full-disclosure mailing list - 2012/11

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2012/11

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 14	² 10	³ 1	⁴
⁵ 11	⁶ 2	⁷ 5	⁸ 1	⁹ 8	¹⁰ 6	¹¹ 2
¹² 9	¹³ 6	¹⁴ 26	¹⁵ 22	¹⁶ 1	¹⁷	¹⁸
¹⁹ 18	²⁰ 1	²¹ 13	²² 4	²³	²⁴ 3	²⁵ 2
²⁶ 18	²⁷ 14	²⁸ 28	²⁹ 4	³⁰ 7

Messages by day:

November 1 (14 messages)

XSS, LFI and SQL Injection Vulnerabilities in Achievo (Netsparker Advisories <advisories@...itunasecurity.com>)
[SECURITY] [DSA 2570-1] openoffice.org security update (Yves-Alexis Perez <corsac@...ian.org>)
Whonix ALPHA 0.4.5 - Anonymous Operating System released (adrelanos <adrelanos@...eup.net>)
Re: [OT] How much a million facebook passwords would cost? (Julius Kivimäki <julius.kivimaki@...il.com>)
Re: [OT] How much a million facebook passwords would cost? (Gonzalo Brusella <gonzalo@...sella.com.ar>)
Re: Is it OK to hold credit card numbers in cookies? Santander? (Jann Horn <jannhorn@...glemail.com>)
Re: [OT] How much a million facebook passwords would cost? (ramo@...dvikings.com)
EasyPHP 12.1 - Remote code execution of any php/js on local PC (auto59190641@...hmail.com)
Security risks of doing business with China? (Dan Ballance <tzewang.dorje@...il.com>)
[ MDVSA-2012:169 ] java-1.6.0-openjdk (security@...driva.com)
Re: [OT] How much a million facebook passwords would cost? (Grandma Eubanks <tborland1@...il.com>)
Re: :Re: [OT] How much a million facebook ("Mikhail A. Utin" <mutin@...monwealthcare.org>)
Re: Security risks of doing business with China? (bk <chort0@...il.com>)
Elgg unsecure installation vulnerability (Enrico Cinquini <enrico.cinquini@...il.com>)

November 2 (10 messages)

Re: Security risks of doing business with China? ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: XSS, LFI and SQL Injection Vulnerabilities in Achievo (Henri Salo <henri@...v.fi>)
Re: Security risks of doing business with China? (Seth Arnold <seth.arnold@...onical.com>)
PR11-07 Multiple peristent XSS, XSS, XSRF, offsite redirection and information disclosure flaws within CheckPoint/Sofaware … (research <research@...checkup.com>)
Checkpoint/SofaWare Firewall Vulnerability Research (research <research@...checkup.com>)
n.runs-SA-2012.003 - SPLUNK DoS HashDOS (<security@...ns.com>)
Vulnerable MSVC++ 2008 runtime libraries distributed with and installed by eM client ("Stefan Kanthak" <stefan.kanthak@...go.de>)
n.runs-SA-2012.003 - SPLUNK DoS HashDOS (<security@...ns.com>)
[ MDVSA-2012:170 ] firefox (security@...driva.com)
Open Letter to the International Information Security Community - Help Brazilian Security Researchers (Pablo Ximenes <pablo@...en.es>)

November 3 (1 message)

pfSense Captive Portal Voucher (Jeffrey Walton <noloader@...il.com>)

November 5 (11 messages)

[SECURITY] [DSA 2571-1] libproxy security update (Raphael Geissert <geissert@...ian.org>)
[waraxe-2012-SA#096] - Multiple Vulnerabilities in Zenphoto 1.4.3.3 (Janek Vind <come2waraxe@...oo.com>)
[SECURITY] [DSA 2572-1] iceape security update (Thijs Kinkhorst <thijs@...ian.org>)
AWAuctionScript CMS v1.x - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
HTP Zine 4 (h@...the.planet)
[HITB-Announce] #HITB2013AMS Call For Papers Now Open (Hafez Kamal <aphesz@...kinthebox.org>)
multiple critical vulnerabilities in sophos products (Tavis Ormandy <taviso@...xchg8b.com>)
Re: multiple critical vulnerabilities in sophos products (Michele Orru <antisnatchor@...il.com>)
Re: multiple critical vulnerabilities in sophos products (Michele Orru <antisnatchor@...il.com>)
[SECURITY] CVE-2012-2733 Apache Tomcat Denial of Service (Mark Thomas <markt@...che.org>)
[SECURITY] CVE-2012-3439 Apache Tomcat DIGEST authentication weaknesses (Mark Thomas <markt@...che.org>)

November 6 (2 messages)

Convite para o CONISLI 2012 — palestra "SSL/TLS para Todos" (Guarulhos / SP, Brasil) (contato@...labs.com.br)
Vulnerable, superfluous/outdated/deprecated/superseded 3rd party OCXs and DLLs distributed by and installed with Datar… ("Stefan Kanthak" <stefan.kanthak@...go.…)

November 7 (5 messages)

Cisco Security Advisory: Cisco Nexus 1000V Series Switch Software Release 4.2(1)SV1(5.2) Virtual Security Gateway Bypa… (Cisco Systems Product Security Incident…)
Cisco Security Advisory: Cisco Secure Access Control System TACACS+ Authentication Bypass Vulnerability (Cisco Systems Product Security Incident Response Team …)
[Security-news] SA-CONTRIB-2012-161 - Webform CiviCRM Integration - Access Bypass (security-news@...pal.org)
[Security-news] SA-CONTRIB-2012-160 - OM Maximenu - Cross Site Scripting (XSS) (security-news@...pal.org)
When those who say to represent computing/IT students have serious security vulnerabilities? (XSS and data disclosure on http:… (klondike <klondike@...ndike.es>)

November 8 (1 message)

[IA42] Zoner Photo Studio v15 Build 3 (Zps.exe) Registry Value Parsing Local Buffer Overflow (Inshell Security <info@...hell.net>)

November 9 (8 messages)

Cisco Security Advisory: Cisco Ironport Appliances Sophos Anti-virus Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
[ MDVSA-2012:171 ] icedtea-web (security@...driva.com)
A damn aweful facebook DOS ("Chris C. Russo" <chris@...ciumsec.com>)
Re: A damn aweful facebook DOS (Bill Weiss <houdini+full-disclosure@...nspum.net>)
Re: A damn aweful facebook DOS ("Chris C. Russo" <chris@...ciumsec.com>)
Re: A damn aweful facebook DOS ("Chris C. Russo" <chris@...ciumsec.com>)
Re: A damn aweful facebook DOS (Bacon Zombie <baconzombie@...il.com>)
XSS vulnerability in swfupload in WordPress ("MustLive" <mustlive@...security.com.ua>)

November 10 (6 messages)

TTY handling when executing code in lower-privileged context (su, virt containers) (halfdog <me@...fdog.net>)
Re: TTY handling when executing code in lower-privileged context (su, virt containers) (Michal Zalewski <lcamtuf@...edump.cx>)
Re: TTY handling when executing code in lower-privileged context (su, virt containers) (Benji <me@...ji.com>)
Re: TTY handling when executing code in lower-privileged context (su, virt containers) (Michal Zalewski <lcamtuf@...edump.cx>)
Re: TTY handling when executing code in lower-privileged context (su, virt containers) (Benji <me@...ji.com>)
Re: TTY handling when executing code in lower-privileged context (su, virt containers) (Benji <me@...ji.com>)

November 11 (2 messages)

Re: XSS vulnerability in swfupload in WordPress ("Robert Kim SuperHydroPhobic!" <evdo.hsdpa@...il.com>)
Re: TTY handling when executing code in lower-privileged context (su, virt containers) (Michal Zalewski <lcamtuf@...edump.cx>)

November 12 (9 messages)

Re: TTY handling when executing code in lower-privileged context (su, virt containers) (Georgi Guninski <guninski@...inski.com>)
Re: EasyPHP 12.1 - Remote code execution of any php/js on local PC (auto59190641@...hmail.com)
Gajim fails to handle invalid certificates (y33t <y33t@...mail.org>)
[SECURITY] [DSA 2573-1] radsecproxy security update (Luciano Bello <luciano@...ian.org>)
Re: TTY handling when executing code in lower-privileged context (su, virt containers) (Jerry Bell <jerry@...kologist.com>)
BananaDance Wiki b2.2 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
List Charter (John Cartwright <johnc@...k.org.uk>)
Re: Full-Disclosure Digest, Vol 93, Issue 11 ("Scott Miller" <SMiller@...min.com>)
Re: Full-Disclosure Digest, Vol 93, Issue 11 ("Nick FitzGerald" <nick@...us-l.demon.co.uk>)

November 13 (6 messages)

Eventy CMS v1.8 Plus - Multiple Web Vulnerablities (Vulnerability Lab <research@...nerability-lab.com>)
Zoner Photo Studio v15 b3 - Buffer Overflow Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[DC-2012-11-001] DefenseCode ThunderScan PHP Advisory: Wordpress WP e-Commerce Plugin Multiple Security Vulnerabilities (DefenseCode <defensecode@...ensecode.co…)
GOOD for Enterprise (GMA) below 2.0.2 vulnerable to MITM (Thierry Zoller <Thierry@...ler.lu>)
XSS vulnerability in web applications with swfupload: Dotclear, XenForo, InstantCMS, AionWeb, Dolphin ("MustLive" <mustlive@...security.com.ua>)
Re: GOOD for Enterprise (GMA) below 2.0.2 vulnerable to MITM (Jeffrey Walton <noloader@...il.com>)

November 14 (26 messages)

Readdle: User traking (device UUID) over plaintext HTTP in query parameter (Jeffrey Walton <noloader@...il.com>)
Re: GOOD for Enterprise (GMA) below 2.0.2 vulnerable to MITM (Georgi Guninski <guninski@...inski.com>)
Re: GOOD for Enterprise (GMA) below 2.0.2 vulnerable to MITM (Jeffrey Walton <noloader@...il.com>)
Skype account + IM history hijack vulnerability (Kirils Solovjovs <kirils.solovjovs@...ils.com>)
Re: Skype account + IM history hijack vulnerability (Benji <me@...ji.com>)
Re: **VL-JUNK** Re: Skype account + IM history hijack vulnerability ("Chris C. Russo" <chris@...ciumsec.com>)
Re: **VL-JUNK** Re: Skype account + IM history hijack vulnerability (Christian Sciberras <uuf6429@...il.com>)
Re: **VL-JUNK** Re: Skype account + IM history hijack vulnerability (Georgi Guninski <guninski@...inski.com>)
Re: 0-day vulnerabilities in Call of Duty MW3 and CryEngine 3 (Christian Sciberras <uuf6429@...il.com>)
Re: 0-day vulnerabilities in Call of Duty MW3 and CryEngine 3 (Benji <me@...ji.com>)
Re: Skype account + IM history hijack vulnerability (klondike <klondike@...ndike.es>)
Re: Skype account + IM history hijack vulnerability (Benji <me@...ji.com>)
Re: Skype account + IM history hijack vulnerability (klondike <klondike@...ndike.es>)
0-day vulnerabilities in Call of Duty MW3 and CryEngine 3 (ReVuln <info@...uln.com>)
Re: [oss-security] Re: [OVSA20121112] OpenVAS Manager Vulnerable To Command Injection (Jan Lieskovsky <jlieskov@...hat.com>)
[OVSA20121112] OpenVAS Manager Vulnerable To Command Injection (Tim Brown <timb@...nvas.org>)
Re: [OVSA20121112] OpenVAS Manager Vulnerable To Command Injection (Tim Brown <timb@...nvas.org>)
iDev Rentals v1.0 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Hakin9 Reflected XSS - Irony? (pieter@...nsecurity.nl)
linux rootkit in combination with nginx (stack trace <stacktrace44@...il.com>)
Re: [oss-security] Re: [OVSA20121112] OpenVAS Manager Vulnerable To Command Injection (Michal Ambroz <rebus@...nam.cz>)
[Security-news] SA-CONTRIB-2012-163 - User Read-Only - Permission escalation (security-news@...pal.org)
[Security-news] SA-CONTRIB-2012-162 - RESTful Web Services - Cross site request forgery (CSRF) (security-news@...pal.org)
[Security-news] SA-CONTRIB-2012-164 - Smiley module and Smileys module - Cross Site Scripting (XSS) (security-news@...pal.org)
[Security-news] SA-CONTRIB-2012-165 - Chaos tool suite (ctools) - Cross Site Scripting (XSS) (security-news@...pal.org)
[Security-news] SA-CONTRIB-2012-166 - Table of Contents - Access Bypass (security-news@...pal.org)

November 15 (22 messages)

Re: Skype account + IM history hijack vulnerability ("Nick FitzGerald" <nick@...us-l.demon.co.uk>)
Re: Skype account + IM history hijack vulnerability (Benji <me@...ji.com>)
Re: Skype account + IM history hijack vulnerability (Benji <me@...ji.com>)
Re: Hakin9 Reflected XSS - Irony? (Swair Mehta <swairmehta@...il.com>)
(no subject) (mohit tyagi <mohittyagi.0020@...il.com>)
Re: (no subject) (Peter Osterberg <j@....nu>)
Re: (no subject) (Gary Baribault <gary@...ibault.net>)
Re: (no subject) (Sanguinarious Rose <SanguineRose@...ultusTerra.com>)
ZDI-12-183 : RealNetworks RealPlayer RV40 Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-184 : Microsoft Excel Feature11/Feature12 Record Trusted Counter Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-12-185 : Apple Mac OS X DirectoryService SwapProxyMessage Unchecked objOffset Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...ping…)
ZDI-12-186 : Microsoft Office 2007 RTF Mismatch Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: ZDI-12-185 : Apple Mac OS X DirectoryService SwapProxyMessage Unchecked objOffset Remote Code Execution Vulnerability (Jeffrey Walton <noloader@...il.com>)
SEC Consult SA-20121115-0 :: Applicure dotDefender WAF format string vulnerability (SEC Consult Vulnerability Lab <research@...-consult.com>)
Re: (no subject) (James Condron <james@...o-internet.org.uk>)
Re: (no subject) (Julius Kivimäki <julius.kivimaki@...il.com>)
[DC-2012-11-002] DefenseCode ThunderScan ASP.Net C# Advisory: BugTracker.Net Multiple Security Vulnerabilities (DefenseCode <defensecode@...ensecode.com>)
Re: Skype account + IM history hijack vulnerability (klondike <klondike@...ndike.es>)
Re: Skype account + IM history hijack vulnerability (Benji <me@...ji.com>)
Re: Skype account + IM history hijack vulnerability (Benji <me@...ji.com>)
XSS vulnerability in web applications with swfupload: AionWeb, Magento, Liferay Portal, SurgeMail, symfony ("MustLive" <mustlive@...security.com.ua>)
[SECURITY] [DSA 2574-1] typo3-src security update (Florian Weimer <fw@...eb.enyo.de>)

November 16 (1 message)

DC4420 - London DEFCON - November meet - Tuesday 20th November (alien DC4420 <alien@...420.org>)

November 19 (18 messages)

Re: Skype account + IM history hijack vulnerability (Jeffrey Walton <noloader@...il.com>)
[SE-2012-01] Security vulnerabilities in Java SE (details released) (Security Explorations <contact@...urity-explorations.com>)
Skype Account Service - Session Token Bypass Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Skype Account Service - Reset (Session) Password/Username Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Akeni LAN v1.2.118 - Filter Bypass Vulnerability (Local) (Vulnerability Lab <research@...nerability-lab.com>)
[SECURITY] [DSA 2575-1] tiff security update (Nico Golde <nion@...ian.org>)
bash path normalization bug ("Andris Berzins" <pkix@...ox.lv>)
Open-Realty CMS 2.5.8 (2.x.x) <= Cross Site Request Forgery (CSRF) Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
Re: XSS, LFI and SQL Injection Vulnerabilities in Achievo (Vulnerability Lab <research@...nerability-lab.com>)
[ MDVSA-2012:172 ] libproxy (security@...driva.com)
ZDI-12-187 : RealNetworks RealPlayer RV20 Frame Size Array Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
n.runs-SA-2012.004 - SPLUNK Unauthenticated remote DoS (<security@...ns.com>)
n.runs-SA-2012.004 - SPLUNK Unauthenticated remote DoS (<security@...ns.com>)
phpmyadmin compromised? (Lucio Crusca <lucio@...web.org>)
Re: phpmyadmin compromised? (Benji <me@...ji.com>)
Re: phpmyadmin compromised? (Benji <me@...ji.com>)
Re: phpmyadmin compromised? (Christian Sciberras <uuf6429@...il.com>)
Re: bash path normalization bug (Seth Arnold <seth.arnold@...onical.com>)

November 20 (1 message)

BF and FPD vulnerabilities in MODx ("MustLive" <mustlive@...security.com.ua>)

November 21 (13 messages)

SonicWALL CDP 5040 v6.x - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
LAN.FS Messenger Software v2.4 - Command Execution Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Wordpress Facebook Survey v1.0 - SQL Injection Vulnerability (Vulnerability Lab <admin@...nerability-lab.com>)
Re: [SE-2012-01] Security vulnerabilities in Java SE (details released) (Security Explorations <contact@...urity-explorations.com>)
ManageEngine ServiceDesk 8.0 - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Re: phpmyadmin compromised? ("H. Kurth Bemis" <kurth@...thbemis.com>)
NutriSystem.com stores passwords in database using plaintext (warning@...e-error.net)
FW: =| Security Advisory - TP-LINK TL-WR841N XSS (Cross Site Scripting) |= ("Matan Azugi" <matan@...sec.co.il>)
webubs.com and prioritymeter.com; multiple security issues (warning@...e-error.net)
Re: phpmyadmin compromised? (nauty.me04@...il.com)
[ MDVSA-2012:173 ] firefox (security@...driva.com)
XSS vulnerability in swfupload in TinyMCE, SPIP, Radiant CMS, AionWeb, Liferay Portal, SurgeMail, symfony ("MustLive" <mustlive@...security.com.ua>)
Re: XSS vulnerability in swfupload in TinyMCE, SPIP, Radiant CMS, AionWeb, Liferay Portal, SurgeMail, symfony (bk <chort0@...il.com>)

November 22 (4 messages)

Simple DOS POC lighttpd 1.4.31 (Milan Berger <m.berger@...ject-mindstorm.net>)
You Are Committing a Crime Right Now (illwill <illwill@...mob.org>)
Remote Command Execution on Cisco WAG120N (Manu <sourvivor@...il.com>)
[ MDVSA-2012:174 ] libtiff (security@...driva.com)

November 24 (3 messages)

XSS injection in netadmin's challenge in Dreamhack (klondike <klondike@...ndike.es>)
OT Google raises sploit bounties (Georgi Guninski <guninski@...inski.com>)
XSS vulnerability in swfupload in TYPO3 CMS, TinyMCE, Liferay Portal, Drupal, Codeigniter, SentinelleOnAir ("MustLive" <mustlive@...security.com.ua>)

November 25 (2 messages)

One packet OS fingerprinting feature in SinFP3 (GomoR <gomor-fd@...or.org>)
Re: XSS vulnerability in swfupload in TinyMCE, SPIP, Radiant CMS, AionWeb, Liferay Portal, SurgeMail, symfony ("MustLive" <mustlive@...security.com.ua>)

November 26 (18 messages)

Re: OT Google raises sploit bounties (Chris Evans <scarybeasts@...il.com>)
Re: OT Google raises sploit bounties (adam <adam@...sy.net>)
Re: OT Google raises sploit bounties (Michal Zalewski <lcamtuf@...edump.cx>)
OpenBSD implementation of the libc's RPC (portmap) remote DoS. (auto236751@...hmail.com)
[SECURITY] [DSA 2576-1] trousers security update (Yves-Alexis Perez <corsac@...ian.org>)
Re: Remote Command Execution on Cisco WAG120N (Gary Driggs <gdriggs@....edu>)
Websense Proxy Filter Bypass (Nahuel Grisolia <nahuel.grisolia@...il.com>)
Re: linux rootkit in combination with nginx (dxp <dxp2532@...il.com>)
Re: Remote Command Execution on Cisco WAG120N (Manu <sourvivor@...il.com>)
Re: Remote Command Execution on Cisco WAG120N (Julius Kivimäki <julius.kivimaki@...il.com>)
Re: Remote Command Execution on Cisco WAG120N (Gary Driggs <gdriggs@...il.com>)
Re: OT Google raises sploit bounties (Guifre <guifre.ruiz@...il.com>)
Re: Remote Command Execution on Cisco WAG120N (Benji <me@...ji.com>)
Re: OT Google raises sploit bounties (Robert Święcki <robert@...ecki.net>)
Forescout NAC multiple vulnerabilities ("Joseph Sheridan" <joe@...ctionis.com>)
Skype Community - Mail Encoding Web Vulnerability #1 (Vulnerability Lab <research@...nerability-lab.com>)
Skype Community - Mail Encoding Web Vulnerability #2 (Vulnerability Lab <research@...nerability-lab.com>)
Re: OT Google raises sploit bounties (Nick Boyce <nick.boyce@...il.com>)

November 27 (14 messages)

Re: OT Google raises sploit bounties ("Thor (Hammer of God)" <thor@...merofgod.com>)
Possible infection of Piwik 1.9.2 download archive (Maximilian Grobecker <max@...becker-wtal.de>)
Re: Remote Command Execution on Cisco WAG120N (gremlin@...mlin.ru)
Spotify Playlists - Persistent Cross Site Scripting (pieter@...nsecurity.nl)
[SE-2011-01] Additional materials released for SAT TV research (Security Explorations <contact@...urity-explorations.com>)
Re: Possible infection of Piwik 1.9.2 download archive (Christian Sciberras <uuf6429@...il.com>)
Re: Possible infection of Piwik 1.9.2 download archive (Felipe Montecino <ksha@...m.cl>)
Re: Possible infection of Piwik 1.9.2 download archive (Max Grobecker <max@...becker-wtal.de>)
Re: linux rootkit in combination with nginx ("Gregor S." <rc46fi@...glemail.com>)
Re: Possible infection of Piwik 1.9.2 download archive (Ferenc Kovacs <tyra3l@...il.com>)
Re: Remote Command Execution on Cisco WAG120N (andfarm <andfarm@...il.com>)
Re: linux rootkit in combination with nginx (Benji <me@...ji.com>)
Re: linux rootkit in combination with nginx (Jeffrey Walton <noloader@...il.com>)
Samsung +Dell printer firmware built-in backdoor account (Kirils Solovjovs <kirils.solovjovs@...ils.com>)

November 28 (28 messages)

Re: OT Google raises sploit bounties (Georgi Guninski <guninski@...inski.com>)
Re: OT Google raises sploit bounties (Dan Kaminsky <dan@...para.com>)
The email that hacks you (Bogdan Calin <bogdan@...netix.com>)
Re: The email that hacks you (Bogdan Calin <bogdan@...netix.com>)
Re: The email that hacks you (Christian Sciberras <uuf6429@...il.com>)
[SECURITY] [DSA 2578-1] rssh security update (Yves-Alexis Perez <corsac@...ian.org>)
Apple WGT Dictionnaire 1.3 - Script Code Inject Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Paypal Bug Bounty #11 - Redirection Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Paypal Bug Bounty #27 - Community Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Paypal Bug Bounty #21 - Persistent Encoding Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Re: Remote Command Execution on Cisco WAG120N (Gary <gdriggs@...il.com>)
Re: The email that hacks you (Guifre <guifre.ruiz@...il.com>)
Re: The email that hacks you (aditya <nauty.me04@...il.com>)
Hacking Competition PHDAYS CTF Quals 2012 Starts (PHD <PHD@...ecurity.ru>)
Re: The email that hacks you (aditya <nauty.me04@...il.com>)
Re: The email that hacks you (Bogdan Calin <bogdan@...netix.com>)
Re: Remote Command Execution on Cisco WAG120N (Ulisses Montenegro <ulisses.montenegro@...il.com>)
Re: OT Google raises sploit bounties (Georgi Guninski <guninski@...inski.com>)
Re: OT Google raises sploit bounties (Dan Kaminsky <dan@...para.com>)
Re: OT Google raises sploit bounties (Michal Zalewski <lcamtuf@...edump.cx>)
Re: Apple WGT Dictionnaire 1.3 - Script Code Inject Vulnerability ("Thor (Hammer of God)" <thor@...merofgod.com>)
[Security-news] SA-CONTRIB-2012-167 - Mixpanel - Cross site scripting (XSS) (security-news@...pal.org)
[Security-news] SA-CONTRIB-2012-169 - Email Field - Cross Site Scripting and Access bypass (security-news@...pal.org)
[Security-news] SA-CONTRIB-2012-171 - Webmail Plus - SQL injection - (unsupported) (security-news@...pal.org)
[Security-news] SA-CONTRIB-2012-170 - MultiLink - Access Bypass (security-news@...pal.org)
[Security-news] SA-CONTRIB-2012-168 - Services - Information Disclosure (security-news@...pal.org)
Server Side Request Forgery attacks on web-applications (Vladimir Vorontsov <vladimir.vorontsov@...ec.ru>)
[Security-news] SA-CONTRIB-2012-172 - Zero Point - Cross Site Scripting (XSS) (security-news@...pal.org)

November 29 (4 messages)

[ MDVSA-2012:175 ] libssh (security@...driva.com)
Lesson 1: Being a Hacker (Pete Herzog <lists@...com.org>)
Safend Data Protector Multiple Vulnerabilities ("Joseph Sheridan" <joe@...ctionis.com>)
CSRF, AoF, DoS and IAA vulnerabilities in MODx ("MustLive" <mustlive@...security.com.ua>)

November 30 (7 messages)

Oracle Exadata leaf switch logins (larry Cashdollar <larry0@...com>)
SilverStripe CMS - Multiple Vulnerabilities - Security Advisory - SOS-12-011 ("Lists" <lists@...seofsecurity.com>)
Paypal BugBounty #2 - Persistent Listing Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Directory traversal vulnerabilities in jsupload.cgi.pl version 0.6.4 and before (Sean de Regge <seanderegge@...il.com>)
[SECURITY] [DSA 2579-1] apache2 security update (Stefan Fritsch <sf@...ian.org>)
Buffalo Technology LinkStation Information Disclosure And Privilege Escalation (Hurgel Bumpf <l0rd_lunatic@...oo.com>)
New Ajax SQL Injection Exploit? (eltra1n <larry.wichman@...il.com>)

236 messages

Powered by blists - more mailing lists