September 2010 Archives by date

• Messages sorted by: [ thread ] [ subject ] [ author ]
• More info on this list...

Starting: Wed Sep 1 00:03:34 BST 2010
Ending: Thu Sep 30 22:42:40 BST 2010
Messages: 427

• [Full-disclosure] DLL hijacking with Autorun on a USB drive   Dan Kaminsky
• [Full-disclosure] DLL hijacking with Autorun on a USB drive   paul.szabo at sydney.edu.au
• [Full-disclosure] DLL hijacking with Autorun on a USB drive   paul.szabo at sydney.edu.au
• [Full-disclosure] DLL hijacking with Autorun on a USB drive   Dan Kaminsky
• [Full-disclosure] DLL hijacking with Autorun on a USB drive   Dan Kaminsky
• [Full-disclosure] [ MDVSA-2010:167 ] perl-libwww-perl   security at mandriva.com
• [Full-disclosure] DLL hijacking with Autorun on a USB drive   coderman
• [Full-disclosure] DLL hijacking with Autorun on a USB drive   Valdis.Kletnieks at vt.edu
• [Full-disclosure] DLL hijacking with Autorun on a USB drive   Christian Sciberras
• [Full-disclosure] DLL hijacking with Autorun on a USB drive   paul.szabo at sydney.edu.au
• [Full-disclosure] DLL hijacking with Autorun on a USB drive   Dan Kaminsky
• [Full-disclosure] Tortoise SVN DLL Hijacking Vulnerability   Nikhil Mittal
• [Full-disclosure] Unusable Security [was: Re: DLL hijacking with Autorun on a USB drive], also proxy in the middle detection / destruction   coderman
• [Full-disclosure] VMSA-2010-0013   VMware Security Team
• [Full-disclosure] VMSA-2010-0013 VMware ESX third party updates for Service Console   VMware Security Team
• [Full-disclosure] Orange Spain disclosing user phone number   xufi .
• [Full-disclosure] Online Binary Planting Exposure Test   ACROS Lists
• [Full-disclosure] Rooted CON 2011 - Call for Papers   Román Ramírez
• [Full-disclosure] nullcon Goa dwitiya (2.0) Call For Papers   nullcon
• [Full-disclosure] DLL hijacking with Autorun on a USB drive   Charles Morris
• [Full-disclosure] Month of Abysssec Undisclosed Bugs - Day 1   muts
• [Full-disclosure] [SecurityArchitect-008]: Xterm Local Buffer Overflow Vulnerability   musashi karak0rsan
• [Full-disclosure] LDAP NULL Bind being picked up, making non PCI compliant   Jason Nada
• [Full-disclosure] Online Binary Planting Exposure Test   Christian Sciberras
• [Full-disclosure] Online Binary Planting Exposure Test   YGN Ethical Hacker Group
• [Full-disclosure] Online Binary Planting Exposure Test   coderman
• [Full-disclosure] LDAP NULL Bind being picked up, making non PCI compliant   Valdis.Kletnieks at vt.edu
• [Full-disclosure] [ MDVSA-2010:168 ] openssl   security at mandriva.com
• [Full-disclosure] DLL hijacking with Autorun on a USB drive   matt
• [Full-disclosure] DLL hijacking with Autorun on a USB drive   paul.szabo at sydney.edu.au
• [Full-disclosure] DLL hijacking with ZIP files in email?   paul.szabo at sydney.edu.au
• [Full-disclosure] DLL hijacking with Autorun on a USB drive   Christian Sciberras
• [Full-disclosure] DLL hijacking with ZIP files in email?   coderman
• [Full-disclosure] DLL hijacking with ZIP files in email?   Mario Vilas
• [Full-disclosure] DLL hijacking POC (failed, see for yourself)   Christian Sciberras
• [Full-disclosure] DLL hijacking POC (failed, see for yourself)   p8x
• [Full-disclosure] DLL hijacking POC (failed, see for yourself)   Christian Sciberras
• [Full-disclosure] DLL hijacking POC (failed, see for yourself)   YGN Ethical Hacker Group
• [Full-disclosure] Moovida Media Player version 2.0.0.15 Insecure DLL Hijacking Vulnerability (libc.dll, quserex.dll)   YGN Ethical Hacker Group
• [Full-disclosure] DLL hijacking POC (failed, see for yourself)   YGN Ethical Hacker Group
• [Full-disclosure] DLL hijacking POC (failed, see for yourself)   Christian Sciberras
• [Full-disclosure] DLL hijacking POC (failed, see for yourself)   Darren McDonald
• [Full-disclosure] DLL hijacking POC (failed, see for yourself)   Christian Sciberras
• [Full-disclosure] DLL hijacking POC (failed, see for yourself)   Christian Sciberras
• [Full-disclosure] DLL hijacking POC (failed, see for yourself)   Jacky Jack
• [Full-disclosure] DLL hijacking POC (failed, see for yourself)   Darren McDonald
• [Full-disclosure] DLL hijacking POC (failed, see for yourself)   Darren McDonald
• [Full-disclosure] DLL hijacking POC (failed, see for yourself)   Larry Seltzer
• [Full-disclosure] DLL hijacking POC (failed, see for yourself)   Christian Sciberras
• [Full-disclosure] DLL hijacking POC (failed, see for yourself)   Larry Seltzer
• [Full-disclosure] [USN-982-1] Wget vulnerability   Marc Deslauriers
• [Full-disclosure] DLL hijacking POC (failed, see for yourself)   p8x
• [Full-disclosure] [ MDVSA-2010:169 ] mozilla-thunderbird   security at mandriva.com
• [Full-disclosure] Vulnerabilities in CMS WebManager-Pro   MustLive
• [Full-disclosure] Verizon Wireless security contact?   auto666077 at hushmail.com
• [Full-disclosure] question regarding RSA   Pavel Kankovsky
• [Full-disclosure] DLL hijacking with Autorun on a USB drive   Pavel Kankovsky
• [Full-disclosure] Bug in vde_plug, remote exploitation possible?   halfdog
• [Full-disclosure] DLL hijacking with Autorun on a USB drive   Valdis.Kletnieks at vt.edu
• [Full-disclosure] DLL hijacking with Autorun on a USB drive   coderman
• [Full-disclosure] DLL hijacking with Autorun on a USB drive   coderman
• [Full-disclosure] [ GLSA 201009-01 ] wxGTK: User-assisted execution of arbitrary code   Alex Legler
• [Full-disclosure] [ MDVSA-2010:170 ] wget   security at mandriva.com
• [Full-disclosure] DLL hijacking with Autorun on a USB drive   paul.szabo at sydney.edu.au
• [Full-disclosure] [SECURITY] [DSA-2102-1] New barnowl packages fix arbitrary code execution   Sebastien Delafond
• [Full-disclosure] Security vulnerabilities in Pligg CMS version 1.0.4   Bogdan Calin
• [Full-disclosure] Virus submission site   Hacxx 20
• [Full-disclosure] Virus submission site   Christian Sciberras
• [Full-disclosure] Virus submission site   Shreyas Zare
• [Full-disclosure] Virus submission site   IndianZ
• [Full-disclosure] Virus submission site   T Biehn
• [Full-disclosure] Tuscl.net SQL injection with 30k Plain Text Passwords & 80k Email list   Ben
• [Full-disclosure] Virus submission site   Hanno Böck
• [Full-disclosure] Tuscl.net SQL injection with 30k Plain Text Passwords & 80k Email list   Jhfjjf Hfdsjj
• [Full-disclosure] Tuscl.net SQL injection with 30k Plain Text Passwords & 80k Email list   Ben
• [Full-disclosure] Orange Spain disclosing user phone number   Juha-Matti Laurio
• [Full-disclosure] Virus submission site   Hacxx 20
• [Full-disclosure] Virus submission site   Hacxx 20
• [Full-disclosure] Internet Explorer 8 PoC: Twitter forced-tweet demo   Chris Evans
• [Full-disclosure] Virus submission site   Hacxx 20
• [Full-disclosure] Microsoft Internet explorer 8 DLL Hijacking (IESHIMS.DLL)   YGN Ethical Hacker Group
• [Full-disclosure] Virus submission site   Shreyas Zare
• [Full-disclosure] reCaptcha secret key - where is the point?   BlackHawk
• [Full-disclosure] reCaptcha secret key - where is the point?   Christian Sciberras
• [Full-disclosure] Adobe Flash Player – user-assisted privacy compromise   Alexander Klink
• [Full-disclosure] reCaptcha secret key - where is the point?   Harry Strongburg
• [Full-disclosure] Did someone hack Dave Aitel's Twitter account or is it an impostor?   dink at mrhinkydink.com
• [Full-disclosure] nmap <= 5.21 is vulnerable to Windows DLL Hijacking Vulnerability.   Nikhil Mittal
• [Full-disclosure] DLL hijacking with Autorun on a USB drive   Pavel Kankovsky
• [Full-disclosure] Call for Papers H2HC Cancun/Mexico and H2HC Sao Paulo/Brazil   Rodrigo Rubira Branco (BSDaemon)
• [Full-disclosure] H2HC São Paulo - Capture the Captcha   Rodrigo Rubira Branco (BSDaemon)
• [Full-disclosure] [SECURITY] [DSA-2103-1] New smbind packages fix sql injection   Giuseppe Iuculano
• [Full-disclosure] PAPER: JIT spraying and mitigations   Piotr Bania
• [Full-disclosure] [ MDVSA-2010:171 ] lvm2   security at mandriva.com
• [Full-disclosure] XSS in Horde Application Framework <=3.3.8, icon_browser.php   Moritz Naumann
• [Full-disclosure] [SECURITY] [DSA-2104-1] New quagga packages fix denial of service   Florian Weimer
• [Full-disclosure] [ GLSA 201009-02 ] Maildrop: privilege escalation   Pierre-Yves Rofes
• [Full-disclosure] KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll)   YGN Ethical Hacker Group
• [Full-disclosure] KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll)   Dan Kaminsky
• [Full-disclosure] KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll)   Dan Kaminsky
• [Full-disclosure] KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll)   Christian Sciberras
• [Full-disclosure] [ GLSA 201009-03 ] sudo: Privilege Escalation   Alex Legler
• [Full-disclosure] 0day analysis of the challenges   yuange
• [Full-disclosure] [TEHTRI-Security Training + 0days] "Hunting Web Attackers" at HITBSecConf   Laurent OUDOT at TEHTRI-Security
• [Full-disclosure] Security problems in Zenphoto version 1.3   Bogdan Calin
• [Full-disclosure] [USN-983-1] Sudo vulnerability   Jamie Strandboge
• [Full-disclosure] FreeBSD 8.1/7.3 vm.pmap kernel local race condition   Maksymilian Arciemowicz
• [Full-disclosure] [USN-984-1] LFTP vulnerability   Marc Deslauriers
• [Full-disclosure] [SECURITY] [DSA 2098-2] New typo3-src packages fix regression   Thijs Kinkhorst
• [Full-disclosure] [ GLSA 201009-04 ] SARG: User-assisted execution of arbitrary code   Stefan Behte
• [Full-disclosure] [ GLSA 201009-05 ] Adobe Reader: Multiple vulnerabilities   Stefan Behte
• [Full-disclosure] [ GLSA 201009-06 ] Clam AntiVirus: Multiple vulnerabilities   Tobias Heinlein
• [Full-disclosure] KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll)   Jacky Jack
• [Full-disclosure] [SECURITY] [DSA-2105-1] New freetype packages fix several vulnerabilities   Giuseppe Iuculano
• [Full-disclosure] i dont know security  
• [Full-disclosure] KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll)   YGN Ethical Hacker Group
• [Full-disclosure] i dont know security   Hurgel Bumpf
• [Full-disclosure] i dont know security   YGN Ethical Hacker Group
• [Full-disclosure] i dont know security   p8x
• [Full-disclosure] FreeBSD 7.0 - 7.2 pseudofs null pointer dereference   Przemyslaw Frasunek
• [Full-disclosure] Medium security flaw in Apache Traffic Server   Tim Brown
• [Full-disclosure] Cisco Security Advisory: Multiple Vulnerabilities in Cisco Wireless LAN Controllers   Cisco Systems Product Security Incident Response Team
• [Full-disclosure] [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities   Andrew Auernheimer
• [Full-disclosure] [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities   Tim
• [Full-disclosure] KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll)   Christian Sciberras
• [Full-disclosure] [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities   Christian Sciberras
• [Full-disclosure] [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities   Andrew Auernheimer
• [Full-disclosure] [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities   Andrew Auernheimer
• [Full-disclosure] FreeBSD 7.0 - 7.2 pseudofs null pointer dereference   musnt live
• [Full-disclosure] [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities   Tim
• [Full-disclosure] [SECURITY] [DSA 2106-1] New xulrunner packages fix several vulnerabilities   Moritz Muehlenhoff
• [Full-disclosure] KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll)   Everhart, Glenn
• [Full-disclosure] [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities   Harry Strongburg
• [Full-disclosure] [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities   Andrew Auernheimer
• [Full-disclosure] [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities   dvs at hushmail.com
• [Full-disclosure] [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities   BMF
• [Full-disclosure] [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities   Christian Sciberras
• [Full-disclosure] [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities   Christian Sciberras
• [Full-disclosure] [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities   Harry Strongburg
• [Full-disclosure] [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities   Tim
• [Full-disclosure] [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities   Tim
• [Full-disclosure] [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities   Dan Kaminsky
• [Full-disclosure] [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities   BMF
• [Full-disclosure] [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities   Andrew Auernheimer
• [Full-disclosure] [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities   Larry Seltzer
• [Full-disclosure] [USN-985-1] mountall vulnerability   Kees Cook
• [Full-disclosure] [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities   Tim
• [Full-disclosure] [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities   Christian Sciberras
• [Full-disclosure] Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability   jf
• [Full-disclosure] KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll)   paul.szabo at sydney.edu.au
• [Full-disclosure] KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll)   Christian Sciberras
• [Full-disclosure] [USN-975-1] Firefox and Xulrunner vulnerabilities   Jamie Strandboge
• [Full-disclosure] KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll)   paul.szabo at sydney.edu.au
• [Full-disclosure] [RingoBingo Secuity] Wikipedia Reflected XSS (Unresponsive-Conpulsive Disclosure)   ringobingo at hush.ai
• [Full-disclosure] Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability   jf
• [Full-disclosure] Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability   Justin Ferguson
• [Full-disclosure] Tuscl.net SQL injection with 30k Plain Text Passwords & 80k Email list   Ben
• [Full-disclosure] KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll)   Christian Sciberras
• [Full-disclosure] Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability   Justin Ferguson
• [Full-disclosure] Tuscl.net SQL injection with 30k Plain Text Passwords & 80k Email list   Benji
• [Full-disclosure] KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll)   paul.szabo at sydney.edu.au
• [Full-disclosure] KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll)   Christian Sciberras
• [Full-disclosure] Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability   paul.szabo at sydney.edu.au
• [Full-disclosure] [USN-978-1] Thunderbird vulnerabilities   Jamie Strandboge
• [Full-disclosure] Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability   paul.szabo at sydney.edu.au
• [Full-disclosure] Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability   Rohit Patnaik
• [Full-disclosure] KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll)   jf
• [Full-disclosure] Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability   paul.szabo at sydney.edu.au
• [Full-disclosure] KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll)   YGN Ethical Hacker Group
• [Full-disclosure] KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll)   Christian Sciberras
• [Full-disclosure] i dont know security   huj huj huj
• [Full-disclosure] i dont know security   PsychoBilly
• [Full-disclosure] List Charter   John Cartwright
• [Full-disclosure] KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll)   Mitja Kolsek
• [Full-disclosure] KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll)   Christian Sciberras
• [Full-disclosure] KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll)   Christian Sciberras
• [Full-disclosure] [SECURITY] [DSA 2107-1] New couchdb package fixes arbitrary code execution   Sebastien Delafond
• [Full-disclosure] SQL Injection and XSS vulnerabilities in CubeCart version 4.3.3   Bogdan Calin
• [Full-disclosure] [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities   Shreyas Zare
• [Full-disclosure] Juniper Networks DLL Hijacking Vulnerability   musnt live
• [Full-disclosure] Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability   Nikhil Mittal
• [Full-disclosure] KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll)   YGN Ethical Hacker Group
• [Full-disclosure] KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll)   Christian Sciberras
• [Full-disclosure] KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll)   YGN Ethical Hacker Group
• [Full-disclosure] i dont know security   YGN Ethical Hacker Group
• [Full-disclosure] PGP Desktop version 9.10.x-10.0.0 Insecure DLL Hijacking Vulnerability (tsp.dll, tvttsp.dll)   YGN Ethical Hacker Group
• [Full-disclosure] [ MDVSA-2010:172 ] kernel   security at mandriva.com
• [Full-disclosure] Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability   Michal Zalewski
• [Full-disclosure] Adobe Flash Player IE version 10.1.x Insecure DLL Hijacking Vulnerability (dwmapi.dll)   YGN Ethical Hacker Group
• [Full-disclosure] [GOATSE SECURITY] Clench: Goatse's way to say "screw you" to certificate authorities   PsychoBilly
• [Full-disclosure] Juniper Networks DLL Hijacking Vulnerability   musnt live
• [Full-disclosure] Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability   Nikhil Mittal
• [Full-disclosure] Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability   Valdis.Kletnieks at vt.edu
• [Full-disclosure] Mac OS X 10.6 Security Configuration Guides Released   Darren Thurston
• [Full-disclosure] Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability   Dan Kaminsky
• [Full-disclosure] stuxnet DATA decoder   Mohammad Hosein
• [Full-disclosure] Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability   Nikhil Mittal
• [Full-disclosure] Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability   Shreyas Zare
• [Full-disclosure] NMAP Vulnerable to attack   musnt live
• [Full-disclosure] NMAP Vulnerable to attack   Valdis.Kletnieks at vt.edu
• [Full-disclosure] NMAP Vulnerable to attack   Stefano Angaran
• [Full-disclosure] NMAP Vulnerable to attack   Valdis.Kletnieks at vt.edu
• [Full-disclosure] NMAP Vulnerable to attack   Andrew Kirch
• [Full-disclosure] NMAP Vulnerable to attack   mezgani ali
• [Full-disclosure] NMAP Vulnerable to attack   Justin Ferguson
• [Full-disclosure] NMAP Vulnerable to attack   Justin Ferguson
• [Full-disclosure] WebserverX Google Dork   Christian Sciberras
• [Full-disclosure] Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability   Fyodor
• [Full-disclosure] Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability   jai
• [Full-disclosure] Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability   Valdis.Kletnieks at vt.edu
• [Full-disclosure] [ MDVSA-2010:173 ] firefox   security at mandriva.com
• [Full-disclosure] [SECURITY] [DSA 2097-2] New phpmyadmin packages fix several vulnerabilities   Thijs Kinkhorst
• [Full-disclosure] NMAP Vulnerable to attack   Jacky Jack
• [Full-disclosure] KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll)   Stefan Kanthak
• [Full-disclosure] Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability   YGN Ethical Hacker Group
• [Full-disclosure] [ MDVSA-2010:174 ] quagga   security at mandriva.com
• [Full-disclosure] NMAP Vulnerable to attack   Mario Vilas
• [Full-disclosure] [ MDVSA-2010:175 ] sudo   security at mandriva.com
• [Full-disclosure] Apple QuickTime Player version 7.64.17.73 <= Insecure DLL Hijacking Vulnerability (cfnetwork.dll, corefoundation.dll)   YGN Ethical Hacker Group
• [Full-disclosure] AlZip version 8.0.6.3 <= Insecure DLL Hijacking Vulnerability (mfc90enu.dll, mfc90loc.dll, propsys.dll)   YGN Ethical Hacker Group
• [Full-disclosure] AlSee version 6.20.0.1 <= Insecure DLL Hijacking Vulnerability (patchani.dll)   YGN Ethical Hacker Group
• [Full-disclosure] AlShow version 1.91 <= Insecure DLL Hijacking Vulnerability (mfc90enu.dll, mfc90loc.dll, dwmapi.dll)   YGN Ethical Hacker Group
• [Full-disclosure] [ MDVSA-2010:176 ] tomcat5   security at mandriva.com
• [Full-disclosure] [ MDVSA-2010:177 ] tomcat5   security at mandriva.com
• [Full-disclosure] [ MDVSA-2010:178 ] ocsinventory   security at mandriva.com
• [Full-disclosure] Adobe Flash Player IE version 10.1.x Insecure DLL Hijacking Vulnerability (dwmapi.dll)   MustLive
• [Full-disclosure] SoMud P2P version 1.2.8 <= Insecure DLL Hijacking Vulnerability (wintab32.dll)   YGN Ethical Hacker Group
• [Full-disclosure] Adobe Flash Player IE version 10.1.x Insecure DLL Hijacking Vulnerability (dwmapi.dll)   YGN Ethical Hacker Group
• [Full-disclosure] Sorax PDF Reader version 2.0<= Insecure DLL Hijacking Vulnerability (dwmapi.dll)   YGN Ethical Hacker Group
• [Full-disclosure] Nuance PDF Reader version 6.0<= Insecure DLL Hijacking Vulnerability (dwmapi.dll, exceptiondumpdll.dll)   YGN Ethical Hacker Group
• [Full-disclosure] [ MDVSA-2010:179 ] libglpng   security at mandriva.com
• [Full-disclosure] Nitro PDF Reader version 2.5.1 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll, nprender.dll)   YGN Ethical Hacker Group
• [Full-disclosure] Brava PDF Reader version 3.3.0.18 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll)   YGN Ethical Hacker Group
• [Full-disclosure] gDoc Fusion version 2.5.1 <= Insecure DLL Hijacking Vulnerability (wintab32.dll, ssleay32.dll)   YGN Ethical Hacker Group
• [Full-disclosure] gDoc Fusion version 2.5.1 <= Insecure DLL Hijacking Vulnerability (wintab32.dll, ssleay32.dll)   Zach C
• [Full-disclosure] E-Press ONE Office Suite <= Insecure DLL Hijacking Vulnerability   YGN Ethical Hacker Group
• [Full-disclosure] gDoc Fusion version 2.5.1 <= Insecure DLL Hijacking Vulnerability (wintab32.dll, ssleay32.dll)   Jacky Jack
• [Full-disclosure] KingSoft Office Suite 2010 | Insecure DLL Hijacking Vulnerability (plgpf.dll)   YGN Ethical Hacker Group
• [Full-disclosure] CelFrame Office Suite 2008 <= Insecure DLL Hijacking Vulnerability ( java_msci.dll, msci_java.dll, wintab32.dll, gswin32c.exe)   YGN Ethical Hacker Group
• [Full-disclosure] IBM Lotus Symphony Office Suite version 3 beta 4 <= Insecure DLL Hijacking Vulnerability (eclipse_1114.dll)   YGN Ethical Hacker Group
• [Full-disclosure] UltraEdit Text Editor version 16.10.0.1036 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll)   YGN Ethical Hacker Group
• [Full-disclosure] Firefox same-origin policy for fonts   paul.szabo at sydney.edu.au
• [Full-disclosure] Firefox same-origin policy for fonts   Dan Kaminsky
• [Full-disclosure] [ MDVSA-2010:176 ] tomcat5   Raj Mathur ( राज माथुर )
• [Full-disclosure] [ MDVSA-2010:180 ] rpm   security at mandriva.com
• [Full-disclosure] Firefox same-origin policy for fonts   Daniel Veditz
• [Full-disclosure] Secunia Research: MailEnable SMTP Service Two Denial of Service Vulnerabilities   Secunia Research
• [Full-disclosure] H2HC 2010 Sao Paulo - Capture the Flag   Rodrigo Rubira Branco (BSDaemon)
• [Full-disclosure] KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll)   Rohit Patnaik
• [Full-disclosure] DLL Hijacking vulnerability in Opera   MustLive
• [Full-disclosure] ZDI-10-169: Novell Netware SSHD.NLM Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] DLL Hijacking vulnerability in Opera   Juha-Matti Laurio
• [Full-disclosure] ZDI-10-170: Apple Safari Webkit Runin Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-171: Mozilla Firefox nsTreeContentView Dangling Pointer Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-172: Mozilla Firefox tree Object Removal Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-173: Mozilla Firefox nsTreeSelection Dangling Pointer Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] KeePass version 2.12 <= Insecure DLL Hijacking Vulnerability (dwmapi.dll)   YGN Ethical Hacker Group
• [Full-disclosure] Web challenges from RootedCON'2010 CTF - Contest   Roman Medina-Heigl Hernandez
• [Full-disclosure] ZDI-10-176: Mozilla Firefox normalizeDocument Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-174: Hewlett-Packard Data Protector DtbClsLogin Utf8cpy Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] Nmap NOT VULNERABLE to Windows DLL HijackingVulnerability   Stefan Kanthak
• [Full-disclosure] rPSA-2010-0056-1 httpd mod_ssl   rPath Update Announcements
• [Full-disclosure] [SECURITY] [DSA 2108-1] New cvsnt package fixes arbitrary code execution   Sébastien Delafond
• [Full-disclosure] [ MDVSA-2010:181 ] ntop   security at mandriva.com
• [Full-disclosure] [USN-987-1] Samba vulnerability   Marc Deslauriers
• [Full-disclosure] [ MDVSA-2010:182 ] kdegraphics   security at mandriva.com
• [Full-disclosure] ZDI-10-177: IBM Lotus Domino iCalendar MAILTO Stack Overflow Vulnerability   ZDI Disclosures
• [Full-disclosure] Secunia Research: Microsoft Outlook Content Parsing Integer Underflow Vulnerability   Secunia Research
• [Full-disclosure] DLL hijacking POC (failed, see for yourself)   Stefan Kanthak
• [Full-disclosure] DLL hijacking with Autorun on a USB drive   Stefan Kanthak
• [Full-disclosure] DLL hijacking with Autorun on a USB drive   Stefan Kanthak
• [Full-disclosure] DLL hijacking with Autorun on a USB drive   Dan Kaminsky
• [Full-disclosure] DLL hijacking with Autorun on a USB drive   Larry Seltzer
• [Full-disclosure] DLL hijacking POC (failed, see for yourself)   Christian Sciberras
• [Full-disclosure] Nmap NOT VULNERABLE to Windows DLL Hijacking   cons0ul
• [Full-disclosure] Directory Traversal in Axigen v7.4.1 running on Windows   Bogdan Calin
• [Full-disclosure] [ MDVSA-2010:183 ] socat   security at mandriva.com
• [Full-disclosure] DLL hijacking POC (failed, see for yourself)   Stefan Kanthak
• [Full-disclosure] DLL hijacking with Autorun on a USB drive   Stefan Kanthak
• [Full-disclosure] DLL hijacking POC (failed, see for yourself)   Christian Sciberras
• [Full-disclosure] ZDI-10-178: Novell PlateSpin Orchestrate Graph Rendering Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] DLL hijacking with Autorun on a USB drive   Valdis.Kletnieks at vt.edu
• [Full-disclosure] DLL Hijacking vulnerability in Opera   MustLive
• [Full-disclosure] DLL hijacking POC (failed, see for yourself)   Stefan Kanthak
• [Full-disclosure] DLL hijacking POC (failed, see for yourself)   Christian Sciberras
• [Full-disclosure] DLL hijacking POC (failed, see for yourself)   Jeffrey Walton
• [Full-disclosure] DLL hijacking POC (failed, see for yourself)   Stefan Kanthak
• [Full-disclosure] Ac1db1tch3z vs x86_64 Linux Kernel   ac1db1tch3z at gmail.com
• [Full-disclosure] Workaround for Ac1db1tch3z exploit.   Terje Malmedal
• [Full-disclosure] [SECURITY] [DSA-2109-1] New samba packages fix buffer overflow   Stefan Fritsch
• [Full-disclosure] DLL hijacking POC (failed, see for yourself)   T Biehn
• [Full-disclosure] [ MDVSA-2010:184 ] samba   security at mandriva.com
• [Full-disclosure] New tool for pentesting   runlvl
• [Full-disclosure] [USN-975-2] Firefox and Xulrunner regression   Jamie Strandboge
• [Full-disclosure] [USN-978-2] Thunderbird regression   Jamie Strandboge
• [Full-disclosure] DLL hijacking POC (failed, see for yourself)   huj huj huj
• [Full-disclosure] DLL hijacking POC (failed, see for yourself)   Christian Sciberras
• [Full-disclosure] New tool for pentesting   Omar B Villa
• [Full-disclosure] New tool for pentesting   Taras
• [Full-disclosure] New tool for pentesting   Jhfjjf Hfdsjj
• [Full-disclosure] New tool for pentesting   Hurgel Bumpf
• [Full-disclosure] New tool for pentesting   Eyeballing Weev
• [Full-disclosure] [SECURITY] [DSA 2110-1] New Linux 2.6.26 packages fix several issues   dann frazier
• [Full-disclosure] New tool for pentesting   excore at hushmail.com
• [Full-disclosure] New tool for pentesting   rdsears at mtu.edu
• [Full-disclosure] New tool for pentesting   Eyeballing Weev
• [Full-disclosure] New tool for pentesting   Mario Vilas
• [Full-disclosure] [USN-988-1] Linux kernel vulnerabilities   Kees Cook
• [Full-disclosure] Sysinternals Process Explorer DLL Hijacking on x86 Windows systems (wow64cpu.dll)   miom
• [Full-disclosure] Deutsche Post Security Cup   Ralph.Zwierzina at deutschepost.de
• [Full-disclosure] www.PasswordAnalytics.com Released!!!   evil fingers
• [Full-disclosure] Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability   Pavel Kankovsky
• [Full-disclosure] ManageEngine OpUtils 'Login.do' SQL Injection Vulnerability   information security
• [Full-disclosure] Nmap NOT VULNERABLE to Windows DLL Hijacking Vulnerability   Thor (Hammer of God)
• [Full-disclosure] Gödel and kernel backdoors   Georgi Guninski
• [Full-disclosure] ManageEngine OpUtils 'Login.do' SQL Injection Vulnerability   Packet Storm
• [Full-disclosure] Gödel and kernel backdoors   mrx
• [Full-disclosure] Gödel and kernel backdoors   Giuseppe Fuggiano
• [Full-disclosure] Gödel and kernel backdoors   wmsecurity
• [Full-disclosure] Gödel and kernel backdoors   BMF
• [Full-disclosure] False Authentication Attack/Any Browser   iforone
• [Full-disclosure] [SECURITY] [DSA 2111-1] New squid3 packages fix denial of service   Steffen Joeris
• [Full-disclosure] Gödel and kernel backdoors   Pavel Kankovsky
• [Full-disclosure] Gödel and kernel backdoors   Georgi Guninski
• [Full-disclosure] Gödel and kernel backdoors   Berend-Jan Wever
• [Full-disclosure] Gödel and kernel backdoors   Christian Sciberras
• [Full-disclosure] TA-Mapper v1.1: Application Pen-Testing Effort Estimator   Debasis Mohanty
• [Full-disclosure] [SECURITY] [DSA-2106-2] New xulrunner packages fix regression   Stefan Fritsch
• [Full-disclosure] Gödel and kernel backdoors   dave b
• [Full-disclosure] Gödel and kernel backdoors   Hurgel Bumpf
• [Full-disclosure] Gödel and kernel backdoors   Georgi Guninski
• [Full-disclosure] [USN-985-1] mountall vulnerability   .
• [Full-disclosure] [SECURITY] [DSA-2112-1] New bzip2 packages fix integer overflow   Stefan Fritsch
• [Full-disclosure] Intro to Using the OSSTMM 3   Pete Herzog
• [Full-disclosure] Gödel and kernel backdoors   Valdis.Kletnieks at vt.edu
• [Full-disclosure] [USN-986-1] bzip2 vulnerability   Jamie Strandboge
• [Full-disclosure] [USN-986-2] ClamAV vulnerability   Jamie Strandboge
• [Full-disclosure] [SECURITY] [DSA 2113-1] New drupal6 packages fix several vulnerabilities   Steffen Joeris
• [Full-disclosure] Vulnerabilities in IB Promotion Advanced Business Web Suite   MustLive
• [Full-disclosure] n.runs-SA-2010.001 - Alcatel-Lucent - unauthenticated administrative access to CTI CCA Server   security at nruns.com
• [Full-disclosure] n.runs-SA-2010.002 - Alcatel-Lucent - arbitrary code execution on OmniVista 4760   security at nruns.com
• [Full-disclosure] n.runs-SA-2010.002 - Alcatel-Lucent - arbitrary code execution on OmniVista 4760   security at nruns.com
• [Full-disclosure] Binary Planting Attack Vectors - There's more than one way to skin a cat... or plant a binary, for that matter   ACROS Security Lists
• [Full-disclosure] [USN-986-3] dpkg vulnerability   Jamie Strandboge
• [Full-disclosure] DDoS attacks via other sites execution tool (DAVOSET)   MustLive
• [Full-disclosure] [ MDVSA-2010:185 ] bzip2   security at mandriva.com
• [Full-disclosure] [USN-989-1] PHP vulnerabilities   Marc Deslauriers
• [Full-disclosure] Vulnerable 3rd-party DLLs used in TrendMicro's malware scanner HouseCall   Stefan Kanthak
• [Full-disclosure] [ MDVSA-2010:186 ] phpmyadmin   security at mandriva.com
• [Full-disclosure] [USN-990-1] OpenSSL vulnerability   Marc Deslauriers
• [Full-disclosure] [USN-990-2] Apache vulnerability   Marc Deslauriers
• [Full-disclosure] [ISecAuditors Security Advisories] Insecure Direct Object Reference in tuenti.com allow to read of any message user   ISecAuditors Security Advisories
• [Full-disclosure] [ISecAuditors Security Advisories] Reflected XSS in Atmail WebMail < v6.2.0   ISecAuditors Security Advisories
• [Full-disclosure] monitoring the media monitors for fun and profit!   omfgomfg at hushmail.com
• [Full-disclosure] Freepbx   Marsh Ray
• [Full-disclosure] [ GLSA 201009-07 ] libxml2: Denial of Service   Stefan Behte
• [Full-disclosure] [ GLSA 201009-08 ] python-updater: Untrusted search path   Stefan Behte
• [Full-disclosure] monitoring the media monitors for fun and profit!   Benji
• [Full-disclosure] Cisco Security Advisory: Cisco Unified Communications Manager Session Initiation Protocol Denial of Service Vulnerabilities   Cisco Systems Product Security Incident Response Team
• [Full-disclosure] Cisco Security Advisory: Cisco IOS Software H.323 Denial of Service Vulnerabilities   Cisco Systems Product Security Incident Response Team
• [Full-disclosure] Cisco Security Advisory: Cisco IOS Software Internet Group Management Protocol Denial of Service Vulnerability   Cisco Systems Product Security Incident Response Team
• [Full-disclosure] Cisco Security Advisory: Cisco IOS Software Network Address Translation Vulnerabilities   Cisco Systems Product Security Incident Response Team
• [Full-disclosure] Cisco Security Advisory: Cisco IOS Software Session Initiation Protocol Denial of Service Vulnerabilities   Cisco Systems Product Security Incident Response Team
• [Full-disclosure] Cisco Security Advisory: Cisco IOS SSL VPN Vulnerability   Cisco Systems Product Security Incident Response Team
• [Full-disclosure] Freepbx   Tyler Borland
• [Full-disclosure] Freepbx   Marsh Ray
• [Full-disclosure] [ MDVSA-2010:187 ] squid   security at mandriva.com
• [Full-disclosure] OpenText LiveLink 9.7.1 multiple vulnerabilities (CSRF, XSS)   A. Ramos
• [Full-disclosure] [ MDVSA-2010:188 ] kernel   security at mandriva.com
• [Full-disclosure] [ISecAuditors Security Advisories] SQL Injection and XSS in Motorito < v2.0 Ni 483   ISecAuditors Security Advisories
• [Full-disclosure] Teamspeak default passwords?   Gary Baribault
• [Full-disclosure] TWSL2010-005: FreePBX recordings interface allows remote code execution   Trustwave Advisories
• [Full-disclosure] [USN-991-1] quassel vulnerability   Steve Beattie
• [Full-disclosure] VMSA-2010-0014 VMware Workstation, Player, and ACE address several security issues   VMware Security team
• [Full-disclosure] [ MDVSA-2010:189 ] pcsc-lite   security at mandriva.com
• [Full-disclosure] [ MDVSA-2010:189-1 ] pcsc-lite   security at mandriva.com
• [Full-disclosure] the real stuxnet authors plz stand up   coderman
• [Full-disclosure] the real stuxnet authors plz stand up   coderman
• [Full-disclosure] the real stuxnet authors plz stand up   coderman
• [Full-disclosure] the real stuxnet authors plz stand up   coderman
• [Full-disclosure] the real stuxnet authors plz stand up   Kenneth Voort
• [Full-disclosure] the real stuxnet authors plz stand up   coderman
• [Full-disclosure] Vulnerabilities in CMS MYsite   MustLive
• [Full-disclosure] Full-Disclosure Digest, Vol 67, Issue 41   hmarti2 at umbc.edu
• [Full-disclosure] Exploit Next Generation(R) Example Codes   Nelson Brito
• [Full-disclosure] Web commands injection through FTP Login in Synology Disk Station - CVE-2010-2453   Rodrigo Branco
• [Full-disclosure] [SECURITY] [DSA-2114-1] New git-core packages fix regression   Stefan Fritsch
• [Full-disclosure] Vulnerabilities in CMS MYsite   Jan G.B.
• [Full-disclosure] [funsec] And they intend to do this securely, how, exactly?   PsychoBilly
• [Full-disclosure] XSS in Horde IMP <=4.3.7, fetchmailprefs.php   Moritz Naumann
• [Full-disclosure] [New Tool Announcement] inspath - Path Disclosure Finder   YGN Ethical Hacker Group
• [Full-disclosure] Profile - OSSTMM use at a Security Consultancy   Pete Herzog
• [Full-disclosure] Free Anti Social-Engineering Seminar   Pete Herzog
• [Full-disclosure] TWSL2010-005: FreePBX recordings interface allows remote code execution   Richard Miles
• [Full-disclosure] CYBSEC Advisory 2010 0901 Achievo 1.4.3 (Multiple Authorization Flaws)   CYBSEC Labs
• [Full-disclosure] CYBSEC Advisory 2010 0902 Achievo 1.4.3 (CSRF)   CYBSEC Labs
• [Full-disclosure] Backward disassembler for ROP exploitation   Adrian Furtuna
• [Full-disclosure] XSS in a lot of products   b>pepelotas</b
• [Full-disclosure] Python ssl handling could be better...   dave b
• [Full-disclosure] Python ssl handling could be better...   dave b
• [Full-disclosure] Security ie9?   yuange
• [Full-disclosure] [USN-992-1] Avahi vulnerabilities   Marc Deslauriers
• [Full-disclosure] [USN-993-1] libgdiplus vulnerability   Marc Deslauriers
• [Full-disclosure] [USN-994-1] libHX vulnerability   Marc Deslauriers
• [Full-disclosure] [USN-995-1] libMikMod vulnerabilities   Marc Deslauriers
• [Full-disclosure] [USN-996-1] Mako vulnerability   Marc Deslauriers
• [Full-disclosure] Security ie9?   Christian Sciberras
• [Full-disclosure] XSS in a lot of products   rancor
• [Full-disclosure] Python ssl handling could be better...   dave b
• [Full-disclosure] [Onapsis Security Advisory 2010-007] SAP Management Console Multiple Denial of Service   Onapsis Research Labs
• [Full-disclosure] [ GLSA 201009-09 ] fence: Multiple symlink vulnerabilites   Stefan Behte
• [Full-disclosure] [SECURITY] [DSA-2115-1] New moodle packages fix several vulnerabilities   Florian Weimer
• [Full-disclosure] ZDI-10-179: IBM TSM FastBack Mount Service Arbitrary Overwrite Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-180: IBM TSM FastBack Server _SendToLog Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-181: IBM TSM FastBack Server ActivateLTScriptReply Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-182: IBM TSM FastBack Server FXCLI_OraBR_Exec_Command Remote Code Execution Vulnerabilities   ZDI Disclosures
• [Full-disclosure] ZDI-10-183: IBM TSM FastBack Server FXCLI_checkIndexDBLocation Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-184: IBM TSM FastBack Server USER_S_AddADGroup Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-185: IBM TSM FastBack Server _Eventlog Format String Remote Code Execution Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-186: IBM TSM FastBack _CalcHashValueWithLength Remote Denial of Service Vulnerability   ZDI Disclosures
• [Full-disclosure] ZDI-10-187: IBM TSM FastBack Server _DAS_ReadBlockReply Remote Denial of Service Vulnerability   ZDI Disclosures
• [Full-disclosure] VMSA-2010-0015 VMware ESX third party updates for Service Console   VMware Security team
• [Full-disclosure] XSS in a lot of products   Benji
• [Full-disclosure] XSS in a lot of products   Jeffrey Walton
• [Full-disclosure] [ MDVSA-2010:190 ] libtiff   security at mandriva.com
• [Full-disclosure] XSS in a lot of products   hackyouridols at googlemail.com
• [Full-disclosure] XSS in lojaeshop ecommerce   primehaxor

Last message date: Thu Sep 30 22:42:40 BST 2010
Archived on: Fri Oct 1 01:49:09 BST 2010

• Messages sorted by: [ thread ] [ subject ] [ author ]
• More info on this list...