bugtraq mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2016/10

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹	²
³ 3	⁴ 5	⁵ 7	⁶ 5	⁷	⁸	⁹
¹⁰ 3	¹¹ 7	¹² 2	¹³ 2	¹⁴ 2	¹⁵	¹⁶
¹⁷ 2	¹⁸ 2	¹⁹ 1	²⁰ 5	²¹	²² 4	²³
²⁴ 2	²⁵ 2	²⁶ 4	²⁷	²⁸ 4	²⁹	³⁰
³¹ 2

Messages by day:

October 3 (3 messages)

CVE-2016-1240 - Tomcat packaging on Debian-based distros - Local Root Privilege Escalation (Dawid Golunski <dawid@...alhackers.com>)
[SECURITY] [DSA 3681-2] wordpress regression update (Yves-Alexis Perez <corsac@...ian.org>)
[SECURITY] [DSA 3684-1] libdbd-mysql-perl security update (Florian Weimer <fw@...eb.enyo.de>)

October 4 (5 messages)

TeempIp XSS Cookie Theft (apparitionsec@...il.com)
AuraDVD Ripper Professional v1.6.3 - DLL Hijacking Exploit (Vulnerability Lab <research@...nerability-lab.com>)
Serimux SSH Console Switch v2.4 - Multiple Cross Site Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
ESA-2016-063: EMC Replication Manager and Network Module for Microsoft Remote Code Execution Vulnerability (EMC Product Security Response Center <Security_Aler…)
ESA-2016-121: EMC Unisphere for VMAX and Solutions Enabler Virtual Appliances Multiple Vulnerabilities (EMC Product Security Response Center <Security_Alert@em…)

October 5 (7 messages)

Clean Master v1.0 - Unquoted Path Privilege Escalation (Vulnerability Lab <research@...nerability-lab.com>)
Cyberoam iview UTM v0.1.2.7 - (Ajax) XSS Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Cisco Security Advisory: Cisco NX-OS Software-Based Products Authentication, Authorization, and Accounting Bypass Vulner… (Cisco Systems Product Security Incident…)
Cisco Security Advisory: Cisco NX-OS Software Crafted DHCPv4 Packet Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psir…)
Cisco Security Advisory: Cisco NX-OS Software Malformed DHCPv4 Packet Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <ps…)
Cisco Security Advisory: Cisco NX-OS Border Gateway Protocol Denial of Service Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co…)
[security bulletin] HPSBGN03639 rev.1 - HPE KeyView, Remote Code Execution (security-alert@....com)

October 6 (5 messages)

[SECURITY] [DSA 3687-1] nspr security update (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 3688-1] nss security update (Florian Weimer <fw@...eb.enyo.de>)
KL-001-2016-004 : Cisco Firepower Threat Management Console Authenticated Denial of Service (KoreLogic Disclosures <disclosures@...elogic.com>)
KL-001-2016-005 : Cisco Firepower Threat Management Console Hard-coded MySQL Credentials (KoreLogic Disclosures <disclosures@...elogic.com>)
September 2016 - HipChat Plugin for various products - Critical Security Advisory (David Black <dblack@...assian.com>)

October 10 (3 messages)

[SYSS-2016-033] Microsoft Wireless Desktop 2000 - Insufficient Protection of Code (Firmware) and Data (Cryptographic Key) (matthias.deeg@...s.de)
[SYSS-2016-068] Fujitsu Wireless Keyboard Set LX901 - Cryptographic Issues (CWE-310), Missing Protection against Replay Attacks (matthias.deeg@...s.de)
Crashing Android devices with large Assisted-GPS Data Files [CVE-2016-5348] (Nightwatch Cybersecurity Research <research@...htwatchcybersecurity.com>)

October 11 (7 messages)

[SYSS-2016-043] Microsoft Wireless Desktop 2000 - Cryptographic Issues (CWE-310), Insufficient Protection against Replay Attacks (matthias.deeg@...s.de)
[SYSS-2016-043] Microsoft Wireless Desktop 2000 - Cryptographic Issues (CWE-310), Insufficient Protection against Replay Attacks (matthias.deeg@...s.de)
SEC Consult SA-20161011-0 :: XXE vulnerability in RSA Enterprise Compromise Assessment Tool (ECAT) (SEC Consult Vulnerability Lab <research@...-consult.com>)
[SEARCH-LAB advisory] AVTECH IP Camera, NVR, DVR multiple vulnerabilities (Gergely Eberhardt <gergely.eberhardt@...rch-lab.hu>)
Contenido v4.9.11 CMS - (Backend) Multiple XSS Vulnerabilities ("admin@...lution-sec.com" <admin@...lution-sec.com>)
Facebook API v2.1 - RFC6749 Open Redirect Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[security bulletin] HPSBPV03516 rev.2 - HP VAN SDN Controller, Multiple Vulnerabilities (security-alert@....com)

October 12 (2 messages)

Multiple Vulnerabilities in Plone CMS (Sebastian Perez <s3bap3@...il.com>)
Cisco Security Advisory: Cisco Meeting Server Client Authentication Bypass Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co.com…)

October 13 (2 messages)

ZendStudio IDE v13.5.1 Privilege Escalation (apparitionsec@...il.com)
Snort v2.9.7.0-WIN32 DLL Hijack (apparitionsec@...il.com)

October 14 (2 messages)

[security bulletin] HPSBNS03661 rev.1 - NonStop Backbox, Remote Disclosure of Information (security-alert@....com)
Evernote for Windows DLL Loading Remote Code Execution Vulnerability (mehta.himanshu21@...il.com)

October 17 (2 messages)

[SECURITY] [DSA 3693-1] libgd2 security update (Moritz Muehlenhoff <jmm@...ian.org>)
[ERPSCAN-16-030] SAP NetWeaver - buffer overflow vulnerability (ERPScan inc <erpscan.online@...il.com>)

October 18 (2 messages)

[SECURITY] [DSA 3694-1] tor security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 3695-1] quagga security update (Florian Weimer <fw@...eb.enyo.de>)

October 19 (1 message)

Cisco Security Advisory: Cisco ASA Software Identity Firewall Feature Buffer Overflow Vulnerability (Cisco Systems Product Security Incident Response Team <psi…)

October 20 (5 messages)

[security bulletin] HPSBGN03663 rev.1 - HPE ArcSight WINC Connector, Remote Code Execution (security-alert@....com)
Defense in depth -- the Microsoft way (part 45): filesystem redirection fails to redirect the application directory ("Stefan Kanthak" <stefan.kanthak@...go.de>)
[CVE-2016-5195] "Dirty COW" Linux privilege escalation vulnerability (dirtycow@...tcow.ninja)
Defense in depth -- the Microsoft way (part 44): complete failure of Windows Update ("Stefan Kanthak" <stefan.kanthak@...go.de>)
ESA-2016-111: EMC Avamar Data Store and Avamar Virtual Edition Privilege Escalation Vulnerability (EMC Product Security Response Center <Security_Alert@....com…)

October 22 (4 messages)

Oracle Netbeans IDE v8.1 Import Directory Traversal (apparitionsec@...il.com)
Puppet Enterprise Web Interface Authentication Redirect (apparitionsec@...il.com)
Puppet Enterprise Web Interface User Enumeration (apparitionsec@...il.com)
Puppet Enterprise Web Interface Authentication Redirect (hyp3rlinx@...os.com)

October 24 (2 messages)

[SECURITY] [DSA 3698-1] php5 security update (Salvatore Bonaccorso <carnil@...ian.org>)
APPLE-SA-2016-10-24-3 Safari 10.0.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)

October 25 (2 messages)

wincvs-2.0.2.4 Privilege Escalation (apparitionsec@...il.com)
CVE-2016-6804 Apache OpenOffice Windows Installer Untrusted Search Path ("Dennis E. Hamilton" <orcmid@...che.org>)

October 26 (4 messages)

FreeBSD Security Advisory FreeBSD-SA-16:15.sysarch [REVISED] (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
[SECURITY] [DSA 3701-1] nginx security update (Florian Weimer <fw@...eb.enyo.de>)
[SECURITY] [DSA 3700-1] asterisk security update (Moritz Muehlenhoff <jmm@...ian.org>)
CVE-2016-1240 - Tomcat packaging on Debian-based distros - Local Root Privilege Escalation (Dawid Golunski <dawid@...alhackers.com>)

October 28 (4 messages)

[security bulletin] HPSBHF3549 ThinkPwn UEFI BIOS SmmRuntime Escalation of Privilege (HP Security Alert <hp-security-alert@...com>)
[security bulletin] HPSBMU03653 rev.1 - HPE System Management Homepage (SMH), Remote Arbitrary Code Execution, Cross-Site Scripting (X… (security-alert@....com)
APPLE-SA-2016-10-27-3 iTunes 12.5.2 for Windows (Apple Product Security <product-security-noreply@...ts.apple.com>)
[SECURITY] [DSA 3701-2] nginx regression update (Salvatore Bonaccorso <carnil@...ian.org>)

October 31 (2 messages)

[SECURITY] [DSA 3691-2] ghostscript regression update (Salvatore Bonaccorso <carnil@...ian.org>)
October 2016 - Crowd - Critical Security Advisory (David Black <dblack@...assian.com>)

64 messages