full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2023/12

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹	²	³
⁴	⁵	⁶	⁷	⁸	⁹	¹⁰
¹¹	¹² 7	¹³ 12	¹⁴	¹⁵	¹⁶	¹⁷
¹⁸	¹⁹ 10	²⁰	²¹	²²	²³	²⁴
²⁵	²⁶ 1	²⁷	²⁸	²⁹	³⁰	³¹

Messages by day:

December 12 (7 messages)

[FD] Microsoft Defender Anti-Malware PowerShell API - Arbitrary Code Execution (hyp3rlinx <apparitionsec@...il.com>)
[FD] [CFP] BSides San Francisco - May 2024 (BSidesSF CFP via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] [KIS-2023-13] ISPConfig <= 3.2.11 (language_edit.php) PHP Code Injection Vulnerability (Egidio Romano <n0b0d13s@...il.com>)
[FD] APPLE-SA-11-30-2023-1 Safari 17.1.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-11-30-2023-2 iOS 17.1.2 and iPadOS 17.1.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-11-30-2023-3 macOS Sonoma 14.1.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-12-11-2023-1 Safari 17.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)

December 13 (12 messages)

[FD] APPLE-SA-12-11-2023-2 iOS 17.2 and iPadOS 17.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-12-11-2023-3 iOS 16.7.3 and iPadOS 16.7.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-12-11-2023-4 macOS Sonoma 14.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-12-11-2023-5 macOS Ventura 13.6.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-12-11-2023-6 macOS Monterey 12.7.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-12-11-2023-7 tvOS 17.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-12-11-2023-8 watchOS 10.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] HNS-2023-04 - HN Security Advisory - Buffer overflow vulnerabilities with long path names in TinyDir (Marco Ivaldi <raptor@...eadbeef.info>)
[FD] SEC Consult SA-20231128 :: Missing Certificate Validation & User Enumeration in Anveo Mobile App and Server ("SEC Consult Vulnerability Lab, Research via…)
[FD] SEC Consult SA-20231205 :: Argument injection leading to unauthenticated RCE and authentication bypass in Atos Uni… ("SEC Consult Vulnerability Lab, Resear…)
[FD] SEC Consult SA-20231206 :: Kiosk Escape Privilege Escalation in One Identity Password Manager Secure Password Exte… ("SEC Consult Vulnerability Lab, Resear…)
[FD] SEC Consult SA-20231211-0 :: Local Privilege Escalation via MSI installer in PDF24 Creator ("SEC Consult Vulnerability Lab, Research via Fulldisclosure" …)

December 19 (10 messages)

[FD] Disclosure of CVE-2023-50917: RCE Vulnerability in MajorDoM (Balgogan via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-12-19-2023-1 macOS Sonoma 14.2.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] [SBA-ADV-20220120-01] MOKOSmart MKGW1 Gateway Improper Session Management (SBA - Advisory via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] [KIS-2023-14] PKP-WAL <= 3.4.0-3 (NativeImportExportPlugin) Remote Code Execution Vulnerability (Egidio Romano <n0b0d13s@...il.com>)
[FD] [ES2023-01] Asterisk susceptible to Denial of Service via DTLS Hello packets during call initiation ("Sandro Gauci" <sandro@...blesecurity.com>)
[FD] [ES2023-03] RTPEngine susceptible to Denial of Service via DTLS Hello packets during call initiation ("Sandro Gauci" <sandro@...blesecurity.com>)
[FD] CORRECTED asterisk release certified-18.9-cert6 (Asterisk Development Team <asteriskteam@...ium.com>)
[FD] CORRECTED asterisk release 21.0.1 (Asterisk Development Team <asteriskteam@...ium.com>)
[FD] asterisk release 18.20.1 (Asterisk Development Team via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] asterisk release 20.5.1 (Asterisk Development Team via Fulldisclosure <fulldisclosure@...lists.org>)

December 26 (1 message)

[FD] [ES2023-02] FreeSWITCH susceptible to Denial of Service via DTLS Hello packets during call initiation ("Sandro Gauci" <sandro@...blesecurity.com>)

30 messages