full-disclosure mailing list - 2019/10

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2019/10

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 5	²	³	⁴ 3	⁵	⁶
⁷ 2	⁸ 7	⁹	¹⁰ 7	¹¹ 5	¹²	¹³
¹⁴ 1	¹⁵	¹⁶ 5	¹⁷	¹⁸ 7	¹⁹	²⁰
²¹	²² 2	²³	²⁴	²⁵	²⁶	²⁷
²⁸	²⁹	³⁰	³¹

Messages by day:

October 1 (5 messages)

[FD] Fortinet FortiSIEM - Improper Certificate Validation (Andrew Klaus <andrew.klaus@...era.ca>)
[FD] Metasploit Pro Includes a 4 year old Java Runtime with 223 vulnerabilities 53 being critical (Anthony Cicalla <anthony.cicalla@...arwatercompliance.com>)
[FD] Duplicator Pro <= 1.3.14: Local Information Disclosure (Fulldisclosure Team <fulldisclosure@...lution-hosting.eu>)
[FD] PDFex: Security weakness in PDF encryption (Jens Müller via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-9-27-1 iOS 13.1.1 and iPadOS 13.1.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)

October 4 (3 messages)

[FD] Bsides Lisbon 2019 Trainings (Claudio Andre <claudioandre@...il.com>)
[FD] CA20190930-01: Security Notice for CA Network Flow Analysis (Kevin Kotas via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] [AIT-SA-20190930-01] CVE-2019-15741: Privilege Escalation via Logrotate in Gitlab Omnibus (Wolfgang <lister@...dyourhead.at>)

October 7 (2 messages)

[FD] vBulletin <= 5.5.4 Two SQL Injection Vulnerabilities (Egidio Romano <research@...mainsecurity.com>)
[FD] [KIS-2019-02] vBulletin <= 5.5.4 (updateAvatar) Remote Code Execution Vulnerability (Egidio Romano <research@...mainsecurity.com>)

October 8 (7 messages)

[FD] Password disclosure in the web interface on socomec DIRIS A-40 devices before 48250501 ("TIMMERMAN, Jens" <jens.timmerman@...ars.be>)
[FD] CVE-2019-17128: OmniCenter 12.1.1 – Unauthenticated SQL Injection (Luis Rios <lrios@...umant.com>)
[FD] APPLE-SA-2019-10-07-2 iTunes for Windows 12.10.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-10-07-3 iCloud for Windows 10.7 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-10-07-1 macOS Catalina 10.15 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-10-07-4 iCloud for Windows 7.14 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] RENPHO iOS missing encryption and integrity check (ProSec Security Team <security@...sec-networks.com>)

October 10 (7 messages)

[FD] [KIS-2019-03] SugarCRM <= 9.0.1 Multiple Reflected Cross-Site Scripting Vulnerabilities (Egidio Romano <research@...mainsecurity.com>)
[FD] [KIS-2019-04] SugarCRM <= 9.0.1 Multiple SQL Injection Vulnerabilities (Egidio Romano <research@...mainsecurity.com>)
[FD] [KIS-2019-05] SugarCRM <= 9.0.1 Multiple Broken Access Control Vulnerabilities (Egidio Romano <research@...mainsecurity.com>)
[FD] [KIS-2019-06] SugarCRM <= 9.0.1 Multiple Path Traversal Vulnerabilities (Egidio Romano <research@...mainsecurity.com>)
[FD] [KIS-2019-07] SugarCRM <= 9.0.1 Multiple PHP Code Injection Vulnerabilities (Egidio Romano <research@...mainsecurity.com>)
[FD] [KIS-2019-08] SugarCRM <= 9.0.1 Multiple PHP Object Injection Vulnerabilities (Egidio Romano <research@...mainsecurity.com>)
[FD] [KIS-2019-09] SugarCRM <= 9.0.1 Multiple Phar Deserialization Vulnerabilities (Egidio Romano <research@...mainsecurity.com>)

October 11 (5 messages)

[FD] Multiple Cross-site Scripting Vulnerabilities in Openfire 4.4.1 (Daniel Bishtawi <daniel@...sparker.com>)
[FD] Open-Xchange Security Advisory 2019-10-09 (Martin Heiland via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] [SYSS-2019-033]: Microsoft Designer Bluetooth Desktop - Insufficient Protection of Code (Firmware) and Data (Cryptog… (Matthias Deeg <matthias.deeg@...s.de>)
[FD] [SYSS-2019-034]: Microsoft Surface Keyboard - Insufficient Protection of Code (Firmware) and Data (Cryptographic Key… (Matthias Deeg <matthias.deeg@...s.de>)
[FD] [SYSS-2019-035]: Microsoft Surface Mouse - Insufficient Protection of Code (Firmware) and Data (Cryptographic Key) (Matthias Deeg <matthias.deeg@...s.de>)

October 14 (1 message)

[FD] SEC Consult SA-20191014-0 :: Reflected XSS vulnerability in OpenProject (SEC Consult Vulnerability Lab <research@...-consult.com>)

October 16 (5 messages)

[FD] [CFP] BSides San Francisco – February 2020 (BSidesSF CFP via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Reflected XSS via Broken Link Checker v.1.11.8 WordPress Plugin (Ismail Doe <ismail.sec.dev@...il.com>)
[FD] APPLE-SA-2019-10-11-1 Swift 5.1.1 for Ubuntu (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Tomedo Server - Weak encryption mech. (ProSec Security Team <security@...sec-networks.com>)
[FD] reinersct: receiving annual awards for trivial insecurity (Thegirl Wholearnedtocode <the.girl.who.learned.to.code@...il.com>)

October 18 (7 messages)

[FD] WiKID 2FA Enterprise Server Multiple Issues (Aaron Bishop <aaron@...uritymetrics.com>)
[FD] Information leakage found in FRITZ!OS 6.83 & 6.80 (AVM DSL Router Fritz!Box 7490) [DTC-A-20170323-001] (<CERT@...ekom.de>)
[FD] CA20191015-01: Security Notice for CA Performance Management (Kevin Kotas via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] CVE 2019-2215 Android Binder Use After Free (Marcin Kozlowski <marcinguy@...il.com>)
[FD] CVE-2019-3010 - Local privilege escalation on Solaris 11.x via xscreensaver (Marco Ivaldi <marco.ivaldi@...iaservice.net>)
[FD] Sangoma SBC local sudo user creation vulnerability without authentication - CVE-2019-12147 (Security Team Appsecco via Fulldisclosure <fulldisclosure@...l…)
[FD] Sangoma SBC bypass authentication via argument injection - CVE-2019-12148 (Security Team Appsecco via Fulldisclosure <fulldisclosure@...lists.org>)

October 22 (2 messages)

[FD] Trend Micro Anti-Threat Toolkit (ATTK) <= v1.62.0.1218 Remote Code Execution 0day CVE-2019-9491 (hyp3rlinx <apparitionsec@...il.com>)
[FD] Gift Certificates and More: A complete lack of security (Security Researcher <sresearcher039@...il.com>)

44 messages

Powered by blists - more mailing lists