bugtraq mailing list - 2013/07

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2013/07

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹ 8	² 12	³ 9	⁴ 1	⁵ 6	⁶	⁷
⁸ 16	⁹ 5	¹⁰ 8	¹¹ 10	¹² 11	¹³	¹⁴
¹⁵ 13	¹⁶ 12	¹⁷ 9	¹⁸ 10	¹⁹ 7	²⁰	²¹
²² 9	²³ 9	²⁴ 6	²⁵ 6	²⁶ 13	²⁷	²⁸
²⁹ 13	³⁰ 9	³¹

Messages by day:

July 1 (8 messages)

GreHack 2013 - CFP EXTENDED TO JULY,16 - Conf: Nov. 15, Grenoble, France ("F. Duchene" <adm-fabien.duchene@...hack.org>)
[slackware-security] mozilla-thunderbird (SSA:2013-180-02) (Slackware Security Team <security@...ckware.com>)
joomla com_football Components Sql Injection vulnerability (iedb.team@...il.com)
[slackware-security] mozilla-firefox (SSA:2013-180-01) (Slackware Security Team <security@...ckware.com>)
Re: ESA-2013-029: RSA SecurID Sensitive Information Disclosure Vulnerability (security_alert@....com)
[security bulletin] HPSBST02846 SSRT100798 rev.2 - HP LeftHand Virtual SAN Appliance hydra, Remote Execution of Arbitrary Code (security-alert@...com)
[security bulletin] HPSBHF02888 rev.1 - HP ProCurve, H3C, 3COM Routers and Switches, Remote Information Disclosure and Code Execution (security-alert@...com)
[SECURITY] CVE-2013-1777: Apache Geronimo 3 RMI classloader exposure (Jarek Gawor <jgawor@...il.com>)

July 2 (12 messages)

[CVE-2013-4694] WinAmp v5.63 gen_jumpex.dll and ml_local.dll Multiple Buffer Overflows (Inshell Security <info@...hell.net>)
[CVE-2013-4695] WinAmp v5.63 gen_ff.dll links.xml Value Parsing Invalid Pointer Dereference (Inshell Security <info@...hell.net>)
Re: joomla com_football Components Sql Injection vulnerability (Packet Storm <bugtraq@...ketstormsecurity.org>)
Linksys EA - 2700, 3500, 4200, 4500 w/ Lighttpd 1.4.28 Unauthenticated Remote Administration Access (kyle Lovett <krlovett@...il.com>)
[ MDVSA-2013:187 ] apache-mod_security (security@...driva.com)
WordPress feed plugin Sql Injection (iedb.team@...il.com)
[ MDVSA-2013:188 ] otrs (security@...driva.com)
[ MDVSA-2013:189 ] wordpress (security@...driva.com)
[ MDVSA-2013:190 ] autotrace (security@...driva.com)
WordPress category-grid-view-galler plugin Cross-Site Scripting Vulnerabilities (iedb.team@...il.com)
Real player resource exhaustion Vulnerability (akshay.vaghela@...eroam.com)
[ MDVSA-2013:191 ] fail2ban (security@...driva.com)

July 3 (9 messages)

[ MDVSA-2013:192 ] php-radius (security@...driva.com)
[SECURITY] [DSA 2718-1] wordpress security update (Yves-Alexis Perez <corsac@...ian.org>)
[security bulletin] HPSBUX02893 rev.1 - HP-UX Apache Running Tomcat Servlet Engine, Remote Denial of Service (DoS), Cross Site Scripting (… (security-alert@...com)
[security bulletin] HPSBUX02889 SSRT101252 rev.1 - HP-UX Running Java, Remote Unauthorized Access, Disclosure of Information, and Other Vu… (security-alert@...com)
APPLE-SA-2013-07-02-1 Security Update 2013-003 (Apple Product Security <product-security-noreply@...ts.apple.com>)
Slots open for Security Projects :Open Source Showcase at AppSec Research / EU 2013 (Dirk W <dirk.wetter@...glemail.com>)
Multiple Vulnerabilities in Kasseler CMS (advisory@...ridge.com)
Multiple Vulnerabilities in OpenX (advisory@...ridge.com)
Re: Linksys EA - 2700, 3500, 4200, 4500 w/ Lighttpd 1.4.28 Unauthenticated Remote Administration Access (krlovett@...il.com)

July 4 (1 message)

re: Real player resource exhaustion Vulnerability (security curmudgeon <jericho@...rition.org>)

July 5 (6 messages)

Mobile Atlas Creator 1.9.12 - Persistent Command Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
AVAST Internet Security Suite - Persistent Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
AVAST Universal Core Installer - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Paypal Bug Bounty #102 QR Dev Labs - Auth Bypass Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
AVAST Antivirus v8.0.1489 - Multiple Core Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
LSE Leading Security Experts GmbH - LSE-2013-07-03 - rsyslog ElasticSearch Plugin ("LSE Leading Security Experts GmbH \(Security Advisories\)" <advisories@...x…)

July 8 (16 messages)

[SECURITY] [DSA 2720-1] icedove security update (Moritz Muehlenhoff <jmm@...ian.org>)
OS-Command Injection via UPnP Interface in multiple D-Link devices (devnull@...ur1ty.de)
[oCERT-2013-001] File Roller path sanitization errors (Daniele Bianco <danbia@...rt.org>)
[SECURITY] [DSA 2721-1] nginx security update (Nico Golde <nion@...ian.org>)
VUPEN Security Research - Mozilla Firefox Maintenance Service Privilege Escalation Vulnerabilities (VUPEN Security Research <advisories@...en.com>)
VUPEN Security Research - Oracle Java Preloader Click-2-Play Warning Bypass Vulnerability (VUPEN Security Research <advisories@...en.com>)
Avira Analysis Web Service - SQL Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Authentication bypass in D-Link routers (doylej.ia@...il.securityfocus.com)
ESA-2013-050: EMC Replication Manager Sensitive Information Disclosure Vulnerability (Security Alert <Security_Alert@....com>)
ESA-2013-052: RSA(r) Authentication Manager Sensitive Information Disclosure Vulnerability (Security Alert <Security_Alert@....com>)
Authentication bypass in D-Link devices (session cookies not validated) (doylej.ia@...il.securityfocus.com)
Re: OS-Command Injection via UPnP Interface in multiple D-Link devices (krlovett@...il.com)
Re: OS-Command Injection via UPnP Interface in multiple D-Link devices (devnull@...ur1ty.de)
[security bulletin] HPSBST02890 rev.2 - HP StoreOnce D2D Backup System, Remote Unauthorized Access and Modification (security-alert@...com)
Re: [security bulletin] HPSBST02890 rev.2 - HP StoreOnce D2D Backup System, Remote Unauthorized Access and Modification (Neusbeer <neusbeer@...il.com>)
Re: WordPress feed plugin Sql Injection (Henri Salo <henri@...v.fi>)

July 9 (5 messages)

Re: re: Real player resource exhaustion Vulnerability (akshay.vaghela@...eroam.com)
[HITB-Announce] REMINDER: #HITB2013KUL CFP Closes 25th July (Hafez Kamal <aphesz@...kinthebox.org>)
SEC Consult SA-20130709-0 :: Denial of service vulnerability in Apache CXF (SEC Consult Vulnerability Lab <research@...-consult.com>)
Re: re: Real player resource exhaustion Vulnerability (Henri Salo <henri@...v.fi>)
Zoom X4/X5 ADSL Modem and Router -Unauthenticated Remote Root Command Execution (kyle Lovett <krlovett@...il.com>)

July 10 (8 messages)

(CVE-2013-1059) Linux Kernel libceph Null Pointer Dereference Vulnerability (chanam.park@...co.kr)
[security bulletin] HPSBST02896 rev.1 - HP StoreVirtual Storage, Remote Unauthorized Access (security-alert@...com)
Re: Project Pier Web Vulnerabilities (the infinitenigma <theinfinitenigma@...il.com>)
Re: Cisco/Linksys E1200 N300 Reflected XSS (the infinitenigma <theinfinitenigma@...il.com>)
[slackware-security] dbus (SSA:2013-191-01) (Slackware Security Team <security@...ckware.com>)
VULNERABLE (3rd party) components in Adobe Reader 11.0.03, and dangling reference to Acrobat.exe ("Stefan Kanthak" <stefan.kanthak@...go.de>)
[Foreground Security 2013-001]: Joomla AICONTACTSAFE 2.0.19 Extension Cross-Site Scripting (XSS) vulnerability (Jose Carlos de Arriba <jcarriba@...egroundsecur…)
Air Drive Plus v2.4 iOS - Arbitrary File Upload Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

July 11 (10 messages)

[SECURITY] [DSA 2719-1] poppler security update (Michael Gilbert <mgilbert@...ian.org>)
Hard-coded accounts on multiple network cameras (roberto.paleari@...ze.net)
[ MDVSA-2013:193 ] apache (security@...driva.com)
Facebook Url Redirection Vuln. (CANSIN YILDIRIM <canyildirim@...edu.tr>)
Re: Wordpress wp-private-messages Plugin Sql Injection vulnerability (Henri Salo <henri@...v.fi>)
[ MDVSA-2013:194 ] kernel (security@...driva.com)
Re: [Full-disclosure] XSS and SQL Injection Vulnerabilities in MiniBB (Henri Salo <henri@...v.fi>)
Re: Facebook Url Redirection Vuln. (Anthony Dubuissez <anthony.dubuissez@...era.fr>)
Re: Facebook Url Redirection Vuln. (Jann Horn <jann+libev@...jh.net>)
Windows 7/8 admin account installation password stored in the clear in LSA Secrets ("Dnegel X." <dnegel666@...il.com>)

July 12 (11 messages)

Re: Windows 7/8 admin account installation password stored in the clear in LSA Secrets (Rob <synja@...fulvisions.com>)
CVE-2012-6297 - Command Injection via CSRF on DD-WRT v24-sp2 (cyoung@...pwire.com)
Re: Windows 7/8 admin account installation password stored in the clear in LSA Secrets ("Dnegel X." <dnegel666@...il.com>)
CVE-2013-3568 - Linksys CSRF + Root Command Injection (vuln-report@...ur3.us)
Re: Windows 7/8 admin account installation password stored in the clear in LSA Secrets (Marco Ivaldi <raptor@...iaservice.net>)
Multiple vulnerabilities in McAfee ePO 4.6.6 ("NCIRC INFOSEC EVAL" <infoseceval@...rc.nato.int>)
Multiple vulnerabilities in BMC SERVICE DESK EXPRESS (SDE) Version 10.2.1.95 ("NCIRC INFOSEC EVAL" <infoseceval@...rc.nato.int>)
[security bulletin] HPSBST02890 rev.3 - HP StoreOnce D2D Backup System, Remote Unauthorized Access, Modification, and Escalation of Privil… (security-alert@...com)
[Foreground Security 2013-002]: Corda Path Disclosure and XSS (Adam Willard <awillard@...egroundsecurity.com>)
MiniUPnPd Information Disclosure (CVE-2013-2600) (cyoung@...pwire.com)
Re: MiniUPnPd Information Disclosure (CVE-2013-2600) (Jeffrey Walton <noloader@...il.com>)

July 15 (13 messages)

Botconf 2013 - Call for short talks - Deadline Aug 31 2013 (Eric Freyssinet <eric.freyssinet@...il.com>)
Full Disclosure ASUS Wireless Routers Ten Models - Multiple Vulnerabilities on AiCloud enabled units (kyle Lovett <krlovett@...il.com>)
[waraxe-2013-SA#106] - Multiple Vulnerabilities in Saurus CMS 4.7.1 (come2waraxe@...oo.com)
[CVE-2012-6458] Multiple Persistent XSS in silverstripe-ecommerce (Craig Young <vuln-report@...ur3.us>)
Ruxcon 2013 Final Call For Papers (cfp@...con.org.au)
[ MDVSA-2013:195 ] php (security@...driva.com)
[ MDVSA-2013:196 ] java-1.6.0-openjdk (security@...driva.com)
Huawei E587 3G Mobile Hotspot Web UI Cross Site Scripting vulnerability (Frédéric Basse <basse.frederic@...il.com>)
[CVE-2013-2612] Huawei E587 3G Mobile Hotspot Command Injection (Frédéric Basse <basse.frederic@...il.com>)
[SECURITY] [DSA 2722-1] openjdk-7 security update (Moritz Muehlenhoff <jmm@...ian.org>)
CVE-2013-4788 - Eglibc PTR MANGLE bug (Hector Marco <hecmargi@....es>)
[security bulletin] HPSBPV02891 rev.1 - HP ProCurve Switches, Remote Unauthorized Information Disclosure (security-alert@...com)
Squid-3.3.5 DoS PoC (king cope <isowarez.isowarez.isowarez@...glemail.com>)

July 16 (12 messages)

[CVE-2013-2745, CVE-2013-2738, CVE-2013-2739] MiniDLNA v1.0.25 Multiple Vulnerabilities (Craig Young <vuln-report@...ur3.us>)
Re: Multiple vulnerabilities in McAfee ePO 4.6.6 (Harold_Toomey@...fee.com)
Nikon CoolPix L Series Fw1.0 - Information Disclosure Issue (Vulnerability Lab <research@...nerability-lab.com>)
FTP Sprite v1.2.1 iOS - Persistent Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Barracuda CudaTel 2.6.02.040 - Client Side Cross Site Scripting Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Dell Kace 1000 SMA v5.4.70402 - Persistent Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Olive File Manager v1.0.1 iOS - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Re: [ MDVSA-2013:195 ] php (Gabriel Maggiotti <gmaggiotti@...il.com>)
[CVE-2013-4763|CVE-2013-4764] Vulnerability in built-in system app of Samsung Galaxy S3/S4 (醉麻 <mazuishenghuo@...il.com>)
Voice Logger astTECS - bypass login & arbitrary file download (Michał Błaszczak <blaszczakm@...il.com>)
[security bulletin] HPSBMU02870 SSRT101012 rev.2 - HP Network Node Manager I (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Unautho… (security-alert@...com)
[security bulletin] HPSBGN02882 rev.1 - HP Database and Middleware Automation (DMA) using SSL, Remote Disclosure of Information (security-alert@...com)

July 17 (9 messages)

[slackware-security] php (SSA:2013-197-01) (Slackware Security Team <security@...ckware.com>)
XSS Vulnerabilities in OpenCms (advisory@...ridge.com)
ESA-2013-055: EMC Avamar Multiple Vulnerabilities (Security Alert <Security_Alert@....com>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified Communications Manager (Cisco Systems Product Security Incident Response Team <psirt@...co.c…)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Intrusion Prevention System Software (Cisco Systems Product Security Incident Response Team <psirt@c…)
Re: Full Disclosure ASUS Wireless Routers Ten Models - Multiple Vulnerabilities on AiCloud enabled units (krlovett@...il.com)
[security bulletin] HPSBHF02888 rev.2 - HP Network Products including H3C and 3COM Routers and Switches, Remote Information Disclosure and… (security-alert@...com)
Re: Full Disclosure ASUS Wireless Routers Ten Models - Multiple Vulnerabilities on AiCloud enabled units (krlovett@...il.com)
[SECURITY] [DSA 2723-1] php5 security update (Florian Weimer <fw@...eb.enyo.de>)

July 18 (10 messages)

WiFly 1.0 Pro iOS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Flux Player v3.1.0 iOS - File Include & Arbitrary File Upload Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Barracuda CudaTel 2.6.02.04 - Multiple Client Side Cross Site Vulnerabilities (Bug Bounty #17) (Vulnerability Lab <research@...nerability-lab.com>)
ePhoto Transfer v1.2.1 iOS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Dell PacketTrap MSP RMM 6.6.x - Multiple Persistent Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[security bulletin] HPSBST02896 rev.2 - HP StoreVirtual Storage, Remote Unauthorized Access (security-alert@...com)
[SE-2012-01] New Reflection API affected by a known 10+ years old attack (Security Explorations <contact@...urity-explorations.com>)
Symantec Workspace Virtualization 6.4.1895.0 Local Kernel Mode Privilege Escalation Exploit (th_decoder@....com)
[security bulletin] HPSBMU02900 rev.1 - HP System Management Homepage (SMH) running on Linux and Windows, Multiple Remote and Local Vulner… (security-alert@...com)
[SECURITY] [DSA 2725-1] tomcat6 security update (Moritz Muehlenhoff <jmm@...ian.org>)

July 19 (7 messages)

[SECURITY] [DSA 2724-1] chromium-browser security update (Michael Gilbert <mgilbert@...ian.org>)
DeepSec 2013 - Call for Papers - REMINDER (deepsec@...psec.net)
Western Digital My Net N600, N750, N900 and N900C - Plain text disclosure of administrative credentials (kyle Lovett <krlovett@...il.com>)
SEC Consult SA-20130719-0 :: Multiple vulnerabilities in Sybase EAServer (SEC Consult Vulnerability Lab <research@...-consult.com>)
Re: [Full-disclosure] XSS Vulnerabilities in Serendipity (Henri Salo <henri@...v.fi>)
[security bulletin] HPSBMU02900 rev.2 - HP System Management Homepage (SMH) running on Linux and Windows, Multiple Remote and Local Vulner… (security-alert@...com)
Download Lite v4.3 iOS - Persistent File Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

July 22 (9 messages)

Barracuda LB, SVF, WAF & WEF - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Barracuda CudaTel 2.6.02.040 - Remote SQL Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Re: [Full-disclosure] [SE-2012-01] New Reflection API affected by a known 10+ years old attack (Jeffrey Walton <noloader@...il.com>)
Samsung TV - DoS vulnerability (malik@...ecgames.com)
DirectShow Arbitrary Memory Overwrite Vulnerability ms13-056 (Andres Gomez Ramirez <andres.gomez@...n.ch>)
[CVE-2013-2250] Apache OFBiz Nested expression evaluation allows remote users to execute arbitrary UEL functions in OFBiz (Jacopo Cappellato <jacopoc@...che.org>)
[CVE-2013-2137] Apache OFBiz XSS vulnerability in the "View Log" screen of the Webtools application (Jacopo Cappellato <jacopoc@...che.org>)
Barracuda CudaTel 2.6.02.040 - SQL Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Full Disclosure - WD My Net N600, N750, N900, N900C - Plain Text Disclosure of Admin Credentials (kyle Lovett <krlovett@...il.com>)

July 23 (9 messages)

Dell Kace 1000 SMA 5.4.742 - SQL Injection Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Juniper Secure Access XSS Vulnerability (Anil Pazvant <pazwant@...il.com>)
SurgeFtp Server BufferOverflow Vulnerability (Anil Pazvant <pazwant@...il.com>)
Defense in depth -- the Microsoft way (part 4) ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Photo Server 2.0 iOS - Multiple Critical Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Re: Samsung TV - DoS vulnerability (malik@...ecgames.com)
CORE-2013-0705 - XnView Buffer Overflow Vulnerability (CORE Advisories Team <advisories@...esecurity.com>)
CORE-2013-0701 - Artweaver Buffer Overflow Vulnerability (CORE Advisories Team <advisories@...esecurity.com>)
[ MDVSA-2013:197 ] mysql (security@...driva.com)

July 24 (6 messages)

Orbit Downloader versions causing massive SYN flooding. Cyberoam cautions! (bhadresh.k.patel@...eroam.com)
CORE-2013-0613 - FOSCAM IP-Cameras Improper Access Restrictions (CORE Advisories Team <advisories@...esecurity.com>)
[ MDVSA-2013:198 ] libxml2 (security@...driva.com)
Re: [Full-disclosure] nginx exploit documentation, about a generic way to exploit Linux targets (Albert Puigsech Galicia <albert@...gsech.com>)
Cross-Site Scripting (XSS) in Magnolia CMS (advisory@...ridge.com)
Cross-Site Scripting (XSS) in Duplicator WordPress Plugin (advisory@...ridge.com)

July 25 (6 messages)

Easy Blog by JM LLC - Multiple Vulnerabilities (Sp3ctrecore <sp3ctrecore@...il.com>)
Cisco Security Advisory: Multiple Vulnerabilities in the Cisco Video Surveillance Manager (Cisco Systems Product Security Incident Response Team <psirt@...co.co…)
Basic Forum by JM LLC - Multiple Vulnerabilities (Sp3ctrecore <sp3ctrecore@...il.com>)
iPic Sharp v1.2.1 Wifi iOS - Persistent Foldername Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[security bulletin] HPSBGN02905 rev.1 - HP LoadRunner, Remote Code Execution and Denial of Service (DoS) (security-alert@...com)
[security bulletin] HPSBGN02906 rev.1 - HP Application Lifecycle Management Quality Center (ALM), Remote Cross Site Scripting (XSS) (security-alert@...com)

July 26 (13 messages)

[ MDVSA-2013:199 ] squid (security@...driva.com)
[SECURITY] [DSA 2726-1] php-radius security update (Thijs Kinkhorst <thijs@...ian.org>)
Xymon Systems and Network Monitor - remote file deletion vulnerability (Henrik Størner <henrik@...n.dk>)
[security bulletin] HPSBMU02894 rev.1 - HP Network Node Manager I (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Denial of Service … (security-alert@...com)
[SECURITY] [DSA 2727-1] openjdk-6 security update (Moritz Muehlenhoff <jmm@...ian.org>)
CA20130725-01: Security Notice for CA Service Desk Manager ("Kotas, Kevin J" <Kevin.Kotas@...com>)
CVE-2013-2189: OpenOffice DOC Memory Corruption Vulnerability (Herbert Duerr <hdu@...che.org>)
CVE-2013-4156: OpenOffice DOCM Memory Corruption Vulnerability (Herbert Duerr <hdu@...che.org>)
Re: [Full-disclosure] nginx exploit documentation, about a generic way to exploit Linux targets (Kingcope <isowarez.isowarez.isowarez@...glemail.com>)
Meet the folks of ws-attacker, BeEF, WAHH, sqlmap, Zed Attack Proxy, OWASP Top10, DOMinator, Minion, Mallodroid, and th… (Dirk Wetter <dirk.wetter@...glemail.com…)
SEC Consult SA-20130726-0 :: Multiple vulnerabilities - Surveillance via Symantec Web Gateway (SEC Consult Vulnerability Lab <research@...-consult.com>)
[ MDVSA-2013:200 ] ruby (security@...driva.com)
[ MDVSA-2013:201 ] ruby (security@...driva.com)

July 29 (13 messages)

FreeBSD Security Advisory FreeBSD-SA-13:08.nfsserver (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
[SECURITY] [DSA 2728-1] bind9 security update (Salvatore Bonaccorso <carnil@...ian.org>)
FreeBSD Security Advisory FreeBSD-SA-13:07.bind (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
Defense in depth -- the Microsoft way (part 5): sticky, persistent vulnerabilities ("Stefan Kanthak" <stefan.kanthak@...go.de>)
[Announcement] CHMag - Call for Articles (abhijeet@...ag.in)
Re: DEFCON London - DC4420 July - social event - Tuesday 30th July 2013 (Tony Naggs <tonynaggs@...il.com>)
[SECURITY] [DSA 2729-1] openafs security update (Moritz Muehlenhoff <jmm@...ian.org>)
Private Photos v1.0 iOS - Persistent Path Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Private Photos v1.0 iOS - Persistent Path Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
WebDisk 3.0.2 PhotoViewer iOS - Command Execution Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[ MDVSA-2013:202 ] bind (security@...driva.com)
DEFCON London - DC4420 July - social event - Tuesday 30th July 2013 (Tony Naggs <tonynaggs@...il.com>)
ESA-2013-033: EMC NetWorker Information Disclosure Vulnerability (Security Alert <Security_Alert@....com>)

July 30 (9 messages)

WorldCIST'14 - World Conference on IST, 15 - 18 April 2014, at Madeira Island ("maria Lemos" <marialemos72@...il.com>)
[security bulletin] HPSBGN02904 rev.1 - HP SiteScope running SOAP, Remote Code Execution (security-alert@...com)
[SECURITY] [DSA 2731-1] libgcrypt11 security update (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 2730-1] gnupg security update (Thijs Kinkhorst <thijs@...ian.org>)
[ MDVSA-2013:203 ] phpmyadmin (security@...driva.com)
[ MDVSA-2013:204 ] wireshark (security@...driva.com)
MojoPortal XSS (vulns@...nach.com)
NGS00434 Technical Advisory: Oracle Hyperion 11 Directory Traversal (NCC Group Research <research@...group.com>)
NGS00500 Technical Advisory: Bit51 Better WP Security Plugin - Unauthenticated Stored XSS to RCE (NCC Group Research <research@...group.com>)

202 messages

Powered by blists - more mailing lists