full-disclosure mailing list - 2014/05

Messages by day:

May 1 (11 messages)

• Re: [FD] Beginners error: iTunes for Windows runs rogue program C:\Program.exe when opening associated files (Brandon Perry <bperry.volatile@...il.com>)
• Re: [FD] Beginners error: iTunes for Windows runs rogue program C:\Program.exe when opening associated files (Brandon Perry <bperry.volatile@...il.com>)
• Re: [FD] Beginners error: iTunes for Windows runs rogue program C:\Program.exe when opening associated files (Mike Cramer <mike.cramer@...look.com>)
• Re: [FD] Beginners error: iTunes for Windows runs rogue program C:\Program.exe when opening associated files (Mike Cramer <mike.cramer@...look.com>)
• Re: [FD] Beginners error: iTunes for Windows runs rogue program C:\Program.exe when opening associated files (Mike Cramer <mike.cramer@...look.com>)
• Re: [FD] Beginners error: iTunes for Windows runs rogue program C:\Program.exe when opening associated files (Mike Cramer <mike.cramer@...look.com>)
• Re: [FD] Beginners error: iTunes for Windows runs rogue program C:\Program.exe when opening associated files (Jeffrey Walton <noloader@...il.com>)
• Re: [FD] Beginners error: iTunes for Windows runs rogue program C:\Program.exe when opening associated files ("Stefan Kanthak" <stefan.kanthak@...go.de>)
• Re: [FD] Beginners error: iTunes for Windows runs rogue program C:\Program.exe when opening associated files (Walt Williams <walt.williams@...il.com>)
• Re: [FD] Beginners error: iTunes for Windows runs rogue program C:\Program.exe when opening associated files (Alton Blom <altonius@...il.com>)
• [FD] F5 BIG-IQ authed arbitrary user password change (Brandon Perry <bperry.volatile@...il.com>)

• Re: [FD] F5 BIG-IQ authed arbitrary user password change (Brandon Perry <bperry.volatile@...il.com>)
• [FD] OAuth 2.0 and OpenID vulnerable to Covert Redirect (Justin Bull <me@...tinbull.ca>)
• Re: [FD] Ruby OpenSSL private key spoofing ~ CVE-2014-2734 with PoC (Martin Boßlet <martin.bosslet@...il.com>)

• [FD] Zamfoo Multiple Arbitrary Command Executions (Mad Hax <madhax@...l.ru>)

• [FD] Multiple vulnerabilities in Flexolio for WordPress ("MustLive" <mustlive@...security.com.ua>)
• Re: [FD] F5 BIG-IQ authed arbitrary user password change (Jeff Costlow <j.costlow@...com>)
• Re: [FD] Zamfoo Multiple Arbitrary Command Executions (nkukard+fulldisclosure@...d.net)
• Re: [FD] Zamfoo Multiple Arbitrary Command Executions (nkukard+fulldisclosure@...d.net)

• [FD] Too Smart Grid in da Cloud (scadastrangelove <scadastrangelove@...il.com>)
• [FD] Heartbleed client side analysis tool published (Curesec Research Team <crt@...esec.com>)

• [FD] CVE Request ---- SOAPpy 0.12.5 Multiple Vulnerabilities (feer james <pnigos70@...il.com>)
• [FD] PHP-FPM and PHP-CGI - Denial of Service POC (Vinny Troia <vinny@...htlionsecurity.com>)
• Re: [FD] Beginners error: iTunes for Windows runs rogue program C:\Program.exe when opening associated files ("Stefan Kanthak" <stefan.kanthak@...go.de>)
• [FD] Beginners error: Piriform's Crap Cleaner^W runs rogue program C:\Program.exe ("Stefan Kanthak" <stefan.kanthak@...go.de>)
• [FD] OpenSSH Vulnerabilities (devel@...soft.ltd.uk)
• Re: [FD] OpenSSH Vulnerabilities (Lucius Rizzo <Lucius.Rizzo@...ius.XxX>)
• Re: [FD] OpenSSH Vulnerabilities (Tyler Nighswander <tylerni7@...il.com>)
• Re: [FD] OpenSSH Vulnerabilities (devel@...soft.ltd.uk)
• Re: [FD] OpenSSH Vulnerabilities (Brandon Vincent <Brandon.Vincent@....edu>)
• Re: [FD] OpenSSH Vulnerabilities (Julius Kivimäki <julius.kivimaki@...il.com>)

• [FD] Fortinet Fortiweb 5.1 contains a cross-site request forgery vulnerability (CVE-2014-3115) (William Costa <william.costa@...il.com>)
• [FD] security of the fairphone (Joachim Jakobs <jj@...vatsphaere.org>)
• [FD] Moar F5 fun in iControl API (Brandon Perry <bperry.volatile@...il.com>)

• [FD] SEC Consult SA-20140508-0 :: Multiple critical vulnerabilities in AVG Remote Administration (SEC Consult Vulnerability Lab <research@...-consult.com>)
• [FD] [RT-SA-2014-003] Metadata Information Disclosure in OrbiTeam BSCW (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
• [FD] CVE-2014-1849 Foscam Dynamic DNS predictable credentials vulnerability (Sergey Shekyan <shekyan@...il.com>)
• [FD] Discussion: Teamviewer "Feature" or "Bug"? (HHeilemann@...o-s.de)
• Re: [FD] Discussion: Teamviewer "Feature" or "Bug"? (Prototype This <terminale@...il.com>)
• Re: [FD] Discussion: Teamviewer "Feature" or "Bug"? (Keith I Myers <keithiokepamyers@...il.com>)
• Re: [FD] Discussion: Teamviewer "Feature" or "Bug"? (Dave Warren <davew@...eahit.com>)
• [FD] Beginners error: Synaptics touchpad driver delivered via Windows Update executes rogue program C:\Program.exe with… ("Stefan Kanthak" <stefan.kanthak@...go.…)
• [FD] pervasive vulnerabilities in offensive mindset - haughty hubris (coderman <coderman@...il.com>)

• [FD] SSH key cloning problem in OnApp templates (James Renken <jrenken@...dwich.net>)
• [FD] project unicorn exploitable index (wola4@...e-mail.net)
• [FD] Drupal Flag 7.x-3.5 Module Vulnerability report: Arbitrary code execution due to improper input handling in flag impor… (Ubani Balogun <ubani@....upenn.edu>)
• [FD] SSH key cloning problem in OnApp templates (James Renken <jrenken@...dwich.net>)
• [FD] Registration for PHDays Online Competitions is Now Open (Alexander Lashkov <ALashkov@...ecurity.com>)
• [FD] Hyperion PE crypter: new version 1.1 (Levon Kayan <noptrix@...lsecurity.net>)

• [FD] A small project: metafang (Brandon Perry <bperry.volatile@...il.com>)

• Re: [FD] [oss-security] CVE-2014-0196: Linux kernel pty layer race condition memory corruption (Matthew Daley <mattd@...fuzz.com>)
• Re: [FD] [oss-security] CVE-2014-0196: Linux kernel pty layer race condition memory corruption (Matthew Daley <mattd@...fuzz.com>)
• Re: [FD] [oss-security] CVE-2014-0196: Linux kernel pty layer race condition memory corruption (Solar Designer <solar@...nwall.com>)
• Re: [FD] [oss-security] CVE-2014-0196: Linux kernel pty layer race condition memory corruption (Savio Bot <54v330@...il.com>)
• [FD] So You Like Pain and Vulnerability Management? New Article. (Pete Herzog <lists@...com.org>)

• [FD] [CVE-2014-1603] XSS in GetSimple CMS 3.3.1 (Pedro Ribeiro <pedrib@...il.com>)
• [FD] CodeIgniter <= 2.1.4 and Kohana <= 3.2.3, 3.3.2 - Timing Attacks and Object Injection (Scott Arciszewski <kobrasrealm@...il.com>)
• Re: [FD] So You Like Pain and Vulnerability Management? New Article. (Pedro Ribeiro <pedrib@...il.com>)
• Re: [FD] project unicorn exploitable index (coderman <coderman@...il.com>)
• Re: [FD] project unicorn exploitable index (wola4@...e-mail.net)
• [FD] CVE-2014-2046 - Unauthenticated Credential And Configuration Retrieval In Broadcom Ltd PIPA C211 (Portcullis Advisories <advisories@...tcullis-security.co…)
• [FD] CVE-2014-2046 - Unauthenticated Credential And Configuration Retrieval In Broadcom Ltd PIPA C211 (Portcullis Advisories <advisories@...tcullis-security.co…)

• [FD] Cobbler Arbitrary File Read CVE-2014-3225 (Dolev Farhi <dolevf87@...il.com>)
• [FD] FD - Multiple stored XSS in FOG imaging deployment system CVE-2014-3111 (Dolev Farhi <dolevf87@...il.com>)
• Re: [FD] So You Like Pain and Vulnerability Management? New Article. (Daniel Wood <daniel.wood@...sp.org>)
• Re: [FD] project unicorn exploitable index (coderman <coderman@...il.com>)
• [FD] Paypal Inc Bug Bounty #109 MOS - Bypass & Persistent Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
• [FD] eInstruction Workspace sudo vulnerability (Martin von Gagern <Martin.vGagern@....net>)

• [FD] [CVE-2014-3719] ALEPH500 (Integrated library management system) SQL Injection ("shady.liu"<shady.liu@...ppsecurity.com.cn>)
• [FD] AirDroid Lock Screen Bypass (Michael Wisniewski <wiz561@...il.com>)
• [FD] CVE-2014-3718] ALEPH500 (Integrated library management system) Cross Site Scripting Vulnerability ("xxx" <coollbaby@...com>)
• [FD] [REVIVE-SA-2014-001] Revive Adserver 3.0.5 fixes CSRF vulnerability (Matteo Beccati <php@...cati.com>)
• [FD] Mac OS X stack_chk_guard not always safe from overwrite (rai@...nmailbox.org)
• Re: [FD] AirDroid Lock Screen Bypass (Keith I Myers <keithiokepamyers@...il.com>)
• Re: [FD] project unicorn exploitable index (wola4@...e-mail.net)
• [FD] CVE-2014-3719 SQL Injection Vulnerability ("shady.liu"<shady.liu@...ppsecurity.com.cn>)

• [FD] [CVE-2014-3749] Construtiva CIS Manager CMS POST SQLi ("Edge" <edge@...message.ch>)
• [FD] check_dhcp - Nagios Plugins <= 2.0.1 Arbitrary Option File Read (Dawid Golunski <golunski.dawid@...il.com>)
• [FD] UPS Web/SNMP-Manager CS121 authentication bypass, credentials leak, ... (jkmac@...e-mail.net)
• [FD] CA20140413-01: Security Notice for OpenSSL Heartbleed Vulnerability ("Williams, James K" <Ken.Williams@...com>)
• [FD] HP Release Control Authenticated Privilege Escalation and XXE (Brandon Perry <bperry.volatile@...il.com>)
• Re: [FD] Beginners error: iTunes for Windows runs rogue program C:\Program.exe when opening associated files ("Stefan Kanthak" <stefan.kanthak@...go.de>)

• [FD] Information Exposure via SNMP on ARRIS / Motorola SBG6580 Cable Modem Gateway (Inokii Security Advisory <advisory@...kii.com>)
• Re: [FD] [CVE-2014-3719] ALEPH500 (Integrated librarymanagement system) SQL Injection ("shady.liu"<shady.liu@...ppsecurity.com.cn>)
• [FD] JavaMail SMTP Header Injection via method setSubject [CSNC-2014-001] ("Alexandre Herzog" <alexandre.herzog@...c.ch>)
• [FD] t2'14: Call for Papers 2014 (Helsinki / Finland) ("Tomi Tuominen" <tomi.tuominen@...fi>)

• [FD] FW: All of .mil tld is down (Anthony Fontanez <ajfrcc@....edu>)
• [FD] CVE-2014-3449 - Insufficient ACLs in BSS Continuity CMS (Portcullis Advisories <advisories@...tcullis-security.com>)
• [FD] CVE-2014-3448 - Remote Code Execution Via Unauthenticated File Upload in BSS Continuity CMS (Portcullis Advisories <advisories@...tcullis-security.com>)
• [FD] CVE-2014-3447 - Remote Denial Of Service in BSS Continuity CMS (Portcullis Advisories <advisories@...tcullis-security.com>)
• [FD] CVE-2014-3446 - Unauthenticated Blind SQL Injection in BSS Continuity CMS (Portcullis Advisories <advisories@...tcullis-security.com>)
• [FD] CVE-2014-3450 - Privilege Escalation in Panda Security (Portcullis Advisories <advisories@...tcullis-security.com>)
• [FD] 2 security bugs in Dlink router DIR-605L (laalaa <dbpalan@...mail.com>)
• [FD] Project Un1c0rn : Communications and GPG Key (Project Un1c0rn <project.un1c0rn@...dex.com>)
• [FD] JavaMail SMTP Header Injection via method setSubject [CSNC-2014-001] ("Alexandre Herzog" <alexandre.herzog@...c.ch>)
• [FD] A way to trigger CVE-2014-1322 (userspace read kernel pointer)? (rai@...nmailbox.org)
• [FD] Beginners error: Hewlett-Packards driver software executes rogue binary C:\Program.exe ("Stefan Kanthak" <stefan.kanthak@...go.de>)
• [FD] XSS - find.searchhub.org, opencms version9 and others (jkmac@...e-mail.net)
• Re: [FD] A way to trigger CVE-2014-1322 (userspace read kernel pointer)? (Christian Mayer <thefox21at@...il.com>)

• Re: [FD] Beginners error: Hewlett-Packards driver software executes rogue binary C:\Program.exe (Tavis Ormandy <taviso@...xchg8b.com>)
• [FD] CVE-2014-3448 - Remote Code Execution Via Unauthenticated File Upload in BSS Continuity CMS (Portcullis Advisories <advisories@...tcullis-security.com>)
• [FD] CVE-2014-3450 - Privilege Escalation in Panda Security (Portcullis Advisories <advisories@...tcullis-security.com>)
• [FD] CVE-2014-3447 - Remote Denial Of Service in BSS Continuity CMS (Portcullis Advisories <advisories@...tcullis-security.com>)
• [FD] CVE-2014-3446 - Unauthenticated Blind SQL Injection in BSS Continuity CMS (Portcullis Advisories <advisories@...tcullis-security.com>)
• [FD] SEC Consult SA-20140521-0 :: Multiple critical vulnerabilities in CoSoSys Endpoint Protector 4 (SEC Consult Vulnerability Lab <research@...-consult.com>)
• Re: [FD] Beginners error: Hewlett-Packards driver software executes rogue binary C:\Program.exe (Tavis Ormandy <taviso@...xchg8b.com>)
• Re: [FD] Beginners error: Hewlett-Packards driver software executes rogue binary C:\Program.exe (Tavis Ormandy <taviso@...xchg8b.com>)
• Re: [FD] Beginners error: Hewlett-Packards driver software executes rogue binary C:\Program.exe (Project Un1c0rn <project.un1c0rn@...dex.com>)
• Re: [FD] Beginners error: Hewlett-Packards driver software executes rogue binary C:\Program.exe (Project Un1c0rn <project.un1c0rn@...dex.com>)
• Re: [FD] Beginners error: Hewlett-Packards driver software executes rogue binary C:\Program.exe (Jeff Sergeant <jeffuk@...il.com>)
• Re: [FD] Beginners error: Hewlett-Packards driver software executes rogue binary C:\Program.exe ("Stefan Kanthak" <stefan.kanthak@...go.de>)
• Re: [FD] Beginners error: Hewlett-Packards driver software executes rogue binary C:\Program.exe (coderaptor <coderaptor@...il.com>)
• Re: [FD] A way to trigger CVE-2014-1322 (userspace read kernel pointer)? (Keira Cran <keiracran@....cc>)
• Re: [FD] Beginners error: Hewlett-Packards driver software executes rogue binary C:\Program.exe (Reindl Harald <h.reindl@...lounge.net>)
• Re: [FD] Beginners error: Hewlett-Packards driver software executes rogue binary C:\Program.exe (Michal Zalewski <lcamtuf@...edump.cx>)
• [FD] [KIS-2014-05] Dotclear <= 2.6.2 (XML-RPC Interface) Authentication Bypass Vulnerability (Egidio Romano <research@...mainsecurity.com>)
• [FD] [KIS-2014-06] Dotclear <= 2.6.2 (Media Manager) Unrestricted File Upload Vulnerability (Egidio Romano <research@...mainsecurity.com>)
• [FD] [KIS-2014-07] Dotclear <= 2.6.2 (categories.php) SQL Injection Vulnerability (Egidio Romano <research@...mainsecurity.com>)
• Re: [FD] Beginners error: Hewlett-Packards driver software executes rogue binary C:\Program.exe ("Stefan Kanthak" <stefan.kanthak@...go.de>)
• Re: [FD] Beginners error: Hewlett-Packards driver software executes rogue binary C:\Program.exe (Reindl Harald <h.reindl@...lounge.net>)
• [FD] NULL page mitigations on Windows 8 x86 (Tavis Ormandy <taviso@...xchg8b.com>)
• [FD] XML Schema, DTD, and Entity Attacks: A Compendium of Known Techniques ("Timothy D. Morgan" <tmorgan@...curity.com>)
• Re: [FD] Beginners error: Hewlett-Packards driver software executes rogue binary C:\Program.exe (Michal Zalewski <lcamtuf@...edump.cx>)
• Re: [FD] Beginners error: Hewlett-Packards driver software executes rogue binary C:\Program.exe (Ben Campbell <eat_meatballs@...mail.co.uk>)

• Re: [FD] [KIS-2014-06] Dotclear <= 2.6.2 (Media Manager) Unrestricted File Upload Vulnerability (Brandon Perry <bperry.volatile@...il.com>)
• [FD] rcrypt packer/crypter writeup and POC tool (rage <ragesploit@...age.com>)
• Re: [FD] Beginners error: Hewlett-Packards driver software executes rogue binary C:\Program.exe (Mario Vilas <mvilas@...il.com>)
• Re: [FD] Beginners error: Hewlett-Packards driver software executes rogue binary C:\Program.exe (rai@...nmailbox.org)
• [FD] SEC Consult SA-20140521-0 :: Multiple critical vulnerabilities in CoSoSys Endpoint Protector 4 (SEC Consult Vulnerability Lab <research@...-consult.com>)
• [FD] [KIS-2014-06] Dotclear <= 2.6.2 (Media Manager) Unrestricted File Upload Vulnerability (Egidio Romano <research@...mainsecurity.com>)
• [FD] [KIS-2014-07] Dotclear <= 2.6.2 (categories.php) SQL Injection Vulnerability (Egidio Romano <research@...mainsecurity.com>)
• [FD] [KIS-2014-05] Dotclear <= 2.6.2 (XML-RPC Interface) Authentication Bypass Vulnerability (Egidio Romano <research@...mainsecurity.com>)

• Re: [FD] Beginners error: Hewlett-Packards driver software executes rogue binary C:\Program.exe (coderaptor <coderaptor@...il.com>)
• Re: [FD] Beginners error: Hewlett-Packards driver software executes rogue binary C:\Program.exe (Michael Cramer <mike.cramer@...look.com>)
• Re: [FD] [KIS-2014-06] Dotclear <= 2.6.2 (Media Manager) Unrestricted File Upload Vulnerability (Egidio Romano <n0b0d13s@...il.com>)
• [FD] Windows 8 Touch Injection API doesn't handle memory pressure (Tavis Ormandy <taviso@...xchg8b.com>)

• [FD] SQL Injection on eBay subdomain (Joshua Rogers <megamansec@...il.com>)
• [FD] Fwd: Call for papers for SAC 2014 (Serguei Mokhov <serguei@...il.com>)

• [FD] Accellion SFTP Satellite Remote Root Code Execution (Thomas Hibbert <Thomas.Hibbert@...urity-assessment.com>)
• [FD] Emerson DeltaV Vulnerabilities/Fixes (scadastrangelove <scadastrangelove@...il.com>)

• [FD] Lua Web Application Security Vulnerabilities (Felipe Daragon <felipe@...unt.com>)
• [FD] reg.ebay.com - Cross-site Scripting vulnerability (Stefan Schurtz <security@...ksecurity.de>)
• [FD] CVE-2014-3445 - Unauthenticated Backup and Password Disclosure in HandsomeWeb SOS Webpages (Portcullis Advisories <advisories@...tcullis-security.com>)
• [FD] What do you think of Trollc? (Philip Cheong <isctsf@...il.com>)
• [FD] sb0x-project 2.0.1rc3 Release Announcement ("Levi (levi0x0)" <levi0x0x@...il.com>)
• [FD] [SECURITY] CVE-2014-0075 Apache Tomcat denial of service (Mark Thomas <markt@...che.org>)
• [FD] [SECURITY] CVE-2014-0095 Apache Tomcat denial of service (Mark Thomas <markt@...che.org>)
• [FD] [SECURITY] CVE-2014-0096 Apache Tomcat information disclosure (Mark Thomas <markt@...che.org>)
• [FD] [SECURITY] CVE-2014-0097 Apache Tomcat information disclosure (Mark Thomas <markt@...che.org>)
• Re: [FD] [SECURITY] CVE-2014-0099 Apache Tomcat information disclosure (Mark Thomas <markt@...che.org>)
• [FD] [SECURITY] CVE-2014-0119 Apache Tomcat information disclosure (Mark Thomas <markt@...che.org>)
• [FD] CVE-2014-3004 - Castor Library Default Config could lead to XML External Entity (XXE) Attacks (Ron Gutierrez <rgutierrez@...security.com>)
• [FD] XSS on Vmware Site ("Roberto Garcia Amoriz" <roberto.garcia@...aramo.com>)
• Re: [FD] What do you think of Trollc? (Julius Kivimäki <julius.kivimaki@...il.com>)
• Re: [FD] What do you think of Trollc? (Scott Arciszewski <scott@...iszewski.me>)
• Re: [FD] What do you think of Trollc? (Brandon Perry <bperry.volatile@...il.com>)
• Re: [FD] What do you think of Trollc? (Michal Zalewski <lcamtuf@...edump.cx>)

• [FD] LSE Leading Security Experts GmbH - LSE-2014-05-21 - Check_MK - Arbitrary File Disclosure Vulnerability ("LSE Leading Security Experts GmbH (Security Advi…)
• [FD] SEC Consult SA-20140528-0 :: Root Backdoor & Unauthenticated access to voice recordings in NICE Recording eXpress (SEC Consult Vulnerability Lab <research…)
• [FD] [SECURITY] CVE-2014-0075 Apache Tomcat denial of service (Mark Thomas <markt@...che.org>)
• [FD] [SECURITY] CVE-2014-0075 Apache Tomcat denial of service (Mark Thomas <markt@...che.org>)
• [FD] [SECURITY] CVE-2014-0096 Apache Tomcat information disclosure (Mark Thomas <markt@...che.org>)
• [FD] [SECURITY] CVE-2014-0096 Apache Tomcat information disclosure (Mark Thomas <markt@...che.org>)
• [FD] [SECURITY] CVE-2014-0095 Apache Tomcat denial of service (Mark Thomas <markt@...che.org>)
• [FD] [SECURITY] CVE-2014-0095 Apache Tomcat denial of service (Mark Thomas <markt@...che.org>)
• [FD] [SECURITY] CVE-2014-0097 Apache Tomcat information disclosure (Mark Thomas <markt@...che.org>)
• [FD] [SECURITY] CVE-2014-0097 Apache Tomcat information disclosure (Mark Thomas <markt@...che.org>)
• [FD] CVE-2014-3445 - Unauthenticated Backup and Password Disclosure in HandsomeWeb SOS Webpages (Portcullis Advisories <advisories@...tcullis-security.com>)
• [FD] CVE-2014-3445 - Unauthenticated Backup and Password Disclosure in HandsomeWeb SOS Webpages (Portcullis Advisories <advisories@...tcullis-security.com>)
• [FD] [SECURITY] CVE-2014-0119 Apache Tomcat information disclosure (Mark Thomas <markt@...che.org>)
• Re: [FD] [SECURITY] CVE-2014-0099 Apache Tomcat information disclosure (Mark Thomas <markt@...che.org>)
• Re: [FD] [SECURITY] CVE-2014-0099 Apache Tomcat information disclosure (Mark Thomas <markt@...che.org>)
• [FD] LSE Leading Security Experts GmbH - LSE-2014-05-21 - Check_MK - Arbitrary File Disclosure Vulnerability ("LSE Leading Security Experts GmbH \(Security Adv…)
• [FD] LSE Leading Security Experts GmbH - LSE-2014-05-21 - Check_MK - Arbitrary File Disclosure Vulnerability ("LSE Leading Security Experts GmbH \(Security Adv…)
• [FD] SEC Consult SA-20140528-0 :: Root Backdoor & Unauthenticated access to voice recordings in NICE Recording eXpress (SEC Consult Vulnerability Lab <research…)
• [FD] SEC Consult SA-20140528-0 :: Root Backdoor & Unauthenticated access to voice recordings in NICE Recording eXpress (SEC Consult Vulnerability Lab <research…)
• [FD] [SECURITY] CVE-2014-0119 Apache Tomcat information disclosure (Mark Thomas <markt@...che.org>)
• [FD] [RT-SA-2014-004] Remote Command Execution in webEdition CMS Installer Script (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
• [FD] [RT-SA-2014-005] SQL Injection in webEdition CMS File Browser Installer Script (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
• Re: [FD] What do you think of Trollc? (Bogdan-Stefan Rotariu <bogdan@...ariu.ro>)
• Re: [FD] What do you think of Trollc? (Jeffrey Walton <noloader@...il.com>)
• Re: [FD] What do you think of Trollc? (Roberto Martelloni <rmartelloni@...il.com>)
• Re: [FD] What do you think of Trollc? (Michal Zalewski <lcamtuf@...edump.cx>)
• Re: [FD] What do you think of Trollc? (Jeffrey Walton <noloader@...il.com>)
• Re: [FD] What do you think of Trollc? (John Menerick <omgponies3145@...il.com>)
• Re: [FD] What do you think of Trollc? (Brandon Perry <bperry.volatile@...il.com>)
• Re: [FD] What do you think of Trollc? (Michal Zalewski <lcamtuf@...edump.cx>)
• [FD] CS and XSS vulnerabilities in DZS Video Gallery for WordPress ("MustLive" <mustlive@...security.com.ua>)

• [FD] TrueCrypt? (Anthony Fontanez <ajfrcc@....edu>)
• [FD] TrueCrypt (Henri Salo <henri@...v.fi>)
• [FD] Defense in depth -- the Microsoft way (part 15): unquoted arguments in 120 (of 462) command lines ("Stefan Kanthak" <stefan.kanthak@...go.de>)
• [FD] Microsoft DHCP INFORM Configuration Overwrite (laurent gaffie <laurent.gaffie@...il.com>)
• [FD] The 2014 Volatility Plugin Contest is now live! (Andrew Case <atcuno@...il.com>)
• [FD] How to use the vulnerable flash player plugin installed with Adobe Reader XI (and other Adobe products) ("Stefan Kanthak" <stefan.kanthak@...go.de>)
• [FD] XSS Attacks vulnerability in InterScan Messaging Security Virtual Appliance 8.5.1.1516 (Zero-DAY) (William Costa <william.costa@...il.com>)
• Re: [FD] TrueCrypt? ("Barkley, Peter" <peter.barkley@....com>)
• Re: [FD] What do you think of Trollc? ("Brian M. Waters" <brian@...anmwaters.net>)
• Re: [FD] TrueCrypt? (uname -a <sec.list@....net>)
• Re: [FD] What do you think of Trollc? (Jeffrey Walton <noloader@...il.com>)
• Re: [FD] TrueCrypt (Alberto Guglielmo <a.guglielmo@...sas.com>)
• Re: [FD] TrueCrypt? (James Healy <james@...ic.co.nz>)
• Re: [FD] TrueCrypt? (Jeffrey Walton <noloader@...il.com>)
• Re: [FD] What do you think of Trollc? (Michal Zalewski <lcamtuf@...edump.cx>)
• Re: [FD] What do you think of Trollc? (Jeffrey Paul <sneak@...dhou.se>)
• Re: [FD] What do you think of Trollc? (Scott Arciszewski <scott@...iszewski.me>)
• Re: [FD] TrueCrypt? (secuip <root@...uip.fr>)
• [FD] Full disk encryption for OS X alternative to TrueCrypt ("CIURANA EUGENE (pr3d4t0r - Full Disclosure)" <fulldisclosure@...e.net>)
• Re: [FD] TrueCrypt? (Justin Bull <me@...tinbull.ca>)

• [FD] Bizagi BPM Suite contains multiple vulnerabilities (Walter Cuestas <wcuestas@...n-sec.com>)
• Re: [FD] TrueCrypt? ("Dennis E. Hamilton" <dennis.hamilton@....org>)
• Re: [FD] Full disk encryption for OS X alternative to TrueCrypt ("CIURANA EUGENE (pr3d4t0r - Full Disclosure)" <fulldisclosure@...e.net>)
• Re: [FD] TrueCrypt? ("CIURANA EUGENE (pr3d4t0r - Full Disclosure)" <fulldisclosure@...e.net>)
• [FD] US cybercrime laws being used to target security researchers | Technology | The Guardian ("Ivan .Heca" <ivanhec@...il.com>)
• Re: [FD] Full disk encryption for OS X alternative to TrueCrypt (Mike Cramer <mike.cramer@...look.com>)
• Re: [FD] TrueCrypt? (JK <joohackjoo@...il.com>)
• Re: [FD] TrueCrypt? (Philip Cheong <philip.cheong@...stx.se>)
• Re: [FD] TrueCrypt? (Sergio Conde Gómez <sconde@...mun.ls.fi.upm.es>)
• Re: [FD] Full disk encryption for OS X alternative to TrueCrypt ("CIURANA EUGENE (pr3d4t0r - Full Disclosure)" <fulldisclosure@...e.net>)
• Re: [FD] TrueCrypt? (Mike Cramer <mike.cramer@...look.com>)
• Re: [FD] TrueCrypt? (Justin Bull <me@...tinbull.ca>)
• Re: [FD] Full disk encryption for OS X alternative to TrueCrypt (James Lay <jlay@...ve-tothe-box.net>)
• Re: [FD] Full disk encryption for OS X alternative to TrueCrypt ("CIURANA EUGENE (pr3d4t0r - Full Disclosure)" <fulldisclosure@...e.net>)
• Re: [FD] JavaMail SMTP Header Injection via method setSubject [CSNC-2014-001] (Manu Carus <manu.carus@...ical-hacking.de>)
• Re: [FD] TrueCrypt? (Alfie John <alfiej@...tmail.fm>)
• Re: [FD] TrueCrypt? (Chris Schmidt <chris.schmidt@...trastsecurity.com>)
• [FD] TrueCrypt 7.1 repos on GitHub - forking starting point ("CIURANA EUGENE (pr3d4t0r - Full Disclosure)" <fulldisclosure@...e.net>)
• Re: [FD] TrueCrypt? (Justin Bull <me@...tinbull.ca>)
• Re: [FD] TrueCrypt? (Michael Cramer <mike.cramer@...look.com>)
• Re: [FD] Full disk encryption for OS X alternative to TrueCrypt (Mateusz Lenik <mlen@...n.pl>)
• Re: [FD] TrueCrypt? (Jeffrey Walton <noloader@...il.com>)
• Re: [FD] Full disk encryption for OS X alternative to TrueCrypt (Jeffrey Walton <noloader@...il.com>)
• Re: [FD] TrueCrypt? (Not EcksKaySeeDee <noteckskayseedee@...il.com>)
• Re: [FD] TrueCrypt? (Philip Cheong <philip.cheong@...stx.se>)
• Re: [FD] US cybercrime laws being used to target security researchers | Technology | The Guardian (Allen D <multimode1876@...il.com>)
• [FD] Backdoored Web Application v.1.0.1 ("MustLive" <mustlive@...security.com.ua>)
• Re: [FD] TrueCrypt 7.1 repos on GitHub - forking starting point (Brandon Perry <bperry.volatile@...il.com>)
• Re: [FD] TrueCrypt 7.1 repos on GitHub - forking starting point (Justin Bull <me@...tinbull.ca>)
• Re: [FD] TrueCrypt? (Michael Cramer <mike.cramer@...look.com>)
• Re: [FD] TrueCrypt? (uname -a <sec.list@....net>)

• Re: [FD] TrueCrypt? (Jeffrey Walton <noloader@...il.com>)
• Re: [FD] TrueCrypt? (mal <mal@....gd>)
• Re: [FD] TrueCrypt? (Rikairchy <blakcshadow@...il.com>)
• Re: [FD] TrueCrypt? (Mike Cramer <mike.cramer@...look.com>)
• Re: [FD] TrueCrypt? (Not EcksKaySeeDee <noteckskayseedee@...il.com>)
• Re: [FD] TrueCrypt? (Mike Cramer <mike.cramer@...look.com>)
• [FD] Defense in depth -- the Microsoft way (part 16): our developers and their QA dont follow our own security recommen… ("Stefan Kanthak" <stefan.kanthak@...go.…)
• [FD] LE, BF and IAA vulnerabilities in Catapulta I.W. Edition ("MustLive" <mustlive@...security.com.ua>)

247 messages

Powered by blists - more mailing lists