Mail Index

• Thread Index

• [Full-disclosure] [ MDVSA-2013:159 ] clamav
  • From: security
• [Full-disclosure] [SECURITY] [DSA 2665-1] strongswan security update
  • From: Yves-Alexis Perez
• [Full-disclosure] n.runs-SA-2013.005 - IBM Lotus Notes - arbitrary code execution
  • From: security
• [Full-disclosure] Breakpoint 2013 Call For Papers
  • From: cfp
• [Full-disclosure] [HITB-Announce] #HITB2013KUL Call for Papers
  • From: Hafez Kamal
• [Full-disclosure] Forticlient VPN client credential interception vulnerability
  • From: Philippe oechslin
• Re: [Full-disclosure] Forticlient VPN client credential interception vulnerability
  • From: Thierry Zoller
• [Full-disclosure] [Security-news] SA-CONTRIB-2013-046 - Filebrowser - Reflected Cross Site Scripting (XSS)
  • From: security-news
• Re: [Full-disclosure] Forticlient VPN client credential interception vulnerability
  • From: Patrick Webster
• [Full-disclosure] [SECURITY] [DSA 2664-1] stunnel4 security update
  • From: Salvatore Bonaccorso
• [Full-disclosure] [RT-SA-2013-001] Advisory: Exim with Dovecot: Typical Misconfiguration Leads to Remote Command Execution
  • From: RedTeam Pentesting GmbH
• [Full-disclosure] [ MDVSA-2013:160 ] phpmyadmin
  • From: security
• [Full-disclosure] Trying to send mail to Broadcom
  • From: Jann Horn
• [Full-disclosure] Vulnerability in Microsoft Security Essentials <v4.2
  • From: Stefan Kanthak
• [Full-disclosure] XSS vulnerability in JW Player and JW Player Pro
  • From: MustLive
• [Full-disclosure] Using CSS :visited to steal your history (again, zzzz...)
  • From: Michal Zalewski
• Re: [Full-disclosure] Using CSS :visited to steal your history (again, zzzz...)
  • From: Dan Kaminsky
• [Full-disclosure] Vulnerabilities in Windows 8 Professional x64 factory preinstallation of Fujitsu Lifebook A512
  • From: Stefan Kanthak
• [Full-disclosure] [SE-2012-01] New security vulnerabilities and broken fixes in IBM Java
  • From: Security Explorations
• [Full-disclosure] [ MDVSA-2013:161 ] java-1.7.0-openjdk
  • From: security
• [Full-disclosure] Introducing libOnionRoute, the library to anonymize software
  • From: wac
• [Full-disclosure] Apache VCL improper input validation
  • From: Josh Thompson
• [Full-disclosure] VULNERABLE and COMPLETELY outdated 3rd-party libraries/components used in 3CX Phone 6
  • From: Stefan Kanthak
• [Full-disclosure] VULNERABLE and COMPLETELY outdated 3rd-party libraries/components used in 3CX Phone System 11
  • From: Stefan Kanthak
• [Full-disclosure] Vulnerabilities in VideoJS
  • From: MustLive
• [Full-disclosure] Ruxcon 2013 Call For Papers
  • From: cfp
• [Full-disclosure] [ESNC-2013-005] Remote Code Injection in SAP ERP Central Component - Project System
  • From: ESNC Security
• [Full-disclosure] SEC Consult SA-20130507-0 :: Multiple vulnerabilities in NetApp OnCommand System Manager
  • From: SEC Consult Vulnerability Lab
• [Full-disclosure] HTP5 ezine released
  • From: Hack The Planet
• Re: [Full-disclosure] SEC Consult SA-20130507-0 :: Multiple vulnerabilities in NetApp OnCommand System Manager
  • From: Mario Vilas
• [Full-disclosure] [ MDVSA-2013:162 ] glibc
  • From: security
• [Full-disclosure] [ MDVSA-2013:163 ] glibc
  • From: security
• [Full-disclosure] Unscribe
  • From: Ron Yount
• Re: [Full-disclosure] Vulnerabilities in VideoJS
  • From: Ron Yount
• Re: [Full-disclosure] [ESNC-2013-005] Remote Code Injection in SAP ERP Central Component - Project System
  • From: Ron Yount
• [Full-disclosure] [2.0 Update] Cisco Security Advisory: Cisco Prime Data Center Network Manager Remote Command Execution Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [Full-disclosure] Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified Customer Voice Portal Software
  • From: Cisco Systems Product Security Incident Response Team
• Re: [Full-disclosure] Vulnerabilities in VideoJS
  • From: illwill
• [Full-disclosure] Vulnerabilities in multiple web applications with VideoJS
  • From: MustLive
• [Full-disclosure] Vulnerability in "Fujitsu Desktop Update" (for Windows)
  • From: Stefan Kanthak
• Re: [Full-disclosure] Vulnerabilities in Windows 8 Professional x64 factory preinstallation of Fujitsu Lifebook A512 [continued]
  • From: Stefan Kanthak
• [Full-disclosure] AlienVault OSSIM multiple SQL Injection vulnerabilities
  • From: run run level
• [Full-disclosure] List Charter
  • From: John Cartwright
• [Full-disclosure] DDIVRT-2013-53 Actuate 'ActuateJavaComponent' Multiple Vulnerabilities
  • From: ddivulnalert
• [Full-disclosure] GlobaLeaks 0.2 Alpha (herMario edition) released!
  • From: Arturo Filastò
• [Full-disclosure] CVE-2013-2071 Request mix-up if AsyncListener method throws RuntimeException
  • From: Mark Thomas
• [Full-disclosure] [SECURITY] CVE-2013-2067 Session fixation with FORM authenticator
  • From: Mark Thomas
• [Full-disclosure] [SECURITY] CVE-2012-3544 Chunked transfer encoding extension size is not limited
  • From: Mark Thomas
• [Full-disclosure] OT bait on freelancer.com about md5 preimage
  • From: Georgi Guninski
• Re: [Full-disclosure] OT bait on freelancer.com about md5 preimage
  • From: Valdis . Kletnieks
• [Full-disclosure] [Botconf] Botconf announcement and CFP reminder
  • From: Eric Freyssinet
• [Full-disclosure] [SECURITY] [DSA 2666-1] xen security update
  • From: Salvatore Bonaccorso
• [Full-disclosure] XSS and FPD vulnerabilities in Search and Share for WordPress
  • From: MustLive
• [Full-disclosure] [SECURITY] [DSA 2667-1] mysql-5.5 security update
  • From: Moritz Muehlenhoff
• [Full-disclosure] Paypal Bug Bounty #31 - Mail Encoding Web Vulnerability
  • From: Vulnerability Lab
• [Full-disclosure] Wireless Disk PRO v2.3 iOS - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• Re: [Full-disclosure] Paypal Bug Bounty #31 - Mail Encoding Web Vulnerability
  • From: Michal Zalewski
• [Full-disclosure] Wifi Photo Transfer 2.1 & 1.1 PRO - Multiple Vulnerabilities
  • From: Vulnerability Lab
• [Full-disclosure] Wireless Photo Access 1.0.10 iOS - Multiple Vulnerabilities
  • From: Vulnerability Lab
• [Full-disclosure] Wifi Album v1.47 iOS - Command Injection Vulnerability
  • From: Vulnerability Lab
• [Full-disclosure] SimpleTransfer 2.2.1 - Command Injection Vulnerabilities
  • From: Vulnerability Lab
• [Full-disclosure] File Lite 3.3 & 3.5 PRO iOS - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• Re: [Full-disclosure] Paypal Bug Bounty #31 - Mail Encoding Web Vulnerability
  • From: Jakub Zoczek
• [Full-disclosure] [ MDVSA-2013:164 ] mesa
  • From: security
• [Full-disclosure] IPB (Invision Power Board) all versions (1.x? / 2.x / 3.x) Admin account Takeover leading to code execution
  • From: John JEAN
• [Full-disclosure] Security-Assessment.com Advisory: Gallery Server Pro File Upload Filter Bypass
  • From: Drew Calcott
• [Full-disclosure] Q: CVE Database with Programming Language and Failure Classification?
  • From: Jeffrey Walton
• [Full-disclosure] [HITB-Announce] HITB Magazine Issue 010
  • From: Hafez Kamal
• [Full-disclosure] GreHack 2013 - Call For Papers - November 15, Grenoble, France
  • From: F. Duchene
• [Full-disclosure] Vulnerabilities in multiple plugins for WordPress with VideoJS
  • From: MustLive
• [Full-disclosure] www.netcraft.com - "Search Form" Cross-site Scripting vulnerability
  • From: Stefan Schurtz
• [Full-disclosure] Remote command Injection in Creme Fraiche 0.6 Ruby Gem
  • From: Larry W. Cashdollar
• [Full-disclosure] [SECURITY] [DSA 2668-1] linux-2.6 security update
  • From: dann frazier
• [Full-disclosure] [ MDVSA-2013:165 ] firefox
  • From: security
• [Full-disclosure] Indusface Website Hacked and Infected?
  • From: Rahul T
• [Full-disclosure] Cisco Security Advisory: Cisco TelePresence Supervisor MSE 8050 Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [Full-disclosure] [Security-news] SA-CONTRIB-2013-047 - Google Authenticator login - Access Bypass
  • From: security-news
• Re: [Full-disclosure] Q: CVE Database with Programming Language and Failure Classification?
  • From: Florian Weimer
• [Full-disclosure] [SECURITY] [DSA 2669-1] linux security update
  • From: dann frazier
• [Full-disclosure] Take Part in Positive Hack Days in Any Part of the World
  • From: PHD
• [Full-disclosure] Multiple vulnerabilities in multiple themes for WordPress with VideoJS
  • From: MustLive
• [Full-disclosure] On Skype URL eavesdropping
  • From: Kirils Solovjovs
• Re: [Full-disclosure] On Skype URL eavesdropping
  • From: Jeffrey Walton
• Re: [Full-disclosure] On Skype URL eavesdropping
  • From: Bruce Ediger
• Re: [Full-disclosure] On Skype URL eavesdropping
  • From: Alex
• [Full-disclosure] CONFidence - May, 28-29, Krakow, Poland - a conference adventure that never stops!
  • From: Sławomir Jabs
• [Full-disclosure] My ISP is routing traffic to private addresses...
  • From: kyle kemmerer
• Re: [Full-disclosure] My ISP is routing traffic to private addresses...
  • From: Gary Baribault
• Re: [Full-disclosure] My ISP is routing traffic to private addresses...
  • From: Joshua Zukerman
• Re: [Full-disclosure] My ISP is routing traffic to private addresses...
  • From: sec
• Re: [Full-disclosure] My ISP is routing traffic to private addresses...
  • From: Justin Elze
• Re: [Full-disclosure] My ISP is routing traffic to private addresses...
  • From: Gary Baribault
• Re: [Full-disclosure] My ISP is routing traffic to private addresses...
  • From: sec
• Re: [Full-disclosure] My ISP is routing traffic to private addresses...
  • From: Gary Baribault
• [Full-disclosure] exploitation ideas under memory pressure
  • From: Tavis Ormandy
• Re: [Full-disclosure] My ISP is routing traffic to private addresses...
  • From: mezgani ali
• Re: [Full-disclosure] My ISP is routing traffic to private addresses...
  • From: Julius Kivimäki
• Re: [Full-disclosure] My ISP is routing traffic to private addresses...
  • From: Carl "Thomas" Guething
• Re: [Full-disclosure] exploitation ideas under memory pressure
  • From: Tavis Ormandy
• Re: [Full-disclosure] My ISP is routing traffic to private addresses...
  • From: Gary Baribault
• Re: [Full-disclosure] My ISP is routing traffic to private addresses...
  • From: Gary Baribault
• Re: [Full-disclosure] My ISP is routing traffic to private addresses...
  • From: Alexander Georgiev
• Re: [Full-disclosure] My ISP is routing traffic to private addresses...
  • From: Kirils Solovjovs
• Re: [Full-disclosure] My ISP is routing traffic to private addresses...
  • From: Dan Dart
• Re: [Full-disclosure] My ISP is routing traffic to private addresses...
  • From: Justin Elze
• [Full-disclosure] AFU vulnerabilities in MCFileManager for TinyMCE
  • From: MustLive
• [Full-disclosure] AFU vulnerabilities in MCImageManager for TinyMCE
  • From: MustLive
• [Full-disclosure] Revision of "IPv6 Stable Privacy Addresses" (Fwd: I-D Action: draft-ietf-6man-stable-privacy-addresses-07.txt)
  • From: Fernando Gont
• [Full-disclosure] Interesting referrer URLs when accessing vulnerability disclosure information
  • From: halfdog
• [Full-disclosure] Thttpd 2.25b Directory Traversal Vulnerability
  • From: metropolis haxor
• [Full-disclosure] Defense in depth -- the Microsoft way
  • From: Stefan Kanthak
• Re: [Full-disclosure] My ISP is routing traffic to private addresses...
  • From: Alexander Georgiev
• [Full-disclosure] Critical issues affecting multiple game engines
  • From: ReVuln
• Re: [Full-disclosure] My ISP is routing traffic to private addresses...
  • From: Patrick Webster
• Re: [Full-disclosure] exploitation ideas under memory pressure
  • From: Tavis Ormandy
• [Full-disclosure] Trend Micro DirectPass 1.5.0.1060 (Cloud) Software - Multiple Software Vulnerabilities
  • From: Vulnerability Lab
• [Full-disclosure] Sony PS3 Firmware v4.31 - Code Execution Vulnerability
  • From: Vulnerability Lab
• [Full-disclosure] CVE-2013-3496. Local privilege escalation vulnerability in Infotecs products (ViPNet Client\Coordinator, SafeDisk, Personal Firewall)
  • From: Максим Чудаков
• Re: [Full-disclosure] exploitation ideas under memory pressure
  • From: sd
• [Full-disclosure] [ MDVSA-2013:166 ] krb5
  • From: security
• Re: [Full-disclosure] exploitation ideas under memory pressure
  • From: Brian Blankenship
• Re: [Full-disclosure] exploitation ideas under memory pressure
  • From: You Got Pwned
• Re: [Full-disclosure] Sony PS3 Firmware v4.31 - Code Execution Vulnerability
  • From: Julius Kivimäki
• [Full-disclosure] Pentesting Distributions or Projects for Raspberry Pi
  • From: Jay Turla
• Re: [Full-disclosure] Sony PS3 Firmware v4.31 - Code Execution Vulnerability
  • From: Milan Berger
• [Full-disclosure] [SECURITY] [DSA 2670-1] request-tracker3.8 security update
  • From: Salvatore Bonaccorso
• [Full-disclosure] [SECURITY] [DSA 2671-1] request-tracker4 security update
  • From: Salvatore Bonaccorso
• [Full-disclosure] [SECURITY] [DSA 2672-1] kfreebsd-9 security update
  • From: Florian Weimer
• Re: [Full-disclosure] Pentesting Distributions or Projects for Raspberry Pi
  • From: Carlos Pantelides
• [Full-disclosure] [waraxe-2013-SA#105] - Multiple Vulnerabilities in Spider Catalog Wordpress Plugin
  • From: Janek Vind
• [Full-disclosure] [waraxe-2013-SA#104] - Multiple Vulnerabilities in Spider Event Calendar Wordpress Plugin
  • From: Janek Vind
• Re: [Full-disclosure] Pentesting Distributions or Projects for Raspberry Pi
  • From: Jay Turla
• Re: [Full-disclosure] Sony PS3 Firmware v4.31 - Code Execution Vulnerability
  • From: Julius Kivimäki
• [Full-disclosure] [ANN] Struts 2.3.14.1 GA (fast track | security)
  • From: Lukasz Lenart
• [Full-disclosure] SEC Consult SA-20130523-0 :: JavaScript Execution in IBM WebSphere DataPower Services
  • From: SEC Consult Vulnerability Lab
• [Full-disclosure] SEC Consult whitepaper :: Blackberry Z10 Research Primer - "Dissecting Blackberry 10 - An initial analysis"
  • From: SEC Consult Vulnerability Lab
• [Full-disclosure] [SECURITY] [DSA 2677-1] libxrender security update
  • From: Moritz Muehlenhoff
• [Full-disclosure] [SECURITY] [DSA 2678-1] mesa security update
  • From: Moritz Muehlenhoff
• [Full-disclosure] [SECURITY] [DSA 2679-1] xserver-xorg-video-openchrome security update
  • From: Moritz Muehlenhoff
• [Full-disclosure] [SECURITY] [DSA 2680-1] libxt security update
  • From: Moritz Muehlenhoff
• [Full-disclosure] [SECURITY] [DSA 2681-1] libxcursor security update
  • From: Moritz Muehlenhoff
• [Full-disclosure] [SECURITY] [DSA 2683-1] libxi security update
  • From: Moritz Muehlenhoff
• [Full-disclosure] [SECURITY] [DSA 2684-1] libxrandr security update
  • From: Moritz Muehlenhoff
• [Full-disclosure] [SECURITY] [DSA 2682-1] libxext security update
  • From: Moritz Muehlenhoff
• [Full-disclosure] [SECURITY] [DSA 2685-1] libxp security update
  • From: Moritz Muehlenhoff
• [Full-disclosure] [SECURITY] [DSA 2686-1] libxcb security update
  • From: Moritz Muehlenhoff
• [Full-disclosure] [SECURITY] [DSA 2687-1] libfs security update
  • From: Moritz Muehlenhoff
• [Full-disclosure] [SECURITY] [DSA 2688-1] libxres security update
  • From: Moritz Muehlenhoff
• [Full-disclosure] [SECURITY] [DSA 2689-1] libxtst security update
  • From: Moritz Muehlenhoff
• [Full-disclosure] [SECURITY] [DSA 2676-1] libxfixes security update
  • From: Moritz Muehlenhoff
• [Full-disclosure] [SECURITY] [DSA 2675-1] libxvmc security update
  • From: Moritz Muehlenhoff
• [Full-disclosure] [SECURITY] [DSA 2674-1] libxv security update
  • From: Moritz Muehlenhoff
• [Full-disclosure] [SECURITY] [DSA 2673-1] libdmx security update
  • From: Moritz Muehlenhoff
• [Full-disclosure] [SECURITY] [DSA 2690-1] libxxf86dga security update
  • From: Moritz Muehlenhoff
• [Full-disclosure] [SECURITY] [DSA 2691-1] libxinerama security update
  • From: Moritz Muehlenhoff
• [Full-disclosure] [SECURITY] [DSA 2692-1] libxxf86vm security update
  • From: Moritz Muehlenhoff
• [Full-disclosure] XSS and FPD vulnerabilities in I Love It New theme for WordPress
  • From: MustLive
• [Full-disclosure] Question on SMBRelay through Meterpreter
  • From: sd
• [Full-disclosure] little proof-of-concept for remote traffic statistics using the IP ID field
  • From: Jann Horn
• [Full-disclosure] Show In Browser 0.0.3 Ruby Gem /tmp file injection vulnerability
  • From: Larry W. Cashdollar
• Re: [Full-disclosure] Sony PS3 Firmware v4.31 - Code Execution Vulnerability
  • From: Gary Driggs
• [Full-disclosure] Shakacon V Speaker Selections
  • From: Shakacon
• [Full-disclosure] Open challenge to Design the logo for Ground Zero Summit
  • From: Ground Zero
• [Full-disclosure] Analysis of the Carna Botnet (Internet Census 2012)
  • From: Parth Shukla
• [Full-disclosure] [SECURITY] [DSA 2675-2] libxvmc regression update
  • From: Thijs Kinkhorst
• [Full-disclosure] [SECURITY] [DSA 2693-1] libx11 security update
  • From: Raphael Geissert
• [Full-disclosure] PayPal.com XSS Vulnerability
  • From: Robert Kugler
• Re: [Full-disclosure] Sony PS3 Firmware v4.31 - Code Execution Vulnerability
  • From: Julius Kivimäki
• [Full-disclosure] Multiple vulnerabilities in aCMS
  • From: MustLive
• [Full-disclosure] CVE-2013-3666 - LG Optimus G command injection (as system user) vulnerability
  • From: Justin Case
• [Full-disclosure] [SECURITY] [DSA 2694-1] spip security update
  • From: Salvatore Bonaccorso
• [Full-disclosure] PayPal Bug Bounty #78 FR - Remote SQL Injection Vulnerability
  • From: Vulnerability Lab
• Re: [Full-disclosure] Trying to send mail to Broadcom
  • From: Tony Naggs
• [Full-disclosure] DC4420 - London DEFCON - May meet - Tuesday 28th May 2013
  • From: Tony Naggs
• [Full-disclosure] [ MDVSA-2013:167 ] openvpn
  • From: security
• [Full-disclosure] [ MDVSA-2013:168 ] python-httplib2
  • From: security
• Re: [Full-disclosure] Sony PS3 Firmware v4.31 - Code Execution Vulnerability
  • From: Vulnerability Lab
• [Full-disclosure] Barracuda SSL VPN 680 2.2.2.203 - Redirect Web Vulnerability
  • From: Vulnerability Lab
• [Full-disclosure] [CVE-2013-2115] Struts 2.3.14.2 GA (important security fix)
  • From: Rene Gielen
• [Full-disclosure] DC4420 - London DEFCON - May meet - Tuesday 28th May 2013
  • From: Tony Naggs
• [Full-disclosure] c0c0n 2013 CFP - Extended Deadline: 9 June, 2013
  • From: c0c0n International Information Security Conference
• Re: [Full-disclosure] Sony PS3 Firmware v4.31 - Code Execution Vulnerability
  • From: Daniela Hermina
• Re: [Full-disclosure] PayPal.com XSS Vulnerability
  • From: Robert Kugler
• [Full-disclosure] Backdoor scanners testing
  • From: MustLive
• Re: [Full-disclosure] PayPal.com XSS Vulnerability
  • From: Jeffrey Walton
• [Full-disclosure] 13 more XSS on Paypal
  • From: John Parker
• Re: [Full-disclosure] PayPal.com XSS Vulnerability
  • From: Dan Kaminsky
• Re: [Full-disclosure] PayPal.com XSS Vulnerability
  • From: Jeffrey Walton
• Re: [Full-disclosure] PayPal.com XSS Vulnerability
  • From: Daniël W. Crompton
• Re: [Full-disclosure] PayPal.com XSS Vulnerability
  • From: Zachary Cutlip
• Re: [Full-disclosure] PayPal.com XSS Vulnerability
  • From: Kirils Solovjovs
• Re: [Full-disclosure] PayPal.com XSS Vulnerability
  • From: Jeffrey Walton
• [Full-disclosure] SCADA StrangeLove @Positive Hack Days
  • From: scadastrangelove
• Re: [Full-disclosure] PayPal.com XSS Vulnerability
  • From: Robert Kugler
• Re: [Full-disclosure] PayPal.com XSS Vulnerability
  • From: Terrence
• Re: [Full-disclosure] PayPal.com XSS Vulnerability
  • From: Kirils Solovjovs
• [Full-disclosure] CORE-2013-0302 - Zavio IP Cameras multiple vulnerabilities
  • From: CORE Security Technologies Advisories
• [Full-disclosure] CORE-2013-0322 - MayGion IP Cameras multiple vulnerabilities
  • From: CORE Security Technologies Advisories
• [Full-disclosure] CORE-2013-0318 - TP-Link IP Cameras Multiple Vulnerabilities
  • From: CORE Security Technologies Advisories
• [Full-disclosure] CA20130528-01: Security Notice for CA Process Automation (CA PAM)
  • From: Kotas, Kevin J
• Re: [Full-disclosure] PayPal.com XSS Vulnerability
  • From: Jeffrey Walton
• [Full-disclosure] [ MDVSA-2013:169 ] socat
  • From: security
• [Full-disclosure] [ MDVSA-2013:170 ] socat
  • From: security
• Re: [Full-disclosure] PayPal.com XSS Vulnerability
  • From: Robert Kugler
• Re: [Full-disclosure] PayPal.com XSS Vulnerability
  • From: Źmicier Januszkiewicz
• Re: [Full-disclosure] PayPal.com XSS Vulnerability
  • From: Źmicier Januszkiewicz
• Re: [Full-disclosure] PayPal.com XSS Vulnerability
  • From: Julius Kivimäki
• Re: [Full-disclosure] PayPal.com XSS Vulnerability
  • From: James Condron
• Re: [Full-disclosure] PayPal.com XSS Vulnerability
  • From: Jeffrey Walton
• Re: [Full-disclosure] PayPal.com XSS Vulnerability
  • From: James Condron
• [Full-disclosure] [SECURITY] [DSA 2696-1] otrs2 security update
  • From: Giuseppe Iuculano
• [Full-disclosure] [Security-news] SA-CONTRIB-2013-048 - Edit Limit - Access Bypass
  • From: security-news
• [Full-disclosure] [Security-news] SA-CONTRIB-2013-049 - Node access user reference - Access Bypass
  • From: security-news
• [Full-disclosure] [SECURITY] [DSA 2695-1] chromium-browser security update
  • From: Michael Gilbert
• [Full-disclosure] PayPal Bug Bounty Controversy - I found the XSS first: They still didn't pay me
  • From: Shubham Shah
• Re: [Full-disclosure] PayPal.com XSS Vulnerability
  • From: Andre Helwig
• Re: [Full-disclosure] PayPal.com XSS Vulnerability
  • From: Vulnerability Lab
• [Full-disclosure] Barracuda SSL VPN 680 2.2.2.203 - Redirect Vulnerability
  • From: Vulnerability Lab
• [Full-disclosure] [SECURITY] [DSA 2697-1] gnutls26 security update
  • From: Florian Weimer
• [Full-disclosure] FPD and Security bypass vulnerabilities in Exploit Scanner for WordPress
  • From: MustLive
• [Full-disclosure] [Security-news] SA-CONTRIB-2013-050 - Webform - Cross Site Scripting (XSS)
  • From: security-news
• [Full-disclosure] [ MDVSA-2013:171 ] gnutls
  • From: security
• Re: [Full-disclosure] PayPal.com XSS Vulnerability
  • From: Daniel Preussker
• [Full-disclosure] No Directory Traversal Vulnerability in sthttpd
  • From: Anthony G. Basile
• [Full-disclosure] XSS in images.samsung.com
  • From: David Tapia
• [Full-disclosure] Call For Papers - ekoparty security conference 2013
  • From: Juan Pablo Daniel