full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2020/04

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹	²	³ 2	⁴	⁵
⁶ 1	⁷ 1	⁸	⁹	¹⁰ 2	¹¹	¹²
¹³ 1	¹⁴ 6	¹⁵ 8	¹⁶	¹⁷ 8	¹⁸	¹⁹
²⁰ 2	²¹ 14	²²	²³	²⁴ 2	²⁵	²⁶
²⁷	²⁸ 12	²⁹ 1	³⁰ 3

Messages by day:

April 3 (2 messages)

[FD] Recon-Informer v1 - Intel for offensive systems tool. (hyp3rlinx <apparitionsec@...il.com>)
[FD] MicroStrategy Intelligence Server and Web 10.4 - multiple vulnerabilities (Red Timmy Security <publications@...timmy.com>)

April 6 (1 message)

[FD] Microsoft Windows "net use" Logon CMD / Insufficient Password Prompt (hyp3rlinx <apparitionsec@...il.com>)

April 7 (1 message)

[FD] SEC Consult SA-20200407-0 :: Multiple XSS vulnerabilities in TAO Open Source Assessment Platform (SEC Consult Vulnerability Lab <research@...-consult.com>)

April 10 (2 messages)

[FD] netABuse - Windows Insufficient Authentication Logic Scanner (hyp3rlinx <apparitionsec@...il.com>)
Re: [FD] TP-LINK Cloud Cameras NCXXX Remote NULL Pointer Dereference (Pietro Oliva <pietroliva@...il.com>)

April 13 (1 message)

[FD] KL-001-2020-001 : Cellebrite Hardcoded ADB Authentication Keys (KoreLogic Disclosures via Fulldisclosure <fulldisclosure@...lists.org>)

April 14 (6 messages)

Re: [FD] Two vulnerabilities found in MikroTik's RouterOS (Q C <cq674350529@...il.com>)
[FD] Workspace Management 9.1.2.2765 - Stored Cross-Site Scripting (Georg Ph E Heise via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Matrix42 Workspace Management 9.1.2.2765 – Reflected Cross-Site Scripting (Georg Ph E Heise via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Matrix42 Workspace Management 9.1.2.2765 – Reflected Cross-Site Scripting (Georg Ph E Heise via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] WSO2 API Manager Stored XSS Vulnerabilty (raki ben hamouda <raki7bh@...il.com>)
[FD] Defense in depth -- the Microsoft way (part 67): we maintain 20 year old bugs since we don't care about our custom… ("Stefan Kanthak" <stefan.kanthak@...go.…)

April 15 (8 messages)

[FD] DedeCMS v7.5 SP2 - Multiple Cross Site Scripting Web Vulnerabilities (Vulnerability Lab <admin@...nerability-lab.com>)
[FD] DedeCMS v7.5 SP2 - Multiple Persistent Web Vulnerabilities (Vulnerability Lab <admin@...nerability-lab.com>)
[FD] Macs Framework v1.14f CMS - Multiple Web Vulnerabilities (Vulnerability Lab <admin@...nerability-lab.com>)
[FD] SeedDMS v5.1.18 - Multiple Persistent Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[FD] SuperBackup v2.0.5 iOS - (VCF) Persistent XSS Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] File Transfer iFamily v2.1 - Directory Traversal Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] AirDisk Pro v5.5.3 iOS - Multiple Persistent Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Bundeswehr Karriere Portal - Cross Site Scripting Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

April 17 (8 messages)

[FD] TAO Open Source Assessment Platform v3.3.0 RC02 - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[FD] SMACom v1.2.0 - Insecure Session Validation Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Playable v9.18 iOS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[FD] CA20200414-01: Security Notice for CA API Developer Portal (Ken Williams via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] CVE-2020-2771, CVE-2020-2851, CVE-2020-2944 - Multiple vulnerabilities in Oracle Solaris (Marco Ivaldi <marco.ivaldi@...iaservice.net>)
[FD] Prestashop <= 1.7.6.4 Multiple Vulnerabilities - CSRF to RCE (Sivanesh Ashok <sivaneshashok@...il.com>)
[FD] Swift File Transfer Mobile - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Fork CMS v5.8.0 - Multiple Persistent Web Vulnerbilities (Vulnerability Lab <research@...nerability-lab.com>)

April 20 (2 messages)

[FD] Phpgurukul User Registration v2.0 - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Folder Lock v3.4.5 iOS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)

April 21 (14 messages)

[FD] Mahara v19.10.2 CMS - Persistent Cross Site Scripting Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Sky File v2.1.0 iOS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Multiple 0 day vulnerabilities in IBM Data Risk Manager (Pedro Ribeiro <pedrib@...il.com>)
[FD] Unauthorized access to QRadar configuration sets via default password ("Securify B.V. via Fulldisclosure" <fulldisclosure@...lists.org>)
[FD] QRadar RssFeedItem Server-Side Request Forgery vulnerability ("Securify B.V. via Fulldisclosure" <fulldisclosure@...lists.org>)
[FD] Cross-Site Request Forgery & weak access control in QRadar ConfigServices webservice ("Securify B.V. via Fulldisclosure" <fulldisclosure@...lists.org>)
[FD] Reflected Cross-Site Scripting in QRadar Forensics link analysis page ("Securify B.V. via Fulldisclosure" <fulldisclosure@...lists.org>)
[FD] Local privilege escalation in QRadar due to run-result-reader.sh insecure file permissions ("Securify B.V. via Fulldisclosure" <fulldisclosure@...lists.or…)
[FD] PHP object injection vulnerability in QRadar Forensics web application ("Securify B.V. via Fulldisclosure" <fulldisclosure@...lists.org>)
[FD] Arbitrary class instantiation & local file inclusion vulnerability in QRadar Forensics web application ("Securify B.V. via Fulldisclosure" <fulldisclosure…)
[FD] Authorization bypass in QRadar Forensics web application ("Securify B.V. via Fulldisclosure" <fulldisclosure@...lists.org>)
[FD] QRadar session manager path traversal vulnerability ("Securify B.V. via Fulldisclosure" <fulldisclosure@...lists.org>)
[FD] Cisco AnyConnect elevation of privileges due to insecure handling of path names ("Securify B.V. via Fulldisclosure" <fulldisclosure@...lists.org>)
[FD] Web Application Firewall bypass via F5 Big-IP partial URI decoding (RedTimmy Security <redazione@...fault.it>)

April 24 (2 messages)

[FD] Air Sender v1.0.2 iOS - Arbitrary File Upload Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] jQuery < 3.5 Cross-Site Scripting (XSS) (Marcin Kozlowski <marcinguy@...il.com>)

April 28 (12 messages)

[FD] Project Open v5.0.3 CMS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[FD] POS PHP v17.5 - Persistent Cross Site Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Easy Transfer v1.7 iOS - Multiple Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Transfer Master v3.3 iOS - Denial of Service Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] File Sharing & Chat v1.0 iOS - Denial of Service Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Internet Download Manager v6.37.11.1 - Stack Buffer Overflow Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[FD] File Explorer v1.4 iOS - Information Disclosure Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Cross-Site Scripting Vulnerability in Geeklog 2.2.1 (Daniel Bishtawi <daniel@...sparker.com>)
[FD] Blind SQL Injection Vulnerability in Geeklog 2.2.1 (Daniel Bishtawi <daniel@...sparker.com>)
[FD] Gigamon - GigaVUE 0day (Balázs Hambalkó <hambalko.balazs@...il.com>)
[FD] Multiple vulnerabilities OpenAudiT (Pablo Zurro via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Exploiting java deserialization vulnerabilities in crypto contexts - a java applet case-study (RedTimmy Security <redazione@...fault.it>)

April 29 (1 message)

[FD] IDM v6.37.11.1 - Stack Buffer Overflow Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)

April 30 (3 messages)

[FD] HardDrive v2.1 iOS - Arbitrary File Upload Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Super Backup v2.0.5 iOS - Directory Traversal Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Advanced Persistent Threat Golden_hands - Digital Bank Robbery of the Year 2020 (Vulnerability Lab <research@...nerability-lab.com>)

63 messages