Full Disclosure: by author

222 messages starting Nov 12 13 and ending Nov 01 13
Date index | Thread index | Author index


アドリアンヘンドリック

Securelist.com (Kaspersky) released a misleading information about Kelihos Botnet actual status アドリアンヘンドリック (Nov 12)

adam

Re: Imperva WAF/DAF 9.5 patch8 and 10.0 patch 2 localroot vulnerability adam (Nov 21)

advisories

[SOJOBO-ADV-13-03] - Wordpress plugin Gallery Bank 2.0.19 Reflected Cross Site Scripting advisories (Nov 05)
[SOJOBO-ADV-13-04] - PHP-Nuke 8.2.4 multiple vulnerabilities advisories (Nov 18)

Alan J . Wylie

Re: XADV-2013004 Linux Kernel ipvs Kernel Stack Overflow Alan J . Wylie (Nov 11)

Albert López

Re: [Dailydave] Capstone disassembly framework: looking for Beta-testers Albert López (Nov 21)

Alex

Re: whatsapp opening url in background Alex (Nov 15)
Re: Geox fails.. Alex (Nov 05)
Re: I'm new here, and I already have something to share Alex (Nov 08)

Ander Juaristi Alamos

Re: whatsapp opening url in background Ander Juaristi Alamos (Nov 15)

Arne Swinnen

Hack.LU 2013 CTF Wannabe challenge writeup Arne Swinnen (Nov 03)

Augusto Pereyra

Re: Ip address and mac address hardcoded Augusto Pereyra (Nov 16)

Bob Man Van Kim

Re: OpenSSH Security Advisory: gcmrekey.adv Bob Man Van Kim (Nov 09)

c1088422

spamtitan 6 root exploit c1088422 (Nov 19)

Caspian Kilkelly

Re: Another Apple Security Failure (Apple Mail on the iPhone).... Caspian Kilkelly (Nov 14)

CERT OPS Marienfeldt

Re: OpenSSH Security Advisory: gcmrekey.adv CERT OPS Marienfeldt (Nov 09)

Cisco Systems Product Security Incident Response Team

Cisco Security Advisory: Cisco WAAS Mobile Remote Code Execution Vulnerability Cisco Systems Product Security Incident Response Team (Nov 06)
Cisco Security Advisory: Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability Cisco Systems Product Security Incident Response Team (Nov 06)
Cisco Security Advisory: Cisco TelePresence VX Clinical Assistant Administrative Password Reset Vulnerability Cisco Systems Product Security Incident Response Team (Nov 06)

coderman

coderman's keys coderman (Oct 31)
Re: Ip address and mac address hardcoded coderman (Nov 16)
Re: coderman's keys coderman (Oct 31)
Re: RFP: FOIA with privacy waivers[0] for oversight coderman (Nov 29)
Re: Wapiti 2.3.0 - the python-powered web-application vulnerability scanner coderman (Nov 27)
Re: DEF CON 19 - hackers get hacked! coderman (Nov 27)
OpenSSH Security Advisory: gcmrekey.adv coderman (Nov 08)
Re: OpenSSH Security Advisory: gcmrekey.adv coderman (Nov 08)
Re: OpenSSH Security Advisory: gcmrekey.adv coderman (Nov 09)
RFP: FOIA with privacy waivers[0] for oversight coderman (Nov 28)
Re: DEF CON 19 - hackers get hacked! , DEF CON 20 was not DRT coderman (Nov 27)

CORE Advisories Team

CORE-2013-0704 - Vivotek IP Cameras RTSP Authentication Bypass CORE Advisories Team (Nov 05)

Curesec Research Team

CVE-2013-6223: Local Password Disclosure in Livezilla prior version 5.1.1.0 Curesec Research Team (Nov 28)
CVE-2013-6271 Remove Android Device Lock by rouge app Curesec Research Team (Nov 28)
CVE-2013-622 Livezilla Remote Code Execution (Cure-2013-1007) Curesec Research Team (Nov 16)
CVE-2013-6224: XSS in Livezilla prior version 5.1.1.0 Curesec Research Team (Nov 28)

[CXSEC]

Apple MacOSX 10.9 Hard Link Memory Corruption [CXSEC] (Nov 08)

Dan Carpenter

Re: XADV-2013007 Linux Kernel bt8xx Video Driver IOCTL Heap Overflow Dan Carpenter (Nov 21)

Daniel Llewellyn

Re: [cryptography] coderman's keys Daniel Llewellyn (Nov 04)
Re: [cryptography] coderman's keys Daniel Llewellyn (Nov 04)

Daniël W . Crompton

Re: [cryptography] coderman's keys Daniël W . Crompton (Nov 03)

David Miller

Cloud Questions David Miller (Nov 09)

Denis Andzakovic

Uptime Agent 5.0.1 Stack Overflow Vulnerability Denis Andzakovic (Nov 27)

Dennis Kelly

SKIDATA RFID Freemotion.Gate Unauthenticated Web Service Aribtrary Remote Command Execution Dennis Kelly (Nov 20)

Dirk-Willem van Gulik

CVE-2013-4425: Private key disclosure, Osirix (lite, 64bit and FDA cleader version) (Medical Application) Dirk-Willem van Gulik (Nov 06)

Enno Rey

Recruiting Troopers - Call for Papers, March 19-20 2014 Enno Rey (Nov 12)

Ferran Pichel

Re: whatsapp opening url in background Ferran Pichel (Nov 15)
Re: whatsapp opening url in background Ferran Pichel (Nov 15)

Florian Weimer

[SECURITY] [DSA 2791-1] tryton-client security update Florian Weimer (Nov 03)

fortinet42

SPLUNK > 6 universal forwarder cypher weakness fortinet42 (Nov 10)

Frank Habermann

whatsapp opening url in background Frank Habermann (Nov 14)
Re: whatsapp opening url in background Frank Habermann (Nov 15)

full-disclosure-bounces

pineapp mailsecure pwnage full-disclosure-bounces (Nov 19)

giulio

Seems like Coinbase Security Team doesn't know how their cookie works giulio (Nov 30)

Gregory Panakkal

16TH AVAR INTERNATIONAL SECURITY CONFERENCE 2013 - (4th-7th Dec'13, Chennai. India) Gregory Panakkal (Nov 19)

Guillaume Ross

[CVE-2013-5726] - Tweetbot for iOS and Mac user disclosure/privacy issue Guillaume Ross (Nov 01)

Hafez Kamal

[HITB-Announce] #HITB2014AMS Call for Papers Now Open Hafez Kamal (Nov 27)

Harry Hoffman

Re: OpenSSH Security Advisory: gcmrekey.adv Harry Hoffman (Nov 08)

Henri Salo

Re: ClipBucket v2.6-r738 Arbitrary File Upload 0-Day Henri Salo (Nov 16)

ISecAuditors Security Advisories

[ISecAuditors Security Advisories] LinkedIn social network is affected by Persistent Cross-Site Scripting vulnerability ISecAuditors Security Advisories (Nov 05)
[ISecAuditors Security Advisories] SQL Injection vulnerability in "Project'Or RIA" allow arbitrary access to the database and the file system ISecAuditors Security Advisories (Nov 05)
[ISecAuditors Security Advisories] Multiple XSS vulnerabilities in "Project'Or RIA" ISecAuditors Security Advisories (Nov 05)

Jack Johnson

Re: I'm new here, and I already have something to share Jack Johnson (Nov 09)
I'm new here, and I already have something to share Jack Johnson (Nov 07)

Jann Horn

Re: [CVE-2013-6356] Avira Secure Backup v1.0.0.1 Multiple Registry Key Value Parsing Local Buffer Overflow Vulnerability Jann Horn (Nov 17)

Jason Hellenthal

Re: Ip address and mac address hardcoded Jason Hellenthal (Nov 17)

Jasper Kips

Re: I'm new here, and I already have something to share Jasper Kips (Nov 09)

Jeffrey Goldberg

Re: [cryptography] coderman's keys Jeffrey Goldberg (Nov 01)

Jeffrey Walton

Re: Cloud Questions Jeffrey Walton (Nov 09)
Re: Cloud Questions Jeffrey Walton (Nov 09)
Re: Seems like Coinbase Security Team doesn't know how their cookie works Jeffrey Walton (Nov 30)
Re: Cloud Questions Jeffrey Walton (Nov 09)
Re: iCloud and privacy...last word Jeffrey Walton (Nov 28)
Another Apple Security Failure (Apple Mail on the iPhone).... Jeffrey Walton (Nov 11)
Re: Another Apple Security Failure (Apple Mail on the iPhone).... Jeffrey Walton (Nov 14)

Jerome Athias

Re: whatsapp opening url in background Jerome Athias (Nov 15)

John Cartwright

List Charter John Cartwright (Nov 19)

John Stamatakis

WebSurgery v1.1 released (Web application security testing suite) John Stamatakis (Nov 12)

Julian Silden Langlo

Re: [cryptography] coderman's keys Julian Silden Langlo (Nov 01)

Julien Ahrens

Re: [CVE-2013-6356] Avira Secure Backup v1.0.0.1 Multiple Registry Key Value Parsing Local Buffer Overflow Vulnerability Julien Ahrens (Nov 17)
[CVE-2013-6356] Avira Secure Backup v1.0.0.1 Multiple Registry Key Value Parsing Local Buffer Overflow Vulnerability Julien Ahrens (Nov 16)

laurent gaffie

Re: DoS vulnerability in Internet Explorer 6, 7, 8 (access violation) laurent gaffie (Nov 19)

LIAD Mizrachi

Tapuz - Flix Password ByPass LIAD Mizrachi (Nov 25)
FOSCAM Wireless IP Camera - SSID Cross Site Scripting LIAD Mizrachi (Nov 07)
D-Link Router 2760N (DSL-2760U-BN) Multiple XSS LIAD Mizrachi (Nov 11)

Luciano Bello

[SECURITY] [DSA 2805-1] sup-mail security update Luciano Bello (Nov 28)

Mario Vilas

Re: Defense in depth -- the Microsoft way (part 13): surprising and inconsistent behaviour, sloppy coding, sloppy QA, sloppy documentation Mario Vilas (Nov 03)

Mark Thomas

Re: XXE Injection in Spring Framework Mark Thomas (Nov 05)

matteo ignaccolo

D-Link! What's wrong with you? matteo ignaccolo (Nov 28)

Maximilian Grobecker

Re: Ip address and mac address hardcoded Maximilian Grobecker (Nov 17)
Re: Ip address and mac address hardcoded Maximilian Grobecker (Nov 17)

Michael Gilbert

[SECURITY] [DSA 2795-2] lighttpd regression update Michael Gilbert (Nov 17)
[SECURITY] [DSA 2798-1] curl security update Michael Gilbert (Nov 18)
[SECURITY] [DSA 2795-1] lighttpd security update Michael Gilbert (Nov 13)
[SECURITY] [DSA 2797-1] chromium-browser security update Michael Gilbert (Nov 18)

Michael Hallgren

Re: [cryptography] coderman's keys Michael Hallgren (Nov 01)

Michal Zalewski

bugs in IJG jpeg6b & libjpeg-turbo Michal Zalewski (Nov 12)

Mike Arnold

Intersystems Cache Remote Code Execution (via Default Minimal Security Install) Mike Arnold (Nov 19)

Moritz Muehlenhoff

[SECURITY] [DSA 2793-1] libav security update Moritz Muehlenhoff (Nov 09)
[SECURITY] [DSA 2803-1] quagga security update Moritz Muehlenhoff (Nov 26)
[SECURITY] [DSA 2807-1] links2 security update Moritz Muehlenhoff (Nov 30)
[SECURITY] [DSA 2804-1] drupal7 security update Moritz Muehlenhoff (Nov 26)
[SECURITY] [DSA 2797-1] icedove security update Moritz Muehlenhoff (Nov 13)

mramelie

Re: Ip address and mac address hardcoded mramelie (Nov 17)
Ip address and mac address hardcoded mramelie (Nov 16)

MustLive

BF, LE and IAA vulnerabilities in InstantCMS MustLive (Nov 17)
Code Execution vulnerability in Contact Form 7 for WordPress MustLive (Nov 22)
Day of bugs in WordPress 3 MustLive (Nov 30)
XXE Injection in Spring Framework MustLive (Nov 02)
Vulnerabilities hiddenly fixed in WordPress 3.6 and 3.6.1 MustLive (Nov 30)
DoS vulnerability in Internet Explorer 6, 7, 8 (access violation) MustLive (Nov 19)
XSS and FPD vulnerabilities in LBG Zoom In/Out Effect Slider for WordPress MustLive (Nov 04)

Natanael

Re: [cryptography] coderman's keys Natanael (Nov 01)

/-\\ndrew /\//ady

Re: XXE Injection in Spring Framework /-\\ndrew /\//ady (Nov 05)

Nguyen Anh Quynh

Capstone disassembly framework: looking for Beta-testers Nguyen Anh Quynh (Nov 19)
Re: [Dailydave] Capstone disassembly framework: looking for Beta-testers Nguyen Anh Quynh (Nov 21)
Re: [Dailydave] Capstone disassembly framework: looking for Beta-testers Nguyen Anh Quynh (Nov 21)

Nicolas Surribas

Wapiti 2.3.0 - the python-powered web-application vulnerability scanner Nicolas Surribas (Nov 27)

Osama Alrashid

ColdFusion and Adobe Flash Player Security Updates Osama Alrashid (Nov 13)

Oz

HOTBOX Multiple Vulnerabilities Oz (Nov 03)

Pål Nilsen

Re: whatsapp opening url in background Pål Nilsen (Nov 15)

Pedro Worcel

Re: [cryptography] coderman's keys Pedro Worcel (Nov 03)

pr0n4h4x

Geox fails.. pr0n4h4x (Nov 05)

pr0nh4x

Some more on Geox.. pr0nh4x (Nov 15)

qsrc Quotium

Facebook Vulnerability Discloses Friends Lists Defined as Private qsrc Quotium (Nov 21)

Robert Kugler

Yahoo Open Redirect Vulnerability - or "Designing vulnerabilities" Robert Kugler (Nov 27)

Rob Whitney

Re: ASUS RT-N13U Unsecured Telnet on LAN and WAN Rob Whitney (Oct 31)
Re: [cryptography] coderman's keys Rob Whitney (Nov 01)
ClipBucket v2.6-r738 Arbitrary File Upload 0-Day Rob Whitney (Nov 15)

Root User

Vulnerabilities in Redaxo 4.5 CMS Root User (Nov 09)

Ruben Garrote

pineapp mailsecure no authenticated privilege escalation & remote execution code Ruben Garrote (Nov 19)

Ryan Dewhurst

Re: Vulnerabilities hiddenly fixed in WordPress 3.6 and 3.6.1 Ryan Dewhurst (Nov 30)

Salvatore Bonaccorso

[SECURITY] [DSA 2790-1] nss security update Salvatore Bonaccorso (Nov 01)
[SECURITY] [DSA 2792-1] wireshark security update Salvatore Bonaccorso (Nov 04)
[SECURITY] [DSA 2801-1] libhttp-body-perl security update Salvatore Bonaccorso (Nov 21)
[SECURITY] [DSA 2794-1] spip security update Salvatore Bonaccorso (Nov 10)
[SECURITY] [DSA 2800-1] nss security update Salvatore Bonaccorso (Nov 25)
[SECURITY] [DSA 2798-2] curl security update Salvatore Bonaccorso (Nov 20)
[SECURITY] [DSA 2796-1] torque security update Salvatore Bonaccorso (Nov 13)

scadastrangelove

Power of Community 2013 special releases of ICS/SCADA toolkit scadastrangelove (Nov 04)

Scott Arciszewski

Pastebin Captcha Bypass Scott Arciszewski (Nov 28)

security

[ MDVSA-2013:282 ] perl-HTTP-Body security (Nov 25)
[ MDVSA-2013:278 ] samba security (Nov 21)
[ MDVSA-2013:266 ] java-1.6.0-openjdk security (Nov 19)
[ MDVSA-2013:271 ] pmake security (Nov 21)
[ MDVSA-2013:268 ] torque security (Nov 19)
[ MDVSA-2013:273 ] libjpeg security (Nov 21)
[ MDVSA-2013:276 ] curl security (Nov 21)
[ MDVSA-2013:274 ] libjpeg security (Nov 21)
[ MDVSA-2013:287 ] drupal security (Nov 26)
[ MDVSA-2013:272 ] poppler security (Nov 21)
[ MDVSA-2013:277 ] lighttpd security (Nov 21)
[ MDVSA-2013:281 ] nginx security (Nov 24)
[ MDVSA-2013:269 ] firefox security (Nov 20)
[ MDVSA-2013:284 ] glibc security (Nov 25)
[ MDVSA-2013:280 ] memcached security (Nov 22)
[ MDVSA-2013:270 ] nss security (Nov 20)
[ MDVSA-2013:279 ] wireshark security (Nov 22)
[ MDVSA-2013:283 ] glibc security (Nov 25)
[ MDVSA-2013:286 ] ruby security (Nov 26)
[ MDVSA-2013:265 ] kernel security (Nov 10)
[ MDVSA-2013:275 ] krb5 security (Nov 21)
n.runs-SA-2013.006 - Microsoft Outlook/Crypto API - Design Bug security (Nov 12)
[ MDVSA-2013:267 ] java-1.7.0-openjdk security (Nov 19)
[ MDVSA-2013:285 ] bugzilla security (Nov 26)

security-news

[Security-news] SA-CONTRIB-2013-095 - Organic Groups - Access bypass security-news (Nov 20)
[Security-news] SA-CONTRIB-2013-087 - Payment for Webform - Access Bypass security-news (Nov 06)
[Security-news] SA-CONTRIB-2013-094 - EU Cookie Compliance - Cross Site Scripting (XSS) security-news (Nov 20)
[Security-news] SA-CONTRIB-2013-090 - Revisioning - Access Bypass security-news (Nov 13)
[Security-news] SA-CONTRIB-2013-089 - Node Access Keys - Access Bypass security-news (Nov 06)
[Security-news] SA-CONTRIB-2013-091 - Groups, Communities and Co (GCC) - Access Bypass security-news (Nov 13)
[Security-news] SA-CONTRIB-2013-092 - Misery - Denial of Service (DOS) vulnerability. security-news (Nov 13)
[Security-news] SA-CONTRIB-2013-088 - Secure Pages - Missing Encryption of Sensitive Data security-news (Nov 06)
[Security-news] SA-CONTRIB-2013-093 - Invitation - Access Bypass security-news (Nov 20)
[Security-news] SA-CORE-2013-003 - Drupal core - Multiple vulnerabilities security-news (Nov 20)
[Security-news] SA-CONTRIB-2013-096 - Entity reference - Access bypass security-news (Nov 20)

Shelby Spencer

Re: ASUS RT-N13U Unsecured Telnet on LAN and WAN Shelby Spencer (Nov 05)

silence_is_best

iCloud and privacy...last word silence_is_best (Nov 28)
Re: Cloud Questions silence_is_best (Nov 09)

sixtyvividtails

Re: Windows Local DOS on Win32 Handle Validation sixtyvividtails (Nov 13)
Windows Local DOS on Win32 Handle Validation sixtyvividtails (Nov 12)

Stefan Kanthak

Re: Defense in depth -- the Microsoft way (part 13): surprising and inconsistent behaviour, sloppy coding, sloppy QA, sloppy documentation Stefan Kanthak (Nov 03)
Defense in depth -- the Microsoft way (part 13): surprising and inconsistent behaviour, sloppy coding, sloppy QA, sloppy documentation Stefan Kanthak (Nov 03)
Defense in depth -- the Microsoft way (part 14): incomplete, misleading and dangerous documentation Stefan Kanthak (Nov 24)

Stephan Rickauer

CVE-2013-5966 - XSS in ZK Framework Stephan Rickauer (Nov 15)

steve jobs

Imperva WAF/DAF 9.5 patch8 and 10.0 patch 2 localroot vulnerability steve jobs (Nov 21)
Re: Imperva WAF/DAF 9.5 patch8 and 10.0 patch 2 localroot vulnerability steve jobs (Nov 21)

tennc

Re: Imperva WAF/DAF 9.5 patch8 and 10.0 patch 2 localroot vulnerability tennc (Nov 23)
Re: Tapuz - Flix Password ByPass tennc (Nov 27)

Thijs Kinkhorst

[SECURITY] [DSA 2806-1] nbd security update Thijs Kinkhorst (Nov 29)
[SECURITY] [DSA 2802-1] nginx security update Thijs Kinkhorst (Nov 22)

Thomas Hibbert

CORRECTION: Kaseya 6.3 Arbitrary File Upload Vulnerability Thomas Hibbert (Nov 20)
Kaseya 6.3 Arbitrary File Upload Vulnerability Thomas Hibbert (Nov 18)
CORRECTION: DesktopCentral Arbitrary File Upload Vulnerability Thomas Hibbert (Nov 20)
DesktopCentral Arbitrary File Upload Vulnerability Thomas Hibbert (Nov 18)

Tim Brown

[OVSA20131108] OpenVAS Manager And OpenVAS Administrator Vulnerable To Partial Authentication Bypass Tim Brown (Nov 15)

Tony Naggs

DC4420 (DefCon London) meeting next Tuesday, 26th November 2013 Tony Naggs (Nov 21)

"VMware Security Response Center"

NEW VMSA-2013-0013 VMware Workstation host privilege escalation vulnerability "VMware Security Response Center" (Nov 14)

Vulnerability Lab

PayPal Inc Bug Bounty #42 - Persistent POST Inject Vulnerability Vulnerability Lab (Nov 18)
PayPal Inc Bug Bounty #65 China - Redirect Web Vulnerability Vulnerability Lab (Nov 18)
Appologics AirBeam v1.9.2 iOS - Multiple Web Vulnerabilities Vulnerability Lab (Nov 19)
NewsAktuell PressePortal DE - Remote SQL Injection Web Vulnerability Vulnerability Lab (Nov 28)
Paypal Bug Bounty #14 - Persistent Payment Mail Encoding Vulnerability Vulnerability Lab (Nov 19)
pdirl PHP Directory Listing 1.0.4 - Cross Site Scripting Web Vulnerabilities Vulnerability Lab (Nov 01)
Paypal Inc Bug Bounty #47 ALYZ - Persistent Search Vulnerability Vulnerability Lab (Nov 18)

vulns () 11paths com

How to take advantage of Chrome autofill feature to get sensitive information vulns () 11paths com (Nov 01)

William Costa

CSRF vulnerabilities in OS of fortianalyzer 5.0.4 William Costa (Nov 12)

Wire Ghoul

Flatpress version 1.0 remote code execution NULLday Wire Ghoul (Nov 06)

x90c

XADV-2013008 Linux Kernel 3.11.7 <= sk_attach_filter Kernel Heap Corruption x90c (Nov 19)
XADV-2013006 FreeBSD <= 10 kernel qlxge/qlxgbe Driver IOCTL Multiple Kernel Memory Leak Bugs x90c (Nov 15)
XADV-2013005 FreeBSD 10 <= nand Driver IOCTL Kernel Memory Leak Bug x90c (Nov 15)
the advisory canceled. x90c (Nov 09)
XADV-2013003 Linux Kernel fbdev Driver arcfb_write() Overflow x90c (Nov 11)
XADV-2013007 Linux Kernel bt8xx Video Driver IOCTL Heap Overflow x90c (Nov 17)
[Article] The Internal of Reloc .text x90c (Oct 31)
XADV-2013003 Linux Kernel eCryptfs write_tag_3_packet Heap Buffer Overflow Vulnerability x90c (Nov 03)
Case Study: CVE-2010-0436 KDE TOCTTOU vulnerability x90c (Nov 02)
XADV-2013003 Linux Kernel bt8xx Video Driver IOCTL Heap Overflow x90c (Nov 09)
XADV-2013003 Linux Kernel eCryptfs write_tag_3_packet Heap Buffer Overflow Vulnerability x90c (Nov 03)
XADV-2013004 Linux Kernel ipvs Kernel Stack Overflow x90c (Nov 11)

yersinia

Re: OpenSSH Security Advisory: gcmrekey.adv yersinia (Nov 09)

Yvan Janssens

Re: Cloud Questions Yvan Janssens (Nov 09)

Yves-Alexis Perez

[SECURITY] [DSA 2789-1] strongswan security update Yves-Alexis Perez (Nov 01)