bugtraq mailing list - 2016/07

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2016/07

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹ 7	²	³
⁴ 16	⁵ 7	⁶ 5	⁷ 3	⁸ 7	⁹	¹⁰
¹¹ 2	¹² 9	¹³ 4	¹⁴ 7	¹⁵ 2	¹⁶	¹⁷
¹⁸ 5	¹⁹ 17	²⁰ 9	²¹ 1	²² 8	²³	²⁴
²⁵ 21	²⁶ 8	²⁷ 10	²⁸ 5	²⁹ 17	³⁰	³¹

Messages by day:

July 1 (7 messages)

CA20160627-01: Security Notice for Release Automation ("Kotas, Kevin J" <Kevin.Kotas@...com>)
[CVE-2016-5728] Double-Fetch Vulnerability in Linux-4.5/drivers/misc/mic/host/mic_virtio.c (wpengfeinudt@...il.com)
[CVE-2016-6130] Double-Fetch Vulnerability in Linux-4.5/drivers/s390/char/sclp_ctl.c (wpengfeinudt@...il.com)
Logic security flaw in TP-LINK - tplinklogin.net (Info@...ermoon.cc)
Executable installers are vulnerable^WEVIL (case 34): Microsoft's vs-community-*.exe susceptible to DLL hijacking ("Stefan Kanthak" <stefan.kanthak@...go.de>)
KL-001-2016-003 : SQLite Tempdir Selection Vulnerability (KoreLogic Disclosures <disclosures@...elogic.com>)
[security bulletin] HPSBGN03626 rev.1 - HPE Service Manager using OpenSSL, Remote Disclosure of Information Logjam (security-alert@....com)

July 4 (16 messages)

[SECURITY] [DSA 3612-1] gimp security update (Salvatore Bonaccorso <carnil@...ian.org>)
[security bulletin] HPSBGN03627 rev.1 - HPE Service Manager using OpenSSL, Remote Disclosure of Information (security-alert@....com)
[SECURITY] CVE-2016-4974: Apache Qpid: deserialization of untrusted input while using JMS ObjectMessage (Robbie Gemmell <robbie@...che.org>)
[SECURITY] [DSA 3613-1] libvirt security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 3615-1] wireshark security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 3614-1] tomcat7 security update (Salvatore Bonaccorso <carnil@...ian.org>)
[FD]CVE ID request : SQL injection in 24Online Client (rahullraz@...il.com)
WebCalendar v1.2.7 PHP Code Injection (hyp3rlinx@...os.com)
HTTP session poisoning in EMC Documentum WDK-based applications causes arbitrary code execution and privilege elevation ("Andrey B. Panfilov" <andrew@...filov.t…)
WebCalendar v1.2.7 CSRF Protection Bypass (hyp3rlinx@...os.com)
WebCalendar v1.2.7 CSRF Protection Bypass (hyp3rlinx@...os.com)
WebCalendar v1.2.7 CSRF Protection Bypass (hyp3rlinx@...os.com)
[SECURITY] [DSA 3616-1] linux security update (Salvatore Bonaccorso <carnil@...ian.org>)
[CVE-2016-6156] Double-Fetch Vulnerability in Linux-4.6/drivers/platform/chrome/cros_ec_dev.c (wpengfeinudt@...il.com)
KWSPHP CMS v1.6.995 - Persistent Cross Site Scripting Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
OpenDocMan v1.3.5 - Full Path Disclosure Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

July 5 (7 messages)

[CVE-2016-6136] Double-Fetch Vulnerability in Linux-4.6/kernel/auditsc.c (wpengfeinudt@...il.com)
Syslog Server "npriority" field remote Denial of Service vulnerability (chaoyi.huang@...nect.polyu.hk)
Apple Safari for Mac OS X SVG local XXE (Filippo Cavallarin <filippo.cavallarin@...resegment.com>)
Putty (beta 0.67) DLL Hijacking Vulnerability (wsachin092@...il.com)
[slackware-security] mozilla-thunderbird (SSA:2016-187-01) (Slackware Security Team <security@...ckware.com>)
CVE-2016-4979: HTTPD webserver - X509 Client certificate based authentication can be bypassed when HTTP/2 is used [vs] (Dirk-Willem van Gulik <dirkx@...weaving.…)
[security bulletin] HPSBHF03613 rev.1 - HPE Network Products including iMC, VCX, and Comware using OpenSSL, Remote Denial of Service (DoS… (security-alert@....com)

July 6 (5 messages)

IBM BlueMix Cloud - (API) Persistent Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Teampass 2.1.26 - Authenticated File Upload Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Micron CMS v5.3 - (cat_id) SQL Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
ESA-2016-054: EMC Avamar Data Store and Avamar Virtual Edition Unauthorized Data Access Vulnerability (Security Alert <Security_Alert@....com>)
Re: Putty (beta 0.67) DLL Hijacking Vulnerability (wsachin092@...il.com)

July 7 (3 messages)

[SECURITY] [DSA 3617-1] horizon security update (Moritz Muehlenhoff <jmm@...ian.org>)
Acer Portal Android Application - MITM SSL Certificate Vulnerability (CVE-2016-5648) (David Coomber <davidcoomber.infosec@...il.com>)
CVE-2016-4979: HTTPD webserver - X509 Client certificate based authentication can be bypassed when HTTP/2 is used [vs] (Dirk-Willem van Gulik <dirkx@...weaving.…)

July 8 (7 messages)

[KIS-2016-11] IPS Community Suite <= 4.1.12.3 Autoloaded PHP Code Injection Vulnerability (Egidio Romano <research@...mainsecurity.com>)
[security bulletin] HPSBGN03628 rev.1 - HPE IceWall Federation Agent using libXML2 library, Remote Denial of Service (DoS), Unauthorized … (security-alert@....com)
[slackware-security] samba (SSA:2016-189-01) (Slackware Security Team <security@...ckware.com>)
Microsoft WinDbg logviewer.exe Buffer Overflow DOS (hyp3rlinx@...os.com)
Microsoft Process Kill Utility "kill.exe" Buffer Overflow (hyp3rlinx@...os.com)
BMW ConnectedDrive - (Update) VIN Session Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
BMW - (Token) Client Side Cross Site Scripting Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

July 11 (2 messages)

Persistent Cross-Site Scripting in All in One SEO Pack WordPress Plugin (Summer of Pwnage <lists@...urify.nl>)
Persistent Cross-Site Scripting in WP Live Chat Support plugin (Summer of Pwnage <lists@...urify.nl>)

July 12 (9 messages)

[RCESEC-2016-003][CVE-2016-4469] Apache Archiva 1.3.9 Multiple Cross-Site Request Forgeries (Julien Ahrens <info@...security.com>)
[RCESEC-2016-004][CVE-2016-5005] Apache Archiva 1.3.9 admin/addProxyConnector_commit.action connector.sourceRepoId Persist… (Julien Ahrens <info@...security.com>)
Persistent Cross-Site Scripting in WordPress Activity Log plugin (Summer of Pwnage <lists@...urify.nl>)
[security bulletin] HPSBHF03608 rev.1 - HPE iMC PLAT and other Network Products using Apache Java Commons Collection (ACC), Remote Execut… (security-alert@....com)
Cross-Site Scripting vulnerability in Master Slider WordPress Plugin (Summer of Pwnage <lists@...urify.nl>)
Cross-Site Scripting vulnerability in Email Users WordPress Plugin (Summer of Pwnage <lists@...urify.nl>)
Cross-Site Scripting vulnerability in Profile Builder WordPress Plugin (Summer of Pwnage <lists@...urify.nl>)
WP Fastest Cache Member Local File Inclusion vulnerability (Summer of Pwnage <lists@...urify.nl>)
Easy Forms for MailChimp Local File Inclusion vulnerability (Summer of Pwnage <lists@...urify.nl>)

July 13 (4 messages)

[CVE-2016-1014, CVE-2016-4247] Executable installers are vulnerable^WEVIL (case 35): Adobe's Flash Player (un)installers ("Stefan Kanthak" <stefan.kanthak@...go.…)
missing input validation in pmount: arbitrary mount as non-root (Imre RAD <imre.rad@...rch-lab.hu>)
Open-Xchange Security Advisory 2016-07-13 (Martin Heiland <martin.heiland.lists@...n-xchange.com>)
Cisco Security Advisory: Cisco IOS XR for NCS 6000 Packet Timer Leak Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psi…)

July 14 (7 messages)

Cross-Site Scripting vulnerability in Simple Membership WordPress Plugin (Summer of Pwnage <lists@...urify.nl>)
Cross-Site Scripting vulnerability in Top 10 - Popular posts plugin for WordPress (Summer of Pwnage <lists@...urify.nl>)
Cross-Site Scripting vulnerability in WP No External Links WordPress Plugin (Summer of Pwnage <lists@...urify.nl>)
Cross-Site Scripting vulnerability in Google Forms WordPress Plugin (Summer of Pwnage <lists@...urify.nl>)
[ERPSCAN-16-021] SAP xMII - Reflected XSS vulnerability (ERPScan inc <erpscan.online@...il.com>)
[ERPSCAN-16-020] SAP NetWeaver AS JAVA UDDI component - XXE vulnerability (ERPScan inc <erpscan.online@...il.com>)
[ERPSCAN-16-019] SAP NetWeaver Enqueue Server - DoS vulnerability (ERPScan inc <erpscan.online@...il.com>)

July 15 (2 messages)

[security bulletin] HPSBMU03562 rev.3 - HPE Service Manager using Java Deserialization, Remote Arbitrary Code Execution (security-alert@....com)
[SECURITY] [DSA 3619-1] libgd2 security update (Salvatore Bonaccorso <carnil@...ian.org>)

July 18 (5 messages)

[SECURITY] [DSA 3620-1] pidgin security update (Salvatore Bonaccorso <carnil@...ian.org>)
Multiple vulns in Vodafone EasyBox 804 (Tim Schughart <info@...sec-networks.com>)
[Remote Format String Exploit] Axis Communications MPQT/PACS Server Side Include (SSI) Daemon (bashis <mcw@...mail.eu>)
[SECURITY] [DSA 3621-1] mysql-connector-java security update (Salvatore Bonaccorso <carnil@...ian.org>)
[CVE-2016-1281] NOT FIXED: VeraCrypt*Setup*.exe still vulnerable to DLL hijacking ("Stefan Kanthak" <stefan.kanthak@...go.de>)

July 19 (17 messages)

[SECURITY] [DSA 3622-1] python-django security update (Salvatore Bonaccorso <carnil@...ian.org>)
APPLE-SA-2016-07-18-1 OS X El Capitan v10.11.6 and Security Update 2016-004 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2016-07-18-2 iOS 9.3.3 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2016-07-18-3 watchOS 2.2.2 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2016-07-18-2 iOS 9.3.3 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2016-07-18-2 iOS 9.3.3 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2016-07-18-4 tvOS 9.2.2 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2016-07-18-4 tvOS 9.2.2 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2016-07-18-4 tvOS 9.2.2 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2016-07-18-5 Safari 9.1.2 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2016-07-18-6 iTunes 12.4.2 (Apple Product Security <product-security-noreply@...ts.apple.com>)
Django CMS v3.3.0 - (Editor Snippet) Persistent Web Vulnerability (CVE-2016-6186) (Vulnerability Lab <research@...nerability-lab.com>)
Executable installers are vulnerable^WEVIL (case 35): eclipse-inst-win*.exe vulnerable to DLL and EXE hijacking ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Multiple Cross-Site Scripting vulnerabilities in Ninja Forms WordPress Plugin (Summer of Pwnage <lists@...urify.nl>)
Cross-Site Request Forgery in Icegram WordPress Plugin (Summer of Pwnage <lists@...urify.nl>)
Multiple SQL injection vulnerabilities in WordPress Video Player (Summer of Pwnage <lists@...urify.nl>)
CVE-2016-5080: Memory corruption in code generated by Objective Systems Inc. ASN1C compiler for C/C++ [STIC-2016-0603] (Programa STIC <stic@...dacionsadosky.or…)

July 20 (9 messages)

[SECURITY] [DSA 3623-1] apache2 security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SEARCH-LAB advisory] Cisco EPC3925 UPC modem/router default passphrase vulnerabilities (Gergely Eberhardt <gergely.eberhardt@...rch-lab.hu>)
[SEARCH-LAB advisory] Hitron CGNV4 modem/router multiple vulnerabilities (Gergely Eberhardt <gergely.eberhardt@...rch-lab.hu>)
[SEARCH-LAB advisory] Compal CH7465LG-LC modem/router multiple vulnerabilities (Gergely Eberhardt <gergely.eberhardt@...rch-lab.hu>)
[SEARCH-LAB advisory] Technicolor TC7200 modem/router multiple vulnerabilities (Gergely Eberhardt <gergely.eberhardt@...rch-lab.hu>)
[SEARCH-LAB advisory] UPC Hungary network problems (Gergely Eberhardt <gergely.eberhardt@...rch-lab.hu>)
Cisco Security Advisory: Cisco Unified Computing System Performance Manager Input Validation Vulnerability (Cisco Systems Product Security Incident Response Tea…)
Cross-Site Scripting vulnerability in Paid Memberships Pro WordPress Plugin (Summer of Pwnage <lists@...urify.nl>)
Persistent Cross-Site Scripting in WooCommerce using image metadata (EXIF) (Summer of Pwnage <lists@...urify.nl>)

July 21 (1 message)

CVE-2016-5399: php: out-of-bounds write in bzread() (Hans Jerry Illikainen <hji@...topia.com>)

July 22 (8 messages)

Cisco Security Advisory: Vulnerability in Objective Systems ASN1C Compiler Affecting Cisco Products (Cisco Systems Product Security Incident Response Team <psi…)
[SECURITY] [DSA 3624-1] mysql-5.5 security update (Salvatore Bonaccorso <carnil@...ian.org>)
MySQL zero-day vulnerabilities (July 2016 CPU) (lem.nikolas@...il.com)
[security bulletin] HPSBGN03631 rev.1 - HPE IceWall Identity Manager and HPE IceWall SSO Password Reset Option running Apache Commons Fil… (security-alert@....com)
[slackware-security] php (SSA:2016-203-02) (Slackware Security Team <security@...ckware.com>)
[slackware-security] gimp (SSA:2016-203-01) (Slackware Security Team <security@...ckware.com>)
Dreammail 5 mail client XSS Vulnerability (wwiinngd@...il.com)
[SECURITY] [DSA 3625-1] squid3 security update (Sebastien Delafond <seb@...ian.org>)

July 25 (21 messages)

MySQL zero-day vulnerabilities (July 2016 CPU) (lem.nikolas@...il.com)
[CVE-2016-5000] XML External Entity (XXE) Vulnerability in Apache POI's XLSX2CSV Example (Tim Allison <tallison@...che.org>)
CA20160721-01: Security Notice for CA eHealth ("Kotas, Kevin J" <Kevin.Kotas@...com>)
[slackware-security] bind (SSA:2016-204-01) (Slackware Security Team <security@...ckware.com>)
Executable installers are vulnerable^WEVIL (case 37): eclipse-inst-win*.exe vulnerable to DLL redirection and manifest h… ("Stefan Kanthak" <stefan.kanthak@...go.…)
Defense in depth -- the Microsoft way (part 41): vulnerable by (poor implementation of bad) design ("Stefan Kanthak" <stefan.kanthak@...go.de>)
Autobahn|Python Insecure allowedOrigins validation >= 0.14.1 (mgill@...fee.me)
[SECURITY] [DSA 3626-1] openssh security update (Salvatore Bonaccorso <carnil@...ian.org>)
Neoscreen v4.5 Authentication bypass (alex_haynes@...look.com)
Neoscreen v4.5 Blind SQL injection (alex_haynes@...look.com)
Neoscreen v4.5 Cross-site scripting (alex_haynes@...look.com)
Cross-Site Scripting in Contact Form to Email WordPress Plugin (Summer of Pwnage <lists@...urify.nl>)
Cross-Site Scripting in Code Snippets WordPress Plugin (Summer of Pwnage <lists@...urify.nl>)
[SECURITY] [DSA 3627-1] phpmyadmin security update (Thijs Kinkhorst <thijs@...ian.org>)
SEC Consult SA-20160725-0 :: Multiple vulnerabilities in Micro Focus (Novell) Filr (SEC Consult Vulnerability Lab <research@...-consult.com>)
XSS and SQLi in huge IT gallery v1.1.5 for Joomla ("Larry W. Cashdollar" <larry0@...com>)
[SECURITY] [DSA 3628-1] perl security update (Salvatore Bonaccorso <carnil@...ian.org>)
FreeBSD Security Advisory FreeBSD-SA-16:25.bspatch (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
Secunia Research: Reprise License Manager "actserver" Buffer Overflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Reprise License Manager "akey" Buffer Overflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
[security bulletin] HPSBGN03630 rev.1 - HP Operations Manager for Unix, Solaris, and Linux using Apache Commons Collections (ACC), Remote… (security-alert@....com)

July 26 (8 messages)

[SECURITY] [DSA 3629-1] ntp security update (Moritz Muehlenhoff <jmm@...ian.org>)
July 2016 - Bamboo Server - Critical Security Advisory (David Black <dblack@...assian.com>)
MySQL 0days followup (CVE-2016-3477) CVSS 8.1 (lem.nikolas@...il.com)
Crashing Browsers Remotely via Insecure Search Suggestions (research@...htwatchcybersecurity.com)
Huawei ISM Professional XSS Vulnerability (ak47464659484@...il.com)
Dropbox 6.4.14 DLL Hijacking Vulnerability (mehta.himanshu21@...il.com)
Cross-Site Scripting vulnerability in ColorWay WordPress Theme (Summer of Pwnage <lists@...urify.nl>)
Silurus Classifieds XSS Vulnerability (ak47464659484@...il.com)

July 27 (10 messages)

[security bulletin] HPSBST03603 rev.1 - HPE StoreVirtual Products running LeftHand OS using glibc, Remote Arbitrary Code Execution, Denia… (security-alert@....com)
[SECURITY] [DSA 3630-1] libgd2 security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 3631-1] php5 security update (Moritz Muehlenhoff <jmm@...ian.org>)
Nusiorung CMS 2016 - (Login) Auth Bypass Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
DornCMS v1.4 - (FileManager) Persistent Cross Site Scripting Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
VUPlayer 2.49 - (.pls) Buffer Overflow Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
VUPlayer 2.49 - (.wax) Buffer Overflow Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
RE: VUPlayer 2.49 - (.wax) Buffer Overflow Vulnerability ("Wick, Ryan \(US - Chicago\)" <rwick@...oitte.com>)
[SECURITY] [DSA 3632-1] mariadb-10.0 security update (Salvatore Bonaccorso <carnil@...ian.org>)
CVE-2016-2783 - Avaya VOSS/VSP Release 4.1.0.0 Vulnerable to SPB Traffic traversal ("Grebovich, Dragan \(Dragan\)" <dgrebovich@...ya.com>)

July 28 (5 messages)

[SECURITY] [DSA 3633-1] xen security update (Moritz Muehlenhoff <jmm@...ian.org>)
Zortam Media Studio 20.60 - Buffer Overflow Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Exponent CMS 2.3.9 - Useraccounts Persistent Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Zoll Checklist v1.2.2 iOS - Multiple Persistent Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Saveya Bounty #1 - Bypass & Persistent Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

July 29 (17 messages)

Vicon Network Cameras - Authentication Bypass (reggie.dodd30@...il.com)
[S21SEC-047] Fotoware Fotoweb 8.0 Cross Site Scripting (S21sec Vulnerability Research <vulns@...sec.com>)
ZMS v3.2 CMS - Multiple Client Side Cross Site Scripting Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[SYSS-2016-044] Logitech K520 - Insufficient Protection against Replay Attacks (matthias.deeg@...s.de)
[SYSS-2016-046] Perixx PERIDUO-710W - Missing Protection against Replay Attacks (matthias.deeg@...s.de)
[SYSS-2016-047] Perixx PERIDUO-710W - Keystroke Injection Vulnerability (matthias.deeg@...s.de)
[SYSS-2016-045] Perixx PERIDUO-710W - Insufficient Protection of Code (Firmware) and Data (Cryptographic Key) (matthias.deeg@...s.de)
[SYSS-2016-044] Logitech K520 - Insufficient Protection against Replay Attacks (matthias.deeg@...s.de)
[SYSS-2016-059] Microsoft Wireless Desktop 2000 - Insufficient Verification of Data Authenticity (CWE-345) (matthias.deeg@...s.de)
[SYSS-2016-031] CHERRY B.UNLIMITED AES - Missing Protection against Replay Attacks (matthias.deeg@...s.de)
[SYSS-2016-032] CHERRY B.UNLIMITED AES - Insufficient Protection of Code (Firmware) and Data (Cryptographic Key) (matthias.deeg@...s.de)
[SYSS-2016-038] CHERRY B.UNLIMITED AES - Keystroke Injection Vulnerability (matthias.deeg@...s.de)
[SYSS-2016-031] CHERRY B.UNLIMITED AES - Missing Protection against Replay Attacks (matthias.deeg@...s.de)
[SYSS-2016-032] CHERRY B.UNLIMITED AES - Insufficient Protection of Code (Firmware) and Data (Cryptographic Key) (matthias.deeg@...s.de)
[SYSS-2016-038] CHERRY B.UNLIMITED AES - Keystroke Injection Vulnerability (matthias.deeg@...s.de)
CVE-2016-5672: Intel Crosswalk SSL Prompt Issue (research@...htwatchcybersecurity.com)
[SECURITY] [DSA 3635-1] libdbd-mysql-perl security update (Salvatore Bonaccorso <carnil@...ian.org>)

170 messages

Powered by blists - more mailing lists