bugtraq mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2018/06

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹	²	³
⁴ 17	⁵	⁶ 1	⁷ 2	⁸ 3	⁹	¹⁰
¹¹ 10	¹² 6	¹³ 3	¹⁴	¹⁵ 5	¹⁶	¹⁷
¹⁸ 5	¹⁹	²⁰	²¹ 4	²²	²³	²⁴
²⁵ 2	²⁶ 2	²⁷ 1	²⁸ 6	²⁹	³⁰

Messages by day:

June 4 (17 messages)

CVE-2018-11552 AXON PBX 2.02 Cross Site Scripting Vulnerability (mehta.himanshu21@...il.com)
APPLE-SA-2018-06-01-2 Safari 11.1.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[SECURITY] [DSA 4215-1] batik security update (Sebastien Delafond <seb@...ian.org>)
[SECURITY] [DSA 4216-1] prosody security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 4214-1] zookeeper security update (Moritz Muehlenhoff <jmm@...ian.org>)
APPLE-SA-2018-06-01-3 iCloud for Windows 7.5 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[CORE-2018-0004] - Quest KACE System Management Appliance Multiple Vulnerabilities (Core Security Advisories Team <advisories@...esecurity.com>)
[SECURITY] [DSA 4217-1] wireshark security update (Moritz Muehlenhoff <jmm@...ian.org>)
MachForm Multiple Vulnerabilities CVE-2018-6409/CVE-2018-6410/CVE-2018-6411 (Amine Taouirsa <taouirsa@...il.com>)
[SECURITY] [DSA 4191-2] redmine regression update (Salvatore Bonaccorso <carnil@...ian.org>)
APPLE-SA-2018-06-01-7 iTunes 12.7.5 for Windows (Apple Product Security <product-security-noreply@...ts.apple.com>)
[slackware-security] git (SSA:2018-152-01) (Slackware Security Team <security@...ckware.com>)
APPLE-SA-2018-06-01-4 iOS 11.4 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2018-06-01-1 macOS High Sierra 10.13.5, Security Update 2018-003 Sierra, Security Update 2018-003 El Capitan (Apple Product Security <product-security…)
[CORE-2018-0002] - Quest DR Series Disk Backup Multiple Vulnerabilities (Core Security Advisories Team <advisories@...esecurity.com>)
APPLE-SA-2018-06-01-5 watchOS 4.3.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2018-06-01-6 tvOS 11.4 (Apple Product Security <product-security-noreply@...ts.apple.com>)

June 6 (1 message)

Ignite Realtime Openfire Version 3.7.1 Reflected Cross Site Scripting (CVE-2018-11688) (yavuz atlas <yavatlas@...il.com>)

June 7 (2 messages)

[SECURITY] [DSA 4218-1] memcached security update (Salvatore Bonaccorso <carnil@...ian.org>)
[slackware-security] mozilla-firefox (SSA:2018-157-01) (Slackware Security Team <security@...ckware.com>)

June 8 (3 messages)

DefenseCode ThunderScan SAST Advisory: WordPress Contact Form Maker Plugin Multiple Security Vulnerabilities (Defense Code <defensecode@...ensecode.com>)
DefenseCode ThunderScan SAST Advisory: WordPress Form Maker Plugin Multiple Security Vulnerabilities (Defense Code <defensecode@...ensecode.com>)
[SECURITY] [DSA 4219-1] jruby security update (Sebastien Delafond <seb@...ian.org>)

June 11 (10 messages)

Gridbox extension for Joomla! <= 2.4.0 Reflected Cross Site Scripting (XSS) (yavuz atlas <yavatlas@...il.com>)
[SECURITY] [DSA 4223-1] gnupg1 security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 4224-1] gnupg security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 4221-1] libvncserver security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4222-1] gnupg2 security update (Salvatore Bonaccorso <carnil@...ian.org>)
[slackware-security] gnupg2 (SSA:2018-159-01) (Slackware Security Team <security@...ckware.com>)
[SECURITY] [DSA 4220-1] firefox-esr security update (Moritz Muehlenhoff <jmm@...ian.org>)
SensioLabs Symfony version 3.3.6 - Cross-Site Scripting (Reflect) (ch.sangsakul@...il.com)
[SECURITY] [DSA 4225-1] openjdk-7 security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SRP-2018-01] Reverse engineering tools for ST DVB chipsets (public release) (Security Explorations <contact@...urity-explorations.com>)

June 12 (6 messages)

AST-2018-007: Infinite loop when reading iostreams ("Asterisk Security Team" <security@...erisk.org>)
AST-2018-008: PJSIP endpoint presence disclosure when using ACL ("Asterisk Security Team" <security@...erisk.org>)
[SECURITY] [DSA 4226-1] perl security update (Salvatore Bonaccorso <carnil@...ian.org>)
DefenseCode ThunderScan SAST Advisory: WordPress Ultimate Form Builder Lite Plugin Multiple Vulnerabilities (XSS and SQ… (Defense Code <defensecode@...ensecode.c…)
DefenseCode ThunderScan SAST Advisory: WordPress WP Google Map Plugin Multiple SQL injection Security Vulnerabilities (Defense Code <defensecode@...ensecode.co…)
[SECURITY] [DSA 4227-1] plexus-archiver security update (Salvatore Bonaccorso <carnil@...ian.org>)

June 13 (3 messages)

CSNC-2018-021 - Vert.x - HTTP Header Injection (Advisories <advisories@...pass-security.com>)
Samsung Web Viewer for Samsung DVR Reflected Cross Site Scripting (XSS) CVE-2018-11689 (yavuz atlas <yavatlas@...il.com>)
Multiple Security Issues in Ecos Secure Boot Stick (SBS) (Michael Rossberg <michael.rossberg@...ilmenau.de>)

June 15 (5 messages)

APPLE-SA-2018-06-13-01 Xcode 9.4.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
WebKitGTK+ and WPE WebKit Security Advisory WSA-2018-0005 (Michael Catanzaro <mcatanzaro@...lia.com>)
[SECURITY] [DSA 4228-1] spip security update (Sebastien Delafond <seb@...ian.org>)
CALL FOR PAPERS - INTEL SECURITY CONFERENCE (iSecCon) 2018 ("Branco, Rodrigo" <rodrigo.branco@...el.com>)
CA20180614-01: Security Notice for CA Privileged Access Manager ("Williams, Ken" <Ken.Williams@...com>)

June 18 (5 messages)

[security bulletin] MFSBGN03809 rev.1 - Universal CMDB, Deserialization Java Objects and CSRF (cyber-psrt@...rofocus.com)
[SECURITY] [DSA 4230-1] redis security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4229-1] strongswan security update (Yves-Alexis Perez <corsac@...ian.org>)
[SECURITY] [DSA 4231-1] libgcrypt20 security update (Salvatore Bonaccorso <carnil@...ian.org>)
[security bulletin] MFSBGN03810 rev.1 - Universal CMDB, Deserialization Java Objects and CSRF (cyber-psrt@...rofocus.com)

June 21 (4 messages)

XSS in Canopy login page (RYT <me@...ntzj.com>)
[slackware-security] gnupg (SSA:2018-170-01) (Slackware Security Team <security@...ckware.com>)
[SECURITY] [DSA 4232-1] xen security update (Moritz Muehlenhoff <jmm@...ian.org>)
FreeBSD Security Advisory FreeBSD-SA-18:07.lazyfpu (FreeBSD Security Advisories <security-advisories@...ebsd.org>)

June 25 (2 messages)

[SECURITY] [DSA 4233-1] bouncycastle security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4234-1] lava-server security update (Moritz Muehlenhoff <jmm@...ian.org>)

June 26 (2 messages)

KL-001-2018-008 : HPE VAN SDN Unauthenticated Remote Root Vulnerability (KoreLogic Disclosures <disclosures@...elogic.com>)
[slackware-security] mozilla-firefox (SSA:2018-176-01) (Slackware Security Team <security@...ckware.com>)

June 27 (1 message)

PRTG < 18.2.39 Command Injection ("Josh Berry" <josh.berry@...ewatch.org>)

June 28 (6 messages)

TP-Link TL-WR841N v13: CSRF (CVE-2018-12574) (Tim Coen <tc.coen@...il.com>)
[SECURITY] [DSA 4235-1] firefox-esr security update (Moritz Muehlenhoff <jmm@...ian.org>)
TP-Link TL-WR841N v13: Broken Authentication (CVE-2018-12575) (Tim Coen <tc.coen@...il.com>)
[SECURITY] [DSA 4236-1] xen security update (Moritz Muehlenhoff <jmm@...ian.org>)
APPLE-SA-2018-06-27-1 SwiftNIO 1.8.0 (Apple Product Security <product-security-noreply@...ts.apple.com>)
TP-Link TL-WR841N v13: Authenticated Blind Command Injection (CVE-2018-12577) (Tim Coen <tc.coen@...il.com>)

67 messages