full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2022/10

Mon	Tue	Wed	Thu	Fri	Sat	Sun
					¹ 2	²
³ 3	⁴	⁵	⁶	⁷	⁸	⁹ 4
¹⁰	¹¹	¹²	¹³	¹⁴	¹⁵	¹⁶ 6
¹⁷	¹⁸	¹⁹	²⁰	²¹ 10	²²	²³
²⁴ 1	²⁵	²⁶	²⁷	²⁸	²⁹	³⁰ 28
³¹

Messages by day:

October 1 (2 messages)

[FD] ZKBiosecurity - Authenticated SQL Injection resulting in RCE (CVE-2022-36635) (Caio B <caioburgardt@...il.com>)
[FD] ZKBioSecurity 3.0.5- Privilege Escalation to Admin (CVE-2022-36634) (Caio B <caioburgardt@...il.com>)

October 3 (3 messages)

[FD] Wordpress plugin - WPvivid Backup - CVE-2022-2863. (Rodolfo Tavares via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Backdoor.Win32.NTRC / Weak Hardcoded Credentials (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Delf.eg / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)

October 9 (4 messages)

[FD] [SYSS-2022-043]: Verbatim Store 'n' Go Secure Portable SSD - Use of a Cryptographic Primitive with a Risky Implement… (Matthias Deeg <matthias.deeg@...s.de>)
[FD] [SYSS-2022-044]: Verbatim Store 'n' Go Secure Portable SSD - Use of a Cryptographic Primitive with a Risky Implement… (Matthias Deeg <matthias.deeg@...s.de>)
[FD] [SYSS-2022-045]: Verbatim Store 'n' Go Secure Portable SSD - Missing Immutable Root of Trust in Hardware (CWE-1326) … (Matthias Deeg <matthias.deeg@...s.de>)
[FD] [SYSS-2022-046]: Verbatim Store 'n' Go Secure Portable SSD - Expected Behavior Violation (CWE-440) (CVE-2022-28386) (Matthias Deeg <matthias.deeg@...s.de>)

October 16 (6 messages)

[FD] Apple Music Android Application - MITM SSL Certificate Vulnerability (CVE-2022-32906) (David Coomber <davidcoomber.infosec@...il.com>)
Re: [FD] over 2000 packages depend on abort()ing libgmp (Georgi Guninski <gguninski@...il.com>)
Re: [FD] over 2000 packages depend on abort()ing libgmp (Matthew Fernandez <matthew.fernandez@...il.com>)
[FD] APPLE-SA-2022-10-10-1 iOS 16.0.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Backdoor.Win32.DarkSky.23 / Remote Stack Buffer Overflow (SEH) (malvuln <malvuln13@...il.com>)
[FD] CyberDanube Security Research 20221009-0 | Authenticated Command Injection in Intelbras WiFiber 120AC inMesh (Thomas Weber <t.weber@...erdanube.com>)

October 21 (10 messages)

[FD] OpenStack Horizon, it is posible to trigger a POST Request to any address (Sven Anders <fulldisclosure2022@...n.anders.hamburg>)
[FD] Knap (APL) v3.1.3 - Persistent Cross Site Vulnerability ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] Vicidial v2.14-783a - Multiple XSS Web Vulnerabilities ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] Stripe Green Downloads 2.03 - Cross Site Scripting Web Vulnerability ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] Webile v1.0.1 - Directory Traversal Web Vulnerability ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] WiFi File Transfer v1.0.8 - Cross Site Scripting Vulnerabilities ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] MapTool v1.11.5 - Denial of Service Vulnerability ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] MapTool v1.11.5 - Cross Site Scripting Vulnerabilities ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] RRX IOB LP v1.0 - DNS Cache Snooping Vulnerability ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] Backdoor.Win32.Redkod.d / Weak Hardcoded Credentials (malvuln <malvuln13@...il.com>)

October 24 (1 message)

[FD] [RT-SA-2021-003] Missing Authentication in ZKTeco ZEM/ZMM Web Interface (RedTeam Pentesting GmbH <release@...team-pentesting.de>)

October 30 (28 messages)

[FD] wolfssl before 5.5.1: CVE-2022-39173 Buffer overflow when refining cipher suites (Maximilian Ammann via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Authorization bypass and symlink attack in multipathd (CVE-2022-41974 and CVE-2022-41973) (Qualys Security Advisory via Fulldisclosure <fulldisclosure@sec…)
[FD] Alibaba Cloud Workspace vulnerable to IDOR which lead to account hijacking in a certain situation (chan chan <siuchunc.03@...il.com>)
[FD] APPLE-SA-2022-10-24-1 iOS 16.1 and iPadOS 16 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-10-24-2 macOS Ventura 13 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-10-24-3 macOS Monterey 12.6.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-10-24-4 macOS Big Sur 11.7.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Backdoor.Win32.Delf.arh / Authentication Bypass (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Psychward.10 / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Email-Worm.Win32.Kipis.c / Remote File Write Code Execution (malvuln <malvuln13@...il.com>)
[FD] APPLE-SA-2022-10-24-5 watchOS 9.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-10-24-6 tvOS 16.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-10-24-7 Safari 16.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-10-27-1 iOS 15.7.1 and iPadOS 15.7.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-10-27-2 Additional information for APPLE-SA-2022-10-24-1 iOS 16.1 and iPadOS 16 (Apple Product Security via Fulldisclosure <fulldisclosure@s…)
[FD] APPLE-SA-2022-10-27-3 Additional information for APPLE-SA-2022-09-12-1 iOS 16 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-10-27-4 Additional information for APPLE-SA-2022-09-12-2 iOS 15.7 and iPadOS 15.7 (Apple Product Security via Fulldisclosure <fulldisclosure…)
[FD] APPLE-SA-2022-10-27-5 Additional information for APPLE-SA-2022-10-24-2 macOS Ventura 13 (Apple Product Security via Fulldisclosure <fulldisclosure@...list…)
[FD] APPLE-SA-2022-10-27-6 Additional information for APPLE-SA-2022-10-24-3 macOS Monterey 12.6.1 (Apple Product Security via Fulldisclosure <fulldisclosure@se…)
[FD] APPLE-SA-2022-10-27-7 Additional information for APPLE-SA-2022-09-12-4 macOS Monterey 12.6 (Apple Product Security via Fulldisclosure <fulldisclosure@...l…)
[FD] APPLE-SA-2022-10-27-8 Additional information for APPLE-SA-2022-10-24-4 macOS Big Sur 11.7.1 (Apple Product Security via Fulldisclosure <fulldisclosure@sec…)
[FD] APPLE-SA-2022-10-27-9 Additional information for APPLE-SA-2022-09-12-3 macOS Big Sur 11.7 (Apple Product Security via Fulldisclosure <fulldisclosure@...li…)
[FD] APPLE-SA-2022-10-27-10 Additional information for APPLE-SA-2022-10-24-6 tvOS 16.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-10-27-11 tvOS 16 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-10-27-12 Additional information for APPLE-SA-2022-10-24-5 watchOS 9.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.or…)
[FD] APPLE-SA-2022-10-27-13 watchOS 9 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-10-27-14 Additional information for APPLE-SA-2022-09-12-5 Safari 16 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-10-27-15 Additional information for APPLE-SA-2022-10-24-7 Safari 16.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.or…)

54 messages