Full Disclosure: by author

25 messages starting Feb 04 24 and ending Feb 20 24
Date index | Thread index | Author index


Andreas Hammer

Research about usage & possible issues of the NVD Andreas Hammer (Feb 04)

Andrey Stoykov

Stored XSS and RCE - adaptcmsv3.0.3 Andrey Stoykov (Feb 13)

Apple Product Security via Fulldisclosure

APPLE-SA-02-02-2024-1 visionOS 1.0.2 Apple Product Security via Fulldisclosure (Feb 04)

Austin DeFrancesco via Fulldisclosure

Buffer Overflow Vulnerabilities in KiTTY Start Duplicated Session Hostname (CVE-2024-25003) & Username (CVE-2024-25004) Variables Austin DeFrancesco via Fulldisclosure (Feb 13)
Command Injection Vulnerability in KiTTY Get Remote File Through SCP Input (CVE-2024-23749) Austin DeFrancesco via Fulldisclosure (Feb 13)

Christian Brabandt

NULL pointer dereference in the function handle_viminfo_register() of vim Christian Brabandt (Feb 04)

Egidio Romano

[KIS-2024-01] XenForo <= 2.2.13 (ArchiveImport.php) Zip Slip Vulnerability Egidio Romano (Feb 04)

Erik van Straten (FD)

Android passkeys unexpectedly deleted or useless after sync Erik van Straten (FD) (Feb 13)

Florent Daigniere via Fulldisclosure

44CON 2024 September 18th - 20th CFP Florent Daigniere via Fulldisclosure (Feb 15)

hyp3rlinx

Microsoft Windows Defender / Trojan.Win32/Powessere.G / Detection Mitigation Bypass Part 3 hyp3rlinx (Feb 20)
IBM i Access Client Solutions / Remote Credential Theft / CVE-2024-22318 hyp3rlinx (Feb 13)
Microsoft Windows Defender / Backdoor:JS/Relvelshe.A / Detection Mitigation Bypass hyp3rlinx (Feb 20)
Wyrestorm Apollo VX20 / Incorrect Access Control - DoS / CVE-2024-25736 hyp3rlinx (Feb 13)
Wyrestorm Apollo VX20 / Incorrect Access Control - Credentials Disclosure / CVE-2024-25735 hyp3rlinx (Feb 13)
Wyrestorm Apollo VX20 / Account Enumeration / CVE-2024-25734 hyp3rlinx (Feb 13)
Microsoft Windows Defender / Trojan.Win32/Powessere.G / Detection Mitigation Bypass Part 2. hyp3rlinx (Feb 13)
Microsoft Windows Defender / VBScript Detection Bypass hyp3rlinx (Feb 20)

Jeroen J.A.W. Hermans via Fulldisclosure

CVE-2024-24681: Insecure AES key in Yealink Configuration Encrypt Tool Jeroen J.A.W. Hermans via Fulldisclosure (Feb 20)

malvuln

TROJAN.WIN32 BANKSHOT / Remote Stack Buffer Overflow (SEH) malvuln (Feb 04)

Martin Heiland via Fulldisclosure

OXAS-ADV-2023-0007: OX App Suite Security Advisory Martin Heiland via Fulldisclosure (Feb 13)

Matthew Fernandez

Re: Buffer Overflow in graphviz via via a crafted config6a file Matthew Fernandez (Feb 20)

Qualys Security Advisory via Fulldisclosure

CVE-2023-6246: Heap-based buffer overflow in the glibc's syslog() Qualys Security Advisory via Fulldisclosure (Feb 04)
Out-of-bounds read & write in the glibc's qsort() Qualys Security Advisory via Fulldisclosure (Feb 04)

SEC Consult Vulnerability Lab, Research via Fulldisclosure

SEC Consult SA-20240212-0 :: Multiple Stored Cross-Site Scripting vulnerabilities in Statamic CMS SEC Consult Vulnerability Lab, Research via Fulldisclosure (Feb 13)
SEC Consult SA-20240220-0 :: Multiple Stored Cross-Site Scripting Vulnerabilities in OpenOLAT (Frentix GmbH) SEC Consult Vulnerability Lab, Research via Fulldisclosure (Feb 20)