Sec Feed Reader

Full Disclosure

Uebersicht

Quellen-ID (source_id): full_disc
Feed (extern): Feed-URL oeffnen
Vendor / Produktinfos: Vendor-Web (Domain der Feed-URL)
Kategorie: threat_intel
Provider: feed
Sprache: de
Zielgruppe: —
Tags:
Aktiv: Ja

Letzter Fetch	Letzter Erfolg	Aufeinanderfolgende Fehler	Letzte Fehlermeldung	ETag	Last-Modified
2026-10-21 10:17 UTC	2026-10-21 10:17 UTC	0	-	"3e3d-65e4a728c4474"	Tue, 20 Oct 2026 19:15:02 GMT

Letzte Eintraege

306 Eintraege · 50 pro Seite · Seite 1 von 7

Veroeffentlicht	Titel	CVEs	Severity
2026-10-20 18:50	[0day-rubbish] TRENDnet TV-IP302PI firmware 1.02.38 authenticated NTP server-address OS command injection to root command execution via a shell-form system() call (7.2 High, PR:H)	—	-
2026-10-20 18:50	[0day-rubbish] Royal Render 9.1.26b: default-unauthenticated job submission on rrServer TCP 7773 reaches worker-side shell execution as the worker identity, measured root (8.1 High)	—	-
2026-10-20 18:50	[0day-rubbish] ProSoft Technology RLX-IFH24E v2.2.44 unsigned firmware upgrade package to root command execution and full account-database overwrite (7.2)	—	-
2026-10-20 18:50	[0day-rubbish] Parasoft Continuous Testing Platform 10.7.5-SNAPSHOT anonymous deserialization in the database restore path to JSP command execution as uid=1000 (9.8)	—	-
2026-10-20 18:50	[0day-rubbish] Exasol Database 7.1.30 docker-db form: shipped default SYS credential to PYTHON3 UDF os.popen command execution as uid=500(exadefusr), output returned in-band (8.8)	—	-
2026-10-20 18:50	[0day-rubbish] Edimax BR-6478AC firmware v2.20 authenticated command injection in the setWAN WAN-configuration handler, root command execution (7.2)	—	-
2026-10-20 18:49	[0day-rubbish] Edimax BR-6478AC firmware v2.20 authenticated command injection in the formWlanMP manufacturing-test handler, root command execution (7.2)	—	-
2026-10-20 18:49	[ROOTEDCON] Call for Papers 2027 · RootedCON2027 (Madrid)	—	-
2026-10-15 07:43	VestaCP root RCE (VESTACP-2026-001)	—	-
2026-10-15 07:43	[SYSS-2026-080]: dcm4che - Path Traversal (CWE-22)	—	-
2026-10-15 07:43	[SYSS-2026-079]: dcm4che - Path Traversal (CWE-22)	—	-
2026-10-15 07:43	[SYSS-2026-078]: dcm4che - Path Traversal (CWE-22)	—	-
2026-10-15 07:43	[SYSS-2026-077]: dcm4che - Path Traversal (CWE-22)	—	-
2026-10-15 07:42	[0day-rubbish] Synametrics Syncrify 6.2 build 1178 authenticated PublicLink chunk-upload path traversal to /etc/cron.d and root command execution (7.5)	—	-
2026-10-15 07:42	[0day-rubbish] South River Technologies Titan MFT Server 26.0.0 first-run administrator setup chained to job post-command injection, NT AUTHORITY\SYSTEM (8.1)	—	-
2026-10-15 07:42	[0day-rubbish] SmartBear Collaborator Server 15.1.15101 authenticated DOORS/Simulink review-file upload zip-slip to anonymous webroot Groovy Server Page execution as uid 1001 (7.5)	—	-
2026-10-15 07:42	[0day-rubbish] PacsOne Server 7.3.9 authenticated DICOMweb STOW-RS SOP Instance UID path traversal to www-data code execution on a PACS host (7.2)	—	-
2026-10-15 07:42	[0day-rubbish] Maian Pal 2.1 product image upload with no extension allow-list to PHP webshell and www-data uid 33 code execution (7.2, PR:H)	—	-
2026-10-15 07:42	[0day-rubbish] Maian Guardian 2.1 license generator projid command injection to www-data uid 33 code execution (7.2, PR:H)	—	-
2026-10-15 07:42	[0day-rubbish] Dataedo Portal 26.2.8 with Dataedo Agent 26.2.8 unrestricted scheduler job-type deserialization to Agent-host command execution (8.1)	—	-
2026-10-15 07:42	[0day-rubbish] CloudPanel 2.5.4-3 site-settings rootDirectory nginx virtual-host injection to host root code execution (8.8)	—	-
2026-10-15 07:42	[0day-rubbish] Auerswald COMmander 6000 / 6000R 8.6D unauthenticated provisioning import zip-slip to root binary hijack and root code execution (9.8)	—	-
2026-10-15 07:42	[0day-rubbish] Abyss Web Server X1 2.16.22.0 first-run console credential takeover to configuration-write log-as-CGI command execution (7.5)	—	-
2026-10-15 07:41	SEC Consult SA-20261008-0 :: Multiple critical vulnerabilities in multiple TP-Link device series	—	-
2026-10-15 07:41	1-click MMI/USSD execution in Android via CALL_PHONE and browser-reachable dialer deeplinks (ACR Phone / com.nll.cb)	—	-
2026-10-15 07:40	SmarterMail <9777 Pre-Auth RCE (half click lol): CVE-2026-104082, CVE-2026-104083, CVE-2026-104084	CVE-2026-104082 CVE-2026-104083 CVE-2026-104084	HIGH
2026-10-06 17:44	[0day-rubbish] StreamSets Transformer 3.17.0 auth-mode none fallback and un-sandboxed ScalaDTransform execution to container root (8.1 primary)	—	-
2026-10-06 17:44	[0day-rubbish] RCDevs WebADM 2.4.14 authenticated log viewer sid command injection to webadm uid 999 code execution (7.2)	—	-
2026-10-06 17:44	[0day-rubbish] Maian Cart 3.8 addBanners unrestricted banner upload to PHP webshell and administrator command execution (7.2 primary, PR:H)	—	-
2026-10-06 17:44	[0day-rubbish] IPConfigure Orchid VMS 26.3.0 authenticated DNF repository GPG-key property command injection to root (7.2)	—	-
2026-10-06 17:44	[0day-rubbish] Circutor LineEds 24.11.14-r0 unauthenticated pwrstudio events.xml shellExecute command injection (9.8)	—	-
2026-10-06 17:44	[0day-rubbish] Asustor ADM 3.5.9.RWM1 (AS602T) music.cgi act=live stored-filename command injection reaching system() (8.8 primary, PR:L)	—	-
2026-10-06 17:44	[0day-rubbish] Advantech WebAccess Node 9.2.3 unauthenticated CrystalRpt.aspx file upload and path traversal to code execution in w3wp.exe (9.8)	—	-
2026-10-06 17:44	SEC Consult Research 20261001 :: Arbitrary Email sender spoofing in Apple iCloud mail	—	-
2026-10-06 17:44	SEC Consult SA-20260924-0 :: Multiple Vulnerabilities in Paessler PRTG Network Monitor #CVE-2026-4637 #CVE-2026-4638	CVE-2026-4637 CVE-2026-4638	HIGH
2026-10-01 06:16	[NotCVE-2026-0019] game-music-emu through 0.6.5 VGM Command Interpreter Missing Operand Length Check Allows Heap Out-of-Bounds Read	—	-
2026-10-01 06:16	[NotCVE-2026-0018] game-music-emu (libgme) through 0.6.5 Unbounded GYM Command Loop Allows Heap Out-of-Bounds Read	—	-
2026-10-01 06:16	[NotCVE-2026-0017] game-music-emu (libgme) 0.6.5 and Earlier AY Loader NULL Pointer Dereference Allows Denial of Service	—	-
2026-10-01 06:16	[NotCVE-2026-0016] game-music-emu VGM Command Interpreter Unvalidated 0xE0 PCM Seek Offset Allows Out-of-Bounds Read and Denial of Service	—	-
2026-09-29 06:08	APPLE-SA-09-28-2026-3 macOS Sequoia 15.8.1	—	-
2026-09-29 06:08	APPLE-SA-09-28-2026-2 macOS Tahoe 26.7.1	—	-
2026-09-29 06:08	APPLE-SA-09-28-2026-1 iOS 26.7.1 and iPadOS 26.7.1	—	-
2026-09-27 04:16	SEC Consult SA-20260923-0 :: Local Privilege Escalation in Honeywell IQ MultiAccess Update Service #CVE-2026-13742	CVE-2026-13742	MEDIUM
2026-09-27 04:16	[SYSS-2026-071]: GDCM (Grassroots DICOM) - Format String (CWE-134)	—	-
2026-09-27 04:16	[SYSS-2026-070]: GDCM (Grassroots DICOM) - Integer Overflow (CWE-190)	—	-
2026-09-27 04:16	[SYSS-2026-069]: GDCM (Grassroots DICOM) - Integer Overflow (CWE-190)	—	-
2026-09-27 04:16	[SYSS-2026-068]: GDCM (Grassroots DICOM) - Stack-based Buffer Overflow (CWE-121)	—	-
2026-09-27 04:16	[SYSS-2026-067]: GDCM (Grassroots DICOM) - Stack-based Buffer Overflow (CWE-121)	—	-
2026-09-27 04:14	harness Gitspace hardcoded password for every user account	—	-
2026-09-27 04:14	harness(gitness) registry webhook sort_order blind SQL injection	—	-

Alle Quellen