full-disclosure mailing list - 2020/01

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2020/01

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹	² 2	³ 8	⁴	⁵
⁶	⁷ 5	⁸	⁹	¹⁰	¹¹ 3	¹²
¹³	¹⁴ 3	¹⁵	¹⁶	¹⁷ 8	¹⁸	¹⁹
²⁰	²¹ 3	²² 1	²³ 1	²⁴ 3	²⁵	²⁶
²⁷	²⁸ 1	²⁹	³⁰	³¹

Messages by day:

January 2 (2 messages)

[FD] [RT-SA-2019-015] IceWarp: Cross-Site Scripting in Notes for Contacts (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[FD] [RT-SA-2019-016] IceWarp: Cross-Site Scripting in Notes (RedTeam Pentesting GmbH <release@...team-pentesting.de>)

January 3 (8 messages)

[FD] Microsoft Exchange Server, External Service Interaction (DNS) (Alphan YAVAS <alphan.yv@...il.com>)
[FD] Microsoft Windows .Group File / URL Field Code Execution (hyp3rlinx <apparitionsec@...il.com>)
[FD] New BlackArch Linux ISOs + OVA Image available! (Black Arch <blackarchlinux@...il.com>)
[FD] CA20191218-01: Security Notice for CA Client Automation Agent for Windows (Kevin Kotas via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Open-Xchange Security Advisory 2020-01-02 (Open-Xchange GmbH via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] [TZO-01-2020] AVIRA Generic Malformed Container bypass (ISO) (Thierry Zoller <thierry@...ler.lu>)
[FD] [TZO-02-2020] Kaspersyk Generic Malformed Archive Bypass (ZIP GFlag) (Thierry Zoller <thierry@...ler.lu>)
[FD] [TZO-03-2020] ESET Generic Malformed Archive Bypass (ZIP Compression Information) (Thierry Zoller <thierry@...ler.lu>)

January 7 (5 messages)

[FD] Fortinet FortiSIEM Hardcoded SSH Key (Andrew Klaus <andrew.klaus@...era.ca>)
[FD] Microsoft Windows VCF Card / Mailto Link Denial Of Service (hyp3rlinx <apparitionsec@...il.com>)
[FD] Two vulnerabilities found in MikroTik's RouterOS (Q C <cq674350529@...il.com>)
[FD] Multiple Reflected Cross-site Scripting Vulnerabilities in ERPNext 11.1.47 (Daniel Bishtawi <daniel@...sparker.com>)
[FD] [TZO-04-2020] Bitdefender Generic Malformed Archive Bypass (BZ2) (Thierry Zoller <thierry@...ler.lu>)

January 11 (3 messages)

[FD] [PATCH] (security) launcher: don't attempt to execute arbitrary binaries ("Enrico Weigelt, metux IT consult" <info@...ux.net>)
[FD] [TZO-05-2020] Kaspersky Generic Malformed Archive Bypass (ZIP Compressed Size) (Thierry Zoller <thierry@...ler.lu>)
[FD] [TZO-07-2020] Bitdefender Generic Malformed Archive Bypass (RAR HOST_OS) (Thierry Zoller <thierry@...ler.lu>)

January 14 (3 messages)

[FD] [TZO-08-2020] Bitdefender Generic Malformed Archive Bypass (ZIP GPFLAG) (Thierry Zoller <thierry@...ler.lu>)
[FD] [TZO-06-2020] - Kaspersky Generic Archive Bypass (ZIP FLNMLEN) (Thierry Zoller <thierry@...ler.lu>)
[FD] [TOOL] Permanent SD Card Locker (Read Only) (Thierry Zoller <thierry@...ler.lu>)

January 17 (8 messages)

[FD] CVE-2019-20357 / Trend Micro Security (Consumer) / Persistent Arbitrary Code Execution (hyp3rlinx <apparitionsec@...il.com>)
[FD] CVE-2019-19697 / Trend Micro Security 2019 (Consumer) / Security Bypass Protected Service Tampering (hyp3rlinx <apparitionsec@...il.com>)
[FD] CVE-2020-2656 - Low impact information disclosure via Solaris xlock (Marco Ivaldi <marco.ivaldi@...iaservice.net>)
[FD] CVE-2020-2696 - Local privilege escalation via CDE dtsession (Marco Ivaldi <marco.ivaldi@...iaservice.net>)
Re: [FD] Fortinet FortiSIEM Hardcoded SSH Key (Fortinet PSIRT <psirt@...tinet.com>)
[FD] .diagcab directory traversal leading to arbitrary code execution (Imre Rad <radimre83@...il.com>)
[FD] [TZO-09-2020] - Bitdefender Malformed Archive bypass (RAR Uncompressed Size) (Thierry Zoller <thierry@...ler.lu>)
[FD] [TZO-10-2020] - Bitdefender Malformed Archive bypass (RAR Compression Information) (Thierry Zoller <thierry@...ler.lu>)

January 21 (3 messages)

[FD] Neowise CarbonFTP v1.4 / Insecure Proprietary Password Encryption / CVE-2020-6857 (hyp3rlinx <apparitionsec@...il.com>)
[FD] [REVIVE-SA-2020-001] Revive Adserver Vulnerability (Matteo Beccati via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] CarolinaCon CFP (CarolinaCon <presenters@...olinacon.org>)

January 22 (1 message)

[FD] SEC Consult SA-20200122-0 :: Reflected XSS in ZOHO ManageEngine ServiceDeskPlus (SEC Consult Vulnerability Lab <research@...-consult.com>)

January 23 (1 message)

[FD] SEC Consult SA-20200123-0 :: Cross-Site Request Forgery (CSRF) in Umbraco CMS (SEC Consult Vulnerability Lab <research@...-consult.com>)

January 24 (3 messages)

[FD] CVE-2019-19363 - Local Privilege Escalation in many Ricoh Printer Drivers for Windows (Pentagrid AG <advisory@...tagrid.ch>)
[FD] [UPDATED - POC] Neowise CarbonFTP v1.4 / Insecure Proprietary Password Encryption / CVE-2020-6857 (hyp3rlinx <apparitionsec@...il.com>)
[FD] Multiple vulnerabilities in TOTOLINK and other Realtek SDK based routers (Błażej Adamczyk <blazej.adamczyk@...il.com>)

January 28 (1 message)

[FD] Become a speaker at Positive Hack Days 10. Call for Papers is now open (Alexander Lashkov via Fulldisclosure <fulldisclosure@...lists.org>)

38 messages

Powered by blists - more mailing lists