Full Disclosure: by author
26 messages
starting Mar 28 26 and
ending Mar 12 26
Date index |
Thread index |
Author index
Abhinav Agarwal
CVE-2026-33150, CVE-2026-33179: libfuse io_uring memory safety vulnerabilities (use-after-free, NULL deref) Abhinav Agarwal (Mar 28)
Aki Tuomi
Dovecot Security Advisory OXDC-2026-0001 Aki Tuomi (Mar 28)
Apple Product Security via Fulldisclosure
APPLE-SA-03-24-2026-5 macOS Sonoma 14.8.5 Apple Product Security via Fulldisclosure (Mar 28)
APPLE-SA-03-24-2026-2 iOS 18.7.7 and iPadOS 18.7.7 Apple Product Security via Fulldisclosure (Mar 28)
APPLE-SA-03-17-2026-1 Background Security Improvements for iOS 26.3.1, iPadOS 26.3.1, macOS 26.3.1, and macOS 26.3.2 Apple Product Security via Fulldisclosure (Mar 19)
APPLE-SA-03-24-2026-9 Safari 26.4 Apple Product Security via Fulldisclosure (Mar 28)
APPLE-SA-03-24-2026-8 visionOS 26.4 Apple Product Security via Fulldisclosure (Mar 28)
APPLE-SA-03-24-2026-6 tvOS 26.4 Apple Product Security via Fulldisclosure (Mar 28)
APPLE-SA-03-11-2026-2 iOS 15.8.7 and iPadOS 15.8.7 Apple Product Security via Fulldisclosure (Mar 12)
APPLE-SA-03-24-2026-3 macOS Tahoe 26.4 Apple Product Security via Fulldisclosure (Mar 28)
APPLE-SA-03-24-2026-7 watchOS 26.4 Apple Product Security via Fulldisclosure (Mar 28)
APPLE-SA-03-24-2026-1 iOS 26.4 and iPadOS 26.4 Apple Product Security via Fulldisclosure (Mar 28)
APPLE-SA-03-24-2026-10 Xcode 26.4 Apple Product Security via Fulldisclosure (Mar 28)
APPLE-SA-03-24-2026-4 macOS Sequoia 15.7.5 Apple Product Security via Fulldisclosure (Mar 28)
APPLE-SA-03-11-2026-1 iOS 16.7.15 and iPadOS 16.7.15 Apple Product Security via Fulldisclosure (Mar 12)
Daniel Owens via Fulldisclosure
JSON Deserialiser Unconstrained Resource Consumption Quick Overview Daniel Owens via Fulldisclosure (Mar 12)
Egidio Romano
[KIS-2026-05] MailEnable <= 10.54 Multiple Reflected Cross-Site Scripting Vulnerabilities Egidio Romano (Mar 28)
Feng Ning via Fulldisclosure
Alipay DeepLink+JSBridge Attack Chain: Silent GPS Exfiltration, 17 Vulns, 6 CVEs (CVSS 9.3) Feng Ning via Fulldisclosure (Mar 12)
GregD via Fulldisclosure
Cohesity TranZman Migration Appliance - 5 CVEs (command injection, LPE, unsigned patches, weak crypto) GregD via Fulldisclosure (Mar 12)
Guang Gong
OpenClaw MEDIA: Protocol Prompt Injection - File Disclosure Bypassing Tool Permissions (Silently Fixed, Report Denied) Guang Gong (Mar 28)
Jiqiang Feng via Fulldisclosure
UPDATE: Ant Group Censors 4 Security Research Articles After Initial Complaint Rejection Jiqiang Feng via Fulldisclosure (Mar 16)
Qualys Security Advisory via Fulldisclosure
snap-confine + systemd-tmpfiles = root (CVE-2026-3888) Qualys Security Advisory via Fulldisclosure (Mar 19)
SEC Consult Vulnerability Lab via Fulldisclosure
SEC Consult SA-20260317-0 :: Multiple vulnerabilities in PEGA Infinity platform SEC Consult Vulnerability Lab via Fulldisclosure (Mar 19)
SEC Consult SA-20260318-0 :: Multiple Privilege Escalation Vulnerabilities in Arturia Software Center MacOS SEC Consult Vulnerability Lab via Fulldisclosure (Mar 19)
SEC Consult SA-20260224-0 :: Multiple vulnerabilities in CPSD CryptoPro Secure Disk for BitLocker (CVE-2025-10010) SEC Consult Vulnerability Lab via Fulldisclosure (Mar 12)
Stefan Kanthak via Fulldisclosure
Defense in depth -- the Microsoft way (part 96): yet another SAFER (SRPv1) and AppLocker (SRPv2) loophole Stefan Kanthak via Fulldisclosure (Mar 12)
