bugtraq mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2018/07

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹
²	³ 3	⁴ 3	⁵ 3	⁶ 4	⁷	⁸
⁹	¹⁰ 8	¹¹ 9	¹² 6	¹³ 2	¹⁴	¹⁵
¹⁶ 4	¹⁷ 2	¹⁸ 5	¹⁹ 8	²⁰ 5	²¹	²²
²³ 7	²⁴ 2	²⁵ 5	²⁶	²⁷ 2	²⁸	²⁹
³⁰ 4	³¹ 2

Messages by day:

July 3 (3 messages)

[CVE-2018-8036] DoS (OOM) Vulnerability in Apache PDFBox's AFMParser (Andreas Lehmkuehler <lehmi@...che.org>)
[SECURITY] [DSA 4237-1] chromium-browser security update (Michael Gilbert <mgilbert@...ian.org>)
[CVE-2018-8036] DoS (OOM) Vulnerability in Apache PDFBox's AFMParser (Andreas Lehmkuehler <lehmi@...che.org>)

July 4 (3 messages)

[SECURITY] [DSA 4238-1] exiv2 security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4239-1] gosa security update (Moritz Muehlenhoff <jmm@...ian.org>)
[CVE-2018-3667, CVE-2018-3668] Escalation of priviilege via executable installer of Intel Processor Diagnostic Tool ("Stefan Kanthak" <stefan.kanthak@...go.de>)

July 5 (3 messages)

SEC Consult SA-20180704-0 :: Local root jailbreak via network file sharing flaw in all ADB Broadband Gateways / Routers (SEC Consult Vulnerability Lab <research…)
SEC Consult SA-20180704-2 :: Privilege escalation via linux group manipulation in all ADB Broadband Gateways / Routers (SEC Consult Vulnerability Lab <research…)
SEC Consult SA-20180704-1 :: Authorization Bypass in all ADB Broadband Gateways / Routers (SEC Consult Vulnerability Lab <research@...-consult.com>)

July 6 (4 messages)

[SECURITY] [DSA 4240-1] php7.0 security update (Moritz Muehlenhoff <jmm@...ian.org>)
[slackware-security] mozilla-thunderbird (SSA:2018-186-01) (Slackware Security Team <security@...ckware.com>)
APPLE-SA-2018-7-05-1 Wi-Fi Update for Boot Camp 6.4.0 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[SECURITY] [DSA 4241-1] libsoup2.4 security update (Moritz Muehlenhoff <jmm@...ian.org>)

July 10 (8 messages)

[SECURITY] [DSA 4242-1] ruby-sprockets security update (Salvatore Bonaccorso <carnil@...ian.org>)
APPLE-SA-2018-7-9-3 tvOS 11.4.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2018-7-9-1 iOS 11.4.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2018-7-9-4 macOS High Sierra 10.13.6, Security Update 2018-004 Sierra, Security Update 2018-004 El Capitan (Apple Product Security <product-security-n…)
APPLE-SA-2018-7-9-6 iCloud for Windows 7.6 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2018-7-9-2 watchOS 4.3.2 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2018-7-9-5 Safari 11.1.2 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2018-7-9-7 iTunes 12.8 for Windows (Apple Product Security <product-security-noreply@...ts.apple.com>)

July 11 (9 messages)

[slackware-security] mozilla-thunderbird (SSA:2018-191-01) (Slackware Security Team <security@...ckware.com>)
SEC Consult SA-20180711-0 :: Remote code execution via multiple attack vectors in WAGO e!DISPLAY 7300T (SEC Consult Vulnerability Lab <research@...-consult.com…)
Secutech DSL WR RIS 330 - Filter Bypass Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Intel System CU - Buffer Overflow (Denial of Service) Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
ASUS WRT-AC66U 3.x - Cross Site Scripting Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Barracuda ADC 5.x - Filter Bypass & Persistent Validation Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Barracuda ADC 5.x - Client Side Cross Site Scripting Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
AT&T Bizcircle - Persistent Profile Cross Site Scripting Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[SECURITY] [DSA 4243-1] cups security update (Luciano Bello <luciano@...ian.org>)

July 12 (6 messages)

[CORE-2018-0006] - QNAP Qcenter Virtual Appliance Multiple Vulnerabilities (Core Security Advisories Team <advisories@...esecurity.com>)
[slackware-security] bind (SSA:2018-192-01) (Slackware Security Team <security@...ckware.com>)
[slackware-security] curl (SSA:2018-192-02) (Slackware Security Team <security@...ckware.com>)
Lenovo SU v5.07 - Buffer Overflow & Arbitrary Code Execution Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Barracuda ADC v5.x - Multiple Persistent Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[security bulletin] MFSBGN03811 rev.1 - Fortify Software Security Center (SSC), Multiple vulnerabilities (cyber-psrt@...rofocus.com)

July 13 (2 messages)

SEC Consult SA-20180712-0 :: Remote Code Execution & Local File Disclosure in Zeta Producer Desktop CMS (SEC Consult Vulnerability Lab <research@...-consult.co…)
Secunia Research: Clam AntiVirus "parsehwp3_paragraph()" Denial of Service Vulnerability (Secunia Research <remove-vuln@...unia.com>)

July 16 (4 messages)

Huawei eNSP v1 - Buffer Overflow (DoS) Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[SECURITY] [DSA 4244-1] thunderbird security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4245-1] imagemagick security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4246-1] mailman security update (Salvatore Bonaccorso <carnil@...ian.org>)

July 17 (2 messages)

[SECURITY] [DSA 4247-1] ruby-rack-protection security update (Moritz Muehlenhoff <jmm@...ian.org>)
Defense in depth -- the Microsoft way (part 55): new software built with 5.5 year old tool shows 20+ year old vulnerabil… ("Stefan Kanthak" <stefan.kanthak@...go.…)

July 18 (5 messages)

[CVE-2018-1000211] Public apps can't revoke OAuth access & refresh tokens in Doorkeeper (Justin Bull <me@...tinbull.ca>)
[SECURITY] [DSA 4249-1] ffmpeg security update (Moritz Muehlenhoff <jmm@...ian.org>)
[slackware-security] mutt (SSA:2018-198-01) (Slackware Security Team <security@...ckware.com>)
[SECURITY] [DSA 4248-1] blender security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4250-1] wordpress security update (Sebastien Delafond <seb@...ian.org>)

July 19 (8 messages)

Defense in depth -- the Microsoft way (part 56): 10+ year old security update installers are susceptiblle to 20+ year ol… ("Stefan Kanthak" <stefan.kanthak@...go.…)
GhostMail - (Status Message) Persistent Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Barracuda Cloud Control v3.020 - CS Cross Site Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[SECURITY] [DSA 4251-1] vlc security update (Moritz Muehlenhoff <jmm@...ian.org>)
GhostMail - (filename to link) POST Inject Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Binance v1.5.0 - Insecure File Permission Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[SECURITY] [DSA 4252-1] znc security update (Moritz Muehlenhoff <jmm@...ian.org>)
[slackware-security] httpd (SSA:2018-199-01) (Slackware Security Team <security@...ckware.com>)

July 20 (5 messages)

Adobe Systems - Arbitrary Code Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Secunia Research: LibRaw Multiple Denial of Service Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: LibRaw "parse_minolta()" Infinite Loop Denial of Service Vulnerability (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Oracle Outside In Technology Multiple Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)
Secunia Research: Oracle Outside In Technology Multiple Vulnerabilities (Secunia Research <remove-vuln@...unia.com>)

July 23 (7 messages)

[slackware-security] php (SSA:2018-201-01) (Slackware Security Team <security@...ckware.com>)
Sourcetree - Remote Code Execution vulnerabilities - CVE-2018-11235 (Anton Black <ablack@...assian.com>)
APPLE-SA-2018-7-23-1 Additional information for APPLE-SA-2018-7-9-4 macOS High Sierra 10.13.6, Security Update 2018-004… (Apple Product Security <product-securit…)
APPLE-SA-2018-7-23-2 Additional information for APPLE-SA-2018-06-01-1 macOS High Sierra 10.13.5, Security Update 2018-0… (Apple Product Security <product-securit…)
APPLE-SA-2018-7-23-4 Additional information for APPLE-SA-2018-06-01-6 tvOS 11.4 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2018-7-23-5 Additional information for APPLE-SA-2018-06-01-5 watchOS 4.3.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2018-7-23-3 Additional information for APPLE-SA-2018-06-01-4 iOS 11.4 (Apple Product Security <product-security-noreply@...ts.apple.com>)

July 24 (2 messages)

[SECURITY] [DSA 4253-1] network-manager-vpnc security update (Salvatore Bonaccorso <carnil@...ian.org>)
FINAL CALL FOR PAPERS - INTEL SECURITY CONFERENCE (iSecCon) 2018 ("Branco, Rodrigo" <rodrigo.branco@...el.com>)

July 25 (5 messages)

[SECURITY] [DSA 4254-1] slurm-llnl security update (Salvatore Bonaccorso <carnil@...ian.org>)
DefenseCode ThunderScan SAST Advisory: WordPress Snazzy Maps Plugin Multiple XSS Security Vulnerabilities (Defense Code <defensecode@...ensecode.com>)
[SECURITY] [DSA 4255-1] ant security update (Salvatore Bonaccorso <carnil@...ian.org>)
DefenseCode ThunderScan SAST Advisory: WordPress Strong Testimonials Plugin Multiple XSS Security Vulnerabilities (Defense Code <defensecode@...ensecode.com>)
DefenseCode ThunderScan SAST Advisory: WordPress Gwolle Guestbook Plugin XSS Security Vulnerability (Defense Code <defensecode@...ensecode.com>)

July 27 (2 messages)

[CORE-2018-0009] - SoftNAS Cloud OS Command Injection (Core Security Advisories Team <advisories@...esecurity.com>)
[SECURITY] [DSA 4256-1] chromium-browser security update (Michael Gilbert <mgilbert@...ian.org>)

July 30 (4 messages)

[slackware-security] Slackware 14.2 kernel (SSA:2018-208-01) (Slackware Security Team <security@...ckware.com>)
[SECURITY] [DSA 4257-1] fuse security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 4258-1] ffmpeg security update (Moritz Muehlenhoff <jmm@...ian.org>)
secuvera-SA-2018-03: Command Injection, Broken Access Control and Evil-Twin-Attack in Microsoft Wireless Display Adapter … (Tobias Glemser <tglemser@...uvera.de>)

July 31 (2 messages)

[slackware-security] file (SSA:2018-212-01) (Slackware Security Team <security@...ckware.com>)
[slackware-security] seamonkey (SSA:2018-212-02) (Slackware Security Team <security@...ckware.com>)

84 messages