full-disclosure mailing list - 2023/03

Messages by day:

March 3 (3 messages)

• [FD] NetBSD overflow (Erg Noor <fuzzingrf@...dex.ru>)
• [FD] SRP on Windows 11 (Andy Ful <hardconfigurator@...il.com>)
• [FD] SEC Consult SA-20230228-0 :: OS Command Injectionin Barracuda CloudGen WAN ("SEC Consult Vulnerability Lab, Research via Fulldisclosure" <fulldisclosure@…)

• [FD] OpenBSD overflow (Erg Noor <fuzzingrf@...dex.ru>)
• [FD] SEC Consult SA-20230306-0 :: Multiple Vulnerabilities in Arris DG3450 Cable Gateway ("SEC Consult Vulnerability Lab, Research via Fulldisclosure" <fulldi…)
• [FD] [CVE-2023-25355/25356] No fix available - vulnerabilities in CoreDial sipXcom sipXopenfire (Systems Research Group via Fulldisclosure <fulldisclosure@...l…)

• [FD] Full Disclosure - Shopify Application (Andrey Stoykov <mwebsec@...il.com>)
• [FD] Full Disclosure - Fastly (Andrey Stoykov <mwebsec@...il.com>)

• [FD] [CFP] Security BSides Ljubljana 0x7E7 | June 16, 2023 (Andraz Sraka <a@...bix.org>)
• [FD] Defense in depth -- the Microsoft way (part 83): instead to fix even their most stupid mistaskes, they spill barr… ("Stefan Kanthak" <stefan.kanthak@...go.…)

• Re: [FD] Microsoft PlayReady security research (Security Explorations <contact@...urity-explorations.com>)

• Re: [FD] Defense in depth -- the Microsoft way (part 83): instead to fix even their most stupid mistaskes, they spill barrels of … (Arik Seils <Arik@...ls.info>)
• Re: [FD] Microsoft PlayReady security research (Adam Gowdiak <contact@...ecurityresearch.com>)
• [FD] Insecure python cgi documentation and tutorials are vulnerable to XSS. (Georgi Guninski <gguninski@...il.com>)
• [FD] Invitation to the World Cryptologic Competition 2023 (Competition Administrator <worldcryptologiccompetition@...il.com>)

• [FD] Defense in depth -- the Microsoft way (part 84): (no) fun with %COMSPEC% ("Stefan Kanthak" <stefan.kanthak@...go.de>)

• [FD] RSA NetWitness Platform EDR / Incorrect Access Control - Code Execution (hyp3rlinx <apparitionsec@...il.com>)
• [FD] APPLE-SA-2023-03-27-3 macOS Ventura 13.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
• [FD] APPLE-SA-2023-03-27-4 macOS Monterey 12.6.4 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
• [FD] APPLE-SA-2023-03-27-1 iOS 16.4 and iPadOS 16.4 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
• [FD] APPLE-SA-2023-03-27-2 iOS 15.7.4 and iPadOS 15.7.4 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
• [FD] APPLE-SA-2023-03-27-5 macOS Big Sur 11.7.5 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
• [FD] APPLE-SA-2023-03-27-6 tvOS 16.4 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
• [FD] APPLE-SA-2023-03-27-8 Safari 16.4 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
• [FD] APPLE-SA-2023-03-27-9 Studio Display Firmware Update 16.4 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
• [FD] APPLE-SA-2023-03-27-7 watchOS 9.4 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)

• [FD] RSA NetWitness EDR Agent / Incorrect Access Control - Code Execution / CVE-2022-47529 (hyp3rlinx <apparitionsec@...il.com>)

27 messages

Powered by blists - more mailing lists