Posted by Meng Ruijie on Jan 17
About CVE-2021-42141:Posted by Meng Ruijie on Jan 17
[Suggested description]Posted by malvuln on Jan 14
Discovery / credits: Malvuln (John Page aka hyp3rlinx) (c) 2024Posted by Thomas Weber via Fulldisclosure on Jan 14
CyberDanube Security Research 20240109-0Posted by Harry Sintonen via Fulldisclosure on Jan 14
Tar does set setuid bit, but tar is not vulnerable. This is not an attack.Posted by Harry Sintonen via Fulldisclosure on Jan 14
So does for example tar. The same rules that apply to tar also apply toPosted by Georgi Guninski on Jan 14
Hi, thanks for the feedback :)Posted by fulldisclosure on Jan 14
Am 08.01.24 um 10:25 schrieb Georgi Guninski:Posted by SBA - Advisory via Fulldisclosure on Jan 14
MITRE assigned CVE-2023-51059 for this issue.Posted by Georgi Guninski on Jan 08
cpio privilege escalation vulnerability via setuid files in cpio archivePosted by Martin Heiland via Fulldisclosure on Jan 08
Dear subscribers,Posted by Martin Heiland via Fulldisclosure on Jan 08
Dear subscribers,Posted by Joshua Rogers on Jan 08
SSH-Snake is a powerful tool designed to perform automatic networkPosted by hyp3rlinx on Jan 04
RansomLord v2 - Anti-Ransomware Exploitation ToolPosted by hyp3rlinx on Jan 04
[+] Credits: John Page (aka hyp3rlinx)Posted by Sandro Gauci on Dec 26
# FreeSWITCH susceptible to Denial of Service via DTLS Hello packets during call initiationPosted by Asterisk Development Team via Fulldisclosure on Dec 19
The Asterisk Development Team would like to announce security releasePosted by Asterisk Development Team via Fulldisclosure on Dec 19
The Asterisk Development Team would like to announce security releasePosted by Asterisk Development Team on Dec 19
The earlier announcement should not have had any User or Upgrade notes.Posted by Asterisk Development Team on Dec 19
The earlier release announcement should NOT have had any User or UpgradePosted by Sandro Gauci on Dec 19
# RTPEngine susceptible to Denial of Service via DTLS Hello packets during call initiationPosted by Sandro Gauci on Dec 19
# Asterisk susceptible to Denial of Service via DTLS Hello packets during call initiationPosted by Egidio Romano on Dec 19
---------------------------------------------------------------------------------Posted by SBA - Advisory via Fulldisclosure on Dec 19
# MOKOSmart MKGW1 Gateway Improper Session Management #Posted by Apple Product Security via Fulldisclosure on Dec 19
APPLE-SA-12-19-2023-1 macOS Sonoma 14.2.1Posted by Balgogan via Fulldisclosure on Dec 19
**Introduction**Posted by SEC Consult Vulnerability Lab, Research via Fulldisclosure on Dec 12
SEC Consult Vulnerability Lab Security Advisory < 20231211-0 >Posted by SEC Consult Vulnerability Lab, Research via Fulldisclosure on Dec 12
SEC Consult Vulnerability Lab Security Advisory < 20231206-0 >Posted by SEC Consult Vulnerability Lab, Research via Fulldisclosure on Dec 12
SEC Consult Vulnerability Lab Security Advisory < 20231205-0 >Posted by SEC Consult Vulnerability Lab, Research via Fulldisclosure on Dec 12
SEC Consult Vulnerability Lab Security Advisory < 20231128-0 >Posted by Marco Ivaldi on Dec 12
Hi,Posted by Apple Product Security via Fulldisclosure on Dec 12
APPLE-SA-12-11-2023-8 watchOS 10.2Posted by Apple Product Security via Fulldisclosure on Dec 12
APPLE-SA-12-11-2023-7 tvOS 17.2Posted by Apple Product Security via Fulldisclosure on Dec 12
APPLE-SA-12-11-2023-6 macOS Monterey 12.7.2Posted by Apple Product Security via Fulldisclosure on Dec 12
APPLE-SA-12-11-2023-5 macOS Ventura 13.6.3Posted by Apple Product Security via Fulldisclosure on Dec 12
APPLE-SA-12-11-2023-4 macOS Sonoma 14.2Posted by Apple Product Security via Fulldisclosure on Dec 12
APPLE-SA-12-11-2023-3 iOS 16.7.3 and iPadOS 16.7.3Posted by Apple Product Security via Fulldisclosure on Dec 12
APPLE-SA-12-11-2023-2 iOS 17.2 and iPadOS 17.2Posted by Apple Product Security via Fulldisclosure on Dec 12
APPLE-SA-12-11-2023-1 Safari 17.2Posted by Apple Product Security via Fulldisclosure on Dec 12
APPLE-SA-11-30-2023-3 macOS Sonoma 14.1.2Posted by Apple Product Security via Fulldisclosure on Dec 12
APPLE-SA-11-30-2023-2 iOS 17.1.2 and iPadOS 17.1.2Posted by Apple Product Security via Fulldisclosure on Dec 12
APPLE-SA-11-30-2023-1 Safari 17.1.2Posted by Egidio Romano on Dec 12
------------------------------------------------------------------------Posted by BSidesSF CFP via Fulldisclosure on Dec 12
BSidesSF is still soliciting submissions for the annual BSidesSF conferencePosted by hyp3rlinx on Dec 12
[+] Credits: John Page (aka hyp3rlinx)Posted by SEC Consult Vulnerability Lab, Research via Fulldisclosure on Nov 27
SEC Consult Vulnerability Lab Security Advisory < 20231123-0 >Posted by SEC Consult Vulnerability Lab, Research via Fulldisclosure on Nov 27
SEC Consult Vulnerability Lab Security Advisory < 20231122-0 >Posted by Phos4Me via Fulldisclosure on Nov 27
Sent through the Full Disclosure mailing listPosted by Maurizio Ruchay via Fulldisclosure on Nov 27
Advisory ID: SYSS-2023-019Posted by Kevin on Nov 27
While conducting a penetration test for a client, they were running anPosted by Aurich, Janik on Nov 27
Dear list members,Posted by Chizuru Toyama on Nov 27
[+] CVE : CVE-2023-46386, CVE-2023-46387, CVE-2023-46388, CVE-2023-46389Posted by Chizuru Toyama on Nov 27
[+] CVE : CVE-2023-46383, CVE-2023-46384, CVE-2023-46385Posted by Phos4Me via Fulldisclosure on Nov 12
Sent through the Full Disclosure mailing listPosted by Phos4Me via Fulldisclosure on Nov 12
Sent through the Full Disclosure mailing listPosted by Phos4Me via Fulldisclosure on Nov 12
Sent through the Full Disclosure mailing listPosted by Phos4Me via Fulldisclosure on Nov 12
Sent through the Full Disclosure mailing listPosted by Marco Ivaldi on Nov 12
Hi all,Posted by Chizuru Toyama on Nov 03
[+] CVE : CVE-2023-46380, CVE-2023-46381, CVE-2023-46382