full-disclosure mailing list - 2023/01

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2023/01

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹
²	³ 1	⁴	⁵	⁶ 1	⁷	⁸
⁹ 4	¹⁰	¹¹	¹²	¹³	¹⁴	¹⁵
¹⁶	¹⁷ 1	¹⁸	¹⁹	²⁰ 8	²¹	²²
²³	²⁴ 10	²⁵	²⁶ 1	²⁷ 2	²⁸	²⁹
³⁰	³¹ 1

Messages by day:

January 3 (1 message)

[FD] [tool] ModSecurity backdoor (Jozef Sudolsky <jozef@...olsky.sk>)

January 6 (1 message)

[FD] Centos Web Panel 7 Unauthenticated Remote Code Execution - CVE-2022-44877 (Numan TÜRLE <numan.turle@...ssecurity.com>)

January 9 (4 messages)

[FD] [KIS-2023-01] Tiki Wiki CMS Groupware <= 25.0 Two Cross-Site Request Forgery Vulnerabilities (Egidio Romano <research@...mainsecurity.com>)
[FD] [KIS-2023-02] Tiki Wiki CMS Groupware <= 24.0 (structlib.php) PHP Code Injection Vulnerability (Egidio Romano <research@...mainsecurity.com>)
[FD] [KIS-2023-03] Tiki Wiki CMS Groupware <= 24.0 (grid.php) PHP Object Injection Vulnerability (Egidio Romano <research@...mainsecurity.com>)
[FD] [KIS-2023-04] Tiki Wiki CMS Groupware <= 24.1 (tikiimporter_blog_wordpress.php) PHP Object Injection Vulnerability (Egidio Romano <research@...mainsecurity…)

January 17 (1 message)

[FD] Citrix Linux client logs session credentials (Russell Howe <russellghowe@...il.com>)

January 20 (8 messages)

[FD] wolfSSL before 5.5.0: Denial-of-service with session resumption (Maximilian Ammann via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] wolfSSL 5.3.0: Denial-of-service (Maximilian Ammann via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] wolfSSL before 5.5.0: Denial-of-service with session resumption (Maximilian Ammann via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] wolfSSL before 5.5.2: Heap-buffer over-read with WOLFSSL_CALLBACKS (Maximilian Ammann via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] HNS-2022-01 - HN Security Advisory - Multiple vulnerabilities in Solaris dtprintinfo and libXm/libXpm (Marco Ivaldi <raptor@...eadbeef.info>)
[FD] SEC Consult SA-20230117-0 :: Pre-authenticated Remote Code Execution in cs.exe (@OpenText Content Server component… ("SEC Consult Vulnerability Lab, Resear…)
[FD] SEC Consult SA-20230117-1 :: Pre-authenticated Remote Code Execution via Java frontend and QDS endpoint in @OpenTe… ("SEC Consult Vulnerability Lab, Resear…)
[FD] SEC Consult SA-20230117-2 :: Multiple post-authentication vulnerabilities including RCE in @OpenText Content Serve… ("SEC Consult Vulnerability Lab, Resear…)

January 24 (10 messages)

[FD] APPLE-SA-2023-01-23-1 iOS 16.3 and iPadOS 16.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2023-01-23-2 iOS 15.7.3 and iPadOS 15.7.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2023-01-23-3 iOS 12.5.7 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2023-01-23-4 macOS Ventura 13.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2023-01-23-5 macOS Monterey 12.6.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2023-01-23-6 macOS Big Sur 11.7.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2023-01-23-7 watchOS 9.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2023-01-23-8 Safari 16.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
Re: [FD] HNS-2022-01 - HN Security Advisory - Multiple vulnerabilities in Solaris dtprintinfo and libXm/libXpm (Marco Ivaldi <raptor@...eadbeef.info>)
[FD] t2'23: Call For Papers 2023 (Helsinki, Finland) (Tomi Tuominen via Fulldisclosure <fulldisclosure@...lists.org>)

January 26 (1 message)

[FD] [RT-SA-2022-002] Skyhigh Security Secure Web Gateway: Cross-Site Scripting in Single Sign-On Plugin (RedTeam Pentesting GmbH <release@...team-pentesting.d…)

January 27 (2 messages)

[FD] [SYSS-2022-047] Razer Synapse - Local Privilege Escalation (Oliver Schwarz via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-2023-01-24-1 tvOS 16.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)

January 31 (1 message)

[FD] Trovent Security Advisory 2203-01 / Micro Focus GroupWise transmits session ID in URL (Stefan Pietsch <s.pietsch@...vent.io>)

29 messages

Powered by blists - more mailing lists