Full Disclosure: by author

39 messages starting Aug 06 21 and ending Aug 27 21
Date index | Thread index | Author index


Adrien JOLIBERT

Re: Spammers Using storage[.]googleapis[.]com ?!!? Adrien JOLIBERT (Aug 06)

Black Arch

New BlackArch Linux ISOs + OVA Image released! Black Arch (Aug 16)

Gionathan Reale via Fulldisclosure

Cyberoam NetGenie (C0101B1-20141120-NG11VO) - Cross Site Scripting (XSS) Gionathan Reale via Fulldisclosure (Aug 16)

Jeffrey Walton

Re: Spammers Using storage[.]googleapis[.]com ?!!? Jeffrey Walton (Aug 10)

malvuln

Backdoor.Win32.Delf.um / Authentication Bypass RCE malvuln (Aug 31)
Backdoor.Win32.Hupigon.aejq / Authentication Bypass RCE malvuln (Aug 31)
Trojan-Dropper.Win32.Small.fp / Unauthenticated Open Proxy malvuln (Aug 06)
Backdoor.Win32.IRCBot.gen / Hardcoded Weak Password malvuln (Aug 13)
Backdoor.Win32.WinShell.40 / Unauthenticated Remote Command Execution malvuln (Aug 03)
Backdoor.Win32.Zdemon.10 / Unauthenticated Remote Command Execution malvuln (Aug 06)
Backdoor.Win32.Hupigon.aejq / Directory Traversal malvuln (Aug 31)
Backdoor.Win32.Delf.wr / Authentication Bypass RCE malvuln (Aug 31)
Backdoor.Win32.Hupigon.aejq / Port Bounce Scan malvuln (Aug 31)
HackTool.Win32.HKit / Unauthenticated Remote Command Execution malvuln (Aug 13)
Backdoor.Win32.Zdemon.126 / Unauthenticated Remote Command Execution malvuln (Aug 06)
Backdoor.Win32.Antilam.11 / Unauthenticated Remote Code Execution malvuln (Aug 31)
Trojan-Proxy.Win32.Raznew.gen / Unauthenticated Open Proxy malvuln (Aug 31)
Backdoor.Win32.Hupigon.abe / Unauthenticated Open Proxy malvuln (Aug 31)
Backdoor.Win32.Delf.wr / Port Bounce Scan malvuln (Aug 31)
Backdoor.Win32.BO2K.11.d (Back Orifice) / Local Stack Buffer Overflow malvuln (Aug 31)
HEUR.Trojan.Win32.Delf.gen / Insecure Permissions malvuln (Aug 31)
Trojan-Proxy.Win32.Raznew.gen / Unauthenticated Open Proxy malvuln (Aug 13)
Backdoor.Win32.DarkKomet.aspl / Insecure Permissions malvuln (Aug 31)
Backdoor.Win32.Zaratustra / Unauthenticated Remote File Write (Remote Code Exec) malvuln (Aug 06)
HackTool.Win32.Hidd.b / Remote Stack Buffer Overflow (UDP Datagram) malvuln (Aug 13)
Constructor.Win32.SS.11.c / Unauthenticated Open Proxy malvuln (Aug 06)

Marcin Kozlowski

Stb_truetype library heap buffer overflows (many CVEs, no CVEs yet) Marcin Kozlowski (Aug 03)
LLVM based tool to audit Linux Kernel Modules Security Marcin Kozlowski (Aug 31)

Maurizio Ruchay

[SYSS-2021-042] TJWS - Reflected Cross-Site Scripting (CVE-2021-37573) Maurizio Ruchay (Aug 13)

merion44 via Fulldisclosure

Connect-app (CDU) Version: 3.8 - Cross Site Scripting merion44 via Fulldisclosure (Aug 06)

Nick Boyce

Spammers Using storage[.]googleapis[.]com ?!!? Nick Boyce (Aug 03)

Paragon Initiative Enterprises Security Team

firebase/php-jwt Algorithm Confusion with Key IDs Paragon Initiative Enterprises Security Team (Aug 13)

RedTeam Pentesting GmbH

[RT-SA-2021-002] XML External Entity Expansion in MobileTogether Server RedTeam Pentesting GmbH (Aug 10)

SEC Consult Vulnerability Lab

SEC Consult SA-20210827-1 :: XML Tag injection in BSCW Server SEC Consult Vulnerability Lab (Aug 27)
SEC Consult SA-20210820-0 :: Multiple Vulnerabilities in NetModule Router Software SEC Consult Vulnerability Lab (Aug 20)
SEC Consult SA-20210819-0 :: Multiple critical vulnerabilities in Altus Nexto and Hadron series SEC Consult Vulnerability Lab (Aug 19)
SEC Consult SA-20210827-0 :: Authenticated RCE in BSCW Server SEC Consult Vulnerability Lab (Aug 27)

Sivanesh Ashok

Accept Facebook friend requests without unlocking your Android [Unpatched] Sivanesh Ashok (Aug 10)

Zemn mez

XSS in Apple ID Server idmsa.apple.com Zemn mez (Aug 27)