CWE-78 - OS Command Injection

Critical GitLab CVE-2026-85706 Exploited; Microsoft Issues Record 974 Patches

SonicWall SMA1000 Faces Critical Zero-Day Exploitation

CISA Warns of Exploited Vulnerabilities in ProFTPD, ONLYOFFICE, Strapi, and More

GitLab Issues Emergency Patch for Critical RCE Vulnerability

Critical Citrix NetScaler Zero-Day Vulnerabilities Exploited

Critical RCE Vulnerability in Zimbra Exploited by Attackers

Critical Vulnerabilities in SonicWall and Fortinet Devices Exploited in the Wild

Critical Command Injection Vulnerability in Deno Versions 2.7.0 to 2.9.7

China-Aligned Hackers Exploit Tencent's Sogou Flaw for Backdoor Deployment

Critical Remote Code Execution Flaw Discovered in Flowise MCP Server

Ubiquiti Patches Critical Vulnerabilities in UniFi OS Exposing Remote Attacks

Critical OS Command Injection Vulnerability in wg-easy 15.3.0 Disclosed

New Vulnerabilities Discovered in Serial-to-IP Converters Threaten Critical Infrastructure

Critical Flaw in Collabora's CODE Server Backdoors Nextcloud Servers

Critical Vulnerabilities Discovered in Splunk AI Toolkit

Critical RCE Vulnerability in Langflow Exposed

CISA Alerts on Critical Flaws in SimpleHelp, Samsung MagicINFO, and D-Link Devices

Critical Cisco Secure Email Gateway Vulnerability Exploited

Critical Arbitrary Command Execution Flaw in Fedora Goose

Critical Command Injection and DoS Vulnerabilities in openSUSE pcp

Critical CVE-2026-11332 Affects Fedora Ansible-Core Versions

China-Nexus Hackers Target Hospitals and Governments with TriBack Loader Malware

Critical CVE-2026-0768 Exploited in Langflow Attacks

Multiple Critical Vulnerabilities Exploited in SonicWall and SharePoint Systems

Critical Vulnerability in HTTP-Daemon Affects Multiple Ubuntu Releases

Critical OpenSSH Vulnerabilities Affecting Multiple Ubuntu Versions

Critical Vulnerabilities in openSUSE rsync Lead to Arbitrary Code Execution Risks

Multiple CVEs in Python 3.15 Affect Fedora Users

Critical Command Injection Vulnerabilities in MSI Radix AXE6600 Router Firmware

CISA Adds Seven Exploited Vulnerabilities; IBM Warns of Langflow OSS Flaws

Amazon Q Developer Vulnerability Enables Cloud Credential Theft

Critical Vulnerabilities in Rocky Linux Affecting Multiple Components

Debian Packages Face Critical Shell Command Execution Vulnerabilities

Critical dracut Command Injection Vulnerability in Ubuntu

Critical Command Injection Vulnerability in Cobham SATCOM Routers

Multiple Vulnerabilities Found in MariaDB Affecting Security

Critical Command Injection Vulnerability in D-Link DWR-M961 Devices

Ivanti Sentry Vulnerabilities Allow Remote Code Execution and Admin Access

Iranian Hackers Breach US Gas Station Fuel Monitoring Systems

Critical xrdp Vulnerabilities in Fedora 44 and 42 Require Immediate Attention

Active Exploitation of Weaver E-cology RCE Vulnerability CVE-2026-22679

Ubiquiti Patches Three Critical Vulnerabilities in UniFi Products

Active Exploitation of Critical Vulnerabilities in Lantronix and Ubiquiti Devices

SPIP odt2spip Plugin: Authenticated Command Injection via Uploaded Document Filename

U.S. CISA adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email ...

SiteGuard WAF Flaw CVE-2026-106931 Exploited in Attacks

What Is Ai Web App Pentesting

18 of the 24 CVEs in curl's latest release

Cisco warns of actively exploited Secure Email Gateway flaw

Cisco Warns of Exploited Secure Email Gateway Vulnerability

Palo Alto Networks Patches PAN-OS Zero

GHSA G3vx 3m76 Fghh

Richdocumentscode Issues 354

Claroty says Claude reproduced Danfoss flaws in about 28 minutes

Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora's Built

CVE Alert: CVE-2026-104085 – odt2spip

Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products

Hackers Attack French Supermarket Freezers Causing Food Loss

Hackers attacked hundreds of supermarkets in France, hacking refrigeration systems and ...

France Supermarket Hacks Expose Risks Of Internet Facing Refrigeration Systems

GitLab patches 10.0 flaw in its CE and EE products | news

Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN

Hackers Turn French Supermarket Refrigerators Into Furnaces

Google Partially Reverses Chrome Bug Bounty Cuts

Hackers Attack French Supermarket Freezers Causing Food Loss

Ivanti warns of Connect Secure zero

Intermarché cyberattack exposes refrigeration security risks as French supermarkets face ...

LG smart TVs vulnerable: attackers can bypass webOS security and gain root

Hackers heat French supermarket fridges to 50°C in major cyberattack

Hackers use cyberattack to heat supermarket refrigerators to 50°C

Freeze The Controller Defrost The Food Uncovering Vulnerabilities In Danfoss Refrigeration Controllers

Hackers Target 300+ French Supermarkets: Refrigeration Attack Exposes Security Risks

Hackers Raise Supermarket Fridge Temperatures To 50°C In Unprecedented Cyber Attack

Freeze The Controller Defrost The Food Uncovering Vulnerabilities In Danfoss Refrigeration Controllers

Copeland XWEB Pro supervisory controllers

GitLab fixes serious vulnerability that exposed software environments to sabotage

Freeze The Controller Defrost The Food Uncovering Vulnerabilities In Danfoss Refrigeration Controllers

Cisco Patches Critical Smart Software Manager On-Prem Vulnerabilities

Freeze The Controller Defrost The Food Uncovering Vulnerabilities In Danfoss Refrigeration Controllers

Hackers Cooked French Supermarket Refrigerators to 50°C, Spoiling Millions in Food

OpenSpug Spug CVE-2026-108540 - CVSS 9.9 RCE ThreatAft / 6h Attribute Value CVE CVE-2026-108540 CVSS 3.1 9.9 (Critical) CVSS 4.0 9.4 (Critical) CWE CWE-78 OS Command Injection / CWE-77 Command Injection Attack Vector Remote, low privileges required Affected Component /exec/transfer — File Transfer Exploitation Public PoC available Vendor Response None A public proof-of-concept exploit exists and the vendor has not responded to disclosure.

Code Injection Duo — 2 CVEs, Peak CVSS 9.8 in openapi-typescript-codegen and Floci Velocity ThreatAft — Cybersecurity Intelligence / 11h Impact: CVE-108551 allows JavaScript injection into generated TypeScript clients via unescaped Handlebars interpolation — supply-chain compromise of build pipelines. If your CI/CD pipeline ingests OpenAPI specs from vendors, partners, or public repos, an attacker controlling that spec achieves code execution inside your build environment.