New source for vulns

[firefart]

http://wpforce.com/ publishes a vuln report every month.
Would be great if this infos can be merged in the vulns.xml file.

Example:
http://wpforce.com/wordpress-security-threats-sep2012/

[gbrindisi]

Yep, will have a look.
We are a little behind on plugins vulns (I think 4-5), my fault.

I'll be back full time on this next week.

[gbrindisi]

Just a quick note: if you have some root source of advisories, like exploit db or packet storm or random-corp-advisory-page, let me know so I can add them to our notification bot.

The closer to an original source the better!

[fgeek]

Why this issue is still open after five moths?

[gbrindisi]

@fgeek Because we are working on a new db and we are keeping this issue open as a remainder.

[fgeek]

@firefart still something TODO in this issue?

[pvdl]

Sources, with pagination
OSVDB: http://osvdb.org/search?search[text_type]=titles&search[vuln_title]=wordpress&page=1
Exploit-DB: http://www.exploit-db.com/search/?action=search&filter_description=wordpress&filter_page=1
CVE: http://web.nvd.nist.gov/view/vuln/search-results?page_num=0&cves=true&query=wordpress
Packet Storm: http://packetstormsecurity.com/search/files/page1/?q=wordpress
Secunia: http://secunia.com/community/advisories/search/?search=wordpress&page=0
IBM: http://search.iss.net/Search.do?keyword=wordpress&searchType=keywd&start=0&sort=date%3aD%3aS%3ad1

RSS feeds:
Packet Storm RSS-feed: http://rss.packetstormsecurity.com/search/files/page1/?q=wordpress
http://cxsecurity.com/cverss/2324/3929/wordpress/

Other sources:
Twitter WPvulns: http://twitter.com/wpvulns
CXSECURITY: http://cxsecurity.com/
Leetday: http://1337day.com/webapps

And to broadcast WPScan updates to the world:
https://github.com/wpscanteam/wpscan/commits/master.atom

[erwanlr]

Another one for exploits: http://www.mondounix.com/category/wordpress/wordpress_security/

[ethicalhack3r]

Closing as Work in Progress.