Full Disclosure: by date

73 messages starting May 01 18 and ending May 31 18
Date index | Thread index | Author index

Tuesday, 01 May

airgapping kvm switch debug
Re: Unvalidated Redirect in Shibboleth component of Blackboard Derrek Bertrand
ASUSTOR ADM 3.1.0.RFQ3 and below vulnerabilities matthew f
XSS-Flexense-DiskBoss-Enterprise-all-versions n0ipr0cs
XSS in Flexense SyncBreeze, affects all versions n0ipr0cs
XSS in Flexense DiskPulse, affects all versions n0ipr0cs
XSS in Flexense DiskSavvy, affects all versions n0ipr0cs
XSS in Flexense DupScout, affects all versions n0ipr0cs
XSS in Flexense VX Search, affects all versions n0ipr0cs
XSS in Flexense DiskSorter, affects all versions n0ipr0cs
SSRF（Server Side Request Forgery） in Cockpit 0.4.4-0.5.5 (CVE-2018-9302) service () baimaohui net
Backdoor in Tpshop <= 2.0.8 (CVE-2018-9919) service () baimaohui net
Multiple issues in WatchGuard AP100 AP102 AP200 result in remote code execution Stephen Shkardoon

Thursday, 03 May

SEC Consult SA-20180503-0 :: Authentication Bypass in Oracle Access Manager (OAM) SEC Consult Vulnerability Lab
CA20180501-01: Security Notice for CA Spectrum Kotas, Kevin J
DSA-2018-063: Dell EMC Unity Family OS Command Injection Vulnerability EMC Product Security Response Center
[CORE-2018-0001] TP-Link EAP Controller Multiple Vulnerabilities Core Security Advisories Team

Friday, 04 May

Insecure Authentication Practices in D-LINK DIR-601 Router, Hardware version A1, Firmware Version 1.02NA (CVE-2018-10641) Joe Gray
DSA-2018-086: RSA® Authentication Manager Multiple Vulnerabilities EMC Product Security Response Center

Monday, 07 May

APPLE-SA-2018-05-04-1 Security Update 2018-001 Swift 4.1.1 for Ubuntu 14.04 Apple Product Security
GNU Wget Cookie Injection [CVE-2018-0494] Harry Sintonen

Tuesday, 08 May

CVE-2018-10201 – Ncomputing vSpace Pro Directory Traversal Vulnerability Javier Bernardo
APPLE-SA-2018-05-08-1 Additional information for APPLE-SA-2018-04-24-2 Security Update 2018-001 Apple Product Security
[ADV170017] Defense in depth -- the Microsoft way (part 54): escalation of privilege during installation of Microsoft Office 20xy Stefan Kanthak

Friday, 11 May

Microsoft Windows "FxCop" v10-12 / XML External Entity Injection hyp3rlinx
Vulnerabilities in IBMs Flashsystems and Storwize Products Sebastian Neuner via Fulldisclosure
t2'18: Call For Papers 2018 (Helsinki, Finland) Tomi Tuominen
CSRF in WP User Groups allows anybody to modify user groups and types (WordPress plugin) dxw Security

Sunday, 13 May

Calamp.com Incorrect privilege assignment could lead to full user compromise Vangelis Stykas
Buffer overflow in xls2csv (xlsparse.c:716) - catdoc Mohd Hanafie
CVE-2018-10759/CVE-2018-10760: Project Pier 0.8.8 vulnerabilities Imre Rad
Re: Vulnerabilities in IBMs Flashsystems and Storwize Products Sebastian Neuner via Fulldisclosure

Monday, 14 May

SEC Consult SA-20180514-0 :: Arbitrary File Upload & Cross-site scripting in MyBiz MyProcureNet SEC Consult Vulnerability Lab
Stored XSS in WP ULike allows unauthorised users to do almost anything an admin can (WordPress plugin) dxw Security
WP ULike allows anybody to delete any row in any WordPress table (WordPress plugin) dxw Security
Re: SEC Consult SA-20180514-0 :: Arbitrary File Upload & Cross-site scripting in MyBiz MyProcureNet SEC Consult Vulnerability Lab

Tuesday, 15 May

CSRF in Metronet Tag Manager allows anybody to do almost anything an admin can (WordPress plugin) dxw Security
Calamp.com Incorrect privilege assignment could lead to full user and vehicle compromise Vangelis Stykas
Multiple Arris Touchstone Gateway Vulnerabilities Akshay Sharma
CVE-2018-10994: HTML tag injection in Signal-desktop Alfredo Ortega
Re: Buffer overflow in xls2csv (xlsparse.c:716) - catdoc Vadim Zhukov
Keeper Commander sosumi

Wednesday, 16 May

SEC Consult SA-20180516-0 :: XXE & XSS vulnerabilities in RSA Authentication Manager SEC Consult Vulnerability Lab
vcftools 0.1.15 vuln bugs bear.xiong
PDFParser vulnerability bear.xiong
Privilege escalation on Windows10/x by shortcut alteration. Davide Lombardo
CVE-2018-11101: Signal-desktop HTML tag injection variant 2 Alfredo Ortega

Monday, 28 May

MachForm Multiple Vulnerabilities CVE-2018-6409/CVE-2018-6410/CVE-2018-6411 Amine Taouirsa
libmobi 0.3 vulns 熊文彬
taglib 1.11.1 vuln 熊文彬
WindScribe VPN 1.81 Privilege Escalation Emin Ghuliev
Authentication Bypass in Accellion Kiteworks jerinjoy
[CVE-2018-10094] Dolibarr SQL Injection vulnerability Sysdream Labs
[CVE-2018-10092] Dolibarr admin panel authenticated Remote Code Execution (RCE) vulnerability Sysdream Labs
Dolibarr XSS Injection vulnerability Sysdream Labs
[CVE-2018-1418] IBM QRadar SIEM unauthenticated remote code execution as root Pedro Ribeiro
SharePoint Site User Enumeration pzpcve180528
Qualys Security Advisory - Procps-ng Audit Report Qualys Security Advisory
Android OS Didn’t use FLAG_SECURE for Sensitive Settings [CVE-2017-13243] Nightwatch Cybersecurity Research
Reptile: a LKM rootkit written for evil purposes nullbyte
DSA-2018-095: Dell EMC RecoverPoint Multiple Vulnerabilities EMC Product Security Response Center
MachForm Multiple Vulnerabilities CVE-2018-6409/CVE-2018-6410/CVE-2018-6411 Amine Taouirsa
NUUO NVRmini2 / NVRsolo Arbitrary File Upload Vulnerability xiaotian.wang
JDA Warehouse Management System (WMS) Multiple Critical Vulnerabilities Xiaoran Wang via Fulldisclosure
JDA Connect Multiple Critical Vulnerabilities Xiaoran Wang via Fulldisclosure
Ruckus (Brocade) ICX7450-48 Reflected Cross Site Scripting Yavuz Atlas

Tuesday, 29 May

SEC Consult SA-20180529-0 :: Unprotected WiFi access & Unencrypted data transfer in Vgate iCar2 OBD2 Dongle SEC Consult Vulnerability Lab
foilChat sign up email PIN confirmation bypass Harry Sintonen
Re: taglib 1.11.1 vuln Alan Coopersmith

Wednesday, 30 May

CVE-2018-11551 AXON PBX DLL Loading Arbitrary Code Execution & Privilege Escalation Vulnerability Himanshu Mehta
CVE-2018-11552 AXON PBX 2.02 Cross Site Scripting Himanshu Mehta

Thursday, 31 May

[CORE-2018-0002] - Quest DR Series Disk Backup Multiple Vulnerabilities Core Security Advisories Team
[CORE-2018-0004] - Quest KACE System Management Appliance Multiple Vulnerabilities Core Security Advisories Team

Previous period

Next period