full-disclosure mailing list - 2010/04

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2010/04

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 8	² 37	³ 11	⁴ 1
⁵ 16	⁶ 16	⁷ 19	⁸ 13	⁹ 20	¹⁰ 14	¹¹ 4
¹² 5	¹³ 22	¹⁴ 10	¹⁵ 6	¹⁶ 20	¹⁷ 8	¹⁸ 10
¹⁹ 10	²⁰ 12	²¹ 9	²² 29	²³ 33	²⁴ 8	²⁵ 6
²⁶ 20	²⁷ 47	²⁸ 14	²⁹ 23	³⁰ 7

Messages by day:

April 1 (8 messages)

Re: Clever DEP Trick (Valdis.Kletnieks@...edu)
Re: Clever DEP Trick (Christoph Gruber <list@...u.at>)
Zabbix <= 1.8.1 SQL Injection (Dawid Golunski <golunski@...t.eu>)
Re: Advisory: Weak RNG in PHP session ID generation leads to session hijacking (Pierre Pronchery <pierre.pronchery@...kin.com>)
Advisory Optimal Archive 1.38 (tecr0c@...ninja.net)
VMSA-2010-0006 ESX Service Console updates for samba and acpid (VMware Security Team <security@...are.com>)
Re: Introducing SecurityTube Questions! (n3ptun3@...don.com)
Is Digital Due Process legit? (n3ptun3@...don.com)

April 2 (37 messages)

Re: Is Digital Due Process legit? (Jeffrey Walton <noloader@...il.com>)
Re: Victorinox Launches Super-Secure USB Stick (Rohit Patnaik <quanticle@...il.com>)
Re: RFID DOS, DDOS (Rohit Patnaik <quanticle@...il.com>)
The PDF-specific exploitation research (cocoruder <cocoruder@...il.com>)
[TOOL] Version 0.2 of bing-ip2hosts released (Andrew Horton <andrew@...ningstarsecurity.com>)
Vulnerability Centreon IT & Network Monitoring v2.1.5 (Mehdi Mahdjoub - Sysdream IT Security Services <m.mahdjoub@...dream.com>)
Re: Security system (Haris Pilton <harispilton37@...il.com>)
3rd CfP: ACCESS 2010 || September 20-25, 2010 - Valencia, Spain (Sandra Sendra<sandra.sendra.upv@...il.com>)
3rd CfP: INTERNET 2010 || September 20-25, 2010 - Valencia, Spain (Sandra Sendra<sandra.sendra.upv@...il.com>)
Re: Security system (T Biehn <tbiehn@...il.com>)
ZDI-10-033: Microsoft Internet Explorer TIME2 Behavior Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-034: Microsoft Internet Explorer Tabular Data Control ActiveX Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-035: Apple QuickTime genl Atom Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-036: Apple QuickTime H.263 PictureHeader Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-037: Apple QuickTime MJPEG Sample Dimensions Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-038: Apple QuickTime QDMC/QDM2 Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-039: Apple OS X Internet Enabled Disk Image Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-040: Apple QuickTime RLE Bit Depth Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-041: Apple QuickTime QDM2/QDCA Atom Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-042: Apple QuickTime MediaVideo Compressor Name Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-043: Apple QuickTime FlashPix NumberOfTiles Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-044: Apple QuickTime FLI LinePacket Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-045: Apple QuickTime MPEG-1 genl Atom Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-046: Mozilla Firefox Web Worker Array Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-047: Mozilla Firefox libpr0n imgContainer Bits-Per-Pixel Change Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-048: Mozilla Firefox nsTreeContentView Dangling Pointer Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-049: Mozilla Firefox PluginArray nsMimeType Dangling Pointer Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-050: Mozilla Firefox nsTreeSelection EventListener Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: Security system (Michael Holstein <michael.holstein@...ohio.edu>)
Non ZDI Post - EOM (Rob Fuller <jd.mubix@...il.com>)
Re: Security system (Benji <me@...ji.com>)
[CORELAN]-10-018 - TugZip 3.5 (Lincoln <lincoln.blogger@...il.com>)
Apple patent lawyers fail to close ddtek, Defcon CTF goes on ("vulc@n" <vulcan.ddtek@...il.com>)
FileCache: tmp file permission vulnerability. (bugs lists <bugs@....dhs.org>)
Re: Security system (Lupus Yonderboy <squee.uk@...glemail.com>)
[SECURITY] [DSA 2026-1] New netpbm-free packages fix denial of service (Giuseppe Iuculano <iuculano@...ian.org>)
Vulnerabilities in HoloCMS ("MustLive" <mustlive@...security.com.ua>)

April 3 (11 messages)

Re: FileCache: tmp file permission vulnerability. (Vladimir Lettiev <thecrux@...il.com>)
Re: FileCache: tmp file permission vulnerability. (paul.szabo@...ney.edu.au)
Sun D3VS SM0KiNG PoT AGAiN (Kingcope <kcope2@...glemail.com>)
Re: Sun D3VS SM0KiNG PoT AGAiN (Kingcope <kcope2@...glemail.com>)
CRiMiNAL M (Kingcope <kcope2@...glemail.com>)
CRiMiNAL MiNDED - iSOWAR3Z SPLOiT (Kingcope <kcope2@...glemail.com>)
Re: Sun D3VS SM0KiNG PoT AGAiN (Christian Sciberras <uuf6429@...il.com>)
Re: Sun D3VS SM0KiNG PoT AGAiN (Kingcope <kcope2@...glemail.com>)
[SECURITY] [DSA 2027-1] New xulrunner packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
Check those default iPhone settings... ("Thor (Hammer of God)" <Thor@...merofgod.com>)
[CORELAN-10-020] - ZipScan 2.2c .zip file Stack BoF (Security <security@...elan.be>)

April 4 (1 message)

How to Detect Malware from Proxy Log(ISA,squid) (information security <informationhacker08@...il.com>)

April 5 (16 messages)

Re: Security system ("M.B.Jr." <marcio.barbado@...il.com>)
[SECURITY] Zip Unzip v6 (.zip) 0day stack buffer overflow vulnerability (Steven Seeley <seeleymagic@...mail.com>)
Vulnerabilities in GunCMS and PhoenixCMS PHP Edition ("MustLive" <mustlive@...security.com.ua>)
ZDI-10-051: Sun Java Runtime RMIConnectionImpl Privileged Context Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-052: Sun Java Runtime Environment XNewPtr Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-053: Sun Java Runtime Environment MIDI File metaEvent Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-054: Sun Java Runtime Environment JPEGImageReader stepX Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-055: Sun Java Runtime Environment Mutable InetAddress Socket Policy Violation Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-056: Sun Java Runtime Environment Trusted Methods Chaining Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-057: Sun Java Runtime Environment JPEGImageDecoderImpl Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-058: Apple Mac OS X ImageIO Framework JPEG2000 Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-059: Sun Java Runtime Environment JPEGImageEncoderImpl Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-060: Sun Java Runtime Environment MixerSequencer Invalid Array Index Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.…)
ZDI-10-061: Sun Java Runtime CMM readMabCurveData Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-062: Novell Netware NWFTPD RMD/RNFR/DELE Argument Parsing Remote Code Execution Vulnerabilities (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-063: Mozilla Firefox Cross Document DOM Node Moving Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)

April 6 (16 messages)

Miranda TLS MitM with XMPP/Jabber protocol (Jan Schejbal <jan.mailinglisten@...glemail.com>)
Re: RFID DOS, DDOS (Jan Schejbal <jan.mailinglisten@...glemail.com>)
Weev's Mugshot (Scarf Pride Worldwide <terdlinkmobile@...il.com>)
Compliance Is Wasted Money, Study Finds ("Ivan ." <ivanhec@...il.com>)
Re: Weev's Mugshot (BMF <badmotherfsckr@...il.com>)
Re: Weev's Mugshot (Benji <me@...ji.com>)
[SECURITY] [DSA 2028-1] New xpdf packages fix several vulnerabilities (Luciano Bello <luciano@...ian.org>)
[SECURITY] [DSA 2029-1] New imlib2 packages fix arbitrary code execution (Nico Golde <nion@...ian.org>)
Vulnerabilities in TAK cms ("MustLive" <mustlive@...security.com.ua>)
Hack.lu 2010 CfP (info <info@...k.lu>)
[SECURITY] - Jzip (.zip) Unicode bof Vulnerability (Steven Seeley <seeleymagic@...mail.com>)
ZDI-10-065: CA XOsoft xosoapapi.asmx Multiple Remote Code Execution Vulnerabilities (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-066: CA XOsoft Control Service entry_point.aspx Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
CA20100406-01: Security Notice for CA XOsoft ("Kotas, Kevin J" <Kevin.Kotas@...com>)
ZDI-10-067: Apple QuickTime Pict BkPixPat Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
CORE-2010-0323: XSS Vulnerability in NextGEN Gallery Wordpress Plugin (CORE Security Technologies Advisories <advisories@...esecurity.com>)

April 7 (19 messages)

[ MDVSA-2010:069 ] nss (security@...driva.com)
[USN-923-1] OpenJDK vulnerabilities (Kees Cook <kees@...ntu.com>)
[USN-924-1] Kerberos vulnerabilities (Kees Cook <kees@...ntu.com>)
Re: Compliance Is Wasted Money, Study Finds (Bert Knabe <bert.knabe@...bockonline.com>)
[SECURITY] [DSA 2030-1] New mahara packages fix sql injection (Nico Golde <nion@...ian.org>)
fspro.net Lock My PC 4 backdoor password (Bugs NotHugs <bugsnothugs@...il.com>)
Re: fspro.net Lock My PC 4 backdoor password (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
klout.com cookie vulnerability PoC (Kenny Vaneetvelde <vakenfreak@...il.com>)
Re: Compliance Is Wasted Money, Study Finds (John Morrison <john.morrison101@...glemail.com>)
Re: Compliance Is Wasted Money, Study Finds (Keith Tomler <ktomler@...il.com>)
Re: Compliance Is Wasted Money, Study Finds (J Roger <securityhocus@...il.com>)
Re: Compliance Is Wasted Money, Study Finds (Valdis.Kletnieks@...edu)
Netsparker Community Edition - Free web app scanner is out! (Demo Delivery <ferruh.mavituna@...itunasecurity.com>)
Re: Compliance Is Wasted Money, Study Finds (J Roger <securityhocus@...il.com>)
Re: Compliance Is Wasted Money, Study Finds (Valdis.Kletnieks@...edu)
Vulnerabilities in Dunia Soccer ("MustLive" <mustlive@...security.com.ua>)
Re: Compliance Is Wasted Money, Study Finds (Stephen Mullins <steve.mullins.work@...il.com>)
Re: Compliance Is Wasted Money, Study Finds (Valdis.Kletnieks@...edu)
Re: Compliance Is Wasted Money, Study Finds (Tracy Reed <treed@...raviolet.org>)

April 8 (13 messages)

TCPDF Library Remote Code Execution Vulnerability (Matthias -apoc- Hecker <apoc@...serv.org>)
DeepSec 2010 - Call for Papers and Experts (DeepSec Conference <deepsec@...psec.net>)
Re: Compliance Is Wasted Money, Study Finds (Digital X <digitalx00@...il.com>)
Foxit 3.2.0.303 and Before Command Execution PoC (Peorth account <peorth_17@...mail.com>)
Re: why not a sandbox (Marius <wishinet@...glemail.com>)
[HITB-Announce] FINAL CALL - CFP for HITBSecConf2010 Amsterdam (Hafez Kamal <aphesz@...kinthebox.org>)
[USN-925-1] MoinMoin vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
Re: Vulnerabilities in TAK cms (T Biehn <tbiehn@...il.com>)
Vulnerabilities in CMS SiteLogic ("MustLive" <mustlive@...security.com.ua>)
www.Demolay.org - full disclosure sql injection vulnerability (Malice Anonymous <malice.anon@...il.com>)
Chain based SQL injection (Владимир Воронцов <vladimir.vorontsov@...ec.ru>)
Re: Vulnerabilities in TAK cms (Benji <me@...ji.com>)
[USN-926-1] ClamAV vulnerabilities (Jamie Strandboge <jamie@...onical.com>)

April 9 (20 messages)

[USN-624-2] Erlang vulnerability (Jamie Strandboge <jamie@...onical.com>)
VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues (VMware Security team <security@...are.com>)
Java Deployment Toolkit Performs Insufficient Validation of Parameters (Tavis Ormandy <taviso@....lonestar.org>)
Re: Java Deployment Toolkit Performs InsufficientValidation of Parameters ("Larry Seltzer" <larry@...ryseltzer.com>)
Secunia Research: Pulse CMS Arbitrary File Upload Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Pulse CMS Cross-Site Request Forgery (Secunia Research <remove-vuln@...unia.com>)
List Charter (John Cartwright <johnc@...k.org.uk>)
Vulnerabilities in phpCOIN ("MustLive" <mustlive@...security.com.ua>)
Re: Vulnerabilities in phpCOIN ("Jan G.B." <ro0ot.w00t@...glemail.com>)
Re: Vulnerabilities in phpCOIN (Valdis.Kletnieks@...edu)
Re: Vulnerabilities in phpCOIN ("Jan G.B." <ro0ot.w00t@...glemail.com>)
LFI In Multi Profit Websites (rockey killer <skg102@...il.com>)
Re: Vulnerabilities in phpCOIN (Christian Sciberras <uuf6429@...il.com>)
Re: Vulnerabilities in phpCOIN ("Jeff Kell" <Jeff-Kell@....edu>)
ZDI-10-068: Apple QuickTime H.263 Array Index Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: Vulnerabilities in TAK cms (T Biehn <tbiehn@...il.com>)
Vulnerability in Tembria Server Monitor (Security <security@...elan.be>)
[USN-927-1] NSS vulnerability (Jamie Strandboge <jamie@...onical.com>)
[USN-921-1] Firefox 3.5 and Xulrunner vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
iDefense Security Advisory 04.09.10: VMware VMnc Codec Heap Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)

April 10 (14 messages)

[USN-920-1] Firefox 3.0 and Xulrunner vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
Re: Compliance Is Wasted Money, Study Finds (Tracy Reed <treed@...raviolet.org>)
CVE-2009-4510: TANDBERG VCS Static SSH Host Keys (VSR Advisories <advisories@...curity.com>)
CVE-2009-4511: TANDBERG VCS Arbitrary File Retrieval (VSR Advisories <advisories@...curity.com>)
CVE-2009-4509: TANDBERG VCS Authentication Bypass (VSR Advisories <advisories@...curity.com>)
Anthology of attacks via captchas ("MustLive" <mustlive@...security.com.ua>)
Secunia Research: VMWare VMnc Codec HexTile Encoding Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: VMWare VMnc Codec HexTile Encoding Two Integer Truncation Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
Free Security Video Tutorials for beginners (lists73@....de)
Re: Compliance Is Wasted Money, Study Finds (Nick FitzGerald <nick@...us-l.demon.co.uk>)
Re: Free Security Video Tutorials for beginners (netinfinity <netinfinity.securitylab@...il.com>)
Re: Compliance Is Wasted Money, Study Finds ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Vulnerabilities in CMS SiteLogic ("MustLive" <mustlive@...security.com.ua>)
Re: Free Security Video Tutorials for beginners (lists73@....de)

April 11 (4 messages)

Re: Compliance Is Wasted Money, Study Finds (Valdis.Kletnieks@...edu)
HITBSecConf DUBAI 2010: Learn more about web attacks and stealth hacking ("laurent.oudot@...tri-security.com" <laurent.oudot@...tri-security.com>)
[USN-927-2] NSS regression (Jamie Strandboge <jamie@...onical.com>)
[USN-927-3] Thunderbird regression (Jamie Strandboge <jamie@...onical.com>)

April 12 (5 messages)

[SECURITY] [DSA 2031-1] New krb5 packages fix denial of service (Giuseppe Iuculano <iuculano@...ian.org>)
[SECURITY] [DSA 2032-1] New libpng packages fix several vulnerabilities (Giuseppe Iuculano <iuculano@...ian.org>)
Re: Vulnerabilities in WordPress ("MustLive" <mustlive@...security.com.ua>)
[Tyr 2] Article Friendly File Inclusion (Ch3Kan <ch3kan@...il.com>)
Re: Anthology of attacks via captchas ("Jan G.B." <ro0ot.w00t@...glemail.com>)

April 13 (22 messages)

ACROS Security: Local Binary Planting in VMware Tools for Windows (ASPR #2010-04-12-2) ("ACROS Lists" <lists@...os.si>)
ACROS Security: Remote Binary Planting in VMware Tools for Windows (ASPR #2010-04-12-1) ("ACROS Lists" <lists@...os.si>)
Insufficient Anti-automation and Denial of Service vulnerabilities in multiple systems ("MustLive" <mustlive@...security.com.ua>)
Simple RFID Spoofer (sketch sketch <sketchsk3tch@...il.com>)
Advisory 01/2010: MyBB Password Reset Email BCC: Injection Vulnerability (Stefan Esser <stefan.esser@...tioneins.de>)
Re: ACROS Security: Remote Binary Planting in VMware Tools for Windows (ASPR #2010-04-12-1) (Nam Nguyen <namn@...emoon.com.vn>)
Advisory 02/2010: MyBB Password Reset Weak Random Numbers Vulnerability (Stefan Esser <stefan.esser@...tioneins.de>)
Advisory 02/2010: MyBB Password Reset Weak Random Numbers Vulnerability (Stefan Esser <stefan.esser@...tioneins.de>)
Best Wireless Sniffer for MAC OS X (Justin Chang <ktriv3di@....com>)
Re: Best Wireless Sniffer for MAC OS X (Cody Robertson <cody@...khost.com>)
Re: Best Wireless Sniffer for MAC OS X ("KF (lists)" <kf_lists@...italmunition.com>)
[ MDVSA-2010:070 ] firefox (security@...driva.com)
ZDI-10-069: Microsoft Office Publisher File Conversion TextBox Processing Buffer Overflow Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-070: Microsoft Windows Media Player Codec Retrieval Dangling Pointer Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.…)
ZDI-10-071: Adobe Reader TrueType Font Handling Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: Best Wireless Sniffer for MAC OS X (David Maynor <dave@...atasec.com>)
Re: Vulnerabilities in CMS SiteLogic (Henri Salo <henri@...v.fi>)
Re: Best Wireless Sniffer for MAC OS X (James Lay <jlay@...ve-tothe-box.net>)
ZDI-10-073: Sun Microsystems Directory Server DSML-over-HTTP Username Search Denial of Service Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com…)
ZDI-10-074: Sun Microsystems Directory Server Enterprise ASN.1 Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-075: Sun Microsystems Directory Server Enterprise DSML UTF-8 Denial of Service Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[ MDVSA-2010:071 ] krb5 (security@...driva.com)

April 14 (10 messages)

Fortinet Advisory: Fortinet Discovers Multiple Microsoft Visio Vulnerabilities (MS10-028) ("liubing" <liubingf@...mail.com>)
Fortinet Advisory: Fortinet Discovers Multiple Adobe Reader / Acrobat Vulnerabilities (APSB10-09) ("liubing" <liubingf@...mail.com>)
Re: Insufficient Anti-automation and Denial of Service vulnerabilities in multiple systems (Kaddeh <kaddeh@...il.com>)
Re: Insufficient Anti-automation and Denial of Service vulnerabilities in multiple systems (Bogdan Calin <bogdan@...netix.com>)
[ MDVSA-2010:072 ] cups (security@...driva.com)
Cisco Security Advisory: Cisco Secure Desktop ActiveX Control Code Execution Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.…)
Re: Insufficient Anti-automation and Denial of Service vulnerabilities in multiple systems (Henri Salo <henri@...v.fi>)
[ MDVSA-2010:073 ] cups (security@...driva.com)
[ MDVSA-2010:073-1 ] cups (security@...driva.com)
ZDI-10-072: Cisco Secure Desktop CSDWebInstaller ActiveX Control Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)

April 15 (6 messages)

ZDI-10-076: Apple Preview libFontParser SpecialEncoding Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
[USN-928-1] Sudo vulnerability (Jamie Strandboge <jamie@...onical.com>)
[ MDVSA-2010:074 ] kdebase (security@...driva.com)
Hackproofing Oracle Financials 11i & R12 (Joxean Koret <joxeankoret@...oo.es>)
[USN-890-6] CMake vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
[ MDVSA-2010:075 ] openoffice.org (security@...driva.com)

April 16 (20 messages)

Imperva SecureSphere Web Application Firewall and Database Firewall Bypass Vulnerability (Clear Skies Security <smiles@...arskies.net>)
Re: Anthology of attacks via captchas ("MustLive" <mustlive@...security.com.ua>)
TELUS Security Labs VR - Adobe Reader U3D CLODMeshDeclaration Shading Count Memory Corruption (TELUS Security Labs - Vulnerability Research <noreply@...us.com>)
stratsec Security Advisory: SS-2010-004 Microsoft SMB Client Kernel Stack Overflow (stratsec Research <research@...atsec.net>)
Cert-Lexsi - Microsoft Windows Media Services MMS Buffer Overflow Vulnerability (Fabien PERIGAUD <fperigaud@...si.com>)
Secunia Research: Visualization Library DAT File Parsing Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
How to disable Java Deployment Toolkit (Kristof Zelechovski <giecrilj@...gny.2a.pl>)
New project Vulnerable Sites Databse (Tomy <support@...db.info>)
Vulnerability in CB Captcha for Joomla and Mambo ("MustLive" <mustlive@...security.com.ua>)
[SECURITY] [DSA 2033-1] New ejabberd packages fix denial of service (Sébastien Delafond <seb@...ian.org>)
[CVE-2010-0432] Apache OFBiz Multiple XSS Vulnerabilities (Lucas Apa <lucas@...sai-sec.com>)
Re: Vulnerabilities in phpCOIN ("MustLive" <mustlive@...security.com.ua>)
Re: Vulnerability in CB Captcha for Joomla and Mambo (Benji <me@...ji.com>)
Re: Vulnerabilities in phpCOIN (Benji <me@...ji.com>)
[USN-929-1] irssi vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
CORELAN-10-025 Archive Searcher .zip Stack Overflow (Security <security@...elan.be>)
Turning SMB client side bug to server side (laurent gaffie <laurent.gaffie@...il.com>)
Re: Best Wireless Sniffer for MAC OS X (NOC <i@...t.ms>)
iDefense Security Advisory 04.15.10: Multiple Vendor AgentX++ Stack Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
iDefense Security Advisory 04.15.10: Multiple Vendor AgentX++ Integer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)

April 17 (8 messages)

Re: Java Deployment Toolkit Performs Insufficient Validation of Parameters (Nick Boyce <nick.boyce@...il.com>)
Re: How to disable Java Deployment Toolkit (Nick Boyce <nick.boyce@...il.com>)
[ MDVSA-2010:077 ] nss_db (security@...driva.com)
[ MDVSA-2010:078 ] sudo (security@...driva.com)
[ MDVSA-2010:076 ] openssl (security@...driva.com)
[ MDVSA-2010:079 ] irssi (security@...driva.com)
[ MDVSA-2010:079 ] irssi (security@...driva.com)
[ MDVSA-2010:080 ] brltty (security@...driva.com)

April 18 (10 messages)

Re: How to disable Java Deployment Toolkit (Křištof Želechovski <giecrilj@...gny.2a.pl>)
[SECURITY] [DSA 2034-1] New phpmyadmin packages fix several vulnerabilities (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA-2035-1] New apache2 packages fix several issues (Stefan Fritsch <sf@...ian.org>)
[SECURITY] [DSA 2036-1] New jasper packages fix denial of service (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 2037-1] New kdm packages fix privilege escalation (Thijs Kinkhorst <thijs@...ian.org>)
Digivote replay attack (D V <digivoter@...mail.com>)
[ MDVSA-2010:081 ] apache-mod_auth_shadow (security@...driva.com)
[ MDVSA-2010:082 ] clamav (security@...driva.com)
New vulnerabilities in CMS SiteLogic ("MustLive" <mustlive@...security.com.ua>)
[SECURITY] [DSA 2038-1] New pidgin packages fix denial of service (Thijs Kinkhorst <thijs@...ian.org>)

April 19 (10 messages)

Secunia Research: e107 Content Management Plugin Script Insertion Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: e107 Avatar/Photograph Image File Upload Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Deadline Extension: ACCESS 2010 || September 20-25, 2010 - Valencia, Spain (Sandra Sendra<sandra.sendra.upv@...il.com>)
[CORELAN-10-026] TweakFS Zip Stack BOF (Security <security@...elan.be>)
CompleteFTP v3.3.0 - Remote Memory Consumption DoS ("Mehdi Mahdjoub [SYSDREAM]" <m.mahdjoub@...dream.com>)
Deadline Extension: INTERNET 2010 || September 20-25, 2010 - Valencia, Spain (Sandra Sendra<sandra.sendra.upv@...il.com>)
[USN-931-1] FFmpeg vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[ MDVSA-2010:076-1 ] openssl (security@...driva.com)
[ MDVSA-2010:076-1 ] openssl (security@...driva.com)
[USN-932-1] KDM vulnerability (Jamie Strandboge <jamie@...onical.com>)

April 20 (12 messages)

[Tool] ReFrameworker 1.1 (Erez Metula <erezmetula@...sec.co.il>)
sudoedit local privilege escalation through PATH manipulation (Agazzini Maurizio <maurizio.agazzini@...iaservice.net>)
Security Training Classes at SyScan'10 Singapore - Registration Opens ("organiser@...can.org" <organiser@...can.org>)
Fixing vulnerabilities in captcha-scripts mentioned in my last advisories ("MustLive" <mustlive@...security.com.ua>)
Apple iPhone 3.1.2 (7D11) Model MB702LL Mobile Safari Denial-of-Service (Matthew Bergin <matt.bergin@...mail.com>)
Re: Apple iPhone 3.1.2 (7D11) Model MB702LL Mobile Safari Denial-of-Service (David Maynor <dave@...atasec.com>)
[CORELAN-10-027] - HP Operations Manager for Windows, Remote Execution of Arbitrary Code (srcvw4.dll and srcvw32.dll) (Security <security@...elan.be>)
[ MDVSA-2010:083 ] emacs (security@...driva.com)
[CORELAN-10-028] - SpeedCommander 13.10 Memory Corruption DoS (Security <security@...elan.be>)
Re: [Tool] ReFrameworker 1.1 (T Biehn <tbiehn@...il.com>)
[USN-929-2] irssi regression (Jamie Strandboge <jamie@...onical.com>)
[ MDVSA-2010:070-1 ] firefox (security@...driva.com)

April 21 (9 messages)

Old school bugs in Intel compiler and debugger FLEXlm FlexNet DRM (Marsh Ray <marsh@...endedsubset.com>)
Cisco Security Advisory: Cisco Small Business Video Surveillance Cameras and Cisco 4-Port Gigabit Security Routers Aut… (Cisco Systems Product Security Incident…)
ZDI-10-077: Adobe Download Manager Atlcom.get_atlcom ActiveX Control Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
CORE-2010-0406 - User Invoices Persistent XSS Vulnerability in CactuShop (CORE Security Technologies Advisories <advisories@...esecurity.com>)
London DEFCON April meet - DC4420 - Wed 28th April 2010 (Major Malfunction <majormal@...ate-radio.org>)
[CORELAN-10-029] - ZipGenius v6.3.1.2552 zgtips.dll Stack Buffer Overflow (Security <security@...elan.be>)
IE8 img tag HiJacking (Владимир Воронцов <vladimir.vorontsov@...ec.ru>)
We must work harder on cloud, says Microsoft ("Ivan ." <ivanhec@...il.com>)
Re: We must work harder on cloud, says Microsoft (Jason Nada <j.crider@...e.com>)

April 22 (29 messages)

Re: We must work harder on cloud, says Microsoft ("Ivan ." <ivanhec@...il.com>)
Re: We must work harder on cloud, says Microsoft (Rohit Patnaik <quanticle@...il.com>)
Re: We must work harder on cloud, says Microsoft (Rohit Patnaik <quanticle@...il.com>)
Amiro.CMS <= 5.4.4 SQL inj (Владимир Воронцов <vladimir.vorontsov@...ec.ru>)
Please Welcome SuperFB ( and ignore this message ) (PsychoBilly <zpamh0l3@...il.com>)
Security-Assessment.com WhitePaper/Addendum: Cross Context Scripting with Firefox & Exploiting Cross Context Scripting … (Roberto Suggi Liverani <roberto.suggi@s…)
Bonsai Information Security - OS Command Injection in Cacti <= 0.8.7e (Bonsai Information Security Advisories <advisories@...sai-sec.com>)
Bonsai Information Security - SQL Injection in Cacti <= 0.8.7e (Bonsai Information Security Advisories <advisories@...sai-sec.com>)
Apache ActiveMQ is prone to source code disclosure vulnerability. (SecPod Research <research@...pod.com>)
Secunia Research: imlib2 "IMAGE_DIMENSIONS_OK()" Logic Error (Secunia Research <remove-vuln@...unia.com>)
Call for participation -- Eth0:2010 Summer (Mark Janssen <program@...-0.nl>)
CVE or SUN bug number for http://lists.grok.org.uk/pipermail/full-disclosure/2010-April/074036.html ("Lode, Nilss" <nilss.lode@...mens.com>)
Vulnerabilities in NovaBoard ("MustLive" <mustlive@...security.com.ua>)
Re: Compliance Is Wasted Money, Study Finds (Mike Hale <eyeronic.design@...il.com>)
Jcaptcha vulnerability (hvazquez@...test.es)
Re: Please Welcome SuperFB ( and ignore this message ) (Tonu Samuel <tonu@....ee>)
[Announcement] Introducing SecurityTube Tools section! (netinfinity <netinfinity.securitylab@...il.com>)
Re: Amiro.CMS <= 5.4.4 SQL inj (Henri Salo <henri@...v.fi>)
Re: [Announcement] Introducing SecurityTube Toolssection! (netinfinity <netinfinity.securitylab@...il.com>)
Re: IE8 img tag HiJacking (T Biehn <tbiehn@...il.com>)
Re: Amiro.CMS <= 5.4.4 SQL inj (Henri Salo <henri@...v.fi>)
Re: IE8 img tag HiJacking (Dan Kaminsky <dan@...para.com>)
Re: CVE or SUN bug number for http://lists.grok.org.uk/pipermail/full-disclosure/2010-April/074036.html (Theodore Pham <telamon@....edu>)
Re: IE8 img tag HiJacking (Dan Kaminsky <dan@...para.com>)
Re: IE8 img tag HiJacking (T Biehn <tbiehn@...il.com>)
Re: IE8 img tag HiJacking (Владимир Воронцов <vladimir.vorontsov@...ec.ru>)
CVE request: VLC <1.0.6 Multiple issues (Henri Salo <henri@...v.fi>)
Re: Bonsai Information Security - OS Command Injection in Cacti <= 0.8.7e (Alberto Trivero <a.trivero@...discover.com>)
Re: Compliance Is Wasted Money, Study Finds (Valdis.Kletnieks@...edu)

April 23 (33 messages)

[HITB-Announce] HITBSecConf2009 - Malaysia Videos Released! (Hafez Kamal <aphesz@...kinthebox.org>)
[HITB-Announce] HITBSecConf2010 - Dubai - Presentation Materials (Hafez Kamal <aphesz@...kinthebox.org>)
[HITB-Announce] HITB eZine Issue 002 out now! (Hafez Kamal <aphesz@...kinthebox.org>)
Amiro CMS<=5.4.4 PHP injection (Владимир Воронцов <vladimir.vorontsov@...ec.ru>)
Re: CVE or SUN bug number for http://lists.grok.org.uk/pipermail/full-disclosure/2010-April/074036.html (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
MacOS X 10.6.3 filesystem hfs Denial of Service Vulnerability (Maksymilian Arciemowicz <cxib@...urityreason.com>)
Re: Compliance Is Wasted Money, Study Finds (Christopher Gilbert <motoma@...il.com>)
Re: Compliance Is Wasted Money, Study Finds (Mike Hale <eyeronic.design@...il.com>)
Re: Compliance Is Wasted Money, Study Finds ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Re: Compliance Is Wasted Money, Study Finds (Christian Sciberras <uuf6429@...il.com>)
[ MDVSA-2010:071 ] mozilla-thunderbird (security@...driva.com)
ZDI-10-078: Novell ZENworks Configuration Management UploadServlet Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: Compliance Is Wasted Money, Study Finds ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Re: Compliance Is Wasted Money, Study Finds (Stephen Mullins <steve.mullins.work@...il.com>)
Re: Compliance Is Wasted Money, Study Finds (Michael Holstein <michael.holstein@...ohio.edu>)
Re: Compliance Is Wasted Money, Study Finds ("Thor (Hammer of God)" <Thor@...merofgod.com>)
[CORELAN-10-30] - CommView Network Monitor And Analyzer v6.1 b644 - cv2k1.sys DoS (BSOD) (Security <security@...elan.be>)
Re: Compliance Is Wasted Money, Study Finds (Mike Hale <eyeronic.design@...il.com>)
Re: Compliance Is Wasted Money, Study Finds (Mike Hale <eyeronic.design@...il.com>)
Vulnerability in Referer for DataLife Engine ("MustLive" <mustlive@...security.com.ua>)
Re: We must work harder on cloud, says Microsoft (Georgi Guninski <guninski@...inski.com>)
Re: Compliance Is Wasted Money, Study Finds (Michael Holstein <michael.holstein@...ohio.edu>)
[SECURITY] [DSA 2039-1] New cacti packages fix missing input sanitising (Thijs Kinkhorst <thijs@...ian.org>)
Re: Compliance Is Wasted Money, Study Finds (Christian Sciberras <uuf6429@...il.com>)
Re: Compliance Is Wasted Money, Study Finds ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Re: Compliance Is Wasted Money, Study Finds (Christian Sciberras <uuf6429@...il.com>)
Re: Compliance Is Wasted Money, Study Finds (Christian Sciberras <uuf6429@...il.com>)
Re: Compliance Is Wasted Money, Study Finds ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Re: Compliance Is Wasted Money, Study Finds (BMF <badmotherfsckr@...il.com>)
Re: Compliance Is Wasted Money, Study Finds (Christian Sciberras <uuf6429@...il.com>)
Re: Compliance Is Wasted Money, Study Finds (Christian Sciberras <uuf6429@...il.com>)
Re: Compliance Is Wasted Money, Study Finds ("Thor (Hammer of God)" <Thor@...merofgod.com>)
Re: Compliance Is Wasted Money, Study Finds (Christian Sciberras <uuf6429@...il.com>)

April 24 (8 messages)

Re: Compliance Is Wasted Money, Study Finds (Mike Hale <eyeronic.design@...il.com>)
SQL Injection - www.glmees.org.br - A Masonic Grand Lodge (m4l1c3 <malice.anon@...il.com>)
Re: Compliance Is Wasted Money, Study Finds ("Lyal Collins" <lyalc@...ftdsl.com.au>)
hashdays 2010 - Call for Papers (#days CFP) (hashdays CFP <cfp@...con-switzerland.org>)
[CORELAN-10-031] - ZipWrangler 1.2 .zip Stack Buffer Overflow (Security <security@...elan.be>)
Beware !!!!!!! before opening this site-->miano.us/misc/ff_sucks.html (information security <informationhacker08@...il.com>)
Re: Beware !!!!!!! before opening this site-->miano.us/misc/ff_sucks.html (Christian Sciberras <uuf6429@...il.com>)
Re: Beware !!!!!!! before opening this site-->miano.us/misc/ff_sucks.html (mrx <mrx@...pergander.org.uk>)

April 25 (6 messages)

HP System Management Homepage(SMH) | URL Redirection Abuse (YGN Ethical Hacker Group <lists@...g.net>)
[CORELAN-10-032] - Easyzip 2000 .zip Stack BOF (Security <security@...elan.be>)
t2'10: Call for Papers 2010 (Helsinki / Finland) (Tomi Tuominen <tomi.tuominen@...fi>)
[CORELAN-10-032] - Easyzip 2000 .zip Stack BOF (Peter Van Eeckhoutte <peter.ve@...elan.be>)
Re: Compliance Is Wasted Money, Study Finds (Shaqe Wan <sha8e@...oo.com>)
Re: Compliance Is Wasted Money, Study Finds (Nick FitzGerald <nick@...us-l.demon.co.uk>)

April 26 (20 messages)

Re: Compliance Is Wasted Money, Study Finds (Tracy Reed <treed@...raviolet.org>)
Re: Compliance Is Wasted Money, Study Finds (Nick FitzGerald <nick@...us-l.demon.co.uk>)
Re: Compliance Is Wasted Money, Study Finds (Valdis.Kletnieks@...edu)
Re: Compliance Is Wasted Money, Study Finds (Tracy Reed <treed@...raviolet.org>)
Re: Compliance Is Wasted Money, Study Finds (Christian Sciberras <uuf6429@...il.com>)
Re: Compliance Is Wasted Money, Study Finds (Shaqe Wan <sha8e@...oo.com>)
Re: Compliance Is Wasted Money, Study Finds (Mike Hale <eyeronic.design@...il.com>)
Re: Compliance Is Wasted Money, Study Finds (Shaqe Wan <sha8e@...oo.com>)
[CORELAN-10-032] - Easyzip 2000 .zip Stack BOF (jeff smith <smith.jeff010@...il.com>)
NovaStor NovaNet <= 13.0 issues (mu-b <mu-b@...it-labs.org>)
Re: Compliance Is Wasted Money, Study Finds (Christian Sciberras <uuf6429@...il.com>)
Re: Compliance Is Wasted Money, Study Finds (Digital X <digitalx00@...il.com>)
Re: Compliance Is Wasted Money, Study Finds (Christian Sciberras <uuf6429@...il.com>)
Re: [CORELAN-10-032] - Easyzip 2000 .zip Stack BOF (Benji <me@...ji.com>)
[USN-931-2] FFmpeg regression (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: Compliance Is Wasted Money, Study Finds (Shaqe Wan <sha8e@...oo.com>)
Re: Compliance Is Wasted Money, Study Finds (Pieter de Boer <pieter@...darkside.nl>)
Re: Compliance Is Wasted Money, Study Finds (Valdis.Kletnieks@...edu)
Team SHATTER Security Advisory - Oracle Database SQL Injection vulnerability in DBMS_CDC_PUBLISH.DROP_CHANGE_SOURCE (Shatter <shatter@...secinc.com>)
Re: Compliance Is Wasted Money, Study Finds (Michel Messerschmidt <lists@...hel-messerschmidt.de>)

April 27 (47 messages)

2010 Nmap/SecTools.org survey (Henri Doreau <henri.doreau@...il.com>)
Re: Compliance Is Wasted Money, Study Finds (Christian Sciberras <uuf6429@...il.com>)
Re: Compliance Is Wasted Money, Study Finds (Christian Sciberras <uuf6429@...il.com>)
Re: Compliance Is Wasted Money, Study Finds ("Lyal Collins" <lyal.collins@...2it.com.au>)
Re: Compliance Is Wasted Money, Study Finds (Christian Sciberras <uuf6429@...il.com>)
Re: Compliance Is Wasted Money, Study Finds (Christian Sciberras <uuf6429@...il.com>)
Re: Compliance Is Wasted Money, Study Finds (Christian Sciberras <uuf6429@...il.com>)
Re: Compliance Is Wasted Money, Study Finds (wilder_jeff Wilder <wilder_jeff@....com>)
Last Mile || InfoWare 2010 [ICCGI, ICWMC, INTERNET, ACCESS] September 20-25, 2010 - Valencia, Spain (Sandra Sendra<sandra.sendra.upv@...il.com>)
[SECURITY] [DSA 2021-2] New spamass-milter packages fix regression (Giuseppe Iuculano <iuculano@...ian.org>)
Re: Compliance Is Wasted Money, Study Finds (Mike Hale <eyeronic.design@...il.com>)
Re: Compliance Is Wasted Money, Study Finds ("Lyal Collins" <lyalc@...ftdsl.com.au>)
PoC for ZDI-10-078 (tu canal amigo <tucanalamigo@...oo.com>)
Re: Compliance Is Wasted Money, Study Finds (Shaqe Wan <sha8e@...oo.com>)
Re: Compliance Is Wasted Money, Study Finds (Shaqe Wan <sha8e@...oo.com>)
Re: Compliance Is Wasted Money, Study Finds (Shaqe Wan <sha8e@...oo.com>)
Re: Compliance Is Wasted Money, Study Finds (Shaqe Wan <sha8e@...oo.com>)
Re: Compliance Is Wasted Money, Study Finds (Shaqe Wan <sha8e@...oo.com>)
Re: 2010 Nmap/SecTools.org survey (Shaqe Wan <sha8e@...oo.com>)
Re: Compliance Is Wasted Money, Study Finds (Shaqe Wan <sha8e@...oo.com>)
Re: Compliance Is Wasted Money, Study Finds (Shaqe Wan <sha8e@...oo.com>)
Re: Compliance Is Wasted Money, Study Finds (Shaqe Wan <sha8e@...oo.com>)
Re: Compliance Is Wasted Money, Study Finds ("Honer, Lance" <lhoner@...g.com>)
Re: Compliance Is Wasted Money, Study Finds (Shaqe Wan <sha8e@...oo.com>)
Re: Compliance Is Wasted Money, Study Finds (Shaqe Wan <sha8e@...oo.com>)
Re: Compliance Is Wasted Money, Study Finds (Christian Sciberras <uuf6429@...il.com>)
Re: Compliance Is Wasted Money, Study Finds (Christian Sciberras <uuf6429@...il.com>)
Re: Compliance Is Wasted Money, Study Finds (Christian Sciberras <uuf6429@...il.com>)
Re: Compliance Is Wasted Money, Study Finds (Christian Sciberras <uuf6429@...il.com>)
XSS in Drupal Better Formats Module ("Justin C. Klein Keane" <justin@...irish.net>)
Re: Compliance Is Wasted Money, Study Finds (Mike Hale <eyeronic.design@...il.com>)
Re: Compliance Is Wasted Money, Study Finds (Mike Hale <eyeronic.design@...il.com>)
Re: Compliance Is Wasted Money, Study Finds (Mike Hale <eyeronic.design@...il.com>)
Re: Compliance Is Wasted Money, Study Finds (Mike Hale <eyeronic.design@...il.com>)
Re: XSS in Drupal Better Formats Module (Henri Salo <henri@...v.fi>)
Re: Compliance Is Wasted Money, Study Finds (Christian Sciberras <uuf6429@...il.com>)
Re: Compliance Is Wasted Money, Study Finds (Michael Holstein <michael.holstein@...ohio.edu>)
Re: Compliance Is Wasted Money, Study Finds (Michael Holstein <michael.holstein@...ohio.edu>)
Fun with FORTIFY_SOURCE (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: XSS in Drupal Better Formats Module ("Justin C. Klein Keane" <justin@...irish.net>)
Re: XSS in Drupal Better Formats Module ("Larry Seltzer" <larry@...ryseltzer.com>)
Re: Compliance Is Wasted Money, Study Finds (Valdis.Kletnieks@...edu)
Compliance Is Wasted Money, Study Finds (J Roger <securityhocus@...il.com>)
Re: Compliance Is Wasted Money, Study Finds (J Roger <securityhocus@...il.com>)
Re: Compliance Is Wasted Money, Study Finds (Paul Schmehl <pschmehl_lists@...rr.com>)
redefining research: vulnerability journalism (J Roger <securityhocus@...il.com>)
go public to avoid jail (J Roger <securityhocus@...il.com>)

April 28 (14 messages)

Randi Harper aka Sektie demolished (Gary Niger <goatsec@...il.com>)
Re: Randi Harper aka Sektie demolished (Sandy Vagina <bigsandyvagina@...il.com>)
Re: Randi Harper aka Sektie demolished ("Anders Klixbull" <akl@...erian.dk>)
Re: Compliance Is Wasted Money, Study Finds ("Lyal Collins" <lyalc@...ftdsl.com.au>)
Re: redefining research: vulnerability journalism (Christopher Gilbert <motoma@...il.com>)
Re: Compliance Is Wasted Money, Study Finds (Michel Messerschmidt <lists@...hel-messerschmidt.de>)
[ MDVSA-2010:084 ] java-1.6.0-openjdk (security@...driva.com)
Re: Randi Harper aka Sektie demolished (Andrew A <gluttony@...il.com>)
ZDI-10-079: Realnetworks Helix Server NTLM Authentication Invalid Base64 Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com…)
Re: Compliance Is Wasted Money, Study Finds (Michael Holstein <michael.holstein@...ohio.edu>)
[ MDVSA-2010:078-1 ] sudo (security@...driva.com)
[ MDVSA-2010:085 ] pidgin (security@...driva.com)
[ MDVSA-2009:332-1 ] gimp (security@...driva.com)
Deadline Extension: ACCESS 2010 || September 20-25, 2010 - Valencia, Spain (Sandra Sendra<sandra.sendra.upv@...il.com>)

April 29 (23 messages)

Israel IP range legit or false? (james@...thwaysecurity.com)
[USN-933-1] PostgreSQL vulnerability (Jamie Strandboge <jamie@...onical.com>)
A socio-psychological analysis of the first internet war (Estonia) (Gadi Evron <ge@...uxbox.org>)
Vuln Disclosure summarized (TTBOMA) (Rob Fuller <jd.mubix@...il.com>)
Re: Vuln Disclosure summarized (TTBOMA) (Sergio 'shadown' Alvarez <shadown@...il.com>)
Re: Vuln Disclosure summarized (TTBOMA) (Thierry Zoller <Thierry@...ler.lu>)
Re: Randi Harper aka Sektie demolished ("Anders Klixbull" <akl@...erian.dk>)
Re: Vuln Disclosure summarized (TTBOMA) (Valdis.Kletnieks@...edu)
Impossible to Maintain Secure Session With Twitter.com Web Interface (Chris Palmer <chris@...cpartners.com>)
NT becoming pure microkernel (iroz@...hmail.com)
TaskFreak 0.6.2 SQL Injection Vulnerability ("Justin C. Klein Keane" <justin@...irish.net>)
Off Topic: Information Security research paper help (John Jacobs <flamdugen@...mail.com>)
Re: Off Topic: Information Security research paper help (Valdis.Kletnieks@...edu)
Re: Off Topic: Information Security research paper help ("Justin C. Klein Keane" <justin@...irish.net>)
Re: go public to avoid jail (T Biehn <tbiehn@...il.com>)
Facebook persistent XSS vulnerability on iPhone (Jon Wedell <jonwedell@...il.com>)
Re: go public to avoid jail (Stephen Mullins <steve.mullins.work@...il.com>)
[ MDVSA-2010:086 ] kdegraphics (security@...driva.com)
Re: go public to avoid jail (T Biehn <tbiehn@...il.com>)
Re: NT becoming pure microkernel (Nicolas RUFF <nicolas.ruff@...il.com>)
Vulnerabilities in CCMS ("MustLive" <mustlive@...security.com.ua>)
[ MDVSA-2010:087 ] poppler (security@...driva.com)
Interactive Linux Binary Analysis Tool (Andrew Lyon <andrew.lyon@...ims.com>)

April 30 (7 messages)

[USN-934-1] Netpbm vulnerability (Jamie Strandboge <jamie@...onical.com>)
EUSecWest Amsterdam 2010 Call For Papers (short deadline May 5 - conf June 16/17) (Dragos Ruiu <dr@....net>)
Re: Interactive Linux Binary Analysis Tool ("Julien Reveret" <shaddai@...8.org>)
Re: NT becoming pure microkernel (iroz@...hmail.com)
[ MDVSA-2010:088 ] kernel (security@...driva.com)
Re: NT becoming pure microkernel (Kaddeh <kaddeh@...il.com>)
Re: Interactive Linux Binary Analysis Tool (Kaddeh <kaddeh@...il.com>)

458 messages

Powered by blists - more mailing lists