Mail Index

• Thread Index

• [FD] Silent;Call — Pre-Authentication Remote Root in Cisco CUCM 15.x (SKYLINE-2026-001/002/003)
  • From: 0xReadingSteiner via Fulldisclosure
• [FD] The DCHECK Illusion: Chrome's "Trusted Path" Policy Creates Vulnerabilities
  • From: Shrikant Bhosale
• [FD] [0day-Rubbish] SonicWall SMA 1000 — Pre-Auth Deserialization RCE (CVSS 9.8) via Struts 1 Property Injection and Auth-Filter Rewrite
  • From: disclosure via Fulldisclosure
• [FD] Security advisory: Pre-authentication RCE in AOMEI Cyber Backup v2.3.0 (AOMEI)
  • From: disclosure via Fulldisclosure
• [FD] Security advisory: Pre-authentication RCE in Apache Struts 2 2.6.11.0 (Apache Software Foundation)
  • From: disclosure via Fulldisclosure
• [FD] Security advisory: multiple vulnerabilities including Default-credential RCE, Pre-authentication root RCE in atvise SCADA 3.13.0 (atvise GmbH / Bachmann Visutec)
  • From: disclosure via Fulldisclosure
• [FD] Security advisory: multiple vulnerabilities including Authenticated RCE (property injection), Hardcoded credentials, Pre-authentication root RCE in CatDV Server 10.7.8 (Square Box Systems)
  • From: disclosure via Fulldisclosure
• [FD] Security advisory: multiple vulnerabilities including JWT forgery / authentication bypass, Pre-authentication SYSTEM RCE in CIRCUTOR PowerStudio SCADA WAVE 24.11.6.0 (CIRCUTOR S.A.)
  • From: disclosure via Fulldisclosure
• [FD] Security advisory: Pre-authentication SYSTEM RCE in Stimulsoft Server 2026.3.1 (Stimulsoft)
  • From: disclosure via Fulldisclosure
• [FD] Security advisory: Pre-authentication RCE in Plastic SCM (Unity Version Control On-Prem) 11.0.16.10303 (Unity Technologies)
  • From: disclosure via Fulldisclosure
• [FD] Security advisory: Pre-authentication SYSTEM RCE in Vicon Valerus ViconNet Gateway 25.200.46.0 (Vicon Industries)
  • From: disclosure via Fulldisclosure
• [FD] Security advisory: Pre-authentication RCE in vMix 29 v29.0.0.48 (Studio Coast Pty Ltd)
  • From: disclosure via Fulldisclosure
• [FD] Security advisory: multiple vulnerabilities including Pre-authentication root RCE in Xeams 10.3 build 6449 (Synametrics Technologies)
  • From: disclosure via Fulldisclosure
• [FD] batch-2: 15 vulnerabilities incl. multiple pre-auth RCE across 10 enterprise/SCADA products - full analyses + reproducible exploits
  • From: disclosure via Fulldisclosure
• [FD] Cisco Catalyst SD-WAN C8000V Authenticated Heap Buffer Overflow
  • From: evan
• [FD] Skullcandy Dime 3 unauthorized Bluetooth pairing behavior
  • From: Jacob Nowak
• [FD] APPLE-SA-07-27-2026-1 iOS 26.6 and iPadOS 26.6
  • From: Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-07-27-2026-2 macOS Tahoe 26.6
  • From: Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-07-27-2026-3 macOS Sequoia 15.7.8
  • From: Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-07-27-2026-4 macOS Sonoma 14.8.8
  • From: Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-07-27-2026-5 tvOS 26.6
  • From: Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-07-27-2026-6 watchOS 26.6
  • From: Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-07-27-2026-7 visionOS 26.6
  • From: Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-07-27-2026-8 Safari 26.6
  • From: Apple Product Security via Fulldisclosure
• [FD] [SYSS-2026-046]: DICOM Toolkit (DCMTK) - Integer Overflow or Wraparound (CWE-190)
  • From: Matthias Deeg via Fulldisclosure
• [FD] [SYSS-2026-047]: DICOM Toolkit (DCMTK) - Path traversal (CWE-22)
  • From: Matthias Deeg via Fulldisclosure
• [FD] [SYSS-2026-048]: DICOM Toolkit (DCMTK) - Integer Overflow or Wraparound (CWE-190)
  • From: Matthias Deeg via Fulldisclosure
• [FD] [SYSS-2026-049]: DICOM Toolkit (DCMTK) - Integer Overflow or Wraparound (CWE-190)
  • From: Matthias Deeg via Fulldisclosure
• [FD] [SYSS-2026-050]: DICOM Toolkit (DCMTK) - Integer Overflow or Wraparound (CWE-190)
  • From: Matthias Deeg via Fulldisclosure
• [FD] [KIS-2026-13] vBulletin <= 6.2.1 (runMaths) Remote Code Execution Vulnerability
  • From: Egidio Romano
• [FD] [KIS-2026-14] Telenia Software TVox <= 26.5.3 (set_env.php) Authentication Bypass Vulnerability
  • From: Egidio Romano
• [FD] [KIS-2026-15] Telenia Software TVox <= 26.5.3 (action_audio.php) OS Command Injection Vulnerability
  • From: Egidio Romano
• [FD] [KIS-2026-16] Telenia Software TVox <= 26.5.3 (nice) Local Privilege Escalation Vulnerability
  • From: Egidio Romano
• [FD] CVE-2026-15013 – miniOrange SAML SSO <= 5.4.3 Unauthenticated Authentication Bypass (PoC)
  • From: Öner Efe Güngör
• [FD] CL.0 desync in www.microsoft.com
  • From: shed riot
• [FD] Dangling DNS record for bastion.certb.cdp.bethesda.net
  • From: shed riot
• [FD] APPLE-SA-08-06-2026-3 macOS Sonoma 14.8.9
  • From: Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-08-06-2026-2 macOS Sequoia 15.7.9
  • From: Apple Product Security via Fulldisclosure