full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2022/12

Mon	Tue	Wed	Thu	Fri	Sat	Sun
			¹	²	³ 1	⁴
⁵	⁶	⁷	⁸	⁹ 9	¹⁰ 1	¹¹
¹²	¹³ 4	¹⁴	¹⁵	¹⁶	¹⁷	¹⁸
¹⁹	²⁰	²¹ 16	²²	²³	²⁴	²⁵
²⁶	²⁷	²⁸	²⁹	³⁰	³¹ 1

Messages by day:

December 3 (1 message)

[FD] Drupal H5P Module <= 2.0.0 (isValidPackage) Zip Slip Vulnerability (Egidio Romano <research@...mainsecurity.com>)

December 9 (9 messages)

[FD] [CVE-2022-21225] Intel Data Center Manager Console <= 4.1 “getRoomRackData" Authenticated (Guest+) SQL Injection ("Julien Ahrens (RCE Security)" <info@rc…)
[FD] Intel Data Center Manager <= 5.1 Local Privileges Escalation ("Julien Ahrens (RCE Security)" <info@...security.com>)
[FD] Backdoor.Win32.Delf.gj / Information Disclosure (malvuln <malvuln13@...il.com>)
[FD] Race condition in snap-confine's must_mkdir_and_open_with_perms() (CVE-2022-3328) (Qualys Security Advisory via Fulldisclosure <fulldisclosure@...lists.or…)
[FD] SEC Consult SA-20221130-0 :: Multiple critical vulnerabilities in Planet Enterprises Ltd - Planet eStream ("SEC Consult Vulnerability Lab, Research via F…)
[FD] SEC Consult SA-20221201-0 :: Replay attacks & Displaying arbitrary contents in Zhuhai Suny Technology ESL Tag / ET… ("SEC Consult Vulnerability Lab, Resear…)
[FD] SEC Consult SA-20221206-0 :: Multiple critical vulnerabilities in ILIAS eLearning platform ("SEC Consult Vulnerability Lab, Research via Fulldisclosure" …)
[FD] CyberDanube Security Research 20221130-0 | Multiple Vulnerabilities in Delta Electronics DX-2100-L1-CN (Thomas Weber <t.weber@...erdanube.com>)
[FD] CyberDanube Security Research 20221130-1 | Authenticated Command Injection in Delta Electronics DVW-W02W2-E2 (Thomas Weber <t.weber@...erdanube.com>)

December 10 (1 message)

[FD] Microsoft PlayReady security research (Security Explorations <contact@...urity-explorations.com>)

December 13 (4 messages)

[FD] Vulnerabilities Disclosure - Shoplazza Stored XSS (Andrey Stoykov <astoykov@....com>)
[FD] SEC Consult SA-20221213-0 :: Privilege Escalation Vulnerabilities (UNIX Insecure File Handling) in SAP Host Agent … ("SEC Consult Vulnerability Lab, Resear…)
Re: [FD] CyberDanube Security Research 20221009-0 | Authenticated Command Injection in Intelbras WiFiber 120AC inMesh (Thomas Weber <t.weber@...erdanube.com>)
[FD] Trojan-Dropper.Win32.Decay.dxv (CyberGate v1.00.0) / Insecure Proprietary Password Encryption (malvuln <malvuln13@...il.com>)

December 21 (16 messages)

[FD] 4images RCE (Andrey Stoykov <astoykov@....com>)
[FD] [CFP] BSides San Francisco – April 2023 (BSidesSF CFP via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Backdoor.Win32.InCommander.17.b / Hardcoded Cleartext Credentials (malvuln <malvuln13@...il.com>)
[FD] Ransom.Win64.AtomSilo / Crypto Logic Flaw (malvuln <malvuln13@...il.com>)
[FD] Adversary3 updated / Malware vulnerability intel tool for third-party attackers (malvuln <malvuln13@...il.com>)
[FD] APPLE-SA-2022-12-13-1 iOS 16.2 and iPadOS 16.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-12-13-2 iOS 15.7.2 and iPadOS 15.7.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-12-13-3 iOS 16.1.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-12-13-4 macOS Ventura 13.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-12-13-5 macOS Monterey 12.6.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-12-13-6 macOS Big Sur 11.7.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-12-13-7 tvOS 16.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-12-13-8 watchOS 9.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2022-12-13-9 Safari 16.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] SEC Consult Vulnerability Lab publication: The enemy from within: Unauthenticated Buffer Overflows in Zyxel routers… ("SEC Consult Vulnerability Lab, Resear…)
[FD] SEC Consult SA-20221216-0 :: Remote code execution bypass in Eclipse Business Intelligence Reporting Tool (BiRT) ("SEC Consult Vulnerability Lab, Researc…)

December 31 (1 message)

[FD] SugarCRM 0-day Auth Bypass + RCE Exploit ("sw33t.0day via Fulldisclosure" <fulldisclosure@...lists.org>)

32 messages