Full Disclosure: by thread

• RSS Feed
• About List
• All Lists

Previous period

Next period

434 messages starting Mar 01 14 and ending Mar 31 14
Date index | Thread index | Author index

• [ANNOUNCE] CVE-2014-0002 and CVE-2014-0003 - Apache Camel critical disclosure vulnerability Christian Mueller (Mar 01)
• CVE-2014-1216 - Remote Command Execution in Fitnesse Wiki Portcullis Advisories (Mar 01)
  • CVE-2014-5880 - Authentication Bypass in Oracle Demantra Portcullis Advisories (Mar 01)
    • CVE-2014-5795 - Database Credentials Leak in Oracle Demantra Portcullis Advisories (Mar 01)
      • Re: CVE-2014-5795 - Database Credentials Leak in Oracle Demantra Arron Dowdeswell (Mar 01)
      • Re: CVE-2014-5795 - Database Credentials Leak in Oracle Demantra Portcullis Advisories (Mar 01)
      • CVE-2014-0371 - Reflective XSS in Oracle Demantra Portcullis Advisories (Mar 01)
    • Re: CVE-2014-5880 - Authentication Bypass in Oracle Demantra Arron Dowdeswell (Mar 01)
      • Re: CVE-2014-5880 - Authentication Bypass in Oracle Demantra Portcullis Advisories (Mar 01)
    • CVE-2014-0379 - Stored Cross-site Scripting in Oracle Demantra Portcullis Advisories (Mar 01)
      • CVE-2014-0372 - SQL Injection in Oracle Demantra Portcullis Advisories (Mar 01)
  • CVE-2014-5877 - Local File Inclusion in Oracle Demantra Portcullis Advisories (Mar 01)
    • Re: CVE-2014-5877 - Local File Inclusion in Oracle Demantra Portcullis Advisories (Mar 01)
      • Re: CVE-2014-5877 - Local File Inclusion in Oracle Demantra Portcullis Advisories (Mar 01)
      • CVE-2014-2044 - Remote Code Execution in ownCloud Portcullis Advisories (Mar 06)
      • CVE-2014-2043 - SQL Injection in Procentia IntelliPen Portcullis Advisories (Mar 12)
      • CVE-2014-1222 - Local File Inclusion in Vtiger CRM Portcullis Advisories (Mar 12)
• [CVE-2013-6231] Remote Privilege Escalation in SpagoBI v4.0 Christian Catalano (Mar 01)
• [CVE-2013-6232] Persistent Cross-Site Scripting (XSS) in SpagoBI v4.0 Christian Catalano (Mar 01)
• [CVE-2013-6233] Persistent HTML Script Insertion permits offsite-bound forms in SpagoBI v4.0 Christian Catalano (Mar 01)
• [CVE-2013-6234] XSS File Upload in SpagoBI v4.0 Christian Catalano (Mar 01)
• [CVE-2014-2206] GetGo Download Manager HTTP Response Header Buffer Overflow Remote Code Execution Julien Ahrens (Mar 02)
• [SECURITY] [DSA 2868-1] php5 security update Salvatore Bonaccorso (Mar 02)
• CSRF in WordPress plugin Google Analytics MU 2.3 Harry Metcalfe (Mar 03)
• CVE-2014-2238 -- MantisBT aux mod Brandon Perry (Mar 03)
• [Announce] Apache Shiro 1.2.3 Released - Security Advisory Brian Demers (Mar 04)
• [SECURITY] [DSA 2869-1] gnutls26 security update Yves-Alexis Perez (Mar 04)
• [CVE-2014-0334] XSS in CMS made simple, plus other security issues Pedro Ribeiro (Mar 04)
• Google Inc., (Youtube.com) Unrestricted File Upload Vulnerability. Nicholas Lemonias. (Mar 04)
• [CFP] Hack In Paris 2014 CFP is postponed to March 10 Damien Cauquil (Mar 04)
• Netvolution CMS 3 SQL injection Project Zero Labs (Mar 04)
• [Call for Presenters] Security BSides Las Vegas BSidesLV Info (Mar 04)
• [CVE-2014-0072] Apache Cordova File-Transfer insecure defaults Ian Clelland (Mar 05)
• [CVE-2014-0073] Apache Cordova In-App-Browser privilege escalation Ian Clelland (Mar 05)
• CVE-2014-1599 - 39 Type-1 XSS in SFR ADSL/Fiber Box alejandr0.w3b.p0wn3r (Mar 05)
• Google's (YouTube) Arbitrary File Upload Vulnerability Report with PoC Nicholas Lemonias. (Mar 05)
• Capstone disassembly framework 2.1 released! Nguyen Anh Quynh (Mar 05)
• Cisco Security Advisory: Multiple Vulnerabilities in Cisco Wireless LAN Controllers Cisco Systems Product Security Incident Response Team (Mar 05)
• Cisco Security Advisory: Cisco Small Business Router Password Disclosure Vulnerability Cisco Systems Product Security Incident Response Team (Mar 05)
  • Re: Cisco Security Advisory: Cisco Small Business Router Password Disclosure Vulnerability Brian M. Waters (Mar 06)
• Tool Release: nsdtool - netgear switch discovery Curesec Research Team (Mar 05)
• [CVE-2014-0683]Router Cisco RV110W - RV215W - CVR100W - Bypass Login Page - Admin Password Disclosure Gustavo Speranza (Mar 05)
• [Security-news] SA-CONTRIB-2014-029 - Mime Mail - Access Bypass security-news (Mar 05)
• [Security-news] SA-CONTRIB-2014-028 - Masquerade - Access bypass security-news (Mar 05)
• [Security-news] SA-CONTRIB-2014-027 - NewsFlash Theme - XSS security-news (Mar 05)
• Re: [OT] pls ignore Gaurang Pandya (Mar 05)
• SonicWall Dashboard Backend Server - Client Side Cross Site Scripting Web Vulnerability Vulnerability Lab (Mar 06)
• [ANN] Struts 2.3.16.1 GA release available - security fix Lukasz Lenart (Mar 06)
  • Re: [ANN] Struts 2.3.16.1 GA release available - security fix Tim (Mar 06)
    • Re: [ANN] Struts 2.3.16.1 GA release available - security fix Lukasz Lenart (Mar 06)
      • Re: [ANN] Struts 2.3.16.1 GA release available - security fix Tim (Mar 06)
• OT What is happening with bitcoins? Georgi Guninski (Mar 06)
  • Re: OT What is happening with bitcoins? Brandon Perry (Mar 06)
  • Re: OT What is happening with bitcoins? Pedro Worcel (Mar 07)
    • Re: OT What is happening with bitcoins? coderman (Mar 10)
      • Re: OT What is happening with bitcoins? Mark M. Jaycox (EFF) (Mar 13)
    • Re: OT What is happening with bitcoins? Meaux, Kirk (Mar 10)
      • Re: OT What is happening with bitcoins? chedder (Mar 10)
      • Re: OT What is happening with bitcoins? Julius Kivimäki (Mar 11)
      • Re: OT What is happening with bitcoins? Ron Scott-Adams (Mar 11)
• Rails and redirections Brandon Perry (Mar 06)
  • <Possible follow-ups>
  • Re: Rails and redirections Timothy Goddard (Mar 06)
    • Re: Rails and redirections Brandon Perry (Mar 06)
      • Re: Rails and redirections Brandon Perry (Mar 06)
• XSS in url for access of Confirmation Required in box for antispam from company AKER (CVE-2013-6037) William Costa (Mar 06)
• Live PoC - Confirming completion of arbitrary file uploads to You Tube's Servers Nicholas Lemonias. (Mar 06)
• SEC Consult SA-20140307-0 :: Unauthenticated access & manipulation of settings in Huawei E5331 MiFi mobile hotspot SEC Consult Vulnerability Lab (Mar 07)
• Garage4Hackers Ranchoddas Series - Part 2 on Reverse Engineering - Free Webinar Sandeep Kamble (Mar 07)
  • Re: Garage4Hackers Ranchoddas Series - Part 2 on Reverse Engineering - Free Webinar Sandeep Kamble (Mar 07)
  • Re: Garage4Hackers Ranchoddas Series - Part 2 on Reverse Engineering - Free Webinar Sandeep Kamble (Mar 17)
  • Re: Garage4Hackers Ranchoddas Series - Part 2 on Reverse Engineering - Free Webinar Sandeep Kamble (Mar 17)
• DAVOSET v.1.1.8 MustLive (Mar 07)
• Yahoo Bug Bounty Program Vulnerability #1 XSS on ads.yahoo.com Stefan Schurtz (Mar 08)
• Yahoo Bug Bounty Program Vulnerability #3 XSS on de-mg42.mail.yahoo.com Stefan Schurtz (Mar 08)
  • Message not available
    • Re: Yahoo Bug Bounty Program Vulnerability #3 XSS on de-mg42.mail.yahoo.com Stefan Schurtz (Mar 08)
• Yahoo Bug Bounty Program Vulnerability #4 #5 #6 Cross-site Scripting vulnerabilities Stefan Schurtz (Mar 08)
• [SECURITY] [DSA 2870-1] libyaml-libyaml-perl security update Salvatore Bonaccorso (Mar 08)
• MODX SQLi from oss-sec Brandon Perry (Mar 08)
  • Re: MODX SQLi from oss-sec Brandon Perry (Mar 08)
    • Re: MODX SQLi from oss-sec Brandon Perry (Mar 08)
• Re: SQL injection in MODX Brandon Perry (Mar 09)
• Re: Hacking in Schools coderman (Mar 10)
• [HTTPCS] ClanSphere 'where' Cross Site Scripting Vulnerability HTTPCS (Mar 10)
• OXATIS 'EMSJ' Cross Site Scripting Vulnerability HTTPCS (Mar 10)
• List Charter John Cartwright (Mar 10)
• [ MDVSA-2014:048 ] gnutls security (Mar 10)
• [ MDVSA-2014:049 ] subversion security (Mar 10)
• [SECURITY] [DSA 2871-1] wireshark security update Moritz Muehlenhoff (Mar 10)
• [SECURITY] [DSA 2872-1] udisks security update Moritz Muehlenhoff (Mar 10)
• [ MDVSA-2014:050 ] wireshark security (Mar 10)
• AST-2014-001: Stack Overflow in HTTP Processing of Cookie Headers. Asterisk Security Team (Mar 10)
• AST-2014-002: Denial of Service Through File Descriptor Exhaustion with chan_sip Session-Timers Asterisk Security Team (Mar 10)
• AST-2014-003: Remote Crash Vulnerability in PJSIP channel driver Asterisk Security Team (Mar 10)
• AST-2014-004: Remote Crash Vulnerability in PJSIP Channel Driver Subscription Handling Asterisk Security Team (Mar 10)
• Hackito Ergo Sum 2014 CFP Alexandre De Oliveira (Mar 11)
• NotSoSecure CTF [April 18th to 20th 2014] Sumit Siddharth (Mar 11)
• Passwords Analyser Tool Nahuel Grisolia (Mar 11)
  • Re: Passwords Analyser Tool Daniel Wood (Mar 11)
• Apple TV log file password disclosure David Schuetz (Mar 11)
• [CVE-2013-6835] - iOS 7.0.6 Safari/Facetime-Audio Privacy issue Guillaume Ross (Mar 11)
• CORE-2014-0002 - Oracle VirtualBox 3D Acceleration Multiple Memory Corruption Vulnerabilities CORE Advisories Team (Mar 11)
• [SECURITY] [DSA 2873-1] file security update Salvatore Bonaccorso (Mar 11)
• NEW VMSA-2014-0002 VMware vSphere updates to third party libraries "VMware Security Response Center" (Mar 11)
• Medium severity flaw in BlackBerry QNX Neutrino RTOS Tim Brown (Mar 12)
  • Re: Medium severity flaw in BlackBerry QNX Neutrino RTOS Tim Brown (Mar 13)
• CVE-2014-0054 Spring MVC Incomplete fix for CVE-2013-4152 / CVE-2013-6429 (XXE) Pivotal Security Team (Mar 12)
• CVE-2014-0097 Spring Security Blank password may bypass user authentication Pivotal Security Team (Mar 12)
• CVE-2014-1904 XSS when using Spring MVC Pivotal Security Team (Mar 12)
• CVE-2014-1686 -- Information disclosure: webserver source path in Mediawiki 1.18.0 alejandr0.w3b.p0wn3r (Mar 12)
• Remote Command Injection in Arabic Prawn 0.0.1 Ruby Gem Larry W. Cashdollar (Mar 12)
• [SECURITY] [DSA 2874-1] mutt security update Moritz Muehlenhoff (Mar 12)
• [SECURITY] [DSA 2875-1] cups-filters security update Moritz Muehlenhoff (Mar 12)
• [SECURITY] [DSA 2876-1] cups security update Moritz Muehlenhoff (Mar 12)
• [Security-news] SA-CONTRIB-2014-030 - SexyBookmarks - Information Disclosure security-news (Mar 12)
• Multiplus XSS in Proxmox Mail Gateway 3.1 (CVE-2014-2325) William Costa (Mar 12)
• [Security-news] SA-CONTRIB-2014-031 - Webform Template - Access Bypass security-news (Mar 12)
• QUANTUMSQUIRREL - attrition.org unmasked as NSA TAO OP coderman (Mar 13)
• [ MDVSA-2014:051 ] file security (Mar 13)
• [ MDVSA-2014:052 ] net-snmp security (Mar 13)
• [ MDVSA-2014:053 ] libssh security (Mar 13)
• [ MDVSA-2014:054 ] otrs security (Mar 13)
• [ MDVSA-2014:055 ] owncloud security (Mar 13)
• [SECURITY] [DSA 2877-1] lighttpd security update Michael Gilbert (Mar 13)
• Byte CMS Cross Site Scripting Vulnerabilities Project Zero Labs (Mar 13)
• PowerArchiver: Uses insecure legacy PKZIP encryption when AES is selected (CVE-2014-2319) Hanno Böck (Mar 13)
• BSides Connecticut - Call for Speakers William Reyor (Mar 13)
• Google vulnerabilities with PoC Nicholas Lemonias. (Mar 13)
  • Re: Google vulnerabilities with PoC antisnatchor (Mar 13)
    • Re: Google vulnerabilities with PoC Michal Zalewski (Mar 13)
      • Re: Google vulnerabilities with PoC Brandon Perry (Mar 13)
      • Re: Google vulnerabilities with PoC Michal Zalewski (Mar 13)
      • Re: Google vulnerabilities with PoC Źmicier Januszkiewicz (Mar 13)
      • Re: Google vulnerabilities with PoC Brandon Perry (Mar 13)
      • Re: Google vulnerabilities with PoC andfarm (Mar 13)
      • Re: Google vulnerabilities with PoC Hugh Davenport (Mar 13)
      • Re: Google vulnerabilities with PoC J. Tozo (Mar 13)
      • Re: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 13)
      • Re: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 13)
      • Re: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 13)
  • Re: Google vulnerabilities with PoC Julius Kivimäki (Mar 13)
    • Re: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 13)
      • Re: Google vulnerabilities with PoC Julius Kivimäki (Mar 13)
      • Re: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 13)
      • Re: Google vulnerabilities with PoC Julius Kivimäki (Mar 13)
      • Message not available
      • Re: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 13)
      • Re: Google vulnerabilities with PoC Julius Kivimäki (Mar 13)
      • Message not available
      • Fwd: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 13)
      • Re: Google vulnerabilities with PoC Julius Kivimäki (Mar 14)
      • Re: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Google vulnerabilities with PoC Michal Zalewski (Mar 13)
      • Re: Google vulnerabilities with PoC Jerome Athias (Mar 13)
      • Re: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Google vulnerabilities with PoC Mario Vilas (Mar 14)
      • Re: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Google vulnerabilities with PoC Mario Vilas (Mar 14)
      • Message not available
      • Fwd: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC antisnatchor (Mar 14)
      • Message not available
      • Fwd: Fwd: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC antisnatchor (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Julius Kivimäki (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Thomas MacKenzie (Mar 14)
      • Message not available
      • Re: Fwd: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Ulisses Montenegro (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Mike Hale (Mar 14)
      • Message not available
      • Re: Fwd: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC antisnatchor (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Mario Vilas (Mar 14)
      • Message not available
      • Message not available
      • Message not available
      • Re: Fwd: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Message not available
      • Re: Fwd: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC J. Tozo (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Krzysztof Kotowicz (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Krzysztof Kotowicz (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC R D (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Mario Vilas (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Julius Kivimäki (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Krzysztof Kotowicz (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Michal Zalewski (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Mario Vilas (Mar 15)
      • Re: Fwd: Google vulnerabilities with PoC Colette Chamberland (Mar 15)
      • Re: Fwd: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC David H (Mar 15)
      • Re: Fwd: Google vulnerabilities with PoC antisnatchor (Mar 15)
      • Re: Fwd: Google vulnerabilities with PoC Mario Vilas (Mar 15)
      • Re: Fwd: Google vulnerabilities with PoC R D (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Yvan Janssens (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Colette Chamberland (Mar 15)
      • Re: Fwd: Fwd: Google vulnerabilities with PoC Mario Vilas (Mar 14)
      • Re: Google vulnerabilities with PoC Mario Vilas (Mar 14)
      • Re: Google vulnerabilities with PoC Sergio 'shadown' Alvarez (Mar 14)
      • Message not available
      • Fwd: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Sergio 'shadown' Alvarez (Mar 14)
      • Message not available
      • Re: Fwd: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Google vulnerabilities with PoC Mario Vilas (Mar 14)
      • Re: Google vulnerabilities with PoC Alfredo Ortega (Mar 14)
      • Re: Google vulnerabilities with PoC Alfredo Ortega (Mar 14)
      • Re: Google vulnerabilities with PoC Michael Smith (Mar 15)
      • Re: Google vulnerabilities with PoC antisnatchor (Mar 14)
      • Re: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Google vulnerabilities with PoC Michal Zalewski (Mar 13)
      • Re: Google vulnerabilities with PoC Mario Vilas (Mar 14)
      • Re: Google vulnerabilities with PoC Alfredo Ortega (Mar 14)
  • Re: Google vulnerabilities with PoC Pedro Ribeiro (Mar 13)
    • Re: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 13)
      • Re: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 13)
      • Re: Google vulnerabilities with PoC Pedro Ribeiro (Mar 14)
  • Re: Google vulnerabilities with PoC Georgi Guninski (Mar 15)
    • Re: Google vulnerabilities with PoC Gichuki John Chuksjonia (Mar 15)
  • <Possible follow-ups>
  • Re: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 13)
    • Re: Google vulnerabilities with PoC Mario Vilas (Mar 14)
  • Re: Fwd: Google vulnerabilities with PoC Chris Thompson (Mar 14)
    • Message not available
      • Re: Fwd: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Chris Thompson (Mar 14)
      • Message not available
      • Re: Fwd: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC J. Tozo (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC R D (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Mario Vilas (Mar 14)
      • Message not available
      • Re: Fwd: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC William Scott Lockwood III (Mar 15)
      • Message not available
      • Re: Fwd: Google vulnerabilities with PoC Nicholas Lemonias. (Mar 14)
      • Re: Fwd: Google vulnerabilities with PoC Brian M. Waters (Mar 15)
  • Re: Fwd: Google vulnerabilities with PoC M Kirschbaum (Mar 15)
    • Re: Fwd: Google vulnerabilities with PoC Michal Zalewski (Mar 15)
  • Re: Google vulnerabilities with PoC M Kirschbaum (Mar 15)
    • Re: Google vulnerabilities with PoC Mario Vilas (Mar 15)
      • Re: Google vulnerabilities with PoC antisnatchor (Mar 15)
      • Re: Google vulnerabilities with PoC M Kirschbaum (Mar 15)
      • Re: Google vulnerabilities with PoC Gynvael Coldwind (Mar 15)
      • Re: Google vulnerabilities with PoC Mario Vilas (Mar 15)
      • Re: Google vulnerabilities with PoC M Kirschbaum (Mar 16)
      • Re: Google vulnerabilities with PoC Mario Vilas (Mar 15)
      • Re: [SPAM] [Bayesian][bayesTestMode] Re: Google vulnerabilities with PoC Thomas Williams (Mar 16)
      • Re: [SPAM] [Bayesian][bayesTestMode] Re: Google vulnerabilities with PoC Mario Vilas (Mar 15)
      • Re: [SPAM] [Bayesian][bayesTestMode] Re: Google vulnerabilities with PoC Stefan Jon Silverman (Mar 15)
      • Re: [SPAM] [Bayesian][bayesTestMode] Re: Google vulnerabilities with PoC The Doctor (Mar 18)
      • Re: [SPAM] [Bayesian][bayesTestMode] Re: Google vulnerabilities with PoC Leutnant Steiner (Mar 19)
      • Re: [SPAM] [Bayesian][bayesTestMode] Re: Google vulnerabilities with PoC Exibar (Mar 16)
  • Re: Fwd: Google vulnerabilities with PoC Alfred Beese (Mar 15)
  • Re: Google vulnerabilities with PoC Alfred Beese (Mar 16)
  • Re: Google vulnerabilities with PoC T Imbrahim (Mar 16)
  • Re: Fwd: Google vulnerabilities with PoC T Imbrahim (Mar 16)
    • Re: Fwd: Google vulnerabilities with PoC Michal Zalewski (Mar 15)
  • Re: Fwd: Google vulnerabilities with PoC T Imbrahim (Mar 16)
    • Re: Fwd: Google vulnerabilities with PoC Michal Zalewski (Mar 15)
    • Re: Fwd: Google vulnerabilities with PoC Mario Vilas (Mar 17)
  • Re: Fwd: Google vulnerabilities with PoC T Imbrahim (Mar 16)
    • Re: Fwd: Google vulnerabilities with PoC Michal Zalewski (Mar 15)
    • Re: Fwd: Google vulnerabilities with PoC Pedro Ribeiro (Mar 17)
      • Re: Fwd: Google vulnerabilities with PoC Źmicier Januszkiewicz (Mar 17)
      • Re: Fwd: Google vulnerabilities with PoC Pedro Ribeiro (Mar 17)
  • Re: Fwd: Google vulnerabilities with PoC T Imbrahim (Mar 17)
    • Re: Fwd: Google vulnerabilities with PoC Mario Vilas (Mar 17)
      • Re: Fwd: Google vulnerabilities with PoC Gichuki John Chuksjonia (Mar 17)
  • Re: Fwd: Google vulnerabilities with PoC Joxean Koret (Mar 17)
  • Re: Fwd: Google vulnerabilities with PoC T Imbrahim (Mar 17)
    • Re: Fwd: Google vulnerabilities with PoC Mario Vilas (Mar 17)
      • Re: Fwd: Google vulnerabilities with PoC Ulisses Montenegro (Mar 17)
      • Re: Fwd: Google vulnerabilities with PoC Mario Vilas (Mar 17)
• [ MDVSA-2014:056 ] apache-commons-fileupload security (Mar 13)
• Capstone disassembly framework 2.1.1 released! Nguyen Anh Quynh (Mar 13)
• [ MDVSA-2014:057 ] mediawiki security (Mar 13)
• [SECURITY] [DSA 2878-1] virtualbox security update Moritz Muehlenhoff (Mar 13)
• [ MDVSA-2014:058 ] freeradius security (Mar 13)
• CarolinaCon-10 - May 2014 - FINAL ANNOUNCEMENT Vic Vandal (Mar 13)
• [CVE-2014-2087] Free Download Manager CDownloads_Deleted::UpdateDownload() Buffer Overflow Remote Code Execution Julien Ahrens (Mar 13)
• ActiVPN launches its security bug bounty Ninja ActiVPN (Mar 13)
• WatchGuard Fireware XTM devices contain a cross-site scripting vulnerability (CVE-2014-0338) William Costa (Mar 13)
• [SECURITY] [DSA 2879-1] libssh security update Raphael Geissert (Mar 13)
• Fwd: Hacking Exposed: Virtualization & Cloud Computing: Secrets & Solutions Kristian Erik Hermansen (Mar 13)
• Webcast Reminder: Garage4Hackers Ranchoddas Series 2 on Reverse Engineering Sandeep Kamble (Mar 13)
• [CVE-2014-2339] GNUboard SQL Injection Vulnerability claepo.wang (Mar 14)
  • <Possible follow-ups>
  • [CVE-2014-2339] GNUboard SQL Injection Vulnerability claepo.wang (Mar 17)
• MacOSX Safari Firefox Kaspersky RegExp Remote/Local Denial of Service [CXSEC] (Mar 14)
• Trixbox all versions , Remote root exploit 0u7 5m4r7 (Mar 14)
  • <Possible follow-ups>
  • Trixbox all versions , Remote root Exploit 0u7 5m4r7 (Mar 15)
• [ MDVSA-2014:059 ] php security (Mar 14)
• [ MDVSA-2014:060 ] imapsync security (Mar 14)
• [ MDVSA-2014:061 ] oath-toolkit security (Mar 14)
• CosmoShop unprotected admin-script "pwd.cgi" probably in all versions > 8.0 Rene Fischer (Mar 14)
• Re: Full-Disclosure Digest, Vol 109, Issue 32 ChienD (Mar 15)
• XSS Vulnerability in the Youtube Gallery 3.4.0 Component Mahmoud Ghorbanzadeh (Mar 15)
  • Re: XSS Vulnerability in the Youtube Gallery 3.4.0 Component Mahmoud Ghorbanzadeh (Mar 16)
• [CVE-2013-5955] Cross-site scripting Vulnerability in the Pbbooking 2.4 Mahmoud Ghorbanzadeh (Mar 15)
• [CVE-2013-5954] Multiple Cross Site Request Forgery Vulnerabilities in OpenX 2.8.11 Mahmoud Ghorbanzadeh (Mar 15)
• [CVE-2013-5951] Multiple Cross Site Scripting Vulnerabilities in eXtplorer 2.1.3 Mahmoud Ghorbanzadeh (Mar 15)
• Reflected XSS Attacks XSS vulnerabilities in Webmin 1.670 (CVE-2014-0339) William Costa (Mar 15)
• [CVE-2013-5952] Multiple Cross Site Scripting Vulnerabilities in Freichat Mahmoud Ghorbanzadeh (Mar 15)
• [CVE-2013-5953] Mahmoud Ghorbanzadeh (Mar 15)
• exploit for old rlpdaemon bug Nomen Nescio (Mar 16)
• Few Hrs left Webcast Reminder: Garage4Hackers Ranchoddas Series 2 on Reverse Engineering Sandeep Kamble (Mar 17)
• [ MDVSA-2014:062 ] webmin security (Mar 17)
• Re: Bank of the West security contact? Kristian Erik Hermansen (Mar 17)
  • Re: Bank of the West security contact? Jeffrey Walton (Mar 17)
    • Re: Bank of the West security contact? Jeffrey Walton (Mar 18)
  • <Possible follow-ups>
  • Re: Bank of the West security contact? Florian Weimer (Mar 18)
• [ MDVSA-2014:063 ] x2goserver security (Mar 17)
• [ MDVSA-2014:064 ] udisks security (Mar 17)
• [SECURITY] [DSA 2880-1] python2.7 security update Moritz Muehlenhoff (Mar 17)
• Emergency patch for ShadowIRCd versions 6.3+ and Elemental-IRCd 6.5+ Sam Dodrill (Mar 18)
• CEbot: disasm from your Twitter account Capstone Engine (Mar 18)
• (CFP) LACSEC 2014: Cancun, Mexico. May 7-8, 2014 (EXTENDED DEADLINE) Fernando Gont (Mar 18)
• [Quantum Leap Advisory] #QLA140216 - VLC Reflected XSS vulnerability Francesco Perna (Mar 18)
• McAfee Cloud SSO and McAfee Asset Manager vulns Brandon Perry (Mar 18)
• All your PLC are belong to us (2) scadastrangelove (Mar 18)
• Kaspersky 14.0.0.4651 RegExp Remote Denial of Service PoC2 [CXSEC] (Mar 19)
• USSD Sender Hacktool 1.0 AWeber Test (Mar 19)
• Administrivia: The End John Cartwright (Mar 19)
• Administrivia: A Fresh Start Fyodor (Mar 25)
• Re: [oss-security] [OT] FD mailing list died. Time for new one coderman (Mar 25)
• good to see that we're back Samuel Alp (Mar 25)
• What to do if this version of the list dies? Georgi Guninski (Mar 26)
  • Re: What to do if this version of the list dies? Michal Zalewski (Mar 26)
    • Re: What to do if this version of the list dies? Georgi Guninski (Mar 26)
• Advisory : Persistent Internet Storage Nico Le Moin (Mar 26)
  • Re: Advisory : Persistent Internet Storage Joxean Koret (Mar 26)
    • Re: Advisory : Persistent Internet Storage Samuel Alp (Mar 26)
      • Re: Advisory : Persistent Internet Storage Georgi Guninski (Mar 26)
      • Re: Advisory : Persistent Internet Storage Georgi Guninski (Mar 26)
• [GTA-2014-01] - Allied Telesis AT-RG634A ADSL Broadband router hidden administrative unauthenticated webshell. Groundworks Technologies Advisories Team (Mar 26)
  • Re: [GTA-2014-01] - Allied Telesis AT-RG634A ADSL Broadband router hidden administrative unauthenticated webshell. Daniel Miller (Mar 26)
• iThought App Multiple Vulnerabilities Justin Klein Keane (Mar 26)
• Public VCS security issues Patrik asd (Mar 26)
  • Re: Public VCS security issues Ron (Mar 26)
  • Re: Public VCS security issues Jeremy Voorhis (Mar 26)
    • Re: Public VCS security issues Ronald (Mar 26)
  • Re: Public VCS security issues Lorenz Diener (Mar 26)
• Android IMSI-Catcher Detector (AIMSICD) SecUpwN (Mar 26)
  • Re: Android IMSI-Catcher Detector (AIMSICD) charles (Mar 26)
  • Message not available
    • Re: Android IMSI-Catcher Detector (AIMSICD) SecUpwN (Mar 27)
      • Message not available
      • Re: Android IMSI-Catcher Detector (AIMSICD) SecUpwN (Mar 27)
  • Re: Android IMSI-Catcher Detector (AIMSICD) † (Mar 27)
• OT: Thanks to Fyodor xyberpix (Mar 26)
  • Re: OT: Thanks to Fyodor Christian Fernandez (Mar 26)
    • Re: OT: Thanks to Fyodor dc0de () gmx com (Mar 26)
      • Re: OT: Thanks to Fyodor MadSaxon (Mar 26)
  • Re: OT: Thanks to Fyodor Colin Keigher (Mar 26)
    • Re: OT: Thanks to Fyodor Jean-Christophe Praud (Mar 26)
  • Re: OT: Thanks to Fyodor devel (Mar 26)
  • Re: OT: Thanks to Fyodor Jones, Jeff:(BSC) (Mar 26)
  • Re: OT: Thanks to Fyodor Himanshu anand (Mar 26)
  • Re: OT: Thanks to Fyodor SecUpwN (Mar 26)
    • Re: OT: Thanks to Fyodor Rami Taibah (Mar 26)
    • Re: OT: Thanks to Fyodor jajordan (Mar 27)
  • Re: OT: Thanks to Fyodor Stefan Weimar (Mar 26)
  • Re: OT: Thanks to Fyodor Chris Short (Mar 26)
  • Re: OT: Thanks to Fyodor Security @ Planetkips (Mar 26)
    • Re: OT: Thanks to Fyodor Srinivas Naik (Mar 26)
    • Re: OT: Thanks to Fyodor Peter Malone (Mar 26)
      • Re: OT: Thanks to Fyodor Laskov Denis (Mar 26)
      • Re: OT: Thanks to Fyodor Артур Истомин (Mar 27)
  • Re: OT: Thanks to Fyodor Ferenc Kovacs (Mar 27)
    • Re: OT: Thanks to Fyodor Justin Klein Keane (Mar 27)
      • Re: OT: Thanks to Fyodor dcz (Mar 30)
    • Re: OT: Thanks to Fyodor Stefan Jon Silverman (Mar 30)
• Master Lock random key code generation/distribution Fails Jimb0 Hon1nbo (Mar 26)
  • Re: Master Lock random key code generation/distribution Fails Daniel Miller (Mar 26)
    • Re: Master Lock random key code generation/distribution Fails Jon Hart (Mar 26)
      • Re: Master Lock random key code generation/distribution Fails Daniel Miller (Mar 26)
      • Re: Master Lock random key code generation/distribution Fails Richard Chycoski (Mar 26)
      • Re: Master Lock random key code generation/distribution Fails Jeff Kell (Mar 26)
      • Re: Master Lock random key code generation/distribution Fails Deviant Ollam (Mar 27)
      • Re: Master Lock random key code generation/distribution Fails Steve Pordon (Mar 27)
    • Re: Master Lock random key code generation/distribution Fails Hon1nbo (Mar 26)
  • Re: Master Lock random key code generation/distribution Fails WebDawg (Mar 26)
  • Re: Master Lock random key code generation/distribution Fails Moritz Naumann (Mar 26)
• Nuclear Regulatory Comm. password available through Google Hon1nbo (Mar 26)
• Adventure with Stack Smashing Protector (SSP) Adam Zabrocki (Mar 26)
  • Re: Adventure with Stack Smashing Protector (SSP) Robert Święcki (Mar 27)
  • <Possible follow-ups>
  • Re: Adventure with Stack Smashing Protector (SSP) Adam Zabrocki (Mar 28)
  • Re: Adventure with Stack Smashing Protector (SSP) Steven Stewart-Gallus (Mar 29)
• Monoprice Server-Side Cart Vulnerability Jason_Khanlar (Mar 26)
• [RT-SA-2014-002] rexx Recruitment: Cross-Site Scripting in User Registration RedTeam Pentesting GmbH (Mar 27)
• Angie's List Auth Bypass robert mccurdy (Mar 27)
• New Speakers at PHDays IV: How to Hack Gmail and WordPress and Spy through TV Alexander Lashkov (Mar 28)
• OT Crazy SAT encoding of md4 preimage Georgi Guninski (Mar 28)
• End-user exploitable local file inclusion vulnerability in Ajax Pagination (twitter Style) 1.1 (WordPress plugin) Harry Metcalfe (Mar 28)
• XSS, CSRF and blind SQL injection in GD Star Rating 1.9.22 (WordPress plugin) Harry Metcalfe (Mar 28)
• CSRF vulnerability in WP HTML Sitemap 1.2 (WordPress plugin) Harry Metcalfe (Mar 28)
• Wireless Security Paper Dillon Korman (Mar 28)
  • Message not available
    • Re: Wireless Security Paper Dillon Korman (Mar 30)
• SEC Consult SA-20140328-0 :: Multiple vulnerabilities in Symantec LiveUpdate Administrator SEC Consult Vulnerability Lab (Mar 28)
• Wireless Drive v1.1.0 iOS - Multiple Web Vulnerabilities Vulnerability Lab (Mar 28)
• My Photo Wifi Share & Photo Server 1.1 iOS - Command Injection Vulnerability Vulnerability Lab (Mar 28)
• Lazybone Studios WiFi Music 1.0 iOS - Multiple Vulnerabilities Vulnerability Lab (Mar 28)
• FTP Drive + HTTP 1.0.4 iOS - Code Execution Vulnerability Vulnerability Lab (Mar 28)
• ePhone Disk v1.0.2 iOS - Multiple Web Vulnerabilities Vulnerability Lab (Mar 28)
• iStArtApp FileXChange v6.2 iOS - Multiple Vulnerabilities Vulnerability Lab (Mar 28)
• Dell SonicWall EMail Security 7.4.5 - Multiple Vulnerabilities (Bulletin) Vulnerability Lab (Mar 28)
• New fixes for Siemens S7 1200 PLC: Time is compressing... scadastrangelove (Mar 28)
• Canon Printer Exposes WiFi Password Taylor Hornby (Mar 28)
  • Re: Canon Printer Exposes WiFi Password Matt Andreko (Mar 28)
• XSS and FPD vulnerabilities in Js-Multi-Hotel for WordPress MustLive (Mar 29)
• PoC: End-to-end correlation for Tor connections using an active timing attack Jann Horn (Mar 29)
  • Re: PoC: End-to-end correlation for Tor connections using an active timing attack coderman (Mar 29)
    • Re: PoC: End-to-end correlation for Tor connections using an active timing attack coderman (Mar 29)
• AlienVault 4.5.0 authenticated SQL injection Brandon Perry (Mar 30)
• Fwd: Multiple vulnerabilities in Ioncube loader-wizard Christian Mehlmauer (Mar 30)
• DAVOSET v.1.1.9 MustLive (Mar 30)
• PhotoWIFI Lite v1.0 iOS - Multiple Web Vulnerabilities Vulnerability Lab (Mar 31)
• Vanctech File Commander 1.1 iOS - Multiple Vulnerabilities Vulnerability Lab (Mar 31)
• EMC CTA v10.0 unauthenticated XXE with root perms Brandon Perry (Mar 31)
• Introducing APSAM - Beyond Military Grade Security J. Oquendo (Mar 31)
  • Re: Introducing APSAM - Beyond Military Grade Security Jack Morgan (Mar 31)
• Multiple vulnerabilities in Js-Multi-Hotel for WordPress MustLive (Mar 31)
• immhooktmpl.py - Immunity template plugin for function hooking Levon Kayan (Mar 31)
• [TOOL] w3af 1.6 release Andres Riancho (Mar 31)
• Chunked requests to bypass ModSecurity and mod_headers Martin Holst Swende (Mar 31)
• GOST 28147-89 gets 512 bit and 1 kbit keys gremlin (Mar 31)

Previous period

Next period