full-disclosure mailing list - 2013/10

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2013/10

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 6	² 11	³ 34	⁴ 5	⁵ 2	⁶
⁷ 1	⁸ 6	⁹ 12	¹⁰ 5	¹¹ 10	¹² 2	¹³ 3
¹⁴ 3	¹⁵ 11	¹⁶ 12	¹⁷ 6	¹⁸ 22	¹⁹ 2	²⁰ 7
²¹ 10	²² 14	²³ 31	²⁴ 17	²⁵ 5	²⁶ 3	²⁷ 6
²⁸ 19	²⁹ 14	³⁰ 12	³¹ 3

Messages by day:

October 1 (6 messages)

Re: iOS: List of available trusted root certificates (Jason Hellenthal <jhellenthal@...aix.net>)
Rooted CON 2014 - Call For Papers (Omar Benbouazza <bvomar@...il.com>)
Re: tor vulnerabilities? (Georgi Guninski <guninski@...inski.com>)
CORE-2013-0828 - PDFCool Studio Buffer Overflow Vulnerability (CORE Advisories Team <advisories@...esecurity.com>)
CORE-2013-0904 - PinApp Mail-SeCure Access Control Failure (CORE Advisories Team <advisories@...esecurity.com>)
Defense in depth -- the Microsoft way (part 11): privilege escalation for dummies ("Stefan Kanthak" <stefan.kanthak@...go.de>)

October 2 (11 messages)

Serious Yahoo bug discovered. Researchers rewarded with $12.50 ("Ivan .Heca" <ivanhec@...il.com>)
[Article] Linux Kernel Patches For Linux Kernel Security (x90c <geinblues@...il.com>)
Re: [Article] Linux Kernel Patches For Linux Kernel Security (Daniel Cegiełka <daniel.cegielka@...il.com>)
[Django] Cookie-based session storage session invalidation issue ("G. S. McNamara" <main@...cnamara.com>)
Re: Serious Yahoo bug discovered. Researchers rewarded with $12.50 (Alex <fd@...oo.de>)
Re: Serious Yahoo bug discovered. Researchers rewarded with $12.50 (Ian Hayes <cthulhucalling@...il.com>)
Re: Serious Yahoo bug discovered. Researchers rewarded with $12.50 (Ian Hayes <cthulhucalling@...il.com>)
Re: Serious Yahoo bug discovered. Researchers rewarded with $12.50 (Ian Hayes <cthulhucalling@...il.com>)
Re: Serious Yahoo bug discovered. Researchers rewarded with $12.50 (Justin Ferguson <jf@...co.net>)
Cisco Security Advisory: Cisco IOS XR Software Memory Exhaustion Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
[Security-news] SA-CONTRIB-2013-078 - Quick Tabs - Access Bypass (security-news@...pal.org)

October 3 (34 messages)

Hide Photo+Video Safe v1.6 iOS - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
SilverStripe Framework CMS 3.0.5 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
elproLOG MONITOR WebAccess 2.1 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
WebAssist PowerCMS PHP - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Security Guard CMS QT 4.7.3 - Local Stack Buffer Overflow Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Paypal Inc Bug Bounty #99 - Filter Bypass & Persistent Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Apple iOS 7 iPad2 Face-Time 1.0.2 - Privacy Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Re: Serious Yahoo bug discovered. Researchers rewarded with $12.50 (Brandon Whaley <brandonw@...otionhosting.com>)
PRISM (catsandd0gz.dinosaursandwh0res@...hmail.com)
Re: Serious Yahoo bug discovered. Researchers rewarded with $12.50 (Jordon Bedwell <envygeeks@...il.com>)
Re: Serious Yahoo bug discovered. Researchers rewarded with $12.50 (Jordon Bedwell <envygeeks@...il.com>)
Re: Serious Yahoo bug discovered. Researchers rewarded with $12.50 (Jordon Bedwell <envygeeks@...il.com>)
Re: [Django] Cookie-based session storage session invalidation issue (Paul McMillan <paul@...illan.ws>)
Re: Serious Yahoo bug discovered. Researchers rewarded with $12.50 (adam <adam@...sy.net>)
Re: Serious Yahoo bug discovered. Researchers rewarded with $12.50 (Benji <me@...ji.com>)
Re: Serious Yahoo bug discovered. Researchers rewarded with $12.50 (Benji <me@...ji.com>)
Re: Serious Yahoo bug discovered. Researchers rewarded with $12.50 (Justin Ferguson <jf@...co.net>)
Re: Serious Yahoo bug discovered. Researchers rewarded with $12.50 (Benji <me@...ji.com>)
Re: Serious Yahoo bug discovered. Researchers rewarded with $12.50 (BlackHawk <hawkgotyou@...il.com>)
SEC Consult SA-20131003-0 :: Denial of service vulnerability in Citrix NetScaler (SEC Consult Vulnerability Lab <research@...-consult.com>)
Re: Serious Yahoo bug discovered. Researchers rewarded with $12.50 (coderman <coderman@...il.com>)
Re: Serious Yahoo bug discovered. Researchers rewarded with $12.50 (coderman <coderman@...il.com>)
Re: Serious Yahoo bug discovered. Researchers rewarded with $12.50 (coderman <coderman@...il.com>)
[ MDVSA-2013:245 ] proftpd (security@...driva.com)
[SOJOBO-ADV-13-01] - Zenphoto 1.4.5.2 multiple vulnerabilities (<advisories@...omio.com>)
Re: Serious Yahoo bug discovered. Researchers rewarded with $12.50 (dextop <dextop@...il.com>)
Re: [Django] Cookie-based session storage session invalidation issue (Paul McMillan <paul@...illan.ws>)
Re: [Django] Cookie-based session storage session invalidation issue ("G. S. McNamara" <garrettmc@...il.com>)
Re: [Django] Cookie-based session storage session invalidation issue (Paul McMillan <paul@...illan.ws>)
Re: Serious Yahoo bug discovered. Researchers rewarded with $12.50 (Jordon Bedwell <envygeeks@...il.com>)
Re: [Django] Cookie-based session storage session invalidation issue ("G. S. McNamara" <main@...cnamara.com>)
Re: [Django] Cookie-based session storage session invalidation issue ("G. S. McNamara" <main@...cnamara.com>)
Re: [Django] Cookie-based session storage session invalidation issue ("G. S. McNamara" <main@...cnamara.com>)
Re: [Django] Cookie-based session storage session invalidation issue (Jeffrey Walton <noloader@...il.com>)

October 4 (5 messages)

Re: Serious Yahoo bug discovered. Researchers rewarded with $12.50 (coderman <coderman@...il.com>)
Re: Serious Yahoo bug discovered. Researchers rewarded with $12.50 (Michal Zalewski <lcamtuf@...edump.cx>)
SEC Consult SA-20131004-0 :: SQL injection vulnerability in Zabbix (SEC Consult Vulnerability Lab <research@...-consult.com>)
Multiple vulnerabilities in Ice Cold Apps Servers Ulitmate Version 6.0.2(12) for Android ("Larry W. Cashdollar" <larry0@...com>)
[SECURITY] [DSA 2768-1] icedtea-web security update (Salvatore Bonaccorso <carnil@...ian.org>)

October 5 (2 messages)

Re: PRISM (Valdis.Kletnieks@...edu)
Re: PRISM (Jeffrey Walton <noloader@...il.com>)

October 7 (1 message)

[ MDVSA-2013:246 ] openjpa (security@...driva.com)

October 8 (6 messages)

How many .gov sites did the usa government ddosed/nearly defaced? (Georgi Guninski <guninski@...inski.com>)
NotSoSecure CTF (in partnership with Appsec USA) ("sid" <sid@...sosecure.com>)
Re: How many .gov sites did the usa government ddosed/nearly defaced? (gremlin@...mlin.ru)
[SECURITY] [DSA-2769-1] kfreebsd-9 security update (Salvatore Bonaccorso <carnil@...ian.org>)
Re: How many .gov sites did the usa government ddosed/nearly defaced? (Jeffrey Walton <noloader@...il.com>)
Re: How many .gov sites did the usa government ddosed/nearly defaced? (coderman <coderman@...il.com>)

October 9 (12 messages)

Re: PRISM (Corwin Grey <cjgrey@...il.com>)
[CVE-2013-2254] Apache Sling denial of service vulnerability (Carsten Ziegeler <cziegeler@...che.org>)
New version of JBrute: v0.96 (beta) (Gonzalo Camino <gonzalocamino@...il.com>)
List Charter (John Cartwright <johnc@...k.org.uk>)
[SECURITY] [DSA 2770-1] torque security update (Salvatore Bonaccorso <carnil@...ian.org>)
[ISecAuditors Security Advisories] Multiple Vulnerabilities in Uebimiau <= 2.7.11 (ISecAuditors Security Advisories <advisories@...cauditors.com>)
[ISecAuditors Security Advisories] Multiple Reflected XSS vulnerabilities in BoltWire <= v3.5 (ISecAuditors Security Advisories <advisories@...cauditors.com>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA Software (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Firewall Services Module Software (Cisco Systems Product Security Incident Response Team <psirt@...c…)
[SECURITY] [DSA 2771-1] nas security update (Moritz Muehlenhoff <jmm@...ian.org>)
Multiple vulnerabilities in flv-player ("MustLive" <mustlive@...security.com.ua>)
Re: How many .gov sites did the usa government ddosed/nearly defaced? (Luther Blissett <lblissett@...anoici.org>)

October 10 (5 messages)

Re: How many .gov sites did the usa government ddosed/nearly defaced? (Omar Benbouazza <bvomar@...il.com>)
[ MDVSA-2013:247 ] gnupg (security@...driva.com)
[ MDVSA-2013:248 ] xinetd (security@...driva.com)
[ MDVSA-2013:249 ] libraw (security@...driva.com)
[SECURITY] [DSA 2772-1] typo3-src security update (Moritz Muehlenhoff <jmm@...ian.org>)

October 11 (10 messages)

Microsoft Pays Security Researcher James Forshaw $100, 000 For Windows 8 Flaw (Jeffrey Walton <noloader@...il.com>)
[SECURITY] [DSA 2773-1] gnupg security update (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 2774-1] gnupg security update (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 2775-1] ejabberd security update (Thijs Kinkhorst <thijs@...ian.org>)
Request for short subject lines / titles on FD (Hurgel Bumpf <l0rd_lunatic@...oo.com>)
Hack a Facebook account win 3 IE9+ UAFS (0day) (mildorarth bossman <mildorarth@...il.com>)
[SECURITY] [DSA 2776-1] drupal6 security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 2777-1] systemd security update (Moritz Muehlenhoff <jmm@...ian.org>)
Going beyond vulnerability rewards (Jeffrey Walton <noloader@...il.com>)
[SECURITY] [DSA 2778-1] libapache2-mod-fcgid security update (Salvatore Bonaccorso <carnil@...ian.org>)

October 12 (2 messages)

CVE-2013-0634 Original sample can not be confirmed until now (アドリアンヘンドリック <unixfreaxjp22@...il.com>)
Multiple vulnerabilities in mp3-player ("MustLive" <mustlive@...security.com.ua>)

October 13 (3 messages)

Re: [funsec] Going beyond vulnerability rewards (Steve Pirk <pirkster@...il.com>)
Whonix Anonymous Operating System Version 7 Released! (adrelanos <adrelanos@...eup.net>)
Apache Software Foundation A Subsite Remote command execution (you help <help.en@...yun.org>)

October 14 (3 messages)

ShoreWare Director Denial of Service and Arbitrary File Modification (Dennis Kelly <dennis.kelly@...il.com>)
Japan's largest domain name registrar a subsite remote command execution (you help <help.en@...yun.org>)
[SECURITY] [DSA 2779-1] libxml2 security update (Michael Gilbert <mgilbert@...ian.org>)

October 15 (11 messages)

Critical vulnerabilities discovered in Gazelle and TBDEV.net (Bogdan Calin <bogdan@...netix.com>)
backdoors in spamtitan (yello man <yelloman7@...look.com>)
remote root exploit in pineapp mail-secure (yello man <yelloman7@...look.com>)
My File Explorer v1.3.1 iOS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
OliveOffice Mobile Suite 2.0.3 iOS - File Include Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
UbiDisk File Manager v2.0 iOS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Apple iOS 7.2 - Sim Lock Screen Display Bypass Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Paypal Inc Bug Bounty #105 MOS - Multiple Persistent Print Layout Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
SEC Consult SA-20131015-0 :: Multiple vulnerabilities in SpamTitan (SEC Consult Vulnerability Lab <research@...-consult.com>)
ZAPms v1.42 CMS - Client Side Cross Site Scripting Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
DornCMS Application v1.4 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)

October 16 (12 messages)

[ISecAuditors Security Advisories] PL/SQL Injection in Oracle Portal Demo Organization Chart (ISecAuditors Security Advisories <advisories@...cauditors.com>)
Level One Enterprise Access Points Password Disclosure (Richard Weinberger <richard@...ma-star.at>)
WebTester 5.x Multiple Vulnerabilities (X-Cisadane <stefanus_dp@...il.com>)
Ploutus malware, free cash (Omar Benbouazza <bvomar@...il.com>)
Re: Apple iOS 7.2 - Sim Lock Screen Display Bypass Vulnerability (Juha-Matti Laurio <juha-matti.laurio@...ti.fi>)
[SE-2012-01] Issue 69 details and IBM Java vulnerabilities (Security Explorations <contact@...urity-explorations.com>)
PayPal Inc Bug Bounty #61 - Persistent Mail Encoding Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[Security-news] SA-CONTRIB-2013-079 - Context - Mulitple Vulnerabilities (security-news@...pal.org)
Re: OliveOffice Mobile Suite 2.0.3 iOS - File Include Vulnerability (Źmicier Januszkiewicz <gauri@....by>)
[Security-news] SA-CONTRIB-2013-080 - Simplenews - Cross Site Scripting (XSS) (security-news@...pal.org)
[Wooyun]German Nutrition Society website Sql injection ("Wooyun.org" <help.en@...yun.org>)
Re: Apple iOS 7.2 - Sim Lock Screen Display Bypass Vulnerability (security curmudgeon <jericho@...rition.org>)

October 17 (6 messages)

[ MDVSA-2013:250 ] mysql (security@...driva.com)
Zikula CMS v1.3.5 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
PayPal Inc Bug Bounty #61 - Persistent Mail Encoding Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Bluetooth U v1.2.0 iOS - Directory Traversal Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA Software (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
[ISecAuditors Security Advisories] CSRF vulnerability in LinkedIn (ISecAuditors Security Advisories <advisories@...cauditors.com>)

October 18 (22 messages)

Elite Graphix ElitCMS 1.01 & PRO - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
NEW VMSA-2013-0012 VMware vSphere updates address multiple vulnerabilities ("\"VMware Security Response Center\"" <security@...are.com>)
Intelligence agency subversions and clandestine, illicit programs; lack of popular outrage [was Re: PRISM] (coderman <coderman@...il.com>)
Secure whistleblowing feedback / reporting systems in the content of compartmented information, endpoint security [was: [NSA bit… (coderman <coderman@...il.com>)
Re: Secure whistleblowing feedback / reporting systems in the content of compartmented information, endpoint security [was… (Jeffrey Walton <noloader@...il.com>)
Foreign Intelligence Resistant systems [was Re: reasonable return on investment; better investments in security [....]] (coderman <coderman@...il.com>)
Re: Secure whistleblowing feedback / reporting systems in the content of compartmented information, endpoint security [was: [NSA… (coderman <coderman@...il.com>)
Re: ... endpoint security, strong encryption (coderman <coderman@...il.com>)
Re: Foreign Intelligence Resistant systems [was Re: reasonable return on investment; better investments in security [.… (Scott Herbert <scott.a.herbert@...glema…)
[ MDVSA-2013:251 ] aircrack-ng (security@...driva.com)
[ MDVSA-2013:252 ] torque (security@...driva.com)
[ MDVSA-2013:253 ] libtar (security@...driva.com)
[ MDVSA-2013:254 ] quagga (security@...driva.com)
[ MDVSA-2013:255 ] clutter (security@...driva.com)
[ MDVSA-2013:256 ] apache-mod_fcgid (security@...driva.com)
Re: Secure whistleblowing feedback / reporting systems in the content of compartmented information, endpoint security [was: [NSA bitching] [forme… (dan@...r.org)
Malware Analysis (Abhay Yadav <sonuglc87@...il.com>)
[ANN] Struts 2.3.15.3 GA release available - security fix (Lukasz Lenart <lukaszlenart@...che.org>)
TAILS (Tor Linux distribution) contains extra root CAs ? LEGIT ? (BM-2cUW5x4Ur6WBV9gr53QNfsv7RTLQXeS4p7@...message.ch)
new tool mbr_store-1.0.tar.gz and new version of hwk (Levon Kayan <noptrix@...lsecurity.net>)
[SECURITY] [DSA 2780-1] mysql-5.1 security update (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Secure whistleblowing feedback / reporting systems in the content of compartmented information, endpoint security [was: [NSA… (coderman <coderman@...il.com>)

October 19 (2 messages)

Defense in depth -- the Microsoft way (part 12): NOOP security fixes ("Stefan Kanthak" <stefan.kanthak@...go.de>)
[SECURITY] [DSA 2781-1] python-crypto security update (Yves-Alexis Perez <corsac@...ian.org>)

October 20 (7 messages)

Linux Kernel Patches For Linux Kernel Security (x90c <geinblues@...il.com>)
x90c's site Announcement (x90c <geinblues@...il.com>)
glibc 2.5 <= reloc types to crash bug (x90c <geinblues@...il.com>)
[SECURITY] [DSA 2782-1] polarssl security update (Moritz Muehlenhoff <jmm@...ian.org>)
[Article] The Internal of Reloc .text (x90c <geinblues@...il.com>)
GreHack'13 - CTF - Call for DJ/Musicians/Bands (Fab Duchene <f.duchene@...hack.org>)
Re: glibc 2.5 <= reloc types to crash bug (Jeffrey Walton <noloader@...il.com>)

October 21 (10 messages)

CVE-2013-4390: Apache Sling open redirect on login (Carsten Ziegeler <cziegeler@...che.org>)
Advantages of Stack Guard over Stack Shield (Jaydeep Solanki <jaydp17@...il.com>)
Re: My File Explorer v1.3.1 iOS - Multiple Web Vulnerabilities (security curmudgeon <jericho@...rition.org>)
Re: Advantages of Stack Guard over Stack Shield (Jeffrey Walton <noloader@...il.com>)
[SECURITY] [DSA 2783-1] librack-ruby security update (Thijs Kinkhorst <thijs@...ian.org>)
Any particular reason why MS is scanning me for port 80? (silence_is_best@...hmail.com)
Wicked Smaht O-Dayuh in Quest One(tm) Password Manager (Johnny Bravo <j_o_h_n_n_y.b_r_a_v_o@....com>)
[CVE-2013-5702] Watchguard Server Center v11.7.4 Multiple Non-Persistent Cross-Site Scripting Vulnerabilities (Julien Ahrens <info@...security.com>)
Re: Any particular reason why MS is scanning me for port 80? (Michal Zalewski <lcamtuf@...edump.cx>)
Re: Any particular reason why MS is scanning me for port 80? (Gary Baribault <gary@...ibault.net>)

October 22 (14 messages)

Re: Advantages of Stack Guard over Stack Shield (Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>)
Re: PRISM ("Randal T. Rioux" <randy@...cyonlabs.com>)
Re: Any particular reason why MS is scanning me for port 80? (Bobby Broughton <bobby@...ehosting.com>)
Re: Any particular reason why MS is scanning me for port 80? (silence_is_best@...hmail.com)
Re: Any particular reason why MS is scanning me for port 80? (silence_is_best@...hmail.com)
Re: Any particular reason why MS is scanning me for port 80? (Pedro Worcel <pedro@...cel.com>)
[ANNOUNCE] eCL0WN for Android v1.0 released ("Jeroen van Beek" <jeroen@...lab.nl>)
[CVE-2013-4295] Apache Shindig information disclosure vulnerability (Ryan Baxter <rbaxter85@...che.org>)
Re: Any particular reason why MS is scanning me for port 80? (Bobby Broughton <bobby@...ehosting.com>)
[CVE-2013-2751, CVE-2013-2752] NETGEAR ReadyNAS Remote Root (Craig Young <vuln-report@...ur3.us>)
Web Attackers Blacklist ("J. Oquendo" <sil@...iltrated.net>)
[SECURITY] [DSA 2784-1] xorg-server security update (Moritz Muehlenhoff <jmm@...ian.org>)
Blog Post: Complete, Persistent Compromise of Netgear Wireless Routers (Zachary Cutlip <uid000@...il.com>)
Re: Any particular reason why MS is scanning me for port 80? (adam <adam@...sy.net>)

October 23 (31 messages)

[PSA-2013-1022-1] Microsoft Silverlight Invalid Typecast / Memory Disclosure (fulldis@...ketstormsecurity.org)
AusCERT2014: Call for Presentations NOW OPEN ("Parth Shukla" <pparth@...cert.org.au>)
AusCERT2014: Call for Presentations NOW OPEN ("Parth Shukla" <pparth@...cert.org.au>)
[CVE-2013-5939]PHPCMS guestbook module Stored XSS Vulnerability (root <root@...oker.org>)
[Article] The Audit DSOs of the rtld (x90c <geinblues@...il.com>)
[Article] The Audit DSOs of the rtld (x90c <geinblues@...il.com>)
[Article] The Audit DSOs of the rtld (x90c <geinblues@...il.com>)
[Article] The Audit DSOs of the rtld (x90c <geinblues@...il.com>)
[Article] The Audit DSOs of the rtld (x90c <geinblues@...il.com>)
[Article] The Audit DSOs of the rtld * NO SPAM * (x90c <geinblues@...il.com>)
Slightly OT: What SSL cert do you consider strongest? (David Miller <dmiller@...heus.org>)
Re: Blog Post: Complete, Persistent Compromise of Netgear Wireless Routers (Swair Mehta <swairmehta@...il.com>)
D-Link Security Contact? (infosec4breakfast <infosec4breakfast@...il.com>)
Handling bad ISP's (silence_is_best@...hmail.com)
Re: Slightly OT: What SSL cert do you consider strongest? (Jeffrey Walton <noloader@...il.com>)
Re: D-Link Security Contact? (Omar Benbouazza <bvomar@...il.com>)
[ MDVSA-2013:257 ] nss (security@...driva.com)
Re: Slightly OT: What SSL cert do you consider strongest? (gremlin@...mlin.ru)
darpa to automatically patch flaws (Georgi Guninski <guninski@...inski.com>)
Re: darpa to automatically patch flaws ("J. Oquendo" <sil@...iltrated.net>)
Re: darpa to automatically patch flaws (Jeffrey Walton <noloader@...il.com>)
Re: Slightly OT: What SSL cert do you consider strongest? (Fabian Wenk <fabian@...ks.ch>)
Cisco Security Advisory: Apache Struts 2 Command Execution Vulnerability in Multiple Cisco Products (Cisco Systems Product Security Incident Response Team <psi…)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Identity Services Engine (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
Cisco Security Advisory: Cisco IOS XR Software Route Processor Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@ci…)
Re: darpa to automatically patch flaws (dave <mrx@...pergander.org.uk>)
Microsoft Word Protect Document Password Feature (Hurgel Bumpf <l0rd_lunatic@...oo.com>)
Re: Handling bad ISP's (Alexander Georgiev <fd@...oo.de>)
[Security-news] SA-CONTRIB-2013-081 - Spaces - Access bypass (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-082 - Bean - Cross Site Scripting (XSS) (security-news@...pal.org)
Re: Handling bad ISP's (coderman <coderman@...il.com>)

October 24 (17 messages)

Re: Handling bad ISP's (coderman <coderman@...il.com>)
Re: Handling bad ISP's (Alex <fd@...oo.de>)
Re: Slightly OT: What SSL cert do you consider strongest? (Alex <fd@...oo.de>)
Re: Slightly OT: What SSL cert do you consider strongest? (Fabian Wenk <fabian@...ks.ch>)
Re: Slightly OT: What SSL cert do you consider strongest? (Jeffrey Walton <noloader@...il.com>)
[ISecAuditors Security Advisories] HTTP Response Splitting Vulnerability in WebCollab <= v3.30 (ISecAuditors Security Advisories <advisories@...cauditors.com>)
[CVE-2013-6239]Contexis 1.0 CMS, Reflected Xss (Fran <jfrancisco.bolivar@...il.com>)
.NET Runtime packer PoC (Yvan Janssens <ik@...nj.me>)
Re: Handling bad ISP's (silence_is_best@...hmail.com)
EasyXDM 2.4.16 multiple vulnerabilities (Krzysztof Kotowicz <kkotowicz+fd@...il.com>)
Re: Handling bad ISP's (silence_is_best@...hmail.com)
Re: Handling bad ISP's (Pedro Worcel <pedro@...cel.com>)
Re: Handling bad ISP's (Jordon Bedwell <envygeeks@...il.com>)
Re: Handling bad ISP's (Gregory Boddin <gregory@...hine.net>)
Re: Slightly OT: What SSL cert do you consider strongest? (John Adams <jna@...tter.com>)
CA20131024-01: Security Notice for CA SiteMinder ("Kotas, Kevin J" <Kevin.Kotas@...com>)
[SECURITY] [DSA 2783-2] librack-ruby regression update (Salvatore Bonaccorso <carnil@...ian.org>)

October 25 (5 messages)

Re: Handling bad ISP's ("Short, Chris" <cshort@...latchyinteractive.com>)
Re: NotSoSecure CTF (in partnership with Appsec USA) ("sid" <sid@...sosecure.com>)
Netgear Root Compromise via Command Injection (Zachary Cutlip <uid000@...il.com>)
AFU and IL vulnerabilities in Uploadify ("MustLive" <mustlive@...security.com.ua>)
DC4420 - London DEFCON - October meet - Tuesday 29th October 2013 (Major Malfunction <majormal@...ate-radio.org>)

October 26 (3 messages)

Feeder.co RSS Feeder 5.2 Chrome - Persistent Software Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Onpub CMS 1.4 & 1.5 - Multiple SQL Injection Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Paypal Inc Bug Bounty #104 - Persistent Exception Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

October 27 (6 messages)

[SECURITY] [DSA 2787-1] roundcube security update (Salvatore Bonaccorso <carnil@...ian.org>)
[CVE-2012-6297] DD-WRT v24-sp2 Command Injection (Craig Young <vuln-report@...ur3.us>)
Re: Slightly OT: What SSL cert do you consider strongest? (Fabian Wenk <fabian@...ks.ch>)
[SECURITY] [DSA 2785-1] chromium-browser security update (Michael Gilbert <mgilbert@...ian.org>)
[Wooyun]Apache Struts2 showcase multiple XSS ("Wooyun.org" <help.en@...yun.org>)
How I Compiled TrueCrypt For Windows and Matched the Official Binaries (Xavier de Carné de Carnavalet <x_decarn@...s.concordia.ca>)

October 28 (19 messages)

[SECURITY] [DSA 2786-1] icu security update (Michael Gilbert <mgilbert@...ian.org>)
WatchGuard - CVE-2013-6021 - Bug and exploit details (Jérôme Nokin <jerome.nokin@...il.com>)
[ISecAuditors Security Advisories] XSS vulnerability in LinkedIn (ISecAuditors Security Advisories <advisories@...cauditors.com>)
[scip_Advisory 10847] MobileIron 4.5.4 Device Registration regpin Cross Site Scripting (Marc Ruef <maru@...p.ch>)
Re: How I Compiled TrueCrypt For Windows and Matched the Official Binaries (Pedro Worcel <pedro@...cel.com>)
Mavericks...less then a bargin? (silence_is_best@...hmail.com)
ILIAS eLearning 4.3.4 & 4.4 CMS - Persistent Notes Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Re: Mavericks...less then a bargin? (Joel Esler <joel.esler@...com>)
Re: How I Compiled TrueCrypt For Windows and Matched the Official Binaries (besancon@...h.jussieu.fr)
Re: Mavericks...less then a bargin? (silence_is_best@...hmail.com)
Re: Mavericks...less then a bargin? (Jeffrey Walton <noloader@...il.com>)
Re: Mavericks...less then a bargin? (PuNkErX w <punk3rx@...mail.com>)
[ MDVSA-2013:258 ] icu (security@...driva.com)
[ MDVSA-2013:259 ] x11-server (security@...driva.com)
[ MDVSA-2013:260 ] x11-server (security@...driva.com)
[ MDVSA-2013:261 ] dropbear (security@...driva.com)
[ MDVSA-2013:262 ] python-pycrypto (security@...driva.com)
Re: Mavericks...less then a bargin? (Joel Esler <joel.esler@...com>)
Re: Mavericks...less then a bargin? (Jeffrey Walton <noloader@...il.com>)

October 29 (14 messages)

Re: Mavericks...less then a bargin? (Omar Benbouazza <bvomar@...il.com>)
Re: Mavericks...less then a bargin? (silence_is_best@...hmail.com)
Re: Mavericks...less then a bargin? (silence_is_best@...hmail.com)
Re: Mavericks...less then a bargin? (Luther Blissett <lblissett@...anoici.org>)
CVE-2013-5695 Multilple Cross Site Scripting (XSS) Attacks in Ops View ("J. Oquendo" <sil@...ensive.net>)
CVE-2013-5694 Blind SQL Injection in Ops View ("J. Oquendo" <sil@...ensive.net>)
ASUS RT-N13U Unsecured Telnet on LAN and WAN (Shelby Spencer <pwd_manager@...mail.com>)
Advisory: sup MUA Command Injection (joernchen <joernchen@...noelit.de>)
Olat CMS 7.8.0.1 - Persistent Calender Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
GTX CMS 2013 Optima - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[ MDVSA-2013:263 ] roundcubemail (security@...driva.com)
Re: ASUS RT-N13U Unsecured Telnet on LAN and WAN (Shelby Spencer <pwd_manager@...mail.com>)
Google Play In-Billing Library Hacked (Dominik Schürmann <dominik@...inikschuermann.de>)
Cryptolocker- Hey SOPHOS (RandallM <randallm@...mail.com>)

October 30 (12 messages)

Apache PHP Remote Exploit - apache-magika.c (king cope <isowarez.isowarez.isowarez@...glemail.com>)
ap-unlock.py - apache + php remote code exection exploit (Levon Kayan <noptrix@...lsecurity.net>)
New version of JBrute: v0.97 (beta) (Gonzalo Camino <gonzalocamino@...il.com>)
Real-World CSRF attack hijacks DNS Server configuration of TP-Link routers (Jakob Lell <jakob@...oblell.com>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco IOS XE Software for 1000 Series Aggregation Services Router… (Cisco Systems Product Security Incident…)
Re: ASUS RT-N13U Unsecured Telnet on LAN and WAN (Craig Young <vuln-report@...ur3.us>)
[Security-news] SA-CONTRIB-2013-084 - FileField Sources - Access Bypass (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-083 - Quiz - Access Bypass (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-085 - Feed Element Mapper - Cross Site Scripting (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-086 - Monster Menus - Access bypass (security-news@...pal.org)
nullcon Goa V First speaker list and CFP closes soon (nullcon <nullcon@...lcon.net>)
[Security-news] PSA-2013-002: Direct download links available even during Drupal.org upgrade window (security-news@...pal.org)

October 31 (3 messages)

[SECURITY] [DSA 2788-1] iceweasel security update (Raphael Geissert <geissert@...ian.org>)
ap-unlock-v2.py - apache/$webserver + php remote code execution exploit (Levon Kayan <noptrix@...lsecurity.net>)
[ MDVSA-2013:264 ] firefox (security@...driva.com)

294 messages

Powered by blists - more mailing lists