full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2021/11

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹	² 9	³	⁴	⁵ 17	⁶	⁷
⁸	⁹ 11	¹⁰	¹¹	¹² 3	¹³	¹⁴
¹⁵	¹⁶	¹⁷	¹⁸ 1	¹⁹	²⁰	²¹ 2
²² 9	²³ 1	²⁴	²⁵	²⁶	²⁷	²⁸
²⁹	³⁰ 3

Messages by day:

November 2 (9 messages)

[FD] Viruscreds - Malware password database (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.Pasta.mca / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.Phires.zm / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.Delf.bna / Information Disclosure (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Agent.sah / Heap Corruption (malvuln <malvuln13@...il.com>)
[FD] PHPJabbers Simple CMS v5 - Persistent XSS Vulnerability ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] Hotel Listing (WP Plugin) v3.x - MyAccount XSS Vulnerability ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] My Movie Collection Sinatra App - (Movie) XSS Vulnerability ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] My Movie Collection Sinatra App - (Login) XSS Vulnerabilities ("info@...nerability-lab.com" <info@...nerability-lab.com>)

November 5 (17 messages)

[FD] Pentaho <= 9.1 Remote Code Execution (BlackHawk <hawkgotyou@...il.com>)
[FD] Pentaho <= 9.1 Unauthenticated SQL Injection (BlackHawk <hawkgotyou@...il.com>)
[FD] Pentaho <= 9.1 Insufficient Access Control of Data Source Management Service (BlackHawk <hawkgotyou@...il.com>)
[FD] Pentaho <= 9.1 Authentication Bypass of Spring APIs (BlackHawk <hawkgotyou@...il.com>)
[FD] Pentaho <= 9.1 Jackrabbit User Enumeration (BlackHawk <hawkgotyou@...il.com>)
[FD] Pentaho <= 9.1 Bypass of Filename Extension Restrictions (BlackHawk <hawkgotyou@...il.com>)
[FD] SEC Consult SA-20211104-0 :: Reflected cross-site scripting vulnerability in IBM Sterling B2B Integrator ("Functional Account, SEC Consult Vulnerability L…)
[FD] Backdoor.Win32.Optix.03.b / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Ncx.b / Remote Stack Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Ncx.b / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Jokerdoor / Remote Stack Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Payment Terminal 2.x & v3.x - Multiple XSS Web Vulnerabilities ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] ImportExportTools NG 10.0.4 - HTML Injection Vulnerability ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] [SYSS-2021-048] PHP Event Calendar - SQL Injection (CVE-2021-42077) (Maurizio Ruchay <maurizio.ruchay@...s.de>)
[FD] [SYSS-2021-049] PHP Event Calendar - Persistent Cross-site Scripting (CVE-2021-42078) (Maurizio Ruchay <maurizio.ruchay@...s.de>)
[FD] Trovent Security Advisory 2104-03 / HealthForYou & Sanitas HealthCoach: Missing server-side password policy (Stefan Pietsch <s.pietsch@...vent.io>)
[FD] The Knights of NYNEX presents: Song of the siren (Knights of Nynex via Fulldisclosure <fulldisclosure@...lists.org>)

November 9 (11 messages)

[FD] [CFP] 4th International workshop in Artificial Intelligence and Industrial Internet-of-Things Security (AIoTS) (Sergio González Muriel <callforpapers.aio…)
[FD] Backdoor.Win32.VB.afu / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.VB.afu / Insecure Transit Password Disclosure (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Pahador.aj / Authentication Bypass RCE (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Hupigon.nqr / Unauthenticated Open Proxy (malvuln <malvuln13@...il.com>)
[FD] HEUR.Backdoor.Win32.Denis.gen / Remote Denial of Service (UDP Datagram) (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Hupigon.bnbb / Insecure Service Path (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.Servstar.poa / Insecure Service Path (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.SkynetRef.x / Unauthenticated Open Proxy (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.SkynetRef.y / Unauthenticated Open Proxy (malvuln <malvuln13@...il.com>)
[FD] Email-Worm.Win32.Plexus.b / Unauthenticated Remote Code Execution (malvuln <malvuln13@...il.com>)

November 12 (3 messages)

[FD] SQL injection vulnerability in Talariax sendQuick Alertplus server admin version 4.3 (CVE-2021-26795) (refabrik sec <refabriksec@...il.com>)
[FD] Trovent Security Advisory 2105-02 / CVE-2021-33618: Stored cross-site scripting in Dolibarr ERP & CRM (Stefan Pietsch <s.pietsch@...vent.io>)
[FD] Trovent Security Advisory 2106-01 / CVE-2021-33816: Authenticated remote code execution in Dolibarr ERP & CRM (Stefan Pietsch <s.pietsch@...vent.io>)

November 18 (1 message)

[FD] Responsible Full disclosure for LiquidFiles 3.5.13 (Riccardo Spampinato <spampirico@...il.com>)

November 21 (2 messages)

[FD] CVE-2021-44033: Ionic Identity Vault PIN Unlock Lockout Bypass (Android & iOS) (Emanuel DUSS <emanuel.duss@...pass-security.com>)
[FD] Open-Xchange Security Advisory 2021-11-18 (Open-Xchange GmbH via Fulldisclosure <fulldisclosure@...lists.org>)

November 22 (9 messages)

[FD] Open-Xchange Security Advisory 2021-11-19 (Open-Xchange GmbH via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Backdoor.Win32.Acropolis.10 / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Curioso.zp / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Antilam.11 / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Wollf.a / Weak Hardcoded Password (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Wollf.h / Hardcoded Cleartext Password (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Agent.ad / Insecure Credential Storage (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.BNLite / Remote Heap Based Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.BlueAdept.02.a / Remote Buffer Overflow (malvuln <malvuln13@...il.com>)

November 23 (1 message)

Re: [FD] Responsible Full disclosure for LiquidFiles 3.5.13 (Riccardo Spampinato <spampirico@...il.com>)

November 30 (3 messages)

[FD] Email-Worm.Win32.Deltad / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Coredoor.10.a / Port Bounce Scan (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Coredoor.10.a / Authentication Bypass RCE (malvuln <malvuln13@...il.com>)

56 messages