382 messages starting Apr 15 12 and ending Apr 24 12 Date index | Thread index | Author index
Re: Most Linux distributions don't use tmpfs nor encrypt swap by default _ (Apr 15)
Re(2): An April Fools' Day Android Payload アドリアンヘンドリック (Apr 02) Re(3): An April Fools' Day Android Payload アドリアンヘンドリック (Apr 02)
[CVE-2012-1574] Apache Hadoop user impersonation vulnerability Aaron T. Myers (Apr 06)
[Announcement] CHMag's Issue 27, April 2012 Released Abhijeet Patil (Apr 18)
ACROS Blog: Adobe Reader X (10.1.2) msiexec.exe Planting ACROS Security Lists (Apr 11)
Re: Windows XP denial of service 0day found in CTF exercise adam (Apr 17)
Hacking AutoUpdate by Injecting Fake Updates Adam Behnke (Apr 03) SQL Injection through HTTP Headers Adam Behnke (Apr 04) Backtrack 5 R2 priv escalation 0day found in CTF exercise Adam Behnke (Apr 11) Erronous post concerning Backtrack 5 R2 0day Adam Behnke (Apr 12) Windows XP denial of service 0day found in CTF exercise Adam Behnke (Apr 17) Hacking WolframAlpha Adam Behnke (Apr 24)
Apache 2.2.xx 0day exploit Adam Zabrocki (Apr 02)
.NET Framework EncoderParameter integer overflow vulnerability Akita Software Security (Apr 23)
Re: phpMyBible 0.5.1 Mutiple XSS Alex Buie (Apr 23) Re: Fwd: Vulnerability research and exploit writing Alex Buie (Apr 25)
March 2012 mini Threat Intelligence report Almaz (Apr 01)
Re: Re(2): An April Fools' Day Android Payload Andrew Farmer (Apr 02)
AST-2012-004: Asterisk Manager User Unauthorized Shell Access Asterisk Security Team (Apr 23) AST-2012-005: Heap Buffer Overflow in Skinny Channel Driver Asterisk Security Team (Apr 23) AST-2012-006: Remote Crash Vulnerability in SIP Channel Driver Asterisk Security Team (Apr 23)
Re: incorrect integer conversions in OpenSSL can result in memory corruption. Benjamin Kreuter (Apr 19)
Re: Compromised VPN provider out there? Benji (Apr 10) Re: Erronous post concerning Backtrack 5 R2 0day Benji (Apr 12) Re: Vulnerability in Gentoo hardened Benji (Apr 25) Re: Vulnerability in Gentoo hardened Benji (Apr 25) Re: Vulnerability in Gentoo hardened Benji (Apr 25) Re: Vulnerability in Gentoo hardened Benji (Apr 25)
Re: phpMyBible 0.5.1 Mutiple XSS BMF (Apr 23) Re: phpMyBible 0.5.1 Mutiple XSS BMF (Apr 23)
Re: We're now paying up to $20, 000 for web vulns in our services Bob McConnell (Apr 27)
LibreOffice 3.5.2.2 - memory corruption with a specific .rtf file Carlo Di Dato (Apr 18) SumatraPDF v2.0.1 chm and mobi files memory corruption Carlo Di Dato (Apr 23) Mobipocket Reader version 6.2 Build 608 Buffer Overflow Carlo Di Dato (Apr 23) BeyondCHM 1.1 Buffer Overflow Carlo Di Dato (Apr 24)
Re: mac trojan Carl \"Thomas\" Guething (Apr 06)
Ruxcon 2012 Call For Papers cfp (Apr 19)
Sagan 0.2.1 [Security Event/Log Analyzer] Released. Champ Clark III (Apr 05)
Re: Hacking AutoUpdate by Injecting Fake Updates Charles Morris (Apr 04) Re: We're now paying up to $20, 000 for web vulns in our services Charles Morris (Apr 24)
Re: [funsec] mac trojan Charlie Derr (Apr 06) Re: We're now paying up to $20, 000 for web vulns in our services Charlie Derr (Apr 27)
Re: DoS vulnerability in WordPress Christian Sciberras (Apr 20)
Cisco Security Advisory: Buffer Overflow Vulnerabilities in the Cisco WebEx Player Cisco Systems Product Security Incident Response Team (Apr 04)
Re: (no subject) coderman (Apr 25)
WordPress BruteForce Script CorryL (Apr 29)
Last Mile, April 20 || CfP: SECURWARE 2012 || August 19-24, 2012 - Rome, Italy Cristina Pascual (Apr 12)
An April Fools' Day Android Payload Dan Rosenberg (Apr 01) Re: An April Fools' Day Android Payload Dan Rosenberg (Apr 02)
Re: www.LEORAT.com is scam Dave (Apr 02) Re: www.LEORAT.com is scam Dave (Apr 02) Re: www.LEORAT.com is scam Dave (Apr 04) Re: PenTest Market is for FREE Now Dave (Apr 06) Re: new law proposal on EU against hacking tools and practices Dave (Apr 09)
Re: Joomla! Plugin - Beatz 1.x <= Multiple Cross Site Scripting Vulnerabilities David3 Gonnella (Apr 16) Re: Vulnerability in Backtrack David3 Gonnella (Apr 24)
DDIVRT-2012-40 PacketVideo TwonkyServer and TwonkyMedia Directory Traversal ddivulnalert (Apr 27) DDIVRT-2012-41 ACTi Web Configurator cgi-bin Directory Traversal ddivulnalert (Apr 27)
Re: mac trojan Dennis (Apr 05)
Re: Vulnerability in Backtrack Disposable (Apr 25)
Re: Attacking Critical Internet Infrastructure Dobbins, Roland (Apr 22)
Re: incorrect integer conversions in OpenSSL can result in memory corruption. Douglas Huff (Apr 20)
Re: Windows XP denial of service 0day found in CTF exercise Elazar Broad (Apr 17) Re: Fwd: Vulnerability research and exploit writing Elazar Broad (Apr 24)
Re: FSA2012-1 and FSA2012-2: Chocolate easter egss vulnerable to egg white injection and usable as trojan horses. fabrice (Apr 07)
Drop box Fatherlaptop (Apr 06)
Re: Most Linux distributions don't use tmpfs nor encrypt swap by default Feighen Oosterbroek (Apr 13)
Fwd: Vulnerability research and exploit writing Ferenc Kovacs (Apr 24)
CVE-2012-0769, the case of the perfect info leak Fermín J . Serna (Apr 09)
Slides for "Recent Advances in IPv6 Security" at Hackito Ergo Sum 2012 Fernando Gont (Apr 14) IPv6 host scanning in IPv6 Fernando Gont (Apr 20) New IETF I-D: Security Implications of IPv6 on IPv4 networks Fernando Gont (Apr 24)
Sourcefire Defense Center - multiple vulnerabilities. Filip Palian (Apr 04)
Attacking Critical Internet Infrastructure fireball9 (Apr 22)
[MATTA-2012-001] CVE-2012-1301; 0day; Open Proxy vulnerability in Umbraco 4.7 Florent Daigniere (Apr 05)
[SECURITY] [DSA 2459-1] quagga security update Florian Weimer (Apr 26)
Re: Full-Disclosure Digest, Vol 86, Issue 34 Gabriel S. Craciun (Apr 26)
Re: Working to get more people to check if their infected with DNS Changer Gage Bystrom (Apr 04) Re: keeping data safe offline Gage Bystrom (Apr 10) Re: nullsec-bypass-aslr.pdf - ASLR / ASLR bypass techniques Gage Bystrom (Apr 15) Re: Vulnerability in Backtrack Gage Bystrom (Apr 24) Re: Vulnerability in Backtrack Gage Bystrom (Apr 24)
So, so you think you can tell April 1 joke from a 0day? Georgi Guninski (Apr 01) Re: We're now paying up to $20, 000 for web vulns in our services Georgi Guninski (Apr 25) Re: Vulnerability in Gentoo hardened Georgi Guninski (Apr 25) Re: Vulnerability in Gentoo hardened Georgi Guninski (Apr 25)
Re: Most Linux distributions don't use tmpfs nor encrypt swap by default Grandma Eubanks (Apr 12)
[HITB-Announce] HITB Magazine Issue 008 (now with print edition!) Hafez Kamal (Apr 23)
Re: PenTest is one year old now Henri Salo (Apr 20)
Last public release HI-TECH . (Apr 04)
FW: (no subject) imipak (Apr 25)
Re: Brute Force vulnerability in WordPress InterN0T Advisories (Apr 04) Re: Backtrack 5 R2 priv escalation 0day found in CTF exercise InterN0T Advisories (Apr 12) DoS vulnerability in MustLive InterN0T Advisories (Apr 16) Re: DoS vulnerabilities in Firefox, Internet Explorer and Opera InterN0T Advisories (Apr 30)
[CVE-2012-1622] Apache OFBiz information disclosure vulnerability Jacopo Cappellato (Apr 16) [CVE-2012-1621] Apache OFBiz information disclosure vulnerability Jacopo Cappellato (Apr 16)
Re: Fwd: Vulnerability research and exploit writing James Condron (Apr 25) Re: Vulnerability in Backtrack James Condron (Apr 25)
Re: Thor's Private Key Jason Hellenthal (Apr 09) Re: HTC IQRD Android Permission Leakage (CVE-2012-2217) Jason Hellenthal (Apr 22) Re: phpMyBible 0.5.1 Mutiple XSS Jason Hellenthal (Apr 23)
Re: DoS vulnerability in WordPress Javier Reoyo (Apr 17)
RuggedCom - Backdoor Accounts in my SCADA network? You don't say... jc (Apr 24)
Re: STEP Security Jeff Kell (Apr 02)
Re: mac trojan Jeffrey Walton (Apr 05) Re: incorrect integer conversions in OpenSSL can result in memory corruption. Jeffrey Walton (Apr 21) Re: incorrect integer conversions in OpenSSL can result in memory corruption. Jeffrey Walton (Apr 22) Re: HTC IQRD Android Permission Leakage (CVE-2012-2217) Jeffrey Walton (Apr 22) Re: phpMyBible 0.5.1 Mutiple XSS Jeffrey Walton (Apr 23)
Re: [New tool] - Exploit Pack - Web Security Jerome Athias (Apr 24) Opcodes Database Revival Jerome Athias (Apr 24) MoroccoTel Box Default Open Telnet Password Jerome Athias (Apr 25) CWEs translation Jerome Athias (Apr 30) XSS in UMP-Sarkozy mailer system Jerome Athias (Apr 30)
Re: We're now paying up to $20, 000 for web vulns in our services Jim Harrison (Apr 24) Re: We're now paying up to $20, 000 for web vulns in our services Jim Harrison (Apr 25) Re: We're now paying up to $20, 000 for web vulns in our services Jim Harrison (Apr 26)
List Charter John Cartwright (Apr 10)
Re: PenTest Market is for FREE Now John Jacobs (Apr 06)
[SECURITY] [DSA 2448-1] inspircd security update Jonathan Wiltshire (Apr 10)
Re: Most Linux distributions don't use tmpfs nor encrypt swap by default Jon Dowland (Apr 19)
STEP Security J. Oquendo (Apr 01)
[Tool] New release of peepdf (PDF analysis) Jose Miguel Esparza (Apr 02)
The history of a -probably- 13 years old Oracle bug: TNS Poison Joxean Koret (Apr 18) Oracle TNS Poison vulnerability is actually a 0day with no patch available Joxean Koret (Apr 26)
Re: Windows XP denial of service 0day found in CTF exercise Justin C. Klein Keane (Apr 17)
FSA2012-1 and FSA2012-2: Chocolate easter egss vulnerable to egg white injection and usable as trojan horses. klondike (Apr 07) XSS parameter injection in the search field of http://chicasdetorbe.com klondike (Apr 21) Vulnerability in Gentoo hardened klondike (Apr 24)
PenTest Market is for FREE Now Krzysztof Marczyk (Apr 06) 10 Ways to Enhance Your Career in Information Security Krzysztof Marczyk (Apr 18) PenTest is one year old now Krzysztof Marczyk (Apr 20)
Re: DoS vulnerability in WordPress Kurt Seifried (Apr 17)
Re: phpMyBible 0.5.1 Mutiple XSS Laurelai (Apr 23) Re: phpMyBible 0.5.1 Mutiple XSS Laurelai (Apr 23) Re: Vulnerability in Gentoo hardened Laurelai (Apr 25) Re: Vulnerability in Gentoo hardened Laurelai (Apr 25) Re: Vulnerability in Gentoo hardened Laurelai (Apr 25) Re: Vulnerability in Gentoo hardened Laurelai (Apr 25) Re: Vulnerability in Gentoo hardened Laurelai (Apr 25) Re: Vulnerability in Gentoo hardened Laurelai (Apr 25)
nullsec-bypass-aslr.pdf - ASLR / ASLR bypass techniques Levent Kayan (Apr 15)
Re: Hacking WolframAlpha Lincoln Anderson (Apr 25)
Weak password reset token & code exec in ownCloud 3.0.0 luks (Apr 20)
DC4420 - London DEFCON - April meet - Tuesday April 24th 2012 Major Malfunction (Apr 20)
PHP Denial of Service - Memory leak in getimagesize(). Manu (Apr 29)
Re: We're now paying up to $20, 000 for web vulns in our services Marcio B. Jr. (Apr 27)
Re: [New tool] - Exploit Pack - Web Security Mario Vilas (Apr 24) Re: [New tool] - Exploit Pack - Web Security Mario Vilas (Apr 26)
OpenSSL Security Advisory Mark J Cox (Apr 24)
Most Linux distributions don't use tmpfs nor encrypt swap by default Mark Krenz (Apr 12) Re: Most Linux distributions don't use tmpfs nor encrypt swap by default Mark Krenz (Apr 13) Re: Most Linux distributions don't use tmpfs nor encrypt swap by default Mark Krenz (Apr 17)
'phpPaleo' Local File Inclusion (CVE-2012-1671) Mark Stanislav (Apr 04) 'e-ticketing' SQL Injection (CVE-2012-1673) Mark Stanislav (Apr 04) 'Hotel Booking Portal' SQL Injection (CVE-2012-1672) Mark Stanislav (Apr 04)
Re: phpMyBible 0.5.1 Mutiple XSS Martin Allert (Apr 26)
Re: STEP Security Memory Vandal (Apr 01) Re: Windows XP denial of service 0day found in CTF exercise Memory Vandal (Apr 17) Re: Windows XP denial of service 0day found in CTF exercise Memory Vandal (Apr 17)
Invitation to connect on LinkedIn Mezgani Ali via LinkedIn (Apr 14)
[Tool] Introducing plown: security scanner for Plone CMS mgogoulos (Apr 24)
Re: FW: (no subject) Michael Wood (Apr 25)
FYI: We're now paying up to $20, 000 for web vulns in our services Michal Zalewski (Apr 23) Re: We're now paying up to $20, 000 for web vulns in our services Michal Zalewski (Apr 24) Re: We're now paying up to $20, 000 for web vulns in our services Michal Zalewski (Apr 24) Re: Fwd: Vulnerability research and exploit writing Michal Zalewski (Apr 24)
Re: [New tool] - Exploit Pack - Web Security Michele Orru (Apr 24) Re: [New tool] - Exploit Pack - Web Security Michele Orru (Apr 26)
Re: Windows XP denial of service 0day found in CTF exercise Mihamina Rakotomandimby (Apr 17)
Re: Vulnerability in Gentoo hardened Milan Berger (Apr 24)
[SECURITY] [DSA 2446-1] libpng security update Moritz Muehlenhoff (Apr 04) [SECURITY] [DSA 2447-1] tiff security update Moritz Muehlenhoff (Apr 04) [SECURITY] [DSA 2456-1] dropbear security update Moritz Muehlenhoff (Apr 24) [SECURITY] [DSA 2457-1] iceweasel security update Moritz Muehlenhoff (Apr 24) [SECURITY] [DSA 2548-1] iceape security update Moritz Muehlenhoff (Apr 24) [SECURITY] [DSA 2460-1] asterisk security update Moritz Muehlenhoff (Apr 25) [SECURITY] [DSA 2461-1] spip security update Moritz Muehlenhoff (Apr 26) [SECURITY] [DSA 2462-1] imagemagick security update Moritz Muehlenhoff (Apr 29)
nullcon Delhi 2012 Call for Paper/Call for Event murtuja bharmal (Apr 28)
Re: Brute Force vulnerability in WordPress MustLive (Apr 04) DoS vulnerability in WordPress MustLive (Apr 15) Re: DoS vulnerability in WordPress MustLive (Apr 20) XSS and FPD vulnerabilities in Organizer for WordPress MustLive (Apr 22) XSS, CSRF and AFU vulnerabilities in Organizer for WordPress MustLive (Apr 25) IA, CSRF and FPD vulnerabilities in Organizer for WordPress MustLive (Apr 26) DoS vulnerabilities in Firefox, Internet Explorer and Opera MustLive (Apr 30)
Dolibarr ERP & CRM OS Command Injection Nahuel Grisolia (Apr 06)
XSS and Blind SQL Injection Vulnerabilities in ExponentCMS Netsparker Advisories (Apr 23)
Re: STEP Security Nick FitzGerald (Apr 01)
[SECURITY] [DSA 2449-1] sqlalchemy security update Nico Golde (Apr 12) [SECURITY] [DSA 2451-1] puppet security update Nico Golde (Apr 13) [SECURITY] [DSA 2453-1] gajim security update Nico Golde (Apr 16) [SECURITY] [DSA 2453-2] gajim regression Nico Golde (Apr 19) [SECURITY] [DSA 2455-1] typo3-src security update Nico Golde (Apr 20)
Hack Cup 2012 Nicolas Waisman (Apr 18)
Teensy USB HID (and Kautilya) for Penetration Testers Nikhil Mittal (Apr 05) Teensy USB HID (and Kautilya) for Penetration Testers - Part 2 - Basics of Arduino and Hello World Nikhil Mittal (Apr 09)
Re: Compromised VPN provider out there? nix (Apr 10)
[New tool] - Exploit Pack - Web Security noreply () exploitpack com (Apr 24)
hi Patrick Klos (Apr 13)
Mathematica8.0.4 on Linux /tmp/MathLink vulnerability paul . szabo (Apr 14) Re: Mathematica8.0.4 on Linux /tmp/MathLink vulnerability paul . szabo (Apr 16)
Re: Most Linux distributions don't use tmpfs nor encrypt swap by default Pedro Martelletto (Apr 16)
Mind Control Security Awareness Pete Herzog (Apr 04)
CIntruder v0.1 psy (Apr 09) new law proposal on EU against hacking tools and practices psy (Apr 09) CIntruder v0.2 released psy (Apr 26)
winAUTOPWN v3.0 Released QUAKER DOOMER (Apr 17)
Re: WordPress BruteForce Script R00T_ATI (Apr 29)
Re: We're now paying up to $20, 000 for web vulns in our services Ramon de C Valle (Apr 24)
(no subject) Ramon Driessen (Apr 25)
Re: FSA2012-1 and FSA2012-2: Chocolate easter egss vulnerable to egg white injection and usable as trojan horses. rancor (Apr 07)
mac trojan RandallM (Apr 05)
Patrick Belcher Rand Flieger (Apr 12)
[SECURITY] [DSA 2454-1] openssl security update Raphael Geissert (Apr 20) [SECURITY] [DSA 2454-2] openssl incomplete fix Raphael Geissert (Apr 25)
Flatnux CMS 2011 08.09.2 - Multiple Web Vulnerabilities Research (Apr 01) ME Firewall Analyzer v7.2 - Cross Site Vulnerabilities Research (Apr 01) Swedish Army Web Database - SQL Injection Vulnerability Research (Apr 01) HITB2011KUL - Skype Vulnerabilities 0Day Exploitation PART 1 Research (Apr 01) BulletProof FTP Client 2010 - Buffer Overflow Vulnerability Research (Apr 02) DirectAdmin v1.403 - Cross Site Scripting Vulnerability Research (Apr 02) SmartJobBoard v3.4 b5140 - Multiple Web Vulnerabilites Research (Apr 04) Astaro Command Center v2.x - Multiple Web Vulnerabilities Research (Apr 04) AnvSoft Any Video Converter 4.3.6 - Multiple Buffer Overflow Vulnerabilities Research (Apr 08) idev Game Site CMS v1.0 - Multiple Web Vulnerabilites Research (Apr 08) osCmax Shop CMS v2.5.1 - Multiple Web Vulnerabilities Research (Apr 08) CsForum v0.8 - Cross Site Scripting Vulnerability Research (Apr 08) Astaro Command Center v2.x - Multiple Web Vulnerabilities Research (Apr 08) Astaro Security Gateway v7.504 - Multiple Web Vulnerabilities Research (Apr 08) US UF Services EDU Health - File Include Vulnerability Research (Apr 08) Microsoft MSDN - Persistent Web Service Vulnerability Research (Apr 09) Matterdaddy Market v1.1 - SQL Injection Vulnerabilities Research (Apr 10) National Center EDU Research - SQL Injection Vulnerability Research (Apr 10) GroupWare epesiBIM CRM 1.2.1 - Multiple Web Vulnerabilities Research (Apr 10) National Center EDU Research - SQL Injection Vulnerability Research (Apr 11) DHTMLX Suite v.3.0 - Multiple Web Vulnerabilities Research (Apr 12) Netjuke 1.0 RC1 - SQL Injection Vulnerabilities Research (Apr 12) Oracle Service Applications - SQL Injection Vulnerabilities Research (Apr 12) CRUNCH TV SHOW - Live Stream & Security Videos Research (Apr 12) Crystal Office Suite v1.43 - Buffer Overflow Vulnerability Research (Apr 12) ACC PHP eMail v1.1 - Multiple Web Vulnerabilites Research (Apr 15) EmbryoCore CMS v1.03 - Multiple Web Vulnerabilities Research (Apr 15) Microsoft Service - Persistent Web Vulnerabilities Research (Apr 15) K-Meleon Browser v1.5.4 - Denial of Service Vulnerability Research (Apr 15) EmbryoCore CMS v1.03 - Multiple Web Vulnerabilities Research (Apr 15) Microsoft AFKAR Website Service - Cross Site Vulnerabilities Research (Apr 15) Siche Search v.0.5 Zerboard - Multiple Web Vulnerabilities Research (Apr 15) Cyberoam UTM v10.01.2 build 059 - File Include Vulnerabilities Research (Apr 15) IPhone TreasonSMS - HTML Inject & File Include Vulnerability Research (Apr 23) Havalite CMS v1.0.4 - Multiple Web Vulnerabilities Research (Apr 23) PSFTP v.1.8 Build 921 - Null Pointer (DoS) Vulnerability Research (Apr 23) Chengdu Bureau of Commerce - SQL Injection Vulnerability Research (Apr 23) Cross Site Scripting - Exploitation & Penetration Strings Research (Apr 24) Microsoft MSN Hotmail - Password Reset & Setup Vulnerability Research (Apr 26) DirectAdmin v1.403 - Multiple Cross Site Vulnerabilities Research (Apr 27) DIY CMS v1.0 Poll - Multiple Web Vulnerabilities Research (Apr 27) Car Portal CMS v3.0 - Multiple Web Vulnerabilities Research (Apr 27) C4B XPhone UC Web 4.1.890S R1 - Cross Site Vulnerability Research (Apr 27) Opial CMS v2.0 - Multiple Web Vulnerabilities Research (Apr 29) C4B XPhone UC Web 4.1.890S R1 - Cross Site Vulnerability Research (Apr 29) China Pujia Government - Blind SQL Injection Vulnerability Research (Apr 29) China Pujiang Government - Blind SQL Injection Vulnerability Research (Apr 29) Croogo v1.3.4 CMS - Multiple Web Vulnerabilities Research (Apr 29) Pritlog v0.821 CMS - Multiple Web Vulnerabilities Research (Apr 30)
Re: [Announcement] CHMag's Issue 27, April 2012 Released Robert Kim App and Facebook Marketing (Apr 19)
Re: Windows XP denial of service 0day found in CTF exercise Romain Bourdy (Apr 17)
Re: Amongst data breaches and misc 'leakage', not necessarily digital, DEFCON CTF continues at DEFCON XX Roman Medina-Heigl Hernandez (Apr 13)
[Spanish] - Exploit Pack - Web Security Framework runlvl (Apr 13) [New Tool] - Exploit Pack - Web Security runlvl (Apr 23) [New tool] - Exploit Pack - Web Security runlvl (Apr 23) [Exploit Pack] - Web Security -Webinar Live demo! runlvl (Apr 27)
Re: Erronous post concerning Backtrack 5 R2 0day Ryan Dewhurst (Apr 13)
Re: www.LEORAT.com is scam Sanguinarious Rose (Apr 02) Re: Brute Force vulnerability in WordPress Sanguinarious Rose (Apr 04)
Re: incorrect integer conversions in OpenSSL can result in memory corruption. sd (Apr 24)
Re: www.LEORAT.com is scam Sebastian Rakowski (Apr 04) Re: www.LEORAT.com is scam Sebastian Rakowski (Apr 04)
SEC Consult whitepaper :: The Source Is A Lie SEC Consult Vulnerability Lab (Apr 17)
Secunia Research: RealNetworks Helix Server Credentials Disclosure Security Issue Secunia Research (Apr 09) Secunia Research: Helix Server SNMP Master Agent Service Two Denial of Service Vulnerabilities Secunia Research (Apr 09)
[ MDVSA-2012:046 ] libpng security (Apr 02) [ MDVSA-2012:047 ] freeradius security (Apr 02) [ MDVSA-2012:048 ] mutt security (Apr 02) [ MDVSA-2012:049 ] nagios security (Apr 02) [ MDVSA-2012:050 ] phpmyadmin security (Apr 03) [ MDVSA-2012:051 ] libvorbis security (Apr 03) [ MDVSA-2012:052 ] libvorbis security (Apr 03) [ MDVSA-2012:053 ] ocsinventory security (Apr 04) [ MDVSA-2012:054 ] libtiff security (Apr 05) [ MDVSA-2012:055 ] samba security (Apr 11) [ MDVSA-2012:056 ] rpm security (Apr 12) [ MDVSA-2012:057 ] freetype2 security (Apr 12) [ MDVSA-2012:058 ] curl security (Apr 13) [ MDVSA-2012:059 ] python-sqlalchemy security (Apr 16) [ MDVSA-2012:032-1 ] mozilla security (Apr 17) [ MDVSA-2012:060 ] openssl security (Apr 19) [ MDVSA-2012:061 ] raptor security (Apr 21) [ MDVSA-2012:062 ] openoffice.org security (Apr 21) [ MDVSA-2012:063 ] libreoffice security (Apr 21) [ MDVSA-2012:064 ] openssl0.9.8 security (Apr 24) [ MDVSA-2012:065 ] php security (Apr 27) [ MDVSA-2012:066 ] mozilla security (Apr 27)
[SE-2012-01] Security vulnerabilities in Java SE Security Explorations (Apr 04) [SE-2012-01] Security weakness in Apple Quicktime Java extensions Security Explorations (Apr 12)
[Security-news] SA-CONTRIB-2012-056 - Janrain Engage - Sensitive Data Protection Vulnerability security-news (Apr 04) [Security-news] SA-CONTRIB-2012-057 - Printer, email and PDF versions - Cross Site Scripting (XSS) security-news (Apr 04) [Security-news] SA-CONTRIB-2012-058 - Fivestar - Input Validation security-news (Apr 11) [Security-news] SA-CONTRIB-2012-059 - Autosave - Cross Site Scripting security-news (Apr 11) [Security-news] SA-CONTRIB-2012-060 - Commerce Reorder - Cross Site Request Forgery security-news (Apr 18) [Security-news] SA-CONTRIB-2012-061 - Gigya - Social optimization - Cross Site Scripting (XSS) security-news (Apr 18) [Security-news] SA-CONTRIB-2012-062 - Creative Commons - Cross Site Scripting (XSS) security-news (Apr 25) [Security-news] SA-CONTRIB-2012-063 - RealName - Cross Site Scripting (XSS) security-news (Apr 25) [Security-news] SA-CONTRIB-2012-064 - Ubercart - Multiple vulnerabilities security-news (Apr 25) Re: [Security-news] SA-CONTRIB-2012-063 - RealName - Cross Site Scripting (XSS) security-news (Apr 25) [Security-news] SA-CONTRIB-2012-065 - Sitedoc - Information disclosure security-news (Apr 25) [Security-news] SA-CONTRIB-2012-066 - Spaces and Spaces OG - Access Bypass security-news (Apr 25) [Security-news] SA-CONTRIB-2012-067 - Linkit - Access bypass security-news (Apr 25)
Re: Vulnerability in Backtrack Sergio Arcos (Apr 24)
Shakacon CFP - Extended Deadline: April 13, 2012 Shakacon (Apr 06)
TeamSHATTER Security Advisory: Privilege escalation via internal sql injection in RESTORE DATABASE command Shatter (Apr 11) Incomplete protection of Oracle Database locked accounts (CVE-2012-0510) Shatter (Apr 19) Some failed authentication attempts using OCIPasswordChange API are not recorded (CVE-2012-0511) Shatter (Apr 19) SQL Injection in Oracle Enterprise Manager (compareWizFirstConfig web page) (CVE-2012-0512) Shatter (Apr 19) SQL Injection in Oracle Enterprise Manager (searchPage web page) (CVE-2012-0525) Shatter (Apr 19) HTTP Response Splitting in Oracle Enterprise Manager (prevPage parameter) (CVE-2012-0526) Shatter (Apr 19) HTTP Response Splitting in Oracle Enterprise Manager (pageName parameter) (CVE-2012-0527) Shatter (Apr 19) Oracle Enterprise Manager vulnerable to Session fixation (CVE-2012-0528) Shatter (Apr 19) OCIPasswordChange API leaks information of password hash (CVE-2012-0511) Shatter (Apr 19)
www.LEORAT.com is scam smith joseph (Apr 02)
[SECURITY] [DSA 2452-1] apache2 security update Stefan Fritsch (Apr 16)
44Con London 2012 CFP - September 5th - 7th Steve (Apr 10)
incorrect integer conversions in OpenSSL can result in memory corruption. Tavis Ormandy (Apr 19)
Re: Windows XP denial of service 0day found in CTF exercise Terrence (Apr 17) Re: phpMyBible 0.5.1 Mutiple XSS Terrence (Apr 23)
[SECURITY] [DSA 2450-1] samba security update Thijs Kinkhorst (Apr 12)
Re: PHP Gift Registry 1.5.5 SQL Injection Thomas Richards (Apr 16) phpMyBible 0.5.1 Mutiple XSS Thomas Richards (Apr 22)
Re: www.LEORAT.com is scam Thor (Hammer of God) (Apr 02) Thor's Private Key Thor (Hammer of God) (Apr 08) Re: Thor's Private Key Thor (Hammer of God) (Apr 09) Re: phpMyBible 0.5.1 Mutiple XSS Thor (Hammer of God) (Apr 22) Re: phpMyBible 0.5.1 Mutiple XSS Thor (Hammer of God) (Apr 23) Re: Vulnerability in Gentoo hardened Thor (Hammer of God) (Apr 24)
Re: CIntruder v0.1 Travis Biehn (Apr 09) Re: new law proposal on EU against hacking tools and practices Travis Biehn (Apr 09)
TWSL2012-008: Multiple Vulnerabilities in Scrutinizer NetFlow & sFlow Analyzer Trustwave Advisories (Apr 12)
Re: Backtrack 5 R2 priv escalation 0day found in CTF exercise Urlan (Apr 12) Re: Vulnerability in Backtrack Urlan (Apr 24)
Re: www.LEORAT.com is scam Valdis . Kletnieks (Apr 02) Re: Working to get more people to check if their infected with DNS Changer Valdis . Kletnieks (Apr 04) Re: new law proposal on EU against hacking tools and practices Valdis . Kletnieks (Apr 09) Re: new law proposal on EU against hacking tools and practices Valdis . Kletnieks (Apr 09) Re: new law proposal on EU against hacking tools and practices Valdis . Kletnieks (Apr 09) Re: Windows XP denial of service 0day found in CTF exercise Valdis . Kletnieks (Apr 17) Re: phpMyBible 0.5.1 Mutiple XSS Valdis . Kletnieks (Apr 23) Re: Vulnerability in Gentoo hardened Valdis . Kletnieks (Apr 24) Re: DoS vulnerabilities in Firefox, Internet Explorer and Opera Valdis . Kletnieks (Apr 30)
Re: Mathematica8.0.4 on Linux /tmp/MathLink vulnerability Vikram Dhillon (Apr 17)
VMSA-2012-0007 VMware hosted products and ESXi/ESX patches address privilege escalation VMware Security Team (Apr 13) VMSA-2012-0008 VMware ESX updates to ESX Service Console VMware Security Team (Apr 27)
HTC IQRD Android Permission Leakage (CVE-2012-2217) VSR Advisories (Apr 22)
Amongst data breaches and misc 'leakage', not necessarily digital, DEFCON CTF continues at DEFCON XX Vulcan DDtek (Apr 02)
Microsoft Incremental Linker Integer Overflow Walied Assar (Apr 24)
FastPath Webchat | Multiple Cross Site Scripting Vulnerabilities YGN Ethical Hacker Group (Apr 16) Joomla! Plugin - Beatz 1.x <= Multiple Cross Site Scripting Vulnerabilities YGN Ethical Hacker Group (Apr 16) Acuity CMS 2.6.x <= Cross Site Scripting YGN Ethical Hacker Group (Apr 17)
FW: iis bug yuange (Apr 01) Re: iis bug yuange (Apr 02)
Re: incorrect integer conversions in OpenSSL can result in memory corruption. Zach C. (Apr 21)
ZDI-12-055 : Webkit.org Webkit copyNonAttributeProperties Remote Code Execution Vulnerability ZDI Disclosures (Apr 09) ZDI-12-056 : Mozilla Firefox nsSVGValue Out-of-Bounds Access Remote Code Execution Vulnerability ZDI Disclosures (Apr 09) ZDI-12-057 : (Pwn2Own) Adobe Flash Player NetStream addBytes Remote Code Execution Vulnerability ZDI Disclosures (Apr 09) ZDI-12-058 : Apple Quicktime PNG Depth Decoding Remote Code Execution Vulnerability ZDI Disclosures (Apr 09) ZDI-12-059 : Mozilla Firefox Ogg Vorbis Decoding Memory Corruption Remote Code Execution Vulnerability ZDI Disclosures (Apr 09) ZDI-12-060 : Oracle Java Runtime readMabCurveData nTblSize Remote Code Execution Vulnerability ZDI Disclosures (Apr 09)
[ZEM560] Vulnerability on Fingerprint & Proximity Access Controller Zerial. (Apr 03)
An April Fools' Day Android Payload ZeroDay.JP (Apr 02)
Vulnerability in Backtrack Григорий Братислава (Apr 24)