full-disclosure mailing list - 2018/06

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2018/06

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹ 5	²	³
⁴	⁵ 9	⁶	⁷	⁸ 13	⁹	¹⁰
¹¹ 2	¹² 3	¹³	¹⁴	¹⁵ 10	¹⁶ 2	¹⁷
¹⁸	¹⁹ 2	²⁰	²¹	²²	²³	²⁴
²⁵	²⁶	²⁷	²⁸	²⁹	³⁰

Messages by day:

June 1 (5 messages)

[FD] CSRF on piazza.com (fixed as of 2018-06-01) (David Fifield <david@...software.com>)
[FD] DisplayLink Installer 8.2.1956 DLL Hijack to privilege escalation CVE-2018-7884 (Aleix Sala Bach <aleix@...abach.cat>)
[FD] New BlackArch Linux ISOs+OVA Image (2018.06.01, high-quality) Released! (Black Arch <blackarchlinux@...il.com>)
[FD] Vulnerabilities in TP-Link TL-WR841N and TL-WR841ND ("MustLive" <mustlive@...security.com.ua>)
[FD] DSA-2018-085: RSA Web Threat Detection SQL Injection Vulnerability (EMC Product Security Response Center <Security_Alert@....com>)

June 5 (9 messages)

[FD] CVE-2018-10058 and CVE-2018-10057 - cgminer <=4.10.0 and bfgminer <=5.5.0 remote management api post-auth buffer … ("oststrom \(public\)" <pub@...strom.com…)
[FD] APPLE-SA-2018-06-01-1 macOS High Sierra 10.13.5, Security Update 2018-003 Sierra, Security Update 2018-003 El Capi… (Apple Product Security <product-securit…)
[FD] APPLE-SA-2018-06-01-2 Safari 11.1.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2018-06-01-3 iCloud for Windows 7.5 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2018-06-01-4 iOS 11.4 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2018-06-01-5 watchOS 4.3.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2018-06-01-6 tvOS 11.4 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2018-06-01-7 iTunes 12.7.5 for Windows (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] Ignite Realtime Openfire Version 3.7.1 Reflected Cross Site Scripting (CVE-2018-11688) (yavuz atlas <yavatlas@...il.com>)

June 8 (13 messages)

[FD] [SRP-2018-01] Reverse engineering tools for ST DVB chipsets (public release) (Security Explorations <contact@...urity-explorations.com>)
[FD] libpff 20180428 vulnerability (熊文彬 <bear.xiong@...ppsecurity.com.cn>)
[FD] libmobi 0.3 vulnerabilities (熊文彬 <bear.xiong@...ppsecurity.com.cn>)
[FD] libfsntfs 20180420 vulns (熊文彬 <bear.xiong@...ppsecurity.com.cn>)
[FD] DefenseCode ThunderScan SAST Advisory: WordPress Form Maker Plugin Multiple Security Vulnerabilities (Defense Code <defensecode@...ensecode.com>)
[FD] DefenseCode ThunderScan SAST Advisory: WordPress Contact Form Maker Plugin Multiple Security Vulnerabilities (Defense Code <defensecode@...ensecode.com>)
[FD] ClassLink browser extension vulnerable to UXSS; ClassLink Agent vulnerable to Remote Code Execution. (EdTech Secure via Fulldisclosure <fulldisclosure@sec…)
[FD] Multiple Automated Logic Corporation WebCTRL XML External Entity Injection (CVE-2018-8819) (Hate Shape <hateshape@...il.com>)
[FD] ESPN Reflected XSS (Ismail Doe <ismail.sec.dev@...il.com>)
[FD] Open-Xchange Security Advisory 2018-06-08 (Open-Xchange GmbH <martin.heiland.lists@...n-xchange.com>)
Re: [FD] Ignite Realtime Openfire Version 3.7.1 Reflected Cross Site Scripting (CVE-2018-11688) (Simon Waters <simon.waters@...evine.com>)
[FD] Major Vulnerabilities in Foscam IP Cameras (Vulnerability Report <vuln@...o.com>)
[FD] Gridbox extension for Joomla! <= 2.4.0 Reflected Cross Site Scripting (XSS) (yavuz atlas <yavatlas@...il.com>)

June 11 (2 messages)

[FD] AST-2018-007: Infinite loop when reading iostreams ("Asterisk Security Team" <security@...erisk.org>)
[FD] AST-2018-008: PJSIP endpoint presence disclosure when using ACL ("Asterisk Security Team" <security@...erisk.org>)

June 12 (3 messages)

[FD] ACE via file inclusion in Redirection allows admins to execute any PHP file in the filesystem (WordPress plugin) (dxw Security <harry@....com>)
[FD] Reflected XSS in Tooltipy (tooltips for WP) could allow anybody to do almost anything an admin can (WordPress plugin) (dxw Security <harry@....com>)
[FD] CSRF in Tooltipy (tooltips for WP) could allow anybody to duplicate posts (WordPress plugin) (dxw Security <harry@....com>)

June 15 (10 messages)

[FD] WordPress Plugin Pie Register 3.0.9 - Blind SQL Injection (Manuel Garcia Cardenas <advidsec@...il.com>)
[FD] liblnk 20180419 vulns (熊文彬 <bear.xiong@...ppsecurity.com.cn>)
[FD] DefenseCode ThunderScan SAST Advisory: WordPress Ultimate Form Builder Lite Plugin Multiple Vulnerabilities (XSS a… (Defense Code <defensecode@...ensecode.c…)
[FD] DefenseCode ThunderScan SAST Advisory: WordPress WP Google Map Plugin Multiple SQL injection Security Vulnerabilit… (Defense Code <defensecode@...ensecode.c…)
[FD] Multiple Security Issues in Ecos Secure Boot Stick (SBS) (Michael Rossberg <michael.rossberg@...ilmenau.de>)
[FD] APPLE-SA-2018-06-13-01 Xcode 9.4.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] CALL FOR PAPERS - INTEL SECURITY CONFERENCE (iSecCon) 2018 ("Branco, Rodrigo" <rodrigo.branco@...el.com>)
[FD] DSA-2018-107: RSA Authentication Manager Cross-site scripting Vulnerabilities (EMC Product Security Response Center <Security_Alert@....com>)
[FD] Samsung Web Viewer for Samsung DVR Reflected Cross Site Scripting (XSS) CVE-2018-11689 (yavuz atlas <yavatlas@...il.com>)
[FD] Unserialization vulnerability in Redirection could allow admin to execute arbitrary code in some circumstances (WordPress plu… (dxw Security <harry@....com>)

June 16 (2 messages)

[FD] Tapplock api multiple vulnerabilities (Vangelis Stykas <evstykas@...il.com>)
[FD] CA20180614-01: Security Notice for CA Privileged Access Manager ("Williams, Ken" <Ken.Williams@...com>)

June 19 (2 messages)

[FD] MagniComp SysInfo Information Exposure [CVE-2018-7268] (Harry Sintonen <fulldisclosure@...er.fi>)
[FD] XSS in Canopy login page (RYT <me@...ntzj.com>)

46 messages

Powered by blists - more mailing lists