222 messages starting Nov 13 13 and ending Nov 01 13 Date index | Thread index | Author index
Securelist.com (Kaspersky) released a misleading information about Kelihos Botnet actual status アドリアンヘンドリック (Nov 13)
Re: Imperva WAF/DAF 9.5 patch8 and 10.0 patch 2 localroot vulnerability adam (Nov 21)
[SOJOBO-ADV-13-03] - Wordpress pl ugin Gallery Bank 2.0.19 Reflected Cross Site Scripting advisories (Nov 05) [SOJOBO-ADV-13-04] - PHP-Nuke 8 .2.4 multiple vulnerabilities advisories (Nov 18)
Re: XADV-2013004 Linux Kernel ipvs Kernel Stack Overflow Alan J . Wylie (Nov 11)
Re: [Dailydave] Capstone disassembly framework: looking for Beta-testers Albert López (Nov 21)
Re: Geox fails.. Alex (Nov 05) Re: I'm new here, and I already have something to share Alex (Nov 08) Re: whatsapp opening url in background Alex (Nov 15)
Re: whatsapp opening url in background Ander Juaristi Alamos (Nov 15)
Hack.LU 2013 CTF Wannabe challenge writeup Arne Swinnen (Nov 03)
Re: Ip address and mac address hardcoded Augusto Pereyra (Nov 16)
Re: OpenSSH Security Advisory: gcmrekey.adv Bob Man Van Kim (Nov 09)
spamtitan 6 root exploit c1088422 (Nov 19)
Re: Another Apple Security Failure (Apple Mail on the iPhone).... Caspian Kilkelly (Nov 15)
Re: OpenSSH Security Advisory: gcmrekey.adv CERT OPS Marienfeldt (Nov 09)
Cisco Security Advisory: Cisco TelePresence VX Clinical Assistant Administrative Password Reset Vulnerability Cisco Systems Product Security Incident Response Team (Nov 06) Cisco Security Advisory: Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerability Cisco Systems Product Security Incident Response Team (Nov 06) Cisco Security Advisory: Cisco WAAS Mobile Remote Code Execution Vulnerability Cisco Systems Product Security Incident Response Team (Nov 06)
coderman's keys coderman (Nov 01) Re: coderman's keys coderman (Nov 01) OpenSSH Security Advisory: gcmrekey.adv coderman (Nov 08) Re: OpenSSH Security Advisory: gcmrekey.adv coderman (Nov 08) Re: OpenSSH Security Advisory: gcmrekey.adv coderman (Nov 09) Re: Ip address and mac address hardcoded coderman (Nov 16) Re: Wapiti 2.3.0 - the python-powered web-application vulnerability scanner coderman (Nov 27) Re: DEF CON 19 - hackers get hacked! coderman (Nov 28) Re: DEF CON 19 - hackers get hacked! , DEF CON 20 was not DRT coderman (Nov 28) RFP: FOIA with privacy waivers[0] for oversight coderman (Nov 28) Re: RFP: FOIA with privacy waivers[0] for oversight coderman (Nov 30)
CORE-2013-0704 - Vivotek IP Cameras RTSP Authentication Bypass CORE Advisories Team (Nov 05)
CVE-2013-622 Livezilla Remote Code Execution (Cure-2013-1007) Curesec Research Team (Nov 16) CVE-2013-6271 Remove Android Device Lock by rouge app Curesec Research Team (Nov 28) CVE-2013-6224: XSS in Livezilla prior version 5.1.1.0 Curesec Research Team (Nov 28) CVE-2013-6223: Local Password Disclosure in Livezilla prior version 5.1.1.0 Curesec Research Team (Nov 28)
Apple MacOSX 10.9 Hard Link Memory Corruption [CXSEC] (Nov 08)
Re: XADV-2013007 Linux Kernel bt8xx Video Driver IOCTL Heap Overflow Dan Carpenter (Nov 21)
Re: [cryptography] coderman's keys Daniel Llewellyn (Nov 04) Re: [cryptography] coderman's keys Daniel Llewellyn (Nov 04)
Re: [cryptography] coderman's keys Daniël W . Crompton (Nov 03)
Cloud Questions David Miller (Nov 09)
Uptime Agent 5.0.1 Stack Overflow Vulnerability Denis Andzakovic (Nov 27)
SKIDATA RFID Freemotion.Gate Unauthenticated Web Service Aribtrary Remote Command Execution Dennis Kelly (Nov 20)
CVE-2013-4425: Private key disclosure, Osirix (lite, 64bit and FDA cleader version) (Medical Application) Dirk-Willem van Gulik (Nov 06)
Recruiting Troopers - Call for Papers, March 19-20 2014 Enno Rey (Nov 12)
Re: whatsapp opening url in background Ferran Pichel (Nov 15) Re: whatsapp opening url in background Ferran Pichel (Nov 15)
[SECURITY] [DSA 2791-1] tryton-client security update Florian Weimer (Nov 04)
SPLUNK > 6 universal forwarder cypher weakness fortinet42 (Nov 10)
whatsapp opening url in background Frank Habermann (Nov 14) Re: whatsapp opening url in background Frank Habermann (Nov 15)
pineapp mailsecure pwnage full-disclosure-bounces (Nov 19)
Seems like Coinbase Security Team doesn't know how their cookie works giulio (Nov 30)
16TH AVAR INTERNATIONAL SECURITY CONFERENCE 2013 - (4th-7th Dec'13, Chennai. India) Gregory Panakkal (Nov 19)
[CVE-2013-5726] - Tweetbot for iOS and Mac user disclosure/privacy issue Guillaume Ross (Nov 01)
[HITB-Announce] #HITB2014AMS Call for Papers Now Open Hafez Kamal (Nov 27)
Re: OpenSSH Security Advisory: gcmrekey.adv Harry Hoffman (Nov 09)
Re: ClipBucket v2.6-r738 Arbitrary File Upload 0-Day Henri Salo (Nov 16)
[ISecAuditors Security Advisories] SQL Injection vulnerability in "Project'Or RIA" allow arbitrary access to the database and the file system ISecAuditors Security Advisories (Nov 05) [ISecAuditors Security Advisories] Multiple XSS vulnerabilities in "Project'Or RIA" ISecAuditors Security Advisories (Nov 05) [ISecAuditors Security Advisories] LinkedIn social network is affected by Persistent Cross-Site Scripting vulnerability ISecAuditors Security Advisories (Nov 05)
I'm new here, and I already have something to share Jack Johnson (Nov 07) Re: I'm new here, and I already have something to share Jack Johnson (Nov 09)
Re: [CVE-2013-6356] Avira Secure Backup v1.0.0.1 Multiple Registry Key Value Parsing Local Buffer Overflow Vulnerability Jann Horn (Nov 17)
Re: Ip address and mac address hardcoded Jason Hellenthal (Nov 17)
Re: I'm new here, and I already have something to share Jasper Kips (Nov 09)
Re: [cryptography] coderman's keys Jeffrey Goldberg (Nov 01)
Re: Cloud Questions Jeffrey Walton (Nov 09) Re: Cloud Questions Jeffrey Walton (Nov 09) Re: Cloud Questions Jeffrey Walton (Nov 09) Another Apple Security Failure (Apple Mail on the iPhone).... Jeffrey Walton (Nov 11) Re: Another Apple Security Failure (Apple Mail on the iPhone).... Jeffrey Walton (Nov 15) Re: iCloud and privacy...last word Jeffrey Walton (Nov 29) Re: Seems like Coinbase Security Team doesn't know how their cookie works Jeffrey Walton (Nov 30)
Re: whatsapp opening url in background Jerome Athias (Nov 15)
List Charter John Cartwright (Nov 19)
WebSurgery v1.1 released (Web application security testing suite) John Stamatakis (Nov 12)
Re: [cryptography] coderman's keys Julian Silden Langlo (Nov 01)
[CVE-2013-6356] Avira Secure Backup v1.0.0.1 Multiple Registry Key Value Parsing Local Buffer Overflow Vulnerability Julien Ahrens (Nov 16) Re: [CVE-2013-6356] Avira Secure Backup v1.0.0.1 Multiple Registry Key Value Parsing Local Buffer Overflow Vulnerability Julien Ahrens (Nov 17)
Re: DoS vulnerability in Internet Explorer 6, 7, 8 (access violation) laurent gaffie (Nov 19)
FOSCAM Wireless IP Camera - SSID Cross Site Scripting LIAD Mizrachi (Nov 07) D-Link Router 2760N (DSL-2760U-BN) Multiple XSS LIAD Mizrachi (Nov 11) Tapuz - Flix Password ByPass LIAD Mizrachi (Nov 25)
[SECURITY] [DSA 2805-1] sup-mail security update Luciano Bello (Nov 28)
Re: Defense in depth -- the Microsoft way (part 13): surprising and inconsistent behaviour, sloppy coding, sloppy QA, sloppy documentation Mario Vilas (Nov 03)
Re: XXE Injection in Spring Framework Mark Thomas (Nov 05)
D-Link! What's wrong with you? matteo ignaccolo (Nov 28)
Re: Ip address and mac address hardcoded Maximilian Grobecker (Nov 17) Re: Ip address and mac address hardcoded Maximilian Grobecker (Nov 17)
[SECURITY] [DSA 2795-1] lighttpd security update Michael Gilbert (Nov 13) [SECURITY] [DSA 2795-2] lighttpd regression update Michael Gilbert (Nov 17) [SECURITY] [DSA 2797-1] chromium-browser security update Michael Gilbert (Nov 18) [SECURITY] [DSA 2798-1] curl security update Michael Gilbert (Nov 18)
Re: [cryptography] coderman's keys Michael Hallgren (Nov 01)
bugs in IJG jpeg6b & libjpeg-turbo Michal Zalewski (Nov 12)
Intersystems Cache Remote Code Execution (via Default Minimal Security Install) Mike Arnold (Nov 19)
[SECURITY] [DSA 2793-1] libav security update Moritz Muehlenhoff (Nov 09) [SECURITY] [DSA 2797-1] icedove security update Moritz Muehlenhoff (Nov 13) [SECURITY] [DSA 2803-1] quagga security update Moritz Muehlenhoff (Nov 26) [SECURITY] [DSA 2804-1] drupal7 security update Moritz Muehlenhoff (Nov 26) [SECURITY] [DSA 2807-1] links2 security update Moritz Muehlenhoff (Nov 30)
Ip address and mac address hardcoded mramelie (Nov 16) Re: Ip address and mac address hardcoded mramelie (Nov 17)
XXE Injection in Spring Framework MustLive (Nov 02) XSS and FPD vulnerabilities in LBG Zoom In/Out Effect Slider for WordPress MustLive (Nov 04) BF, LE and IAA vulnerabilities in InstantCMS MustLive (Nov 17) DoS vulnerability in Internet Explorer 6, 7, 8 (access violation) MustLive (Nov 19) Code Execution vulnerability in Contact Form 7 for WordPress MustLive (Nov 22) Day of bugs in WordPress 3 MustLive (Nov 30) Vulnerabilities hiddenly fixed in WordPress 3.6 and 3.6.1 MustLive (Nov 30)
Re: [cryptography] coderman's keys Natanael (Nov 01)
Re: XXE Injection in Spring Framework /-\\\\ndrew /\\//ady (Nov 05)
Capstone disassembly framework: looking for Beta-testers Nguyen Anh Quynh (Nov 20) Re: [Dailydave] Capstone disassembly framework: looking for Beta-testers Nguyen Anh Quynh (Nov 21) Re: [Dailydave] Capstone disassembly framework: looking for Beta-testers Nguyen Anh Quynh (Nov 21)
Wapiti 2.3.0 - the python-powered web-application vulnerability scanner Nicolas Surribas (Nov 27)
ColdFusion and Adobe Flash Player Security Updates Osama Alrashid (Nov 13)
HOTBOX Multiple Vulnerabilities Oz (Nov 03)
Re: whatsapp opening url in background Pål Nilsen (Nov 15)
Re: [cryptography] coderman's keys Pedro Worcel (Nov 03)
Geox fails.. pr0n4h4x (Nov 05)
Some more on Geox.. pr0nh4x (Nov 15)
Facebook Vulnerability Discloses Friends Lists Defined as Private qsrc Quotium (Nov 21)
Yahoo Open Redirect Vulnerability - or "Designing vulnerabilities" Robert Kugler (Nov 27)
Re: ASUS RT-N13U Unsecured Telnet on LAN and WAN Rob Whitney (Nov 01) Re: [cryptography] coderman's keys Rob Whitney (Nov 01) ClipBucket v2.6-r738 Arbitrary File Upload 0-Day Rob Whitney (Nov 16)
Vulnerabilities in Redaxo 4.5 CMS Root User (Nov 09)
pineapp mailsecure no authenticated privilege escalation & remote execution code Ruben Garrote (Nov 19)
Re: Vulnerabilities hiddenly fixed in WordPress 3.6 and 3.6.1 Ryan Dewhurst (Nov 30)
[SECURITY] [DSA 2790-1] nss security update Salvatore Bonaccorso (Nov 02) [SECURITY] [DSA 2792-1] wireshark security update Salvatore Bonaccorso (Nov 04) [SECURITY] [DSA 2794-1] spip security update Salvatore Bonaccorso (Nov 10) [SECURITY] [DSA 2796-1] torque security update Salvatore Bonaccorso (Nov 13) [SECURITY] [DSA 2798-2] curl security update Salvatore Bonaccorso (Nov 20) [SECURITY] [DSA 2801-1] libhttp-body-perl security update Salvatore Bonaccorso (Nov 21) [SECURITY] [DSA 2800-1] nss security update Salvatore Bonaccorso (Nov 25)
Power of Community 2013 special releases of ICS/SCADA toolkit scadastrangelove (Nov 04)
Pastebin Captcha Bypass Scott Arciszewski (Nov 28)
[ MDVSA-2013:265 ] kernel security (Nov 10) n.runs-SA-2013.006 - Microsoft Outlook/Crypto API - Design Bug security (Nov 12) [ MDVSA-2013:266 ] java-1.6.0-openjdk security (Nov 19) [ MDVSA-2013:267 ] java-1.7.0-openjdk security (Nov 19) [ MDVSA-2013:268 ] torque security (Nov 19) [ MDVSA-2013:269 ] firefox security (Nov 20) [ MDVSA-2013:270 ] nss security (Nov 20) [ MDVSA-2013:271 ] pmake security (Nov 21) [ MDVSA-2013:272 ] poppler security (Nov 21) [ MDVSA-2013:273 ] libjpeg security (Nov 21) [ MDVSA-2013:274 ] libjpeg security (Nov 21) [ MDVSA-2013:275 ] krb5 security (Nov 21) [ MDVSA-2013:276 ] curl security (Nov 21) [ MDVSA-2013:277 ] lighttpd security (Nov 21) [ MDVSA-2013:278 ] samba security (Nov 21) [ MDVSA-2013:279 ] wireshark security (Nov 22) [ MDVSA-2013:280 ] memcached security (Nov 22) [ MDVSA-2013:281 ] nginx security (Nov 24) [ MDVSA-2013:282 ] perl-HTTP-Body security (Nov 25) [ MDVSA-2013:283 ] glibc security (Nov 25) [ MDVSA-2013:284 ] glibc security (Nov 25) [ MDVSA-2013:285 ] bugzilla security (Nov 26) [ MDVSA-2013:286 ] ruby security (Nov 26) [ MDVSA-2013:287 ] drupal security (Nov 26)
[Security-news] SA-CONTRIB-2013-087 - Payment for Webform - Access Bypass security-news (Nov 06) [Security-news] SA-CONTRIB-2013-089 - Node Access Keys - Access Bypass security-news (Nov 06) [Security-news] SA-CONTRIB-2013-088 - Secure Pages - Missing Encryption of Sensitive Data security-news (Nov 06) [Security-news] SA-CONTRIB-2013-091 - Groups, Communities and Co (GCC) - Access Bypass security-news (Nov 13) [Security-news] SA-CONTRIB-2013-090 - Revisioning - Access Bypass security-news (Nov 13) [Security-news] SA-CONTRIB-2013-092 - Misery - Denial of Service (DOS) vulnerability. security-news (Nov 13) [Security-news] SA-CONTRIB-2013-093 - Invitation - Access Bypass security-news (Nov 20) [Security-news] SA-CONTRIB-2013-094 - EU Cookie Compliance - Cross Site Scripting (XSS) security-news (Nov 20) [Security-news] SA-CONTRIB-2013-096 - Entity reference - Access bypass security-news (Nov 20) [Security-news] SA-CONTRIB-2013-095 - Organic Groups - Access bypass security-news (Nov 20) [Security-news] SA-CORE-2013-003 - Drupal core - Multiple vulnerabilities security-news (Nov 20)
Re: ASUS RT-N13U Unsecured Telnet on LAN and WAN Shelby Spencer (Nov 05)
Re: Cloud Questions silence_is_best (Nov 09) iCloud and privacy...last word silence_is_best (Nov 28)
Windows Local DOS on Win32 Handle Validation sixtyvividtails (Nov 12) Re: Windows Local DOS on Win32 Handle Validation sixtyvividtails (Nov 13)
Defense in depth -- the Microsoft way (part 13): surprising and inconsistent behaviour, sloppy coding, sloppy QA, sloppy documentation Stefan Kanthak (Nov 03) Re: Defense in depth -- the Microsoft way (part 13): surprising and inconsistent behaviour, sloppy coding, sloppy QA, sloppy documentation Stefan Kanthak (Nov 03) Defense in depth -- the Microsoft way (part 14): incomplete, misleading and dangerous documentation Stefan Kanthak (Nov 24)
CVE-2013-5966 - XSS in ZK Framework Stephan Rickauer (Nov 15)
Imperva WAF/DAF 9.5 patch8 and 10.0 patch 2 localroot vulnerability steve jobs (Nov 21) Re: Imperva WAF/DAF 9.5 patch8 and 10.0 patch 2 localroot vulnerability steve jobs (Nov 21)
Re: Imperva WAF/DAF 9.5 patch8 and 10.0 patch 2 localroot vulnerability tennc (Nov 23) Re: Tapuz - Flix Password ByPass tennc (Nov 27)
[SECURITY] [DSA 2802-1] nginx security update Thijs Kinkhorst (Nov 22) [SECURITY] [DSA 2806-1] nbd security update Thijs Kinkhorst (Nov 29)
Kaseya 6.3 Arbitrary File Upload Vulnerability Thomas Hibbert (Nov 18) DesktopCentral Arbitrary File Upload Vulnerability Thomas Hibbert (Nov 18) CORRECTION: Kaseya 6.3 Arbitrary File Upload Vulnerability Thomas Hibbert (Nov 20) CORRECTION: DesktopCentral Arbitrary File Upload Vulnerability Thomas Hibbert (Nov 20)
[OVSA20131108] OpenVAS Manager And OpenVAS Administrator Vulnerable To Partial Authentication Bypass Tim Brown (Nov 15)
DC4420 (DefCon London) meeting next Tuesday, 26th November 2013 Tony Naggs (Nov 21)
NEW VMSA-2013-0013 VMware Workstation host privilege escalation vulnerability \"VMware Security Response Center\" (Nov 15)
pdirl PHP Directory Listing 1.0.4 - Cross Site Scripting Web Vulnerabilities Vulnerability Lab (Nov 01) PayPal Inc Bug Bounty #65 China - Redirect Web Vulnerability Vulnerability Lab (Nov 19) PayPal Inc Bug Bounty #42 - Persistent POST Inject Vulnerability Vulnerability Lab (Nov 19) Paypal Inc Bug Bounty #47 ALYZ - Persistent Search Vulnerability Vulnerability Lab (Nov 19) Paypal Bug Bounty #14 - Persistent Payment Mail Encoding Vulnerability Vulnerability Lab (Nov 20) Appologics AirBeam v1.9.2 iOS - Multiple Web Vulnerabilities Vulnerability Lab (Nov 20) NewsAktuell PressePortal DE - Remote SQL Injection Web Vulnerability Vulnerability Lab (Nov 28)
How to take advantage of Chrome autofill feature to get sensitive information vulns () 11paths com (Nov 01)
CSRF vulnerabilities in OS of fortianalyzer 5.0.4 William Costa (Nov 12)
Flatpress version 1.0 remote code execution NULLday Wire Ghoul (Nov 06)
[Article] The Internal of Reloc .text x90c (Nov 01) Case Study: CVE-2010-0436 KDE TOCTTOU vulnerability x90c (Nov 03) XADV-2013003 Linux Kernel eCryptfs write_tag_3_packet Heap Buffer Overflow Vulnerability x90c (Nov 04) XADV-2013003 Linux Kernel eCryptfs write_tag_3_packet Heap Buffer Overflow Vulnerability x90c (Nov 04) XADV-2013003 Linux Kernel bt8xx Video Driver IOCTL Heap Overflow x90c (Nov 09) the advisory canceled. x90c (Nov 09) XADV-2013003 Linux Kernel fbdev Driver arcfb_write() Overflow x90c (Nov 11) XADV-2013004 Linux Kernel ipvs Kernel Stack Overflow x90c (Nov 11) XADV-2013005 FreeBSD 10 <= nand Driver IOCTL Kernel Memory Leak Bug x90c (Nov 15) XADV-2013006 FreeBSD <= 10 kernel qlxge/qlxgbe Driver IOCTL Multiple Kernel Memory Leak Bugs x90c (Nov 15) XADV-2013007 Linux Kernel bt8xx Video Driver IOCTL Heap Overflow x90c (Nov 18) XADV-2013008 Linux Kernel 3.11.7 <= sk_attach_filter Kernel Heap Corruption x90c (Nov 19)
Re: OpenSSH Security Advisory: gcmrekey.adv yersinia (Nov 09)
Re: Cloud Questions Yvan Janssens (Nov 09)
[SECURITY] [DSA 2789-1] strongswan security update Yves-Alexis Perez (Nov 01)