full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2022/04

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹ 3	²	³
⁴	⁵	⁶	⁷	⁸ 16	⁹	¹⁰
¹¹	¹²	¹³	¹⁴ 3	¹⁵ 11	¹⁶	¹⁷
¹⁸	¹⁹ 8	²⁰	²¹	²²	²³ 2	²⁴
²⁵	²⁶	²⁷ 13	²⁸	²⁹	³⁰

Messages by day:

April 1 (3 messages)

[FD] APPLE-SA-2022-03-31-2 macOS Monterey 12.3.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-03-31-1 iOS 15.4.1 and iPadOS 15.4.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] CVE-2022-26233: Barco Control Room Management Suite File Path Traversal Vulnerability (Murat Aydemir <murataydemir94@...il.com>)

April 8 (16 messages)

[FD] Multiple Vulnerabilities in Reprise License Manager 14.2 (Gionathan Reale via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Backdoor.Win32.Wollf.h / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Jokerdoor / Weak Hardcoded Credentials (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Delf.ps / Information Disclosure (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Wollf.h / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Tiny.a / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Easyserv.11.c / Insecure Transit (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Bifrose.uw / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Wisell / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Ptakks.XP.a / Insecure Credential Storage (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Verify.h / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.FTP.Lana.01.d / Weak Hardcoded Credentials (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.FTP.Lana.01.d / Port Bounce Scan (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Wisell / Stack Buffer Overflow (SEH) (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Xingdoor / Denial of Service (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.XLog.21 / Authentication Bypass Race Condition (malvuln <malvuln13@...il.com>)

April 14 (3 messages)

[FD] AST-2022-001: res_stir_shaken: resource exhaustion with large files ("Asterisk Security Team" <security@...erisk.org>)
[FD] AST-2022-002: res_stir_shaken: SSRF vulnerability with Identity header ("Asterisk Security Team" <security@...erisk.org>)
[FD] AST-2022-003: func_odbc: Possible SQL Injection ("Asterisk Security Team" <security@...erisk.org>)

April 15 (11 messages)

[FD] SEC Consult SA-20220413 :: Missing Authentication at File Download & Denial of Service in Siemens A8000 PLC ("SEC Consult Vulnerability Lab, Research via…)
[FD] Backdoor.Win32.MotivFTP.12 / Authentication Bypass (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Prorat.cwx / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Psychward.03.a / Weak Hardcoded Password (malvuln <malvuln13@...il.com>)
[FD] HackTool.Win32.IpcScan.c / Local Stack Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.NetCat32.10 / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.NetSpy.10 / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.NinjaSpy.c / Authentication Bypass (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Kilo.016 / Denial of Service (UDP Datagram) (malvuln <malvuln13@...il.com>)
[FD] Email-Worm.Win32.Pluto.b / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Adversary3 v1.0 / Malware vulnerability intel tool for third-party attackers / updated (malvuln <malvuln13@...il.com>)

April 19 (8 messages)

[FD] HackTool.Win32.Delf.vs / Insecure Credential Storage (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Loselove / Denial of Service (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.TScash.c / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Hupigon.haqj / Insecure Service Path (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Psychward.03.a / Weak Hardcoded Password (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Delf.zn / Insecure Credential Storage (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.GateHell.21 / Authentication Bypass (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.GateHell.21 / Port Bounce Scan (malvuln <malvuln13@...il.com>)

April 23 (2 messages)

[FD] CVE-2021-40680: Artica Proxy VMWare Appliance 4.30.000000 <=[SP273] Rev.1 (Heiko Feldhusen via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] [AIT-SA-20220208-01] SexyPolling SQL Injection (sec-advisory <sec-advisory@....ac.at>)

April 27 (13 messages)

[FD] Trovent Security Advisory 2108-02 / Zepp: User account enumeration in password reset function (Stefan Pietsch <s.pietsch@...vent.io>)
[FD] SEC Consult SA-20220427-0 :: Privilege Escalation in Miele Benchmark Programming Tool ("SEC Consult Vulnerability Lab, Research via Fulldisclosure" <full…)
[FD] Trojan-Banker.Win32.Banker.heq / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Jokerdoor / Remote Stack Buffer Overflow (malvuln <malvuln13@...il.com>)
[FD] Net-Worm.Win32.Kibuv.c / Authentication Bypass (malvuln <malvuln13@...il.com>)
[FD] Email-Worm.Win32.Sidex / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Virus.Win32.Qvod.b / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.GF.j / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Trojan-Downloader.Win32.Small.ahlq / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Cafeini.b / Weak Hardcoded Credentials (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Cafeini.b / Port Bounce Scan (malvuln <malvuln13@...il.com>)
[FD] Trojan-Downloader.Win32.Agent / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Agent.aegg / Weak Hardcoded Credentials (malvuln <malvuln13@...il.com>)

56 messages