full-disclosure mailing list - 2013/05

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2013/05

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 4	² 2	³ 3	⁴ 1	⁵ 1
⁶ 10	⁷ 7	⁸ 11	⁹	¹⁰ 7	¹¹ 1	¹² 12
¹³ 2	¹⁴ 7	¹⁵ 6	¹⁶ 5	¹⁷ 15	¹⁸ 8	¹⁹ 3
²⁰ 8	²¹ 3	²² 8	²³ 31	²⁴ 5	²⁵ 6	²⁶ 1
²⁷ 14	²⁸ 15	²⁹ 20	³⁰ 3	³¹ 7

Messages by day:

May 1 (4 messages)

[HITB-Announce] #HITB2013KUL Call for Papers (Hafez Kamal <aphesz@...kinthebox.org>)
Forticlient VPN client credential interception vulnerability (Philippe oechslin <philippe.oechslin@...ectif-securite.ch>)
Re: Forticlient VPN client credential interception vulnerability (Thierry Zoller <thierry@...ler.lu>)
[Security-news] SA-CONTRIB-2013-046 - Filebrowser - Reflected Cross Site Scripting (XSS) (security-news@...pal.org)

May 2 (2 messages)

Re: Forticlient VPN client credential interception vulnerability (Patrick Webster <patrick@...hack.com>)
[SECURITY] [DSA 2664-1] stunnel4 security update (Salvatore Bonaccorso <carnil@...ian.org>)

May 3 (3 messages)

[RT-SA-2013-001] Advisory: Exim with Dovecot: Typical Misconfiguration Leads to Remote Command Execution (RedTeam Pentesting GmbH <release@...team-pentesting.d…)
[ MDVSA-2013:160 ] phpmyadmin (security@...driva.com)
Trying to send mail to Broadcom (Jann Horn <jann@...jh.net>)

May 4 (1 message)

Vulnerability in Microsoft Security Essentials <v4.2 ("Stefan Kanthak" <stefan.kanthak@...go.de>)

May 5 (1 message)

XSS vulnerability in JW Player and JW Player Pro ("MustLive" <mustlive@...security.com.ua>)

May 6 (10 messages)

Using CSS :visited to steal your history (again, zzzz...) (Michal Zalewski <lcamtuf@...edump.cx>)
Re: Using CSS :visited to steal your history (again, zzzz...) (Dan Kaminsky <dan@...para.com>)
Vulnerabilities in Windows 8 Professional x64 factory preinstallation of Fujitsu Lifebook A512 ("Stefan Kanthak" <stefan.kanthak@...go.de>)
[SE-2012-01] New security vulnerabilities and broken fixes in IBM Java (Security Explorations <contact@...urity-explorations.com>)
[ MDVSA-2013:161 ] java-1.7.0-openjdk (security@...driva.com)
Introducing libOnionRoute, the library to anonymize software (wac <waldoalvarez00@...il.com>)
Apache VCL improper input validation (Josh Thompson <jfthomps@...che.org>)
VULNERABLE and COMPLETELY outdated 3rd-party libraries/components used in 3CX Phone 6 ("Stefan Kanthak" <stefan.kanthak@...go.de>)
VULNERABLE and COMPLETELY outdated 3rd-party libraries/components used in 3CX Phone System 11 ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Vulnerabilities in VideoJS ("MustLive" <mustlive@...security.com.ua>)

May 7 (7 messages)

Ruxcon 2013 Call For Papers (cfp@...con.org.au)
[ESNC-2013-005] Remote Code Injection in SAP ERP Central Component - Project System (ESNC Security <secure@...c.de>)
SEC Consult SA-20130507-0 :: Multiple vulnerabilities in NetApp OnCommand System Manager (SEC Consult Vulnerability Lab <research@...-consult.com>)
HTP5 ezine released (Hack The Planet <h@...the.planet>)
Re: SEC Consult SA-20130507-0 :: Multiple vulnerabilities in NetApp OnCommand System Manager (Mario Vilas <mvilas@...il.com>)
[ MDVSA-2013:162 ] glibc (security@...driva.com)
[ MDVSA-2013:163 ] glibc (security@...driva.com)

May 8 (11 messages)

Re: [ESNC-2013-005] Remote Code Injection in SAP ERP Central Component - Project System (Ron Yount <rony@...island.wa.us>)
Re: Vulnerabilities in VideoJS (Ron Yount <rony@...island.wa.us>)
Unscribe (Ron Yount <rony@...island.wa.us>)
[2.0 Update] Cisco Security Advisory: Cisco Prime Data Center Network Manager Remote Command Execution Vulnerability (Cisco Systems Product Security Incident R…)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified Customer Voice Portal Software (Cisco Systems Product Security Incident Response Team <psirt…)
Re: Vulnerabilities in VideoJS (illwill <illwill@...mob.org>)
Vulnerabilities in multiple web applications with VideoJS ("MustLive" <mustlive@...security.com.ua>)
Vulnerability in "Fujitsu Desktop Update" (for Windows) ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Re: Vulnerabilities in Windows 8 Professional x64 factory preinstallation of Fujitsu Lifebook A512 [continued] ("Stefan Kanthak" <stefan.kanthak@...go.de>)
AlienVault OSSIM multiple SQL Injection vulnerabilities ("run run level" <runrunlevel@....com>)
List Charter (John Cartwright <johnc@...k.org.uk>)

May 10 (7 messages)

DDIVRT-2013-53 Actuate 'ActuateJavaComponent' Multiple Vulnerabilities (ddivulnalert <ddivulnalert@...frontline.com>)
GlobaLeaks 0.2 Alpha (herMario edition) released! (Arturo Filastò <lists@...fa.org>)
CVE-2013-2071 Request mix-up if AsyncListener method throws RuntimeException (Mark Thomas <markt@...che.org>)
[SECURITY] CVE-2013-2067 Session fixation with FORM authenticator (Mark Thomas <markt@...che.org>)
[SECURITY] CVE-2012-3544 Chunked transfer encoding extension size is not limited (Mark Thomas <markt@...che.org>)
OT bait on freelancer.com about md5 preimage (Georgi Guninski <guninski@...inski.com>)
Re: OT bait on freelancer.com about md5 preimage (Valdis.Kletnieks@...edu)

May 11 (1 message)

[Botconf] Botconf announcement and CFP reminder (Eric Freyssinet <eric.freyssinet@....org>)

May 12 (12 messages)

[SECURITY] [DSA 2666-1] xen security update (Salvatore Bonaccorso <carnil@...ian.org>)
XSS and FPD vulnerabilities in Search and Share for WordPress ("MustLive" <mustlive@...security.com.ua>)
[SECURITY] [DSA 2667-1] mysql-5.5 security update (Moritz Muehlenhoff <jmm@...ian.org>)
Paypal Bug Bounty #31 - Mail Encoding Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Wireless Disk PRO v2.3 iOS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Re: Paypal Bug Bounty #31 - Mail Encoding Web Vulnerability (Michal Zalewski <lcamtuf@...edump.cx>)
Wifi Photo Transfer 2.1 & 1.1 PRO - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Wifi Album v1.47 iOS - Command Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Wireless Photo Access 1.0.10 iOS - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
SimpleTransfer 2.2.1 - Command Injection Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
File Lite 3.3 & 3.5 PRO iOS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Re: Paypal Bug Bounty #31 - Mail Encoding Web Vulnerability (Jakub Zoczek <zoczus@...il.com>)

May 13 (2 messages)

[ MDVSA-2013:164 ] mesa (security@...driva.com)
IPB (Invision Power Board) all versions (1.x? / 2.x / 3.x) Admin account Takeover leading to code execution (John JEAN <john@...gan.com>)

May 14 (7 messages)

Security-Assessment.com Advisory: Gallery Server Pro File Upload Filter Bypass (Drew Calcott <drew.calcott@...urity-assessment.com>)
Q: CVE Database with Programming Language and Failure Classification? (Jeffrey Walton <noloader@...il.com>)
[HITB-Announce] HITB Magazine Issue 010 (Hafez Kamal <aphesz@...kinthebox.org>)
GreHack 2013 - Call For Papers - November 15, Grenoble, France ("F. Duchene" <adm-fabien.duchene@...hack.org>)
Vulnerabilities in multiple plugins for WordPress with VideoJS ("MustLive" <mustlive@...security.com.ua>)
www.netcraft.com - "Search Form" Cross-site Scripting vulnerability (Stefan Schurtz <sschurtz@...nline.de>)
Remote command Injection in Creme Fraiche 0.6 Ruby Gem ("Larry W. Cashdollar" <larry0@...com>)

May 15 (6 messages)

[SECURITY] [DSA 2668-1] linux-2.6 security update (dann frazier <dannf@...ian.org>)
[ MDVSA-2013:165 ] firefox (security@...driva.com)
Indusface Website Hacked and Infected? (Rahul T <rt184221@...il.com>)
Cisco Security Advisory: Cisco TelePresence Supervisor MSE 8050 Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@c…)
[Security-news] SA-CONTRIB-2013-047 - Google Authenticator login - Access Bypass (security-news@...pal.org)
Re: Q: CVE Database with Programming Language and Failure Classification? (Florian Weimer <fw@...eb.enyo.de>)

May 16 (5 messages)

[SECURITY] [DSA 2669-1] linux security update (dann frazier <dannf@...ian.org>)
Take Part in Positive Hack Days in Any Part of the World (PHD <PHD@...ecurity.ru>)
Multiple vulnerabilities in multiple themes for WordPress with VideoJS ("MustLive" <mustlive@...security.com.ua>)
On Skype URL eavesdropping (Kirils Solovjovs <kirils.solovjovs@...ils.com>)
Re: On Skype URL eavesdropping (Jeffrey Walton <noloader@...il.com>)

May 17 (15 messages)

Re: On Skype URL eavesdropping (Bruce Ediger <bediger@...atigery.com>)
Re: On Skype URL eavesdropping (Alex <fd@...oo.de>)
CONFidence - May, 28-29, Krakow, Poland - a conference adventure that never stops! (Sławomir Jabs <slawomir.jabs@...il.com>)
My ISP is routing traffic to private addresses... (kyle kemmerer <krkemmerer@...il.com>)
Re: My ISP is routing traffic to private addresses... (Gary Baribault <gary@...ibault.net>)
Re: My ISP is routing traffic to private addresses... (Joshua Zukerman <hawk82@...il.com>)
Re: My ISP is routing traffic to private addresses... (sec <sec@...tsploit.me>)
Re: My ISP is routing traffic to private addresses... (Justin Elze <formulals1@...il.com>)
Re: My ISP is routing traffic to private addresses... (Gary Baribault <gary@...ibault.net>)
Re: My ISP is routing traffic to private addresses... (sec <sec@...tsploit.me>)
Re: My ISP is routing traffic to private addresses... (Gary Baribault <gary@...ibault.net>)
exploitation ideas under memory pressure (Tavis Ormandy <taviso@...xchg8b.com>)
Re: My ISP is routing traffic to private addresses... (mezgani ali <handrix@...il.com>)
Re: My ISP is routing traffic to private addresses... (Julius Kivimäki <julius.kivimaki@...il.com>)
Re: My ISP is routing traffic to private addresses... ("Carl \"Thomas\" Guething" <thogue@...d.com>)

May 18 (8 messages)

Re: exploitation ideas under memory pressure (Tavis Ormandy <taviso@...xchg8b.com>)
Re: My ISP is routing traffic to private addresses... (Gary Baribault <gary@...ibault.net>)
Re: My ISP is routing traffic to private addresses... (Gary Baribault <gary@...ibault.net>)
Re: My ISP is routing traffic to private addresses... (Alexander Georgiev <fd@...oo.de>)
Re: My ISP is routing traffic to private addresses... (Kirils Solovjovs <kirils.solovjovs@...ils.com>)
Re: My ISP is routing traffic to private addresses... (Dan Dart <dandart@...glemail.com>)
Re: My ISP is routing traffic to private addresses... (Justin Elze <formulals1@...il.com>)
AFU vulnerabilities in MCFileManager for TinyMCE ("MustLive" <mustlive@...security.com.ua>)

May 19 (3 messages)

AFU vulnerabilities in MCImageManager for TinyMCE ("MustLive" <mustlive@...security.com.ua>)
Revision of "IPv6 Stable Privacy Addresses" (Fwd: I-D Action: draft-ietf-6man-stable-privacy-addresses-07.txt) (Fernando Gont <fgont@...networks.com>)
Interesting referrer URLs when accessing vulnerability disclosure information (halfdog <me@...fdog.net>)

May 20 (8 messages)

Thttpd 2.25b Directory Traversal Vulnerability ("metropolis haxor" <metrOpolis@...uxmail.org>)
Defense in depth -- the Microsoft way ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Re: My ISP is routing traffic to private addresses... (Alexander Georgiev <fd@...oo.de>)
Critical issues affecting multiple game engines (ReVuln <info@...uln.com>)
Re: My ISP is routing traffic to private addresses... (Patrick Webster <patrick@...hack.com>)
Re: exploitation ideas under memory pressure (Tavis Ormandy <taviso@...xchg8b.com>)
Trend Micro DirectPass 1.5.0.1060 (Cloud) Software - Multiple Software Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Sony PS3 Firmware v4.31 - Code Execution Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

May 21 (3 messages)

CVE-2013-3496. Local privilege escalation vulnerability in Infotecs products (ViPNet Client\Coordinator, SafeDisk, Per… (Максим Чудаков <chudakovma…)
Re: exploitation ideas under memory pressure (sd <sd@...328.com>)
[ MDVSA-2013:166 ] krb5 (security@...driva.com)

May 22 (8 messages)

Re: exploitation ideas under memory pressure (Brian Blankenship <blankenship.brian@...oo.com>)
Re: exploitation ideas under memory pressure (You Got Pwned <yougotpwned6@...glemail.com>)
Re: Sony PS3 Firmware v4.31 - Code Execution Vulnerability (Julius Kivimäki <julius.kivimaki@...il.com>)
Pentesting Distributions or Projects for Raspberry Pi (Jay Turla <shipcodez@...il.com>)
Re: Sony PS3 Firmware v4.31 - Code Execution Vulnerability (Milan Berger <m.berger@...ject-mindstorm.net>)
[SECURITY] [DSA 2670-1] request-tracker3.8 security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 2671-1] request-tracker4 security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 2672-1] kfreebsd-9 security update (Florian Weimer <fw@...eb.enyo.de>)

May 23 (31 messages)

Re: Pentesting Distributions or Projects for Raspberry Pi (Carlos Pantelides <carlos_pantelides@...oo.com>)
[waraxe-2013-SA#105] - Multiple Vulnerabilities in Spider Catalog Wordpress Plugin (Janek Vind <come2waraxe@...oo.com>)
[waraxe-2013-SA#104] - Multiple Vulnerabilities in Spider Event Calendar Wordpress Plugin (Janek Vind <come2waraxe@...oo.com>)
Re: Pentesting Distributions or Projects for Raspberry Pi (Jay Turla <shipcodez@...il.com>)
Re: Sony PS3 Firmware v4.31 - Code Execution Vulnerability (Julius Kivimäki <julius.kivimaki@...il.com>)
[ANN] Struts 2.3.14.1 GA (fast track | security) (Lukasz Lenart <lukaszlenart@...che.org>)
SEC Consult SA-20130523-0 :: JavaScript Execution in IBM WebSphere DataPower Services (SEC Consult Vulnerability Lab <research@...-consult.com>)
SEC Consult whitepaper :: Blackberry Z10 Research Primer - "Dissecting Blackberry 10 - An initial analysis" (SEC Consult Vulnerability Lab <research@...-consul…)
[SECURITY] [DSA 2677-1] libxrender security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2678-1] mesa security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2679-1] xserver-xorg-video-openchrome security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2680-1] libxt security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2681-1] libxcursor security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2682-1] libxext security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2683-1] libxi security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2684-1] libxrandr security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2685-1] libxp security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2686-1] libxcb security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2687-1] libfs security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2688-1] libxres security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2689-1] libxtst security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2676-1] libxfixes security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2675-1] libxvmc security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2674-1] libxv security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2673-1] libdmx security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2690-1] libxxf86dga security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2691-1] libxinerama security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2692-1] libxxf86vm security update (Moritz Muehlenhoff <jmm@...ian.org>)
XSS and FPD vulnerabilities in I Love It New theme for WordPress ("MustLive" <mustlive@...security.com.ua>)
Question on SMBRelay through Meterpreter (sd <sd@...328.com>)
little proof-of-concept for remote traffic statistics using the IP ID field (Jann Horn <jann@...jh.net>)

May 24 (5 messages)

Show In Browser 0.0.3 Ruby Gem /tmp file injection vulnerability ("Larry W. Cashdollar" <larry0@...com>)
Re: Sony PS3 Firmware v4.31 - Code Execution Vulnerability (Gary Driggs <gdriggs@...il.com>)
Shakacon V Speaker Selections ("Shakacon" <info@...kacon.org>)
Open challenge to Design the logo for Ground Zero Summit (Ground Zero <g0sgfx@...oo.com>)
Analysis of the Carna Botnet (Internet Census 2012) ("Parth Shukla" <pparth@...cert.org.au>)

May 25 (6 messages)

[SECURITY] [DSA 2675-2] libxvmc regression update (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 2693-1] libx11 security update (Raphael Geissert <geissert@...ian.org>)
PayPal.com XSS Vulnerability (Robert Kugler <robert.kugler10@...il.com>)
Re: Sony PS3 Firmware v4.31 - Code Execution Vulnerability (Julius Kivimäki <julius.kivimaki@...il.com>)
Multiple vulnerabilities in aCMS ("MustLive" <mustlive@...security.com.ua>)
CVE-2013-3666 - LG Optimus G command injection (as system user) vulnerability (Justin Case <jcase@...ninglogic.com>)

May 26 (1 message)

[SECURITY] [DSA 2694-1] spip security update (Salvatore Bonaccorso <carnil@...ian.org>)

May 27 (14 messages)

PayPal Bug Bounty #78 FR - Remote SQL Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Re: Trying to send mail to Broadcom (Tony Naggs <tonynaggs@...il.com>)
DC4420 - London DEFCON - May meet - Tuesday 28th May 2013 (Tony Naggs <tonynaggs@...il.com>)
[ MDVSA-2013:167 ] openvpn (security@...driva.com)
[ MDVSA-2013:168 ] python-httplib2 (security@...driva.com)
Re: Sony PS3 Firmware v4.31 - Code Execution Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Barracuda SSL VPN 680 2.2.2.203 - Redirect Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[CVE-2013-2115] Struts 2.3.14.2 GA (important security fix) (Rene Gielen <rgielen@...che.org>)
DC4420 - London DEFCON - May meet - Tuesday 28th May 2013 (Tony Naggs <tonynaggs@...il.com>)
c0c0n 2013 CFP - Extended Deadline: 9 June, 2013 (c0c0n International Information Security Conference <c0c0n@...ra.org>)
Re: Sony PS3 Firmware v4.31 - Code Execution Vulnerability ("Daniela Hermina" <slimjack-ps3@....de>)
Re: PayPal.com XSS Vulnerability (Robert Kugler <robert.kugler10@...il.com>)
Backdoor scanners testing ("MustLive" <mustlive@...security.com.ua>)
Re: PayPal.com XSS Vulnerability (Jeffrey Walton <noloader@...il.com>)

May 28 (15 messages)

13 more XSS on Paypal (John Parker <unownsec@...il.com>)
Re: PayPal.com XSS Vulnerability (Dan Kaminsky <dan@...para.com>)
Re: PayPal.com XSS Vulnerability (Jeffrey Walton <noloader@...il.com>)
Re: PayPal.com XSS Vulnerability (Daniël W. Crompton <daniel.crompton@...il.com>)
Re: PayPal.com XSS Vulnerability (Zachary Cutlip <uid000@...il.com>)
Re: PayPal.com XSS Vulnerability (Kirils Solovjovs <kirils.solovjovs@...ils.com>)
Re: PayPal.com XSS Vulnerability (Jeffrey Walton <noloader@...il.com>)
SCADA StrangeLove @Positive Hack Days (scadastrangelove <scadastrangelove@...il.com>)
Re: PayPal.com XSS Vulnerability (Robert Kugler <robert.kugler10@...il.com>)
Re: PayPal.com XSS Vulnerability (Terrence <secretpackets@...il.com>)
Re: PayPal.com XSS Vulnerability (Kirils Solovjovs <kirils.solovjovs@...ils.com>)
CORE-2013-0302 - Zavio IP Cameras multiple vulnerabilities (CORE Security Technologies Advisories <advisories@...esecurity.com>)
CORE-2013-0322 - MayGion IP Cameras multiple vulnerabilities (CORE Security Technologies Advisories <advisories@...esecurity.com>)
CORE-2013-0318 - TP-Link IP Cameras Multiple Vulnerabilities (CORE Security Technologies Advisories <advisories@...esecurity.com>)
CA20130528-01: Security Notice for CA Process Automation (CA PAM) ("Kotas, Kevin J" <Kevin.Kotas@...com>)

May 29 (20 messages)

Re: PayPal.com XSS Vulnerability (Jeffrey Walton <noloader@...il.com>)
[ MDVSA-2013:169 ] socat (security@...driva.com)
[ MDVSA-2013:170 ] socat (security@...driva.com)
Re: PayPal.com XSS Vulnerability (Robert Kugler <robert.kugler10@...il.com>)
Re: PayPal.com XSS Vulnerability (Źmicier Januszkiewicz <gauri@....by>)
Re: PayPal.com XSS Vulnerability (Źmicier Januszkiewicz <gauri@....by>)
Re: PayPal.com XSS Vulnerability (Julius Kivimäki <julius.kivimaki@...il.com>)
Re: PayPal.com XSS Vulnerability (James Condron <james@...o-internet.org.uk>)
Re: PayPal.com XSS Vulnerability (Jeffrey Walton <noloader@...il.com>)
Re: PayPal.com XSS Vulnerability (James Condron <james@...o-internet.org.uk>)
[SECURITY] [DSA 2696-1] otrs2 security update (Giuseppe Iuculano <iuculano@...ian.org>)
[Security-news] SA-CONTRIB-2013-048 - Edit Limit - Access Bypass (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-049 - Node access user reference - Access Bypass (security-news@...pal.org)
[SECURITY] [DSA 2695-1] chromium-browser security update (Michael Gilbert <mgilbert@...ian.org>)
PayPal Bug Bounty Controversy - I found the XSS first: They still didn't pay me (Shubham Shah <shahshubham369@...il.com>)
Re: PayPal.com XSS Vulnerability (Andre Helwig <a.helwig@...eleven.de>)
Re: PayPal.com XSS Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Barracuda SSL VPN 680 2.2.2.203 - Redirect Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[SECURITY] [DSA 2697-1] gnutls26 security update (Florian Weimer <fw@...eb.enyo.de>)
FPD and Security bypass vulnerabilities in Exploit Scanner for WordPress ("MustLive" <mustlive@...security.com.ua>)

May 30 (3 messages)

[Security-news] SA-CONTRIB-2013-050 - Webform - Cross Site Scripting (XSS) (security-news@...pal.org)
[ MDVSA-2013:171 ] gnutls (security@...driva.com)
Re: PayPal.com XSS Vulnerability (Daniel Preussker <daniel@...ussker.net>)

May 31 (7 messages)

No Directory Traversal Vulnerability in sthttpd ("Anthony G. Basile" <basile@...nsource.dyc.edu>)
XSS in images.samsung.com (David Tapia <tapiadavid44@...il.com>)
Call For Papers - ekoparty security conference 2013 (Juan Pablo Daniel <jpdborgna@...il.com>)
CVE-2013-3662 - Sketchup MAC Pict Material Palette Stack Corruption (Felipe Manzano <feliam@...amuse.com>)
CVE-2013-3663 - SketchUp BMP RLE8 Heap Overflow (Felipe Manzano <feliam@...amuse.com>)
CVE-2013-3664 - Sketchup Multiple Vulnerabilities (Felipe Manzano <feliam@...amuse.com>)
Windows Credentials Editor (WCE) v1.4beta (x32/x64/universal) release (Amplia Security Research <research@...liasecurity.com>)

226 messages

Powered by blists - more mailing lists