[0day-rubbish] Royal Server 5.04.50529.0 Local privilege escalation to LocalSystem on the execution path without credential override (7.2) Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure <fulldis... 2026-9-8 17:31:9 | 阅读: 3 | 收藏 | Full Disclosure - seclists.org rubbish royal localsystem 50529

[0day-rubbish] core-admin 1.0.164 (build 16468) Systemic shell command injection via ineffective quote escaping (8.8) Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure <fulldis... 2026-9-8 17:31:8 | 阅读: 3 | 收藏 | Full Disclosure - seclists.org rubbish injection quote ineffective

[0day-rubbish] OP5 Monitor 9.20 Command injection surviving the CVE-2025-34115 patch (OPT-IN fix ineffective) (8.8) Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure <fulldis... 2026-9-8 17:31:7 | 阅读: 2 | 收藏 | Full Disclosure - seclists.org rubbish 34115 op5 seclists

[0day-rubbish] QuantaStor 6.8.3.018 Command injection in the alert-mail command via the smtpPassword field (8.8) Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure <fulldis... 2026-9-8 17:31:5 | 阅读: 3 | 收藏 | Full Disclosure - seclists.org rubbish injection quantastor seclists

[0day-rubbish] SmarterMail 100.0.9693 (Build 9693) Antivirus command-line configuration executing as NT AUTHORITY\SYSTEM (7.2) Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure <fulldis... 2026-9-8 17:31:4 | 阅读: 1 | 收藏 | Full Disclosure - seclists.org rubbish 9693 smartermail seclists

[0day-rubbish] Jitterbit Agent 12.8.1.6 (Docker jitterbit/agent:12.8.1.6) Unauthenticated SOAP with hard-coded credentials leading to OS command execution (9.8) Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure <fulldis... 2026-9-8 17:31:2 | 阅读: 3 | 收藏 | Full Disclosure - seclists.org rubbish jitterbit coded seclists

[0day-rubbish] Accurate Online Private Cloud on-prem (current) Unauthenticated Hessian deserialization leading to JNDI remote class loading (9.8) Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure <fulldis... 2026-9-8 17:31:1 | 阅读: 4 | 收藏 | Full Disclosure - seclists.org rubbish accurate jndi remote

[0day-rubbish] DBxtra .NET 13.1.1.0 Unauthenticated SOAP API to xp_cmdshell code execution (9.8) Full Disclosuremailing list archivesFrom: disclosure via Fulldisclosure <fulldis... 2026-9-8 17:31:0 | 阅读: 3 | 收藏 | Full Disclosure - seclists.org rubbish cmdshell dbxtra seclists

HP Easy Start for macOS: CVE-2026-12554 / CVE-2026-12555 / CVE-2026-12556 Full Disclosuremailing list archivesFrom: Nir Yehoshua <nir () ciphersecuritylab... 2026-9-4 00:13:23 | 阅读: 27 | 收藏 | Full Disclosure - seclists.org 2026 nir software privileged 260722

Next.js 16.4.0-canary.13 Image Optimizer DNS Rebinding TOCTOU SSRF Still Exists Full Disclosuremailing list archivesFrom: Ron E <ronaldjedgerson () gmail com>... 2026-9-4 00:13:21 | 阅读: 20 | 收藏 | Full Disclosure - seclists.org network rebind optimizer confirms

O-CMS 1.0.0 Authenticated OS Command Injection via ai_cli_script Full Disclosuremailing list archivesFrom: Ron E <ronaldjedgerson () gmail com>... 2026-9-4 00:13:19 | 阅读: 17 | 收藏 | Full Disclosure - seclists.org attacker injection privileges passwd 7bifs

Flextype v1.0.0-alpha.3 CMS registerShortcodes() Remote Code Execution via Attacker-Controlled File Inclusion Full Disclosuremailing list archivesFrom: Ron E <ronaldjedgerson () gmail com>... 2026-9-4 00:13:18 | 阅读: 13 | 收藏 | Full Disclosure - seclists.org shortcodes php attacker flextype

Flextype v1.0.0-alpha.3 Stored Fetch Shortcode Allows Server-Side Request Forgery Full Disclosuremailing list archivesFrom: Ron E <ronaldjedgerson () gmail com>... 2026-9-4 00:13:17 | 阅读: 16 | 收藏 | Full Disclosure - seclists.org shortcode attacker flextype network ssrf

Flextype v1.0.0-alpha.3 Stored Filesystem Shortcode Allows Arbitrary File Read Full Disclosuremailing list archivesFrom: Ron E <ronaldjedgerson () gmail com>... 2026-9-4 00:13:16 | 阅读: 12 | 收藏 | Full Disclosure - seclists.org shortcode flextype shortcodes passwd attacker

Flextype v1.0.0-alpha.3 Stored Expression Injection Enables PHP Remote Code Execution Full Disclosuremailing list archivesFrom: Ron E <ronaldjedgerson () gmail com>... 2026-9-4 00:13:15 | 阅读: 13 | 收藏 | Full Disclosure - seclists.org php flextype directive attacker mutable

Flextype v1.0.0-alpha.3 NULL access_token Authentication Bypass Full Disclosuremailing list archivesFrom: Ron E <ronaldjedgerson () gmail com>... 2026-9-4 00:13:13 | 阅读: 14 | 收藏 | Full Disclosure - seclists.org bypass flextype 1788143638 php

Flextype v1.0.0-alpha.3 Path Traversal in Entry Copy Allows Arbitrary Directory Copy and File Disclosure Full Disclosuremailing list archivesFrom: Ron E <ronaldjedgerson () gmail com>... 2026-9-4 00:13:12 | 阅读: 7 | 收藏 | Full Disclosure - seclists.org flextype newid passwd

Flextype v1.0.0-alpha.3 Server-Side Request Forgery via fetch() in Query API Full Disclosuremailing list archivesFrom: Ron E <ronaldjedgerson () gmail com>... 2026-9-4 00:13:11 | 阅读: 5 | 收藏 | Full Disclosure - seclists.org flextype attacker network burp

Flextype v1.0.0-alpha.3 Stored Arbitrary Expression Injection in ExpressionsDirective Allows Arbitrary File Read Full Disclosuremailing list archivesFrom: Ron E <ronaldjedgerson () gmail com>... 2026-9-4 00:13:10 | 阅读: 8 | 收藏 | Full Disclosure - seclists.org flextype passwd 65534 attacker evaluated

Payara 7.2026.1.RC1 Remote Code Execution via Server-Side Includes #exec Directive in Payara Server Full Disclosuremailing list archivesFrom: Ron E <ronaldjedgerson () gmail com>... 2026-9-4 00:13:9 | 阅读: 38 | 收藏 | Full Disclosure - seclists.org ssi payara ron shtml ssitest