full-disclosure mailing list - 2012/06

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2012/06

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹ 5	²	³ 1
⁴ 17	⁵ 15	⁶ 40	⁷ 33	⁸ 57	⁹ 23	¹⁰ 44
¹¹ 11	¹² 6	¹³ 14	¹⁴ 16	¹⁵ 18	¹⁶ 4	¹⁷ 2
¹⁸ 7	¹⁹ 4	²⁰ 10	²¹ 21	²² 5	²³ 1	²⁴ 6
²⁵ 26	²⁶ 2	²⁷ 19	²⁸ 14	²⁹ 3	³⁰ 4

Messages by day:

June 1 (5 messages)

Re: NSA Cyber security program [ maybe off-topic ] (InterN0T Advisories <advisories@...ern0t.net>)
TrueCaller Vulnerability Allows Changing Users Details (Kuwait WhiteHat <q8whitehat@...il.com>)
Re: NSA Cyber security program [ maybe off-topic ] (Benjamin Kreuter <ben.kreuter@...il.com>)
Re: NSA Cyber security program [ maybe off-topic ] (Alexander Georgiev <alexander.georgiev@...oo.de>)
Re: NSA Cyber security program [ maybe off-topic ] (Urlan <urlancomp@...il.com>)

June 3 (1 message)

Re: TrueCaller Vulnerability Allows Changing Users Details ("Thor (Hammer of God)" <thor@...merofgod.com>)

June 4 (17 messages)

Unauthorized Digital Certificates Could Allow Spoofing (Georgi Guninski <guninski@...inski.com>)
Re: [Full Disclosure] Unauthorized Digital Certificates Could Allow Spoofing (imipak <imipak@...il.com>)
Re: Unauthorized Digital Certificates Could Allow Spoofing (Shreyas Zare <shreyas@...fence.com>)
Re: TrueCaller Vulnerability Allows Changing Users Details (Григорий Братислава <musntlive@...il.com>)
Re: Unauthorized Digital Certificates Could Allow Spoofing (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Re: Full-Disclosure Digest, Vol 88, Issue 2 Re: NSA Cyber security program [ maybe off-topic ] ("Mikhail A. Utin" <mutin@...monwealthcare.org>)
Re: Unauthorized Digital Certificates Could Allow Spoofing (Joel Esler <jesler@...rcefire.com>)
Re: [Full Disclosure] Unauthorized Digital Certificates Could Allow Spoofing (Georgi Guninski <guninski@...inski.com>)
Re: NSA Cyber security program [ maybe off-topic ] (Jack Slade <jackslade@....net>)
[SECURITY] [DSA 2484-1] nut security update (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 2481-1] arpwatch security update (Yves-Alexis Perez <corsac@...ian.org>)
[SECURITY] [DSA 2482-1] arpwatch security update (Yves-Alexis Perez <corsac@...ian.org>)
[SECURITY] [DSA 2482-1] libgdata security update (Yves-Alexis Perez <corsac@...ian.org>)
[SECURITY] [DSA 2485-1] imp4 security update (Thijs Kinkhorst <thijs@...ian.org>)
ISC Security Advisory: Handling of zero length rdata can cause named to terminate, unexpectedly (Larissa Shapiro <larissas@....org>)
Re: Full-Disclosure Digest, Vol 88, Issue 2 Re: NSA Cyber security program [ maybe off-topic ] (Georgi Guninski <guninski@...inski.com>)
Obama Order Sped Up Wave of Cyberattacks Against Iran (Jeffrey Walton <noloader@...il.com>)

June 5 (15 messages)

EUSecWest 2012 - Amsterdam, Sept 19/20 featuring Mobile PWN2OWN - CFP Deadline June 15 (Dragos Ruiu <dr@....net>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Joel Esler <jesler@...rcefire.com>)
[ MDVSA-2012:087 ] nut (security@...driva.com)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Georgi Guninski <guninski@...inski.com>)
Re: TrueCaller Vulnerability Allows Changing Users Details (doc mombasa <doc.mombasa@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (valdis.kletnieks@...edu)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Peter Dawson <slash.pd@...il.com>)
Re: TrueCaller Vulnerability Allows Changing Users Details (Григорий Братислава <musntlive@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Peter Dawson <slash.pd@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (valdis.kletnieks@...edu)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran ("Marcio B. Jr." <marcio.barbado@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Dave <mrx@...pergander.org.uk>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (valdis.kletnieks@...edu)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran ("Marcio B. Jr." <marcio.barbado@...il.com>)
[SECURITY] [DSA 2486-1] bind9 security update (Florian Weimer <fw@...eb.enyo.de>)

June 6 (40 messages)

New IETF I-D: (IPv6) "Neighbor Discovery Shield (ND-Shield): Protecting against Neighbor Discovery Attacks" (Fernando Gont <fgont@...networks.com>)
Re: Full-Disclosure Digest, Vol 88, Issue 2 Re: NSA Cyber security program [ maybe off-topic ] (Alexander Georgiev <alexander.georgiev@...oo.de>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Alexander Georgiev <alexander.georgiev@...oo.de>)
Re: Google Accounts Security Vulnerability (Kyle Creyts <kyle.creyts@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Laurelai <laurelai@...echan.org>)
Re: NSA Cyber security program [ maybe off-topic ] (Giles Coochey <giles@...chey.net>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Charles Morris <cmorris@...odu.edu>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Laurelai <laurelai@...echan.org>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Charles Morris <cmorris@...odu.edu>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Laurelai <laurelai@...echan.org>)
Vulnerabilities in JW Player and millions of web sites ("MustLive" <mustlive@...security.com.ua>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (coderman <coderman@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (coderman <coderman@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Peter Dawson <slash.pd@...il.com>)
Vulnerabilities in OpenBSD and billions is other websites (Григорий Братислава <musntlive@...il.com>)
[Security-news] SA-CONTRIB-2012-091 - Token Authentication - Access bypass (security-news@...pal.org)
[Security-news] SA-CONTRIB-2012-092 - Organic Groups - Cross Site Scripting (XSS) and Access Bypass (security-news@...pal.org)
Re: TrueCaller Vulnerability Allows Changing Users Details (doc mombasa <doc.mombasa@...il.com>)
[Security-news] SA-CONTRIB-2012-093 - Node Embed - Access Bypass (security-news@...pal.org)
[Security-news] SA-CONTRIB-2012-094 - Maestro module - Cross Site Request Forgery (CSRF), Cross Site Scripting (XSS) (security-news@...pal.org)
[Security-news] SA-CONTRIB-2012-095 - Simplenews - Information Disclosure (security-news@...pal.org)
[Security-news] SA-CONTRIB-2012-096 - Authoring HTML - Cross Site Scripting (XSS) (security-news@...pal.org)
[Security-news] SA-CONTRIB-2012-097 - Protest - Cross Site Scripting (XSS) (security-news@...pal.org)
ZDI-12-075 : Apple Quicktime RLE Sample Decoding Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-076 : Apple QuickTime MPEG Stream Padding Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-077 : Apple QuickTime QTVR QTVRStringAtom Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (valdis.kletnieks@...edu)
ZDI-12-078 : Apple QuickTime SVQ3 Codec mb_skip_run Parsing Remote Code Execution (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Andrew D Kirch <trelane@...lane.net>)
ZDI-12-080 : Adobe Flash Player MP4 Stream Decoding Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (William Warren <hescominsoon@...anuelcomputerconsulting.com>)
ZDI-12-081 : Oracle Java GlueGen Arbitrary Native Library Loading Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-082 : Oracle Java OpenGL Arbitrary Native Library Loading Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-083 : Oracle Java OpenAL Library Pointer Manipulation Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-084 : RealNetworks RealPlayer RV10 Encoded Height/Width Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-085 : RealNetworks RealPlayer dmp4 esds Width Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-086 : RealNetworks RealPlayer rvrender RMFF Flags Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-087 : RealNetworks RealPlayer raac.dll stsz Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-088 : HP DataDirect OpenAccess GIOP Opcode 0x0E Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-089 : HP DataDirect OpenAccess GIOP Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)

June 7 (33 messages)

Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Laurelai <laurelai@...echan.org>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Laurelai <laurelai@...echan.org>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (valdis.kletnieks@...edu)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Laurelai <laurelai@...echan.org>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Laurelai <laurelai@...echan.org>)
Re: Google Accounts Security Vulnerability ("Michael J. Gray" <mgray@...tcode.com>)
Re: Google Accounts Security Vulnerability ("Michael J. Gray" <mgray@...tcode.com>)
ZDI-12-079 : Apple QuickTime H264 Picture Width Parsing Remote Code Execution Vulnerability (Zero Day Initiative <zdi@...pingpoint.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran ("destrudo@...4g3d.net" <destrudo@...l.d4m4g3d.net>)
Re: Vulnerabilities in JW Player and millions of web sites (karniv0re <karniv0re@...l.co.in>)
Re: TrueCaller Vulnerability Allows Changing Users Details (Kuwait WhiteHat <q8whitehat@...il.com>)
Re: TrueCaller Vulnerability Allows Changing Users Details (Kuwait WhiteHat <q8whitehat@...il.com>)
Re: TrueCaller Vulnerability Allows Changing Users Details (Q8WhiteHat <q8whitehat@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Jack Slade <sweetlipsbutterhoney+fulldisc@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Laurelai <laurelai@...echan.org>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (valdis.kletnieks@...edu)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Laurelai <laurelai@...echan.org>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Ian Hayes <cthulhucalling@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (valdis.kletnieks@...edu)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Laurelai <laurelai@...echan.org>)
Re: Google Accounts Security Vulnerability (Mike Hearn <hearn@...gle.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (doc mombasa <doc.mombasa@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Laurelai <laurelai@...echan.org>)
Secunia Research: Network Instruments Observer SNMP OID Processing Denial of Service (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Network Instruments Observer SNMP Processing Buffer Overflows (Secunia Research <remove-vuln@...unia.com>)
CVE-2012-2378 - Apache CXF does not pick up some child policies of WS-SecurityPolicy 1.1 SupportingToken policy asserti… (Colm O hEigeartaigh <coheigea@...che.or…)
CVE-2012-2379 - Apache CXF does not verify that elements were signed or encrypted by a particular Supporting Token. (Colm O hEigeartaigh <coheigea@...che.org>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Benjamin Kreuter <ben.kreuter@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Ian Hayes <cthulhucalling@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Laurelai <laurelai@...echan.org>)
Netto.se arbitrary XSS injection through the redirector. (klondike <klondike@...cosoft.es>)
[SECURITY] [DSA 2480-3] request-tracker3.8 regression update (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 2487-1] openoffice.org security update (Florian Weimer <fw@...eb.enyo.de>)

June 8 (57 messages)

[SECURITY] [DSA 2489-1] iceape security update (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 2490-1] nss security update (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 2488-1] iceweasel security update (Thijs Kinkhorst <thijs@...ian.org>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran ("Sardina, Dominick" <Dominick.Sardina@...g.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Mark Shuler <secdumptcp@...il.com>)
Re: Vulnerabilities in OpenBSD and billions is other websites (Julius Kivimäki <julius.kivimaki@...il.com>)
Analysis: Vast IPv6 address space actually enables IPv6 attacks (Fernando Gont <fgont@...networks.com>)
Re: Analysis: Vast IPv6 address space actually enables IPv6 attacks (Fernando Gont <fgont@...networks.com>)
Re: Flame= cyberwar - tech details on sKyWIper (BENCSATH Boldizsar <boldi@...sys.hu>)
Germany reveals secret techie soldier unit, new cyberweapons (Georgi Guninski <guninski@...inski.com>)
Re: Full-Disclosure Digest, Vol 88, Issue 11: ("Mikhail A. Utin" <mutin@...monwealthcare.org>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (valdis.kletnieks@...edu)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Laurelai <laurelai@...echan.org>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Peter Dawson <slash.pd@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Григорий Братислава <musntlive@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Laurelai <laurelai@...echan.org>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Григорий Братислава <musntlive@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Григорий Братислава <musntlive@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Laurelai <laurelai@...echan.org>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Ian Hayes <cthulhucalling@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Григорий Братислава <musntlive@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Ian Hayes <cthulhucalling@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Laurelai <laurelai@...echan.org>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Григорий Братислава <musntlive@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Laurelai <laurelai@...echan.org>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Laurelai <laurelai@...echan.org>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Григорий Братислава <musntlive@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Laurelai <laurelai@...echan.org>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Григорий Братислава <musntlive@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Christian Sciberras <uuf6429@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Григорий Братислава <musntlive@...il.com>)
Re: Flame= cyberwar - tech details on sKyWIper [Full-Disclosure Digest, Vol 88, Issue 12] (SMiller@...min.com)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Laurelai <laurelai@...echan.org>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Григорий Братислава <musntlive@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Laurelai <laurelai@...echan.org>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Григорий Братислава <musntlive@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Laurelai <laurelai@...echan.org>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Ian Hayes <cthulhucalling@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Laurelai <laurelai@...echan.org>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Bzzz <lazyvirus@....com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran ("James Condron" <james@...o-internet.org.uk>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Григорий Братислава <musntlive@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Laurelai <laurelai@...echan.org>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (valdis.kletnieks@...edu)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Ian Hayes <cthulhucalling@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Laurelai <laurelai@...echan.org>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Memory Vandal <memvandal@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Ian Hayes <cthulhucalling@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Laurelai <laurelai@...echan.org>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Григорий Братислава <musntlive@...il.com>)
ZDI-12-090 : Symantec Web Gateway Shell Command Injection Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: Vulnerabilities in JW Player and millions of web sites ("MustLive" <mustlive@...security.com.ua>)
ZDI-12-091 : Symantec Web Gateway upload_file Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-092 : RealNetworks RealPlayer QCELP Stream Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran ("Michael Hallgren" <m.hallgren@...e.fr>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran ("Michael Hallgren" <m.hallgren@...e.fr>)

June 9 (23 messages)

Re: Analysis: Vast IPv6 address space actually enables IPv6 attacks (Fernando Gont <fgont@...networks.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Laurelai <laurelai@...echan.org>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Georgi Guninski <guninski@...inski.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (phocean <0x90@...cean.net>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Jason Hellenthal <jhellenthal@...aix.net>)
Re: Obama Order Sped Up Wave of Cyberattacks (John Doe <jd731841953@...il.com>)
List Charter (John Cartwright <johnc@...k.org.uk>)
[SECURITY] [DSA 2491-1] postgresql-8.4 security update (Florian Weimer <fw@...eb.enyo.de>)
Re: Obama Order Sped Up Wave of Cyberattacks (Christian Sciberras <uuf6429@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Christian Sciberras <uuf6429@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Christian Sciberras <uuf6429@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (phocean <0x90@...cean.net>)
[ MDVSA-2012:088 ] mozilla (security@...driva.com)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (valdis.kletnieks@...edu)
Re: Obama Order Sped Up Wave of Cyberattacks (valdis.kletnieks@...edu)
Re: Obama Order Sped Up Wave of Cyberattacks ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (John Doe <jd731841953@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (John Doe <jd731841953@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (John Doe <jd731841953@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Jason Hellenthal <jhellenthal@...aix.net>)
IIS 6.0/7.5 Vulnerabilities [moderate risk] - ISOWAREZ BDAY RELEASE (king cope <isowarez.isowarez.isowarez@...glemail.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (valdis.kletnieks@...edu)

June 10 (44 messages)

Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (coderman <coderman@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (coderman <coderman@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Georgi Guninski <guninski@...inski.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Mark Shuler <secdumptcp@...il.com>)
Re: ZDI-12-088 : HP DataDirect OpenAccess GIOP Opcode 0x0E Remote Code Execution Vulnerability (Steve Shockley <steve.shockley@...ckley.net>)
Re: Obama Order Sped Up Wave of Cyberattacks (doc mombasa <doc.mombasa@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (doc mombasa <doc.mombasa@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (doc mombasa <doc.mombasa@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Laurelai <laurelai@...echan.org>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (doc mombasa <doc.mombasa@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Laurelai <laurelai@...echan.org>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Laurelai <laurelai@...echan.org>)
[ MDVSA-2012:089 ] bind (security@...driva.com)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (doc mombasa <doc.mombasa@...il.com>)
[CVE-2012-3238] Astaro Security Gateway <= v8.304 Persistent Cross-Site Scripting Vulnerability (Inshell Security <info@...hell.net>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Laurelai <laurelai@...echan.org>)
Some stats about broken Linkedin passwds (Georgi Guninski <guninski@...inski.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (valdis.kletnieks@...edu)
[SECURITY] [DSA 2492-1] php5 security update (Florian Weimer <fw@...eb.enyo.de>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Benjamin Kreuter <ben.kreuter@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (coderman <coderman@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Laurelai <laurelai@...echan.org>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Benjamin Kreuter <ben.kreuter@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Laurelai <laurelai@...echan.org>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (valdis.kletnieks@...edu)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (coderman <coderman@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Ian Hayes <cthulhucalling@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Laurelai <laurelai@...echan.org>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Laurelai <laurelai@...echan.org>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (coderman <coderman@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Laurelai <laurelai@...echan.org>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Benji <me@...ji.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Laurelai <laurelai@...echan.org>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Benji <me@...ji.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (coderman <coderman@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Ian Hayes <cthulhucalling@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (valdis.kletnieks@...edu)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Benjamin Kreuter <ben.kreuter@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Laurelai <laurelai@...echan.org>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Benjamin Kreuter <ben.kreuter@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Ian Hayes <cthulhucalling@...il.com>)

June 11 (11 messages)

Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Dan Cross <crossd@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Christian Sciberras <uuf6429@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (valdis.kletnieks@...edu)
Publication References on Criminalisation of Hacking Tools Needed (Pablo Ximenes <pablo@...en.es>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Dan Cross <crossd@...il.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran ("Nick FitzGerald" <nick@...us-l.demon.co.uk>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran (Laurelai <laurelai@...echan.org>)
[MATTA-2012-002] CVE-2012-1493; F5 BIG-IP remote root authentication bypass Vulnerability (Florent Daigniere <florent.daigniere@...stmatta.com>)
Re: Some stats about broken Linkedin passwds (yersinia <yersinia.spiros@...il.com>)
Re: Publication References on Criminalisation of Hacking Tools Needed (Peter Dawson <slash.pd@...il.com>)

June 12 (6 messages)

Vulnerability in Zombie Processes (Григорий Братислава <musntlive@...il.com>)
Metadata exfiltration ("Adam Behnke" <adam@...osecinstitute.com>)
Re: Metadata exfiltration (Григорий Братислава <musntlive@...il.com>)
Re: Vulnerability in Zombie Processes (Charles Morris <cmorris@...odu.edu>)
[SECURITY] [DSA 2493-1] asterisk security update (Florian Weimer <fw@...eb.enyo.de>)
ZDI-12-093 : (Pwn2Own) Microsoft Internet Explorer Fixed Table Colspan Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)

June 13 (14 messages)

[CAL-2012-0026] Microsfot IE Same ID Property Remote Code Execution Vulnerability (Code Audit Labs <vulnhunt@...il.com>)
[CAL-2012-0023]Microsoft IE Developer Toolbar Remote Code Execution Vulnerability (Code Audit Labs <vulnhunt@...il.com>)
Is Flame Malware Disclosure (Григорий Братислава <musntlive@...il.com>)
[SE-2012-01] Regarding Oracle's Critical Patch Update for Java SE (Security Explorations <contact@...urity-explorations.com>)
Full-Disclosure (Fatherlaptop <fatherlaptop@...il.com>)
CVE-2012-1661 - ESRI ArcMap arbitrary code execution via crafted map file. (Boston Cyber Defense <lists@...toncyberdefense.com>)
A Chat With The NGR Bot ("Adam Behnke" <adam@...osecinstitute.com>)
Re: A Chat With The NGR Bot (Alex Buie <abuie@...services.com>)
[Security-news] SA-CONTRIB-2012-098 - Janrain Capture - Open Redirect (security-news@...pal.org)
[Security-news] SA-CONTRIB-2012-099 - Node Hierarchy - Cross Site Request Forgery (CSRF) (security-news@...pal.org)
[Security-news] SA-CONTRIB-2012-100 - SimpleMeta - Cross Site Request Forgery (CSRF) (security-news@...pal.org)
[Security-news] SA-CONTRIB-2012-101 - Protected Node - Access Bypass (security-news@...pal.org)
[Security-news] SA-CONTRIB-2012-102 - Ubercart AJAX Cart - Potential Disclosure of user Session ID (security-news@...pal.org)
[Security-news] SA-CONTRIB-2012-103 - Global Redirect - Open Redirect (security-news@...pal.org)

June 14 (16 messages)

VMSA-2012-0011 VMware hosted products and ESXi and ESX patches address security issues (VMware Security Team <security@...are.com>)
Strange gpg key shadowing (Georgi Guninski <guninski@...inski.com>)
[CAL-2012-0015] opera website spoof (Code Audit Labs <vulnhunt@...il.com>)
[ MDVSA-2012:090 ] openoffice.org (security@...driva.com)
[ MDVSA-2012:091 ] libreoffice (security@...driva.com)
Using second gpg keyring may be misleading? (Georgi Guninski <guninski@...inski.com>)
Re: Using second gpg keyring may be misleading? ("Thor (Hammer of God)" <thor@...merofgod.com>)
0A29-12-1 : Cross-Site Scripting vulnerabilities in Nagios XI < 2011R3.0 (0a29 40 <0a2940@...il.com>)
AST-2012-009: Skinny Channel Driver Remote Crash Vulnerability ("Asterisk Security Team" <security@...erisk.org>)
[SECURITY] [DSA 2494-1] ffmpeg security update (Florian Weimer <fw@...eb.enyo.de>)
eSyndiCat Pro v2.4.1 - Multiple Web Vulnerabilities (Research <research@...nerability-lab.com>)
Boonex Dolphin v7.0.9 CMS & Mobile App - Multiple Web Vulnerabilities (Research <research@...nerability-lab.com>)
QuickBlog v0.8 CMS - Multiple Web Vulnerabilities (Research <research@...nerability-lab.com>)
ADICO CMS v1.1 - Blind SQL Injection Vulnerability (Research <research@...nerability-lab.com>)
iScripts EasyCreate CMS v2.0 - Multiple Web Vulnerabilites (Research <research@...nerability-lab.com>)
Interspire Shopping Cart v6 - Multiple Web Vulnerabilities (Research <research@...nerability-lab.com>)

June 15 (18 messages)

Nuked Klan SP CMS v4.5 - SQL injection Vulnerability (Research <research@...nerability-lab.com>)
Squirrelcart Cart Shop v3.3.4 - Multiple Web Vulnerabilities (Research <research@...nerability-lab.com>)
Swoopo Gold Shop CMS v8.4.56 - Multiple Web Vulnerabilities (Research <research@...nerability-lab.com>)
Simple Forum PHP 2.1 - SQL Injection Vulnerabilities (Research <research@...nerability-lab.com>)
Jobs Portal v3.0 NetArtMedia - Multiple Web Vulnerabilites (Research <research@...nerability-lab.com>)
Cells Blog CMS v1.1 - Multiple Web Vulnerabilites (Research <research@...nerability-lab.com>)
MYRE Real Estate Mobile 2012|2 - Multiple Vulnerabilities (Research <research@...nerability-lab.com>)
ubuntu apt-key (part 3) (Georgi Guninski <guninski@...inski.com>)
nullcon Delhi 2012 Final call for Paper/Events (extended to 10th July) and First round of speakers (nullcon <nullcon@...lcon.net>)
free speech - 9 yro bloggers are dangerous (Georgi Guninski <guninski@...inski.com>)
[ MDVSA-2012:091 ] libreoffice (security@...driva.com)
Re: Using second gpg keyring may be misleading? (Georgi Guninski <guninski@...inski.com>)
[ MDVSA-2012:092 ] postgresql (security@...driva.com)
Flame - couldn't resist ("J. Oquendo" <sil@...iltrated.net>)
[ MDVSA-2012:093 ] php (security@...driva.com)
IObit Protected Folder Authentication Bypass ("Adam Behnke" <adam@...osecinstitute.com>)
Re: Using second gpg keyring may be misleading? ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: free speech - 9 yro bloggers are dangerous ("Thor (Hammer of God)" <thor@...merofgod.com>)

June 16 (4 messages)

Webify Product Series - Multiple Web Vulnerabilities (Research <research@...nerability-lab.com>)
Swoopo Gold Shop CMS v8.4.56 - Multiple Web Vulnerabilities (Research <research@...nerability-lab.com>)
[SECURITY] [DSA 2495-1] openconnect security update (Moritz Muehlenhoff <jmm@...ian.org>)
DT, XSS and FPD vulnerabilities in Organizer for WordPress ("MustLive" <mustlive@...security.com.ua>)

June 17 (2 messages)

Re: [CAL-2012-0015] opera website spoof (Code Audit Labs <vulnhunt@...il.com>)
QNAP Turbo NAS Multiple Vulnerabilities - Security Advisory ("Lists" <lists@...seofsecurity.com>)

June 18 (7 messages)

Squiz CMS Multiple Vulnerabilities - Security Advisory - SOS-12-007 ("Lists" <lists@...seofsecurity.com>)
[ MDVSA-2012:094 ] clamav (security@...driva.com)
[ MDVSA-2012:095 ] java-1.6.0-openjdk (security@...driva.com)
SEC Consult SA-20120618-0 :: Western Digital ShareSpace WEB GUI Sensitive Data Disclosure (SEC Consult Vulnerability Lab <research@...-consult.com>)
SEC Consult SA-20120618-1 :: Airlock WAF overlong UTF-8 sequence bypass (SEC Consult Vulnerability Lab <research@...-consult.com>)
DC4420 - London DEFCON - June meet - Tuesday June 19th 2012 (Major Malfunction <majormal@...ate-radio.org>)
[SECURITY] [DSA 2496-1] mysql-5.1 security update (Thijs Kinkhorst <thijs@...ian.org>)

June 19 (4 messages)

Re: www.LEORAT.com is scam (Fyodor <fyodor@...ecure.org>)
Re: www.LEORAT.com is scam (coderman <coderman@...il.com>)
DDIVRT-2012-45 SolarWinds Network Performance Monitor Blind SQL Injection (ddivulnalert <ddivulnalert@...frontline.com>)
Re: www.LEORAT.com is scam ("Thor (Hammer of God)" <thor@...merofgod.com>)

June 20 (10 messages)

[Win32-API] SetNamedSecurityInfo() IGNORES and DESTROYS protected DACLs/SACLs ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Re: Full-Disclosure Digest, Vol 88, Issue 34 Re: www.LEORAT.com is scam (Thor (Hammer of God)) ("Mikhail A. Utin" <mutin@...monwealthcare.org>)
winAUTOPWN v3.1 Released ("QUAKER DOOMER" <quakerdoomer@...ox.lv>)
[ MDVSA-2012:096 ] python (security@...driva.com)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client (Cisco Systems Product Security Incident Response Team <psirt@...c…)
Cisco Security Advisory: Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Service… (Cisco Systems Product Security Incident…)
Cisco Security Advisory: Cisco Application Control Engine Administrator IP Address Overlap Vulnerability (Cisco Systems Product Security Incident Response Team…)
[ MDVSA-2012:097 ] python (security@...driva.com)
[Security-news] SA-CONTRIB-2012-104 - Privatemsg - Cross Site Scripting (XSS) (security-news@...pal.org)
[SECURITY] [DSA 2497-1] quagga security update (Florian Weimer <fw@...eb.enyo.de>)

June 21 (21 messages)

WordPress Authenticated File Upload Authorisation Bypass (Denis Andzakovic <denis.andzakovic@...urity-assessment.com>)
Re: WordPress Authenticated File Upload Authorisation Bypass (PsychoBilly <zpamh0l3@...il.com>)
[ MDVSA-2012:098 ] libxml2 (security@...driva.com)
Re: WordPress Authenticated File Upload Authorisation Bypass (Greg Knaddison <greg.knaddison@...uia.com>)
[ MDVSA-2012:099 ] net-snmp (security@...driva.com)
Re: WordPress Authenticated File Upload Authorisation Bypass (Gage Bystrom <themadichib0d@...il.com>)
Re: WordPress Authenticated File Upload Authorisation Bypass (valdis.kletnieks@...edu)
Re: server security (Gage Bystrom <themadichib0d@...il.com>)
Re: WordPress Authenticated File Upload Authorisation Bypass (Hector Marco <hecmargi@....es>)
Re: server security ("Thor (Hammer of God)" <thor@...merofgod.com>)
CORE-2012-0530 - Lattice Diamond Programmer Buffer Overflow (CORE Security Technologies Advisories <advisories@...esecurity.com>)
ZDI-12-094 : RealNetworks Helix Server rn5auth Credential Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-095 : Apple Quicktime TeXML transform Attribute Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-096 : HP Data Protector Express Opcode 0x330 Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: CORE-2012-0530 - Lattice Diamond Programmer Buffer Overflow (coderman <coderman@...il.com>)
ZDI-12-097 : HP Data Protector Express Opcode 0x320 Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-098 : AOL Products dnUpdater ActiveX Uninitialized Pointer Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-099 : DataDirect OpenAccess oaagent.exe GIOP Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-100 : HP OpenView Performance Manager PMParamHandler Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: WordPress Authenticated File Upload Authorisation Bypass (Denis Andzakovic <denis.andzakovic@...urity-assessment.com>)
Re: WordPress Authenticated File Upload Authorisation Bypass (Benji <me@...ji.com>)

June 22 (5 messages)

Re: WordPress Authenticated File Upload Authorisation Bypass (Carlos Alberto Lopez Perez <clopez@...lia.com>)
Potential gpg forging key signatures with collisions (Georgi Guninski <guninski@...inski.com>)
Re: server security ("Elazar Broad" <elazar@...hmail.com>)
Warning is about APT (Григорий Братислава <musntlive@...il.com>)
XSS and Charset Remembering via charsets in different browsers ("MustLive" <mustlive@...security.com.ua>)

June 23 (1 message)

[ MDVSA-2012:088-1 ] mozilla (security@...driva.com)

June 24 (6 messages)

[SECURITY] [DSA 2499-1] icedove security update (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 2500-1] mantis security update (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 2501-1] xen security update (Florian Weimer <fw@...eb.enyo.de>)
Sunday Fodder ("Thor (Hammer of God)" <thor@...merofgod.com>)
[SECURITY] [DSA 2502-1] python-crypto security update (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Sunday Fodder ("Thor (Hammer of God)" <thor@...merofgod.com>)

June 25 (26 messages)

Re: [SECURITY] [DSA 2502-1] python-crypto security update (coderman <coderman@...il.com>)
hashdays 2012 - Call for Papers (#days CFP) (Hashdays CFP <cfp@...con-switzerland.org>)
Re: [SECURITY] [DSA 2502-1] python-crypto security update (BMF <badmotherfsckr@...il.com>)
[ MDVSA-2012:100 ] rsyslog (security@...driva.com)
How to access your favorite sites in the event of a DNS takedown ? ("Jardel" <jweyrich@...il.com>)
Re: How to access your favorite sites in the event of a DNS takedown ? (alan buxey <A.L.M.Buxey@...ro.ac.uk>)
Re: server security (Daniel Hadfield <dan@...gsweep.co.uk>)
Root Exploit Western Digital's WD TV Live SMP/Hub (all released firmware releases) (Wolf Bee <doubleo8@...e.com>)
[SECURITY] [DSA 2498-1] dhcpcd security update (Yves-Alexis Perez <corsac@...ian.org>)
[SE-2012-01] Security weakness in Apple QuickTime Java extensions (details released) (Security Explorations <contact@...urity-explorations.com>)
Re: How to access your favorite sites in the event of a DNS takedown ? (Jardel Weyrich <jweyrich@...il.com>)
Exploit for Intel SYSRET "vulnerability" on FreeBSD (Hunger <hunger@...ger.hu>)
Re: Sunday Fodder (Darius Jahandarie <djahandarie@...il.com>)
FCKEditor reflected XSS vulnerability (Emilio Pinna <ncl01@...il.it>)
Re: Warning is about APT (c-APT-ure <toms.security.stuff@...il.com>)
CVE-2012-2380: Apache Roller Cross-Site-Resource-Forgery (XSRF) vulnerability (Dave <snoopdave@...il.com>)
CVE-2012-2381: Apache Roller Cross-Site-Scripting (XSS) vulnerability (Dave <snoopdave@...il.com>)
Re: How to access your favorite sites in the event of a DNS takedown ? (nake <nake@...abit.com>)
Entropy distribution to virtual machines (coderman <coderman@...il.com>)
Re: How to access your favorite sites in the event of a DNS takedown ? (Peter Dawson <slash.pd@...il.com>)
Re: How to access your favorite sites in the event of a DNS takedown ? (Nate Theis <nttheis@...il.com>)
Re: server security ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: How to access your favorite sites in the event of a DNS takedown ? ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: How to access your favorite sites in the event of a DNS takedown ? (nix@...roxylists.com)
Re: How to access your favorite sites in the event of a DNS takedown ? (rancor <therancor@...il.com>)
Re: Warning is about APT (rancor <therancor@...il.com>)

June 26 (2 messages)

SEC Consult SA-20120626-0 :: Zend Framework - Local file disclosure via XXE injection (SEC Consult Vulnerability Lab <research@...-consult.com>)
Re: How to access your favorite sites in the event of a DNS takedown ? (PsychoBilly <zpamh0l3@...il.com>)

June 27 (19 messages)

ZDI-12-101 : IBM Cognos tm1admsd.exe Multiple Operations Remote Code Execution Vulnerabilities (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-102 : Novell iPrint Client nipplib.dll GetDriverSettings realm Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
-----BEGIN PGP SIGNED MESSAGE----- (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-103 : Apple Quicktime Dataref URI Buffer Remote Code Execution (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-104 : SAP Netweaver ABAP msg_server.exe Parameter Value Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-105 : Apple Quicktime Text Track Descriptor Parsing Remote Code Execution (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
A new research about next gen crawling in pen test scanners (bobo manang <bobomanang@...il.com>)
Re: How to access your favorite sites in the event of a DNS takedown ? (Brian Gallagher <brian@...mondsea.com>)
Re: How to access your favorite sites in the event of a DNS takedown ? (Darius Jahandarie <djahandarie@...il.com>)
Presentations from Positive Hack Days 2012 Published (Dmitry Evteev <devteev@...ecurity.ru>)
Re: How to access your favorite sites in the event of a DNS takedown ? (Michael Stummvoll <fulldis@...mmi.org>)
Re: [SE-2012-01] Security weakness in Apple QuickTime Java extensions (details released) (Ramo <ramo@...dvikings.com>)
OpenLimit Reader for Windows contains completely outdated, superfluous and VULNERABLE system components ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Re: How to access your favorite sites in the event of a DNS takedown ? (Nahuel Grisolía <nahuel.grisolia@...il.com>)
Re: How to access your favorite sites in the event of a DNS takedown ? (nake <nake@...abit.com>)
Re: www.LEORAT.com is scam (smith joseph <sj101490@...il.com>)
xxx (trap9 trap9 <taliedge9@...il.com>)
Cisco Security Advisory: Buffer Overflow Vulnerabilities in the Cisco WebEx Player (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Re: How to access your favorite sites in the event of a DNS takedown ? ("Thor (Hammer of God)" <thor@...merofgod.com>)

June 28 (14 messages)

Re: [SE-2012-01] Security weakness in Apple QuickTime Java extensions (details released) (Security Explorations <contact@...urity-explorations.com>)
ZDI-12-106 : Avaya IP Office Customer Call Reporter ImageUpload Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[SECURITY] [DSA 2503-1] bcfg2 security update (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 2504-1] libspring-2.5-java security update (Florian Weimer <fw@...eb.enyo.de>)
Vulnerabilities in LIOOSYS CMS ("MustLive" <mustlive@...security.com.ua>)
ZDI-12-107 : Apple Quicktime TeXML Style Element Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-108 : Apple Quicktime TeXML sampleData Element Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-109 : Apple Quicktime TeXML Karaoke Element Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-110 : Mozilla Firefox AttributeChildRemoved Use-After-Free Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-111 : SAP Netweaver ABAP msg_server.exe Opcode 0x43 Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-112 : SAP Netweaver ABAP msg_server.exe Parameter Name Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-113 : IBM Rational ClearQuest CQOle ActiveX Control Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: How to access your favorite sites in the event of a DNS takedown ? (Jeffrey Walton <noloader@...il.com>)
REWTERZ-20120629 - TEMENOS T24 Cross-Site Scripting (XSS) Vulnerability (Rewterz - Research Group <advisories@...terz.com>)

June 29 (3 messages)

TPTI-12-06: Hewlett-Packard Data Protector DtbClsAddObject Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
TPTI-12-05: Oracle AutoVue ActiveX SetMarkupMode Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[SECURITY] [DSA 2505-1] zendframework security update (Florian Weimer <fw@...eb.enyo.de>)

June 30 (4 messages)

IBM Edge Components Caching Proxy XSS Followup (BugsNotHugs <bugsnothugs@...il.com>)
Sun iPlanet Error Page Link Injection (BugsNotHugs <bugsnothugs@...il.com>)
IBM developerWorks ncp (Nigel's Capacity Planning) 2.1 Remote Information Disclosure (BugsNotHugs <bugsnothugs@...il.com>)
Konqueror 3.5.5 XFS (BugsNotHugs <bugsnothugs@...il.com>)

428 messages

Powered by blists - more mailing lists