Mailing-list archive
No vulnerabilities published in this period.
April 2026
- SCHUTZWERK-SA-2024-005: Arbitrary File Read and Server Side Request Forgery via XML External Entities in Lobster_pro (CVE-2024-13971)
full-disclosure - SCHUTZWERK-SA-2024-002: Arbitrary File Read and Server Side Request Forgery via XML External Entities in 4D Server SOAP (CVE-2024-39847)
full-disclosure - ESP-RFID-Tool v2 PRO — Full Public Disclosure
full-disclosure - Re: SEC Consult SA-20260427-0 :: Missing TLS Certificate Validation leading to RCE in DeskTime Time Tracking App
full-disclosure - [IWCC 2026] CfP: 15th International Workshop on Cyber Crime - Linköping, Sweden, Aug 24-27, 2026
full-disclosure - SEC Consult SA-20260427-0 :: Missing TLS Certificate Validation leading to RCE in DeskTime Time Tracking App
full-disclosure - Research: When Trusted Tools Become Attack Primitives
full-disclosure - [SBA-ADV-20251120-01] CVE-2026-0972: GoAnywhere MFT Email HTML Injection
full-disclosure - SEC Consult SA-20260423-0 :: DLL Hijacking in EfficientLab Controlio (cloud-based employee monitoring service)
full-disclosure - [KIS-2026-08] SocialEngine <= 7.8.0 (get-memberall) SQL Injection Vulnerability
full-disclosure - [KIS-2026-07] SocialEngine <= 7.8.0 Blind Server-Side Request Forgery Vulnerability
full-disclosure - APPLE-SA-04-22-2026-2 iOS 18.7.8 and iPadOS 18.7.8
full-disclosure - APPLE-SA-04-22-2026-1 iOS 26.4.2 and iPadOS 26.4.2
full-disclosure - SEC Consult SA-20260421-0 :: Broken Access Control in Config Endpoint in LiteLLM
full-disclosure - Trojan-Spy.Win32.Small / Remote Command Execution
full-disclosure - SEC Consult SA-20260415-0 :: Exposed Private Key of X.509 Certificate in SAP HANA Cockpit & SAP HANA Database Explorer
full-disclosure - CyberDanube Security Research 20260408-1 | Multiple Vulnerabilities in Siemens SICAM A8000
full-disclosure - CyberDanube Security Research 20260408-0 | Remote Operation Denial of Service in Siemens SICAM A8000
full-disclosure - SEC Consult SA-20260414-0 :: Improper Enforcement of Locked Accounts in WebUI (SSO) in Kiuwan SAST on-premise (KOP) & cloud/SaaS
full-disclosure - [KIS-2026-06] MetInfo CMS <= 8.1 (weixinreply.class.php) PHP Code Injection Vulnerability
full-disclosure - SEC Consult SA-20260401-0 :: Broken Access Control in Open WebUI
full-disclosure