full-disclosure mailing list - 2019/08

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2019/08

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹	² 2	³	⁴
⁵	⁶	⁷ 2	⁸	⁹ 3	¹⁰	¹¹
¹²	¹³ 2	¹⁴	¹⁵	¹⁶ 8	¹⁷	¹⁸
¹⁹	²⁰	²¹ 1	²² 1	²³	²⁴	²⁵
²⁶ 8	²⁷ 4	²⁸	²⁹	³⁰ 6	³¹

Messages by day:

August 2 (2 messages)

[FD] Microsoft Windows PowerShell / Unsanitized Filename Command Execution (hyp3rlinx <apparitionsec@...il.com>)
[FD] Avira Free Security Suite 2019 - Exploiting Arbitrary File Writes for Local Elevation of Privilege (filipe <filipe.xavier@...pest.com.br>)

August 7 (2 messages)

[FD] Fortinet FortiRecorder Hardcoded Password (Aaron Blair via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] New Tool - Phishing Simulation (jeny raval <jenyraval@...il.com>)

August 9 (3 messages)

[FD] Mitel 6869i SIP Deskphone 4.2.2032: Unauthenticated Bash Command Injection Vulnerability with Root Priviledges in … (Axel Rengstorf <ar@...ebox-security.de>)
[FD] Dlink-CVE-2019-13101 (Devendra Solanki <devendra0x0@...il.com>)
[FD] Multiple banks - potential risk of an inconsequent client separation (Tim Schughart <t.schughart@...sec-networks.com>)

August 13 (2 messages)

[FD] TortoiseSVN v1.12.1 - Remote Code Execution Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Some interesting facts about gitlab runners (John Doe <johndoetouhou@...il.com>)

August 16 (8 messages)

[FD] Open-Xchange Security Advisory 2019-08-15 (Open-Xchange GmbH via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Open-Xchange Security Advisory 2019-08-15 (Open-Xchange GmbH via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-8-13-1 Additional information for APPLE-SA-2019-7-22-2 macOS Mojave 10.14.6, Security Update 2019-0… (Apple Product Security via Fulldisclosu…)
[FD] APPLE-SA-2019-8-13-2 Additional information for APPLE-SA-2019-7-22-1 iOS 12.4 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-8-13-3 Additional information for APPLE-SA-2019-7-22-4 watchOS 5.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-8-13-4 Additional information for APPLE-SA-2019-7-22-5 tvOS 12.4 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-08-13-5 SwiftNIO HTTP/2 1.5.0 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] No cON Name 2019 Congress CFP (sqlsec--- via Fulldisclosure <fulldisclosure@...lists.org>)

August 21 (1 message)

[FD] SEC Consult SA-20190821-0 :: Unauthenticated sensitive information leakage in Zoho Corporation ManageEngine Servic… (SEC Consult Vulnerability Lab <research…)

August 22 (1 message)

[FD] SEC Consult SA-20190822-0 :: Multiple Vulnerabilities in OpenPGP.js (SEC Consult Vulnerability Lab <research@...-consult.com>)

August 26 (8 messages)

[FD] [CFP] Bsides Lisbon 2019 (Claudio Andre <claudioandre@...il.com>)
[FD] CVE-2019-10071: Timing Attack in HMAC Verification in Apache Tapestry (David Tomaschik via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] CoreFTP Server FTP / SFTP Server v2 - Build 674 SIZE Directory Traversal (Metasploit) Exploit (Kevin R <krandall2013@...il.com>)
[FD] CoreFTP Server FTP / SFTP Server v2 - Build 674 MDTM Directory Traversal (Metasploit) Exploit (Kevin R <krandall2013@...il.com>)
[FD] Realtek Managed Switch Controller RTL83xx (bashis <mcw@...mail.eu>)
[FD] [CVE-2019-15150] CSRF in MediaWiki extension OAuth2 Client 0.3 (Justin Bull <me@...tinbull.ca>)
[FD] Unquoted Path - Trend Micro (Silton Renato Pereira dos Santos <silton.santos@...pest.com.br>)
[FD] Hard-coded credentials on ProGrade/Lierda Grill Temperature Monitor [CVE-2019-15304] (tim@...atti.com)

August 27 (4 messages)

[FD] APPLE-SA-2019-8-26-1 iOS 12.4.1 (Akila Srinivasan via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-8-26-3 tvOS 12.4.1 (Akila Srinivasan via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-8-26-2 macOS Mojave 10.14.6 Supplemental Update (Akila Srinivasan via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Multiple CSRF Vulnerabilities in Django CRM 0.2.1 (Daniel Bishtawi <daniel@...sparker.com>)

August 30 (6 messages)

[FD] SEC Consult SA-20190829-0 :: Hardcoded FTP Credentials in Zyxel NWA/NAP/WAC wireless access point series (SEC Consult Vulnerability Lab <research@...-cons…)
[FD] SEC Consult SA-20190829-1 :: External DNS Requests in Zyxel USG/UAG/ATP/VPN/NXC series (SEC Consult Vulnerability Lab <research@...-consult.com>)
[FD] [SBA-ADV-20190305-01] CVE-2019-13564: Ping Identity Agentless Integration Kit <1.5 Reflected Cross-site Scripting … (SBA Research Advisory <advisory@...-res…)
[FD] GGPowerShell / Windows PowerShell Unsanitized RCE File Tool (hyp3rlinx <apparitionsec@...il.com>)
[FD] New BlackArch Linux ISOs + OVA Image (2019.09.01)with 2350 Tools released (Black Arch <blackarchlinux@...il.com>)
[FD] Multiple vulns in Cisco UCS Director: from unauth remote access to code execution as root (Pedro Ribeiro <pedrib@...il.com>)

37 messages

Powered by blists - more mailing lists