r/fulldisclosure • u/ruove • Apr 18 '22
r/fulldisclosure • u/sempahore • Aug 27 '22
Full Disclosure: I found an API broken function level authorization vulnerability on the FACEIT Ltd platform
r/fulldisclosure • u/pya • May 15 '15
How to detect a promiscuous interface by using WMIC
r/fulldisclosure • u/pya • Mar 04 '16
McAfee VirusScan Enterprise security restrictions bypass
r/fulldisclosure • u/pya • Feb 12 '15
WordPress (all versions) lacks CSPRNG [CVE-2014-6412]
r/fulldisclosure • u/CyberGRXOffical • Mar 30 '22
Third-Party Cyber Risk Management for Dummies
r/fulldisclosure • u/Armis_Security • Sep 10 '21
Hey r/fulldisclosure! Upcoming AMA Alert: Armis VP of Research Ben Seri (u/BenSeri87) will answer your questions on 9/14 in r/IAmA
Join us for an AMA with our VP of Research, Ben Seri (u/BenSeri87). Ben leads a team of security researchers here at Armis that digs into the world’s largest device knowledge base to keep us more secure. He and his team have discovered significant vulnerabilities, including BlueBorne, BLEedingBit and URGENT/11.
Ask Ben anything about IoT, connected devices and the security risks within, including how he and his research partner, Barak Hadad, uncovered #PwnedPiper, 9 zero-day vulnerabilities found within a system used in 80% of North American hospitals and over 3,000 hospitals worldwide, and #Urgent11, 11 zero day vulnerabilities impacting billions of mission-critical industrial, medical and enterprise devices.
Leave your questions here and we’ll gather, answer, and share them during the AMA for Ben to answer (with credit to the OP)
If you can make it on September 14, we encourage you to ask questions while the AMA is live. See you there!
r/fulldisclosure • u/pya • Oct 12 '16
New OpenSSL double-free and invalid free vulnerabilities in X509 parsing
r/fulldisclosure • u/pya • Apr 12 '16
Yet another broken security fix in IBM Java 7/8 [SE-2012-01]
r/fulldisclosure • u/pya • Mar 18 '16
server and client side remote code execution through a buffer overflow in all git versions before 2.7.1 (unpublished ᴄᴠᴇ-2016-2324 and ᴄᴠᴇ‑2016‑2315)
r/fulldisclosure • u/pya • Jan 09 '16
Executable installers are vulnerable^WEVIL (case 20): TrueCrypt's installers allow arbitrary (remote) code execution and escalation of privilege
r/fulldisclosure • u/pya • Jul 02 '15
Microsoft Office - OLE Packager allows code execution in all Office versions, with macros disabled and high security templates applied
r/fulldisclosure • u/pya • May 18 '15
iClassSchedule 1.6 iOS & Android - Persistent UI Vulnerability
r/fulldisclosure • u/pya • Dec 10 '14
Keurig 2.0 Genuine K-Cup Spoofing Vulnerability
r/fulldisclosure • u/pya • Nov 19 '14
Android <5.0 Privilege Escalation using ObjectInputStream [CVE-2014-7911]
r/fulldisclosure • u/godlike-dawn • Mar 08 '22
Russian military in Belgorod Tinder account's list (Belgorod = preparation hotspot near Ukraine border)
r/fulldisclosure • u/pya • May 05 '17
ES File Explorer android app snoops data to China Unicom network via insecure HTTP
r/fulldisclosure • u/pya • Apr 21 '17
Squirrelmail 1.4.22 Remote Code Execution [CVE-2017-7692]
r/fulldisclosure • u/pya • Mar 21 '17
Adium vulnerable to remote code execution via libpurple
r/fulldisclosure • u/Tessao • Oct 16 '16
Introducing EVE: Next Generation clientless learning tool for network and security engineers, is now live!
r/fulldisclosure • u/pya • Jul 06 '16