Re: [Full-disclosure] [OT] pls ignore

2014-02-21 Thread Pedro Worcel
Are you using reverse psychology so that people will crack your passwords? 2014-02-21 11:27 GMT+13:00 Gaurang Pandya gaub...@yahoo.com: MD5: 0a763d4c7029b13a1eacb09d71a5b66a MD5: 76964959005d734d32f06d0a6fbabaa3 SHA1: 10e3275a6980eec283cc169e3422b94eed32e119 SHA1:

[Full-disclosure] DC4420 meeting Tuesday, 25th February 2014

2014-02-21 Thread Tony Naggs
Hi all! We have a busy evening lined up, with two great speakers for you. We will also talk a little about Def Con's Badge Hacking Challenge, and I will have some badges with the IO connectors installed. As usual we will be in the downstairs bar at The Phoenix, Cavendish Square, W1G 0PP The

[Full-disclosure] Barracuda Bug Bounty #36 Firewall - Client Side Exception Handling Web Vulnerability

2014-02-21 Thread Vulnerability Lab
Document Title: === Barracuda Bug Bounty #36 Firewall - Client Side Exception Handling Web Vulnerability References (Source): http://www.vulnerability-lab.com/get_content.php?id=1102 Barracuda Networks Security ID (BNSEC): BNSEC-2398

[Full-disclosure] [ MDVSA-2014:046 ] phpmyadmin

2014-02-21 Thread security
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2014:046 http://www.mandriva.com/en/support/security/

[Full-disclosure] CNNVD Gov CN #1 - Filter Bypass Persistent Web Vulnerability

2014-02-21 Thread Vulnerability Lab
Document Title: === CNNVD Gov CN #1 - Filter Bypass Persistent Web Vulnerability References (Source): http://www.vulnerability-lab.com/get_content.php?id=1209 Release Date: = 2014-02-21 Vulnerability Laboratory ID (VL-ID):

[Full-disclosure] 44CON 2014 September 11th - 12th CFP

2014-02-21 Thread Steve
44CON is the UK's largest combined annual Security Conference and Training event. Taking place on the 11th and 12th of September at the ILEC Conference Centre near Earls Court, London, we will have a fully dedicated conference facility, including catering, private bar and daily Gin O’Clock

[Full-disclosure] [ MDVSA-2014:047 ] postgresql

2014-02-21 Thread security
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2014:047 http://www.mandriva.com/en/support/security/

[Full-disclosure] Google XXE Vulnerability

2014-02-21 Thread Mark Litchfield
Hi All, There was an XML external entity vulnerability within Googles Public data explorer. This was submitted to Google as part of their Bug Bounty Program. For the full write up with screen shots - http://www.securatary.com/vulnerabilities -- All the best Mark Litchfield

Re: [Full-disclosure] DoS via tables corruption in WordPress

2014-02-21 Thread MustLive
Hello Timothy! As I wrote in my first letter with description of my video and additionally in my answer to Aris (http://seclists.org/fulldisclosure/2014/Feb/115), in 2009 WordPress developers made a fix for this DoS vulnerability - without thanking me and without mentioning me as researcher of