Mailing-list archive
No vulnerabilities published in this period.
July 2026
- [SYSS-2026-050]: DICOM Toolkit (DCMTK) - Integer Overflow or Wraparound (CWE-190)
full-disclosure - [SYSS-2026-049]: DICOM Toolkit (DCMTK) - Integer Overflow or Wraparound (CWE-190)
full-disclosure - [SYSS-2026-048]: DICOM Toolkit (DCMTK) - Integer Overflow or Wraparound (CWE-190)
full-disclosure - [SYSS-2026-047]: DICOM Toolkit (DCMTK) - Path traversal (CWE-22)
full-disclosure - [SYSS-2026-046]: DICOM Toolkit (DCMTK) - Integer Overflow or Wraparound (CWE-190)
full-disclosure - CVE-2026-15013 – miniOrange SAML SSO <= 5.4.3 Unauthenticated Authentication Bypass (PoC)
full-disclosure - Skullcandy Dime 3 unauthorized Bluetooth pairing behavior
full-disclosure - APPLE-SA-07-27-2026-8 Safari 26.6
full-disclosure - APPLE-SA-07-27-2026-7 visionOS 26.6
full-disclosure - APPLE-SA-07-27-2026-6 watchOS 26.6
full-disclosure - APPLE-SA-07-27-2026-5 tvOS 26.6
full-disclosure - APPLE-SA-07-27-2026-4 macOS Sonoma 14.8.8
full-disclosure - APPLE-SA-07-27-2026-3 macOS Sequoia 15.7.8
full-disclosure - APPLE-SA-07-27-2026-2 macOS Tahoe 26.6
full-disclosure - APPLE-SA-07-27-2026-1 iOS 26.6 and iPadOS 26.6
full-disclosure - [KIS-2026-13] vBulletin <= 6.2.1 (runMaths) Remote Code Execution Vulnerability
full-disclosure - [0day-Rubbish] SonicWall SMA 1000 — Pre-Auth Deserialization RCE (CVSS 9.8) via Struts 1 Property Injection and Auth-Filter Rewrite
full-disclosure - Dangling DNS record for bastion.certb.cdp.bethesda.net
full-disclosure - CL.0 desync in www.microsoft.com
full-disclosure - Synology stale DNS allows practical interception of traffic from vulnerable DSM clients
full-disclosure - A project is publishing full analyses of AI-discovered 0-days - first batch of 10 with reproducible exploits
full-disclosure - Amplitude customers using domain proxies should update their configuration immediately.
full-disclosure - NotCVE registry index — public records of vulnerabilities that shipped without a CVE
full-disclosure - ASUS bsitf.sys (CVE-2026-13585): Arbitrary Physical Memory Mapping in ASUS Business/Software Manager kernel driver
full-disclosure - Subject: Advisory Submission: EZ Game Booster - Cleartext Storage of Sensitive Credentials (CWE-312)
full-disclosure - [NotCVE-2026-0001] Cloudflare Universal SSL CAA augmentation weakens RFC 8657 account binding — CVE-2026-14440 assigned 163 days after public no-CVE disclosure
full-disclosure - The DCHECK Illusion: Chrome's "Trusted Path" Policy Creates Vulnerabilities
full-disclosure - CVE-2026-56877 - Skillable SCORM userId authorisation bypass
full-disclosure - New Release: UFONet v2.0 - "R3DST4R!"...
full-disclosure - XSSer v.1.9 - "Bl4ck Swarm!" released
full-disclosure - [REVIVE-SA-2026-003] Revive Adserver Vulnerabilities
full-disclosure - SCHUTZWERK-SA-2025-001: Authentication Bypass for SafeLine SL6 and SL6+
full-disclosure - OPNsense XPATH Injection (CVE-2026-53582)
full-disclosure - [fulldis] CVE-2026-58451 - Horde Groupware IMP path traversal vuln
full-disclosure - [KIS-2026-12] Control Web Panel <= 0.9.8.1224 (userRes) SQL Injection Vulnerability
full-disclosure