full-disclosure mailing list - 2020/06

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2020/06

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹	²	³ 8	⁴	⁵ 3	⁶	⁷
⁸	⁹ 8	¹⁰	¹¹	¹² 3	¹³ 1	¹⁴
¹⁵	¹⁶ 3	¹⁷	¹⁸	¹⁹	²⁰	²¹
²²	²³ 5	²⁴	²⁵	²⁶	²⁷	²⁸
²⁹ 1	³⁰ 3

Messages by day:

June 3 (8 messages)

[FD] [Bug] Firefox privacy leakage: search term is sent to ISP without user's consent. (duykham <duykham@...il.com>)
[FD] APPLE-SA-2020-06-01-1 iOS 13.5.1 and iPadOS 13.5.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2020-06-01-2 macOS Catalina 10.15.5 Supplemental Update, Security Update 2020-003 High Sierra (Apple Product Security via Fulldisclosure <fulldis…)
[FD] APPLE-SA-2020-06-01-3 tvOS 13.4.6 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2020-06-01-4 watchOS 6.2.6 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] BIAS (Bluetooth Impersonation Attack) CVE 2020-10135 reproduction (Marcin Kozlowski <marcinguy@...il.com>)
[FD] [CVE-2020-9484] Apache Tomcat RCE via PersistentManager (Red Timmy Security <publications@...timmy.com>)
[FD] Sabberworm PHP CSS parser - Code injection vulnerability (Eldar Marcussen <wireghoul@...il.com>)

June 5 (3 messages)

[FD] Castel NextGen DVR multiple CVEs (Aaron Bishop <aaron@...uritymetrics.com>)
[FD] Defense in depth -- the Microsoft way (part 68): qUACkery is futile! ("Stefan Kanthak" <stefan.kanthak@...go.de>)
[FD] Defense in depth -- the Microsoft way (part 69): security remarks are as futile as the qUACkery! ("Stefan Kanthak" <stefan.kanthak@...go.de>)

June 9 (8 messages)

[FD] WinGate v9.4.1.5998 Insecure Permissions EoP CVE-2020-13866 (hyp3rlinx <apparitionsec@...il.com>)
[FD] Avaya IP Office v9.1.8.0 - 11 Insecure Transit Password Disclosure CVE-2020-7030 (hyp3rlinx <apparitionsec@...il.com>)
[FD] CVE-2020-13432 - HFS HTTP File Server / Remote Buffer Overflow DoS (hyp3rlinx <apparitionsec@...il.com>)
[FD] WebUntis: Stored XSS (Filter Bypass) (Robin Meis via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] RoyalTS SSH Tunnel - Authentication Bypass (michele@...cagni.info)
[FD] Ciphermail - New advisory publlication (Pablo Zurro via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Pydio cells - New advisory publication (Pablo Zurro via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Web Application Firewall bypass - part 3 (Red Timmy Security <publications@...timmy.com>)

June 12 (3 messages)

[FD] New Release: UFONet v1.5 - [MLV] "MuLTi.V3rSe!"... (psy <epsylon@...eup.net>)
[FD] Open-Xchange Security Advisory 2020-06-12 (Open-Xchange GmbH via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Open-Xchange Security Advisory 2020-06-12 (Open-Xchange GmbH via Fulldisclosure <fulldisclosure@...lists.org>)

June 13 (1 message)

[FD] TheBigIndexer - Index services and leaks over the ipv4 internet (Gregory Boddin <gregory@...hine.net>)

June 16 (3 messages)

[FD] [CVE-2020-12827] MJML <= 4.6.2 mj-include "path" Path Traversal ("Julien Ahrens (RCE Security)" <info@...security.com>)
[FD] TP-LINK Cloud Cameras NCXXX DelMultiUser Stack Overflow (Pietro Oliva <pietroliva@...il.com>)
[FD] Pulse Secure Client < 9.1R6 TOCTOU Privilege Escalation (CVE-2020-13162) (Red Timmy Security <publications@...timmy.com>)

June 23 (5 messages)

[FD] [SYSS_2020-014]: ABUS Secvest Wireless Control Device (FUBE50001) - Missing Encryption of Sensitive Data (CWE-311) … (Matthias Deeg <matthias.deeg@...s.de>)
Re: [FD] Remote Code Execution in qmail (CVE-2005-1513) (Qualys Security Advisory <qsa@...lys.com>)
[FD] Keystone Assembler Engine 0.9.2 is out! (Nguyen Anh Quynh <aquynh@...il.com>)
[FD] GilaCMS - CVE-2019-13364 CVE-2019-13363 (Rodolfo Augusto do Nascimento Tavares <rodolfo.tavares@...pest.com.br>)
[FD] DLL Hijacking at the Trend Micro Password Manager (CVE-2020–8469) (Silton Renato Pereira dos Santos <silton.santos@...pest.com.br>)

June 29 (1 message)

[FD] KL-001-2020-003 : Cellebrite EPR Decryption Relies on Hardcoded AES Key Material (KoreLogic Disclosures via Fulldisclosure <fulldisclosure@...lists.org>)

June 30 (3 messages)

[FD] [KIS-2020-06] openSIS <= 7.4 Incorrect Access Control Vulnerabilities (Egidio Romano <research@...mainsecurity.com>)
[FD] [KIS-2020-07] openSIS <= 7.4 (Bottom.php) Local File Inclusion Vulnerability (Egidio Romano <research@...mainsecurity.com>)
[FD] [KIS-2020-08] openSIS <= 7.4 Multiple SQL Injection Vulnerabilities (Egidio Romano <research@...mainsecurity.com>)

35 messages

Powered by blists - more mailing lists