Tag: Code Execution
Crafted SVG files exploit Bing image pipeline for SYSTEM-level code execution
Researchers found flaws in Microsoft's Bing Images service allowing crafted SVG files to execute arbitrary commands as SYSTEM on internal…
Zimbra Classic Web Client Vulnerability Allows Code Execution via Malicious Emails
A stored XSS vulnerability in Zimbra's Classic Web Client lets attackers execute malicious code when a user opens a specially…
New Attack Exploits AI Coding Agents via Sentry Error Platform
Tenet Security researchers discovered a technique called Agentjacking that uses crafted Sentry error reports to trick AI coding assistants into…
Exim Patches Critical BDAT Use After Free Flaw in GnuTLS Builds
The Dead.Letter vulnerability affects Exim mail server versions 4.97 through 4.99.2 compiled with GnuTLS, enabling heap corruption via a crafted…