Mailing-list archive
No vulnerabilities published in this period.
January 2026
- CVE-2025-12758: Unicode Variation Selectors Bypass in 'validator' library (isLength)
full-disclosure - SEC Consult SA-20260126-2 :: UART Leaking Sensitive Data in dormakaba registration unit 9002 (PIN pad)
full-disclosure - SEC Consult SA-20260126-1 :: Multiple Critical Vulnerabilities in dormakaba Access Manager
full-disclosure - SEC Consult SA-20260126-0 :: Multiple Critical Vulnerabilities in dormakaba Kaba exos 9300
full-disclosure - Username Enumeration - elggv6.3.3
full-disclosure - Weak Password Complexity - elggv6.3.3
full-disclosure - Paper-Exploiting XAMPP Installations
full-disclosure - Re: Multiple Security Misconfigurations and Customer Enumeration Exposure in Convercent Whistleblowing Platform (EQS Group)
full-disclosure - Re: Multiple Security Misconfigurations and Customer Enumeration Exposure in Convercent Whistleblowing Platform (EQS Group)
full-disclosure - OpenMetadata <= 1.11.3 Authenticated SQL Injection
full-disclosure - Re: Multiple Security Misconfigurations and Customer Enumeration Exposure in Convercent Whistleblowing Platform (EQS Group)
full-disclosure - [REVIVE-SA-2026-001] Revive Adserver Vulnerabilities
full-disclosure - RIOT OS 2026.01-devel-317 Stack-Based Buffer Overflow in RIOT ethos Serial Frame Parser
full-disclosure - KL-001-2026-01: yintibao Fun Print Mobile Unauthorized Access via Context Hijacking
full-disclosure - Re: Multiple Security Misconfigurations and Customer Enumeration Exposure in Convercent Whistleblowing Platform (EQS Group)
full-disclosure - RIOT OS 2026.01-devel-317 Stack-Based Buffer Overflow in tapslip6 Utility via Unbounded Device Path Construction
full-disclosure - TinyOS 2.1.2 Stack-Based Buffer Overflow in mcp2200gpio
full-disclosure - TinyOS 2.1.2 printfUART Global Buffer Overflow via Unbounded Format Expansion
full-disclosure - Defense in depth -- the Microsoft way (part 95): the (shared) "Start Menu" is dispensable
full-disclosure - SigInt-Hombre v1 / dynamic Suricata detection rules from real-time threat feeds
full-disclosure - Multiple Security Misconfigurations and Customer Enumeration Exposure in Convercent Whistleblowing Platform (EQS Group)
full-disclosure - Panda3d v1.10.16 Uncontrolled Format String in Panda3D egg-mkfont Allows Stack Memory Disclosure
full-disclosure - Panda3d v1.10.16 egg-mkfont Stack Buffer Overflow
full-disclosure - Panda3d v1.10.16 deploy-stub Unbounded Stack Allocation Leading to Uninitialized Memory
full-disclosure - MongoDB v8.3.0 Integer Underflow in LMDB mdb_load
full-disclosure