full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2016/05

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹
²	³ 12	⁴	⁵	⁶ 8	⁷	⁸
⁹ 3	¹⁰ 8	¹¹ 1	¹² 3	¹³ 4	¹⁴	¹⁵
¹⁶	¹⁷ 15	¹⁸	¹⁹ 1	²⁰	²¹	²²
²³ 7	²⁴ 1	²⁵ 5	²⁶ 6	²⁷	²⁸	²⁹
³⁰	³¹ 3

Messages by day:

May 3 (12 messages)

[FD] CVE-2016-3078: php: integer overflow in ZipArchive::getFrom* (Hans Jerry Illikainen <hji@...topia.com>)
[FD] CONFidence - May, 19-20th, Krakow - join the biggest hacker meeting in Poland! (Aleksandra Woźniak <aleksandra.wozniak@...idea.org.pl>)
[FD] Mozilla doesn't care for upstream security fixes, and doesn't bother to send own security fixes upstream ("Stefan Kanthak" <stefan.kanthak@...go.de>)
[FD] New BlackArch Linux ISOs (2016.04.28) and Installer released (Black Arch <blackarchlinux@...il.com>)
[FD] Garage4hackers Ranchoddas Webcast Series CTF Challenge (Sandeep Kamble <sandeepk.l337@...il.com>)
[FD] Observium Commercial - CSRF & Authenticated Code Execution (Dolev Farhi <D.Farhi@...com>)
[FD] real dangers of gsm setups (Gavrill Klimov <gavklimov@...il.com>)
[FD] Moxa MiiNePort - Multiple Vulnerabilities (Karn Ganeshen <karnganeshen@...il.com>)
[FD] Mobile Security Framework (MobSF) v0.9.2 Released (Ajin Abraham <ajin25@...il.com>)
[FD] CVE-2016-4338: Zabbix Agent 3.0.1 mysql.size shell command injection (Timo Juhani Lindfors <timo.lindfors@....fi>)
[FD] CVE-2016-3627 CVE-2016-3705: libxml2: stack overflow in xml validator (parser) (Simon Lees <sflees@...e.de>)
[FD] LSE Leading Security Experts GmbH - LSE-2016-02-03 - OXID eShop Path Traversal Vulnerability (LSE-Advisories <advisories@...xperts.de>)

May 6 (8 messages)

[FD] APPLE-SA-2016-05-03-1 Xcode 7.3.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] NetCommWireless HSPA 3G10WVE Wireless Router – Multiple vulnerabilities (Bhadresh Patel <Bhadresh.Patel@...pag.com>)
[FD] Swagger Editor v2.9.9 "description" Key DOM-based Cross-Site Scripting (Julien Ahrens <info@...security.com>)
[FD] CVE-2016-2784: CMS Made Simple < 2.1.3 & < 1.12.2 Web server Cache Poisoning (Lab I-Tracing <lab@...racing.com>)
[FD] CVE Request for ManageEngine Applications Manager Build No: 12700 Information Disclosure and Un-Authenticated SQL inje… (Saif El-Sherei <saif@...sepost.com>)
[FD] Give a warm welcome to Faraday v1.0.19! New GTK interface, Custom Reports & Bug fixing (Francisco Amato <famato@...obytesec.com>)
Re: [FD] NetCommWireless HSPA 3G10WVE Wireless Router – Multiple vulnerabilities (Bhadresh Patel <Bhadresh.Patel@...pag.com>)
[FD] Aruba ArubaOS/Aruba Instant/AirWave Management - Multiple Vulnerabilities (CVE-2016-2031, CVE-2016-2032) (Sven Blumenstein <svbl@...gle.com>)

May 9 (3 messages)

Re: [FD] CVE Request for ManageEngine Applications Manager Build No: 12700 Information Disclosure and Un-Authenticated SQL i… (Saif El-Sherei <saif@...herei.com>)
[FD] WheresMyDroid Android App issues (0x3d5157636b525761 iddqd <0x3d5157636b525761@...il.com>)
[FD] t2'16: Call For Papers 2016 (Helsinki, Finland) ("Tomi Tuominen" <tomi.tuominen@...fi>)

May 10 (8 messages)

[FD] Skype Manager - (Email Change) Filter Bypass Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Notes v4.5 iOS - Arbitrary File Upload Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Wordpress Truemag Theme - Client Side Cross Site Scripting Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Trend Micro Direct Pass - Filter Bypass & Cross Site Scripting Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Stanford University - Multiple SQL Injection Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Nfdump Nfcapd 1.6.14 Multiple Vulnerabilities (Denis Andzakovic <denis.andzakovic@...urity-assessment.com>)
[FD] Intuit QuickBooks 2007 - 2016 Arbitrary Code Execution ("Thegrideon Software" <info@...grideon.com>)
[FD] CFP: Passwords 2016, Ruhr-University Bochum, Germany, Dec 5-7 (Per Thorsheim <per@...rsheim.net>)

May 11 (1 message)

[FD] BulletProof Security 53.3 - Security Advisory - Multiple XSS Vulnerabilities (Onur Yilmaz <onur@...sparker.com>)

May 12 (3 messages)

[FD] Skype Phishing Attack (Danny Kopping <dannykopping@...il.com>)
[FD] CakePHP Framework <= 3.2.4 IP Spoofing Vulnerability (Dawid Golunski <dawid@...alhackers.com>)
[FD] Huawei Mobile Broadband HL Service Local Privilege Escalation (Bogner Florian <Florian.Bogner@...sch.net>)

May 13 (4 messages)

[FD] Webshell for IIS (Savio Bot <54v330@...il.com>)
Re: [FD] Skype Phishing Attack (Reindl Harald <h.reindl@...lounge.net>)
Re: [FD] Skype Phishing Attack (Wim Remes <wremes@...il.com>)
[FD] runAV mod_security Remote Command Execution (Rio Sherri <rio.sherri@...nstudent.info>)

May 17 (15 messages)

[FD] [ERPSCAN-16-008] SAP NetWeaver AS JAVA - XSS vulnerability in ProxyServer servlet (ERPScan inc <erpscan.online@...il.com>)
[FD] [ERPSCAN-16-009] SAP xMII - directory traversal vulnerability (ERPScan inc <erpscan.online@...il.com>)
[FD] APPLE-SA-2016-05-16-1 tvOS 9.2.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2016-05-16-2 iOS 9.3.2 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2016-05-16-3 watchOS 2.2.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2016-05-16-4 OS X El Capitan 10.11.5 and Security Update 2016-003 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2016-05-16-5 Safari 9.1.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2016-05-16-6 iTunes 12.4 (Apple Product Security <product-security-noreply@...ts.apple.com>)
Re: [FD] runAV mod_security Remote Command Execution (Reindl Harald <h.reindl@...lounge.net>)
Re: [FD] Skype Phishing Attack (Sebastian <sebb@...b767.de>)
[FD] Code Execution Vulnerabilities In 7zip (Nick Boyce <nick.boyce@...il.com>)
Re: [FD] Code Execution Vulnerabilities In 7zip (Nick Boyce <nick.boyce@...il.com>)
[FD] OWTF 2.0a "Tikka Masala" released! (Abraham Aranguren <abraham.aranguren@...sp.org>)
[FD] [ICS] Meteocontrol WEB’log Multiple Vulnerabilities (Karn Ganeshen <karnganeshen@...il.com>)
[FD] WSO2 SOA Enablement Server - Reflected Cross-Site Scripting (Etnies <kuba25101990@...il.com>)

May 19 (1 message)

Re: [FD] Skype Phishing Attack (Danny Kopping <dannykopping@...il.com>)

May 23 (7 messages)

[FD] [ERPSCAN-16-010] SAP NetWeaver AS JAVA – information disclosure vulnerability (ERPScan inc <erpscan.online@...il.com>)
[FD] [ERPSCAN-16-011] SAP NetWeaver AS JAVA – SQL injection vulnerability (ERPScan inc <erpscan.online@...il.com>)
[FD] Linknat VOS2009/VOS3000 SQL injection (Osama Khalid <osama@...inghazard.com>)
[FD] Multiple Reflected XSS vulnerabilities in Infobae Website (Niemand Nie <niemand.sec@...il.com>)
[FD] [RCESEC-2016-001] Postfix Admin v2.93 Generic POST Cross-Site Request Forgeries (Julien Ahrens <info@...security.com>)
[FD] MediaLink router MWN-WAPR300N - Several Vulnerabilities (David Spector <fulldisc@...ingtimesoftware.com>)
[FD] poisoning / hijacking DNS locally of a third party domain: in shared and custom web hosting and in ISP, in automate… (Bipin Gautam <bipin.gautam@...il.com>)

May 24 (1 message)

[FD] MSA-2016-01: PowerFolder Remote Code Execution Vulnerability (Advisories Advisories <advisories@...waisecurity.de>)

May 25 (5 messages)

[FD] Teampass v2.1.25 - Arbitrary File Download Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Teampass v2.1.25 - Unauthenticated Access Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Teampass v2.1.26 - Stored Cross Site Scripting Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Bugcrowd Bug Bounty #7 - Persistent Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Bashi v1.6 iOS - Persistent Mail Encoding Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

May 26 (6 messages)

[FD] [RCESEC-2016-002] XenAPI v1.4.1 for XenForo Multiple Unauthenticated SQL Injections (Julien Ahrens <info@...security.com>)
[FD] CVE-2016-4803 dotCMS - Email Header Injection (Elar Lang <elarlang@...il.com>)
Re: [FD] Teampass v2.1.26 - Stored Cross Site Scripting Vulnerability (Ulisses Montenegro <ulisses.montenegro@...il.com>)
[FD] CVE-2015-3854 Battery permission leakage in Android ("flanker" <i@...nker017.me>)
Re: [FD] CVE-2015-3854 Battery permission leakage in Android ("flanker" <i@...nker017.me>)
Re: [FD] Teampass v2.1.26 - Stored Cross Site Scripting Vulnerability (Peter Kok <pk212111@...il.com>)

May 31 (3 messages)

[FD] [RT-SA-2015-012] XML External Entity Expansion in Paessler PRTG Network Monitor (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[FD] [RT-SA-2016-004] Websockify: Remote Code Execution via Buffer Overflow (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[FD] [RT-SA-2016-005] Unauthenticated File Upload in Relay Ajax Directory Manager may Lead to Remote Command Execution (RedTeam Pentesting GmbH <release@...tea…)

77 messages