bugtraq mailing list - 2012/08

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2012/08

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 11	² 5	³ 3	⁴	⁵
⁶ 26	⁷ 8	⁸ 6	⁹ 5	¹⁰ 4	¹¹	¹²
¹³ 8	¹⁴ 15	¹⁵ 5	¹⁶ 3	¹⁷ 25	¹⁸	¹⁹
²⁰ 10	²¹ 1	²² 6	²³ 26	²⁴ 6	²⁵	²⁶
²⁷ 6	²⁸ 6	²⁹ 29	³⁰ 5	³¹ 7

Messages by day:

August 1 (11 messages)

[SECURITY] [DSA 2518-1] krb5 security update (Yves-Alexis Perez <corsac@...ian.org>)
Barracuda Appliances - Validation Filter Bypass Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Barracuda SSL VPN 680 - Cross Site Scripting Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
ME Application Manager 10 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Distimo Monitor 6.0 - Multiple Cross Site Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
ME Mobile Application Manager v10 - SQL Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Kaspersky PM 5.0.0.164 - Software Filter Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Secunia Research: Citrix Access Gateway Plug-in for Windows nsepacom ActiveX Control Integer Overflow (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Citrix Access Gateway Plug-in for Windows nsepacom ActiveX Control Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
[ MDVSA-2012:111 ] krb5 (security@...driva.com)
[SECURITY] [DSA 2519-1] isc-dhcp security update (Nico Golde <nion@...ian.org>)

August 2 (5 messages)

[ MDVSA-2012:121 ] libjpeg-turbo (security@...driva.com)
[security bulletin] HPSBMU02796 SSRT100594 rev.3 - HP Operations Agent and HP Performance Agent for AIX, HP-UX, Linux, Solaris and Windows… (security-alert@...com)
Tekno.Portal v0.1b 'link.php' Blind SQL Injection Vulnerability (Socket_0x03@...aexe.com)
Kaspersky Password Manager 5.0.0.164 - Software Filter Vulnerability (Vulnerability Lab <admin@...nerability-lab.com>)
My ROP mitigation (Young Jun Ko <ohojang@...il.com>)

August 3 (3 messages)

[SECURITY] [DSA 2520-1] openoffice.org security update (Yves-Alexis Perez <corsac@...ian.org>)
[ MDVSA-2012:122 ] icedtea-web (security@...driva.com)
29C3: Call for Participation for 29th Chaos Communication Congress (fukami <lists@....io>)

August 6 (26 messages)

ZDI-12-128 : Mozilla Firefox nsHTMLSelectElement Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-129 : Microsoft Windows TrueType Font Parsing Remote Code Execution Vulnerability (Remote Kernel) (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-130 : Apple QuickTime Player MP4A Uninitialized Pointer Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-131 : Microsoft .NET Framework Undersized Glyph Buffer Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-132 : IBM Lotus iNotes dwa85W ActiveX Attachment_Times Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-133 : GE Proficy Historian ihDataArchiver.exe Multiple Opcode Parsing Remote Code Execution Vulnerabilities (ZDI Disclosures <zdi-disclosures@...pingpoi…)
ZDI-12-134 : IBM Lotus Quickr QP2 ActiveX _Times Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-135 : Apple QuickTime JPEG2k Sample Size Atom Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[ MDVSA-2012:123 ] libreoffice (security@...driva.com)
[SECURITY] [DSA 2521-1] libxml2 security update (Moritz Muehlenhoff <jmm@...ian.org>)
[ MDVSA-2012:124 ] openoffice.org (security@...driva.com)
[security bulletin] HPSBMU02798 SSRT100908 rev.1 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Cross S… (security-alert@...com)
Joomla com_package - SQL Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[SECURITY] [DSA 2522-1] fckeditor security update (Yves-Alexis Perez <corsac@...ian.org>)
[SECURITY] [DSA 2519-2] isc-dhcp regression (Nico Golde <nion@...ian.org>)
AOL Products downloadUpdater2 Plugin SRC Parameter Remote Code Execution (nospam@...il.it)
iAuto Mobile Application 2012 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Inout Mobile Webmail APP - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[ MDVSA-2012:125 ] wireshark (security@...driva.com)
Joomla com_photo - SQL Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
BeneficialBank Business v4.13.1 - Auth Bypass Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[CVE-2012-3870] Openconstructor CMS 3.12.0 'createobject.php', 'name' and 'description' parameters Stored Cross-site Scrpting vuln… (lorenzo.cantoni86@...il.com)
[CVE-2012-3872] Openconstructor CMS 3.12.0 Multiple Reflected Cross-site Scrpting vulnerabilities (lorenzo.cantoni86@...il.com)
[CVE-2012-3871] Openconstructor CMS 3.12.0 'data/hybrid/i_hybrid.php', 'header' parameter Stored Cross-site Scripting Vulnerability (lorenzo.cantoni86@...il.com)
[CVE-2012-3873] Openconstructor CMS 3.12.0 'id' parameter multiple SQL injection vulnerabilities (lorenzo.cantoni86@...il.com)
Dir2web3 Mutiple Vulnerabilities (Daniel Correa <admin@...focol.org>)

August 7 (8 messages)

[SECURITY] [DSA 2523-1] globus-gridftp-server security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2524-1] openttd security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2525-1] expat security update (Moritz Muehlenhoff <jmm@...ian.org>)
FreeBSD Security Advisory FreeBSD-SA-12:05.bind (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
Oracle Business Transaction Management Server FlashTunnelService WriteToFile Message Remote Code Execution (nospam@...il.it)
Oracle Business Transaction Management Server FlashTunnelService Remote File Deletion (nospam@...il.it)
nullcon International security conference Delhi 2012 Highlights (nullcon <nullcon@...lcon.net>)
[security bulletin] HPSBMU02781 SSRT100617 rev.2 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows running Postgre… (security-alert@...com)

August 8 (6 messages)

[ MDVSA-2012:126 ] libxml2 (security@...driva.com)
[ MDVSA-2012:127 ] libtiff (security@...driva.com)
ESA-2012-031: Iomega StorCenter/EMC Lifeline Remote Access Vulnerability (Security Alert <Security_Alert@....com>)
MobileCartly 1.0 <= Remote Code Execution Vulnerability (pereira@...biz.de)
Multiple vulnerabilities in PBBoard (advisory@...ridge.com)
Multiple Vulnerabilities in phpList (advisory@...ridge.com)

August 9 (5 messages)

[ MDVSA-2012:128 ] bash (security@...driva.com)
Flogr v2.5.6 & v2.3 - Cross Site Script Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Joomla com_fireboard - SQL Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Arasism (IR) CMS - File Upload Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[HITB-Announce] HITB Magazine Issue 009 - Call for Submissions (Hafez Kamal <aphesz@...kinthebox.org>)

August 10 (4 messages)

Another Solaris 10 Patch Cluster Symlink Attack (larry Cashdollar <larry0@...com>)
How well does Microsoft support (and follow) their mantra "keep your PC updated"? ("Stefan Kanthak" <stefan.kanthak@...go.de>)
WordPress Plugin 'Quick Post Widget' 1.9.1 Multiple Cross-site scripting vulnerabilities (sschurtz@...ksecurity.de)
[PRE-SA-2012-05] Multiple heap-based buffer overflows in LibreOffice / OpenOffice (Timo Warns <warns@...-sense.de>)

August 13 (8 messages)

[ MDVSA-2012:129 ] busybox (security@...driva.com)
[ MDVSA-2012:129-1 ] busybox (security@...driva.com)
[ MDVSA-2012:130 ] openldap (security@...driva.com)
[SECURITY] [DSA 2526-1] libotr security update (Nico Golde <nion@...ian.org>)
Last reminder for Passwords^12 : Call for Presentations (Per Thorsheim <per@...rsheim.net>)
[ MDVSA-2012:131 ] libotr (security@...driva.com)
[SECURITY] [DSA 2527-1] php5 security update (Moritz Muehlenhoff <jmm@...ian.org>)
[security bulletin] HPSBHF02804 SSRT100631 rev.1 - HP Integrity Server rx2800 i2, BL860c i2, BL870c i2, BL890c i2, Potential Denial of Ser… (security-alert@...com)

August 14 (15 messages)

GreHack 2012 - LAST Call For Papers (Grenoble, France) till 15th August 2012 (Fabien DUCHENE <f.duchene@...-online.fr>)
[Announcement] ClubHack Magazine's Aug 2012 Issue Released (abhijeet@...ag.in)
TCExam Edit SQL Injection ("research" <research@...ctionis.co.uk>)
[security bulletin] HPSBMU02801 SSRT100879 rev.1 - HP Fortify Software Security Center, Remote Unauthenticated Disclosure of Information (security-alert@...com)
[security bulletin] HPSBMU02802 SSRT100923 rev.1 - HP Fortify Software Security Center, Remote Disclosure of Privileged Information (security-alert@...com)
[security bulletin] HPSBMU02800 SSRT100921 rev.1 - HP Service Manager and HP Service Center Server, Remote Denial of Service (DoS) (security-alert@...com)
[security bulletin] HPSBMU02803 SSRT100926 rev.1 - HP Service Manager and HP Service Center Web Tier, Remote Cross Site Scripting (XSS) (security-alert@...com)
[security bulletin] HPSBUX02805 SSRT100919 rev.1 - HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vu… (security-alert@...com)
Flynax General Classifieds v4.0 CMS - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Re: How well does Microsoft support (and follow) their mantra "keep your PC updated"? ("Thomas D." <whistl0r@...glemail.com>)
NeoInvoice Blind SQL Injection (CVE-2012-3477) (Adam Caudill <adam@...mcaudill.com>)
7sepehr CMS 2012 - Multiple SQL Injection Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Total Shop UK eCommerce Generic Cross-Site Scripting ("research" <research@...ctionis.co.uk>)
TCExam Edit Cross-Site Scripting ("research" <research@...ctionis.co.uk>)
Group-Office Cleartext Credentials Stored in Cookies ("research" <research@...ctionis.co.uk>)

August 15 (5 messages)

[SECURITY] [DSA 2528-1] icedove security update (Florian Weimer <fw@...eb.enyo.de>)
CFP for ZeroNights conference Moscow 19-20 November 2012 (Alexander Polyakov <a.polyakov@...scan.com>)
[2.0 Update] Cisco Security Advisory: Cisco IOS XR Software Route Processor Denial of Service Vulnerability (Cisco Systems Product Security Incident Response T…)
[ MDVSA-2012:132 ] glpi (security@...driva.com)
[SECURITY] [DSA 2530-1] rssh security update (Florian Weimer <fw@...eb.enyo.de>)

August 16 (3 messages)

[slackware-security] t1lib (SSA:2012-228-01) (Slackware Security Team <security@...ckware.com>)
[ MDVSA-2012:133 ] usbmuxd (security@...driva.com)
vulnerabilities in Samsung Epic 4G Touch with 2.3.6 and probably other Samsung Galaxies (Alexander Pruss <arpruss@...il.com>)

August 17 (25 messages)

[ MDVSA-2012:135 ] wireshark (security@...driva.com)
[security bulletin] HPSBUX02806 SSRT100789 rev.1 - HP Serviceguard, Remote Denial of Service (DoS) (security-alert@...com)
[ MDVSA-2012:137 ] acpid (security@...driva.com)
[ MDVSA-2012:138 ] acpid (security@...driva.com)
[ MDVSA-2012:136 ] phpmyadmin (security@...driva.com)
NGS00288 Patch Notification: Windows Remote Desktop Memory Corruption Leading to RCE on XP SP3 ("Research@...Secure" <research@...secure.com>)
GIMP Scriptfu Python Remote Command Execution ("research" <research@...ctionis.co.uk>)
Social Engine v4.2.5 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
ShopperPress v2.7 Wordpress - SQL Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
ShopperPress v2.7 Wordpress - Cross Site Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Nike+ Panel & Mobile App - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
ManageEngine OpStor v7.4 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[FOREGROUND SECURITY 2012-001] Lsoft ListServ v16 (WA revision R4241) SHOWTPL parameter Cross-SIte Scripting - XSS (Jose Carlos de Arriba <jcarriba@...egrounds…)
[ MDVSA-2012:134 ] wireshark (security@...driva.com)
Internet Explorer Script Interjection Code Execution (ds.adv.pub@...il.com)
[slackware-security] emacs (SSA:2012-228-02) (Slackware Security Team <security@...ckware.com>)
ZDI-12-136 : Apple QuickTime Invalid Public Movie Atom Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-137 : Apple Mac OS X libsecurity_cdsa_plugin Malloc Integer Truncation Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoin…)
ZDI-12-138 : SAP Business Objects Financial Consolidation CtAppReg.dll username Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpo…)
ZDI-12-139 : SAP Crystal Reports crystalras.exe OBUnmarshal Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-140 : McAfee SmartFilter Administration Server SFAdminSrv.exe JBoss RMI Remote Code Execution Vulnerabilty (ZDI Disclosures <zdi-disclosures@...pingpoin…)
ZDI-12-141 : Microsoft .NET Framework Clipboard Unsafe Memory Access Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-142 : Oracle Java WebStart Browser Argument Injection Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-143 : Microsoft Visio DWGDP MTEXT Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-144 : EMC AutoStart ftAgent Opcode 0x4B Subcode 0x1D4C Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)

August 20 (10 messages)

[SECURITY] [DSA 2531-1] xen security update (Luciano Bello <luciano@...ian.org>)
[ MDVSA-2012:139 ] postgresql (security@...driva.com)
[ MDVSA-2012:140 ] mono (security@...driva.com)
ocPoral CMS 8.x | Cross Site Request Forgery (CSRF) Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
ocPoral CMS 8.x | Session Hijacking Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
NGS00330 Patch Notification: Squiz CMS Directory Traversal ("Research@...Secure" <research@...secure.com>)
NGS00208 Patch Notification: Moodle CMS stored XSS ("Research@...Secure" <research@...secure.com>)
NGS00241 Patch Notification: SysAid Helpdesk blind SQL injection ("Research@...Secure" <research@...secure.com>)
NGS00242 Patch Notification: SysAid Helpdesk stored XSS ("Research@...Secure" <research@...secure.com>)
APPLE-SA-2012-08-20-1 Apple Remote Desktop 3.6.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)

August 21 (1 message)

[ MDVSA-2012:141 ] openslp (security@...driva.com)

August 22 (6 messages)

apache struts2 remote code execute (voidloafer@...il.com)
[ MDVSA-2012:142 ] gimp (security@...driva.com)
XSS and Blind SQL Injection Vulnerabilities in Banana Dance CMS (Netsparker Advisories <advisories@...itunasecurity.com>)
XSS and SQL Injection Vulnerabilities in OrderSys (Netsparker Advisories <advisories@...itunasecurity.com>)
XSS Vulnerabilities in LabWiki (Netsparker Advisories <advisories@...itunasecurity.com>)
XSS and SQL Injection Vulnerabilities in Jara (Netsparker Advisories <advisories@...itunasecurity.com>)

August 23 (26 messages)

ZDI-12-145 : Symantec Endpoint Protection SemSvc.exe AgentServlet Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-146 : Novell eDirectory RelativeToFullDN Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-147 : WebKit ContentEditable swapInNode Use-After-Free Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-148 : GE Proficy Real-Time Information Portal Remote Interface Service Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoin…)
ZDI-12-149 : Cisco AnyConnect VPN Client Verification Bypass Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-150 : Oracle Outside In XPM Processing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-151 : Oracle Outside In Excel File TxO Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-152 : Oracle Outside In Excel MergeCells Record Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-153 : Apple QuickTime sean Atom Size Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-154 : IBM Lotus Notes URL Command Injection Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-155 : InduSoft Thin Client ISSymbol InternationalOrder Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-156 : Cisco AnyConnect VPN Client Arbitrary Program Instantiation Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com…)
ZDI-12-157 : Microsoft Excel Series Record Parsing Type Mismatch Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-158 : Microsoft Internet Explorer MSADO CacheSize Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-159 : EMC AutoStart ftAgent Opcode 0x14 Subcode 0x7e7 Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-160 : EMC AutoStart ftAgent Opcode 0x14 Subcode 0x7F8 Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-161 : EMC AutoStart ftAgent Opcode 0x2d Subcode 0x1194 Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
This vulnerability is being disclosed publicly without a patch in accordance with the ZDI 180 day deadline. (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-163 : (0Day) HP iNode Management Center iNodeMngChecker.exe Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-164 : (0Day) HP Intelligent Management Center img.exe Integer Wrap Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.co…)
ZDI-12-165 : (0Day) HP Operations Agent for NonStop Server HEALTH Packet Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingp…)
ZDI-12-166 : (0Day) HP LeftHand Virtual SAN Appliance Unauthenticated Access Remote Command Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpo…)
[security bulletin] HPSBUX02791 SSRT100856 rev.2 - HP-UX Apache Web Server running PHP, Remote Execution of Arbitrary Code, Privilege Elev… (security-alert@...com)
SaltOS 3.1 Cross-Site Scripting vulnerability (sschurtz@...ksecurity.de)
Ad Manager Pro v. 4 Remote FLI (CorryL <corryl80@...il.com>)
[ MDVSA-2012:143 ] python-django (security@...driva.com)

August 24 (6 messages)

ESA-2012-039: EMC ApplicationXtender Arbitrary File Upload Vulnerability (Security Alert <Security_Alert@....com>)
[security bulletin] HPSBUX02806 SSRT100789 rev.2 - HP Serviceguard, Remote Denial of Service (DoS) (security-alert@...com)
[SECURITY] [DSA 2533-1] pcp security update (Florian Weimer <fw@...eb.enyo.de>)
Re: [Full-disclosure] XSS Vulnerabilities in LabWiki (Henri Salo <henri@...v.fi>)
Elcom CMS - Community Manager Insecure File Upload Vulnerability - Security Advisory - SOS-12-008 ("Lists" <lists@...seofsecurity.com>)
Re: [Full-disclosure] XSS and SQL Injection Vulnerabilities in Jara (Henri Salo <henri@...v.fi>)

August 27 (6 messages)

[slackware-security] dhcp (SSA:2012-237-01) (Slackware Security Team <security@...ckware.com>)
Chamilo 1.8.8.4 Multiple Vulnerabilities (beford <xbefordx@...il.com>)
Paliz CMS Full Path Disclosure Vulnerability (advisories@...hsecure.ir)
Exploit Title: Mihalism Multi Host v 5.0 (explo21ter@...il.com)
Wordpress fckeditor Arbitrary File Upload Vulnerability (irist.ir@...il.com)
CommPort 1.01 <= SQL Injection Vulnerability (pereira@...biz.de)

August 28 (6 messages)

CA20111208-01: Security Notice for CA SiteMinder [updated] ("Williams, James K" <James.Williams@...com>)
CVE-2012-2665 Manifest-processing errors in Apache OpenOffice 3.4.0 (Rob Weir <robweir@...che.org>)
[ MDVSA-2012:144 ] tetex (security@...driva.com)
[SE-2012-01] information regarding recently discovered Java 7 attack (Security Explorations <contact@...urity-explorations.com>)
ESA-2012-034: EMC Cloud Tiering Appliance (CTA) Authentication Bypass Vulnerability (Security Alert <Security_Alert@....com>)
[security bulletin] HPSBUX02805 SSRT100919 rev.3 - HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vu… (security-alert@...com)

August 29 (29 messages)

ToorCon 14 Call For Papers (h1kari@...rcon.org)
[ MDVSA-2012:145 ] firefox (security@...driva.com)
t2′12: Challenge to be released 2012-09-01 10:00 EEST (Tomi Tuominen <tomi.tuominen@...fi>)
Cross-Site Scripting (XSS) in Phorum (advisory@...ridge.com)
XSS in PrestaShop (advisory@...ridge.com)
[ MDVSA-2012:146 ] firefox (security@...driva.com)
ZDI-12-168 : InduSoft Thin Client ISSymbol InternationalSeparator Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-167 : (0Day) Novell File Reporter NFRAgent.exe VOL Tag Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-171 : (0Day) Hewlett-Packard Intelligent Management Center UAM sprintf Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoin…)
ZDI-12-169 : GE Proficy Historian KeyHelp ActiveX LaunchTriPane Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-170 : (0Day) HP Application Lifecycle Management XGO.ocx ActiveX Control Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingp…)
ZDI-12-172 : (0Day) HP Operations Orchestration RSScheduler Service JDBC Connector Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pin…)
ZDI-12-173 : (0Day) HP SiteScope SOAP Call getSiteScopeConfiguration Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-176 : (0Day) HP SiteScope SOAP Call getFileInternal Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-175 : (0Day) HP SiteScope SOAP Call create Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-177 : (0Day) HP SiteScope SOAP Call loadFileContent Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-178 : (0Day) HP SiteScope SOAP Call update Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-179 : EMC ApplicationXtender Desktop Viewer AEXView ActiveX AnnoSave Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.…)
ZDI-12-181 : Novell iPrint nipplib.dll client-file-name Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-180 : Novell ZENWorks AdminStudio ISGrid.dll ActiveX Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-182 : EMC AppXtender WxSuperCtrl650.ocx ActiveX Control Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[ MDVSA-2012:147 ] mozilla-thunderbird (security@...driva.com)
Sistem Biwes Multiple Vulnerability (admin@...elweiss.info)
Seeker Adv MS-06 - .Net Cross Site Scripting - Request Validation Bypassing ("Seeker Research Center" <qsrc@...tium.com>)
ZDI-12-174 : (0Day) HP SiteScope UploadFilesHandler Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
squidGuard 1.4 - Remote Denial of Service - POC (Stefan Bauer <stefan.bauer@...ewerk.de>)
Re: [Full-disclosure] [SE-2012-01] information regarding recently discovered Java 7 attack (Jeffrey Walton <noloader@...il.com>)
Re: [SE-2012-01] information regarding recently discovered Java 7 attack (Security Explorations <contact@...urity-explorations.com>)
[SECURITY] [DSA 2535-1] rtfm security update (Florian Weimer <fw@...eb.enyo.de>)

August 30 (5 messages)

[security bulletin] HPSB3C02809 SSRT100377 rev.1 - HP iNode Management Center, Remote Execution of Arbitrary Code (security-alert@...com)
SEC Consult SA-20120829-0 :: Symantec Messaging Gateway - Support Backdoor (SEC Consult Vulnerability Lab <research@...-consult.com>)
[ MDVSA-2012:074-1 ] ffmpeg (security@...driva.com)
[ MDVSA-2012:148 ] ffmpeg (security@...driva.com)
ESA-2012-038: EMC NetWorker Format String Vulnerability (Security Alert <Security_Alert@....com>)

August 31 (7 messages)

[SECURITY] [DSA 2536-1] otrs2 security update (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 2537-1] typo3-src security update (Florian Weimer <fw@...eb.enyo.de>)
AST-2012-012: Asterisk Manager User Unauthorized Shell Access ("Asterisk Security Team" <security@...erisk.org>)
AST-2012-013: ACL rules ignored when placing outbound calls by certain IAX2 users ("Asterisk Security Team" <security@...erisk.org>)
Security advisory for Bugzilla 4.3.3, 4.2.3, 4.0.8 and 3.6.11 (LpSolit@...il.com)
VMSA-2012-0013 VMware vSphere and vCOps updates to third party libraries (VMware Security Team <security@...are.com>)
[SE-2012-01] New security issue affecting Java SE 7 Update 7 (Security Explorations <contact@...urity-explorations.com>)

226 messages

Powered by blists - more mailing lists