jetlib.sec

Feeds

185586 items (724 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db) (73 unread)
• OSVDB Vulnerabilities
• Exploit-DB (66 unread)
• SecurityFocus Vulnerabilities (303 unread)
• Bugtraq (87 unread)
• Full Disclosure (72 unread)
• XSSed
• Packet Storm Security Headlines (71 unread)
• Packet Storm Security Advisories (50 unread)
• Packet Storm Security Exploits (2 unread)
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

Unread items (250)

• November 05, 2014
• 9:00

  Bugtraq: Wordpress bulletproof-security

   » ‎ SecurityFocus Vulnerabilities
  Wordpress bulletproof-security <=.51 multiple vulnerabilities

  Tags:   

• 8:00

  Bugtraq: WordPress Wordfence Firewall 5.1.2 Cross Site Scripting

   » ‎ SecurityFocus Vulnerabilities
  WordPress Wordfence Firewall 5.1.2 Cross Site Scripting

  Tags:   

• 7:00

  Bugtraq: Two Reflected Cross-Site Scripting (XSS) Vulnerabilities in Forma Lms

   » ‎ SecurityFocus Vulnerabilities
  Two Reflected Cross-Site Scripting (XSS) Vulnerabilities in Forma Lms

  Tags:   

• 6:00

  Bugtraq: Arbitrary File Upload in HelpDEZk

   » ‎ SecurityFocus Vulnerabilities
  Arbitrary File Upload in HelpDEZk

  Tags:   

• 5:00

  Bugtraq: CVE-2014-6616 Softing FG-100 Webui XSS

   » ‎ SecurityFocus Vulnerabilities
  CVE-2014-6616 Softing FG-100 Webui XSS

  Tags:   

• 4:00

  Bugtraq: CVE-2014-6617 Softing FG-100 Backdoor Account

   » ‎ SecurityFocus Vulnerabilities
  CVE-2014-6617 Softing FG-100 Backdoor Account

  Tags:   

• 0:00

  Vuln: GNU Libtasn1 CVE-2014-3468 Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  GNU Libtasn1 CVE-2014-3468 Remote Code Execution Vulnerability

  Tags:   

• 0:00

  Vuln: Apache HTTP Server CVE-2014-0118 Remote Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache HTTP Server CVE-2014-0118 Remote Denial of Service Vulnerability

  Tags:   

• 0:00

  Vuln: Oracle Java SE CVE-2014-0416 Remote Security Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Oracle Java SE CVE-2014-0416 Remote Security Vulnerability

  Tags:   

• 0:00

  Vuln: Oracle Java SE CVE-2014-0411 Remote Security Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Oracle Java SE CVE-2014-0411 Remote Security Vulnerability

  Tags:   

• 0:00

  Vuln: Oracle Java SE CVE-2014-0423 Remote Security Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Oracle Java SE CVE-2014-0423 Remote Security Vulnerability

  Tags:   

• November 04, 2014
• 21:00

  Bugtraq: [slackware-security] mariadb (SSA:2014-307-01)

   » ‎ SecurityFocus Vulnerabilities
  [slackware-security] mariadb (SSA:2014-307-01)

  Tags:   

• 20:52

  Vulnerabilities in D-Link DAP-1360

   » ‎ Full Disclosure

  Posted by MustLive on Nov 05

  Hello list!
  
  There are Abuse of Functionality, Brute Force and Cross-Site Request Forgery
  vulnerabilities in D-Link DAP-1360 (Wi-Fi Access Point and Router).
  
  -------------------------
  Affected products:
  -------------------------
  
  Vulnerable is the next model: D-Link DAP-1360, Firmware 1.0.0. This model
  with other firmware versions also must be vulnerable.
  
  D-Link will fix these vulnerabilities in the next version of firmware (will
  be released in...
  

  Tags:   

• 20:52

  KL-001-2014-004 : VMWare vmx86.sys Arbitrary Kernel Read

   » ‎ Full Disclosure

  Posted by KoreLogic Disclosures on Nov 05

  Title: VMWare vmx86.sys Arbitrary Kernel Read
  Advisory ID: KL-001-2014-004
  Publication Date: 2014.11.04
  Publication URL: https://www.korelogic.com/Resources/Advisories/KL-001-2014-004.txt
  
  1. Vulnerability Details
  
  Affected Vendor: VMWare
  Affected Product: Workstation
  Affected Version: 10.0.0.40273
  Platform: Microsoft Windows XP SP3 x86, Microsoft Windows Server 2003 SP2 x86, Microsoft Windows 7 SP1 x86
  CWE...
  

  Tags:   

• 16:20

  [web applications] - MODX Revolution 2.2.14 CSRF / XSS Vulnerabilities

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [web applications] - MODX Revolution 2.2.14 CSRF / XSS Vulnerabilities

  Tags:   

• 16:20

  [web applications] - CNIL CookieViz Cross Site Scripting / SQL Injection Vulnerabilities

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [web applications] - CNIL CookieViz Cross Site Scripting / SQL Injection Vulnerabilities

  Tags:   

• 16:20

  [web applications] - WordPress Wordfence Firewall 5.1.2 Cross Site Scripting Vulnerability

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [web applications] - WordPress Wordfence Firewall 5.1.2 Cross Site Scripting Vulnerability

  Tags:   

• _2.6.39_(32-bit___64-bit)_-_Mempodipper__2"> 16:00

  [local] - Linux Local Root => 2.6.39 (32-bit & 64-bit) - Mempodipper #2

   » ‎ Exploit-DB
  Linux Local Root => 2.6.39 (32-bit & 64-bit) - Mempodipper #2

  Tags:   

• 9:00

  Bugtraq: [slackware-security] mozilla-firefox (SSA:2014-307-02)

   » ‎ SecurityFocus Vulnerabilities
  [slackware-security] mozilla-firefox (SSA:2014-307-02)

  Tags:   

• 8:00

  Bugtraq: [slackware-security] php (SSA:2014-307-03)

   » ‎ SecurityFocus Vulnerabilities
  [slackware-security] php (SSA:2014-307-03)

  Tags:   

• 7:00

  Bugtraq: [slackware-security] seamonkey (SSA:2014-307-04)

   » ‎ SecurityFocus Vulnerabilities
  [slackware-security] seamonkey (SSA:2014-307-04)

  Tags:   

• 6:29

  Pirate Bay Co-Founder 'TiAMO' Arrested In Thailand

   » ‎ Packet Storm Security Headlines
  Pirate Bay Co-Founder 'TiAMO' Arrested In Thailand

  Tags:   

• 6:29

  Pro-Democracy Hong Kong Sites DDoS'ed With Chinese Cyber-Toolkit

   » ‎ Packet Storm Security Headlines
  Pro-Democracy Hong Kong Sites DDoS'ed With Chinese Cyber-Toolkit

  Tags:   

• 1:19

  [slackware-security] php (SSA:2014-307-03)

   » ‎ Bugtraq

  Posted by Slackware Security Team on Nov 04

  [slackware-security] php (SSA:2014-307-03)
  
  New php packages are available for Slackware 14.0, 14.1, and -current to
  fix security issues.
  
  Here are the details from the Slackware 14.1 ChangeLog:
  +--------------------------+
  patches/packages/php-5.4.34-i486-1_slack14.1.txz: Upgraded.
  This update fixes bugs and security issues.
  #68044 (Integer overflow in unserialize() (32-bits only)). (CVE-2014-3669)
  #68113 (Heap corruption in...
  

  Tags:   

• 1:09

  [slackware-security] mozilla-firefox (SSA:2014-307-02)

   » ‎ Bugtraq

  Posted by Slackware Security Team on Nov 04

  [slackware-security] mozilla-firefox (SSA:2014-307-02)
  
  New mozilla-firefox packages are available for Slackware 14.1 and -current to
  fix security issues.
  
  Here are the details from the Slackware 14.1 ChangeLog:
  +--------------------------+
  patches/packages/mozilla-firefox-31.2.0esr-i486-1_slack14.1.txz: Upgraded.
  This release contains security fixes and improvements.
  For more information, see:...
  

  Tags:   

• 1:00

  [slackware-security] mariadb (SSA:2014-307-01)

   » ‎ Bugtraq

  Posted by Slackware Security Team on Nov 04

  [slackware-security] mariadb (SSA:2014-307-01)
  
  New mariadb packages are available for Slackware 14.1 and -current to
  fix security issues.
  
  Here are the details from the Slackware 14.1 ChangeLog:
  +--------------------------+
  patches/packages/mariadb-5.5.40-i486-1_slack14.1.txz: Upgraded.
  This update contains security fixes and improvements.
  For more information, see:
  cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6507...
  

  Tags:   

• 0:52

  [slackware-security] seamonkey (SSA:2014-307-04)

   » ‎ Bugtraq

  Posted by Slackware Security Team on Nov 04

  [slackware-security] seamonkey (SSA:2014-307-04)
  
  New seamonkey packages are available for Slackware 14.0, 14.1, and -current to
  fix security issues.
  
  Here are the details from the Slackware 14.1 ChangeLog:
  +--------------------------+
  patches/packages/seamonkey-2.30-i486-1_slack14.1.txz: Upgraded.
  This update contains security fixes and improvements.
  For more information, see:...
  

  Tags:   

• 0:43

  Modx CMS CSRF Bypass & XSS Vulnerabilities

   » ‎ Bugtraq

  Posted by bhati . contact on Nov 04

  Public Disclosure -
  hacktivity.websecgeeks.com/modx-csrf-and-xss/
  ===========================================
  Product: MODX Revolution
  Severity: Critical
  Versions: 2.0.0–2.2.14
  Vulnerability type: CSRF & XSS
  Report date: 2014-Jul-10
  Fixed date: 2014-Jul-15
  
  Description
  A significant vulnerability was discovered in the Manager login of MODX Revolution that also affects the use of the
  Login Extra. A malicious user could formulate a...
  

  Tags:   

• 0:32

  Ahrareandeysheh CMS Cross-Site Scripting Vulnerability

   » ‎ Bugtraq

  Posted by iedb . team on Nov 04

  Ahrareandeysheh CMS All version suffers from a Cross-Site Scripting Vulnerability
  
  #################################
  
  #
  # @@@ @@@@@@@@@@@ @@@@@ @@@@@@@@@@ @@@ @@@@@@@
  # @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@@@
  # @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@
  # @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@
  #...
  

  Tags:   

• 0:21

  CFP: Fourth World Congress - SEMCMI2015 - Malaysia

   » ‎ Bugtraq

  Posted by Conference Updates on Nov 04

  The International Conference on Software Engineering, Mobile Computing
  and Media Informatics (SEMCMI2015)
  - Part of The Fourth World Congress on Computing and Information
  Technology (WCIT) -
  
  Asia Pacific University of Technology and Innovation (APU)
  Kuala Lumpur, Malaysia
  September 29 - October 1, 2015
  sdiwc.net/conferences/semcmi2015/
  
  All registered papers will be included in SDIWC Digital Library...
  

  Tags:   

• 0:00

  Vuln: Mozilla Firefox/Thunderbird CVE-2014-1578 Out of Bounds Memory Corruption Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Mozilla Firefox/Thunderbird CVE-2014-1578 Out of Bounds Memory Corruption Vulnerability

  Tags:   

• 0:00

  Vuln: Cisco Unified Communications Manager Reports Interface Multiple Cross Site Scripting Vulnerabilities