full-disclosure mailing list - 2019/07

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2019/07

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹ 1	²	³	⁴	⁵ 2	⁶	⁷
⁸	⁹ 10	¹⁰	¹¹ 2	¹² 1	¹³	¹⁴
¹⁵	¹⁶	¹⁷ 3	¹⁸	¹⁹ 1	²⁰	²¹
²²	²³ 7	²⁴	²⁵	²⁶ 12	²⁷	²⁸
²⁹	³⁰	³¹ 1

Messages by day:

July 1 (1 message)

[FD] [RT-SA-2019-012] Information Disclosure in REDDOXX Appliance (RedTeam Pentesting GmbH <release@...team-pentesting.de>)

July 5 (2 messages)

[FD] Microsoft File Checksum Integrity Verifier "fciv.exe" v2.05 / DLL Hijack Arbitrary Code Execution (hyp3rlinx <apparitionsec@...il.com>)
[FD] [SYSS-2019-021]: WolfVision Cynap - Use of Hard-coded Cryptographic Key (CWE-321) (Matthias Deeg <matthias.deeg@...s.de>)

July 9 (10 messages)

[FD] Razer Synapse 3, Laptops Ship with Re-used Root Certificate with Private Key (No One <anon581923@...il.com>)
[FD] Polycom RealPresence Touch device vulnerable to Slowloris attack (hardware version 7; OS version 2.1.2-255) (Eitan shav <eitan@...adel.co.il>)
[FD] KEYNTO Team Password Manager 1.5.0 - Cross Site Scripting [CVE-2019-13380] (<gionreale@...anota.com>)
[FD] Zoom Zero Day: 4+ Million Webcams & maybe an RCE? Just get them to visit your website! (Jonathan Leitschuh <jonathan.leitschuh@...il.com>)
[FD] UPDATE: [SYSS-2019-021]: WolfVision Cynap - Use of Hard-coded Cryptographic Key (CWE-321) [CVE-2019-13352] (Matthias Deeg <matthias.deeg@...s.de>)
[FD] Vulnerabilities in TP-Link TL-WR940N and TL-WR941ND (MustLive <mustliveua@...il.com>)
[FD] Cisco Data Center Manager multiple vulns; RCE as root (Pedro Ribeiro <pedrib@...il.com>)
[FD] Two vulnerabilities found in Sony BRAVIA Smart TVs (xen1thLabs <xen1thLabs@...kmatter.ae>)
[FD] PowerPanel Business Edition 3.4.0 - Cross Site Request Forgery (Joey Lane via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Mozilla's MSI installers: FUBAR (that's spelled "fucked-up beyond all repair") ("Stefan Kanthak" <stefan.kanthak@...go.de>)

July 11 (2 messages)

[FD] AST-2019-002: Remote crash vulnerability with MESSAGE messages ("Asterisk Security Team" <security@...erisk.org>)
[FD] AST-2019-003: Remote Crash Vulnerability in chan_sip channel driver ("Asterisk Security Team" <security@...erisk.org>)

July 12 (1 message)

[FD] Reflected Cross-site Scripting Vulnerability in Ponzu CMS 0.9.4 (Daniel Bishtawi <daniel@...sparker.com>)

July 17 (3 messages)

Re: [FD] Microsoft Compiled HTML Help / Uncompiled .chm File XML External Entity (hyp3rlinx <apparitionsec@...il.com>)
[FD] CVE-2019-13577 / MAPLE Computer WBT SNMP Administrator v2.0.195.15 / Unauthenticated Remote Buffer Overflow Code Execu… (hyp3rlinx <apparitionsec@...il.com>)
[FD] CVE-2019-2107 a.k.a "Hevcfright" Proof of Concept exploit (Denial of Service PoC) (Marcin Kozlowski <marcinguy@...il.com>)

July 19 (1 message)

Re: [FD] local privilege escalation via CDE dtprintinfo (Marco Ivaldi <marco.ivaldi@...iaservice.net>)

July 23 (7 messages)

[FD] Two vulnerabilities found in MikroTik's RouterOS (Q C <cq674350529@...il.com>)
[FD] Tufin SecureChange uses Richfaces 4.3.5, vulnerable to CVE-2015-0279 (unauthenticated RCE) (<csirt@...sscom.com>)
[FD] APPLE-SA-2019-7-22-2 macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra (Apple Product Security via Fulldisclosur…)
[FD] APPLE-SA-2019-7-22-1 iOS 12.4 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-7-22-4 watchOS 5.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-7-22-3 Safari 12.1.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-7-22-5 tvOS 12.4 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)

July 26 (12 messages)

[FD] Trend Micro Deep Discovery Inspector IDS / Percent Encoding IDS Bypass (hyp3rlinx <apparitionsec@...il.com>)
[FD] Whonix Anonymous OS 15 Released (bo0od <bo0od@...eup.net>)
[FD] Code Evaluation Vulnerability in Zurmo 3.2.6 (Daniel Bishtawi <daniel@...sparker.com>)
[FD] Reflected Cross-site Scripting Vulnerability in Zurmo 3.2.6 (Daniel Bishtawi <daniel@...sparker.com>)
[FD] Out of Band Code Evaluation Vulnerability in Zurmo 3.2.6 (Daniel Bishtawi <daniel@...sparker.com>)
[FD] Stored Cross-site Scripting Vulnerability in Zurmo 3.2.6 (Daniel Bishtawi <daniel@...sparker.com>)
[FD] Frame Injection Vulnerability in Zurmo 3.2.6 (Daniel Bishtawi <daniel@...sparker.com>)
[FD] Open Redirection Vulnerability in Zurmo 3.2.6 (Daniel Bishtawi <daniel@...sparker.com>)
[FD] [SYSS-2019-004]: ABUS Secvest (FUAA50000) - Message Transmission - Unchecked Error Condition (CWE-391) (CVE-2019-142… (Matthias Deeg <matthias.deeg@...s.de>)
[FD] APPLE-SA-2019-7-23-3 iCloud for Windows 10.6 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-7-23-1 iCloud for Windows 7.13 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-7-23-2 iTunes for Windows 12.9.6 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)

July 31 (1 message)

[FD] VTS19-002: Multiple Vulnerabilities in Veritas Resiliency Platform (VRP) (David Dillard <David.Dillard@...itas.com>)

40 messages

Powered by blists - more mailing lists