full-disclosure mailing list - 2021/05

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2021/05

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹	²
³	⁴ 10	⁵	⁶	⁷ 10	⁸	⁹
¹⁰	¹¹ 10	¹²	¹³	¹⁴ 2	¹⁵	¹⁶
¹⁷	¹⁸ 16	¹⁹ 3	²⁰	²¹ 2	²²	²³
²⁴	²⁵ 9	²⁶ 17	²⁷	²⁸ 2	²⁹	³⁰
³¹

Messages by day:

May 4 (10 messages)

Re: [FD] Two vulnerabilities found in MikroTik's RouterOS (Q C <cq674350529@...il.com>)
Re: [FD] Two vulnerabilities found in MikroTik's RouterOS (Q C <cq674350529@...il.com>)
Re: [FD] Two vulnerabilities found in MikroTik's RouterOS (Q C <cq674350529@...il.com>)
[FD] KSA-Dev-0010:CVE-2021-25328:Authenticated Stack Overflow in Skyworth RN510 mesh Device (Kaustubh Padwad via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] KSA-Dev-0011:CVE-2021-25327: Authenticated XSRF in Skyworth RN510 Mesh Extender (Kaustubh Padwad via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] KSA-Dev-0012:CVE-2021-25326:Unauthenticated Sensitive information Discloser in Skyworth RN510 Mesh Extender (Kaustubh Padwad via Fulldisclosure <fulldiscl…)
[FD] APPLE-SA-2021-05-03-2 iOS 12.5.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-05-03-1 iOS 14.5.1 and iPadOS 14.5.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-05-03-4 macOS Big Sur 11.3.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-05-03-3 watchOS 7.4.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)

May 7 (10 messages)

Re: [FD] Three vulnerabilities found in MikroTik's RouterOS (Q C <cq674350529@...il.com>)
Re: [FD] Three vulnerabilities found in MikroTik's RouterOS (Q C <cq674350529@...il.com>)
Re: [FD] Two vulnerabilities found in MikroTik's RouterOS (Q C <cq674350529@...il.com>)
Re: [FD] Four vulnerabilities found in MikroTik's RouterOS (Q C <cq674350529@...il.com>)
[FD] Four vulnerabilities found in MikroTik's RouterOS (Q C <cq674350529@...il.com>)
[FD] Trojan.Win32.Agent.xdtv / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.Siscos.bqe / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Floder.gqe / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Packed.Win32.Black.d / Unauthenticated Open Proxy (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.NinjaSpy.c / Remote Command Execution (malvuln <malvuln13@...il.com>)

May 11 (10 messages)

[FD] SEC Consult SA-20210511-0 :: Cross-site Scripting Vulnerabilities in REWE GO (SEC Consult Vulnerability Lab <research@...-consult.com>)
Re: [FD] Three vulnerabilities found in MikroTik's RouterOS (Gynvael Coldwind <gynvael@...dwind.pl>)
Re: [FD] Three vulnerabilities found in MikroTik's RouterOS (Q C <cq674350529@...il.com>)
[FD] Four vulnerabilities found in MikroTik's RouterOS (Q C <cq674350529@...il.com>)
Re: [FD] Three vulnerabilities found in MikroTik's RouterOS (Gynvael Coldwind <gynvael@...dwind.pl>)
[FD] Backdoor.Win32.MotivFTP.12 / Authentication Bypass RCE (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Antilam.13.a / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] CVE-2021-32051 Hexagon G!nius Auskunftsportal before 5.0.0.0 allows SQL injection via the GiPWorkflow/Service/Down… (Marcel Keiffenheim <marcel@...ffenheim.…)
[FD] Trovent Security Advisory 2103-01 / Authenticated SQL injection in ERPNext 13.0.0/12.18.0 (Stefan Pietsch <s.pietsch@...vent.io>)
[FD] Trovent Security Advisory 2103-02 / Multiple XSS vulnerabilities in ERPNext 13.0.0/12.18.0 (Stefan Pietsch <s.pietsch@...vent.io>)

May 14 (2 messages)

[FD] [CFP]: 2nd Joint Workshop on CPS&IoT Security and Privacy (CPSIoTSec 2021) (Call For Papers CPSIOTSEC21 <callforpapers.cpsiotsec21@...il.com>)
[FD] Backdoor.Win32.Delf.zho / Authentication Bypass RCE (malvuln <malvuln13@...il.com>)

May 18 (16 messages)

[FD] [CFP]: 2nd Joint Workshop on CPS&IoT Security and Privacy (CPSIoTSec 2021) (Call For Papers CPSIOTSEC21 <callforpapers.cpsiotsec21@...il.com>)
[FD] (u)rxvt terminal (+bash) remoteish code execution 0day (def <def@...meet.info>)
[FD] NiceHash Miner Excavator API Cross-Site Request Forgery (Harry Sintonen via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Backdoor.Win32.Delf.abb / Insecure Transit (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Agent.cy / Weak Hardcoded Credentials (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Agent.cy / Insecure Transit (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Agent.cy / Denial of Service (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Agent.lyw / Remote Stack Buffer Overflow (UDP) (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Danton.43 / Weak Hardcoded Credentials RCE (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Danton.43 / MITM Port Bounce Scan (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Agent.oda / Remote Stack Buffer Overflow (UDP) (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Antilam.14.d / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.DarkMoon.a / Weak Hardcoded Password (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.DarkMoon.a / Insecure Transit (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Delf.aez / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Defense in depth -- the Microsoft way (part 77): access without access permission ("Stefan Kanthak" <stefan.kanthak@...go.de>)

May 19 (3 messages)

[FD] Backdoor.Win32.Psychward.c / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Psychward.ds / Weak Hardcoded Password (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.RMFdoor.c / Authentication Bypass RCE (malvuln <malvuln13@...il.com>)

May 21 (2 messages)

Re: [FD] (u)rxvt terminal (+bash) remoteish code execution 0day (def <def@...meet.info>)
[FD] CVE-2021-31535 libX11 Insufficient Length Checks PoC and Archeology (Roman Fiedler <roman.fiedler@...aralleled.eu>)

May 25 (9 messages)

[FD] [CFP]: 2nd Joint Workshop on CPS&IoT Security and Privacy (CPSIoTSec 2021) (Call For Papers CPSIOTSEC21 <callforpapers.cpsiotsec21@...il.com>)
[FD] Cross-Site Scripting Vulnerability in Zen Cart 1.5.7 (Daniel Bishtawi via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Vol. 2 (2021) No. 1 of Journal of Cyber Forensics and Advanced Threat Investigations - Now Published (Andrew Zayine <scholarshipchile@...il.com>)
[FD] Backdoor.Win32.Singu.a / Remote Stack Buffer Overflow (UDP Datagram) (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.SkyDance.216 / Remote Stack Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Spirit.12.b / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Upload.a / Remote Denial of Service (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Spion4 / Insecure Transit (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Tonerok.d / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)

May 26 (17 messages)

[FD] X41 D-Sec GmbH Security Advisory X41-2021-002: nginx DNS Resolver Off-by-One Heap Write Vulnerability (X41 D-Sec GmbH Advisories <advisories@...-dsec.de>)
[FD] Unicorn Emulator 1.0.3 is out! (Nguyen Anh Quynh <aquynh@...il.com>)
[FD] APPLE-SA-2021-05-25-4 Security Update 2021-003 Catalina (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-05-25-3 Security Update 2021-004 Mojave (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-05-25-8 Boot Camp 6.1.14 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-05-25-1 iOS 14.6 and iPadOS 14.6 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-05-25-5 Safari 14.1.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-05-25-7 tvOS 14.6 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-05-25-2 macOS Big Sur 11.4 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-05-25-6 watchOS 7.5 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] KL-001-2021-001: CommScope Ruckus IoT Controller Unauthenticated API Endpoints (KoreLogic Disclosures via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] KL-001-2021-002: CommScope Ruckus IoT Controller Hard-coded API Keys Exposed (KoreLogic Disclosures via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] KL-001-2021-003: CommScope Ruckus IoT Controller Hard-coded System Passwords (KoreLogic Disclosures via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] KL-001-2021-004: CommScope Ruckus IoT Controller Hard-coded Web Application Administrator Password (KoreLogic Disclosures via Fulldisclosure <fulldisclosu…)
[FD] KL-001-2021-005: CommScope Ruckus IoT Controller Web Application Directory Traversal (KoreLogic Disclosures via Fulldisclosure <fulldisclosure@...lists.or…)
[FD] KL-001-2021-006: CommScope Ruckus IoT Controller Web Application Arbitrary Read/Write (KoreLogic Disclosures via Fulldisclosure <fulldisclosure@...lists.o…)
[FD] KL-001-2021-007: CommScope Ruckus IoT Controller Undocumented Account (KoreLogic Disclosures via Fulldisclosure <fulldisclosure@...lists.org>)

May 28 (2 messages)

[FD] QNAP MusicStation/MalwareRemover Pre-Auth Root Remote Code Execution (polict of Shielder via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] [KIS-2021-04] IPS Community Suite <= 4.5.4.2 (previewBlock) PHP Code Injection Vulnerability (research@...mainsecurity.com)

81 messages

Powered by blists - more mailing lists