full-disclosure mailing list - 2024/10

Messages by day:

October 1 (1 message)

• [FD] SEC Consult SA-20240930-0 :: Local Privilege Escalation via MSI Installer in Nitro PDF Pro (CVE-2024-35288) (SEC Consult Vulnerability Lab via Fulldisclos…)

• [FD] Some SIM / USIM card security (and ecosystem) info (Security Explorations <contact@...urity-explorations.com>)

• [FD] APPLE-SA-10-03-2024-1 iOS 18.0.1 and iPadOS 18.0.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)

• [FD] SEC Consult SA-20241009-0 :: Local Privilege Escalation via MSI installer in Palo Alto Networks GlobalProtect (CVE… (SEC Consult Vulnerability Lab via Fulld…)

• [FD] CVE-2024-48939: Unauthorized enabling of API in Paxton Net2 software (Jeroen Hermans via Fulldisclosure <fulldisclosure@...lists.org>)
• [FD] SEC Consult SA-20241015-0 :: Multiple Vulnerabilities in Rittal IoT Interface & CMC III Processing Unit (CVE-2024-… (SEC Consult Vulnerability Lab via Fulld…)

• [FD] Adversary3 updated with 700 malware and C2 panel vulnerabilities (malvuln <malvuln13@...il.com>)
• [FD] [RESEARCH] DTLS 'ClientHello' Race Conditions in WebRTC Implementations (Sandro Gauci via Fulldisclosure <fulldisclosure@...lists.org>)
• [FD] SEC Consult SA-20241024-0 :: Unauthenticated Path Traversal Vulnerability in Lawo AG - vsm LTC Time Sync (vTimeSyn… (SEC Consult Vulnerability Lab via Fulld…)

• [FD] Open Redirect / Reflected XSS - booked-schedulerv2.8.5 (Andrey Stoykov <mwebsec@...il.com>)
• [FD] APPLE-SA-10-28-2024-1 iOS 18.1 and iPadOS 18.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
• [FD] APPLE-SA-10-28-2024-2 iOS 17.7.1 and iPadOS 17.7.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
• [FD] APPLE-SA-10-28-2024-3 macOS Sequoia 15.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
• [FD] APPLE-SA-10-28-2024-4 macOS Sonoma 14.7.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
• [FD] APPLE-SA-10-28-2024-5 macOS Ventura 13.7.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
• [FD] APPLE-SA-10-28-2024-6 watchOS 11.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
• [FD] APPLE-SA-10-28-2024-7 tvOS 18.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
• [FD] APPLE-SA-10-28-2024-8 visionOS 2.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
• [FD] SEC Consult SA-20241023-0 :: Authenticated Remote Code Execution in Multiple Xerox printers (CVE-2024-6333) (SEC Consult Vulnerability Lab via Fulldisclos…)

• [FD] SEC Consult SA-20241030-0 :: Query Filter Injection in Ping Identity PingIDM (formerly known as ForgeRock Identity… (SEC Consult Vulnerability Lab via Fulld…)
• [FD] APPLE-SA-10-29-2024-1 Safari 18.1 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
• [FD] xlibre Xnest security advisory & bugfix releases ("Enrico Weigelt, metux IT consult" <info@...ux.net>)

22 messages

Powered by blists - more mailing lists