full-disclosure mailing list - 2021/03

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2021/03

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹ 2	² 3	³	⁴ 1	⁵ 5	⁶	⁷
⁸	⁹ 12	¹⁰	¹¹ 5	¹² 4	¹³	¹⁴
¹⁵ 1	¹⁶ 14	¹⁷	¹⁸	¹⁹ 7	²⁰	²¹
²²	²³ 6	²⁴	²⁵ 7	²⁶ 9	²⁷	²⁸
²⁹	³⁰ 3	³¹ 2

Messages by day:

March 1 (2 messages)

[FD] SEC Consult SA-20210301-0 :: Authentication bypass vulnerability in Genua GenuGate High Resistance Firewall (SEC Consult Vulnerability Lab <research@...-c…)
[FD] SEC Consult SA-20210301-0 :: Authentication bypass vulnerability in Genua GenuGate High Resistance Firewall (SEC Consult Vulnerability Lab <research@...-c…)

March 2 (3 messages)

[FD] Multiple Vulnerabilities in jpeg-xl (CVE-2021-27804) (Marc <mh@...sec.de>)
[FD] Backdoor.Win32.RemoteManipulator.fdo / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Trojan-Spy.Win32.Stealer.osh / Insecure Permissions (malvuln <malvuln13@...il.com>)

March 4 (1 message)

[FD] AST-2021-006: Crash when negotiating T.38 with a zero port ("Asterisk Security Team" <security@...erisk.org>)

March 5 (5 messages)

[FD] New BlackArch Linux Slim ISO released! (Black Arch <blackarchlinux@...il.com>)
[FD] Defense in depth -- the Microsof way (part 72): "compatibility" trumps security ("Stefan Kanthak" <stefan.kanthak@...go.de>)
[FD] Backdoor.Win32.DarkKomet.irv / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.BO2K.ab / Local File Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.BO2K.09.b / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)

March 9 (12 messages)

[FD] Privilege Escalation in Emerson Smart Wireless Gateway 1420 4.6.59 Administrator Console (Harsha Bhat <harshabhat91@...il.com>)
[FD] Incorrect Access Control in Emerson Smart Wireless Gateway 1420 4.6.59 Administrator Console (Harsha Bhat <harshabhat91@...il.com>)
[FD] APPLE-SA-2021-03-08-1 iOS 14.4.1 and iPadOS 14.4.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-03-08-2 macOS Big Sur 11.2.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-03-08-3 Safari 14.0.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-03-08-4 watchOS 7.3.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Advisory ID: VMSA-2021-0002 ("☆月，缺也☆" <63090133@...com>)
[FD] BACKDOOR.WIN32.ANTILAM.14.O / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.GTbot.c / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Agent.bjev / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Unholy CRAP: Moziila's executable installers ("Stefan Kanthak" <stefan.kanthak@...go.de>)
[FD] Defense in depth -- the Microsoft way (part 73): ignorance (of security advisories) is bliss! ("Stefan Kanthak" <stefan.kanthak@...go.de>)

March 11 (5 messages)

[FD] [CVE-2021-28144] Authenticated Command Injection in D-Link DIR-3060 Web Interface (research <research@...-inspector.com>)
[FD] Data Manipulation with X-Forwarded-For header at WordPress (Alphan YAVAS <alphan.yv@...il.com>)
[FD] Trojan-Spy.Win32.KeyLogger.qt / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Trojan-Dropper.Win32.Hamer.10 / Remote Floating-point Exception DoS (malvuln <malvuln13@...il.com>)
Re: [FD] [CDPWE-0001] - RocketReach (Thierry Zoller <thierry@...ler.lu>)

March 12 (4 messages)

[FD] [AIT-SA-20210215-01] CVE-2020-24914: QCubed PHP Object Injection (sec-advisory <sec-advisory@....ac.at>)
[FD] [AIT-SA-20210215-02] CVE-2020-24913: QCubed SQL Injection (sec-advisory <sec-advisory@....ac.at>)
[FD] [AIT-SA-20210215-03] CVE-2020-24912: QCube Cross-Site-Scripting (sec-advisory <sec-advisory@....ac.at>)
[FD] [AIT-SA-20210215-04] CVE-2020-24036: ForkCMS PHP Object Injection (sec-advisory <sec-advisory@....ac.at>)

March 15 (1 message)

[FD] [KIS-2021-03] ExpressionEngine <= 6.0.2 (Translate::save) PHP Code Injection Vulnerability (research@...mainsecurity.com)

March 16 (14 messages)

[FD] [CSA-2021-002] DP API ineffective in Windows containers (Certitude - Advisories <advisories@...titude.consulting>)
[FD] From Adobe AEM dispatcher filter rules bypass to successfully triggering XSS on 40+ Linkedin websites [ Youtube Video ] (Ateek khan <ateek.khan@...il.com>)
[FD] SolarWinds TFTP Server 11.0.4.101: Remote Unauthenticated Reconfiguration (Harrison Neal <hneal@...tdidibreak.com>)
Re: [FD] Data Manipulation with X-Forwarded-For header at WordPress (jvoisin <julien.voisin@...tri.org>)
[FD] 4th BSides Hannover in the make, save the date and please submit your research in our CFP ( Focus Healthcare / me… (BSides Hannover <layer8reads@...des-han…)
[FD] Trojan-Proxy.Win32.Wimain / Remote Stack Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Trojan-Dropper.Win32.Delf.xk / Remote Invalid Pointer Write DOS (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Zombam.l / Remote Stack Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.Scar.dxir / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.Siscos.bqe / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Trojan-Banker.Win32.Delf.ac / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] ES2021-02: VoIPmonitor WEB GUI vulnerable to Cross-Site Scripting via SIP messages ("Sandro Gauci" <sandro@...blesecurity.com>)
[FD] ES2021-03: VoIPmonitor is vulnerable to a buffer overflow when using the live sniffer ("Sandro Gauci" <sandro@...blesecurity.com>)
[FD] ES2021-04: VoIPmonitor static builds are compiled without any standard memory corruption protection ("Sandro Gauci" <sandro@...blesecurity.com>)

March 19 (7 messages)

[FD] CFP for Hardwear.io Security Conference is OPEN (Andrea Simonca <andrea@...dwear.io>)
[FD] [SYSS-2020-044]: Zoom - Exposure of Resource to Wrong Sphere (CWE-668) (CVE-2021-28133) (Matthias Deeg <matthias.deeg@...s.de>)
[FD] CMS Made Simple SQL injection on m1_sortby parameter (riccardo krauter <riccardo.krauter@...il.com>)
[FD] MS Made Simple - File upload bypass with .phar extension lead to RCE (riccardo krauter <riccardo.krauter@...il.com>)
[FD] Trojan-Dropper.Win32.Delf.p / Missing Authentication (malvuln <malvuln13@...il.com>)
[FD] Trojan-Dropper.Win32.Delf.p / Remote Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Agent.mzn / Remote SEH Buffer Overflow (malvuln <malvuln13@...il.com>)

March 23 (6 messages)

[FD] Inaugural Issue of the Journal of Cyber Forensics and Advanced Threat Investigations (Andrew Zayine <scholarshipchile@...il.com>)
[FD] CVE-2018-3635 revisited: executable installers are vulnerable^WEVIL (case 60): again arbitrary code execution WIT… ("Stefan Kanthak" <stefan.kanthak@...go.…)
[FD] Trojan-Dropper.Win32.Dycler.vrp / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] HEUR.Trojan.Win32.Generic / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Trojan-Dropper.Win32.Delf.da / Remote Stack Buffer Overflow (UDP Datagram) (malvuln <malvuln13@...il.com>)
[FD] Trojan-Dropper.Win32.Demp.rft / Insecure Permissions (malvuln <malvuln13@...il.com>)

March 25 (7 messages)

[FD] Virus.Win32.Sality.gen / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Worm.Win32.Detnat.c / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Trojan-Dropper.Win32.Dycler.yhb / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Worm.Win32.Ngrbot.abpr / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Worm.Win32.Recyl.dp / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Worm.Win32.Ngrbot.acno / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] BACKDOOR.WIN32.DARKKOMET.GOZU / Insecure Permissions (malvuln <malvuln13@...il.com>)

March 26 (9 messages)

[FD] CVE-2021-3275 : Unauthenticated Stored Cross-site Scripting in Multiple TP-Link Devices (Smriti Gaba <smritigaba548@...il.com>)
[FD] Backdoor.Win32.Kwak.12 / Remote Denial of Service (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Kwak.12 / Port Bounce Scan (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Kwak.12 / Authentication Bypass (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Kwak.12 / Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Delf.zs / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] APPLE-SA-2021-03-26-1 iOS 14.4.2 and iPadOS 14.4.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-03-26-2 iOS 12.5.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-03-26-3 watchOS 7.3.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)

March 30 (3 messages)

[FD] PotPlayer denial of service vulnerability (houjingyi <houjingyi647@...il.com>)
[FD] IRC-Worm.Win32.Jane.a / Authentication Bypass RCE (malvuln <malvuln13@...il.com>)
[FD] IRC-Worm.Win32.Jane.a / Authentication Bypass MITM Port Bounce Scan (malvuln <malvuln13@...il.com>)

March 31 (2 messages)

[FD] IRC-Worm.Win32.Silentium.a / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Burbul.b / Authentication Bypass MITM Port Bounce Scan (malvuln <malvuln13@...il.com>)

81 messages

Powered by blists - more mailing lists