full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2019/03

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹ 6	²	³
⁴	⁵ 9	⁶	⁷ 1	⁸	⁹ 5	¹⁰
¹¹	¹² 5	¹³	¹⁴	¹⁵	¹⁶ 6	¹⁷
¹⁸	¹⁹ 3	²⁰ 1	²¹	²² 8	²³	²⁴
²⁵	²⁶ 15	²⁷ 3	²⁸	²⁹ 2	³⁰	³¹

Messages by day:

March 1 (6 messages)

[FD] [CORE-2018-0012] - Cisco WebEx Meetings Elevation of Privilege Vulnerability Version 2 (advisories <advisories@...ureauth.com>)
[FD] SHAREit for Android Authentication Bypass and Remote File Download (RedForce Advisory <advisory@...force.ae>)
[FD] Apache UNO API RCE (Axel Boesenach <axelboesenach@...look.com>)
[FD] [CVE-2019-9206, CVE-2019-9207] Cross Site Scripting in PRTG Network Monitor v7.1.3.3378 (Rafael Pedrero <rafael.pedrero@...il.com>)
[FD] DSA-2019-025: RSA Archer GRC Platform Multiple Vulnerabilities (<secure@...l.com>)
[FD] DSA-2019-038: RSA® Authentication Manager Insecure Credential Management Vulnerability (<secure@...l.com>)

March 5 (9 messages)

[FD] SAP J2EE Engine/7.01/Portal/EPP Reflected Cross Site Scripting (XSS) (Ece örsel <eceorsel@...il.com>)
[FD] SAP J2EE Engine/7.01/Portal/EPP Reflected Cross Site Scripting (XSS) (Ece örsel <eceorsel@...il.com>)
[FD] SAP J2EE Engine/7.01/Fiori Reflected Cross Site Scripting (XSS) (Ece örsel <eceorsel@...il.com>)
[FD] SAP J2EE Engine/7.01/Fiori Reflected Cross Site Scripting (XSS) (Ece örsel <eceorsel@...il.com>)
[FD] SAP J2EE Engine/7.01/Fiori Reflected Cross Site Scripting (XSS) (Ece örsel <eceorsel@...il.com>)
[FD] SAP J2EE Engine/7.01/Fiori Reflected Cross Site Scripting (XSS) (Ece örsel <eceorsel@...il.com>)
Re: [FD] Forminator 1.5.4 - Unauthenticated Persistent XSS, Blind SQL Injection (WordPress Plugin) (Henri Salo <henri@...v.fi>)
[FD] Open Redirection vulnerability in Babel (CMSMS Module) (Jan Kopriva <jan.kopriva@...rustednetwork.net>)
[FD] Sagemcom router insufficient default PSK entropy (Ryan Delaney <ryan.delaney@...sp.org>)

March 7 (1 message)

[FD] Sparkasse - Multiple Persistent Cross Site Scripting Web Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)

March 9 (5 messages)

[FD] UFONet v-1.3 - [SLY] SingularitY! (psy <epsylon@...eup.net>)
[FD] CVE-2019-6726: Arbitrary File Deletion in WP fastest Cache <= 0.8.9.0 (Sebastian Neef <fulldisclosure@...y.work>)
Re: [FD] Quiz And Survey Master 6.0.4 - Reflected XSS (WordPress Plugin) (Henri Salo <henri@...v.fi>)
Re: [FD] Blog2Social 5.0.2 - Reflected XSS (WordPress Plugin) (Henri Salo <henri@...v.fi>)
[FD] DSA-2019-025: RSA Archer GRC Platform Multiple Vulnerabilities (<secure@...l.com>)

March 12 (5 messages)

[FD] Microsoft Windows .Reg File / Dialog Box Message Spoofing Vulnerability (hyp3rlinx <apparitionsec@...il.com>)
Re: [FD] Contact Form Email 7.10.41 - Reflected XSS & CSRF (WordPress Plugin) (Henri Salo <henri@...v.fi>)
[FD] CVE-2019-9648 CoreFTP Server FTP / SFTP Server v2 - Build 674 SIZE Directory Traversal (Kevin R <krandall2013@...il.com>)
[FD] CVE-2019-9649 CoreFTP FTP / SFTP Server v2 - Build 674 MDTM Directory Traversal (Kevin R <krandall2013@...il.com>)
[FD] FlexPaper <= 2.3.6 Remote Command Execution (redazione@...fault.it)

March 16 (6 messages)

[FD] WordPress Plugin GraceMedia Media Player 1.0 - Local File Inclusion (Manuel Garcia Cardenas <advidsec@...il.com>)
[FD] [**UPDATED] Microsoft Windows .Reg File / Dialog Box Message Spoofing 0day (hyp3rlinx <apparitionsec@...il.com>)
[FD] Cisco Common Service Platform Collector - Hardcoded Credentials (CVE-2019-1723) (David Coomber <davidcoomber.infosec@...il.com>)
[FD] IPv6 Security for IPv4 Engineers (Fernando Gont <fgont@...networks.com>)
[FD] SQL injection in joshcam/mysqli-database-class library (Jaroslav Lobačevski <jarlob@...il.com>)
[FD] [SYSS-2018-033]: Fujitsu Wireless Keyboard Set LX901 - Keystroke Injection Vulnerability (Matthias Deeg <matthias.deeg@...s.de>)

March 19 (3 messages)

Re: [FD] WordPress Plugin GraceMedia Media Player 1.0 - Local File Inclusion (Henri Salo <henri@...v.fi>)
[FD] 2FA & macOS Disk Encryption Bypass in Abine Blur 7.24* [CVE-2019-6481] ("\(RS\) Tyler Schroder via Fulldisclosure" <fulldisclosure@...lists.org>)
[FD] CVE-2018-19971: JFrog Artifactory Pro SAML SSO signature validation error (Timo Lindfors <timo.lindfors@....fi>)

March 20 (1 message)

[FD] [SE-2019-01] Java Card vulnerabilities (Security Explorations <contact@...urity-explorations.com>)

March 22 (8 messages)

[FD] CVE-2018-17057: phar deserialization in TCPDF might lead to RCE (Paolo G <0x901137@...il.com>)
Re: [FD] Font_Organizer 2.1.1 - Reflected XSS (WordPress Plugin) (Henri Salo <henri@...v.fi>)
Re: [FD] Give 2.3.0 - Reflected XSS (WordPress Plugin) (Henri Salo <henri@...v.fi>)
Re: [FD] KingComposer 2.7.6 - Reflected XSS (WordPress Plugin) (Henri Salo <henri@...v.fi>)
Re: [FD] NextScripts: Social Networks Auto-Poster 4.2.7 - Reflected XSS (WordPress Plugin) (Henri Salo <henri@...v.fi>)
Re: [FD] wpGoogleMaps 7.10.41 - Reflected XSS (WordPress Plugin) (Henri Salo <henri@...v.fi>)
Re: [FD] WP Live Chat Support 8.0.17 - Reflected XSS (WordPress Plugin) (Henri Salo <henri@...v.fi>)
Re: [FD] YOP Poll 6.0.2 - Reflected XSS (WordPress Plugin) (Henri Salo <henri@...v.fi>)

March 26 (15 messages)

[FD] [RT-SA-2019-007] Code Execution via Insecure Shell Function getopt_simple (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[FD] Repeat of CVE-2018-4251 in Razer Laptops (Bailey Fox <bfox200012@...il.com>)
[FD] Recon 2019 Call For Papers - June 28 - 30, 2019 - Montreal, Canada (cfp@...on.cx)
[FD] CVE-2019-10009 Titan FTP Server Version 2019 Build 3505 Directory Traversal/Local File Inclusion (Kevin R <krandall2013@...il.com>)
[FD] [SYSS-2018-034]: ABUS Secvest - Rolling Code - Predictable from Observable State (CWE-341) (Matthias Deeg <matthias.deeg@...s.de>)
[FD] [SYSS-2018-035]: ABUS Secvest Remote Control - Missing Encryption of Sensitive Data (CWE-311) (Matthias Deeg <matthias.deeg@...s.de>)
[FD] [SYSS-2018-036]: ABUS Secvest Remote Control - Denial of Service - Uncontrolled Resource Consumption (CWE-400) (Matthias Deeg <matthias.deeg@...s.de>)
[FD] APPLE-SA-2019-3-25-2 macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra (Apple Product Security via Fulldisclosur…)
[FD] APPLE-SA-2019-3-25-4 Safari 12.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-3-25-7 Xcode 10.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-3-25-5 iTunes 12.9.4 for Windows (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-3-25-3 tvOS 12.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-3-25-6 iCloud for Windows 7.11 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-3-25-1 iOS 12.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] ESA-2017-123: EMC Networker Remote Code Execution Vulnerability (<secure@...l.com>)

March 27 (3 messages)

[FD] [RT-SA-2019-003] Cisco RV320 Unauthenticated Configuration Export (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[FD] [RT-SA-2019-004] Cisco RV320 Unauthenticated Diagnostic Data Retrieval (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[FD] [RT-SA-2019-005] Cisco RV320 Command Injection Retrieval (RedTeam Pentesting GmbH <release@...team-pentesting.de>)

March 29 (2 messages)

[FD] [SAUTH-2019-0002] - Pydio 8 Multiple Vulnerabilities (SecureAuth Advisories <advisories@...ureauth.com>)
[FD] APPLE-SA-2019-3-27-1 watchOS 5.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)

64 messages