full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2022/06

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹	²	³ 7	⁴	⁵
⁶	⁷	⁸	⁹	¹⁰	¹¹ 28	¹²
¹³	¹⁴ 1	¹⁵	¹⁶	¹⁷ 1	¹⁸	¹⁹
²⁰	²¹ 5	²²	²³	²⁴	²⁵	²⁶
²⁷	²⁸ 7	²⁹	³⁰

Messages by day:

June 3 (7 messages)

[FD] [CVE-2021-40149] Reolink E1 Zoom Camera <= 3.0.0.716 Unauthenticated Private Key Disclosure ("Julien Ahrens (RCE Security)" <info@...security.com>)
[FD] [CVE-2021-40150] Reolink E1 Zoom Camera <= 3.0.0.716 Unauthenticated Web Server Configuration Disclosure ("Julien Ahrens (RCE Security)" <info@...security…)
Re: [FD] Three vulnerabilities found in MikroTik's RouterOS (Q C <cq674350529@...il.com>)
[FD] SEC Consult SA-20220531-0 :: Backdoor account in Korenix JetPort 5601V3 ("SEC Consult Vulnerability Lab, Research via Fulldisclosure" <fulldisclosure@sec…)
[FD] SEC Consult SA-20220601-0 :: Multiple Critical Vulnerabilities in Poly EagleEye Director II ("SEC Consult Vulnerability Lab, Research via Fulldisclosure"…)
[FD] SEC Consult SA-20220601-1 :: Authenticated Command Injection in Poly Studio ("SEC Consult Vulnerability Lab, Research via Fulldisclosure" <fulldisclosure…)
[FD] SEC Consult SA-20220602-0 :: Multiple Memory Corruption Vulnerabilities in dbus-broker ("SEC Consult Vulnerability Lab, Research via Fulldisclosure" <ful…)

June 11 (28 messages)

[FD] XML External Entity (XXE) vulnerability in the WSO2 Management Console (Hakan Bayır ( Biznet Bilişim ) <hakan.bayir@...net.com.tr>)
[FD] [SYSS-2022-001]: Verbatim Keypad Secure USB 3.2 Gen 1 Drive - Use of a Cryptographic Primitive with a Risky Implemen… (Matthias Deeg <matthias.deeg@...s.de>)
[FD] [SYSS-2022-002]: Verbatim Keypad Secure USB 3.2 Gen 1 Drive - Use of a Cryptographic Primitive with a Risky Implemen… (Matthias Deeg <matthias.deeg@...s.de>)
[FD] [SYSS-2022-003]: Verbatim Keypad Secure USB 3.2 Gen 1 Drive - Missing Immutable Root of Trust in Hardware (CWE-1326)… (Matthias Deeg <matthias.deeg@...s.de>)
[FD] [SYSS-2022-004]: Verbatim Keypad Secure USB 3.2 Gen 1 Drive - Expected Behavior Violation (CWE-440) (CVE-2022-28386) (Matthias Deeg <matthias.deeg@...s.de>)
[FD] [SYSS-2022-005]: Verbatim Store 'n' Go Secure Portable HDD - Use of a Cryptographic Primitive with a Risky Implement… (Matthias Deeg <matthias.deeg@...s.de>)
[FD] [SYSS-2022-006]: Verbatim Store 'n' Go Secure Portable HDD - Use of a Cryptographic Primitive with a Risky Implement… (Matthias Deeg <matthias.deeg@...s.de>)
[FD] [SYSS-2022-007]: Verbatim Store 'n' Go Secure Portable HDD - Missing Immutable Root of Trust in Hardware (CWE-1326) … (Matthias Deeg <matthias.deeg@...s.de>)
[FD] [SYSS-2022-008]: Verbatim Store 'n' Go Secure Portable HDD - Expected Behavior Violation (CWE-440) (CVE-2022-28386) (Matthias Deeg <matthias.deeg@...s.de>)
[FD] [SYSS-2022-009]: Verbatim Executive Fingerprint Secure SSD - Use of a Cryptographic Primitive with a Risky Implement… (Matthias Deeg <matthias.deeg@...s.de>)
[FD] [SYSS-2022-010]: Verbatim Executive Fingerprint Secure SSD - Use of a Cryptographic Primitive with a Risky Implement… (Matthias Deeg <matthias.deeg@...s.de>)
[FD] [SYSS-2022-011]: Verbatim Executive Fingerprint Secure SSD - Missing Immutable Root of Trust in Hardware (CWE-1326) … (Matthias Deeg <matthias.deeg@...s.de>)
[FD] [SYSS-2022-013]: Verbatim Executive Fingerprint Secure SSD - Insufficient Verification of Data Authenticity (CWE-345… (Matthias Deeg <matthias.deeg@...s.de>)
[FD] [SYSS-2022-014]: Verbatim Fingerprint Secure Portable Hard Drive - Use of a Cryptographic Primitive with a Risky Imp… (Matthias Deeg <matthias.deeg@...s.de>)
[FD] [SYSS-2022-015]: Verbatim Fingerprint Secure Portable Hard Drive - Use of a Cryptographic Primitive with a Risky Imp… (Matthias Deeg <matthias.deeg@...s.de>)
[FD] [SYSS-2022-016]: Verbatim Fingerprint Secure Portable Hard Drive - Missing Immutable Root of Trust in Hardware (CWE-… (Matthias Deeg <matthias.deeg@...s.de>)
[FD] [SYSS-2022-017]: Verbatim Fingerprint Secure Portable Hard Drive - Insufficient Verification of Data Authenticity (C… (Matthias Deeg <matthias.deeg@...s.de>)
[FD] [SYSS-2022-024]: Lepin EP-KP001 - Violation of Secure Design Principles (CWE-657) (CVE-2022-29948) (Matthias Deeg <matthias.deeg@...s.de>)
[FD] Ransom.Haron / Code Execution (malvuln <malvuln13@...il.com>)
[FD] Trojan-Banker.Win32.Banker.agzg / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Trojan-Proxy.Win32.Symbab.o / Heap Corruption (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Cabrotor.10.d / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Trojan-Banker.Win32.Banbra.cyt / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Hidden Functionality (Backdoor) (CWE-912) / CVE-2022-29854, CVE-2022-29855 (Moritz Abrell <moritz.abrell@...s.de>)
[FD] HNS-2022-02 - HN Security Advisory - Multiple vulnerabilities in Zyxel zysh (Marco Ivaldi <raptor@...eadbeef.info>)
[FD] SEC Consult SA-20220607-0 :: Multiple Vulnerabilities in Infiray IRAY-A8Z3 thermal camera ("SEC Consult Vulnerability Lab, Research via Fulldisclosure" <…)
[FD] SEC Consult SA-20220608-0 :: Stored Cross-Site Scripting & Unsafe Java Deserializiation in Gentics CMS ("SEC Consult Vulnerability Lab, Research via Full…)
[FD] SEC Consult SA-20220609-0 :: Multiple vulnerabilities in SoftGuard SNMP Network Management Extension ("SEC Consult Vulnerability Lab, Research via Fulldi…)

June 14 (1 message)

[FD] SEC Consult SA-20220614-0 :: Reflected Cross Site Scripting in SIEMENS-SINEMA Remote Connect ("SEC Consult Vulnerability Lab, Research via Fulldisclosure…)

June 17 (1 message)

[FD] SEC Consult SA-20220615-0 :: Hardcoded Backdoor User and Outdated Software Components in Nexans FTTO GigaSwitch se… ("SEC Consult Vulnerability Lab, Resear…)

June 21 (5 messages)

[FD] Onapsis Security Advisory 2022-0003: Cross-Site Scripting (XSS) vulnerability in SAP Focused Run (Real User Monito… (Onapsis Research via Fulldisclosure <fu…)
[FD] # Onapsis Security Advisory 2022-0004: Missing Authentication check in SAP Focused Run (Simple Diagnostics Agent 1… (Onapsis Research via Fulldisclosure <fu…)
[FD] Onapsis Security Advisory 2022-0005: Cross-Site Scripting (XSS) vulnerability in SAP Fiori launchpad (Onapsis Research via Fulldisclosure <fulldisclosure@…)
[FD] Onapsis Security Advisory 2022-0006: Information Disclosure vulnerability in SAP Focused Run (Simple Diagnostics A… (Onapsis Research via Fulldisclosure <fu…)
[FD] Onapsis Security Advisory 2022-0007: Directory Traversal vulnerability in SAP Focused Run (Simple Diagnostics Agen… (Onapsis Research via Fulldisclosure <fu…)

June 28 (7 messages)

[FD] CFP No cON Name 2022 - Barcelona (Jose Nicolas Castellano via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] SEC-T CFP ongoing (Mattias Bååth via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] AnyDesk Public Exploit Disclosure - Arbitrary file write by symbolic link attack lead to denial-of-service attack on loc… (chan chan <siuchunc.03@...il.com>)
[FD] Yashma Ransomware Builder v1.2 / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Shark.btu / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Trojan-Mailfinder.Win32.VB.p / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.InfecDoor.17.c / Insecure Permissions (malvuln <malvuln13@...il.com>)

49 messages