bugtraq mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2018/09

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹	²
³ 6	⁴	⁵ 2	⁶ 7	⁷ 3	⁸	⁹
¹⁰ 4	¹¹ 3	¹² 5	¹³ 1	¹⁴ 1	¹⁵	¹⁶
¹⁷ 6	¹⁸ 7	¹⁹ 3	²⁰ 4	²¹ 3	²²	²³
²⁴ 10	²⁵ 6	²⁶ 3	²⁷ 3	²⁸ 1	²⁹	³⁰

Messages by day:

September 3 (6 messages)

CA20180829-01: Security Notice for CA PPM ("Williams, Ken" <Ken.Williams@...com>)
CA20180829-02: Security Notice for CA Unified Infrastructure Management ("Williams, Ken" <Ken.Williams@...com>)
[SECURITY] [DSA 4282-1] trafficserver security update (Moritz Muehlenhoff <jmm@...ian.org>)
CA20180829-03: Security Notice for CA Release Automation ("Williams, Ken" <Ken.Williams@...com>)
[SECURITY] [DSA 4283-1] ruby-json-jwt security update (Moritz Muehlenhoff <jmm@...ian.org>)
Defense in depth -- the Microsoft way (part 57): installation of security updates fails on Windows Embedded POSReady 200… ("Stefan Kanthak" <stefan.kanthak@...go.…)

September 5 (2 messages)

Amcrest Cameras SSL Key Reuse Across installations (jack.m.mckenna@...il.com)
[SECURITY] [DSA 4284-1] lcms2 security update (Moritz Muehlenhoff <jmm@...ian.org>)

September 6 (7 messages)

[SECURITY] [DSA 4285-1] sympa security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 4286-1] curl security update (Alessandro Ghedini <ghedo@...ian.org>)
[slackware-security] ghostscript (SSA:2018-249-02) (Slackware Security Team <security@...ckware.com>)
[slackware-security] curl (SSA:2018-249-01) (Slackware Security Team <security@...ckware.com>)
[slackware-security] mozilla-firefox (SSA:2018-249-03) (Slackware Security Team <security@...ckware.com>)
[slackware-security] Slackware 14.2 mozilla-thunderbird (SSA:2018-249-04) (Slackware Security Team <security@...ckware.com>)
Vulnerabilities in KONEs Group Controller (KGC) (Sebastian Neuner <sneuner@...gle.com>)

September 7 (3 messages)

CVE-2017-17762 - XXE Vulnerability in Episerver (Jonas Lejon <jonas.bugtraq@...op.se>)
SEC Consult SA-20180906-0 :: CSV Formula Injection in DokuWiki (SEC Consult Vulnerability Lab <research@...-consult.com>)
[CVE-2018-15876] Ajax BootModal Login Captcha Reuse (Lyderic LEFEBVRE <lylefebvre.infosec@...il.com>)

September 10 (4 messages)

[SECURITY] [DSA 4287-1] firefox-esr security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4288-1] ghostscript security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4289-1] chromium-browser security update (Michael Gilbert <mgilbert@...ian.org>)
CVE-2017-16541 details: Deanonymize Tor Browser Users with Automount (Filippo Cavallarin <filippo.cavallarin@...resegment.com>)

September 11 (3 messages)

[SECURITY] [DSA 4290-1] libextractor security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 4291-1] mgetty security update (Yves-Alexis Perez <corsac@...ian.org>)
[SECURITY] [DSA 4292-1] kamailio security update (Salvatore Bonaccorso <carnil@...ian.org>)

September 12 (5 messages)

FreeBSD Security Advisory FreeBSD-SA-18:12.elf (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
Disclose SSRF Vulnerability (Alphan Yavaş <alphan.yavas@...net.com.tr>)
[SYSS-2018-015] HiScout GRC Suite < 3.1.5 - Unrestricted Upload of File with Dangerous Type (sebastian.auwaerter@...s.de)
Seagate Personal Cloud multiple information disclosure vulnerabilities (Summer of Pwnage <lists@...urify.nl>)
CVE-2017-16639 - Tor Browser Deanonymization With SMB (Filippo Cavallarin <filippo.cavallarin@...resegment.com>)

September 13 (1 message)

CVE-2018-16242 - oBike Electronic Lock Bypass (Antoine Neuenschwander <antoine@...oggi.org>)

September 14 (1 message)

[slackware-security] ghostscript (SSA:2018-256-01) (Slackware Security Team <security@...ckware.com>)

September 17 (6 messages)

[SECURITY] [DSA 4293-1] discount security update (Alessandro Ghedini <ghedo@...ian.org>)
[slackware-security] php (SSA:2018-257-01) (Slackware Security Team <security@...ckware.com>)
[SECURITY] [DSA 4273-2] intel-microcode security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4296-1] mbedtls security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4294-1] ghostscript security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4295-1] thunderbird security update (Moritz Muehlenhoff <jmm@...ian.org>)

September 18 (7 messages)

Disclose SSRF Vulnerability (alphan yavaş <ayavasa94@...il.com>)
APPLE-SA-2018-9-17-2 watchOS 5 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2018-9-17-1 iOS 12 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2018-9-17-3 tvOS 12 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2018-9-17-4 Safari 12 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2018-9-17-5 Apple Support 2.4 for iOS (Apple Product Security <product-security-noreply@...ts.apple.com>)
race condition in .net core System.IO.Directory.Delete allowing deletion of entire drives (Joshua Hudson <joshudson@...il.com>)

September 19 (3 messages)

SEC Consult SA-20180918-0 :: Remote Code Execution via PHP unserialize in Moodle open-source learning platform (SEC Consult Vulnerability Lab <research@...-con…)
Authentication bypass vulnerability in Western Digital My Cloud allows escalation to admin privileges ("Securify B.V." <lists@...urify.nl>)
[SECURITY] [DSA 4297-1] chromium-browser security update (Michael Gilbert <mgilbert@...ian.org>)

September 20 (4 messages)

[HITB-Announce] #HITBSecConf2018PEK Call for CTF (Hafez Kamal <aphesz@...kinthebox.org>)
X41 D-Sec GmbH Security Advisory X41-2018-008: Multiple Vulnerabilities in HylaFAX (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)
X41 D-Sec GmbH Security Advisory X41-2018-007: Multiple Vulnerabilities in mgetty (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)
OPManager SQL Injection Vulnerability (Murat Aydemir <murat.aydemir@...net.com.tr>)

September 21 (3 messages)

[SECURITY] [DSA 4298-1] hylafax security update (Moritz Muehlenhoff <jmm@...ian.org>)
AST-2018-009: Remote crash vulnerability in HTTP websocket upgrade ("Asterisk Security Team" <security@...erisk.org>)
[waraxe-2018-SA#107] - Reflected XSS in FV Flowplayer Wordpress plugin (come2waraxe@...oo.com)

September 24 (10 messages)

[SECURITY] [DSA 4299-1] texlive-bin security update (Yves-Alexis Perez <corsac@...ian.org>)
[SYSS-2018-016] Postman - Improper Certificate Validation (ludwig.stage@...s.de)
[slackware-security] Slackware 14.2 kernel (SSA:2018-264-01) (Slackware Security Team <security@...ckware.com>)
[SECURITY] [DSA 4300-1] libarchive-zip-perl security update (Salvatore Bonaccorso <carnil@...ian.org>)
[slackware-security] mozilla-firefox (SSA:2018-265-01) (Slackware Security Team <security@...ckware.com>)
[SECURITY] [DSA 4303-1] okular security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4302-1] openafs security update (Salvatore Bonaccorso <carnil@...ian.org>)
[SECURITY] [DSA 4301-1] mediawiki security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4304-1] firefox-esr security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4305-1] strongswan security update (Yves-Alexis Perez <corsac@...ian.org>)

September 25 (6 messages)

APPLE-SA-2018-9-24-1 macOS Mojave 10.14 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2018-9-24-3 Additional information for APPLE-SA-2018-9-17-4 Safari 12 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2018-9-24-2 iTunes 12.9 for Windows (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2018-9-24-6 Additional information for APPLE-SA-2018-9-17-3 tvOS 12 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2018-9-24-4 Additional information for APPLE-SA-2018-9-17-1 iOS 12 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2018-9-24-5 Additional information for APPLE-SA-2018-9-17-2 watchOS 5 (Apple Product Security <product-security-noreply@...ts.apple.com>)

September 26 (3 messages)

tekno.Portal v0.1b - Cross-Site Scripting Vulnerability in "link.php" (Socket_0x03@...aexe.com)
Integer overflow in Linux's create_elf_tables() (CVE-2018-14634) (Qualys Security Advisory <qsa@...lys.com>)
SEC Consult SA-20180924-0 :: Multiple Vulnerabilities in Citrix StorageZones Controller (SEC Consult Vulnerability Lab <research@...-consult.com>)

September 27 (3 messages)

Re: SEC Consult SA-20180926-0 :: Stored Cross-Site Scripting in Progress Kendo UI Editor (SEC Consult Vulnerability Lab <research@...-consult.com>)
SEC Consult SA-20180926-0 :: (SEC Consult Vulnerability Lab <research@...-consult.com>)
[waraxe-2018-SA#108] - Username Disclosure in Breadcrumb NavXT Wordpress plugin (come2waraxe@...oo.com)

September 28 (1 message)

[SECURITY] [DSA 4306-1] python2.7 security update (Moritz Muehlenhoff <jmm@...ian.org>)

78 messages