full-disclosure mailing list - 2025/10

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [year] [list]

full-disclosure mailing list - 2025/10

Mon	Tue	Wed	Thu	Fri	Sat	Sun
		¹	² 2	³	⁴	⁵
⁶	⁷ 3	⁸	⁹ 1	¹⁰	¹¹	¹²
¹³	¹⁴ 3	¹⁵	¹⁶ 1	¹⁷	¹⁸	¹⁹ 3
²⁰	²¹ 7	²²	²³	²⁴	²⁵	²⁶ 2
²⁷	²⁸	²⁹ 7	³⁰	³¹

Messages by day:

October 2 (2 messages)

Re: [FD] Full Disclosure: CVE-2025-31200 & CVE-2025-31201 – 0-Click iMessage Chain → Secure Enclave Key Theft, Worm… (josephgoyd via Fulldisclosure <fulldisc…)
Re: [FD] : "Glass Cage" – Zero-Click iMessage → Persistent iOS Compromise + Bricking (CVE-2025-24085 / 24201, CNVD-… (josephgoyd via Fulldisclosure <fulldisc…)

October 7 (3 messages)

Re: [FD] Defense in depth -- the Microsoft way (part 93): SRP/SAFER whitelisting goes black on Windows 11 (Stefan Kanthak via Fulldisclosure <fulldisclosure@se…)
Re: [FD] Full Disclosure: CVE-2025-31200 & CVE-2025-31201 – 0-Click iMessage Chain → Secure Enclave Key Theft, Wormable RCE, Crypto Theft (full@....org)
Re: [FD] Full Disclosure: CVE-2025-31200 & CVE-2025-31201 – 0-Click iMessage Chain → Secure Enclave Key Theft, Worm… (josephgoyd via Fulldisclosure <fulldisc…)

October 9 (1 message)

[FD] CVE-2025-59397 - Open Web Analytics SQL Injection (Seralys Research Team via Fulldisclosure <fulldisclosure@...lists.org>)

October 14 (3 messages)

[FD] [SBA-ADV-20250724-01] CVE-2025-32919: Checkmk Agent Privilege Escalation via Insecure Temporary Files (SBA Research Security Advisory via Fulldisclosure …)
[FD] [SBA-ADV-20250730-01] CVE-2025-39664: Checkmk Path Traversal (SBA Research Security Advisory via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Security Advisory: Multiple High-Severity Vulnerabilities in Suno.com (JWT Leakage, IDOR, DoS) (Christopher Dickinson via Fulldisclosure <fulldisclosure@s…)

October 16 (1 message)

Re: [FD] Security Advisory: Multiple High-Severity Vulnerabilities in Suno.com (JWT Leakage, IDOR, DoS) (Gynvael Coldwind <gynvael@...dwind.pl>)

October 19 (3 messages)

[FD] Urgent Security Vulnerabilities Discovered in Mercku Routers Model M6a (cve@...lvoid.me)
[FD] apis.google.com - Insecure redirect via __lu parameter (exploited in the wild) (Patrick via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] CyberDanube Security Research 20251014-0 | Multiple Vulnerabilities in Phoenix Contact QUINT4 UPS (Thomas Weber | CyberDanube via Fulldisclosure <fulldis…)

October 21 (7 messages)

[FD] Google Firebase hosting suspension / "malware distribution" bypass (Security Explorations <contact@...urity-explorations.com>)
[FD] BSidesSF 2026 CFP still open until October 28th (BSidesSF CFP via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Malvuln - MISP compatible malware vulnerability intelligence feed now live (malvuln <malvuln13@...il.com>)
[FD] [SYSS-2025-015]: Verbatim Keypad Secure (security update v1.0.0.6) - Offline brute-force attack (Matthias Deeg via Fulldisclosure <fulldisclosure@...lists…)
[FD] [SYSS-2025-016]: Verbatim Store 'n' Go Secure Portable SSD (security update v1.0.0.6) - Offline brute-force attack (Matthias Deeg via Fulldisclosure <fulld…)
[FD] [SYSS-2025-017]: Verbatim Store 'n' Go Secure Portable HDD (security update v1.0.0.6) - Offline brute-force attack (Matthias Deeg via Fulldisclosure <fulld…)
[FD] SEC Consult SA-20251021-0 :: Multiple Vulnerabilities in EfficientLab WorkExaminer Professional (CVE-2025-10639, C… (SEC Consult Vulnerability Lab via Fulld…)

October 26 (2 messages)

[FD] [REVIVE-SA-2025-001] Revive Adserver Vulnerability (Matteo Beccati <matteo@...cati.com>)
[FD] [REVIVE-SA-2025-002] Revive Adserver Vulnerability (Matteo Beccati <php@...cati.com>)

October 29 (7 messages)

[FD] Struts2 and Related Framework Array/Collection DoS (Daniel Owens via Fulldisclosure <fulldisclosure@...lists.org>)
Re: [FD] : "Glass Cage" – Zero-Click iMessage → Persistent iOS Compromise + Bricking (CVE-2025-24085 / 24201, CNVD-… ("Noor Christensen" <kchr+fd@...post.org…)
[FD] Current Password not Required When Changing Password - totaljsv5013 (Andrey Stoykov <mwebsec@...il.com>)
[FD] Stored Cross-Site Scripting (XSS) - Layout Functionality - totaljsv5013 (Andrey Stoykov <mwebsec@...il.com>)
[FD] Stored HTML Injection - Layout Functionality - totaljsv5013 (Andrey Stoykov <mwebsec@...il.com>)
[FD] Stored Cross-Site Scripting (XSS) via SVG File Upload - totaljsv5013 (Andrey Stoykov <mwebsec@...il.com>)
[FD] SEC Consult SA-20251027-0 :: Unauthenticated Local File Disclosure in MPDV Mikrolab MIP 2 / FEDRA 2 / HYDRA X Manu… (SEC Consult Vulnerability Lab via Fulld…)

29 messages

Powered by blists - more mailing lists