMR 4.1.0
  • From: Netsparker Advisories
• [SE-2011-01] Security vulnerabilities in a digital satellite TV platform
  • From: Security Explorations
• [RT-SA-2012-001] Bugzilla: Cross-Site Scripting in Chart Generator
  • From: RedTeam Pentesting GmbH
• mavili guestbook - SQL Injection and XSS Vulnerabilities
  • From: demonalex
• BigACE CMS - XSS Vulnerabilities
  • From: demonalex
• Tinyguestbook XSS
  • From: tom
• OpenKM 5.1.7 OS Command Execution (XSRF based)
  • From: Cyrill Brunschwiler
• OpenKM 5.1.7 Privilege Escalation
  • From: Cyrill Brunschwiler
• [ MDVSA-2012:002 ] t1lib
  • From: security
• [ MDVSA-2012:001 ] fcgi
  • From: security
• [SECURITY] [DSA 2377-1] cyrus-imapd-2.2 security update
  • From: Nico Golde
• [ MDVSA-2011:198 ] phpmyadmin
  • From: security
• [SECURITY] [DSA 2376-2] ipmitool security update
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 2263-2] movabletype-opensource security update
  • From: Thijs Kinkhorst
• SEC Consult SA-20111230-0 :: Critical authentication bypass in Microsoft ASP.NET Forms - CVE-2011-3416
  • From: SEC Consult Vulnerability Lab
• [ MDVSA-2011:197 ] php
  • From: security
• [SECURITY] [DSA 2376-1] ipmitool security update
  • From: Thijs Kinkhorst
• Security advisory for Bugzilla 4.2rc1, 4.0.3, 3.6.7 and 3.4.13
  • From: LpSolit
• Winn Guestbook v2.4.8c Stored XSS
  • From: tom
• [oCERT-2011-003] multiple implementations denial-of-service via hash algorithm collision
  • From: Andrea Barisani
• n.runs-SA-2011.004 - web programming languages and platforms - DoS through hash table
  • From: security
• Re: Wordpress flash-album-gallery plugin Cross-Site Scripting Vulnerabilities
  • From: Henri Salo
• [security bulletin] HPSBPI02728 SSRT100692 rev.2 - Certain HP Printers and HP Digital Senders, Remote Firmware Update Enabled by Default
  • From: security-alert
• [ MDVSA-2011:196 ] ipmitool
  • From: security
• [ MDVSA-2011:195 ] krb5-appl
  • From: security
• [security bulletin] HPSBMU02731 SSRT100518 rev.1 - HP Database Archiving Software, Remote Execution of Arbitrary Code
  • From: security-alert
• [security bulletin] HPSBPI02732 SSRT100435 rev.1 - HP Managed Printing Administration, Remote Execution of Arbitrary Code and Other Vulnerabilities
  • From: security-alert
• [ MDVSA-2011:194 ] icu
  • From: security
• [ MDVSA-2011:193 ] squid
  • From: security
• Merry Christmas from the FreeBSD Security Team
  • From: FreeBSD Security Officer
• MITKRB5-SA-2011-008 buffer overflow in telnetd [CVE-2011-4862]
  • From: Tom Yu
• [SECURITY] [DSA 2375-1] krb5. krb5-appl security update
  • From: Florian Weimer
• [SECURITY] [DSA 2374-1] openswan security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2373-1] inetutils security update
  • From: Florian Weimer
• [SECURITY] [DSA 2372-1] heimdal security update
  • From: Florian Weimer
• Lighttpd Proof of Concept code for CVE-2011-4362
  • From: pi3
• [ MDVSA-2011:192 ] mozilla
  • From: security
• FreeBSD Security Advisory FreeBSD-SA-11:07.chroot
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-11:10.pam
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-11:09.pam_ssh
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-11:08.telnetd
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-11:06.bind
  • From: FreeBSD Security Advisories
• Xmas 2011 Security Puzzle
  • From: Ivan Buetler
• Tiki Wiki CMS Groupware <= 8.2 (snarf_ajax.php) Remote PHP Code Injection
  • From: n0b0d13s
• TWSL2011-019: Cross-Site Scripting Vulnerability in phpMyAdmin
  • From: Trustwave Advisories
• ZDI-11-354 : HP Managed Printing Administration jobDelivery Multiple Vulnerabilities
  • From: ZDI Disclosures
• ZDI-11-353 : HP Managed Printing Administration MPAUploader.dll Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-352 : HP Managed Printing Administration jobAcct Multiple Vulnerabilities
  • From: ZDI Disclosures
• ZDI-11-351 : WellinTech KingView HistoryServer.exe Opcode 3 Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [MATTA-2011-001] pfSense x509 Insecure Certificate Creation
  • From: Florent Daigniere
• [SECURITY] [DSA 2369-1] libsoup2.4 security update
  • From: Nico Golde
• Exploit for Asterisk Security Advisory AST-2011-013
  • From: Ben Williams
• [SECURITY] [DSA 2370-1] unbound security update
  • From: Florian Weimer
• Multiple vulnerabilities in epesi BIM
  • From: advisory
• Multiple vulnerabilities in OBM
  • From: advisory
• RE: RFI in JAF CMS
  • From: Frédéric BOURLA
• [SECURITY] [DSA 2368-1] lighttpd security update
  • From: Nico Golde
• [SECURITY] [DSA 2381-] lighttpd security update
  • From: Nico Golde
• post-XSS landscape
  • From: Michal Zalewski
• TWSL2011-018: Authentication Bypass Vulnerability in IBM TS3100/TS3200 Web User Interface
  • From: Trustwave Advisories
• Re: ESA-2011-039: RSA(r), The Security Division of EMC, announces security fixes and improvements for RSASecurID(r) Software Token 4.1 for Microsoft(r)Windows(r)
  • From: security_alert
• Re: SASHA v0.2.0 Mutiple XSS
  • From: Henri Salo
• Tiki Wiki CMS Groupware Stored Cross-Site-Scripting
  • From: security
• Multiple vulnerabilities in PHPShop CMS Free
  • From: advisory
• [security bulletin] HPSBUX02697 SSRT100591 rev.1 - HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities
  • From: security-alert
• ZDI-11-350 : Enterasys NetSight nssyslogd PRI Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [SECURITY] [DSA 2367-1] asterisk security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2363-1] tor security update
  • From: Moritz Muehlenhoff
• SEC Consult SA-20111219-1 :: Multiple vulnerabilities in WhatsApp
  • From: SEC Consult Vulnerability Lab
• appRain CMF v0.1.5 - Multiple Web Vulnerabilities
  • From: research@xxxxxxxxxxxxxxxxxxxxx
• Slides of our "Hacking IPv6 Networks" training at DEEPSEC 2011
  • From: Fernando Gont
• [SECURITY] [DSA 2366-1] mediawiki security update
  • From: Jonathan Wiltshire
• Syhunt: Time-Based Blind NoSQL Injection
  • From: Felipe M. Aragon
• VUPEN Security Research - Adobe Flash Player "SAlign" Memory Corruption Vulnerability (CVE-2011-2459)
  • From: VUPEN Security Research
• Novell Sentinel Log Manager <=1.2.0.1 Path Traversal
  • From: Andrea Fabrizi
• SEC Consult SA-20111219-0 :: Client-side remote arbitrary file upload in SecCommerce SecSigner Java Applet
  • From: SEC Consult Vulnerability Lab
• [ MDVSA-2011:191 ] libarchive
  • From: security
• [ MDVSA-2011:190 ] libarchive
  • From: security
• IFIP NTMS'2012 - Deadline Extended to 12 January 2012
  • From: publicity
• [SECURITY] [DSA 2365-1] dtc security update
  • From: Moritz Muehlenhoff
• PHP Booking Calendar 10e XSS
  • From: tom
• SASHA v0.2.0 Mutiple XSS
  • From: tom
• [Suspected Spam] Content Papst CMS v2011.2 - Multiple Web Vulnerabilities
  • From: research@xxxxxxxxxxxxxxxxxxxxx
• [SECURITY] [DSA 2364-1] xorg security update
  • From: Moritz Muehlenhoff
• Re: WordPress flash-album-gallery Plugin 'flagshow.php' Cross Site Scripting Vulnerability
  • From: Henri Salo
• Re: RFI in JAF CMS
  • From: Henri Salo
• Re: <BASE> tag used for hijacking external resources (XSS)
  • From: Mario Vilas
• Re: <BASE> tag used for hijacking external resources (XSS)
  • From: Bouke van Laethem
• Re: <BASE> tag used for hijacking external resources (XSS)
  • From: Mario Vilas
• Re: <BASE> tag used for hijacking external resources (XSS)
  • From: Bouke van Laethem
• Re: <BASE> tag used for hijacking external resources (XSS)
  • From: Mario Vilas
• VUPEN Security Research - Microsoft Windows "datime.dll" Remote Code Execution Vulnerability (MS11-090)
  • From: VUPEN Security Research
• VUPEN Security Research - Microsoft Windows Media Player DVR-MS Buffer Overflow Vulnerability (MS11-092)
  • From: VUPEN Security Research
• VUPEN Security Research - Microsoft Windows Time Behaviour Remote Use-after-free Vulnerability (MS11-090)
  • From: VUPEN Security Research
• silly PoCs continue: X-Frame-Options give you less than expected
  • From: Michal Zalewski
• [security bulletin] HPSBUX02719 SSRT100658 rev.3 - HP-UX Running BIND, Remote Denial of Service (DoS)
  • From: security-alert
• Re: <BASE> tag used for hijacking external resources (XSS)
  • From: Jann Horn
• [ MDVSA-2011:189 ] jasper
  • From: security
• [security bulletin] HPSBUX02729 SSRT100687 rev.2 - HP-UX Running BIND, Remote Denial of Service (DoS)
  • From: security-alert
• <BASE> tag used for hijacking external resources (XSS)
  • From: Bouke van Laethem
• [ MDVSA-2011:188 ] libxml2
  • From: security
• Seotoaster SQL-Injection Admin Login Bypass
  • From: security
• New IETF I-Ds on Fragmentation-related security issues
  • From: Fernando Gont
• New IETF I-D on "Stable Privacy Addresses"
  • From: Fernando Gont
• [RT-SA-2011-006] Owl Intranet Engine: Information Disclosure and Unsalted Password Hashes
  • From: RedTeam Pentesting GmbH
• [RT-SA-2011-005] Owl Intranet Engine: Authentication Bypass
  • From: RedTeam Pentesting GmbH
• NGS00141 Patch Notification: Websense Triton 7.6 - Stored XSS in report management UI
  • From: Research@NGSSecure
• NGS00140 Patch Notification: Websense Triton 7.6 - Unauthenticated remote command execution as SYSTEM
  • From: Research@NGSSecure
• NGS00137 Patch Notification: Websense Triton 7.6 - Reflected XSS in report management UI
  • From: Research@NGSSecure
• [ MDVSA-2011:187 ] php-pear
  • From: security
• NGS00138 Patch Notification: Websense Triton 7.6 - Authentication bypass in report management UI
  • From: Research@NGSSecure
• HTML 5 Security Report
  • From: Ivan Buetler
• ESA-2011-039: RSA(r), The Security Division of EMC, announces security fixes and improvements for RSASecurID(r) Software Token 4.1 for Microsoft(r)Windows(r)
  • From: Security_Alert
• PHP-SCMS 1.6.8 "lang" parameter XSS vulnerability
  • From: sschurtz
• 0A29-11-4 : Privilege escalation vulnerabilities in Nagios XI installer < 2011R1.9
  • From: 0a29 40
• 0A29-11-3 : Cross-Site Scripting vulnerabilities in Nagios XI < 2011R1.9
  • From: 0a29 40
• Re: Re: WikkaWiki <= 1.3.2 Multiple Security Vulnerabilities
  • From: n0b0d13s
• [MATTA-2011-003] Restorepoint Remote root command execution vulnerability - CVE-2011-4201 CVE-2011-4202
  • From: Tavaris Desamito
• Re:Re: Introduction to R-sequence public key cryptography attack
  • From: Michal Bucko
• Re: Wordpress skysa-official plugin Cross-Site Scripting Vulnerabilities
  • From: support
• Multiple vulnerabilities in Browser CRM
  • From: advisory
• Citrix Receiver, XenDesktop "Pass-the-hash" Attack
  • From: vtek63
• Re: WikkaWiki <= 1.3.2 Multiple Security Vulnerabilities
  • From: brian
• ZDI-11-346 : Microsoft Office 2007 Office Art Shape Record Hierarchy Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-348 : HP OpenView NNM nnmRptConfig.exe nameParams Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-347 : Microsoft Office Word Hidden Border Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• Secunia Research: Sterling Trader Data Processing Buffer Overflow Vulnerability
  • From: Secunia Research
• [ MDVSA-2011:186 ] nfs-utils
  • From: security
• [ MDVSA-2011:185 ] libcap
  • From: security
• Wordpress the-welcomizer plugin Cross-Site Scripting Vulnerabilities
  • From: Amir
• ESA-2011-036: RSA, The Security Division of EMC, announces the release of a Security Fix for RSA(r) Adaptive Authentication (On-Premise)
  • From: Security_Alert
• OSI Security: Squiz Matrix - User Account Enumeration
  • From: Troy Rose
• Re: the week of silly PoCs continues: data://www.mybank.com/
  • From: nothanks
• Re: [Full-disclosure] silly PoCs continue: X-Frame-Options give you less than expected
  • From: Michal Zalewski
• Re: seamless bait-and-switch
  • From: Charles Morris
• [ MDVSA-2011:184 ] krb5
  • From: security
• Secunia Research: Winamp AVI Parsing Two Integer Overflow Vulnerabilities
  • From: Secunia Research
• WordPress flash-album-gallery Plugin 'flagshow.php' Cross Site Scripting Vulnerability
  • From: Amir
• Introduction to R-sequence public key cryptography attack
  • From: Michal Bucko
• [ MDVSA-2011:183 ] pidgin
  • From: security
• zFTPServer Suite 6.0.0.52 'rmdir' Directory Traversal
  • From: security
• Call for Papers -YSTS 6 - Security Conference, Brazil
  • From: Luiz Eduardo
• [SECURITY] [DSA 2362-1] acpid security update
  • From: Moritz Muehlenhoff
• Re: seamless bait-and-switch
  • From: Jann Horn
• the week of silly PoCs continues: data://www.mybank.com/
  • From: Michal Zalewski
• *CLOSING IN 5 DAYS * Re: AppSec DC 2012 - Call for Trainers
  • From: AppSec DC
• [SignalSEC Labs]: HTC Touch2 T3333 Video Player Memory Corruption
  • From: signaladvisory
• CA20111208-01: Security Notice for CA SiteMinder
  • From: Williams, James K
• AST-2011-014: Remote crash possibility with SIP and the âautomonâ feature enabled
  • From: Asterisk Security Team
• AST-2011-013: Possible remote enumeration of SIP endpoints with differing NAT settings
  • From: Asterisk Security Team
• DC4420 - London DEFCON - 13 December 2011
  • From: Major Malfunction
• Re: seamless bait-and-switch
  • From: Michal Zalewski
• Call for Papers - 2012 Rocky Mountain Information Security Conference
  • From: president
• Re: seamless bait-and-switch
  • From: Michal Zalewski
• [ MDVSA-2011:182 ] dhcp
  • From: security
• [DCA-2011-0015] QuesCom Qportal User - OctoWebSvr/COM - Source Code Disclosure
  • From: Ewerson Guimarães (Crash) - Dclabs
• 0A29-11-2 : Privilege escalation vulnerability in HP Application Lifestyle Management (ALM) Platform v11
  • From: 0a29 40
• Re: Wordpress pretty-link.1.5.2 plugin Cross-Site Scripting Vulnerabilities
  • From: Henri Salo
• Re: Wordpress pretty-link.1.5.2 plugin Cross-Site Scripting Vulnerabilities
  • From: Henri Salo
• seamless bait-and-switch
  • From: Michal Zalewski
• ZDI-11-345 : TrendMicro Control Manager CmdProcessor.exe AddTask Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-344 : RealNetworks RealPlayer RV20 Decoding Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-343 : RealNetworks RealPlayer mp4arender esds channel count Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-342 : Novell ZENworks Asset Management Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-341 : Cisco WebEx Player WRF Type 0 Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-340 : Apple Quicktime Font Table Signed Length Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [SECURITY] [DSA 2361-1] chasen security update
  • From: Florian Weimer
• DDIVRT-2011-38 KnowledgeTree login.php Blind SQL Injection
  • From: ddivulnalert
• [ MDVSA-2011:181 ] proftpd
  • From: security
• [security bulletin] HPSBHF02723 SSRT100536 rev.2 - HP ProtectTools Device Access Manager for Windows, Remote Execution of Arbitrary Code, Denial of Service (DoS)
  • From: security-alert
• [SECURITY] [DSA 2360-1] Two month advance notification for upcoming end-of-life for Debian oldstable
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2359-1] mojarra security update
  • From: Florian Weimer
• MITKRB5-SA-2011-007 KDC null pointer dereference in TGS handling [CVE-2011-1530]
  • From: Tom Yu
• [security bulletin] HPSBMU02726 SSRT100685 rev.2 - HP Operations Agent and Performance Agent for AIX, HP-UX, Linux, and Solaris, Local Unauthorized Access
  • From: security-alert
• Wordpress pretty-link.1.5.2 plugin Cross-Site Scripting Vulnerabilities
  • From: irist . ir
• Meditate Web Content Editor 'username_input' SQL-Injection vulnerability
  • From: sschurtz
• Re: Wordpress enable-latex plugin Remote File Include Vulnerabilities
  • From: Henri Salo
• [SECURITY] [DSA 2358-1] openjdk-6 security update
  • From: Florian Weimer
• [DCA-2011-0014] - Elxis CMS Cross Site Script
  • From: Ewerson Guimarães (Crash) - Dclabs
• Vulnerabilities in Serv-U 11.1.0.3
  • From: Luigi Auriemma
• Hackito Ergo Sum 2012 Call For Papers ! (12/13/14 April 2012)
  • From: Matthieu Suiche
• fast and somewhat reliable cache timing
  • From: Michal Zalewski
• [security bulletin] HPSBUX02729 SSRT100687 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS)
  • From: security-alert
• XSSer v1.6 -beta- aka "Grey Swarm!" released.
  • From: psy
• InfoSec Southwest 2012 CFP
  • From: I)ruid
• Heap Memory Corruption in HP Device Access Manager for Protect Tools Information Store
  • From: advisory
• [PT-2011-43] Database information disclosure in Kayako Fusion
  • From: noreply
• SANS AppSec 2012 CFP reminder
  • From: SANS AppSec CFP
• FreeBSD ftpd/ProFTPD on FreeBSD Remote Root Exploit
  • From: HI-TECH .
• [security bulletin] HPSBHF02723 SSRT100536 rev.1 - HP Protect Tools Device Access Manager for Windows, Remote Execution of Arbitrary Code, Denial of Service
  • From: security-alert
• [SECURITY] [DSA 2356-1] openjdk-6 security update
  • From: Florian Weimer
• Re: Wordpress enable-latex plugin Remote File Include Vulnerabilities
  • From: Henri Salo
• Re: [MajorSecurity SA-081]Contao CMS 2.9.2 - Persistent Cross Site Scripting Issue
  • From: Henri Salo
• Re: Contao 2.10.1 Cross-site scripting vulnerability
  • From: Henri Salo
• Re: Wordpress flash-album-gallery plugin Cross-Site Scripting Vulnerabilities
  • From: Henri Salo
• [SECURITY] [DSA 2355-1] clearsilver security update
  • From: Moritz Muehlenhoff
• Re: Wordpress plugin BackWPup Remote and Local Code Execution Vulnerability - SOS-11-003
  • From: Henri Salo
• Re: Serendipity 'serendipity[filter][bp.ALT]' Cross-Site Scripting vulnerability
  • From: Henri Salo
• [security bulletin] HPSBPI02728 SSRT100692 rev.1 - Certain HP Printers and HP Digital Senders, Remote Firmware Update Enabled by Default
  • From: security-alert
• Ariadne 2.7.6 Multiple XSS vulnerabilities
  • From: sschurtz
• Re: Serendipity freetag plugin 'serendipity[tagview]' Cross-Site Scripting vulnerability
  • From: Henri Salo
• Wordpress flash-album-gallery plugin Cross-Site Scripting Vulnerabilities
  • From: Amir
• [SECURITY] [DSA 2354-1] cups security update
  • From: Yves-Alexis Perez
• Sql injection in SugarCRM
  • From: advisory
• Wordpress 1-jquery-photo-gallery-slideshow-flash plugin Cross-Site Scripting Vulnerabilities
  • From: Amir
• PHP Inventory 1.3.1 Remote (Auth Bypass) SQL Injection Vulnerability
  • From: security
• WikkaWiki <= 1.3.2 Multiple Security Vulnerabilities
  • From: n0b0d13s
• New issue of PenTest Magazine is out - 21 pages of free content.
  • From: maciej . kozuszek
• Multiple vulnerabilities in OrangeHRM
  • From: advisory
• Insecure RSA Encryption in jCryption, PEAR Crypt_RSA and Crypt_RSA2
  • From: Daniel Roethlisberger
• CanSecWest 2012 Mar 7-9; 2nd call for papers, closes next week, Monday.Dec 5 2011
  • From: Dragos Ruiu
• Vulnerabilities in 3S CoDeSys 3.4 SP4 Patch 2
  • From: Luigi Auriemma
• Security-Assessment.com Release: Hacking Hollywood Slides, Advisories and Exploits
  • From: Nick Freeman
• Re: Re: wordpress Lanoba Social Plugin Xss Vulnerabilities
  • From: Alex Davis
• Oxide M0N0X1D3 HTTP Server Directory Traversal Vulnerability
  • From: demonalex
• MVSA-11-013 - EllisLab xss_clean Filter Bypass - ExpressionEngine and CodeIgniter
  • From: marian . ventuneac
• ZDI-11-338 : RealNetworks RealPlayer IVR MLTI Chunk Length Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-337 : RealNetworks RealPlayer RV30 Uninitialized Index Value Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-336 : RealNetworks RealPlayer Invalid Codec Name Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-335 : RealNetworks RealPlayer RV10 Sample Height Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-331 : RealNetwork RealPlayer MPG Width Integer Underflow Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-334 : RealNetworks RealPlayer genr Sample Size Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-333 : RealNetworks RealPlayer ATRC Code Data Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-332 : RealNetworks RealPlayer Malformed AAC File Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [ MDVSA-2011:180 ] php-suhosin
  • From: security
• Vulnerabilities in Siemens Automation License Manager
  • From: Luigi Auriemma
• Vulnerabilities in Siemens SIMATIC WinCC flexible 2008 SP2
  • From: Luigi Auriemma
• Wordpress skysa-official plugin Cross-Site Scripting Vulnerabilities
  • From: Amir
• [ MDVSA-2011:179 ] glibc
  • From: security
• [ MDVSA-2011:178 ] glibc
  • From: security
• [SECURITY] [DSA 2353-1] ldns security update
  • From: Moritz Muehlenhoff
• 0A29-11-1 : Cross-Site Scripting vulnerabilities in HP Network Node Manager i 9.10
  • From: 0a29 40
• [security bulletin] HPSBUX02725 SSRT100627 rev.1 - HP-UX Apache Running Tomcat Servlet Engine, Remote Information Disclosure, Authentication Bypass, Cross-Site Scripting (XSS), Unauthorized Access, Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBUX02724 SSRT100650 rev.2 - HP-UX Running System Administration Manager (SAM), Local Increase in Privilege
  • From: security-alert
• TC-SA-2011-02: Multiple web-vulnerabilities in iTop version 1.1.181
  • From: Tobias Glemser
• Debut issue of Web App Pentesting Magazine - Free Download!
  • From: maciej . kozuszek
• Wordpress featurific-for-wordpress plugin Cross-Site Scripting Vulnerabilities
  • From: Amir
• [ MDVSA-2011:177 ] freetype2
  • From: security
• PmWiki <= 2.2.34 (pagelist) Remote PHP Code Injection Vulnerability
  • From: n0b0d13s
• Wordpress meenews 5.1 plugin Cross-Site Scripting Vulnerabilities
  • From: Amir
• Wordpress enable-latex plugin Remote File Include Vulnerabilities
  • From: Amir
• Wordpress clickdesk-live-support-chat plugin Cross-Site Scripting Vulnerabilities
  • From: Amir
• NGS00148 Patch Notification: FFmpeg Libavcodec memory corruption remote code execution
  • From: Research@NGSSecure
• NGS00145 Patch Notification: FFmpeg Libavcodec out of bounds write remote code execution
  • From: Research@NGSSecure
• NGS00144 Patch Notification: FFmpeg Libavcodec buffer overflow remote code execution
  • From: Research@NGSSecure
• Multiple vulnerabilities in Dolibarr
  • From: advisory
• [SECURITY] [DSA 2352-1] puppet security update
  • From: Moritz Muehlenhoff
• Re: XSS in Tiki Wiki CMS Groupware
  • From: Henri Salo
• [security bulletin] HPSBMU02726 SSRT100685 rev.1 - HP Operations Agent and Performance Agent for AIX, HP-UX, Linux, and Solaris, Local Unauthorized Access
  • From: security-alert
• Re: jara 1.6 sql injection vulnerability
  • From: Henri Salo
• [SECURITY] [DSA 2351-1] wireshark security update
  • From: Moritz Muehlenhoff
• Re: wordpress Lanoba Social Plugin Xss Vulnerabilities
  • From: Henri Salo
• [ GLSA 201111-05 ] Chromium, V8: Multiple vulnerabilities
  • From: Tim Sammut
• Re: Multiple Cross-Site-Scripting vulnerabilities in Dolibarr 3.1.0
  • From: Henri Salo
• OWASP Academy Portal - FREE OWASP TOP 10 security challenges with Hacking-Lab
  • From: Ivan Buetler
• Wordpress adminimize Plugin Vulnerabilities
  • From: Amir
• Wordpress alert-before-your-post Plugin Cross-Site Scripting Vulnerabilities
  • From: Amir
• Wordpress advanced-text-widget Plugin Vulnerabilities
  • From: Amir
• Implications of IPv6 on network firewalls
  • From: Fernando Gont
• [SECURITY] [DSA 2348-1] systemtap security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2350-1] freetype security update
  • From: Moritz Muehlenhoff
• [ GLSA 201111-11 ] GNU Tar: User-assisted execution of arbitrary code
  • From: Alex Legler
• [ GLSA 201111-10 ] Evince: Multiple vulnerabilities
  • From: Alex Legler
• [ GLSA 201111-09 ] Perl Safe module: Arbitrary Perl code injection
  • From: Alex Legler
• [ GLSA 201111-08 ] radvd: Multiple vulnerabilities
  • From: Alex Legler
• [ GLSA 201111-07 ] TinTin++: Multiple vulnerabilities
  • From: Alex Legler
• [ GLSA 201111-06 ] MaraDNS: Arbitrary code execution
  • From: Alex Legler
• Support Incident Tracker <= 3.65 (translate.php) Remote Code Execution Vulnerability
  • From: n0b0d13s
• [SECURITY] [DSA 2349-1] spip security update
  • From: Moritz Muehlenhoff
• wordpress Lanoba Social Plugin Xss Vulnerabilities
  • From: Amir
• Freelancer calendar <= 1.01 SQL Injection Vulnerability
  • From: muuratsalo experimental hack lab
• Valid tiny-erp <= 1.6 SQL Injection Vulnerability
  • From: muuratsalo experimental hack lab
• Blogs manager <= 1.101 SQL Injection Vulnerability
  • From: muuratsalo experimental hack lab
• [ MDVSA-2011:176-2 ] bind
  • From: security
• [ MDVSA-2011:176-1 ] bind
  • From: security
• VMSA-2011-0014 VMware vCenter Update Manager fix for Jetty Web server addresses directory traversal vulnerability
  • From: VMware Security Team
• [DSECRG-11-041] SAP NetWeaver - Authentication bypass (Verb Tampering)
  • From: Alexandr Polyakov
• [DSECRG-11-039] SAP NetWeaver TH_GREP module - Code injection vulnerability (NEW)
  • From: Alexandr Polyakov
• [ MDVSA-2011:176 ] bind
  • From: security
• Cross-Site Scripting Vuln in Zoho ManageEngine ADSelfServicePlus
  • From: James Webb
• Multiple vulnerabilities in webERP
  • From: advisory
• [DSECRG-11-033] SAP Crystal Report Server pubDBLogon - Linked ХSS vulnerability
  • From: Alexandr Polyakov
• [DSECRG-11-032] SAP NetWeaver ipcpricing - information disclose
  • From: Alexandr Polyakov
• [DSECRG-11-040] SAP NetWeaver SPML - XML CSRF user creation
  • From: Alexandr Polyakov
• [DSECRG-11-031] SAP RFC EPS_DELETE_FILE - Authorisation bypass, smbrelay
  • From: Alexandr Polyakov
• [SECURITY] [DSA 2346-2] proftpd-dfsg regression fix
  • From: Florian Weimer
• [DSECRG-11-030] SAP NetWeaver JavaMailExamples - XSS
  • From: Alexandr Polyakov
• [DSECRG-11-038] SAP RSTXSCRP report - smb relay vulnerability
  • From: Alexandr Polyakov
• [DSECRG-11-037] SAP BW Doc - Multiple XSS
  • From: Alexandr Polyakov
• [DSECRG-11-036] SAP NetWaver Virus Scan Interface - multiple XSS
  • From: Alexandr Polyakov
• [DSECRG-11-034] SAP NetWeaver J2EE MeSync – information disclose
  • From: Alexandr Polyakov
• Tiki Wiki CMS Groupware Multiple XSS vulnerabilities
  • From: security
• Secunia Research: DVR Remote ActiveX Control DVRobot Library Loading Vulnerability
  • From: Secunia Research
• [security bulletin] HPSBOV02470 SSRT080123 rev.2 - HP TCP/IP Services for OpenVMS Running SMTP Server, Remote Denial of Service (DoS)
  • From: security-alert
• CA20111116-01: Security Notice for CA Directory
  • From: Kotas, Kevin J
• [SECURITY] [DSA 2347-1] bind9 security update
  • From: Florian Weimer
• ZDI-11-330 : InduSoft WebStudio Unauthenticated Remote Operations Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-329 : InduSoft WebStudio CEServer Operation 0x15 Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• wordpress Flexible Custom Post Type plugin Xss Vulnerabilities
  • From: Amir
• wordpress Flexible Custom Post Type plugin Xss Vulnerabilities
  • From: Amir
• FreeWebshop <= 2.2.9 R2 (ajax_save_name.php) Remote Code Execution Vulnerability
  • From: n0b0d13s
• [SECURITY] [DSA 2346-1] proftpd-dfsg security update
  • From: Florian Weimer
• [ MDVSA-2011:174 ] graphite2
  • From: security
• [ MDVSA-2011:175 ] poppler
  • From: security
• APPLE-SA-2011-11-14-1 iTunes 10.5.1
  • From: Apple Product Security
• [Announcement] ClubHack Mag Issue 22- Nov 2011 Released
  • From: abhijeet
• [ GLSA 201111-03 ] OpenTTD: Multiple vulnerabilities
  • From: Tim Sammut
• [security bulletin] HPSBST02722 SSRT100279 rev.1 - HP StorageWorks P4000 Virtual SAN Appliance, Execution of Arbitrary Code
  • From: security-alert
• CORE-2011-0919: Apple OS X Sandbox Predefined Profiles Bypass
  • From: CORE Security Technologies Advisories
• APPLE-SA-2011-11-10-1 iOS 5.0.1 Software Update
  • From: Apple Product Security
• Wordpress Zingiri Web Shop Plugin <= 2.2.3 Remote Code Execution Vulnerability
  • From: n0b0d13s
• [Announcement] ClubHack 2011 Hacking and Security Conference
  • From: abhijeet
• [ MDVSA-2011:173 ] openssl0.9.8
  • From: security
• [ MDVSA-2011:172 ] libreoffice
  • From: security
• [ MDVSA-2011:171 ] networkmanager
  • From: security
• [ GLSA 201111-04 ] phpDocumentor: Function call injection
  • From: Tim Sammut
• [SECURITY] [DSA 2344-1] python-django-piston security update
  • From: Florian Weimer
• iGuard Biometric Access Control - Multiple Vulnerabilities
  • From: research@xxxxxxxxxxxxxxxxxxxxx
• [ MDVSA-2011:170 ] java-1.6.0-openjdk
  • From: security
• [security bulletin] HPSBHF02721 SSRT100605 rev.1 - HP Directories Support for ProLiant Management Processors for Integrated Lights-Out iLO2 and iLO3, Unauthorized Access
  • From: security-alert
• APPLE-SA-2011-11-10-2 Time Capsule and AirPort Base Station (802.11n) Firmware 7.6
  • From: Apple Product Security
• [FOREGROUND SECURITY 2011-004] Infoblox NetMRI 6.2.1 Multiple Cross-Site Scripting (XSS) vulnerabilities
  • From: Jose Carlos de Arriba
• [security bulletin] HPSBMU02714 SSRT100244 rev.2 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Unauthorized Disclosure of Information
  • From: security-alert
• Re: Re: foofus.net security advisory - Lexmark Multifunction Printer Information Leakage
  • From: percx
• XSS vulnerability in Joomla 1.6.3
  • From: Netsparker Advisories
• [security bulletin] HPSBMA02659 SSRT100440 rev.2 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Unauthorized Access
  • From: security-alert
• [security bulletin] HPSBMU02708 SSRT100633 rev.1 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Cross Site Scripting (XSS)
  • From: security-alert
• Re: Local file inclusion in VtigerCRM
  • From: n0b0d13s
• Re: foofus.net security advisory - Lexmark Multifunction Printer Information Leakage
  • From: Sergio Gelato
• [SECURITY] [DSA 2342-1] iceape security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2343-1] openssl security update
  • From: Raphael Geissert
• [ MDVSA-2011:168 ] apache
  • From: security
• [SECURITY] [DSA 2341-1] iceweasel security update
  • From: Moritz Muehlenhoff
• Cisco Security Advisory: Cisco TelePresence System Integrator C Series and Cisco TelePresence EX Series Device Default Root Account Manufacturing Error
  • From: Cisco Systems Product Security Incident Response Team
• [ MDVSA-2011:168 ] apache
  • From: security
• DC4420 - London DEFCON - November 2011 meet - Tuesday 15th November
  • From: Major Malfunction
• Multiple security vulnerabilities in AShop
  • From: security
• Re: LabWiki <= 1.1 Multiple Vulnerabilities
  • From: muuratsalo experimental hack lab
• Multiple Cross-Site-Scripting vulnerabilities in Dolibarr 3.1.0
  • From: security
• LabWiki <= 1.1 Multiple Vulnerabilities
  • From: muuratsalo experimental hack lab
• Local file inclusion in VtigerCRM
  • From: advisory
• [CAL-2011-0052]Adobe Shockwave Player Director File Parsing PAMM memory corruption vulnerability
  • From: Code Audit Labs
• [CAL-2011-0054]Adobe Shockwave Player Director File Parsing data of rcsl chunk multiple DOS vulnerabilities
  • From: Code Audit Labs
• APPLE-SA-2011-11-08-1 Java for Mac OS X 10.7 Update 1 and Java for Mac OS X 10.6 Update 6
  • From: Apple Product Security
• LabStoRe <= 1.5.4 Sql Injection Vulnerabilities
  • From: muuratsalo experimental hack lab
• OrderSys <= 1.6.4 Sql Injection Vulnerabilities
  • From: muuratsalo experimental hack lab
• [SECURITY] CVE-2011-3376 Apache Tomcat - Privilege Escalation via Manager app
  • From: Mark Thomas
• osCSS2 "_ID" parameter Local file inclusion
  • From: sschurtz
• [security bulletin] HPSBHF02706 SSRT100613 rev.1 - HP Integrated Lights-Out iLO2 and iLO3 running SSL/TLS, Denial of Service (DoS), Unauthorized Modification
  • From: security-alert
• New online security challenge - GotWurzel
  • From: Ivan Buetler
• IPv6 security (slides and training)
  • From: Fernando Gont
• Cisco CUCM - Multiple Vulnerabilities
  • From: entomology
• [SECURITY] [DSA 2340-1] postgresql security update
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 2336-1] ffmpeg security update
  • From: Yves-Alexis Perez
• [SECURITY] [DSA 2339-1] nss security update
  • From: Moritz Muehlenhoff
• TWSL2011-017: Multiple Vulnerabilities in Merethis Centreon
  • From: Trustwave Advisories
• [SECURITY] [DSA 2338-1] moodle security update
  • From: Moritz Muehlenhoff
• foofus.net security advisory - Lexmark Multifunction Printer Information Leakage
  • From: percx
• [SECURITY] [DSA 2337-1] xen security update
  • From: Thijs Kinkhorst
• [SECURITY] [DSA 2335-1] man2html security update
  • From: Nico Golde
• [ GLSA 201111-02 ] Oracle JRE/JDK: Multiple vulnerabilities
  • From: Alex Legler
• Malware detection evasion in antivirus software
  • From: reset557
• [ MDVSA-2011:167 ] gimp
  • From: security
• [SECURITY] [DSA 2334-1] mahara security update
  • From: Moritz Muehlenhoff
• [security bulletin] HPSBOV02467 SSRT090152 rev.1 - HP TCP/IP Services for OpenVMS Running POP or IMAP, Remote Unauthorized Access
  • From: security-alert
• [security bulletin] HPSBOV02470 SSRT080123 rev.1 - HP TCP/IP Services for OpenVMS Running SMTP Server, Remote Denial of Service (DoS)
  • From: security-alert
• Multiple BSD libc/regcomp(3) Multiple Vulnerabilities
  • From: cxib
• [ MDVSA-2011:166 ] php
  • From: security
• ESA-2011-035: RSA, The Security Division of EMC, announces the release of Hotfix 6 with security updates for RSA Key Manager Appliance 2.7 Service Pack 1
  • From: Security_Alert
• [ MDVSA-2011:165 ] php
  • From: security
• [security bulletin] HPSBMU02704 SSRT100619 rev.1 - HP OpenView Network Node Manager (OV NNM) Running Apache, Remote Denial of Service (DoS)
  • From: security-alert
• CmyDocument Content Management Application - XSS Vulnerabilities
  • From: demonalex
• ESA-2011-032: EMC Documentum eRoom arbitrary file upload vulnerability.
  • From: Security_Alert
• Serendipity Plugin 'Karma Ranking' Multiple Cross-Site Scripting
  • From: sschurtz
• Serendipity 'serendipity[filter][bp.ALT]' Cross-Site Scripting vulnerability
  • From: sschurtz
• Cisco Security Advisory: Cisco Small Business SRP500 Series Command Injection Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [ MDVSA-2011:164 ] wireshark
  • From: security
• NGS00042 Technical Advisory: Solaris 11 USB hub class descriptor kernel stack overflow (CVE-2011-2295)
  • From: Research@NGSSecure
• [ MDVSA-2011:163 ] phpldapadmin
  • From: security
• Multiple vulnerabilities in Efront
  • From: advisory
• Oracle Hyperion Financial Management TList6 ActiveX Control Remote Code Execution Vulnerability
  • From: nospam
• XSS and SQL Injection Vulnerabilities on Symphony CMS 2.2.3
  • From: Netsparker Advisories
• XSS Vulnerabilities in eFront
  • From: Netsparker Advisories
• [ MDVSA-2011:162 ] kdelibs4
  • From: security
• [security bulletin] HPSBMU02712 SSRT100649 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code
  • From: security-alert
• GDTelcom Speedtest ActiveX Control "FTPDownLoad Class"-ActiveX.dll Remote Denial of Service Vulnerability
  • From: demonalex
• [ GLSA 201111-01 ] Chromium, V8: Multiple vulnerabilities
  • From: Alex Legler
• IBSng all version Cross-Site Scripting Vulnerability
  • From: apa-iutcert
• CVE-2011-3682: 2WIRE-SINGTEL 2701HGV-E/2700HGV-2/2700HG GATEWAY ROUTER MANAGEMENT AND DIAGNOSTIC CONSOLE VULNERABILITY
  • From: tan
• DDIVRT-2011-33 IBM WebSphere Application Server 'help' Servlet Plug-in Bundle Directory Traversal [CVE-2011-1359]
  • From: ddivulnalert
• YaTFTPSvr TFTP Server Directory Traversal Vulnerability
  • From: demonalex
• Oracle DataDirect ODBC Drivers HOST Attribute arsqls24.dll Stack Based Buffer Overflow PoC (*.oce)
  • From: nospam
• PlotLineControl ActiveX Control "LinePutPoint" Integer Overflow
  • From: demonalex
• Apple's Mail.app mail of death
  • From: Paul
• [SECURITY] [DSA 2333-1] phpldapadmin security update
  • From: Jonathan Wiltshire
• [SECURITY] [DSA 2332-1] python-django security update
  • From: Thijs Kinkhorst
• [security bulletin] HPSBUX02707 SSRT100626 rev.2 - HP-UX Apache Web Server, Remote Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBUX02702 SSRT100606 rev.5 - HP-UX Apache Web Server, Remote Denial of Service (DoS)
  • From: security-alert
• RE: [CVE-2011-2569] Cisco Nexus OS (NX-OS) - Command "injection" / sanitization issues.
  • From: Paul Oxman (poxman)
• eFront <= 3.6.10 (build 11944) Multiple Security Vulnerabilities
  • From: n0b0d13s
• [SECURITY] [DSA 2331-1] tor security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 2323-1] radvd security update
  • From: Yves-Alexis Perez
• [PT-2011-30] Disclosure of sensitive information in D-Link DIR-300 Router
  • From: noreply
• [PT-2011-29] Arbitrary file reading and arbitrary code execution in Router Manager for D-Link DIR-300
  • From: noreply
• [PT-2011-21] SQL injection vulnerability in OneOrZero AIMS
  • From: noreply
• [PT-2011-20] Authorization bypass vulnerability in OneOrZero AIMS
  • From: noreply
• Re: jara 1.6 sql injection vulnerability
  • From: Henri Salo
• VMSA-2011-0013 VMware third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX
  • From: VMware Security Response Team
• [security bulletin] HPSBUX02715 SSRT100623 rev.2 - HP-UX Containers (SRP), Local Unauthorized Access and Increased Privileges
  • From: security-alert
• [security bulletin] HPSBUX02719 SSRT100658 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS)
  • From: security-alert
• ZDI-11-316 : Apple QuickTime H264 Matrix Conversion Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-315 : Apple QuickTime FLC Delta Decompression Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-314 : Apple Quicktime PnPixPat PatType 3 Parsing Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-312 : Apple QuickTime Atom Hierarachy Argument Size Mismatch Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-313 : Apple QuickTime FLC RLE Packet Count Decompression Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• ZDI-11-311 : Apple Quicktime Empty URL Data Handler Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [SECURITY] [DSA 2330-1] simplesamlphp security update
  • From: Thijs Kinkhorst
• foofus.net security advisory - Toshiba eStudio Multifunction Printer Information Leakage
  • From: percx
• APPLE-SA-2011-10-26-1 QuickTime 7.7.1
  • From: Apple Product Security
• [ GLSA 201110-26 ] libxml2: Multiple vulnerabilities
  • From: Tim Sammut
• [ GLSA 201110-25 ] Pure-FTPd: Multiple vulnerabilities
  • From: Tim Sammut
• [ GLSA 201110-24 ] Squid: Multiple vulnerabilities
  • From: Tim Sammut