full-disclosure mailing list - 2020/07

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2020/07

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 1	²	³ 4	⁴	⁵
⁶	⁷ 3	⁸	⁹	¹⁰ 3	¹¹	¹²
¹³	¹⁴ 7	¹⁵ 4	¹⁶	¹⁷ 7	¹⁸	¹⁹
²⁰	²¹ 2	²²	²³	²⁴ 4	²⁵	²⁶
²⁷	²⁸	²⁹ 1	³⁰ 1	³¹

Messages by day:

July 1 (1 message)

[FD] SEC Consult SA-20200701-0 :: Reflected Cross-Site Scripting (XSS) in EQDKP Plus CMS (SEC Consult Vulnerability Lab <research@...-consult.com>)

July 3 (4 messages)

[FD] CVE-2019-19935 - DOM XSS in Froala WYSIWYG HTML Editor (Advisories <advisories@...pass-security.com>)
[FD] [CVE-2020-11882] o2 Business for Android "canvasm.myo2.SplashActivity" <= 1.2.0 Open Redirect ("Julien Ahrens (RCE Security)" <info@...security.com>)
[FD] [SYSS-2020-011] Apple iOS - Exposure of Resource to Wrong Sphere (CWE-668) (Philipp Buchegger <philipp.buchegger@...s.de>)
[FD] Bolt CMS <= 3.7.0 Multiple Vulnerabilities - CSRF to RCE (Sivanesh Ashok <sivaneshashok@...il.com>)

July 7 (3 messages)

[FD] Microsoft Windows mshta.exe HTA File / XML External Entity Injection (hyp3rlinx <apparitionsec@...il.com>)
[FD] Four vulnerabilities found in MikroTik's RouterOS (Q C <cq674350529@...il.com>)
[FD] Multiple vulnerabilities found in CDATA OLTs (Pierre Kim <pierre.kim.sec@...il.com>)

July 10 (3 messages)

[FD] X41 D-Sec GmbH Security Advisory X41-2020-006: Memory Corruption Vulnerability in bspatch (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)
[FD] Microsoft OneDrive client for Windows Qt QML module hijack ("Securify B.V. via Fulldisclosure" <fulldisclosure@...lists.org>)
[FD] SEC Consult SA-20200708-0 :: Multiple Critical Vulnerabilities in Multiple Rittal Products Based on Same Software (SEC Consult Vulnerability Lab <research…)

July 14 (7 messages)

[FD] Google's Android: remote install backdoor in Google Play Services ("Enrico Weigelt, metux IT consult" <info@...ux.net>)
[FD] Ptrace based fuzzer for fuzzing binaries at high speeds (Marcin Kozlowski <marcinguy@...il.com>)
Re: [FD] Multiple vulnerabilities found in CDATA OLTs (Pierre Kim <pierre.kim.sec@...il.com>)
[FD] Multiple vulnerabilities found in V-SOL OLTs (Pierre Kim <pierre.kim.sec@...il.com>)
[FD] Verint Impact 360 Open iFrame (Ryan Delaney <ryan.delaney@...sp.org>)
[FD] Verint Impact 360 onLogin open redirect (Ryan Delaney <ryan.delaney@...sp.org>)
[FD] Verint Impact 360 login CSRF (Ryan Delaney <ryan.delaney@...sp.org>)

July 15 (4 messages)

[FD] NEProfile - Remote Code Execution (<ghost@...ervurse.com>)
[FD] Insecure /tmp file use in Oracle Solaris 11 Device Driver Utility v1.3.1 leads to root ("Larry W. Cashdollar via Fulldisclosure" <fulldisclosure@...lists.…)
Re: [FD] Google's Android: remote install backdoor in Google Play Services (Fabio <ctrlaltca@...il.com>)
Re: [FD] Google's Android: remote install backdoor in Google Play Services (Michael Lazin <microlaser@...il.com>)

July 17 (7 messages)

[FD] VMware ESXi: Multiple vulnerabilities [CVE-2020-3963, CVE-2020-3964, CVE-2020-3965, CVE-2020-3960] (Cfir Cohen via Fulldisclosure <fulldisclosure@...lists…)
[FD] APPLE-SA-2020-07-15-1 iOS 13.6 and iPadOS 13.6 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2020-07-15-2 macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierr… (Apple Product Security via Fulldisclosu…)
[FD] APPLE-SA-2020-07-15-3 tvOS 13.4.8 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2020-07-15-4 watchOS 6.2.8 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2020-07-15-5 Safari 13.1.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] SEC Consult SA-20200717-0 :: Multiple Vulnerabilities in WonderCMS (SEC Consult Vulnerability Lab <research@...-consult.com>)

July 21 (2 messages)

[FD] Mida Solutions eFramework <= 2.9.0 Multiple Vulnerabilities (Andrea Baesso <baessoandrea91@...il.com>)
[FD] Advisory:[CVE-2020-15596]ALPS ALPINE DLL Hijacking Issue (Caiyuan Xie <caiyuan.xie@...alps.com>)

July 24 (4 messages)

[FD] SEC Consult SA-20200724-0 :: Privilege Escalation Vulnerability in SteelCentral Aternity Agent (SEC Consult Vulnerability Lab <research@...-consult.com>)
[FD] Three vulnerabilities found in MikroTik's RouterOS (Q C <cq674350529@...il.com>)
[FD] Defense in depth -- the Microsoft way (part 70): CVE-2014-0315 alias MS14-019 revisited ("Stefan Kanthak" <stefan.kanthak@...go.de>)
[FD] Vulnerability Repot# MAMP PRO 4.2.0 Local Privilege Escalation (Nicholas <thebinary0x1@...il.com>)

July 29 (1 message)

[FD] SEC Consult SA-20200728-0 :: Stored Cross-Site Scripting (XSS) Vulnerability in Namirial SIGNificant SignAnyWhere (SEC Consult Vulnerability Lab <research…)

July 30 (1 message)

[FD] [SYSS-2020-015]: ABUS Secvest Hybrid module (FUMO50110) - Authentication Bypass Using an Alternate Path or Channel (… (Matthias Deeg <matthias.deeg@...s.de>)

37 messages

Powered by blists - more mailing lists