full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2024/01

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹	²	³	⁴ 2	⁵	⁶	⁷
⁸ 4	⁹	¹⁰	¹¹	¹²	¹³	¹⁴
¹⁵ 7	¹⁶	¹⁷ 9	¹⁸ 2	¹⁹	²⁰	²¹
²²	²³	²⁴	²⁵	²⁶ 46	²⁷ 5	²⁸
²⁹	³⁰	³¹

Messages by day:

January 4 (2 messages)

[FD] Windows PowerShell Single Quote Code Execution / Event Log Bypass (hyp3rlinx <apparitionsec@...il.com>)
[FD] RansomLord v2 - Anti-Ransomware Exploitation Tool / New Release (hyp3rlinx <apparitionsec@...il.com>)

January 8 (4 messages)

[FD] SSH-Snake: Automated SSH-Based Network Traversal (Joshua Rogers <megamansec@...il.com>)
[FD] OXAS-ADV-2023-0005: OX App Suite Security Advisory (Martin Heiland via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] OXAS-ADV-2023-0006: OX App Suite Security Advisory (Martin Heiland via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] cpio privilege escalation vulnerability via setuid files in cpio archive (Georgi Guninski <gguninski@...il.com>)

January 15 (7 messages)

Re: [FD] [SBA-ADV-20220120-01] MOKOSmart MKGW1 Gateway Improper Session Management (SBA - Advisory via Fulldisclosure <fulldisclosure@...lists.org>)
Re: [FD] cpio privilege escalation vulnerability via setuid files in cpio archive (fulldisclosure <fulldisclosure@...lution-hosting.eu>)
Re: [FD] cpio privilege escalation vulnerability via setuid files in cpio archive (Georgi Guninski <gguninski@...il.com>)
Re: [FD] cpio privilege escalation vulnerability via setuid files in cpio archive (Harry Sintonen via Fulldisclosure <fulldisclosure@...lists.org>)
Re: [FD] cpio privilege escalation vulnerability via setuid files in cpio archive (Harry Sintonen via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] CyberDanube Security Research 20240109-0 | Multiple Vulnerabilities in JetNet Series (Thomas Weber via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Backdoor.Win32 Carbanak (Anunak) / Named Pipe Null DACL (malvuln <malvuln13@...il.com>)

January 17 (9 messages)

[FD] ODR violation in Redis Raft (Meng Ruijie <ruijie_meng@...us.edu>)
[FD] Incorrect handshake in TinyDTLS (Meng Ruijie <ruijie_meng@...us.edu>)
[FD] Mishandle epoch number in TinyDTLS servers (Meng Ruijie <ruijie_meng@...us.edu>)
[FD] Infinite loop leading to buffer overflow in TinyDTLS (Meng Ruijie <ruijie_meng@...us.edu>)
[FD] Buffer over-read in TinyDTLS (Meng Ruijie <ruijie_meng@...us.edu>)
[FD] Assertion failure in check_certificate_request() of TinyDTLS (Meng Ruijie <ruijie_meng@...us.edu>)
[FD] Misues same epoch number within TCP lifetime in TinyDTLS (Meng Ruijie <ruijie_meng@...us.edu>)
[FD] Buffer over-read in dtls_sha256_update of TinyDTLS (Meng Ruijie <ruijie_meng@...us.edu>)
[FD] Legends of IdleOn - I Reject Your RNG And Substitute My Own (Soatok Dreamseeker <soatok.dhole@...il.com>)

January 18 (2 messages)

[FD] Minor firefox DoS - semi silently polluting ~/Downloads with files (part 2) (Georgi Guninski <gguninski@...il.com>)
Re: [FD] ODR violation in Redis Raft (Jeffrey Walton <noloader@...il.com>)

January 26 (46 messages)

[FD] [SBA-ADV-20200707-01] CVE-2020-36771: CloudLinux CageFS 7.1.1-1 or below Token Disclosure (SBA - Advisory via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] [SBA-ADV-20200707-02] CVE-2020-36772: CloudLinux CageFS 7.0.8-2 or below Insufficiently Restricted Proxy Command (SBA - Advisory via Fulldisclosure <fulld…)
[FD] [Full Disclosure] CVE-2024-22900: Unpatched Command Injection in Vinchin Backup and Recovery Versions 7.2 and Earl… (Balgogan via Fulldisclosure <fulldisclo…)
[FD] [Full Disclosure] CVE-2024-22899: Unpatched Command Injection in Vinchin Backup and Recovery Versions 7.2 and Earl… (Valentin Lobstein via Fulldisclosure <f…)
[FD] [Full Disclosure] CVE-2024-22901: Default MYSQL Credentials in Vinchin Backup & Recovery v7.2 and Earlier (Valentin Lobstein via Fulldisclosure <fulldiscl…)
[FD] [Full Disclosure] CVE-2024-22902: Default Root Credentials in Vinchin Backup & Recovery v7.2 and Earlier (Valentin Lobstein via Fulldisclosure <fulldisclo…)
[FD] [Full Disclosure] CVE-2024-22903: Unpatched Command Injection in Vinchin Backup & Recovery Versions 7.2 and Earlie… (Valentin Lobstein via Fulldisclosure <f…)
[FD] APPLE-SA-01-22-2024-1 Safari 17.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-01-22-2024-2 iOS 17.3 and iPadOS 17.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-01-22-2024-3 iOS 16.7.5 and iPadOS 16.7.5 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-01-22-2024-4 iOS 15.8.1 and iPadOS 15.8.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-01-22-2024-5 macOS Sonoma 14.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-01-22-2024-6 macOS Ventura 13.6.4 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-01-22-2024-7 macOS Monterey 12.7.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-01-22-2024-8 watchOS 10.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-01-22-2024-9 tvOS 17.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] TrojanSpy Win32 Nivdort / Insecure Permissions - EoP (SYSTEM) (malvuln <malvuln13@...il.com>)
[FD] Yet another fork()/malloc() bomb in javascript + SIGILL in Chrome (Georgi Guninski <gguninski@...il.com>)
[FD] Multiple Vulnerabilities in Reprise License Manager 15.1 (CVE-2023-43183, CVE-2023-44031) ("Rahim, Mohaiman via Fulldisclosure" <fulldisclosure@...lists.o…)
[FD] PrommetriX - (Prometheus Metrics Leaker) released! (psy <epsylon@...eup.net>)
[FD] Null pointer deference in freedesktop mesa (Meng Ruijie <ruijie_meng@...us.edu>)
[FD] Null pointer dereference in Xedit (Meng Ruijie <ruijie_meng@...us.edu>)
[FD] NULL pointer dereference in tgetstr() of ncurses (Meng Ruijie <ruijie_meng@...us.edu>)
[FD] Buffer Overflow in glXQueryServerString() of mesa (Meng Ruijie <ruijie_meng@...us.edu>)
[FD] Null pointer deference in XGetWMHints() of Xfig (Meng Ruijie <ruijie_meng@...us.edu>)
[FD] NULL pointer dereference in the function handle_viminfo_register() of vim (Meng Ruijie <ruijie_meng@...us.edu>)
[FD] NULL pointer dereference in __glXGetDrawableAttribute() of Mesa (Meng Ruijie <ruijie_meng@...us.edu>)
[FD] NULL pointer dereference in XIQueryDevice() of gnome gtk (Meng Ruijie <ruijie_meng@...us.edu>)
[FD] NULL pointer dereference in glXGetDrawableScreen() of OpenGL libglvnd (Meng Ruijie <ruijie_meng@...us.edu>)
[FD] null pointer deference in GNU Midnight at /tty/x11conn.c (Meng Ruijie <ruijie_meng@...us.edu>)
[FD] null pointer deference in gnome gdk-pixbuf (Meng Ruijie <ruijie_meng@...us.edu>)
[FD] arithmetic exception in S-lang via the function tt_sprintf() (Meng Ruijie <ruijie_meng@...us.edu>)
[FD] null pointer deference in gnome gtk via init_randr15() at gdkscreen-x11.c (Meng Ruijie <ruijie_meng@...us.edu>)
[FD] SEGV in S-Lang via fixup_tgetstr() (Meng Ruijie <ruijie_meng@...us.edu>)
[FD] null pointer deference in gnome gtk via parse_settings() at xsettings-client.c (Meng Ruijie <ruijie_meng@...us.edu>)
[FD] NULL pointer dereference in freedesktop Mesa via check_xshm() (Meng Ruijie <ruijie_meng@...us.edu>)
[FD] null pointer deference in nano via read_the_list() (Meng Ruijie <ruijie_meng@...us.edu>)
[FD] NULL pointer dereference in QT via the function QXcbConnection::initializeAllAtoms() (Meng Ruijie <ruijie_meng@...us.edu>)
[FD] Buffer Overflow in graphviz via via a crafted config6a file (Meng Ruijie <ruijie_meng@...us.edu>)
[FD] null pointer deference in MiniZinc via a crafted .mzn file (Meng Ruijie <ruijie_meng@...us.edu>)
[FD] null pointer deference in Sane via a crafted config file (Meng Ruijie <ruijie_meng@...us.edu>)
[FD] null pointer deference in tex-live via a crafted cmr10.pfb (Meng Ruijie <ruijie_meng@...us.edu>)
[FD] null pointer deference in LLVM (Meng Ruijie <ruijie_meng@...us.edu>)
[FD] null pointer deference in MiniZinc via a crafted Preferences.json file (Meng Ruijie <ruijie_meng@...us.edu>)
[FD] null pointer deference in tex-live (Meng Ruijie <ruijie_meng@...us.edu>)
[FD] Buffer overflow in Sane (Meng Ruijie <ruijie_meng@...us.edu>)

January 27 (5 messages)

Re: [FD] Null pointer dereference in Xedit (Alan Coopersmith <alan.coopersmith@...cle.com>)
Re: [FD] NULL pointer dereference in freedesktop Mesa via check_xshm() (Dan Cross <crossd@...il.com>)
Re: [FD] null pointer deference in nano via read_the_list() (Mark Esler <mark.esler@...onical.com>)
[FD] CVEs based on commit messages (Mark Esler <mark.esler@...onical.com>)
Re: [FD] Buffer Overflow in graphviz via via a crafted config6a file (Matthew Fernandez <matthew.fernandez@...il.com>)

75 messages