Full Disclosure: by author

Full Disclosure: by author

303 messages starting Aug 24 13 and ending Aug 09 13
Date index | Thread index | Author index

Aaron T. Myers

CVE-2013-2193: Apache HBase Man in the Middle Vulnerability Aaron T. Myers (Aug 24)
CVE-2013-2192: Apache Hadoop Man in the Middle Vulnerability Aaron T. Myers (Aug 24)

adam

Re: Facebook allows disclosure of friends list. adam (Aug 06)
Re: Facebook allows disclosure of friends list. adam (Aug 06)
Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) adam (Aug 16)
Re: CAPTCHA re-riding attack in https://google.com adam (Aug 26)
Re: Defense in depth -- the Microsoft way (part 9): erroneous documentation adam (Aug 31)

Adéla Goldová

Usernoise 3.7.8 WP plugin cross-site scripting vulnerability Adéla Goldová (Aug 06)
[RCA-201308-01] HMS Testimonials 2.0.10 WP plugin - Multiple vulnerabilities Adéla Goldová (Aug 08)
Update [RCA-201309-01] HMS Testimonials 2.0.10 WP plugin - Multiple vulnerabilities Adéla Goldová (Aug 08)

Alejandro Alvarez

CVE-2013-0526 IBM GCM16/32 Remote Command Execution. Alejandro Alvarez (Aug 16)

Alex

Re: XKeyscore sees 'nearly EVERYTHING you do online Alex (Aug 01)
Re: XKeyscore sees 'nearly EVERYTHING you do online Alex (Aug 01)
Re: XKeyscore sees 'nearly EVERYTHING y ou do online Alex (Aug 02)
Re: Facebook allows disclosure of friends list. Alex (Aug 06)
Re: Facebook allows disclosure of friends list. Alex (Aug 06)
Re: Facebook allows disclosure of friends list. Alex (Aug 07)
Re: pixlr.com bluecoat image file bypass Alex (Aug 09)
Re: Special Issue "Threat Detection, Analysis and Defense" of JISA Alex (Aug 09)
Re: Special Issue "Threat Detection, Analysis and Defense" of JISA Alex (Aug 09)
Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) Alex (Aug 19)
Re: CAPTCHA re-riding attack in https://google.com Alex (Aug 28)

Alex Dolan

Re: DC4420 - London DEFCON - August Meet - Tuesday 27th August 2013 Alex Dolan (Aug 27)

andfarm

Re: Apache suEXEC privilege elevation / information disclosure andfarm (Aug 07)
Re: [DAHAX-2013-001] Cloudflare XSS Vulnerability andfarm (Aug 22)

Andrea Fabrizi

Samsung DVR authentication bypass Andrea Fabrizi (Aug 20)

Asterisk Security Team

AST-2013-004: Remote Crash From Late Arriving SIP ACK With SDP Asterisk Security Team (Aug 28)
AST-2013-005: Remote Crash when Invalid SDP is sent in SIP Request Asterisk Security Team (Aug 28)

Aurelien Jarno

[SECURITY] [DSA 2743-1] kfreebsd-9 security update Aurelien Jarno (Aug 27)

Bart van Tuil

Re: XKeyscore sees 'nearly EVERYTHING you do online Bart van Tuil (Aug 02)
Re: Special Issue "Threat Detection, Analysis and Defense" of JISA Bart van Tuil (Aug 09)
Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) Bart van Tuil (Aug 16)
Re: [DAHAX-2013-001] Cloudflare XSS Vulnerability Bart van Tuil (Aug 23)

Bhavesh Naik

Facebook allows disclosure of friends list. Bhavesh Naik (Aug 06)
Re: Facebook allows disclosure of friends list. Bhavesh Naik (Aug 07)

Chip Childers

[CVE-2013-2136] Apache CloudStack Cross-site scripting (XSS) vulnerabiliity Chip Childers (Aug 06)
Updated [CVE-2013-2136] Apache CloudStack Cross-site scripting (XSS) vulnerabiliity Chip Childers (Aug 07)

Christian Rost

Re: XKeyscore sees 'nearly EVERYTHING you doonline Christian Rost (Aug 02)

Cisco Systems Product Security Incident Response Team

Cisco Security Advisory: OSPF LSA Manipulation Vulnerability in Multiple Cisco Products Cisco Systems Product Security Incident Response Team (Aug 01)
Cisco Security Advisory: Cisco TelePresence System Default Credentials Vulnerability Cisco Systems Product Security Incident Response Team (Aug 07)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified Communications Manager Cisco Systems Product Security Incident Response Team (Aug 21)
Cisco Security Advisory: Cisco Prime Central for Hosted Collaboration Solution Assurance Denial of Service Vulnerabilities Cisco Systems Product Security Incident Response Team (Aug 21)
Cisco Security Advisory: Cisco Unified Communications Manager IM and Presence Service Denial of Service Vulnerability Cisco Systems Product Security Incident Response Team (Aug 21)
Cisco Security Advisory: Cisco Secure Access Control Server Remote Command Execution Vulnerability Cisco Systems Product Security Incident Response Team (Aug 28)

coderman

Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) coderman (Aug 18)

CORE Advisories Team

CORE-2013-0708 - Hikvision IP Cameras Multiple Vulnerabilities CORE Advisories Team (Aug 06)
[CORE-2013-0805] Aloaha PDF Suite Buffer Overflow Vulnerability CORE Advisories Team (Aug 28)
CORE-2013-0808 - EPS Viewer Buffer Overflow Vulnerability CORE Advisories Team (Aug 28)
CORE-2013-0726 - AVTECH DVR multiple vulnerabilities CORE Advisories Team (Aug 28)

Craig Young

Attacking Google Accounts with 'weblogin:' Tokens Craig Young (Aug 07)
ReviewBoard Vulnerabilities Craig Young (Aug 09)

Daniel Corbe

Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) Daniel Corbe (Aug 19)

Daniel Preussker

Re: 0day IE9/10 information disclosure vulnerability Daniel Preussker (Aug 13)
Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) Daniel Preussker (Aug 17)

dann frazier

[SECURITY] [DSA 2745-1] linux security update dann frazier (Aug 29)

David Mah

Re: Facebook allows disclosure of friends list. David Mah (Aug 06)

debug

pixlr.com bluecoat image file bypass debug (Aug 08)

Derick Older

[SECURITY] CVE-2012-3544 Chunked transfer encoding extension size is not limited Derick Older (Aug 27)

Dico Emil

Re: Apache suEXEC privilege elevation / Dico Emil (Aug 09)

Dragos Ruiu

Last (short) chance to submit papers for PacSec in Tokyo Nov 13-14. Deadline FRIDAY. Dragos Ruiu (Aug 21)

E R

Re: Apache suEXEC privilege elevation / information disclosure E R (Aug 08)

Erik Hjelmvik

Two Vulnerabilities in NetworkMiner : DLL Hijacking + Directory Traversal Erik Hjelmvik (Aug 08)

Fermín J . Serna

CVE-2013-3186 - The case of a one click sandbox escape on IE Fermín J . Serna (Aug 21)

Florian Weimer

Re: [SECURITY] [DSA 2607-1] qemu-kvm security update Florian Weimer (Aug 04)
[SECURITY] [DSA 2742-1] php5 security update Florian Weimer (Aug 26)
[SECURITY] [DSA 2747-1] cacti security update Florian Weimer (Aug 31)

fukami

30C3 Call for Participation fukami (Aug 28)

Full Name

foxtons possibly hacked Full Name (Aug 19)

fulldis

[PSA-2013-0811-1] Oracle Java storeImageArray() Invalid Array Indexing fulldis (Aug 12)
[PSA-2013-0813-1] Oracle Java IntegerInterleavedRaster.verify() Signed Integer Overflow fulldis (Aug 14)
[PSA-2013-0819-1] Oracle Java BytePackedRaster.verify() Signed Integer Overflow fulldis (Aug 19)
[PSA-2013-0827-1] Oracle Java ByteComponentRaster.verify() Memory Corruption fulldis (Aug 28)

FuzzMyApp Disclosure

CVE-2013-4099 - JOAL 2.0-rc11 - Multiple Remote Code Execution Vulnerabilities FuzzMyApp Disclosure (Aug 22)

Gary Baribault

Re: XKeyscore sees 'nearly EVERYTHING you do online Gary Baribault (Aug 01)
Re: XKeyscore sees 'nearly EVERYTHING you do online Gary Baribault (Aug 01)
Re: XKeyscore sees 'nearly EVERYTHING you do online Gary Baribault (Aug 01)
Re: XKeyscore sees 'nearly EVERYTHING you do online Gary Baribault (Aug 02)

Gary McGraw

I'm the best and that's all that matters Gary McGraw (Aug 01)

Georgi Guninski

XKeyscore sees 'nearly EVERYTHING you do online Georgi Guninski (Aug 01)
Re: XKeyscore sees 'nearly EVERYTHING you do online Georgi Guninski (Aug 01)
Re: XKeyscore sees 'nearly EVERYTHING you do online Georgi Guninski (Aug 02)
Re: XKeyscore sees 'nearly EVERYTHING you do online Georgi Guninski (Aug 02)
Re: Software that you *really* wish had been more secure... Georgi Guninski (Aug 04)
Re: [ MDVSA-2013:210 ] firefox Georgi Guninski (Aug 07)
Re: [ MDVSA-2013:210 ] firefox Georgi Guninski (Aug 08)
Re: Special Issue "Threat Detection, Analysis and Defense" of JISA Georgi Guninski (Aug 09)

Gichuki John Chuksjonia

Re: Apache suEXEC privilege elevation / information disclosure Gichuki John Chuksjonia (Aug 10)

Glenn Grant

[DAHAX-2013-001] Cloudflare XSS Vulnerability Glenn Grant (Aug 22)

Grandma Eubanks

Re: XKeyscore sees 'nearly EVERYTHING you do Grandma Eubanks (Aug 12)

Greg Knaddison

Re: Drupal core XSS vulnerability Greg Knaddison (Aug 14)

hardfalcon

Re: Defense in depth -- the Microsoft way (part 9): erroneous documentation hardfalcon (Aug 31)

Henri Salo

Re: XSS and CS vulnerabilities in aCMS Henri Salo (Aug 01)

Hinky Dink

PoTTY v0.63 released Hinky Dink (Aug 30)

Hugh Davenport

Re: XKeyscore sees 'nearly EVERYTHING you do online Hugh Davenport (Aug 01)

imipak

Re: XKeyscore sees 'nearly EVERYTHING you do online imipak (Aug 02)

Jacob Morgan

Google Docs Clickjacking / Information Disclosure Jacob Morgan (Aug 28)

Jakob Lell

Quick Blind TCP Connection Spoofing with SYN Cookies Jakob Lell (Aug 14)

Jann Horn

Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) Jann Horn (Aug 16)
Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) Jann Horn (Aug 16)
Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) Jann Horn (Aug 17)
Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) Jann Horn (Aug 17)
Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) Jann Horn (Aug 18)

Jean D'Elboux Diogo

Re: [Full-disclosure] Full-Disclosure Digest, Vol 102, Issue 26 Jean D'Elboux Diogo (Aug 19)

Jeffrey Walton

Re: XKeyscore sees 'nearly EVERYTHING you do online Jeffrey Walton (Aug 01)
Re: XKeyscore sees 'nearly EVERYTHING you do online Jeffrey Walton (Aug 01)
Re: Apache suEXEC privilege elevation / information disclosure Jeffrey Walton (Aug 10)
Re: Apache suEXEC privilege elevation / information disclosure Jeffrey Walton (Aug 12)
Re: CALEA & Re: XKeyscore Jeffrey Walton (Aug 13)
Fwd: [cryptography] Paypal phish using EV certificate Jeffrey Walton (Aug 13)
Re: Fwd: [cryptography] Paypal phish using EV certificate Jeffrey Walton (Aug 13)
Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) Jeffrey Walton (Aug 16)
Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) Jeffrey Walton (Aug 16)
Re: Defense in depth -- the Microsoft way (part 8): execute everywhere! Jeffrey Walton (Aug 24)

Jin Fu

HackInTheBox CTF Weapons of Mass Destruction: War of the World Jin Fu (Aug 21)

jk3380

Re: XKeyscore sees 'nearly EVERYTHING you do jk3380 (Aug 13)

Johan Boger

Potential security flaw in network implementation at Digitalocean.com Johan Boger (Aug 05)
Re: Potential security flaw in network implementation at Digitalocean.com Johan Boger (Aug 06)

John Cartwright

List Charter John Cartwright (Aug 09)

jonathan schatz

Re: [DAHAX-2013-001] Cloudflare XSS Vulnerability jonathan schatz (Aug 24)

Jordon Bedwell

Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) Jordon Bedwell (Aug 19)

Joseph Jackson

Re: XKeyscore sees 'nearly EVERYTHING you do online Joseph Jackson (Aug 02)
Re: XKeyscore sees 'nearly EVERYTHING you do online Joseph Jackson (Aug 02)

Julius Kivimäki

Re: Fwd: [cryptography] Paypal phish using EV certificate Julius Kivimäki (Aug 13)
Re: Fwd: [cryptography] Paypal phish using EV certificate Julius Kivimäki (Aug 13)
Re: Google - (Pin via Postal Delivery) Information Disclosure - Video Julius Kivimäki (Aug 16)
Re: [DAHAX-2013-001] Cloudflare XSS Vulnerability Julius Kivimäki (Aug 23)
Re: UTA EDU University ENG - SQL Injection Vulnerability Julius Kivimäki (Aug 30)

Justin C. Klein Keane

Re: Special Issue "Threat Detection, Analysis and Defense" of JISA Justin C. Klein Keane (Aug 09)
Drupal core XSS vulnerability Justin C. Klein Keane (Aug 14)

Justin Elze

Re: XKeyscore sees 'nearly EVERYTHING you do Justin Elze (Aug 11)

Justin Ferguson

Re: I'm the best and that's all that matters Justin Ferguson (Aug 03)

kevin philips

CAPTCHA re-riding attack in https://google.com kevin philips (Aug 26)
Re: CAPTCHA re-riding attack in https://google.com kevin philips (Aug 27)

king cope

Apache suEXEC privilege elevation / information disclosure king cope (Aug 07)
Re: Apache suEXEC privilege elevation / information disclosure king cope (Aug 07)
Super Tiny Linux and AIX bugs king cope (Aug 11)

Kingcope

Re: Apache suEXEC privilege elevation / information disclosure Kingcope (Aug 09)
Re: Apache suEXEC privilege elevation / information disclosure Kingcope (Aug 09)
Re: Apache suEXEC privilege elevation / information disclosure Kingcope (Aug 10)
Re: Apache suEXEC privilege elevation / information disclosure Kingcope (Aug 10)

Konrad Rieck

Special Issue "Threat Detection, Analysis and Defense" of JISA Konrad Rieck (Aug 09)

Larry W. Cashdollar

Rgpg 0.2.2 Ruby Gem Remote Command Injection Larry W. Cashdollar (Aug 03)

LIAD Mizrachi

Advisory: Unfuddle.com - Open Redirection LIAD Mizrachi (Aug 16)

Luis Lezcano Airaldi

Re: XKeyscore sees 'nearly EVERYTHING you do online Luis Lezcano Airaldi (Aug 02)

Luther Blissett

Who's behind limestonenetworks.com AKA DDoS on polipo(8123) Luther Blissett (Aug 16)
Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) Luther Blissett (Aug 17)
Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) Luther Blissett (Aug 17)
Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) Luther Blissett (Aug 21)

majinboo

Atlassian Confluence - Sensitive Information Leakage majinboo (Aug 27)

Major Malfunction

DC4420 - London DEFCON - August Meet - Tuesday 27th August 2013 Major Malfunction (Aug 26)

Marc Ruef

[NSE] Release of Nmap NSE Vulscan 2.0 Marc Ruef (Aug 15)

Mattias Bååth

SEC-T 2013 Speaker list published. Register today and come visit us in Sweden. Mattias Bååth (Aug 27)

mezgani ali

Re: Apache suEXEC privilege elevation / information disclosure mezgani ali (Aug 09)

Michael Gilbert

[SECURITY] [DSA 2732-1] chromium-browser security update Michael Gilbert (Aug 03)
[SECURITY] [DSA 2741-1] chromium-browser security update Michael Gilbert (Aug 26)

Michal Purzynski

Re: XKeyscore sees 'nearly EVERYTHING you do online Michal Purzynski (Aug 02)
Re: XKeyscore sees 'nearly EVERYTHING you do Michal Purzynski (Aug 11)
Re: CALEA & Re: XKeyscore Michal Purzynski (Aug 13)
Re: CALEA & Re: XKeyscore Michal Purzynski (Aug 13)

Michal Zalewski

Re: Apache suEXEC privilege elevation / information disclosure Michal Zalewski (Aug 11)

Moritz Muehlenhoff

[SECURITY] [DSA 2734-1] wireshark security update Moritz Muehlenhoff (Aug 05)
[SECURITY] [DSA 2735-1] iceweasel security update Moritz Muehlenhoff (Aug 07)
[SECURITY] [DSA 2739-1] cacti security update Moritz Muehlenhoff (Aug 21)
[SECURITY] [DSA 2744-1] tiff security update Moritz Muehlenhoff (Aug 27)
[SECURITY] [DSA 2746-1] icedove security update Moritz Muehlenhoff (Aug 29)

Moritz Naumann

Simple Machines Forum (SMF) <= 2.0.5 - multiple vulnerabilities Moritz Naumann (Aug 15)

MustLive

XSS and CS vulnerabilities in aCMS MustLive (Aug 01)
XSS and FPD vulnerabilities in WPtouch and WPtouch Pro for WordPress MustLive (Aug 03)
Using XXE vulnerabilities for attacks on other sites MustLive (Aug 10)
XXE Injection in Sybase EAServer MustLive (Aug 11)
SQL Injection vulnerability in Soltech.CMS MustLive (Aug 14)
CS, XSS and FPD vulnerabilities in MCImageManager for TinyMCE MustLive (Aug 17)
Vulnerabilities in Avaya IP Office Customer Call Reporter MustLive (Aug 21)
CS and XSS vulnerabilities in GDD FLVPlayer MustLive (Aug 23)
Vulnerabilities in multiple web applications with GDD FLVPlayer MustLive (Aug 25)
Vulnerabilities in multiple plugins for WordPress with GDD FLVPlayer MustLive (Aug 28)
XSS and CS vulnerability in Soltech.CMS MustLive (Aug 30)

Noel Butler

Re: Apache suEXEC privilege elevation / information disclosure Noel Butler (Aug 09)
Re: Apache suEXEC privilege elevation / information disclosure Noel Butler (Aug 09)
Re: Apache suEXEC privilege elevation / information disclosure Noel Butler (Aug 10)

Osama Alrashid

IBM Lotus iNotes 8.5.x cross-site scripting vulnerabilities Osama Alrashid (Aug 27)
rhev-hypervisor6 package security update Osama Alrashid (Aug 28)

Pascal Ernster

Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) Pascal Ernster (Aug 17)

Pedro Luis Karrasquillo

Re: XKeyscore sees 'nearly EVERYTHING you do Pedro Luis Karrasquillo (Aug 11)
CALEA & Re: XKeyscore Pedro Luis Karrasquillo (Aug 13)
Re: CALEA & Re: XKeyscore Pedro Luis Karrasquillo (Aug 13)

peter_toyota

Re: XKeyscore sees 'nearly EVERYTHING you do peter_toyota (Aug 11)
Re: CALEA & Re: XKeyscore peter_toyota (Aug 14)
Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) peter_toyota (Aug 17)

Pivotal Security Team

CVE-2013-4152 XML External Entity (XXE) injection in Spring Framework Pivotal Security Team (Aug 22)

PsychoBilly

Re: [DAHAX-2013-001] Cloudflare XSS Vulnerability PsychoBilly (Aug 23)

R. Whitney

Re: Apache suEXEC privilege elevation / information disclosure R. Whitney (Aug 09)

Ralf Braga

JoinSEC London - October Ralf Braga (Aug 16)

Reed Black

Re: XKeyscore sees 'nearly EVERYTHING you doonline Reed Black (Aug 02)

Reindl Harald

Re: Apache suEXEC privilege elevation / information disclosure Reindl Harald (Aug 09)
Re: Apache suEXEC privilege elevation / information disclosure Reindl Harald (Aug 11)

Roee Hay

Subverting BIND's SRTT Algorithm: Derandomizing NS Selection Roee Hay (Aug 14)

Ryan Dewhurst

Re: [DAHAX-2013-001] Cloudflare XSS Vulnerability Ryan Dewhurst (Aug 22)

Salvatore Bonaccorso

[SECURITY] [DSA 2733-1] otrs2 security update Salvatore Bonaccorso (Aug 02)
[SECURITY] [DSA 2736-1] putty security update Salvatore Bonaccorso (Aug 11)
[SECURITY] [DSA 2740-1] python-django security update Salvatore Bonaccorso (Aug 23)

saw saw

Trusteer Rapport memory selfcheck bypass saw saw (Aug 04)

scadastrangelove

SSA-064884: WinCC/TIA Portal fixes scadastrangelove (Aug 01)
WinCC Harvester Metasploit module is updated scadastrangelove (Aug 12)

SEC Consult Vulnerability Lab

SEC Consult SA-20130805-0 :: Vodafone EasyBox Default WPS PIN Algorithm Weakness SEC Consult Vulnerability Lab (Aug 05)

SecNiche Security Labs

Sparty : A SharePoint and FrontPage Security Auditing Tool ! SecNiche Security Labs (Aug 21)

security

[ MDVSA-2013:205 ] gnupg security (Aug 01)
[ MDVSA-2013:206 ] owncloud security (Aug 05)
[ MDVSA-2013:207 ] samba security (Aug 06)
[ MDVSA-2013:208 ] libtiff security (Aug 06)
[ MDVSA-2013:209 ] subversion security (Aug 06)
[ MDVSA-2013:210 ] firefox security (Aug 07)
[ MDVSA-2013:211 ] lcms2 security (Aug 12)
[ MDVSA-2013:212 ] otrs security (Aug 13)
[ MDVSA-2013:213 ] xymon security (Aug 13)
[ MDVSA-2013:214 ] python security (Aug 21)
[ MDVSA-2013:215 ] cacti security (Aug 22)
[ MDVSA-2013:216 ] perl-Proc-ProcessTable security (Aug 23)
[ MDVSA-2013:217 ] spice security (Aug 23)
[ MDVSA-2013:218 ] python-django security (Aug 23)
[ MDVSA-2013:219 ] libtiff security (Aug 23)
[ MDVSA-2013:220 ] lcms security (Aug 27)
[ MDVSA-2013:221 ] php security (Aug 27)
[ MDVSA-2013:222 ] puppet security (Aug 27)
[ MDVSA-2013:223 ] asterisk security (Aug 30)

security-news

[Security-news] SA-CONTRIB-2013-062 - RESTful Web Services (RESTWS) - Access Bypass security-news (Aug 07)
[Security-news] SA-CONTRIB-2013-064 - Persona - Cross site request forgery (CSRF) security-news (Aug 07)
[Security-news] SA-CONTRIB-2013-063 - Authenticated User Page Caching (Authcache) - Information Disclosure security-news (Aug 07)
[Security-news] SA-CONTRIB-2013-065 - Organic Groups - Access Bypass security-news (Aug 07)
[Security-news] SA-CONTRIB-2013-066 - Monster Menus - Multiple Vulnerabilities security-news (Aug 07)
[Security-news] SA-CONTRIB-2013-067 - BOTCHA - Information Disclosure (potential Privilege Escalation) security-news (Aug 14)
[Security-news] SA-CONTRIB-2013-068 - Entity API - Access Bypass security-news (Aug 14)
[Security-news] SA-CONTRIB-2013-069 - Password Policy - XSS security-news (Aug 14)
[Security-news] SA-CONTRIB-2013-070 - Zen - Cross Site Scripting security-news (Aug 21)
[Security-news] SA-CONTRIB-2013-072 - Node View Permissions - Access Bypass security-news (Aug 28)
[Security-news] SA-CONTRIB-2013-071 - Flag - Cross Site Scripting security-news (Aug 28)

some one

Re: Quick Blind TCP Connection Spoofing with SYN Cookies some one (Aug 14)

Stefan Jon Silverman

Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) Stefan Jon Silverman (Aug 16)
Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) Stefan Jon Silverman (Aug 19)

Stefan Kanthak

Defense in depth -- the Microsoft way (part 6): beginner's errors, QA sound asleep or out of sight! Stefan Kanthak (Aug 07)
OUTDATED, UNSUPPORTED and VULNERABLE 3rd party components installed with Exact Audio Copy Stefan Kanthak (Aug 08)
Defense in depth -- the Microsoft way (part 7): executable files in data directories Stefan Kanthak (Aug 17)
Windows Embedded POSReady 2009: cruft, not craft Stefan Kanthak (Aug 21)
Defense in depth -- the Microsoft way (part 8): execute everywhere! Stefan Kanthak (Aug 24)
Re: Defense in depth -- the Microsoft way (part 8): execute everywhere! Stefan Kanthak (Aug 25)
Defense in depth -- the Microsoft way (part 9): erroneous documentation Stefan Kanthak (Aug 31)

Sven Kieske

Re: XKeyscore sees 'nearly EVERYTHING you do online Sven Kieske (Aug 02)
Re: XKeyscore sees 'nearly EVERYTHING you do online Sven Kieske (Aug 02)

Thijs Kinkhorst

[SECURITY] [DSA 2737-1] swift security update Thijs Kinkhorst (Aug 13)
[SECURITY] [DSA 2738-1] ruby1.9.1 security update Thijs Kinkhorst (Aug 19)

Timothy D. Morgan

Introducing Bletchley Timothy D. Morgan (Aug 15)
PayPal's "invalid" aksession Padding Oracle Flaw Timothy D. Morgan (Aug 28)

Tomi Tuominen

t2'13: Challenge to be released 2013-09-07 10:00 EEST Tomi Tuominen (Aug 16)

Trevor Bergeron

Re: Potential security flaw in network implementation at Digitalocean.com Trevor Bergeron (Aug 06)

Trustwave Advisories

TWSL2013-019: Multiple Vulnerabilities in MiCasaVerde VeraLite Trustwave Advisories (Aug 02)
TWSL2013-020: Hard-Coded Bluetooth PIN Vulnerability in LIXIL Satis Toilet Trustwave Advisories (Aug 02)
TWSL2013-021: Multiple Vulnerabilities in Karotz Smart Rabbit Trustwave Advisories (Aug 02)
TWSL2013-022: No Authentication Vulnerability in Radio Thermostat of America, Inc Trustwave Advisories (Aug 02)
TWSL2013-023: Lack of Web and API Authentication Vulnerability in INSTEON Hub (Model Discontinued) Trustwave Advisories (Aug 02)
TWSL2013-025: Arbitrary File Upload Vulnerability in Official Nmap Http-domino-enum-passwords NSE script Trustwave Advisories (Aug 06)
TWSL2013-024: Cross Site Scripting (XSS) vulnerability in McAfee Superscan 4.0 Trustwave Advisories (Aug 06)

Valdis . Kletnieks

Re: XKeyscore sees 'nearly EVERYTHING you do online Valdis . Kletnieks (Aug 02)
Re: Facebook allows disclosure of friends list. Valdis . Kletnieks (Aug 06)
Re: XKeyscore sees 'nearly EVERYTHING you do Valdis . Kletnieks (Aug 11)
Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) Valdis . Kletnieks (Aug 17)
Re: Who's behind limestonenetworks.com AKA DDoS on polipo(8123) Valdis . Kletnieks (Aug 18)

Valdis Kletnieks

Software that you *really* wish had been more secure... Valdis Kletnieks (Aug 04)

VMware Security Team

NEW VMSA-2013-0010 VMware Workstation host privilege escalation vulnerability VMware Security Team (Aug 23)
NEW VMSA-2013-0011 VMware ESXi and ESX address an NFC Protocol Unhandled Exception VMware Security Team (Aug 30)

Vulnerability Lab

withU Music Share v1.3.7 iOS - Command Inject Vulnerability Vulnerability Lab (Aug 04)
FTP OnConnect v1.4.11 iOS - Multiple Web Vulnerabilities Vulnerability Lab (Aug 04)
Microsoft Yammer Social Network - oAuth Bypass (Session Token) Vulnerability Vulnerability Lab (Aug 06)
Copy to WebDAV v1.1 iOS - Multiple Web Vulnerabilities Vulnerability Lab (Aug 15)
Photo Transfer Upload v1.0 iOS - Multiple Vulnerabilities Vulnerability Lab (Aug 15)
Google - (Pin via Postal Delivery) Information Disclosure - Video Vulnerability Lab (Aug 15)
PayPal Bug Bounty #110 - Auth Bypass (Session) Vulnerability Vulnerability Lab (Aug 23)
UTA EDU University ENG - SQL Injection Vulnerability Vulnerability Lab (Aug 29)
Department of Transport UK - SQL Injection Vulnerability Vulnerability Lab (Aug 29)
Microsoft MSRC RSS ASPX - CS Cross Site Web Vulnerability Vulnerability Lab (Aug 29)

web_p0wn3r web_p0wn3r

Research survey: web pentests with hybrid control+data flow graphs web_p0wn3r web_p0wn3r (Aug 08)

Wolfgang Denk

Xerox scanners/photocopiers randomly alter numbers in scanned documents Wolfgang Denk (Aug 06)

x90c

bash-3.0-geinpeek shell sniffer release! x90c (Aug 16)
MS Excel 2002/2003 CRN record 0day PoC x90c (Aug 17)
x90c WOFF Firefox 1day exploit x90c (Aug 17)
local color map firefox 1day exploit x90c (Aug 17)
local color map firefox 1day exploit x90c (Aug 17)
about ld-2.5.so security x90c (Aug 17)
request to ms excel crash analyze x90c (Aug 20)
review: magic_quotes_gpc=on bypass project in 2006 x90c (Aug 20)
CVE-2013-4124 samba nttrans dos private exploit x90c (Aug 21)
... my LKM stuff! x90c (Aug 22)
CVE-2013-4124 samba dos exploit x90c (Aug 22)
libtiff <= 3.9.5 integer overflow bug x90c (Aug 24)
samba dos exploit x90c (Aug 26)

XF

Re: XKeyscore sees 'nearly EVERYTHING you do online XF (Aug 01)
Re: XKeyscore sees 'nearly EVERYTHING you do online XF (Aug 02)
Re: XKeyscore sees 'nearly EVERYTHING you do online XF (Aug 02)
Re: XKeyscore sees 'nearly EVERYTHING you do online XF (Aug 04)

xnite

Re: 0day IE9/10 information disclosure vulnerability xnite (Aug 13)
Re: [DAHAX-2013-001] Cloudflare XSS Vulnerability xnite (Aug 22)

yuange

Re: 0day IE9/10 information disclosure vulnerability yuange (Aug 12)

Yuhong Bao

ACCDE and macros Yuhong Bao (Aug 19)

Źmicier Januszkiewicz

Re: Special Issue "Threat Detection, Analysis and Defense" of JISA Źmicier Januszkiewicz (Aug 09)

Previous period

Next period