full-disclosure mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev month] [next month>] [year] [list]

full-disclosure mailing list - 2025/12

Mon	Tue	Wed	Thu	Fri	Sat	Sun
¹	² 4	³	⁴	⁵ 1	⁶	⁷
⁸	⁹	¹⁰	¹¹	¹²	¹³	¹⁴
¹⁵	¹⁶ 18	¹⁷	¹⁸ 4	¹⁹	²⁰	²¹
²²	²³ 3	²⁴	²⁵	²⁶	²⁷	²⁸ 7
²⁹	³⁰	³¹

Messages by day:

December 2 (4 messages)

[FD] Missing Critical Security Headers in Legality WHISTLEBLOWING (Aerith Gainsborough via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] [REVIVE-SA-2025-005] Revive Adserver Vulnerability (Matteo Beccati <php@...cati.com>)
[FD] 2 vulnerabilities in Egovframe (Pierre Kim <pierre.kim.sec@...il.com>)
[FD] 8 vulnerabilities in AudioCodes Fax/IVR Appliance (Pierre Kim <pierre.kim.sec@...il.com>)

December 5 (1 message)

[FD] Multiple Security Misconfigurations and Customer Enumeration Exposure in Convercent Whistleblowing Platform (EQS G… (Yuffie Kisaragi via Fulldisclosure <ful…)

December 16 (18 messages)

[FD] [SYSS-2025-060]: HP computer UEFI boot protection bypass (Micha Borrmann via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-12-12-2025-1 iOS 26.2 and iPadOS 26.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-12-12-2025-2 iOS 18.7.3 and iPadOS 18.7.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-12-12-2025-3 macOS Tahoe 26.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-12-12-2025-4 macOS Sequoia 15.7.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-12-12-2025-5 macOS Sonoma 14.8.3 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-12-12-2025-6 tvOS 26.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-12-12-2025-7 watchOS 26.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-12-12-2025-8 visionOS 26.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] APPLE-SA-12-12-2025-9 Safari 26.2 (Apple Product Security via Fulldisclosure <fulldisclosure@...lists.org>)
[FD] Multiple Security Misconfigurations and Customer Enumeration Exposure in Convercent Whistleblowing Platform (EQS G… (Yuffie Kisaragi via Fulldisclosure <ful…)
[FD] nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Attributes functionality (Onur Tezcan via Fulldisclosure <fulldisclosure@...lists.o…)
[FD] nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Blog posts functionality in the Content Man… (Onur Tezcan via Fulldisclosure <fulldis…)
[FD] nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) via the Currencies functionality. (Onur Tezcan via Fulldisclosure <fulldisclosure@...lists.…)
[FD] nopCommerce 4.90.0 is vulnerable to Cross Site Scripting (XSS) in the product management functionality (Onur Tezcan via Fulldisclosure <fulldisclosure@sec…)
[FD] nopCommerce 4.90.0 is vulnerable to Cross Site Request Forgery (CSRF) via the Schedule Tasks functionality (Onur Tezcan via Fulldisclosure <fulldisclosure…)
[FD] [KIS-2025-07] Bitrix24 <= 25.100.300 (Translate Module) Remote Code Execution Vulnerability (Egidio Romano <n0b0d13s@...il.com>)
[FD] [KIS-2025-08] 1C-Bitrix <= 25.100.500 (Translate Module) Remote Code Execution Vulnerability (Egidio Romano <n0b0d13s@...il.com>)

December 18 (4 messages)

[FD] [CFP] Security BSidesLjubljana 0x7EA | March 13, 2026 (Andraz Sraka <a@...bix.org>)
[FD] Raydium CP Swap: Unchecked Account Allows Creator Fee Hijacking (LRKTBEYK LRKTBEYK <llrktbeyk@...il.com>)
[FD] [KIS-2025-09] Control Web Panel <= 0.9.8.1208 (admin/index.php) OS Command Injection Vulnerability (Egidio Romano <n0b0d13s@...il.com>)
[FD] CyberDanube Security Research 20251215-0 | Multiple Vulnerabilities in Phoenix Contact FL Switch Series (Thomas Weber | CyberDanube via Fulldisclosure <f…)

December 23 (3 messages)

[FD] HEUR.Backdoor.Win32.Poison.gen / Arbitrary Code Execution / MVID-2025-0701 (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.ControlTotal.t / Insecure Credential Storage / MVID-2025-0702 (malvuln <malvuln13@...il.com>)
[FD] Defense in depth -- the Microsoft way (part 94): SAFER (SRPv1 and AppLocker alias SRPv2) bypass for dummies (Stefan Kanthak via Fulldisclosure <fulldisclo…)

December 28 (7 messages)

[FD] Backdoor.Win32.Netbus.170 / Insecure Credential Storage / MVID-2025-0703 (malvuln <malvuln13@...il.com>)
[FD] Backdoor.Win32.Poison.jh / Insecure Permissions (malvuln <malvuln13@...il.com>)
[FD] [KIS-2025-10] PKP-WAL <= 3.5.0-1 (Institution Collector) SQL Injection Vulnerability (Egidio Romano <n0b0d13s@...il.com>)
[FD] [KIS-2025-11] Open Journal Systems <= 3.5.0-1 (NativeXmlIssueGalleyFilter.php) Path Traversal Vulnerability (Egidio Romano <n0b0d13s@...il.com>)
[FD] [KIS-2025-12] PKP-WAL <= 3.5.0-1 (baseColour) LESS Code Injection Vulnerability (Egidio Romano <n0b0d13s@...il.com>)
[FD] [KIS-2025-13] PKP-WAL <= 3.5.0-3 (X-Forwarded-Host) LESS Code Injection Vulnerability (Egidio Romano <n0b0d13s@...il.com>)
[FD] [KIS-2025-14] PKP-WAL <= 3.5.0-1 Login Cross-Site Request Forgery Vulnerability (Egidio Romano <n0b0d13s@...il.com>)

37 messages