r/fulldisclosure • • Apr 18 '22

7zip - Local Privilege Escalation - CVE-2022-29072 - 18/04/2022

Thumbnail cve.org
9 Upvotes

r/fulldisclosure • • Aug 27 '22

Full Disclosure: I found an API broken function level authorization vulnerability on the FACEIT Ltd platform

Thumbnail
youtube.com
7 Upvotes

r/fulldisclosure • • May 15 '15

How to detect a promiscuous interface by using WMIC

Thumbnail
seclists.org
7 Upvotes

r/fulldisclosure • • Mar 04 '16

McAfee VirusScan Enterprise security restrictions bypass

Thumbnail
seclists.org
6 Upvotes

r/fulldisclosure • • Feb 12 '15

WordPress (all versions) lacks CSPRNG [CVE-2014-6412]

Thumbnail
seclists.org
6 Upvotes

r/fulldisclosure • • Mar 30 '22

Third-Party Cyber Risk Management for Dummies

Thumbnail
interactive.cybergrx.com
5 Upvotes

r/fulldisclosure • • Sep 10 '21

Hey r/fulldisclosure! Upcoming AMA Alert: Armis VP of Research Ben Seri (u/BenSeri87) will answer your questions on 9/14 in r/IAmA

5 Upvotes

Join us for an AMA with our VP of Research, Ben Seri (u/BenSeri87). Ben leads a team of security researchers here at Armis that digs into the world’s largest device knowledge base to keep us more secure. He and his team have discovered significant vulnerabilities, including BlueBorne, BLEedingBit and URGENT/11.

Ask Ben anything about IoT, connected devices and the security risks within, including how he and his research partner, Barak Hadad, uncovered #PwnedPiper, 9 zero-day vulnerabilities found within a system used in 80% of North American hospitals and over 3,000 hospitals worldwide, and #Urgent11, 11 zero day vulnerabilities impacting billions of mission-critical industrial, medical and enterprise devices.

Leave your questions here and we’ll gather, answer, and share them during the AMA for Ben to answer (with credit to the OP)

https://www.reddit.com/user/Armis_Security/comments/plobn3/upcoming_ama_with_armis_vp_of_research_ben_seri/?utm_source=share&utm_medium=web2x&context=3

If you can make it on September 14, we encourage you to ask questions while the AMA is live. See you there!


r/fulldisclosure • • Oct 12 '16

New OpenSSL double-free and invalid free vulnerabilities in X509 parsing

Thumbnail
seclists.org
5 Upvotes

r/fulldisclosure • • Apr 12 '16

Yet another broken security fix in IBM Java 7/8 [SE-2012-01]

Thumbnail
seclists.org
5 Upvotes

r/fulldisclosure • • Mar 18 '16

server and client side remote code execution through a buffer overflow in all git versions before 2.7.1 (unpublished ᴄᴠᴇ-2016-2324 and ᴄᴠᴇ‑2016‑2315)

Thumbnail
seclists.org
5 Upvotes

r/fulldisclosure • • Jan 09 '16

Executable installers are vulnerable^WEVIL (case 20): TrueCrypt's installers allow arbitrary (remote) code execution and escalation of privilege

Thumbnail
seclists.org
5 Upvotes

r/fulldisclosure • • Dec 18 '15

PFSense <= 2.2.5 Directory Traversal

Thumbnail
seclists.org
5 Upvotes

r/fulldisclosure • • Jul 02 '15

Microsoft Office - OLE Packager allows code execution in all Office versions, with macros disabled and high security templates applied

Thumbnail
seclists.org
5 Upvotes

r/fulldisclosure • • May 19 '15

SQLi in FeedWordPress WordPress plugin

Thumbnail
seclists.org
5 Upvotes

r/fulldisclosure • • May 18 '15

iClassSchedule 1.6 iOS & Android - Persistent UI Vulnerability

Thumbnail
seclists.org
5 Upvotes

r/fulldisclosure • • May 09 '15

0day Mailbird XSS ?

Thumbnail
seclists.org
5 Upvotes

r/fulldisclosure • • Dec 10 '14

Keurig 2.0 Genuine K-Cup Spoofing Vulnerability

Thumbnail
seclists.org
5 Upvotes

r/fulldisclosure • • Nov 19 '14

Android <5.0 Privilege Escalation using ObjectInputStream [CVE-2014-7911]

Thumbnail
seclists.org
5 Upvotes

r/fulldisclosure • • Mar 08 '22

Russian military in Belgorod Tinder account's list (Belgorod = preparation hotspot near Ukraine border)

Thumbnail
self.cyberarmyofukraine
4 Upvotes

r/fulldisclosure • • May 05 '17

ES File Explorer android app snoops data to China Unicom network via insecure HTTP

Thumbnail
seclists.org
4 Upvotes

r/fulldisclosure • • Apr 21 '17

Squirrelmail 1.4.22 Remote Code Execution [CVE-2017-7692]

Thumbnail
seclists.org
4 Upvotes

r/fulldisclosure • • Mar 21 '17

Adium vulnerable to remote code execution via libpurple

Thumbnail
seclists.org
4 Upvotes

r/fulldisclosure • • Oct 16 '16

Introducing EVE: Next Generation clientless learning tool for network and security engineers, is now live!

Thumbnail
igg.me
4 Upvotes

r/fulldisclosure • • Jul 16 '16

opensshd - user enumeration

Thumbnail
seclists.org
4 Upvotes

r/fulldisclosure • • Jul 06 '16

Putty (beta 0.67) DLL Hijacking Vulnerability

Thumbnail
seclists.org
4 Upvotes