Mail Index

• Thread Index

• [FD] Windows PowerShell Single Quote Code Execution / Event Log Bypass
  • From: hyp3rlinx
• [FD] RansomLord v2 - Anti-Ransomware Exploitation Tool / New Release
  • From: hyp3rlinx
• [FD] SSH-Snake: Automated SSH-Based Network Traversal
  • From: Joshua Rogers
• [FD] OXAS-ADV-2023-0005: OX App Suite Security Advisory
  • From: Martin Heiland via Fulldisclosure
• [FD] OXAS-ADV-2023-0006: OX App Suite Security Advisory
  • From: Martin Heiland via Fulldisclosure
• [FD] cpio privilege escalation vulnerability via setuid files in cpio archive
  • From: Georgi Guninski
• Re: [FD] [SBA-ADV-20220120-01] MOKOSmart MKGW1 Gateway Improper Session Management
  • From: SBA - Advisory via Fulldisclosure
• Re: [FD] cpio privilege escalation vulnerability via setuid files in cpio archive
  • From: fulldisclosure
• Re: [FD] cpio privilege escalation vulnerability via setuid files in cpio archive
  • From: Georgi Guninski
• Re: [FD] cpio privilege escalation vulnerability via setuid files in cpio archive
  • From: Harry Sintonen via Fulldisclosure
• Re: [FD] cpio privilege escalation vulnerability via setuid files in cpio archive
  • From: Harry Sintonen via Fulldisclosure
• [FD] CyberDanube Security Research 20240109-0 | Multiple Vulnerabilities in JetNet Series
  • From: Thomas Weber via Fulldisclosure
• [FD] Backdoor.Win32 Carbanak (Anunak) / Named Pipe Null DACL
  • From: malvuln
• [FD] ODR violation in Redis Raft
  • From: Meng Ruijie
• [FD] Incorrect handshake in TinyDTLS
  • From: Meng Ruijie
• [FD] Mishandle epoch number in TinyDTLS servers
  • From: Meng Ruijie
• [FD] Infinite loop leading to buffer overflow in TinyDTLS
  • From: Meng Ruijie
• [FD] Buffer over-read in TinyDTLS
  • From: Meng Ruijie
• [FD] Assertion failure in check_certificate_request() of TinyDTLS
  • From: Meng Ruijie
• [FD] Misues same epoch number within TCP lifetime in TinyDTLS
  • From: Meng Ruijie
• [FD] Buffer over-read in dtls_sha256_update of TinyDTLS
  • From: Meng Ruijie
• [FD] Legends of IdleOn - I Reject Your RNG And Substitute My Own
  • From: Soatok Dreamseeker
• [FD] Minor firefox DoS - semi silently polluting ~/Downloads with files (part 2)
  • From: Georgi Guninski
• Re: [FD] ODR violation in Redis Raft
  • From: Jeffrey Walton
• [FD] [SBA-ADV-20200707-01] CVE-2020-36771: CloudLinux CageFS 7.1.1-1 or below Token Disclosure
  • From: SBA - Advisory via Fulldisclosure
• [FD] [SBA-ADV-20200707-02] CVE-2020-36772: CloudLinux CageFS 7.0.8-2 or below Insufficiently Restricted Proxy Command
  • From: SBA - Advisory via Fulldisclosure
• [FD] [Full Disclosure] CVE-2024-22900: Unpatched Command Injection in Vinchin Backup and Recovery Versions 7.2 and Earlier
  • From: Balgogan via Fulldisclosure
• [FD] [Full Disclosure] CVE-2024-22899: Unpatched Command Injection in Vinchin Backup and Recovery Versions 7.2 and Earlier
  • From: Valentin Lobstein via Fulldisclosure
• [FD] [Full Disclosure] CVE-2024-22901: Default MYSQL Credentials in Vinchin Backup & Recovery v7.2 and Earlier
  • From: Valentin Lobstein via Fulldisclosure
• [FD] [Full Disclosure] CVE-2024-22902: Default Root Credentials in Vinchin Backup & Recovery v7.2 and Earlier
  • From: Valentin Lobstein via Fulldisclosure
• [FD] [Full Disclosure] CVE-2024-22903: Unpatched Command Injection in Vinchin Backup & Recovery Versions 7.2 and Earlier
  • From: Valentin Lobstein via Fulldisclosure
• [FD] APPLE-SA-01-22-2024-1 Safari 17.3
  • From: Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-01-22-2024-2 iOS 17.3 and iPadOS 17.3
  • From: Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-01-22-2024-3 iOS 16.7.5 and iPadOS 16.7.5
  • From: Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-01-22-2024-4 iOS 15.8.1 and iPadOS 15.8.1
  • From: Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-01-22-2024-5 macOS Sonoma 14.3
  • From: Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-01-22-2024-6 macOS Ventura 13.6.4
  • From: Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-01-22-2024-7 macOS Monterey 12.7.3
  • From: Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-01-22-2024-8 watchOS 10.3
  • From: Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-01-22-2024-9 tvOS 17.3
  • From: Apple Product Security via Fulldisclosure
• [FD] TrojanSpy Win32 Nivdort / Insecure Permissions - EoP (SYSTEM)
  • From: malvuln
• [FD] Yet another fork()/malloc() bomb in javascript + SIGILL in Chrome
  • From: Georgi Guninski
• [FD] Multiple Vulnerabilities in Reprise License Manager 15.1 (CVE-2023-43183, CVE-2023-44031)
  • From: Rahim, Mohaiman via Fulldisclosure
• [FD] PrommetriX - (Prometheus Metrics Leaker) released!
  • From: psy
• [FD] Null pointer deference in freedesktop mesa
  • From: Meng Ruijie
• [FD] Null pointer dereference in Xedit
  • From: Meng Ruijie
• [FD] NULL pointer dereference in tgetstr() of ncurses
  • From: Meng Ruijie
• [FD] Buffer Overflow in glXQueryServerString() of mesa
  • From: Meng Ruijie
• [FD] Null pointer deference in XGetWMHints() of Xfig
  • From: Meng Ruijie
• [FD] NULL pointer dereference in the function handle_viminfo_register() of vim
  • From: Meng Ruijie
• [FD] NULL pointer dereference in __glXGetDrawableAttribute() of Mesa
  • From: Meng Ruijie
• [FD] NULL pointer dereference in XIQueryDevice() of gnome gtk
  • From: Meng Ruijie
• [FD] NULL pointer dereference in glXGetDrawableScreen() of OpenGL libglvnd
  • From: Meng Ruijie
• [FD] null pointer deference in GNU Midnight at /tty/x11conn.c
  • From: Meng Ruijie
• [FD] null pointer deference in gnome gdk-pixbuf
  • From: Meng Ruijie
• [FD] arithmetic exception in S-lang via the function tt_sprintf()
  • From: Meng Ruijie
• [FD] null pointer deference in gnome gtk via init_randr15() at gdkscreen-x11.c
  • From: Meng Ruijie
• [FD] SEGV in S-Lang via fixup_tgetstr()
  • From: Meng Ruijie
• [FD] null pointer deference in gnome gtk via parse_settings() at xsettings-client.c
  • From: Meng Ruijie
• [FD] NULL pointer dereference in freedesktop Mesa via check_xshm()
  • From: Meng Ruijie
• [FD] null pointer deference in nano via read_the_list()
  • From: Meng Ruijie
• [FD] NULL pointer dereference in QT via the function QXcbConnection::initializeAllAtoms()
  • From: Meng Ruijie
• [FD] Buffer Overflow in graphviz via via a crafted config6a file
  • From: Meng Ruijie
• [FD] null pointer deference in MiniZinc via a crafted .mzn file
  • From: Meng Ruijie
• [FD] null pointer deference in Sane via a crafted config file
  • From: Meng Ruijie
• [FD] null pointer deference in tex-live via a crafted cmr10.pfb
  • From: Meng Ruijie
• [FD] null pointer deference in LLVM
  • From: Meng Ruijie
• [FD] null pointer deference in MiniZinc via a crafted Preferences.json file
  • From: Meng Ruijie
• [FD] null pointer deference in tex-live
  • From: Meng Ruijie
• [FD] Buffer overflow in Sane
  • From: Meng Ruijie
• Re: [FD] Null pointer dereference in Xedit
  • From: Alan Coopersmith
• Re: [FD] NULL pointer dereference in freedesktop Mesa via check_xshm()
  • From: Dan Cross
• Re: [FD] null pointer deference in nano via read_the_list()
  • From: Mark Esler
• [FD] CVEs based on commit messages
  • From: Mark Esler
• Re: [FD] Buffer Overflow in graphviz via via a crafted config6a file
  • From: Matthew Fernandez