[Full-disclosure] DC

2012-07-26 Thread Григорий Братислава
<%= question %> Is who is go want to meet and has is Stoli shots with MusntLive. MusntLive is stay at Bellagio and is scope everything under radar. Watch C Miller with eagle eye. ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/

[Full-disclosure] [ MDVSA-2012:116 ] dhcp

2012-07-26 Thread security
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2012:116 http://www.mandriva.com/security/ _

[Full-disclosure] [ MDVSA-2012:115 ] dhcp

2012-07-26 Thread security
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2012:115 http://www.mandriva.com/security/ _

Re: [Full-disclosure] Linux - Indicators of compromise

2012-07-26 Thread Scott Solmonson
I can't tell if I'm being trolled or not... Inlined- On Wed, Jul 25, 2012 at 7:04 AM, Григорий Братислава wrote: > > Is I am on your network, good luck is find me especially in is post > exploitation as I am is liable to float around is piggyback from one > machine is to the next. You can is ass

[Full-disclosure] [SECURITY] [DSA 2516-1] isc-dhcp security update

2012-07-26 Thread Nico Golde
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - - Debian Security Advisory DSA-2516-1 secur...@debian.org http://www.debian.org/security/Nico Golde July 26, 2012

[Full-disclosure] BarCodeWiz Barcode ActiveX(BarcodeWiz.dll) remote Buffer Overflow PoC

2012-07-26 Thread kaveh ghaemmaghami
Exploit Title: BarCodeWiz Barcode ActiveX(BarcodeWiz.dll) remote Buffer Overflow PoC Date: July 25, 2012 Author: coolkaveh coolka...@rocketmail.com Https://twitter.com/coolkaveh Vendor Homepage: http://barcodewiz.com/ Version: 4.0.0.0 Tested on: windows 7 SP2 awesome coolkaveh

[Full-disclosure] 495 vulnerabilities on thelia

2012-07-26 Thread HTTPCS
HTTPCS Advisory : HTTPCS30 Product : Thelia Version : 1.5.1 Date : 2012-07-11 Criticality level : Less Critical Description : A vulnerability has been discovered in Thelia, which can be exploited by malicious people to conduct cross-site scripting attacks. Input passed via the 'lang' parameter to '

[Full-disclosure] [ MDVSA-2012:114 ] apache-mod_auth_openid

2012-07-26 Thread security
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2012:114 http://www.mandriva.com/security/ _

[Full-disclosure] Transmission BitTorrent XSS Vulnerability

2012-07-26 Thread Justin Klein Keane
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Vulnerability Report Author: Justin C. Klein Keane Reported: July 19, 2012 CVE-2012-4037 Description of Vulnerability: - - Transmission (http://www.transmissionbt.com) is a popular, cross platform, open source BitTorrent

[Full-disclosure] [ MDVSA-2012:113 ] arpwatch

2012-07-26 Thread security
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2012:113 http://www.mandriva.com/security/ _

Re: [Full-disclosure] Linux - Indicators of compromise

2012-07-26 Thread Григорий Братислава
On Thu, Jul 26, 2012 at 9:40 AM, wrote: > But unfortunately, you're right - most places have screwed up their DR > planning > and can't shut down. They've also screwed up their network config so it > isn't trivial > to track down which port a problem attacker is on. (And yes, tracking down a

Re: [Full-disclosure] Linux - Indicators of compromise

2012-07-26 Thread valdis . kletnieks
On Thu, 26 Jul 2012 09:07:33 -0400, Григорий Братислава said: > Really? Shut down is entire racks? Because you will have > backup/standby entire 42Us? If you can't shut down the entire rack, you've screwed up your DR and business continuity planning. This isn't just a problem f

Re: [Full-disclosure] Linux - Indicators of compromise

2012-07-26 Thread Григорий Братислава
On Wed, Jul 25, 2012 at 3:36 PM, Scott Solmonson wrote: > I can't tell if I'm being trolled or not... > Inline is MusntLive's comments! MusntLive is now give you guys is some free training on is Incident Response and is Forensics and is CCD{A,P,E}. Is first MustnLive watch really good movie and i

[Full-disclosure] [ MDVSA-2012:112 ] perl-DBD-Pg

2012-07-26 Thread security
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2012:112 http://www.mandriva.com/security/ _