Mail Index

• Thread Index

• [FD] [RT-SA-2019-012] Information Disclosure in REDDOXX Appliance
  • From: RedTeam Pentesting GmbH
• [FD] Microsoft File Checksum Integrity Verifier "fciv.exe" v2.05 / DLL Hijack Arbitrary Code Execution
  • From: hyp3rlinx
• [FD] [SYSS-2019-021]: WolfVision Cynap - Use of Hard-coded Cryptographic Key (CWE-321)
  • From: Matthias Deeg
• [FD] Razer Synapse 3, Laptops Ship with Re-used Root Certificate with Private Key
  • From: No One
• [FD] Polycom RealPresence Touch device vulnerable to Slowloris attack (hardware version 7; OS version 2.1.2-255)
  • From: Eitan shav
• [FD] KEYNTO Team Password Manager 1.5.0 - Cross Site Scripting [CVE-2019-13380]
  • From: gionreale
• [FD] Zoom Zero Day: 4+ Million Webcams & maybe an RCE? Just get them to visit your website!
  • From: Jonathan Leitschuh
• [FD] UPDATE: [SYSS-2019-021]: WolfVision Cynap - Use of Hard-coded Cryptographic Key (CWE-321) [CVE-2019-13352]
  • From: Matthias Deeg
• [FD] Vulnerabilities in TP-Link TL-WR940N and TL-WR941ND
  • From: MustLive
• [FD] Cisco Data Center Manager multiple vulns; RCE as root
  • From: Pedro Ribeiro
• [FD] Two vulnerabilities found in Sony BRAVIA Smart TVs
  • From: xen1thLabs
• [FD] PowerPanel Business Edition 3.4.0 - Cross Site Request Forgery
  • From: Joey Lane via Fulldisclosure
• [FD] Mozilla's MSI installers: FUBAR (that's spelled "fucked-up beyond all repair")
  • From: Stefan Kanthak
• [FD] AST-2019-002: Remote crash vulnerability with MESSAGE messages
  • From: Asterisk Security Team
• [FD] AST-2019-003: Remote Crash Vulnerability in chan_sip channel driver
  • From: Asterisk Security Team
• [FD] Reflected Cross-site Scripting Vulnerability in Ponzu CMS 0.9.4
  • From: Daniel Bishtawi
• Re: [FD] Microsoft Compiled HTML Help / Uncompiled .chm File XML External Entity
  • From: hyp3rlinx
• [FD] CVE-2019-13577 / MAPLE Computer WBT SNMP Administrator v2.0.195.15 / Unauthenticated Remote Buffer Overflow Code Execution 0day
  • From: hyp3rlinx
• [FD] CVE-2019-2107 a.k.a "Hevcfright" Proof of Concept exploit (Denial of Service PoC)
  • From: Marcin Kozlowski
• Re: [FD] local privilege escalation via CDE dtprintinfo
  • From: Marco Ivaldi
• [FD] Two vulnerabilities found in MikroTik's RouterOS
  • From: Q C
• [FD] Tufin SecureChange uses Richfaces 4.3.5, vulnerable to CVE-2015-0279 (unauthenticated RCE)
  • From: csirt
• [FD] APPLE-SA-2019-7-22-2 macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra
  • From: Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-2019-7-22-1 iOS 12.4
  • From: Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-2019-7-22-4 watchOS 5.3
  • From: Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-2019-7-22-3 Safari 12.1.2
  • From: Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-2019-7-22-5 tvOS 12.4
  • From: Apple Product Security via Fulldisclosure
• [FD] Trend Micro Deep Discovery Inspector IDS / Percent Encoding IDS Bypass
  • From: hyp3rlinx
• [FD] Whonix Anonymous OS 15 Released
  • From: bo0od
• [FD] Code Evaluation Vulnerability in Zurmo 3.2.6
  • From: Daniel Bishtawi
• [FD] Reflected Cross-site Scripting Vulnerability in Zurmo 3.2.6
  • From: Daniel Bishtawi
• [FD] Out of Band Code Evaluation Vulnerability in Zurmo 3.2.6
  • From: Daniel Bishtawi
• [FD] Stored Cross-site Scripting Vulnerability in Zurmo 3.2.6
  • From: Daniel Bishtawi
• [FD] Frame Injection Vulnerability in Zurmo 3.2.6
  • From: Daniel Bishtawi
• [FD] Open Redirection Vulnerability in Zurmo 3.2.6
  • From: Daniel Bishtawi
• [FD] [SYSS-2019-004]: ABUS Secvest (FUAA50000) - Message Transmission - Unchecked Error Condition (CWE-391) (CVE-2019-14261)
  • From: Matthias Deeg
• [FD] APPLE-SA-2019-7-23-3 iCloud for Windows 10.6
  • From: Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-2019-7-23-1 iCloud for Windows 7.13
  • From: Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-2019-7-23-2 iTunes for Windows 12.9.6
  • From: Apple Product Security via Fulldisclosure
• [FD] VTS19-002: Multiple Vulnerabilities in Veritas Resiliency Platform (VRP)
  • From: David Dillard