bugtraq mailing list - 2011/11

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2011/11

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 10	² 5	³ 8	⁴ 5	⁵	⁶
⁷ 4	⁸ 12	⁹ 16	¹⁰ 5	¹¹	¹²	¹³
¹⁴ 20	¹⁵ 3	¹⁶ 1	¹⁷ 25	¹⁸ 3	¹⁹	²⁰
²¹ 23	²² 3	²³ 13	²⁴ 2	²⁵ 2	²⁶	²⁷
²⁸ 14	²⁹ 5	³⁰ 10

Messages by day:

November 1 (10 messages)

DDIVRT-2011-33 IBM WebSphere Application Server 'help' Servlet Plug-in Bundle Directory Traversal [CVE-2011-1359] (ddivulnalert@...frontline.com)
CVE-2011-3682: 2WIRE-SINGTEL 2701HGV-E/2700HGV-2/2700HG GATEWAY ROUTER MANAGEMENT AND DIAGNOSTIC CONSOLE VULNERABILITY (tan@...chuen.com)
IBSng all version Cross-Site Scripting Vulnerability (apa-iutcert@...c.ir)
[ GLSA 201111-01 ] Chromium, V8: Multiple vulnerabilities (Alex Legler <a3li@...too.org>)
GDTelcom Speedtest ActiveX Control "FTPDownLoad Class"-ActiveX.dll Remote Denial of Service Vulnerability (demonalex@....com)
[security bulletin] HPSBMU02712 SSRT100649 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code (security-alert@...com)
[ MDVSA-2011:162 ] kdelibs4 (security@...driva.com)
XSS Vulnerabilities in eFront (Netsparker Advisories <advisories@...itunasecurity.com>)
XSS and SQL Injection Vulnerabilities on Symphony CMS 2.2.3 (Netsparker Advisories <advisories@...itunasecurity.com>)
Oracle Hyperion Financial Management TList6 ActiveX Control Remote Code Execution Vulnerability (nospam@...il.it)

November 2 (5 messages)

Multiple vulnerabilities in Efront (advisory@...ridge.ch)
[ MDVSA-2011:163 ] phpldapadmin (security@...driva.com)
NGS00042 Technical Advisory: Solaris 11 USB hub class descriptor kernel stack overflow (CVE-2011-2295) ("Research@...Secure" <research@...secure.com>)
[ MDVSA-2011:164 ] wireshark (security@...driva.com)
Cisco Security Advisory: Cisco Small Business SRP500 Series Command Injection Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.…)

November 3 (8 messages)

Serendipity 'serendipity[filter][bp.ALT]' Cross-Site Scripting vulnerability (sschurtz@...nline.de)
Serendipity Plugin 'Karma Ranking' Multiple Cross-Site Scripting (sschurtz@...nline.de)
ESA-2011-032: EMC Documentum eRoom arbitrary file upload vulnerability. (<Security_Alert@....com>)
CmyDocument Content Management Application - XSS Vulnerabilities (demonalex@....com)
[security bulletin] HPSBMU02704 SSRT100619 rev.1 - HP OpenView Network Node Manager (OV NNM) Running Apache, Remote Denial of Service (DoS… (security-alert@...com)
[ MDVSA-2011:165 ] php (security@...driva.com)
ESA-2011-035: RSA, The Security Division of EMC, announces the release of Hotfix 6 with security updates for RSA Key Manager Appliance… (<Security_Alert@....com>)
[ MDVSA-2011:166 ] php (security@...driva.com)

November 4 (5 messages)

Multiple BSD libc/regcomp(3) Multiple Vulnerabilities (cxib@...urityreason.com)
[security bulletin] HPSBOV02470 SSRT080123 rev.1 - HP TCP/IP Services for OpenVMS Running SMTP Server, Remote Denial of Service (DoS) (security-alert@...com)
[security bulletin] HPSBOV02467 SSRT090152 rev.1 - HP TCP/IP Services for OpenVMS Running POP or IMAP, Remote Unauthorized Access (security-alert@...com)
[SECURITY] [DSA 2334-1] mahara security update (Moritz Muehlenhoff <jmm@...ian.org>)
[ MDVSA-2011:167 ] gimp (security@...driva.com)

November 7 (4 messages)

Malware detection evasion in antivirus software (reset557 <reset557@...glemail.com>)
[ GLSA 201111-02 ] Oracle JRE/JDK: Multiple vulnerabilities (Alex Legler <a3li@...too.org>)
[SECURITY] [DSA 2335-1] man2html security update (Nico Golde <nico@...lde.de>)
[SECURITY] [DSA 2337-1] xen security update (Thijs Kinkhorst <thijs@...ian.org>)

November 8 (12 messages)

foofus.net security advisory - Lexmark Multifunction Printer Information Leakage (percx@...fus.net)
[SECURITY] [DSA 2338-1] moodle security update (Moritz Muehlenhoff <jmm@...ian.org>)
TWSL2011-017: Multiple Vulnerabilities in Merethis Centreon (Trustwave Advisories <TrustwaveAdvisories@...stwave.com>)
[SECURITY] [DSA 2339-1] nss security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2336-1] ffmpeg security update (Yves-Alexis Perez <corsac@...ian.org>)
[SECURITY] [DSA 2340-1] postgresql security update (Thijs Kinkhorst <thijs@...ian.org>)
Cisco CUCM - Multiple Vulnerabilities (entomology <entomology@...urity-labs.com>)
IPv6 security (slides and training) (Fernando Gont <fgont@...networks.com>)
New online security challenge - GotWurzel ("Ivan Buetler" <ivan.buetler@...c.ch>)
[security bulletin] HPSBHF02706 SSRT100613 rev.1 - HP Integrated Lights-Out iLO2 and iLO3 running SSL/TLS, Denial of Service (DoS), Unauth… (security-alert@...com)
osCSS2 "_ID" parameter Local file inclusion (sschurtz@...nline.de)
[SECURITY] CVE-2011-3376 Apache Tomcat - Privilege Escalation via Manager app (Mark Thomas <markt@...che.org>)

November 9 (16 messages)

OrderSys <= 1.6.4 Sql Injection Vulnerabilities (muuratsalo experimental hack lab <muuratsalo@...il.com>)
LabStoRe <= 1.5.4 Sql Injection Vulnerabilities (muuratsalo experimental hack lab <muuratsalo@...il.com>)
APPLE-SA-2011-11-08-1 Java for Mac OS X 10.7 Update 1 and Java for Mac OS X 10.6 Update 6 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[CAL-2011-0054]Adobe Shockwave Player Director File Parsing data of rcsl chunk multiple DOS vulnerabilities (Code Audit Labs <vulnhunt@...il.com>)
[CAL-2011-0052]Adobe Shockwave Player Director File Parsing PAMM memory corruption vulnerability (Code Audit Labs <vulnhunt@...il.com>)
Local file inclusion in VtigerCRM (advisory@...ridge.ch)
LabWiki <= 1.1 Multiple Vulnerabilities (muuratsalo experimental hack lab <muuratsalo@...il.com>)
Multiple Cross-Site-Scripting vulnerabilities in Dolibarr 3.1.0 (security@...oserve.de)
Re: LabWiki <= 1.1 Multiple Vulnerabilities (muuratsalo experimental hack lab <muuratsalo@...il.com>)
Multiple security vulnerabilities in AShop (security@...oserve.de)
DC4420 - London DEFCON - November 2011 meet - Tuesday 15th November (Major Malfunction <majormal@...ate-radio.org>)
[ MDVSA-2011:168 ] apache (security@...driva.com)
Cisco Security Advisory: Cisco TelePresence System Integrator C Series and Cisco TelePresence EX Series Device Default R… (Cisco Systems Product Security Incident…)
[SECURITY] [DSA 2341-1] iceweasel security update (Moritz Muehlenhoff <jmm@...ian.org>)
[ MDVSA-2011:168 ] apache (security@...driva.com)
[SECURITY] [DSA 2343-1] openssl security update (Raphael Geissert <geissert@...ian.org>)

November 10 (5 messages)

[SECURITY] [DSA 2342-1] iceape security update (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Local file inclusion in VtigerCRM (n0b0d13s@...il.com)
Re: foofus.net security advisory - Lexmark Multifunction Printer Information Leakage (Sergio Gelato <Sergio.Gelato@...ro.su.se>)
[security bulletin] HPSBMU02708 SSRT100633 rev.1 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Cross S… (security-alert@...com)
[security bulletin] HPSBMA02659 SSRT100440 rev.2 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Unautho… (security-alert@...com)

November 14 (20 messages)

XSS vulnerability in Joomla 1.6.3 (Netsparker Advisories <advisories@...itunasecurity.com>)
Re: Re: foofus.net security advisory - Lexmark Multifunction Printer Information Leakage (percx@...fus.net)
[security bulletin] HPSBMU02714 SSRT100244 rev.2 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Unautho… (security-alert@...com)
APPLE-SA-2011-11-10-1 iOS 5.0.1 Software Update (Apple Product Security <product-security-noreply@...ts.apple.com>)
CORE-2011-0919: Apple OS X Sandbox Predefined Profiles Bypass (CORE Security Technologies Advisories <advisories@...esecurity.com>)
[FOREGROUND SECURITY 2011-004] Infoblox NetMRI 6.2.1 Multiple Cross-Site Scripting (XSS) vulnerabilities (Jose Carlos de Arriba <jcarriba@...egroundsecurity.co…)
APPLE-SA-2011-11-10-2 Time Capsule and AirPort Base Station (802.11n) Firmware 7.6 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[security bulletin] HPSBST02722 SSRT100279 rev.1 - HP StorageWorks P4000 Virtual SAN Appliance, Execution of Arbitrary Code (security-alert@...com)
[security bulletin] HPSBHF02721 SSRT100605 rev.1 - HP Directories Support for ProLiant Management Processors for Integrated Lights-Out iLO… (security-alert@...com)
[ MDVSA-2011:170 ] java-1.6.0-openjdk (security@...driva.com)
iGuard Biometric Access Control - Multiple Vulnerabilities ("research@...nerability-lab.com" <research@...nerability-lab.com>)
[SECURITY] [DSA 2344-1] python-django-piston security update (Florian Weimer <fw@...eb.enyo.de>)
[ GLSA 201111-03 ] OpenTTD: Multiple vulnerabilities (Tim Sammut <underling@...too.org>)
[ GLSA 201111-04 ] phpDocumentor: Function call injection (Tim Sammut <underling@...too.org>)
[ MDVSA-2011:171 ] networkmanager (security@...driva.com)
[ MDVSA-2011:172 ] libreoffice (security@...driva.com)
[ MDVSA-2011:173 ] openssl0.9.8 (security@...driva.com)
[Announcement] ClubHack Mag Issue 22- Nov 2011 Released (abhijeet@...bhack.com)
[Announcement] ClubHack 2011 Hacking and Security Conference (abhijeet@...bhack.com)
Wordpress Zingiri Web Shop Plugin <= 2.2.3 Remote Code Execution Vulnerability (n0b0d13s@...il.com)

November 15 (3 messages)

[ MDVSA-2011:174 ] graphite2 (security@...driva.com)
APPLE-SA-2011-11-14-1 iTunes 10.5.1 (Apple Product Security <product-security-noreply@...le.com>)
[ MDVSA-2011:175 ] poppler (security@...driva.com)

November 16 (1 message)

[SECURITY] [DSA 2346-1] proftpd-dfsg security update (Florian Weimer <fw@...eb.enyo.de>)

November 17 (25 messages)

FreeWebshop <= 2.2.9 R2 (ajax_save_name.php) Remote Code Execution Vulnerability (n0b0d13s@...il.com)
wordpress Flexible Custom Post Type plugin Xss Vulnerabilities (Amir@...st.ir)
wordpress Flexible Custom Post Type plugin Xss Vulnerabilities (Amir@...st.ir)
[security bulletin] HPSBOV02470 SSRT080123 rev.2 - HP TCP/IP Services for OpenVMS Running SMTP Server, Remote Denial of Service (DoS) (security-alert@...com)
ZDI-11-329 : InduSoft WebStudio CEServer Operation 0x15 Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-330 : InduSoft WebStudio Unauthenticated Remote Operations Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[SECURITY] [DSA 2346-2] proftpd-dfsg regression fix (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 2347-1] bind9 security update (Florian Weimer <fw@...eb.enyo.de>)
CA20111116-01: Security Notice for CA Directory ("Kotas, Kevin J" <Kevin.Kotas@...com>)
[ MDVSA-2011:176 ] bind (security@...driva.com)
Secunia Research: DVR Remote ActiveX Control DVRobot Library Loading Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Tiki Wiki CMS Groupware Multiple XSS vulnerabilities (security@...oserve.de)
[DSECRG-11-030] SAP NetWeaver JavaMailExamples - XSS (Alexandr Polyakov <alexandr.polyakov@...c.ru>)
[DSECRG-11-031] SAP RFC EPS_DELETE_FILE - Authorisation bypass, smbrelay (Alexandr Polyakov <alexandr.polyakov@...c.ru>)
[DSECRG-11-032] SAP NetWeaver ipcpricing - information disclose (Alexandr Polyakov <alexandr.polyakov@...c.ru>)
[DSECRG-11-034] SAP NetWeaver J2EE MeSync – information disclose (Alexandr Polyakov <alexandr.polyakov@...c.ru>)
[DSECRG-11-036] SAP NetWaver Virus Scan Interface - multiple XSS (Alexandr Polyakov <alexandr.polyakov@...c.ru>)
[DSECRG-11-037] SAP BW Doc - Multiple XSS (Alexandr Polyakov <alexandr.polyakov@...c.ru>)
[DSECRG-11-038] SAP RSTXSCRP report - smb relay vulnerability (Alexandr Polyakov <alexandr.polyakov@...c.ru>)
[DSECRG-11-039] SAP NetWeaver TH_GREP module - Code injection vulnerability (NEW) (Alexandr Polyakov <alexandr.polyakov@...c.ru>)
[DSECRG-11-040] SAP NetWeaver SPML - XML CSRF user creation (Alexandr Polyakov <alexandr.polyakov@...c.ru>)
[DSECRG-11-041] SAP NetWeaver - Authentication bypass (Verb Tampering) (Alexandr Polyakov <alexandr.polyakov@...c.ru>)
[DSECRG-11-033] SAP Crystal Report Server pubDBLogon - Linked ХSS vulnerability (Alexandr Polyakov <alexandr.polyakov@...c.ru>)
Multiple vulnerabilities in webERP (advisory@...ridge.ch)
Cross-Site Scripting Vuln in Zoho ManageEngine ADSelfServicePlus (James Webb <james.webb@...apath.com>)

November 18 (3 messages)

VMSA-2011-0014 VMware vCenter Update Manager fix for Jetty Web server addresses directory traversal vulnerability (VMware Security Team <security@...are.com>)
[ MDVSA-2011:176-1 ] bind (security@...driva.com)
[ MDVSA-2011:176-2 ] bind (security@...driva.com)

November 21 (23 messages)

Blogs manager <= 1.101 SQL Injection Vulnerability (muuratsalo experimental hack lab <muuratsalo@...il.com>)
Valid tiny-erp <= 1.6 SQL Injection Vulnerability (muuratsalo experimental hack lab <muuratsalo@...il.com>)
Freelancer calendar <= 1.01 SQL Injection Vulnerability (muuratsalo experimental hack lab <muuratsalo@...il.com>)
wordpress Lanoba Social Plugin Xss Vulnerabilities (Amir@...st.ir)
[SECURITY] [DSA 2349-1] spip security update (Moritz Muehlenhoff <jmm@...ian.org>)
Support Incident Tracker <= 3.65 (translate.php) Remote Code Execution Vulnerability (n0b0d13s@...il.com)
[ GLSA 201111-05 ] Chromium, V8: Multiple vulnerabilities (Tim Sammut <underling@...too.org>)
[ GLSA 201111-06 ] MaraDNS: Arbitrary code execution (Alex Legler <a3li@...too.org>)
[ GLSA 201111-07 ] TinTin++: Multiple vulnerabilities (Alex Legler <a3li@...too.org>)
[ GLSA 201111-08 ] radvd: Multiple vulnerabilities (Alex Legler <a3li@...too.org>)
[ GLSA 201111-09 ] Perl Safe module: Arbitrary Perl code injection (Alex Legler <a3li@...too.org>)
[ GLSA 201111-10 ] Evince: Multiple vulnerabilities (Alex Legler <a3li@...too.org>)
[ GLSA 201111-11 ] GNU Tar: User-assisted execution of arbitrary code (Alex Legler <a3li@...too.org>)
[SECURITY] [DSA 2350-1] freetype security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2348-1] systemtap security update (Moritz Muehlenhoff <jmm@...ian.org>)
Implications of IPv6 on network firewalls (Fernando Gont <fgont@...networks.com>)
Wordpress advanced-text-widget Plugin Vulnerabilities (Amir@...st.ir)
Wordpress alert-before-your-post Plugin Cross-Site Scripting Vulnerabilities (Amir@...st.ir)
Wordpress adminimize Plugin Vulnerabilities (Amir@...st.ir)
OWASP Academy Portal - FREE OWASP TOP 10 security challenges with Hacking-Lab ("Ivan Buetler" <ivan.buetler@...c.ch>)
Re: Multiple Cross-Site-Scripting vulnerabilities in Dolibarr 3.1.0 (Henri Salo <henri@...v.fi>)
Re: wordpress Lanoba Social Plugin Xss Vulnerabilities (Henri Salo <henri@...v.fi>)
[SECURITY] [DSA 2351-1] wireshark security update (Moritz Muehlenhoff <jmm@...ian.org>)

November 22 (3 messages)

Re: XSS in Tiki Wiki CMS Groupware (Henri Salo <henri@...v.fi>)
Re: jara 1.6 sql injection vulnerability (Henri Salo <henri@...v.fi>)
[security bulletin] HPSBMU02726 SSRT100685 rev.1 - HP Operations Agent and Performance Agent for AIX, HP-UX, Linux, and Solaris, Local Una… (security-alert@...com)

November 23 (13 messages)

[SECURITY] [DSA 2352-1] puppet security update (Moritz Muehlenhoff <jmm@...ian.org>)
Multiple vulnerabilities in Dolibarr (advisory@...ridge.ch)
NGS00144 Patch Notification: FFmpeg Libavcodec buffer overflow remote code execution ("Research@...Secure" <research@...secure.com>)
NGS00145 Patch Notification: FFmpeg Libavcodec out of bounds write remote code execution ("Research@...Secure" <research@...secure.com>)
NGS00148 Patch Notification: FFmpeg Libavcodec memory corruption remote code execution ("Research@...Secure" <research@...secure.com>)
Wordpress clickdesk-live-support-chat plugin Cross-Site Scripting Vulnerabilities (Amir@...st.ir)
Wordpress featurific-for-wordpress plugin Cross-Site Scripting Vulnerabilities (Amir@...st.ir)
Wordpress enable-latex plugin Remote File Include Vulnerabilities (Amir@...st.ir)
Wordpress meenews 5.1 plugin Cross-Site Scripting Vulnerabilities (Amir@...st.ir)
PmWiki <= 2.2.34 (pagelist) Remote PHP Code Injection Vulnerability (n0b0d13s@...il.com)
Debut issue of Web App Pentesting Magazine - Free Download! (maciej.kozuszek@...tware.com.pl)
TC-SA-2011-02: Multiple web-vulnerabilities in iTop version 1.1.181 ("Tobias Glemser" <tglemser@...e-consulting.com>)
[ MDVSA-2011:177 ] freetype2 (security@...driva.com)

November 24 (2 messages)

[security bulletin] HPSBUX02724 SSRT100650 rev.2 - HP-UX Running System Administration Manager (SAM), Local Increase in Privilege (security-alert@...com)
[security bulletin] HPSBUX02725 SSRT100627 rev.1 - HP-UX Apache Running Tomcat Servlet Engine, Remote Information Disclosure, Authenticati… (security-alert@...com)

November 25 (2 messages)

0A29-11-1 : Cross-Site Scripting vulnerabilities in HP Network Node Manager i 9.10 (0a29 40 <0a2940@...il.com>)
[SECURITY] [DSA 2353-1] ldns security update (Moritz Muehlenhoff <jmm@...ian.org>)

November 28 (14 messages)

[ MDVSA-2011:178 ] glibc (security@...driva.com)
[ MDVSA-2011:179 ] glibc (security@...driva.com)
Wordpress skysa-official plugin Cross-Site Scripting Vulnerabilities (Amir@...st.ir)
Vulnerabilities in Siemens SIMATIC WinCC flexible 2008 SP2 (Luigi Auriemma <aluigi@...istici.org>)
Vulnerabilities in Siemens Automation License Manager (Luigi Auriemma <aluigi@...istici.org>)
[ MDVSA-2011:180 ] php-suhosin (security@...driva.com)
ZDI-11-331 : RealNetwork RealPlayer MPG Width Integer Underflow Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-332 : RealNetworks RealPlayer Malformed AAC File Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-333 : RealNetworks RealPlayer ATRC Code Data Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-334 : RealNetworks RealPlayer genr Sample Size Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-335 : RealNetworks RealPlayer RV10 Sample Height Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-336 : RealNetworks RealPlayer Invalid Codec Name Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-337 : RealNetworks RealPlayer RV30 Uninitialized Index Value Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-338 : RealNetworks RealPlayer IVR MLTI Chunk Length Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)

November 29 (5 messages)

MVSA-11-013 - EllisLab xss_clean Filter Bypass - ExpressionEngine and CodeIgniter (marian.ventuneac@...il.com)
Security-Assessment.com Release: Hacking Hollywood Slides, Advisories and Exploits (Nick Freeman <nick.freeman@...urity-assessment.com>)
Oxide M0N0X1D3 HTTP Server Directory Traversal Vulnerability (demonalex@....com)
Re: Re: wordpress Lanoba Social Plugin Xss Vulnerabilities (Alex Davis <alex@...oba.com>)
Vulnerabilities in 3S CoDeSys 3.4 SP4 Patch 2 (Luigi Auriemma <aluigi@...istici.org>)

November 30 (10 messages)

CanSecWest 2012 Mar 7-9; 2nd call for papers, closes next week, Monday.Dec 5 2011 (Dragos Ruiu <dr@....net>)
Insecure RSA Encryption in jCryption, PEAR Crypt_RSA and Crypt_RSA2 (Daniel Roethlisberger <daniel.roethlisberger@...tch.ch>)
Multiple vulnerabilities in OrangeHRM (advisory@...ridge.ch)
Sql injection in SugarCRM (advisory@...ridge.ch)
New issue of PenTest Magazine is out - 21 pages of free content. (maciej.kozuszek@...tware.com.pl)
WikkaWiki <= 1.3.2 Multiple Security Vulnerabilities (n0b0d13s@...il.com)
Wordpress 1-jquery-photo-gallery-slideshow-flash plugin Cross-Site Scripting Vulnerabilities (Amir@...st.ir)
Wordpress flash-album-gallery plugin Cross-Site Scripting Vulnerabilities (Amir@...st.ir)
PHP Inventory 1.3.1 Remote (Auth Bypass) SQL Injection Vulnerability (security@...oserve.de)
[SECURITY] [DSA 2354-1] cups security update (Yves-Alexis Perez <corsac@...ian.org>)

189 messages

Powered by blists - more mailing lists