full-disclosure mailing list - 2014/03

Messages by day:

March 1 (15 messages)

• [ANNOUNCE] CVE-2014-0002 and CVE-2014-0003 - Apache Camel critical disclosure vulnerability (Christian Mueller <cmueller@...che.org>)
• CVE-2014-1216 - Remote Command Execution in Fitnesse Wiki (Portcullis Advisories <advisories@...tcullis-security.com>)
• CVE-2014-5880 - Authentication Bypass in Oracle Demantra (Portcullis Advisories <advisories@...tcullis-security.com>)
• CVE-2014-5795 - Database Credentials Leak in Oracle Demantra (Portcullis Advisories <advisories@...tcullis-security.com>)
• Re: CVE-2014-5877 - Local File Inclusion in Oracle Demantra (Portcullis Advisories <advisories@...tcullis-security.com>)
• Re: CVE-2014-5880 - Authentication Bypass in Oracle Demantra (Arron Dowdeswell <acd@...35.com>)
• Re: CVE-2014-5795 - Database Credentials Leak in Oracle Demantra (Arron Dowdeswell <acd@...35.com>)
• CVE-2014-0371 - Reflective XSS in Oracle Demantra (Portcullis Advisories <advisories@...tcullis-security.com>)
• CVE-2014-0379 - Stored Cross-site Scripting in Oracle Demantra (Portcullis Advisories <advisories@...tcullis-security.com>)
• CVE-2014-0372 - SQL Injection in Oracle Demantra (Portcullis Advisories <advisories@...tcullis-security.com>)
• Re: CVE-2014-5795 - Database Credentials Leak in Oracle Demantra (Portcullis Advisories <advisories@...tcullis-security.com>)
• Re: CVE-2014-5880 - Authentication Bypass in Oracle Demantra (Portcullis Advisories <advisories@...tcullis-security.com>)
• Re: CVE-2014-5877 - Local File Inclusion in Oracle Demantra (Portcullis Advisories <advisories@...tcullis-security.com>)
• [CVE-2013-6231] Remote Privilege Escalation in SpagoBI v4.0 (Christian Catalano <ch.catalano@...il.com>)
• CVE-2014-5877 - Local File Inclusion in Oracle Demantra (Portcullis Advisories <advisories@...tcullis-security.com>)

• [CVE-2013-6232] Persistent Cross-Site Scripting (XSS) in SpagoBI v4.0 (Christian Catalano <ch.catalano@...il.com>)
• [CVE-2013-6233] Persistent HTML Script Insertion permits offsite-bound forms in SpagoBI v4.0 (Christian Catalano <ch.catalano@...il.com>)
• [CVE-2013-6234] XSS File Upload in SpagoBI v4.0 (Christian Catalano <ch.catalano@...il.com>)
• [CVE-2014-2206] GetGo Download Manager HTTP Response Header Buffer Overflow Remote Code Execution (Julien Ahrens <info@...security.com>)
• [SECURITY] [DSA 2868-1] php5 security update (Salvatore Bonaccorso <carnil@...ian.org>)

• CSRF in WordPress plugin Google Analytics MU 2.3 (Harry Metcalfe <harry@....com>)
• CVE-2014-2238 -- MantisBT aux mod (Brandon Perry <bperry.volatile@...il.com>)

• [Announce] Apache Shiro 1.2.3 Released - Security Advisory (Brian Demers <brian.demers@...il.com>)
• [SECURITY] [DSA 2869-1] gnutls26 security update (Yves-Alexis Perez <corsac@...ian.org>)
• [CVE-2014-0334] XSS in CMS made simple, plus other security issues (Pedro Ribeiro <pedrib@...il.com>)
• Google Inc., (Youtube.com) Unrestricted File Upload Vulnerability. ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• [CFP] Hack In Paris 2014 CFP is postponed to March 10 (Damien Cauquil <d.cauquil@...dream.com>)
• Netvolution CMS 3 SQL injection (Project Zero Labs <labs@...jectzero.gr>)

• [Call for Presenters] Security BSides Las Vegas (BSidesLV Info <info@...deslv.org>)
• [CVE-2014-0072] Apache Cordova File-Transfer insecure defaults (Ian Clelland <iclelland@...omium.org>)
• [CVE-2014-0073] Apache Cordova In-App-Browser privilege escalation (Ian Clelland <iclelland@...omium.org>)
• CVE-2014-1599 - 39 Type-1 XSS in SFR ADSL/Fiber Box ("alejandr0.w3b.p0wn3r" <alejandr0.w3b.p0wn3r@...il.com>)
• Google's (YouTube) Arbitrary File Upload Vulnerability Report with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Capstone disassembly framework 2.1 released! (Nguyen Anh Quynh <aquynh@...il.com>)
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Wireless LAN Controllers (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• Cisco Security Advisory: Cisco Small Business Router Password Disclosure Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
• Tool Release: nsdtool - netgear switch discovery (Curesec Research Team <crt@...esec.com>)
• [CVE-2014-0683]Router Cisco RV110W - RV215W - CVR100W - Bypass Login Page - Admin Password Disclosure (Gustavo Speranza <gustavosj.js@...il.com>)
• [Security-news] SA-CONTRIB-2014-029 - Mime Mail - Access Bypass (security-news@...pal.org)
• [Security-news] SA-CONTRIB-2014-028 - Masquerade - Access bypass (security-news@...pal.org)
• [Security-news] SA-CONTRIB-2014-027 - NewsFlash Theme - XSS (security-news@...pal.org)
• Re: [OT] pls ignore (Gaurang Pandya <gaubrig@...oo.com>)

• SonicWall Dashboard Backend Server - Client Side Cross Site Scripting Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
• Re: Cisco Security Advisory: Cisco Small Business Router Password Disclosure Vulnerability ("Brian M. Waters" <brian@...anmwaters.net>)
• [ANN] Struts 2.3.16.1 GA release available - security fix (Lukasz Lenart <lukaszlenart@...che.org>)
• CVE-2014-2044 - Remote Code Execution in ownCloud (Portcullis Advisories <advisories@...tcullis-security.com>)
• OT What is happening with bitcoins? (Georgi Guninski <guninski@...inski.com>)
• Re: OT What is happening with bitcoins? (Brandon Perry <bperry.volatile@...il.com>)
• Re: [ANN] Struts 2.3.16.1 GA release available - security fix (Tim <tim-security@...tinelchicken.org>)
• Rails and redirections (Brandon Perry <bperry.volatile@...il.com>)
• Re: [ANN] Struts 2.3.16.1 GA release available - security fix (Tim <tim-security@...tinelchicken.org>)
• XSS in url for access of Confirmation Required in box for antispam from company AKER (CVE-2013-6037) (William Costa <william.costa@...il.com>)
• Live PoC - Confirming completion of arbitrary file uploads to You Tube's Servers ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: [ANN] Struts 2.3.16.1 GA release available - security fix (Lukasz Lenart <lukaszlenart@...che.org>)
• Re: Rails and redirections (Timothy Goddard <tim@...dard.net.nz>)

• Re: Rails and redirections (Brandon Perry <bperry.volatile@...il.com>)
• Re: Rails and redirections (Brandon Perry <bperry.volatile@...il.com>)
• SEC Consult SA-20140307-0 :: Unauthenticated access & manipulation of settings in Huawei E5331 MiFi mobile hotspot (SEC Consult Vulnerability Lab <research@sec…)
• Garage4Hackers Ranchoddas Series - Part 2 on Reverse Engineering - Free Webinar (Sandeep Kamble <sandeepk.l337@...il.com>)
• DAVOSET v.1.1.8 ("MustLive" <mustlive@...security.com.ua>)
• Re: OT What is happening with bitcoins? (Pedro Worcel <pedro@...cel.com>)
• Re: Garage4Hackers Ranchoddas Series - Part 2 on Reverse Engineering - Free Webinar (Sandeep Kamble <sandeepk.l337@...il.com>)

• Yahoo Bug Bounty Program Vulnerability #1 XSS on ads.yahoo.com (Stefan Schurtz <sschurtz@...nline.de>)
• Yahoo Bug Bounty Program Vulnerability #3 XSS on de-mg42.mail.yahoo.com (Stefan Schurtz <sschurtz@...nline.de>)
• Yahoo Bug Bounty Program Vulnerability #4 #5 #6 Cross-site Scripting vulnerabilities (Stefan Schurtz <sschurtz@...nline.de>)
• Re: Yahoo Bug Bounty Program Vulnerability #3 XSS on de-mg42.mail.yahoo.com (Stefan Schurtz <sschurtz@...nline.de>)
• [SECURITY] [DSA 2870-1] libyaml-libyaml-perl security update (Salvatore Bonaccorso <carnil@...ian.org>)
• MODX SQLi from oss-sec (Brandon Perry <bperry.volatile@...il.com>)
• Re: MODX SQLi from oss-sec (Brandon Perry <bperry.volatile@...il.com>)
• Re: MODX SQLi from oss-sec (Brandon Perry <bperry.volatile@...il.com>)

• Re: SQL injection in MODX (Brandon Perry <bperry.volatile@...il.com>)

• Re: OT What is happening with bitcoins? (coderman <coderman@...il.com>)
• Re: Hacking in Schools (coderman <coderman@...il.com>)
• [HTTPCS] ClanSphere 'where' Cross Site Scripting Vulnerability (HTTPCS <contact@...pcs.com>)
• OXATIS 'EMSJ' Cross Site Scripting Vulnerability (HTTPCS <contact@...pcs.com>)
• Re: OT What is happening with bitcoins? ("Meaux, Kirk" <Kirk.Meaux@...d.edu>)
• List Charter (John Cartwright <johnc@...k.org.uk>)
• [ MDVSA-2014:048 ] gnutls (security@...driva.com)
• [ MDVSA-2014:049 ] subversion (security@...driva.com)
• [SECURITY] [DSA 2871-1] wireshark security update (Moritz Muehlenhoff <jmm@...ian.org>)
• [SECURITY] [DSA 2872-1] udisks security update (Moritz Muehlenhoff <jmm@...ian.org>)
• [ MDVSA-2014:050 ] wireshark (security@...driva.com)
• Re: OT What is happening with bitcoins? (chedder <chedder1@...il.com>)
• AST-2014-001: Stack Overflow in HTTP Processing of Cookie Headers. ("Asterisk Security Team" <security@...erisk.org>)
• AST-2014-002: Denial of Service Through File Descriptor Exhaustion with chan_sip Session-Timers ("Asterisk Security Team" <security@...erisk.org>)
• AST-2014-003: Remote Crash Vulnerability in PJSIP channel driver ("Asterisk Security Team" <security@...erisk.org>)
• AST-2014-004: Remote Crash Vulnerability in PJSIP Channel Driver Subscription Handling ("Asterisk Security Team" <security@...erisk.org>)

• Hackito Ergo Sum 2014 CFP (Alexandre De Oliveira <alex@...ec.com>)
• NotSoSecure CTF [April 18th to 20th 2014] ("Sumit Siddharth" <sid@...sosecure.com>)
• Re: OT What is happening with bitcoins? (Julius Kivimäki <julius.kivimaki@...il.com>)
• Passwords Analyser Tool (Nahuel Grisolia <nahuel.grisolia@...il.com>)
• Apple TV log file password disclosure (David Schuetz <david@...net.org>)
• [CVE-2013-6835] - iOS 7.0.6 Safari/Facetime-Audio Privacy issue (Guillaume Ross <guillaume@...aryfactory.ca>)
• Re: Passwords Analyser Tool (Daniel Wood <daniel.wood@...sp.org>)
• Re: OT What is happening with bitcoins? (Ron Scott-Adams <ron@...uw.net>)
• CORE-2014-0002 - Oracle VirtualBox 3D Acceleration Multiple Memory Corruption Vulnerabilities (CORE Advisories Team <advisories@...esecurity.com>)
• [SECURITY] [DSA 2873-1] file security update (Salvatore Bonaccorso <carnil@...ian.org>)

• NEW VMSA-2014-0002 VMware vSphere updates to third party libraries ("\"VMware Security Response Center\"" <security@...are.com>)
• Medium severity flaw in BlackBerry QNX Neutrino RTOS (Tim Brown <timb@...-dimension.org.uk>)
• CVE-2014-0054 Spring MVC Incomplete fix for CVE-2013-4152 / CVE-2013-6429 (XXE) (Pivotal Security Team <security@...ivotal.com>)
• CVE-2014-0097 Spring Security Blank password may bypass user authentication (Pivotal Security Team <security@...ivotal.com>)
• CVE-2014-1904 XSS when using Spring MVC (Pivotal Security Team <security@...ivotal.com>)
• CVE-2014-1686 -- Information disclosure: webserver source path in Mediawiki 1.18.0 ("alejandr0.w3b.p0wn3r" <alejandr0.w3b.p0wn3r@...il.com>)
• CVE-2014-2043 - SQL Injection in Procentia IntelliPen (Portcullis Advisories <advisories@...tcullis-security.com>)
• CVE-2014-1222 - Local File Inclusion in Vtiger CRM (Portcullis Advisories <advisories@...tcullis-security.com>)
• Remote Command Injection in Arabic Prawn 0.0.1 Ruby Gem ("Larry W. Cashdollar" <larry0@...com>)
• [SECURITY] [DSA 2874-1] mutt security update (Moritz Muehlenhoff <jmm@...ian.org>)
• [SECURITY] [DSA 2875-1] cups-filters security update (Moritz Muehlenhoff <jmm@...ian.org>)
• [SECURITY] [DSA 2876-1] cups security update (Moritz Muehlenhoff <jmm@...ian.org>)
• [Security-news] SA-CONTRIB-2014-030 - SexyBookmarks - Information Disclosure (security-news@...pal.org)
• Multiplus XSS in Proxmox Mail Gateway 3.1 (CVE-2014-2325) (William Costa <william.costa@...il.com>)
• [Security-news] SA-CONTRIB-2014-031 - Webform Template - Access Bypass (security-news@...pal.org)

• QUANTUMSQUIRREL - attrition.org unmasked as NSA TAO OP (coderman <coderman@...il.com>)
• [ MDVSA-2014:051 ] file (security@...driva.com)
• [ MDVSA-2014:052 ] net-snmp (security@...driva.com)
• [ MDVSA-2014:053 ] libssh (security@...driva.com)
• [ MDVSA-2014:054 ] otrs (security@...driva.com)
• [ MDVSA-2014:055 ] owncloud (security@...driva.com)
• [SECURITY] [DSA 2877-1] lighttpd security update (Michael Gilbert <mgilbert@...ian.org>)
• Byte CMS Cross Site Scripting Vulnerabilities (Project Zero Labs <labs@...jectzero.gr>)
• PowerArchiver: Uses insecure legacy PKZIP encryption when AES is selected (CVE-2014-2319) (Hanno Böck <hanno@...eck.de>)
• Re: OT What is happening with bitcoins? ("Mark M. Jaycox (EFF)" <jaycox@....org>)
• BSides Connecticut - Call for Speakers (William Reyor <opticfiber@...il.com>)
• Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Medium severity flaw in BlackBerry QNX Neutrino RTOS (Tim Brown <timb@...-dimension.org.uk>)
• [ MDVSA-2014:056 ] apache-commons-fileupload (security@...driva.com)
• Capstone disassembly framework 2.1.1 released! (Nguyen Anh Quynh <aquynh@...il.com>)
• [ MDVSA-2014:057 ] mediawiki (security@...driva.com)
• [SECURITY] [DSA 2878-1] virtualbox security update (Moritz Muehlenhoff <jmm@...ian.org>)
• [ MDVSA-2014:058 ] freeradius (security@...driva.com)
• Re: Google vulnerabilities with PoC (antisnatchor <antisnatchor@...il.com>)
• Re: Google vulnerabilities with PoC (Michal Zalewski <lcamtuf@...edump.cx>)
• Re: Google vulnerabilities with PoC (Brandon Perry <bperry.volatile@...il.com>)
• Re: Google vulnerabilities with PoC (Michal Zalewski <lcamtuf@...edump.cx>)
• Re: Google vulnerabilities with PoC (Źmicier Januszkiewicz <gauri@....by>)
• Re: Google vulnerabilities with PoC (Brandon Perry <bperry.volatile@...il.com>)
• CarolinaCon-10 - May 2014 - FINAL ANNOUNCEMENT (Vic Vandal <vvandal@...l.com>)
• [CVE-2014-2087] Free Download Manager CDownloads_Deleted::UpdateDownload() Buffer Overflow Remote Code Execution (Julien Ahrens <info@...security.com>)
• Re: Google vulnerabilities with PoC (andfarm <andfarm@...il.com>)
• Re: Google vulnerabilities with PoC (Julius Kivimäki <julius.kivimaki@...il.com>)
• Re: Google vulnerabilities with PoC (Pedro Ribeiro <pedrib@...il.com>)
• Re: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Google vulnerabilities with PoC (Julius Kivimäki <julius.kivimaki@...il.com>)
• Re: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Google vulnerabilities with PoC (Julius Kivimäki <julius.kivimaki@...il.com>)
• Re: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Google vulnerabilities with PoC ("J. Tozo" <juniorbsd@...il.com>)
• ActiVPN launches its security bug bounty (Ninja ActiVPN <ninja.activpn@...il.com>)
• Re: Google vulnerabilities with PoC (Julius Kivimäki <julius.kivimaki@...il.com>)
• Re: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Fwd: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• WatchGuard Fireware XTM devices contain a cross-site scripting vulnerability (CVE-2014-0338) (William Costa <william.costa@...il.com>)
• Re: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• [SECURITY] [DSA 2879-1] libssh security update (Raphael Geissert <geissert@...ian.org>)
• Re: Google vulnerabilities with PoC (Hugh Davenport <hugh@...enport.net.nz>)
• Fwd: Hacking Exposed: Virtualization & Cloud Computing: Secrets & Solutions (Kristian Erik Hermansen <kristian.hermansen@...il.com>)

• Re: Google vulnerabilities with PoC (Michal Zalewski <lcamtuf@...edump.cx>)
• Webcast Reminder: Garage4Hackers Ranchoddas Series 2 on Reverse Engineering (Sandeep Kamble <sandeepk.l337@...il.com>)
• Re: Google vulnerabilities with PoC (Jerome Athias <athiasjerome@...il.com>)
• Re: Google vulnerabilities with PoC (Michal Zalewski <lcamtuf@...edump.cx>)
• Re: Google vulnerabilities with PoC (Mario Vilas <mvilas@...il.com>)
• [CVE-2014-2339] GNUboard SQL Injection Vulnerability ("claepo.wang"<claepo.wang@...ppsecurity.com.cn>)
• MacOSX Safari Firefox Kaspersky RegExp Remote/Local Denial of Service ("[CXSEC]" <submit@...ec.org>)
• Re: Google vulnerabilities with PoC (Julius Kivimäki <julius.kivimaki@...il.com>)
• Re: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Trixbox all versions , Remote root exploit (0u7 5m4r7 <n0p1337@...il.com>)
• Re: Google vulnerabilities with PoC (Mario Vilas <mvilas@...il.com>)
• Re: Google vulnerabilities with PoC (Pedro Ribeiro <pedrib@...il.com>)
• Re: Google vulnerabilities with PoC (Mario Vilas <mvilas@...il.com>)
• Re: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Google vulnerabilities with PoC (antisnatchor <antisnatchor@...il.com>)
• Re: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• [ MDVSA-2014:059 ] php (security@...driva.com)
• Re: Google vulnerabilities with PoC (Sergio 'shadown' Alvarez <shadown@...il.com>)
• Fwd: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• [ MDVSA-2014:060 ] imapsync (security@...driva.com)
• Re: Fwd: Google vulnerabilities with PoC (Sergio 'shadown' Alvarez <shadown@...il.com>)
• Re: Fwd: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Google vulnerabilities with PoC (Mario Vilas <mvilas@...il.com>)
• Re: Google vulnerabilities with PoC (Mario Vilas <mvilas@...il.com>)
• [ MDVSA-2014:061 ] oath-toolkit (security@...driva.com)
• Fwd: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Fwd: Google vulnerabilities with PoC (antisnatchor <antisnatchor@...il.com>)
• Fwd: Fwd: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Fwd: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Fwd: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Fwd: Google vulnerabilities with PoC (antisnatchor <antisnatchor@...il.com>)
• Re: Fwd: Google vulnerabilities with PoC (Ulisses Montenegro <ulisses.montenegro@...il.com>)
• Re: Fwd: Google vulnerabilities with PoC (Mike Hale <eyeronic.design@...il.com>)
• Re: Fwd: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Fwd: Google vulnerabilities with PoC (antisnatchor <antisnatchor@...il.com>)
• Re: Fwd: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Fwd: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Fwd: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Fwd: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Fwd: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Fwd: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Fwd: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Fwd: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Fwd: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Fwd: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Fwd: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Fwd: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Fwd: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Fwd: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Fwd: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Fwd: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Fwd: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Fwd: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Fwd: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Fwd: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Fwd: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Fwd: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Google vulnerabilities with PoC (Mario Vilas <mvilas@...il.com>)
• Re: Fwd: Fwd: Google vulnerabilities with PoC (Mario Vilas <mvilas@...il.com>)
• Re: Fwd: Google vulnerabilities with PoC (Mario Vilas <mvilas@...il.com>)
• Re: Fwd: Google vulnerabilities with PoC (Mario Vilas <mvilas@...il.com>)
• Re: Fwd: Google vulnerabilities with PoC (Mario Vilas <mvilas@...il.com>)

• CosmoShop unprotected admin-script "pwd.cgi" probably in all versions > 8.0 ("Rene Fischer" <Innate@....de>)
• Re: Fwd: Google vulnerabilities with PoC (Julius Kivimäki <julius.kivimaki@...il.com>)
• Re: Fwd: Google vulnerabilities with PoC (Thomas MacKenzie <thomas@...cuk.co.uk>)
• Re: Google vulnerabilities with PoC (Alfredo Ortega <alfred@...undworkstech.com>)
• Re: Google vulnerabilities with PoC (Alfredo Ortega <alfred@...undworkstech.com>)
• Re: Fwd: Google vulnerabilities with PoC (Krzysztof Kotowicz <kkotowicz+fd@...il.com>)
• Re: Fwd: Google vulnerabilities with PoC ("J. Tozo" <juniorbsd@...il.com>)
• Re: Google vulnerabilities with PoC (Alfredo Ortega <alfred@...undworkstech.com>)
• Re: Fwd: Google vulnerabilities with PoC (Krzysztof Kotowicz <kkotowicz+fd@...il.com>)
• Re: Fwd: Google vulnerabilities with PoC (Julius Kivimäki <julius.kivimaki@...il.com>)
• Re: Fwd: Google vulnerabilities with PoC (R D <rd.seclists@...il.com>)
• Re: Fwd: Google vulnerabilities with PoC (Chris Thompson <christhom7851@...il.com>)
• Re: Fwd: Google vulnerabilities with PoC (R D <rd.seclists@...il.com>)
• Re: Fwd: Google vulnerabilities with PoC (Yvan Janssens <ik@...nj.me>)
• Re: Fwd: Google vulnerabilities with PoC (R D <rd.seclists@...il.com>)
• Re: Fwd: Google vulnerabilities with PoC (Chris Thompson <christhom7851@...il.com>)
• Re: Fwd: Google vulnerabilities with PoC (Krzysztof Kotowicz <kkotowicz+fd@...il.com>)
• Re: Fwd: Google vulnerabilities with PoC ("J. Tozo" <juniorbsd@...il.com>)
• Re: Fwd: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Fwd: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Fwd: Google vulnerabilities with PoC (Michal Zalewski <lcamtuf@...edump.cx>)
• Re: Fwd: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Fwd: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Fwd: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Re: Fwd: Google vulnerabilities with PoC ("Nicholas Lemonias." <lem.nikolas@...glemail.com>)
• Trixbox all versions , Remote root Exploit (0u7 5m4r7 <n0p1337@...il.com>)
• Re: Fwd: Google vulnerabilities with PoC (M Kirschbaum <pr0ix@...oo.co.uk>)
• Re: Google vulnerabilities with PoC (Michael Smith <mjs@...thbowen.net>)
• Re: Fwd: Google vulnerabilities with PoC (Colette Chamberland <cjchamberland@...il.com>)
• Re: Fwd: Google vulnerabilities with PoC (William Scott Lockwood III <scott@...pylog.com>)
• Re: Fwd: Google vulnerabilities with PoC (Colette Chamberland <cjchamberland@...il.com>)
• Re: Fwd: Google vulnerabilities with PoC ("Brian M. Waters" <brian@...anmwaters.net>)
• Re: Full-Disclosure Digest, Vol 109, Issue 32 (ChienD <0chien1@...il.com>)
• Re: Fwd: Google vulnerabilities with PoC (David H <ispcolohost@...il.com>)
• Re: Fwd: Google vulnerabilities with PoC (antisnatchor <antisnatchor@...il.com>)
• Re: Google vulnerabilities with PoC (M Kirschbaum <pr0ix@...oo.co.uk>)
• XSS Vulnerability in the Youtube Gallery 3.4.0 Component (Mahmoud Ghorbanzadeh <mdgh9@...oo.com>)
• Re: Fwd: Google vulnerabilities with PoC (Mario Vilas <mvilas@...il.com>)
• Re: Fwd: Google vulnerabilities with PoC (Mario Vilas <mvilas@...il.com>)
• Re: Google vulnerabilities with PoC (Mario Vilas <mvilas@...il.com>)
• Re: Google vulnerabilities with PoC (antisnatchor <antisnatchor@...il.com>)
• [CVE-2013-5955] Cross-site scripting Vulnerability in the Pbbooking 2.4 (Mahmoud Ghorbanzadeh <mdgh9@...oo.com>)
• [CVE-2013-5954] Multiple Cross Site Request Forgery Vulnerabilities in OpenX 2.8.11 (Mahmoud Ghorbanzadeh <mdgh9@...oo.com>)
• Re: Fwd: Google vulnerabilities with PoC ("Alfred Beese" <BigAl@...mail.com>)
• Re: Google vulnerabilities with PoC (M Kirschbaum <pr0ix@...oo.co.uk>)
• [CVE-2013-5951] Multiple Cross Site Scripting Vulnerabilities in eXtplorer 2.1.3 (Mahmoud Ghorbanzadeh <mdgh9@...oo.com>)
• Reflected XSS Attacks XSS vulnerabilities in Webmin 1.670 (CVE-2014-0339) (William Costa <william.costa@...il.com>)
• [CVE-2013-5952] Multiple Cross Site Scripting Vulnerabilities in Freichat (Mahmoud Ghorbanzadeh <mdgh9@...oo.com>)
• [CVE-2013-5953] (Mahmoud Ghorbanzadeh <mdgh9@...oo.com>)
• Re: Google vulnerabilities with PoC (Gynvael Coldwind <gynvael@...dwind.pl>)
• Re: Google vulnerabilities with PoC (Mario Vilas <mvilas@...il.com>)
• Re: Google vulnerabilities with PoC (Mario Vilas <mvilas@...il.com>)
• Re: [SPAM] [Bayesian][bayesTestMode] Re: Google vulnerabilities with PoC (Mario Vilas <mvilas@...il.com>)
• Re: Fwd: Google vulnerabilities with PoC (Michal Zalewski <lcamtuf@...edump.cx>)
• Re: Fwd: Google vulnerabilities with PoC (Michal Zalewski <lcamtuf@...edump.cx>)
• Re: Fwd: Google vulnerabilities with PoC (Michal Zalewski <lcamtuf@...edump.cx>)
• Re: Fwd: Google vulnerabilities with PoC (Michal Zalewski <lcamtuf@...edump.cx>)
• Re: Google vulnerabilities with PoC (Georgi Guninski <guninski@...inski.com>)
• Re: Google vulnerabilities with PoC (Gichuki John Chuksjonia <chuksjonia@...il.com>)
• Re: [SPAM] [Bayesian][bayesTestMode] Re: Google vulnerabilities with PoC (Stefan Jon Silverman <sjs@...inc.com>)

• Re: XSS Vulnerability in the Youtube Gallery 3.4.0 Component (Mahmoud Ghorbanzadeh <mdgh9@...oo.com>)
• exploit for old rlpdaemon bug (Nomen Nescio <nobody@...um.com>)
• Re: Google vulnerabilities with PoC ("Alfred Beese" <BigAl@...mail.com>)
• Re: Google vulnerabilities with PoC (M Kirschbaum <pr0ix@...oo.co.uk>)
• Re: Google vulnerabilities with PoC ("T Imbrahim" <TImbrahim@...hemail.com>)
• Re: [SPAM] [Bayesian][bayesTestMode] Re: Google vulnerabilities with PoC (Thomas Williams <thomas@...illiams.me.uk>)
• Re: Fwd: Google vulnerabilities with PoC ("T Imbrahim" <TImbrahim@...hemail.com>)
• Re: Fwd: Google vulnerabilities with PoC ("T Imbrahim" <TImbrahim@...hemail.com>)
• Re: Fwd: Google vulnerabilities with PoC ("T Imbrahim" <TImbrahim@...hemail.com>)
• Re: [SPAM] [Bayesian][bayesTestMode] Re: Google vulnerabilities with PoC ("Exibar" <exibar@...lair.com>)

• Re: Fwd: Google vulnerabilities with PoC (Pedro Ribeiro <pedrib@...il.com>)
• [CVE-2014-2339] GNUboard SQL Injection Vulnerability ("claepo.wang"<claepo.wang@...ppsecurity.com.cn>)
• Re: Fwd: Google vulnerabilities with PoC (Mario Vilas <mvilas@...il.com>)
• Re: Fwd: Google vulnerabilities with PoC (Mario Vilas <mvilas@...il.com>)
• Re: Fwd: Google vulnerabilities with PoC ("T Imbrahim" <TImbrahim@...hemail.com>)
• Re: Fwd: Google vulnerabilities with PoC (Gichuki John Chuksjonia <chuksjonia@...il.com>)
• Re: Fwd: Google vulnerabilities with PoC (Joxean Koret <joxeankoret@...oo.es>)
• Re: Fwd: Google vulnerabilities with PoC ("T Imbrahim" <TImbrahim@...hemail.com>)
• Re: Fwd: Google vulnerabilities with PoC (Źmicier Januszkiewicz <gauri@....by>)
• Re: Fwd: Google vulnerabilities with PoC (Mario Vilas <mvilas@...il.com>)
• Few Hrs left Webcast Reminder: Garage4Hackers Ranchoddas Series 2 on Reverse Engineering (Sandeep Kamble <sandeepk.l337@...il.com>)
• Re: Fwd: Google vulnerabilities with PoC (Pedro Ribeiro <pedrib@...il.com>)
• Re: Fwd: Google vulnerabilities with PoC (Ulisses Montenegro <ulisses.montenegro@...il.com>)
• [ MDVSA-2014:062 ] webmin (security@...driva.com)
• Re: Fwd: Google vulnerabilities with PoC (Mario Vilas <mvilas@...il.com>)
• Re: Garage4Hackers Ranchoddas Series - Part 2 on Reverse Engineering - Free Webinar (Sandeep Kamble <sandeepk.l337@...il.com>)
• Re: Bank of the West security contact? (Kristian Erik Hermansen <kristian.hermansen@...il.com>)
• Re: Bank of the West security contact? (Jeffrey Walton <noloader@...il.com>)
• [ MDVSA-2014:063 ] x2goserver (security@...driva.com)
• [ MDVSA-2014:064 ] udisks (security@...driva.com)
• Re: Garage4Hackers Ranchoddas Series - Part 2 on Reverse Engineering - Free Webinar (Sandeep Kamble <sandeepk.l337@...il.com>)
• [SECURITY] [DSA 2880-1] python2.7 security update (Moritz Muehlenhoff <jmm@...ian.org>)

• Emergency patch for ShadowIRCd versions 6.3+ and Elemental-IRCd 6.5+ (Sam Dodrill <shadow.h511@...il.com>)
• Re: [SPAM] [Bayesian][bayesTestMode] Re: Google vulnerabilities with PoC (The Doctor <drwho@...tadpt.net>)
• CEbot: disasm from your Twitter account (Capstone Engine <capstone.engine@...il.com>)
• (CFP) LACSEC 2014: Cancun, Mexico. May 7-8, 2014 (EXTENDED DEADLINE) (Fernando Gont <fgont@...networks.com>)
• [Quantum Leap Advisory] #QLA140216 - VLC Reflected XSS vulnerability (Francesco Perna <f.perna@...ntumleap.it>)
• McAfee Cloud SSO and McAfee Asset Manager vulns (Brandon Perry <bperry.volatile@...il.com>)
• Re: Bank of the West security contact? (Florian Weimer <fw@...eb.enyo.de>)
• Re: Bank of the West security contact? (Jeffrey Walton <noloader@...il.com>)

• All your PLC are belong to us (2) (scadastrangelove <scadastrangelove@...il.com>)
• Kaspersky 14.0.0.4651 RegExp Remote Denial of Service PoC2 ("[CXSEC]" <submit@...ec.org>)
• Re: [SPAM] [Bayesian][bayesTestMode] Re: Google vulnerabilities with PoC (Leutnant Steiner <chk.mailbox@...il.com>)
• USSD Sender Hacktool 1.0 (AWeber Test <aweber_t@...oo.com>)
• Administrivia: The End (John Cartwright <johnc@...k.org.uk>)

• [FD] Administrivia: A Fresh Start (Fyodor <fyodor@...p.org>)
• Re: [FD] [oss-security] [OT] FD mailing list died. Time for new one (coderman <coderman@...il.com>)
• [FD] good to see that we're back (Samuel Alp <samuelalp95@...il.com>)
• [FD] What to do if this version of the list dies? (Georgi Guninski <guninski@...inski.com>)
• Re: [FD] What to do if this version of the list dies? (Michal Zalewski <lcamtuf@...edump.cx>)
• Re: [FD] What to do if this version of the list dies? (Georgi Guninski <guninski@...inski.com>)
• [FD] Advisory : Persistent Internet Storage (Nico Le Moin <nicolemoin01@...il.com>)
• [FD] [GTA-2014-01] - Allied Telesis AT-RG634A ADSL Broadband router hidden administrative unauthenticated webshell. (Groundworks Technologies Advisories Team <…)
• Re: [FD] Advisory : Persistent Internet Storage (Joxean Koret <joxeankoret@...oo.es>)
• [FD] iThought App Multiple Vulnerabilities (Justin Klein Keane <justin@...irish.net>)
• [FD] Public VCS security issues (Patrik asd <patrik.grinsvall@...il.com>)
• Re: [FD] Public VCS security issues (Ron <ron@...llsecurity.net>)
• Re: [FD] Advisory : Persistent Internet Storage (Samuel Alp <samuelalp95@...il.com>)
• Re: [FD] [GTA-2014-01] - Allied Telesis AT-RG634A ADSL Broadband router hidden administrative unauthenticated webshell. (Daniel Miller <bonsaiviking@...il.com>)
• Re: [FD] Advisory : Persistent Internet Storage (Georgi Guninski <guninski@...inski.com>)
• Re: [FD] Advisory : Persistent Internet Storage (Georgi Guninski <guninski@...inski.com>)
• Re: [FD] Public VCS security issues (Jeremy Voorhis <jvoorhis@...il.com>)
• [FD] Android IMSI-Catcher Detector (AIMSICD) ("SecUpwN" <secupwn@....biz>)
• [FD] OT: Thanks to Fyodor (xyberpix <xyberpix@...erpix.com>)
• Re: [FD] OT: Thanks to Fyodor (Christian Fernandez <cfernandezlinux@...il.com>)
• Re: [FD] Android IMSI-Catcher Detector (AIMSICD) (charles@...fnf.org)
• [FD] Master Lock random key code generation/distribution Fails (Jimb0 Hon1nbo <hon1nbo.list@...il.com>)
• Re: [FD] OT: Thanks to Fyodor (Colin Keigher <colin@...gher.ca>)
• Re: [FD] OT: Thanks to Fyodor (devel@...soft.ltd.uk)
• Re: [FD] OT: Thanks to Fyodor ("Jones, Jeff:(BSC)" <jeff.jones@...stellation.com>)
• Re: [FD] OT: Thanks to Fyodor (Himanshu anand <onlyhimanshuanand@...il.com>)
• Re: [FD] OT: Thanks to Fyodor ("SecUpwN" <secupwn@....biz>)
• Re: [FD] Master Lock random key code generation/distribution Fails (Daniel Miller <bonsaiviking@...il.com>)
• Re: [FD] Master Lock random key code generation/distribution Fails (Jon Hart <jhart@...ofed.org>)
• Re: [FD] OT: Thanks to Fyodor ("dc0de@....com" <dc0de@....com>)
• Re: [FD] OT: Thanks to Fyodor (Jean-Christophe Praud <jc@...ud.com>)
• Re: [FD] Master Lock random key code generation/distribution Fails (WebDawg <webdawg@...il.com>)
• Re: [FD] OT: Thanks to Fyodor (Rami Taibah <taibah@...il.com>)
• Re: [FD] Master Lock random key code generation/distribution Fails (Daniel Miller <bonsaiviking@...il.com>)
• Re: [FD] Master Lock random key code generation/distribution Fails (Richard Chycoski <rac@...co.com>)
• Re: [FD] OT: Thanks to Fyodor (MadSaxon <madsaxon@...il.com>)
• Re: [FD] OT: Thanks to Fyodor (Stefan Weimar <stefan@...nhop3.de>)

• Re: [FD] OT: Thanks to Fyodor (Chris Short <chris@...isshort.net>)
• Re: [FD] Public VCS security issues (Ronald <mini.pelle@...il.com>)
• Re: [FD] Master Lock random key code generation/distribution Fails (Hon1nbo <hon1nbo.list@...il.com>)
• Re: [FD] OT: Thanks to Fyodor ("Security @ Planetkips" <security@...netkips.nl>)
• Re: [FD] Master Lock random key code generation/distribution Fails (Moritz Naumann <full-disclosure@...itz-naumann.com>)
• [FD] Nuclear Regulatory Comm. password available through Google (Hon1nbo <hon1nbo.list@...il.com>)
• Re: [FD] Master Lock random key code generation/distribution Fails (Jeff Kell <jeff-kell@....edu>)
• Re: [FD] Public VCS security issues (Lorenz Diener <lorenzd@...il.com>)
• Re: [FD] OT: Thanks to Fyodor (Srinivas Naik <naik.srinu@...il.com>)
• Re: [FD] OT: Thanks to Fyodor (Peter Malone <peter@...ermalone.org>)
• [FD] Adventure with Stack Smashing Protector (SSP) (Adam Zabrocki <pi3@....com.pl>)
• [FD] Monoprice Server-Side Cart Vulnerability (Jason_Khanlar <jason.khanlar@...il.com>)
• Re: [FD] OT: Thanks to Fyodor (Laskov Denis <laskov@...il.com>)
• Re: [FD] Android IMSI-Catcher Detector (AIMSICD) ("SecUpwN" <secupwn@....biz>)
• Re: [FD] OT: Thanks to Fyodor (Артур Истомин <art.istom@...dex.ru>)
• Re: [FD] Master Lock random key code generation/distribution Fails (Deviant Ollam <deviant@...iating.net>)
• Re: [FD] Master Lock random key code generation/distribution Fails (Steve Pordon <fulldisc@...tronstar.org>)
• Re: [FD] Android IMSI-Catcher Detector (AIMSICD) († <god12@...sula.hut.fi>)
• Re: [FD] OT: Thanks to Fyodor (<jajordan@...nehorseimports.com>)
• [FD] [RT-SA-2014-002] rexx Recruitment: Cross-Site Scripting in User Registration (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
• Re: [FD] Adventure with Stack Smashing Protector (SSP) (Robert Święcki <robert@...ecki.net>)
• Re: [FD] Android IMSI-Catcher Detector (AIMSICD) ("SecUpwN" <secupwn@....biz>)
• Re: [FD] OT: Thanks to Fyodor (Ferenc Kovacs <tyra3l@...il.com>)
• [FD] Angie's List Auth Bypass (robert mccurdy <freeload101@...oo.com>)

• Re: [FD] OT: Thanks to Fyodor (Justin Klein Keane <justin@...irish.net>)
• Re: [FD] Adventure with Stack Smashing Protector (SSP) (Adam Zabrocki <pi3@....com.pl>)
• [FD] New Speakers at PHDays IV: How to Hack Gmail and WordPress and Spy through TV (Alexander Lashkov <ALashkov@...ecurity.com>)
• [FD] OT Crazy SAT encoding of md4 preimage (Georgi Guninski <guninski@...inski.com>)
• [FD] End-user exploitable local file inclusion vulnerability in Ajax Pagination (twitter Style) 1.1 (WordPress plugin) (Harry Metcalfe <harry@....com>)
• [FD] XSS, CSRF and blind SQL injection in GD Star Rating 1.9.22 (WordPress plugin) (Harry Metcalfe <harry@....com>)
• [FD] CSRF vulnerability in WP HTML Sitemap 1.2 (WordPress plugin) (Harry Metcalfe <harry@....com>)
• [FD] Wireless Security Paper (Dillon Korman <me@...lonkorman.com>)
• [FD] SEC Consult SA-20140328-0 :: Multiple vulnerabilities in Symantec LiveUpdate Administrator (SEC Consult Vulnerability Lab <research@...-consult.com>)
• [FD] Wireless Drive v1.1.0 iOS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
• [FD] My Photo Wifi Share & Photo Server 1.1 iOS - Command Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
• [FD] Lazybone Studios WiFi Music 1.0 iOS - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
• [FD] FTP Drive + HTTP 1.0.4 iOS - Code Execution Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
• [FD] ePhone Disk v1.0.2 iOS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
• [FD] iStArtApp FileXChange v6.2 iOS - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
• [FD] Dell SonicWall EMail Security 7.4.5 - Multiple Vulnerabilities (Bulletin) (Vulnerability Lab <research@...nerability-lab.com>)
• [FD] New fixes for Siemens S7 1200 PLC: Time is compressing... (scadastrangelove <scadastrangelove@...il.com>)
• [FD] Canon Printer Exposes WiFi Password (Taylor Hornby <havoc@...use.ca>)
• Re: [FD] Canon Printer Exposes WiFi Password (Matt Andreko <mandreko@...il.com>)

• [FD] XSS and FPD vulnerabilities in Js-Multi-Hotel for WordPress ("MustLive" <mustlive@...security.com.ua>)
• [FD] PoC: End-to-end correlation for Tor connections using an active timing attack (Jann Horn <jann@...jh.net>)
• Re: [FD] PoC: End-to-end correlation for Tor connections using an active timing attack (coderman <coderman@...il.com>)

• Re: [FD] Adventure with Stack Smashing Protector (SSP) (Steven Stewart-Gallus <sstewartgallus00@...angara.bc.ca>)
• Re: [FD] PoC: End-to-end correlation for Tor connections using an active timing attack (coderman <coderman@...il.com>)
• [FD] AlienVault 4.5.0 authenticated SQL injection (Brandon Perry <bperry.volatile@...il.com>)
• [FD] Fwd: Multiple vulnerabilities in Ioncube loader-wizard (Christian Mehlmauer <firefart@...il.com>)
• [FD] DAVOSET v.1.1.9 ("MustLive" <mustlive@...security.com.ua>)
• Re: [FD] OT: Thanks to Fyodor (Stefan Jon Silverman <sjs@...inc.com>)
• Re: [FD] OT: Thanks to Fyodor (dcz <dcz@...satak.org>)
• Re: [FD] Wireless Security Paper (Dillon Korman <me@...lonkorman.com>)

• [FD] PhotoWIFI Lite v1.0 iOS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
• [FD] Vanctech File Commander 1.1 iOS - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
• [FD] EMC CTA v10.0 unauthenticated XXE with root perms (Brandon Perry <bperry.volatile@...il.com>)
• [FD] Introducing APSAM - Beyond Military Grade Security ("J. Oquendo" <joquendo@...ensive.net>)
• [FD] Multiple vulnerabilities in Js-Multi-Hotel for WordPress ("MustLive" <mustlive@...security.com.ua>)
• [FD] immhooktmpl.py - Immunity template plugin for function hooking (Levon Kayan <noptrix@...lsecurity.net>)
• [FD] [TOOL] w3af 1.6 release (Andres Riancho <andres.riancho@...il.com>)
• [FD] Chunked requests to bypass ModSecurity and mod_headers (Martin Holst Swende <martin@...nde.se>)
• Re: [FD] Introducing APSAM - Beyond Military Grade Security (Jack Morgan <kuriosly@...il.com>)
• [FD] GOST 28147-89 gets 512 bit and 1 kbit keys (gremlin@...mlin.ru)

434 messages

Powered by blists - more mailing lists