full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

full-disclosure mailing list - 2015/09

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 3	² 1	³ 10	⁴	⁵	⁶
⁷ 16	⁸ 1	⁹ 2	¹⁰ 2	¹¹ 17	¹² 2	¹³
¹⁴ 1	¹⁵ 1	¹⁶ 19	¹⁷ 1	¹⁸	¹⁹ 1	²⁰ 2
²¹ 2	²² 5	²³ 7	²⁴ 1	²⁵ 9	²⁶	²⁷ 3
²⁸ 6	²⁹ 10	³⁰ 2

Messages by day:

September 1 (3 messages)

September 2 (1 message)

September 3 (10 messages)

September 7 (16 messages)

September 8 (1 message)

September 9 (2 messages)

September 10 (2 messages)

[FD] Raritan PowerIQ default credentials (Brandon Perry <bperry.volatile@...il.com>)
[FD] Silver Peak VXOA Multiple Vulnerabilities (Daniel Jensen <daniel.jensen@...urity-assessment.com>)

September 11 (17 messages)

September 12 (2 messages)

September 14 (1 message)

[FD] Sunny WebBox CVE-2015-3964 Fix (SCADA StrangeLove <scadastrangelove@...il.com>)

September 15 (1 message)

[FD] Paypal Inc - Open Redirect Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

September 16 (19 messages)

[FD] Anchor CMS 0.9.2 - XSS ("Curesec Research Team (CRT)" <crt@...esec.com>)
[FD] Zen Cart 1.5.4 - Code Execution and Information Leak ("Curesec Research Team (CRT)" <crt@...esec.com>)
[FD] ZeusCart 4.0 - XSS - not fixed ("Curesec Research Team (CRT)" <crt@...esec.com>)
[FD] ZeusCart 4.0: SQL Injection - not fixed ("Curesec Research Team (CRT)" <crt@...esec.com>)
[FD] ZeusCart 4.0: Code Execution - not fixed ("Curesec Research Team (CRT)" <crt@...esec.com>)
[FD] ZeusCart 4.0: CSRF - not fixed ("Curesec Research Team (CRT)" <crt@...esec.com>)
[FD] Kirby CMS <= 2.1.0 CSRF Content Upload and PHP Script Execution (Dawid Golunski <golunski.dawid@...il.com>)
[FD] Kirby CMS <= 2.1.0 Authentication Bypass via Path Traversal (Dawid Golunski <golunski.dawid@...il.com>)
[FD] Weeman 1.1 HTTP server for phishing | release announcement (Hypsurus <hypsurus@...l.ru>)
[FD] (0day) IBOOKING CMS - SQL INJECTION (INURL Brasil <inurlbr@...il.com>)
[FD] [CVE-2015-5956] Typo3 Core sanitizeLocalUrl() Non-Persistent Cross-Site Scripting ("Ahrens, Julien" <Julien.Ahrens@...unet.com>)
[FD] FuzzDB updated, relocated to Github (Adam Muntner <unix23@...il.com>)
[FD] ManageEngine EventLog Analyzer SQL query execution (xistence <xistence@...0.nl>)
[FD] ManageEngine OpManager multiple vulnerabilities (xistence <xistence@...0.nl>)
[FD] APPLE-SA-2015-09-16-1 iOS 9 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2015-09-16-2 Xcode 7.0 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2015-09-16-3 iTunes 12.3 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2015-09-16-4 OS X Server 5.0.3 (Apple Product Security <product-security-noreply@...ts.apple.com>)
Re: [FD] Use After Free Vulnerabilities in unserialize() (Christian Kujau <lists@...dbynature.de>)

September 17 (1 message)

September 19 (1 message)

September 20 (2 messages)

September 21 (2 messages)

September 22 (5 messages)

September 23 (7 messages)

September 24 (1 message)

September 25 (9 messages)

September 27 (3 messages)

September 28 (6 messages)

September 29 (10 messages)

September 30 (2 messages)

124 messages