full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2019/01

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 7	²	³	⁴ 12	⁵	⁶
⁷	⁸ 9	⁹ 1	¹⁰	¹¹ 11	¹²	¹³
¹⁴	¹⁵ 4	¹⁶	¹⁷	¹⁸ 4	¹⁹	²⁰
²¹	²² 4	²³	²⁴ 5	²⁵ 13	²⁶	²⁷
²⁸	²⁹ 1	³⁰	³¹

Messages by day:

January 1 (7 messages)

[FD] Multiple Stored Cross-site Scripting Vulnerabilities in ForkCMS 5.0.6 (Daniel Bishtawi <daniel@...sparker.com>)
[FD] Call for Papers for ShmooCon Epilogue Closes Jan 1 (Rob Fuller <mubix@...m362.com>)
[FD] Chrome Browser for Android Reveals Sensitive Hardware Information (Nightwatch Cybersecurity Research <research@...htwatchcybersecurity.com>)
[FD] DSA-2018-224:RSA Archer GRC Platform Improper Access Control Vulnerability (<secure@...l.com>)
Re: [FD] [CVE-2018-18007] atbox.htm on D-Link DSL-2770L devices allows remote unauthenticated attackers to discover admin creden… (Tyler Cui <tyler.cui@...e.com>)
Re: [FD] [CVE-2018-18008] spaces.htm on multiple D-Link devices (DSL, DIR, DWR) allows remote unauthenticated attackers to disc… (Tyler Cui <tyler.cui@...e.com>)
Re: [FD] [CVE-2018-18009] dirary0.js on D-Link DIR-140L, DIR-640L devices allows remote unauthenticated attackers to discover a… (Tyler Cui <tyler.cui@...e.com>)

January 4 (12 messages)

[FD] /bin/statistics in TWiki 6.0.2 allows XSS via the webs parameter(CVE-2018-20212) ("zzt0907" <16362505@...com>)
[FD] Multiple Cross-site Scripting Vulnerabilities in ImpressCMS 1.3.10 (Daniel Bishtawi <daniel@...sparker.com>)
[FD] Vulnerabilities in Zurmo 2.3.4 (Daniel Bishtawi <daniel@...sparker.com>)
[FD] Reflected Cross-site Scripting Vulnerability in Microweber 1.0.8 (Daniel Bishtawi <daniel@...sparker.com>)
[FD] Multiple Cross-site Scripting Vulnerabilities in GeniXCMS 1.1.5 (Daniel Bishtawi <daniel@...sparker.com>)
[FD] Multiple Cross-site Scripting Vulnerabilities in Family Connections 3.7.0 (Daniel Bishtawi <daniel@...sparker.com>)
[FD] CVE-2018-19509-19513: multiple vulnerabilities (incl. critical pre-auth RCE) in Webgalamb (Daniel Jones via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] CWE-80 XSS Bose Soundtouch App (ProSec <info@...sec-networks.com>)
[FD] Open-Xchange Security Advisory 2018-12-31 (martin.heiland.lists@...n-xchange.com)
[FD] BMC Remedy + ITAM - multiple security issues. (Filip Palian <s3810@...stk.edu.pl>)
[FD] BMC Network Automation v8.7 - remote session hijacking. (Filip Palian <s3810@...stk.edu.pl>)
[FD] DSA-2018-226: RSA® Authentication Manager Relative Path Traversal Vulnerability (<secure@...l.com>)

January 8 (9 messages)

[FD] CSRF in MapSVG Lite could allow an attacker to do almost anything an admin can (WordPress plugin) (dxw Security <harry@....com>)
Re: [FD] Reflected Cross-site Scripting Vulnerability in Microweber 1.0.8 (Daniel Bishtawi <daniel@...sparker.com>)
[FD] Reflected Cross-site Scripting in Mantis 2.11.1 (Daniel Bishtawi <daniel@...sparker.com>)
[FD] Multiple Cross-site Scripting Vulnerabilities in ZenPhoto 1.4.14 (Daniel Bishtawi <daniel@...sparker.com>)
[FD] New Release: UFONet v1.2 - "Armageddon!" (psy <epsylon@...eup.net>)
Re: [FD] Reflected Cross-site Scripting Vulnerability in Microweber 1.0.8 (Henri Salo <henri@...v.fi>)
Re: [FD] Vulnerabilities in Zurmo 2.3.4 (Henri Salo <henri@...v.fi>)
[FD] Path Traversal in Aspose.ZIP library (Jaroslav Lobačevski <jarlob@...il.com>)
[FD] Multiple Root RCE in Unibox Wifi Access Controller 0.x - 3.x (Sahil Dhar <sahildhar93@...il.com>)

January 9 (1 message)

[FD] SEC Consult SA-20190109-0 :: Multiple Vulnerabilities in Cisco VoIP Phones (88xx series) (SEC Consult Vulnerability Lab <research@...-consult.com>)

January 11 (11 messages)

[FD] X41 D-Sec GmbH Security Advisory X41-2018-009: ReDoS Vulnerability in UA-Parser (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)
[FD] Microsoft VCF File Insufficient UI Warning Remote Code Execution 0day (hyp3rlinx <apparitionsec@...il.com>)
[FD] Capstone v4.0.1 is out! (Nguyen Anh Quynh <aquynh@...il.com>)
[FD] Open Redirection Vulnerabilities in OrangeForum 1.4.0 (Daniel Bishtawi <daniel@...sparker.com>)
[FD] XML External Entity Injection Vulnerability in BlogEngine 3.3 (Daniel Bishtawi <daniel@...sparker.com>)
[FD] Multiple Reflected Cross-site Scripting Vulnerabilities in Ampache 3.8.6 (Daniel Bishtawi <daniel@...sparker.com>)
Re: [FD] Reflected Cross-site Scripting Vulnerability in CubeCart 6.2.2 (Henri Salo <henri@...v.fi>)
Re: [FD] Reflected Cross-site Scripting in Mantis 2.11.1 (Henri Salo <henri@...v.fi>)
[FD] [CVE-2018-10091] Stored XSS vulnerabilities in AudioCode IP phones (Sysdream Labs <labs@...dream.com>)
[FD] [CVE-2018-10093] Remote command injection vulnerability in AudioCode IP phones (Sysdream Labs <labs@...dream.com>)
[FD] System Down: A systemd-journald exploit (Qualys Security Advisory <qsa@...lys.com>)

January 15 (4 messages)

Re: [FD] Reflected Cross-site Scripting Vulnerability in CubeCart 6.2.2 (Henri Salo <henri@...v.fi>)
[FD] EuskalHack Security Congress Call For Papers (Joxean Koret via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] secuvera-SA-2016-01: Multiple authentication weaknesses in Arvato Systems Streamworks Job Scheduler (Simon Bieber <sbieber@...uvera.de>)
[FD] SCP client multiple vulnerabilities (Harry Sintonen <security-advisories@...er.fi>)

January 18 (4 messages)

[FD] Become a speaker at PHDays 9! (Alexander Lashkov <ALashkov@...ecurity.com>)
[FD] Microsoft Windows ".contact" File / Insufficient UI Warning Arbitrary Code Execution (hyp3rlinx <apparitionsec@...il.com>)
[FD] Open-Xchange Security Advisory 2019-01-18 (Open-Xchange GmbH <martin.heiland.lists@...n-xchange.com>)
[FD] Defense in depth -- the Microsoft way (part 59): we only fix every other vulnerability ("Stefan Kanthak" <stefan.kanthak@...go.de>)

January 22 (4 messages)

[FD] [SRP-2018-02] Security of NC+ SAT TV platform and ST chipsets (Security Explorations <contact@...urity-explorations.com>)
[FD] Call For Paper - leHACK - July 6th - July 7th, 2019 (Hackira via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] CA20190117-01: Security Notice for CA Service Desk Manager (Kevin Kotas via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] [Several CVE]: NUUO CMS - multiple vulnerabilities resulting in unauth RCE (Pedro Ribeiro <pedrib@...il.com>)

January 24 (5 messages)

[FD] [RT-SA-2018-002] Cisco RV320 Unauthenticated Configuration Export (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[FD] [RT-SA-2018-003] Cisco RV320 Unauthenticated Diagnostic Data Retrieval (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[FD] [RT-SA-2018-004] Cisco RV320 Command Injection (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[FD] RVAsec 2019 Call for Presentations (CFP) (Sullo <csullo@...il.com>)
[FD] SEC Consult SA-20190124-0 :: Cross-site scripting in CA Automic Workload Automation Web Interface (AWI) (SEC Consult Vulnerability Lab <research@...-consu…)

January 25 (13 messages)

[FD] Microsoft Windows .CONTACT File / HTML Injection Mailto: Remote Code Execution (hyp3rlinx <apparitionsec@...il.com>)
[FD] Cross-site Scripting via XML Vulnerability in DNN 9.1 (Daniel Bishtawi <daniel@...sparker.com>)
[FD] Cross-site Scripting Vulnerability in Abantecart 1.2.12 (Daniel Bishtawi <daniel@...sparker.com>)
[FD] Multiple Reflected Cross-site Scripting Vulnerabilities in Coppermine 1.5.46 (Daniel Bishtawi <daniel@...sparker.com>)
[FD] Stored Cross-site Scripting Vulnerability in Podcast Generator 2.7 (Daniel Bishtawi <daniel@...sparker.com>)
[FD] CA20190124-01: Security Notice for CA Automic Workload Automation (James Williams via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-1-22-2 macOS Mojave 10.14.3, Security Update 2019-001 High Sierra, Security Update 2019-001 Sierra (Apple Product Security via Fulldisclosur…)
[FD] APPLE-SA-2019-1-22-1 iOS 12.1.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-1-22-5 Safari 12.0.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-1-22-4 tvOS 12.1.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-1-22-6 iCloud for Windows 7.10 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-1-22-3 watchOS 5.1.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-1-24-1 iTunes 12.9.3 for Windows (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)

January 29 (1 message)

Re: [FD] Multiple Reflected Cross-site Scripting Vulnerabilities in Coppermine 1.5.46 (Henri Salo <henri@...v.fi>)

71 messages