Skip to content

/

ZeroHour

ZeroHour aggregates public sources — security and AI press, vendor advisories, NVD, CISA KEV, FIRST EPSS, leak-site trackers and Have I Been Pwned — and classifies them with AI. Summaries can be wrong: read the original. All times are UTC.

News CVEs Incidents Tags Daily brief Traffic Sources RSS & API Kiosk Health Sitemap

Home
News feed
Exploited now

Security

CVEs
Ransomware & breaches
Threat actors & entities
IOCs

AI

AI & models

Explore

Tags
Daily brief
Analytics
Traffic & readers
Ask the feed
Sources

You

Watchlist
Saved
RSS, API & alerts

07:57 UTC· 10m ago

#cwe-78 — news, CVEs and analysis · ZeroHour

today 47 visits · 60 views · 7 reads·all time 17K views

Tag

#cwe-78

5 stories this week · 9 this month · 9 in 6 months · mostly security

stories per day · 30 days

Related#command-injection 8 #rce 5 #5g-cpe 1 #authenticated 1 #cambium 1 #cnmatrix 1 #conduit 1 #core-admin 1 #disclosure 1 #full-disclosure 1 #hardcoded-credentials 1 #iot 1 #legrand 1 #monitoring 1 #multitech 1 #ngcs 1 #op5-monitor 1 #opengear 1

6 stories, newest first · one card per story

Full Disclosure·3h ago high

[0day-rubbish] Cambium cnMatrix EX3024F 6.2.1-r4 SSL CSR COMMON_NAME command injection to root RCE (7.2)

#cambium #cnmatrix #command-injection

Vulnerability

Full Disclosure·4d ago

[0day-rubbish] Teltonika RutOS 00.07.06.21 Authenticated ipsec.lua logread command injection with reflected output (8.8)

#teltonika #rutos #command-injection

Vulnerability

Full Disclosure·4d ago high

[0day-rubbish] Opengear NGCS 25.11.8 Authenticated PDU name command injection to root via io.popen (8.8)

#opengear #ngcs #command-injection

Exploit / PoC

Full Disclosure·18d ago

[0day-rubbish] core-admin 1.0.164 (build 16468) Systemic shell command injection via ineffective quote escaping (8.8)

#command-injection #core-admin #cwe-78

Vulnerability

1

Full Disclosure·18d ago

[0day-rubbish] OP5 Monitor 9.20 Command injection surviving the CVE-2025-34115 patch (OPT-IN fix ineffective) (8.8)

#command-injection #cwe-78 #monitoring

CVE-2025-34115

Full Disclosure·18d ago high

Subject: CVE-2026-2035703: Tozed ZLT X300 5G CPE — Unauthenticated Remote Root Code Execution via TR-069 Command Injection (CVSS 9.8)

#5g-cpe #command-injection #cwe-78

CVE-2026-2035703