bugtraq mailing list - 2015/08

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2015/08

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹	²
³ 6	⁴ 4	⁵ 4	⁶ 11	⁷ 8	⁸	⁹
¹⁰ 6	¹¹	¹² 15	¹³ 13	¹⁴	¹⁵	¹⁶
¹⁷ 28	¹⁸ 6	¹⁹ 13	²⁰ 14	²¹ 5	²²	²³
²⁴ 15	²⁵ 5	²⁶ 10	²⁷ 5	²⁸	²⁹	³⁰
³¹ 13

Messages by day:

August 3 (6 messages)

[SECURITY] [DSA 3322-1] ruby-rack security update (Salvatore Bonaccorso <carnil@...ian.org>)
Multiple XSS vulnerabilities in FortiSandbox WebUI (hyp3rlinx@...os.com)
[SECURITY] [DSA 3323-1] icu security update (Laszlo Boszormenyi <gcs@...ian.org>)
[SECURITY] [DSA 3324-1] icedove security update (Alessandro Ghedini <ghedo@...ian.org>)
[SECURITY] [DSA 3325-1] apache2 security update (Stefan Fritsch <sf@...ian.org>)
[SECURITY] [DSA 3326-1] ghostscript security update (Salvatore Bonaccorso <carnil@...ian.org>)

August 4 (4 messages)

[SECURITY] [DSA 3327-1] squid3 security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 3328-1] wordpress security update (Thijs Kinkhorst <thijs@...ian.org>)
Mozilla extensions: a security nightmare ("Stefan Kanthak" <stefan.kanthak@...go.de>)
[SECURITY] [DSA 3328-2] wordpress regression update (Thijs Kinkhorst <thijs@...ian.org>)

August 5 (4 messages)

SEC Consult SA-20150805-0 :: Websense Content Gateway Stack Buffer Overflow in handle_debug_network (SEC Consult Vulnerability Lab <research@...-consult.com>)
Re: [FD] Mozilla extensions: a security nightmare ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Re: [FD] Mozilla extensions: a security nightmare (Ansgar Wiechers <bugtraq@...netcobalt.net>)
[security bulletin] HPSBUX03388 SSRT102180 rev.1 - HP-UX running OpenSSL, Remote Disclosure of Information (security-alert@...com)

August 6 (11 messages)

Re: [FD] Mozilla extensions: a security nightmare ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Vulnerable MSVC++ runtime distributed with LibreOffice 5.0.0 for Windows ("Stefan Kanthak" <stefan.kanthak@...go.de>)
FreeBSD Security Advisory FreeBSD-SA-15:18.bsdpatch (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-15:19.routed (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
Re: [FD] Mozilla extensions: a security nightmare (Reindl Harald <h.reindl@...lounge.net>)
Re: [FD] Mozilla extensions: a security nightmare ("Bruce A. Peters" <bpeters@...kure.com>)
Re: [FD] Mozilla extensions: a security nightmare (Christoph Gruber <list@...u.at>)
Re: [FD] Mozilla extensions: a security nightmare ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Re: [FD] Mozilla extensions: a security nightmare (Reindl Harald <h.reindl@...lounge.net>)
Re: [FD] Mozilla extensions: a security nightmare (Andrew Deck <andrew.hastings.deck@...il.com>)
Re: [FD] Mozilla extensions: a security nightmare ("Stefan Kanthak" <stefan.kanthak@...go.de>)

August 7 (8 messages)

Re: [FD] Mozilla extensions: a security nightmare ("Stefan Kanthak" <stefan.kanthak@...go.de>)
RE: [FD] Mozilla extensions: a security nightmare ("Steve Friedl" <steve@...xwiz.net>)
RE: [FD] Mozilla extensions: a security nightmare (Frank Waarsenburg <fwaarsenburg@...-it.nl>)
Re: [FD] Mozilla extensions: a security nightmare (Reindl Harald <h.reindl@...lounge.net>)
Re: [FD] Mozilla extensions: a security nightmare (Jakob Holderbaum <hi@...ob.io>)
[SECURITY] [DSA 3329-1] linux security update (Salvatore Bonaccorso <carnil@...ian.org>)
Re: [FD] Mozilla extensions: a security nightmare ("Teddy A PURWADI" <teddyap@...ess.net.id>)
Thomson Reuters FATCA - Arbitrary File Upload (jakub.palaczynski@...servicespolska.pl)

August 10 (6 messages)

Ferrari - PHP CGI Argument Injection (RCE) Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Device Inspector v1.5 iOS - Command Inject Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
QNAP crypto keys logged on unencrypted disk partition in world accessible files (Andreas Steinmetz <ast@...dv.de>)
[SECURITY] [DSA 3330-1] activemq security update (Moritz Muehlenhoff <jmm@...ian.org>)
[slackware-security] mozilla-nss (SSA:2015-219-02) (Slackware Security Team <security@...ckware.com>)
[slackware-security] mozilla-firefox (SSA:2015-219-01) (Slackware Security Team <security@...ckware.com>)

August 12 (15 messages)

[Onapsis Security Advisory 2015-010] SAP Mobile Platform DataVault Keystream Recovery (Onapsis Research Labs <research@...psis.com>)
[Onapsis Security Advisory 2015-012] SAP Mobile Platform DataVault Predictable Encryption Password for Secure Storage (Onapsis Research Labs <research@...psis.…)
[Onapsis Security Advisory 2015-011] SAP Mobile Platform DataVault Predictable encryption passwords for Configuration V… (Onapsis Research Labs <research@...psis…)
[SECURITY] [DSA 3334-1] gnutls28 security update (Salvatore Bonaccorso <carnil@...ian.org>)
Pdf Shaper Buffer Overflow (metacom27@...il.com)
Windows Platform Binary Table (WPBT) - BIOS PE backdoor (Kevin Beaumont <kevin.beaumont@...il.com>)
bizidea Design CMS 2015Q3 - SQL Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[SECURITY] [DSA 3333-1] iceweasel security update (Moritz Muehlenhoff <jmm@...ian.org>)
PHPfileNavigator 2.3.3 Persistent & Reflected XSS (apparitionsec@...il.com)
BFS-SA-2015-001: Internet Explorer CTreeNode::GetCascadedLang Use-After-Free Vulnerability (Blue Frost Security Research Lab <research@...efrostsecurity.de>)
phpipam-1.1.010 XSS Vulnerability (apparitionsec@...il.com)
PHPfileNavigator v2.3.3 CSRF Add Arbitrary Users (apparitionsec@...il.com)
phpipam-1.1.010 XSS Vulnerability (apparitionsec@...il.com)
[CVE-2015-4624] Predictable CSRF tokens in WiFi Pineapple firmware <= 2.3.0 (Ken <catatonicprime@...il.com>)
[SECURITY] [DSA 3332-1] wordpress security update (Thijs Kinkhorst <thijs@...ian.org>)

August 13 (13 messages)

[SECURITY] [DSA 3335-1] request-tracker4 security update (Salvatore Bonaccorso <carnil@...ian.org>)
RE: Windows Platform Binary Table (WPBT) - BIOS PE backdoor ("Limanovski, Dimitri" <dimitri.limanovski@...ckrock.com>)
Cisco Unified Communications Manager Multiple Vulnerabilities (VP2015-001) (Bernhard Mueller <bernhard@...tagepoint.sg>)
Re: Windows Platform Binary Table (WPBT) - BIOS PE backdoor (Jerome Athias <athiasjerome@...il.com>)
Update: Backdoor and RCE found in 8 TOTOLINK router models (Pierre Kim <pierre.kim.sec@...il.com>)
[security bulletin] HPSBGN03386 rev.1 - HP Central View Fraud Risk Management, Revenue Leakage Control, Dealer Performance Audit, Credit R… (security-alert@...com)
[security bulletin] HPSBGN03393 rev.1 - HP Operations Manager i, Remote Code Execution (security-alert@...com)
Re: Windows Platform Binary Table (WPBT) - BIOS PE backdoor ("Stefan Kanthak" <stefan.kanthak@...go.de>)
APPLE-SA-2015-08-13-1 Safari 8.0.8, Safari 7.1.8, and Safari 6.2.8 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2015-08-13-3 iOS 8.4.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2015-08-13-2 OS X Yosemite v10.10.5 and Security Update 2015-006 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2015-08-13-4 OS X Server v4.1.5 (Apple Product Security <product-security-noreply@...ts.apple.com>)
Nuance PowerPDF Advanced Metadata Information Disclosure Vulnerability (low|local) (Christopher Hudel <christopher@...el.com>)

August 17 (28 messages)

Re: Windows Platform Binary Table (WPBT) - BIOS PE backdoor (Kevin Beaumont <kevin.beaumont@...il.com>)
Re: Windows Platform Binary Table (WPBT) - BIOS PE backdoor (Kevin Beaumont <kevin.beaumont@...il.com>)
Re: Windows Platform Binary Table (WPBT) - BIOS PE backdoor (Kevin Beaumont <kevin.beaumont@...il.com>)
BFS-SA-2015-002: OpenSSH PAM Privilege Separation Vulnerabilities (Blue Frost Security Research Lab <research@...efrostsecurity.de>)
Re: Windows Platform Binary Table (WPBT) - BIOS PE backdoor (simon@...gewell.org)
[slackware-security] mozilla-thunderbird (SSA:2015-226-02) (Slackware Security Team <security@...ckware.com>)
[slackware-security] mozilla-firefox (SSA:2015-226-01) (Slackware Security Team <security@...ckware.com>)
vBulletin x.x.x rce "0day" (Joshua Rogers <honey@...ernot.info>)
Re: PayPal Inc Bug Bounty Issue #70 France - Persistent (Escape Shopping) Mail Vulnerability (ahmadshafique@...e.com)
Re: [FD] Mozilla extensions: a security nightmare ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Re: Windows Platform Binary Table (WPBT) - BIOS PE backdoor (Pedro Ribeiro <pedrib@...il.com>)
Re: [MORNINGSTAR-2009-01] Multiple security issues in Open Auto Classifieds version <= 1.5.9 (li0252130467@....com)
Re: NEW : VMSA-2015-0003 VMware product updates address critical information disclosure issue in JRE (13669185678@....com)
Re: Multiple vulnerabilites in vendor IKE implementations, including Cisco, (arash.yazdanfare@...il.com)
Poor security in SOHO routers, again. Changing configuration parameters with a click. ("DonVallejo ." <j.v.vallejo@...il.com>)
Oracle CSO numbers, security hygiene and fixes at the same time (Security Explorations <contact@...urity-explorations.com>)
failure notice (<postmaster@....0.0.1>)
ESA-2015-081: RSA BSAFE® Micro Edition Suite, Crypto-C Micro Edition, Crypto-J, SSL-J and SSL-C Multiple Vulnerabilitie… (Security Alert <Security_Alert@....com>)
ESA-2015-094: RSA Archer® GRC Multiple Cross-Site Request Forgery Vulnerabilities (Security Alert <Security_Alert@....com>)
ESA-2015-131: EMC Documentum Content Server Multiple Vulnerabilities (Security Alert <Security_Alert@....com>)
ESA-2015-130: EMC Documentum WebTop and WebTop Clients Cross-Site Request Forgery Vulnerability (Security Alert <Security_Alert@....com>)
[ERPSCAN-15-012] SAP Afaria 7 XComms – Buffer Overflow (ERPScan inc <erpscan.online@...il.com>)
[ERPSCAN-15-013] SAP NetWeaver AS Java CIM UPLOAD – XXE (ERPScan inc <erpscan.online@...il.com>)
Weak authentication in EMC Secure Remote Services Virtual Edition Web Portal ("Securify B.V." <lists@...urify.nl>)
Insufficient certificate validation in EMC Secure Remote Services Virtual Edition ("Securify B.V." <lists@...urify.nl>)
sysadmin privilege in EMC Documentum Content Server (<andrew@...filov.tel>)
[SECURITY] [DSA 3336-1] nss security update (Salvatore Bonaccorso <carnil@...ian.org>)
EMC Documentum Content Server: arbitrary code execution (incomplete fix in CVE-2015-4532) (<andrew@...filov.tel>)

August 18 (6 messages)

Re: [SECURITY] [DSA 3336-1] nss security update (miguelmellolopes@...il.com)
Re: Re: [SECURITY] [DSA 3336-1] nss security update (rahfsk@...il.com)
Re: [ERPSCAN-15-013] SAP NetWeaver AS Java CIM UPLOAD �?? XXE (rahfsk@...il.com)
[SECURITY] [DSA 3325-2] apache2 regression update (Stefan Fritsch <sf@...ian.org>)
[SECURITY] [DSA 3337-1] gdk-pixbuf security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 3338-1] python-django security update (Alessandro Ghedini <ghedo@...ian.org>)

August 19 (13 messages)

FreeBSD Security Advisory FreeBSD-SA-15:20.expat (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
CVE-2015-5699 - Cumulus Linux's Switch Configuration Tools Backend, clcmd_server, Vulnerable to Local Privilege Escalati… (Gregory Pickett <gpickett71@...oo.com>)
Re: Hawkeye-G v3 CSRF Vulnerability ***[UPDATED CORRECTED] (aabbccdd05407@...il.com)
Trend Micro Deep Discovery Authentication Bypass (apparitionsec@...il.com)
Trend Micro Deep Discovery XSS (apparitionsec@...il.com)
[SYSS-2015-041] XSS in OpenText Secure MFT (adrian.vollmer@...s.de)
Re: CORE-2009-01515 - WordPress Privileges Unchecked in admin.php and Multiple Information (Asher995@...il.com)
RE: CORE-2009-01515 - WordPress Privileges Unchecked in admin.php and Multiple Information ("Chillman, Paul, Vodafone UK" <Paul.Chillman@...afone.com>)
Re: CORE-2009-01515 - WordPress Privileges Unchecked in admin.php and Multiple Information (paul.szabo@...ney.edu.au)
Re: EMC Documentum Content Server: arbitrary code execution (incomplete fix in CVE-2015-4532) (<andrew@...filov.tel>)
Privilege escalation through RPC commands in EMC Documentum Content Server (incomplete fix in CVE-2015-4532) (<andrew@...filov.tel>)
CVE-2015-3269 Apache Flex BlazeDS Insecure Xml Entity Expansion Vulnerability ("Christofer Dutz" <cdutz@...che.org>)
[security bulletin] HPSBUX03400 SSRT102211 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS) (security-alert@...com)

August 20 (14 messages)

[SECURITY] [DSA 3339-1] openjdk-6 security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 3340-1] zendframework security update (Alessandro Ghedini <ghedo@...ian.org>)
Re: CORE-2009-01515 - WordPress Privileges Unchecked in admin.php and Multiple Information (Steve Shockley <steve.shockley@...ckley.net>)
ESA-2015-132: EMC Documentum D2 Fail Open Vulnerability (Security Alert <Security_Alert@....com>)
[SECURITY] [DSA 3341-1] conntrack security update (Salvatore Bonaccorso <carnil@...ian.org>)
Microsoft HTA (HTML Application) - Remote Code Execution Vulnerability (MS14-064) (Vulnerability Lab <research@...nerability-lab.com>)
PDF Shaper v3.5 - (MSF) Remote Buffer Overflow Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
ChiefPDF Software v2.x - Buffer Overflow Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
WebSolutions India Design CMS - SQL Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
UBNT Bug Bounty #1 - Client Side Cross Site Scripting Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
UBNT Bug Bounty #3 - Persistent Filename Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[oCERT-2015-009] VLC arbitrary pointer dereference (Andrea Barisani <lcars@...rt.org>)
[SECURITY] [DSA 3342-1] vlc security update (Alessandro Ghedini <ghedo@...ian.org>)
[security bulletin] HPSBUX03369 SSRT102037 rev.1 - HP-UX execve(2), Local Elevation of Privilege (security-alert@...com)

August 21 (5 messages)

Re: Micro Login System v1.0 (userpwd.txt) Password Disclosure Vulnerability (anonymous@...oo.com)
APPLE-SA-2015-08-20-1 QuickTime 7.7.8 (Apple Product Security <product-security-noreply@...ts.apple.com>)
Re: [SECURITY] [DSA 3325-2] apache2 regression update (franzskinn@...il.com)
[security bulletin] HPSBUX03410 SSRT102175 rev.1 - HP-UX Running BIND, Remote Denial of Service (DoS) (security-alert@...com)
Logstash vulnerability CVE-2015-5619 (Suyog Rao <suyog@...stic.co>)

August 24 (15 messages)

[security bulletin] HPSBGN03395 rev.1 - HP KeyView running on HP-UX, Linux, Solaris, Windows, FreeBSD, and AIX, Remote Code Execution (security-alert@...com)
[slackware-security] gnutls (SSA:2015-233-01) (Slackware Security Team <security@...ckware.com>)
Logstash vulnerability CVE-2015-5619 (Suyog Rao <suyog@...stic.co>)
[security bulletin] HPSBGN03395 rev.1 - HP KeyView running on HP-UX, Linux, Solaris, Windows, FreeBSD, and AIX, Remote Code Execution (security-alert@...com)
Cross site request forgery vulnerability in Linksys WAG120N ("DonVallejo ." <j.v.vallejo@...il.com>)
[SYSS-2015-025] Netop Remote Control - Insufficiently Protected Credentials (matthias.deeg@...s.de)
Dell SonicWall NetExtender Unquoted Autorun Privilege Escalation (ajs@...rdshield.com)
SYSS-2015-033: Missing Function Level Access Control (CWE-935) in Page2Flip Premium App 2.5 (erlijn.vangenuchten@...s.de)
[SYSS-2015-030] Improper Handling of Insufficient Privileges (CWE-274) in Page2Flip Premium App 2.5 (erlijn.vangenuchten@...s.de)
[SYSS-2015-032] Broken Authentication and Session Management (CWE-930) in Page2Flip Premium App 2.5 (erlijn.vangenuchten@...s.de)
[SYSS-2015-029] Insecure Direct Object Reference (CWE-932) in Page2Flip Premium App 2.5 (erlijn.vangenuchten@...s.de)
[SYSS-2015-028] Cross-Site Scripting (CWE-79) in Page2Flip Premium App 2.5 (erlijn.vangenuchten@...s.de)
[SYSS-2015-027] Cross-Site Scripting (CWE-79) in Page2Flip Premium App 2.5 (erlijn.vangenuchten@...s.de)
[SYSS-2015-026] Denial of Service (CWE-730) and Overly Restrictive Account Lockout Mechanism (CWE-645) in Page2Flip Premium App 2.… (erlijn.vangenuchten@...s.de)
[security bulletin] HPSBMU03345 rev.1 - HP Network Node Manager i (NNMi) and Smart Plugins (iSPIs) for HP-UX, Linux, Solaris, and Windows,… (security-alert@...com)

August 25 (5 messages)

[security bulletin] HPSBGN03404 rev.1 - HP Service Health Reporter, Remote Unauthorized Modification (security-alert@...com)
[security bulletin] HPSBMU03409 rev.1 - HP Matrix Operating Environment, Multiple Vulnerabilities (security-alert@...com)
[security bulletin] HPSBMU03396 rev.1 - HP Version Control Repository Manager (VCRM) on Windows and Linux, Multiple Vulnerabilities (security-alert@...com)
[security bulletin] HPSBMU03413 rev.1 - HP Virtual Connect Enterprise Manager SDK, Multiple Vulnerabilities (security-alert@...com)
[security bulletin] HPSBMU03397 rev.1 - HP Version Control Agent (VCA) on Windows and Linux, Multiple Vulnerabilities (security-alert@...com)

August 26 (10 messages)

FreeBSD Security Advisory FreeBSD-SA-15:22.openssh (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-15:21.amd64 (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
RE: [security bulletin] HPSBMU03397 rev.1 - HP Version Control Agent (VCA) on Windows and Linux, Multiple Vulnerabilitie… ("M.H.P. van Diem" <M.H.P.vDiem@....nl>)
[SECURITY] [DSA 3343-1] twig security update (Sebastien Delafond <seb@...ian.org>)
[security bulletin] HPSBGN03414 rev.1 - HP Operations Agent, Remote Disclosure of Information (security-alert@...com)
[security bulletin] HPSBGN03415 rev.1 - HP Operations Agent Virtual Appliance, Remote Disclosure of Information (security-alert@...com)
[security bulletin] HPSBGN03399 rev.1 - HP BSM Connector (BSMC), Remote Unauthorized Modification, Disclosure of Information (security-alert@...com)
[security bulletin] HPSBGN03405 rev.1 - HP Integration Adaptor, Remote Unauthorized Modification, Disclosure of Information (security-alert@...com)
CVE-2015-6535: Stored XSS in YouTube Embed (WordPress plugin) allows admins to compromise super admins (grajalerts.noreply@...il.com)
[security bulletin] HPSBGN03411 rev.1 - HP Operations Agent Virtual Appliance, Remote Unauthorized Disclosure of Information (security-alert@...com)

August 27 (5 messages)

[security bulletin] HPSBHF03408 rev.1 - HP PCs with HP lt4112 LTE/HSPA+ Gobi 4G Module, Remote Execution of Arbitrary Code (security-alert@...com)
UAC Bypass Vulnerability on "Windows 7" in Windows Script Host (vozzie@...il.com)
[security bulletin] HPSBGN03402 rev.2 - HP Performance Manager, Remote Disclosure of Information (security-alert@...com)
[SECURITY] [DSA 3344-1] php5 security update (Sebastien Delafond <seb@...ian.org>)
Re: UAC Bypass Vulnerability on "Windows 7" in Windows Script Host (Rich Pieri <ratinox@....edu>)

August 31 (13 messages)

Re: Re: UAC Bypass Vulnerability on "Windows 7" in Windows Script Host (kev.r@...oo.com)
[slackware-security] mozilla-firefox (SSA:2015-241-01) (Slackware Security Team <security@...ckware.com>)
[SECURITY] [DSA 3345-1] iceweasel security update (Salvatore Bonaccorso <carnil@...ian.org>)
[security bulletin] HPSBMU03416 rev.1 - HP Data Protector, Remote Disclosure of Information (security-alert@...com)
[security bulletin] HPSBGN03387 rev.1 - HP Intelligent Provisioning, Remote Code Execution, Unauthorized Access (security-alert@...com)
[security bulletin] HPSBGN03407 rev.1 - HP Operations Manager for Windows, Remote Unauthorized Modification, Disclosure of Information (security-alert@...com)
PayPal Bug Bounty #119 - Stored Cross Site Scripting Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
LinuxOptic CMS 2009 - Auth Bypass Session Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Jenkins 1.626 - Cross Site Request Forgery / Code Execution (smash@...ilteam.pl)
[SECURITY] [DSA 3346-1] drupal7 security update (Alessandro Ghedini <ghedo@...ian.org>)
Dogma India dogmaindia CMS - Auth Bypass Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[security bulletin] HPSBMU03401 rev.1 - HP Operations Manager for UNIX and Linux, Remote Unauthorized Modification, Disclosure of Informat… (security-alert@...com)
[security bulletin] HPSBGN03403 rev.1 - HP Virtualization Performance Viewer, Remote Unauthorized Disclosure of Information (security-alert@...com)

181 messages

Powered by blists - more mailing lists