Full Disclosure: by thread

• RSS Feed
• About List
• All Lists

Previous period

Next period

108 messages starting May 01 17 and ending May 29 17
Date index | Thread index | Author index

• Re: SyntaxHighlight MediaWiki extension allows injection of arbitrary Pygments options Securify B.V. (May 01)
• Super File Explorer 1.0.1 - Arbitrary File Upload Vulnerability Vulnerability Lab (May 03)
• Icecream v4.53 & Pro - File Permission Privilege Escalation Vulnerability Lab (May 03)
• Hola VPN v1.34 - Privilege Escalation Vulnerability Vulnerability Lab (May 03)
• Joomla com_tag v1.7.6 - (tag) SQL Injection Vulnerability Vulnerability Lab (May 03)
  • Re: Joomla com_tag v1.7.6 - (tag) SQL Injection Vulnerability Brandon Perry (May 04)
• Arachni v1.5-0.5.11 - Persistent Cross Site Vulnerability Vulnerability Lab (May 03)
• Zenario v7.6 - Persistent Cross Site Scripting Vulnerability Vulnerability Lab (May 03)
• Zenario v7.6 - (Delete) Persistent Cross Site Vulnerability Vulnerability Lab (May 03)
• Re: 360 security android app snoops data to China Unicom network via insecure HTTP Daniel Wood (May 04)
• [oss-security]Sourcetree arbitrary command execution 洪宇 (May 04)
• [CVE-2017-6086] Multiple CSRF vulnerabilities in ViMbAdmin version 3.0.15 Sysdream Labs (May 04)
• [CVE-2017-5870] Multiple XSS vulnerabilities in ViMbAdmin Sysdream Labs (May 04)
• DefenseCode ThunderScan SAST Advisory: WordPress Facebook Plugin SQL Injection Vulnerability DefenseCode (May 04)
• DefenseCode ThunderScan SAST Advisory: WordPress Spider Event Calendar Plugin SQL Injection Vulnerability DefenseCode (May 04)
• DefenseCode ThunderScan SAST Advisory: WordPress WebDorado Gallery Plugin SQL Injection Vulnerability DefenseCode (May 04)
• SSD Advisory – Serviio Media Server Multiple Vulnerabilities Maor Shwartz (May 04)
• https://blogs.securiteam.com/index.php/archives/3171 Maor Shwartz (May 04)
• Aleph Research: Google Nexus 9 Cypress SAR Firmware Injection via I2C (CVE-2017-0563) Roee Hay (May 04)
• ES File Explorer android app snoops data to China Unicom network via insecure HTTP seclists (May 04)
• Re: 360 security android app snoops data to China Unicom network via insecure HTTP seclists () email tg (May 04)
  • <Possible follow-ups>
  • Re: 360 security android app snoops data to China Unicom network via insecure HTTP Craig Young (May 07)
    • Re: 360 security android app snoops data to China Unicom network via insecure HTTP seclists (May 09)
• Executable installers are vulnerable^Wdefective^WEVIL (case 49): xampp-win32-7.1.1-0-VC14-installer.exe allows escalation of privilege Stefan Kanthak (May 05)
• CSRF in wordpress plugin clean login allows remote attacker change wordpress login redirect url or logout redirect url to evil address Zeng Wester (May 09)
• Aleph Research: Google Nexus 9 SensorHub Firmware Downgrade Vulnerability (CVE-2017-0582) Roee Hay (May 09)
• CSRF/Stored XSS in MSMC – Redirect After Comment could allow unauthenticated individuals to do almost anything (WordPress plugin) dxw Security (May 09)
• Veritas Netbackup v8.0 - Multiple Vulnerabilities Sven Blumenstein via Fulldisclosure (May 09)
• SEC Consult SA-20170509-0 :: Multiple vulnerabilities in I, Librarian PDF manager SEC Consult Vulnerability Lab (May 09)
• Numerous FreeTDS crashes fixed on master Brandon Perry (May 09)
  • Re: Numerous FreeTDS crashes fixed on master Brandon Perry (May 10)
  • Re: Numerous FreeTDS crashes fixed on master Brandon Perry (May 11)
• SEC Consult SA-20170510-0 :: Insecure Handling Of URI Schemes in Microsoft OneDrive iOS App SEC Consult Vulnerability Lab (May 10)
• [CORE-2017-0001] - SAP SAPCAR Heap Based Buffer Overflow Vulnerability Core Security Advisories Team (May 10)
• [FOXMOLE SA 2017-02-23] Dolibarr ERP & CRM - Multiple Issues FOXMOLE Advisories (May 10)
• QNAP PhotoStation 5.2.4 and MusicStation 4.8.4 Authentication Bypass Kacper Szurek (May 10)
• Gemalto SmartDiag Diagnosis Tool <= v2.5 - Buffer Overflow - SEH Overwrite - Code Execution Majid Alqabandi (May 10)
• Multiple Vulnerabilities in ASUS Routers [CVE-2017-5891 and CVE-2017-5892] Nightwatch Cybersecurity Research (May 10)
• SEC Consult SA-20170511-0 :: Stack-based buffer overflow vulnerability in Guidance Software EnCase Forensic Imager SEC Consult Vulnerability Lab (May 11)
• trashbilling.com and Trashflow 3.0.0 Multiple Issues g00se--- via Fulldisclosure (May 11)
• DefenseCode ThunderScan SAST Advisory: WordPress Tracking Code Manager Plugin Multiple Security Vulnerabilities DefenseCode (May 11)
• DefenseCode WebScanner DAST Advisory: WordPress User Access Manager Plugin Security Vulnerability DefenseCode (May 11)
• DefenseCode ThunderScan SAST Advisory: GOOGLE google-api-php-client Multiple Security Vulnerabilities DefenseCode (May 11)
• CVE-2017-8798 - miniupnpc integer signedness error when parsing a chunked encoded http response oststrom (public) (May 12)
• Multiple crashes in OpenEXR Brandon Perry (May 15)
  • Message not available
    • Message not available
      • Re: [oss-security] Multiple crashes in OpenEXR Brandon Perry (May 22)
• Mimosa Wireless Radios - RCE, DoS, and Local File Disclosure Vulnerabilities Ian Ling via Fulldisclosure (May 15)
  • Ceragon FibeAir IP-10 Hidden User Backdoor Ian Ling via Fulldisclosure (May 19)
• Mailcow v0.14 CSRF Password Reset / Add Admin / Delete Domains hyp3rlinx (May 15)
• APPLE-SA-2017-05-15-1 macOS 10.12.5 Apple Product Security (May 15)
• APPLE-SA-2017-05-15-2 iOS 10.3.2 Apple Product Security (May 15)
• APPLE-SA-2017-05-15-3 tvOS 10.2.1 Apple Product Security (May 15)
• APPLE-SA-2017-05-15-4 watchOS 3.2.1 Apple Product Security (May 15)
• APPLE-SA-2017-05-15-5 iCloud for Windows 6.2.1 Apple Product Security (May 15)
• APPLE-SA-2017-05-15-6 iTunes 12.6.1 Apple Product Security (May 15)
• APPLE-SA-2017-05-15-7 Safari 10.1.1 Apple Product Security (May 15)
• [CVE-2017-7953] Stored XSS in INFOR EAM V11.0 Build 201410 via comment fields Yoroi - CVE report (May 15)
• [CVE-2017-7952] SQL injection in INFOR EAM V11.0 Build 201410 search fields (web/base/..) via filtervalue parameter Yoroi - CVE report (May 15)
• Nextcloud/Owncloud - Reflected Cross Site Scripting in error pages Manuel Mancera (May 15)
• PayPal Inc announces 2 new Bug Bounty Program Domains Vulnerability Lab (May 16)
• Mozilla Firefox v52.02 - (Stack Overflow) DoS Vulnerability Vulnerability Lab (May 16)
• MikroTik RouterBoard v6.38.5 - Denial of Service Vulnerability Vulnerability Lab (May 16)
• Wordpress EELV Newsletter v4.5 - Multiple Vulnerabilities Vulnerability Lab (May 16)
• Stealing Windows Credentials Using Google Chrome DefenseCode (May 16)
• Unpatched Mozilla Firefox v50 - v55 Stack Overflow DoS Vulnerability geeknik via Fulldisclosure (May 16)
• Re: Cross-Site Request Forgery in WordPress Connection Information Summer of Pwnage (May 17)
• SEC Consult SA-20170518-0 :: Multiple critical vulnerabilities in Western Digital TV Media Player SEC Consult Vulnerability Lab (May 18)
• Belden Garrettcom 6K/10K Switches: Auth Bypasses, Memory Corruption David Tomaschik via Fulldisclosure (May 19)
• Re: [oss-security] Dolibarr ERP & CRM - Multiple Issues Stefan Pietsch (May 19)
  • Re: [oss-security] Dolibarr ERP & CRM - Multiple Issues Brandon Perry (May 19)
• [ERPSCAN-17-022] SSRF in PeopleSoft IMServlet ERPScan inc (May 19)
• SSD Advisory – Bitdefender Code Signing organizationName Buffer Overflow Maor Shwartz (May 19)
• WhatsApp (Android) Privacy Issues with Handling of Media Files [CVE-2017-8769] Nightwatch Cybersecurity Research (May 19)
• HP SiteScope 11.32: Unauthenticated JMX Console RCE Harrison Neal (May 19)
• Google I/O 2017 Android App Doesn't Use SSL for Some Content [CVE-2017-9045] Nightwatch Cybersecurity Research (May 19)
• AST-2017-002: Buffer Overrun in PJSIP transaction layer Asterisk Security Team (May 19)
• AST-2017-003: Crash in PJSIP multi-part body parser Asterisk Security Team (May 19)
• AST-2017-004: Memory exhaustion on short SCCP packets Asterisk Security Team (May 19)
• CFP - WPES - 2017 Workshop on Privacy in the Electronic Society Bill Garrison (May 22)
• CVE-2017-9046 Pegasus "winpm-32.exe" v4.72 Mailto: Link Remote Code Execution hyp3rlinx (May 22)
• CVE-2017-9024 Secure Auditor - v3.0 Directory Traversal hyp3rlinx (May 22)
  • Re: CVE-2017-9024 Secure Auditor - v3.0 Directory Traversal hyp3rlinx (May 22)
• CVE-2017-7620 Mantis Bug Tracker 1.3.10 / v2.3.0 CSRF Permalink Injection hyp3rlinx (May 22)
• HP SimplePass Local Privilege Escalation Rehan Ahmed (May 22)
• Out of bound memory access in PJSIP multipart parser crashes Asterisk Sandro Gauci (May 23)
• Asterisk Skinny memory exhaustion vulnerability leads to DoS Sandro Gauci (May 23)
• Heap overflow in CSEQ header parsing affects Asterisk chan_pjsip and PJSIP Sandro Gauci (May 23)
• Wordpress Newsletter Supsystic 1.1.7 - Cross Site Scripting Vulnerability Vulnerability Lab (May 23)
• Simple ASC CMS v1.2 - (Guestbook) Persistent Vulnerability Vulnerability Lab (May 23)
• HTTrack v3.x - Stack Buffer Overflow Vulnerability Vulnerability Lab (May 23)
• SEC Consult SA-20170523-0 :: Arbitrary File Upload & Stored XSS in InvoicePlane SEC Consult Vulnerability Lab (May 23)
• [CORE-2017-0002] - Trend Micro ServerProtect Multiple Vulnerabilities Core Security Advisories Team (May 23)
• [CVE-2017-5868] OpenVPN Access Server : CRLF injection with Session fixation Sydream Labs (May 24)
• CVE-2017-8895 / VTS17-006: UAF in Veritas Backup Exec Remote Agent for Windows Matthew Daley (May 24)
• Sunell IPR54/14AKDN(II)/13 IP Camera - Stored Cross-Site Scripting Advisories (May 24)
• Sunell IPR54/14AKDN(II)/13 IP Camera - Reflected Cross-Site Scripting Advisories (May 24)
• Sunell IPR54/14AKDN(II)/13 IP Camera - Session ID Enumeration Advisories (May 24)
• DefenseCode ThunderScan SAST Advisory: WordPress All In One Schema.org Rich Snippets Plugin Security Vulnerability DefenseCode (May 24)
• DefenseCode ThunderScan SAST Advisory: WordPress Huge-IT Video Gallery Plugin Security Vulnerability DefenseCode (May 24)
• DefenseCode ThunderScan SAST Advisory: WordPress AffiliateWP Plugin Security Vulnerability DefenseCode (May 24)
• Hacktivity 2017 Call For Papers Attila Marosi (May 29)
• Faraday v2.5: Collaborative Penetration Test and Vulnerability Management Platform Francisco Amato (May 29)
• Multiple Local Privilege Escalation Vulnerabilities in Acunetix Web Vulnerability Scanner 11 Florian Bogner (May 29)
• SSD Advisory – Trend Micro Deep Security Multiple Vulnerabilities Maor Shwartz (May 29)
• SSD Advisory – KEMP LoadMaster from XSS Pre Authentication to RCE Maor Shwartz (May 29)
• SSD Advisory – IBM Informix Dynamic Server and Informix Open Admin Tool Multiple Vulnerabilities Maor Shwartz (May 29)
• [CVE-2017-8782]Libming readString denial of service 吴栋 (May 29)
• Executable installers are vulnerable^WEVIL (case 51): escalation of privilege with Microsoft's Azure Recovery Services Agent Stefan Kanthak (May 29)

Previous period

Next period