Mailing-list archive
No vulnerabilities published in this period.
June 2026
- APPLE-SA-06-29-2026-3 Safari 26.5.2
full-disclosure - APPLE-SA-06-29-2026-2 macOS Tahoe 26.5.2
full-disclosure - APPLE-SA-06-29-2026-1 iOS 26.5.2 and iPadOS 26.5.2
full-disclosure - Zig std.http chunked reader integer overflow -> unauthenticated remote DoS
full-disclosure - pwnlift: symlink following and TOCTOU in privileged upload handler allow arbitrary file write as root
full-disclosure - Asterisk Security Release 23.4.1
full-disclosure - Asterisk Security Release 22.10.1
full-disclosure - Asterisk Security Release 21.12.3
full-disclosure - Asterisk Security Release 20.20.1
full-disclosure - Certified Asterisk Security Release certified-22.8-cert3
full-disclosure - Certified Asterisk Security Release certified-20.7-cert11
full-disclosure - Whistleblowersoftware.com: confidentiality and anonymity leakage to third parties
full-disclosure - OpenBlow Multiple Deanonymization Vulnerabilities
full-disclosure - Whistlelink: Site-access password exposed in web server access logs via GET query string
full-disclosure - PHP 8.5.7 `levenshtein()` signed-integer overflow
full-disclosure - PHP 8.5.7 `dom_xml_serialization_algorithm()` stack-overflow
full-disclosure - PHP 8.5.7 `mb_substr()` 'SJIS-mac' size_t underflow
full-disclosure - PHP 8.5.7 `FILTER_SANITIZE_ENCODED` uninitialized read
full-disclosure - OpenBSD mpls_do_error: Remote Kernel Stack Disclosure via MPLS Label Stack Over-read
full-disclosure - SEC Consult SA-20260618-0 :: Hardcoded Root Cloud Credentials in Application Binaries in Silver Leaf Technologies - Worksnaps.net Worksnaps
full-disclosure - SEC Consult SA-20260617-1 :: Multiple Vulnerabilities in Quanos Content Solutions - SCHEMA ST4
full-disclosure - SEC Consult SA-20260617-0 :: Multiple Critical Vulnerabilities in Sprecher Automation SPRECON-E-C/-E-P/-E-T3
full-disclosure - APPLE-SA-06-16-2026-1 Beats Firmware Update 1B211
full-disclosure - OpenBSD sppp_pap_input: PAP authentication bypass
full-disclosure - SEC Consult SA-20260616-0 :: Broken Access Control in syracom AG Secure Login (2FA) for Atlassian Jira / Confluence / Bitbucket #CVE-2026-12225
full-disclosure - CVE-2025-68624: Cross-Tenant Authentication Bypass by Spoofing in N-able Mail Assure
full-disclosure - [KIS-2026-11] Discuz! <= X5.0 (enable_disable.php) Local File Inclusion Vulnerability
full-disclosure - [KIS-2026-10] Discuz! <= X5.0 OCR-based CAPTCHA Bypass Vulnerability
full-disclosure - [KIS-2026-09] Discuz! X5.0 (UC_KEY) Cross-Context Token Reuse Vulnerability
full-disclosure - SEC Consult SA-20260615-1 :: Multiple Vulnerabilities in Wertheim SafeController Hardware for VAULT ROOMS (Safe Deposit Locker System – Microcontroller)
full-disclosure - SEC Consult SA-20260615-0 :: Multiple Critical Vulnerabilities in Wertheim SafeController Software for VAULT ROOMS (Safe Deposit Locker System)
full-disclosure - SEC Consult SA-20260610-0 :: Local Privilege Escalation in Slate Digital Connect (macOS)
full-disclosure - SEC Consult SA-20260609-0 :: Multiple Local Privilege Escalation Vulnerabilities in Waves Audio - Waves Central
full-disclosure - SEC Consult SA-20260608-0 :: Privilege Escalation via Binary Planting in Genetec-provided RabbitMQ in multiple Genetec products
full-disclosure - [SYSS-2026-004] SAP NetWeaver SAML XML Signature Wrapping
full-disclosure - Samsung Galaxy Buds – Zero-Click HFP/A2DP Takeover via L2CAP Session Preemption (Vendor Response: Working as Intended)
full-disclosure - [REVIVE-SA-2026-002] Revive Adserver Vulnerabilities
full-disclosure