Bugtraq: by thread

Bugtraq: by thread

132 messages starting Jan 01 13 and ending Jan 31 13
Date index | Thread index | Author index

Charybdis: Improper assumptions in the server handshake code may lead to a remote crash muztapha (Jan 01)
Re: CubeCart 5.0.7 and lower versions | Insecure Backup File Handling YGN Ethical Hacker Group (Jan 01)
CubeCart 5.x | Cross Site Request Forgery (CSRF) Vulnerability YGN Ethical Hacker Group (Jan 01)
CubeCart 5.x | Multiple Cross Site Scripting Vulnerabilities YGN Ethical Hacker Group (Jan 01)
Re: GnuPG 1.4.12 and lower - memory access errors and keyring database corruption Kurt Seifried (Jan 01)
- Re: GnuPG 1.4.12 and lower - memory access errors and keyring database corruption Kurt Seifried (Jan 02)
AthCon 2013 CFP OPEN cfp (Jan 01)
ShakaCon 2013 - Call for Papers Shakacon (Jan 02)
[ MDVSA-2013:001 ] gnupg security (Jan 02)
AST-2012-014: Crashes due to large stack allocations when using TCP Asterisk Security Team (Jan 03)
AST-2012-015: Denial of Service Through Exploitation of Device State Caching Asterisk Security Team (Jan 03)
Aastra IP Telephone encrypted .tuz configuration file leakage Timo Juhani Lindfors (Jan 03)
Simple Webserver 2.3-rc1 Directory Traversal cwggenius (Jan 03)
CVE-2012-6493 - Nexpose Security Console - Cross-Site Request Forgery (CSRF) i () amroot com (Jan 04)
CVE-2012-6494 - Nexpose Security Console - Session Hijacking i () amroot com (Jan 04)
TomatoCart 1.x | Unrestricted File Creation YGN Ethical Hacker Group (Jan 04)
CFP: InfoSec Southwest 2013 todb (Jan 07)
[SECURITY] [DSA 2597-1] rails security update Nico Golde (Jan 07)
[SECURITY] [DSA 2598-1] weechat security update Moritz Muehlenhoff (Jan 07)
[SECURITY] [DSA 2599-1] nss security update Thijs Kinkhorst (Jan 07)
[SECURITY] [DSA 2600-1] cups security update Nico Golde (Jan 07)
[security bulletin] HPSBOV02833 SSRT101043 rev.1 - OpenVMS running Java on Integrity Servers, Remote Unauthorized Access, Disclosure of Information, and Other Vulnerabilities security-alert (Jan 07)
Chrome for Android - UXSS via com.android.browser.application_id Intent extra mbsdtest01 (Jan 07)
Chrome for Android - Download Function Information Disclosure mbsdtest01 (Jan 07)
Chrome for Android - Android APIs exposed to JavaScript mbsdtest01 (Jan 07)
Chrome for Android - Bypassing SOP for Local Files By Symlinks mbsdtest01 (Jan 07)
Chrome for Android - Cookie theft from Chrome by malicious Android app mbsdtest01 (Jan 07)
Facebook for Android - Information Diclosure Vulnerability mbsdtest01 (Jan 07)
ESA-2013-001: EMC NetWorker Buffer Overflow vulnerability Security Alert (Jan 08)
[security bulletin] HPSBUX02829 SSRT100883 rev.1 - HP-UX Running X Font Server (xfs) Software, Local Denial of Service (DoS), Unauthorized Access security-alert (Jan 08)
[SECURITY] [DSA 2602-1] zendframework security update Florian Weimer (Jan 08)
Cisco Security Advisory: Cisco Prime LAN Management Solution Command Execution Vulnerability Cisco Systems Product Security Incident Response Team (Jan 09)
Cisco Security Advisory: Cisco Unified IP Phone Local Kernel System Call Input Validation Vulnerability Cisco Systems Product Security Incident Response Team (Jan 09)
[ MDVSA-2013:002 ] firefox security (Jan 09)
Cross-Site Scripting (XSS) vulnerability in Quick.Cms and Quick.Cart advisory (Jan 09)
Remote Buffer Overflow Vulnerability in Samsung Kies advisory (Jan 09)
Nero MediaHome Multiple Remote DoS Vulnerabilities advisory (Jan 09)
[ MDVSA-2013:003 ] rootcerts security (Jan 09)
[SECURITY] [DSA 2603-1] emacs23 security update Moritz Muehlenhoff (Jan 09)
[SECURITY] [DSA 2604-1] rails security update Thijs Kinkhorst (Jan 09)
[slackware-security] mozilla-firefox (SSA:2013-009-01) Slackware Security Team (Jan 10)
[slackware-security] seamonkey (SSA:2013-009-03) Slackware Security Team (Jan 10)
[slackware-security] mozilla-thunderbird (SSA:2013-009-02) Slackware Security Team (Jan 10)
[ MDVSA-2013:004 ] tomcat5 security (Jan 10)
OrangeHRM 2.7.1 Vacancy Name Persistent XSS SBV Research (Jan 10)
Wordpress gallery-3.8.3 plugin Arbitrary File Read Vulnerability Beni_vanda (Jan 10)
- Re: Wordpress gallery-3.8.3 plugin Arbitrary File Read Vulnerability Henri Salo (Jan 11)
  - Re: Wordpress gallery-3.8.3 plugin Arbitrary File Read Vulnerability Paolo Perego (Jan 16)
Detailed examples of two vulnerabilities in whitelisting software: SE46 (Cryptzone) and Application Control (McAfee) Arne Vidström (Jan 10)
DefenseCode Security Advisory (UPCOMING): Cisco Linksys Remote Preauth 0day Root Exploit DefenseCode (Jan 10)
[SE-2012-01] 'Fix' for Issue 32 exploited by new Java 0-day code Security Explorations (Jan 11)
[security bulletin] HPSBMU02838 SSRT100789 rev.1 - HP Serviceguard on Linux, Remote Denial of Service (DoS) security-alert (Jan 11)
Arbitrary File Upload and Code Execution in Accusoft Prizm Content Connect Include Security Research (Jan 14)
[SECURITY] [DSA 2606-1] proftpd-dfsg security update Thijs Kinkhorst (Jan 14)
[SECURITY] [DSA 2605-1] asterisk security update Thijs Kinkhorst (Jan 14)
CVE-2012-5641 Apache CouchDB Information disclosure via unescaped backslashes in URLs on Windows Jan Lehnardt (Jan 14)
CVE-2012-5650 Apache CouchDB DOM based Cross-Site Scripting via Futon UI Jan Lehnardt (Jan 14)
CVE-2012-5649 Apache CouchDB JSONP arbitrary code execution with Adobe Flash Jan Lehnardt (Jan 14)
Updated - CA20121018-01: Security Notice for CA ARCserve Backup Kotas, Kevin J (Jan 14)
[IA33] Serva v2.0.0 DNS Server Remote Denial of Service Inshell Security (Jan 14)
[IA34] Serva v2.0.0 HTTP Server GET Remote Denial of Service Inshell Security (Jan 14)
[SECURITY] [DSA 2607-1] qemu-kvm security update Florian Weimer (Jan 15)
[SECURITY] [DSA 2608-1] qemu security update Florian Weimer (Jan 15)
Trimble® Infrastructure GNSS Series Receivers Cross Site Scripting (XSS) vulnerability Rustein, Fara Denise \(LATCO - Buenos Aires\) (Jan 15)
[slackware-security] freetype (SSA:2013-015-01) Slackware Security Team (Jan 16)
Re: [CVE-ID REQUEST] Atlassian Confluence - Multiple Cross-Site Request Forgery (CSRF) Vulnerabilities rgilbert (Jan 16)
Re: [CVE-ID REQUEST] vBulletin - Multiple Open Redirects rgilbert (Jan 16)
Cisco Security Advisory: Cisco ASA 1000V Cloud Firewall H.323 Inspection Denial of Service Vulnerability Cisco Systems Product Security Incident Response Team (Jan 16)
DC4420 - 2013 CFP Major Malfunction (Jan 16)
[SECURITY] [DSA 2609-1] rails security update Florian Weimer (Jan 17)
Cisco Security Advisory Update v1.1: Cisco Unified IP Phone Local Kernel System Call Input Validation Vulnerability Cisco Systems Product Security Incident Response Team (Jan 17)
Secunia Research: Oracle Outside In Technology Paradox Database Handling Denial of Service Secunia Research (Jan 17)
Secunia Research: Oracle Outside In Technology Paradox Database Handling Buffer Overflow Secunia Research (Jan 17)
NSOADV-2013-001: DELL SonicWALL GMS/Viewpoint/Analyzer Authentication Bypass (/appliance/) NSO Research (Jan 17)
NSOADV-2013-002: DELL SonicWALL GMS/Viewpoint/Analyzer Authentication Bypass (/sgms/) NSO Research (Jan 17)
CVE-2012-6452 Axway Secure Messenger Username Disclosure jason . doyle (Jan 18)
Recently-revised IETF I-Ds about IPv6 security Fernando Gont (Jan 21)
[SE-2012-01] Java 7 Update 11 confirmed to be vulnerable Security Explorations (Jan 21)
- Message not available
  - Message not available
    - Re: [SE-2012-01] Java 7 Update 11 confirmed to be vulnerable Security Explorations (Jan 22)
ESA-2013-008: EMC AlphaStor Multiple Vulnerabilities Security Alert (Jan 21)
CA20121220-01: Security Notice for CA IdentityMinder [updated] Williams, James K (Jan 21)
[SECURITY] [DSA 2605-2] asterisk regression update Thijs Kinkhorst (Jan 21)
Mozilla Firefox and Microsoft Internet Explorer stall when using workaround from MS06-020 or MS06-069 Stefan Kanthak (Jan 21)
NoSuchCon CFP / 15-17 May 2013 / Paris, France Jonathan Brossard (Jan 21)
(AUSCERT#20131775e) AusCERT 2013 Call For Presentations - closing in 10 days auto-bulletins (Jan 21)
Multiple Vulnerabilities in Linksys WRT54GL devnull (Jan 21)
Re: EMC Avamar: World writable cache files security_alert (Jan 21)
Multiple SQL injection vulnerabilities in Cardoza Wordpress poll plugin marcelavbx (Jan 21)
[SECURITY] [DSA 2610-1] ganglia security update Yves-Alexis Perez (Jan 22)
[HITB-Announce] REMINDER: #HITB2013AMS Call for Papers Closes 8th Feb Hafez Kamal (Jan 22)
[SECURITY] [DSA 2611-1] movabletype-opensource security update Yves-Alexis Perez (Jan 22)
Looking for security contacts DefenseCode (Jan 22)
Wordpress Developer Formatter CSRF Vulnerability illSecResearchGroup (Jan 22)
SEC Consult SA-20130122-0 :: F5 BIG-IP XML External Entity Injection vulnerability SEC Consult Vulnerability Lab (Jan 22)
SEC Consult SA-20130122-1 :: F5 BIG-IP SQL injection vulnerability SEC Consult Vulnerability Lab (Jan 22)
CVE-2013-1402 - DigiLIBE Management Console - Execution After Redirect (EAR) Vulnerability i (Jan 22)
Wordpress Valums Uploader - File Upload Vulnerability Vulnerability Lab (Jan 22)
- <Possible follow-ups>
- Re: Wordpress Valums Uploader - File Upload Vulnerability fineuploader (Jan 29)
[security bulletin] HPSBMU02841 SSRT100724 rev.1 - HP Diagnostics Server, Remote Execution of Arbitrary Code security-alert (Jan 23)
[slackware-security] mysql (SSA:2013-022-01) Slackware Security Team (Jan 23)
DC4420 - London DEFCON - January 2013 meet. Tuesday 29th January 2013 Major Malfunction (Jan 23)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Wireless LAN Controllers Cisco Systems Product Security Incident Response Team (Jan 24)
CVE ID Syntax Change - Call for Public Feedback cve-id-change (Jan 24)
CVE-2013-0805 / CSNC-2013-001 stephan . rickauer (Jan 24)
Cross-Site Scripting (XSS) vulnerability in gpEasy advisory (Jan 24)
SQL Injection Vulnerability in ImageCMS advisory (Jan 24)
New Blog Post: Attacking the Windows 7/8 Address Space Randomization king cope (Jan 24)
IPv6: How to avoid security issues with VPN leaks on dual-stack networks Fernando Gont (Jan 24)
SEC Consult SA-20130124-0 :: Critical SSH Backdoor in multiple Barracuda Networks Products SEC Consult Vulnerability Lab (Jan 24)
[SECURITY] [DSA 2612-1] ircd-ratbox security update Moritz Muehlenhoff (Jan 25)
WordPress SolveMedia 1.1.0 CSRF Vulnerability illSecResearchGroup (Jan 25)
[SE-2012-01] An issue with new Java SE 7 security features Security Explorations (Jan 29)
[ MDVSA-2013:005 ] perl security (Jan 29)
nCircle PureCloud Vulnerability Scanner - Multiple Web Vulnerabilities Vulnerability Lab (Jan 29)
Fortinet FortiMail 400 IBE - Multiple Web Vulnerabilities Vulnerability Lab (Jan 29)
ESA-2013-010: EMC AlphaStor Buffer Overflow Vulnerability Security Alert (Jan 29)
Kohana Framework v2.3.3 - Directory Traversal Vulnerability Vulnerability Lab (Jan 29)
[KIS-2013-01] DataLife Engine 9.7 (preview.php) PHP Code Injection Vulnerability Egidio Romano (Jan 29)
APPLE-SA-2013-01-28-1 iOS 6.1 Software Update Apple Product Security (Jan 29)
APPLE-SA-2013-01-28-2 Apple TV 5.2 Apple Product Security (Jan 29)
Unauthenticated remote access to D-Link DCS cameras roberto (Jan 29)
XSS in Elgg 1.8.12, 1.7.16 (core module "Twitter widget") Moritz Naumann (Jan 29)
Adobe Reader XI versions are vulnerable to a heap overflow n1s0o (Jan 29)
Cisco Security Advisory: Portable SDK for UPnP Devices Contains Buffer Overflow Vulnerabilities Cisco Systems Product Security Incident Response Team (Jan 30)
[SECURITY] [DSA 2613-1] rails security update Thijs Kinkhorst (Jan 30)
Buffalo TeraStation TS-Series multiple vulnerabilities Andrea Fabrizi (Jan 31)
CFP Observe. Hack. Make. Walter Belgers (Jan 31)
OWASP Zed Attack Proxy 2.0.0 psiinon (Jan 31)
marc4dasm - Atmel MARC microprocessor disassembler published Adam Laurie (Jan 31)
[security bulletin] HPSBST02839 SSRT101077 rev.1 - HP XP P9000 Command View Advanced Edition, Remote Denial of Service (DoS) security-alert (Jan 31)
DefenseCode Security Advisory: Broadcom UPnP Remote Preauth Root Code Execution Vulnerability DefenseCode (Jan 31)
Released: rompar - Semi-automation tool for data extraction of microscopic Masked ROM images Major Malfunction (Jan 31)

Previous period

Next period