F

Full Disclosure

http://seclists.org/rss/fulldisclosure.rss (RSS订阅地址)

[0day-rubbish] Royal Server 5.04.50529.0 Local privilege escalation to LocalSystem on the execution path without credential override (7.2)

<p>Posted by disclosure via Fulldisclosure on Sep 08</p>TO: fulldisclosure () seclists org<br> SUBJECT: [0day-rubbish] Royal Server 5.04.50529.0 Local privilege escalation to LocalSystem on the execution path <br> without credential override (7.2)<br> FROM: disclosure () 0day-rubbish com<br> ----BODY----<br> 0day Rubbish Research Team is publicly disclosing a vulnerability in<br> Royal Server 5.04.50529.0.<br> <br> Type: Local privilege escalation to LocalSystem on the execution path without credential override (CWE-250)<br> CVSS: 7.2...<br>

2026/9/8
阅读更多

[0day-rubbish] core-admin 1.0.164 (build 16468) Systemic shell command injection via ineffective quote escaping (8.8)

<p>Posted by disclosure via Fulldisclosure on Sep 08</p>TO: fulldisclosure () seclists org<br> SUBJECT: [0day-rubbish] core-admin 1.0.164 (build 16468) Systemic shell command injection via ineffective quote <br> escaping (8.8)<br> FROM: disclosure () 0day-rubbish com<br> ----BODY----<br> 0day Rubbish Research Team is publicly disclosing a vulnerability in<br> core-admin 1.0.164 (build 16468).<br> <br> Type: Systemic shell command injection via ineffective quote escaping (CWE-78)<br> CVSS: 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)...<br>

2026/9/8
阅读更多

[0day-rubbish] OP5 Monitor 9.20 Command injection surviving the CVE-2025-34115 patch (OPT-IN fix ineffective) (8.8)

<p>Posted by disclosure via Fulldisclosure on Sep 08</p>TO: fulldisclosure () seclists org<br> SUBJECT: [0day-rubbish] OP5 Monitor 9.20 Command injection surviving the CVE-2025-34115 patch (OPT-IN fix ineffective) <br> (8.8)<br> FROM: disclosure () 0day-rubbish com<br> ----BODY----<br> 0day Rubbish Research Team is publicly disclosing a vulnerability in<br> OP5 Monitor 9.20.<br> <br> Type: Command injection surviving the CVE-2025-34115 patch (OPT-IN fix ineffective) (CWE-78)<br> CVSS: 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)<br> Impact:...<br>

2026/9/8
阅读更多

[0day-rubbish] QuantaStor 6.8.3.018 Command injection in the alert-mail command via the smtpPassword field (8.8)

<p>Posted by disclosure via Fulldisclosure on Sep 08</p>TO: fulldisclosure () seclists org<br> SUBJECT: [0day-rubbish] QuantaStor 6.8.3.018 Command injection in the alert-mail command via the smtpPassword field <br> (8.8)<br> FROM: disclosure () 0day-rubbish com<br> ----BODY----<br> 0day Rubbish Research Team is publicly disclosing a vulnerability in<br> QuantaStor 6.8.3.018.<br> <br> Type: Command injection in the alert-mail command via the smtpPassword field (CWE-78)<br> CVSS: 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)<br> Impact:...<br>

2026/9/8
阅读更多

[0day-rubbish] SmarterMail 100.0.9693 (Build 9693) Antivirus command-line configuration executing as NT AUTHORITY\SYSTEM (7.2)

<p>Posted by disclosure via Fulldisclosure on Sep 08</p>TO: fulldisclosure () seclists org<br> SUBJECT: [0day-rubbish] SmarterMail 100.0.9693 (Build 9693) Antivirus command-line configuration executing as NT <br> AUTHORITY\SYSTEM (7.2)<br> FROM: disclosure () 0day-rubbish com<br> ----BODY----<br> 0day Rubbish Research Team is publicly disclosing a vulnerability in<br> SmarterMail 100.0.9693 (Build 9693).<br> <br> Type: Antivirus command-line configuration executing as NT AUTHORITY\SYSTEM (CWE-250)<br> CVSS: 7.2...<br>

2026/9/8
阅读更多

[0day-rubbish] Jitterbit Agent 12.8.1.6 (Docker jitterbit/agent:12.8.1.6) Unauthenticated SOAP with hard-coded credentials leading to OS command execution (9.8)

<p>Posted by disclosure via Fulldisclosure on Sep 08</p>TO: fulldisclosure () seclists org<br> SUBJECT: [0day-rubbish] Jitterbit Agent 12.8.1.6 (Docker jitterbit/agent:12.8.1.6) Unauthenticated SOAP with hard-coded <br> credentials leading to OS command execution (9.8)<br> FROM: disclosure () 0day-rubbish com<br> ----BODY----<br> 0day Rubbish Research Team is publicly disclosing a vulnerability in<br> Jitterbit Agent 12.8.1.6 (Docker jitterbit/agent:12.8.1.6).<br> <br> Type: Unauthenticated SOAP with hard-coded credentials leading...<br>

2026/9/8
阅读更多

[0day-rubbish] Accurate Online Private Cloud on-prem (current) Unauthenticated Hessian deserialization leading to JNDI remote class loading (9.8)

<p>Posted by disclosure via Fulldisclosure on Sep 08</p>TO: fulldisclosure () seclists org<br> SUBJECT: [0day-rubbish] Accurate Online Private Cloud on-prem (current) Unauthenticated Hessian deserialization leading <br> to JNDI remote class loading (9.8)<br> FROM: disclosure () 0day-rubbish com<br> ----BODY----<br> 0day Rubbish Research Team is publicly disclosing a vulnerability in<br> Accurate Online Private Cloud on-prem (current).<br> <br> Type: Unauthenticated Hessian deserialization leading to JNDI remote class loading...<br>

2026/9/8
阅读更多

[0day-rubbish] DBxtra .NET 13.1.1.0 Unauthenticated SOAP API to xp_cmdshell code execution (9.8)

<p>Posted by disclosure via Fulldisclosure on Sep 08</p>TO: fulldisclosure () seclists org<br> SUBJECT: [0day-rubbish] DBxtra .NET 13.1.1.0 Unauthenticated SOAP API to xp_cmdshell code execution (9.8)<br> FROM: disclosure () 0day-rubbish com<br> ----BODY----<br> 0day Rubbish Research Team is publicly disclosing a vulnerability in<br> DBxtra .NET 13.1.1.0.<br> <br> Type: Unauthenticated SOAP API to xp_cmdshell code execution (CWE-306)<br> CVSS: 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)<br> Impact: unauthenticated remote code execution as...<br>

2026/9/8
阅读更多

**Subject:** CVE-2026-2035703: Tozed ZLT X300 5G CPE — Unauthenticated Remote Root Code Execution via TR-069 Command Injection (CVSS 9.8)

<p>Posted by Surf free on Sep 08</p>Tozed ZLT X300 5G CPE Router firmware 6.01.3 contains an OS command<br> injection vulnerability (CWE-78) in the TR-069/CWMP client daemon<br> (netcwmpd). The IPPingDiagnostics Host parameter is passed unsanitized into<br> sprintf, which constructs a shell command executed via system_by_root() as<br> root.<br> <br> An attacker operating a rogue LTE base station using SDR hardware (~$300)<br> can impersonate the carrier&apos;s Auto Configuration Server and inject<br> arbitrary...<br>

2026/9/8
阅读更多

CVE-2026-52307: Stored XSS in 1CMS v5.6

<p>Posted by 懒-癌-症～ via Fulldisclosure on Sep 08</p>CVE-2026-52307: 1CMS v5.6 Authenticated Stored XSS Vulnerability<br> <br> Vulnerability Description<br> An authenticated stored cross-site scripting (XSS) vulnerability exists in the Column Management component of ClassCMS <br> 1CMS v5.6. Attackers can execute arbitrary web scripts or HTML by injecting a crafted payload into the title field.<br> <br> - Vulnerability Type: Cross Site Scripting (XSS)<br> - Vendor: ClassCMS<br> - Affected Product: 1CMS v5.6<br> - Affected Component:...<br>

2026/9/8
阅读更多

推荐订阅

WeLiveSecurity

Blaze's Security Blog

SANS Blog

ClearSky Cyber Security

360 Netlab Blog - Network Security Research Lab at 360