full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2019/02

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹ 6	²	³
⁴	⁵ 15	⁶	⁷	⁸ 9	⁹	¹⁰
¹¹	¹² 6	¹³ 1	¹⁴	¹⁵	¹⁶	¹⁷
¹⁸	¹⁹	²⁰ 1	²¹ 11	²² 1	²³	²⁴
²⁵	²⁶ 3	²⁷	²⁸ 1

Messages by day:

February 1 (6 messages)

[FD] Multiple APIs Vulnerabilities in CUJO Firewall (CUJ0 FAIL <cujo.fail@...il.com>)
[FD] Reflected Cross-site Scripting Vulnerability in Collabtive 3.1 (Daniel Bishtawi <daniel@...sparker.com>)
[FD] Multiple Reflected Cross-site Scripting Vulnerabilities in WeBid 1.2.2 (Daniel Bishtawi <daniel@...sparker.com>)
[FD] [CVE-2018-14013] Reflected Cross-Site Scripting (XSS) vulnerabilities in Zimbra Collaboration (Sysdream Labs <labs@...dream.com>)
[FD] Privilege Escalation + Remote Code Execution in SolarWinds Serv-U FTP Server (Chris <lists@...lchris.com>)
[FD] Reflected XSS in n SolarWinds Serv-U FTP Server (Chris <lists@...lchris.com>)

February 5 (15 messages)

[FD] SEC Consult SA-20190205-0 :: Multiple vulnerabilities in OSCI-Transport Library 1.2 for German e-Government (SEC Consult Vulnerability Lab <research@...-c…)
[FD] [Multiple CVE] - Cisco Identity Services Engine unauth stored XSS to RCE as root (Pedro Ribeiro <pedrib@...il.com>)
[FD] DSA-2019-010: Dell EMC VNX2 Family OS Command Injection Vulnerability (<secure@...l.com>)
[FD] Forminator 1.5.4 - Unauthenticated Persistent XSS, Blind SQL Injection (WordPress Plugin) (Tim Coen <tc.coen@...il.com>)
[FD] Quiz And Survey Master 6.0.4 - Reflected XSS (WordPress Plugin) (Tim Coen <tc.coen@...il.com>)
[FD] Blog2Social 5.0.2 - Reflected XSS (WordPress Plugin) (Tim Coen <tc.coen@...il.com>)
[FD] Contact Form Email 7.10.41 - Reflected XSS & CSRF (WordPress Plugin) (Tim Coen <tc.coen@...il.com>)
[FD] Font_Organizer 2.1.1 - Reflected XSS (WordPress Plugin) (Tim Coen <tc.coen@...il.com>)
[FD] Give 2.3.0 - Reflected XSS (WordPress Plugin) (Tim Coen <tc.coen@...il.com>)
[FD] CarolinaCon-15 is April 26-28, 2019 in Charlotte NC - Call For Papers/Presenters is now open (Vic Vandal <vvandal@...l.com>)
[FD] KingComposer 2.7.6 - Reflected XSS (WordPress Plugin) (Tim Coen <tc.coen@...il.com>)
[FD] NextScripts: Social Networks Auto-Poster 4.2.7 - Reflected XSS (WordPress Plugin) (Tim Coen <tc.coen@...il.com>)
[FD] wpGoogleMaps 7.10.41 - Reflected XSS (WordPress Plugin) (Tim Coen <tc.coen@...il.com>)
[FD] WP Live Chat Support 8.0.17 - Reflected XSS (WordPress Plugin) (Tim Coen <tc.coen@...il.com>)
[FD] YOP Poll 6.0.2 - Reflected XSS (WordPress Plugin) (Tim Coen <tc.coen@...il.com>)

February 8 (9 messages)

[FD] Qkr! with MasterPass iOS Application - MITM SSL Certificate Vulnerability (CVE-2019-6702) (David Coomber <davidcoomber.infosec@...il.com>)
[FD] APPLE-SA-2019-2-07-1 iOS 12.1.4 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-2-07-2 macOS Mojave 10.14.3 Supplemental Update (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-2-07-3 Shortcuts 2.1.3 for iOS (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] [CVE-2019-7416] Client Side URL Redirect (OTG-CLIENT-004) in OpenText Documentum Webtop 5.3 SP2 (Rafael Pedrero <rafael.pedrero@...il.com>)
[FD] [CVE-2019-7417] Cross Site Scripting in Ericsson Active Library Explorer Server Version 14.3 (Rafael Pedrero <rafael.pedrero@...il.com>)
[FD] [CVE-2019-7418, CVE-2019-7419, CVE-2019-7420, CVE-2019-7421] Cross Site Scripting in SAMSUNG X7400GX Sync Thru We… (Rafael Pedrero <rafael.pedrero@...il.co…)
[FD] [CVE-2019-7422, CVE-2019-7423, CVE-2019-7424, CVE-2019-7425, CVE-2019-7426, CVE-2019-7427] Cross Site Scripting i… (Rafael Pedrero <rafael.pedrero@...il.co…)
[FD] Content Injection in Amazon's FireOS [CVE-2019-7399] (Nightwatch Cybersecurity Research <research@...htwatchcybersecurity.com>)

February 12 (6 messages)

[FD] KSA-DEV-001: CVE-2018-19524 : StackOverflow in Multiple Skyworth GPON HomeGateways and Optical Network terminals. (Kingkaustubh via Fulldisclosure <fulldi…)
[FD] KSA-Dev-002: CVE-2018-19525 : Account takeover via XSRF in All ISG Series Firewall (Kingkaustubh via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] KSA-Dev-003:CVE-2019-7383 : Remote Code Execution Via shell upload in all systorme ISG products (Kingkaustubh via Fulldisclosure <fulldisclosure@...lists.…)
[FD] KSA-Dev-005:CVE-2019-7384: Authenticated Remote Code Execution in Raisecom GPON Devices (Kingkaustubh via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] KSA-Dev-006:CVE-2019-7385: Authenticated remote code execution on Multiple Raisecom GPON Devices (Kingkaustubh via Fulldisclosure <fulldisclosure@...lists…)
[FD] KSA-Dev-007:CVE-2019-7386:DoS and gecko reboot in the nokia 8810 4G handset (Kingkaustubh via Fulldisclosure <fulldisclosure@...lists.org>)

February 13 (1 message)

Re: [FD] [SRP-2018-02] Security of NC+ SAT TV platform and ST chipsets (Security Explorations <contact@...urity-explorations.com>)

February 20 (1 message)

[FD] [SRP-2018-02] Details of a vulnerability in STMicroelectronics' chipset (Adam Gowdiak <contact@...urity-explorations.com>)

February 21 (11 messages)

[FD] [SAUTH-2019-0001] - Micro Focus Filr Multiple Vulnerabilities (advisories <advisories@...ureauth.com>)
[FD] Open Redirection Vulnerability in GetSimpleCMS 3.3.13 (Daniel Bishtawi <daniel@...sparker.com>)
[FD] Multiple Cross-Site Scripting Vulnerabilities in HTMLy 2.7.4 (Daniel Bishtawi <daniel@...sparker.com>)
Re: [FD] Reflected Cross-site Scripting Vulnerability in Collabtive 3.1 (Henri Salo <henri@...v.fi>)
[FD] CA20190212-01: Security Notice for CA Privileged Access Manager (Kevin Kotas via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] [CVE-2019-8923, CVE-2019-8924] SQL injection and persistent Cross Site Scripting in XAMPP 5.6.8 (and previous) (Rafael Pedrero <rafael.pedrero@...il.com>)
[FD] [CVE-2019-8925 to CVE-2019-8929] Path traversal and Cross Site Scripting in Zoho ManageEngine Netflow Analyzer Pro… (Rafael Pedrero <rafael.pedrero@...il.co…)
[FD] [CVE-2018-18845] Cross Site Scripting in Advanced comment system v1.0 (Rafael Pedrero <rafael.pedrero@...il.com>)
[FD] [CVE-2019-8938] Cross Site Scripting in VertrigoServ 2.17 (Rafael Pedrero <rafael.pedrero@...il.com>)
[FD] Multiple issues in Teracue ENC-400 including pre-authenticated remote code execution (Stephen Shkardoon <stephen@...ecurity.co.nz>)
[FD] Kanboard 1.2.7 Multiple Vulnerabilities (Will Boucher via Fulldisclosure <fulldisclosure@...lists.org>)

February 22 (1 message)

[FD] CVE-2019-8939: XSS in Tautulli (Geeknik Labs via Fulldisclosure <fulldisclosure@...lists.org>)

February 26 (3 messages)

[FD] CVE-2019-1000032: Memory corruption / DoS in nanosvg (Sebastian Neef <contact@...y.work>)
[FD] [CVE-2019-9083] Blind SQL injection in SQLiteManager 1.2.0 (and 1.2.4) (Rafael Pedrero <rafael.pedrero@...il.com>)
[FD] Defense in depth -- the Microsoft way (part 60): same old sins and incompetence! ("Stefan Kanthak" <stefan.kanthak@...go.de>)

February 28 (1 message)

[FD] AST-2019-001: Remote crash vulnerability with SDP protocol violation ("Asterisk Security Team" <security@...erisk.org>)

54 messages