Full Disclosure

Syndicate content
A lightly moderated high-traffic forum for disclosure of security information. Fresh vulnerabilities sometimes hit this list many hours before they pass through the Bugtraq moderation queue. The relaxed atmosphere of this quirky list provides some comic relief and certain industry gossip. Unfortunately, most of the posts are worthless drivel, so finding the gems takes patience.
Updated: 11 min 31 sec ago

Cisco Security Advisory: Cisco IOS Software Resource Reservation Protocol Denial of Service Vulnerability

27 March, 2013 - 11:41

Posted by Cisco Systems Product Security Incident Response Team on Mar 27

Cisco IOS Software Resource Reservation Protocol Denial of Service
Vulnerability

Advisory ID: cisco-sa-20130327-rsvp

Revision 1.0

For Public Release 2013 March 27 16:00 UTC (GMT)
+---------------------------------------------------------------------

Summary
=======

The Resource Reservation Protocol (RSVP) feature in Cisco IOS Software
and Cisco IOS XE Software contains a vulnerability when used on a
device that has Multiprotocol Label...

Fw: Justice for Molly (cops killing civillians)

27 March, 2013 - 10:31

Posted by Jerry dePriest on Mar 27

I said sorry... what if it was your relative? what if it was the cops fucking with your family?

that is all...

----- Original Message -----
From: Bryan Baldwin
To: full-disclosure () lists grok org uk
Sent: Tuesday, March 26, 2013 10:26 PM
Subject: Re: [Full-disclosure] Justice for Molly (cops killing civillians)

https://www.facebook.com/groups/180686205383827/

It is possbile to avoid spamming the list with Facebook tracts?...

[ISecAuditors Security Advisories] Reflected XSS in Atmail WebMail <= v7.0.2

27 March, 2013 - 06:56

Posted by ISecAuditors Security Advisories on Mar 27

=============================================
INTERNET SECURITY AUDITORS ALERT 2013-004
- Original release date: March 9th, 2013
- Last revised: March 25th, 2013
- Discovered by: Vicente Aguilera Diaz
- Severity: 4.3/10 (CVSSv2 Base Scored)
- CVE-ID: CVE-2013-2585
=============================================

I. VULNERABILITY
-------------------------
Reflected XSS in the view attachment message process of the Atmail
WebMail <= v7.0.2

II....

Re: Justice for Molly (cops killing civillians)

27 March, 2013 - 04:28

Posted by Gregory Boddin on Mar 27

That would be lovely, we're already taking 12 like that a day, don't bring
it here...

I guess he's trying to call Anonymous for revenge....

Re: Justice for Molly (cops killing civillians)

27 March, 2013 - 03:57

Posted by Bryan Baldwin on Mar 27

It is possbile to avoid spamming the list with Facebook tracts?

reward

27 March, 2013 - 00:09

Posted by Jerry dePriest on Mar 26

REWARD
IF YOU HAVE INFORMATION ABOUT MOLLY MARIE YOUNG

PLEASE CALL Illinois State Police (618) 542-2171

All information will remain CONFIDENTIAL.

CIRCUMSTANCES

On March 24, 2012, Molly Marie Young was found dead in the apartment of her ex-boyfriend, Richie Minton. The apartment
is located at 500 North Westridge Drive in Carbondale IL. It is located behind the Medical Arts Center. The gun used to
end her life belonged to Richie Minton and he...

Fw: Fw: Justice for Molly (cops killing civillians)

26 March, 2013 - 23:14

Posted by Jerry dePriest on Mar 26

I know this is a security board but this hits a little to close to home for me.

On/off boyfriend and gf, she was at his place and then was found dead of a gunshot wound to the head. Neither one
tested for gunshot residue on their hands and the gun didnt have any prints.

His mom, dad, 2? local pd and a lawyer were on the scene before the primary murder investivators. The suspect was
allowed to enter a restroom and change clothes is all that...

Fw: Justice for Molly (cops killing civillians)

26 March, 2013 - 22:40

Posted by Jerry dePriest on Mar 26

justice for molly on facebook if you cant link the group.

----- Original Message -----
From: Jerry dePriest
To: full-disclosure () lists grok org uk
Sent: Tuesday, March 26, 2013 10:21 PM
Subject: [Full-disclosure] Justice for Molly (cops killing civillians)

https://www.facebook.com/groups/180686205383827/

Join this group and lets kick Illinois corruption in the ass! (At least some of it)

3/24/12 Molly Young was found dead in her...

Re: Port scanning /0 using insecure embedded devices

26 March, 2013 - 22:23

Posted by Stefan Jon Silverman on Mar 26


Justice for Molly (cops killing civillians)

26 March, 2013 - 22:21

Posted by Jerry dePriest on Mar 26

https://www.facebook.com/groups/180686205383827/

Join this group and lets kick Illinois corruption in the ass! (At least some of it)

3/24/12 Molly Young was found dead in her exboyfriends apartment. He is a dispatcher for Carbondale, IL pd and his
parents work in a neighboring county at police departments.

Ritchie Minton was allowed to change clothes and use the restroom when police arrived. Since her death he has not
cooperated except by...

[SECURITY] [DSA 2653-1] icinga security update

26 March, 2013 - 15:54

Posted by Florian Weimer on Mar 26

-------------------------------------------------------------------------
Debian Security Advisory DSA-2653-1 security () debian org
http://www.debian.org/security/ Florian Weimer
March 26, 2013 http://www.debian.org/security/faq
-------------------------------------------------------------------------

Package : icinga
Vulnerability : buffer overflow
Problem type :...

Multiple XSS vulnerabilities in IBM Lotus Domino

26 March, 2013 - 12:29

Posted by MustLive on Mar 26

Hello list!

I want to warn you about multiple Cross-Site Scripting vulnerabilities in
IBM Lotus Domino.

Last year I've announced multiple vulnerabilities in IBM software and after
IBM fixed many of them, I've disclosed them. These are new vulnerabilities
in Domino, which I've found at 03.05.2012 together with other holes.

In August 2012 I've wrote about vulnerabilities in IBM Lotus Domino, which
were related to Domino...