full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2019/12

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹
² 1	³ 8	⁴ 1	⁵	⁶ 6	⁷	⁸
⁹	¹⁰ 4	¹¹	¹² 1	¹³ 14	¹⁴	¹⁵
¹⁶	¹⁷ 1	¹⁸	¹⁹ 1	²⁰	²¹	²²
²³	²⁴	²⁵	²⁶	²⁷	²⁸	²⁹
³⁰	³¹

Messages by day:

December 2 (1 message)

[FD] SEC Consult SA-20191202-0 :: Multiple Critical Vulnerabilities in SALTO ProAccess SPACE (SEC Consult Vulnerability Lab <research@...-consult.com>)

December 3 (8 messages)

[FD] SEC Consult SA-20191203-0 :: Multiple vulnerabilites in Fronius Solar Inverter Series (SEC Consult Vulnerability Lab <research@...-consult.com>)
[FD] Microsoft Excel 2016 v1901 / Import Error XML External Entity Injection (hyp3rlinx <apparitionsec@...il.com>)
[FD] Microsoft Visual Studio 2008 Express IDE / XML External Entity Injection (hyp3rlinx <apparitionsec@...il.com>)
[FD] Microsoft Windows Media Center / XXE MotW Bypass (Anniversary Edition) (hyp3rlinx <apparitionsec@...il.com>)
[FD] Reflected XSS in CSS Hero (v.4.0.3) (Ho oper Ca ry <cary.e.hooper@...il.com>)
[FD] XXE in BMC Smart Reporting 7.3 20180418 - CVE-2019-11216 (david herrero <david.herrero.pena@...il.com>)
[FD] CarolinaCon 16 CFP is now OPEN (Carolina Con <presenters@...olinacon.org>)
[FD] Windows Kernel DirectX - Local Denial Of Service (Victor Portal Gonzalez <vportalg@...il.com>)

December 4 (1 message)

[FD] [KIS-2019-10] YouPHPTube <= 7.7 (getChat.json.php) SQL Injection Vulnerability (Egidio Romano <research@...mainsecurity.com>)

December 6 (6 messages)

[FD] External Service Interaction (DNS) on Skype for Business (Alphan YAVAS <alphan.yv@...il.com>)
[FD] Symantec Endoint Security LPE CVE-2019-12750 (Kyriakos Economou <keconomou@...titude.com>)
[FD] SiteVision Remote Code Execution (Oscar Hjelm <Oscar.Hjelm@...ercom.com>)
[FD] SiteVision Insufficient Module Access Control (Oscar Hjelm <Oscar.Hjelm@...ercom.com>)
[FD] Authentication vulnerabilities in OpenBSD (Qualys Security Advisory <qsa@...lys.com>)
[FD] [AIT-SA-20191129-01] CVE-2019-16885: Unauthenticated remote code execution in OkayCMS (sec-advisory <sec-advisory@....ac.at>)

December 10 (4 messages)

[FD] CA20191209-01: Security Notice for CA Nolio (Release Automation) (Kevin Kotas via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] CVE-2019-18347 Persistent Cross-Site Scripting (XSS) vulnerability in DAViCal CalDAV Server (Rick Verdoes via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] CVE-2019-18346 Cross-Site Request Forgery (CSRF) vulnerability in DAViCal CalDAV Server (Rick Verdoes via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] CVE-2019-18345 Reflected Cross-Site Scripting (XSS) vulnerability in DAViCal CalDAV Server (Rick Verdoes via Fulldisclosure <fulldisclosure@...lists.org>)

December 12 (1 message)

[FD] SEC Consult SA-20191211-0 :: File Extension Spoofing in Windows Defender Antivirus (SEC Consult Vulnerability Lab <research@...-consult.com>)

December 13 (14 messages)

[FD] CVE-2019-12750 - Exploitation Write-ups (Kyriakos Economou <keconomou@...titude.com>)
[FD] CA20191210-01: Security Notice for CA Automic Sysload (Ken Williams via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-12-10-1 iOS 13.3 and iPadOS 13.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-12-10-2 iOS 12.4.4 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-12-10-4 watchOS 5.3.4 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-12-10-3 macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierr… (Apple Product Security via Fulldisclosu…)
[FD] APPLE-SA-2019-12-10-5 tvOS 13.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-12-10-6 Safari 13.0.4 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-12-10-7 Xcode 11.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2019-12-10-8 watchOS 6.1.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Local Privilege Escalation in OpenBSD's dynamic loader (CVE-2019-19726) (Qualys Security Advisory <qsa@...lys.com>)
[FD] Stored Cross-Site Scripting in Serv-U FTP Server (Richard Tan via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] CSV injection vulnerability in SolarWinds Serv-U FTP Server (Richard Tan via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Squiz Matrix CMS <= 5.5.3.2 - Multiple Issues may lead to Remote Code Execution (Stephen Shkardoon <stephen@...ecurity.co.nz>)

December 17 (1 message)

[FD] D-Link DIR-615 — Vertical Prviliege Escalation (Sanyam Chawla <infosecsanyam@...il.com>)

December 19 (1 message)

[FD] Deutsche Bahn Ticket Vending Machine Windows XP - Local Kiosk Privilege Escalation Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

37 messages