full-disclosure mailing list - 2021/04

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2021/04

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹	² 4	³	⁴
⁵ 4	⁶ 6	⁷ 1	⁸ 9	⁹	¹⁰ 1	¹¹
¹²	¹³	¹⁴ 1	¹⁵	¹⁶	¹⁷	¹⁸
¹⁹	²⁰ 15	²¹	²² 1	²³ 6	²⁴	²⁵
²⁶	²⁷ 14	²⁸ 5	²⁹	³⁰ 10

Messages by day:

April 2 (4 messages)

[FD] Backdoor.Win32.Burbul.b / Authentication Bypass MITM Port Bounce Scan (malvuln <malvuln13@...il.com>)
[FD] Trojan-Downloader.Win32.Delf.oxz / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Trojan-Downloader.Win32.Delf.ur / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Trojan-Downloader.Win32.Delf.nzg / Insecure Permissions (malvuln <malvuln13@...il.com>)

April 5 (4 messages)

[FD] Onapsis Security Advisory 2021-0001: [CVE-2020-6207] - Unauthenticated RCE in SAP all SMD Agents connected to SAP … (Onapsis Research via Fulldisclosure <fu…)
[FD] Onapsis Security Advisory 2021-0002: [CVE-2020-6234] - SAP Multiple root LPE through SAP Host Control (Onapsis Research via Fulldisclosure <fulldisclosure…)
[FD] Onapsis Security Advisory 2021-0003: [CVE-2020-6287] - [SAP RECON] SAP JAVA: Unauthenticated execution of configur… (Onapsis Research via Fulldisclosure <fu…)
[FD] Onapsis Security Advisory 2021-0004: [CVE-2020-26820] - SAP Java OS Remote Code Execution (Onapsis Research via Fulldisclosure <fulldisclosure@...lists.or…)

April 6 (6 messages)

[FD] python embedded program local arbitrary python script execution on windows (houjingyi <houjingyi647@...il.com>)
[FD] Defense in depth -- The Microsoft way (part 74): Windows Defender SmartScreen is rather DUMP, it allows denial of … ("Stefan Kanthak" <stefan.kanthak@...go.…)
[FD] Trojan.Win32.Sharer.h / Anonymous Logon RCE (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.Sharer.h / Anonymous Logon MITM Port Bounce Scan (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.Sharer.h / Known Vulnerable Component - Heap Corruption (malvuln <malvuln13@...il.com>)
[FD] Trojan-Downloader.Win32.FraudLoad.xevn / Insecure Permissions (malvuln <malvuln13@...il.com>)

April 7 (1 message)

[FD] SEC Consult SA-20210407-0 :: Arbitrary File Upload and Bypassing .htaccess Rules in Monospace Directus Headless CM… (SEC Consult Vulnerability Lab <research…)

April 8 (9 messages)

[FD] CVE-2021-26709 - Multiple Pre-Auth Stack Buffer Overflow in D-Link DSL-320B-D1 ADSL Modem (Gabriele Gristina <gabriele.gristina@...il.com>)
[FD] usd20210005: Privileged File Write in Check Point Identity Agent < R81.018.0000 (Responsible Disclosure via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Trojan.Win32.Hosts2.yqf / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Trojan-Downloader.Win32.Genome.omht / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Trojan-Downloader.Win32.Genome.qiw / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.Hotkeychick.d / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Hupigon.das / Unauthenticated Open Proxy (malvuln <malvuln13@...il.com>)
[FD] [SYSS-2020-032] Open Redirect in Tableau Server (CVE-2021-1629) (Vladimir Bostanov <vladimir.bostanov@...s.de>)
[FD] Backdoor.Win32.Small.n / Unauthenticated Remote Command Execution (SYSTEM) (malvuln <malvuln13@...il.com>)

April 10 (1 message)

[FD] CFP ZeroNights 2021 (CFP ZeroNights <cfp@...onights.org>)

April 14 (1 message)

[FD] SEC Consult SA-20210414-0 :: Reflected cross-site scripting in Microsoft Azure DevOps Server (SEC Consult Vulnerability Lab <research@...-consult.com>)

April 20 (15 messages)

[FD] Plantronics HUB <= 3.21 EoP and DoS (Red Timmy Security <publications@...timmy.com>)
[FD] [CVE-2021-20989, CVE-2021-20990, CVE-2021-20991, CVE-2021-20992] Multiple vulnerabilities in Fibaro Home Center (research <research@...-inspector.com>)
[FD] Trojan.Win32.Jorik.qje / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.Agent.zfgh / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] HEUR.Hoax.Win32.FrauDrop.gen / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Zombam.h / Remote Stack Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.Agentb.iofv / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.NanoBot.onh / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Trojan-Dropper.Win32.Agent.bjtzcp / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.Bayrob.dtrg / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] HEUR.Backdoor.Win32.Generic / Unauthenticated Open Proxy (malvuln <malvuln13@...il.com>)
[FD] Constructor.Win32.Bifrose.ag / Local Stack Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.Agent.hsm / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] [CVE-2021-1472/CVE-2021-1473] Cisco RV Series Authentication Bypass and Remote Command Execution (Takeshi Shiomitsu <takeshi@...-inspector.com>)
[FD] CVE-2021-28321-CVE-2021-28323: elevation of privileges in Microsoft Diaghub (Imre Rad <radimre83@...il.com>)

April 22 (1 message)

[FD] SEC Consult SA-20210422-0 :: Stored Cross Site Scripting (Outdated software library) in BMDWeb 2.0 (SEC Consult Vulnerability Lab <research@...-consult.co…)

April 23 (6 messages)

[FD] Executable installers are vulnerable^WEVIL (case 61): arbitrary code execution WITH escalation of privilege via I… ("Stefan Kanthak" <stefan.kanthak@...go.…)
[FD] HEUR.Trojan.Win32.Generic / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Trojan-Dropper.Win32.Agent.xtp / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] IM-Worm.Win32.Bropia.aa / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.DarkKomet.artr / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Packed.Win32.Black.d / Unauthenticated Open Proxy (malvuln <malvuln13@...il.com>)

April 27 (14 messages)

[FD] Supply Chain Attacks via GitHub.com Releases (Nightwatch Cybersecurity Research <research@...htwatchcybersecurity.com>)
[FD] APPLE-SA-2021-04-26-1 iOS 14.5 and iPadOS 14.5 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-04-26-2 macOS Big Sur 11.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-04-26-3 Security Update 2021-002 Catalina (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Virus.Win32.Banka.a / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Worm.Win32.Busan.k / Insecure Communication Protocol (malvuln <malvuln13@...il.com>)
[FD] APPLE-SA-2021-04-26-4 Security Update 2021-003 Mojave (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-04-26-6 tvOS 14.5 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-04-26-5 watchOS 7.4 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-04-26-7 Safari 14.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-04-26-8 iCloud for Windows 12.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-04-26-9 iTunes 12.11.3 for Windows (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-04-26-10 Xcode 12.5 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] XSS stored in PFSense 2.5.0 CVE-2021-27933 (William Costa <william.costa@...il.com>)

April 28 (5 messages)

[FD] Trojan-Dropper.Win32.Dycler.vrp / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Trojan-Dropper.Win32.Injector.aobl / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Agent.afq / Missing Authentication (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Agent.afq / Directory Traversal (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Agent.afq / Remote Heap Corruption (malvuln <malvuln13@...il.com>)

April 30 (10 messages)

[FD] Open-Xchange Security Advisory 2021-04-30 (Martin Heiland via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Defense in depth -- the Microsoft way (part 75): Bypass of SAFER alias Software Restriction Policies NOT FIXED ("Stefan Kanthak" <stefan.kanthak@...go.de>)
[FD] Defense in depth -- The Microsoft way (part 76): arbitrary code execution WITH elevation of privilege in user-writ… ("Stefan Kanthak" <stefan.kanthak@...go.…)
[FD] HEUR.Trojan.Win32.Bayrob.gen / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Worm.Win32.Delf.hu / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Agent.ggw / Authentication Bypass (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Agent.gmug / Heap Corruption (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Agent.kte / Remote Stack Buffer Overflow (UDP Datagram) (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Agent.oj / Remote Stack Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Agent.oj / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)

77 messages

Powered by blists - more mailing lists