full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2010/02

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹ 14	² 11	³ 15	⁴ 40	⁵ 31	⁶ 13	⁷ 1
⁸ 14	⁹ 24	¹⁰ 40	¹¹ 30	¹² 35	¹³ 15	¹⁴ 5
¹⁵ 14	¹⁶ 15	¹⁷ 24	¹⁸ 11	¹⁹ 28	²⁰ 4	²¹ 3
²² 24	²³ 12	²⁴ 8	²⁵ 33	²⁶ 20	²⁷ 3	²⁸ 5

Messages by day:

February 1 (14 messages)

Re: Evidence of fake security research from SecurStar GmbH ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Re: Evidence of fake security research from SecurStar GmbH ("Fabio Pietrosanti (naif)" <lists@...osecurity.ch>)
Re: Evidence of fake security research from SecurStar GmbH ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Persistant XSS Vulnerability in rediff (rockey killer <skg102@...il.com>)
XSS vulnerability in Drupal's MP3 Player contributed module (version 6.x-1.0-beta1) (Martin Barbella <martybarbella@...il.com>)
[ MDVSA-2010:030 ] kernel (security@...driva.com)
Seagate Black Armor security issue (Jason Ellison <infotek@...il.com>)
iDefense Security Advisory 02.01.10: RealNetworks RealPlayer 11 HTTP Chunked Encoding Integer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com…)
[CORE-2010-0106] Cisco Secure Desktop XSS/JavaScript Injection (Core Security Technologies Advisories <advisories@...esecurity.com>)
iDefense Security Advisory 02.01.10: RealNetworks RealPlayer CMediumBlockAllocator Integer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 02.01.10: Real Networks RealPlayer Compressed GIF Handling Integer Overflow (iDefense Labs <labs-no-reply@...fense.com>)
[CORE-2009-1126] Corel Paint Shop Pro Photo X2 FPX Heap Overflow (CORE Security Technologies Advisories <advisories@...esecurity.com>)
Re: Persistant XSS Vulnerability in rediff (Jeff Williams <jeffwillis30@...il.com>)
Internet attack defense: License and registration please... ("Ivan ." <ivanhec@...il.com>)

February 2 (11 messages)

Remote Vulnerability in AIX RPC.cmsd released by iDefense ("Rodrigo Rubira Branco (BSDaemon)" <rodrigo@...nelhacking.com>)
Re: Can I manipulate packetâ€™s specific field using Squid? (David Howe <DaveHowe.Pentest@...glemail.com>)
Re: [Webappsec] Paper: Weaning the Web off of Session Cookies (Chris Travers <chris@...atrontech.com>)
CoreFTP Stack Buffer Overflow (Steven Seeley <seeleymagic@...mail.com>)
[SECURITY] [DSA 1987-1] New lighttpd packages fix denial of service (Nico Golde <nion@...ian.org>)
Get WinScanX Pro for FREE or $10 dollars for the month of February (Reed Arvin <reedarvin@...il.com>)
Cross Site Scripting (XSS) Vulnerability in ibibo (rockey killer <skg102@...il.com>)
Nikto version 2.1.1 released! (Sullo <sullo@...t.net>)
Re: Cross Site Scripting (XSS) Vulnerability in ibibo (Benji <me@...ji.com>)
AST-2010-001: T.38 Remote Crash Vulnerability ("Asterisk Security Team" <security@...erisk.org>)
Re: AST-2010-001: T.38 Remote Crash Vulnerability (Jeff Williams <jeffwillis30@...il.com>)

February 3 (15 messages)

network security product market trend and forecast, outlook (±è¹«¼º <kimms@...osec.co.kr>)
[ MDVSA-2010:031 ] wireshark (security@...driva.com)
[SECURITY] [DSA 1986-1] New moodle packages fix several vulnerabilities (white@...ian.org (Steffen Joeris))
[SECURITY] [DSA-1988-1] New qt4-x11 packages fix several vulnerabilities (Giuseppe Iuculano <iuculano@...ian.org>)
[SECURITY] [DSA-1989-1] New fuse packages fix denial of service (Giuseppe Iuculano <iuculano@...ian.org>)
[ISecAuditors Security Advisories] Facebook HTML and Script code injection vulnerability (ISecAuditors Security Advisories <advisories@...cauditors.com>)
Private cloud security is no security at all (Sam Johnston <samj@...j.net>)
win7x64 Direct General (yuange <yuange1975@...mail.com>)
Re: win7x64 Direct General ("Larry Seltzer" <larry@...ryseltzer.com>)
anybody know good service for cracking md5? (Alex <pppsss7@...il.com>)
CORE-2009-0625: Internet Explorer Dynamic OBJECT tag and URLMON sniffing vulnerabilities (Core Security Technologies Advisories <advisories@...esecurity.com>)
Re: anybody know good service for cracking md5? (Valdis.Kletnieks@...edu)
[SECURITY] [DSA-1990-1] New trac-git packages fix code execution (Florian Weimer <fw@...eb.enyo.de>)
Re: anybody know good service for cracking md5? (Christian Sciberras <uuf6429@...il.com>)
Creating An IP Input File for WinScanX (Reed Arvin <reedarvin@...il.com>)

February 4 (40 messages)

Google apps letter (Philippe Ouellet <philippe@...o.ca>)
Re: win7x64 Direct General (Rohit Patnaik <quanticle@...il.com>)
Hackito Ergo Sum 2010 - Call For Paper - HES2010 CFP (endrazine <endrazine@...il.com>)
Re: NSOADV-2010-002: Google Wave Design Bugs (wac <waldoalvarez00@...il.com>)
Re: Google Maps XSS (currently unpatched) (wac <waldoalvarez00@...il.com>)
Contact at Sony (xyberpix <xyberpix@...erpix.com>)
Anyone got a contact at PGP? (xyberpix <xyberpix@...erpix.com>)
Re: Anyone got a contact at PGP? (Milan Berger <m.berger@...ject-mindstorm.net>)
Malicious Code Execution Vulnerability In the URL Of crowdstar (Facebook Application Devloper) (rockey killer <skg102@...il.com>)
Re: anybody know good service for cracking md5? ("Anders Klixbull" <akl@...erian.dk>)
Re: anybody know good service for cracking md5? (Christian Sciberras <uuf6429@...il.com>)
Re: anybody know good service for cracking md5? ("Anders Klixbull" <akl@...erian.dk>)
Re: anybody know good service for cracking md5? (Christian Sciberras <uuf6429@...il.com>)
Re: anybody know good service for cracking md5? (Sergio Pelissari <sergio.pelissari@...teus-security.com>)
Re: anybody know good service for cracking md5? (netinfinity <netinfinity.securitylab@...il.com>)
Re: anybody know good service for cracking md5? 6A9-4CD (netinfinity <netinfinity.securitylab@...il.com>)
Re: anybody know good service for cracking md5? 6A9-4CD (Gregor Schneider <rc46fi@...glemail.com>)
Re: anybody know good service for cracking md5? 6A9-4CD (Gregor Schneider <rc46fi@...glemail.com>)
Re: anybody know good service for cracking md5? 6A9-4CD (Christian Sciberras <uuf6429@...il.com>)
Hackito Ergo Sum 2010 â€“ Call For Paper â€“ HES2010 CFP (Philippe Langlois <philippe.langlois@...il.com>)
Interspire Knowledge Manager multiple remote code execution vulnerabilities (Cory Marsh <coryamarsh@...il.com>)
[SECURITY] [DSA-1990-2] New trac-git package fixes regression (Stefan Fritsch <sf@...ian.org>)
Re: win7x64 Direct General ("McGhee, Eddie" <Eddie.McGhee@....com>)
[SECURITY] [DSA 1991-1] New squid/squid3 packages fix denial of service (white@...ian.org (Steffen Joeris))
Re: anybody know good service for cracking md5? ("McGhee, Eddie" <Eddie.McGhee@....com>)
Re: anybody know good service for cracking md5? 6A9-4CD ("McGhee, Eddie" <Eddie.McGhee@....com>)
Re: win7x64 Direct General ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Re: Fingerprinting web applications (Joomla, Mediawiki and Wordpress) (Henri Salo <henri@...v.fi>)
[ MDVSA-2010:032 ] rootcerts (security@...driva.com)
Re: anybody know good service for cracking md5? 6A9-4CD ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Re: anybody know good service for cracking md5? (T Biehn <tbiehn@...il.com>)
Re: anybody know good service for cracking md5? (Christian Sciberras <uuf6429@...il.com>)
Multiple Security Issues in Wippien (Michael Rossberg <michael.rossberg@...ilmenau.de>)
Re: win7x64 Direct General (Michal <michal@...ic.co.uk>)
CarolinaCon-VI/2010 Announcement - March 19th-21st - Raleigh NC (Vic Vandal <vvandal@...l.com>)
Re: anybody know good service for cracking md5? (Valdis.Kletnieks@...edu)
Re: Fingerprinting web applications (Joomla, Mediawiki and Wordpress) (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
Sterlite SAM300AX ADSL router - Cross Site Scripting (XSS) / Remote Code Execution. (Karn Ganeshen <karnganeshen@...il.com>)
CORELAN-10-009 : Ipswitch IMAIL 11.01 multiple vulnerabilities (reversible encryption + weak ACL) (Security <security@...elan.be>)
Draft paper submission deadline is extended: ISP-10 (James Heralds <jmheralds@...il.com>)

February 5 (31 messages)

Recon Call for Papers - July 9-11 2010 (Hugo Fortier <hfortier@...on.cx>)
[USN-894-1] Linux kernel vulnerabilities (Kees Cook <kees@...ntu.com>)
FW: CORELAN-10-009 : Ipswitch IMAIL 11.01 multiple vulnerabilities (reversible encryption + weak ACL) (Rosa Maria Gonzalez Pereira <analuis13@...mail.com>)
Re: Seagate Black Armor security issue (bujanga <bujanga@...il.com>)
Re: win7x64 Direct General (Rohit Patnaik <quanticle@...il.com>)
Samba Remote Zero-Day Exploit (Kingcope <kcope2@...glemail.com>)
Re: win7x64 Direct General ("Thor (Hammer of God)" <Thor@...merofgod.com>)
about jit and dep+aslr (yuange <yuange1975@...mail.com>)
Re: anybody know good service for cracking md5? 6A9-4CD (Gregor Schneider <rc46fi@...glemail.com>)
Re: about jit and dep+aslr (yuange <yuange1975@...mail.com>)
Re: [SECURITY] [DSA-1988-1] New qt4-x11 packages fix several vulnerabilities (Lucio Crusca <lucio@...web.org>)
Re: about jit and dep+aslr (Christian Sciberras <uuf6429@...il.com>)
Re: [SECURITY] [DSA-1988-1] New qt4-x11 packages fix several vulnerabilities (Christian Sciberras <uuf6429@...il.com>)
Re: win7x64 Direct General ("Larry Seltzer" <larry@...ryseltzer.com>)
Re: about jit and dep+aslr (Security <security@...elan.be>)
CORELAN-10-008 - Multiple vulnerabilities found in evalmsi 2.1.03 (Security <security@...elan.be>)
Re: about jit and dep+aslr (Charles Skoglund <charles.skoglund@...sec.se>)
Re: about jit and dep+aslr ("Larry Seltzer" <larry@...ryseltzer.com>)
[SECURITY] [DSA 1992-1] New chrony packages fix denial of service (Nico Golde <nion@...ian.org>)
CORELAN-10-008 - Multiple vulnerabilities found in evalmsi 2.1.03 (Peter Van Eeckhoutte <peter.ve@...elan.be>)
Secunia Research: libmikmod Module Parsing Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
Re: [Webappsec] Paper: Weaning the Web off of Session Cookies ("Timothy D. Morgan" <tmorgan@...curity.com>)
Re: Samba Remote Zero-Day Exploit (Kingcope <kcope2@...glemail.com>)
Re: about jit and dep+aslr (T Biehn <tbiehn@...il.com>)
Re: about jit and dep+aslr ("Thor (Hammer of God)" <Thor@...merofgod.com>)
[ MDVSA-2010:033 ] squid (security@...driva.com)
[CORE-2010-0121] Multiple Vulnerabilities with 8.3 Filename Pseudonyms in Web Servers (CORE Security Technologies Advisories <advisories@...esecurity.com>)
Re: Samba Remote Zero-Day Exploit (paul.szabo@...ney.edu.au)
Re: Samba Remote Zero-Day Exploit (paul.szabo@...ney.edu.au)
Re: Samba Remote Zero-Day Exploit (Dan Kaminsky <dan@...para.com>)
Re: Samba Remote Zero-Day Exploit (Kingcope <kcope2@...glemail.com>)

February 6 (13 messages)

Re: Samba Remote Zero-Day Exploit (paul.szabo@...ney.edu.au)
Re: Samba Remote Zero-Day Exploit (Thierry Zoller <Thierry@...ler.lu>)
Re: Samba Remote Zero-Day Exploit (Thierry Zoller <Thierry@...ler.lu>)
Re: Samba Remote Zero-Day Exploit (paul.szabo@...ney.edu.au)
GNOME Nautilus ("Joe Dohn" <joe.dhon@...rige.nu>)
Re: Samba Remote Zero-Day Exploit ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Re: Samba Remote Zero-Day Exploit (Dan Kaminsky <dan@...para.com>)
Samba Remote Zero-Day Exploit (marxclou@...hmail.com)
Re: Samba Remote Zero-Day Exploit (marxclou@...hmail.com)
Re: Samba Remote Zero-Day Exploit (paul.szabo@...ney.edu.au)
Re: Samba Remote Zero-Day Exploit (paul.szabo@...ney.edu.au)
Re: Samba Remote Zero-Day Exploit (marxclou@...hmail.com)
Re: Samba Remote Zero-Day Exploit (Dan Kaminsky <dan@...para.com>)

February 7 (1 message)

Re: anybody know good service for cracking (Beatyou Man <beatyouman@...il.com>)

February 8 (14 messages)

Re: about jit and dep+aslr (Jubei Trippataka <vpn.1.fanatic@...il.com>)
JDownloader Remote Code Execution (Matthias -apoc- Hecker <apoc@...serv.org>)
XSS vulnerability in NEW orkut. (sachin shinde <sachinshinde11@...il.com>)
Vulnerability in Tagcloud for DataLife Engine ("MustLive" <mustlive@...security.com.ua>)
The true power of cache ("MustLive" <mustlive@...security.com.ua>)
Re: Samba Remote Zero-Day Exploit ("Stefan Kanthak" <stefan.kanthak@...go.de>)
CORELAN-10-010 - GeFest Web HomeServer v1.0 Remote Directory Traversal Vulnerability (Security <security@...elan.be>)
[Hacking Event] Night Da Hack 2010 : Call For Proposals (m.mahdjoub@...dream.com)
Re: about jit and dep+aslr (yuange <yuange1975@...mail.com>)
Re: about jit and dep+aslr ("Larry Seltzer" <larry@...ryseltzer.com>)
Re: about jit and dep+aslr (Christian Sciberras <uuf6429@...il.com>)
Re: about jit and dep+aslr ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Re: about jit and dep+aslr (Christian Sciberras <uuf6429@...il.com>)
[ MDVSA-2010:034 ] kernel (security@...driva.com)

February 9 (24 messages)

Baidu XSS Zero Day (Beatyou Man <beatyouman@...il.com>)
Hacktics Advisory Feb09: XSS in Oracle E-Business Suite ("Ofer Maor" <ofer.maor@...sp.org>)
XSS in mtvindia.com (sachin shinde <sachinshinde11@...il.com>)
Re: Samba Remote Zero-Day Exploit ("Michael Wojcik" <Michael.Wojcik@...rofocus.com>)
Re: Samba Remote Zero-Day Exploit (Krzysztof Halasa <khc@...waw.pl>)
Re: Samba Remote Zero-Day Exploit ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Re: Samba Remote Zero-Day Exploit ("Michael Wojcik" <Michael.Wojcik@...rofocus.com>)
List Charter (John Cartwright <johnc@...k.org.uk>)
Re: SMS Banking ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Finding Domain Controllers for use with WinScanX using DCLookup.exe (source included) (Reed Arvin <reedarvin@...il.com>)
Re: Finding Domain Controllers for use with WinScanX using DCLookup.exe (source included) ("Thor (Hammer of God)" <Thor@...merofgod.com>)
#HITB - Special Report: HITB2009 CTF Weapons of Mass Destruction (Hafez Kamal <aphesz@...kinthebox.org>)
CORE-2009-0827: Microsoft Office Excel / Word OfficeArtSpgr Container Pointer Overwrite Vulnerability (CORE Security Technologies Advisories <advisories@...ese…)
ZDI-10-015: Microsoft Windows RLE Video Decompressor Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-016: Microsoft Windows ShellExecute Improper Sanitization Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-017: Microsoft Office PowerPoint Viewer TextBytesAtom Record Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: SMS Banking ("Thor (Hammer of God)" <Thor@...merofgod.com>)
TPTI-10-02: Microsoft Office PowerPoint Viewer TextCharsAtom Record Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: SMS Banking ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Re: SMS Banking ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Trustwave's SpiderLabs Security Advisory TWSL2010-001 (Trustwave Advisories <TrustwaveAdvisories@...stwave.com>)
Trustwave's SpiderLabs Security Advisory TWSL2010-001 (Trustwave Advisories <TrustwaveAdvisories@...stwave.com>)
Re: SMS Banking (Valdis.Kletnieks@...edu)
Windows SMB NTLM Authentication Weak Nonce Vulnerability (Hernan Ochoa <hernan@...il.com>)

February 10 (40 messages)

Re: Finding Domain Controllers for use with WinScanX using DCLookup.exe (source included) (Bugtrace <bugtrace@...il.com>)
Re: SMS Banking ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Re: SMS Banking ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Re: SMS Banking ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Re: SMS Banking ("Craig S. Wright" <craig.wright@...ormation-Defense.com>)
Secunia Research: Microsoft PowerPoint File Path Handling Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
Re: SMS Banking ("Craig S. Wright" <craig.wright@...ormation-Defense.com>)
Re: Samba Remote Zero-Day Exploit ("Stefan Kanthak" <stefan.kanthak@...go.de>)
stratsec Security Advisory SS-2010-003 - Microsoft SMB Client Pool Overflow (stratsec Research <research@...atsec.net>)
Re: [WEB SECURITY] Trustwave's SpiderLabs Security Advisory TWSL2010-001 ("Arian J. Evans" <arian.evans@...chronic.com>)
Re: Samba Remote Zero-Day Exploit (David Jacoby <David.Jacoby@...esec.se>)
Re: SMS Banking ("Craig S. Wright" <craig.wright@...ormation-Defense.com>)
Re: SMS Banking ("Craig S. Wright" <craig.wright@...ormation-Defense.com>)
Re: SMS Banking ("Craig S. Wright" <craig.wright@...ormation-Defense.com>)
Cybsec launches a new free software to assess security level in SAP landscapes ("CYBSEC Labs" <cybseclabs@...sec.com>)
Re: SMS Banking (Sunnet Beskerming <info@...kerming.com>)
[USN-897-1] MySQL vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-898-1] gnome-screensaver vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: SMS Banking ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco IronPort Encryption Appliance (Cisco Systems Product Security Incident Response Team <psirt@...co.co…)
Announce - SSL Audit (alpha) [G-SEC Ltd.] (Thierry Zoller <Thierry@...ler.lu>)
Re: Trustwave's SpiderLabs Security Advisory TWSL2010-001 (David Byrne <DByrne@...stwave.com>)
FW: SMS Banking ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Re: SMS Banking ("Thor (Hammer of God)" <Thor@...merofgod.com>)
FW: SMS Banking ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Re: SMS Banking ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Re: SMS Banking ("Craig S. Wright" <craig.wright@...ormation-Defense.com>)
Re: SMS Banking ("Craig S. Wright" <craig.wright@...ormation-Defense.com>)
Re: SMS Banking ("Craig S. Wright" <craig.wright@...ormation-Defense.com>)
Re: Advisories For Publication ("advisories" <advisories@...tcullis-security.com>)
Re: SMS Banking ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Re: SMS Banking ("Craig S. Wright" <craig.wright@...ormation-Defense.com>)
Re: SMS Banking ("Craig S. Wright" <craig.wright@...ormation-Defense.com>)
Re: SMS Banking (Benji <me@...ji.com>)
Re: SMS Banking ("Craig S. Wright" <craig.wright@...ormation-Defense.com>)
Re: SMS Banking ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Re: SMS Banking ("Craig S. Wright" <craig.wright@...ormation-Defense.com>)
Re: SMS Banking ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Re: SMS Banking ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Re: SMS Banking ("Thor (Hammer of God)" <Thor@...merofgod.com>)

February 11 (30 messages)

Re: SMS Banking (Valdis.Kletnieks@...edu)
Re: SMS Banking ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Google baulks at Conroy's call to censor YouTube ("Ivan ." <ivanhec@...il.com>)
Two papers on Oracle 11g Security ("David Litchfield" <davidl@...software.com>)
[SECURITY] [DSA 1993-1] New otrs2 packages fix SQL injection (Raphael Geissert <geissert@...ian.org>)
[Tool] keimpx: Check for the usefulness of credentials across a network over SMB ("Bernardo Damele A. G." <bernardo.damele@...il.com>)
Re: SMS Banking ("McGhee, Eddie" <Eddie.McGhee@....com>)
Re: SMS Banking ("Craig S Wright" <craig.wright@...ormation-defense.com>)
PHP 5.2.12/5.3.1 session.save_path safe_mode and open_basedir bypass (Maksymilian Arciemowicz <cxib@...urityreason.com>)
Re: SMS Banking (Christian Sciberras <uuf6429@...il.com>)
Re: PHP 5.2.12/5.3.1 session.save_path safe_mode and open_basedir bypass (Christian Sciberras <uuf6429@...il.com>)
Re: SMS Banking (Nick Chernyy <nchernyy@...il.com>)
[Onapsis Security Advisory 2010-002] SAP J2EE Engine MDB Path Traversal (Onapsis Research Labs <research@...psis.com>)
[Onapsis Security Advisory 2010-003] SAP WebDynpro Runtime XSS/CSS Injection (Onapsis Research Labs <research@...psis.com>)
[Onapsis Security Advisory 2010-004] SAP J2EE Authentication Phishing Vector (Onapsis Research Labs <research@...psis.com>)
[Onapsis Security Advisory 2010-003] SAP WebDynpro Runtime XSS/CSS Injection (Onapsis Research Labs <research@...psis.com>)
[ MDVSA-2010:035 ] openoffice.org (security@...driva.com)
Re: SMS Banking ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Re: [Onapsis Security Advisory 2010-004] SAP J2EE Authentication Phishing Vector (Rosa Maria Gonzalez Pereira <analuis13@...mail.com>)
Re: [ MDVSA-2010:035 ] openoffice.org (Rosa Maria Gonzalez Pereira <analuis13@...mail.com>)
Re: PHP 5.2.12/5.3.1 session.save_path safe_mode and open_basedir bypass (Joachim Schipper <joachim@...chimschipper.nl>)
Re: PHP 5.2.12/5.3.1 session.save_path safe_mode and open_basedir bypass (Christian Sciberras <uuf6429@...il.com>)
Ron Livingston likes to touch little boys (Sam Haldorf <sahalderf@...il.com>)
Re: SMS Banking (Rosa Maria Gonzalez Pereira <analuis13@...mail.com>)
Re: SMS Banking (Christian Sciberras <uuf6429@...il.com>)
Re: SMS Banking (sine onus <sine.onus@...il.com>)
Re: SMS Banking (Bhavuk Arora <ar.bhavuk@...il.com>)
[USN-899-1] Tomcat vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
ratseg x86 exploit (Inda Kitchen <indakitchen@...e.com>)
Re: Ron Livingston likes to touch little boys (jenna <this1kid@...il.com>)

February 12 (35 messages)

iDefense Security Advisory 02.09.10: Microsoft PowerPoint OEPlaceholderAtom Use-After-Free Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
Re: SMS Banking (Jeffrey Walton <noloader@...il.com>)
iDefense Security Advisory 02.09.10: Microsoft PowerPoint LinkedSlideAtom Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 02.09.10: Microsoft PowerPoint OEPlaceholderAtom Invalid Array Indexing Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
[SHA-3 Candidate] Mega Collision Attack!! ("A. Palupi" <pushmov.me@...il.com>)
Google Buzz and blind CSRF attacks (Kristian Erik Hermansen <kristian.hermansen@...il.com>)
Re: Ron Livingston likes to touch little boys ("Anders Klixbull" <akl@...erian.dk>)
Re: Ron Livingston likes to touch little boys (Michal <michal@...ic.co.uk>)
[SECURITY] [DSA 1994-1] New ajaxterm packages fix session hijacking (Raphael Geissert <geissert@...ian.org>)
Risk measurements ("Craig S. Wright" <craig.wright@...ormation-Defense.com>)
SQL injection vulnerability in apemCMS (Maciej Gojny <vuln@...ko-security.com>)
Re: [WEB SECURITY] Trustwave's SpiderLabs Security Advisory TWSL2010-001 ("Chris Weber" <chris@...abasec.com>)
(resend) RE: [WEB SECURITY] Trustwave's SpiderLabs Security Advisory TWSL2010-001 ("Chris Weber" <chris@...abasec.com>)
Re: Ron Livingston likes to touch little boys ("Martin Allert" <allert@...go.de>)
ChemViewX ActiveX Control Mutliple Stack Overflows (Paul Craig <paul.craig@...urity-assessment.com>)
Re: PHP 5.2.12/5.3.1 session.save_path safe_mode and open_basedir bypass (Maksymilian Arciemowicz <cxib@...urityreason.com>)
Re: Risk measurements (Christian Sciberras <uuf6429@...il.com>)
Re: PHP 5.2.12/5.3.1 session.save_path safe_mode and open_basedir bypass (Stefan Esser <stefan.esser@...tioneins.de>)
Re: Risk measurements (Christian Sciberras <uuf6429@...il.com>)
Re: ChemViewX ActiveX Control Mutliple Stack Overflows (Rosa Maria Gonzalez Pereira <analuis13@...mail.com>)
Re: Ron Livingston likes to touch little boys (Rosa Maria Gonzalez Pereira <analuis13@...mail.com>)
Re: Risk measurements (Valdis.Kletnieks@...edu)
Re: Risk measurements (Christian Sciberras <uuf6429@...il.com>)
Re: Risk measurements (Rosa Maria Gonzalez Pereira <analuis13@...mail.com>)
Re: Google Buzz and blind CSRF attacks (Cody Robertson <cody@...khost.com>)
Re: Risk measurements ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Re: Risk measurements ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Re: Google Buzz and blind CSRF attacks (Kristian Erik Hermansen <kristian.hermansen@...il.com>)
Re: Risk measurements (Luis Zaldivar <luis.zaldivar@...il.com>)
Re: Ron Livingston likes to touch little boys ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Re: Risk measurements (Valdis.Kletnieks@...edu)
Re: Risk measurements ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Re: Risk measurements ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Re: Risk measurements ("John Lightfoot" <jlightfoot@...il.com>)
[ MDVSA-2010:036 ] webmin (security@...driva.com)

February 13 (15 messages)

Re: Risk measurements (Valdis.Kletnieks@...edu)
Re: Trustwave's SpiderLabs Security Advisory TWSL2010-001 (David Byrne <DByrne@...stwave.com>)
(no subject) ("751 ...?" <751hacking@...il.com>)
[FD] password recovery for iwork docs (Dev Null <devnullph@...oo.com>)
Re: [FD] password recovery for iwork docs (Christian Sciberras <uuf6429@...il.com>)
Re: (no subject) (edgar deal <ragdelaed@...il.com>)
Re: Risk measurements ("Craig S. Wright" <craig.wright@...ormation-Defense.com>)
[SECURITY] [DSA 1995-1] New openoffice.org packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Risk measurements ("Craig S Wright" <craig.wright@...ormation-defense.com>)
[ISecAuditors Security Advisories] Facebook Cross-Site Request Forgery vulnerability (ISecAuditors Security Advisories <advisories@...cauditors.com>)
Re: Risk measurements ("Craig S Wright" <craig.wright@...ormation-defense.com>)
Re: Risk measurements ("Craig S Wright" <craig.wright@...ormation-defense.com>)
[SECURITY] [DSA-1996-1] New Linux 2.6.26 packages fix several vulnerabilities (dann frazier <dannf@...ian.org>)
[Tool Announcement] NoMore AND 1=1 - a Web Application Testing Tool (Dani <eslimasec@...il.com>)
Re: (no subject) ("McGhee, Eddie" <Eddie.McGhee@....com>)

February 14 (5 messages)

Mozilla Firefox 3.6 (Multitudinous looping )Denial of Service Exploit (information security <informationhacker08@...il.com>)
Internet Explorer 8 (Multitudinous looping )Denial of Service Exploit (information security <informationhacker08@...il.com>)
answer (RandallM <randallm@...mail.com>)
Re: answer (silky <michaelslists@...il.com>)
Re: [funsec] answer (Benjamin Brown <optikali@...il.com>)

February 15 (14 messages)

Re: Internet Explorer 8 (Multitudinous looping )Denial of Service Exploit (root <root_@...ertel.com.ar>)
Re: Ron Livingston likes to touch little boys ("Anders Klixbull" <akl@...erian.dk>)
Re: (no subject) ("Anders Klixbull" <akl@...erian.dk>)
Re: (no subject) (Christian Sciberras <uuf6429@...il.com>)
Re: (no subject) ("Anders Klixbull" <akl@...erian.dk>)
Re: (no subject) (Christian Sciberras <uuf6429@...il.com>)
Re: [funsec] answer (rick wesson <rick@...port-intelligence.com>)
[WEB SECURITY] # How To Start (vivek saxena <che.cissp@...il.com>)
[SECURITY] [DSA-1997-1] New mysql-dfsg-5.0 packages fix several vulnerabilities (Giuseppe Iuculano <iuculano@...ian.org>)
Re: Google Buzz and blind CSRF attacks (Fabien VINCENT <fabvincent@...il.com>)
Georgia government sites hacked (and spreading malware) (dd@...uri.net)
Re: Georgia government sites hacked (and spreadingmalware) ("Boris Trenn" <bt@...atnet.de>)
Drupal Twitter Module Credential Exposure ("Justin C. Klein Keane" <justin@...irish.net>)
Re: Georgia government sites hacked (and spreading malware) (Harry Behrens <harry@...rens.com>)

February 16 (15 messages)

Pogodny CMS Vulnerabilities (Maciej Gojny <vuln@...ko-security.com>)
Insomnia : ISVA-100216.1 - Windows URL Handling Vulnerability ("Brett Moore" <brett.moore@...omniasec.com>)
[ MDVSA-2010:037 ] fetchmail (security@...driva.com)
Men in block following me? ("Jonathan Barningham" <n3td4v@...h.ai>)
[USN-900-1] Ruby vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: Men in block following me? ("Anders Klixbull" <akl@...erian.dk>)
Information disclosure vulnerability in Drupal's Realname User Reference Widget contributed module (version 6.x-1.0) (Martin Barbella <barbella@....upenn.edu>)
Re: Men in block following me? (Valdis.Kletnieks@...edu)
Re: Men in block following me? ("Anders Klixbull" <akl@...erian.dk>)
Chrome Password Manager Cross Origin Weakness (CVE-2010-0556) ("Timothy D\. Morgan" <tmorgan@...curity.com>)
[USN-901-1] Squid vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: Pogodny CMS Vulnerabilities (Henri Salo <henri@...v.fi>)
VMSA-2010-0003 ESX Service Console update for net-snmp (VMware Security Team <security@...are.com>)
[ MDVSA-2010:038 ] maildrop (security@...driva.com)
Directory traversal & authentication bypass of Trendnet TV-IP201 (opticfiber <opticfiber@...sight.net>)

February 17 (24 messages)

Call for Papers BruCON.v2 2010: Hacking for B33r (Brucon Crew <info@...con.org>)
Re: Men in block following me? (Kaddeh <kaddeh@...il.com>)
New fuzzing approach (alan smith <alan.smith1010@...il.com>)
Re: New fuzzing approach (SÃ©bastien Duquette <ekse.0x@...il.com>)
Re: (no subject) (gold flake <ptinstructor@...il.com>)
Re: (no subject) ("Tomas L. Byrnes" <tomb@...neit.net>)
Re: (no subject) (Christian Sciberras <uuf6429@...il.com>)
Re: Enomaly ECP: Multiple vulnerabilities in VMcasting protocol & implementation. (security@...maly.com)
Harden TLS/SSL - Tool release (Thierry Zoller <Thierry@...ler.lu>)
Yet another Buzz article. (Christian Sciberras <uuf6429@...il.com>)
hello (Ombres Homeless <remotedewd@...glemail.com>)
Rising Online Virus Scanner ActiveX Control DoS (Stack overflow) (wirebonder 42 <wirebonder42@...glemail.com>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Security Agent (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Re: Rising Online Virus Scanner ActiveX Control DoS (Stack overflow) (Benji <me@...ji.com>)
Drupal Help Injection Module XSS Vulnerability ("Justin C. Klein Keane" <justin@...irish.net>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances (Cisco Systems Product Security Incident Response Team …)
Cisco Security Advisory: Cisco Firewall Services Module Skinny Client Control Protocol Inspection Denial of Service Vu… (Cisco Systems Product Security Incident…)
Cross-Site Scriting on Portwise SSL VPN v4.6 (research <research@...checkup.com>)
[SECURITY] [DSA 1998-1] New kdelibs packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
[ MDVSA-2010:039 ] netpbm (security@...driva.com)
[ MDVSA-2010:040 ] gnome-screensaver (security@...driva.com)
[USN-895-1] Firefox 3.0 and Xulrunner 1.9 vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
[USN-896-1] Firefox 3.5 and Xulrunner 1.9.1 vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
Re: New fuzzing approach (alan smith <alan.smith1010@...il.com>)

February 18 (11 messages)

Secunia Research: Mozilla Firefox Memory Corruption Vulnerability (Secunia Research <remove-vuln@...unia.com>)
[ MDVSA-2010:041 ] pidgin (security@...driva.com)
TLS/SSL Hardening & Compatibility Report 2010 (Thierry Zoller <Thierry@...ler.lu>)
Re: Men in block following me? (Paul Schmehl <pschmehl_lists@...rr.com>)
ZDI-10-018: IBM Cognos Server Backdoor Account Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[ MDVSA-2010:034-1 ] kernel (security@...driva.com)
Colombia (security) government sites hacked and spreading malware (dd@...uri.net)
[ MDVSA-2010:034-2 ] kernel (security@...driva.com)
[SECURITY] [DSA 1999-1] New xulrunner packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2000-1] New ffmpeg packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
[USN-890-5] XML-RPC for C and C++ vulnerabilities (Jamie Strandboge <jamie@...onical.com>)

February 19 (28 messages)

AST-2010-002: Dialplan injection vulnerability ("Asterisk Security Team" <security@...erisk.org>)
help fuzzing/finding Horn CNF formula (Georgi Guninski <guninski@...inski.com>)
Re: help fuzzing/finding Horn CNF formula (Jeff Williams <jeffwillis30@...il.com>)
SQL injection vulnerability in Amelia CMS (Maciej Gojny <vuln@...ko-security.com>)
Adobe & the Ancient vulnerabilities (Thomas Kristensen <tk@...unia.com>)
Re: [WEB SECURITY] Trustwave's SpiderLabs Security Advisory TWSL2010-001 ("Ivan Buetler" <ivan.buetler@...c.ch>)
trying to find more Firefox 0day (exploit dev <extraexploit@...il.com>)
[TOOL RELEASE] ENGR SQL FingerprintT [Version 1.00.0006] ("Nelson Brito" <nbrito@...ure.org>)
[ MDVSA-2010:042 ] firefox (security@...driva.com)
ACM.ORG website has serious data leak again (the hacker <info@...-hacker.info>)
[ MDVSA-2010:043 ] libtheora (security@...driva.com)
ZDI-10-019: Mozilla Firefox showModalDialog Cross-Domain Scripting Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[SECURITY] [DSA-2001-1] New php5 packages fix multiple vulnerabilities (Raphael Geissert <geissert@...ian.org>)
[SECURITY] [DSA-2002-1] New polipo packages fix denial of service (Stefan Fritsch <sf@...ian.org>)
Re: [WEB SECURITY] Trustwave's SpiderLabs Security Advisory TWSL2010-001 (David Byrne <DByrne@...stwave.com>)
Re: Why ("Jonathan Barningham" <n3td4v@...h.ai>)
Re: Why ("Thor (Hammer of God)" <thor@...merofgod.com>)
[ MDVSA-2010:044 ] mysql (security@...driva.com)
Re: Why ("Jonathan Barningham" <n3td4v@...h.ai>)
Re: Why (Christian Sciberras <uuf6429@...il.com>)
Re: Why ("Jonathan Barningham" <n3td4v@...h.ai>)
Re: Why (BMF <badmotherfsckr@...il.com>)
Re: Why ("Jonathan Barningham" <n3td4v@...h.ai>)
Re: Why (Valdis.Kletnieks@...edu)
Re: Why ("Jonathan Barningham" <n3td4v@...h.ai>)
Re: Why (Benji <me@...ji.com>)
Re: Why (Christian Sciberras <uuf6429@...il.com>)
How I become Vice President of Security at Yahoo! 1999-2005. ("John Q Public" <johndoetron@...h.ai>)

February 20 (4 messages)

Re: How I become Vice President of Security at Yahoo! 1999-2005. (BMF <badmotherfsckr@...il.com>)
Request for feedback on TCP security (IETF effort) (Fernando Gont <fernando.gont@...il.com>)
Re: How I become Vice President of Security at Yahoo! 1999-2005. (Valdis.Kletnieks@...edu)
Re: How I become Vice President of Security at Yahoo! 1999-2005. ("Randal T. Rioux" <randy@...cyonlabs.com>)

February 21 (3 messages)

Nmap5 cheatsheet ("A. Ramos" <aramosf@...ec.net>)
Re: help fuzzing/finding Horn CNF formula (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
Multiple Adobe Products - XML External Entity And XML Injection Vulnerabilities (Roberto Suggi Liverani <roberto.suggi@...urity-assessment.com>)

February 22 (24 messages)

SEC Consult SA-20100208-0 :: Backdoor and Vulnerabilities in Xerox WorkCentre Printers Web Interface (SEC Consult Research <research@...-consult.com>)
Hacktics Advisory Feb10: Persistent XSS in Microsoft SharePoint Portal ("Ofer Maor" <ofer.maor@...sp.org>)
Re: How I become Vice President of Security at Yahoo! 1999-2005. (Elly_Tran_Ha <hexmasta@...il.com>)
Chuck Norris Botnet and Broadband Routers (Gadi Evron <ge@...uxbox.org>)
Re: How I become Vice President of Security at Yahoo! 1999-2005. (Adam Normal <icetre@...aristocrats.org>)
Some nice code yust captured (Stephan Gerling <SGerling@...enInspection.net>)
London DEFCON February meet - DC4420 - Wed 24th Feb 2010 (Major Malfunction <majormal@...ate-radio.org>)
[USN-902-1] Pidgin vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
ACM.ORG data leak still there 4 days after announcing to CEO John White (the hacker <info@...-hacker.info>)
Re: Why (T Biehn <tbiehn@...il.com>)
Re: Why (T Biehn <tbiehn@...il.com>)
Re: ACM.ORG data leak still there 4 days after announcing to CEO John White (Benji <me@...ji.com>)
Re: ACM.ORG data leak still there 4 days after announcing to CEO John White (the hacker <info@...-hacker.info>)
Re: ACM.ORG data leak still there 4 days after announcing to CEO John White (Benji <me@...ji.com>)
Re: ACM.ORG data leak still there 4 days after announcing to CEO John White ("Justin C. Klein Keane" <justin@...irish.net>)
Re: ACM.ORG data leak still there 4 days after announcing to CEO John White (Benji <me@...ji.com>)
Re: ACM.ORG data leak still there 4 days after announcing to CEO John White ("Justin C. Klein Keane" <justin@...irish.net>)
Re: ACM.ORG data leak still there 4 days after announcing to CEO John White (Valdis.Kletnieks@...edu)
Re: ACM.ORG data leak still there 4 days after announcing to CEO John White (Christian Sciberras <uuf6429@...il.com>)
Re: ACM.ORG data leak still there 4 days after announcing to CEO John White (the hacker <info@...-hacker.info>)
Re: ACM.ORG data leak still there 4 days after announcing to CEO John White ("James W. Lytle" <jlytle@...enter.com>)
Re: ACM.ORG data leak still there 4 days after announcing to CEO John White (Christian Sciberras <uuf6429@...il.com>)
Re: Oracle eBusiness Suite 11i - Cross Site Scripting - All Parameters (Karn Ganeshen <karnganeshen@...il.com>)
CA20100222-01: Security Notice for CA Service Desk ("Kotas, Kevin J" <Kevin.Kotas@...com>)

February 23 (12 messages)

Re: Nmap5 cheatsheet (Rohit Patnaik <quanticle@...il.com>)
Secunia Research: Bournal ccrypt Information Disclosure Security Issue (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Bournal Insecure Temporary Files Security Issue (Secunia Research <remove-vuln@...unia.com>)
[SECURITY] [DSA 2003-1] New Linux 2.6.18 packages fix several vulnerabilities (dann frazier <dannf@...ian.org>)
[ MDVSA-2010:045 ] php (security@...driva.com)
[ MDVSA-2010:046 ] ncpfs (security@...driva.com)
Get WinScanX Pro for FREE or $10 dollars for the month of February (only 5 days left!) (Reed Arvin <reedarvin@...il.com>)
CA20100223-01: Security Notice for CA eHealth Performance Manager ("Kotas, Kevin J" <Kevin.Kotas@...com>)
[ MDVSA-2010:047 ] fuse (security@...driva.com)
ZDI-10-020: EMC HomeBase SSL Service Arbitrary File Upload Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-021: Novell NetStorage xsrvd Long Pathname Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: Chuck Norris Botnet and Broadband Routers (Gadi Evron <ge@...uxbox.org>)

February 24 (8 messages)

ACTA "internet enforcement" chapter leaks ("Ivan ." <ivanhec@...il.com>)
[USN-903-1] OpenOffice.org vulnerabilities (Kees Cook <kees@...ntu.com>)
Re: Chuck Norris Botnet and Broadband Routers ("Adrian P." <ap@...citizen.org>)
Kojoney (SSH honeypot) remote DoS (Nicob <nicob@...ob.net>)
Re: Chuck Norris Botnet and Broadband Routers (Marcelo Jr) ("marcelojunior@...erig.com.br" <marcelojunior@...erig.com.br>)
Rbot Owner Reaction Command Execution (Matthias -apoc- Hecker <apoc@...serv.org>)
[USN-904-1] Squid vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
iDefense Security Advisory 02.23.10: Multiple Vendor NOS Microsystems getPlus Downloader Input Validation Vulnerability (iDefense Labs <labs-no-reply@...fense.c…)

February 25 (33 messages)

NSOADV-2010-003: DATEV ActiveX Control remote command execution (NSO Research <nso-research@...iriu.de>)
Re: NSOADV-2010-003: DATEV ActiveX Control remote command execution (2smart4u <rc46fi@...glemail.com>)
Hacktics Advisory Feb10: XSS in IBM WebSphere Portal & Lotus WCM ("Ofer Maor" <ofer.maor@...sp.org>)
SQL injection vulnerability in WebAdministrator Lite CMS (Maciej Gojny <vuln@...ko-security.com>)
XSS vulnerability in RedBanc.cl (interbank network) ("Zerial." <fernando@...ial.org>)
SQL injection vulnerability in LiveChatNow (Support TEAM <support@...ko-security.com>)
Mozilla firefox 3.6 unpatched phishing vulnerability (bugsbanned@...hmail.com)
EasyJet is storing user passwords in the clear (Sai Emrys <sai@...zai.com>)
Hacktics Advisory Feb10: XSS in IBM WebSphere Portal & Lotus WCM ("Ofer Maor" <ofer@...ktics.com>)
Re: Mozilla firefox 3.6 unpatched phishing vulnerability (Pradip Sharma <sharma.pradip@...il.com>)
Re: EasyJet is storing user passwords in the clear (Dan Kaminsky <dan@...para.com>)
Re: ACM.ORG data leak still there 4 days after announcing to CEO John White (Stack Smasher <stacksmasher@...il.com>)
Re: EasyJet is storing user passwords in the clear (Michael Neal Vasquez <mnv@...mni.princeton.edu>)
Re: EasyJet is storing user passwords in the clear (Dan Kaminsky <dan@...para.com>)
[ MDVSA-2010:048 ] roundcubemail (security@...driva.com)
Re: EasyJet is storing user passwords in the clear (Michael Neal Vasquez <mnv@...mni.princeton.edu>)
Re: EasyJet is storing user passwords in the clear (Dan Kaminsky <dan@...para.com>)
Form-based HTTP Authentication Proof of Concept ("Timothy D\. Morgan" <tmorgan@...curity.com>)
lol: Microsoft shuts down cryptome over lawful spying document ("John Q Public" <johndoetron@...h.ai>)
Collage upgrades (james@...thwaysecurity.com)
Re: lol: Microsoft shuts down cryptome over lawful spying document ("John Q Public" <johndoetron@...h.ai>)
Re: lol: Microsoft shuts down cryptome over lawful spying document (Christian Sciberras <uuf6429@...il.com>)
Re: lol: Microsoft shuts down cryptome over lawful spying document ("John Q Public" <johndoetron@...h.ai>)
Re: lol: Microsoft shuts down cryptome over lawful spying document (Christian Sciberras <uuf6429@...il.com>)
Release : Exploit writing tutorial 9 - Introduction to Win32 shellcoding (Security <security@...elan.be>)
Release : Exploit writing tutorial 9 - Introduction to Win32 shellcoding (Security <security@...elan.be>)
[ MDVSA-2010:049 ] sudo (security@...driva.com)
AST-2010-003: Invalid parsing of ACL rules can compromise security ("Asterisk Security Team" <security@...erisk.org>)
Ubuntu Lucid Lynx is Big brother Ubuntu ("John Q Public" <johndoetron@...h.ai>)
Re: Ubuntu Lucid Lynx is Big brother Ubuntu ("John Q Public" <johndoetron@...h.ai>)
Re: Ubuntu Lucid Lynx is Big brother Ubuntu (Benji <me@...ji.com>)
Re: Ubuntu Lucid Lynx is Big brother Ubuntu ("John Q Public" <johndoetron@...h.ai>)
Re: EasyJet is storing user passwords in the clear (Dan Kaminsky <dan@...para.com>)

February 26 (20 messages)

Re: EasyJet is storing user passwords in the clear (Sai Emrys <sai@...zai.com>)
Re: Ubuntu Lucid Lynx is Big brother Ubuntu (Mark Shuttleworth <mark@...ntu.com>)
Re: EasyJet is storing user passwords in the clear (Sai Emrys <sai@...zai.com>)
SyScan'10 CALL FOR PAPERS ("thomas@...can.org" <thomas@...can.org>)
Re: Ubuntu Lucid Lynx is Big brother Ubuntu (Rafael Moraes <rafael@....com.br>)
Fwd: steathbomb (RandallM <randallm@...mail.com>)
[ MDVSA-2010:050 ] apache-mod_security (security@...driva.com)
getPlus insufficient domain name validation vulnerability (Akita Software Security <lists@...tasecurity.nl>)
Re: Fwd: steathbomb (Robert Portvliet <robert.portvliet@...il.com>)
Re: Fwd: steathbomb (Michael Holstein <michael.holstein@...ohio.edu>)
WinXP IE .HLP file 0day (Maurycy Prodeus <mailing-list@...c.pl>)
Re: WinXP IE .HLP file 0day (Peter Ferrie <peter.ferrie@...il.com>)
Re: Mozilla firefox 3.6 unpatched phishing vulnerability (Daniel Veditz <dveditz@...zio.com>)
Re: WinXP IE .HLP file 0day (Maurycy Prodeus <mailing-list@...c.pl>)
Re: Ubuntu Lucid Lynx is Big brother Ubuntu (Daniel Llewellyn <diddledan@...glemail.com>)
Re: Ubuntu Lucid Lynx is Big brother Ubuntu ("John Q Public" <johndoetron@...h.ai>)
John Young of Cryptome on Infowars with Alex Jones ("John Q Public" <johndoetron@...h.ai>)
[USN-905-1] sudo vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
Re: Ubuntu Lucid Lynx is Big brother Ubuntu (news@...cean.net)

February 27 (3 messages)

Month of PHP Security 2010 - CALL FOR PAPERS (Stefan Esser <stefan.esser@...tioneins.de>)
Yahoo! UK and US Hiring Security and Risk management experts ("Henri Torgemane" <johndoetron@...h.ai>)
Re: Drupal Help Injection Module XSS Vulnerability (Mori Sugimoto <foss@...sporan.net>)

February 28 (5 messages)

Re: Drupal Help Injection Module XSS Vulnerability (Mori Sugimoto <foss@...sporan.net>)
Re: Get WinScanX Pro for FREE or $10 dollars for the month of February (only 5 days left!) (sunjester <tripmonster@...il.com>)
Re: Two MSIE 6.0/7.0 NULL pointer crashes (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
Re: Two MSIE 6.0/7.0 NULL pointer crashes (Christian Sciberras <uuf6429@...il.com>)
[SECURITY] [DSA 2004-1] New samba packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)

492 messages