full-disclosure mailing list - 2012/07

Messages by day:

July 2 (16 messages)

• Re: Konqueror 3.5.5 XFS App (Robert Kim App and Facebook Marketing <evdo.hsdpa@...il.com>)
• Bookmark4U lostpasswd.php env[include_prefix] Parameter RFI (BugsNotHugs <bugsnothugs@...il.com>)
• [ MDVSA-2012:096-1 ] python (security@...driva.com)
• CVE-2012-2945 hadoop-env symlink vulnerability ("Simon ." <bofh666ftw@...glemail.com>)
• phpList 'id' Cross Site Scripting Vulnerability (HTTPCS <contact@...pcs.com>)
• HTTPCS - phpList 'id' Cross Site Scripting Vulnerability (HTTPCS <contact@...pcs.com>)
• phpList 'id' Cross Site Scripting Vulnerability (HTTPCS <contact@...pcs.com>)
• "Please remove my e-mail and IP from internet" (Tonu Samuel <tonusamuel@...com>)
• Irfanview Plugins JLS Decompression ("Joseph Sheridan" <joe@...ctionis.com>)
• GIMP FIT File Format DoS ("Joseph Sheridan" <joe@...ctionis.com>)
• Fake messages and chat bug in Facebook (Matteo Fabbri <matteo@...scode.org>)
• Re: GIMP FIT File Format DoS ("Morris, Patrick" <patrick.morris@...com>)
• Re: [oss-security] RE: GIMP FIT File Format DoS (Benji <me@...ji.com>)
• Re: ScriptFu Server Buffer Overflow in GIMP <= 2.6 (mancha@....hush.com)
• XSS, Redirector and FPD vulnerabilities in WordPress ("MustLive" <mustlive@...security.com.ua>)
• [IA30] Photodex ProShow Producer v5.0.3256 Local Buffer Overflow Vulnerability (Inshell Security <info@...hell.net>)

• Slideware of IPv6 hacking training (HIP 2012 edition), and future trainings (Portugal & Belgium) (Fernando Gont <fgont@...networks.com>)
• Re: "Please remove my e-mail and IP from internet" (Jacqui Caren <jacqui.caren@...world.com>)
• Re: "Please remove my e-mail and IP from internet" (Gage Bystrom <themadichib0d@...il.com>)
• Re: "Please remove my e-mail and IP from internet" (Peter Dawson <slash.pd@...il.com>)
• Re: "Please remove my e-mail and IP from internet" (leToff <letoff@...il.com>)
• [SECURITY] [DSA 2506-1] libapache-mod-security security update (Yves-Alexis Perez <corsac@...ian.org>)
• Re: [oss-security] RE: GIMP FIT File Format DoS (taha <tahacalypse@...il.com>)
• They claim they have 700 million XSS payloads! (bobo manang <bobomanang@...il.com>)
• Securoam advisory (Ben Laurie <ben@...ks.org>)
• From XSLT code execution to Meterpreter shells (Nicolas Grégoire <nicolas.gregoire@...rri.fr>)
• Windows short (8.3) filenames – a security nightmare? (Bogdan Calin <bogdan@...netix.com>)
• Microsoft IIS 6 , 7.5 FTP Server Remote Denial Of Service (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
• Vulnerable Microsoft VC++ 2005 runtime libraries in "Microsoft Live Meeting 2007 Client" installed in private location ("Stefan Kanthak" <stefan.kanthak@...go.…)

• [ MDVSA-2012:101 ] libtiff (security@...driva.com)
• [SECURITY] [DSA 2507-1] openjdk-6 security update (Moritz Muehlenhoff <jmm@...ian.org>)
• New Tool - U3-Pwn.tar.gz (Levent Kayan <levonkayan@....net>)

• How much time is appropriate for fixing a bug? (Jann Horn <jannhorn@...glemail.com>)
• Solar FTP Server 2.2 Remote DOS crash POC (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
• Event Script PHP v1.1 CMS - Multiple Web Vulnerabilites (Research <research@...nerability-lab.com>)
• Classified Ads Script PHP v1.1 - SQL Injection Vulnerabilities (Research <research@...nerability-lab.com>)
• GuestBook Scripts PHP v1.5 - Multiple Web Vulnerabilites (Research <research@...nerability-lab.com>)
• Freeside SelfService CGI|API 2.3.3 - Multiple Vulnerabilities (Research <research@...nerability-lab.com>)
• CLscript CMS v3.0 - Multiple Web Vulnerabilities (Research <research@...nerability-lab.com>)
• Re: Windows short (8.3) filenames - a security nightmare? ("Stefan Kanthak" <stefan.kanthak@...go.de>)
• IPv6 security tools released (Fernando Gont <fgont@...networks.com>)
• AST-2012-010: Possible resource leak on uncompleted re-invite transactions ("Asterisk Security Team" <security@...erisk.org>)
• AST-2012-011: Remote crash vulnerability in voice mail application ("Asterisk Security Team" <security@...erisk.org>)

• Re: How much time is appropriate for fixing a bug? (Philipp Hagemeister <phihag@...hag.de>)
• [ MDVSA-2012:102 ] krb5 (security@...driva.com)
• Re: How much time is appropriate for fixing a bug? (Georgi Guninski <guninski@...inski.com>)
• [SECURITY] CVE-2012-2138 Apache Sling denial of service vulnerability (Bertrand Delacretaz <bdelacretaz@...che.org>)
• Re: How much time is appropriate for fixing a bug? (Gary Baribault <gary@...ibault.net>)
• Re: How much time is appropriate for fixing a bug? ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Re: How much time is appropriate for fixing a bug? (Peter Dawson <slash.pd@...il.com>)
• Re: Basilic RCE bug (larry Cashdollar <larry0@...com>)
• Re: How much time is appropriate for fixing a bug? ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Re: How much time is appropriate for fixing a bug? (Laurelai <laurelai@...echan.org>)
• Re: Basilic RCE bug (Benji <me@...ji.com>)
• Re: How much time is appropriate for fixing a bug? (Gary Baribault <gary@...ibault.net>)

• Re: How much time is appropriate for fixing a bug? (Georgi Guninski <guninski@...inski.com>)
• ClubHack2012 CFP Open now (Abhijeet Patil <getabhijeetpatil@...il.com>)
• Re: How much time is appropriate for fixing a bug? ("Thor (Hammer of God)" <thor@...merofgod.com>)

• Re: How much time is appropriate for fixing a bug? (Georgi Guninski <guninski@...inski.com>)
• Re: How much time is appropriate for fixing a bug? (Michal Zalewski <lcamtuf@...edump.cx>)
• Re: How much time is appropriate for fixing a bug? (Jeffrey Walton <noloader@...il.com>)

• Re: How much time is appropriate for fixing a bug? ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Re: How much time is appropriate for fixing a bug? ("Kurt Ellzey" <kurt@...-sys.com>)
• Re: How much time is appropriate for fixing a bug? ("Stefan Kanthak" <stefan.kanthak@...go.de>)
• [SECURITY] [DSA 2509-1] pidgin security update (Luciano Bello <luciano@...ian.org>)
• phpList 'footer' Cross Site Scripting Vulnerability (HTTPCS <contact@...pcs.com>)
• Re: How much time is appropriate for fixing a bug? (Georgi Guninski <guninski@...inski.com>)
• Re: How much time is appropriate for fixing a bug? (valdis.kletnieks@...edu)
• Remote Exploit in Words With Friends (Григорий Братислава <musntlive@...il.com>)
• GreHack 2012 - extended CFP deadline - 15th August 2012 (Grenoble, France) (Fabien DUCHENE <f.duchene@...-online.fr>)
• Re: How much time is appropriate for fixing a bug? ("Stefan Kanthak" <stefan.kanthak@...go.de>)
• List Charter (John Cartwright <johnc@...k.org.uk>)
• Re: Full-Disclosure Digest, Vol 89, Issue 10 (SMiller@...min.com)
• Re: How much time is appropriate for fixing a bug? ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Preferred OSX Security/Server Lists ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Re: How much time is appropriate for fixing a bug? (Григорий Братислава <musntlive@...il.com>)
• Fwd: Apache Hadoop HDFS information disclosure vulnerability [CVE-2012-3376] (Andy Isaacson <adi@...apodia.org>)

• Drupal Book Block Module V.6.x-1.0-beta1 XSS Vulnerability (Zach Alexander <zalex@....upenn.edu>)
• [CVE-2012-3376] Apache Hadoop HDFS information disclosure vulnerability ("Aaron T. Myers" <atm@...udera.com>)
• Re: Full-Disclosure Digest, Vol 89, Issue 11: ] How much time is appropriate for fixing ("Mikhail A. Utin" <mutin@...monwealthcare.org>)
• Re: How much time is appropriate for fixing (Justin Klein Keane <justin@...irish.net>)
• Re: Full-Disclosure Digest, Vol 89, Issue 11: ] How much time is appropriate for fixing (Григорий Братислава <musntlive@...il.com>)
• Re: Full-Disclosure Digest, Vol 89, Issue 11: ] How much time is appropriate for fixing (Григорий Братислава <musntlive@...il.com>)
• Re: Full-Disclosure Digest, Vol 89, Issue 11: ] How much time is appropriate for fixing (Григорий Братислава <musntlive@...il.com>)
• Re: Full-Disclosure Digest, Vol 89, Issue 11: ] How much time is appropriate for fixing (rancor <therancor@...il.com>)
• Re: Full-Disclosure Digest, Vol 89, Issue 11: ] How much time is appropriate for fixing (valdis.kletnieks@...edu)
• Re: How much time is appropriate for fixing ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Re: Full-Disclosure Digest, Vol 89, Issue 11: ] How much time is appropriate for fixing (Григорий Братислава <musntlive@...il.com>)
• Re: How much time is appropriate for fixing (Григорий Братислава <musntlive@...il.com>)
• Re: How much time is appropriate for fixing ("Gary E. Miller" <gem@...lim.com>)
• Re: How much time is appropriate for fixing (Григорий Братислава <musntlive@...il.com>)
• Re: How much time is appropriate for fixing ("Gary E. Miller" <gem@...lim.com>)
• Re: How much time is appropriate for fixing (Justin Klein Keane <justin@...irish.net>)
• Re: Full-Disclosure Digest, Vol 89, Issue 11: ] How much time is appropriate for fixing (paul.szabo@...ney.edu.au)
• Re: Full-Disclosure Digest, Vol 89, Issue 11: ] How much time is appropriate for fixing ("Thor (Hammer of God)" <thor@...merofgod.com>)

• Re: has Thor big ego, has Thor long boring messages ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Re: Full-Disclosure Digest, Vol 89, Issue 11: ] How much time is appropriate for fixing (Derek Belrose <derek@...ekbelrose.com>)
• FileZilla Server version 0.9.41 beta Remote DOS (CPU exhaustion) POC (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
• Re: FileZilla Server version 0.9.41 beta Remote DOS (CPU exhaustion) POC (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
• toStaticHTML Bypass - MS12-037 , MS12-039 , MS12-050 (Adi Cohen <wir3less2@...il.com>)
• Predefined Post Authentication Session ID Vulnerability (Gokhan Muharremoglu <gokhan.muharremoglu@...ec.org>)
• IOSEC HTTP Anti Flood/DoS Security Gateway Module (PHP Script) (Gokhan Muharremoglu <gokhan.muharremoglu@...ec.org>)
• Weevely 0.7 network proxing (Emilio Pinna <ncl01@...il.it>)
• Vulnerability on Instagram application (Friendship Vulnerability) (sebas <s.guerrero0@...il.com>)
• has Thor big ego, has Thor long boring messages (NETT Dave <nett.dave@...oo.com>)
• Re: has Thor big ego, has Thor long boring messages (NETT Dave <nett.dave@...oo.com>)
• Re: How much time is appropriate for fixing (Григорий Братислава <musntlive@...il.com>)
• Re: Full-Disclosure Digest, Vol 89, Issue 11: ] How much time is appropriate for fixing (Georgi Guninski <guninski@...inski.com>)
• Re: Full-Disclosure Digest, Vol 89, Issue 11: ] How much time is appropriate for fixing (Григорий Братислава <musntlive@...il.com>)
• Re: Full-Disclosure Digest, Vol 89, Issue 11: ] How much time is appropriate for fixing (Григорий Братислава <musntlive@...il.com>)
• Re: Predefined Post Authentication Session ID Vulnerability (Benji <me@...ji.com>)
• Re: Predefined Post Authentication Session ID Vulnerability (Levent Kayan <levonkayan@....net>)
• Re: Full-Disclosure Digest, Vol 89, Issue 11: ] How much time is appropriate for fixing ("Mikhail A. Utin" <mutin@...monwealthcare.org>)
• Re: Full-Disclosure Digest, Vol 89, Issue 11: ] How much time is appropriate for fixing (Григорий Братислава <musntlive@...il.com>)
• Re: has Thor big ego, has Thor long boring messages (valdis.kletnieks@...edu)
• Re: IOSEC HTTP Anti Flood/DoS Security Gateway Module (PHP Script) (Benji <me@...ji.com>)
• Re: Full-Disclosure Digest, Vol 89, Issue 11: ] How much time is appropriate for fixing (Laurelai <laurelai@...echan.org>)
• Re: Full-Disclosure Digest, Vol 89, Issue 11: ] How much time is appropriate for fixing (Григорий Братислава <musntlive@...il.com>)
• Re: has Thor big ego, has Thor long boring messages (Григорий Братислава <musntlive@...il.com>)
• Re: Full-Disclosure Digest, Vol 89, Issue 11: ] How much time is appropriate for fixing (Григорий Братислава <musntlive@...il.com>)
• Re: Full-Disclosure Digest, Vol 89, Issue 11: ] How much time is appropriate for fixing (Laurelai <laurelai@...echan.org>)
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Recording Server (Cisco Systems Product Security Incident Response Team <psirt@...co.co…)
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Immersive Endpoint Devices (Cisco Systems Product Security Incident Response Team <psir…)
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Manager (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Multipoint Switch (Cisco Systems Product Security Incident Response Team <psirt@...co.c…)
• Re: Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence Immersive Endpoint Devices (Григорий Братислава <musntlive@...il.…)
• Re: Full-Disclosure Digest, Vol 89, Issue 11: ] How much time is appropriate for fixing (Григорий Братислава <musntlive@...il.com>)
• Re: Full-Disclosure Digest, Vol 89, Issue 11: ] How much time is appropriate for fixing (Григорий Братислава <musntlive@...il.com>)
• Re: Full-Disclosure Digest, Vol 89, Issue 11: ] How much time is appropriate for fixing (Dave <mrx@...pergander.org.uk>)
• Re: Full-Disclosure Digest, Vol 89, Issue 11: ] How much time is appropriate for fixing (Григорий Братислава <musntlive@...il.com>)
• Re: How much time is appropriate for fixing ("Gary E. Miller" <gem@...lim.com>)
• Re: How much time is appropriate for fixing (Григорий Братислава <musntlive@...il.com>)
• Re: How much time is appropriate for fixing (Jeffrey Walton <noloader@...il.com>)
• Re: How much time is appropriate for fixing (Григорий Братислава <musntlive@...il.com>)
• Re: Preferred OSX Security/Server Lists (phocean <0x90@...cean.net>)
• Re: How much time is appropriate for fixing ("Gary E. Miller" <gem@...lim.com>)
• suspicion of rootkit (phocean <0x90@...cean.net>)
• Re: suspicion of rootkit (valdis.kletnieks@...edu)
• [UPDATE] - CORE-2011-1123 - Windows Kernel ReadLayoutFile Heap Overflow (Core Security Advisories <advisories@...esecurity.com>)
• Re: suspicion of rootkit (phocean <0x90@...cean.net>)
• Re: suspicion of rootkit (Alexandru Balan <jaymzu@...il.com>)
• Re: Preferred OSX Security/Server Lists ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Re: Preferred OSX Security/Server Lists (Jeffrey Walton <noloader@...il.com>)

• Re: Preferred OSX Security/Server Lists ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Re: Preferred OSX Security/Server Lists (Jeffrey Walton <noloader@...il.com>)
• Re: Preferred OSX Security/Server Lists ("Thor (Hammer of God)" <thor@...merofgod.com>)
• The right to read, debuggers and building future Fedora kernels (Georgi Guninski <guninski@...inski.com>)
• Re: Predefined Post Authentication Session ID Vulnerability (Gökhan Muharremoğlu <gokhan.muharremoglu@...ec.org>)
• TP Link Gateway v3.12.4 - Multiple Web Vulnerabilities (Research <research@...nerability-lab.com>)
• Phonalisa v5.0 VoiP - Multiple Web Vulnerabilities (Research <research@...nerability-lab.com>)
• PHP Jobsite v1.36 - Cross Site Scripting Vulnerabilities (Research <research@...nerability-lab.com>)
• Reserve Logic v1.2 Booking CMS - Multiple Vulnerabilities (Research <research@...nerability-lab.com>)
• Re: Predefined Post Authentication Session ID Vulnerability (Benji <me@...ji.com>)
• Re: The right to read, debuggers and building future Fedora kernels (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
• SEC Consult SA-20120712-0 :: Magento eCommerce Platform - Local file disclosure via XXE injection (SEC Consult Vulnerability Lab <research@...-consult.com>)
• [ MDVSA-2012:103 ] automake (security@...driva.com)
• [ MDVSA-2012:104 ] openjpeg (security@...driva.com)
• Re: Full-Disclosure Digest, Vol 89, Issue 15 suspicion of rootkit (Alexandru Balan) ("Mikhail A. Utin" <mutin@...monwealthcare.org>)
• Re: Full-Disclosure Digest, Vol 89, Issue 15 suspicion of rootkit (Alexandru Balan) (phocean <0x90@...cean.net>)
• Re: Full-Disclosure Digest, Vol 89, Issue 15 suspicion of rootkit (Alexandru Balan) (Kurt Buff <kurt.buff@...il.com>)
• Re: Full-Disclosure Digest, Vol 89, Issue 15 suspicion of rootkit (Alexandru Balan) (Григорий Братислава <musntlive@...il.com>)
• Re: Full-Disclosure Digest, Vol 89, Issue 15 suspicion of rootkit (Alexandru Balan) (valdis.kletnieks@...edu)
• Re: Full-Disclosure Digest, Vol 89, Issue 15 suspicion of rootkit (Alexandru Balan) (phocean <0x90@...cean.net>)
• Re: Full-Disclosure Digest, Vol 89, Issue 15 suspicion of rootkit (Alexandru Balan) (Григорий Братислава <musntlive@...il.com>)
• Re: Full-Disclosure Digest, Vol 89, Issue 15 suspicion of rootkit (Alexandru Balan) (phocean <0x90@...cean.net>)
• Re: Full-Disclosure Digest, Vol 89, Issue 15 suspicion of rootkit (Alexandru Balan) (Григорий Братислава <musntlive@...il.com>)
• ZDI-12-114 : HP OpenView Performance Agent coda.exe Opcode 0x34 Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-12-115 : HP OpenView Performance Agent coda.exe Opcode 0x8C Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• Re: Full-Disclosure Digest, Vol 89, Issue 15 suspicion of rootkit (Alexandru Balan) (phocean <0x90@...cean.net>)
• ZDI-12-116 : EMC AutoStart ftAgent Opcode 50 Subcode 04 Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• Re: Full-Disclosure Digest, Vol 89, Issue 15 suspicion of rootkit (Alexandru Balan) (Григорий Братислава <musntlive@...il.com>)
• ZDI-12-118: EMC AutoStart ftAgent Opcode 0x03 Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• Re: Full-Disclosure Digest, Vol 89, Issue 15 suspicion of rootkit (Alexandru Balan) (phocean <0x90@...cean.net>)
• Re: Full-Disclosure Digest, Vol 89, Issue 15 suspicion of rootkit (Alexandru Balan) (valdis.kletnieks@...edu)
• ZDI-12-119: EMC AutoStart ftAgent Opcode 0x41 Subcode 0x00 Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-12-120: EMC AutoStart ftAgent Opcode 85 Subcode 22 Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-12-121: EMC AutoStart ftAgent Opcode 85 Subcode 01 Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-12-122: EMC AutoStart ftAgent Opcode 65 Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-12-123: EMC AutoStart ftAgent Opcode 50 Subcode 60 Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-12-124: EMC AutoStart ftAgent Opcode 50 Subcode 42 Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-12-117 : EMC AutoStart ftAgent Opcode 50 Parsing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-12-125: Apple Quicktime QTPlugin SetLanguage Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• Re: Full-Disclosure Digest, Vol 89, Issue 15 suspicion of rootkit (Alexandru Balan) (Григорий Братислава <musntlive@...il.com>)
• [ MDVSA-2012:105 ] pidgin (security@...driva.com)
• [SECURITY] [DSA 2511-1] puppet security update (Moritz Muehlenhoff <jmm@...ian.org>)
• [SECURITY] [DSA 2512-1] mono security update (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: ZDI-12-119: EMC AutoStart ftAgent Opcode 0x41 Subcode 0x00 Parsing Remote Code Execution Vulnerability (Jeffrey Walton <noloader@...il.com>)
• Re: Predefined Post Authentication Session ID Vulnerability (genericone@...hmail.com)

• [SECURITY] [DSA 2510-1] extplorer security update (Luciano Bello <luciano@...ian.org>)
• VMSA-2012-0012 VMware ESXi update to third party library (VMware Security Response Center <security@...are.com>)
• vulnerability-lab.com kidz (vulnerabilitylabsucks@...h.ai)
• Cross site scripting vulnerability found in GLPI 0.83.2 ("Prajal Kulkarni" <PrajalKM@...roland.com>)
• Multiple CSRF Vulnerabilities in [GLPI Version 0.83.2] ("Prajal Kulkarni" <PrajalKM@...roland.com>)
• 0x00: MustntLive is now give out ("Anonymous Remailer (austria)" <mixmaster@...ailer.privacy.at>)
• Re: Predefined Post Authentication Session ID Vulnerability (Jann Horn <jannhorn@...glemail.com>)
• Re: Predefined Post Authentication Session ID Vulnerability (Gokhan Muharremoglu <gokhan.muharremoglu@...ec.org>)
• Re: Predefined Post Authentication Session ID Vulnerability (Benji <me@...ji.com>)
• Re: Predefined Post Authentication Session ID Vulnerability (Benji <me@...ji.com>)
• Re: Predefined Post Authentication Session ID Vulnerability (Gage Bystrom <themadichib0d@...il.com>)
• Re: Predefined Post Authentication Session ID Vulnerability (Gage Bystrom <themadichib0d@...il.com>)
• [ MDVSA-2012:106 ] libexif (security@...driva.com)
• Re: Predefined Post Authentication Session ID Vulnerability (larry Cashdollar <larry0@...com>)
• [ MDVSA-2012:107 ] exif (security@...driva.com)
• Re: Predefined Post Authentication Session ID Vulnerability (Григорий Братислава <musntlive@...il.com>)
• Re: Predefined Post Authentication Session ID Vulnerability (Benji <me@...ji.com>)
• Re: Predefined Post Authentication Session ID Vulnerability (Григорий Братислава <musntlive@...il.com>)
• Re: Predefined Post Authentication Session ID Vulnerability (Benji <me@...ji.com>)
• Re: Predefined Post Authentication Session ID Vulnerability (Tim <tim-security@...tinelchicken.org>)
• Re: Predefined Post Authentication Session ID Vulnerability (Gage Bystrom <themadichib0d@...il.com>)
• Re: Predefined Post Authentication Session ID Vulnerability (Григорий Братислава <musntlive@...il.com>)
• Re: Predefined Post Authentication Session ID Vulnerability (Григорий Братислава <musntlive@...il.com>)
• Re: Predefined Post Authentication Session ID Vulnerability (Gokhan Muharremoglu <gokhan.muharremoglu@...ec.org>)
• Re: Predefined Post Authentication Session ID Vulnerability (Gokhan Muharremoglu <gokhan.muharremoglu@...ec.org>)
• Netcat 1.11 Crash POC (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
• Re: 0x00: MustntLive not he is robot. (Fatherlaptop <fatherlaptop@...il.com>)
• Re: Predefined Post Authentication Session ID Vulnerability (Gokhan Muharremoglu <gokhan.muharremoglu@...ec.org>)
• Re: Predefined Post Authentication Session ID Vulnerability (Gökhan Muharremoglu <gokmuh@...mail.com>)
• Re: Predefined Post Authentication Session ID Vulnerability (Gage Bystrom <themadichib0d@...il.com>)
• Re: Predefined Post Authentication Session ID Vulnerability (Tim <tim-security@...tinelchicken.org>)
• Re: Predefined Post Authentication Session ID Vulnerability (Григорий Братислава <musntlive@...il.com>)
• Re: 0x00: MustntLive not he is robot. (Григорий Братислава <musntlive@...il.com>)
• XSS, Redirector and CSRF vulnerabilities in WordPress ("MustLive" <mustlive@...security.com.ua>)
• Re: 0x00: MustntLive not he is robot. (valdis.kletnieks@...edu)

• Event Calendar PHP 1.2 - Multiple Web Vulnerabilites (Research <research@...nerability-lab.com>)
• Lepton v1.2.0 CMS - Multiple Web Vulnerabilities (Research <research@...nerability-lab.com>)
• VamCart v0.9 CMS - Multiple Web Vulnerabilities (Research <research@...nerability-lab.com>)
• SMF Board v2.0.2 - Multiple Web Vulnerabilities (Research <research@...nerability-lab.com>)
• PBBoard v2.1.4 CMS - Multiple Web Vulnerabilities (Research <research@...nerability-lab.com>)
• Re: Predefined Post Authentication Session ID Vulnerability (Douglas Huff <mith@...obdobbs.org>)
• Blackboard Mobile Learn v3.0 - Persistent Web Vulnerability (Research <research@...nerability-lab.com>)
• Re: Predefined Post Authentication Session ID Vulnerability (Douglas Huff <mith@...obdobbs.org>)
• Re: Predefined Post Authentication Session ID Vulnerability (Douglas Huff <mith@...obdobbs.org>)
• Linux - Indicators of compromise ("Ali Varshovi " <ali.varshovi@...mail.com>)
• Telnet Ftp Server <= Memory Corruption PoC (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
• beSTORM ActiveX (WinGraphviz.dll) Remote Heap Overflow (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
• XSS vulnerabilty on eenmiljardseconden.frankdeboosere.be (Yvan Janssens <Yvan.Janssens@...co.com>)
• Re: XSS vulnerabilty on eenmiljardseconden.frankdeboosere.be (coderman <coderman@...il.com>)
• Re: CRYPTO-GRAM, July 15, 2012 (coderman <coderman@...il.com>)
• Re: Linux - Indicators of compromise (Michael Stummvoll <fulldis@...mmi.org>)
• Re: Linux - Indicators of compromise (valdis.kletnieks@...edu)
• Re: Linux - Indicators of compromise (Gary Baribault <gary@...ibault.net>)
• Re: Linux - Indicators of compromise (Benji <me@...ji.com>)
• 0A29-12-2 :Metasploit 'pcap_log' plugin privilege escalation vulnerability (0a29 40 <0a2940@...il.com>)
• Unpatched IIS Vulnerabilities / Microsoft July Security Bulletin (king cope <isowarez.isowarez.isowarez@...glemail.com>)
• Re: Linux - Indicators of compromise ("Ali Varshovi " <ali.varshovi@...mail.com>)
• [Benchmark][Tool] The 2012 Web Application Scanner Benchmark Was Published (Shay Chen <shaychen.hasc.ey@...il.com>)
• Re: Linux - Indicators of compromise (Bzzz <lazyvirus@....com>)
• Re: Unpatched IIS Vulnerabilities / Microsoft July Security Bulletin (Григорий Братислава <musntlive@...il.com>)
• Re: Unpatched IIS Vulnerabilities / Microsoft July Security Bulletin ("Thor (Hammer of God)" <thor@...merofgod.com>)
• Re: Unpatched IIS Vulnerabilities / Microsoft July Security Bulletin (Григорий Братислава <musntlive@...il.com>)
• Re: XSS vulnerabilty on eenmiljardseconden.frankdeboosere.be (Dodi Ara <dodi.ara@...il.com>)
• Re: Linux - Indicators of compromise (Григорий Братислава <musntlive@...il.com>)
• DC4420 - London DEFCON - July meet - Tuesday July 17th 2012 (Major Malfunction <majormal@...ate-radio.org>)
• Re: Unpatched IIS Vulnerabilities / Microsoft July Security Bulletin (king cope <isowarez.isowarez.isowarez@...glemail.com>)
• Re: Unpatched IIS Vulnerabilities / Microsoft July Security Bulletin (Григорий Братислава <musntlive@...il.com>)
• Re: Unpatched IIS Vulnerabilities / Microsoft July Security Bulletin (Григорий Братислава <musntlive@...il.com>)
• Re: Linux - Indicators of compromise (coderman <coderman@...il.com>)
• Re: Unpatched IIS Vulnerabilities / Microsoft July Security Bulletin (Григорий Братислава <musntlive@...il.com>)
• Re: Linux - Indicators of compromise ("Ali Varshovi " <ali.varshovi@...mail.com>)

• Re: Linux - Indicators of compromise (Benji <me@...ji.com>)
• Re: Linux - Indicators of compromise (coderman <coderman@...il.com>)
• Re: Unpatched IIS Vulnerabilities / Microsoft July Security Bulletin (Jan Reilink <janreilink@...ida.com>)
• Re: Unpatched IIS Vulnerabilities / Microsoft July Security Bulletin (Григорий Братислава <musntlive@...il.com>)
• CORE-2011-1123 - Windows Kernel ReadLayoutFile Heap Overflow (CORE Security Technologies Advisories <advisories@...esecurity.com>)
• Re: Unpatched IIS Vulnerabilities / Microsoft July Security Bulletin (king cope <isowarez.isowarez.isowarez@...glemail.com>)
• Re: Unpatched IIS Vulnerabilities / Microsoft July Security Bulletin (Григорий Братислава <musntlive@...il.com>)
• Re: Unpatched IIS Vulnerabilities / Microsoft July Security Bulletin (Gage Bystrom <themadichib0d@...il.com>)
• Re: Unpatched IIS Vulnerabilities / Microsoft July Security Bulletin (Григорий Братислава <musntlive@...il.com>)
• Re: Unpatched IIS Vulnerabilities / Microsoft July Security Bulletin (Gage Bystrom <themadichib0d@...il.com>)
• Re: Unpatched IIS Vulnerabilities / Microsoft July Security Bulletin (Григорий Братислава <musntlive@...il.com>)
• Re: Linux - Indicators of compromise (Giles Coochey <giles@...chey.net>)
• Re: Unpatched IIS Vulnerabilities / Microsoft July Security Bulletin (Григорий Братислава <musntlive@...il.com>)
• Re: Linux - Indicators of compromise (Григорий Братислава <musntlive@...il.com>)

• Re: Linux - Indicators of compromise (Григорий Братислава <musntlive@...il.com>)
• Re: Linux - Indicators of compromise (Григорий Братислава <musntlive@...il.com>)
• Re: how i stopped worrying and loved the backdoor (coderman <coderman@...il.com>)
• ZDI-12-126 : (0 day) HP StorageWorks File Migration Agent RsaCIFS.dll Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-12-127 : (0Day) HP StorageWorks File Migration Agent RsaFTP.dll Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)

• Re: Linux - Indicators of compromise ("Ali Varshovi " <ali.varshovi@...mail.com>)
• Re: Linux - Indicators of compromise (Jerry Bell <jerry@...kologist.com>)
• Re: Linux - Indicators of compromise ("Ali Varshovi " <ali.varshovi@...mail.com>)
• AVAVoIP v1.5.12 - Multiple Web Vulnerabilities (Administrator <admin@...nerability-lab.com>)
• KeyPass Password Safe v1.22 - Software Filter Vulnerability (Research <research@...nerability-lab.com>)
• Secunia Research: Cisco Linksys PlayerPT ActiveX Control "SetSource()" Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
• [SECURITY] [DSA 2513-1] iceape security update (Nico Golde <nion@...ian.org>)
• [SECURITY] [DSA 2514-1] iceweasel security update (Nico Golde <nion@...ian.org>)
• Re: Unpatched IIS Vulnerabilities / Microsoft July Security Bulletin (sumit kumar soni <sumit_uit@...oo.com>)
• Pwnt 4 Phun or Exposing the Most 'powerful' Hackers in Bulgaria (pr0n4all@...h.ai)
• [Anonymous/iWot] Somaleaks !!! (Abdikarim Roble <ahroble@...il.com>)
• Re: Linux - Indicators of compromise (Scott Solmonson <scosol@...sol.org>)
• [Anonymous/iWot] Somaleaks !!! (Abdikarim Roble <ahroble@...il.com>)
• GreHack 2012 - Call For Musicians/Artists/DJs application open till October 5th 2012 (Grenoble, France) (Fabien DUCHENE <f.duchene@...-online.fr>)
• Re: [Anonymous/iWot] Somaleaks !!! (Christian Sciberras <uuf6429@...il.com>)
• Re: Linux - Indicators of compromise (Григорий Братислава <musntlive@...il.com>)
• Re: Linux - Indicators of compromise (Giles Coochey <giles@...chey.net>)
• Re: [Anonymous/iWot] Somaleaks !!! (valdis.kletnieks@...edu)
• [Security-news] SA-CONTRIB-2012-114 - Campaign Monitor - Cross Site Scripting (XSS) (security-news@...pal.org)
• About IBM: results ("MustLive" <mustlive@...security.com.ua>)
• [Announcement] ClubHack Magazine's July 2012 Issue Released (Abhijeet Patil <getabhijeetpatil@...il.com>)
• Re: [Anonymous/iWot] Somaleaks !!! (Benji <me@...ji.com>)
• Re: [Anonymous/iWot] Somaleaks !!! (Григорий Братислава <musntlive@...il.com>)
• Re: About IBM: results (Григорий Братислава <musntlive@...il.com>)

• A modest proposal (Glenn and Mary Everhart <everhart@....com>)
• Re: A modest proposal (Gage Bystrom <themadichib0d@...il.com>)
• Re: A modest proposal (valdis.kletnieks@...edu)
• Re: A modest proposal (Memory Vandal <memvandal@...il.com>)
• Re: A modest proposal (Thor <thor@...merofgod.com>)
• Re: A modest proposal (Christian Sciberras <uuf6429@...il.com>)
• Defcon 20 printer-friendly schedule (Tee Vee <squidlysubz@...il.com>)
• [SECURITY] [DSA 2515-1] nsd3 security update (Nico Golde <nion@...ian.org>)
• stationripper ActiveX (RSLSPCOM.dll) BoF PoC (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
• CodeIgniter <= 2.1.1 xss_clean() Cross Site Scripting filter bypass (Krzysztof Kotowicz <kkotowicz+fd@...il.com>)
• Re: A modest proposal (Ben Laurie <ben@...ks.org>)
• Re: Pwnt 4 Phun or Exposing the Most 'powerful' Hackers in Bulgaria (pr0n4all@...h.ai)
• Re: [Anonymous/iWot] Somaleaks !!! (Jann Horn <jannhorn@...glemail.com>)
• Re: About IBM: results (Bzzz <lazyvirus@....com>)
• Re: Linux - Indicators of compromise (Leutnant Steiner <chk.mailbox@...il.com>)
• Re: A modest proposal (Bzzz <lazyvirus@....com>)
• Re: A modest proposal (Christian Sciberras <uuf6429@...il.com>)
• Re: A modest proposal (valdis.kletnieks@...edu)
• Re: A modest proposal (Jeffrey Walton <noloader@...il.com>)
• Re: About IBM: results (Jeffrey Walton <noloader@...il.com>)
• file clobbering vulnerability in Solaris update manager & local root with SUNWbindr install. (larry Cashdollar <larry0@...com>)

• Re: A modest proposal (Gage Bystrom <themadichib0d@...il.com>)
• Re: modest proposal replies (Glenn Everhart <Everhart@....com>)
• Pligg 0.9/1.x remote code execution (BlackHawk <hawkgotyou@...il.com>)
• Pwn2Own goes mobile: $200, 000 prizes for iOS, Android, BlackBerry zero-day attack (Jeffrey Walton <noloader@...il.com>)

• Re: About IBM: results ("MustLive" <mustlive@...security.com.ua>)

• Re: Linux - Indicators of compromise (Scott Solmonson <scosol@...sol.org>)
• NESSUS ANDROID APP - stores login info in plain text (seclists@...pam.jshipp.com)
• [SECURITY] [DSA 2508-1] kfreebsd-8 security update (Yves-Alexis Perez <corsac@...ian.org>)
• [ MDVSA-2012:108 ] php (security@...driva.com)
• [ MDVSA-2012:109 ] libxslt (security@...driva.com)

• [ MDVSA-2012:110 ] mozilla (security@...driva.com)
• Android DNS poisoning: Randomness gone bad (CVE-2012-2808) (Roee Hay <roeeh@...ibm.com>)

• Re: Linux - Indicators of compromise (Giles Coochey <giles@...chey.net>)
• Morovia Barcode ActiveX Professional 3 File Overwrite Exploit (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
• [ MDVSA-2012:111 ] libgdata (security@...driva.com)
• Re: Linux - Indicators of compromise (Григорий Братислава <musntlive@...il.com>)
• [Security-news] SA-CONTRIB-2012-115 - Gallery formatter - Cross Site Scripting (XSS) (security-news@...pal.org)
• [Security-news] SA-CONTRIB-2012-116 - Subuser Cross Site Request Forgery (CSRF) and Access Bypass (security-news@...pal.org)
• [Security-news] SA-CONTRIB-2012-117 - Location - Access Bypass (security-news@...pal.org)
• [Security-news] SA-CONTRIB-2012-118 - Secure Login - Open Redirect (security-news@...pal.org)

• [ MDVSA-2012:112 ] perl-DBD-Pg (security@...driva.com)
• Re: Linux - Indicators of compromise (Григорий Братислава <musntlive@...il.com>)
• Re: Linux - Indicators of compromise (valdis.kletnieks@...edu)
• Re: Linux - Indicators of compromise (Григорий Братислава <musntlive@...il.com>)
• [ MDVSA-2012:113 ] arpwatch (security@...driva.com)
• Transmission BitTorrent XSS Vulnerability (Justin Klein Keane <justin@...irish.net>)
• [ MDVSA-2012:114 ] apache-mod_auth_openid (security@...driva.com)
• 495 vulnerabilities on thelia (HTTPCS <contact@...pcs.com>)
• BarCodeWiz Barcode ActiveX(BarcodeWiz.dll) remote Buffer Overflow PoC (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
• [SECURITY] [DSA 2516-1] isc-dhcp security update (Nico Golde <nion@...ian.org>)
• Re: Linux - Indicators of compromise (Scott Solmonson <scosol@...sol.org>)
• [ MDVSA-2012:115 ] dhcp (security@...driva.com)
• [ MDVSA-2012:116 ] dhcp (security@...driva.com)
• DC (Григорий Братислава <musntlive@...il.com>)

• Google Blacklisted Database Query (Marshall Whittaker <marshallwhittaker@...il.com>)
• [ MDVSA-2012:117 ] python-pycrypto (security@...driva.com)
• [ MDVSA-2012:118 ] apache-mod_security (security@...driva.com)
• TWSL2012-014: Multiple Vulnerabilities in Scrutinizer NetFlow & sFlow Analyzer (Trustwave Advisories <TrustwaveAdvisories@...stwave.com>)

• Re: Pligg 0.9/1.x remote code execution (Henri Salo <henri@...v.fi>)
• Re: Pligg 0.9/1.x remote code execution (BlackHawk <hawkgotyou@...il.com>)
• Re: Transmission BitTorrent XSS Vulnerability (Tavis Ormandy <taviso@...xchg8b.com>)
• Re: Transmission BitTorrent XSS Vulnerability (Tavis Ormandy <taviso@...xchg8b.com>)

• Re: Linux - Indicators of compromise (jerry@...kologist.com)
• meetOne: Vulnerabilities and iPhone Data Theft (John Johnson-Doe <johnsondoejohn@...il.com>)
• Re: Linux - Indicators of compromise (Scott Solmonson <scosol@...sol.org>)
• Netasq UTM suffer from bypassing metacharacters filter (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
• ocPortal 7.1.5 <= | Open URL Redirection Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
• Quick note on requesting CVEs for public issues (Kurt Seifried <kseifried@...hat.com>)
• AxMan ActiveX fuzzing <== Memory Corruption PoC (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
• SC DHCP 4.1.2 <> 4.2.4 and 4.1-ESV <> 4.1-ESV-R6 remote denial of service (pathric due <bugybu@...il.com>)
• [ MDVSA-2012:119 ] bind (security@...driva.com)
• Vulnerabilities in plugins for MODx CMS, Joomla, Moodle and WordPress ("MustLive" <mustlive@...security.com.ua>)
• Re: AxMan ActiveX fuzzing <== Memory Corruption PoC (Tavis Ormandy <taviso@...xchg8b.com>)

• Re: AxMan ActiveX fuzzing <== Memory Corruption PoC (Tavis Ormandy <taviso@...xchg8b.com>)
• Re: AxMan ActiveX fuzzing <== Memory Corruption PoC (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
• [ MDVSA-2012:110-1 ] mozilla (security@...driva.com)
• Re: AxMan ActiveX fuzzing <== Memory Corruption PoC (Benji <me@...ji.com>)
• Re: Linux - Indicators of compromise (Григорий Братислава <musntlive@...il.com>)
• Security Problem with Google’s 2-Step Authentication (Pablo Ximenes <pablo@...en.es>)
• Re: Security Problem with Google’s 2-Step Authentication (andfarm <andfarm@...il.com>)
• Re: AxMan ActiveX fuzzing <== Memory Corruption PoC ("Thor (Hammer of God)" <thor@...merofgod.com>)

• [SECURITY] [DSA 2517-1] bind9 security update (Nico Golde <nion@...ian.org>)
• Firefox 14.0.1 Memory Corruption PoC (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
• Spark IM Client Local Password Decryption (Adam Caudill <adam@...mcaudill.com>)
• Re: Security Problem with Google’s 2-Step Authentication (Alexander Georgiev <alexander.georgiev@...oo.de>)
• anti emet3.5 (yuange <yuange1975@...mail.com>)
• Re: AxMan ActiveX fuzzing <== Memory Corruption PoC ("HD Moore" <hdm@...italoffense.net>)
• Re: AxMan ActiveX fuzzing <== Memory Corruption PoC ("James Condron" <james@...o-internet.org.uk>)
• Re: AxMan ActiveX fuzzing <== Memory Corruption PoC (Thor <thor@...merofgod.com>)
• Re: AxMan ActiveX fuzzing <== Memory Corruption PoC ("James Condron" <james@...o-internet.org.uk>)
• Comments group (Peter Dawson <slash.pd@...il.com>)

394 messages

Powered by blists - more mailing lists