full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

full-disclosure mailing list

	Jan	Feb	Mar	Apr	May	Jun	Jul	Aug	Sep	Oct	Nov	Dec
2024	75	25	44	29	37	13	24	41	59	22	6
2023	29	17	27	14	28	10	54	33	21	32	15	30
2022	90	58	61	56	48	49	35	16	29	54	26	32
2021	84	93	81	77	81	60	72	39	59	83	56	50
2020	38	50	57	63	60	35	37	24	55	34	45	60
2019	71	54	64	41	52	49	40	37	45	44	49	37
2018	102	84	79	62	73	46	94	54	57	54	69	56
2017	100	76	119	114	108	52	92	52	110	71	51	89
2016	100	128	97	93	77	79	89	139	85	103	162	88
2015	134	101	165	115	135	112	126	91	124	115	111	129
2014	194	273	434	339	247	183	169	90	116	135	103	138
2013	280	162	294	351	226	259	277	303	187	294	222	224
2012	614	478	388	384	323	428	394	393	210	277	236	280
2011	595	686	441	561	573	562	370	420	407	995	462	512
2010	645	492	579	458	406	642	419	440	426	528	375	702
2009	979	385	488	318	284	299	551	454	474	365	377	507
2008	623	503	603	821	685	400	593	557	630	547	734	647
2007	595	628	577	752	570	663	664	531	709	933	600	644
2006	991	742	2171	885	788	1116	781	843	578	686	540	503
2005	870	722	942	685	681	433	823	1081	888	680	1057	1541
2004	1383	1535	1525	1163	1460	1018	1373	1331	1102	1186	1435	818
2003	524	393	311	506	442	891	1270	1982	1832	1866	1232	800
2002	2	2		3		2	341	861	703	389	476	324
1970	1

Recent messages:

2024/11/13 #2: [FD] SEC Consult SA-20241112-0 :: Multiple vulnerabilities in Siemens Energy Omnivise T3000 (CVE-2024-38876, CVE-2024-3… (SEC Consult Vulnerability Lab via Fulld…)
2024/11/13 #1: [FD] Security issue in the TX Text Control .NET Server for ASP.NET. (Filip Palian <s3810@...stk.edu.pl>)
2024/11/10 #1: [FD] SEC Consult SA-20241107-0 :: Multiple Vulnerabilities in HASOMED Elefant and Elefant Software Updater (SEC Consult Vulnerability Lab via Fulldisclosure <…)
2024/11/07 #1: [FD] Unsafe eval() in TestRail CLI (Devin Cook <devin.c.cook@...il.com>)
2024/11/03 #2: [FD] 4 vulnerabilities in ibmsecurity (Pierre Kim <pierre.kim.sec@...il.com>)
2024/11/03 #1: [FD] 32 vulnerabilities in IBM Security Verify Access (Pierre Kim <pierre.kim.sec@...il.com>)
2024/10/31 #3: [FD] xlibre Xnest security advisory & bugfix releases ("Enrico Weigelt, metux IT consult" <info@...ux.net>)
2024/10/31 #2: [FD] APPLE-SA-10-29-2024-1 Safari 18.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
2024/10/31 #1: [FD] SEC Consult SA-20241030-0 :: Query Filter Injection in Ping Identity PingIDM (formerly known as ForgeRock Identity… (SEC Consult Vulnerability Lab via Fulld…)
2024/10/29 #10: [FD] SEC Consult SA-20241023-0 :: Authenticated Remote Code Execution in Multiple Xerox printers (CVE-2024-6333) (SEC Consult Vulnerability Lab via Fulldisclos…)
2024/10/29 #9: [FD] APPLE-SA-10-28-2024-8 visionOS 2.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
2024/10/29 #8: [FD] APPLE-SA-10-28-2024-7 tvOS 18.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
2024/10/29 #7: [FD] APPLE-SA-10-28-2024-6 watchOS 11.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
2024/10/29 #6: [FD] APPLE-SA-10-28-2024-5 macOS Ventura 13.7.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
2024/10/29 #5: [FD] APPLE-SA-10-28-2024-4 macOS Sonoma 14.7.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
2024/10/29 #4: [FD] APPLE-SA-10-28-2024-3 macOS Sequoia 15.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
2024/10/29 #3: [FD] APPLE-SA-10-28-2024-2 iOS 17.7.1 and iPadOS 17.7.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
2024/10/29 #2: [FD] APPLE-SA-10-28-2024-1 iOS 18.1 and iPadOS 18.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
2024/10/29 #1: [FD] Open Redirect / Reflected XSS - booked-schedulerv2.8.5 (Andrey Stoykov <mwebsec@...il.com>)
2024/10/25 #3: [FD] SEC Consult SA-20241024-0 :: Unauthenticated Path Traversal Vulnerability in Lawo AG - vsm LTC Time Sync (vTimeSyn… (SEC Consult Vulnerability Lab via Fulld…)
2024/10/25 #2: [FD] [RESEARCH] DTLS 'ClientHello' Race Conditions in WebRTC Implementations (Sandro Gauci via Fulldisclosure <fulldisclosure@...lists.org>)
2024/10/25 #1: [FD] Adversary3 updated with 700 malware and C2 panel vulnerabilities (malvuln <malvuln13@...il.com>)
2024/10/21 #2: [FD] SEC Consult SA-20241015-0 :: Multiple Vulnerabilities in Rittal IoT Interface & CMC III Processing Unit (CVE-2024-… (SEC Consult Vulnerability Lab via Fulld…)
2024/10/21 #1: [FD] CVE-2024-48939: Unauthorized enabling of API in Paxton Net2 software (Jeroen Hermans via Fulldisclosure <fulldisclosure@...lists.org>)
2024/10/10 #1: [FD] SEC Consult SA-20241009-0 :: Local Privilege Escalation via MSI installer in Palo Alto Networks GlobalProtect (CVE… (SEC Consult Vulnerability Lab via Fulld…)
2024/10/08 #1: [FD] APPLE-SA-10-03-2024-1 iOS 18.0.1 and iPadOS 18.0.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
2024/10/04 #1: [FD] Some SIM / USIM card security (and ecosystem) info (Security Explorations <contact@...urity-explorations.com>)
2024/10/01 #1: [FD] SEC Consult SA-20240930-0 :: Local Privilege Escalation via MSI Installer in Nitro PDF Pro (CVE-2024-35288) (SEC Consult Vulnerability Lab via Fulldisclos…)
2024/09/29 #8: [FD] Backdoor.Win32.Benju.a / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
2024/09/29 #7: [FD] Backdoor.Win32.Prorat.jz / Remote Stack Buffer Overflow (SEH) (malvuln <malvuln13@...il.com>)
2024/09/29 #6: [FD] Backdoor.Win32.Amatu.a / Remote Arbitrary File Write (RCE) (malvuln <malvuln13@...il.com>)
2024/09/29 #5: [FD] Backdoor.Win32.Agent.pw / Remote Stack Buffer Overflow (SEH) (malvuln <malvuln13@...il.com>)
2024/09/29 #4: [FD] Backdoor.Win32.Boiling / Remote Command Execution (malvuln <malvuln13@...il.com>)
2024/09/29 #3: [FD] Defense in depth -- the Microsoft way (part 88): a SINGLE command line shows about 20, 000 instances of CWE-73 ("Stefan Kanthak" <stefan.kanthak@...go.de>)
2024/09/29 #2: [FD] SEC Consult SA-20240925-0 :: Uninstall Password Bypass in BlackBerry CylanceOPTICS Windows Installer Package (CVE-… (SEC Consult Vulnerability Lab via Fulld…)
2024/09/29 #1: [FD] Apple iOS 17.2.1 - Screen Time Passcode Retrieval (Mitigation Bypass) (Patrick via Fulldisclosure <fulldisclosure@...lists.org>)
2024/09/24 #2: [FD] CyberDanube Security Research 20240919-0 | Multiple Vulnerabilities in Netman204 (Thomas Weber via Fulldisclosure <fulldisclosure@...lists.org>)
2024/09/24 #1: [FD] Submit Exploit CVE-2024-42831 (arfaoui haythem <haythemarfa123@...il.com>)
2024/09/19 #5: [FD] Stored XSS in "Edit Profile" - htmlyv2.9.9 (Andrey Stoykov <mwebsec@...il.com>)
2024/09/19 #4: [FD] Stored XSS in "Menu Editor" - htmlyv2.9.9 (Andrey Stoykov <mwebsec@...il.com>)
2024/09/19 #3: [FD] Backdoor.Win32.BlackAngel.13 / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
2024/09/19 #2: [FD] Backdoor.Win32.CCInvader.10 / Authentication Bypass (malvuln <malvuln13@...il.com>)
2024/09/19 #1: [FD] Backdoor.Win32.Delf.yj / Information Disclosure (malvuln <malvuln13@...il.com>)
2024/09/17 #12: [FD] SEC Consult blog :: Microsoft Windows MSI Installer - Repair to SYSTEM - A detailed journey (CVE-2024-38014) + msi… (SEC Consult Vulnerability Lab via Fulld…)
2024/09/17 #11: [FD] Stored XSS to Account Takeover - htmlyv2.9.9 (Andrey Stoykov <mwebsec@...il.com>)
2024/09/17 #10: [FD] APPLE-SA-09-16-2024-10 macOS Ventura 13.7 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
2024/09/17 #9: [FD] APPLE-SA-09-16-2024-9 macOS Sonoma 14.7 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
2024/09/17 #8: [FD] APPLE-SA-09-16-2024-8 iOS 17.7 and iPadOS 17.7 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
2024/09/17 #7: [FD] APPLE-SA-09-16-2024-7 Xcode 16 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
2024/09/17 #6: [FD] APPLE-SA-09-16-2024-6 Safari 18 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
2024/09/17 #5: [FD] APPLE-SA-09-16-2024-5 visionOS 2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
2024/09/17 #4: [FD] APPLE-SA-09-16-2024-4 watchOS 11 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
2024/09/17 #3: [FD] APPLE-SA-09-16-2024-3 tvOS 18 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
2024/09/17 #2: [FD] APPLE-SA-09-16-2024-2 macOS Sequoia 15 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
2024/09/17 #1: [FD] APPLE-SA-09-16-2024-1 iOS 18 and iPadOS 18 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
2024/09/12 #5: [FD] CVE-2024-25286 - RedSys - A Cross-Site Request Forgery (CSRF) vulnerability was identified in the Authorization Me… (RUBEN LOPEZ HERRERA <ruben.lopezherrera…)
2024/09/12 #4: [FD] CVE-2024-25285 - RedSys - 3DSecure 2.0 is vulnerable to form action hijacking (RUBEN LOPEZ HERRERA <ruben.lopezherrera@...efonica.com>)
2024/09/12 #3: [FD] CVE-2024-25284 - RedSys - Multiple reflected Cross-Site Scripting (XSS) vulnerabilities in the 3DS Authorization M… (RUBEN LOPEZ HERRERA <ruben.lopezherrera…)
2024/09/12 #2: [FD] CVE-2024-25283 - RedSys - Multiple reflected Cross-Site Scripting (XSS) vulnerabilities exist in the 3DS Authoriza… (RUBEN LOPEZ HERRERA <ruben.lopezherrera…)
2024/09/12 #1: [FD] CVE-2024-25282 - RedSys - 3DSecure 2.0 is vulnerable to Cross-Site Scripting (XSS) in its 3DSMethod Authentication (RUBEN LOPEZ HERRERA <ruben.lopezherrera…)
2024/09/10 #3: [FD] KL-001-2024-012: VICIdial Authenticated Remote Code Execution (KoreLogic Disclosures via Fulldisclosure <fulldisclosure@...lists.org>)
2024/09/10 #2: [FD] KL-001-2024-011: VICIdial Unauthenticated SQL Injection (KoreLogic Disclosures via Fulldisclosure <fulldisclosure@...lists.org>)
2024/09/10 #1: [FD] OXAS-ADV-2024-0005: OX App Suite Security Advisory (Martin Heiland via Fulldisclosure <fulldisclosure@...lists.org>)
2024/09/06 #21: [FD] [SYSS-2024-030]: C-MOR Video Surveillance - OS Command Injection (CWE-78) (Matthias Deeg via Fulldisclosure <fulldisclosure@...lists.org>)
2024/09/06 #20: [FD] [SYSS-2024-029]: C-MOR Video Surveillance - Dependency on Vulnerable Third-Party Component (CWE-1395) (Matthias Deeg via Fulldisclosure <fulldisclosure@se…)
2024/09/06 #19: [FD] [SYSS-2024-028]: C-MOR Video Surveillance - Cleartext Storage of Sensitive Information (CWE-312) (Matthias Deeg via Fulldisclosure <fulldisclosure@...list…)
2024/09/06 #18: [FD] [SYSS-2024-027]: C-MOR Video Surveillance - Improper Privilege Management (CWE-269) (Matthias Deeg via Fulldisclosure <fulldisclosure@...lists.org>)
2024/09/06 #17: [FD] [SYSS-2024-026]: C-MOR Video Surveillance - Unrestricted Upload of File with Dangerous Type (CWE-434) (Matthias Deeg via Fulldisclosure <fulldisclosure@se…)
2024/09/06 #16: [FD] [SYSS-2024-025]: C-MOR Video Surveillance - Relative Path Traversal (CWE-23) (Matthias Deeg via Fulldisclosure <fulldisclosure@...lists.org>)
2024/09/06 #15: [FD] Backdoor.Win32.Symmi.qua / Remote Stack Buffer Overflow (SEH) (malvuln <malvuln13@...il.com>)
2024/09/06 #14: [FD] HackTool.Win32.Freezer.br (WinSpy) / Insecure Credential Storage (malvuln <malvuln13@...il.com>)
2024/09/06 #13: [FD] Backdoor.Win32.Optix.02.b / Weak Hardcoded Credentials (malvuln <malvuln13@...il.com>)
2024/09/06 #12: [FD] Backdoor.Win32.JustJoke.21 (BackDoor Pro) / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
2024/09/06 #11: [FD] Backdoor.Win32.PoisonIvy.ymw / Insecure Credential Storage (malvuln <malvuln13@...il.com>)
2024/09/06 #10: [FD] [SYSS-2024-024]: C-MOR Video Surveillance - Improper Access Control (CWE-284) (Matthias Deeg via Fulldisclosure <fulldisclosure@...lists.org>)
2024/09/06 #9: [FD] [SYSS-2024-023]: C-MOR Video Surveillance - SQL Injection (CWE-89) (Matthias Deeg via Fulldisclosure <fulldisclosure@...lists.org>)
2024/09/06 #8: [FD] [SYSS-2024-022]: C-MOR Video Surveillance - Cross-Site Request Forgery (CWE-352) (Matthias Deeg via Fulldisclosure <fulldisclosure@...lists.org>)
2024/09/06 #7: [FD] [SYSS-2024-021]: C-MOR Video Surveillance - Persistent Cross-Site Scripting (CWE-79) (Matthias Deeg via Fulldisclosure <fulldisclosure@...lists.org>)
2024/09/06 #6: [FD] [SYSS-2024-020]: C-MOR Video Surveillance - Reflected Cross-Site Scripting (CWE-79) (Matthias Deeg via Fulldisclosure <fulldisclosure@...lists.org>)
2024/09/06 #5: [FD] Certified Asterisk Security Release certified-20.7-cert3 (Asterisk Development Team via Fulldisclosure <fulldisclosure@...lists.org>)
2024/09/06 #4: [FD] Certified Asterisk Security Release certified-18.9-cert12 (Asterisk Development Team via Fulldisclosure <fulldisclosure@...lists.org>)
2024/09/06 #3: [FD] Asterisk Security Release 21.4.3 (Asterisk Development Team via Fulldisclosure <fulldisclosure@...lists.org>)
2024/09/06 #2: [FD] Asterisk Security Release 20.9.3 (Asterisk Development Team via Fulldisclosure <fulldisclosure@...lists.org>)
2024/09/06 #1: [FD] Asterisk Security Release 18.24.3 (Asterisk Development Team via Fulldisclosure <fulldisclosure@...lists.org>)
2024/09/03 #3: [FD] CFP No cON Name 2024 - Barcelona (Jose Nicolas Castellano via Fulldisclosure <fulldisclosure@...lists.org>)
2024/09/03 #2: [FD] Insufficiently Protected Credentials in Texas Instruments Fusion Digital Power Designer v.7.10.1 (Gionathan Armando Reale via Fulldisclosure <fulldisclosu…)
2024/09/03 #1: [FD] SCHUTZWERK-SA-2024-001: Privilege Escalation via Service Binary Hijacking in Vivavis HIGH-LEIT (CVE-2024-38456) (David Brown via Fulldisclosure <fulldiscl…)
2024/08/27 #1: Re: [FD] [SYSS-2024-038] DiCal-RED - Use of Password Hash Instead of Password for Authentication ("J. Hellenthal via Fulldisclosure" <fulldisclosure@...lists.o…)
2024/08/25 #2: Re: [FD] [SYSS-2024-038] DiCal-RED - Use of Password Hash Instead of Password for Authentication (Jeffrey Walton <noloader@...il.com>)
2024/08/25 #1: [FD] SCHUTZWERK-SA-2024-004: Buffer overread in U-Boot DHCP (David Brown via Fulldisclosure <fulldisclosure@...lists.org>)
2024/08/22 #12: [FD] OXAS-ADV-2024-0003: OX App Suite Security Advisory (Martin Heiland via Fulldisclosure <fulldisclosure@...lists.org>)
2024/08/22 #11: [FD] OXAS-ADV-2024-0004: OX App Suite Security Advisory (Martin Heiland via Fulldisclosure <fulldisclosure@...lists.org>)
2024/08/22 #10: [FD] [SYSS-2024-042] DiCal-RED - Exposure of Sensitive Information to an Unauthorized Actor (Sebastian Hamann via Fulldisclosure <fulldisclosure@...lists.org>)
2024/08/22 #9: [FD] [SYSS-2024-041] DiCal-RED - Use of Unmaintained Third Party Components (Sebastian Hamann via Fulldisclosure <fulldisclosure@...lists.org>)
2024/08/22 #8: [FD] [SYSS-2024-040] DiCal-RED - Improper Authentication (Sebastian Hamann via Fulldisclosure <fulldisclosure@...lists.org>)
2024/08/22 #7: [FD] [SYSS-2024-039] DiCal-RED - Path Traversal (Sebastian Hamann via Fulldisclosure <fulldisclosure@...lists.org>)
2024/08/22 #6: [FD] [SYSS-2024-038] DiCal-RED - Use of Password Hash Instead of Password for Authentication (Sebastian Hamann via Fulldisclosure <fulldisclosure@...lists.org>)
2024/08/22 #5: [FD] [SYSS-2024-037] DiCal-RED - Use of Password Hash With Insufficient Computational Effort (Sebastian Hamann via Fulldisclosure <fulldisclosure@...lists.org>)
2024/08/22 #4: [FD] [SYSS-2024-035] DiCal-RED - Missing Authentication for Critical Function (Sebastian Hamann via Fulldisclosure <fulldisclosure@...lists.org>)
2024/08/22 #3: [FD] [SYSS-2024-036] DiCal-RED - Missing Authentication for Critical Function (Sebastian Hamann via Fulldisclosure <fulldisclosure@...lists.org>)

102577 messages