Mailing-list archive
No vulnerabilities published in this period.
August 2026
- [0day-rubbish] ZesleCP 3.1.21 Authenticated arbitrary file write to root RCE via cron (8.8)
full-disclosure - [0day-rubbish] StreamSets DataCollector 6.4.1 (official Docker image) Default credentials plus unsandboxed Shell Executor to root RCE (9.8)
full-disclosure - [0day-rubbish] Puppet Enterprise 2025.10.0 Authenticated command injection to root RCE (patch-bypass variant of CVE-2025-5459) (8.8)
full-disclosure - [0day-rubbish] NoMachine Terminal Server 10.0.57 two vulnerabilities
full-disclosure - [0day-rubbish] Minuteman UPS Network Management Card 1.60.3 Unauthenticated OS command injection to root RCE (9.8)
full-disclosure - [0day-rubbish] Lantronix EDS3000PR 3.2.0.0R2 two vulnerabilities
full-disclosure - [0day-rubbish] GeoVision GV-TBL4700 V1.06 Authenticated command injection to root RCE via SNMPv3 user configuration (8.8)
full-disclosure - [0day-rubbish] DrayTek Vigor 2960 v1.5.1.6 Authenticated command injection to root RCE in uploadlangs (8.8)
full-disclosure - [0day-rubbish] Codoforum 5.4.1 Authenticated arbitrary file upload to PHP RCE (7.2)
full-disclosure - [0day-rubbish] Akana API Platform 8.4.29 Unauthenticated RCE via path-normalization filter/dispatcher discrepancy (9.8)
full-disclosure - Flextype v1.0.0-alpha.3 CMS registerShortcodes() Remote Code Execution via Attacker-Controlled File Inclusion
full-disclosure - Acunetix 25.11.x - Local Privilege Escalation Vulnerability via OpenSSL Configuration (CVE-2026-6958)
full-disclosure - Flextype v1.0.0-alpha.3 Stored Fetch Shortcode Allows Server-Side Request Forgery
full-disclosure - Flextype v1.0.0-alpha.3 Stored Filesystem Shortcode Allows Arbitrary File Read
full-disclosure - Flextype v1.0.0-alpha.3 Stored Expression Injection Enables PHP Remote Code Execution
full-disclosure - Flextype v1.0.0-alpha.3 NULL access_token Authentication Bypass
full-disclosure - Flextype v1.0.0-alpha.3 Path Traversal in Entry Copy Allows Arbitrary Directory Copy and File Disclosure
full-disclosure - Flextype v1.0.0-alpha.3 Server-Side Request Forgery via fetch() in Query API
full-disclosure - Flextype v1.0.0-alpha.3 Stored Arbitrary Expression Injection in ExpressionsDirective Allows Arbitrary File Read
full-disclosure - Payara 7.2026.1.RC1 Remote Code Execution via Server-Side Includes #exec Directive in Payara Server
full-disclosure - Payara 7.2026.1.RC1 Arbitrary EJB Method Invocation via Insecure Reflection in Payara Server
full-disclosure - WireGuard-Linux Stack-Based Buffer Overflow in lsiio (Linux IIO Userspace Tool) Due to Unbounded fscanf
full-disclosure - thttpd v2.26 Stack-Based Buffer Overflow in thttpd redirect CGI Program
full-disclosure - thttpd v2.26 Stack-Based Buffer Overflow in thttpd htpasswd Utility Allows Local Memory Corruption
full-disclosure - lighttpd2 Signedness Error in li_chunkqueue_append_mem() Leads to Out-of-Bounds Memory Access
full-disclosure - Paho v1.3.15 Heap Use-After-Free in Eclipse Paho MQTT C Client via Message Retry Logi
full-disclosure - Paho v1.3.15 Arbitrary Code Execution via Untrusted Dynamic Library Execution
full-disclosure - Paho v1.3.15 Arbitrary Code Execution via Shared Library Search Path Hijacking
full-disclosure - JSON Deserialiser Unconstrained Resource Consumption Proof of Concept
full-disclosure - Multiple Integer Overflows in U-Boot Filesystem Parsing (CVE-2025-70290 through CVE-2025-70293)
full-disclosure - Dovecot Security Advisory 3/2026
full-disclosure - [ADVISORY] Multiple Integer Overflows in U-Boot Filesystem Parsing (CVE-2025-70290 through CVE-2025-70293)
full-disclosure - CyberDanube Security Research 20260611-0 | Multiple Denial of Service Vulnerabilities in Dahua IPC/SD/NVR/XVR/EVS/VTO/VTH/ASI/TPC Camera Series
full-disclosure - [0day-rubbish] VitalPBX 4.5.2 (Asterisk 20.20.1) Authenticated root RCE via asterisk_cli to dialplan System() (8.8)
full-disclosure - [0day-rubbish] Seeq Server R65.2.3 (default deployment with Data Lab installed via the official CLI) Unauthenticated RCE (open self-registration + Data Lab Jupyter missing authorization) (9.8)
full-disclosure - [0day-rubbish] Raritan EMX firmware emx_ecx_3.6.1_46982 (EMX/ECX gateway) Authenticated config injection to root RCE (8.8)
full-disclosure - [0day-rubbish] mySCADA PRO Runtime 9.4.0 (container deployment msxrun; earlier versions with the same upgrade branch are likely affected) Unauthenticated OS command injection to root RCE (9.4)
full-disclosure - [0day-rubbish] Maian Gallery v2.1 Authenticated unrestricted file upload to PHP RCE (7.2)
full-disclosure - [0day-rubbish] Leostream Connection Broker 9.1.37.0 two vulnerabilities (SQLi to root RCE, unauth SSRF)
full-disclosure - [0day-rubbish] Delta DIAEnergie IEMS V1.11 Authenticated (conditional) SQL injection to VBScript RCE (8.8)
full-disclosure - [0day-rubbish] CacheGuard OS UF-2.5.2 Authenticated RCE via config-import eval injection (8.8)
full-disclosure - [0day-rubbish] Biamp Devio SCR-20/25 firmware 2.3.1 Unauthenticated remote root RCE (DTP protocol quote injection) (9.8)
full-disclosure - Multiple Vulnerabilities in TBEA TLogger Communication Box 3rd Generation
full-disclosure - FD - Half-click unauthenticated remote code execution on Horde Groupware IMP (from a stored XSS)
full-disclosure - CVE-2026-78331 / CVE-2026-78332: Multiple Vulnerabilities in NethServer
full-disclosure - NVIDIA Linux GPU driver: unprivileged Xid 31 MMU fault via undocumented peer-teardown ordering, no CVE (vendor: intended)
full-disclosure - NVIDIA Linux GPU driver: cross-UID GPU process telemetry via NVML, no CVE (vendor: expected behavior)
full-disclosure - [0day-rubbish] SpiraTeam 9.3.0.0 (other versions with the same RetrieveByIndentLevel implementation are likely affected) Authenticated SQL injection to RCE (sysadmin + xp_cmdshell) (8.8)
full-disclosure - [0day-rubbish] webMethods Microservices Runtime (MSR) 10.x (other versions with the same XSLT module are likely affected) Pre-authentication RCE (default factory credentials + XSLT extension functions) (9.8)
full-disclosure - [0day-rubbish] Scan2x ScanWebClient 2.3.3.0 (other versions with the same handler are likely affected) Pre-authentication RCE (unrestricted upload to executable webroot) (9.8)
full-disclosure