full-disclosure mailing list - 2010/08

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2010/08

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹ 10
² 11	³ 11	⁴ 21	⁵ 21	⁶ 11	⁷ 2	⁸ 3
⁹ 16	¹⁰ 19	¹¹ 29	¹² 14	¹³ 9	¹⁴ 2	¹⁵
¹⁶ 11	¹⁷ 19	¹⁸ 8	¹⁹ 6	²⁰ 6	²¹ 3	²² 3
²³ 16	²⁴ 27	²⁵ 33	²⁶ 22	²⁷ 44	²⁸ 13	²⁹ 1
³⁰ 15	³¹ 34

Messages by day:

August 1 (10 messages)

[SECURITY] [DSA 2080-1] New ghostscript packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
Screen_unlock - Windows logon screen unlocker (Makoto Shiotsuki <shio@...rim.or.jp>)
[SECURITY] [DSA 2081-1] New libmikmod packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Expired certificate (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
Re: Day of bugs in WordPress 2 ("MustLive" <mustlive@...security.com.ua>)
Re: Screen_unlock - Windows logon screen unlocker ("McGhee, Eddie" <Eddie.McGhee@....com>)
Re: OpenDNS is acting improperly !!! ("Paulo Cesar Breim (PCB)" <paulo@...im.com.br>)
Memory Diffing (½ÅÀ±¼ö <p3ter0@...il.com>)
[SECURITY] [DSA 2078-1] New mapserver packages fix arbitrary code execution (Nico Golde <nion@...ian.org>)
Re: Screen_unlock - Windows logon screen unlocker ("Thor (Hammer of God)" <thor@...merofgod.com>)

August 2 (11 messages)

[SECURITY] [DSA 2082-1] New gmime2.2 packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
Re: OpenDNS is acting improperly !!! (bk <chort0@...il.com>)
Re: Expired certificate ("Elazar Broad" <elazar@...hmail.com>)
FreeSSHD 1.2.4~1.2.6 Remote Buffer Overflow DoS (YGN Ethical Hacker Group <lists@...g.net>)
Re: OpenDNS is acting improperly !!! (Jamie Riden <jamie.riden@...il.com>)
Re: OpenDNS is acting improperly !!! (is it safe <istheinternetsafe@...glemail.com>)
[ MDVSA-2010:017 ] ruby ("silenth" <silenth@...s.net>)
Information Leakage and Full path disclosure vulnerabilities in WordPress ("MustLive" <mustliveua@...il.com>)
[SECURITY] [DSA 2083-1] New moin packages fix cross-site scripting (Nico Golde <nion@...ian.org>)
TWSL2010-003: Unauthorized access to root NFS export on EMC Celerra NAS appliance (Trustwave Advisories <trustwaveadvisories@...stwave.com>)
Re: OpenDNS is acting improperly !!! (bk <chort0@...il.com>)

August 3 (11 messages)

Re: OpenDNS is acting improperly !!! (Valdis.Kletnieks@...edu)
[SECURITY] [DSA 2084-1] New tiff packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Information Leakage and Full path disclosure vulnerabilities in WordPress (Henri Salo <henri@...v.fi>)
Re: Information Leakage and Full path disclosure vulnerabilities in WordPress ("Jan G.B." <ro0ot.w00t@...glemail.com>)
Google reCAPTCHA Validation Bypass (Harry Strongburg <harry@...ry.lu>)
reCAPTCHA Broken (awf awf <lol-wut-hurr@...e.com>)
Multiple XSS issues exist in Fusetalk forums. (Domain Admin <martin@...help.com>)
Cybsec Advisory Multiple Cross-Site Scripting (XSS) in MyIT CRM ("CYBSEC Labs" <cybseclabs@...sec.com>)
Re: Google reCAPTCHA Validation Bypass (Guilherme Scombatti <guiscombatti@...il.com>)
[USN-964-2] Likewise Open regression (Kees Cook <kees@...ntu.com>)
[CORE-2010-0608] HP OpenView NNM OvJavaLocale Buffer Overflow Vulnerability (CORE Security Technologies Advisories <advisories@...esecurity.com>)

August 4 (21 messages)

[SECURITY] [DSA 2086-1] New avahi packages fix denial of service (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2087-1] New cabextract packages fix arbitrary code execution (Moritz Muehlenhoff <jmm@...ian.org>)
Bonsai Information Security - Twitter Open Redirection Vulnerability (Bonsai Information Security Advisories <advisories@...sai-sec.com>)
[SECURITY] [DSA 2085-1] New lftp packages fix file overwrite vulnerability (Sebastien Delafond <seb@...ian.org>)
Re: Google reCAPTCHA Validation Bypass (Harry Strongburg <harry@...ry.lu>)
Re: reCAPTCHA Broken (Javier Bassi <javierbassi@...il.com>)
GMail complete anonymity possible via IPv6 (Harry Strongburg <harry.fd@...ry.lu>)
On the iPhone PDF and kernel exploit ("Marcello Barnaba (void)" <vjt@...nssl.it>)
Re: reCAPTCHA Broken (huj huj huj <datskihuj@...il.com>)
Heap Offset Overflow in Citrix ICA Clients (Context IS - Disclosure <disclosure@...textis.co.uk>)
Re: Expired certificate (Paul Schmehl <pschmehl_lists@...rr.com>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Firewall Services Module (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances (Cisco Systems Product Security Incident Response Team …)
Re: On the iPhone PDF and kernel exploit (Zach C <fxchip@...il.com>)
Re: On the iPhone PDF and kernel exploit ("Marcello Barnaba (void)" <vjt@...nssl.it>)
Re: Expired certificate (Marsh Ray <marsh@...endedsubset.com>)
[ MDVSA-2010:144 ] wireshark (security@...driva.com)
Re: Expired certificate (Charles Morris <charlesmorris@...il.com>)
CSRF, Information Leakage and Full path disclosure vulnerabilities in WordPress ("MustLive" <mustlive@...security.com.ua>)
[USN-966-1] Linux kernel vulnerabilities (Kees Cook <kees@...ntu.com>)
iDefense Security Advisory 08.03.10: Citrix ICA Client ActiveX Memory Corruption Vulnerabillity (iDefense Labs <labs-no-reply@...fense.com>)

August 5 (21 messages)

Re: GMail complete anonymity possible via IPv6 (Atul Agarwal <atul@...fence.com>)
Re: On the iPhone PDF and kernel exploit (Pablo Ximenes <pablo@...en.es>)
Cisco Wireless Control System XSS ("Tom Neaves" <tom@...neaves.com>)
Snort Cache Bug (Srinivas Naik <naik.srinu@...il.com>)
[SECURITY] [DSA 2088-1] New wget packages fix potential code execution (Florian Weimer <fw@...eb.enyo.de>)
Re: GMail complete anonymity possible via IPv6 (Christian Sciberras <uuf6429@...il.com>)
Re: On the iPhone PDF and kernel exploit (Ryan Sears <rdsears@....edu>)
Re: On the iPhone PDF and kernel exploit (Sabahattin Gucukoglu <mail@...ahattin-gucukoglu.com>)
Re: On the iPhone PDF and kernel exploit (Mario Vilas <mvilas@...il.com>)
Re: On the iPhone PDF and kernel exploit (Sagar Belure <sagar.belure@...il.com>)
Re: On the iPhone PDF and kernel exploit (Benji <me@...ji.com>)
BackTrack 4 R1 - Public Release (muts <muts@...ensive-security.com>)
[USN-968-1] Dell Latitude 2110 vulnerability (Kees Cook <kees@...ntu.com>)
ZDI-10-138: Novell iPrint Server Queue Name Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-139: Novell iPrint Client Browser Plugin Parameter Name Remote Code Execution (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-140: Novell iPrint Client Browser Plugin operation Parameter Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-141: Apple Webkit SVG ForeignObject Rendering Layout Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-142: Apple Webkit SVG First-Letter Style Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
TPTI-10-05: Novell iPrint Client Browser Plugin Remote File Deletion Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
TPTI-10-06: Novell iPrint Client Browser Plugin ExecuteRequest debug Parameter Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoi…)
[USN-969-1] PCSC-Lite vulnerability (Kees Cook <kees@...ntu.com>)

August 6 (11 messages)

Secunia Research: MantisBT "Add Category" Script Insertion Vulnerability (Secunia Research <remove-vuln@...unia.com>)
ZeusCart Ecommerce Shopping Cart Software Cross-Site scripting Vulnerability (SecPod Research <research@...pod.com>)
[SECURITY] [DSA-2089-1] New php5 packages fix several vulnerabilities (Raphael Geissert <geissert@...ian.org>)
Re: On the iPhone PDF and kernel exploit (Jose Miguel Esparza <josemiguel.esparza@...il.com>)
Jens Neu ist auÃŸer Haus. (Jens Neu <jens.neu@...tronik.com>)
Vulnerabilities in Dataface Web Application Framework ("MustLive" <mustlive@...security.com.ua>)
Re: On the iPhone PDF and kernel exploit (Robert ÅšwiÄ™cki <robert@...ecki.net>)
Re: On the iPhone PDF and kernel exploit (Jose Miguel Esparza <jesparza@...rnal-todo.com>)
[ MDVSA-2010:145 ] libtiff (security@...driva.com)
Re: [CORE-2010-0405] Adobe Director Invalid Read (Core Security Technologies Advisories <advisories@...esecurity.com>)
[ MDVSA-2010:146 ] libtiff (security@...driva.com)

August 7 (2 messages)

[SECURITY] [DSA 2090-1] New socat packages fix arbitrary code execution (Luciano Bello <luciano@...ian.org>)
openssl-1.0.0a (Georgi Guninski <guninski@...inski.com>)

August 8 (3 messages)

Cross-Site Scripting vulnerability in Mozilla Firefox, Opera and other browsers ("MustLive" <mustlive@...security.com.ua>)
A question of the xss vulnerability's Proof of concept (supercodeing35271 supercodeing35271 <supercodeing35271@...il.com>)
Re: A question of the xss vulnerability's Proof of concept (Justin Klein Keane <justin@...irish.net>)

August 9 (16 messages)

ISS Proventia Desktop (Thierry Zoller <Thierry@...ler.lu>)
Re: Cross-Site Scripting vulnerability in Mozilla Firefox, Opera and other browsers ("Jan G.B." <ro0ot.w00t@...glemail.com>)
Nagios XI 2009R1.2B Multiple CSRF (Adam Baldwin <adam_baldwin@...nuity-is.com>)
ZDI-10-143: Novell Sentinel Log Manager Multiple Servlet Remote Code Execution Vulnerabilities (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-144: Apple Webkit Rendering Counter Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
2Wire Broadband Router Session Hijacking Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
Project Vigilant (gillis jones <gillis57@...il.com>)
2Wire Broadband Router Session Hijacking Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
Re: Project Vigilant (Gary Baribault <gary@...ibault.net>)
Re: Project Vigilant (Paul Schmehl <pschmehl_lists@...rr.com>)
Re: 2Wire Broadband Router Session Hijacking Vulnerability (Henri Salo <henri@...v.fi>)
Month of BEB (musnt live <musntlive@...il.com>)
ZDI-10-145: Novell ZENWorks Remote Management Agent Weak Authentication Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: Project Vigilant (Eyeballing Weev <eyeballing.weev@...il.com>)
ZDI-10-146: Apple Webkit Anchor Tag Mouse Click Event Dispatch Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: Cross-Site Scripting vulnerability in Mozilla Firefox, Opera and other browsers (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)

August 10 (19 messages)

FreeBSD stock ftpd vulnerabilities (and more) ("HI-TECH ." <isowarez.isowarez.isowarez@...glemail.com>)
Re: 2Wire Broadband Router Session Hijacking Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
[USN-967-1] w3m vulnerability (Steve Beattie <sbeattie@...ntu.com>)
[USN-965-1] OpenLDAP vulnerabilities (Steve Beattie <sbeattie@...ntu.com>)
List Charter (John Cartwright <johnc@...k.org.uk>)
Reliable reports on attacks on medical software and IT-systems available? (halfdog <me@...fdog.net>)
[ MDVSA-2010:147 ] firefox (security@...driva.com)
ZDI-10-147: Microsoft Windows MPEG Layer-3 Audio Decoder Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-148: Microsoft Cinepak Codec CVDecompress Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Issue 17 - Msxml2.XMLHTTP.3.0 response handling memory corruption (ms10-051, CVE-2010-2561) (Berend-Jan Wever <berendjanwever@...il.com>)
Re: Reliable reports on attacks on medical software and IT-systems available? (halfdog <me@...fdog.net>)
[CORE-2010-0623] Microsoft Windows CreateWindow function callback vulnerability (CORE Security Technologies Advisories <advisories@...esecurity.com>)
Re: Reliable reports on attacks on medical software and IT-systems available? (Paul Schmehl <pschmehl_lists@...rr.com>)
CORE-2010-0407: Microsoft Office Excel PivotTable Cache Data Record Buffer Overflow (CORE Security Technologies Advisories <advisories@...esecurity.com>)
ZDI-10-149: Adobe Flash Player LocalConnection Memory Corruption Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: Reliable reports on attacks on medical software and IT-systems available? (BMF <badmotherfsckr@...il.com>)
RoadRunner Ambit U10C019 CableModem Exploit (Harry Strongburg <harry.fd@...ry.lu>)
iDefense Security Advisory 08.10.10: Microsoft Word RTF File Parsing Heap Buffer Overflow Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)
stratsec Security Advisory: SS-2010-007 Microsoft SMB Server Zero Size Pool Allocation (stratsec Advisories <advisories@...atsec.net>)

August 11 (29 messages)

Secunia Research: Windows Movie Maker String Parsing Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
MoonSols update on CVE-2010-1893 (Windows 7 TCP/IP Integer Overflow) (Matthieu Suiche <msuiche@...nsols.com>)
Microsoft Office Word HTML Linked Objects Memory Corruption Vulnerability - CVE-2010-1903 (Rodrigo Branco <rbranco@...ckpoint.com>)
Re: Reliable reports on attacks on medical software and IT-systems available? (halfdog <me@...fdog.net>)
PR10-07: Unauthenticated File Retrieval (traversal) within ColdFusion administration console (research <research@...checkup.com>)
Re: Reliable reports on attacks on medical software and IT-systems available? (halfdog <me@...fdog.net>)
Facebook name extraction based on email/wrong password + POC (Atul Agarwal <atul@...fence.com>)
Facebook name extraction based on email/wrong password + POC (Atul Agarwal <atul@...fence.com>)
Re: Facebook name extraction based on email/wrong password + POC (Christian Sciberras <uuf6429@...il.com>)
Re: FreeSSHD 1.2.4~1.2.6 Remote Buffer Overflow DoS (Aris <aris@...adc0de.be>)
Re: Facebook name extraction based on email/wrong password + POC (White Snow <whit3.sn0w@...oo.de>)
Collisions in PDF signatures (Florian Zumbiehl <florz@...rz.de>)
Remainder: Snort Cache Bug (Srinivas Naik <naik.srinu@...il.com>)
Re: Facebook name extraction based on email/wrong password + POC (Atul Agarwal <atul@...fence.com>)
Re: Facebook name extraction based on email/wrong password + POC (Javier Bassi <javierbassi@...il.com>)
Re: Facebook name extraction based on email/wrong password + POC (Martin Aberastegue <xyborg@...il.com>)
ZDI-10-150: Microsoft Office Word sprmCMajority Record Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Cisco Security Advisory: Multiple Vulnerabilities in the Cisco ACE Application Control Engine Module and Cisco ACE 471… (Cisco Systems Product Security Incident…)
Cisco Security Advisory: SQL Injection Vulnerability in Cisco Wireless Control System (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Secunia Research: glpng PNG Processing Two Integer Overflow Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
ZDI-10-151: SAP Crystal Reports 2008 GIOP Message Size Integer Overflow Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: Correction to: ZDI-10-151: SAP Crystal Reports 2008 GIOP Message Size Integer Overflow Remote Code Execution Vulne… (ZDI Disclosures <zdi-disclosures@...pin…)
[USN-970-1] GnuPG2 vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: Facebook name extraction based on email/wrong password + POC (Peter Dawson <slash.pd@...il.com>)
SQL Injection vulnerability in CMS WebManager-Pro ("MustLive" <mustlive@...security.com.ua>)
ZDI-10-151: Microsoft Office Word 2007 plcffldMom Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-152: Apple WebKit RTL LineBox Overflow Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-153: Apple Webkit SVG Floating Text Element Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-154: Apple Webkit Button First-Letter Style Rendering Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)

August 12 (14 messages)

Re: Reliable reports on attacks on medical software and IT-systems available? (Caspian@...dom-interrupt.org)
Facebook name + photo extraction using 'Forgot Password' page (Rishabh Singla <rishabhsingla@...habhsingla.com>)
Re: Facebook name extraction based on email/wrong password + POC (werew01f <hack.werew01f@...il.com>)
Re: Facebook name + photo extraction using 'Forgot Password' page (Javier Bassi <javierbassi@...il.com>)
Secunia Research: Opera "Download" Dialog File Execution Security Issue (Secunia Research <remove-vuln@...unia.com>)
Re: SQL Injection vulnerability in CMS WebManager-Pro (Henri Salo <henri@...v.fi>)
Re: Facebook name extraction based on email/wrong password + POC ("Zerial." <fernando@...ial.org>)
[ MDVSA-2010:148 ] pidgin (security@...driva.com)
TGP 1.2.4 beta ("Thor (Hammer of God)" <thor@...merofgod.com>)
Minded Security Advisory Bulletin Update July/August 2010 (Early Warning <seclist@...dedsecurity.com>)
Re: Reliable reports on attacks on medical software and IT-systems available? (Paul Schmehl <pschmehl_lists@...rr.com>)
[ MDVSA-2010:149 ] freetype2 (security@...driva.com)
Re: Facebook name extraction based on email/wrong password + POC (ghost <ghosts@...il.com>)
Cisco Security Advisory: Cisco IOS Software TCP Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)

August 13 (9 messages)

Re: Facebook name extraction based on email/wrong password + POC (Burhan Ã‡imen <burhancimen@...il.com>)
[SECURITY] [DSA 2091-1] New squirrelmail packages fix cross-site request forgery (Luciano Bello <luciano@...ian.org>)
Re: Facebook name extraction based on email/wrong password + POC (Samuel MartÃn Moro <faust64@...il.com>)
Re: Facebook name extraction based on email/wrong password + POC (no exit <fd.noexit@...il.com>)
Windows Kerberos Authentication Bypass (Tommaso Malgherini <mamaragan@...il.com>)
Re: Reliable reports on attacks on medical software and IT-systems available? (Jeffrey Walton <noloader@...il.com>)
SUSE Security Announcement: flash-player (SUSE-SA:2010:034) (Thomas Biege <thomas@...e.de>)
Secunia Research: SWFTools Two Integer Overflow Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
iDefense Security Advisory 08.10.10: Microsoft Office RTF Parsing Engine Memory Corruption Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)

August 14 (2 messages)

PoC for CVE-2010-0083 (rpc.ttdbserverd database parser heap overflow) - Against Solaris SPARC and x86 (Rodrigo Branco <rbranco@...ckpoint.com>)
[ MDVSA-2010:150 ] libsndfile (security@...driva.com)

August 16 (11 messages)

Insecure secure cookie in Tornado (Nam Nguyen <namn@...emoon.com.vn>)
IE8 toStaticHtml Bypass (Web Sec <root@...ec.com>)
Microsoft Anti-Cross Site Scripting Library Bypass (Web Sec <root@...ec.com>)
[ MDVSA-2010:151 ] libmikmod (security@...driva.com)
[ MDVSA-2010:152 ] apache (security@...driva.com)
[USN-971-1] OpenJDK vulnerabilities (Kees Cook <kees@...ntu.com>)
[ MDVSA-2010:153 ] apache (security@...driva.com)
[ MDVSA-2010:154 ] cabextract (security@...driva.com)
blackboard security contact that can actually handle a report? (Charles Morris <charlesmorris@...il.com>)
CVE-2010-3014: Coda Filesystem Kernel Memory Disclosure (VSR Advisories <advisories@...curity.com>)
CCBILL.COM Internet billing service multiple vulnerabilities (Vulnerabilities <vuln@...ko-security.com>)

August 17 (19 messages)

Re: CCBILL.COM Internet billing service multiple vulnerabilities (Jeffrey Walton <noloader@...il.com>)
Re: CCBILL.COM Internet billing service multiple vulnerabilities (Michal Zalewski <lcamtuf@...edump.cx>)
Re: CCBILL.COM Internet billing service multiple vulnerabilities (mrx <mrx@...pergander.org.uk>)
Re: CCBILL.COM Internet billing service multiple vulnerabilities (Michal Zalewski <lcamtuf@...edump.cx>)
Re: CCBILL.COM Internet billing service multiple vulnerabilities (Jeffrey Walton <noloader@...il.com>)
Re: CCBILL.COM Internet billing service multiple vulnerabilities (William Bell <williamb@...e.net>)
Re: FuzzDiff tool (Henri Salo <henri@...v.fi>)
Re: FuzzDiff tool (Dan Rosenberg <drosenberg@...curity.com>)
Re: CCBILL.COM Internet billing service multiple vulnerabilities (Vulnerabilities <vuln@...ko-security.com>)
Re: CCBILL.COM Internet billing service multiple vulnerabilities (PsychoBilly <zpamh0l3@...il.com>)
Re: CCBILL.COM Internet billing service multiple vulnerabilities (Michael Holstein <michael.holstein@...ohio.edu>)
CVE-2010-2234: Apache CouchDB Cross Site Request Forgery Attack (Jan Lehnardt <jan@...che.org>)
RELEASE: SMB2 REMOTE EXPLOIT (VISTA SP1/SP2) + HACKTRO ("Piotr Bania" <bania.piotr@...il.com>)
[USN-972-1] FreeType vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-973-1] KOffice vulnerabilities (Jamie Strandboge <jamie@...onical.com>)
Geolocation spoofing and other UI woes (Michal Zalewski <lcamtuf@...edump.cx>)
Re: Geolocation spoofing and other UI woes (Michal Zalewski <lcamtuf@...edump.cx>)
Re: CCBILL.COM Internet billing service multiple vulnerabilities (Jeffrey Walton <noloader@...il.com>)
Re: CCBILL.COM Internet billing service multiple vulnerabilities (Ed Carp <erc@...ox.com>)

August 18 (8 messages)

Ad Bard Network(adbard.net) - network-wide Cross Site Scripting Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
Linkbucks.com XSS & URL Redirection Vulnerabilities (YGN Ethical Hacker Group <lists@...g.net>)
[SECURITY] [DSA 2092-1] New lxr-cvs packages fix cross-site scripting (Sebastien Delafond <seb@...ian.org>)
[SECURITY] [DSA 1919-2] New smarty packages fix regression (Thijs Kinkhorst <thijs@...ian.org>)
Medium security hole in Rekonq web browser (Tim Brown <timb@...-dimension.org.uk>)
Better Security Through Sacrificing Maidens (Pete Herzog <lists@...com.org>)
Websense/ISA "Via:" Bypass Redux (<dink@...inkydink.com>)
freebsd 8.* 7.* generic private local root exploit Hacktro ("HI-TECH ." <isowarez.isowarez.isowarez@...glemail.com>)

August 19 (6 messages)

NSOADV-2010-005: SonicWALL E-Class SSL-VPN ActiveX Control format string overflow (NSO Research <nso-research@...iriu.de>)
[SECURITY] [DSA 2093-1] New ghostscript packages fix several vulnerabilities (Giuseppe Iuculano <iuculano@...ian.org>)
Re: freebsd 8.* 7.* generic private local root exploit Hacktro (sine@...p.sk)
Re: Ad Bard Network(adbard.net) - network-wide Cross Site Scripting Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
Re: freebsd 8.* 7.* generic private local root exploit Hacktro ("HI-TECH ." <isowarez.isowarez.isowarez@...glemail.com>)
[USN-974-1] Linux kernel vulnerabilities (Jamie Strandboge <jamie@...onical.com>)

August 20 (6 messages)

Nagios XI Login XSS (Adam Baldwin <adam_baldwin@...nuity-is.com>)
[SECURITY] [DSA 2094-1] New Linux 2.6.26 packages fix several issues (dann frazier <dannf@...ian.org>)
Ruxcon 2010 Final Call For Papers (cfp@...con.org.au)
Secunia Research: Novell iPrint Client "call-back-url" Buffer Overflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
phpMyAdmin 3.3.5 / 2.11.10 <= Cross Site Scripting (XSS) Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
[ MDVSA-2010:155 ] mysql (security@...driva.com)

August 21 (3 messages)

Re: Ad Bard Network(adbard.net) - network-wide Cross Site Scripting Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
Re: 2Wire Broadband Router Session Hijacking Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
Opera & Google chrome lulz (brzlolz@...hmail.com)

August 22 (3 messages)

[ MDVSA-2010:156 ] freetype2 (security@...driva.com)
[ MDVSA-2010:157 ] freetype2 (security@...driva.com)
e107 CMS Multiple Vulnerabilities (Justin Klein Keane <justin@...irish.net>)

August 23 (16 messages)

[Bkis-04-2010] Multiple Vulnerabilities in OpenBlog ("Bkis" <minhbq@...v.com.vn>)
PAPER: Security Mitigations for Return-Oriented Programming Attacks ("Piotr Bania" <bania.piotr@...il.com>)
VWar 1.6.1 R2 Multiple Remote Vulnerabilities (Darren McDonald <athena@...donald.net>)
SDRF vulns in webapps and browsers (Ð’Ð»Ð°Ð´Ð¸Ð¼Ð¸Ñ€ Ð’Ð¾Ñ€Ð¾Ð½Ñ†Ð¾Ð² <vladimir.vorontsov@...ec.ru>)
[ MDVSA-2010:158 ] squirrelmail (security@...driva.com)
[SECURITY] [DSA 2095-1] New lvm2 packages fix denial of service (Giuseppe Iuculano <iuculano@...ian.org>)
Secunia Research: Mono libgdiplus Image Processing Three Integer Overflows (Secunia Research <remove-vuln@...unia.com>)
[ MDVSA-2010:159 ] gv (security@...driva.com)
[ MDVSA-2010:159 ] gv (security@...driva.com)
[ MDVSA-2010:159 ] gv (security@...driva.com)
TPTI-10-08: Novell iPrint Client Browser PluginGetDriverFile Uninitialized Pointer Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pin…)
ZDI-10-155: Cisco WebEx Player ARF String Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-156: IBM Lotus Notes Autonomy KeyView Word Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-157: IBM Lotus Notes Autonomy KeyView Office Shape Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-158: IBM Lotus Notes Autonomy KeyView WK3 Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-159: IBM Lotus Notes Autonomy KeyView WK3 Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)

August 24 (27 messages)

Re: On the iPhone PDF and kernel exploit (Jose Miguel Esparza <jesparza@...rnal-todo.com>)
Athena SSL Cipher Scanner (Darren McDonald <athena@...donald.net>)
WinAppDbg 1.4 is out! (Mario Vilas <mvilas@...il.com>)
London DEFCON - DC4420 - August meet - Wednesday 25th August 2010 (Major Malfunction <majormal@...ate-radio.org>)
[ MDVSA-2010:160 ] cacti (security@...driva.com)
Exploit for Foxit Reader <= 4.0 (CVE-2010-1797 - PDF Jailbreakme vuln) (Jose Miguel Esparza <jesparza@...rnal-todo.com>)
Re: [Bkis-04-2010] Multiple Vulnerabilities in OpenBlog (Henri Salo <henri@...v.fi>)
Mod-X Multiple Vulnerabilities (exploit chaining) (Tyler Borland <tborland1@...il.com>)
Facebook Information Leakage ... Again (GulfTech Security Research <security@...ftech.org>)
t2â€²10 Challenge to be released 2010-08-28 10:00 EEST (Tomi Tuominen <tomi.tuominen@...fi>)
DLL hijacking (Windows Address Book - wab32res.dll) (matt <matt@...ackvector.org>)
Re: DLL hijacking (Windows Address Book -wab32res.dll) ("Sherwyn" <infolookup@...il.com>)
[ MDVSA-2010:161 ] vte (security@...driva.com)
TPTI-10-10: Adobe Shockwave tSAC Chunk Invalid Seek Memory Corruption Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
TPTI-10-12: Adobe Shockwave TextXtra Allocator Integer Overflow Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
TPTI-10-11: Adobe Shockwave tSAC Chunk Pointer Offset Memory Corruption Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
TPTI-10-09: Adobe Shockwave CSWV Chunk Memory Corruption Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
TPTI-10-13: Adobe Shockwave Director tSAC Chunk Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
TPTI-10-15: Adobe Shockwave Director mmap Trusted Chunk Size Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
TPTI-10-14: Adobe Shockwave Director rcsL Chunk Pointer Offset Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-160: Adobe Shockwave Player Director File FFFFFF45 Record Processing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.…)
ZDI-10-161: Adobe Shockwave Director PAMI Chunk Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-162: Adobe Shockwave Director rcsL Chunk Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-163: Adobe Shockwave Director tSAC Chunk Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-164: Adobe Shockwave Player Director File FFFFFF88 Record Processing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.…)
Nagios XI users.php SQL Injection (Adam Baldwin <adam_baldwin@...nuity-is.com>)
iDefense Security Advisory 08.24.10: Adobe Shockwave Player Memory Corruption Vulnerability (iDefense Labs <labs-no-reply@...fense.com>)

August 25 (33 messages)

Re: WinAppDbg 1.4 is out! (Aleksandr Yampolskiy <ayampolskiy@...t.com>)
[SECURITY] [DSA 2096-1] New zope-ldapuserfolder packages fix authentication bypass (Sebastien Delafond <seb@...ian.org>)
DLL hijacking on Linux (Tim Brown <timb@...-dimension.org.uk>)
Re: DLL hijacking on Linux (Mihai DonÈ›u <mihai.dontu@...il.com>)
Re: DLL hijacking on Linux (Tim Brown <tmb@...35.com>)
Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-2882 (Rodrigo Branco <rbranco@...ckpoint.com>)
Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-2869 (Rodrigo Branco <rbranco@...ckpoint.com>)
Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-2868 (Rodrigo Branco <rbranco@...ckpoint.com>)
Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-2864 (Rodrigo Branco <rbranco@...ckpoint.com>)
Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-2881 (Rodrigo Branco <rbranco@...ckpoint.com>)
Adobe Shockwave Player Memory Corruption Vulnerability - CVE-2010-2880 (Rodrigo Branco <rbranco@...ckpoint.com>)
Re: WinAppDbg 1.4 is out! (Mario Vilas <mvilas@...il.com>)
Secunia Research: KDE Okular PDB Parsing RLE Decompression Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
Cisco Security Advisory: Cisco Unified Communications Manager Denial of Service Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@c…)
Cisco Security Advisory: Cisco Unified Presence Denial of Service Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
[USN-976-1] Tomcat vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-977-1] MoinMoin vulnerabilities (Marc Deslauriers <marc.deslauriers@...onical.com>)
Re: Reliable reports on attacks on medical software and IT-systems available? (Shawn Merdinger <shawnmer@...il.com>)
ZDI-10-165: Trend Micro Internet Security Pro 2010 ActiveX extSetOwner Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: DLL hijacking on Linux (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: DLL hijacking on Linux (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: DLL hijacking on Linux (bk <chort0@...il.com>)
Re: phpMyAdmin 3.3.5 / 2.11.10 <= Cross Site Scripting (XSS) Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
Joomla! Component com_bc Cross Script Scripting (XSS) Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
BlastChat Chat Client Component version 3.3 <= Cross Script Scripting (XSS) Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
Method to encode DLL payloads for hijacking purposes. (matt <matt@...ackvector.org>)
Joomla! Component com_bcaccount Persistent Cross Script Scripting (XSS) Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
Re: phpMyAdmin 3.3.5 / 2.11.10 <= Cross Site Scripting (XSS) Vulnerability (Christian Sciberras <uuf6429@...il.com>)
Re: phpMyAdmin 3.3.5 / 2.11.10 <= Cross Site Scripting (XSS) Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
Re: DLL hijacking on Linux (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
Multiple vulnerabilities in eSitesBuilder ("MustLive" <mustlive@...security.com.ua>)
Re: DLL hijacking on Linux (paul.szabo@...ney.edu.au)
Details of cisco-sa-20081022-asa security advisory? (Fernando Gont <fernando.gont@...il.com>)

August 26 (22 messages)

CyberLink products vulnerable to DLLHijacking (exploit dev <extraexploit@...il.com>)
YouTube remote unsubscribe exploit (Harry Strongburg <harry.fd@...ry.lu>)
Re: DLL hijacking on Linux (Noah Slater <nslater@...che.org>)
Re: DLL hijacking on Linux (Noah Slater <nslater@...che.org>)
Re: DLL hijacking on Linux (Paul Davis <paul.joseph.davis@...il.com>)
Mihalism Multi Host 5.0.2 cross-site scripting (XSS IsGhay <xssisghay@...glemail.com>)
Apple CoreGraphics (Preview) Memory Corruption Vulnerability - CVE-2010-1801 (Rodrigo Branco <rbranco@...ckpoint.com>)
Multiple Vulnerabilities in EncFS (Micha Riser <micha@...world.org>)
[HITB-Announce] HITB2010 SIGNINT Sessions (Hafez Kamal <aphesz@...kinthebox.org>)
Re: Athena SSL Cipher Scanner (Darren McDonald <athena@...donald.net>)
Re: Apple CoreGraphics (Preview) Memory Corruption Vulnerability - CVE-2010-1801 ("Jesse Masone" <jesse_masone@...s.k12.md.us>)
CAD 2D-3D Pipe designing software Microstation, Nero, Quicktime Pictureviwer vulnerable to DLL hijack attack (kalyan <kalyanakumar1985@...il.com>)
Security coding sequence (Saad Bin Saleem <sbin.saleem@...glemail.com>)
ZDI-10-166: RealNetworks RealPlayer Malformed IVR Object Index Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-10-167: RealNetworks RealPlayer FLV Parsing Multiple Integer Overflow Vulnerabilities (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
DLL hijacking with Autorun on a USB drive (matt <matt@...ackvector.org>)
[USN-974-2] Linux kernel regression (Jamie Strandboge <jamie@...onical.com>)
Re: DLL hijacking with Autorun on a USB drive (Dan Kaminsky <dan@...para.com>)
Re: DLL hijacking with Autorun on a USB drive (Atul Agarwal <atul@...fence.com>)
[ MDVSA-2010:162 ] kdegraphics4 (security@...driva.com)
Re: DLL hijacking with Autorun on a USB drive ("Sherwyn" <infolookup@...il.com>)
Re: DLL hijacking with Autorun on a USB drive (Christian Sciberras <uuf6429@...il.com>)

August 27 (44 messages)

[USN-979-1] okular vulnerability (Steve Beattie <sbeattie@...ntu.com>)
Re: DLL hijacking with Autorun on a USB drive (Valdis.Kletnieks@...edu)
Re: DLL hijacking with Autorun on a USB drive (Larry Seltzer <larry@...ryseltzer.com>)
Re: DLL hijacking with Autorun on a USB drive (paul.szabo@...ney.edu.au)
Re: DLL hijacking with Autorun on a USB drive ("Sherwyn" <infolookup@...il.com>)
Re: DLL hijacking with Autorun on a USB drive (Dan Kaminsky <dan@...para.com>)
Re: DLL hijacking with Autorun on a USB drive (paul.szabo@...ney.edu.au)
Re: DLL hijacking with Autorun on a USB drive (Dan Kaminsky <dan@...para.com>)
Re: DLL hijacking with Autorun on a USB drive (Valdis.Kletnieks@...edu)
Re: DLL hijacking with Autorun on a USB drive (paul.szabo@...ney.edu.au)
Re: DLL hijacking with Autorun on a USB drive (Dan Kaminsky <dan@...para.com>)
Re: DLL hijacking with Autorun on a USB drive (Dan Kaminsky <dan@...para.com>)
Re: DLL hijacking with Autorun on a USB drive (Valdis.Kletnieks@...edu)
Re: DLL hijacking with Autorun on a USB drive (Dan Kaminsky <dan@...para.com>)
Re: Geolocation spoofing and other UI woes (Pavel Machek <pavel@....cz>)
Re: Geolocation spoofing and other UI woes (Christian Sciberras <uuf6429@...il.com>)
Re: Geolocation spoofing and other UI woes (Christian Sciberras <uuf6429@...il.com>)
Re: DLL hijacking with Autorun on a USB drive (Larry Seltzer <larry@...ryseltzer.com>)
Re: DLL hijacking with Autorun on a USB drive (Valdis.Kletnieks@...edu)
Re: DLL hijacking with Autorun on a USB drive (Larry Seltzer <larry@...ryseltzer.com>)
Re: DLL hijacking with Autorun on a USB drive (Dan Kaminsky <dan@...para.com>)
Re: DLL hijacking with Autorun on a USB drive (Dan Kaminsky <dan@...para.com>)
Re: DLL hijacking with Autorun on a USB drive (Dan Kaminsky <dan@...para.com>)
Re: DLL hijacking with Autorun on a USB drive (Christian Sciberras <uuf6429@...il.com>)
Re: DLL hijacking with Autorun on a USB drive (Valdis.Kletnieks@...edu)
Re: DLL hijacking with Autorun on a USB drive (Dan Kaminsky <dan@...para.com>)
Re: DLL hijacking with Autorun on a USB drive (Christian Sciberras <uuf6429@...il.com>)
Re: DLL hijacking with Autorun on a USB drive (matt <matt@...ackvector.org>)
Re: DLL hijacking with Autorun on a USB drive (Valdis.Kletnieks@...edu)
PoTTy (Obfuscated PuTTy) vulnerable to storm's DLL Hijacking Exploit (<dink@...inkydink.com>)
Re: DLL hijacking with Autorun on a USB drive (Mario Vilas <mvilas@...il.com>)
OpenDLP 0.2.2 VirtualBox VM released (Andrew Gavin <andrew.opendlp@...il.com>)
Re: Apple CoreGraphics (Preview) Memory Corruption Vulnerability - CVE-2010-1801 (James Craig <phrostich@...glemail.com>)
Re: DLL hijacking with Autorun on a USB drive (Michal <michal@...rescope.co.uk>)
so like i hrd python devz like mudkipz? (spamtester spamtester <spamtesterspamtester@...il.com>)
Re: DLL hijacking with Autorun on a USB drive (Larry Seltzer <larry@...ryseltzer.com>)
Re: so like i hrd python devz like mudkipz? (Tim <tim-security@...tinelchicken.org>)
Re: so like i hrd python devz like mudkipz? (Benji <me@...ji.com>)
Re: DLL hijacking with Autorun on a USB drive (Larry Seltzer <larry@...ryseltzer.com>)
Re: so like i hrd python devz like mudkipz? (Benji <me@...ji.com>)
Re: so like i hrd python devz like mudkipz? (Benji <me@...ji.com>)
Re: DLL hijacking with Autorun on a USB drive (Florian Weimer <fw@...eb.enyo.de>)
Re: so like i hrd python devz like mudkipz? (Benji <me@...ji.com>)
Cisco Security Advisory: Cisco IOS XR Software Border Gateway Protocol Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)

August 28 (13 messages)

Re: DLL hijacking with Autorun on a USB drive (Arthur Orr <aorr@....com>)
Re: so like i hrd python devz like mudkipz? (spamtester spamtester <spamtesterspamtester@...il.com>)
Re: so like i hrd python devz like mudkipz? (spamtester spamtester <spamtesterspamtester@...il.com>)
Re: so like i hrd python devz like mudkipz? (spamtester spamtester <spamtesterspamtester@...il.com>)
Re: so like i hrd python devz like mudkipz? (spamtester spamtester <spamtesterspamtester@...il.com>)
Re: so like i hrd python devz like mudkipz? (spamtester spamtester <spamtesterspamtester@...il.com>)
TANDBERG <F9.0 SNMP DOS ("David Klein" <David.Klein@...ocus.com.au>)
Re: so like i hrd python devz like mudkipz? (dave b <db.pub.mail@...il.com>)
Notepad++ version 5.7 Insecure DLL Hijacking Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
nonsense fun: 100 000 bit rsa key (Georgi Guninski <guninski@...inski.com>)
Maxthon Browser version 2.5.15.1000 Insecure DLL Hijacking Vulnerability (dwmapi.dll) (YGN Ethical Hacker Group <lists@...g.net>)
QtWeb Browser version 3.3 build 043 Insecure DLL Hijacking Vulnerability (wintab32.dll) (YGN Ethical Hacker Group <lists@...g.net>)
Re: SQL Injection vulnerability in CMS WebManager-Pro ("MustLive" <mustlive@...security.com.ua>)

August 29 (1 message)

Re: Security coding sequence (Jeffrey Walton <noloader@...il.com>)

August 30 (15 messages)

Re: nonsense fun: 100 000 bit rsa key (Jeffrey Walton <noloader@...il.com>)
ekoparty Security Conference 2010 Announcements (Federico Kirschbaum <fedek@...obyte.com.ar>)
[SECURITY] [DSA 2099-1] New OpenOffice.org packages fix arbitrary code execution (joey@...odrom.org (Martin Schulze))
[SECURITY] [DSA 2097-1] New phpmyadmin packages fix several vulnerabilities (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 2098-1] New typo3-src packages fix several vulnerabilities (Thijs Kinkhorst <thijs@...ian.org>)
EC2ND 2010, Call for Participation (Konrad Rieck <konrad.rieck@...berlin.de>)
Orange Spain disclosing user phone number ("xufi ." <xufxuf@...il.com>)
Re: Orange Spain disclosing user phone number (Collin Mulliner <collin@...aversion.net>)
[ MDVSA-2010:163 ] phpmyadmin (security@...driva.com)
[ MDVSA-2010:164 ] phpmyadmin (security@...driva.com)
Re: DLL hijacking with Autorun on a USB drive (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
[ MDVSA-2010:165 ] libHX (security@...driva.com)
Re: QtWeb Browser version 3.3 build 043 Insecure DLL Hijacking Vulnerability (wintab32.dll) (security curmudgeon <jericho@...rition.org>)
[SECURITY] [DSA 2100-1] New openssl packages fix double free (Moritz Muehlenhoff <jmm@...ian.org>)
Re: DLL hijacking with Autorun on a USB drive (Dan Kaminsky <dan@...para.com>)

August 31 (34 messages)

Re: DLL hijacking with Autorun on a USB drive (coderman <coderman@...il.com>)
Re: Orange Spain disclosing user phone number (B1towel <ben@...owel.com>)
What is your preferable hacking gadget? (Richard Miles <richard.k.miles@...glemail.com>)
question regarding RSA (jf@...s74ur.corenetworks.net)
Re: What is your preferable hacking gadget? (Christian Sciberras <uuf6429@...il.com>)
[USN-980-1] bogofilter vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
[USN-981-1] libwww-perl vulnerability (Marc Deslauriers <marc.deslauriers@...onical.com>)
Vulnerabilities in NING networks (GulfTech Security Research <security@...ftech.org>)
Re: Expired certificate (Leif Nixon <nixon@....liu.se>)
Re: DLL hijacking with Autorun on a USB drive (Charles Morris <cmorris@...odu.edu>)
Re: DLL hijacking with Autorun on a USB drive (Christian Sciberras <uuf6429@...il.com>)
[ MDVSA-2010:166 ] libgdiplus (security@...driva.com)
ZDI-10-168: Apple QuickTime ActiveX _Marshaled_pUnk Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll) (YGN Ethical Hacker Group <lists@...g.net>)
Re: DLL hijacking with Autorun on a USB drive (paul.szabo@...ney.edu.au)
Re: DLL hijacking with Autorun on a USB drive (Charles Morris <cmorris@...odu.edu>)
Re: DLL hijacking with Autorun on a USB drive (Valdis.Kletnieks@...edu)
Re: DLL hijacking with Autorun on a USB drive (Charles Morris <cmorris@...odu.edu>)
Re: DLL hijacking with Autorun on a USB drive (Dan Kaminsky <dan@...para.com>)
[SECURITY] [DSA 2101-1] New wireshark packages fix several vulnerabilities (Moritz Muehlenhoff <jmm@...ian.org>)
Re: DLL hijacking with Autorun on a USB drive (Christian Sciberras <uuf6429@...il.com>)
Re: DLL hijacking with Autorun on a USB drive (paul.szabo@...ney.edu.au)
Re: DLL hijacking with Autorun on a USB drive (Christian Sciberras <uuf6429@...il.com>)
Re: DLL hijacking with Autorun on a USB drive (paul.szabo@...ney.edu.au)
Re: DLL hijacking with Autorun on a USB drive (Valdis.Kletnieks@...edu)
Re: DLL hijacking with Autorun on a USB drive (Christian Sciberras <uuf6429@...il.com>)
Re: DLL hijacking with Autorun on a USB drive (Christian Sciberras <uuf6429@...il.com>)
Re: DLL hijacking with Autorun on a USB drive (Dan Kaminsky <dan@...para.com>)
Re: DLL hijacking with Autorun on a USB drive (paul.szabo@...ney.edu.au)
Re: DLL hijacking with Autorun on a USB drive (paul.szabo@...ney.edu.au)
Re: DLL hijacking with Autorun on a USB drive (Dan Kaminsky <dan@...para.com>)
Re: DLL hijacking with Autorun on a USB drive (coderman <coderman@...il.com>)
Re: DLL hijacking with Autorun on a USB drive (Dan Kaminsky <dan@...para.com>)
Re: DLL hijacking with Autorun on a USB drive (Valdis.Kletnieks@...edu)

440 messages

Powered by blists - more mailing lists