CVE-2026-44758: Code Injection in SAP Manufacturing Integration and Intelligence
A critical code injection vulnerability in SAP Manufacturing Integration and Intelligence (CVSS 9.1) allows an attacker with high privileges to execute arbitrary…
Tag: Command Execution
CVE-2026-44772: Code Injection in SAP Manufacturing Integration and Intelligence
A critical code injection vulnerability in SAP Manufacturing Integration and Intelligence (CVSS 9.9) allows a low-privileged attacker to submit crafted input, causing…
macOS Terminal Application
The macOS Terminal app is used in the ClickFix technique of the DPRK malvertising campaign. Victims are tricked into pasting a malicious…
Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands
SonicWall has warned of active exploitation of two zero-day vulnerabilities impacting Secure Mobile Access (SMA) 1000 series appliances, one of which could…
Critical Cursor Flaws Enable Zero-Click Sandbox Escape via Prompt Injection
Two critical vulnerabilities in Cursor, an AI-powered code editor, allow prompt injection attacks to escape the editor's safety sandbox and execute arbitrary…
CVE-2025-59536: Claude Code MCP Config Command Execution
A vulnerability in Claude Code allowed project-level MCP configuration to lead to command execution.
CVE-2026-30615: Windsurf MCP Config Rewrite Command Execution
A vulnerability in Windsurf allowed attacker-controlled content to rewrite local MCP config and register a malicious server, leading to command execution.