FortiWeb 8.0.2 - Remote Code Execution

7-Zip 24.00 - Directory Traversal

xibocms 3.3.4 - RCE

SQLite 3.50.1 - Heap Overflow

Microsoft MMC MSC EvilTwin - Local Admin Creation

Horilla v1.3 - RCE

is-localhost-ip 2.0.0 - SSRF

Fortinet FortiWeb v8.0.1 - Auth Bypass

Windows Kernel - Elevation of Privilege

Desktop Window Manager Core Library 10.0.10240.0 - Privilege Escalation

ASP.net 8.0.10 - Bypass

Grafana 11.6.0 - SSRF

Zhiyuan OA - arbitrary file upload leading

WBCE CMS 1.6.4 - Remote Code Execution

RiteCMS 3.1.0 - Authenticated Remote Code Execution

WordPress Madara - Local File Inclusion

Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Apr 02

SEC Consult Vulnerability Lab Security Advisory < 20260401-0 >
=======================================================================
title: Broken Access Control
            product: Open WebUI
 vulnerable version: <v0.8.11
      fixed version: v0.8.11
CVE number: CVE-2026-34222
             impact: high
homepage:https://openwebui.com
              found: 2026-02-06...

Posted by SEC Consult Vulnerability Lab via Fulldisclosure on Apr 02

SEC Consult Vulnerability Lab Security Advisory < 20260326-0 >
=======================================================================
title: Local Privilege Escalation
product: Vienna Assistant (MacOS) - Vienna Symphonic Library
 vulnerable version: 1.2.542
fixed version: -
CVE number: CVE-2026-24068
             impact: high
homepage:https://www.vsl.co.at/
         ...

Posted by Joseph Goydish II via Fulldisclosure on Apr 02

SUMMARY

Apple's Oblivious HTTP relay for Live Caller ID Lookup (iOS 18+) routes
traffic through 14 third-party endpoints across six countries. These include
an anonymous Delaware LLC sharing data with OpenAI, a Russian endpoint
(Yandex), and a Swiss GmbH whose privacy policy names "The Legal Entity to
be Confirmed" as its data controller. None of this is disclosed to users.

This is shared infrastructure. All devices using Live...

Posted by Egidio Romano on Apr 02

---------------------------------------------------------------------------
MetInfo CMS <= 8.1 (weixinreply.class.php) PHP Code Injection Vulnerability
---------------------------------------------------------------------------

[-] Software Link:

https://www.metinfo.cn

[-] Affected Versions:

Versions 7.9, 8.0, and 8.1.

[-] Vulnerability Description:

The vulnerable code is located into the...