Full Disclosure: by thread

• RSS Feed
• About List
• All Lists

Previous period

Next period

325 messages starting Apr 01 14 and ending Apr 30 14
Date index | Thread index | Author index

• [SE-2013-01] Security vulnerabilities in Oracle Java Cloud Service (details) Security Explorations (Apr 01)
  • Re: [SE-2013-01] Security vulnerabilities in Oracle Java Cloud Service (details) Security Explorations (Apr 01)
• CBS Sports/CBS Interactive Security Contacts? sec . research (Apr 01)
  • Re: CBS Sports/CBS Interactive Security Contacts? Jeffrey Walton (Apr 01)
    • Announcing sysdig: a new open source system exploration tool Loris Degioanni (Apr 03)
  • <Possible follow-ups>
  • Re: CBS Sports/CBS Interactive Security Contacts? sec . research (Apr 03)
• Access anyone's Facebook "profile picture" in full resolution regardless of the ACL restriction Bipin Gautam (Apr 01)
  • Re: Access anyone's Facebook "profile picture" in full resolution regardless of the ACL restriction Mario Vilas (Apr 01)
  • Re: Access anyone's Facebook "profile picture" in full resolution regardless of the ACL restriction Źmicier Januszkiewicz (Apr 02)
    • Re: Access anyone's Facebook "profile picture" in full resolution regardless of the ACL restriction Joerg Mertin (Apr 02)
  • Re: Access anyone's Facebook "profile picture" in full resolution regardless of the ACL restriction illwill (Apr 03)
    • Re: Access anyone's Facebook "profile picture" in full resolution regardless of the ACL restriction William Reyor (Apr 03)
  • <Possible follow-ups>
  • Re: Access anyone's Facebook "profile picture" in full resolution regardless of the ACL restriction Philip Whitehouse (Apr 01)
    • Re: Access anyone's Facebook "profile picture" in full resolution regardless of the ACL restriction Bipin Gautam (Apr 01)
  • Re: Access anyone's Facebook "profile picture" in full resolution regardless of the ACL restriction Philip Whitehouse (Apr 01)
    • Re: Access anyone's Facebook "profile picture" in full resolution regardless of the ACL restriction Willie Gillespie (Apr 01)
      • Re: Access anyone's Facebook "profile picture" in full resolution regardless of the ACL restriction Andreas Lindh (Apr 01)
    • Re: Access anyone's Facebook "profile picture" in full resolution regardless of the ACL restriction Eric Rand (Apr 01)
      • Re: Access anyone's Facebook "profile picture" in full resolution regardless of the ACL restriction Ron (Apr 01)
      • Re: Access anyone's Facebook "profile picture" in full resolution regardless of the ACL restriction coderaptor (Apr 01)
    • Re: Access anyone's Facebook "profile picture" in full resolution regardless of the ACL restriction Sven 'Darkman' Michels (Apr 01)
• Sorry I can't do this anymore. List closed! Fyodor (Apr 01)
• [Quantum Leap Advisory] #QLA140402 - A10 Networks remote Buffer Overflow Francesco Perna (Apr 02)
• iShare Your Moving Library 1.0 iOS - Multiple Vulnerabilities Vulnerability Lab (Apr 02)
• SEC Consult SA-20140402-0 :: Multiple vulnerabilities in Rhythm File Manager SEC Consult Vulnerability Lab (Apr 02)
• [MATTA-2013-004] CVE-2014-1409; MobileIron authentication bypass vulnerability Florent Daigniere (Apr 02)
• Unusual XSS in Kyocera FS5250 printer control panel. Jeff Sergeant (Apr 02)
• Security flaw in Full Disclosure mailing list Nick Lindridge (Apr 02)
  • Re: Security flaw in Full Disclosure mailing list Ron (Apr 02)
  • Re: Security flaw in Full Disclosure mailing list Fyodor (Apr 02)
  • Re: Security flaw in Full Disclosure mailing list Reindl Harald (Apr 02)
  • Re: Security flaw in Full Disclosure mailing list Eric G (Apr 02)
  • Re: Security flaw in Full Disclosure mailing list Jimmy Crossley (Apr 02)
    • Re: Security flaw in Full Disclosure mailing list Fyodor (Apr 02)
      • Re: Security flaw in Full Disclosure mailing list Jim Popovitch (Apr 02)
      • Re: Security flaw in Full Disclosure mailing list Ron (Apr 02)
      • Re: Security flaw in Full Disclosure mailing list Jim Popovitch (Apr 02)
      • Re: Security flaw in Full Disclosure mailing list Jeffrey Walton (Apr 02)
      • Re: Security flaw in Full Disclosure mailing list George Chatzisofroniou (Apr 03)
      • Re: Security flaw in Full Disclosure mailing list Michal Zalewski (Apr 02)
      • Re: Security flaw in Full Disclosure mailing list Brandon Perry (Apr 02)
      • Message not available
      • Re: Security flaw in Full Disclosure mailing list Brandon Perry (Apr 02)
• Re: [Full-disclosure] Bank of the West security contact? raccoon (Apr 02)
  • Re: [Full-disclosure] Bank of the West security contact? Stefan Weimar (Apr 02)
    • Re: [Full-disclosure] Bank of the West security contact? Sholes, Joshua (Apr 02)
      • Re: [Full-disclosure] Bank of the West security contact? Eric Rand (Apr 02)
      • Re: [Full-disclosure] Bank of the West security contact? Jeffrey Walton (Apr 03)
      • Re: [Full-disclosure] Bank of the West security contact? raccoon (Apr 02)
      • Re: [Full-disclosure] Bank of the West security contact? Stefan Weimar (Apr 02)
• 0A29-14-1 : NCCGroup EasyDA privilege escalation & credential disclosure vulnerability [0day] 0a29 40 (Apr 02)
• Capstone 2.1.2 released! Nguyen Anh Quynh (Apr 02)
• Drupal Custom Search module XSS Justin Klein Keane (Apr 02)
• Re: Fulldisclosure Digest, Vol 2, Issue 3 Greg Bromage (Apr 02)
• Private Photo+Video v1.1 Pro iOS - Persistent Vulnerability Vulnerability Lab (Apr 03)
• XSS Reflected vulnerabilities in OS of FortiADC v3.2 (CVE-2014-0331) William Costa (Apr 03)
• Security Industry Scams and Lies Pete Herzog (Apr 04)
• Uncontrolled Resource Consumption with Highly-Compressed XMPP Stanzas Giancarlo Pellegrino (Apr 04)
• Phrack Security Advisory 2014-001 - Paper leak on release timeout Phrack Staff (Apr 04)
• Remote Command Execution within the ASUS RT-AC68U Managing Web Interface Palula Brasil (Apr 04)
  • Re: Remote Command Execution within the ASUS RT-AC68U Managing Web Interface Craig Young (Apr 04)
    • Re: Remote Command Execution within the ASUS RT-AC68U Managing Web Interface coderman (Apr 06)
• Reflected Cross-Site Scripting within the ASUS RT-AC68U Managing Web Interface Palula Brasil (Apr 04)
  • Re: Reflected Cross-Site Scripting within the ASUS RT-AC68U Managing Web Interface coderman (Apr 06)
    • Re: Reflected Cross-Site Scripting within the ASUS RT-AC68U Managing Web Interface Palula Brasil (Apr 06)
• Legality of Open Source Tools Bryan Bickford (Apr 04)
  • Re: Legality of Open Source Tools Brandon Perry (Apr 04)
  • Re: Legality of Open Source Tools Andres Riancho (Apr 04)
    • Message not available
      • Re: Legality of Open Source Tools Andres Riancho (Apr 04)
      • Re: Legality of Open Source Tools Ryan Dewhurst (Apr 04)
      • Re: Legality of Open Source Tools Volker Tanger (Apr 04)
      • Re: Legality of Open Source Tools Toni Korpela (Apr 05)
      • Re: Legality of Open Source Tools Toni Korpela (Apr 05)
      • Re: Legality of Open Source Tools Henri Salo (Apr 06)
      • Re: Legality of Open Source Tools Jeffrey Walton (Apr 06)
      • Re: Legality of Open Source Tools Toni Korpela (Apr 06)
      • Re: Legality of Open Source Tools Toni Korpela (Apr 06)
      • Re: Legality of Open Source Tools Daniel Wood (Apr 07)
      • Re: Legality of Open Source Tools Not EcksKaySeeDee (Apr 04)
      • Re: Legality of Open Source Tools Brunner, Mark (Apr 04)
      • Message not available
      • Re: Legality of Open Source Tools John Young (Apr 05)
      • Re: Legality of Open Source Tools coderman (Apr 06)
    • Re: Legality of Open Source Tools Sullo (Apr 04)
  • Re: Legality of Open Source Tools coderman (Apr 06)
• Call for Papers: Privacy-Preserving IR (PIR) Workshop At SIGIR 2014 lei cen (Apr 04)
• Credit Cards for 1.2 Million Drivers Vulnerable at TxTag.org David Longenecker (Apr 04)
• Re: AUTO: Bryant Smith is out of the office (returning 04/08/2014) coderman (Apr 06)
• Re: [Full-disclosure] SCADA StrangeLove 30C3 releases: all in one coderman (Apr 06)
• MacOSX 10.9.2/XNU HFS Multiple Vulnerabilities [CXSEC] (Apr 06)
• Advisory: Security Industry Scams and Lies Nico Le Moin (Apr 07)
• NoSuchCon 2014 CFP is now open NoSuchCon (Apr 07)
• heartbleed OpenSSL bug CVE-2014-0160 Kirils Solovjovs (Apr 07)
  • Re: heartbleed OpenSSL bug CVE-2014-0160 Andrew Case (Apr 07)
  • Re: heartbleed OpenSSL bug CVE-2014-0160 David H (Apr 08)
    • Re: heartbleed OpenSSL bug CVE-2014-0160 Joerg Mertin (Apr 08)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Jann Horn (Apr 08)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Francesc Guitart (Apr 08)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Javier Reoyo (Apr 10)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Carlos P (Apr 10)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 David H (Apr 08)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Matthew Musingo (Apr 08)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Craig Holmes (Apr 09)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Michal Zalewski (Apr 09)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Menso Heus (Apr 09)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Txalin (Apr 10)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Pål Nilsen (Apr 10)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Reindl Harald (Apr 10)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Pål Nilsen (Apr 10)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Ricardo Iramar dos Santos (Apr 08)
  • Re: heartbleed OpenSSL bug CVE-2014-0160 Fraser Scott (Apr 08)
    • Re: heartbleed OpenSSL bug CVE-2014-0160 Nik Mitev (Apr 08)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Chris Schmidt (Apr 08)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Jann Horn (Apr 08)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Tim Schütt (Apr 08)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Rob van der Putten (Apr 09)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Walt Williams (Apr 09)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Brandon Vincent (Student) (Apr 10)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Carlos P (Apr 11)
      • Message not available
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Chris Schmidt (Apr 08)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Nik Mitev (Apr 08)
    • Re: heartbleed OpenSSL bug CVE-2014-0160 Ronny Lauenstein (Apr 09)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Ken Connelly (Apr 10)
  • Re: heartbleed OpenSSL bug CVE-2014-0160 Justin Bull (Apr 08)
  • Re: heartbleed OpenSSL bug CVE-2014-0160 Fabien Bourdaire (Apr 09)
    • Re: heartbleed OpenSSL bug CVE-2014-0160 Reindl Harald (Apr 09)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Juergen Christoffel (Apr 09)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Reindl Harald (Apr 10)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Reindl Harald (Apr 11)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Seth Arnold (Apr 11)
    • Re: heartbleed OpenSSL bug CVE-2014-0160 Daniel Franke (Apr 09)
  • Re: heartbleed OpenSSL bug CVE-2014-0160 Jeremy Voorhis (Apr 09)
    • Re: heartbleed OpenSSL bug CVE-2014-0160 Brandon Perry (Apr 09)
    • Re: heartbleed OpenSSL bug CVE-2014-0160 Aidan Thornton (Apr 09)
  • Re: heartbleed OpenSSL bug CVE-2014-0160 Peter Malone (Apr 09)
    • Re: heartbleed OpenSSL bug CVE-2014-0160 Coderaptor (Apr 09)
  • Re: heartbleed OpenSSL bug CVE-2014-0160 Peter Malone (Apr 09)
    • Re: heartbleed OpenSSL bug CVE-2014-0160 Jann Horn (Apr 10)
  • Re: heartbleed OpenSSL bug CVE-2014-0160 Ingo Schmitt (Apr 10)
    • Re: heartbleed OpenSSL bug CVE-2014-0160 Brandon Perry (Apr 10)
    • Re: heartbleed OpenSSL bug CVE-2014-0160 David Tomaschik (Apr 10)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Ivan .Heca (Apr 10)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Michal Zalewski (Apr 10)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Paul Vixie (Apr 10)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Paul Vixie (Apr 10)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Ivan .Heca (Apr 11)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Brandon Perry (Apr 11)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Marco Davids (priv) (Apr 11)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Juergen Christoffel (Apr 11)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Paul Vixie (Apr 11)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Michal Zalewski (Apr 11)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Ferenc Kovacs (Apr 11)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Manuel Tiago Pereira (Apr 11)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Schmidt, Michael (Apr 11)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Afonso Araújo Neto (Apr 11)
      • Message not available
      • Re: heartbleed OpenSSL bug CVE-2014-0160 Ricardo Iramar dos Santos (Apr 11)
      • Re: heartbleed OpenSSL bug CVE-2014-0160 HaCKsPy (Apr 11)
      • Andrew "Weev" Auernheimer's Conviction Thrown Out g () 1337 io (Apr 11)
      • Re: Andrew "Weev" Auernheimer's Conviction Thrown Out Jeffrey Paul (Apr 11)
      • Re: Andrew "Weev" Auernheimer's Conviction Thrown Out Groundworks Technologies Advisories (Apr 11)
  • Re: heartbleed OpenSSL bug CVE-2014-0160 Joerg Mertin (Apr 11)
    • Re: heartbleed OpenSSL bug CVE-2014-0160 Michal Zalewski (Apr 11)
  • <Possible follow-ups>
  • Re: heartbleed OpenSSL bug CVE-2014-0160 * (Apr 10)
• Bluetooth Text Chat v1.0 iOS - Code Execution Vulnerability Vulnerability Lab (Apr 08)
• iis cgi 0day yuange (Apr 09)
  • Message not available
    • Re: iis cgi 0day yuange (Apr 09)
  • <Possible follow-ups>
  • Re: iis cgi 0day YiFei Yang (Apr 10)
    • Message not available
      • Re: iis cgi 0day YiFei Yang (Apr 10)
    • Re: iis cgi 0day Davide Davini (Apr 16)
      • Re: iis cgi 0day Reindl Harald (Apr 16)
      • Re: iis cgi 0day Homer Parker (Apr 18)
      • Re: iis cgi 0day YiFei Yang (Apr 18)
• When two-factor authentication is not enough Alfie John (Apr 10)
  • Re: When two-factor authentication is not enough Jeff Sergeant (Apr 10)
• AppFish Offline Coder v2.2 iOS - Persistent Software Vulnerability Vulnerability Lab (Apr 10)
• BlueMe Bluetooth v5.0 iOS - Code Execution Vulnerability Vulnerability Lab (Apr 10)
• iVault Private P&V 1.1 iOS - Path Traversal Vulnerability Vulnerability Lab (Apr 10)
• New tool: sn00p - Automation framework for security tests. Levon Kayan (Apr 10)
• Malware + Analyse = Malwarelyse mschratt (Apr 10)
• heartbleed.c Hacker Fantastic (Apr 10)
  • Re: heartbleed.c Hacker Fantastic (Apr 10)
    • Message not available
      • Re: heartbleed.c Hacker Fantastic (Apr 10)
• Heartbleed exploited since 2013 des-apare . cido_77 (Apr 10)
• NEW VMSA-2014-0003 VMware vSphere Client updates address security vulnerabilities "VMware Security Response Center" (Apr 10)
• FW: dve bypass dep+aslr+emet+cfi yuange (Apr 10)
  • Re: FW: dve bypass dep+aslr+emet+cfi YiFei Yang (Apr 11)
• SEC Consult SA-20140411-0 :: Multiple vulnerabilities in Plex Media Server SEC Consult Vulnerability Lab (Apr 11)
• Woltlab Burning Board 3.9.1 - Persistent Web Vulnerability & Editor Reverse Encoding Issue Vulnerability Lab (Apr 11)
• CVE-2014-2384 - Invalid Pointer Dereference in VMware Workstation and Player Portcullis Advisories (Apr 11)
  • CVE-2013-6216 - SetUID/SetGID Programs Allow Privilege Escalation Via Insecure RPATH in multiple HP products on Linux Portcullis Advisories (Apr 14)
    • CVE-2014-2591 - SetUID/SetGID Programs Allow Privilege Escalation Via Insecure RPATH in BMC Patrol for AIX Portcullis Advisories (Apr 14)
      • CVE-2014-2597 - Denial of Service in PCNetSoftware RAC Server Portcullis Advisories (Apr 16)
• The state of infection in Uanet 2013 MustLive (Apr 11)
• AIMSICD: Developers for Android-App WANTED! SecUpwN (Apr 11)
• CSRF and stored XSS in Quick Page/Post Redirect Plugin (WordPress plugin) dxw Security (Apr 11)
• CSRF/XSS vulnerability in Twitget 3.3.1 (WordPress plugin) dxw Security (Apr 11)
• MRI Rubies may contain statically linked, vulnerable OpenSSL glitch (Apr 11)
• Multiple CSRF and XSS vulnerabilities in D-Link DAP 1150 MustLive (Apr 11)
  • <Possible follow-ups>
  • Multiple CSRF and XSS vulnerabilities in D-Link DAP 1150 MustLive (Apr 28)
• DoS condition mt-daapd/Firefly Media Server 0.2.4.2 Eric Michaud (Apr 11)
  • <Possible follow-ups>
  • Re: DoS condition mt-daapd/Firefly Media Server 0.2.4.2 Brandon Vincent (Student) (Apr 11)
• Synergy's Crypto Sucks Taylor Hornby (Apr 12)
• Adobe Reader for Android exposes insecure Javascript interfaces Securify B.V. (Apr 13)
• Socialtext as a DoS tool? Brandon Perry (Apr 13)
• New multiple CSRF and XSS vulnerabilities in D-Link DAP 1150 MustLive (Apr 13)
• Two Possible Vulnerabilities in courier-imapd? Peter Malone (Apr 13)
  • Re: Two Possible Vulnerabilities in courier-imapd? Peter Malone (Apr 13)
  • <Possible follow-ups>
  • Re: Two Possible Vulnerabilities in courier-imapd? Dan Anderson (Apr 13)
• PDF Album v1.7 iOS - File Include Web Vulnerability Vulnerability Lab (Apr 14)
• New PHP-Attack Vector ? Thomas Lußnig (Apr 14)
  • <Possible follow-ups>
  • Re: New PHP-Attack Vector ? Michael Baker (Apr 14)
    • Re: New PHP-Attack Vector ? Martti Kühne (Apr 15)
• Unitrends enterprise backup remote unauthenticated root Brandon Perry (Apr 15)
• Xerox DocuShare authenticated SQL injection Brandon Perry (Apr 15)
• WebTitan 4.01 multiple vulnerabilities Brandon Perry (Apr 15)
• HackMiami 2014 Hackers Conference in Miami Beach, FL - May 9-11, 2014 Alex HackMiami (Apr 15)
• Should openssl accept weak DSA/DH keys with g = +/- 1 ? Georgi Guninski (Apr 15)
  • Re: Should openssl accept weak DSA/DH keys with g = +/- 1 ? Hanno Böck (Apr 15)
    • Re: Should openssl accept weak DSA/DH keys with g = +/- 1 ? Georgi Guninski (Apr 16)
      • Re: Should openssl accept weak DSA/DH keys with g = +/- 1 ? Hanno Böck (Apr 16)
      • Re: Should openssl accept weak DSA/DH keys with g = +/- 1 ? Pavel Kankovsky (Apr 17)
      • Re: Should openssl accept weak DSA/DH keys with g = +/- 1 ? Jeffrey Walton (Apr 17)
• Auditing systems for vulnerable 3rd-party OpenSSL Gabriel Brezi (Apr 15)
  • Re: Auditing systems for vulnerable 3rd-party OpenSSL Dotzero (Apr 15)
    • Re: Auditing systems for vulnerable 3rd-party OpenSSL Mike Iglesias (Apr 15)
    • Re: Auditing systems for vulnerable 3rd-party OpenSSL James Lay (Apr 16)
• lxml (python lib) vulnerability Максим Кочкин (Apr 15)
  • Re: lxml (python lib) vulnerability Źmicier Januszkiewicz (Apr 30)
• Audit: don't only focus on heartbleed issue Shawn (Apr 16)
  • Re: Audit: don't only focus on heartbleed issue Ron Bowes (Apr 16)
    • Re: Audit: don't only focus on heartbleed issue Paul McMillan (Apr 16)
    • Re: Audit: don't only focus on heartbleed issue antisnatchor (Apr 16)
    • Re: Audit: don't only focus on heartbleed issue Reindl Harald (Apr 16)
      • Re: Audit: don't only focus on heartbleed issue Tim (Apr 16)
      • Re: Audit: don't only focus on heartbleed issue Reindl Harald (Apr 16)
      • Re: Audit: don't only focus on heartbleed issue Stephane Bortzmeyer (Apr 17)
  • Re: Audit: don't only focus on heartbleed issue Hanno Böck (Apr 16)
• [CORE-2014-0003] - SAP Router Password Timing Attack CORE Advisories Team (Apr 16)
• Reflected XSS Attacks vulnerabilities F-Secure Messaging Security Gateway V7.5.0.892 (CVE-2014-2844) William Costa (Apr 16)
• Suspect arrested who used Heartbleed to infiltrate the Canada Revenue Agency (Our IRS) Justin Bull (Apr 16)
  • Re: Suspect arrested who used Heartbleed to infiltrate the Canada Revenue Agency (Our IRS) Andrew Klaus (Apr 16)
    • Re: Suspect arrested who used Heartbleed to infiltrate the Canada Revenue Agency (Our IRS) Joe Pierini (Apr 16)
• ASUS RT-XXXX SOHO routers expose admin password, fixed in 3.0.0.4.374.5517 David Longenecker (Apr 16)
• Buggy insecure "security" software executes rogue binary during installation and uninstallation Stefan Kanthak (Apr 16)
• Ruby OpenSSL private key spoofing ~ CVE-2014-2734 with PoC Gregory Disney (Apr 16)
• ldd for OS X WAS:Auditing systems for vulnerable 3rd-party OpenSSL (Gabriel Brezi) Douglas Held (Apr 17)
  • Re: ldd for OS X WAS:Auditing systems for vulnerable 3rd-party OpenSSL (Gabriel Brezi) Tim Heckman (Apr 17)
• NRPE - Nagios Remote Plugin Executor <= 2.15 Remote Command Execution golunski (Apr 17)
  • Re: NRPE - Nagios Remote Plugin Executor <= 2.15 Remote Command Execution Jakob Rößler (Apr 17)
• Remote Command Injection in Ruby Gem sfpagent 0.4.14 Larry W. Cashdollar (Apr 18)
• CS and XSS vulnerabilities in CU3ER MustLive (Apr 18)
• CSRF, AoF and XSS vulnerabilities in D-Link DAP 1150 MustLive (Apr 18)
• no good signals in infosec coderman (Apr 18)
• phpManufaktur / kitForm Unauthenticated SQL Injection Vulnerability Chapp (Apr 20)
• Re: [ANN] Struts 2.3.16.1 GA release available - security fix Takeshi Terada (Apr 20)
• Vulnerabilities in plugins with CU3ER for WordPress, Joomla, SilverStripe and Plone MustLive (Apr 20)
• CS, XSS and FPD vulnerabilities in multiple plugins with CU3ER for WordPress MustLive (Apr 21)
• BlackArch Linux / New ISOs released Levon Kayan (Apr 21)
• RAT C2 Domains Kevin Breen (Apr 21)
• Parallels Plesk Panel 12.x & 11.x /etc/psa/private/secret_key leakage Tim Rots (Apr 22)
• (CVE-2014-1648) Symantec Messaging Gateway Management Console Cross Site Scripting Vulnerability William Costa (Apr 22)
• SEC Consult SA-20140423-0 :: Path Traversal/Remote Code Execution in WD Arkeia Network Backup Appliances SEC Consult Vulnerability Lab (Apr 23)
• CVE-2014-2383 - Arbitrary file read in dompdf Portcullis Advisories (Apr 23)
• CVE-2014-1217 - Unauthenticated access to sensitive information and functionality in Livetecs Timelive Portcullis Advisories (Apr 23)
• CVE-2014-2042 - Unrestricted file upload in Livetecs Timelive Portcullis Advisories (Apr 23)
• AirPhoto WebDisk v4.1.0 iOS - Code Execution Vulnerability Vulnerability Lab (Apr 23)
• Request for help exploiting seunshare Andrew Lutomirski (Apr 23)
• [ANN] Struts 2 up to 2.3.16.1: Zero-Day Exploit Mitigation (security | critical) Rene Gielen (Apr 24)
  • Re: [ANN] Struts 2 up to 2.3.16.1: Zero-Day Exploit Mitigation (security | critical) Tim (Apr 25)
    • Re: [ANN] Struts 2 up to 2.3.16.1: Zero-Day Exploit Mitigation (security | critical) Rene Gielen (Apr 25)
      • Re: [ANN] Struts 2 up to 2.3.16.1: Zero-Day Exploit Mitigation (security | critical) Tim (Apr 25)
      • Re: [ANN] Struts 2 up to 2.3.16.1: Zero-Day Exploit Mitigation (security | critical) Rene Gielen (Apr 26)
      • Re: [ANN] Struts 2 up to 2.3.16.1: Zero-Day Exploit Mitigation (security | critical) Rene Gielen (Apr 28)
      • Re: [ANN] Struts 2 up to 2.3.16.1: Zero-Day Exploit Mitigation (security | critical) Alexander Georgiev (Apr 26)
      • Re: [ANN] Struts 2 up to 2.3.16.1: Zero-Day Exploit Mitigation (security | critical) Rene Gielen (Apr 27)
    • Re: [ANN] Struts 2 up to 2.3.16.1: Zero-Day Exploit Mitigation (security | critical) Tim (Apr 25)
      • Re: [ANN] Struts 2 up to 2.3.16.1: Zero-Day Exploit Mitigation (security | critical) Rene Gielen (Apr 25)
• Advisory: jruby-sandbox Breakout joernchen (Apr 24)
• Multiple Vulnerabilities in iMember360 (Wordpress plugin) Everett Griffiths (Apr 25)
• Depot WiFi v1.0.0 iOS - Multiple Web Vulnerabilities Vulnerability Lab (Apr 25)
• UI redress attack on live.com (affected all pages) Sandeep Kamble (Apr 25)
• Legitimacy of new Heartbleed exploit? Dillon Korman (Apr 25)
  • Re: Legitimacy of new Heartbleed exploit? Jann Horn (Apr 25)
    • Re: Legitimacy of new Heartbleed exploit? Michal Zalewski (Apr 25)
  • Re: Legitimacy of new Heartbleed exploit? H. Dong (Apr 25)
    • Re: Legitimacy of new Heartbleed exploit? david switzer (Apr 25)
      • Re: Legitimacy of new Heartbleed exploit? Ivan Kwiatkowski (Apr 28)
  • Re: Legitimacy of new Heartbleed exploit? Bennett Todd (Apr 25)
  • Re: Legitimacy of new Heartbleed exploit? Peter Malone (Apr 25)
• CS, XSS and FPD vulnerabilities in multiple themes with CU3ER for WordPress MustLive (Apr 25)
• Divx plugin suite heap-based buffer overflow Andres Gomez Ramirez (Apr 26)
• Symantec Endpoint Protection – Remote Buffer Overflow PoC (CVE-2013-1612) Jérôme Nokin (Apr 26)
• DAVOSET v.1.2 MustLive (Apr 26)
  • Re: DAVOSET v.1.2 laurent gaffie (Apr 26)
    • Re: DAVOSET v.1.2 Brandon Perry (Apr 27)
• Exploit: McAfee ePolicy 0wner (ePowner) – Release Jérôme Nokin (Apr 27)
  • Re: Exploit: McAfee ePolicy 0wner (ePowner) – Release Jérôme Nokin (Apr 27)
• Telegram authentication bypass jdiaz (Apr 28)
  • Re: Telegram authentication bypass Dominik Schürmann (Apr 28)
    • Re: Telegram authentication bypass jdiaz (Apr 29)
      • Re: Telegram authentication bypass Mario Vilas (Apr 29)
      • Re: Telegram authentication bypass Tony Arcieri (Apr 29)
  • Re: Telegram authentication bypass Hanno Böck (Apr 28)
• [Onapsis Security Advisory 2014-005] Information disclosure in SAP Software Lifeclycle Manager Onapsis Research Labs (Apr 28)
• What the hell am I reading? (was: Telegram authentication bypass) Munchausen (Apr 28)
• [Onapsis Security Advisory 2014-006] Missing authorization check in SAP Background Processing RFC Onapsis Research Labs (Apr 28)
• [Onapsis Security Advisory 2014-007] Missing authorization check in SAP Profile Maintenance Onapsis Research Labs (Apr 28)
• [Onapsis Security Advisory 2014-008] SAP NW Portal WD Information Disclosure Onapsis Research Labs (Apr 28)
• [Onapsis Security Advisory 2014-009] SAP BASIS Missing Authorization Check Onapsis Research Labs (Apr 28)
• [Onapsis Security Advisory 2014-010] SAP BusinessObjects InfoView Reflected Cross Site Scripting Onapsis Research Labs (Apr 28)
• Arbitrary code execution by admins in File Gallery 1.7.7 (WordPress plugin) dxw Security (Apr 29)
  • Re: Arbitrary code execution by admins in File Gallery 1.7.7 (WordPress plugin) Illwill (Apr 29)
    • Re: Arbitrary code execution by admins in File Gallery 1.7.7 (WordPress plugin) Dave Warren (Apr 29)
      • Re: Arbitrary code execution by admins in File Gallery 1.7.7 (WordPress plugin) Harry Metcalfe (Apr 30)
      • Message not available
      • Re: Arbitrary code execution by admins in File Gallery 1.7.7 (WordPress plugin) Harry Metcalfe (Apr 30)
• AOL confirms compromise Daniel Hadfield (Apr 29)
  • Re: AOL confirms compromise Jeffrey Walton (Apr 29)
    • Re: AOL confirms compromise Brandon Perry (Apr 29)
• DoS - Intuit QuickBase Scott Arciszewski (Apr 29)
• SEC Consult SA-20140430-0 :: SQL injection and persistent XSS in the Typo3 3rd party extension si_bibtex SEC Consult Vulnerability Lab (Apr 30)
• LSE Leading Security Experts GmbH - LSE-2014-04-10 - Sitepark IES - Unauthenticated Access LSE Leading Security Experts GmbH (Security Advisories) (Apr 30)
• Syhunt Advisory: CGILua session.lua Predictable Session ID Vulnerability Felipe Daragon (Apr 30)
• Beginners error: iTunes for Windows runs rogue program C:\Program.exe when opening associated files Stefan Kanthak (Apr 30)
  • Re: Beginners error: iTunes for Windows runs rogue program C:\Program.exe when opening associated files Alton Blom (Apr 30)
    • Re: Beginners error: iTunes for Windows runs rogue program C:\Program.exe when opening associated files Mike Cramer (Apr 30)
      • Re: Beginners error: iTunes for Windows runs rogue program C:\Program.exe when opening associated files Alton Blom (Apr 30)
  • Re: Beginners error: iTunes for Windows runs rogue program C:\Program.exe when opening associated files Gynvael Coldwind (Apr 30)

Previous period

Next period