Home page logo

fulldisclosure logo Full Disclosure mailing list archives

Re: Secret Vulns: Places of confusion
From: Michael Rutledge <michael4447 () gmail com>
Date: Sat, 20 Nov 2004 15:38:55 -0600

Correct me if I'm wrong (which I know the list members will take me up
on that), the FD mailing list is about *discussing* vulnerabilities
and revealing important information to the community.  This post seems
to comment on general problems with general products--so general in
fact that the products or specific problems are not addressed.  If you
cannot or will not (for privacy issues) share any details about your
findings, I believe that the posted findings are quite useless to the
community.  I mean this in a constructive sense.

However, if some of the other community members feel that this post is
informative in some way, I will gladly hear their reasoning.


On Sat, 20 Nov 2004 20:11:40 -0000 (GMT), gp <girl () catholic org> wrote:
hello list

Sometimes ago I have examined the websites of many
Government's if it's possible to put malicious code
in their URLs. In November 2004 I inform some
Deparments about my successful work.

On most Sites it is possible to:
- inject SQL
- account hijacking
- user exploitation
- server manipulation
- read complete dir
ect. ect.

In Arrangement with the Victims I will not reveal
vulnerability or victim details until a fix became
published. I will answer no questions!
This is only for Your information!

d.w., ms, [...]

g () cat online <-> MM
.//sometimes its better to know somewhat as all but at later times would
be better to know nothing

This email was sent using FREE Catholic Online Webmail!

Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]