Mail Thread Index

• Date Index

• [FD] [RT-SA-2019-012] Information Disclosure in REDDOXX Appliance, RedTeam Pentesting GmbH
• [FD] Microsoft File Checksum Integrity Verifier "fciv.exe" v2.05 / DLL Hijack Arbitrary Code Execution, hyp3rlinx
• [FD] [SYSS-2019-021]: WolfVision Cynap - Use of Hard-coded Cryptographic Key (CWE-321), Matthias Deeg
• [FD] Razer Synapse 3, Laptops Ship with Re-used Root Certificate with Private Key, No One
• [FD] Polycom RealPresence Touch device vulnerable to Slowloris attack (hardware version 7; OS version 2.1.2-255), Eitan shav
• [FD] KEYNTO Team Password Manager 1.5.0 - Cross Site Scripting [CVE-2019-13380], gionreale
• [FD] Zoom Zero Day: 4+ Million Webcams & maybe an RCE? Just get them to visit your website!, Jonathan Leitschuh
• [FD] UPDATE: [SYSS-2019-021]: WolfVision Cynap - Use of Hard-coded Cryptographic Key (CWE-321) [CVE-2019-13352], Matthias Deeg
• [FD] Vulnerabilities in TP-Link TL-WR940N and TL-WR941ND, MustLive
• [FD] Cisco Data Center Manager multiple vulns; RCE as root, Pedro Ribeiro
• [FD] Two vulnerabilities found in Sony BRAVIA Smart TVs, xen1thLabs
• [FD] PowerPanel Business Edition 3.4.0 - Cross Site Request Forgery, Joey Lane via Fulldisclosure
• [FD] Mozilla's MSI installers: FUBAR (that's spelled "fucked-up beyond all repair"), Stefan Kanthak
• [FD] AST-2019-002: Remote crash vulnerability with MESSAGE messages, Asterisk Security Team
• [FD] AST-2019-003: Remote Crash Vulnerability in chan_sip channel driver, Asterisk Security Team
• [FD] Reflected Cross-site Scripting Vulnerability in Ponzu CMS 0.9.4, Daniel Bishtawi
• Re: [FD] Microsoft Compiled HTML Help / Uncompiled .chm File XML External Entity, hyp3rlinx
• [FD] CVE-2019-13577 / MAPLE Computer WBT SNMP Administrator v2.0.195.15 / Unauthenticated Remote Buffer Overflow Code Execution 0day, hyp3rlinx
• [FD] CVE-2019-2107 a.k.a "Hevcfright" Proof of Concept exploit (Denial of Service PoC), Marcin Kozlowski
• Re: [FD] local privilege escalation via CDE dtprintinfo, Marco Ivaldi
• [FD] Two vulnerabilities found in MikroTik's RouterOS, Q C
• [FD] Tufin SecureChange uses Richfaces 4.3.5, vulnerable to CVE-2015-0279 (unauthenticated RCE), csirt
• [FD] APPLE-SA-2019-7-22-2 macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra, Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-2019-7-22-1 iOS 12.4, Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-2019-7-22-4 watchOS 5.3, Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-2019-7-22-3 Safari 12.1.2, Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-2019-7-22-5 tvOS 12.4, Apple Product Security via Fulldisclosure
• [FD] Trend Micro Deep Discovery Inspector IDS / Percent Encoding IDS Bypass, hyp3rlinx
• [FD] Whonix Anonymous OS 15 Released, bo0od
• [FD] Code Evaluation Vulnerability in Zurmo 3.2.6, Daniel Bishtawi
• [FD] Reflected Cross-site Scripting Vulnerability in Zurmo 3.2.6, Daniel Bishtawi
• [FD] Out of Band Code Evaluation Vulnerability in Zurmo 3.2.6, Daniel Bishtawi
• [FD] Stored Cross-site Scripting Vulnerability in Zurmo 3.2.6, Daniel Bishtawi
• [FD] Frame Injection Vulnerability in Zurmo 3.2.6, Daniel Bishtawi
• [FD] Open Redirection Vulnerability in Zurmo 3.2.6, Daniel Bishtawi
• [FD] [SYSS-2019-004]: ABUS Secvest (FUAA50000) - Message Transmission - Unchecked Error Condition (CWE-391) (CVE-2019-14261), Matthias Deeg
• [FD] APPLE-SA-2019-7-23-3 iCloud for Windows 10.6, Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-2019-7-23-1 iCloud for Windows 7.13, Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-2019-7-23-2 iTunes for Windows 12.9.6, Apple Product Security via Fulldisclosure
• [FD] VTS19-002: Multiple Vulnerabilities in Veritas Resiliency Platform (VRP), David Dillard