full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2024/03

Mon	Tue	Wed	Thu	Fri	Sat	Sun
				¹	²	³ 11
⁴	⁵ 4	⁶	⁷	⁸	⁹	¹⁰
¹¹	¹²	¹³ 16	¹⁴	¹⁵	¹⁶	¹⁷
¹⁸	¹⁹ 1	²⁰	²¹	²²	²³	²⁴
²⁵	²⁶	²⁷ 11	²⁸ 1	²⁹	³⁰	³¹

Messages by day:

March 3 (11 messages)

[FD] Multilaser Router - Access Control Bypass through Header Manipulation - CVE-2023-38944 (Vinícius Moraes <vinicius.moraes.w@...il.com>)
[FD] Multilaser Router - Access Control Bypass through URL Manipulation - CVE-2023-38945 (Vinícius Moraes <vinicius.moraes.w@...il.com>)
[FD] Multilaser Router - Access Control Bypass through Cookie Manipulation - CVE-2023-38946 (Vinícius Moraes <vinicius.moraes.w@...il.com>)
[FD] BACKDOOR.WIN32.ARMAGEDDON.R / Hardcoded Cleartext Credentials (malvuln <malvuln13@...il.com>)
[FD] BACKDOOR.WIN32.AUTOSPY.10 / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Jeemp.c / Cleartext Hardcoded Credentials (malvuln <malvuln13@...il.com>)
[FD] BACKDOOR.WIN32.AGENT.AMT / Authentication Bypass (malvuln <malvuln13@...il.com>)
[FD] XAMPP 5.6.40 - Error Based SQL Injection (Andrey Stoykov <mwebsec@...il.com>)
[FD] Multiple XSS Issues in boidcmsv2.0.1 (Andrey Stoykov <mwebsec@...il.com>)
[FD] JetStream Smart Switch - TL-SG2210P v5.0/ Improper Access Control / CVE-2023-43318 (Shaikh Shahnawaz <sshahnawaz99910@...il.com>)
[FD] SEC Consult SA-20240226-0 :: Local Privilege Escalation via DLL Hijacking in Qognify VMS Client Viewer ("SEC Consult Vulnerability Lab, Research via Full…)

March 5 (4 messages)

[FD] KL-001-2024-001: Artica Proxy Unauthenticated LFI Protection Bypass Vulnerability (KoreLogic Disclosures via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] KL-001-2024-002: Artica Proxy Unauthenticated PHP Deserialization Vulnerability (KoreLogic Disclosures via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] KL-001-2024-003: Artica Proxy Unauthenticated File Manager Vulnerability (KoreLogic Disclosures via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] KL-001-2024-004: Artica Proxy Loopback Services Remotely Accessible Unauthenticated (KoreLogic Disclosures via Fulldisclosure <fulldisclosure@...lists.org…)

March 13 (16 messages)

[FD] [Full Disclosure] CVE-2024-25228: Unpatched Command Injection in Vinchin Backup & Recovery Versions 7.2 and Earlie… (Valentin Lobstein via Fulldisclosure <f…)
[FD] StimulusReflex CVE-2024-28121 (lixts via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Backdoor.Win32.Beastdoor.oq / Unauthenticated Remote Command Execution (malvuln <malvuln13@...il.com>)
[FD] APPLE-SA-03-05-2024-1 iOS 17.4 and iPadOS 17.4 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-03-05-2024-2 iOS 16.7.6 and iPadOS 16.7.6 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-03-07-2024-1 Safari 17.4 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-03-07-2024-2 macOS Sonoma 14.4 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-03-07-2024-3 macOS Ventura 13.6.5 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-03-07-2024-4 macOS Monterey 12.7.4 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-03-07-2024-5 watchOS 10.4 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-03-07-2024-6 tvOS 17.4 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-03-07-2024-7 visionOS 1.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-03-12-2024-1 GarageBand 10.4.11 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] HNS-2024-05 - HN Security Advisory - Multiple vulnerabilities in RT-Thread RTOS (Marco Ivaldi <raptor@...eadbeef.info>)
[FD] SEC Consult SA-20240307-0 :: Local Privilege Escalation via writable files in Checkmk Agent (CVE-2024-0670) ("SEC Consult Vulnerability Lab, Research via…)
[FD] MetaFox Remote Shell Upload Exploit ("j0ck1ng@...pr.email" <j0ck1ng@...pr.email>)

March 19 (1 message)

[FD] Backdoor.Win32.Emegrab.b / Remote Stack Buffer Overflow (SEH) (malvuln <malvuln13@...il.com>)

March 27 (11 messages)

[FD] [IWCC 2024] CfP: 13th International Workshop on Cyber Crime - Vienna, Austria, July 30 - Aug 02, 2024 (Artur Janicki via Fulldisclosure <fulldisclosure@se…)
[FD] Circontrol EV Charger vulnerabilities (CVE-2020-8006, CVE-2020-8007) (Dariusz G <dariusz.gonda@...il.com>)
[FD] Win32.STOP.Ransomware (smokeloader) / Remote Code Execution (MITM) (malvuln <malvuln13@...il.com>)
[FD] Escape sequence injection in util-linux wall (CVE-2024-28085) ("Skyler Ferrante \(RIT Student\) via Fulldisclosure" <fulldisclosure@...lists.org>)
[FD] APPLE-SA-03-25-2024-6 visionOS 1.1.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-03-25-2024-5 iOS 16.7.7 and iPadOS 16.7.7 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-03-25-2024-4 iOS 17.4.1 and iPadOS 17.4.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-03-25-2024-3 macOS Ventura 13.6.6 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-03-25-2024-2 macOS Sonoma 14.4.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-03-25-2024-1 Safari 17.4.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Application is Vulnerable to Session Fixation (YOGESH BHANDAGE <yogeshbhandage@...il.com>)

March 28 (1 message)

[FD] Intel PowerGadget 3.6 Local Privilege Escalation (Julian Horoszkiewicz via Fulldisclosure <fulldisclosure@...lists.org>)

44 messages