SecurityFocus

DefenseCode Security Advisory: Cisco Linksys Remote Preauth 0day Root Exploit Follow-Up 2013-02-06
DefenseCode (defensecode defensecode com)

[KIS-2013-02] CubeCart <= 5.2.0 (cubecart.class.php) PHP Object Injection Vulnerability 2013-02-06
Egidio Romano (research karmainsecurity com)

Cross-Site Scripting (XSS) Vulnerability in CommentLuv WordPress Plugin 2013-02-06
advisory htbridge com

[ MDVSA-2013:008 ] mysql 2013-02-06
security mandriva com

SQL Injection Vulnerability in Wysija Newsletters WordPress Plugin 2013-02-06
advisory htbridge com

[CVE-2013-1463]Wordpress wp-table-reloaded‏ plugin XSS in SWF 2013-02-06
hip insight-labs org

Multiple Vulnerabilities in Linksys E1500/E2500 2013-02-05
devnull s3cur1ty de

[PT-2012-53] Privilege Gaining in DataLife Engine 2013-02-05
noreply ptsecurity ru

CVE-2012-6451 Authentication Bypass in LOREX IP Cameras 2013-02-05
doylej ia gmail com

[MajorSecurity-SA-2013-014] Sony Playstation Vita Browser - firmware 2.05 - Adressbar spoofing 2013-02-05
research majorsecurity com

[security bulletin] HPSBST02846 SSRT100798 rev.1 - HP LeftHand Virtual SAN Appliance hydra, Remote Execution of Arbitrary Code 2013-02-05
security-alert hp com

[ MDVSA-2013:007 ] mysql 2013-02-05
security mandriva com

APPLE-SA-2013-02-04-1 OS X Server v2.2.1 2013-02-04
Apple Product Security (product-security-noreply lists apple com)

0day full - Free Monthly Websites v2.0 - Multiple Web Vulnerabilities 2013-02-04
Vulnerability Lab (research vulnerability-lab com)

Free Monthly Websites v2.0 - Multiple Web Vulnerabilities 2013-02-04
Vulnerability Lab (research vulnerability-lab com)

Multiple Vulnerabilities in D'Link DIR-600 and DIR-300 (rev B) 2013-02-04
devnull s3cur1ty de

[IMF 2013] Call for Participation 2013-02-04
Oliver Goebel (goebel cert uni-stuttgart de)

[SE-2012-01] Details of issues fixed by Feb 2013 Java SE CPU 2013-02-04
Security Explorations (contact security-explorations com) (1 replies)

Re: [SE-2012-01] Details of issues fixed by Feb 2013 Java SE CPU 2013-02-05
Security Explorations (contact security-explorations com)

NGS00315 Patch Notification: Symantec Enterprise Security Management Agent Privilege Escalation 2013-02-04
NCC Group Research (research nccgroup com)

NGS00336 Patch Notification: Symantec Network Access Control Privilege Escalation 2013-02-04
NCC Group Research (research nccgroup com)

[SECURITY] [DSA 2616-1] nagios3 security update 2013-02-03
Jonathan Wiltshire (jmw debian org)

[SECURITY] [DSA 2617-1] samba security update 2013-02-02
Luciano Bello (luciano debian org)

[SECURITY] [DSA 2615-1] libupnp4 security update 2013-02-02
Yves-Alexis Perez (corsac debian org)

Directory Traversal - EasyITSP <= 2.0.7 2013-02-04
MichaÅ? BÅ?aszczak (blaszczakm gmail com)

[SECURITY] [DSA 2614-1] libupnp security update 2013-02-02
Yves-Alexis Perez (corsac debian org)

APPLE-SA-2013-02-01-1 Java for Mac OS X v10.6 Update 12 2013-02-02
Apple Product Security (product-security-noreply lists apple com)

DC++ 0.802 and below incorrectly registers URI schemes in Windows 2013-02-01
ullner gmail com

[security bulletin] HPSBMU02842 SSRT100909 rev.1 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Cross Site Scripting (XSS) 2013-02-01
security-alert hp com

[ MDVSA-2013:006 ] freetype2 2013-02-01
security mandriva com

FreeBSD 9.1 ftpd Remote Denial of Service 2013-02-01
max cxsecurity com

Oracle Automated Service Manager 1.3 & Auto Service Request 4.3 local root during install 2013-02-01
larry0 me com

[HITB-Announce] #HITB2013AMS FINAL CALL for Paper Submissions 2013-02-01
Hafez Kamal (aphesz hackinthebox org)

ESA-2013-002: RSA Archer® GRC Multiple Vulnerabilities 2013-01-31
Security Alert (Security_Alert emc com)

Released: rompar - Semi-automation tool for data extraction of microscopic Masked ROM images 2013-01-31
Major Malfunction (majormal pirate-radio org)

DefenseCode Security Advisory: Broadcom UPnP Remote Preauth Root Code Execution Vulnerability 2013-01-31
DefenseCode (defensecode defensecode com)

[security bulletin] HPSBST02839 SSRT101077 rev.1 - HP XP P9000 Command View Advanced Edition, Remote Denial of Service (DoS) 2013-01-30
security-alert hp com

marc4dasm - Atmel MARC microprocessor disassembler published 2013-01-30
Adam Laurie (adam algroup co uk)

OWASP Zed Attack Proxy 2.0.0 2013-01-30
psiinon (psiinon gmail com)

CFP Observe. Hack. Make. 2013-01-30
Walter Belgers walter+bugtraq@belgers.com (walter+bugtraq belgers com)

Buffalo TeraStation TS-Series multiple vulnerabilities 2013-01-30
Andrea Fabrizi (andrea fabrizi gmail com)

[SECURITY] [DSA 2613-1] rails security update 2013-01-30
Thijs Kinkhorst (thijs debian org)

Cisco Security Advisory: Portable SDK for UPnP Devices Contains Buffer Overflow Vulnerabilities 2013-01-29
Cisco Systems Product Security Incident Response Team (psirt cisco com)

Re: Wordpress Valums Uploader - File Upload Vulnerability 2013-01-29
fineuploader garstasio com

Adobe Reader XI versions are vulnerable to a heap overflow 2013-01-29
n1s0o gmail com

XSS in Elgg 1.8.12, 1.7.16 (core module "Twitter widget") 2013-01-29
Moritz Naumann (security moritz-naumann com)

APPLE-SA-2013-01-28-2 Apple TV 5.2 2013-01-28
Apple Product Security (product-security-noreply lists apple com)

APPLE-SA-2013-01-28-1 iOS 6.1 Software Update 2013-01-28
Apple Product Security (product-security-noreply lists apple com)

[KIS-2013-01] DataLife Engine 9.7 (preview.php) PHP Code Injection Vulnerability 2013-01-28
Egidio Romano (research karmainsecurity com)

Kohana Framework v2.3.3 - Directory Traversal Vulnerability 2013-01-28
Vulnerability Lab (research vulnerability-lab com)

ESA-2013-010: EMC AlphaStor Buffer Overflow Vulnerability 2013-01-28
Security Alert (Security_Alert emc com)

Unauthenticated remote access to D-Link DCS cameras 2013-01-28
roberto greyhats it

Fortinet FortiMail 400 IBE - Multiple Web Vulnerabilities 2013-01-28
Vulnerability Lab (research vulnerability-lab com)

nCircle PureCloud Vulnerability Scanner - Multiple Web Vulnerabilities 2013-01-28
Vulnerability Lab (research vulnerability-lab com)

[ MDVSA-2013:005 ] perl 2013-01-28
security mandriva com

[SE-2012-01] An issue with new Java SE 7 security features 2013-01-27
Security Explorations (contact security-explorations com)

WordPress SolveMedia 1.1.0 CSRF Vulnerability 2013-01-24
illSecResearchGroup Gmail com

[SECURITY] [DSA 2612-1] ircd-ratbox security update 2013-01-24
Moritz Muehlenhoff (jmm debian org)

SEC Consult SA-20130124-0 :: Critical SSH Backdoor in multiple Barracuda Networks Products 2013-01-24
SEC Consult Vulnerability Lab (research sec-consult com)

IPv6: How to avoid security issues with VPN leaks on dual-stack networks 2013-01-24
Fernando Gont (fgont si6networks com)

New Blog Post: Attacking the Windows 7/8 Address Space Randomization 2013-01-24
king cope (isowarez isowarez isowarez googlemail com)

SQL Injection Vulnerability in ImageCMS 2013-01-23
advisory htbridge com

Cross-Site Scripting (XSS) vulnerability in gpEasy 2013-01-23
advisory htbridge com

CVE-2013-0805 / CSNC-2013-001 2013-01-23
stephan rickauer csnc ch

CVE ID Syntax Change - Call for Public Feedback 2013-01-23
cve-id-change mitre org

Cisco Security Advisory: Multiple Vulnerabilities in Cisco Wireless LAN Controllers 2013-01-23
Cisco Systems Product Security Incident Response Team (psirt cisco com)

DC4420 - London DEFCON - January 2013 meet. Tuesday 29th January 2013 2013-01-23
Major Malfunction (majormal pirate-radio org)

[slackware-security] mysql (SSA:2013-022-01) 2013-01-23
Slackware Security Team (security slackware com)

[security bulletin] HPSBMU02841 SSRT100724 rev.1 - HP Diagnostics Server, Remote Execution of Arbitrary Code 2013-01-22
security-alert hp com

Re: [SE-2012-01] Java 7 Update 11 confirmed to be vulnerable 2013-01-22
Security Explorations (contact security-explorations com)

Wordpress Valums Uploader - File Upload Vulnerability 2013-01-22
Vulnerability Lab (research vulnerability-lab com)

CVE-2013-1402 - DigiLIBE Management Console - Execution After Redirect (EAR) Vulnerability 2013-01-22
i amroot com

SEC Consult SA-20130122-1 :: F5 BIG-IP SQL injection vulnerability 2013-01-22
SEC Consult Vulnerability Lab (research sec-consult com)

SEC Consult SA-20130122-0 :: F5 BIG-IP XML External Entity Injection vulnerability 2013-01-22
SEC Consult Vulnerability Lab (research sec-consult com)

Looking for security contacts 2013-01-22
DefenseCode (defensecode defensecode com)

Wordpress Developer Formatter CSRF Vulnerability 2013-01-22
illSecResearchGroup gmail com

[SECURITY] [DSA 2611-1] movabletype-opensource security update 2013-01-22
Yves-Alexis Perez (corsac debian org)

[HITB-Announce] REMINDER: #HITB2013AMS Call for Papers Closes 8th Feb 2013-01-22
Hafez Kamal (aphesz hackinthebox org)

[SECURITY] [DSA 2610-1] ganglia security update 2013-01-21
Yves-Alexis Perez (corsac debian org)

Multiple SQL injection vulnerabilities in Cardoza Wordpress poll plugin 2013-01-21
marcelavbx gmail com

Re: EMC Avamar: World writable cache files 2013-01-21
security_alert emc com

Multiple Vulnerabilities in Linksys WRT54GL 2013-01-18
devnull s3cur1ty de

NoSuchCon CFP / 15-17 May 2013 / Paris, France 2013-01-21
Jonathan Brossard (endrazine gmail com)

(AUSCERT#20131775e) AusCERT 2013 Call For Presentations - closing in 10 days 2013-01-21
auto-bulletins auscert org au

Mozilla Firefox and Microsoft Internet Explorer stall when using workaround from MS06-020 or MS06-069 2013-01-20
Stefan Kanthak (stefan kanthak nexgo de)

[SECURITY] [DSA 2605-2] asterisk regression update 2013-01-19
Thijs Kinkhorst (thijs debian org)

CA20121220-01: Security Notice for CA IdentityMinder [updated] 2013-01-18
Williams, James K (James Williams ca com)

ESA-2013-008: EMC AlphaStor Multiple Vulnerabilities 2013-01-18
Security Alert (Security_Alert emc com)

[SE-2012-01] Java 7 Update 11 confirmed to be vulnerable 2013-01-18
Security Explorations (contact security-explorations com)

Recently-revised IETF I-Ds about IPv6 security 2013-01-18
Fernando Gont (fgont si6networks com)

CVE-2012-6452 Axway Secure Messenger Username Disclosure 2013-01-17
jason doyle fishnetsecurity com

NSOADV-2013-002: DELL SonicWALL GMS/Viewpoint/Analyzer Authentication Bypass (/sgms/) 2013-01-17
NSO Research (nso-research sotiriu de)

NSOADV-2013-001: DELL SonicWALL GMS/Viewpoint/Analyzer Authentication Bypass (/appliance/) 2013-01-17
NSO Research (nso-research sotiriu de)

Secunia Research: Oracle Outside In Technology Paradox Database Handling Buffer Overflow 2013-01-17
Secunia Research (remove-vuln secunia com)

Secunia Research: Oracle Outside In Technology Paradox Database Handling Denial of Service 2013-01-17
Secunia Research (remove-vuln secunia com)

Cisco Security Advisory Update v1.1: Cisco Unified IP Phone Local Kernel System Call Input Validation Vulnerability 2013-01-17
Cisco Systems Product Security Incident Response Team (psirt cisco com)

[SECURITY] [DSA 2609-1] rails security update 2013-01-16
Florian Weimer (fw deneb enyo de)

DC4420 - 2013 CFP 2013-01-16
Major Malfunction (majormal pirate-radio org)

Cisco Security Advisory: Cisco ASA 1000V Cloud Firewall H.323 Inspection Denial of Service Vulnerability 2013-01-16
Cisco Systems Product Security Incident Response Team (psirt cisco com)

Re: [CVE-ID REQUEST] vBulletin - Multiple Open Redirects 2013-01-16
rgilbert halock com