bugtraq mailing list - 2015/05

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2015/05

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹	²	³
⁴ 27	⁵ 5	⁶ 15	⁷ 16	⁸ 4	⁹	¹⁰
¹¹ 8	¹² 6	¹³ 10	¹⁴ 4	¹⁵ 3	¹⁶	¹⁷
¹⁸ 2	¹⁹ 9	²⁰ 13	²¹ 5	²² 7	²³	²⁴
²⁵ 7	²⁶ 1	²⁷ 5	²⁸ 6	²⁹ 7	³⁰	³¹

Messages by day:

May 4 (27 messages)

[SECURITY] [DSA 3242-1] chromium-browser security update (Michael Gilbert <mgilbert@...ian.org>)
[SECURITY] [DSA 3243-1] libxml-libxml-perl security update (Salvatore Bonaccorso <carnil@...ian.org>)
Code Injection in Epicor Retail Store 3.2.03.01.008 (webmaster@...ephzeng.com)
[SECURITY] [DSA 3244-1] owncloud security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 3245-1] ruby1.8 security update (Alessandro Ghedini <ghedo@...ian.org>)
[SECURITY] [DSA 3246-1] ruby1.9.1 security update (Alessandro Ghedini <ghedo@...ian.org>)
[SECURITY] [DSA 3247-1] ruby2.1 security update (Alessandro Ghedini <ghedo@...ian.org>)
[SECURITY] [DSA 3248-1] libphp-snoopy security update (Moritz Muehlenhoff <jmm@...ian.org>)
PhotoWebsite v3.1 iOS - File Include Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Grindr 2.1.1 iOS Bug Bounty #2 - Denial of Service Software Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Grindr v2.1.1 iOS - (eMail) Session Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Grindr v2.1.1 iOS Bounty #1 - (Session) Auth Bypass Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Cisco (Newsroom) - Client Side Cross Site Scripting Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
HUAWEI MobiConnect 23.9.17.216 - Privilege Escalation Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[ MDVSA-2015:220 ] curl (security@...driva.com)
[ MDVSA-2015:219 ] curl (security@...driva.com)
[SECURITY] [DSA 3249-1] jqueryui security update (Sebastien Delafond <seb@...ian.org>)
[ MDVSA-2015:221 ] clamav (security@...driva.com)
[ MDVSA-2015:222 ] ppp (security@...driva.com)
[ MDVSA-2015:223 ] directfb (security@...driva.com)
[ MDVSA-2015:224 ] ruby (security@...driva.com)
[ MDVSA-2015:225 ] cherokee (security@...driva.com)
ESA-2015-077: EMC SourceOne Email Management Account Lockout (Security Alert <Security_Alert@....com>)
[ MDVSA-2015:226 ] fcgi (security@...driva.com)
European Cyber Security Challenge 2015 (Ivan Buetler <ivan.buetler@...c.ch>)
ESA-2015-084: EMC AutoStart Packet Injection Vulnerability (Security Alert <Security_Alert@....com>)
[SECURITY] [DSA 3250-1] wordpress security update (Alessandro Ghedini <ghedo@...ian.org>)

May 5 (5 messages)

[CVE-2014-8146/8147] - ICU heap and integer overflows / I-C-U-FAIL (Pedro Ribeiro <pedrib@...il.com>)
vPhoto-Album v4.2 iOS - File Include Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Fortinet FortiAnalyzer & FortiManager - Client Side Cross Site Scripting Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[ MDVSA-2015:227 ] mariadb (security@...driva.com)
[SECURITY] [DSA 3251-1] dnsmasq security update (Salvatore Bonaccorso <carnil@...ian.org>)

May 6 (15 messages)

F5 BIG-IQ Enumeration of users and Information Disclosure (jplopezy@...il.com)
[SECURITY] CVE-2014-0230: Apache Tomcat DoS (Mark Thomas <markt@...che.org>)
Arbitrary Variable Overwrite in eShop WordPress Plugin (High-Tech Bridge Security Research <advisory@...ridge.ch>)
[ MDVSA-2015:228 ] nodejs (security@...driva.com)
[ MDVSA-2015:229 ] net-snmp (security@...driva.com)
[ MDVSA-2015:230 ] squid (security@...driva.com)
PDF Converter & Editor 2.1 iOS - File Include Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
TORNADO Computer Trading CMS - SQL Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Advisory: Filezilla FTP server is vulnerable to FTP PORT bounce (Amit Klein <aksecurity@...il.com>)
Cisco Security Advisory: Cisco UCS Central Software Arbitrary Command Execution Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@cis…)
CSRF/XSS In Embed ArticlesWordpress Plugin (kingkaustubh@...com)
CSRF/XSSIn Ad_InSerter Wordpress (kingkaustubh@...com)
CSRF/XSS In Manage Engine Asset Explorer (kingkaustubh@...com)
CSRF/XSS In ClickBank ads Wordpress Plugin (kingkaustubh@...com)
CSRF/XSS In Ultimate Profile Builder by CMSLive Wordpress Plugin (kingkaustubh@...com)

May 7 (16 messages)

[SECURITY] [DSA 3252-1] sqlite3 security update (Moritz Muehlenhoff <jmm@...ian.org>)
Alienvault OSSIM/USM Multiple Vulnerabilities (Peter Lapp <lappsec@...il.com>)
[SE-2014-02] Some additional GAE Java security sandbox bypasses (Security Explorations <contact@...urity-explorations.com>)
APPLE-SA-2015-05-06-1 Safari 8.0.6, Safari 7.1.6, and Safari 6.2.6 (Apple Product Security <product-security-noreply@...ts.apple.com>)
F5 ASM JSON Profile Bypass (Peter Lapp <lappsec@...il.com>)
[SYSS-2015-017] BullGuard Internet Security - Authentication Bypass (matthias.deeg@...s.de)
[SYSS-2015-019] BullGuard Antivirus - Authentication Bypass (matthias.deeg@...s.de)
[SYSS-2015-018] BullGuard Premium Protection - Authentication Bypass (matthias.deeg@...s.de)
[ MDVSA-2015:231 ] perl-XML-LibXML (security@...driva.com)
Wordpress Twenty Fifteen Theme - DOM XSS Vulnerability - CVE-2015-3429 (Onur Yilmaz <onur@...sparker.com>)
Yahoo eMarketing Bug Bounty #31 - Cross Site Scripting Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Album Streamer v2.0 iOS - Directory Traversal Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Grindr v2.1.1 iOS & Account System - Breach Attack Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[security bulletin] HPSBUX03194 rev.1 - HP-UX running sendmail(1M), Remote Disclosure of Information (security-alert@...com)
CSRF/XSS in embed-articles Wordpress Plugin (kingkaustubh@...com)
CSRF/XSS In Ad_Button Wordpress (kingkaustubh@...com)

May 8 (4 messages)

[SECURITY] [DSA 3253-1] pound security update (Thijs Kinkhorst <thijs@...ian.org>)
[SECURITY] [DSA 3251-2] dnsmasq regression update (Salvatore Bonaccorso <carnil@...ian.org>)
[ MDVSA-2015:232 ] libtasn1 (security@...driva.com)
Pimcore v3.0.5 CMS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)

May 11 (8 messages)

[security bulletin] HPSBGN03328 rev.1 - Network Virtualization for HP LoadRunner and Performance Center, Remote Information Disclosure (security-alert@...com)
Sqlbuddy Directory Traversal Read Arbitrary Files Vulnerability (apparitionsec@...il.com)
Sqlbuddy Path Traversal Vulnerability (hyp3rlinx@...ervista.org)
[SECURITY] [DSA 3254-1] suricata security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 3255-1] zeromq3 security update (Alessandro Ghedini <ghedo@...ian.org>)
[SECURITY] [DSA 3256-1] libtasn1-6 security update (Salvatore Bonaccorso <carnil@...ian.org>)
[oCERT-2015-006] dcraw input sanitization errors (Andrea Barisani <lcars@...rt.org>)
[security bulletin] HPSBGN03329 rev.1 - HP SDN VAN Controller, Remote Denial of Service (DoS), Distributed Denial of Service (DDoS) (security-alert@...com)

May 12 (6 messages)

[SECURITY] [DSA 3257-1] mercurial security update (Salvatore Bonaccorso <carnil@...ian.org>)
[slackware-security] mariadb (SSA:2015-132-01) (Slackware Security Team <security@...ckware.com>)
[slackware-security] wpa_supplicant (SSA:2015-132-03) (Slackware Security Team <security@...ckware.com>)
[slackware-security] mysql (SSA:2015-132-02) (Slackware Security Team <security@...ckware.com>)
[security bulletin] HPSBMU03330 rev.1 - HP Matrix Operating Environment (MOE) running glibc on Linux, Remote Disclosure of Information (security-alert@...com)
[SECURITY] [DSA 3258-1] quassel security update (Alessandro Ghedini <ghedo@...ian.org>)

May 13 (10 messages)

[slackware-security] mozilla-firefox (SSA:2015-132-04) (Slackware Security Team <security@...ckware.com>)
SEC Consult SA-20150513-0 :: Multiple critical vulnerabilities in WSO2 Identity Server (SEC Consult Vulnerability Lab <research@...-consult.com>)
Cisco Security Advisory: Command Injection Vulnerability in Multiple Cisco TelePresence Products (Cisco Systems Product Security Incident Response Team <psirt@…)
Concrete5 Security Advisory - Multiple XSS Vulnerabilities - CVE-2015-2250 (Onur Yilmaz <onur@...sparker.com>)
[SECURITY] [DSA 3259-1] qemu security update (Moritz Muehlenhoff <jmm@...ian.org>)
Web India Solutions CMS 2015 - SQL Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Cisco Security Advisory: Multiple Vulnerabilities in Cisco TelePresence TC and TE Software (Cisco Systems Product Security Incident Response Team <psirt@...co.…)
[CORE-2015-0009] - SAP LZC/LZH Compression Multiple Vulnerabilities (CORE Advisories Team <advisories@...esecurity.com>)
[SECURITY] [DSA 3260-1] iceweasel security update (Moritz Muehlenhoff <jmm@...ian.org>)
Server buffer overflow in Pure Faction <= 3.0c (soulsgetnothing@...mail.comtyg*)

May 14 (4 messages)

Certificate trust vulnerability in Websense Content Gateway (Steve Shockley <steve.shockley@...ckley.net>)
Sidu 5.2 Admin XSS Vulnerability (apparitionsec@...il.com)
SEC Consult SA-20150514-0 :: Multiple vulnerabilities in Loxone Smart Home (part 2) (SEC Consult Vulnerability Lab <research@...-consult.com>)
[SECURITY] CVE-2014-7810: Apache Tomcat Security Manager Bypass (Mark Thomas <markt@...che.org>)

May 15 (3 messages)

phpMyAdmin 4.4.6 Man-In-the-Middle API Github (submit@...ec.org)
[SE-2014-02] Unconfirmed / unpatched vulnerabilities in Google App Engine (Security Explorations <contact@...urity-explorations.com>)
[SECURITY] [DSA 3261-1] libmodule-signature-perl security update (Salvatore Bonaccorso <carnil@...ian.org>)

May 18 (2 messages)

ESA-2015-087 EMC Document Sciences xPression SQL Injection Vulnerability (Security Alert <Security_Alert@....com>)
[slackware-security] mozilla-thunderbird (SSA:2015-137-01) (Slackware Security Team <security@...ckware.com>)

May 19 (9 messages)

CRUCMS Crucial Networking - SQL Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Wireless Photo Transfer v3.0 iOS - File Include Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
iClassSchedule 1.6 iOS & Android - Persistent UI Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
OYO File Manager 1.1 iOS&Android - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[SECURITY] [DSA 3262-1] xen security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 3175-2] kfreebsd-9 security update (Alessandro Ghedini <ghedo@...ian.org>)
WISE-FTP Software v8.0.2 - DLL Hijacking Vulnerability (metacom27@...il.com)
[security bulletin] HPSBPI03322 rev.1 - HP Access Control Software, Local Unauthorized Access (security-alert@...com)
APPLE-SA-2015-05-19-1 Watch OS 1.0.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)

May 20 (13 messages)

[security bulletin] HPSBGN03286 rev.1 - HP LoadRunner, Buffer Overflow (security-alert@...com)
[SECURITY] [DSA 3264-1] icedove security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 3263-1] proftpd-dfsg security update (Sebastien Delafond <seb@...ian.org>)
Staff FTP v3.04 Software - DLL Hijacking Vulnerability (metacom27@...il.com)
ManageEngine EventLog Analyzer V:10.0 CSRF Vulnerability (akashchavan0708@...il.com)
HiDisk 2.4 iOS - (currentFolderPath) Persistent Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Staff FTP v3.04 Software - DLL Hijacking Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[SECURITY] [DSA 3265-1] zendframework security update (David Prévot <david@...apin.org>)
WISE-FTP Software v8.0.2 - DLL Hijacking Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Stored XSS in WP Photo Album Plus WordPress Plugin (High-Tech Bridge Security Research <advisory@...ridge.ch>)
Eisbär SCADA (All Versions - iOS, Android & W8) - Persistent UI Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[security bulletin] HPSBUX03334 SSRT102000 rev.1 - HP-UX Running OpenSSL, Remote Denial of Service (DoS) and Other Vulnerabilities (security-alert@...com)
[security bulletin] HPSBUX03333 SSRT102029 rev.1 - HP-UX Running NTP, Remote Denial of Service (DoS), or Other Vulnerabilities (security-alert@...com)

May 21 (5 messages)

[SECURITY] [DSA 3261-2] libmodule-signature-perl regression update (Salvatore Bonaccorso <carnil@...ian.org>)
CVE for Apple's ECDHE-ECDSA SecureTransport bug? (Jeffrey Walton <noloader@...il.com>)
CVE-2015-1833 (Jackrabbit WebDAV XXE vulnerability) (Julian Reschke <julian.reschke@...enbytes.de>)
Webgrind XSS vulnerability (hyp3rlinx@...il.com)
[SECURITY] [DSA 3266-1] fuse security update (Salvatore Bonaccorso <carnil@...ian.org>)

May 22 (7 messages)

CVE-2015-4039 - WordPress WP Membership plugin [Stored XSS] (pan.vagenas@...il.com)
CVE-2015-4038 - WordPress WP Membership plugin [Privilege escalation] (pan.vagenas@...il.com)
[security bulletin] HPSBMU03336 rev.1- HP Helion OpenStack affected by VENOM, Denial of Service (DoS), Execution of Arbitrary Code (security-alert@...com)
[SECURITY] [DSA 3267-1] chromium-browser security update (Michael Gilbert <mgilbert@...ian.org>)
[SECURITY] [DSA 3268-1] ntfs-3g security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 3270-1] postgresql-9.4 security update (Christoph Berg <myon@...ian.org>)
[CORE-2015-0010] - Sendio ESP Information Disclosure Vulnerability (CORE Advisories Team <advisories@...esecurity.com>)

May 25 (7 messages)

[security bulletin] HPSBGN03325 rev.1 - HP SiteScope, Remote Elevation of Privilege (security-alert@...com)
[SECURITY] [DSA 3271-1] nbd security update (Alessandro Ghedini <ghedo@...ian.org>)
[SECURITY] [DSA 3272-1] ipsec-tools security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 3265-2] zendframework regression update (Alessandro Ghedini <ghedo@...ian.org>)
Command injection vulnerability in Synology Photo Station ("Securify B.V." <lists@...urify.nl>)
Reflected Cross-Site Scripting in Synology DiskStation Manager ("Securify B.V." <lists@...urify.nl>)
Synology Photo Station multiple Cross-Site Scripting vulnerabilities ("Securify B.V." <lists@...urify.nl>)

May 26 (1 message)

[SECURITY] [DSA 3273-1] tiff security update (Moritz Muehlenhoff <jmm@...ian.org>)

May 27 (5 messages)

CVE-2015-4084 - WordPress Free Counter Plugin [Stored XSS] (pan.vagenas@...il.com)
[SECURITY] [DSA 3268-2] ntfs-3g security update (Salvatore Bonaccorso <carnil@...ian.org>)
Thycotic Password Manager Secret Server iOS Application - MITM SSL Certificate Vulnerability (David Coomber <davidcoomber.infosec@...il.com>)
[Onapsis Security Advisory 2015-007] SAP HANA Log Injection Vulnerability (Onapsis Research Labs <research@...psis.com>)
[Onapsis Security Advisory 2015-006] SAP HANA Information Disclosure via SQL IMPORT FROM statement (Onapsis Research Labs <research@...psis.com>)

May 28 (6 messages)

DbNinja 3.2.6 Flash XSS Vulnerabilities (apparitionsec@...il.com)
DbNinja 3.2.6 Flash XSS Vulnerabilities (apparitionsec@...il.com)
[SEARCH-LAB advisory] More than fifty vulnerabilities in D-Link NAS and NVR devices (Gergely Eberhardt <gergely.eberhardt@...rch-lab.hu>)
CVE-2015-1835: ... (Dirk-Willem van Gulik on behalf of Apache Cordova <dirkx@...weaving.org>)
Audacity 2.0.5 contains Arbitrary DLL Injection Code Execution (mystyle_rahul@...oo.co.in)
[security bulletin] HPSBHF03340 rev.1 - HP ThinPro Linux and HP Smart Zero Core running HP Easy Setup Wizard, Local Unauthorized Access, E… (security-alert@...com)

May 29 (7 messages)

[SECURITY] [DSA 3274-1] virtualbox security update (Moritz Muehlenhoff <jmm@...ian.org>)
JSPMyAdmin SQL Injection, CSRF & XSS Vulnerabilities (apparitionsec@...il.com)
[security bulletin] HPSBGN03332 rev.1 - HP Operations Analytics running SSLv3, Remote Denial of Service (DoS), Disclosure of Information (security-alert@...com)
[security bulletin] HPSBMU03263 rev.3 - HP Insight Control running OpenSSL, Remote Disclosure of Information (security-alert@...com)
[security bulletin] HPSBMU03267 rev.2 - HP Matrix Operating Environment and HP CloudSystem Matrix running OpenSSL, Remote Disclosure of In… (security-alert@...com)
[security bulletin] HPSBMU03261 rev.2 - HP Systems Insight Manager running OpenSSL on Linux and Windows, Remote Disclosure of Information (security-alert@...com)
[security bulletin] HPSBMU03223 rev.1 - HP Insight Control server provisioning running SSLv3, Remote Denial of Service (DoS), Disclosure o… (security-alert@...com)

160 messages

Powered by blists - more mailing lists