When Business Email Compromise Starts Rewriting Reality
in the wild 5 min
Eufy Omni C20, Omni X10 Pro
4 min
Critical ManageEngine Flaw Lets Attackers Gain SYSTEM Access Through Windows Login Screen
2 sources 3 min
[0day-rubbish] Teltonika RutOS 00.07.06.21 Authenticated ipsec.lua logread command injection with reflected output (8.8)
[0day-rubbish] Opengear NGCS 25.11.8 Authenticated PDU name command injection to root via io.popen (8.8)
ZDI-26-719: Cisco ThousandEyes Virtual Appliance DHCP Client Command Injection Remote Code Execution Vulnerability
CVE-2026-93012: Email::Sender::Transport::Sendmail versions before 2.602 for Perl allow arbitrary command execution on Windows sending a message whose envelope address reaches the shell in _sendmail_pipe
One Click in a Malicious VS Code Project Can Give Attackers Persistent Access to Your PC
4 min
ZDI-26-716: Cisco Identity Services Engine createDBLink Command Injection Remote Code Execution Vulnerability
VU#280377: Dokploy is vulnerable to OS command injection
3 min
Schneider Electric NetBotz 5 750/755
3 sources 7 min
Cisco Identity Services Engine Command Injection Vulnerabilities
Cisco ThousandEyes Virtual Appliance Authenticated Web Interface Command Injection Vulnerability
Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution
in the wild
Hackers Exploit Critical Cisco Secure Email Gateway Vulnerability in the Wild to Run Malicious Code
in the wild 3 min
USN-8758-1: dracut vulnerability
Re: UnrealIRCd 6.2.7 released & hot-patch to fix security issues for existing installations
[vim-security] Ex Command Injection in sign_jump() in Vim < v9.2.1090
ZDI-26-645: Fortinet FortiSandbox write_remote_backup_to_crontab cronValue Command Injection Remote Code Execution Vulnerability
[0day-rubbish] core-admin 1.0.164 (build 16468) Systemic shell command injection via ineffective quote escaping (8.8)
1