full-disclosure mailing list - 2013/01

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2013/01

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 7	² 5	³	⁴ 6	⁵ 2	⁶ 4
⁷ 3	⁸ 10	⁹ 13	¹⁰ 15	¹¹ 1	¹² 10	¹³ 1
¹⁴ 20	¹⁵ 11	¹⁶ 13	¹⁷ 14	¹⁸ 15	¹⁹ 5	²⁰
²¹ 15	²² 34	²³ 12	²⁴ 16	²⁵ 7	²⁶ 2	²⁷ 5
²⁸ 5	²⁹ 10	³⁰ 7	³¹ 12

Messages by day:

January 1 (7 messages)

Charybdis: Improper assumptions in the server handshake code may lead to a remote crash. (CAPAB module) (Mustapha Rabiu <muztapha@...il.com>)
Re: CubeCart 5.0.7 and lower versions | Insecure Backup File Handling (YGN Ethical Hacker Group <lists@...g.net>)
CubeCart 5.x | Cross Site Request Forgery (CSRF) Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)
CubeCart 5.x | Multiple Cross Site Scripting Vulnerabilities (YGN Ethical Hacker Group <lists@...g.net>)
Re: BF, CSRF, and IAA vulnerabilities in websecurity.com.ua (some one <s3cret.squirell@...il.com>)
Re: BF, CSRF, and IAA vulnerabilities in websecurity.com.ua (Benji <me@...ji.com>)
Re: BF, CSRF, and IAA vulnerabilities in websecurity.com.ua (Benji <me@...ji.com>)

January 2 (5 messages)

ShakaCon 2013 - Call For Papers ("Shakacon" <info@...kacon.org>)
Re: BF, CSRF, and IAA vulnerabilities in websecurity.com.ua (some one <s3cret.squirell@...il.com>)
[ MDVSA-2013:001 ] gnupg (security@...driva.com)
AST-2012-014: Crashes due to large stack allocations when using TCP ("Asterisk Security Team" <security@...erisk.org>)
AST-2012-015: Denial of Service Through Exploitation of Device State Caching ("Asterisk Security Team" <security@...erisk.org>)

January 4 (6 messages)

TomatoCart 1.x | Unrestricted File Creation (YGN Ethical Hacker Group <lists@...g.net>)
CSRF Vulnerability in 160By2 allows hacker to send sms from victim account (eHackingNews <breakthesecurity.com@...il.com>)
Path Disclusore in SimpleMachines Forum <= 2.0.3 (WHK Yan <yan.uniko.102@...il.com>)
Directory traversal in Eye-Fi Helper < 3.4.23 (Paul Johnston <paul.johnston@...test.co.uk>)
DoS vulnerability in Flash player (access violation) ("MustLive" <mustlive@...security.com.ua>)
Re: Local root exploit for Centrify Deployment Manager < v2.1.0.283 local root ("Larry W. Cashdollar" <larry0@...com>)

January 5 (2 messages)

[SECURITY] [DSA 2598-1] weechat security update (Moritz Muehlenhoff <jmm@...ian.org>)
TomatoCart 1.x | Vulnerable Piwik Extension (YGN Ethical Hacker Group <lists@...g.net>)

January 6 (4 messages)

[SECURITY] [DSA 2597-1] rails security update (Nico Golde <nion@...ian.org>)
CFP: InfoSec Southwest Open (Tod Beardsley <todb@...asploit.com>)
[SECURITY] [DSA 2599-1] nss security update (Thijs Kinkhorst <thijs@...ian.org>)
TomatoCart 1.x | Cross Site Request Forgery Protection Bypass via JavaScript Hijacking (YGN Ethical Hacker Group <lists@...g.net>)

January 7 (3 messages)

CALL FOR PAPERS - NUIT DU HACK - 22/23 JUNE 2013 (freeman <freeman@...kerzvoice.net>)
[SECURITY] [DSA 2600-1] cups security update (Nico Golde <nion@...ian.org>)
[SECURITY] [DSA 2601-1] gnupg, gnupg2 security update (Thijs Kinkhorst <thijs@...ian.org>)

January 8 (10 messages)

File Disclosure in SimpleMachines Forum <= 2.0.3 (WHK Yan <yan.uniko.102@...il.com>)
The World's Largest Hacker Database (scryptz0 SOLDIERX <scryptz0@...dierx.com>)
Re: The World's Largest Hacker Database (Sanguinarious Rose <SanguineRose@...ultusTerra.com>)
Cisco RVxxxW wireless routers weak RSA key generation (S艂awek Rozbicki <slawek@...bicki.eu>)
Re: File Disclosure in SimpleMachines Forum <= 2.0.3 (Carlos Alberto Lopez Perez <clopez@...lia.com>)
Re: The World's Largest Hacker Database ("Justin C. Klein Keane" <justin@...irish.net>)
[SECURITY] [DSA 2602-1] zendframework security update (Florian Weimer <fw@...eb.enyo.de>)
Re: The World's Largest Hacker Database (Gage Bystrom <themadichib0d@...il.com>)
New vulnerabilities in MODx Revolution ("MustLive" <mustlive@...security.com.ua>)
Re: The World's Largest Hacker Database (John Bambenek <bambenek.infosec@...il.com>)

January 9 (13 messages)

Re: The World's Largest Hacker Database (doc mombasa <doc.mombasa@...il.com>)
Re: The World's Largest Hacker Database (Sanguinarious Rose <SanguineRose@...ultusTerra.com>)
Google Wallet personal sensitive information disclosure via third-parties (warning@...e-error.net)
Nokia鈥檚 MITM on HTTPS traffic from their phone (Gaurang Pandya <gaubrig@...oo.com>)
LAMPSecurity Capture the Flag ("Justin C. Klein Keane" <justin@...irish.net>)
Cisco Security Advisory: Cisco Prime LAN Management Solution Command Execution Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...c…)
Cisco Security Advisory: Cisco Unified IP Phone Local Kernel System Call Input Validation Vulnerability (Cisco Systems Product Security Incident Response Team …)
[ MDVSA-2013:002 ] firefox (security@...driva.com)
[ MDVSA-2013:003 ] rootcerts (security@...driva.com)
[SECURITY] [DSA 2603-1] emacs23 security update (Moritz Muehlenhoff <jmm@...ian.org>)
[Security-news] SA-CONTRIB-2013-001 - Search API - Cross Site Scripting (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-002 - Payment - Access Bypass (security-news@...pal.org)
Multiple vulnerabilities in TinyBrowser ("MustLive" <mustlive@...security.com.ua>)

January 10 (15 messages)

BT HomeHub 3.0b Remote (LAN) vulnerability (Zachary Cutlip <zcutlip@...netsol.com>)
Context Advisory - .NET 1.1 through .NET 4.5 Elevation of Privilege (Context IS - Disclosure <disclosure@...textis.co.uk>)
[SECURITY] [DSA 2604-1] rails security update (Thijs Kinkhorst <thijs@...ian.org>)
Re: File Disclosure in SimpleMachines Forum <= 2.0.3 (WHK Yan <yan.uniko.102@...il.com>)
Re: File Disclosure in SimpleMachines Forum <= 2.0.3 (mohammed sa <sa.attacker@...il.com>)
Arbitrary File Upload and Code Execution in Accusoft Prizm Content Connect (Include Security Research <research@...ludesecurity.com>)
[ MDVSA-2013:004 ] tomcat5 (security@...driva.com)
OrangeHRM 2.7.1 Vacancy Name Persistent XSS ("SBV Research" <research@...verbackventuresllc.com>)
Re: File Disclosure in SimpleMachines Forum <= 2.0.3 (WHK Yan <yan.uniko.102@...il.com>)
how to sell and get a fair price ("Mikhail A. Utin" <mutin@...monwealthcare.org>)
http://www.heise.de - Cross-site Scripting vulnerability (Stefan Schurtz <sschurtz@...nline.de>)
http://www.elitepartner.de Cross-site Scripting vulnerability (Stefan Schurtz <sschurtz@...nline.de>)
Hero Framework 3.76 Multiple Cross-site Scripting vulnerabilities (Stefan Schurtz <sschurtz@...nline.de>)
Websitebaker Add-on 'Concert Calendar 2.1.4' XSS & SQLi vulnerability (Stefan Schurtz <sschurtz@...nline.de>)
Re: how to sell and get a fair price (coderman <coderman@...il.com>)

January 11 (1 message)

[CVE-2012-5616] Apache CloudStack information disclosure vulnerability (John Kinsella <jlk@...ashyour.com>)

January 12 (10 messages)

[SE-2012-01] 'Fix' for Issue 32 exploited by new Java 0-day code (Security Explorations <contact@...urity-explorations.com>)
Vancouver Security BSides Conference March, 4 & 5 (Darren Thurston <darren.t.thurston@...il.com>)
Microsoft Lync Server 2010: Remote Code Execution/XSS - User Agent Header (Christopher Emerson <christopher.emerson@...teoaksecurity.com>)
DefenseCode Security Advisory (UPCOMING): Cisco Linksys Remote Preauth 0day Root Exploit (DefenseCode <defensecode@...ensecode.com>)
Re: how to sell and get a fair price (殴micier Januszkiewicz <gauri@....by>)
Is there a open source (tool) that is similar to cuckoo for analyzing android APK (辫公己 <disaster@...com>)
Multiple vulnerabilities in Floating Tweets for WordPress ("MustLive" <mustlive@...security.com.ua>)
Re: http://www.heise.de - Cross-site Scripting vulnerability (osaft <osaft@...abit.com>)
Re: Is there a open source (tool) that is similar to cuckoo for analyzing android APK (noname <thejohndoe@...abit.com>)
List Charter (John Cartwright <johnc@...k.org.uk>)

January 13 (1 message)

Fwd: (jacki buddy <jacki.buddy@...il.com>)

January 14 (20 messages)

[SE-2012-01] More details on Issue 32 and Oracle's 'fix' for it (Security Explorations <contact@...urity-explorations.com>)
[SECURITY] [DSA 2606-1] proftpd-dfsg security update (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 2605-1] asterisk security update (Thijs Kinkhorst <thijs@...ian.org>)
CVE-2012-5650 Apache CouchDB DOM based Cross-Site Scripting via Futon UI (Jan Lehnardt <jan@...che.org>)
CVE-2012-5641 Apache CouchDB Information disclosure via unescaped backslashes in URLs on Windows (Jan Lehnardt <jan@...che.org>)
CVE-2012-5649 Apache CouchDB JSONP arbitrary code execution with Adobe Flash (Jan Lehnardt <jan@...che.org>)
petition to remove Aaron Swartz prosecutor (richajap@...tmail.fm)
Re: petition to remove Aaron Swartz prosecutor (Jeffrey Walton <noloader@...il.com>)
IL, XSS, FPD, AoF, DoS, AFU vulnerabilities in Daily Edition Mouss theme for WordPress ("MustLive" <mustlive@...security.com.ua>)
Updated - CA20121018-01: Security Notice for CA ARCserve Backup ("Kotas, Kevin J" <Kevin.Kotas@...com>)
Re: petition to remove Aaron Swartz prosecutor (Valdis.Kletnieks@...edu)
Re: how to sell and get a fair price (Valdis.Kletnieks@...edu)
Re: petition to remove Aaron Swartz prosecutor (Jeffrey Walton <noloader@...il.com>)
Re: petition to remove Aaron Swartz prosecutor (Gary Baribault <gary@...ibault.net>)
Re: petition to remove Aaron Swartz prosecutor (Scott Herbert <scott.a.herbert@...glemail.com>)
[IA33] Serva v2.0.0 DNS Server Remote Denial of Service (Inshell Security <info@...hell.net>)
Re: how to sell and get a fair price (Christian Sciberras <uuf6429@...il.com>)
[IA34] Serva v2.0.0 HTTP Server GET Remote Denial of Service (Inshell Security <info@...hell.net>)
Re: how to sell and get a fair price (Valdis.Kletnieks@...edu)
Re: how to sell and get a fair price (Christian Sciberras <uuf6429@...il.com>)

January 15 (11 messages)

Novell NCP Pre-Auth Remote Stack-Based Buffer Overflow. (CVE-2012-0432) (David Klein <david.r.klein@...il.com>)
Re: how to sell and get a fair price (gremlin@...mlin.ru)
Re: how to sell and get a fair price (Jeffrey Walton <noloader@...il.com>)
Re: Full-Disclosure Digest, Vol 95, Issue 15- Aaron Swartz death ("Mikhail A. Utin" <mutin@...monwealthcare.org>)
Re: how to sell and get a fair price ("Mikhail A. Utin" <mutin@...monwealthcare.org>)
Re: how to sell and get a fair price (Jeffrey Walton <noloader@...il.com>)
Re: how to sell and get a fair price ("Nick FitzGerald" <nick@...us-l.demon.co.uk>)
Re: how to sell and get a fair price (Jeffrey Walton <noloader@...il.com>)
[SECURITY] [DSA 2607-1] qemu-kvm security update (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 2608-1] qemu security update (Florian Weimer <fw@...eb.enyo.de>)
Re: how to sell and get a fair price (Valdis.Kletnieks@...edu)

January 16 (13 messages)

TWSL2012-023: Oracle Application Framework Diagnostic Mode Bypass Vulnerability (Trustwave Advisories <TrustwaveAdvisories@...stwave.com>)
Re: [SECURITY] [DSA 2607-1] qemu-kvm security update (jason <sword23@...il.com>)
Re: how to sell and get a fair price (gremlin@...mlin.ru)
Re: how to sell and get a fair price (gremlin@...mlin.ru)
Re: how to sell and get a fair price (Jeffrey Walton <noloader@...il.com>)
Cisco Security Advisory: Cisco ASA 1000V Cloud Firewall H.323 Inspection Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team…)
DC4420 - 2013 CFP (Major Malfunction <majormal@...ate-radio.org>)
[SECURITY] [DSA 2609-1] rails security update (Florian Weimer <fw@...eb.enyo.de>)
White Paper: Detecting System Intrusions (Almaz <almaz@...yo.com>)
[Security-news] SA-CONTRIB-2013-004 - Live CSS - Arbitrary Code Execution (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-003 - RESTful Web Services - Cross site request forgery (CSRF) (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-005 - Mark Complete Module - Cross Site Request Forgery (CSRF) (security-news@...pal.org)
[Security-news] SA-CORE-2013-001 - Drupal core - Multiple vulnerabilities (security-news@...pal.org)

January 17 (14 messages)

Re: White Paper: Detecting System Intrusions (Andrew Terekhov <ultraata@...il.com>)
Clickjacking in LinkedIn.com (7h3_J0k3r <j0k3r@...l.co.in>)
Re: White Paper: Detecting System Intrusions (殴micier Januszkiewicz <gauri@....by>)
iOS walled-gardens and security ("COPiOUS" <copious@...hmail.com>)
Are software cracks also a form of security vulnerabilities? ("COPiOUS" <copious@...hmail.com>)
NSOADV-2013-001: DELL SonicWALL GMS/Viewpoint/Analyzer Authentication Bypass (/appliance/) (NSO Research <nso-research@...iriu.de>)
NSOADV-2013-002: DELL SonicWALL GMS/Viewpoint/Analyzer Authentication Bypass (/sgms/) (NSO Research <nso-research@...iriu.de>)
Re: White Paper: Detecting System Intrusions (Ulisses Montenegro <ulisses.montenegro@...il.com>)
Re: Are software cracks also a form of security vulnerabilities? (Travis Biehn <tbiehn@...il.com>)
Re: Are software cracks also a form of security vulnerabilities? (Benji <me@...ji.com>)
Cisco Security Advisory Update v1.1: Cisco Unified IP Phone Local Kernel System Call Input Validation Vulnerability (Cisco Systems Product Security Incident R…)
CarolinaCon-9 (March 15-17, 2013): General Announcement - Chosen Presenters and Topics - Side Event List (Vic Vandal <vvandal@...l.com>)
Re: Are software cracks also a form of security vulnerabilities? (Scott Herbert <scott.a.herbert@...glemail.com>)
How to prevent HTTPS MitM (Luigi Rosa <lists@...girosa.com>)

January 18 (15 messages)

Recently-revised IETF I-Ds about IPv6 security (Fernando Gont <fgont@...networks.com>)
Re: How to prevent HTTPS MitM (Jeffrey Walton <noloader@...il.com>)
Secunia Research: Oracle Outside In Technology Paradox Database Handling Denial of Service (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Oracle Outside In Technology Paradox Database Handling Buffer Overflow (Secunia Research <remove-vuln@...unia.com>)
Re: How to prevent HTTPS MitM (Jann Horn <jannhorn@...glemail.com>)
Re: Are software cracks also a form of security vulnerabilities? (sxpert <sxpert@...ert.org>)
Novell NCP Pre-Auth Remote Stack-Based Buffer Overflow. (CVE-2012-0432) Exploit (Gary Nilson <gnilson@...il.com>)
[SE-2012-01] Java 7 Update 11 confirmed to be vulnerable (Security Explorations <contact@...urity-explorations.com>)
Re: petition to remove Aaron Swartz prosecutor (Jeffrey Walton <noloader@...il.com>)
Re: White Paper: Detecting System Intrusions (Valdis.Kletnieks@...edu)
Re: White Paper: Detecting System Intrusions (Jeffrey Walton <noloader@...il.com>)
Re: how to sell and get a fair price (Valdis.Kletnieks@...edu)
Re: Novell NCP Pre-Auth Remote Stack-Based Buffer Overflow. (CVE-2012-0432) Exploit (Gary Nilson <gnilson@...il.com>)
[CVE-2013-0177] Cross-Site Scripting (XSS) Vulnerability in Apache OFBiz (Jacopo Cappellato <jacopoc@...che.org>)
CA20121220-01: Security Notice for CA IdentityMinder [updated] ("Williams, James K" <James.Williams@...com>)

January 19 (5 messages)

Re: How to prevent HTTPS MitM (gremlin@...mlin.ru)
Re: Wordpress Pingback Port Scanner ("MustLive" <mustlive@...security.com.ua>)
Re: Wordpress Pingback Port Scanner (Henri Salo <henri@...v.fi>)
[SECURITY] [DSA 2605-2] asterisk regression update (Thijs Kinkhorst <thijs@...ian.org>)
Re: Wordpress Pingback Port Scanner (Grandma Eubanks <tborland1@...il.com>)

January 21 (15 messages)

DNSChef 0.2 - DNS Proxy for pentesters and malware analysts (iphelix <iphelix@...sprawl.org>)
Mozilla Firefox and Microsoft Internet Explorer stall when using workaround from MS06-020 or MS06-069 ("Stefan Kanthak" <stefan.kanthak@...go.de>)
ICS/SCADA security tools and releases (scadastrangelove <scadastrangelove@...il.com>)
Re: Wordpress Pingback Port Scanner (Vladimir Vorontsov <vladimir.vorontsov@...ec.ru>)
NoSuchCon CFP / 15-17 May 2013 / Paris, France (Jonathan Brossard <endrazine@...il.com>)
no-ip.com interesting way to handle newsletter options (Santiago Vila <sanvila@...x.es>)
Google Chrome 24 Anti-XSS Filter Bypass (WHK Yan <yan.uniko.102@...il.com>)
OT: Aaron's Law hopes to blunt US computer crime law (Jeffrey Walton <noloader@...il.com>)
Student expelled from Montreal college after finding vulnerability that compromised security of 250, 000 students pers… (Frank Bures <lisfrank@...m.toronto.edu>)
Re: Student expelled from Montreal college after finding vulnerability that compromised security of 250, 000 students personal data (Benji <me@...ji.com>)
Re: Student expelled from Montreal college after finding vulnerability that compromised security of 250, 000 students per… (Philip Whitehouse <philip@...uk.com>)
Re: Student expelled from Montreal college after finding vulnerability that compromised security of 250, 000 students pers… (Jeffrey Walton <noloader@...il.com>)
Re: Student expelled from Montreal college after finding vulnerability that compromised security of 250, 000 students per… (Ian Hayes <cthulhucalling@...il.com>)
Re: Student expelled from Montreal college after finding vulnerability that compromised security of 250, 000 students pers… (Jeffrey Walton <noloader@...il.com>)
Re: Student expelled from Montreal college after finding vulnerability that compromised security of 250, 000 students per… (Philip Whitehouse <philip@...uk.com>)

January 22 (34 messages)

Re: Student expelled from Montreal college after finding vulnerability that compromised security of 250, 000 ("Nick FitzGerald" <nick@...us-l.demon.co.uk>)
Re: Student expelled from Montreal college after finding vulnerability that compromised security of 250, 000 (Sanguinarious Rose <SanguineRose@...ultusTerra.co…)
Re: Student expelled from Montreal college after finding vulnerability that compromised security of 250, 000 students pers… (Jeffrey Walton <noloader@...il.com>)
[HITB-Announce] REMINDER: #HITB2013AMS Call for Papers Closes 8th Feb (Hafez Kamal <aphesz@...kinthebox.org>)
Re: Student expelled from Montreal college after finding vulnerability that compromised security of 250, 000 (Jeffrey Walton <noloader@...il.com>)
Re: Student expelled from Montreal college after finding vulnerability that compromised security of 250, 000 ("Nick FitzGerald" <nick@...us-l.demon.co.uk>)
Re: Student expelled from Montreal college after finding vulnerability that compromised security of 250, 000 ("Nick FitzGerald" <nick@...us-l.demon.co.uk>)
[0 Day] XSS Persistent in Blogspot of Google (ANTRAX <antrax.bt@...il.com>)
[SECURITY] [DSA 2610-1] ganglia security update (Yves-Alexis Perez <corsac@...ian.org>)
Re: [0 Day] XSS Persistent in Blogspot of Google (ANTRAX <antrax.bt@...il.com>)
[SECURITY] [DSA 2611-1] movabletype-opensource security update (Yves-Alexis Perez <corsac@...ian.org>)
Re: Student expelled from Montreal college after finding vulnerability that compromised security of 250, 000 (Benji <me@...ji.com>)
Re: Google Chrome 24 Anti-XSS Filter Bypass (Jakub Zoczek <zoczus@...il.com>)
Re: [SE-2012-01] Java 7 Update 11 confirmed to be vulnerable (bytze bytze <gbytze@...il.com>)
Re: [0 Day] XSS Persistent in Blogspot of Google (Jakub Zoczek <zoczus@...il.com>)
Re: Student expelled from Montreal college after finding vulnerability that compromised security of 250, 000 students personal data (Bzzz <lazyvirus@....com>)
Re: Student expelled from Montreal college after finding vulnerability that compromised security of 250, 000 students … (Julius Kivim盲ki <julius.kivimaki@...il…)
Re: Student expelled from Montreal college after finding vulnerability that compromised security of 250, 000 (Daniel Richards <kyhwana@...il.com>)
Re: Student expelled from Montreal college after finding vulnerability that compromised security of 250, 000 students personal data (jason <sword23@...il.com>)
Looking for security contacts (DefenseCode <defensecode@...ensecode.com>)
Re: Student expelled from Montreal college after finding vulnerability that compromised security of 250, 000 students … (Christian Sciberras <uuf6429@...il.com>)
Re: Looking for security contacts (Henri Salo <henri@...v.fi>)
SEC Consult SA-20130122-0 :: F5 BIG-IP XML External Entity Injection vulnerability (SEC Consult Vulnerability Lab <research@...-consult.com>)
SEC Consult SA-20130122-1 :: F5 BIG-IP SQL injection vulnerability (SEC Consult Vulnerability Lab <research@...-consult.com>)
Re: Student expelled from Montreal college after finding vulnerability that compromised security of 250, 000 (Alan J. Wylie <shyyqvfpybfher@...ie.me.uk>)
Re: [SE-2012-01] Java 7 Update 11 confirmed to be vulnerable (Security Explorations <contact@...urity-explorations.com>)
Re: [SECURITY] [DSA 2611-1] movabletype-opensource security update (Kacper Nowak <KacperN@...-1.com>)
Re: [SE-2012-01] Java 7 Update 11 confirmed to be vulnerable ("Limanovski, Dimitri" <Dimitri.Limanovski@...ucian.com>)
Re: [0 Day] XSS Persistent in Blogspot of Google (WHK Yan <yan.uniko.102@...il.com>)
Paypal Bug Bounty #18 - Blind SQL Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Wordpress Valums Uploader - File Upload Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Rather "interesting" whois for yahoo.com? (Dan Dart <dandart@...glemail.com>)
Re: Rather "interesting" whois for yahoo.com? (Florian Weimer <fw@...eb.enyo.de>)
Re: Rather "interesting" whois for yahoo.com? (Dan Dart <dandart@...glemail.com>)

January 23 (12 messages)

Re: Rather "interesting" whois for yahoo.com? (Julius Kivim盲ki <julius.kivimaki@...il.com>)
LACSEC 2013: 8th Network Security Event for Latin America and the Caribbean (CFP) (Fernando Gont <fgont@...networks.com>)
DC4420 - London DEFCON - January 2013 meet. Tuesday 29th January 2013 (Major Malfunction <majormal@...ate-radio.org>)
CVE-2013-0805 (Stephan Rickauer <stephan.rickauer@...c.ch>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Wireless LAN Controllers (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
[Security-news] SA-CONTRIB-2013-006 - Video - Arbitrary Code Execution (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-007 User Relationships - Cross Site Scripting (XSS) (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-008 - CurvyCorners - Cross Site Scripting (XSS) - module unsupported (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-009 - Keyboard Shortcut Utility - Access Bypass - module unsupported (security-news@...pal.org)
sql query displaying on error (Fayyaz Ali <anees042@...il.com>)
[Security-news] SA-CONTRIB-2013-010 - Search API sorts - Cross Site Scripting (XSS) (security-news@...pal.org)
Multiple vulnerabilities in Chocolate WP theme for WordPress ("MustLive" <mustlive@...security.com.ua>)

January 24 (16 messages)

New Blog Post: Attacking the Windows 7/8 Address Space Randomization (king cope <isowarez.isowarez.isowarez@...glemail.com>)
CVE ID Syntax Change - Call for Public Feedback (cve-id-change@...re.org)
CVE-2013-1393 (Stephan Rickauer <stephan.rickauer@...c.ch>)
IPv6: How to avoid security issues with VPN leaks on dual-stack networks (Fernando Gont <fgont@...networks.com>)
SEC Consult SA-20130124-0 :: Critical SSH Backdoor in multiple Barracuda Networks Products (SEC Consult Vulnerability Lab <research@...-consult.com>)
SEC Consult SA-20130124-1 :: Authentication bypass in Barracuda SSL VPN (SEC Consult Vulnerability Lab <research@...-consult.com>)
Re: Student expelled from Montreal college after finding vulnerability that compromised security of 250, 000 (Benjamin Kreuter <ben.kreuter@...il.com>)
Re: Student expelled from Montreal college after finding vulnerability that compromised security of 250, 000 (Gary Baribault <gary@...ibault.net>)
Re: Student expelled from Montreal college after finding vulnerability that compromised security of 250, 000 (Ferenc Kovacs <tyra3l@...il.com>)
Re: Student expelled from Montreal college after finding vulnerability that compromised security of 250, 000 (Valdis.Kletnieks@...edu)
Re: Student expelled from Montreal college after finding vulnerability that compromised security of 250, 000 (Peter Dawson <slash.pd@...il.com>)
Re: Student expelled from Montreal college after finding vulnerability that compromised security of 250, 000 (Stefan Weimar <full-disclosure@...is.toppoint.de>)
Re: Student expelled from Montreal college after finding vulnerability that compromised security of 250, 000 (Valdis.Kletnieks@...edu)
Re: Student expelled from Montreal college after finding vulnerability that compromised security of 250, 000 (Jeffrey Walton <noloader@...il.com>)
[SECURITY] [DSA 2612-1] ircd-ratbox security update (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Student expelled from Montreal college after finding vulnerability that compromised security of 250, 000 (Stefan Weimar <full-disclosure@...is.toppoint.de>)

January 25 (7 messages)

Re: Student expelled from Montreal college after finding vulnerability that compromised security of 250, 000 (Lerie Taylor <mr.lerie@...il.com>)
Re: SEC Consult SA-20130124-0 :: Critical SSH Backdoor in multiple Barracuda Networks Products (Luca Carettoni <luca.carettoni@...isoft.com>)
Re: [0 Day] XSS Persistent in Blogspot of Google (Gynvael Coldwind <gynvael@...dwind.pl>)
Re: Student expelled from Montreal college after finding vulnerability that compromised security of 250, 000 (Dan Ballance <tzewang.dorje@...il.com>)
Re: [0 Day] XSS Persistent in Blogspot of Google (ANTRAX <antrax.bt@...il.com>)
Re: Student expelled from Montreal college after finding vulnerability that compromised security of 250, 000 (Valdis.Kletnieks@...edu)
Re: Student expelled from Montreal college after finding vulnerability that compromised security of 250, 000 (Jeffrey Walton <noloader@...il.com>)

January 26 (2 messages)

[IA45] Photodex ProShow Producer v5.0.3297 ExpandMacroFilename() Local Buffer Overflow (Inshell Security <info@...hell.net>)
Re: Ubuntu, Linux Mint, and the Guest Account (Jeffrey Walton <noloader@...il.com>)

January 27 (5 messages)

[SE-2012-01] An issue with new Java SE 7 security features (Security Explorations <contact@...urity-explorations.com>)
Re: Student expelled from Montreal college after finding vulnerability that compromised security of 250, 000 (gremlin@...mlin.ru)
Re: [0 Day] XSS Persistent in Blogspot of Google (Elfius <elfius@...il.com>)
Re: Student expelled from Montreal college after finding vulnerability that compromised security of 250, 000 (Dan Ballance <tzewang.dorje@...il.com>)
Re: Student expelled from Montreal college after finding vulnerability that compromised security of 250, 000 (Benji <me@...ji.com>)

January 28 (5 messages)

Hunt CCTV (and generics brands) Insufficient Authentication ("A. Ramos" <aramosf@...il.com>)
Re: Student expelled from Montreal college after finding vulnerability that compromised security of 250, 000 (Dan Ballance <tzewang.dorje@...il.com>)
Re: [0 Day] XSS Persistent in Blogspot of Google (Michal Zalewski <lcamtuf@...edump.cx>)
[Announcement] PenTest Open 1/2012 released. (Maciej Kozuszek <maciej.kozuszek@...testmag.com>)
[ MDVSA-2013:005 ] perl (security@...driva.com)

January 29 (10 messages)

XSS in Elgg 1.8.12, 1.7.16 (core module "Twitter widget") (Moritz Naumann <security@...itz-naumann.com>)
nCircle PureCloud Vulnerability Scanner - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Fortinet FortiMail 400 IBE - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Paypal Bug Bounty #10 - Persistent Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Kohana Framework v2.3.3 - Directory Traversal Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
nCircle PureCloud Vulnerability Scanner - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Re: [0 Day] XSS Persistent in Blogspot of Google (Guifre <guifre.ruiz@...il.com>)
What Intruder Detection System (IDS) or Network Security Monitor (NSM) do you use? (Dan Ballance <tzewang.dorje@...il.com>)
Re: [0 Day] XSS Persistent in Blogspot of Google (antisnatchor <antisnatchor@...il.com>)
Cisco Security Advisory: Portable SDK for UPnP Devices Contains Buffer Overflow Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@c…)

January 30 (7 messages)

Buffalo TeraStation TS-Series multiple vulnerabilities (Andrea Fabrizi <andrea.fabrizi@...il.com>)
marc4dasm - Atmel MARC microprocessor disassembler published (Adam Laurie <adam@...roup.co.uk>)
[Security-news] SA-CONTRIB-2013-011 - email2image - Access Bypass - Unsupported (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-014 - Drush Debian Packaging - Information Disclosure - Unsupported (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-013 - Boxes - Cross site scripting (XSS) (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-012 - Google Authenticator login - Access Bypass (security-news@...pal.org)
Vulnerabilities in WordPress Attack Scanner for WordPress ("MustLive" <mustlive@...security.com.ua>)

January 31 (12 messages)

Re: Vulnerabilities in WordPress Attack Scanner for WordPress (Henri Salo <henri@...v.fi>)
Belkin WeMo Remote Shell and State Change 0day Exploit (Daniel Cardenas <dviciousb@...il.com>)
[SECURITY] [DSA 2613-1] rails security update (Thijs Kinkhorst <thijs@...ian.org>)
Belkin Wemo 0day exploit (remote shell + rapid state change) (Daniel Cardenas <daniel.vcardenas@...il.com>)
Belkin Wemo 0day exploit (Remote shell + Rapid State change) (Daniel Cardenas <dviciousb@...il.com>)
DefenseCode Security Advisory: Broadcom UPnP Remote Preauth Root Code Execution Vulnerability (DefenseCode <defensecode@...ensecode.com>)
Re: What Intruder Detection System (IDS) or Network Security Monitor (NSM) do you use? (Rain Li <lyp20062392@...il.com>)
[PenTest-Announce] Phishing Attack with Social Engineering Toolkit (SET) (Maciej Kozuszek <maciej.kozuszek@...testmag.com>)
[Hacking Challenge] nullcon HackIM 2013 will start at 01-02-2013, when the clock will strike at 21:00 (+5:30 GMT) (nullcon <nullcon@...lcon.net>)
[CTF] nullcon HackIM CTF 2013 will start at 01-02-2013, when the clock will strike at 21:00 (+5:30 GMT) (nullcon <nullcon@...lcon.net>)
Released: rompar - Semi-automation tool for data extraction of microscopic Masked ROM images (Major Malfunction <majormal@...ate-radio.org>)
Update On Demyo Power Strip (Alan Kakareka <almaz@...yo.com>)

280 messages

Powered by blists - more mailing lists