full-disclosure mailing list - 2022/11

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2022/11

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹	²	³	⁴	⁵	⁶
⁷	⁸ 2	⁹	¹⁰	¹¹	¹²	¹³
¹⁴	¹⁵ 10	¹⁶	¹⁷	¹⁸	¹⁹	²⁰ 4
²¹	²²	²³	²⁴	²⁵	²⁶	²⁷
²⁸	²⁹ 10	³⁰

Messages by day:

November 8 (2 messages)

[FD] CVE-2022-3602 and CVE-2022-3786 Critical OpenSSL 3.0.x security vulnerabilities (Turritopsis Dohrnii Teo En Ming <tdtemccna@...il.com>)
[FD] APPLE-SA-2022-11-01-1 Xcode 14.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)

November 15 (10 messages)

[FD] Cisco Secure Email Gateways can easily be circumvented (FD <full.dis@...ap.com>)
[FD] [CVE-2022-3747] BeCustom <= 1.0.5.2 Generic Cross-Site Request Forgery ("Julien Ahrens (RCE Security)" <info@...security.com>)
[FD] Backdoor.Win32.Aphexdoor.LiteSock / Remote Stack Buffer Overflow (SEH) (malvuln <malvuln13@...il.com>)
[FD] HEUR:Trojan.MSIL.Agent.gen / Information Disclosure (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.RemServ.d / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] APPLE-SA-2022-11-09-1 iOS 16.1.1 and iPadOS 16.1.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-11-09-2 macOS Ventura 13.0.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] SEC Consult SA-20221109-0 :: Multiple Critical Vulnerabilities in Simmeth System GmbH Supplier manager (Lieferante… ("SEC Consult Vulnerability Lab, Resear…)
[FD] SEC Consult SA-20221110-0 :: HTML Injection in BMC Remedy ITSM-Suite ("SEC Consult Vulnerability Lab, Research via Fulldisclosure" <fulldisclosure@...lis…)
[FD] SEC Consult SA-20221114-0 :: Path Traversal Vulnerability in Payara Platform ("SEC Consult Vulnerability Lab, Research via Fulldisclosure" <fulldisclosur…)

November 20 (4 messages)

[FD] [CVE-2022-3861] Betheme <= 26.5.1.4 - Authenticated (Contributor+) PHP Object Injection ("Julien Ahrens (RCE Security)" <info@...security.com>)
[FD] Backdoor.Win32.Quux / Weak Hardcoded Credentials (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.Platinum.gen / Arbitrary Code Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Oblivion.01.a / Insecure Transit Password Disclosure (malvuln <malvuln13@...il.com>)

November 29 (10 messages)

[FD] crashing potplayer again (houjingyi <houjingyi647@...il.com>)
[FD] [CVE-2022-33942] Intel Data Center Manager Console <= 4.1.1.45749 ”UserMgmtHandler" Authentication Logic Error Le… ("Julien Ahrens (RCE Security)" <info@rc…)
[FD] Open-Xchange Security Advisory 2022-11-24 (Martin Heiland via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Backdoor.Win32.Serman.a / Unauthenticated Open Proxy (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Autocrat.b / Weak Hardcoded Credentials (malvuln <malvuln13@...il.com>)
[FD] Trojan.Win32.DarkNeuron.gen / Named Pipe Null DACL (malvuln <malvuln13@...il.com>)
[FD] Ransomware Deception Tactics Part 1 (malvuln <malvuln13@...il.com>)
[FD] Win32.Ransom.Conti / Crypto Logic Flaw (malvuln <malvuln13@...il.com>)
[FD] Exploiting an N-day vBulletin PHP Object Injection Vulnerability (Egidio Romano <n0b0d13s@...il.com>)
[FD] CyberDanube Security Research 20221124-0 | Authenticated Command Injection Hirschmann BAT-C2 (Thomas Weber <t.weber@...erdanube.com>)

26 messages

Powered by blists - more mailing lists