:: Deepquest ::

FTP Sprite v1.2.1 iOS – Persistent XSS Vulnerability

Apple Security Advisory 2013-06-18-1 – Java for OS X 2013-004 and Mac OS X v10.6 Update 16 are now available and addresses multiple vulnerabilities that include arbitrary code execution issues.

Apple Security Advisory 2013-06-04-2 – Safari 6.0.5 is now available and addresses 26 security issues.

Core Security Technologies Advisory – A memory corruption vulnerability was found in Mac OSX Directory Service. By sending a maliciously crafted message, a remote attacker could cause the directory server to terminate or execute arbitrary code with system privileges.

GAME ENGINES: A 0-DAY’S TALE

CKEditor < 4.1 Drupal 6.x & 7.x - Persistent XSS Vulnerability

OpenDocMan 1.2.6.5 – Persistent XSS Vulnerability

strongSwan is a complete IPsec implementation for the Linux, Android, Maemo, FreeBSD, and Mac OS X operating systems. It interoperates with with most other IPsec-based VPN products via the IKEv2 or IKEv1 key exchange protocols. The focus of the strongSwan project is on strong authentication mechanisms using X.509 public key certificates and optional secure storage of private keys on smartcards through a standardized PKCS#11 interface.

Ipswitch IMail 11.01 – XSS Vulnerability

Apple Security Advisory 2013-04-16-1 – Safari 6.0.4 is now available and fixes one vulnerability. Visiting a maliciously crafted website may lead to an unexpected application termination or arbitrary code execution Description: An invalid cast issue existed in the handling of SVG files. This issue was addressed through improved type checking.