bugtraq mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2017/10

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹
² 12	³ 1	⁴ 1	⁵ 1	⁶ 1	⁷	⁸
⁹ 2	¹⁰	¹¹ 1	¹²	¹³ 1	¹⁴	¹⁵
¹⁶ 6	¹⁷	¹⁸ 3	¹⁹ 4	²⁰ 2	²¹	²²
²³	²⁴ 3	²⁵ 1	²⁶ 2	²⁷ 1	²⁸	²⁹
³⁰	³¹

Messages by day:

October 2 (12 messages)

Mac OS X Local Javascript Quarantine Bypass (Filippo Cavallarin <filippo.cavallarin@...resegment.com>)
Trend Micro OfficeScan v11.0 and XG (12.0)* Unauthorized Remote Memory Corruption CVE-2017-14089 (apparitionsec / hyp3rlinx) (apparitionsec@...il.com)
Trend Micro OfficeScan v11.0 and XG (12.0)* Unauthorized Change Prevention Image File Execution Bypass (apparitionsec / hyp3rlinx) (apparitionsec@...il.com)
Trend Micro OfficeScan v11.0 and XG (12.0)* Unauthorized Remote Encryption Key Disclosure CVE-2017-14083 (apparitionsec / hyp3rlinx) (apparitionsec@...il.com)
Trend Micro OfficeScan v11.0 and XG (12.0)* Unauthorized Start Remote Process Code Execution / DOS - INI Corruption CVE-2017-14086 (ap… (apparitionsec@...il.com)
Trend Micro OfficeScan v11.0 and XG (12.0)* CURL (MITM) Remote Code Execution CVE-2017-14084 (apparitionsec / hyp3rlinx) (apparitionsec@...il.com)
[SECURITY] [DSA 3986-1] ghostscript security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 3987-1] firefox-esr security update (Moritz Muehlenhoff <jmm@...ian.org>)
Mac OS X Local Javascript Quarantine Bypass (filippo.cavallarin@...resegment.com)
Trend Micro OfficeScan v11.0 and XG (12.0)* Unauthorized Server Side Request Forgery (apparitionsec / hyp3rlinx) (apparitionsec@...il.com)
Trend Micro OfficeScan v11.0 and XG (12.0)* Unauthorized NT Domain / PHP Information Disclosures CVE-2017-14085 (apparitionsec / hyp3r… (apparitionsec@...il.com)
[SECURITY] [DSA 3988-1] libidn2-0 security update (Salvatore Bonaccorso <carnil@...ian.org>)

October 3 (1 message)

HPESBMU03753 rev.1 - HPE System Management Homepage, Multiple Remote Vulnerabilities (HPE Product Security Response Team <security-alert@....com>)

October 4 (1 message)

[security bulletin] HPESBHF03776 rev.1 - HPE Intelligent Management Center (iMC) Service Operation Management (SOM), Remote Arbitrary Fi… (security-alert@....com)

October 5 (1 message)

DefenseCode Security Advisory: Magento Commerce CSRF, Stored Cross Site Scripting #1 (DefenseCode <defensecode@...ensecode.com>)

October 6 (1 message)

[slackware-security] xorg-server (SSA:2017-279-03) (Slackware Security Team <security@...ckware.com>)

October 9 (2 messages)

[SECURITY] [DSA 3993-1] tor security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 3994-1] nautilus security update (Yves-Alexis Perez <corsac@...ian.org>)

October 11 (1 message)

[SECURITY] [DSA 3995-1] libxfont security update (Moritz Muehlenhoff <jmm@...ian.org>)

October 13 (1 message)

Multiple vulnerabilities in OpenText Documentum Content Server ("Andrey B. Panfilov" <andrew@...filov.tel>)

October 16 (6 messages)

[RCESEC-2017-002][CVE-2017-14956] AlienVault USM v5.4.2 "/ossim/report/wizard_email.php" Cross-Site Request Forgery leadin… (Julien Ahrens <info@...security.com>)
Advisory X41-2017-008: Multiple Vulnerabilities in Shadowsocks (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)
Advisory X41-2017-010: Command Execution in Shadowsocks-libev (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)
[security bulletin] MFSBGN03786 rev.1 - HPE Connected Backup, Local Escalation of Privilege (swpmb.cyber-psrt@...rofocus.com)
SEC Consult SA-20171016-0 :: Multiple vulnerabilities in Micro Focus VisiBroker C++ (SEC Consult Vulnerability Lab <research@...-consult.com>)
[SECURITY] [DSA 3999-1] wpa security update (Yves-Alexis Perez <corsac@...ian.org>)

October 18 (3 messages)

[security bulletin] HPESBHF03789 rev.2 - Certain HPE Gen9 Systems with HP Trusted Platform Module v2.0 Option, Unauthorized Access to Da… (security-alert@....com)
SEC Consult SA-20171018-1 :: Multiple vulnerabilities in Linksys E-series products (SEC Consult Vulnerability Lab <research@...-consult.com>)
WebKitGTK+ Security Advisory WSA-2017-0008 (Carlos Alberto Lopez Perez <clopez@...lia.com>)

October 19 (4 messages)

[slackware-security] libXres (SSA:2017-291-01) (Slackware Security Team <security@...ckware.com>)
[slackware-security] wpa_supplicant (SSA:2017-291-02) (Slackware Security Team <security@...ckware.com>)
[slackware-security] xorg-server (SSA:2017-291-03) (Slackware Security Team <security@...ckware.com>)
FreeBSD Security Advisory FreeBSD-SA-17:07.wpa [REVISED] (FreeBSD Security Advisories <security-advisories@...ebsd.org>)

October 20 (2 messages)

[SECURITY] [DSA 4002-1] mysql-5.5 security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 4003-1] libvirt security update (Salvatore Bonaccorso <carnil@...ian.org>)

October 24 (3 messages)

[security bulletin] HPESBHF03779 rev.1 - HPE Fabric OS using OpenSSH, Denial of Service (HPE Product Security Response Team <security-alert@....com>)
[SECURITY] [DSA 4006-1] mupdf security update (Luciano Bello <luciano@...ian.org>)
KL-001-2017-017 : Infoblox NetMRI Administration Shell Escape and Privilege Escalation (KoreLogic Disclosures <disclosures@...elogic.com>)

October 25 (1 message)

KL-001-2017-020 : Sophos UTM 9 loginuser Privilege Escalation via Insecure Directory Permissions (KoreLogic Disclosures <disclosures@...elogic.com>)

October 26 (2 messages)

October 2017 - Bamboo - Critical Security Advisory (Atlassian <security@...assian.com>)
Bomgar Remote Support - Local Privilege Escalation (CVE-2017-5996) (VSR Advisories <advisories@...curity.com>)

October 27 (1 message)

[VulnWatch] Advisory 02/2002: PHP remote vulnerability (e-matters Security <security@...atters.de>)

42 messages