Full Disclosure: by thread
RSS Feed
About List
All Lists
Previous period
103 messages
starting Feb 01 17 and
ending Feb 28 17
Date index |
Thread index |
Author index
- Vulnerability Open Redirect LogicBoard CMS Estación Informática (Feb 01)
- Viscosity for Windows 1.6.7 Privilege Escalation Kacper Szurek (Feb 01)
- QNAP NVR/NAS Heap / Stack / Heap Feng Shui overflow, and "Heack Combo" to pwn bashis (Feb 01)
- Cross-Site Scripting vulnerability in Bitrix Site Manager MustLive (Feb 01)
- secuvera-SA-2017-02: Reflected XSS and Open Redirect in MailStore Server Tobias Glemser (Feb 01)
- <Possible follow-ups>
- secuvera-SA-2017-02: Reflected XSS and Open Redirect in MailStore Server Tobias Glemser (Feb 01)
- Call for Speakers for CCCC17 in Copenhagen Peter Kruse (Feb 02)
- Re: Free ebook to learn ethical hacking techniques elendil el (Feb 02)
- Re: Multiple vulnerabilities found in the Dlink DWR-932B (backdoor, backdoor accounts, weak WPS, RCE ...) Pierre Kim (Feb 02)
- [FOXMOLE SA 2016-07-05] ZoneMinder - Multiple Issues FOXMOLE Advisories (Feb 02)
- HP Printers Wi-Fi Direct Improper Access Control Info (Feb 02)
- ZoneMinder - multiple vulnerabilities John Marzella (Feb 04)
- [KIS-2017-01] PEAR HTML_AJAX <= 0.5.7 (PHP Serializer) PHP Object Injection Vulnerability Egidio Romano (Feb 06)
- Teleopti WFM <= 7.1.0 Multiple Vulnerabilities Graph-X (Feb 06)
- IVPN Client for Windows 2.6.6120.33863 Privilege Escalation Kacper Szurek (Feb 06)
- Remote DoS against OpenBSD http server (up to 6.0) Pierre Kim (Feb 06)
- interpreter bugs Andrzej Dyjak (Feb 07)
- Call for Papers: FIRST Amsterdam Technical Colloquium (TC) April 2017 Jeff Bollinger (Feb 07)
- SEC Consult SA-20170207 :: Path Traversal, Backdoor accounts & KNX group address password bypass in JUNG Smart Visu server SEC Consult Vulnerability Lab (Feb 07)
- Responsive Filemanger <= 9.11.0 - Arbitrary File Disclosure/Deletion Wiswat A (Feb 07)
- Executable installers are vulnerable^WEVIL (case 48): SumatraPDF-3.1.2-installer.exe allows escalation of privilege Stefan Kanthak (Feb 07)
- Authentication bypass vulnerability in Western Digital My Cloud Securify B.V. (Feb 08)
- TP-Link C2 and C20i vulnerable to command injection (authenticated root RCE), DoS, improper firewall rules Pierre Kim (Feb 09)
- [Call for Papers] InfoSec2017 in Bratislava, Slovakia | June 29-July 1, 2017 Sandra Evans (Feb 10)
- WordPress Plugin Easy Table 1.6 - Persistent Cross-Site Scripting Manuel Garcia Cardenas (Feb 14)
- CVE-2017-5670 : Riverbed RiOS insecure cryptographic storage Sydream Labs (Feb 14)
- CFP for Speaker Workshops at the Packet Hacking Village at DEF CON 25 Now Open Ming (Feb 14)
- [Kodi v17.1] - Local File Inclusion Eric Flokstra (Feb 14)
- ShadeYouVPN.com Client v2.0.1.11 for Windows Privilege Escalation Kacper Szurek (Feb 14)
- Backdoored Web Application v.1.0.2 MustLive (Feb 14)
- KL-001-2017-001 : Trendmicro InterScan Arbitrary File Write KoreLogic Disclosures (Feb 15)
- KL-001-2017-002 : Trendmicro InterScan Privilege Escalation Vulnerability KoreLogic Disclosures (Feb 15)
- KL-001-2017-003 : Trendmicro InterScan Remote Root Access Vulnerability KoreLogic Disclosures (Feb 15)
- Advisory X41-2017-002: Multiple Vulnerabilities in ytnef X41 D-Sec GmbH Advisories (Feb 15)
- Suricata IDS - IPv4 evasion Jérémy BEAUME (Feb 15)
- CVE-2017-5344 : dotCMS Blind Boolean SQL Injection in dotCMS <= 3.6.1 Ben N (Feb 15)
- QNAP QTS 4.2.x multiple vulnerabilities Harry Sintonen (Feb 15)
- Elefant CMS 1.3.12-RC: Multiple Persistent and Reflected XSS Curesec Research Team (CRT) (Feb 16)
- Elefant CMS 1.3.12-RC: CSRF Curesec Research Team (CRT) (Feb 16)
- Plone: XSS Curesec Research Team (CRT) (Feb 16)
- Elefant CMS 1.3.12-RC: Code Execution Curesec Research Team (CRT) (Feb 16)
- <Possible follow-ups>
- Elefant CMS 1.3.12-RC: Code Execution Curesec Research Team (CRT) (Feb 16)
- "long" filenames mishandled by Fujitsu's ScanSnap software Stefan Kanthak (Feb 16)
- Lithium Forum - (Compose Message) SSRF Vulnerability Vulnerability Lab (Feb 20)
- Telekom Cloud SSO - Multiple Persistent XSS Vulnerabilities Vulnerability Lab (Feb 20)
- PDFMate PDF Converter Pro 1.7.5.0 - Buffer Overflow Vulnerability Vulnerability Lab (Feb 20)
- Album Lock v4.0 iOS - Directory Traversal Vulnerability Vulnerability Lab (Feb 20)
- Sawmill Enterprise v8.7.9 Pass The Hash Authentication Bypass hyp3rlinx (Feb 21)
- PHPShell v2.4 Session Fixation hyp3rlinx (Feb 21)
- PHPShell v2.4 Cross Site Scripting hyp3rlinx (Feb 21)
- APPLE-SA-2017-02-21-1 GarageBand 10.1.6 Apple Product Security (Feb 21)
- APPLE-SA-2017-02-21-2 Logic Pro X 10.3.1 Apple Product Security (Feb 21)
- NETGEAR DGN2200v1/v2/v3/v4 - 'ping.cgi' Remote Command Execution Kroppoloe (Feb 21)
- Recon Montreal 2017 Call For Papers - June 16 - 18 - Montreal, Canada cfpmontreal2017 (Feb 21)
- Siklu EtherHaul Unauthenticated Remote Command Execution Vulnerability (<7.4.0) Ian Ling (Feb 21)
- Blindspot Advisory: Java/Python FTP Injections Allow for Firewall Bypass Timothy D. Morgan (Feb 21)
- Multiple cross-site request forgery (CSRF) vulnerabilities in the DIGISOL (DG-HR 1400) Wireless Router Indrajith AN (Feb 21)
- <Possible follow-ups>
- Multiple cross-site request forgery (CSRF) vulnerabilities in the DIGISOL (DG-HR 1400) Wireless Router Indrajith AN (Feb 24)
- [SYSS-2016-117] ABUS Secvest (FUAA50000) - Missing Protection against Replay Attacks Matthias Deeg (Feb 21)
- Lock Photos Album&Videos Safe v4.3 - Directory Traversal Vulnerability Vulnerability Lab (Feb 22)
- ProjectSend r754 - IDOR & Authentication Bypass Vulnerability Vulnerability Lab (Feb 22)
- Synology NAS "Auto Block IP" bypass and hide real IP in Synology logs bashis (Feb 22)
- EasyCom PHP API Stack Buffer Overflow hyp3rlinx (Feb 22)
- EasyCom SQL iPlug Denial Of Service hyp3rlinx (Feb 22)
- Teradici Management Console 2.2.0 - Privilege Escalation Harrison Neal (Feb 22)
- <Possible follow-ups>
- Re: Teradici Management Console 2.2.0 - Privilege Escalation Jack Cha (Feb 28)
- Air Transfer 1.2.1 & 1.0.14 - Multiple XSS Web Vulnerabilities Vulnerability Lab (Feb 23)
- Advisory X41-2017-004: Multiple Vulnerabilities in tnef X41 D-Sec GmbH Advisories (Feb 24)
- Unicorn Emulator v1.0 is out! Nguyen Anh Quynh (Feb 24)
- WordPress Plugin Kama Click Counter 3.4.9 - Blind SQL Injection Manuel Garcia Cardenas (Feb 27)
- CVE-2016-9892 - Remote Code Execution as Root via ESET Endpoint Antivirus 6 Jason Geffner (Feb 27)
- CVE-2017-6061 - SAP BusinessObjects XSS NL Deloitte Zero Day (NL - Amsterdam) (Feb 27)
- D-link wireless router DI-524 – Multiple Cross-Site Request Forgery (CSRF) vulnerabilities Felipe Soares de Souza (Feb 28)
- CVE-2017-6189-Amazon Kindle for Windows Nitesh Shilpkar (Feb 28)
- Advisory X41-2017-001: Multiple Vulnerabilities in X.org X41 D-Sec GmbH Advisories (Feb 28)
- Multiple persistent Cross-Site Scripting vulnerabilities in osTicket Securify B.V. (Feb 28)
- Analytics Stats Counter Statistics WordPress Plugin unauthenticated PHP Object injection vulnerability Summer of Pwnage (Feb 28)
- Admin Custom Login WordPress plugin affected by persistent Cross-Site Scripting via Logo URL field Summer of Pwnage (Feb 28)
- Admin Custom Login WordPress plugin custom login page affected by persistent Cross-Site Scripting Summer of Pwnage (Feb 28)
- Cross-Site Scripting vulnerability in Trust Form WordPress Plugin Summer of Pwnage (Feb 28)
- Cross-Site Scripting vulnerability in WP-Filebase Download Manager WordPress Plugin Summer of Pwnage (Feb 28)
- Cross-Site Scripting vulnerability in WP-SpamFree Anti-Spam WordPress Plugin Summer of Pwnage (Feb 28)
- Cross-Site Request Forgery in File Manager WordPress plugin Summer of Pwnage (Feb 28)
- Cross-Site Request Forgery in Global Content Blocks WordPress Plugin Summer of Pwnage (Feb 28)
- Cross-Site Scripting vulnerability in Gwolle Guestbook WordPress Plugin Summer of Pwnage (Feb 28)
- Simple Ads Manager WordPress plugin unauthenticated PHP Object injection vulnerability Summer of Pwnage (Feb 28)
- Persistent Cross-Site Scripting in the WordPress NewStatPress plugin Summer of Pwnage (Feb 28)
- Cross-Site Scripting vulnerability in Tribulant Slideshow Galleries WordPress Plugin Summer of Pwnage (Feb 28)
- Cross-Site Request Forgery in WordPress Download Manager Plugin Summer of Pwnage (Feb 28)
- Gwolle Guestbook mass action vulnerable for Cross-Site Request Forgery Summer of Pwnage (Feb 28)
- Cross-Site Request Forgery in Atahualpa WordPress Theme Summer of Pwnage (Feb 28)
- Cross-Site Scripting in Atahualpa WordPress Theme Summer of Pwnage (Feb 28)
- Cross-Site Scripting in Magic Fields 1 WordPress Plugin Summer of Pwnage (Feb 28)
- Cross-Site Scripting in Google Analytics Dashboard WordPress Plugin Summer of Pwnage (Feb 28)
- Cross-Site Scripting in Alpine PhotoTile for Instagram WordPress Plugin Summer of Pwnage (Feb 28)
- VaultPress - Remote Code Execution via Man in The Middle attack Summer of Pwnage (Feb 28)
- WordPress Adminer plugin allows public (local) database login Summer of Pwnage (Feb 28)
- Popup by Supsystic WordPress plugin vulnerable to Cross-Site Request Forgery Summer of Pwnage (Feb 28)
- Stored Cross-Site Scripting vulnerability in User Login Log WordPress Plugin Summer of Pwnage (Feb 28)
- Cross-Site Request Forgery & Cross-Site Scripting in Contact Form Manager WordPress Plugin Summer of Pwnage (Feb 28)
- Stored Cross-Site Scripting vulnerability in Contact Form WordPress Plugin Summer of Pwnage (Feb 28)
- Python + PostgreSQL pgAdmin4 – Insecure Library Loading Allows Code Execution Karn Ganeshen (Feb 28)
- Veritas NetBackup v6.x, v7.x, v8.0 and NetBackup appliances v2.x, v3.0 - Multiple Critical Vulnerabilities Sven Blumenstein (Feb 28)