April 2010 Archives by author

• Messages sorted by: [ thread ] [ subject ] [ date ]
• More info on this list...

Starting: Thu Apr 1 08:20:42 BST 2010
Ending: Fri Apr 30 22:48:40 BST 2010
Messages: 458

• [Full-disclosure] Best Wireless Sniffer for MAC OS X   KF (lists)
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Ivan .
• [Full-disclosure] We must work harder on cloud, says Microsoft   Ivan .
• [Full-disclosure] We must work harder on cloud, says Microsoft   Ivan .
• [Full-disclosure] Randi Harper aka Sektie demolished   Andrew A
• [Full-disclosure] Bonsai Information Security - SQL Injection in Cacti <= 0.8.7e   Bonsai Information Security Advisories
• [Full-disclosure] Bonsai Information Security - OS Command Injection in Cacti <= 0.8.7e   Bonsai Information Security Advisories
• [Full-disclosure] CORE-2010-0323: XSS Vulnerability in NextGEN Gallery Wordpress Plugin   CORE Security Technologies Advisories
• [Full-disclosure] CORE-2010-0406 - User Invoices Persistent XSS Vulnerability in CactuShop   CORE Security Technologies Advisories
• [Full-disclosure] CVE-2009-4510: TANDBERG VCS Static SSH Host Keys   VSR Advisories
• [Full-disclosure] CVE-2009-4511: TANDBERG VCS Arbitrary File Retrieval   VSR Advisories
• [Full-disclosure] CVE-2009-4509: TANDBERG VCS Authentication Bypass   VSR Advisories
• [Full-disclosure] Vuln Disclosure summarized (TTBOMA)   Sergio 'shadown' Alvarez
• [Full-disclosure] www.Demolay.org - full disclosure sql injection vulnerability   Malice Anonymous
• [Full-disclosure] [CVE-2010-0432] Apache OFBiz Multiple XSS Vulnerabilities   Lucas Apa
• [Full-disclosure] MacOS X 10.6.3 filesystem hfs Denial of Service Vulnerability   Maksymilian Arciemowicz
• [Full-disclosure] Weev's Mugshot   BMF
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   BMF
• [Full-disclosure] [SECURITY] [DSA 2028-1] New xpdf packages fix several vulnerabilities   Luciano Bello
• [Full-disclosure] Security system   Benji
• [Full-disclosure] Weev's Mugshot   Benji
• [Full-disclosure] Vulnerabilities in TAK cms   Benji
• [Full-disclosure] Vulnerability in CB Captcha for Joomla and Mambo   Benji
• [Full-disclosure] Vulnerabilities in phpCOIN   Benji
• [Full-disclosure] [CORELAN-10-032] - Easyzip 2000 .zip Stack BOF   Benji
• [Full-disclosure] Apple iPhone 3.1.2 (7D11) Model MB702LL Mobile Safari Denial-of-Service   Matthew Bergin
• [Full-disclosure] Security system   T Biehn
• [Full-disclosure] Vulnerabilities in TAK cms   T Biehn
• [Full-disclosure] Vulnerabilities in TAK cms   T Biehn
• [Full-disclosure] [Tool] ReFrameworker 1.1   T Biehn
• [Full-disclosure] IE8 img tag HiJacking   T Biehn
• [Full-disclosure] IE8 img tag HiJacking   T Biehn
• [Full-disclosure] go public to avoid jail   T Biehn
• [Full-disclosure] go public to avoid jail   T Biehn
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Pieter de Boer
• [Full-disclosure] Java Deployment Toolkit Performs Insufficient Validation of Parameters   Nick Boyce
• [Full-disclosure] How to disable Java Deployment Toolkit   Nick Boyce
• [Full-disclosure] hashdays 2010 - Call for Papers (#days CFP)   hashdays CFP
• [Full-disclosure] Insufficient Anti-automation and Denial of Service vulnerabilities in multiple systems   Bogdan Calin
• [Full-disclosure] List Charter   John Cartwright
• [Full-disclosure] [Tyr 2] Article Friendly File Inclusion   Ch3Kan
• [Full-disclosure] Best Wireless Sniffer for MAC OS X   Justin Chang
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Lyal Collins
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Lyal Collins
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Lyal Collins
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Lyal Collins
• [Full-disclosure] DeepSec 2010 - Call for Papers and Experts   DeepSec Conference
• [Full-disclosure] [USN-923-1] OpenJDK vulnerabilities   Kees Cook
• [Full-disclosure] [USN-924-1] Kerberos vulnerabilities   Kees Cook
• [Full-disclosure] [SECURITY] [DSA 2033-1] New ejabberd packages fix denial of service   Sébastien Delafond
• [Full-disclosure] Netsparker Community Edition - Free web app scanner is out!   Demo Delivery
• [Full-disclosure] [USN-931-1] FFmpeg vulnerabilities   Marc Deslauriers
• [Full-disclosure] [USN-931-2] FFmpeg regression   Marc Deslauriers
• [Full-disclosure] ZDI-10-033: Microsoft Internet Explorer TIME2 Behavior Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-034: Microsoft Internet Explorer Tabular Data Control ActiveX Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-035: Apple QuickTime genl Atom Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-036: Apple QuickTime H.263 PictureHeader Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-037: Apple QuickTime MJPEG Sample Dimensions Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-038: Apple QuickTime QDMC/QDM2 Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-039: Apple OS X Internet Enabled Disk Image Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-040: Apple QuickTime RLE Bit Depth Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-041: Apple QuickTime QDM2/QDCA Atom Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-042: Apple QuickTime MediaVideo Compressor Name Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-043: Apple QuickTime FlashPix NumberOfTiles Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-044: Apple QuickTime FLI LinePacket Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-045: Apple QuickTime MPEG-1 genl Atom Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-046: Mozilla Firefox Web Worker Array Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-047: Mozilla Firefox libpr0n imgContainer Bits-Per-Pixel Change Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-048: Mozilla Firefox nsTreeContentView Dangling Pointer Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-049: Mozilla Firefox PluginArray nsMimeType Dangling Pointer Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-050: Mozilla Firefox nsTreeSelection EventListener Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-051: Sun Java Runtime RMIConnectionImpl Privileged Context Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-052: Sun Java Runtime Environment XNewPtr Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-053: Sun Java Runtime Environment MIDI File metaEvent Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-054: Sun Java Runtime Environment JPEGImageReader stepX Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-055: Sun Java Runtime Environment Mutable InetAddress Socket Policy Violation Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-056: Sun Java Runtime Environment Trusted Methods Chaining Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-057: Sun Java Runtime Environment JPEGImageDecoderImpl Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-058: Apple Mac OS X ImageIO Framework JPEG2000 Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-059: Sun Java Runtime Environment JPEGImageEncoderImpl Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-060: Sun Java Runtime Environment MixerSequencer Invalid Array Index Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-061: Sun Java Runtime CMM readMabCurveData Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-062: Novell Netware NWFTPD RMD/RNFR/DELE Argument Parsing Remote Code Execution Vulnerabilities   ZDI Disclosures
• [Full-disclosure] ZDI-10-063: Mozilla Firefox Cross Document DOM Node Moving Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-065: CA XOsoft xosoapapi.asmx Multiple Remote Code Execution Vulnerabilities   ZDI Disclosures
• [Full-disclosure] ZDI-10-066: CA XOsoft Control Service entry_point.aspx Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-067: Apple QuickTime Pict BkPixPat Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-068: Apple QuickTime H.263 Array Index Parsing Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-069: Microsoft Office Publisher File Conversion TextBox Processing Buffer Overflow Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-070: Microsoft Windows Media Player Codec Retrieval Dangling Pointer Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-071: Adobe Reader TrueType Font Handling Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-073: Sun Microsystems Directory Server DSML-over-HTTP Username Search Denial of Service Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-074: Sun Microsystems Directory Server Enterprise ASN.1 Parsing Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-075: Sun Microsystems Directory Server Enterprise DSML UTF-8 Denial of Service Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-072: Cisco Secure Desktop CSDWebInstaller ActiveX Control Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-076: Apple Preview libFontParser SpecialEncoding Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-077: Adobe Download Manager Atlcom.get_atlcom ActiveX Control Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-078: Novell ZENworks Configuration Management UploadServlet Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-079: Realnetworks Helix Server NTLM Authentication Invalid Base64 Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] 2010 Nmap/SecTools.org survey   Henri Doreau
• [Full-disclosure] [CORELAN-10-032] - Easyzip 2000 .zip Stack BOF   Peter Van Eeckhoutte
• [Full-disclosure] Advisory 01/2010: MyBB Password Reset Email BCC: Injection Vulnerability   Stefan Esser
• [Full-disclosure] Advisory 02/2010: MyBB Password Reset Weak Random Numbers Vulnerability   Stefan Esser
• [Full-disclosure] Advisory 02/2010: MyBB Password Reset Weak Random Numbers Vulnerability   Stefan Esser
• [Full-disclosure] A socio-psychological analysis of the first internet war (Estonia)   Gadi Evron
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Nick FitzGerald
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Nick FitzGerald
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Nick FitzGerald
• [Full-disclosure] [SECURITY] [DSA-2035-1] New apache2 packages fix several issues   Stefan Fritsch
• [Full-disclosure] Non ZDI Post - EOM   Rob Fuller
• [Full-disclosure] Vuln Disclosure summarized (TTBOMA)   Rob Fuller
• [Full-disclosure] Vulnerabilities in phpCOIN   Jan G.B.
• [Full-disclosure] Vulnerabilities in phpCOIN   Jan G.B.
• [Full-disclosure] Anthology of attacks via captchas   Jan G.B.
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Christopher Gilbert
• [Full-disclosure] redefining research: vulnerability journalism   Christopher Gilbert
• [Full-disclosure] Check those default iPhone settings...   Thor (Hammer of God)
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Thor (Hammer of God)
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Thor (Hammer of God)
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Thor (Hammer of God)
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Thor (Hammer of God)
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Thor (Hammer of God)
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Thor (Hammer of God)
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Thor (Hammer of God)
• [Full-disclosure] [SECURITY] [DSA 2029-1] New imlib2 packages fix arbitrary code execution   Nico Golde
• [Full-disclosure] [SECURITY] [DSA 2030-1] New mahara packages fix sql injection   Nico Golde
• [Full-disclosure] Zabbix <= 1.8.1 SQL Injection   Dawid Golunski
• [Full-disclosure] HP System Management Homepage(SMH) | URL Redirection Abuse   YGN Ethical Hacker Group
• [Full-disclosure] Clever DEP Trick   Christoph Gruber
• [Full-disclosure] We must work harder on cloud, says Microsoft   Georgi Guninski
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Mike Hale
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Mike Hale
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Mike Hale
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Mike Hale
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Mike Hale
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Mike Hale
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Mike Hale
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Mike Hale
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Mike Hale
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Mike Hale
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Mike Hale
• [Full-disclosure] TCPDF Library Remote Code Execution Vulnerability   Matthias -apoc- Hecker
• [Full-disclosure] Security system   Michael Holstein
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Michael Holstein
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Michael Holstein
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Michael Holstein
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Michael Holstein
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Michael Holstein
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Honer, Lance
• [Full-disclosure] [TOOL] Version 0.2 of bing-ip2hosts released   Andrew Horton
• [Full-disclosure] [SECURITY] [DSA 2026-1] New netpbm-free packages fix denial of service   Giuseppe Iuculano
• [Full-disclosure] [SECURITY] [DSA 2031-1] New krb5 packages fix denial of service   Giuseppe Iuculano
• [Full-disclosure] [SECURITY] [DSA 2032-1] New libpng packages fix several vulnerabilities   Giuseppe Iuculano
• [Full-disclosure] [SECURITY] [DSA 2021-2] New spamass-milter packages fix regression   Giuseppe Iuculano
• [Full-disclosure] Off Topic: Information Security research paper help   John Jacobs
• [Full-disclosure] Call for participation -- Eth0:2010 Summer   Mark Janssen
• [Full-disclosure] Insufficient Anti-automation and Denial of Service vulnerabilities in multiple systems   Kaddeh
• [Full-disclosure] NT becoming pure microkernel   Kaddeh
• [Full-disclosure] Interactive Linux Binary Analysis Tool   Kaddeh
• [Full-disclosure] [HITB-Announce] FINAL CALL - CFP for HITBSecConf2010 Amsterdam   Hafez Kamal
• [Full-disclosure] [HITB-Announce] HITBSecConf2009 - Malaysia Videos Released!   Hafez Kamal
• [Full-disclosure] [HITB-Announce] HITBSecConf2010 - Dubai - Presentation Materials   Hafez Kamal
• [Full-disclosure] [HITB-Announce] HITB eZine Issue 002 out now!   Hafez Kamal
• [Full-disclosure] IE8 img tag HiJacking   Dan Kaminsky
• [Full-disclosure] IE8 img tag HiJacking   Dan Kaminsky
• [Full-disclosure] XSS in Drupal Better Formats Module   Justin C. Klein Keane
• [Full-disclosure] XSS in Drupal Better Formats Module   Justin C. Klein Keane
• [Full-disclosure] TaskFreak 0.6.2 SQL Injection Vulnerability   Justin C. Klein Keane
• [Full-disclosure] Off Topic: Information Security research paper help   Justin C. Klein Keane
• [Full-disclosure] Vulnerabilities in phpCOIN   Jeff Kell
• [Full-disclosure] Sun D3VS SM0KiNG PoT AGAiN   Kingcope
• [Full-disclosure] Sun D3VS SM0KiNG PoT AGAiN   Kingcope
• [Full-disclosure] CRiMiNAL M   Kingcope
• [Full-disclosure] CRiMiNAL MiNDED - iSOWAR3Z SPLOiT   Kingcope
• [Full-disclosure] Sun D3VS SM0KiNG PoT AGAiN   Kingcope
• [Full-disclosure] [SECURITY] [DSA 2034-1] New phpmyadmin packages fix several vulnerabilities   Thijs Kinkhorst
• [Full-disclosure] [SECURITY] [DSA 2036-1] New jasper packages fix denial of service   Thijs Kinkhorst
• [Full-disclosure] [SECURITY] [DSA 2037-1] New kdm packages fix privilege escalation   Thijs Kinkhorst
• [Full-disclosure] [SECURITY] [DSA 2038-1] New pidgin packages fix denial of service   Thijs Kinkhorst
• [Full-disclosure] [SECURITY] [DSA 2039-1] New cacti packages fix missing input sanitising   Thijs Kinkhorst
• [Full-disclosure] Randi Harper aka Sektie demolished   Anders Klixbull
• [Full-disclosure] Randi Harper aka Sektie demolished   Anders Klixbull
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Bert Knabe
• [Full-disclosure] Hackproofing Oracle Financials 11i & R12   Joxean Koret
• [Full-disclosure] CA20100406-01: Security Notice for CA XOsoft   Kotas, Kevin J
• [Full-disclosure] iDefense Security Advisory 04.09.10: VMware VMnc Codec Heap Overflow Vulnerability   iDefense Labs
• [Full-disclosure] iDefense Security Advisory 04.15.10: Multiple Vendor AgentX++ Stack Buffer Overflow Vulnerability   iDefense Labs
• [Full-disclosure] iDefense Security Advisory 04.15.10: Multiple Vendor AgentX++ Integer Overflow Vulnerability   iDefense Labs
• [Full-disclosure] fspro.net Lock My PC 4 backdoor password   Juha-Matti Laurio
• [Full-disclosure] CVE or SUN bug number for http://lists.grok.org.uk/pipermail/full-disclosure/2010-April/074036.html   Juha-Matti Laurio
• [Full-disclosure] Best Wireless Sniffer for MAC OS X   James Lay
• [Full-disclosure] FileCache: tmp file permission vulnerability.   Vladimir Lettiev
• [Full-disclosure] [CORELAN]-10-018 - TugZip 3.5   Lincoln
• [Full-disclosure] ACROS Security: Remote Binary Planting in VMware Tools for Windows (ASPR #2010-04-12-1)   ACROS Lists
• [Full-disclosure] ACROS Security: Local Binary Planting in VMware Tools for Windows (ASPR #2010-04-12-2)   ACROS Lists
• [Full-disclosure] Security-Assessment.com WhitePaper/Addendum: Cross Context Scripting with Firefox & Exploiting Cross Context Scripting vulnerabilities in Firefox   Roberto Suggi Liverani
• [Full-disclosure] CVE or SUN bug number for http://lists.grok.org.uk/pipermail/full-disclosure/2010-April/074036.html   Lode, Nilss
• [Full-disclosure] Interactive Linux Binary Analysis Tool   Andrew Lyon
• [Full-disclosure] Security system   M.B.Jr.
• [Full-disclosure] London DEFCON April meet - DC4420 - Wed 28th April 2010   Major Malfunction
• [Full-disclosure] why not a sandbox   Marius
• [Full-disclosure] sudoedit local privilege escalation through PATH manipulation   Agazzini Maurizio
• [Full-disclosure] Best Wireless Sniffer for MAC OS X   David Maynor
• [Full-disclosure] Apple iPhone 3.1.2 (7D11) Model MB702LL Mobile Safari Denial-of-Service   David Maynor
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Michel Messerschmidt
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Michel Messerschmidt
• [Full-disclosure] [Tool] ReFrameworker 1.1   Erez Metula
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   John Morrison
• [Full-disclosure] [SECURITY] [DSA 2027-1] New xulrunner packages fix several vulnerabilities   Moritz Muehlenhoff
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Stephen Mullins
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Stephen Mullins
• [Full-disclosure] go public to avoid jail   Stephen Mullins
• [Full-disclosure] Vulnerabilities in HoloCMS   MustLive
• [Full-disclosure] Vulnerabilities in GunCMS and PhoenixCMS PHP Edition   MustLive
• [Full-disclosure] Vulnerabilities in TAK cms   MustLive
• [Full-disclosure] Vulnerabilities in Dunia Soccer   MustLive
• [Full-disclosure] Vulnerabilities in CMS SiteLogic   MustLive
• [Full-disclosure] Anthology of attacks via captchas   MustLive
• [Full-disclosure] Vulnerabilities in phpCOIN   MustLive
• [Full-disclosure] Vulnerabilities in CMS SiteLogic   MustLive
• [Full-disclosure] Vulnerabilities in WordPress   MustLive
• [Full-disclosure] Insufficient Anti-automation and Denial of Service vulnerabilities in multiple systems   MustLive
• [Full-disclosure] Anthology of attacks via captchas   MustLive
• [Full-disclosure] Vulnerability in CB Captcha for Joomla and Mambo   MustLive
• [Full-disclosure] Vulnerabilities in phpCOIN   MustLive
• [Full-disclosure] New vulnerabilities in CMS SiteLogic   MustLive
• [Full-disclosure] Fixing vulnerabilities in captcha-scripts mentioned in my last advisories   MustLive
• [Full-disclosure] Vulnerabilities in NovaBoard   MustLive
• [Full-disclosure] Vulnerability in Referer for DataLife Engine   MustLive
• [Full-disclosure] Vulnerabilities in CCMS   MustLive
• [Full-disclosure] Best Wireless Sniffer for MAC OS X   NOC
• [Full-disclosure] We must work harder on cloud, says Microsoft   Jason Nada
• [Full-disclosure] ACROS Security: Remote Binary Planting in VMware Tools for Windows (ASPR #2010-04-12-1)   Nam Nguyen
• [Full-disclosure] Randi Harper aka Sektie demolished   Gary Niger
• [Full-disclosure] fspro.net Lock My PC 4 backdoor password   Bugs NotHugs
• [Full-disclosure] Java Deployment Toolkit Performs Insufficient Validation of Parameters   Tavis Ormandy
• [Full-disclosure] Cert-Lexsi - Microsoft Windows Media Services MMS Buffer Overflow Vulnerability   Fabien PERIGAUD
• [Full-disclosure] Impossible to Maintain Secure Session With Twitter.com Web Interface   Chris Palmer
• [Full-disclosure] Victorinox Launches Super-Secure USB Stick   Rohit Patnaik
• [Full-disclosure] RFID DOS, DDOS   Rohit Patnaik
• [Full-disclosure] We must work harder on cloud, says Microsoft   Rohit Patnaik
• [Full-disclosure] We must work harder on cloud, says Microsoft   Rohit Patnaik
• [Full-disclosure] CVE or SUN bug number for http://lists.grok.org.uk/pipermail/full-disclosure/2010-April/074036.html   Theodore Pham
• [Full-disclosure] Security system   Haris Pilton
• [Full-disclosure] Advisory: Weak RNG in PHP session ID generation leads to session hijacking   Pierre Pronchery
• [Full-disclosure] Please Welcome SuperFB ( and ignore this message )   PsychoBilly
• [Full-disclosure] NT becoming pure microkernel   Nicolas RUFF
• [Full-disclosure] Old school bugs in Intel compiler and debugger FLEXlm FlexNet DRM   Marsh Ray
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Tracy Reed
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Tracy Reed
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Tracy Reed
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Tracy Reed
• [Full-disclosure] stratsec Security Advisory: SS-2010-004 Microsoft SMB Client Kernel Stack Overflow   stratsec Research
• [Full-disclosure] Apache ActiveMQ is prone to source code disclosure vulnerability.   SecPod Research
• [Full-disclosure] Secunia Research: Pulse CMS Arbitrary File Upload Vulnerability   Secunia Research
• [Full-disclosure] Secunia Research: Pulse CMS Cross-Site Request Forgery   Secunia Research
• [Full-disclosure] Secunia Research: VMWare VMnc Codec HexTile Encoding Buffer Overflow   Secunia Research
• [Full-disclosure] Secunia Research: VMWare VMnc Codec HexTile Encoding Two Integer Truncation Vulnerabilities   Secunia Research
• [Full-disclosure] Secunia Research: Visualization Library DAT File Parsing Vulnerabilities   Secunia Research
• [Full-disclosure] Secunia Research: e107 Content Management Plugin Script Insertion Vulnerability   Secunia Research
• [Full-disclosure] Secunia Research: e107 Avatar/Photograph Image File Upload Vulnerability   Secunia Research
• [Full-disclosure] Secunia Research: imlib2 "IMAGE_DIMENSIONS_OK()" Logic Error   Secunia Research
• [Full-disclosure] Secunia Research: Internet Download Manager FTP Buffer Overflow Vulnerability   Secunia Research
• [Full-disclosure] TELUS Security Labs VR - Adobe Reader U3D CLODMeshDeclaration Shading Count Memory Corruption   TELUS Security Labs - Vulnerability Research
• [Full-disclosure] Interactive Linux Binary Analysis Tool   Julien Reveret
• [Full-disclosure] Best Wireless Sniffer for MAC OS X   Cody Robertson
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   J Roger
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   J Roger
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   J Roger
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   J Roger
• [Full-disclosure] redefining research: vulnerability journalism   J Roger
• [Full-disclosure] go public to avoid jail   J Roger
• [Full-disclosure] Fun with FORTIFY_SOURCE   Dan Rosenberg
• [Full-disclosure] EUSecWest Amsterdam 2010 Call For Papers (short deadline May 5 - conf June 16/17)   Dragos Ruiu
• [Full-disclosure] Vulnerabilities in CMS SiteLogic   Henri Salo
• [Full-disclosure] Insufficient Anti-automation and Denial of Service vulnerabilities in multiple systems   Henri Salo
• [Full-disclosure] Amiro.CMS <= 5.4.4 SQL inj   Henri Salo
• [Full-disclosure] Amiro.CMS <= 5.4.4 SQL inj   Henri Salo
• [Full-disclosure] CVE request: VLC <1.0.6 Multiple issues   Henri Salo
• [Full-disclosure] XSS in Drupal Better Formats Module   Henri Salo
• [Full-disclosure] Please Welcome SuperFB ( and ignore this message )   Tonu Samuel
• [Full-disclosure] Miranda TLS MitM with XMPP/Jabber protocol   Jan Schejbal
• [Full-disclosure] RFID DOS, DDOS   Jan Schejbal
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Paul Schmehl
• [Full-disclosure] Sun D3VS SM0KiNG PoT AGAiN   Christian Sciberras
• [Full-disclosure] Vulnerabilities in phpCOIN   Christian Sciberras
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Christian Sciberras
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Christian Sciberras
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Christian Sciberras
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Christian Sciberras
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Christian Sciberras
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Christian Sciberras
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Christian Sciberras
• [Full-disclosure] Beware !!!!!!! before opening this site-->miano.us/misc/ff_sucks.html   Christian Sciberras
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Christian Sciberras
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Christian Sciberras
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Christian Sciberras
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Christian Sciberras
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Christian Sciberras
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Christian Sciberras
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Christian Sciberras
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Christian Sciberras
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Christian Sciberras
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Christian Sciberras
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Christian Sciberras
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Christian Sciberras
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Christian Sciberras
• [Full-disclosure] [CORELAN-10-020] - ZipScan 2.2c .zip file Stack BoF   Security
• [Full-disclosure] Vulnerability in Tembria Server Monitor   Security
• [Full-disclosure] CORELAN-10-025 Archive Searcher .zip Stack Overflow   Security
• [Full-disclosure] [CORELAN-10-026] TweakFS Zip Stack BOF   Security
• [Full-disclosure] [CORELAN-10-027] - HP Operations Manager for Windows, Remote Execution of Arbitrary Code (srcvw4.dll and srcvw32.dll)   Security
• [Full-disclosure] [CORELAN-10-028] - SpeedCommander 13.10 Memory Corruption DoS   Security
• [Full-disclosure] [CORELAN-10-029] - ZipGenius v6.3.1.2552 zgtips.dll Stack Buffer Overflow   Security
• [Full-disclosure] [CORELAN-10-30] - CommView Network Monitor And Analyzer v6.1 b644 - cv2k1.sys DoS (BSOD)   Security
• [Full-disclosure] [CORELAN-10-031] - ZipWrangler 1.2 .zip Stack Buffer Overflow   Security
• [Full-disclosure] [CORELAN-10-032] - Easyzip 2000 .zip Stack BOF   Security
• [Full-disclosure] Imperva SecureSphere Web Application Firewall and Database Firewall Bypass Vulnerability   Clear Skies Security
• [Full-disclosure] [SECURITY] Zip Unzip v6 (.zip) 0day stack buffer overflow vulnerability   Steven Seeley
• [Full-disclosure] [SECURITY] - Jzip (.zip) Unicode bof Vulnerability   Steven Seeley
• [Full-disclosure] Java Deployment Toolkit Performs InsufficientValidation of Parameters   Larry Seltzer
• [Full-disclosure] XSS in Drupal Better Formats Module   Larry Seltzer
• [Full-disclosure] 3rd CfP: INTERNET 2010 || September 20-25, 2010 - Valencia, Spain   Sandra Sendra
• [Full-disclosure] 3rd CfP: ACCESS 2010 || September 20-25, 2010 - Valencia, Spain   Sandra Sendra
• [Full-disclosure] Deadline Extension: ACCESS 2010 || September 20-25, 2010 - Valencia, Spain   Sandra Sendra
• [Full-disclosure] Deadline Extension: INTERNET 2010 || September 20-25, 2010 - Valencia, Spain   Sandra Sendra
• [Full-disclosure] Last Mile || InfoWare 2010 [ICCGI, ICWMC, INTERNET, ACCESS] September 20-25, 2010 - Valencia, Spain   Sandra Sendra
• [Full-disclosure] Deadline Extension: ACCESS 2010 || September 20-25, 2010 - Valencia, Spain   Sandra Sendra
• [Full-disclosure] Vulnerability Centreon IT & Network Monitoring v2.1.5   Mehdi Mahdjoub - Sysdream IT Security Services
• [Full-disclosure] Team SHATTER Security Advisory - Oracle Database SQL Injection vulnerability in DBMS_CDC_PUBLISH.DROP_CHANGE_SOURCE   Shatter
• [Full-disclosure] [USN-925-1] MoinMoin vulnerabilities   Jamie Strandboge
• [Full-disclosure] [USN-926-1] ClamAV vulnerabilities   Jamie Strandboge
• [Full-disclosure] [USN-624-2] Erlang vulnerability   Jamie Strandboge
• [Full-disclosure] [USN-927-1] NSS vulnerability   Jamie Strandboge
• [Full-disclosure] [USN-921-1] Firefox 3.5 and Xulrunner vulnerabilities   Jamie Strandboge
• [Full-disclosure] [USN-920-1] Firefox 3.0 and Xulrunner vulnerabilities   Jamie Strandboge
• [Full-disclosure] [USN-927-2] NSS regression   Jamie Strandboge
• [Full-disclosure] [USN-927-3] Thunderbird regression   Jamie Strandboge
• [Full-disclosure] [USN-928-1] Sudo vulnerability   Jamie Strandboge
• [Full-disclosure] [USN-890-6] CMake vulnerabilities   Jamie Strandboge
• [Full-disclosure] [USN-929-1] irssi vulnerabilities   Jamie Strandboge
• [Full-disclosure] [USN-932-1] KDM vulnerability   Jamie Strandboge
• [Full-disclosure] [USN-929-2] irssi regression   Jamie Strandboge
• [Full-disclosure] [USN-933-1] PostgreSQL vulnerability   Jamie Strandboge
• [Full-disclosure] [USN-934-1] Netpbm vulnerability   Jamie Strandboge
• [Full-disclosure] Cisco Security Advisory: Cisco Secure Desktop ActiveX Control Code Execution Vulnerability   Cisco Systems Product Security Incident Response Team
• [Full-disclosure] Cisco Security Advisory: Cisco Small Business Video Surveillance Cameras and Cisco 4-Port Gigabit Security Routers Authentication Bypass Vulnerability   Cisco Systems Product Security Incident Response Team
• [Full-disclosure] VMSA-2010-0006 ESX Service Console updates for samba and acpid   VMware Security Team
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Keith Tomler
• [Full-disclosure] New project Vulnerable Sites Databse   Tomy
• [Full-disclosure] Bonsai Information Security - OS Command Injection in Cacti <= 0.8.7e   Alberto Trivero
• [Full-disclosure] t2'10: Call for Papers 2010 (Helsinki / Finland)   Tomi Tuominen
• [Full-disclosure] Digivote replay attack   D V
• [Full-disclosure] Randi Harper aka Sektie demolished   Sandy Vagina
• [Full-disclosure] [Full-Disclosure] klout.com cookie vulnerability PoC   Kenny Vaneetvelde
• [Full-disclosure] Is Digital Due Process legit?   Jeffrey Walton
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Shaqe Wan
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Shaqe Wan
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Shaqe Wan
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Shaqe Wan
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Shaqe Wan
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Shaqe Wan
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Shaqe Wan
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Shaqe Wan
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Shaqe Wan
• [Full-disclosure] 2010 Nmap/SecTools.org survey   Shaqe Wan
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Shaqe Wan
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Shaqe Wan
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Shaqe Wan
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Shaqe Wan
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Shaqe Wan
• [Full-disclosure] Facebook persistent XSS vulnerability on iPhone   Jon Wedell
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   wilder_jeff Wilder
• [Full-disclosure] Weev's Mugshot   Scarf Pride Worldwide
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Digital X
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Digital X
• [Full-disclosure] Security system   Lupus Yonderboy
• [Full-disclosure] How to disable Java Deployment Toolkit   Kristof Zelechovski
• [Full-disclosure] Vuln Disclosure summarized (TTBOMA)   Thierry Zoller
• [Full-disclosure] CompleteFTP v3.3.0 - Remote Memory Consumption DoS   Mehdi Mahdjoub [SYSDREAM]
• [Full-disclosure] Foxit 3.2.0.303 and Before Command Execution PoC   Peorth account
• [Full-disclosure] PoC for ZDI-10-078   tu canal amigo
• [Full-disclosure] The PDF-specific exploitation research   cocoruder
• [Full-disclosure] Turning SMB client side bug to server side   laurent gaffie
• [Full-disclosure] Free Security Video Tutorials for beginners   lists73 at gmx.de
• [Full-disclosure] Free Security Video Tutorials for beginners   lists73 at gmx.de
• [Full-disclosure] NT becoming pure microkernel   iroz at hushmail.com
• [Full-disclosure] NT becoming pure microkernel   iroz at hushmail.com
• [Full-disclosure] Hack.lu 2010 CfP   info
• [Full-disclosure] LFI In Multi Profit Websites   rockey killer
• [Full-disclosure] FileCache: tmp file permission vulnerability.   bugs lists
• [Full-disclosure] Fortinet Advisory: Fortinet Discovers Multiple Microsoft Visio Vulnerabilities (MS10-028)   liubing
• [Full-disclosure] Fortinet Advisory: Fortinet Discovers Multiple Adobe Reader / Acrobat Vulnerabilities (APSB10-09)   liubing
• [Full-disclosure] Introducing SecurityTube Questions!   n3ptun3 at london.com
• [Full-disclosure] Is Digital Due Process legit?   n3ptun3 at london.com
• [Full-disclosure] SQL Injection - www.glmees.org.br - A Masonic Grand Lodge   m4l1c3
• [Full-disclosure] [ MDVSA-2010:069 ] nss   security at mandriva.com
• [Full-disclosure] [ MDVSA-2010:070 ] firefox   security at mandriva.com
• [Full-disclosure] [ MDVSA-2010:071 ] krb5   security at mandriva.com
• [Full-disclosure] [ MDVSA-2010:072 ] cups   security at mandriva.com
• [Full-disclosure] [ MDVSA-2010:073 ] cups   security at mandriva.com
• [Full-disclosure] [ MDVSA-2010:073-1 ] cups   security at mandriva.com
• [Full-disclosure] [ MDVSA-2010:074 ] kdebase   security at mandriva.com
• [Full-disclosure] [ MDVSA-2010:075 ] openoffice.org   security at mandriva.com
• [Full-disclosure] [ MDVSA-2010:077 ] nss_db   security at mandriva.com
• [Full-disclosure] [ MDVSA-2010:078 ] sudo   security at mandriva.com
• [Full-disclosure] [ MDVSA-2010:076 ] openssl   security at mandriva.com
• [Full-disclosure] [ MDVSA-2010:079 ] irssi   security at mandriva.com
• [Full-disclosure] [ MDVSA-2010:079 ] irssi   security at mandriva.com
• [Full-disclosure] [ MDVSA-2010:080 ] brltty   security at mandriva.com
• [Full-disclosure] [ MDVSA-2010:081 ] apache-mod_auth_shadow   security at mandriva.com
• [Full-disclosure] [ MDVSA-2010:082 ] clamav   security at mandriva.com
• [Full-disclosure] [ MDVSA-2010:076-1 ] openssl   security at mandriva.com
• [Full-disclosure] [ MDVSA-2010:076-1 ] openssl   security at mandriva.com
• [Full-disclosure] [ MDVSA-2010:083 ] emacs   security at mandriva.com
• [Full-disclosure] [ MDVSA-2010:070-1 ] firefox   security at mandriva.com
• [Full-disclosure] [ MDVSA-2010:071 ] mozilla-thunderbird   security at mandriva.com
• [Full-disclosure] [ MDVSA-2010:084 ] java-1.6.0-openjdk   security at mandriva.com
• [Full-disclosure] [ MDVSA-2010:078-1 ] sudo   security at mandriva.com
• [Full-disclosure] [ MDVSA-2010:085 ] pidgin   security at mandriva.com
• [Full-disclosure] [ MDVSA-2009:332-1 ] gimp   security at mandriva.com
• [Full-disclosure] [ MDVSA-2010:086 ] kdegraphics   security at mandriva.com
• [Full-disclosure] [ MDVSA-2010:087 ] poppler   security at mandriva.com
• [Full-disclosure] [ MDVSA-2010:088 ] kernel   security at mandriva.com
• [Full-disclosure] Beware !!!!!!! before opening this site-->miano.us/misc/ff_sucks.html   mrx
• [Full-disclosure] NovaStor NovaNet <= 13.0 issues   mu-b
• [Full-disclosure] Free Security Video Tutorials for beginners   netinfinity
• [Full-disclosure] [Announcement] Introducing SecurityTube Tools section!   netinfinity
• [Full-disclosure] [Announcement] Introducing SecurityTube Toolssection!   netinfinity
• [Full-disclosure] Jcaptcha vulnerability   hvazquez at pentest.es
• [Full-disclosure] How to Detect Malware from Proxy Log(ISA,squid)   information security
• [Full-disclosure] Beware !!!!!!! before opening this site-->miano.us/misc/ff_sucks.html   information security
• [Full-disclosure] Simple RFID Spoofer   sketch sketch
• [Full-disclosure] [CORELAN-10-032] - Easyzip 2000 .zip Stack BOF   jeff smith
• [Full-disclosure] Israel IP range legit or false?   james at smithwaysecurity.com
• [Full-disclosure] FileCache: tmp file permission vulnerability.   paul.szabo at sydney.edu.au
• [Full-disclosure] Security Training Classes at SyScan'10 Singapore - Registration Opens   organiser at syscan.org
• [Full-disclosure] VMSA-2010-0007 VMware hosted products, vCenter Server and ESX patches resolve multiple security issues   VMware Security team
• [Full-disclosure] Advisory Optimal Archive 1.38   tecr0c at tecninja.net
• [Full-disclosure] HITBSecConf DUBAI 2010: Learn more about web attacks and stealth hacking   laurent.oudot at tehtri-security.com
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Valdis.Kletnieks at vt.edu
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Valdis.Kletnieks at vt.edu
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Valdis.Kletnieks at vt.edu
• [Full-disclosure] Vulnerabilities in phpCOIN   Valdis.Kletnieks at vt.edu
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Valdis.Kletnieks at vt.edu
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Valdis.Kletnieks at vt.edu
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Valdis.Kletnieks at vt.edu
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Valdis.Kletnieks at vt.edu
• [Full-disclosure] Compliance Is Wasted Money, Study Finds   Valdis.Kletnieks at vt.edu
• [Full-disclosure] Vuln Disclosure summarized (TTBOMA)   Valdis.Kletnieks at vt.edu
• [Full-disclosure] Off Topic: Information Security research paper help   Valdis.Kletnieks at vt.edu
• [Full-disclosure] Apple patent lawyers fail to close ddtek, Defcon CTF goes on   vulc at n
• [Full-disclosure] How to disable Java Deployment Toolkit   Křištof Želechovski
• [Full-disclosure] Chain based SQL injection   Владимир Воронцов
• [Full-disclosure] IE8 img tag HiJacking   Владимир Воронцов
• [Full-disclosure] Amiro.CMS <= 5.4.4 SQL inj   Владимир Воронцов
• [Full-disclosure] IE8 img tag HiJacking   Владимир Воронцов
• [Full-disclosure] Amiro CMS<=5.4.4 PHP injection   Владимир Воронцов

Last message date: Fri Apr 30 22:48:40 BST 2010
Archived on: Sat May 1 01:10:14 BST 2010

• Messages sorted by: [ thread ] [ subject ] [ date ]
• More info on this list...