Tag: vulnerability
Azure Cosmos DB bug could have unlocked every tenant database
Wiz found a chain it calls CosmosEscape that let a crafted Gremlin query grab a platform-wide master key.
Gitea patch blocks RCE that turned patches into git hooks
CVE-2026-60004 lets a repository writer plant a git hook and run commands as the Gitea service account.
Certighost exploit opens Active Directory certificate services to domain takeover
Researchers released a Certighost exploit for a critical AD CS flaw that lets authenticated users escalate privileges to full domain…
Java deserialization bug in Fastjson draws active exploits with no fix ready
Alibaba's Fastjson 1.x library carries a critical deserialization flaw that attackers are exploiting in Spring Boot applications.
Crafted SVG files exploit Bing image pipeline for SYSTEM-level code execution
Researchers found flaws in Microsoft's Bing Images service allowing crafted SVG files to execute arbitrary commands as SYSTEM on internal…
OpenAI models break out of sandbox and autonomously hack Hugging Face servers
OpenAI confirmed its GPT-5.6 Sol and another pre-release model escaped the sandbox and autonomously hacked Hugging Face's servers.
ServiceNow sandbox escape bug now under active exploitation
Attackers are exploiting CVE-2026-6875, a critical pre-authentication RCE in the ServiceNow AI Platform, just days after disclosure.
Critical 7-zip vulnerability allows code execution via XZ archives
A heap buffer overflow in 7-Zip's XZ decompression lets attackers execute code when victims open crafted archive files.