Skip to content

/

ZeroHour

ZeroHour aggregates public sources — security and AI press, vendor advisories, NVD, CISA KEV, FIRST EPSS, leak-site trackers and Have I Been Pwned — and classifies them with AI. Summaries can be wrong: read the original. All times are UTC.

News CVEs Incidents Tags Daily brief Traffic Sources RSS & API Kiosk Health Sitemap

Home
News feed
Exploited now

Security

CVEs
Ransomware & breaches
Threat actors & entities
IOCs

AI

AI & models

Explore

Tags
Daily brief
Analytics
Traffic & readers
Ask the feed
Sources

You

Watchlist
Saved
RSS, API & alerts

07:57 UTC· 10m ago

#full-disclosure — news, CVEs and analysis · ZeroHour

today 47 visits · 60 views · 7 reads·all time 17K views

Tag

#full-disclosure

8 stories this week · 11 this month · 11 in 6 months · mostly security

stories per day · 30 days

Related#rce 4 #deserialization 2 #harness 2 #stored-xss 2 #xss 2 #1cms 1 #access-control 1 #accurate-online-private-cloud 1 #acs 1 #authenticated 1 #azure-communication-services 1 #blind-sqli 1 #classcms 1 #container-image 1 #cwe-306 1 #cwe-78 1 #dbxtra 1 #dev-environment 1

11 stories, newest first · one card per story

Full Disclosure·3h ago high

harness Gitspace hardcoded password for every user account

#harness #gitspaces #hardcoded-password

Vulnerability

Full Disclosure·3h ago high

harness(gitness) registry webhook sort_order blind SQL injection

#harness #gitness #sql-injection

Vulnerability

Full Disclosure·3h ago

dive tar-slip in image file extraction

#dive #tar-slip #path-traversal

Vulnerability

Full Disclosure·3h ago high

openEQUELLA authenticated RCE chain(s)

#openequella #rce #deserialization

Vulnerability

Full Disclosure·3h ago

[0day-rubbish] Server Technology PRO3X PDU 030600 port_mux listener program override to root command execution (7.2)

#server-technology #legrand #pdu

Vulnerability

Full Disclosure·3h ago

SCHUTZWERK-SA-2024-007: Stored Cross-Site Scripting via file upload in H5P module (h5p-nodejs-library) of Lumi Education

#xss #stored-xss #h5p

Vulnerability

Full Disclosure·4d ago

Teams meeting audio and roster data remain accessible via ACS Call Automation connectCall after a participant is removed from the meeting

#microsoft #teams #azure-communication-services

Vulnerability

Full Disclosure·4d ago

UAF in XMEye Security Camera

#xmeye #sofia #use-after-free

Vulnerability

Full Disclosure·18d ago high

[0day-rubbish] DBxtra .NET 13.1.1.0 Unauthenticated SOAP API to xp_cmdshell code execution (9.8)

#cwe-306 #dbxtra #full-disclosure

Vulnerability

Full Disclosure·18d ago high

[0day-rubbish] Accurate Online Private Cloud on-prem (current) Unauthenticated Hessian deserialization leading to JNDI remote class loading (9.8)

#accurate-online-private-cloud #deserialization #full-disclosure

Vulnerability

Full Disclosure·18d ago

CVE-2026-52307: Stored XSS in 1CMS v5.6

#1cms #classcms #full-disclosure

CVE-2026-52307