bugtraq mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2017/05

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹ 3	²	³ 11	⁴ 2	⁵ 2	⁶ 1	⁷
⁸ 1	⁹ 3	¹⁰ 6	¹¹ 7	¹²	¹³	¹⁴
¹⁵ 6	¹⁶ 2	¹⁷ 2	¹⁸	¹⁹ 2	²⁰	²¹
²² 8	²³ 1	²⁴ 4	²⁵ 4	²⁶ 5	²⁷	²⁸
²⁹ 1	³⁰ 4	³¹ 1

Messages by day:

May 1 (3 messages)

Multiple local privilege escalation vulnerabilities in HideMyAss Pro VPN client v2.x for OS X ("Securify B.V." <lists@...urify.nl>)
SyntaxHighlight MediaWiki extension allows injection of arbitrary Pygments options ("Securify B.V." <lists@...urify.nl>)
IML 2017 Conference, ACM digital library proceedings, Venue: Liverpool John Moores University, United Kingdom (IML 2017 Conference <cfp@...-conference.site>)

May 3 (11 messages)

[security bulletin] HPESBHF03741 rev.1 - HPE Network products including Comware 7, IMC, and VCX running OpenSSL, Local Unauthorized Dis… (security-alert@....com)
MODX Revolution 2.0.1-pl - 2.5.6-pl blind SQLi (Anti Räis <antirais@...il.com>)
[SECURITY] [DSA 3842-1] tomcat7 security update (Sebastien Delafond <seb@...ian.org>)
[SECURITY] [DSA 3843-1] tomcat8 security update (Sebastien Delafond <seb@...ian.org>)
Mura CMS Cross-Site Scripting (XSS) Vulnerability (Leon.Zhao.7@...il.com)
Hola VPN v1.34 - Privilege Escalation Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Joomla com_tag v1.7.6 - (tag) SQL Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Super File Explorer 1.0.1 - Arbitrary File Upload Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Arachni v1.5-0.5.11 - Persistent Cross Site Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Zenario v7.6 - Persistent Cross Site Scripting Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Zenario CMS v7.6 - (Delete) Persistent Cross Site Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

May 4 (2 messages)

ESA-2017-036: EMC Data Domain Privilege Escalation Vulnerability (EMC Product Security Response Center <Security_Alert@....com>)
WordPress Core <= 4.7.4 Potential Unauthorized Password Reset (0day) [CVE-2017-8295] (Dawid Golunski <dawid@...alhackers.com>)

May 5 (2 messages)

[security bulletin] HPESBGN03740 rev.1 - HPE Network Automation, Multiple Remote Vulnerabilities (security-alert@....com)
[security bulletin] HPESBHF03736 rev.1 - HPE Aruba and HPE ProVision network switches using Diffie Hellman Group1 Sha1 Exchange Algorit… (security-alert@....com)

May 6 (1 message)

CA20170504-01: Security Notice for CA Client Automation OS Installation Management ("Kotas, Kevin J" <Kevin.Kotas@...com>)

May 8 (1 message)

ESA-2017-035: EMC Mainframe Enablers ResourcePak Base privilege management vulnerability (EMC Product Security Response Center <Security_Alert@....com>)

May 9 (3 messages)

[SECURITY] [DSA 3845-1] libtirpc security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 3846-1] libytnef security update (Sebastien Delafond <seb@...ian.org>)
SEC Consult SA-20170509-0 :: Multiple vulnerabilities in I, Librarian PDF manager (SEC Consult Vulnerability Lab <research@...-consult.com>)

May 10 (6 messages)

CVE-2016-6799: Internal system information leak (Simon MacDonald <macdonst@...che.org>)
[security bulletin] HPESBST03739 rev.1 - HPE StoreFabric B-series Switches, Remote Elevation of Privilege (security-alert@....com)
[SECURITY] [DSA 3847-1] xen security update (Moritz Muehlenhoff <jmm@...ian.org>)
Multiple Vulnerabilities in ASUS Routers [CVE-2017-5891 and CVE-2017-5892] (Nightwatch Cybersecurity Research <research@...htwatchcybersecurity.com>)
[SECURITY] [DSA 3848-1] git security update (Salvatore Bonaccorso <carnil@...ian.org>)
SEC Consult SA-20170510-0 :: Insecure Handling Of URI Schemes in Microsoft OneDrive iOS App (SEC Consult Vulnerability Lab <research@...-consult.com>)

May 11 (7 messages)

[CORE-2017-0001] - SAP SAPCAR Heap Based Buffer Overflow Vulnerability (Core Security Advisories Team <advisories@...esecurity.com>)
ESA-2017-027: EMC Isilon OneFS NFS Export Upgrade Vulnerability (EMC Product Security Response Center <Security_Alert@....com>)
ESA-2017-017: RSA® Adaptive Authentication (On-Premise) Cross-Site Scripting Vulnerability (EMC Product Security Response Center <Security_Alert@....com>)
DefenseCode ThunderScan SAST Advisory: WordPress Tracking Code Manager Plugin Multiple Security Vulnerabilities (DefenseCode <defensecode@...ensecode.com>)
DefenseCode WebScanner DAST Advisory: WordPress User Access Manager Plugin Security Vulnerability (DefenseCode <defensecode@...ensecode.com>)
SEC Consult SA-20170511-0 :: Stack-based buffer overflow vulnerability in Guidance Software EnCase Forensic Imager (SEC Consult Vulnerability Lab <research@sec…)
DefenseCode ThunderScan SAST Advisory: GOOGLE google-api-php-client Multiple Security Vulnerabilities (DefenseCode <defensecode@...ensecode.com>)

May 15 (6 messages)

[security bulletin] HPESBHF03745 rev.1 - HPE Intelligent Management Center (iMC) PLAT, Remote Code Execution (security-alert@....com)
Secunia Research: LibRaw "parse_tiff_ifd()" Memory Corruption Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: FLAC "read_metadata_vorbiscomment_()" Memory Leak Denial of Service Vulnerability (Secunia Research <remove-vuln@...unia.com>)
[SECURITY] [DSA 3853-1] bitlbee security update (Sebastien Delafond <seb@...angle.com>)
APPLE-SA-2017-05-15-4 watchOS 3.2.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2017-05-15-6 iTunes 12.6.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)

May 16 (2 messages)

Nextcloud/Owncloud - Reflected Cross Site Scripting in error pages (Manuel Mancera <sinkmanu@...il.com>)
[SYSS-2017-010] HP Wireless Mouse: Spoofing Attack (CWE-345) (Micha Borrmann <micha.borrmann@...s.de>)

May 17 (2 messages)

[slackware-security] kdelibs (SSA:2017-136-02) (Slackware Security Team <security@...ckware.com>)
PingID (MFA) - Reflected Cross-Site Scripting (Advisories <advisories@...pass-security.com>)

May 19 (2 messages)

[SECURITY] [DSA 3856-1] deluge security update (Moritz Muehlenhoff <jmm@...ian.org>)
[security bulletin] HPESBGN03748 rev.1 - HPE Cloud Optimizer, Remote Disclosure of Information (security-alert@....com)

May 22 (8 messages)

[SECURITY] CVE-2017-5657: Apache Archiva CSRF vulnerability for REST endpoints (Martin <martin_s@...che.org>)
[SECURITY] [DSA 3858-1] openjdk-7 security update (Moritz Muehlenhoff <jmm@...ian.org>)
CVE-2017-9024 Secure Auditor - v3.0 Directory Traversal (apparitionsec@...il.com (hyp3rlinx))
May 2017 - SourceTree - Critical Security Advisory (Atlassian <security@...assian.com>)
CVE-2017-9046 Mantis Bug Tracker 1.3.10 / v2.3.0 CSRF Permalink Injection (apparitionsec@...il.com (hyp3rlinx))
CVE-2017-9046 Pegasus "winpm-32.exe" v4.72 Mailto: Link Remote Code Execution (apparitionsec@...il.com (hyp3rlinx))
CVE-2017-9024 Secure Auditor - v3.0 Directory Traversal (apparitionsec@...il.com (hyp3rlinx))
HPESBHF03744 rev.1 - HPE Intelligent Management Center (iMC) PLAT running OpenSSL, Remote Denial of Service (DoS) (HPE Product Security Response Team <security…)

May 23 (1 message)

Secunia Research: Microsoft Windows Heap-based Buffer Overflow Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)

May 24 (4 messages)

[SECURITY] [DSA 3861-1] libtasn1-6 security update (Sebastien Delafond <seb@...ian.org>)
DefenseCode ThunderScan SAST Advisory: WordPress All In One Schema.org Rich Snippets Plugin Security Vulnerability (DefenseCode <defensecode@...ensecode.com>)
DefenseCode ThunderScan SAST Advisory: WordPress Huge-IT Video Gallery Plugin Security Vulnerability (DefenseCode <defensecode@...ensecode.com>)
DefenseCode ThunderScan SAST Advisory: WordPress AffiliateWP Plugin Security Vulnerability (DefenseCode <defensecode@...ensecode.com>)

May 25 (4 messages)

[security bulletin] HPESBHF03751 rev.1 - HPE Aruba AirWave Glass, Remote Code Execution (security-alert@....com)
[slackware-security] samba (SSA:2017-144-01) (Slackware Security Team <security@...ckware.com>)
WebKitGTK+ Security Advisory WSA-2017-0004 (Carlos Alberto Lopez Perez <clopez@...lia.com>)
[security bulletin] HPESBHF03746 rev.1 - HPE Intelligent Management Center (iMC) PLAT, Remote Code Execution (HPE Product Security Response Team <security-aler…)

May 26 (5 messages)

[SECURITY] [DSA 3863-1] imagemagick security update (Moritz Muehlenhoff <jmm@...ian.org>)
[security bulletin] HPESBHF03750 rev.1 - HPE Network Products including Comware 5, Comware 7 and VCX running NTP, Remote Denial of Serv… (security-alert@....com)
[security bulletin] HPESBHF03754 rev.1 - HPE ML10 Gen 9 Server using Intel Xeon E3-1200 v5 Processor, Remote Access Restriction Bypass (security-alert@....com)
[security bulletin] HPESBHF03730 rev.1 - HPE Aruba ClearPass Policy Manager, Multiple Vulnerabilities (security-alert@....com)
Wordpress Plugin Social-Stream - Exposure of Twitter API Secret Key and Token (kyle Lovett <krlovett@...il.com>)

May 29 (1 message)

Multiple Local Privilege Escalation Vulnerabilities in Acunetix Web Vulnerability Scanner 11 (Florian Bogner <florian@...ner.sh>)

May 30 (4 messages)

[SECURITY] [DSA 3865-1] mosquitto security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 3866-1] strongswan security update (Yves-Alexis Perez <corsac@...ian.org>)
[SECURITY] [DSA 3867-1] sudo security update (Salvatore Bonaccorso <carnil@...ian.org>)
DefenseCode ThunderScan SAST Advisory: WordPress Simple Slideshow Manager Plugin Multiple Security Vulnerabilities (DefenseCode <defensecode@...ensecode.com>)

May 31 (1 message)

[CVE-2017-5688] Executable installers are vulnerable^WEVIL (case 52): Intel installation framework allows arbitrary code… ("Stefan Kanthak" <stefan.kanthak@...go.…)

76 messages