Advisories

• 2015-11-03 n/a Amazon Pay SDK: payment notification forgery via unvalidated SigningCertURL high →
• 2013-05-13 CVE-2013-3725 Invision Power Board <= 3.4.4: admin account takeover leading to code execution critical →
• 2010-10-05 n/a Facebook: XSS / CSRF worms on the social network [en, fr] critical →
• 2006-10-29 CVE-2006-5735CVE-2006-5736CVE-2006-5737 PunBB <= 1.2.13: multiple vulnerabilities critical →

Want to know when I publish? Subscribe. Something to report? Encrypt it.