fulldisclosure

Messages by Date

2021/01/19 [FD] Email-Worm.Win32.Agent.gi / Remote Stack Buffer Overflow - (UDP Datagram) malvuln
2021/01/19 [FD] Constructor.Win32.SMWG.c / Insecure Permissions malvuln
2021/01/19 [FD] Constructor.Win32.SMWG.a / Insecure Permissions malvuln
2021/01/19 [FD] Newfuture Trojan V.1.0 BETA 1 / Insecure Permissions malvuln
2021/01/19 [FD] Backdoor.Win32.Mnets / Remote Stack Buffer Overflow - (UDP Datagram Proto) malvuln
2021/01/19 [FD] Backdoor.Win32.Whgrx / Remote Host Header Stack Buffer Overflow malvuln
2021/01/19 [FD] Backdoor.Win32.Latinus.b / Remote Buffer Overflow malvuln
2021/01/19 [FD] Backdoor.Win32.Nucleroot.t - MaskPE 1.6 / File Based Buffer Overflow malvuln
2021/01/19 [FD] Backdoor.Win32.Nucleroot.bi - MaskPE 2.0 / File Based Buffer Overflow malvuln
2021/01/19 [FD] Backdoor.Win32.Ncx.bt / Remote Stack Buffer Overflow malvuln
2021/01/19 [FD] BACKDOOR.WIN32.KETCH.A / Remote SEH Stack Buffer Overflow malvuln
2021/01/19 [FD] Backdoor.Win32.Ketch.i / SEH Remote Stack Buffer Overflow malvuln
2021/01/19 [FD] BACKDOOR.WIN32.KURBADUR.A / Remote Stack Buffer Overflow malvuln
2021/01/19 Re: [FD] Trovent Security Advisory 2010-01 [updated] / CVE-2020-28208: Rocket.Chat email address enumeration vulnerability Stefan Pietsch
2021/01/19 Re: [FD] Backdoor.Win32.NinjaSpy.c / Remote Stack Buffer Overflow network.mp4 via Fulldisclosure
2021/01/19 Re: [FD] Backdoor.Win32.Xtreme.yvp / Insecure Permissions EoP network.mp4 via Fulldisclosure
2021/01/13 [FD] SEC Consult SA-20210113-1 :: Multiple vulnerabilities in flatCore CMS SEC Consult Vulnerability Lab
2021/01/13 [FD] SEC Consult SA-20210113-0 :: Multiple vulnerabilities in Pepperl+Fuchs IO-Link Master Series SEC Consult Vulnerability Lab
2021/01/12 [FD] Backdoor.Win32.Zombam.a / Remote Stack Buffer Overflow malvuln
2021/01/12 [FD] Backdoor.Win32.Levelone.b / Remote Stack Buffer Overflow malvuln
2021/01/12 [FD] Backdoor.Win32.Levelone.a / Remote Stack Buffer Overflow malvuln
2021/01/12 [FD] Backdoor.Win32.Ketch.b / Remote Stack Buffer Overflow malvuln
2021/01/12 Re: [FD] Backdoor.Win32.Xtreme.yvp / Insecure Permissions EoP bo0od
2021/01/12 [FD] Advisory: ES2021-01 - Loopback access control bypass in coturn by using 0.0.0.0, [::1] or [::] as the peer address Sandro Gauci
2021/01/12 Re: [FD] Trovent Security Advisory 2010-01 [updated] / CVE-2020-28208: Rocket.Chat email address enumeration vulnerability Stefan Pietsch
2021/01/12 [FD] Envira Gallery - Lite Edition - Version 1.8.3.2 CVE-2020-35581 CVE-2020-35582 Rodolfo Augusto do Nascimento Tavares
2021/01/12 [FD] Multiple vulnerabilities found in FiberHome HG6245D routers Pierre Kim
2021/01/12 Re: [FD] Backdoor.Win32.NinjaSpy.c / Remote Stack Buffer Overflow Matthew Fernandez
2021/01/07 [FD] Trovent Security Advisory 2010-01 / CVE-2020-28208: Rocket.Chat email address enumeration vulnerability Stefan Pietsch
2021/01/07 [FD] Open-Xchange Security Advisory 2021-01-07 Martin Heiland via Fulldisclosure
2021/01/07 [FD] Backdoor.Win32.NinjaSpy.c / Remote Stack Buffer Overflow malvuln
2021/01/07 [FD] Backdoor.Win32.Xtreme.yvp / Insecure Permissions EoP malvuln
2021/01/07 [FD] Backdoor.Win32.Agent.dcbh / Insecure Permissions EoP malvuln
2021/01/06 [FD] [KIS-2021-01] IPS Community Suite <= 4.5.4 (Downloads REST API) SQL Injection Vulnerability Egidio Romano
2021/01/06 [FD] Backdoor.Win32.Zombam.k / Remote Stack Buffer Overflow malvuln
2021/01/06 [FD] Files.com - Auth Bypass (Fat Client) Balázs Hambalkó
2021/01/06 [FD] CVE-2020-24386: IMAP hibernation allows accessing other peoples mail Aki Tuomi
2021/01/06 [FD] CVE-2020-24386: IMAP hibernation allows accessing other peoples mail Aki Tuomi
2021/01/03 [FD] Threat: Trojan.Win32.Antavka.bz / Insecure Permissions EoP malvuln
2021/01/03 [FD] WIN32 BACKDOOR - 2019-02-ARTRADOWNLOADER / Remote SEH Buffer Overflow and Insecure Permissions malvuln
2021/01/03 [FD] Backdoor.Win32.Infexor.b / Remote Buffer Overflow malvuln
2021/01/03 [FD] Trojan.Win32.Barjac / Remote Stack Buffer Overflow. malvuln
2021/01/03 [FD] Trojan.Win32.Bayrob.cgau / Insecure Permissions EoP (SYSTEM) malvuln
2021/01/03 [FD] Email-Worm.Win32.Zhelatin.ago / Remote Stack Buffer Overflow malvuln
2021/01/03 [FD] Trojan:Win32/Alyak.B / Remote Stack Corruption malvuln
2021/01/03 [FD] [KIS-2020-11] qdPM <= 9.1 (executeExport) PHP Object Injection Vulnerability Egidio Romano
2021/01/03 [FD] BACKDOOR.WIN32.ADVERBOT / Remote Stack Corruption malvuln
2021/01/03 [FD] BACKDOOR.WIN32.REMOTEMANIPULATOR / Insecure Permissions malvuln
2021/01/03 [FD] Backdoor.Win32.Zombam.j / Remote Stack Buffer Overflow malvuln
2021/01/03 [FD] HEUR.RISKTOOL.WIN32.BITMINER.GEN / Remote Memory Corruption malvuln
2021/01/03 [FD] TROJAN.WIN32.JORIK.DMSPAMMER.SZ / Remote Memory Corruption malvuln
2021/01/03 [FD] Phorpiex / Insecure permissions EoP malvuln
2021/01/03 [FD] BACKDOOR.WIN32.BNLITE / Remote Heap Corruption malvuln
2021/01/03 [FD] Stored XSS In Hyland's Enterprise Search johnkennedy
2021/01/03 [FD] Multiple vulnerabilities found in Rock RMS including RCE and account takeover Cyber Security Research Group via Fulldisclosure
2021/01/03 [FD] Multiple vulnerabilities in Gotenberg <= 6.2.0 Błażej Adamczyk
2020/12/29 [FD] survey on reliability of CVSS Zinaida Benenson
2020/12/29 Re: [FD] CVE-2020-8150 – Remote Code Execution as SYSTEM/root via Backblaze Mark E. Jeftovic
2020/12/29 Re: [FD] CVE-2020-8150 – Remote Code Execution as SYSTEM/root via Backblaze Jason Geffner
2020/12/29 [FD] Cross-Site Scripting Vulnerabilities in SEOPanel 4.6.0 Daniel Bishtawi via Fulldisclosure
2020/12/25 Re: [FD] CVE-2020-8150 – Remote Code Execution as SYSTEM/root via Backblaze Reed Loden
2020/12/25 Re: [FD] CVE-2020-8152 – Elevation of Privilege in Backblaze Reed Loden
2020/12/25 [FD] CarolinaCon Online CFP CarolinaCon
2020/12/25 [FD] [CVE-2018-7580] - Philips Hue Denial of Service Ilia Shnaidman
2020/12/25 Re: [FD] CVE-2020-8152 – Elevation of Privilege in Backblaze Jason Geffner
2020/12/25 Re: [FD] CVE-2020-8150 – Remote Code Execution as SYSTEM/root via Backblaze Jason Geffner
2020/12/25 [FD] SYSS-2020-042 Urve - Exposure of Sensitive Information to an Unauthorized Actor (CWE-200) Erik Steltzner
2020/12/25 [FD] SYSS-2020-041 Urve - Missing Authorization (CWE-862) Erik Steltzner
2020/12/25 [FD] SYSS-2020-040 Urve - Missing Authentication for Critical Function (CWE-306) Erik Steltzner
2020/12/22 [FD] AST-2020-004: Remote crash in res_pjsip_diversion Asterisk Security Team
2020/12/22 [FD] AST-2020-003: Remote crash in res_pjsip_diversion Asterisk Security Team
2020/12/21 [FD] Rocket.Chat Path Traversal Moe Szyslak
2020/12/21 [FD] remote code execution when open a project in android studio that google refused to fix(still 0day) houjingyi
2020/12/21 [FD] SUPREMO Local privilege escalation Adan Alvarez
2020/12/18 [FD] Defense in depth -- the Microsoft way (part 68): where compatibility means vulnerability Stefan Kanthak
2020/12/18 [FD] Rocket.Chat quietly patches XSS vulnerability Moe Szyslak
2020/12/18 [FD] CA20201215-01: Security Notice for CA Service Catalog Kevin Kotas via Fulldisclosure
2020/12/18 [FD] Programi Bilanc - Build 007 Release 014 31.01.2020 - Software-update packages are downloaded via unencrypted HTTP [CVE-2020-11718] Georg Ph E Heise via Fulldisclosure
2020/12/18 [FD] Programi Bilanc - Build 007 Release 014 31.01.2020 - Broken encryption with guessable static encryption key [CVE-2020-8995] Georg Ph E Heise via Fulldisclosure
2020/12/18 [FD] Programi Bilanc - Build 007 Release 014 31.01.2020 - Multiple SQL Injections [CVE-2020-11717] Georg Ph E Heise via Fulldisclosure
2020/12/18 [FD] Programi Bilanc - Build 007 Release 014 31.01.2020 - Broken encryption with guessable static encryption key [CVE-2020-11719] Georg Ph E Heise via Fulldisclosure
2020/12/18 [FD] Programi Bilanc - Build 007 Release 014 31.01.2020 - Use of weak default Password - CVE-2020-11720 Georg Ph E Heise via Fulldisclosure
2020/12/17 [FD] SEC Consult SA-20201217-0 :: Multiple critical vulnerabilities in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) SEC Consult Vulnerability Lab
2020/12/15 [FD] APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1 Apple Product Security via Fulldisclosure
2020/12/15 [FD] APPLE-SA-2020-12-14-9 macOS Server 5.11 Apple Product Security via Fulldisclosure
2020/12/15 [FD] APPLE-SA-2020-12-14-8 Safari 14.0.2 Apple Product Security via Fulldisclosure
2020/12/15 [FD] APPLE-SA-2020-12-14-7 tvOS 14.3 Apple Product Security via Fulldisclosure
2020/12/15 [FD] APPLE-SA-2020-12-14-6 watchOS 6.3 Apple Product Security via Fulldisclosure
2020/12/15 [FD] APPLE-SA-2020-12-14-5 watchOS 7.2 Apple Product Security via Fulldisclosure
2020/12/15 [FD] APPLE-SA-2020-12-14-3 macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave Apple Product Security via Fulldisclosure
2020/12/15 [FD] APPLE-SA-2020-12-14-2 iOS 12.5 Apple Product Security via Fulldisclosure
2020/12/15 [FD] APPLE-SA-2020-12-14-1 iOS 14.3 and iPadOS 14.3 Apple Product Security via Fulldisclosure
2020/12/11 Re: [FD] Disable Windows Defender and most other 3rd party antiviruses Roberto Franceschetti
2020/12/11 [FD] Stored XSS in Online bus booking system krishna yadav
2020/12/11 [FD] Vulnerability Path Traversal ACS n0ipr0cs
2020/12/11 Re: [FD] Disable Windows Defender and most other 3rd party antiviruses edwin
2020/12/11 [FD] Cross-Site Scripting Vulnerabilities in BigtreeCMS 4.4.11 Daniel Bishtawi via Fulldisclosure
2020/12/09 [FD] Huawei HedEx Lite (DM) - Path Traversal Web Vulnerability Vulnerability Lab
2020/12/08 [FD] VestaCP v0.9.8-26 - (LoginAs) Token Session Vulnerability Vulnerability Lab
2020/12/08 [FD] VestaCP v0.9.8-26 - Insufficient Session Validation Web Vulnerability Vulnerability Lab
2020/12/08 [FD] VestaCP v0.9.8-26 - (period) Cross Site Scripting Web Vulnerability Vulnerability Lab
2020/12/08 Re: [FD] Disable Windows Defender and most other 3rd party antiviruses Exibar
2020/12/07 [FD] Disable Windows Defender and most other 3rd party antiviruses Roberto Franceschetti
2020/12/04 [FD] ProCaster LE-32F430 SmartTV RCE via libsoup/2.51.3 stack overflow (CVE-2017-2885) def
2020/12/04 [FD] New BlackArch Linux ISOs + OVA Image released! Black Arch
2020/12/03 [FD] Bundeswehr VDPBw 50+ reported vulnerabilities Vulnerability Lab
2020/12/01 Re: [FD] Etherify 4 - jumping air gaps with real ethernet hardware Dave Horsfall
2020/11/30 [FD] scikit-learn 0.23.2 Local Denial of Service pabloec20
2020/11/30 [FD] Etherify 4 - jumping air gaps with real ethernet hardware Jacek Lipkowski
2020/11/23 [FD] SEC Consult SA-20201123-0 :: Multiple Vulnerabilities in ZTE WLAN router MF253V SEC Consult Vulnerability Lab
2020/11/23 [FD] CA20201116-01: Security Notice for CA Unified Infrastructure Management Ken Williams via Fulldisclosure
2020/11/20 [FD] KL-001-2020-009 : Barco wePresent Insecure Firmware Image KoreLogic Disclosures via Fulldisclosure
2020/11/20 [FD] KL-001-2020-008 : Barco wePresent Global Hardcoded Root SSH Password KoreLogic Disclosures via Fulldisclosure
2020/11/20 [FD] KL-001-2020-007 : Barco wePresent Undocumented SSH Interface Accessible Via Web UI KoreLogic Disclosures via Fulldisclosure
2020/11/20 [FD] KL-001-2020-006 : Barco wePresent Authentication Bypass KoreLogic Disclosures via Fulldisclosure
2020/11/20 [FD] KL-001-2020-005 : Barco wePresent Admin Credentials Exposed In Plain-text KoreLogic Disclosures via Fulldisclosure
2020/11/20 [FD] KL-001-2020-004 : Barco wePresent Hardcoded API Credentials KoreLogic Disclosures via Fulldisclosure
2020/11/20 [FD] VTiger v7.0 CRM - (To) Persistent Email Vulnerability Vulnerability Lab
2020/11/18 [FD] TCMalloc viewer/dumper - TCMalloc Inspector Tool Marcin Kozlowski
2020/11/18 [FD] SOWA.OPAC Reflected Cross Site Scripting hacker
2020/11/17 [FD] SEC Consult SA-20201117-0 :: Blind Out-Of-Band XML External Entity Injection in Avaya Web License Manager SEC Consult Vulnerability Lab
2020/11/17 [FD] Fancy Product Designer for WooCommerce - Unrestricted File Upload Jonathan Gregson via Fulldisclosure
2020/11/17 [FD] Fancy Product Designer for WooCommerce - Stored XSS via SVG upload Jonathan Gregson via Fulldisclosure
2020/11/16 [FD] SugarCRM v6.5.18 - (Contacts) Persistent Cross Site Web Vulnerability Vulnerability Lab
2020/11/16 [FD] SugarCRM v6.5.18 - (Employees) Persistent Cross Site Vulnerability Vulnerability Lab
2020/11/16 [FD] Intel NUC - Local Privilege Escalation Vulnerability Vulnerability Lab
2020/11/16 [FD] Buddypress v6.2.0 WP Plugin - Persistent Web Vulnerability Vulnerability Lab
2020/11/16 [FD] Froxlor v0.10.16 CP - (Customer) Persistent Vulnerability Vulnerability Lab
2020/11/16 [FD] SIGE (Joomla) 3.4.1 & 3.5.3 Pro - Multiple Vulnerabilities Vulnerability Lab
2020/11/15 [FD] APPLE-SA-2020-11-13-6 Additional information for APPLE-SA-2020-09-16-4 watchOS 7.0 Apple Product Security via Fulldisclosure
2020/11/15 [FD] APPLE-SA-2020-11-13-7 Additional information for APPLE-SA-2020-09-24-1 macOS Catalina 10.15.7, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave Apple Product Security via Fulldisclosure
2020/11/15 [FD] APPLE-SA-2020-11-13-3 Additional information for APPLE-SA-2020-09-16-1 iOS 14.0 and iPadOS 14.0 Apple Product Security via Fulldisclosure
2020/11/15 [FD] APPLE-SA-2020-11-13-4 Additional information for APPLE-SA-2020-09-16-2 tvOS 14.0 Apple Product Security via Fulldisclosure
2020/11/15 [FD] APPLE-SA-2020-11-13-5 Additional information for APPLE-SA-2020-09-16-3 Safari 14.0 Apple Product Security via Fulldisclosure
2020/11/15 [FD] APPLE-SA-2020-11-13-2 Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave Apple Product Security via Fulldisclosure
2020/11/15 Re: [FD] Scope of Debian's /home/loser is with permissions 755, default umask 002 Pim van Stam
2020/11/15 [FD] [SYSS-2020-037] Persistent Cross-site Scripting (CWE-79) in REDDOXX MailDepot (CVE-2020-26554) Micha Borrmann
2020/11/15 Re: [FD] Scope of Debian's /home/loser is with permissions 755, default umask 002 bo0od
2020/11/12 [FD] Scope of Debian's /home/loser is with permissions 755, default umask 002 Georgi Guninski
2020/11/12 [FD] Avian JVM FileOutputStream.write() Integer Overflow Pietro Oliva via Fulldisclosure
2020/11/10 [FD] [No cON Name] #ncn2k20 CFP online - Barcelona José Nicolás Castellano
2020/11/10 [FD] NtFileSins v2.2 / Windows NTFS Privileged File Access Enumeration Tool (Python v3) hyp3rlinx
2020/11/06 [FD] secuvera-SA-2020-01: Broken Object Level Authorization Vulnerability in OvulaRing-Webapplication Tobias Glemser
2020/11/06 [FD] Advisory: ES2020-02 - Asterisk crash due to INVITE flood over TCP Sandro Gauci
2020/11/06 [FD] APPLE-SA-2020-11-05-7 tvOS 14.2 Apple Product Security via Fulldisclosure
2020/11/06 [FD] APPLE-SA-2020-11-05-1 iOS 14.2 and iPadOS 14.2 Apple Product Security via Fulldisclosure
2020/11/06 [FD] APPLE-SA-2020-11-05-2 iOS 12.4.9 Apple Product Security via Fulldisclosure
2020/11/06 [FD] Etherify - bringing the ether back to ethernet Jacek Lipkowski
2020/11/05 [FD] AST-2020-002: Outbound INVITE loop on challenge with different nonce. Asterisk Security Team
2020/11/05 [FD] AST-2020-001: Remote crash in res_pjsip_session Asterisk Security Team
2020/11/05 [FD] Git LFS (git-lfs) - Remote Code Execution (RCE) exploit CVE-2020-27955 - Clone to Pwn Dawid Golunski
2020/11/04 [FD] SEC Consult SA-20201104-0 :: Multiple vulnerabilities in Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) SEC Consult Vulnerability Lab
2020/10/30 [FD] Chrome heap buffer overflow in freetype2 CVE-2020-15999 Marcin Kozlowski
2020/10/29 [FD] German armed forces launch security vulnerability disclosure program Vulnerability Lab
2020/10/27 [FD] [CVE-2020-25204] God Kings "com.innogames.core.frontend.notifications.receivers.LocalNotificationBroadcastReceiver" Improper Authorization Allowing In-Game Notification Spoofing Julien Ahrens (RCE Security)
2020/10/23 [FD] CVE-2020-24990 Q-SYS <= 8.2.1 TFTP Directory Traversal Kevin R
2020/10/23 [FD] Unicorn Emulator 1.0.2 is out! Nguyen Anh Quynh
2020/10/23 [FD] SEC Consult SA-20201023-0 :: Multiple Vulnerabilities in PubliXone SEC Consult Vulnerability Lab
2020/10/22 [FD] VL 2020-10-22 - German Bundeswehr starts own Responsible Disclosure Program (VDPBw) Vulnerability Lab
2020/10/21 [FD] [RT-SA-2020-005] Arbitrary File Disclosure and Server-Side Request Forgery in BigBlueButton RedTeam Pentesting GmbH
2020/10/20 Re: [FD] Google's Android: remote install backdoor in Google Play Services Pedro Cunha
2020/10/20 Re: [FD] Google's Android: remote install backdoor in Google Play Services Michael Lazin
2020/10/20 [FD] LISTSERV Maestro Remote Code Execution Vulnerability Ryan Wincey
2020/10/20 Re: [FD] Google's Android: remote install backdoor in Google Play Services Adrian Sanabria
2020/10/19 [FD] [RT-SA-2020-003] FRITZ!Box DNS Rebinding Protection Bypass RedTeam Pentesting GmbH
2020/10/16 [FD] Open-Xchange Security Advisory 2020-10-13 Open-Xchange GmbH via Fulldisclosure
2020/10/16 Re: [FD] Google's Android: remote install backdoor in Google Play Services Enrico Weigelt, metux IT consult
2020/10/16 [FD] Java deserialization vulnerability in QRadar RemoteJavaScript Servlet Securify B.V. via Fulldisclosure
2020/10/12 [FD] SEC Consult SA-20201012-0 :: Reflected Cross-Site Scripting and Unauthenticated Malicious File Upload in Sage DPW SEC Consult Vulnerability Lab
2020/10/09 [FD] Cisco Webex Teams Client for Windows DLL Hijacking Vulnerability houjingyi
2020/10/09 [FD] SEC Consult SA-20201008-0 :: Multiple Cross-Site Scripting Vulnerabilities in Confluence Marketplace Plugins SEC Consult Vulnerability Lab
2020/10/08 [FD] [RT-SA-2020-002] Denial of Service in D-Link DSR-250N RedTeam Pentesting GmbH
2020/10/06 [FD] Student Result Management System 1.0 - Multiple SQL Injection Vulnerabilities b1nary
2020/10/06 [FD] CVE-2020-24722: GAEN Protocol Metadata Deanonymization and Risk-score Inflation Issues Stefan Marsiske via Fulldisclosure
2020/10/06 [FD] CVE-2020-25790 Rodolfo Augusto do Nascimento Tavares
2020/10/06 [FD] FortSIEM <= 5.2.8 RCE due to EL Injection - analysis Red Timmy Security
2020/10/06 Re: [FD] Navy Federal Reflective Cross Site Scripting (XSS) Ken
2020/10/06 [FD] Recon Informer v1.2 - Intel for offensive systems tool. hyp3rlinx
2020/10/06 [FD] XSS in krpano Panorama Viewer Adriano Marcio Monteiro
2020/10/05 [FD] SEC Consult SA-20201005-0 :: Multiple Critical Vulnerabilities in RocketLinx Series SEC Consult Vulnerability Lab
2020/10/02 [FD] SEC Consult SA-20201002-0 :: Multiple Vulnerabilities in SevOne Network Management System (NMS) SEC Consult Vulnerability Lab
2020/10/02 [FD] SEC Consult SA-20201001-0 :: Broken Access Control in Platinum Mobile SEC Consult Vulnerability Lab
2020/10/02 [FD] [SYSS-2019-048] Improper Authorization (CWE-285) in REDDOXX MailDepot (CVE-2019-19200) Micha Borrmann
2020/10/02 [FD] How to build Win2k3 Gregory Boddin
2020/10/02 [FD] CVE-2020-12676 - FusionAuth SAML v2.0 bindings in Java using JAXB - Signature Exclusion Attack Advisories
2020/10/02 [FD] CSNC-2020-005 - Checkmk Local Privilege Escalation Advisories
2020/09/29 Re: [FD] Navy Federal Reflective Cross Site Scripting (XSS) AdaptiveSecurity Consulting via Fulldisclosure
2020/09/29 [FD] CVE-2020-24721: Corona Exposure Notifications API: risk of coercion/data leakage [vs] Dirk-Willem van Gulik
2020/09/29 [FD] Critical Information Disclosure on WP Courses plugin <= 2.0.29 exposes private course videos and materials Red Timmy Security
2020/09/29 [FD] [SYSS-2020-025] DOMOS 5.8 - OS Command Injection Patrick Hener
2020/09/29 [FD] [SYSS-2020-024] Qiata FTA - Persistent Cross-Site Scripting Patrick Hener
2020/09/29 [FD] [SYSS-2019-049] Insufficient Session Expiration (CWE-613) in REDDOXX MailDepot (CVE-2019-19199) Micha Borrmann
2020/09/29 [FD] Regarding the semi-recent OnBase vulnerabilities Ken
2020/09/24 [FD] APPLE-SA-2020-09-24-1 macOS Catalina 10.15.6 Supplemental Update, Security Update 2020-005 High Sierra, Security Update 2020-005 Mojave Apple Product Security via Fulldisclosure
2020/09/22 [FD] Google's osconfig agent - local privilege escalation Imre Rad
2020/09/22 [FD] [CVE-2020-25203] Frame Preview "com.framer.viewer.FramerViewActivity" Arbitrary URL Loading Julien Ahrens (RCE Security)
2020/09/22 [FD] Visitor Management System in PHP 1.0 - Unauthenticated Stored XSS Ava Tester One
2020/09/22 [FD] Visitor Management System in PHP 1.0 - Authenticated SQL Injection Ava Tester One
2020/09/22 [FD] Seat Reservation System 1.0 Unauthenticated SQL Injection (CVE-2020-25762) Ava Tester One
2020/09/22 [FD] Seat Reservation System 1.0 Unauthenticated Remote Code Execution (CVE-2020-25763) Ava Tester One