full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [year] [list]

full-disclosure mailing list - 2025/06

Mon	Tue	Wed	Thu	Fri	Sat	Sun
						¹
²	³ 14	⁴	⁵	⁶	⁷	⁸
⁹	¹⁰ 2	¹¹	¹²	¹³	¹⁴	¹⁵
¹⁶	¹⁷	¹⁸ 4	¹⁹	²⁰	²¹	²²
²³	²⁴	²⁵	²⁶	²⁷	²⁸	²⁹
³⁰

Messages by day:

June 3 (14 messages)

[FD] Youpot honeypot (Jacek Lipkowski via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Exploit CVE-2019-9978: Remote Code Execution in Social Warfare WordPress Plugin (<= 3.5.2) (Housma mardini <housma@...il.com>)
[FD] CVE-2024-47081: Netrc credential leak in PSF requests library (Juho Forsén via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Multiple Vulnerabilities in SAP GuiXT Scripting (Michał Majchrowicz via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Stored XSS in "Description" Functionality - cubecartv6.5.9 (Andrey Stoykov <mwebsec@...il.com>)
[FD] Authenticated File Upload to RCE - adaptcmsv3.0.3 (Andrey Stoykov <mwebsec@...il.com>)
[FD] Stored XSS "Send Message" Functionality - adaptcmsv3.0.3 (Andrey Stoykov <mwebsec@...il.com>)
[FD] IDOR "Change Password" Functionality - adaptcmsv3.0.3 (Andrey Stoykov <mwebsec@...il.com>)
[FD] Stored XSS via File Upload - adaptcmsv3.0.3 (Andrey Stoykov <mwebsec@...il.com>)
[FD] Local information disclosure in apport and systemd-coredump (Qualys Security Advisory via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] ERPNext v15.53.1 Stored XSS in user_image Field Allows Script Execution via Injected Image Path (Ron E <ronaldjedgerson@...il.com>)
[FD] ERPNext v15.53.1 Stored XSS in bio Field Allows Arbitrary Script Execution in Profile Page (Ron E <ronaldjedgerson@...il.com>)
[FD] CVE-2025-45542: Time-Based Blind SQL Injection in CloudClassroom PHP Project v1.0 (Sanjay Singh <sanjay70023@...il.com>)
[FD] Defense in depth -- the Microsoft way (part 89): user group policies don't deserve tamper protection ("Stefan Kanthak" <stefan.kanthak@...go.de>)

June 10 (2 messages)

[FD] Full Disclosure: CVE-2025-31200 & CVE-2025-31201 – 0-Click iMessage Chain → Secure Enclave Key Theft, Wormable … (josephgoyd via Fulldisclosure <fulldisc…)
[FD] SEC Consult SA-20250604-0 :: Local Privilege Escalation and Default Credentials in INDAMED - MEDICAL OFFICE (Medic… (SEC Consult Vulnerability Lab via Fulld…)

June 18 (4 messages)

[FD] Call for Applications: ERCIM STM WG 2025 Award for the Best Ph.D. Thesis on Security and Trust Management (July 31, 2025) (0610648533 <alcaraz@....uma.es>)
[FD] SEC Consult SA-20250611-0 :: Undocumented Root Shell Access on SIMCom SIM7600G Modem (SEC Consult Vulnerability Lab via Fulldisclosure <fulldisclosure@se…)
[FD] SEC Consult SA-20250612-0 :: Reflected Cross-Site Scripting in ONLYOFFICE Docs (DocumentServer) (SEC Consult Vulnerability Lab via Fulldisclosure <fulldi…)
[FD] : "Glass Cage" – Zero-Click iMessage → Persistent iOS Compromise + Bricking (CVE-2025-24085 / 24201, CNVD-2025-… (josephgoyd via Fulldisclosure <fulldisc…)

20 messages