Posted by disclosure via Fulldisclosure on Aug 19

0day Rubbish Research Team is publicly disclosing a vulnerability in
VMS 6.48.809.

Type: Authenticated command injection to root RCE (CWE-78)
CVSS: 8.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Impact: Authenticated attacker executes arbitrary commands as root via unsanitized command injection
Authentication: authenticated

Full technical analysis and a reproducible proof-of-concept:...

Posted by disclosure via Fulldisclosure on Aug 19

0day Rubbish Research Team is publicly disclosing a vulnerability in
ONE Reporter 13.1.

Type: Authenticated RCE / privilege escalation via CommandExecutor (CWE-78)
CVSS: 8.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Impact: Low-privilege user executes arbitrary commands as local-admin service account
Authentication: authenticated

Full technical analysis and a reproducible proof-of-concept:...

Posted by disclosure via Fulldisclosure on Aug 19

0day Rubbish Research Team is publicly disclosing a vulnerability in
Gemini 7.3.0.

Type: Authenticated SQL injection to xp_cmdshell RCE (CWE-89)
CVSS: 8.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Impact: Authenticated user executes OS commands via stacked SQL and xp_cmdshell as sa/sysadmin
Authentication: authenticated

Full technical analysis and a reproducible proof-of-concept:...

Posted by disclosure via Fulldisclosure on Aug 19

0day Rubbish Research Team is publicly disclosing a vulnerability in
RoboTask 11.0.5.1229.

Type: Unauthenticated REST API remote task execution (CWE-306)
CVSS: 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Impact: Unauthenticated attacker enumerates and triggers pre-existing tasks with Administrator privileges
Authentication: unauthenticated / pre-auth

Full technical analysis and a reproducible proof-of-concept:...

Posted by disclosure via Fulldisclosure on Aug 19

0day Rubbish Research Team is publicly disclosing a vulnerability in
ActiveFax Server 10.70.

Type: Unauthenticated LPD Ghostscript %pipe% SYSTEM RCE (CWE-78)
CVSS: 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Impact: Unauthenticated attacker executes arbitrary commands as SYSTEM via an LPD print job
Authentication: unauthenticated / pre-auth

Full technical analysis and a reproducible proof-of-concept:...

Posted by disclosure via Fulldisclosure on Aug 19

0day Rubbish Research Team is publicly disclosing a vulnerability in
Tornado 2.11.3.

Type: Unauthenticated arbitrary file write to root RCE (storeTo=file: to cron) (CWE-22)
CVSS: 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Impact: Unauthenticated attacker writes arbitrary files and achieves root command execution via cron
Authentication: unauthenticated / pre-auth

Full technical analysis and a reproducible proof-of-concept:...

Posted by disclosure via Fulldisclosure on Aug 19

0day Rubbish Research Team is publicly disclosing a vulnerability in
Datalore On-Premises 2026.2.3.

Type: Unauthenticated RCE via InteractiveReport access-mapping flaw (CWE-306)
CVSS: 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Impact: Anonymous attacker executes arbitrary code in the notebook agent container
Authentication: unauthenticated / pre-auth

Full technical analysis and a reproducible proof-of-concept:...

Posted by Apple Product Security via Fulldisclosure on Aug 19

APPLE-SA-08-18-2026-1 Safari 26.6.1

Safari 26.6.1 addresses the following issues.
Information about the security content is also available at
https://support.apple.com/148286.

Apple maintains a Security Releases page at
https://support.apple.com/100100 which lists recent
software updates with security advisories.

WebKit
Available for: macOS Sonoma and macOS Sequoia
Impact: Processing maliciously crafted web content may lead to an
unexpected...

Posted by Nir Yehoshua on Aug 19

Hello Full Disclosure list,

Cipher Security Labs has published details for two vulnerabilities
affecting Cudy WR3000 hardware revision 2.0 running firmware before
version 2.5.24.

CVE-2026-71960 - Hard-coded JWT Secret Authentication Bypass
Severity: Critical, CVSS 9.3

The device firmware contains a hard-coded HMAC signing secret used by
the Mosquitto MQTT JWT authentication plugin. Because the secret can
be recovered from the firmware image,...