full-disclosure mailing list - 2016/11

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2016/11

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 3	² 10	³ 1	⁴ 6	⁵ 5	⁶
⁷ 13	⁸ 9	⁹ 3	¹⁰ 14	¹¹ 3	¹²	¹³ 1
¹⁴ 3	¹⁵ 6	¹⁶ 5	¹⁷	¹⁸ 29	¹⁹ 6	²⁰ 3
²¹ 4	²² 8	²³ 1	²⁴ 1	²⁵ 18	²⁶	²⁷
²⁸ 9	²⁹ 1	³⁰

Messages by day:

November 1 (3 messages)

[FD] Multiple SQL injection vulnerabilities in dotCMS (8x CVE) (Elar Lang <elarlang@...il.com>)
[FD] Vulnerabilities in D-Link DIR-300 ("MustLive" <mustlive@...security.com.ua>)
[FD] Researchers Claim Wickr Patched Flaws but Didn't Pay Rewards (Vulnerability Lab <research@...nerability-lab.com>)

November 2 (10 messages)

Re: [FD] Multiple SQL injection vulnerabilities in dotCMS (8x CVE) (Brandon Perry <bperry.volatile@...il.com>)
[FD] MySQL / MariaDB / PerconaDB - Privilege Escalation / Race Condition Exploit [CVE-2016-6663 / OCVE-2016-5616] (Dawid Golunski <dawid@...alhackers.com>)
[FD] CVE-2016-8583 - Alienvault OSSIM/USM Reflected XSS (Peter Lapp <lappsec@...il.com>)
[FD] CVE-2016-8582 - Alienvault OSSIM/USM SQL Injection Vulnerability (Peter Lapp <lappsec@...il.com>)
[FD] CVE-2016-8581 - Alienvault OSSIM/USM Stored XSS Vulnerability (Peter Lapp <lappsec@...il.com>)
[FD] CVE-2016-8580 - Alienvault OSSIM/USM Object Injection Vulnerability (Peter Lapp <lappsec@...il.com>)
[FD] Microsoft Internet Explorer 9 MSHTML CAttrArray use-after-free details (Berend-Jan Wever <berendj@...ver.nl>)
[FD] MSIE 11 MSHTML CView::CalculateImageImmunity use-after-free details (Berend-Jan Wever <berendj@...ver.nl>)
Re: [FD] Multiple SQL injection vulnerabilities in dotCMS (8x CVE) (Elar Lang <elarlang@...il.com>)
[FD] Disclose [10 * cve] in Exponent CMS (Obfuscator <kaiyi.xu@...ppsecurity.com.cn>)

November 3 (1 message)

[FD] Sparkjava Framework - Arbitrary File Read Vulnerability (aj <aj@...nynightmares.com>)

November 4 (6 messages)

[FD] MSIE 10 MSHTML CElement::GetPlainTextInScope out-of-bounds read (Berend-Jan Wever <berendj@...ver.nl>)
Re: [FD] [oss-security] CVE request:Lynx invalid URL parsing with '?' (Thomas Dickey <dickey@....com>)
Re: [FD] [oss-security] CVE request:Lynx invalid URL parsing with '?' (Leo Famulari <leo@...ulari.name>)
[FD] [oss-security] CVE request:Lynx invalid URL parsing with '?' (redrain root <rootredrain@...il.com>)
[FD] KL-001-2016-008 : Sophos Web Appliance Privilege Escalation (KoreLogic Disclosures <disclosures@...elogic.com>)
[FD] KL-001-2016-009 : Sophos Web Appliance Remote Code Execution (KoreLogic Disclosures <disclosures@...elogic.com>)

November 5 (5 messages)

[FD] MSIE 9 MSHTML CPtsTextParaclient::CountApes out-of-bounds read (Berend-Jan Wever <berendj@...ver.nl>)
[FD] MySQL / MariaDB / PerconaDB - Root Privilege Escalation Exploit ( CVE-2016-6664 / CVE-2016-5617 ) (Dawid Golunski <dawid@...alhackers.com>)
[FD] Bypass Imperva by confusing HTTP Pollution Normalization Engine (Nic Wiswat <gen0typ3.n@...il.com>)
Re: [FD] [oss-security] CVE request:Lynx invalid URL parsing with '?' (Thomas Dickey <dickey@....com>)
Re: [FD] [oss-security] CVE request:Lynx invalid URL parsing with '?' (Michal Zalewski <lcamtuf@...edump.cx>)

November 7 (13 messages)

[FD] Actiontec WCB3000N (Telus Branded) Local Unauthenticated Privilege Elevation (Andrew Klaus <andrewklaus@...il.com>)
[FD] WinaXe v7.7 FTP 'Server Ready' CMD Remote Buffer Overflow (hyp3rlinx <apparitionsec@...il.com>)
[FD] Axessh 4.2.2 Denial Of Service (hyp3rlinx <apparitionsec@...il.com>)
[FD] Rapid PHP Editor CSRF Remote Command Execution (hyp3rlinx <apparitionsec@...il.com>)
[FD] Edusson (Robotdon) BB - Filter Bypass & Persistent Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Edusson (Robotdon) BB - Client Side Cross Site Scripting Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Schoolhos CMS v2.29 - (kelas) Data Siswa SQL Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Intel(R) HD Graphics 10 - Unquoted Path Privilege Escalation (Vulnerability Lab <research@...nerability-lab.com>)
[FD] [SYSS-2016-085] Aruba OS Improper Authentication - (CWE-287) (Klaus Tichmann <klaus.tichmann@...s.de>)
[FD] Several unpatched vulns in OwnCloud (Felix Matei <Felix.Matei@...tonmail.com>)
[FD] [RootedCON 2017] Call for Papers open for RootedCON Madrid 2017! (Román Ramírez <rramirez@...tedcon.es>)
[FD] VBScript CRegExp..Execute use of uninitialized memory details (MSIE 8-11, IIS, CScript.exe/WScript.exe) (Berend-Jan Wever <berendj@...ver.nl>)
[FD] [KIS-2016-13] Piwik <= 2.16.0 (saveLayout) PHP Object Injection Vulnerability (Egidio Romano <research@...mainsecurity.com>)

November 8 (9 messages)

[FD] [CVE-2016-6563 / VU#677427]: Dlink DIR routers HNAP Login stack buffer overflow (Pedro Ribeiro <pedrib@...il.com>)
[FD] Crashing Android devices with large Proxy Auto Config (PAC) Files [CVE-2016-6723] (Nightwatch Cybersecurity Research <research@...htwatchcybersecurity.com…)
[FD] Cross Site Scripting Vulnerability In Verint Impact 360 (Sanehdeep Singh <saneh447@...il.com>)
[FD] YITH WooCommerce Compare WordPress Plugin unauthenticated PHP Object injection vulnerability (Summer of Pwnage <lists@...urify.nl>)
[FD] Cross-Site Scripting vulnerability in Quotes Collection WordPress Plugin (Summer of Pwnage <lists@...urify.nl>)
[FD] Cross-Site Scripting vulnerability in Caldera Forms WordPress Plugin (Summer of Pwnage <lists@...urify.nl>)
[FD] Persistent Cross-Site Scripting in WassUp Real Time Analytics WordPress Plugin (Summer of Pwnage <lists@...urify.nl>)
[FD] Cross-Site Scripting in Calendar WordPress Plugin (Summer of Pwnage <lists@...urify.nl>)
[FD] Stored Cross-Site Scripting vulnerability in 404 to 301 WordPress Plugin (Summer of Pwnage <lists@...urify.nl>)

November 9 (3 messages)

[FD] Adobe Connect & Desktop v9.5.7 - Persistent Vulnerability (APSB16-35) [CVE-2016-7851] (Vulnerability Lab <research@...nerability-lab.com>)
[FD] VBScript RegExpComp::PnodeParse out-of-bounds read details (MSIE 8-11, IIS, CScript.exe/WScript.exe) (Berend-Jan Wever <berendj@...ver.nl>)
[FD] Avira Antivirus >= 15.0.21.86 Command Execution (SYSTEM) (Rio Sherri <rio.sherri@...nstudent.info>)

November 10 (14 messages)

[FD] MSIE 9-11 MSHTML PROPERTYDESC::HandleStyleComponentProperty OOB read details (Berend-Jan Wever <berendj@...ver.nl>)
[FD] WININET CHttpHeaderParser::ParseStatusLine out-of-bounds read details (Berend-Jan Wever <berendj@...ver.nl>)
Re: [FD] WININET CHttpHeaderParser::ParseStatusLine out-of-bounds read details (Berend-Jan Wever <berendj@...ver.nl>)
[FD] Vlany: A Linux (LD_PRELOAD) rootkit (eov eov <seclist45@...il.com>)
[FD] CA20161109-02: Security Notice for CA Service Desk Manager ("Williams, Ken" <Ken.Williams@...com>)
[FD] CA20161109-01: Security Notice for CA Unified Infrastructure Management ("Williams, Ken" <Ken.Williams@...com>)
[FD] Release - Shellcode Compiler (Ionut Popescu <poyo_vl@...oo.com>)
[FD] MyBB 1.8.6: XSS ("Curesec Research Team (CRT)" <crt@...esec.com>)
[FD] e107 CMS <= 2.1.2 Privilege Escalation (Kacper Szurek <kacperszurek@...il.com>)
[FD] [CT-2016-1110] Unauthenticated RCE in Observium network monitor (Ronald Volgers <rvolgers@...putest.nl>)
[FD] Persistent Cross-Site Scripting in WP Google Maps Plugin via CSRF (Summer of Pwnage <lists@...urify.nl>)
[FD] Weak validation of Amazon SNS push messages in W3 Total Cache WordPress Plugin (Summer of Pwnage <lists@...urify.nl>)
[FD] Information disclosure race condition in W3 Total Cache WordPress Plugin (Summer of Pwnage <lists@...urify.nl>)
[FD] Reflected Cross-Site Scripting vulnerability in W3 Total Cache plugin (Summer of Pwnage <lists@...urify.nl>)

November 11 (3 messages)

[FD] Teradata Virtual Machine Community Edition v15.10 has insecure file permission ("Larry W. Cashdollar" <larry0@...com>)
[FD] Google Chrome blink Serializer::doSerialize bad cast details (Berend-Jan Wever <berendj@...ver.nl>)
[FD] Trango Systems hidden default root login (all models) (Ian Ling <ian@...caling.com>)

November 13 (1 message)

[FD] Unexpected behavior of cmd.exe while processing .bat files leads to potential command injection vulnerabilities (Julian Horoszkiewicz <ewilded@...il.com>)

November 14 (3 messages)

[FD] New VMSA-2016-0019 - VMware product updates address multiple information disclosure issues (VMware Security Response Center <security@...are.com>)
[FD] SEC Consult SA-20161114-0 :: Multiple vulnerabilities in I-Panda SolarEagle - Solar Controller Administration Soft… (SEC Consult Vulnerability Lab <research…)
[FD] CVE-2015-0040: Microsoft Internet Explorer 11 MSHTML CMapElement::Notify use-after-free details (Berend-Jan Wever <berendj@...ver.nl>)

November 15 (6 messages)

[FD] Microsoft Edge edgehtml CAttrArray::Destroy use-after-free details (Berend-Jan Wever <berendj@...ver.nl>)
[FD] CVE-2016-4484: - Cryptsetup Initrd root Shell (Hector Marco <hmarco@...rco.org>)
Re: [FD] [oss-security] CVE-2016-4484: - Cryptsetup Initrd root Shell - Update: Dracut is also vulnerable (Hector Marco-Gisbert <hmarco@...rco.org>)
[FD] OS-S 2016-22 - Local DoS: Linux Kernel EXT4 Memory Corruption / SLAB-Out-of-Bounds Read (Ralf Spenneberg <info@...t.de>)
[FD] OS-S 2016-21 - Local DoS: Linux Kernel Nullpointer Dereference via keyctl (Ralf Spenneberg <info@...t.de>)
Re: [FD] [oss-security] CVE-2016-4484: - Cryptsetup Initrd root Shell (Leo Famulari <leo@...ulari.name>)

November 16 (5 messages)

[FD] New VMSA-2016-0020 - VMware product updates address multiple information disclosure issues (VMware Security Response Center <security@...are.com>)
[FD] Nginx (Debian-based distros) - Root Privilege Escalation Vulnerability (CVE-2016-1247) (Dawid Golunski <dawid@...alhackers.com>)
[FD] Cross-Site Scripting in All In One WP Security & Firewall WordPress Plugin (Summer of Pwnage <lists@...urify.nl>)
Re: [FD] QUANTUMSQUIRREL - attrition.org unmasked as NSA TAO OP (jericho <jericho@...rition.org>)
Re: [FD] [oss-security] CVE-2016-4484: - Cryptsetup Initrd root Shell (Jason Cooper <osssecurity@...edaemon.net>)

November 18 (29 messages)

[FD] Apple iOS 10.1 - Multiple Access Permission Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Habari CMS v0.9.2 - (Backend Comments) XSS Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] EditMe CMS - CSRF Privilege Escalate Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Reason Core Security v1.2.0.1 - Unqoted Path Privilege Escalation Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] CVE request - Samsumg Mobile Phone SVE-2016-6343: Unauthorized API access via system service call (0xr0ot <0xr0ot.sec@...il.com>)
[FD] CVE-2015-2482 MSIE 8 jscript RegExpBase::FBadHeader use-after-free details (Berend-Jan Wever <berendj@...ver.nl>)
[FD] Microsoft Internet Explorer 11 iertutil LCIEGetTypedComponentFromThread use-after-free details (Berend-Jan Wever <berendj@...ver.nl>)
[FD] MyLittleForum 2.3.6.1: XSS & RPO ("Curesec Research Team (CRT)" <crt@...esec.com>)
[FD] SPIP 3.1: XSS & Host Header Injection ("Curesec Research Team (CRT)" <crt@...esec.com>)
[FD] Mezzanine 4.2.0: XSS ("Curesec Research Team (CRT)" <crt@...esec.com>)
[FD] MyLittleForum 2.3.6.1: CSRF ("Curesec Research Team (CRT)" <crt@...esec.com>)
[FD] MoinMoin 1.9.8: XSS ("Curesec Research Team (CRT)" <crt@...esec.com>)
[FD] Lepton 2.2.2: SQL Injection ("Curesec Research Team (CRT)" <crt@...esec.com>)
[FD] Lepton 2.2.2: CSRF, Open Redirect, Insecure Bruteforce Protection & Password Handling ("Curesec Research Team (CRT)" <crt@...esec.com>)
[FD] Lepton 2.2.2: Code Execution ("Curesec Research Team (CRT)" <crt@...esec.com>)
[FD] Jaws 1.1.1: Code Execution ("Curesec Research Team (CRT)" <crt@...esec.com>)
[FD] FUDforum 3.0.6: Multiple Persistent XSS & Login CSRF ("Curesec Research Team (CRT)" <crt@...esec.com>)
[FD] Jaws 1.1.1: Object Injection, Open Redirect, Cookie Flags ("Curesec Research Team (CRT)" <crt@...esec.com>)
[FD] FUDforum 3.0.6: LFI ("Curesec Research Team (CRT)" <crt@...esec.com>)
[FD] [ERPSCAN-16-031] SAP NetWeaver AS ABAP – directory traversal using READ DATASET (ERPScan inc <erpscan.online@...il.com>)
[FD] [ERPSCAN-16-032] SAP Telnet Console – Directory traversal vulnerability (ERPScan inc <erpscan.online@...il.com>)
[FD] Teradata Virtual Machine Community Edition v15.10 Insecure creation of files in /tmp ("Larry W. Cashdollar" <larry0@...com>)
[FD] /tmp race condition in Teradata Studio Express v15.12.00.00 studioexpressinstall ("Larry W. Cashdollar" <larry0@...com>)
[FD] SQL Injection in Post Indexer allows super admins to read the contents of the database (WordPress plugin) (dxw Security <security@....com>)
[FD] Unserialisation in Post Indexer could allow man-in-the-middle to execute arbitrary code (in some circumstances) (WordPress… (dxw Security <security@....com>)
[FD] Unserialization vulnerability in Relevanssi Premium could allow admins to execute arbitrary code (in some circumstances) … (dxw Security <security@....com>)
[FD] SQL injection and unserialization vulnerability in Relevanssi Premium could allow admins to execute arbitrary code (in som… (dxw Security <security@....com>)
[FD] Executable installers are vulnerable^WEVIL (case 41): EmsiSoft's Emergency Kit allows elevation of privilege for e… ("Stefan Kanthak" <stefan.kanthak@...go.…)
[FD] Huawei Flybox B660 3G/4G Router - Auth Bypass Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

November 19 (6 messages)

[FD] CVE-2016-3247 Microsoft Edge CTextExtractor::GetBlockText OOB read details (Berend-Jan Wever <berendj@...ver.nl>)
[FD] Tetris heap spraying: spraying the heap on a budget (Berend-Jan Wever <berendj@...ver.nl>)
[FD] Cross-Site Scripting in Check Email WordPress Plugin (Summer of Pwnage <lists@...urify.nl>)
[FD] Cross-Site Scripting in Huge IT Portfolio Gallery WordPress Plugin (Summer of Pwnage <lists@...urify.nl>)
[FD] Persistent Cross-Site Scripting in Instagram Feed plugin via CSRF (Summer of Pwnage <lists@...urify.nl>)
[FD] Stored Cross-Site Scripting in WP Canvas - Shortcodes WordPress Plugin (Summer of Pwnage <lists@...urify.nl>)

November 20 (3 messages)

[FD] Joomla plugin K2 RCE via CSRF or WCI (Anti Räis <antirais@...il.com>)
Re: [FD] Stored Cross-Site Scripting in WP Canvas - Shortcodes WordPress Plugin ("Larry W. Cashdollar" <larry0@...com>)
Re: [FD] Stored Cross-Site Scripting in WP Canvas - Shortcodes WordPress Plugin (Summer of Pwnage <lists@...urify.nl>)

November 21 (4 messages)

[FD] [RCESEC-2016-007] AppFusions Doxygen for Atlassian Confluence v1.3.0 getTemporaryDirectory() tempId Path Traversal/Re… (Julien Ahrens <info@...security.com>)
[FD] [RCESEC-2016-008] AppFusions Doxygen for Atlassian Confluence v1.3.2 renderContent() Full Path Information Disclosure (Julien Ahrens <info@...security.com>)
[FD] [RCESEC-2016-009] AppFusions Doxygen for Atlassian Confluence v1.3.2 renderContent() Persistent Cross-Site Scripting (Julien Ahrens <info@...security.com>)
[FD] Multiple issues in OpManager 12100 & 12200 (Michael Heydon <michael@...ydon.net>)

November 22 (8 messages)

[FD] Reflected XSS in WonderCMS <= v0.9.8 (Manuel Garcia Cardenas <advidsec@...il.com>)
[FD] PHDays VII Call for Papers: How to Stand Up at the Standoff (Alexander Lashkov <ALashkov@...ecurity.com>)
[FD] MSIE8 MSHTML Ptls5::LsFindSpanVisualBoundaries memory corruption (Berend-Jan Wever <berendj@...ver.nl>)
[FD] [x33fcon] Call for Papers (and Trainers) ("x33fcon.office" <cfp@...fcon.com>)
[FD] [ERPSCAN-16-033] SAP NetWeaver AS JAVA icman - DoS vulnerability (ERPScan inc <erpscan.online@...il.com>)
[FD] [ERPSCAN-16-034] SAP NetWeaver AS JAVA - XXE vulnerability in BC-BMT-BPM-DSK component (ERPScan inc <erpscan.online@...il.com>)
[FD] [CVE-2016-7434] ntpd remote pre-auth DoS (Magnus Stubman <magnus@...bman.eu>)
[FD] [CORE-2016-0007] - TP-LINK TDDP Multiple Vulnerabilities (CORE Advisories Team <advisories@...esecurity.com>)

November 23 (1 message)

[FD] Stored Cross-Site Scripting in Gallery - Image Gallery WordPress Plugin (Summer of Pwnage <lists@...urify.nl>)

November 24 (1 message)

[FD] [RT-SA-2016-003] Less.js: Compilation of Untrusted LESS Files May Lead to Code Execution through the JavaScript Le… (RedTeam Pentesting GmbH <release@...tea…)

November 25 (18 messages)

[FD] MobSF v0.9.3 is Released: Now supports Windows APPX Static Analysis (Ajin Abraham <ajin25@...il.com>)
[FD] CVE-2015-0050: Microsoft Internet Explorer 8 MSHTML SRunPointer::SpanQualifier/RunType OOB read details (Berend-Jan Wever <berendj@...ver.nl>)
[FD] CVE-2015-1251: Chrome blink SpeechRecognitionController use-after-free details (Berend-Jan Wever <berendj@...ver.nl>)
[FD] Microsoft Internet Explorer 11 MSHTML CGeneratedContent::HasGeneratedSVGMarker type confusion (Berend-Jan Wever <berendj@...ver.nl>)
[FD] CVE-2013-3120 MSIE 10 MSHTML CEditAdorner::Detach use-after-free details (Berend-Jan Wever <berendj@...ver.nl>)
[FD] The HS-110 Smart Plug aka Projekt Kasa ("Curesec Research Team (CRT)" <crt@...esec.com>)
[FD] [CVE-2016-7098] GNU Wget < 1.18 Access List Bypass / Race Condition (Dawid Golunski <dawid@...alhackers.com>)
[FD] Faraday v2.2: Collaborative Penetration Test and Vulnerability Management Platform (Francisco Amato <famato@...obytesec.com>)
[FD] Red Hat JBoss EAP deserialization of untrusted data (Agazzini Maurizio <inode@...iaservice.net>)
[FD] [SYSS-2016-064] Multi Kon Trade M2B GSM Wireless Alarm System - Improper Restriction of Excessive Authentication Att… (Matthias Deeg <matthias.deeg@...s.de>)
[FD] [SYSS-2016-066] Multi Kon Trade M2B GSM Wireless Alarm System - Missing Protection against Replay Attacks (Matthias Deeg <matthias.deeg@...s.de>)
[FD] [SYSS-2016-071] Blaupunkt Smart GSM Alarm SA 2500 Kit - Missing Protection against Replay Attacks (Matthias Deeg <matthias.deeg@...s.de>)
[FD] [SYSS-2016-072] Olypmia Protect 9061 - Missing Protection against Replay Attacks (Matthias Deeg <matthias.deeg@...s.de>)
[FD] [SYSS-2016-106] EASY HOME Alarmanlagen-Set - Missing Protection against Replay Attacks (Matthias Deeg <matthias.deeg@...s.de>)
[FD] [SYSS-2016-107] EASY HOME Alarmanlagen-Set - Cryptographic Issues (CWE-310) (Matthias Deeg <matthias.deeg@...s.de>)
[FD] NEW VMSA-2016-0022 VMware product updates address information disclosure vulnerabilities (VMware Security Response Center <security@...are.com>)
[FD] NEW VMSA-2016-0021 VMware product updates address partial information disclosure vulnerability (VMware Security Response Center <security@...are.com>)
[FD] UCanCode multiple vulnerabilities (Carlo Di Dato <shinnai@...istici.org>)

November 28 (9 messages)

[FD] Schoolhos CMS v2.29 - userberita SQL injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Burden TMA v2.1.1 - (Task) Persistent Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Tenda, Dlink & Tplink TD-W8961ND - DHCP XSS Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Apple iOS 10.1 - Multiple Access Permission Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[FD] SEC Consult SA-20161128-0 :: DoS & heap-based buffer overflow in Guidance Software EnCase Forensic (SEC Consult Vulnerability Lab <research@...-consult.co…)
[FD] CVE-2016-0063: MSIE 8-11 MSHTML DOMImplementation type confusion details (Berend-Jan Wever <berendj@...ver.nl>)
[FD] [ndhXV] Call For Paper - 15th anniversary - 24-25 June 2017 (Freeman <freeman@...kerzvoice.net>)
[FD] CFP - BloomCON 0x02 - March 24-25, 2017 Bloomsburg, PA (Philip Polstra <ppolstra@...il.com>)
Re: [FD] Tenda, Dlink & Tplink TD-W8961ND - DHCP XSS Vulnerability ("Simon Waters (Surevine)" <simon.waters@...evine.com>)

November 29 (1 message)

[FD] Cross-Site Request Forgery in Insert Html Snippet WordPress Plugin (Summer of Pwnage <lists@...urify.nl>)

162 messages

Powered by blists - more mailing lists