full-disclosure mailing list - 2012/05

Messages by day:

May 1 (6 messages)

• MyClientBase v0.12 - Multiple Web Vulnerabilities (Research <research@...nerability-lab.com>)
• GENU CMS 2012.3 - Multiple SQL Injection Vulnerabilities (Research <research@...nerability-lab.com>)
• Format Factory - Multiple Buffer Overflow Vulnerabilities [VIDEO] (Research <research@...nerability-lab.com>)
• China Ministry of Commerce - SQL Injection Vulnerability (Research <research@...nerability-lab.com>)
• cIFrex: How to use Regular Expressions in Research (Maksymilian Arciemowicz <cxib@...ecurity.com>)
• [ MDVSA-2012:067 ] samba (security@...driva.com)

• [RT-SA-2012-002] php-decoda: Cross-Site Scripting in Video Tags (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
• South African Bank "security" (Kerry Adams <kerryadams604@...oo.com>)
• Re: DoS vulnerabilities in Firefox, Internet Explorer and Opera (Boddin Grégory <gregory@...hine.net>)
• LAN Messenger v1.2.28 - Denial of Service Vulnerability (Research <research@...nerability-lab.com>)
• iGuard Security Access Control System Webserver, Cross Site Scripting (XSS) (usman@...re.net)
• [SECURITY] [DSA 2463-1] samba security update (Moritz Muehlenhoff <jmm@...ian.org>)
• [Security-news] SA-CONTRIB-2012-068 - Node Gallery - Cross Site Request Forgery (CSRF) - Unsupported (security-news@...pal.org)
• [Security-news] SA-CONTRIB-2012-069 - Addressbook - Multiple vulnerabilities - Unsupported (security-news@...pal.org)
• [Security-news] SA-CONTRIB-2012-070 - Taxonomy Grid : Catalog - Cross Site Scripting (XSS) - Unsupported (security-news@...pal.org)
• [Security-news] SA-CONTRIB-2012-071 - Glossify - Cross Site Scripting (XSS) - Unsupported (security-news@...pal.org)
• [Security-news] SA-CONTRIB-2012-072 - cctags - Cross Site Scripting (XSS) (security-news@...pal.org)
• [Security-news] SA-CORE-2012-002 - Drupal core multiple vulnerabilities (security-news@...pal.org)

• LACSEC 2012 Agenda (May 6-11, 2012, Quito, Ecuador) (Fernando Gont <fgont@...networks.com>)
• Advisory: Android SQLite Journal Information Disclosure (CVE-2011-3901) (Roee Hay <roeeh@...ibm.com>)
• Announce: Italian Hacker Game Cracca al Tesoro - Crack A Treasure (pm@...ution.it)
• [SECURITY] [DSA 2464-1] icedove security update (Moritz Muehlenhoff <jmm@...ian.org>)
• VMSA-2012-0009 VMware Workstation, Player, ESXi and ESX patches address critical security issues (VMware Security Team <security@...are.com>)
• Re: DoS vulnerabilities in Firefox, Internet Explorer and Opera ("MustLive" <mustlive@...security.com.ua>)
• Re: DoS vulnerabilities in Firefox, Internet Explorer and Opera (Memory Vandal <memvandal@...il.com>)
• [SECURITY] [DSA 2462-2] imagemagick regression update (Moritz Muehlenhoff <jmm@...ian.org>)

• Genium CMS 2012|Q2 - Multiple Web Vulnerabilities (Research <research@...nerability-lab.com>)
• myCare2x CMS - Multiple Web Vulnerabilities (Research <research@...nerability-lab.com>)
• Format Factory v2.95 - Buffer Overflow Vulnerabilities (Research <research@...nerability-lab.com>)
• MYRE Real Estate Mobile 2012|2 - Multiple Web Vulnerabilities (Research <research@...nerability-lab.com>)
• Format Factory v2.95 - Buffer Overflow Vulnerabilities (Research <research@...nerability-lab.com>)
• cDc Created Hong Kong Blondes and 'Hacktivism' as a Media Hack (Wei Honker <wei.honker@...il.com>)
• Re: cDc Created Hong Kong Blondes and 'Hacktivism' as a Media Hack (Laurelai <laurelai@...echan.org>)
• Re: cDc Created Hong Kong Blondes and 'Hacktivism' as a Media Hack (PsychoBilly <zpamh0l3@...il.com>)
• Re: cDc Created Hong Kong Blondes and 'Hacktivism' as a Media Hack (Laurelai <laurelai@...echan.org>)
• Re: cDc Created Hong Kong Blondes and 'Hacktivism' as a Media Hack (Valdis.Kletnieks@...edu)
• [ MDVSA-2012:069 ] cifs-utils (security@...driva.com)
• [ MDVSA-2012:070 ] samba (security@...driva.com)
• Re: cDc Created Hong Kong Blondes and 'Hacktivism' as a Media Hack ("Thor (Hammer of God)" <thor@...merofgod.com>)
• [SECURITY] [DSA 2459-2] quagga security update (Florian Weimer <fw@...eb.enyo.de>)

• IAA, Redirector and XSS vulnerabilities in WordPress ("MustLive" <mustlive@...security.com.ua>)
• Re: IAA, Redirector and XSS vulnerabilities in WordPress (InterN0T Advisories <advisories@...ern0t.net>)
• Re: IAA, Redirector and XSS vulnerabilities in WordPress (Benji <me@...ji.com>)
• [CVE-2012-1990] Kerweb/Kerwin XSS vulnerabilities (phocean <0x90@...cean.net>)
• Fwd: [cryptography] Apple Legacy filevault barn door... (Jeffrey Walton <noloader@...il.com>)
• Ubuntu, Linux Mint, and the Guest Account (Jeffrey Walton <noloader@...il.com>)
• Re: IAA, Redirector and XSS vulnerabilities in WordPress (InterN0T Advisories <advisories@...ern0t.net>)

• Re: Ubuntu, Linux Mint, and the Guest Account (Marc Deslauriers <marc.deslauriers@...onical.com>)
• Re: Ubuntu, Linux Mint, and the Guest Account (Marc Deslauriers <marcdeslauriers@...eotron.ca>)
• vulnerability-lab question (appliance@...enet.de)
• University of Washington Infected with GetMama 3000 files! (washington_u_getmama@...hmail.com)
• Re: University of Washington Infected with GetMama 3000 files! (Valdis.Kletnieks@...edu)
• [OT] New online service to make XSSs easier (Manu <sourvivor@...il.com>)

• Re: Ubuntu, Linux Mint, and the Guest Account (Georgi Guninski <guninski@...inski.com>)
• c0c0n 2012 CFP - Extended Deadline: May 15, 2012 (c0c0n International Information Security Conference <c0c0n@...ra.org>)
• Re: [OT] New online service to make XSSs easier (karniv0re <karniv0re@...l.co.in>)
• Re: [OT] New online service to make XSSs easier (Valdis.Kletnieks@...edu)
• Re: [OT] New online service to make XSSs easier (adam <adam@...sy.net>)
• Re: [OT] New online service to make XSSs easier (Gage Bystrom <themadichib0d@...il.com>)
• Re: [OT] New online service to make XSSs easier (Benji <me@...ji.com>)
• Re: [OT] New online service to make XSSs easier (coptang <coptang@...il.com>)
• Re: [OT] New online service to make XSSs easier (metasansana@...il.com)

• [SECURITY] [DSA 2464-2] icedove regression update (Florian Weimer <fw@...eb.enyo.de>)
• CORE-2012-0123 - SAP Netweaver Dispatcher Multiple Vulnerabilities (CORE Security Technologies Advisories <advisories@...esecurity.com>)
• Hyperion - Paper about Windows PE run-time encryption (Levent Kayan <levonkayan@....net>)

• [CAL-2011-0073]CVE-2012-2028 Adobe Photoshop parsing TIF heap buffer overflow vulnerability (Code Audit Labs <vulnhunt@...il.com>)
• CORE-2011-1123: Windows Kernel ReadLayoutFile Heap Overflow ("Core Security Advisories Team (fr)" <advisories-publication@...esecurity.com>)
• [CAL-2011-0073]CVE-2012-2028 Adobe Photoshop parsing TIF heap buffer overflow vulnerability ("alert7@...il.com" <alert7@...il.com>)
• Serendipity 1.6 Backend Cross-Site Scripting and SQL-Injection vulnerability (Stefan Schurtz <s.schurtz@...amis.de>)
• List Charter (John Cartwright <johnc@...k.org.uk>)
• Re: Hyperion - Paper about Windows PE run-time encryption (Dimitris Glynos <dimitris@...sus-labs.com>)
• Adobe Shockwave Player Remote Code Execution (CVE-2012-2029) ("Rodrigo Rubira Branco (BSDaemon)" <rodrigo@...nelhacking.com>)
• Adobe Shockwave Player Remote Code Execution (CVE-2012-2030) ("Rodrigo Rubira Branco (BSDaemon)" <rodrigo@...nelhacking.com>)
• Adobe Shockwave Player Remote Code Execution (CVE-2012-2031) ("Rodrigo Rubira Branco (BSDaemon)" <rodrigo@...nelhacking.com>)
• [Security-news] SA-CONTRIB-2012-073 - Glossary - Cross-Site Scripting (XSS) (security-news@...pal.org)
• [Security-news] SA-CONTRIB-2012-074 - Contact Forms - Access Bypass (security-news@...pal.org)
• [Security-news] SA-CONTRIB-2012-075 - Take Control - Cross Site Request Forgery (CSRF) (security-news@...pal.org)
• Re: Hyperion - Paper about Windows PE run-time encryption (Christian Ammann <c.ammann@...osnabrueck.de>)
• [SECURITY] [DSA 2465-1] php5 security update (Thijs Kinkhorst <thijs@...ian.org>)
• [SECURITY] [DSA 2466-1] rails security update (Thijs Kinkhorst <thijs@...ian.org>)
• [SECURITY] [DSA 2467-1] mahara security update (Thijs Kinkhorst <thijs@...ian.org>)
• [SECURITY] [DSA 2422-2] file regression fix (Thijs Kinkhorst <thijs@...ian.org>)
• [SECURITY] [DSA 2468-1] libjakarta-poi-java security update (Florian Weimer <fw@...eb.enyo.de>)

• Breakpoint 2012 Call For Papers (cfp@...con.org.au)
• [ MDVSA-2012:068-1 ] php (security@...driva.com)
• [ MDVSA-2012:071 ] php (security@...driva.com)
• [ MDVSA-2012:072 ] roundcubemail (security@...driva.com)
• [Onapsis Research Labs] New SAP Security In-Depth issue: "Our Crown Jewels Online: Attacks on SAP Web Applications" (Onapsis Research Labs <research@...psis.co…)

• [SECURITY] [DSA 2469-1] linux-2.6 security update (dann frazier <dannf@...ian.org>)
• Re: [SECURITY] [DSA 2468-1] libjakarta-poi-java security update (Yegor Kozlov <yegor.kozlov@...om.ru>)
• t2'12: Call for Papers 2012 (Helsinki / Finland) (Tomi Tuominen <tomi.tuominen@...fi>)
• [ MDVSA-2012:073 ] openssl (security@...driva.com)
• [SECURITY] [DSA 2670-1] wordpress security update (Yves-Alexis Perez <corsac@...ian.org>)

• Google Accounts Security Vulnerability ("Michael J. Gray" <mgray@...tcode.com>)
• GetSimple CMS v3.1 - Multiple Web Vulnerabilities (Research <research@...nerability-lab.com>)
• Serendipity v1.6 CMS - Multiple Web Vulnerabilities (Research <research@...nerability-lab.com>)
• GENU CMS 2012.4 - Multiple Web Vulnerabilities (Research <research@...nerability-lab.com>)
• Free Reality v3.1-0.6 - Multiple Web Vulnerabilities (Research <research@...nerability-lab.com>)
• Viscacha Forum CMS v0.8.1.1 - Multiple Web Vulnerabilities (Research <research@...nerability-lab.com>)
• Proman Xpress v5.0.1 - Multiple Web Vulnerabilities (Research <research@...nerability-lab.com>)
• Travelon Express CMS v6.2.2 - Multiple Web Vulnerabilities (Research <research@...nerability-lab.com>)
• NetBill Billing System v1.2 - Multiple Web Vulnerabilites (Research <research@...nerability-lab.com>)
• hidden privilege user in supercomputer NEC Express 58000/1000 series (Djamshut Saarash <saarash@...ka.com>)
• The Hackers Conference 2012 Call For Papers (Mohit Kumar <thehackernews@...il.com>)

• NETGEAR Exposure of Sensitive Information - Security Advisory ("Lists" <lists@...seofsecurity.com>)
• Re: Google Accounts Security Vulnerability (Jason Hellenthal <jhellenthal@...aix.net>)
• Re: University of Washington Infected with GetMama 3000 files! (washington_u_getmama@...hmail.com)
• [SECURITY] [DSA-2471-1] ffmpeg security update (Moritz Muehlenhoff <jmm@...ian.org>)
• [SECURITY] [DSA 2457-2] New icedove/iceweasel packages fix regression (Moritz Muehlenhoff <jmm@...ian.org>)

• ICACLS.EXE ignores and destroys SE_DACL_PROTECTED/SE_SACL_PROTECTED ("Stefan Kanthak" <stefan.kanthak@...go.de>)
• Re: Google Accounts Security Vulnerability (Alex Buie <abuie@...services.com>)
• [ MDVSA-2012:074 ] ffmpeg (security@...driva.com)

• [ MDVSA-2012:075 ] ffmpeg (security@...driva.com)
• [ MDVSA-2012:076 ] ffmpeg (security@...driva.com)
• Re: Google Accounts Security Vulnerability ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Re: Google Accounts Security Vulnerability (Ferenc Kovacs <tyra3l@...il.com>)
• Re: Google Accounts Security Vulnerability ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Re: Google Accounts Security Vulnerability (Ferenc Kovacs <tyra3l@...il.com>)
• Re: Google Accounts Security Vulnerability (Shreyas Zare <shreyas@...fence.com>)
• Apple Quicktime Memory Corruption (CVE-2012-0671) ("Rodrigo Rubira Branco (BSDaemon)" <rodrigo@...nelhacking.com>)

• [SECURITY] [DSA 2472-1] gridengine security update (Florian Weimer <fw@...eb.enyo.de>)
• Re: [SECURITY] [DSA 2472-1] gridengine security update (Robert Kim App and Facebook Marketing <evdo.hsdpa@...il.com>)
• Re: Google Accounts Security Vulnerability (Jason Hellenthal <jhellenthal@...aix.net>)
• Re: Google Accounts Security Vulnerability (Mateus Felipe Tymburibá Ferreira <mateustymbu@...il.com>)
• Resource Tuner 1.99 Heap Overflow (Walied Assar <waliedassar@...il.com>)
• Re: Google Accounts Security Vulnerability ("Michael J. Gray" <mgray@...tcode.com>)
• Re: Google Accounts Security Vulnerability ("Michael J. Gray" <mgray@...tcode.com>)
• Re: Google Accounts Security Vulnerability (Gage Bystrom <themadichib0d@...il.com>)
• Trigerring Java code from a SVG image (Nicolas Grégoire <nicolas.gregoire@...rri.fr>)
• SEC-T 2012 CFP and Challenge (olle@....se)
• The story of the Linux kernel 3.x... (Adam Zabrocki <pi3@....com.pl>)
• struts csrf token bypass (WooYun <root@...yun.org>)
• JW player xss security flaw (WooYun <root@...yun.org>)
• Re: Trigerring Java code from a SVG image (Dan Kaminsky <dan@...para.com>)
• Re: Trigerring Java code from a SVG image (Michele Orru <antisnatchor@...il.com>)
• Re: The story of the Linux kernel 3.x... (Tavis Ormandy <taviso@...xchg8b.com>)
• Re: Trigerring Java code from a SVG image (Dan Kaminsky <dan@...para.com>)
• [PRE-SA-2012-03] Linux kernel: Buffer overflow in HFS plus filesystem (Timo Warns <warns@...-sense.de>)
• Re: The story of the Linux kernel 3.x... (Adam Zabrocki <pi3@....com.pl>)
• Re: Trigerring Java code from a SVG image (Nicolas Grégoire <nicolas.gregoire@...rri.fr>)
• Re: Trigerring Java code from a SVG image (Krzysztof Kotowicz <kkotowicz+fd@...il.com>)
• Video tutorial: Stack-Based Buffer Overflow (Juan Sacco <jsacco@...loitpack.com>)
• Re: The story of the Linux kernel 3.x... (Tavis Ormandy <taviso@...xchg8b.com>)
• Re: Video tutorial: Stack-Based Buffer Overflow (Sergio 'shadown' Alvarez <shadown@...il.com>)
• Re: The story of the Linux kernel 3.x... (Nicolas Surribas <nicolas.surribas@...il.com>)
• Re: Trigerring Java code from a SVG image (Nicolas Grégoire <nicolas.gregoire@...rri.fr>)
• Re: The story of the Linux kernel 3.x... (Adam Zabrocki <pi3@....com.pl>)
• CVE-2012-1149 OpenOffice.org integer overflow error in vclmi.dll module when allocating memory for an embedded image object (Rob Weir <robweir@...che.org>)
• CVE-2012-2149 OpenOffice.org memory overwrite vulnerability (Rob Weir <robweir@...che.org>)
• CVE-2012-2334 Vulnerabilities related to malformed Powerpoint files in OpenOffice.org 3.3.0 (Rob Weir <robweir@...che.org>)
• [Security-news] SA-CONTRIB-2012-076 - Ubercart Product Keys Access Bypass (security-news@...pal.org)
• [Security-news] SA-CONTRIB-2012-77 - Advertisement - Cross Site Scripting & Information Disclosure (security-news@...pal.org)
• [Security-news] SA-CONTRIB-2012-078 - Smart Breadcrumb - Cross Site Scripting (XSS) (security-news@...pal.org)
• [Security-news] SA-CONTRIB-2012-079 - Post Affiliate Pro - Cross Site Scripting (XSS) and Access Bypass - Unsupported (security-news@...pal.org)
• [Security-news] SA-CONTRIB-2012-080 - Hostmaster (Aegir) - Access Bypass and Cross Site Scripting (XSS) (security-news@...pal.org)
• Re: The story of the Linux kernel 3.x... (Tavis Ormandy <taviso@...xchg8b.com>)
• Re: The story of the Linux kernel 3.x... (Marcus Meissner <meissner@...e.de>)
• Re: The story of the Linux kernel 3.x... (Tavis Ormandy <taviso@...xchg8b.com>)
• Re: The story of the Linux kernel 3.x... (Marcus Meissner <meissner@...e.de>)
• [Security-news] SA-CONTRIB-2012-081 - Aberdeen - Cross Site Scripting (security-news@...pal.org)
• [Security-news] SA-CONTRIB-2012-082 - Zen - Cross Site Scripting (security-news@...pal.org)
• Re: The story of the Linux kernel 3.x... (Tavis Ormandy <taviso@...xchg8b.com>)
• Re: The story of the Linux kernel 3.x... (Dan Kaminsky <dan@...para.com>)
• Re: The story of the Linux kernel 3.x... (Tavis Ormandy <taviso@...xchg8b.com>)
• [SECURITY] [DSA 2473-1] openoffice.org security update (Florian Weimer <fw@...eb.enyo.de>)
• Re: The story of the Linux kernel 3.x... (Paul Heinlein <heinlein@...boa.com>)

• Re: Trigerring Java code from a SVG image (Michele Orru <antisnatchor@...il.com>)
• Re: The story of the Linux kernel 3.x... (charlie@...kymunkey.com)
• [ MDVSA-2012:077 ] imagemagick (security@...driva.com)
• DDIVRT-2012-44 Epicor Returns Management SOAP-Based Blind SQL Injection (ddivulnalert <ddivulnalert@...frontline.com>)
• Re: The story of the Linux kernel 3.x... (Adam Zabrocki <pi3@....com.pl>)
• Re: The story of the Linux kernel 3.x... (Adam Zabrocki <pi3@....com.pl>)
• Re: The story of the Linux kernel 3.x... (Adam Zabrocki <pi3@....com.pl>)
• Re: Google Accounts Security Vulnerability ("Michael J. Gray" <mgray@...tcode.com>)
• [SECURITY] [DSA 2474-1] ikiwiki security update (Raphael Geissert <geissert@...ian.org>)
• Re: Google Accounts Security Vulnerability (Mike Hearn <hearn@...gle.com>)
• Re: Google Accounts Security Vulnerability (Mike Hearn <hearn@...gle.com>)
• New Open Source Web Application Vulnerability Scanner Available (Dermot Blair <webvulscan@...il.com>)
• Security BSidesDetroit (Kyle Creyts <kyle.creyts@...il.com>)
• [ MDVSA-2012:078 ] imagemagick (security@...driva.com)
• Re: The story of the Linux kernel 3.x... (valdis.kletnieks@...edu)
• Re: Google Accounts Security Vulnerability ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Vulnerability in is Dopewars (Григорий Братислава <musntlive@...il.com>)
• Re: Vulnerability in is Dopewars (Charles Morris <cmorris@...odu.edu>)
• LinkedIn CSRF: Login Brute Force ("Fernando A. Lagos B." <fernando@...ial.org>)
• Re: The story of the Linux kernel 3.x... (valdis.kletnieks@...edu)

• Re: New Open Source Web Application Vulnerability Scanner Available (Daniel Hadfield <dan@...gsweep.co.uk>)
• Re: The story of the Linux kernel 3.x... (Adam Zabrocki <pi3@....com.pl>)
• Resource Hacker Heap Overflow (Walied Assar <waliedassar@...il.com>)
• [SECURITY] [DSA 2475-1] openssl security update (Raphael Geissert <geissert@...ian.org>)
• Re: Google Accounts Security Vulnerability (Mike Hearn <hearn@...gle.com>)
• Re: Google Accounts Security Vulnerability (Michael Gray <mgray@...tcode.com>)
• Vulnerabilities on Cryptographp (Lu33Y <lu33y@...f.eu>)
• Re: LinkedIn CSRF: Login Brute Force (Julius Kivimäki <julius.kivimaki@...il.com>)
• Re: Google Accounts Security Vulnerability (Michael Gray <mgray@...tcode.com>)
• Re: LinkedIn CSRF: Login Brute Force (Mario Vilas <mvilas@...il.com>)
• SEC Consult SA-20120518 :: Memory overwrite vulnerability in libwpd (OpenOffice.org) - CVE-2012-2149 (SEC Consult Vulnerability Lab <research@...-consult.com>)
• H2HC Brazil 9th Edition - Call for Papers ("Rodrigo Rubira Branco (BSDaemon)" <rodrigo@...nelhacking.com>)
• Re: Google Accounts Security Vulnerability (coderman <coderman@...il.com>)
• Re: Google Accounts Security Vulnerability (Dan Kaminsky <dan@...para.com>)
• Checking out backdoor shells ("Adam Behnke" <adam@...osecinstitute.com>)
• Re: Checking out backdoor shells (Kai <kai@...nn.net>)
• Re: Google Accounts Security Vulnerability (Jeffrey Walton <noloader@...il.com>)

• Re: Google Accounts Security Vulnerability ("Thor (Hammer of God)" <thor@...merofgod.com>)
• FW: Curso online - Profesional pentesting - Promocion ( 25% de descuento ) ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Re: FW: Curso online - Profesional pentesting - Promocion ( 25% de descuento ) (Charles Morris <cmorris@...odu.edu>)
• [SECURITY] [DSA 2476-1] pidgin-otr security update (Jonathan Wiltshire <jmw@...ian.org>)

• Re: FW: Curso online - Profesional pentesting - Promocion ( 25% de descuento ) (BMF <badmotherfsckr@...il.com>)
• Re: Google Accounts Security Vulnerability (Ferenc Kovacs <tyra3l@...il.com>)
• Acuity CMS 2.6.x <= Arbitrary File Upload (YGN Ethical Hacker Group <lists@...g.net>)
• Acuity CMS 2.6.x <= Path Traversal Arbitrary File Access (YGN Ethical Hacker Group <lists@...g.net>)
• Re: FW: Curso online - Profesional pentesting - Promocion ( 25% de descuento ) (Michele Orru <antisnatchor@...il.com>)
• Re: LinkedIn CSRF: Login Brute Force (Alexander Georgiev <alexander.georgiev@...oo.de>)
• php code reviewer(php source code auditing tool) (Rain Liu <yu.liu@...ec.org>)
• New Open Source Web Application Vulnerability Scanner Available (Dermot Blair <webvulscan@...il.com>)
• Re: New Open Source Web Application Vulnerability Scanner Available (Dermot Blair <webvulscan@...il.com>)
• PE Explorer Heap Overflow Vulnerability (Walied Assar <waliedassar@...il.com>)
• Re: Google Accounts Security Vulnerability (Mike Hearn <hearn@...gle.com>)
• Re: Google Accounts Security Vulnerability ("Michael J. Gray" <mgray@...tcode.com>)
• Acuity CMS 2.6.x <= Path Traversal Arbitrary File Access (YGN Ethical Hacker Group <lists@...g.net>)
• Acuity CMS 2.6.x <= Arbitrary File Upload (YGN Ethical Hacker Group <lists@...g.net>)
• Checking out backdoor shells (Darren Martyn <the.infodox@...il.com>)
• Call for Papers: The 7th International Conference for Internet Technology and Secured Transactions (ICITST-2012) (Call for papers <call.for.papers.is@...il.com…)
• [SECURITY] [DSA 2477-1] sympa security update (Florian Weimer <fw@...eb.enyo.de>)
• Re: Google Accounts Security Vulnerability ("Thor (Hammer of God)" <thor@...merofgod.com>)

• New XSS vulnerability in Yandex.Server ("MustLive" <mustlive@...security.com.ua>)
• [Announcement] ClubHack Magazine Issue 28, May 2012 Released (Abhijeet Patil <getabhijeetpatil@...il.com>)
• Re: FW: Curso online - Profesional pentesting - Promocion ( 25% de descuento ) (InterN0T Advisories <advisories@...ern0t.net>)
• DC4420 - London DEFCON - May meet - Tuesday May 22nd 2012 (Major Malfunction <majormal@...ate-radio.org>)
• Re: Google Accounts Security Vulnerability (Daniel Margolis <dmargolis@...gle.com>)
• [ MDVSA-2012:079 ] sudo (security@...driva.com)
• Re: Google Accounts Security Vulnerability (Jann Horn <jannhorn@...glemail.com>)
• Re: Google Accounts Security Vulnerability ("Michael J. Gray" <mgray@...tcode.com>)
• Re: FW: Curso online - Profesional pentesting - Promocion ( 25% de descuento ) (Juan Sacco <jsacco@...loitpack.com>)

• Failure to restrict access (Fernando Andina <fernando.andina@...il.com>)
• Re: FW: Curso online - Profesional pentesting - Promocion ( 25% de descuento ) (Michele Orru <antisnatchor@...il.com>)
• Re: Google Accounts Security Vulnerability (Kyle Creyts <kyle.creyts@...il.com>)

• IPv6 security: New IETF I-Ds, slideware and videos for recent presentations, trainings, etc... (Fernando Gont <fgont@...networks.com>)
• session stealing in mod_auth_openid - CVE-2012-2760 (ptr <ligeglad@...il.com>)
• [ MDVSA-2012:080 ] wireshark (security@...driva.com)
• Re: Certificacion - Profesional Pentester ("Thor (Hammer of God)" <thor@...merofgod.com>)
• [SECURITY] [DSA 2478-1] sudo security update (Moritz Muehlenhoff <jmm@...ian.org>)
• [SECURITY] [DSA 2479-1] libxml2 security update (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: Certificacion - Profesional Pentester (Peter Dawson <slash.pd@...il.com>)
• [Security-news] SA-CONTRIB-2012-083 - Taxonomy List - Cross Site Scripting (XSS) (security-news@...pal.org)
• [Security-news] SA-CONTRIB-2012-084 - Search API - Cross Site Scripting (XSS) (security-news@...pal.org)
• Re: Certificacion - Profesional Pentester ("Thor (Hammer of God)" <thor@...merofgod.com>)
• [Security-news] SA-CONTRIB-2012-085 - BrowserID - Multiple Vulnerabilities (security-news@...pal.org)
• Re: Certificacion - Profesional Pentester (leToff <letoff@...il.com>)

• Re: Certificacion - Profesional Pentester (valdis.kletnieks@...edu)
• Re: Certificacion - Profesional Pentester (Alex Buie <abuie@...services.com>)
• Re: Certificacion - Profesional Pentester ("Zach C." <fxchip@...il.com>)
• [CVE-2012-2098] Apache Commons Compress and Apache Ant denial of service vulnerability (Stefan Bodewig <bodewig@...che.org>)
• Re: Certificacion - Profesional Pentester (Giles Coochey <giles@...chey.net>)
• Kingcopes AthCon 2012 Slides & Notes ("HI-TECH ." <isowarez.isowarez.isowarez@...glemail.com>)
• [ MDVSA-2012:081 ] firefox (security@...driva.com)
• CVE-2012-2216 - Social Engine Multiples Vulnerabilities (XSS and CSRF) (Tiago Natel de Moura <tiago4orion@...il.com>)
• VMDK Has Left the Building . Some Nasty Attacks Against VMware vSphere 5 Based Cloud Infrastructures (Enno Rey <erey@...w.de>)
• Re: Certificacion - Profesional Pentester ("Thor (Hammer of God)" <thor@...merofgod.com>)
• [SECURITY] [DSA 2480-1] request-tracker3.8 security update (Moritz Muehlenhoff <jmm@...ian.org>)
• ResEdit Buffer Overflow Vulnerabilities (Walied Assar <waliedassar@...il.com>)

• Malware.lu - analysis and pownage of hespesnet botnet (rootbsd@...ted.com)
• CFP: Hacktivity 2012, October 12-13, Budapest, Hungary (Attila Bartfai <attila.bartfai@...ktivity.com>)
• GreHack 2012 - Call For Papers (CFP) (Fabien DUCHENE <f.duchene@...-online.fr>)
• Info about attack trees (Federico De Meo <adegod@...il.com>)
• Re: Info about attack trees (Urlan <urlancomp@...il.com>)
• Re: Info about attack trees ("Thor (Hammer of God)" <thor@...merofgod.com>)

• New tool: Hyperion - A runtime encrypter for 32-bit PE files (Levent Kayan <levonkayan@....net>)
• Re: Info about attack trees (Gage Bystrom <themadichib0d@...il.com>)
• Re: Info about attack trees (coderman <coderman@...il.com>)

• ekoparty sercurity conference 2012 CFP is now OPEN! (Juan Pablo Daniel <jpdborgna@...il.com>)
• Re: Info about attack trees (Daniel Hadfield <dan@...gsweep.co.uk>)
• About IBM ("MustLive" <mustlive@...security.com.ua>)
• Re: About IBM (Ferenc Kovacs <tyra3l@...il.com>)
• Re: About IBM (Jeffrey Walton <noloader@...il.com>)

• Crash when FILEOPEN particular .rtf (Carlo Di Dato <shinnai@...istici.org>)
• Re: About IBM (Thomas Richards <g13net@...il.com>)
• Re: About IBM (Bzzz <lazyvirus@....com>)
• Re: Certificacion - Profesional Pentester (Michael Harrison <n0idx80@...il.com>)
• Re: Full-Disclosure Digest, Vol 87, Issue 36 (David O'Callaghan <david.ocallaghan@...tcd.ie>)
• Re: Info about attack trees (Peter Dawson <slash.pd@...il.com>)
• Flame= cyberwar (Peter Dawson <slash.pd@...il.com>)
• Re: Flame= cyberwar (yersinia <yersinia.spiros@...il.com>)
• Re: Flame= cyberwar (Peter Dawson <slash.pd@...il.com>)
• [ MDVSA-2012:082 ] pidgin (security@...driva.com)
• Re: Info about attack trees (Gage Bystrom <themadichib0d@...il.com>)
• Re: Info about attack trees (Georgi Guninski <guninski@...inski.com>)
• Re: About IBM (Jonathan Leffler <jonathan.leffler@...il.com>)
• Fw: Info about attack trees ("Jerry dePriest" <jerryde@...net>)
• Re: Info about attack trees (coderman <coderman@...il.com>)

• [SE-2011-01] Security of SAT TV set-to-boxes and DVB chipsets (details released) (Security Explorations <contact@...urity-explorations.com>)
• Re: WHMCS 0day ("Dex" <0x41@...h.ai>)
• WHMCS 0day ("Dex" <0x41@...h.ai>)
• NSA Cyber security program [ maybe off-topic ] ("Pablo" <paa.listas@...il.com>)
• Re: Info about attack trees (Defence in Depth <defenceindepth@...il.com>)
• [ MDVSA-2012:083 ] util-linux (security@...driva.com)
• [ MDVSA-2012:084 ] ncpfs (security@...driva.com)
• [SECURITY] [DSA 2480-2] request-tracker3.8 regression update (Florian Weimer <fw@...eb.enyo.de>)
• DDIVRT-2012-43 SCLIntra Enterprise SQL Injection and Authentication Bypass (ddivulnalert <ddivulnalert@...frontline.com>)
• Re: About IBM (Alex Sugarmann <zckzck@...il.com>)
• AST-2012-007: Remote crash vulnerability in IAX2 channel driver. ("Asterisk Security Team" <security@...erisk.org>)
• AST-2012-008: Skinny Channel Driver Remote Crash Vulnerability ("Asterisk Security Team" <security@...erisk.org>)

• Decrypting encrypted iPhone backups ("Adam Behnke" <adam@...osecinstitute.com>)
• [ MDVSA-2012:085 ] tomcat5 (security@...driva.com)
• Context IS Advisory - .NET 1.0 through .NET 4 Remote Code Execution (Context IS - Disclosure <disclosure@...textis.co.uk>)
• Cisco Security Advisory: Cisco IOS XR Software Route Processor Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@ci…)
• [Security-news] SA-CONTRIB-2012-086 - Amadou - Cross Site Scripting (security-news@...pal.org)
• [Security-news] SA-CONTRIB-2012-087 - Comment Moderation - Cross Site Request Forgery (security-news@...pal.org)
• things you can do with downloads (Michal Zalewski <lcamtuf@...edump.cx>)
• [Security-news] SA-CONTRIB-2012-088 - Mobile Tools - Cross Site Scripting (XSS) (security-news@...pal.org)
• [Security-news] SA-CONTRIB-2012-089 - Counter - SQL Injection (unsupported) (security-news@...pal.org)
• [Security-news] SA-CONTRIB-2012-090 - File depot - Session Management Vulnerability (security-news@...pal.org)

• [ MDVSA-2012:086 ] acpid (security@...driva.com)
• imagine .. (RandallM <randallm@...mail.com>)
• Re: things you can do with downloads (Charles Morris <cmorris@...odu.edu>)
• Re: imagine .. (coderman <coderman@...il.com>)
• Mapserver for Windows (MS4W) Remote Code Execution (Mike Arnold <bruk0ut.sec@...il.com>)
• Re: NSA Cyber security program [ maybe off-topic ] (Jann Horn <jannhorn@...glemail.com>)
• ScriptFu Server Buffer Overflow in GIMP <= 2.6 ("Joseph Sheridan" <joe@...ctionis.com>)
• Re: imagine .. (Julius Kivimäki <julius.kivimaki@...il.com>)
• MiniWeb Content-Length DoS PoC (bugs@...ecurety.net)
• VULNERABILITY LAB and why they suck hard (vulnerabilitylabsucks@...h.com)
• [SECURITY] [DSA 2483-1] strongswan security update (Yves-Alexis Perez <corsac@...ian.org>)

323 messages

Powered by blists - more mailing lists