Mail Thread Index

• Date Index

• CA20180829-01: Security Notice for CA PPM, Williams, Ken
• CA20180829-02: Security Notice for CA Unified Infrastructure Management, Williams, Ken
• CA20180829-03: Security Notice for CA Release Automation, Williams, Ken
• [SECURITY] [DSA 4282-1] trafficserver security update, Moritz Muehlenhoff
• [SECURITY] [DSA 4283-1] ruby-json-jwt security update, Moritz Muehlenhoff
• Defense in depth -- the Microsoft way (part 57): installation of security updates fails on Windows Embedded POSReady 2009, Stefan Kanthak
• Amcrest Cameras SSL Key Reuse Across installations, jack . m . mckenna
• [SECURITY] [DSA 4284-1] lcms2 security update, Moritz Muehlenhoff
• [SECURITY] [DSA 4285-1] sympa security update, Salvatore Bonaccorso
• [SECURITY] [DSA 4286-1] curl security update, Alessandro Ghedini
• [slackware-security] ghostscript (SSA:2018-249-02), Slackware Security Team
• [slackware-security] curl (SSA:2018-249-01), Slackware Security Team
• [slackware-security] mozilla-firefox (SSA:2018-249-03), Slackware Security Team
• [slackware-security] Slackware 14.2 mozilla-thunderbird (SSA:2018-249-04), Slackware Security Team
• Vulnerabilities in KONEs Group Controller (KGC), Sebastian Neuner
• CVE-2017-17762 - XXE Vulnerability in Episerver, Jonas Lejon
• SEC Consult SA-20180906-0 :: CSV Formula Injection in DokuWiki, SEC Consult Vulnerability Lab
• [CVE-2018-15876] Ajax BootModal Login Captcha Reuse, Lyderic LEFEBVRE
• [SECURITY] [DSA 4287-1] firefox-esr security update, Moritz Muehlenhoff
• [SECURITY] [DSA 4288-1] ghostscript security update, Moritz Muehlenhoff
• [SECURITY] [DSA 4289-1] chromium-browser security update, Michael Gilbert
• CVE-2017-16541 details: Deanonymize Tor Browser Users with Automount, Filippo Cavallarin
• [SECURITY] [DSA 4290-1] libextractor security update, Salvatore Bonaccorso
• [SECURITY] [DSA 4291-1] mgetty security update, Yves-Alexis Perez
• [SECURITY] [DSA 4292-1] kamailio security update, Salvatore Bonaccorso
• FreeBSD Security Advisory FreeBSD-SA-18:12.elf, FreeBSD Security Advisories
• Disclose SSRF Vulnerability, Alphan Yavaş
  • <Possible follow-ups>
  • Disclose SSRF Vulnerability, alphan yavaş
• [SYSS-2018-015] HiScout GRC Suite < 3.1.5 - Unrestricted Upload of File with Dangerous Type, sebastian . auwaerter
• Seagate Personal Cloud multiple information disclosure vulnerabilities, Summer of Pwnage
• CVE-2017-16639 - Tor Browser Deanonymization With SMB, Filippo Cavallarin
• CVE-2018-16242 - oBike Electronic Lock Bypass, Antoine Neuenschwander
• [slackware-security] ghostscript (SSA:2018-256-01), Slackware Security Team
• [SECURITY] [DSA 4293-1] discount security update, Alessandro Ghedini
• [slackware-security] php (SSA:2018-257-01), Slackware Security Team
• [SECURITY] [DSA 4273-2] intel-microcode security update, Moritz Muehlenhoff
• [SECURITY] [DSA 4294-1] ghostscript security update, Moritz Muehlenhoff
• [SECURITY] [DSA 4295-1] thunderbird security update, Moritz Muehlenhoff
• [SECURITY] [DSA 4296-1] mbedtls security update, Moritz Muehlenhoff
• APPLE-SA-2018-9-17-2 watchOS 5, Apple Product Security
• APPLE-SA-2018-9-17-1 iOS 12, Apple Product Security
• APPLE-SA-2018-9-17-3 tvOS 12, Apple Product Security
• APPLE-SA-2018-9-17-4 Safari 12, Apple Product Security
• APPLE-SA-2018-9-17-5 Apple Support 2.4 for iOS, Apple Product Security
• race condition in .net core System.IO.Directory.Delete allowing deletion of entire drives, Joshua Hudson
• SEC Consult SA-20180918-0 :: Remote Code Execution via PHP unserialize in Moodle open-source learning platform, SEC Consult Vulnerability Lab
• Authentication bypass vulnerability in Western Digital My Cloud allows escalation to admin privileges, Securify B.V.
• [SECURITY] [DSA 4297-1] chromium-browser security update, Michael Gilbert
• [HITB-Announce] #HITBSecConf2018PEK Call for CTF, Hafez Kamal
• X41 D-Sec GmbH Security Advisory X41-2018-008: Multiple Vulnerabilities in HylaFAX, X41 D-Sec GmbH Advisories
• X41 D-Sec GmbH Security Advisory X41-2018-007: Multiple Vulnerabilities in mgetty, X41 D-Sec GmbH Advisories
• OPManager SQL Injection Vulnerability, Murat Aydemir
• [SECURITY] [DSA 4298-1] hylafax security update, Moritz Muehlenhoff
• AST-2018-009: Remote crash vulnerability in HTTP websocket upgrade, Asterisk Security Team
• [waraxe-2018-SA#107] - Reflected XSS in FV Flowplayer Wordpress plugin, come2waraxe
• [SECURITY] [DSA 4299-1] texlive-bin security update, Yves-Alexis Perez
• [SYSS-2018-016] Postman - Improper Certificate Validation, ludwig . stage
• [slackware-security] Slackware 14.2 kernel (SSA:2018-264-01), Slackware Security Team
• [SECURITY] [DSA 4300-1] libarchive-zip-perl security update, Salvatore Bonaccorso
• [slackware-security] mozilla-firefox (SSA:2018-265-01), Slackware Security Team
• [SECURITY] [DSA 4302-1] openafs security update, Salvatore Bonaccorso
• [SECURITY] [DSA 4301-1] mediawiki security update, Moritz Muehlenhoff
• [SECURITY] [DSA 4303-1] okular security update, Moritz Muehlenhoff
• [SECURITY] [DSA 4304-1] firefox-esr security update, Moritz Muehlenhoff
• [SECURITY] [DSA 4305-1] strongswan security update, Yves-Alexis Perez
• APPLE-SA-2018-9-24-1 macOS Mojave 10.14, Apple Product Security
• APPLE-SA-2018-9-24-3 Additional information for APPLE-SA-2018-9-17-4 Safari 12, Apple Product Security
• APPLE-SA-2018-9-24-2 iTunes 12.9 for Windows, Apple Product Security
• APPLE-SA-2018-9-24-6 Additional information for APPLE-SA-2018-9-17-3 tvOS 12, Apple Product Security
• APPLE-SA-2018-9-24-4 Additional information for APPLE-SA-2018-9-17-1 iOS 12, Apple Product Security
• APPLE-SA-2018-9-24-5 Additional information for APPLE-SA-2018-9-17-2 watchOS 5, Apple Product Security
• tekno.Portal v0.1b - Cross-Site Scripting Vulnerability in "link.php", Socket_0x03
• Integer overflow in Linux's create_elf_tables() (CVE-2018-14634), Qualys Security Advisory
• SEC Consult SA-20180924-0 :: Multiple Vulnerabilities in Citrix StorageZones Controller, SEC Consult Vulnerability Lab
• SEC Consult SA-20180926-0 ::, SEC Consult Vulnerability Lab
  • Re: SEC Consult SA-20180926-0 :: Stored Cross-Site Scripting in Progress Kendo UI Editor, SEC Consult Vulnerability Lab
• [waraxe-2018-SA#108] - Username Disclosure in Breadcrumb NavXT Wordpress plugin, come2waraxe
• [SECURITY] [DSA 4306-1] python2.7 security update, Moritz Muehlenhoff