Full Disclosure: by thread

• RSS Feed
• About List
• All Lists

Previous period

Next period

382 messages starting Apr 01 12 and ending Apr 30 12
Date index | Thread index | Author index

• FW: iis bug yuange (Apr 01)
  • Re: iis bug yuange (Apr 01)
• March 2012 mini Threat Intelligence report Almaz (Apr 01)
• Flatnux CMS 2011 08.09.2 - Multiple Web Vulnerabilities Research (Apr 01)
• ME Firewall Analyzer v7.2 - Cross Site Vulnerabilities Research (Apr 01)
• Swedish Army Web Database - SQL Injection Vulnerability Research (Apr 01)
• HITB2011KUL - Skype Vulnerabilities 0Day Exploitation PART 1 Research (Apr 01)
• So, so you think you can tell April 1 joke from a 0day? Georgi Guninski (Apr 01)
• STEP Security J. Oquendo (Apr 01)
  • Re: STEP Security Memory Vandal (Apr 01)
  • Re: STEP Security Nick FitzGerald (Apr 01)
    • Re: STEP Security Jeff Kell (Apr 01)
• An April Fools' Day Android Payload Dan Rosenberg (Apr 01)
  • <Possible follow-ups>
  • An April Fools' Day Android Payload ZeroDay.JP (Apr 02)
    • Re: An April Fools' Day Android Payload Dan Rosenberg (Apr 02)
• Amongst data breaches and misc 'leakage', not necessarily digital, DEFCON CTF continues at DEFCON XX Vulcan DDtek (Apr 01)
  • Re: Amongst data breaches and misc 'leakage', not necessarily digital, DEFCON CTF continues at DEFCON XX Roman Medina-Heigl Hernandez (Apr 13)
• [ MDVSA-2012:046 ] libpng security (Apr 02)
• [ MDVSA-2012:047 ] freeradius security (Apr 02)
• BulletProof FTP Client 2010 - Buffer Overflow Vulnerability Research (Apr 02)
• DirectAdmin v1.403 - Cross Site Scripting Vulnerability Research (Apr 02)
• www.LEORAT.com is scam smith joseph (Apr 02)
  • Re: www.LEORAT.com is scam Valdis . Kletnieks (Apr 02)
  • Re: www.LEORAT.com is scam Dave (Apr 02)
  • Re: www.LEORAT.com is scam Dave (Apr 02)
    • Re: www.LEORAT.com is scam Sebastian Rakowski (Apr 03)
      • Re: www.LEORAT.com is scam Dave (Apr 03)
      • Re: www.LEORAT.com is scam Sebastian Rakowski (Apr 04)
  • Re: www.LEORAT.com is scam Thor (Hammer of God) (Apr 02)
  • Re: www.LEORAT.com is scam Sanguinarious Rose (Apr 02)
• Apache 2.2.xx 0day exploit Adam Zabrocki (Apr 02)
• [ MDVSA-2012:048 ] mutt security (Apr 02)
• [ MDVSA-2012:049 ] nagios security (Apr 02)
• Re(2): An April Fools' Day Android Payload アドリアンヘンドリック (Apr 02)
  • Re: Re(2): An April Fools' Day Android Payload Andrew Farmer (Apr 02)
• Re(3): An April Fools' Day Android Payload アドリアンヘンドリック (Apr 02)
• [Tool] New release of peepdf (PDF analysis) Jose Miguel Esparza (Apr 02)
• [ MDVSA-2012:050 ] phpmyadmin security (Apr 03)
• Hacking AutoUpdate by Injecting Fake Updates Adam Behnke (Apr 03)
  • Re: Hacking AutoUpdate by Injecting Fake Updates Charles Morris (Apr 03)
• [ MDVSA-2012:051 ] libvorbis security (Apr 03)
• [ MDVSA-2012:052 ] libvorbis security (Apr 03)
• [ZEM560] Vulnerability on Fingerprint & Proximity Access Controller Zerial. (Apr 03)
• SmartJobBoard v3.4 b5140 - Multiple Web Vulnerabilites Research (Apr 03)
• Astaro Command Center v2.x - Multiple Web Vulnerabilities Research (Apr 03)
  • <Possible follow-ups>
  • Astaro Command Center v2.x - Multiple Web Vulnerabilities Research (Apr 08)
• [SE-2012-01] Security vulnerabilities in Java SE Security Explorations (Apr 03)
• Mind Control Security Awareness Pete Herzog (Apr 03)
• Last public release HI-TECH . (Apr 03)
• Re: Brute Force vulnerability in WordPress MustLive (Apr 04)
  • Re: Brute Force vulnerability in WordPress Sanguinarious Rose (Apr 04)
  • Re: Brute Force vulnerability in WordPress InterN0T Advisories (Apr 04)
• SQL Injection through HTTP Headers Adam Behnke (Apr 04)
• Cisco Security Advisory: Buffer Overflow Vulnerabilities in the Cisco WebEx Player Cisco Systems Product Security Incident Response Team (Apr 04)
• [ MDVSA-2012:053 ] ocsinventory security (Apr 04)
• Re: Working to get more people to check if their infected with DNS Changer Gage Bystrom (Apr 04)
  • Re: Working to get more people to check if their infected with DNS Changer Valdis . Kletnieks (Apr 04)
• Sourcefire Defense Center - multiple vulnerabilities. Filip Palian (Apr 04)
• [Security-news] SA-CONTRIB-2012-056 - Janrain Engage - Sensitive Data Protection Vulnerability security-news (Apr 04)
• 'phpPaleo' Local File Inclusion (CVE-2012-1671) Mark Stanislav (Apr 04)
• 'e-ticketing' SQL Injection (CVE-2012-1673) Mark Stanislav (Apr 04)
• 'Hotel Booking Portal' SQL Injection (CVE-2012-1672) Mark Stanislav (Apr 04)
• [SECURITY] [DSA 2446-1] libpng security update Moritz Muehlenhoff (Apr 04)
• [SECURITY] [DSA 2447-1] tiff security update Moritz Muehlenhoff (Apr 04)
• [Security-news] SA-CONTRIB-2012-057 - Printer, email and PDF versions - Cross Site Scripting (XSS) security-news (Apr 04)
• Teensy USB HID (and Kautilya) for Penetration Testers Nikhil Mittal (Apr 04)
• [ MDVSA-2012:054 ] libtiff security (Apr 05)
• [MATTA-2012-001] CVE-2012-1301; 0day; Open Proxy vulnerability in Umbraco 4.7 Florent Daigniere (Apr 05)
• mac trojan RandallM (Apr 05)
  • Re: mac trojan Dennis (Apr 05)
  • Re: mac trojan Jeffrey Walton (Apr 05)
  • Re: [funsec] mac trojan Charlie Derr (Apr 06)
  • Re: mac trojan Carl "Thomas" Guething (Apr 06)
• Sagan 0.2.1 [Security Event/Log Analyzer] Released. Champ Clark III (Apr 05)
• [CVE-2012-1574] Apache Hadoop user impersonation vulnerability Aaron T. Myers (Apr 06)
• Shakacon CFP - Extended Deadline: April 13, 2012 Shakacon (Apr 06)
• Drop box Fatherlaptop (Apr 06)
• PenTest Market is for FREE Now Krzysztof Marczyk (Apr 06)
  • Re: PenTest Market is for FREE Now John Jacobs (Apr 06)
  • Re: PenTest Market is for FREE Now Dave (Apr 06)
• Dolibarr ERP & CRM OS Command Injection Nahuel Grisolia (Apr 06)
• FSA2012-1 and FSA2012-2: Chocolate easter egss vulnerable to egg white injection and usable as trojan horses. klondike (Apr 07)
  • Re: FSA2012-1 and FSA2012-2: Chocolate easter egss vulnerable to egg white injection and usable as trojan horses. rancor (Apr 07)
  • Re: FSA2012-1 and FSA2012-2: Chocolate easter egss vulnerable to egg white injection and usable as trojan horses. fabrice (Apr 07)
• AnvSoft Any Video Converter 4.3.6 - Multiple Buffer Overflow Vulnerabilities Research (Apr 08)
• idev Game Site CMS v1.0 - Multiple Web Vulnerabilites Research (Apr 08)
• osCmax Shop CMS v2.5.1 - Multiple Web Vulnerabilities Research (Apr 08)
• CsForum v0.8 - Cross Site Scripting Vulnerability Research (Apr 08)
• Astaro Security Gateway v7.504 - Multiple Web Vulnerabilities Research (Apr 08)
• US UF Services EDU Health - File Include Vulnerability Research (Apr 08)
• Thor's Private Key Thor (Hammer of God) (Apr 08)
  • Re: Thor's Private Key Jason Hellenthal (Apr 09)
    • Re: Thor's Private Key Thor (Hammer of God) (Apr 08)
• Microsoft MSDN - Persistent Web Service Vulnerability Research (Apr 09)
• Secunia Research: RealNetworks Helix Server Credentials Disclosure Security Issue Secunia Research (Apr 09)
• Secunia Research: Helix Server SNMP Master Agent Service Two Denial of Service Vulnerabilities Secunia Research (Apr 09)
• ZDI-12-055 : Webkit.org Webkit copyNonAttributeProperties Remote Code Execution Vulnerability ZDI Disclosures (Apr 09)
• ZDI-12-056 : Mozilla Firefox nsSVGValue Out-of-Bounds Access Remote Code Execution Vulnerability ZDI Disclosures (Apr 09)
• ZDI-12-057 : (Pwn2Own) Adobe Flash Player NetStream addBytes Remote Code Execution Vulnerability ZDI Disclosures (Apr 09)
• ZDI-12-058 : Apple Quicktime PNG Depth Decoding Remote Code Execution Vulnerability ZDI Disclosures (Apr 09)
• ZDI-12-059 : Mozilla Firefox Ogg Vorbis Decoding Memory Corruption Remote Code Execution Vulnerability ZDI Disclosures (Apr 09)
• Teensy USB HID (and Kautilya) for Penetration Testers - Part 2 - Basics of Arduino and Hello World Nikhil Mittal (Apr 09)
• ZDI-12-060 : Oracle Java Runtime readMabCurveData nTblSize Remote Code Execution Vulnerability ZDI Disclosures (Apr 09)
• CVE-2012-0769, the case of the perfect info leak Fermín J . Serna (Apr 09)
• CIntruder v0.1 psy (Apr 09)
  • Re: CIntruder v0.1 Travis Biehn (Apr 09)
• new law proposal on EU against hacking tools and practices psy (Apr 09)
  • Re: new law proposal on EU against hacking tools and practices Valdis . Kletnieks (Apr 09)
    • Re: new law proposal on EU against hacking tools and practices Travis Biehn (Apr 09)
      • Re: new law proposal on EU against hacking tools and practices Valdis . Kletnieks (Apr 09)
      • Re: new law proposal on EU against hacking tools and practices Dave (Apr 09)
      • Re: new law proposal on EU against hacking tools and practices Valdis . Kletnieks (Apr 09)
• Re: Compromised VPN provider out there? nix (Apr 09)
  • Re: Compromised VPN provider out there? Benji (Apr 10)
• [SECURITY] [DSA 2448-1] inspircd security update Jonathan Wiltshire (Apr 10)
• List Charter John Cartwright (Apr 10)
• 44Con London 2012 CFP - September 5th - 7th Steve (Apr 10)
• Re: keeping data safe offline Gage Bystrom (Apr 10)
• Matterdaddy Market v1.1 - SQL Injection Vulnerabilities Research (Apr 10)
• National Center EDU Research - SQL Injection Vulnerability Research (Apr 10)
  • <Possible follow-ups>
  • National Center EDU Research - SQL Injection Vulnerability Research (Apr 11)
• GroupWare epesiBIM CRM 1.2.1 - Multiple Web Vulnerabilities Research (Apr 10)
• ACROS Blog: Adobe Reader X (10.1.2) msiexec.exe Planting ACROS Security Lists (Apr 11)
• [ MDVSA-2012:055 ] samba security (Apr 11)
• Backtrack 5 R2 priv escalation 0day found in CTF exercise Adam Behnke (Apr 11)
  • Re: Backtrack 5 R2 priv escalation 0day found in CTF exercise InterN0T Advisories (Apr 12)
    • Re: Backtrack 5 R2 priv escalation 0day found in CTF exercise Urlan (Apr 12)
• TeamSHATTER Security Advisory: Privilege escalation via internal sql injection in RESTORE DATABASE command Shatter (Apr 11)
• [Security-news] SA-CONTRIB-2012-058 - Fivestar - Input Validation security-news (Apr 11)
• [Security-news] SA-CONTRIB-2012-059 - Autosave - Cross Site Scripting security-news (Apr 11)
• TWSL2012-008: Multiple Vulnerabilities in Scrutinizer NetFlow & sFlow Analyzer Trustwave Advisories (Apr 11)
• DHTMLX Suite v.3.0 - Multiple Web Vulnerabilities Research (Apr 12)
• Netjuke 1.0 RC1 - SQL Injection Vulnerabilities Research (Apr 12)
• Oracle Service Applications - SQL Injection Vulnerabilities Research (Apr 12)
• CRUNCH TV SHOW - Live Stream & Security Videos Research (Apr 12)
• [SECURITY] [DSA 2449-1] sqlalchemy security update Nico Golde (Apr 12)
• Crystal Office Suite v1.43 - Buffer Overflow Vulnerability Research (Apr 12)
• [ MDVSA-2012:056 ] rpm security (Apr 12)
• [ MDVSA-2012:057 ] freetype2 security (Apr 12)
• Patrick Belcher Rand Flieger (Apr 12)
• Most Linux distributions don't use tmpfs nor encrypt swap by default Mark Krenz (Apr 12)
  • Re: Most Linux distributions don't use tmpfs nor encrypt swap by default Grandma Eubanks (Apr 12)
    • Re: Most Linux distributions don't use tmpfs nor encrypt swap by default Mark Krenz (Apr 13)
      • Re: Most Linux distributions don't use tmpfs nor encrypt swap by default Feighen Oosterbroek (Apr 13)
      • Re: Most Linux distributions don't use tmpfs nor encrypt swap by default _ (Apr 15)
      • Re: Most Linux distributions don't use tmpfs nor encrypt swap by default Pedro Martelletto (Apr 16)
      • Re: Most Linux distributions don't use tmpfs nor encrypt swap by default Mark Krenz (Apr 17)
  • Re: Most Linux distributions don't use tmpfs nor encrypt swap by default Jon Dowland (Apr 19)
• Last Mile, April 20 || CfP: SECURWARE 2012 || August 19-24, 2012 - Rome, Italy Cristina Pascual (Apr 12)
• [SE-2012-01] Security weakness in Apple Quicktime Java extensions Security Explorations (Apr 12)
• [SECURITY] [DSA 2450-1] samba security update Thijs Kinkhorst (Apr 12)
• Erronous post concerning Backtrack 5 R2 0day Adam Behnke (Apr 12)
  • Re: Erronous post concerning Backtrack 5 R2 0day Benji (Apr 12)
  • <Possible follow-ups>
  • Re: Erronous post concerning Backtrack 5 R2 0day Ryan Dewhurst (Apr 13)
• VMSA-2012-0007 VMware hosted products and ESXi/ESX patches address privilege escalation VMware Security Team (Apr 12)
• hi Patrick Klos (Apr 13)
• [SECURITY] [DSA 2451-1] puppet security update Nico Golde (Apr 13)
• [ MDVSA-2012:058 ] curl security (Apr 13)
• [Spanish] - Exploit Pack - Web Security Framework runlvl (Apr 13)
• Invitation to connect on LinkedIn Mezgani Ali via LinkedIn (Apr 13)
• Slides for "Recent Advances in IPv6 Security" at Hackito Ergo Sum 2012 Fernando Gont (Apr 14)
• Mathematica8.0.4 on Linux /tmp/MathLink vulnerability paul . szabo (Apr 14)
  • Re: Mathematica8.0.4 on Linux /tmp/MathLink vulnerability Vikram Dhillon (Apr 17)
    • Re: Mathematica8.0.4 on Linux /tmp/MathLink vulnerability paul . szabo (Apr 16)
• ACC PHP eMail v1.1 - Multiple Web Vulnerabilites Research (Apr 15)
• EmbryoCore CMS v1.03 - Multiple Web Vulnerabilities Research (Apr 15)
  • <Possible follow-ups>
  • EmbryoCore CMS v1.03 - Multiple Web Vulnerabilities Research (Apr 15)
• Microsoft Service - Persistent Web Vulnerabilities Research (Apr 15)
• K-Meleon Browser v1.5.4 - Denial of Service Vulnerability Research (Apr 15)
• Microsoft AFKAR Website Service - Cross Site Vulnerabilities Research (Apr 15)
• Siche Search v.0.5 Zerboard - Multiple Web Vulnerabilities Research (Apr 15)
• Cyberoam UTM v10.01.2 build 059 - File Include Vulnerabilities Research (Apr 15)
• nullsec-bypass-aslr.pdf - ASLR / ASLR bypass techniques Levent Kayan (Apr 15)
  • Re: nullsec-bypass-aslr.pdf - ASLR / ASLR bypass techniques Gage Bystrom (Apr 15)
• DoS vulnerability in WordPress MustLive (Apr 15)
  • Re: DoS vulnerability in WordPress Kurt Seifried (Apr 17)
    • Re: DoS vulnerability in WordPress Javier Reoyo (Apr 17)
    • Re: DoS vulnerability in WordPress MustLive (Apr 20)
      • Re: DoS vulnerability in WordPress Christian Sciberras (Apr 20)
• DoS vulnerability in MustLive InterN0T Advisories (Apr 15)
• [CVE-2012-1622] Apache OFBiz information disclosure vulnerability Jacopo Cappellato (Apr 16)
• [CVE-2012-1621] Apache OFBiz information disclosure vulnerability Jacopo Cappellato (Apr 16)
• FastPath Webchat | Multiple Cross Site Scripting Vulnerabilities YGN Ethical Hacker Group (Apr 16)
• Joomla! Plugin - Beatz 1.x <= Multiple Cross Site Scripting Vulnerabilities YGN Ethical Hacker Group (Apr 16)
  • Re: Joomla! Plugin - Beatz 1.x <= Multiple Cross Site Scripting Vulnerabilities David3 Gonnella (Apr 16)
• [SECURITY] [DSA 2452-1] apache2 security update Stefan Fritsch (Apr 16)
• [SECURITY] [DSA 2453-1] gajim security update Nico Golde (Apr 16)
• [ MDVSA-2012:059 ] python-sqlalchemy security (Apr 16)
• Re: PHP Gift Registry 1.5.5 SQL Injection Thomas Richards (Apr 16)
• Windows XP denial of service 0day found in CTF exercise Adam Behnke (Apr 16)
  • Re: Windows XP denial of service 0day found in CTF exercise Memory Vandal (Apr 17)
    • Re: Windows XP denial of service 0day found in CTF exercise Romain Bourdy (Apr 17)
      • Re: Windows XP denial of service 0day found in CTF exercise Memory Vandal (Apr 17)
      • Re: Windows XP denial of service 0day found in CTF exercise Mihamina Rakotomandimby (Apr 17)
  • Re: Windows XP denial of service 0day found in CTF exercise Justin C. Klein Keane (Apr 17)
  • Message not available
    • Re: Windows XP denial of service 0day found in CTF exercise adam (Apr 17)
      • Re: Windows XP denial of service 0day found in CTF exercise Terrence (Apr 17)
• winAUTOPWN v3.0 Released QUAKER DOOMER (Apr 17)
• SEC Consult whitepaper :: The Source Is A Lie SEC Consult Vulnerability Lab (Apr 17)
• [ MDVSA-2012:032-1 ] mozilla security (Apr 17)
• Re: Windows XP denial of service 0day found in CTF exercise Elazar Broad (Apr 17)
  • Re: Windows XP denial of service 0day found in CTF exercise Valdis . Kletnieks (Apr 17)
• Acuity CMS 2.6.x <= Cross Site Scripting YGN Ethical Hacker Group (Apr 17)
• 10 Ways to Enhance Your Career in Information Security Krzysztof Marczyk (Apr 18)
• LibreOffice 3.5.2.2 - memory corruption with a specific .rtf file Carlo Di Dato (Apr 18)
• Hack Cup 2012 Nicolas Waisman (Apr 18)
• [Announcement] CHMag's Issue 27, April 2012 Released Abhijeet Patil (Apr 18)
  • Re: [Announcement] CHMag's Issue 27, April 2012 Released Robert Kim App and Facebook Marketing (Apr 19)
• The history of a -probably- 13 years old Oracle bug: TNS Poison Joxean Koret (Apr 18)
• [Security-news] SA-CONTRIB-2012-060 - Commerce Reorder - Cross Site Request Forgery security-news (Apr 18)
• [Security-news] SA-CONTRIB-2012-061 - Gigya - Social optimization - Cross Site Scripting (XSS) security-news (Apr 18)
• [SECURITY] [DSA 2453-2] gajim regression Nico Golde (Apr 19)
• Ruxcon 2012 Call For Papers cfp (Apr 19)
• incorrect integer conversions in OpenSSL can result in memory corruption. Tavis Ormandy (Apr 19)
  • Re: incorrect integer conversions in OpenSSL can result in memory corruption. Benjamin Kreuter (Apr 19)
    • Re: incorrect integer conversions in OpenSSL can result in memory corruption. Douglas Huff (Apr 20)
    • Re: incorrect integer conversions in OpenSSL can result in memory corruption. Jeffrey Walton (Apr 21)
      • Re: incorrect integer conversions in OpenSSL can result in memory corruption. Zach C. (Apr 21)
      • Re: incorrect integer conversions in OpenSSL can result in memory corruption. Jeffrey Walton (Apr 21)
  • Re: incorrect integer conversions in OpenSSL can result in memory corruption. sd (Apr 24)
• [ MDVSA-2012:060 ] openssl security (Apr 19)
• Incomplete protection of Oracle Database locked accounts (CVE-2012-0510) Shatter (Apr 19)
• Some failed authentication attempts using OCIPasswordChange API are not recorded (CVE-2012-0511) Shatter (Apr 19)
• SQL Injection in Oracle Enterprise Manager (compareWizFirstConfig web page) (CVE-2012-0512) Shatter (Apr 19)
• SQL Injection in Oracle Enterprise Manager (searchPage web page) (CVE-2012-0525) Shatter (Apr 19)
• HTTP Response Splitting in Oracle Enterprise Manager (prevPage parameter) (CVE-2012-0526) Shatter (Apr 19)
• HTTP Response Splitting in Oracle Enterprise Manager (pageName parameter) (CVE-2012-0527) Shatter (Apr 19)
• Oracle Enterprise Manager vulnerable to Session fixation (CVE-2012-0528) Shatter (Apr 19)
• OCIPasswordChange API leaks information of password hash (CVE-2012-0511) Shatter (Apr 19)
• IPv6 host scanning in IPv6 Fernando Gont (Apr 20)
• Weak password reset token & code exec in ownCloud 3.0.0 luks (Apr 20)
• [SECURITY] [DSA 2454-1] openssl security update Raphael Geissert (Apr 20)
• DC4420 - London DEFCON - April meet - Tuesday April 24th 2012 Major Malfunction (Apr 20)
• PenTest is one year old now Krzysztof Marczyk (Apr 20)
  • Re: PenTest is one year old now Henri Salo (Apr 20)
• [SECURITY] [DSA 2455-1] typo3-src security update Nico Golde (Apr 20)
• XSS parameter injection in the search field of http://chicasdetorbe.com klondike (Apr 20)
• [ MDVSA-2012:061 ] raptor security (Apr 21)
• [ MDVSA-2012:062 ] openoffice.org security (Apr 21)
• [ MDVSA-2012:063 ] libreoffice security (Apr 21)
• HTC IQRD Android Permission Leakage (CVE-2012-2217) VSR Advisories (Apr 21)
  • Re: HTC IQRD Android Permission Leakage (CVE-2012-2217) Jeffrey Walton (Apr 21)
    • Re: HTC IQRD Android Permission Leakage (CVE-2012-2217) Jason Hellenthal (Apr 22)
• Attacking Critical Internet Infrastructure fireball9 (Apr 22)
  • Re: Attacking Critical Internet Infrastructure Dobbins, Roland (Apr 22)
• phpMyBible 0.5.1 Mutiple XSS Thomas Richards (Apr 22)
  • Re: phpMyBible 0.5.1 Mutiple XSS Thor (Hammer of God) (Apr 22)
    • Re: phpMyBible 0.5.1 Mutiple XSS Valdis . Kletnieks (Apr 22)
      • Re: phpMyBible 0.5.1 Mutiple XSS Thor (Hammer of God) (Apr 22)
      • Re: phpMyBible 0.5.1 Mutiple XSS Jeffrey Walton (Apr 22)
      • Re: phpMyBible 0.5.1 Mutiple XSS Terrence (Apr 23)
      • Re: phpMyBible 0.5.1 Mutiple XSS Alex Buie (Apr 23)
    • Re: phpMyBible 0.5.1 Mutiple XSS BMF (Apr 22)
      • Re: phpMyBible 0.5.1 Mutiple XSS Laurelai (Apr 22)
      • Re: phpMyBible 0.5.1 Mutiple XSS BMF (Apr 22)
      • Re: phpMyBible 0.5.1 Mutiple XSS Laurelai (Apr 22)
      • Re: phpMyBible 0.5.1 Mutiple XSS Jason Hellenthal (Apr 23)
  • Re: phpMyBible 0.5.1 Mutiple XSS Martin Allert (Apr 26)
• XSS and FPD vulnerabilities in Organizer for WordPress MustLive (Apr 22)
• SumatraPDF v2.0.1 chm and mobi files memory corruption Carlo Di Dato (Apr 23)
• Mobipocket Reader version 6.2 Build 608 Buffer Overflow Carlo Di Dato (Apr 23)
• XSS and Blind SQL Injection Vulnerabilities in ExponentCMS Netsparker Advisories (Apr 23)
• IPhone TreasonSMS - HTML Inject & File Include Vulnerability Research (Apr 23)
• Havalite CMS v1.0.4 - Multiple Web Vulnerabilities Research (Apr 23)
• PSFTP v.1.8 Build 921 - Null Pointer (DoS) Vulnerability Research (Apr 23)
• Chengdu Bureau of Commerce - SQL Injection Vulnerability Research (Apr 23)
• [HITB-Announce] HITB Magazine Issue 008 (now with print edition!) Hafez Kamal (Apr 23)
• .NET Framework EncoderParameter integer overflow vulnerability Akita Software Security (Apr 23)
• AST-2012-004: Asterisk Manager User Unauthorized Shell Access Asterisk Security Team (Apr 23)
• AST-2012-005: Heap Buffer Overflow in Skinny Channel Driver Asterisk Security Team (Apr 23)
• AST-2012-006: Remote Crash Vulnerability in SIP Channel Driver Asterisk Security Team (Apr 23)
• FYI: We're now paying up to $20, 000 for web vulns in our services Michal Zalewski (Apr 23)
  • Re: We're now paying up to $20, 000 for web vulns in our services Jim Harrison (Apr 24)
    • Re: We're now paying up to $20, 000 for web vulns in our services Michal Zalewski (Apr 24)
      • Re: We're now paying up to $20, 000 for web vulns in our services Charles Morris (Apr 24)
      • Re: We're now paying up to $20, 000 for web vulns in our services Michal Zalewski (Apr 24)
      • Re: We're now paying up to $20, 000 for web vulns in our services Bob McConnell (Apr 27)
      • Re: We're now paying up to $20, 000 for web vulns in our services Jim Harrison (Apr 26)
      • Re: We're now paying up to $20, 000 for web vulns in our services Charlie Derr (Apr 27)
      • Re: We're now paying up to $20, 000 for web vulns in our services Georgi Guninski (Apr 25)
      • Re: We're now paying up to $20, 000 for web vulns in our services Ramon de C Valle (Apr 24)
      • Re: We're now paying up to $20, 000 for web vulns in our services Jim Harrison (Apr 25)
    • Re: We're now paying up to $20, 000 for web vulns in our services Marcio B. Jr. (Apr 27)
• [New Tool] - Exploit Pack - Web Security runlvl (Apr 23)
  • <Possible follow-ups>
  • [New tool] - Exploit Pack - Web Security runlvl (Apr 23)
    • Re: [New tool] - Exploit Pack - Web Security Jerome Athias (Apr 24)
      • Re: [New tool] - Exploit Pack - Web Security Michele Orru (Apr 24)
      • Re: [New tool] - Exploit Pack - Web Security Mario Vilas (Apr 24)
      • Re: [New tool] - Exploit Pack - Web Security Mario Vilas (Apr 26)
      • Re: [New tool] - Exploit Pack - Web Security Michele Orru (Apr 26)
  • [New tool] - Exploit Pack - Web Security noreply () exploitpack com (Apr 24)
• BeyondCHM 1.1 Buffer Overflow Carlo Di Dato (Apr 24)
• OpenSSL Security Advisory Mark J Cox (Apr 24)
• Fwd: Vulnerability research and exploit writing Ferenc Kovacs (Apr 24)
  • Re: Fwd: Vulnerability research and exploit writing Michal Zalewski (Apr 24)
    • Re: Fwd: Vulnerability research and exploit writing Alex Buie (Apr 25)
      • Re: Fwd: Vulnerability research and exploit writing James Condron (Apr 25)
• Cross Site Scripting - Exploitation & Penetration Strings Research (Apr 24)
• Microsoft Incremental Linker Integer Overflow Walied Assar (Apr 24)
• RuggedCom - Backdoor Accounts in my SCADA network? You don't say... jc (Apr 24)
• New IETF I-D: Security Implications of IPv6 on IPv4 networks Fernando Gont (Apr 24)
• Vulnerability in Backtrack Григорий Братислава (Apr 24)
  • Re: Vulnerability in Backtrack Gage Bystrom (Apr 24)
    • Re: Vulnerability in Backtrack Urlan (Apr 24)
      • Re: Vulnerability in Backtrack Gage Bystrom (Apr 24)
      • Re: Vulnerability in Backtrack David3 Gonnella (Apr 24)
      • Re: Vulnerability in Backtrack Disposable (Apr 25)
      • Re: Vulnerability in Backtrack James Condron (Apr 25)
  • Re: Vulnerability in Backtrack Sergio Arcos (Apr 24)
  • Vulnerability in Gentoo hardened klondike (Apr 24)
    • Re: Vulnerability in Gentoo hardened Milan Berger (Apr 24)
      • Re: Vulnerability in Gentoo hardened Valdis . Kletnieks (Apr 24)
      • Re: Vulnerability in Gentoo hardened Thor (Hammer of God) (Apr 24)
      • Re: Vulnerability in Gentoo hardened Georgi Guninski (Apr 25)
      • Re: Vulnerability in Gentoo hardened Laurelai (Apr 25)
      • Re: Vulnerability in Gentoo hardened Georgi Guninski (Apr 25)
      • Re: Vulnerability in Gentoo hardened Laurelai (Apr 25)
      • Re: Vulnerability in Gentoo hardened Benji (Apr 25)
      • Re: Vulnerability in Gentoo hardened Laurelai (Apr 25)
      • Re: Vulnerability in Gentoo hardened Benji (Apr 25)
      • Re: Vulnerability in Gentoo hardened Laurelai (Apr 25)
      • Re: Vulnerability in Gentoo hardened Benji (Apr 25)
      • Re: Vulnerability in Gentoo hardened Laurelai (Apr 25)
      • Re: Vulnerability in Gentoo hardened Benji (Apr 25)
      • Re: Vulnerability in Gentoo hardened Laurelai (Apr 25)
• [ MDVSA-2012:064 ] openssl0.9.8 security (Apr 24)
• [Tool] Introducing plown: security scanner for Plone CMS mgogoulos (Apr 24)
• Hacking WolframAlpha Adam Behnke (Apr 24)
  • Re: Hacking WolframAlpha Lincoln Anderson (Apr 25)
• [SECURITY] [DSA 2456-1] dropbear security update Moritz Muehlenhoff (Apr 24)
• Re: Fwd: Vulnerability research and exploit writing Elazar Broad (Apr 24)
• [SECURITY] [DSA 2457-1] iceweasel security update Moritz Muehlenhoff (Apr 24)
• [SECURITY] [DSA 2548-1] iceape security update Moritz Muehlenhoff (Apr 24)
• Opcodes Database Revival Jerome Athias (Apr 24)
• [SECURITY] [DSA 2454-2] openssl incomplete fix Raphael Geissert (Apr 25)
• MoroccoTel Box Default Open Telnet Password Jerome Athias (Apr 25)
• [SECURITY] [DSA 2460-1] asterisk security update Moritz Muehlenhoff (Apr 25)
• XSS, CSRF and AFU vulnerabilities in Organizer for WordPress MustLive (Apr 25)
• (no subject) Ramon Driessen (Apr 25)
  • Re: (no subject) coderman (Apr 25)
  • <Possible follow-ups>
  • FW: (no subject) imipak (Apr 25)
    • Re: FW: (no subject) Michael Wood (Apr 25)
• [Security-news] SA-CONTRIB-2012-062 - Creative Commons - Cross Site Scripting (XSS) security-news (Apr 25)
• [Security-news] SA-CONTRIB-2012-063 - RealName - Cross Site Scripting (XSS) security-news (Apr 25)
  • Re: [Security-news] SA-CONTRIB-2012-063 - RealName - Cross Site Scripting (XSS) security-news (Apr 25)
• [Security-news] SA-CONTRIB-2012-064 - Ubercart - Multiple vulnerabilities security-news (Apr 25)
• [Security-news] SA-CONTRIB-2012-065 - Sitedoc - Information disclosure security-news (Apr 25)
• [Security-news] SA-CONTRIB-2012-066 - Spaces and Spaces OG - Access Bypass security-news (Apr 25)
• [Security-news] SA-CONTRIB-2012-067 - Linkit - Access bypass security-news (Apr 25)
• [SECURITY] [DSA 2459-1] quagga security update Florian Weimer (Apr 25)
• Oracle TNS Poison vulnerability is actually a 0day with no patch available Joxean Koret (Apr 26)
• Re: Full-Disclosure Digest, Vol 86, Issue 34 Gabriel S. Craciun (Apr 26)
• Microsoft MSN Hotmail - Password Reset & Setup Vulnerability Research (Apr 26)
• [SECURITY] [DSA 2461-1] spip security update Moritz Muehlenhoff (Apr 26)
• IA, CSRF and FPD vulnerabilities in Organizer for WordPress MustLive (Apr 26)
• CIntruder v0.2 released psy (Apr 26)
• [Exploit Pack] - Web Security -Webinar Live demo! runlvl (Apr 26)
• VMSA-2012-0008 VMware ESX updates to ESX Service Console VMware Security Team (Apr 26)
• [ MDVSA-2012:065 ] php security (Apr 27)
• [ MDVSA-2012:066 ] mozilla security (Apr 27)
• DDIVRT-2012-40 PacketVideo TwonkyServer and TwonkyMedia Directory Traversal ddivulnalert (Apr 27)
• DDIVRT-2012-41 ACTi Web Configurator cgi-bin Directory Traversal ddivulnalert (Apr 27)
• DirectAdmin v1.403 - Multiple Cross Site Vulnerabilities Research (Apr 27)
• DIY CMS v1.0 Poll - Multiple Web Vulnerabilities Research (Apr 27)
• Car Portal CMS v3.0 - Multiple Web Vulnerabilities Research (Apr 27)
• C4B XPhone UC Web 4.1.890S R1 - Cross Site Vulnerability Research (Apr 27)
  • <Possible follow-ups>
  • C4B XPhone UC Web 4.1.890S R1 - Cross Site Vulnerability Research (Apr 29)
• nullcon Delhi 2012 Call for Paper/Call for Event murtuja bharmal (Apr 28)
• Opial CMS v2.0 - Multiple Web Vulnerabilities Research (Apr 29)
• China Pujia Government - Blind SQL Injection Vulnerability Research (Apr 29)
• China Pujiang Government - Blind SQL Injection Vulnerability Research (Apr 29)
• Croogo v1.3.4 CMS - Multiple Web Vulnerabilities Research (Apr 29)
• [SECURITY] [DSA 2462-1] imagemagick security update Moritz Muehlenhoff (Apr 29)
• WordPress BruteForce Script CorryL (Apr 29)
  • Re: WordPress BruteForce Script R00T_ATI (Apr 29)
• PHP Denial of Service - Memory leak in getimagesize(). Manu (Apr 29)
• Pritlog v0.821 CMS - Multiple Web Vulnerabilities Research (Apr 30)
• DoS vulnerabilities in Firefox, Internet Explorer and Opera MustLive (Apr 30)
  • Re: DoS vulnerabilities in Firefox, Internet Explorer and Opera Valdis . Kletnieks (Apr 30)
  • Re: DoS vulnerabilities in Firefox, Internet Explorer and Opera InterN0T Advisories (Apr 30)
• CWEs translation Jerome Athias (Apr 30)
• XSS in UMP-Sarkozy mailer system Jerome Athias (Apr 30)

Previous period

Next period