full-disclosure mailing list - 2013/07

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2013/07

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹ 7	² 9	³ 9	⁴ 12	⁵ 13	⁶ 6	⁷
⁸ 11	⁹ 5	¹⁰ 25	¹¹ 16	¹² 4	¹³ 17	¹⁴ 9
¹⁵ 8	¹⁶ 8	¹⁷ 11	¹⁸ 7	¹⁹ 5	²⁰ 7	²¹ 4
²² 8	²³ 11	²⁴ 18	²⁵ 9	²⁶ 15	²⁷ 6	²⁸ 6
²⁹ 4	³⁰ 3	³¹ 4

Messages by day:

July 1 (7 messages)

Re: Windows XP cmd.exe crash (Joshua Thomas <rappercrazzy@...il.com>)
Inkasso Trojaner Analysis - Part 2 (Curesec Research Team <crt@...esec.com>)
Re: Abusing Windows 7 Recovery Process (some one <s3cret.squirell@...il.com>)
[SECURITY] CVE-2013-1777: Apache Geronimo 3 RMI classloader exposure (Jarek Gawor <jgawor@...il.com>)
[CVE-2013-4694] WinAmp v5.63 gen_jumpex.dll and ml_local.dll Multiple Buffer Overflows (Inshell Security <info@...hell.net>)
[CVE-2013-4695] WinAmp v5.63 gen_ff.dll links.xml Value Parsing Invalid Pointer Dereference (Inshell Security <info@...hell.net>)
Skype for Android Lockscreen Bypass (Pulser on XDA <pulser@...-developers.com>)

July 2 (9 messages)

Cross-Site Scripting vulnerabilities in WordPress ("MustLive" <mustlive@...security.com.ua>)
[ MDVSA-2013:187 ] apache-mod_security (security@...driva.com)
[ MDVSA-2013:188 ] otrs (security@...driva.com)
[ MDVSA-2013:189 ] wordpress (security@...driva.com)
[ MDVSA-2013:190 ] autotrace (security@...driva.com)
[ MDVSA-2013:191 ] fail2ban (security@...driva.com)
Re: [ MDVSA-2013:191 ] fail2ban (adam <adam@...sy.net>)
Re: Skype for Android Lockscreen Bypass (Pulser on XDA <pulser@...-developers.com>)
[ MDVSA-2013:192 ] php-radius (security@...driva.com)

July 3 (9 messages)

[SECURITY] [DSA 2718-1] wordpress security update (Yves-Alexis Perez <corsac@...ian.org>)
Nokia 1280 DoS Vulnerability (John Parker <unownsec@...il.com>)
Re: Skype for Android Lockscreen Bypass (Ryan Dewhurst <ryandewhurst@...il.com>)
Re: tor vulnerabilities? (Georgi Guninski <guninski@...inski.com>)
Re: tor vulnerabilities? (Valdis.Kletnieks@...edu)
Re: tor vulnerabilities? (Valdis.Kletnieks@...edu)
Re: tor vulnerabilities? (adam <adam@...sy.net>)
Re: tor vulnerabilities? (coderman <coderman@...il.com>)
Re: DDoS attacks via other sites execution tool ("MustLive" <mustlive@...security.com.ua>)

July 4 (12 messages)

Re: tor vulnerabilities? (Georgi Guninski <guninski@...inski.com>)
Re: tor vulnerabilities? (Michael T <mt2410689@...il.com>)
WordPress User Account Information Leak / Secunia Advisory SA23621 (Sven Kieske <svenkieske@...il.com>)
Re: WordPress User Account Information Leak / Secunia Advisory SA23621 ("\"><script>alert(1)</script>" <ryandewhurst@...il.com>)
Re: WordPress User Account Information Leak / Secunia Advisory SA23621 (Ivan Carlos <icarlos@...rlos.net>)
cypherpunks celebrate the fourth writing code ... ; ) (coderman <coderman@...il.com>)
Re: tor vulnerabilities? (Alex <fd@...oo.de>)
Mobile Atlas Creator 1.9.12 - Persistent Command Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
AVAST Internet Security Suite - Persistent Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
AVAST Universal Core Installer - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
AVAST Antivirus v8.0.1489 - Multiple Core Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Paypal Bug Bounty #102 QR Dev Labs - Auth Bypass Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

July 5 (13 messages)

LSE Leading Security Experts GmbH - LSE-2013-07-03 - rsyslog ElasticSearch Plugin ("LSE Leading Security Experts GmbH (Security Advisories)" <advisories@...xp…)
Re: WordPress User Account Information Leak / Secunia Advisory SA23621 (Harry Metcalfe <harry@....com>)
eResourcePlanner Authentication Bypass/SQL Injection (xnite@...te.org)
Re: eResourcePlanner Authentication Bypass/SQL Injection (adam <adam@...sy.net>)
Re: WordPress User Account Information Leak / Secunia Advisory SA23621 (Maksymilian <max@...t.cx>)
Re: eResourcePlanner Authentication Bypass/SQL Injection (xnite@...te.org)
Re: WordPress User Account Information Leak / Secunia Advisory SA23621 (Dan Ballance <tzewang.dorje@...il.com>)
Re: WordPress User Account Information Leak / Secunia Advisory SA23621 (adam <adam@...sy.net>)
Re: WordPress User Account Information Leak / Secunia Advisory SA23621 (Harry Metcalfe <harry@....com>)
Re: WordPress User Account Information Leak / Secunia Advisory SA23621 (Dan Ballance <tzewang.dorje@...il.com>)
Re: eResourcePlanner Authentication Bypass/SQL Injection (adam <adam@...sy.net>)
Re: WordPress User Account Information Leak / Secunia Advisory SA23621 (Maksymilian <max@...t.cx>)
XSS and FPD vulnerabilities in Search 'N Save for WordPress ("MustLive" <mustlive@...security.com.ua>)

July 6 (6 messages)

Maltego Radium ?XSS? (xnite@...te.org)
AOL Instant Messenger Binary File Planting PoC (Marshall Whittaker <marshallwhittaker@...il.com>)
Re: AVAST Internet Security Suite - Persistent Vulnerabilities (security curmudgeon <jericho@...rition.org>)
[SECURITY] [DSA 2720-1] icedove security update (Moritz Muehlenhoff <jmm@...ian.org>)
Re: WordPress User Account Information Leak / Secunia Advisory SA23621 (Tavis Ormandy <taviso@...xchg8b.com>)
DAVOSET v.1.0.9 ("MustLive" <mustlive@...security.com.ua>)

July 8 (11 messages)

Avira Analysis Web Service - SQL Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Re: WordPress User Account Information Leak / Secunia Advisory SA23621 (Alex <fd@...oo.de>)
Re: WordPress User Account Information Leak / Secunia Advisory SA23621 (Ryan Dewhurst <ryandewhurst@...il.com>)
Re: WordPress User Account Information Leak / Secunia Advisory SA23621 (Dan Ballance <tzewang.dorje@...il.com>)
Advisory: XMLHttpRequest HTTP Referer Header Faking (LIAD Mizrachi <liadmz@...il.com>)
[SECURITY] [DSA 2721-1] nginx security update (Nico Golde <nion@...ian.org>)
Re: Abusing Windows 7 Recovery Process (Fabien DUCHENE <f.duchene@...-online.fr>)
Bus.co.il - Route.asp Cross-site Scripting vulnerability (LIAD Mizrachi <liadmz@...il.com>)
Re: Abusing Windows 7 Recovery Process (some one <s3cret.squirell@...il.com>)
HQ SQLi's found by hack_addicted.pt ("hack_addicted .pt" <hack.addicted.ptt@...il.com>)
Re: Abusing Windows 7 Recovery Process (sec <sec@...tsploit.me>)

July 9 (5 messages)

Re: Abusing Windows 7 Recovery Process (Chris Arg <grkcharge@...il.com>)
SEC Consult SA-20130709-0 :: Denial of service vulnerability in Apache CXF (SEC Consult Vulnerability Lab <research@...-consult.com>)
[HITB-Announce] REMINDER: #HITB2013KUL CFP Closes 25th July (Hafez Kamal <aphesz@...kinthebox.org>)
CS, XSS and FPD vulnerabilities in WordPress ("MustLive" <mustlive@...security.com.ua>)
VLC media player MKV Parsing POC (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)

July 10 (25 messages)

(CVE-2013-1059) Linux Kernel libceph Null Pointer Dereference Vulnerability (hkpco <chanam.park@...co.kr>)
Re: VLC media player MKV Parsing POC (Edward Tivrusky <etivrusky@...l.ru>)
Ground Zero Summit - Call For Papers (submit cfp <submitcfp@....org>)
Re: Abusing Windows 7 Recovery Process (some one <s3cret.squirell@...il.com>)
Re: VLC media player MKV Parsing POC (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
Re: VLC media player MKV Parsing POC (Mario Vilas <mvilas@...il.com>)
Re: VLC media player MKV Parsing POC (kaveh ghaemmaghami <kavehghaemmaghami@...glemail.com>)
Re: VLC media player MKV Parsing POC (Źmicier Januszkiewicz <gauri@....by>)
Re: Full-Disclosure Digest, Vol 101, Issue 10 (Sachin Shinde <sachinshinde1102@...il.com>)
Re: Full-Disclosure Digest, Vol 101, Issue 10 (Sachin Shinde <sachinshinde1102@...il.com>)
Re: Multiple vulnerabilities found in NSA website (Marco Ermini <marco.ermini@...il.com>)
Re: Abusing Windows 7 Recovery Process (Gregory Boddin <gregory@...hine.net>)
[Security-news] SA-CONTRIB-2013-056 - Stage File Proxy - Denial of Service (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-055 - Hatch - Cross Site Scripting (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-057 - TinyBox - Cross Site Scripting (XSS) (security-news@...pal.org)
Air Drive Plus v2.4 iOS - Arbitrary File Upload Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
OpenSSH User Enumeration Time-Based Attack (Curesec Research Team <crt@...esec.com>)
VULNERABLE (3rd party) components in Adobe Reader 11.0.03, and dangling reference to Acrobat.exe ("Stefan Kanthak" <stefan.kanthak@...go.de>)
nginx 1.3.9/1.4.0 x86 brute force remote exploit (CVE-2013-2028) (king cope <isowarez.isowarez.isowarez@...glemail.com>)
[Foreground Security 2013-001]: Joomla AICONTACTSAFE 2.0.19 Extension Cross-Site Scripting (XSS) vulnerability (Jose Carlos de Arriba <jcarriba@...egroundsecur…)
List Charter (John Cartwright <johnc@...k.org.uk>)
Re: VULNERABLE (3rd party) components in Adobe Reader 11.0.03, and dangling reference to Acrobat.exe (sec <sec@...tsploit.me>)
Re: Abusing Windows 7 Recovery Process (some one <s3cret.squirell@...il.com>)
Re: Abusing Windows 7 Recovery Process (adam <adam@...sy.net>)
Re: Abusing Windows 7 Recovery Process (some one <s3cret.squirell@...il.com>)

July 11 (16 messages)

Re: OpenSSH User Enumeration Time-Based Attack (Jason Hellenthal <jhellenthal@...aix.net>)
Re: OpenSSH User Enumeration Time-Based Attack (Swair Mehta <swairmehta@...il.com>)
[SECURITY] [DSA 2719-1] poppler security update (Michael Gilbert <mgilbert@...ian.org>)
[ MDVSA-2013:193 ] apache (security@...driva.com)
XSS Vulnerabilities in MintBoard (Netsparker Advisories <advisories@...itunasecurity.com>)
XSS and SQL Injection Vulnerabilities in MiniBB (Netsparker Advisories <advisories@...itunasecurity.com>)
[ MDVSA-2013:194 ] kernel (security@...driva.com)
Facebook Url Redirection Vuln. (CANSIN YILDIRIM <canyildirim@...edu.tr>)
Re: Facebook Url Redirection Vuln. (Alex <fd@...oo.de>)
Re: nginx 1.3.9/1.4.0 x86 brute force remote exploit (CVE-2013-2028) (アドリアンヘンドリック <unixfreaxjp22@...il.com>)
Re: nginx 1.3.9/1.4.0 x86 brute force remote exploit (CVE-2013-2028) (Grandma Eubanks <tborland1@...il.com>)
Re: nginx 1.3.9/1.4.0 x86 brute force remote exploit (CVE-2013-2028) (Valdis.Kletnieks@...edu)
Re: OpenSSH User Enumeration Time-Based Attack (Jann Horn <jann+libev@...jh.net>)
Internet Explorer 9 Status Bar Obfuscation Clickjacking ("metropolis haxor" <metrOpolis@...uxmail.org>)
Re: Facebook Url Redirection Vuln. (Juan Carlos sec <winsec@...e.com>)
Fwd: Facebook Restricted Open redirection issue as attacker must be friend of victim (vinesh redkar <vineshredkar89@...il.com>)

July 12 (4 messages)

Re: Abusing Windows 7 Recovery Process (Alex <fd@...oo.de>)
XSS Vulnerabilities in Serendipity (Netsparker Advisories <advisories@...itunasecurity.com>)
Re: Abusing Windows 7 Recovery Process (Chris Arg <grkcharge@...il.com>)
XSS, CS and FPD vulnerabilities in I Love It theme for WordPress ("MustLive" <mustlive@...security.com.ua>)

July 13 (17 messages)

Re: Abusing Windows 7 Recovery Process (Alex <fd@...oo.de>)
Re: Abusing Windows 7 Recovery Process (Alex <fd@...oo.de>)
Security Mistakes That We And Others Have Made (Aux Browser Team <team@...browser.com>)
[Foreground Security 2013-002]: Corda Path Disclosure and XSS (Adam Willard <awillard@...egroundsecurity.com>)
Re: OpenSSH User Enumeration Time-Based Attack (Curesec Research Team <crt@...esec.com>)
TWSL2013-018: Multiple Vulnerabilities in OpenEMR (Trustwave Advisories <TrustwaveAdvisories@...stwave.com>)
Re: OpenSSH User Enumeration Time-Based Attack (security curmudgeon <jericho@...rition.org>)
Re: Abusing Windows 7 Recovery Process (Julius Kivimäki <julius.kivimaki@...il.com>)
Re: OpenSSH User Enumeration Time-Based Attack (Florian Reinholz <reinholz@...p.de>)
XSS and CS vulnerabilities in TinyMCE Image Manager ("MustLive" <mustlive@...security.com.ua>)
Botconf 2013 - Call for short talks - Deadline Aug 31 (Eric Freyssinet <eric.freyssinet@...il.com>)
Re: OpenSSH User Enumeration Time-Based Attack (Grandma Eubanks <tborland1@...il.com>)
Re: Abusing Windows 7 Recovery Process (Valdis.Kletnieks@...edu)
DAVOSET v.1.1 ("MustLive" <mustlive@...security.com.ua>)
Re: Abusing Windows 7 Recovery Process (Valdis.Kletnieks@...edu)
Re: Abusing Windows 7 Recovery Process (Alex <fd@...oo.de>)
Re: Abusing Windows 7 Recovery Process (Gage Bystrom <themadichib0d@...il.com>)

July 14 (9 messages)

Re: Abusing Windows 7 Recovery Process (Gage Bystrom <themadichib0d@...il.com>)
Abusing Windows 7 Recovery Process‏ (whizzbang@...h.ai)
Re: Abusing Windows 7 Recovery Process (Moshe Israel <moshe.israel@...ee.co.il>)
Re: Abusing Windows 7 Recovery Process (Moshe Israel <moshe.israel@...ee.co.il>)
Re: Abusing Windows 7 Recovery Process (Moshe Israel <moshe.israel@...ee.co.il>)
Re: Abusing Windows 7 Recovery Process (Alex <fd@...oo.de>)
Re: Abusing Windows 7 Recovery Process‏ (Alex <fd@...oo.de>)
[waraxe-2013-SA#106] - Multiple Vulnerabilities in Saurus CMS 4.7.1 (Janek Vind <come2waraxe@...oo.com>)
Re: Abusing Windows 7 Recovery Process‏ (whizzbang@...h.ai)

July 15 (8 messages)

Ruxcon 2013 Final Call For Papers (cfp@...con.org.au)
[ MDVSA-2013:195 ] php (security@...driva.com)
How I found CVE-2013-1310 in IE6 and IE7 (Yuhong Bao <yuhongbao_386@...mail.com>)
[ MDVSA-2013:196 ] java-1.6.0-openjdk (security@...driva.com)
[SECURITY] [DSA 2722-1] openjdk-7 security update (Moritz Muehlenhoff <jmm@...ian.org>)
Squid-3.3.5 DoS PoC (king cope <isowarez.isowarez.isowarez@...glemail.com>)
CVE-2013-4788 - Eglibc PTR MANGLE bug (Hector Marco <hecmargi@....es>)
Re: CVE-2013-4788 - Eglibc PTR MANGLE bug (Hector Marco <hecmargi@....es>)

July 16 (8 messages)

Barracuda CudaTel 2.6.02.040 - Client Side Cross Site Scripting Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Nikon CoolPix L Series Fw1.0 - Information Disclosure Issue (Vulnerability Lab <research@...nerability-lab.com>)
FTP Sprite v1.2.1 iOS - Persistent Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Olive File Manager v1.0.1 iOS - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Dell Kace 1000 SMA v5.4.70402 - Persistent Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Microsoft ignores serious MSXML update issue (Zbygniew Prlwytzkofsky <prlwytzkofsky@...oo.com>)
[ANN] Struts 2.3.15.1 GA (fast track | security | critical) (Rene Gielen <rgielen@...che.org>)
Multiple vulnerabilities in Googlemaps plugin for Joomla ("MustLive" <mustlive@...security.com.ua>)

July 17 (11 messages)

Silverstripe 3 DOS vulnerability (Chris <chris@...bznetwork.com>)
Pre-Auth remote crash in NanoSSH on Avaya Ethernet Routing switch (ERS) 5698 and 5698-PoE (Marcus Meissner <meissner@...e.de>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified Communications Manager (Cisco Systems Product Security Incident Response Team <psirt@...co.c…)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Intrusion Prevention System Software (Cisco Systems Product Security Incident Response Team <psirt@c…)
[SECURITY] [DSA 2723-1] php5 security update (Florian Weimer <fw@...eb.enyo.de>)
WiFly 1.0 Pro iOS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Flux Player v3.1.0 iOS - File Include & Arbitrary File Upload Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Barracuda CudaTel 2.6.02.04 - Multiple Client Side Cross Site Vulnerabilities (Bug Bounty #17) (Vulnerability Lab <research@...nerability-lab.com>)
[Security-news] SA-CONTRIB-2013-058 - MRBS - Abandoned - Mutliple vulnerabilities (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-059 - Hostmaster (Aegir) - Access Bypass (security-news@...pal.org)
ePhoto Transfer v1.2.1 iOS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)

July 18 (7 messages)

Dell PacketTrap MSP RMM 6.6.x - Multiple Persistent Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Dell PacketTrap PSA 7.1 - Multiple Persistent Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[SE-2012-01] New Reflection API affected by a known 10+ years old attack (Security Explorations <contact@...urity-explorations.com>)
Re: Multiple vulnerabilities in Googlemaps plugin for Joomla (Źmicier Januszkiewicz <gauri@....by>)
[SECURITY] [DSA 2725-1] tomcat6 security update (Moritz Muehlenhoff <jmm@...ian.org>)
Re: DDoS attacks via other sites execution tool ("MustLive" <mustlive@...security.com.ua>)
[SECURITY] [DSA 2724-1] chromium-browser security update (Michael Gilbert <mgilbert@...ian.org>)

July 19 (5 messages)

DeepSec 2013 - Call for Papers - REMINDER (deepsec@...psec.net)
SEC Consult SA-20130719-0 :: Multiple vulnerabilities in Sybase EAServer (SEC Consult Vulnerability Lab <research@...-consult.com>)
AFU and XSS vulnerabilities in TinyMCE Image Manager ("MustLive" <mustlive@...security.com.ua>)
Flash JIT and spraying info leak gadgets (Fermín J. Serna <fjserna@...il.com>)
Download Lite v4.3 iOS - Persistent File Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

July 20 (7 messages)

Barracuda LB, SVF, WAF & WEF - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Barracuda CudaTel 2.6.02.040 - Remote SQL Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
DAVOSET v.1.1.1 ("MustLive" <mustlive@...security.com.ua>)
Re: [SE-2012-01] New Reflection API affected by a known 10+ years old attack (Security Explorations <contact@...urity-explorations.com>)
Re: [SE-2012-01] New Reflection API affected by a known 10+ years old attack (Jeffrey Walton <noloader@...il.com>)
Re: [SE-2012-01] New Reflection API affected by a known 10+ years old attack (Bob iPhone Kim <evdo.hsdpa@...il.com>)
Re: [SE-2012-01] New Reflection API affected by a known 10+ years old attack (Jeffrey Walton <noloader@...il.com>)

July 21 (4 messages)

Re: [SE-2012-01] New Reflection API affected by a known 10+ years old attack (Security Explorations <contact@...urity-explorations.com>)
[CVE-2013-2137] Apache OFBiz XSS vulnerability in the "View Log" screen of the Webtools application (Jacopo Cappellato <jacopoc@...che.org>)
[CVE-2013-2250] Apache OFBiz Nested expression evaluation allows remote users to execute arbitrary UEL functions in OFB… (Jacopo Cappellato <jacopoc@...che.org>)
Re: [SE-2012-01] New Reflection API affected by a known 10+ years old attack (Michael Schierl <schierlm@....de>)

July 22 (8 messages)

Barracuda CudaTel 2.6.02.040 - SQL Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Dell Kace 1000 SMA 5.4.742 - SQL Injection Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Collabtive multiple vulnerabilities. (Enrico Cinquini <enrico.cinquini@...il.com>)
Re: [SE-2012-01] New Reflection API affected by a known 10+ years old attack (Georgi Guninski <guninski@...inski.com>)
CORE-2013-0705 - XnView Buffer Overflow Vulnerability (CORE Advisories Team <advisories@...esecurity.com>)
CORE-2013-0701 - Artweaver Buffer Overflow Vulnerability (CORE Advisories Team <advisories@...esecurity.com>)
Re: [SE-2012-01] New Reflection API affected by a known 10+ years old attack (Florian Weimer <fw@...eb.enyo.de>)
Photo Server 2.0 iOS - Multiple Critical Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)

July 23 (11 messages)

Fwd: Re: Collabtive multiple vulnerabilities. (Enrico Cinquini <enrico.cinquini@...il.com>)
Defense in depth -- the Microsoft way (part 4) ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Re: Collabtive multiple vulnerabilities. (security curmudgeon <jericho@...rition.org>)
Top Information Security Consultants to Hire -- WANTED (Bob iPhone Kim <evdo.hsdpa@...il.com>)
[ MDVSA-2013:197 ] mysql (security@...driva.com)
CFP 6th ACM Workshop on Artificial Intelligence and Security (AISEC) (Konrad Rieck <konrad.rieck@...-goettingen.de>)
nginx exploit documentation, about a generic way to exploit Linux targets (king cope <isowarez.isowarez.isowarez@...glemail.com>)
Linux reveals IO timing data (Jann Horn <jann@...jh.net>)
CORE-2013-0613 - FOSCAM IP-Cameras Improper Access Restrictions (CORE Advisories Team <advisories@...esecurity.com>)
Re: Top Information Security Consultants to Hire -- WANTED (Valdis.Kletnieks@...edu)
Re: Top Information Security Consultants to Hire -- WANTED (Daniël W. Crompton <daniel.crompton@...il.com>)

July 24 (18 messages)

Re: Top Information Security Consultants to Hire -- WANTED (Travis Biehn <tbiehn@...il.com>)
Re: nginx exploit documentation, about a generic way to exploit Linux targets (Albert Puigsech Galicia <albert@...gsech.com>)
Where and how to report Dropbox vulnerabilities. (FUN) (MG <vuln@...ko-security.com>)
[ MDVSA-2013:198 ] libxml2 (security@...driva.com)
Re: nginx exploit documentation, about a generic way to exploit Linux targets (Albert Puigsech Galicia <albert@...gsech.com>)
Re: Where and how to report Dropbox vulnerabilities. (FUN) (MG <vuln@...ko-security.com>)
Re: Where and how to report Dropbox vulnerabilities. (FUN) (Mysterie <kajusska@...il.com>)
Re: Top Information Security Consultants to Hire -- WANTED (Gary Baribault <gary@...ibault.net>)
Re: Top Information Security Consultants to Hire -- WANTED (Vulnerability Lab <research@...nerability-lab.com>)
Re: Where and how to report Dropbox vulnerabilities. (FUN) (Feighen Oosterbroek <feighen@...il.com>)
Re: Top Information Security Consultants to Hire -- WANTED (Julius Kivimäki <julius.kivimaki@...il.com>)
Phishing Google Wallet and Paypal by abusing WhatsApp (Curesec Research Team <crt@...esec.com>)
[Security-news] SA-CONTRIB-2013-060 - Scald - Cross Site Scripting (XSS) (security-news@...pal.org)
Cisco Security Advisory: Multiple Vulnerabilities in the Cisco Video Surveillance Manager (Cisco Systems Product Security Incident Response Team <psirt@...co.c…)
iPic Sharp v1.2.1 Wifi iOS - Persistent Foldername Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Re: Top Information Security Consultants to Hire -- WANTED (Bob iPhone Kim <evdo.hsdpa@...il.com>)
Re: Top Information Security Consultants to Hire -- WANTED (Gary Baribault <gary@...ibault.net>)
CVE-2013-3665 - AutoCAD DWG-AC1021 Memory Corruption (Felipe Manzano <feliam@...amuse.com>)

July 25 (9 messages)

Re: Top Information Security Consultants to Hire -- WANTED (Tweedle Doh <tweedledoh@...il.com>)
Easy Blog by JM LLC - Multiple Vulnerabilities (Sp3ctrecore <sp3ctrecore@...il.com>)
Basic Forum by JM LLC - Multiple Vulnerabilities (Sp3ctrecore <sp3ctrecore@...il.com>)
Re: Top Information Security Consultants to Hire -- WANTED (Alex <fd@...oo.de>)
[ MDVSA-2013:199 ] squid (security@...driva.com)
Meet the folks of ws-attacker, BeEF, WAHH, sqlmap, Zed Attack Proxy, OWASP Top10, DOMinator, Minion, Mallodroid, and the inglorio… (Dirk Wetter <dirk@...sp.org>)
[SECURITY] [DSA 2726-1] php-radius security update (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 2727-1] openjdk-6 security update (Moritz Muehlenhoff <jmm@...ian.org>)
CA20130725-01: Security Notice for CA Service Desk Manager ("Kotas, Kevin J" <Kevin.Kotas@...com>)

July 26 (15 messages)

Re: nginx exploit documentation, about a generic way to exploit Linux targets (Kingcope <isowarez.isowarez.isowarez@...glemail.com>)
Flush+Reload: a High Resolution, Low Noise, L3 Cache Side-Channel Attack (Hurgel Bumpf <l0rd_lunatic@...oo.com>)
CVE-2013-2189: OpenOffice DOC Memory Corruption Vulnerability (Herbert Duerr <hdu@...che.org>)
CVE-2013-4156: OpenOffice DOCM Memory Corruption Vulnerability (Herbert Duerr <hdu@...che.org>)
SEC Consult SA-20130726-0 :: Multiple vulnerabilities - Surveillance via Symantec Web Gateway (SEC Consult Vulnerability Lab <research@...-consult.com>)
[ MDVSA-2013:200 ] ruby (security@...driva.com)
[ MDVSA-2013:201 ] ruby (security@...driva.com)
Trustlook Found Hundreds of Malicious Applications in the Google Play Store (bugfree <bugfree@...il.com>)
Re: Trustlook Found Hundreds of Malicious Applications in the Google Play Store (adam <adam@...sy.net>)
Re: Flush+Reload: a High Resolution, Low Noise, L3 Cache Side-Channel Attack (Valdis.Kletnieks@...edu)
Re: Flush+Reload: a High Resolution, Low Noise, L3 Cache Side-Channel Attack (Jeffrey Walton <noloader@...il.com>)
Re: Trustlook Found Hundreds of Malicious Applications in the Google Play Store (Jeffrey Walton <noloader@...il.com>)
Re: nginx exploit documentation, about a generic way to exploit Linux targets (Albert Puigsech Galicia <albert@...gsech.com>)
DoS and XSS vulnerabilities in Googlemaps plugin for Joomla ("MustLive" <mustlive@...security.com.ua>)
Re: Flush+Reload: a High Resolution, Low Noise, L3 Cache Side-Channel Attack (Jann Horn <jann@...jh.net>)

July 27 (6 messages)

DEFCON London - DC4420 July - social event - Tuesday 30th July 2013 (Tony Naggs <tonynaggs@...il.com>)
Re: DEFCON London - DC4420 July - social event - Tuesday 30th July 2013 (Tony Naggs <tonynaggs@...il.com>)
[SECURITY] [DSA 2728-1] bind9 security update (Salvatore Bonaccorso <carnil@...ian.org>)
FINAL CALL for papers for SEC-T.org (Mattias Bååth <mattias.baath@...dband.net>)
Releasing full source code of Aux Browser (Dieyu <dieyu@...yu.org>)
Re: Phishing Google Wallet and Paypal by abusing WhatsApp (Sebastian Rother <srother@...cenary-security.com>)

July 28 (6 messages)

[Announcement] CHMag - Call for Articles (Abhijeet Patil <getabhijeetpatil@...il.com>)
Defense in depth -- the Microsoft way (part 5): sticky, persistent vulnerabilities ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Private Photos v1.0 iOS - Persistent Path Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Private Photos v1.0 iOS - Persistent Path Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
WebDisk 3.0.2 PhotoViewer iOS - Command Execution Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[SECURITY] [DSA 2729-1] openafs security update (Moritz Muehlenhoff <jmm@...ian.org>)

July 29 (4 messages)

[ MDVSA-2013:202 ] bind (security@...driva.com)
0day IE9/10 information disclosure vulnerability (yuange <yuange1975@...mail.com>)
[SECURITY] [DSA 2730-1] gnupg security update (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 2731-1] libgcrypt11 security update (Thijs Kinkhorst <thijs@...ian.org>)

July 30 (3 messages)

[ MDVSA-2013:203 ] phpmyadmin (security@...driva.com)
[ MDVSA-2013:204 ] wireshark (security@...driva.com)
CORE-2013-0618 - Multiple Vulnerabilities in TP-Link TL-SC3171 IP Cameras (CORE Advisories Team <advisories@...esecurity.com>)

July 31 (4 messages)

Cisco Security Advisory: Cisco WAAS Central Manager Remote Code Execution Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com…)
Cisco Security Advisory: Authenticated Command Injection Vulnerability in Multiple Cisco Content Network and Video Del… (Cisco Systems Product Security Incident…)
[Security-news] SA-CONTRIB-2013-061 - Flippy - Access Bypass (security-news@...pal.org)
DAVOSET v.1.1.2 ("MustLive" <mustlive@...security.com.ua>)

277 messages

Powered by blists - more mailing lists