full-disclosure mailing list - 2019/09

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2019/09

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹
²	³ 7	⁴ 1	⁵ 2	⁶ 2	⁷	⁸
⁹ 7	¹⁰ 3	¹¹	¹² 1	¹³ 4	¹⁴	¹⁵
¹⁶	¹⁷	¹⁸ 1	¹⁹	²⁰ 1	²¹	²²
²³ 1	²⁴ 2	²⁵ 2	²⁶ 1	²⁷ 10	²⁸	²⁹
³⁰

Messages by day:

September 3 (7 messages)

[FD] Wolters Kluwer TeamMate+ – Cross-Site Request Forgery (CSRF) vulnerability (Bhdresh <bhdresh@...il.com>)
[FD] ZeroNights 2019 (CFP ZeroNights <cfp@...onights.org>)
[FD] Totaljs CMS authenticated path traversal (could lead to RCE) (paw <riccardo.krauter@...il.com>)
[FD] Totaljs CMS Insecure Admin Session cookie (paw <riccardo.krauter@...il.com>)
[FD] Totaljs CMS Authenticated Code injection on widget creation (paw <riccardo.krauter@...il.com>)
[FD] Totaljs CMS Broken Access Control on the API call (paw <riccardo.krauter@...il.com>)
[FD] One Identity Defender - Insecure Cryptographic Storage (spicyitalian--- via Fulldisclosure <fulldisclosure@...lists.org>)

September 4 (1 message)

[FD] SEC Consult SA-20190904-0 :: Multiple vulnerabilities in Cisco router series RV34X, RV26X and RV16X (SEC Consult Vulnerability Lab <research@...-consult.c…)

September 5 (2 messages)

[FD] AST-2019-004: Crash when negotiating for T.38 with a declined stream ("Asterisk Security Team" <security@...erisk.org>)
[FD] AST-2019-005: Remote Crash Vulnerability in audio transcoding ("Asterisk Security Team" <security@...erisk.org>)

September 6 (2 messages)

[FD] Windows NTFS / Privileged File Access Enumeration (hyp3rlinx <apparitionsec@...il.com>)
Re: [FD] Totaljs CMS authenticated path traversal (could lead to RCE) (paw <riccardo.krauter@...il.com>)

September 9 (7 messages)

[FD] Dabman & Imperial (i&d) Web Radio Devices - Undocumented Telnet Backdoor & Command Execution Vulnerability (Vulnerability Lab <research@...nerability-lab.…)
[FD] NtFileSins v2 / Windows NTFS Privileged File Access Enumeration Tool (hyp3rlinx <apparitionsec@...il.com>)
Re: [FD] CVE 2019-13224 (UAF in PHP and Ruby regex lib) (Marcin Kozlowski <marcinguy@...il.com>)
[FD] CA20190904-01: Security Notice for CA Common Services Distributed Intelligence Architecture (DIA) (Kevin Kotas via Fulldisclosure <fulldisclosure@...lists…)
[FD] Core FTP LE Version 2.2, build 1935 - Local Buffer Overflow (SEH Unicode) (Debashis Pal <debashis.pals@...il.com>)
[FD] CVE-2018-18809 Path traversal in Tibco JasperSoft (Elar Lang <elarlang@...il.com>)
[FD] NtFileSins v2.1 / Windows NTFS Privileged File Access Enumeration Tool (hyp3rlinx <apparitionsec@...il.com>)

September 10 (3 messages)

[FD] Multiple Reflected Cross-site Scripting Vulnerabilities in OpenEdx version Ironwood.1 (Daniel Bishtawi <daniel@...sparker.com>)
[FD] [CVE-2019-12517] SlickQuiz for Wordpress 1.3.7.1 "/wp-admin/admin.php?page=slickquiz" Multiple Stored XSS (Info <info@...security.com>)
[FD] [CVE-2019-12516] SlickQuiz for Wordpress 1.3.7.1 "/wp-admin/admin.php?page=slickquiz-*" Multiple Authenticated SQL Injections (Info <info@...security.com>)

September 12 (1 message)

[FD] SEC Consult SA-20190912-0 :: Stored and reflected XSS vulnerabilities in LimeSurvey (SEC Consult Vulnerability Lab <research@...-consult.com>)

September 13 (4 messages)

[FD] phpMyAdmin 4.9.0.1 - Cross-Site Request Forgery (Manuel Garcia Cardenas <advidsec@...il.com>)
[FD] FTPShell client 6.74 - Local Buffer Overflow (SEH) (Debashis Pal <debashis.pals@...il.com>)
[FD] Piwigo - Version 2.9.5 [CVE-2019-13363, CVE-2019-13364 ] (rant <rodolfo.tavares@...pest.com.br>)
[FD] Insecure tmpdir() use in dbtoepub.rb in docbook / xslt10-stylesheets (Shlomi Fish <shlomif@...il.com>)

September 18 (1 message)

[FD] SEC Consult SA-20190918-0 :: Reflected Cross-Site Scripting (XSS) in Oracle Mojarra JSF (SEC Consult Vulnerability Lab <research@...-consult.com>)

September 20 (1 message)

[FD] Reflected XSS – HRworks Login (v1.16.1) (Georg Ph E Heise via Fulldisclosure <fulldisclosure@...lists.org>)

September 23 (1 message)

[FD] Bug Bounty Competition 2019 (Vulnerability Lab <research@...nerability-lab.com>)

September 24 (2 messages)

[FD] XSSer v.1.8[1] - "The Hive!" released (psy <epsylon@...eup.net>)
[FD] vBulletin 5.x 0day pre-auth RCE exploit (i0su9z+32fpome4pivgiwtzjw--- via Fulldisclosure <fulldisclosure@...lists.org>)

September 25 (2 messages)

[FD] [CVE-2019-16253] Privilege Escalation in Samsung Mobile Android SamsungTTS Component ("flanker" <i@...nker017.me>)
[FD] [CVE-2019-14783] Arbitrary file create with system-app privilege in Samsung Mobile Android FotaAgent Component ("flanker" <i@...nker017.me>)

September 26 (1 message)

[FD] SEC Consult SA-20190926-0 :: Multiple SQL Injection vulnerabilities in eBrigade (SEC Consult Vulnerability Lab <research@...-consult.com>)

September 27 (10 messages)

[FD] DOM based XSS (Login page) in "GFI Kerio Control" Firewalls v9.3.0 / CVE-2019-16414 - working exploit attached (Michael Eissele <Michael.Eissele@...nSyste…)
[FD] APPLE-SA-2019-9-26-1 iOS 12.4.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-9-26-2 macOS Mojave 10.14.6 Supplemental Update 2, Security Update 2019-005 High Sierra, Security Up… (Apple Product Security via Fulldisclosu…)
[FD] APPLE-SA-2019-9-26-4 Safari 13 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-9-26-3 iOS 13 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-9-26-5 watchOS 6 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-9-26-6 tvOS 13 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-9-26-7 Xcode 11.0 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-9-26-8 iOS 13.1 and iPadOS 13.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-9-26-9 Safari 13.0.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)

45 messages

Powered by blists - more mailing lists