full-disclosure mailing list - 2014/07

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2014/07

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 13	²	³	⁴	⁵	⁶ 8
⁷ 10	⁸ 3	⁹ 4	¹⁰ 19	¹¹ 7	¹² 1	¹³
¹⁴ 5	¹⁵ 3	¹⁶ 7	¹⁷ 12	¹⁸ 18	¹⁹ 1	²⁰ 2
²¹ 5	²² 9	²³	²⁴ 11	²⁵ 1	²⁶ 2	²⁷ 5
²⁸ 1	²⁹ 12	³⁰ 3	³¹ 7

Messages by day:

July 1 (13 messages)

[FD] SEC Consult SA-20140701-0 :: Stored cross-site scripting vulnerabilities in EMC Documentum eRoom (SEC Consult Vulnerability Lab <research@...-consult.com>)
[FD] HTML5 Modern Day Attack And Defence Vectors (Rafay Baloch <rbsoulhunter17@...il.com>)
[FD] Iron Mountain doesn't take physical security seriously (freddielarge@...k.li)
[FD] IDGuard v0.60 (Gregory Pickett <gpickett71@...oo.com>)
Re: [FD] Wordpress TimThumb 2.8.13 WebShot Remote Code Execution (0-day) (Lukasz Biegaj <l.biegaj@...shock.pl>)
Re: [FD] AV scan on read vs write debate.... (Yoann Gini <yoann.gini@...il.com>)
Re: [FD] AV scan on read vs write debate.... (Carlos P <charly_en_el_trabajo@...oo.com>)
[FD] BlackArch Linux: New ISOs and more. (Black Arch <blackarchlinux@...il.com>)
[FD] Project Saltstrap and Instance-Tor (Project Un1c0rn <project.un1c0rn@...dex.com>)
Re: [FD] Back To The Future: Unix Wildcards Gone Wild (Phil Pennock <full-disclosure+phil@...dhuis.org>)
Re: [FD] Back To The Future: Unix Wildcards Gone Wild (Nick Lindridge <nick@...cube.com>)
Re: [FD] AV scan on read vs write debate.... (Joe Brown <joeb1kenobe@...il.com>)
Re: [FD] AV scan on read vs write debate.... (Reindl Harald <h.reindl@...lounge.net>)

July 6 (8 messages)

[FD] Conduct phonecalls on Android without the necessary permission, advisory+testapplication+exploits for testing (CVE… (Curesec Research Team <crt@...esec.com>)
[FD] Raritan IPMI vulnerability ("Jörg Kost" <joerg.kost.fd@....eu>)
[FD] new pen-test tool! (Pete Herzog <lists@...com.org>)
[FD] Feed2JS/MagpieRSS 0day vulnerability (not really, it is actually CVE-2005-3330 / CVE-2008-4796) (Michail Strokin <mstrokin@...il.com>)
[FD] Finding page including parameters with google dorks (rai@...nmailbox.org)
Re: [FD] AV scan on read vs write debate.... (Victor Aguilar <Victor.Aguilar@...tcon.es>)
Re: [FD] Iron Mountain doesn't take physical security seriously (Hinky Dink <dink@...inkydink.com>)
Re: [FD] Iron Mountain doesn't take physical security seriously (Sanguinarious <Sanguinarious@...ultusTerra.com>)

July 7 (10 messages)

[FD] Paypal Inc Bug Bounty #109 Multi Shipping Application API - Filter Bypass & Persistent Vulnerability (Vulnerability Lab <admin@...nerability-lab.com>)
[FD] PayPal Inc Bug Bounty #74 - Persistent Core Backend Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Yahoo! Bug Bounty #25 Flickr API - Persistent Service Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Photo Org WonderApplications v8.3 iOS - File Include Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Resubmission of exploits (Akra Macha <akra1399@...il.com>)
Re: [FD] Iron Mountain doesn't take physical security seriously (Todd Weiler <tweiler@...ramail.com>)
Re: [FD] new pen-test tool! (Árpád Magosányi <mag@...was.rulez.org>)
Re: [FD] new pen-test tool! (Keira Cran <keiracran@....cc>)
Re: [FD] Feed2JS/MagpieRSS 0day vulnerability (not really, it is actually CVE-2005-3330 / CVE-2008-4796) (Cody Tarrant <cody@...ail.com>)
[FD] iTunes 11.2.2 for Windows: completely outdated and vulnerable 3rd party libraries ("Stefan Kanthak" <stefan.kanthak@...go.de>)

July 8 (3 messages)

[FD] CVE-2014-3074 - Runtime Linker Allows Privilege Escalation Via Arbitrary File Writes in IBM AIX (Portcullis Advisories <advisories@...tcullis-security.com…)
[FD] Root command injection in ext-pack name for Virtualbox because of GKSu (Brandon Perry <bperry.volatile@...il.com>)
Re: [FD] new pen-test tool! (Jim Credland <jim@...nproductions.com>)

July 9 (4 messages)

[FD] InvGate Service Desk post-auth SQL injection as non-privileged user (Brandon Perry <bperry.volatile@...il.com>)
[FD] CVE-2014-3418 - OS Command Injection Infoblox Network Automation (Nate Kettlewell <nate@...thsecurity.com>)
[FD] FireFox: Lab Mouse Security: Remote Code Execution via Browser (LZO) (Lee <curtlee2002@...il.com>)
[FD] TxDOT fixes security issues with txtag.org (David Longenecker <dnlongen@...il.com>)

July 10 (19 messages)

[FD] SEC Consult SA-20140710-0 :: Multiple critical vulnerabilities in Shopizer webshop (SEC Consult Vulnerability Lab <research@...-consult.com>)
[FD] SEC Consult SA-20140710-1 :: Multiple high risk vulnerabilities in Shopizer webshop (SEC Consult Vulnerability Lab <research@...-consult.com>)
[FD] SEC Consult SA-20140710-2 :: Multiple critical vulnerabilites in Schrack MICROCONTROL emergency light system (SEC Consult Vulnerability Lab <research@...-…)
[FD] SEC Consult SA-20140710-3 :: Design Issue / Password Disclosure in WAGO-I/O-SYSTEM with CODESYS V2.3 WebVisu (SEC Consult Vulnerability Lab <research@...-…)
[FD] Yahoo! Bug Bounty #29 YM - Filter Bypass & Persistent Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Yahoo! Bug Bounty #30 YM - Application Side Mail Encoding (File Attachment) Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Dell Scrutinizer 11.01 multiple vulnerabilities (Brandon Perry <bperry.volatile@...il.com>)
Re: [FD] FireFox: Lab Mouse Security: Remote Code Execution via Browser (LZO) (Nick Boyce <nick.boyce@...il.com>)
[FD] Is the era of ezine txt files over? (rai@...nmailbox.org)
[FD] Should it be better ... (Pablo <paa.listas@...il.com>)
Re: [FD] Should it be better ... (Fyodor <fyodor@...p.org>)
Re: [FD] Is the era of ezine txt files over? (Matt Simmons <standalone.sysadmin@...il.com>)
Re: [FD] Is the era of ezine txt files over? (Scott Arciszewski <scott@...iszewski.me>)
Re: [FD] Is the era of ezine txt files over? (Aaron Peterson <aaron@...onp.com>)
[FD] Improperly Issued Digital Certificates Could Allow Spoofing (Jeffrey Walton <noloader@...il.com>)
Re: [FD] FireFox: Lab Mouse Security: Remote Code Execution via Browser (LZO) (Brandon Perry <bperry.volatile@...il.com>)
Re: [FD] Should it be better ... (Brandon Perry <bperry.volatile@...il.com>)
[FD] Meta: List moderation (Dave Horsfall <dave@...sfall.org>)
Re: [FD] Meta: List moderation (Fyodor <fyodor@...p.org>)

July 11 (7 messages)

[FD] QNAP TS-469U shadow file world readable (Melchior Limacher <mli@...tect7.com>)
Re: [FD] QNAP TS-469U shadow file world readable (Joerg Mertin <smurphy@...sys.org>)
Re: [FD] QNAP TS-469U shadow file world readable (Erik Auerswald <auerswal@...x-ag.uni-kl.de>)
Re: [FD] Is the era of ezine txt files over? (Berend-Jan Wever <berendjanwever@...il.com>)
Re: [FD] QNAP TS-469U shadow file world readable (David Kennedy <kennedyd013@...il.com>)
Re: [FD] Is the era of ezine txt files over? (Daniel Miller <bonsaiviking@...il.com>)
Re: [FD] Is the era of ezine txt files over? (Chris Schmidt <chris.schmidt@...trastsecurity.com>)

July 12 (1 message)

Re: [FD] Is the era of ezine txt files over? (Noah Axon <f-d@...ushacks.com>)

July 14 (5 messages)

[FD] XSS, FPD and RCE vulnerabilities in DZS Video Gallery for WordPress ("MustLive" <mustlive@...security.com.ua>)
[FD] United Airways(r) united.com Insecure Transmission of User Credentials (Michael Scheidell <michael@...urityPrivateers.com>)
[FD] [KIS-2014-08] OpenCart <= 1.5.6.4 (cart.php) PHP Object Injection Vulnerability (Egidio Romano <research@...mainsecurity.com>)
[FD] Puffin Web Browser Address Bar Spoofing Vulnerability puts Millions of users at risk (Rafay Baloch <rbsoulhunter17@...il.com>)
[FD] United Airways® united.com Insecure Transmission of User Credentials (Joshua Smith <lazydj98@...il.com>)

July 15 (3 messages)

[FD] Http DoS Requests Flooding Crash Device Vulnerabilities Elipse E3 Scada PLC. (Mauro Risonho de Paula Assumpção <mauro.risonho@...il.com>)
[FD] KL-001-2014-001 : Oracle VirtualBox Guest Additions Arbitrary Write Privilege Escalation (KoreLogic Disclosures <disclosures@...elogic.com>)
Re: [FD] Is the era of ezine txt files over? (Alfie John <alfiej@...tmail.fm>)

July 16 (7 messages)

[FD] SEC Consult SA-20140716-0 :: Multiple SSRF vulnerabilities in Alfresco Community Edition (SEC Consult Vulnerability Lab <research@...-consult.com>)
[FD] A more robust POC for the ntp amplification dos (rai@...nmailbox.org)
Re: [FD] Is the era of ezine txt files over? (surivaton surivaton <surivaton@...il.com>)
[FD] Jamming WiFi tracking beacons (Keira Cran <keiracran@....cc>)
[FD] SEC Consult SA-20140716-1 :: Remote Code Execution via CSRF in OpenVPN Access Server "Desktop Client" (SEC Consult Vulnerability Lab <research@...-consult…)
[FD] SEC Consult SA-20140716-2 :: Multiple vulnerabilities in Citrix NetScaler Application Delivery Controller and Citr… (SEC Consult Vulnerability Lab <research…)
[FD] SEC Consult SA-20140716-3 :: Multiple critical vulnerabilities in Bitdefender GravityZone (SEC Consult Vulnerability Lab <research@...-consult.com>)

July 17 (12 messages)

[FD] Raritan PowerIQ v4.10 and v4.2.1 Unauthenticated SQL injection and possible RCE (Brandon Perry <bperry.volatile@...il.com>)
[FD] Mining website blacklists (Paredes <d.paredes@...d.us>)
[FD] Oracle Data Redaction is Broken (<david@...abasesecurity.com>)
Re: [FD] Is the era of ezine txt files over? (Andy Bach <afbach@...il.com>)
[FD] Call for Paper - NOPcon 2014 - Istanbul, Turkey (info@...con.org)
[FD] Peeling the onion: Almost everyone involved in developing Tor was (or is) funded by the US government | PandoDaily ("Ivan .Heca" <ivanhec@...il.com>)
Re: [FD] Peeling the onion: Almost everyone involved in developing Tor was (or is) funded by the US government | PandoDai… (Stephen Crane <culda.rinon@...il.com>)
[FD] Ignore the amount customers confirm is no security vulnerability according to PayPal (Jan Kechel <jan@...hel.de>)
Re: [FD] Ignore the amount customers confirm is no security vulnerability according to PayPal (Glen Roberts <glen@...rsec.com>)
Re: [FD] Ignore the amount customers confirm is no security vulnerability according to PayPal (Jan Kechel <jan@...hel.de>)
Re: [FD] Jamming WiFi tracking beacons (Eric Rand <eric.rand@...wnhatsecurity.com>)
Re: [FD] Jamming WiFi tracking beacons (surivaton <surivaton@...il.com>)

July 18 (18 messages)

Re: [FD] Peeling the onion: Almost everyone involved in developing Tor was (or is) funded by the US government | PandoDaily (devel@...soft.ltd.uk)
Re: [FD] Jamming WiFi tracking beacons (Dale Visser <dale.visser@...e.com>)
Re: [FD] Peeling the onion: Almost everyone involved in developing Tor was (or is) funded by the US government | PandoDaily ("Ivan .Heca" <ivanhec@...il.com>)
[FD] Barracuda Networks Message Archiver 650 - Persistent Input Validation Vulnerability (BNSEC 703) (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Microsoft MSN HBE - Blind SQL Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] KL-001-2014-002 : Microsoft XP SP3 BthPan.sys Arbitrary Write Privilege Escalation (KoreLogic Disclosures <disclosures@...elogic.com>)
[FD] KL-001-2014-003 : Microsoft XP SP3 MQAC.sys Arbitrary Write Privilege Escalation (KoreLogic Disclosures <disclosures@...elogic.com>)
[FD] Strong Security Processes Require Strong Privacy Protections (coderman <coderman@...il.com>)
Re: [FD] Peeling the onion: Almost everyone involved in developing Tor was (or is) funded by the US government | PandoD… (Liz Gossell <elizabethgossell@...il.com…)
Re: [FD] Peeling the onion: Almost everyone involved in developing Tor was (or is) funded by the US government | PandoDai… (Olaf Rühenbeck <olaf@...henbeck.org>)
Re: [FD] Peeling the onion: Almost everyone involved in developing Tor was (or is) funded by the US government | PandoDaily (Rikairchy <blakcshadow@...il.com>)
Re: [FD] Peeling the onion: Almost everyone involved in developing Tor was (or is) funded by the US government | PandoDaily (Jack Morgan <kuriosly@...il.com>)
Re: [FD] Mining website blacklists (surivaton surivaton <surivaton@...il.com>)
Re: [FD] Should it be better ... (Pablo <paa.listas@...il.com>)
Re: [FD] Jamming WiFi tracking beacons (Rikairchy <blakcshadow@...il.com>)
Re: [FD] Jamming WiFi tracking beacons (Eric Rand <eric.rand@...wnhatsecurity.com>)
Re: [FD] Jamming WiFi tracking beacons (Rikairchy <blakcshadow@...il.com>)
Re: [FD] Jamming WiFi tracking beacons (Eric Rand <eric.rand@...wnhatsecurity.com>)

July 19 (1 message)

Re: [FD] Is the era of ezine txt files over? (Kirk Durbin <kirk.durbin@...il.com>)

July 20 (2 messages)

Re: [FD] Is the era of ezine txt files over? (Scott Arciszewski <scott@...iszewski.me>)
Re: [FD] Is the era of ezine txt files over? (Alfie John <alfiej@...tmail.fm>)

July 21 (5 messages)

[FD] Bitstamp - Possible breach (Jeffrey Walton <noloader@...il.com>)
[FD] IBM GCM16/32 v1.20.0.22575 vulnerabilities (Alejandro Alvarez <alex.a.bravo@...il.com>)
[FD] Apache HTTPd - description of the CVE-2014-0226. (funky.koval@...hmail.com)
Re: [FD] Bitstamp - Possible breach (Duarte Silva <duarte.silva@...ializing.me>)
Re: [FD] Bitstamp - Possible breach (Philip Cheong <philip.cheong@...stx.se>)

July 22 (9 messages)

[FD] Apache HTTPd - description of the CVE-2014-0117. (funky.koval@...hmail.com)
[FD] CVE-2014-4501 : Stack Overflow in Parsing client.reconnect Message of the Stratum Mining Protocol (Mick Ayzenberg <mick@...avusecurity.com>)
[FD] CVE-2014-4502 : Invalid Handling of Length Parameter in Stratum mining.notify Message Leads to Heap Overflow (Mick Ayzenberg <mick@...avusecurity.com>)
[FD] CVE-2014-4503 : Invalid Parameters in mining.notify Stratum Message Leads to Denial of Service (Mick Ayzenberg <mick@...avusecurity.com>)
[FD] MTS MBlaze 3G Plus Wi-Fi Dongle : Multiple Vulnerabilities (Narendra Choyal <narendrachoyal@...il.com>)
Re: [FD] Bitstamp - Possible breach (Jeffrey Walton <noloader@...il.com>)
[FD] Barracuda Networks Spam&Virus Firewall v6.0.2 (600 & Vx) - Client Side Cross Site Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Barracuda Networks #35 Web Firewall 610 v6.0.1 - Filter Bypass & Persistent Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Reflected XSS vulnerabilities in DELL SonicWALL GMS 7.2 Build: 7221.1701 (CVE-2014-5024) (William Costa <william.costa@...il.com>)

July 24 (11 messages)

[FD] CVE-2014-2225: Ubiquiti Networks - Multiple products - Cross-site Request Forgery (CSRF) (Seth Art <sethsec@...il.com>)
[FD] CVE-2014-2226: Ubiquiti Networks - UniFi Controller - Admin/root password hash sent via syslog (Seth Art <sethsec@...il.com>)
[FD] CVE-2014-2227: Ubiquiti Networks - AirVision v2.1.3 - Overly Permissive default crossdomain.xml (Seth Art <sethsec@...il.com>)
Re: [FD] Peeling the onion: Almost everyone involved in developing Tor was (or is) funded by the US government | PandoDaily ("Ivan .Heca" <ivanhec@...il.com>)
[FD] Beginner's error: import function of Windows Mail executes rogue program C:\Program.exe with credentials of other … ("Stefan Kanthak" <stefan.kanthak@...go.…)
Re: [FD] Bitstamp - Possible breach (Colin Keigher <colin@...gher.ca>)
[FD] Barracuda Networks Firewall 6.1.2 #36 - Filter Bypass & Exception Handling Vulnerability + PoC Video BNSEC-2398 (Vulnerability Lab <research@...nerability…)
Re: [FD] Beginner's error: import function of Windows Mail executes rogue program C:\Program.exe with credentials of ot… (Brandon Perry <bperry.volatile@...il.co…)
Re: [FD] Beginner's error: import function of Windows Mail executes rogue program C:\Program.exe with credentials of ot… ("Stefan Kanthak" <stefan.kanthak@...go.…)
Re: [FD] CVE-2014-2225: Ubiquiti Networks - Multiple products - Cross-site Request Forgery (CSRF) (Luca Carettoni <luca.carettoni@...isoft.com>)
[FD] Pligg 2.x SQLi / PWD disclosure / RCE (BlackHawk <hawkgotyou@...il.com>)

July 25 (1 message)

[FD] Barracuda Networks Firewall v6.1.5 - Filter Bypass & Persistent Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)

July 26 (2 messages)

[FD] SECV-07-1403 - Android SQLi Api - SQL Injection on delete() method (info <info@...veritas.com>)
[FD] SECV-07-1403 - Android SQLi Api - SQL Injection on delete() method ( link correction) (info <info@...veritas.com>)

July 27 (5 messages)

[FD] Ground Zero Summit 13 - 16 November 2014, New Delhi | Call For Paper Open (GroundZero Summit CFP <g0s.cfp@...il.com>)
Re: [FD] Beginner's error: import function of Windows Mail executes rogue program C:\Program.exe with credentials of oth… (Gynvael Coldwind <gynvael@...dwind.pl>)
Re: [FD] Beginner's error: import function of Windows Mail executes rogue program C:\Program.exe with credentials of ot… ("Stefan Kanthak" <stefan.kanthak@...go.…)
Re: [FD] Beginner's error: import function of Windows Mail executes rogue program C:\Program.exe with credentials of oth… (Gynvael Coldwind <gynvael@...dwind.pl>)
Re: [FD] Beginner's error: import function of Windows Mail executes rogue program C:\Program.exe with credentials of ot… ("Stefan Kanthak" <stefan.kanthak@...go.…)

July 28 (1 message)

[FD] Barracuda Networks Spam&Virus Firewall v5.1.3 - Client Side Cross Site Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

July 29 (12 messages)

[FD] New fixes in Siemens SIMATIC WinCC SCADA and DESCrypt on FPGA (SCADA StrangeLove <scadastrangelove@...il.com>)
[FD] WiFi HD v7.3.0 iOS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[FD] (BNSEC-1263) Barracuda Networks Web Application Firewall v6.1.5 & LoadBalancer v4.2.2 #37 - Filter Bypass & Multip… (Vulnerability Lab <research@...nerabili…)
[FD] [Onapsis Security Advisory 2014-021] SAP HANA XS Missing encryption in form-based authentication (Onapsis Research Labs <research@...psis.com>)
[FD] [Onapsis Security Advisory 2014-022] SAP HANA IU5 SDK Authentication Bypass (Onapsis Research Labs <research@...psis.com>)
[FD] [Onapsis Security Advisory 2014-023] HTTP verb tampering issue in SAP_JTECHS (Onapsis Research Labs <research@...psis.com>)
[FD] [Onapsis Security Advisory 2014-024] Hard-coded Username in SAP FI Manager Self-Service (Onapsis Research Labs <research@...psis.com>)
[FD] [Onapsis Security Advisory 2014-025] Multiple Cross Site Scripting Vulnerabilities in SAP HANA XS Administration T… (Onapsis Research Labs <research@...psis…)
[FD] [Onapsis Security Advisory 2014-026] Missing authorization check in function modules of BW-SYS-DB-DB4 (Onapsis Research Labs <research@...psis.com>)
[FD] Vulnerabilities in Facebook and Facebook Messenger for Android [STIC-2014-0529] (Programa STIC <stic@...dacionsadosky.org.ar>)
[FD] Former NSA Chief: Why I'm Worth $1 Million a Month to Wall Street ("Ivan .Heca" <ivanhec@...il.com>)
[FD] Bypassing Content-Disposition: attachment for XSS on Chrome/Safari(IOS 6.x) (heige <5up3rh3i@...il.com>)

July 30 (3 messages)

Re: [FD] Bypassing Content-Disposition: attachment for XSS on Chrome/Safari(IOS 6.x) ("Securify B.V." <lists@...urify.nl>)
Re: [FD] Bypassing Content-Disposition: attachment for XSS on Chrome/Safari(IOS 6.x) ("Securify B.V." <lists@...urify.nl>)
[FD] [Onapsis Security Advisory 2014-021] SAP HANA XS Missing encryption in form-based authentication (Onapsis Research Labs <research@...psis.com>)

July 31 (7 messages)

[FD] TigerCom iFolder+ v1.2 iOS - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Announcement: CEnigma tool! (Nguyen Anh Quynh <aquynh@...il.com>)
[FD] The Only Security Talk With Eurovision Videos? (Pete Herzog <lists@...com.org>)
Re: [FD] Bypassing Content-Disposition: attachment for XSS on Chrome/Safari(IOS 6.x) (Łukasz Pilorz <lpilorz@...il.com>)
[FD] DEF CON nostalgia [was: going double cryptome at DEF CON 22] (coderman <coderman@...il.com>)
[FD] Legal Threats and Investigation (Trey Ford <trey@...onnaille.com>)
[FD] XXE Injection in HP Release Control ("MustLive" <mustlive@...security.com.ua>)

169 messages

Powered by blists - more mailing lists