Mail Thread Index

• Date Index

• [FD] SEC Consult SA-20241030-0 :: Query Filter Injection in Ping Identity PingIDM (formerly known as ForgeRock Identity Management) (CVE-2024-23600), SEC Consult Vulnerability Lab via Fulldisclosure
• [FD] APPLE-SA-10-29-2024-1 Safari 18.1, Apple Product Security via Fulldisclosure
• [FD] xlibre Xnest security advisory & bugfix releases, Enrico Weigelt, metux IT consult
• [FD] 32 vulnerabilities in IBM Security Verify Access, Pierre Kim
• [FD] 4 vulnerabilities in ibmsecurity, Pierre Kim
• [FD] Unsafe eval() in TestRail CLI, Devin Cook
• [FD] SEC Consult SA-20241107-0 :: Multiple Vulnerabilities in HASOMED Elefant and Elefant Software Updater, SEC Consult Vulnerability Lab via Fulldisclosure
• [FD] Security issue in the TX Text Control .NET Server for ASP.NET., Filip Palian
• [FD] SEC Consult SA-20241112-0 :: Multiple vulnerabilities in Siemens Energy Omnivise T3000 (CVE-2024-38876, CVE-2024-38877, CVE-2024-38878, CVE-2024-38879), SEC Consult Vulnerability Lab via Fulldisclosure
• [FD] Apple web content filter bypass allows unrestricted access to blocked content (macOS/iOS/iPadOS/visionOS/watchOS), Nosebeard Labs
• [FD] St. Poelten UAS | Multiple Stored Cross-Site Scripting in SEH utnserver Pro, Weber Thomas via Fulldisclosure
• [FD] St. Poelten UAS | Path Traversal in Korenix JetPort 5601, Weber Thomas via Fulldisclosure
• [FD] XXE OOB - fronsetiav1.1, Andrey Stoykov
• [FD] Reflected XSS - fronsetiav1.1, Andrey Stoykov
• [FD] APPLE-SA-11-19-2024-1 Safari 18.1.1, Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-11-19-2024-2 visionOS 2.1.1, Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-11-19-2024-3 iOS 18.1.1 and iPadOS 18.1.1, Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-11-19-2024-4 iOS 17.7.2 and iPadOS 17.7.2, Apple Product Security via Fulldisclosure
• [FD] Local Privilege Escalations in needrestart, Qualys Security Advisory via Fulldisclosure
  • Re: [FD] Local Privilege Escalations in needrestart, Mark Esler
• [FD] APPLE-SA-11-19-2024-5 macOS Sequoia 15.1.1, Apple Product Security via Fulldisclosure
• [FD] SEC Consult SA-20241125-0 :: Unlocked JTAG interface and buffer overflow in Siemens SM-2558 Protocol Element, Siemens CP-2016 & CP-2019, SEC Consult Vulnerability Lab via Fulldisclosure
• [FD] SEC Consult SA-20241127-0 :: Stored Cross-Site Scripting in Omada Identity (CVE-2024-52951), SEC Consult Vulnerability Lab via Fulldisclosure