Mail Index

• Thread Index

• [FD] X41 D-Sec GmbH Security Advisory X41-2021-001: Multiple Vulnerabilities in YARA
  • From: X41 D-Sec GmbH Advisories
• [FD] Cross-Site Scripting Vulnerability in Chamilo LMS 1.11.14
  • From: Daniel Bishtawi via Fulldisclosure
• [FD] Backdoor.Win32.DarkKomet.apbb / Insecure Permissions
  • From: malvuln
• [FD] Backdoor.Win32.Wollf.14 / Missing Authentication
  • From: malvuln
• [FD] Constructor.Win32.SpyNet.a / Remote Password Leak
  • From: malvuln
• [FD] Backdoor.Win32.Zetronic / Remote DoS
  • From: malvuln
• [FD] Backdoor.Win32.Zhangpo / Remote DoS
  • From: malvuln
• [FD] Backdoor.Win32.Mhtserv.b / Missing Authentication
  • From: malvuln
• [FD] Backdoor.Win32.MiniBlackLash / Remote DoS
  • From: malvuln
• [FD] Packed.Win32.Katusha.o (Ransomeware) / Insecure Permissions EoP
  • From: malvuln
• [FD] Backdoor.Win32.Anaptix.bd / Insecure Permissions
  • From: malvuln
• [FD] Backdoor.Win32.Buterat.cxq / Insecure Permissions EoP
  • From: malvuln
• [FD] Backdoor.Win32.Celine / Missing Authentication
  • From: malvuln
• [FD] Oracle DB: various issues related to malicious database gateways
  • From: Harrison Neal
• [FD] APPLE-SA-2021-02-01-1 macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave
  • From: Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-2021-02-01-2 Additional information for APPLE-SA-2021-01-26-1 iOS 14.4 and iPadOS 14.4
  • From: Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-2021-02-01-3 Additional information for APPLE-SA-2021-01-26-2 tvOS 14.4
  • From: Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-2021-02-01-4 Additional information for APPLE-SA-2021-01-26-3 watchOS 7.3
  • From: Apple Product Security via Fulldisclosure
• [FD] Backdoor.Win32.Xyligan.blp / Insecure Permissions EoP
  • From: malvuln
• [FD] null pointer deference in mfmp4srcsnk.dll in latest windows 10
  • From: houjingyi
• [FD] Backdoor.Win32.NetBull.11.b / Remote Buffer Overflow
  • From: malvuln
• [FD] Backdoor.Win32.RemoteManipulator.brr / Insecure Permissions EoP
  • From: malvuln
• [FD] Bug bounty failure stories to learn from: how we ended up to hack a bank with no reward
  • From: Red Timmy Security
• [FD] KSA-Dev-008: Authenticated XSRF leads to complete account takeover in all UNIBOX WiFi Hotspot Controller
  • From: Kaustubh via Fulldisclosure
• [FD] KSA_DEV-009 :- Authenticated Code Execution In Unibox 2.4
  • From: Kaustubh via Fulldisclosure
• [FD] Trojan.Win32.Gentee.b / Insecure Permissions EoP
  • From: malvuln
• [FD] Trojan.Win32.Gentee.h / Insecure Permissions EoP
  • From: malvuln
• [FD] Trojan-Spy.Win32.SpyEyes.auqj / Insecure Permissions EoP
  • From: malvuln
• [FD] Trojan-Spy.Win32.SpyEyes.auwl / Insecure Permissions EoP
  • From: malvuln
• [FD] Trojan.Win32.Comei.pgo / Insecure Permissions EoP
  • From: malvuln
• [FD] Trojan.Win32.Cospet.abg / Insecure Permissions EoP
  • From: malvuln
• [FD] Email-Worm.Win32.Sircam.eb / Insecure Permissions EoP
  • From: malvuln
• [FD] Trojan.Win32.Delf.uq / Insecure Permissions EoP
  • From: malvuln
• [FD] Trojan-Spy.Win32.SpyEyes.awow / Insecure Permissions EoP
  • From: malvuln
• [FD] Trojan-Spy.Win32.WebCenter.a / Information Disclosure
  • From: malvuln
• [FD] SEC Consult SA-20210210-0 :: Reflected Cross-Site Scripting in Adobe Magento Commerce
  • From: SEC Consult Vulnerability Lab
• [FD] Path traversal in SolarWinds Serv-U File Server <=15.2.1
  • From: Jack Misiura via Fulldisclosure
• [FD] Stored XSS in SolarWinds Serv-U File Server <=15.2.1
  • From: Jack Misiura via Fulldisclosure
• [FD] Trojan-Spy.Win32.WinSpy.vwl / Insecure Permissions EoP
  • From: malvuln
• [FD] Backdoor.Win32.Wollf.15 / Missing Authentication
  • From: malvuln
• [FD] Trojan.Win32.Cafelom.bu / Heap Corruption
  • From: malvuln
• [FD] Backdoor.Win32.NetTerrorist / Unauthorized Remote Command Execution
  • From: malvuln
• [FD] Backdoor.Win32.Aphexdoor.LiteSock / Remote Stack Buffer Overflow
  • From: malvuln
• [FD] Backdoor.Win32.Augudor.a / Unauthenticated Remote File Write Code Execution
  • From: malvuln
• [FD] Backdoor.Win32.BackAttack.18 / Multiple Vulnerabilities
  • From: malvuln
• [FD] APPLE-SA-2021-02-09-1 macOS Big Sur 11.2.1, macOS Catalina 10.15.7 Supplemental Update, and macOS Mojave 10.14.6 Security Update 2021-002
  • From: Apple Product Security via Fulldisclosure
• [FD] Recon-Informer v1.3 - Intel for offensive systems anti-reconnaissance (nmap) tool
  • From: hyp3rlinx
• [FD] Backdoor.Win32.Backlash.101 / Missing Authentication
  • From: malvuln
• [FD] Backdoor.Win32.Cafeini.08.b / Missing Authentication
  • From: malvuln
• [FD] Trojan-Spy.Win32.WinSpy.wlt / Insecure Permissions
  • From: malvuln
• [FD] Backdoor.Win32.Cabrotor.21 / Insecure Permissions
  • From: malvuln
• [FD] Backdoor.Win32.Azbreg.aant / Insecure Permissions
  • From: malvuln
• [FD] Backdoor.Win32.Bifrose.ahvb / Insecure Permissions
  • From: malvuln
• [FD] Backdoor.Win32.Indexer.a / Hardcoded Weak Credentials
  • From: malvuln
• [FD] Backdoor.Win32.Indexer.a / Remote Denial Of Service
  • From: malvuln
• [FD] Backdoor.Win32.Burbul.b / Anonymous Logon
  • From: malvuln
• [FD] SEC Consult SA-20210217-0 :: Multiple Vulnerabilities in Multiple Vulnerabilities
  • From: SEC Consult Vulnerability Lab
• [FD] AST-2021-001: Remote crash in res_pjsip_diversion
  • From: Asterisk Security Team
• [FD] AST-2021-002: Remote crash possible when negotiating T.38
  • From: Asterisk Security Team
• [FD] AST-2021-003: Remote attacker could prematurely tear down SRTP calls
  • From: Asterisk Security Team
• [FD] AST-2021-004: An unsuspecting user could crash Asterisk with multiple hold/unhold requests
  • From: Asterisk Security Team
• [FD] AST-2021-005: Remote Crash Vulnerability in PJSIP channel driver
  • From: Asterisk Security Team
• [FD] Rigged Race Against Firejail for Local Root: Using pipes/ptys to win races
  • From: Roman Fiedler
• [FD] Backdoor.Win32.Agent.aak / Weak Hardcoded Credentials
  • From: malvuln
• [FD] Backdoor.Win32.Agent.aak / Cross Site Request Forgery (CSRF) - Code Execution
  • From: malvuln
• [FD] Backdoor.Win32.Agent.aak / Remote Buffer Overflow
  • From: malvuln
• [FD] [CSA-2021-001] Cross-Site Request Forgery in Apache MyFaces
  • From: Certitude - Advisories
• [FD] Multiple remote memory corruptions in Telegram's handling of animated stickers
  • From: polict of Shielder
• [FD] Backdoor.Win32.DarkKomet.bhfh / Insecure Permissions
  • From: malvuln
• [FD] Backdoor.Win32.DarkKomet.apcc / Insecure Permissions
  • From: malvuln
• [FD] Backdoor.Win32.Bionet.10 / Anonymous Logon
  • From: malvuln
• [FD] [KIS-2021-02] docsify <= 4.11.6 DOM-based Cross-Site Scripting Vulnerability
  • From: research
• [FD] CIRA Canadian Shield iOS Application - MITM SSL Certificate Vulnerability (CVE-2021-27189)
  • From: David Coomber
• [FD] IBM(R) Db2(R) Windows client DLL Hijacking Vulnerability(0day)
  • From: houjingyi
• [FD] Backdoor.Win32.Inject.tyq / Insecure Permissions
  • From: malvuln
• [FD] Backdoor.Win32.Ketch.h / Remote Stack Buffer Overflow (SEH)
  • From: malvuln
• [FD] Trojan-Proxy.Win32.Daemonize.i / Remote Denial of Service
  • From: malvuln
• [FD] Trojan.Win32.Pincav.cmfl / Insecure Permissions
  • From: malvuln
• [FD] Trojan.Win32.Pluder.o / Insecure Permissions
  • From: malvuln
• [FD] Backdoor.Win32.DarkKomet.irv / Insecure Permissions
  • From: malvuln
• [FD] Double-Free found on Squid 4.14 and 5.0.5
  • From: Andrés Roldán via Fulldisclosure
• [FD] VisualWare MyConnection Server 11.x Remote Code Execution Vulnerability
  • From: Ryan Wincey
• [FD] Online Tool for Discussion of Vulnerabilities
  • From: Yavuz
• [FD] Backdoor.Win32.Agent.xs / Insecure Permissions
  • From: malvuln
• [FD] Backdoor.Win32.Agent.xw / Remote Null Ptr Dereference - Denial of Service
  • From: malvuln
• [FD] Backdoor.Win32.Delf.adag / Weak Hardcoded Credentials
  • From: malvuln
• [FD] Backdoor.Win32.Wollf.h / Missing Authentication
  • From: malvuln
• [FD] Trojan.Win32.Gofot.htx / Local File Buffer Overflow
  • From: malvuln
• [FD] Trojan-Dropper.Win32.Daws.etlm / Remote Unauthenticated System Reboot
  • From: malvuln
• [FD] Trojan-Spy.Win32.SpyEyes.elr / Insecure Permissions
  • From: malvuln
• [FD] Backdoor.Win32.Azbreg.amw / Insecure Permissions
  • From: malvuln
• [FD] Trojan.Win32.Hotkeychick.am / Insecure Permissions
  • From: malvuln
• [FD] Trojan-Proxy.Win32.Delf.ai / Remote SEH Buffer Overflow
  • From: malvuln