bugtraq mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

bugtraq mailing list - 2019/05

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹	² 1	³ 15	⁴	⁵
⁶	⁷	⁸ 1	⁹ 2	¹⁰ 4	¹¹	¹²
¹³ 3	¹⁴ 10	¹⁵ 10	¹⁶ 3	¹⁷ 1	¹⁸	¹⁹
²⁰ 2	²¹ 4	²² 2	²³ 6	²⁴	²⁵	²⁶
²⁷ 6	²⁸	²⁹ 5	³⁰ 1	³¹ 4

Messages by day:

May 2 (1 message)

Windows PowerShell ISE / Filename Parsing Flaw Remote Code Execution 0day (apparitionsec@...il.com)

May 3 (15 messages)

[SYSS-2019-005]: ABUS Secvest - Proximity Key - Cryptographic Issues (CWE-310) (matthias.deeg@...s.de)
2019 Public Bug bounty launched (Reports <reports@...osolutions.com>)
[Newsletter/Marketing] [ISN] Attackers Used Red-Team, Pen-Testing Tools to Hack Wipro (InfoSec News <alerts@...osecnews.org>)
[Newsletter/Marketing] [ISN] MITRE asks vendors to do more to detect stealthy hacks (InfoSec News <alerts@...osecnews.org>)
[Newsletter/Marketing] [ISN] Going Toe-to-Toe With Ukraine's Separatist Hackers (InfoSec News <alerts@...osecnews.org>)
[Newsletter/Marketing] [ISN] DHS Orders Agencies to Patch Critical Vulnerabilities Within 15 Days (InfoSec News <alerts@...osecnews.org>)
[Newsletter/Marketing] [ISN] Subscribing and Unsubscribing from InfoSec News (InfoSec News <alerts@...osecnews.org>)
[Newsletter/Marketing] [ISN] Hackers Steal and Ransom Financial Data Related to Some of the World's Largest Companies (InfoSec News <alerts@...osecnews.org>)
[Newsletter/Marketing] [ISN] Executive Order on America's Cybersecurity Workforce (InfoSec News <alerts@...osecnews.org>)
[Newsletter/Marketing] [ISN] After account hacks, Twitch streamers take security into their own hands (InfoSec News <alerts@...osecnews.org>)
[Newsletter/Marketing] [ISN] Wall Street spending big to protect against hacking: report (InfoSec News <alerts@...osecnews.org>)
[Newsletter/Marketing] [ISN] Spot the not-Fed: A day at AvengerCon, the Army's answer to hacker conferences (InfoSec News <alerts@...osecnews.org>)
[Newsletter/Marketing] [ISN] Sinister secret backdoor found in networking gear perfect for government espionage: The Chin… (InfoSec News <alerts@...osecnews.org>)
[Newsletter/Marketing] [ISN] Hundreds of Orpak gas station systems can be easily hacked thanks to hardcoded passwords (InfoSec News <alerts@...osecnews.org>)
[Newsletter/Marketing] [ISN] Why local governments are a hot target for cyberattacks (InfoSec News <alerts@...osecnews.org>)

May 8 (1 message)

[SECURITY] [DSA 4438-1] atftp security update (Salvatore Bonaccorso <carnil@...ian.org>)

May 9 (2 messages)

SEC Consult SA-20190509-0 :: Multiple Vulnerabilities in Gemalto (Thales Group) DS3 Authentication Server / Ezio Server (SEC Consult Vulnerability Lab <research…)
dotCMS v5.1.1 Vulnerabilities (John Martinelli <john@...ureli.com>)

May 10 (4 messages)

[SECURITY] [DSA 4439-1] postgresql-9.6 security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4440-1] bind9 security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4441-1] symfony security update (Sebastien Delafond <seb@...ian.org>)
SEC Consult SA-20190510-0 :: Unauthenticated SQL Injection vulnerability in OpenProject (SEC Consult Vulnerability Lab <research@...-consult.com>)

May 13 (3 messages)

[SECURITY] [DSA 4442-1] ghostscript security update (Salvatore Bonaccorso <carnil@...ian.org>)
SEC Consult SA-20190513-0 :: Cleartext message spoofing in supplementary Go Cryptography Libraries (@sec_consult) (SEC Consult Vulnerability Lab <research@...-…)
Re: System Down: A systemd-journald exploit (Qualys Security Advisory <qsa@...lys.com>)

May 14 (10 messages)

APPLE-SA-2019-5-13-1 iOS 12.3 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2019-5-13-2 macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update 2019-003 Sierra (Apple Product Security <product-security-nore…)
APPLE-SA-2019-5-13-3 tvOS 12.3 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2019-5-13-4 watchOS 5.2.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2019-5-13-6 Apple TV Software 7.3 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2019-5-13-5 Safari 12.1.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[CVE-2019-8978] Improper Authentication (CWE-287) in Ellucian Banner Web Tailor and Banner Enterprise Identity Services (joshua@...liken.net)
[SECURITY] [DSA 4443-1] samba security update (Salvatore Bonaccorso <carnil@...ian.org>)
[CVE-2019-8978] Improper Authentication (CWE-287) in Ellucian Banner Web Tailor and Banner Enterprise Identity Services (Joshua Mulliken <joshua@...liken.net>)
[SECURITY] [DSA 4442-2] cups-filters regression update (Salvatore Bonaccorso <carnil@...ian.org>)

May 15 (10 messages)

[SECURITY] [DSA 4445-1] drupal7 security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4444-1] linux security update (Salvatore Bonaccorso <carnil@...ian.org>)
FreeBSD Security Advisory FreeBSD-SA-19:03.wpa (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
[SECURITY] [DSA 4446-1] lemonldap-ng security update (Moritz Muehlenhoff <jmm@...ian.org>)
FreeBSD Security Advisory FreeBSD-SA-19:06.pf (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-19:04.ntp (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-19:07.mds (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-19:05.pf (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
SEC Consult SA-20190515-0 :: Authorization Bypass in RSA NetWitness (@sec_consult) (SEC Consult Vulnerability Lab <research@...-consult.com>)
[SECURITY] [DSA 4447-1] intel-microcode security update (Moritz Muehlenhoff <jmm@...ian.org>)

May 16 (3 messages)

FreeBSD Security Advisory FreeBSD-SA-19:07.mds (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
FreeBSD Security Advisory FreeBSD-SA-19:07.mds [REVISED] (FreeBSD Security Advisories <security-advisories@...ebsd.org>)
[slackware-security] rdesktop (SSA:2019-135-01) (Slackware Security Team <security@...ckware.com>)

May 17 (1 message)

[RT-SA-2019-002] Directory Traversal in Cisco Expressway Gateway (RedTeam Pentesting GmbH <release@...team-pentesting.de>)

May 20 (2 messages)

local privilege escalation via CDE dtprintinfo (Marco Ivaldi <marco.ivaldi@...iaservice.net>)
Emerson Network Power Cross Site Scripting(XSS) Vulnerability (Kubilay Onur Gungor <kubilay@...erstruggle.org>)

May 21 (4 messages)

Advisory: security controls configured in php.ini could be bypassed on Linux (Imre Rad <radimre83@...il.com>)
WebKitGTK and WPE WebKit Security Advisory WSA-2019-0003 (Michael Catanzaro <mcatanzaro@...lia.com>)
CSRF in Darktrace Enterprise Immune System <=3.0.10 (Gerwout Van der Veen <gerwoutvdveen@...il.com>)
[REVIVE-SA-2019-002] Revive Adserver Vulnerability (Matteo Beccati <matteo@...cati.com>)

May 22 (2 messages)

[slackware-security] mozilla-firefox (SSA:2019-141-01) (Slackware Security Team <security@...ckware.com>)
[SYSS-2019-002] Blue Prism Robotic Process Automation (RPA) - Privilege Escalation (benjamin.hess@...s.de)

May 23 (6 messages)

Anviz M3 RFID Access Control security issues (Marco <security@...lab.it>)
[SECURITY] [DSA 4448-1] firefox-esr security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4449-1] ffmpeg security update (Moritz Muehlenhoff <jmm@...ian.org>)
Bitbucket Server security advisory 2019-05-22 (Anton Black <ablack@...assian.com>)
[slackware-security] curl (SSA:2019-142-01) (Slackware Security Team <security@...ckware.com>)
[CVE-2019-11604] Quest KACE Systems Management Appliance <= 9.0 kbot_service_notsoap.php METHOD Reflected Cross-Site Sc… (RCE Security <security@...security.com>)

May 27 (6 messages)

[SECURITY] [DSA 4450-1] wpa security update (Yves-Alexis Perez <corsac@...ian.org>)
MacOS X GateKeeper Bypass (Filippo Cavallarin <filippo.cavallarin@...resegment.com>)
CA20190523-01: Security Notice for CA Risk Authentication and CA Strong Authentication (Kevin Kotas <kevin.kotas@...adcom.com>)
[SECURITY] [DSA 4452-1] jackson-databind security update (Moritz Muehlenhoff <jmm@...ian.org>)
[SECURITY] [DSA 4451-1] thunderbird security update (Moritz Muehlenhoff <jmm@...ian.org>)
Crowd Security Advisory - 2019-05-22 (Atlassian <security@...assian.com>)

May 29 (5 messages)

APPLE-SA-2019-5-28-2 iCloud for Windows 7.12 (Apple Product Security <product-security-noreply@...ts.apple.com>)
APPLE-SA-2019-5-28-1 iTunes for Windows 12.9.5 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[SYSS-2019-012]: Siemens LOGO! 8 - Use of Hard-coded Cryptographic Key (CWE-321) (matthias.deeg@...s.de)
[SYSS-2019-013]: Siemens LOGO! 8 - Missing Authentication for Critical Function (CWE-306) (matthias.deeg@...s.de)
[SYSS-2019-014]: Siemens LOGO! 8 - Storing Passwords in a Recoverable Format (CWE-257) (matthias.deeg@...s.de)

May 30 (1 message)

[SECURITY] [DSA 4453-1] openjdk-8 security update (Moritz Muehlenhoff <jmm@...ian.org>)

May 31 (4 messages)

[SECURITY] [DSA 4454-1] qemu security update (Moritz Muehlenhoff <jmm@...ian.org>)
APPLE-SA-2019-5-30-1 AirPort Base Station Firmware Update 7.9.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
Unauthorized Access Vulnerability in ZyXEL P-660HN-T1 V2 (2.00(AAKK.3)) (Onur Onur <publicb4g@...il.com>)
Unauthorized Access Vulnerability in ZyXEL P-660HN-T1 V2 (2.00(AAKK.3)) (Onur Onur <publicb4g@...il.com>)

80 messages