Mail Thread Index

• Date Index

• [FD] Zig std.http chunked reader integer overflow -> unauthenticated remote DoS, Agent Spooky's Fun Parade via Fulldisclosure
• [FD] Certified Asterisk Security Release certified-20.7-cert11, Asterisk Development Team via Fulldisclosure
• [FD] Certified Asterisk Security Release certified-22.8-cert3, Asterisk Development Team via Fulldisclosure
• [FD] Asterisk Security Release 20.20.1, Asterisk Development Team via Fulldisclosure
• [FD] Asterisk Security Release 21.12.3, Asterisk Development Team via Fulldisclosure
• [FD] Asterisk Security Release 22.10.1, Asterisk Development Team via Fulldisclosure
• [FD] Asterisk Security Release 23.4.1, Asterisk Development Team via Fulldisclosure
• [FD] Samsung Galaxy Buds – Zero-Click HFP/A2DP Takeover via L2CAP Session Preemption (Vendor Response: Working as Intended), 490h3fqwomf via Fulldisclosure
• [FD] [fulldis] CVE-2026-58451 - Horde Groupware IMP path traversal vuln, ㅤevan via Fulldisclosure
• [FD] [KIS-2026-12] Control Web Panel <= 0.9.8.1224 (userRes) SQL Injection Vulnerability, Egidio Romano
• [FD] pwnlift: symlink following and TOCTOU in privileged upload handler allow arbitrary file write as root, Greg via Fulldisclosure
• [FD] APPLE-SA-06-29-2026-1 iOS 26.5.2 and iPadOS 26.5.2, Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-06-29-2026-2 macOS Tahoe 26.5.2, Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-06-29-2026-3 Safari 26.5.2, Apple Product Security via Fulldisclosure
• [FD] Whistlelink: Site-access password exposed in web server access logs via GET query string, Red Nanaki via Fulldisclosure
• [FD] OpenBlow Multiple Deanonymization Vulnerabilities, Red Nanaki via Fulldisclosure
• [FD] Whistleblowersoftware.com: confidentiality and anonymity leakage to third parties, Red Nanaki via Fulldisclosure
• [FD] SCHUTZWERK-SA-2025-001: Authentication Bypass for SafeLine SL6 and SL6+, Jan Hüber via Fulldisclosure
• [FD] OPNsense XPATH Injection (CVE-2026-53582), evan
• [FD] [REVIVE-SA-2026-003] Revive Adserver Vulnerabilities, Matteo Beccati
• [FD] CVE-2026-56877 - Skillable SCORM userId authorisation bypass, Greg via Fulldisclosure
• [FD] Subject: Advisory Submission: EZ Game Booster - Cleartext Storage of Sensitive Credentials (CWE-312), AliReza
• [FD] [NotCVE-2026-0001] Cloudflare Universal SSL CAA augmentation weakens RFC 8657 account binding — CVE-2026-14440 assigned 163 days after public no-CVE disclosure, NotCVE Advisories
• [FD] NotCVE registry index — public records of vulnerabilities that shipped without a CVE, NotCVE Advisories
• [FD] XSSer v.1.9 - "Bl4ck Swarm!" released, psy
• [FD] New Release: UFONet v2.0 - "R3DST4R!"..., psy
• [FD] ASUS bsitf.sys (CVE-2026-13585): Arbitrary Physical Memory Mapping in ASUS Business/Software Manager kernel driver, Hayaturehman Ahmadzai
• [FD] Amplitude customers using domain proxies should update their configuration immediately., shed riot
• [FD] Synology stale DNS allows practical interception of traffic from vulnerable DSM clients, shed riot
• [FD] A project is publishing full analyses of AI-discovered 0-days - first batch of 10 with reproducible exploits, zz lin