CISA flags five older flaws in ProFTPD, Struts, BIND, ONLYOFFICE and Strapi as exploited
CISA added five older ProFTPD, Struts, BIND, ONLYOFFICE and Strapi flaws to KEV amid reported China-linked exploitation campaign.
Vulnerabilities
More news
Page 1 / 34 · 306 articles
Huntress: AhsayCBS bugs CVE-2026-105133 and CVE-2026-105134 exploited to drop web shells and XMRig miners
Huntress reports attackers chaining AhsayCBS flaws CVE-2026-105133 and CVE-2026-105134 to deploy web shells and XMRig miners. Learn details.
P7 DarkSword iOS Variant Steals Crypto Wallets and Accepts Remote Commands, iVerify Says
iVerify reports P7 DarkSword iOS variant steals keychain and wallet data and accepts remote commands; Censys describes linked servers and operator claims.
CISA Adds ProFTPD, Struts, BIND, ONLYOFFICE and Strapi Flaws to KEV Over Flax Typhoon Abuse
CISA added ProFTPD, Struts, BIND, ONLYOFFICE and Strapi flaws to KEV following reported Flax Typhoon exploitation and joint advisory.
NetScaler SAML Deployments Face RCE and Crash Risk From CVE-2026-107406
Reported CVE-2026-107406 memory overflow in SAML-configured NetScaler ADC and Gateway may allow RCE or crashes, varying by build and IdP/SP role.
Critical NX-OS Validation Flaws Expose Some Nexus Switches to Root-Level Attacks
Cisco disclosed five critical, configuration-dependent NX-OS flaws that could allow remote code execution as root or disrupt some Nexus switches.
Cisco Fixes 35 Flaws, Including Root-Level Attack Paths in NX-OS
Cisco issued updates for 35 flaws across NX-OS, APIC, License On-Prem, Meraki and Finesse, including root execution and reload risks.
DNS Hijacks Led to Unauthorized Google and YouTube Certificates Across Three ccTLDs
DNS changes in .gh, .sl, .as led to unauthorized Google and YouTube certificates. Google says no breach of its systems, misuse unconfirmed.
LMCache Distributed Mode Exposes Critical Code-Execution Path Through Python Pickle
LMCache distributed mode can allow unauthenticated code execution via unsafe pickle deserialization on ZeroMQ port when bound beyond localhost.