full-disclosure mailing list - 2021/07

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2021/07

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹	²	³	⁴
⁵	⁶ 20	⁷	⁸	⁹ 1	¹⁰	¹¹
¹²	¹³ 11	¹⁴ 1	¹⁵	¹⁶ 3	¹⁷	¹⁸
¹⁹ 1	²⁰ 11	²¹	²² 3	²³ 10	²⁴	²⁵
²⁶	²⁷ 11	²⁸	²⁹	³⁰	³¹

Messages by day:

July 6 (20 messages)

[FD] Three vulnerabilities found in MikroTik's RouterOS (Q C <cq674350529@...il.com>)
[FD] IoT/ICS Armageddon: hacking devices like there’s no tomorrow (part 1) (Red Timmy Security <publications@...timmy.com>)
[FD] Backdoor.Win32.NerTe.781 / Authentication Bypass RCE (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.NerTe.781 / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Trojan-Dropper.Win32.SVB.cz / Authentication Bypass RCE (malvuln <malvuln13@...il.com>)
[FD] Trojan-Dropper.Win32.SVB.cz / Port Bounce Scan (MITM) (malvuln <malvuln13@...il.com>)
[FD] Trojan-Spy.Win32.Xspyout.a / Unauthenticated Open Proxy (malvuln <malvuln13@...il.com>)
[FD] Trojan-Proxy.Win32.Ranky.ag / Unauthenticated Open Proxy (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Hupigon.aiss / Unauthenticated Open Proxy (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Hupigon.gsy / Unauthenticated Open Proxy (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.VB.bcng / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Trojan-Dropper.Win32.Agent.wxl / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] HEUR.Trojan.Win32.Generic / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.Inject.adwas / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Zombam.l / Remote Stack Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Zombam.l / Unauthenticated URL Command Injection (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.WinShell.40 / Authentication Bypass Command Execution (malvuln <malvuln13@...il.com>)
[FD] Virus.Win32.Shodi.e / Insecure Transit (malvuln <malvuln13@...il.com>)
[FD] Virus.Win32.Shodi.e / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Virus.Win32.Shodi.e / Heap Corruption (malvuln <malvuln13@...il.com>)

July 9 (1 message)

[FD] Novus Managment System Vulnerabilities (CVE-2021-34820, CVE-2021-38421) (Dariusz G <dariusz.gonda@...il.com>)

July 13 (11 messages)

[FD] HEUR.Backdoor.Win32.Agent.gen / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.IRC.Ataka.a / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Trojan-Proxy.Win32.Ranky.gen / Unauthenticated Open Proxy (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.NerTe.a / Authentication Bypass RCE (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.NerTe.a / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.RASFlooder.b / Hardcoded Plaintext Password (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Surila.j / Port Bounce Scan (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Surila.j / Authentication Bypass (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Surila.j / Remote Denial of Service (malvuln <malvuln13@...il.com>)
[FD] VirTool.Win32.Afix / Local Stack Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] VirTool.Win32.Afix / Local Stack Buffer Overflow (malvuln <malvuln13@...il.com>)

July 14 (1 message)

[FD] SEC Consult SA-20210714-0 :: Critical vulnerabilities in Schneider Electric EVlink Charging Stations (SEC Consult Vulnerability Lab <research@...-consult.…)

July 16 (3 messages)

[FD] Open-Xchange Security Advisory 2021-07-15 (Martin Heiland via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] New Release: UFONet v1.7 - "KRäK!eN"... (psy <epsylon@...eup.net>)
[FD] VMware ThinApp DLL hijacking vulnerability (houjingyi <houjingyi647@...il.com>)

July 19 (1 message)

[FD] [KIS-2021-05] Concrete5 <= 8.5.5 (Logging Settings) Phar Deserialization Vulnerability (Egidio Romano <research@...mainsecurity.com>)

July 20 (11 messages)

[FD] Open-Xchange Security Advisory 2021-07-19 (Martin Heiland via Fulldisclosure <fulldisclosure@...lists.org>)
Re: [FD] New Release: UFONet v1.7 - "KRäK!eN"... (Pierre Kim <pierre.kim.sec@...il.com>)
[FD] Multiple vulnerabilities in Dell OpenManage Enterprise (Pierre Kim <pierre.kim.sec@...il.com>)
Re: [FD] New Release: UFONet v1.7 - "KRäK!eN"... (psy <epsylon@...eup.net>)
[FD] HEUR.Backdoor.Win32.Generic / Unauthenticated Open Proxy (malvuln <malvuln13@...il.com>)
[FD] HEUR.Backdoor.Win32.Generic / Unauthenticated Open Proxy (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.IRCBot.gen / Weak Hardcoded Password (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Agent.bjev / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Trojan-Spy.Win32.SpyEyes.abdb / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Trojan-Spy.Win32.SpyEyes.hqd / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.IRCBot.gen / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)

July 22 (3 messages)

[FD] AST-2021-007: Remote Crash Vulnerability in PJSIP channel driver ("Asterisk Security Team" <security@...erisk.org>)
[FD] AST-2021-008: Remote crash when using IAX2 channel driver ("Asterisk Security Team" <security@...erisk.org>)
[FD] AST-2021-009: pjproject/pjsip: crash when SSL socket destroyed during handshake ("Asterisk Security Team" <security@...erisk.org>)

July 23 (10 messages)

[FD] CFP for Hardwear.io Netherlands 2021 (Andrea Simonca <andrea@...dwear.io>)
[FD] Cross-site Scripting vulnerability in Ampache 4.4.2 (Daniel Bishtawi via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] ipython3 may execute code from the current working directory (Georgi Guninski <gguninski@...il.com>)
[FD] APPLE-SA-2021-07-21-1 iOS 14.7 and iPadOS 14.7 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-07-21-2 macOS Big Sur 11.5 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-07-21-3 Security Update 2021-004 Catalina (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-07-21-4 Security Update 2021-005 Mojave (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-07-21-5 watchOS 7.6 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-07-21-6 tvOS 14.7 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-07-21-7 Safari 14.1.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)

July 27 (11 messages)

[FD] Potential symlink attack in python3 __pycache__ (Georgi Guninski <gguninski@...il.com>)
[FD] ATLASSIAN - CVE-2020-36239 - Jira Data Center and Jira Service Management Data Center (Atlassian <security@...assian.com>)
[FD] Backdoor.Win32.Hupigon.aaur / Unauthenticated Open Proxy (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Mazben.me / Unauthenticated Open Proxy (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Agent.cu / Authentication Bypass RCE (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Agent.cu / Port Bounce Scan (MITM) (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Agent.cu / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.PsyRat.b / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.PsyRat.b / Remote Denial of Service (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Bifrose.acci / Local Stack Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Nbdd.bgz / Remote Stack Buffer Overflow (malvuln <malvuln13@...il.com>)

72 messages

Powered by blists - more mailing lists