full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2011/12

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 37	² 33	³ 9	⁴ 9
⁵ 33	⁶ 45	⁷ 56	⁸ 39	⁹ 21	¹⁰ 7	¹¹ 8
¹² 21	¹³ 37	¹⁴ 6	¹⁵ 12	¹⁶ 6	¹⁷	¹⁸ 9
¹⁹ 11	²⁰ 8	²¹ 3	²² 28	²³ 17	²⁴ 8	²⁵ 8
²⁶ 4	²⁷ 6	²⁸ 5	²⁹ 9	³⁰ 8	³¹ 9

Messages by day:

December 1 (37 messages)

Re: Wordpress plugin BackWPup Remote and Local Code Execution Vulnerability - SOS-11-003 (Henri Salo <henri@...v.fi>)
Is FD no longer unmoderated? (David Blanc <davidblanc1975@...il.com>)
Re: Is FD no longer unmoderated? (Valdis.Kletnieks@...edu)
Re: New FREE security tool! (Gino <g@...7.io>)
Re: Is FD no longer unmoderated? (Stefan Weimar <full-disclosure@...is.toppoint.de>)
PHP Inventory 1.3.1 Remote (Auth Bypass) SQL Injection Vulnerability ("Schurtz, Stefan" <S.Schurtz@...oserve.de>)
[SECURITY] [DSA 2354-1] cups security update (Yves-Alexis Perez <corsac@...ian.org>)
Client aproach (Miguel Lopes <theoverblue@...il.com>)
Re: New FREE security tool! (Samuel Lavitt <samuel.lavitt@....com>)
News issue of PenTest Magazine - 21 pages of free content. (Maciej Kozuszek <maciej.kozuszek@...tware.com.pl>)
Infosys TCS Wipro like companies don't know security basics? (Wonder Guy <blrwonderguy@...il.com>)
Re: New FREE security tool! (Stefan Edwards <saedwards.ecc@...il.com>)
Re: New FREE security tool! (Mario Vilas <mvilas@...il.com>)
Re: Client aproach (Ferenc Kovacs <tyra3l@...il.com>)
Re: Infosys TCS Wipro like companies don't know security basics? (Valdis.Kletnieks@...edu)
Re: New FREE security tool! (Christopher Truncer <CTruncer@...istophertruncer.com>)
Re: Client aproach ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: Client aproach (Peter Dawson <slash.pd@...il.com>)
Re: Infosys TCS Wipro like companies don't know security basics? ("TAS" <p0wnsauc3@...il.com>)
Large password list (Addy Yeow <ayeowch@...il.com>)
Re: Large password list ("Fabio Pietrosanti (naif)" <lists@...osecurity.ch>)
Re: New FREE security tool! (noreply@...loitpack.com)
Re: New FREE security tool! (xD 0x41 <secn3t@...il.com>)
Re: Writing Self Modifying Code (coderman <coderman@...il.com>)
Multiple vulnerabilities in RoundCube ("MustLive" <mustlive@...security.com.ua>)
[SECURITY] [DSA 2356-1] openjdk-6 security update (Florian Weimer <fw@...eb.enyo.de>)
Re: Is FD no longer unmoderated? (Nick Boyce <nick.boyce@...il.com>)
Re: New FREE security tool! (ghost <ghosts@...il.com>)
InfoSec Southwest 2012 CFP ("I)ruid" <druid@...ghq.org>)
Re: FreeBSD ftpd and ProFTPd on FreeBSD remote r00t exploit (Jason Hellenthal <jhell@...aIX.net>)
Re: Infosys TCS Wipro like companies don't know security basics? ("phyco.rootelement phyco.rootelement" <phyco.rootelement@...il.com>)
Re: Client aproach (Miguel Lopes <theoverblue@...il.com>)
Re: Client aproach (Miguel Lopes <theoverblue@...il.com>)
Re: Client aproach (Chris L <inchcombec@...il.com>)
Re: Infosys TCS Wipro like companies don't know security basics? (Wonder Guy <blrwonderguy@...il.com>)
FreeBSD ftpd & ProFTPd on FreeBSD exploit in Action [HACKTRO] :> ("HI-TECH ." <isowarez.isowarez.isowarez@...glemail.com>)
Re: FreeBSD ftpd & ProFTPd on FreeBSD exploit in Action [HACKTRO] :> (xD 0x41 <secn3t@...il.com>)

December 2 (33 messages)

International Checkout (Philippe Meunier <meunier@....neu.edu>)
SANS AppSec 2012 CFP reminder (SANS AppSec CFP <callforpapers-appsec@...s.org>)
Re: Large password list (Addy Yeow <ayeowch@...il.com>)
Re: Large password list (adam <adam@...sy.net>)
Re: Large password list (Benji <me@...ji.com>)
Re: Large password list (adam <adam@...sy.net>)
Re: Large password list (xD 0x41 <secn3t@...il.com>)
Re: Large password list (xD 0x41 <secn3t@...il.com>)
Re: Large password list (adam <adam@...sy.net>)
Re: New FREE security tool! (Antony widmal <antony.widmal@...il.com>)
Re: Large password list (Gary Baribault <gary@...ibault.net>)
Re: New FREE security tool! (xD 0x41 <secn3t@...il.com>)
Re: Large password list (Valdis.Kletnieks@...edu)
Re: FreeBSD ftpd and ProFTPd on FreeBSD remote r00t exploit (Michal Zalewski <lcamtuf@...edump.cx>)
Re: Large password list (Sanguinarious Rose <SanguineRose@...ultusTerra.com>)
Re: Large password list (xD 0x41 <secn3t@...il.com>)
Re: New FREE security tool! (Sanguinarious Rose <SanguineRose@...ultusTerra.com>)
Re: New FREE security tool! (xD 0x41 <secn3t@...il.com>)
Re: New FREE security tool! (xD 0x41 <secn3t@...il.com>)
Re: Large password list (xD 0x41 <secn3t@...il.com>)
Re: Voxsmart VoxRecord Control Centre - Blind SQLi and auth. bypass (Piotr Duszynski <piotr@...zynski.eu>)
Re: Large password list (Mario Vilas <mvilas@...il.com>)
Re: Voxsmart VoxRecord Control Centre - Blind SQLi and auth. bypass (Michele Orru <antisnatchor@...il.com>)
Carrier IQ for your phone ("Kain, Rebecca (.)" <bkain1@...d.com>)
Re: Large password list (Travis Biehn <tbiehn@...il.com>)
Re: Large password list (Travis Biehn <tbiehn@...il.com>)
Re: Large password list (Jeffrey Walton <noloader@...il.com>)
Re: Large password list (Charles Morris <cmorris@...odu.edu>)
Re: Large password list (Gage Bystrom <themadichib0d@...il.com>)
Re: Large password list (GloW - XD <doomxd@...il.com>)
Re: Large password list (Valdis.Kletnieks@...edu)
Re: Large password list (Charles Morris <cmorris@...odu.edu>)
Re: Large password list (Ferenc Kovacs <tyra3l@...il.com>)

December 3 (9 messages)

fast and somewhat reliable cache timing (Michal Zalewski <lcamtuf@...edump.cx>)
VSFTPD Remote Heap Overrun (low severity) ("HI-TECH ." <isowarez.isowarez.isowarez@...glemail.com>)
Re: Large password list (Charles Morris <cmorris@...odu.edu>)
Re: Is FD no longer unmoderated? (Bipin Gautam <bipin.gautam@...il.com>)
Re: fast and somewhat reliable cache timing (Michele Orru <antisnatchor@...il.com>)
Re: Carrier IQ for your phone (shyyqvfpybfher@...ie.me.uk (Alan J. Wylie))
Indexed blind SQL injection (Nam Nguyen <namn@...emoon.com.vn>)
Re: fast and somewhat reliable cache timing (xD 0x41 <secn3t@...il.com>)
Re: fast and somewhat reliable cache timing (xD 0x41 <secn3t@...il.com>)

December 4 (9 messages)

Vulnerabilities in Zeema CMS ("MustLive" <mustlive@...security.com.ua>)
Re: fast and somewhat reliable cache timing (Michal Zalewski <lcamtuf@...edump.cx>)
Re: Vulnerabilities in Zeema CMS (Henri Salo <henri@...v.fi>)
[SECURITY] [DSA 2357-1] evince security update (Yves-Alexis Perez <corsac@...ian.org>)
Recruiting Troopers - Call for Papers, March 21-22 2012 (Enno Rey <erey@...w.de>)
Re: Indexed blind SQL injection (Владимир Воронцов <vladimir.vorontsov@...ec.ru>)
Re: Carrier IQ for your phone (coderman <coderman@...il.com>)
Re: fast and somewhat reliable cache timing (xD 0x41 <secn3t@...il.com>)
Re: Carrier IQ for your phone (Dave <mrx@...pergander.org.uk>)

December 5 (33 messages)

Re: Large password list (Nate Theis <nttheis@...il.com>)
Re: Writing Self Modifying Code (Andrew King <aking1012.com@...il.com>)
Re: Large password list (xD 0x41 <secn3t@...il.com>)
Re: Large password list (Alessandro Tagliapietra <tagliapietra.alessandro@...il.com>)
one of my servers has been compromized (Lucio Crusca <lucio@...web.org>)
Re: one of my servers has been compromized (Dan Ballance <tzewang.dorje@...il.com>)
Re: one of my servers has been compromized (Lucio Crusca <lucio@...web.org>)
Re: one of my servers has been compromized (Gage Bystrom <themadichib0d@...il.com>)
Re: one of my servers has been compromized (Ferenc Kovacs <tyra3l@...il.com>)
Re: one of my servers has been compromized (Lucio Crusca <lucio@...web.org>)
Re: one of my servers has been compromized (Chris M <chris@...lroute.net>)
Re: one of my servers has been compromized (Christophe Garault <letoff@...il.com>)
Re: one of my servers has been compromized (mitchell <mitchell@....bg>)
Re: one of my servers has been compromized (Lucio Crusca <lucio@...web.org>)
Re: one of my servers has been compromized (John Jacobs <flamdugen@...mail.com>)
Re: one of my servers has been compromized (Michael Wood <itnetsec@...il.com>)
Re: one of my servers has been compromized (Tim <tim-security@...tinelchicken.org>)
Re: one of my servers has been compromized (John Jacobs <flamdugen@...mail.com>)
Re: one of my servers has been compromized (Dave <mrx@...pergander.org.uk>)
Re: one of my servers has been compromized (James Condron <james@...o-internet.org.uk>)
Re: one of my servers has been compromized (Lucio Crusca <lucio@...web.org>)
Re: one of my servers has been compromized (Tim <tim-security@...tinelchicken.org>)
Re: one of my servers has been compromized (John Jacobs <flamdugen@...mail.com>)
Re: one of my servers has been compromized (Paul Schmehl <pschmehl_lists@...rr.com>)
Re: one of my servers has been compromized (Tim <tim-security@...tinelchicken.org>)
Re: one of my servers has been compromized (Paul Schmehl <pschmehl_lists@...rr.com>)
Re: one of my servers has been compromized (Lucio Crusca <lucio@...web.org>)
Re: one of my servers has been compromized (John Jacobs <flamdugen@...mail.com>)
[SECURITY] [DSA 2358-1] openjdk-6 security update (Florian Weimer <fw@...eb.enyo.de>)
Re: one of my servers has been compromized (Gage Bystrom <themadichib0d@...il.com>)
Re: one of my servers has been compromized (Javier Bassi <javierbassi@...il.com>)
C|Net Download.Com is now bundling Nmap with malware! (Michael Wood <itnetsec@...il.com>)
Re: C|Net Download.Com is now bundling Nmap with malware! (nix@...roxylists.com)

December 6 (45 messages)

Re: one of my servers has been compromized (Aris Adamantiadis <aris@...adc0de.be>)
Re: one of my servers has been compromized (Dan Ballance <tzewang.dorje@...il.com>)
Re: one of my servers has been compromized ("Larry W. Cashdollar" <larry0@...com>)
[CVE-2011-4343] Apache MyFaces information disclosure vulnerability (Leonardo Uribe <lu4242@...che.org>)
Re: one of my servers has been compromized ("Larry W. Cashdollar" <larry0@...com>)
Re: one of my servers has been compromized (Josh Yavor <josh.yavor@...il.com>)
Re: one of my servers has been compromized (sam <er.sureshprajapati@...il.com>)
Re: one of my servers has been compromized (Dan Ballance <tzewang.dorje@...il.com>)
Re: one of my servers has been compromized (John Jacobs <flamdugen@...mail.com>)
Backdoor in EPractize Labs Online Subscription Manager from epractizelabs.com (Jan van Niekerk <jvnkrk@...il.com>)
Re: one of my servers has been compromized (Guillaume Friloux <guillaume.friloux@...64.com>)
Fwd: Backdoor in EPractize Labs Online Subscription Manager from epractizelabs.com (Jan van Niekerk <jvnkrk@...il.com>)
Re: one of my servers has been compromized (Lucio Crusca <lucio@...web.org>)
Re: one of my servers has been compromized (BH <lists@...ckhat.bz>)
Re: one of my servers has been compromized (Gage Bystrom <themadichib0d@...il.com>)
Re: one of my servers has been compromized (Lucio Crusca <lucio@...web.org>)
prosec (white powder <whitepowder1337@...il.com>)
FB privacy breach - view PRIVATE Facebook photos (Peter Dawson <slash.pd@...il.com>)
OMIGOD CIQ HACKING THE WORLD. (Christian Sciberras <uuf6429@...il.com>)
Re: one of my servers has been compromized (Kerem Erciyes <kerem.erciyes@...il.com>)
Re: prosec ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: prosec (adam <adam@...sy.net>)
Re: FB privacy breach - view PRIVATE Facebook photos (Lamar Spells <lamar.spells@...il.com>)
Re: FB privacy breach - view PRIVATE Facebook photos (darway yohansen <darway.level5@...il.com>)
Re: FB privacy breach - view PRIVATE Facebook photos (adam <adam@...sy.net>)
Re: Carrier IQ for your phone (Georgi Guninski <guninski@...inski.com>)
Re: Carrier IQ for your phone (Jeff Kell <jeff-kell@....edu>)
Re: one of my servers has been compromized (Valdis.Kletnieks@...edu)
Re: one of my servers has been compromized (Valdis.Kletnieks@...edu)
Re: one of my servers has been compromized (Paul Schmehl <pschmehl_lists@...rr.com>)
Re: one of my servers has been compromized (Gage Bystrom <themadichib0d@...il.com>)
Re: prosec (Ferenc Kovacs <tyra3l@...il.com>)
Re: one of my servers has been compromized (Gage Bystrom <themadichib0d@...il.com>)
Re: one of my servers has been compromized (Paul Schmehl <pschmehl_lists@...rr.com>)
[SECURITY] [DSA 2359-1] mojarra security update (Florian Weimer <fw@...eb.enyo.de>)
Re: prosec (Ac1d B1tch3z <ac1db1tch3z@...il.com>)
Re: prosec (Ac1d B1tch3z <ac1db1tch3z@...il.com>)
Re: prosec (xD 0x41 <secn3t@...il.com>)
[SECURITY] [DSA 2360-1] Two month advance notification for upcoming end-of-life for Debian oldstable (Moritz Muehlenhoff <jmm@...ian.org>)
Re: one of my servers has been compromized (John Jacobs <flamdugen@...mail.com>)
Re: one of my servers has been compromized (Charles Morris <cmorris@...odu.edu>)
Re: one of my servers has been compromized (Gage Bystrom <themadichib0d@...il.com>)
Re: OMIGOD CIQ HACKING THE WORLD. (Christian Sciberras <uuf6429@...il.com>)
Re: one of my servers has been compromized (Valdis.Kletnieks@...edu)
Re: one of my servers has been compromized (Gage Bystrom <themadichib0d@...il.com>)

December 7 (56 messages)

Re: one of my servers has been compromized (Valdis.Kletnieks@...edu)
Re: OMIGOD CIQ HACKING THE WORLD. (Jeffrey Walton <noloader@...il.com>)
Re: one of my servers has been compromized (Charles Morris <cmorris@...odu.edu>)
Re: one of my servers has been compromized (John Jacobs <flamdugen@...mail.com>)
Re: one of my servers has been compromized (Gage Bystrom <themadichib0d@...il.com>)
Re: distributing passwords to users (Gage Bystrom <themadichib0d@...il.com>)
Re: distributing passwords to users (Gage Bystrom <themadichib0d@...il.com>)
Re: distributing passwords to users (Gage Bystrom <themadichib0d@...il.com>)
Re: FB privacy breach - view PRIVATE Facebook photos (Lamar Spells <lamar.spells@...il.com>)
Re: Carrier IQ for your phone (security+lists@...ernecto.net)
Re: distributing passwords to users (Martijn Broos <martijn.broos@...xion.com>)
Re: Carrier IQ for your phone (Dave <mrx@...pergander.org.uk>)
PenTest mag (Olga Głowala <olga.glowala@...tware.com.pl>)
Re: OMIGOD CIQ HACKING THE WORLD. (Pablo Ximenes <pablo@...en.es>)
Re: OMIGOD CIQ HACKING THE WORLD. (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: OMIGOD CIQ HACKING THE WORLD. (Pablo Ximenes <pablo@...en.es>)
Re: OMIGOD CIQ HACKING THE WORLD. (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: FB privacy breach - view PRIVATE Facebook photos (Peter Dawson <slash.pd@...il.com>)
Re: OMIGOD CIQ HACKING THE WORLD. (Pablo Ximenes <pablo@...en.es>)
Re: OMIGOD CIQ HACKING THE WORLD. (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: OMIGOD CIQ HACKING THE WORLD. (Pablo Ximenes <pablo@...en.es>)
Re: one of my servers has been compromized (Paul Schmehl <pschmehl_lists@...rr.com>)
[ MDVSA-2011:181 ] proftpd (security@...driva.com)
Re: one of my servers has been compromized (Gage Bystrom <themadichib0d@...il.com>)
Google open redirect (secure poon <suckure@...il.com>)
Re: Google open redirect (Michele Orru <antisnatchor@...il.com>)
Re: PenTest mag (Dave <mrx@...pergander.org.uk>)
Re: PenTest mag (xD 0x41 <secn3t@...il.com>)
Re: PenTest mag (Gage Bystrom <themadichib0d@...il.com>)
Re: PenTest mag (Gage Bystrom <themadichib0d@...il.com>)
[SECURITY] [DSA 2361-1] chasen security update (Florian Weimer <fw@...eb.enyo.de>)
Re: PenTest mag (GloW - XD <doomxd@...il.com>)
Re: PenTest mag (Gage Bystrom <themadichib0d@...il.com>)
Re: PenTest mag (xD 0x41 <secn3t@...il.com>)
Re: PenTest mag (Gage Bystrom <themadichib0d@...il.com>)
Re: one of my servers has been compromized (Paul Schmehl <pschmehl_lists@...rr.com>)
XSS, SQLi and IL vulnerabilities in Zeema CMS ("MustLive" <mustlive@...security.com.ua>)
Re: PenTest mag (Dave <mrx@...pergander.org.uk>)
Re: one of my servers has been compromized (Gage Bystrom <themadichib0d@...il.com>)
ZDI-11-340 : Apple Quicktime Font Table Signed Length Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-341 : Cisco WebEx Player WRF Type 0 Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-342 : Novell ZENworks Asset Management Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-343 : RealNetworks RealPlayer mp4arender esds channel count Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-345 : TrendMicro Control Manager CmdProcessor.exe AddTask Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-344 : RealNetworks RealPlayer RV20 Decoding Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: PenTest mag (xD 0x41 <secn3t@...il.com>)
Re: PenTest mag (Tomy <support@...db.info>)
Re: PenTest mag (Gage Bystrom <themadichib0d@...il.com>)
Re: PenTest mag (Tomy <support@...db.info>)
Re: PenTest mag (xD 0x41 <secn3t@...il.com>)
Re: PenTest mag (Gage Bystrom <themadichib0d@...il.com>)
Re: PenTest mag (Ferenc Kovacs <tyra3l@...il.com>)
Re: PenTest mag (Gage Bystrom <themadichib0d@...il.com>)
Re: PenTest mag (xD 0x41 <secn3t@...il.com>)
Re: PenTest mag (xD 0x41 <secn3t@...il.com>)
Re: PenTest mag (Gage Bystrom <themadichib0d@...il.com>)

December 8 (39 messages)

Re: PenTest mag (Gage Bystrom <themadichib0d@...il.com>)
[HITB-Announce] HITB2012AMS Call For Papers Now Open (Hafez Kamal <aphesz@...kinthebox.org>)
Re: Google open redirect (Nick FitzGerald <nick@...us-l.demon.co.uk>)
Re: Google open redirect (Michal Zalewski <lcamtuf@...edump.cx>)
Re: Google open redirect (Luis Santana <hacktalkblog@...il.com>)
Re: Google open redirect (Michal Zalewski <lcamtuf@...edump.cx>)
Re: Google open redirect (Michal Zalewski <lcamtuf@...edump.cx>)
Re: Google open redirect (Dave <mrx@...pergander.org.uk>)
Re: Google open redirect (Michal Zalewski <lcamtuf@...edump.cx>)
Re: Google open redirect (Tavis Ormandy <taviso@...xchg8b.com>)
Restorepoint Remote root command execution vulnerability - CVE-2011-4201 CVE-2011-4202 (Tavaris Desamito <tavaris.desamito@...stmatta.com>)
DDIVRT-2011-38 KnowledgeTree login.php Blind SQL Injection (ddivulnalert <ddivulnalert@...frontline.com>)
[Fwd: Updates on Download.Com caught adding malware to Nmap installer] (mutin@...os.com)
Evilgrade pwning Java updates since 2007.. (Francisco Amato <famato@...obytesec.com>)
0A29-11-2 : Privilege escalation vulnerability in HP Application Lifestyle Management (ALM) Platform v11 (0a29 40 <0a2940@...il.com>)
Re: DDIVRT-2011-38 KnowledgeTree login.php Blind SQL Injection (James Condron <james@...o-internet.org.uk>)
Re: [Fwd: Updates on Download.Com caught adding malware to Nmap installer] (Gage Bystrom <themadichib0d@...il.com>)
Re: FB privacy breach - view PRIVATE Facebook photos (Peter Dawson <slash.pd@...il.com>)
Re: Google open redirect (Charles Morris <cmorris@...odu.edu>)
Re: Google open redirect (Benji <me@...ji.com>)
[TEHTRI-Security] Ultra quick dummy PHP hacking challenge for FD readers (Laurent OUDOT at TEHTRI-Security <laurent.oudot-ml@...tri-security.com>)
Re: Google open redirect (Charles Morris <cmorris@...odu.edu>)
Re: Google open redirect (Benji <me@...ji.com>)
Re: Google open redirect (Charles Morris <cmorris@...odu.edu>)
Re: Google open redirect (Charles Morris <cmorris@...odu.edu>)
Re: Google open redirect (Pablo Ximenes <pablo@...en.es>)
Re: Google open redirect (Pablo Ximenes <pablo@...en.es>)
Re: Google open redirect (Charles Morris <cmorris@...odu.edu>)
VLAN Hacking Tutorial at InfoSec Institute ("Adam Behnke" <adam@...osecinstitute.com>)
Re: Google open redirect (Michal Zalewski <lcamtuf@...edump.cx>)
Re: Google open redirect (Pablo Ximenes <pablo@...en.es>)
Re: Google open redirect (Valdis.Kletnieks@...edu)
Re: Google open redirect (Gage Bystrom <themadichib0d@...il.com>)
[ MDVSA-2011:182 ] dhcp (security@...driva.com)
Re: Google open redirect (Pablo Ximenes <pablo@...en.es>)
Re: Google open redirect (Valdis.Kletnieks@...edu)
DC4420 - London DEFCON - 13 December 2011 (Major Malfunction <majormal@...ate-radio.org>)
AST-2011-013: Possible remote enumeration of SIP endpoints with differing NAT settings ("Asterisk Security Team" <security@...erisk.org>)
AST-2011-014: Remote crash possibility with SIP and the “automon” feature enabled ("Asterisk Security Team" <security@...erisk.org>)

December 9 (21 messages)

Re: Google open redirect (secure poon <suckure@...il.com>)
Re: Minimum Syslog Level Needed for Court Trial (Gage Bystrom <themadichib0d@...il.com>)
Re: Minimum Syslog Level Needed for Court Trial (xD 0x41 <secn3t@...il.com>)
Re: Minimum Syslog Level Needed for Court Trial (tc <toughcrowd@...il.com>)
Re: Minimum Syslog Level Needed for Court Trial (xD 0x41 <secn3t@...il.com>)
Re: Minimum Syslog Level Needed for Court Trial (Ferenc Kovacs <tyra3l@...il.com>)
Re: VLAN Hacking Tutorial at InfoSec Institute (Memory Vandal <memvandal@...il.com>)
Re: VLAN Hacking Tutorial at InfoSec Institute (Bob Dobbs <bobd10937@...il.com>)
List Charter (John Cartwright <johnc@...k.org.uk>)
CA20111208-01: Security Notice for CA SiteMinder ("Williams, James K" <James.Williams@...com>)
Re: Minimum Syslog Level Needed for Court Trial (Charles Morris <cmorris@...odu.edu>)
Re: Full-Disclosure Digest, Vol 82, Issue 20 (t0hitsugu <tohitsugu@...il.com>)
Re: Minimum Syslog Level Needed for Court Trial (phocean <0x90@...cean.net>)
Re: VLAN Hacking Tutorial at InfoSec Institute (Nate Theis <nttheis@...il.com>)
Re: Google open redirect (Marsh Ray <marsh@...endedsubset.com>)
Re: Minimum Syslog Level Needed for Court Trial (Andrew D Kirch <trelane@...lane.net>)
Re: Google open redirect (Michal Zalewski <lcamtuf@...edump.cx>)
Re: Google open redirect (Valdis.Kletnieks@...edu)
Re: Google open redirect (Dave <mrx@...pergander.org.uk>)
Fwd: VSFTPD Remote Heap Overrun (low severity) ("HI-TECH ." <isowarez.isowarez.isowarez@...glemail.com>)
Re: Fwd: VSFTPD Remote Heap Overrun (low severity) (GloW - XD <doomxd@...il.com>)

December 10 (7 messages)

Re: Fwd: VSFTPD Remote Heap Overrun (low severity) (GloW - XD <doomxd@...il.com>)
[SECURITY] [DSA 2362-1] acpid security update (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Google open redirect (Tavis Ormandy <taviso@...xchg8b.com>)
[CFP] FRHACK Africa 2012 Call For Papers (Jerome Athias <jerome@...peas.com>)
silly PoCs continue: X-Frame-Options give you less than expected (Michal Zalewski <lcamtuf@...edump.cx>)
Re: silly PoCs continue: X-Frame-Options give you less than expected (xD 0x41 <secn3t@...il.com>)
Re: silly PoCs continue: X-Frame-Options give you less than expected (Dave <mrx@...pergander.org.uk>)

December 11 (8 messages)

[ MDVSA-2011:183 ] pidgin (security@...driva.com)
Re: silly PoCs continue: X-Frame-Options give you less than expected (Christian Sciberras <uuf6429@...il.com>)
Re: silly PoCs continue: X-Frame-Options give you less than expected (Michal Zalewski <lcamtuf@...edump.cx>)
Re: [TEHTRI-Security] Ultra quick dummy PHP hacking challenge for FD readers (Laurent OUDOT at TEHTRI-Security <laurent.oudot-ml@...tri-security.com>)
Re: Vulnerabilities in ADSL modem Callisto 821+ ("MustLive" <mustlive@...security.com.ua>)
Re: silly PoCs continue: X-Frame-Options give you less than expected (Christian Sciberras <uuf6429@...il.com>)
Re: silly PoCs continue: X-Frame-Options give you less than expected (Michal Zalewski <lcamtuf@...edump.cx>)
Vulnerabilities in D-Link DSL-500T ADSL Router ("MustLive" <mustlive@...security.com.ua>)

December 12 (21 messages)

Re: Google open redirect (Marsh Ray <marsh@...endedsubset.com>)
Re: VSFTPD Remote Heap Overrun (low severity) (Ramon de C Valle <rcvalle@...hat.com>)
Call for Papers -YSTS 6 - Security Conference, Brazil (Luiz Eduardo <le@...s.org>)
zFTPServer Suite 6.0.0.52 'rmdir' Directory Traversal ("Schurtz, Stefan" <S.Schurtz@...oserve.de>)
Re: VSFTPD Remote Heap Overrun (low severity) (Ramon de C Valle <rcvalle@...hat.com>)
Fwd: VSFTPD Remote Heap Overrun (low severity) ("HI-TECH ." <isowarez.isowarez.isowarez@...glemail.com>)
Re: Google open redirect (Charles Morris <cmorris@...odu.edu>)
Vulnerabilities in D-Link DAP 1150 ("MustLive" <mustlive@...security.com.ua>)
[ MDVSA-2011:184 ] krb5 (security@...driva.com)
Re: Minimum Syslog Level Needed for Court Trial (Jacqui Caren <jacqui.caren@...world.com>)
Re: Fwd: VSFTPD Remote Heap Overrun (low severity) (Ramon de C Valle <rcvalle@...hat.com>)
[ MDVSA-2011:185 ] libcap (security@...driva.com)
Re: Fwd: VSFTPD Remote Heap Overrun (low severity) (Ramon de C Valle <rcvalle@...hat.com>)
Compromised site using BitCoin ("James Lay" <jlay@...ve-tothe-box.net>)
Firefox forensics with SQLite Manager at InfoSec Institute ("Adam Behnke" <adam@...osecinstitute.com>)
Re: Fwd: VSFTPD Remote Heap Overrun (low severity) (Ramon de C Valle <rcvalle@...hat.com>)
Re: Fwd: VSFTPD Remote Heap Overrun (low severity) (Valdis.Kletnieks@...edu)
[ MDVSA-2011:186 ] nfs-utils (security@...driva.com)
Re: Fwd: VSFTPD Remote Heap Overrun (low severity) (Ramon de C Valle <rcvalle@...hat.com>)
Re: Fwd: VSFTPD Remote Heap Overrun (low severity) (lists@...atla.org.uk)
Re: Fwd: VSFTPD Remote Heap Overrun (low severity) (Valdis.Kletnieks@...edu)

December 13 (37 messages)

Re: Fwd: VSFTPD Remote Heap Overrun (low severity) (Ramon de C Valle <rcvalle@...hat.com>)
New awstats.pl vulnerability? (Lamar Spells <lamar.spells@...il.com>)
Re: Fwd: VSFTPD Remote Heap Overrun (low severity) (Ramon de C Valle <rcvalle@...hat.com>)
Re: Fwd: VSFTPD Remote Heap Overrun (low severity) (Valdis.Kletnieks@...edu)
Re: New awstats.pl vulnerability? (Grandma Eubanks <tborland1@...il.com>)
Re: New awstats.pl vulnerability? (Bruce Ediger <bediger@...atigery.com>)
Re: New awstats.pl vulnerability? (Nikolay Kichukov <hijacker@...um.net>)
Re: Firefox forensics with SQLite Manager at InfoSec Institute (Fabio <ctrlaltca@...il.com>)
Secunia Research: Winamp AVI Parsing Two Integer Overflow Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
Re: Fwd: VSFTPD Remote Heap Overrun (low severity) (Daniel J Walsh <dwalsh@...hat.com>)
Re: Fwd: VSFTPD Remote Heap Overrun (low severity) (Daniel J Walsh <dwalsh@...hat.com>)
Re: New awstats.pl vulnerability? (Lamar Spells <lamar.spells@...il.com>)
Secunia Research: Sterling Trader Data Processing Buffer Overflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Exploiting glibc __tzfile_read integer overflow to buffer overflow and vsftpd (Ramon de C Valle <rcvalle@...hat.com>)
Re: Exploiting glibc __tzfile_read integer overflow to buffer overflow and vsftpd ("HI-TECH ." <isowarez.isowarez.isowarez@...glemail.com>)
Two other Google open redirects (Riyaz Walikar <riyazwalikar@...il.com>)
Re: Two other Google open redirects ("R0me0 ***" <knight.neo@...il.com>)
Re: Fwd: VSFTPD Remote Heap Overrun (low severity) (Daniel J Walsh <dwalsh@...hat.com>)
vsFTPd remote code execution ("HI-TECH ." <isowarez.isowarez.isowarez@...glemail.com>)
Re: Two other Google open redirects (Nate Theis <nttheis@...il.com>)
Re: vsFTPd remote code execution (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: vsFTPd remote code execution ("HI-TECH ." <isowarez.isowarez.isowarez@...glemail.com>)
Re: vsFTPd remote code execution (Ramon de C Valle <rcvalle@...hat.com>)
Re: vsFTPd remote code execution (Dan Rosenberg <dan.j.rosenberg@...il.com>)
Re: Two other Google open redirects (Nick FitzGerald <nick@...us-l.demon.co.uk>)
Re: vsFTPd remote code execution ("HI-TECH ." <isowarez.isowarez.isowarez@...glemail.com>)
ZDI-11-346 : Microsoft Office 2007 Office Art Shape Record Hierarchy Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint…)
ZDI-11-347 : Microsoft Office Word Hidden Border Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-348 : HP OpenView NNM nnmRptConfig.exe nameParams Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Re: vsFTPd remote code execution ("HI-TECH ." <isowarez.isowarez.isowarez@...glemail.com>)
Re: Carrier IQ for your phone (coderman <coderman@...il.com>)
Re: Two other Google open redirects (Tavis Ormandy <taviso@...xchg8b.com>)
BF, XSS, IAA and CSRF vulnerabilities in poMMo ("MustLive" <mustlive@...security.com.ua>)
Re: Carrier IQ for your phone ("Ivan .Heca" <ivanhec@...il.com>)
Re: Carrier IQ for your phone (coderman <coderman@...il.com>)
Re: Google open redirect (Marsh Ray <marsh@...endedsubset.com>)
Re: Carrier IQ for your phone ("Ivan .Heca" <ivanhec@...il.com>)

December 14 (6 messages)

Re: Google open redirect (Tavis Ormandy <taviso@...xchg8b.com>)
Re: Fwd: VSFTPD Remote Heap Overrun (low severity) (Ramon de C Valle <rcvalle@...hat.com>)
Re: vsFTPd remote code execution (Chris Evans <scarybeasts@...il.com>)
Physical Security (Krzysztof Marczyk <krzysztof.marczyk@...tware.com.pl>)
0A29-11-3 : Cross-Site Scripting vulnerabilities in Nagios XI < 2011R1.9 (0a29 40 <0a2940@...il.com>)
0A29-11-4 : Privilege escalation vulnerabilities in Nagios XI installer < 2011R1.9 (0a29 40 <0a2940@...il.com>)

December 15 (12 messages)

[RT-SA-2011-005] Owl Intranet Engine: Authentication Bypass (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[RT-SA-2011-006] Owl Intranet Engine: Information Disclosure and Unsalted Password Hashes (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
New IETF I-D on "Stable Privacy Addresses" (Fernando Gont <fgont@...networks.com>)
Re: vsFTPd remote code execution ("HI-TECH ." <isowarez.isowarez.isowarez@...glemail.com>)
More on exploiting glibc __tzfile_read integer overflow to buffer overflow and vsftpd (Ramon de C Valle <rcvalle@...hat.com>)
New IETF I-Ds on Fragmentation-related security issues (Fernando Gont <fgont@...networks.com>)
[Announcement] ClubHack Mag Issue 23- December 2011 Released (Abhijeet Patil <getabhijeetpatil@...il.com>)
Mobile Phone Spyware CarrierIQ Redux ("Anonymous Remailer (austria)" <mixmaster@...ailer.privacy.at>)
PmWiki <= 2.2.34 (pagelist) (foo net <foonet@...mail.com>)
[ MDVSA-2011:187 ] php-pear (security@...driva.com)
Re: vsFTPd remote code execution (xD 0x41 <secn3t@...il.com>)
[ MDVSA-2011:188 ] libxml2 (security@...driva.com)

December 16 (6 messages)

Seotoaster SQL-Injection Admin Login Bypass ("Schurtz, Stefan" <S.Schurtz@...oserve.de>)
X server wrapper permission bypass (CVE-2011-4613) (vladz <vladz@...zero.fr>)
[ MDVSA-2011:189 ] jasper (security@...driva.com)
[SECURITY] [DSA 2363-1] tor security update (Moritz Muehlenhoff <jmm@...ian.org>)
Re: New awstats.pl vulnerability? (Lamar Spells <lamar.spells@...il.com>)
Re: vsFTPd remote code execution ("Rodrigo Rubira Branco (BSDaemon)" <rodrigo@...nelhacking.com>)

December 18 (9 messages)

Re: vsFTPd remote code execution (Chris Evans <scarybeasts@...il.com>)
Novell Sentinel Log Manager <=1.2.0.1 Path Traversal (Andrea Fabrizi <andrea.fabrizi@...il.com>)
Re: pytbull update! (Sébastien Damaye <sebastien.damaye@...il.com>)
Content Papst CMS v2011.2 - Multiple Web Vulnerabilities ("research@...nerability-lab.com" <research@...nerability-lab.com>)
appRain CMF v0.1.5 - Multiple Web Vulnerabilities ("research@...nerability-lab.com" <research@...nerability-lab.com>)
Pure-ftpd question ("J. von Balzac" <jhm.balzac@...il.com>)
[SECURITY] [DSA 2364-1] xorg security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2365-1] dtc security update (Moritz Muehlenhoff <jmm@...ian.org>)
CS and XSS vulnerabilities in Zeema CMS ("MustLive" <mustlive@...security.com.ua>)

December 19 (11 messages)

Syhunt: Time-Based Blind NoSQL Injection ("Felipe M. Aragon" <felipe@...unt.com>)
[ MDVSA-2011:191 ] libarchive (security@...driva.com)
[ MDVSA-2011:190 ] libarchive (security@...driva.com)
SEC Consult SA-20111219-0 :: Client-side remote arbitrary file upload in SecCommerce SecSigner Java Applet (SEC Consult Vulnerability Lab <research@...-consult…)
SEC Consult SA-20111219-1 :: Multiple vulnerabilities in WhatsApp (SEC Consult Vulnerability Lab <research@...-consult.com>)
[SECURITY] [DSA 2367-1] asterisk security update (Moritz Muehlenhoff <jmm@...ian.org>)
Attempted exploits against phpAlbum (common with Joomla, etc.) (Lamar Spells <lamar.spells@...il.com>)
Slides of our "Hacking IPv6 Networks" training at DEEPSEC 2011 (Fernando Gont <fgont@...networks.com>)
Mobile Prank Hacktool (Hacxx Under <hacxx20@...il.com>)
ZDI-11-350 : Enterasys NetSight nssyslogd PRI Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
CSRF, DT and AB vulnerabilities in D-Link DSL-500T ADSL Router ("MustLive" <mustlive@...security.com.ua>)

December 20 (8 messages)

NiX API CLI/Online version - A powerful free IP Reputation Lookup API (nix@...roxylists.com)
OT: Firefox question / poll (Charles Morris <cmorris@...odu.edu>)
Re: OT: Firefox question / poll (Christian Sciberras <uuf6429@...il.com>)
Re: OT: Firefox question / poll (Jeffrey Walton <noloader@...il.com>)
Fwd: Re: OT: Firefox question / poll (Dave <mrx@...pergander.org.uk>)
Re: Fwd: Re: OT: Firefox question / poll (John Adams <jna@...tter.com>)
TWSL2011-018: Authentication Bypass Vulnerability in IBM TS3100/TS3200 Web User Interface (Trustwave Advisories <TrustwaveAdvisories@...stwave.com>)
post-XSS landscape (Michal Zalewski <lcamtuf@...edump.cx>)

December 21 (3 messages)

Re: OT: Firefox question / poll (coderman <coderman@...il.com>)
Access & Retrieve Dlink clients information [Tutorial] (Hacxx Under <hacxx20@...il.com>)
Make "adjustments" to a Dlink router [Tutorial] (Hacxx Under <hacxx20@...il.com>)

December 22 (28 messages)

[MATTA-2011-001] pfSense x509 Insecure Certificate Creation (Florent Daigniere <florent.daigniere@...stmatta.com>)
Re: Fwd: Re: OT: Firefox question / poll (Georgi Guninski <guninski@...inski.com>)
Re: OT: Firefox question / poll ("Marcio B. Jr." <marcio.barbado@...il.com>)
Re: OT: Firefox question / poll (Dan Kaminsky <dan@...para.com>)
ZDI-11-351 : WellinTech KingView HistoryServer.exe Opcode 3 Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-352 : HP Managed Printing Administration jobAcct Multiple Vulnerabilities (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-353 : HP Managed Printing Administration MPAUploader.dll Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
ZDI-11-354 : HP Managed Printing Administration jobDelivery Multiple Vulnerabilities (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
Drupal SuperCron 6.x-1.3 XSS Vulnerability (Justin Klein Keane <justin@...irish.net>)
[SECURITY] [DSA 2370-1] unbound security update (Florian Weimer <fw@...eb.enyo.de>)
Re: OT: Firefox question / poll (coderman <coderman@...il.com>)
Re: OT: Firefox question / poll (Michal Zalewski <lcamtuf@...edump.cx>)
Kaspersky IS&AV 2011/12 - Memory Corruption Vulnerability ("research@...nerability-lab.com" <research@...nerability-lab.com>)
[SECURITY] [DSA 2366-1] mediawiki security update (Jonathan Wiltshire <jmw@...ian.org>)
AirOS remote root 0day (sd <sd@...ksheep.org>)
Tiki Wiki CMS Groupware Stored Cross-Site-Scripting ("Schurtz, Stefan" <S.Schurtz@...oserve.de>)
Cyberoam UTM Appliance - SQL Injection Vulnerability ("research@...nerability-lab.com" <research@...nerability-lab.com>)
SpamTitan v5.08 - Multiple Web Vulnerabilities ("research@...nerability-lab.com" <research@...nerability-lab.com>)
CertificationMagazine - Blind SQL Injection Vulnerability ("research@...nerability-lab.com" <research@...nerability-lab.com>)
Kaspersky IS&AV 2011/12 - Memory Corruption Vulnerability ("research@...nerability-lab.com" <research@...nerability-lab.com>)
[SECURITY] [DSA 2381-] lighttpd security update (Nico Golde <nion@...ian.org>)
[SECURITY] [DSA 2368-1] lighttpd security update (Nico Golde <nion@...ian.org>)
[SECURITY] [DSA 2369-1] libsoup2.4 security update (Nico Golde <nion@...ian.org>)
Whois Cart Billing - Multiple Web Vulnerabilities ("research@...nerability-lab.com" <research@...nerability-lab.com>)
Re: OT: Firefox question / poll (Michal Zalewski <lcamtuf@...edump.cx>)
Certificate Spoofing in Google Chrome for Android ("MustLive" <mustlive@...security.com.ua>)
TWSL2011-019: Cross-Site Scripting Vulnerability in phpMyAdmin (Trustwave Advisories <TrustwaveAdvisories@...stwave.com>)
Using Facebook as a proxy (R00T_ATI <r00t_ati@...eam.net>)

December 23 (17 messages)

Re: New awstats.pl vulnerability? (Lamar Spells <lamar.spells@...il.com>)
Re: New awstats.pl vulnerability? (james@...o-internet.org.uk)
Re: New awstats.pl vulnerability? (xD 0x41 <secn3t@...il.com>)
Re: CertificationMagazine - Blind SQL Injection Vulnerability (Tomy <support@...db.info>)
Re: Mobile Prank Hacktool ("Larry W. Cashdollar" <larry0@...com>)
Re: OT: Firefox question / poll (metasansana@...il.com)
Facebook security bypassed with One single link (Anand Pandey <anandkpandey1@...il.com>)
Re: [SECURITY] [DSA 2368-1] lighttpd security update (MailPlus| David Hofstee <david@...nker.nl>)
Re: OT: Firefox question / poll (夜神　岩男 <supergiantpotato@...oo.co.jp>)
Re: Mobile Prank Hacktool (xD 0x41 <secn3t@...il.com>)
Re: OT: Firefox question / poll (Valdis.Kletnieks@...edu)
Re: Mobile Prank Hacktool (Hacxx Under <hacxx20@...il.com>)
Sunny WebBox Default Password (Hacxx Under <hacxx20@...il.com>)
Automatic message post in PHP Classified (Hacxx Under <hacxx20@...il.com>)
Re: CertificationMagazine - Blind SQL Injection Vulnerability Super vulnerability-lab hack (Tomy <support@...db.info>)
Exploit Pack - Happy new year! (noreply@...loitpack.com)
Re: Sunny WebBox Default Password (Jeffrey Walton <noloader@...il.com>)

December 24 (8 messages)

[ MDVSA-2011:192 ] mozilla (security@...driva.com)
[SECURITY] [DSA 2371-1] jasper security update (Moritz Muehlenhoff <jmm@...ian.org>)
AirOS remote root 0day (Christopher Granger <chrisgrangerx@...il.com>)
Using hardware to attack software ("Forristal, Jeff" <jeff.forristal@...el.com>)
Re: CertificationMagazine - Blind SQL Injection Vulnerability ("research@...nerability-lab.com" <research@...nerability-lab.com>)
Re: Sunny WebBox Default Password ("Larry W. Cashdollar" <larry0@...com>)
Re: CertificationMagazine - Blind SQL Injection Vulnerability (Tomy <support@...db.info>)
Re: CertificationMagazine - Blind SQL Injection Vulnerability Super vulnerability-lab hack ("Thor (Hammer of God)" <thor@...merofgod.com>)

December 25 (8 messages)

Re: CertificationMagazine - Blind SQL Injection Vulnerability Super vulnerability-lab hack (james@...o-internet.org.uk)
Re: Using hardware to attack software (Gage Bystrom <themadichib0d@...il.com>)
Re: AirOS remote root 0day (sd <sd@...ksheep.org>)
Lighttpd Proof of Concept code for CVE-2011-4362 (Adam Zabrocki <zabrocki@...n.ch>)
vulnerability-lab - lulz lab (arikomember@...h.ai)
[SECURITY] [DSA 2372-1] heimdal security update (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 2373-1] inetutils security update (Florian Weimer <fw@...eb.enyo.de>)
vulnerability-lab - lulz lab ("yo man" <memdumper@....de>)

December 26 (4 messages)

[SECURITY] [DSA 2374-1] openswan security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2375-1] krb5. krb5-appl security update (Florian Weimer <fw@...eb.enyo.de>)
Vulnerabilities in plugins for MODx CMS, XOOPS, uCoz, Magento and DSP CMS ("MustLive" <mustlive@...security.com.ua>)
Re: Vulnerabilities in plugins for MODx CMS, XOOPS, uCoz, Magento and DSP CMS (Antony widmal <antony.widmal@...il.com>)

December 27 (6 messages)

[ MDVSA-2011:193 ] squid (security@...driva.com)
[ MDVSA-2011:194 ] icu (security@...driva.com)
Re: Using hardware to attack software (Gage Bystrom <themadichib0d@...il.com>)
Re: Using hardware to attack software (coderman <coderman@...il.com>)
Do: Re: Mi: Using hardware to attack software (coderman <coderman@...il.com>)
Re: Using hardware to attack software (coderman <coderman@...il.com>)

December 28 (5 messages)

Re: Using hardware to attack software (Valdis.Kletnieks@...edu)
n.runs-SA-2011.004 - web programming languages and platforms - DoS through hash table (<security@...ns.com>)
[ MDVSA-2011:195 ] krb5-appl (security@...driva.com)
[ MDVSA-2011:196 ] ipmitool (security@...driva.com)
Paid VIP Dyndns account (Hacxx Under <hacxx20@...il.com>)

December 29 (9 messages)

WiFi Protected Setup attack code posted (Craig Heffner <cheffner@...ttys0.com>)
Akiva Webboard 8.x SQL Injection + Plaintext Passwords. (Alexander Fuchs <alexander.fuchs@...e.de>)
Re: Using hardware to attack software ("Forristal, Jeff" <jeff.forristal@...el.com>)
Re: WiFi Protected Setup attack code posted (Gage Bystrom <themadichib0d@...il.com>)
Re: WiFi Protected Setup attack code posted (Dan Kaminsky <dan@...para.com>)
Re: n.runs-SA-2011.004 - web programming languages and platforms - DoS through hash table (sd <sd@...ksheep.org>)
Re: n.runs-SA-2011.004 - web programming languages and platforms - DoS through hash table (adam <adam@...sy.net>)
Re: n.runs-SA-2011.004 - web programming languages and platforms - DoS through hash table (Jan Schejbal <jan.mailinglisten@...glemail.com>)
Multiple new vulnerabilities in Register Plus Redux for WordPress ("MustLive" <mustlive@...security.com.ua>)

December 30 (8 messages)

Re: n.runs-SA-2011.004 - web programming languages and platforms - DoS through hash table (coderman <coderman@...il.com>)
[ MDVSA-2011:197 ] php (security@...driva.com)
[SECURITY] [DSA 2376-1] ipmitool security update (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 2263-2] movabletype-opensource security update (Thijs Kinkhorst <thijs@...ian.org>)
Winn Guestbook v2.4.8c Stored XSS (tom <tom@...net.com>)
DoS in TI Golden Gateway MXP Debug Application (will <will@...kingrock.com>)
SEC Consult SA-20111230-0 :: Critical authentication bypass in Microsoft ASP.NET Forms - CVE-2011-3416 (SEC Consult Vulnerability Lab <research@...-consult.com…)
Re: Vulnerabilities in plugins for MODx CMS, XOOPS, uCoz, Magento and DSP CMS ("MustLive" <mustlive@...security.com.ua>)

December 31 (9 messages)

INSECT Pro - Version 3.0 Released! (runlvl <runlvl@...il.com>)
Re: INSECT Pro - Version 3.0 Released! (Gage Bystrom <themadichib0d@...il.com>)
Re: INSECT Pro - Version 3.0 Released! (root <root_@...ertel.com.ar>)
[FG-VD-11-007]IBM Lotus Notes/Domino Server Remote Denial of Service Vulnerability ("noreply-secresearch@...tinet.com"<noreply-secresearch@...tinet.com>)
[SECURITY] [DSA 2376-2] ipmitool security update (Thijs Kinkhorst <thijs@...ian.org>)
XSS and IAA vulnerabilities in Register Plus Redux for WordPress ("MustLive" <mustlive@...security.com.ua>)
Re: [FG-VD-11-007]IBM Lotus Notes/Domino Server Remote Denial of Service Vulnerability (Jim Elkins <jime@...c.com>)
Re: INSECT Pro - Version 3.0 Released! ("R0me0 ***" <knight.neo@...il.com>)
Re: INSECT Pro - Version 3.0 Released! (David <dchurch@...el.net>)

512 messages