full-disclosure mailing list - 2017/06

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2017/06

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹	² 5	³	⁴
⁵	⁶ 2	⁷ 3	⁸ 2	⁹ 2	¹⁰	¹¹
¹² 3	¹³ 3	¹⁴	¹⁵	¹⁶ 1	¹⁷	¹⁸
¹⁹	²⁰ 3	²¹	²² 2	²³ 2	²⁴	²⁵
²⁶ 4	²⁷ 1	²⁸ 1	²⁹ 10	³⁰ 8

Messages by day:

June 2 (5 messages)

[FD] DefenseCode WebScanner DAST Advisory: WordPress Tribulant Newsletters Plugin Multiple Security Vulnerabilities (DefenseCode <defensecode@...ensecode.com>)
[FD] DefenseCode ThunderScan SAST Advisory: WordPress Simple Slideshow Manager Plugin Multiple Security Vulnerabilities (DefenseCode <defensecode@...ensecode.co…)
[FD] DefenseCode ThunderScan SAST Advisory: WordPress No External Links Plugin Security Vulnerability (DefenseCode <defensecode@...ensecode.com>)
[FD] Qualys Security Advisory - CVE-2017-1000367 in Sudo's get_process_ttyname() for Linux (Qualys Security Advisory <qsa@...lys.com>)
[FD] [CVE-2017-5688] Executable installers are vulnerable^WEVIL (case 52): Intel installation framework allows arbitrar… ("Stefan Kanthak" <stefan.kanthak@...go.…)

June 6 (2 messages)

[FD] X41-2017-005 - Multiple Vulnerabilities in peplink balance routers (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)
[FD] CVE-2017-8083 CompuLab IntensePC lacks BIOS Write Protection ("Hal Martin" <hal.martin@...chmysys.com>)

June 7 (3 messages)

[FD] Perch v3.0.3 CMS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Xavier v2.4 PHP MP - SQL Injection Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[FD] SEC Consult SA-20170607-0 :: Various WiMAX CPEs Authentication Bypass (SEC Consult Vulnerability Lab <research@...-consult.com>)

June 8 (2 messages)

[FD] libcroco multiple vulnerabilities ("qflb.wu" <qflb.wu@...ppsecurity.com.cn>)
[FD] libquicktime multiple vulnerabilities ("qflb.wu" <qflb.wu@...ppsecurity.com.cn>)

June 9 (2 messages)

Re: [FD] libquicktime multiple vulnerabilities (Brandon Perry <bperry.volatile@...il.com>)
Re: [FD] libcroco multiple vulnerabilities (Alan Coopersmith <alan.coopersmith@...cle.com>)

June 12 (3 messages)

[FD] Evolution Script CMS v5.3 - Cross Site Scripting Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Composr CMS v10.0.0 - Cross Site Scripting Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Zenbership 1.0.8 CMS - Multiple SQL Injection Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)

June 13 (3 messages)

[FD] SEC Consult SA-20170613-0 :: Access Restriction Bypass in Atlassian Confluence (SEC Consult Vulnerability Lab <research@...-consult.com>)
[FD] t2'17: Call For Papers 2017 (Helsinki, Finland) ("Tomi Tuominen" <tomi.tuominen@...fi>)
[FD] New BlackArch Linux ISOs (2017.06.13) released! (Black Arch <blackarchlinux@...il.com>)

June 16 (1 message)

[FD] APC UPS Daemon <= 3.14.14 Local Privilege Escalation (Richard Young <fragsh3ll@...il.com>)

June 20 (3 messages)

[FD] Freeware Advanced Audio Coder (FAAC) multiple vulnerabilities ("qflb.wu" <qflb.wu@...ppsecurity.com.cn>)
[FD] Path traversal in Photo Gallery may allow admins to read most files on the filesystem (WordPress plugin) (dxw Security <security@....com>)
[FD] Reflected XSS in WordPress Download Manager could allow an attacker to do almost anything an admin can (WordPress plugin) (dxw Security <security@....com>)

June 22 (2 messages)

[FD] SEC Consult SA-20170622-0 :: XXE, SQLi, XSS & local file disclosure in Cisco Prime Infrastructure (SEC Consult Vulnerability Lab <research@...-consult.com…)
[FD] PayPal Inc BB #149 - (Gift) Insufficient Authentication Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

June 23 (2 messages)

[FD] OffensiveCon Berlin 2018 Call for Papers (Moritz Jodeit <moritz@...efrostsecurity.de>)
[FD] Vaadin Javascript Injection (Caleb Cushing <xenoterracide@...il.com>)

June 26 (4 messages)

[FD] Microsoft Skype v7.2, v7.35 & v7.36 - Stack Buffer Overflow Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] malicious hypervisor aka root-kit hypervisor threat is rel (Mikhail Utin <mikhailutin@...mail.com>)
[FD] Vulnerabilities in D-Link DIR-100 ("MustLive" <mustlive@...security.com.ua>)
[FD] DefenseCode Security Advisory: IBM DB2 Command Line Processor Buffer Overflow (DefenseCode <defensecode@...ensecode.com>)

June 27 (1 message)

[FD] Freeware Advanced Audio Decoder 2 (FAAD2) multiple vulnerabilities ("qflb.wu" <qflb.wu@...ppsecurity.com.cn>)

June 28 (1 message)

[FD] [CORE-2017-0003] - Kaspersky Anti-Virus File Server Multiple Vulnerabilities (Core Security Advisories Team <advisories@...esecurity.com>)

June 29 (10 messages)

[FD] Executable installers are vulnerable^WEVIL (case 52): escalation of privilege with Microsoft's .NET Framework inst… ("Stefan Kanthak" <stefan.kanthak@...go.…)
Re: [FD] Freeware Advanced Audio Decoder 2 (FAAD2) multiple vulnerabilities (Robert Święcki <robert@...ecki.net>)
[FD] Microsoft Office Patch Installer Executables - Insecure Library Loading Allows Code Execution (Karn Ganeshen <karnganeshen@...il.com>)
[FD] Microsoft Machine Debug Manager (mdm) DLL side loading vulnerability (Karn Ganeshen <karnganeshen@...il.com>)
[FD] Digital Canal Structural Wind Analysis Stack Buffer Overflow (Karn Ganeshen <karnganeshen@...il.com>)
[FD] Trihedral VTScada Multiple Vulnerabilities (Karn Ganeshen <karnganeshen@...il.com>)
[FD] Schneider Electric Wonderware InduSoft Web Studio Privilege Escalation (Karn Ganeshen <karnganeshen@...il.com>)
[FD] BLF-Tech LLC VisualView HMI Software – Insecure Library Loading Allows Code Execution (Karn Ganeshen <karnganeshen@...il.com>)
[FD] Schneider Electric Interactive Graphical SCADA System Software – Insecure Library Loading Allows Code Execution (Karn Ganeshen <karnganeshen@...il.com>)
[FD] Local file inclusion in cmsmadesimple <=2.2.1 (Wester Zeng <evilzyzeng@...look.com>)

June 30 (8 messages)

[FD] SEC Consult SA-20170630-0 :: Multiple critical vulnerabilities in OSCI-Transport library 1.2 for German e-Governme… (SEC Consult Vulnerability Lab <research…)
[FD] Humax Digital HG100R multiple vulnerabilities (The Gambler <gambler@...anota.com>)
[FD] Microsoft Dynamic CRM 2016 - Cross-Site Scripting vulnerability (gregory draperi <gregory.draperi@...il.com>)
[FD] eVestigator Forensic PenTester v1 - Remote Code Execution via MITM (InterN0T via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Australian Education App - Remote Code Execution (InterN0T via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] BestSafe Browser FREE NoAds - Remote Code Execution (InterN0T via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Schneider Electric Pro-Face WinGP – Runtime.exe – Insecure Library Loading Allows Code Execution (Karn Ganeshen <karnganeshen@...il.com>)
[FD] ESA-2017-063: RSA Archer® GRC Platform Multiple Vulnerabilities (EMC Product Security Response Center <Security_Alert@....com>)

52 messages

Powered by blists - more mailing lists