HP Security Bulletin HPSBGN03286 1 – A potential security vulnerability has been identified with HP LoadRunner. The vulnerability could be exploited remotely to allow a buffer overflow. Revision 1 of this advisory.

Debian Linux Security Advisory 3264-1 – Multiple security issues have been found in Icedove, Debian’s version of buffer overflows and use-after-frees may lead to the execution of arbitrary code, privilege escalation or denial of service.

Debian Linux Security Advisory 3263-1 – Vadim Melihow discovered that in proftpd-dfsg, an FTP server, the mod_copy module allowed unauthenticated users to copy files around on the server, and possibly to execute arbitrary code.

Debian Linux Security Advisory 3265-1 – Multiple vulnerabilities were discovered in Zend Framework, a PHP framework. Except for CVE-2015-3154, all these issues were already fixed in the version initially shipped with Jessie.

HiDisk version 2.4 suffers from cross site scripting vulnerabilities.

Apple Security Advisory 2015-05-19-1 – Watch OS 1.0.1 is now available and addresses certificate issues, arbitrary code execution, XML external entity, and various other vulnerabilities.

26 bytes small Linux/x86 execve “/bin/sh” shellcode.