Full Disclosure: by author

582 messages starting Nov 02 07 and ending Nov 05 07
Date index | Thread index | Author index


Aaron Katz

Re: spammer wades into US Presidential race Aaron Katz (Nov 02)
Re: spammer wades into US Presidential race Aaron Katz (Nov 08)

Abuse 007

Re: Port scanning question...SYN/FIN ... SYN/ACK Abuse 007 (Nov 12)

Adam Laurie

Announce: RFIDIOt release RFIDIOt-0.1r, November 2007 Adam Laurie (Nov 27)

Adam St. Onge

Re: mac trojan in-the-wild Adam St. Onge (Nov 01)

admin

Re: Full-Disclosure Digest, Vol 33, Issue 52 admin (Nov 28)

adnan habib

Re: Hushmail == Narqz adnan habib (Nov 08)

Adrian P

Re: Wordpress Cookie Authentication Vulnerability Adrian P (Nov 21)
Re: Gmail 0day Adrian P (Nov 09)
BT Home Flub: Pwnin the BT Home Hub - Vulnerabilities details published Adrian P (Nov 11)

Aleksandar Nikolic

Re: Barbut Aleksandar Nikolic (Nov 22)

Alexander Klimov

Re: Some hashes for the record Alexander Klimov (Nov 15)

Alex Eckelberry

Re: mac trojan in-the-wild Alex Eckelberry (Nov 01)

Alla Bezroutchko

Predictable DNS transaction IDs in Microsoft DNS Server Alla Bezroutchko (Nov 14)

Andrew Farmer

Re: Wordpress 2.3 Cross Domain Content Insertion- New vulnerability + exploit - xssworm.com Andrew Farmer (Nov 13)
Re: Suspicious URL in IDS Andrew Farmer (Nov 03)

Asterisk Security Team

AST-2007-025 - SQL Injection issue in res_config_pgsql Asterisk Security Team (Nov 30)
AST-2007-026 - SQL Injection issue in cdr_pgsql Asterisk Security Team (Nov 30)
AST-2007-026 - SQL Injection issue in cdr_pgsql Asterisk Security Team (Nov 29)
AST-2007-025 - SQL Injection issue in res_config_pgsql Asterisk Security Team (Nov 29)

auto221567

Re: WabiSabiLabi Co-Founder Arrested auto221567 (Nov 11)

avivra

Using CSRF to Attack Mobile Phones avivra (Nov 22)

Ben van Staveren

Re: Barbut Ben van Staveren (Nov 21)

Bernardo Damele

[Tool] sqlmap: a blind SQL injection tool (release 0.5) Bernardo Damele (Nov 04)

Bernhard Mueller

SEC Consult SA-20071101-0 :: Multiple Vulnerabilities in SonicWALL SSL-VPN Client Bernhard Mueller (Nov 01)

blackhat4lyf3 blackhat4lyf3

False advertisting and possible click fraud about n3td3v blackhat4lyf3 blackhat4lyf3 (Nov 26)

Bob Bruen

Re: spammer wades into US Presidential race Bob Bruen (Nov 08)

Bud Frank

Chris-chan Christian Chandler Bud Frank (Nov 03)

Byron Sonne

Re: n3td3v denounces the actions of www.derangedsecurity.com Byron Sonne (Nov 29)
Re: Hushmail == Narqz Byron Sonne (Nov 09)

carl hardwick

Firefox 2.0.0.9 remote DoS vulnerability carl hardwick (Nov 02)

CaseArmour.net Security Administrator

Re: Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability CaseArmour.net Security Administrator (Nov 17)

Cesar

[Argeniss] Data0: Next generation malware for stealing databases (Paper) Cesar (Nov 22)

cocoruder

Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability cocoruder (Nov 16)

cocoruder .

Re: MS explorer.exe high_load caused by malformed png cocoruder . (Nov 09)
Re: ZDI-07-069: CA BrightStor ARCserve Backup Message Engine Insecure Method Expos cocoruder . (Nov 27)

Code Audit Labs

MS explorer.exe high_load caused by malformed png Code Audit Labs (Nov 09)

coderman

Re: High Value Target Selection coderman (Nov 30)

Core Security Technologies Advisories

CORE-2007-0821: Lotus Notes buffer overflow in the Lotus WorkSheet file processor Core Security Technologies Advisories (Nov 27)

crazy frog crazy frog

Re: Wiretapping crazy frog crazy frog (Nov 10)
Re: Bluetooth Security; Bluetooth Penetration Testing Framework crazy frog crazy frog (Nov 18)
Re: 300$ is more than 0$ crazy frog crazy frog (Nov 10)
WabiSabiLabi Co-Founder Arrested crazy frog crazy frog (Nov 11)
Re: Gmail 0day crazy frog crazy frog (Nov 08)
Re: on xss and its technical merit crazy frog crazy frog (Nov 04)

Dancho Danchev

Large Scale MySpace Phishing Attack Dancho Danchev (Nov 19)
Dissecting The Electronic Jihad v3.0 Dancho Danchev (Nov 08)
Popular Spammers Strategies and Tactics Dancho Danchev (Nov 16)

Daniel H. Renner

Re: Microsoft FTP Client Multiple Daniel H. Renner (Nov 29)
Re: Microsoft FTP Client Multiple Daniel H. Renner (Nov 28)

Danny

Eee PC Security Danny (Nov 26)

dave-san

Re: Wordpress 2.3 Cross Domain Content Insertion- New vulnerability + exploit - xssworm.com dave-san (Nov 13)

David Harley

Re: mac trojan in-the-wild David Harley (Nov 03)
Re: mac trojan in-the-wild David Harley (Nov 02)

David Litchfield

Oracle 11g/10g Installation Vulnerability David Litchfield (Nov 13)

David Wharton

oh oh 0 day - MyTV/x Version 3.6.6 & 4.0.8 for MyTV.PVR allows local authentication bypass and root access on Apple Mac OS X David Wharton (Nov 26)

Dean Pierce

Re: Crafted SYN Packets... Dean Pierce (Nov 13)

dev code

Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability dev code (Nov 28)
Re: Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability dev code (Nov 17)

Dirty Sanchez

sometimes peepee goes in my mouf Dirty Sanchez (Nov 05)

don bailey

300$ is more than 0$ don bailey (Nov 10)
Why I hate you (and a philanthropic challenge!) don bailey (Nov 09)
Re: Exploit Brokering don bailey (Nov 10)

Dragos Ruiu

CanSecWest 2008 CFP (deadline Nov 30, conf Mar 26-28) and PacSec Dojo's Dragos Ruiu (Nov 08)
Skype IM upgrade/repair automated social engineering attack Dragos Ruiu (Nov 01)

Drsolly

Re: [funsec] the heart of the problem [was: RE: mac trojan in-the-wild] Drsolly (Nov 02)

Dude VanWinkle

Re: How to become a Computer Security Professional ? Dude VanWinkle (Nov 18)
Re: on xss and its technical merit Dude VanWinkle (Nov 04)
Re: mac trojan in-the-wild Dude VanWinkle (Nov 02)
Re: mac trojan in-the-wild Dude VanWinkle (Nov 02)
Re: mac trojan in-the-wild Dude VanWinkle (Nov 05)
Re: mac trojan in-the-wild Dude VanWinkle (Nov 01)
Re: stop cross posting Dude VanWinkle (Nov 03)
Re: stop cross posting Dude VanWinkle (Nov 04)
Re: Microsoft FTP Client Multiple Dude VanWinkle (Nov 29)
Re: mac trojan in-the-wild Dude VanWinkle (Nov 02)
Re: IDS logs showing outgoing packets on port 80 Dude VanWinkle (Nov 03)

DVLabs

TPTI-07-20: Apple Quicktime Movie Stack Overflow Vulnerability DVLabs (Nov 14)

Eduardo Tongson

Re: Wordpress Cookie Authentication Vulnerability Eduardo Tongson (Nov 20)

Elazar Broad

UPDATED: RealNetworks RealPlayer ierpplug.dll ActiveX Control Multiple Stack Overflows Elazar Broad (Nov 26)
RealNetworks RealPlayer ierpplug.dll ActiveX Control Multiple Stack Overflows Elazar Broad (Nov 26)
WebEx GPCContainer Memory Access Violation Elazar Broad (Nov 13)
Aurigma ImageUploader 4.1 Multiple stack overflows Elazar Broad (Nov 22)
Re: Aurigma ImageUploader 4.1 Multiple stack overflows Elazar Broad (Nov 25)
Re: UPDATED: RealNetworks RealPlayer ierpplug.dll ActiveX Control Multiple Stack Overflows Elazar Broad (Nov 27)
Multiple stack-based buffer overflows in dxmsft.dll Elazar Broad (Nov 19)
Office Web Controls DataSourceControl Memory Access Violation Elazar Broad (Nov 12)
Re: RealNetworks RealPlayer ierpplug.dll ActiveX Control Multiple Stack Overflows Elazar Broad (Nov 26)
Microsoft Remote Help safrcdlg.dll Buffer Overflow Elazar Broad (Nov 12)
RichFX nprfxins.dll ActiveX Control Multiple Stack Overflows Elazar Broad (Nov 26)
Adobe Shockwave ShockwaveVersion() Stack Overflow Elazar Broad (Nov 08)
Yahoo Toolbar Helper c() Method Stack Overflow DoS Elazar Broad (Nov 30)
Re: Multiple stack-based buffer overflows in dxmsft.dll Elazar Broad (Nov 19)
Re: WebEx GPCContainer Memory Access Violation Elazar Broad (Nov 14)
Microsoft Forms 2.0 Controls Multiple Memory Access Violations Elazar Broad (Nov 12)
ComponentOne FlexGrid 7.1 Light Multiple Stack Overflows Elazar Broad (Nov 15)

electric

TROJAN FOUND electric (Nov 16)

Emmanouil Gavriil

XSS - www.howtoforge.com Emmanouil Gavriil (Nov 01)

Eric Rachner

Re: on xss and its technical merit Eric Rachner (Nov 05)

Ernesto Alvarez

two bytehoard bugs Ernesto Alvarez (Nov 26)

fabio

Alice - dns spoofer fabio (Nov 11)

Fabio Pietrosanti

Re: How to become a Computer Security Professional ? Fabio Pietrosanti (Nov 17)

Florian Echtler

Re: Standing Up Against German Laws - Project HayNeedle Florian Echtler (Nov 14)

Florian Streck

Re: Standing Up Against German Laws - Project HayNeedle Florian Streck (Nov 14)

Florian Weimer

[SECURITY] [DSA 1399-1] New pcre3 packages fix arbitrary code execution Florian Weimer (Nov 05)
[SECURITY] [DSA 1400-1] New perl packages fix arbitrary code execution Florian Weimer (Nov 06)

foofus

Re: Fwd: Citrix Brute Force Tool foofus (Nov 14)

Foresight Linux Essential Announcement Service

FLEA-2007-0068-1 ruby Foresight Linux Essential Announcement Service (Nov 11)
FLEA-2007-0063-1 perl Foresight Linux Essential Announcement Service (Nov 09)
FLEA-2007-0069-1 perl Foresight Linux Essential Announcement Service (Nov 11)
FLEA-2007-0065-1 libpng Foresight Linux Essential Announcement Service (Nov 11)
FLEA-2007-0067-1 pidgin Foresight Linux Essential Announcement Service (Nov 11)
FLEA-2007-0064-1 pcre Foresight Linux Essential Announcement Service (Nov 11)
FLEA-2007-0066-1 ImageMagick Foresight Linux Essential Announcement Service (Nov 11)

Frederic Charpentier

Announcement : CCWAPSS methodology release 1.1 Frederic Charpentier (Nov 07)

FRLinux

Re: Firefox 2.0.0.9 remote DoS vulnerability FRLinux (Nov 05)

full-disclosure

Re: mac trojan-vs-USERS full-disclosure (Nov 02)

Gadi Evron

Re: Warning: Hackers hijacking unused IP Addresses inside Trusted domains [POC] Gadi Evron (Nov 21)
the heart of the problem [was: RE: mac trojan in-the-wild] Gadi Evron (Nov 02)
Re: mac trojan in-the-wild Gadi Evron (Nov 01)
mac trojan in-the-wild Gadi Evron (Nov 01)
eBay redirects: next step in fake blogs and web search abuse Gadi Evron (Nov 03)
Re: [botnets] re MAC trojan (fwd) Gadi Evron (Nov 01)

gautam . singh

A friend wants to Share Favorites with you gautam . singh (Nov 10)

Geo.

browser exploit web sites Geo. (Nov 04)

georgepburdell

To Hell With Georgia georgepburdell (Nov 26)

gjgowey

Re: [full-disclosure] on xss and its technical merit gjgowey (Nov 04)
Re: [full-disclosure] wiretapping -- antair restored gjgowey (Nov 12)
Re: mac trojan in-the-wild -- antair restored gjgowey (Nov 02)

gmaggro

High Value Target Selection gmaggro (Nov 30)

Gobbles is back

Matasano watchdog blog opening shortly .. Gobbles is back (Nov 30)
When will Matasano stop the retarded commentary? Gobbles is back (Nov 18)

halfdog

Skype network scanning? halfdog (Nov 13)

Hanno Böck

CVE-2007-3694: Cross site scripting (XSS) in broadcast machine Hanno Böck (Nov 12)

HASEGAWA Yosuke

XSS with UTF-7 in yahoo.com HASEGAWA Yosuke (Nov 25)

Hubbard, Dan

Websense security contact? Hubbard, Dan (Nov 21)

iDefense Labs

iDefense Security Advisory 11.07.07: Oracle 10g R2 PITRIG_DROPMETADATA Buffer Overflow Vulnerability iDefense Labs (Nov 07)
iDefense Security Advisory 11.14.07: Apple Mac OS X AppleTalk Socket IOCTL Kernel Stack Buffer Overflow Vulnerability iDefense Labs (Nov 14)
iDefense Security Advisory 11.12.07: Novell NetWare Client Local Privilege Escalation Vulnerability iDefense Labs (Nov 13)
iDefense Security Advisory 11.05.07: Apple QuickTime Panorama Sample Atom Heap Buffer Overflow Vulnerability iDefense Labs (Nov 05)
iDefense Security Advisory 11.14.07: Apple Mac OS X AppleTalk ASP Message Kernel Heap Overflow Vulnerability iDefense Labs (Nov 14)
iDefense Security Advisory 11.12.07: WinPcap NPF.SYS bpf_filter_init Arbitrary Array Indexing Vulnerability iDefense Labs (Nov 12)
iDefense Security Advisory 11.09.07: IBM Informix Dynamic Server DBLANG Directory Traversal Vulnerability iDefense Labs (Nov 09)
iDefense Security Advisory 11.14.07: Apple Mac OS X AppleTalk mbuf Kernel Heap Overflow Vulnerability iDefense Labs (Nov 14)
iDefense Security Advisory 11.14.07: Apple Mac OS X Mach Port Inheritance Privilege Escalation Vulnerability iDefense Labs (Nov 14)
iDefense Security Advisory 11.06.07: Microsoft DebugView Privilege Escalation Vulnerability iDefense Labs (Nov 06)
iDefense Security Advisory 11.02.07: Sun Microsystems Solaris srsexec Format String Vulnerability iDefense Labs (Nov 05)
iDefense Security Advisory 11.09.07: AOL AmpX ActiveX Control Multiple Buffer Overflow Vulnerabilities iDefense Labs (Nov 09)

imipak

Re: Standing Up Against German Laws - Project HayNeedle imipak (Nov 14)
Re: End of the world? imipak (Nov 13)

IRM Research

Creating Backdoors in Cisco IOS using Tcl IRM Research (Nov 27)
Six Remote Memory Corruption Vulnerabilities in IBM WebSphere MQ 6.0 IRM Research (Nov 14)
IRM025: TIBCO Rendezvous RVD Daemon Remote Memory Leak DoS IRM Research (Nov 29)

Ismail Dönmez

Re: Firefox 2.0.0.9 remote DoS vulnerability Ismail Dönmez (Nov 05)

jam

Re: Gmail 0day jam (Nov 08)

James Matthews

Re: Fwd: Citrix Brute Force Tool James Matthews (Nov 14)
Re: spammer wades into US Presidential race James Matthews (Nov 08)
Re: Wordpress Cookie Authentication Vulnerability James Matthews (Nov 20)
Re: UPDATED: RealNetworks RealPlayer ierpplug.dll ActiveX Control Multiple Stack Overflows James Matthews (Nov 26)

James Rankin

Re: save gary mckinnon or lock away dan egerstad James Rankin (Nov 14)
RIPA powers being used James Rankin (Nov 20)

Jamie Strandboge

[USN-542-2] KOffice vulnerabilities Jamie Strandboge (Nov 15)
[USN-544-1] Samba vulnerabilities Jamie Strandboge (Nov 15)
[USN-544-2] Samba regression Jamie Strandboge (Nov 17)

Jan Newger

Re: Standing Up Against German Laws - Project HayNeedle Jan Newger (Nov 12)

Jay Sulzberger

Re: mac trojan in-the-wild Jay Sulzberger (Nov 01)
PlayStation 3 predicts next US president (fwd) Jay Sulzberger (Nov 30)
Re: mac trojan in-the-wild Jay Sulzberger (Nov 01)
Re: mac trojan in-the-wild Jay Sulzberger (Nov 01)
Re: mac trojan in-the-wild Jay Sulzberger (Nov 01)

jf

Re: Exploit Brokering jf (Nov 09)
Re: Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability jf (Nov 17)

Jim Harrison

Re: mac trojan in-the-wild Jim Harrison (Nov 01)

Jim Popovitch

Re: save gary mckinnon or lock away dan egerstad Jim Popovitch (Nov 14)

Joel R. Helgeson

Re: Wiretapping Joel R. Helgeson (Nov 11)

Joey Mengele

Re: UPDATED: RealNetworks RealPlayer ierpplug.dll ActiveX Control Multiple Stack Overflows Joey Mengele (Nov 27)
Re: Exploit Brokering Joey Mengele (Nov 12)
Re: Yahoo Toolbar Helper c() Method Stack Overflow DoS Joey Mengele (Nov 30)
Re: still some 0days to sell Joey Mengele (Nov 09)
Re: n3td3v denounces the actions of www.derangedsecurity.com Joey Mengele (Nov 30)
Re: UPDATED: RealNetworks RealPlayer ierpplug.dll ActiveX Control Multiple Stack Overflows Joey Mengele (Nov 27)

johan beisser

Re: Standing Up Against German Laws - Project HayNeedle johan beisser (Nov 12)

John C. A. Bambenek, CISSP

Re: Why I hate you (and a philanthropic challenge!) John C. A. Bambenek, CISSP (Nov 09)

John Cartwright

List Charter John Cartwright (Nov 09)

J. Oquendo

Re: mac trojan in-the-wild J. Oquendo (Nov 02)

Joxean Koret

Re: Full-Disclosure Digest, Vol 33, Issue 1 Joxean Koret (Nov 01)

Juergen Marester

Re: Gmail 0day Juergen Marester (Nov 08)
still some 0days to sell Juergen Marester (Nov 09)

Juergen Schmidt

Leopard's firewall damages Skype and WoW Juergen Schmidt (Nov 05)

Juha-Matti Laurio

Re: Wordpress Cookie Authentication Vulnerability Juha-Matti Laurio (Nov 22)
Re: Wordpress Cookie Authentication Vulnerability Juha-Matti Laurio (Nov 20)
Re: Microsoft Jet Engine MDB File Parsing Stack Overflow Vulnerability Juha-Matti Laurio (Nov 17)
These days of several XSS vulns on known sites Juha-Matti Laurio (Nov 06)
Re: Gmail 0day Juha-Matti Laurio (Nov 08)
Re: Websense security contact? Juha-Matti Laurio (Nov 20)
JAR: protocol vulnerability in Firefox, word processing applications reported Juha-Matti Laurio (Nov 08)

Kees Cook

[USN-549-1] PHP vulnerabilities Kees Cook (Nov 29)
[USN-537-2] Compiz vulnerability Kees Cook (Nov 02)
[USN-541-1] Emacs vulnerability Kees Cook (Nov 13)
[USN-545-1] link-grammar vulnerability Kees Cook (Nov 26)
[USN-547-1] PCRE vulnerabilities Kees Cook (Nov 26)
[USN-546-1] Firefox vulnerabilities Kees Cook (Nov 26)
[USN-540-1] flac vulnerability Kees Cook (Nov 13)
[USN-542-1] poppler vulnerabilities Kees Cook (Nov 13)
[USN-548-1] Pidgin vulnerability Kees Cook (Nov 28)
[USN-539-1] CUPS vulnerability Kees Cook (Nov 05)
[USN-543-1] VMWare vulnerabilities Kees Cook (Nov 15)

Kelly Robinson

Port scanning question...SYN/FIN ... SYN/ACK Kelly Robinson (Nov 11)
Crafted SYN Packets... Kelly Robinson (Nov 13)
Wiretapping Kelly Robinson (Nov 10)
Suspicious URL in IDS Kelly Robinson (Nov 03)
IDS logs showing outgoing packets on port 80 Kelly Robinson (Nov 03)

Kevin Finisterre (lists)

Re: Wiretapping Kevin Finisterre (lists) (Nov 12)
Re: oh oh 0 day - MyTV/x Version 3.6.6 & 4.0.8 for MyTV.PVR allows local authentication bypass and root access on Apple Mac OS X Kevin Finisterre (lists) (Nov 26)
Re: 300$ is more than 0$ Kevin Finisterre (lists) (Nov 10)
Re: End of the world? Kevin Finisterre (lists) (Nov 13)

kevin horvath

Re: XSS - bank of america kevin horvath (Nov 02)

Kevin Wilcox

Re: Wiretapping Kevin Wilcox (Nov 12)

KJK::Hyperion

Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability KJK::Hyperion (Nov 28)
Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability KJK::Hyperion (Nov 28)
Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability KJK::Hyperion (Nov 29)

Kollberg, Dirk

Re: an open letter to kevin bacon: hello, how's it going? Kollberg, Dirk (Nov 01)
Re: Cyber Jihad? Yeah, right... Kollberg, Dirk (Nov 11)

Kristian Erik Hermansen

MySQL 5.x DoS (unknown) Kristian Erik Hermansen (Nov 05)

Larry Seltzer

Re: [funsec] eBay redirects: next step in fake blogs and web searchabuse Larry Seltzer (Nov 03)

Lohan Spies

Fwd: Citrix Brute Force Tool Lohan Spies (Nov 14)
Citrix Brute Force Tool Lohan Spies (Nov 14)

lsi

Re: spammer wades into US Presidential race lsi (Nov 08)
Re: spammer wades into US Presidential race lsi (Nov 02)

LT

unsubscribe LT (Nov 26)
Re: Standing Up Against German Laws - Project HayNeedle LT (Nov 10)

Luigi Auriemma

Crash in LIVE555 Media Server 2007.11.01 Luigi Auriemma (Nov 18)

lzscg

Anti-arp lzscg (Nov 16)
RealPlayer 0-day exploit was found in malicious lzscg (Nov 10)

Maksymilian Arciemowicz

PHP 5.2.4 mail.force_extra_parameters unsecure Maksymilian Arciemowicz (Nov 25)

Mario D

Re: Cyber Jihad? Yeah, right... Mario D (Nov 12)

Martin Aberastegue

Re: Firefox 2.0.0.9 remote DoS vulnerability Martin Aberastegue (Nov 06)

Matthew Hall

Re: Eee PC Security Matthew Hall (Nov 27)

Max Moser

27Mhz based wireless security insecurities - Aka - "We know what you typed last summer" Max Moser (Nov 30)

Meef

How to become a Computer Security Professional ? Meef (Nov 17)

Michael Bann

Re: Hushmail == Narqz Michael Bann (Nov 08)
Re: still some 0days to sell Michael Bann (Nov 09)

Michael Holstein

Re: Wiretapping Michael Holstein (Nov 12)
Re: Eee PC Security Michael Holstein (Nov 27)

Micheal Espinola Jr

Re: Hushmail == Narqz Micheal Espinola Jr (Nov 09)

Moritz Muehlenhoff

[SECURITY] [DSA 1407-1] New cupsys packages fix arbitrary code execution Moritz Muehlenhoff (Nov 18)
[SECURITY] [DSA 1415-1] New tk8.4 packages fix arbitrary code execution Moritz Muehlenhoff (Nov 27)
[SECURITY] [DSA 1414-1] New wireshark packages fix several vulnerabilities Moritz Muehlenhoff (Nov 27)
[SECURITY] [DSA 1408-1] New kdegraphics packages fix arbitrary code execution Moritz Muehlenhoff (Nov 21)
[SECURITY] [DSA 1412-1] New ruby1.9 packages fix insecure SSL certificate validation Moritz Muehlenhoff (Nov 25)
[SECURITY] [DSA 1410-1] New ruby1.8 packages fix insecure SSL certificate validation Moritz Muehlenhoff (Nov 25)
[SECURITY] [DSA 1397-1] New mono packages fix integer overflow Moritz Muehlenhoff (Nov 03)
[SECURITY] [DSA 1416-1] New tk8.3 packages fix arbitrary code execution Moritz Muehlenhoff (Nov 27)
[SECURITY] [DSA 1411-1] New libopenssl-ruby packages fix insecure SSL certificate validation Moritz Muehlenhoff (Nov 25)
[SECURITY] [DSA 1401-1] New iceape packages fix several vulnerabilities Moritz Muehlenhoff (Nov 05)

Morning Wood

Re: RIPA powers being used Morning Wood (Nov 21)
Re: IDS logs showing outgoing packets on port 80 Morning Wood (Nov 04)

M. Shirk

Re: How to become a Computer Security Professional ? M. Shirk (Nov 18)

Muskegon Whitehall

Re: [OSX Ninjashe] Muskegon Whitehall (Nov 02)

nate . mcfeters

Re: Wiretapping nate . mcfeters (Nov 11)
Re: on xss and its technical merit nate . mcfeters (Nov 05)
Re: on xss and its technical merit nate . mcfeters (Nov 04)
Re: Standing Up Against German Laws - ProjectHayNeedle nate . mcfeters (Nov 10)

Ned Bender

Trent Lott Ned Bender (Nov 27)

netclown

dangerous vulnerability netclown (Nov 16)

Netragard Security Advisories

[NETRAGARD-20070313 SECURITY ADVISORY] [OpenBase SQL Relational Database 10.0.5 - SYSTEM/root compromise] Netragard Security Advisories (Nov 05)

Nick FitzGerald

Re: mac trojan in-the-wild Nick FitzGerald (Nov 01)
Re: browser exploit web sites Nick FitzGerald (Nov 04)
Re: mac trojan in-the-wild Nick FitzGerald (Nov 01)
Re: mac trojan in-the-wild Nick FitzGerald (Nov 01)

Nico Golde

Re: Standing Up Against German Laws - Project HayNeedle Nico Golde (Nov 10)

Nicolas FISCHBACH

Re: Creating Backdoors in Cisco IOS using Tcl Nicolas FISCHBACH (Nov 27)

Nils Toedtmann

Certificate spoofing issue with Mozilla, Konqueror, Safari 2 Nils Toedtmann (Nov 18)

nnp

Re: mac trojan in-the-wild nnp (Nov 01)
[UPH-07-03] Firefly Media Server remote format string vulnerability nnp (Nov 02)
Re: mac trojan in-the-wild nnp (Nov 01)
Re: [UPH-07-03] Firefly Media Server remote format string vulnerability nnp (Nov 02)
[UPH-07-01] Firefly Media Server DoS nnp (Nov 02)
[UPH-07-02] Firefly Media Server DoS nnp (Nov 02)
Re: [UPH-07-01] Firefly Media Server DoS nnp (Nov 02)
Re: mac trojan in-the-wild nnp (Nov 01)

Noah Meyerhans

[SECURITY] [DSA 1398-1] New perdition packages fix arbitrary code execution Noah Meyerhans (Nov 05)
[SECURITY] [DSA 1413-1] New mysql packages fix multiple vulnerabilities Noah Meyerhans (Nov 26)

nocfed

Re: Wordpress 2.3 Cross Domain Content Insertion- New vulnerability + exploit - xssworm.com nocfed (Nov 14)
Re: Crafted SYN Packets... nocfed (Nov 13)

North, Quinn

Re: RIPA powers being used North, Quinn (Nov 21)

Odley Mike

Bluetooth Security; Bluetooth Penetration Testing Framework Odley Mike (Nov 18)

Open Phugu

Re: Some hashes for the record Open Phugu (Nov 16)

OpenPKG GmbH

[OpenPKG-SA-2007.023] OpenPKG Security Advisory (perl) OpenPKG GmbH (Nov 08)

oraclefun

oracle oraclefun (Nov 02)

Paul Melson

Hushmail == Narqz Paul Melson (Nov 08)

Paul Schmehl

Re: Crafted SYN Packets... Paul Schmehl (Nov 13)
Re: mac trojan in-the-wild Paul Schmehl (Nov 01)
Re: mac trojan in-the-wild Paul Schmehl (Nov 01)
Re: mac trojan in-the-wild Paul Schmehl (Nov 01)
Re: Warning: Hackers hijacking unused IP Addresses inside Trusted domains [POC] Paul Schmehl (Nov 21)
Re: Port scanning question...SYN/FIN ... SYN/ACK Paul Schmehl (Nov 12)
Re: mac trojan in-the-wild Paul Schmehl (Nov 01)
Re: mac trojan in-the-wild Paul Schmehl (Nov 01)
Re: Wordpress Cookie Authentication Vulnerability Paul Schmehl (Nov 20)
Re: mac trojan in-the-wild Paul Schmehl (Nov 05)
Re: mac trojan in-the-wild Paul Schmehl (Nov 01)
Re: How to become a Computer Security Professional ? Paul Schmehl (Nov 18)

Paul Sebastian Ziegler

Re: Standing Up Against German Laws - Project HayNeedle Paul Sebastian Ziegler (Nov 10)
Re: Standing Up Against German Laws - Project HayNeedle Paul Sebastian Ziegler (Nov 10)
Re: Standing Up Against German Laws - Project HayNeedle Paul Sebastian Ziegler (Nov 13)
Standing Up Against German Laws - Project HayNeedle Paul Sebastian Ziegler (Nov 10)
Re: Standing Up Against German Laws - ProjectHayNeedle Paul Sebastian Ziegler (Nov 10)

pdp (architect)

Re: on xss and its technical merit pdp (architect) (Nov 04)
Re: Gmail 0day pdp (architect) (Nov 08)
Re: on xss and its technical merit pdp (architect) (Nov 05)
Re: on xss and its technical merit pdp (architect) (Nov 05)
Re: on xss and its technical merit pdp (architect) (Nov 04)
Re: on xss and its technical merit pdp (architect) (Nov 04)
Re: on xss and its technical merit pdp (architect) (Nov 04)
Re: Gmail 0day pdp (architect) (Nov 08)
Re: on xss and its technical merit pdp (architect) (Nov 04)
Re: on xss and its technical merit pdp (architect) (Nov 05)
Re: on xss and its technical merit pdp (architect) (Nov 04)

Peter Besenbruch

Re: mac trojan in-the-wild Peter Besenbruch (Nov 01)
Re: High Value Target Selection Peter Besenbruch (Nov 30)
Re: mac trojan in-the-wild Peter Besenbruch (Nov 01)
Re: mac trojan in-the-wild Peter Besenbruch (Nov 01)
Re: mac trojan in-the-wild Peter Besenbruch (Nov 05)
Re: Microsoft FTP Client Multiple Peter Besenbruch (Nov 29)

Peter Dawson

Re: Hushmail == Narqz Peter Dawson (Nov 08)
Re: Police swoop on 'hacker of the year' Peter Dawson (Nov 14)
Re: Oracle 11g/10g Installation Vulnerability Peter Dawson (Nov 14)
Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability Peter Dawson (Nov 28)

Peter Ferrie

Re: Microsoft Jet Engine MDB File Parsing StackOverflow Vulnerability Peter Ferrie (Nov 17)
Re: Microsoft Jet Engine MDB File Parsing StackOverflow Vulnerability Peter Ferrie (Nov 17)

php0t

Re: Hushmail == Narqz php0t (Nov 08)

Pierre-Yves Rofes

[ GLSA 200711-24 ] Mozilla Thunderbird: Multiple vulnerabilities Pierre-Yves Rofes (Nov 18)
[ GLSA 200711-11 ] Nagios Plugins: Two buffer overflows Pierre-Yves Rofes (Nov 08)
[ GLSA 200711-13 ] 3proxy: Denial of Service Pierre-Yves Rofes (Nov 08)
[ GLSA 200711-02 ] OpenSSH: Security bypass Pierre-Yves Rofes (Nov 01)
[ GLSA 200711-16 ] CUPS: Memory corruption Pierre-Yves Rofes (Nov 12)
[ GLSA 200711-23 ] VMware Workstation and Player: Multiple vulnerabilities Pierre-Yves Rofes (Nov 18)
[ GLSA 200711-04 ] Evolution: User-assisted remote execution of arbitrary code Pierre-Yves Rofes (Nov 06)
[ GLSA 200711-29 ] Samba: Execution of arbitrary code Pierre-Yves Rofes (Nov 20)
[ GLSA 200711-33 ] nss_ldap: Information disclosure Pierre-Yves Rofes (Nov 25)
[ GLSA 200711-07 ] Python: User-assisted execution of arbitrary code Pierre-Yves Rofes (Nov 07)
[ GLSA 200711-09 ] MadWifi: Denial of Service Pierre-Yves Rofes (Nov 07)
[ GLSA 200711-28 ] Perl: Buffer overflow Pierre-Yves Rofes (Nov 19)
[ GLSA 200711-19 ] TikiWiki: Multiple vulnerabilities Pierre-Yves Rofes (Nov 14)
[ GLSA 200711-27 ] Link Grammar: User-assisted execution of arbitrary code Pierre-Yves Rofes (Nov 18)
[ GLSA 200711-25 ] MySQL: Denial of Service Pierre-Yves Rofes (Nov 18)
[ GLSA 200711-05 ] SiteBar: Multiple issues Pierre-Yves Rofes (Nov 06)
[ GLSA 200711-10 ] Mono: Buffer overflow Pierre-Yves Rofes (Nov 07)
[ GLSA 200711-15 ] FLAC: Buffer overflow Pierre-Yves Rofes (Nov 12)
[ GLSA 200711-03 ] Gallery: Multiple vulnerabilities Pierre-Yves Rofes (Nov 01)
[ GLSA 200711-08 ] libpng: Multiple Denials of Service Pierre-Yves Rofes (Nov 07)
[ GLSA 200711-12 ] Tomboy: User-assisted execution of arbitrary code Pierre-Yves Rofes (Nov 08)
[ GLSA 200711-17 ] Ruby on Rails: Multiple vulnerabilities Pierre-Yves Rofes (Nov 14)
[ GLSA 200711-22 ] Poppler, KDE: User-assisted execution of arbitrary code Pierre-Yves Rofes (Nov 18)
[ GLSA 200711-34 ] CSTeX: Multiple vulnerabilities Pierre-Yves Rofes (Nov 25)
[ GLSA 200711-20 ] Pioneers: Denial of Service Pierre-Yves Rofes (Nov 14)
[ GLSA 200711-14 ] Mozilla Firefox, SeaMonkey, XULRunner: Multiple vulnerabilities Pierre-Yves Rofes (Nov 12)
[ GLSA 200711-30 ] PCRE: Multiple vulnerabilities Pierre-Yves Rofes (Nov 20)
[ GLSA 200711-32 ] Feynmf: Insecure temporary file creation Pierre-Yves Rofes (Nov 20)
[ GLSA 200711-06 ] Apache: Multiple vulnerabilities Pierre-Yves Rofes (Nov 07)
[ GLSA 200711-01 ] gFTP: Multiple vulnerabilities Pierre-Yves Rofes (Nov 01)
[ GLSA 200711-18 ] Cpio: Buffer overflow Pierre-Yves Rofes (Nov 14)
[ GLSA 200711-31 ] Net-SNMP: Denial of Service Pierre-Yves Rofes (Nov 20)
ERRATA: [ GLSA 200711-20 ] Pioneers: Multiple Denials of Service Pierre-Yves Rofes (Nov 29)
[ GLSA 200711-21 ] Bochs: Multiple vulnerabilities Pierre-Yves Rofes (Nov 17)
[ GLSA 200711-26 ] teTeX: Multiple vulnerabilities Pierre-Yves Rofes (Nov 18)

Prohest

Re: n3td3v denounces the actions of www.derangedsecurity.com Prohest (Nov 17)

Radu State

breaking SIP for fun and toll fraud Radu State (Nov 04)

Rajesh Sethumadhavan

Microsoft FTP Client Multiple Bufferoverflow Vulnerability Rajesh Sethumadhavan (Nov 27)

rchrafe

Re: How to become a Computer Security Professional ? rchrafe (Nov 19)
Re: How to become a Computer Security Professional ? rchrafe (Nov 19)
Tha Manual. rchrafe (Nov 19)
Knowing you're Secure! rchrafe (Nov 22)
The Call to Reason rchrafe (Nov 19)
Re: How to become a Computer Security Professional ? rchrafe (Nov 19)
Re: so gay huh? rchrafe (Nov 19)
Re: so gay huh? rchrafe (Nov 19)

reepex

Re: on xss and its technical merit reepex (Nov 04)
Re: mac trojan in-the-wild reepex (Nov 02)
Re: XSS - www.howtoforge.com reepex (Nov 01)
Re: on xss and its technical merit reepex (Nov 04)
on xss and its technical merit reepex (Nov 04)
Re: on xss and its technical merit reepex (Nov 04)
Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability reepex (Nov 28)
Re: Full-Disclosure Digest, Vol 33, Issue 1 reepex (Nov 01)
Re: N3TD3V INTERNET SECURITY THREAT CENTER reepex (Nov 01)
Re: mac trojan in-the-wild reepex (Nov 01)
Re: mac trojan in-the-wild reepex (Nov 01)
Matasano on the mac "trojan" reepex (Nov 02)
Re: on xss and its technical merit reepex (Nov 04)
Re: on xss and its technical merit reepex (Nov 04)
Re: mac trojan in-the-wild reepex (Nov 01)
Re: stop cross posting reepex (Nov 04)
Re: [botnets] re MAC trojan (fwd) reepex (Nov 01)
Re: on xss and its technical merit reepex (Nov 04)
Re: 300$ is more than 0$ reepex (Nov 10)
Re: [Argeniss] Data0: Next generation malware for stealing databases (Paper) reepex (Nov 24)
Re: breaking SIP for fun and toll fraud reepex (Nov 04)
Re: save gary mckinnon or lock away dan egerstad reepex (Nov 15)
Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability reepex (Nov 28)
Re: RIPA powers being used reepex (Nov 21)

Research

Cisco IOS Shellcode Research (Nov 12)

Richard Golodner

Re: How to become a Computer Security Professional ? Richard Golodner (Nov 18)
Re: n3td3v denounces the actions ofwww.derangedsecurity.com Richard Golodner (Nov 16)

RISE Security

[RISE-2007004] Apple Mac OS X 10.4.x Kernel i386_set_ldt() Integer Overflow Vulnerability RISE Security (Nov 15)

RMueller

Re: mac trojan-vs-USERS RMueller (Nov 01)

Robert McArdle

Re: mac trojan in-the-wild Robert McArdle (Nov 02)
Re: mac trojan in-the-wild Robert McArdle (Nov 02)

Rodrigo Rubira Branco (BSDaemon)

H2HC Materials Rodrigo Rubira Branco (BSDaemon) (Nov 19)

Roger A. Grimes

Re: mac trojan in-the-wild Roger A. Grimes (Nov 01)
Re: the heart of the problem [was: RE: mac trojan in-the-wild] Roger A. Grimes (Nov 02)
Re: mac trojan in-the-wild Roger A. Grimes (Nov 02)

Roman Medina-Heigl Hernandez

DoS Exploit for DHCPd bug (Bugtraq ID 25984 ; CVE-2007-5365) Roman Medina-Heigl Hernandez (Nov 02)
Conferences material, etc Roman Medina-Heigl Hernandez (Nov 04)

Ronald MacDonald

Re: Websense security contact? Ronald MacDonald (Nov 20)

rPath Update Announcements

rPSA-2007-0254-1 idle python rPath Update Announcements (Nov 30)
rPSA-2007-0231-1 pcre rPath Update Announcements (Nov 06)
rPSA-2007-0245-1 kernel rPath Update Announcements (Nov 21)
rPSA-2007-0232-1 perl rPath Update Announcements (Nov 06)
rPSA-2007-0227-1 cups rPath Update Announcements (Nov 01)
rPSA-2007-0243-1 flac rPath Update Announcements (Nov 21)
rPSA-2007-0245-2 kernel rPath Update Announcements (Nov 21)
rPSA-2007-0232-1 perl rPath Update Announcements (Nov 06)
rPSA-2007-0252-1 cups poppler tetex tetex-afm tetex-dvips tetex-fonts tetex-latex tetex-xdvi rPath Update Announcements (Nov 28)
rPSA-2007-0241-1 samba samba-swat rPath Update Announcements (Nov 17)
rPSA-2007-0242-1 php5 php5-cgi php5-mysql php5-pear php5-pgsql php5-soap php5-xsl rPath Update Announcements (Nov 19)

s4tan

Canonicalization issues in Flash Cross-domain policy file request s4tan (Nov 09)

scott

Re: N3TD3V INTERNET SECURITY THREAT CENTER scott (Nov 01)

Scripter Hack

Gmail 0day Scripter Hack (Nov 07)

Secunia Research

Secunia Research: AbiWord Link Grammar "separate_sentence()" Buffer Overflow Secunia Research (Nov 07)
Secunia Research: Samba "reply_netbios_packet()" Buffer Overflow Vulnerability Secunia Research (Nov 15)
Secunia Research: Xpdf "Stream.cc" Multiple Vulnerabilities Secunia Research (Nov 07)
Secunia Research: ACDSee Products Image and Archive Plug-ins Buffer Overflows Secunia Research (Nov 02)
Secunia Research: Symantec Backup Exec Job Engine Denial of Service Secunia Research (Nov 28)
Secunia Research: Link Grammar "separate_sentence()" Buffer Overflow Secunia Research (Nov 07)

security

[ MDKSA-2007:220 ] - Updated gpdf packages fix vulnerabilities security (Nov 15)
[ MDKSA-2007:212 ] - Updated pcre packages fix vulnerability security (Nov 08)
[ MDKSA-2007:213 ] - Updated pcre packages fix vulnerability security (Nov 08)
[ MDKSA-2007:230 ] - Updated tetex packages fix vulnerabilities security (Nov 20)
[ MDKSA-2007:214 ] - Updated flac packages fix vulnerability security (Nov 08)
[ MDKSA-2007:210 ] - Updated xfs package prevents arbitrary code execution vulnerabilities security (Nov 06)
[ MDKSA-2007:233 ] - Updated cpio package fixes buffer overflow and directory traversal vulnerabilities security (Nov 28)
[ MDKSA-2007:224-2 ] - Updated samba packages fix vulnerabilities security (Nov 23)
[ MDKSA-2007:203 ] - Updated xen packages fix multiple vulnerabilities security (Nov 01)
[ MDKSA-2007:228 ] - Updated cups packages fix vulnerabilities security (Nov 19)
[ MDKSA-2007:204-1 ] - Updated cups packages fix vulnerability security (Nov 12)
[ MDKSA-2007:204 ] - Updated cups packages fix vulnerability security (Nov 01)
[ MDKSA-2007:216 ] - Updated kernel packages fix multiple vulnerabilities and bugs security (Nov 13)
[ MDKSA-2007:215 ] - Updated openldap packages fix vulnerability security (Nov 08)
[ MDKSA-2007:223 ] - Updated pdftohtml packages fix vulnerabilities security (Nov 17)
[ MDKSA-2007:226 ] - Updated kernel packages fix multiple vulnerabilities and bugs security (Nov 19)
[ MDKSA-2007:225 ] - Updated net-snmp packages fix remote denial of service vulnerability security (Nov 19)
[ MDKSA-2007:206 ] - Updated pwlib packages fix vulnerability security (Nov 02)
[ MDKSA-2007:209 ] - Updated netpbm packages fix vulnerability security (Nov 05)
[ MDKSA-2007:229 ] - Updated phpMyAdmin packages fix multiple vulnerabilities security (Nov 20)
[ MDKSA-2007:217 ] - Updated libpng packages fix multiple vulnerabilities security (Nov 13)
[ MDKSA-2007:211 ] - Updated pcre packages fix vulnerability security (Nov 08)
[ MDKSA-2007:219 ] - Updated xpdf packages fix vulnerabilities security (Nov 15)
[ MDKSA-2007:224 ] - Updated samba packages fix vulnerabilities security (Nov 17)
[ MDKSA-2007:208 ] - Updated ghostscript packages fix vulnerability security (Nov 05)
[ MDKSA-2007:227 ] - Updated poppler packages fix vulnerabilities security (Nov 19)
[ MDKSA-2007:224-1 ] - Updated samba packages fix vulnerabilities security (Nov 21)
[ MDKSA-2007:222 ] - Updated koffice packages fix vulnerabilities security (Nov 17)
[ MDKSA-2007:232 ] - Updated kernel packages fix multiple vulnerabilities and bugs security (Nov 28)
[ MDKSA-2007:224-3 ] - Updated samba packages fix regressions security (Nov 29)
[ MDKSA-2007:218 ] - Updated mono packages fix arbitrary code execution vulnerability security (Nov 14)
[ MDKSA-2007:205 ] - Updated opal packages fix vulnerability security (Nov 02)
[ MDKSA-2007:221 ] - Updated kdegraphics packages fix vulnerabilities in kpdf security (Nov 15)
[ MDKSA-2007:233 ] - Updated cpio package fixes buffer overflow and directory traversal vulnerabilities security (Nov 28)
[ MDKSA-2007:207 ] - Updated perl packages fix vulnerability security (Nov 05)
[ MDKSA-2007:231 ] - Updated cacti packages fix SQL injection vulnerability security (Nov 22)

security curmudgeon

Re: Exploit Brokering security curmudgeon (Nov 09)

shadown

Some hashes for the record shadown (Nov 14)

Shyaam

Re: Firefox 2.0.0.9 remote DoS vulnerability Shyaam (Nov 05)

silky

Re: Gmail 0day silky (Nov 08)
Re: Gmail 0day silky (Nov 08)
an open letter to kevin bacon: hello, how's it going? silky (Nov 01)
Re: Gmail 0day silky (Nov 08)

Simon Richter

Re: Standing Up Against German Laws - Project HayNeedle Simon Richter (Nov 18)

Simon Smith

Re: Hushmail == Narqz Simon Smith (Nov 08)
Exploit Brokering Simon Smith (Nov 09)
Re: Exploit Brokering Simon Smith (Nov 09)
Re: Barbut Simon Smith (Nov 21)
Re: Exploit Brokering Simon Smith (Nov 09)
Re: mac trojan in-the-wild Simon Smith (Nov 02)
Re: Exploit Brokering Simon Smith (Nov 09)
Barbut Simon Smith (Nov 21)
Re: Exploit Brokering Simon Smith (Nov 09)
Re: Exploit Brokering Simon Smith (Nov 09)
Re: Flash that simulates virus scan Simon Smith (Nov 01)
Re: Exploit Brokering Simon Smith (Nov 09)
Re: Hushmail == Narqz Simon Smith (Nov 09)
Re: Crafted SYN Packets... Simon Smith (Nov 13)

SkyOut

SF-Shoutbox 1.2.1 <= 1.4 HTML/JS Injection Vulnerability SkyOut (Nov 03)

Sowhat

Vulnerability Hash Database - Maillist Sowhat (Nov 17)
Security Contact @ Avast! Sowhat (Nov 27)
Security contact @ TrendMicro? Sowhat (Nov 13)
AhnLab AntiVirus Remote Kernel Memory Corruption Sowhat (Nov 16)

Stan Bubrouski

Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability Stan Bubrouski (Nov 28)

Stefan Esser

Re: Wordpress Cookie Authentication Vulnerability Stefan Esser (Nov 20)

Steffen Wendzel

[paper] protocol hopping covert channels Steffen Wendzel (Nov 13)

Steve Kemp

[SECURITY] [DSA 1402-1] New gforge packages fix several vulnerabilities Steve Kemp (Nov 07)
[SECURITY] [DSA 1409-3] New samba packages fix several vulnerabilities Steve Kemp (Nov 29)
[SECURITY] [DSA 1409-2] New samba packages fix several vulnerabilities Steve Kemp (Nov 26)
[SECURITY] [DSA 1409-1] New samba packages fix several vulnerabilities Steve Kemp (Nov 22)

Steven Adair

Re: Port scanning question...SYN/FIN ... SYN/ACK Steven Adair (Nov 12)
Re: mac trojan in-the-wild Steven Adair (Nov 01)
Re: Wordpress Cookie Authentication Vulnerability Steven Adair (Nov 20)
Re: Cyber Jihad? Yeah, right... Steven Adair (Nov 12)

Steven Block

Re: mac trojan in-the-wild Steven Block (Nov 01)

Steven J. Murdoch

Re: Wordpress Cookie Authentication Vulnerability Steven J. Murdoch (Nov 20)
Wordpress Cookie Authentication Vulnerability Steven J. Murdoch (Nov 19)

Steven Murdoch

Re: Wordpress Cookie Authentication Vulnerability Steven Murdoch (Nov 20)

Sysman

Re: Standing Up Against German Laws - Project HayNeedle Sysman (Nov 14)
Re: Standing Up Against German Laws - Project HayNeedle sysman (Nov 14)
Re: Standing Up Against German Laws - Project HayNeedle Sysman (Nov 13)

T Biehn

Re: Why I hate you (and a philanthropic challenge!) T Biehn (Nov 09)
Re: still some 0days to sell T Biehn (Nov 09)

The Asterisk Development Team

AST-2007-024 - Fallacious security advisory spread on the Internet involving buffer overflow in Zaptel's sethdlc application The Asterisk Development Team (Nov 08)

The Security Community

Websense security contact? The Security Community (Nov 20)

Thierry Zoller

Re: Crafted SYN Packets... Thierry Zoller (Nov 13)
Re: Exploit Brokering Thierry Zoller (Nov 09)
Re: Exploit Brokering Thierry Zoller (Nov 09)
Re: Security Contact @ Avast! Thierry Zoller (Nov 29)
Re: Exploit Brokering Thierry Zoller (Nov 09)

Thijs Kinkhorst

[SECURITY] [DSA 1406-1] New horde3 packages fix several vulnerabilities Thijs Kinkhorst (Nov 09)
[SECURITY] [DSA 1405-1] New zope-cmfplone packages fix arbitrary code execution Thijs Kinkhorst (Nov 09)
[SECURITY] [DSA 1403-1] New phpmyadmin packages fix cross-site scripting Thijs Kinkhorst (Nov 08)
[SECURITY] [DSA 1405-2] New zope-cmfplone packages fix regression Thijs Kinkhorst (Nov 12)
[SECURITY] [DSA 1404-1] New gallery2 packages fix privilege escalation Thijs Kinkhorst (Nov 08)

Thomas Biege

SUSE Security Announcement: xpdf and more (SUSE-SA:2007:060) Thomas Biege (Nov 14)

Thor (Hammer of God)

Re: mac trojan in-the-wild Thor (Hammer of God) (Nov 01)
Re: mac trojan in-the-wild Thor (Hammer of God) (Nov 01)

Timo Schoeler

Re: Standing Up Against German Laws - Project HayNeedle Timo Schoeler (Nov 13)
Re: Standing Up Against German Laws - Project HayNeedle Timo Schoeler (Nov 15)

Tobias Klein

[TKADV2007-001] Mac OS X TIOCSETD IOCTL Kernel Memory Corruption Vulnerability Tobias Klein (Nov 15)

tom skilling jr.

The Daytona Nine: Shallow, Behringer tom skilling jr. (Nov 02)

Tonnerre Lombard

Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability Tonnerre Lombard (Nov 28)
Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability Tonnerre Lombard (Nov 28)

ULTRA.HAQRS.4.ALL ULTRA.HAQRS.4.ALL

0day0day0day0day AURACMS XSS!! LATEST VERSION!!! 0day0day0day0day ULTRA.HAQRS.4.ALL ULTRA.HAQRS.4.ALL (Nov 12)

Valdis . Kletnieks

Re: Wiretapping Valdis . Kletnieks (Nov 12)
Re: Barbut Valdis . Kletnieks (Nov 21)
Re: Wordpress Cookie Authentication Vulnerability Valdis . Kletnieks (Nov 20)
Re: Microsoft FTP Client Multiple Valdis . Kletnieks (Nov 29)
Re: Microsoft FTP Client Multiple Bufferoverflow Vulnerability Valdis . Kletnieks (Nov 28)
Re: Exploit Brokering Valdis . Kletnieks (Nov 09)
Re: Standing Up Against German Laws - Project HayNeedle Valdis . Kletnieks (Nov 13)

Vincent Archer

Re: Standing Up Against German Laws - Project HayNeedle Vincent Archer (Nov 12)

Volker Tanger

Re: on xss and its technical merit Volker Tanger (Nov 04)

whupass

End of the world? whupass (Nov 13)
Google Sacure V2.0 -- Sacure Corporation whupass (Nov 23)

William A. Carrel

Local Privilege Escalation in Norton AntiVirus for Mac William A. Carrel (Nov 02)

worried security

Re: save gary mckinnon or lock away dan egerstad worried security (Nov 14)
Re: mac trojan in-the-wild worried security (Nov 01)
Cyber Jihad? Yeah, right... worried security (Nov 11)
False advertisting and possible click fraud about n3td3v worried security (Nov 25)
Re: How to become a Computer Security Professional ? worried security (Nov 18)
stop cross posting worried security (Nov 03)
save gary mckinnon or lock away dan egerstad worried security (Nov 14)
Re: n3td3v denounces the actions of www.derangedsecurity.com worried security (Nov 16)
N3TD3V INTERNET SECURITY THREAT CENTER worried security (Nov 01)
Police swoop on 'hacker of the year' worried security (Nov 14)
major security breach in united kingdom worried security (Nov 20)
Re: n3td3v denounces the actions of www.derangedsecurity.com worried security (Nov 14)

XSS Worm XSS Security Information Portal

0day Shockwave and Flash XSS Fish Exploits on Youtube, Revver, Metacafe, Google. XSS Worm XSS Security Information Portal (Nov 09)
Re: n3td3v denounces the actions of www.derangedsecurity.com XSS Worm XSS Security Information Portal (Nov 14)
Re: n3td3v denounces the actions of www.derangedsecurity.com XSS Worm XSS Security Information Portal (Nov 18)
Re: n3td3v denounces the actions of www.derangedsecurity.com XSS Worm XSS Security Information Portal (Nov 14)
Re: Wordpress 2.3 Cross Domain Content Insertion- New vulnerability + exploit - xssworm.com XSS Worm XSS Security Information Portal (Nov 13)
Re: Gmail 0day XSS Worm XSS Security Information Portal (Nov 09)
Re: How to become a Computer Security Professional ? XSS Worm XSS Security Information Portal (Nov 18)
Wordpress 2.3 Cross Domain Content Insertion- New vulnerability + exploit - xssworm.com XSS Worm XSS Security Information Portal (Nov 13)
Wordpress 0day: Hacking into computers now easier than previously believed - Heise Security XSS Worm XSS Security Information Portal (Nov 20)
Re: Wordpress Cookie Authentication Vulnerability XSS Worm XSS Security Information Portal (Nov 20)
Warning: Hackers hijacking unused IP Addresses inside Trusted domains [POC] XSS Worm XSS Security Information Portal (Nov 21)

yiri

Re: [funsec] the heart of the problem [was: RE: mac trojan in-the-wild] yiri (Nov 02)

zdi-disclosures

ZDI-07-067: Apple QuickTime PICT File Poly Opcodes Heap Corruption Vulnerability zdi-disclosures (Nov 05)
ZDI-07-065: Apple QuickTime Color Table RGB Parsing Heap Corruption Vulnerability zdi-disclosures (Nov 05)
ZDI-07-066: Apple Quicktime PICT File PackBitsRgn Parsing Heap Corruption Vulnerability zdi-disclosures (Nov 05)
ZDI-07-069: CA BrightStor ARCserve Backup Message Engine Insecure Method Exposure Vulnerability zdi-disclosures (Nov 26)
ZDI-07-068: Apple QuickTime Uncompressedfile Opcode Stack Overflow Vulnerability zdi-disclosures (Nov 05)