full-disclosure mailing list - 2012/09

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2012/09

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹ 3	² 4
³ 12	⁴ 2	⁵ 3	⁶ 31	⁷ 4	⁸ 14	⁹ 10
¹⁰ 4	¹¹ 4	¹² 8	¹³ 11	¹⁴ 3	¹⁵ 2	¹⁶ 6
¹⁷ 9	¹⁸ 8	¹⁹ 13	²⁰ 7	²¹ 3	²²	²³ 2
²⁴ 7	²⁵ 6	²⁶ 17	²⁷ 8	²⁸ 3	²⁹ 4	³⁰ 2

Messages by day:

September 1 (3 messages)

Admidio 2.3.5 Multiple security vulnerabilities (Stefan Schurtz <sschurtz@...nline.de>)
Re: Microsoft Indexing Service Server-side (ixsso.dll) null pointer dereference ("Michael D. Wood" <mike@...ecuritypros.org>)
[ MDVSA-2012:149 ] fetchmail (security@...driva.com)

September 2 (4 messages)

nullcon Delhi 2012 Final List of Speakers and Events (nullcon <nullcon@...lcon.net>)
Re: debugfs exploit for a number of Android devices (Alexander Pruss <arpruss@...il.com>)
Alice Telecom Italia AGPF ADSL router CSRF reconfiguration (Emilio Pinna <emilio.pinn@...il.com>)
XSS and IL vulnerabilities in IBM Lotus Domino ("MustLive" <mustlive@...security.com.ua>)

September 3 (12 messages)

Re: SNMP Reflected Denial Of Service - PoC (Anestis Bechtsoudis <bechtsoudis.a@...il.com>)
Re: Alice Telecom Italia AGPF ADSL router CSRF reconfiguration (David3 <netevil@...kers.it>)
Re: Alice Telecom Italia AGPF ADSL router CSRF reconfiguration (Emilio Pinna <emilio.pinn@...il.com>)
Re: Alice Telecom Italia AGPF ADSL router CSRF reconfiguration (David3 <netevil@...kers.it>)
Security Advisory AA-004: Directory Traversal Vulnerability in Sitecom Home Storage Center (Mattijs van Ommeren <mattijs@...yon.nl>)
Security Advisory AA-003: Directory Traversal Vulnerability in Conceptronic Grab’n’Go Network Storage (Mattijs van Ommeren <mattijs@...yon.nl>)
Re: SNMP Reflected Denial Of Service - PoC (Full Disclosure <full.disclosure@...dex.ru>)
[HTTPCS]ArticleSetup 'cat' Remote SQL Injection Vulnerability (HTTPCS <contact@...pcs.com>)
[HTTPCS]ArticleSetup 's' Remote SQL Injection Vulnerability (HTTPCS <contact@...pcs.com>)
Secunia Research: Adobe Photoshop TIFF SGI24LogLum Decompression Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
Group-Office Calendar SQL Injection ("Joseph Sheridan" <joe@...ctionis.com>)
Splunk Vulnerability (Rodrigo Salvalagio <rsalvalagio@...il.com>)

September 4 (2 messages)

QNAP Turbo NAS Multiple Path Injection (Andrea Fabrizi <andrea.fabrizi@...il.com>)
IPv6 implications on IPv4 nets: IPv6 RAs, IPv4, and VPN "evasion" (Fernando Gont <fgont@...networks.com>)

September 5 (3 messages)

Ektron CMS - Multiple Vulnerabilities - Security Advisory - SOS-12-009 ("Lists" <lists@...seofsecurity.com>)
[Security-news] SA-CONTRIB-2012-137 - Heartbeat - Cross Site Request Forgery (CSRF) in heartbeat_comments (security-news@...pal.org)
[Security-news] SA-CONTRIB-2012-138 - Exposed Filter Data - Cross Site Scripting (XSS) (security-news@...pal.org)

September 6 (31 messages)

Re: Splunk Vulnerability ("Michael D. Wood" <mike@...ecuritypros.org>)
eFront Educational v3.6.11 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
ES Job Search Engine v3.0 - SQL injection vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
eFront Enterprise v3.6.11 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Barracuda Web Filter 910 5.0.015 - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[SECURITY] [DSA 2538-1] moin security update (Raphael Geissert <geissert@...ian.org>)
ekoparty Security Conference and Trainings - 8th edition (ekoparty Security Conference <no-reply@...party.org>)
[Rooted CON 2013] Call for papers starts! (Román Ramírez <rramirez@...tedcon.es>)
Security Advisory AA-006: Authorization Bypass Vulnerability in Password Reset Function Sitecom Home Storage Center (0… (Mattijs van Ommeren <mattijs@...yon.nl>)
Security Advisory AA-005: Authorization Bypass Vulnerability in Password Reset Function Conceptronic Grab’n’Go Netwo… (Mattijs van Ommeren <mattijs@...yon.nl>)
the post (Maria Shirokova <mShirokova@...ecurity.ru>)
Re: Splunk Vulnerability ("Zach C." <fxchip@...il.com>)
Re: cloudsafe365 for wordpress: file disclosure (Henri Salo <henri@...v.fi>)
Re: Splunk Vulnerability (JxT <jxt.lists@...il.com>)
TP-LINK TL-WR340G Wireless Denial of Service ("Adam P." <ziherung.pl@...il.com>)
Re: Splunk Vulnerability ("Michael D. Wood" <mike@...ecuritypros.org>)
Re: Splunk Vulnerability (Benji <me@...ji.com>)
[SECURITY] [DSA 2539-1] zabbix security update (Raphael Geissert <geissert@...ian.org>)
Re: Splunk Vulnerability ("Michael D. Wood" <mike@...ecuritypros.org>)
Adobe Flash UpdateInstalls Other Warez without Consent (Jeffrey Walton <noloader@...il.com>)
Re: Adobe Flash UpdateInstalls Other Warez without Consent ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: Adobe Flash UpdateInstalls Other Warez without Consent (Gary Baribault <gary@...ibault.net>)
Re: Adobe Flash UpdateInstalls Other Warez without Consent (James Lay <jlay@...ve-tothe-box.net>)
Re: Adobe Flash UpdateInstalls Other Warez without Consent (Jeffrey Walton <noloader@...il.com>)
Re: Adobe Flash UpdateInstalls Other Warez without Consent (Jeffrey Walton <noloader@...il.com>)
Re: Adobe Flash UpdateInstalls Other Warez without Consent (Gage Bystrom <themadichib0d@...il.com>)
Re: Adobe Flash UpdateInstalls Other Warez without Consent (Christian Sciberras <uuf6429@...il.com>)
Re: Full-Disclosure Digest, Vol 91, Issue 9 (SMiller@...min.com)
Re: Adobe Flash UpdateInstalls Other Warez without Consent (Jeffrey Walton <noloader@...il.com>)
Re: [funsec] Adobe Flash UpdateInstalls Other Warez without Consent (Jeffrey Walton <noloader@...il.com>)
Re: [funsec] Adobe Flash UpdateInstalls Other Warez without Consent (Jeff MacDonald <jam@...dtechnologies.com>)

September 7 (4 messages)

HTTP Response Splitting and XSS vulnerabilities in IBM Lotus Domino ("MustLive" <mustlive@...security.com.ua>)
nullcon CTF HackIM is on (nullcon <nullcon@...lcon.net>)
Re: Adobe Flash UpdateInstalls Other Warez without Consent (Mark <boogiebruva@...oo.co.uk>)
Re: Adobe Flash UpdateInstalls Other Warez without Consent (Mark <boogiebruva@...oo.co.uk>)

September 8 (14 messages)

[CVE-2012-3373] Apache Wicket XSS vulnerability via manipulated URL parameter (Carl-Eric Menzel <cmenzel@...ketbuch.de>)
[SECURITY] [DSA 2540-1] mahara security update (Raphael Geissert <geissert@...ian.org>)
[SECURITY] [DSA 2541-1] beaker security update (Raphael Geissert <geissert@...ian.org>)
Authentication flaw in APS-Soft DTE Axiom (CVE-2012-2455) (Tomas Rzepka <tomas@...tezza.net>)
HackIM - Delhi 2012 : Battle ON (Anant Shrivastava <anant@...ntshri.info>)
Re: Adobe Flash UpdateInstalls Other Warez without Consent ("Michael D. Wood" <mike@...ecuritypros.org>)
CPU-emulation bug (missing CPL check) allows crashing of VirtualBox guest from unprivileged ring-3 code (halfdog <me@...fdog.net>)
Re: Adobe Flash UpdateInstalls Other Warez without Consent (Christian Sciberras <uuf6429@...il.com>)
Re: Adobe Flash UpdateInstalls Other Warez without Consent (Benji <me@...ji.com>)
Re: Adobe Flash UpdateInstalls Other Warez without Consent (Georgi Guninski <guninski@...inski.com>)
Re: Adobe Flash Update Installs Other Warez without Consent (Jeffrey Walton <noloader@...il.com>)
Re: Adobe Flash Update Installs Other Warez without Consent (Benji <me@...ji.com>)
Re: Adobe Flash Update Installs Other Warez without Consent (Jeffrey Walton <noloader@...il.com>)
Re: Adobe Flash Update Installs Other Warez without Consent (Benji <me@...ji.com>)

September 9 (10 messages)

Re: Adobe Flash UpdateInstalls Other Warez without Consent ("Michael D. Wood" <mike@...ecuritypros.org>)
[SECURITY] [DSA 2542-1] qemu-kvm security update (Raphael Geissert <geissert@...ian.org>)
[SECURITY] [DSA 2543-1] xen-qemu-dm-4.0 security update (Raphael Geissert <geissert@...ian.org>)
[SECURITY] [DSA 2544-1] xen security update (Raphael Geissert <geissert@...ian.org>)
[SECURITY] [DSA 2545-1] qemu security update (Raphael Geissert <geissert@...ian.org>)
Wordpress Download Monitor - Download Page Cross-Site Scripting ("Joseph Sheridan" <joe@...ctionis.com>)
Authentication flaw in APS-Soft DTE Axiom (CVE-2012-2455) (Tomas Rzepka <tomas@...tezza.net>)
OpenSecurityTraining Intel VT-x class (OST FD <opensectraining.fd@...il.com>)
Regione.Sicilia.it multiple vulnerabilities (tig3rhack <tig3rhack@...mail.org>)
Re: Adobe Flash UpdateInstalls Other Warez without Consent ("Marcio B. Jr." <marcio.barbado@...il.com>)

September 10 (4 messages)

[PRE-SA-2012-06] FreeRADIUS: Stack Overflow in TLS-based EAP Methods (Timo Warns <Warns@...-Sense.DE>)
[ MDVSA-2012:150 ] java-1.6.0-openjdk (security@...driva.com)
H2HC 9th Edition ("Rodrigo Rubira Branco (BSDaemon)" <rodrigo@...nelhacking.com>)
CFP for BSidesPDX 2012 is open, Portland Oregon Nov 9-10 2012 (Dean Pierce <pierce403@...il.com>)

September 11 (4 messages)

[SE-2012-01] Security vulnerabilities in IBM Java (Security Explorations <contact@...urity-explorations.com>)
Re: Authentication flaw in APS-Soft DTE Axiom (CVE-2012-2455) (Tomas Rzepka <tomas@...tezza.net>)
m.bnl.it Vulnerable to Directory traversal (tig3rhack@...mail.org)
GreHack 2012 - 19th Oct. Grenoble, France - Call For [ Participation, Student Grants Application, Music Bands/Artists/… (Fabien DUCHENE <f.duchene@...-online.fr…)

September 12 (8 messages)

[SECURITY] [DSA 2546-1] freeradius security update (Nico Golde <nion@...ian.org>)
[ MDVSA-2012:151 ] ghostscript (security@...driva.com)
Cisco Security Advisory: Cisco Unified Presence and Jabber Extensible Communications Platform Stream Header Denial of … (Cisco Systems Product Security Incident…)
Cisco Security Advisory: Cisco ASA-CX and Cisco PRSM Log Retention Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psir…)
[SECURITY] [DSA 2547-1] bind9 security update (Florian Weimer <fw@...eb.enyo.de>)
[Security-news] SA-CONTRIB-2012-140 - Inf08 - Cross Site Scripting (XSS) (security-news@...pal.org)
[Security-news] SA-CONTRIB-2012-141 - Mass Contact - Access bypass (security-news@...pal.org)
[Security-news] SA-CONTRIB-2012-139 - PDFThumb OS Injection (security-news@...pal.org)

September 13 (11 messages)

Security Advisory AA-007: Arbitrary File Upload Vulnerability in Sitecom Home Storage Center (Mattijs van Ommeren <mattijs@...yon.nl>)
Security Advisory AA-007: Command Injection Vulnerability in Sitecom Home Storage Center (Mattijs van Ommeren <mattijs@...yon.nl>)
Knowledge Base EE v4.62.0 - SQL Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Fortigate UTM WAF Appliance - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
IPV6 Training in Portugal with Fernando Gont - 8 to 10 october (Ralf Braga <ralfbraga@...il.com>)
[HTTPCS] 1525 vulnerabilities in AsaanCart (HTTPCS <contact@...pcs.com>)
[ MDVSA-2012:152 ] bind (security@...driva.com)
ipv6mon v1.0 released! (IPv6 address monitoring daemon) (Fernando Gont <fgont@...networks.com>)
[SECURITY] [DSA 2548-1] tor security update (Moritz Muehlenhoff <jmm@...ian.org>)
K-Lite Codec Pack LAV Filters Memory corruption POC (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
[Onapsis Research Labs] New SAP Security In-Depth issue: "Securing the Gate to the Kingdom: Auditing the SAProuter" (Onapsis Research Labs <research@...psis.co…)

September 14 (3 messages)

[SECURITY] [DSA 2548-1] Debian Security Team PGP/GPG key change notice (Nico Golde <nion@...ian.org>)
ASTPP VoIP Billing (4cf207a) - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
NeoBill CMS v0.8 Alpha - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)

September 15 (2 messages)

Multiple vulnerabilities in IFOBS ("MustLive" <mustlive@...security.com.ua>)
IPv6 Toolkit v1.2.3 released! (and upcoming IPv6 security trainings) (Fernando Gont <fgont@...networks.com>)

September 16 (6 messages)

Linkedin's Clickjacking & Open Url Redirection Vulnerabilities (Ajay Singh Negi <ajaysinghnegi01@...il.com>)
[SECURITY] [DSA 2480-4] request-tracker3.8 regression update (Raphael Geissert <geissert@...ian.org>)
[SECURITY] [DSA 2549-1] devscripts security update (Raphael Geissert <geissert@...ian.org>)
Announcing the hack.lu CTF 2012 ("FluxFingers" <fluxfingers@...r-uni-bochum.de>)
[ MDVSA-2012:153 ] dhcp (security@...driva.com)
[IA38] NCMedia Sound Editor Pro v7.5.1 MRUList201202.dat File Handling Local Buffer Overflow (Inshell Security <info@...hell.net>)

September 17 (9 messages)

[HTTPCS] FreeWebshop 'prodprice' Remote SQL Injection Vulnerability (HTTPCS <contact@...pcs.com>)
[HTTPCS] FreeWebshop 'Color' Remote SQL Injection Vulnerability (HTTPCS <contact@...pcs.com>)
[HTTPCS] FreeWebshop 'redirect_to' Cross Site Scripting Vulnerability (HTTPCS <contact@...pcs.com>)
[HTTPCS] FreeWebshop 'searchfor' Remote SQL Injection Vulnerability (HTTPCS <contact@...pcs.com>)
[HTTPCS] FreeWebshop 'Text' Remote SQL Injection Vulnerability (HTTPCS <contact@...pcs.com>)
Secunia Research: Novell GroupWise iCalendar Date/Time Parsing Denial of Service (Secunia Research <remove-vuln@...unia.com>)
Fuzzing Like A Boss with Pythonect (Itzik Kotler <xorninja@...il.com>)
Re: [HTTPCS] FreeWebshop 'Text' Remote SQL Injection Vulnerability (Julius Kivimäki <julius.kivimaki@...il.com>)
Re: [HTTPCS] FreeWebshop 'Text' Remote SQL Injection Vulnerability (Benji <me@...ji.com>)

September 18 (8 messages)

Axis VoIP Manager v2.1.5.7 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Fortigate UTM WAF Appliance - Cross Site Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
SonicWALL EMail Security 7.3.5 - Multiple Vulnerabilities (Vulnerability Lab <admin@...nerability-lab.com>)
Anyone can log into Virgin Mobile USA accounts, read/write customer data (Kevin Burke <kevin@...lio.com>)
Re: Adobe Flash UpdateInstalls Other Warez without Consent (Christian Sciberras <uuf6429@...il.com>)
Re: Adobe Flash UpdateInstalls Other Warez without Consent (Jeffrey Walton <noloader@...il.com>)
List Charter (John Cartwright <johnc@...k.org.uk>)
[SECURITY] [DSA 2550-1] asterisk security update (Moritz Muehlenhoff <jmm@...ian.org>)

September 19 (13 messages)

Re: Full-Disclosure Digest, Vol 91, Issue 23 (James <magot_man@...mail.com>)
Re: Adobe Flash UpdateInstalls Other Warez without Consent (Nick Boyce <nick.boyce@...il.com>)
It’s more like an exploit than a browser (Georgi Guninski <guninski@...inski.com>)
FreeSWITCH remote denial of service vulnerability (Zsolt Imre <imrexzsolt@...il.com>)
Re: Adobe Flash UpdateInstalls Other Warez without Consent (Benji <me@...ji.com>)
BF and XSS vulnerabilities in IFOBS ("MustLive" <mustlive@...security.com.ua>)
[2.0 Update] Cisco Security Advisory: Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client (Cisco Systems Product Security Incident Response Tea…)
[Security-news] SA-CONTRIB-2012-142 - Spambot - Cross Site Scripting (XSS) (security-news@...pal.org)
[Security-news] SA-CONTRIB-2012-143 PRH Search - Cross Site Scripting (XSS) (security-news@...pal.org)
[Security-news] SA-CONTRIB-2012-144 Fonecta verify - Cross Site Scripting (XSS) (security-news@...pal.org)
[Security-news] SA-CONTRIB-2012-145 - Imagemenu - Cross Site Scripting (XSS) (security-news@...pal.org)
[Security-news] SA-CONTRIB-2012-146 - Simplenews Scheduler - Arbitrary code execution (security-news@...pal.org)
[Security-news] SA-CONTRIB-2012-147 - FileField Sources - Cross Site Scripting (XSS) (security-news@...pal.org)

September 20 (7 messages)

[Announcement] ClubHack Magazine's Sept 2012 Issue Out (Abhijeet Patil <getabhijeetpatil@...il.com>)
Microcart 1.0 Checkout Cross-Site Scripting Security Vulnerability ("Joseph Sheridan" <joe@...ctionis.com>)
Microcart 1.0 _Admin Cross-Site Scripting Security Vulnerability ("Joseph Sheridan" <joe@...ctionis.com>)
MF Gig Calendar Wordpress Plugin - Cross-Site Scripting ("Joseph Sheridan" <joe@...ctionis.com>)
CVE-2012-3451 - Apache CXF is vulnerable to SOAP Action spoofing attacks on Document Literal web services. (Colm O hEigeartaigh <coheigea@...che.org>)
[HTTPCS] AShop 'language' Cross Site Scripting Vulnerability (HTTPCS <contact@...pcs.com>)
Antivirus Evasion: Developing an undetectable USB dropper ("Adam Behnke" <adam@...osecinstitute.com>)

September 21 (3 messages)

Toshiba ConfigFree CF7 File Stack Buffer Overflow (ProfileName) ("Joseph Sheridan" <joe@...ctionis.com>)
Toshiba ConfigFree CF7 File Remote Command Execution ("Joseph Sheridan" <joe@...ctionis.com>)
Toshiba ConfigFree CF7 File Stack Buffer Overflow (Comment Field ("Joseph Sheridan" <joe@...ctionis.com>)

September 23 (2 messages)

DDIVRT-2012-42 Novell GroupWise Agents Arbitrary File Retrieval (CVE-2012-0419) (ddivulnalert <ddivulnalert@...frontline.com>)
CSRF and XSS vulnerabilities in IFOBS ("MustLive" <mustlive@...security.com.ua>)

September 24 (7 messages)

samba exploit - remote root colonel 0day (kd@...hmail.me)
[SECURITY] [DSA 2551-1] isc-dhcp security update (Nico Golde <nion@...ian.org>)
Re: samba exploit - remote root colonel 0day (paul.szabo@...ney.edu.au)
"Dell Data Protection | Access" for Windows contains and installs outdated, superfluous and vulnerable system componen… ("Stefan Kanthak" <stefan.kanthak@...go.…)
giochionline.ilgiornale.it is vulnerable to base64 xss (tig3rhack@...mail.org)
[SECURITY] [DSA 2553-1] iceweasel security update (Moritz Muehlenhoff <jmm@...ian.org>)
(no subject) ("cytao7@...oo.com" <cytao7@...oo.com>)

September 25 (6 messages)

[SE-2012-01] Critical security issue affecting Java SE 5/6/7 (Security Explorations <contact@...urity-explorations.com>)
Re: samba exploit - remote root colonel 0day (Julius Kivimäki <julius.kivimaki@...il.com>)
Re: samba exploit - remote root colonel 0day (Benji <me@...ji.com>)
[Announcement] CHMag - Call for Articles (Abhijeet Patil <getabhijeetpatil@...il.com>)
Re: "Dell Data Protection | Access" for Windows contains and installs outdated, superfluous and vulnerable system componen… (Jeffrey Walton <noloader@...il.com>)
Re: [SE-2012-01] Critical security issue affecting Java SE 5/6/7 (Chris Evans <scarybeasts@...il.com>)

September 26 (17 messages)

XSS vulnerability in wordpress plugin abc-test (Scott Herbert <scott.a.herbert@...glemail.com>)
Re: [SE-2012-01] Critical security issue affecting Java SE 5/6/7 (Security Explorations <contact@...urity-explorations.com>)
Council financial data at risk from internet hackers (Bit WAshor <b1t.wash0r@...il.com>)
Re: Council financial data at risk from internet hackers (Gage Bystrom <themadichib0d@...il.com>)
MS-CHAP-2 full brute force possible within days (PPTP, VPN, WPA2) (Kirils Solovjovs <kirils.solovjovs@...ils.com>)
[SECURITY] [DSA 2550-2] asterisk regression update (Moritz Muehlenhoff <jmm@...ian.org>)
Cisco Security Advisory: Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerabil… (Cisco Systems Product Security Incident…)
Cisco Security Advisory: Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team …)
Cisco Security Advisory: Cisco IOS Software Intrusion Prevention System Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team …)
Cisco Security Advisory: Cisco IOS Software Malformed Border Gateway Protocol Attribute Vulnerability (Cisco Systems Product Security Incident Response Team <p…)
Cisco Security Advisory: Cisco IOS Software Network Address Translation Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@...co.com…)
Cisco Security Advisory: Cisco IOS Software Tunneled Traffic Queue Wedge Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco IOS Software DHCP Version 6 Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.…)
Cisco Security Advisory: Cisco IOS Software DHCP Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco Catalyst 4500E Series Switch with Cisco Catalyst Supervisor Engine 7L-E Denial of Servi… (Cisco Systems Product Security Incident…)
EuSecWest, ekoparty, and SinFP3 OS fingerprinting tool release (GomoR <gomor-fd@...or.org>)
[Security-news] SA-CONTRIB-2012-148 - OG - Access Bypass (security-news@...pal.org)

September 27 (8 messages)

Re: samba exploit - remote root colonel 0day (paul.szabo@...ney.edu.au)
[IMF 2013] 2nd Call for Papers (Oliver Goebel <goebel@...t.uni-stuttgart.de>)
[Onapsis Research Labs] New Onapsis Bizploit release (Onapsis Research Labs <research@...psis.com>)
[SECURITY] [DSA 2554-1] iceape security update (Yves-Alexis Perez <corsac@...ian.org>)
[SECURITY] [DSA 2552-1] tiff security update (Luciano Bello <luciano@...ian.org>)
Re: Council financial data at risk from internet hackers (Max Duijsens <maxduijsens@...il.com>)
YingZhi Python Directory Traversal and Arbitrary File Upload Vulnerabilities (larry Cashdollar <larry0@...com>)
Re: NGS00254 Patch Notification: Apple Mac OS X Lion USB Hub Class Hub Descriptor Arbitrary Code Execution (Jeffrey Walton <noloader@...il.com>)

September 28 (3 messages)

Adobe certificate server hacked - code-signing certs getting revoked on Oct .4th (Ray P <sixsigma98@...mail.com>)
[ MDVSA-2012:154 ] apache (security@...driva.com)
[ MDVSA-2012:155 ] xinetd (security@...driva.com)

September 29 (4 messages)

etoro.it vulnerable to XSS (tig3rhack@...mail.org)
LG NAS Users and password hash disclosure (anon6436@...h.com)
Foxit Reader suffers from Division By Zero (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
Re: Foxit Reader suffers from Division By Zero (Mario Vilas <mvilas@...il.com>)

September 30 (2 messages)

Re: Foxit Reader suffers from Division By Zero (Nick Boyce <nick.boyce@...il.com>)
Cross-Site Scripting via redirectors 301 and 303 in different browsers ("MustLive" <mustlive@...security.com.ua>)

210 messages

Powered by blists - more mailing lists