Full Disclosure: by author
RSS Feed
About List
All Lists
Previous period
59 messages
starting Oct 18 19 and
ending Oct 03 19
Date index |
Thread index |
Author index
Aaron Bishop
WiKID 2FA Enterprise Server Multiple Issues Aaron Bishop (Oct 18)
Andrew Klaus
Fortinet FortiSIEM - Improper Certificate Validation Andrew Klaus (Oct 01)
Anthony Cicalla
Metasploit Pro Includes a 4 year old Java Runtime with 223 vulnerabilities 53 being critical Anthony Cicalla (Oct 01)
Apple Product Security via Fulldisclosure
APPLE-SA-2019-10-07-4 iCloud for Windows 7.14 Apple Product Security via Fulldisclosure (Oct 08)
APPLE-SA-2019-10-29-3 tvOS 13.2 Apple Product Security via Fulldisclosure (Oct 31)
APPLE-SA-2019-10-11-1 Swift 5.1.1 for Ubuntu Apple Product Security via Fulldisclosure (Oct 15)
APPLE-SA-2019-10-29-8 Additional information for APPLE-SA-2019-9-26-5 watchOS 6 Apple Product Security via Fulldisclosure (Oct 31)
APPLE-SA-2019-10-07-2 iTunes for Windows 12.10.1 Apple Product Security via Fulldisclosure (Oct 08)
APPLE-SA-2019-10-29-1 iOS 13.2 and iPadOS 13.2 Apple Product Security via Fulldisclosure (Oct 31)
APPLE-SA-2019-10-07-1 macOS Catalina 10.15 Apple Product Security via Fulldisclosure (Oct 08)
APPLE-SA-2019-10-29-5 Safari 13.0.3 Apple Product Security via Fulldisclosure (Oct 31)
APPLE-SA-2019-9-27-1 iOS 13.1.1 and iPadOS 13.1.1 Apple Product Security via Fulldisclosure (Oct 01)
APPLE-SA-2019-10-29-4 watchOS 6.1 Apple Product Security via Fulldisclosure (Oct 31)
APPLE-SA-2019-10-07-3 iCloud for Windows 10.7 Apple Product Security via Fulldisclosure (Oct 08)
APPLE-SA-2019-10-29-2 macOS Catalina 10.15.1, Security Update 2019-001 Mojave, Security Update 2019-006 High Sierra Apple Product Security via Fulldisclosure (Oct 31)
APPLE-SA-2019-10-29-9 Additional information for APPLE-SA-2019-9-26-6 tvOS 13 Apple Product Security via Fulldisclosure (Oct 31)
APPLE-SA-2019-10-29-11 Additional information for APPLE-SA-2019-9-26-8 iOS 13.1 and iPadOS 13.1 Apple Product Security via Fulldisclosure (Oct 31)
APPLE-SA-2019-10-29-7 Additional information for APPLE-SA-2019-9-26-4 Safari 13 Apple Product Security via Fulldisclosure (Oct 31)
APPLE-SA-2019-10-29-6 Additional information for APPLE-SA-2019-9-26-3 iOS 13 Apple Product Security via Fulldisclosure (Oct 31)
APPLE-SA-2019-10-29-10 Additional information for APPLE-SA-2019-10-07-1 macOS Catalina 10.15 Apple Product Security via Fulldisclosure (Oct 31)
BSidesSF CFP via Fulldisclosure
[CFP] BSides San Francisco – February 2020 BSidesSF CFP via Fulldisclosure (Oct 15)
CERT
Information leakage found in FRITZ!OS 6.83 & 6.80 (AVM DSL Router Fritz!Box 7490) [DTC-A-20170323-001] CERT (Oct 18)
Claudio Andre
Bsides Lisbon 2019 Trainings Claudio Andre (Oct 03)
Daniel Bishtawi
Multiple Cross-site Scripting Vulnerabilities in Openfire 4.4.1 Daniel Bishtawi (Oct 11)
Egidio Romano
[KIS-2019-02] vBulletin <= 5.5.4 (updateAvatar) Remote Code Execution Vulnerability Egidio Romano (Oct 07)
[KIS-2019-03] SugarCRM <= 9.0.1 Multiple Reflected Cross-Site Scripting Vulnerabilities Egidio Romano (Oct 10)
[KIS-2019-06] SugarCRM <= 9.0.1 Multiple Path Traversal Vulnerabilities Egidio Romano (Oct 10)
[KIS-2019-05] SugarCRM <= 9.0.1 Multiple Broken Access Control Vulnerabilities Egidio Romano (Oct 10)
[KIS-2019-09] SugarCRM <= 9.0.1 Multiple Phar Deserialization Vulnerabilities Egidio Romano (Oct 10)
[KIS-2019-04] SugarCRM <= 9.0.1 Multiple SQL Injection Vulnerabilities Egidio Romano (Oct 10)
[KIS-2019-07] SugarCRM <= 9.0.1 Multiple PHP Code Injection Vulnerabilities Egidio Romano (Oct 10)
vBulletin <= 5.5.4 Two SQL Injection Vulnerabilities Egidio Romano (Oct 07)
[KIS-2019-08] SugarCRM <= 9.0.1 Multiple PHP Object Injection Vulnerabilities Egidio Romano (Oct 10)
Fulldisclosure Team
Duplicator Pro <= 1.3.14: Local Information Disclosure Fulldisclosure Team (Oct 01)
hyp3rlinx
Trend Micro Anti-Threat Toolkit (ATTK) <= v1.62.0.1218 Remote Code Execution 0day CVE-2019-9491 hyp3rlinx (Oct 22)
Ismail Doe
Reflected XSS via Broken Link Checker v.1.11.8 WordPress Plugin Ismail Doe (Oct 15)
Jens Müller via Fulldisclosure
PDFex: Security weakness in PDF encryption Jens Müller via Fulldisclosure (Oct 01)
Kevin Kotas via Fulldisclosure
CA20191015-01: Security Notice for CA Performance Management Kevin Kotas via Fulldisclosure (Oct 18)
CA20190930-01: Security Notice for CA Network Flow Analysis Kevin Kotas via Fulldisclosure (Oct 03)
Luis Rios
CVE-2019-17128: OmniCenter 12.1.1 – Unauthenticated SQL Injection Luis Rios (Oct 08)
Marcin Kozlowski
CVE 2019-2215 Android Binder Use After Free Marcin Kozlowski (Oct 18)
Marco Ivaldi
CVE-2019-3010 - Local privilege escalation on Solaris 11.x via xscreensaver Marco Ivaldi (Oct 18)
Martin Heiland via Fulldisclosure
Open-Xchange Security Advisory 2019-10-09 Martin Heiland via Fulldisclosure (Oct 11)
Matthias Deeg
[SYSS-2019-035]: Microsoft Surface Mouse - Insufficient Protection of Code (Firmware) and Data (Cryptographic Key) Matthias Deeg (Oct 11)
[SYSS-2019-033]: Microsoft Designer Bluetooth Desktop - Insufficient Protection of Code (Firmware) and Data (Cryptographic Key) Matthias Deeg (Oct 11)
[SYSS-2019-034]: Microsoft Surface Keyboard - Insufficient Protection of Code (Firmware) and Data (Cryptographic Key) Matthias Deeg (Oct 11)
omarbv
RootedCON 2020 Call For Papers is open! omarbv (Oct 31)
ProSec Security Team
RENPHO iOS missing encryption and integrity check ProSec Security Team (Oct 08)
Tomedo Server - Weak encryption mech. ProSec Security Team (Oct 15)
RedTeam Pentesting GmbH
[RT-SA-2019-013] Unsafe Storage of Credentials in Carel pCOWeb HVAC RedTeam Pentesting GmbH (Oct 31)
[RT-SA-2019-014] Unauthenticated Access to Modbus Interface in Carel pCOWeb HVAC RedTeam Pentesting GmbH (Oct 31)
SEC Consult Vulnerability Lab
SEC Consult SA-20191029-0 :: Authentication Bypass in eIDAS-Node (European #eGovernment cross-border authentication) SEC Consult Vulnerability Lab (Oct 31)
SEC Consult SA-20191014-0 :: Reflected XSS vulnerability in OpenProject SEC Consult Vulnerability Lab (Oct 14)
Security Researcher
Gift Certificates and More: A complete lack of security Security Researcher (Oct 22)
Security Team Appsecco via Fulldisclosure
Sangoma SBC local sudo user creation vulnerability without authentication - CVE-2019-12147 Security Team Appsecco via Fulldisclosure (Oct 18)
Sangoma SBC bypass authentication via argument injection - CVE-2019-12148 Security Team Appsecco via Fulldisclosure (Oct 18)
Thegirl Wholearnedtocode
reinersct: receiving annual awards for trivial insecurity Thegirl Wholearnedtocode (Oct 15)
TIMMERMAN, Jens
Password disclosure in the web interface on socomec DIRIS A-40 devices before 48250501 TIMMERMAN, Jens (Oct 08)
Wolfgang
[AIT-SA-20190930-01] CVE-2019-15741: Privilege Escalation via Logrotate in Gitlab Omnibus Wolfgang (Oct 03)