full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2020/03

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹
²	³ 5	⁴	⁵	⁶ 10	⁷	⁸
⁹	¹⁰	¹¹	¹²	¹³ 7	¹⁴ 1	¹⁵
¹⁶	¹⁷ 1	¹⁸	¹⁹	²⁰ 2	²¹	²²
²³	²⁴	²⁵ 15	²⁶	²⁷ 10	²⁸	²⁹
³⁰	³¹ 6

Messages by day:

March 3 (5 messages)

Re: [FD] Defense in depth -- the Microsoft way (part 62): Windows shipped with end-of-life components ("Dennis E. Hamilton" <dennis.hamilton@....org>)
[FD] XSSer v.1.8[3] - "The HiV€!" released (psy <epsylon@...eup.net>)
[FD] ELF launcher for encrypted binaries decrypted on-the-fly and executed in memory (RedTimmy Security <redazione@...fault.it>)
Re: [FD] Defense in depth -- the Microsoft way (part 62): Windows shipped with end-of-life components ("Stefan Kanthak" <stefan.kanthak@...go.de>)
[FD] QuickHeal Generic Malformed Archive Bypass (ZIP GPFLAG) (Thierry Zoller <thierry@...ler.lu>)

March 6 (10 messages)

Re: [FD] ELF launcher for encrypted binaries decrypted on-the-fly and executed in memory (Hunger <hunger@...ger.hu>)
[FD] Buffer overflow in pppd - CVE-2020-8597 (Marcin Kozlowski <marcinguy@...il.com>)
[FD] [SYSS-2020-004] Information Exposure Through Caching (CWE-512) in Citrix Gateway (CVE-2020-10110) (Micha Borrmann <micha.borrmann@...s.de>)
[FD] [SYSS-2020-005] Cache Poisoning (CAPEC-141) in Citrix Gateway (CVE-2020-10112) (Micha Borrmann <micha.borrmann@...s.de>)
[FD] [SYSS-2020-006] Inconsistent Interpretation of HTTP Requests (CWE-444) in Citrix Gateway (CVE-2020-10111) (Micha Borrmann <micha.borrmann@...s.de>)
Re: [FD] ELF launcher for encrypted binaries decrypted on-the-fly and executed in memory (Phil Ashby <Phil.Ashby@...plc.com>)
Re: [FD] ELF launcher for encrypted binaries decrypted on-the-fly and executed in memory (RedTimmy Security <redazione@...fault.it>)
[FD] Script Injection Vulnerability Remediated (Scott Baker via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] [AIT-SA-20200301-01] CVE-2020-9364: Directory Traversal in Creative Contact Form (sec-advisory <sec-advisory@....ac.at>)
[FD] [TZO-20-2020] - Quickheal Malformed Archive bypass (ZIP GPFLAG) - CVE-2020-9362 (Thierry Zoller <thierry@...ler.lu>)

March 13 (7 messages)

[FD] SEC Consult SA-20200312-0 :: Authenticated Command Injection in Phoenix Contact TC Router & TC Cloud Client (SEC Consult Vulnerability Lab <research@...-c…)
[FD] SEC Consult SA-20200312-0 :: Authenticated Command Injection in Phoenix Contact TC Router & TC Cloud Client (SEC Consult Vulnerability Lab <research@...-c…)
[FD] [REVIVE-SA-2020-002] Revive Adserver Vulnerabilities (Matteo Beccati via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] CarolinaCon is POSTPONED (CarolinaCon <presenters@...olinacon.org>)
[FD] Defense in depth -- the Microsoft way (part 63): program defaults, settings, policies ... and (un)trustworthy comp… ("Stefan Kanthak" <stefan.kanthak@...go.…)
[FD] [RT-SA-2020-001] Credential Disclosure in WatchGuard Fireware AD Helper Component (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[FD] RichFaces exploitation toolkit (Red Timmy Security <publications@...timmy.com>)

March 14 (1 message)

[FD] Multiple vulnerabilities found in Zyxel CNM SecuManager (Pierre Kim <pierre.kim.sec@...il.com>)

March 17 (1 message)

[FD] ZoneAlarm TrueVector Internet Monitor service insecure NTFS permissions vulnerability ("Securify B.V. via Fulldisclosure" <fulldisclosure@...lists.org>)

March 20 (2 messages)

[FD] Oce Colorwave 500 printer - multiple vulnerabilities (Red Timmy Security <publications@...timmy.com>)
[FD] LPE in Avast Secure Browser (Silton Renato Pereira dos Santos <silton.santos@...pest.com.br>)

March 25 (15 messages)

[FD] Authentication Bypass in Tribal SITS:Vision (Callum Murphy <Callum.Murphy@...c.ac.uk>)
[FD] New version of Hyperion PE runtime crypter (Levon Kayan <noptrix@...lsecurity.net>)
[FD] APPLE-SA-2020-03-24-1 iOS 13.4 and iPadOS 13.4 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2020-03-24-3 tvOS 13.4 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2020-03-24-2 macOS Catalina 10.15.4, Security Update 2020-002 Mojave, Security Update 2020-002 High Sierr… (Apple Product Security via Fulldisclosu…)
[FD] APPLE-SA-2020-03-24-7 Xcode 11.4 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2020-03-24-4 watchOS 6.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2020-03-24-6 iTunes for Windows 12.10.5 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2020-03-24-5 Safari 13.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Hackers 2 Hackers Conference 17th Edition Call For Papers ("Rodrigo Rubira Branco (BSDaemon)" <rodrigo@...nelhacking.com>)
[FD] HP ThinPro - Information disclosure (Eldar Marcussen <wireghoul@...il.com>)
[FD] HP ThinPro - Application filter bypass (Eldar Marcussen <wireghoul@...il.com>)
[FD] HP ThinPro - Privilege escalation (Eldar Marcussen <wireghoul@...il.com>)
[FD] HP ThinPro - Citrix command injection (Eldar Marcussen <wireghoul@...il.com>)
[FD] HP ThinPro - Privileged command injection (Eldar Marcussen <wireghoul@...il.com>)

March 27 (10 messages)

[FD] CVE-2019-19912 (Georg Ph E Heise via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] CVE-2019-19913 (Georg Ph E Heise via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] New tool: nullscan v1.0.0 - A modular framework designed to chain and automate security tests (Levon Kayan <noptrix@...lsecurity.net>)
[FD] CVE-2019-4716: conf overwrite + auth bypass = rce as root / SYSTEM on IBM PA / TM1 (Pedro Ribeiro <pedrib@...il.com>)
[FD] APPLE-SA-2020-03-25-1 iCloud for Windows 10.9.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2020-03-25-2 iCloud for Windows 7.18 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Defense in depth -- the Microsoft way (part 64): Windows Defender loads and exeutes arbitrary DLLs ("Stefan Kanthak" <stefan.kanthak@...go.de>)
[FD] Defense in depth -- the Microsoft way (part 65): unsafe, easy to rediect paths all over ("Stefan Kanthak" <stefan.kanthak@...go.de>)
[FD] [SYSS-2019-046] Micro Focus Vibe - HTML Injection (Vladimir Bostanov <vladimir.bostanov@...s.de>)
[FD] [SYSS-2019-047] Micro Focus Vibe - Cross-Site Scripting (CVE-2020-9520) (Vladimir Bostanov <vladimir.bostanov@...s.de>)

March 31 (6 messages)

[FD] Deskpro Helpdesk < 2019.8.0 (Privilege Escalation, RCE) (RedForce Advisory <advisory@...force.ae>)
[FD] Recon-Informer v1 - Intel for offensive systems tool (hyp3rlinx <apparitionsec@...il.com>)
Re: [FD] Defense in depth -- the Microsoft way (part 64): Windows Defender loads and exeutes arbitrary DLLs (Paul Szabo <paul.szabo@...ney.edu.au>)
[FD] TP-LINK Cloud Cameras NCXXX Remote NULL Pointer Dereference (Pietro Oliva <pietroliva@...il.com>)
Re: [FD] Defense in depth -- the Microsoft way (part 64): Windows Defender loads and exeutes arbitrary DLLs ("Stefan Kanthak" <stefan.kanthak@...go.de>)
[FD] Defense in depth -- the Microsoft way (part 66): attachment manager allows to load arbitrary DLLs ("Stefan Kanthak" <stefan.kanthak@...go.de>)

57 messages