bugtraq mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2018/10

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹ 4	² 8	³ 4	⁴ 2	⁵	⁶	⁷
⁸ 3	⁹ 8	¹⁰	¹¹	¹²	¹³	¹⁴
¹⁵	¹⁶	¹⁷	¹⁸	¹⁹	²⁰	²¹
²²	²³	²⁴ 10	²⁵ 2	²⁶ 3	²⁷	²⁸
²⁹ 3	³⁰	³¹ 14

Messages by day:

October 1 (4 messages)

[SYSS-2018-014] Bestwebsoft PDF & Print - Cross-Site Scripting (Robin.Trost@...s.de)
WebKitGTK+ and WPE WebKit Security Advisory WSA-2018-0007 (Michael Catanzaro <mcatanzaro@...lia.com>)
[SECURITY] [DSA 4307-1] python3.5 security update (Moritz Muehlenhoff <jmm@...ian.org>)
e2 Security GmbH Advisory 2018-01: MensaMax Android app / Unencrypted transmission and usage of hardcoded encryption ke… (Stefan Pietsch <s.pietsch@...ecurity.de…)

October 2 (8 messages)

[SECURITY] [DSA 4308-1] linux security update (Salvatore Bonaccorso <carnil@...ian.org>)
Stored credentials Ivanti Workspace Control can be retrieved from Registry ("Securify B.V." <lists@...urify.nl>)
Ivanti Workspace Control Application Whitelist bypass via PowerGrid /RWS command line argument ("Securify B.V." <lists@...urify.nl>)
Ivanti Workspace Control local privilege escalation via Named Pipe ("Securify B.V." <lists@...urify.nl>)
SEC Consult SA-20181001-0 :: Password disclosure vulnerability & XSS in PTC ThingWorx (CVE-2018-17216, CVE-2018-17217, … (SEC Consult Vulnerability Lab <research…)
Ivanti Workspace Control Application Whitelist bypass via PowerGrid /SEE command line argument ("Securify B.V." <lists@...urify.nl>)
Ivanti Workspace Control Data Security bypass via localhost UNC path ("Securify B.V." <lists@...urify.nl>)
[SECURITY] [DSA 4309-1] strongswan security update (Yves-Alexis Perez <corsac@...ian.org>)

October 3 (4 messages)

[SYSS-2018-023] Password leakage in Verint Verba Collaboration Compliance and Quality Management Platform (CVE-2018-178… (Micha Borrmann <micha.borrmann@...s.de>)
[SYSS-2018-024] Privilege Escalation in Verint Verba Collaboration Compliance and Quality Management Platform (CVE-2018… (Micha Borrmann <micha.borrmann@...s.de>)
[webkit-gtk] WebKitGTK+ and WPE WebKit Security Advisory WSA-2018-0007 (Michael Catanzaro <mcatanzaro@...lia.com>)
[slackware-security] mozilla-firefox (SSA:2018-276-01) (Slackware Security Team <security@...ckware.com>)

October 4 (2 messages)

[SECURITY] [DSA 4310-1] firefox-esr security update (Salvatore Bonaccorso <carnil@...ian.org>)
Pie Register v3.0.15 (WordPress Plugin) - Cross-Site Scripting Vulnerability in Login (Socket_0x03@...aexe.com)

October 8 (3 messages)

[CVE-2018-11797] DoS vulnerability in Apache PDFBox parser (Andreas Lehmkuehler <lehmi@...che.org>)
[SECURITY] [DSA 4311-1] git security update (Salvatore Bonaccorso <carnil@...ian.org>)
[UPDATE][CVE-2018-11797] DoS vulnerability in Apache PDFBox parser (Andreas Lehmkuehler <lehmi@...che.org>)

October 9 (8 messages)

[SECURITY] [DSA 4312-1] tinc security update (Salvatore Bonaccorso <carnil@...ian.org>)
APPLE-SA-2018-10-08-1 iOS 12.0.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2018-10-08-2 iCloud for Windows 7.7 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[SECURITY] [DSA 4313-1] linux security update (Salvatore Bonaccorso <carnil@...ian.org>)
CVE Request: Sitepress Multilingual CMS Plugin Unauthenticated Stored XSS (Rahul Pratap Singh <techno.rps@...il.com>)
Responsive Filemanager 9.8.1 Authentication Bypass (yavuz atlas <yavatlas@...il.com>)
Responsive Filemanager 9.8.1 Reflected Cross Site Scripting (XSS) (yavuz atlas <yavatlas@...il.com>)
SEC Consult SA-20181009-0 :: Remote Code Execution via XMeye P2P Cloud in Xiongmai IP Cameras, NVRs and DVRs incl. 3rd … (SEC Consult Vulnerability Lab <research…)

October 24 (10 messages)

Pie Register v3.0.17 (WordPress Plugin) - XSS Vulnerability in Forgot-Password (Socket_0x03@...aexe.com)
Zoho ManageEngine OpManager 12.3 allows Unrestricted Arbitrary File Upload (Murat Aydemir <murat.aydemir@...net.com.tr>)
SATE VI - Call for Participation ("Delaitre, Aurelien \(IntlAssoc\)" <aurelien.delaitre@...t.gov>)
Question Answer v1.2.30 (WordPress Plugin) - Multiple XSS Vulnerabilities (Socket_0x03@...aexe.com)
CA20181017-01: Security Notice for CA Identity Governance ("Kotas, Kevin J" <Kevin.Kotas@...com>)
[slackware-security] mozilla-firefox (SSA:2018-296-01) (Slackware Security Team <security@...ckware.com>)
[SYSS-2018-028] information leakage with Polycom VVX Phones (Skype for Business, on-premise) - CVE-2018-18566 (Micha Borrmann <micha.borrmann@...s.de>)
[SYSS-2018-027] missing X.509 validation with Polycom VVX Phones (Skype for Business, on-premise) - CVE-2018-18568 (Micha Borrmann <micha.borrmann@...s.de>)
[security bulletin] MFSBGN03827 rev.1 - Microfocus Real User Monitoring 9.4.0 BPRDownload Java Deserialization Vulnerability (cyber-psrt@...rofocus.com)
[SYSS-2018-026] missing X.509 validation with AudioCodes IP Phones (Skype for Business, on-premise) - CVE-2018-18567 (Micha Borrmann <micha.borrmann@...s.de>)

October 25 (2 messages)

[SECURITY] [DSA 4324-1] firefox-esr security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4325-1] mosquitto security update (Sebastien Delafond <seb@...ian.org>)

October 26 (3 messages)

[SECURITY] [DSA 4326-1] openjdk-8 (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4327-1] thunderbird security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4328-1] xorg-server security update (Moritz Muehlenhoff <jmm@...ian.org>)

October 29 (3 messages)

[CORE-2018-0005] - ASRock Drivers Elevation of Privilege Vulnerabilities (SecureAuth Advisories Team <advisories@...ureauth.com>)
[SECURITY] [DSA 4321-2] graphicsmagick update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4329-1] teeworlds security update (Moritz Muehlenhoff <jmm@...ian.org>)

October 31 (14 messages)

APPLE-SA-2018-10-30-1 iOS 12.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2018-10-30-3 Safari 12.0.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2018-10-30-4 watchOS 5.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2018-10-30-5 tvOS 12.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2018-10-30-2 macOS Mojave 10.14.1, Security Update 2018-001 High Sierra, Security Update 2018-005 Sierra (Apple Product Security <product-security-nor…)
APPLE-SA-2018-10-30-7 iCloud for Windows 7.8 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2018-10-30-9 Additional information for APPLE-SA-2018-9-24-1 macOS Mojave 10.14 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2018-10-30-13 Additional information for APPLE-SA-2018-9-24-2 iTunes 12.9 for Windows (Apple Product Security <product-security-noreply@...ts.apple.co…)
APPLE-SA-2018-10-30-12 Additional information APPLE-SA-2018-10-08-2 iCloud for Windows 7.7 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2018-10-30-10 Additional information for APPLE-SA-2018-9-24-5 watchOS 5 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2018-10-30-8 Additional information for APPLE-SA-2018-9-24-4 iOS 12 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2018-10-30-6 iTunes 12.9.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2018-10-30-11 Additional information for APPLE-SA-2018-9-24-6 tvOS 12 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2018-10-30-14 Additional information for APPLE-SA-2018-7-9-4 macOS High Sierra 10.13.6, Security Update 2018-0… (Apple Product Security <product-securit…)

61 messages