FD - Half-click unauthenticated remote code execution on Horde Groupware IMP (from a stored XSS) Full Disclosuremailing list archivesFrom: Evan Tang <[email protected]>Date:... 2026-8-26 16:46:52 | 阅读: 13 | 收藏 | Full Disclosure - seclists.org php evan imp horde appledouble

[NotCVE-2026-0013] CHIRP Kenwood ITM Driver Eval Injection Allows Arbitrary Code Execution via Crafted Radio File Full Disclosuremailing list archivesFrom: advisories () notcve orgDate: Sat, 2... 2026-8-26 16:46:38 | 阅读: 12 | 收藏 | Full Disclosure - seclists.org chirp notcve 2026 itm kenwood

[NotCVE-2026-0012] EmpManageX Hardcoded Administrative Credentials in Login API Allow Full Access to Employee Records Full Disclosuremailing list archivesFrom: advisories () notcve orgDate: Fri, 2... 2026-8-26 16:46:36 | 阅读: 12 | 收藏 | Full Disclosure - seclists.org notcve empmanagex 2026 0012

[NotCVE-2026-0011] Nmap 7.99 and Earlier nselib/packet.lua Zero-Length TCP Option Infinite Loop Allows Remote Denial of Service Full Disclosuremailing list archivesFrom: advisories () notcve orgDate: Wed, 1... 2026-8-26 16:46:35 | 阅读: 11 | 收藏 | Full Disclosure - seclists.org nmap notcve 2026 lua nselib

[NotCVE-2026-0010] Barrier 2.4.0 for Windows Unauthenticated IPC Command Execution Allows Local Privilege Escalation to SYSTEM Full Disclosuremailing list archivesFrom: advisories () notcve orgDate: Wed, 1... 2026-8-26 16:46:34 | 阅读: 13 | 收藏 | Full Disclosure - seclists.org notcve barrier 2026 github debauchee

[NotCVE-2026-0009] NitroShare Desktop 0.3.4 Path Traversal Allows LAN-Adjacent Arbitrary File Write Full Disclosuremailing list archivesFrom: advisories () notcve orgDate: Wed, 1... 2026-8-26 16:46:33 | 阅读: 9 | 收藏 | Full Disclosure - seclists.org notcve nitroshare 2026 github 0009

Escargot v4.3.0-214-gfaee4437 Unauthenticated Remote Debugger Allows Arbitrary JavaScript Evaluation and Local File Disclosure Full Disclosuremailing list archivesFrom: Ron E <ronaldjedgerson () gmail com>... 2026-8-26 15:30:17 | 阅读: 5 | 收藏 | Full Disclosure - seclists.org debugger escargot client evaluation remote

Escargot v4.3.0-214-gfaee4437 OS Command Injection in Crash Handler via Unsanitized Executable Path Full Disclosuremailing list archivesFrom: Ron E <ronaldjedgerson () gmail com>... 2026-8-26 15:30:15 | 阅读: 5 | 收藏 | Full Disclosure - seclists.org escargot injection crash addr2line

Escargot v4.3.0-214-gfaee4437 Debugger WebSocket Off-by-One Stack Buffer Overflow Full Disclosuremailing list archivesFrom: Ron E <ronaldjedgerson () gmail com>... 2026-8-26 15:30:14 | 阅读: 2 | 收藏 | Full Disclosure - seclists.org escargot debugger payload 925

UltraJSON v5.13.0-6-g733f9e1 Length-Boundary Violation Causes Out-of-Bounds Read During Incomplete JSON Parsing Full Disclosuremailing list archivesFrom: Ron E <ronaldjedgerson () gmail com>... 2026-8-26 15:30:13 | 阅读: 1 | 收藏 | Full Disclosure - seclists.org ujson

Realtek edimax 52fc10d19 In-Band Ioctl Response Length Confusion Causes Heap Buffer Overflow Full Disclosuremailing list archivesFrom: Ron E <ronaldjedgerson () gmail com>... 2026-8-26 15:30:11 | 阅读: 1 | 收藏 | Full Disclosure - seclists.org inband overflow band iwr attacker

WatsonWebserver v7.1.0 HTTP/1 Chunked Request Processing Bypasses MaxRequestBodySize Full Disclosuremailing list archivesFrom: Ron E <ronaldjedgerson () gmail com>... 2026-8-26 15:30:10 | 阅读: 1 | 收藏 | Full Disclosure - seclists.org chunked decoded

Chronicle Wire v2026.8 Arbitrary Class Instantiation During YAML Deserialization via Externally Controlled YAML Type Tags Full Disclosuremailing list archivesFrom: Ron E <ronaldjedgerson () gmail com>... 2026-8-26 15:30:9 | 阅读: 2 | 收藏 | Full Disclosure - seclists.org wire chronicle externally serialized

Chronicle Wire v2026.8 Insecure Reflection Allows Unvalidated Method Invocation Full Disclosuremailing list archivesFrom: Ron E <ronaldjedgerson () gmail com>... 2026-8-26 15:30:8 | 阅读: 1 | 收藏 | Full Disclosure - seclists.org wire chronicle invocation externally

Chronicle Wire v2026.8 FileMarshallableOut Append Operations Follow Symbolic Links and Allow File Write Redirection Full Disclosuremailing list archivesFrom: Ron E <ronaldjedgerson () gmail com>... 2026-8-26 15:30:6 | 阅读: 7 | 收藏 | Full Disclosure - seclists.org symbolic wire chronicle

Multiple Vulnerabilities in TBEA TLogger Communication Box 3rd Generation Full Disclosuremailing list archivesFrom: Thomas Weber | CyberDanube via Fulldis... 2026-8-26 15:29:36 | 阅读: 9 | 收藏 | Full Disclosure - seclists.org tbea 2026 tlogger startdate uart

[0day-rubbish] NCache Enterprise 5.3.6 (other versions with the same default-disabled security and handler logic are likely affected) Pre-authentication RCE (missing auth + attacker assembly load) (9.8) Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure <fulldis... 2026-8-26 15:28:39 | 阅读: 6 | 收藏 | Full Disclosure - seclists.org rubbish ncache attacker

[0day-rubbish] myDBR 7.5.4 (build 5454) (other versions with the same file-editor are likely affected) Authenticated RCE (admin file editor + default credentials) (8.8) Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure <fulldis... 2026-8-26 15:28:38 | 阅读: 7 | 收藏 | Full Disclosure - seclists.org rubbish mydbr 5454 seclists

[0day-rubbish] Microsip 2026 (ASD data-service agent) 2026 Eval (other builds with the same backup-runner path handling are likely affected) Pre-authentication RCE (attacker-controlled binary path, LocalSystem) (9.8) Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure <fulldis... 2026-8-26 15:28:37 | 阅读: 7 | 收藏 | Full Disclosure - seclists.org rubbish 2026 localsystem asd

[0day-rubbish] LogicalDOC Enterprise Edition 9.3 (the incomplete CVE-2024-54448 fix suggests earlier 9.x versions are likely affected) Authenticated RCE (automation sandbox bypass + default credentials) (8.8) Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure <fulldis... 2026-8-26 15:28:36 | 阅读: 9 | 收藏 | Full Disclosure - seclists.org rubbish bypass logicaldoc suggests