full-disclosure mailing list - 2016/02

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2016/02

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹ 2	²	³ 7	⁴ 28	⁵	⁶	⁷
⁸ 7	⁹	¹⁰ 18	¹¹	¹² 8	¹³	¹⁴
¹⁵	¹⁶ 9	¹⁷	¹⁸ 5	¹⁹ 7	²⁰	²¹
²² 12	²³ 2	²⁴ 4	²⁵ 17	²⁶	²⁷	²⁸
²⁹ 2

Messages by day:

February 1 (2 messages)

[FD] Netlife Photosuite Pro - Client Side Cross Site Scripting Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] File Hub v3.3 iOS (Wifi) - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)

February 3 (7 messages)

[FD] Soso Transfer v1.1 iOS - Denial of Service Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Soso Transfer v1.1 iOS - Denial of Service Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] File Manager PRO v1.3 iOS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[FD] SimpleView CRM - Client Side Open Redirect Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Getdpd Bug Bounty #1 - (asm0option0) Persistent Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Compal ConnectBox Wireless - Passphrase Settings Filter Bypass Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Security Advisories (Portcullis Advisories <advisories@...tcullis-security.com>)

February 4 (28 messages)

[FD] AST-2016-001: BEAST vulnerability in HTTP server ("Asterisk Security Team" <security@...erisk.org>)
[FD] AST-2016-002: File descriptor exhaustion in chan_sip ("Asterisk Security Team" <security@...erisk.org>)
[FD] AST-2016-003: Remote crash vulnerability when receiving UDPTL FAX data. ("Asterisk Security Team" <security@...erisk.org>)
[FD] ManageEngine Eventlog Analyzer v4-v10 Privilege Esacalation (graphx@...aint.org)
[FD] Symphony CMS 2.6.3 – Multiple SQL Injection Vulnerabilities (Sachin Wagh <wsachin092@...il.com>)
[FD] VMWare Zimbra Mailer | DKIM longterm Mail Replay vulnerability (t.schughart@...sec-networks.com)
[FD] OpenXchange | Information Disclosure (t.schughart@...sec-networks.com)
[FD] Equibase.com HTML Injection/Possible Reflected XSS (Russell Butturini <tcstool@...il.com>)
[FD] Atutor 2.2: XSS ("Curesec Research Team (CRT)" <crt@...esec.com>)
[FD] Opendocman 1.3.4: CSRF ("Curesec Research Team (CRT)" <crt@...esec.com>)
[FD] Opendocman 1.3.4: HTML Injection ("Curesec Research Team (CRT)" <crt@...esec.com>)
[FD] Time-based SQL Injection in Admin panel UliCMS <= v9.8.1 (Manuel Garcia Cardenas <advidsec@...il.com>)
[FD] GE Industrial Solutions - UPS SNMP Adapter Command Injection and Clear-text Sensitive Info Vulnerabilities (Karn Ganeshen <karnganeshen@...il.com>)
[FD] MailPoet Newsletter 2.6.19 - Security Advisory - Reflected XSS (Onur Yilmaz <onur@...sparker.com>)
[FD] ASUS RT-N56U Persistent XSS (graphx@...aint.org)
[FD] DLink DVGN5402SP Multiple Vulnerabilities (Karn Ganeshen <karnganeshen@...il.com>)
[FD] Sauter ModuWEB Vision SCADA vulnerabilities (Martin Jartelius <mj@...post24.com>)
[FD] Dell SecureWorks iOS Application - MITM SSL Certificate Vulnerability (David Coomber <davidcoomber.infosec@...il.com>)
[FD] [CERT 777024 / CVE-2016-1524/5]: RCE and file download in Netgear NMS300 (Pedro Ribeiro <pedrib@...il.com>)
[FD] CALL FOR PAPERS - FAQin Congress - Madrid (Esteban Dauksis <esteban@...ksis.com>)
[FD] Apple Software Update 2.1.3 (Windows) Remote Command Execution. (Rio Sherri <rio.sherri@...nstudent.info>)
[FD] A tale of openssl_seal(), PHP and Apache2handle (s3810@...stk.edu.pl)
[FD] ArpON (ARP handler inspection) 3.0-ng release (Andrea Di Pasquale <spikey.it@...il.com>)
[FD] Apple iOS v9.1, 9.2 & 9.2.1 - Application Update Loop Pass Code Bypass (Vulnerability Lab <research@...nerability-lab.com>)
[FD] NDI5aster – Privilege Escalation through NDIS 5.x Filter Intermediate Drivers (Kyriakos Economou <arfproject@...mail.com>)
[FD] osTicket multiple vulnerabilities (Giovanni Cerrato <cerratogianni@...il.com>)
[FD] Netgear RP614v3 : Authentication Bypass (fulldisclosure <fulldisclosure@...lution-hosting.eu>)
[FD] Executable installers are vulnerable^WEVIL (case 23): WinImage's installer and self-extractors allow arbitrary (r… ("Stefan Kanthak" <stefan.kanthak@...go.…)

February 8 (7 messages)

[FD] JavaScript Anywhere v3.0.4 iOS - Persistent Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Getdpd BB #3 - Persistent Cross Site Scripting Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Getdpd BB #5 - Persistent Filename Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Getdpd BB #4 - (name) Persistent Validation Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Alsovalue CMS 2016Q1 - SQL Injection Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Ebay Inc (Pages) - Client Side Cross Site Scripting Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[FD] PressePortal NewsAktuell (DPA) - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)

February 10 (18 messages)

[FD] SEC Consult SA-20160210-0 :: Yeager CMS Multiple Vulnerabilities (SEC Consult Vulnerability Lab <research@...-consult.com>)
[FD] File Sharing Manager v1.0 iOS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[FD] MyScript Memo v3.0 iOS - (Mail) Persistent Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Getdpd Bug Bounty #6 - (Import - FTP) Persistent Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Apache Sling Framework v2.3.6 (Adobe AEM) [CVE-2016-0956] - Information Disclosure Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] NPS Datastore server DLL side loading vulnerability ("Securify B.V." <lists@...urify.nl>)
[FD] BDA MPEG2 Transport Information Filter DLL side loading vulnerability ("Securify B.V." <lists@...urify.nl>)
[FD] MapsUpdateTask Task DLL side loading vulnerability ("Securify B.V." <lists@...urify.nl>)
Re: [FD] OLE DB Provider for Oracle multiple DLL side loading vulnerabilities ("Securify B.V." <lists@...urify.nl>)
[FD] D-Link router DSL-2750B firmware 1.01 to 1.03 - remote command execution no auth required (p <p@...ntumleap.it>)
[FD] [CVE-2016-0602, CVE-2016-0603] Executable installers are vulnerable^WEVIL (case 24): Oracle Java 6/7/8 SE and Vir… ("Stefan Kanthak" <stefan.kanthak@...go.…)
[FD] Multiple vulnerabilities in Open Real Estate v 1.15.1 ("Simon Waters (Surevine)" <simon.waters@...evine.com>)
[FD] SerVision HVG - Hardcoded password (Richard Tafoya <richroc17@...il.com>)
[FD] Executable installers are vulnerable^WEVIL (case 25): WinRAR's installer and self-extractors allow arbitrary (remo… ("Stefan Kanthak" <stefan.kanthak@...go.…)
[FD] Poor UX in Asus routers can leave the web UI unintentionally exposed to the Internet (David Longenecker <david@...urityforrealpeople.com>)
[FD] CVE-2016-2046 Cross Site Scripting in Sophos UTM 9 (Mike Lisi <mike.codes.things@...il.com>)
[FD] VP2016-001: Remote Command Execution in File Replication Pro (Vantage Point Security <lists@...tagepoint.sg>)
Re: [FD] Netgear GS105Ev2 - Multiple Vulnerabilities (Nick Boyce <nick.boyce@...il.com>)

February 12 (8 messages)

[FD] HD Video Player v2.5 iOS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[FD] KL-001-2016-001 : Arris DG1670A Cable Modem Remote Command Execution (KoreLogic Disclosures <disclosures@...elogic.com>)
[FD] Serena Business Manager < 10.01 DOM XSS Vulnerability (Cosmin Maier <cosmin@...oday.pro>)
[FD] RVAsec 2016 CFP is now Open! (Sullo <sullo@...t.net>)
[FD] BSides Hannover 2016 (Daniel Busch <danielbusch@...lbox.org>)
[FD] Point of Sale WinREST machines remote privilege escalation (Vitor Silva <up201402657@...up.pt>)
[FD] [ERPSCAN-15-031] SAP MII – Encryption Downgrade vulnerability (ERPScan inc <erpscan.online@...il.com>)
[FD] [ERPSCAN-15-032] SAP PCo agent – DoS vulnerability (ERPScan inc <erpscan.online@...il.com>)

February 16 (9 messages)

[FD] Redaxo CMS contains multiple vulnerabilities (LSE-Advisories <advisories@...xperts.de>)
[FD] Browser Security Tool: HTTPS Only (Why, How, Open Source, Python) (David Leo <httpsonly.github.io@...il.com>)
[FD] Packet Hacking Village Speaker Workshops at DEF CON 24 CFP Now Open (Modified) (Ming <ming@...lofsheep.com>)
[FD] Tiny Tiny RSS Blind SQL Injection (Kacper Szurek <kacperszurek@...il.com>)
Re: [FD] [oss-security] HTTPS Only (Open Source, Python) (P J P <ppandit@...hat.com>)
[FD] BFS-SA-2016-001: FireEye Detection Evasion and Whitelisting of Arbitrary Malware (Blue Frost Security Research Lab <research@...efrostsecurity.de>)
Re: [FD] Point of Sale WinREST machines remote privilege escalation (Douglas Held <risk@...glasheld.net>)
Re: [FD] Point of Sale WinREST machines remote privilege escalation (Vítor Hugo Silva <up201402657@...up.pt>)
Re: [FD] Point of Sale WinREST machines remote privilege escalation (Duarte Silva <duarte.silva@...ializing.me>)

February 18 (5 messages)

[FD] Vesta Control Panel <= 0.9.8-15 - Persistent XSS Vulnerability (Necmettin COŞKUN <h@...r.io>)
[FD] CVE-2016-2046 Cross Site Scripting in Sophos UTM 9 (Mike Lisi <mike.codes.things@...il.com>)
[FD] Umbraco - The open source ASP.NET CMS Multiple Vulnerabilities (Sandeep Kamble <sandeepk.l337@...il.com>)
[FD] Cisco ASA VPN - Zero Day Exploit (Juan Sacco <juansacco@...il.com>)
[FD] EBAY Bugbounty: Persistent DOM Based XSS on ebay.com (Alexander Korznikov <nopernik@...il.com>)

February 19 (7 messages)

[FD] ifixit Bug Bounty #5 - Guide Search Persistent Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] ifixit Bug Bounty #6 -(Profile) Persistent Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Prezi Bug Bounty #5 - Client Side Cross Site Scripting & Open Redirect Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Investors Application - Client Side Cross Site Scripting Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Chamilo LMS IDOR - (messageId) Delete POST Inject Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Chamilo LMS - Persistent Cross Site Scripting Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Adobe - Multiple Client Side Cross Site Scripting Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)

February 22 (12 messages)

[FD] InstantCoder v1.0 iOS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Ubiquiti Networks Bug Bounty #9 - Invoice Persistent Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
Re: [FD] Cisco ASA VPN - Zero Day Exploit (Joey Maresca <jmaresca@...il.com>)
[FD] Avast Virtualization Driver - Elevation Of Privileges (Kyriakos Economou <keconomou@...titude.com>)
[FD] BlackBerry Enterprise Service 12 Self-Service - SQLi and Reflected XSS (Adrian Hayes <adrian.hayes@...urity-assessment.com>)
[FD] PLANET IP Surveillance camera Multiple Vulnerabilities (0rwell Labs <orwelllabs@...il.com>)
[FD] ferretCMS– Multiple Cross-Site Scripting Vulnerabilities (Sachin Wagh <wsachin092@...il.com>)
Re: [FD] Cisco ASA VPN - Zero Day Exploit ("Mark-David McLaughlin (marmclau)" <marmclau@...co.com>)
[FD] Vulnerability in WebSVN 2.3.3 (Etnies <kuba25101990@...il.com>)
[FD] CVE Request: Fiyo CMS 2.0.2.1 - Multiple Persistent XSS Vulnerabilities (Himanshu Mehta <mehta.himanshu21@...il.com>)
Re: [FD] Cisco ASA VPN - Zero Day Exploit (Daniel Hadfield <dan@...gsweep.co.uk>)
[FD] Oxwall Forum v1.8.1 - Persistent Cross Site Scripting Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

February 23 (2 messages)

[FD] InstantCoder v1.0 iOS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Prezi Bug Bounty #7 - (Charts) Persistent Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

February 24 (4 messages)

[FD] [KIS-2016-02] Magento <= 1.9.2.2 (RSS Feed) Information Disclosure Vulnerability (Egidio Romano <research@...mainsecurity.com>)
[FD] eFront Learning 3.6.15.6 CMS - (Forum) Persistent Title Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] eFront 3.6.15.6 CMS – (Message Attachment) Persistent Cross Site Scripting Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] GTA Firewall GB-OS v6.2.02 - Filter Bypass & Persistent Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

February 25 (17 messages)

[FD] CVE-2015-0955 - Stored XSS in Adobe Experience Manager (AEM) (Alexandre Herzog <Alexandre.Herzog@...c.ch>)
[FD] CSNC-2016-001 - XSS in OpenAM (Alexandre Herzog <Alexandre.Herzog@...c.ch>)
[FD] CSNC-2016-002 - Open Redirect in OpenAM (Alexandre Herzog <Alexandre.Herzog@...c.ch>)
[FD] Ubiquiti Networks UniFi v3.2.10 Generic CSRF Protection Bypass (Julien Ahrens <info@...security.com>)
[FD] CVE ID Request : Centreon remote code execution (Sysdream Labs <labs@...dream.com>)
[FD] CVE ID Request : Proxmox VE Insecure hostname checking (remote root exploit) (Sysdream Labs <labs@...dream.com>)
[FD] CVE-2015-6541 : Multiple CSRF in Zimbra Mail interface (Sysdream Labs <labs@...dream.com>)
[FD] D-Link, Netgear Router Vulnerabiltiies (Dominic Chen <ddchen@...rew.cmu.edu>)
[FD] XSSer v1.7b: "ZiKA-47 Swarm!" released.... (psy <epsylon@...eup.net>)
Re: [FD] Executable installers are vulnerable^WEVIL (case 26): the installer of GIMP for Windows allows arbitrary (remo… (Jernej Simončič <jernej|s-os@...rnall…)
Re: [FD] Cisco ASA VPN - Zero Day Exploit (Joey Maresca <jmaresca@...il.com>)
[FD] Hacking Passwords, Lesson 11, Available Now! (Pete Herzog <lists@...com.org>)
[FD] [CVE-2015-5345] Information disclosure vulnerability in Apache Tomcat (Mark Koek <mark.koek@...ec.com>)
[FD] Various Linux Kernel USERNS Issues (halfdog <me@...fdog.net>)
[FD] Executable installers are vulnerable^WEVIL (case 26): the installer of GIMP for Windows allows arbitrary (remote) … ("Stefan Kanthak" <stefan.kanthak@...go.…)
Re: [FD] Executable installers are vulnerable^WEVIL (case 26): the installer of GIMP for Windows allows arbitrary (remo… ("Stefan Kanthak" <stefan.kanthak@...go.…)
[FD] Executable installers are vulnerable^WEVIL (case 4): InstallShield's wrapper and setup.exe ("Stefan Kanthak" <stefan.kanthak@...go.de>)

February 29 (2 messages)

[FD] WP Good News Themes - Client Side Cross Site Scripting Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Fing v3.3.0 iOS - Persistent Mail Encoding Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

128 messages

Powered by blists - more mailing lists