full-disclosure mailing list - 2018/09

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2018/09

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹	²
³	⁴ 4	⁵	⁶ 1	⁷ 6	⁸	⁹
¹⁰ 1	¹¹	¹² 1	¹³	¹⁴ 7	¹⁵	¹⁶
¹⁷ 8	¹⁸ 3	¹⁹	²⁰ 1	²¹ 8	²²	²³
²⁴	²⁵ 8	²⁶ 3	²⁷	²⁸ 6	²⁹	³⁰

Messages by day:

September 4 (4 messages)

[FD] [CFP] BSides San Francisco - March 2019 (BSidesSF CFP via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Defense in depth -- the Microsoft way (part 57): installation of security updates fails on Windows Embedded POSRea… ("Stefan Kanthak" <stefan.kanthak@...go.…)
[FD] Android Dexdump Buffer Overflow Vulnerability (Veysel hataş <vhatas@...il.com>)
[FD] [CORE-2018-0008] - Opsview Monitor Multiple Vulnerabilities (Core Security Advisories Team <advisories@...esecurity.com>)

September 6 (1 message)

[FD] SEC Consult SA-20180906-0 :: CSV Formula Injection in DokuWiki (SEC Consult Vulnerability Lab <research@...-consult.com>)

September 7 (6 messages)

[FD] CVE-2018-1000664: DSub for Subsonic (Android) - Improper Certificate Validation (Andrew Klaus <andrewklaus@...il.com>)
[FD] CVE-2018-15898: Subsonic Music Streamer 4.4 (Android) - Improper Certificate Validation (Andrew Klaus <andrewklaus@...il.com>)
[FD] DSA-2018-150:RSA BSAFE® SSL-J Multiple Vulnerabilities (<secure@...l.com>)
[FD] DSA-2018-147: Dell EMC Isilon OneFS and Dell EMC IsilonSD Edge Remote Kernel Crash Vulnerability (<secure@...l.com>)
[FD] DSA-2018-156: Dell EMC VPLEX Insecure File Permissions vulnerability on Witness (<secure@...l.com>)
[FD] Vulnerabilities in KONEs Group Controller (KGC) (Sebastian Neuner via Fulldisclosure <fulldisclosure@...lists.org>)

September 10 (1 message)

[FD] ZDI-CAN-6307 / Microsoft Baseline Security Analyzer v2.3 / XML External Entity Injection (hyp3rlinx <apparitionsec@...il.com>)

September 12 (1 message)

[FD] Seagate Personal Cloud multiple information disclosure vulnerabilities (Summer of Pwnage via Fulldisclosure <fulldisclosure@...lists.org>)

September 14 (7 messages)

[FD] Disclose SSRF Vulnerability (Alphan Yavaş <alphan.yavas@...net.com.tr>)
[FD] CVE-2018-16242 - oBike Electronic Lock Bypass (Antoine Neuenschwander <antoine@...oggi.org>)
[FD] CVE-2018-15502 - Insecure permissions in Lone Wolf Technologies loadingDOCS 2018-08-13 allow remote attackers to d… (Mathieu Michaud <Mathieu.Michaud@...ax.…)
[FD] Policy bypass on Imperva WAF (Dam Cab <fu@...hack.fr>)
[FD] CVE-2017-17762 - XXE Vulnerability in Episerver CMS (Jonas Lejon <jonas.bugtraq@...op.se>)
[FD] DAVOSET v.1.3.6 ("MustLive" <mustlive@...security.com.ua>)
[FD] DSA-2018-147: Dell EMC Isilon OneFS and IsilonSD Edge Remote Process Crash Vulnerability (<secure@...l.com>)

September 17 (8 messages)

[FD] Disclose SSRF Vulnerability (alphan yavaş <ayavasa94@...il.com>)
[FD] [CVE-2018-16225] QBee MultiSensor Camera LAN Traffic Vulnerability (Francesco Servida <francesco.servida@...l.ch>)
[FD] Multiple Vulnerabilities in Oracle WebCenter Interaction 10.3.3 (Ben N <pajexali@...il.com>)
[FD] APPLE-SA-2018-9-17-2 watchOS 5 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2018-9-17-1 iOS 12 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2018-9-17-3 tvOS 12 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2018-9-17-4 Safari 12 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2018-9-17-5 Apple Support 2.4 for iOS (Apple Product Security <product-security-noreply@...ts.apple.com>)

September 18 (3 messages)

[FD] SEC Consult SA-20180918-0 :: Remote Code Execution via PHP unserialize in Moodle open-source learning platform (SEC Consult Vulnerability Lab <research@se…)
[FD] Authentication bypass vulnerability in Western Digital My Cloud allows escalation to admin privileges ("Securify B.V. via Fulldisclosure" <fulldisclosure@…)
[FD] DSA-2018-101: Dell EMC Unity Family Multiple Vulnerabilities (<secure@...l.com>)

September 20 (1 message)

[FD] AST-2018-009: Remote crash vulnerability in HTTP websocket upgrade ("Asterisk Security Team" <security@...erisk.org>)

September 21 (8 messages)

[FD] WordPress Plugin Wechat Broadcast 1.2.0 - Local/Remote File Inclusion (Manuel Garcia Cardenas <advidsec@...il.com>)
[FD] WordPress Plugin Localize My Post 1.0 - Local File Inclusion (Manuel Garcia Cardenas <advidsec@...il.com>)
[FD] X41 D-Sec GmbH Security Advisory X41-2018-008: Multiple Vulnerabilities in HylaFAX (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)
[FD] X41 D-Sec GmbH Security Advisory X41-2018-007: Multiple Vulnerabilities in mgetty (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)
[FD] OPManager SQL Injection Vulnerability (Murat Aydemir <murat.aydemir@...net.com.tr>)
[FD] DSA-2018-152: RSA® Authentication Manager Multiple Vulnerabilities (<secure@...l.com>)
[FD] [CVE-2018-13140] Antidote Remote Code Execution against the update component (Sysdream Labs <labs@...dream.com>)
[FD] DSA-2018-152: RSA® Authentication Manager Multiple Vulnerabilities (<secure@...l.com>)

September 25 (8 messages)

[FD] APPLE-SA-2018-9-24-1 macOS Mojave 10.14 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2018-9-24-3 Additional information for APPLE-SA-2018-9-17-4 Safari 12 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2018-9-24-2 iTunes 12.9 for Windows (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2018-9-24-4 Additional information for APPLE-SA-2018-9-17-1 iOS 12 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2018-9-24-5 Additional information for APPLE-SA-2018-9-17-2 watchOS 5 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2018-9-24-6 Additional information for APPLE-SA-2018-9-17-3 tvOS 12 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] bounties (Justin Ferguson <justin@...c.co>)
[FD] DSA-2018-158: Dell EMC ESRS Policy Manager Remote Code Execution Vulnerability (<secure@...l.com>)

September 26 (3 messages)

[FD] SEC Consult SA-20180924-0 :: Multiple Vulnerabilities in Citrix StorageZones Controller (SEC Consult Vulnerability Lab <research@...-consult.com>)
[FD] SEC Consult SA-20180926-0 :: (SEC Consult Vulnerability Lab <research@...-consult.com>)
Re: [FD] SEC Consult SA-20180926-0 :: Stored Cross-Site Scripting in Progress Kendo UI Editor (SEC Consult Vulnerability Lab <research@...-consult.com>)

September 28 (6 messages)

[FD] Hardened Debian Security Focused Distribution - Feedback Wanted! (TNT BOM BOM <bo0od@...eup.net>)
[FD] New Release: UFONet v1.1 - "Quantum Hydra!"... (psy <epsylon@...eup.net>)
[FD] Skype Debian package: allows complete machine takeover for Microsoft ("Enrico Weigelt, metux IT consult" <info@...ux.net>)
[FD] Integer overflow in Linux's create_elf_tables() (CVE-2018-14634) (Qualys Security Advisory <qsa@...lys.com>)
[FD] DSA-2018-141: Dell EMC Unity Family Incorrect File Permissions vulnerability (<secure@...l.com>)
[FD] Executable installers are vulnerable^WEVIL (case 57): arbitrary code execution WITH escalation of privilege viaIn… ("Stefan Kanthak" <stefan.kanthak@...go.…)

57 messages

Powered by blists - more mailing lists