full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2018/08

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 1	²	³ 8	⁴	⁵
⁶	⁷	⁸ 2	⁹	¹⁰ 1	¹¹	¹²
¹³	¹⁴ 2	¹⁵	¹⁶ 1	¹⁷ 1	¹⁸	¹⁹
²⁰	²¹ 21	²² 1	²³	²⁴ 8	²⁵	²⁶
²⁷	²⁸ 2	²⁹	³⁰	³¹ 6

Messages by day:

August 1 (1 message)

[FD] Out-of-Band XXE in Universal Media Server's SSDP Processing (Chris <lists@...lchris.com>)

August 3 (8 messages)

[FD] CA20180802-01: Security Notice for CA API Developer Portal ("Kotas, Kevin J" <Kevin.Kotas@...com>)
[FD] (CVE-2018-13415) Out-of-Band XXE in Plex Media Server (Chris <lists@...lchris.com>)
[FD] (CVE-2018-13417) Out-of-Band XXE in Vuze Bittorrent Client (Chris <lists@...lchris.com>)
[FD] CVE-2016-7085 NOT fixed in VMware-player-12.5.9-7535481.exe ("Stefan Kanthak" <stefan.kanthak@...go.de>)
[FD] Executable installers are vulnerable^WEVIL (case 55): escalation of privilege with VMware Player 12.5.9 ("Stefan Kanthak" <stefan.kanthak@...go.de>)
[FD] DSA-2018-112: Dell EMC Data Protection Advisor XML External Entity Vulnerability (Dell EMC Product Security Response Center <Security_Alert@....com>)
[FD] CVE-2018-14857 (Unrestricted File Upload (RCE) in OCS Inventory NG Webconsole before 2.5) (Simon Uvarov via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Executable installers are vulnerable^WEVIL (case 56): arbitrary code execution WITH escalation of privilege via ru… ("Stefan Kanthak" <stefan.kanthak@...go.…)

August 8 (2 messages)

[FD] CVE-2018-12090 - LAMS < 3.1 Unauthenticated Cross-Site Scripting (Nikola Kojic <nikola.kojic@...-it.rs>)
[FD] Full Disclosure - Responsive File Manager (Silton Renato <siltonrenato02@...il.com>)

August 10 (1 message)

[FD] SOC Battle - ARE YOU READY FOR AN EXTRAORDINARY CTF? (Mustafa Kaan Demirhan <mstfkndmrhan@...il.com>)

August 14 (2 messages)

[FD] [CONVISO-18-001] - Nasdaq BWise JMX/RMI RCE (Anibal Aguiar <aaguiar@...viso.com.br>)
Re: [FD] Full Disclosure - Responsive File Manager (Henri Salo <henri@...v.fi>)

August 16 (1 message)

[FD] SEC Consult SA-20180813-0 :: SQL Injection, XSS & CSRF vulnerabilities in Pimcore (SEC Consult Vulnerability Lab <research@...-consult.com>)

August 17 (1 message)

[FD] Silver Peak EdgeConnect < 8.1.7.x. multiple vulnerabilities (SCADA StrangeLove <scadastrangelove@...il.com>)

August 21 (21 messages)

[FD] Jetty 6.1.6 Cross-Site Scripting (XSS) (1n3--- via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] X41 D-Sec GmbH Security Advisory X41-2018-001: Multiple Vulnerabilities in Yubico Piv (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)
[FD] X41 D-Sec GmbH Security Advisory X41-2018-002: Multiple Vulnerabilities in OpenSC (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)
[FD] X41 D-Sec GmbH Security Advisory X41-2018-003: Multiple Vulnerabilities in pam_pkcs11 (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)
[FD] X41 D-Sec GmbH Security Advisory X41-2018-004: Multiple Vulnerabilities in Yubico libykneomgr (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)
[FD] X41 D-Sec GmbH Security Advisory X41-2018-005: Multiple Vulnerabilities in Apple smartcardservices (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)
[FD] UISGCON14 CFP (Andrey Loginov <avloginov@...gcon.org>)
[FD] Multiple vulnerabilities in OSCAR EMR (Brian Hysell <bdhysell@...il.com>)
[FD] CVE-2017-11563: Remote Code Execution via stack overflow in D-Link EyeOn Baby Monitor (DCS-825L) ("kenney_lu@...ndmicro.com" <kenney_lu@...ndmicro.com>)
[FD] CVE-2017-11564: multiple command inject in D-Link EyeOn Baby Monitor (DCS-825L) ("kenney_lu@...ndmicro.com" <kenney_lu@...ndmicro.com>)
[FD] CVE-2017-12573: command injection in PLANEX CS-W50HD ("kenney_lu@...ndmicro.com" <kenney_lu@...ndmicro.com>)
[FD] CVE-2017-12574: Hardcode credential in PLANEX CS-W50HD ("kenney_lu@...ndmicro.com" <kenney_lu@...ndmicro.com>)
[FD] CVE-2017-12575: information leakage in NEC Aterm WG2600HP2 ("kenney_lu@...ndmicro.com" <kenney_lu@...ndmicro.com>)
[FD] CVE-2017-12576: an hidden management page in PLANEX CS-QR20 ("kenney_lu@...ndmicro.com" <kenney_lu@...ndmicro.com>)
[FD] CVE-2017-12577: an hardcode credential in PLANEX CS-QR20 ("kenney_lu@...ndmicro.com" <kenney_lu@...ndmicro.com>)
[FD] XSS and CSRF vulnerabilities in ASUS RT-N15U ("MustLive" <mustlive@...security.com.ua>)
[FD] DSA-2018-144: RSA Archer SQL Injection Vulnerability within embedded WorkPoint component (Dell EMC Product Security Response Center <Security_Alert@....co…)
[FD] DSA-2018-132: RSA NetWitness Platform Server-Side Template Injection Vulnerability (Dell EMC Product Security Response Center <Security_Alert@....com>)
Re: [FD] Full Disclosure - Responsive File Manager (Silton Renato <siltonrenato02@...il.com>)
[FD] RESPONSIVE filemanager (Simon Uvarov via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Defense in depth -- the Microsoft way (part 57): all the latest MSVCRT installers allow escalation of privilege ("Stefan Kanthak" <stefan.kanthak@...go.de…)

August 22 (1 message)

[FD] Seagate Media Server multiple SQL injection vulnerabilities (Summer of Pwnage via Fulldisclosure <fulldisclosure@...lists.org>)

August 24 (8 messages)

Re: [FD] Jetty 6.1.6 Cross-Site Scripting (XSS) (1n3--- via Fulldisclosure <fulldisclosure@...lists.org>)
Re: [FD] Jetty 6.1.6 Cross-Site Scripting (XSS) (1n3--- via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Mutiny Monitoring Appliance < 6.1.0-5263 - Command Injection (CVE-2018-15529) (Reggie Dodd <reggie.dodd30@...il.com>)
[FD] Couchbase Server - Remote Code Execution (x ksi <s3810@...stk.edu.pl>)
[FD] DSA-2018-144: RSA Archer SQL Injection Vulnerability within embedded WorkPoint component (<secure@...l.com>)
[FD] DSA-2018-132: RSA NetWitness Platform Server-Side Template Injection Vulnerability (<secure@...l.com>)
Re: [FD] Jetty 6.1.6 Cross-Site Scripting (XSS) (Simon Waters <simon.waters@...evine.com>)
Re: [FD] Jetty 6.1.6 Cross-Site Scripting (XSS) (Simon Waters <simon.waters@...evine.com>)

August 28 (2 messages)

[FD] CVE-2018-12710 (Kevin R <krandall2013@...il.com>)
[FD] DSA-2018-128: RSA BSAFE Micro Edition Suite and Crypto-C Micro Edition Multiple Security Vulnerabilities (<secure@...l.com>)

August 31 (6 messages)

[FD] Argus Surveillance DVR - 4.0.0.0 / SYSTEM Privilege Escalation (hyp3rlinx <apparitionsec@...il.com>)
[FD] Argus Surveillance DVR - 4.0.0.0 / Unauthenticated Directory Traversal File Disclosure (hyp3rlinx <apparitionsec@...il.com>)
[FD] CA20180829-01: Security Notice for CA PPM ("Williams, Ken" <Ken.Williams@...com>)
[FD] CA20180829-02: Security Notice for CA Unified Infrastructure Management ("Williams, Ken" <Ken.Williams@...com>)
[FD] CA20180829-03: Security Notice for CA Release Automation ("Williams, Ken" <Ken.Williams@...com>)
[FD] Sensitive Data Exposure via WiFi Broadcasts in Android OS [CVE-2018-9489] (Nightwatch Cybersecurity Research <research@...htwatchcybersecurity.com>)

54 messages