full-disclosure mailing list - 2018/10

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2018/10

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹ 6	² 4	³	⁴ 2	⁵ 3	⁶	⁷
⁸	⁹ 11	¹⁰ 1	¹¹	¹² 4	¹³	¹⁴
¹⁵	¹⁶ 9	¹⁷	¹⁸	¹⁹ 3	²⁰	²¹
²²	²³ 3	²⁴ 1	²⁵	²⁶ 4	²⁷	²⁸
²⁹	³⁰ 3	³¹

Messages by day:

October 1 (6 messages)

[FD] Ivanti Workspace Control Application Whitelist bypass via PowerGrid /RWS command line argument ("Securify B.V. via Fulldisclosure" <fulldisclosure@...list…)
[FD] Ivanti Workspace Control local privilege escalation via Named Pipe ("Securify B.V. via Fulldisclosure" <fulldisclosure@...lists.org>)
[FD] Ivanti Workspace Control Data Security bypass via localhost UNC path ("Securify B.V. via Fulldisclosure" <fulldisclosure@...lists.org>)
[FD] Stored credentials Ivanti Workspace Control can be retrieved from Registry ("Securify B.V. via Fulldisclosure" <fulldisclosure@...lists.org>)
[FD] Ivanti Workspace Control Application Whitelist bypass via PowerGrid /SEE command line argument ("Securify B.V. via Fulldisclosure" <fulldisclosure@...list…)
[FD] SEC Consult SA-20181001-0 :: Password disclosure vulnerability & XSS in PTC ThingWorx (CVE-2018-17216, CVE-2018-17… (SEC Consult Vulnerability Lab <research…)

October 2 (4 messages)

Re: [FD] Information Exposure Vulnerability in WordPress Mobile Pack Wordpress Plugin v2.1.2 and below (Henri Salo <henri@...v.fi>)
[FD] e2 Security GmbH Advisory 2018-01: MensaMax Android app / Unencrypted transmission and usage of hardcoded encrypti… (Stefan Pietsch <s.pietsch@...ecurity.de…)
Re: [FD] Skype Debian package: allows complete machine takeover for Microsoft (Seth Arnold <seth.arnold@...onical.com>)
[FD] Nullcon Goa 2019 Call For Papers is Open - 10th Anniversary edition! (Yuliya Pliavaka <yuliya@...atu.com>)

October 4 (2 messages)

[FD] Facebook Platform Hack - Critical Access Token Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[FD] [CORE-2010-0010] - D-Link Central WiFiManager Software Controller Multiple (advisories <advisories@...esecurity.com>)

October 5 (3 messages)

[FD] CVE-2018-15903 - Stored XSS on Claromentis (David Vargas <davidv@...klabs.com>)
[FD] [CFP] The Fourth International Conference on Information Security and Digital Forensics (ISDF2018) (Frelyn SDIWC <frelyn.sdiwc@...il.com>)
Re: [FD] Skype Debian package: allows complete machine takeover for Microsoft (Michael Lazin <microlaser@...il.com>)

October 9 (11 messages)

[FD] Ektron Content Management System (CMS) 9.20 SP2, remote re-enabling users (CVE-2018–12596) (alt3kx via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Dancho Danchev's 2010 Disappearance - An Elaboration - Part Two (Dancho Danchev via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] net-snmp 5.7.3 unauthenticated remote DoS (Magnus Klaaborg Stubman <magnus@...bman.eu>)
[FD] Multiple vulnerabilities in NPLUG wireless repeater (Patrick Costa <patrick.costa@...pest.com.br>)
[FD] [CVE-2018-15379] Unauth RCE as root in Cisco Prime Infrastructure (Pedro Ribeiro <pedrib@...il.com>)
[FD] APPLE-SA-2018-10-08-1 iOS 12.0.1 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] APPLE-SA-2018-10-08-2 iCloud for Windows 7.7 (Apple Product Security <product-security-noreply@...ts.apple.com>)
[FD] SEC Consult SA-20181009-0 :: Remote Code Execution via XMeye P2P Cloud in Xiongmai IP Cameras, NVRs and DVRs incl… (SEC Consult Vulnerability Lab <research…)
[FD] [CFP] The Sixth International Conference on Cyber Security, Cyber Welfare and Digital Forensic (CyberSec2018) (Frelyn SDIWC <frelyn.sdiwc@...il.com>)
[FD] Responsive Filemanager 9.8.1 Authentication Bypass (yavuz atlas <yavatlas@...il.com>)
[FD] Responsive Filemanager 9.8.1 Reflected Cross Site Scripting (XSS) (yavuz atlas <yavatlas@...il.com>)

October 10 (1 message)

[FD] SD-WAN Harvester v 0.99 (SCADA StrangeLove <scadastrangelove@...il.com>)

October 12 (4 messages)

[FD] [SBA-ADV-20180319-01] CVE-2018-17532: Teltonika RUT9XX Unauthenticated OS Command Injection (SBA Research Advisory <advisory@...-research.org>)
[FD] [SBA-ADV-20180319-02] CVE-2018-17534: Teltonika RUT9XX Missing Access Control to UART Root Terminal (SBA Research Advisory <advisory@...-research.org>)
[FD] [SBA-ADV-20180410-01] CVE-2018-17533: Teltonika RUT9XX Reflected Cross-Site Scripting (XSS) (SBA Research Advisory <advisory@...-research.org>)
[FD] Cockpit CMS Multiple Vulnerabilities (CVE-2018-15538, CVE-2018-15539, CVE-2018-15540) (Simon Uvarov via Fulldisclosure <fulldisclosure@...lists.org>)

October 16 (9 messages)

[FD] CVE-2018-8532 / Microsoft SQL Server Management Studio 17.9 / 18.0 Preview 4 / XML Injection (hyp3rlinx <apparitionsec@...il.com>)
[FD] CVE-2018-8527 Microsoft SQL Server Management Studio 17.9 / 18.0 Preview 4 / xel filetype XML Injection (hyp3rlinx <apparitionsec@...il.com>)
[FD] CVE-2018-8533 Microsoft SQL Server Management Studio 17.9 / 18.0 Preview 4 / REGSRVR file handling XML Injection (hyp3rlinx <apparitionsec@...il.com>)
[FD] Multiple vulnerabilities in D-Link routers (Błażej Adamczyk <blazej.adamczyk@...il.com>)
Re: [FD] Skype Debian package: allows complete machine takeover for Microsoft (coderaptor <coderaptor@...il.com>)
[FD] [waraxe-2018-SA#109] - Multiple vulnerabilities in Wordfence Wordpress plugin (Janek Vind via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Riverbed SteelConnect Vulnerabilities (Denis Kolegov <d.n.kolegov@...il.com>)
[FD] Vulnerability Disclose (Murat Aydemir <murat.aydemir@...net.com.tr>)
[FD] DSA-2018-157: Dell EMC ESRS Virtual Edition Multiple Vulnerabilities (<secure@...l.com>)

October 19 (3 messages)

[FD] CA20181017-01: Security Notice for CA Identity Governance ("Kotas, Kevin J" <Kevin.Kotas@...com>)
[FD] Stored XSS in Viprinet VPN Hub Router (Denis Kolegov <d.n.kolegov@...il.com>)
[FD] Zoho ManageEngine OpManager 12.3 allows Unrestricted Arbitrary File Upload (Murat Aydemir <murat.aydemir@...net.com.tr>)

October 23 (3 messages)

[FD] Vulnerabilities in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before 10.0.4 (SCADA StrangeLove <scadastrangelove@...il.com>)
[FD] CVE-2018-8955: Bitdefender GravityZone Arbitrary Code Execution (Kyriakos Economou <kyrecon@...i-reversing.com>)
[FD] RootedCON 2019 Call For Papers is open! (omarbv@...eup.net)

October 24 (1 message)

[FD] Critical vulnerability in Cisco WebEx - "WebExec" (Ron Bowes <ron@...llsecurity.net>)

October 26 (4 messages)

[FD] [CORE-2018-0005] - ASRock Drivers Elevation of Privilege Vulnerabilities (advisories <advisories@...ureauth.com>)
[FD] CVEs 2018-7633, 2018-7632, 2018-7631 RCE, DoS and Script Injection vulnerabilities in ADB EpiCentro Firmware 7.3.… (Felix Schallock <fex@...ecurity-net.de>)
[FD] HID ActivID ActivClient - DoS or Heap Spray via SC (Harrison Neal <hneal@...tdidibreak.com>)
[FD] CVE-2018-16789: denial of service in shellinabox (Imre Rad <radimre83@...il.com>)

October 30 (3 messages)

[FD] HID ActivID ActivClient - JasPer DoS CVE-2017-{5499, 5500, 5502} (Harrison Neal <hneal@...tdidibreak.com>)
[FD] CVE-2018-10532 - EE 4GEE HH70 Home Router Hardcoded Root SSH Credentials (James Hemmings via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] DSA-2018-136: Dell EMC Integrated Data Protection Appliance Undocumented Accounts Vulnerability (<secure@...l.com>)

54 messages

Powered by blists - more mailing lists