full-disclosure mailing list - 2013/06

Messages by day:

June 2 (5 messages)

• FPD and Security bypass vulnerabilities in AntiVirus for WordPress ("MustLive" <mustlive@...security.com.ua>)
• [SECURITY] [DSA 2699-1] iceweasel security update (Moritz Muehlenhoff <jmm@...ian.org>)
• [SECURITY] [DSA 2700-1] wireshark security update (Moritz Muehlenhoff <jmm@...ian.org>)
• [SECURITY] [DSA 2701-1] krb5 security update (Michael Gilbert <mgilbert@...ian.org>)
• Lahana - Disposable VPN -> Tor bridges on EC2 (Steve <steve@...on.com>)

• Re: exploitation ideas under memory pressure (Tavis Ormandy <taviso@...xchg8b.com>)
• Vulnerable Microsoft VC++ 2005 RTM runtime libraries installed with "Microsoft Security Essentials" (and numerous othe… ("Stefan Kanthak" <stefan.kanthak@...go.…)
• Re: exploitation ideas under memory pressure (Sabniveesu Shashank <shashank16392@...il.com>)
• Call For Papers - Balkan Computer Congress 2013 (BalCCon Org <cfp@...ccon.org>)
• [SECURITY] [DSA 2702-1] telepathy-gabble security update (Salvatore Bonaccorso <carnil@...ian.org>)

• [GTA-2013-01] - Libsrtp srtp_protect/hmac_compute buffer overflow (Groundworks Technologies Advisories Team <advisories@...undworkstech.com>)
• [ISecAuditors Security Advisories] Multiple Vulnerabilities in Telaen <= 1.3.0 (ISecAuditors Security Advisories <advisories@...cauditors.com>)
• 3COM NBX V3000 Networked Telephony Solution Information Disclosure (Russell Butturini <tcstool@...il.com>)
• Fwd: Iframe Injection On newsroom.cisco.com (vinesh redkar <vineshredkar89@...il.com>)
• Re: Any.Do sends passwords in plaintext (Peter Lustlos <peter.lustlos84@...oo.com>)
• OT github search: extension:php mysql_query $_GET (Georgi Guninski <guninski@...inski.com>)
• [UPDATED][GTA-2013-01] - Libsrtp srtp_protect/hmac_compute buffer overflow (Groundworks Technologies Advisories Team <advisories@...undworkstech.com>)
• IA and AFU vulnerabilities in aCMS ("MustLive" <mustlive@...security.com.ua>)
• [CORE-2013-0103] Mac OSX Server DirectoryService buffer overflow (CORE Security Technologies Advisories <advisories@...esecurity.com>)

• [ANN] Struts 2.3.14.3 GA (fast-track) release available (Lukasz Lenart <lukaszlenart@...che.org>)
• SEC Consult SA-20130605-0 :: Multiple vulnerabilities in CTERA Portal (SEC Consult Vulnerability Lab <research@...-consult.com>)
• Plesk Apache Zeroday Remote Exploit (king cope <isowarez.isowarez.isowarez@...glemail.com>)
• XSS in www.paypal.com (Jose Antonio Perez <japp@...abs.com>)
• [Security-news] SA-CONTRIB-2013-051 - Services - Cross site request forgery (CSRF) (security-news@...pal.org)
• CORE-2013-0517 - Xpient Cash Drawer Operation Vulnerability (CORE Security Technologies Advisories <advisories@...esecurity.com>)

• Re: Plesk Apache Zeroday Remote Exploit (David H <ispcolohost@...il.com>)
• Re: XSS in www.paypal.com (Ryan Dewhurst <ryandewhurst@...il.com>)
• Microsoft Internet Explorer textNode Use-After-Free (Scott Bell <scott.bell@...urity-assessment.com>)
• Re: XSS in www.paypal.com (Daniel Preussker <daniel@...ussker.net>)
• Re: Plesk Apache Zeroday Remote Exploit (Kingcope <isowarez.isowarez.isowarez@...glemail.com>)
• Re: Plesk Apache Zeroday Remote Exploit (Kingcope <isowarez.isowarez.isowarez@...glemail.com>)
• Re: XSS in www.paypal.com (Kingcope <isowarez.isowarez.isowarez@...glemail.com>)
• Re: Plesk Apache Zeroday Remote Exploit (Kingcope <isowarez.isowarez.isowarez@...glemail.com>)
• Re: Plesk Apache Zeroday Remote Exploit (David H <ispcolohost@...il.com>)
• Re: Plesk Apache Zeroday Remote Exploit (Milan Berger <m.berger@...ject-mindstorm.net>)

• Re: Plesk Apache Zeroday Remote Exploit (Ed Velez <ed.velez@...il.com>)
• Botnet using Plesk vulnerability and takedown (jtagtgc@...mail.org)
• Re: XSS in www.paypal.com (Ryan Dewhurst <ryandewhurst@...il.com>)
• Re: Plesk Apache Zeroday Remote Exploit (アドリアンヘンドリック <unixfreaxjp22@...il.com>)
• Remote Execution Exploit in Zpanel 10.0.0.2 (Zenny <garbytrash@...il.com>)
• DEFCON London - DC4420 - June CFP - Lightning talks!!! - Tuesday 25th June 2013 (Major Malfunction <majormal@...ate-radio.org>)

• Re: Botnet using Plesk vulnerability and takedown (kai <kai@...nn.net>)
• Re: Botnet using Plesk vulnerability and takedown (Gichuki John Chuksjonia <chuksjonia@...il.com>)
• XSS in store.apple.com (Stefan Schurtz <sschurtz@...nline.de>)
• List Charter (John Cartwright <johnc@...k.org.uk>)
• Re: Botnet using Plesk vulnerability and takedown (jtagtgc@...mail.org)

• Bluetooth Chat Connect v1.0 iOS - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
• Paypal Bug Bounty #12 - PayPal Manager Persistent Listing Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
• Linkedin Social Network - Persistent Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
• [SECURITY] [DSA 2703-1] subversion security update (Salvatore Bonaccorso <carnil@...ian.org>)
• Re: Botnet using Plesk vulnerability and takedown (kai <kai@...nn.net>)
• [SECURITY] [DSA 2704-1] mesa security update (Raphael Geissert <geissert@...ian.org>)

• CVE-2013-3739 Local File Inclusion in Weathermap <= 0.97C (Anthony Dubuissez <anthony.dubuissez@...era.fr>)
• Hack Cup 2013 (Nicolas Waisman <nicolas@...unityinc.com>)
• [SECURITY] [DSA 2705-1] pymongo security update (Giuseppe Iuculano <iuculano@...ian.org>)
• [SECURITY] [DSA 2706-1] chromium-browser security update (Giuseppe Iuculano <iuculano@...ian.org>)
• Why PRISM kills the cloud | Computerworld Blogs ("Ivan .Heca" <ivanhec@...il.com>)

• Re: Why PRISM kills the cloud | Computerworld Blogs (laurent gaffie <laurent.gaffie@...il.com>)
• Re: Why PRISM kills the cloud | Computerworld Blogs (Jeffrey Walton <noloader@...il.com>)
• Re: Why PRISM kills the cloud | Computerworld Blogs ("Ivan .Heca" <ivanhec@...il.com>)
• Re: Why PRISM kills the cloud | Computerworld Blogs (Kurt Buff <kurt.buff@...il.com>)
• Re: Why PRISM kills the cloud | Computerworld Blogs (Daniel Preussker <daniel@...ussker.net>)
• Re: [Dailydave] Hack Cup 2013 (Fyodor <fygrave@...il.com>)
• Re: Why PRISM kills the cloud | Computerworld Blogs (Justin Ferguson <jf@...co.net>)
• Re: Why PRISM kills the cloud | Computerworld Blogs (Lorenz Intichar <lorenz.intichar@...il.com>)
• WordPress 3.5.1, Denial of Service (Krzysztof Katowicz-Kowalewski <vnd@...h.net>)
• Fail2ban 0.8.9, Denial of Service (Apache rules only) (Krzysztof Katowicz-Kowalewski <vnd@...h.net>)
• [CVE-2013-3961] iSQL in php-agenda <= 2.2.8 (Anthony Dubuissez <anthony.dubuissez@...era.fr>)
• t2'13: Call for Papers 2013 (Helsinki / Finland) ("Tomi Tuominen" <tomi.tuominen@...fi>)
• Re: XSS in store.apple.com (Stefan Schurtz <sschurtz@...nline.de>)
• Re: Botnet using Plesk vulnerability and takedown ("dumMY's" <dummys1337@...il.com>)
• Re: Why PRISM kills the cloud | Computerworld Blogs (Reed Black <reed@...afeword.org>)
• Re: Why PRISM kills the cloud | Computerworld Blogs (Pablo <paa.listas@...il.com>)
• CORE-2013-0430 - Buffer overflow in Ubiquiti airCam RTSP service (CORE Security Technologies Advisories <advisories@...esecurity.com>)
• Re: Why PRISM kills the cloud | Computerworld Blogs (Philip Whitehouse <philip@...uk.com>)
• Re: Why PRISM kills the cloud | Computerworld Blogs (Justin Ferguson <jf@...co.net>)
• Re: Why PRISM kills the cloud | Computerworld Blogs (Justin Ferguson <jf@...co.net>)
• Re: Why PRISM kills the cloud | Computerworld Blogs ("Ivan .Heca" <ivanhec@...il.com>)

• Re: Why PRISM kills the cloud | Computerworld Blogs (Justin Ferguson <jf@...co.net>)
• Re: Why PRISM kills the cloud | Computerworld Blogs (Valdis.Kletnieks@...edu)
• Re: Why PRISM kills the cloud | Computerworld Blogs (Noel Butler <noel.butler@...ics.net>)
• Re: Why PRISM kills the cloud | Computerworld Blogs (Noel Butler <noel.butler@...ics.net>)
• Re: Why PRISM kills the cloud | Computerworld Blogs (Philip Whitehouse <philip@...uk.com>)
• Re: Why PRISM kills the cloud | Computerworld Blogs (Pedro Worcel <pedro@...cel.com>)
• Security Analysis of IP video surveillance cameras (Javier Repiso Sánchez <javier.repiso@...mail.com>)
• Re: Why PRISM kills the cloud | Computerworld Blogs (Zenny <garbytrash@...il.com>)
• [ MDVSA-2013:172 ] wireshark (security@...driva.com)
• Re: Security Analysis of IP video surveillance cameras (Leif Nixon <nixon@....liu.se>)
• Re: Why PRISM kills the cloud | Computerworld Blogs (laurent gaffie <laurent.gaffie@...il.com>)
• Re: Security Analysis of IP video surveillance cameras (Andrew Smith <jakx.ppr@...il.com>)
• Re: Security Analysis of IP video surveillance cameras (Paul Ammann <pta1@...tmail.us>)
• Re: Why PRISM kills the cloud | Computerworld Blogs (William Reyor <opticfiber@...il.com>)
• Re: Security Analysis of IP video surveillance cameras (Vitor Ventura <ventura.vitor@...il.com>)
• Re: Why PRISM kills the cloud | Computerworld Blogs (Michael Hallgren <m.hallgren@...e.fr>)
• [Security-news] SA-CONTRIB-2013-052 - Display Suite - Cross Site Scripting (XSS) (security-news@...pal.org)
• Re: Why PRISM kills the cloud | Computerworld Blogs ("Ivan .Heca" <ivanhec@...il.com>)
• Slideware of recent presentations about IPv6 security (Fernando Gont <fgont@...networks.com>)

• Re: Why PRISM kills the cloud | Computerworld Blogs (Alexander Arlt <fd@...ck5.de>)
• [CVE-2013-1768] Apache OpenJPA security vulnerability (Jeremy Bauer <jrbauer@...che.org>)
• [CVE-2013-3684] NextGEN Gallery 1.9.12 Arbitrary File Upload (Marcos Agüero <maguero@...sec.com>)
• Re: Security Analysis of IP video surveillance cameras (Marcos Agüero <maguero@...sec.com>)
• Re: Why PRISM kills the cloud | Computerworld Blogs (Justin Ferguson <jf@...co.net>)
• Yet another (unpaid and unfixed) Paypal XSS (samuel alp <samuelalp95@...il.com>)
• libpcap: 2 concurrent threads acquiring on the same interface (Descombes Thierry <descombt@...oo.com>)
• [SECURITY] [DSA 2707-1] dbus security update (Yves-Alexis Perez <corsac@...ian.org>)
• LSE Leading Security Experts GmbH - LSE-2013-06-13 - Avira AntiVir Engine ("LSE Leading Security Experts GmbH (Security Advisories)" <advisories@...xperts.de>)
• CFP Extended - OWASP InfoSec India Conference 2013 (Dhruv Soi <dhruv.soi@...sp.org>)
• Re: Lahana - Disposable VPN -> Tor bridges on EC2 (François <aifsair@...il.com>)
• [ MDVSA-2013:173 ] subversion (security@...driva.com)
• CFP Ongoing - www.SEC-T.org September 2013 (Mattias Bååth <mattias.baath@...dband.net>)
• PAYPAL BUG BOUNTY PROGRAM 2013 - UPDATES & TRANSPARENCY (Vulnerability Lab <research@...nerability-lab.com>)
• Re: PAYPAL BUG BOUNTY PROGRAM 2013 - UPDATES & TRANSPARENCY (Jeffrey Walton <noloader@...il.com>)

• SEC Consult SA-20130614-0 :: Multiple vulnerabilities in Siemens OpenScape Branch & Session Border Controller (SEC Consult Vulnerability Lab <research@...-cons…)
• [ MDVSA-2013:174 ] apache (security@...driva.com)
• 0day - Microsoft SharePoint (Cloud) - Persistent Exception-Handling Web Vulnerability (Vulnerability Lab <admin@...nerability-lab.com>)
• Android ICS "adb restore" directory traversal vulnerability (Ariel Berkman <aberkman@...il.com>)
• Maldives Telecom ISP - Remote SQL Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

• TaxiMonger 2.6.2; 2.3.3 (Android) - Persistent Application Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
• Facebook Mobile Bug Bounty #7 - Redirect Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
• Various vulnerabilities on dreamhack related sites (klondike <klondike@...ndike.es>)
• Microsoft Outlook Vulnerability: S/MIME Loss of Integrity (Defence in Depth <defenceindepth@...il.com>)
• DoS vulnerability in Mozilla Firefox and Microsoft Internet Explorer ("MustLive" <mustlive@...security.com.ua>)

• [SECURITY] [DSA 2708-1] fail2ban security update (Yves-Alexis Perez <corsac@...ian.org>)

• Defense in depth -- the Microsoft way (part 3) ("Stefan Kanthak" <stefan.kanthak@...go.de>)
• GreHack 2013 - CFP ends on June, 30 - Conf: Nov. 15, Grenoble, France ("F. Duchene" <adm-fabien.duchene@...hack.org>)
• Facebook Open URL Redirection Vulnerability 2013 (Arul Kumar <arul.xtronix@...il.com>)
• Re: Microsoft Outlook Vulnerability: S/MIME Loss of Integrity (Valdis.Kletnieks@...edu)
• Re: Microsoft Outlook Vulnerability: S/MIME Lossof Integrity ("ACROS Security Lists" <lists@...os.si>)
• [ MDVSA-2013:175 ] owncloud (security@...driva.com)
• Re: Microsoft Outlook Vulnerability: S/MIME Lossof Integrity (Valdis.Kletnieks@...edu)
• Re: Microsoft Outlook Vulnerability: S/MIMELossof Integrity ("ACROS Security Lists" <lists@...os.si>)
• [SECURITY] [DSA 2709-1] wireshark security update (Moritz Muehlenhoff <jmm@...ian.org>)
• Re: Microsoft Outlook Vulnerability: S/MIMELossof Integrity (Jeffrey Walton <noloader@...il.com>)
• Re: Microsoft Outlook Vulnerability: S/MIMELossof Integrity (Daniël W. Crompton <daniel.crompton@...il.com>)
• Re: Microsoft Outlook Vulnerability: S/MIMELossof Integrity (Jeffrey Walton <noloader@...il.com>)
• Apple and Wifi Hotspot Credentials Management Vulnerability (Jeffrey Walton <noloader@...il.com>)
• Re: Apple and Wifi Hotspot Credentials Management Vulnerability (Jeffrey Walton <noloader@...il.com>)
• Re: Microsoft Outlook Vulnerability: S/MIME Loss of Integrity (Patrick Dunstan <patrick.dunstan@...il.com>)
• Re: Microsoft Outlook Vulnerability: S/MIME Loss of Integrity (Jeffrey Walton <noloader@...il.com>)

• CVE-2013-2153: Apache Santuario C++ signature bypass vulnerability ("Cantor, Scott" <cantor.2@....edu>)
• CVE-2013-2154: Apache Santuario C++ stack overflow vulnerability ("Cantor, Scott" <cantor.2@....edu>)
• CVE-2013-2155: Apache Santuario C++ denial of service vulnerability ("Cantor, Scott" <cantor.2@....edu>)
• Re: CVE-2013-2156: Apache Santuario C++ heap overflow vulnerability ("Cantor, Scott" <cantor.2@....edu>)
• Re: Microsoft Outlook Vulnerability: S/MIME Loss of Integrity (Darius Jahandarie <djahandarie@...il.com>)
• Re: Microsoft Outlook Vulnerability: S/MIME Loss of Integrity (Alex <fd@...oo.de>)
• Canon Wireless Printer Disclosure & DoS (Matt Andreko <mandreko@...il.com>)
• Inkasso Trojaner Analysis - Part 1 (Curesec Research Team <crt@...esec.com>)
• Re: Full-Disclosure Digest, Vol 100, Issue 21 (Daniel Sichel <daniels@...derosatel.com>)
• [SECURITY] [DSA 2710-1] xml-security-c security update (Salvatore Bonaccorso <carnil@...ian.org>)
• Joomla crypto vulnerability (all versions) (Marco Beierer <marco.beierer@...ecurity.ch>)
• [SECURITY] [DSA 2628-2] nss-pam-ldapd update (Moritz Muehlenhoff <jmm@...ian.org>)
• DDoS attacks via other sites execution tool ("MustLive" <mustlive@...security.com.ua>)

• [SECURITY] [DSA 2698-1] tiff security update (Michael Gilbert <mgilbert@...ian.org>)
• User Credentials Leakage in Panda Cloud Office Protection (Buherátor <buherator@...il.com>)
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence TC and TE Software (Cisco Systems Product Security Incident Response Team <psirt@...co.…)
• [SECURITY] [DSA 2711-1] haproxy security update (Moritz Muehlenhoff <jmm@...ian.org>)
• [CVE-2013-0523] IBM WebSphere Commerce: Encrypted URL Parameter Vulnerable to Padding Oracle Attacks (VSR Advisories <advisories@...curity.com>)
• [Security-news] SA-CONTRIB-2013-053 - Login Security - Multiple Vulnerabilities (security-news@...pal.org)
• Re: Linkedin Social Network - Persistent Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
• [SECURITY] [DSA 2712-1] otrs2 security update (Florian Weimer <fw@...eb.enyo.de>)
• Re: Happy Birthday FreeBSD! Now you are 20 years old and your security is the same as 20 years ago... :) (Samuel Ports <emu@....so>)
• Happy Birthday FreeBSD! Now you are 20 years old and your security is the same as 20 years ago... :) (Hunger <hunger@...ger.hu>)
• Re: Happy Birthday FreeBSD! Now you are 20 years old and your security is the same as 20 years ago... :) ("Steven Hartland" <killing@...tiplay.co.uk>)

• Microsofts NEW Bug Bounty Program 2013 & BlueHat Competition Bonus Update! (Vulnerability Lab <research@...nerability-lab.com>)
• Re: Happy Birthday FreeBSD! Now you are 20 years old and your security is the same as 20 years ago... :) ("Mark Felder" <feld@...d.me>)
• Re: Microsofts NEW Bug Bounty Program 2013 & BlueHat Competition Bonus Update! (Vulnerability Lab <research@...nerability-lab.com>)
• FPD, XSS and CS vulnerabilities in Slash WP theme for WordPress ("MustLive" <mustlive@...security.com.ua>)
• Re: Happy Birthday FreeBSD! Now you are 20 years old and your security is the same as 20 years ago... :) (Valdis.Kletnieks@...edu)
• Re: Happy Birthday FreeBSD! Now you are 20 years old and your security is the same as 20 years ago... :) (Kurt Buff <kurt.buff@...il.com>)

• [DoS] - Real-debrid.fr Torrent2ddl (Xpo Xpo <smashxpo@...il.com>)
• Re: Happy Birthday FreeBSD! Now you are 20 years old and your security is the same as 20 years ago... :) (Georgi Guninski <guninski@...inski.com>)
• Re: Happy Birthday FreeBSD! Now you are 20 years old and your security is the same as 20 years ago... :) (Jeffrey Walton <noloader@...il.com>)
• DC4420 - London DEFCON - June meet - Lightning Talks!!! - Tuesday 25th June 2013 (Tony Naggs <tonynaggs@...il.com>)
• How to lock up a VirtualBox host machine with a guest using tracepath over virtio-net network interface (Thomas Dreibholz <dreibh@...ula.no>)
• Re: Happy Birthday FreeBSD! Now you are 20 years old and your security is the same as 20 years ago... :) (Hunger <hunger@...ger.hu>)
• [Newbie] How to search in all full-disclosure@...ts.grok.org.uk (JOSE DAMICO <jd.comment@...il.com>)
• Re: [WEB SECURITY] DDoS attacks via other sites execution tool (Superman <rarrison@...il.com>)
• Exploit: McAfee ePolicy 0wner (ePowner) – Preview (Jérôme Nokin <jerome.nokin@...il.com>)
• Re: [Newbie] How to search in all full-disclosure@...ts.grok.org.uk (Ryan Dewhurst <ryandewhurst@...il.com>)
• Re: [Newbie] How to search in all full-disclosure@...ts.grok.org.uk (Homer Parker <hparker@...ershut.net>)
• Re: [Newbie] How to search in all full-disclosure@...ts.grok.org.uk (Carlos Pantelides <carlos_pantelides@...oo.com>)
• Re: DDoS attacks via other sites execution tool (Julius Kivimäki <julius.kivimaki@...il.com>)
• Re: [Newbie] How to search in all full-disclosure@...ts.grok.org.uk (Jeffrey Walton <noloader@...il.com>)
• Re: How to lock up a VirtualBox host machine with a guest using tracepath over virtio-net network interface (Valdis.Kletnieks@...edu)
• DAVOSET v.1.0.6 ("MustLive" <mustlive@...security.com.ua>)
• Re: Exploit: McAfee ePolicy 0wner (ePowner) – Preview (Hurgel Bumpf <l0rd_lunatic@...oo.com>)

• TOTP and clock advancement (Erik Kamerling <ekamerling@...istici.org>)
• Re: Happy Birthday FreeBSD! Now you are 20 years old and your security is the same as 20 years ago... :) (Wojciech Puchar <wojtek@...tek.tensor.gdynia.pl>)
• Re: [Newbie] How to search in all full-disclosure@...ts.grok.org.uk (Kingcope <isowarez.isowarez.isowarez@...glemail.com>)
• Facebook Information Disclosure (Packet Storm <packet@...ketstormsecurity.com>)
• DAVOSET v.1.0.7 ("MustLive" <mustlive@...security.com.ua>)

• Re: Happy Birthday FreeBSD! Now you are 20 years old and your security is the same as 20 years ago... :) (Kim Henriksen <kh@...mp.at>)
• HKSAR Government issues statement on Edward Snowden (Kim Henriksen <kh@...mp.at>)
• SolusVM WHMCS module privilege escalation, also libcurl vuln? (Sven Slootweg <admin@...to.net>)
• Re: SolusVM WHMCS module privilege escalation, also libcurl vuln? (Źmicier Januszkiewicz <gauri@....by>)
• [ MDVSA-2013:176 ] kernel (security@...driva.com)
• CVE-2013-3685: Root exploit for LG Android devices (target sprite software's backup daemon) (Justin Case <jcase@...ninglogic.com>)
• [SECURITY] [DSA 2713-1] curl security update (Salvatore Bonaccorso <carnil@...ian.org>)

• SEC Consult SA-20130625-0 :: Multiple vulnerabilities in IceWarp Mail Server (SEC Consult Vulnerability Lab <research@...-consult.com>)
• [NSE] Release of nmap nse vulscan 1.0 (Marc Ruef <marc.ruef@...putec.ch>)
• [ MDVSA-2013:177 ] dbus (security@...driva.com)
• [ MDVSA-2013:178 ] nfs-utils (security@...driva.com)
• Magnolia CMS multiple access control vulnerabilities (Adrian Furtuna <adif2k8@...il.com>)
• [SECURITY] [DSA 2714-1] kfreebsd-9 security update (Moritz Muehlenhoff <jmm@...ian.org>)

• Re: How to lock up a VirtualBox host machine with a guest using tracepath over virtio-net network interface (Źmicier Januszkiewicz <gauri@....by>)
• Re: How to lock up a VirtualBox host machine with a guest using tracepath over virtio-net network interface (Agostino Sarubbo <ago@...too.org>)
• [SECURITY] [DSA 2716-1] iceweasel security update (Moritz Muehlenhoff <jmm@...ian.org>)
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Email Security Appliance (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Web Security Appliance (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Content Security Management Appliance (Cisco Systems Product Security Incident Response Team <psirt@…)
• Cisco Security Advisory: Cisco ASA Next-Generation Firewall Fragmented Traffic Denial of Service Vulnerability (Cisco Systems Product Security Incident Respon…)
• [ MDVSA-2013:179 ] firefox (security@...driva.com)
• [Security-news] SA-CONTRIB-2012-136 - Apache Solr Search Autocomplete - Cross Site Scripting (XSS) (security-news@...pal.org)
• [Security-news] SA-CONTRIB-2013-054 - Fast Permissions Administration - Access Bypass (security-news@...pal.org)
• Re: How to lock up a VirtualBox host machine with a guest using tracepath over virtio-net network interface (Nick Boyce <nick.boyce@...il.com>)

• CVE-2013-2210 ("Cantor, Scott" <cantor.2@....edu>)
• [SECURITY] [DSA 2715-1] puppet security update (Raphael Geissert <geissert@...ian.org>)
• Re: How to lock up a VirtualBox host machine with a guest using tracepath over virtio-net network interface (Źmicier Januszkiewicz <gauri@....by>)
• [ MDVSA-2013:180 ] curl (security@...driva.com)
• [ MDVSA-2013:181 ] mesa (security@...driva.com)
• [ MDVSA-2013:182 ] mesa (security@...driva.com)
• [ MDVSA-2013:183 ] java-1.7.0-openjdk (security@...driva.com)
• [ MDVSA-2013:184 ] perl-Dancer (security@...driva.com)
• [ MDVSA-2013:185 ] perl-Module-Signature (security@...driva.com)
• Denial of Service in WordPress ("MustLive" <mustlive@...security.com.ua>)
• Re: Denial of Service in WordPress (Ryan Dewhurst <ryandewhurst@...il.com>)
• Please update your plant. On recent WinCC SCADA fixes (scadastrangelove <scadastrangelove@...il.com>)
• Re: Denial of Service in WordPress ("MustLive" <mustlive@...security.com.ua>)
• Re: Denial of Service in WordPress (Julius Kivimäki <julius.kivimaki@...il.com>)
• Sony Playstation Network Account Service System - Password Reset (Session) Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
• eFile Wifi Transfer Manager 1.0 iOS - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
• Mobile USB Drive HD 1.2 - Arbitrary File Upload Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
• Barracuda CudaTel 2.6.02.04 - Persistent Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
• Barracuda CudaTel 2.6.02.04 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)

• Re: Denial of Service in WordPress (Jann Horn <jann@...jh.net>)
• Re: Denial of Service in WordPress (Michal Zalewski <lcamtuf@...edump.cx>)
• [ MDVSA-2013:186 ] puppet (security@...driva.com)
• [SECURITY] [DSA 2717-1] xml-security-c security update (Salvatore Bonaccorso <carnil@...ian.org>)
• Abusing Windows 7 Recovery Process (Anastasios Monachos <anastasiosm@...il.com>)
• Re: Denial of Service in WordPress ("MustLive" <mustlive@...security.com.ua>)
• DAVOSET v.1.0.8 ("MustLive" <mustlive@...security.com.ua>)

• Re: Denial of Service in WordPress (Jann Horn <jann@...jh.net>)
• Re: Abusing Windows 7 Recovery Process (Alex <fd@...oo.de>)
• Re: Denial of Service in WordPress (Julius Kivimäki <julius.kivimaki@...il.com>)
• Windows XP cmd.exe crash (Pedro Laguna <pedlagdur@...mail.co.uk>)
• tor vulnerabilities? (Neel Rowhoiser <neel.rowhoiser@...look.com>)
• Re: Abusing Windows 7 Recovery Process (sec <sec@...tsploit.me>)
• Re: Abusing Windows 7 Recovery Process (Grandma Eubanks <tborland1@...il.com>)
• Re: Denial of Service in WordPress ("MustLive" <mustlive@...security.com.ua>)
• Re: Denial of Service in WordPress (Michal Zalewski <lcamtuf@...edump.cx>)
• WordPress Denial of Service exploit ("MustLive" <mustlive@...security.com.ua>)

• Re: tor vulnerabilities? (Valdis.Kletnieks@...edu)
• GreHack 2013 - CFP EXTENDED TO JULY, 16 - Conf: Nov. 15, Grenoble, France ("F. Duchene" <adm-fabien.duchene@...hack.org>)
• Multiple vulnerabilities found in NSA website (macfags@...onicle.su)
• Re: Denial of Service in WordPress (Cool Hand Luke <coolhandluke@...lhandluke.org>)
• Re: Abusing Windows 7 Recovery Process (Cool Hand Luke <coolhandluke@...lhandluke.org>)
• Content Spoofing vulnerabilities in TinyMCE and WordPress ("MustLive" <mustlive@...security.com.ua>)
• Re: Multiple vulnerabilities found in NSA website (Kingcope <isowarez.isowarez.isowarez@...glemail.com>)
• HQ SQLi's found by hack_addicted.pt ("hack_addicted .pt" <hack.addicted.ptt@...il.com>)

259 messages

Powered by blists - more mailing lists