Full Disclosure: by author

63 messages starting Apr 28 20 and ending Apr 20 20
Date index | Thread index | Author index


Balázs Hambalkó

Gigamon - GigaVUE 0day Balázs Hambalkó (Apr 28)

Daniel Bishtawi

Blind SQL Injection Vulnerability in Geeklog 2.2.1 Daniel Bishtawi (Apr 28)
Cross-Site Scripting Vulnerability in Geeklog 2.2.1 Daniel Bishtawi (Apr 28)

Georg Ph E Heise via Fulldisclosure

Matrix42 Workspace Management 9.1.2.2765 – Reflected Cross-Site Scripting Georg Ph E Heise via Fulldisclosure (Apr 14)
Matrix42 Workspace Management 9.1.2.2765 – Reflected Cross-Site Scripting Georg Ph E Heise via Fulldisclosure (Apr 14)
Workspace Management 9.1.2.2765 - Stored Cross-Site Scripting Georg Ph E Heise via Fulldisclosure (Apr 14)

hyp3rlinx

Microsoft Windows "net use" Logon CMD / Insufficient Password Prompt hyp3rlinx (Apr 06)
netABuse - Windows Insufficient Authentication Logic Scanner hyp3rlinx (Apr 10)
Recon-Informer v1 - Intel for offensive systems tool. hyp3rlinx (Apr 03)

Ken Williams via Fulldisclosure

CA20200414-01: Security Notice for CA API Developer Portal Ken Williams via Fulldisclosure (Apr 17)

KoreLogic Disclosures via Fulldisclosure

KL-001-2020-001 : Cellebrite Hardcoded ADB Authentication Keys KoreLogic Disclosures via Fulldisclosure (Apr 13)

Marcin Kozlowski

jQuery < 3.5 Cross-Site Scripting (XSS) Marcin Kozlowski (Apr 24)

Marco Ivaldi

CVE-2020-2771, CVE-2020-2851, CVE-2020-2944 - Multiple vulnerabilities in Oracle Solaris Marco Ivaldi (Apr 17)

Pablo Zurro via Fulldisclosure

Multiple vulnerabilities OpenAudiT Pablo Zurro via Fulldisclosure (Apr 28)

Pedro Ribeiro

Multiple 0 day vulnerabilities in IBM Data Risk Manager Pedro Ribeiro (Apr 21)

Pietro Oliva

Re: TP-LINK Cloud Cameras NCXXX Remote NULL Pointer Dereference Pietro Oliva (Apr 10)

Q C

Re: Two vulnerabilities found in MikroTik's RouterOS Q C (Apr 14)

raki ben hamouda

WSO2 API Manager Stored XSS Vulnerabilty raki ben hamouda (Apr 14)

Red Timmy Security

MicroStrategy Intelligence Server and Web 10.4 - multiple vulnerabilities Red Timmy Security (Apr 03)

RedTimmy Security

Exploiting java deserialization vulnerabilities in crypto contexts - a java applet case-study RedTimmy Security (Apr 28)
Web Application Firewall bypass via F5 Big-IP partial URI decoding RedTimmy Security (Apr 21)

SEC Consult Vulnerability Lab

SEC Consult SA-20200407-0 :: Multiple XSS vulnerabilities in TAO Open Source Assessment Platform SEC Consult Vulnerability Lab (Apr 07)

Securify B.V. via Fulldisclosure

Unauthorized access to QRadar configuration sets via default password Securify B.V. via Fulldisclosure (Apr 21)
Cisco AnyConnect elevation of privileges due to insecure handling of path names Securify B.V. via Fulldisclosure (Apr 21)
Cross-Site Request Forgery & weak access control in QRadar ConfigServices webservice Securify B.V. via Fulldisclosure (Apr 21)
QRadar RssFeedItem Server-Side Request Forgery vulnerability Securify B.V. via Fulldisclosure (Apr 21)
QRadar session manager path traversal vulnerability Securify B.V. via Fulldisclosure (Apr 21)
PHP object injection vulnerability in QRadar Forensics web application Securify B.V. via Fulldisclosure (Apr 21)
Reflected Cross-Site Scripting in QRadar Forensics link analysis page Securify B.V. via Fulldisclosure (Apr 21)
Authorization bypass in QRadar Forensics web application Securify B.V. via Fulldisclosure (Apr 21)
Local privilege escalation in QRadar due to run-result-reader.sh insecure file permissions Securify B.V. via Fulldisclosure (Apr 21)
Arbitrary class instantiation & local file inclusion vulnerability in QRadar Forensics web application Securify B.V. via Fulldisclosure (Apr 21)

Sivanesh Ashok

Prestashop <= 1.7.6.4 Multiple Vulnerabilities - CSRF to RCE Sivanesh Ashok (Apr 17)

Stefan Kanthak

Defense in depth -- the Microsoft way (part 67): we maintain 20 year old bugs since we don't care about our customers safety and security Stefan Kanthak (Apr 14)

Vulnerability Lab

Easy Transfer v1.7 iOS - Multiple Web Vulnerabilities Vulnerability Lab (Apr 28)
Swift File Transfer Mobile - Multiple Web Vulnerabilities Vulnerability Lab (Apr 17)
SeedDMS v5.1.18 - Multiple Persistent Web Vulnerabilities Vulnerability Lab (Apr 15)
Advanced Persistent Threat Golden_hands - Digital Bank Robbery of the Year 2020 Vulnerability Lab (Apr 30)
Macs Framework v1.14f CMS - Multiple Web Vulnerabilities Vulnerability Lab (Apr 15)
Transfer Master v3.3 iOS - Denial of Service Vulnerability Vulnerability Lab (Apr 28)
POS PHP v17.5 - Persistent Cross Site Web Vulnerability Vulnerability Lab (Apr 28)
HardDrive v2.1 iOS - Arbitrary File Upload Vulnerability Vulnerability Lab (Apr 30)
Playable v9.18 iOS - Multiple Web Vulnerabilities Vulnerability Lab (Apr 17)
File Explorer v1.4 iOS - Information Disclosure Vulnerability Vulnerability Lab (Apr 28)
Sky File v2.1.0 iOS - Multiple Web Vulnerabilities Vulnerability Lab (Apr 21)
File Sharing & Chat v1.0 iOS - Denial of Service Vulnerability Vulnerability Lab (Apr 28)
Bundeswehr Karriere Portal - Cross Site Scripting Vulnerability Vulnerability Lab (Apr 15)
Air Sender v1.0.2 iOS - Arbitrary File Upload Vulnerability Vulnerability Lab (Apr 24)
SMACom v1.2.0 - Insecure Session Validation Vulnerability Vulnerability Lab (Apr 17)
IDM v6.37.11.1 - Stack Buffer Overflow Vulnerabilities Vulnerability Lab (Apr 29)
Project Open v5.0.3 CMS - Multiple Web Vulnerabilities Vulnerability Lab (Apr 28)
DedeCMS v7.5 SP2 - Multiple Cross Site Scripting Web Vulnerabilities Vulnerability Lab (Apr 15)
Super Backup v2.0.5 iOS - Directory Traversal Vulnerability Vulnerability Lab (Apr 30)
Internet Download Manager v6.37.11.1 - Stack Buffer Overflow Vulnerabilities Vulnerability Lab (Apr 28)
DedeCMS v7.5 SP2 - Multiple Persistent Web Vulnerabilities Vulnerability Lab (Apr 15)
Mahara v19.10.2 CMS - Persistent Cross Site Scripting Web Vulnerability Vulnerability Lab (Apr 21)
TAO Open Source Assessment Platform v3.3.0 RC02 - Multiple Web Vulnerabilities Vulnerability Lab (Apr 17)
File Transfer iFamily v2.1 - Directory Traversal Vulnerability Vulnerability Lab (Apr 15)
Fork CMS v5.8.0 - Multiple Persistent Web Vulnerbilities Vulnerability Lab (Apr 17)
SuperBackup v2.0.5 iOS - (VCF) Persistent XSS Vulnerability Vulnerability Lab (Apr 15)
Folder Lock v3.4.5 iOS - Multiple Web Vulnerabilities Vulnerability Lab (Apr 20)
AirDisk Pro v5.5.3 iOS - Multiple Persistent Vulnerabilities Vulnerability Lab (Apr 15)
Phpgurukul User Registration v2.0 - Multiple Vulnerabilities Vulnerability Lab (Apr 20)