Full Disclosure A public, vendor-neutral forum for detailed discussion of vulnerabilities and exploitation techniques, as well as tools, papers, news, and events of interest to the community. The relaxed atmosphere of this quirky list provides some comic relief and certain industry gossip. More importantly, fresh vulnerabilities sometimes hit this list many hours or days before they pass through the Bugtraq moderation queue.
- A project is publishing full analyses of AI-discovered 0-days – first batch of 10 with reproducible exploits
on July 23, 2026 at 2:03 amPosted by zz lin on Jul 22I came across a project, “0day Rubbish”, that states it will continuously disclose 0-day vulnerabilities discovered by an AI-driven research process (a multi-LLM ensemble of Claude, OpenAI, DeepSeek and GLM). For each vulnerability the project publishes a full technical analysis together with a working exploit script and step-by-step reproduction instructions. The project’s content is hosted at: https://0day-rubbish.com/blog…
- Synology stale DNS allows practical interception of traffic from vulnerable DSM clientson July 23, 2026 at 2:02 am
Posted by shed riot on Jul 22# Synology stale DNS allows practical interception of traffic from vulnerable DSM clients Vendor case: 904909 Suggested severity: High ## Customer advisory Synology customers using the affected DSM and Relayd versions listed below should upgrade immediately. The relevant man-in-the-middle vulnerabilities were fixed in DSM 6.2.3-25426 Update 3. Customers should install the latest DSM version available for their device, and in no case remain on…
- Amplitude customers using domain proxies should update their configuration immediately.on July 23, 2026 at 2:02 am
Posted by shed riot on Jul 22After receiving live analytics requests intended for `api2.amplitude.com`, I contacted `security () amplitude com` and was invited to submit the issue through Amplitude’s private Bugcrowd programme. In my view, Amplitude’s handling of the report, including closing it as “Not applicable” despite evidence of intercepted customer traffic, caused by insecure configurations and documentation, constitutes a negligent approach to…
- ASUS bsitf.sys (CVE-2026-13585): Arbitrary Physical Memory Mapping in ASUS Business/Software Manager kernel driveron July 21, 2026 at 5:41 am
Posted by Hayaturehman Ahmadzai on Jul 20Hi all, I’m disclosing a vulnerability (CVE-2026-13585) in the ASUS bsitf.sys / AsusBSItf.sys kernel driver, shipped with ASUS Business Manager and Software Manager. ASUS has assigned the CVE and published a vendor advisory with countermeasures. Summary: The driver exposes a device (\\.\bsitf, admin-required to open) with an IOCTL that allocates a caller-specified amount of physically contiguous kernel memory, maps it into the calling…
- New Release: UFONet v2.0 – “R3DST4R!”…on July 21, 2026 at 5:40 am
Posted by psy on Jul 20Hi Community, I am glad to present a new release of this tool: – https://ufonet.03c8.net ——— “UFONet is a free software, P2P and cryptographic -disruptive toolkit- that allows to perform DoS and DDoS attacks; on the Layer 7 (APP/HTTP) through the exploitation of Open Redirect vectors on third-party websites to act as a botnet and on the Layer3 (Network) abusing the protocol.” “It also works as an encrypted DarkNET to…
- XSSer v.1.9 – “Bl4ck Swarm!” releasedon July 21, 2026 at 5:40 am
Posted by psy on Jul 20Hi FD, I am glad to present a new release of this tool: – https://xsser.03c8.net ——— “Cross Site “Scripter” (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications. It provides several options to try to bypass certain filters and various special techniques for code injection.” ——— XSSer has pre-installed [ > 1500 XSS ] attacking vectors and can…
- NotCVE registry index — public records of vulnerabilities that shipped without a CVEon July 21, 2026 at 5:35 am
Posted by NotCVE Advisories on Jul 20—————————————————————————- NotCVE Registry Index — 2026-07-16 —————————————————————————- [-] About the NotCVE registry: NotCVE (https://notcve.org) assigns public identifiers to real, verifiable vulnerabilities that did not receive a CVE — typically because the affected vendor did not acknowledge the issue. Each record preserves the technical…
- [NotCVE-2026-0001] Cloudflare Universal SSL CAA augmentation weakens RFC 8657 account binding — CVE-2026-14440 assigned 163 days after public no-CVE disclosureon July 16, 2026 at 4:43 am
Posted by NotCVE Advisories on Jul 15—————————————————————————- NotCVE Disclosure Update — NotCVE-2026-0001 / CVE-2026-14440 —————————————————————————- [-] Summary: On 2026-01-19 the issue described below was published as NotCVE-2026-0001 after no CVE identifier was assigned for it. On 2026-07-01 — 163 days later — Cloudflare assigned CVE-2026-14440 to the same issue, now…
- Subject: Advisory Submission: EZ Game Booster – Cleartext Storage of Sensitive Credentials (CWE-312)on July 16, 2026 at 4:42 am
Posted by AliReza on Jul 15# Exploit Title: EZ Game Booster v1.0.0 – Cleartext Credentials in user.config # Date: 2026-07-16 # Exploit Author: Alireza Chegini # Vendor Homepage: https://ezsystemrepairs.com # Software Link: https://ezsystemrepairs.com (Free version available) # Version: 1.0.0 (v2.0 exists but not tested – paid license required) # Tested on: Windows 10 / Windows 11 # CVE: Pending ============================================================ 1. Description…
- CVE-2026-56877 – Skillable SCORM userId authorisation bypasson July 16, 2026 at 4:41 am
Posted by Greg via Fulldisclosure on Jul 15Skillable’s SCORM lab launch endpoint validates a launch token but enforces per-user allocation limits using a browser-supplied userId that is not bound to the validated token. An authenticated learner can modify this identifier to bypass configured limits, launch concurrent lab instances, and consume another learner’s allocation. Skillable states that no fix is planned for the legacy SCORM launch path. CVE-2026-56877 was assigned by…
- [REVIVE-SA-2026-003] Revive Adserver Vulnerabilitieson July 9, 2026 at 5:36 am
Posted by Matteo Beccati on Jul 08======================================================================== Revive Adserver Security Advisory REVIVE-SA-2026-003 ———————————————————————— https://www.revive-adserver.com/security/revive-sa-2026-003 ———————————————————————— Date: 2026-06-25 Risk Level: Medium to High Applications affected: Revive Adserver Versions…
- OPNsense XPATH Injection (CVE-2026-53582)on July 7, 2026 at 6:39 am
Posted by evan on Jul 06SUMMARY: a stored XPATH injection allows any user with just ca manager/certificate manager perms to leak any secret key/any value in config.xml, thus achieving privilege escalation and potentially remote code execution. this can also likely be chained via csrf and some clever hiding. see https://github.com/opnsense/core/security/advisories/GHSA-xww7-76m6-mh2r == VULN == the primary vulnerable sink is here: $refcount =…
- SCHUTZWERK-SA-2025-001: Authentication Bypass for SafeLine SL6 and SL6+on July 7, 2026 at 6:38 am
Posted by Jan Hüber via Fulldisclosure on Jul 06Authentication Bypass for SafeLine SL6 and SL6+ =============================================== The SafeLine SL6 and SL6+ devices integrated into elevator emergency intercom systems are vulnerable to an authentication bypass. This vulnerability allows attackers to bypass authentication requirements and access the device’s configuration service via the Bluetooth Low Energy (BLE) interface. Consequently, an attacker within wireless range…
- Whistleblowersoftware.com: confidentiality and anonymity leakage to third partieson July 2, 2026 at 6:40 pm
Posted by Red Nanaki via Fulldisclosure on Jul 02Whistleblowersoftware.com: confidentiality and anonymity leakage to third parties ## Summary The anonymous reporting flow on `whistleblowersoftware.com` encrypts report text end-to-end in the browser but does not extend the same guarantee to attachments and exposes the reporter’s network identity and timing to a US-based third party. Together these weaken the confidentiality and anonymity properties the platform is expected to provide. ##…
- OpenBlow Multiple Deanonymization Vulnerabilitieson July 2, 2026 at 6:40 pm
Posted by Red Nanaki via Fulldisclosure on Jul 02OpenBlow Multiple Deanonymization Vulnerabilities Summary A production deployment was observed (HTTP archive of a full, real whistleblower submission) to route its anonymous reporting flow through Google. The intake CAPTCHA is Google reCAPTCHA, enforced as a mandatory, server-validated gate on report submission, and the UI additionally pulls a web font from fonts.gstatic.com. As a result, every prospective whistleblower’s browser makes…
