Full Disclosure: by author

34 messages starting Oct 06 20 and ending Oct 22 20
Date index | Thread index | Author index


Adriano Marcio Monteiro

XSS in krpano Panorama Viewer Adriano Marcio Monteiro (Oct 06)

Adrian Sanabria

Re: Google's Android: remote install backdoor in Google Play Services Adrian Sanabria (Oct 20)

Advisories

CSNC-2020-005 - Checkmk Local Privilege Escalation Advisories (Oct 02)
CVE-2020-12676 - FusionAuth SAML v2.0 bindings in Java using JAXB - Signature Exclusion Attack Advisories (Oct 02)

b1nary

Student Result Management System 1.0 - Multiple SQL Injection Vulnerabilities b1nary (Oct 06)

Enrico Weigelt, metux IT consult

Re: Google's Android: remote install backdoor in Google Play Services Enrico Weigelt, metux IT consult (Oct 16)

Gregory Boddin

How to build Win2k3 Gregory Boddin (Oct 02)

houjingyi

Cisco Webex Teams Client for Windows DLL Hijacking Vulnerability houjingyi (Oct 09)

hyp3rlinx

Recon Informer v1.2 - Intel for offensive systems tool. hyp3rlinx (Oct 06)

Julien Ahrens (RCE Security)

[CVE-2020-25204] God Kings "com.innogames.core.frontend.notifications.receivers.LocalNotificationBroadcastReceiver" Improper Authorization Allowing In-Game Notification Spoofing Julien Ahrens (RCE Security) (Oct 27)

Ken

Re: Navy Federal Reflective Cross Site Scripting (XSS) Ken (Oct 06)

Kevin R

CVE-2020-24990 Q-SYS <= 8.2.1 TFTP Directory Traversal Kevin R (Oct 23)

Marcin Kozlowski

Chrome heap buffer overflow in freetype2 CVE-2020-15999 Marcin Kozlowski (Oct 30)

Micha Borrmann

[SYSS-2019-048] Improper Authorization (CWE-285) in REDDOXX MailDepot (CVE-2019-19200) Micha Borrmann (Oct 02)

Michael Lazin

Re: Google's Android: remote install backdoor in Google Play Services Michael Lazin (Oct 20)

Nguyen Anh Quynh

Unicorn Emulator 1.0.2 is out! Nguyen Anh Quynh (Oct 23)

Open-Xchange GmbH via Fulldisclosure

Open-Xchange Security Advisory 2020-10-13 Open-Xchange GmbH via Fulldisclosure (Oct 16)

Pedro Cunha

Re: Google's Android: remote install backdoor in Google Play Services Pedro Cunha (Oct 20)

RedTeam Pentesting GmbH

[RT-SA-2020-002] Denial of Service in D-Link DSR-250N RedTeam Pentesting GmbH (Oct 08)
[RT-SA-2020-005] Arbitrary File Disclosure and Server-Side Request Forgery in BigBlueButton RedTeam Pentesting GmbH (Oct 21)
[RT-SA-2020-003] FRITZ!Box DNS Rebinding Protection Bypass RedTeam Pentesting GmbH (Oct 19)

Red Timmy Security

FortSIEM <= 5.2.8 RCE due to EL Injection - analysis Red Timmy Security (Oct 06)

Rodolfo Augusto do Nascimento Tavares

CVE-2020-25790 Rodolfo Augusto do Nascimento Tavares (Oct 06)

Ryan Wincey

LISTSERV Maestro Remote Code Execution Vulnerability Ryan Wincey (Oct 20)

SEC Consult Vulnerability Lab

SEC Consult SA-20201005-0 :: Multiple Critical Vulnerabilities in RocketLinx Series SEC Consult Vulnerability Lab (Oct 05)
SEC Consult SA-20201023-0 :: Multiple Vulnerabilities in PubliXone SEC Consult Vulnerability Lab (Oct 23)
SEC Consult SA-20201001-0 :: Broken Access Control in Platinum Mobile SEC Consult Vulnerability Lab (Oct 02)
SEC Consult SA-20201002-0 :: Multiple Vulnerabilities in SevOne Network Management System (NMS) SEC Consult Vulnerability Lab (Oct 02)
SEC Consult SA-20201012-0 :: Reflected Cross-Site Scripting and Unauthenticated Malicious File Upload in Sage DPW SEC Consult Vulnerability Lab (Oct 12)
SEC Consult SA-20201008-0 :: Multiple Cross-Site Scripting Vulnerabilities in Confluence Marketplace Plugins SEC Consult Vulnerability Lab (Oct 09)

Securify B.V. via Fulldisclosure

Java deserialization vulnerability in QRadar RemoteJavaScript Servlet Securify B.V. via Fulldisclosure (Oct 16)

Stefan Marsiske via Fulldisclosure

CVE-2020-24722: GAEN Protocol Metadata Deanonymization and Risk-score Inflation Issues Stefan Marsiske via Fulldisclosure (Oct 06)

Vulnerability Lab

German armed forces launch security vulnerability disclosure program Vulnerability Lab (Oct 29)
VL 2020-10-22 - German Bundeswehr starts own Responsible Disclosure Program (VDPBw) Vulnerability Lab (Oct 22)