gmane.comp.security.full-disclosure archive

Re: Google vulnerabilities with PoC

Thu, 13 Mar 2014 19:33:41 +0000

"Nicholas Lemonias." <[email protected]> • #91911

Re: Google vulnerabilities with PoC

Thu, 13 Mar 2014 21:02:46 +0200

Julius Kivimäki <[email protected]> • #91910

ActiVPN launches its security bug bounty

Thu, 13 Mar 2014 18:46:28 +0100

Ninja ActiVPN <[email protected]> • #91909

Re: Google vulnerabilities with PoC

Thu, 13 Mar 2014 14:41:37 -0300

"J. Tozo" <[email protected]> • #91908

Re: Google vulnerabilities with PoC

Thu, 13 Mar 2014 17:10:11 +0000

"Nicholas Lemonias." <[email protected]> • #91907

Re: Google vulnerabilities with PoC

Thu, 13 Mar 2014 18:20:15 +0200

Julius Kivimäki <[email protected]> • #91906

Re: Google vulnerabilities with PoC

Thu, 13 Mar 2014 16:16:35 +0000

"Nicholas Lemonias." <[email protected]> • #91905

Re: Google vulnerabilities with PoC

Thu, 13 Mar 2014 18:09:37 +0200

Julius Kivimäki <[email protected]> • #91904

Re: Google vulnerabilities with PoC

Thu, 13 Mar 2014 14:30:51 +0000

"Nicholas Lemonias." <[email protected]> • #91903

Re: Google vulnerabilities with PoC

Thu, 13 Mar 2014 14:22:11 +0000

"Nicholas Lemonias." <[email protected]> • #91902

Re: Google vulnerabilities with PoC

Thu, 13 Mar 2014 14:18:14 +0000

"Nicholas Lemonias." <[email protected]> • #91901

Re: Google vulnerabilities with PoC

Thu, 13 Mar 2014 13:52:00 +0000

Pedro Ribeiro <[email protected]> • #91900

Re: Google vulnerabilities with PoC

Thu, 13 Mar 2014 15:39:30 +0200

Julius Kivimäki <[email protected]> • #91899

Re: Google vulnerabilities with PoC

Thu, 13 Mar 2014 14:56:03 -0700

andfarm <[email protected]> • #91898

[CVE-2014-2087] Free Download Manager CDownloads_Deleted::UpdateDownload() Buffer Overflow Remote Code Execution

Thu, 13 Mar 2014 22:44:44 +0100

Julien Ahrens <[email protected]> • #91897

CarolinaCon-10 - May 2014 - FINAL ANNOUNCEMENT

Thu, 13 Mar 2014 13:55:35 -0700 (PDT)

Vic Vandal <[email protected]> • #91896

Re: Google vulnerabilities with PoC

Thu, 13 Mar 2014 13:16:00 -0500

Brandon Perry <[email protected]> • #91895

Re: Google vulnerabilities with PoC

Thu, 13 Mar 2014 18:43:39 +0100

Źmicier Januszkiewicz <[email protected]> • #91894

Re: Google vulnerabilities with PoC

Thu, 13 Mar 2014 10:41:25 -0700

Michal Zalewski <[email protected]> • #91893

Re: Google vulnerabilities with PoC

Thu, 13 Mar 2014 12:33:11 -0500

Brandon Perry <[email protected]> • #91892

Re: Google vulnerabilities with PoC

Thu, 13 Mar 2014 10:28:12 -0700

Michal Zalewski <[email protected]> • #91891

Re: Google vulnerabilities with PoC

Thu, 13 Mar 2014 17:15:03 +0000

antisnatchor <[email protected]> • #91890

[ MDVSA-2014:058 ] freeradius

Thu, 13 Mar 2014 16:43:00 +0100

[email protected] • #91889

[SECURITY] [DSA 2878-1] virtualbox security update

Thu, 13 Mar 2014 16:31:43 +0100

Moritz Muehlenhoff <[email protected]> • #91888

[ MDVSA-2014:057 ] mediawiki

Thu, 13 Mar 2014 15:12:00 +0100

[email protected] • #91887

Capstone disassembly framework 2.1.1 released!

Thu, 13 Mar 2014 21:56:30 +0800

Nguyen Anh Quynh <[email protected]> • #91886

[ MDVSA-2014:056 ] apache-commons-fileupload

Thu, 13 Mar 2014 13:03:00 +0100

[email protected] • #91885

Re: Medium severity flaw in BlackBerry QNX Neutrino RTOS

Thu, 13 Mar 2014 11:02:15 +0000

Tim Brown <[email protected]> • #91884

Google vulnerabilities with PoC

Thu, 13 Mar 2014 10:43:50 +0000

"Nicholas Lemonias." <[email protected]> • #91883

BSides Connecticut - Call for Speakers

Wed, 12 Mar 2014 20:29:12 -0400

William Reyor <[email protected]> • #91882

Re: OT What is happening with bitcoins?

Wed, 12 Mar 2014 17:23:57 -0700

"Mark M. Jaycox (EFF)" <[email protected]> • #91881

PowerArchiver: Uses insecure legacy PKZIP encryption when AES is selected (CVE-2014-2319)

Wed, 12 Mar 2014 21:20:57 +0100

Hanno Böck <[email protected]> • #91880

Byte CMS Cross Site Scripting Vulnerabilities

Wed, 12 Mar 2014 21:39:25 +0200

Project Zero Labs <[email protected]> • #91879

[SECURITY] [DSA 2877-1] lighttpd security update

Thu, 13 Mar 2014 00:28:29 -0400

Michael Gilbert <[email protected]> • #91878

[ MDVSA-2014:055 ] owncloud

Thu, 13 Mar 2014 11:42:00 +0100

[email protected] • #91877

[ MDVSA-2014:054 ] otrs

Thu, 13 Mar 2014 11:37:00 +0100

[email protected] • #91876

[ MDVSA-2014:053 ] libssh

Thu, 13 Mar 2014 11:34:00 +0100

[email protected] • #91875

[ MDVSA-2014:052 ] net-snmp

Thu, 13 Mar 2014 11:28:00 +0100

[email protected] • #91874

[ MDVSA-2014:051 ] file

Thu, 13 Mar 2014 11:21:00 +0100

[email protected] • #91873

QUANTUMSQUIRREL - attrition.org unmasked as NSA TAO OP

Thu, 13 Mar 2014 02:13:27 -0700

coderman <[email protected]> • #91872

[Security-news] SA-CONTRIB-2014-031 - Webform Template - Access Bypass

Wed, 12 Mar 2014 20:40:07 +0000 (UTC)

[email protected] • #91871

Multiplus XSS in Proxmox Mail Gateway 3.1 (CVE-2014-2325)

Wed, 12 Mar 2014 13:55:36 -0300

William Costa <[email protected]> • #91870

[Security-news] SA-CONTRIB-2014-030 - SexyBookmarks - Information Disclosure

Wed, 12 Mar 2014 16:37:01 +0000 (UTC)

[email protected] • #91869

[SECURITY] [DSA 2876-1] cups security update

Wed, 12 Mar 2014 16:45:21 +0100

Moritz Muehlenhoff <[email protected]> • #91868

[SECURITY] [DSA 2875-1] cups-filters security update

Wed, 12 Mar 2014 16:44:41 +0100

Moritz Muehlenhoff <[email protected]> • #91867

[SECURITY] [DSA 2874-1] mutt security update

Wed, 12 Mar 2014 16:44:02 +0100

Moritz Muehlenhoff <[email protected]> • #91866

Remote Command Injection in Arabic Prawn 0.0.1 Ruby Gem

Wed, 12 Mar 2014 08:38:30 -0400

"Larry W. Cashdollar" <[email protected]> • #91865

CVE-2014-1222 - Local File Inclusion in Vtiger CRM

Wed, 12 Mar 2014 11:09:47 +0000

Portcullis Advisories <[email protected]> • #91864

CVE-2014-2043 - SQL Injection in Procentia IntelliPen

Wed, 12 Mar 2014 11:08:33 +0000

Portcullis Advisories <[email protected]> • #91863

CVE-2014-1686 -- Information disclosure: webserver source path in Mediawiki 1.18.0

Wed, 12 Mar 2014 00:20:25 +0000

"alejandr0.w3b.p0wn3r" <[email protected]> • #91862

CVE-2014-1904 XSS when using Spring MVC

Tue, 11 Mar 2014 14:47:55 -0700 (PDT)

Pivotal Security Team <[email protected]> • #91861

CVE-2014-0097 Spring Security Blank password may bypass user authentication

Tue, 11 Mar 2014 14:46:16 -0700 (PDT)

Pivotal Security Team <[email protected]> • #91860

CVE-2014-0054 Spring MVC Incomplete fix for CVE-2013-4152 / CVE-2013-6429 (XXE)

Tue, 11 Mar 2014 14:41:18 -0700 (PDT)

Pivotal Security Team <[email protected]> • #91859

Medium severity flaw in BlackBerry QNX Neutrino RTOS

Tue, 11 Mar 2014 20:34:19 +0000

Tim Brown <[email protected]> • #91858

NEW VMSA-2014-0002 VMware vSphere updates to third party libraries

Tue, 11 Mar 2014 20:30:44 -0700 (PDT)

"\"VMware Security Response Center\"" <[email protected]> • #91857

[SECURITY] [DSA 2873-1] file security update

Tue, 11 Mar 2014 21:09:54 +0000

Salvatore Bonaccorso <[email protected]> • #91856

CORE-2014-0002 - Oracle VirtualBox 3D Acceleration Multiple Memory Corruption Vulnerabilities

Tue, 11 Mar 2014 17:25:17 -0300

CORE Advisories Team <[email protected]> • #91855

Re: OT What is happening with bitcoins?

Tue, 11 Mar 2014 07:34:44 -0400

Ron Scott-Adams <[email protected]> • #91854

Re: Passwords Analyser Tool

Tue, 11 Mar 2014 07:46:50 -0500

Daniel Wood <[email protected]> • #91853

[CVE-2013-6835] - iOS 7.0.6 Safari/Facetime-Audio Privacy issue

Mon, 10 Mar 2014 19:48:26 -0400

Guillaume Ross <[email protected]> • #91852

Apple TV log file password disclosure

Mon, 10 Mar 2014 13:28:31 -0400

David Schuetz <[email protected]> • #91851

Passwords Analyser Tool

Mon, 10 Mar 2014 13:45:03 -0300

Nahuel Grisolia <[email protected]> • #91850

Re: OT What is happening with bitcoins?

Mon, 10 Mar 2014 16:57:22 +0200

Julius Kivimäki <[email protected]> • #91849

Hackito Ergo Sum 2014 CFP

Mon, 10 Mar 2014 12:51:18 +0100

Alexandre De Oliveira <[email protected]> • #91848

NotSoSecure CTF [April 18th to 20th 2014]

Mon, 10 Mar 2014 21:58:25 -0000

"Sumit Siddharth" <[email protected]> • #91847

AST-2014-004: Remote Crash Vulnerability in PJSIP Channel Driver Subscription Handling

Mon, 10 Mar 2014 16:07:10 -0500

"Asterisk Security Team" <[email protected]> • #91846

AST-2014-003: Remote Crash Vulnerability in PJSIP channel driver

Mon, 10 Mar 2014 16:07:01 -0500

"Asterisk Security Team" <[email protected]> • #91845

AST-2014-002: Denial of Service Through File Descriptor Exhaustion with chan_sip Session-Timers

Mon, 10 Mar 2014 16:06:53 -0500

"Asterisk Security Team" <[email protected]> • #91844

AST-2014-001: Stack Overflow in HTTP Processing of Cookie Headers.

Mon, 10 Mar 2014 16:06:45 -0500

"Asterisk Security Team" <[email protected]> • #91843

Re: OT What is happening with bitcoins?

Mon, 10 Mar 2014 12:57:34 -0700

chedder <[email protected]> • #91842

[ MDVSA-2014:050 ] wireshark

Mon, 10 Mar 2014 18:09:00 +0100

[email protected] • #91841

[SECURITY] [DSA 2872-1] udisks security update

Mon, 10 Mar 2014 16:23:40 +0100

Moritz Muehlenhoff <[email protected]> • #91840

[SECURITY] [DSA 2871-1] wireshark security update

Mon, 10 Mar 2014 15:50:39 +0100

Moritz Muehlenhoff <[email protected]> • #91839

[ MDVSA-2014:049 ] subversion

Mon, 10 Mar 2014 15:39:00 +0100

[email protected] • #91838

[ MDVSA-2014:048 ] gnutls

Mon, 10 Mar 2014 14:01:00 +0100

[email protected] • #91837

List Charter

Mon, 10 Mar 2014 09:37:50 +0000

John Cartwright <[email protected]> • #91836

Re: OT What is happening with bitcoins?

Fri, 7 Mar 2014 13:58:05 +0000

"Meaux, Kirk" <[email protected]> • #91835

OXATIS 'EMSJ' Cross Site Scripting Vulnerability

Fri, 7 Mar 2014 23:19:41 +0100 (CET)

HTTPCS <[email protected]> • #91834

[HTTPCS] ClanSphere 'where' Cross Site Scripting Vulnerability

Fri, 7 Mar 2014 17:25:58 +0100 (CET)

HTTPCS <[email protected]> • #91833

Re: Hacking in Schools

Mon, 10 Mar 2014 00:57:42 -0700

coderman <[email protected]> • #91832