bugtraq mailing list - 2013/08

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2013/08

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 12	² 7	³	⁴
⁵ 15	⁶ 12	⁷ 13	⁸ 9	⁹ 6	¹⁰ 3	¹¹ 7
¹² 13	¹³ 21	¹⁴ 2	¹⁵ 2	¹⁶ 4	¹⁷	¹⁸
¹⁹ 5	²⁰ 5	²¹ 12	²² 9	²³ 9	²⁴	²⁵
²⁶ 11	²⁷ 6	²⁸ 10	²⁹ 8	³⁰ 7	³¹

Messages by day:

August 1 (12 messages)

CORE-2013-0618 - Multiple Vulnerabilities in TP-Link TL-SC3171 IP Cameras (CORE Advisories Team <advisories@...esecurity.com>)
Open-Xchange Security Advisory 2013-07-31 (Martin Braun <martin.braun@...n-xchange.com>)
SQL Injection in Cotonti (advisory@...ridge.com)
[security bulletin] HPSBMU02902 rev.1 - HP Integrated Lights-Out iLO3, iLO4 IPMI Cipher Suite 0 Authentication Bypass Vulnerability (security-alert@...com)
Multiple XSS Vulnerabilities in Jahia xCM (advisory@...ridge.com)
Cisco Security Advisory: Cisco WAAS Central Manager Remote Code Execution Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
[KIS-2013-05] vtiger CRM <= 5.4.0 (customerportal.php) Two Local File Inclusion Vulnerabilities (Egidio Romano <research@...mainsecurity.com>)
[KIS-2013-07] vtiger CRM <= 5.4.0 (vtigerolservice.php) PHP Code Injection Vulnerability (Egidio Romano <research@...mainsecurity.com>)
[KIS-2013-08] vtiger CRM <= 5.4.0 (SOAP Services) Authentication Bypass Vulnerability (Egidio Romano <research@...mainsecurity.com>)
Cisco Security Advisory: Authenticated Command Injection Vulnerability in Multiple Cisco Content Network and Video Deliv… (Cisco Systems Product Security Incident…)
Update: Full Disclosure - WD My Net N600, N750, N900, N900C - Plain Text Disclosure of Admin Credentials (krlovett@...il.com)
[KIS-2013-06] vtiger CRM <= 5.4.0 (SOAP Services) Multiple SQL Injection Vulnerabilities (Egidio Romano <research@...mainsecurity.com>)

August 2 (7 messages)

SilverStripe(R) Information Exposure Through Query Strings in GET Request (CWE-598) ("Rustein, Fara Denise \(LATCO - Buenos Aires\)" <frustein@...OITTE.com>)
Cisco Security Advisory: OSPF LSA Manipulation Vulnerability in Multiple Cisco Products (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
[ MDVSA-2013:205 ] gnupg (security@...driva.com)
[security bulletin] HPSBUX02907 rev.1 - HP-UX Running Java7, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilit… (security-alert@...com)
[security bulletin] HPSBUX02908 rev.1 - HP-UX Running Java6, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilit… (security-alert@...com)
Multiple vulnerabilities on D-Link DIR-645 devices (roberto@...yhats.it)
[security bulletin] HPSBUX02909 SSRT101289 rev.1 - HP-UX Apache Web Server, Remote Denial of Service (DoS) (security-alert@...com)

August 5 (15 messages)

[SECURITY] [DSA 2733-1] otrs2 security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 2732-1] chromium-browser security update (Michael Gilbert <mgilbert@...ian.org>)
[slackware-security] gnupg / libgcrypt (SSA:2013-215-01) (Slackware Security Team <security@...ckware.com>)
withU Music Share v1.3.7 iOS - Command Inject Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
FTP OnConnect v1.4.11 iOS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Rgpg 0.2.2 Ruby Gem Remote Command Injection (larry0@...com)
SEC Consult SA-20130805-0 :: Vodafone EasyBox Default WPS PIN Algorithm Weakness (SEC Consult Vulnerability Lab <research@...-consult.com>)
PuTTY SSH handshake heap overflow (Gergely Eberhardt <gergely.eberhardt@...rch-lab.hu>)
Joomla core <= 3.1.5 reflected XSS vulnerability (Emilio Pinna <emilio.pinn@...il.com>)
HP LaserJet Pro printers remote admin password extraction (michal.sajdak@...uritum.pl)
[ MDVSA-2013:206 ] owncloud (security@...driva.com)
Joomla com_sectionex v2.5.96 SQL Injection vulnerabilities (Matias Fontanini <matias.fontanini@...il.com>)
Joomseller "Events Booking Pro" and "JSE Event" reflected XSS (samelat <samelat@...il.com>)
Huawei B153 3G/UMTS router WPS weakness (roberto.paleari@...ze.net)
Re: Joomla core <= 3.1.5 reflected XSS vulnerability (no@...alid.com)

August 6 (12 messages)

[SECURITY] [DSA 2734-1] wireshark security update (Moritz Muehlenhoff <jmm@...ian.org>)
Usernoise 3.7.8 WP plugin cross-site scripting vulnerability (roguecoder@...h.com)
SocialEngine 4.5 TimeLine 4.2.5p9 upload file "PHP" in the Cover Image (Wesley Henrique <wesleyhenrique@...il.com>)
Re: Joomla core <= 3.1.5 reflected XSS vulnerability (michael.babker@...mla.org)
[slackware-security] samba (SSA:2013-218-03) (Slackware Security Team <security@...ckware.com>)
[slackware-security] httpd (SSA:2013-218-02) (Slackware Security Team <security@...ckware.com>)
[slackware-security] bind (SSA:2013-218-01) (Slackware Security Team <security@...ckware.com>)
[ MDVSA-2013:207 ] samba (security@...driva.com)
[ MDVSA-2013:208 ] libtiff (security@...driva.com)
[ MDVSA-2013:209 ] subversion (security@...driva.com)
[CVE-2013-2136] Apache CloudStack Cross-site scripting (XSS) vulnerabiliity (Chip Childers <chipchilders@...che.org>)
Re: XSS vulnerability in guestbook-php-script (yjtdgs@...il.com)

August 7 (13 messages)

Attacking Google Accounts with 'weblogin:' Tokens (Craig Young <vuln-report@...ur3.us>)
Microsoft Yammer Social Network - oAuth Bypass (Session Token) Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Defense in depth -- the Microsoft way (part 6): beginner's errors, QA sound asleep or out of sight! ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Multiple Vulnerabilities in BigTree CMS (advisory@...ridge.com)
[ MDVSA-2013:210 ] firefox (security@...driva.com)
[SECURITY] [DSA 2735-1] iceweasel security update (Moritz Muehlenhoff <jmm@...ian.org>)
Apache suEXEC privilege elevation / information disclosure (king cope <isowarez.isowarez.isowarez@...glemail.com>)
Trustport Webfilter Remote File Access Vulnerability (oliver <oliver.karow@....de>)
Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure (king cope <isowarez.isowarez.isowarez@...glemail.com>)
Cisco Security Advisory: Cisco TelePresence System Default Credentials Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
CORE-2013-0708 - Hikvision IP Cameras Multiple Vulnerabilities (CORE Advisories Team <advisories@...esecurity.com>)
Updated [CVE-2013-2136] Apache CloudStack Cross-site scripting (XSS) vulnerabiliity (Chip Childers <chipchilders@...che.org>)
PHPFox v3.6.0 (build3) Multiple SQL Injection vulnerabilities (Matias Fontanini <matias.fontanini@...il.com>)

August 8 (9 messages)

Two Vulnerabilities in NetworkMiner : DLL Hijacking + Directory Traversal (Erik Hjelmvik <erik.hjelmvik@...il.com>)
HP Data Protector Arbitrary Remote Command Execution (alessandro.dipinto@...ificialstudios.org)
[slackware-security] mozilla-firefox (SSA:2013-219-01) (Slackware Security Team <security@...ckware.com>)
[slackware-security] seamonkey (SSA:2013-219-03) (Slackware Security Team <security@...ckware.com>)
[slackware-security] mozilla-thunderbird (SSA:2013-219-02) (Slackware Security Team <security@...ckware.com>)
Re: Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure (Hv5hA5ms@...cardmail.com)
Joomla! redSHOP component v1.2 SQL Injection (Matias Fontanini <matias.fontanini@...il.com>)
[security bulletin] HPSBHF02912 rev.1 - HP Networking Products including H3C and 3COM Routers and Switches, OSPF Remote Information Disclo… (security-alert@...com)
OUTDATED, UNSUPPORTED and VULNERABLE 3rd party components installed with Exact Audio Copy ("Stefan Kanthak" <stefan.kanthak@...go.de>)

August 9 (6 messages)

[RCA-201308-01] HMS Testimonials 2.0.10 WP plugin - Multiple vulnerabilities (roguecoder@...h.com)
ReviewBoard Vulnerabilities (Craig Young <vuln-report@...ur3.us>)
Re: Apache suEXEC privilege elevation / information disclosure (Kingcope <isowarez.isowarez.isowarez@...glemail.com>)
Re: Apache suEXEC privilege elevation / information disclosure (Kingcope <isowarez.isowarez.isowarez@...glemail.com>)
RE: [Full-disclosure] Apache suEXEC privilege elevation / ("Dico Emil" <emil@...net.ro>)
Re: Apache suEXEC privilege elevation / information disclosure (Reindl Harald <h.reindl@...lounge.net>)

August 10 (3 messages)

Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure (Gichuki John Chuksjonia <chuksjonia@...il.com>)
Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure (Jeffrey Walton <noloader@...il.com>)
Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure (Reindl Harald <h.reindl@...lounge.net>)

August 11 (7 messages)

Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure (Tobias Kreidl <tobias.kreidl@....edu>)
Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure (terry white <twhite@...ota.com>)
Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure (Reindl Harald <h.reindl@...lounge.net>)
Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure (Ansgar Wiechers <bugtraq@...netcobalt.net>)
Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure (Michal Zalewski <lcamtuf@...edump.cx>)
Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure (Reindl Harald <h.reindl@...lounge.net>)
Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure (Tobias Kreidl <tobias.kreidl@....edu>)

August 12 (13 messages)

[SECURITY] [DSA 2736-1] putty security update (Salvatore Bonaccorso <carnil@...ian.org>)
[PSA-2013-0811-1] Oracle Java storeImageArray() Invalid Array Indexing (bugtraq@...ketstormsecurity.org)
Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure (Reindl Harald <h.reindl@...lounge.net>)
Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure (Reindl Harald <h.reindl@...lounge.net>)
[ MDVSA-2013:211 ] lcms2 (security@...driva.com)
Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure (Coderaptor <coderaptor@...il.com>)
[SECURITY] [DSA 2737-1] swift security update (Thijs Kinkhorst <thijs@...ian.org>)
RE: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure ("Peter Gregory" <Peter.Gregory@...mybahama.com>)
Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure (Reindl Harald <h.reindl@...lounge.net>)
Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure (George Machitidze <giomac@...il.com>)
Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure (Jeffrey Walton <noloader@...il.com>)

August 13 (21 messages)

CakePHP AssetDispatcher Local File Inclusion Vulnerability (検査検査 <mbsdtest01@...il.com>)
Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure (coderaptor <coderaptor@...il.com>)
Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure ("Brandon M. Graves" <bgraves@...cer-net.com>)
Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure (coderaptor <coderaptor@...il.com>)
Struts2 Prefixed Parameters OGNL Injection Vulnerability (検査検査 <mbsdtest01@...il.com>)
Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure (coderaptor <coderaptor@...il.com>)
Struts2 Prefixed Parameters Open Redirect Vulnerability (検査検査 <mbsdtest01@...il.com>)
Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure (Reindl Harald <h.reindl@...lounge.net>)
Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure (Reindl Harald <h.reindl@...lounge.net>)
Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure (Reindl Harald <h.reindl@...lounge.net>)
Re: Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure ("Marco Floris" <marco.floris@...meria.org>)
Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure (terry white <twhite@...ota.com>)
[ MDVSA-2013:212 ] otrs (security@...driva.com)
[ MDVSA-2013:213 ] xymon (security@...driva.com)
Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure (James Birk <jamesbirk@...il.com>)
Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure (Matthew Caron <Matt.Caron@...lion.net>)
Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure (Chris Meisinger <chris.meisinger@...tro.net>)
Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure (Mike Ely <me@...pehat.com>)
Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure (Reindl Harald <h.reindl@...lounge.net>)
Re: [Full-disclosure] Apache suEXEC privilege elevation / information disclosure (Jorge Dorantes <jdorantes@...dicnaturals.com>)

August 14 (2 messages)

[PSA-2013-0813-1] Oracle Java IntegerInterleavedRaster.verify() Signed Integer Overflow (bugtraq@...ketstormsecurity.org)
Subverting BIND's SRTT Algorithm: Derandomizing NS Selection (Roee Hay <roeeh@...ibm.com>)

August 15 (2 messages)

[security bulletin] HPSBMU02915 rev.1 - HP Service Manager, Remote Unauthenticated Access and Elevation of Privilege (security-alert@...com)
CFP: WorldCIST'14 - World Conference on IST; Best papers published in JCR/ISI Journals ("WorldCIST" <aisti-sd@...ti.eu>)

August 16 (4 messages)

Copy to WebDAV v1.1 iOS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Update: Linksys EA2700, EA3500, E4200v2, EA4500 Unspecified unauthenticated remote access (kyle Lovett <krlovett@...il.com>)
Photo Transfer Upload v1.0 iOS - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Open-Xchange Security Advisory 2013-08-16 (Martin Braun <martin.braun@...n-xchange.com>)

August 19 (5 messages)

MS Excel 2002/2003 CRN record 0day PoC (geinblues@...il.com)
x90c WOFF Firefox 1day exploit (geinblues@...il.com)
Defense in depth -- the Microsoft way (part 7): executable files in data directories ("Stefan Kanthak" <stefan.kanthak@...go.de>)
[SECURITY] [DSA 2738-1] ruby1.9.1 security update (Thijs Kinkhorst <thijs@...ian.org>)
Multiple vulnerabilities on Sitecom N300/N600 devices (roberto.paleari@...ze.net)

August 20 (5 messages)

[security bulletin] HPSBMU02902 rev.2 - HP Integrated Lights-Out iLO3, iLO4, and iLO CM IPMI, Cipher Suite 0 Authentication Bypass Vulnera… (security-alert@...com)
[PSA-2013-0819-1] Oracle Java BytePackedRaster.verify() Signed Integer Overflow (bugtraq@...ketstormsecurity.org)
ESA-2013-047: RSA® Authentication Agent for PAM Unlimited Login Attempts Vulnerability (Security Alert <Security_Alert@....com>)
Samsung DVR authentication bypass (Andrea Fabrizi <andrea.fabrizi@...il.com>)
[security bulletin] HPSBUX02922 SSRT101305 rev.1 - HP-UX Running Java5 Runtime Environment (JRE) and Java Developer Kit (JDK), Remote Unau… (security-alert@...com)

August 21 (12 messages)

Path Traversal in DeWeS Web Server (Twilight CMS) (High-Tech Bridge Security Research <advisory@...ridge.com>)
Cross-Site Scripting (XSS) in BackWPup WordPress Plugin (High-Tech Bridge Security Research <advisory@...ridge.com>)
Cross-Site Scripting (XSS) in Twilight CMS (High-Tech Bridge Security Research <advisory@...ridge.com>)
CVE-2013-4124 samba nttrans dos private exploit (geinblues@...il.com)
[ MDVSA-2013:214 ] python (security@...driva.com)
Netgear ProSafe switches: Unauthenticated startup-config disclosure and Denial of Service (post@...ripto.no)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified Communications Manager (Cisco Systems Product Security Incident Response Team <psirt@...co.c…)
Cisco Security Advisory: Cisco Unified Communications Manager IM and Presence Service Denial of Service Vulnerability (Cisco Systems Product Security Incident …)
Cisco Security Advisory: Cisco Prime Central for Hosted Collaboration Solution Assurance Denial of Service Vulnerabiliti… (Cisco Systems Product Security Incident…)
Windows Embedded POSReady 2009: cruft, not craft ("Stefan Kanthak" <stefan.kanthak@...go.de>)
[security bulletin] HPSBGN02905 rev.2 - HP LoadRunner, HP Business Process Monitor, Remote Code Execution and Denial of Service (DoS) (security-alert@...com)
[SECURITY] [DSA 2739-1] cacti security update (Moritz Muehlenhoff <jmm@...ian.org>)

August 22 (9 messages)

FreeBSD Security Advisory FreeBSD-SA-13:10.sctp (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
[slackware-security] poppler (SSA:2013-233-03) (Slackware Security Team <security@...ckware.com>)
[slackware-security] hplip (SSA:2013-233-01) (Slackware Security Team <security@...ckware.com>)
[slackware-security] xpdf (SSA:2013-233-02) (Slackware Security Team <security@...ckware.com>)
FreeBSD Security Advisory FreeBSD-SA-13:09.ip_multicast (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
[ MDVSA-2013:215 ] cacti (security@...driva.com)
CVE-2013-4152 XML External Entity (XXE) injection in Spring Framework (Pivotal Security Team <security@...ivotal.com>)
Joomla! VirtueMart component <= 2.0.22a - SQL Injection (Matias Fontanini <matias.fontanini@...il.com>)
[security bulletin] HPSBST02897 rev.1 - HP StoreOnce D2D Backup System, Remote Denial of Service (DoS) (security-alert@...com)

August 23 (9 messages)

CVE-2013-4124 samba dos exploit (geinblues@...il.com)
NEW VMSA-2013-0010 VMware Workstation host privilege escalation vulnerability (VMware Security Team <security@...are.com>)
[ MDVSA-2013:217 ] spice (security@...driva.com)
[ MDVSA-2013:216 ] perl-Proc-ProcessTable (security@...driva.com)
[ MDVSA-2013:218 ] python-django (security@...driva.com)
[ MDVSA-2013:219 ] libtiff (security@...driva.com)
Wordpress videowhisper-live-streaming-integration Plugin Xss vulnerabilities (iedb.team@...il.com)
PayPal Bug Bounty #110 - Auth Bypass (Session) Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[SECURITY] [DSA 2740-1] python-django security update (Salvatore Bonaccorso <carnil@...ian.org>)

August 26 (11 messages)

libtiff <= 3.9.5 integer overflow bug (geinblues@...il.com)
Wordpress post-gallery Plugin Xss vulnerabilities (iedb.team@...il.com)
Defense in depth -- the Microsoft way (part 8): execute everywhere! ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Re: [Full-disclosure] Defense in depth -- the Microsoft way (part 8): execute everywhere! (Jeffrey Walton <noloader@...il.com>)
Re: [Full-disclosure] Defense in depth -- the Microsoft way (part 8): execute everywhere! ("Stefan Kanthak" <stefan.kanthak@...go.de>)
[SECURITY] [DSA 2741-1] chromium-browser security update (Michael Gilbert <mgilbert@...ian.org>)
DC4420 - London DEFCON - August Meet - Tuesday 27th August 2013 (Major Malfunction <majormal@...ate-radio.org>)
Re: [Full-disclosure] Defense in depth -- the Microsoft way (part 8): execute everywhere! (James Lay <jlay@...ve-tothe-box.net>)
Re: [Full-disclosure] Defense in depth -- the Microsoft way (part 8): execute everywhere! (James Lay <jlay@...ve-tothe-box.net>)
Re: [Full-disclosure] Defense in depth -- the Microsoft way (part 8): execute everywhere! ("Heavenly Avenger" <avenger@...nger.ws>)
[SECURITY] [DSA 2742-1] php5 security update (Florian Weimer <fw@...eb.enyo.de>)

August 27 (6 messages)

[SECURITY] [DSA 2743-1] kfreebsd-9 security update (Aurelien Jarno <aurelien@...el32.net>)
POC2013 Call for Paper (pocadm@...il.com)
[ MDVSA-2013:220 ] lcms (security@...driva.com)
[ MDVSA-2013:221 ] php (security@...driva.com)
[SECURITY] [DSA 2744-1] tiff security update (Moritz Muehlenhoff <jmm@...ian.org>)
[ MDVSA-2013:222 ] puppet (security@...driva.com)

August 28 (10 messages)

IBM Lotus iNotes 8.5.x cross-site scripting vulnerabilities (danielthomson72@...il.com)
AST-2013-005: Remote Crash when Invalid SDP is sent in SIP Request ("Asterisk Security Team" <security@...erisk.org>)
AST-2013-004: Remote Crash From Late Arriving SIP ACK With SDP ("Asterisk Security Team" <security@...erisk.org>)
Two Instagram Android App Security Vulnerabilities (Georg Lukas <lukas@...solutions.de>)
[security bulletin] HPSBHF02888 rev.3 - HP Network Products including H3C and 3COM Routers and Switches, Remote Information Disclosure and… (security-alert@...com)
Cisco Security Advisory: Cisco Secure Access Control Server Remote Command Execution Vulnerability (Cisco Systems Product Security Incident Response Team <psirt…)
[CORE-2013-0805] Aloaha PDF Suite Buffer Overflow Vulnerability (CORE Advisories Team <advisories@...esecurity.com>)
CORE-2013-0808 - EPS Viewer Buffer Overflow Vulnerability (CORE Advisories Team <advisories@...esecurity.com>)
CORE-2013-0726 - AVTECH DVR multiple vulnerabilities (CORE Advisories Team <advisories@...esecurity.com>)
30C3 Call for Participation (fukami <lists@....io>)

August 29 (8 messages)

[SECURITY] [DSA 2745-1] linux security update (dann frazier <dannf@...ian.org>)
Drupal Node View Permissions module and Flag module Vulnerabilities (danielthomson72@...il.com)
CyberArk User Enumeration - Multiple vulnerabilities (moshez@...secglobal.com)
CVE-2013-5216 CapaSystems Performance Guard Path Traversal Vulnerability (kerem.kocaer@...il.com)
[SECURITY] [DSA 2746-1] icedove security update (Moritz Muehlenhoff <jmm@...ian.org>)
UTA EDU University ENG - SQL Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Department of Transport UK - SQL Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Microsoft MSRC RSS ASPX - CS Cross Site Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

August 30 (7 messages)

NEW VMSA-2013-0011 VMware ESXi and ESX address an NFC Protocol Unhandled Exception (VMware Security Team <security@...are.com>)
[slackware-security] php (SSA:2013-242-02) (Slackware Security Team <security@...ckware.com>)
VUPEN Security Research - Microsoft Windows "LdrHotPatchRoutine" Remote ASLR Bypass (Pwn2Own 2013 / MS13-063) (VUPEN Security Research <advisories@...en.com>)
VUPEN Security Research - Microsoft Internet Explorer Protected Mode Sandbox Bypass (Pwn2Own 2013 / MS13-059) (VUPEN Security Research <advisories@...en.com>)
[ MDVSA-2013:223 ] asterisk (security@...driva.com)
VUPEN Security Research - Microsoft Internet Explorer "ReplaceAdjacentText" Use-after-free (MS13-059) (VUPEN Security Research <advisories@...en.com>)
[slackware-security] gnutls (SSA:2013-242-01) (Slackware Security Team <security@...ckware.com>)

208 messages

Powered by blists - more mailing lists