// security

$ tail -f ./security

Headlines from early disclosure channels, research labs and curated news, each with a short summary.

live updated 30 Oct, 01:55
last 24 h 122 headlines
sources 52

# Yesterday

  1. Full Disclosure early signals infra

    [0day-rubbish] NETGEAR RAX120 V1.2.5.18 authenticated SOAP InstallApp OS command injection to root-configured web-stack execution (6.8 Medium; conditionally 7.2 High with management exposure)

    NETGEAR RAX120 firmware V1.2.5.18 contains an authenticated SOAP InstallApp command injection flaw allowing root execution via the web-stack.

    seclists.org
  2. Full Disclosure early signals infra

    [0day-rubbish] Raritan PX3 PDU G4 firmware 4.3.14 command injection in the ping and traceroute diagnostics through an inverted hostname-validation return check (8.8)

    Raritan PX3 PDU G4 firmware 4.3.14 has a command injection flaw via ping and traceroute diagnostics, allowing low-privilege authenticated sessions to execute OS commands.

    seclists.org
  3. Full Disclosure early signals infra

    [0day-rubbish] NUUO Crystal Server 3.19.0.85 unauthenticated upload.php PHP web-root write with fastcgi execution into server-side code execution as the web service account (9.8 Critical)

    NUUO Crystal Server 3.19.0.85 has an unauthenticated upload.php flaw allowing web-root write and fastcgi execution, leading to server-side code execution as the web service account.

    seclists.org
  4. Full Disclosure early signals infra

    [0day-rubbish] Moxa MAR-2000 firmware FWR_MAR2000_V1.0_Build_15010909 scenario ping condition command injection through the auto-executing ping thread (7.2)

    Moxa MAR-2000 firmware FWR_MAR2000_V1.0_Build_15010909 has a command injection flaw allowing an authenticated administrator to execute arbitrary commands via the scenario ping condition.

    seclists.org
  5. Full Disclosure early signals infra

    [0day-rubbish] Moxa MAR-2000 firmware FWR_MAR2000_V1.0_Build_15010909 IPsec tunnel address command injection through the route-management shell commands (7.2)

    Moxa MAR-2000 firmware FWR_MAR2000_V1.0_Build_15010909 has an authenticated command injection flaw in the route-management shell allowing arbitrary command execution via a stored VPN address field.

    seclists.org
  6. Full Disclosure early signals infra

    [0day-rubbish] Moxa MAR-2000 firmware FWR_MAR2000_V1.0_Build_15010909 command injection in the Executer program activation path (7.2)

    Moxa MAR-2000 firmware FWR_MAR2000_V1.0_Build_15010909 contains a command injection flaw allowing an authenticated administrator to execute arbitrary commands as the product model process.

    seclists.org
  7. Full Disclosure early signals infra

    Maximised JSON Array Attacks -- "Let the Commas Hit the Floor" Proof of Concept

    Daniel Owens released Commas of D00m, a proof of concept demonstrating unconstrained resource consumption in many JSON parsers, affecting the Apache Struts2 JSON Plugin S2-072 and prior code.

    seclists.org
  8. Full Disclosure early signals infra

    Continued Apache Struts2 JSON Plugin Insecure Deserialisation

    Apache Struts2 JSON Plugin has a continued insecure deserialisation flaw related to JSON deserialisers, demonstrated by a proof of concept script.

    seclists.org

# 27 Oct

  1. Full Disclosure early signals infra

    CVE-2026-109618: PHP-CGI Pointer Underflow → Remote Code Execution (CVSS 9.2)

    PHP versions 5.x through 8.4.26 with cgi.fix_pathinfo=1 are affected by CVE-2026-109618, a pointer underflow enabling unauthenticated remote code execution.

    seclists.org
  2. Full Disclosure early signals infra

    SCHUTZWERK-SA-2025-002: Privilege escalation in Lobster_pro through request replaying

    Lobster_pro version 4.12.12-LTS and prior versions before 25.1.3 have a privilege escalation flaw allowing attackers to interact with administrative endpoints via request replaying.

    seclists.org