full-disclosure mailing list - 2021/12

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2021/12

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹	²	³ 9	⁴	⁵
⁶ 4	⁷ 6	⁸	⁹	¹⁰ 2	¹¹	¹²
¹³ 14	¹⁴ 3	¹⁵	¹⁶	¹⁷ 11	¹⁸	¹⁹
²⁰	²¹ 1	²²	²³	²⁴	²⁵	²⁶
²⁷	²⁸	²⁹	³⁰	³¹

Messages by day:

December 3 (9 messages)

[FD] CA20211201-01: Security Notice for CA Network Flow Analysis (Ken Williams via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] CVE-2021-37253: M-Files Web Improper Range Header Processing Denial of Services (DoS) Vulnerability (Murat Aydemir <murataydemir94@...il.com>)
[FD] SEC Consult SA-20211202-0 :: Multiple vulnerabilities in OrbiTeam BSCW Server ("Functional Account, SEC Consult Vulnerability Lab" <security-research@sec…)
[FD] usd AG Security Advisories 11/2021 (Responsible Disclosure via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Trojan.Win32.Mucc.ivk / Insecure Service Path (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Vernet.axt / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Bionet.10 / Authentication Bypass RCE (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.WinShell.50 / Weak Hardcoded Password (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.WinShell.50 / Weak Hardcoded Password (malvuln <malvuln13@...il.com>)

December 6 (4 messages)

[FD] [RT-SA-2021-004] Auerswald COMfortel 1400/2600/3600 IP Authentication Bypass (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[FD] [RT-SA-2021-005] Auerswald COMpact Privilege Escalation (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[FD] [RT-SA-2021-006] Auerswald COMpact Arbitrary File Disclosure (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[FD] [RT-SA-2021-007] Auerswald COMpact Multiple Backdoors (RedTeam Pentesting GmbH <release@...team-pentesting.de>)

December 7 (6 messages)

[FD] Microsoft Internet Explorer / ActiveX Control Security Bypass (hyp3rlinx <apparitionsec@...il.com>)
[FD] (Reprise License Manager) RLM 14.2 - Unauthenticated User Enumeration (Gionathan Reale via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] (Reprise License Manager) RLM 14.2 - Unauthenticated Password Change (Gionathan Reale via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] (Reprise License Manager) RLM 14.2 - Unauthenticated Session Hijacking (Gionathan Reale via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] (Reprise License Manager) RLM 14.2 - Authenticated Buffer Overflow (Gionathan Reale via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] (Reprise License Manager) RLM 14.2 - Authenticated Remote Binary Execution (Gionathan Reale via Fulldisclosure <fulldisclosure@...lists.org>)

December 10 (2 messages)

[FD] [SYSS-2021-061] Oracle Database - NNE Connection Hijacking (Moritz Bechler <moritz.bechler@...s.de>)
[FD] [SYSS-2021-062] Oracle Database - Weak NNE Integrity Key Derivation (Moritz Bechler <moritz.bechler@...s.de>)

December 13 (14 messages)

[FD] Backdoor.Win32.FTP.Matiteman / Weak Hardcoded Password (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Mechbot.a / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Nucleroot.mf / Stack Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] SEC Consult SA-20211213-0 :: Multiple vulnerabilities in AbanteCart e-commerce platform ("., SEC Consult Vulnerability Lab" <security-research@...-consult…)
[FD] Backdoor.Win32.Jokerdoor / Remote Stack Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Ramus / Unauthenticated Remote Code Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Phase.11 / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Ncx.b / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Ncx.b / Remote Stack Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Backdoor.IRC.Subhuman / Unauthenticated Open Proxy (malvuln <malvuln13@...il.com>)
[FD] SEC Consult SA-20211213-1 :: Stored Cross Site Scripting in Sofico Miles RIA ("., SEC Consult Vulnerability Lab" <security-research@...-consult.com>)
[FD] Backdoor.Win32.BackAttack.20 / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Asylum.014 / Cleartext Password Storage (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.BackAttack.20 / Authentication Bypass RCE (malvuln <malvuln13@...il.com>)

December 14 (3 messages)

[FD] SEC Consult SA-20211214-0 :: Remote ADBC SQL Injection in SAP Netweaver IUUC_RECON_RC_COUNT_TABLE_BIG (ħ, SEC Consult Vulnerability Lab <security-resear…)
[FD] SEC Consult SA-20211214-1 :: Remote ABAP Code Injection in SAP Netweaver IUUC_RECON_RC_COUNT_TABLE_BIG (ħ, SEC Consult Vulnerability Lab <security-resea…)
[FD] SEC Consult SA-20211214-2 :: Remote ABAP Code Injection in SAP Netweaver IUUC_GENERATE_ACPLAN_DELIMITER (ħ, SEC Consult Vulnerability Lab <security-rese…)

December 17 (11 messages)

[FD] Trovent Security Advisory 2109-01 / CVE-2021-41843: Authenticated SQL injection in OpenEMR calendar search (Stefan Pietsch <s.pietsch@...vent.io>)
[FD] APPLE-SA-2021-12-15-1 iOS 15.2 and iPadOS 15.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-12-15-2 macOS Monterey 12.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-12-15-3 macOS Big Sur 11.6.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-12-15-4 Security Update 2021-008 Catalina (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-12-15-5 tvOS 15.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-12-15-6 watchOS 8.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2021-12-15-7 Safari 15.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] RootedCON 2022 Call For Papers is open! (omarbv@...eup.net)
[FD] Backdoor.Win32.BNLite / Remote Heap Based Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Mellpon.b / Remote Unauthenticated Information Disclosure (malvuln <malvuln13@...il.com>)

December 21 (1 message)

[FD] Aver EVC300 and others (protostsu via Fulldisclosure <fulldisclosure@...lists.org>)

50 messages

Powered by blists - more mailing lists