Mail Index

• Thread Index

• [Full-disclosure] Phact
  • From: iPwn
• Re: [Full-disclosure] Open phones for privacy/anonymity applications, Guardian
  • From: l
• [Full-disclosure] DoS vulnerability in Adobe Flash Player (BSOD)
  • From: MustLive
• [Full-disclosure] CSRF, XSS and Redirector vulnerabilities in IBM Lotus Notes Traveler
  • From: MustLive
• [Full-disclosure] [SECURITY] [DSA 2831-1] puppet security update
  • From: Luciano Bello
• Re: [Full-disclosure] Open phones for privacy/anonymity applications, Guardian
  • From: coderman
• Re: [Full-disclosure] Open phones for privacy/anonymity applications, Guardian
  • From: coderman
• [Full-disclosure] [SECURITY] [DSA 2832-1] memcached security update
  • From: Salvatore Bonaccorso
• Re: [Full-disclosure] Open phones for privacy/anonymity applications, Guardian
  • From: coderman
• [Full-disclosure] [SECURITY] [DSA 2833-1] openssl security update
  • From: Moritz Muehlenhoff
• Re: [Full-disclosure] [SECURITY] [DSA 2833-1] openssl security update
  • From: coderman
• [Full-disclosure] Tool Update: Bing-ip2hosts version 0.4
  • From: Andrew Horton
• [Full-disclosure] Targeted CSRF vulnerability on LinkedIn to delete posts [FIXED]
  • From: Bhavesh Naik
• Re: [Full-disclosure] Open phones for privacy/anonymity applications, Guardian
  • From: Lodewijk andré de la porte
• [Full-disclosure] [SECURITY] [DSA 2834-1] typo3-src security update
  • From: Salvatore Bonaccorso
• [Full-disclosure] [CVE-2013-6480] Libcloud doesn't send scrub_data query parameter when destroying a DigitalOcean node
  • From: Tomaz Muraus
• [Full-disclosure] DAVOSET v.1.1.5
  • From: MustLive
• Re: [Full-disclosure] Securelist.com (Kaspersky) released a misleading information about Kelihos Botnet actual status
  • From: アドリアンヘンドリック
• [Full-disclosure] SCADA StrangeLove 30C3 releases: all in one
  • From: scadastrangelove
• Re: [Full-disclosure] SCADA StrangeLove 30C3 releases: all in one
  • From: coderman
• [Full-disclosure] "the Fairphone is fatally flawed for security"
  • From: Bernhard Kuemel
• Re: [Full-disclosure] "the Fairphone is fatally flawed for security"
  • From: coderman
• [Full-disclosure] [SECURITY] [DSA 2835-1] asterisk security update
  • From: Moritz Muehlenhoff
• [Full-disclosure] [SECURITY] [DSA 2836-1] devscripts security update
  • From: Raphael Geissert
• Re: [Full-disclosure] DoS vulnerability in Adobe Flash Player (BSOD)
  • From: sixtyvividtails
• Re: [Full-disclosure] Open phones for privacy/anonymity applications, Guardian
  • From: Anonymous
• Re: [Full-disclosure] Open phones for privacy/anonymity applications, Guardian
  • From: Bzzz
• [Full-disclosure] [HITB-Announce] HITB Magazine Issue 10 Out Now
  • From: Hafez Kamal
• [Full-disclosure] AusCERT2014 Call for Presentations and Tutorials
  • From: AusCERT
• Re: [Full-disclosure] Open phones for privacy/anonymity applications, Guardian
  • From: Daniel Corbe
• [Full-disclosure] [SECURITY] [DSA 2837-1] openssl security update
  • From: Moritz Muehlenhoff
• [Full-disclosure] [SECURITY] [DSA 2838-1] libxfont security update
  • From: Moritz Muehlenhoff
• Re: [Full-disclosure] FPU-state NULL-deref exploitation (was vm86 syscall kernel-panic and some more goodies waiting to be analyzed)
  • From: halfdog
• [Full-disclosure] Wordpress Plugin WP-Members Version 2.8.9 - Stored and reflected Cross-site Scripting vulnerabilities
  • From: Stefan Schurtz
• [Full-disclosure] [SECURITY] [DSA 2839-1] spice security update
  • From: Salvatore Bonaccorso
• Re: [Full-disclosure] Where are you guys standing re: the (full) disclosure
  • From: Georgi Guninski
• [Full-disclosure] [CVE-2014-1203] Eyou Mail System Remote Code Execution
  • From: conqu3r.zeng
• [Full-disclosure] [Wooyun] NVIDIA a SAP NETWEAVER remote command execution
  • From: En.wooyun.org
• [Full-disclosure] [Wooyun] OVH a subsite Zabbix Sql injection
  • From: En.wooyun.org
• [Full-disclosure] [Security-news] SA-CONTRIB-2014-001 - Entity API - Access Bypass
  • From: security-news
• [Full-disclosure] [Security-news] PSA-2014-001 - Media - Access Bypass
  • From: security-news
• Re: [Full-disclosure] [Wooyun] OVH a subsite Zabbix Sql injection
  • From: thomas . soete
• [Full-disclosure] Security is fun(ny) again
  • From: J. Oquendo
• Re: [Full-disclosure] Security is fun(ny) again
  • From: illwill
• [Full-disclosure] nullcon Blackshield Awards 2014
  • From: nullcon
• [Full-disclosure] [CVE -2014-1201] Lorex security DVD ActiveX control buffer overflow
  • From: Pedro Ribeiro
• Re: [Full-disclosure] [CVE -2014-1201] Lorex security DVD ActiveX control buffer overflow
  • From: Pedro Ribeiro
• [Full-disclosure] ObamaCare California Admin Interface Exposed to Entire Internet + more!
  • From: Whitehat Whistleblower
• Re: [Full-disclosure] Where are you guys standing re: the (full) disclosure
  • From: Pedro Luis Karrasquillo
• [Full-disclosure] [SECURITY] [DSA 2840-1] srtp security update
  • From: Salvatore Bonaccorso
• [Full-disclosure] Cisco Security Advisory: Undocumented Test Interface in Cisco Small Business Devices
  • From: Cisco Systems Product Security Incident Response Team
• [Full-disclosure] Dates for the opening of registration for Rooted CON 2014
  • From: Omar Benbouazza
• [Full-disclosure] Updated [CVE-2013-6398] CloudStack Virtual Router stop/start modifies firewall rules allowing additional access
  • From: David Nalley
• [Full-disclosure] Updated [CVE-2014-0031] CloudStack ListNetworkACL API discloses ACLs for other users
  • From: David Nalley
• [Full-disclosure] [SECURITY] [DSA 2841-1] movabletype-opensource security update
  • From: Moritz Muehlenhoff
• [Full-disclosure] Yahoo Bug Bounty Program Vulnerability #2 Open Redirect
  • From: Stefan Schurtz
• [Full-disclosure] Sex links fail
  • From: Marshall Whittaker
• [Full-disclosure] BlackArch Linux
  • From: BlackArch Linux
• Re: [Full-disclosure] Yahoo Bug Bounty Program Vulnerability #2 Open Redirect
  • From: Kenneth F. Belva
• Re: [Full-disclosure] ObamaCare California Admin Interface Exposed to Entire Internet + more!
  • From: Pedro Luis Karrasquillo
• Re: [Full-disclosure] Yahoo Bug Bounty Program Vulnerability #2 Open Redirect
  • From: Stefan Schurtz
• [Full-disclosure] [ MDVSA-2014:001 ] kernel
  • From: security
• [Full-disclosure] List Charter
  • From: John Cartwright
• [Full-disclosure] [SECURITY] [DSA 2842-1] libspring-java security update
  • From: Moritz Muehlenhoff
• [Full-disclosure] Microsoft Twitter accounts, blog hijacked by SEA
  • From: Georgi Guninski
• [Full-disclosure] [SECURITY] [DSA 2843-1] graphviz security update
  • From: Salvatore Bonaccorso
• Re: [Full-disclosure] Microsoft Twitter accounts, blog hijacked by SEA
  • From: Mohammad Hosein
• [Full-disclosure] Rooted CON 2014 attendee registration is open!
  • From: Omar Benbouazza
• [Full-disclosure] [CVE-2014-0647] Insecure Data Storage of User Data Elements in Starbucks v2.6.1 iOS mobile application
  • From: Daniel Wood
• [Full-disclosure] Ubuntu, duckduckgo, and additional info
  • From: silence_is_best
• Re: [Full-disclosure] Ubuntu, duckduckgo, and additional info
  • From: Seth Arnold
• Re: [Full-disclosure] Ubuntu, duckduckgo, and additional info
  • From: Daniel Wood
• [Full-disclosure] CVE-2013-6429 Fix for XML External Entity (XXE) injection (CVE-2013-4152) in Spring Framework was incomplete
  • From: Pivotal Security Team
• Re: [Full-disclosure] Ubuntu, duckduckgo, and additional info
  • From: Gabriel Weinberg
• Re: [Full-disclosure] Ubuntu, duckduckgo, and additional info
  • From: silence_is_best
• [Full-disclosure] Collabtive Sql Injection
  • From: YOGESH PHADTARE
• [Full-disclosure] [SECURITY] [DSA 2844-1] djvulibre security update
  • From: Raphael Geissert
• [Full-disclosure] CVE-2013-6430 Possible XSS when using Spring MVC
  • From: Pivotal Security Team
• [Full-disclosure] Cisco Security Advisory: Multiple Vulnerabilities in Cisco Secure Access Control System
  • From: Cisco Systems Product Security Incident Response Team
• Re: [Full-disclosure] Ubuntu, duckduckgo, and additional info
  • From: silence_is_best
• [Full-disclosure] [Security-news] SA-CORE-2014-001 - Drupal core - Multiple vulnerabilities
  • From: security-news
• [Full-disclosure] [Security-news] SA-CONTRIB-2014-002 - Anonymous Posting - Cross Site Scripting (XSS)
  • From: security-news
• Re: [Full-disclosure] Ubuntu, duckduckgo, and additional info
  • From: Seth Arnold
• Re: [Full-disclosure] Ubuntu, duckduckgo, and additional info
  • From: Jordon Bedwell
• [Full-disclosure] EE BrightBox router hacked - bares all if you ask nicely
  • From: Scott Helme
• Re: [Full-disclosure] EE BrightBox router hacked - bares all if you ask nicely
  • From: Dan Ballance
• Re: [Full-disclosure] EE BrightBox router hacked - bares all if you ask nicely
  • From: Źmicier Januszkiewicz
• Re: [Full-disclosure] EE BrightBox router hacked - bares all if you ask nicely
  • From: gold flake
• Re: [Full-disclosure] EE BrightBox router hacked - bares all if you ask nicely
  • From: Źmicier Januszkiewicz
• Re: [Full-disclosure] EE BrightBox router hacked - bares all if you ask nicely
  • From: Dan Ballance
• Re: [Full-disclosure] EE BrightBox router hacked - bares all if you ask nicely
  • From: Źmicier Januszkiewicz
• Re: [Full-disclosure] EE BrightBox router hacked - bares all if you ask nicely
  • From: Dan Ballance
• [Full-disclosure] [HITB-Announce] #HITB2014AMS Call for Papers - FINAL CALL
  • From: Hafez Kamal
• [Full-disclosure] : EE BrightBox router hacked - bares all if you ask nicely
  • From: Mikhail A. Utin
• [Full-disclosure] [ MDVSA-2014:002 ] bind
  • From: security
• [Full-disclosure] [ MDVSA-2014:003 ] nrpe
  • From: security
• [Full-disclosure] [ MDVSA-2014:004 ] nagios
  • From: security
• [Full-disclosure] [ MDVSA-2014:005 ] ejabberd
  • From: security
• [Full-disclosure] [ MDVSA-2014:006 ] libxslt
  • From: security
• Re: [Full-disclosure] EE BrightBox router hacked - bares all if you ask nicely
  • From: Valdis . Kletnieks
• Re: [Full-disclosure] EE BrightBox router hacked - bares all if you ask nicely
  • From: Dan Ballance
• Re: [Full-disclosure] EE BrightBox router hacked - bares all if you ask nicely
  • From: Valdis . Kletnieks
• Re: [Full-disclosure] EE BrightBox router hacked - bares all if you ask nicely
  • From: Dan Ballance
• Re: [Full-disclosure] EE BrightBox router hacked - bares all if you ask nicely
  • From: Jeffrey Walton
• Re: [Full-disclosure] EE BrightBox router hacked - bares all if you ask nicely
  • From: Dan Ballance
• Re: [Full-disclosure] EE BrightBox router hacked - bares all if you ask nicely
  • From: Jeffrey Walton
• Re: [Full-disclosure] EE BrightBox router hacked - bares all if you ask nicely
  • From: Tracy Reed
• [Full-disclosure] [CVE-2013-6838] Enghouse Interactive IVR Pro (VIP2000) remote root authentication bypass Vulnerability
  • From: Fredrik Söderblom
• Re: [Full-disclosure] EE BrightBox router hacked - bares all if you ask nicely
  • From: Daniël W. Crompton
• [Full-disclosure] NEW : VMSA-2014-0001 - VMware Workstation, Player, Fusion, ESXi, ESX and vCloud Director address several security issues
  • From: "VMware Security Response Center"
• [Full-disclosure] Romanian hacker unknown string
  • From: Asheesh Tripathi
• Re: [Full-disclosure] Romanian hacker unknown string
  • From: James Condron
• Re: [Full-disclosure] Romanian hacker unknown string
  • From: Asheesh Tripathi
• Re: [Full-disclosure] Romanian hacker unknown string
  • From: James Condron
• Re: [Full-disclosure] Romanian hacker unknown string
  • From: Asheesh Tripathi
• Re: [Full-disclosure] Romanian hacker unknown string
  • From: Henri Salo
• Re: [Full-disclosure] Romanian hacker unknown string
  • From: James Condron
• Re: [Full-disclosure] Romanian hacker unknown string
  • From: Asheesh Tripathi
• Re: [Full-disclosure] Romanian hacker unknown string
  • From: James Condron
• [Full-disclosure] [ MDVSA-2014:007 ] openssl
  • From: security
• [Full-disclosure] [ MDVSA-2014:008 ] openjpeg
  • From: security
• [Full-disclosure] [ MDVSA-2014:009 ] librsvg
  • From: security
• [Full-disclosure] [ MDVSA-2014:010 ] memcached
  • From: security
• [Full-disclosure] [SECURITY] [DSA 2845-1] mysql-5.1 security update
  • From: Moritz Muehlenhoff
• [Full-disclosure] [SECURITY] [DSA 2831-2] puppet regression update
  • From: Salvatore Bonaccorso
• [Full-disclosure] SI6 Networks' IPv6 Toolkit v1.5.2 released!
  • From: Fernando Gont
• [Full-disclosure] [SECURITY] [DSA 2846-1] libvirt security update
  • From: Moritz Muehlenhoff
• Re: [Full-disclosure] [CVE-2014-0647] Insecure Data Storage of User Data Elements in Starbucks v2.6.1 iOS mobile application
  • From: Daniel Wood
• [Full-disclosure] Ubuntu, duckduckgo, and additional info
  • From: Patrick O'Keeffe
• [Full-disclosure] Multiple vulnerabilities at president.gov.ua
  • From: MustLive
• [Full-disclosure] Hackito Ergo Sum 2014 CFP
  • From: Alexandre De Oliveira
• [Full-disclosure] [ MDVSA-2014:011 ] java-1.7.0-openjdk
  • From: security
• [Full-disclosure] [ MDVSA-2014:012 ] nss
  • From: security
• [Full-disclosure] [SECURITY] [DSA 2847-1] drupal7 security update
  • From: Salvatore Bonaccorso
• ***UNCHECKED*** [Full-disclosure] 0day - MuPDF Stack-based Buffer Overflow in xps_parse_color()
  • From: Jean-Jamil Khalifé
• [Full-disclosure] TWSL2014-001: Multiple Vulnerabilities in Franklin Fueling's TS-550 evo
  • From: Trustwave Advisories
• [Full-disclosure] TWSL2014-002: Buffer Overflow Vulnerability in DaumGame ActiveX
  • From: Trustwave Advisories
• [Full-disclosure] [ MDVSA-2014:013 ] libxfont
  • From: security
• [Full-disclosure] [ MDVSA-2014:014 ] php
  • From: security
• [Full-disclosure] DDoS against Gamerfirst
  • From: dave
• [Full-disclosure] 22 January 2014, SEA : M$ = 3 : 0
  • From: Georgi Guninski
• [Full-disclosure] [CVE-2013-6040] MW6 Technologies ActiveX buffer overflows and remote code execution
  • From: Pedro Ribeiro
• [Full-disclosure] Chrome (and Safari) antiXSS filter bypass
  • From: vulns@xxxxxxxxxxx
• [Full-disclosure] Capstone 2.0 is released!
  • From: Nguyen Anh Quynh
• [Full-disclosure] SEC Consult SA-20140122-0 :: Critical vulnerabilities in T-Mobile HOME NET Router LTE (Huawei B593u-12)
  • From: SEC Consult Vulnerability Lab
• [Full-disclosure] [ MDVSA-2014:015 ] cups
  • From: security
• [Full-disclosure] [ MDVSA-2014:016 ] spice
  • From: security
• [Full-disclosure] [ MDVSA-2014:017 ] net-snmp
  • From: security
• [Full-disclosure] [ MDVSA-2014:018 ] net-snmp
  • From: security
• [Full-disclosure] [ MDVSA-2014:019 ] elinks
  • From: security
• [Full-disclosure] Cisco Security Advisory: Cisco TelePresence ISDN Gateway D-Channel Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [Full-disclosure] Cisco Security Advisory: Cisco TelePresence Video Communication Server SIP Denial of Service Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [Full-disclosure] Cisco Security Advisory: Cisco TelePresence System Software Command Execution Vulnerability
  • From: Cisco Systems Product Security Incident Response Team
• [Full-disclosure] [ MDVSA-2014:020 ] x11-server
  • From: security
• [Full-disclosure] [Security-news] SA-CONTRIB-2014-003 - Doubleclick for Publishers DFP - Cross Site Scripting (XSS)
  • From: security-news
• [Full-disclosure] [Security-news] SA-CONTRIB-2014-004 - Secure Cookie Data - Faulty Hashing
  • From: security-news
• [Full-disclosure] [Security-news] SA-CONTRIB-2014-005 - Leaflet - Access bypass
  • From: security-news
• [Full-disclosure] [Security-news] SA-CONTRIB-2014-006 - Language Switcher Dropdown - Open Redirect
  • From: security-news
• [Full-disclosure] [SECURITY] [DSA 2848-1] mysql-5.5 security update
  • From: Salvatore Bonaccorso
• [Full-disclosure] How a teenager helpfully reported a government security flaw – and could be charged in return
  • From: Ivan .Heca
• [Full-disclosure] [CTF] nullcon HackIM 2014 will start at 24-01-2014, when the clock will strike at 11:59 (+5:30 GMT)
  • From: nullcon
• [Full-disclosure] Fwd: Trustlook discovered Microsoft’s first high risk Android Vulnerability
  • From: Raymond Zhang
• [Full-disclosure] Contact PSIRT Fortinet
  • From: William Costa
• [Full-disclosure] Remote Command Injection Vulnerability in SkyBlueCanvas CMS
  • From: Scott Parish
• [Full-disclosure] [SECURITY] [DSA 2826-2] denyhosts regression update
  • From: Yves-Alexis Perez
• [Full-disclosure] CALL FOR PAPERS - NUIT DU HACK - 28/29 JUNE 2014
  • From: freeman
• [Full-disclosure] [CVE-2013-6030]Emerson Network Power Avocent MergePoint Unity 2016 KVM switches contain a directory traversal vulnerability
  • From: shady.liu
• [Full-disclosure] Healthcare.gov noise
  • From: truthinallthings
• Re: [Full-disclosure] Chrome (and Safari) antiXSS filter bypass
  • From: Pedro Worcel
• [Full-disclosure] [CVE-2013-6235] - Multiple Reflected XSS vulnerabilities in JAMon v2.7
  • From: Christian Catalano
• [Full-disclosure] ADV: IBM QRadar SIEM
  • From: Thomas Pollet
• [Full-disclosure] DAVOSET v.1.1.6
  • From: MustLive
• [Full-disclosure] [ MDVSA-2014:021 ] perl-Proc-Daemon
  • From: security
• [Full-disclosure] [ MDVSA-2014:022 ] augeas
  • From: security
• [Full-disclosure] [ MDVSA-2014:023 ] hplip
  • From: security
• [Full-disclosure] [ MDVSA-2014:024 ] graphviz
  • From: security
• [Full-disclosure] Dictatorial laws in Ukraine
  • From: MustLive
• [Full-disclosure] ssl.bing.com - Cross-site Scripting vulnerability
  • From: Stefan Schurtz
• Re: [Full-disclosure] RFP: FOIA with privacy waivers[0] for oversight
  • From: coderman
• [Full-disclosure] Making waves on Twitter!
  • From: David Kennedy
• [Full-disclosure] Satellite Security - A story NASA would love to see.
  • From: Nicholas Lemonias.
• Re: [Full-disclosure] Making waves on Twitter!
  • From: Brandon Perry
• Re: [Full-disclosure] Making waves on Twitter!
  • From: David Kennedy
• Re: [Full-disclosure] Making waves on Twitter!
  • From: Brandon Perry
• Re: [Full-disclosure] Making waves on Twitter!
  • From: David Kennedy
• [Full-disclosure] DC4420 - London DEFCON - January meet - Tuesday 28th January 2014
  • From: Major Malfunction
• [Full-disclosure] Mozilla Bug Bounty #5 - WireTap Remote Web Vulnerability
  • From: Vulnerability Lab
• [Full-disclosure] RVAsec 2014 CFP
  • From: Sullo
• [Full-disclosure] Sentinel beta version released
  • From: Nicolas A. Economou
• [Full-disclosure] [CVE-2014-1673] Check Point Session Authentication Agent vulnerability
  • From: Jakub Jozwiak
• [Full-disclosure] Oracle Reports Exploit - Remote Shell/Dump Passwords
  • From: NI @root
• [Full-disclosure] pfSense 2.1 Privilege Escalation from less privileged users (LFI/RCE)
  • From: Pichaya Morimoto
• [Full-disclosure] SimplyShare v1.4 iOS - Multiple Web Vulnerabilities
  • From: Vulnerability Lab
• [Full-disclosure] [Security-news] SA-CONTRIB-2014-007 - Services - Multiple access bypass vulnerabilities
  • From: security-news
• [Full-disclosure] [Security-news] SA-CONTRIB-2014-008 - Tribune - Cross Site Scripting (XSS)
  • From: security-news
• [Full-disclosure] [SECURITY] [DSA 2849-1] curl security update
  • From: Florian Weimer
• [Full-disclosure] [SE-2013-01] Security vulnerabilities in Oracle Java Cloud Service
  • From: Security Explorations