full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2020/05

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹ 6	²	³ 2
⁴ 2	⁵ 2	⁶ 4	⁷ 3	⁸ 11	⁹	¹⁰
¹¹	¹² 2	¹³ 2	¹⁴ 1	¹⁵ 2	¹⁶	¹⁷
¹⁸	¹⁹ 2	²⁰	²¹	²² 8	²³	²⁴
²⁵	²⁶	²⁷	²⁸	²⁹ 13	³⁰	³¹

Messages by day:

May 1 (6 messages)

[FD] [SYSS-2020-012] Improper Access Control (CWE-284) in xt:Commerce (CVE-2020-12101) (Fabian Krone <fabian.krone@...s.de>)
[FD] Multiple 0days in IBM Data Risk Manager (Pedro Ribeiro <pedrib@...il.com>)
[FD] TP-LINK Cloud Cameras NCXXX Bonjour Command Injection (Pietro Oliva <pietroliva@...il.com>)
[FD] TP-LINK Cloud Cameras NCXXX Hardcoded Encryption Key (Pietro Oliva <pietroliva@...il.com>)
[FD] TP-LINK Cloud Cameras NCXXX SetEncryptKey Command Injection (Pietro Oliva <pietroliva@...il.com>)
[FD] CVE-2020-1967: proving sigalg != NULL (Imre Rad <radimre83@...il.com>)

May 3 (2 messages)

[FD] iJoomla com_adagency v6.0.9 - SQL Injection Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Joomla com_content v1.5 - Blind SQL-Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

May 4 (2 messages)

[FD] File Explorer v1.4 iOS - Multiple Persistent Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Fishing Reservation System - Multiple Remote SQL Injection Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)

May 5 (2 messages)

[FD] Fishing Reservation System - Multiple Remote SQL Injection Vulnerabilities ("admin@...lution-sec.com" <admin@...lution-sec.com>)
[FD] Reflected XSS in WordPress - WooCommerce - Advanced Order Export 3.1.3 plugin disclosure (Jack Misiura via Fulldisclosure <fulldisclosure@...lists.org>)

May 6 (4 messages)

[FD] Sentrifugo v3.2 CMS - Persistent XSS Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] KeeWeb v1.14.0 - (Notes) Html Inject Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] OpenZ v3.6.60 ERP - Employee Persistent XSS Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Qik Chat v3.0 iOS - (Name) Command Inject Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

May 7 (3 messages)

[FD] Creative Zone - (id) Remote SQL Injection Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Draytek VigorAP - (RADIUS) Persistent XSS Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] LANCOM WLAN Controller - Multiple Cross Site Scripting Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)

May 8 (11 messages)

[FD] LANCOM WLAN Controller - Multiple Cross Site Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Tiny MySQL - Cross Site Scripting Vulnerability ("admin@...lution-sec.com" <admin@...lution-sec.com>)
[FD] Wordpress Theme Dosimple v2.0 - XSS Web Vulnerability ("admin@...lution-sec.com" <admin@...lution-sec.com>)
[FD] Creative Zone - (id) Remote SQL Injection Vulnerability ("admin@...lution-sec.com" <admin@...lution-sec.com>)
[FD] Capstone 4.0.2 is out! (Nguyen Anh Quynh <aquynh@...il.com>)
[FD] ChopSlider3 Wordpress Plugin SQL Injection (Callum Murphy <callum.a.murphy.77@...il.com>)
[FD] SolarWinds MSP PME Cache Service - Insecure File Permissions / Code Execution (Jens Regel <jregel@...neider-wulf.de>)
[FD] Webmin (Upload Module) Remote Command Injection Vulnerability (raki ben hamouda <raki7bh@...il.com>)
[FD] DataSecurity Plus Xnode Server - Remote Code Execution via Path Traversal (xen1thLabs <xen1thLabs@...ital14.com>)
[FD] DataSecurity Plus Xnode Server - Authentication Bypass (xen1thLabs <xen1thLabs@...ital14.com>)
[FD] Asset Explorer Windows Agent - Remote Code Execution (xen1thLabs <xen1thLabs@...ital14.com>)

May 12 (2 messages)

[FD] Two vulnerabilities found in MikroTik's RouterOS (Q C <cq674350529@...il.com>)
[FD] Two vulnerabilities in Oracle’s iPlanet Web Server (CVE-2020-9315 and CVE-2020-9314) (Nightwatch Cybersecurity Research <research@...htwatchcybersecurity…)

May 13 (2 messages)

[FD] Tryton v5.4 - (Name) Persistent Cross Site Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Sellacious eCommerce - Multiple Persistent Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)

May 14 (1 message)

[FD] KL-001-2020-002 : Cellebrite Restricted Desktop Escape and Escalation of User Privilege (KoreLogic Disclosures via Fulldisclosure <fulldisclosure@...lists…)

May 15 (2 messages)

[FD] CVE-2020-1113 - Windows Task Scheduler - Security Feature Bypass (Advisories <advisories@...pass-security.com>)
[FD] Asset Explorer (Windows & Linux) - Authenticated Command Execution (xen1thLabs <xen1thLabs@...ital14.com>)

May 19 (2 messages)

[FD] Multiple vulnerabilities in Dovecot IMAP server (Aki Tuomi <aki.tuomi@...ecot.fi>)
[FD] [SYSS-2019-039] Smartbear ReadyAPI/SoapUI Pro/jProductivity Licensing Unsafe Deserialization (Moritz Bechler <moritz.bechler@...s.de>)

May 22 (8 messages)

[FD] Composr CMS 10.0.30 - (Authenticated) Cross-Site Scripting (Manuel Garcia Cardenas <advidsec@...il.com>)
[FD] Short notes on qmail security guarantee (Georgi Guninski <gguninski@...il.com>)
[FD] APPLE-SA-2020-05-20-1 Xcode 11.5 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Remote Code Execution in qmail (CVE-2005-1513) (Qualys Security Advisory <qsa@...lys.com>)
[FD] [IAIK JCE] Timing Attack Side Channel in DSA Implementation (Giuseppe Cocomazzi <sbudella@...il.com>)
[FD] Filetto v1.0 - 'FEAT' Denial of Service (PoC) (<socket_0x03@...aexe.com>)
[FD] Konica Minolta FTP Utility v1.0 - 'LIST' Denial of Service (PoC) (<socket_0x03@...aexe.com>)
[FD] Konica Minolta FTP Utility v1.0 - 'NLST' Denial of Service (PoC) (<socket_0x03@...aexe.com>)

May 29 (13 messages)

[FD] New BlackArch Linux ISOs + OVA Image released! (Black Arch <blackarchlinux@...il.com>)
[FD] APPLE-SA-2020-05-26-2 iOS 12.4.7 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2020-05-26-1 iOS 13.5 and iPadOS 13.5 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2020-05-26-6 watchOS 5.3.7 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2020-05-26-7 Safari 13.1.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2020-05-26-3 macOS Catalina 10.15.5, Security Update 2020-003 Mojave, Security Update 2020-003 High Sierr… (Apple Product Security via Fulldisclosu…)
[FD] APPLE-SA-2020-05-26-8 iTunes 12.10.7 for Windows (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2020-05-26-5 watchOS 6.2.5 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2020-05-26-9 iCloud for Windows 11.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2020-05-26-10 iCloud for Windows 7.19 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2020-05-26-11 Windows Migration Assistant 2.2.0.0 (v. 1A11) (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2020-05-26-4 tvOS 13.4.5 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] [CDPWE-0001] - RocketReach (Thierry Zoller <thierry@...ler.lu>)

60 messages