Full Disclosure: by date

52 messages starting Jun 02 17 and ending Jun 30 17
Date index | Thread index | Author index


Friday, 02 June

DefenseCode WebScanner DAST Advisory: WordPress Tribulant Newsletters Plugin Multiple Security Vulnerabilities DefenseCode
DefenseCode ThunderScan SAST Advisory: WordPress Simple Slideshow Manager Plugin Multiple Security Vulnerabilities DefenseCode
DefenseCode ThunderScan SAST Advisory: WordPress No External Links Plugin Security Vulnerability DefenseCode
Qualys Security Advisory - CVE-2017-1000367 in Sudo's get_process_ttyname() for Linux Qualys Security Advisory
[CVE-2017-5688] Executable installers are vulnerable^WEVIL (case 52): Intel installation framework allows arbitrary code execution with escalation of privilege Stefan Kanthak

Tuesday, 06 June

X41-2017-005 - Multiple Vulnerabilities in peplink balance routers X41 D-Sec GmbH Advisories
CVE-2017-8083 CompuLab IntensePC lacks BIOS Write Protection Hal Martin

Wednesday, 07 June

Perch v3.0.3 CMS - Multiple Web Vulnerabilities Vulnerability Lab
Xavier v2.4 PHP MP - SQL Injection Web Vulnerabilities Vulnerability Lab
SEC Consult SA-20170607-0 :: Various WiMAX CPEs Authentication Bypass SEC Consult Vulnerability Lab

Thursday, 08 June

libcroco multiple vulnerabilities qflb.wu
libquicktime multiple vulnerabilities qflb.wu

Friday, 09 June

Re: libquicktime multiple vulnerabilities Brandon Perry
Re: libcroco multiple vulnerabilities Alan Coopersmith

Monday, 12 June

Evolution Script CMS v5.3 - Cross Site Scripting Vulnerability Vulnerability Lab
Composr CMS v10.0.0 - Cross Site Scripting Vulnerability Vulnerability Lab
Zenbership 1.0.8 CMS - Multiple SQL Injection Vulnerabilities Vulnerability Lab

Tuesday, 13 June

SEC Consult SA-20170613-0 :: Access Restriction Bypass in Atlassian Confluence SEC Consult Vulnerability Lab
t2'17: Call For Papers 2017 (Helsinki, Finland) Tomi Tuominen
New BlackArch Linux ISOs (2017.06.13) released! Black Arch

Friday, 16 June

APC UPS Daemon <= 3.14.14 Local Privilege Escalation Richard Young

Tuesday, 20 June

Freeware Advanced Audio Coder (FAAC) multiple vulnerabilities qflb.wu
Path traversal in Photo Gallery may allow admins to read most files on the filesystem (WordPress plugin) dxw Security
Reflected XSS in WordPress Download Manager could allow an attacker to do almost anything an admin can (WordPress plugin) dxw Security

Thursday, 22 June

SEC Consult SA-20170622-0 :: XXE, SQLi, XSS & local file disclosure in Cisco Prime Infrastructure SEC Consult Vulnerability Lab
PayPal Inc BB #149 - (Gift) Insufficient Authentication Vulnerability Vulnerability Lab
OffensiveCon Berlin 2018 Call for Papers Moritz Jodeit
Vaadin Javascript Injection Caleb Cushing

Monday, 26 June

Microsoft Skype v7.2, v7.35 & v7.36 - Stack Buffer Overflow Vulnerability Vulnerability Lab
malicious hypervisor aka root-kit hypervisor threat is rel Mikhail Utin
Vulnerabilities in D-Link DIR-100 MustLive
DefenseCode Security Advisory: IBM DB2 Command Line Processor Buffer Overflow DefenseCode

Tuesday, 27 June

Freeware Advanced Audio Decoder 2 (FAAD2) multiple vulnerabilities qflb.wu

Wednesday, 28 June

[CORE-2017-0003] - Kaspersky Anti-Virus File Server Multiple Vulnerabilities Core Security Advisories Team

Thursday, 29 June

Executable installers are vulnerable^WEVIL (case 52): escalation of privilege with Microsoft's .NET Framework installers Stefan Kanthak
Re: Freeware Advanced Audio Decoder 2 (FAAD2) multiple vulnerabilities Robert Święcki
Microsoft Office Patch Installer Executables - Insecure Library Loading Allows Code Execution Karn Ganeshen
Microsoft Machine Debug Manager (mdm) DLL side loading vulnerability Karn Ganeshen
Digital Canal Structural Wind Analysis Stack Buffer Overflow Karn Ganeshen
Trihedral VTScada Multiple Vulnerabilities Karn Ganeshen
Schneider Electric Wonderware InduSoft Web Studio Privilege Escalation Karn Ganeshen
BLF-Tech LLC VisualView HMI Software – Insecure Library Loading Allows Code Execution Karn Ganeshen
Schneider Electric Interactive Graphical SCADA System Software – Insecure Library Loading Allows Code Execution Karn Ganeshen
Local file inclusion in cmsmadesimple <=2.2.1 Wester Zeng

Friday, 30 June

SEC Consult SA-20170630-0 :: Multiple critical vulnerabilities in OSCI-Transport library 1.2 for German e-Government SEC Consult Vulnerability Lab
Humax Digital HG100R multiple vulnerabilities The Gambler
Microsoft Dynamic CRM 2016 - Cross-Site Scripting vulnerability gregory draperi
eVestigator Forensic PenTester v1 - Remote Code Execution via MITM InterN0T via Fulldisclosure
Australian Education App - Remote Code Execution InterN0T via Fulldisclosure
BestSafe Browser FREE NoAds - Remote Code Execution InterN0T via Fulldisclosure
Schneider Electric Pro-Face WinGP – Runtime.exe – Insecure Library Loading Allows Code Execution Karn Ganeshen
ESA-2017-063: RSA Archer® GRC Platform Multiple Vulnerabilities EMC Product Security Response Center