Waraxe IT Security Portal
Login or Register
October 15, 2026
Menu
Home
Logout
Discussions
Forums
Members List
IRC chat
Tools
Base64 coder
MD5 hash
CRC32 checksum
ROT13 coder
SHA-1 hash
URL-decoder
Sql Char Encoder
Affiliates
y3dips ITsec
Md5 Cracker
User Manuals
AlbumNow
Content
Content
Sections
FAQ
Top
Info
Feedback
Recommend Us
Search
Journal
Your Account
User Info
Welcome, Anonymous
Nickname
Password
(Register)

Membership:
Latest: MichaelSnaRe
New Today: 0
New Yesterday: 0
Overall: 9144

People Online:
Visitors: 1219
Members: 0
Total: 1219
Full disclosure
[0day-rubbish] Auerswald COMmander 6000 / 6000R 8.6D unauthenticated provisioning import zip-slip to root binary hijack and root code execution (9.8)
[0day-rubbish] Abyss Web Server X1 2.16.22.0 first-run console credential takeover to configuration-write log-as-CGI command execution (7.5)
SEC Consult SA-20261008-0 :: Multiple critical vulnerabilities in multiple TP-Link device series
1-click MMI/USSD execution in Android via CALL_PHONE and browser-reachable dialer deeplinks (ACR Phone / com.nll.cb)
SmarterMail <9777 Pre-Auth RCE (half click lol): CVE-2026-104082, CVE-2026-104083, CVE-2026-104084
[0day-rubbish] StreamSets Transformer 3.17.0 auth-mode none fallback and un-sandboxed ScalaDTransform execution to container root (8.1 primary)
[0day-rubbish] RCDevs WebADM 2.4.14 authenticated log viewer sid command injection to webadm uid 999 code execution (7.2)
[0day-rubbish] Maian Cart 3.8 addBanners unrestricted banner upload to PHP webshell and administrator command execution (7.2 primary, PR:H)
[0day-rubbish] IPConfigure Orchid VMS 26.3.0 authenticated DNF repository GPG-key property command injection to root (7.2)
[0day-rubbish] Circutor LineEds 24.11.14-r0 unauthenticated pwrstudio events.xml shellExecute command injection (9.8)
[0day-rubbish] Asustor ADM 3.5.9.RWM1 (AS602T) music.cgi act=live stored-filename command injection reaching system() (8.8 primary, PR:L)
[0day-rubbish] Advantech WebAccess Node 9.2.3 unauthenticated CrystalRpt.aspx file upload and path traversal to code execution in w3wp.exe (9.8)
SEC Consult Research 20261001 :: Arbitrary Email sender spoofing in Apple iCloud mail
SEC Consult SA-20260924-0 :: Multiple Vulnerabilities in Paessler PRTG Network Monitor #CVE-2026-4637 #CVE-2026-4638
[NotCVE-2026-0019] game-music-emu through 0.6.5 VGM Command Interpreter Missing Operand Length Check Allows Heap Out-of-Bounds Read
Log in Register Forum FAQ Memberlist Search
IT Security and Insecurity Portal

www.waraxe.us Forum Index -> PostNuke -> Postnuke Security
Post new topicReply to topic View previous topic :: View next topic
Postnuke Security
PostPosted: Tue May 18, 2004 4:44 pm Reply with quote
dabase
Beginner
Beginner
Joined: May 18, 2004
Posts: 1




Hi

We have a security list:

As seen on Postnuke.com
http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2342

PostNuke has officially opened a new email address for security issues submissions. The address security@postnuke.com will be used for such purpose and constantly monitored.

We ask security professionals and users that find new security issues to write us at this address (security@postnuke.com) so the developers can promptly be notified of current risks and act appropriately.

We have also finished setting up a security mailing list where official announcements will be published when new security fixes for PostNuke are available.

To subscribe send an empty email to: security-announce-subscribe@postnuke.com

We encourage all PostNuke admins to subscribe to this mailing list so they will be kept up to date.

----->
Greetings
Sebastian
team Postnuke
View user's profile Send private message
"Mail Delivery Subsystem"
PostPosted: Thu May 20, 2004 12:47 am Reply with quote
Harry
Regular user
Regular user
Joined: May 20, 2004
Posts: 14




The original message was received at Thu, 20 May 2004 00:41:10 GMT
from web14803.mail.yahoo.com [216.136.224.219]

----- The following addresses had permanent fatal errors -----
<security-announce-subscribe@postnuke.com>
(reason: 550 5.1.1 <security-announce-subscribe@postnuke.com>...
User unknown)

----- Transcript of session follows -----
... while talking to ns29.hostnuke.net:
>>> RCPT To:<security-announce-subscribe@postnuke.com>
<<< 550 5.1.1 <security-announce-subscribe@postnuke.com>... User
unknown
550 5.1.1 <security-announce-subscribe@postnuke.com>... User unknown


Neutral
View user's profile Send private message Visit poster's website
PostPosted: Tue Jun 01, 2004 6:20 am Reply with quote
larsneo
Beginner
Beginner
Joined: Jun 01, 2004
Posts: 1




the security mailing list is located at http://lists.postnuke.com/mailman/listinfo/postnuke-security
online security contact via http://news.postnuke.com/index.php?module=vpContact

note: due to the amount of spam security@postnuke.com has been discontinued.

_________________
regards from gemany
larsneo
View user's profile Send private message Visit poster's website
Postnuke Security
www.waraxe.us Forum Index -> PostNuke
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT
Page 1 of 1

Post new topicReply to topic


Powered by phpBB © 2001-2008 phpBB Group



PCWizardHub - Helping you fix, build, and optimize your PC life
All logos and trademarks in this site are property of their respective owner. The comments and posts are property of their posters, all the rest (c) 2004-2024 Janek Vind "waraxe"
Page Generation: 0.026 Seconds