full-disclosure mailing list - 2011/11

Messages by day:

November 1 (20 messages)

• The Hacker News (THN) 1st Anniversary Celebration (Mohit Kumar <thehackernews@...il.com>)
• [ GLSA 201111-01 ] Chromium, V8: Multiple vulnerabilities (Alex Legler <a3li@...too.org>)
• Adobe Web-Site Persistence XSS (asish agarwalla <asishagarwalla@...il.com>)
• DDIVRT-2011-33 IBM WebSphere Application Server 'help' Servlet Plug-in Bundle Directory Traversal [CVE-2011-1359] (ddivulnalert <ddivulnalert@...frontline.com>)
• printer attacks? (doc tarrow <doc.tarrow@...il.com>)
• Re: Facebook Attach EXE Vulnerability (mutiny <mutiny@...inbeardsucks.com>)
• Re: Facebook Attach EXE Vulnerability (Ferenc Kovacs <tyra3l@...il.com>)
• Re: printer attacks? (foofus@...fus.net)
• Re: Facebook Attach EXE Vulnerability ("Mikhail A. Utin" <mutin@...monwealthcare.org>)
• [ MDVSA-2011:162 ] kdelibs4 (security@...driva.com)
• Re: Facebook Attach EXE Vulnerability (Peter Dawson <slash.pd@...il.com>)
• Re: Facebook Attach EXE Vulnerability (Valdis.Kletnieks@...edu)
• XSS and SQL Injection Vulnerabilities on Symphony CMS 2.2.3 (Netsparker Advisories <advisories@...itunasecurity.com>)
• XSS Vulnerabilities in eFront (Netsparker Advisories <advisories@...itunasecurity.com>)
• Prosieben Community Website - Persistent Script Code Inject ("research@...nerability-lab.com" <research@...nerability-lab.com>)
• Re: Facebook Attach EXE Vulnerability (xD 0x41 <secn3t@...il.com>)
• Re: Facebook Attach EXE Vulnerability (xD 0x41 <secn3t@...il.com>)
• Re: Facebook Attach EXE Vulnerability (xD 0x41 <secn3t@...il.com>)
• Re: Facebook Attach EXE Vulnerability (xD 0x41 <secn3t@...il.com>)
• Re: THC SSL DOS tool released (coderman <coderman@...il.com>)

• Re: THC SSL DOS tool released (Marsh Ray <marsh@...endedsubset.com>)
• Re: THC SSL DOS tool released (Marc Heuse <mh@...sec.de>)
• PhpMyAdmin Arbitrary File Reading (WooYun <root@...yun.org>)
• Integer Overflow in Apache ap_pregsub via mod-setenvif (halfdog <me@...fdog.net>)
• [ MDVSA-2011:163 ] phpldapadmin (security@...driva.com)
• [ MDVSA-2011:164 ] wireshark (security@...driva.com)
• Cisco Security Advisory: Cisco Small Business SRP500 Series Command Injection Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co…)
• NATO Research & Technology ORG - File Include Vulnerability ("research@...nerability-lab.com" <research@...nerability-lab.com>)
• Citibank CitiDirect - forced usage of vulnerable version of Java Runtime Environment (Tomasz Ostrowski <tometzky@...il.com>)
• Re: printer attacks? (doc tarrow <doc.tarrow@...il.com>)
• Re: THC SSL DOS tool released (coderman <coderman@...il.com>)
• Re: Citibank CitiDirect - forced usage of vulnerable version of Java Runtime Environment (coderman <coderman@...il.com>)
• Re: Citibank CitiDirect - forced usage of vulnerable version of Java Runtime Environment (xD 0x41 <secn3t@...il.com>)

• Serendipity 'serendipity[filter][bp.ALT]' Cross-Site Scripting vulnerability ("SSchurtz@...nline.de" <SSchurtz@...nline.de>)
• CSRF and clickjacking on the web sites of domain registrars (Roman Kümmel <ccuminn@...m.cz>)
• Secunia jumps on vuln reward bandwagon (Georgi Guninski <guninski@...inski.com>)
• Re: Secunia jumps on vuln reward bandwagon (Michele Orru <antisnatchor@...il.com>)
• [ MDVSA-2011:165 ] php (security@...driva.com)
• Re: Secunia jumps on vuln reward bandwagon (Georgi Guninski <guninski@...inski.com>)
• Re: Secunia jumps on vuln reward bandwagon (GloW - XD <doomxd@...il.com>)
• Re: Secunia jumps on vuln reward bandwagon (Ryan Dewhurst <ryandewhurst@...il.com>)
• Re: Secunia jumps on vuln reward bandwagon (xD 0x41 <secn3t@...il.com>)
• Re: Secunia jumps on vuln reward bandwagon (xD 0x41 <secn3t@...il.com>)
• Re: Secunia jumps on vuln reward bandwagon (xD 0x41 <secn3t@...il.com>)
• [ MDVSA-2011:166 ] php (security@...driva.com)
• Re: Secunia jumps on vuln reward bandwagon (adam <adam@...sy.net>)

• Re: THC SSL DOS tool released (coderman <coderman@...il.com>)
• How not to deal with a vulnerability in your code (Laurelai <laurelai@...echan.org>)
• Re: Secunia jumps on vuln reward bandwagon (Georgi Guninski <guninski@...inski.com>)
• Re: How not to deal with a vulnerability in your code (Jeffrey Walton <noloader@...il.com>)
• Re: Secunia jumps on vuln reward bandwagon (Darren Martyn <d.martyn.fulldisclosure@...il.com>)
• WhiteHouse Gov Service - Persistent Web Vulnerability ("research@...nerability-lab.com" <research@...nerability-lab.com>)
• Re: Secunia jumps on vuln reward bandwagon (Adam Chesnutt <icetre@...aristocrats.org>)
• Advanced Poll 2.02 SQL Injection Vulnerability (Yassin Aboukir <01xp01@...il.com>)
• Multiple BSD libc/regcomp(3) Multiple Vulnerabilities (Maksymilian Arciemowicz <cxib@...urityreason.com>)
• [SECURITY] [DSA 2334-1] mahara security update (Moritz Muehlenhoff <jmm@...ian.org>)
• [ MDVSA-2011:167 ] gimp (security@...driva.com)
• Re: How not to deal with a vulnerability in your code (xD 0x41 <secn3t@...il.com>)

• [ GLSA 201111-02 ] Oracle JRE/JDK: Multiple vulnerabilities (Alex Legler <a3li@...too.org>)
• Oracle NoSQL Directory Traversal (Buherátor <buherator@...il.com>)
• Re: Oracle NoSQL Directory Traversal (Valdis.Kletnieks@...edu)
• Re: Oracle NoSQL Directory Traversal (Ed Carp <erc@...ox.com>)
• Re: How not to deal with a vulnerability in your code (Leon Kaiser <literalka@...il.com>)
• Re: Oracle NoSQL Directory Traversal (Ryan Dewhurst <ryandewhurst@...il.com>)
• Re: How not to deal with a vulnerability in your code (xD 0x41 <secn3t@...il.com>)

• Re: How not to deal with a vulnerability in your code (Jeremy Visser <jeremy@...ser.name>)
• Re: Oracle NoSQL Directory Traversal (Valdis.Kletnieks@...edu)
• Re: How not to deal with a vulnerability in your code (Manfred Schmitt <full-disclosure@...shproc.org>)
• Re: How not to deal with a vulnerability in your code (Jeffrey Walton <noloader@...il.com>)
• Strictly social XSS vulnerability in WordPress ("MustLive" <mustlive@...security.com.ua>)
• LabStoRe <= 1.5.4 Sql Injection Vulnerabilities (muuratsalo experimental hack lab <muuratsalo@...il.com>)
• OrderSys <= 1.6.4 Sql Injection Vulnerabilities (muuratsalo experimental hack lab <muuratsalo@...il.com>)
• Re: Symlink vulnerabilities (xD 0x41 <secn3t@...il.com>)
• Re: Symlink vulnerabilities (Ferenc Kovacs <tyra3l@...il.com>)
• Researchers Uncover 'Massive Security Flaws' In Amazon Cloud ("Ivan ." <ivanhec@...il.com>)
• Re: Researchers Uncover 'Massive Security Flaws' In Amazon Cloud (Jeffrey Walton <noloader@...il.com>)

• Re: Researchers Uncover 'Massive Security Flaws' In Amazon Cloud (xD 0x41 <secn3t@...il.com>)
• [SECURITY] [DSA 2335-1] man2html security update (Nico Golde <nico@...lde.de>)
• [SECURITY] [DSA 2337-1] xen security update (Thijs Kinkhorst <thijs@...ian.org>)
• TWSL2011-017: Multiple Vulnerabilities in Merethis Centreon (Trustwave Advisories <TrustwaveAdvisories@...stwave.com>)
• [SECURITY] [DSA 2338-1] moodle security update (Moritz Muehlenhoff <jmm@...ian.org>)
• [SECURITY] [DSA 2339-1] nss security update (Moritz Muehlenhoff <jmm@...ian.org>)
• ZDI-11-317 : Novell ZENWorks Software Packaging Antique ActiveX Control Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-318 : Novell Zenworks Software Packaging LaunchHelp.dll ActiveX Control LaunchProcess Remote Code Execution Vul… (ZDI Disclosures <zdi-disclosures@...pin…)
• ZDI-11-319 : Novell ZENWorks Software Packaging ISGrid.Grid2.1 DoFindReplace bstrReplaceText Parameter Remote Code Exe… (ZDI Disclosures <zdi-disclosures@...pin…)
• ZDI-11-321 : HP Data Protector Notebook Extension Policy Server FinishedCopy Remote SQL Injection Vulnerabilty (ZDI Disclosures <zdi-disclosures@...pingpoint.c…)
• ZDI-11-323 : HP Data Protector Notebook Extension Policy Server LogClientHealth Remote SQL Injection Vulnerabilty (ZDI Disclosures <zdi-disclosures@...pingpoin…)
• ZDI-11-322 : HP Data Protector Notebook Extension Policy Server LogCopyOperation Remote SQL Injection Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpo…)
• ZDI-11-326 : HP Data Protector Notebook Extension Policy Server LogClientInstallation Remote SQL Injection Vulnerabilit… (ZDI Disclosures <zdi-disclosures@...pin…)
• ZDI-11-327 : HP Data Protector Notebook Extension Policy Server LogBackupLocationStatus Remote SQL Injection Vulnerabil… (ZDI Disclosures <zdi-disclosures@...pin…)
• ZDI-11-324 : HP Data Protector Notebook Extension Policy Server RequestCopy Remote SQL Injection Vulnerabilty (ZDI Disclosures <zdi-disclosures@...pingpoint.co…)
• ZDI-11-325 : HP Data Protector Notebook Extension GetPolicies Remote SQL Injection Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• New vulnerabilities in poMMo ("MustLive" <mustlive@...security.com.ua>)

• [SECURITY] [DSA 2340-1] postgresql security update (Thijs Kinkhorst <thijs@...ian.org>)
• foofus.net security advisory - Lexmark Multifunction Printer Information Leakage - percX at foofus.net (dh@...ereddefense.com)
• [SECURITY] [DSA 2336-1] ffmpeg security update (Yves-Alexis Perez <corsac@...ian.org>)
• ZDI-11-320 : GE Proficy iFix HMI/SCADA ihDataArchiver.exe Trusted Header Size Remote Code Execution Vulnerability (Derek Brown <derek.c.brown@...com>)
• WordPress All Versions Full Path Disclosure (FPD) (Ryan Dewhurst <ryandewhurst@...il.com>)
• Re: How not to deal with a vulnerability in your code (Leon Kaiser <literalka@...il.com>)
• Re: How not to deal with a vulnerability in your code (Darren Martyn <d.martyn.fulldisclosure@...il.com>)
• Cisco CUCM - Multiple Vulnerabilities (entomology <entomology@...urity-labs.com>)
• IPv6 security (slides and training) (Fernando Gont <fgont@...networks.com>)
• Re: Tor anonymizing network Compromised by French researchers (not here <zpamh0l3@...il.com>)
• Re: Tor anonymizing network Compromised by French researchers (Travis Biehn <tbiehn@...il.com>)
• [SECURITY] CVE-2011-3376 Apache Tomcat - Privilege Escalation via Manager app (Mark Thomas <markt@...che.org>)
• Re: Tor anonymizing network Compromised by French researchers (Neusbeer <neusbeer@...il.com>)
• CORE-2011-0825: Adobe Shockwave Player TextXtra.x32 vulnerability (CORE Security Technologies Advisories <advisories@...esecurity.com>)
• Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Henri Salo <henri@...v.fi>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Dan Dart <dandart@...glemail.com>)

• [CAL-2011-0052]Adobe Shockwave Player Director File Parsing PAMM memory corruption vulnerability (Code Audit Labs <vulnhunt@...il.com>)
• [CAL-2011-0054]Adobe Shockwave Player Director File Parsing data of rcsl chunk multiple DOS vulnerabilities (Code Audit Labs <vulnhunt@...il.com>)
• LabWiki <= 1.1 Multiple Vulnerabilitie (muuratsalo experimental hack lab <muuratsalo@...il.com>)
• Re: LabWiki <= 1.1 Multiple Vulnerabilitie (muuratsalo experimental hack lab <muuratsalo@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Nahuel Grisolia <nahuel.grisolia@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Darren Martyn <d.martyn.fulldisclosure@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Darren Martyn <d.martyn.fulldisclosure@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (xD 0x41 <secn3t@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Darren Martyn <d.martyn.fulldisclosure@...il.com>)
• osCSS2 "_ID" parameter Local file inclusion ("SSchurtz@...nline.de" <SSchurtz@...nline.de>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Dan Rosenberg <dan.j.rosenberg@...il.com>)
• Multiple Cross-Site-Scripting vulnerabilities in Dolibarr 3.1.0 ("Schurtz, Stefan" <S.Schurtz@...oserve.de>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (xD 0x41 <secn3t@...il.com>)
• List Charter (John Cartwright <johnc@...k.org.uk>)
• Multiple security vulnerabilities in AShop 5.1.3 ("Schurtz, Stefan" <S.Schurtz@...oserve.de>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Dave <mrx@...pergander.org.uk>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Georgi Guninski <guninski@...inski.com>)
• DC4420 - London DEFCON - November 2011 meet - Tuesday 15th November (Major Malfunction <majormal@...ate-radio.org>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Darren Martyn <d.martyn.fulldisclosure@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (GomoR <gomor-fd@...or.org>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Dan Dart <dandart@...glemail.com>)
• [ MDVSA-2011:168 ] apache (security@...driva.com)
• Cisco Security Advisory: Cisco TelePresence System Integrator C Series and Cisco TelePresence EX Series Device Default… (Cisco Systems Product Security Incident…)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Henri Salo <henri@...v.fi>)
• [SECURITY] [DSA 2341-1] iceweasel security update (Moritz Muehlenhoff <jmm@...ian.org>)
• [SECURITY] [DSA 2342-1] iceape security update (Moritz Muehlenhoff <jmm@...ian.org>)
• [ MDVSA-2011:168 ] apache (security@...driva.com)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (xD 0x41 <secn3t@...il.com>)
• [ MDVSA-2011:169 ] mozilla (security@...driva.com)

• [SECURITY] [DSA 2343-1] openssl security update (Raphael Geissert <geissert@...ian.org>)
• How NOT to respond to vulnerability reports (Sam Johnston <samj@...j.net>)
• [FOREGROUND SECURITY 2011-003] Joomla ALFContact 1.9.3 Extension Multiple Cross-Site Scripting (XSS) vulnerabilities (Jose Carlos de Arriba <jcarriba@...egroun…)
• SploitCloud: exploiting cloud brokers for fun and profit (Sam Johnston <samj@...j.net>)
• Drupal String Overrides Module XSS (Justin Klein Keane <justin@...irish.net>)
• XSS vulnerability in Joomla 1.6.3 (Netsparker Advisories <advisories@...itunasecurity.com>)
• New w3af release! (1.1) (Andres Riancho <andres.riancho@...il.com>)
• Re: SploitCloud: exploiting cloud brokers for fun and profit (coderman <coderman@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Georgi Guninski <guninski@...inski.com>)
• Re: SploitCloud: exploiting cloud brokers for fun and profit (Jeffrey Walton <noloader@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Re: SploitCloud: exploiting cloud brokers for fun and profit (xD 0x41 <secn3t@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (xD 0x41 <secn3t@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (xD 0x41 <secn3t@...il.com>)
• psyb0t ... seems to be rather nifty! (xD 0x41 <secn3t@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Valdis.Kletnieks@...edu)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) ("Thor (Hammer of God)" <thor@...merofgod.com>)
• CORE-2011-0919: Apple OS X Sandbox Predefined Profiles Bypass (CORE Security Technologies Advisories <advisories@...esecurity.com>)
• Steam defaced (Henri Salo <henri@...v.fi>)
• Re: Steam defaced (xD 0x41 <secn3t@...il.com>)

• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Tillmann Werner <tillmann.werner@....de>)
• [FOREGROUND SECURITY 2011-004] Infoblox NetMRI 6.2.1 Multiple Cross-Site Scripting (XSS) vulnerabilities (Jose Carlos de Arriba <jcarriba@...egroundsecurity.co…)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (xD 0x41 <secn3t@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (xD 0x41 <secn3t@...il.com>)
• Re: Steam defaced (Jacqui Caren <jacqui.caren@...world.com>)
• Re: Steam defaced (xD 0x41 <secn3t@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Sergito <sergito.lista@...il.com>)
• Re: Steam defaced (Sam Johnston <samj@...j.net>)
• Re: Steam defaced (xD 0x41 <secn3t@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Jon Kertz <jon.kertz@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Ryan Dewhurst <ryandewhurst@...il.com>)
• [ MDVSA-2011:170 ] java-1.6.0-openjdk (security@...driva.com)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Mario Vilas <mvilas@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Gary Baribault <gary@...ibault.net>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Dan Ballance <tzewang.dorje@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Ryan Dewhurst <ryandewhurst@...il.com>)
• ZDI-11-328 : ProFTPD Response Pool Use-After-Free Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• [SECURITY] [DSA 2344-1] python-django-piston security update (Florian Weimer <fw@...eb.enyo.de>)
• [SECURITY] [DSA 2345-1] icedove security update (Florian Weimer <fw@...eb.enyo.de>)
• Skype Vendor Website - Cross Site Scripting Vulnerability ("research@...nerability-lab.com" <research@...nerability-lab.com>)
• iGuard Biometric Access Control - Multiple Vulnerabilities ("research@...nerability-lab.com" <research@...nerability-lab.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (xD 0x41 <secn3t@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (xD 0x41 <secn3t@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (xD 0x41 <secn3t@...il.com>)
• [ GLSA 201111-03 ] OpenTTD: Multiple vulnerabilities (Tim Sammut <underling@...too.org>)
• [ GLSA 201111-04 ] phpDocumentor: Function call injection (Tim Sammut <underling@...too.org>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (xD 0x41 <secn3t@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (xD 0x41 <secn3t@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (xD 0x41 <secn3t@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Valdis.Kletnieks@...edu)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Antony widmal <antony.widmal@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Valdis.Kletnieks@...edu)
• [ MDVSA-2011:171 ] networkmanager (security@...driva.com)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (xD 0x41 <secn3t@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Michal Zalewski <lcamtuf@...edump.cx>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (xD 0x41 <secn3t@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Antony widmal <antony.widmal@...il.com>)

• [ MDVSA-2011:172 ] libreoffice (security@...driva.com)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Mario Vilas <mvilas@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Jon Kertz <jon.kertz@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Dan Ballance <tzewang.dorje@...il.com>)
• Joomla Component (com_content) - Blind SQL Injection Vulnerability ("research@...nerability-lab.com" <research@...nerability-lab.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Ian Hayes <cthulhucalling@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Sergito <sergito.lista@...il.com>)
• Re: Joomla Component (com_content) - Blind SQL Injection Vulnerability (Christian Sciberras <uuf6429@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (xD 0x41 <secn3t@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (xD 0x41 <secn3t@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (xD 0x41 <secn3t@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (xD 0x41 <secn3t@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Antony widmal <antony.widmal@...il.com>)
• Re: Even worse (xD 0x41 <secn3t@...il.com>)
• Re: Even worse (xD 0x41 <secn3t@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Antony widmal <antony.widmal@...il.com>)
• Re: Even worse (xD 0x41 <secn3t@...il.com>)
• Re: Even worse (xD 0x41 <secn3t@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Antony widmal <antony.widmal@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (xD 0x41 <secn3t@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Antony widmal <antony.widmal@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Jeffrey Walton <noloader@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Antony widmal <antony.widmal@...il.com>)
• Recruiting Troopers - Call for Papers, March 21-22 2012 (Enno Rey <erey@...w.de>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Mario Vilas <mvilas@...il.com>)
• Re: Even worse (doc mombasa <doc.mombasa@...il.com>)
• [ MDVSA-2011:173 ] openssl0.9.8 (security@...driva.com)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Darren Martyn <d.martyn.fulldisclosure@...il.com>)

• Re: Joomla Component (com_content) - Blind SQL Injection Vulnerability (Henri Salo <henri@...v.fi>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Robert Kim App and Facebook Marketing <evdo.hsdpa@...il.com>)

• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (dave bl <db.pub.mail@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Georgi Guninski <guninski@...inski.com>)
• [Announcement] ClubHack 2011 Hacking and Security Conference (Abhijeet Patil <getabhijeetpatil@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Chris L <inchcombec@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (baqstabz <baqstabz@...il.com>)
• Even worse (crazy coder <crazycoder1986@...il.com>)
• Re: Even worse (Chris L <inchcombec@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Jon Kertz <jon.kertz@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Dan Ballance <tzewang.dorje@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Valdis.Kletnieks@...edu)
• [Announcement] ClubHack Mag Issue 22- November 2011 Released (Abhijeet Patil <getabhijeetpatil@...il.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Dan Tulovsky <dant@...snow.com>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) (Antony widmal <antony.widmal@...il.com>)
• looking for wpepro analog (Kai <kai@...nn.net>)
• Re: looking for wpepro analog (Guillaume Friloux <guillaume.friloux@...64.com>)
• Re: looking for wpepro analog (Kai <kai@...nn.net>)
• Re: Microsoft Windows vulnerability in TCP/IP Could Allow Remote Code Execution (2588516) ("Thor (Hammer of God)" <thor@...merofgod.com>)
• [ MDVSA-2011:174 ] graphite2 (security@...driva.com)

• Spawn a terminal using OpenOffice, just for funzies. ("Jason A. Donenfeld" <Jason@...c4.com>)
• Microsoft security hotfix MS11-071 alias KB2570947 incomplete ("Stefan Kanthak" <stefan.kanthak@...go.de>)
• Time diffing & injection attacks (airwalker@...il.me)
• Re: looking for wpepro analog (Guillaume Friloux <guillaume.friloux@...64.com>)
• [ MDVSA-2011:175 ] poppler (security@...driva.com)
• [Announcement] ClubHack Mag - Call for Articles (Abhijeet Patil <getabhijeetpatil@...il.com>)
• [SECURITY] [DSA 2346-1] proftpd-dfsg security update (Florian Weimer <fw@...eb.enyo.de>)
• IL, DoS and FPD vulnerabilities in Adobe ColdFusion ("MustLive" <mustlive@...security.com.ua>)

• ZDI-11-329 : InduSoft WebStudio CEServer Operation 0x15 Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-330 : InduSoft WebStudio Unauthenticated Remote Operations Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• [THOTCON 0x3] Call for Papers && Ticket Sales (THOTCON Announce <announce@...tcon.org>)
• [SECURITY] [DSA 2346-2] proftpd-dfsg regression fix (Florian Weimer <fw@...eb.enyo.de>)
• [SECURITY] [DSA 2347-1] bind9 security update (Florian Weimer <fw@...eb.enyo.de>)
• CA20111116-01: Security Notice for CA Directory ("Kotas, Kevin J" <Kevin.Kotas@...com>)

• [ MDVSA-2011:176 ] bind (security@...driva.com)
• bind dos info? ("Larry W. Cashdollar" <bugs@....dhs.org>)
• Re: bind dos info? (Michael Wood <itnetsec@...il.com>)
• Re: bind dos info? (Michael Wood <itnetsec@...il.com>)
• Re: bind dos info? ("Larry W. Cashdollar" <bugs@....dhs.org>)
• Re: bind dos info? (Valdis.Kletnieks@...edu)
• 2nd CfP: SECURWARE 2012 || August 19-24, 2012 - Rome, Italy (Cristina Pascual<cris.pascual.gonzalez@...il.com>)
• Ubuntu 11.10 now unsecure by default (Olivier <feuille@...ibox.fr>)
• Secunia Research: DVR Remote ActiveX Control DVRobot Library Loading Vulnerability (Secunia Research <remove-vuln@...unia.com>)
• HACK EL PLANETA | AnonOps (h@...el.planeta)
• Re: Ubuntu 11.10 now unsecure by default ("Marcio B. Jr." <marcio.barbado@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (Dave <mrx@...pergander.org.uk>)
• US general: 'We're cleared to cyber-bomb enemy hackers' (Georgi Guninski <guninski@...inski.com>)
• Re: Ubuntu 11.10 now unsecure by default (Mario Vilas <mvilas@...il.com>)
• Re: US general: 'We're cleared to cyber-bomb enemy hackers' ("Larry W. Cashdollar" <bugs@....dhs.org>)
• Re: Ubuntu 11.10 now unsecure by default (Cody Robertson <cody@...khost.com>)
• Re: Ubuntu 11.10 now unsecure by default (Valdis.Kletnieks@...edu)
• Re: Ubuntu 11.10 now unsecure by default (James Condron <james@...o-internet.org.uk>)
• Re: Ubuntu 11.10 now unsecure by default ("Larry W. Cashdollar" <bugs@....dhs.org>)
• Re: Ubuntu 11.10 now unsecure by default (Valdis.Kletnieks@...edu)
• Re: Ubuntu 11.10 now unsecure by default (Andrew N Dowden <andrew_dowden@...tdesign.net.nz>)
• Re: Ubuntu 11.10 now unsecure by default (Ryan Dewhurst <ryandewhurst@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default ("Larry W. Cashdollar" <bugs@....dhs.org>)
• [ MDVSA-2011:176-1 ] bind (security@...driva.com)

• Re: US general: 'We're cleared to cyber-bomb enemy hackers' (Jeffrey Walton <noloader@...il.com>)
• Re: bind dos info? (Jeffrey Walton <noloader@...il.com>)
• Re: Tor anonymizing network Compromised by French researchers (Jeffrey Walton <noloader@...il.com>)
• VMSA-2011-0014 VMware vCenter Update Manager fix for Jetty Web server addresses directory traversal vulnerability (VMware Security Team <security@...are.com>)
• Re: Ubuntu 11.10 now unsecure by default (C de-Avillez <cerda@....org>)
• Cross-Site Scripting Vuln in Zoho ManageEngine ADSelfServicePlus (James Webb <james.webb@...apath.com>)
• Re: Ubuntu 11.10 now unsecure by default (Tom Grace <lists-in@...thbycomputers.co.uk>)
• Re: Ubuntu 11.10 now unsecure by default (Olivier <feuille@...ibox.fr>)
• Re: Ubuntu 11.10 now unsecure by default (Mario Vilas <mvilas@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (Valdis.Kletnieks@...edu)
• Re: Ubuntu 11.10 now unsecure by default (Valdis.Kletnieks@...edu)
• Re: Ubuntu 11.10 now unsecure by default (Darren Martyn <d.martyn.fulldisclosure@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (Dan Kaminsky <dan@...para.com>)
• Re: Ubuntu 11.10 now unsecure by default (Darren Martyn <d.martyn.fulldisclosure@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (Valdis.Kletnieks@...edu)
• [ MDVSA-2011:176-2 ] bind (security@...driva.com)
• Re: Ubuntu 11.10 now unsecure by default (Charles Morris <cmorris@...odu.edu>)
• Fujacks Variant Using ACH Lure (Peter Dawson <slash.pd@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (xD 0x41 <secn3t@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (Olivier <feuille@...ibox.fr>)
• Re: Ubuntu 11.10 now unsecure by default (GloW - XD <doomxd@...il.com>)

• Blogs manager <= 1.101 SQL Injection Vulnerability (muuratsalo experimental hack lab <muuratsalo@...il.com>)
• Valid tiny-erp <= 1.6 SQL Injection Vulnerability (muuratsalo experimental hack lab <muuratsalo@...il.com>)
• Freelancer calendar <= 1.01 SQL Injection Vulnerability (muuratsalo experimental hack lab <muuratsalo@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (root <root_@...ertel.com.ar>)
• [SECURITY] [DSA 2349-1] spip security update (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: Ubuntu 11.10 now unsecure by default (Johan Nestaas <johannestaas@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (Leon Kaiser <literalka@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (james@...o-internet.org.uk)
• [ GLSA 201111-05 ] Chromium, V8: Multiple vulnerabilities (Tim Sammut <underling@...too.org>)
• Re: Ubuntu 11.10 now unsecure by default (夜神　岩男 <supergiantpotato@...oo.co.jp>)
• Re: Ubuntu 11.10 now unsecure by default (Dan Kaminsky <dan@...para.com>)
• Re: Ubuntu 11.10 now unsecure by default (james@...o-internet.org.uk)
• Re: Ubuntu 11.10 now unsecure by default (Dan Kaminsky <dan@...para.com>)
• Re: Ubuntu 11.10 now unsecure by default (xD 0x41 <secn3t@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (GloW - XD <doomxd@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (GloW - XD <doomxd@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (GloW - XD <doomxd@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (xD 0x41 <secn3t@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (xD 0x41 <secn3t@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (xD 0x41 <secn3t@...il.com>)

• Re: Ubuntu 11.10 now unsecure by default (root <root_@...ertel.com.ar>)
• Re: Ubuntu 11.10 now unsecure by default (root <root_@...ertel.com.ar>)
• Re: Ubuntu 11.10 now unsecure by default (xD 0x41 <secn3t@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (Robert Kim App and Facebook Marketing <evdo.hsdpa@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (Dan Kaminsky <dan@...para.com>)
• Re: Ubuntu 11.10 now unsecure by default (Leon Kaiser <literalka@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (Memory Vandal <memvandal@...il.com>)
• COMPROMISE LULZ (airwalker@...il.me)
• Re: Ubuntu 11.10 now unsecure by default (Dan Ballance <tzewang.dorje@...il.com>)
• [ GLSA 201111-06 ] MaraDNS: Arbitrary code execution (Alex Legler <a3li@...too.org>)
• [ GLSA 201111-07 ] TinTin++: Multiple vulnerabilities (Alex Legler <a3li@...too.org>)
• [ GLSA 201111-08 ] radvd: Multiple vulnerabilities (Alex Legler <a3li@...too.org>)
• [ GLSA 201111-09 ] Perl Safe module: Arbitrary Perl code injection (Alex Legler <a3li@...too.org>)
• [ GLSA 201111-10 ] Evince: Multiple vulnerabilities (Alex Legler <a3li@...too.org>)
• [ GLSA 201111-11 ] GNU Tar: User-assisted execution of arbitrary code (Alex Legler <a3li@...too.org>)
• [ GLSA 201111-12 ] abcm2ps: Multiple vulnerabilities (Alex Legler <a3li@...too.org>)
• [SECURITY] [DSA 2350-1] freetype security update (Moritz Muehlenhoff <jmm@...ian.org>)
• [SECURITY] [DSA 2348-1] systemtap security update (Moritz Muehlenhoff <jmm@...ian.org>)
• New XSS vulnerability in WP-Cumulus for WordPress and multiple web applications and millions web sites ("MustLive" <mustlive@...security.com.ua>)
• Re: Ubuntu 11.10 now unsecure by default (xD 0x41 <secn3t@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (xD 0x41 <secn3t@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (xD 0x41 <secn3t@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (Ferenc Kovacs <tyra3l@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (xD 0x41 <secn3t@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (xD 0x41 <secn3t@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (xD 0x41 <secn3t@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (xD 0x41 <secn3t@...il.com>)

• Implications of IPv6 on network firewalls (Fernando Gont <fgont@...networks.com>)
• Re: Ubuntu 11.10 now unsecure by default (Valdis.Kletnieks@...edu)
• Re: Ubuntu 11.10 now unsecure by default (Valdis.Kletnieks@...edu)
• Re: Ubuntu 11.10 now unsecure by default ("Jason A. Donenfeld" <Jason@...c4.com>)
• Re: Ubuntu 11.10 now unsecure by default (Darren Martyn <d.martyn.fulldisclosure@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (Benji <me@...ji.com>)
• Re: Ubuntu 11.10 now unsecure by default (Darren Martyn <d.martyn.fulldisclosure@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (Valdis.Kletnieks@...edu)
• Re: Ubuntu 11.10 now unsecure by default (Darren Martyn <d.martyn.fulldisclosure@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (Leon Kaiser <literalka@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (Leon Kaiser <literalka@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (Leon Kaiser <literalka@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (Leon Kaiser <literalka@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (Leon Kaiser <literalka@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (Leon Kaiser <literalka@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (Leon Kaiser <literalka@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (Leon Kaiser <literalka@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (Leon Kaiser <literalka@...il.com>)
• CarolinaCon-8 (2012) Call For Papers/Presenters/Speakers (Vic Vandal <vvandal@...l.com>)
• [ MDVSA-2011:177 ] freetype2 (security@...driva.com)
• Re: Ubuntu 11.10 now unsecure by default (Valdis.Kletnieks@...edu)
• Re: Ubuntu 11.10 now unsecure by default (Dan Kaminsky <dan@...para.com>)
• [SECURITY] [DSA 2351-1] wireshark security update (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: Ubuntu 11.10 now unsecure by default (Valdis.Kletnieks@...edu)
• [US-CERT VU#584363] Pwning a complete fleet of GSM/Tablets (Laurent OUDOT at TEHTRI-Security <laurent.oudot-ml@...tri-security.com>)
• Re: LabWiki <= 1.1 Multiple Vulnerabilitie (Henri Salo <henri@...v.fi>)

• Re: Ubuntu 11.10 now unsecure by default (xD 0x41 <secn3t@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (xD 0x41 <secn3t@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (root <root_@...ertel.com.ar>)
• Re: Ubuntu 11.10 now unsecure by default (xD 0x41 <secn3t@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (xD 0x41 <secn3t@...il.com>)
• Re: NEVER AGAIN (xD 0x41 <secn3t@...il.com>)
• Re: NEVER AGAIN ("Rankin, James R" <kz20fl@...glemail.com>)
• Re: NEVER AGAIN (Nikolay Kichukov <hijacker@...um.net>)
• Re: Ubuntu 11.10 now unsecure by default (Matthew Harlum <seclists@...tuar.net>)
• Re: Ubuntu 11.10 now unsecure by default (Julian DeMarchi <julian@...omputers.com.au>)
• Re: NEVER AGAIN ("Martin Allert" <allert@...go.de>)
• Re: Ubuntu 11.10 now unsecure by default (Valdis.Kletnieks@...edu)
• Re: NEVER AGAIN (Darren Martyn <d.martyn.fulldisclosure@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (Darren Martyn <d.martyn.fulldisclosure@...il.com>)
• Re: NEVER AGAIN (phocean <0x90@...cean.net>)
• Re: NEVER AGAIN (Antony widmal <antony.widmal@...il.com>)
• Re: NEVER AGAIN (James Rankin <kz20fl@...glemail.com>)
• Re: NEVER AGAIN (James Rankin <kz20fl@...glemail.com>)
• Re: NEVER AGAIN (James Rankin <kz20fl@...glemail.com>)
• Re: NEVER AGAIN (Christian Sciberras <uuf6429@...il.com>)
• Re: NEVER AGAIN ("Kain, Rebecca (.)" <bkain1@...d.com>)
• Re: NEVER AGAIN (James Rankin <kz20fl@...glemail.com>)
• Re: NEVER AGAIN (Ferenc Kovacs <tyra3l@...il.com>)
• Re: NEVER AGAIN (Valdis.Kletnieks@...edu)
• Re: NEVER AGAIN (Valdis.Kletnieks@...edu)
• PenTest Magazine - try us for free! (Maciej Kozuszek <maciej.kozuszek@...tware.com.pl>)
• [SECURITY] [DSA 2352-1] puppet security update (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: NEVER AGAIN (root <root_@...ertel.com.ar>)

• Re: NEVER AGAIN (Mario Vilas <mvilas@...il.com>)
• Re: NEVER AGAIN (Valdis.Kletnieks@...edu)
• Re: NEVER AGAIN ("Kain, Rebecca (.)" <bkain1@...d.com>)
• Re: Ubuntu 11.10 now unsecure by default (Mihamina Rakotomandimby <mihamina@...mb.org>)
• Re: Ubuntu 11.10 now unsecure by default (Dan Ballance <tzewang.dorje@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (Memory Vandal <memvandal@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (charlie@...kymunkey.com)
• CodeV discovers 31 vulnerabilitys on 5 OS softwares (Press - Dognædis <press@...naedis.com>)
• Re: NEVER AGAIN (Laurelai <laurelai@...echan.org>)
• Re: Ubuntu 11.10 now unsecure by default (dave bl <db.pub.mail@...il.com>)
• Re: CodeV discovers 31 vulnerabilitys on 5 OS softwares (Ferenc Kovacs <tyra3l@...il.com>)
• Re: Ubuntu 11.10 now unsecure by default (charlie@...kymunkey.com)
• Re: Ubuntu 11.10 now unsecure by default (adam <adam@...sy.net>)
• Re: Ubuntu 11.10 now unsecure by default (deepquest@...oo.com)
• Re: CodeV discovers 31 vulnerabilitys on 5 OS softwares (Javier Bassi <javierbassi@...il.com>)
• Re: CodeV discovers 31 vulnerabilitys on 5 OS softwares (xD 0x41 <secn3t@...il.com>)
• Pro Clan Manager 0.4.2 – Multiple Vulnerabilities (Darren McDonald <athena@...donald.net>)
• One Click Orgs 1.4.1 Multiple Vulnerabilities (Darren McDonald <athena@...donald.net>)

• 0A29-11-1 : Cross-Site Scripting vulnerabilities in HP Network Node Manager i 9.10 (0a29 40 <0a2940@...il.com>)
• XSS attack on Edlio.com school websites (Nate Theis <nttheis@...il.com>)
• Re: PenTest Magazine - try us for free! (FIRST FIX YOUR XSS and other bUGS in PAGE..) (Tomy <support@...db.info>)
• [SECURITY] [DSA 2353-1] ldns security update (Moritz Muehlenhoff <jmm@...ian.org>)

• [ MDVSA-2011:178 ] glibc (security@...driva.com)
• [ MDVSA-2011:179 ] glibc (security@...driva.com)

• Multiple vulnerabilities in TinyMCE and flvPlayer and hundreds of web applications ("MustLive" <mustlive@...security.com.ua>)

• Re: CodeV discovers 31 vulnerabilitys on 5 OS softwares (doc mombasa <doc.mombasa@...il.com>)

• Re: PenTest Magazine - try us for free! (FIRST FIX YOUR XSS and other bUGS in PAGE..) (Patrick Webster <patrick@...hack.com>)
• Re: PenTest Magazine - try us for free! (FIRST FIX YOUR XSS and other bUGS in PAGE..) (Valdis.Kletnieks@...edu)
• Re: Context IS Advisory - Apache Reverse Proxy Bypass Vulnerability (Ferenc Kovacs <tyra3l@...il.com>)
• WPScan 1.1 released (Ryan Dewhurst <ryandewhurst@...il.com>)
• Adapt CMS v2.0.1 - SQL Injection Vulnerability ("research@...nerability-lab.com" <research@...nerability-lab.com>)
• Is there anything wrong with Skype? (ebhakt <ebhakt@...il.com>)
• [ MDVSA-2011:180 ] php-suhosin (security@...driva.com)
• ZDI-11-331 : RealNetwork RealPlayer MPG Width Integer Underflow Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-332 : RealNetworks RealPlayer Malformed AAC File Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-333 : RealNetworks RealPlayer ATRC Code Data Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-334 : RealNetworks RealPlayer genr Sample Size Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-335 : RealNetworks RealPlayer RV10 Sample Height Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-336 : RealNetworks RealPlayer Invalid Codec Name Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-337 : RealNetworks RealPlayer RV30 Uninitialized Index Value Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-11-338 : RealNetworks RealPlayer IVR MLTI Chunk Length Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)

• Security-Assessment.com Release: Hacking Hollywood Slides, Advisories and Exploits (Nick Freeman <nick.freeman@...urity-assessment.com>)
• Computer Networks Special Issue on Botnets: Deadline Extended to Dec. 19 (Guofei Gu<smart.gophy@...il.com>)

• CanSecWest 2012 Mar 7-9; 2nd call for papers, closes next week, Monday. Dec 5 2011 (Dragos Ruiu <dr@....net>)
• New FREE security tool! (noreply@...loitpack.com)
• New FREE security tool! (noreply@...loitpack.com)
• mazur.harvard.edu database leak (sinep@...h.com)
• Re: New FREE security tool! (Mario Vilas <mvilas@...il.com>)
• Voxsmart VoxRecord Control Centre - Blind SQLi and auth. bypass (Piotr Duszynski <piotr@...zynski.eu>)
• FreeBSD ftpd and ProFTPd on FreeBSD remote r00t exploit ("HI-TECH ." <isowarez.isowarez.isowarez@...glemail.com>)
• Serv-U Remote ("HI-TECH ." <isowarez.isowarez.isowarez@...glemail.com>)
• Writing Self Modifying Code ("Adam Behnke" <adam@...osecinstitute.com>)
• Re: FreeBSD ftpd and ProFTPd on FreeBSD remote r00t exploit (noreply@...loitpack.com)
• [SECURITY] [DSA 2355-1] clearsilver security update (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: FreeBSD ftpd and ProFTPd on FreeBSD remote r00t exploit ("HI-TECH ." <isowarez.isowarez.isowarez@...glemail.com>)
• Re: Writing Self Modifying Code (upb <upbupb@...il.com>)
• Re: FreeBSD ftpd and ProFTPd on FreeBSD remote r00t exploit (root <root_@...ertel.com.ar>)
• XSSer v1.6 -beta- aka "Grey Swarm!" released. (psy <root@...depsylon.net>)

462 messages

Powered by blists - more mailing lists