[0day-rubbish] Jitterbit Agent 12.8.1.6 (Docker jitterbit/agent:12.8.1.6) Unauthenticated SOAP with hard-coded credentials leading to OS command execution (9.8) Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure <fulldis... 2026-9-8 17:31:2 | 阅读: 16 | 收藏 | Full Disclosure - seclists.org rubbish jitterbit coded seclists

[0day-rubbish] Accurate Online Private Cloud on-prem (current) Unauthenticated Hessian deserialization leading to JNDI remote class loading (9.8) Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure <fulldis... 2026-9-8 17:31:1 | 阅读: 15 | 收藏 | Full Disclosure - seclists.org rubbish accurate jndi remote

[0day-rubbish] DBxtra .NET 13.1.1.0 Unauthenticated SOAP API to xp_cmdshell code execution (9.8) Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure <fulldis... 2026-9-8 17:31:0 | 阅读: 14 | 收藏 | Full Disclosure - seclists.org rubbish cmdshell dbxtra seclists

**Subject:** CVE-2026-2035703: Tozed ZLT X300 5G CPE — Unauthenticated Remote Root Code Execution via TR-069 Command Injection (CVSS 9.8) Full Disclosuremailing list archivesFrom: Surf free <surfv.free () gmail com>D... 2026-9-8 17:30:54 | 阅读: 13 | 收藏 | Full Disclosure - seclists.org 2026 069 x300 danish1162 cpe

CVE-2026-52307: Stored XSS in 1CMS v5.6 Full Disclosuremailing list archivesFrom: 懒-癌-症～ via Fulldisclosure <fulldisclos... 2026-9-8 17:24:14 | 阅读: 10 | 收藏 | Full Disclosure - seclists.org 1cms 2026 52307 attackers

HP Easy Start for macOS: CVE-2026-12554 / CVE-2026-12555 / CVE-2026-12556 Full Disclosuremailing list archivesFrom: Nir Yehoshua <nir () ciphersecuritylab... 2026-9-4 00:13:23 | 阅读: 42 | 收藏 | Full Disclosure - seclists.org 2026 nir software privileged 260722

Next.js 16.4.0-canary.13 Image Optimizer DNS Rebinding TOCTOU SSRF Still Exists Full Disclosuremailing list archivesFrom: Ron E <ronaldjedgerson () gmail com>... 2026-9-4 00:13:21 | 阅读: 40 | 收藏 | Full Disclosure - seclists.org network rebind optimizer confirms

O-CMS 1.0.0 Authenticated OS Command Injection via ai_cli_script Full Disclosuremailing list archivesFrom: Ron E <ronaldjedgerson () gmail com>... 2026-9-4 00:13:19 | 阅读: 31 | 收藏 | Full Disclosure - seclists.org attacker injection privileges passwd 7bifs

Flextype v1.0.0-alpha.3 CMS registerShortcodes() Remote Code Execution via Attacker-Controlled File Inclusion Full Disclosuremailing list archivesFrom: Ron E <ronaldjedgerson () gmail com>... 2026-9-4 00:13:18 | 阅读: 24 | 收藏 | Full Disclosure - seclists.org shortcodes php attacker flextype

Flextype v1.0.0-alpha.3 Stored Fetch Shortcode Allows Server-Side Request Forgery Full Disclosuremailing list archivesFrom: Ron E <ronaldjedgerson () gmail com>... 2026-9-4 00:13:17 | 阅读: 24 | 收藏 | Full Disclosure - seclists.org shortcode attacker flextype network ssrf

Flextype v1.0.0-alpha.3 Stored Filesystem Shortcode Allows Arbitrary File Read Full Disclosuremailing list archivesFrom: Ron E <ronaldjedgerson () gmail com>... 2026-9-4 00:13:16 | 阅读: 20 | 收藏 | Full Disclosure - seclists.org shortcode flextype shortcodes passwd attacker

Flextype v1.0.0-alpha.3 Stored Expression Injection Enables PHP Remote Code Execution Full Disclosuremailing list archivesFrom: Ron E <ronaldjedgerson () gmail com>... 2026-9-4 00:13:15 | 阅读: 23 | 收藏 | Full Disclosure - seclists.org php flextype directive attacker mutable

Flextype v1.0.0-alpha.3 NULL access_token Authentication Bypass Full Disclosuremailing list archivesFrom: Ron E <ronaldjedgerson () gmail com>... 2026-9-4 00:13:13 | 阅读: 26 | 收藏 | Full Disclosure - seclists.org bypass flextype 1788143638 php

Flextype v1.0.0-alpha.3 Path Traversal in Entry Copy Allows Arbitrary Directory Copy and File Disclosure Full Disclosuremailing list archivesFrom: Ron E <ronaldjedgerson () gmail com>... 2026-9-4 00:13:12 | 阅读: 17 | 收藏 | Full Disclosure - seclists.org flextype newid passwd

Flextype v1.0.0-alpha.3 Server-Side Request Forgery via fetch() in Query API Full Disclosuremailing list archivesFrom: Ron E <ronaldjedgerson () gmail com>... 2026-9-4 00:13:11 | 阅读: 16 | 收藏 | Full Disclosure - seclists.org flextype attacker network burp

Flextype v1.0.0-alpha.3 Stored Arbitrary Expression Injection in ExpressionsDirective Allows Arbitrary File Read Full Disclosuremailing list archivesFrom: Ron E <ronaldjedgerson () gmail com>... 2026-9-4 00:13:10 | 阅读: 19 | 收藏 | Full Disclosure - seclists.org flextype passwd 65534 attacker evaluated

Payara 7.2026.1.RC1 Remote Code Execution via Server-Side Includes #exec Directive in Payara Server Full Disclosuremailing list archivesFrom: Ron E <ronaldjedgerson () gmail com>... 2026-9-4 00:13:9 | 阅读: 49 | 收藏 | Full Disclosure - seclists.org ssi payara ron shtml ssitest

Payara 7.2026.1.RC1 Arbitrary EJB Method Invocation via Insecure Reflection in Payara Server Full Disclosuremailing list archivesFrom: Ron E <ronaldjedgerson () gmail com>... 2026-9-4 00:13:7 | 阅读: 13 | 收藏 | Full Disclosure - seclists.org ejb invocation attacker payara jndi

WireGuard-Linux Stack-Based Buffer Overflow in lsiio (Linux IIO Userspace Tool) Due to Unbounded fscanf Full Disclosuremailing list archivesFrom: Ron E <ronaldjedgerson () gmail com>... 2026-9-4 00:13:6 | 阅读: 11 | 收藏 | Full Disclosure - seclists.org iio lsiio buildid wireguard

thttpd v2.26 Stack-Based Buffer Overflow in thttpd redirect CGI Program Full Disclosuremailing list archivesFrom: Ron E <ronaldjedgerson () gmail com>... 2026-9-4 00:13:5 | 阅读: 14 | 收藏 | Full Disclosure - seclists.org thttpd overflow strcat ron