full-disclosure mailing list - 2022/09

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2022/09

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹ 1	² 1	³	⁴
⁵	⁶ 1	⁷	⁸	⁹ 8	¹⁰	¹¹
¹² 6	¹³	¹⁴	¹⁵	¹⁶ 3	¹⁷	¹⁸
¹⁹	²⁰ 5	²¹	²²	²³	²⁴	²⁵
²⁶	²⁷ 4	²⁸	²⁹	³⁰

Messages by day:

September 1 (1 message)

[FD] APPLE-SA-2022-08-31-1 iOS 12.5.6 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)

September 2 (1 message)

[FD] Open-Xchange Security Advisory 2022-09-01 (Martin Heiland via Fulldisclosure <fulldisclosure@...lists.org>)

September 6 (1 message)

[FD] 123ADV-001: Stack Buffer Overflow in Lotus 1-2-3 R3 for UNIX/Linux (Tavis Ormandy <taviso@...il.com>)

September 9 (8 messages)

[FD] sagemath denial of service with abort() in gmp: overflow in mpz type (Georgi Guninski <gguninski@...il.com>)
[FD] AVEVA InTouch Access Anywhere Secure Gateway - Path Traversal (Jens Regel | CRISEC <jregel@...sec.de>)
[FD] Trojan.Win32.Autoit.fhj / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Winshell.5_0 / Weak Hardcoded Credentials (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Hupigon.aspg / Insecure Service Path (malvuln <malvuln13@...il.com>)
[FD] Trojan-Spy.Win32.Pophot.bsl / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] Trojan-Ransom.Win32.Hive.bv / Arbitrary Code Execution (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.Autoit.fhj / Named Pipe Null DACL (malvuln <malvuln13@...il.com>)

September 12 (6 messages)

[FD] Multiple vulnerabilities discovered in Qualys Cloud Agent (Daniel Wood via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] [SYSS-2022-041] Remote Code Execution due to unsafe JMX default configuration in JasperReports Server (Moritz Bechler <moritz.bechler@...s.de>)
[FD] APPLE-SA-2022-09-12-1 iOS 16 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-09-12-2 iOS 15.7 and iPadOS 15.7 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-09-12-4 macOS Monterey 12.6 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-09-12-5 Safari 16 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)

September 16 (3 messages)

[FD] over 2000 packages depend on abort()ing libgmp (Georgi Guninski <gguninski@...il.com>)
[FD] SEC Consult SA-20220914-0 :: Improper Access Control in SAP® SAProuter ("SEC Consult Vulnerability Lab, Research via Fulldisclosure" <fulldisclosure@...l…)
[FD] SEC Consult SA-20220915-0 :: Local Privilege Escalation im SAP® SAPControl Web Service Interface (sapuxuserchk) ("SEC Consult Vulnerability Lab, Research…)

September 20 (5 messages)

Re: [FD] over 2000 packages depend on abort()ing libgmp (Matthew Fernandez <matthew.fernandez@...il.com>)
[FD] Trojan-Dropper.Win32.Corty.10 / Insecure Credential Storage (malvuln <malvuln13@...il.com>)
[FD] Trojan.Ransom.Ryuk.A / Arbitrary Code Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Hellza.120 / Unauthorized Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Hellza.120 / Authentication Bypass (malvuln <malvuln13@...il.com>)

September 27 (4 messages)

[FD] SEC Consult SA-20220923-0 :: Multiple Memory Corruption Vulnerabilities in COVESA (Connected Vehicle Systems Allia… ("SEC Consult Vulnerability Lab, Resear…)
[FD] Backdoor.Win32.Bingle.b / Weak Hardcoded Credentials (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Psychward.b / Weak Hardcoded Credentials (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Augudor.b / Remote File Write Code Execution (malvuln <malvuln13@...il.com>)

29 messages

Powered by blists - more mailing lists