Full Disclosure: by author

13 messages starting Jun 09 24 and ending Jun 09 24
Date index | Thread index | Author index


Andrey Stoykov

Blind SQL Injection - fengofficev3.11.1.2 Andrey Stoykov (Jun 09)
Business Logic Flaw and Username Enumeration in spa-cartcmsv1.9.0.6 Andrey Stoykov (Jun 15)

Apple Product Security via Fulldisclosure

APPLE-SA-06-10-2024-1 visionOS 1.2 Apple Product Security via Fulldisclosure (Jun 11)

Egidio Romano

Zip Slip meets Artifactory: A Bug Bounty Story Egidio Romano (Jun 23)

InfoSec-DB via Fulldisclosure

SQL Injection Vulnerability in Boelter Blue System Management (version 1.3) InfoSec-DB via Fulldisclosure (Jun 09)

malvuln

Backdoor.Win32.Plugx / Insecure Permissions malvuln (Jun 23)
Trojan.Win32.DarkGateLoader (multi variants) / Arbitrary Code Execution malvuln (Jun 09)

SBA Research Security Advisory via Fulldisclosure

[SBA-ADV-20240321-01] CVE-2024-5676: Paradox IP150 Internet Module Cross-Site Request Forgery SBA Research Security Advisory via Fulldisclosure (Jun 23)

SEC Consult Vulnerability Lab via Fulldisclosure

SEC Consult SA-20240620-0 :: Arbitrary File Upload in edu-sharing (metaVentis GmbH) SEC Consult Vulnerability Lab via Fulldisclosure (Jun 23)
SEC Consult SA-20240624-0 :: Multiple Vulnerabilities allowing complete bypass in Faronics WINSelect (Standard + Enterprise) SEC Consult Vulnerability Lab via Fulldisclosure (Jun 24)
SEC Consult SA-20240606-0 :: Multiple critical vulnerabilities in Kiuwan SAST on-premise (KOP) & cloud/SaaS & Kiuwan Local Analyzer (KLA) SEC Consult Vulnerability Lab via Fulldisclosure (Jun 09)

Security Explorations

Microsoft leak of PlayReady developer / Warbird libs Security Explorations (Jun 21)

Thomas Weber via Fulldisclosure

CyberDanube Security Research 20240604-0 | Multiple Vulnerabilities in utnserver Pro/ProMAX/INU-100 Thomas Weber via Fulldisclosure (Jun 09)