428 messages starting Jun 01 12 and ending Jun 30 12 Date index | Thread index | Author index
Re: NSA Cyber security program [ maybe off-topic ] InterN0T Advisories TrueCaller Vulnerability Allows Changing Users Details Kuwait WhiteHat Re: NSA Cyber security program [ maybe off-topic ] Benjamin Kreuter Re: NSA Cyber security program [ maybe off-topic ] Alexander Georgiev Re: NSA Cyber security program [ maybe off-topic ] Urlan
Re: TrueCaller Vulnerability Allows Changing Users Details Thor (Hammer of God)
Unauthorized Digital Certificates Could Allow Spoofing Georgi Guninski Re: [Full Disclosure] Unauthorized Digital Certificates Could Allow Spoofing imipak Re: Unauthorized Digital Certificates Could Allow Spoofing Shreyas Zare Re: TrueCaller Vulnerability Allows Changing Users Details Григорий Братислава Re: Unauthorized Digital Certificates Could Allow Spoofing Juha-Matti Laurio Re: Full-Disclosure Digest, Vol 88, Issue 2 Re: NSA Cyber security program [ maybe off-topic ] Mikhail A. Utin Re: Unauthorized Digital Certificates Could Allow Spoofing Joel Esler Re: [Full Disclosure] Unauthorized Digital Certificates Could Allow Spoofing Georgi Guninski Re: NSA Cyber security program [ maybe off-topic ] Jack Slade [SECURITY] [DSA 2484-1] nut security update Thijs Kinkhorst [SECURITY] [DSA 2481-1] arpwatch security update Yves-Alexis Perez [SECURITY] [DSA 2482-1] arpwatch security update Yves-Alexis Perez [SECURITY] [DSA 2482-1] libgdata security update Yves-Alexis Perez [SECURITY] [DSA 2485-1] imp4 security update Thijs Kinkhorst ISC Security Advisory: Handling of zero length rdata can cause named to terminate, unexpectedly Larissa Shapiro Re: Full-Disclosure Digest, Vol 88, Issue 2 Re: NSA Cyber security program [ maybe off-topic ] Georgi Guninski Obama Order Sped Up Wave of Cyberattacks Against Iran Jeffrey Walton
EUSecWest 2012 - Amsterdam, Sept 19/20 featuring Mobile PWN2OWN - CFP Deadline June 15 Dragos Ruiu Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Joel Esler [ MDVSA-2012:087 ] nut security Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Georgi Guninski Re: TrueCaller Vulnerability Allows Changing Users Details doc mombasa Re: Obama Order Sped Up Wave of Cyberattacks Against Iran valdis . kletnieks Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Peter Dawson Re: TrueCaller Vulnerability Allows Changing Users Details Григорий Братислава Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Peter Dawson Re: Obama Order Sped Up Wave of Cyberattacks Against Iran valdis . kletnieks Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Marcio B. Jr. Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Dave Re: Obama Order Sped Up Wave of Cyberattacks Against Iran valdis . kletnieks Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Marcio B. Jr. [SECURITY] [DSA 2486-1] bind9 security update Florian Weimer
New IETF I-D: (IPv6) "Neighbor Discovery Shield (ND-Shield): Protecting against Neighbor Discovery Attacks" Fernando Gont Re: Full-Disclosure Digest, Vol 88, Issue 2 Re: NSA Cyber security program [ maybe off-topic ] Alexander Georgiev Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Alexander Georgiev Re: Google Accounts Security Vulnerability Kyle Creyts Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Laurelai Re: NSA Cyber security program [ maybe off-topic ] Giles Coochey Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Charles Morris Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Laurelai Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Charles Morris Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Laurelai Vulnerabilities in JW Player and millions of web sites MustLive Re: Obama Order Sped Up Wave of Cyberattacks Against Iran coderman Re: Obama Order Sped Up Wave of Cyberattacks Against Iran coderman Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Peter Dawson Vulnerabilities in OpenBSD and billions is other websites Григорий Братислава [Security-news] SA-CONTRIB-2012-091 - Token Authentication - Access bypass security-news [Security-news] SA-CONTRIB-2012-092 - Organic Groups - Cross Site Scripting (XSS) and Access Bypass security-news Re: TrueCaller Vulnerability Allows Changing Users Details doc mombasa [Security-news] SA-CONTRIB-2012-093 - Node Embed - Access Bypass security-news [Security-news] SA-CONTRIB-2012-094 - Maestro module - Cross Site Request Forgery (CSRF), Cross Site Scripting (XSS) security-news [Security-news] SA-CONTRIB-2012-095 - Simplenews - Information Disclosure security-news [Security-news] SA-CONTRIB-2012-096 - Authoring HTML - Cross Site Scripting (XSS) security-news [Security-news] SA-CONTRIB-2012-097 - Protest - Cross Site Scripting (XSS) security-news ZDI-12-075 : Apple Quicktime RLE Sample Decoding Remote Code Execution Vulnerability ZDI Disclosures ZDI-12-076 : Apple QuickTime MPEG Stream Padding Remote Code Execution Vulnerability ZDI Disclosures ZDI-12-077 : Apple QuickTime QTVR QTVRStringAtom Parsing Remote Code Execution Vulnerability ZDI Disclosures Re: Obama Order Sped Up Wave of Cyberattacks Against Iran valdis . kletnieks ZDI-12-078 : Apple QuickTime SVQ3 Codec mb_skip_run Parsing Remote Code Execution ZDI Disclosures Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Andrew D Kirch ZDI-12-080 : Adobe Flash Player MP4 Stream Decoding Remote Code Execution Vulnerability ZDI Disclosures Re: Obama Order Sped Up Wave of Cyberattacks Against Iran William Warren ZDI-12-081 : Oracle Java GlueGen Arbitrary Native Library Loading Remote Code Execution Vulnerability ZDI Disclosures ZDI-12-082 : Oracle Java OpenGL Arbitrary Native Library Loading Remote Code Execution Vulnerability ZDI Disclosures ZDI-12-083 : Oracle Java OpenAL Library Pointer Manipulation Remote Code Execution Vulnerability ZDI Disclosures ZDI-12-084 : RealNetworks RealPlayer RV10 Encoded Height/Width Remote Code Execution Vulnerability ZDI Disclosures ZDI-12-085 : RealNetworks RealPlayer dmp4 esds Width Remote Code Execution Vulnerability ZDI Disclosures ZDI-12-086 : RealNetworks RealPlayer rvrender RMFF Flags Remote Code Execution Vulnerability ZDI Disclosures ZDI-12-087 : RealNetworks RealPlayer raac.dll stsz Remote Code Execution Vulnerability ZDI Disclosures ZDI-12-088 : HP DataDirect OpenAccess GIOP Opcode 0x0E Remote Code Execution Vulnerability ZDI Disclosures ZDI-12-089 : HP DataDirect OpenAccess GIOP Parsing Remote Code Execution Vulnerability ZDI Disclosures
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Laurelai Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Laurelai Re: Obama Order Sped Up Wave of Cyberattacks Against Iran valdis . kletnieks Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Laurelai Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Laurelai Re: Google Accounts Security Vulnerability Michael J. Gray Re: Google Accounts Security Vulnerability Michael J. Gray ZDI-12-079 : Apple QuickTime H264 Picture Width Parsing Remote Code Execution Vulnerability Zero Day Initiative Re: Obama Order Sped Up Wave of Cyberattacks Against Iran destrudo () d4m4g3d net Re: Vulnerabilities in JW Player and millions of web sites karniv0re Re: TrueCaller Vulnerability Allows Changing Users Details Kuwait WhiteHat Re: TrueCaller Vulnerability Allows Changing Users Details Kuwait WhiteHat Re: TrueCaller Vulnerability Allows Changing Users Details Q8WhiteHat Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Jack Slade Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Laurelai Re: Obama Order Sped Up Wave of Cyberattacks Against Iran valdis . kletnieks Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Laurelai Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Ian Hayes Re: Obama Order Sped Up Wave of Cyberattacks Against Iran valdis . kletnieks Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Laurelai Re: Google Accounts Security Vulnerability Mike Hearn Re: Obama Order Sped Up Wave of Cyberattacks Against Iran doc mombasa Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Laurelai Secunia Research: Network Instruments Observer SNMP OID Processing Denial of Service Secunia Research Secunia Research: Network Instruments Observer SNMP Processing Buffer Overflows Secunia Research CVE-2012-2378 - Apache CXF does not pick up some child policies of WS-SecurityPolicy 1.1 SupportingToken policy assertions on the client side. Colm O hEigeartaigh CVE-2012-2379 - Apache CXF does not verify that elements were signed or encrypted by a particular Supporting Token. Colm O hEigeartaigh Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Benjamin Kreuter Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Ian Hayes Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Laurelai Netto.se arbitrary XSS injection through the redirector. klondike [SECURITY] [DSA 2480-3] request-tracker3.8 regression update Florian Weimer [SECURITY] [DSA 2487-1] openoffice.org security update Florian Weimer
[SECURITY] [DSA 2489-1] iceape security update Thijs Kinkhorst [SECURITY] [DSA 2490-1] nss security update Thijs Kinkhorst [SECURITY] [DSA 2488-1] iceweasel security update Thijs Kinkhorst Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Sardina, Dominick Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Mark Shuler Re: Vulnerabilities in OpenBSD and billions is other websites Julius Kivimäki Analysis: Vast IPv6 address space actually enables IPv6 attacks Fernando Gont Re: Analysis: Vast IPv6 address space actually enables IPv6 attacks Fernando Gont Re: Flame= cyberwar - tech details on sKyWIper BENCSATH Boldizsar Germany reveals secret techie soldier unit, new cyberweapons Georgi Guninski Re: Full-Disclosure Digest, Vol 88, Issue 11: Mikhail A. Utin Re: Obama Order Sped Up Wave of Cyberattacks Against Iran valdis . kletnieks Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Laurelai Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Thor (Hammer of God) Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Peter Dawson Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Григорий Братислава Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Laurelai Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Григорий Братислава Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Григорий Братислава Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Laurelai Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Ian Hayes Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Григорий Братислава Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Ian Hayes Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Laurelai Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Григорий Братислава Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Laurelai Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Laurelai Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Григорий Братислава Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Laurelai Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Григорий Братислава Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Christian Sciberras Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Григорий Братислава Re: Flame= cyberwar - tech details on sKyWIper [Full-Disclosure Digest, Vol 88, Issue 12] SMiller Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Laurelai Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Григорий Братислава Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Laurelai Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Григорий Братислава Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Laurelai Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Ian Hayes Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Laurelai Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Bzzz Re: Obama Order Sped Up Wave of Cyberattacks Against Iran James Condron Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Григорий Братислава Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Laurelai Re: Obama Order Sped Up Wave of Cyberattacks Against Iran valdis . kletnieks Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Ian Hayes Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Laurelai Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Memory Vandal Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Ian Hayes Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Laurelai Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Григорий Братислава ZDI-12-090 : Symantec Web Gateway Shell Command Injection Remote Code Execution Vulnerability ZDI Disclosures Re: Vulnerabilities in JW Player and millions of web sites MustLive ZDI-12-091 : Symantec Web Gateway upload_file Remote Code Execution Vulnerability ZDI Disclosures ZDI-12-092 : RealNetworks RealPlayer QCELP Stream Parsing Remote Code Execution Vulnerability ZDI Disclosures Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Michael Hallgren Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Michael Hallgren
Re: Analysis: Vast IPv6 address space actually enables IPv6 attacks Fernando Gont Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Laurelai Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Georgi Guninski Re: Obama Order Sped Up Wave of Cyberattacks Against Iran phocean Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Jason Hellenthal Re: Obama Order Sped Up Wave of Cyberattacks John Doe List Charter John Cartwright [SECURITY] [DSA 2491-1] postgresql-8.4 security update Florian Weimer Re: Obama Order Sped Up Wave of Cyberattacks Christian Sciberras Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Christian Sciberras Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Christian Sciberras Re: Obama Order Sped Up Wave of Cyberattacks Against Iran phocean [ MDVSA-2012:088 ] mozilla security Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Thor (Hammer of God) Re: Obama Order Sped Up Wave of Cyberattacks Against Iran valdis . kletnieks Re: Obama Order Sped Up Wave of Cyberattacks valdis . kletnieks Re: Obama Order Sped Up Wave of Cyberattacks Thor (Hammer of God) Re: Obama Order Sped Up Wave of Cyberattacks Against Iran John Doe Re: Obama Order Sped Up Wave of Cyberattacks Against Iran John Doe Re: Obama Order Sped Up Wave of Cyberattacks Against Iran John Doe Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Jason Hellenthal IIS 6.0/7.5 Vulnerabilities [moderate risk] - ISOWAREZ BDAY RELEASE king cope Re: Obama Order Sped Up Wave of Cyberattacks Against Iran valdis . kletnieks
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran coderman Re: Obama Order Sped Up Wave of Cyberattacks Against Iran coderman Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Georgi Guninski Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Mark Shuler Re: ZDI-12-088 : HP DataDirect OpenAccess GIOP Opcode 0x0E Remote Code Execution Vulnerability Steve Shockley Re: Obama Order Sped Up Wave of Cyberattacks doc mombasa Re: Obama Order Sped Up Wave of Cyberattacks Against Iran doc mombasa Re: Obama Order Sped Up Wave of Cyberattacks Against Iran doc mombasa Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Laurelai Re: Obama Order Sped Up Wave of Cyberattacks Against Iran doc mombasa Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Laurelai Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Laurelai [ MDVSA-2012:089 ] bind security Re: Obama Order Sped Up Wave of Cyberattacks Against Iran doc mombasa [CVE-2012-3238] Astaro Security Gateway <= v8.304 Persistent Cross-Site Scripting Vulnerability Inshell Security Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Laurelai Some stats about broken Linkedin passwds Georgi Guninski Re: Obama Order Sped Up Wave of Cyberattacks Against Iran valdis . kletnieks [SECURITY] [DSA 2492-1] php5 security update Florian Weimer Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Benjamin Kreuter Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Thor (Hammer of God) Re: Obama Order Sped Up Wave of Cyberattacks Against Iran coderman Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Laurelai Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Benjamin Kreuter Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Laurelai Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Thor (Hammer of God) Re: Obama Order Sped Up Wave of Cyberattacks Against Iran valdis . kletnieks Re: Obama Order Sped Up Wave of Cyberattacks Against Iran coderman Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Ian Hayes Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Laurelai Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Laurelai Re: Obama Order Sped Up Wave of Cyberattacks Against Iran coderman Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Laurelai Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Benji Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Laurelai Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Benji Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Thor (Hammer of God) Re: Obama Order Sped Up Wave of Cyberattacks Against Iran coderman Re: Obama Order Sped Up Wave of Cyberattacks Against Iran valdis . kletnieks Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Ian Hayes Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Benjamin Kreuter Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Laurelai Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Benjamin Kreuter Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Ian Hayes
Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Dan Cross Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Christian Sciberras Re: Obama Order Sped Up Wave of Cyberattacks Against Iran valdis . kletnieks Publication References on Criminalisation of Hacking Tools Needed Pablo Ximenes Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Dan Cross Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Nick FitzGerald Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Thor (Hammer of God) Re: Obama Order Sped Up Wave of Cyberattacks Against Iran Laurelai [MATTA-2012-002] CVE-2012-1493; F5 BIG-IP remote root authentication bypass Vulnerability Florent Daigniere Re: Some stats about broken Linkedin passwds yersinia Re: Publication References on Criminalisation of Hacking Tools Needed Peter Dawson
Vulnerability in Zombie Processes Григорий Братислава Metadata exfiltration Adam Behnke Re: Metadata exfiltration Григорий Братислава Re: Vulnerability in Zombie Processes Charles Morris [SECURITY] [DSA 2493-1] asterisk security update Florian Weimer ZDI-12-093 : (Pwn2Own) Microsoft Internet Explorer Fixed Table Colspan Remote Code Execution Vulnerability ZDI Disclosures
[CAL-2012-0026] Microsfot IE Same ID Property Remote Code Execution Vulnerability Code Audit Labs [CAL-2012-0023]Microsoft IE Developer Toolbar Remote Code Execution Vulnerability Code Audit Labs Is Flame Malware Disclosure Григорий Братислава [SE-2012-01] Regarding Oracle's Critical Patch Update for Java SE Security Explorations Full-Disclosure Fatherlaptop CVE-2012-1661 - ESRI ArcMap arbitrary code execution via crafted map file. Boston Cyber Defense A Chat With The NGR Bot Adam Behnke Re: A Chat With The NGR Bot Alex Buie [Security-news] SA-CONTRIB-2012-098 - Janrain Capture - Open Redirect security-news [Security-news] SA-CONTRIB-2012-099 - Node Hierarchy - Cross Site Request Forgery (CSRF) security-news [Security-news] SA-CONTRIB-2012-100 - SimpleMeta - Cross Site Request Forgery (CSRF) security-news [Security-news] SA-CONTRIB-2012-101 - Protected Node - Access Bypass security-news [Security-news] SA-CONTRIB-2012-102 - Ubercart AJAX Cart - Potential Disclosure of user Session ID security-news [Security-news] SA-CONTRIB-2012-103 - Global Redirect - Open Redirect security-news
VMSA-2012-0011 VMware hosted products and ESXi and ESX patches address security issues VMware Security Team Strange gpg key shadowing Georgi Guninski [CAL-2012-0015] opera website spoof Code Audit Labs [ MDVSA-2012:090 ] openoffice.org security [ MDVSA-2012:091 ] libreoffice security Using second gpg keyring may be misleading? Georgi Guninski Re: Using second gpg keyring may be misleading? Thor (Hammer of God) 0A29-12-1 : Cross-Site Scripting vulnerabilities in Nagios XI < 2011R3.0 0a29 40 AST-2012-009: Skinny Channel Driver Remote Crash Vulnerability Asterisk Security Team [SECURITY] [DSA 2494-1] ffmpeg security update Florian Weimer eSyndiCat Pro v2.4.1 - Multiple Web Vulnerabilities Research Boonex Dolphin v7.0.9 CMS & Mobile App - Multiple Web Vulnerabilities Research QuickBlog v0.8 CMS - Multiple Web Vulnerabilities Research ADICO CMS v1.1 - Blind SQL Injection Vulnerability Research iScripts EasyCreate CMS v2.0 - Multiple Web Vulnerabilites Research Interspire Shopping Cart v6 - Multiple Web Vulnerabilities Research
Squirrelcart Cart Shop v3.3.4 - Multiple Web Vulnerabilities Research Swoopo Gold Shop CMS v8.4.56 - Multiple Web Vulnerabilities Research Simple Forum PHP 2.1 - SQL Injection Vulnerabilities Research Jobs Portal v3.0 NetArtMedia - Multiple Web Vulnerabilites Research Cells Blog CMS v1.1 - Multiple Web Vulnerabilites Research MYRE Real Estate Mobile 2012|2 - Multiple Vulnerabilities Research Nuked Klan SP CMS v4.5 - SQL injection Vulnerability Research ubuntu apt-key (part 3) Georgi Guninski nullcon Delhi 2012 Final call for Paper/Events (extended to 10th July) and First round of speakers nullcon free speech - 9 yro bloggers are dangerous Georgi Guninski [ MDVSA-2012:091 ] libreoffice security Re: Using second gpg keyring may be misleading? Georgi Guninski [ MDVSA-2012:092 ] postgresql security Flame - couldn't resist J. Oquendo [ MDVSA-2012:093 ] php security IObit Protected Folder Authentication Bypass Adam Behnke Re: Using second gpg keyring may be misleading? Thor (Hammer of God) Re: free speech - 9 yro bloggers are dangerous Thor (Hammer of God)
Webify Product Series - Multiple Web Vulnerabilities Research Swoopo Gold Shop CMS v8.4.56 - Multiple Web Vulnerabilities Research [SECURITY] [DSA 2495-1] openconnect security update Moritz Muehlenhoff DT, XSS and FPD vulnerabilities in Organizer for WordPress MustLive
Re: [CAL-2012-0015] opera website spoof Code Audit Labs QNAP Turbo NAS Multiple Vulnerabilities - Security Advisory Lists
Squiz CMS Multiple Vulnerabilities - Security Advisory - SOS-12-007 Lists [ MDVSA-2012:094 ] clamav security [ MDVSA-2012:095 ] java-1.6.0-openjdk security SEC Consult SA-20120618-0 :: Western Digital ShareSpace WEB GUI Sensitive Data Disclosure SEC Consult Vulnerability Lab SEC Consult SA-20120618-1 :: Airlock WAF overlong UTF-8 sequence bypass SEC Consult Vulnerability Lab DC4420 - London DEFCON - June meet - Tuesday June 19th 2012 Major Malfunction [SECURITY] [DSA 2496-1] mysql-5.1 security update Thijs Kinkhorst
Re: www.LEORAT.com is scam Fyodor Re: www.LEORAT.com is scam coderman DDIVRT-2012-45 SolarWinds Network Performance Monitor Blind SQL Injection ddivulnalert Re: www.LEORAT.com is scam Thor (Hammer of God)
[Win32-API] SetNamedSecurityInfo() IGNORES and DESTROYS protected DACLs/SACLs Stefan Kanthak Re: Full-Disclosure Digest, Vol 88, Issue 34 Re: www.LEORAT.com is scam (Thor (Hammer of God)) Mikhail A. Utin winAUTOPWN v3.1 Released QUAKER DOOMER [ MDVSA-2012:096 ] python security Cisco Security Advisory: Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client Cisco Systems Product Security Incident Response Team Cisco Security Advisory: Cisco Application Control Engine Administrator IP Address Overlap Vulnerability Cisco Systems Product Security Incident Response Team Cisco Security Advisory: Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module Denial of Service Vulnerability Cisco Systems Product Security Incident Response Team [ MDVSA-2012:097 ] python security [Security-news] SA-CONTRIB-2012-104 - Privatemsg - Cross Site Scripting (XSS) security-news [SECURITY] [DSA 2497-1] quagga security update Florian Weimer
WordPress Authenticated File Upload Authorisation Bypass Denis Andzakovic Re: WordPress Authenticated File Upload Authorisation Bypass PsychoBilly [ MDVSA-2012:098 ] libxml2 security Re: WordPress Authenticated File Upload Authorisation Bypass Greg Knaddison [ MDVSA-2012:099 ] net-snmp security Re: WordPress Authenticated File Upload Authorisation Bypass Gage Bystrom Re: WordPress Authenticated File Upload Authorisation Bypass valdis . kletnieks Re: server security Gage Bystrom Re: WordPress Authenticated File Upload Authorisation Bypass Hector Marco Re: server security Thor (Hammer of God) CORE-2012-0530 - Lattice Diamond Programmer Buffer Overflow CORE Security Technologies Advisories ZDI-12-094 : RealNetworks Helix Server rn5auth Credential Parsing Remote Code Execution Vulnerability ZDI Disclosures ZDI-12-095 : Apple Quicktime TeXML transform Attribute Remote Code Execution Vulnerability ZDI Disclosures ZDI-12-096 : HP Data Protector Express Opcode 0x330 Parsing Remote Code Execution Vulnerability ZDI Disclosures Re: CORE-2012-0530 - Lattice Diamond Programmer Buffer Overflow coderman ZDI-12-097 : HP Data Protector Express Opcode 0x320 Parsing Remote Code Execution Vulnerability ZDI Disclosures ZDI-12-098 : AOL Products dnUpdater ActiveX Uninitialized Pointer Remote Code Execution Vulnerability ZDI Disclosures ZDI-12-099 : DataDirect OpenAccess oaagent.exe GIOP Remote Code Execution Vulnerability ZDI Disclosures ZDI-12-100 : HP OpenView Performance Manager PMParamHandler Remote Code Execution Vulnerability ZDI Disclosures Re: WordPress Authenticated File Upload Authorisation Bypass Denis Andzakovic Re: WordPress Authenticated File Upload Authorisation Bypass Benji
Re: WordPress Authenticated File Upload Authorisation Bypass Carlos Alberto Lopez Perez Potential gpg forging key signatures with collisions Georgi Guninski Re: server security Elazar Broad Warning is about APT Григорий Братислава XSS and Charset Remembering via charsets in different browsers MustLive
[ MDVSA-2012:088-1 ] mozilla security
[SECURITY] [DSA 2499-1] icedove security update Florian Weimer [SECURITY] [DSA 2500-1] mantis security update Florian Weimer [SECURITY] [DSA 2501-1] xen security update Florian Weimer Sunday Fodder Thor (Hammer of God) [SECURITY] [DSA 2502-1] python-crypto security update Moritz Muehlenhoff Re: Sunday Fodder Thor (Hammer of God)
Re: [SECURITY] [DSA 2502-1] python-crypto security update coderman hashdays 2012 - Call for Papers (#days CFP) Hashdays CFP Re: [SECURITY] [DSA 2502-1] python-crypto security update BMF [ MDVSA-2012:100 ] rsyslog security How to access your favorite sites in the event of a DNS takedown ? Jardel Re: How to access your favorite sites in the event of a DNS takedown ? alan buxey Re: server security Daniel Hadfield Root Exploit Western Digital's WD TV Live SMP/Hub (all released firmware releases) Wolf Bee [SECURITY] [DSA 2498-1] dhcpcd security update Yves-Alexis Perez [SE-2012-01] Security weakness in Apple QuickTime Java extensions (details released) Security Explorations Re: How to access your favorite sites in the event of a DNS takedown ? Jardel Weyrich Exploit for Intel SYSRET "vulnerability" on FreeBSD Hunger Re: Sunday Fodder Darius Jahandarie FCKEditor reflected XSS vulnerability Emilio Pinna Re: Warning is about APT c-APT-ure CVE-2012-2380: Apache Roller Cross-Site-Resource-Forgery (XSRF) vulnerability Dave CVE-2012-2381: Apache Roller Cross-Site-Scripting (XSS) vulnerability Dave Re: How to access your favorite sites in the event of a DNS takedown ? nake Entropy distribution to virtual machines coderman Re: How to access your favorite sites in the event of a DNS takedown ? Peter Dawson Re: How to access your favorite sites in the event of a DNS takedown ? Nate Theis Re: server security Thor (Hammer of God) Re: How to access your favorite sites in the event of a DNS takedown ? Thor (Hammer of God) Re: How to access your favorite sites in the event of a DNS takedown ? nix Re: How to access your favorite sites in the event of a DNS takedown ? rancor Re: Warning is about APT rancor
SEC Consult SA-20120626-0 :: Zend Framework - Local file disclosure via XXE injection SEC Consult Vulnerability Lab Re: How to access your favorite sites in the event of a DNS takedown ? PsychoBilly
ZDI-12-101 : IBM Cognos tm1admsd.exe Multiple Operations Remote Code Execution Vulnerabilities ZDI Disclosures ZDI-12-102 : Novell iPrint Client nipplib.dll GetDriverSettings realm Remote Code Execution Vulnerability ZDI Disclosures -----BEGIN PGP SIGNED MESSAGE----- ZDI Disclosures ZDI-12-104 : SAP Netweaver ABAP msg_server.exe Parameter Value Remote Code Execution Vulnerability ZDI Disclosures ZDI-12-105 : Apple Quicktime Text Track Descriptor Parsing Remote Code Execution ZDI Disclosures ZDI-12-103 : Apple Quicktime Dataref URI Buffer Remote Code Execution ZDI Disclosures A new research about next gen crawling in pen test scanners bobo manang Re: How to access your favorite sites in the event of a DNS takedown ? Brian Gallagher Re: How to access your favorite sites in the event of a DNS takedown ? Darius Jahandarie Presentations from Positive Hack Days 2012 Published Dmitry Evteev Re: How to access your favorite sites in the event of a DNS takedown ? Michael Stummvoll Re: [SE-2012-01] Security weakness in Apple QuickTime Java extensions (details released) Ramo OpenLimit Reader for Windows contains completely outdated, superfluous and VULNERABLE system components Stefan Kanthak Re: How to access your favorite sites in the event of a DNS takedown ? Nahuel Grisolía Re: How to access your favorite sites in the event of a DNS takedown ? nake Re: www.LEORAT.com is scam smith joseph xxx trap9 trap9 Cisco Security Advisory: Buffer Overflow Vulnerabilities in the Cisco WebEx Player Cisco Systems Product Security Incident Response Team Re: How to access your favorite sites in the event of a DNS takedown ? Thor (Hammer of God)
Re: [SE-2012-01] Security weakness in Apple QuickTime Java extensions (details released) Security Explorations ZDI-12-106 : Avaya IP Office Customer Call Reporter ImageUpload Remote Code Execution Vulnerability ZDI Disclosures [SECURITY] [DSA 2503-1] bcfg2 security update Florian Weimer [SECURITY] [DSA 2504-1] libspring-2.5-java security update Florian Weimer Vulnerabilities in LIOOSYS CMS MustLive ZDI-12-107 : Apple Quicktime TeXML Style Element Parsing Remote Code Execution Vulnerability ZDI Disclosures ZDI-12-108 : Apple Quicktime TeXML sampleData Element Parsing Remote Code Execution Vulnerability ZDI Disclosures ZDI-12-109 : Apple Quicktime TeXML Karaoke Element Parsing Remote Code Execution Vulnerability ZDI Disclosures ZDI-12-110 : Mozilla Firefox AttributeChildRemoved Use-After-Free Remote Code Execution Vulnerability ZDI Disclosures ZDI-12-111 : SAP Netweaver ABAP msg_server.exe Opcode 0x43 Remote Code Execution Vulnerability ZDI Disclosures ZDI-12-112 : SAP Netweaver ABAP msg_server.exe Parameter Name Remote Code Execution Vulnerability ZDI Disclosures ZDI-12-113 : IBM Rational ClearQuest CQOle ActiveX Control Remote Code Execution Vulnerability ZDI Disclosures Re: How to access your favorite sites in the event of a DNS takedown ? Jeffrey Walton REWTERZ-20120629 - TEMENOS T24 Cross-Site Scripting (XSS) Vulnerability Rewterz - Research Group
TPTI-12-06: Hewlett-Packard Data Protector DtbClsAddObject Parsing Remote Code Execution Vulnerability ZDI Disclosures TPTI-12-05: Oracle AutoVue ActiveX SetMarkupMode Remote Code Execution Vulnerability ZDI Disclosures [SECURITY] [DSA 2505-1] zendframework security update Florian Weimer
IBM Edge Components Caching Proxy XSS Followup BugsNotHugs Sun iPlanet Error Page Link Injection BugsNotHugs IBM developerWorks ncp (Nigel's Capacity Planning) 2.1 Remote Information Disclosure BugsNotHugs Konqueror 3.5.5 XFS BugsNotHugs