WordPress Click2Shell flaw lets hackers execute PHP on the server
6 sources 3 min
[0day-rubbish] CaptureBites MetaServer Anonymous WCF SOAP workflow leading to RunPrograms code execution (9.8)
[0day-rubbish] Ecava IntegraXor IGX 16.0.701.10 Unauthenticated /FileUpload write chained to the dxmanager cmd.exe sink (9.8)
[0day-rubbish] Devolutions Server (DVLS) 2026.2.14.0 PAM entitlement-gate bypass to SYSTEM PowerShell via the test-script endpoint (9.1)
Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates
7 sources 3 min
Veeam Agent Flaw Actively Exploited to Gain SYSTEM Privileges on Windows
4 sources 3 min
D-Link warns of max severity zero-day bug in DIR-822A routers
Meta Muse AI app flaw lets local malware redirect dictation traffic
2 sources 3 min
Steam Windows Vulnerability Lets Users Escalate Privileges to NT AUTHORITY\SYSTEM
3 min
Public PoC Released for Apache Superset SQL Injection Vulnerability
3 min1
Linux Kernel ZcopyReaper Vulnerability Lets Local Attackers Gain Root Privileges
3 min4
Retrospective by 'gpg.fail' authors
2
ShieldCrash PoC: Microsoft Defender Fix Bypass
1
New ‘ShieldCrash’ Zero-Day Exploit Targets Microsoft Defender
2 min1
Serial Microsoft 0-day hunter drops yet another Defender exploit
2 min
Chaotic Eclipse Releases Crowdstrike Falcon ZeroDay FalconFlank
3 min2
New Windows Defender ShieldCrash 0-Day Bypasses Microsoft Patch to Read Files as SYSTEM
3 min1
Windows Defender ShieldCrash 0-Day Lets Attackers Read Arbitrary Files as SYSTEM
3 min1
Chaotic Eclipse Released ShieldCrash, A PoC For Microsoft Defender Zero-Day
4 min1
New Microsoft Defender 'ShieldCrash' zero-day grants SYSTEM access
Researcher Drops New Microsoft Defender PoC Showing ShieldBreak Patch Can Be Bypassed
2 min2
CVE-2026-34486: Apache Tomcat EncryptInterceptor Fail-Open Bypass
13 min1
Chaotic Eclipse Released GreenSection, A PoC For NVIDIA Memory Corruption Zero-Day
Nightmare Eclipse Drops CrowdStrike, Nvidia, Avast Zero-Day Exploits
3 min