Mail Index

• Thread Index

• [Full-disclosure] [SECURITY] [DSA 2398-2] curl regression
  • From: Florian Weimer
• [Full-disclosure] Compromised VPN provider out there?
  • From: T
• [Full-disclosure] IPv6 stable privacy addresses
  • From: Fernando Gont
• Re: [Full-disclosure] Android wipe unreliable
  • From: Jeffrey Walton
• [Full-disclosure] Hackito 2012 Crypto Challenge
  • From: Jonathan Brossard
• [Full-disclosure] iis bug
  • From: yuange
• [Full-disclosure] FW: iis bug
  • From: yuange
• [Full-disclosure] March 2012 mini Threat Intelligence report
  • From: Almaz
• [Full-disclosure] Flatnux CMS 2011 08.09.2 - Multiple Web Vulnerabilities
  • From: Research
• [Full-disclosure] ME Firewall Analyzer v7.2 - Cross Site Vulnerabilities
  • From: Research
• [Full-disclosure] Swedish Army Web Database - SQL Injection Vulnerability
  • From: Research
• [Full-disclosure] HITB2011KUL - Skype Vulnerabilities 0Day Exploitation PART 1
  • From: Research
• [Full-disclosure] So, so you think you can tell April 1 joke from a 0day?
  • From: Georgi Guninski
• [Full-disclosure] STEP Security
  • From: J. Oquendo
• Re: [Full-disclosure] STEP Security
  • From: Memory Vandal
• [Full-disclosure] An April Fools' Day Android Payload
  • From: Dan Rosenberg
• Re: [Full-disclosure] STEP Security
  • From: Nick FitzGerald
• Re: [Full-disclosure] STEP Security
  • From: Jeff Kell
• [Full-disclosure] Amongst data breaches and misc 'leakage', not necessarily digital, DEFCON CTF continues at DEFCON XX
  • From: Vulcan DDtek
• Re: [Full-disclosure] iis bug
  • From: yuange
• [Full-disclosure] [ MDVSA-2012:046 ] libpng
  • From: security
• [Full-disclosure] An April Fools' Day Android Payload
  • From: ZeroDay.JP
• [Full-disclosure] [ MDVSA-2012:047 ] freeradius
  • From: security
• [Full-disclosure] BulletProof FTP Client 2010 - Buffer Overflow Vulnerability
  • From: Research
• [Full-disclosure] DirectAdmin v1.403 - Cross Site Scripting Vulnerability
  • From: Research
• [Full-disclosure] www.LEORAT.com is scam
  • From: smith joseph
• [Full-disclosure] Apache 2.2.xx 0day exploit
  • From: Adam Zabrocki
• Re: [Full-disclosure] An April Fools' Day Android Payload
  • From: Dan Rosenberg
• Re: [Full-disclosure] www.LEORAT.com is scam
  • From: Valdis . Kletnieks
• Re: [Full-disclosure] www.LEORAT.com is scam
  • From: Dave
• Re: [Full-disclosure] www.LEORAT.com is scam
  • From: Dave
• [Full-disclosure] [ MDVSA-2012:048 ] mutt
  • From: security
• [Full-disclosure] [ MDVSA-2012:049 ] nagios
  • From: security
• Re: [Full-disclosure] www.LEORAT.com is scam
  • From: Thor (Hammer of God)
• [Full-disclosure] Re(2): An April Fools' Day Android Payload
  • From: アドリアンヘンドリック
• Re: [Full-disclosure] www.LEORAT.com is scam
  • From: Sanguinarious Rose
• Re: [Full-disclosure] Re(2): An April Fools' Day Android Payload
  • From: Andrew Farmer
• [Full-disclosure] Re(3): An April Fools' Day Android Payload
  • From: アドリアンヘンドリック
• [Full-disclosure] [Tool] New release of peepdf (PDF analysis)
  • From: Jose Miguel Esparza
• [Full-disclosure] [ MDVSA-2012:050 ] phpmyadmin
  • From: security
• [Full-disclosure] Hacking AutoUpdate by Injecting Fake Updates
  • From: Adam Behnke
• [Full-disclosure] [ MDVSA-2012:051 ] libvorbis
  • From: security
• [Full-disclosure] [ MDVSA-2012:052 ] libvorbis
  • From: security
• [Full-disclosure] [ZEM560] Vulnerability on Fingerprint & Proximity Access Controller
  • From: Zerial.
• [Full-disclosure] SmartJobBoard v3.4 b5140 - Multiple Web Vulnerabilites
  • From: Research
• [Full-disclosure] Astaro Command Center v2.x - Multiple Web Vulnerabilities
  • From: Research
• Re: [Full-disclosure] www.LEORAT.com is scam
  • From: Sebastian Rakowski
• [Full-disclosure] [SE-2012-01] Security vulnerabilities in Java SE
  • From: Security Explorations
• [Full-disclosure] Mind Control Security Awareness
  • From: Pete Herzog
• [Full-disclosure] Last public release
  • From: HI-TECH .
• Re: [Full-disclosure] www.LEORAT.com is scam
  • From: Dave
• Re: [Full-disclosure] Hacking AutoUpdate by Injecting Fake Updates
  • From: Charles Morris
• Re: [Full-disclosure] Brute Force vulnerability in WordPress
  • From: MustLive
• Re: [Full-disclosure] Brute Force vulnerability in WordPress
  • From: Sanguinarious Rose
• [Full-disclosure] SQL Injection through HTTP Headers
  • From: Adam Behnke
• [Full-disclosure] Cisco Security Advisory: Buffer Overflow Vulnerabilities in the Cisco WebEx Player
  • From: Cisco Systems Product Security Incident Response Team
• [Full-disclosure] [ MDVSA-2012:053 ] ocsinventory
  • From: security
• Re: [Full-disclosure] Working to get more people to check if their infected with DNS Changer
  • From: Gage Bystrom
• [Full-disclosure] Sourcefire Defense Center - multiple vulnerabilities.
  • From: Filip Palian
• [Full-disclosure] [Security-news] SA-CONTRIB-2012-056 - Janrain Engage - Sensitive Data Protection Vulnerability
  • From: security-news
• Re: [Full-disclosure] Working to get more people to check if their infected with DNS Changer
  • From: Valdis . Kletnieks
• Re: [Full-disclosure] www.LEORAT.com is scam
  • From: Sebastian Rakowski
• [Full-disclosure] 'phpPaleo' Local File Inclusion (CVE-2012-1671)
  • From: Mark Stanislav
• [Full-disclosure] 'e-ticketing' SQL Injection (CVE-2012-1673)
  • From: Mark Stanislav
• [Full-disclosure] 'Hotel Booking Portal' SQL Injection (CVE-2012-1672)
  • From: Mark Stanislav
• Re: [Full-disclosure] Brute Force vulnerability in WordPress
  • From: InterN0T Advisories
• [Full-disclosure] [SECURITY] [DSA 2446-1] libpng security update
  • From: Moritz Muehlenhoff
• [Full-disclosure] [SECURITY] [DSA 2447-1] tiff security update
  • From: Moritz Muehlenhoff
• [Full-disclosure] [Security-news] SA-CONTRIB-2012-057 - Printer, email and PDF versions - Cross Site Scripting (XSS)
  • From: security-news
• [Full-disclosure] Teensy USB HID (and Kautilya) for Penetration Testers
  • From: Nikhil Mittal
• [Full-disclosure] [ MDVSA-2012:054 ] libtiff
  • From: security
• [Full-disclosure] [MATTA-2012-001] CVE-2012-1301; 0day; Open Proxy vulnerability in Umbraco 4.7
  • From: Florent Daigniere
• [Full-disclosure] mac trojan
  • From: RandallM
• [Full-disclosure] Sagan 0.2.1 [Security Event/Log Analyzer] Released.
  • From: Champ Clark III
• Re: [Full-disclosure] mac trojan
  • From: Dennis
• Re: [Full-disclosure] mac trojan
  • From: Jeffrey Walton
• [Full-disclosure] [CVE-2012-1574] Apache Hadoop user impersonation vulnerability
  • From: Aaron T. Myers
• Re: [Full-disclosure] [funsec] mac trojan
  • From: Charlie Derr
• [Full-disclosure] Shakacon CFP - Extended Deadline: April 13, 2012
  • From: Shakacon
• Re: [Full-disclosure] mac trojan
  • From: Carl \"Thomas\" Guething
• [Full-disclosure] Drop box
  • From: Fatherlaptop
• [Full-disclosure] PenTest Market is for FREE Now
  • From: Krzysztof Marczyk
• Re: [Full-disclosure] PenTest Market is for FREE Now
  • From: John Jacobs
• Re: [Full-disclosure] PenTest Market is for FREE Now
  • From: Dave
• [Full-disclosure] Dolibarr ERP & CRM OS Command Injection
  • From: Nahuel Grisolia
• [Full-disclosure] FSA2012-1 and FSA2012-2: Chocolate easter egss vulnerable to egg white injection and usable as trojan horses.
  • From: klondike
• Re: [Full-disclosure] FSA2012-1 and FSA2012-2: Chocolate easter egss vulnerable to egg white injection and usable as trojan horses.
  • From: rancor
• Re: [Full-disclosure] FSA2012-1 and FSA2012-2: Chocolate easter egss vulnerable to egg white injection and usable as trojan horses.
  • From: fabrice
• [Full-disclosure] AnvSoft Any Video Converter 4.3.6 - Multiple Buffer Overflow Vulnerabilities
  • From: Research
• [Full-disclosure] idev Game Site CMS v1.0 - Multiple Web Vulnerabilites
  • From: Research
• [Full-disclosure] osCmax Shop CMS v2.5.1 - Multiple Web Vulnerabilities
  • From: Research
• [Full-disclosure] CsForum v0.8 - Cross Site Scripting Vulnerability
  • From: Research
• [Full-disclosure] Astaro Command Center v2.x - Multiple Web Vulnerabilities
  • From: Research
• [Full-disclosure] Astaro Security Gateway v7.504 - Multiple Web Vulnerabilities
  • From: Research
• [Full-disclosure] US UF Services EDU Health - File Include Vulnerability
  • From: Research
• [Full-disclosure] Thor's Private Key
  • From: Thor (Hammer of God)
• Re: [Full-disclosure] Thor's Private Key
  • From: Thor (Hammer of God)
• Re: [Full-disclosure] Thor's Private Key
  • From: Jason Hellenthal
• [Full-disclosure] Microsoft MSDN - Persistent Web Service Vulnerability
  • From: Research
• [Full-disclosure] Secunia Research: RealNetworks Helix Server Credentials Disclosure Security Issue
  • From: Secunia Research
• [Full-disclosure] Secunia Research: Helix Server SNMP Master Agent Service Two Denial of Service Vulnerabilities
  • From: Secunia Research
• [Full-disclosure] ZDI-12-055 : Webkit.org Webkit copyNonAttributeProperties Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [Full-disclosure] ZDI-12-056 : Mozilla Firefox nsSVGValue Out-of-Bounds Access Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [Full-disclosure] ZDI-12-057 : (Pwn2Own) Adobe Flash Player NetStream addBytes Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [Full-disclosure] ZDI-12-058 : Apple Quicktime PNG Depth Decoding Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [Full-disclosure] ZDI-12-059 : Mozilla Firefox Ogg Vorbis Decoding Memory Corruption Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [Full-disclosure] Teensy USB HID (and Kautilya) for Penetration Testers - Part 2 - Basics of Arduino and Hello World
  • From: Nikhil Mittal
• [Full-disclosure] ZDI-12-060 : Oracle Java Runtime readMabCurveData nTblSize Remote Code Execution Vulnerability
  • From: ZDI Disclosures
• [Full-disclosure] CVE-2012-0769, the case of the perfect info leak
  • From: Fermín J. Serna
• [Full-disclosure] CIntruder v0.1
  • From: psy
• Re: [Full-disclosure] CIntruder v0.1
  • From: Travis Biehn
• [Full-disclosure] new law proposal on EU against hacking tools and practices
  • From: psy
• Re: [Full-disclosure] new law proposal on EU against hacking tools and practices
  • From: Valdis . Kletnieks
• Re: [Full-disclosure] new law proposal on EU against hacking tools and practices
  • From: Travis Biehn
• Re: [Full-disclosure] new law proposal on EU against hacking tools and practices
  • From: Valdis . Kletnieks
• Re: [Full-disclosure] new law proposal on EU against hacking tools and practices
  • From: Dave
• Re: [Full-disclosure] new law proposal on EU against hacking tools and practices
  • From: Valdis . Kletnieks
• Re: [Full-disclosure] Compromised VPN provider out there?
  • From: nix
• [Full-disclosure] [SECURITY] [DSA 2448-1] inspircd security update
  • From: Jonathan Wiltshire
• [Full-disclosure] List Charter
  • From: John Cartwright
• Re: [Full-disclosure] Compromised VPN provider out there?
  • From: Benji
• [Full-disclosure] 44Con London 2012 CFP - September 5th - 7th
  • From: Steve
• Re: [Full-disclosure] keeping data safe offline
  • From: Gage Bystrom
• [Full-disclosure] Matterdaddy Market v1.1 - SQL Injection Vulnerabilities
  • From: Research
• [Full-disclosure] GroupWare epesiBIM CRM 1.2.1 - Multiple Web Vulnerabilities
  • From: Research
• [Full-disclosure] National Center EDU Research - SQL Injection Vulnerability
  • From: Research
• [Full-disclosure] National Center EDU Research - SQL Injection Vulnerability
  • From: Research
• [Full-disclosure] ACROS Blog: Adobe Reader X (10.1.2) msiexec.exe Planting
  • From: ACROS Security Lists
• [Full-disclosure] [ MDVSA-2012:055 ] samba
  • From: security
• [Full-disclosure] Backtrack 5 R2 priv escalation 0day found in CTF exercise
  • From: Adam Behnke
• [Full-disclosure] TeamSHATTER Security Advisory: Privilege escalation via internal sql injection in RESTORE DATABASE command
  • From: Shatter
• [Full-disclosure] [Security-news] SA-CONTRIB-2012-058 - Fivestar - Input Validation
  • From: security-news
• [Full-disclosure] [Security-news] SA-CONTRIB-2012-059 - Autosave - Cross Site Scripting
  • From: security-news
• [Full-disclosure] TWSL2012-008: Multiple Vulnerabilities in Scrutinizer NetFlow & sFlow Analyzer
  • From: Trustwave Advisories
• [Full-disclosure] DHTMLX Suite v.3.0 - Multiple Web Vulnerabilities
  • From: Research
• [Full-disclosure] Netjuke 1.0 RC1 - SQL Injection Vulnerabilities
  • From: Research
• [Full-disclosure] Oracle Service Applications - SQL Injection Vulnerabilities
  • From: Research
• [Full-disclosure] CRUNCH TV SHOW - Live Stream & Security Videos
  • From: Research
• [Full-disclosure] [SECURITY] [DSA 2449-1] sqlalchemy security update
  • From: Nico Golde
• [Full-disclosure] Crystal Office Suite v1.43 - Buffer Overflow Vulnerability
  • From: Research
• [Full-disclosure] [ MDVSA-2012:056 ] rpm
  • From: security
• [Full-disclosure] [ MDVSA-2012:057 ] freetype2
  • From: security
• Re: [Full-disclosure] Backtrack 5 R2 priv escalation 0day found in CTF exercise
  • From: InterN0T Advisories
• [Full-disclosure] Patrick Belcher
  • From: Rand Flieger
• [Full-disclosure] Most Linux distributions don't use tmpfs nor encrypt swap by default
  • From: Mark Krenz
• [Full-disclosure] Last Mile, April 20 || CfP: SECURWARE 2012 || August 19-24, 2012 - Rome, Italy
  • From: Cristina Pascual
• [Full-disclosure] [SE-2012-01] Security weakness in Apple Quicktime Java extensions
  • From: Security Explorations
• [Full-disclosure] [SECURITY] [DSA 2450-1] samba security update
  • From: Thijs Kinkhorst
• [Full-disclosure] Erronous post concerning Backtrack 5 R2 0day
  • From: Adam Behnke
• Re: [Full-disclosure] Erronous post concerning Backtrack 5 R2 0day
  • From: Benji
• Re: [Full-disclosure] Backtrack 5 R2 priv escalation 0day found in CTF exercise
  • From: Urlan
• Re: [Full-disclosure] Most Linux distributions don't use tmpfs nor encrypt swap by default
  • From: Grandma Eubanks
• [Full-disclosure] VMSA-2012-0007 VMware hosted products and ESXi/ESX patches address privilege escalation
  • From: VMware Security Team
• [Full-disclosure] hi
  • From: Patrick Klos
• Re: [Full-disclosure] Amongst data breaches and misc 'leakage', not necessarily digital, DEFCON CTF continues at DEFCON XX
  • From: Roman Medina-Heigl Hernandez
• Re: [Full-disclosure] Most Linux distributions don't use tmpfs nor encrypt swap by default
  • From: Mark Krenz
• [Full-disclosure] [SECURITY] [DSA 2451-1] puppet security update
  • From: Nico Golde
• Re: [Full-disclosure] Erronous post concerning Backtrack 5 R2 0day
  • From: Ryan Dewhurst
• Re: [Full-disclosure] Most Linux distributions don't use tmpfs nor encrypt swap by default
  • From: Feighen Oosterbroek
• [Full-disclosure] [ MDVSA-2012:058 ] curl
  • From: security
• [Full-disclosure] [Spanish] - Exploit Pack - Web Security Framework
  • From: runlvl
• [Full-disclosure] Invitation to connect on LinkedIn
  • From: Mezgani Ali via LinkedIn
• [Full-disclosure] Slides for "Recent Advances in IPv6 Security" at Hackito Ergo Sum 2012
  • From: Fernando Gont
• [Full-disclosure] Mathematica8.0.4 on Linux /tmp/MathLink vulnerability
  • From: paul . szabo
• [Full-disclosure] ACC PHP eMail v1.1 - Multiple Web Vulnerabilites
  • From: Research
• [Full-disclosure] EmbryoCore CMS v1.03 - Multiple Web Vulnerabilities
  • From: Research
• [Full-disclosure] Microsoft Service - Persistent Web Vulnerabilities
  • From: Research
• [Full-disclosure] K-Meleon Browser v1.5.4 - Denial of Service Vulnerability
  • From: Research
• [Full-disclosure] EmbryoCore CMS v1.03 - Multiple Web Vulnerabilities
  • From: Research
• [Full-disclosure] Microsoft AFKAR Website Service - Cross Site Vulnerabilities
  • From: Research
• [Full-disclosure] Siche Search v.0.5 Zerboard - Multiple Web Vulnerabilities
  • From: Research
• [Full-disclosure] Cyberoam UTM v10.01.2 build 059 - File Include Vulnerabilities
  • From: Research
• Re: [Full-disclosure] Most Linux distributions don't use tmpfs nor encrypt swap by default
  • From: _
• [Full-disclosure] nullsec-bypass-aslr.pdf - ASLR / ASLR bypass techniques
  • From: Levent Kayan
• [Full-disclosure] DoS vulnerability in WordPress
  • From: MustLive
• Re: [Full-disclosure] nullsec-bypass-aslr.pdf - ASLR / ASLR bypass techniques
  • From: Gage Bystrom
• [Full-disclosure] DoS vulnerability in MustLive
  • From: InterN0T Advisories
• [Full-disclosure] [CVE-2012-1622] Apache OFBiz information disclosure vulnerability
  • From: Jacopo Cappellato
• [Full-disclosure] [CVE-2012-1621] Apache OFBiz information disclosure vulnerability
  • From: Jacopo Cappellato
• Re: [Full-disclosure] Most Linux distributions don't use tmpfs nor encrypt swap by default
  • From: Pedro Martelletto
• [Full-disclosure] FastPath Webchat | Multiple Cross Site Scripting Vulnerabilities
  • From: YGN Ethical Hacker Group
• [Full-disclosure] Joomla! Plugin - Beatz 1.x <= Multiple Cross Site Scripting Vulnerabilities
  • From: YGN Ethical Hacker Group
• [Full-disclosure] [SECURITY] [DSA 2452-1] apache2 security update
  • From: Stefan Fritsch
• [Full-disclosure] [SECURITY] [DSA 2453-1] gajim security update
  • From: Nico Golde
• [Full-disclosure] [ MDVSA-2012:059 ] python-sqlalchemy
  • From: security
• Re: [Full-disclosure] Joomla! Plugin - Beatz 1.x <= Multiple Cross Site Scripting Vulnerabilities
  • From: David3 Gonnella
• Re: [Full-disclosure] PHP Gift Registry 1.5.5 SQL Injection
  • From: Thomas Richards
• Re: [Full-disclosure] Mathematica8.0.4 on Linux /tmp/MathLink vulnerability
  • From: paul . szabo
• [Full-disclosure] Windows XP denial of service 0day found in CTF exercise
  • From: Adam Behnke
• Re: [Full-disclosure] Windows XP denial of service 0day found in CTF exercise
  • From: Memory Vandal
• Re: [Full-disclosure] Windows XP denial of service 0day found in CTF exercise
  • From: Romain Bourdy
• Re: [Full-disclosure] Windows XP denial of service 0day found in CTF exercise
  • From: Memory Vandal
• Re: [Full-disclosure] DoS vulnerability in WordPress
  • From: Kurt Seifried
• Re: [Full-disclosure] Most Linux distributions don't use tmpfs nor encrypt swap by default
  • From: Mark Krenz
• Re: [Full-disclosure] Mathematica8.0.4 on Linux /tmp/MathLink vulnerability
  • From: Vikram Dhillon
• Re: [Full-disclosure] Windows XP denial of service 0day found in CTF exercise
  • From: Justin C. Klein Keane
• Re: [Full-disclosure] Windows XP denial of service 0day found in CTF exercise
  • From: Mihamina Rakotomandimby
• [Full-disclosure] winAUTOPWN v3.0 Released
  • From: QUAKER DOOMER
• [Full-disclosure] SEC Consult whitepaper :: The Source Is A Lie
  • From: SEC Consult Vulnerability Lab
• Re: [Full-disclosure] Windows XP denial of service 0day found in CTF exercise
  • From: adam
• Re: [Full-disclosure] DoS vulnerability in WordPress
  • From: Javier Reoyo
• [Full-disclosure] [ MDVSA-2012:032-1 ] mozilla
  • From: security
• Re: [Full-disclosure] Windows XP denial of service 0day found in CTF exercise
  • From: Elazar Broad
• Re: [Full-disclosure] Windows XP denial of service 0day found in CTF exercise
  • From: Valdis . Kletnieks
• [Full-disclosure] Acuity CMS 2.6.x <= Cross Site Scripting
  • From: YGN Ethical Hacker Group
• Re: [Full-disclosure] Windows XP denial of service 0day found in CTF exercise
  • From: Terrence
• [Full-disclosure] 10 Ways to Enhance Your Career in Information Security
  • From: Krzysztof Marczyk
• [Full-disclosure] LibreOffice 3.5.2.2 - memory corruption with a specific .rtf file
  • From: Carlo Di Dato
• [Full-disclosure] Hack Cup 2012
  • From: Nicolas Waisman
• [Full-disclosure] [Announcement] CHMag's Issue 27, April 2012 Released
  • From: Abhijeet Patil
• [Full-disclosure] The history of a -probably- 13 years old Oracle bug: TNS Poison
  • From: Joxean Koret
• [Full-disclosure] [Security-news] SA-CONTRIB-2012-060 - Commerce Reorder - Cross Site Request Forgery
  • From: security-news
• [Full-disclosure] [Security-news] SA-CONTRIB-2012-061 - Gigya - Social optimization - Cross Site Scripting (XSS)
  • From: security-news
• [Full-disclosure] [SECURITY] [DSA 2453-2] gajim regression
  • From: Nico Golde
• [Full-disclosure] Ruxcon 2012 Call For Papers
  • From: cfp
• Re: [Full-disclosure] [Announcement] CHMag's Issue 27, April 2012 Released
  • From: Robert Kim App and Facebook Marketing
• [Full-disclosure] incorrect integer conversions in OpenSSL can result in memory corruption.
  • From: Tavis Ormandy
• Re: [Full-disclosure] Most Linux distributions don't use tmpfs nor encrypt swap by default
  • From: Jon Dowland
• Re: [Full-disclosure] incorrect integer conversions in OpenSSL can result in memory corruption.
  • From: Benjamin Kreuter
• [Full-disclosure] [ MDVSA-2012:060 ] openssl
  • From: security
• [Full-disclosure] Incomplete protection of Oracle Database locked accounts (CVE-2012-0510)
  • From: Shatter
• [Full-disclosure] Some failed authentication attempts using OCIPasswordChange API are not recorded (CVE-2012-0511)
  • From: Shatter
• [Full-disclosure] SQL Injection in Oracle Enterprise Manager (compareWizFirstConfig web page) (CVE-2012-0512)
  • From: Shatter
• [Full-disclosure] SQL Injection in Oracle Enterprise Manager (searchPage web page) (CVE-2012-0525)
  • From: Shatter
• [Full-disclosure] HTTP Response Splitting in Oracle Enterprise Manager (prevPage parameter) (CVE-2012-0526)
  • From: Shatter
• [Full-disclosure] HTTP Response Splitting in Oracle Enterprise Manager (pageName parameter) (CVE-2012-0527)
  • From: Shatter
• [Full-disclosure] Oracle Enterprise Manager vulnerable to Session fixation (CVE-2012-0528)
  • From: Shatter
• [Full-disclosure] OCIPasswordChange API leaks information of password hash (CVE-2012-0511)
  • From: Shatter
• [Full-disclosure] IPv6 host scanning in IPv6
  • From: Fernando Gont
• [Full-disclosure] Weak password reset token & code exec in ownCloud 3.0.0
  • From: luks
• [Full-disclosure] [SECURITY] [DSA 2454-1] openssl security update
  • From: Raphael Geissert
• Re: [Full-disclosure] incorrect integer conversions in OpenSSL can result in memory corruption.
  • From: Douglas Huff
• [Full-disclosure] DC4420 - London DEFCON - April meet - Tuesday April 24th 2012
  • From: Major Malfunction
• [Full-disclosure] PenTest is one year old now
  • From: Krzysztof Marczyk
• Re: [Full-disclosure] PenTest is one year old now
  • From: Henri Salo
• [Full-disclosure] [SECURITY] [DSA 2455-1] typo3-src security update
  • From: Nico Golde
• Re: [Full-disclosure] DoS vulnerability in WordPress
  • From: MustLive
• Re: [Full-disclosure] DoS vulnerability in WordPress
  • From: Christian Sciberras
• [Full-disclosure] XSS parameter injection in the search field of http://chicasdetorbe.com
  • From: klondike
• [Full-disclosure] [ MDVSA-2012:061 ] raptor
  • From: security
• [Full-disclosure] [ MDVSA-2012:062 ] openoffice.org
  • From: security
• [Full-disclosure] [ MDVSA-2012:063 ] libreoffice
  • From: security
• Re: [Full-disclosure] incorrect integer conversions in OpenSSL can result in memory corruption.
  • From: Jeffrey Walton
• Re: [Full-disclosure] incorrect integer conversions in OpenSSL can result in memory corruption.
  • From: Zach C.
• Re: [Full-disclosure] incorrect integer conversions in OpenSSL can result in memory corruption.
  • From: Jeffrey Walton
• [Full-disclosure] HTC IQRD Android Permission Leakage (CVE-2012-2217)
  • From: VSR Advisories
• Re: [Full-disclosure] HTC IQRD Android Permission Leakage (CVE-2012-2217)
  • From: Jeffrey Walton
• [Full-disclosure] Attacking Critical Internet Infrastructure
  • From: fireball9
• Re: [Full-disclosure] HTC IQRD Android Permission Leakage (CVE-2012-2217)
  • From: Jason Hellenthal
• Re: [Full-disclosure] Attacking Critical Internet Infrastructure
  • From: Dobbins, Roland
• [Full-disclosure] phpMyBible 0.5.1 Mutiple XSS
  • From: Thomas Richards
• Re: [Full-disclosure] phpMyBible 0.5.1 Mutiple XSS
  • From: Thor (Hammer of God)
• [Full-disclosure] XSS and FPD vulnerabilities in Organizer for WordPress
  • From: MustLive
• Re: [Full-disclosure] phpMyBible 0.5.1 Mutiple XSS
  • From: Valdis . Kletnieks
• Re: [Full-disclosure] phpMyBible 0.5.1 Mutiple XSS
  • From: Thor (Hammer of God)
• Re: [Full-disclosure] phpMyBible 0.5.1 Mutiple XSS
  • From: Jeffrey Walton
• Re: [Full-disclosure] phpMyBible 0.5.1 Mutiple XSS
  • From: BMF
• Re: [Full-disclosure] phpMyBible 0.5.1 Mutiple XSS
  • From: Laurelai
• Re: [Full-disclosure] phpMyBible 0.5.1 Mutiple XSS
  • From: BMF
• Re: [Full-disclosure] phpMyBible 0.5.1 Mutiple XSS
  • From: Laurelai
• [Full-disclosure] SumatraPDF v2.0.1 chm and mobi files memory corruption
  • From: Carlo Di Dato
• [Full-disclosure] Mobipocket Reader version 6.2 Build 608 Buffer Overflow
  • From: Carlo Di Dato
• [Full-disclosure] XSS and Blind SQL Injection Vulnerabilities in ExponentCMS
  • From: Netsparker Advisories
• [Full-disclosure] IPhone TreasonSMS - HTML Inject & File Include Vulnerability
  • From: Research
• [Full-disclosure] Havalite CMS v1.0.4 - Multiple Web Vulnerabilities
  • From: Research
• [Full-disclosure] Chengdu Bureau of Commerce - SQL Injection Vulnerability
  • From: Research
• Re: [Full-disclosure] phpMyBible 0.5.1 Mutiple XSS
  • From: Terrence
• Re: [Full-disclosure] phpMyBible 0.5.1 Mutiple XSS
  • From: Alex Buie
• [Full-disclosure] PSFTP v.1.8 Build 921 - Null Pointer (DoS) Vulnerability
  • From: Research
• Re: [Full-disclosure] phpMyBible 0.5.1 Mutiple XSS
  • From: Jason Hellenthal
• [Full-disclosure] [HITB-Announce] HITB Magazine Issue 008 (now with print edition!)
  • From: Hafez Kamal
• [Full-disclosure] .NET Framework EncoderParameter integer overflow vulnerability
  • From: Akita Software Security
• [Full-disclosure] AST-2012-004: Asterisk Manager User Unauthorized Shell Access
  • From: Asterisk Security Team
• [Full-disclosure] AST-2012-005: Heap Buffer Overflow in Skinny Channel Driver
  • From: Asterisk Security Team
• [Full-disclosure] AST-2012-006: Remote Crash Vulnerability in SIP Channel Driver
  • From: Asterisk Security Team
• [Full-disclosure] FYI: We're now paying up to $20, 000 for web vulns in our services
  • From: Michal Zalewski
• [Full-disclosure] [New Tool] - Exploit Pack - Web Security
  • From: runlvl
• [Full-disclosure] [New tool] - Exploit Pack - Web Security
  • From: runlvl
• [Full-disclosure] BeyondCHM 1.1 Buffer Overflow
  • From: Carlo Di Dato
• [Full-disclosure] OpenSSL Security Advisory
  • From: Mark J Cox
• [Full-disclosure] Fwd: Vulnerability research and exploit writing
  • From: Ferenc Kovacs
• [Full-disclosure] Cross Site Scripting - Exploitation & Penetration Strings
  • From: Research
• [Full-disclosure] Microsoft Incremental Linker Integer Overflow
  • From: Walied Assar
• [Full-disclosure] RuggedCom - Backdoor Accounts in my SCADA network? You don't say...
  • From: jc
• [Full-disclosure] [New tool] - Exploit Pack - Web Security
  • From: noreply@xxxxxxxxxxxxxxx
• [Full-disclosure] New IETF I-D: Security Implications of IPv6 on IPv4 networks
  • From: Fernando Gont
• Re: [Full-disclosure] [New tool] - Exploit Pack - Web Security
  • From: Jerome Athias
• Re: [Full-disclosure] [New tool] - Exploit Pack - Web Security
  • From: Michele Orru
• Re: [Full-disclosure] [New tool] - Exploit Pack - Web Security
  • From: Mario Vilas
• [Full-disclosure] Vulnerability in Backtrack
  • From: Григорий Братислава
• [Full-disclosure] [ MDVSA-2012:064 ] openssl0.9.8
  • From: security
• Re: [Full-disclosure] Vulnerability in Backtrack
  • From: Gage Bystrom
• Re: [Full-disclosure] Vulnerability in Backtrack
  • From: Urlan
• Re: [Full-disclosure] Vulnerability in Backtrack
  • From: Gage Bystrom
• Re: [Full-disclosure] We're now paying up to $20, 000 for web vulns in our services
  • From: Jim Harrison
• [Full-disclosure] [Tool] Introducing plown: security scanner for Plone CMS
  • From: mgogoulos
• Re: [Full-disclosure] incorrect integer conversions in OpenSSL can result in memory corruption.
  • From: sd
• Re: [Full-disclosure] Vulnerability in Backtrack
  • From: Sergio Arcos
• Re: [Full-disclosure] We're now paying up to $20, 000 for web vulns in our services
  • From: Michal Zalewski
• Re: [Full-disclosure] Vulnerability in Backtrack
  • From: David3 Gonnella
• [Full-disclosure] Vulnerability in Gentoo hardened
  • From: klondike
• Re: [Full-disclosure] We're now paying up to $20, 000 for web vulns in our services
  • From: Charles Morris
• Re: [Full-disclosure] Vulnerability in Gentoo hardened
  • From: Milan Berger
• Re: [Full-disclosure] We're now paying up to $20, 000 for web vulns in our services
  • From: Michal Zalewski
• Re: [Full-disclosure] Vulnerability in Gentoo hardened
  • From: Valdis . Kletnieks
• Re: [Full-disclosure] Vulnerability in Gentoo hardened
  • From: Thor (Hammer of God)
• Re: [Full-disclosure] We're now paying up to $20, 000 for web vulns in our services
  • From: Ramon de C Valle
• [Full-disclosure] Hacking WolframAlpha
  • From: Adam Behnke
• [Full-disclosure] [SECURITY] [DSA 2456-1] dropbear security update
  • From: Moritz Muehlenhoff
• Re: [Full-disclosure] Fwd: Vulnerability research and exploit writing
  • From: Elazar Broad
• [Full-disclosure] [SECURITY] [DSA 2457-1] iceweasel security update
  • From: Moritz Muehlenhoff
• Re: [Full-disclosure] Fwd: Vulnerability research and exploit writing
  • From: Michal Zalewski
• [Full-disclosure] [SECURITY] [DSA 2548-1] iceape security update
  • From: Moritz Muehlenhoff
• [Full-disclosure] Opcodes Database Revival
  • From: Jerome Athias
• Re: [Full-disclosure] We're now paying up to $20, 000 for web vulns in our services
  • From: Georgi Guninski
• [Full-disclosure] [SECURITY] [DSA 2454-2] openssl incomplete fix
  • From: Raphael Geissert
• Re: [Full-disclosure] Vulnerability in Backtrack
  • From: Disposable
• Re: [Full-disclosure] We're now paying up to $20, 000 for web vulns in our services
  • From: Jim Harrison
• Re: [Full-disclosure] Fwd: Vulnerability research and exploit writing
  • From: Alex Buie
• Re: [Full-disclosure] Vulnerability in Gentoo hardened
  • From: Georgi Guninski
• Re: [Full-disclosure] Vulnerability in Gentoo hardened
  • From: Laurelai
• Re: [Full-disclosure] Vulnerability in Gentoo hardened
  • From: Laurelai
• Re: [Full-disclosure] Fwd: Vulnerability research and exploit writing
  • From: James Condron
• Re: [Full-disclosure] Vulnerability in Gentoo hardened
  • From: Laurelai
• Re: [Full-disclosure] Vulnerability in Gentoo hardened
  • From: Benji
• Re: [Full-disclosure] Vulnerability in Gentoo hardened
  • From: Laurelai
• Re: [Full-disclosure] Vulnerability in Backtrack
  • From: James Condron
• Re: [Full-disclosure] Vulnerability in Gentoo hardened
  • From: Benji
• Re: [Full-disclosure] Vulnerability in Gentoo hardened
  • From: Laurelai
• Re: [Full-disclosure] Vulnerability in Gentoo hardened
  • From: Benji
• Re: [Full-disclosure] Vulnerability in Gentoo hardened
  • From: Laurelai
• Re: [Full-disclosure] Vulnerability in Gentoo hardened
  • From: Benji
• [Full-disclosure] MoroccoTel Box Default Open Telnet Password
  • From: Jerome Athias
• Re: [Full-disclosure] Vulnerability in Gentoo hardened
  • From: Georgi Guninski
• [Full-disclosure] [SECURITY] [DSA 2460-1] asterisk security update
  • From: Moritz Muehlenhoff
• Re: [Full-disclosure] Hacking WolframAlpha
  • From: Lincoln Anderson
• [Full-disclosure] XSS, CSRF and AFU vulnerabilities in Organizer for WordPress
  • From: MustLive
• [Full-disclosure] (no subject)
  • From: Ramon Driessen
• Re: [Full-disclosure] (no subject)
  • From: coderman
• [Full-disclosure] [Security-news] SA-CONTRIB-2012-062 - Creative Commons - Cross Site Scripting (XSS)
  • From: security-news
• [Full-disclosure] [Security-news] SA-CONTRIB-2012-063 - RealName - Cross Site Scripting (XSS)
  • From: security-news
• [Full-disclosure] [Security-news] SA-CONTRIB-2012-064 - Ubercart - Multiple vulnerabilities
  • From: security-news
• Re: [Full-disclosure] [Security-news] SA-CONTRIB-2012-063 - RealName - Cross Site Scripting (XSS)
  • From: security-news
• [Full-disclosure] [Security-news] SA-CONTRIB-2012-065 - Sitedoc - Information disclosure
  • From: security-news
• [Full-disclosure] FW: (no subject)
  • From: imipak
• [Full-disclosure] [Security-news] SA-CONTRIB-2012-066 - Spaces and Spaces OG - Access Bypass
  • From: security-news
• [Full-disclosure] [Security-news] SA-CONTRIB-2012-067 - Linkit - Access bypass
  • From: security-news
• Re: [Full-disclosure] FW: (no subject)
  • From: Michael Wood
• [Full-disclosure] [SECURITY] [DSA 2459-1] quagga security update
  • From: Florian Weimer
• [Full-disclosure] Oracle TNS Poison vulnerability is actually a 0day with no patch available
  • From: Joxean Koret
• Re: [Full-disclosure] phpMyBible 0.5.1 Mutiple XSS
  • From: Martin Allert
• Re: [Full-disclosure] [New tool] - Exploit Pack - Web Security
  • From: Mario Vilas
• Re: [Full-disclosure] [New tool] - Exploit Pack - Web Security
  • From: Michele Orru
• Re: [Full-disclosure] We're now paying up to $20, 000 for web vulns in our services
  • From: Jim Harrison
• Re: [Full-disclosure] Full-Disclosure Digest, Vol 86, Issue 34
  • From: Gabriel S. Craciun
• [Full-disclosure] Microsoft MSN Hotmail - Password Reset & Setup Vulnerability
  • From: Research
• [Full-disclosure] [SECURITY] [DSA 2461-1] spip security update
  • From: Moritz Muehlenhoff
• [Full-disclosure] IA, CSRF and FPD vulnerabilities in Organizer for WordPress
  • From: MustLive
• [Full-disclosure] CIntruder v0.2 released
  • From: psy
• [Full-disclosure] [Exploit Pack] - Web Security -Webinar Live demo!
  • From: runlvl
• [Full-disclosure] VMSA-2012-0008 VMware ESX updates to ESX Service Console
  • From: VMware Security Team
• [Full-disclosure] [ MDVSA-2012:065 ] php
  • From: security
• [Full-disclosure] [ MDVSA-2012:066 ] mozilla
  • From: security
• [Full-disclosure] DDIVRT-2012-40 PacketVideo TwonkyServer and TwonkyMedia Directory Traversal
  • From: ddivulnalert
• [Full-disclosure] DDIVRT-2012-41 ACTi Web Configurator cgi-bin Directory Traversal
  • From: ddivulnalert
• [Full-disclosure] DirectAdmin v1.403 - Multiple Cross Site Vulnerabilities
  • From: Research
• [Full-disclosure] DIY CMS v1.0 Poll - Multiple Web Vulnerabilities
  • From: Research
• [Full-disclosure] Car Portal CMS v3.0 - Multiple Web Vulnerabilities
  • From: Research
• [Full-disclosure] C4B XPhone UC Web 4.1.890S R1 - Cross Site Vulnerability
  • From: Research
• Re: [Full-disclosure] We're now paying up to $20, 000 for web vulns in our services
  • From: Bob McConnell
• Re: [Full-disclosure] We're now paying up to $20, 000 for web vulns in our services
  • From: Charlie Derr
• Re: [Full-disclosure] We're now paying up to $20, 000 for web vulns in our services
  • From: Marcio B. Jr.
• [Full-disclosure] nullcon Delhi 2012 Call for Paper/Call for Event
  • From: murtuja bharmal
• [Full-disclosure] Opial CMS v2.0 - Multiple Web Vulnerabilities
  • From: Research
• [Full-disclosure] C4B XPhone UC Web 4.1.890S R1 - Cross Site Vulnerability
  • From: Research
• [Full-disclosure] China Pujia Government - Blind SQL Injection Vulnerability
  • From: Research
• [Full-disclosure] China Pujiang Government - Blind SQL Injection Vulnerability
  • From: Research
• [Full-disclosure] Croogo v1.3.4 CMS - Multiple Web Vulnerabilities
  • From: Research
• [Full-disclosure] [SECURITY] [DSA 2462-1] imagemagick security update
  • From: Moritz Muehlenhoff
• [Full-disclosure] WordPress BruteForce Script
  • From: CorryL
• Re: [Full-disclosure] WordPress BruteForce Script
  • From: R00T_ATI
• [Full-disclosure] PHP Denial of Service - Memory leak in getimagesize().
  • From: Manu
• [Full-disclosure] Pritlog v0.821 CMS - Multiple Web Vulnerabilities
  • From: Research
• [Full-disclosure] DoS vulnerabilities in Firefox, Internet Explorer and Opera
  • From: MustLive
• Re: [Full-disclosure] DoS vulnerabilities in Firefox, Internet Explorer and Opera
  • From: Valdis . Kletnieks