full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2017/11

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 15	²	³ 2	⁴	⁵
⁶ 2	⁷ 1	⁸ 3	⁹	¹⁰ 1	¹¹	¹²
¹³ 1	¹⁴ 1	¹⁵ 6	¹⁶ 1	¹⁷	¹⁸	¹⁹
²⁰	²¹ 3	²² 2	²³ 1	²⁴ 3	²⁵	²⁶
²⁷	²⁸ 9	²⁹	³⁰

Messages by day:

November 1 (15 messages)

[FD] APPLE-SA-2017-10-31-1 iOS 11.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2017-10-31-2 macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, Security Update 2017-004 El Capi… (Apple Product Security <product-securit…)
[FD] APPLE-SA-2017-10-31-3 tvOS 11.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2017-10-31-4 watchOS 4.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2017-10-31-5 Safari 11.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2017-10-31-6 iTunes 12.7.1 for Windows (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2017-10-31-7 iCloud for Windows 7.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2017-10-31-8 Additional information for APPLE-SA-2017-09-25-1 macOS High Sierra 10.13 (Apple Product Security <product-security-noreply@...ts.app…)
[FD] APPLE-SA-2017-10-31-9 Additional information for APPLE-SA-2017-09-19-1 iOS 11 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2017-10-31-10 Additional information for APPLE-SA-2017-09-20-2 watchOS 4 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2017-10-31-11 Additional information for APPLE-SA-2017-09-20-3 tvOS 11 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2017-10-31-12 Additional information for APPLE-SA-2017-09-25-9 macOS Server 5.4 (Apple Product Security <product-security-noreply@...ts.apple.com…)
[FD] CVE-2017-15918: Sera 1.2 local root privesc and password disclosure ("Mark Wadham" <fd@....io>)
[FD] SSD Advisory – GraphicsMagick Multiple Vulnerabilities (Maor Shwartz <maors@...ondsecurity.com>)
[FD] SSD Advisory – Cisco UCS Platform Emulator Remote Code Execution (Maor Shwartz <maors@...ondsecurity.com>)

November 3 (2 messages)

[FD] [RT-SA-2016-008] XML External Entity Expansion in Ladon Webservice (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[FD] KL-001-2017-022 : Splunk Local Privilege Escalation (KoreLogic Disclosures <disclosures@...elogic.com>)

November 6 (2 messages)

[FD] CVE-2017-12969 Avaya OfficeScan IPO Remote ActiveX Buffer Overflow (hyp3rlinx <apparitionsec@...il.com>)
[FD] CVE-2017-12969 Avaya OfficeScan IPO Remote ActiveX Buffer Overflow (hyp3rlinx <apparitionsec@...il.com>)

November 7 (1 message)

[FD] mkvalidator libebml2 mkclean multiple vulnerabilities ("qflb.wu" <qflb.wu@...ppsecurity.com.cn>)

November 8 (3 messages)

[FD] AST-2017-009: Buffer overflow in pjproject header parsing can cause crash in Asterisk ("Asterisk Security Team" <security@...erisk.org>)
[FD] AST-2017-010: Buffer overflow in CDR's set user ("Asterisk Security Team" <security@...erisk.org>)
[FD] AST-2017-011: Memory leak in pjsip session resource ("Asterisk Security Team" <security@...erisk.org>)

November 10 (1 message)

Re: [FD] An anti theft system allowing attackers to kill remotely the engine in electric scooters made by by INOKIM/MyWay, aff… (pop shark <popshark1@...il.com>)

November 13 (1 message)

[FD] [SE-2011-01] Some ideas regarding security of ST DVB chipsets (Security Explorations <contact@...urity-explorations.com>)

November 14 (1 message)

[FD] SEC Consult SA-20171114-0 :: Authentication bypass, cross-site scripting & code execution in Siemens SICAM RTUs SM… (SEC Consult Vulnerability Lab <research…)

November 15 (6 messages)

[FD] Advisory X41-2017-006: Multiple Vulnerabilities in PSFTPd Windows FTP Server (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)
[FD] Symantec Endpoint Protection (SEP) v12.1 Tamper-protection Bypass CVE-2017-6331 (hyp3rlinx <apparitionsec@...il.com>)
[FD] Faraday v2.7: Collaborative Penetration Test & Vulnerability Management Platform (Francisco Amato <famato@...obytesec.com>)
[FD] Getting Local Admin by Abusing the Anti-Virus Quarantine #AVGater (Florian Bogner <florian@...ner.sh>)
[FD] CA20171114-01: Security Notice for CA Identity Governance ("Kotas, Kevin J" <Kevin.Kotas@...com>)
[FD] Vivotek IP Cameras - Remote Stack Overflow (bashis <mcw@...mail.eu>)

November 16 (1 message)

[FD] SEC Consult SA-20171116-0 :: Broken access control & LINQ injection in Progress Sitefinity (SEC Consult Vulnerability Lab <research@...-consult.com>)

November 21 (3 messages)

[FD] SSD Advisory – DblTek Multiple Vulnerabilities (Maor Shwartz <maors@...ondsecurity.com>)
[FD] ESA-2017-152: RSA® Authentication Manager Software Stored Cross-Site Scripting Vulnerability (EMC Product Security Response Center <Security_Alert@....com…)
[FD] ESA-2017-094: EMC ScaleIO Multiple Vulnerabilities (EMC Product Security Response Center <Security_Alert@....com>)

November 22 (2 messages)

[FD] Clickjacking vulnerability in CSRF error page pfSense ("Securify B.V. via Fulldisclosure" <fulldisclosure@...lists.org>)
[FD] bugtraq@...urityfocus.com ("Securify B.V. via Fulldisclosure" <fulldisclosure@...lists.org>)

November 23 (1 message)

[FD] Edward Snowden free speech at JBFone - Future, Data Security & Privacy (Vulnerability Lab <research@...nerability-lab.com>)

November 24 (3 messages)

[FD] SSD Advisory – Cambium Multiple Vulnerabilities (Maor Shwartz <maors@...ondsecurity.com>)
[FD] SSD Advisory – Linux Kernel XFRM Privilege Escalation (Maor Shwartz <maors@...ondsecurity.com>)
[FD] CSC-Cart RCE - CVE-2017-15673 ("oric one" <oric-1@....com>)

November 28 (9 messages)

[FD] New BlackArch Linux ISOs (2017.11.24) with over 1900 tools released! (Black Arch <blackarchlinux@...il.com>)
[FD] CVE-2017-14953 - Hikvision Wi-Fi IP Cameras associate to a default unencrypted rogue SSIDs in a wired configuration (IOT Sec <iot_sec@...lfence.com>)
Re: [FD] CSC-Cart RCE - CVE-2017-15673 (jericho <jericho@...rition.org>)
[FD] SSD Advisory – Synology StorageManager smart.cgi Remote Command Execution (Maor Shwartz <maors@...ondsecurity.com>)
[FD] SSD Advisory – ZTE ZXDSL Configuration Reset (Maor Shwartz <maors@...ondsecurity.com>)
[FD] ESA-2017-145: RSA® Authentication Agent for Web for Apache Web Server Authentication Bypass Vulnerability (EMC Product Security Response Center <Security_…)
[FD] ESA-2017-146: RSA® Authentication Agent SDK for C Error Handling Vulnerability (EMC Product Security Response Center <Security_Alert@....com>)
[FD] Multiple Issues in CMS Made Simple (Ziyahan Albeniz <ziyahan@...sparker.com>)
Re: [FD] CSC-Cart RCE - CVE-2017-15673 ("oric one" <oric-1@....com>)

51 messages