full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2022/01

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹	²
³ 12	⁴	⁵	⁶	⁷ 13	⁸	⁹
¹⁰	¹¹ 5	¹² 3	¹³	¹⁴ 2	¹⁵	¹⁶ 4
¹⁷	¹⁸	¹⁹	²⁰	²¹	²²	²³
²⁴	²⁵ 31	²⁶ 6	²⁷	²⁸ 2	²⁹ 12	³⁰
³¹

Messages by day:

January 3 (12 messages)

[FD] CVE-2021-25080 vulnerability (Gaetano Perrone <gaetano.perrone@...si.io>)
[FD] Backdoor.Win32.Visiotrol.10 / Insecure Password Storage (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.FTP.Simpel.12 / Port Bounce Scan (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.FTP.Simpel.12 / Insecure Crypto (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Jokerdoor / Remote Stack Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Wollf.m / Weak Hardcoded Password (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Wollf.m / Authentication Bypass (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Fantador / Insecure Password Storage (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Fantador / Divide by Zero DoS (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Skrat / Cleartext Hardcoded Password (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.SilentSpy.10 / Authentication Bypass Command Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.SilentSpy.10 / Authentication Race Condition (malvuln <malvuln13@...il.com>)

January 7 (13 messages)

[FD] PoC for CVE-2021-25079 (Gaetano Perrone <gaetano.perrone@...si.io>)
[FD] cWifi Hotspot Wireless CP - Code Execution Vulnerability ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] Easy Cart Shopping Cart - (Search) Persistent Vulnerability ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] uDoctorAppointment v2.1.1 - Multiple XSS Vulnerabilities ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] Rocket LMS v1.1 - (History) Persistent XSS Vulnerability ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] Affiliate Pro v1.7 - Multiple Cross Site Vulnerabilities ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] Backdoor.Win32.Jtram.a / Insecure Credential Storage (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Jtram.a / Port Bounce Scan (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Dsklite.a / Remote Denial of Service (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Dsklite.a / Insecure Transit (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.SVC / Remote Stack Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.SVC / Directory Traversal (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.SubSeven.c / Remote Stack Buffer Overflow (malvuln <malvuln13@...il.com>)

January 11 (5 messages)

[FD] Microsoft Windows .Reg File Dialog Spoof / Mitigation Bypass (hyp3rlinx <apparitionsec@...il.com>)
[FD] Microsoft Windows Defender / Detection Bypass (hyp3rlinx <apparitionsec@...il.com>)
[FD] CVE-2021-39623 Libstagefright (Media Framework on Android) with OOB write on the heap (Marcin Kozlowski <marcinguy@...il.com>)
[FD] Full Disclosure DMCA.COM Exploitation ("WebSec B.V." <websecinternational@...il.com>)
[FD] Backdoor.Win32.Controlit.10 / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)

January 12 (3 messages)

[FD] [RT-SA-2021-009] Credential Disclosure in Web Interface of Crestron Device (RedTeam Pentesting GmbH <release@...team-pentesting.de>)
[FD] Reprise License Manager 14.2 - Reflected Cross-Site Scripting (Gionathan Reale via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-01-12-1 iOS 15.2.1 and iPadOS 15.2.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)

January 14 (2 messages)

[FD] 🐞 Call for Papers for Hardwear.io USA 2022 is OPEN! (Andrea Simonca <andrea@...dwear.io>)
[FD] SEC Consult SA-20220113-0 :: Cleartext Storage of Phone Password in Cisco IP Phones ("SEC Consult Vulnerability Lab, Research" <security-research@...-con…)

January 16 (4 messages)

[FD] Ab Stealer Web Panel / Unauthenticated Remote Persistent XSS (malvuln <malvuln13@...il.com>)
[FD] Win32.MarsStealer Web Panel / Unauthenticated Remote Information Disclosure (malvuln <malvuln13@...il.com>)
[FD] Win32.MarsStealer Web Panel / Unauthenticated Remote Persistent XSS (malvuln <malvuln13@...il.com>)
[FD] Win32.MarsStealer Web Panel / Unauthenticated Remote Data Deletion (malvuln <malvuln13@...il.com>)

January 25 (31 messages)

[FD] Unauthenticated RCE vuln in the H2 Database console: CVE-2022-23221. (Ismail Aydemir <me@...ail.email>)
[FD] Xerox vulnerability allows unauthenticated remote users to remotely brick network printers (Mahmoud Al-Qudsi <mqudsi@...smart.net>)
[FD] [TO-2021-001] WebACMS 2.1.0 - Cross-Site Scripting (Patrick Hener <patrick.hener@...com>)
[FD] AgentTesla Builder Web Panel / Cross Site Scripting (XSS) (malvuln <malvuln13@...il.com>)
[FD] AgentTesla Builder Web Panel / SQL Injection (malvuln <malvuln13@...il.com>)
[FD] Chaos Ransomeware Builder v4 / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] VulturiBuilder / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] CollectorStealerBuilder v2.0.0 Panel / Insecure Credential Storage (malvuln <malvuln13@...il.com>)
[FD] CollectorStealerBuilder v2.0.0 Panel / Man-in-the-Middle (MITM) (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Wisell / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Ransomware Builder Babuk / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Wollf.16 / Authentication Bypass (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Wollf.16 / Weak Hardcoded Credentials (malvuln <malvuln13@...il.com>)
[FD] SEC Consult SA-20220117-0 :: Stored Cross-Site Scripting vulnerability in TYPO3 extension "femanager" ("SEC Consult Vulnerability Lab, Research" <securit…)
[FD] Advisory:[CVE-2021-27971]Alps Alpine DLL Injection Issue (Xiaojian Cao <xiaojian.cao@...alps.com>)
[FD] SEC Consult SA-20220120-0 :: Local file inclusion vulnerability in Land Software - FAUST iServer ("SEC Consult Vulnerability Lab, Research" <security-res…)
[FD] SEC Consult SA-20220124-0 :: Authenticated Path Traversal in Ethercreative Logs plugin for Craft CMS ("SEC Consult Vulnerability Lab, Research" <security…)
[FD] [CFP-ESORICS 2022]: 27th European Symposium on Research in Computer Security (ESORICS) 2022 (ESORICS 2022 - publicity chair <publicitychair.conf@...il.com…)
[FD] Banco Guayaquil v8.0.0 iOS - Cross Site Scripting Web Vulnerability ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] Ametys v4.4.1 CMS - Cross Site Scripting Vulnerability ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] uBidAuction v2.0.1 - Multiple XSS Web Vulnerabilities ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] Backdoor.Win32.Agent.uq / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.FTP99 / Authentication Bypass Race Condition (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.FTP99 / Port Bounce Scan (MITM) (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Hanuman.b / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.FTP.Lana.01.d / Weak Hardcoded Password (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.FTP.Lana.01.d / Port Bounce Scan (MITM) (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.DRA.c / Weak Hardcoded Password (malvuln <malvuln13@...il.com>)
[FD] CosaNostra Builder / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] CosaNostra Builder WebPanel / Insecure Crypto (malvuln <malvuln13@...il.com>)
[FD] CosaNostra Builder WebPanel / Cross Site Request Forgery (CSRF) (malvuln <malvuln13@...il.com>)

January 26 (6 messages)

[FD] Onapsis Security Advisory 2021-0021: SAP Enterprise Portal - XSS NavigationReporter (Onapsis Research via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Onapsis Security Advisory 2021-0022: SAP Enterprise Portal - XSS RunContentCreation (Onapsis Research via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Onapsis Security Advisory 2021-0023: SAP Enterprise Portal - SSRF iviewCatcherEditor (Onapsis Research via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Onapsis Security Advisory 2021-0024: SAP Enterprise Portal - Anonymous Stored Open Redirect (Onapsis Research via Fulldisclosure <fulldisclosure@...lists.…)
[FD] Onapsis Security Advisory 2021-0025: Null Pointer Dereference vulnerability in SAP CommonCryptoLib (Onapsis Research via Fulldisclosure <fulldisclosure@se…)
[FD] Onapsis Security Advisory 2021-0026: SAP Enterprise Portal - XSLT injection (Onapsis Research via Fulldisclosure <fulldisclosure@...lists.org>)

January 28 (2 messages)

[FD] KL-001-2022-001: Moxa TN-5900 Firmware Upgrade Checksum Validation Vulnerability (KoreLogic Disclosures via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] KL-001-2022-002: Moxa TN-5900 Post Authentication Command Injection Vulnerability (KoreLogic Disclosures via Fulldisclosure <fulldisclosure@...lists.org>)

January 29 (12 messages)

[FD] CarolinaCon Online 2 (Carolina Con <presenters@...olinacon.org>)
[FD] APPLE-SA-2022-01-26-1 iOS 15.3 and iPadOS 15.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-01-26-4 Security Update 2022-001 Catalina (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Backdoor.Win32.WinShell.50 / Weak Hardcoded Password (malvuln <malvuln13@...il.com>)
[FD] APPLE-SA-2022-01-26-2 macOS Monterey 12.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-01-26-3 macOS Big Sur 11.6.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-01-26-5 tvOS 15.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-01-26-7 Safari 15.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-01-26-6 watchOS 8.4 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] foxit reader Arbitrary File Write (houjingyi <houjingyi647@...il.com>)
[FD] HackTool.Win32.Muzzer.a / Heap Based Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Tiny.c / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)

90 messages