full-disclosure mailing list - 2020/08

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2020/08

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹	²
³	⁴ 3	⁵	⁶	⁷ 1	⁸ 1	⁹
¹⁰	¹¹ 6	¹²	¹³	¹⁴ 1	¹⁵	¹⁶
¹⁷	¹⁸ 1	¹⁹	²⁰	²¹ 2	²²	²³
²⁴	²⁵ 4	²⁶	²⁷ 2	²⁸	²⁹ 3	³⁰
³¹

Messages by day:

August 4 (3 messages)

[FD] [SYSS-2020-029]: Jira module "Gantt-Chart for Jira" - Improper Privilege Management (CWE-269)(CVE-2020-15943) (Sebastian Auwärter <sebastian.auwaerter@sy…)
[FD] [SYSS-2020-030]: Jira module "Gantt-Chart for Jira" - Cross-Site Scripting (CWE-79)(CVE-2020-15944) (Sebastian Auwärter <sebastian.auwaerter@...s.de>)
[FD] October CMS <= Build 465 Multiple Vulnerabilities - Arbitrary File Read (Sivanesh Ashok <sivaneshashok@...il.com>)

August 7 (1 message)

[FD] SEC Consult SA-20200807-0 :: Multiple Vulnerabilities in flatCore CMS (SEC Consult Vulnerability Lab <research@...-consult.com>)

August 8 (1 message)

[FD] ManageEngine ADSelfService Plus – Unauthenticated Remote Code Execution Vulnerability (Bhdresh <bhdresh@...il.com>)

August 11 (6 messages)

[FD] Remote Code Execution 0day in vBulletin 5.x (Zenofex via Fulldisclosure <fulldisclosure@...lists.org>)
Re: [FD] ManageEngine ADSelfService Plus – Unauthenticated Remote Code Execution Vulnerability (Bhdresh <bhdresh@...il.com>)
[FD] SugarCRM < 10.1.0 Multiple Reflected Cross-Site Scripting Vulnerabilities (Egidio Romano <n0b0d13s@...il.com>)
[FD] SugarCRM < 10.1.0 (Reports Export) SQL Injection Vulnerability (Egidio Romano <n0b0d13s@...il.com>)
[FD] Avian JVM vm::arrayCopy() Multiple Integer Overflows (Pietro Oliva via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Avian JVM vm::arrayCopy() silent return on negative length (Pietro Oliva via Fulldisclosure <fulldisclosure@...lists.org>)

August 14 (1 message)

[FD] Two vulnerabilities found in MikroTik's RouterOS (Q C <cq674350529@...il.com>)

August 18 (1 message)

[FD] New Release: UFONet v1.6 - "M4RAuD3R!"... (psy <epsylon@...eup.net>)

August 21 (2 messages)

[FD] Payment bypass in WordPress - WooCommerce - NAB Transact plugin disclosure (Jack Misiura via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Open-Xchange Security Advisory 2020-08-20 (Open-Xchange GmbH via Fulldisclosure <fulldisclosure@...lists.org>)

August 25 (4 messages)

[FD] CVE-2020-24548 / Ericom Access Server for (AccessNow & Ericom Blaze) v9.2.0 / Server Side Request Forgery (hyp3rlinx <apparitionsec@...il.com>)
[FD] Google Chromecast Auth Bypass/RCE (Benjamin Floyd <benjamin.floyd253@...il.com>)
[FD] NEProfile - Host Header Injection (<ghost@...ervurse.com>)
[FD] A Tale of Escaping a Hardened Docker container (Red Timmy Security <publications@...timmy.com>)

August 27 (2 messages)

[FD] SEC Consult SA-20200826-0 :: Extensive file permissions on service executable in Eikon Thomson Reuters (SEC Consult Vulnerability Lab <research@...-consul…)
[FD] SEC Consult SA-20200827-0 :: Multiple Vulnerabilities in ZTE mobile Hotspot MS910S (SEC Consult Vulnerability Lab <research@...-consult.com>)

August 29 (3 messages)

[FD] Three vulnerabilities found in MikroTik's RouterOS (Q C <cq674350529@...il.com>)
[FD] Missing Trust Validation in Visual Studio's VSIX Installer ("Ostovary, Daniel" <daniel.ostovary@...icon.eu>)
[FD] SUPERAntiSpyware Professional X Trial < 10.0.1206 Local Privilege Escalation (b1nary <thebinary0x1@...il.com>)

24 messages

Powered by blists - more mailing lists