full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2020/12

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 1	²	³ 1	⁴ 2	⁵	⁶
⁷	⁸ 3	⁹ 4	¹⁰	¹¹ 13	¹²	¹³
¹⁴	¹⁵ 9	¹⁶	¹⁷ 1	¹⁸ 8	¹⁹	²⁰
²¹ 2	²² 3	²³	²⁴	²⁵	²⁶ 9	²⁷
²⁸	²⁹ 4	³⁰	³¹

Messages by day:

December 1 (1 message)

Re: [FD] Etherify 4 - jumping air gaps with real ethernet hardware (Dave Horsfall <dave@...sfall.org>)

December 3 (1 message)

[FD] Bundeswehr VDPBw 50+ reported vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)

December 4 (2 messages)

[FD] New BlackArch Linux ISOs + OVA Image released! (Black Arch <blackarchlinux@...il.com>)
[FD] ProCaster LE-32F430 SmartTV RCE via libsoup/2.51.3 stack overflow (CVE-2017-2885) (def <def@...meet.info>)

December 8 (3 messages)

[FD] Request for full disclosure of CVE-2020-25889 & CVE-2020-25955 (krishna yadav <kisna1993yadav@...il.com>)
[FD] Disable Windows Defender and most other 3rd party antiviruses (Roberto Franceschetti <roberto@...sat.com>)
Re: [FD] Disable Windows Defender and most other 3rd party antiviruses ("Exibar" <exibar@...lair.com>)

December 9 (4 messages)

[FD] VestaCP v0.9.8-26 - (period) Cross Site Scripting Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] VestaCP v0.9.8-26 - Insufficient Session Validation Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] VestaCP v0.9.8-26 - (LoginAs) Token Session Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Huawei HedEx Lite (DM) - Path Traversal Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

December 11 (13 messages)

[FD] Cross-Site Scripting Vulnerabilities in BigtreeCMS 4.4.11 (Daniel Bishtawi via Fulldisclosure <fulldisclosure@...lists.org>)
Re: [FD] Disable Windows Defender and most other 3rd party antiviruses (edwin@...mainstreet.net)
[FD] Vulnerability Path Traversal ACS (n0ipr0cs <franciscojaviersantiagovazquez@...il.com>)
[FD] Reflected XSS in WordPress - DirectoriesPro 1.3.45 plugin disclosure (Jack Misiura via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Self-reflected XSS in WordPress DirectoriesPro 1.3.45 plugin disclosure. (Jack Misiura via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] IP access control bypass in OpenAsset Digital Asset Management 11.2.1/12.0.19 disclosure (Jack Misiura via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Stored cross-site scripting (XSS) in OpenAsset Digital Asset Management 11.2.1/12.0.19 disclosure (Jack Misiura via Fulldisclosure <fulldisclosure@...list…)
[FD] Cross-site request forgery (CSRF) in OpenAsset Digital Asset Management 11.2.1/12.0.19 disclosure (Jack Misiura via Fulldisclosure <fulldisclosure@...list…)
[FD] Reflected cross-site scripting (XSS) in OpenAsset Digital Asset Management 11.2.1/12.0.19 disclosure (Jack Misiura via Fulldisclosure <fulldisclosure@...l…)
[FD] Authenticated blind SQL injection (SQLi) in OpenAsset Digital Asset Management 11.2.1/12.0.19 disclosure (Jack Misiura via Fulldisclosure <fulldisclosure@…)
[FD] Missing access controls in OpenAsset Digital Asset Management 11.2.1/12.0.19 disclosure (Jack Misiura via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Stored XSS in Online bus booking system (krishna yadav <kisna1993yadav@...il.com>)
Re: [FD] Disable Windows Defender and most other 3rd party antiviruses (Roberto Franceschetti <roberto@...sat.com>)

December 15 (9 messages)

[FD] APPLE-SA-2020-12-14-1 iOS 14.3 and iPadOS 14.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2020-12-14-2 iOS 12.5 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2020-12-14-3 macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave (Apple Product Security via Fulldisclosure <f…)
[FD] APPLE-SA-2020-12-14-5 watchOS 7.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2020-12-14-6 watchOS 6.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2020-12-14-7 tvOS 14.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2020-12-14-8 Safari 14.0.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2020-12-14-9 macOS Server 5.11 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1 (Apple Product Security via Fulldisclosure <fulldisclosure@sec…)

December 17 (1 message)

[FD] SEC Consult SA-20201217-0 :: Multiple critical vulnerabilities in Trend Micro InterScan Web Security Virtual Appli… (SEC Consult Vulnerability Lab <research…)

December 18 (8 messages)

[FD] Programi Bilanc - Build 007 Release 014 31.01.2020 - Use of weak default Password - CVE-2020-11720 (Georg Ph E Heise via Fulldisclosure <fulldisclosure@se…)
[FD] Programi Bilanc - Build 007 Release 014 31.01.2020 - Broken encryption with guessable static encryption key [CVE-2… (Georg Ph E Heise via Fulldisclosure <fu…)
[FD] Programi Bilanc - Build 007 Release 014 31.01.2020 - Multiple SQL Injections [CVE-2020-11717] (Georg Ph E Heise via Fulldisclosure <fulldisclosure@...list…)
[FD] Programi Bilanc - Build 007 Release 014 31.01.2020 - Broken encryption with guessable static encryption key [CVE-2… (Georg Ph E Heise via Fulldisclosure <fu…)
[FD] Programi Bilanc - Build 007 Release 014 31.01.2020 - Software-update packages are downloaded via unencrypted HTTP … (Georg Ph E Heise via Fulldisclosure <fu…)
[FD] CA20201215-01: Security Notice for CA Service Catalog (Kevin Kotas via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Rocket.Chat quietly patches XSS vulnerability (Moe Szyslak <mommar.morris.szyslak@...il.com>)
[FD] Defense in depth -- the Microsoft way (part 68): where compatibility means vulnerability ("Stefan Kanthak" <stefan.kanthak@...go.de>)

December 21 (2 messages)

[FD] SUPREMO Local privilege escalation (Adan Alvarez <adan.alvarez@...ecure.com>)
[FD] remote code execution when open a project in android studio that google refused to fix(still 0day) (houjingyi <houjingyi647@...il.com>)

December 22 (3 messages)

[FD] Rocket.Chat Path Traversal (Moe Szyslak <mommar.morris.szyslak@...il.com>)
[FD] AST-2020-003: Remote crash in res_pjsip_diversion ("Asterisk Security Team" <security@...erisk.org>)
[FD] AST-2020-004: Remote crash in res_pjsip_diversion ("Asterisk Security Team" <security@...erisk.org>)

December 26 (9 messages)

[FD] SYSS-2020-040 Urve - Missing Authentication for Critical Function (CWE-306) (Erik Steltzner <erik.steltzner@...s.de>)
[FD] SYSS-2020-041 Urve - Missing Authorization (CWE-862) (Erik Steltzner <erik.steltzner@...s.de>)
[FD] SYSS-2020-042 Urve - Exposure of Sensitive Information to an Unauthorized Actor (CWE-200) (Erik Steltzner <erik.steltzner@...s.de>)
Re: [FD] CVE-2020-8150 – Remote Code Execution as SYSTEM/root via Backblaze (Jason Geffner <geffner@...il.com>)
Re: [FD] CVE-2020-8152 – Elevation of Privilege in Backblaze (Jason Geffner <geffner@...il.com>)
[FD] [CVE-2018-7580] - Philips Hue Denial of Service (Ilia Shnaidman <ilia@...ashn.com>)
[FD] CarolinaCon Online CFP (CarolinaCon <presenters@...olinacon.org>)
Re: [FD] CVE-2020-8152 – Elevation of Privilege in Backblaze (Reed Loden <reed@...dloden.com>)
Re: [FD] CVE-2020-8150 – Remote Code Execution as SYSTEM/root via Backblaze (Reed Loden <reed@...dloden.com>)

December 29 (4 messages)

[FD] Cross-Site Scripting Vulnerabilities in SEOPanel 4.6.0 (Daniel Bishtawi via Fulldisclosure <fulldisclosure@...lists.org>)
Re: [FD] CVE-2020-8150 – Remote Code Execution as SYSTEM/root via Backblaze (Jason Geffner <geffner@...il.com>)
Re: [FD] CVE-2020-8150 – Remote Code Execution as SYSTEM/root via Backblaze ("Mark E. Jeftovic" <markjr@...ydns.com>)
[FD] survey on reliability of CVSS (Zinaida Benenson <zinaida.benenson@....de>)

60 messages