FD - Half-click unauthenticated remote code execution on Horde Groupware IMP (from a stored XSS) Full Disclosuremailing list archivesFrom: Evan Tang <[email protected]>Date:... 2026-8-26 16:46:52 | 阅读: 0 | 收藏 | Full Disclosure - seclists.org php evan imp horde appledouble

[NotCVE-2026-0013] CHIRP Kenwood ITM Driver Eval Injection Allows Arbitrary Code Execution via Crafted Radio File Full Disclosuremailing list archivesFrom: advisories () notcve orgDate: Sat, 2... 2026-8-26 16:46:38 | 阅读: 0 | 收藏 | Full Disclosure - seclists.org chirp notcve 2026 itm kenwood

[NotCVE-2026-0012] EmpManageX Hardcoded Administrative Credentials in Login API Allow Full Access to Employee Records Full Disclosuremailing list archivesFrom: advisories () notcve orgDate: Fri, 2... 2026-8-26 16:46:36 | 阅读: 0 | 收藏 | Full Disclosure - seclists.org notcve empmanagex 2026 0012

[NotCVE-2026-0011] Nmap 7.99 and Earlier nselib/packet.lua Zero-Length TCP Option Infinite Loop Allows Remote Denial of Service Full Disclosuremailing list archivesFrom: advisories () notcve orgDate: Wed, 1... 2026-8-26 16:46:35 | 阅读: 0 | 收藏 | Full Disclosure - seclists.org nmap notcve 2026 lua nselib

[NotCVE-2026-0010] Barrier 2.4.0 for Windows Unauthenticated IPC Command Execution Allows Local Privilege Escalation to SYSTEM Full Disclosuremailing list archivesFrom: advisories () notcve orgDate: Wed, 1... 2026-8-26 16:46:34 | 阅读: 0 | 收藏 | Full Disclosure - seclists.org notcve barrier 2026 github debauchee

[NotCVE-2026-0009] NitroShare Desktop 0.3.4 Path Traversal Allows LAN-Adjacent Arbitrary File Write Full Disclosuremailing list archivesFrom: advisories () notcve orgDate: Wed, 1... 2026-8-26 16:46:33 | 阅读: 0 | 收藏 | Full Disclosure - seclists.org notcve nitroshare 2026 github 0009

Escargot v4.3.0-214-gfaee4437 Unauthenticated Remote Debugger Allows Arbitrary JavaScript Evaluation and Local File Disclosure Full Disclosuremailing list archivesFrom: Ron E <ronaldjedgerson () gmail com>... 2026-8-26 15:30:17 | 阅读: 0 | 收藏 | Full Disclosure - seclists.org debugger escargot client evaluation remote

Chronicle Wire v2026.8 FileMarshallableOut Append Operations Follow Symbolic Links and Allow File Write Redirection Full Disclosuremailing list archivesFrom: Ron E <ronaldjedgerson () gmail com>... 2026-8-26 15:30:6 | 阅读: 6 | 收藏 | Full Disclosure - seclists.org symbolic wire chronicle

Multiple Vulnerabilities in TBEA TLogger Communication Box 3rd Generation Full Disclosuremailing list archivesFrom: Thomas Weber | CyberDanube via Fulldis... 2026-8-26 15:29:36 | 阅读: 7 | 收藏 | Full Disclosure - seclists.org tbea 2026 tlogger startdate uart

[0day-rubbish] NCache Enterprise 5.3.6 (other versions with the same default-disabled security and handler logic are likely affected) Pre-authentication RCE (missing auth + attacker assembly load) (9.8) Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure <fulldis... 2026-8-26 15:28:39 | 阅读: 6 | 收藏 | Full Disclosure - seclists.org rubbish ncache attacker

[0day-rubbish] myDBR 7.5.4 (build 5454) (other versions with the same file-editor are likely affected) Authenticated RCE (admin file editor + default credentials) (8.8) Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure <fulldis... 2026-8-26 15:28:38 | 阅读: 7 | 收藏 | Full Disclosure - seclists.org rubbish mydbr 5454 seclists

[0day-rubbish] Microsip 2026 (ASD data-service agent) 2026 Eval (other builds with the same backup-runner path handling are likely affected) Pre-authentication RCE (attacker-controlled binary path, LocalSystem) (9.8) Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure <fulldis... 2026-8-26 15:28:37 | 阅读: 6 | 收藏 | Full Disclosure - seclists.org rubbish 2026 localsystem asd

[0day-rubbish] LogicalDOC Enterprise Edition 9.3 (the incomplete CVE-2024-54448 fix suggests earlier 9.x versions are likely affected) Authenticated RCE (automation sandbox bypass + default credentials) (8.8) Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure <fulldis... 2026-8-26 15:28:36 | 阅读: 7 | 收藏 | Full Disclosure - seclists.org rubbish bypass logicaldoc suggests

[0day-rubbish] CFEngine Enterprise Nova Hub 3.27.1 (other versions with the same generateScriptFromTemplates quoting are likely affected) Authenticated RCE (command injection via VCS settings, root) (8.8) Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure <fulldis... 2026-8-26 15:28:35 | 阅读: 7 | 收藏 | Full Disclosure - seclists.org rubbish cfengine vcs nova

[0day-rubbish] VMS 6.48.809 Authenticated command injection to root RCE (8.8) Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure <fulldis... 2026-8-20 06:25:27 | 阅读: 22 | 收藏 | Full Disclosure - seclists.org rubbish vms injection mailing

[0day-rubbish] ONE Reporter 13.1 Authenticated RCE / privilege escalation via CommandExecutor (8.8) Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure <fulldis... 2026-8-20 06:25:25 | 阅读: 21 | 收藏 | Full Disclosure - seclists.org rubbish reporter seclists

[0day-rubbish] Gemini 7.3.0 Authenticated SQL injection to xp_cmdshell RCE (8.8) Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure <fulldis... 2026-8-20 06:25:22 | 阅读: 20 | 收藏 | Full Disclosure - seclists.org rubbish cmdshell gemini seclists

[0day-rubbish] RoboTask 11.0.5.1229 Unauthenticated REST API remote task execution (9.8) Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure <fulldis... 2026-8-20 06:25:19 | 阅读: 22 | 收藏 | Full Disclosure - seclists.org rubbish robotask mailing seclists

[0day-rubbish] ActiveFax Server 10.70 Unauthenticated LPD Ghostscript %pipe% SYSTEM RCE (9.8) Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure <fulldis... 2026-8-20 06:25:17 | 阅读: 23 | 收藏 | Full Disclosure - seclists.org rubbish lpd seclists mailing

[0day-rubbish] Tornado 2.11.3 Unauthenticated arbitrary file write to root RCE (storeTo=file: to cron) (9.8) Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure <fulldis... 2026-8-20 06:25:14 | 阅读: 19 | 收藏 | Full Disclosure - seclists.org rubbish tornado storeto seclists