full-disclosure mailing list - 2020/11

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2020/11

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹
²	³	⁴ 1	⁵ 3	⁶ 6	⁷	⁸
⁹	¹⁰ 2	¹¹	¹²	¹³ 2	¹⁴	¹⁵ 9
¹⁶ 6	¹⁷ 3	¹⁸ 2	¹⁹	²⁰ 7	²¹	²²
²³ 2	²⁴	²⁵	²⁶	²⁷	²⁸	²⁹
³⁰ 2

Messages by day:

November 4 (1 message)

[FD] SEC Consult SA-20201104-0 :: Multiple vulnerabilities in Trend Micro InterScan Messaging Security Virtual Applianc… (SEC Consult Vulnerability Lab <research…)

November 5 (3 messages)

[FD] Git LFS (git-lfs) - Remote Code Execution (RCE) exploit CVE-2020-27955 - Clone to Pwn (Dawid Golunski <dawid@...alhackers.com>)
[FD] AST-2020-001: Remote crash in res_pjsip_session ("Asterisk Security Team" <security@...erisk.org>)
[FD] AST-2020-002: Outbound INVITE loop on challenge with different nonce. ("Asterisk Security Team" <security@...erisk.org>)

November 6 (6 messages)

[FD] Etherify - bringing the ether back to ethernet (Jacek Lipkowski <fdlist@...kowski.org>)
[FD] APPLE-SA-2020-11-05-2 iOS 12.4.9 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2020-11-05-1 iOS 14.2 and iPadOS 14.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2020-11-05-7 tvOS 14.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Advisory: ES2020-02 - Asterisk crash due to INVITE flood over TCP ("Sandro Gauci" <sandro@...blesecurity.com>)
[FD] secuvera-SA-2020-01: Broken Object Level Authorization Vulnerability in OvulaRing-Webapplication (Tobias Glemser <tglemser@...uvera.de>)

November 10 (2 messages)

[FD] NtFileSins v2.2 / Windows NTFS Privileged File Access Enumeration Tool (Python v3) (hyp3rlinx <apparitionsec@...il.com>)
[FD] [No cON Name] #ncn2k20 CFP online - Barcelona (José Nicolás Castellano <jncastellano@...onname.org>)

November 13 (2 messages)

[FD] Avian JVM FileOutputStream.write() Integer Overflow (Pietro Oliva via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Scope of Debian's /home/loser is with permissions 755, default umask 002 (Georgi Guninski <gguninski@...il.com>)

November 15 (9 messages)

Re: [FD] Scope of Debian's /home/loser is with permissions 755, default umask 002 (bo0od <bo0od@...eup.net>)
[FD] [SYSS-2020-037] Persistent Cross-site Scripting (CWE-79) in REDDOXX MailDepot (CVE-2020-26554) (Micha Borrmann <micha.borrmann@...s.de>)
Re: [FD] Scope of Debian's /home/loser is with permissions 755, default umask 002 (Pim van Stam <pim@...net.nl>)
[FD] APPLE-SA-2020-11-13-2 Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave (Apple Product Security via Fulldisclosure <fulldisclosure@sec…)
[FD] APPLE-SA-2020-11-13-5 Additional information for APPLE-SA-2020-09-16-3 Safari 14.0 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org…)
[FD] APPLE-SA-2020-11-13-4 Additional information for APPLE-SA-2020-09-16-2 tvOS 14.0 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2020-11-13-3 Additional information for APPLE-SA-2020-09-16-1 iOS 14.0 and iPadOS 14.0 (Apple Product Security via Fulldisclosure <fulldisclosure…)
[FD] APPLE-SA-2020-11-13-7 Additional information for APPLE-SA-2020-09-24-1 macOS Catalina 10.15.7, Security Update 20… (Apple Product Security via Fulldisclosu…)
[FD] APPLE-SA-2020-11-13-6 Additional information for APPLE-SA-2020-09-16-4 watchOS 7.0 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org…)

November 16 (6 messages)

[FD] SIGE (Joomla) 3.4.1 & 3.5.3 Pro - Multiple Vulnerabilities (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Froxlor v0.10.16 CP - (Customer) Persistent Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Buddypress v6.2.0 WP Plugin - Persistent Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] Intel NUC - Local Privilege Escalation Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] SugarCRM v6.5.18 - (Employees) Persistent Cross Site Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] SugarCRM v6.5.18 - (Contacts) Persistent Cross Site Web Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)

November 17 (3 messages)

[FD] Fancy Product Designer for WooCommerce - Stored XSS via SVG upload (Jonathan Gregson via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Fancy Product Designer for WooCommerce - Unrestricted File Upload (Jonathan Gregson via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] SEC Consult SA-20201117-0 :: Blind Out-Of-Band XML External Entity Injection in Avaya Web License Manager (SEC Consult Vulnerability Lab <research@...-con…)

November 18 (2 messages)

[FD] SOWA.OPAC Reflected Cross Site Scripting (hacker@...ekholka.pl)
[FD] TCMalloc viewer/dumper - TCMalloc Inspector Tool (Marcin Kozlowski <marcinguy@...il.com>)

November 20 (7 messages)

[FD] VTiger v7.0 CRM - (To) Persistent Email Vulnerability (Vulnerability Lab <research@...nerability-lab.com>)
[FD] KL-001-2020-004 : Barco wePresent Hardcoded API Credentials (KoreLogic Disclosures via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] KL-001-2020-005 : Barco wePresent Admin Credentials Exposed In Plain-text (KoreLogic Disclosures via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] KL-001-2020-006 : Barco wePresent Authentication Bypass (KoreLogic Disclosures via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] KL-001-2020-007 : Barco wePresent Undocumented SSH Interface Accessible Via Web UI (KoreLogic Disclosures via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] KL-001-2020-008 : Barco wePresent Global Hardcoded Root SSH Password (KoreLogic Disclosures via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] KL-001-2020-009 : Barco wePresent Insecure Firmware Image (KoreLogic Disclosures via Fulldisclosure <fulldisclosure@...lists.org>)

November 23 (2 messages)

[FD] CA20201116-01: Security Notice for CA Unified Infrastructure Management (Ken Williams via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] SEC Consult SA-20201123-0 :: Multiple Vulnerabilities in ZTE WLAN router MF253V (SEC Consult Vulnerability Lab <research@...-consult.com>)

November 30 (2 messages)

[FD] Etherify 4 - jumping air gaps with real ethernet hardware (Jacek Lipkowski <fdlist@...kowski.org>)
[FD] scikit-learn 0.23.2 Local Denial of Service (pabloec20 <pabloec20@...il.com>)

45 messages

Powered by blists - more mailing lists