full-disclosure mailing list - 2021/06

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2021/06

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 1	²	³	⁴ 13	⁵	⁶
⁷	⁸ 3	⁹	¹⁰	¹¹ 6	¹²	¹³ 2
¹⁴ 10	¹⁵ 4	¹⁶	¹⁷	¹⁸ 9	¹⁹	²⁰
²¹	²² 2	²³	²⁴	²⁵	²⁶	²⁷
²⁸ 9	²⁹ 1	³⁰

Messages by day:

June 1 (1 message)

[FD] SEC Consult SA-20210601-0 :: Multiple critical vulnerabilities in Korenix Technology JetNet Series (SEC Consult Vulnerability Lab <research@...-consult.co…)

June 4 (13 messages)

[FD] Trovent Security Advisory 2104-01 / HealthForYou & Sanitas HealthCoach: User enumeration through API (Stefan Pietsch <s.pietsch@...vent.io>)
[FD] Trovent Security Advisory 2104-02 / HealthForYou & Sanitas HealthCoach: Account takeover with only email address pos… (Stefan Pietsch <s.pietsch@...vent.io>)
[FD] Trojan.Win32.Scar.dulk / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.NerTe.772 / Authentication Bypass RCE (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.NerTe.772 / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Netbus.12 / Unauthenticated Information Disclosure (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.NetControl2.293 / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Whirlpool.a / Remote Buffer Overflow - UDP Datagram (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.WinShell.a / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Wisell / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.NetSpy.10 / Heap Corruption (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Delf.acz / Remote Stack Buffer Overflow (SEH) (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Androm.df / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)

June 8 (3 messages)

[FD] Backdoor.Win32.Neakse.bit / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Wollf.12 / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Trojan-Dropper.Win32.Googite.a / Unauthenticated Open Proxy (malvuln <malvuln13@...il.com>)

June 11 (6 messages)

[FD] secuvera-SA-2021-01: Privilege Escalation in NetSetMan Pro 4.7.2 (Simon Bieber <sbieber@...uvera.de>)
[FD] Backdoor.Win32.Wuca.nz / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.XRat.d / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Zombam.gen / Cross Site Scripting (XSS) (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Zombam.gen / Unauthenticated URL Command Injection (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Zombam.gen / Remote Stack Buffer Overflow (malvuln <malvuln13@...il.com>)

June 13 (2 messages)

[FD] popo:: linux kernel vulns of it. (KJ Jung <x90cx90c1@...il.com>)
[FD] Backdoor.Win32.Pazus.18 / Authentication Bypass RCE (malvuln <malvuln13@...il.com>)

June 14 (10 messages)

[FD] Onapsis Security Advisory 2021-0005: SAP Solution Manager Open Redirect from Trace Analysis (Onapsis Research via Fulldisclosure <fulldisclosure@...lists.…)
[FD] Onapsis Security Advisory 2021-0006: [CVE-2020-26811] - SAP Hybris eCommerce - SSRF in acceleratorservices module (Onapsis Research via Fulldisclosure <fu…)
[FD] Onapsis Security Advisory 2021-0007: Exposure of Sensitive Information to an Unauthorized Actor (Onapsis Research via Fulldisclosure <fulldisclosure@...li…)
[FD] Onapsis Security Advisory 2021-0008: OS Command Injection in CA Introscope Enterprise Manager (Onapsis Research via Fulldisclosure <fulldisclosure@...list…)
[FD] Onapsis Security Advisory 2021-0009: Hard-coded Credentials in CA Introscope Enterprise Manager (Onapsis Research via Fulldisclosure <fulldisclosure@...li…)
[FD] Onapsis Security Advisory 2021-0010: File exfiltration and DoS in SolMan End-User Experience Monitoring (Onapsis Research via Fulldisclosure <fulldisclosu…)
[FD] Onapsis Security Advisory 2021-0011 Missing authorization check in SolMan End-User Experience Monitoring (Onapsis Research via Fulldisclosure <fulldisclos…)
[FD] Onapsis Security Advisory 2021-0012: SAP Manufacturing Integration and Intelligence lack of server side validation… (Onapsis Research via Fulldisclosure <fu…)
[FD] Onapsis Security Advisory 2021-0013: [CVE-2020-26829] - Missing Authentication Check In SAP NetWeaver AS JAVA P2P … (Onapsis Research via Fulldisclosure <fu…)
[FD] Onapsis Security Advisory 2021-0014: Missing authorization check in SAP Solution Manager LM-SERVICE Component SP 1… (Onapsis Research via Fulldisclosure <fu…)

June 15 (4 messages)

[FD] popo2, kernel/tun driver bufferoverflow. (KJ Jung <x90cx90c1@...il.com>)
[FD] Backdoor.Win32.VB.pld / Insecure Transit (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.VB.pld / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Zombam.gen / Information Disclosure (malvuln <malvuln13@...il.com>)

June 18 (9 messages)

[FD] [SYSS-2021-007]: Protectimus SLIM NFC - External Control of System or Configuration Setting (CWE-15) (CVE-2021-32033… (Matthias Deeg <matthias.deeg@...s.de>)
Re: [FD] popo/popo2 linux kernel vulns (RaziREKT via Fulldisclosure <fulldisclosure@...lists.org>)
Re: [FD] popo2, kernel/tun driver bufferoverflow. (Robert Święcki <robert@...ecki.net>)
[FD] Email-Worm.Win32.Kipis.a / Unauthenticated Remote Code Execution (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.Alien.erf / Remote Denial of Service (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.Alien.erf / Remote Stack Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Trovent Security Advisory 2105-01 / CVE-2021-32612: VeryFitPro unencrypted cleartext transmission of sensitive infor… (Stefan Pietsch <s.pietsch@...vent.io>)
[FD] Trojan.Win32.Alien.erf / Directory Traversal (malvuln <malvuln13@...il.com>)
[FD] Trojan-Dropper.Win32.Googite.b / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)

June 22 (2 messages)

[FD] SYSS-2021-032 Admin Columns WordPress Plug-In - Persistent Cross-Site Scripting (Johannes Lauinger <johannes.lauinger@...s.de>)
[FD] Backdoor.Win32.Hupigon.aaio / Remote Stack Buffer Overflow (malvuln <malvuln13@...il.com>)

June 28 (9 messages)

[FD] Using the Android USB Driver to Extract Data as USB Mass Storage Device (Roman Fiedler <roman.fiedler@...aralleled.eu>)
[FD] Backdoor.Win32.ReverseTrojan.200 / Authentication Bypass Empty Password (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.SecondThought.ak / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.Banpak.kh / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Trojan-Dropper.Win32.Juntador.a / Weak Hardcoded Password (malvuln <malvuln13@...il.com>)
[FD] Trojan-Dropper.Win32.Krepper.a / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Email-Worm.Win32.Trance.a / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Trojan-Dropper.Win32.Scrop.dyi / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Constructor.Win32.Bifrose.asc / Local Stack Buffer Overflow (Heap Corruption) (malvuln <malvuln13@...il.com>)

June 29 (1 message)

[FD] CVE-2021-35523: Local Privilege Escalation in Securepoint SSL VPN Client 2.0.30 (Florian Bogner via Fulldisclosure <fulldisclosure@...lists.org>)

60 messages

Powered by blists - more mailing lists