[0day-rubbish] Netsis NetOpenX REST 2.0.6.9 Unauthenticated SQL injection to xp_cmdshell SYSTEM command execution (9.8)
[0day-rubbish] Lightstreamer Server 7.4.8 Shipped placeholder JMX/RMI credentials plus MLet remote class loading to root RCE (9.8)
[0day-rubbish] FME Flow 2026.2 Zip-Slip arbitrary file write to code execution as LocalSystem (8.8)
Citrix NetScaler 0-Day RCE Vulnerabilities Actively Exploited in Attacks
in the wild 4 min
ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants
SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild
Hackers Actively Exploiting WordPress Vulnerability to Execute Malicious Code
CVE-2026-82384: Apache Roller: Unauthenticated deserialization in the XML-RPC endpoint
Metasploit Wrap Up: Belgian Waffles, Chocolates, and…Modules-Frites?
in the wild 4 min
Critical GitLab Bugs Let Attackers Execute Code Through Malicious CI/CD Regex
WordPress Click2Shell flaw lets hackers execute PHP on the server
6 sources 3 min
CISA Warns of Check Point Vulnerabilities Exploited in Attacks (CVE-2026-85102 & CVE-2026-93616)
USN-8820-1: curl vulnerabilities
VU#234131: ViewSonic vCast media streaming service allows unauthenticated screen exfiltration and device compromise
2 min
AL26-023 - Vulnerability Impacting Microsoft SharePoint Server - CVE-2026-65660
WebPros security advisory (AV26-961)
[OSSA-2026-039] OpenStack Octavia: HAProxy configuration injection leading to remote code execution in Octavia (CVE-2026-94572, CVE-2026-94571)
F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers
An OpenAI Agent Hacked Australia's Health Service. Their Government Found Out Months Later.
5 sources 3 min
Discovering and exploiting a remote code execution vulnerability in OpenCode (GHSA-632h-h47v-g4x4)
11 min
CVE-2026-96443: Apache Doris: JDBC driver URL validation bypass leads to remote code execution
Critical IBM FTM Flaws Let Attackers Execute Code and Access Payment Systems
3 min1
Critical NEXT.JS Flaw Allows Remote Code Execution Via Weaponized SVG File
2 sources 3 min