bugtraq mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2017/07

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹	²
³ 5	⁴ 1	⁵ 1	⁶ 2	⁷ 7	⁸	⁹
¹⁰ 9	¹¹ 6	¹² 1	¹³ 7	¹⁴ 1	¹⁵	¹⁶
¹⁷	¹⁸	¹⁹ 1	²⁰ 10	²¹ 1	²²	²³
²⁴ 10	²⁵ 3	²⁶ 2	²⁷ 1	²⁸	²⁹ 1	³⁰
³¹

Messages by day:

July 3 (5 messages)

[slackware-security] kernel (SSA:2017-181-02) (Slackware Security Team <security@...ckware.com>)
[slackware-security] glibc (SSA:2017-181-01) (Slackware Security Team <security@...ckware.com>)
InsomniaX loader allows loading of arbitrary Kernel Extensions ("Securify B.V." <lists@...urify.nl>)
[CVE-2017-9313] Webmin 1.840 Multiple XSS Vulnerabilities (andys3c@...il.com)
[SECURITY] [DSA 3901-1] libgcrypt20 security update (Salvatore Bonaccorso <carnil@...ian.org>)

July 4 (1 message)

[slackware-security] Slackware 14.0 kernel (SSA:2017-184-01) (Slackware Security Team <security@...ckware.com>)

July 5 (1 message)

[security bulletin] HPSBMU02933 rev.3 - HPE SiteScope, issueSiebelCmd and loadFileContents SOAP Requests, Remote Code … (HPE Product Security Response Team <sec…)

July 6 (2 messages)

[SECURITY] [DSA 3902-1] jabberd2 security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 3903-1] tiff security update (Moritz Muehlenhoff <jmm@...ian.org>)

July 7 (7 messages)

KL-001-2017-011 : Barracuda WAF Internal Development Credential Disclosure (KoreLogic Disclosures <disclosures@...elogic.com>)
KL-001-2017-012 : Barracuda WAF Grub Password Complexity (KoreLogic Disclosures <disclosures@...elogic.com>)
KL-001-2017-014 : Barracuda WAF Support Tunnel Hijack (KoreLogic Disclosures <disclosures@...elogic.com>)
KL-001-2017-015 : Solarwinds LEM Hardcoded Credentials (KoreLogic Disclosures <disclosures@...elogic.com>)
Firefox v54.0.1 Denial Of Service (apparitionsec@...il.com)
[SYSS-2017-011] Office 365: Insufficient Session Expiration (CWE-613) (Micha Borrmann <micha.borrmann@...s.de>)
[ANNOUNCE] [SECURITY] CVE-2017-7660: Security Vulnerability in secure inter-node communication in Apache Solr (Shalin Shekhar Mangar <shalin@...che.org>)

July 10 (9 messages)

CVE-2017-10974 Yaws Web Server v1.91 Unauthenticated Remote File Disclosure (apparitionsec@...il.com (hyp3rlinx))
[slackware-security] php (SSA:2017-188-01) (Slackware Security Team <security@...ckware.com>)
[SECURITY] [DSA 3904-1] bind9 security update (Yves-Alexis Perez <corsac@...ian.org>)
[SECURITY] [DSA 3905-1] xorg-server security update (Moritz Muehlenhoff <jmm@...ian.org>)
[slackware-security] irssi (SSA:2017-190-01) (Slackware Security Team <security@...ckware.com>)
ToorCon 19 Call For Papers Closing This Week! (h1kari@...rcon.org)
[SECURITY] CVE-2017-5652 Apache Impala (incubating) Information Disclosure (Sailesh Mukil <sailesh@...che.org>)
CVE-2017-5640 Apache Impala (incubating) Information Disclosure (Sailesh Mukil <sailesh@...che.org>)
[security bulletin] HPESBNS03755 rev.1 - HPE NonStop Server using Samba, Multiple Remote Vulnerabilities (HPE Product Security Response Team <security-alert@hp…)

July 11 (6 messages)

[security bulletin] HPESBHF03745 rev.2 - HPE Intelligent Management Center (iMC) PLAT, Remote Code Execution (HPE Product Security Response Team <security-aler…)
[security bulletin] HPESBGN03762 rev.1 - HPE Network Node Manager i (NNMi) Software, Remote Bypass Security Restriction… (HPE Product Security Response Team <sec…)
[security bulletin] HPESBGN03763 rev.1 - HPE SiteScope, Disclosure of Sensitive Information, Bypass Security Restrictio… (HPE Product Security Response Team <sec…)
CVE-2017-4918: Code Injection in VMware Horizon’s macOS Client (Florian Bogner <florian@...ner.sh>)
[RT-SA-2017-011] Remote Command Execution in PDNS Manager (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[CVE request]linux kernel xfrm migrate out-of-bound access (bo Zhang <zhangbo5891001@...il.com>)

July 12 (1 message)

SEC Consult SA-20170712-0 :: Multiple critical vulnerabilities in AGFEO smart home ES 5xx/6xx products (SEC Consult Vulnerability Lab <research@...-consult.com…)

July 13 (7 messages)

[SECURITY] [DSA 3908-1] nginx security update (Moritz Muehlenhoff <jmm@...ian.org>)
CVE-2017-9789: Apache httpd 2.4 Read after free in mod_http2 (William A Rowe Jr <wrowe@...che.org>)
CVE-2017-9788: Uninitialized memory reflection in mod_auth_digest (William A Rowe Jr <wrowe@...che.org>)
CVE-2017-7664 - Apache OpenMeetings - Missing XML Validation (Maxim Solodovnik <solomax666@...il.com>)
CVE-2017-7663 - Apache OpenMeetings - XSS in chat (Maxim Solodovnik <solomax@...che.org>)
CVE-2017-7684 - Apache OpenMeetings - Insecure File Upload (Maxim Solodovnik <solomax@...che.org>)
CVE-2017-7688 - Apache OpenMeetings - Insecure Password Update (Maxim Solodovnik <solomax@...che.org>)

July 14 (1 message)

[CVE-2017-7728] - Authentication Bypass allows alarm's commands execution in iSmartAlarm (ilia.shnaidman@...lguard.com)

July 19 (1 message)

[SECURITY] [DSA 3914-1] imagemagick security update (Moritz Muehlenhoff <jmm@...ian.org>)

July 20 (10 messages)

APPLE-SA-2017-07-19-4 tvOS 10.2.2 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2017-07-19-6 iTunes 12.6.2 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2017-07-19-1 iOS 10.3.3 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2017-07-19-3 watchOS 3.2.2 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2017-07-19-2 macOS 10.12.6 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2017-07-19-5 Safari 10.1.2 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2017-07-19-7 iCloud for Windows 6.2.2 (Apple Product Security <product-security-noreply@...ts.apple.com>)
Directory Traversal vulnerability in Integration Gateway (PSIGW) (ERPScan inc <erpscan.online@...il.com>)
Multiple XSS (POST request) Vulnerabilities in TestServlet (PeopleSoft) (ERPScan inc <erpscan.online@...il.com>)
File Upload in Integration Gateway (PSIGW) (ERPScan inc <erpscan.online@...il.com>)

July 21 (1 message)

[security bulletin] HPESBHF03766 rev.1 - HPE ConvergedSystem 700 Solution with Comware v5 Switches using NTP, Remote Denial of Service … (security-alert@....com)

July 24 (10 messages)

[security bulletin] HPESBHF03745 rev.3 - HPE Intelligent Management Center (iMC) PLAT, Remote Code Execution (security-alert@....com)
[slackware-security] seamonkey (SSA:2017-202-01) (Slackware Security Team <security@...ckware.com>)
[SECURITY] [DSA 3917-1] catdoc security update (Salvatore Bonaccorso <carnil@...ian.org>)
[RT-SA-2017-004] Unauthenticated Arbitrary File Disclosure in REDDOXX Appliance (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[RT-SA-2017-007] Undocumented Administrative Service Account in REDDOXX Appliance (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[RT-SA-2017-003] Cross-Site Scripting in REDDOXX Appliance (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[RT-SA-2017-009] Remote Command Execution as root in REDDOXX Appliance (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[RT-SA-2017-005] Unauthenticated Extraction of Session-IDs in REDDOXX Appliance (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[RT-SA-2017-008] Unauthenticated Access to Diagnostic Functions in REDDOXX Appliance (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[RT-SA-2017-006] Arbitrary File Disclosure with root Privileges via RdxEngine-API in REDDOXX Appliance (RedTeam Pentesting GmbH <release@...team-pentesting.de>)

July 25 (3 messages)

SEC Consult SA-20170724-1 :: Open Redirect issue in multiple Ubiquiti Networks products (SEC Consult Vulnerability Lab <research@...-consult.com>)
SEC Consult SA-20170724-0 :: Cross-Site Scripting (XSS) issue in multiple Ubiquiti Networks products (SEC Consult Vulnerability Lab <research@...-consult.com>)
[slackware-security] tcpdump (SSA:2017-205-01) (Slackware Security Team <security@...ckware.com>)

July 26 (2 messages)

[SECURITY] [DSA 3920-1] qemu security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 3919-1] openjdk-8 security update (Moritz Muehlenhoff <jmm@...ian.org>)

July 27 (1 message)

[security bulletin] HPESBHF03765 rev.1 - HPE ConvergedSystem 700 Solution with Comware v7 Switches using OpenSSL, Remot… (HPE Product Security Response Team <sec…)

July 29 (1 message)

FortiOS <= 5.6.0 Multiple XSS Vulnerabilities (msg@...rykbogdan.com)

69 messages