Mail Thread Index

• Date Index

• [FD] Zig std.http chunked reader integer overflow -> unauthenticated remote DoS, Agent Spooky's Fun Parade via Fulldisclosure
• [FD] Certified Asterisk Security Release certified-20.7-cert11, Asterisk Development Team via Fulldisclosure
• [FD] Certified Asterisk Security Release certified-22.8-cert3, Asterisk Development Team via Fulldisclosure
• [FD] Asterisk Security Release 20.20.1, Asterisk Development Team via Fulldisclosure
• [FD] Asterisk Security Release 21.12.3, Asterisk Development Team via Fulldisclosure
• [FD] Asterisk Security Release 22.10.1, Asterisk Development Team via Fulldisclosure
• [FD] Asterisk Security Release 23.4.1, Asterisk Development Team via Fulldisclosure
• [FD] Samsung Galaxy Buds – Zero-Click HFP/A2DP Takeover via L2CAP Session Preemption (Vendor Response: Working as Intended), 490h3fqwomf via Fulldisclosure
• [FD] [fulldis] CVE-2026-58451 - Horde Groupware IMP path traversal vuln, ㅤevan via Fulldisclosure
• [FD] [KIS-2026-12] Control Web Panel <= 0.9.8.1224 (userRes) SQL Injection Vulnerability, Egidio Romano
• [FD] pwnlift: symlink following and TOCTOU in privileged upload handler allow arbitrary file write as root, Greg via Fulldisclosure
• [FD] APPLE-SA-06-29-2026-1 iOS 26.5.2 and iPadOS 26.5.2, Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-06-29-2026-2 macOS Tahoe 26.5.2, Apple Product Security via Fulldisclosure
• [FD] APPLE-SA-06-29-2026-3 Safari 26.5.2, Apple Product Security via Fulldisclosure
• [FD] Whistlelink: Site-access password exposed in web server access logs via GET query string, Red Nanaki via Fulldisclosure
• [FD] OpenBlow Multiple Deanonymization Vulnerabilities, Red Nanaki via Fulldisclosure
• [FD] Whistleblowersoftware.com: confidentiality and anonymity leakage to third parties, Red Nanaki via Fulldisclosure
• [FD] SCHUTZWERK-SA-2025-001: Authentication Bypass for SafeLine SL6 and SL6+, Jan Hüber via Fulldisclosure
• [FD] OPNsense XPATH Injection (CVE-2026-53582), evan
• [FD] [REVIVE-SA-2026-003] Revive Adserver Vulnerabilities, Matteo Beccati