full-disclosure mailing list - 2019/06

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2019/06

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹	²
³	⁴	⁵	⁶	⁷	⁸	⁹
¹⁰	¹¹ 18	¹²	¹³ 1	¹⁴ 7	¹⁵	¹⁶
¹⁷	¹⁸ 3	¹⁹	²⁰	²¹ 1	²²	²³
²⁴ 14	²⁵ 4	²⁶	²⁷	²⁸ 1	²⁹	³⁰

Messages by day:

June 11 (18 messages)

[FD] Telus Actiontec T2200H WiFi Credential Disclosure (Andrew Klaus <andrew@...aus.ca>)
[FD] [CVE-2018-15555 / 15556] Telus Actiontec WEB6000Q Local Privilege Escalation (Andrew Klaus <andrew@...aus.ca>)
[FD] [CVE-2018-15557] Telus Actiontec WEB6000Q Remote Privilege Escalation (Andrew Klaus <andrew@...aus.ca>)
[FD] Telus Actiontec WEB6000Q Denial of Service of Management Interface (Andrew Klaus <andrew@...aus.ca>)
[FD] Telus Actiontec T2200H Serial Number Information Disclosure (Andrew Klaus <andrew@...aus.ca>)
[FD] Telus Actiontec WEB6000Q Serial Number Information Disclosure (Andrew Klaus <andrew@...aus.ca>)
[FD] [CVE-2019-12789] Telus Actiontec T2200H Local Privilege Escalation (Andrew Klaus <andrew@...aus.ca>)
[FD] [ Tool ] Linux kernel module generator for custom rules with Netfilter hooking. (Antonio Costa <coolerlair@...il.com>)
[FD] Multiple Cross-site Scripting Vulnerabilities in Shopware 5.5.6 (Daniel Bishtawi <daniel@...sparker.com>)
[FD] Rapid7’s Windows InsightIDR Agent: Local Privilege Escalation (Florian Bogner <florian@...-itsecurity.at>)
[FD] Goby 1.0 Released! (goby goby <gobysec@...il.com>)
[FD] [SYSS-2019-007]: Inateck 2.4 GHz Wireless Presenter WP1001 - Keystroke Injection Vulnerability (Matthias Deeg <matthias.deeg@...s.de>)
[FD] [SYSS-2019-008]: Inateck 2.4 GHz Wearable Wireless Presenter WP2002 - Keystroke Injection Vulnerability (Matthias Deeg <matthias.deeg@...s.de>)
[FD] [SYSS-2019-015]: Logitech R700 Laser Presentation Remote - Keystroke Injection Vulnerability (Matthias Deeg <matthias.deeg@...s.de>)
[FD] New Version of Hyperion (PE runtime encrypter) released. (Levon Kayan <noptrix@...lsecurity.net>)
[FD] APPLE-SA-2019-5-30-1 AirPort Base Station Firmware Update 7.9.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] The Return of the WIZard: RCE in Exim (CVE-2019-10149) (Qualys Security Advisory <qsa@...lys.com>)
[FD] Disclosing a security vulnerability (raki ben hamouda <raki7bh@...il.com>)

June 13 (1 message)

[FD] SEC Consult SA-20190612-0 :: Multiple vulnerabilities in WAGO 852 Industrial Managed Switch Series (SEC Consult Vulnerability Lab <research@...-consult.co…)

June 14 (7 messages)

[FD] [SE-2019-01] Java Card vulnerabilities (post shutdown release) (Adam Gowdiak <contact@...urity-explorations.com>)
[FD] X41 D-Sec GmbH Security Advisory X41-2019-001: Heap-based buffer overflow in Thunderbird (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)
[FD] X41 D-Sec GmbH Security Advisory X41-2019-002: Heap-based buffer overflow in Thunderbird (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)
[FD] X41 D-Sec GmbH Security Advisory X41-2019-003: Stack-based buffer overflow in Thunderbird (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)
[FD] X41 D-Sec GmbH Security Advisory X41-2019-004: Type confusion in Thunderbird (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)
[FD] [Project] Open frame to the main. (hacksomeheavymetal via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] DSA-2019-092: Dell EMC Avamar Security Update for ADMe Web UI Vulnerability (<secure@...l.com>)

June 18 (3 messages)

[FD] BlogEngine.NET Directory traversal + RCE (aaron bishop <abishop@...ux.com>)
[FD] Microsoft Word (2016) / Deceptive File Reference Vuln (hyp3rlinx <apparitionsec@...il.com>)
[FD] CVE-2019-12323 / HC10 HC.Server Service 10.14 / Remote Invalid Pointer Write (hyp3rlinx <apparitionsec@...il.com>)

June 21 (1 message)

[FD] PC-Doctor Toolbox before 7.3 has an Uncontrolled Search Path Element (Micah Wiseley <micah@...doctor.com>)

June 24 (14 messages)

[FD] BlogEngine.Net XXE issues (aaron bishop <abishop@...ux.com>)
[FD] Quarking Password Manager 3.1.84 - Clickjacking Vulnerability (<gionreale@...anota.com>)
Re: [FD] Multiple Cross-site Scripting Vulnerabilities in Shopware 5.5.6 (Henri Salo <henri@...v.fi>)
[FD] XL-19-004 - ABB IDAL FTP Server Uncontrolled Format String Vulnerability (xen1thLabs <xen1thLabs@...kmatter.ae>)
[FD] XL-19-005 - ABB HMI Absence of Signature Verification Vulnerability (xen1thLabs <xen1thLabs@...kmatter.ae>)
[FD] XL-19-007 - ABB IDAL FTP Server Buffer Overflow Vulnerability (xen1thLabs <xen1thLabs@...kmatter.ae>)
[FD] XL-19-006 - ABB HMI Outdated Software Components (xen1thLabs <xen1thLabs@...kmatter.ae>)
[FD] XL-19-008 - ABB IDAL FTP Server Path Traversal Vulnerability (xen1thLabs <xen1thLabs@...kmatter.ae>)
[FD] XL-19-009 - ABB HMI Hardcoded Credentials Vulnerability (xen1thLabs <xen1thLabs@...kmatter.ae>)
[FD] XL-19-010 - ABB IDAL HTTP Server Authentication Bypass Vulnerability (xen1thLabs <xen1thLabs@...kmatter.ae>)
[FD] XL-19-011 - ABB IDAL HTTP Server Stack-Based Buffer Overflow Vulnerability (xen1thLabs <xen1thLabs@...kmatter.ae>)
[FD] APPLE-SA-2019-6-20-1 AirPort Base Station Firmware Update 7.8.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Fortinet FortiCam FCM-MB40 Vulnerabilities (XORcat <xorcat@...eup.net>)
[FD] XL-19-012 - ABB IDAL HTTP Server Uncontrolled Format String Vulnerability (xen1thLabs <xen1thLabs@...kmatter.ae>)

June 25 (4 messages)

[FD] BlogEngine.NET 3.3.7 and earlier Directory Traversal + Listing (aaron bishop <abishop@...ux.com>)
[FD] Webex meetings are vulnerable to mitm (RDX Guy <rdx.guy@...il.com>)
[FD] AMD-SEV: Platform DH key recovery via invalid curve attack (CVE-2019-9836) (Cfir Cohen via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] D-LINK admin password in plain text if "user" or "User" use blank password (Marty <noshishi8@...il.com>)

June 28 (1 message)

[FD] [XSS] IFrame Buster tools and news (Zmx <larouanne@...il.com>)

49 messages

Powered by blists - more mailing lists