OpenSSL is a robust, fully featured Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols with full-strength cryptography world-wide.
3c179f46ca77069a6a0bac70212a9b3b838b2f66129cb52d568837fc79d8fcc7
TomatoCart version 1.x (latest-stable) suffers from cross site scripting and remote SQL injection vulnerabilities.
cd380b42173cb9381f2c2e040433d1adfe568239973fe9274ff5f404846bf040
PhotoSync Wifi and Bluetooth version 1.0 suffers from a local file inclusion vulnerability.
d3483e908f63901493046e31452b90ead46276bba888524dbc8ac0d24edd4ebb
PhotoSync version 2.2 suffers from a local command injection vulnerability.
1f9a7e72bedb018b0a50c0402a7d59b8d07239faa389ceb778291411617a617b
HP Security Bulletin HPSBMU03085 - A potential security vulnerability has been identified with HP Application Lifecycle Management, which is also known as HP Quality Center. The vulnerability could be exploited to allow elevation of privilege. Revision 1 of this advisory.
81b6de768aab389d3d6fcebe5088edd8a448aa75a28431d6961575cd8d1ff417
Voipswitch versions 6 and below suffer fro a local file inclusion vulnerability.
99285209e2a9d1ba5bc478592fac9872c9517a0e41ce98337f1faa3cc15c2ca5
The Call For Papers for nullcon 666 has been announced. It will take place from February 4th through the 7th, 2015.
de63b4e0af1bca9742b263c81ebc0ffc35eb1ed36fa00b0977ec17917e6c1eb6
Smack XMPP library for Java suffers for a man-in-the-middle vulnerability. Versions 4.0.0 and 4.0.1 are affected.
cc79aa40f99651e357445431f6e8d8c60ecbebbfc96fefd016f0aff6670bf205
Vembu has responded to multiple vulnerabilities pointed out in their Vembu Backup and Disaster Recovery product.
aa02299f19ccadc4809437d2d9f45591ad6a1c7f678fbd6acc9a27643f6fd79a
Feng Office suffers from a stored cross site scripting vulnerability.
4e6b89c44f0660acebb6cfdb9c7ca89844fd211734ee9aab80f281dfab699943
Pro Chat Rooms version 8.2.0 suffers from cross site scripting, remote shell upload, and remote SQL injection vulnerabilities.
092328ae16ef177c9795a9de9d4cf99ab91fed8cc97811b81ea280b8e80364c7
OpenSSL Security Advisory 20140806 - A flaw in OBJ_obj2txt may cause pretty printing functions such as X509_name_oneline, X509_name_print_ex et al. to leak some information from the stack. Applications may be affected if they echo pretty printing output to the attacker. OpenSSL SSL/TLS clients and servers themselves are not affected. Other issues were also addressed.
2883e6b93580d6b479ec7deff02c94d30c4e29451dfc7278c3bc66db6f1c6795
Readsoft Invoice Processing version 5.6 and Process Director version 7.2 suffers from cross site scripting and design vulnerabilities.
58bf606761fd0cbf2446293ded7d4bf6daba9b1265483f987c814d44bf97c023
Hitron Technologies CDE-30364 suffers from a remote reboot / denial of service vulnerability.
ad8836ddff9830d92e4a6dea9cebe2cef93c73d2629e0d38af158f10c8331d55
Crescendo - Sales CRM suffers from a remote SQL injection vulnerability that allows for login bypass.
6737a74ace9fe3643c31dcd9f35db6125a5aa6b8a923f9db45dd4c24e4854842
WordPress WPSS plugin version 0.62 suffers from a remote SQL injection vulnerability. Note that this finding houses site-specific data.
1f4c75c4efbfbde58f520ccfb0a4fa721c4efa0f5d82dd24d0058aa8d15ba2d3
WordPress WPSS plugin version 0.62 suffers from a cross site scripting vulnerability. Note that this finding houses site-specific data.
573d18117c642a6f633f17a29834ae59e01c18f4fef919461a88f1e167dbd769