full-disclosure mailing list - 2022/07

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2022/07

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹ 8	²	³
⁴	⁵	⁶	⁷ 4	⁸	⁹	¹⁰
¹¹	¹²	¹³	¹⁴	¹⁵	¹⁶	¹⁷
¹⁸ 6	¹⁹	²⁰	²¹	²² 9	²³	²⁴
²⁵	²⁶	²⁷	²⁸	²⁹ 8	³⁰	³¹

Messages by day:

July 1 (8 messages)

[FD] [Extension: CPSIoTSec 2022] The Workshop on CPS&IoT Security and Privacy **Submission Deadline: July 25, 2022** (alcaraz <alcaraz@....uma.es>)
[FD] 🐞 CFP for Hardwear.io NL 2022 is OPEN! (Andrea Simonca <andrea@...dwear.io>)
[FD] typeorm CVE-2022-33171 (lixts via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] BigBlueButton - Stored XSS in username (CVE-2022-31064) (Rick Verdoes via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Backdoor.Win32.Cafeini.b / Weak Hardcoded Credentials (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Coredoor.10.a / Authentication Bypass (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.EvilGoat.b / Weak Hardcoded Credentials (malvuln <malvuln13@...il.com>)
[FD] JAHx221 - RCE in copy/pasted PHP compat libraries, json_decode function (Eldar Marcussen <wireghoul@...il.com>)

July 7 (4 messages)

[FD] CVE-2022-30550: Privilege escalation possible in dovecot when similar master and non-master passdbs are used (Aki Tuomi via Fulldisclosure <fulldisclosure…)
[FD] EQS Integrity Line: Multiple Vulnerabilities (Giovanni Pellerano <giovanni.pellerano@...laliv3.org>)
[FD] Ransom Lockbit 3.0 / Local Unicode Buffer Overflow (SEH) (malvuln <malvuln13@...il.com>)
[FD] Ransom Lockbit 3.0 / Code Execution (malvuln <malvuln13@...il.com>)

July 18 (6 messages)

[FD] SCHUTZWERK-SA-2022-003: Remote Command Execution in Spryker Commerce OS (David Brown via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Backdoor.Win32.HoneyPot.a / Weak Hardcoded Password (malvuln <malvuln13@...il.com>)
[FD] Builder XtremeRAT v3.7 / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Builder XtremeRAT v3.7 / Insecure Crypto Bypass (malvuln <malvuln13@...il.com>)
[FD] [CFP] 2nd International Workshop on Cyber Forensics and Threat Investigations Challenges CFTIC 2022 (Virtual) (Andrew Zayine <scholarshipchile@...il.com>)
Re: [FD] AnyDesk Public Exploit Disclosure - Arbitrary file write by symbolic link attack lead to denial-of-service attack on… (chan chan <siuchunc.03@...il.com>)

July 22 (9 messages)

[FD] Backdoor.Win32.Eclipse.h / Weak Hardcoded Credentials (malvuln <malvuln13@...il.com>)
[FD] Open-Xchange Security Advisory 2022-07-21 (Martin Heiland via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-07-20-1 iOS 15.6 and iPadOS 15.6 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-07-20-3 macOS Big Sur 11.6.8 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-07-20-4 Security Update 2022-005 Catalina (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-07-20-5 tvOS 15.6 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-07-20-6 watchOS 8.7 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-07-20-7 Safari 15.6 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-07-20-2 macOS Monterey 12.5 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)

July 29 (8 messages)

[FD] [CVE-2021-24910] Transposh <= 1.0.7 “tp_tp” Unauthenticated Reflected Cross-Site Scripting ("Julien Ahrens (RCE Security)" <info@...security.com>)
[FD] [CVE-2021-24911] Transposh <= 1.0.7 “tp_translation” Unauthenticated Stored Cross-Site Scripting ("Julien Ahrens (RCE Security)" <info@...security.com>)
[FD] [CVE-2021-24912] Transposh <= 1.0.8.1 Multiple Cross-Site Request Forgeries ("Julien Ahrens (RCE Security)" <info@...security.com>)
[FD] [CVE-2022-2461] Transposh <= 1.0.8.1 “tp_translation” Weak Default Translation Permissions ("Julien Ahrens (RCE Security)" <info@...security.com>)
[FD] [CVE-2022-2462] Transposh <= 1.0.8.1 “tp_history” Unauthenticated Information Disclosure ("Julien Ahrens (RCE Security)" <info@...security.com>)
[FD] [CVE-2022-25810] Transposh <= 1.0.8.1 Improper Authorization Allowing Access to Administrative Utilities ("Julien Ahrens (RCE Security)" <info@...security…)
[FD] [CVE-2022-25811] Transposh <= 1.0.8.1 “tp_editor” Multiple Authenticated SQL Injections ("Julien Ahrens (RCE Security)" <info@...security.com>)
[FD] [CVE-2022-25812] Transposh <= 1.0.8.1 “save_transposh” Missing Logfile Extension Check Leading to Code Injectio… ("Julien Ahrens (RCE Security)" <info@rc…)

35 messages

Powered by blists - more mailing lists