Tag: CVE
Unpatched Shark vacuum flaw lets attackers control millions of devices remotely
A certificate flaw in Shark robot vacuums allows attackers to command any device in the same AWS region, accessing cameras…
SonicWall SMA1000 zero-days exploited in the wild for ransomware access
Two chained vulnerabilities give attackers full remote code execution on unpatched SMA 1000 appliances.
Free Android VPN Apps Fail Basic Security Tests in Major Academic Study
A new automated testing framework reveals widespread traffic leaks, plaintext data transmission, and tracking behavior across 281 popular free Android…
Friendly Fire Attack Hijacks AI Security Agents to Run Malicious Code
Researchers demonstrated that autonomous AI coding agents from Anthropic and OpenAI will execute hidden malicious binaries when asked to review…
Recovery of Dell BIOS Passwords Enabled by Broken Encryption Scheme
Dell BIOS passwords stored with a flawed XOR cipher allow full recovery from flash dumps in milliseconds, posing risks to…
Leaked Server Exposes Mass WordPress Backdoor Operation
Researchers found an attacker's unsecured server containing 800 MB of data, revealing how a webshell brokerage compromised thousands of WordPress…
Zimbra Classic Web Client Vulnerability Allows Code Execution via Malicious Emails
A stored XSS vulnerability in Zimbra's Classic Web Client lets attackers execute malicious code when a user opens a specially…
Remote Crash Vulnerability Discovered in Alibaba’s XQUIC Library for HTTP/3
A single arithmetic error in XQUIC's memory handling during QPACK table resizing lets any remote client crash HTTP/3 servers with…