Full Disclosure: by author

64 messages starting Mar 01 19 and ending Mar 07 19
Date index | Thread index | Author index


advisories

[CORE-2018-0012] - Cisco WebEx Meetings Elevation of Privilege Vulnerability Version 2 advisories (Mar 01)

Apple Product Security via Fulldisclosure

APPLE-SA-2019-3-25-6 iCloud for Windows 7.11 Apple Product Security via Fulldisclosure (Mar 26)
APPLE-SA-2019-3-25-4 Safari 12.1 Apple Product Security via Fulldisclosure (Mar 26)
APPLE-SA-2019-3-25-2 macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierra Apple Product Security via Fulldisclosure (Mar 26)
APPLE-SA-2019-3-25-3 tvOS 12.2 Apple Product Security via Fulldisclosure (Mar 26)
APPLE-SA-2019-3-25-5 iTunes 12.9.4 for Windows Apple Product Security via Fulldisclosure (Mar 26)
APPLE-SA-2019-3-27-1 watchOS 5.2 Apple Product Security via Fulldisclosure (Mar 29)
APPLE-SA-2019-3-25-7 Xcode 10.2 Apple Product Security via Fulldisclosure (Mar 26)
APPLE-SA-2019-3-25-1 iOS 12.2 Apple Product Security via Fulldisclosure (Mar 26)

Axel Boesenach

Apache UNO API RCE Axel Boesenach (Mar 01)

Bailey Fox

Repeat of CVE-2018-4251 in Razer Laptops Bailey Fox (Mar 26)

cfp

Recon 2019 Call For Papers - June 28 - 30, 2019 - Montreal, Canada cfp (Mar 26)

David Coomber

Cisco Common Service Platform Collector - Hardcoded Credentials (CVE-2019-1723) David Coomber (Mar 16)

Ece örsel

SAP J2EE Engine/7.01/Fiori Reflected Cross Site Scripting (XSS) Ece örsel (Mar 05)
SAP J2EE Engine/7.01/Portal/EPP Reflected Cross Site Scripting (XSS) Ece örsel (Mar 05)
SAP J2EE Engine/7.01/Fiori Reflected Cross Site Scripting (XSS) Ece örsel (Mar 05)
SAP J2EE Engine/7.01/Fiori Reflected Cross Site Scripting (XSS) Ece örsel (Mar 05)
SAP J2EE Engine/7.01/Portal/EPP Reflected Cross Site Scripting (XSS) Ece örsel (Mar 05)
SAP J2EE Engine/7.01/Fiori Reflected Cross Site Scripting (XSS) Ece örsel (Mar 05)

Fernando Gont

IPv6 Security for IPv4 Engineers Fernando Gont (Mar 16)

Henri Salo

Re: Contact Form Email 7.10.41 - Reflected XSS & CSRF (WordPress Plugin) Henri Salo (Mar 12)
Re: WordPress Plugin GraceMedia Media Player 1.0 - Local File Inclusion Henri Salo (Mar 19)
Re: Quiz And Survey Master 6.0.4 - Reflected XSS (WordPress Plugin) Henri Salo (Mar 09)
Re: KingComposer 2.7.6 - Reflected XSS (WordPress Plugin) Henri Salo (Mar 22)
Re: NextScripts: Social Networks Auto-Poster 4.2.7 - Reflected XSS (WordPress Plugin) Henri Salo (Mar 22)
Re: Give 2.3.0 - Reflected XSS (WordPress Plugin) Henri Salo (Mar 22)
Re: wpGoogleMaps 7.10.41 - Reflected XSS (WordPress Plugin) Henri Salo (Mar 22)
Re: Blog2Social 5.0.2 - Reflected XSS (WordPress Plugin) Henri Salo (Mar 09)
Re: Forminator 1.5.4 - Unauthenticated Persistent XSS, Blind SQL Injection (WordPress Plugin) Henri Salo (Mar 05)
Re: YOP Poll 6.0.2 - Reflected XSS (WordPress Plugin) Henri Salo (Mar 22)
Re: Font_Organizer 2.1.1 - Reflected XSS (WordPress Plugin) Henri Salo (Mar 22)
Re: WP Live Chat Support 8.0.17 - Reflected XSS (WordPress Plugin) Henri Salo (Mar 22)

hyp3rlinx

[**UPDATED] Microsoft Windows .Reg File / Dialog Box Message Spoofing 0day hyp3rlinx (Mar 16)
Microsoft Windows .Reg File / Dialog Box Message Spoofing Vulnerability hyp3rlinx (Mar 12)

Jan Kopriva

Open Redirection vulnerability in Babel (CMSMS Module) Jan Kopriva (Mar 05)

Jaroslav Lobačevski

SQL injection in joshcam/mysqli-database-class library Jaroslav Lobačevski (Mar 16)

Kevin R

CVE-2019-9648 CoreFTP Server FTP / SFTP Server v2 - Build 674 SIZE Directory Traversal Kevin R (Mar 12)
CVE-2019-10009 Titan FTP Server Version 2019 Build 3505 Directory Traversal/Local File Inclusion Kevin R (Mar 26)
CVE-2019-9649 CoreFTP FTP / SFTP Server v2 - Build 674 MDTM Directory Traversal Kevin R (Mar 12)

Manuel Garcia Cardenas

WordPress Plugin GraceMedia Media Player 1.0 - Local File Inclusion Manuel Garcia Cardenas (Mar 16)

Matthias Deeg

[SYSS-2018-034]: ABUS Secvest - Rolling Code - Predictable from Observable State (CWE-341) Matthias Deeg (Mar 26)
[SYSS-2018-033]: Fujitsu Wireless Keyboard Set LX901 - Keystroke Injection Vulnerability Matthias Deeg (Mar 16)
[SYSS-2018-036]: ABUS Secvest Remote Control - Denial of Service - Uncontrolled Resource Consumption (CWE-400) Matthias Deeg (Mar 26)
[SYSS-2018-035]: ABUS Secvest Remote Control - Missing Encryption of Sensitive Data (CWE-311) Matthias Deeg (Mar 26)

Paolo G

CVE-2018-17057: phar deserialization in TCPDF might lead to RCE Paolo G (Mar 22)

psy

UFONet v-1.3 - [SLY] SingularitY! psy (Mar 09)

Rafael Pedrero

[CVE-2019-9206, CVE-2019-9207] Cross Site Scripting in PRTG Network Monitor v7.1.3.3378 Rafael Pedrero (Mar 01)

redazione

FlexPaper <= 2.3.6 Remote Command Execution redazione (Mar 12)

RedForce Advisory

SHAREit for Android Authentication Bypass and Remote File Download RedForce Advisory (Mar 01)

RedTeam Pentesting GmbH

[RT-SA-2019-004] Cisco RV320 Unauthenticated Diagnostic Data Retrieval RedTeam Pentesting GmbH (Mar 27)
[RT-SA-2019-003] Cisco RV320 Unauthenticated Configuration Export RedTeam Pentesting GmbH (Mar 27)
[RT-SA-2019-007] Code Execution via Insecure Shell Function getopt_simple RedTeam Pentesting GmbH (Mar 26)
[RT-SA-2019-005] Cisco RV320 Command Injection Retrieval RedTeam Pentesting GmbH (Mar 27)

(RS) Tyler Schroder via Fulldisclosure

2FA & macOS Disk Encryption Bypass in Abine Blur 7.24* [CVE-2019-6481] (RS) Tyler Schroder via Fulldisclosure (Mar 19)

Ryan Delaney

Sagemcom router insufficient default PSK entropy Ryan Delaney (Mar 05)

Sebastian Neef

CVE-2019-6726: Arbitrary File Deletion in WP fastest Cache <= 0.8.9.0 Sebastian Neef (Mar 09)

secure

DSA-2019-025: RSA Archer GRC Platform Multiple Vulnerabilities secure (Mar 01)
DSA-2019-025: RSA Archer GRC Platform Multiple Vulnerabilities secure (Mar 09)
ESA-2017-123: EMC Networker Remote Code Execution Vulnerability secure (Mar 26)
DSA-2019-038: RSA® Authentication Manager Insecure Credential Management Vulnerability secure (Mar 01)

SecureAuth Advisories

[SAUTH-2019-0002] - Pydio 8 Multiple Vulnerabilities SecureAuth Advisories (Mar 29)

Security Explorations

[SE-2019-01] Java Card vulnerabilities Security Explorations (Mar 20)

Timo Lindfors

CVE-2018-19971: JFrog Artifactory Pro SAML SSO signature validation error Timo Lindfors (Mar 19)

Vulnerability Lab

Sparkasse - Multiple Persistent Cross Site Scripting Web Vulnerabilities Vulnerability Lab (Mar 07)