bugtraq mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2012/11

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 11	² 7	³	⁴
⁵ 9	⁶ 6	⁷ 2	⁸ 4	⁹ 2	¹⁰	¹¹
¹² 2	¹³ 10	¹⁴ 6	¹⁵ 2	¹⁶ 4	¹⁷	¹⁸
¹⁹ 6	²⁰ 8	²¹ 3	²² 4	²³ 6	²⁴	²⁵
²⁶ 6	²⁷ 1	²⁸ 4	²⁹ 6	³⁰ 14

Messages by day:

November 1 (11 messages)

NetCat CMS v5.0.1 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
PrestaShop <= 1.5.1 Persistent XSS (David Sopas <davidsopas@...il.com>)
PG Dating Pro v1.0 CMS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
VaM Shop v1.69 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Medium risk security flaws in Konqueror (Tim Brown <timb@...-dimension.org.uk>)
XSS in dokeos 2.1.1 (marcelavbx@...il.com)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified MeetingPlace Web Conferencing (Cisco Systems Product Security Incident Response Team <psirt@c…)
Cisco Security Advisory: Cisco Prime Data Center Network Manager Remote Command Execution Vulnerability (Cisco Systems Product Security Incident Response Team <…)
[SECURITY] [DSA 2570-1] openoffice.org security update (Yves-Alexis Perez <corsac@...ian.org>)
Re: Security Advisory - TP-LINK TL-WR841N LFI - [UPDATE] (osoriojr@...ux.com)
[ MDVSA-2012:169 ] java-1.6.0-openjdk (security@...driva.com)

November 2 (7 messages)

APPLE-SA-2012-11-01-1 iOS 6.0.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2012-11-01-2 Safari 6.0.2 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[security bulletin] HPSBMU02827 SSRT100924 rev.1 - HP Performance Insight with Sybase, Remote Denial of Service (DoS) and Loss of Data (security-alert@...com)
[security bulletin] HPSBMU02815 SSRT100715 rev.4 - HP SiteScope SOAP Security Issues, Remote Disclosure of Information, Remote Code Execut… (security-alert@...com)
Re: [Full-disclosure] XSS, LFI and SQL Injection Vulnerabilities in Achievo (Henri Salo <henri@...v.fi>)
[security bulletin] HPSBUX02824 SSRT100970 rev.2 - HP-UX Running Java, Remote Execution of Arbitrary Code, and Other Vulnerabilities (security-alert@...com)
[CVE-2012-5692] Invision Power Board <= 3.3.4 "unserialize()" PHP Code Execution Vulnerability (n0b0d13s@...il.com)

November 5 (9 messages)

[ MDVSA-2012:170 ] firefox (security@...driva.com)
[SECURITY] [DSA 2571-1] libproxy security update (Raphael Geissert <geissert@...ian.org>)
[SECURITY] [DSA 2572-1] iceape security update (Thijs Kinkhorst <thijs@...ian.org>)
PR11-07 Multiple peristent XSS, XSS, XSRF, offsite redirection and information disclosure flaws within CheckPoint/Sofaware f… (research <research@...checkup.com>)
Vulnerable MSVC++ 2008 runtime libraries distributed with and installed by eM client ("Stefan Kanthak" <stefan.kanthak@...go.de>)
iCompel Digital Signage risks (Chris S <chris.sfocus.list@...il.com>)
XSS in answer my question plugin (marcelavbx@...il.com)
VideoLAN VLC Media Player <= 2.0.4 Crash Bug (bingxuefenggu@....com)
[CVE-2012-5777]EmpireCMS Template Parser Remote PHP Code Execution Vulnerability (machuanlei <phpsec@...mail.com>)

November 6 (6 messages)

Multiple Vulnerabilities in LibreOffice (advisory@...ridge.com)
SQL Injection Vulnerability in OrangeHRM (advisory@...ridge.com)
multiple critical vulnerabilities in sophos products (Tavis Ormandy <taviso@...xchg8b.com>)
Wisecracker 1.0 - A high performance distributed cryptanalysis framework (Vikas N Kumar <walburn@...il.com>)
[security bulletin] HPSBHF02699 SSRT100592 rev.2 - HP ProLiant SL Advanced Power Manager (SL-APM), Remote User Validation Failure (security-alert@...com)
Vulnerable, superfluous/outdated/deprecated/superseded 3rd party OCXs and DLLs distributed by and installed with Dataram… ("Stefan Kanthak" <stefan.kanthak@...go.…)

November 7 (2 messages)

Sql injection in AJAX post Search wordpress plugin (marcelavbx@...il.com)
Cross-Site Request Forgery (CSRF) in CMS Made Simple (advisory@...ridge.com)

November 8 (4 messages)

Cisco Security Advisory: Cisco Nexus 1000V Series Switch Software Release 4.2(1)SV1(5.2) Virtual Security Gateway Bypass… (Cisco Systems Product Security Incident…)
Cisco Security Advisory: Cisco Secure Access Control System TACACS+ Authentication Bypass Vulnerability (Cisco Systems Product Security Incident Response Team …)
APPLE-SA-2012-11-07-1 QuickTime 7.7.3 (Apple Product Security <product-security-noreply@...ts.apple.com>)
Vulnerability Report on AWCM 2.2 (Sooel Postman <sonpostman@...il.com>)

November 9 (2 messages)

Cisco Security Advisory: Cisco Ironport Appliances Sophos Anti-virus Vulnerabilities (Cisco Systems Product Security Incident Response Team <psirt@...co.com>)
[ MDVSA-2012:171 ] icedtea-web (security@...driva.com)

November 12 (2 messages)

[SECURITY] [DSA 2573-1] radsecproxy security update (Luciano Bello <luciano@...ian.org>)
BananaDance Wiki b2.2 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)

November 13 (10 messages)

[DC-2012-11-001] DefenseCode ThunderScan PHP Advisory: Wordpress WP e-Commerce Plugin Multiple Security Vulnerabilities (DefenseCode <defensecode@...ensecode.co…)
Eventy CMS v1.8 Plus - Multiple Web Vulnerablities (Vulnerability Lab <research@...nerability-lab.com>)
Weak password encryption on Huawei products (roberto.paleari@...ze.net)
[OVSA20121112] OpenVAS Manager Vulnerable To Command Injection (Tim Brown <timb@...nvas.org>)
Zoner Photo Studio v15 b3 - Buffer Overflow Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Re: [OVSA20121112] OpenVAS Manager Vulnerable To Command Injection (Tim Brown <timb@...nvas.org>)
ESA-2012-055: RSA® Data Protection Manager Multiple Vulnerabilities (Security Alert <Security_Alert@....com>)
Reflective XSS in uk cookie plugin (nauty.me04@...il.com)
Re: Wisecracker 1.0 - A high performance distributed cryptanalysis framework (Jann Horn <jannhorn@...glemail.com>)
Re: Wisecracker 1.0 - A high performance distributed cryptanalysis framework (Vikas N Kumar <walburn@...il.com>)

November 14 (6 messages)

0-day vulnerabilities in Call of Duty MW3 and CryEngine 3 (ReVuln <info@...uln.com>)
Re: [oss-security] Re: [OVSA20121112] OpenVAS Manager Vulnerable To Command Injection (Jan Lieskovsky <jlieskov@...hat.com>)
Multiple vulnerabilities in BabyGekko (advisory@...ridge.com)
Security advisory for Bugzilla 4.4rc1, 4.2.4, 4.0.9 and 3.6.12 (LpSolit@...il.com)
iDev Rentals v1.0 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Re: Re: [oss-security] Re: [OVSA20121112] OpenVAS Manager Vulnerable To Command Injection (Michal Ambroz <rebus@...nam.cz>)

November 15 (2 messages)

SEC Consult SA-20121115-0 :: Applicure dotDefender WAF format string vulnerability (SEC Consult Vulnerability Lab <research@...-consult.com>)
[CVE-2012-5858] [CVE-2012-5859] DoS/Authorization Bypass - Kies Air (cjlacayo@...il.com)

November 16 (4 messages)

[SECURITY] [DSA 2574-1] typo3-src security update (Florian Weimer <fw@...eb.enyo.de>)
DC4420 - London DEFCON - November meet - Tuesday 20th November (alien DC4420 <alien@...420.org>)
[SE-2012-01] Security vulnerabilities in Java SE (details released) (Security Explorations <contact@...urity-explorations.com>)
Open-Realty CMS 2.5.8 (2.x.x) <= Cross Site Request Forgery (CSRF) Vulnerability (YGN Ethical Hacker Group <lists@...g.net>)

November 19 (6 messages)

[SECURITY] [DSA 2575-1] tiff security update (Nico Golde <nion@...ian.org>)
[ MDVSA-2012:172 ] libproxy (security@...driva.com)
Akeni LAN v1.2.118 - Filter Bypass Vulnerability (Local) (Vulnerability Lab <research@...nerability-lab.com>)
Manage Engine Exchange Reporter v4.1 - Multiple Web Vulnerabilites (Vulnerability Lab <research@...nerability-lab.com>)
CVE-2012-4366: Insecure default WPA2 passphrase in multiple Belkin wireless routers (Jakob Lell <jakob@...oblell.com>)
n.runs-SA-2012.004 - SPLUNK Unauthenticated remote DoS (<security@...ns.com>)

November 20 (8 messages)

[security bulletin] HPSBHF02821 SSRT100934 rev.1 - HP Integrated Lights-Out iLO3 and iLO4, Remote Disclosure of Information (security-alert@...com)
SonicWALL CDP 5040 v6.x - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Re: [SE-2012-01] Security vulnerabilities in Java SE (details released) (Security Explorations <contact@...urity-explorations.com>)
OSSIM 4.0.2 open-source SIEM solution does not verify .deb signatures (roman.fiedler@....ac.at)
FW: =| Security Advisory - TP-LINK TL-WR841N XSS (Cross Site Scripting) |= ("Matan Azugi" <matan@...sec.co.il>)
Wordpress Facebook Survey v1 - SQL Injection Vulnerability (Vulnerability Lab <admin@...nerability-lab.com>)
Re: CVE-2012-4366: Insecure default WPA2 passphrase in multiple Belkin wireless routers (Jakob Lell <jakob@...oblell.com>)
n.runs-SA-2012.004 - SPLUNK Unauthenticated remote DoS (<security@...ns.com>)

November 21 (3 messages)

ManageEngine ServiceDesk 8.0 - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Multiple vulnerabilities in dotProject (advisory@...ridge.com)
[ MDVSA-2012:173 ] firefox (security@...driva.com)

November 22 (4 messages)

[slackware-security] mozilla-firefox (SSA:2012-326-02) (Slackware Security Team <security@...ckware.com>)
[slackware-security] seamonkey (SSA:2012-326-01) (Slackware Security Team <security@...ckware.com>)
[slackware-security] mozilla-thunderbird (SSA:2012-326-03) (Slackware Security Team <security@...ckware.com>)
[ MDVSA-2012:174 ] libtiff (security@...driva.com)

November 23 (6 messages)

FreeBSD Security Advisory FreeBSD-SA-12:06.bind (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-12:07.hostapd (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-12:08.linux (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
XSS Vulnerability in Simple Slider Wordpress Plugin (nauty.me04@...il.com)
Twitter App 5.0 vulnerable to eavesdropping (Carlos Reventlov <carlos@...entlov.com>)
[SECURITY] [DSA 2576-1] trousers security update (Yves-Alexis Perez <corsac@...ian.org>)

November 26 (6 messages)

[oCERT-2012-001] multiple implementations denial-of-service via MurmurHash algorithm collision (Andrea Barisani <lcars@...rt.org>)
VUPEN Security Research - Mozilla Firefox "DocumentViewerImpl" Class Remote Use-After-Free Vulnerability (VUPEN Security Research <advisories@...en.com>)
ESA-2012-057: EMC Smarts Network Configuration Manager Multiple Vulnerabilities (Security Alert <Security_Alert@....com>)
ESA-2012-054: RSA ® Adaptive Authentication (On-Premise) Cross-Site Scripting Vulnerabilities (Security Alert <Security_Alert@....com>)
[DC-2012-11-002] DefenseCode ThunderScan ASP.Net C# Advisory: BugTracker.Net Multiple Security Vulnerabilities (DefenseCode <defensecode@...ensecode.com>)
Forescout NAC (Network Access Control) multiple vulnerabilities ("Joseph Sheridan" <joe@...ctionis.com>)

November 27 (1 message)

[SE-2011-01] Additional materials released for SAT TV research (Security Explorations <contact@...urity-explorations.com>)

November 28 (4 messages)

[SECURITY] [DSA 2578-1] rssh security update (Yves-Alexis Perez <corsac@...ian.org>)
Re: rssh security announcement (Derek Martin <code@...zashack.org>)
Re: rssh security announcement (Russ Allbery <rra@...nford.edu>)
Re: rssh security announcement (Nico Kadel-Garcia <nkadel@...il.com>)

November 29 (6 messages)

[ MDVSA-2012:175 ] libssh (security@...driva.com)
Re: rssh security announcement (Russ Allbery <rra@...nford.edu>)
Oracle Exadata leaf switch logins (larry0@...com)
ideo Lead Form Plugin Cross-Site Scripting Vulnerabilities which affects Wordpress URL (nauty.me04@...il.com)
Wordpress Plugin Simple Gmail Login Stack Trace Vulnerability (nauty.me04@...il.com)
Safend Data Protector Multiple Vulnerabilities ("Joseph Sheridan" <joe@...ctionis.com>)

November 30 (14 messages)

VUPEN Security Research - Mozilla Firefox "imgRequestProxy" Remote Use-After-Free Vulnerability (VUPEN Security Research <advisories@...en.com>)
APPLE-SA-2012-11-29-1 Apple TV 5.1.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[SECURITY] [DSA 2579-1] apache2 security update (Stefan Fritsch <sf@...ian.org>)
SilverStripe CMS - Multiple Vulnerabilities - Security Advisory - SOS-12-011 ("Lists" <lists@...seofsecurity.com>)
NGS000193 Technical Advisory: DataArmor Full Disk Encryption Restricted Environment breakout (NCC Group Research <research@...group.com>)
NGS000107 Technical Advisory: Oracle Gridengine sgepasswd Buffer Overflow (NCC Group Research <research@...group.com>)
NGS000196 Technical Advisory: Nagios XI Network Monitor OS Command Injection (NCC Group Research <research@...group.com>)
NGS000194 Technical Advisory: Nagios XI Network Monitor Blind SQL Injection (NCC Group Research <research@...group.com>)
NGS000330 Technical Advisory: Squiz CMS File Path Traversal (NCC Group Research <research@...group.com>)
NGS000241 Technical Advisory: SysAid Helpdesk Pro Blind SQL Injection (NCC Group Research <research@...group.com>)
NGS000267 Technical Advisory: Symantec Messaging Gateway SSH with backdoor user account plus privilege escalation to r… (NCC Group Research <research@...group.c…)
NGS000266 Technical Advisory: Symantec Messaging Gateway Arbitrary file download is possible with a crafted URL (NCC Group Research <research@...group.com>)
NGS000268 Technical Advisory: Symantec Messaging Gateway - Out-of-band stored-XSS delivered by email (NCC Group Research <research@...group.com>)
NGS000263 Technical Advisory: Symantec Messaging Gateway Easy CSRF to add a backdoor-administrator (NCC Group Research <research@...group.com>)

123 messages