full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2025/07

Mon	Tue	Wed	Thu	Fri	Sat	Sun
	¹ 1	²	³	⁴	⁵	⁶
⁷	⁸ 4	⁹ 7	¹⁰ 1	¹¹ 1	¹²	¹³ 1
¹⁴	¹⁵	¹⁶	¹⁷	¹⁸	¹⁹	²⁰ 1
²¹	²²	²³	²⁴	²⁵	²⁶	²⁷
²⁸ 4	²⁹ 1	³⁰ 20	³¹

Messages by day:

July 1 (1 message)

[FD] iOS Activation Flaw Enables Pre-User Device Compromise and Identity Exposure (iOS 18.5) (josephgoyd via Fulldisclosure <fulldisclosure@...lists.org>)

July 8 (4 messages)

[FD] Session Fixation - bluditv3.16.2 (Andrey Stoykov <mwebsec@...il.com>)
[FD] Stored XSS "Add New Content" Functionality - bluditv3.16.2 (Andrey Stoykov <mwebsec@...il.com>)
[FD] XSS via SVG File Uploa - bluditv3.16.2 (Andrey Stoykov <mwebsec@...il.com>)
[FD] Directory Traversal "Site Title" - bluditv3.16.2 (Andrey Stoykov <mwebsec@...il.com>)

July 9 (7 messages)

[FD] eSIM security research (GSMA eUICC compromise and certificate theft) (Security Explorations <contact@...urity-explorations.com>)
[FD] KL-001-2025-006: Schneider Electric EcoStruxure IT Data Center Expert XML External Entities Injection (KoreLogic Disclosures via Fulldisclosure <fulldiscl…)
[FD] KL-001-2025-007: Schneider Electric EcoStruxure IT Data Center Expert Unauthenticated Remote Code Execution (KoreLogic Disclosures via Fulldisclosure <ful…)
[FD] KL-001-2025-008: Schneider Electric EcoStruxure IT Data Center Expert Root Password Discovery (KoreLogic Disclosures via Fulldisclosure <fulldisclosure@se…)
[FD] KL-001-2025-009: Schneider Electric EcoStruxure IT Data Center Expert Remote Command Execution (KoreLogic Disclosures via Fulldisclosure <fulldisclosure@s…)
[FD] KL-001-2025-010: Schneider Electric EcoStruxure IT Data Center Expert Privilege Escalation (KoreLogic Disclosures via Fulldisclosure <fulldisclosure@...li…)
[FD] KL-001-2025-011: Schneider Electric EcoStruxure IT Data Center Expert Unauthenticated Server-Side Request Forgery (KoreLogic Disclosures via Fulldisclosur…)

July 10 (1 message)

[FD] Tiki Wiki CMS Groupware <= 28.3 Two Server-Side Template Injection Vulnerabilities (Egidio Romano <n0b0d13s@...il.com>)

July 11 (1 message)

[FD] SAP NetWeaver S/4HANA - ABAP Code Execution via Internal Function (Office nullFaktor GmbH <office@...lfaktor.com>)

July 13 (1 message)

[FD] Missing Critical Security Headers in OpenBlow (Tifa Lockhart via Fulldisclosure <fulldisclosure@...lists.org>)

July 20 (1 message)

[FD] Multiple vulnerabilities in the web management interface of Intelbras routers (Gabriel Augusto Vaz de Lima via Fulldisclosure <fulldisclosure@...lists.or…)

July 28 (4 messages)

[FD] KL-001-2025-012: Xorux XorMon-NG Read Only User Export Device Configuration Exposing Sensitive Information (KoreLogic Disclosures via Fulldisclosure <full…)
[FD] KL-001-2025-013: Xorux XorMon-NG Web Application Privilege Escalation to Administrator (KoreLogic Disclosures via Fulldisclosure <fulldisclosure@...lists.…)
[FD] KL-001-2025-014: Xorux LPAR2RRD Read Only User Denial of Service (KoreLogic Disclosures via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] KL-001-2025-015: Xorux LPAR2RRD Read Only User Log Download Exposing Sensitive Information (KoreLogic Disclosures via Fulldisclosure <fulldisclosure@...li…)

July 29 (1 message)

[FD] KL-001-2025-016: Xorux LPAR2RRD File Upload Directory Traversal (KoreLogic Disclosures via Fulldisclosure <fulldisclosure@...lists.org>)

July 30 (20 messages)

[FD] AK-Nord USB-Server-LXL privilege escalation and code execution (CVE-2025-52361) (Marcus Krueppel <Marcus.Krueppel@....group>)
[FD] [KIS-2025-04] SugarCRM <= 14.0.0 (css/preview) LESS Code Injection Vulnerability (Egidio Romano <n0b0d13s@...il.com>)
[FD] Stored XSS "Edit Header" Functionality - seotoasterv2.5.0 (Andrey Stoykov <mwebsec@...il.com>)
[FD] Open Redirect "Login Page" Functionality - seotoasterv2.5.0 (Andrey Stoykov <mwebsec@...il.com>)
[FD] Stored XSS "Create Page" Functionality - seotoasterv2.5.0 (Andrey Stoykov <mwebsec@...il.com>)
[FD] Stored XSS "Edit General Info" Functionality - seotoasterv2.5.0 (Andrey Stoykov <mwebsec@...il.com>)
Re: [FD] Multiple vulnerabilities in the web management interface of Intelbras routers (Palula Brasil <palulabrasil@...il.com>)
[FD] Invision Community <= 5.0.7 (oauth/callback) Reflected Cross-Site Scripting Vulnerability (Egidio Romano <n0b0d13s@...il.com>)
[FD] CVE‑2025‑52187 – Stored XSS in School Management System (PHP/MySQL) (Sanjay Singh <sanjay70023@...il.com>)
[FD] Invision Community <= 4.7.20 (calendar/view.php) SQL Injection Vulnerability (Egidio Romano <n0b0d13s@...il.com>)
[FD] APPLE-SA-07-29-2025-1 iOS 18.6 and iPadOS 18.6 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-07-29-2025-2 iPadOS 17.7.9 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-07-29-2025-3 macOS Sequoia 15.6 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-07-29-2025-4 macOS Sonoma 14.7.7 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-07-29-2025-5 macOS Ventura 13.7.7 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-07-29-2025-6 watchOS 11.6 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-07-29-2025-7 tvOS 18.6 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-07-29-2025-8 visionOS 2.6 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] St. Pölten UAS 20250721-0 | Multiple Vulnerabilities in Helmholz Industrial Router REX100 / mbNET.mini (Thomas Weber | CyberDanube via Fulldisclosure <fu…)
[FD] Defense in depth -- the Microsoft way (part 90): "Digital Signature" property sheet missing without "Read Extended… (Stefan Kanthak via Fulldisclosure <full…)

41 messages