[Full-disclosure] Vulnerabilities in Contact Form 7 for WordPress

Hello list! I want to inform you about vulnerabilities in Contact Form 7 plugin for WordPress. These are Code Execution via Arbitrary File Uploading vulnerabilities (two attack vectors). This is addition to previous Code Execution vulnerability in Contact Form 7 (http://seclists.org/fulldisclosu

[Full-disclosure] [SECURITY] [DSA 2850-1] libyaml security update

-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 - - Debian Security Advisory DSA-2850-1 secur...@debian.org http://www.debian.org/security/ Salvatore Bonaccorso January 31, 2014

[Full-disclosure] [SE-2013-01] Security vulnerabilities in Oracle Java Cloud Service

Hello All, Those concerned about security of Java PaaS (Platform as a Service) or cloud services in general might find the following information interesting. Security Explorations discovered multiple security vulnerabilities in the environment of Oracle [1] Java Cloud Service [2]. Among a tota