full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2024/04

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹	²	³ 1	⁴	⁵ 15	⁶	⁷
⁸	⁹	¹⁰	¹¹ 6	¹²	¹³	¹⁴ 2
¹⁵	¹⁶	¹⁷	¹⁸	¹⁹ 3	²⁰	²¹
²²	²³	²⁴ 2	²⁵	²⁶	²⁷	²⁸
²⁹	³⁰

Messages by day:

April 3 (1 message)

[FD] Microsoft PlayReady deficiencies / content key sniffing on Windows (Security Explorations <contact@...urity-explorations.com>)

April 5 (15 messages)

[FD] SCHUTZWERK-SA-2023-003: Authentication Bypass in Visual Planning REST API (Lennert Preuth via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] SCHUTZWERK-SA-2023-004: Authentication Bypass via Password Reset Functionality in Visual Planning (Lennert Preuth via Fulldisclosure <fulldisclosure@...li…)
[FD] SCHUTZWERK-SA-2023-006: Arbitrary File Read via XML External Entities in Visual Planning (Lennert Preuth via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] CVE-2024-30920: XSS Vulnerability in DerbyNet v9.0 via render-document.php (Valentin Lobstein via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] CVE-2024-30921: Unauthenticated XSS Vulnerability in DerbyNet v9.0 via photo.php (Valentin Lobstein via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] CVE-2024-30922: SQL Injection in DerbyNet v9.0 via print/render/award.inc (Valentin Lobstein via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] CVE-2024-30923: SQL Injection in DerbyNet v9.0 via print/render/racer.inc (Valentin Lobstein via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] CVE-2024-30924: XSS Vulnerability in DerbyNet v9.0 via checkin.php (Valentin Lobstein via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] CVE-2024-30925: XSS Vulnerability in DerbyNet v9.0 via photo-thumbs.php (Valentin Lobstein via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] CVE-2024-30926: XSS Vulnerability in DerbyNet v9.0 via ./inc/kiosks.inc (Valentin Lobstein via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] CVE-2024-30927: XSS Vulnerability in DerbyNet v9.0 via racer-results.php (Valentin Lobstein via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] CVE-2024-30928: SQL Injection Vulnerability in DerbyNet v9.0 via 'classids' Parameter (Valentin Lobstein via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] CVE-2024-30929: XSS Vulnerability in DerbyNet v9.0 via 'back' Parameter in playlist.php (Valentin Lobstein via Fulldisclosure <fulldisclosure@...lists.org…)
[FD] Backdoor.Win32.Agent.ju (PSYRAT) / Authentication Bypass RCE (malvuln <malvuln13@...il.com>)
[FD] [CFP] IEEE CSR Workshop on Cyber Forensics& Advanced Threat Investigations in Emerging Technologies 2024 (Andrew Zayine <scholarshipchile@...il.com>)

April 11 (6 messages)

[FD] CVE-2023-27195: Broken Access Control - Registration Code in TM4Web v22.2.0 (Clément Cruchet <clementcruchet@...il.com>)
[FD] Trojan.Win32.Razy.abc / Insecure Permissions (In memory IPC) (malvuln <malvuln13@...il.com>)
[FD] OXAS-ADV-2024-0001: OX App Suite Security Advisory (Martin Heiland via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Multiple Issues in concretecmsv9.2.7 (Andrey Stoykov <mwebsec@...il.com>)
[FD] [KIS-2024-02] Invision Community <= 4.7.15 (store.php) SQL Injection Vulnerability (Egidio Romano <n0b0d13s@...il.com>)
[FD] [KIS-2024-03] Invision Community <= 4.7.16 (toolbar.php) Remote Code Execution Vulnerability (Egidio Romano <n0b0d13s@...il.com>)

April 14 (2 messages)

[FD] SEC Consult SA-20240411-0 :: Database Passwords in Server Response in Amazon AWS Glue (SEC Consult Vulnerability Lab via Fulldisclosure <fulldisclosure@s…)
[FD] CVE-2024-31705 (V3locidad <v3locidad@...ocidad.com>)

April 19 (3 messages)

[FD] MindManager 23 - full disclosure (Pawel Karwowski via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] SEC Consult SA-20240418-0 :: Broken authorization in Dreamehome app (SEC Consult Vulnerability Lab via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] BACKDOOR.WIN32.DUMADOR.C / Remote Stack Buffer Overflow (SEH) (malvuln <malvuln13@...il.com>)

April 24 (2 messages)

[FD] Response to CVE-2023-26756 - Revive Adserver (Matteo Beccati <php@...cati.com>)
[FD] Defense in depth -- the Microsoft way (part 87): shipping more rotten software to billions of unsuspecting custome… ("Stefan Kanthak" <stefan.kanthak@...go.…)

29 messages