60
60
60
60
60
60
60
60
60
60
60
60
60
Zyxel addressed critical flaw CVE-2023
60
60
60
60
60
50
60
[remote] D-Link DNS_340L - OS Command Injection
An OS command injection exploit was published for the D-Link DNS-340L NAS, a flaw relevant to exposed network storage devices.
Exploit-DB published exploit #52643 for the D-Link DNS-340L network-attached storage device. The vulnerability is an OS command injection, which could allow arbitrary command execution on affected devices. The disclosure text does not report exploitation in the wild.
21
57
60
Week in review: Google fixes yet another Chrome zero-day exploit, YouTube as a cybercrime channel
60
Week in review: Palo Alto Networks firewalls under attack, Microsoft patches two exploited zero-days
60
Week in review: AnyDesk phishing campaign targets employees, Microsoft fixes exploited zero-days
60
CISA adds recently disclosed Apple flaws to its Known Exploited Vulnerabilities catalog
60
60
60
CISA adds WatchGuard flaw to its Known Exploited Vulnerabilities Catalog
60
45
Hackers Actively Exploiting Gitea n-day RCE Vulnerability in the Wild to Hijack Instances
Chinese-speaking Red Heron actors mass-exploit Gitea n-day RCE CVE-2026-60004 to steal source code, credentials, and pivot into victim networks.
Acronis Threat Research Unit reports active in-the-wild exploitation of Gitea RCE CVE-2026-60004 (CVSS 9.8, versions 1.17-1.27.0, fixed in 1.27.1) by a Chinese-speaking actor dubbed Red Heron. The actor scanned 1,386 Gitea servers across seven countries, held a separate list of 477 Taiwan-based targets, and confirmed victims in Canada, Argentina, Taiwan, the US, and Sri Lanka. Intrusions deployed the JITTERLY Linux implant with the SIXZUT LD_PRELOAD rootkit, stole password hashes and SSH keys, and in one case gained root admin access to a three-node Proxmox cluster.
80
60
45
60
60
60
60
60
60