Bugtraq: by thread
RSS Feed
About List
All Lists
Previous period
155 messages
starting Feb 03 14 and
ending Feb 28 14
Date index |
Thread index |
Author index
- [SECURITY] [DSA 2850-1] libyaml security update Salvatore Bonaccorso (Feb 03)
- CVE-2014-1213 - Denial of Service in Sophos Anti Virus advisories (Feb 03)
- CVE-2014-1214 - Remote Code Execution in Projoom NovaSFH Plugin advisories (Feb 06)
- [SECURITY] [DSA 2851-1] drupal6 security update Salvatore Bonaccorso (Feb 03)
- Security advisory, LedgerSMB 1.3.0-1.3.36 Chris Travers (Feb 03)
- [slackware-security] pidgin (SSA:2014-034-01) Slackware Security Team (Feb 04)
- Security Advisory: NETGEAR Router D6300B Firmware: V1.0.0.14_1.0.14 marcel . mangold (Feb 05)
- ESA-2014-005: EMC Documentum Foundation Services (DFS) Content Access Vulnerability Security Alert (Feb 05)
- Multiple SQL Injection Vulnerabilities in AuraCMS High-Tech Bridge Security Research (Feb 06)
- SQL Injection in doorGets CMS High-Tech Bridge Security Research (Feb 06)
- [SECURITY] [DSA 2853-1] horde3 security update Luciano Bello (Feb 06)
- Inteno DG301 Command Injection post (Feb 06)
- [ISecAuditors Security Advisories] Multiple reflected XSS vulnerabilities in Atmail WebMail ISecAuditors Security Advisories (Feb 06)
- [SECURITY] [DSA 2855-1] libav security update Moritz Muehlenhoff (Feb 06)
- [SECURITY] CVE-2014-0050 Apache Commons FileUpload and Apache Tomcat DoS Mark Thomas (Feb 06)
- German Telekom Bug Bounty #9 - Code Execution Vulnerability Vulnerability Lab (Feb 06)
- German Telekom Bug Bounty #10 - Arbitrary File Upload Vulnerability Vulnerability Lab (Feb 06)
- German Telekom Bug Bounty #11 - Remote SQL Injection Vulnerability Vulnerability Lab (Feb 06)
- AlienVault OSSIM SQL Injection vulnerability jakx . ppr (Feb 06)
- CORE-2014-0001 - Publish-It Buffer Overflow Vulnerability CORE Advisories Team (Feb 06)
- [SECURITY] [DSA 2852-1] libgadu security update Florian Weimer (Feb 07)
- Information on recently-fixed Oracle VM VirtualBox vulnerabilities Matthew Daley (Feb 07)
- gpEasy v4.3.x CMS - Multiple Web Vulnerabilities Vulnerability Lab (Feb 09)
- Facebook Bug Bounty #12 - Client Side Exception Web Vulnerability Vulnerability Lab (Feb 09)
- WHMCS Denial of Service Vulnerability iedb . team (Feb 09)
- [SECURITY] [DSA 2856-1] libcommons-fileupload-java security update Florian Weimer (Feb 09)
- [oCERT-2014-001] MantisBT input sanitization errors Andrea Barisani (Feb 09)
- [SECURITY] [DSA 2857-1] libspring-java security update Moritz Muehlenhoff (Feb 10)
- [slackware-security] mozilla-firefox (SSA:2014-039-01) Slackware Security Team (Feb 10)
- #CONFidence 2014- Call for Papers, only 0111 days left to become CONFidence ninja Andrzej Targosz (Feb 10)
- [slackware-security] seamonkey (SSA:2014-039-03) Slackware Security Team (Feb 10)
- ASUS AiCloud Enabled Routers 12 Models - Authentication bypass and Sensitive file/path disclosure kyle Lovett (Feb 10)
- [slackware-security] mozilla-thunderbird (SSA:2014-039-02) Slackware Security Team (Feb 10)
- Phpbb Forum Denial of Service Vulnerability iedb . team (Feb 11)
- Open-Xchange Security Advisory 2014-02-10 Martin Braun (Feb 11)
- [SECURITY] [DSA 2858-1] iceweasel security update Moritz Muehlenhoff (Feb 11)
- [SECURITY] [DSA 2859-1] pidgin security update Moritz Muehlenhoff (Feb 11)
- [mwrlabs advisory][CVE-2014-0748] Cray Aprun/Apinit Privilege Escalation john . fitzpatrick (Feb 11)
- Wordpress all_in_one_carousel Plugin /XSS/CSRF/ Vuln iedb . team (Feb 13)
- WiFi Camera Roll v1.2 iOS - Multiple Web Vulnerabilities Vulnerability Lab (Feb 13)
- [ MDVSA-2014:025 ] pidgin security (Feb 13)
- [SECURITY] [DSA 2860-1] parcimonie security update Salvatore Bonaccorso (Feb 13)
- [CVE-2014-1903] FreePBX 2.9 through 12 RCE rob . thomas (Feb 13)
- [SECURITY] [DSA 2850-2] libyaml regression update Salvatore Bonaccorso (Feb 13)
- jDisk (stickto) v2.0.3 iOS - Multiple Web Vulnerabilities Vulnerability Lab (Feb 13)
- [ MDVSA-2014:026 ] openldap security (Feb 13)
- Mybb All Version Denial of Service Vulnerability iedb . team (Feb 13)
- APPLE-SA-2014-02-11-1 Boot Camp 5.1 Apple Product Security (Feb 13)
- ASUS RT Series Routers FTP Service - Default anonymous access kyle Lovett (Feb 13)
- Re: ASUS RT Series Routers FTP Service - Default anonymous access kyle Lovett (Feb 13)
- [ MDVSA-2014:027 ] php security (Feb 13)
- Wordpress plugin Buddypress <= 1.9.1 stored xss vulnerability Pietro Oliva (Feb 13)
- Wordpress plugin Buddypress <= 1.9.1 privilege escalation vulnerability Pietro Oliva (Feb 13)
- [ISecAuditors Security Advisories] - Reflected XSS vulnerability in Boxcryptor (www.boxcryptor.com) ISecAuditors Security Advisories (Feb 13)
- Critical security flaws in Nagios NRPE client/server crypto Aaron Zauner (Feb 14)
- RE: CVE-2014-1219 - Unauthenticated Privilege Escalation in CA 2E Web Option Williams, James K (Feb 14)
- [ MDVSA-2014:028 ] mariadb security (Feb 14)
- [slackware-security] ntp (SSA:2014-044-02) Slackware Security Team (Feb 14)
- [slackware-security] curl (SSA:2014-044-01) Slackware Security Team (Feb 14)
- [ MDVSA-2014:029 ] mysql security (Feb 14)
- ESA-2014-009: RSA BSAFE® SSL-J Multiple Vulnerabilities Security Alert (Feb 17)
- [ MDVSA-2014:034 ] yaml security (Feb 17)
- [ MDVSA-2014:031 ] drupal security (Feb 17)
- [ MDVSA-2014:033 ] socat security (Feb 17)
- [ MDVSA-2014:032 ] flite security (Feb 17)
- CISTI'2014: List of Workshops ML (Feb 17)
- [SWRX-2014-001] Open Web Analytics Pre-Auth SQL Injection no-reply (Feb 17)
- phpMyBackupPro-2.4 Cross-Site Scripting vulnerability iedb . team (Feb 17)
- Full Disclosure - Linksys EA2700, EA3500, E4200 and EA4500 - Authentication Bypass to Administrative Console kyle Lovett (Feb 17)
- Office Assistant Pro v2.2.2 iOS - File Include Vulnerability Vulnerability Lab (Feb 17)
- mbDriveHD v1.0.7 iOS - Multiple Web Vulnerabilities Vulnerability Lab (Feb 17)
- File Hub v1.9.1 iOS - Multiple Web Vulnerabilities Vulnerability Lab (Feb 17)
- [SECURITY] [DSA 2861-1] file security update Salvatore Bonaccorso (Feb 17)
- [SECURITY] [DSA 2862-1] chromium-browser security update Michael Gilbert (Feb 17)
- Jetro Cockpit Secure Browsing vulnerability - Client missing input validation allowing RCE Ronen Z (Feb 17)
- My PDF Creator & DE DM v1.4 iOS - Multiple Vulnerabilities Vulnerability Lab (Feb 17)
- [ MDVSA-2014:035 ] libpng security (Feb 17)
- [ MDVSA-2014:036 ] varnish security (Feb 17)
- Recon 2014 Call For Papers - June 27-29, 2014 - Montreal, Quebec cfp2014 (Feb 17)
- [ MDVSA-2014:037 ] ffmpeg security (Feb 17)
- [ MDVSA-2014:038 ] kernel security (Feb 17)
- Re: [Full-disclosure] CVE-2013-1643 - Unauthorised Access To Other Users Email Messages in Symantec PGP Universal Web Messenger Tim Brown (Feb 18)
- SEC Consult SA-20140218-0 :: Multiple critical vulnerabilities in Symantec Endpoint Protection SEC Consult Vulnerability Lab (Feb 18)
- [ MDVSA-2014:040 ] puppet security (Feb 19)
- CVE-2014-1215 - Local Code Execution in CoreFTP Core FTP Server Portcullis Advisories (Feb 19)
- CVE-2014-1223 - Cross-site Scripting in Telligent Evolution Portcullis Advisories (Feb 24)
- [SECURITY] [DSA 2863-1] libtar security update Luciano Bello (Feb 19)
- [ MDVSA-2014:039 ] libgadu security (Feb 19)
- CA20140218-01: Security Notice for CA 2E Web Option Williams, James K (Feb 19)
- [ MDVSA-2014:043 ] gnutls security (Feb 20)
- [ MDVSA-2014:042 ] tomcat6 security (Feb 20)
- Barracuda Message Archiver 650 - Persistent Web Vulnerability Vulnerability Lab (Feb 20)
- Cisco Security Advisory: Cisco UCS Director Default Credentials Vulnerability Cisco Systems Product Security Incident Response Team (Feb 20)
- Cisco Security Advisory: Cisco Firewall Services Module Cut-Through Proxy Denial of Service Vulnerability Cisco Systems Product Security Incident Response Team (Feb 20)
- Post Exploitation - Getting username and password in the Lotus Sametime 8.5.1 adrianomarciomonteiro (Feb 20)
- [ MDVSA-2014:044 ] zarafa security (Feb 20)
- VideoCharge Studio v2.12.3.685 cc.dll CHTTPResponse::GetHttpResponse() Buffer Overflow Remote Code Execution Julien Ahrens (Feb 20)
- [ MDVSA-2014:041 ] python security (Feb 20)
- [slackware-security] kernel (SSA:2014-050-03) Slackware Security Team (Feb 20)
- Cisco Security Advisory: Unauthorized Access Vulnerability in Cisco Unified SIP Phone 3905 Cisco Systems Product Security Incident Response Team (Feb 20)
- SQL Injection in AdRotate High-Tech Bridge Security Research (Feb 20)
- Cisco Security Advisory: Multiple Vulnerabilities in Cisco IPS Software Cisco Systems Product Security Incident Response Team (Feb 20)
- [slackware-security] mariadb, mysql (SSA:2014-050-02) Slackware Security Team (Feb 20)
- [ MDVSA-2014:045 ] libtar security (Feb 20)
- Android & iOS Hands-on Exploitation at SyScan 2014 xys3c team (Feb 20)
- [HITB-Announce] Haxpo CFP Hafez Kamal (Feb 20)
- [SECURITY] [DSA 2864-1] postgresql-8.4 security update Moritz Muehlenhoff (Feb 21)
- [CVE-2014-2035] XSS in InterWorx Web Control Panel <= 5.0.12 Eric Flokstra (Feb 21)
- [slackware-security] gnutls (SSA:2014-050-01) Slackware Security Team (Feb 21)
- [SECURITY] [DSA 2865-1] postgresql-9.1 security update Moritz Muehlenhoff (Feb 21)
- ASUS router drive-by code execution via XSS and authentication bypass buqtraq (Feb 21)
- Barracuda Bug Bounty #36 Firewall - Client Side Exception Handling Web Vulnerability Vulnerability Lab (Feb 21)
- [ MDVSA-2014:046 ] phpmyadmin security (Feb 21)
- CNNVD Gov CN #1 - Filter Bypass & Persistent Web Vulnerability Vulnerability Lab (Feb 21)
- [ MDVSA-2014:047 ] postgresql security (Feb 24)
- 44CON 2014 September 11th - 12th CFP Open Steve (Feb 24)
- APPLE-SA-2014-02-21-1 iOS 6.1.6 Apple Product Security (Feb 24)
- <Possible follow-ups>
- APPLE-SA-2014-02-21-1 iOS 6.1.6 Apple Product Security (Feb 24)
- APPLE-SA-2014-02-21-2 iOS 7.0.6 Mihaela Popescu-Stanesti (Feb 24)
- <Possible follow-ups>
- APPLE-SA-2014-02-21-2 iOS 7.0.6 Apple Product Security (Feb 24)
- APPLE-SA-2014-02-21-3 Apple TV 6.0.2 Mihaela Popescu-Stanesti (Feb 24)
- <Possible follow-ups>
- APPLE-SA-2014-02-21-3 Apple TV 6.0.2 Apple Product Security (Feb 24)
- DC4420 - London DEFCON - meeting Tuesday, 25th February 2014 Major Malfunction (Feb 24)
- [SECURITY] [DSA 2866-1] gnutls26 security update Salvatore Bonaccorso (Feb 24)
- [CISTI'2014]: Iberian Conference on IST; Barcelona; Deadline: February 28 ML (Feb 24)
- [SECURITY] [DSA 2867-1] otrs2 security update Salvatore Bonaccorso (Feb 24)
- Barracuda Networks Bug Bounty #35 - Persistent Web Vulnerability Vulnerability Lab (Feb 24)
- WiFiles HD v1.3 iOS - File Include Web Vulnerability Vulnerability Lab (Feb 24)
- [security bulletin] HPSBMU02964 rev.1 - HP Service Manager, Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF), Remote Denial of Service (DoS), Execution of Arbitrary Code, Unauthorized Access, Disclosure of Information and Authentication Issues security-alert (Feb 24)
- [security bulletin] HPSBST02937 rev.1 - HP StoreVirtual 4000 and StoreVirtual VSA Software dbd_manager, Remote Execution of Arbitrary Code security-alert (Feb 25)
- [security bulletin] HPSBMU02971 rev.1 - HP Application Information Optimizer, Remote Execution of Code, Information Disclosure security-alert (Feb 25)
- [SECURITY] CVE-2014-0033 Session fixation still possible with disableURLRewriting enabled Mark Thomas (Feb 25)
- [SECURITY] CVE-2013-4322 Incomplete fix for CVE-2012-3544 (Denial of Service) Mark Thomas (Feb 25)
- [SECURITY] CVE-2013-4590 Information disclosure via XXE when running untrusted web applications Mark Thomas (Feb 25)
- [SECURITY] CVE-2013-4286 Incomplete fix for CVE-2005-2090 (Information disclosure) Mark Thomas (Feb 25)
- Barracuda Networks Firewall Bug Bounty #32 - Filter Bypass & Persistent Web Vulnerabilities Vulnerability Lab (Feb 25)
- [RT-SA-2014-001] McAfee ePolicy Orchestrator: XML External Entity Expansion in Dashboard RedTeam Pentesting GmbH (Feb 25)
- Message not available
- Office 365 - Account Hijacking Cookie Re-Use Flaw, extended Oei, Géry (Feb 27)
- Message not available