full-disclosure mailing list - 2021/10

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2021/10

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹	²	³
⁴	⁵ 3	⁶ 11	⁷	⁸	⁹	¹⁰
¹¹	¹²	¹³ 1	¹⁴	¹⁵	¹⁶	¹⁷
¹⁸	¹⁹ 12	²⁰	²¹	²² 7	²³	²⁴
²⁵	²⁶ 11	²⁷ 23	²⁸	²⁹ 15	³⁰	³¹

Messages by day:

October 5 (3 messages)

[FD] Local Privilege Escalation in G Data’s Security Client “EndpointProtection Enterprise” prior to 17.08.2021 (Florian Bogner via Fulldisclosure <fulldi…)
Re: [FD] SQL injection vulnerability in Talariax sendQuick Alertplus server admin version version 4.3 (refabrik sec <refabriksec@...il.com>)
[FD] SEC Consult SA-20211004-0 :: Critical vulnerabilities in HiKam S6 ("Functional Account, SEC Consult Vulnerability Lab" <security-research@...-consult.com…)

October 6 (11 messages)

[FD] Virus.Win32.Renamer.a / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.LolBot.gen / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Yoddos.an / Insecure Service Path (malvuln <malvuln13@...il.com>)
[FD] HEUR.Trojan.Win32.Generic / Insecure Service Path (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Bifrose.ahyg / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Hupigon.gy / Unauthenticated Open Proxy (malvuln <malvuln13@...il.com>)
[FD] Trojan-PSW.Win32.PdPinch.gen / Remote Denial of Service (malvuln <malvuln13@...il.com>)
[FD] HackTool.Win32.Agent.gi / Local Stack Buffer Overflow (SEH) (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Prorat.lkt / Weak Hardcoded Password (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Prorat.lkt / Port Bounce Scan (MITM) (malvuln <malvuln13@...il.com>)
[FD] [Update]: Dahua Authentication bypass (CVE-2021-33044, CVE-2021-33045) (bashis <mcw@...mail.eu>)

October 13 (1 message)

[FD] [RT-SA-2021-001] Cross-Site Scripting in myfactory.FMS (RedTeam Pentesting GmbH <release@...team-pentesting.de>)

October 19 (12 messages)

[FD] Yellowfin < 9.6.1 Multiple Vulnerabilities (cyberaz0r via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-10-11-1 iOS 15.0.2 and iPadOS 15.0.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Defense in depth -- the Microsoft way (part 78): completely outdated, vulnerable open source component(s) shipped… ("Stefan Kanthak" <stefan.kanthak@...go.…)
[FD] Defense in depth -- the Microsoft way (part 79): Local Privilege Escalation via Windows 11 Installation Assistant ("Stefan Kanthak" <stefan.kanthak@...go.…)
[FD] Trojan-Spy.Win32.Ardamax.ocx / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Worm.Win32.Fasong.c / Insecure Service Path (malvuln <malvuln13@...il.com>)
[FD] Trojan-Proxy.Win32.Ranky.dh / Unauthenticated Open Proxy (malvuln <malvuln13@...il.com>)
[FD] Worm.Win32.Runfer.bpo / Insecure Service Path (malvuln <malvuln13@...il.com>)
[FD] Trojan-Proxy.Win32.Ranky.z / Unauthenticated Open Proxy (malvuln <malvuln13@...il.com>)
[FD] Virus.Win32.Ipamor.c / Unauthenticated Remote System Reboot (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.LanFiltrator.11.b / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.LanaFTP.k / Heap Corruption (malvuln <malvuln13@...il.com>)

October 22 (7 messages)

[FD] Onapsis Security Advisory 2021-0015: [Multiple CVEs] Memory Corruption vulnerability in SAP NetWeaver ABAP Dispatc… (Onapsis Research via Fulldisclosure <fu…)
[FD] Onapsis Security Advisory 2021-0016: XXE in SAP JAVA NetWeaver System Connections (Onapsis Research via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Onapsis Security Advisory 2021-0017: [Multiple CVEs] Memory Corruption vulnerability in SAP NetWeaver ABAP Enqueue… (Onapsis Research via Fulldisclosure <fu…)
[FD] Onapsis Security Advisory 2021-0018: [Multiple CVEs] Memory Corruption vulnerability in SAP NetWeaver ABAP Gateway… (Onapsis Research via Fulldisclosure <fu…)
[FD] Onapsis Security Advisory 2021-0019: [Multiple CVEs] Memory Corruption vulnerability in SAP NetWeaver ABAP IGS ser… (Onapsis Research via Fulldisclosure <fu…)
[FD] Onapsis Security Advisory 2021-0020: SAP Enterprise Portal - Exposed sensitive data in html body (Onapsis Research via Fulldisclosure <fulldisclosure@...l…)
[FD] [CSA-2021-003] Remote Code Execution in GridPro Request Management for Windows Azure Pack (Certitude - Advisories <advisories@...titude.consulting>)

October 26 (11 messages)

[FD] Simplephpscripts Simple CMS v2.1 - XSS Web Vulnerability ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] SPA Cart CMS - Multiple SQL Injection Web Vulnerabilities ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] Simplephpscripts Simple CMS v2.1 - Persistent Vulnerability ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] Simplephpscripts Simple CMS v2.1 - Remote SQL Injection Vulnerability ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] PHP Melody v3.0 - Multiple Cross Site Web Vulnerabilities ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] VDPBW Bundeswehr - 1 Year Vulnerability Disclosure Policy of the Bundeswehr ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] [ES2021-05] FreeSWITCH vulnerable to SIP digest leak for configured gateways ("Sandro Gauci" <sandro@...blesecurity.com>)
[FD] [ES2021-08] FreeSWITCH does not authenticate SIP SUBSCRIBE requests by default ("Sandro Gauci" <sandro@...blesecurity.com>)
[FD] [ES2021-06] FreeSWITCH susceptible to Denial of Service via SIP flooding ("Sandro Gauci" <sandro@...blesecurity.com>)
[FD] [ES2021-09] FreeSWITCH susceptible to Denial of Service via invalid SRTP packets ("Sandro Gauci" <sandro@...blesecurity.com>)
[FD] [ES2021-07] FreeSWITCH does not authenticate SIP MESSAGE requests, leading to spam and message spoofing ("Sandro Gauci" <sandro@...blesecurity.com>)

October 27 (23 messages)

[FD] PHP Melody v3.0 - (vid) SQL Injection Vulnerability ("info@...c-service.de" <info@...c-service.de>)
[FD] PHP Melody v3.0 - (vid) SQL Injection Vulnerability ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] PHP Melody v3.0 - (Editor) Persistent XSS Vulnerability ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] PHP Melody v3.0 - (submitted) Persistent XSS Vulnerability ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] Mult-e-Cart Ultimate v2.4 - SQL Injection Vulnerability ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] Isshue Shopping Cart v3.5 - Cross Site Web Vulnerability ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] Vanguard v2.1 - (Search) POST Inject Web Vulnerability ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] Ultimate POS v4.4 - (Products) Persistent XSS Vulnerability ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] APPLE-SA-2021-10-26-1 iOS 15.1 and iPadOS 15.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-10-26-2 iOS 14.8.1 and iPadOS 14.8.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-10-26-3 macOS Monterey 12.0.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-10-26-4 macOS Big Sur 11.6.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-10-26-5 Security Update 2021-007 Catalina (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-10-26-6 watchOS 8.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-10-26-7 tvOS 15.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-10-26-8 Additional information for APPLE-SA-2021-09-20-5 Safari 15 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-10-26-9 Additional information for APPLE-SA-2021-09-20-1 iOS 15 and iPadOS 15 (Apple Product Security via Fulldisclosure <fulldisclosure@sec…)
[FD] APPLE-SA-2021-10-26-10 Additional information for APPLE-SA-2021-09-20-2 watchOS 8 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-10-26-11 Additional information for APPLE-SA-2021-09-20-3 tvOS 15 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] [oss-security] [ES2021-09] FreeSWITCH susceptible to Denial of Service via invalid SRTP packets ("Sandro Gauci" <sandro@...blesecurity.com>)
[FD] [oss-security] [ES2021-05] FreeSWITCH vulnerable to SIP digest leak for configured gateways ("Sandro Gauci" <sandro@...blesecurity.com>)
[FD] [oss-security] [ES2021-06] FreeSWITCH susceptible to Denial of Service via SIP flooding ("Sandro Gauci" <sandro@...blesecurity.com>)
[FD] [oss-security] [ES2021-08] FreeSWITCH does not authenticate SIP SUBSCRIBE requests by default ("Sandro Gauci" <sandro@...blesecurity.com>)

October 29 (15 messages)

[FD] SEC Consult SA-20211028-0 :: Denial of Service in CODESYS V2 ("Functional Account, SEC Consult Vulnerability Lab" <security-research@...-consult.com>)
[FD] Huge DOCSIS issue (Chris <Public2@...ox1.com>)
[FD] Trojan.Win32.Akl.bc / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Delf.arjo / Insecure Service Path (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Hupigon.acio / Insecure Service Path (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Hupigon.acio / Unauthenticated Open Proxy (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Hupigon.afjk / Directory Traversal (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Hupigon.afjk / Port Bounce Scan (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Hupigon.afjk / Authentication Bypass RCE (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Mazben.es / Unauthenticated Open Proxy (malvuln <malvuln13@...il.com>)
[FD] HEUR.Backdoor.Win32.Generic / Unauthenticated Open Proxy (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Antilam.14.o / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Virus.Win32.Ipamor.c / Unauthenticated Remote System Reboot (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Prorat.ntz / Port Bounce Scan (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Prorat.ntz / Weak Hardcoded Password (malvuln <malvuln13@...il.com>)

83 messages

Powered by blists - more mailing lists