full-disclosure mailing list - 2011/09

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2011/09

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 14	² 22	³ 13	⁴ 13
⁵ 12	⁶ 17	⁷ 11	⁸ 12	⁹ 12	¹⁰ 10	¹¹ 4
¹² 10	¹³ 4	¹⁴ 10	¹⁵ 18	¹⁶ 16	¹⁷ 11	¹⁸ 6
¹⁹ 6	²⁰ 12	²¹ 22	²² 21	²³ 19	²⁴ 1	²⁵ 6
²⁶ 22	²⁷ 21	²⁸ 22	²⁹ 22	³⁰ 18

Messages by day:

September 1 (14 messages)

A bit shocked nobody has posted this yet - Security breach at kernel.org (Laurelai <laurelai@...echan.org>)
Re: A bit shocked nobody has posted this yet - Security breach at kernel.org (GloW - XD <doomxd@...il.com>)
Re: INSECT Pro - Free tool for pentest - New version release 2.7 (Patrick Webster <patrick@...hack.com>)
More on IPv6 RA-Guard evasion (IPv6 security) (Fernando Gont <fgont@...networks.com>)
Re: HP A-series switches are affected, too. [WAS: More on IPv6 RA-Guard evasion (IPv6 security)] (Dan Luedtke <maildanrl@...glemail.com>)
Re: HP A-series switches are affected, too. [WAS: More on IPv6 RA-Guard evasion (IPv6 security)] (Fernando Gont <fgont@...networks.com>)
Re: HP A-series switches are affected, too. [WAS: More on IPv6 RA-Guard evasion (IPv6 security)] (Dan Luedtke <maildanrl@...glemail.com>)
Re: HP A-series switches are affected, too. [WAS: More on IPv6 RA-Guard evasion (IPv6 security)] (Marc Heuse <mh@...sec.de>)
Re: HP A-series switches are affected, too. [WAS: More on IPv6 RA-Guard evasion (IPv6 security)] (Fernando Gont <fgont@...networks.com>)
China - the land of open proxies ("Mr. Hinky Dink" <dink@...inkydink.com>)
Re: China - the land of open proxies (rancor <therancor@...il.com>)
Re: China - the land of open proxies (nix@...roxylists.com)
Re: China - the land of open proxies ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: China - the land of open proxies (Ferenc Kovacs <tyra3l@...il.com>)

September 2 (22 messages)

Post Memory Corruption Memory Analysis #Exploit #Automation #BlackhatUS (Jonathan Brossard <endrazine@...il.com>)
[SECURITY] [DSA 2299-1] ca-certificates security update (Thijs Kinkhorst <thijs@...ian.org>)
[MOHSEP] Month Of Humorous Stefan Esser Photoshops - 0x1F (Herr E Balls <mohsep.submissions@...glemail.com>)
Secunia Research: InduSoft ISSymbol ActiveX Control Buffer Overflow Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
Re: [SECURITY] [DSA 2200-1] nss security update (Packet Storm <packet@...ketstormsecurity.org>)
Re: INSECT Ho (Adrian Lewis <brainthee@...il.com>)
Re: Vulnerabilities in GlobalWoW (Ivan Carlos <icarlos@...rlos.net>)
The Hacker News Magazine | September Edition Download | Issue 04 (Mohit Kumar <thehackernews@...il.com>)
Re: China - the land of open proxies (rancor <therancor@...il.com>)
Re: [SECURITY] [DSA 2200-1] nss security update (Dimitry Andric <dimitry@...ric.com>)
Re: China - the land of open proxies (nix@...roxylists.com)
Re: China - the land of open proxies (nix@...roxylists.com)
Cybsec Advisory 2011 0901 Windows Script Host DLL Hijacking ("CYBSEC Labs" <cybseclabs@...sec.com>)
ZDI-11-278: Novell Cloud Manager Insufficient Framework User Validation Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-279: (0day) Witness Systems eQuality Unify Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: Cybsec Advisory 2011 0901 Windows Script Host DLL Hijacking (Mario Vilas <mvilas@...il.com>)
Re: Cybsec Advisory 2011 0901 Windows Script Host DLL Hijacking ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: Reverse Proxy (Gage Bystrom <themadichib0d@...il.com>)
Re: Cybsec Advisory 2011 0901 Windows Script Host DLL Hijacking (root <root_@...ertel.com.ar>)
Re: Cybsec Advisory 2011 0901 Windows Script Host DLL Hijacking (Nahuel Grisolia <nahuel@...sai-sec.com>)
Re: Cybsec Advisory 2011 0901 Windows Script Host DLL Hijacking (GloW - XD <doomxd@...il.com>)
Re: Cybsec Advisory 2011 0901 Windows Script Host DLL Hijacking (root <root_@...ertel.com.ar>)

September 3 (13 messages)

Re: Cybsec Advisory 2011 0901 Windows Script Host DLL Hijacking (Valdis.Kletnieks@...edu)
Re: Cybsec Advisory 2011 0901 Windows Script Host DLL Hijacking (Mario Vilas <mvilas@...il.com>)
Re: Cybsec Advisory 2011 0901 Windows Script Host DLL Hijacking (Mario Vilas <mvilas@...il.com>)
Re: Cybsec Advisory 2011 0901 Windows Script Host DLL Hijacking (GloW - XD <doomxd@...il.com>)
Re: Cybsec Advisory 2011 0901 Windows Script Host DLL Hijacking (GloW - XD <doomxd@...il.com>)
Re: Full-Disclosure Digest, Vol 79, Issue 6 (Tomm Foo <bl4kjeebus121@...il.com>)
[ MDVSA-2011:129 ] mozilla (security@...driva.com)
回复: Reverse Proxy ("5up3rh3i@...il.com" <5up3rh3i@...il.com>)
Re: Full-Disclosure Digest, Vol 79, Issue 6 (Valdis.Kletnieks@...edu)
Re: Full-Disclosure Digest, Vol 79, Issue 6 ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: Full-Disclosure Digest, Vol 79, Issue 6 ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: Full-Disclosure Digest, Vol 79, Issue 6 (GloW - XD <doomxd@...il.com>)
Re: Vulnerabilities in GlobalWoW ("MustLive" <mustlive@...security.com.ua>)

September 4 (13 messages)

Free Student passes at Securitybyte India ("Papers, Call For" <cfpt@...uritybyte.org>)
t2′11 Challenge to be released 2011-09-10 10:00 EEST (Tomi Tuominen <tomi.tuominen@...fi>)
Oracle Inc attacked by oracke weak pass (WooYun <root@...yun.org>)
Re: Cybsec Advisory 2011 0901 Windows Script Host DLL Hijacking (IA64 LOL <ia64lol@...il.com>)
Re: Reverse Proxy (charlie clark <charlie@...kymunkey.com>)
Re: Cybsec Advisory 2011 0901 Windows Script Host DLL Hijacking (Georgi Guninski <guninski@...inski.com>)
Re: Cybsec Advisory 2011 0901 Windows Script Host DLL Hijacking ("Thor (Hammer of God)" <thor@...merofgod.com>)
[ MDVSA-2011:130 ] apache (security@...driva.com)
XSS Vulnerability in www.emerson.com (Madhur Ahuja <ahuja.madhur@...il.com>)
Re: Cybsec Advisory 2011 0901 Windows Script Host DLL Hijacking (Valdis.Kletnieks@...edu)
CFP for RootedCON2012 now open! (Román Ramírez <patowc@...ne.com>)
openvas 2.x race condition (Bugs NotHugs <bugsnothugs@...il.com>)
Re: Cybsec Advisory 2011 0901 Windows Script Host DLL Hijacking (paul.szabo@...ney.edu.au)

September 5 (12 messages)

Re: Cybsec Advisory 2011 0901 Windows Script Host DLL Hijacking (James Condron <james@...o-internet.org.uk>)
Re: [SECURITY] [DSA 2200-1] nss security update (Henri Salo <henri@...v.fi>)
Re: Cybsec Advisory 2011 0901 Windows Script Host DLL Hijacking (Mario Vilas <mvilas@...il.com>)
[ MDVSA-2011:131 ] libxml (security@...driva.com)
Re: XSS Vulnerability in www.emerson.com ("Mr. Hinky Dink" <dink@...inkydink.com>)
Re: XSS Vulnerability in www.emerson.com (Madhur Ahuja <ahuja.madhur@...il.com>)
Re: XSS Vulnerability in www.emerson.com (Valdis.Kletnieks@...edu)
[Announcement] ClubHack Mag Issue 20- September 2011 Released (Abhijeet Patil <getabhijeetpatil@...il.com>)
Re: Cybsec Advisory 2011 0901 Windows Script Host DLL Hijacking (Georgi Guninski <guninski@...inski.com>)
Re: Cybsec Advisory 2011 0901 Windows Script Host DLL Hijacking (root <root_@...ertel.com.ar>)
Re: Cybsec Advisory 2011 0901 Windows Script Host DLL Hijacking ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: Cybsec Advisory 2011 0901 Windows Script Host DLL Hijacking (Mario Vilas <mvilas@...il.com>)

September 6 (17 messages)

[ MDVSA-2011:132 ] pidgin (security@...driva.com)
Re: Cybsec Advisory 2011 0901 Windows Script Host DLL Hijacking (Georgi Guninski <guninski@...inski.com>)
Globaleaks demo of the Prototype online! $ /etc/init.d/globaleaks start (Arturo Filastò <art@...baleaks.org>)
[SECURITY] [DSA 2298-2] apache2 regression fix (Stefan Fritsch <sf@...ian.org>)
[SECURITY] [DSA 2300-2] nss security update (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 2301-1] rails security update (Luciano Bello <luciano@...ian.org>)
Re: [SECURITY] [DSA 2300-2] nss security update (Georgi Guninski <guninski@...inski.com>)
Re: [SECURITY] [DSA 2300-2] nss security update (Valdis.Kletnieks@...edu)
GeoClassifieds Lite Multiple vulnerabilities (Yassin Aboukir <01xp01@...il.com>)
Permutation Oriented Programming - Part 2. ("Nelson Brito" <nbrito@...ure.org>)
Site Vulnerabilities: myexgf.com (George Girtsou <ggirtsou@...il.com>)
New Bugs released today on vl ("research@...nerability-lab.com" <research@...nerability-lab.com>)
Cyberwar between Israel and Turkish Hacker (Mohit Kumar <thehackernews@...il.com>)
Registry Decoder - Digital Forensics Tool (Mohit Kumar <thehackernews@...il.com>)
20 Famous websites vulnerable to Cross Site Scripting (XSS) Attack (Mohit Kumar <thehackernews@...il.com>)
Malcon 2011 - Call for Papers (Mohit Kumar <thehackernews@...il.com>)
Re: 20 Famous websites vulnerable to Cross Site Scripting (XSS) Attack (GloW - XD <doomxd@...il.com>)

September 7 (11 messages)

Re: Malcon 2011 - Call for Papers (root <root_@...ertel.com.ar>)
Re: Cyberwar between Israel and Turkish Hacker (Valdis.Kletnieks@...edu)
Windows server 2008 R1 local DoS ("Aliz 'Randomdude'" <randomdude@...il.com>)
Questions regarding cryptography laws (Sihan <sihanzheng@...il.com>)
Re: Questions regarding cryptography laws (Valdis.Kletnieks@...edu)
Re: Questions regarding cryptography laws (Walter van Holst <walter.van.holst@...all.nl>)
Re: Questions regarding cryptography laws (Peter Dawson <slash.pd@...il.com>)
Re: [SECURITY] CVE-2011-3190 Apache Tomcat Authentication bypass and information disclosure (Henri Salo <henri@...v.fi>)
Cisco Security Advisory: Cisco Nexus 5000 and 3000 Series Switches Access Control List Bypass Vulnerability (Cisco Systems Product Security Incident Response T…)
OWASP AppSec USA 2011 - Two Weeks Away (Adam Baso <adam.baso@...sp.org>)
[ MDVSA-2011:133 ] mozilla (security@...driva.com)

September 8 (12 messages)

Re: Questions regarding cryptography laws (Jeffrey Walton <noloader@...il.com>)
Recent claims that windows update is broken (Georgi Guninski <guninski@...inski.com>)
[SECURITY] [DSA 2302-1] bcfg2 security update (Nico Golde <nico@...lde.de>)
Western Union Certificate Error (JT S <whytehorse@...il.com>)
Re: Western Union Certificate Error (adam <adam@...sy.net>)
Re: Recent claims that windows update is broken ("Thor (Hammer of God)" <thor@...merofgod.com>)
Security bypass vulnerability in MyBB ("MustLive" <mustlive@...security.com.ua>)
Re: Western Union Certificate Error (Gage Bystrom <themadichib0d@...il.com>)
Re: Western Union Certificate Error (Valdis.Kletnieks@...edu)
Re: Western Union Certificate Error (Andrew Farmer <andfarm@...il.com>)
Re: Western Union Certificate Error (Valdis.Kletnieks@...edu)
28C3: CFP for 28th Chaos Communication Congress (fukami <lists@....io>)

September 9 (12 messages)

Re: Western Union Certificate Error (coderman <coderman@...il.com>)
[SECURITY] [DSA 2303-1] linux-2.6 security update (dann frazier <dannf@...ian.org>)
CVE-2011-2730: Spring Framework Information Disclosure (s2-security <s2-security@...are.com>)
CVE-2011-2732: Spring Security header injection vulnerability (s2-security <s2-security@...are.com>)
CVE-2011-2894: Spring Framework and Spring Security serialization-based remoting vulnerabilities (s2-security <s2-security@...are.com>)
CVE-2011-2731: Spring Security privilege escalation when using RunAsManager (s2-security <s2-security@...are.com>)
Re: Western Union Certificate Error (JT S <whytehorse@...il.com>)
[ MDVSA-2011:134 ] rsyslog (security@...driva.com)
Re: Western Union Certificate Error (Valdis.Kletnieks@...edu)
Re: Western Union Certificate Error ("Thor (Hammer of God)" <thor@...merofgod.com>)
Hack In Paris 2012 Call For Proposals (Damien Cauquil <d.cauquil@...dream.com>)
Re: Recent claims that windows update is broken (Dan Kaminsky <dan@...para.com>)

September 10 (10 messages)

nullcon Goa 2012 CFP|CFE|Jailbreak and nullcon Delhi 2012 (null Team <info@...l.co.in>)
Re: Recent claims that windows update is broken ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: Recent claims that windows update is broken (夜神　岩男 <supergiantpotato@...oo.co.jp>)
Re: Recent claims that windows update is broken (Georgi Guninski <guninski@...inski.com>)
Re: Western Union Certificate Error (Valdis.Kletnieks@...edu)
Re: Western Union Certificate Error (JT S <whytehorse@...il.com>)
Re: Western Union Certificate Error (JT S <whytehorse@...il.com>)
List Charter (John Cartwright <johnc@...k.org.uk>)
Re: Western Union Certificate Error (Valdis.Kletnieks@...edu)
Re: Recent claims that windows update is broken (Dan Kaminsky <dan@...para.com>)

September 11 (4 messages)

Using QR tags to Attack SmartPhones (Attaging) (Augusto Pereyra <aepereyra@...il.com>)
[SECURITY] [DSA 2303-2] New linux-2.6 packages fix regression (dann frazier <dannf@...ian.org>)
Re: Western Union Certificate Error (JT S <whytehorse@...il.com>)
Vulnerability in plugins for RapidWeaver, Habari, DasBlo, eZ Publish, EE, Serendipity, Social Web CMS, PHP-Fusion, Mag… ("MustLive" <mustlive@...security.com.ua…)

September 12 (10 messages)

[Announcement] ClubHack Magazine - Call for Articles (Abhijeet Patil <getabhijeetpatil@...il.com>)
[SECURITY] [DSA 2306-1] ffmpeg security update (Giuseppe Iuculano <iuculano@...ian.org>)
[SECURITY] [DSA 2307-1] chromium-browser security update (Giuseppe Iuculano <iuculano@...ian.org>)
[SECURITY] [DSA 2304-1] squid3 security update (Nico Golde <nion@...ian.org>)
[TEHTRI-Security] Facebook Security Issues through HTML Iframes (Laurent OUDOT at TEHTRI-Security <laurent.oudot-ml@...tri-security.com>)
Orion SolarWinds XSS attack (Gustavo <gustavorobertux@...il.com>)
[SECURITY] [DSA 2308-1] mantis security update (Moritz Muehlenhoff <jmm@...ian.org>)
CORE-2011-0526 - MS WINS ECommEndDlg Input Validation Error (CORE Security Technologies Advisories <advisories@...esecurity.com>)
WindWeb HTTPD add admin / html page insertion (xD 0x41 <secn3t@...il.com>)
New zero-day Issue on Vulnerability-Lab.com ("research@...nerability-lab.com" <research@...nerability-lab.com>)

September 13 (4 messages)

new subsembly banking sotfware vulnerability ("research@...nerability-lab.com" <research@...nerability-lab.com>)
Seeker Advisory Sep11: Reflected Cross Site Scripting in Microsoft SharePoint Portal ("Irene Abezgauz" <irene@...kersec.com>)
Re: Apache Killer (xD 0x41 <secn3t@...il.com>)
Update: Vulnerability in plugins for Typepad, RapidWeaver, Habari, DasBlo, eZ Publish, EE, Serendipity, Social Web CMS… ("MustLive" <mustlive@...security.com.ua…)

September 14 (10 messages)

Re: Apache Killer (Javier Bassi <javierbassi@...il.com>)
Re: Apache Killer (GloW - XD <doomxd@...il.com>)
Seeker Advisory Sep11: Insecure Redirect in Microsoft SharePoint Portal ("Irene Abezgauz" <irene@...kersec.com>)
[SECURITY] [DSA 2309-1] openssl security update (Raphael Geissert <geissert@...ian.org>)
Re: Full-Disclosure Digest, Vol 79, Issue 21 ("Mikhail A. Utin" <mutin@...monwealthcare.org>)
full-disclosure@...ts.grok.org.uk ("Heyder[AlligatorTeam]" <heyder@...igatorteam.org>)
Cisco Security Advisory: CiscoWorks LAN Management Solution Remote Code Execution Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt…)
Cisco Security Advisory: Cisco Unified Service Monitor and Cisco Unified Operations Manager Remote Code Execution Vuln… (Cisco Systems Product Security Incident…)
Re: WordPress Auctions plugin <= 1.8.8 SQL Injection (Henri Salo <henri@...v.fi>)
CORE-2011-0506 - Multiples Vulnerabilities in ManageEngine ServiceDesk Plus (CORE Security Technologies Advisories <advisories@...esecurity.com>)

September 15 (18 messages)

WordPress Auctions plugin <= 1.8.8 SQL Injection Vulnerability ("Heyder[AlligatorTeam]" <heyder@...igatorteam.org>)
Microsoft's Binary Planting Clean-Up Mission ("ACROS Security Lists" <lists@...os.si>)
[Onapsis Security Advisory 2011-016] SAP WebAS Malicious SAP Shortcut Generation (Onapsis Research Labs <research@...psis.com>)
[Onapsis Security Advisory 2011-014] SAP WebAS Remote Denial of Service (Onapsis Research Labs <research@...psis.com>)
[Onapsis Security Advisory 2011-015] SAP WebAS webrfc Cross-Site Scripting (Onapsis Research Labs <research@...psis.com>)
Re: WordPress Auctions plugin <= 1.8.8 SQL Injection (Henri Salo <henri@...v.fi>)
Re: WordPress Auctions plugin <= 1.8.8 SQL Injection Vulnerability (Henri Salo <henri@...v.fi>)
XEE vulnerabilities in SharePoint (MS11-074) and DotNetNuke (Nicolas Grégoire <nicolas.gregoire@...rri.fr>)
Re: Microsoft's Binary Planting Clean-Up Mission ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: Microsoft's Binary Planting Clean-Up Mission ("ACROS Security Lists" <lists@...os.si>)
Re: Microsoft's Binary Planting Clean-Up Mission (Christian Sciberras <uuf6429@...il.com>)
Re: Microsoft's Binary Planting Clean-Up Mission ("ACROS Security Lists" <lists@...os.si>)
Re: Microsoft's Binary Planting Clean-Up Mission ("Thor (Hammer of God)" <thor@...merofgod.com>)
Vulnerabilities in JBoss Application Server ("MustLive" <mustlive@...security.com.ua>)
Re: Microsoft's Binary Planting Clean-Up Mission (adam <adam@...sy.net>)
Re: Microsoft's Binary Planting Clean-Up Mission ("ACROS Security Lists" <lists@...os.si>)
Re: Microsoft's Binary Planting Clean-Up Mission ("ACROS Security Lists" <lists@...os.si>)
Re: Microsoft's Binary Planting Clean-Up Mission (adam <adam@...sy.net>)

September 16 (16 messages)

Re: Microsoft's Binary Planting Clean-Up Mission (paul.szabo@...ney.edu.au)
FortiGuard Advisory: Adobe Reader X Sandbox Bypass Vulnerability (zhliu <zhliu@...tinet.com>)
Re: Microsoft's Binary Planting Clean-Up Mission (Tyler Borland <tborland1@...il.com>)
Re: Microsoft's Binary Planting Clean-Up Mission ("ACROS Security Lists" <lists@...os.si>)
Re: Microsoft's Binary Planting Clean-Up Mission (Michael Schmidt <mschmidt@...gstore.com>)
Re: Microsoft's Binary Planting Clean-Up Mission (Jeffrey Walton <noloader@...il.com>)
Re: Microsoft's Binary Planting Clean-Up Mission ("Mikhail A. Utin" <mutin@...monwealthcare.org>)
Re: Microsoft's Binary Planting Clean-Up Mission (Pedro B <pedro.borracha@...il.com>)
understanding the botnet C&C.. (RandallM <randallm@...mail.com>)
Re: understanding the botnet C&C.. (Jeffrey Walton <noloader@...il.com>)
Re: Microsoft's Binary Planting Clean-Up Mission ("ACROS Security Lists" <lists@...os.si>)
Re: understanding the botnet C&C.. (Tillmann Werner <tillmann.werner@....de>)
Re: understanding the botnet C&C.. (Valdis.Kletnieks@...edu)
Re: Google.com - Open Redirect (Piotr Duszynski <piotr@...zynski.eu>)
PunBB PHP Forum - Multiple XSS (Piotr Duszynski <piotr@...zynski.eu>)
sshtrix - a very fast multithreaded SSHv1 and SSH1v2 login cracker (Levent Kayan <levonkayan@....net>)

September 17 (11 messages)

Re: Microsoft's Binary Planting Clean-Up Mission ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Re: Microsoft's Binary Planting Clean-Up Mission ("Thor (Hammer of God)" <thor@...merofgod.com>)
[ MDVSA-2011:133-1 ] mozilla (security@...driva.com)
[ MDVSA-2011:130-1 ] apache (security@...driva.com)
Re: PunBB PHP Forum - Multiple XSS (Henri Salo <henri@...v.fi>)
[ MDVSA-2011:132-1 ] pidgin (security@...driva.com)
Re: PunBB PHP Forum - Multiple XSS (Henri Salo <henri@...v.fi>)
[ MDVSA-2011:134-1 ] rsyslog (security@...driva.com)
Join my network on LinkedIn (Lorenzo Vogelsang via LinkedIn <member@...kedin.com>)
FreePBX Unfounded RCE PoC or rather Misguided PoC maybe ? (xD 0x41 <secn3t@...il.com>)
Re: FreePBX Unfounded RCE PoC or rather Misguided PoC maybe ? (Grandma Eubanks <tborland1@...il.com>)

September 18 (6 messages)

Re: understanding the botnet C&C.. (Corey Nachreiner <Corey.Nachreiner@...chguard.com>)
Multiple OS X Lion Vulnerabilities (Defence in Depth <defenceindepth@...il.com>)
Re: FreePBX Unfounded RCE PoC or rather Misguided PoC maybe ? (xD 0x41 <secn3t@...il.com>)
Fwd: FreePBX Unfounded RCE PoC or rather Misguided PoC maybe ? (xD 0x41 <secn3t@...il.com>)
Re: PunBB PHP Forum - Multiple XSS (Henri Salo <henri@...v.fi>)
Re: Fwd: FreePBX Unfounded RCE PoC or rather Misguided PoC maybe ? (Grandma Eubanks <tborland1@...il.com>)

September 19 (6 messages)

Re: PunBB PHP Forum - Multiple XSS (Piotr Duszynski <piotr@...zynski.eu>)
Cisco TelePresence Multiple Vulnerabilities - SOS-11-010 ("Lists" <lists@...seofsecurity.com>)
[SECURITY] [DSA 2305-1] vsftpd security update (Nico Golde <nion@...ian.org>)
Re: FreePBX Unfounded RCE PoC or rather Misguided PoC maybe ? (xD 0x41 <secn3t@...il.com>)
Re: FreePBX Unfounded RCE PoC or rather Misguided PoC maybe ? (xD 0x41 <secn3t@...il.com>)
Re: Fwd: FreePBX Unfounded RCE PoC or rather Misguided PoC maybe ? (xD 0x41 <secn3t@...il.com>)

September 20 (12 messages)

NETGEAR Wireless Cable Modem Gateway Auth Bypass and CSRF - SOS-11-011 ("Lists" <lists@...seofsecurity.com>)
Re: NETGEAR Wireless Cable Modem Gateway Auth Bypass and CSRF - SOS-11-011 (Valdis.Kletnieks@...edu)
Advisory: Opera Mobile Cache Poisoning XAS (Roee Hay <roeeh@...ibm.com>)
Re: understanding the botnet C&C.. (T Biehn <tbiehn@...il.com>)
Re: Using QR tags to Attack SmartPhones (Attaging) (T Biehn <tbiehn@...il.com>)
Cisco Security Advisory: Cisco Identity Services Engine Database Default Credentials Vulnerability (Cisco Systems Product Security Incident Response Team <psir…)
Advisory: Dolphin Browser HD Cross-Application Scripting (Roee Hay <roeeh@...ibm.com>)
Possibility to exploit bash "*" processing (Kirils Solovjovs <kirils.solovjovs@...ils.com>)
Another minor facebook security flaw (James Fife <theriverfife@...oo.com>)
Re: Possibility to exploit bash "*" processing (Valdis.Kletnieks@...edu)
Re: Using QR tags to Attack SmartPhones (Attaging) (Henrik Östlund <kexofil@...il.com>)
Re: Possibility to exploit bash "*" processing (GloW - XD <doomxd@...il.com>)

September 21 (22 messages)

Fix for NTFS permissions issue in QuickTime 7.x for Windows (Geoff Strickler <geoff.strickler@...il.com>)
IPv6 security presentation at Hack.lu 2011 (Fernando Gont <fgont@...networks.com>)
Re: Fix for NTFS permissions issue in QuickTime 7.x for Windows (Robert Kim App and Facebook Marketing <evdo.hsdpa@...il.com>)
Re: Fix for NTFS permissions issue in QuickTime 7.x for Windows (Travis Biehn <tbiehn@...il.com>)
U.S. Geological Survey Website - SQL Injection Vulnerability ("research@...nerability-lab.com" <research@...nerability-lab.com>)
Re: Another minor facebook security flaw (Jacqui Caren-home <jacqui.caren@...world.com>)
Re: Another minor facebook security flaw (Dan Dart <dandart@...glemail.com>)
Re: Another minor facebook security flaw (adam <adam@...sy.net>)
Trusteer Rapport and anti-keylogging (mu-b <mu-b@...it-labs.org>)
Re: Possibility to exploit bash "*" processing (Cédric Jeanneret <cjeanneret@...gu.ch>)
Trusteer Rapport and anti-keylogging (Neil Kettle <neil@...it-labs.org>)
Re: Possibility to exploit bash "*" processing (Jacqui Caren <jacqui.caren@...world.com>)
OT: help generating gpg key with prescribed key ID (Georgi Guninski <guninski@...inski.com>)
Re: Possibility to exploit bash "*" processing (Dan Carpenter <error27@...il.com>)
FW: Apple Lion OS Suffers From A Major Security Issue ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: Apple Lion OS Suffers From A Major Security Issue (Sabahattin Gucukoglu <mail@...ahattin-gucukoglu.com>)
Re: Possibility to exploit bash "*" processing (Valdis.Kletnieks@...edu)
Re: OT: help generating gpg key with prescribed key ID (Valdis.Kletnieks@...edu)
Authenex A-Key/ASAS Web Management Control 3.1.0.2 (latest) - Time-based SQL Injection (Jose Carlos de Arriba <jcarriba@...egroundsecurity.com>)
Re: NGS00099 Patch Notification: Vulnerable SUID script in (nomachine) NX Server for Linux (Tavis Ormandy <taviso@...xchg8b.com>)
Re: Possibility to exploit bash "*" processing (Andrew Farmer <andfarm@...il.com>)
Re: Possibility to exploit bash "*" processing (Valdis.Kletnieks@...edu)

September 22 (21 messages)

Re: Advisory: Dolphin Browser HD Cross-Application Scripting (adam <adam@...sy.net>)
secureURL 2.0 design flaws (BENCSATH Boldizsar <boldi@...sys.hu>)
WordPress <=v3.1.2 Clickjacking Vulnerability Advisory (Andrew Horton <andrew.horton@...urity-assessment.com>)
FBC Market CMS v1.1 - Multiple Web Vulnerabilities ("research@...nerability-lab.com" <research@...nerability-lab.com>)
owning ubuntu apt-key net-update (maybe apt-get update related) (Georgi Guninski <guninski@...inski.com>)
Re: owning ubuntu apt-key net-update (maybe apt-get update related) (Georgi Guninski <guninski@...inski.com>)
Re: OT: help generating gpg key with prescribed key ID (Georgi Guninski <guninski@...inski.com>)
Re: owning ubuntu apt-key net-update (maybe apt-get update related) (Georgi Guninski <guninski@...inski.com>)
TLS/SSL Compatibility Report 2011 (Thierry Zoller <Thierry@...ler.lu>)
Re: Fix for NTFS permissions issue in QuickTime 7.xfor Windows ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Re: OT: help generating gpg key with prescribed key ID (Tyler Oderkirk <tyleroderkirk@...il.com>)
Re: OT: help generating gpg key with prescribed key ID (Georgi Guninski <guninski@...inski.com>)
Re: Question on root credentials for scanning (Gage Bystrom <themadichib0d@...il.com>)
[ISecAuditors Security Advisories] Multiple vulnerabilities in Zyncro social network (ISecAuditors Security Advisories <advisories@...cauditors.com>)
Re: owning ubuntu apt-key net-update (maybe apt-get update related) (GloW - XD <doomxd@...il.com>)
XSS Vulnerabilities in TWiki < 5.1.0 (Netsparker Advisories <advisories@...itunasecurity.com>)
[OT] Security in general using HTTPS (Fosforo <fosforo@...il.com>)
Multiple vulnerabilities in AWStats ("MustLive" <mustlive@...security.com.ua>)
Re: [OT] Security in general using HTTPS (Valdis.Kletnieks@...edu)
Re: [OT] Security in general using HTTPS (Jeffrey Walton <noloader@...il.com>)
Re: PunBB PHP Forum - Multiple XSS (Henri Salo <henri@...v.fi>)

September 23 (19 messages)

Re: [OT] Security in general using HTTPS (Fosforo <fosforo@...il.com>)
[ MDVSA-2011:135 ] iproute2 (security@...driva.com)
sshd logins without a source (BH <lists@...ckhat.bz>)
Re: sshd logins without a source (Guillaume Friloux <guillaume.friloux@...64.com>)
Re: sshd logins without a source (paul.szabo@...ney.edu.au)
Re: sshd logins without a source (Laurelai <laurelai@...echan.org>)
Re: sshd logins without a source (Bacanu Adrian-Daniel <darkzatarra@...oo.com>)
Re: sshd logins without a source (james@...o-internet.org.uk)
Re: sshd logins without a source (paul.szabo@...ney.edu.au)
Re: sshd logins without a source (BH <lists@...ckhat.bz>)
Re: sshd logins without a source (Valdis.Kletnieks@...edu)
[Announcement] Reminder: ClubHack 2011 Call for Papers Closes on 15th October (Abhijeet Patil <getabhijeetpatil@...il.com>)
Re: owning ubuntu apt-key net-update (maybe apt-get update related) (Georgi Guninski <guninski@...inski.com>)
TWSL2011-014: Vulnerability in Pantech Web Browser SSL Implementation (Trustwave Advisories <TrustwaveAdvisories@...stwave.com>)
TWSL2011-013: Multiple Vulnerabilities in IceWarp Mail Server (Trustwave Advisories <TrustwaveAdvisories@...stwave.com>)
Re: sshd logins without a source (Laurelai <laurelai@...echan.org>)
Re: sshd logins without a source (GloW - XD <doomxd@...il.com>)
Re: owning ubuntu apt-key net-update (maybe apt-get update related) (GloW - XD <doomxd@...il.com>)
Re: sshd logins without a source (paul.szabo@...ney.edu.au)

September 24 (1 message)

[SECURITY] [DSA 2310-1] linux-2.6 security update (dann frazier <dannf@...ian.org>)

September 25 (6 messages)

MHTML Mime-Formatted Request Vulnerability Again (IEhrepus <5up3rh3i@...il.com>)
Re: owning ubuntu apt-key net-update (maybe apt-get update related) (Georgi Guninski <guninski@...inski.com>)
Allowed From "http://" To "file://" In The Third-party Browser of IE (IEhrepus <5up3rh3i@...il.com>)
Privilege escalation on Windows using Binary Planting (Madhur Ahuja <ahuja.madhur@...il.com>)
Privilege escalation on Windows using Binary Planting (Madhur Ahuja <ahuja.madhur@...il.com>)
Re: Privilege escalation on Windows using BinaryPlanting (kz20fl@...glemail.com)

September 26 (22 messages)

Re: Privilege escalation on Windows using BinaryPlanting (Travis Biehn <tbiehn@...il.com>)
Re: Privilege escalation on Windows using BinaryPlanting (GloW - XD <doomxd@...il.com>)
Re: Privilege escalation on Windows using BinaryPlanting ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: Privilege escalation on Windows using BinaryPlanting (GloW - XD <doomxd@...il.com>)
Re: Privilege escalation on Windows using BinaryPlanting (Travis Biehn <tbiehn@...il.com>)
Re: Privilege escalation on Windows using Binary Planting (Madhur Ahuja <ahuja.madhur@...il.com>)
Re: Privilege escalation on Windows using Binary Planting (GloW - XD <doomxd@...il.com>)
Re: Privilege escalation on Windows using BinaryPlanting ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: Privilege escalation on Windows using Binary Planting (Madhur Ahuja <ahuja.madhur@...il.com>)
Re: Privilege escalation on Windows using Binary Planting (GloW - XD <doomxd@...il.com>)
Upek Protector Suite QL 2011 - VTP Buffer Overflow Vulnerability ("research@...nerability-lab.com" <research@...nerability-lab.com>)
Sonicwall Viewpoint v6.x - Multiple Web Vulnerabilities ("research@...nerability-lab.com" <research@...nerability-lab.com>)
IAEA Website Service - Blind SQL Injection Vulnerability ("research@...nerability-lab.com" <research@...nerability-lab.com>)
Advanced Electron Forums (AEF) 1.0.9 <= Cross Site Request Forgery (CSRF) Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
Re: Privilege escalation on Windows using BinaryPlanting (Valdis.Kletnieks@...edu)
Re: Privilege escalation on Windows using BinaryPlanting (Mario Vilas <mvilas@...il.com>)
[SECURITY] CVE-2011-1184 Apache Tomcat - Multiple weaknesses in HTTP DIGEST authentication (Mark Thomas <markt@...che.org>)
Re: sshd logins without a source (Nikolaos Mitsis <drynhwyl@...il.com>)
Re: sshd logins without a source ("Jason A. Donenfeld" <Jason@...c4.com>)
[CVE-2011-3645] Multiple vulnerability in "Omnidocs" (Sohil Garg <sohil_garg@...oo.co.in>)
sshtrix - a very fast multithreaded SSHv1 and SSH1v2 login cracker (version 0.0.2) (Levent Kayan <levonkayan@....net>)
XSS and FPD vulnerabilities in Adobe ColdFusion ("MustLive" <mustlive@...security.com.ua>)

September 27 (21 messages)

VPN provider helped track down alleged LulzSec member ("Ivan ." <ivanhec@...il.com>)
Twitter URL spoofing still exploitable (Pablo Ximenes <pablo@...en.es>)
Re: VPN provider helped track down alleged LulzSec member (Jeffrey Walton <noloader@...il.com>)
ServersCheck Monitoring Software v8.8.x - Multiple Web Vulnerabilities ("research@...nerability-lab.com" <research@...nerability-lab.com>)
Re: VPN provider helped track down alleged LulzSec member (Laurelai Storm <laurelai@...echan.org>)
Re: ServersCheck Monitoring Software v8.8.x - Multiple Web Vulnerabilities ("research@...nerability-lab.com" <research@...nerability-lab.com>)
Secunia Research: Novell GroupWise Internet Agent "TZNAME" Parsing Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Novell GroupWise Internet Agent HTTP Interface Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
Re: Privilege escalation on Windows using Binary Planting (Steve Syfuhs <steve@...uhs.net>)
Re: Privilege escalation on Windows using Binary Planting (Gary Slavin <GaryS@...-1.com>)
Re: Twitter URL spoofing still exploitable (Darren Martyn <d.martyn.fulldisclosure@...il.com>)
Re: VPN provider helped track down alleged LulzSec member (Darren Martyn <d.martyn.fulldisclosure@...il.com>)
Re: Twitter URL spoofing still exploitable (Pablo Ximenes <pablo@...en.es>)
Re: Twitter URL spoofing still exploitable (Dan Kaminsky <dan@...para.com>)
Re: Twitter URL spoofing still exploitable (Mario Vilas <mvilas@...il.com>)
Re: Twitter URL spoofing still exploitable (dave bl <db.pub.mail@...il.com>)
Re: Twitter URL spoofing still exploitable (Benji <me@...ji.com>)
Re: Twitter URL spoofing still exploitable (Pablo Ximenes <pablo@...en.es>)
[SECURITY] [DSA 2311-1] openjdk-6 security update (Florian Weimer <fw@...eb.enyo.de>)
Re: VPN provider helped track down alleged LulzSec member (GloW - XD <doomxd@...il.com>)
Re: VPN provider helped track down alleged LulzSec member (Ferenc Kovacs <tyra3l@...il.com>)

September 28 (22 messages)

Re: VPN provider helped track down alleged LulzSec member (sandeep k <sandeepk.l337@...il.com>)
Re: VPN provider helped track down alleged LulzSec member (Laurelai <laurelai@...echan.org>)
Re: VPN provider helped track down alleged LulzSec member (GloW - XD <doomxd@...il.com>)
Re: VPN provider helped track down alleged LulzSec member (Laurelai Storm <laurelai@...echan.org>)
Re: VPN provider helped track down alleged LulzSec member (GloW - XD <doomxd@...il.com>)
European Security Services GPS v1.0 - Multiple Vulnerabilities ("research@...nerability-lab.com" <research@...nerability-lab.com>)
Re: VPN provider helped track down alleged LulzSec member (Laurelai Storm <laurelai@...echan.org>)
Barracuda Backup v2.0 - Multiple Web Vulnerabilities ("research@...nerability-lab.com" <research@...nerability-lab.com>)
Cisco Security Advisory: Cisco Unified Communications Manager Session Initiation Protocol Memory Leak Vulnerabilities (Cisco Systems Product Security Incident…)
Cisco Security Advisory: Jabber Extensible Communications Platform and Cisco Unified Presence XML Denial of Service Vu… (Cisco Systems Product Security Incident…)
Cisco Security Advisory: Cisco IOS Software IP Service Level Agreement Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco 10000 Series Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco IOS Software Smart Install Remote Code Execution Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@cis…)
Cisco Security Advisory: Cisco IOS Software IPv6 over MPLS Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco IOS Software IPv6 Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco IOS Software IPS and Zone-Based Firewall Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@...co.com…)
Cisco Security Advisory: Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerabilities (Cisco Systems Product Security Incident Response Tea…)
Cisco Security Advisory: Cisco IOS Software Data-Link Switching Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco IOS Software Network Address Translation Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@...co.com…)
[ MDVSA-2011:136 ] openssl (security@...driva.com)
[ MDVSA-2011:137 ] openssl (security@...driva.com)
[ MDVSA-2011:138 ] wireshark (security@...driva.com)

September 29 (22 messages)

Joomla! 1.7.0 | Multiple Cross Site Scripting (XSS) Vulnerabilities (YGN Ethical Hacker Group <lists@...g.net>)
Re: VPN provider helped track down alleged LulzSec member (Darren Martyn <d.martyn.fulldisclosure@...il.com>)
Facebook North Scottsdale Inventory - Remote SQL Injection Vulnerability ("research@...nerability-lab.com" <research@...nerability-lab.com>)
Re: Facebook North Scottsdale Inventory - Remote SQL Injection Vulnerability (Ferenc Kovacs <tyra3l@...il.com>)
Re: Facebook North Scottsdale Inventory - Remote SQL Injection Vulnerability ("research@...nerability-lab.com" <research@...nerability-lab.com>)
GSC Chat Server Authentication Bypass ("Michael J. Gray" <mooseous@...il.com>)
GSC Voice Server Denial of Service Vulnerability ("Michael J. Gray" <mooseous@...il.com>)
Re: VPN provider helped track down alleged LulzSec member (Benji <me@...ji.com>)
Re: VPN provider helped track down alleged LulzSec member (Benji <me@...ji.com>)
Re: VPN provider helped track down alleged LulzSec member (Benji <me@...ji.com>)
Re: VPN provider helped track down alleged LulzSec member (Valdis.Kletnieks@...edu)
Re: VPN provider helped track down alleged LulzSec member (Benji <me@...ji.com>)
Re: VPN provider helped track down alleged LulzSec member (James Condron <james@...o-internet.org.uk>)
Re: VPN provider helped track down alleged LulzSec member (Laurelai <laurelai@...echan.org>)
Re: VPN provider helped track down alleged LulzSec member (Darren Martyn <d.martyn.fulldisclosure@...il.com>)
Re: VPN provider helped track down alleged LulzSec member (Benji <me@...ji.com>)
Re: VPN provider helped track down alleged LulzSec member (Benji <me@...ji.com>)
Re: VPN provider helped track down alleged LulzSec member (Darren Martyn <d.martyn.fulldisclosure@...il.com>)
[SECURITY] [DSA 2312-1] iceape security update (Moritz Muehlenhoff <jmm@...ian.org>)
Re: VPN provider helped track down alleged LulzSec member (Georgi Guninski <guninski@...inski.com>)
Re: VPN provider helped track down alleged LulzSec member (Valdis.Kletnieks@...edu)
[SECURITY] [DSA 2313-1] iceweasel security update (Moritz Muehlenhoff <jmm@...ian.org>)

September 30 (18 messages)

Curso Basico de penetration testing - Webcam - Modalidad online en VIVO por internet (Centuno Cursos <cursos@...tunosolutions.com>)
DeepSec 2011 Conference - Final Schedule Published (DeepSec Conference <deepsec@...psec.net>)
Re: VPN provider helped track down alleged LulzSec member (xD 0x41 <secn3t@...il.com>)
Re: VPN provider helped track down alleged LulzSec member (xD 0x41 <secn3t@...il.com>)
Re: VPN provider helped track down alleged LulzSec member (xD 0x41 <secn3t@...il.com>)
VPN providers and any providers in general... (xD 0x41 <secn3t@...il.com>)
Re: VPN provider helped track down alleged LulzSec member (xD 0x41 <secn3t@...il.com>)
Re: VPN provider helped track down alleged LulzSec member (xD 0x41 <secn3t@...il.com>)
Re: VPN provider helped track down alleged LulzSec member (Louis McCoy <louie@...landlighthouse.com>)
Re: VPN provider helped track down alleged LulzSec member (Darren Martyn <d.martyn.fulldisclosure@...il.com>)
Re: VPN provider helped track down alleged LulzSec member (Paul Schmehl <pschmehl_lists@...rr.com>)
Re: VPN provider helped track down alleged LulzSec member (adam <adam@...sy.net>)
Re: VPN provider helped track down alleged LulzSec member (Laurelai <laurelai@...echan.org>)
Re: VPN provider helped track down alleged LulzSec member (Laurelai <laurelai@...echan.org>)
Re: VPN provider helped track down alleged LulzSec member (adam <adam@...sy.net>)
Re: VPN provider helped track down alleged LulzSec member (Laurelai <laurelai@...echan.org>)
Re: VPN provider helped track down alleged LulzSec member (GloW - XD <doomxd@...il.com>)
Re: VPN providers and any providers in general... (Valdis.Kletnieks@...edu)

407 messages

Powered by blists - more mailing lists