Full Disclosure: by thread

• RSS iconRSS Feed
• About iconAbout List
• Up iconAll Lists

33 messages starting Oct 02 25 and ending Oct 29 25
Date index | Thread index | Author index

• Re: [FD] Full Disclosure: CVE-2025-31200 & CVE-2025-31201 – 0-Click iMessage Chain → Secure Enclave Key Theft, Wormable RCE, Crypto Theft josephgoyd via Fulldisclosure (Oct 02)
• Re: [FD] : "Glass Cage" – Zero-Click iMessage → Persistent iOS Compromise + Bricking (CVE-2025-24085 / 24201, CNVD-2025-07885) josephgoyd via Fulldisclosure (Oct 02)
  • Re: [FD] : "Glass Cage" – Zero-Click iMessage → Persistent iOS Compromise + Bricking (CVE-2025-24085 / 24201, CNVD-2025-07885) Noor Christensen (Oct 28)
    • Re: : "Glass Cage" – Zero-Click iMessage → Persistent iOS Compromise + Bricking (CVE-2025-24085 / 24201, CNVD-2025-07885) Christoph Gruber (Oct 29)
      • Re: [FD] : "Glass Cage" – Zero-Click iMessage → Persistent iOS Compromise + Bricking (CVE-2025-24085 / 24201, CNVD-2025-07885) josephgoyd via Fulldisclosure (Oct 29)
• Re: Defense in depth -- the Microsoft way (part 93): SRP/SAFER whitelisting goes black on Windows 11 Stefan Kanthak via Fulldisclosure (Oct 07)
• Re: Full Disclosure: CVE-2025-31200 & CVE-2025-31201 – 0-Click iMessage Chain → Secure Enclave Key Theft, Wormable RCE, Crypto Theft full (Oct 07)
  • Re: [FD] Full Disclosure: CVE-2025-31200 & CVE-2025-31201 – 0-Click iMessage Chain → Secure Enclave Key Theft, Wormable RCE, Crypto Theft josephgoyd via Fulldisclosure (Oct 07)
• CVE-2025-59397 - Open Web Analytics SQL Injection Seralys Research Team via Fulldisclosure (Oct 08)
• [SBA-ADV-20250724-01] CVE-2025-32919: Checkmk Agent Privilege Escalation via Insecure Temporary Files SBA Research Security Advisory via Fulldisclosure (Oct 13)
• [SBA-ADV-20250730-01] CVE-2025-39664: Checkmk Path Traversal SBA Research Security Advisory via Fulldisclosure (Oct 13)
• Security Advisory: Multiple High-Severity Vulnerabilities in Suno.com (JWT Leakage, IDOR, DoS) Christopher Dickinson via Fulldisclosure (Oct 13)
  • Re: Security Advisory: Multiple High-Severity Vulnerabilities in Suno.com (JWT Leakage, IDOR, DoS) Gynvael Coldwind (Oct 15)
• Urgent Security Vulnerabilities Discovered in Mercku Routers Model M6a cve (Oct 18)
• apis.google.com - Insecure redirect via __lu parameter (exploited in the wild) Patrick via Fulldisclosure (Oct 18)
• CyberDanube Security Research 20251014-0 | Multiple Vulnerabilities in Phoenix Contact QUINT4 UPS Thomas Weber | CyberDanube via Fulldisclosure (Oct 18)
• Google Firebase hosting suspension / "malware distribution" bypass Security Explorations (Oct 21)
• BSidesSF 2026 CFP still open until October 28th BSidesSF CFP via Fulldisclosure (Oct 21)
• Malvuln - MISP compatible malware vulnerability intelligence feed now live malvuln (Oct 21)
• [SYSS-2025-015]: Verbatim Keypad Secure (security update v1.0.0.6) - Offline brute-force attack Matthias Deeg via Fulldisclosure (Oct 21)
• [SYSS-2025-016]: Verbatim Store 'n' Go Secure Portable SSD (security update v1.0.0.6) - Offline brute-force attack Matthias Deeg via Fulldisclosure (Oct 21)
• [SYSS-2025-017]: Verbatim Store 'n' Go Secure Portable HDD (security update v1.0.0.6) - Offline brute-force attack Matthias Deeg via Fulldisclosure (Oct 21)
• SEC Consult SA-20251021-0 :: Multiple Vulnerabilities in EfficientLab WorkExaminer Professional (CVE-2025-10639, CVE-2025-10640, CVE-2025-10641) SEC Consult Vulnerability Lab via Fulldisclosure (Oct 21)
• [REVIVE-SA-2025-001] Revive Adserver Vulnerability Matteo Beccati (Oct 25)
• [REVIVE-SA-2025-002] Revive Adserver Vulnerability Matteo Beccati (Oct 25)
• Struts2 and Related Framework Array/Collection DoS Daniel Owens via Fulldisclosure (Oct 28)
• Current Password not Required When Changing Password - totaljsv5013 Andrey Stoykov (Oct 28)
• Stored Cross-Site Scripting (XSS) - Layout Functionality - totaljsv5013 Andrey Stoykov (Oct 28)
• Stored HTML Injection - Layout Functionality - totaljsv5013 Andrey Stoykov (Oct 28)
• Stored Cross-Site Scripting (XSS) via SVG File Upload - totaljsv5013 Andrey Stoykov (Oct 28)
• SEC Consult SA-20251027-0 :: Unauthenticated Local File Disclosure in MPDV Mikrolab MIP 2 / FEDRA 2 / HYDRA X Manufacturing Execution System #CVE-2025-12055 SEC Consult Vulnerability Lab via Fulldisclosure (Oct 28)
• Dovecot CVE-2025-30189: Auth cache causes access to wrong account Aki Tuomi via Fulldisclosure (Oct 29)
• SEC Consult SA-20251029-0 :: Unprotected NFC card manipulation leading to free top-up in GiroWeb Cashless Catering Solutions (only legacy customer infrastructure) SEC Consult Vulnerability Lab via Fulldisclosure (Oct 29)