full-disclosure - IE7 Information Disclosure

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <200605052328.k45NSPEi052730@mailserver3.hushmail.com>
Date: Sat May  6 00:28:36 2006
From: 0x80 at hush.ai (0x80@...h.ai)
Subject: IE7 Information Disclosure - For sale

Congradulations.

You have won an award for being the sixth clueless wanna-be 
whitehat faggot to crack that joke.

Based on all of the "feedback" on this cess-pool called a mailing 
list.  I am now offering my vulnerabilities for sale only to those 
that a.) will not report it to the vendor and b.) will only use it 
for their own profit via spyware installations and spambots. 

I will discount the price to anyone using it in the above manner to 
target so called security professionals subscribed to this list.

On Fri, 05 May 2006 15:32:42 -0700 Travis Good 
<tgood@...dsecurity.net> wrote:
>I'll give you 10.99+tip for it if you also throw in a large 
>sausage 
>pizza.
>
>On Thu, 4 May 2006, 0x80@...h.ai wrote:
>
>>
>> I just found a second bug that allows one to remotely retrieve 
>the
>> contents of other tabs inside of IE7.
>>
>> Again, for sale.  Highest bidder.
>>
>> Exploit example is to trick luser to visiting website which 
>would
>> then download contents of all open tabs including cookie and
>> session information.
>>
>>
>>
>> Concerned about your privacy? Instantly send FREE secure email, 
>no account required
>> http://www.hushmail.com/send?l=480
>>
>> Get the best prices on SSL certificates from Hushmail
>> https://www.hushssl.com?l=485
>>
>> _______________________________________________
>> Full-Disclosure - We believe in it.
>> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>> Hosted and sponsored by Secunia - http://secunia.com/
>>
>
>Travis Good, CISSP, IAM, IEM

Concerned about your privacy? Instantly send FREE secure email, no account required
http://www.hushmail.com/send?l=480

Get the best prices on SSL certificates from Hushmail
https://www.hushssl.com?l=485