full-disclosure mailing list - 2013/08

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2013/08

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 17	² 23	³ 4	⁴ 7
⁵ 4	⁶ 19	⁷ 17	⁸ 8	⁹ 18	¹⁰ 6	¹¹ 10
¹² 6	¹³ 15	¹⁴ 11	¹⁵ 6	¹⁶ 14	¹⁷ 15	¹⁸ 3
¹⁹ 9	²⁰ 3	²¹ 14	²² 9	²³ 11	²⁴ 6	²⁵ 3
²⁶ 5	²⁷ 11	²⁸ 15	²⁹ 5	³⁰ 5	³¹ 4

Messages by day:

August 1 (17 messages)

XKeyscore sees 'nearly EVERYTHING you do online (Georgi Guninski <guninski@...inski.com>)
I'm the best and that's all that matters ("Gary McGraw" <therealgarymcgraw@...hmail.com>)
Re: XKeyscore sees 'nearly EVERYTHING you do online (Alex <fd@...oo.de>)
XSS and CS vulnerabilities in aCMS ("MustLive" <mustlive@...security.com.ua>)
Re: XKeyscore sees 'nearly EVERYTHING you do online (Hugh Davenport <hugh@...enport.net.nz>)
Re: XKeyscore sees 'nearly EVERYTHING you do online (Georgi Guninski <guninski@...inski.com>)
Re: XSS and CS vulnerabilities in aCMS (Henri Salo <henri@...v.fi>)
Re: XKeyscore sees 'nearly EVERYTHING you do online (Alex <fd@...oo.de>)
Cisco Security Advisory: OSPF LSA Manipulation Vulnerability in Multiple Cisco Products (Cisco Systems Product Security Incident Response Team <psirt@...co.com…)
SSA-064884: WinCC/TIA Portal fixes (scadastrangelove <scadastrangelove@...il.com>)
[ MDVSA-2013:205 ] gnupg (security@...driva.com)
Re: XKeyscore sees 'nearly EVERYTHING you do online (XF <theiemsolution@...il.com>)
Re: XKeyscore sees 'nearly EVERYTHING you do online (Gary Baribault <gary@...ibault.net>)
Re: XKeyscore sees 'nearly EVERYTHING you do online (Gary Baribault <gary@...ibault.net>)
Re: XKeyscore sees 'nearly EVERYTHING you do online (Jeffrey Walton <noloader@...il.com>)
Re: XKeyscore sees 'nearly EVERYTHING you do online (Gary Baribault <gary@...ibault.net>)
Re: XKeyscore sees 'nearly EVERYTHING you do online (Jeffrey Walton <noloader@...il.com>)

August 2 (23 messages)

TWSL2013-019: Multiple Vulnerabilities in MiCasaVerde VeraLite (Trustwave Advisories <TrustwaveAdvisories@...stwave.com>)
TWSL2013-020: Hard-Coded Bluetooth PIN Vulnerability in LIXIL Satis Toilet (Trustwave Advisories <TrustwaveAdvisories@...stwave.com>)
TWSL2013-021: Multiple Vulnerabilities in Karotz Smart Rabbit (Trustwave Advisories <TrustwaveAdvisories@...stwave.com>)
TWSL2013-022: No Authentication Vulnerability in Radio Thermostat of America, Inc (Trustwave Advisories <TrustwaveAdvisories@...stwave.com>)
TWSL2013-023: Lack of Web and API Authentication Vulnerability in INSTEON Hub (Model Discontinued) (Trustwave Advisories <TrustwaveAdvisories@...stwave.com>)
Re: XKeyscore sees 'nearly EVERYTHING you do online (XF <theiemsolution@...il.com>)
Re: XKeyscore sees 'nearly EVERYTHING you do online (Sven Kieske <svenkieske@...il.com>)
Re: XKeyscore sees 'nearly EVERYTHING you do online (Sven Kieske <svenkieske@...il.com>)
Re: XKeyscore sees 'nearly EVERYTHING you do online (XF <theiemsolution@...il.com>)
Re: XKeyscore sees 'nearly EVERYTHING you do online (Luis Lezcano Airaldi <luislezcair@...il.com>)
Re: XKeyscore sees 'nearly EVERYTHING you doonline (Christian Rost <christian.rost@...on-it.de>)
Re: XKeyscore sees 'nearly EVERYTHING you do online (Gary Baribault <gary@...ibault.net>)
Re: XKeyscore sees 'nearly EVERYTHING you do online (Valdis.Kletnieks@...edu)
Re: XKeyscore sees 'nearly EVERYTHING you do online (Georgi Guninski <guninski@...inski.com>)
Re: XKeyscore sees 'nearly EVERYTHING you do online (Joseph Jackson <jjackson@...networks.net>)
Re: XKeyscore sees 'nearly EVERYTHING you do online (Michal Purzynski <michal@...ac.org>)
Re: XKeyscore sees 'nearly EVERYTHING you do online (Joseph Jackson <jjackson@...networks.net>)
Re: XKeyscore sees 'nearly EVERYTHING you do online (Bart van Tuil <BvanTuil@...cartes.com>)
Re: XKeyscore sees 'nearly EVERYTHING you doonline (Reed Black <reed@...afeword.org>)
Re: XKeyscore sees 'nearly EVERYTHING you do online (imipak <imipak@...il.com>)
Re: XKeyscore sees 'nearly EVERYTHING you do online (Alex <fd@...oo.de>)
Re: XKeyscore sees 'nearly EVERYTHING you do online (Georgi Guninski <guninski@...inski.com>)
[SECURITY] [DSA 2733-1] otrs2 security update (Salvatore Bonaccorso <carnil@...ian.org>)

August 3 (4 messages)

Re: I'm the best and that's all that matters (Justin Ferguson <jf@...co.net>)
Rgpg 0.2.2 Ruby Gem Remote Command Injection ("Larry W. Cashdollar" <larry0@...com>)
[SECURITY] [DSA 2732-1] chromium-browser security update (Michael Gilbert <mgilbert@...ian.org>)
XSS and FPD vulnerabilities in WPtouch and WPtouch Pro for WordPress ("MustLive" <mustlive@...security.com.ua>)

August 4 (7 messages)

Software that you *really* wish had been more secure... (Valdis Kletnieks <Valdis.Kletnieks@...edu>)
Trusteer Rapport memory selfcheck bypass (saw saw <dovakin_saw@...mail.com>)
Re: XKeyscore sees 'nearly EVERYTHING you do online (XF <theiemsolution@...il.com>)
withU Music Share v1.3.7 iOS - Command Inject Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
FTP OnConnect v1.4.11 iOS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Re: Software that you *really* wish had been more secure... (Georgi Guninski <guninski@...inski.com>)
Re: [SECURITY] [DSA 2607-1] qemu-kvm security update (Florian Weimer <fw@...eb.enyo.de>)

August 5 (4 messages)

SEC Consult SA-20130805-0 :: Vodafone EasyBox Default WPS PIN Algorithm Weakness (SEC Consult Vulnerability Lab <research@...-consult.com>)
[ MDVSA-2013:206 ] owncloud (security@...driva.com)
Potential security flaw in network implementation at Digitalocean.com (Johan Boger <jboger@...il.com>)
[SECURITY] [DSA 2734-1] wireshark security update (Moritz Muehlenhoff <jmm@...ian.org>)

August 6 (19 messages)

[ MDVSA-2013:207 ] samba (security@...driva.com)
Facebook allows disclosure of friends list. (Bhavesh Naik <bhavesh_shouts@...oo.com>)
Re: Potential security flaw in network implementation at Digitalocean.com (Trevor Bergeron <mal@....gd>)
Usernoise 3.7.8 WP plugin cross-site scripting vulnerability ("Adéla Goldová" <roguecoder@...h.com>)
Xerox scanners/photocopiers randomly alter numbers in scanned documents (Wolfgang Denk <wd@...x.de>)
[ MDVSA-2013:208 ] libtiff (security@...driva.com)
[ MDVSA-2013:209 ] subversion (security@...driva.com)
Re: Facebook allows disclosure of friends list. (Alex <fd@...oo.de>)
Re: Facebook allows disclosure of friends list. (Valdis.Kletnieks@...edu)
Re: Facebook allows disclosure of friends list. (adam <adam@...sy.net>)
Re: Facebook allows disclosure of friends list. (Alex <fd@...oo.de>)
Re: Facebook allows disclosure of friends list. (adam <adam@...sy.net>)
TWSL2013-025: Arbitrary File Upload Vulnerability in Official Nmap Http-domino-enum-passwords NSE script (Trustwave Advisories <TrustwaveAdvisories@...stwave.c…)
TWSL2013-024: Cross Site Scripting (XSS) vulnerability in McAfee Superscan 4.0 (Trustwave Advisories <TrustwaveAdvisories@...stwave.com>)
Re: Facebook allows disclosure of friends list. (David Mah <mahhaha@...il.com>)
[CVE-2013-2136] Apache CloudStack Cross-site scripting (XSS) vulnerabiliity (Chip Childers <chipchilders@...che.org>)
Re: Potential security flaw in network implementation at Digitalocean.com (Johan Boger <jboger@...il.com>)
CORE-2013-0708 - Hikvision IP Cameras Multiple Vulnerabilities (CORE Advisories Team <advisories@...esecurity.com>)
Microsoft Yammer Social Network - oAuth Bypass (Session Token) Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

August 7 (17 messages)

Re: Facebook allows disclosure of friends list. (Bhavesh Naik <bhavesh_shouts@...oo.com>)
Defense in depth -- the Microsoft way (part 6): beginner's errors, QA sound asleep or out of sight! ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Attacking Google Accounts with 'weblogin:' Tokens (Craig Young <vuln-report@...ur3.us>)
[ MDVSA-2013:210 ] firefox (security@...driva.com)
Re: Facebook allows disclosure of friends list. (Alex <fd@...oo.de>)
Re: [ MDVSA-2013:210 ] firefox (Georgi Guninski <guninski@...inski.com>)
[SECURITY] [DSA 2735-1] iceweasel security update (Moritz Muehlenhoff <jmm@...ian.org>)
Apache suEXEC privilege elevation / information disclosure (king cope <isowarez.isowarez.isowarez@...glemail.com>)
Cisco Security Advisory: Cisco TelePresence System Default Credentials Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Re: Apache suEXEC privilege elevation / information disclosure (king cope <isowarez.isowarez.isowarez@...glemail.com>)
Updated [CVE-2013-2136] Apache CloudStack Cross-site scripting (XSS) vulnerabiliity (Chip Childers <chipchilders@...che.org>)
[Security-news] SA-CONTRIB-2013-062 - RESTful Web Services (RESTWS) - Access Bypass (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-064 - Persona - Cross site request forgery (CSRF) (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-063 - Authenticated User Page Caching (Authcache) - Information Disclosure (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-065 - Organic Groups - Access Bypass (security-news@...pal.org)
Re: Apache suEXEC privilege elevation / information disclosure (andfarm <andfarm@...il.com>)
[Security-news] SA-CONTRIB-2013-066 - Monster Menus - Multiple Vulnerabilities (security-news@...pal.org)

August 8 (8 messages)

Two Vulnerabilities in NetworkMiner : DLL Hijacking + Directory Traversal (Erik Hjelmvik <erik.hjelmvik@...il.com>)
Re: Apache suEXEC privilege elevation / information disclosure (E R <mr.rahimian@...il.com>)
OUTDATED, UNSUPPORTED and VULNERABLE 3rd party components installed with Exact Audio Copy ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Re: [ MDVSA-2013:210 ] firefox (Georgi Guninski <guninski@...inski.com>)
pixlr.com bluecoat image file bypass (debug <debug.net@...il.com>)
[RCA-201308-01] HMS Testimonials 2.0.10 WP plugin - Multiple vulnerabilities ("Adéla Goldová" <roguecoder@...h.com>)
Research survey: web pentests with hybrid control+data flow graphs (web_p0wn3r web_p0wn3r <w3bp0wn3r@...il.com>)
Update [RCA-201309-01] HMS Testimonials 2.0.10 WP plugin - Multiple vulnerabilities ("Adéla Goldová" <roguecoder@...h.com>)

August 9 (18 messages)

Re: Apache suEXEC privilege elevation / information disclosure (Kingcope <isowarez.isowarez.isowarez@...glemail.com>)
Re: pixlr.com bluecoat image file bypass (Alex <fd@...oo.de>)
ReviewBoard Vulnerabilities (Craig Young <vuln-report@...ur3.us>)
Special Issue "Threat Detection, Analysis and Defense" of JISA (Konrad Rieck <konrad.rieck@...-goettingen.de>)
List Charter (John Cartwright <johnc@...k.org.uk>)
Re: Apache suEXEC privilege elevation / information disclosure (Noel Butler <noel.butler@...ics.net>)
Re: Special Issue "Threat Detection, Analysis and Defense" of JISA (Alex <fd@...oo.de>)
Re: Apache suEXEC privilege elevation / information disclosure (Kingcope <isowarez.isowarez.isowarez@...glemail.com>)
Re: Apache suEXEC privilege elevation / information disclosure (Noel Butler <noel.butler@...ics.net>)
Re: Apache suEXEC privilege elevation / information disclosure ("R. Whitney" <xnite@...te.org>)
Re: Special Issue "Threat Detection, Analysis and Defense" of JISA (Alex <fd@...oo.de>)
Re: Special Issue "Threat Detection, Analysis and Defense" of JISA (Bart van Tuil <BvanTuil@...cartes.com>)
Re: Apache suEXEC privilege elevation / ("Dico Emil" <emil@...net.ro>)
Re: Apache suEXEC privilege elevation / information disclosure (Reindl Harald <h.reindl@...lounge.net>)
Re: Apache suEXEC privilege elevation / information disclosure (mezgani ali <handrix@...il.com>)
Re: Special Issue "Threat Detection, Analysis and Defense" of JISA ("Justin C. Klein Keane" <justin@...irish.net>)
Re: Special Issue "Threat Detection, Analysis and Defense" of JISA (Źmicier Januszkiewicz <gauri@....by>)
Re: Special Issue "Threat Detection, Analysis and Defense" of JISA (Georgi Guninski <guninski@...inski.com>)

August 10 (6 messages)

Re: Apache suEXEC privilege elevation / information disclosure (Noel Butler <noel.butler@...ics.net>)
Re: Apache suEXEC privilege elevation / information disclosure (Kingcope <isowarez.isowarez.isowarez@...glemail.com>)
Re: Apache suEXEC privilege elevation / information disclosure (Kingcope <isowarez.isowarez.isowarez@...glemail.com>)
Re: Apache suEXEC privilege elevation / information disclosure (Gichuki John Chuksjonia <chuksjonia@...il.com>)
Re: Apache suEXEC privilege elevation / information disclosure (Jeffrey Walton <noloader@...il.com>)
Using XXE vulnerabilities for attacks on other sites ("MustLive" <mustlive@...security.com.ua>)

August 11 (10 messages)

Re: Apache suEXEC privilege elevation / information disclosure (Reindl Harald <h.reindl@...lounge.net>)
Re: XKeyscore sees 'nearly EVERYTHING you do (Pedro Luis Karrasquillo <peter_toyota@...mail.com>)
Re: XKeyscore sees 'nearly EVERYTHING you do (Valdis.Kletnieks@...edu)
Re: XKeyscore sees 'nearly EVERYTHING you do (Justin Elze <formulals1@...il.com>)
Re: Apache suEXEC privilege elevation / information disclosure (Michal Zalewski <lcamtuf@...edump.cx>)
Super Tiny Linux and AIX bugs (king cope <isowarez.isowarez.isowarez@...glemail.com>)
XXE Injection in Sybase EAServer ("MustLive" <mustlive@...security.com.ua>)
[SECURITY] [DSA 2736-1] putty security update (Salvatore Bonaccorso <carnil@...ian.org>)
Re: XKeyscore sees 'nearly EVERYTHING you do (peter_toyota <peter_toyota@...mail.com>)
Re: XKeyscore sees 'nearly EVERYTHING you do (Michal Purzynski <michal@...ac.org>)

August 12 (6 messages)

Re: XKeyscore sees 'nearly EVERYTHING you do (Grandma Eubanks <tborland1@...il.com>)
[PSA-2013-0811-1] Oracle Java storeImageArray() Invalid Array Indexing (fulldis@...ketstormsecurity.org)
[ MDVSA-2013:211 ] lcms2 (security@...driva.com)
WinCC Harvester Metasploit module is updated (scadastrangelove <scadastrangelove@...il.com>)
Re: 0day IE9/10 information disclosure vulnerability (yuange <yuange1975@...mail.com>)
Re: Apache suEXEC privilege elevation / information disclosure (Jeffrey Walton <noloader@...il.com>)

August 13 (15 messages)

Re: 0day IE9/10 information disclosure vulnerability (Daniel Preussker <daniel@...ussker.net>)
Re: 0day IE9/10 information disclosure vulnerability (xnite@...te.org)
Re: CALEA & Re: XKeyscore (Michal Purzynski <michal@...ac.org>)
[SECURITY] [DSA 2737-1] swift security update (Thijs Kinkhorst <thijs@...ian.org>)
CALEA & Re: XKeyscore (Pedro Luis Karrasquillo <peter_toyota@...mail.com>)
Re: CALEA & Re: XKeyscore (Pedro Luis Karrasquillo <peter_toyota@...mail.com>)
Re: CALEA & Re: XKeyscore (Jeffrey Walton <noloader@...il.com>)
Re: XKeyscore sees 'nearly EVERYTHING you do (jk3380@...da.org)
Fwd: [cryptography] Paypal phish using EV certificate (Jeffrey Walton <noloader@...il.com>)
Re: Fwd: [cryptography] Paypal phish using EV certificate (Jeffrey Walton <noloader@...il.com>)
[ MDVSA-2013:212 ] otrs (security@...driva.com)
Re: CALEA & Re: XKeyscore (Michal Purzynski <michal@...ac.org>)
[ MDVSA-2013:213 ] xymon (security@...driva.com)
Re: Fwd: [cryptography] Paypal phish using EV certificate (Julius Kivimäki <julius.kivimaki@...il.com>)
Re: Fwd: [cryptography] Paypal phish using EV certificate (Julius Kivimäki <julius.kivimaki@...il.com>)

August 14 (11 messages)

[PSA-2013-0813-1] Oracle Java IntegerInterleavedRaster.verify() Signed Integer Overflow (fulldis@...ketstormsecurity.org)
Subverting BIND's SRTT Algorithm: Derandomizing NS Selection (Roee Hay <roeeh@...ibm.com>)
Re: CALEA & Re: XKeyscore (peter_toyota <peter_toyota@...mail.com>)
Quick Blind TCP Connection Spoofing with SYN Cookies (Jakob Lell <jakob@...oblell.com>)
Drupal core XSS vulnerability ("Justin C. Klein Keane" <justin@...irish.net>)
SQL Injection vulnerability in Soltech.CMS ("MustLive" <mustlive@...security.com.ua>)
[Security-news] SA-CONTRIB-2013-067 - BOTCHA - Information Disclosure (potential Privilege Escalation) (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-068 - Entity API - Access Bypass (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-069 - Password Policy - XSS (security-news@...pal.org)
Re: Quick Blind TCP Connection Spoofing with SYN Cookies (some one <s3cret.squirell@...il.com>)
Re: Drupal core XSS vulnerability (Greg Knaddison <greg.knaddison@...il.com>)

August 15 (6 messages)

Simple Machines Forum (SMF) <= 2.0.5 - multiple vulnerabilities (Moritz Naumann <security@...itz-naumann.com>)
[NSE] Release of Nmap NSE Vulscan 2.0 (Marc Ruef <marc.ruef@...putec.ch>)
Introducing Bletchley ("Timothy D. Morgan" <tmorgan@...curity.com>)
Copy to WebDAV v1.1 iOS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Photo Transfer Upload v1.0 iOS - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Google - (Pin via Postal Delivery) Information Disclosure - Video (Vulnerability Lab <research@...nerability-lab.com>)

August 16 (14 messages)

Re: Google - (Pin via Postal Delivery) Information Disclosure - Video (Julius Kivimäki <julius.kivimaki@...il.com>)
Who's behind limestonenetworks.com AKA DDoS on polipo(8123) (Luther Blissett <lblissett@...anoici.org>)
bash-3.0-geinpeek shell sniffer release! (x90c <geinblues@...il.com>)
Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) (Bart van Tuil <BvanTuil@...cartes.com>)
JoinSEC London - October (Ralf Braga <ralfbraga@...il.com>)
Advisory: Unfuddle.com - Open Redirection (LIAD Mizrachi <liadmz@...il.com>)
Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) (Jann Horn <jann@...jh.net>)
Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) (Jeffrey Walton <noloader@...il.com>)
t2'13: Challenge to be released 2013-09-07 10:00 EEST ("Tomi Tuominen" <tomi.tuominen@...fi>)
CVE-2013-0526 IBM GCM16/32 Remote Command Execution. (Alejandro Alvarez <alex.a.bravo@...il.com>)
Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) (Jann Horn <jann@...jh.net>)
Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) (Jeffrey Walton <noloader@...il.com>)
Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) (adam <adam@...sy.net>)
Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) (Stefan Jon Silverman <sjs@...inc.com>)

August 17 (15 messages)

Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) (Daniel Preussker <daniel@...ussker.net>)
MS Excel 2002/2003 CRN record 0day PoC (x90c <geinblues@...il.com>)
x90c WOFF Firefox 1day exploit (x90c <geinblues@...il.com>)
local color map firefox 1day exploit (x90c <geinblues@...il.com>)
local color map firefox 1day exploit (x90c <geinblues@...il.com>)
Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) (Pascal Ernster <full-disclosure@...dfalcon.net>)
Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) (Jann Horn <jann+couchdb-dev@...jh.net>)
Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) (peter_toyota <peter_toyota@...mail.com>)
Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) (Luther Blissett <lblissett@...anoici.org>)
Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) (Luther Blissett <lblissett@...anoici.org>)
Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) (Jann Horn <jann@...jh.net>)
CS, XSS and FPD vulnerabilities in MCImageManager for TinyMCE ("MustLive" <mustlive@...security.com.ua>)
about ld-2.5.so security (x90c <geinblues@...il.com>)
Defense in depth -- the Microsoft way (part 7): executable files in data directories ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) (Valdis.Kletnieks@...edu)

August 18 (3 messages)

Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) (Jann Horn <jann@...jh.net>)
Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) (Valdis.Kletnieks@...edu)
Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) (coderman <coderman@...il.com>)

August 19 (9 messages)

Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) (Stefan Jon Silverman <sjs@...inc.com>)
Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) (Alex <fd@...oo.de>)
Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) (Daniel Corbe <corbe@...be.net>)
[SECURITY] [DSA 2738-1] ruby1.9.1 security update (Thijs Kinkhorst <thijs@...ian.org>)
foxtons possibly hacked ("Full Name" <rand93452285@...ay.com>)
Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) (Jordon Bedwell <envygeeks@...il.com>)
ACCDE and macros (Yuhong Bao <yuhongbao_386@...mail.com>)
Re: Full-Disclosure Digest, Vol 102, Issue 26 ("Jean D'Elboux Diogo" <jean@...boux.com.br>)
[PSA-2013-0819-1] Oracle Java BytePackedRaster.verify() Signed Integer Overflow (fulldis@...ketstormsecurity.org)

August 20 (3 messages)

request to ms excel crash analyze (x90c <geinblues@...il.com>)
review: magic_quotes_gpc=on bypass project in 2006 (x90c <geinblues@...il.com>)
Samsung DVR authentication bypass (Andrea Fabrizi <andrea.fabrizi@...il.com>)

August 21 (14 messages)

Sparty : A SharePoint and FrontPage Security Auditing Tool ! (SecNiche Security Labs <0kn0ck@...niche.org>)
CVE-2013-4124 samba nttrans dos private exploit (x90c <geinblues@...il.com>)
Last (short) chance to submit papers for PacSec in Tokyo Nov 13-14. Deadline FRIDAY. (Dragos Ruiu <dragos.ruiu@...il.com>)
HackInTheBox CTF Weapons of Mass Destruction: War of the World (Jin Fu <jinfu@...kinthebox.org>)
Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) (Luther Blissett <lblissett@...anoici.org>)
[ MDVSA-2013:214 ] python (security@...driva.com)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified Communications Manager (Cisco Systems Product Security Incident Response Team <psirt@...co.c…)
Cisco Security Advisory: Cisco Prime Central for Hosted Collaboration Solution Assurance Denial of Service Vulnerabili… (Cisco Systems Product Security Incident…)
Cisco Security Advisory: Cisco Unified Communications Manager IM and Presence Service Denial of Service Vulnerability (Cisco Systems Product Security Incident…)
CVE-2013-3186 - The case of a one click sandbox escape on IE (Fermín J. Serna <fjserna@...il.com>)
Windows Embedded POSReady 2009: cruft, not craft ("Stefan Kanthak" <stefan.kanthak@...go.de>)
[Security-news] SA-CONTRIB-2013-070 - Zen - Cross Site Scripting (security-news@...pal.org)
[SECURITY] [DSA 2739-1] cacti security update (Moritz Muehlenhoff <jmm@...ian.org>)
Vulnerabilities in Avaya IP Office Customer Call Reporter ("MustLive" <mustlive@...security.com.ua>)

August 22 (9 messages)

... my LKM stuff! (x90c <geinblues@...il.com>)
[ MDVSA-2013:215 ] cacti (security@...driva.com)
CVE-2013-4099 - JOAL 2.0-rc11 - Multiple Remote Code Execution Vulnerabilities (FuzzMyApp Disclosure <disclosure@...zmyapp.com>)
[DAHAX-2013-001] Cloudflare XSS Vulnerability (Glenn Grant <glenn@...alias.net>)
CVE-2013-4152 XML External Entity (XXE) injection in Spring Framework (Pivotal Security Team <security@...ivotal.com>)
Re: [DAHAX-2013-001] Cloudflare XSS Vulnerability (xnite@...te.org)
Re: [DAHAX-2013-001] Cloudflare XSS Vulnerability (Ryan Dewhurst <ryandewhurst@...il.com>)
Re: [DAHAX-2013-001] Cloudflare XSS Vulnerability (andfarm <andfarm@...il.com>)
CVE-2013-4124 samba dos exploit (x90c <geinblues@...il.com>)

August 23 (11 messages)

NEW VMSA-2013-0010 VMware Workstation host privilege escalation vulnerability (VMware Security Team <security@...are.com>)
Re: [DAHAX-2013-001] Cloudflare XSS Vulnerability (Julius Kivimäki <julius.kivimaki@...il.com>)
Re: [DAHAX-2013-001] Cloudflare XSS Vulnerability (Bart van Tuil <BvanTuil@...cartes.com>)
Re: [DAHAX-2013-001] Cloudflare XSS Vulnerability (PsychoBilly <zpamh0l3@...il.com>)
[ MDVSA-2013:216 ] perl-Proc-ProcessTable (security@...driva.com)
[ MDVSA-2013:217 ] spice (security@...driva.com)
[ MDVSA-2013:218 ] python-django (security@...driva.com)
[ MDVSA-2013:219 ] libtiff (security@...driva.com)
PayPal Bug Bounty #110 - Auth Bypass (Session) Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
CS and XSS vulnerabilities in GDD FLVPlayer ("MustLive" <mustlive@...security.com.ua>)
[SECURITY] [DSA 2740-1] python-django security update (Salvatore Bonaccorso <carnil@...ian.org>)

August 24 (6 messages)

libtiff <= 3.9.5 integer overflow bug (x90c <geinblues@...il.com>)
CVE-2013-2193: Apache HBase Man in the Middle Vulnerability ("Aaron T. Myers" <atm@...che.org>)
CVE-2013-2192: Apache Hadoop Man in the Middle Vulnerability ("Aaron T. Myers" <atm@...che.org>)
Re: [DAHAX-2013-001] Cloudflare XSS Vulnerability (jonathan schatz <jon@...isionbyzero.com>)
Defense in depth -- the Microsoft way (part 8): execute everywhere! ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Re: Defense in depth -- the Microsoft way (part 8): execute everywhere! (Jeffrey Walton <noloader@...il.com>)

August 25 (3 messages)

Re: Defense in depth -- the Microsoft way (part 8): execute everywhere! ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Vulnerabilities in multiple web applications with GDD FLVPlayer ("MustLive" <mustlive@...security.com.ua>)
samba dos exploit (x90c <geinblues@...il.com>)

August 26 (5 messages)

DC4420 - London DEFCON - August Meet - Tuesday 27th August 2013 (Major Malfunction <majormal@...ate-radio.org>)
CAPTCHA re-riding attack in https://google.com (kevin philips <gamma95@...il.com>)
[SECURITY] [DSA 2741-1] chromium-browser security update (Michael Gilbert <mgilbert@...ian.org>)
Re: CAPTCHA re-riding attack in https://google.com (adam <adam@...sy.net>)
[SECURITY] [DSA 2742-1] php5 security update (Florian Weimer <fw@...eb.enyo.de>)

August 27 (11 messages)

[SECURITY] [DSA 2743-1] kfreebsd-9 security update (Aurelien Jarno <aurelien@...el32.net>)
[SECURITY] CVE-2012-3544 Chunked transfer encoding extension size is not limited (Derick Older <d3x0rwastasy@...oo.com>)
Re: DC4420 - London DEFCON - August Meet - Tuesday 27th August 2013 (Alex Dolan <dolan.alex@...il.com>)
IBM Lotus iNotes 8.5.x cross-site scripting vulnerabilities (Osama Alrashid <osama.alrashid@...il.com>)
Re: CAPTCHA re-riding attack in https://google.com (kevin philips <gamma95@...il.com>)
Atlassian Confluence - Sensitive Information Leakage (majinboo <majinboo@...kerzvoice.net>)
[ MDVSA-2013:220 ] lcms (security@...driva.com)
[ MDVSA-2013:221 ] php (security@...driva.com)
SEC-T 2013 Speaker list published. Register today and come visit us in Sweden. (Mattias Bååth <mattias.baath@...dband.net>)
[SECURITY] [DSA 2744-1] tiff security update (Moritz Muehlenhoff <jmm@...ian.org>)
[ MDVSA-2013:222 ] puppet (security@...driva.com)

August 28 (15 messages)

AST-2013-004: Remote Crash From Late Arriving SIP ACK With SDP ("Asterisk Security Team" <security@...erisk.org>)
AST-2013-005: Remote Crash when Invalid SDP is sent in SIP Request ("Asterisk Security Team" <security@...erisk.org>)
[PSA-2013-0827-1] Oracle Java ByteComponentRaster.verify() Memory Corruption (fulldis@...ketstormsecurity.org)
Google Docs Clickjacking / Information Disclosure (Jacob Morgan <jacob@...ldism.net>)
PayPal's "invalid" aksession Padding Oracle Flaw ("Timothy D. Morgan" <tmorgan@...curity.com>)
Cisco Security Advisory: Cisco Secure Access Control Server Remote Command Execution Vulnerability (Cisco Systems Product Security Incident Response Team <psir…)
Re: CAPTCHA re-riding attack in https://google.com (Alex <fd@...oo.de>)
rhev-hypervisor6 package security update (Osama Alrashid <osama.alrashid@...il.com>)
[CORE-2013-0805] Aloaha PDF Suite Buffer Overflow Vulnerability (CORE Advisories Team <advisories@...esecurity.com>)
CORE-2013-0808 - EPS Viewer Buffer Overflow Vulnerability (CORE Advisories Team <advisories@...esecurity.com>)
CORE-2013-0726 - AVTECH DVR multiple vulnerabilities (CORE Advisories Team <advisories@...esecurity.com>)
30C3 Call for Participation (fukami <lists@....io>)
[Security-news] SA-CONTRIB-2013-072 - Node View Permissions - Access Bypass (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-071 - Flag - Cross Site Scripting (security-news@...pal.org)
Vulnerabilities in multiple plugins for WordPress with GDD FLVPlayer ("MustLive" <mustlive@...security.com.ua>)

August 29 (5 messages)

[SECURITY] [DSA 2745-1] linux security update (dann frazier <dannf@...ian.org>)
[SECURITY] [DSA 2746-1] icedove security update (Moritz Muehlenhoff <jmm@...ian.org>)
UTA EDU University ENG - SQL Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Department of Transport UK - SQL Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Microsoft MSRC RSS ASPX - CS Cross Site Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

August 30 (5 messages)

NEW VMSA-2013-0011 VMware ESXi and ESX address an NFC Protocol Unhandled Exception (VMware Security Team <security@...are.com>)
Re: UTA EDU University ENG - SQL Injection Vulnerability (Julius Kivimäki <julius.kivimaki@...il.com>)
XSS and CS vulnerability in Soltech.CMS ("MustLive" <mustlive@...security.com.ua>)
[ MDVSA-2013:223 ] asterisk (security@...driva.com)
PoTTY v0.63 released (Hinky Dink <dink@...inkydink.com>)

August 31 (4 messages)

Defense in depth -- the Microsoft way (part 9): erroneous documentation ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Re: Defense in depth -- the Microsoft way (part 9): erroneous documentation (hardfalcon@...dfalcon.net)
Re: Defense in depth -- the Microsoft way (part 9): erroneous documentation (adam <adam@...sy.net>)
[SECURITY] [DSA 2747-1] cacti security update (Florian Weimer <fw@...eb.enyo.de>)

303 messages

Powered by blists - more mailing lists