full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2018/02

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 1	² 11	³	⁴
⁵ 1	⁶ 5	⁷ 5	⁸ 1	⁹ 7	¹⁰ 3	¹¹
¹²	¹³ 6	¹⁴ 4	¹⁵	¹⁶ 6	¹⁷	¹⁸
¹⁹ 1	²⁰ 8	²¹ 8	²²	²³	²⁴	²⁵ 6
²⁶	²⁷ 10	²⁸ 1

Messages by day:

February 1 (1 message)

[FD] SEC Consult SA-20180201-0 :: Multiple critical vulnerabilities in Whole Vibratissimo Smart Sex Toy product range (SEC Consult Vulnerability Lab <research@…)

February 2 (11 messages)

[FD] IPSwitch MoveIt Stored Cross Site Scripting (XSS) (1n3@...hmail.com)
[FD] Recon Montreal 2018 Call For Papers - 0xE - Registration - Training - Conference - Submit! - PGP key (cfpmontreal2018@...on.cx)
[FD] Claymore Dual Gpu Miner <= 10.5 Format Strings Vulnerability (disclosure@...adm.io)
[FD] CFP: EuroSec 2018, 11th European Workshop on Systems Security (Extended Deadline: February 9, 2018) (Fengwei Zhang <fengwei@...ne.edu>)
[FD] Geovision Inc. IP Camera/Video/Access Control Multiple Remote Command Execution - Multiple Stack Overflow - Double free - Unauthor… (bashis <mcw@...mail.eu>)
[FD] New vulnerabilities in D-Link DIR-100 ("MustLive" <mustlive@...security.com.ua>)
[FD] Flexense SyncBreeze Entreprise 10.3.14 Buffer Overflow (SEH-bypass) (RYT <me@...ntzj.com>)
Re: [FD] Banknotes Misproduction security & biometric weakness (Ben Tasker <ben@...tasker.co.uk>)
[FD] SSD Advisory – Hotspot Shield Information Disclosure (Maor Shwartz <maors@...ondsecurity.com>)
[FD] Microsoft Anti Ransomware mitigation bypass (Yago Jesus <yjesus@...urity-projects.com>)
[FD] ESA-2018-015: EMC RecoverPoint Command Injection Vulnerabilities (EMC Product Security Response Center <Security_Alert@....com>)

February 5 (1 message)

[FD] [CORE-2017-0010] - Kaspersky Secure Mail Gateway Multiple Vulnerabilities (Core Security Advisories Team <advisories@...esecurity.com>)

February 6 (5 messages)

[FD] EuskalHack Security Congress Call For Papers (Joxean Koret <admin@...eankoret.com>)
[FD] CFP for Packet Hacking Village Talks at DEF CON 26 (Ming <ming@...lofsheep.com>)
[FD] IBM Tivoli Monitoring CVE-2017-1635 Remote Code Execution Vulnerability (p@...ntumleap.it)
Re: [FD] Banknotes Misproduction security & biometric weakness (InterN0T via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Defense in depth -- the Microsoft way (part 50); Windows Update shoves unsafe crap as "important" updates to unsu… ("Stefan Kanthak" <stefan.kanthak@...go.…)

February 7 (5 messages)

[FD] [SE-2011-01] A security issue with a Multiroom service of NC+ SAT TV platform (Security Explorations <contact@...urity-explorations.com>)
Re: [FD] Banknotes Misproduction security & biometric weakness (Vulnerability Lab <research@...nerability-lab.com>)
Re: [FD] Banknotes Misproduction security & biometric weakness (Vulnerability Lab <research@...nerability-lab.com>)
Re: [FD] Banknotes Misproduction security & biometric weakness (Vulnerability Lab <research@...nerability-lab.com>)
[FD] SEC Consult SA-20180207-0 :: Multiple buffer overflow vulnerabilities in InfoZip UnZip (SEC Consult Vulnerability Lab <research@...-consult.com>)

February 8 (1 message)

[FD] SEC Consult SA-20180208-0 :: Multiple Cross-Site Scripting Vulnerabilities in Sonatype Nexus Repository Manager OS… (SEC Consult Vulnerability Lab <research…)

February 9 (7 messages)

[FD] CVS Suite 2009R2 Insecure Library Loading CVE-2018-6461 (hyp3rlinx <apparitionsec@...il.com>)
[FD] Formstack Webhook HMAC Advisory (Derrek Bertrand <derrekbertrand@...il.com>)
[FD] KL-001-2018-002 : NetEx HyperIP Authentication Bypass (KoreLogic Disclosures <disclosures@...elogic.com>)
[FD] KL-001-2018-003 : NetEx HyperIP Post-Auth Command Execution (KoreLogic Disclosures <disclosures@...elogic.com>)
[FD] KL-001-2018-004 : NetEx HyperIP Privilege Escalation Vulnerability (KoreLogic Disclosures <disclosures@...elogic.com>)
[FD] KL-001-2018-005 : NetEx HyperIP Local File Inclusion Vulnerability (KoreLogic Disclosures <disclosures@...elogic.com>)
[FD] KL-001-2018-006 : Trend Micro IMSVA Management Portal Authentication Bypass (KoreLogic Disclosures <disclosures@...elogic.com>)

February 10 (3 messages)

[FD] SoapUI v5.3.0 Code Execution (Ismail Doe <ismail.sec.dev@...il.com>)
[FD] libreoffice remote arbitrary file disclosure (Mikhail Klementev <jollheef@...eup.net>)
[FD] Defense in depth -- the Microsoft way (part 51): Skype's home-grown updater allows escalation of privilege to SYST… ("Stefan Kanthak" <stefan.kanthak@...go.…)

February 13 (6 messages)

[FD] CVE-2018-6892 CloudMe Sync <= v1.10.9 Unauthenticated Remote Buffer Overflow (hyp3rlinx <apparitionsec@...il.com>)
[FD] Multiple SQL injection vulnerabilities in dotCMS (2x CVE) (Elar Lang <elarlang@...il.com>)
Re: [FD] SoapUI v5.3.0 Code Execution (Ismail Doe <ismail.sec.dev@...il.com>)
[FD] RootedCON Security Conference - 1-3 March, Madrid (Spain) (omarbv@...eup.net)
[FD] DSA-2018-024: Dell EMC VMAX Virtual Appliance (vApp) Manager Multiple Vulnerabilities (EMC Product Security Response Center <Security_Alert@....com>)
[FD] SSD Advisory – CloudMe Unauthenticated Remote Buffer Overflow (SecuriTeam SSD <ssd@...ondsecurity.com>)

February 14 (4 messages)

[FD] [CORE-2017-0009] - Dell EMC Isilon OneFS Multiple Vulnerabilities (Core Security Advisories Team <advisories@...esecurity.com>)
[FD] DSA-2018-024: Dell EMC VMAX Virtual Appliance (vApp) Manager Multiple Vulnerabilities (EMC Product Security Response Center <Security_Alert@....com>)
[FD] SSD Advisory – TrendNet AUTHORIZED_GROUP Information Disclosure (SecuriTeam SSD <ssd@...ondsecurity.com>)
[FD] Defense in depth -- the Microsoft way (part 52): HTTP used to distribute (security) updates, not HTTPS ("Stefan Kanthak" <stefan.kanthak@...go.de>)

February 16 (6 messages)

[FD] : Vulnerability Disclosure (Web Apps)-Bravo Tejari Web Portal-CSRF (Arvind Vishwakarma <arvind12786@...il.com>)
[FD] F-Secure Radar Persistent Cross-Site Scripting Vulnerability (Oscar Hjelm <contact@...arhjelm.com>)
[FD] F-Secure Radar Login Page Unvalidated Redirect Vulnerability (Oscar Hjelm <contact@...arhjelm.com>)
[FD] Local Privilege Escalation in CrashPlan’s Windows Client Version 4 (Florian Bogner <florian@...ner.sh>)
[FD] [CVE-2018-5767] Remote Code Execution Walkthrough on Tenda AC15 Router (Kurtis <kurtis@...usinfosec.com>)
Re: [FD] Defense in depth -- the Microsoft way (part 51): Skype's home-grown updater allows escalation of privilege to SYST… (Jeffrey Walton <noloader@...il.com>)

February 19 (1 message)

[FD] [SE-2011-01] Regarding liabilities in SW / HW (ST chipsets flaws' case) (Security Explorations <contact@...urity-explorations.com>)

February 20 (8 messages)

[FD] [Project] Patton: The clever vulnerability knowledge store (cr0hn <cr0hn@...hn.com>)
[FD] Navarino Infinity onship unit multiple vulnerabilities (Vangelis Stykas <evstykas@...il.com>)
[FD] APPLE-SA-2018-02-19-1 iOS 11.2.6 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2018-02-19-2 macOS High Sierra 10.13.3 Supplemental Update (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2018-02-19-3 tvOS 11.2.6 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2018-02-19-4 watchOS 4.2.3 (Apple Product Security <product-security-noreply@...ts.apple.com>)
Re: [FD] Defense in depth -- the Microsoft way (part 51): Skype's home-grown updater allows escalation of privilege to … ("Stefan Kanthak" <stefan.kanthak@...go.…)
[FD] Mozilla's executable installers: FUBAR (that's spelled "fucked-up beyond all repair") ("Stefan Kanthak" <stefan.kanthak@...go.de>)

February 21 (8 messages)

[FD] SEC Consult SA-20180221-0 :: Hijacking of arbitrary miSafes Mi-Cam video baby monitors (SEC Consult Vulnerability Lab <research@...-consult.com>)
[FD] [CORE-2017-0006] Trend Micro Email Encryption Gateway Multiple Vulnerabilities (Core Security Advisories Team <advisories@...esecurity.com>)
[FD] AST-2018-001: Crash when receiving unnegotiated dynamic payload ("Asterisk Security Team" <security@...erisk.org>)
[FD] AST-2018-002: Crash when given an invalid SDP media format description ("Asterisk Security Team" <security@...erisk.org>)
[FD] AST-2018-003: Crash with an invalid SDP fmtp attribute ("Asterisk Security Team" <security@...erisk.org>)
[FD] AST-2018-004: Crash when receiving SUBSCRIBE request ("Asterisk Security Team" <security@...erisk.org>)
[FD] AST-2018-005: Crash when large numbers of TCP connections are closed suddenly ("Asterisk Security Team" <security@...erisk.org>)
[FD] AST-2018-006: WebSocket frames with 0 sized payload causes DoS ("Asterisk Security Team" <security@...erisk.org>)

February 25 (6 messages)

[FD] DefenseCode Security Advisory: PureVPN Windows Privilege Escalation Vulnerability (Defense Code <defensecode@...ensecode.com>)
[FD] BSides Denver 2018 CFP is open (Jeff Pettorino <jpettorino@...desden.org>)
Re: [FD] Defense in depth -- the Microsoft way (part 51): Skype's home-grown updater allows escalation of privilege to … (Kevin Beaumont <kevin.beaumont@...il.co…)
[FD] [CVE-2018-1000088] Stored XSS vulnerability in Doorkeeper gem v2.1.0 - v4.2.5 (Justin Bull <me@...tinbull.ca>)
Re: [FD] [CVE-2018-1000088] Stored XSS vulnerability in Doorkeeper gem v2.1.0 - v4.2.5 (Justin Bull <me@...tinbull.ca>)
[FD] Search engine of leaks (Gustavo Sánchez <gus70938@...il.com>)

February 27 (10 messages)

[FD] SEC Consult SA-20180227-0 :: OS command injection, arbitrary file upload & SQL injection in ClipBucket (SEC Consult Vulnerability Lab <research@...-consul…)
[FD] ActivePDF Toolkit < 8.1.0 multiple RCE (François Goichon via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Auto-detection of Compressed Files in Apple’s macOS (Nightwatch Cybersecurity Research <research@...htwatchcybersecurity.com>)
[FD] Download Protection Bypass in Google’s Chrome (multiple) (Nightwatch Cybersecurity Research <research@...htwatchcybersecurity.com>)
[FD] ES2018-01 Asterisk pjsip subscribe stack corruption (Sandro Gauci <sandro@...blesecurity.com>)
[FD] ES2018-02 Asterisk pjsip sdp invalid fmtp segfault (Sandro Gauci <sandro@...blesecurity.com>)
[FD] ES2018-03 Asterisk pjsip sdp invalid media format description segfault (Sandro Gauci <sandro@...blesecurity.com>)
[FD] ES2018-04 Asterisk pjsip tcp segfault (Sandro Gauci <sandro@...blesecurity.com>)
Re: [FD] Defense in depth -- the Microsoft way (part 51): Skype's home-grown updater allows escalation of privilege to … ("Stefan Kanthak" <stefan.kanthak@...go.…)
[FD] AxxonSoft Axxon Next - AxxonSoft Client Directory Traversal via an initial /css//..%2f substring in a URI. CVE-201… (Anthony Cicalla <anthony.cicalla@...il.…)

February 28 (1 message)

[FD] SEC Consult SA-20180228-0 :: Insecure Direct Object Reference vulnerability in TestLink Open Source Test Managemen… (SEC Consult Vulnerability Lab <research…)

84 messages