full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2019/11

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹ 15	²	³
⁴ 1	⁵ 1	⁶	⁷	⁸ 1	⁹	¹⁰
¹¹	¹² 1	¹³	¹⁴	¹⁵ 12	¹⁶	¹⁷
¹⁸ 1	¹⁹ 1	²⁰	²¹ 3	²² 1	²³	²⁴
²⁵ 1	²⁶ 5	²⁷ 1	²⁸	²⁹	³⁰ 5

Messages by day:

November 1 (15 messages)

[FD] SEC Consult SA-20191029-0 :: Authentication Bypass in eIDAS-Node (European #eGovernment cross-border authenticatio… (SEC Consult Vulnerability Lab <research…)
[FD] [RT-SA-2019-013] Unsafe Storage of Credentials in Carel pCOWeb HVAC (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[FD] [RT-SA-2019-014] Unauthenticated Access to Modbus Interface in Carel pCOWeb HVAC (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[FD] RootedCON 2020 Call For Papers is open! (omarbv@...eup.net)
[FD] APPLE-SA-2019-10-29-7 Additional information for APPLE-SA-2019-9-26-4 Safari 13 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-10-29-1 iOS 13.2 and iPadOS 13.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-10-29-5 Safari 13.0.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-10-29-9 Additional information for APPLE-SA-2019-9-26-6 tvOS 13 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-10-29-6 Additional information for APPLE-SA-2019-9-26-3 iOS 13 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-10-29-8 Additional information for APPLE-SA-2019-9-26-5 watchOS 6 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-10-29-4 watchOS 6.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-10-29-10 Additional information for APPLE-SA-2019-10-07-1 macOS Catalina 10.15 (Apple Product Security via Fulldisclosure <fulldisclosure@se…)
[FD] APPLE-SA-2019-10-29-2 macOS Catalina 10.15.1, Security Update 2019-001 Mojave, Security Update 2019-006 High Sierr… (Apple Product Security via Fulldisclosu…)
[FD] APPLE-SA-2019-10-29-11 Additional information for APPLE-SA-2019-9-26-8 iOS 13.1 and iPadOS 13.1 (Apple Product Security via Fulldisclosure <fulldisclosure…)
[FD] APPLE-SA-2019-10-29-3 tvOS 13.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)

November 4 (1 message)

[FD] APPLE-SA-2019-11-01-1 Xcode 11.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)

November 5 (1 message)

[FD] Multiple Cross-site Scripting Vulnerabilities in ilchCMS 2.1.23 (Daniel Bishtawi <daniel@...sparker.com>)

November 8 (1 message)

[FD] Insecure Defaults in Adobe’s Mobile SDKs (Nightwatch Cybersecurity Research <research@...htwatchcybersecurity.com>)

November 12 (1 message)

[FD] Minor security issue in punbb with SQLite (Georgi Guninski <gguninski@...il.com>)

November 15 (12 messages)

[FD] Vulnerability Disclosure and CVE assign (Alphan YAVAS <alphan.yv@...il.com>)
[FD] ScanGuard Antivirus (latest version) / Insecure Permissions (hyp3rlinx <apparitionsec@...il.com>)
[FD] Getting the server ip from a hosted XenForo CMS (Hacxx Under 2 <hacxx20@...il.com>)
[FD] Centraleyezer: Unrestricted File Upload -[CVE-2019-12271] (infinitybuzz via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Centraleyezer: Stored XSS using HTML Entities — [CVE-2019–12299] (infinitybuzz via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Centraleyezer: Unrestricted File Upload — [CVE-2019–12311] (infinitybuzz via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] WordPress Plugin Social Photo Gallery 1.0 - Remote Code Execution (Prestigia <info@...stigiaonline.com>)
[FD] Stored XSS Vulnerability on TP-Link Archer VR300 v1 (okan coskun <okancoskun2@...il.com>)
[FD] Raritan CommandCenter Secure Gateway XML External Entity < 8.0 (okan coskun <okancoskun2@...il.com>)
[FD] Raritan CommandCenter Secure Gateway XSS Vulnerability on < 8.0 (okan coskun <okancoskun2@...il.com>)
[FD] c0c0n 2020 Middle East| Abu Dhabhi | The cy0ps c0n - CFP & CFW is Open ! (Prajwal Panchmahalkar <prajwal.hy468@...il.com>)
[FD] [AIT-SA-20191112-01] CVE-2019-10143: Privilege Escalation via Logrotate in FreeRadius (sec-advisory <sec-advisory@....ac.at>)

November 18 (1 message)

[FD] XSSer v.1.8[2] - "The Hiv3!" released (psy <epsylon@...eup.net>)

November 19 (1 message)

[FD] CVE-2019-16758 Lexmark Services Monitor 2.27.4.0.39 Directory Traversal (Kevin R <krandall2013@...il.com>)

November 21 (3 messages)

[FD] AST-2019-006: SIP request can change address of a SIP peer. ("Asterisk Security Team" <security@...erisk.org>)
[FD] AST-2019-007: AMI user could execute system commands. ("Asterisk Security Team" <security@...erisk.org>)
[FD] AST-2019-008: Re-invite with T.38 and malformed SDP causes crash. ("Asterisk Security Team" <security@...erisk.org>)

November 22 (1 message)

[FD] arbitrary file capture in Kaspersky Total Security 2019 (p3rd1d0s via Fulldisclosure <fulldisclosure@...lists.org>)

November 25 (1 message)

[FD] SEC Consult SA-20191125-0 :: FortiGuard XOR Encryption in Multiple Fortinet Products (SEC Consult Vulnerability Lab <research@...-consult.com>)

November 26 (5 messages)

[FD] [CFP] Security BSides Ljubljana 0x7E4 | April 4, 2020 (Andraz Sraka <a@...bix.org>)
[FD] Anhui Huami Mi Fit Android Application - Unencrypted Update Check (David Coomber <davidcoomber.infosec@...il.com>)
[FD] pari/gp on debian stable allow arbitrary file write (Georgi Guninski <gguninski@...il.com>)
[FD] Vulnerability in MiBox3 ("Bug Reporter" <helloworldxp@....com>)
[FD] CVE-2019-11932 (double free in libpl_droidsonroids_gif) many apps vulnerable (Marcin Kozlowski <marcinguy@...il.com>)

November 27 (1 message)

Re: [FD] SEC Consult SA-20191125-0 :: FortiGuard XOR Encryption in Multiple Fortinet Products (SEC Consult Vulnerability Lab <research@...-consult.com>)

November 30 (5 messages)

[FD] NAPC Xinet Elegant 6 Asset Library Web Interface v6.1.655 / Pre-Auth SQL Injection 0Day (hyp3rlinx <apparitionsec@...il.com>)
[FD] [SYSS-2019-027]: Inateck BCST-60 Barcode Scanner - Keystroke Injection Vulnerability (CVE-2019-12503) (Matthias Deeg <matthias.deeg@...s.de>)
[FD] CVE-2019-18922; Directory Traversal; Allied Telesis AT-GS950/8 until Firmware AT-S107 V.1.1.3 [1.00.047] ("Sprenger, Nicolas Hendrik" <Nicolas.H.Sprenger@…)
Re: [FD] Anhui Huami Mi Fit Android Application - Unencrypted Update Check (Tim <strazz@...il.com>)
[FD] Max Secure Anti Virus Plus - 19.0.4.020 / CVE-2019-19382 Insecure Permissions (hyp3rlinx <apparitionsec@...il.com>)

49 messages