VestaCP <= 0.9.8-26: authenticated config-parser eval sinks -> root RCE (VESTACP-2026-001)
Full Disclosure reports authenticated root RCE in VestaCP 0.9.8-26 via config-parser eval sinks.
Stories per day · 30 days
2 RSS
14 stories, newest first · one card per story
Stories tagged #full-disclosure
[0day-rubbish] Abyss Web Server X1 2.16.22.0 first-run console credential takeover to configuration-write log-as-CGI command execution (7.5)
Researchers disclosed a command-execution chain in Aprelium Abyss Web Server X1 2.16.22.0 before console password setup.
[NotCVE-2026-0018] game-music-emu (libgme) through 0.6.5 Unbounded GYM Command Loop Allows Heap Out-of-Bounds Read
libgme through 0.6.5 can leak heap memory when playing a crafted GYM file.
harness Gitspace hardcoded password for every user account
Researcher discloses a hardcoded password shared by every Harness Gitspace user account.
harness(gitness) registry webhook sort_order blind SQL injection
Harness open-source Gitness has a blind SQL injection in the registry webhook sort_order parameter.
dive tar-slip in image file extraction
Terminal tool dive has a tar-slip flaw when extracting files from Docker image layers.
openEQUELLA authenticated RCE chain(s)
Authenticated deserialization flaws in openEQUELLA can be chained into remote code execution.
[0day-rubbish] Server Technology PRO3X PDU 030600 port_mux listener program override to root command execution (7.2)
0day Rubbish disclosed authenticated root command execution in Server Technology PRO3X PDUs on firmware 030600.
Teams meeting audio and roster data remain accessible via ACS Call Automation connectCall after a participant is removed from the meeting
Teams meeting audio and roster stay reachable via ACS Call Automation after a participant is removed.
UAF in XMEye Security Camera
Full Disclosure reports a use-after-free in the Sofia binary used by XMEye security cameras.
SCHUTZWERK-SA-2024-007: Stored Cross-Site Scripting via file upload in H5P module (h5p-nodejs-library) of Lumi Education
Stored XSS in Lumi Education h5p-nodejs-library through 10.0.4 lets uploaded H5P content run JavaScript.
[0day-rubbish] DBxtra .NET 13.1.1.0 Unauthenticated SOAP API to xp_cmdshell code execution (9.8)
0day Rubbish disclosed an unauthenticated SOAP API flaw in DBxtra .NET 13.1.1.0 enabling xp_cmdshell command execution, rated CVSS 9.8.
[0day-rubbish] Accurate Online Private Cloud on-prem (current) Unauthenticated Hessian deserialization leading to JNDI remote class loading (9.8)
0day Rubbish disclosed an unauthenticated Hessian deserialization flaw in Accurate Online Private Cloud on-prem allowing JNDI remote class loading, rated 9.8.
CVE-2026-52307: Stored XSS in 1CMS v5.6
CVE-2026-52307: authenticated stored XSS in 1CMS (ClassCMS) v5.6 Column Management lets attackers inject scripts via the title field.