PHP2Shell (CVE-2026-109618) - PHP core versions after v5.4 - RCE

pizzafy-1.0 - SQLi

South River Technologies Titan MFT Server 26.0.0 - code execution

Synametrics Syncrify 6.2 - command execution

Keycloak 26.7.2 - Unauthenticated Account Takeover

Open eClass 3.15 - RCE

Automotive Shop Management System 1.0 - SQLi

Edimax BR-6478AC firmware v2.20 - authenticated command injection

Exasol Database 7.1.30 - command execution

Parasoft Continuous Testing Platform 10.7.5 - JSP command execution

ProSoft RLX-IFH24E v2.2.44 - Unsigned Firmware Upgrade Package Executed as Root

Posted by disclosure via Fulldisclosure on Oct 20

0day Rubbish Research Team is publicly disclosing a vulnerability in TRENDnet
TV-IP302PI firmware 1.02.38, the closed-source IP surveillance camera from
TRENDnet (United States). The camera's application daemon is shipped at
/hunt/hunt_server: an ARM 32-bit EABI5 version 5TE soft-float binary,
dynamically linked against /lib/ld-linux.so.3, 4.5 MB and stripped. Its own
string pool carries hunt_camera, HuntAudioConverter, HuntDataDirect and...

Posted by disclosure via Fulldisclosure on Oct 20

0day Rubbish Research Team is publicly disclosing a vulnerability in Royal
Render 9.1.26b, the closed-source render-farm job manager for VFX and
animation studios from Binary Alchemy (proprietor Holger Schoenberger) of
Ludwigsburg, Germany. Royal Render
is a different product from the Royal Server gateway sold by Royal Apps GmbH
of Austria; the two are unrelated companies sharing one word in their names,
and this disclosure concerns the German...

Posted by disclosure via Fulldisclosure on Oct 20

0day Rubbish Research Team is publicly disclosing a vulnerability in the
ProSoft RLX-IFH24E, version v2.2.44, the industrial wireless radio from
ProSoft Technology, Inc. (United States). The appliance is a closed-source
embedded device and an OEM build of the MicroHard Systems IPx21 platform on
the MHX-910 board design: an Intel IXP425 XScale processor, ARM
big-endian, Linux 2.4.24-uc0, with static management pages under /usr/web
and 57 ARM...

Posted by disclosure via Fulldisclosure on Oct 20

0day Rubbish Research Team is publicly disclosing a vulnerability in Parasoft
Continuous Testing Platform 10.7.5-SNAPSHOT, the closed-source commercial
continuous-testing, service-virtualisation and environment-management product
from Parasoft, a United States software-testing vendor headquartered in
Monrovia, California. The affected component is the em web application inside
the vendor's own container image, running on Tomcat 10.1.57 with...

Posted by disclosure via Fulldisclosure on Oct 20

0day Rubbish Research Team is publicly disclosing a vulnerability in Exasol
Database 7.1.30, the in-memory MPP analytical database from Exasol AG
(Germany), examined in its docker-db single-container deployment form. The SQL
engine is a proprietary C implementation named EXASolution, the server process
is exacts, clients speak a proprietary binary SQL protocol on port 8563 rather
than HTTP, TLS terminates on that port with a self-signed...

Posted by disclosure via Fulldisclosure on Oct 20

0day Rubbish Research Team is publicly disclosing a vulnerability in the
Edimax BR-6478AC, firmware image BR6478AC_v2.20.bin, the dual-band AC1750 SOHO
wireless router from Edimax Technology Co., Ltd. (Taiwan). A single
authenticated POST that looks like an ordinary WAN settings submission reaches
system() with a request-controlled username interpolated unquoted into a shell
command line, behind a sanitiser that inspects exactly one character,...

Posted by disclosure via Fulldisclosure on Oct 20

0day Rubbish Research Team is publicly disclosing a vulnerability in the
Edimax BR-6478AC, firmware image BR6478AC_v2.20.bin, the dual-band AC1750 SOHO
wireless router from Edimax Technology Co., Ltd. (Taiwan). A single
authenticated POST to a manufacturing radio-calibration route that is still
registered in production firmware reaches system() with thirty raw request
fields interpolated into one command line, and the web server process that...

Posted by Román Ramírez on Oct 20

-=] About RootedCON

RootedCON is a technology and cybersecurity conference that will take place in Madrid (Spain) from March 4 to 6, 2027.

This will be our XVII EDITION!

With an attendance of between 9,000 and 10,000 people, it is the most relevant specialized conference in the country
and one of the most important in Europe. We welcome students, Security Forces and Corps, technology and information
security professionals, and, above all,...