Mail Thread Index

• Date Index

• [FD] CVE-2022-3602 and CVE-2022-3786 Critical OpenSSL 3.0.x security vulnerabilities, Turritopsis Dohrnii Teo En Ming
• [FD] APPLE-SA-2022-11-01-1 Xcode 14.1, Apple Product Security via Fulldisclosure
• [FD] Cisco Secure Email Gateways can easily be circumvented, FD
• [FD] [CVE-2022-3747] BeCustom <= 1.0.5.2 Generic Cross-Site Request Forgery, Julien Ahrens (RCE Security)
• [FD] Backdoor.Win32.Aphexdoor.LiteSock / Remote Stack Buffer Overflow (SEH), malvuln
• [FD] HEUR:Trojan.MSIL.Agent.gen / Information Disclosure, malvuln
• [FD] Backdoor.Win32.RemServ.d / Unauthenticated Remote Command Execution, malvuln
• [FD] APPLE-SA-2022-11-09-1 iOS 16.1.1 and iPadOS 16.1.1, Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-2022-11-09-2 macOS Ventura 13.0.1, Apple Product Security via Fulldisclosure
• [FD] SEC Consult SA-20221109-0 :: Multiple Critical Vulnerabilities in Simmeth System GmbH Supplier manager (Lieferantenmanager), SEC Consult Vulnerability Lab, Research via Fulldisclosure
• [FD] SEC Consult SA-20221110-0 :: HTML Injection in BMC Remedy ITSM-Suite, SEC Consult Vulnerability Lab, Research via Fulldisclosure
• [FD] SEC Consult SA-20221114-0 :: Path Traversal Vulnerability in Payara Platform, SEC Consult Vulnerability Lab, Research via Fulldisclosure
• [FD] [CVE-2022-3861] Betheme <= 26.5.1.4 - Authenticated (Contributor+) PHP Object Injection, Julien Ahrens (RCE Security)
• [FD] Backdoor.Win32.Quux / Weak Hardcoded Credentials, malvuln
• [FD] Trojan.Win32.Platinum.gen / Arbitrary Code Execution, malvuln
• [FD] Backdoor.Win32.Oblivion.01.a / Insecure Transit Password Disclosure, malvuln
• [FD] crashing potplayer again, houjingyi
• [FD] [CVE-2022-33942] Intel Data Center Manager Console <= 4.1.1.45749 ”UserMgmtHandler" Authentication Logic Error Leading to Authentication Bypass, Julien Ahrens (RCE Security)
• [FD] Open-Xchange Security Advisory 2022-11-24, Martin Heiland via Fulldisclosure
• [FD] Backdoor.Win32.Serman.a / Unauthenticated Open Proxy, malvuln
• [FD] Backdoor.Win32.Autocrat.b / Weak Hardcoded Credentials, malvuln
• [FD] Trojan.Win32.DarkNeuron.gen / Named Pipe Null DACL, malvuln
• [FD] Ransomware Deception Tactics Part 1, malvuln
• [FD] Win32.Ransom.Conti / Crypto Logic Flaw, malvuln
• [FD] Exploiting an N-day vBulletin PHP Object Injection Vulnerability, Egidio Romano
• [FD] CyberDanube Security Research 20221124-0 | Authenticated Command Injection Hirschmann BAT-C2, Thomas Weber