full-disclosure mailing list - 2011/06

Messages by day:

June 1 (24 messages)

• cherokee server admin vulnerable to csrf (dave b <db.pub.mail@...il.com>)
• [SECURITY] [DSA 2247-1] rails security update (Thijs Kinkhorst <thijs@...ian.org>)
• [SECURITY] [DSA 2248-1] ejabberd security update (Nico Golde <nion@...ian.org>)
• [SECURITY] [DSA 2249-1] jabberd14 security update (Nico Golde <nion@...ian.org>)
• [SECURITY] [DSA 2250-1] citadel security update (Nico Golde <nion@...ian.org>)
• Re: find11.html ("Hartley, Christopher J." <hartley.87@....edu>)
• packet replay tools for wlan (�蹫�� <kimms@...osec.co.kr>)
• Re: Ra-Guard evasion (new Internet-Drafts) (Marc Heuse <mh@...sec.de>)
• Last Mile, June 5th | CfP: VALID 2011 || October 23-28, 2011 - Barcelona, Spain (Cristina Pascual<cris.pascual.gonzalez@...il.com>)
• Re: packet replay tools for wlan (Ross.Bushby@...ech-ict.co.uk)
• [ MDVSA-2011:104 ] bind (security@...driva.com)
• MSN Live Password Decryptor v2.0 is Released (SecurityXploded Group <contact@...urityxploded.com>)
• [ MDVSA-2011:105 ] wireshark (security@...driva.com)
• Netgear WNDAP350 root password leak (Juerd Waalboer <juerd@....nl>)
• Cisco Security Advisory: Default Credentials Vulnerability in Cisco Network Registrar (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified IP Phones 7900 Series (Cisco Systems Product Security Incident Response Team <psirt@...co.co…)
• New CSRF and XSS vulnerabilities in ADSL modem Callisto 821+ ("MustLive" <mustlive@...security.com.ua>)
• Cisco Security Advisory: Default Credentials for root Account on the Cisco Media Experience Engine 5600 (Cisco Systems Product Security Incident Response Team …)
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client (Cisco Systems Product Security Incident Response Team <psirt@...c…)
• Re: MSN Live Password Decryptor v2.0 is Released ("Thor (Hammer of God)" <thor@...merofgod.com>)
• FW: What’s Inside: June 22 Webcast – State of SSL on the Internet - Register Now ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Re: What's Inside: June 22 Webcast - State of SSL on the Internet - Register Now ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Cross-Site Scripting vulnerability in Nagios ("sschurtz@...nline.de" <sschurtz@...nline.de>)
• Cross-Site Scripting vulnerability in Icinga ("sschurtz@...nline.de" <sschurtz@...nline.de>)

• [SECURITY] [DSA 2251-1] subversion security update (Thijs Kinkhorst <thijs@...ian.org>)
• Re: What's Inside: June 22 Webcast - State of SSL on the Internet - Register Now ("McGhee, Eddie" <Eddie.McGhee@....com>)
• Re: Ra-Guard evasion (new Internet-Drafts) (Fernando Gont <fernando@...t.com.ar>)
• FFFjacking (".cCuMiNn." <ccuminn@...m.cz>)
• COM Server-Based Binary Planting Proof Of Concept ("ACROS Security Lists" <lists@...os.si>)
• Re: COM Server-Based Binary Planting Proof Of Concept (Dan Kaminsky <dan@...para.com>)
• Multi-Tech Systems MultiModem iSMS Multiple XSS Vulnerabilities (Nathan Power <np@...uritypentest.com>)
• Re: COM Server-Based Binary Planting Proof OfConcept ("ACROS Security Lists" <lists@...os.si>)
• Re: find11.html (Henri Salo <henri@...v.fi>)
• Re: COM Server-Based Binary Planting Proof OfConcept ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Re: COM Server-Based Binary Planting ProofOfConcept ("Mitja Kolsek" <mitja.kolsek@...os.si>)
• Re: COM Server-Based Binary Planting ProofOfConcept ("Mitja Kolsek" <mitja.kolsek@...os.si>)
• New CSRF and XSS vulnerabilities in ADSL modem Callisto 821+ ("MustLive" <mustlive@...security.com.ua>)
• Re: COM Server-Based Binary Planting ProofOfConcept (Dan Kaminsky <dan@...para.com>)
• Re: COM Server-Based Binary Planting ProofOfConcept ("Thor (Hammer of God)" <thor@...merofgod.com>)
• AST-2011-007 (Jonathan Rose <security@...ium.com>)
• Re: COM Server-Based Binary Planting ProofOfConcept (yati sagade <yati.sagade@...il.com>)
• What are some top universities in Europe and States for Information Security (persuz9213x@...h.com)
• Re: What are some top universities in Europe and States for Information Security (Justin Klein Keane <justin@...irish.net>)
• [SECURITY] [DSA 2252-1] dovecot security update (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: What are some of the top ... (t0hitsugu <tohitsugu@...il.com>)
• Re: What are some of the top ... (Cal Leeming <cal@...whisper.co.uk>)
• Re: What are some of the top ... (Benji <me@...ji.com>)
• Re: What are some of the top ... (Paul Heinlein <heinlein@...boa.com>)
• Re: What are some of the top ... (Cal Leeming <cal@...whisper.co.uk>)
• Re: What are some of the top ... (Christian Sciberras <uuf6429@...il.com>)
• Re: What are some of the top ... (Benji <me@...ji.com>)
• Re: COM Server-Based Binary Planting ProofOfConcept (Mitja Kolsek <mitja.kolsek@...os.si>)

• Re: What are some top universities in Europe and States for Information Security (Jeffrey Walton <noloader@...il.com>)
• Re: What are some of the top ... (t0hitsugu <tohitsugu@...il.com>)
• VMSA-2011-0009 VMware hosted product updates, ESX patches and VI , Client update resolve multiple security issues (VMware Security Response Team <security@...a…)
• Re: HTB22999: Multiple SQL Injections in A Really Simple Chat (ARSC) (Henri Salo <henri@...v.fi>)
• Re: HTB22997: XSS in A Really Simple Chat (ARSC) (Henri Salo <henri@...v.fi>)
• Re: What are some of the top ... (Georgi Guninski <guninski@...inski.com>)
• Re: What are some of the top ... (Charles Morris <cmorris@...odu.edu>)
• ZDI-11-171: Sybase OneBridge Mobile Data Suite Format String Remore Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• VMware Tools Multiple Vulnerabilities (VSR Advisories <advisories@...curity.com>)
• New CSRF and XSS vulnerabilities in ADSL modem Callisto 821+ ("MustLive" <mustlive@...security.com.ua>)
• Warning is about vulnerability (Григорий Братислава <musntlive@...il.com>)

• Fastweb MyFastpage Authentication Bypass (Emilio Pinna <ncl01@...il.it>)
• [SECURITY] [DSA 2253-1] fontforge security update (Thijs Kinkhorst <thijs@...ian.org>)
• Re: Warning is about vulnerability (Jubei Trippataka <vpn.1.fanatic@...il.com>)
• AppSec USA 2011 CFP Reminder, CTF Pre-Conference Challenge #2 (Adam Baso <adam.baso@...sp.org>)
• [ MDVSA-2011:106 ] subversion (security@...driva.com)
• IL and XSS vulnerabilities in multiple themes for WordPress ("MustLive" <mustlive@...security.com.ua>)
• Re: IL and XSS vulnerabilities in multiple themes for WordPress (Shyaam <shyaam@...il.com>)

• Invitation to connect on LinkedIn (Shubhneet Goel <skg102@...il.com>)
• Re: Invitation to connect on LinkedIn (Shubhneet Goel <skg102@...il.com>)
• New CSRF and XSS vulnerabilities in ADSL modem Callisto 821+ ("MustLive" <mustlive@...security.com.ua>)
• [SECURITY] [DSA 2254-1] oprofile security update (Luciano Bello <luciano@...ian.org>)
• Re: IL and XSS vulnerabilities in multiple themes for WordPress ("MustLive" <mustlive@...security.com.ua>)

• LulzSec EXPOSED! (lulzfail@...hmail.com)
• The Flash JIT Spraying is Back (TT Security <ttsecurity@...il.com>)
• Re: What are some of the top ... (taha <tahacalypse@...il.com>)
• Re: LulzSec EXPOSED! (Andreas Bogk <andreas@...reas.org>)
• Re: LulzSec EXPOSED! (Gichuki John Chuksjonia <chuksjonia@...il.com>)
• Re: LulzSec EXPOSED! (T Biehn <tbiehn@...il.com>)
• Re: LulzSec EXPOSED! (Benji <me@...ji.com>)
• Re: LulzSec EXPOSED! (vtlists@...e.de)
• Re: LulzSec EXPOSED! (Andreas Bogk <andreas@...reas.org>)
• Re: LulzSec EXPOSED! (Benji <me@...ji.com>)
• Re: LulzSec EXPOSED! (Steve Clement <steve@...alhost.lu>)
• Re: LulzSec EXPOSED! (T Biehn <tbiehn@...il.com>)
• Re: LulzSec EXPOSED! (Benji <me@...ji.com>)
• Re: LulzSec EXPOSED! (hoaxxxx@...hmail.com)
• New CSRF and XSS vulnerabilities in ADSL modem Callisto 821+ ("MustLive" <mustlive@...security.com.ua>)
• Re: LulzSec EXPOSED!(FAKE) (mclulzzz@...e-mail.net)
• [SECURITY] [DSA 2255-1] libxml2 security update (Thijs Kinkhorst <thijs@...ian.org>)
• ZDI-11-172: Novell iPrint nipplib.dll uri Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• Re: IL and XSS vulnerabilities in multiple themes for WordPress (David Sopas <davidsopas@...il.com>)
• ZDI-11-173: Novell iPrint nipplib.dll profile-time Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-175: Novell iPrint nipplib.dll file-date-time Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-176: Novell iPrint nipplib.dll driver-version Remote Code Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-178: Novell iPrint nipplib.dll client-file-name Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-180: Novell iPrint op-printer-list-all-jobs cookie Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-181: Novell iPrint op-printer-list-all-jobs url Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-174: Novell iPrint nipplib.dll profile-name Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-177: Novell iPrint nipplib.dll core-package Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-179: Novell iPrint nipplib.dll iprint-client-config-info Remote Code Execution Vulnerability ("Fly, Kate" <kate.kate.fly@...com>)
• Re: LulzSec EXPOSED!(FAKE) (Cal Leeming <cal@...whisper.co.uk>)
• Re: LulzSec EXPOSED!(FAKE) (ohwho@...hmail.com)

• Re: LulzSec EXPOSED! (Jen Savage <savagejen@...il.com>)
• Re: LulzSec EXPOSED!(FAKE) (Erick Staal <elstaal@...all.nl>)
• Re: Warning is about vulnerability (coderman <coderman@...il.com>)
• New attack vector for sale, firewall bypass (Marshall Whittaker <marshallwhittaker@...il.com>)
• Re: New attack vector for sale, firewall bypass (Benji <me@...ji.com>)
• [ MDVSA-2011:107 ] fetchmail (security@...driva.com)
• Re: New attack vector for sale, firewall bypass (Philipp Hagemeister <phihag@...hag.de>)
• Re: New attack vector for sale, firewall bypass (Dan Rosenberg <dan.j.rosenberg@...il.com>)
• Re: LulzSec EXPOSED!(FAKE) (Georgi Guninski <guninski@...inski.com>)
• Multiple Cross-Site Scripting vulnerabilities in BLOG:CMS ("sschurtz@...nline.de" <sschurtz@...nline.de>)
• Re: IL and XSS vulnerabilities in multiple themes for WordPress ("MustLive" <mustlive@...security.com.ua>)
• Re: IL and XSS vulnerabilities in multiple themes for WordPress (Henri Salo <henri@...v.fi>)
• Re: New attack vector for sale, firewall bypass (Marshall Whittaker <marshallwhittaker@...il.com>)
• Re: New attack vector for sale, firewall bypass (Dan Rosenberg <dan.j.rosenberg@...il.com>)
• Re: New attack vector for sale, firewall bypass (ichib0d crane <themadichib0d@...il.com>)
• RSA SecurID tokens are still useful !!! ("Z" <Z@...hall.net>)
• Re: New attack vector for sale, firewall bypass (ascii <ascii@...amail.com>)
• New vulnerabilities in ADSL modem Callisto 821+ ("MustLive" <mustlive@...security.com.ua>)

• Re: New attack vector for sale, firewall bypass (Nick FitzGerald <nick@...us-l.demon.co.uk>)
• [HITB-Announce] HITB2011AMS Conference Materials & Photos (Hafez Kamal <aphesz@...kinthebox.org>)
• Re: RSA SecurID tokens are still useful !!! (Tom Keetch <twkeetch@...il.com>)
• Wordpress "gd star rating" plougin 0day SQL injection (auto19205689@...hmail.com)
• full-disclosure-- (Sabahattin Gucukoglu <mail@...ahattin-gucukoglu.com>)
• Re: full-disclosure-- (T Biehn <tbiehn@...il.com>)
• Re: full-disclosure-- (Sabahattin Gucukoglu <mail@...ahattin-gucukoglu.com>)
• ZDI-11-182: Oracle Java IE Browser Plugin Corrupted Window Procedure Hook Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.co…)
• ZDI-11-183: Oracle Java ICC Profile MultiLanguage 'mluc' Tag Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-184: Oracle Java ICC Profile Sequence Description 'pseq' Tag Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.…)
• ZDI-11-185: Oracle Java ICC Profile 'bfd ' Tag Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-186: Oracle Java ICC Profile Multi-Language 'curv' Tag Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-187: Oracle Java ICC Profile clrt Tag Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-188: Oracle Java ICC Profile ncl2 Count Tag Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-189: Oracle Java ICC Profile ncl2 DevCoords Tag Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-190: Oracle Java ICC Profile 'crdi' Tag Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-191: Oracle Java ICC Screening Tag Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-192: Oracle Java Web Start Command Argument Injection Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• NiX API (nix@...roxylists.com)
• Re: full-disclosure-- ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Re: NiX API (phocean <0x90@...cean.net>)
• Re: NiX API (mrx <mrx@...pergander.org.uk>)

• Re: full-disclosure-- (Stephen <stephen@...yhat-security.com>)
• tabnapping (t0hitsugu <tohitsugu@...il.com>)
• [Announcement] ClubHACK Magazine Issue 17-June 2011 released (Abhijeet Patil <getabhijeetpatil@...il.com>)
• Re: tabnapping (adam <adam@...sy.net>)
• Re: LulzSec EXPOSED! ("McGhee, Eddie" <Eddie.McGhee@....com>)
• Re: full-disclosure-- ("McGhee, Eddie" <Eddie.McGhee@....com>)
• FreePBX - Module Administration Arbitrary File Upload (Tiago Ferreira <tiago@...igatorteam.org>)
• List Charter (John Cartwright <johnc@...k.org.uk>)
• Re: NiX API (nix@...roxylists.com)
• Re: NiX API (James Rankin <kz20fl@...glemail.com>)
• Re: NiX API (Valdis.Kletnieks@...edu)
• Re: NiX API (nix@...roxylists.com)
• Re: NiX API (mrx <mrx@...pergander.org.uk>)
• Re: NiX API (nix@...roxylists.com)
• Re: NiX API (David Ford <david@...e-labs.org>)
• Re: NiX API (nix@...roxylists.com)
• Re: NiX API (adam <adam@...sy.net>)
• Re: NiX API (jabea@...ea.net)
• Re: NiX API (nix@...roxylists.com)
• Re: NiX API (Aaron Turner <synfinatic@...il.com>)
• Re: FreePBX - Module Administration Arbitrary File Upload (Tyler Borland <tborland1@...il.com>)
• Re: LulzSec EXPOSED! (Andrew D Kirch <trelane@...lane.net>)
• Re: NiX API (nix@...roxylists.com)
• Re: FreePBX - Module Administration Arbitrary File Upload (Tiago Ferreira <tiago@...igatorteam.org>)
• Re: NiX API (Aaron Turner <synfinatic@...il.com>)
• Re: NiX API ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Re: NiX API (nix@...roxylists.com)
• Re: NiX API (Aaron Turner <synfinatic@...il.com>)
• (no subject) (fulldisc@....hu)
• Re: FreePBX - Module Administration Arbitrary File Upload ("-= Glowing Doom =-" <secn3t@...il.com>)
• Re: FreePBX - Module Administration Arbitrary File Upload ("-= Glowing Doom =-" <secn3t@...il.com>)
• Re: (no subject) (nix@...roxylists.com)

• Re: Full-Disclosure Digest, Vol 76, Issue 12 ("Ben" <ben@...owel.com>)
• Re: (no subject) (Valdis.Kletnieks@...edu)
• Re NiX API ("TOR" <fulldisc@....hu>)
• Re: (no subject) (nix@...roxylists.com)
• Re: (no subject) ("Zach C." <fxchip@...il.com>)
• Re: NiX API (Rove Monteux <rove.monteux@...id-rock.com>)
• [SECURITY] [DSA 2256-1] tiff security update (Thijs Kinkhorst <thijs@...ian.org>)
• Call for Participation: DIMVA 2011 (Konrad Rieck <konrad.rieck@...berlin.de>)
• Re: NiX API (Haxxor Security <h@...r.se>)
• Re: Full-Disclosure Digest, Vol 76, Issue 12 (Rhonda Kreklau <rhonda.kreklau@...il.com>)
• Re: Full-Disclosure Digest, Vol 76, Issue 12 (Sabahattin Gucukoglu <mail@...ahattin-gucukoglu.com>)
• a new way to detect firefox extensions (IEhrepus <5up3rh3i@...il.com>)
• Absolute Sownage (A concise history of recent Sony hacks) (Jeffrey Walton <noloader@...il.com>)
• [SECURITY] [DSA 2257-1] vlc security update (Nico Golde <nion@...ian.org>)
• New CSRF and XSS vulnerabilities in ADSL modem Callisto 821+ ("MustLive" <mustlive@...security.com.ua>)
• Re: Absolute Sownage (A concise history of recent Sony hacks) (mrx <mrx@...pergander.org.uk>)

• Re: Absolute Sownage (A concise history of recent Sony hacks) (Nick FitzGerald <nick@...us-l.demon.co.uk>)
• Re: Absolute Sownage (A concise history of recent Sony hacks) (mrx <mrx@...pergander.org.uk>)
• Re: Absolute Sownage (A concise history of recent Sony hacks) (Valdis.Kletnieks@...edu)
• Re: Absolute Sownage (A concise history of recent Sony hacks) (Georgi Guninski <guninski@...inski.com>)
• Re: Absolute Sownage (A concise history of recent Sony hacks) (Nick FitzGerald <nick@...us-l.demon.co.uk>)
• Re: Absolute Sownage (A concise history of recent Sony hacks) (Sihan <sihanzheng@...il.com>)
• phion netfence / Barracuda NG Firewall: Remote Command Execution with root Privileges (mailinglists <ml@...key-cert.at>)
• Contact for reporting Facebook vulnerability (Madhur Ahuja <ahuja.madhur@...il.com>)
• Re: Contact for reporting Facebook vulnerability (Andrew D Kirch <trelane@...lane.net>)
• Re: Contact for reporting Facebook vulnerability (Andrew D Kirch <trelane@...lane.net>)
• Re: Contact for reporting Facebook vulnerability (Madhur Ahuja <ahuja.madhur@...il.com>)
• Re: Contact for reporting Facebook vulnerability (Andrew D Kirch <trelane@...lane.net>)
• Re: Contact for reporting Facebook vulnerability (adam <adam@...sy.net>)
• Re: Contact for reporting Facebook vulnerability (Madhur Ahuja <ahuja.madhur@...il.com>)
• Re: Contact for reporting Facebook vulnerability (adam <adam@...sy.net>)
• Session Sidejacking in facebook (Madhur Ahuja <ahuja.madhur@...il.com>)
• Re: Session Sidejacking in facebook (adam <adam@...sy.net>)
• Re: Session Sidejacking in facebook ("Thor (Hammer of God)" <thor@...merofgod.com>)
• New CSRF and XSS vulnerabilities in ADSL modem Callisto 821+ ("MustLive" <mustlive@...security.com.ua>)
• Re: Contact for reporting Facebook vulnerability (Vipul Agarwal <vipul@...tygeeks.com>)
• Re: Contact for reporting Facebook vulnerability (Jeffrey Walton <noloader@...il.com>)
• Re: FreePBX - Module Administration Arbitrary File Upload ("-= Glowing Doom =-" <secn3t@...il.com>)

• POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC code an… ("-= Glowing Doom =-" <secn3t@...il.com>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC cod… ("-= Glowing Doom =-" <secn3t@...il.com>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC code and explain how … (adam <adam@...sy.net>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC cod… ("-= Glowing Doom =-" <secn3t@...il.com>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC code an… (Jeffrey Walton <noloader@...il.com>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC cod… (Christian Sciberras <uuf6429@...il.com>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC cod… ("-= Glowing Doom =-" <secn3t@...il.com>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC cod… (Christian Sciberras <uuf6429@...il.com>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC cod… (Christian Sciberras <uuf6429@...il.com>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC code and explain how … (adam <adam@...sy.net>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC cod… ("-= Glowing Doom =-" <secn3t@...il.com>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC cod… ("-= Glowing Doom =-" <secn3t@...il.com>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC code an… (Jeffrey Walton <noloader@...il.com>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC cod… ("-= Glowing Doom =-" <secn3t@...il.com>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC cod… (Christian Sciberras <uuf6429@...il.com>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC cod… ("-= Glowing Doom =-" <secn3t@...il.com>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC cod… ("-= Glowing Doom =-" <secn3t@...il.com>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC code and explain how … (adam <adam@...sy.net>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC cod… ("-= Glowing Doom =-" <secn3t@...il.com>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC cod… (Christian Sciberras <uuf6429@...il.com>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC cod… ("-= Glowing Doom =-" <secn3t@...il.com>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC cod… ("-= Glowing Doom =-" <secn3t@...il.com>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC cod… ("-= Glowing Doom =-" <secn3t@...il.com>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC code an… (Jeffrey Walton <noloader@...il.com>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC code and explain how … (adam <adam@...sy.net>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC cod… (Christian Sciberras <uuf6429@...il.com>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC cod… ("-= Glowing Doom =-" <secn3t@...il.com>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC cod… ("-= Glowing Doom =-" <secn3t@...il.com>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC code and explain… (phocean <0x90@...cean.net>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC code and explain how … (adam <adam@...sy.net>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC cod… ("-= Glowing Doom =-" <secn3t@...il.com>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC cod… ("-= Glowing Doom =-" <secn3t@...il.com>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC cod… ("-= Glowing Doom =-" <secn3t@...il.com>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC cod… ("-= Glowing Doom =-" <secn3t@...il.com>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC code and explain how … (adam <adam@...sy.net>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC code and explai… (Haxxor Security <h@...r.se>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC cod… ("-= Glowing Doom =-" <secn3t@...il.com>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC cod… ("-= Glowing Doom =-" <secn3t@...il.com>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC code … ("John R. Dennison" <jrd@...desas.com>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC cod… ("-= Glowing Doom =-" <secn3t@...il.com>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC cod… ("-= Glowing Doom =-" <secn3t@...il.com>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC cod… ("-= Glowing Doom =-" <secn3t@...il.com>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC code and explai… (Haxxor Security <h@...r.se>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC code and explain h… (ghost <ghosts@...il.com>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC code and explain… (phocean <0x90@...cean.net>)
• Re: Absolute Sownage (A concise history of recent Sony hacks) (Bruce Ediger <bediger@...atigery.com>)
• Re: Absolute Sownage (A concise history of recent Sony hacks) ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Jailbroken "Theme It" store sends username, pass, etc. cleartext (<ctruncer@...istophertruncer.com>)
• (fractal-Self__) : A theoretical introduction to Universe, Conscious Machines and Programming Ur-cells !!! (Bipin Gautam <bipin.gautam@...il.com>)
• Re: (fractal-Self__) : A theoretical introduction to Universe, Conscious Machines and Programming Ur-cells !!! (Michal Zalewski <lcamtuf@...edump.cx>)
• Re: (fractal-Self__) : A theoretical introduction to Universe, Conscious Machines and Programming Ur-cells !!! (Christian Sciberras <uuf6429@...il.com>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC code and explain how … (adam <adam@...sy.net>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC code and explain how … (adam <adam@...sy.net>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC code and explai… (Haxxor Security <h@...r.se>)

• Re: (no subject) (adam <adam@...sy.net>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC code and explain how … (adam <adam@...sy.net>)
• Re: (no subject) (adam <adam@...sy.net>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC code and explain how … (adam <adam@...sy.net>)
• Re: (no subject) (adam <adam@...sy.net>)
• Re: (no subject) (adam <adam@...sy.net>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC code and explain how … (adam <adam@...sy.net>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC code and explain how … (adam <adam@...sy.net>)
• Re: Absolute Sownage (A concise history of recent Sony hacks) (Georgi Guninski <guninski@...inski.com>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC code and explain how … (adam <adam@...sy.net>)
• [SECURITY] [DSA 2258-1] kolab-cyrus-imapd security update (Nico Golde <nico@...lde.de>)
• [SECURITY] [DSA 2259-1] fex security update (Nico Golde <nico@...lde.de>)
• Blind Sql Injection With Regular Expression (R00T_ATI <r00t_ati@...eam.net>)
• Re: Contact for reporting Facebook vulnerability (Erik Waher <ewaher@...il.com>)
• Re: Contact for reporting Facebook vulnerability (Abdelkader Boudih <terminale@...il.com>)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC code and explain how her… (cmdlnkid@...il.com)
• New CSRF and XSS vulnerabilities in ADSL modem Callisto 821+ ("MustLive" <mustlive@...security.com.ua>)
• [HITB-Announce] HITB eZine Issue #006 Released! (Hafez Kamal <aphesz@...kinthebox.org>)
• Re: Contact for reporting Facebook vulnerability (Madhur Ahuja <ahuja.madhur@...il.com>)
• [ MDVSA-2011:108 ] xerces-j2 (security@...driva.com)
• Re: POC for a simple gmail/possible code injection into html wich can be executed in an email, i will make the PoC code and explain ho… (Valdis.Kletnieks@...edu)
• [ MDVSA-2011:109 ] webmin (security@...driva.com)
• [Annoucement] ClubHack Magazine - Call for Articles (Abhijeet Patil <getabhijeetpatil@...il.com>)
• Re: Contact for reporting Facebook vulnerability ("TAS" <p0wnsauc3@...il.com>)
• Re: (fractal-Self__) : A theoretical introduction to Universe, Conscious Machines and Programming Ur-cells !!! (T Biehn <tbiehn@...il.com>)

• Last Day for AppSec USA 2011 CFP! (Adam Baso <adam.baso@...sp.org>)
• Re: (fractal-Self__) : A theoretical introduction to Universe, Conscious Machines and Programming Ur-cells !!! (Michael Simpson <mikie.simpson@...il.com>)
• DC4420 - London DEFCON - June meet - Tuesday 21st June 2011 (Major Malfunction <majormal@...ate-radio.org>)
• [SECURITY] [DSA 2259-1] rails security update (Florian Weimer <fw@...eb.enyo.de>)
• ZDI-11-193: Microsoft Internet Explorer DOM Modification Race Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-194: Microsoft Internet Explorer layout-grid-char style Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-195: Microsoft Internet Explorer selection.empty Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-196: Microsoft Internet Explorer HTTP 302 Redirect Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-197: Microsoft Internet Explorer vgx.dll imagedata Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-198: (Pwn2Own) Microsoft Internet Explorer Uninitialized Variable Information Leak Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-199: Oracle Java Soundbank Decompression Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-200: Adobe Shockwave AudioMixer Structure Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-201: Adobe Shockwave Cursor Structure Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-202: Adobe Shockwave rcsL String Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-203: Adobe Shockwave xtcL Chunk Parsing Integer Overflow Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-204: Adobe Shockwave TextXtra Text Element Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-205: Adobe Shockwave Missing Lctx Chunk Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-206: Adobe Shockwave GIF Decompression Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• CORE-2011-0203 - MS HyperV Persistent DoS Vulnerability (CORE Security Technologies Advisories <advisories@...esecurity.com>)
• ZDI-11-207: Adobe Shockwave tSAC Chunk String Termination Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-208: Adobe Shockwave rcsL Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-209: Adobe Shockwave rcsL Substructure Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-210: Adobe Shockwave rcsL Chunk Parsing Misallocation Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-211: Adobe Shockwave Shockwave 3d Asset.x32 DEMX Chunk 0xFFFFFF49 Field Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoi…)
• ZDI-11-212: Adobe Shockwave KEY* Chunk Invalid Size Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-213: Adobe Shockwave rcsL Trusted Offset Chunk Processing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-214: Adobe Shockwave CASt Chunk Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-215: Adobe Shockwave DEMX Chunk Multiple Field Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-216: Adobe Shockwave rcsL Chunk 16-bit Field Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-217: Adobe Shockwave Font Structure Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-218: Adobe Acrobat Reader tesselate.x3d Multimedia Playing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-219: Adobe Acrobat Reader 3difr.x3d Multimedia Playing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)

• Re: Absolute Sownage (A concise history of recent Sony hacks) (coderman <coderman@...il.com>)
• Apple Airport Update? (Jeffrey Walton <noloader@...il.com>)
• Re: Apple Airport Update? ("Dobbins, Roland" <rdobbins@...or.net>)
• Re: Apple Airport Update? (Jeffrey Walton <noloader@...il.com>)
• NSFOCUS SA2011-01 : Microsoft Internet Explorer Link Property Processing Memory Corruption Vulnerability (NSFOCUS Security Team <security@...ocus.com>)
• Re: XSS Vulnerability in Redmine 1.0.1 to 1.1.1 (Henri Salo <henri@...v.fi>)
• ZDI-11-220: Adobe Shockwave Director File rcsL Chunk Multiple Opcode Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint…)
• ZDI-11-221: Adobe Shockwave Shockwave 3d Asset.x32 DEMX 0xFFFFFF45 Field Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingp…)
• ZDI-11-222: Adobe Shockwave Shockwave 3d Asset.x32 DEMX Chunk Substructure Count Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingp…)
• TPTI-11-06: Oracle Java ICC Profile rcs2 Tag Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• TPTI-11-07: Adobe Shockwave iml32.dll CSWV Chunk Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• TPTI-11-08: Adobe Shockwave iml32.dll DEMX Chunk GIF Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• TPTI-11-09: Adobe Shockwave iml32.dll CSWV Chunk Byte Array Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• TPTI-11-11: Adobe Shockwave Lnam Chunk Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• TPTI-11-10: Adobe Shockwave dirapi.dll rcsL Chunk Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• [SECURITY] [DSA 2262-1] moodle security update (Moritz Muehlenhoff <jmm@...ian.org>)
• CORE-2010-1021: IBM WebSphere Application Server Cross-Site Request Forgery (CORE Security Technologies Advisories <advisories@...esecurity.com>)

• Re: Absolute Sownage (A concise history of recent Sony hacks) (Valdis.Kletnieks@...edu)
• New CSRF and XSS vulnerabilities in ADSL modem Callisto 821+ ("MustLive" <mustlive@...security.com.ua>)
• Re: Absolute Sownage (A concise history of recent Sony hacks) (coderman <coderman@...il.com>)
• Oracle HTTP Server XSS Header Injection (Yasser ABOUKIR <contact@...oukir.com>)
• Re: Absolute Sownage (A concise history of recent Sony hacks) (mrx <mrx@...pergander.org.uk>)
• Re: Apple Airport Update? (Charles-Etienne Prévost <cprevost@...ecure.ca>)
• [SECURITY] [DSA 2261-1] redmine security update (Thijs Kinkhorst <thijs@...ian.org>)
• Apache 2.0.63 - 2.2.19 Remote Exploit Fake or not? (kernel <isec24@...dex.ru>)
• CORE-2010-1021 (auto79275731@...hmail.com)
• Re: Apache 2.0.63 - 2.2.19 Remote Exploit Fake or not? (Andrew Farmer <andfarm@...il.com>)
• Introducing WPScan – WordPress Security Scanner (Ryan Dewhurst <ryandewhurst@...il.com>)
• Re: Apache 2.0.63 - 2.2.19 Remote Exploit Fake or not? (mrx <mrx@...pergander.org.uk>)
• Re: Apache 2.0.63 - 2.2.19 Remote Exploit Fake or not? (decoder <decoder@...-hero.net>)
• Re: Apache 2.0.63 - 2.2.19 Remote Exploit Fake or not? (the nlhcrew <thecr3w@...e.com>)
• [SECURITY] [DSA 2263-1] movabletype-opensource security update (Florian Weimer <fw@...eb.enyo.de>)
• xp sp3 remote bof (elfius <elfius@...il.com>)
• Re: xp sp3 remote bof ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Re: xp sp3 remote bof (Javier Bassi <javierbassi@...il.com>)

• Essential PIM 4.22: MANY vulnerabilities in 3rd party libraries ("Stefan Kanthak" <stefan.kanthak@...go.de>)
• Re: Apache 2.0.63 - 2.2.19 Remote Exploit Fake or not? (Kai <kai@...nn.net>)
• Re: Apache 2.0.63 - 2.2.19 Remote Exploit Fake or not? (decoder <decoder@...-hero.net>)
• Re: xp sp3 remote bof (elfius <elfius@...il.com>)
• Re: xp sp3 remote bof [from FD digest 76:33] (SMiller@...min.com)
• [ MDVSA-2011:110 ] gimp (security@...driva.com)
• DoS, CSRF and XSS vulnerabilities in ADSL modem Callisto 821+ ("MustLive" <mustlive@...security.com.ua>)
• Re: DoS, CSRF and XSS vulnerabilities in ADSL modem Callisto 821+ (Valdis.Kletnieks@...edu)
• Re: DoS, CSRF and XSS vulnerabilities in ADSL modem Callisto 821+ (p8x <l@....net>)
• Computer Security For Noobs (Damian Johnstone <ramo@...dvikings.com>)
• CFP: IEEE GLOBECOM 2011 - Smart Communication Protocols & Algorithms (SCPA 2011) (Sandra Sendra<sandra.sendra.upv@...il.com>)
• Re: xp sp3 remote bof [from FD digest 76:33] (Ray Jertop <seclists@...sievapers.com>)

• Lutz (RandallM <randallm@...mail.com>)
• lutz (RandallM <randallm@...mail.com>)
• lutz (RandallM <randallm@...mail.com>)
• Lutz and Laws (RandallM <randallm@...mail.com>)
• Re: Lutz and Laws ("Zach C." <fxchip@...il.com>)
• Re: xp sp3 remote bof (coderman <coderman@...il.com>)
• Blackhat sponsoring the Hack Cup 2011: New winner prizes! (Nicolas Waisman <nicolas@...unityinc.com>)
• Re: xp sp3 remote bof [from FD digest 76:33] ("-= Glowing Sex =-" <doomxd@...il.com>)
• thetech.com - worlds first online newspaper (lulzb0at@...hmail.com)
• The SIV mode of operation result in data leakage with small messages (<= blocksize) when the authentication part of the key i… (klondike <klondike@...cosoft.es>)
• Re: xp sp3 remote bof ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Re: thetech.com - worlds first online newspaper (Michael McGraw-Herdeg <mherdeg@...-tech.mit.edu>)

• Typo3 extensions Remote exploit to be released soon ("HI-TECH ." <isowarez.isowarez.isowarez@...glemail.com>)
• Php gif upload thumbnail creation remote exploit ("HI-TECH ." <isowarez.isowarez.isowarez@...glemail.com>)
• Re: Php gif upload thumbnail creation remote exploit (Владимир Воронцов <vladimir.vorontsov@...ec.ru>)
• Lulzsec as irc warrior 2.0? ("Fabio Pietrosanti (naif)" <lists@...osecurity.ch>)
• Re: Php gif upload thumbnail creation remote exploit ("HI-TECH ." <isowarez.isowarez.isowarez@...glemail.com>)
• Re: Lulzsec as irc warrior 2.0? (lulzb0at@...hmail.com)
• [SECURITY] [DSA 2264-1] linux-2.6 security update (dann frazier <dannf@...ian.org>)
• Perfect PDF products distributed with vulnerable MSVC++ libraries ("Stefan Kanthak" <stefan.kanthak@...go.de>)
• Re: Lulzsec as irc warrior 2.0? (Abdelkader Boudih <terminale@...il.com>)
• Firebug Firefox Extension Cross Context Scripting Vulnerability (IEhrepus <5up3rh3i@...il.com>)
• Re: Php gif upload thumbnail creation remote exploit (Moritz Naumann <security@...itz-naumann.com>)
• Re: Lulzsec as irc warrior 2.0? ("Fabio Pietrosanti (naif)" <lists@...osecurity.ch>)
• Re: CORE-2010-1021: IBM WebSphere Application Server Cross-Site Request Forgery (Tyler Borland <tborland1@...il.com>)
• lulzsec irc (Niet <niet@...istici.org>)
• Re: lulzsec irc (the nlhcrew <thecr3w@...e.com>)
• Re: lulzsec irc (w0lfd33m@...il.com)
• Re: lulzsec irc (Andrew Kirch <trelane@...lane.net>)
• Re: lulzsec irc (w0lfd33m@...il.com)
• Re: lulzsec irc (mrx <mrx@...pergander.org.uk>)
• Re: lulzsec irc (Valdis.Kletnieks@...edu)
• Re: Lulzsec as irc warrior 2.0? (Michele Orru <antisnatchor@...il.com>)

• Re: Lulzsec as irc warrior 2.0? (coderman <coderman@...il.com>)
• Re: Php gif upload thumbnail creation remote exploit ("HI-TECH ." <isowarez.isowarez.isowarez@...glemail.com>)
• New vulnerabilities in Adobe ColdFusion ("MustLive" <mustliveua@...il.com>)
• Bitcoin fun day! (Doug Huff <dhuff@...obdobbs.org>)
• Re: Bitcoin fun day! (Doug Huff <dhuff@...obdobbs.org>)
• Re: [Bitcoin-development] Bitcoin fun day! (Gavin Andresen <gavinandresen@...il.com>)
• Re: [Bitcoin-development] Bitcoin fun day! (Douglas Huff <dhuff@...obdobbs.org>)
• Re: ZDI-11-208: Adobe Shockwave rcsL Parsing Remote Code Execution Vulnerability ("Mikhail A. Utin" <mutin@...monwealthcare.org>)
• [SECURITY] [DSA 2265-1] perl security update (Florian Weimer <fw@...eb.enyo.de>)
• CSRF and XSS vulnerabilities in ADSL modem Callisto 821+ ("MustLive" <mustlive@...security.com.ua>)

• INSECT Pro - Advisory 2011 0620 - Zero Day - XSS Persistent in EA Sports (Juan Sacco <jsacco@...ecurityresearch.com>)
• More plausible mtgox.com post-mortem (Bitcoin fun week!) (Doug Huff <dhuff@...obdobbs.org>)
• Re: More plausible mtgox.com post-mortem (Bitcoin fun week!) (Doug Huff <dhuff@...obdobbs.org>)
• Re: Firebug Firefox Extension Cross Context Scripting Vulnerability (dveditz@...zio.com)
• Exclusive Interview with Creators of Tcpdump, Wireshark, Winpcap (Nagareshwar Talekar <tnagareshwar@...il.com>)
• New Technique to Exploit Blind SQL Injections in MySQL (Haxxor Security <h@...r.se>)
• LulzSec ("Giles Coochey" <giles@...chey.net>)
• Re: LulzSec (Chris <chris@...aclysmal.org>)
• Re: New Technique to Exploit Blind SQL Injections in MySQL (R00T_ATI <r00t_ati@...eam.net>)
• Re: LulzSec (Laurelai Storm <laurelai@...echan.org>)
• Re: LulzSec (Benji <me@...ji.com>)
• Re: LulzSec (Benji <me@...ji.com>)
• Re: LulzSec (Laurelai Storm <laurelai@...echan.org>)
• Re: LulzSec (Benji <me@...ji.com>)
• Re: LulzSec (Benji <me@...ji.com>)
• Re: LulzSec (Laurelai Storm <laurelai@...echan.org>)
• Re: LulzSec (Laurelai Storm <laurelai@...echan.org>)
• Re: LulzSec (Laurelai Storm <laurelai@...echan.org>)
• Re: Lulzsec as irc warrior 2.0? (Michel Pereira <michel@...hel.eti.br>)
• ZDI-11-223: Mozilla Firefox SVGPathSegList.replaceItem Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-224: Mozilla Firefox SVGPointList.appendItem Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-225: Mozilla Firefox nsXULCommandDispatcher Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• Re: New Technique to Exploit Blind SQL Injections in MySQL (Haxxor Security <h@...r.se>)
• Re: New Technique to Exploit Blind SQL Injections in MySQL (Haxxor Security <h@...r.se>)
• TWSL2011-006: IBM Web Application Firewall Bypass (Trustwave Advisories <trustwaveadvisories@...stwave.com>)
• Re: Full-Disclosure Digest, Vol 76 (t0hitsugu <tohitsugu@...il.com>)

• Re: Goatse Security EMERGENCY RELEASE - RAMPANT VULNERABILITY SPREADING LIKE WILDFIRE (Laurelai Storm <laurelai@...echan.org>)
• Re: Goatse Security EMERGENCY RELEASE - RAMPANT VULNERABILITY SPREADING LIKE WILDFIRE (adam <adam@...sy.net>)
• Goatse Security EMERGENCY RELEASE - RAMPANT VULNERABILITY SPREADING LIKE WILDFIRE (DiKKy Heartiez <dikkyheartiez@...mail.com>)
• [ MDVSA-2011:111 ] mozilla (security@...driva.com)
• Re: Goatse Security EMERGENCY RELEASE - RAMPANT VULNERABILITY SPREADING LIKE WILDFIRE (IA64 LOL <ia64lol@...il.com>)
• [ MDVSA-2011:111 ] mozilla (security@...driva.com)
• [ MDVSA-2011:111 ] mozilla (security@...driva.com)
• New DoS, CSRF and XSS vulnerabilities in ADSL modem Callisto 821+ ("MustLive" <mustlive@...security.com.ua>)
• TDSS C&C (exploit dev <extraexploit@...il.com>)

• [New Security Tool] INSECT Pro 2.6.1 release (Juan Sacco <jsacco@...ecurityresearch.com>)
• Re: Full-Disclosure Digest, Vol 76, Issue 42 (t0hitsugu <tohitsugu@...il.com>)
• Re: [New Security Tool] INSECT Pro 2.6.1 release ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Re: [New Security Tool] INSECT Pro 2.6.1 release ("-= Glowing Sex =-" <doomxd@...il.com>)
• Re: [New Security Tool] INSECT Pro 2.6.1 release (adam <adam@...sy.net>)
• Re: [New Security Tool] INSECT Pro 2.6.1 release (adam <adam@...sy.net>)
• Re: [New Security Tool] INSECT Pro 2.6.1 release (Andrew Farmer <andfarm@...il.com>)
• Re: [New Security Tool] INSECT Pro 2.6.1 release (Sergio 'shadown' Alvarez <shadown@...il.com>)
• Re: [New Security Tool] INSECT Pro 2.6.1 release ("-= Glowing Sex =-" <doomxd@...il.com>)
• Re: [New Security Tool] INSECT Pro 2.6.1 release (phocean <0x90@...cean.net>)
• Re: [New Security Tool] INSECT Pro 2.6.1 release (Peter Osterberg <j@....nu>)
• Re: Full-Disclosure Digest, Vol 76, Issue 42 (jhell <jhell@...aIX.net>)
• From kernel memory disclosure to privilege escalation: when and how? (Kevin Johnson <kevjohnson71@...oo.com>)
• Drupal Download Count Module XSS Vulnerability (Justin Klein Keane <justin@...irish.net>)
• Re: [New Security Tool] INSECT Pro 2.6.1 release (Valdis.Kletnieks@...edu)
• Re: [New Security Tool] INSECT Pro 2.6.1 release ("Elazar Broad" <elazar@...hmail.com>)
• Goatse Security Emergency Update! Microsoft IIS Directory Traversal Vulnerability! Do you know where your children are? (DiKKy Heartiez <dikkyheartiez@...mail.c…)
• Re: Goatse Security EMERGENCY RELEASE - RAMPANT VULNERABILITY SPREADING LIKE WILDFIRE (DiKKy Heartiez <dikkyheartiez@...mail.com>)
• Re: Goatse Security EMERGENCY RELEASE - RAMPANT VULNERABILITY SPREADING LIKE WILDFIRE (Leon Kaiser <literalka@...il.com>)
• Re: [New Security Tool] INSECT Pro 2.6.1 release ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Re: [New Security Tool] INSECT Pro 2.6.1 release (mrx <mrx@...pergander.org.uk>)
• Re: DoS, CSRF and XSS vulnerabilities in ADSL modem Callisto 821+ ("MustLive" <mustlive@...security.com.ua>)
• Re: [New Security Tool] INSECT Pro 2.6.1 release (root <root_@...ertel.com.ar>)
• [PRE-SA-2011-05] Buffer overflow in tftp-hpa daemon (Timo Warns <warns@...-sense.de>)

• Apple Updates SA-2011-06-23-1 and Security Update 2011-004 (Jeffrey Walton <noloader@...il.com>)
• Black & Berg Owned and Exposed -- Again. ("handbanana" <antisec@....com>)
• Re: Goatse Security EMERGENCY RELEASE - RAMPANT VULNERABILITY SPREADING LIKE WILDFIRE ("Ankara" <ankara@...house.org>)
• Re: Full-Disclosure Digest, Vol 76, Issue 42 (Kerem Erciyes <kerem.erciyes@...il.com>)
• not fun but full disclosure (RandallM <randallm@...mail.com>)
• Re: not fun but full disclosure (The Security Community <thesecuritycommunity@...il.com>)
• Re: not fun but full disclosure (Laurelai Storm <laurelai@...echan.org>)
• Re: From kernel memory disclosure to privilege escalation: when and how? (アドリアンヘンドリック <unixfreaxjp22@...il.com>)
• Re: From kernel memory disclosure to privilege escalation: when and how? (Dan Rosenberg <dan.j.rosenberg@...il.com>)
• lulz love (RandallM <randallm@...mail.com>)
• Lulzsec leaked accounts -- change your password if affected (Addy Yeow <ayeowch@...il.com>)
• Re: [New Security Tool] INSECT Pro 2.6.1 release (Mario Vilas <mvilas@...il.com>)
• New DoS, CSRF and XSS vulnerabilities in ADSL modem Callisto 821+ ("MustLive" <mustlive@...security.com.ua>)
• FYI: Apache httpd NoFollowSymLink follows symlinks feature (halfdog <me@...fdog.net>)
• Re: FYI: Apache httpd NoFollowSymLink follows symlinks feature (Christian Sciberras <uuf6429@...il.com>)
• Re: FYI: Apache httpd NoFollowSymLink follows symlinks feature (halfdog <me@...fdog.net>)
• Re: [funsec] Apple Updates SA-2011-06-23-1 and Security Update 2011-004 (Joel Esler <joel.esler@...com>)
• ASHX, ASMX or What? (Nahuel Grisolia <nahuel@...sai-sec.com>)
• Re: FYI: Apache httpd NoFollowSymLink follows symlinks feature (Ferenc Kovacs <tyra3l@...il.com>)
• Re: FYI: Apache httpd NoFollowSymLink follows symlinks feature (Christian Sciberras <uuf6429@...il.com>)
• Re: ASHX, ASMX or What? (Christian Sciberras <uuf6429@...il.com>)
• Re: ASHX, ASMX or What? (Nahuel Grisolia <nahuel@...sai-sec.com>)
• Re: ASHX, ASMX or What? ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Re: FYI: Apache httpd NoFollowSymLink follows symlinks feature (halfdog <me@...fdog.net>)
• Re: Apple Updates SA-2011-06-23-1 and Security Update 2011-004 (Jeffrey Walton <noloader@...il.com>)
• Re: FYI: Apache httpd NoFollowSymLink follows symlinks feature (Ferenc Kovacs <tyra3l@...il.com>)
• XSS and AoF vulnerabilities in Drupal ("MustLive" <mustlive@...security.com.ua>)

• Fwd: not fun but full disclosure (RandallM <randallm@...mail.com>)
• Vulnerability in Tumulus for Typepad ("MustLive" <mustlive@...security.com.ua>)

• LulzCheck--a tool for checking account security (Nathan Whitmore <nathanww@...il.com>)
• Re: LulzCheck--a tool for checking account security (Addy Yeow <ayeowch@...il.com>)
• Re: Full-Disclosure Digest, Vol 76, Issue 48 (t0hitsugu <tohitsugu@...il.com>)
• [SECURITY] [DSA-2210-2] tiff security update (Luciano Bello <luciano@...ian.org>)
• New CSRF and XSS vulnerabilities in ADSL modem Callisto 821+ ("MustLive" <mustlive@...security.com.ua>)

• how to detect DDoS attack through HTTP response analysis(throuput) (�蹫�� <kimms@...osec.co.kr>)
• Re: how to detect DDoS attack through HTTP response analysis(throuput) ("Dobbins, Roland" <rdobbins@...or.net>)
• Re: how to detect DDoS attack through HTTP response analysis(throuput) (Kai <kai@...nn.net>)
• Mambo CMS 4.6.x (4.6.5) | Multiple Cross Site Scripting Vulnerabilities (YGN Ethical Hacker Group <lists@...g.net>)
• Re: Mambo CMS 4.6.x (4.6.5) | Multiple Cross Site Scripting Vulnerabilities (Jacqui Caren-home <jacqui.caren@...world.com>)
• [SECURITY] CVE-2011-2204 - Apache Tomcat information disclosure (Mark Thomas <markt@...che.org>)
• ZDI-11-226: Citrix EdgeSight Launcher Service Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-227: Novell File Reporter Engine RECORD Tag Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)

• Live mtgox.com trade matching bug. (Doug Huff <dhuff@...obdobbs.org>)
• Re: Mambo CMS 4.6.x (4.6.5) | Multiple Cross Site Scripting Vulnerabilities (YGN Ethical Hacker Group <lists@...g.net>)
• Joomla! 1.6.3 and lower | Multiple Cross Site Scripting (XSS) Vulnerabilities (YGN Ethical Hacker Group <lists@...g.net>)
• Re: Joomla! 1.6.3 and lower | Multiple Cross Site Scripting (XSS) Vulnerabilities (Christian Sciberras <uuf6429@...il.com>)
• Re: Mambo CMS 4.6.x (4.6.5) | Multiple Cross Site Scripting Vulnerabilities ("Zach C." <fxchip@...il.com>)
• INSECT Pro - Advisory 2011 0628 - SQL Injection - XSS - RGBoard 2.2 (Juan Sacco <jsacco@...ecurityresearch.com>)
• Live mtgox.com trade matching bug. (Doug Huff <mith@...obdobbs.org>)
• Re: how to detect DDoS attack through HTTP response analysis(throuput) (nix@...roxylists.com)
• Re: how to detect DDoS attack through HTTP response analysis(throuput) (Emanuel dos Reis Rodrigues <emanueldosreis@...il.com>)
• Re: Joomla! 1.6.3 and lower | Multiple Cross Site Scripting (XSS) Vulnerabilities (Jacqui Caren-home <jacqui.caren@...world.com>)
• Decrypting SSL for Network Monitoring ("Adam Behnke" <adam@...osecinstitute.com>)
• Re: Joomla! 1.6.3 and lower | Multiple Cross Site Scripting (XSS) Vulnerabilities (Christian Sciberras <uuf6429@...il.com>)
• XSS and AoF vulnerabilities in Drupal ("MustLive" <mustlive@...security.com.ua>)
• Re: Decrypting SSL for Network Monitoring (adam <adam@...sy.net>)
• Re: Decrypting SSL for Network Monitoring (adam <adam@...sy.net>)
• AST-2011-011: Possible enumeration of SIP users due to differing authentication responses ("Asterisk Security Team" <security@...erisk.org>)
• Re: Decrypting SSL for Network Monitoring (Michael Holstein <michael.holstein@...ohio.edu>)

• Re: Joomla! 1.6.3 and lower | Multiple Cross Site Scripting (XSS) Vulnerabilities (Nick FitzGerald <nick@...us-l.demon.co.uk>)
• Re: Live mtgox.com trade matching bug. (coderman <coderman@...il.com>)
• Re: Decrypting SSL for Network Monitoring (coderman <coderman@...il.com>)
• Re: how to detect DDoS attack through HTTP response analysis(throuput) (coderman <coderman@...il.com>)
• Re: how to detect DDoS attack through HTTP response analysis(throuput) (Ferenc Kovacs <tyra3l@...il.com>)
• Re: Joomla! 1.6.3 and lower | Multiple Cross Site Scripting (XSS) Vulnerabilities (Jacqui Caren-home <jacqui.caren@...world.com>)
• Re: Joomla! 1.6.3 and lower | Multiple Cross Site Scripting (XSS) Vulnerabilities (Jacqui Caren-home <jacqui.caren@...world.com>)
• smallftpd <= 1.0.3-fix | Connection Saturation Remote Denial of Service Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
• S3cC0n Security Conference (secc0n Conference <s3cc0n@...il.com>)
• [Spanish] Curso gratuito: Linux exploit development - ASCII Armor Bypass Return-To-PLT (runlvl <runlvl@...il.com>)
• Resolved - NNT Change Tracker - Hard-Coded Encryption Key - Originally posted as http://seclists.org/fulldisclosure/2011/May… ("NNT Support" <support@...ws.com>)
• [SECURITY] [DSA 2266-1] php5 security update (Moritz Muehlenhoff <jmm@...ian.org>)
• ZDI-11-231: Apple QuickTime Pict File Matrix Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• Re: Resolved - NNT Change Tracker - Hard-Coded Encryption Key - Originally posted as http://seclists.org/fulldisclosur… (Dennis Brunnen <dennis.brunnen@...il.co…)
• ZDI-11-230: Apple Quicktime Apple Lossless Audio Codec Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-228: Apple ColorSync ICC Profile ncl2 Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-229: Apple QuickTime RIFF fmt Chunk Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• CORE-2011-0514: Multiple vulnerabilities in HP Data Protector (CORE Security Technologies Advisories <advisories@...esecurity.com>)
• CORE-2011-0606: HP Data Protector EXEC_CMD Buffer Overflow Vulnerability (CORE Security Technologies Advisories <advisories@...esecurity.com>)

• Re: how to detect DDoS attack through HTTP response analysis(throuput) (�蹫�� <kimms@...osec.co.kr>)
• Re: how to detect DDoS attack through HTTP response analysis(throuput) (coderman <coderman@...il.com>)
• Re: [Spanish] Curso gratuito: Linux exploit development - ASCII Armor Bypass Return-To-PLT (Jonas Andradas <j.andradas@...il.com>)
• Breaking the links: Exploiting the linker (Tim Brown <timb@...-dimension.org.uk>)
• OpenSSH 3.5p1 Remote Root Exploit for FreeBSD ("HI-TECH ." <isowarez.isowarez.isowarez@...glemail.com>)
• google plus vuln to XSS (pathric due <bugybu@...il.com>)
• AeroMail 2 Multiple Vulnerabilities (Justin Klein Keane <justin@...irish.net>)
• Vulnerabilities in Print for Drupal ("MustLive" <mustlive@...security.com.ua>)
• Re: OpenSSH 3.5p1 Remote Root Exploit for FreeBSD (Marc Olive <marc.olive@...uadvisors.com>)

562 messages

Powered by blists - more mailing lists