ZBT Routers Shipped With Two Factory-Installed Implants Granting Root Access Without Authentication
VulnCheck has identified two undocumented backdoors embedded in firmware from Chinese router manufacturer Shenzhen Zhibotong…
Tag: cve
CISA Adds Six-Year-Old Microsoft SQL Server RCE Flaw to Known Exploited Vulnerabilities Catalogue
CVE-2019-1068 carries a CISA-mandated remediation deadline of 29 August 2026, giving organisations a finite window…
CISA Adds Gitea Code Injection Flaw to Known Exploited Vulnerabilities Catalog
CVE-2026-60004 is now confirmed as actively exploited, placing Gitea installations on the radar for immediate…
CISA Adds Perfect-10 Oracle WebLogic and HTTP Server Flaw to Known Exploited Vulnerabilities Catalogue
A maximum-severity improper access control vulnerability affecting Oracle HTTP Server and WebLogic Server Proxy Plug-in…
Clop’s PTC Zero-Day Campaign Expands as Victim List and Tooling Details Emerge
A custom web shell purpose-built for PTC's Windchill platform is enabling rapid credential theft and…
CISA Adds Four Critical Vulnerabilities to KEV Catalog as Active Exploitation Confirmed
Flaws affecting Apple macOS, Microsoft SharePoint, VMware vCenter, and Microsoft IKE have been confirmed as…
CISA imposes three-day fix deadline on actively exploited Ray framework RCE flaw
A critical remote code execution vulnerability in the Ray distributed computing framework is under active…
CISA Adds Ray Framework Code Injection Flaw to Known Exploited Vulnerabilities Catalogue
CVE-2025-62593 affects the Ray distributed computing framework and can be triggered through Firefox and Safari,…
Microsoft Patch Pending for ShieldBreak Zero-Day in Defender
A publicly disclosed vulnerability in Microsoft Defender is awaiting a fix, leaving organisations to manage…
Hitachi Energy APM Edge Carries Two Linux Kernel Privilege Escalation Flaws
A pair of 'Dirty Frag' vulnerabilities in the Linux kernel allow any local unprivileged user…