full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2016/03

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹	²	³ 1	⁴ 14	⁵	⁶
⁷ 1	⁸ 1	⁹ 9	¹⁰ 6	¹¹	¹² 6	¹³
¹⁴ 14	¹⁵ 4	¹⁶ 1	¹⁷ 11	¹⁸	¹⁹	²⁰ 7
²¹	²² 1	²³ 11	²⁴	²⁵	²⁶	²⁷
²⁸	²⁹	³⁰ 1	³¹ 9

Messages by day:

March 3 (1 message)

[FD] Vipps by DNB for Android - cryptographic vulnerabilities (alendal@....hush.com)

March 4 (14 messages)

[FD] Browser Security Tool: HTTPS Only 2.1 (Major Release, Open Source, Python) (David Leo <david.leo@...psonly.net>)
[FD] Panda SM Manager iOS Application - MITM SSL Certificate Vulnerability (David Coomber <davidcoomber.infosec@...il.com>)
[FD] Shakacon 2016 CFP - July 11-14 / Hawaii (Jonathan Brossard <endrazine@...il.com>)
[FD] WAGO IO PLC 758-870, 750-849, 750-849 vulnerabilities (Karn Ganeshen <karnganeshen@...il.com>)
[FD] Schneider Electric Building Operation Automation Server Multiple Vulnerabilities (Karn Ganeshen <karnganeshen@...il.com>)
[FD] [REVIVE-SA-2016-001] Revive Adserver - Multiple vulnerabilities (Matteo Beccati <matteo@...cati.com>)
[FD] CVE Request: Fiyo CMS 2.0.6.1 - Multiple XSS Vulnerabilities (Himanshu Mehta <mehta.himanshu21@...il.com>)
[FD] Vulnerabilities in Mobile Safari ("MustLive" <mustlive@...security.com.ua>)
[FD] [CFP] EuskalHack (San Sebastian / Donostia) 2016 (Ryan Dewhurst <ryandewhurst@...il.com>)
[FD] Hacking Magento eCommerce For Fun And 17.000 USD (Egidio Romano <research@...mainsecurity.com>)
[FD] Hacking Magento eCommerce For Fun And 17.000 USD (Egidio Romano <research@...mainsecurity.com>)
[FD] Executable installers are vulnerable^WEVIL (case 29): putty-0.66-installer.exe allowa arbitrary (remote) code exe… ("Stefan Kanthak" <stefan.kanthak@...go.…)
[FD] McAfee VirusScan Enterprise security restrictions bypass (Agazzini Maurizio <inode@...iaservice.net>)
Re: [FD] Netgear GS105Ev2 - Multiple Vulnerabilities (Nick Boyce <nick.boyce@...il.com>)

March 7 (1 message)

[FD] Apple iOS v9.2.1 - Multiple PassCode Bypass Vulnerabilities (App Store Link, Buy Tones Link & Weather Channel Link… (Vulnerability Lab <research@...nerabili…)

March 8 (1 message)

[FD] Windows Mail Find People DLL side loading vulnerability ("Securify B.V." <lists@...urify.nl>)

March 9 (9 messages)

[FD] LSE Leading Security Experts GmbH - LSE-2016-01-01 - Wordpress ProjectTheme - Multiple Vulnerabilities (LSE-Advisories <advisories@...xperts.de>)
Re: [FD] Windows Mail Find People DLL side loading vulnerability ("Securify B.V." <lists@...urify.nl>)
[FD] [CORE-2016-0003] - Samsung SW Update Tool MiTM (CORE Advisories Team <advisories@...esecurity.com>)
[FD] [CORE-2016-0004] - SAP Download Manager Password Weak Encryption (CORE Advisories Team <advisories@...esecurity.com>)
[FD] Advisory X41-2016-001: Memory Corruption Vulnerability in "libotr" (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)
[FD] CVE-2016-2563 - PuTTY/PSCP <=0.66 buffer overflow - vuln-pscp-sink-sscanf ("oststrom \(public\)" <pub@...strom.com>)
[FD] New Security Tool: MrLooquer - IPv6 Intelligence (Rafa Sanchez <rafa.sgomez@...il.com>)
[FD] Thomson TWG850 Wireless Router Multiple Vulnerabilities (Sebastian Perez <s3bap3@...il.com>)
Re: [FD] Netgear GS105Ev2 - Multiple Vulnerabilities (Benedikt Westermann <benedikt.westermann@...ec.tuv.com>)

March 10 (6 messages)

[FD] Security contact @ Gigabyte (Gustavo Sorondo <gs@...tainfinita.com.ar>)
[FD] Open Vulnerablity ID tracker instead of CVE. Maybe ("op7ic \\x00" <op7ica@...il.com>)
Re: [FD] Windows Mail Find People DLL side loading vulnerability ("Stefan Kanthak" <stefan.kanthak@...go.de>)
[FD] Executable installers are vulnerable^WEVIL (case 30): clamwin-0.99-setup.exe allows arbitrary (remote) code execu… ("Stefan Kanthak" <stefan.kanthak@...go.…)
[FD] Executable installers are vulnerable^WEVIL (case 31): MalwareBytes' installers allows arbitrary (remote) code exe… ("Stefan Kanthak" <stefan.kanthak@...go.…)
[FD] [SE-2012-01] Broken security fix in Oracle Java SE 7/8/9 (Security Explorations <contact@...urity-explorations.com>)

March 12 (6 messages)

[FD] Exim < 4.86.2 Local Root Privilege Escalation (Dawid Golunski <dawid@...alhackers.com>)
[FD] Kaltura Community Edition Multiple Vulnerabilities (Daniel Jensen <daniel.jensen@...urity-assessment.com>)
[FD] Netgear ReadyNAS Surveillance: Unauthenticated Remote Command Execution (Sysdream Labs <labs@...dream.com>)
[FD] Wordpress Configuration Error on XDA-Developers.com led to full Web-Server Access and shut down website (Steffen Rogge <it.steffen.rogge@...il.com>)
[FD] Microsoft Edge CDOMTextNode::get_data type confusion (Berend-Jan Wever <berendjanwever@...il.com>)
Re: [FD] Security contact @ Gigabyte (Mustafa Al-Bassam <mus@...albas.com>)

March 14 (14 messages)

[FD] Chamlio LMS v1.10.2 - (Profile) Persistent Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] ChitaSoft (Web-Application) - SQL Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Yahoo Bug Bounty #37 - Sender Spoofing Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
Re: [FD] Exim < 4.86.2 Local Root Privilege Escalation (loon <loon@...unix.org>)
Re: [FD] Security contact @ Gigabyte (Andrew Deck <andrew.hastings.deck@...il.com>)
Re: [FD] Exim < 4.86.2 Local Root Privilege Escalation (Dawid Golunski <dawid@...alhackers.com>)
Re: [FD] Exim < 4.86.2 Local Root Privilege Escalation (loon <loon@...unix.org>)
[FD] Releasing Mobile Security Framework (MobSF) v0.9 (Ajin Abraham <ajin25@...il.com>)
[FD] CVE-2016-3115 - OpenSSH <=7.2p1 xauth injection (INTREST SEC <researchlab@...rest-sec.com>)
[FD] CVE-2016-3116 - Dropbear SSH xauth injection (INTREST SEC <researchlab@...rest-sec.com>)
[FD] Netgear CG3000 modem/router set password vulnerability (paul.szabo@...ney.edu.au)
[FD] Latest Tegile security updates include tomcat examples package containing many security flaws. (Jesse Jacobs <jacobs.jesse@...il.com>)
Re: [FD] Security contact @ Gigabyte (Jeffrey Walton <noloader@...il.com>)
Re: [FD] Security contact @ Gigabyte (Fyodor <fyodor@...p.org>)

March 15 (4 messages)

Re: [FD] Security contact @ Gigabyte (Gustavo Sorondo <gs@...tainfinita.com.ar>)
Re: [FD] Security contact @ Gigabyte (Jeffrey Walton <noloader@...il.com>)
[FD] [CFP] BSides Las Vegas (Genevieve Southwick <gksouthwick@...deslv.org>)
[FD] NEW VMSA-2016-0003 - VMware vRealize Automation and vRealize Business Advanced and Enterprise address Cross-Site S… (VMware Security Response Center <securi…)

March 16 (1 message)

[FD] [CORE-2016-0005] - FreeBSD Kernel amd64_set_ldt Heap Overflow (CORE Advisories Team <advisories@...esecurity.com>)

March 17 (11 messages)

[FD] OWASP AppSec USA 2016 Call for Papers Released ("Weidenhamer, Andrew" <Andrew.Weidenhamer@...us.com>)
[FD] Zenphoto 1.4.11: RFI ("Curesec Research Team (CRT)" <crt@...esec.com>)
[FD] PivotX 2.3.11: Reflected XSS ("Curesec Research Team (CRT)" <crt@...esec.com>)
[FD] PivotX 2.3.11: Directory Traversal ("Curesec Research Team (CRT)" <crt@...esec.com>)
[FD] PivotX 2.3.11: Code Execution ("Curesec Research Team (CRT)" <crt@...esec.com>)
[FD] BigTree 4.2.8: Object Injection & Improper Filename Sanitation ("Curesec Research Team (CRT)" <crt@...esec.com>)
[FD] Defense in depth -- the Microsoft way (part 39): vulnerabilities, please meet the bar for security servicing ("Stefan Kanthak" <stefan.kanthak@...go.de>)
[FD] WordPress Bulletproof Security Plugin Multiple Cross Site Scripting Vulnerabilities (Sachin Wagh <wsachin092@...il.com>)
[FD] server and client side remote code execution through a buffer overflow in all git versions before 2.7.1 (unpublishe… (Laël Cellier <lael.cellier@...oste.net…)
[FD] New Security Tool: Enteletaor - Broker & MQ Injection tool (cr0hn <cr0hn@...hn.com>)
Re: [FD] [CORE-2016-0005] - FreeBSD Kernel amd64_set_ldt Heap Overflow (jungle Boogie <jungleboogie0@...il.com>)

March 20 (7 messages)

[FD] FortiOS (Fortinet) - Open Redirect and Cross Site Scripting (Javier Nieto <jnietotn@...il.com>)
Re: [FD] server and client side remote code execution through a buffer overflow in all git versions before 2.7.1 (unpub… (Laël Cellier <lael.cellier@...oste.net…)
[FD] AsusTEK asio.sys unsafe operation (0x3d5157636b525761 iddqd <0x3d5157636b525761@...il.com>)
[FD] Netgear DGNv2200 multiple vulnerabilities (Bezeq firmware) (0x3d5157636b525761 iddqd <0x3d5157636b525761@...il.com>)
[FD] DORG - Disc Organization System SQL Injection And Cross Site Scripting (SECUPENT Research Center <research@...upent.com>)
[FD] A novel persistent injection to Windows machines (0x3d5157636b525761 iddqd <0x3d5157636b525761@...il.com>)
[FD] Achievo Cross Site Scripting vulnerability (SECUPENT Research Center <research@...upent.com>)

March 22 (1 message)

[FD] [RT-SA-2016-002] Cross-site Scripting in Securimage 3.6.2 (RedTeam Pentesting GmbH <release@...team-pentesting.de>)

March 23 (11 messages)

[FD] Executable installers are vulnerable^WEVIL (case 32): Comodo's installers allow arbitrary (remote) code execution … ("Stefan Kanthak" <stefan.kanthak@...go.…)
[FD] HTTPS Only 3.1 (Detailed Analysis, Browser Security, Open Source, Python) (David Leo <david.leo@...psonly.net>)
[FD] Remote Code Execution in DVR affecting over 70 different vendors (rotem kerner <nullfield@...il.com>)
[FD] Facebook Messenger (iOS) Certificate Validation Vulnerability (Sean Wright <swright@...ureworks.com>)
[FD] APPLE-SA-2016-03-21-1 iOS 9.3 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2016-03-21-2 watchOS 2.2 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2016-03-21-3 tvOS 9.2 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2016-03-21-4 Xcode 7.3 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2016-03-21-5 OS X El Capitan 10.11.4 and Security Update 2016-002 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2016-03-21-6 Safari 9.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2016-03-21-7 OS X Server 5.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)

March 30 (1 message)

[FD] PayPal Bug Bounty #121 - (Profile) Filter Bypass & Persistent Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

March 31 (9 messages)

[FD] Patron Info System - SQL Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Hi Technology & Services CMS - SQL Injection Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[FD] WP External Links v1.80 - Cross Site Scripting Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Docker UI v0.10.0 - Multiple Client Side Cross Site Request Forgery Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Docker UI v0.10.0 - Multiple Persistent Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Cades (2016Q1) - (id) Multiple SQL Injection Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Dorsa Web CMS - Multiple SQL Injection Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Trend Micro (SSO) - (Backend) SSO Redirect & Session Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Python v2.7 v1.5.4 iOS - Filter Bypass & Persistent Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

97 messages