full-disclosure mailing list - 2021/02

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2021/02

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹ 14	² 5	³	⁴ 4	⁵	⁶	⁷ 11
⁸ 1	⁹	¹⁰ 1	¹¹	¹² 10	¹³	¹⁴
¹⁵	¹⁶	¹⁷ 11	¹⁸ 5	¹⁹ 9	²⁰ 1	²¹
²²	²³ 8	²⁴	²⁵	²⁶ 13	²⁷	²⁸

Messages by day:

February 1 (14 messages)

[FD] X41 D-Sec GmbH Security Advisory X41-2021-001: Multiple Vulnerabilities in YARA (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)
[FD] Cross-Site Scripting Vulnerability in Chamilo LMS 1.11.14 (Daniel Bishtawi via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Backdoor.Win32.DarkKomet.apbb / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Wollf.14 / Missing Authentication (malvuln <malvuln13@...il.com>)
[FD] Constructor.Win32.SpyNet.a / Remote Password Leak (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Zetronic / Remote DoS (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Zhangpo / Remote DoS (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Mhtserv.b / Missing Authentication (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.MiniBlackLash / Remote DoS (malvuln <malvuln13@...il.com>)
[FD] Packed.Win32.Katusha.o (Ransomeware) / Insecure Permissions EoP (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Anaptix.bd / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Buterat.cxq / Insecure Permissions EoP (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Celine / Missing Authentication (malvuln <malvuln13@...il.com>)
[FD] Oracle DB: various issues related to malicious database gateways (Harrison Neal <hneal@...tdidibreak.com>)

February 2 (5 messages)

[FD] APPLE-SA-2021-02-01-1 macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave (Apple Product Security via Fulldisclosure <f…)
[FD] APPLE-SA-2021-02-01-2 Additional information for APPLE-SA-2021-01-26-1 iOS 14.4 and iPadOS 14.4 (Apple Product Security via Fulldisclosure <fulldisclosure…)
[FD] APPLE-SA-2021-02-01-3 Additional information for APPLE-SA-2021-01-26-2 tvOS 14.4 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-02-01-4 Additional information for APPLE-SA-2021-01-26-3 watchOS 7.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org…)
[FD] Backdoor.Win32.Xyligan.blp / Insecure Permissions EoP (malvuln <malvuln13@...il.com>)

February 4 (4 messages)

[FD] null pointer deference in mfmp4srcsnk.dll in latest windows 10 (houjingyi <houjingyi647@...il.com>)
[FD] Backdoor.Win32.NetBull.11.b / Remote Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.RemoteManipulator.brr / Insecure Permissions EoP (malvuln <malvuln13@...il.com>)
[FD] Bug bounty failure stories to learn from: how we ended up to hack a bank with no reward (Red Timmy Security <publications@...timmy.com>)

February 7 (11 messages)

[FD] KSA-Dev-008: Authenticated XSRF leads to complete account takeover in all UNIBOX WiFi Hotspot Controller (Kaustubh via Fulldisclosure <fulldisclosure@...l…)
[FD] KSA_DEV-009 :- Authenticated Code Execution In Unibox 2.4 (Kaustubh via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Trojan.Win32.Gentee.b / Insecure Permissions EoP (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.Gentee.h / Insecure Permissions EoP (malvuln <malvuln13@...il.com>)
[FD] Trojan-Spy.Win32.SpyEyes.auqj / Insecure Permissions EoP (malvuln <malvuln13@...il.com>)
[FD] Trojan-Spy.Win32.SpyEyes.auwl / Insecure Permissions EoP (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.Comei.pgo / Insecure Permissions EoP (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.Cospet.abg / Insecure Permissions EoP (malvuln <malvuln13@...il.com>)
[FD] Email-Worm.Win32.Sircam.eb / Insecure Permissions EoP (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.Delf.uq / Insecure Permissions EoP (malvuln <malvuln13@...il.com>)
[FD] Trojan-Spy.Win32.SpyEyes.awow / Insecure Permissions EoP (malvuln <malvuln13@...il.com>)

February 8 (1 message)

[FD] Trojan-Spy.Win32.WebCenter.a / Information Disclosure (malvuln <malvuln13@...il.com>)

February 10 (1 message)

[FD] SEC Consult SA-20210210-0 :: Reflected Cross-Site Scripting in Adobe Magento Commerce (SEC Consult Vulnerability Lab <research@...-consult.com>)

February 12 (10 messages)

[FD] Path traversal in SolarWinds Serv-U File Server <=15.2.1 (Jack Misiura via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Stored XSS in SolarWinds Serv-U File Server <=15.2.1 (Jack Misiura via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Trojan-Spy.Win32.WinSpy.vwl / Insecure Permissions EoP (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Wollf.15 / Missing Authentication (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.Cafelom.bu / Heap Corruption (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.NetTerrorist / Unauthorized Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Aphexdoor.LiteSock / Remote Stack Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Augudor.a / Unauthenticated Remote File Write Code Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.BackAttack.18 / Multiple Vulnerabilities (malvuln <malvuln13@...il.com>)
[FD] APPLE-SA-2021-02-09-1 macOS Big Sur 11.2.1, macOS Catalina 10.15.7 Supplemental Update, and macOS Mojave 10.14.6 … (Apple Product Security via Fulldisclosu…)

February 17 (11 messages)

[FD] Recon-Informer v1.3 - Intel for offensive systems anti-reconnaissance (nmap) tool (hyp3rlinx <apparitionsec@...il.com>)
[FD] Backdoor.Win32.Backlash.101 / Missing Authentication (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Cafeini.08.b / Missing Authentication (malvuln <malvuln13@...il.com>)
[FD] Trojan-Spy.Win32.WinSpy.wlt / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Cabrotor.21 / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Azbreg.aant / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Bifrose.ahvb / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Indexer.a / Hardcoded Weak Credentials (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Indexer.a / Remote Denial Of Service (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Burbul.b / Anonymous Logon (malvuln <malvuln13@...il.com>)
[FD] SEC Consult SA-20210217-0 :: Multiple Vulnerabilities in Multiple Vulnerabilities (SEC Consult Vulnerability Lab <research@...-consult.com>)

February 18 (5 messages)

[FD] AST-2021-001: Remote crash in res_pjsip_diversion ("Asterisk Security Team" <security@...erisk.org>)
[FD] AST-2021-002: Remote crash possible when negotiating T.38 ("Asterisk Security Team" <security@...erisk.org>)
[FD] AST-2021-003: Remote attacker could prematurely tear down SRTP calls ("Asterisk Security Team" <security@...erisk.org>)
[FD] AST-2021-004: An unsuspecting user could crash Asterisk with multiple hold/unhold requests ("Asterisk Security Team" <security@...erisk.org>)
[FD] AST-2021-005: Remote Crash Vulnerability in PJSIP channel driver ("Asterisk Security Team" <security@...erisk.org>)

February 19 (9 messages)

[FD] Rigged Race Against Firejail for Local Root: Using pipes/ptys to win races (Roman Fiedler <roman.fiedler@...aralleled.eu>)
[FD] Backdoor.Win32.Agent.aak / Weak Hardcoded Credentials (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Agent.aak / Cross Site Request Forgery (CSRF) - Code Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Agent.aak / Remote Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] [CSA-2021-001] Cross-Site Request Forgery in Apache MyFaces (Certitude - Advisories <advisories@...titude.consulting>)
[FD] Multiple remote memory corruptions in Telegram's handling of animated stickers (polict of Shielder <polict@...elder.it>)
[FD] Backdoor.Win32.DarkKomet.bhfh / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.DarkKomet.apcc / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Bionet.10 / Anonymous Logon (malvuln <malvuln13@...il.com>)

February 20 (1 message)

[FD] [KIS-2021-02] docsify <= 4.11.6 DOM-based Cross-Site Scripting Vulnerability (research@...mainsecurity.com)

February 23 (8 messages)

[FD] CIRA Canadian Shield iOS Application - MITM SSL Certificate Vulnerability (CVE-2021-27189) (David Coomber <davidcoomber.infosec@...il.com>)
[FD] IBM(R) Db2(R) Windows client DLL Hijacking Vulnerability(0day) (houjingyi <houjingyi647@...il.com>)
[FD] Backdoor.Win32.Inject.tyq / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Ketch.h / Remote Stack Buffer Overflow (SEH) (malvuln <malvuln13@...il.com>)
[FD] Trojan-Proxy.Win32.Daemonize.i / Remote Denial of Service (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.Pincav.cmfl / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.Pluder.o / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.DarkKomet.irv / Insecure Permissions (malvuln <malvuln13@...il.com>)

February 26 (13 messages)

[FD] Double-Free found on Squid 4.14 and 5.0.5 (Andrés Roldán via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] VisualWare MyConnection Server 11.x Remote Code Execution Vulnerability ("Ryan Wincey" <contact@...urifera.com>)
[FD] Online Tool for Discussion of Vulnerabilities (Yavuz <yavatlas@...il.com>)
[FD] Backdoor.Win32.Agent.xs / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Agent.xw / Remote Null Ptr Dereference - Denial of Service (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Delf.adag / Weak Hardcoded Credentials (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Wollf.h / Missing Authentication (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.Gofot.htx / Local File Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Trojan-Dropper.Win32.Daws.etlm / Remote Unauthenticated System Reboot (malvuln <malvuln13@...il.com>)
[FD] Trojan-Spy.Win32.SpyEyes.elr / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Azbreg.amw / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.Hotkeychick.am / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Trojan-Proxy.Win32.Delf.ai / Remote SEH Buffer Overflow (malvuln <malvuln13@...il.com>)

93 messages

Powered by blists - more mailing lists