full-disclosure mailing list - 2022/02

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2022/02

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 1	² 3	³ 6	⁴ 3	⁵	⁶
⁷ 4	⁸	⁹	¹⁰ 10	¹¹ 3	¹²	¹³ 2
¹⁴	¹⁵	¹⁶	¹⁷ 11	¹⁸ 5	¹⁹	²⁰
²¹	²² 3	²³	²⁴ 5	²⁵ 1	²⁶	²⁷
²⁸ 1

Messages by day:

February 1 (1 message)

[FD] The Knights of NYNEX presents: Morgawr's feast (Knights of Nynex via Fulldisclosure <fulldisclosure@...lists.org>)

February 2 (3 messages)

[FD] Backdoor.Win32.Wollf.m / Weak Hardcoded Password (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Zxman / Unauthenticated Remote Code Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Small.bu (KGB- RAT server v0.1) / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)

February 3 (6 messages)

[FD] SEC Consult SA-20220126-0 :: Denial of service & User Enumeration in WAGO 750-8xxx PLC ("SEC Consult Vulnerability Lab, Research" <security-research@...-…)
[FD] SEC Consult SA-20220131-0 :: Multiple Critical Vulnerabilities in Korenix Technology JetWave products ("SEC Consult Vulnerability Lab, Research" <securit…)
[FD] SEC Consult SA-20220202-0 :: Broken access control & Cross-Site Scripting in Shopmetrics Mystery Shopping Software ("SEC Consult Vulnerability Lab, Researc…)
[FD] Trovent Security Advisory 2108-01 / Vivellio: User account enumeration in password reset function (Stefan Pietsch <s.pietsch@...vent.io>)
[FD] North Korean APT Attacks Security Researchers in Social Media 2022 ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] CVE-2021-38130: Business Logic Bypass - Mail Relay (Post-authenticated) for Voltage SecureMail Server <v7.3.0.1 (Ting Meng Yean via Fulldisclosure <fulldi…)

February 4 (3 messages)

[FD] CA20220203-01: Security Notice for CA Harvest Software Change Manager (Ken Williams via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Code Scanning using many Tools/Scanners - Scanmycode CE (Community Edition) released (Marcin Kozlowski <marcinguy@...il.com>)
[FD] getenv("=A") works (no particular vulnerability) (Askar Safin via Fulldisclosure <fulldisclosure@...lists.org>)

February 7 (4 messages)

Re: [FD] getenv("=A") works (no particular vulnerability) (Andy Bach <afbach@...il.com>)
Re: [FD] getenv("=A") works (no particular vulnerability) (bo0od via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Backdoor.Win32.Small.er / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] [CFP-ESORICS 2022]: 27th European Symposium on Research in Computer Security (ESORICS) 2022 (ESORICS 2022 - publicity chair <publicitychair.conf@...il.com…)

February 10 (10 messages)

[FD] Nokia BTS Authentication Bypass (Cristiano Maruti <cmaruti@...il.com>)
[FD] APPLE-SA-2022-02-10-1 iOS 15.3.1 and iPadOS 15.3.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-02-10-2 macOS Monterey 12.2.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-02-10-3 Safari 15.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] SEC Consult SA-20220209 :: Open Redirect in Login Page in SIEMENS-SINEMA Remote Connect ("SEC Consult Vulnerability Lab, Research via Fulldisclosure" <fu…)
[FD] Facebook DNS misconfiguration (Carlo Di Dato via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] CFP: The 24th International Conference on Information and Communications Security (ICICS 2022) (CFP - ICICS 2022 <publicitychair.conf@...il.com>)
[FD] Backdoor.Win32.Frauder.jt / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.XRat.k / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Wdoor.11 / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)

February 11 (3 messages)

[FD] Backdoor.Win32.Prexot.a / Authentication Bypass (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Prexot.a / Port Bounce Scan (MITM) (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Freddy.2001 / Authentication Bypass Command Execution (malvuln <malvuln13@...il.com>)

February 13 (2 messages)

[FD] Finding secrets in mirrored Git repositories (Nightwatch Cybersecurity Research <research@...htwatchcybersecurity.com>)
Re: [FD] Facebook DNS misconfiguration (Joey Kelly <joey@...ykelly.net>)

February 17 (11 messages)

[FD] Zepl Notebook - Remote Code Execution (<ghost@...ervurse.com>)
[FD] Zepl Notebook - Sandbox Escape (<ghost@...ervurse.com>)
[FD] Algorithmia MSOL - Remote Code Execution (<ghost@...ervurse.com>)
[FD] Backdoor.Win32.Zombam.b / Remote Stack Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Zombam.b / Unauthenticated Information Disclosure (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Zombam.b / Cross Site Scripting (XSS) (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Prorat.lkt / Weak Hardcoded Password (malvuln <malvuln13@...il.com>)
[FD] Email-Worm.Win32.Lama / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Prosti.b / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Trojan-Spy.Win32.Zbot.aawo.Zeus-Builder / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] SEC Consult SA-20220215 :: Multiple Critical Vulnerabilities in multiple Zyxel devices ("SEC Consult Vulnerability Lab, Research via Fulldisclosure" <ful…)

February 18 (5 messages)

[FD] Car Portal Template - (Search) Persistent Web Vulnerability ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] Wordpress v5.9 - Reflected Cross Site Scripting Web Vulnerability ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] Vicidial v2.14-783a - (DB) SQL Injection Web Vulnerability ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] MartFury Marketplace - Cross Site Scripting Vulnerability ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] Datarobot -- Remote Code Execution (Michael Coers <michael.coers@...hfynder.io>)

February 22 (3 messages)

[FD] Trojan.Win32.Cosmu.abix / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Agent.baol / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Dsocks.10 / Hardcoded Cleartext Password (malvuln <malvuln13@...il.com>)

February 24 (5 messages)

[FD] CVE request for the DLL-Hijacking vulnerability found in ToolBox-V1.010.0000000.0 from Dahua Technologies ("YEUNG, Tsz Ko" <tkoyeung@...nect.hku.hk>)
[FD] Backdoor.Win32.Acropolis.10 / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.FTP.Ics / Authentication Bypass (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.FTP.Ics / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.FTP.Ics / Port Bounce Scan (MITM) (malvuln <malvuln13@...il.com>)

February 25 (1 message)

[FD] Disclosure of DLL-Hijacking-Vulnerability-in-Technitium-Installer-v4.4 ("YEUNG, Tsz Ko" <tkoyeung@...nect.hku.hk>)

February 28 (1 message)

[FD] Dll Hijacking Vulnerability found in Rufus-3.17.1846 from Akeo Consulting ("YEUNG, Tsz Ko" <tkoyeung@...nect.hku.hk>)

58 messages

Powered by blists - more mailing lists