full-disclosure mailing list - 2007/06

Messages by day:

June 1 (12 messages)

• Re: Palimm Palimmm (Dëêþàñ Çhäkrãvârthÿ <codeshepherd@...il.com>)
• SEC Consult SA-20070601-0 :: PHP chunk_split() integer overflow (Gerhard Wagner <research@...-consult.com>)
• n.runs-SA-2007.013 - F-Secure Antivirus LZH parsing BufferOverflow Advisory (<security@...ns.com>)
• static XSS / SQL-Injection in Omegasoft Insel ("MC Iglo" <mc.iglo@...glemail.com>)
• 0DAY RFI in phpBB <= 2.0.22 HOT (dr.rezen@...il.com)
• PHPLive ALL VERSION: RFI + XSS (dr.rezen@...il.com)
• [OpenPKG-SA-2007.020] OpenPKG Security Advisory (php) (OpenPKG GmbH <openpkg-noreply@...npkg.com>)
• Re: Palimm Palimmm (poo <skodliv@...il.com>)
• APC PowerChute Network Shutdown 2.21 is vulnerable to directory transversal (guiness.stout <guinness.stout@...il.com>)
• Re: 0DAY RFI in phpBB <= 2.0.22 HOT ("Slythers Bro" <slythers@...il.com>)
• [USN-468-1] Firefox vulnerabilities (Kees Cook <kees@...ntu.com>)
• iDefense Security Advisory 06.01.07: Symantec VERITAS Storage Foundation Administration Service DoS Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)

• Re: 0DAY RFI in phpBB <= 2.0.22 HOT (<hardened-php@...hmail.com>)
• Outpost Enforcing system reboot with 'outpost_ipc_hdr' mutex Vulnerability (Matousec - Transparent security Research <research@...ousec.com>)
• Re: 0DAY RFI in phpBB <= 2.0.22 HOT (Ashley Pinner <neothermic@...bb.com>)

• Disinfectors for the calculator virus (ti89.Gaara) (Piotr Bania <bania.piotr@...il.com>)
• SNMY200706_01 : GBD UPX File Handling Buffer Overflow Vulnerability (xWinGs <xwings@...urity.net.my>)
• RESEND new Copy : SNMY200706_01 : GBD UPX File Handling Buffer Overflow Vulnerability (xWinGs <xwings@...urity.net.my>)
• FoFuS - PoC bot using DNS cover channel ("Fábio Martins a.k.a Fósforo" <fosforo@...il.com>)

• apryl maynard, internet humanitarian ("Joseph Evers" <lolcommawhat@...glemail.com>)
• screen 4.0.3 local Authentication Bypass (rembrandt@...erlin.de)
• Full Path Disclosure eqDKP 1.3.2c and prior (kefka <kefka@...inbeardsucks.com>)
• BCS'07 Call For Papers ("Jim Geovedi" <jim.geovedi@...il.com>)
• Adverse Vectors of Coding in Wordpress : Post Modifications (Aditya K Sood <zeroknock@...aeye.org>)
• Re: screen 4.0.3 local Authentication Bypass (Alexander Klink <a.klink@...ops.de>)
• Project CERA : Cutting Edge Research Arena (Aditya K Sood <zeroknock@...aeye.org>)
• Assorted browser vulnerabilities (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Portcullis Computer Security Ltd - Advisories ("advisories" <advisories@...tcullis-security.com>)
• n.runs-SA-2007.014 - F-Secure Antivirus ARJ parsing Infinite Loop Advisory (<security@...ns.com>)
• n.runs-SA-2007.015 - F-Secure Antivirus FSG packed files parsing Infinite Loop Advisory (<security@...ns.com>)
• [SECURITY] [DSA 1291-4] New samba packages fix regression (Moritz Muehlenhoff <jmm@...ian.org>)
• Kevin Johnson BASE <= 1.3.6 authentication bypass ("Johnny Storm" <johnny653@...il.com>)
• (no subject) (Foresight Linux Essential Advisory Service <foresight-security-noreply@...esightlinux.org>)
• FLEA-2007-0024-1: libexif (Foresight Linux Essential Advisory Service <foresight-security-noreply@...esightlinux.org>)
• Re: Kevin Johnson BASE <= 1.3.6 authentication bypass (Paul Schmehl <pauls@...allas.edu>)
• Re: screen 4.0.3 local Authentication Bypass ("Christian \"Khark\" Lauf" <full-disclosure@...rkerlake.net>)
• [ MDKSA-2007:110 ] - Updated php-pear packages fix directory traversal vulnerability (security@...driva.com)
• [ MDKSA-2007:111 ] - Updated util-linux packages address login access policies bypassing issue (security@...driva.com)
• [ MDKSA-2007:112 ] - Updated mplayer packages fix buffer overflow vulnerability (security@...driva.com)
• rPSA-2007-0114-1 mutt (rPath Update Announcements <announce-noreply@...th.com>)
• rPSA-2007-0115-1 libexif (rPath Update Announcements <announce-noreply@...th.com>)
• Unpatched input validation flaw in Firefox 2.0.0.4 ("Thor Larholm" <larholm@...il.com>)
• Re: screen 4.0.3 local Authentication Bypass ("Lolek of TK53" <lolek1337@...glemail.com>)
• [ MDKSA-2007:113 ] - Updated mutt packages fix vulnerabilities (security@...driva.com)

• TPTI-07-10: Centennial Software XferWan.exe Stack Overflow Vulnerability (TSRT@...m.com)
• TPTI-07-08: Symantec Veritas Storage Foundation Scheduler Service Authentication Bypass Vulnerability (TSRT@...m.com)
• TPTI-07-09: Macrovision FLEXnet boisweb.dll ActiveX Control Buffer Overflow Vulnerability (TSRT@...m.com)
• [ MDKSA-2007:115 ] - Updated clamav packages fix vulnerabilities (security@...driva.com)
• Re: FoFuS - PoC bot using DNS cover channel ("Fábio Martins a.k.a Fósforo" <fosforo@...il.com>)
• Re: screen 4.0.3 local Authentication Bypass (Pranay Kanwar <warl0ck@...aeye.org>)
• Re: screen 4.0.3 local Authentication Bypass (Sûnnet Beskerming <info@...kerming.com>)
• Re: screen 4.0.3 local Authentication Bypass ("Open Phugu" <openphugu@...il.com>)
• Re: screen 4.0.3 local Authentication Bypass (Schanulleke <schalulleke@...il.com>)
• Re: screen 4.0.3 local Authentication Bypass (Sûnnet Beskerming <info@...kerming.com>)
• Re: screen 4.0.3 local Authentication Bypass (Oliver Starke <oliver.starke@...ermon.com>)
• Re: screen 4.0.3 local Authentication Bypass (Frank Thyes <thyes@....net>)
• Re: screen 4.0.3 local Authentication Bypass ("Lolek of TK53" <lolek1337@...glemail.com>)
• [TOOL] untidy - XML Fuzzer ("Andres Riancho" <andres.riancho@...il.com>)
• Re: screen 4.0.3 local Authentication Bypass ("Paul Melson" <pmelson@...il.com>)
• Macro threats ("Muscarella, Sebastian \(IT\)" <Sebastian.I.Muscarella@...ganstanley.com>)
• Re: Macro threats (Valdis.Kletnieks@...edu)
• Re: Kevin Johnson BASE <= 1.3.6 authentication bypass ("Johnny Storm" <johnny653@...il.com>)
• Re: Macro threats ("matthew wollenweber" <mwollenweber@...il.com>)
• Re: Assorted browser vulnerabilities (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Re: Macro threats (Jay Sulzberger <jays@...ix.com>)
• [ GLSA 200706-01 ] libexif: Integer overflow vulnerability (Raphael Marichez <falco@...too.org>)
• Re: Kevin Johnson BASE <= 1.3.6 authentication bypass (Kradorex Xeron <admin@...ibase.ca>)
• ZDI-07-034: CA Multiple Product AV Engine CAB Filename Parsing Stack Overflow Vulnerability (zdi-disclosures@...m.com)
• ZDI-07-035: CA Multiple Product AV Engine CAB Header Parsing Stack Overflow Vulnerability (zdi-disclosures@...m.com)
• Re: Macro threats ("Randal T. Rioux" <randy@...cyonlabs.com>)
• Re: Assorted browser vulnerabilities ("Kevin Finisterre (lists)" <kf_lists@...italmunition.com>)
• [ MDKSA-2007:114 ] - Updated file packages fix vulnerabilities (security@...driva.com)
• [ MDKSA-2007:116 ] - Updated libpng packages fix vulnerability (security@...driva.com)
• Hello ! (ene0toue ene0toue <ene0toue@...oo.com>)
• Cacti Denial of Service (Mathieu Dessus <mdessus@...il.com>)
• Re: Hello ! (Valdis.Kletnieks@...edu)

• Re: Hello ! ("M. Shirk" <shirkdog_list@...mail.com>)
• Whats wrong with milw0rm forums? ("Mark Sec" <mark.sec@...il.com>)
• [ MDKSA-2007:117 ] - Updated lha packages fix unsafe temporary files creation issue (security@...driva.com)
• [USN-469-1] Thunderbird vulnerabilities (Kees Cook <kees@...ntu.com>)
• Re: Kevin Johnson BASE <= 1.3.6 authentication bypass ("Johnny Storm" <johnny653@...il.com>)
• Re: Kevin Johnson BASE <= 1.3.6 authentication bypass ("Jamie Riden" <jamie.riden@...il.com>)
• If you know,why can't you teach (scott <redhowlingwolves@...lsouth.net>)
• screen 4.0.3 local Authentication Bypass - Working on multiple systems (Sûnnet Beskerming <info@...kerming.com>)
• SecNiche - CERA Project is Reoriginated (Aditya K Sood <zeroknock@...niche.org>)
• Re: Whats wrong with milw0rm forums? (evilrabbi <evilrabbi@...il.com>)
• CSIS Advisory: Microsoft GDI+ Integer division by zero flaw handling .ICO files ("Dennis Rand" <rand@...s.dk>)
• You shady bastards. (H D Moore <fdlist@...italoffense.net>)
• Re: You shady bastards. (Tim <tim-security@...tinelchicken.org>)
• Re: You shady bastards. ("Stack Smasher" <stacksmasher@...il.com>)
• Re: You shady bastards. ("J. Oquendo" <sil@...iltrated.net>)
• Re: You shady bastards. (Tim <tim-security@...tinelchicken.org>)
• Re: You shady bastards. ("J. Oquendo" <sil@...iltrated.net>)
• iDefense Security Advisory 06.05.07: Symantec Ghost Multiple Denial of Service Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)
• Re: You shady bastards. (Tim <tim-security@...tinelchicken.org>)
• Re: You shady bastards. ("Joey Mengele" <joey.mengele@...hmail.com>)
• Re: You shady bastards. ("matthew wollenweber" <mwollenweber@...il.com>)
• Re: You shady bastards. ("J. Oquendo" <sil@...iltrated.net>)
• Re: You shady bastards. (Jay Sulzberger <jays@...ix.com>)
• Re: You shady bastards. (Tim <tim-security@...tinelchicken.org>)
• Re: You shady bastards. ("Joey Mengele" <joey.mengele@...hmail.com>)
• Re: You shady bastards. ("J. Oquendo" <sil@...iltrated.net>)
• Re: You shady bastards. ("Peter Dawson" <slash.pd@...il.com>)
• FLEA-2007-0021-2: madwifi (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
• Re: You shady bastards. ("J. Oquendo" <sil@...iltrated.net>)
• ECPA Plain English 101 Employer vs. Employee ("J. Oquendo" <sil@...iltrated.net>)
• Re: screen 4.0.3 local Authentication Bypass - Working on multiple systems (Nico Golde <fd@...lde.de>)
• Re: You shady bastards. (blah <blah@...kogre.com>)
• Re: You shady bastards. (Tim <tim-security@...tinelchicken.org>)
• Re: You shady bastards. ("Larry Seltzer" <Larry@...ryseltzer.com>)
• Re: You shady bastards. ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Re: You shady bastards. ("Larry Seltzer" <Larry@...ryseltzer.com>)
• Re: You shady bastards. ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Re: You shady bastards. (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Re: You shady bastards. ("Larry Seltzer" <Larry@...ryseltzer.com>)
• Re: You shady bastards. ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Re: screen 4.0.3 local Authentication Bypass - Working on multiple systems (Sûnnet Beskerming <info@...kerming.com>)
• Re: You shady bastards. ("J. Oquendo" <sil@...iltrated.net>)
• Re: You shady bastards. (John Lowry <jlowry@....com>)
• Announce - Release RFIDIOt ver 0.1n (June 2007) (Adam Laurie <adam.laurie@...bunker.net>)
• Fw: [IACIS-L] Statement by Defense Expert ("Jason Coombs" <jasonc@...ence.org>)
• Remote log injection on DenyHosts, Fail2ban and BlockHosts ("Daniel Cid" <daniel.cid@...il.com>)
• Re: You shady bastards. (evilrabbi <evilrabbi@...il.com>)
• [RE: 0DAY RFI in phpBB <= 2.0.22 HOT] (jeroen <nowhereman@...nen.org>)
• [ GLSA 200706-02 ] Evolution: User-assisted execution of arbitrary code (Raphael Marichez <falco@...too.org>)
• Re: Fw: [IACIS-L] Statement by Defense Expert (Valdis.Kletnieks@...edu)
• [ GLSA 200706-03 ] ELinks: User-assisted execution of arbitrary code (Raphael Marichez <falco@...too.org>)
• Re: You shady bastards. ("Joey Mengele" <joey.mengele@...hmail.com>)
• Re: You shady bastards. (Brian Anderson <brian.anderson@...l.darton.edu>)
• Re: You shady bastards. (evilrabbi <evilrabbi@...il.com>)
• Re: You shady bastards. (Brian Anderson <bla@...ton.edu>)
• Yahoo 0day ActiveX Webcam Exploit (Danny <server.exception@...oo.com>)
• Re: You shady bastards. (Kradorex Xeron <admin@...ibase.ca>)

• 2nd Yahoo 0day ActiveX Exploit (Danny <server.exception@...oo.com>)
• Maybe nothing so shady; depends on the motive. (<Glenn.Everhart@...se.com>)
• Re: You shady bastards. (security curmudgeon <jericho@...rition.org>)
• Re: You shady bastards. ("Larry Seltzer" <Larry@...ryseltzer.com>)
• Re: You shady bastards. (security curmudgeon <jericho@...rition.org>)
• Re: Remote log injection on DenyHosts, Fail2ban and BlockHosts (Tavis Ormandy <taviso@...too.org>)
• RUS-CERT 2007-06:01 (1380): Insecure Defaults in A-L OmniPCX 7.0 (Oliver Goebel <goebel@...t.uni-stuttgart.de>)
• XSS in Space4k.[pl|fr|com|de|it] (Florian Stinglmayr <fstinglmayr@...il.com>)
• Re: You shady bastards. ("Randall M" <randallm@...mail.com>)
• Re: You shady bastards. (<rlogin@...h.ai>)
• Re: You shady bastards. (Dragos Ruiu <dr@....net>)
• Re: Fw: [IACIS-L] Statement by Defense Expert ("J. Oquendo" <sil@...iltrated.net>)
• Re: You shady bastards. (Anders B Jansson <hdw@...listi.se>)
• Re: Fw: [IACIS-L] Statement by Defense Expert (<Glenn.Everhart@...se.com>)
• Re: Remote log injection on DenyHosts, Fail2ban and BlockHosts ("Daniel Cid" <daniel.cid@...il.com>)
• [CAID 35395, 35396]: CA Anti-Virus Engine CAB File Buffer Overflow Vulnerabilities ("Williams, James K" <James.Williams@...com>)
• Re: Yahoo 0day ActiveX Webcam Exploit ("Morning Wood" <se_cur_ity@...mail.com>)
• [SECURITY] [DSA 1299-1] New ipsec-tools packages fix denial of service (dann frazier <dannf@...ian.org>)
• You STUPID bastards. ("Aberration State" <sdufresno@...er-rights.net>)
• [SECURITY] [DSA 1300-1] New iceape packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: Yahoo 0day ActiveX Webcam Exploit ("Ronald MacDonald" <ronald@...cd.com>)
• 0day Yahoo Webcam Exploits (Danny <server.exception@...oo.com>)

• rPSA-2007-0117-1 gd php php-mysql php-pgsql (rPath Update Announcements <announce-noreply@...th.com>)
• Second Call for Papers: DeepSec IDSC 2007 Europe/Vienna: 20-23 Nov 2007 ("Paul Böhm" <paul@...hm.org>)
• Re: 0day Yahoo Webcam Exploits ("Morning Wood" <se_cur_ity@...mail.com>)
• Re: 0day Yahoo Webcam Exploits ("Morning Wood" <se_cur_ity@...mail.com>)
• Yahoo Webcam (ywcupl.dll) ActiveX Download and Exec Exploit 0day (Danny <server.exception@...oo.com>)
• Yahoo Webcam (Ywcvwr.dll) ActiveX Download and Exec Exploit 0day #2 (Danny <server.exception@...oo.com>)
• SecNiche : MLabs Shifted Fully (Aditya K Sood <zeroknock@...niche.org>)
• CSIS Advisory: BlueCoat K9 Web Protection 3.2.36 Overflow ("Dennis Rand" <rand@...s.dk>)
• SecNiche : MLabs Shifted Fully (zeroknock@...niche.org)
• Re: 0day Yahoo Webcam Exploits (server.exception@...oo.com)
• Re: SecNiche : MLabs Shifted Fully ("Vurgun Haciyev" <vurgun@...iyev.com>)
• Re: You shady bastards. (Thierry Zoller <Thierry@...ler.lu>)
• Re: You shady bastards. - CONFIDENTIAL ("Larry Seltzer" <Larry@...ryseltzer.com>)
• Re: 0day Yahoo Webcam Exploits (evilrabbi <evilrabbi@...il.com>)
• Re: You shady bastards. (Kradorex Xeron <admin@...ibase.ca>)
• Re: You shady bastards. (Thierry Zoller <Thierry@...ler.lu>)
• Re: You shady bastards. ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Shady bastards - CONFIDENTIAL (Terms of Services) ("J. Oquendo" <sil@...iltrated.net>)
• SafeNET High Assurance Remote/SoftRemote (IPSecDrv.sys) remote DoS (mu-b <mu-b@...it-labs.org>)
• Re: CSIS Advisory: BlueCoat K9 Web Protection 3.2.36 Overflow (Valdis.Kletnieks@...edu)
• Re: CSIS Advisory: BlueCoat K9 Web Protection 3.2.36 Overflow ("Dennis Rand" <rand@...s.dk>)
• Re: Shady bastards - CONFIDENTIAL (Terms of Services) (dcdave@....net)
• Re: Shady bastards - CONFIDENTIAL (Terms of Services) ("J. Oquendo" <sil@...iltrated.net>)
• Yahoo 0day Fwd: VIRUS (Exploit.HTML.IFrameBOF-4) in mail TO YOU from <full-disclosure-bounces@...ts.grok.org.uk> (Bill Kruchas <bill@...chas.com>)
• Re: You shady bastards. ("Aberration State" <sdufresno@...er-rights.net>)
• Wordpress default theme XSS (admin) and other problems ("John Smith" <zamolx3@...il.com>)
• APC PowerChute Network Shutdown 2.21 is vulnerable to directory transversal (Paul Bohan <pbuachain@...mail.com>)
• Re: You shady bastards. (M.B.Jr. <marcio.barbado@...il.com>)
• Re: 0day Yahoo Webcam Exploits (evilrabbi <evilrabbi@...il.com>)
• Re: You shady bastards. (evilrabbi <evilrabbi@...il.com>)
• Re: You shady bastards. (Kradorex Xeron <admin@...ibase.ca>)
• iDefense Security Advisory 06.07.07: Linux Kernel cpuset tasks Information Disclosure Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Re: You shady bastards. ("Joey Mengele" <joey.mengele@...hmail.com>)
• Re: You shady bastards. ("Morning Wood" <se_cur_ity@...mail.com>)
• EEYE: Yahoo Webcam ActiveX Controls Multiple Buffer Overflows ("eEye Advisories" <Advisories@...e.com>)
• Re: CSIS Advisory: BlueCoat K9 Web Protection 3.2.36 Overflow (Jared DeMott <demottja@....edu>)
• [OpenPKG-SA-2007.021] OpenPKG Security Advisory (wordpress) (OpenPKG GmbH <openpkg-noreply@...npkg.com>)
• Re: You shady bastards. ("Forest Lobster" <forestlobster@...il.com>)
• Re: You shady bastards. ("Joey Mengele" <joey.mengele@...hmail.com>)
• Re: CSIS Advisory: BlueCoat K9 Web Protection 3.2.36 Overflow ("Dennis Rand" <rand@...s.dk>)
• Re: You shady bastards. ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Re: CSIS Advisory: BlueCoat K9 Web Protection 3.2.36 Overflow (Jared DeMott <demottja@....edu>)
• [ MDKSA-2007:118 ] - Updated libexif packages fix crash and possible arbitrary code execution issue (security@...driva.com)
• [USN-470-1] Linux kernel vulnerabilities (Kees Cook <kees@...ntu.com>)

• n3td3v to attend blackhat / defcon ??? ("HACK THE GOV" <hackthegov@...glemail.com>)
• Month of DoS Bugs (MODB) ("Kristian Hermansen" <kristian.hermansen@...il.com>)
• Re: n3td3v to attend blackhat / defcon ??? (coderman <coderman@...il.com>)
• Re: Month of DoS Bugs (MODB) ("M. Shirk" <shirkdog_list@...mail.com>)
• Re: Month of DoS Bugs (MODB) ("Steven Adair" <steven@...urityzone.org>)
• Re: n3td3v to attend blackhat / defcon ??? ("HACK THE GOV" <hackthegov@...glemail.com>)
• Re: You shady bastards. (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)

• Link Request Contact Form v3.4 Remote Code Injection (<corrado.liotta@...ce.it>)
• i just made up a new word ("Michael Silk" <michaelslists@...il.com>)
• Re: i just made up a new word (Florian Stinglmayr <fstinglmayr@...il.com>)
• [SECURITY] [DSA 1303-1] New lighttpd packages fix denial of service (Steve Kemp <skx@...ian.org>)
• Month of Random Hashes (MoRH) ("Month of Random Hashes" <morh@...h.ai>)
• Month of Random Hashes: DAY ONE ("Month of Random Hashes" <morh@...h.ai>)
• [SECURITY] [DSA 1302-1] New freetype packages fix integer overflow (Steve Kemp <skx@...ian.org>)
• [TOOL] w3af - Web Application Attack and Audit Framework ("Andres Riancho" <andres.riancho@...il.com>)
• Multiple XXS vulnerabilities at http://www.shopathometv.com ("secure poon" <suckure@...il.com>)
• Multiple XXS vulnerabilities at http://www.shopathometv.com ("secure poon" <suckure@...il.com>)
• [SECURITY] [DSA 1301-1] New Gimp packages fix arbitrary code execution (Noah Meyerhans <noahm@...ian.org>)
• Serious holes affecting JFFNMS (Tim Brown <timb@...-dimension.org.uk>)

• Re: Month of Random Hashes (MoRH) (don bailey <don.bailey@...il.com>)
• Fwd: Month of Random Hashes (MoRH) ("Jason Miller" <jammer128@...il.com>)
• Re: Fwd: Month of Random Hashes (MoRH) ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• PHPIDS released (christ1an <ch0012@...glemail.com>)
• html tags (Dëêþàñ Çhäkrãvârthÿ <codeshepherd@...il.com>)
• List Charter (John Cartwright <johnc@...k.org.uk>)
• Snitches, FBI backdoors and Dishonour amongst Hackers (<honourable@....hush.com>)
• Source code of the belgian electoral voting system ("John Smith" <john859@...il.com>)
• 5 minute Clip - Demonstration of a web defacement using Remote Code Execution Exploit (rm@...ima.serapis.net)
• Re: Source code of the belgian electoral voting system (Thierry Zoller <Thierry@...ler.lu>)
• SECNICHE : Dwelling Security is On the Run (Aditya K Sood <zeroknock@...niche.org>)
• PHPMailer command execution (Thor Larholm <seclists@...holm.com>)
• [ GLSA 200706-04 ] MadWifi: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
• Month of Random Hashes: DAY TWO ("Month of Random Hashes" <morh@...h.ai>)
• Internet drug-dealer Pigslop (AKA Mr. Ketamine) actively seeking "bounty hunter hackers" (Jaime Demetur <sniffikins@...oo.com>)
• [USN-471-1] libexif vulnerability (Kees Cook <kees@...ntu.com>)
• [USN-439-2] file vulnerability (Kees Cook <kees@...ntu.com>)

• [USN-472-1] libpng vulnerability (Kees Cook <kees@...ntu.com>)
• [USN-473-1] libgd2 vulnerabilities (Kees Cook <kees@...ntu.com>)
• Re: Source code of the belgian electoral voting system ("William Robinet" <william.robinet@...il.com>)
• internet drug dealer Pigslop actively seeking "bounty hunter hackers" (Jaime Demetur <sniffikins@...oo.com>)
• Month of Random Hashes: DAY THREE ("Month of Random Hashes" <morh@...h.ai>)
• Safari for Windows, 0day URL protocol handler command injection (Thor Larholm <seclists@...holm.com>)
• Re: Safari for Windows, 0day URL protocol handler command injection ("Larry Seltzer" <Larry@...ryseltzer.com>)
• Re: SECNICHE : Dwelling Security is On the Run (dcdave@....net)
• Re: Safari for Windows, 0day URL protocol handler command injection ("Steven Adair" <steven@...urityzone.org>)
• using matasano's blackbag/deezee to find 0day and stuff ("Knud Erik Højgaard" <kokanin@...il.com>)
• Re: [WEB SECURITY] Re: SECNICHE : Dwelling Security is On the Run (Thierry Zoller <Thierry@...ler.lu>)
• [SECURITY] [DSA 1306-1] New xulrunner packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: [WEB SECURITY] Re: SECNICHE : Dwelling Security is On the Run (Aditya K Sood <zeroknock@...niche.org>)
• ZDI-07-036: Arris Cadant C3 CMTS Remote DoS Vulnerability (zdi-disclosures@...m.com)
• Re: Safari for Windows, 0day URL protocol handler command injection (Andrew Redman <aredman@...cation.ucsb.edu>)
• [SECURITY] [DSA 1307-1] New OpenOffice.org packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
• [ MDKSA-2007:119 ] - Updated Thunderbird packages fix multiple vulnerabilities (security@...driva.com)
• Re: Safari for Windows, (Jeff Kell <jeff-kell@....edu>)
• Re: Safari for Windows, 0day URL protocol handler command injection (dump <dump@...b.net>)
• n3td3v rumours Month of Safari Bugs (MoSB) ("HACK THE GOV" <hackthegov@...glemail.com>)
• [Off topic] Safari on Windows networked share question (James Lay <jlay@...l.slave-tothe-box.net>)
• Re: Safari for Windows, 0day URL protocol handler command injection ("Jay" <jay.tomas@...osecguru.com>)
• [ MDKSA-2007:120 ] - Updated Firefox packages fix multiple vulnerabilities (security@...driva.com)
• ZDI-07-037: Microsoft Internet Explorer Language Pack Installation Remote Code Execution Vulnerability (zdi-disclosures@...m.com)
• ZDI-07-038: Microsoft Internet Explorer Prototype Dereference Code Execution Vulnerability (zdi-disclosures@...m.com)
• iDefense Security Advisory 06.12.07: Microsoft License Manager and urlmon.dll COM Object Interaction Invalid Memory Acc… (iDefense Labs <labs-no-reply@...fense.c…)
• iDefense Security Advisory 06.12.07: YaBB Forum member.vars CRLF Injection Privilege Escalation Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Windows Oday release (Thomas Lim <thomas@...einc.com>)
• Re: Windows Oday release ("Johnson, Richard \(NY Int\)" <rjohnson@...financial.com>)
• Re: Windows Oday release (ge@...uxbox.org)
• [USN-474-1] xscreensaver vulnerability (Kees Cook <kees@...ntu.com>)

• Robert Lemos over Neal Krawetz forensic findings ("HACK THE GOV" <hackthegov@...glemail.com>)
• Apple Safari for Windows feed:// URL Denial of Service Vulnerability (Trancer <mtrancer@...il.com>)
• Re: Apple Safari for Windows feed:// URL Denial of Service Vulnerability (cardoso <cardosolistas@...traditorium.com>)
• Re: Apple Safari for Windows feed:// URL Denial of Service Vulnerability (Trancer <mtrancer@...il.com>)
• Re: Robert Lemos over Neal Krawetz forensic findings (Valdis.Kletnieks@...edu)
• [USN-474-1] xscreensaver vulnerability (Kees Cook <kees@...ntu.com>)
• Re: Robert Lemos over Neal Krawetz forensic fin dings (Valdis.Kletnieks@...edu)
• Apple Safari: cookie stealing (Robert Swiecki <jagger@...ecki.net>)
• Re: Windows Oday release ("Joey Mengele" <joey.mengele@...hmail.com>)
• Re: Apple Safari: cookie stealing ("Joey Mengele" <joey.mengele@...hmail.com>)
• Re: Apple Safari: cookie stealing (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Re: Windows Oday release ("crazy frog crazy frog" <i.m.crazy.frog@...il.com>)
• Re: Robert Lemos over Neal Krawetz forensic findings ("jt5944-27a" <jt5944@...hmail.com>)
• Re: Robert Lemos over Neal Krawetz forensic findings ("Dr. Neal Krawetz PhD" <neal@...wetz.org>)
• iDefense Security Advisory 06.13.07: Multiple Vendor libexif Integer Overflow Heap Corruption Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Re: Robert Lemos over Neal Krawetz forensic findings (solemn <sohlow@...il.com>)
• Re: Windows Oday release (Joanna Rutkowska <joanna@...isiblethings.org>)
• Re: Windows Oday release ("Peter Dawson" <slash.pd@...il.com>)
• Re: Windows Oday release (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• [SECURITY] [DSA 1305-1] New icedove packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: Windows Oday release (Jared DeMott <demottja@....edu>)
• FLEA-2007-0025-1: openoffice.org (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
• Subvert Underground Press connected to Pigslop who seeks "bounty hunter hackers" for malicious activities (Jaime Demetur <sniffikins@...oo.com>)

• [ MDKSA-2007:121 ] - Updated freetype2 packages fix integer overflow vulnerability (security@...driva.com)
• [ MDKSA-2007:122 ] - Updated gd packages fix vulnerability (security@...driva.com)
• [ MDKSA-2007:123 ] - Updated libwmf packages fix vulnerability (security@...driva.com)
• [ MDKSA-2007:124 ] - Updated tetex packages fix vulnerability (security@...driva.com)
• Tcpdfilter (scott <redhowlingwolves@...lsouth.net>)
• Re: Month of Random Hashes: DAY THREE (Dëêþàñ Çhäkrãvârthÿ <codeshepherd@...il.com>)
• Re: Month of Random Hashes: DAY THREE (Brian Dessent <brian@...sent.net>)
• Month of Random Hashes: DAY FOUR ("Month of Random Hashes" <morh@...h.ai>)
• Month of Random Hashes: DAY FIVE ("Month of Random Hashes" <morh@...h.ai>)
• Re: Month of Random Hashes: DAY THREE ("Guasconi Vincent" <tyoptyop@...il.com>)
• Re: Tcpdfilter ("Michel Arboi" <michel.arboi@...il.com>)
• rPSA-2007-0119-1 spamassassin (rPath Update Announcements <announce-noreply@...th.com>)
• [CVE-2007-2449] Apache Tomcat XSS vulnerabilities in the JSP examples (Mark Thomas <markt@...che.org>)
• [CVE-2007-2450]: Apache Tomcat XSS vulnerability in Manager (Mark Thomas <markt@...che.org>)
• Todays Lesson - XSS (Concerned CISSP <certifiedcissp@...mail.com>)
• Paper: Secure file upload in PHP web applications (Alla Bezroutchko <alla@...nit.be>)
• Re: Tcpdfilter ("Jay" <jay.tomas@...osecguru.com>)
• [SECURITY] [DSA 1308-1] New iceweasel packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• iDefense Security Advisory 06.14.07: Apache MyFaces Tomahawk JSF Framework Cross-Site Scripting (XSS) Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Letterman subscriber module XSS vulnerability (<edi.strosar@...nostne-novice.com>)
• Elxis CMS <= 2006.4 - banner module - sql injection (Nico Leidecker <nicoLeidecker@....de>)
• [ MDKSA-2007:125 ] - Updated spamassassin packages fix possible DoS condition (security@...driva.com)
• Re: Apple Safari: urlbar/window title spoofing (Robert Swiecki <jagger@...ecki.net>)

• Re: Paper: Secure file upload in PHP web applications (Nikolay Kichukov <hijacker@...um.net>)
• Re: Month of Random Hashes: DAY FOUR (Sebastian Krahmer <krahmer@...e.de>)
• Fwd: Month of Random Hashes: DAY THREE (rashid mohammed <haneen_alshoq1@...oo.com>)
• stop emails (rashid mohammed <haneen_alshoq1@...oo.com>)
• rPSA-2007-0122-1 evolution-data-server (rPath Update Announcements <announce-noreply@...th.com>)
• rPSA-2007-0123-1 squirrelmail (rPath Update Announcements <announce-noreply@...th.com>)
• rPSA-2007-0124-1 kernel xen (rPath Update Announcements <announce-noreply@...th.com>)
• Kaspersky Multiple insufficient argument validation of hooked SSDT function Vulnerability (Matousec - Transparent security Research <research@...ousec.com>)
• [Tool] sqlmap: a blind SQL injection tool (release 0.4) ("Bernardo Damele" <bernardo.damele@...il.com>)
• Re: Month of Random Hashes: DAY THREE (Tõnu Samuel <tonu@....ee>)
• Month of Random Hashes: DAY SIX ("Month of Random Hashes" <morh@...h.ai>)
• Re: Month of Random Hashes: DAY FOUR ("Month of Random Hashes" <morh@...h.ai>)
• Re: stop emails ("Month of Random Hashes" <morh@...h.ai>)
• Re: Fwd: Month of Random Hashes: DAY THREE ("Month of Random Hashes" <morh@...h.ai>)
• Re: Month of Random Hashes: DAY THREE ("Month of Random Hashes" <morh@...h.ai>)
• Re: Random Hashes ("Month of Random Hashes" <morh@...h.ai>)
• List Charter ("Month of Random Hashes" <morh@...h.ai>)
• Re: Apple Safari: urlbar/window title spoofing ("Mark Senior" <senatorfrog@...il.com>)
• Breakpoint Security Conference - Monterrey, N.L. Mexico ("Erika Mendoza" <erikam@...il.com>)
• [ GLSA 200706-05 ] ClamAV: Multiple Denials of Service (Raphael Marichez <falco@...too.org>)
• State of Ohio looses 64k employee records (Michael Holstein <michael.holstein@...ohio.edu>)
• rPSA-2007-0126-1 util-linux (rPath Update Announcements <announce-noreply@...th.com>)
• Re: SECNICHE : Dwelling Security is On the Run (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Re: Month of Random Hashes: DAY THREE ("Month of Random Hashes" <morh@...h.ai>)
• Re: Month of Random Hashes: DAY THREE (M.B.Jr. <marcio.barbado@...il.com>)
• Re: Month of Random Hashes: DAY THREE (Brian Dessent <brian@...sent.net>)
• PhpListPro Persistent XSS Vulnerability (<corrado.liotta@...ce.it>)
• Re: Month of Random Hashes: DAY THREE (Valdis.Kletnieks@...edu)
• Re: Month of Random Hashes: DAY THREE ("Jason Miller" <jammer128@...il.com>)
• [ MDKSA-2007:126 ] - Updated Firefox packages fix multiple vulnerabilities (security@...driva.com)

• Re: Month of Random Hashes: DAY THREE ("Month of Random Hashes" <morh@...h.ai>)
• Re: Month of Random Hashes: DAY THREE (M.B.Jr. <marcio.barbado@...il.com>)
• Re: SECNICHE : Dwelling Security is On the Run (Aditya K Sood <zeroknock@...niche.org>)
• Re: Month of Random Hashes: DAY THREE ("William Lefkovics" <william@...kovics.net>)
• Re: SECNICHE : Dwelling Security is On the Run (Pranay Kanwar <warl0ck@...aeye.org>)
• Re: SECNICHE : Dwelling Security is On the Run (Aditya K Sood <zeroknock@...niche.org>)
• Re: SECNICHE : Dwelling Security is On the Run (Pranay Kanwar <warl0ck@...aeye.org>)
• Re: SECNICHE : Dwelling Security is On the Run (Aditya K Sood <zeroknock@...niche.org>)
• Re: Month of Random Hashes: DAY THREE (M.B.Jr. <marcio.barbado@...il.com>)
• n3td3v says second internet exists ("HACK THE GOV" <hackthegov@...glemail.com>)
• Re: SECNICHE : Dwelling Security is On the Run ("Month of Random Hashes" <morh@...h.ai>)
• [SECURITY] [DSA 1304-1] New Linux kernel 2.6.8 packages fix several vulnerabilities (dann frazier <dannf@...ian.org>)
• Papoo CMS - Multiple Cross Site Scripting (Nico Leidecker <nicoLeidecker@....de>)
• Re: [WEB SECURITY] Re: SECNICHE : Dwelling Security is On the Run ("James Landis" <jcl24@...nell.edu>)
• [SECURITY] [DSA 1309-1] New PostgreSQL 8.1 packages fix privilege escalation (Moritz Muehlenhoff <jmm@...ian.org>)
• Month of Random Hashes: DAY SEVEN ("Month of Random Hashes" <morh@...h.ai>)
• [ MDKSA-2007:126-1 ] - Updated Firefox packages fix multiple vulnerabilities (security@...driva.com)
• [SECURITY] [DSA 1309-1] New libexif packages fix integer overflow (Steve Kemp <skx@...ian.org>)
• [SECURITY] [DSA 1310-1] New libexif packages fix integer overflow (Steve Kemp <skx@...ian.org>)

• Re: Month of Random Hashes: DAY THREE (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
• Re: n3td3v says second internet exists ("Throwaway1@...umbus.rr.com" <Throwaway1@...umbus.rr.com>)
• Re: n3td3v says second internet exists (Martin Zimmermann <mdz@...hest.com>)
• Re: n3td3v says second internet exists (Kradorex Xeron <admin@...ibase.ca>)
• H4CREW-000005 EasyNews Pro 4.0 XSS & CSRF (tHe cReW n0 c0ntend3rs <h4xorcr3w@...mail.com>)
• Month Of Hackerrats Bugs (snitches <snitches@...tard.com>)
• TIBS Infrastructure Dissection... ("Botnet Hunter" <botnet.hunter@...il.com>)
• WSPortal version 1.0 Path Disclosure Vulnerability ("SecurityResearch" <securityresearch@...vigilance.com>)
• WSPortal version 1.0 SQL Injection Vulnerability ("SecurityResearch" <securityresearch@...vigilance.com>)
• Utopia News Pro version 1.4.0 XSS Attack Vulnerability ("SecurityResearch" <securityresearch@...vigilance.com>)
• [LJVN-0001] Livejournal.ru non-persistent XSS (<ljuser@...hmail.com>)
• [SECURITY] [DSA 1311-1] New PostgreSQL 7.4 packages fix privilege escalation (Moritz Muehlenhoff <jmm@...ian.org>)
• [SECURITY] [DSA 1312-1] New libapache-mod-jk packages fix information disclosure (Moritz Muehlenhoff <jmm@...ian.org>)

• Re: Month Of Hackerrats Bugs (<johnny.mcdanger@...h.com>)
• Re: Month Of Hackerrats Bugs ("J. M. Seitz" <jms@...hunter.ca>)
• ShAnKaR: Simle machines forum CAPTCHA bypass and PHP injection (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: Month Of Hackerrats Bugs ("M. Shirk" <shirkdog_list@...mail.com>)
• Re: n3td3v says second internet exists (Valdis.Kletnieks@...edu)
• CISSP ("Bozo Bad" <bozobad@...il.com>)
• Re: Month Of Hackerrats Bugs ("Dr. Neal Krawetz PhD" <neal@...wetz.org>)
• iDefense Security Advisory 06.18.07: Cerulean Studios Trillian UTF-8 Word Wrap Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
• Harry Potter 0day ("go harry" <goharrygo@...uxmail.org>)
• Re: Harry Potter 0day (scott <redhowlingwolves@...lsouth.net>)
• Re: CISSP ("Daniel Marsh" <jahilliya@...il.com>)
• Dear Neal Krawetz ("HACK THE GOV" <hackthegov@...glemail.com>)

• Re: CISSP (Florian Stinglmayr <fstinglmayr@...il.com>)
• Re: Dear Neal Krawetz, will the real n3td3v please stand up? (coderman <coderman@...il.com>)
• [CVE-2007-1358] Apache Tomcat XSS vulnerability in Accept-Language header processing (Mark Thomas <markt@...che.org>)
• Re: Dear Neal Krawetz, will the real n3td3v please stand up? ("Dr. Neal Krawetz PhD" <neal@...wetz.org>)
• Re: Dear Neal Krawetz, will the real n3td3v please stand up? ("Michael Silk" <michaelslists@...il.com>)
• Re: Dear Neal Krawetz, will the real n3td3v please stand up? (StaticRez <staticrez@...il.com>)
• Re: Dear Neal Krawetz, will the real n3td3v please stand up? (Sam <cli.net.nz@...il.com>)
• FLEA-2007-0026-1: evolution-data-server (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
• Re: [CVE-2007-1358] Apache Tomcat XSS vulnerability in Accept-Language header processing ("Debasis Mohanty" <debasis.mohanty.listmails@...il.com>)
• Re: Harry Potter 0day (scott <redhowlingwolves@...lsouth.net>)
• Re: Dear Neal Krawetz, will the real n3td3v please stand up? (scott <redhowlingwolves@...lsouth.net>)
• Re: Harry Potter 0day (scott <redhowlingwolves@...lsouth.net>)
• Re: Dear Neal Krawetz, will the real n3td3v please stand up? ("J. Oquendo" <sil@...iltrated.net>)
• Local File Include Vulnerabilities in YaBB <= 2.1(all version) (krasza <krasza@...il.com>)
• Squashing supposed hacker profiling ("J. Oquendo" <sil@...iltrated.net>)
• Re: Squashing supposed hacker profiling ("Steven Adair" <steven@...urityzone.org>)
• Re: Squashing supposed hacker profiling ("J. Oquendo" <sil@...iltrated.net>)
• Re: Dear Neal Krawetz, will the real n3td3v please stand up? ("jt5944-27a" <jt5944@...hmail.com>)
• Re: Dear Neal Krawetz, will the real n3td3v please stand up? ("jt5944-27a" <jt5944@...hmail.com>)
• Re: Month Of Hackerrats Bugs (evilrabbi <evilrabbi@...il.com>)
• rPSA-2007-0127-1 fetchmail (rPath Update Announcements <announce-noreply@...th.com>)
• [SECURITY] [DSA 1313-1] New MPlayer packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: Squashing supposed hacker profiling (Valdis.Kletnieks@...edu)
• IPS Evasion with the Apache HTTP Server (H D Moore <fdlist@...italoffense.net>)
• Re: IPS Evasion with the Apache HTTP Server (coderman <coderman@...il.com>)
• [SECURITY] [DSA 1314-1] New open-iscsi packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• [SECURITY] [DSA 1315-1] New libphp-phpmailer packages fix arbitrary shell command execution (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: IPS Evasion with the Apache HTTP Server (Valdis.Kletnieks@...edu)
• [ GLSA 200706-06 ] Mozilla products: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
• Re: IPS Evasion with the Apache HTTP Server (coderman <coderman@...il.com>)
• [ GLSA 200706-07 ] PHProjekt: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
• [ MDKSA-2007:127 ] - Updated apache packages fix mod_mem_cache issue (security@...driva.com)

• [ MDKSA-2007:128 ] - Updated libexif packages fix integer overflow flaw (security@...driva.com)
• [ MDKSA-2007:129 ] - Updated jasper packages fix vulnerability (security@...driva.com)
• Month of Random Hashes: DAY NINE ("Month of Random Hashes" <morh@...h.ai>)
• Month of Random Hashes: DAY TEN ("Month of Random Hashes" <morh@...h.ai>)
• The Battle ("hockey june" <hokeyinjune@...il.com>)
• DB Assessment tool ("Amichai Shulman" <shulman@...erva.com>)
• Apache Prefork MPM vulnerabilities - Report (Blazej Miga <bla@....poznan.pl>)
• Re: IPS Evasion with the Apache HTTP Server (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: IPS Evasion with the Apache HTTP Server ("Jamie Riden" <jamie.riden@...il.com>)
• Re: IPS Evasion with the Apache HTTP Server (3APA3A <3APA3A@...URITY.NNOV.RU>)
• Re: IPS Evasion with the Apache HTTP Server (H D Moore <fdlist@...italoffense.net>)
• HackersFirst (HockeyInJune <hockeyinjune@...il.com>)
• CISSP class #2: SQL injection ("Bozo Bad" <bozobad@...il.com>)
• Re: IPS Evasion with the Apache HTTP Server (H D Moore <fdlist@...italoffense.net>)
• FLEA-2007-0027-1: thunderbird (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
• sqlninja 0.1.2 released ("A. R." <r00t@...thernfortress.net>)

• [ MDKSA-2007:130 ] - Updated proftpd packages fix authentication bypass vulnerability (security@...driva.com)
• [ MDKSA-2007:131 ] - Updated Thunderbird packages fix multiple vulnerabilities (security@...driva.com)
• Month of Random Hashes: DAY ELEVEN ("Month of Random Hashes" <morh@...h.ai>)
• Month of Random Hashes: DAY TWELVE ("HACK THE GOV" <hackthegov@...glemail.com>)
• [Advisory] Phishing Vulnerability in Yahoo Search Engine and Yahoo Network. [Multiple] (Aditya K Sood <zeroknock@...niche.org>)
• [SECURITY] [DSA 1316-1] New emacs21 packages fix denial of service (Steve Kemp <skx@...ian.org>)
• [ MDKSA-2007:132 ] - Updated madwifi-source, wpa_supplicant packages fix vulnerabilities (security@...driva.com)
• iDefense Security Advisory 06.21.07: Ingres Database Multiple Heap Corruption Vulnerabilities (iDefense Labs <labs-no-reply@...fense.com>)
• [ MDKSA-2007:133 ] - Updated emacs packages fix DoS vulnerability (security@...driva.com)
• [ MDKSA-2007:134 ] - Updated xfsdump packages fix unsafe temporary directory creation issue (security@...driva.com)

• [USN-475-1] evolution-data-server vulnerability (Kees Cook <kees@...ntu.com>)
• MS07-034: Executing arbitrary script with mhtml: protocol handler ("HASEGAWA Yosuke " <yosuke.hasegawa@...il.com>)
• Month of Random Hashes: DAY TWELVE ("Month of Random Hashes" <morh@...h.ai>)
• Month of Random Hashes: IMPORTANT ANNOUNCEMENT ("Month of Random Hashes" <morh@...h.ai>)
• [CAID 35450, 35451, 35452, 35453]: CA Products That Embed Ingres Multiple Vulnerabilities ("Williams, James K" <James.Williams@...com>)
• Re: Month of Random Hashes: DAY TWELVE (<Glenn.Everhart@...se.com>)
• Re: Month of Random Hashes: DAY TWELVE (Valdis.Kletnieks@...edu)
• Static Code Analysis - Nuts and Bolts (Paul Sebastian Ziegler <psz@...erved.de>)
• XSS hvv.de (DaWickedest <blood.on.my.pen@...glemail.com>)
• Does what happens in the Facebook stay in the Facebook? ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• Re: The Battle (bambam <bambam.quiescence@...glemail.com>)
• Re: Month of Random Hashes: DAY TWELVE (<Glenn.Everhart@...se.com>)
• [USN-476-1] redhat-cluster-suite vulnerability (Kees Cook <kees@...ntu.com>)
• Orkut Server Side Session Management Error ("Susam Pal" <susam@...am.in>)
• Re: Month of Random Hashes: IMPORTANT ANNOUNCEMENT ("HACK THE GOV" <hackthegov@...glemail.com>)
• FLEA-2007-0028-1: libexif (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
• Re: [ MDKSA-2007:129 ] - Updated jasper packages fix vulnerability ("Debasis Mohanty" <debasis.mohanty.listmails@...il.com>)
• The Battle ("hockey june" <hokeyinjune@...il.com>)
• [GOODFELLAS - VULN] BarCodeAx.dll v. 4.9 ActiveX Control Remote Stack Buffer Overflow (GOODFELLAS SRT <goodfellas@...llcode.com.ar>)
• Re: [ MDKSA-2007:129 ] - Updated jasper packages fix vulnerability (Ismail Dönmez <ismail@...dus.org.tr>)
• [SECURITY] [DSA 1318-1] New ekg packages fix denial of service (Moritz Muehlenhoff <jmm@...ian.org>)
• [ MDKSA-2007:135 ] - Updated webmin packages fix XSS vulnerability (security@...driva.com)

• HackersFirst (HockeyInJune <hockeyinjune@...il.com>)
• Month of Hashes of Random Hashes: Day 12 (MOHORH <mohorh@...etthis.com>)
• [SECURITY] [DSA 1317-1] New tinymux packages fix buffer overflow (Steve Kemp <skx@...ian.org>)
• FLEA-2007-0028-1: libexif (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
• FLEA-2007-0028-1: libexif (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
• [SECURITY] [DSA 1319-1] New maradns packages fix denial of service (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: Month of Hashes of Random Hashes: Day 12 ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• [SECURITY] [DSA 1320-1] New clamav packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• [SECURITY] [DSA 1321-1] New evolution-data-server packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
• A Brief History of MySpace ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• About the power of Google ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• The Harry Potter hoax, or manipulating the mass media for fun and for profit. ("PSYOP HARRY POTTER" <psyop.harry.potter@...e-mail.net>)
• "run as" local denial-of-service enables administrative account processes to be killed (Eitan Caspi <eitancaspi@...oo.com>)
• Re: "run as" local denial-of-service enables administrative account processes to be killed ("KJK::Hyperion" <hackbunny@...tpj.org>)

• Month of Random Hashes: DAY THIRTEEN ("Month of Random Hashes" <morh@...h.ai>)

• phpBB3 RC2 ("ad@...poverflow.com" <ad@...poverflow.com>)
• Invitation to connect on LinkedIn (Mulyana Saputra <mulyana_g_saputra@...komsel.co.id>)
• Re: Month of Random Hashes: DAY THIRTEEN ("Ronald MacDonald" <ronald@...cd.com>)
• Papoo CMS 3.6 - SQL Injection (Nico Leidecker <nico@...decker.info>)
• Papoo CMS 3.6 - Access Restriction Bypass (Nico Leidecker <nico@...decker.info>)
• Office 0day (toto.toto@...mail.co.za)
• Office (toto.toto@...mail.co.za)
• Re: Month of Random Hashes: DAY THIRTEEN (Peter van den Heuvel <peter@...t.net>)
• Safari XMLHttpRequest HTTP header injection (Richard Moore <rich@...tpoint.ltd.uk>)
• Re: Month of Random Hashes: IMPORTANT ANNOUNCEMENT ("Dr. Neal Krawetz PhD" <neal@...wetz.org>)
• Re: n3td3v says second internet exists ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Safari Bookmarks Buffer Overflow Vulnerability ("А.А.Комаров" <komarov@...efence.ru>)
• One Drop on A Spider Web ("pdp (architect)" <pdp.gnucitizen@...glemail.com>)
• rPSA-2007-0131-1 libexif (rPath Update Announcements <announce-noreply@...th.com>)
• MyNews version 0.10 SQL Injection Vulnerability ("SecurityResearch" <securityresearch@...vigilance.com>)
• Calendarix version 0.7. 20070307 Multiple Path Disclosure Vulnerabilities ("SecurityResearch" <securityresearch@...vigilance.com>)
• Calendarix version 0.7. 20070307 Multiple SQL Injection Vulnerabilities ("SecurityResearch" <securityresearch@...vigilance.com>)
• Calendarix version 0.7. 20070307 Multiple XSS Attacks ("SecurityResearch" <securityresearch@...vigilance.com>)
• Calendarix version 0.7. 20070307 Multiple Path Disclosure Vulnerabilities ("SecurityResearch" <securityresearch@...vigilance.com>)
• Re: Office 0day (Valdis.Kletnieks@...edu)
• Re: Invitation to connect on LinkedIn (Valdis.Kletnieks@...edu)
• Re: Ingres verifydb local stack overflow (<comradesnarky@...hmail.com>)
• Re: Office 0day (Kradorex Xeron <admin@...ibase.ca>)
• Re: Ingres verifydb local stack overflow (Chris Anley <chris@...software.com>)
• Re: Office 0day ("secure poon" <suckure@...il.com>)
• Re: Office 0day (Jared DeMott <demottja@....edu>)
• Re: Office 0day (Jared DeMott <demottja@....edu>)
• Re: Apple Safari: idn urlbar spoofing (Robert Swiecki <jagger@...ecki.net>)
• [ISR] :: Infobyte Security Research :: release (ISR-sqlmap.pl) v1.0.0 ("Francisco Amato" <famato@...obyte.com.ar>)
• [ERRATA] :: [ISR] :: Infobyte Security Research :: release (ISR-sqlget.pl) v1.0.0 ("Francisco Amato" <famato@...obyte.com.ar>)
• Re: Apple Safari: idn urlbar spoofing ("Larry Seltzer" <Larry@...ryseltzer.com>)
• Re: Apple Safari: idn urlbar spoofing (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Re: Invitation to connect on LinkedIn ("Peter Dawson" <slash.pd@...il.com>)
• Re: Office 0day (Valdis.Kletnieks@...edu)
• Re: Office 0day (phpninja <phpninja@...il.com>)
• Re: Office 0day (Troy <gimmespam@...il.com>)

• Re: Office 0day (phpninja <phpninja@...il.com>)
• Acunetix WVS 5 improper file path handling (EoP) (<edi.strosar@...nostne-novice.com>)
• Overwrite variables eqDKP 1.3.2d and prior (login.php) (kefka <kefka@...inbeardsucks.com>)
• Re: Office 0day (kefka <kefka@...inbeardsucks.com>)
• Re: Office 0day (Valdis.Kletnieks@...edu)
• People don't report rogue employees because of job insecurity ("HACK THE GOV" <hackthegov@...glemail.com>)
• PATCH: Anonymous Spoofing via Multicast ARP (dsniff / arpspoof) ("Kristian Hermansen" <kristian.hermansen@...il.com>)
• Re: Invitation to connect on LinkedIn ("James Matthews" <nytrokiss@...il.com>)
• Re: People don't report rogue employees because of job insecurity ("James Matthews" <nytrokiss@...il.com>)
• Month of Random Hashes: DAY FOURTEEN ("Month of Random Hashes" <morh@...h.ai>)
• rPSA-2007-0133-1 emacs emacs-leim (rPath Update Announcements <announce-noreply@...th.com>)
• CFP: ISOI III (a DA workshop) (Gadi Evron <ge@...uxbox.org>)
• Re: Returned post for bugtraq@...urityfocus.com ("PSYOP HARRY POTTER" <psyop.harry.potter@...e-mail.net>)
• Re: Returned post for bugtraq@...urityfocus.com (coderman <coderman@...il.com>)
• Re: Returned post for bugtraq@...urityfocus.com ("PSYOP HARRY POTTER" <psyop.harry.potter@...e-mail.net>)
• June meeting - London DEFCON DC4420 - Wednesday 27th (Adam Laurie <adam.laurie@...bunker.net>)
• 6 Month Vista Vuln Report, Debunked ("Kristian Hermansen" <kristian.hermansen@...il.com>)
• Re: 6 Month Vista Vuln Report, Debunked ("Security Admin (NetSec)" <secadmin@...secdesign.com>)
• unforwardable phising email (KT <listclient@...il.com>)
• Polycom hacking (Paul Schmehl <pauls@...allas.edu>)
• Re: Polycom hacking (StaticRez <staticrez@...il.com>)
• Re: Polycom hacking (b.hines@...cast.net)
• Re: Polycom hacking (Paul Schmehl <pauls@...allas.edu>)
• Re: Polycom hacking ("J. Oquendo" <sil@...iltrated.net>)
• Re: Polycom hacking (Paul Schmehl <pauls@...allas.edu>)
• iDefense Security Advisory 06.26.07: Multiple Vendor Kerberos kadmind Rename Principal Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com…)
• Re: Polycom hacking ("J. Oquendo" <sil@...iltrated.net>)
• Re: "run as" local denial-of-service enables administrative account processes to be killed ("James C. Slora Jr." <james.slora@...a.com>)
• Calyptix Security Advisory CX-2007-04 - Cross-Site Request Forgery Attack Against Check Point Safe@...ice Device (Calyptix Security <advisories2007@...yptix.co…)
• iDefense Security Advisory 06.26.07: RealNetworks RealPlayer/HelixPlayer SMIL wallclock Stack Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com…)
• [GOODFELLAS - VULN ] Avaxswf.dll v.1.0.0.1 from Avax Vector software ActiveX Arbitrary Data Write (GOODFELLAS SRT <goodfellas@...llcode.com.ar>)
• [ GLSA 200706-08 ] emul-linux-x86-java: Multiple vulnerabilities (Raphael Marichez <falco@...too.org>)
• [ GLSA 200706-09 ] libexif: Buffer overflow (Raphael Marichez <falco@...too.org>)
• [ MDKSA-2007:136 ] - Updated evolution packages fix vulnerability (security@...driva.com)
• Re: Returned post for bugtraq@...urityfocus.com ("KJK::Hyperion" <hackbunny@...tpj.org>)
• unofficial yahoo paranoids ("HACK THE GOV" <hackthegov@...glemail.com>)

• [USN-478-1] libexif vulnerability (Kees Cook <kees@...ntu.com>)
• [USN-477-1] krb5 vulnerabilities (Kees Cook <kees@...ntu.com>)
• [ MDKSA-2007:137 ] - Updated krb5 packages fix vulnerabilities (security@...driva.com)
• Re: Apple Safari: idn urlbar spoofing (Robert Swiecki <jagger@...ecki.net>)
• PHP 5.2.3 PHP 4.4.7, htaccess safemode and open_basedir Bypass Vulnerability (Maksymilian Arciemowicz <max@...tsuper.pl>)
• IOS Exploitation Techniques Paper ("Andy Davis" <andy.davis@...plc.com>)
• deviantArt does not check authorization for image download (Timothy Redaelli <tredaelli@...entati.org>)
• PHP 5.2.3 PHP 4.4.7, htaccess safemode and open_basedir Bypass Vulnerability (Maksymilian Arciemowicz <max@...tsuper.pl>)
• CheckPoint VPN-1 UTM Edge Cross Site Request Forgery vulnerability (Henri Lindberg - Louhi Networks Oy <henri.lindberg@...hi.fi>)
• Using Ajax for better and more convincing scams (Ajay Pal Singh Atwal <ajaypal@...bec.org>)
• Planet Websecurity launched (christ1an <ch0012@...glemail.com>)
• Re: Static Code Analysis - Nuts and Bolts ("Debasis Mohanty" <debasis.mohanty.listmails@...il.com>)
• Re: Month of Random Hashes: DAY FOURTEEN (Jared DeMott <demottja@....edu>)
• Re: Month of Random Hashes: DAY FOURTEEN ("Joey Mengele" <joey.mengele@...hmail.com>)
• Re: IOS Exploitation Techniques Paper (Mike Caudill <mcaudill@...co.com>)
• Re: Month of Random Hashes: DAY FOURTEEN ("Joey Mengele" <joey.mengele@...hmail.com>)
• Re: Static Code Analysis - Nuts and Bolts ("Dave Hull" <ireadit@...il.com>)
• [GOODFELLAS - VULN] hpqxml.dll 2.0.0.133 from HP Digital Imaging Arbitary Data Write. ("Goodfellas SRT" <goodfellas@...llcode.com.ar>)
• Re: Month of Random Hashes: DAY FOURTEEN ("Dr. Neal Krawetz PhD" <neal@...wetz.org>)
• Persistent XSS and CSRF and on network appliance (pagvac <unknown.pentester@...il.com>)
• Persistent XSS and CSRF on network appliance [subject corrected :) ] (pagvac <unknown.pentester@...il.com>)
• Re: Month of Random Hashes: DAY FOURTEEN (Jared DeMott <demottja@....edu>)
• Re: Persistent XSS and CSRF on network appliance [subject corrected :) ] ("Joey Mengele" <joey.mengele@...hmail.com>)
• Re: Persistent XSS and CSRF on network appliance [subject corrected :) ] ("Joey Mengele" <joey.mengele@...hmail.com>)
• [SECURITY] [DSA 1322-1] New wireshark packages fix denial of service (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: Persistent XSS and CSRF on network appliance [subject corrected :) ] ("Joey Mengele" <joey.mengele@...hmail.com>)
• eTicket version 1.5.5 Path Disclosure Vulnerability ("SecurityResearch" <securityresearch@...vigilance.com>)
• eTicket version 1.5.5 XSS Attack Vulnerability ("SecurityResearch" <securityresearch@...vigilance.com>)
• Re: Month of Random Hashes: DAY FOURTEEN ("James Matthews" <nytrokiss@...il.com>)
• Re: Persistent XSS and CSRF on network appliance [subject corrected :) ] (pagvac <unknown.pentester@...il.com>)
• Re: Persistent XSS and CSRF on network appliance [subject corrected :) ] (pagvac <unknown.pentester@...il.com>)
• Re: Persistent XSS and CSRF on network appliance [subject corrected :) ] ("Dr. Neal Krawetz PhD" <neal@...wetz.org>)
• Re: Persistent XSS and CSRF on network appliance [subject corrected :) ] ("Dr. Neal Krawetz PhD" <neal@...wetz.org>)
• Re: Persistent XSS and CSRF on network appliance[subject corrected :) ] ("Pete Simpson" <Pete.Simpson@...arswift.com>)
• Re: Persistent XSS and CSRF on network appliance [subject corrected :) ] (coderman <coderman@...il.com>)
• Re: Persistent XSS and CSRF on network appliance[subject corrected :) ] (coderman <coderman@...il.com>)

• rPSA-2007-0135-1 krb5 krb5-server krb5-services krb5-test krb5-workstation (rPath Update Announcements <announce-noreply@...th.com>)
• rPSA-2007-0136-1 httpd mod_ssl (rPath Update Announcements <announce-noreply@...th.com>)
• Re: Persistent XSS and CSRF and on network appliance (bugtraq@...security.net)
• FLEA-2007-0029-1: krb5 krb5-workstation (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
• Re: Polycom hacking (Paul Schmehl <pauls@...allas.edu>)
• Re: Persistent XSS and CSRF and on networkappliance ("Morning Wood" <se_cur_ity@...mail.com>)
• Month of Random Hashes: DAY FIFTEEN ("Month of Random Hashes" <morh@...h.ai>)
• Re: Persistent XSS and CSRF and on network appliance ("Brian Eaton" <eaton.lists@...il.com>)
• Re: Persistent XSS and CSRF and on network appliance (scott <redhowlingwolves@...lsouth.net>)
• Secunia Research: Symantec Mail Security for SMTP Boundary Errors (Secunia Research <remove-vuln@...unia.com>)
• Secunia Research: KVIrc irc:// URI Handler Command Execution Vulnerability (Secunia Research <remove-vuln@...unia.com>)
• FLEA-2007-0030-1: avahi avahi-glib avahi-sharp (Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>)
• Hacking into a Windows CE PDA? (rx8volution <rx8volution@...ackingyou.com>)
• Re: Hacking into a Windows CE PDA? ("Joey Mengele" <joey.mengele@...hmail.com>)
• Re: Hacking into a Windows CE PDA? ("matthew wollenweber" <mwollenweber@...il.com>)
• Re: Persistent XSS and CSRF on networkappliance[subject corrected :) ] (<Glenn.Everhart@...se.com>)
• Re: Persistent XSS and CSRF on network appliance [subject corrected :) ] ("jt5944-27a" <jt5944@...hmail.com>)
• Re: Hacking into a Windows CE PDA? ("James Matthews" <nytrokiss@...il.com>)
• Intel Core 2 CPUs are buggy. Patch your cpus :D (Tõnu Samuel <tonu@....ee>)
• Yahoo security boss calls on better intelligence sharing in industry ("HACK THE GOV" <hackthegov@...glemail.com>)
• Re: Month of Random Hashes: DAY FIFTEEN ("Mike Owen" <kyphros@...il.com>)
• Re: Intel Core 2 CPUs are buggy. Patch your cpus :D ("Peter Ferrie" <pferrie@...antec.com>)
• Re: Intel Core 2 CPUs are buggy. Patch your cpus :D ("James Matthews" <nytrokiss@...il.com>)
• [SECURITY] [DSA 1323-1] New krb5 packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
• [SECURITY] [DSA 1324-1] New hiki packages fix missing input sanitising (Steve Kemp <skx@...ian.org>)

• Google Re-authentication Bypass with SID and LSID cookies (Susam Pal <susam@...am.in>)
• Re: Polycom hacking ("Peter Dawson" <slash.pd@...il.com>)
• Re: Google Re-authentication Bypass with SID and LSID cookies (Susam Pal <susam@...am.in>)
• Month of Random Hashes: DAY SIXTEEN ("Month of Random Hashes" <morh@...h.ai>)
• Re: Month of Random Hashes: DAY SIXTEEN (Jared DeMott <demottja@....edu>)
• Re: Month of Random Hashes: DAY SIXTEEN ("Month of Random Hashes" <morh@...h.ai>)
• Re: Google Re-authentication Bypass with SID and LSID cookies ("Debasis Mohanty" <debasis.mohanty.listmails@...il.com>)
• Re: Month of Random Hashes: DAY SIXTEEN (Jared DeMott <demottja@....edu>)
• Re: Month of Random Hashes: DAY SIXTEEN ("Month of Random Hashes" <morh@...h.ai>)
• Re: Google Re-authentication Bypass with SID and LSID cookies ("Susam Pal" <susam@...am.in>)
• [USN-479-1] MadWifi vulnerabilities (Kees Cook <kees@...ntu.com>)
• youtube flagged content age verification bypass (<auto111760@...hmail.com>)
• XSS in CIA (Tonu Samuel <tonu@....ee>)
• Re: Polycom hacking (Paul Schmehl <pauls@...allas.edu>)
• [SECURITY] [DSA 1325-1] New evolution packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: XSS in CIA ("Slythers Bro" <slythers@...il.com>)
• blackhat talk pulled inexplicably (at the risk of violating MONBACOPL) (bambam <bambam.quiescence@...glemail.com>)
• 6 Month Vista Vuln Report, Debunked ("carl hardwick" <hardwick.carl@...il.com>)
• Re: XSS in CIA ("secure poon" <suckure@...il.com>)
• Airscanner Advisory #07062901: FlexiSPY Victim/User Database Exposure (Full world readable access to ALL SMS/Emails/Vo… (Airscanner Security Notice <contact@air…)
• Re: blackhat talk pulled inexplicably (at the risk of violating MONBACOPL) (Valdis.Kletnieks@...edu)
• Re: XSS in CIA ("Steven Adair" <steven@...urityzone.org>)
• Re: XSS in CIA (Tremaine Lea <tremaine@...il.com>)
• Re: XSS in CIA ("secure poon" <suckure@...il.com>)
• Some of you may enjoy this... (iPhone disassembly) ("Kevin Finisterre (lists)" <kf_lists@...italmunition.com>)

• Re: Some of you may enjoy this... (iPhone disassembly) ("Dude VanWinkle" <dudevanwinkle@...il.com>)
• Advisory : Internet Explorer Zone Domain Specification Dos and Page suppressing. (Aditya K Sood <zeroknock@...niche.org>)
• DOS on phrack? (scott <redhowlingwolves@...lsouth.net>)
• Re: DOS on phrack? (Aditya K Sood <zeroknock@...niche.org>)
• Month of Random Hashes: DAY SEVENTEEN ("Month of Random Hashes" <morh@...h.ai>)
• Re: Month of Random Hashes: DAY SEVENTEEN (Leet Sixteen <leet16y@...oo.com>)
• Re: Month of Random Hashes: DAY SEVENTEEN ("Michael Silk" <michaelslists@...il.com>)
• New flaw found in Firefox 2.0.0.4: Firefox file input focus vulnerabilities ("carl hardwick" <hardwick.carl@...il.com>)
• Re: New flaw found in Firefox 2.0.0.4: Firefox file input focus vulnerabilities (Joseph Hick <leet16y@...oo.com>)
• Re: New flaw found in Firefox 2.0.0.4: Firefox file input focus vulnerabilities (Martin Thurau <laus@...z.net>)
• New flaw found in Firefox 2.0.0.4: Firefox file input focus vulnerabilities ("carl hardwick" <hardwick.carl@...il.com>)
• Re: DOS on phrack? ("Nikolay Kichukov" <hijacker@...um.net>)
• Re: youtube flagged content age verification bypass ("Nikolay Kichukov" <hijacker@...um.net>)
• Rutkowska faces ‘100% undetectable malware’ challenge, teasing? ("Bipin Gautam" <gautam.bipin@...il.com>)
• Re: Month of Random Hashes: DAY SEVENTEEN ("Kristian Hermansen" <kristian.hermansen@...il.com>)
• Re: Rutkowska faces ‘100% undetectable malware’ challenge, teasing? ("Trey Keifer" <midnitrcr@...il.com>)
• Google/Orkut Authentication Issue PoC (Joseph Hick <leet16y@...oo.com>)
• Re: New flaw found in Firefox 2.0.0.4: Firefox file input focus vulnerabilities (Joseph Hick <leet16y@...oo.com>)
• Re: New flaw found in Firefox 2.0.0.4: Firefox file input focus vulnerabilities (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Re: New flaw found in Firefox 2.0.0.4: Firefox file input focus vulnerabilities (Michal Zalewski <lcamtuf@...ne.ids.pl>)
• Re: New flaw found in Firefox 2.0.0.4: Firefox file input focus vulnerabilities (ascii <ascii@...amail.com>)
• Re: New flaw found in Firefox 2.0.0.4: Firefox file input focus vulnerabilities ("Guasconi Vincent" <tyoptyop@...il.com>)
• Re: New flaw found in Firefox 2.0.0.4: Firefox file input focus vulnerabilities ("Guasconi Vincent" <tyoptyop@...il.com>)
• Re: Month of Random Hashes: DAY SEVENTEEN ("Guasconi Vincent" <tyoptyop@...il.com>)

663 messages

Powered by blists - more mailing lists