full-disclosure mailing list - 2024/02

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2024/02

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹	²	³	⁴ 7
⁵	⁶	⁷	⁸	⁹	¹⁰	¹¹
¹²	¹³	¹⁴ 11	¹⁵ 1	¹⁶	¹⁷	¹⁸
¹⁹	²⁰	²¹ 6	²²	²³	²⁴	²⁵
²⁶	²⁷	²⁸	²⁹

Messages by day:

February 4 (7 messages)

[FD] NULL pointer dereference in the function handle_viminfo_register() of vim (Christian Brabandt <cb@...bit.org>)
[FD] [KIS-2024-01] XenForo <= 2.2.13 (ArchiveImport.php) Zip Slip Vulnerability (Egidio Romano <n0b0d13s@...il.com>)
[FD] TROJAN.WIN32 BANKSHOT / Remote Stack Buffer Overflow (SEH) (malvuln <malvuln13@...il.com>)
[FD] Research about usage & possible issues of the NVD (Andreas Hammer <andreas.hammer@....de>)
[FD] CVE-2023-6246: Heap-based buffer overflow in the glibc's syslog() (Qualys Security Advisory via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Out-of-bounds read & write in the glibc's qsort() (Qualys Security Advisory via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-02-02-2024-1 visionOS 1.0.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)

February 14 (11 messages)

[FD] IBM i Access Client Solutions / Remote Credential Theft / CVE-2024-22318 (hyp3rlinx <apparitionsec@...il.com>)
[FD] Wyrestorm Apollo VX20 / Incorrect Access Control - DoS / CVE-2024-25736 (hyp3rlinx <apparitionsec@...il.com>)
[FD] Wyrestorm Apollo VX20 / Account Enumeration / CVE-2024-25734 (hyp3rlinx <apparitionsec@...il.com>)
[FD] Wyrestorm Apollo VX20 / Incorrect Access Control - Credentials Disclosure / CVE-2024-25735 (hyp3rlinx <apparitionsec@...il.com>)
[FD] Microsoft Windows Defender / Trojan.Win32/Powessere.G / Detection Mitigation Bypass Part 2. (hyp3rlinx <apparitionsec@...il.com>)
[FD] Command Injection Vulnerability in KiTTY Get Remote File Through SCP Input (CVE-2024-23749) (Austin DeFrancesco via Fulldisclosure <fulldisclosure@...list…)
[FD] Buffer Overflow Vulnerabilities in KiTTY Start Duplicated Session Hostname (CVE-2024-25003) & Username (CVE-2024-2… (Austin DeFrancesco via Fulldisclosure <…)
[FD] Android passkeys unexpectedly deleted or useless after sync ("Erik van Straten (FD)" <evs20200430f@...all.nl>)
[FD] OXAS-ADV-2023-0007: OX App Suite Security Advisory (Martin Heiland via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Stored XSS and RCE - adaptcmsv3.0.3 (Andrey Stoykov <mwebsec@...il.com>)
[FD] SEC Consult SA-20240212-0 :: Multiple Stored Cross-Site Scripting vulnerabilities in Statamic CMS ("SEC Consult Vulnerability Lab, Research via Fulldiscl…)

February 15 (1 message)

[FD] 44CON 2024 September 18th - 20th CFP (Florent Daigniere via Fulldisclosure <fulldisclosure@...lists.org>)

February 21 (6 messages)

[FD] Microsoft Windows Defender / Trojan.Win32/Powessere.G / Detection Mitigation Bypass Part 3 (hyp3rlinx <apparitionsec@...il.com>)
[FD] Microsoft Windows Defender / VBScript Detection Bypass (hyp3rlinx <apparitionsec@...il.com>)
[FD] Microsoft Windows Defender / Backdoor:JS/Relvelshe.A / Detection Mitigation Bypass (hyp3rlinx <apparitionsec@...il.com>)
[FD] CVE-2024-24681: Insecure AES key in Yealink Configuration Encrypt Tool ("Jeroen J.A.W. Hermans via Fulldisclosure" <fulldisclosure@...lists.org>)
Re: [FD] Buffer Overflow in graphviz via via a crafted config6a file (Matthew Fernandez <matthew.fernandez@...il.com>)
[FD] SEC Consult SA-20240220-0 :: Multiple Stored Cross-Site Scripting Vulnerabilities in OpenOLAT (Frentix GmbH) ("SEC Consult Vulnerability Lab, Research vi…)

25 messages

Powered by blists - more mailing lists