full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2018/04

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹
²	³ 6	⁴ 3	⁵	⁶ 9	⁷	⁸
⁹ 2	¹⁰ 8	¹¹	¹²	¹³ 8	¹⁴	¹⁵
¹⁶	¹⁷ 1	¹⁸	¹⁹ 3	²⁰ 4	²¹ 1	²²
²³	²⁴ 2	²⁵ 8	²⁶	²⁷ 7	²⁸	²⁹
³⁰

Messages by day:

April 3 (6 messages)

[FD] [SE-2011-01] Security contact at Canal+ Group ? (Security Explorations <contact@...urity-explorations.com>)
Re: [FD] [SE-2011-01] Security contact at Canal+ Group ? (Security Explorations <contact@...urity-explorations.com>)
[FD] Massive Breach in Panera Bread (Jack Beanstalk <pnrabrdthrwy@...il.com>)
[FD] Directory Traversal Vulnerability in DNNarticle module for DNN (Rahimian <rahimian@...urehost.co>)
Re: [FD] Massive Breach in Panera Bread ("(RS) Tyler Schroder" <redorhcs@...coded.com>)
Re: [FD] CVE-2018-5708 (Kevin R <krandall2013@...il.com>)

April 4 (3 messages)

[FD] CVE-2018-4863 Sophos Endpoint Protection v10.7 / Tamper Protection Bypass (hyp3rlinx <apparitionsec@...il.com>)
[FD] CVE-2018-9233 Sophos Endpoint Protection Control Panel v10.7 / Insecure Crypto (hyp3rlinx <apparitionsec@...il.com>)
Re: [FD] Massive Breach in Panera Bread (John Menerick <john@....agency>)

April 6 (9 messages)

[FD] [FIXED TYPO **] CVE-2018-9233 Sophos Endpoint Protection Control Panel v10.7 / Insecure Crypto (hyp3rlinx <apparitionsec@...il.com>)
Re: [FD] CVE-2018-4863 Sophos Endpoint Protection v10.7 / Tamper Protection Bypass (hyp3rlinx <apparitionsec@...il.com>)
Re: [FD] CVE-2018-4863 Sophos Endpoint Protection v10.7 / Tamper Protection Bypass (Buherátor <buherator@...il.com>)
Re: [FD] Massive Breach in Panera Bread (Cornelius Keck <insecure@...k.us>)
[FD] Authentication Bypass Vulnerability in the Auth0 Identity Platform (Nahuel Grisolia <nahuel@...tainfinita.com.ar>)
[FD] DSA-2018-025: Dell EMC Avamar and Integrated Data Protection Appliance Installation Manager Missing Access Control… (EMC Product Security Response Center <S…)
[FD] SSRF（Server Side Request Forgery） in Cockpit CMS 0.13.0 (CVE-2017-14611) ("service@...maohui.net" <service@...maohui.net>)
[FD] SSRF（Server Side Request Forgery） in Onethink All version (CVE-2017-14323) ("service@...maohui.net" <service@...maohui.net>)
[FD] The first 8dayz of an Underground crew deemed Underground_Agency (~UA) 2018 (keliikoa kirland <keliikoakirland@...il.com>)

April 9 (2 messages)

[FD] [RT-SA-2017-014] CyberArk Password Vault Web Access Remote Code Execution (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[FD] [RT-SA-2017-015] CyberArk Password Vault Memory Disclosure (RedTeam Pentesting GmbH <release@...team-pentesting.de>)

April 10 (8 messages)

[FD] SQLi in Relevanssi might allow an admin to read contents of database (WordPress plugin) (dxw Security <harry@....com>)
[FD] Like Button Rating ♥ LikeBtn allows anybody to set any option (WordPress plugin) (dxw Security <harry@....com>)
[FD] Rating-Widget: Star Review System allows anybody to turn on debug mode and view errors and warnings (WordPress plugin) (dxw Security <harry@....com>)
[FD] WP Image Zoom allows anybody to cause denial of service (WordPress plugin) (dxw Security <harry@....com>)
Re: [FD] new email; gw22067@...mail.com | Double-free segfault bypass (Matthew Fernandez <matthew.fernandez@...il.com>)
Re: [FD] Shenzhen TVT Digital Technology Co. Ltd & OEM {DVR/NVR/IPC} API RCE (bashis <mcw@...mail.eu>)
[FD] secuvera-SA-2017-03: Reflected Cross-Site-Scripting Vulnerabilities in OCS Inventory NG ocsreports Web application (Simon Bieber <sbieber@...uvera.de>)
[FD] secuvera-SA-2017-04: SQL-Injection Vulnerability in OCS Inventory NG ocsreports Web application (Simon Bieber <sbieber@...uvera.de>)

April 13 (8 messages)

[FD] Microsoft account site using old cert (Eitan Caspi via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] DSA-2018-071: Dell EMC ViPR Controller Information Exposure Vulnerability (EMC Product Security Response Center <Security_Alert@....com>)
[FD] KETAMINE: Multiple vulnerabilities in SecureRandom(), numerous cryptocurrency products affected. (ketamine@...ional.shitposting.agency)
[FD] Defense in depth -- the Microsoft way (part 53): our MSRC doesn't know how Windows handles PATH ("Stefan Kanthak" <stefan.kanthak@...go.de>)
[FD] Strong Password Generator - Biased Randomness (Sean Buckley <sean.bck@...il.com>)
[FD] Call for Papers: USENIX Workshop on Offensive Technologies (WOOT '18) (Yves Younan <wootcfp@...t-knox.org>)
Re: [FD] CVE-2018-7539 Directory Traversal on Appear TV Maintenance centre 8088 (IS Threat Team <Threat@...iva.com>)
Re: [FD] new email; gw22067@...mail.com | Double-free segfault bypass (Justin Ferguson <justin@...c.co>)

April 17 (1 message)

[FD] Kodi <= 17.6 - Persistent Cross-Site Scripting (Manuel Garcia Cardenas <advidsec@...il.com>)

April 19 (3 messages)

[FD] Seagate Personal Cloud allows moving of arbitrary files (Summer of Pwnage via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Seagate Media Server stored Cross-Site Scripting vulnerability (Summer of Pwnage via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Seagate Media Server path traversal vulnerability (Summer of Pwnage via Fulldisclosure <fulldisclosure@...lists.org>)

April 20 (4 messages)

[FD] [CVE-2017-5641] - DrayTek Vigor ACS 2 Java Deserialisation RCE (Pedro Ribeiro <pedrib@...il.com>)
[FD] Foxit Reader 8.3.1.21155 ( Unsafe DLL Loading Vulnerability ) (Whatis Yourbug <whatisyourbug@...il.com>)
[FD] Microsoft (Win 10) InternetExplorer v11.371.16299.0 - Denial Of Service (hyp3rlinx <apparitionsec@...il.com>)
[FD] wifi and z-wave smart home from zibreo (Larry <zibreotech@...il.com>)

April 21 (1 message)

[FD] [SE-2011-01] The origin and impact of vulnerabilities in ST chipsets (Security Explorations <contact@...urity-explorations.com>)

April 24 (2 messages)

[FD] SEC Consult SA-20180423-0 :: Multiple Stored XSS Vulnerabilities in WSO2 Carbon and Dashboard Server (SEC Consult Vulnerability Lab <research@...-consult.…)
[FD] SEC Consult SA-20180424-0 :: Reflected Cross-Site Scripting in multiple Zyxel ZyWALL products (SEC Consult Vulnerability Lab <research@...-consult.com>)

April 25 (8 messages)

[FD] Sitecore Directory Traversal Vulnerability (Chris <chris@...lchris.com>)
[FD] Hikvision hik-connect.com authentication vulnerability (Vangelis Stykas <evstykas@...il.com>)
[FD] Authorization bypass in PHPLiteAdmin since 1.9.5 (Karsten König <mail@...enig.net>)
[FD] APPLE-SA-2018-04-24-1 iOS 11.3.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2018-04-24-2 Security Update 2018-001 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2018-04-24-3 Safari 11.1 (v. 11605.1.33.1.4, 12605.1.33.1.4, and 13605.1.33.1.4) (Apple Product Security <product-security-noreply@...ts.apple.co…)
Re: [FD] Auto-detection of Compressed Files in Apple’s macOS (Nightwatch Cybersecurity Research <research@...htwatchcybersecurity.com>)
[FD] DSA-2018-013: Dell EMC ECOM XML External Entity Injection Vulnerability (EMC Product Security Response Center <Security_Alert@....com>)

April 27 (7 messages)

[FD] [RCE] TP-Link Remote Code Execution CVE-2017-13772 v2 - >180, 000 affected devices (Andrew Mabbitt <andrew@...usinfosec.com>)
[FD] [** FIX CODE TYPO] Microsoft (Win 10) InternetExplorer v11.371.16299.0 - Denial Of Service (hyp3rlinx <apparitionsec@...il.com>)
[FD] Unvalidated Redirect in Shibboleth component of Blackboard Learn (Ethan Sweet <ethan@...an.pm>)
[FD] GitList 0.6 Unauthenticated RCE (Kacper Szurek <kacperszurek@...il.com>)
Re: [FD] Authorization bypass in PHPLiteAdmin since 1.9.5 (Karsten König <mail@...enig.net>)
[FD] DSA-2018-013: Dell EMC ECOM XML External Entity Injection Vulnerability (EMC Product Security Response Center <Security_Alert@....com>)
[FD] VLC Media Player/Kodi/PopcornTime 'Red Chimera' < 2.2.5 Memory Corruption (PoC) (Kroppoloe via Fulldisclosure <fulldisclosure@...lists.org>)

62 messages