full-disclosure mailing list - 2012/12

Messages by day:

December 1 (19 messages)

• Re: Buffalo Technology LinkStation Information Disclosure And Privilege Escalation (Troy Korjuslommi <tjk@...oft.com>)
• Cross-Site Scripting in Liberated Syndication ("MustLive" <mustlive@...security.com.ua>)
• MySQL 5.1/5.5 WiNDOWS REMOTE R00T (mysqljackpot) (king cope <isowarez.isowarez.isowarez@...glemail.com>)
• IBM System Director Remote System Level Exploit (CVE-2009-0880 extended zeroday) (king cope <isowarez.isowarez.isowarez@...glemail.com>)
• MySQL (Linux) Stack based buffer overrun PoC Zeroday (king cope <isowarez.isowarez.isowarez@...glemail.com>)
• MySQL (Linux) Heap Based Overrun PoC Zeroday (king cope <isowarez.isowarez.isowarez@...glemail.com>)
• MySQL (Linux) Database Privilege Elevation Zeroday Exploit (king cope <isowarez.isowarez.isowarez@...glemail.com>)
• MySQL Denial of Service Zeroday PoC (king cope <isowarez.isowarez.isowarez@...glemail.com>)
• MySQL Windows Remote System Level Exploit (Stuxnet technique) 0day (king cope <isowarez.isowarez.isowarez@...glemail.com>)
• MySQL Remote Preauth User Enumeration Zeroday (king cope <isowarez.isowarez.isowarez@...glemail.com>)
• FreeFTPD Remote Authentication Bypass Zeroday Exploit (Stuxnet technique) (king cope <isowarez.isowarez.isowarez@...glemail.com>)
• FreeSSHD Remote Authentication Bypass Zeroday Exploit (king cope <isowarez.isowarez.isowarez@...glemail.com>)
• SSH.com Communications SSH Tectia Authentication Bypass Remote Zeroday Exploit (king cope <isowarez.isowarez.isowarez@...glemail.com>)
• Re: MySQL Windows Remote System Level Exploit (Stuxnet technique) 0day (king cope <isowarez.isowarez.isowarez@...glemail.com>)
• Re: FreeSSHD Remote Authentication Bypass Zeroday Exploit ("Chris C. Russo" <chris@...ciumsec.com>)
• Re: MySQL (Linux) Heap Based Overrun PoC Zeroday (Jeffrey Walton <noloader@...il.com>)
• Re: FreeFTPD Remote Authentication Bypass Zeroday Exploit (Stuxnet technique) (Aris Adamantiadis <aris@...adc0de.be>)
• Re: MySQL (Linux) Stack based buffer overrun PoC Zeroday (Jeffrey Walton <noloader@...il.com>)
• Re: FreeFTPD Remote Authentication Bypass Zeroday Exploit (Stuxnet technique) (Jeffrey Walton <noloader@...il.com>)

• Re: MySQL (Linux) Database Privilege Elevation Zeroday Exploit (Michael Wood <itnetsec@...il.com>)
• Re: FreeFTPD Remote Authentication Bypass Zeroday Exploit (Stuxnet technique) (Aris Adamantiadis <aris@...adc0de.be>)
• Re: MySQL (Linux) Heap Based Overrun PoC Zeroday (king cope <isowarez.isowarez.isowarez@...glemail.com>)
• Re: MySQL 5.1/5.5 WiNDOWS REMOTE R00T (mysqljackpot) (king cope <isowarez.isowarez.isowarez@...glemail.com>)
• Low severity flaw in RIM BlackBerry PlayBook OS browser (Tim Brown <timb@...-dimension.org.uk>)
• [HTTPCS] 2 Vulnerab​ilities in OurWebFTP (HTTPCS <contact@...pcs.com>)
• Re: New Ajax SQL Injection Exploit? (Julius Kivimäki <julius.kivimaki@...il.com>)
• RA005: Persistent XSS Injection Vulnerability in Kaseya 6.2 (Cartel <cartel@...acted.co.nz>)
• RA001: Multiple vulnerabilities in Ncentral versions 8.0.x - 8.2.0-1152 (Cartel <cartel@...acted.co.nz>)
• Re: EasyPHP 12.1 - Remote code execution of any php/js on local PC (auto59190641@...hmail.com)
• [SECURITY] [DSA 2577-1] libssh security update (Yves-Alexis Perez <corsac@...ian.org>)
• Re: Apple WGT Dictionnaire 1.3 - Script Code Inject Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
• FortiGate FortiDB 2kB 1kC & 400B - Cross Site Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
• FortiWeb 4kC, 3kC, 1kC & VA - Cross Site Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
• Telnet Encrypt Key ID Priv8 Scanner (king cope <isowarez.isowarez.isowarez@...glemail.com>)
• Re: MySQL (Linux) Stack based buffer overrun PoC Zeroday (Kurt Seifried <kseifried@...hat.com>)
• Re: MySQL (Linux) Heap Based Overrun PoC Zeroday (Kurt Seifried <kseifried@...hat.com>)
• Re: MySQL (Linux) Database Privilege Elevation Zeroday Exploit (Kurt Seifried <kseifried@...hat.com>)
• Re: MySQL Denial of Service Zeroday PoC (Kurt Seifried <kseifried@...hat.com>)
• Re: MySQL Remote Preauth User Enumeration Zeroday (Kurt Seifried <kseifried@...hat.com>)
• Re: MySQL 5.1/5.5 WiNDOWS REMOTE R00T (mysqljackpot) (Kurt Seifried <kseifried@...hat.com>)
• Re: MySQL (Linux) Heap Based Overrun PoC Zeroday (Kurt Seifried <kseifried@...hat.com>)
• Re: [oss-security] Re: MySQL (Linux) Stack based buffer overrun PoC Zeroday (Sergei Golubchik <serg@...monty.org>)
• Re: [oss-security] Re: MySQL (Linux) Stack based buffer overrun PoC Zeroday (Huzaifa Sidhpurwala <huzaifas@...hat.com>)
• Re: MySQL 5.1/5.5 WiNDOWS REMOTE R00T (mysqljackpot) (Sergei Golubchik <serg@...monty.org>)
• [HTTPCS] phpMyNewsletter Multiple Vulnerabilities (HTTPCS <contact@...pcs.com>)

• [SECURITY] [DSA 2580-1] libxml security update (Moritz Muehlenhoff <jmm@...ian.org>)
• [ MDVSA-2012:176 ] libxml2 (security@...driva.com)
• Re: MySQL (Linux) Heap Based Overrun PoC Zeroday (Jeffrey Walton <noloader@...il.com>)
• Re: [oss-security] Re: MySQL (Linux) Stack based buffer overrun PoC Zeroday (Sergei Golubchik <serg@...monty.org>)
• Re: [oss-security] Re: MySQL (Linux) Stack based buffer overrun PoC Zeroday (king cope <isowarez.isowarez.isowarez@...glemail.com>)
• Re: [oss-security] Re: MySQL (Linux) Stack based buffer overrun PoC Zeroday (Yves-Alexis Perez <corsac@...ian.org>)
• Re: [oss-security] Re: MySQL (Linux) Stack based buffer overrun PoC Zeroday (king cope <isowarez.isowarez.isowarez@...glemail.com>)
• Re: [oss-security] Re: MySQL (Linux) Stack based buffer overrun PoC Zeroday (Sergei Golubchik <serg@...monty.org>)
• SEC Consult SA-20121203-0 :: F5 FirePass SSL VPN Unauthenticated local file inclusion (SEC Consult Vulnerability Lab <research@...-consult.com>)
• Opera Web Browser 12.11 WriteAV Vulnerability (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
• Re: MySQL 5.1/5.5 WiNDOWS REMOTE R00T (mysqljackpot) (king cope <isowarez.isowarez.isowarez@...glemail.com>)
• Re: Apple WGT Dictionnaire 1.3 - Script Code Inject Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
• Re: [oss-security] Re: MySQL (Linux) Stack based buffer overrun PoC Zeroday (king cope <isowarez.isowarez.isowarez@...glemail.com>)
• MySQL Local/Remote FAST Account Password Cracking (king cope <isowarez.isowarez.isowarez@...glemail.com>)
• Centrify Deployment Manager v2.1.0.283 /tmp insecure file handling (larry Cashdollar <larry0@...com>)
• Re: EasyPHP 12.1 - Remote code execution of any php/js on local PC (Jeffrey Walton <noloader@...il.com>)

• Re: EasyPHP 12.1 - Remote code execution of any php/js on local PC (Seth Arnold <seth.arnold@...onical.com>)
• Re: EasyPHP 12.1 - Remote code execution of any php/js on local PC (andfarm <andfarm@...il.com>)
• [SECURITY] [DSA 2581-1] mysql-5.1 security update (Yves-Alexis Perez <corsac@...ian.org>)
• Re: SSH.com Communications SSH Tectia Authentication Bypass Remote Zeroday Exploit (king cope) (<Samuel.Lavitt@....com>)
• Twitter Vulnerable to SMS Spoofing (Jonathan Rudenberg <jonathan@...anous.com>)
• Re: MySQL (Linux) Database Privilege Elevation Zeroday Exploit (Eren Yağdıran <erenyagdiran@...il.com>)
• RA004: Multiple vulnerabilities in ManageEngine MSPCentral 9 (Cartel <cartel@...acted.co.nz>)
• Poczta.WP Multiple vulnerabilities - full disclosure (Jakub Zoczek <zoczus@...il.com>)
• DC4420 - London DEFCON - Christmas 2012 meet! Tuesday 11th December 2012 (Major Malfunction <majormal@...ate-radio.org>)
• Re: Centrify Deployment Manager v2.1.0.283 /tmp insecure file handling (larry Cashdollar <larry0@...com>)
• Re: MySQL Local/Remote FAST Account Password Cracking (Jeffrey Walton <noloader@...il.com>)
• CVE-2012-4534 Apache Tomcat denial of service (Mark Thomas <markt@...che.org>)
• CVE-2012-3546 Apache Tomcat Bypass of security constraints (Mark Thomas <markt@...che.org>)
• CVE-2012-4431 Apache Tomcat Bypass of CSRF prevention filter (Mark Thomas <markt@...che.org>)

• Re: MySQL (Linux) Database Privilege Elevation Zeroday Exploit (Scott <spindizy@...il.com>)
• Buffalo LinkStation LS-WTGL Default Admin Account & Guest Access Information (Darius Freamon <darius.freamon@...il.com>)
• Buffalo Technology LinkStation: Admin Password Reset as Guest User (Hurgel Bumpf <l0rd_lunatic@...oo.com>)
• Re: MySQL (Linux) Database Privilege Elevation Zeroday Exploit (kai@...nn.net)
• Security Advent Calendar (Security Advent Calendar <secadvent@...il.com>)
• MySQL Local/Remote FAST Account Password Cracking (Paul van Bavel <pvanbavel@...il.com>)
• SQL injection (Emmanuel FARCY <manu.farcy@...il.com>)
• Re: MySQL Local/Remote FAST Account Password Cracking (Andres Riancho <andres.riancho@...il.com>)
• Re: MySQL Local/Remote FAST Account Password Cracking (Ulises2k <ulises2k@...il.com>)
• XSS vulnerability on laposte.fr (Emmanuel FARCY <manu.farcy@...il.com>)
• DoS vulnerabilities in Internet Explorer 7 (access violation) ("MustLive" <mustlive@...security.com.ua>)
• [ MDVSA-2012:177 ] bind (security@...driva.com)
• CA20121205-01: Security Notice for CA XCOM Data Transport on Unix and Linux ("Kotas, Kevin J" <Kevin.Kotas@...com>)
• [Security-news] SA-CONTRIB-2012-173 - Nodewords: Information disclosure (security-news@...pal.org)

• Re: MySQL 5.1/5.5 WiNDOWS REMOTE R00T (mysqljackpot) (Jeffrey Walton <noloader@...il.com>)

• Multiple critical vulnerabilities in Maxthon and Avant browsers (Roberto Suggi Liverani <malerischnet@...il.com>)
• CanSecWest13 CFP Open Until December 14 2012, Conf March 7-9 2013, Vancouver (Dragos Ruiu <dr@....net>)
• Re: XSS vulnerability in web applications with swfupload: AionWeb, Magento, Liferay Portal, SurgeMail, symfony ("MustLive" <mustlive@...security.com.ua>)
• =| Security Advisory - TP-LINK TL-WR841N XSS (Cross Site Scripting) |= --update (מתן אזוגי <matan@...sec.co.il>)
• [SECURITY] [DSA 2582-1] xen security update (Yves-Alexis Perez <corsac@...ian.org>)
• Nokia phone forcing traffic through proxy (Gaurang Pandya <gaubrig@...oo.com>)
• VLC media player 2.0.4 BOF POC (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
• Re: Nokia phone forcing traffic through proxy (Jeffrey Walton <noloader@...il.com>)
• Re: MySQL 5.1/5.5 WiNDOWS REMOTE R00T (mysqljackpot) (Jeffrey Walton <noloader@...il.com>)

• Centrify Deployment Manager v2.1.0.283 local root (larry Cashdollar <larry0@...com>)

• [SECURITY] [DSA 2583-1] iceweasel security update (Yves-Alexis Perez <corsac@...ian.org>)
• [SECURITY] [DSA 2584-1] iceape security update (Yves-Alexis Perez <corsac@...ian.org>)
• List Charter (John Cartwright <johnc@...k.org.uk>)
• Re: Nokia phone forcing traffic through proxy (Philip Whitehouse <philip@...uk.com>)
• Re: MySQL 5.1/5.5 WiNDOWS REMOTE R00T (mysqljackpot) (Rajesh Malepati <chittoor@...il.com>)
• [ MDVSA-2012:178 ] mysql (security@...driva.com)

• Cisco DPC2420 Multiples Vulnerabilities ("Facundo M. de la Cruz" <fmdlc@...e4life.com.ar>)
• Nagios Core 3.4.3: Stack based buffer overflow in web interface ("temp66@...il.com" <temp66@...il.com>)
• Any.Do sends passwords in plaintext (Peter Lustlos <peter.lustlos84@...oo.com>)
• Google's robots.txt handling (Hurgel Bumpf <l0rd_lunatic@...oo.com>)
• Selling Exploit on Deep Web (tig3rhack@...mail.org)
• Re: Google's robots.txt handling (James Lay <jlay@...ve-tothe-box.net>)
• Re: Google's robots.txt handling (Gynvael Coldwind <gynvael@...dwind.pl>)

• Re: Google's robots.txt handling (Benji <me@...ji.com>)
• Re: Google's robots.txt handling (Philip Whitehouse <philip@...uk.com>)
• Re: Google's robots.txt handling (Stefan Edwards <saedwards.ecc@...il.com>)
• Re: Google's robots.txt handling (Denis McMahon <denismfmcmahon@...il.com>)
• Re: Google's robots.txt handling ("Gildseth, Tommy" <tommy.gildseth@...er.no>)
• Re: Selling Exploit on Deep Web (illwill <illwill@...mob.org>)
• Re: Google's robots.txt handling (Scott Ferguson <scott.ferguson.it.consulting@...il.com>)
• Re: Google's robots.txt handling (Swair Mehta <swairmehta@...il.com>)
• Re: Google's robots.txt handling (Ulisses Montenegro <ulisses.montenegro@...il.com>)
• [SECURITY] [DSA 2585-1] bogofilter security update (Florian Weimer <fw@...eb.enyo.de>)
• Re: Google's robots.txt handling (Philip Whitehouse <philip@...uk.com>)
• Re: Google's robot.txt handling (Scott Ferguson <scott.ferguson.it.consulting@...il.com>)
• [SECURITY] [DSA 2586-1] perl security update (Florian Weimer <fw@...eb.enyo.de>)
• [SECURITY] [DSA 2587-1] libcgi-pm-perl security update (Florian Weimer <fw@...eb.enyo.de>)
• Re: Google's robot.txt handling (Mario Vilas <mvilas@...il.com>)
• Re: Google's robot.txt handling (Jeffrey Walton <noloader@...il.com>)
• Re: Google's robot.txt handling (Hurgel Bumpf <l0rd_lunatic@...oo.com>)
• Re: Google's robot.txt handling (Christian Sciberras <uuf6429@...il.com>)
• Re: Google's robot.txt handling (Jeffrey Walton <noloader@...il.com>)
• Removing seless email addresses (on FD list) (Christian Sciberras <uuf6429@...il.com>)
• Re: Removing seless email addresses (on FD list) (Jeffrey Walton <noloader@...il.com>)

• Re: Google's robot.txt handling (Thomas Behrend <webmaster@...d-pinhead.com>)
• Re: Removing seless email addresses (on FD list) (shyyqvfpybfher@...ie.me.uk (Alan J. Wylie))
• Re: Google's robots.txt handling ("Lehman, Jim" <jim.lehman@...eractivedata.com>)
• Command Execution Vulnerability on Paypal (researching vulnerabilties <researchingvulnerabilties@...il.com>)
• Re: Removing seless email addresses (on FD list) (John Cartwright <johnc@...k.org.uk>)
• Re: Google's robots.txt handling (Christoph Gruber <list@...u.at>)
• [ MDVSA-2012:179 ] cups (security@...driva.com)

• Network Reconnaissance in IPv6 Networks (Fernando Gont <fgont@...networks.com>)
• Network Reconnaissance in IPv6 Networks (errata) (Fernando Gont <fgont@...networks.com>)
• Re: Google's robots.txt handling (Patrick Webster <patrick@...hack.com>)
• RVAsec 2013 CFP Now Open (Sullo <sullo@...t.net>)
• Re: Google's robots.txt handling (Mario Vilas <mvilas@...il.com>)
• Re: Google's robots.txt handling ("Lehman, Jim" <jim.lehman@...eractivedata.com>)
• Re: Nokia phone forcing traffic through proxy (Kim Henriksen <kh@...mp.at>)
• 'portable-phpMyAdmin (WordPress Plugin)' Authentication Bypass (CVE-2012-5469) (Mark Stanislav <mark.stanislav@...il.com>)
• Hacking Competition PHDAYS CTF Quals 2012 Starts On December 15 (PHD <PHD@...ecurity.ru>)
• nullsec-net-crypter.pdf (Levent Kayan <levon.kayan@...il.com>)
• Re: Google's robots.txt handling (Philip Whitehouse <philip@...uk.com>)
• Re: Google's robots.txt handling (Jeffrey Walton <noloader@...il.com>)

• Re: Google's robots.txt handling (Julius Kivimäki <julius.kivimaki@...il.com>)
• Paypal Bug Bounty #34 - Redirect Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
• Paypal Core Bug Bounty #3 - Persistent Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
• Security Alert CVE-2012-6329: TWiki MAKETEXT Variable Allows Arbitrary Shell Command Execution (Peter Thoeny <peter09@...eny.org>)
• Re: [btrfs] is vulnerable to a hash-DoS attack (Jeffrey Walton <noloader@...il.com>)
• TinyBrowser Upload Shell Vulnerability ("MustLive" <mustlive@...security.com.ua>)

• Multiple vulnerabilities in RokBox for WordPress ("MustLive" <mustlive@...security.com.ua>)

• DDIVRT-2012-48 VMware View Connection Server Directory Traversal (CVE-2012-5978) (ddivulnalert <ddivulnalert@...frontline.com>)
• Foswiki Security Alert CVE-2012-6329, CVE-2012-6330 Remote code execution and other vulnerabilities in MAKETEXT macro (George Clark <geonwiki@...achrone.com>)
• Re: Microsoft Windows Help program (WinHlp32.exe) memory corruption (Yuhong Bao <yuhongbao_386@...mail.com>)
• [SECURITY] [DSA 2588-1] icedove security update (Florian Weimer <fw@...eb.enyo.de>)
• [SECURITY] [DSA 2589-1] tiff security update (Florian Weimer <fw@...eb.enyo.de>)

• DPI evasion (kai@...nn.net)
• Re: DPI evasion (kai@...nn.net)
• Re: DPI evasion (gremlin@...mlin.ru)
• CactusCon 2013 CFP (Jessica S <jessica@...tuscon.com>)
• [ MDVSA-2012:180 ] perl-CGI (security@...driva.com)
• IPv6 Neighbor Discovery security (new documents) (Fernando Gont <fgont@...networks.com>)

• Re: DPI evasion (gold flake <ptinstructor@...il.com>)
• Local root exploit for Centrify Deployment Manager < v2.1.0.283 local root ("Larry W. Cashdollar" <larry0@...com>)
• Re: Local root exploit for Centrify Deployment Manager < v2.1.0.283 local root (Jeffrey Walton <noloader@...il.com>)
• Re: Local root exploit for Centrify Deployment Manager < v2.1.0.283 local root ("Larry W. Cashdollar" <larry0@...com>)

• [ MDVSA-2012:181 ] python-django (security@...driva.com)
• [Security-news] SA-CORE-2012-004 - Drupal core - Multiple vulnerabilities (security-news@...pal.org)
• [Security-news] SA-CONTRIB-2012-174 - Context - Information Disclosure (security-news@...pal.org)

• Re: [Security-news] SA-CORE-2012-004 - Drupal core - Multiple vulnerabilities (Thierry Zoller <thierry@...ler.lu>)
• Re: [Security-news] SA-CORE-2012-004 - Drupal core - Multiple vulnerabilities (laurent gaffie <laurent.gaffie@...il.com>)
• WordPress 3.4.2: Sessions Not Terminated Upon Explicit User Logout [CVE-2012-5868] (Christopher Emerson <christopher.emerson@...teoaksecurity.com>)
• Re: Paypal Core Bug Bounty #3 - Persistent Web Vulnerability (Krzysztof Kotowicz <kkotowicz+fd@...il.com>)
• HackMiami 2013 Hackers Conference in Miami, FL (Alexander Heid <alex@...kmiami.info>)
• SonicWall SonicOS 5.8.1.8 WAF - POST Inject Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
• Re: DPI evasion (gremlin@...mlin.ru)
• Question regarding script vulnerabilities (Rand McRanderson <therandshow@...il.com>)
• Re: Local root exploit for Centrify Deployment Manager < v2.1.0.283 local root (Alexander Georgiev <alexander.georgiev@...oo.de>)
• "Topera" The new IPv6 TCP port scanner invisible to SNORT... (Rafa Sanchez <rafa.sgomez@...il.com>)
• Re: Question regarding script vulnerabilities (Philip Whitehouse <philip@...uk.com>)
• Re: "Topera" The new IPv6 TCP port scanner invisible to SNORT... (Ying Ruang <ropstrip@...il.com>)
• Re: Question regarding script vulnerabilities (Christian Sciberras <uuf6429@...il.com>)
• SEC Consult SA-20121220-0 :: Multiple vulnerabilities in ELBA Electronic Banking application (SEC Consult Vulnerability Lab <research@...-consult.com>)
• XSS and CS vulnerabilities in BuddyPress for WordPress ("MustLive" <mustlive@...security.com.ua>)
• Re: Question regarding script vulnerabilities ("Nick FitzGerald" <nick@...us-l.demon.co.uk>)
• CA20121220-01: Security Notice for CA IdentityMinder ("Williams, James K" <James.Williams@...com>)
• Re: Question regarding script vulnerabilities (Philip Whitehouse <philip@...uk.com>)

• smoke loader (Ian <tohitsugu@...il.com>)
• VMSA-2012-0018 VMware security updates for vCSA and ESXi (VMware Security Response Center <security@...are.com>)
• Re: Selling Exploit on Deep Web (Luis Santana <hacktalk@...ktalk.net>)
• Re: "Topera" The new IPv6 TCP port scanner invisible to SNORT... (Michael Rash <mbr@...herdyne.org>)
• Re: Question regarding script vulnerabilities (Jerry Bell <jerry@...kologist.com>)
• Re: Paypal Core Bug Bounty #3 - Persistent Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
• Re: Selling Exploit on Deep Web (Benji <me@...ji.com>)
• Re: Selling Exploit on Deep Web (Benji <me@...ji.com>)
• ZDI-12-188 : Microsoft Internet Explorer OnRowsInserted Event Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-12-189 : Oracle Java WebStart Changing System Properties Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-12-190 : Microsoft Internet Explorer Title Element Change Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-12-191 : Webkit HTMLMedia Element beforeLoad Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-12-192 : Microsoft Internet Explorer insertRow Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-12-193 : Microsoft Internet Explorer insertAdjacentText Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-12-194 : Microsoft Internet Explorer OnBeforeDeactivate Event Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-12-195 : RealNetworks RealPlayer ATRAC Sample Decoding Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-12-196 : Novell Groupwise GWIA ber_get_stringa Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-12-197 : Oracle Java java.beans.Statement Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-12-198 : Microsoft Internet Explorer CMarkup outerText Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-12-200 : Microsoft Internet Explorer 9 CTreeNode Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-12-202 : Oracle Outside In WordPerfect File Processing Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• ZDI-12-203 : Honeywell HMIWeb Browser ActiveX Control RequestDSPLoad Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• Re: Selling Exploit on Deep Web (Benji <me@...ji.com>)
• ZDI-12-201 : Microsoft Office Word PAPX Section Remote Code Execution Vulnerability (ZDI Disclosures <zdi-disclosures@...pingpoint.com>)
• Re: ZDI Anything (bl4kjeebus121@...il.com)
• Re: Selling Exploit on Deep Web (Benji <me@...ji.com>)
• Re: ZDI Anything ("g@...7.io" <g@...7.io>)
• Re: Selling Exploit on Deep Web (Luis Santana <hacktalk@...ktalk.net>)
• Re: [OSVDB Mods] Fwd: Internet Explorer Stack Exhaustion -> Flag [MSIE9] (fwd) (security curmudgeon <jericho@...rition.org>)
• Re: "Topera" The new IPv6 TCP port scanner invisible to SNORT... (aditya <nauty.me04@...il.com>)
• Re: Selling Exploit on Deep Web (Luis Santana <hacktalk@...ktalk.net>)
• Competitively priced drop box for pentesters (Almaz <almaz@...yo.com>)

• Re: Competitively priced drop box for pentesters (Gage Bystrom <themadichib0d@...il.com>)
• New Tool: Username Anarchy (Andrew Horton <andrew@...ningstarsecurity.com>)
• Re: Selling Exploit on Deep Web (Luis Santana <hacktalk@...ktalk.net>)
• Re: Selling Exploit on Deep Web (tig3rhack <tig3rhack@...mail.org>)
• Re: Selling Exploit on Deep Web (tig3rhack <tig3rhack@...mail.org>)
• CubeCart 3.0.20 (3.0.x) and lower | Arbitrary File Upload (YGN Ethical Hacker Group <lists@...g.net>)
• CubeCart 3.0.20 (3.0.x) and lower | Multiple Cross Site Scripting Vulnerabilities (YGN Ethical Hacker Group <lists@...g.net>)
• Re: Selling Exploit on Deep Web (Julius Kivimäki <julius.kivimaki@...il.com>)
• Multiple vulnerabilities in multiple themes for WordPress ("MustLive" <mustlive@...security.com.ua>)
• Recruiting Troopers - Call for Papers, March 13-14 2013 (Enno Rey <erey@...w.de>)

• CubeCart 3.0.20 (3.0.x) and lower | Multiple SQL Injection Vulnerabilities (YGN Ethical Hacker Group <lists@...g.net>)
• dyne_bolic hacked? (blackhatz@...mail.org)
• [ MDVSA-2012:182 ] apache-mod_security (security@...driva.com)
• [ MDVSA-2012:183 ] apache-mod_security (security@...driva.com)

• Wordpress Remote Exploit - W3 Total Cache ("Jason A. Donenfeld" <Jason@...c4.com>)
• Re: Wordpress Remote Exploit - W3 Total Cache ("Jason A. Donenfeld" <Jason@...c4.com>)
• Re: Wordpress Remote Exploit - W3 Total Cache ("Jason A. Donenfeld" <Jason@...c4.com>)
• CubeCart 5.0.7 and lower | Open URL Redirection Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
• CubeCart 4.4.6 and lower | Multiple Cross Site Scripting Vulnerabilities (YGN Ethical Hacker Group <lists@...g.net>)
• CubeCart 4.4.6 and lower | Multiple SQL Injection Vulnerabilities (YGN Ethical Hacker Group <lists@...g.net>)
• CubeCart 4.4.6 and lower | Cross Site Request Forgery (CSRF) Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
• CubeCart 4.4.6 and lower | Local File Inclusion Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
• CubeCart 4.x/5.x | Setup Re-installation Privilege Escalation Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
• CubeCart 4.4.6 and lower | Open URL Redirection Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
• Re: dyne_bolic hacked? (Julius Kivimäki <julius.kivimaki@...il.com>)
• [TOOL RELEASE] SQL Fingerprint powered by ENG++ Technology [Version 1.33.23-170308] (Nelson Brito <nbrito@...ure.org>)
• Re: Wordpress Remote Exploit - W3 Total Cache (Grandma Eubanks <tborland1@...il.com>)
• Persistent XSS vulnerability in WP-UserOnline ("MustLive" <mustlive@...security.com.ua>)

• Re: dyne_bolic hacked? (blackhatz@...mail.org)
• Open-Realty CMS 3.x | Cross Site Request Forgery (CSRF) Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
• Open-Realty CMS 3.x | Persistent Cross Site Scripting (XSS) Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
• Merry Christmas (Daniel Preussker <daniel@...ussker.net>)

• [SECURITY] [DSA 2590-1] wireshark security update (Moritz Muehlenhoff <jmm@...ian.org>)
• Exploit for NVidia nvvsvc.exe (Peter WS <peterwintrsmith@...il.com>)

• [ MDVSA-2012:184 ] libtiff (security@...driva.com)
• BF, CSRF, AoF and IAA vulnerabilities in MODx Revolution ("MustLive" <mustlive@...security.com.ua>)

• [SECURITY] [DSA 2591-1] mahara security update (Moritz Muehlenhoff <jmm@...ian.org>)
• [SECURITY] [DSA 2592-1] elinks security update (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: Wordpress Remote Exploit - W3 Total Cache (Frederick Townes <ftownes@...edge.com>)
• Re: Wordpress Remote Exploit - W3 Total Cache (Kurt Seifried <kseifried@...hat.com>)
• Log Analyzer 3.6.0 - Cross Site Scripting Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
• SonicWall Email Security Appliance v7.4.1.7429 - Persistent Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
• CubeCart 5.0.7 and lower versions | Insecure Backup File Handling (YGN Ethical Hacker Group <lists@...g.net>)

• [SECURITY] [DSA 2593-1] moin security update (Moritz Muehlenhoff <jmm@...ian.org>)
• Multiple vulnerabilities in RocketTheme themes for WordPress ("MustLive" <mustlive@...security.com.ua>)

• [SECURITY] [DSA 2594-1] virtualbox-ose security update (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: CubeCart 5.0.7 and lower versions | Insecure Backup File Handling (Sean Jenkins <sean@...ehost.com>)
• Re: Multiple vulnerabilities in RocketTheme themes for WordPress (Julius Kivimäki <julius.kivimaki@...il.com>)
• [SECURITY] [DSA 2595-1] ghostscript security update (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: Multiple vulnerabilities in RocketTheme themes for WordPress ("winsoc" <winsoc@...il.com>)

• [SECURITY] [DSA 2596-1] mediawiki-extensions security update (Jonathan Wiltshire <jmw@...ian.org>)
• BF, CSRF, and IAA vulnerabilities in websecurity.com.ua (Julius Kivimäki <julius.kivimaki@...il.com>)

280 messages

Powered by blists - more mailing lists