Full Disclosure: by author

52 messages starting Jul 07 23 and ending Jul 07 23
Date index | Thread index | Author index


0xf--- via Fulldisclosure

[tool] tc - anonymous and cyphered chat over Tor circuits in PGP 0xf--- via Fulldisclosure (Jul 07)

Andrey Stoykov

WBCE - Stored XSS Andrey Stoykov (Jul 16)
Availability Booking Calendar PHP - Stored XSS and Unrestricted File Upload Andrey Stoykov (Jul 25)
SQLi - Faculty Evaluation System Andrey Stoykov (Jul 07)
Unquoted Path - XAMPP 8.2.4 Andrey Stoykov (Jul 11)

Apple Product Security via Fulldisclosure

APPLE-SA-2023-07-10-3 Rapid Security Responses for macOS Ventura 13.4.1 Apple Product Security via Fulldisclosure (Jul 11)
APPLE-SA-2023-06-21-3 iOS 15.7.7 and iPadOS 15.7.7 Apple Product Security via Fulldisclosure (Jul 07)
APPLE-SA-2023-06-21-8 watchOS 8.8.1 Apple Product Security via Fulldisclosure (Jul 07)
APPLE-SA-2023-06-21-6 macOS Big Sur 11.7.8 Apple Product Security via Fulldisclosure (Jul 07)
APPLE-SA-2023-07-24-2 iOS 16.6 and iPadOS 16.6 Apple Product Security via Fulldisclosure (Jul 25)
APPLE-SA-2023-06-21-1 Safari 16.5.1 Apple Product Security via Fulldisclosure (Jul 07)
APPLE-SA-2023-07-24-5 macOS Monterey 12.6.8 Apple Product Security via Fulldisclosure (Jul 25)
APPLE-SA-2023-07-24-3 iOS 15.7.8 and iPadOS 15.7.8 Apple Product Security via Fulldisclosure (Jul 25)
APPLE-SA-2023-06-21-2 iOS 16.5.1 and iPadOS 16.5.1 Apple Product Security via Fulldisclosure (Jul 07)
APPLE-SA-2023-06-21-4 macOS Ventura 13.4.1 Apple Product Security via Fulldisclosure (Jul 07)
APPLE-SA-2023-06-21-7 watchOS 9.5.2 Apple Product Security via Fulldisclosure (Jul 07)
APPLE-SA-2023-07-24-7 tvOS 16.6 Apple Product Security via Fulldisclosure (Jul 25)
APPLE-SA-2023-07-24-8 watchOS 9.6 Apple Product Security via Fulldisclosure (Jul 25)
APPLE-SA-2023-07-24-6 macOS Big Sur 11.7.9 Apple Product Security via Fulldisclosure (Jul 25)
APPLE-SA-2023-07-10-1 Safari 16.5.2 Apple Product Security via Fulldisclosure (Jul 11)
APPLE-SA-2023-07-24-1 Safari 16.6 Apple Product Security via Fulldisclosure (Jul 25)
APPLE-SA-2023-06-21-5 macOS Monterey 12.6.7 Apple Product Security via Fulldisclosure (Jul 07)
APPLE-SA-2023-07-24-4 macOS Ventura 13.5 Apple Product Security via Fulldisclosure (Jul 25)
APPLE-SA-2023-07-10-2 Rapid Security Responses for iOS 16.5.1 and iPadOS 16.5.1 Apple Product Security via Fulldisclosure (Jul 11)

Asterisk Development Team via Fulldisclosure

Asterisk Release 20.3.1 Asterisk Development Team via Fulldisclosure (Jul 11)
Asterisk Release 18.18.1 Asterisk Development Team via Fulldisclosure (Jul 11)
Asterisk Release 16.30.1 Asterisk Development Team via Fulldisclosure (Jul 11)
Asterisk Release 19.8.1 Asterisk Development Team via Fulldisclosure (Jul 11)
Asterisk Release certified-18.9-cert5 Asterisk Development Team via Fulldisclosure (Jul 11)

bo0od via Fulldisclosure

Re: [tool] tc - anonymous and cyphered chat over Tor circuits in PGP bo0od via Fulldisclosure (Jul 11)

info () esec-service de

Citrix Gateway & Cloud MFA - Insufficient Session Validation Vulnerability info () esec-service de (Jul 07)

info () vulnerability-lab com

Boom CMS v8.0.7 - Cross Site Scripting Vulnerability info () vulnerability-lab com (Jul 19)
Aures Booking & POS Terminal - Local Privilege Escalation Vulnerability info () vulnerability-lab com (Jul 19)
Webile v1.0.1 - Multiple Cross Site Web Vulnerabilities info () vulnerability-lab com (Jul 19)
PaulPrinting CMS - Multiple Cross Site Web Vulnerabilities info () vulnerability-lab com (Jul 19)
Tiva Events Calender v1.4 - Cross Site Scripting Vulnerability info () vulnerability-lab com (Jul 19)
Dooblou WiFi File Explorer 1.13.3 - Multiple Vulnerabilities info () vulnerability-lab com (Jul 19)
PaulPrinting CMS - (Search Delivery) Cross Site Scripting Vulnerability info () vulnerability-lab com (Jul 19)
Active Super Shop CMS v2.5 - HTML Injection Vulnerabilities info () vulnerability-lab com (Jul 19)

Jeffrey Walton

Re: Citrix Gateway & Cloud MFA - Insufficient Session Validation Vulnerability Jeffrey Walton (Jul 19)

Jens Timmerman

Re: Citrix Gateway & Cloud MFA - Insufficient Session Validation Vulnerability Jens Timmerman (Jul 16)

Luke Symons

ServiceNow Account Takeover to Full Admin Compromise Luke Symons (Jul 07)

malvuln

Re: Ransom.Haron / Code Execution malvuln (Jul 11)

Matthias Deeg via Fulldisclosure

[SYSS-2023-006]: Omnis Studio - Expected Behavior Violation (CWE-440) (CVE-2023-38334) Matthias Deeg via Fulldisclosure (Jul 21)
[SYSS-2023-005]: Omnis Studio - Expected Behavior Violation (CWE-440) (CVE-2023-38335) Matthias Deeg via Fulldisclosure (Jul 21)

Qualys Security Advisory via Fulldisclosure

CVE-2023-38408: Remote Code Execution in OpenSSH's forwarded ssh-agent Qualys Security Advisory via Fulldisclosure (Jul 19)

RedTeam Pentesting GmbH

[RT-SA-2023-001] Session Token Enumeration in RWS WorldServer RedTeam Pentesting GmbH (Jul 19)

SEC Consult Vulnerability Lab, Research via Fulldisclosure

SEC Consult SA-20230627-0 :: Multiple high risk vulnerabilities in ILIAS eLearning platform SEC Consult Vulnerability Lab, Research via Fulldisclosure (Jul 07)
SEC Consult SA-20230705-0 :: Path traversal bypass & Denial of service in Kyocera TASKalfa 4053ci printer SEC Consult Vulnerability Lab, Research via Fulldisclosure (Jul 07)
SEC Consult SA-20230628-0 :: Stored XSS & Privilege Escalation in Boomerang Parental Control App SEC Consult Vulnerability Lab, Research via Fulldisclosure (Jul 07)
SEC Consult Vulnerability Lab Whitepaper: Everyone Knows SAPĀ®, Everyone Uses SAP, Everyone Uses RFC, No One Knows RFC: From RFC to RCE 16 Years Later SEC Consult Vulnerability Lab, Research via Fulldisclosure (Jul 07)
SEC Consult SA-20230703-0 :: Multiple Vulnerabilities including Unauthenticated RCE in Siemens A8000 SEC Consult Vulnerability Lab, Research via Fulldisclosure (Jul 07)