full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2017/02

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 6	² 5	³	⁴	⁵ 1
⁶ 4	⁷ 5	⁸ 1	⁹ 1	¹⁰ 1	¹¹	¹²
¹³	¹⁴ 3	¹⁵ 3	¹⁶ 13	¹⁷	¹⁸	¹⁹
²⁰ 4	²¹ 12	²² 6	²³ 1	²⁴ 3	²⁵	²⁶
²⁷ 3	²⁸ 4

Messages by day:

February 1 (6 messages)

[FD] Vulnerability Open Redirect LogicBoard CMS (Estación Informática <franciscojaviersantiagovazquez@...il.com>)
[FD] Viscosity for Windows 1.6.7 Privilege Escalation (Kacper Szurek <kacperszurek@...il.com>)
[FD] QNAP NVR/NAS Heap / Stack / Heap Feng Shui overflow, and "Heack Combo" to pwn (bashis <mcw@...mail.eu>)
[FD] Cross-Site Scripting vulnerability in Bitrix Site Manager ("MustLive" <mustlive@...security.com.ua>)
[FD] secuvera-SA-2017-02: Reflected XSS and Open Redirect in MailStore Server (Tobias Glemser <tglemser@...uvera.de>)
[FD] secuvera-SA-2017-02: Reflected XSS and Open Redirect in MailStore Server (Tobias Glemser <tglemser@...uvera.de>)

February 2 (5 messages)

[FD] Call for Speakers for CCCC17 in Copenhagen (Peter Kruse <pkr@...s.dk>)
Re: [FD] Free ebook to learn ethical hacking techniques (elendil el <elendillegrand@...il.com>)
Re: [FD] Multiple vulnerabilities found in the Dlink DWR-932B (backdoor, backdoor accounts, weak WPS, RCE ...) (Pierre Kim <pierre.kim.sec@...il.com>)
[FD] [FOXMOLE SA 2016-07-05] ZoneMinder - Multiple Issues (FOXMOLE Advisories <advisories@...mole.com>)
[FD] HP Printers Wi-Fi Direct Improper Access Control (Info <info@...eso.com>)

February 5 (1 message)

[FD] ZoneMinder - multiple vulnerabilities (John Marzella <john@...abyteit.com.au>)

February 6 (4 messages)

[FD] [KIS-2017-01] PEAR HTML_AJAX <= 0.5.7 (PHP Serializer) PHP Object Injection Vulnerability (Egidio Romano <research@...mainsecurity.com>)
[FD] Teleopti WFM <= 7.1.0 Multiple Vulnerabilities ("Graph-X" <graphx@...aint.org>)
[FD] IVPN Client for Windows 2.6.6120.33863 Privilege Escalation (Kacper Szurek <kacperszurek@...il.com>)
[FD] Remote DoS against OpenBSD http server (up to 6.0) (Pierre Kim <pierre.kim.sec@...il.com>)

February 7 (5 messages)

[FD] interpreter bugs (Andrzej Dyjak <dyjakan@...segv.pl>)
[FD] Call for Papers: FIRST Amsterdam Technical Colloquium (TC) April 2017 (Jeff Bollinger <jbolling@...co.com>)
[FD] SEC Consult SA-20170207 :: Path Traversal, Backdoor accounts & KNX group address password bypass in JUNG Smart Vi… (SEC Consult Vulnerability Lab <research…)
[FD] Responsive Filemanger <= 9.11.0 - Arbitrary File Disclosure/Deletion (Wiswat A <wiswat.a@...il.com>)
[FD] Executable installers are vulnerable^WEVIL (case 48): SumatraPDF-3.1.2-installer.exe allows escalation of privileg… ("Stefan Kanthak" <stefan.kanthak@...go.…)

February 8 (1 message)

[FD] Authentication bypass vulnerability in Western Digital My Cloud ("Securify B.V." <lists@...urify.nl>)

February 9 (1 message)

[FD] TP-Link C2 and C20i vulnerable to command injection (authenticated root RCE), DoS, improper firewall rules (Pierre Kim <pierre.kim.sec@...il.com>)

February 10 (1 message)

[FD] [Call for Papers] InfoSec2017 in Bratislava, Slovakia | June 29-July 1, 2017 (Sandra Evans <sandra.sdiwc@...il.com>)

February 14 (3 messages)

[FD] WordPress Plugin Easy Table 1.6 - Persistent Cross-Site Scripting (Manuel Garcia Cardenas <advidsec@...il.com>)
[FD] CVE-2017-5670 : Riverbed RiOS insecure cryptographic storage (Sydream Labs <labs@...dream.com>)
[FD] CFP for Speaker Workshops at the Packet Hacking Village at DEF CON 25 Now Open (Ming <ming@...lofsheep.com>)

February 15 (3 messages)

[FD] [Kodi v17.1] - Local File Inclusion (Eric Flokstra <erp.flokstra@...il.com>)
[FD] ShadeYouVPN.com Client v2.0.1.11 for Windows Privilege Escalation (Kacper Szurek <kacperszurek@...il.com>)
[FD] Backdoored Web Application v.1.0.2 ("MustLive" <mustlive@...security.com.ua>)

February 16 (13 messages)

[FD] KL-001-2017-001 : Trendmicro InterScan Arbitrary File Write (KoreLogic Disclosures <disclosures@...elogic.com>)
[FD] KL-001-2017-002 : Trendmicro InterScan Privilege Escalation Vulnerability (KoreLogic Disclosures <disclosures@...elogic.com>)
[FD] KL-001-2017-003 : Trendmicro InterScan Remote Root Access Vulnerability (KoreLogic Disclosures <disclosures@...elogic.com>)
[FD] Advisory X41-2017-002: Multiple Vulnerabilities in ytnef (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)
[FD] Suricata IDS - IPv4 evasion (Jérémy BEAUME <jeremy.beaume@...tonmail.com>)
[FD] CVE-2017-5344 : dotCMS Blind Boolean SQL Injection in dotCMS <= 3.6.1 (Ben N <pajexali@...il.com>)
[FD] QNAP QTS 4.2.x multiple vulnerabilities (Harry Sintonen <sintonen@....fi>)
[FD] Elefant CMS 1.3.12-RC: Multiple Persistent and Reflected XSS ("Curesec Research Team (CRT)" <crt@...esec.com>)
[FD] Elefant CMS 1.3.12-RC: CSRF ("Curesec Research Team (CRT)" <crt@...esec.com>)
[FD] Plone: XSS ("Curesec Research Team (CRT)" <crt@...esec.com>)
[FD] Elefant CMS 1.3.12-RC: Code Execution ("Curesec Research Team (CRT)" <crt@...esec.com>)
[FD] Elefant CMS 1.3.12-RC: Code Execution ("Curesec Research Team (CRT)" <crt@...esec.com>)
[FD] "long" filenames mishandled by Fujitsu's ScanSnap software ("Stefan Kanthak" <stefan.kanthak@...go.de>)

February 20 (4 messages)

[FD] Lithium Forum - (Compose Message) SSRF Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Telekom Cloud SSO - Multiple Persistent XSS Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[FD] PDFMate PDF Converter Pro 1.7.5.0 - Buffer Overflow Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Album Lock v4.0 iOS - Directory Traversal Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

February 21 (12 messages)

[FD] Sawmill Enterprise v8.7.9 Pass The Hash Authentication Bypass (hyp3rlinx <apparitionsec@...il.com>)
[FD] PHPShell v2.4 Session Fixation (hyp3rlinx <apparitionsec@...il.com>)
[FD] PHPShell v2.4 Cross Site Scripting (hyp3rlinx <apparitionsec@...il.com>)
[FD] APPLE-SA-2017-02-21-1 GarageBand 10.1.6 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2017-02-21-2 Logic Pro X 10.3.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] NETGEAR DGN2200v1/v2/v3/v4 - 'ping.cgi' Remote Command Execution (Kroppoloe <kroppoloe@...tonmail.ch>)
Re: [FD] NETGEAR DGN2200v1/v2/v3/v4 - 'ping.cgi' Remote Command Execution (Kroppoloe <kroppoloe@...tonmail.ch>)
[FD] Recon Montreal 2017 Call For Papers - June 16 - 18 - Montreal, Canada (cfpmontreal2017@...on.cx)
[FD] Siklu EtherHaul Unauthenticated Remote Command Execution Vulnerability (<7.4.0) (Ian Ling <iancling@...il.com>)
[FD] Blindspot Advisory: Java/Python FTP Injections Allow for Firewall Bypass ("Timothy D. Morgan" <tim.advisories@...ndspotsecurity.com>)
[FD] Multiple cross-site request forgery (CSRF) vulnerabilities in the DIGISOL (DG-HR 1400) Wireless Router (Indrajith AN <indu.an444@...il.com>)
[FD] [SYSS-2016-117] ABUS Secvest (FUAA50000) - Missing Protection against Replay Attacks (Matthias Deeg <matthias.deeg@...s.de>)

February 22 (6 messages)

[FD] Lock Photos Album&Videos Safe v4.3 - Directory Traversal Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] ProjectSend r754 - IDOR & Authentication Bypass Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Synology NAS "Auto Block IP" bypass and hide real IP in Synology logs (bashis <mcw@...mail.eu>)
[FD] EasyCom PHP API Stack Buffer Overflow (hyp3rlinx <apparitionsec@...il.com>)
[FD] EasyCom SQL iPlug Denial Of Service (hyp3rlinx <apparitionsec@...il.com>)
[FD] Teradici Management Console 2.2.0 - Privilege Escalation (Harrison Neal <hneal@...tdidibreak.com>)

February 23 (1 message)

[FD] Air Transfer 1.2.1 & 1.0.14 - Multiple XSS Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)

February 24 (3 messages)

[FD] Advisory X41-2017-004: Multiple Vulnerabilities in tnef (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)
[FD] Unicorn Emulator v1.0 is out! (Nguyen Anh Quynh <aquynh@...il.com>)
[FD] Multiple cross-site request forgery (CSRF) vulnerabilities in the DIGISOL (DG-HR 1400) Wireless Router (Indrajith AN <indu.an444@...il.com>)

February 27 (3 messages)

[FD] WordPress Plugin Kama Click Counter 3.4.9 - Blind SQL Injection (Manuel Garcia Cardenas <advidsec@...il.com>)
[FD] CVE-2016-9892 - Remote Code Execution as Root via ESET Endpoint Antivirus 6 (Jason Geffner <geffner@...gle.com>)
[FD] CVE-2017-6061 - SAP BusinessObjects XSS ("NL Deloitte Zero Day (NL - Amsterdam)" <ZeroDay@...oitte.nl>)

February 28 (4 messages)

[FD] D-link wireless router DI-524 – Multiple Cross-Site Request Forgery (CSRF) vulnerabilities (Felipe Soares de Souza <fsouza.researcher@...il.com>)
[FD] CVE-2017-6189-Amazon Kindle for Windows (Nitesh Shilpkar <shilpkar.nitesh@...il.com>)
[FD] Advisory X41-2017-001: Multiple Vulnerabilities in X.org (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)
[FD] Multiple persistent Cross-Site Scripting vulnerabilities in osTicket ("Securify B.V." <lists@...urify.nl>)

76 messages