Bugtraq

• Thread Index

• Cyberoam Central Console v02.03.1 - Multiple Persistent Vulnerabilities
  • From: Vulnerability Lab
• UBNT Bug Bounty #2 - XML External Entity Vulnerability
  • From: Vulnerability Lab
• Totemomail v4.x & v5.x - Filter Bypass & Persistent Vulnerability
  • From: Vulnerability Lab
• C & C++ for OS - Filter Bypass & Persistent Vulnerability
  • From: Vulnerability Lab
• Telisca IPS Lock 2 Vulnerability
  • From: karim reda Fakhir
• [SECURITY] [DSA 3556-1] libgd2 security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 3555-1] imlib2 security update
  • From: Alessandro Ghedini
• Unlimited Pop-Ups WordPress Plugin XSS Vulnerability
  • From: Rahul Pratap Singh
• CM-AD-Changer XSS Vulnerability
  • From: Rahul Pratap Singh
• Easy Social Share Buttons for WordPress XSS Vulnerability
  • From: Rahul Pratap Singh
• Google SEO Pressor Snippet Plugin XSS Vulnerability
  • From: Rahul Pratap Singh
• Echosign Plugin for WordPress XSS Vulnerability
  • From: Rahul Pratap Singh
• Tweet-wheel XSS Vulnerability
  • From: Rahul Pratap Singh
• Persian-woocommerce-sms XSS Vulnerability
  • From: Rahul Pratap Singh
• Remote Code Execution in Shopware <5.1.5 (CVE-2016-3109)
  • From: david . vieira-kurz
• [security bulletin] HPSBMU03573 rev.1 - HPE System Management Homepage (SMH), Remote Disclosure of Information
  • From: security-alert
• [security bulletin] HPSBGN03580 rev.1 - HP Data Protector, Remote Code Execution, Remote Unauthorized Disclosure of Information
  • From: security-alert
• SEC Consult SA-20160422-1 :: Multiple vulnerabilities in Digitalstrom Konfigurator
  • From: SEC Consult Vulnerability Lab
• SEC Consult SA-20160422-0 :: Insecure credential storage in my devolo Android app
  • From: SEC Consult Vulnerability Lab
• [SECURITY] [DSA 3553-1] varnish security update
  • From: Sebastien Delafond
• [SECURITY] [DSA 3554-1] xen security update
  • From: Salvatore Bonaccorso
• CVE-2016-3074: libgd: signedness vulnerability
  • From: Hans Jerry Illikainen
• exploit CVE-2016-2203
  • From: karim reda Fakhir
• OpenTSDB RCE
  • From: gsoc
• Webutler CMS 3.2 - Cross-Site Request Forgery
  • From: displaymyname
• Cisco Security Advisory: Multiple Cisco Products libSRTP Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Adaptive Security Appliance Software DHCPv6 Relay Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Wireless LAN Controller HTTP Parsing Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Wireless LAN Controller Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Wireless LAN Controller Management Interface Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• RCE via CSRF in phpMyFAQ
  • From: High-Tech Bridge Security Research
• shell.com vulnerable TLS
  • From: shell
• *.Shell.com Port 443 DROWN decryption attack
  • From: shell
• PHPBack v1.3.0 SQL Injection
  • From: apparitionsec
• [security bulletin] HPSBMU03575 rev.1 - HP Smart Update Manager (SUM), Remote Denial of Service (DoS), Disclosure of Information
  • From: security-alert
• ESA-2016-039: EMC ViPR SRM Multiple Cross-Site Request Forgery Vulnerabilities
  • From: Security Alert
• Multiple Reflected XSS vulnerabilities in Oliver (formerly Webshare) v1.3.1
  • From: research@xxxxxxxxxx
• [ERPSCAN-16-004] SAP NetWeaver 7.4 (Pmitest servlet) – XSS vulnerability
  • From: ERPScan inc
• [ERPSCAN-16-005] SAP HANA hdbxsengine JSON – DoS vulnerability
  • From: ERPScan inc
• Executable installers are vulnerable^WEVIL (case 33): GData's installers allow escalation of privilege
  • From: Stefan Kanthak
• [security bulletin] HPSBST03576 rev.2 - HP P9000, XP7 Command View Advanced Edition (CVAE) Suite including Device Manager and Tiered Storage Manager using Java Deserialization, Remote Arbitrary Code Execution
  • From: security-alert
• [security bulletin] HPSBGN03555 rev.1 - HPE Vertica Analytics, Management Console, Remote Disclosure of Sensitive information, Execution of Arbitrary Code with Root Privileges
  • From: security-alert
• CVE-2016-4021: pgpdump 0.29 - Endless loop parsing specially crafted input (SYSS-2016-030)
  • From: klaus . eisentraut
• [SECURITY] [DSA 3552-1] tomcat7 security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 3551-1] fuseiso security update
  • From: Florian Weimer
• Ahrare Andeysheh Cms Multiple Vulnerabilities
  • From: iesb . team
• [CVE-2016-3996]KNOX clipboard data disclosure KNOX 1.0 - KNOX 2.3 / Android
  • From: urikanonov
• [slackware-security] samba (SSA:2016-106-02)
  • From: Slackware Security Team
• [slackware-security] mozilla-thunderbird (SSA:2016-106-01)
  • From: Slackware Security Team
• [SECURITY] [DSA 3550-1] openssh security update
  • From: Moritz Muehlenhoff
• Microsoft Internet Explorer 11 MSHTML.DLL Remote Binary Planting Vulnerability
  • From: Sandro Poppi
• [ERPSCAN-16-003] SAP NetWeaver 7.4 - cryptographic issues
  • From: ERPScan inc
• [ERPSCAN-16-002] SAP HANA - log injection and no size restriction
  • From: ERPScan inc
• [ERPSCAN-16-001] SAP NetWeaver 7.4 - XSS vulnerability
  • From: ERPScan inc
• [SECURITY] [DSA 3549-1] chromium-browser security update
  • From: Michael Gilbert
• AST-2016-005: TCP denial of service in PJProject
  • From: Asterisk Security Team
• AST-2016-004: Long Contact URIs in REGISTER requests can crash Asterisk
  • From: Asterisk Security Team
• NEW VMSA-2016-0004 VMware product updates address a critical security issue in the VMware Client Integration Plugin
  • From: VMware Security Response Center
• ESA-2016-036: EMC Unisphere for VMAX Virtual Appliance Arbitrary File Upload Vulnerability
  • From: Security Alert
• Securing Android Applications from Screen Capture
  • From: research
• Mybb Cms (private.php Page) Denial Of Service Vulnerability
  • From: iedb . team
• Django CMS v3.2.3 - Filter Bypass & Persistent Vulnerability
  • From: Vulnerability Lab
• [SECURITY] [DSA 3548-2] samba regression update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 3548-1] samba security update
  • From: Salvatore Bonaccorso
• Cisco Security Advisory:Cisco Unified Computing System Central Software Arbitrary Command Execution Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Mybb Cms (create forum and edit) Cross-Site Script Vulnerability
  • From: iedb . team
• Webline CMS (2016Q2) - SQL Injection Vulnerability
  • From: Vulnerability Lab
• Vbulletin Cms (Sendmessage.php Page) 0Day Exploit
  • From: iedb . team
• [SE-2012-01] Yet another broken security fix in IBM Java 7/8
  • From: Security Explorations
• CAM UnZip v5.1 Archive Directory Traversal
  • From: hyp3rlinx
• .NET Framework 4.6 allows side loading of Windows API Set DLL
  • From: Securify B.V.
• Open redirect on Google.com
  • From: research
• Wordpress Robo Gallery v2.0.14 - Code Execution Vulnerability
  • From: Vulnerability Lab
• [SECURITY] [DSA 3485-2] didiwiki security update
  • From: Sebastien Delafond
• [SECURITY] [DSA 3547-1] imagemagick security update
  • From: Luciano Bello
• ESA-2016-013: RSA BSAFE® Micro Edition Suite, Crypto-C Micro Edition, Crypto-J, SSL-J and SSL-C Lenstra’s Attack Vulnerability
  • From: Security Alert
• Blind SQL injections in CivicRM
  • From: Simon Waters (Surevine)
• [Multiple CVE]: RCE, info disclosure, HQL injection and stored XSS in Novell Service Desk 7.1.0
  • From: Pedro Ribeiro
• Directadmin cp ( Delete User ) 1.50.0 Version Xss Vulnerability
  • From: iedb . team
• Directadmin ControlPanel 1.50.0 Version Xss Vulnerability
  • From: iedb . team
• OpenCart json_decode function Remote PHP Code Execution
  • From: r3s34rch3r
• Directadmin ControlPanel 1.50.0 Version Xss Vulnerability
  • From: iedb . team
• WPN-XM Serverstack v0.8.6 CSRF - MySQL / PHP.INI Hijacking
  • From: hyp3rlinx
• WPN-XM Serverstack v0.8.6 CSRF - MySQL / PHP.INI Hijacking
  • From: hyp3rlinx
• CSRF - MySQL / PHP.INI Hijacking
  • From: hyp3rlinx
• WPN-XM Serverstack v0.8.6 XSS
  • From: hyp3rlinx
• CVE-2016-2170: Apache OFBiz information disclosure vulnerability
  • From: jleroux@xxxxxxxxxx
• CVE-2015-3268: Apache OFBiz information disclosure vulnerability
  • From: jleroux@xxxxxxxxxx
• JAWS Weak Service Permissions leads to Privilege Escalation
  • From: Heimbuecher003
• AccelSite Content Manager v1.0 - SQL Injection Vulnerability
  • From: Vulnerability Lab
• [SECURITY] [DSA 3546-1] optipng security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 3545-1] cgit security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 3544-1] python-django security update
  • From: Salvatore Bonaccorso
• [security bulletin] HPSBGN03570 rev.1 - HPE Universal CMDB, Remote Information Disclosure, URL Redirection
  • From: security-alert
• Perli v2.6 iOS - Filter Bypass & Persistent Vulnerability
  • From: Vulnerability Lab
• Eight Webcom CMS (2016 Q2) - SQL Injection Vulnerability
  • From: Vulnerability Lab
• Quicksilver HQ VoHo Concept4E CMS v1.0 - Multiple SQL Injection Web Vulnerabilities
  • From: Vulnerability Lab
• Virtual Freer v1.58 - Client Side Cross Site Scripting Vulnerability
  • From: Vulnerability Lab
• Techsoft WS CMS (2016 Q2) - SQL Injection Web Vulnerability
  • From: Vulnerability Lab
• [security bulletin] HPSBST03568 rev.1 - HP XP7 Command View Advanced Edition Suite including Device Manager and Hitachi Automation Director (HAD), Remote Server-Side Request Forgery (SSRF)
  • From: security-alert
• [security bulletin] HPSBGN03569 rev.2 - HPE OneView for VMware vCenter (OV4VC), Remote Disclosure of Information
  • From: security-alert
• Cisco Security Advisory: Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Prime Infrastructure and Evolved Programmable Network Manager Privilege Escalation API Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco TelePresence Server Malformed STUN Packet Processing Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco UCS Invicta Default SSH Key Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco TelePresence Server Crafted URL Handling Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco TelePresence Server Crafted IPv6 Packet Handling Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• CVE-2016-3672 - Unlimiting the stack not longer disables ASLR
  • From: Hector Marco-Gisbert
• SQL Injection in SocialEngine
  • From: High-Tech Bridge Security Research
• RE: FortiManager & FortiAnalyzer 5.x (Appliance Application) - (filename) Persistent Web Vulnerability
  • From: Jacques GRILLOT
• [slackware-security] subversion (SSA:2016-097-01)
  • From: Slackware Security Team
• op5 v7.1.9 Remote Command Execution
  • From: apparitionsec
• CA20160405-01: Security Notice for CA API Gateway
  • From: Kotas, Kevin J
• Re: [SE-2012-01] Broken security fix in IBM Java 7/8
  • From: Security Explorations
• [SECURITY] [DSA 3543-1] oar security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 3542-1] mercurial security update
  • From: Salvatore Bonaccorso
• Apple iOS 9.3.1 (iPhone 6S & iPhone Plus) - (3D Touch) Passcode Bypass Vulnerability
  • From: Vulnerability Lab
• [SECURITY] [DSA 3541-1] roundcube security update
  • From: Sebastien Delafond
• [security bulletin] HPSBGN03569 rev.1 - HPE OneView for VMware vCenter (OV4VC), Remote Disclosure of Information
  • From: security-alert
• [slackware-security] mozilla-thunderbird (SSA:2016-095-01)
  • From: Slackware Security Team
• Bitcoin/Altcoin Stratum Pool Mass Duplicate Shares Exploit
  • From: lists@xxxxxxxxxxxxxxxxxx
• ESA-2016-034: EMC Documentum D2 Configuration Object Vulnerability
  • From: Security Alert
• [SE-2012-01] Broken security fix in IBM Java 7/8
  • From: Security Explorations
• CVE-2016-2191: optipng: invalid write
  • From: Hans Jerry Illikainen
• ManageEngine Password Manager Pro Multiple Vulnerabilities
  • From: Sebastian Perez
• FortiManager & FortiAnalyzer 5.x (Appliance Application) - (filename) Persistent Web Vulnerability
  • From: Vulnerability Lab
• Techsoft Web Solutions CMS 2016 Q2 - SQL Injection Web Vulnerability
  • From: Vulnerability Lab
• Wordpress Scoreme Theme - Client Side Cross Site Scripting Web Vulnerability
  • From: Vulnerability Lab
• Bugcrowd CSV injection vulnerability
  • From: Hack Ex
• [SECURITY] [DSA 3540-1] lhasa security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 3539-1] srtp security update
  • From: Salvatore Bonaccorso
• Open-Xchange Security Advisory 2016-04-02
  • From: Martin Heiland
• [security bulletin] HPSBGN03565 rev.1 - HPE Virtualization Performance Viewer, Local Denial of Service (DoS)
  • From: security-alert
• [slackware-security] mercurial (SSA:2016-092-01)
  • From: Slackware Security Team
• [slackware-security] php (SSA:2016-092-02)
  • From: Slackware Security Team
• [security bulletin] HPSBHF03431 rev.3 - HPE Network Switches, local Bypass of Security Restrictions, Indirect Vulnerabilities
  • From: security-alert
• [security bulletin] HPSBUX03561 rev.1 - HPE HP-UX using Apache Tomcat, Remote Access Restriction Bypass, Arbitrary Code Execution, Execution of Arbitrary Code With Privilege Elevation, Unauthorized Read Access to Files
  • From: security-alert
• [security bulletin] HPSBGN03567 rev.1 - HP Asset Manager using Java Deserialization, Remote Arbitrary Code Execution
  • From: security-alert
• [security bulletin] HPSBGN3547 rev.1 - HP Device Manager, Remote Read Access to Arbitrary Files
  • From: HP Security Alert
• APPLE-SA-2016-03-31-1 iBooks Author 2.4.1
  • From: Apple Product Security
• WebKitGTK+ Security Advisory WSA-2016-0003
  • From: Carlos Alberto Lopez Perez
• Python v2.7 v1.5.4 iOS - Filter Bypass & Persistent Vulnerability
  • From: Vulnerability Lab
• Trend Micro (SSO) - (Backend) SSO Redirect & Session Vulnerability
  • From: Vulnerability Lab
• Docker UI v0.10.0 - Multiple Persistent Vulnerabilities
  • From: Vulnerability Lab
• Dorsa Web CMS - Multiple SQL Injection Vulnerabilities
  • From: Vulnerability Lab
• Cades (2016Q1) - (id) Multiple SQL Injection Vulnerabilities
  • From: Vulnerability Lab
• Docker UI v0.10.0 - Multiple Client Side Cross Site Request Forgery Web Vulnerabilities
  • From: Vulnerability Lab
• WP External Links v1.80 - Cross Site Scripting Web Vulnerabilities
  • From: Vulnerability Lab
• Hi Technology & Services CMS - SQL Injection Vulnerabilities
  • From: Vulnerability Lab
• Patron Info System - SQL Injection Vulnerability
  • From: Vulnerability Lab
• [SECURITY] [DSA 3538-1] libebml security update
  • From: Sebastien Delafond
• [SECURITY] [DSA 3537-1] imlib2 security update
  • From: Sebastien Delafond
• [SECURITY] [DSA 3536-1] libstruts1.2-java security update
  • From: Sebastien Delafond
• RE: Cisco Security Advisory: Cisco Firepower Malware Block Bypass Vulnerability
  • From: Murray, Mike
• Cisco Security Advisory: Cisco Firepower Malware Block Bypass Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [CVE-2016-0784] Apache OpenMeetings ZIP file path traversal
  • From: Maxim Solodovnik
• Multiple Vulnerabilities in CubeCart
  • From: High-Tech Bridge Security Research
• CVE-2016-2385 Kamailio SEAS module heap buffer overflow
  • From: Stelios Tsampas
• Easy Hosting Control Panel (EHCP) - Multiple Vulnerabilities
  • From: kyle Lovett
• [SECURITY] [DSA 3535-1] kamailio security update
  • From: Moritz Muehlenhoff
• [security bulletin] HPSBGN03444 rev.2 - HPE Network Automation, Remote Code Execution, Disclosure of Sensitive Information
  • From: security-alert
• [SECURITY] [DSA 3534-1] dhcpcd security update
  • From: Salvatore Bonaccorso
• Fireware XTM Web UI - Open Redirect
  • From: Manuel Mancera
• [SECURITY] [DSA 3533-1] openvswitch security update
  • From: Salvatore Bonaccorso
• BMC-2015-0011: Unauthorized password reset vulnerability in BMC Server Automation (BSA) (CVE-2016-1543)
  • From: appsec
• BMC-2015-0010: User enumeration vulnerability in BMC Server Automation (BSA) Unix/Linux RSCD Agent (CVE-2016-1542)
  • From: appsec
• Validation Bypass in C2Box application : CVE - 2015-4626
  • From: harish . ramadoss
• [SECURITY] [DSA 3532-1] quagga security update
  • From: Salvatore Bonaccorso
• TrendMicro DDI Cross Site Request Forgerys
  • From: hyp3rlinx
• [SECURITY] [DSA 3531-1] chromum-browser security update
  • From: Michael Gilbert
• [slackware-security] mozilla-thunderbird (SSA:2016-085-02)
  • From: Slackware Security Team
• [slackware-security] libevent (SSA:2016-085-01)
  • From: Slackware Security Team
• [SECURITY] [DSA 3530-1] tomcat6 security update
  • From: Moritz Muehlenhoff
• [CVE-2016-2163] Stored Cross Site Scripting in Event description
  • From: Maxim Solodovnik
• [CVE-2016-2164] Arbitrary file read via SOAP API
  • From: Maxim Solodovnik
• [CVE-2016-0783] Predictable password reset token
  • From: Maxim Solodovnik
• [security bulletin] HPSBGN03563 rev.1 - HPE IceWall Products using OpenSSL, Remote Denial of Service (DoS), Local Denial of Service (DoS), Disclosure of Information
  • From: security-alert
• [security bulletin] HPSBMU03562 rev.2 - HPE Service Manager using Java Deserialization, Remote Arbitrary Code Execution
  • From: security-alert
• [SYSS-2016-016] innovaphone IP222 - Improper Input Validation
  • From: sven . freund
• [SYSS-2016-018] innovaphone IP222 - Improper Restriction of Excessive Authentication Attempts
  • From: sven . freund
• [SYSS-2016-017] innovaphone IP222 - Improper Input Validation
  • From: sven . freund
• [SECURITY] [DSA 3527-1] inspircd security update
  • From: Sebastien Delafond
• XSS (Cross Site Scripting) in Social CRM & Community Solutions powered by Lithium in Knowledge base section
  • From: netizen01k
• [SECURITY] [DSA 3529-1] redmine security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 3528-1] pidgin-otr security update
  • From: Sebastien Delafond
• Cisco Security Advisory: Cisco IOS Software Wide Area Application Services Express Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS and NX-OS Software Locator/ID Separation Protocol Packet Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS and IOS XE Software Smart Install Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS and IOS XE Software Internet Key Exchange Version 2 Fragmentation Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS and IOS XE and Cisco Unified Communications Manager Software Session Initiation Protocol Memory Leak Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco IOS and IOS XE Software DHCPv6 Relay Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Hardcoded root password in Zyxel MAX3XX series Wimax CPEs
  • From: Gianni Carabelli
• CA20160323-01: Security Notice for CA Single Sign-On Web Agents
  • From: Kotas, Kevin J
• CVE-2016-2166: Apache Qpid Proton python binding silently ignores request for 'amqps' if SSL/TLS not supported
  • From: Ken Giusti
• [SECURITY] [DSA 3526-1] libmatroska security update
  • From: Sebastien Delafond
• Remote Code Execution in DVR affecting over 70 different vendors
  • From: rotem kerner
• [SECURITY] [DSA 3525-1] pixman security update
  • From: Salvatore Bonaccorso
• [RT-SA-2016-002] Cross-site Scripting in Securimage 3.6.2
  • From: RedTeam Pentesting GmbH
• APPLE-SA-2016-03-21-5 OS X El Capitan 10.11.4 and Security Update 2016-002
  • From: Apple Product Security
• APPLE-SA-2016-03-21-6 Safari 9.1
  • From: Apple Product Security
• APPLE-SA-2016-03-21-3 tvOS 9.2
  • From: Apple Product Security
• APPLE-SA-2016-03-21-7 OS X Server 5.1
  • From: Apple Product Security
• APPLE-SA-2016-03-21-4 Xcode 7.3
  • From: Apple Product Security
• APPLE-SA-2016-03-21-2 watchOS 2.2
  • From: Apple Product Security
• APPLE-SA-2016-03-21-1 iOS 9.3
  • From: Apple Product Security
• [security bulletin] HPSBMU03562 rev.1 - HPE Service Manager using Java Deserialization, Remote Arbitrary Code Execution
  • From: security-alert
• [security bulletin] HPSBGN03560 rev.1 - HP Operations Orchestration using Java Deserialization, Remote Arbitrary Code Execution
  • From: security-alert
• [security bulletin] HPSBGN03551 rev.1 - HPE Helion Development Platform using glibc, Remote Denial of Service (DoS), Arbitrary Code Execution
  • From: security-alert
• AbsoluteTelnet 10.14 DLL Hijack Code Exec
  • From: hyp3rlinx
• [SECURITY] [DSA 3524-1] activemq security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 3523-1] iceweasel security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 3522-1] squid3 security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 3521-1] git security update
  • From: Salvatore Bonaccorso
• [security bulletin] HPSBGN03438 rev.1 - HP Support Assistant, Local Authentication Bypass
  • From: HP Security Alert
• [SECURITY] [DSA 3520-1] icedove security update
  • From: Moritz Muehlenhoff
• SQL Injection and RCE in WebsiteBaker
  • From: High-Tech Bridge Security Research
• Admin Password Reset & RCE via CSRF in Dating Pro
  • From: High-Tech Bridge Security Research
• Remote Code Execution via CSRF in iTop
  • From: High-Tech Bridge Security Research
• Re: server and client side remote code execution through a buffer overflow in all git versions before 2.7.1 (unpublished ᴄᴠᴇ-2016-2324 and ᴄᴠᴇ‑2016‑2315)
  • From: Laël Cellier
• Xoops 2.5.7.2 Directory Traversal Bypass
  • From: hyp3rlinx
• Xoops 2.5.7.2 CSRF - Arbitrary User Deletions
  • From: hyp3rlinx
• [slackware-security] mozilla-firefox (SSA:2016-077-01)
  • From: Slackware Security Team
• [SECURITY] [DSA 3519-1] xen security update
  • From: Moritz Muehlenhoff
• [CVE-2016-2345] Solarwinds Dameware Mini Remote Control Remote Code Execution Vulnerability
  • From: contact
• Re: [ANNOUNCE] CVE-2016-0782: ActiveMQ Web Console - Cross-Site Scripting
  • From: Derek Mahar
• CVE-2016-1520: GrandStream Android VoIP App Update Redirection
  • From: Georg Lukas
• CVE-2016-1519: GrandStream Android VoIP App TLS MitM Vulnerability
  • From: Georg Lukas
• CVE-2016-1518: GrandStream Android VoIP Phone / App Provisioning Vulnerability
  • From: Georg Lukas
• Multiple (persistent) XSS in ProjectSend
  • From: mail
• FreeBSD Security Advisory FreeBSD-SA-16:15.sysarch
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-16:14.openssh
  • From: FreeBSD Security Advisories
• Re: [FD] [CORE-2016-0005] - FreeBSD Kernel amd64_set_ldt Heap Overflow
  • From: jungle Boogie
• [CORE-2016-0005] - FreeBSD Kernel amd64_set_ldt Heap Overflow
  • From: CORE Advisories Team
• [security bulletin] HPSBGN03558 rev.1 - ArcSight ESM and ESM Express, Remote Disclosure of Sensitive Information
  • From: security-alert
• [SECURITY] [DSA 3518-1] spip security update
  • From: Sebastien Delafond
• Reflected Cross-Site Scripting (XSS) Vulnerability in Litecart CMS
  • From: rsrathoreravi
• [slackware-security] seamonkey (SSA:2016-075-02)
  • From: Slackware Security Team
• [slackware-security] git (SSA:2016-075-01)
  • From: Slackware Security Team
• [ANNOUNCE][CVE-2016-0779] Apache TomEE 1.7.4 and 7.0.0-M3 releases
  • From: Romain Manni-Bucau
• Defense in depth -- the Microsoft way (part 39): vulnerabilities, please meet the bar for security servicing
  • From: Stefan Kanthak
• [security bulletin] HPSBGN03556 rev.1 - ArcSight ESM and ESM Express, Remote Arbitrary File Download, Local Arbitrary Command Execution
  • From: security-alert
• Re: oss-2016-15: Local RedHat Enterprise Linux DoS â?? RHEL 7.1 Kernel crashes on invalid USB device descriptors (iowarrior driver)
  • From: vdronov
• Re: oss-2016-13: Local RedHat Enterprise Linux DoS â?? RHEL 7.1 Kernel crashes on invalid USB device descriptors (powermate driver)
  • From: vdronov
• Re: oss-2016-18: Multiple Local RedHat Enterprise Linux DoS â?? RHEL 7.1 Kernel crashes on invalid USB device descriptors (ati_remote2 driver)
  • From: vdronov
• Re: oss-2016-17: Local RedHat Enterprise Linux DoS â?? RHEL 7.1 Kernel crashes (multiple free) on invalid USB device descriptors (snd-usb-audio driver)
  • From: vdronov
• Re: OS-S 2016-11 Linux wacom multiple Nullpointer Dereferences
  • From: vdronov
• Re: OS-S 2016-12 Linux digi_acceleport Nullpointer Dereference
  • From: vdronov
• Re: OS-S 2016-08 Linux mct_u232 Nullpointer Dereference
  • From: vdronov
• Re: OS-S 2016-07 Linux cypress_m8 Nullpointer Dereference
  • From: vdronov
• Re: OS-S 2016-06 Linux cdc_acm Nullpointer Dereference
  • From: vdronov
• [security bulletin] HPSBMU03377 rev.2 - HP Release Control running RC4, Remote Disclosure of Information
  • From: security-alert
• [security bulletin] HPSBGN03373 rev.2 - HP Release Control running TLS, Remote Disclosure of Information
  • From: security-alert
• Yahoo Bug Bounty #37 - Sender Spoofing Vulnerability
  • From: Vulnerability Lab
• Chamlio LMS v1.10.2 - (Profile) Persistent Web Vulnerability
  • From: Vulnerability Lab
• ChitaSoft (Web-Application) - SQL Injection Vulnerability
  • From: Vulnerability Lab
• Reflected Cross-Site Scripiting in CuteEditor
  • From: adrmm
• ESA-2016-012: EMC Documentum xCP – User Information Disclosure Vulnerability
  • From: Security Alert
• Re: oss-2016-17: Local RedHat Enterprise Linux DoS â?? RHEL 7.1 Kernel crashes (multiple free) on invalid USB device descriptors (snd-usb-audio driver)
  • From: amaris
• Re: oss-2016-18: Multiple Local RedHat Enterprise Linux DoS â?? RHEL 7.1 Kernel crashes on invalid USB device descriptors (ati_remote2 driver)
  • From: amaris
• Re: oss-2016-15: Local RedHat Enterprise Linux DoS â?? RHEL 7.1 Kernel crashes on invalid USB device descriptors (iowarrior driver)
  • From: amaris
• Re: oss-2016-13: Local RedHat Enterprise Linux DoS â?? RHEL 7.1 Kernel crashes on invalid USB device descriptors (powermate driver)
  • From: amaris
• [SECURITY] [DSA 3516-1] wireshark security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 3515-1] graphite2 security update
  • From: Moritz Muehlenhoff
• Soundy Background Music XSS Vulnerability
  • From: Rahul Pratap Singh
• [SECURITY] [DSA 3514-1] samba security update
  • From: Salvatore Bonaccorso
• Microsoft Edge CDOMTextNode::get_data type confusion
  • From: Berend-Jan Wever
• WebKitGTK+ Security Advisory WSA-2016-0002
  • From: Carlos Alberto Lopez Perez
• DW Question Answer Stored XSS Vulnerability
  • From: Rahul Pratap Singh
• [slackware-security] openssh (SSA:2016-070-01)
  • From: Slackware Security Team
• oss-2016-18: Multiple Local RedHat Enterprise Linux DoS – RHEL 7.1 Kernel crashes on invalid USB device descriptors (ati_remote2 driver)
  • From: Ralf Spenneberg
• oss-2016-17: Local RedHat Enterprise Linux DoS – RHEL 7.1 Kernel crashes (multiple free) on invalid USB device descriptors (snd-usb-audio driver)
  • From: Ralf Spenneberg
• oss-2016-16: Local RedHat Enterprise Linux DoS – RHEL 7.1 Kernel crashes on invalid USB device descriptors (snd-usb-audio driver)
  • From: Ralf Spenneberg
• oss-2016-15: Local RedHat Enterprise Linux DoS – RHEL 7.1 Kernel crashes on invalid USB device descriptors (iowarrior driver)
  • From: Ralf Spenneberg
• oss-2016-14: Local RedHat Enterprise Linux DoS – RHEL 7.1 Kernel crashes on invalid USB device descriptors (gtco driver)
  • From: Ralf Spenneberg
• oss-2016-13: Local RedHat Enterprise Linux DoS – RHEL 7.1 Kernel crashes on invalid USB device descriptors (powermate driver)
  • From: Ralf Spenneberg
• [SECURITY] [DSA 3513-1] chromium-browser security update
  • From: Michael Gilbert
• [ANNOUNCE] CVE-2016-0734: ActiveMQ Web Console - Clickjacking
  • From: Christopher Shannon
• [ANNOUNCE] CVE-2016-0782: ActiveMQ Web Console - Cross-Site Scripting
  • From: Christopher Shannon
• FreeBSD Security Advisory FreeBSD-SA-16:12.openssl
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-16:13.bind
  • From: FreeBSD Security Advisories
• [slackware-security] mozilla-nss (SSA:2016-069-02)
  • From: Slackware Security Team
• [slackware-security] bind (SSA:2016-069-01)
  • From: Slackware Security Team
• [SE-2012-01] Broken security fix in Oracle Java SE 7/8/9
  • From: Security Explorations
• [SECURITY] [DSA 3512-1] libotr security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 3511-1] bind9 security update
  • From: Michael Gilbert
• [CORE-2016-0003] - Samsung SW Update Tool MiTM
  • From: CORE Advisories Team
• [SECURITY] [DSA 3509-1] rails security update
  • From: Luciano Bello
• [SECURITY] [DSA 3510-1] iceweasel security update
  • From: Moritz Muehlenhoff
• Cisco Security Advisory: Cisco ASA Content Security and Control Security Services Module Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [CORE-2016-0004] - SAP Download Manager Password Weak Encryption
  • From: CORE Advisories Team
• Advisory X41-2016-001: Memory Corruption Vulnerability in "libotr"
  • From: X41 D-Sec GmbH Advisories
• [SECURITY] [DSA 3509-1] rails security update
  • From: Luciano Bello
• [SECURITY] [DSA 3509-1] rails security update
  • From: Luciano Bello
• Re: Windows Mail Find People DLL side loading vulnerability
  • From: Securify B.V.
• Cisco Security Advisory: Cisco Cable Modem with Digital Voice Remote Code Execution Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory:Cisco Wireless Residential Gateway Information Disclosure Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Wireless Residential Gateway with EDVA Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Re: Windows Mail Find People DLL side loading vulnerability
  • From: Stefan Kanthak
• OS-S 2016-12 Linux digi_acceleport Nullpointer Dereference
  • From: Ralf Spenneberg
• OS-S 2016-11 Linux wacom multiple Nullpointer Dereferences
  • From: Ralf Spenneberg
• OS-S 2016-10 Linux visor (treo_attach) Nullpointer Dereference CVE-2016-2782
  • From: Ralf Spenneberg
• OS-S 2016-09 Linux visor clie_5_attach Nullpointer Dereference CVE-2015-7566
  • From: Ralf Spenneberg
• OS-S 2016-08 Linux mct_u232 Nullpointer Dereference
  • From: Ralf Spenneberg
• Re: OS-S 2016-06 Linux cdc_acm Nullpointer Dereference
  • From: abdyfhie
• OS-S 2016-07 Linux cypress_m8 Nullpointer Dereference
  • From: Ralf Spenneberg
• OS-S 2016-06 Linux cdc_acm Nullpointer Dereference
  • From: Ralf Spenneberg
• OS-S 2016-05 Linux aiptek Nullpointer Dereference CVE-2015-7515
  • From: Ralf Spenneberg
• LSE Leading Security Experts GmbH - LSE-2016-01-01 - Wordpress ProjectTheme - Multiple Vulnerabilities
  • From: LSE-Advisories
• Thomson TWG850 Wireless Router Multiple Vulnerabilities
  • From: Sebastian Perez
• [slackware-security] mozilla-firefox (SSA:2016-068-01)
  • From: Slackware Security Team
• [slackware-security] samba (SSA:2016-068-02)
  • From: Slackware Security Team
• Windows Mail Find People DLL side loading vulnerability
  • From: Securify B.V.
• [security bulletin] HPSBHF03557 rev.1 - HPE Networking Products using Comware 7 (CW7) running NTP, Remote Denial of Service (DoS)
  • From: security-alert
• Re: Apple iOS v9.2.1 - Multiple PassCode Bypass Vulnerabilities (App Store Link, Buy Tones Link & Weather Channel Link)
  • From: Michael Lima
• [slackware-security] php (SSA:2016-067-01)
  • From: Slackware Security Team
• ESA-2016-012: EMC Documentum xCP – User Information Disclosure Vulnerability
  • From: Security Alert
• Re: Apple iOS v9.2.1 - Multiple PassCode Bypass Vulnerabilities (App Store Link, Buy Tones Link & Weather Channel Link)
  • From: Edsel Adap
• Re: Apple iOS v9.2.1 - Multiple PassCode Bypass Vulnerabilities (App Store Link, Buy Tones Link & Weather Channel Link)
  • From: Dubbju
• Apple iOS v9.2.1 - Multiple PassCode Bypass Vulnerabilities (App Store Link, Buy Tones Link & Weather Channel Link)
  • From: Vulnerability Lab
• [SECURITY] [DSA 3508-1] jasper security update
  • From: Salvatore Bonaccorso
• Multiple vulnerabilities in Wordpress plugin SP Projects & Document Manager
  • From: mail
• [SECURITY] [DSA 3507-1] chromium-browser security update
  • From: Michael Gilbert
• Executable installers are vulnerable^WEVIL (case 30): clamwin-0.99-setup.exe allows arbitrary (remote) code execution WITH escalation of privilege
  • From: Stefan Kanthak
• Executable installers are vulnerable^WEVIL (case 31): MalwareBytes' installers allows arbitrary (remote) code execution WITH escalation of privilege
  • From: Stefan Kanthak
• McAfee VirusScan Enterprise security restrictions bypass
  • From: Agazzini Maurizio
• [SECURITY] [DSA 3504-1] bsh security update
  • From: Sebastien Delafond
• [SECURITY] [DSA 3505-1] wireshark security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 3506-1] libav security update
  • From: Moritz Muehlenhoff
• [SYSS-2015-058] Thru Managed File Transfer Portal 9.0.2 - Insecure Direct Object Reference (REVISED)
  • From: erlijn . vangenuchten
• [SYSS-2015-059] Thru Managed File Transfer Portal 9.0.2 - Insecure Direct Object Reference (REVISED)
  • From: erlijn . vangenuchten
• [SYSS-2015-060] Thru Managed File Transfer Portal 9.0.2 - Improperly Implemented Security Check for Standard (REVISED)
  • From: erlijn . vangenuchten
• [SYSS-2015-064] Thru Managed File Transfer Portal 9.0.2 - Insecure Direct Object Reference (REVISED)
  • From: erlijn . vangenuchten
• [SYSS-2015-053] innovaphone IP222/IP232 - Denial of Service
  • From: disclosure
• [security bulletin] HPSBPI03546 rev.1 - HP LaserJet Printers and MFPs, HP OfficeJet Enterprise Printers, Remote Disclosure of Information
  • From: HP Security Alert
• [security bulletin] HPSBHF03439 rev.1 - HP Commercial PCs with Sure Start, Local Denial of Service
  • From: HP Security Alert
• [security bulletin] HPSBGN03550 rev.2 - HP Operations Manager i and BSM using Apache Flex BlazeDS, Remote Disclosure of Information
  • From: security-alert
• [SECURITY] [DSA 3503-1] linux security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 3426-2] ctdb regression update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 3502-1] roundup security update
  • From: Yves-Alexis Perez
• [slackware-security] mailx (SSA:2016-062-01)
  • From: Slackware Security Team
• [slackware-security] openssl (SSA:2016-062-02)
  • From: Slackware Security Team
• [slackware-security] php (SSA:2016-062-03)
  • From: Slackware Security Team
• WordPress Bulk Delete Plugin [Privilege Escalation]
  • From: Panagiotis Vagenas
• [security bulletin] HPSBHF03436 rev.1 - HP Thin Client with ThinPro OS, running Linux, Local Elevated Privileges
  • From: HP Security Alert
• Panda SM Manager iOS Application - MITM SSL Certificate Vulnerability
  • From: David Coomber
• Open-Xchange Security Advisory 2016-03-02
  • From: Martin Heiland
• Cisco Security Advisory: Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2016
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco NX-OS Software TCP Netstack Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Nexus 3000 Series and 3500 Platform Switches Insecure Default Credentials Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Web Security Appliance HTTPS Packet Processing Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco NX-OS Software SNMP Packet Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [REVIVE-SA-2016-001] Revive Adserver - Multiple vulnerabilities
  • From: Matteo Beccati
• [security bulletin] HPSBHF03545 rev. 1 - HP EliteBook and Zbook Products with Windows NVidia Graphics Driver, Multiple Local Vulnerabilities
  • From: HP Security Alert
• [security bulletin] HPSBGN03442 rev.1 - HP Helion OpenStack using glibc, Remote Denial of Service (DoS), Arbitrary Code Execution
  • From: security-alert
• Vivint Sky Control Panel Unauthenticated Access Vulnerability
  • From: jeremyscott
• [SECURITY] [DSA 3501-1] perl security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 3500-1] openssl security update
  • From: Alessandro Ghedini
• Executable installers are vulnerable^WEVIL (case 29): putty-0.66-installer.exe allowa arbitrary (remote) code execution WITH escalation of privilege
  • From: Stefan Kanthak
• [SYSS-2016-009] Sophos UTM 525 Web Application Firewall - Cross-Site Scripting in
  • From: adrian . vollmer
• WordPress plugin GravityForms Cross-site Scripting vulnerability
  • From: Henri Salo
• Microsoft PowerPointViewer Code Execution
  • From: hyp3rlinx
• [security bulletin] HPSBUX03552 SSRT102983 rev.1 - HP-UX BIND running Named, Remote Denial of Service (DoS)
  • From: security-alert
• [SYSS-2015-069] perfact::mpa - Insecure Direct Object References
  • From: matthias . deeg
• [SYSS-2015-067] perfact::mpa - Insecure Direct Object References
  • From: matthias . deeg
• [SYSS-2015-066] perfact::mpa - Cross-Site Scripting
  • From: matthias . deeg
• [SYSS-2015-070] perfact::mpa - Cross-Site Scripting
  • From: matthias . deeg
• [SYSS-2015-071] perfact::mpa - Cross-Site Request Forgery
  • From: matthias . deeg
• [SYSS-2015-072] perfact::mpa - Insecure Direct Object References
  • From: matthias . deeg
• [SYSS-2015-073] perfact::mpa - URL Redirection to Untrusted Site
  • From: matthias . deeg
• Fing v3.3.0 iOS - Persistent Mail Encoding Vulnerability
  • From: Vulnerability Lab
• WP Good News Themes - Client Side Cross Site Scripting Web Vulnerability
  • From: Vulnerability Lab
• [SECURITY] [DSA 3495-1] xymon security update
  • From: Sebastien Delafond
• [SECURITY] [DSA 3498-1] drupal7 security advisory
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 3499-1] pillow security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 3496-1] php-horde-core security update
  • From: Salvatore Bonaccorso
• Call For Papers - CISTI 2016 Workshops - Deadline March 15
  • From: Maria Lemos
• [SECURITY] [DSA 3497-1] php-horde security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 3494-1] cacti security update
  • From: Salvatore Bonaccorso
• Re: Symantec EP DOS
  • From: hyp3rlinx
• [slackware-security] libssh (SSA:2016-057-01)
  • From: Slackware Security Team
• [security bulletin] HPSBGN03549 rev.1 - HP IceWall Products using glibc, Remote Denial of Service (DoS), Arbitrary Code Execution
  • From: security-alert
• Executable installers are vulnerable^WEVIL (case 27): Cygwin's installers allow arbitrary (remote) code execution WITH escalation of privilege
  • From: Stefan Kanthak
• Executable installers are vulnerable^WEVIL (case 28): Google's Chrome cleanup tool allows arbitrary (remote) code execution WITH escalation of privilege
  • From: Stefan Kanthak
• RE: CVE-2016-0729: Apache Xerces-C XML Parser Crashes on Malformed Input
  • From: Shivaprasad Sadashivappa
• Zimbra Cross-Site Scripting vulnerabilities
  • From: pxli
• WordPress plugin wp-ultimate-exporter SQL injection vulnerability
  • From: Henri Salo
• APPLE-SA-2016-02-25-1 Apple TV 7.2.1
  • From: Apple Product Security
• [SECURITY] [DSA 3492-1] gajim security update
  • From: Yves-Alexis Perez
• [SECURITY] [DSA 3493-1] xerces-c security update
  • From: Salvatore Bonaccorso
• CVE-2016-0729: Apache Xerces-C XML Parser Crashes on Malformed Input
  • From: Cantor, Scott
• [SECURITY] [DSA 3491-1] icedove security update
  • From: Moritz Muehlenhoff
• JSN PowerAdmin Joomla! Extension - Remote Command Execution Via CSRF and XSS vulnerabilities
  • From: Ratio Sec
• WordPress User Submitted Posts Plugin [Persistent XSS]
  • From: Panagiotis Vagenas
• [SECURITY] [DSA 3490-1] websvn security update
  • From: Sebastien Delafond
• Belkin N150 Router Multiple XSS Vulnerability
  • From: Rahul Pratap Singh
• Import Woocommerce XSS Vulnerability
  • From: Rahul Pratap Singh
• WP Ultimate Exporter XSS Vulnerability
  • From: Rahul Pratap Singh
• WP Advanced Importer XSS Vulnerability
  • From: Rahul Pratap Singh
• CSV Import XSS Vulnerability
  • From: Rahul Pratap Singh
• eFront 3.6.15.6 CMS – (Message Attachment) Persistent Cross Site Scripting Vulnerability
  • From: Vulnerability Lab
• Executable installers are vulnerable^WEVIL (case 4): InstallShield's wrapper and setup.exe
  • From: Stefan Kanthak
• Re: Executable installers are vulnerable^WEVIL (case 26): the installer of GIMP for Windows allows arbitrary (remote) and escalation of privilege
  • From: Stefan Kanthak
• Extra User Details [Privilege Escalation]
  • From: Panagiotis Vagenas
• [KIS-2016-02] Magento <= 1.9.2.2 (RSS Feed) Information Disclosure Vulnerability
  • From: Egidio Romano
• [slackware-security] ntp (SSA:2016-054-04)
  • From: Slackware Security Team
• [slackware-security] libgcrypt (SSA:2016-054-03)
  • From: Slackware Security Team
• [slackware-security] glibc (SSA:2016-054-02)
  • From: Slackware Security Team
• [slackware-security] bind (SSA:2016-054-01)
  • From: Slackware Security Team
• Ubiquiti Networks UniFi v3.2.10 Generic CSRF Protection Bypass
  • From: Julien Ahrens
• [SECURITY] [DSA 3489-1] lighttpd security update
  • From: Sebastien Delafond
• [SECURITY] [DSA 3488-1] libssh security update
  • From: Salvatore Bonaccorso
• CSNC-2016-001 - XSS in OpenAM
  • From: Alexandre Herzog
• CVE-2015-0955 - Stored XSS in Adobe Experience Manager (AEM)
  • From: Alexandre Herzog
• CSNC-2016-002 - Open Redirect in OpenAM
  • From: Alexandre Herzog
• InstantCoder v1.0 iOS - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• Oxwall Forum v1.8.1 - Persistent Cross Site Scripting Vulnerability
  • From: Vulnerability Lab
• [SYSS-2015-063] OpenCms - Cross Site Scripting
  • From: rainer . boie
• Ubiquiti Networks Bug Bounty #9 - Invoice Persistent Vulnerabilities
  • From: Vulnerability Lab
• InstantCoder v1.0 iOS - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• [SECURITY] CVE-2015-5174 Apache Tomcat Limited Directory Traversal
  • From: Mark Thomas
• [SECURITY] CVE-2015-5351 Apache Tomcat CSRF token leak
  • From: Mark Thomas
• [SECURITY] CVE-2016-0763 Apache Tomcat Security Manager Bypass
  • From: Mark Thomas
• [SECURITY] CVE-2015-5345 Apache Tomcat Directory disclosure
  • From: Mark Thomas
• [SECURITY] CVE-2016-0714 Apache Tomcat Security Manager Bypass
  • From: Mark Thomas
• [SECURITY] CVE-2016-0706 Apache Tomcat Security Manager bypass
  • From: Mark Thomas
• [SECURITY] CVE-2015-5346 Apache Tomcat Session fixation
  • From: Mark Thomas
• [SECURITY] [DSA 3486-1] chromium-browser security update
  • From: Michael Gilbert
• [security bulletin] HPSBHF03544 rev.1 - HPE iMC PLAT and other HP and H3C products using Comware 7 and cURL, Remote Unauthorized Access
  • From: security-alert
• [SECURITY] [DSA 3485-1] didiwiki security update
  • From: Sebastien Delafond
• Cisco Security Advisory: Vulnerability in GNU glibc Affecting Cisco Products: February 2016
  • From: Cisco Systems Product Security Incident Response Team
• [security bulletin] HPSBGN03547 rev.1 - HPE Helion Eucalyptus Node Controller and other Helion Eucalyptus Components using glibc, Remote Arbitrary Code Execution
  • From: security-alert
• [SECURITY] [DSA 3483-1] cpio security update
  • From: Salvatore Bonaccorso
• ifixit Bug Bounty #6 -(Profile) Persistent Vulnerability
  • From: Vulnerability Lab
• Prezi Bug Bounty #5 - Client Side Cross Site Scripting & Open Redirect Vulnerability
  • From: Vulnerability Lab
• Investors Application - Client Side Cross Site Scripting Vulnerability
  • From: Vulnerability Lab
• Chamilo LMS IDOR - (messageId) Delete POST Inject Vulnerability
  • From: Vulnerability Lab
• Chamilo LMS - Persistent Cross Site Scripting Vulnerability
  • From: Vulnerability Lab
• Adobe - Multiple Client Side Cross Site Scripting Web Vulnerabilities
  • From: Vulnerability Lab
• ifixit Bug Bounty #5 - Guide Search Persistent Vulnerability
  • From: Vulnerability Lab
• [SYSS-2015-056] Thru Managed File Transfer Portal 9.0.2 - SQL Injection
  • From: erlijn . vangenuchten
• [SYSS-2015-057] Thru Managed File Transfer Portal 9.0.2 - Cross-Site Scripting
  • From: erlijn . vangenuchten
• [SYSS-2015-059] Thru Managed File Transfer Portal 9.0.2 - Insecure Direct Object Reference (CWE-932)
  • From: erlijn . vangenuchten
• [SYSS-2015-060] Thru Managed File Transfer Portal 9.0.2 - Improperly Implemented Security Check for Standard (CWE-358)
  • From: erlijn . vangenuchten
• [SYSS-2015-064] Thru Managed File Transfer Portal 9.0.2 - Insecure Direct Object Reference (CWE-932)
  • From: erlijn . vangenuchten
• [SYSS-2015-062] ownCloud - Information Exposure Through Directory Listing (CWE-548)
  • From: erlijn . vangenuchten
• [SYSS-2015-055] Novell Filr - Cross-Site Scripting (CWE-79)
  • From: erlijn . vangenuchten
• [SYSS-2015-058] Thru Managed File Transfer Portal 9.0.2 - Insecure Direct Object Reference (CWE-932)
  • From: erlijn . vangenuchten
• [SECURITY] [DSA 3484-1] xdelta3 security update
  • From: Salvatore Bonaccorso
• CVE-2015-7521: Apache Hive authorization bug disclosure (update)
  • From: Sushanth Sowmyan
• [security bulletin] HPSBUX03437 SSRT110025 rev.1 - HP-UX IPFilter, Remote Denial of Service (DoS)
  • From: security-alert
• [SECURITY] [DSA 3482-1] libreoffice security update
  • From: Sebastien Delafond
• RCE via CSRF in osCommerce
  • From: High-Tech Bridge Security Research
• SSO Authentication Bypass and Website Takeover in DOKEOS
  • From: High-Tech Bridge Security Research
• SQL Injection in webSPELL
  • From: High-Tech Bridge Security Research
• SQL Injection in TestLink
  • From: High-Tech Bridge Security Research
• SQL Injection in WeBid
  • From: High-Tech Bridge Security Research
• SQL Injection in Osclass
  • From: High-Tech Bridge Security Research
• RCE via CSRF in osCmax
  • From: High-Tech Bridge Security Research
• Redaxo CMS contains multiple vulnerabilities
  • From: LSE-Advisories
• [SECURITY] [DSA 3481-1] glibc security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 3480-1] eglibc security update
  • From: Salvatore Bonaccorso
• CSRF and XsS In Manage Engine oputils
  • From: kingkaustubh
• Privilege escalation Vulnerability in ManageEngine oputils
  • From: kingkaustubh
• Missing Function Level Access control Vulnerability in OPutils
  • From: kingkaustubh
• [SECURITY] [DSA 3478-1] libgcrypt11 security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 3479-1] graphite2 security update
  • From: Moritz Muehlenhoff
• CyberCop Scanner Smbgrind v5.5 Buffer Overflow
  • From: hyp3rlinx
• phpMyBackupPro v.2.5 Remote Command Execution / CSRF
  • From: hyp3rlinx
• phpMyBackupPro v.2.5 Arbitrary File Upload
  • From: hyp3rlinx
• phpMyBackupPro v.2.5 XSS
  • From: hyp3rlinx
• BFS-SA-2016-001: FireEye Detection Evasion and Whitelisting of Arbitrary Malware
  • From: Blue Frost Security Research Lab
• Xymon: Critical security issues in all versions prior to 4.3.25
  • From: Xymon Software
• [SECURITY] [DSA 3477-1] iceweasel security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 3476-1] postgresql-9.4 security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 3475-1] postgresql-9.1 security update
  • From: Salvatore Bonaccorso
• KL-001-2016-001 : Arris DG1670A Cable Modem Remote Command Execution
  • From: KoreLogic Disclosures
• [ERPSCAN-15-032] SAP PCo agent – DoS vulnerability
  • From: ERPScan inc
• [ERPSCAN-15-031] SAP MII – Encryption Downgrade vulnerability
  • From: ERPScan inc
• [SECURITY] [DSA 3474-1] libgcrypt20 security update
  • From: Salvatore Bonaccorso
• HD Video Player v2.5 iOS - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• CVE-2015-0061 and CVE-2015-0063 (MS16-009/MS16-011)
  • From: Berend-Jan Wever
• [slackware-security] mozilla-firefox (SSA:2016-042-01)
  • From: Slackware Security Team
• [SECURITY] [DSA 3473-1] nginx security update
  • From: Salvatore Bonaccorso
• Re: [oss-security] HTTPS Only (Open Source, Python)
  • From: P J P
• Re: OLE DB Provider for Oracle multiple DLL side loading vulnerabilities
  • From: Securify B.V.
• Duplicator Wordpress Plugin - Source Code And Database Dump Via CSRF Vulnerability
  • From: Ratio Sec
• Re: [FD] [CVE-2016-0602, CVE-2016-0603] Executable installers are vulnerable^WEVIL (case 24): Oracle Java 6/7/8 SE and VirtualBox
  • From: Jason Hellenthal
• Re: OLE DB Provider for Oracle multiple DLL side loading vulnerabilities
  • From: Securify B.V.
• MapsUpdateTask Task DLL side loading vulnerability
  • From: Securify B.V.
• BDA MPEG2 Transport Information Filter DLL side loading vulnerability
  • From: Securify B.V.
• NPS Datastore server DLL side loading vulnerability
  • From: Securify B.V.
• Cisco Security Advisory: Cisco ASA Software IKEv1 and IKEv2 Buffer Overflow Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Remote Code Execution in Exponent
  • From: High-Tech Bridge Security Research
• Apache Sling Framework v2.3.6 - Information Disclosure Vulnerability
  • From: Vulnerability Lab
• MyScript Memo v3.0 iOS - (Mail) Persistent Vulnerability
  • From: Vulnerability Lab
• File Sharing Manager v1.0 iOS - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• Getdpd Bug Bounty #6 - (Import - FTP) Persistent Vulnerability
  • From: Vulnerability Lab
• VP2016-001: Remote Command Execution in File Replication Pro
  • From: Vantage Point Security
• SEC Consult SA-20160210-0 :: Yeager CMS Multiple Vulnerabilities
  • From: SEC Consult Vulnerability Lab
• ManageEngine Eventlog Analyzer Privilege Escalation v10.8
  • From: graphx
• dotDefender Firewall CSRF
  • From: hyp3rlinx
• Safebreach adsivory: Node.js HTTP Response Splitting (CVE-2016-2216)
  • From: Amit Klein
• ESA-2016-010 EMC Documentum xCP Security Update for Multiple Vulnerabilities
  • From: Security Alert
• Privilege escalation Vulnerability in ManageEngine Network Configuration Management
  • From: kingkaustubh
• [slackware-security] curl (SSA:2016-039-01)
  • From: Slackware Security Team
• [slackware-security] libsndfile (SSA:2016-039-02)
  • From: Slackware Security Team
• [SECURITY] [DSA 3472-1] wordpress security update
  • From: Salvatore Bonaccorso
• [SECURITY] [DSA 3470-1] qemu-kvm security update
  • From: Sebastien Delafond
• [SECURITY] [DSA 3469-1] qemu security update
  • From: Sebastien Delafond
• [SECURITY] [DSA 3471-1] qemu security update
  • From: Sebastien Delafond
• WordPress WP User Frontend Plugin [Unrestricted File Upload]
  • From: Panagiotis Vagenas
• WordPress WooCommerce - Store Toolkit Plugin [Privilege Escalation]
  • From: Panagiotis Vagenas
• PressePortal NewsAktuell (DPA) - Multiple Vulnerabilities
  • From: Vulnerability Lab
• Ebay Inc (Pages) - Client Side Cross Site Scripting Vulnerabilities
  • From: Vulnerability Lab
• Alsovalue CMS 2016Q1 - SQL Injection Web Vulnerability
  • From: Vulnerability Lab
• Getdpd BB #4 - (name) Persistent Validation Vulnerability
  • From: Vulnerability Lab
• Getdpd BB #5 - Persistent Filename Vulnerability
  • From: Vulnerability Lab
• JavaScript Anywhere v3.0.4 iOS - Persistent Vulnerability
  • From: Vulnerability Lab
• Local Microsoft Windows 7 / 8 / 10 Buffer Overflow via Third-Party USB-Driver (ser2co64.sys)
  • From: Ralf Spenneberg
• Symphony CMS multiple vulnerabilities
  • From: Filippo Cavallarin
• WordPress User Meta Manager Plugin [Information Disclosure]
  • From: Panagiotis Vagenas
• Executable installers are vulnerable^WEVIL (case 25): WinRAR's installer and self-extractors allow arbitrary (remote) code execution and escalation of privilege
  • From: Stefan Kanthak
• CFP: SIN 2016 - 9th International Conference on Security of Information and Networks
  • From: Hossain Shahriar
• [SECURITY] [DSA 3468-1] polarssl security update
  • From: Sebastien Delafond
• [SECURITY] [DSA 3467-1] tiff security update
  • From: Salvatore Bonaccorso
• Multiple vulnerabilities in Open Real Estate v 1.15.1
  • From: Simon Waters (Surevine)
• [security bulletin] HPSBGN03430 rev.3 - HP ArcSight products, Local Elevation of Privilege
  • From: security-alert
• [CVE-2016-0602, CVE-2016-0603] Executable installers are vulnerable^WEVIL (case 24): Oracle Java 6/7/8 SE and VirtualBox
  • From: Stefan Kanthak
• [security bulletin] HPSBGN03434 rev.1 - HP Continuous Delivery Automation using Java Deserialization, Remote Arbitrary Code Execution
  • From: security-alert
• [security bulletin] HPSBHF03431 rev.2 - HPE Network Switches, local Bypass of Security Restrictions, Indirect Vulnerabilities
  • From: security-alert
• CVE-2015-3252: Apache CloudStack VNC authentication issue
  • From: John Kinsella
• CVE-2015-3251: Apache CloudStack VM Credential Exposure
  • From: John Kinsella
• [SECURITY] [DSA 3466-1] krb5 security update
  • From: Salvatore Bonaccorso
• WordPress User Meta Manager Plugin [Blind SQLI]
  • From: pan . vagenas
• WordPress User Meta Manager Plugin [Privilege Escalation]
  • From: pan . vagenas
• Apple iOS v9.1, 9.2 & 9.2.1 - Application Update Loop Pass Code Bypass
  • From: Vulnerability Lab
• [slackware-security] mozilla-firefox (SSA:2016-034-01)
  • From: Slackware Security Team
• [slackware-security] openssl (SSA:2016-034-03)
  • From: Slackware Security Team
• [slackware-security] php (SSA:2016-034-04)
  • From: Slackware Security Team
• [slackware-security] MPlayer (SSA:2016-034-02)
  • From: Slackware Security Team
• AST-2016-002: File descriptor exhaustion in chan_sip
  • From: Asterisk Security Team
• AST-2016-003: Remote crash vulnerability when receiving UDPTL FAX data.
  • From: Asterisk Security Team
• AST-2016-001: BEAST vulnerability in HTTP server
  • From: Asterisk Security Team
• [CERT 777024 / CVE-2016-1524/5]: RCE and file download in Netgear NMS300
  • From: Pedro Ribeiro
• Dell SecureWorks iOS Application - MITM SSL Certificate Vulnerability
  • From: David Coomber
• Cisco Security Advisory: Cisco Nexus 9000 Series ACI Mode Switch ICMP Record Route Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco ASA-CX and Cisco Prime Security Manager Privilege Escalation Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Application Policy Infrastructure Controller Access Control Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Security Advisories
  • From: Portcullis Advisories
• Soso Transfer v1.1 iOS - Denial of Service Vulnerability
  • From: Vulnerability Lab
• File Manager PRO v1.3 iOS - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• SimpleView CRM - Client Side Open Redirect Vulnerability
  • From: Vulnerability Lab
• Getdpd Bug Bounty #1 - (asm0option0) Persistent Web Vulnerability
  • From: Vulnerability Lab
• Compal ConnectBox Wireless - Passphrase Settings Filter Bypass Vulnerability
  • From: Vulnerability Lab
• Mezzanine CMS 4.1.0 XSS
  • From: hyp3rlinx
• Mezzanine CMS 4.1.0 Arbitrary File Upload
  • From: hyp3rlinx
• ASUS RT-N56U Persistent XSS
  • From: graphx
• TimeClock - Multiple SQL Injections
  • From: marcelabx
• [SECURITY] [DSA 3465-1] openjdk-6 security update
  • From: Moritz Muehlenhoff
• MailPoet Newsletter 2.6.19 - Security Advisory - Reflected XSS
  • From: Onur Yilmaz
• Re: VMWare Zimbra Mailer | DKIM longterm Mail Replay vulnerability
  • From: Phil Pearl
• A tale of openssl_seal(), PHP and Apache2handle
  • From: s3810
• WebKitGTK+ Security Advisory WSA-2016-0001
  • From: Carlos Alberto Lopez Perez
• File Hub v3.3 iOS (Wifi) - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• Netlife Photosuite Pro - Client Side Cross Site Scripting Vulnerability
  • From: Vulnerability Lab
• [SECURITY] [DSA 3461-1] freetype security update
  • From: Sebastien Delafond
• [SECURITY] [DSA 3462-1] radicale security update
  • From: Yves-Alexis Perez
• [SECURITY] [DSA 3463-1] prosody security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 3464-1] rails security update
  • From: Moritz Muehlenhoff
• eClinicalWorks (CCMR) - Multiple Vulnerabilities
  • From: jerold
• Executable installers are vulnerable^WEVIL (case 23): WinImage's installer and self-extractors allow arbitrary (remote) code execution and escalation of privilege
  • From: Stefan Kanthak
• WP-Comment-Rating XSS Vulnerability
  • From: Rahul Pratap Singh
• OpenXchange | Information Disclosure
  • From: t . schughart
• VMWare Zimbra Mailer | DKIM longterm Mail Replay vulnerability
  • From: t . schughart
• [SECURITY] [DSA 3460-1] privoxy security update
  • From: Sebastien Delafond
• CVE-2015-5344 - Apache Camel medium disclosure vulnerability
  • From: Claus Ibsen
• FreeBSD Security Advisory FreeBSD-SA-16:11.openssl
  • From: FreeBSD Security Advisories
• [security bulletin] HPSBHF03419 rev.3 - HPE Networking Products, Remote Denial of Service (DoS), Unauthorized Access
  • From: security-alert
• Cross-Site Request Forgery (CSRF) Vulnerability in ManageEngine Network
  • From: kingkaustubh
• [security bulletin] HPSBGN03533 rev.1 - HP Enterprise Cloud Service Automation and Codar, Remote Unauthorized Modification
  • From: security-alert
• ManageEngine Eventlog Analyzer v4-v10 Privilege Esacalation
  • From: graphx
• [security bulletin] HPSBOV03540 rev.1 - HPE OpenVMS TCPIP Bind Services and OpenVMS TCPIP IPC Services for OpenVMS, Remote Disclosure of Information, Execution of Code, Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBHF03539 rev.1 - HPE VCX running OpenSSH or BIND, Remote Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBHF03510 rev.1 - HP Integrated Lights-Out 2/3/4, Remote Unauthorized Modification
  • From: security-alert
• [security bulletin] HPSBGN03542 rev.1 - HPE Operations Manager for Windows using Java Deserialization, Remote Arbitrary Code Execution
  • From: security-alert
• Netlife Photosuite Pro - Client Side Cross Site Scripting Vulnerability
  • From: Vulnerability Lab
• ProjectSend multiple vulnerabilities
  • From: Filippo Cavallarin
• [security bulletin] HPSBHF03538 rev.1 - HPE iMC Service Health Manager (SHM) and iMC PLAT running Adobe Flash, Remote Code Execution, Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBHF03535 rev.3 - HPE iMC Service Health Manager (SHM) and iMC PLAT running Adobe Flash, Multiple Remote Vulnerabilities
  • From: security-alert
• CVE-2015-7521: Apache Hive authorization bug disclosure
  • From: Sushanth Sowmyan
• [SECURITY] [DSA 3459-1] mysql-5.5 security update
  • From: Salvatore Bonaccorso
• New Era Company CMS - (id) SQL Injection Vulnerability
  • From: Vulnerability Lab
• Trend Micro Direct Pass - Filter Bypass & Persistent Web Vulnerability
  • From: Vulnerability Lab
• HCA0005 - Liberty Global - Horizon HD STB - predictable WiFi passphrase
  • From: Hacking Corporation Sàrl
• [SECURITY] [DSA 3458-1] openjdk-7 security update
  • From: Moritz Muehlenhoff
• [SECURITY] [DSA 3457-1] iceweasel security update
  • From: Moritz Muehlenhoff
• Log2Space Central v 6.2 Multiple XSS Vulnerability
  • From: Rahul Pratap Singh
• Cisco Security Advisory: Cisco RV220 Management Authentication Bypass Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Cisco Security Advisory: Cisco Wide Area Application Service CIFS DoS Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• Netgear GS105Ev2 - Multiple Vulnerabilities
  • From: benedikt . westermann
• los818 CMS 2016 Q1 - SQL Injection Web Vulnerability
  • From: Vulnerability Lab
• WebMartIndia CMS 2016 Q1 - SQL Injection Vulnerability
  • From: Vulnerability Lab
• Classic Infomedia (Login) - Auth Bypass Web Vulnerability
  • From: Vulnerability Lab
• Kleefa v1.7 (IR) - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• Ebay Magento Bug Bounty #2 - Persistent Web Vulnerability
  • From: Vulnerability Lab
• Telegram (API) - Cross Site Request Forgery Vulnerabilities
  • From: Vulnerability Lab
• Barracuda Networks Bug Bounty #38 Message Archiver - Multiple Vulnerabilities
  • From: Vulnerability Lab
• Apple WatchOS v2.1 - Denial of Service Vulnerability
  • From: Vulnerability Lab
• Secure Item Hub v1.0 iOS - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• BK Mobile CMS SQLi and XSS Vulnerability
  • From: Rahul Pratap Singh
• [SECURITY] [DSA 3456-1] chromium-browser security update
  • From: Michael Gilbert
• [SECURITY] [DSA 3455-1] curl security update
  • From: Alessandro Ghedini
• [ERPSCAN-15-024] SAP HANA hdbindexserver - Memory corruption
  • From: ERPScan inc
• FreeBSD Security Advisory FreeBSD-SA-16:10.linux
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-16:09.ntp
  • From: FreeBSD Security Advisories
• FreeBSD Security Advisory FreeBSD-SA-16:08.bind
  • From: FreeBSD Security Advisories
• [SECURITY] [DSA 3454-1] virtualbox security update
  • From: Moritz Muehlenhoff
• WP-Ultimate CSV Importer XSS Vulnerability
  • From: Rahul Pratap Singh
• [security bulletin] HPSBGN03537 rev.1 - HPE IceWall Federation Agent and IceWall File Manager running libXML2, Remote or Local Denial of Service (DoS)
  • From: security-alert
• [security bulletin] HPSBGN03536 rev.1 - HP IceWall Products running OpenSSL, Remote and Local Denial of Service (DoS)
  • From: security-alert
• PHP LiteSpeed SAPI out of boundaries read due to missing input validation
  • From: Imre RAD
• [CORE-2016-0002] - Lenovo ShareIT Multiple Vulnerabilities
  • From: CORE Advisories Team
• Authentication bypass in PHP File Manager 0.9.8
  • From: Imre Rad
• APPLE-SA-2016-01-25-1 tvOS 9.1.1
  • From: Apple Product Security
• Magento 1.9.x Multiple Man-In The Middle
  • From: cxsecurity
• glibc catopen() Multiple unbounded stack allocations
  • From: cxsecurity
• [SECURITY] [DSA 3453-1] mariadb-10.0 security update
  • From: Salvatore Bonaccorso
• WP Easy Gallery v4.1.4 Stored XSS Vulnerability
  • From: Rahul Pratap Singh
• PHP LiteSpeed SAPI secret key improper disposal
  • From: Imre RAD
• PHP-FPM fpm_log.c memory leak and buffer overflow
  • From: Imre RAD
• Remote shutdown vulnerability in Buffalo NAS (Linkstation 420)
  • From: zemnmez
• ZyXel WAP3205 v1 Multiple XSS
  • From: graphx
• HP ToComMsg DLL side loading vulnerability
  • From: Securify B.V.
• LEADTOOLS ActiveX control multiple DLL side loading vulnerabilities
  • From: Securify B.V.
• HP LaserJet Fax Preview DLL side loading vulnerability
  • From: Securify B.V.
• XMB - eXtreme Message Board v1.9.11.13 Weak Crypto
  • From: hyp3rlinx
• imageone Cms Multiple vulnerabilities
  • From: iedb . team
• [SECURITY] [DSA 3452-1] claws-mail security update
  • From: Ben Hutchings
• imageone Cms Multiple vulnerabilities
  • From: iedb . team
• January 2016 - Bamboo - Critical Security Advisory
  • From: David Black
• [SECURITY] [DSA 3451-1] fuse security update
  • From: Yves-Alexis Perez
• Executable installers are vulnerable^WEVIL (case 3): WiX Toolset's bootstrapper "burn.exe"
  • From: Stefan Kanthak
• SEC Consult SA-20160121-0 :: Deliberately hidden backdoor account in AMX (Harman Professional) devices
  • From: SEC Consult Vulnerability Lab
• Oracle HtmlConverter.exe Buffer Overflow
  • From: hyp3rlinx
• QuickAuth - Google Authenticator Pebble app vulnerable to MITM attack when configuring TOTP keys
  • From: issues
• Re: [CVE-2016-1919] Weak eCryptFS Key generation from user password on KNOX 1.0 / Android 4.3
  • From: urikanonov
• Re: [CVE-2016-1920] VPN Man-in-the-Middle due to shared certificate store on KNOX 1.0 / Android 4.3
  • From: urikanonov
• Cisco Security Advisory: Cisco Modular Encoding Platform D9036 Software Default Credentials Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [SECURITY] [DSA 3450-1] ecryptfs-utils security update
  • From: Salvatore Bonaccorso
• Cisco Security Advisory: Cisco Unified Computing System Manager and Cisco Firepower 9000 Remote Command Execution Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [CVE-2016-1926] XSS in Greenbone Security Assistant &#8805; 6.0.0 and < 6.0.8
  • From: bugtraq
• LiteSpeed Web Server - Security Advisory - HTTP Header Injection Vulnerability
  • From: Onur Yilmaz
• APPLE-SA-2016-01-19-3 Safari 9.0.3
  • From: Apple Product Security
• APPLE-SA-2016-01-19-2 OS X El Capitan 10.11.3 and Security Update 2016-001
  • From: Apple Product Security
• APPLE-SA-2016-01-19-1 iOS 9.2.1
  • From: Apple Product Security
• [SECURITY] [DSA 3449-1] bind9 security update
  • From: Salvatore Bonaccorso
• [security bulletin] HPSBGN03534 rev.1 - HPE Performance Center using Microsoft Report Viewer, Remote Disclosure of Information, Cross-Site Scripting (XSS)
  • From: security-alert
• Executable installers are vulnerable^WEVIL (case 21): Panda Security's installers allow arbitrary (remote) code execution AND escalation of privilege with PANDAIS16.exe
  • From: Stefan Kanthak
• [CORE-2016-0001] - Intel Driver Update Utility MiTM
  • From: CORE Advisories Team
• Quick Cart v6.6 XSS Vulnerability
  • From: Rahul Pratap Singh
• [SECURITY] [DSA 3448-1] linux security update
  • From: Salvatore Bonaccorso
• Quick CMS v 6.1 XSS Vulnerability
  • From: Rahul Pratap Singh
• Advanced Electron Forum v1.0.9 RFI / CSRF
  • From: hyp3rlinx
• Advanced Electron Forum v1.0.9 Persistent XSS
  • From: hyp3rlinx
• Advanced Electron Forum v1.0.9 CSRF
  • From: hyp3rlinx
• [SECURITY] [DSA 3447-1] tomcat7 security update
  • From: Salvatore Bonaccorso