full-disclosure mailing list - 2013/11

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2013/11

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹ 13	² 2	³ 8
⁴ 8	⁵ 10	⁶ 8	⁷ 2	⁸ 4	⁹ 17	¹⁰ 3
¹¹ 5	¹² 6	¹³ 9	¹⁴ 1	¹⁵ 15	¹⁶ 7	¹⁷ 8
¹⁸ 6	¹⁹ 15	²⁰ 14	²¹ 18	²² 4	²³ 1	²⁴ 2
²⁵ 5	²⁶ 5	²⁷ 6	²⁸ 11	²⁹ 2	³⁰ 7

Messages by day:

November 1 (13 messages)

coderman's keys (coderman <coderman@...il.com>)
Re: coderman's keys (coderman <coderman@...il.com>)
Re: ASUS RT-N13U Unsecured Telnet on LAN and WAN (Rob Whitney <xnite@...te.org>)
[Article] The Internal of Reloc .text (x90c <geinblues@...il.com>)
How to take advantage of Chrome autofill feature to get sensitive information ("vulns@...aths.com" <vulns@...aths.com>)
[SECURITY] [DSA 2789-1] strongswan security update (Yves-Alexis Perez <corsac@...ian.org>)
Re: [cryptography] coderman's keys (Natanael <natanael.l@...il.com>)
Re: [cryptography] coderman's keys (Julian Silden Langlo <langlo94@...il.com>)
Re: [cryptography] coderman's keys (Rob Whitney <xnite@...te.org>)
[CVE-2013-5726] - Tweetbot for iOS and Mac user disclosure/privacy issue (Guillaume Ross <guillaume@...aryfactory.ca>)
Re: [cryptography] coderman's keys (Michael Hallgren <m.hallgren@...e.fr>)
Re: [cryptography] coderman's keys (Jeffrey Goldberg <jeffrey@...dmark.org>)
pdirl PHP Directory Listing 1.0.4 - Cross Site Scripting Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)

November 2 (2 messages)

[SECURITY] [DSA 2790-1] nss security update (Salvatore Bonaccorso <carnil@...ian.org>)
XXE Injection in Spring Framework ("MustLive" <mustlive@...security.com.ua>)

November 3 (8 messages)

Case Study: CVE-2010-0436 KDE TOCTTOU vulnerability (x90c <geinblues@...il.com>)
Hack.LU 2013 CTF Wannabe challenge writeup (Arne Swinnen <contact@...eswinnen.net>)
HOTBOX Multiple Vulnerabilities (Oz <ozelisyan@...il.com>)
Re: [cryptography] coderman's keys (Pedro Worcel <pedro@...cel.com>)
Defense in depth -- the Microsoft way (part 13): surprising and inconsistent behaviour, sloppy coding, sloppy QA, slop… ("Stefan Kanthak" <stefan.kanthak@...go.…)
Re: Defense in depth -- the Microsoft way (part 13): surprising and inconsistent behaviour, sloppy coding, sloppy QA, sloppy do… (Mario Vilas <mvilas@...il.com>)
Re: [cryptography] coderman's keys (Daniël W. Crompton <daniel.crompton@...il.com>)
Re: Defense in depth -- the Microsoft way (part 13): surprising and inconsistent behaviour, sloppy coding, sloppy QA, … ("Stefan Kanthak" <stefan.kanthak@...go.…)

November 4 (8 messages)

XADV-2013003 Linux Kernel eCryptfs write_tag_3_packet Heap Buffer Overflow Vulnerability (x90c <geinblues@...il.com>)
XADV-2013003 Linux Kernel eCryptfs write_tag_3_packet Heap Buffer Overflow Vulnerability (x90c <geinblues@...il.com>)
[SECURITY] [DSA 2791-1] tryton-client security update (Florian Weimer <fw@...eb.enyo.de>)
Power of Community 2013 special releases of ICS/SCADA toolkit (scadastrangelove <scadastrangelove@...il.com>)
Re: [cryptography] coderman's keys (Daniel Llewellyn <diddledan@...il.com>)
Re: [cryptography] coderman's keys (Daniel Llewellyn <diddledan@...il.com>)
[SECURITY] [DSA 2792-1] wireshark security update (Salvatore Bonaccorso <carnil@...ian.org>)
XSS and FPD vulnerabilities in LBG Zoom In/Out Effect Slider for WordPress ("MustLive" <mustlive@...security.com.ua>)

November 5 (10 messages)

Re: XXE Injection in Spring Framework ("/-\\\\ndrew /\\//ady" <andrew@...eformat.com>)
Re: ASUS RT-N13U Unsecured Telnet on LAN and WAN (Shelby Spencer <pwd_manager@...mail.com>)
Re: XXE Injection in Spring Framework (Mark Thomas <mthomas@...ivotal.com>)
[ISecAuditors Security Advisories] SQL Injection vulnerability in "Project'Or RIA" allow arbitrary access to the databa… (ISecAuditors Security Advisories <advis…)
[ISecAuditors Security Advisories] Multiple XSS vulnerabilities in "Project'Or RIA" (ISecAuditors Security Advisories <advisories@...cauditors.com>)
Geox fails.. (pr0n4h4x@....hush.com)
[ISecAuditors Security Advisories] LinkedIn social network is affected by Persistent Cross-Site Scripting vulnerability (ISecAuditors Security Advisories <advis…)
[SOJOBO-ADV-13-03] - Wordpress plugin Gallery Bank 2.0.19 Reflected Cross Site Scripting (<advisories@...omio.com>)
Re: Geox fails.. (Alex <fd@...oo.de>)
CORE-2013-0704 - Vivotek IP Cameras RTSP Authentication Bypass (CORE Advisories Team <advisories@...esecurity.com>)

November 6 (8 messages)

Flatpress version 1.0 remote code execution NULLday (Wire Ghoul <wireghoul@...il.com>)
CVE-2013-4425: Private key disclosure, Osirix (lite, 64bit and FDA cleader version) (Medical Application) (Dirk-Willem van Gulik <dirkx@...weaving.org>)
Cisco Security Advisory: Cisco TelePresence VX Clinical Assistant Administrative Password Reset Vulnerability (Cisco Systems Product Security Incident Response…)
Cisco Security Advisory: Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team …)
Cisco Security Advisory: Cisco WAAS Mobile Remote Code Execution Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
[Security-news] SA-CONTRIB-2013-087 - Payment for Webform - Access Bypass (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-089 - Node Access Keys - Access Bypass (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-088 - Secure Pages - Missing Encryption of Sensitive Data (security-news@...pal.org)

November 7 (2 messages)

FOSCAM Wireless IP Camera - SSID Cross Site Scripting (LIAD Mizrachi <liadmz@...il.com>)
I'm new here, and I already have something to share (Jack Johnson <jack@...l.umbrellix.tk>)

November 8 (4 messages)

Apple MacOSX 10.9 Hard Link Memory Corruption ("[CXSEC]" <submit@...ec.org>)
Re: I'm new here, and I already have something to share (Alex <fd@...oo.de>)
OpenSSH Security Advisory: gcmrekey.adv (coderman <coderman@...il.com>)
Re: OpenSSH Security Advisory: gcmrekey.adv (coderman <coderman@...il.com>)

November 9 (17 messages)

Re: OpenSSH Security Advisory: gcmrekey.adv (Harry Hoffman <hhoffman@...solutions.net>)
Re: OpenSSH Security Advisory: gcmrekey.adv (coderman <coderman@...il.com>)
Re: OpenSSH Security Advisory: gcmrekey.adv (yersinia <yersinia.spiros@...il.com>)
[SECURITY] [DSA 2793-1] libav security update (Moritz Muehlenhoff <jmm@...ian.org>)
Vulnerabilities in Redaxo 4.5 CMS (Root User <anonymous@...closure.com>)
Re: OpenSSH Security Advisory: gcmrekey.adv (CERT OPS Marienfeldt <cert.marienfeldt@...il.com>)
Cloud Questions (David Miller <dmiller@...heus.org>)
Re: I'm new here, and I already have something to share (Jasper Kips <jasper@...netkips.nl>)
Re: OpenSSH Security Advisory: gcmrekey.adv (Bob Man Van Kim <evdo.hsdpa@...il.com>)
Re: I'm new here, and I already have something to share (Jack Johnson <jack@...l.umbrellix.tk>)
Re: Cloud Questions (Jeffrey Walton <noloader@...il.com>)
Re: Cloud Questions (Yvan Janssens <ik@...nj.me>)
Re: Cloud Questions (silence_is_best@...hmail.com)
Re: Cloud Questions (Jeffrey Walton <noloader@...il.com>)
Re: Cloud Questions (Jeffrey Walton <noloader@...il.com>)
XADV-2013003 Linux Kernel bt8xx Video Driver IOCTL Heap Overflow (x90c <geinblues@...il.com>)
the advisory canceled. (x90c <geinblues@...il.com>)

November 10 (3 messages)

SPLUNK > 6 universal forwarder cypher weakness (fortinet42@....hush.com)
[ MDVSA-2013:265 ] kernel (security@...driva.com)
[SECURITY] [DSA 2794-1] spip security update (Salvatore Bonaccorso <carnil@...ian.org>)

November 11 (5 messages)

XADV-2013003 Linux Kernel fbdev Driver arcfb_write() Overflow (x90c <geinblues@...il.com>)
D-Link Router 2760N (DSL-2760U-BN) Multiple XSS (LIAD Mizrachi <liadmz@...il.com>)
XADV-2013004 Linux Kernel ipvs Kernel Stack Overflow (x90c <geinblues@...il.com>)
Re: XADV-2013004 Linux Kernel ipvs Kernel Stack Overflow (Alan J. Wylie <shyyqvfpybfher@...ie.me.uk>)
Another Apple Security Failure (Apple Mail on the iPhone).... (Jeffrey Walton <noloader@...il.com>)

November 12 (6 messages)

WebSurgery v1.1 released (Web application security testing suite) ("John Stamatakis" <john.stamatakis@...risetech.gr>)
CSRF vulnerabilities in OS of fortianalyzer 5.0.4 (William Costa <william.costa@...il.com>)
Windows Local DOS on Win32 Handle Validation (sixtyvividtails <sixtyvividtails@...dex.com>)
bugs in IJG jpeg6b & libjpeg-turbo (Michal Zalewski <lcamtuf@...edump.cx>)
n.runs-SA-2013.006 - Microsoft Outlook/Crypto API - Design Bug (<security@...ns.com>)
Recruiting Troopers - Call for Papers, March 19-20 2014 (Enno Rey <erey@...w.de>)

November 13 (9 messages)

Securelist.com (Kaspersky) released a misleading information about Kelihos Botnet actual status (アドリアンヘンドリック <unixfreaxjp22@...il.com>)
[SECURITY] [DSA 2795-1] lighttpd security update (Michael Gilbert <mgilbert@...ian.org>)
Re: Windows Local DOS on Win32 Handle Validation (sixtyvividtails <sixtyvividtails@...dex.com>)
ColdFusion and Adobe Flash Player Security Updates (Osama Alrashid <osama.alrashid@...il.com>)
[SECURITY] [DSA 2796-1] torque security update (Salvatore Bonaccorso <carnil@...ian.org>)
[Security-news] SA-CONTRIB-2013-091 - Groups, Communities and Co (GCC) - Access Bypass (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-090 - Revisioning - Access Bypass (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-092 - Misery - Denial of Service (DOS) vulnerability. (security-news@...pal.org)
[SECURITY] [DSA 2797-1] icedove security update (Moritz Muehlenhoff <jmm@...ian.org>)

November 14 (1 message)

whatsapp opening url in background (Frank Habermann <lordlamer@...dlamer.de>)

November 15 (15 messages)

NEW VMSA-2013-0013 VMware Workstation host privilege escalation vulnerability ("\"VMware Security Response Center\"" <security@...are.com>)
Re: Another Apple Security Failure (Apple Mail on the iPhone).... (Caspian Kilkelly <caspian@...dom-interrupt.org>)
Re: Another Apple Security Failure (Apple Mail on the iPhone).... (Jeffrey Walton <noloader@...il.com>)
Re: whatsapp opening url in background (Frank Habermann <lordlamer@...dlamer.de>)
Re: whatsapp opening url in background ("Ander Juaristi Alamos" <ajuaristi@....es>)
Re: whatsapp opening url in background (Jerome Athias <athiasjerome@...il.com>)
[OVSA20131108] OpenVAS Manager And OpenVAS Administrator Vulnerable To Partial Authentication Bypass (Tim Brown <timb@...nvas.org>)
Re: whatsapp opening url in background (Ferran Pichel <ferran.pichel@...sec.com>)
CVE-2013-5966 - XSS in ZK Framework (Stephan Rickauer <stephan.rickauer@...c.ch>)
Re: whatsapp opening url in background (Alex <fd@...oo.de>)
Re: whatsapp opening url in background (Ferran Pichel <ferran.pichel@...sec.com>)
Re: whatsapp opening url in background (Pål Nilsen <paal.nilsen@...il.com>)
Some more on Geox.. (pr0nh4x@...h.ai)
XADV-2013005 FreeBSD 10 <= nand Driver IOCTL Kernel Memory Leak Bug (x90c <geinblues@...il.com>)
XADV-2013006 FreeBSD <= 10 kernel qlxge/qlxgbe Driver IOCTL Multiple Kernel Memory Leak Bugs (x90c <geinblues@...il.com>)

November 16 (7 messages)

ClipBucket v2.6-r738 Arbitrary File Upload 0-Day (Rob Whitney <xnite@...te.org>)
Re: ClipBucket v2.6-r738 Arbitrary File Upload 0-Day (Henri Salo <henri@...v.fi>)
CVE-2013-622 Livezilla Remote Code Execution (Cure-2013-1007) (Curesec Research Team <crt@...esec.com>)
[CVE-2013-6356] Avira Secure Backup v1.0.0.1 Multiple Registry Key Value Parsing Local Buffer Overflow Vulnerability (Julien Ahrens <info@...security.com>)
Ip address and mac address hardcoded (mramelie@...hmail.com)
Re: Ip address and mac address hardcoded (coderman <coderman@...il.com>)
Re: Ip address and mac address hardcoded (Augusto Pereyra <aepereyra@...il.com>)

November 17 (8 messages)

[SECURITY] [DSA 2795-2] lighttpd regression update (Michael Gilbert <mgilbert@...ian.org>)
Re: Ip address and mac address hardcoded (Maximilian Grobecker <max@...becker-wtal.de>)
Re: Ip address and mac address hardcoded (Jason Hellenthal <jhellenthal@...aix.net>)
Re: Ip address and mac address hardcoded (mramelie@...hmail.com)
Re: Ip address and mac address hardcoded (Maximilian Grobecker <max@...becker-wtal.de>)
Re: [CVE-2013-6356] Avira Secure Backup v1.0.0.1 Multiple Registry Key Value Parsing Local Buffer Overflow Vulnerability (Jann Horn <jann@...jh.net>)
Re: [CVE-2013-6356] Avira Secure Backup v1.0.0.1 Multiple Registry Key Value Parsing Local Buffer Overflow Vulnerability (Julien Ahrens <info@...security.com>)
BF, LE and IAA vulnerabilities in InstantCMS ("MustLive" <mustlive@...security.com.ua>)

November 18 (6 messages)

XADV-2013007 Linux Kernel bt8xx Video Driver IOCTL Heap Overflow (x90c <geinblues@...il.com>)
[SECURITY] [DSA 2797-1] chromium-browser security update (Michael Gilbert <mgilbert@...ian.org>)
[SECURITY] [DSA 2798-1] curl security update (Michael Gilbert <mgilbert@...ian.org>)
Kaseya 6.3 Arbitrary File Upload Vulnerability (Thomas Hibbert <Thomas.Hibbert@...urity-assessment.com>)
DesktopCentral Arbitrary File Upload Vulnerability (Thomas Hibbert <Thomas.Hibbert@...urity-assessment.com>)
[SOJOBO-ADV-13-04] - PHP-Nuke 8.2.4 multiple vulnerabilities (<advisories@...omio.com>)

November 19 (15 messages)

PayPal Inc Bug Bounty #65 China - Redirect Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
PayPal Inc Bug Bounty #42 - Persistent POST Inject Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Paypal Inc Bug Bounty #47 ALYZ - Persistent Search Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
spamtitan 6 root exploit (c1088422@...ts.grok.org.uk)
pineapp mailsecure pwnage (full-disclosure-bounces@...ts.grok.org.uk)
Intersystems Cache Remote Code Execution (via Default Minimal Security Install) (Mike Arnold <bruk0ut.sec@...il.com>)
16TH AVAR INTERNATIONAL SECURITY CONFERENCE 2013 - (4th-7th Dec'13, Chennai. India) (Gregory Panakkal <gregory_panakkal@...tmail.fm>)
XADV-2013008 Linux Kernel 3.11.7 <= sk_attach_filter Kernel Heap Corruption (x90c <geinblues@...il.com>)
[ MDVSA-2013:266 ] java-1.6.0-openjdk (security@...driva.com)
[ MDVSA-2013:267 ] java-1.7.0-openjdk (security@...driva.com)
pineapp mailsecure no authenticated privilege escalation & remote execution code (Ruben Garrote <rubengarrote@...il.com>)
List Charter (John Cartwright <johnc@...k.org.uk>)
[ MDVSA-2013:268 ] torque (security@...driva.com)
DoS vulnerability in Internet Explorer 6, 7, 8 (access violation) ("MustLive" <mustlive@...security.com.ua>)
Re: DoS vulnerability in Internet Explorer 6, 7, 8 (access violation) (laurent gaffie <laurent.gaffie@...il.com>)

November 20 (14 messages)

Paypal Bug Bounty #14 - Persistent Payment Mail Encoding Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Appologics AirBeam v1.9.2 iOS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Capstone disassembly framework: looking for Beta-testers (Nguyen Anh Quynh <aquynh@...il.com>)
SKIDATA RFID Freemotion.Gate Unauthenticated Web Service Aribtrary Remote Command Execution (Dennis Kelly <dennis.kelly@...il.com>)
CORRECTION: Kaseya 6.3 Arbitrary File Upload Vulnerability (Thomas Hibbert <Thomas.Hibbert@...urity-assessment.com>)
CORRECTION: DesktopCentral Arbitrary File Upload Vulnerability (Thomas Hibbert <Thomas.Hibbert@...urity-assessment.com>)
[ MDVSA-2013:269 ] firefox (security@...driva.com)
[ MDVSA-2013:270 ] nss (security@...driva.com)
[Security-news] SA-CONTRIB-2013-093 - Invitation - Access Bypass (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-094 - EU Cookie Compliance - Cross Site Scripting (XSS) (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-096 - Entity reference - Access bypass (security-news@...pal.org)
[Security-news] SA-CONTRIB-2013-095 - Organic Groups - Access bypass (security-news@...pal.org)
[SECURITY] [DSA 2798-2] curl security update (Salvatore Bonaccorso <carnil@...ian.org>)
[Security-news] SA-CORE-2013-003 - Drupal core - Multiple vulnerabilities (security-news@...pal.org)

November 21 (18 messages)

Re: XADV-2013007 Linux Kernel bt8xx Video Driver IOCTL Heap Overflow (Dan Carpenter <dan.carpenter@...cle.com>)
Imperva WAF/DAF 9.5 patch8 and 10.0 patch 2 localroot vulnerability ("steve jobs" <job.steve@...l.com>)
[ MDVSA-2013:271 ] pmake (security@...driva.com)
[ MDVSA-2013:272 ] poppler (security@...driva.com)
[ MDVSA-2013:273 ] libjpeg (security@...driva.com)
[ MDVSA-2013:274 ] libjpeg (security@...driva.com)
[ MDVSA-2013:275 ] krb5 (security@...driva.com)
[ MDVSA-2013:276 ] curl (security@...driva.com)
[ MDVSA-2013:277 ] lighttpd (security@...driva.com)
Re: [Dailydave] Capstone disassembly framework: looking for Beta-testers (Nguyen Anh Quynh <aquynh@...il.com>)
[ MDVSA-2013:278 ] samba (security@...driva.com)
Re: [Dailydave] Capstone disassembly framework: looking for Beta-testers (Nguyen Anh Quynh <aquynh@...il.com>)
Re: Imperva WAF/DAF 9.5 patch8 and 10.0 patch 2 localroot vulnerability (adam <iarethebest@...il.com>)
Re: [Dailydave] Capstone disassembly framework: looking for Beta-testers (Albert López <newbiesworld@...mail.com>)
Facebook Vulnerability Discloses Friends Lists Defined as Private (qsrc Quotium <qsrc@...tium.com>)
Re: Imperva WAF/DAF 9.5 patch8 and 10.0 patch 2 localroot vulnerability ("steve jobs" <job.steve@...l.com>)
[SECURITY] [DSA 2801-1] libhttp-body-perl security update (Salvatore Bonaccorso <carnil@...ian.org>)
DC4420 (DefCon London) meeting next Tuesday, 26th November 2013 (Tony Naggs <tonynaggs@...il.com>)

November 22 (4 messages)

[SECURITY] [DSA 2802-1] nginx security update (Thijs Kinkhorst <thijs@...ian.org>)
[ MDVSA-2013:279 ] wireshark (security@...driva.com)
[ MDVSA-2013:280 ] memcached (security@...driva.com)
Code Execution vulnerability in Contact Form 7 for WordPress ("MustLive" <mustlive@...security.com.ua>)

November 23 (1 message)

Re: Imperva WAF/DAF 9.5 patch8 and 10.0 patch 2 localroot vulnerability (tennc <tennc@....com>)

November 24 (2 messages)

[ MDVSA-2013:281 ] nginx (security@...driva.com)
Defense in depth -- the Microsoft way (part 14): incomplete, misleading and dangerous documentation ("Stefan Kanthak" <stefan.kanthak@...go.de>)

November 25 (5 messages)

[ MDVSA-2013:282 ] perl-HTTP-Body (security@...driva.com)
Tapuz - Flix Password ByPass (LIAD Mizrachi <liadmz@...il.com>)
[ MDVSA-2013:283 ] glibc (security@...driva.com)
[ MDVSA-2013:284 ] glibc (security@...driva.com)
[SECURITY] [DSA 2800-1] nss security update (Salvatore Bonaccorso <carnil@...ian.org>)

November 26 (5 messages)

[ MDVSA-2013:285 ] bugzilla (security@...driva.com)
[ MDVSA-2013:286 ] ruby (security@...driva.com)
[SECURITY] [DSA 2803-1] quagga security update (Moritz Muehlenhoff <jmm@...ian.org>)
[ MDVSA-2013:287 ] drupal (security@...driva.com)
[SECURITY] [DSA 2804-1] drupal7 security update (Moritz Muehlenhoff <jmm@...ian.org>)

November 27 (6 messages)

Re: Tapuz - Flix Password ByPass (tennc <tennc@....com>)
[HITB-Announce] #HITB2014AMS Call for Papers Now Open (Hafez Kamal <aphesz@...kinthebox.org>)
Yahoo Open Redirect Vulnerability - or "Designing vulnerabilities" (Robert Kugler <robert.kugler10@...il.com>)
Uptime Agent 5.0.1 Stack Overflow Vulnerability (Denis Andzakovic <denis.andzakovic@...urity-assessment.com>)
Wapiti 2.3.0 - the python-powered web-application vulnerability scanner (Nicolas Surribas <nicolas.surribas@...il.com>)
Re: Wapiti 2.3.0 - the python-powered web-application vulnerability scanner (coderman <coderman@...il.com>)

November 28 (11 messages)

Re: DEF CON 19 - hackers get hacked! (coderman <coderman@...il.com>)
Re: DEF CON 19 - hackers get hacked! , DEF CON 20 was not DRT (coderman <coderman@...il.com>)
CVE-2013-6271 Remove Android Device Lock by rouge app (Curesec Research Team <crt@...esec.com>)
D-Link! What's wrong with you? (matteo ignaccolo <matteo.ignaccolo@...il.com>)
[SECURITY] [DSA 2805-1] sup-mail security update (Luciano Bello <luciano@...ian.org>)
Pastebin Captcha Bypass (Scott Arciszewski <scott@...iszewski.me>)
CVE-2013-6224: XSS in Livezilla prior version 5.1.1.0 (Curesec Research Team <crt@...esec.com>)
iCloud and privacy...last word (silence_is_best@...hmail.com)
CVE-2013-6223: Local Password Disclosure in Livezilla prior version 5.1.1.0 (Curesec Research Team <crt@...esec.com>)
NewsAktuell PressePortal DE - Remote SQL Injection Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
RFP: FOIA with privacy waivers[0] for oversight (coderman <coderman@...il.com>)

November 29 (2 messages)

Re: iCloud and privacy...last word (Jeffrey Walton <noloader@...il.com>)
[SECURITY] [DSA 2806-1] nbd security update (Thijs Kinkhorst <thijs@...ian.org>)

November 30 (7 messages)

Re: RFP: FOIA with privacy waivers[0] for oversight (coderman <coderman@...il.com>)
Seems like Coinbase Security Team doesn't know how their cookie works (giulio@...he.no)
[SECURITY] [DSA 2807-1] links2 security update (Moritz Muehlenhoff <jmm@...ian.org>)
Re: Seems like Coinbase Security Team doesn't know how their cookie works (Jeffrey Walton <noloader@...il.com>)
Day of bugs in WordPress 3 ("MustLive" <mustlive@...security.com.ua>)
Vulnerabilities hiddenly fixed in WordPress 3.6 and 3.6.1 ("MustLive" <mustlive@...security.com.ua>)
Re: Vulnerabilities hiddenly fixed in WordPress 3.6 and 3.6.1 (Ryan Dewhurst <ryandewhurst@...il.com>)

222 messages

Powered by blists - more mailing lists