full-disclosure mailing list - 2021/01

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2021/01

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹	²	³ 18
⁴	⁵	⁶ 6	⁷	⁸ 5	⁹	¹⁰
¹¹	¹²	¹³ 12	¹⁴	¹⁵	¹⁶	¹⁷
¹⁸	¹⁹ 17	²⁰	²¹	²² 12	²³	²⁴
²⁵	²⁶ 14	²⁷	²⁸	²⁹	³⁰	³¹

Messages by day:

January 3 (18 messages)

[FD] Multiple vulnerabilities in Gotenberg <= 6.2.0 (Błażej Adamczyk <blazej.adamczyk@...il.com>)
[FD] Multiple vulnerabilities found in Rock RMS including RCE and account takeover (Cyber Security Research Group via Fulldisclosure <fulldisclosure@...lists.…)
[FD] Stored XSS In Hyland's Enterprise Search (johnkennedy@...creet.email)
[FD] BACKDOOR.WIN32.BNLITE / Remote Heap Corruption (malvuln <malvuln13@...il.com>)
[FD] Phorpiex / Insecure permissions EoP (malvuln <malvuln13@...il.com>)
[FD] TROJAN.WIN32.JORIK.DMSPAMMER.SZ / Remote Memory Corruption (malvuln <malvuln13@...il.com>)
[FD] HEUR.RISKTOOL.WIN32.BITMINER.GEN / Remote Memory Corruption (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Zombam.j / Remote Stack Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] BACKDOOR.WIN32.REMOTEMANIPULATOR / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] BACKDOOR.WIN32.ADVERBOT / Remote Stack Corruption (malvuln <malvuln13@...il.com>)
[FD] [KIS-2020-11] qdPM <= 9.1 (executeExport) PHP Object Injection Vulnerability (Egidio Romano <n0b0d13s@...il.com>)
[FD] Trojan:Win32/Alyak.B / Remote Stack Corruption (malvuln <malvuln13@...il.com>)
[FD] Email-Worm.Win32.Zhelatin.ago / Remote Stack Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.Bayrob.cgau / Insecure Permissions EoP (SYSTEM) (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.Barjac / Remote Stack Buffer Overflow. (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Infexor.b / Remote Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] WIN32 BACKDOOR - 2019-02-ARTRADOWNLOADER / Remote SEH Buffer Overflow and Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Threat: Trojan.Win32.Antavka.bz / Insecure Permissions EoP (malvuln <malvuln13@...il.com>)

January 6 (6 messages)

[FD] CVE-2020-24386: IMAP hibernation allows accessing other peoples mail (Aki Tuomi <aki.tuomi@...ecot.fi>)
[FD] CVE-2020-24386: IMAP hibernation allows accessing other peoples mail (Aki Tuomi <aki.tuomi@...ecot.fi>)
[FD] Files.com - Auth Bypass (Fat Client) (Balázs Hambalkó <hambalko.balazs@...il.com>)
[FD] Backdoor.Win32.Zombam.k / Remote Stack Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] [KIS-2021-01] IPS Community Suite <= 4.5.4 (Downloads REST API) SQL Injection Vulnerability (Egidio Romano <n0b0d13s@...il.com>)
Re: [FD] [SECURITY] CVE-2013-4444 Remote Code Execution in Apache Tomcat ("Mark Thomas" <support@...dusie.com>)

January 8 (5 messages)

[FD] Backdoor.Win32.Agent.dcbh / Insecure Permissions EoP (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Xtreme.yvp / Insecure Permissions EoP (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.NinjaSpy.c / Remote Stack Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Open-Xchange Security Advisory 2021-01-07 (Martin Heiland via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Trovent Security Advisory 2010-01 / CVE-2020-28208: Rocket.Chat email address enumeration vulnerability (Stefan Pietsch <s.pietsch@...vent.io>)

January 13 (12 messages)

Re: [FD] Backdoor.Win32.NinjaSpy.c / Remote Stack Buffer Overflow (Matthew Fernandez <matthew.fernandez@...il.com>)
[FD] Multiple vulnerabilities found in FiberHome HG6245D routers (Pierre Kim <pierre.kim.sec@...il.com>)
[FD] Envira Gallery - Lite Edition - Version 1.8.3.2 CVE-2020-35581 CVE-2020-35582 (Rodolfo Augusto do Nascimento Tavares <rodolfo.tavares@...pest.com.br>)
Re: [FD] Trovent Security Advisory 2010-01 [updated] / CVE-2020-28208: Rocket.Chat email address enumeration vulnerabilit… (Stefan Pietsch <s.pietsch@...vent.io>)
[FD] Advisory: ES2021-01 - Loopback access control bypass in coturn by using 0.0.0.0, [::1] or [::] as the peer address ("Sandro Gauci" <sandro@...blesecurity.c…)
Re: [FD] Backdoor.Win32.Xtreme.yvp / Insecure Permissions EoP (bo0od <bo0od@...eup.net>)
[FD] Backdoor.Win32.Ketch.b / Remote Stack Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Levelone.a / Remote Stack Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Levelone.b / Remote Stack Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Zombam.a / Remote Stack Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] SEC Consult SA-20210113-0 :: Multiple vulnerabilities in Pepperl+Fuchs IO-Link Master Series (SEC Consult Vulnerability Lab <research@...-consult.com>)
[FD] SEC Consult SA-20210113-1 :: Multiple vulnerabilities in flatCore CMS (SEC Consult Vulnerability Lab <research@...-consult.com>)

January 19 (17 messages)

Re: [FD] Backdoor.Win32.Xtreme.yvp / Insecure Permissions EoP ("network.mp4 via Fulldisclosure" <fulldisclosure@...lists.org>)
Re: [FD] Backdoor.Win32.NinjaSpy.c / Remote Stack Buffer Overflow ("network.mp4 via Fulldisclosure" <fulldisclosure@...lists.org>)
Re: [FD] Trovent Security Advisory 2010-01 [updated] / CVE-2020-28208: Rocket.Chat email address enumeration vulnerabilit… (Stefan Pietsch <s.pietsch@...vent.io>)
[FD] BACKDOOR.WIN32.KURBADUR.A / Remote Stack Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Ketch.i / SEH Remote Stack Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] BACKDOOR.WIN32.KETCH.A / Remote SEH Stack Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Ncx.bt / Remote Stack Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Nucleroot.bi - MaskPE 2.0 / File Based Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Nucleroot.t - MaskPE 1.6 / File Based Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Latinus.b / Remote Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Whgrx / Remote Host Header Stack Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Mnets / Remote Stack Buffer Overflow - (UDP Datagram Proto) (malvuln <malvuln13@...il.com>)
[FD] Newfuture Trojan V.1.0 BETA 1 / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Constructor.Win32.SMWG.a / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Constructor.Win32.SMWG.c / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Email-Worm.Win32.Agent.gi / Remote Stack Buffer Overflow - (UDP Datagram) (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.NetBull.11.a / Remote Buffer Overflow (malvuln <malvuln13@...il.com>)

January 22 (12 messages)

Re: [FD] Constructor.Win32.SMWG.a / Insecure Permissions (Garrett Skjelstad <garrett@...elstad.org>)
[FD] CVE-2020-20269 - Caret Editor v4.0.0-rc21 Remote Code Execution (Manuel Bua <manuel.bua@...il.com>)
[FD] [REVIVE-SA-2021-001] Revive Adserver Vulnerabilities (Matteo Beccati via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Backdoor.Win32.Zombam.geq / Remote Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Whirlpool.10 / Remote Stack Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Whisper.b / Remote Stack Corruption (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Zxman / Missing Authentication (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.WinShell.30 / Remote Stack Buffer Overflow / Missing Authentication (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Onalf / Missing Authentication (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Verify.f / Missing Authentication (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Xel / Remote Authentication Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Hupigon.adef / Remote Stack Buffer Overflow (malvuln <malvuln13@...il.com>)

January 26 (14 messages)

[FD] Backdoor.Win32.Kraimer.11 / Missing Authentication (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Noknok.60 / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Noknok.50 / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Jokerdoor (TDC Mail Spy 1.0) / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.Xocry.ff / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Wollf.16 / Weak Hardcoded Password (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.DarkKomet.bhfh / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Wollf.c / Hardcoded Backdoor Password (malvuln <malvuln13@...il.com>)
[FD] [REVIVE-SA-2021-002] Revive Adserver Vulnerabilities (Matteo Beccati via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Baron Samedit: Heap-based buffer overflow in Sudo (CVE-2021-3156) (Qualys Security Advisory <qsa@...lys.com>)
[FD] APPLE-SA-2021-01-26-1 iOS 14.4 and iPadOS 14.4 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-01-26-2 tvOS 14.4 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-01-26-3 watchOS 7.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-01-26-4 Xcode 12.4 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)

84 messages

Powered by blists - more mailing lists