Full Disclosure: by date

75 messages starting May 03 16 and ending May 31 16
Date index | Thread index | Author index

Tuesday, 03 May

CVE-2016-3078: php: integer overflow in ZipArchive::getFrom* Hans Jerry Illikainen
CONFidence - May, 19-20th, Krakow - join the biggest hacker meeting in Poland! Aleksandra Woźniak
Mozilla doesn't care for upstream security fixes, and doesn't bother to send own security fixes upstream Stefan Kanthak
New BlackArch Linux ISOs (2016.04.28) and Installer released Black Arch
Garage4hackers Ranchoddas Webcast Series CTF Challenge Sandeep Kamble
Observium Commercial - CSRF & Authenticated Code Execution Dolev Farhi
real dangers of gsm setups Gavrill Klimov
Moxa MiiNePort - Multiple Vulnerabilities Karn Ganeshen
Mobile Security Framework (MobSF) v0.9.2 Released Ajin Abraham
CVE-2016-4338: Zabbix Agent 3.0.1 mysql.size shell command injection Timo Juhani Lindfors
CVE-2016-3627 CVE-2016-3705: libxml2: stack overflow in xml validator (parser) Simon Lees
LSE Leading Security Experts GmbH - LSE-2016-02-03 - OXID eShop Path Traversal Vulnerability LSE-Advisories

Friday, 06 May

APPLE-SA-2016-05-03-1 Xcode 7.3.1 Apple Product Security
NetCommWireless HSPA 3G10WVE Wireless Router – Multiple vulnerabilities Bhadresh Patel
Swagger Editor v2.9.9 "description" Key DOM-based Cross-Site Scripting Julien Ahrens
CVE-2016-2784: CMS Made Simple < 2.1.3 & < 1.12.2 Web server Cache Poisoning Lab I-Tracing
CVE Request for ManageEngine Applications Manager Build No: 12700 Information Disclosure and Un-Authenticated SQL injection. Saif El-Sherei
Give a warm welcome to Faraday v1.0.19! New GTK interface, Custom Reports & Bug fixing Francisco Amato
Re: NetCommWireless HSPA 3G10WVE Wireless Router – Multiple vulnerabilities Bhadresh Patel
Aruba ArubaOS/Aruba Instant/AirWave Management - Multiple Vulnerabilities (CVE-2016-2031, CVE-2016-2032) Sven Blumenstein

Monday, 09 May

Re: CVE Request for ManageEngine Applications Manager Build No: 12700 Information Disclosure and Un-Authenticated SQL injection. Saif El-Sherei
WheresMyDroid Android App issues 0x3d5157636b525761 iddqd
t2'16: Call For Papers 2016 (Helsinki, Finland) Tomi Tuominen

Tuesday, 10 May

Skype Manager - (Email Change) Filter Bypass Vulnerability Vulnerability Lab
Notes v4.5 iOS - Arbitrary File Upload Vulnerability Vulnerability Lab
Wordpress Truemag Theme - Client Side Cross Site Scripting Web Vulnerability Vulnerability Lab
Trend Micro Direct Pass - Filter Bypass & Cross Site Scripting Vulnerability Vulnerability Lab
Stanford University - Multiple SQL Injection Vulnerabilities Vulnerability Lab
Nfdump Nfcapd 1.6.14 Multiple Vulnerabilities Denis Andzakovic
Intuit QuickBooks 2007 - 2016 Arbitrary Code Execution Thegrideon Software
CFP: Passwords 2016, Ruhr-University Bochum, Germany, Dec 5-7 Per Thorsheim
BulletProof Security 53.3 - Security Advisory - Multiple XSS Vulnerabilities Onur Yilmaz

Thursday, 12 May

Skype Phishing Attack Danny Kopping
CakePHP Framework <= 3.2.4 IP Spoofing Vulnerability Dawid Golunski
Huawei Mobile Broadband HL Service Local Privilege Escalation Bogner Florian

Friday, 13 May

Webshell for IIS Savio Bot
Re: Skype Phishing Attack Reindl Harald
Re: Skype Phishing Attack Wim Remes

Tuesday, 17 May

[ERPSCAN-16-008] SAP NetWeaver AS JAVA - XSS vulnerability in ProxyServer servlet ERPScan inc
[ERPSCAN-16-009] SAP xMII - directory traversal vulnerability ERPScan inc
APPLE-SA-2016-05-16-1 tvOS 9.2.1 Apple Product Security
APPLE-SA-2016-05-16-2 iOS 9.3.2 Apple Product Security
APPLE-SA-2016-05-16-3 watchOS 2.2.1 Apple Product Security
APPLE-SA-2016-05-16-4 OS X El Capitan 10.11.5 and Security Update 2016-003 Apple Product Security
APPLE-SA-2016-05-16-5 Safari 9.1.1 Apple Product Security
APPLE-SA-2016-05-16-6 iTunes 12.4 Apple Product Security
Re: Skype Phishing Attack Sebastian
Code Execution Vulnerabilities In 7zip Nick Boyce
Re: Code Execution Vulnerabilities In 7zip Nick Boyce
OWTF 2.0a "Tikka Masala" released! Abraham Aranguren
[ICS] Meteocontrol WEB’log Multiple Vulnerabilities Karn Ganeshen
WSO2 SOA Enablement Server - Reflected Cross-Site Scripting Etnies

Wednesday, 18 May

Re: Skype Phishing Attack Danny Kopping

Monday, 23 May

[ERPSCAN-16-010] SAP NetWeaver AS JAVA – information disclosure vulnerability ERPScan inc
[ERPSCAN-16-011] SAP NetWeaver AS JAVA – SQL injection vulnerability ERPScan inc
Linknat VOS2009/VOS3000 SQL injection Osama Khalid
Multiple Reflected XSS vulnerabilities in Infobae Website Niemand Nie
[RCESEC-2016-001] Postfix Admin v2.93 Generic POST Cross-Site Request Forgeries Julien Ahrens
MediaLink router MWN-WAPR300N - Several Vulnerabilities David Spector
poisoning / hijacking DNS locally of a third party domain: in shared and custom web hosting and in ISP, in automated /custom control panel software Bipin Gautam

Tuesday, 24 May

MSA-2016-01: PowerFolder Remote Code Execution Vulnerability Advisories Advisories

Wednesday, 25 May

Teampass v2.1.25 - Arbitrary File Download Vulnerability Vulnerability Lab
Teampass v2.1.25 - Unauthenticated Access Vulnerability Vulnerability Lab
Teampass v2.1.26 - Stored Cross Site Scripting Vulnerability Vulnerability Lab
Bugcrowd Bug Bounty #7 - Persistent Web Vulnerability Vulnerability Lab
Bashi v1.6 iOS - Persistent Mail Encoding Vulnerability Vulnerability Lab
[RCESEC-2016-002] XenAPI v1.4.1 for XenForo Multiple Unauthenticated SQL Injections Julien Ahrens
CVE-2016-4803 dotCMS - Email Header Injection Elar Lang
Re: Teampass v2.1.26 - Stored Cross Site Scripting Vulnerability Ulisses Montenegro

Thursday, 26 May

CVE-2015-3854 Battery permission leakage in Android flanker
Re: CVE-2015-3854 Battery permission leakage in Android flanker
Re: Teampass v2.1.26 - Stored Cross Site Scripting Vulnerability Peter Kok

Tuesday, 31 May

[RT-SA-2015-012] XML External Entity Expansion in Paessler PRTG Network Monitor RedTeam Pentesting GmbH
[RT-SA-2016-004] Websockify: Remote Code Execution via Buffer Overflow RedTeam Pentesting GmbH
[RT-SA-2016-005] Unauthenticated File Upload in Relay Ajax Directory Manager may Lead to Remote Command Execution RedTeam Pentesting GmbH

Previous period

Next period