full-disclosure mailing list - 2020/10

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2020/10

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹	² 6	³	⁴
⁵ 1	⁶ 7	⁷	⁸ 1	⁹ 2	¹⁰	¹¹
¹² 1	¹³	¹⁴	¹⁵	¹⁶ 3	¹⁷	¹⁸
¹⁹ 1	²⁰ 4	²¹ 1	²² 1	²³ 3	²⁴	²⁵
²⁶	²⁷ 1	²⁸	²⁹ 1	³⁰ 1	³¹

Messages by day:

October 2 (6 messages)

[FD] CSNC-2020-005 - Checkmk Local Privilege Escalation (Advisories <advisories@...pass-security.com>)
[FD] CVE-2020-12676 - FusionAuth SAML v2.0 bindings in Java using JAXB - Signature Exclusion Attack (Advisories <advisories@...pass-security.com>)
[FD] How to build Win2k3 (Gregory Boddin <gregory@...hine.net>)
[FD] [SYSS-2019-048] Improper Authorization (CWE-285) in REDDOXX MailDepot (CVE-2019-19200) (Micha Borrmann <micha.borrmann@...s.de>)
[FD] SEC Consult SA-20201001-0 :: Broken Access Control in Platinum Mobile (SEC Consult Vulnerability Lab <research@...-consult.com>)
[FD] SEC Consult SA-20201002-0 :: Multiple Vulnerabilities in SevOne Network Management System (NMS) (SEC Consult Vulnerability Lab <research@...-consult.com>)

October 5 (1 message)

[FD] SEC Consult SA-20201005-0 :: Multiple Critical Vulnerabilities in RocketLinx Series (SEC Consult Vulnerability Lab <research@...-consult.com>)

October 6 (7 messages)

[FD] XSS in krpano Panorama Viewer (Adriano Marcio Monteiro <adriano@...tec.com>)
[FD] Recon Informer v1.2 - Intel for offensive systems tool. (hyp3rlinx <apparitionsec@...il.com>)
Re: [FD] Navy Federal Reflective Cross Site Scripting (XSS) (Ken <catatonicprime@...il.com>)
[FD] FortSIEM <= 5.2.8 RCE due to EL Injection - analysis (Red Timmy Security <publications@...timmy.com>)
[FD] CVE-2020-25790 (Rodolfo Augusto do Nascimento Tavares <rodolfo.tavares@...pest.com.br>)
[FD] CVE-2020-24722: GAEN Protocol Metadata Deanonymization and Risk-score Inflation Issues (Stefan Marsiske via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Student Result Management System 1.0 - Multiple SQL Injection Vulnerabilities (b1nary <thebinary0x1@...il.com>)

October 8 (1 message)

[FD] [RT-SA-2020-002] Denial of Service in D-Link DSR-250N (RedTeam Pentesting GmbH <release@...team-pentesting.de>)

October 9 (2 messages)

[FD] SEC Consult SA-20201008-0 :: Multiple Cross-Site Scripting Vulnerabilities in Confluence Marketplace Plugins (SEC Consult Vulnerability Lab <research@...-…)
[FD] Cisco Webex Teams Client for Windows DLL Hijacking Vulnerability (houjingyi <houjingyi647@...il.com>)

October 12 (1 message)

[FD] SEC Consult SA-20201012-0 :: Reflected Cross-Site Scripting and Unauthenticated Malicious File Upload in Sage DPW (SEC Consult Vulnerability Lab <research…)

October 16 (3 messages)

[FD] Java deserialization vulnerability in QRadar RemoteJavaScript Servlet ("Securify B.V. via Fulldisclosure" <fulldisclosure@...lists.org>)
Re: [FD] Google's Android: remote install backdoor in Google Play Services ("Enrico Weigelt, metux IT consult" <lkml@...ux.net>)
[FD] Open-Xchange Security Advisory 2020-10-13 (Open-Xchange GmbH via Fulldisclosure <fulldisclosure@...lists.org>)

October 19 (1 message)

[FD] [RT-SA-2020-003] FRITZ!Box DNS Rebinding Protection Bypass (RedTeam Pentesting GmbH <release@...team-pentesting.de>)

October 20 (4 messages)

Re: [FD] Google's Android: remote install backdoor in Google Play Services (Adrian Sanabria <adrian.sanabria@...il.com>)
[FD] LISTSERV Maestro Remote Code Execution Vulnerability ("Ryan Wincey" <contact@...urifera.com>)
Re: [FD] Google's Android: remote install backdoor in Google Play Services (Michael Lazin <microlaser@...il.com>)
Re: [FD] Google's Android: remote install backdoor in Google Play Services (Pedro Cunha <pedroagracio@...il.com>)

October 21 (1 message)

[FD] [RT-SA-2020-005] Arbitrary File Disclosure and Server-Side Request Forgery in BigBlueButton (RedTeam Pentesting GmbH <release@...team-pentesting.de>)

October 22 (1 message)

[FD] VL 2020-10-22 - German Bundeswehr starts own Responsible Disclosure Program (VDPBw) (Vulnerability Lab <research@...nerability-lab.com>)

October 23 (3 messages)

[FD] SEC Consult SA-20201023-0 :: Multiple Vulnerabilities in PubliXone (SEC Consult Vulnerability Lab <research@...-consult.com>)
[FD] Unicorn Emulator 1.0.2 is out! (Nguyen Anh Quynh <aquynh@...il.com>)
[FD] CVE-2020-24990 Q-SYS <= 8.2.1 TFTP Directory Traversal (Kevin R <krandall2013@...il.com>)

October 27 (1 message)

[FD] [CVE-2020-25204] God Kings "com.innogames.core.frontend.notifications.receivers.LocalNotificationBroadcastReceiver… ("Julien Ahrens (RCE Security)" <info@rc…)

October 29 (1 message)

[FD] German armed forces launch security vulnerability disclosure program (Vulnerability Lab <research@...nerability-lab.com>)

October 30 (1 message)

[FD] Chrome heap buffer overflow in freetype2 CVE-2020-15999 (Marcin Kozlowski <marcinguy@...il.com>)

34 messages

Powered by blists - more mailing lists