full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [year] [list]

full-disclosure mailing list - 2025/01

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹	²	³	⁴	⁵
⁶	⁷	⁸	⁹	¹⁰	¹¹	¹²
¹³	¹⁴	¹⁵	¹⁶ 8	¹⁷	¹⁸	¹⁹
²⁰	²¹	²²	²³	²⁴	²⁵	²⁶
²⁷	²⁸ 13	²⁹	³⁰ 3	³¹

Messages by day:

January 16 (8 messages)

[FD] [asterisk-dev] Asterisk Security Release 20.11.1 (Asterisk Development Team <asteriskteam@...ium.com>)
[FD] [asterisk-dev] Asterisk Security Release 21.6.1 (Asterisk Development Team <asteriskteam@...ium.com>)
[FD] Asterisk Security Release 18.26.1 (Asterisk Development Team via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Asterisk Security Release 22.1.1 (Asterisk Development Team via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Certified Asterisk Security Release certified-18.9-cert13 (Asterisk Development Team via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Certified Asterisk Security Release certified-20.7-cert4 (Asterisk Development Team via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] CyberDanube Security Research 20250107-0 | Multiple Vulnerabilities in ABB AC500v3 (Thomas Weber | CyberDanube via Fulldisclosure <fulldisclosure@...list…)
[FD] CVE-2024-48463 (Rodolfo Tavares via Fulldisclosure <fulldisclosure@...lists.org>)

January 28 (13 messages)

[FD] Reflected XSS - atutorv2.2.4 (Andrey Stoykov <mwebsec@...il.com>)
[FD] Host Header Injection - atutorv2.2.4 (Andrey Stoykov <mwebsec@...il.com>)
[FD] SEC Consult SA-20250127-0 :: Weak Password Hashing Algorithms in Wind River Software VxWorks RTOS (SEC Consult Vulnerability Lab via Fulldisclosure <full…)
[FD] AutoLib Software Systems OPAC Version.20.10 | Exposure of Sensitive Information | CVE-2024-48310 (Shaikh Shahnawaz <sshahnawaz99910@...il.com>)
[FD] APPLE-SA-01-27-2025-1 visionOS 2.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-01-27-2025-2 iOS 18.3 and iPadOS 18.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-01-27-2025-3 iPadOS 17.7.4 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-01-27-2025-4 macOS Sequoia 15.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-01-27-2025-5 macOS Sonoma 14.7.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-01-27-2025-6 macOS Ventura 13.7.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-01-27-2025-7 watchOS 11.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-01-27-2025-8 tvOS 18.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-01-27-2025-9 Safari 18.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)

January 30 (3 messages)

[FD] Text injection on https://www.google.com/sorry/index via ?q parameter (no XSS) (David Fifield <david@...software.com>)
[FD] Deepseek writes textbook insecure code in 2025-01-28 (Georgi Guninski <gguninski@...il.com>)
[FD] Quorum onQ OS - 6.0.0.5.2064 | Reflected Cross Site Scripting (XSS) | CVE-2024-44449 (Shaikh Shahnawaz <sshahnawaz99910@...il.com>)

24 messages