bugtraq mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2018/02

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 5	² 1	³	⁴
⁵ 2	⁶ 1	⁷ 4	⁸ 3	⁹ 4	¹⁰	¹¹
¹² 10	¹³ 3	¹⁴ 2	¹⁵ 5	¹⁶ 5	¹⁷	¹⁸
¹⁹ 6	²⁰ 6	²¹ 4	²² 3	²³ 4	²⁴	²⁵
²⁶ 2	²⁷ 5	²⁸ 3

Messages by day:

February 1 (5 messages)

Recon Montreal 2018 Call For Papers - 0xE - Registration - Training - Conference - Submit! - PGP key (cfpmontreal2018@...on.cx)
KonaKart Path Traversal Vulnerability (ajcraggs@...il.com)
Advisory - Sourcetree - CVE-2017-14592 CVE-2017-14593 CVE-2017-14592 CVE-2017-17831 (Atlassian <security@...assian.com>)
[SECURITY] [DSA 4103-1] chromium-browser security update (Michael Gilbert <mgilbert@...ian.org>)
SEC Consult SA-20180201-0 :: Multiple critical vulnerabilities in Whole Vibratissimo Smart Sex Toy product range (SEC Consult Vulnerability Lab <research@...-c…)

February 2 (1 message)

[security bulletin] MFSBGN03797 rev.1 - Micro Focus Fortify Audit Workbench (AWB) and Micro Focus Fortify Software Security Center (S… (cyber-psrt@...rofocus.com)

February 5 (2 messages)

[slackware-security] php (SSA:2018-034-01) (Slackware Security Team <security@...ckware.com>)
[SECURITY] [DSA 4104-1] p7zip security update (Salvatore Bonaccorso <carnil@...ian.org>)

February 6 (1 message)

[CORE-2017-0010] - Kaspersky Secure Mail Gateway Multiple Vulnerabilities (Core Security Advisories Team <advisories@...esecurity.com>)

February 7 (4 messages)

[SECURITY] [DSA 4105-1] mpv security update (Luciano Bello <luciano@...ian.org>)
[SE-2011-01] A security issue with a Multiroom service of NC+ SAT TV platform (Security Explorations <contact@...urity-explorations.com>)
[slackware-security] Slackware 14.2 kernel (SSA:2018-037-01) (Slackware Security Team <security@...ckware.com>)
SEC Consult SA-20180207-0 :: Multiple buffer overflow vulnerabilities in InfoZip UnZip (SEC Consult Vulnerability Lab <research@...-consult.com>)

February 8 (3 messages)

[SECURITY] [DSA 4106-1] libtasn1-6 security update (Salvatore Bonaccorso <carnil@...ian.org>)
[security bulletin] HPSBHF02981 rev.2 - HPE Integrated Lights-Out 2, 3, 4 (iLO2, iLO3, iLO4) and HPE Superdome Flex RMC - IPMI 2.0 RCMP… (security-alert@....com)
[SECURITY] [DSA 4107-1] django-anymail security update (Salvatore Bonaccorso <carnil@...ian.org>)

February 9 (4 messages)

SEC Consult SA-20180208-0 :: Multiple Cross-Site Scripting Vulnerabilities in Sonatype Nexus Repository Manager OSS/Pro (SEC Consult Vulnerability Lab <research…)
Advisory - Fisheye and Crucible - CVE-2017-16861 (David Black <dblack@...assian.com>)
[SECURITY] [DSA 4105-2] mpv security update (Luciaon Bello <luciano@...ian.org>)
[SECURITY] [DSA 4108-1] mailman security update (Thijs Kinkhorst <thijs@...ian.org>)

February 12 (10 messages)

KL-001-2018-002 : NetEx HyperIP Authentication Bypass (KoreLogic Disclosures <disclosures@...elogic.com>)
KL-001-2018-006 : Trend Micro IMSVA Management Portal Authentication Bypass (KoreLogic Disclosures <disclosures@...elogic.com>)
KL-001-2018-003 : NetEx HyperIP Post-Auth Command Execution (KoreLogic Disclosures <disclosures@...elogic.com>)
KL-001-2018-004 : NetEx HyperIP Privilege Escalation Vulnerability (KoreLogic Disclosures <disclosures@...elogic.com>)
[SECURITY] [DSA 4109-1] ruby-omniauth security update (Luciano Bello <luciano@...ian.org>)
Defense in depth -- the Microsoft way (part 51): Skype's home-grown updater allows escalation of privilege to SYSTEM ("Stefan Kanthak" <stefan.kanthak@...go.de>)
KL-001-2018-005 : NetEx HyperIP Local File Inclusion Vulnerability (KoreLogic Disclosures <disclosures@...elogic.com>)
[SECURITY] [DSA 4111-1] libreoffice security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4110-1] exim4 security update (Salvatore Bonaccorso <carnil@...ian.org>)
CVE-2018-6892 CloudMe Sync <= v1.10.9 Unauthenticated Remote Buffer Overflow (hyp3rlinx / apparition security) (apparitionsec@...il.com)

February 13 (3 messages)

[security bulletin] HPESBHF03819 rev.1 - HPE XP Storage using HGLM, Local Authentication Bypass (security-alert@....com)
[SECURITY] [DSA 4111-2] libreoffice security update (Moritz Muehlenhoff <jmm@...ian.org>)
CSNC-2017-027 Microsoft Intune - App PIN Bypass (Advisories <advisories@...pass-security.com>)

February 14 (2 messages)

[security bulletin] MFSBGN03800 rev.1 - Micro Focus Performance Center, Remote Arbitrary Code Execution or Remote Arbitrary File Mod… (cyber-psrt@...rofocus.com)
Defense in depth -- the Microsoft way (part 52): HTTP used to distribute (security) updates, not HTTPS ("Stefan Kanthak" <stefan.kanthak@...go.de>)

February 15 (5 messages)

NAT32 Build (22284) Remote Code Execution CVE-2018-6940 (hyp3rlinx / apparition security) (apparitionsec@...il.com)
Re: [FD] Defense in depth -- the Microsoft way (part 51): Skype's home-grown updater allows escalation of privilege to SYST… (Jeffrey Walton <noloader@...il.com>)
[SECURITY] [DSA 4112-1] xen security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4113-1] libvorbis security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4114-1] jackson-databind security update (Sebastien Delafond <seb@...ian.org>)

February 16 (5 messages)

Vulnerability Disclosure (Web Apps)-Bravo Tejari Web Portal-CSRF (Arvind Vishwakarma <arvind12786@...il.com>)
Vulnerability Disclosure (Web Apps)-Bravo Tejari Web Portal-Unrestricted File Upload (Arvind Vishwakarma <arvind12786@...il.com>)
[SECURITY] [DSA 4115-1] quagga security update (Salvatore Bonaccorso <carnil@...ian.org>)
Re: [FD] Defense in depth -- the Microsoft way (part 51): Skype's home-grown updater allows escalation of privilege to S… ("Stefan Kanthak" <stefan.kanthak@...go.…)
[slackware-security] irssi (SSA:2018-046-01) (Slackware Security Team <security@...ckware.com>)

February 19 (6 messages)

Security advisory for Bugzilla 5.1.1, 5.0.3, and 4.4.12 (dkl@...illa.com)
[SECURITY] [DSA 4116-1] plasma-workspace security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4117-1] gcc-4.9 security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4118-1] tomcat-native security update (Salvatore Bonaccorso <carnil@...ian.org>)
Kentico CMS version 9 through 11 - Arbitrary Code Execution (displaymyname@...il.com)
Kentico CMS version 9 through 11 - Cross-Site Scripting (Reflect) (displaymyname@...il.com)

February 20 (6 messages)

[SECURITY] [DSA 4119-1] libav security update (Moritz Muehlenhoff <jmm@...ian.org>)
APPLE-SA-2018-02-19-4 watchOS 4.2.3 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2018-02-19-3 tvOS 11.2.6 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2018-02-19-1 iOS 11.2.6 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2018-02-19-2 macOS High Sierra 10.13.3 Supplemental Update (Apple Product Security <product-security-noreply@...ts.apple.com>)
Multiple Persistent XSS vulnerabilities in Radiant Content Management System (suparna.kachru@...il.com)

February 21 (4 messages)

Multiple Persistent Cross-Site Scripting Vulnerabilities in Quarx CMS (preethiknambiar@...il.com)
Sharutils 4.15.2 Heap-Buffer-Overflow (nafiez <nafiez.skins@...il.com>)
Sharutils 4.15.2 Heap-Buffer-Overflow (nafiez <nafiez.skins@...il.com>)
SEC Consult SA-20180221-0 :: Hijacking of arbitrary miSafes Mi-Cam video baby monitors (SEC Consult Vulnerability Lab <research@...-consult.com>)

February 22 (3 messages)

DefenseCode Security Advisory: PureVPN Windows Privilege Escalation Vulnerability (Defense Code <defensecode@...ensecode.com>)
[CORE-2017-0006] Trend Micro Email Encryption Gateway Multiple Vulnerabilities (Core Security Advisories Team <advisories@...esecurity.com>)
[SECURITY] [DSA 4121-1] gcc-6 security update (Moritz Muehlenhoff <jmm@...ian.org>)

February 23 (4 messages)

[SECURITY] [DSA 4120-1] linux security update (Yves-Alexis Perez <corsac@...ian.org>)
[SECURITY] [DSA 4122-1] squid3 security update (Salvatore Bonaccorso <carnil@...ian.org>)
[security bulletin] MFSBGN03798 rev.1 - Micro Focus Universal CMDB, Apache Struts Instance (cyber-psrt@...rofocus.com)
Re: [CVE-2018-1000088] Stored XSS vulnerability in Doorkeeper gem v2.1.0 - v4.2.5 (Justin Bull <me@...tinbull.ca>)

February 26 (2 messages)

[SECURITY] [DSA 4123-1] drupal7 security update (Moritz Muehlenhoff <jmm@...ian.org>)
CMS Made Simple 2.1.6 - Remote Code Execution (displaymyname@...il.con)

February 27 (5 messages)

ES2018-01 Asterisk pjsip subscribe stack corruption (Sandro Gauci <sandro@...blesecurity.com>)
ES2018-02 Asterisk pjsip sdp invalid fmtp segfault (Sandro Gauci <sandro@...blesecurity.com>)
ES2018-04 Asterisk pjsip tcp segfault (Sandro Gauci <sandro@...blesecurity.com>)
ES2018-03 Asterisk pjsip sdp invalid media format description segfault (Sandro Gauci <sandro@...blesecurity.com>)
SEC Consult SA-20180227-0 :: OS command injection, arbitrary file upload & SQL injection in ClipBucket (SEC Consult Vulnerability Lab <research@...-consult.com…)

February 28 (3 messages)

[security bulletin] HPESBHF03826 rev.1 - HPE Integrated Lights-Out 3 (iLO 3) Remote Denial of Service (security-alert@....com)
[SECURITY] [DSA 4124-1] lucene-solr security update (Moritz Muehlenhoff <jmm@...ian.org>)
SEC Consult SA-20180228-0 :: Insecure Direct Object Reference vulnerability in TestLink Open Source Test Management (SEC Consult Vulnerability Lab <research@se…)

78 messages