bugtraq mailing list - 2016/11

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2016/11

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 7	²	³ 3	⁴	⁵	⁶
⁷ 5	⁸ 17	⁹ 3	¹⁰ 7	¹¹	¹²	¹³
¹⁴ 10	¹⁵ 4	¹⁶ 1	¹⁷ 3	¹⁸ 4	¹⁹	²⁰
²¹ 15	²² 2	²³ 3	²⁴ 6	²⁵ 5	²⁶	²⁷
²⁸ 5	²⁹ 2	³⁰ 4

Messages by day:

November 1 (7 messages)

[HITB-Announce] HITB2017AMS CFP (Hafez Kamal <aphesz@...kinthebox.org>)
OS-S 2016-23 - Local DoS: Linux Kernel EXT4 Error Handling (EXT4 calling panic()) (Ralf Spenneberg <info@...t.de>)
CfP and Special Session :: CyberSec2017 (Jackie Blanco <jackie@...wc.info>)
[slackware-security] x11 (SSA:2016-305-02) (Slackware Security Team <security@...ckware.com>)
[slackware-security] mariadb (SSA:2016-305-03) (Slackware Security Team <security@...ckware.com>)
[slackware-security] php (SSA:2016-305-04) (Slackware Security Team <security@...ckware.com>)
Microsoft Internet Explorer 9 MSHTML CAttrArray use-after-free details (Berend-Jan Wever <berendj@...ver.nl>)

November 3 (3 messages)

Cisco Security Advisory: Cisco ASR 900 Series Aggregation Services Routers Buffer Overflow Vulnerability (Cisco Systems Product Security Incident Response Team …)
Cisco Security Advisory: Cisco Meeting Server and Meeting App Buffer Underflow Vulnerability (Cisco Systems Product Security Incident Response Team <psirt@...co…)
[security bulletin] HPSBUX03664 SSRT110248 rev.1 - HP-UX BIND Service running named, Remote Denial of Service (DoS) (security-alert@....com)

November 7 (5 messages)

Axessh 4.2.2 Denial Of Service (apparitionsec@...il.com/hyp3rlinx)
[security bulletin] HPSBUX03665 rev.1 - HP-UX Tomcat-based Servlet Engine, Remote Denial of Service (DoS) and URL Redirection (security-alert@....com)
MySQL / MariaDB / PerconaDB - Root Privilege Escalation Exploit ( CVE-2016-6664 / CVE-2016-5617 ) (Dawid Golunski <dawid@...alhackers.com>)
KL-001-2016-008 : Sophos Web Appliance Privilege Escalation (KoreLogic Disclosures <disclosures@...elogic.com>)
KL-001-2016-009 : Sophos Web Appliance Remote Code Execution (KoreLogic Disclosures <disclosures@...elogic.com>)

November 8 (17 messages)

[security bulletin] HPSBGN03657 rev.1 - HPE Network Node Manager i (NNMi) Software, Local Code Execution (security-alert@....com)
[security bulletin] HPSBGN03656 rev.1 - HPE Network Node Manager i (NNMi) Software using Java Deserialization, Remote Arbitrary Code Exe… (security-alert@....com)
Rapid PHP Editor CSRF Remote Command Execution (apparitionsec@...il.com/hyp3rlinx)
Axessh 4.2.2 Denial Of Service (apparitionsec@...il.com/hyp3rlinx)
WinaXe v7.7 FTP 'Server Ready' CMD Remote Buffer Overflow (apparitionsec@...il.com/hyp3rlinx)
Faraznet Cms Cross-Site Scripting Vulnerability (iedb.team@...il.com)
Faraznet Cms Cross-Site Scripting Vulnerability (iedb.team@...il.com)
Edusson (Robotdon) BB - Filter Bypass & Persistent Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Edusson (Robotdon) - Client Side Cross Site Scripting Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Schoolhos CMS v2.29 - (kelas) Data Siswa SQL Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[security bulletin] HPSBGN03643 rev.1 - HPE KeyView using Filter SDK, Remote Code Execution (security-alert@....com)
[CVE-2016-6563 / VU#677427]: Dlink DIR routers HNAP Login stack buffer overflow (Pedro Ribeiro <pedrib@...il.com>)
[SECURITY] [DSA 3707-1] openjdk-7 security update (Moritz Muehlenhoff <jmm@...ian.org>)
Cross Site Scripting Vulnerability In Verint Impact 360 (sanehsingh@...trolcase.com)
Cross-Site Scripting vulnerability in Quotes Collection WordPress Plugin (Summer of Pwnage <lists@...urify.nl>)
Persistent Cross-Site Scripting in WassUp Real Time Analytics WordPress Plugin (Summer of Pwnage <lists@...urify.nl>)
Cross-Site Scripting in Calendar WordPress Plugin (Summer of Pwnage <lists@...urify.nl>)

November 9 (3 messages)

URL Redirection Vulnerability In Verint Impact 360 (sanehsingh@...trolcase.com)
[security bulletin] HPSBGN03670 rev.1 - HPE Business Service Management (BSM) using Java Deserialization, Remote Code Execution (security-alert@....com)
[SECURITY] [DSA 3709-1] libxslt security update (Salvatore Bonaccorso <carnil@...ian.org>)

November 10 (7 messages)

MSIE 9-11 MSHTML PROPERTYDESC::HandleStyleComponentProperty OOB read details (Berend-Jan Wever <berendj@...ver.nl>)
Blind SQL Injection Vulnerability in Exponent CMS 2.4.0 (nickyccwu@...cent.com)
WININET CHttpHeaderParser::ParseStatusLine out-of-bounds read details (Berend-Jan Wever <berendj@...ver.nl>)
Secunia Research: Oracle Outside In "VwStreamRead()" Buffer Overflow Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Oracle Outside In "GetTxObj()" Use-After-Free Vulnerability (Secunia Research <remove-vuln@...unia.com>)
CVE-2016-6809 – Arbitrary Code Execution Vulnerability in Apache Tika’s MATLAB Parser (<tallison@...che.org>)
Secunia Research: Microsoft Windows OTF Parsing Table Encoding Record Offset Vulnerability (Secunia Research <remove-vuln@...unia.com>)

November 14 (10 messages)

[SECURITY] [DSA 3711-1] mariadb-10.0 security update (Salvatore Bonaccorso <carnil@...ian.org>)
CVE-2016-9277: A IDX Out of Bound vulnerability in systemui can make crash and ui restart (unlimitsec@...il.com)
WHM Panel Mail Delivery Reports crash database Vulnerability (iedb.team@...il.com)
[CVE-2016-8736] Apache Openmeetings RMI Registry Java Deserialization RCE (Maxim Solodovnik <solomax@...che.org>)
WHM Panel Mail Delivery Reports crash database Vulnerability (iedb.team@...il.com)
CVE-2015-0040: Microsoft Internet Explorer 11 MSHTML CMapElement::Notify use-after-free details (Berend-Jan Wever <berendj@...ver.nl>)
SEC Consult SA-20161114-0 :: Multiple vulnerabilities in I-Panda SolarEagle - Solar Controller Administration Software … (SEC Consult Vulnerability Lab <research…)
Multiple vulnerabilities in Barco Clickshare (<vincent.ruijter@....com>)
[security bulletin] HPSBGN03669 rev.1 - HPE SiteScope, Local Elevation of Privilege, Remote Denial of Service, Arbitrary Code Execution … (security-alert@....com)
[security bulletin] HPSBUX03665 rev.2 - HP-UX Tomcat-based Servlet Engine, Remote Denial of Service (DoS) and URL Redirection (security-alert@....com)

November 15 (4 messages)

CVE-2016-4484: - Cryptsetup Initrd root Shell (Hector Marco <hmarco@...rco.org>)
Actiontec WCB3000N (Telus Branded) Local Unauthenticated Privilege Elevation and Password Reset (Andrew Klaus <andrewklaus@...il.com>)
Re: [oss-security] CVE-2016-4484: - Cryptsetup Initrd root Shell (Leo Famulari <leo@...ulari.name>)
[security bulletin] HPSBST03671 rev.1 - HPE StoreEver MSL6480 Tape Library, Remote Unauthorized Disclosure of Information (security-alert@....com)

November 16 (1 message)

CVE-2015-2482 MSIE 8 jscript RegExpBase::FBadHeader use-after-free details (Berend-Jan Wever <berendj@...ver.nl>)

November 17 (3 messages)

[security bulletin] HPSBGN03676 rev.1 - HPE Helion OpenStack Glance Image Service, Remote Denial of Service (DoS) (security-alert@....com)
[SECURITY] [DSA 3716-1] firefox-esr security update (Moritz Muehlenhoff <jmm@...ian.org>)
Executable installers are vulnerable^WEVIL (case 41): EmsiSoft's Emergency Kit allows elevation of privilege for everybo… ("Stefan Kanthak" <stefan.kanthak@...go.…)

November 18 (4 messages)

[ERPSCAN-16-032] SAP Telnet Console – Directory traversal vulnerability (ERPScan inc <erpscan.online@...il.com>)
[ERPSCAN-16-031] SAP NetWeaver AS ABAP – directory traversal using READ DATASET (ERPScan inc <erpscan.online@...il.com>)
Reason Core Security v1.2.0.1 - Unqoted Path Privilege Escalation Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
CVE-2016-3247 Microsoft Edge CTextExtractor::GetBlockText OOB read details (Berend-Jan Wever <berendj@...ver.nl>)

November 21 (15 messages)

[slackware-security] mozilla-firefox (SSA:2016-323-01) (Slackware Security Team <security@...ckware.com>)
Cross-Site Scripting in Huge IT Portfolio Gallery WordPress Plugin (Summer of Pwnage <lists@...urify.nl>)
Cross-Site Scripting in Check Email WordPress Plugin (Summer of Pwnage <lists@...urify.nl>)
Stored Cross-Site Scripting in WP Canvas - Shortcodes WordPress Plugin (Summer of Pwnage <lists@...urify.nl>)
Putty Cleartext Password Storage (apparitionsec@...il.com/hyp3rlinx)
[security bulletin] HPSBHF03675 rev.1 - HPE Integrated Lights-Out 3 and 4 (iLO 3, iLO 4), Cross-Site Scripting (XSS) (security-alert@....com)
Multiple issues in OpManager 12100 & 12200 (Michael Heydon <michael@...ydon.net>)
[RCESEC-2016-007] AppFusions Doxygen for Atlassian Confluence v1.3.0 getTemporaryDirectory() tempId Path Traversal/Remo… (Julien Ahrens <julien.ahrens@...securit…)
[RCESEC-2016-007] AppFusions Doxygen for Atlassian Confluence v1.3.0 getTemporaryDirectory() tempId Path Traversal/Remote … (Julien Ahrens <info@...security.com>)
[RCESEC-2016-008] AppFusions Doxygen for Atlassian Confluence v1.3.2 renderContent() Full Path Information Disclosure (Julien Ahrens <info@...security.com>)
[RCESEC-2016-009] AppFusions Doxygen for Atlassian Confluence v1.3.2 renderContent() Persistent Cross-Site Scripting (Julien Ahrens <info@...security.com>)
Nginx (Debian-based distros) - Root Privilege Escalation (CVE-2016-1247) (Dawid Golunski <dawid@...alhackers.com>)
[ERPSCAN-16-034] SAP NetWeaver AS JAVA - XXE vulnerability in BC-BMT-BPM-DSK component (ERPScan inc <erpscan.online@...il.com>)
[SECURITY] [DSA 3719-1] wireshark security update (Sebastien Delafond <seb@...ian.org>)
Web vulnerabilities in Siemens S7-300/S7-400/CP343-1/CP443-1 (Andrea Barisani <andrea@...ersepath.com>)

November 22 (2 messages)

CVE-2015-0050: Microsoft Internet Explorer 8 MSHTML SRunPointer::SpanQualifier/RunType OOB read details (Berend-Jan Wever <berendj@...ver.nl>)
[CORE-2016-0007] - TP-LINK TDDP Multiple Vulnerabilities (CORE Advisories Team <advisories@...esecurity.com>)

November 23 (3 messages)

[SYSS-2016-072] Olympia Protect 9061 - Missing Protection against Replay Attacks (matthias.deeg@...s.de)
[SYSS-2016-106] EASY HOME Alarmanlagen-Set - Missing Protection against Replay Attacks (matthias.deeg@...s.de)
CVE-2015-1251: Chrome blink SpeechRecognitionController use-after-free details (Berend-Jan Wever <berendj@...ver.nl>)

November 24 (6 messages)

[security bulletin] HPSBHF03673 rev.1 - HPE Comware 5 and Comware 7 Network Products using SSL/TLS, Multiple Remote Vulnerabilities (security-alert@....com)
[CVE-2016-7098] GNU Wget < 1.18 Access List Bypass / Race Condition (Dawid Golunski <dawid@...alhackers.com>)
[SYSS-2016-066] Multi Kon Trade M2B GSM Wireless Alarm System - Missing Protection against Replay Attacks (gerhard.klostermeier@...s.de)
[SYSS-2016-064] Multi Kon Trade M2B GSM Wireless Alarm System - Improper Restriction of Excessive Authentication Attempts (CWE-307… (gerhard.klostermeier@...s.de)
[SYSS-2016-071] Blaupunkt Smart GSM Alarm SA 2500 Kit - Missing Protection against Replay Attacks (matthias.deeg@...s.de)
[SYSS-2016-107] EASY HOME Alarmanlagen-Set - Cryptographic Issues (CWE-310) (gerhard.klostermeier@...s.de)

November 25 (5 messages)

WorldCIST'17 - Submission deadline: November 27 ("ML" <marialemos72@...il.com>)
[SECURITY] [DSA 3723-1] gst-plugins-good1.0 security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 3724-1] gst-plugins-good0.10 security update (Salvatore Bonaccorso <carnil@...ian.org>)
Call for Participation - 5th International Conference on Cyber Security, Cyber Welfare and Digital Forensic (Jackie Blanco <jackie@...wc.info>)
Call for Participation - 5th International Conference on Cyber Security, Cyber Welfare and Digital Forensic (Jackie Blanco <jackie@...wc.info>)

November 28 (5 messages)

CVE 2016-6803: Apache OpenOffice Unquoted Search Path Vulnerability ("Apache OpenOffice Security" <orcmid@...che.org>)
WorldCIST'2017 - Submission deadline: November 30 ("ML" <marialemos72@...il.com>)
Core FTP LE v2.2 Remote SSH/SFTP Buffer Overflow (apparitionsec@...il.com/hyp3rlinx)
[SECURITY] [DSA 3725-1] icu security update (Luciano Bello <luciano@...ian.org>)
SEC Consult SA-20161128-0 :: DoS & heap-based buffer overflow in Guidance Software EnCase Forensic (SEC Consult Vulnerability Lab <research@...-consult.com>)

November 29 (2 messages)

Google Chrome Accessibility blink::Node corruption details (Berend-Jan Wever <berendj@...ver.nl>)
XSS in tooltip plugin of Zurb Foundation 5 (Winni Neessen <winni@...ecure.so>)

November 30 (4 messages)

[RT-SA-2016-003] Less.js: Compilation of Untrusted LESS Files May Lead to Code Execution through the JavaScript Less Co… (RedTeam Pentesting GmbH <release@...tea…)
[security bulletin] HPSBHF03682 rev.1 - HPE Comware 7 Network Products using SSL/TLS, Local Gain Privileged Access (security-alert@....com)
[FOXMOLE SA 2016-05-02] e107 Content Management System (CMS) - Multiple Issues (FOXMOLE Advisories <advisories@...mole.com>)
[security bulletin] HPSBGN03677 rev.1 - HPE Network Automation using RPCServlet and Java Deserialization, Remote Code Execution (security-alert@....com)

106 messages

Powered by blists - more mailing lists