full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2024/05

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹ 1	²	³ 1	⁴	⁵
⁶ 3	⁷	⁸	⁹ 1	¹⁰	¹¹	¹²
¹³	¹⁴ 21	¹⁵	¹⁶	¹⁷	¹⁸	¹⁹
²⁰	²¹ 4	²²	²³ 2	²⁴	²⁵	²⁶
²⁷	²⁸ 2	²⁹	³⁰ 2	³¹

Messages by day:

May 1 (1 message)

[FD] Microsoft PlayReady white-box cryptography weakness (Security Explorations <contact@...urity-explorations.com>)

May 3 (1 message)

[FD] Live2D Cubism refusing to fix validation issue leading to heap corruption. (PT via Fulldisclosure <fulldisclosure@...lists.org>)

May 6 (3 messages)

[FD] Microsoft PlayReady toolkit - codes release (Security Explorations <contact@...urity-explorations.com>)
[FD] OXAS-ADV-2024-0002: OX App Suite Security Advisory (Martin Heiland via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] secuvera-SA-2024-02: Multiple Persistent Cross-Site Scritping (XSS) flaws in Drupal-Wiki (Simon Bieber via Fulldisclosure <fulldisclosure@...lists.org>)

May 9 (1 message)

[FD] Microsoft PlayReady - complete client identity compromise (Security Explorations <contact@...urity-explorations.com>)

May 14 (21 messages)

[FD] [KIS-2024-04] Cacti <= 1.2.26 (import.php) Remote Code Execution Vulnerability (Egidio Romano <n0b0d13s@...il.com>)
[FD] HNS-2024-07 - HN Security Advisory - Multiple vulnerabilities in RIOT OS (Marco Ivaldi <raptor@...eadbeef.info>)
[FD] APPLE-SA-05-08-2024-1 iTunes 12.13.2 for Windows (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-05-13-2024-1 Safari 17.5 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-05-13-2024-2 iOS 17.5 and iPadOS 17.5 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-05-13-2024-3 iOS 16.7.8 and iPadOS 16.7.8 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-05-13-2024-4 macOS Sonoma 14.5 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-05-13-2024-5 macOS Ventura 13.6.7 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-05-13-2024-6 macOS Monterey 12.7.5 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Research about consistency of CVSSv4 (Julia Wunder <julia.wunder@....de>)
[FD] APPLE-SA-05-13-2024-7 watchOS 10.5 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-05-13-2024-8 tvOS 17.5 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] RansomLord v3 / Anti-Ransomware Exploit Tool Released (malvuln <malvuln13@...il.com>)
Re: [FD] RansomLord v3 / Anti-Ransomware Exploit Tool Released (malvuln <malvuln13@...il.com>)
[FD] Panel.Amadey.d.c C2 / Cross Site Scripting (XSS) (malvuln <malvuln13@...il.com>)
[FD] Panel.SmokeLoader C2 / Cross Site Scripting (XSS) (malvuln <malvuln13@...il.com>)
[FD] Panel.SmokeLoader / Cross Site Request Forgery (CSRF) (malvuln <malvuln13@...il.com>)
Re: [FD] Panel.SmokeLoader / Cross Site Request Forgery (CSRF) (malvuln <malvuln13@...il.com>)
[FD] BACKDOOR.WIN32.ASYNCRAT / Arbitrary Code Execution (malvuln <malvuln13@...il.com>)
[FD] TROJANSPY.WIN64.EMOTET.A / Arbitrary Code Execution (malvuln <malvuln13@...il.com>)
[FD] SEC Consult SA-20240513-0 :: Tolerating Self-Signed Certificates in SAP® Cloud Connector (SEC Consult Vulnerability Lab via Fulldisclosure <fulldisclosur…)

May 21 (4 messages)

[FD] CVE-2024-34058: Nethserver 7 & 8 stored cross-site scripting (XSS) in WebTop package (Andrea Intilangelo <andrea@...ilangelo.it>)
[FD] asterisk release 18.23.1 (Asterisk Development Team via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] asterisk release 21.3.1 (Asterisk Development Team via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] asterisk release 20.8.1 (Asterisk Development Team via Fulldisclosure <fulldisclosure@...lists.org>)

May 23 (2 messages)

[FD] [CFP] Security BSides Ljubljana 0x7E8 | September 27, 2024 (Andraz Sraka <a@...bix.org>)
[FD] SEC Consult SA-20240522-0 :: Broken access control & API Information Exposure in 4BRO App (SEC Consult Vulnerability Lab via Fulldisclosure <fulldisclosu…)

May 28 (2 messages)

[FD] SEC Consult SA-20240524-0 :: Exposed Serial Shell on multiple PLCs in Siemens CP-XXXX Series (SEC Consult Vulnerability Lab via Fulldisclosure <fulldiscl…)
[FD] SEC Consult SA-20240527-0 :: Multiple vulnerabilities in HAWKI didactic interface (SEC Consult Vulnerability Lab via Fulldisclosure <fulldisclosure@...li…)

May 30 (2 messages)

[FD] HNS-2024-06 - HN Security Advisory - Multiple vulnerabilities in Eclipse ThreadX (Marco Ivaldi <raptor@...eadbeef.info>)
[FD] CyberDanube Security Research 20240528-0 | Multiple Vulnerabilities in ORing IAP-420 (Thomas Weber via Fulldisclosure <fulldisclosure@...lists.org>)

37 messages