Article: [0day-rubbish] StreamSets Transformer 3.17.0 auth-mode none fallback and un-sandboxed ScalaDTransform execution to container root (8.1 primary) - published 7 days ago.
Content:
Copy Link: https://seclists.org/fulldisclosure/2026/Oct/8   
Published: 2026 10 06 17:44:51
Received: 2026 10 13 13:12:14
Feed: Full Disclosure
Source: Full Disclosure
Category: Alerts
Topic: Vulnerabilities

Article: [0day-rubbish] RCDevs WebADM 2.4.14 authenticated log viewer sid command injection to webadm uid 999 code execution (7.2) - published 7 days ago.
Content:
Copy Link: https://seclists.org/fulldisclosure/2026/Oct/7   
Published: 2026 10 06 17:44:50
Received: 2026 10 13 13:12:14
Feed: Full Disclosure
Source: Full Disclosure
Category: Alerts
Topic: Vulnerabilities

Article: [0day-rubbish] Maian Cart 3.8 addBanners unrestricted banner upload to PHP webshell and administrator command execution (7.2 primary, PR:H) - published 7 days ago.
Content:
Copy Link: https://seclists.org/fulldisclosure/2026/Oct/6   
Published: 2026 10 06 17:44:49
Received: 2026 10 13 13:12:14
Feed: Full Disclosure
Source: Full Disclosure
Category: Alerts
Topic: Vulnerabilities

Cyber Tzar Free Score Certificate

Article: [0day-rubbish] IPConfigure Orchid VMS 26.3.0 authenticated DNF repository GPG-key property command injection to root (7.2) - published 7 days ago.
Content:
Copy Link: https://seclists.org/fulldisclosure/2026/Oct/5   
Published: 2026 10 06 17:44:48
Received: 2026 10 13 13:12:14
Feed: Full Disclosure
Source: Full Disclosure
Category: Alerts
Topic: Vulnerabilities

Article: [0day-rubbish] Circutor LineEds 24.11.14-r0 unauthenticated pwrstudio events.xml shellExecute command injection (9.8) - published 7 days ago.
Content:
Copy Link: https://seclists.org/fulldisclosure/2026/Oct/4   
Published: 2026 10 06 17:44:46
Received: 2026 10 13 13:12:14
Feed: Full Disclosure
Source: Full Disclosure
Category: Alerts
Topic: Vulnerabilities

Article: [0day-rubbish] Asustor ADM 3.5.9.RWM1 (AS602T) music.cgi act=live stored-filename command injection reaching system() (8.8 primary, PR:L) - published 7 days ago.
Content:
Copy Link: https://seclists.org/fulldisclosure/2026/Oct/3   
Published: 2026 10 06 17:44:45
Received: 2026 10 13 13:12:14
Feed: Full Disclosure
Source: Full Disclosure
Category: Alerts
Topic: Vulnerabilities

Cyber Tzar Score Summary

Article: [0day-rubbish] Advantech WebAccess Node 9.2.3 unauthenticated CrystalRpt.aspx file upload and path traversal to code execution in w3wp.exe (9.8) - published 7 days ago.
Content:
Copy Link: https://seclists.org/fulldisclosure/2026/Oct/2   
Published: 2026 10 06 17:44:44
Received: 2026 10 13 13:12:14
Feed: Full Disclosure
Source: Full Disclosure
Category: Alerts
Topic: Vulnerabilities

Article: SEC Consult Research 20261001 :: Arbitrary Email sender spoofing in Apple iCloud mail - published 7 days ago.
Content:
Copy Link: https://seclists.org/fulldisclosure/2026/Oct/1   
Published: 2026 10 06 17:44:42
Received: 2026 10 13 13:12:14
Feed: Full Disclosure
Source: Full Disclosure
Category: Alerts
Topic: Vulnerabilities

Article: SEC Consult SA-20260924-0 :: Multiple Vulnerabilities in Paessler PRTG Network Monitor #CVE-2026-4637 #CVE-2026-4638 - published 7 days ago.
Content:
Copy Link: https://seclists.org/fulldisclosure/2026/Oct/0   
Published: 2026 10 06 17:44:41
Received: 2026 10 13 13:12:14
Feed: Full Disclosure
Source: Full Disclosure
Category: Alerts
Topic: Vulnerabilities

Cyber Tzar Your Score Explained

Article: Researchers Determine That 2,514 Cybersecurity Events Occur Each Second - published 7 days ago.
Content: The Comcast Business 2026 Cybersecurity Threat Report analyzed 79.3 billion cybersecurity events detected across its cybersecurity customers between March 1, 2025, and February 28, 2026
Copy Link: https://www.securitymagazine.com/articles/102623-researchers-determine-that-2-514-cybersecurity-events-occur-each-second   
Published: 2026 10 06 17:40:01
Received: 2026 10 13 13:01:26
Feed: Security Magazine – All Feeds
Source: Security Magazine
Category: News
Topic: Security

Article: Trump Mobile customers' data dumped - and some never even received their gold device - published 7 days ago.
Content: If you signed up for Trump Mobile, you may be part of an exclusive club of … ransomware victims. Criminals called BYOD claim to have broken into the Trump-branded mobile biz and leaked data belonging to 3,615 people, including names, email addresses, phone numbers, home addresses, and order details. BYOD is a new ransomware-as-a-service operation, and Trump...
Copy Link: https://www.theregister.com/security/2026/10/06/trump-mobile-customers-data-dumped-and-some-never-even-received-their-gold-device/5301433   
Published: 2026 10 06 17:32:25
Received: 2026 10 13 13:16:54
Feed: The Register - Security
Source: The Register - Security
Category: Cyber Security
Topic: Cyber Security

Cyber Tzar Gold Score Certificate

Article: AI Agents Leaked 13,000 Screenshots: Why Enterprise Approval Controls Failed - published 7 days ago.
Content:
Copy Link: https://www.techrepublic.com/article/news-ai-agents-screenshot-leak-enterprise-governance/   
Published: 2026 10 06 17:29:32
Received: 2026 10 13 13:16:51
Feed: IT Security Blog | TechRepublic
Source: IT Security Blog | TechRepublic
Category: Cyber Security
Topic: Cyber Security

Article: You Won’t Hear About These, Even In Myths (Atlassian Jira, Confluence (and more) Pre-Auth Arbitrary File Read CVE-2026-21589) - watchTowr Labs - published 7 days ago.
Content: submitted by /u/dx7r__ [link] [comments]...
Copy Link: https://www.reddit.com/r/netsec/comments/1wz82op/you_wont_hear_about_these_even_in_myths_atlassian/   
Published: 2026 10 06 17:06:35
Received: 2026 10 13 13:15:48
Feed: /r/netsec - Information Security News and Discussion
Source: /r/netsec - Information Security News and Discussion
Category: Cyber Security
Topic: Cyber Security

Cyber Tzar Score Analysis