full-disclosure mailing list - 2019/05

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2019/05

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹	²	³	⁴ 5	⁵
⁶	⁷ 1	⁸	⁹ 1	¹⁰ 9	¹¹	¹²
¹³ 10	¹⁴ 1	¹⁵ 1	¹⁶	¹⁷ 4	¹⁸	¹⁹
²⁰	²¹ 4	²²	²³	²⁴ 5	²⁵	²⁶
²⁷	²⁸	²⁹	³⁰ 11	³¹

Messages by day:

May 4 (5 messages)

[FD] Windows PowerShell ISE / Filename Parsing Flaw Remote Code Execution 0day (hyp3rlinx <apparitionsec@...il.com>)
[FD] OneShield - Policy Solutions - Dragon Framework Log Poisoning (<ghost@...ervurse.com>)
[FD] OneShield - Policy Solutions - Dragon Framework Persistent XSS in Framework Textboxes (<ghost@...ervurse.com>)
[FD] [SYSS-2019-005]: ABUS Secvest - Proximity Key - Cryptographic Issues (CWE-310) (Matthias Deeg <matthias.deeg@...s.de>)
[FD] RCE in CGI Servlet – Apache Tomcat on Windows – CVE-2019-0232 (Nightwatch Cybersecurity Research <research@...htwatchcybersecurity.com>)

May 7 (1 message)

[FD] Open source tool | Lets Map Your Network (Pramod Rana <varchashva@...il.com>)

May 9 (1 message)

[FD] SEC Consult SA-20190509-0 :: Multiple Vulnerabilities in Gemalto (Thales Group) DS3 Authentication Server / Ezio S… (SEC Consult Vulnerability Lab <research…)

May 10 (9 messages)

[FD] SEC Consult SA-20190510-0 :: Unauthenticated SQL Injection vulnerability in OpenProject (SEC Consult Vulnerability Lab <research@...-consult.com>)
[FD] WordPress Plugin Form Maker 1.13.3 - SQL Injection (Daniele Scanu <danielescanu20@...il.com>)
[FD] Enghouse Interactive´s CCSP 7.2.5 API XXE and SSRF,vulnerability via unauthenticated GET Request (David H <david.herrero.pena@...il.com>)
[FD] dotCMS v5.1.1 Vulnerabilities (John Martinelli <john@...ureli.com>)
[FD] dotCMS v5.1.1 HTML Injection & XSS Vulnerability (John Martinelli <john@...ureli.com>)
Re: [FD] dotCMS v5.1.1 HTML Injection & XSS Vulnerability (John Martinelli <john@...ureli.com>)
[FD] Cross Site Scripting | Alkacon OpenCMS v10.5.4 and before (Pramod Rana <varchashva@...il.com>)
[FD] CSV Injection | Alkacon OpenCMS v10.5.4 and before (Pramod Rana <varchashva@...il.com>)
[FD] Cross Site Scripting | WolfCMS v0.8.3.1 and before (Pramod Rana <varchashva@...il.com>)

May 13 (10 messages)

[FD] SEC Consult SA-20190513-0 :: Cleartext message spoofing in supplementary Go Cryptography Libraries (@sec_consult) (SEC Consult Vulnerability Lab <research…)
[FD] TOR browser / Firefox telemetry data (Bipin Gautam <bipin.gautam@...il.com>)
[FD] [CVE-2019-8978] Improper Authentication (CWE-287) in Ellucian Banner Web Tailor and Banner Enterprise Identity Servi… (Joshua Mulliken <joshua@...liken.net>)
[FD] APPLE-SA-2019-5-13-1 iOS 12.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-5-13-2 macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update 2019-003 Sierra (Apple Product Security via Fulldisclosur…)
[FD] APPLE-SA-2019-5-13-3 tvOS 12.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-5-13-4 watchOS 5.2.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-5-13-6 Apple TV Software 7.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-5-13-5 Safari 12.1.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
Re: [FD] System Down: A systemd-journald exploit (Qualys Security Advisory <qsa@...lys.com>)

May 14 (1 message)

[FD] [CVE-2018-7841] Schneider Electric U.Motion Builder <= 1.3.4 track_import_export.php object_id Unauthenticated Com… (RCE Security <security@...security.com>)

May 15 (1 message)

[FD] SEC Consult SA-20190515-0 :: Authorization Bypass in RSA NetWitness (@sec_consult) (SEC Consult Vulnerability Lab <research@...-consult.com>)

May 17 (4 messages)

[FD] [RT-SA-2019-002] Directory Traversal in Cisco Expressway Gateway (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[FD] GAT-Ship Web Module >1.30 - Unauthenticated Information Disclosure Vulnerability (<gionreale@...anota.com>)
[FD] [CVE-2019-11880] CommSy <= 8.6.5 - SQL injection (Jens Regel | Schneider & Wulf <JRegel@...neider-wulf.de>)
[FD] local privilege escalation via CDE dtprintinfo (Marco Ivaldi <marco.ivaldi@...iaservice.net>)

May 21 (4 messages)

Re: [FD] GAT-Ship Web Module >1.30 - Unauthenticated Information Disclosure Vulnerability (<gionreale@...anota.com>)
[FD] Epic Web Honeypot 2.0a - Fingerprinting Vulnerability (<gionreale@...anota.com>)
[FD] Blackhole for Bad Bots WordPress Plugin 2.5 - Detection Bypass (<gionreale@...anota.com>)
[FD] Emerson Network Power Cross Site Scripting(XSS) Vulnerability (Kubilay Onur Gungor <kubilay@...erstruggle.org>)

May 24 (5 messages)

[FD] CMS Made Simple 2.2.10 - (Authenticated) Persistent Cross-Site Scripting (Manuel Garcia Cardenas <advidsec@...il.com>)
[FD] New BlackArch Linux ISOs + OVA Image (2019.06.01) with 2200 Tools released (Black Arch <blackarchlinux@...il.com>)
[FD] [REVIVE-SA-2019-002] Revive Adserver Vulnerability (Matteo Beccati via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Exploring the File System via Jenkins Credentials Plugin Vulnerability – CVE-2019-10320 (Nightwatch Cybersecurity Research <research@...htwatchcybersecur…)
[FD] [CVE-2019-11604] Quest KACE Systems Management Appliance <= 9.0 kbot_service_notsoap.php METHOD Reflected Cross-Si… (RCE Security <security@...security.com>)

May 30 (11 messages)

[FD] Reflected Cross-site Scripting Vulnerability in Kanboard 1.2.7 (Daniel Bishtawi <daniel@...sparker.com>)
[FD] Cross-site Scripting Vulnerabilities in VFront 0.99.5 (Daniel Bishtawi <daniel@...sparker.com>)
[FD] CA20190523-01: Security Notice for CA Risk Authentication and CA Strong Authentication (Kevin Kotas via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] [SYSS-2019-012]: Siemens LOGO! 8 - Use of Hard-coded Cryptographic Key (CWE-321) (Matthias Deeg <matthias.deeg@...s.de>)
[FD] [SYSS-2019-013]: Siemens LOGO! 8 - Missing Authentication for Critical Function (CWE-306) (Matthias Deeg <matthias.deeg@...s.de>)
[FD] [SYSS-2019-014]: Siemens LOGO! 8 - Storing Passwords in a Recoverable Format (CWE-257) (Matthias Deeg <matthias.deeg@...s.de>)
[FD] Local Privilege Escalation via Serv-U FTP Server (Chris <lists@...lchris.com>)
[FD] APPLE-SA-2019-5-28-2 iCloud for Windows 7.12 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-5-28-1 iTunes for Windows 12.9.5 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] XSS in SSI printenv command – Apache Tomcat – CVE-2019-0221 (Nightwatch Cybersecurity Research <research@...htwatchcybersecurity.com>)
[FD] Anviz M3 RFID Access Control security issues (Marco <security@...lab.it>)

52 messages

Powered by blists - more mailing lists