full-disclosure mailing list - 2019/04

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2019/04

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹	²	³	⁴	⁵ 12	⁶	⁷
⁸	⁹ 6	¹⁰	¹¹	¹²	¹³ 3	¹⁴
¹⁵ 1	¹⁶ 3	¹⁷	¹⁸	¹⁹ 5	²⁰	²¹
²²	²³ 3	²⁴	²⁵	²⁶ 1	²⁷	²⁸
²⁹	³⁰ 7

Messages by day:

April 5 (12 messages)

[FD] Various vulnerabilities in Lupusec XT2 Plus home alarm system (Dan Fabian <dan.fabian@...il.com>)
[FD] Uniqkey Password Manager 1.14 - Remote Credential Disclosure (<gionreale@...anota.com>)
[FD] Open-Xchange Security Advisory 2019-04-01 (Open-Xchange GmbH via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] c0c0n XII | The cy0ps c0n - Call For Papers & Call For Workshops (Prajwal Panchmahalkar <prajwal.hy468@...il.com>)
[FD] CVE-2019-7727 - JMX/RMI Nice ENGAGE <= 6.5 Remote Command Execution (Red Timmy Sec - <redazione@...fault.it>)
[FD] DSA-2019-031: Dell EMC IsilonSD Management Server Cross-Site Scripting (XSS) Vulnerabilities (<secure@...l.com>)
[FD] SphereFTP 2.0 Denial Of Service (Sachin Wagh <wsachin092@...il.com>)
[FD] hardwear.io 2019 Call For Papers is Open - USA & Netherlands (Yuliya Pliavaka <yuliya@...atu.com>)
[FD] Uniqkey Password Manager 1.14 - Remote Denial Of Service [CVE-2019-10845] (<gionreale@...anota.com>)
[FD] Arris Touchstone TG1672 Administrative Login Vulnerabilities ("Harley A.W. Lorenzo via Fulldisclosure" <fulldisclosure@...lists.org>)
[FD] WordPress Plugin Form Maker by WD [CSRF → LFI] (Panagiotis Vagenas <pan.vagenas@...il.com>)
[FD] WordPress plugin Contact Form by WD [CSRF → LFI] (Panagiotis Vagenas <pan.vagenas@...il.com>)

April 9 (6 messages)

[FD] Loytec LGATE-902: Multiple Vulnerabilities (XSS, Path traversal and File Deletion) (Daniel dos Santos <daniel.dossantos@...escout.com>)
[FD] EasyIO 30P: CVE-2018-15820 (Stored XSS) and CVE-2018-15819 (Authentication bypass) (Daniel dos Santos <daniel.dossantos@...escout.com>)
[FD] GAT-Ship Web Module [All versions before 1.40] - Unrestricted File Upload (<gionreale@...anota.com>)
[FD] CALL FOR PAPERS - Hackers 2 Hackers Conference 16th edition ("Rodrigo Rubira Branco (BSDaemon)" <rodrigo@...nelhacking.com>)
[FD] DSA-2019-031: Dell EMC IsilonSD Management Server Cross-Site Scripting (XSS) Vulnerabilities (<secure@...l.com>)
[FD] HD Pan/Tilt Wi-Fi Camera NC450 Hard-Coded Credential Vulnerability (Sachin Wagh <wsachin092@...il.com>)

April 13 (3 messages)

[FD] Security Analysis of the TP-Link Archer C50 Router ("Harley A.W. Lorenzo via Fulldisclosure" <fulldisclosure@...lists.org>)
[FD] Nagios XI 5.5.10: XSS to root RCE (CVE-2019-9164, 9165, 9166, 9167, 9202, 9203, 9204) (Abdel Adim `smaury` Oisfi <smaury@...elder.it>)
[FD] Microsoft Internet Explorer v11 / XML External Entity Injection 0day (hyp3rlinx <apparitionsec@...il.com>)

April 15 (1 message)

[FD] [SE-2019-01] Gemalto SIM card applet loading vulnerability (Security Explorations <contact@...urity-explorations.com>)

April 16 (3 messages)

[FD] CVE-2019-9955 Refelected XSS on Zyxel Login page (aaron bishop <abishop@...ux.com>)
Re: [FD] Microsoft Internet Explorer v11 / XML External Entity Injection 0day (bo0od <bo0od@...eup.net>)
[FD] Redhat/CentOS root through network-scripts (Victor Angelier CCX <vangelier@...mail.com>)

April 19 (5 messages)

Re: [FD] Microsoft Internet Explorer v11 / XML External Entity Injection 0day (hyp3rlinx <apparitionsec@...il.com>)
[FD] Obtaining location using Google maps & JavaScript (Bhavesh Naik via Fulldisclosure <fulldisclosure@...lists.org>)
Re: [FD] Redhat/CentOS root through network-scripts (Kurt H Maier <khm@...ops.net>)
[FD] CVE-2018-2879 - anniversary (Red Timmy Sec - <redazione@...fault.it>)
Re: [FD] Redhat/CentOS root through network-scripts (Victor Angelier CCX <vangelier@...mail.com>)

April 23 (3 messages)

[FD] WordPress Plugin Contact Form Builder [CSRF → LFI] (Panagiotis Vagenas <pan.vagenas@...il.com>)
Re: [FD] Obtaining location using Google maps & JavaScript (Reed Black <reed@...afeword.org>)
[FD] Multiple vulnerabilities in Sony Smart TVs (xen1thLabs <xen1thLabs@...kmatter.ae>)

April 26 (1 message)

Re: [FD] GAT-Ship Web Module [All versions before 1.40] - Unrestricted File Upload (<gionreale@...anota.com>)

April 30 (7 messages)

[FD] Multiple vulnerabilities in Dovecot 2.3 (Aki Tuomi via Fulldisclosure <fulldisclosure@...lists.org>)
Re: [FD] WordPress Plugin Contact Form Builder [CSRF → LFI] (Henri Salo <henri@...v.fi>)
Re: [FD] WordPress Plugin Form Maker by WD [CSRF → LFI] (Henri Salo <henri@...v.fi>)
Re: [FD] WordPress plugin Contact Form by WD [CSRF → LFI] (Henri Salo <henri@...v.fi>)
[FD] OpenPGP and S/MIME signature forgery attacks in multiple email clients (Jens Müller via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] [REVIVE-SA-2019-001] Revive Adserver - Multiple vulnerabilities (Matteo Beccati via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] [CVE-2019-9826] phpBB Native Fulltext Search denial of service (Colin Snover <u5zxcb@...afleet.com>)

41 messages

Powered by blists - more mailing lists