A lightly moderated high-traffic forum for disclosure of security information. Fresh vulnerabilities sometimes hit this list many hours before they pass through the Bugtraq moderation queue. The relaxed atmosphere of this quirky list provides some comic relief and certain industry gossip. Unfortunately, most of the posts are worthless drivel, so finding the gems takes patience.

List Archives

Latest Posts

Re: Exploit Pack - Hacking Microsoft Word and Excel Chuckyz Seed (Feb 07)
http://www.sendspace.com/file/f8pexd // insectpro

when he rmd the other one, i just uploaded it again :-)
and i wilm d so, until this product, is purely a waste of time. :)
have a lovely fucking day assfaces!

Re: Vulnerability-lab.com XSS Sanguinarious Rose (Feb 07)
His story seemed rather odd and BS to begin with so thanks for
cleaning that up for much entertainment and ownage.

Excellent day to you good sir.

HITB2011KUL - Is The Pen Still Mightier Than The Sword research () vulnerability-lab com (Feb 07)
Title:
======
HITB2011KUL - Is The Pen Still Mightier Than The Sword

Date:
=====
2012-01-18

References:
===========
Download: http://www.vulnerability-lab.com/resources/videos/385.wmv
View: http://www.youtube.com/watch?v=9dsYY_Zl4sk

VL-ID:
=====
385

Status:
========
Published

Exploitation-Technique:
=======================
Conference

Severity:
=========
Medium

Details:
========
Presentation Title Is the Pen Still Mightier...

HITB2011KUL - Chip & PIN - Protocol Analysis EMV POS research () vulnerability-lab com (Feb 07)
Title:
======
HITB2011KUL - Chip & PIN - Protocol Analysis EMV POS

Date:
=====
2012-01-26

References:
===========
Download: http://www.vulnerability-lab.com/resources/videos/399.wmv
View: http://www.youtube.com/watch?v=5zFlqMFWYhc

VL-ID:
=====
399

Status:
========
Published

Exploitation-Technique:
=======================
Conference

Severity:
=========
Medium

Details:
========
The EMV global standard for electronic...

HITB2011KUL - Mobile Malware Analysis research () vulnerability-lab com (Feb 07)
Title:
======
HITB2011KUL - Mobile Malware Analysis

Date:
=====
2012-02-06

References:
===========
Download: http://www.vulnerability-lab.com/resources/videos/424.wmv
View: http://www.youtube.com/watch?v=nVAuZ7jf7Sk

VL-ID:
=====
424

Status:
========
Published

Exploitation-Technique:
=======================
Conference

Severity:
=========
High

Details:
========
Mobile malware is becoming a larger concern every day, as the...

HITB2011KUL - Post Memory Corruption Analysis research () vulnerability-lab com (Feb 07)
Title:
======
HITB2011KUL - Post Memory Corruption Analysis

Date:
=====
2012-01-26

References:
===========
Download: http://www.vulnerability-lab.com/resources/videos/398.wmv
View: http://www.youtube.com/watch?v=kOgarD9KCbg

VL-ID:
=====
398

Status:
========
Published

Exploitation-Technique:
=======================
Conference

Severity:
=========
High

Details:
========
In this presentation, we introduce a new exploitation...

Video => Google Service Reward #1 - ClickJacking Vulnerability research () vulnerability-lab com (Feb 07)
Title:
======
Google Service Reward #1 - ClickJacking Vulnerability

Date:
=====
2012-02-07

References:
===========
Download: http://www.vulnerability-lab.com/resources/videos/416.wmv
View: http://www.youtube.com/watch?v=6N0YS9cTRHw

VL-ID:
=====
416

Status:
========
Published

Exploitation-Technique:
=======================
Offensiv

Severity:
=========
High

Details:
========
The video shows the live exploitation session of...

Video => Cyberoam Central Console v2.x - File Include Vulnerability research () vulnerability-lab com (Feb 07)
Title:
======
Cyberoam Central Console v2.x - File Include Vulnerability

Date:
=====
2012-02-05

References:
===========
Download: http://www.vulnerability-lab.com/resources/videos/411.wmv
View: http://www.youtube.com/watch?v=pGJy2XNugy8

VL-ID:
=====
411

Status:
========
Published

Exploitation-Technique:
=======================
Offensiv

Severity:
=========
High

Details:
========
The video shows a live exploitation session by...

Dinama SMS Service - Persistent Web Vulnerability research () vulnerability-lab com (Feb 07)
Title:
======
Dinama SMS Service - Persistent Web Vulnerability

Date:
=====
2012-02-05

References:
===========
http://www.vulnerability-lab.com/get_content.php?id=417

VL-ID:
=====
417

Introduction:
=============
Las soluciones de medios interactivos de DINAMA habilitan la comunicación bidireccional entre los
medios y su público o audiencia.

(Copy of the Vendor Homepage:http://www.dinama.com/)

Abstract:
=========
A Vulnerability Lab...

Facebook Game Store - SQL Injection Vulnerability research () vulnerability-lab com (Feb 07)
Title:
======
Facebook Game Store - SQL Injection Vulnerability

Date:
=====
2012-02-04

References:
===========
http://www.vulnerability-lab.com/get_content.php?id=408

VL-ID:
=====
408

Introduction:
=============
The application is currently included and viewable by all facebook users.
The service is an external 3rd party application sponsored by the Facebook Game Store Development Team.

(Copy from the Vendors Homepage:...

eFronts Community++ v3.6.10 - Cross Site Vulnerability research () vulnerability-lab com (Feb 07)
Title:
======
eFronts Community++ v3.6.10 - Cross Site Vulnerability

Date:
=====
2012-02-07

References:
===========
http://www.vulnerability-lab.com/get_content.php?id=423

VL-ID:
=====
423

Introduction:
=============
Tailored with larger organizations in mind, eFront Community ++ offers solutions for the management of companies most
valued asset - the people. Based on a coherent approach to human capital management which keeps the workforce...

VolksBank Online Banking - Multiple Web Vulnerabilities research () vulnerability-lab com (Feb 07)
Title:
======
VolksBank Online Banking - Multiple Web Vulnerabilities

Date:
=====
2012-02-07

References:
===========
http://www.vulnerability-lab.com/get_content.php?id=172

VL-ID:
=====
172

Introduction:
=============
Die Volksbank AG trifft eine Reihe von Sicherheitsvorkehrungen, die einen wirksamen Schutz gegen Angriffe
bei der Übertragung der Daten oder der Verarbeitung auf dem Bankenserver bieten. Treffen auch Sie Vorkehrungen
zum...

Re: Exploit Pack - Hacking Microsoft Word and Excel Valdis . Kletnieks (Feb 07)
On Mon, 06 Feb 2012 05:40:52 MST, ctruncer () christophertruncer com said:

procmail is your friend.

Re: Exploit Pack - Hacking Microsoft Word and Excel Samuel Hassine (Feb 07)
Please stop spam!

Le 06/02/2012 04:25, noreply () exploitpack com a écrit :

Re: Exploit Pack - Hacking Microsoft Word and Excel Julius Kivimäki (Feb 07)
And down goes exploitpack.com

2012/2/6 <ctruncer () christophertruncer com>

More Lists

Dozens of other network security lists are archived at SecLists.Org.