Mail Thread Index

• Date Index

• [FD] Silent;Call — Pre-Authentication Remote Root in Cisco CUCM 15.x (SKYLINE-2026-001/002/003), 0xReadingSteiner via Fulldisclosure
• [FD] The DCHECK Illusion: Chrome's "Trusted Path" Policy Creates Vulnerabilities, Shrikant Bhosale
• [FD] [0day-Rubbish] SonicWall SMA 1000 — Pre-Auth Deserialization RCE (CVSS 9.8) via Struts 1 Property Injection and Auth-Filter Rewrite, disclosure via Fulldisclosure
• [FD] Security advisory: Pre-authentication RCE in AOMEI Cyber Backup v2.3.0 (AOMEI), disclosure via Fulldisclosure
• [FD] Security advisory: Pre-authentication RCE in Apache Struts 2 2.6.11.0 (Apache Software Foundation), disclosure via Fulldisclosure
• [FD] Security advisory: multiple vulnerabilities including Default-credential RCE, Pre-authentication root RCE in atvise SCADA 3.13.0 (atvise GmbH / Bachmann Visutec), disclosure via Fulldisclosure
• [FD] Security advisory: multiple vulnerabilities including Authenticated RCE (property injection), Hardcoded credentials, Pre-authentication root RCE in CatDV Server 10.7.8 (Square Box Systems), disclosure via Fulldisclosure
• [FD] Security advisory: multiple vulnerabilities including JWT forgery / authentication bypass, Pre-authentication SYSTEM RCE in CIRCUTOR PowerStudio SCADA WAVE 24.11.6.0 (CIRCUTOR S.A.), disclosure via Fulldisclosure
• [FD] Security advisory: Pre-authentication SYSTEM RCE in Stimulsoft Server 2026.3.1 (Stimulsoft), disclosure via Fulldisclosure
• [FD] Security advisory: Pre-authentication RCE in Plastic SCM (Unity Version Control On-Prem) 11.0.16.10303 (Unity Technologies), disclosure via Fulldisclosure
• [FD] Security advisory: Pre-authentication SYSTEM RCE in Vicon Valerus ViconNet Gateway 25.200.46.0 (Vicon Industries), disclosure via Fulldisclosure
• [FD] Security advisory: Pre-authentication RCE in vMix 29 v29.0.0.48 (Studio Coast Pty Ltd), disclosure via Fulldisclosure
• [FD] Security advisory: multiple vulnerabilities including Pre-authentication root RCE in Xeams 10.3 build 6449 (Synametrics Technologies), disclosure via Fulldisclosure
• [FD] batch-2: 15 vulnerabilities incl. multiple pre-auth RCE across 10 enterprise/SCADA products - full analyses + reproducible exploits, disclosure via Fulldisclosure
• [FD] Cisco Catalyst SD-WAN C8000V Authenticated Heap Buffer Overflow, evan
• [FD] Skullcandy Dime 3 unauthorized Bluetooth pairing behavior, Jacob Nowak
• [FD] APPLE-SA-07-27-2026-1 iOS 26.6 and iPadOS 26.6, Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-07-27-2026-2 macOS Tahoe 26.6, Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-07-27-2026-3 macOS Sequoia 15.7.8, Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-07-27-2026-4 macOS Sonoma 14.8.8, Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-07-27-2026-5 tvOS 26.6, Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-07-27-2026-6 watchOS 26.6, Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-07-27-2026-7 visionOS 26.6, Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-07-27-2026-8 Safari 26.6, Apple Product Security via Fulldisclosure
• [FD] [SYSS-2026-046]: DICOM Toolkit (DCMTK) - Integer Overflow or Wraparound (CWE-190), Matthias Deeg via Fulldisclosure
• [FD] [SYSS-2026-047]: DICOM Toolkit (DCMTK) - Path traversal (CWE-22), Matthias Deeg via Fulldisclosure
• [FD] [SYSS-2026-048]: DICOM Toolkit (DCMTK) - Integer Overflow or Wraparound (CWE-190), Matthias Deeg via Fulldisclosure
• [FD] [SYSS-2026-049]: DICOM Toolkit (DCMTK) - Integer Overflow or Wraparound (CWE-190), Matthias Deeg via Fulldisclosure
• [FD] [SYSS-2026-050]: DICOM Toolkit (DCMTK) - Integer Overflow or Wraparound (CWE-190), Matthias Deeg via Fulldisclosure
• [FD] [KIS-2026-13] vBulletin <= 6.2.1 (runMaths) Remote Code Execution Vulnerability, Egidio Romano
• [FD] [KIS-2026-14] Telenia Software TVox <= 26.5.3 (set_env.php) Authentication Bypass Vulnerability, Egidio Romano
• [FD] [KIS-2026-15] Telenia Software TVox <= 26.5.3 (action_audio.php) OS Command Injection Vulnerability, Egidio Romano
• [FD] [KIS-2026-16] Telenia Software TVox <= 26.5.3 (nice) Local Privilege Escalation Vulnerability, Egidio Romano
• [FD] CVE-2026-15013 – miniOrange SAML SSO <= 5.4.3 Unauthenticated Authentication Bypass (PoC), Öner Efe Güngör
• [FD] CL.0 desync in www.microsoft.com, shed riot
• [FD] Dangling DNS record for bastion.certb.cdp.bethesda.net, shed riot
• [FD] APPLE-SA-08-06-2026-3 macOS Sonoma 14.8.9, Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-08-06-2026-2 macOS Sequoia 15.7.9, Apple Product Security via Fulldisclosure