Full Disclosure mailing list archives
Re: Secret Vulns: Places of confusion
From: devis <devis () easynix net>
Date: Sun, 21 Nov 2004 09:15:45 +0100
Very well said. And kindly too. Talk or shut up is faster, somehow not as kind. Michael Rutledge wrote:
Correct me if I'm wrong (which I know the list members will take me up on that), the FD mailing list is about *discussing* vulnerabilities and revealing important information to the community. This post seems to comment on general problems with general products--so general in fact that the products or specific problems are not addressed. If you cannot or will not (for privacy issues) share any details about your findings, I believe that the posted findings are quite useless to the community. I mean this in a constructive sense. However, if some of the other community members feel that this post is informative in some way, I will gladly hear their reasoning. -Michael On Sat, 20 Nov 2004 20:11:40 -0000 (GMT), gp <girl () catholic org> wrote:hello list Sometimes ago I have examined the websites of many Government's if it's possible to put malicious code in their URLs. In November 2004 I inform some Deparments about my successful work. On most Sites it is possible to: - inject SQL - account hijacking - user exploitation - server manipulation - read complete dir ect. ect. In Arrangement with the Victims I will not reveal vulnerability or victim details until a fix became published. I will answer no questions! This is only for Your information! Credits: d.w., ms, [...] -- g@cat online <-> MM ---------- .//sometimes its better to know somewhat as all but at later times would be better to know nothing ----------------------------------------- This email was sent using FREE Catholic Online Webmail! http://webmail.catholic.org/ _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Secret Vulns: Places of confusion gp (Nov 20)
- Re: Secret Vulns: Places of confusion Michael Rutledge (Nov 20)
- Re: Secret Vulns: Places of confusion devis (Nov 21)
- Re: Secret Vulns: Places of confusion Berend-Jan Wever (Nov 21)
- Re: Secret Vulns: Places of confusion Robert Hogan (Nov 21)
- Re: Secret Vulns: Places of confusion Andrew Smith (Nov 21)
- Re: Secret Vulns: Places of confusion Michael Rutledge (Nov 20)