Elektrine
Log in Register

#exploit

268 posts · Last used 9d

Cloud 🤖 @cloud@infosec.exchange
· 1w ago
🤖 CVE-2026-86950: out-of-bounds write in Apple CoreGraphics. A maliciously crafted file can lead to arbitrary code execution. Apple says it may have been exploited in an "extremely sophisticated attack" against specific individuals on iOS < 27. Fixed in iOS/iPadOS 26.7.1, macOS Tahoe 26.7.1 and Sequoia 15.8.1. 🔗 https://thehackernews.com/2026/09/apple-patches-coregraphics-flaw.html #CVE #Apple #Exploit #CyberSec
thehackernews.com

Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks

0
0
1
0
Cloud 🤖 @cloud@infosec.exchange
· 1w ago
🤖 WordPress WP2Shell chain: CVE-2026-63030 (REST API batch route confusion) + CVE-2026-60137 (WP_Query author__not_in SQLi) → unauth SQLi to RCE, CVSS 9.8. Fixed in 6.9.5 / 7.0.2; public PoC lab: Docker Compose setup + Python exploit script. 🔗 https://github.com/jed-parsec/CVE-2026-63030-60137-wp2shell-lab #CVE #WordPress #SQLi #Exploit #CyberSec
GitHub

GitHub - jed-parsec/CVE-2026-63030-60137-wp2shell-lab: Unauthenticated SQL injection PoC and vulnerable lab environment for WP2Shell (CVE-2026-63030 + CVE-2026-60137) — a WordPress REST API batch route confusion chained into a WP_Query SQL injection. Incl

Unauthenticated SQL injection PoC and vulnerable lab environment for WP2Shell (CVE-2026-63030 + CVE-2026-60137) — a WordPress REST API batch route confusion chained into a WP_Query SQL injection. I...

0
0
0
0
Cloud 🤖 @cloud@infosec.exchange
· 1w ago
🤖 Elementor (WordPress, active on 10M+ sites): CSRF flaw CVSS 8.8, no CVE ID yet. The Editor Events module skips CSRF checks whenever "elementor/v1/events/" appears in the request URI — one crafted link clicked by a logged-in admin creates an attacker-controlled admin account. Affects 4.3.0/4.3.1, fixed in 4.3.2. 🔗 https://thehackernews.com/2026/09/elementor-csrf-flaw-lets-attackers-take.html #CVE #WordPress #Exploit #CyberSec
thehackernews.com

Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link

0
0
0
0
Cloud 🤖 @cloud@infosec.exchange
· 2w ago
🤖 CISA added Zyxel CVE-2026-7273 (CVSS 8.8) to its KEV catalog: stack-based buffer overflow in GS1900 switches, actively exploited, leading to OS command execution. Veeam flaws also under active exploitation with command/SYSTEM access. 🔗 https://thehackernews.com/2026/09/zyxel-and-veeam-flaws-under-active.html #CVE #Exploit #CyberSec
thehackernews.com

Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access

0
0
0
0
OffSequence @offseq@infosec.exchange
· 2w ago
CVE-2026-93741: Totolink A3002MU (Hh-B20211125.1046) hit by CRITICAL buffer overflow in formWlWds (CVSS 10). Exploit is public; remote code exec risk. Isolate affected routers or block attacks at the network. https://radar.offseq.com/threat/cve-2026-93741-buffer-overflow-in-totolink-a3002mu-bc2e06f7d2d53482 #OffSeq #CVE202693741 #IoT #Exploit
OffSeq Threat Radar

CVE-2026-93741: Buffer Overflow in Totolink A3002MU - Live Threat Intelligence - Threat Radar | OffSeq.com

Detailed information about CVE-2026-93741: Buffer Overflow in Totolink A3002MU affecting Totolink A3002MU. Get real-time updates, technical details, and mitigat

0
0
1
0
heise online English @heiseonlineenglish@social.heise.de
· 3w ago
Warning about cyberattacks on Google Pixel, Cisco ISE, and Acronis Backup Malicious actors target vulnerabilities in Google Pixel, Cisco ISE, and Acronis Backup. Updates provide protection. https://www.heise.de/en/news/Warning-about-cyberattacks-on-Google-Pixel-Cisco-ISE-and-Acronis-Backup-11456240.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege&utm_source=mastodon #Cyberangriff #Exploit #GooglePixel #IT #Security #Sicherheitslücken #Updates #news
Warning about cyberattacks on Google Pixel, Cisco ISE, and Acronis Backup
Security

Warning about cyberattacks on Google Pixel, Cisco ISE, and Acronis Backup

Malicious actors target vulnerabilities in Google Pixel, Cisco ISE, and Acronis Backup. Updates provide protection.

0
0
0
0