full-disclosure mailing list - 2012/10

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2012/10

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹ 4	² 20	³ 12	⁴ 2	⁵ 13	⁶ 3	⁷ 3
⁸ 11	⁹ 1	¹⁰ 14	¹¹ 13	¹² 2	¹³ 1	¹⁴ 2
¹⁵ 7	¹⁶ 5	¹⁷ 10	¹⁸ 7	¹⁹ 10	²⁰ 3	²¹ 9
²² 7	²³ 4	²⁴ 14	²⁵ 2	²⁶ 19	²⁷ 14	²⁸ 1
²⁹ 31	³⁰ 21	³¹ 12

Messages by day:

October 1 (4 messages)

BF, XSS, CSRF and Redirector vulnerabilities in IBM Lotus Notes Traveler ("MustLive" <mustlive@...security.com.ua>)
[ MDVSA-2012:154-1 ] apache (security@...driva.com)
CarolinaCon-9 - March 2013 - Call for Presenters/Speakers/Papers/Demos (Vic Vandal <vvandal@...l.com>)
CA20121001-01: Security Notice for CA License ("Williams, James K" <James.Williams@...com>)

October 2 (20 messages)

Reminder: ClubHack2012 Call for Papers Closing Soon (Abhijeet Patil <getabhijeetpatil@...il.com>)
PrezziPazzi.com vulnerable to XSS (tig3rhack@...mail.org)
[ MDVSA-2012:152-1 ] bind (security@...driva.com)
[ MDVSA-2012:156 ] inn (security@...driva.com)
GTA UTM Firewall GB 6.0.3 - Multiple Web Vulnerabilities (Vulnerability Lab <admin@...nerability-lab.com>)
Switchvox Asterisk v5.1.2 - Multiple Web Vulnerabilities (Vulnerability Lab <admin@...nerability-lab.com>)
OPlayer v2.0.05 iOS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[HTTPCS] Handshakes Professional 'frm_id' Remote SQL Injection Vulnerability (HTTPCS <contact@...pcs.com>)
Google Talk s2s SSL configuration (Tim Brown <timb@...-dimension.org.uk>)
Switchvox Asterisk v5.1.2 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Google Maps pseudonym disclosure vulnerability via Google Places reviews (Sai <sai@...zai.com>)
Paypal BugBounty #9 - Persistent Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Paypal BugBounty #9 - Persistent Web Vulnerabilities [FULL] (Vulnerability Lab <research@...nerability-lab.com>)
Cookie stealing and XSS vulnerable in Zenphoto version 1.4.3.2 (Scott Herbert <scott.a.herbert@...glemail.com>)
Re: Paypal BugBounty #9 - Persistent Web Vulnerabilities (Benji <me@...ji.com>)
[ MDVSA-2012:155-1 ] xinetd (security@...driva.com)
Re: Cookie stealing and XSS vulnerable in Zenphoto version 1.4.3.2 (Benji <me@...ji.com>)
XSS Vulnerabilities in phpFreeChat (Netsparker Advisories <advisories@...itunasecurity.com>)
[ MDVSA-2012:153-1 ] dhcp (security@...driva.com)
Re: Cookie stealing and XSS vulnerable in Zenphoto version 1.4.3.2 (Scott Herbert <scott.a.herbert@...glemail.com>)

October 3 (12 messages)

[ MDVSA-2012:157 ] openjpeg (security@...driva.com)
Novell Sentinel Log Manager <= 1.2.0.2 retention policy vulnerability (Piotr Chmylkowski <piotr.chmylkowski@...il.com>)
Paypal BugBounty #9 - Persistent Web Vulnerabilities [FULL DETAILS] (Vulnerability Lab <research@...nerability-lab.com>)
Omnistar Mailer v7.2 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
winAUTOPWN v3.2 Released ("QUAKER DOOMER" <quakerdoomer@...ox.lv>)
[ MDVSA-2012:158 ] gc (security@...driva.com)
[waraxe-2012-SA#091] - Multiple Vulnerabilities in phpMyBitTorrent 2.04 (Janek Vind <come2waraxe@...oo.com>)
[ MDVSA-2012:159 ] freeradius (security@...driva.com)
[Security-news] SA-CONTRIB-2012-149 - Hostip - Cross Site Scripting (XSS) (security-news@...pal.org)
[Security-news] SA-CONTRIB-2012-150 - Twitter Pull - Cross Site Scripting (XSS) (security-news@...pal.org)
[Security-news] SA-CONTRIB-2012-151 - Commerce Extra Panes - Cross Site Request Forgery (security-news@...pal.org)
ANNOUNCE: RFIDIOt v1.0d released and code migration (Adam Laurie <adam@...roup.co.uk>)

October 4 (2 messages)

XnView JLS File Decompression Heap Overflow ("Joseph Sheridan" <joe@...ctionis.com>)
Vulnerable MSVC++ 2008 runtime libraries distributed with and installed by Ogg DirectShow filters ("Stefan Kanthak" <stefan.kanthak@...go.de>)

October 5 (13 messages)

Team SHATTER Security Advisory: JAR file overwrite vulnerability via SQLJ.DB2_INSTALL_JAR system stored (Shatter <shatter@...secinc.com>)
Team SHATTER Security Advisory: XML file disclosure vulnerability via GET_WRAP_CFG_C and GET_WRAP_CFG_C2 (Shatter <shatter@...secinc.com>)
Team SHATTER Security Advisory: Multiple SQL Injection in Oracle Enterprise Manager (SQL Tunning Sets components) (Shatter <shatter@...secinc.com>)
Team SHATTER Security Advisory: Elevated roles through DBCC (Shatter <shatter@...secinc.com>)
Team SHATTER Security Advisory: Java Operating System command execution (Shatter <shatter@...secinc.com>)
VMSA-2012-0014 VMware vCenter Operations, CapacityIQ, and Movie Decoder security updates (VMware Security Team <security@...are.com>)
Your account could be at risk of state-sponsored attacks (Aftermath <aftermath.thegreat@...il.com>)
[ MDVSA-2012:151-1 ] ghostscript (security@...driva.com)
[ MDVSA-2012:150-1 ] java-1.6.0-openjdk (security@...driva.com)
[ MDVSA-2012:160 ] imagemagick (security@...driva.com)
[SECURITY] [DSA 2555-1] libxslt security update (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Your account could be at risk of state-sponsored attacks (Nick Boyce <nick.boyce@...il.com>)
Re: Your account could be at risk of state-sponsored attacks (Peter Dawson <slash.pd@...il.com>)

October 6 (3 messages)

-== MySQL Brute Force Account Scanner ==- (king cope <isowarez.isowarez.isowarez@...glemail.com>)
[ MDVSA-2012:161 ] html2ps (security@...driva.com)
utempter allows fake host setting (paul.szabo@...ney.edu.au)

October 7 (3 messages)

Re: Your account could be at risk of state-sponsored attacks (Aftermath <aftermath.thegreat@...il.com>)
rubilyn-0.0.1.tar.gz - Mac OS X rootkit (Levent Kayan <levon.kayan@...il.com>)
Multiple vulnerabilities in Megapolis.Portal Manager ("MustLive" <mustlive@...security.com.ua>)

October 8 (11 messages)

JSON-RPC Cross-Site Request Forgery little exploitation trick (DefenseCode <defensecode@...ensecode.com>)
[SECURITY] [DSA 2556-1] icedove security update (Nico Golde <nion@...ian.org>)
[SECURITY] [DSA 2557-1] hostapd security update (Nico Golde <nion@...ian.org>)
[PRE-SA-2012-07] hostapd: Missing EAP-TLS message length validation (Timo Warns <Warns@...-Sense.DE>)
Re: Cookie stealing and XSS vulnerable in Zenphoto version 1.4.3.2 (Henri Salo <henri@...v.fi>)
Endpoint Protector v4.0.4.0 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Paypal BugBounty #5 - Persistent Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Interspire Email Marketer v6.0.1 - Multiple Vulnerabilites (Vulnerability Lab <research@...nerability-lab.com>)
GTA UTM Firewall GB 6.0.3 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[SECURITY] [DSA 2558-1] bacula security update (Raphael Geissert <geissert@...ian.org>)
Re: Cookie stealing and XSS vulnerable in Zenphoto version 1.4.3.2 (Scott Herbert <scott.a.herbert@...glemail.com>)

October 9 (1 message)

Multiple 0-days in Dark Comet RAT ("Hertz, Jesse" <jesse_hertz@...wn.edu>)

October 10 (14 messages)

Re: Multiple 0-days in Dark Comet RAT (Philip Whitehouse <philip@...uk.com>)
Re: Cookie stealing and XSS vulnerable in Zenphoto version 1.4.3.2 (Malte Müller <info@...tem.de>)
[ MDVSA-2012:162 ] bind (security@...driva.com)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Cata… (Cisco Systems Product Security Incident…)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Firewall Services Module (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Multiple Vulnerabilities in the Cisco WebEx Recording Format Player (Cisco Systems Product Security Incident Response Team <psirt@...c…)
List Charter (John Cartwright <johnc@...k.org.uk>)
[Security-news] SA-CONTRIB-2012-152 - Feeds - Access bypass (security-news@...pal.org)
[Security-news] SA-CONTRIB-2012-153 - Mandrill - Information Disclosure (security-news@...pal.org)
[Security-news] SA-CONTRIB-2012-154 - Basic webmail - Multiple vulnerabilities (security-news@...pal.org)
[Security-news] SA-CONTRIB-2012-155 - ShareThis - Cross Site Scripting (XSS) (security-news@...pal.org)
binfmt_script kernel stack data disclosure during exec (halfdog <me@...fdog.net>)
Re: Multiple 0-days in Dark Comet RAT ("Thor (Hammer of God)" <thor@...merofgod.com>)
FileBound - Privilege Escalation Vulnerability - Security Advisory - SOS-12-010 ("Lists" <lists@...seofsecurity.com>)

October 11 (13 messages)

Last reminder for ClubHack 2012 : Call for Papers (Abhijeet Patil <getabhijeetpatil@...il.com>)
thc-ipv6 v2.0 (Marc Heuse <mh@...sec.de>)
Omnistar Document Manager v8.0 - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
vOlk Botnet Framework v4.0 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Re: Multiple 0-days in Dark Comet RAT (Pascal Ernster <full-disclosure@...dfalcon.net>)
[ MDVSA-2012:163 ] firefox (security@...driva.com)
Re: Multiple 0-days in Dark Comet RAT (Valdis.Kletnieks@...edu)
[ MDVSA-2012:164 ] libxslt (security@...driva.com)
Re: Multiple 0-days in Dark Comet RAT (Gage Bystrom <themadichib0d@...il.com>)
Re: Multiple 0-days in Dark Comet RAT (Julius Kivimäki <julius.kivimaki@...il.com>)
Re: Cookie stealing and XSS vulnerable in Zenphoto version 1.4.3.2 (Henri Salo <henri@...v.fi>)
[CORE-2012-0613] - Cisco WebEx .wrf Memory Corruption Vulnerability (Core Security Advisories Team <advisories@...esecurity.com>)
Wordpress plugin abtest vulnerable to a directory traversal attack (Scott Herbert <scott.a.herbert@...glemail.com>)

October 12 (2 messages)

[ MDVSA-2012:165 ] graphicsmagick (security@...driva.com)
[ MDVSA-2012:166 ] bacula (security@...driva.com)

October 13 (1 message)

[ MDVSA-2012:167 ] firefox (security@...driva.com)

October 14 (2 messages)

P1 WiMAX modems port 80 open with default login (Nursyafiq Mohamad <izecson_k22@...oo.com.my>)
Re: Multiple 0-days in Dark Comet RAT ("Hertz, Jesse" <jesse_hertz@...wn.edu>)

October 15 (7 messages)

Is it OK to hold credit card numbers in cookies? Santander? (auto62098873@...hmail.com)
SilverStripe CMS 2.4.7 <= Arbitrary URL Redirection (YGN Ethical Hacker Group <lists@...g.net>)
SilverStripe CMS 2.4.7 <= Persistent Cross Site Scripting Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
Re: Multiple 0-days in Dark Comet RAT (Valdis.Kletnieks@...edu)
Re: Is it OK to hold credit card numbers in cookies? Santander? (klondike <klondike@...ndike.es>)
Re: Is it OK to hold credit card numbers in cookies? Santander? (Rainer Duffner <rainer@...ra-secure.de>)
Visual Tools DVR multiple vulnerabilities (Andrea Fabrizi <andrea.fabrizi@...il.com>)

October 16 (5 messages)

Critical issues affecting Steam users (ReVuln <info@...uln.com>)
Re: Is it OK to hold credit card numbers in cookies? Santander? (Alexander Georgiev <alexander.georgiev@...oo.de>)
Re: Is it OK to hold credit card numbers in cookies? Santander? (Christian Sciberras <uuf6429@...il.com>)
Re: Is_it_OK_to_hold_credit_card_numbers_ in_cookies?_Santander? (Christian Rost <christian.rost@...on-it.de>)
Last minute CFP: FSCONS (Göteborg, Sweden) Security related topics track (klondike <klondike@...ndike.es>)

October 17 (10 messages)

SEC Consult SA-20121017-0 :: ModSecurity multipart/invalid part ruleset bypass (SEC Consult Vulnerability Lab <research@...-consult.com>)
SEC Consult SA-20121017-1 :: Unirgy uStoreLocator SQL Injection - Magento extension (SEC Consult Vulnerability Lab <research@...-consult.com>)
[IMF 2013] 3rd Call for Papers: Deadline Extended (Oliver Goebel <goebel@...t.uni-stuttgart.de>)
SEC Consult SA-20121017-2 :: Multiple vulnerabilities in Oracle WebCenter Sites (former FatWire Content Server) (SEC Consult Vulnerability Lab <research@...-co…)
[waraxe-2012-SA#092] - Multiple Vulnerabilities in Wordpress Slideshow Plugin (Janek Vind <come2waraxe@...oo.com>)
Re: Multiple 0-days in Dark Comet RAT ("Hertz, Jesse" <jesse_hertz@...wn.edu>)
Credentials leaks in Legrand-003598 / Bticino-F454 SCS Web Gateway (sxpert <sxpert@...ert.org>)
[waraxe-2012-SA#093] - Multiple Vulnerabilities in Wordpress Social Discussions Plugin (Janek Vind <come2waraxe@...oo.com>)
[Security-news] SA-CONTRIB-2012-156 - Search API - Cross Site Request Forgery (CSRF) (security-news@...pal.org)
[Security-news] SA-CORE-2012-003 - Drupal core - Arbitrary PHP code execution and Information disclosure (security-news@...pal.org)

October 18 (7 messages)

RealPlayer suffers from Arbitrary Code Execution (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
[SECURITY] [DSA 2559-1] libexif security update (Yves-Alexis Perez <corsac@...ian.org>)
Re: [Security-news] SA-CORE-2012-003 - Drupal core - Arbitrary PHP code execution and Information disclosure ("Dex" <0x41@...h.ai>)
CA20121018-01: Security Notice for CA ARCserve Backup ("Kotas, Kevin J" <Kevin.Kotas@...com>)
Before We Knew It (Jeffrey Walton <noloader@...il.com>)
Re: Multiple 0-days in Dark Comet RAT (scriptjunkie <scriptjunkie1@...glemail.com>)
Re: Multiple 0-days in Dark Comet RAT (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)

October 19 (10 messages)

Re: Multiple 0-days in Dark Comet RAT (Valdis.Kletnieks@...edu)
favicon (debug <debug.net@...il.com>)
CMSQLITE v1.3.2 - Multiple Web Vulnerabiltiies (Vulnerability Lab <research@...nerability-lab.com>)
XSS Vulnerabilities in TaskFreak (Netsparker Advisories <advisories@...itunasecurity.com>)
XSS Vulnerabilities in CMSMini (Netsparker Advisories <advisories@...itunasecurity.com>)
XSS Vulnerabilities in ClipBucket (Netsparker Advisories <advisories@...itunasecurity.com>)
XSS and SQL Injection Vulnerabilities in DotProject (Netsparker Advisories <advisories@...itunasecurity.com>)
[HTTPCS] 52 Vulnerabilities in Dolibarr (HTTPCS <contact@...pcs.com>)
Re: favicon (Milan Berger <m.berger@...ject-mindstorm.net>)
XSS and IAA vulnerabilities in Wordfence Security for WordPress ("MustLive" <mustlive@...security.com.ua>)

October 20 (3 messages)

nullcon Goa 2013 Final Call For Papers/Events and First Round of Speakers (nullcon <nullcon@...lcon.net>)
[SECURITY] [DSA 2560-1] bind9 security update (Florian Weimer <fw@...eb.enyo.de>)
Adobe reader 10.1.4 memory corruption (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)

October 21 (9 messages)

Re: vOlk Botnet Framework v4.0 - Multiple Web Vulnerabilities ("ZeroDay.JP" <unixfreaxjp22@...il.com>)
Re: vOlk Botnet Framework v4.0 - Multiple Web Vulnerabilities (Benji <me@...ji.com>)
Re: XSS and IAA vulnerabilities in Wordfence Security for WordPress (Philip Whitehouse <philip@...uk.com>)
Re: XSS and IAA vulnerabilities in Wordfence Security for WordPress (Mark Maunder <mmaunder@...il.com>)
Re: Google Maps pseudonym disclosure vulnerability via Google Places reviews (Sai <sai@...zai.com>)
F5 FirePass SSL VPN 4xxx Series | Arbitrary URL Redirection (YGN Ethical Hacker Group <lists@...g.net>)
Re: vOlk Botnet Framework v4.0 - Multiple Web Vulnerabilities (アドリアンヘンドリック <unixfreaxjp22@...il.com>)
[SECURITY] [DSA 2561-1] tiff security update (Moritz Muehlenhoff <jmm@...ian.org>)
Re: F5 FirePass SSL VPN 4xxx Series | Arbitrary URL Redirection (Gary Driggs <gdriggs@...il.com>)

October 22 (7 messages)

[ MDVSA-2012:168 ] hostapd (security@...driva.com)
DC4420 - London DEFCON - October meet - tomorrow, Tuesday 23rd October. (alien DC4420 <alien@...420.org>)
how to steal openssh private key (nothacking <nothacking@....com>)
[SE-2012-01] Challenging Oracle (in a different way) (Security Explorations <contact@...urity-explorations.com>)
[ANNOUNCE] Apache OFBiz 10.04.03 released (Jacopo Cappellato <jacopoc@...che.org>)
Content Spoofing and Cross-Site Scripting vulnerabilities in Bitrix Site Manager ("MustLive" <mustlive@...security.com.ua>)
Re: how to steal openssh private key (Nate Theis <nttheis@...il.com>)

October 23 (4 messages)

Google Numbers Search (Marshall Whittaker <marshallwhittaker@...il.com>)
stealing ssh keys (Daniel Sichel <daniels@...derosatel.com>)
HP/H3C and Huawei SNMP Weak Access to Critical Data (Kurt Grutzmacher <grutz@...gojango.net>)
[SECURITY] [DSA 2565-1] iceweasel security update (Florian Weimer <fw@...eb.enyo.de>)

October 24 (14 messages)

SEC Consult Vulnerability Lab Study - "Application Security of Core Banking Systems - A first reality check" (SEC Consult Vulnerability Lab <research@...-consu…)
[SECURITY] [DSA 2562-1] cups-pk-helper security update (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 2563-1] viewvc security update (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 2564-1] tinyproxy security update (Thijs Kinkhorst <thijs@...ian.org>)
Re: XSS and IAA vulnerabilities in Wordfence Security for WordPress (Troy Rose <troyjrose@...il.com>)
Grandstream GXP1405 Executive IP Phone Persistent XSS (Are You Likeme Now <areulikemenow@...il.com>)
Re: Google Numbers Search (boardnerd@...eup.net)
Microsoft Office Word 2010 Stack Overflow (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
Re: Microsoft Office Word 2010 Stack Overflow (Mario Vilas <mvilas@...il.com>)
Re: SEC Consult Vulnerability Lab Study - "Application Security of Core Banking Systems - A first reality check" (Jeffrey Walton <noloader@...il.com>)
Re: stealing ssh keys (Jacqui Caren <jacqui.caren@...world.com>)
[Security-news] SA-CONTRIB-2012-157 - Time Spent - Multiple Vulnerabilities - (unsupported) (security-news@...pal.org)
[Security-news] SA-CONTRIB-2012-158 - MailChimp - Cross Site Scripting (XSS) (security-news@...pal.org)
Re: stealing ssh keys ("Thor (Hammer of God)" <thor@...merofgod.com>)

October 25 (2 messages)

Re: stealing ssh keys ("Raj Mathur (राज माथुर)" <raju@...ux-delhi.org>)
Microsoft Office Picture Manager 2010 memory corruption (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)

October 26 (19 messages)

Aladdin Knowledge System Ltd. PrivAgent ActiveX Control 2.0 Multiple Remote Vulnerabilities (Carlo Di Dato <shinnai@...istici.org>)
Re: how to steal openssh private key (Valdis.Kletnieks@...edu)
[waraxe-2012-SA#094] - Multiple Vulnerabilities in Wordpress GRAND Flash Album Gallery Plugin (Janek Vind <come2waraxe@...oo.com>)
Gramophone v0.01b1 'rs' XSS (Thomas Richards <g13net@...il.com>)
Allscripts Homecare Client Local Memory Corruption table_info.ff2 (Thomas Richards <g13net@...il.com>)
Inventory 1.0 Multiple SQL Vulnerabilities (Thomas Richards <g13net@...il.com>)
Inventory 1.0 Multiple XSS Vulnerabilities (Thomas Richards <g13net@...il.com>)
Layton Helpbox 4.4.0 Multiple Security Issues ("Joseph Sheridan" <joe@...ctionis.com>)
Medium severity flaw with Perl 5 (Tim Brown <timb@...-dimension.org.uk>)
[SECURITY] [DSA 2566-1] exim4 security update (Nico Golde <nion@...ian.org>)
Realplayer Watchfolders Long Filepath Overflow ("Joseph Sheridan" <joe@...ctionis.com>)
RANDOM NUMBER SECURITY IN PYTHON (pr <pr@...ecurity.com>)
LiveChatInc.com breached (warning@...e-error.net)
Re: stealing ssh keys (Ivaylo Hubanov <sniffski@...il.com>)
Re: stealing ssh keys ("Thor (Hammer of God)" <thor@...merofgod.com>)
[SECURITY] [DSA 2567-1] request-tracker3.8 security update (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 2568-1] rtfm security update (Florian Weimer <fw@...eb.enyo.de>)
Re: stealing ssh keys (Jeffrey Walton <noloader@...il.com>)
Re: XSS and IAA vulnerabilities in Wordfence Security for WordPress ("MustLive" <mustlive@...security.com.ua>)

October 27 (14 messages)

Re: stealing ssh keys ("Raj Mathur (राज माथुर)" <raju@...ux-delhi.org>)
Microsoft Windows Help program (WinHlp32.exe) memory corruption (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
Microsoft Paint 5.1 memory corruption (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
Re: Microsoft Windows Help program (WinHlp32.exe) memory corruption (Mario Vilas <mvilas@...il.com>)
Re: Microsoft Windows Help program (WinHlp32.exe) memory corruption (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
Re: Microsoft Windows Help program (WinHlp32.exe) memory corruption (adam <adam@...sy.net>)
Re: Microsoft Office Word 2010 Stack Overflow (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
Re: Microsoft Windows Help program (WinHlp32.exe) memory corruption (Benji <me@...ji.com>)
Re: Microsoft Windows Help program (WinHlp32.exe) memory corruption (Gynvael Coldwind <gynvael@...dwind.pl>)
Re: Microsoft Windows Help program (WinHlp32.exe) memory corruption (Peter Ferrie <peter.ferrie@...il.com>)
Re: Microsoft Office Word 2010 Stack Overflow (Peter Ferrie <peter.ferrie@...il.com>)
Re: Microsoft Windows Help program (WinHlp32.exe) memory corruption (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
Re: Microsoft Office Word 2010 Stack Overflow (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
Microsoft Office Publisher 2010 memory corruption (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)

October 28 (1 message)

Cross-Site Scripting vulnerability in CorePlayer ("MustLive" <mustlive@...security.com.ua>)

October 29 (31 messages)

Re: Microsoft Office Publisher 2010 memory corruption (Peter Ferrie <peter.ferrie@...il.com>)
Microsoft Office Excel 2010 memory corruption (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
Re: Microsoft Office Excel 2010 memory corruption (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
Re: Microsoft Office Excel 2010 memory corruption (Benji <me@...ji.com>)
Re: stealing ssh keys (gold flake <ptinstructor@...il.com>)
Re: stealing ssh keys (Jeffrey Walton <noloader@...il.com>)
Re: Microsoft Windows Help program (WinHlp32.exe) memory corruption (Richard Miles <richard.k.miles@...glemail.com>)
Re: Microsoft Office Publisher 2010 memory corruption (Yuhong Bao <yuhongbao_386@...mail.com>)
Re: Microsoft Paint 5.1 memory corruption (Yuhong Bao <yuhongbao_386@...mail.com>)
IE8 xss filter breaked (WooYun <root@...yun.org>)
=| Security Advisory - TP-LINK TL-WR841N LFI |= ("Matan Azugi" <pulse@...anet.co.il>)
Re: Microsoft Office Excel 2010 memory corruption (Yuhong Bao <yuhongbao_386@...mail.com>)
Re: Microsoft Office Excel 2010 memory corruption (Yuhong Bao <yuhongbao_386@...mail.com>)
Re: Microsoft Office Excel 2010 memory corruption (Yuhong Bao <yuhongbao_386@...mail.com>)
Re: Microsoft Office Excel 2010 memory corruption (Julius Kivimäki <julius.kivimaki@...il.com>)
Positive Hack Days III — Call For Papers Has Started (PHD <PHD@...ecurity.ru>)
Call for Papers: DIMVA 2013 (Collin Mulliner <crm@....neu.edu>)
Re: Microsoft Paint 5.1 memory corruption (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
Re: Microsoft Office Excel 2010 memory corruption (Peter Ferrie <peter.ferrie@...il.com>)
Re: Microsoft Office Excel 2010 memory corruption (Jeffrey Walton <noloader@...il.com>)
Re: Microsoft Office Excel 2010 memory corruption (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
Re: Microsoft Office Excel 2010 memory corruption (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
Re: Microsoft Office Excel 2010 memory corruption (Antony widmal <antony.widmal@...il.com>)
Re: Microsoft Paint 5.1 memory corruption (Antony widmal <antony.widmal@...il.com>)
Re: Microsoft Office Excel 2010 memory corruption ("Thor (Hammer of God)" <thor@...merofgod.com>)
Re: Microsoft Office Excel 2010 memory corruption (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
Re: Microsoft Office Excel 2010 memory corruption (Julius Kivimäki <julius.kivimaki@...il.com>)
Re: Microsoft Office Excel 2010 memory corruption (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
[SECURITY] [DSA 2569-1] icedove security update (Florian Weimer <fw@...eb.enyo.de>)
Re: Microsoft Office Excel 2010 memory corruption (Peter Ferrie <peter.ferrie@...il.com>)
Re: Microsoft Office Excel 2010 memory corruption (Jeffrey Walton <noloader@...il.com>)

October 30 (21 messages)

Re: Microsoft Paint 5.1 memory corruption (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
Re: Microsoft Paint 5.1 memory corruption (Antony widmal <antony.widmal@...il.com>)
RealPlayer 15.0.6.14(.3g2) WriteAV Vulnerability (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
Cybsec Advisory#2012-1029 Multiple Persistent XSS in Endpoint Protector]] (advisories@...sec.com)
Context IS Advisory - Citrix XenServer Hypervisor Privilege Escalation (Context IS - Disclosure <disclosure@...textis.co.uk>)
Re: Microsoft Office Excel 2010 memory corruption (Kelvin White <kelvin.white77@...il.com>)
Re: Microsoft Office Excel 2010 memory corruption (Richard Miles <richard.k.miles@...glemail.com>)
Re: Microsoft Office Excel 2010 memory corruption (Michael Simpson <mikie.simpson@...il.com>)
Re: Microsoft Windows Help program (WinHlp32.exe) memory corruption (Richard Miles <richard.k.miles@...glemail.com>)
Hack In Paris CFP 2013 ("sihame" <s.fafi@...dream.com>)
Re: Microsoft Office Excel 2010 memory corruption (Michael Simpson <mikie.simpson@...il.com>)
[waraxe-2012-SA#095] - Multiple Vulnerabilities in Wordpress FoxyPress Plugin (Janek Vind <come2waraxe@...oo.com>)
Re: RealPlayer 15.0.6.14(.3g2) WriteAV Vulnerability (Antony widmal <antony.widmal@...il.com>)
Re: Full-Disclosure Digest, Vol 92, Issue 34 - 1. Microsoft Windows Help program (WinHlp32.exe) memory ("Mikhail A. Utin" <mutin@...monwealthcare.org>)
Re: Full-Disclosure Digest, Vol 92, Issue 34 - 1. Microsoft Windows Help program (WinHlp32.exe) memory (Peter Dawson <slash.pd@...il.com>)
Re: Full-Disclosure Digest, Vol 92, Issue 34 - 1. Microsoft Windows Help program (WinHlp32.exe) memory (Mario Vilas <mvilas@...il.com>)
Re: Microsoft Windows Help program (WinHlp32.exe) memory corruption (Peter Ferrie <peter.ferrie@...il.com>)
Re: Microsoft Paint 5.1 memory corruption (Peter Ferrie <peter.ferrie@...il.com>)
Re: RealPlayer 15.0.6.14(.3g2) WriteAV Vulnerability (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
Re: Microsoft Paint 5.1 memory corruption (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
Cybsec Advisory#2012-1029 Multiple Persistent XSS in Endpoint Protector]]]]]] ("CYBSEC Labs" <cybseclabs@...sec.com>)

October 31 (12 messages)

Medium risk security flaws in Konqueror (Tim Brown <timb@...-dimension.org.uk>)
VaM Shop v1.69 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
PG Dating Pro v1.0 CMS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
NetCat CMS v5.0.1 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[BUGTRAQ]Security Advisory - TP-LINK TL-WR841N LFI - [UPDATE] ("Matan Azugi" <matan@...sec.co.il>)
Virtual PC 2007 BUG (Walied Assar <waliedassar@...il.com>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified MeetingPlace Web Conferencing (Cisco Systems Product Security Incident Response Team <psirt@…)
[OT] How much a million facebook passwords would cost? (Georgi Guninski <guninski@...inski.com>)
Cisco Security Advisory: Cisco Prime Data Center Network Manager Remote Command Execution Vulnerability (Cisco Systems Product Security Incident Response Team …)
Re: [OT] How much a million facebook passwords would cost? (Memory Vandal <memvandal@...il.com>)
[Security-news] SA-CONTRIB-2012-159 - Password policy - Information leakage of hashed passwords (security-news@...pal.org)
XSS Vulnerabilities in bloofoxCMS (Netsparker Advisories <advisories@...itunasecurity.com>)

277 messages

Powered by blists - more mailing lists