full-disclosure mailing list - 2013/03

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2013/03

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹ 9	² 9	³ 20
⁴ 12	⁵ 17	⁶ 26	⁷ 3	⁸ 14	⁹ 2	¹⁰ 2
¹¹ 6	¹² 8	¹³ 9	¹⁴ 10	¹⁵ 8	¹⁶ 6	¹⁷ 4
¹⁸ 14	¹⁹ 5	²⁰ 13	²¹ 8	²² 2	²³ 1	²⁴ 3
²⁵ 7	²⁶ 6	²⁷ 26	²⁸ 6	²⁹ 24	³⁰ 7	³¹ 7

Messages by day:

March 1 (9 messages)

Oracle Auto Service Request /tmp file clobbering vulnerability ("Larry W. Cashdollar" <larry0@...com>)
[CTF] nullcon Battle UnderGround is On (nullcon <nullcon@...lcon.net>)
list patch (Jan van Niekerk <jvnkrk@...il.com>)
CVE-2013-1413 (Stephan Rickauer <stephan.rickauer@...c.ch>)
Re: list patch (John Cartwright <johnc@...k.org.uk>)
[SECURITY] [DSA 2635-1] cfingerd security update (Salvatore Bonaccorso <carnil@...ian.org>)
[Security-news] SA-CONTRIB-2013-031 - Premium Responsive theme - Cross Site Scripting (XSS) (security-news@...pal.org)
[SECURITY] [DSA 2636-1] xen security update (Moritz Muehlenhoff <jmm@...ian.org>)
XSS vulnerabilities in em-shorty, RepRapCalculator, Fulcrum, Django and aCMS ("MustLive" <mustlive@...security.com.ua>)

March 2 (9 messages)

BF, IAA and CSRF vulnerabilities in Question2Answer ("MustLive" <mustlive@...security.com.ua>)
USB Disk & File Transfer v1.3.1 - File Include > Arbitrary File Upload Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
IPMap v2.5 iPad iPhone - File Upload Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Paypal Bug Bounty #5 - Persistent Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Proofpoint Protection Server Session Persistence (BugsNotHugs <bugsnothugs@...il.com>)
Re: list patch (Georgi Guninski <guninski@...inski.com>)
Re: XSS vulnerabilities in em-shorty, RepRapCalculator, Fulcrum, Django and aCMS (Henri Salo <henri@...v.fi>)
Re: list patch (Valdis.Kletnieks@...edu)
Administrivia: FD Returns (John Cartwright <johnc@...k.org.uk>)

March 3 (20 messages)

Whonix ALPHA 0.5.5 - Anonymous Operating System released (adrelanos <adrelanos@...eup.net>)
how do I know the fbi is followin ("Jerry dePriest" <jerryde@...net>)
Re: how do I know the fbi is followin (Sanguinarious Rose <SanguineRose@...ultusTerra.com>)
Re: how do I know the fbi is followin (Reed Loden <reed@...dloden.com>)
Re: how do I know the fbi is followin (Jeff Kell <jeff-kell@....edu>)
Re: XSS vulnerabilities in em-shorty, RepRapCalculator, Fulcrum, Django and aCMS - ZeroClipboard.swf (Kurt Seifried <kseifried@...hat.com>)
Re: how do I know the fbi is followin (adam <iarethebest@...il.com>)
Re: how do I know the fbi is followin (Chris L <inchcombec@...il.com>)
Re: how do I know the fbi is followin (Stefan Jon Silverman <sjs@...inc.com>)
Re: how do I know the fbi is followin (Laurelai <laurelai@...echan.org>)
Re: how do I know the fbi is followin (Sanguinarious Rose <SanguineRose@...ultusTerra.com>)
Remote command execution for Ruby Gem ftpd-0.2.1 ("Larry W. Cashdollar" <larry0@...com>)
Re: list patch (Georgi Guninski <guninski@...inski.com>)
Re: list patch (Laurelai <laurelai@...echan.org>)
Re: list patch (Georgi Guninski <guninski@...inski.com>)
[SECURITY] [DSA 2636-2] xen regression update (Moritz Muehlenhoff <jmm@...ian.org>)
Re: how do I know the fbi is followin (Kenneth Stox <ken@...x.org>)
Re: how do I know the fbi is followin (William Scott Lockwood III <vladinator@...il.com>)
AoF, IAA and CSRF vulnerabilities in Question2Answer ("MustLive" <mustlive@...security.com.ua>)
Ruby Gem Flash Tool 0.6.0 Remote code execution vulnerability ("Larry W. Cashdollar" <larry0@...com>)

March 4 (12 messages)

Re: how do I know the fbi is followin (Pat Litke <litke.p@...ti.cc>)
Remote system freeze thanks to Kaspersky Internet Security 2013 (Marc Heuse <mh@...sec.de>)
Re: how do I know the fbi is followin (Ned Fleming <ned@....us>)
[SE-2012-01] One more attack affecting Oracle's Java SE 7u15 (Security Explorations <contact@...urity-explorations.com>)
Re: how do I know the fbi is followin (Jason Storm <jason.storm@...il.com>)
Re: how do I know the fbi is followin (Valdis.Kletnieks@...edu)
Re: how do I know the fbi is followin (Gary Baribault <gary@...ibault.net>)
Re: how do I know the fbi is followin (Gary Baribault <gary@...ibault.net>)
WordPress Counter per Day plugin <= 3.2.3. Path Disclosure and Denial-Of-Service (DOS) and WordPress Counter per Day plug… (alej andr0 <alejandr0.m0f0@...il.com>)
[IA32] HP Intelligent Management Center v5.1 E0202 topoContent.jsf Non-Persistent Cross-Site Scripting (Inshell Security <info@...hell.net>)
[SECURITY] [DSA 2638-1] openafs security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2637-1] apache2 security update (Stefan Fritsch <sf@...ian.org>)

March 5 (17 messages)

Re: list patch (Laurelai <laurelai@...echan.org>)
WordPress Count-Per-Day plugin 3.2.5. Type-1 (reflected) Cross Site Scripting (XSS) (alej andr0 <alejandr0.m0f0@...il.com>)
Re: Remote system freeze thanks to Kaspersky Internet Security 2013 (SA52053) (Vulnerability Mailbox <Vulnerability@...persky.com>)
Samsung S3 : Full Lock Screen Bypass (Sean McMillan <sean_mcm@...mail.com>)
[SECURITY] [DSA 2639-1] php5 security update (Thijs Kinkhorst <thijs@...ian.org>)
[ MDVSA-2013:017 ] libxml2 (security@...driva.com)
Re: Kingcopes AthCon 2012 Slides & Notes --> Video online (king cope <isowarez.isowarez.isowarez@...glemail.com>)
Security BSides Las Vegas 31Jul -01Aug Call For Presenters / Call For Mentors (Info <info@...deslv.org>)
Varnish 2.1.5, 3.0.3 DoS in VRY_Create() while parsing Vary header (tytusromekiatomek@...hmail.com)
Apache Subversion mod_dav_svn DoS via MKACTIVITY/PROPFIND (tytusromekiatomek@...hmail.com)
Samsung TV DoS (possible overflow) via SOAPACTION (tytusromekiatomek@...hmail.com)
Varnish 2.1.5 DoS in STV_alloc() while parsing Content-Length header (tytusromekiatomek@...hmail.com)
Squid 3.2.7 DoS (loop, 100% cpu) strHdrAcptLangGetItem() at errorpage.cc (tytusromekiatomek@...hmail.com)
SIP Witch 0.7.4 w/libosip2-4.0.0 DoS via NULL pointer derefence in libosip2 (tytusromekiatomek@...hmail.com)
Varnish 2.1.5, 3.0.3 DoS in http_GetHdr() while parsing Vary header (tytusromekiatomek@...hmail.com)
Squid 3.2.5 httpMakeVaryMark() header value DoS, 2.7.Stable9 memory corruption. (tytusromekiatomek@...hmail.com)
Varnish 2.1.5 DoS in fetch_straight() while parsing Content-Length header (tytusromekiatomek@...hmail.com)

March 6 (26 messages)

Re: list patch (Michael Simpson <mikie.simpson@...il.com>)
Remote File Manager v1.2 iOS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
AirDrive HD 1.6 iPad iPhone - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
SANS PHP Port Scanner Remote Code Execution (laurent gaffie <laurent.gaffie@...il.com>)
Re: SANS PHP Port Scanner Remote Code Execution (Fayyaz Ali <anees042@...il.com>)
Re: SANS PHP Port Scanner Remote Code Execution (Harry Hoffman <hhoffman@...solutions.net>)
Re: SANS PHP Port Scanner Remote Code Execution (laurent gaffie <laurent.gaffie@...il.com>)
Re: rpi-update tmpfile vulnerability ("Larry W. Cashdollar" <larry0@...com>)
USB Disk & File Transfer v1.3.1 - File Include Vulnerability (Vulnerability Lab <admin@...nerability-lab.com>)
Re: SANS PHP Port Scanner Remote Code Execution (Źmicier Januszkiewicz <gauri@....by>)
Re: SANS PHP Port Scanner Remote Code Execution (Alexandre Teixeira <alexandre.abreu@...il.com>)
Re: SANS PHP Port Scanner Remote Code Execution (Benji <me@...ji.com>)
[SECURITY] CVE-2013-0248 Apache Commons FileUpload - Insecure examples (Mark Thomas <markt@...che.org>)
Re: SANS PHP Port Scanner Remote Code Execution (Benji <me@...ji.com>)
Re: SANS PHP Port Scanner Remote Code Execution (Ulisses Montenegro <ulisses.montenegro@...il.com>)
Get rid of french marketing spam (Arnaud Jacques <webmaster@...uriteinfo.com>)
Re: SANS PHP Port Scanner Remote Code Execution (Źmicier Januszkiewicz <gauri@....by>)
Re: SANS PHP Port Scanner Remote Code Execution (Dan Ballance <tzewang.dorje@...il.com>)
Re: SANS PHP Port Scanner Remote Code Execution (Christian Sciberras <uuf6429@...il.com>)
Re: SANS PHP Port Scanner Remote Code Execution (Ulisses Montenegro <ulisses.montenegro@...il.com>)
Re: Get rid of french marketing spam (gremlin@...mlin.ru)
Re: SANS PHP Port Scanner Remote Code Execution (Christian Sciberras <uuf6429@...il.com>)
Fwd: lame (Michael Simpson <mikie.simpson@...il.com>)
OpenFabrics ibutils 1.5.7 /tmp clobbering vulnerability ("Larry W. Cashdollar" <larry0@...com>)
[ MDVSA-2013:018 ] openssl (security@...driva.com)
DDIVRT-2013-51 DALIM Dialog Server 'logfile' Local File Inclusion (ddivulnalert <ddivulnalert@...frontline.com>)

March 7 (3 messages)

[ MDVSA-2013:019 ] gnutls (security@...driva.com)
Re: Oracle Auto Service Request /tmp file clobbering vulnerability ("Larry W. Cashdollar" <larry0@...com>)
Exploit for stealing admin's account in Question2Answer ("MustLive" <mustlive@...security.com.ua>)

March 8 (14 messages)

Re: SANS PHP Port Scanner Remote Code Execution (Andrew King <aking1012.com@...il.com>)
Re: SANS PHP Port Scanner Remote Code Execution (Christian Sciberras <uuf6429@...il.com>)
Re: SANS PHP Port Scanner Remote Code Execution (adam <adam@...sy.net>)
Re: SANS PHP Port Scanner Remote Code Execution (adam <adam@...sy.net>)
Re: SANS PHP Port Scanner Remote Code Execution ("Nick FitzGerald" <nick@...us-l.demon.co.uk>)
Re: SANS PHP Port Scanner Remote Code Execution (Stefan Jon Silverman <sjs@...inc.com>)
[ MDVSA-2013:020 ] wireshark (security@...driva.com)
Results of a XSLT fuzzing effort (Nicolas Grégoire <nicolas.gregoire@...rri.fr>)
[ MDVSA-2013:021 ] java-1.6.0-openjdk (security@...driva.com)
SEC Consult SA-20130308-0 :: Multiple critical vulnerabilities in GroundWork Monitor Enterprise (part 1) (SEC Consult Vulnerability Lab <research@...-consult.c…)
SEC Consult SA-20130308-1 :: Multiple vulnerabilities in GroundWork Monitor Enterprise (part 2) (SEC Consult Vulnerability Lab <research@...-consult.com>)
Re: Results of a XSLT fuzzing effort (antisnatchor <antisnatchor@...il.com>)
Re: Results of a XSLT fuzzing effort (Simeon <simeon@...muda.ch>)
Exploit for D-Link DAP 1150 ("MustLive" <mustlive@...security.com.ua>)

March 9 (2 messages)

[SECURITY] [DSA 2642-1] sudo security update (Michael Gilbert <mgilbert@...ian.org>)
[SECURITY] [DSA 2641-1] perl security update (Salvatore Bonaccorso <carnil@...ian.org>)

March 10 (2 messages)

Multiple SQL Injection vulnerabilities in Disk Pool Manager (DPM) (Adam Zabrocki <pi3@....com.pl>)
CS and XSS vulnerabilities in SWFUpload ("MustLive" <mustlive@...security.com.ua>)

March 11 (6 messages)

Host tracking in IPv6 (SI6 Networks' IPv6 toolkit v1.3.3) (Fernando Gont <fgont@...networks.com>)
[ISecAuditors Security Advisories] Reflected XSS in Asteriskguru Queue Statistics (ISecAuditors Security Advisories <advisories@...cauditors.com>)
SEC Consult SA-20130311-0 :: Persistent cross-site scripting in jforum (SEC Consult Vulnerability Lab <research@...-consult.com>)
XSS Vulnerability in TinyMCE ("Justin C. Klein Keane" <justin@...irish.net>)
CVE-2013-1763 Ubuntu 12.10 64bit (Kacper Szczesniak <kacper@....pl>)
Vulnerabilities in SWFUpload in multiple web applications: WordPress, Dotclear, InstantCMS, AionWeb and others ("MustLive" <mustlive@...security.com.ua>)

March 12 (8 messages)

AirDrive HD 1.6 iPad iPhone - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Paypal Bug Bounty #19 - Persistent Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Re: [oss-security] Multiple SQL Injection vulnerabilities in Disk Pool Manager (DPM) (Kurt Seifried <kseifried@...hat.com>)
Announcing ChronIC - a wearable Sub-GHz RF hacking tool (Adam Laurie <adam@...roup.co.uk>)
Cam2pc BMP Image Processing Integer Overflow Vulnerability (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
Ruby gem fastreader-1.0.8 remote code exec ("Larry W. Cashdollar" <larry0@...com>)
MiniMagic ruby gem remote code execution ("Larry W. Cashdollar" <larry0@...com>)
Curl Ruby Gem Remote command execution ("Larry W. Cashdollar" <larry0@...com>)

March 13 (9 messages)

[SECURITY] [DSA 2643-1] puppet security update (Yves-Alexis Perez <corsac@...ian.org>)
ASUS RT-N66U multiple vulns (sec <sec@...tsploit.me>)
[CVE-2013-1814] Apache Rave exposes User over API (Matt Franklin <mfranklin@...che.org>)
Re: CVE-2013-1763 Ubuntu 12.10 64bit (Thiébaud Weksteen <thiebaud@...steen.fr>)
SEC Consult SA-20130313-0 :: QlikView Desktop Client Integer Overflow (SEC Consult Vulnerability Lab <research@...-consult.com>)
[ MDVSA-2013:022 ] openssh (security@...driva.com)
[ MDVSA-2013:023 ] coreutils (security@...driva.com)
[ MDVSA-2013:024 ] firefox (security@...driva.com)
[Security-news] SA-CONTRIB-2013-034 - Node Parameter Control - Access Bypass (security-news@...pal.org)

March 14 (10 messages)

Chrome Null Pointer in InspectDataSource::StartDataRequest (Heyder Andrade <heyder.andrade@...il.com>)
FULL-DISCLOSURE Exclusive (Henry Garrison <henrygarrison32@...oo.com>)
List Charter (John Cartwright <johnc@...k.org.uk>)
[ MDVSA-2013:025 ] pidgin (security@...driva.com)
[SECURITY] [DSA 2644-1] wireshark security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2640-1] zoneminder security update (Salvatore Bonaccorso <carnil@...ian.org>)
A few android security issues (Jann Horn <jannhorn@...glemail.com>)
[SECURITY] [DSA 2645-1] inetutils security update (Yves-Alexis Perez <corsac@...ian.org>)
web app pentesting - short research survey (kill my xss <kill.my.xss@...il.com>)
Petite Annonce v1 XSS Vulnerability ("metropolis haxor" <metrOpolis@...uxmail.org>)

March 15 (8 messages)

Skype Click to Call Update Service local privilege escalation (Oliver-Tobias Ripka <otr@...kcay.de>)
DDIVRT-2013-50 EverFocus EPARA264-16X1 Directory Traversal (ddivulnalert <ddivulnalert@...frontline.com>)
[SECURITY] [DSA 2647-1] firebird2.1 security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2648-1] firebird2.5 security update (Moritz Muehlenhoff <jmm@...ian.org>)
n.runs-SA-2013.001 - Polycom - Command Shell Grants System-Level Access (<security@...ns.com>)
n.runs-SA-2013.002 - Polycom - Firmware Update Command Injection (<security@...ns.com>)
n.runs-SA-2013.003 - Polycom - H.323 CDR Database SQL Injection (<security@...ns.com>)
n.runs-SA-2013.004 - Polycom - H.323 Format String Vulnerability (<security@...ns.com>)

March 16 (6 messages)

[SECURITY] [DSA 2646-1] typo3-src security update (Yves-Alexis Perez <corsac@...ian.org>)
[SECURITY] [DSA 2649-1] lighttpd security update (Yves-Alexis Perez <corsac@...ian.org>)
[SECURITY] [DSA 2650-1] libvirt-bin security update (Yves-Alexis Perez <corsac@...ian.org>)
Critical issue affecting EA Origin users (ReVuln <info@...uln.com>)
Re: n.runs-SA-2013.001 - Polycom - Command Shell Grants System-Level Access (Julius Kivimäki <julius.kivimaki@...il.com>)
10 years of Hackers to Hackers Conference - Call for Papers ("Rodrigo Rubira Branco (BSDaemon)" <rodrigo@...nelhacking.com>)

March 17 (4 messages)

"Data-Clone" -- a new way to attack android apps (IEhrepus <5up3rh3i@...il.com>)
NOPcon 2013 - Call for paper - Istanbul , Turkey (NOPcon Team <info@...con.org>)
Fake Applications in browser (Roman Kümmel <ccuminn@...m.cz>)
Re: "Data-Clone" -- a new way to attack android apps (Jann Horn <jannhorn@...glemail.com>)

March 18 (14 messages)

Re: "Data-Clone" -- a new way to attack android apps (IEhrepus <5up3rh3i@...il.com>)
Re: "Data-Clone" -- a new way to attack android apps (IEhrepus <5up3rh3i@...il.com>)
[SECURITY] [DSA 2650-2] libvirt regression update (Yves-Alexis Perez <corsac@...ian.org>)
Re: n.runs-SA-2013.001 - Polycom - Command Shell Grants System-Level Access (some one <s3cret.squirell@...il.com>)
Port scanning /0 using insecure embedded devices ("internet census" <internetcensus2012@...l.com>)
[SE-2012-01] The "allowed behavior" in Java SE 7 (Issue 54) (Security Explorations <contact@...urity-explorations.com>)
[ MDVSA-2013:026 ] sudo (security@...driva.com)
[ MDVSA-2013:027 ] clamav (security@...driva.com)
[ MDVSA-2013:028 ] nagios (security@...driva.com)
Cisco Security Response: Cisco IOS and Cisco IOS XE Type 4 Passwords Issue (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
iKAT 2013 Release - Interactive Kiosk Attack Tool (Paul Craig <paul@...cked.net>)
Re: Vulnerabilities in SWFUpload in multiple web applications: WordPress, Dotclear, InstantCMS, AionWeb and others (Henri Salo <henri@...v.fi>)
[CVE-2013-2294] Multiple Cross Site Scripting (XSS) vulnerabilities in ViewGit (Matthew Bucci <bucci@....upenn.edu>)
Remote command execution in Ruby Gem Command Wrap (larry Cashdollar <larry0@...com>)

March 19 (5 messages)

[waraxe-2013-SA#098] - Directory Traversal Vulnerabilities in OpenCart 1.5.5.1 (Janek Vind <come2waraxe@...oo.com>)
[IA49] Photodex ProShow Producer v5.0.3310 ScsiAccess Local Privilege Escalation (Inshell Security <info@...hell.net>)
Re: Port scanning /0 using insecure embedded devices (Jeffrey Walton <noloader@...il.com>)
Owning Samsung Android devices (Roberto Paleari <roberto@...yhats.it>)
Re: Owning Samsung Android devices (Jeffrey Walton <noloader@...il.com>)

March 20 (13 messages)

CA20130319-01: Security Notice for SiteMinder products using SAML ("Kotas, Kevin J" <Kevin.Kotas@...com>)
Deutsche Post Security Cup 2013 (<Juergen.Pabel@...tschePost.de>)
Re: Deutsche Post Security Cup 2013 (Harry Behrens <harry@...rens.com>)
Re: Deutsche Post Security Cup 2013 (Hurgel Bumpf <l0rd_lunatic@...oo.com>)
Re: Deutsche Post Security Cup 2013 (Daniel Preussker <daniel@...ussker.net>)
Re: Deutsche Post Security Cup 2013 (Benji <me@...ji.com>)
CVE-2013-186y: tokend (Apple, Gemalto) - privacy leak & arbitrary file creation (OSX, All versions) (Dirk-Willem van Gulik <dirkx@...weaving.org>)
CVE-2013-1866: OpenSC.tokend - privacy leak & arbitrary file creation (OSX, All versions) (Dirk-Willem van Gulik <dirkx@...weaving.org>)
CVE-2013-1867: tokend (Apple, Gemalto) - privacy leak & arbitrary file creation (OSX, All versions) (Dirk-Willem van Gulik <dirkx@...weaving.org>)
Re: Deutsche Post Security Cup 2013 (<Juergen.Pabel@...tschePost.de>)
Re: Deutsche Post Security Cup 2013 (Daniel Preussker <daniel@...ussker.net>)
[SECURITY] [DSA 2641-2] libapache2-mod-perl2 update related to DSA 2641-1 (Salvatore Bonaccorso <carnil@...ian.org>)
[Security-news] SA-CONTRIB-2013-035 - Views - Cross Site Scripting (XSS) (security-news@...pal.org)

March 21 (8 messages)

New WinCC/TIA Porta vulns/fixes (scadastrangelove <scadastrangelove@...il.com>)
[SECURITY] [DSA 2651-1] smokeping security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SE-2011-01] PoC code for digital SAT TV research released (Security Explorations <contact@...urity-explorations.com>)
PHDays Call For Papers Initiates Its Second Stage (PHD <PHD@...ecurity.ru>)
[waraxe-2013-SA#099] - Update Spoofing Vulnerability in LibreOffice 4.0.1.2 (Janek Vind <come2waraxe@...oo.com>)
Re: Deutsche Post Security Cup 2013 (Alex <fd@...oo.de>)
Re: Deutsche Post Security Cup 2013 (Hurgel Bumpf <l0rd_lunatic@...oo.com>)
CFP (Extended Deadline) : S.I. on Intrusion Detection and Security Mechanisms for WSNs (Jaime Lloret Mauri<jlloret@...m.upv.es>)

March 22 (2 messages)

Re: Port scanning /0 using insecure embedded devices (Valdis.Kletnieks@...edu)
DC4420 - London DEFCON - March meet - Tuesday 26th March 2013 (Major Malfunction <majormal@...ate-radio.org>)

March 23 (1 message)

Great read for the Australians ("Jody Melbourne (HackLabs)" <hacklabsjody@...hmail.com>)

March 24 (3 messages)

JAOW 2.4.8 XSS Vulnerability ("metropolis haxor" <metrOpolis@...uxmail.org>)
Backupbuddy wordpress plugin - sensitive data exposure in importbuddy.php (Rob Armstrong <robarmstrong.te71@...il.com>)
XSS vulnerabilities in ZeroClipboard and multiple web applications ("MustLive" <mustlive@...security.com.ua>)

March 25 (7 messages)

Book announcement: Los 27 Controles Criticos de Seguridad Informática (Spanish) (<sergio@...osegura.net>)
XSS vulnerability on WP-Banners-Lite (wordpress plugin) ("Fernando A. Lagos B." <fernando@...ial.org>)
Re: [DC4420] DC4420 - London DEFCON - March meet - Tuesday 26th March 2013 (Paul Dart <pauldart@...il.com>)
Fwd: Remote command injection vulnerability in Rosewill RSVA11001 (Hi3515 based) (Eric Urban <hydrogen18@...il.com>)
Re: Fwd: Remote command injection vulnerability in Rosewill RSVA11001 (Hi3515 based) (Henri Salo <henri@...v.fi>)
Re: XSS vulnerability on WP-Banners-Lite (wordpress plugin) (Henri Salo <henri@...v.fi>)
Re: Fwd: Remote command injection vulnerability in Rosewill RSVA11001 (Hi3515 based) (Eric Urban <hydrogen18@...il.com>)

March 26 (6 messages)

[SECURITY] [DSA 2652-1] libxml2 security update (Michael Gilbert <mgilbert@...ian.org>)
[ISecAuditors Security Advisories] CSRF vulnerability in LinkedIn (ISecAuditors Security Advisories <advisories@...cauditors.com>)
[ISecAuditors Security Advisories] Multiple Reflected XSS vulnerabilities in LinkedIn Investors (ISecAuditors Security Advisories <advisories@...cauditors.com>)
Ruby gem Thumbshooter 0.1.5 remote command execution ("Larry W. Cashdollar" <larry0@...com>)
Multiple XSS vulnerabilities in IBM Lotus Domino ("MustLive" <mustlive@...security.com.ua>)
[SECURITY] [DSA 2653-1] icinga security update (Florian Weimer <fw@...eb.enyo.de>)

March 27 (26 messages)

Justice for Molly (cops killing civillians) ("Jerry dePriest" <jerryde@...net>)
Re: Port scanning /0 using insecure embedded devices (Stefan Jon Silverman <sjs@...inc.com>)
Fw: Justice for Molly (cops killing civillians) ("Jerry dePriest" <jerryde@...net>)
Fw: Fw: Justice for Molly (cops killing civillians) ("Jerry dePriest" <jerryde@...net>)
reward ("Jerry dePriest" <jerryde@...net>)
Re: Justice for Molly (cops killing civillians) (Bryan Baldwin <bryan@...ofiad.co.nz>)
Re: Justice for Molly (cops killing civillians) (Gregory Boddin <gregory@...hine.net>)
[ISecAuditors Security Advisories] Reflected XSS in Atmail WebMail <= v7.0.2 (ISecAuditors Security Advisories <advisories@...cauditors.com>)
Fw: Justice for Molly (cops killing civillians) ("Jerry dePriest" <jerryde@...net>)
Cisco Security Advisory: Cisco IOS Software Resource Reservation Protocol Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Tea…)
Cisco Security Advisory: Cisco IOS Software Zone-Based Policy Firewall Session Initiation Protocol Inspection Denial o… (Cisco Systems Product Security Incident…)
Cisco Security Advisory: Cisco IOS Software IP Service Level Agreement Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco IOS Software Protocol Translation Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco IOS Software Internet Key Exchange Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco IOS Software Network Address Translation Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco IOS Software Smart Install Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.c…)
winAUTOPWN v3.4 Released - Completing 4 years !! ("QUAKER DOOMER" <quakerdoomer@...ox.lv>)
AST-2013-001: Buffer Overflow Exploit Through SIP SDP Header ("Asterisk Security Team" <security@...erisk.org>)
AST-2013-002: Denial of Service in HTTP server ("Asterisk Security Team" <security@...erisk.org>)
AST-2013-003: Username disclosure in SIP channel driver ("Asterisk Security Team" <security@...erisk.org>)
[Security-news] SA-CONTRIB-2013-036 - Zero Point - Cross Site Scripting (XSS) (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-038 - Commons Groups - Access bypass & Privilege escalation (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-037 - Rules - Cross Site Scripting (XSS) (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-039 - Commons Wikis - Access bypass & Privilege escalation (security-news@...pal.org)
Re: Port scanning /0 using insecure embedded devices (Gage Bystrom <themadichib0d@...il.com>)
On the impact of CVE-2013-2266 (BIND9) (Daniel Franke <dfoxfranke@...il.com>)

March 28 (6 messages)

Re: Fw: Justice for Molly (cops killing civillians) (Bryan Baldwin <bryan@...ofiad.co.nz>)
[SECURITY] [DSA 2655-1] rails security update (Moritz Muehlenhoff <jmm@...ian.org>)
Paypal Bug Bounty #5 - Persistent Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Paypal Bug Bounty #46 - Persistent Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
MailOrderWorks v5.907 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Re: On the impact of CVE-2013-2266 (BIND9) (Jeff Wright <jwright@....org>)

March 29 (24 messages)

Fw: Fw: Justice for Molly (cops killingcivillians) ("Jerry dePriest" <jerryde@...net>)
Re: Fw: Fw: Justice for Molly (cops killingcivillians) (Gary Baribault <gary@...ibault.net>)
Re: Fw: Fw: Justice for Molly (cops killingcivillians) (Jeffrey Walton <noloader@...il.com>)
Fw: Fw: Fw: Justice for Molly (cops killingcivillians) ("Jerry dePriest" <jerryde@...net>)
Re: petition to remove Aaron Swartz prosecutor ("Jerry dePriest" <jerryde@...net>)
Fw: (no subject) ("Jerry dePriest" <jerryde@...net>)
Fw: Fw: News Delivery Report (Failure) ("Jerry dePriest" <jerryde@...net>)
Re: petition to remove Aaron Swartz prosecutor (Jeffrey Walton <noloader@...il.com>)
[waraxe-2013-SA#100] - Update Spoofing Vulnerability in mRemote 1.50 (Janek Vind <come2waraxe@...oo.com>)
[waraxe-2013-SA#101] - Update Spoofing Vulnerability in Royal TS 2.1 (Janek Vind <come2waraxe@...oo.com>)
Re: Fw: (no subject) (Benji <me@...ji.com>)
Re: Fw: Fw: News Delivery Report (Failure) (Benji <me@...ji.com>)
Re: petition to remove Aaron Swartz prosecutor (Steve Wray <stevedwray@...il.com>)
Fw: [waraxe-2013-SA#101] - Update SpoofingVulnerability in Royal TS 2.1 ("Jerry dePriest" <jerryde@...net>)
Re: petition to remove Aaron Swartz prosecutor (Jeffrey Walton <noloader@...il.com>)
Fw: petition to remove Aaron Swartz prosecutor ("Jerry dePriest" <jerryde@...net>)
Re: Fw: Fw: Fw: Justice for Molly (cops killingcivillians) (Gage Bystrom <themadichib0d@...il.com>)
Re: Fw: Fw: Fw: Justice for Molly (copskillingcivillians) ("Jerry dePriest" <jerryde@...net>)
Re: Fw: petition to remove Aaron Swartz prosecutor (Gage Bystrom <themadichib0d@...il.com>)
Re: Fw: Fw: Fw: Justice for Molly (copskillingcivillians) (Gage Bystrom <themadichib0d@...il.com>)
Re: Fw: Fw: Fw: Justice for Molly (copskillingcivillians) (Benji <me@...ji.com>)
Donkey Kick Exploit (Daniel Sichel <daniels@...derosatel.com>)
Re: Donkey Kick Exploit (Ian Hayes <cthulhucalling@...il.com>)
Crossbow, a lightweight, cross-platform exploit development framework. (Zachary Cutlip <uid000@...il.com>)

March 30 (7 messages)

Re: Fw: Fw: Justice for Molly (cops killingcivillians) (Bryan Baldwin <bryan@...ofiad.co.nz>)
Re: Fw: Fw: Justice for Molly (cops killingcivillians) (Bryan Baldwin <bryan@...ofiad.co.nz>)
Re: Fw: Fw: Justice for Molly (cops killingcivillians) ("Daniel Preußker" <daniel@...ussker.eu>)
Re: Fw: Fw: Fw: Justice for Molly (copskillingcivillians) (Philip Whitehouse <philip@...uk.com>)
[SECURITY] [DSA 2656-1] bind9 security update (Salvatore Bonaccorso <carnil@...ian.org>)
WP FuneralPress - Stored XSS in Guestbook (Rob Armstrong <robarmstrong.te71@...il.com>)
Re: Fw: Fw: Fw: Justice for Molly (copskillingcivillians) (Michael T <mt2410689@...il.com>)

March 31 (7 messages)

Re: Fw: Fw: Fw: Justice for Molly(copskillingcivillians) ("Jerry dePriest" <jerryde@...net>)
Re: Fw: Fw: Fw: Justice for Molly(copskillingcivillians) (Gage Bystrom <themadichib0d@...il.com>)
Re: WP FuneralPress - Stored XSS in Guestbook (Henri Salo <henri@...v.fi>)
Re: WP FuneralPress - Stored XSS in Guestbook (Henri Salo <henri@...v.fi>)
Re: WP FuneralPress - Stored XSS in Guestbook (Peter Westwood <westi@...omattic.com>)
AUTO: Roee Hay is on vacation (returning 10/04/2013) (Roee Hay <ROEEH@...ibm.com>)
Re: XSS vulnerabilities in em-shorty, RepRapCalculator, Fulcrum, Django and aCMS - ZeroClipboard.swf ("MustLive" <mustlive@...security.com.ua>)

294 messages

Powered by blists - more mailing lists