Full Disclosure: by author

26 messages starting Mar 28 26 and ending Mar 12 26
Date index | Thread index | Author index


Abhinav Agarwal

CVE-2026-33150, CVE-2026-33179: libfuse io_uring memory safety vulnerabilities (use-after-free, NULL deref) Abhinav Agarwal (Mar 28)

Aki Tuomi

Dovecot Security Advisory OXDC-2026-0001 Aki Tuomi (Mar 28)

Apple Product Security via Fulldisclosure

APPLE-SA-03-24-2026-5 macOS Sonoma 14.8.5 Apple Product Security via Fulldisclosure (Mar 28)
APPLE-SA-03-24-2026-2 iOS 18.7.7 and iPadOS 18.7.7 Apple Product Security via Fulldisclosure (Mar 28)
APPLE-SA-03-17-2026-1 Background Security Improvements for iOS 26.3.1, iPadOS 26.3.1, macOS 26.3.1, and macOS 26.3.2 Apple Product Security via Fulldisclosure (Mar 19)
APPLE-SA-03-24-2026-9 Safari 26.4 Apple Product Security via Fulldisclosure (Mar 28)
APPLE-SA-03-24-2026-8 visionOS 26.4 Apple Product Security via Fulldisclosure (Mar 28)
APPLE-SA-03-24-2026-6 tvOS 26.4 Apple Product Security via Fulldisclosure (Mar 28)
APPLE-SA-03-11-2026-2 iOS 15.8.7 and iPadOS 15.8.7 Apple Product Security via Fulldisclosure (Mar 12)
APPLE-SA-03-24-2026-3 macOS Tahoe 26.4 Apple Product Security via Fulldisclosure (Mar 28)
APPLE-SA-03-24-2026-7 watchOS 26.4 Apple Product Security via Fulldisclosure (Mar 28)
APPLE-SA-03-24-2026-1 iOS 26.4 and iPadOS 26.4 Apple Product Security via Fulldisclosure (Mar 28)
APPLE-SA-03-24-2026-10 Xcode 26.4 Apple Product Security via Fulldisclosure (Mar 28)
APPLE-SA-03-24-2026-4 macOS Sequoia 15.7.5 Apple Product Security via Fulldisclosure (Mar 28)
APPLE-SA-03-11-2026-1 iOS 16.7.15 and iPadOS 16.7.15 Apple Product Security via Fulldisclosure (Mar 12)

Daniel Owens via Fulldisclosure

JSON Deserialiser Unconstrained Resource Consumption Quick Overview Daniel Owens via Fulldisclosure (Mar 12)

Egidio Romano

[KIS-2026-05] MailEnable <= 10.54 Multiple Reflected Cross-Site Scripting Vulnerabilities Egidio Romano (Mar 28)

Feng Ning via Fulldisclosure

Alipay DeepLink+JSBridge Attack Chain: Silent GPS Exfiltration, 17 Vulns, 6 CVEs (CVSS 9.3) Feng Ning via Fulldisclosure (Mar 12)

GregD via Fulldisclosure

Cohesity TranZman Migration Appliance - 5 CVEs (command injection, LPE, unsigned patches, weak crypto) GregD via Fulldisclosure (Mar 12)

Guang Gong

OpenClaw MEDIA: Protocol Prompt Injection - File Disclosure Bypassing Tool Permissions (Silently Fixed, Report Denied) Guang Gong (Mar 28)

Jiqiang Feng via Fulldisclosure

UPDATE: Ant Group Censors 4 Security Research Articles After Initial Complaint Rejection Jiqiang Feng via Fulldisclosure (Mar 16)

Qualys Security Advisory via Fulldisclosure

snap-confine + systemd-tmpfiles = root (CVE-2026-3888) Qualys Security Advisory via Fulldisclosure (Mar 19)

SEC Consult Vulnerability Lab via Fulldisclosure

SEC Consult SA-20260317-0 :: Multiple vulnerabilities in PEGA Infinity platform SEC Consult Vulnerability Lab via Fulldisclosure (Mar 19)
SEC Consult SA-20260318-0 :: Multiple Privilege Escalation Vulnerabilities in Arturia Software Center MacOS SEC Consult Vulnerability Lab via Fulldisclosure (Mar 19)
SEC Consult SA-20260224-0 :: Multiple vulnerabilities in CPSD CryptoPro Secure Disk for BitLocker (CVE-2025-10010) SEC Consult Vulnerability Lab via Fulldisclosure (Mar 12)

Stefan Kanthak via Fulldisclosure

Defense in depth -- the Microsoft way (part 96): yet another SAFER (SRPv1) and AppLocker (SRPv2) loophole Stefan Kanthak via Fulldisclosure (Mar 12)