full-disclosure mailing list - 2017/08

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2017/08

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 6	² 3	³ 1	⁴ 5	⁵	⁶
⁷	⁸ 7	⁹	¹⁰	¹¹ 6	¹²	¹³
¹⁴ 1	¹⁵ 1	¹⁶ 2	¹⁷	¹⁸ 5	¹⁹	²⁰
²¹	²² 5	²³ 4	²⁴	²⁵ 1	²⁶	²⁷
²⁸	²⁹ 2	³⁰	³¹ 3

Messages by day:

August 1 (6 messages)

Re: [FD] libao memory corruption vulnerability (Henri Salo <henri@...v.fi>)
[FD] CIPH-2017-1: Advisory for StashCat (Karsten König <kk@...hron.de>)
[FD] CSRF vulnerabilities in D-Link DVG-5402SP ("MustLive" <mustlive@...security.com.ua>)
[FD] libmad memory corruption vulnerability ("qflb.wu" <qflb.wu@...ppsecurity.com.cn>)
[FD] Stored XSS in Salutation Responsive WordPress + BuddyPress Theme could allow logged-in users to do almost anything an adm… (dxw Security <security@....com>)
[FD] PaulShop CMS - Sql Injection and stored XSS (<tamqm@...s.vn>)

August 2 (3 messages)

[FD] CVE-2017-11741 Local root privesc in Hashicorp vagrant-vmware-fusion <= 4.0.23 (Mark Wadham <fd@....io>)
[FD] CVE-2017-1500 - Relected XSS in IBM WorkLight OAuth Server Web Api (Gabriele Gristina <gabriele.gristina@...il.com>)
[FD] [No CVE assigned] SMBLoris Windows/Samba SMB service DoS PoC ("Hector Martin \"marcan\"" <marcan@...can.st>)

August 3 (1 message)

[FD] [CVE-2017-11320] Persistent XSS through the SSID of nearby Wi-Fi devices on Technicolor TC7337 (Geolado giolado <g3ol4d0@...il.com>)

August 4 (5 messages)

[FD] Format Factory DLL Hijacking Vulnerability (kyaw thiha <kyawthiha89@...e.com>)
[FD] t2'17: Challenge – a break from tradition ("Tomi Tuominen" <tomi.tuominen@...fi>)
[FD] [CVE-2017-7533] kernel: inotify: a race between inotify_handle_event() and sys_rename() (Vladis Dronov <vdronov@...hat.com>)
[FD] SEC Consult SA-20170804-0 :: phpBB Server Side Request Forgery (SSRF) vulnerability (SEC Consult Vulnerability Lab <research@...-consult.com>)
[FD] SEC Consult SA-20170804-1 :: Ubiquiti Networks UniFi Cloud Key authenticated command injection (SEC Consult Vulnerability Lab <research@...-consult.com>)

August 8 (7 messages)

[FD] DefenseCode ThunderScan SAST Advisory: WordPress Easy Modal Plugin Multiple Security Vulnerabilities (DefenseCode <defensecode@...ensecode.com>)
[FD] DefenseCode ThunderScan SAST Advisory: WordPress Podlove Podcast Publisher Plugin Security Vulnerability (DefenseCode <defensecode@...ensecode.com>)
[FD] DefenseCode ThunderScan SAST Advisory: WordPress PressForward Plugin Security Vulnerability (DefenseCode <defensecode@...ensecode.com>)
[FD] SSD Advisory – Synology Photo Station Unauthenticated Remote Code Execution (Maor Shwartz <maors@...ondsecurity.com>)
[FD] wildmidi multiple vulnerabilities ("qflb.wu" <qflb.wu@...ppsecurity.com.cn>)
[FD] minidjvu multiple vulnerabilities ("qflb.wu" <qflb.wu@...ppsecurity.com.cn>)
[FD] BSides Bordeaux Call For Papers (CFP) (Ryan Dewhurst <ryandewhurst@...il.com>)

August 11 (6 messages)

[FD] SQL Injection in TheoCMS <= 2.0 (Manuel Garcia Cardenas <advidsec@...il.com>)
[FD] Multiple unpatched flaws exist in NSS (CVE-2017-11695, CVE-2017-11696, CVE-2017-11697, CVE-2017-11698) (geeknik via Fulldisclosure <fulldisclosure@...list…)
[FD] SSD Advisory – D-Link 850L Multiple Vulnerabilities (Hack2Win Contest) (Maor Shwartz <maors@...ondsecurity.com>)
[FD] SSD Advisory – Adobe Reader DC – execMenuItem Off-by-One Heap Buffer Overflow (Maor Shwartz <maors@...ondsecurity.com>)
[FD] SSD Advisory – Acrobat Reader DC – Stream Object Remote Code Execution (Maor Shwartz <maors@...ondsecurity.com>)
Re: [FD] SSD Advisory – Acrobat Reader DC – Stream Object Remote Code Execution (Maor Shwartz <maors@...ondsecurity.com>)

August 14 (1 message)

[FD] Xamarin Studio for Mac API documentation update affected by local privilege escalation ("Securify B.V. via Fulldisclosure" <fulldisclosure@...lists.org>)

August 15 (1 message)

[FD] QuantaStor Software Define Storage mmultiple vulnerabilities (advisories@...security.com)

August 16 (2 messages)

[FD] Apple iOS 10.3 - UI SMS Access Permission Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Microsoft Resnet - DNS Configuration Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

August 18 (5 messages)

[FD] NoviFlow NoviWare <= NW400.2.6 multiple vulnerabilities (Francois Goichon via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] SSD Advisory – Chrome Turbofan Remote Code Execution (Maor Shwartz <maors@...ondsecurity.com>)
[FD] CVE-2017-6327: Symantec Messaging Gateway <= 10.6.3-2 unauthenticated root RCE (Philip Pettersson <philip.pettersson@...il.com>)
[FD] NetRipper - Smart Traffic Sniffing - Support for x64 (Poyo VL via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Executable installers are vulnerable^WEVIL (case 53): escalation of privilege with QNAP's installers for Windows ("Stefan Kanthak" <stefan.kanthak@...go.d…)

August 22 (5 messages)

[FD] [RT-SA-2015-008] WebClientPrint Processor 2.0: Remote Code Execution via Print Jobs (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[FD] [RT-SA-2015-009] WebClientPrint Processor 2.0: Remote Code Execution via Updates (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[FD] [RT-SA-2015-010] WebClientPrint Processor 2.0: Unauthorised Proxy Modification (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[FD] [RT-SA-2015-011] WebClientPrint Processor 2.0: No Validation of TLS Certificates (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[FD] SEC Consult SA-20170822-0 :: Multiple vulnerabilities in Progress Sitefinity CMS (SEC Consult Vulnerability Lab <research@...-consult.com>)

August 23 (4 messages)

[FD] Backdrop CMS <= 1.7.1 - Persistent Cross-Site Scripting (Manuel Garcia Cardenas <advidsec@...il.com>)
Re: [FD] NoviFlow NoviWare <= NW400.2.6 multiple vulnerabilities (Francois Goichon via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] BlackBoard LMS (9.1.140152.0) Stored XSS/Arbitrary File Upload (Ismail Doe <ismail.sec.dev@...il.com>)
[FD] libgig-LinuxSampler multiple vulnerabilities ("qflb.wu" <qflb.wu@...ppsecurity.com.cn>)

August 25 (1 message)

[FD] Trend Micro Hosted Email Security (HES) - Email Interception and Direct Object Reference (Patrick Webster <patrick@...security.com.au>)

August 29 (2 messages)

[FD] CVE-2017-13671 - MISP Stored XSS ("NL Deloitte Zero Day (NL - Amsterdam)" <ZeroDay@...oitte.nl>)
[FD] ConnMan #ConnManDo Vulnerability ("Daisuke Noguchi[NRIセキュア　野口]" <noguchi@...-secure.co.jp>)

August 31 (3 messages)

[FD] AST-2017-005: Media takeover in RTP stack ("Asterisk Security Team" <security@...erisk.org>)
[FD] AST-2017-006: Shell access command injection in app_minivm ("Asterisk Security Team" <security@...erisk.org>)
[FD] AST-2017-007: Remote Crash Vulerability in res_pjsip ("Asterisk Security Team" <security@...erisk.org>)

52 messages

Powered by blists - more mailing lists