full-disclosure mailing list - 2023/08

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2023/08

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 6	² 3	³	⁴ 2	⁵	⁶
⁷	⁸ 1	⁹	¹⁰	¹¹ 3	¹²	¹³
¹⁴	¹⁵ 4	¹⁶	¹⁷ 3	¹⁸	¹⁹ 4	²⁰
²¹	²²	²³ 5	²⁴	²⁵	²⁶	²⁷
²⁸	²⁹ 1	³⁰	³¹ 1

Messages by day:

August 1 (6 messages)

[FD] ETSI WEBstore 2023 - Persistent Cross Site Scripting Web Vulnerability ("info@...nerability-lab.com" <info@...nerability-lab.com>)
[FD] Stored XSS - Perch (Andrey Stoykov <mwebsec@...il.com>)
[FD] Pentest Paper - Introduction to Web Pentest (Andrey Stoykov <mwebsec@...il.com>)
[FD] Unauthorized MFA Code Delivery in EmpowerID ("Patel, Nirav" <Nirav.Patel@...owerid.com>)
[FD] CVE-2023-28130 - Hostname injection leads to Remote Code Execution RCE (Authenticated) (Rick Verdoes via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Trovent Security Advisory 2303-01 / CVE-2023-36255 / Authenticated remote code execution in Eramba (Stefan Pietsch <s.pietsch@...vent.io>)

August 2 (3 messages)

[FD] Savant Web Server 3.1 - Remote Buffer Overflow (Egghunter) (Mahmoud Noureldin <leefordedwin@...il.com>)
[FD] RansomLord v1 / Anti-Ransomware Exploit Tool (malvuln <malvuln13@...il.com>)
[FD] OXAS-ADV-2023-0003: OX App Suite Security Advisory (Martin Heiland via Fulldisclosure <fulldisclosure@...lists.org>)

August 4 (2 messages)

[FD] [SYSS-2023-011]: Canon PIXMA TR4550 and other inkjet printer models - Insufficient or Incomplete Data Removal, wi… (Matthias Deeg via Fulldisclosure <fulld…)
[FD] Kolibri GET request buffer Overflow [Stack Egghunter] (Mahmoud Noureldin <leefordedwin@...il.com>)

August 8 (1 message)

[FD] GNOME Files silently extracts setuid files from ZIP archives (Georgi Guninski <gguninski@...il.com>)

August 11 (3 messages)

[FD] St. Poelten UAS | Multiple Vulnerabilities in Phoenix Contact TC Cloud Client / TC Router / Cloud Client (Weber Thomas via Fulldisclosure <fulldisclosure@…)
[FD] St. Poelten UAS | Multiple XSS in Advantech EKI 15XX Series (Weber Thomas via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Qualys mis-uses ssh, fails to scan and protect, facilitates internal attack (Paul Szabo via Fulldisclosure <fulldisclosure@...lists.org>)

August 15 (4 messages)

[FD] Use of Hard-coded Cryptographic Key (CWE-321) / CVE-2023-22957 (Moritz Abrell via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Use of Hard-coded Cryptographic Key (CWE-321) / CVE-2023-22956 (Moritz Abrell via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Missing Immutable Root of Trust in Hardware (CWE-1326) / CVE-2023-22955 (Moritz Abrell via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Anomaly in Fedora `dnf update`: md5 mismatch of result (Georgi Guninski <gguninski@...il.com>)

August 17 (3 messages)

[FD] KL-001-2023-001: Cisco ThousandEyes Enterprise Agent Virtual Appliance Arbitrary File Read via sudo dig (KoreLogic Disclosures via Fulldisclosure <fulldis…)
[FD] KL-001-2023-002: Cisco ThousandEyes Enterprise Agent Virtual Appliance Privilege Escalation via tcpdump (KoreLogic Disclosures via Fulldisclosure <fulldis…)
[FD] KL-001-2023-003: Cisco ThousandEyes Enterprise Agent Virtual Appliance Arbitrary File Modification via sudoedit (KoreLogic Disclosures via Fulldisclosure …)

August 19 (4 messages)

Re: [FD] Anomaly in Fedora `dnf update`: md5 mismatch of result (Adrean Boyadzhiev <adrean.boyadzhiev@...il.com>)
Re: [FD] Anomaly in Fedora `dnf update`: md5 mismatch of result (Matthew Fernandez <matthew.fernandez@...il.com>)
Re: [FD] Anomaly in Fedora `dnf update`: md5 mismatch of result (Michael Lazin <microlaser@...il.com>)
Re: [FD] Anomaly in Fedora `dnf update`: md5 mismatch of result (Jeffrey Walton <noloader@...il.com>)

August 23 (5 messages)

[FD] [KIS-2023-05] SugarCRM <= 12.2.0 (Notes) Unrestricted File Upload Vulnerability (Egidio Romano <research@...mainsecurity.com>)
[FD] [KIS-2023-06] SugarCRM <= 12.2.0 (updateGeocodeStatus) Bean Manipulation Vulnerability (Egidio Romano <research@...mainsecurity.com>)
[FD] [KIS-2023-07] SugarCRM <= 12.2.0 (Docusign_GlobalSettings) PHP Object Injection Vulnerability (Egidio Romano <research@...mainsecurity.com>)
[FD] [KIS-2023-08] SugarCRM <= 12.2.0 Two SQL Injection Vulnerabilities (Egidio Romano <research@...mainsecurity.com>)
[FD] [KIS-2023-09] CrafterCMS <= 4.0.2 Multiple Reflected Cross-Site Scripting Vulnerabilities (Egidio Romano <research@...mainsecurity.com>)

August 29 (1 message)

[FD] Mozilla Firefox only stores up to 1024 HSTS entries (Konstantin <fulldisclosure@...n.de>)

August 31 (1 message)

[FD] [CVE-2023-4491, CVE-2023-4492, CVE-2023-4493, CVE-2023-4494, CVE-2023-4495, CVE-2023-4496, CVE-2023-4497] Multipl… (Rafael Pedrero <rafael.pedrero@...il.co…)

33 messages

Powered by blists - more mailing lists