Tag

#Command Injection

4 published stories tagged with Command Injection.

criticalExploited VulnerabilitiesJul 24, 20262 min read

Crafted SVG files allow remote command execution as SYSTEM on Microsoft Bing servers

馃毃 Critical vulnerability discovered in Microsoft Bing Images. Attackers can execute arbitrary code over a network by using specially crafted SVG files.

highAPT / Nation-StateJul 20, 20263 min read

Zero-day vulnerability chain enables root access and malware deployment on SonicWall SMA1000 appliances

Threat actors have been exploiting a chain of two zero-day vulnerabilities in SonicWall SMA1000 appliances for weeks.

highAPT / Nation-StateJul 17, 20263 min read

Zero-day vulnerability chain enables root access and persistence on Siemens ROX II switches

A chain of three zero-day vulnerabilities in Siemens ROX II industrial switches allows attackers to escalate privileges and gain persistent root access.

criticalExploited VulnerabilitiesJul 8, 20262 min read

Critical vulnerabilities in Ubiquiti UniFi products allow for unauthorized access and remote control

A critical improper access control vulnerability in the Ubiquiti UniFi Connect Application allows an attacker to execute arbitrary commands on a host device.