full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2021/09

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 4	²	³ 7	⁴	⁵
⁶	⁷ 8	⁸	⁹	¹⁰	¹¹	¹²
¹³	¹⁴ 4	¹⁵	¹⁶	¹⁷ 7	¹⁸	¹⁹
²⁰	²¹ 16	²²	²³	²⁴ 5	²⁵	²⁶
²⁷	²⁸ 8	²⁹	³⁰

Messages by day:

September 1 (4 messages)

[FD] SEC Consult SA-20210901-0 :: Multiple vulnerabilities in MOXA devices (SEC Consult Vulnerability Lab <research@...-consult.com>)
[FD] KL-001-2021-008: CyberArk Credential File Insufficient Effective Key Space (KoreLogic Disclosures via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] KL-001-2021-009: CyberArk Credential Provider Race Condition And Authorization Bypass (KoreLogic Disclosures via Fulldisclosure <fulldisclosure@...lists.o…)
[FD] KL-001-2021-010:CyberArk Credential Provider Local Cache Can Be Decrypted (KoreLogic Disclosures via Fulldisclosure <fulldisclosure@...lists.org>)

September 3 (7 messages)

[FD] Windows Defender Application Guard DoS via Long Hostname (Jonathan Gregson via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Mirror on the Fly Attack (Gökhan Muharremoglu <gokmuh@...mail.com>)
[FD] Artica Proxy VMWare Appliance 4.30.000000 <=[SP273] (Heiko Feldhusen via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Backdoor.Win32.MoonPie.40 / Authentication Bypass RCE (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.MoonPie.40 / Port Bounce Scan (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.MoonPie.40 / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] a xss vulnerability in Jforum 2.7.0 (kun song <songkun2008@...il.com>)

September 7 (8 messages)

[FD] CVE-2021-3145: Biometric Authentication Bypass in Ionic Identity Vault (Advisories <advisories@...pass-security.com>)
Re: [FD] Mirror on the Fly Attack (bo0od <bo0od@...eup.net>)
Re: [FD] a xss vulnerability in Jforum 2.7.0 (Henri Salo <henri@...v.fi>)
[FD] Backdoor.Win32.Nyara.aq / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Small.gs / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Small.vjt / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Dahua CVE-2021-33044, CVE-2021-33045 (bashis <mcw@...mail.eu>)
[FD] rencode 3-byte packet DoS (Antoine Martin <totaam@...a.org>)

September 14 (4 messages)

[FD] HEUR.Trojan.Win32.Generic / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.VB.awm / Authentication Bypass - Information Leakage (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Wollf.h / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.WinterLove.i / Hardcoded Weak Password (malvuln <malvuln13@...il.com>)

September 17 (7 messages)

[FD] Microsoft Windows Command-line Interpreter "cmd.exe" / Stack Buffer Overflow (hyp3rlinx <apparitionsec@...il.com>)
[FD] AMD Chipset Driver Information Disclosure Vulnerability [CVE-2021-26333] (<disclosure@...operil.com>)
[FD] APPLE-SA-2021-09-13-1 iOS 14.8 and iPadOS 14.8 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-09-13-2 watchOS 7.6.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-09-13-3 macOS Big Sur 11.6 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-09-13-4 Security Update 2021-005 Catalina (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-09-13-5 Safari 14.1.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)

September 21 (16 messages)

[FD] Windows NT Command-line Interpreter "cmd.exe" / Stack Buffer Overflow (hyp3rlinx <apparitionsec@...il.com>)
[FD] Windows NT Command-line Interpreter "cmd.exe" - Stack Buffer Overflow / PoC Video (hyp3rlinx <apparitionsec@...il.com>)
[FD] BSides San Francisco – February 2022 (BSidesSF CFP via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-09-20-1 iOS 15 and iPadOS 15 (product-security-noreply--- via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-09-20-2 watchOS 8 (product-security-noreply--- via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-09-20-3 tvOS 15 (product-security-noreply--- via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-09-20-4 Xcode 13 (product-security-noreply--- via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-09-20-5 Safari 15 (product-security-noreply--- via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-09-20-6 Additional information for APPLE-SA-2021-09-13-1 iOS 14.8 and iPadOS 14.8 (product-security-noreply--- via Fulldisclosure <fulldisc…)
[FD] APPLE-SA-2021-09-20-7 Additional information for APPLE-SA-2021-09-13-3 macOS Big Sur 11.6 (product-security-noreply--- via Fulldisclosure <fulldisclosure…)
[FD] APPLE-SA-2021-09-20-8 Additional information for APPLE-SA-2021-09-13-4 Security Update 2021-005 Catalina (product-security-noreply--- via Fulldisclosure …)
[FD] APPLE-SA-2021-09-20-9 iTunes U 3.8.3 (product-security-noreply--- via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-09-20-10 iTunes 12.12 for Windows (product-security-noreply--- via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Trojan.Win32.Agent.xaamkd / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Hupigon.asqx / Unauthenticated Open Proxy (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Minilash.10.b / Remote Denial of Service (UDP Datagram) (malvuln <malvuln13@...il.com>)

September 24 (5 messages)

[FD] openvpn-monitor Authorization Bypass (Advisories <advisories@...pass-security.com>)
[FD] openvpn-monitor OpenVPN Management Socket Command Injection (Advisories <advisories@...pass-security.com>)
[FD] openvpn-monitor Cross-Site Request Forgery (CSRF) (Advisories <advisories@...pass-security.com>)
[FD] APPLE-SA-2021-09-23-2 Security Update 2021-006 Catalina (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-09-23-1 iOS 12.5.5 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)

September 28 (8 messages)

[FD] Google Extensible Service Proxy v1 - CWE-287 Improper Authentication (Imre Rad <radimre83@...il.com>)
[FD] Trojan-Downloader.Win32.VB.abb / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Agent.aer / Remote Denial of Service (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Agent.aer / Insecure Transit Password Disclosure (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.RmtSvc.l / Remote Denial of Service (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Hupigon.fjcd / Unauthenticated Open Proxy (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Hupigon.afjk / Authentication Bypass RCE (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Hupigon.afjk / Directory Traversal (malvuln <malvuln13@...il.com>)

59 messages