bugtraq mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2016/05

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹
² 10	³ 6	⁴ 6	⁵ 9	⁶ 2	⁷	⁸
⁹ 3	¹⁰ 7	¹¹ 9	¹² 6	¹³ 6	¹⁴	¹⁵
¹⁶ 8	¹⁷ 10	¹⁸ 11	¹⁹ 7	²⁰	²¹	²²
²³ 4	²⁴ 3	²⁵ 8	²⁶ 4	²⁷ 4	²⁸	²⁹
³⁰ 10	³¹ 9

Messages by day:

May 2 (10 messages)

[security bulletin] HPSBGN03547 rev.3 - HPE Helion Eucalyptus Node Controller and other Helion Eucalyptus Components using glibc, Remote … (security-alert@....com)
[slackware-security] ntp (SSA:2016-120-01) (Slackware Security Team <security@...ckware.com>)
[slackware-security] php (SSA:2016-120-02) (Slackware Security Team <security@...ckware.com>)
[slackware-security] subversion (SSA:2016-121-01) (Slackware Security Team <security@...ckware.com>)
Exploit-DB Captcha Bypass (Rahul Pratap Singh <techno.rps@...il.com>)
[SECURITY] [DSA 3562-1] tardiff security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 3563-1] poppler security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 3564-1] chromium-browser security update (Michael Gilbert <mgilbert@...ian.org>)
[SECURITY] [DSA 3565-1] botan1.10 security update (Sebastien Delafond <seb@...ian.org>)
ESA-2016-041: RSA Data Loss Prevention Multiple Vulnerabilities (Security Alert <Security_Alert@....com>)

May 3 (6 messages)

[slackware-security] mercurial (SSA:2016-123-01) (Slackware Security Team <security@...ckware.com>)
CVE-2016-4338: Zabbix Agent 3.0.1 mysql.size shell command injection (Timo Juhani Lindfors <timo.lindfors@....fi>)
NetCommWireless HSPA 3G10WVE Wireless Router Multiple vulnerabilities (bhadresh.patel@...pag.com)
[SECURITY] [DSA 3566-1] openssl security update (Alessandro Ghedini <ghedo@...ian.org>)
LSE Leading Security Experts GmbH - LSE-2016-02-03 - OXID eShop Path Traversal Vulnerability (LSE-Advisories <advisories@...xperts.de>)
Swagger Editor v2.9.9 "description" Key DOM-based Cross-Site Scripting (Julien Ahrens <info@...security.com>)

May 4 (6 messages)

[slackware-security] openssl (SSA:2016-124-01) (Slackware Security Team <security@...ckware.com>)
CVE-2016-2784: CMS Made Simple < 2.1.3 & < 1.12.2 Web server Cache Poisoning (Lab I-Tracing <lab@...racing.com>)
Cisco Security Advisory: Cisco FirePOWER System Software Packet Processing Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Tea…)
Cisco Security Advisory: Cisco TelePresence XML Application Programming Interface Authentication Bypass Vulnerability (Cisco Systems Product Security Incident R…)
Cisco Security Advisory: Cisco Adaptive Security Appliance with FirePOWER Services Kernel Logging Denial of Service Vuln… (Cisco Systems Product Security Incident…)
APPLE-SA-2016-05-03-1 Xcode 7.3.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)

May 5 (9 messages)

[SECURITY] [DSA 3567-1] libpam-sshauth security update (Salvatore Bonaccorso <carnil@...ian.org>)
ESA-2016-051: Patch 14 for RSA® Authentication Manager 8.1 SP1 to Address Multiple Vulnerabilities (Security Alert <Security_Alert@....com>)
Cisco Security Advisory: Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: May 2016 (Cisco Systems Product Security Incident Response Team <psirt@ci…)
FreeBSD Security Advisory FreeBSD-SA-16:17.openssl (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
[SECURITY] [DSA 3568-1] libtasn1-6 security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 3569-1] openafs security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 3570-1] mercurial security update (Salvatore Bonaccorso <carnil@...ian.org>)
[security bulletin] HPSBMU03584 rev.1 - HPE Network Node Manager I (NNMi), Multiple Remote Vulnerabilities (security-alert@....com)
Re: NetCommWireless HSPA 3G10WVE Wireless Router Multiple vulnerabilities (bhadresh.patel@...pag.com)

May 6 (2 messages)

ManageEngine Applications Manager Build No: 12700 Information Disclosure and Un-Authenticated SQL injection. (Saif El-Sherei <saif@...sepost.com>)
Re: ManageEngine Applications Manager Build No: 12700 Information Disclosure and Un-Authenticated SQL injection. (Saif El-Sherei <saif@...herei.com>)

May 9 (3 messages)

[SECURITY] [DSA 3571-1] ikiwiki security update (Moritz Muehlenhoff <jmm@...ian.org>)
WordPress Plugin event-registration 6.02.02: SQL-Injection and persistent XSS (mail@...haelhelwig.de)
[SECURITY] [DSA 3572-1] websvn security update (Salvatore Bonaccorso <carnil@...ian.org>)

May 10 (7 messages)

[SECURITY] [DSA 3573-1] qemu security update (Salvatore Bonaccorso <carnil@...ian.org>)
[security bulletin] HPSBUX03577 SSRT102172 rev.1 - HP-UX VxFS, Local Unauthorized Access to Files (security-alert@....com)
Wordpress Truemag Theme - Client Side Cross Site Scripting Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Skype Manager - (Email Change) Filter Bypass Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Notes v4.5 iOS - Arbitrary File Upload Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Stanford University - Multiple SQL Injection Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Trend Micro Direct Pass - Filter Bypass & Cross Site Scripting Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

May 11 (9 messages)

Intuit QuickBooks 2007 - 2016 Arbitrary Code Execution (support@...grideon.com)
[SECURITY] [DSA 3574-1] libarchive security update (Salvatore Bonaccorso <carnil@...ian.org>)
[security bulletin] HPSBUX03596 rev.1 - HPE HP-UX running CIFS Server (Samba), Remote Access Restriction Bypass, Unauthorized Access (security-alert@....com)
[security bulletin] HPSBUX03574 rev.1 - HPE HP-UX CIFS-Server (Samba), Remote Access Restriction Bypass, Authentication bypass, Denial of… (security-alert@....com)
BulletProof Security 53.3 - Security Advisory - Multiple XSS Vulnerabilities (Onur Yilmaz <onur@...sparker.com>)
[slackware-security] imagemagick (SSA:2016-132-01) (Slackware Security Team <security@...ckware.com>)
[SECURITY] [DSA 3565-2] monotone ovito pdns qtcreator softhsm regression update (Sebastien Delafond <seb@...ian.org>)
[security bulletin] HPSBHF03592 rev.1 - HPE VAN SDN Controller OVA using OpenSSL, Multiple Remote Vulnerabilities (security-alert@....com)
[security bulletin] HPSBNS03581 rev.2 - HPE NonStop Servers running Samba (NS-Samba), Multiple Remote Vulnerabilities (security-alert@....com)

May 12 (6 messages)

Re: [slackware-security] imagemagick (SSA:2016-132-01) (U2ME236@...IL.COM)
[security bulletin] HPSBST03586 rev.1 - HPE 3PAR OS, Remote Unauthorized Modification (security-alert@....com)
[security bulletin] HPSBST03598 rev.1 - HPE 3PAR OS using glibc, Remote Denial of Service (DoS), Arbitrary Code Execution (security-alert@....com)
[security bulletin] HPSBST03599 rev.1 - HPE 3PAR OS running OpenSSH, Remote Denial of Service (DoS), Access Restriction Bypass (security-alert@....com)
[slackware-security] mozilla-thunderbird (SSA:2016-132-01) (Slackware Security Team <security@...ckware.com>)
[security bulletin] HPSBGN03597 rev.1 - HPE Cloud Optimizer (Virtualization Performance Viewer) using glibc Remote Denial of Service (DoS… (security-alert@....com)

May 13 (6 messages)

[SECURITY] [DSA 3575-1] libxstream-java security update (Moritz Muehlenhoff <jmm@...ian.org>)
[security bulletin] HPSBMU03591 rev.1 - HPE Server Migration Pack, Remote Denial of Service (DoS) (security-alert@....com)
[security bulletin] HPSBMU03589 rev.1 - HPE Version Control Repository Manager (VCRM), Remote Denial of Service (DoS) (security-alert@....com)
May 2016 - HipChat Server - Critical Security Advisory (David Black <dblack@...assian.com>)
[security bulletin] HPSBMU03590 rev.1 - HPE Systems Insight Manager (SIM) on Windows and Linux, Multiple Vulnerabilities (security-alert@....com)
[SECURITY] [DSA 3576-1] icedove security update (Moritz Muehlenhoff <jmm@...ian.org>)

May 16 (8 messages)

eXtplorer v2.1.9 Archive Path Traversal (hyp3rlinx@...os.com)
dns_dhcp Web Interface SQL Injection (hyp3rlinx@...os.com)
[SECURITY] [DSA 3577-1] jansson security update (Alessandro Ghedini <ghedo@...ian.org>)
[SECURITY] [DSA 3578-1] libidn security update (Alessandro Ghedini <ghedo@...ian.org>)
[SECURITY] [DSA 3579-1] xerces-c security update (Salvatore Bonaccorso <carnil@...ian.org>)
[ERPSCAN-16-009] SAP xMII - directory traversal vulnerability (ERPScan inc <erpscan.online@...il.com>)
[ERPSCAN-16-008] SAP NetWeaver AS JAVA - XSS vulnerability in ProxyServer servlet (ERPScan inc <erpscan.online@...il.com>)
[SECURITY] [DSA 3580-1] imagemagick security update (Luciano Bello <luciano@...ian.org>)

May 17 (10 messages)

Security advisory for Bugzilla 5.0.3 and 4.4.12 (LpSolit@...il.com)
APPLE-SA-2016-05-16-1 tvOS 9.2.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2016-05-16-2 iOS 9.3.2 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2016-05-16-3 watchOS 2.2.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2016-05-16-4 OS X El Capitan 10.11.5 and Security Update 2016-003 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2016-05-16-5 Safari 9.1.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2016-05-16-6 iTunes 12.4 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[SECURITY] [DSA 3581-1] libndp security update (Salvatore Bonaccorso <carnil@...ian.org>)
[security bulletin] HPSBHF03594 rev.1 - HPE ConvergedSystem and AppSystem for SAP HANA using OpenSSL, Multiple Remote Vulnerabilities (security-alert@....com)
WSO2 SOA Enablement Server - Reflected Cross-Site Scripting (Etnies <kuba25101990@...il.com>)

May 18 (11 messages)

[security bulletin] HPSBGN03587 rev.1 - HPE Helion OpenStack using OpenSSL and Open vSwitch, Remote Arbitrary Command Execution, Denial o… (security-alert@....com)
FreeBSD Security Advisory FreeBSD-SA-16:18.atkbd (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-16:19.sendmsg (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
[SECURITY] [DSA 3582-1] expat security update (Salvatore Bonaccorso <carnil@...ian.org>)
[security bulletin] HPSBHF03578 rev.1 - HPE ConvergedSystem for SAP HANA using glibc, Multiple Remote Vulnerabilities (security-alert@....com)
[security bulletin] HPSBHF03579 rev.1 - HPE ConvergedSystem for SAP HANA using OpenSSL, Multiple Remote Vulnerabilities (security-alert@....com)
Cisco Security Advisory: Cisco Web Security Appliance HTTP POST Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@ci…)
Cisco Security Advisory: Cisco Web Security Appliance Cached Range Request Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Tea…)
Cisco Security Advisory: Cisco Web Security Appliance HTTP Length Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@…)
Cisco Security Advisory: Cisco Web Security Appliance Connection Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@c…)
[security bulletin] HPSBGN03602 rev.1 - HPE RESTful Interface Tool, Local Disclosure of Information (security-alert@....com)

May 19 (7 messages)

[SECURITY] [DSA 3583-1] swift-plugin-s3 security update (Moritz Muehlenhoff <jmm@...ian.org>)
TYPO3 RemoveXSS.php vulnerability versions 6.2.19 and 7.6.4 (mandy@...ison-gurkha.com)
[ERPSCAN-16-010] SAP NetWeaver AS JAVA – information disclosure vulnerability (ERPScan inc <erpscan.online@...il.com>)
[ERPSCAN-16-011] SAP NetWeaver AS JAVA – SQL injection vulnerability (ERPScan inc <erpscan.online@...il.com>)
[SEARCH-LAB advisory] LG NAS N1A1 multiple vulnerabilities in Familycast (Gergely Eberhardt <gergely.eberhardt@...rch-lab.hu>)
[SECURITY] [DSA 3584-1] librsvg security update (Salvatore Bonaccorso <carnil@...ian.org>)
[security bulletin] HPSBGN03564 rev.1 - HPE Release Control using Java Deserialization, Remote Code Execution (security-alert@....com)

May 23 (4 messages)

[slackware-security] curl (SSA:2016-141-01) (Slackware Security Team <security@...ckware.com>)
[RCESEC-2016-001] Postfix Admin v2.93 Generic POST Cross-Site Request Forgeries (Julien Ahrens <info@...security.com>)
[SECURITY] [DSA 3585-1] wireshark security update (Moritz Muehlenhoff <jmm@...ian.org>)
[RCESEC-2016-002] XenAPI v1.4.1 for XenForo Multiple Unauthenticated SQL Injections (Julien Ahrens <info@...security.com>)

May 24 (3 messages)

[SECURITY] [DSA 3586-1] atheme-services security update (Moritz Muehlenhoff <jmm@...ian.org>)
AfterLogic WebMail Pro ASP.NET < 6.2.7 Administrator Account Takover via XXE Injection (mehmet.ince@...ictuseurope.com)
MSA-2016-01: PowerFolder Remote Code Execution Vulnerability (Advisories Advisories <advisories@...waisecurity.de>)

May 25 (8 messages)

[security bulletin] HPSBGN03605 rev.1 - HPE Service Manager, Remote Disclosure of Information (security-alert@....com)
[slackware-security] libarchive (SSA:2016-145-01) (Slackware Security Team <security@...ckware.com>)
Open-Xchange Security Advisory 2016-05-25 (Martin Heiland <martin.heiland.lists@...n-xchange.com>)
Cisco Security Advisory: Cisco Products IPv6 Neighbor Discovery Crafted Packet Denial of Service Vulnerability (Cisco Systems Product Security Incident Response…)
VMWare vSphere Web Client Flash XSS (apparitionsec@...il.com)
[security bulletin] HPSBMU03601 rev.1 - HPE Insight Control server deployment using OpenSSL, Multiple Vulnerabilities (security-alert@....com)
[security bulletin] HPSBUX03606 rev.1 - HPE HP-UX running Apache Tomcat 7, Multiple Remote Vulnerabilities (security-alert@....com)
[security bulletin] HPSBMU03600 rev.1 - HPE Insight Control server provisioning using OpenSSL, Remote Denial of Service (DoS) (security-alert@....com)

May 26 (4 messages)

[security bulletin] HPSBMU03611 rev.1 - HPE Matrix Operating Environment on Windows and Linux, Multiple Remote Vulnerabilities (security-alert@....com)
[security bulletin] HPSBGN03610 rev.1 - HPE IceWall Products using OpenSSL, Remote Denial of Service (DoS), Arbitrary Code Execution (security-alert@....com)
ESA-2016-061: EMC Isilon OneFS SMB Signing Vulnerability (Security Alert <Security_Alert@....com>)
[CVE-2016-4434] Apache Tika XML External Entity vulnerability (Tim Allison <tallison@...che.org>)

May 27 (4 messages)

[CVE-2016-2175] Apache PDFBox XML External Entity vulnerability (Andreas Lehmkuehler <lehmi@...che.org>)
[SECURITY] [DSA 3587-1] libgd2 security update (Salvatore Bonaccorso <carnil@...ian.org>)
[CVE-2016-3094] Apache Qpid Java Broker denial of service vulnerability (Lorenz Quack <quack.lorenz@...il.com>)
[CVE-2016-4432] Apache Qpid Java Broker - authentication bypass (Keith W <keith.wall@...il.com>)

May 30 (10 messages)

[CVE-2016-4945] Login Form Hijacking Vulnerability in Citrix NetScaler Gateway (Daniel Schliebner <DSchliebner@...sicon.com>)
[slackware-security] libxml2 (SSA:2016-148-01) (Slackware Security Team <security@...ckware.com>)
[slackware-security] libxslt (SSA:2016-148-02) (Slackware Security Team <security@...ckware.com>)
[slackware-security] php (SSA:2016-148-03) (Slackware Security Team <security@...ckware.com>)
Multiple Vulnerabilities in Intex Wireless N150 Easy Setup Router (mohitreload@...il.com)
[SECURITY] [DSA 3588-1] symfony security update (Luciano Bello <luciano@...ian.org>)
[oCERT 2016-001] Jetty path sanitization issues (Daniele Bianco <danbia@...rt.org>)
WebKitGTK+ Security Advisory WSA-2016-0004 (Carlos Alberto Lopez Perez <clopez@...lia.com>)
[SECURITY] [DSA 3589-1] gdk-pixbuf security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] Lorex ECO DVR Hard coded password (andrew.hofmans@...il.com)

May 31 (9 messages)

[slackware-security] imagemagick (SSA:2016-152-01) (Slackware Security Team <security@...ckware.com>)
[slackware-security] mozilla-thunderbird (SSA:2016-152-02) (Slackware Security Team <security@...ckware.com>)
[RT-SA-2015-012] XML External Entity Expansion in Paessler PRTG Network Monitor (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[RT-SA-2016-004] Websockify: Remote Code Execution via Buffer Overflow (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[RT-SA-2016-005] Unauthenticated File Upload in Relay Ajax Directory Manager may Lead to Remote Command Execution (RedTeam Pentesting GmbH <release@...team-pen…)
FreeBSD Security Advisory FreeBSD-SA-16:21.43bsd (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-16:23.libarchive (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-16:22.libarchive (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-16:20.linux (FreeBSD Security Advisories <security-advisories@...ebsd.org>)

142 messages