Zimbra SNMP Flaw CVE-2026-73570 Actively Exploited for Unauthenticated RCE
A now-patched command injection vulnerability in Zimbra Collaboration (ZCS), tracked as CVE-2026-73570 (CVSS 8.9), is under active exploitation in the wild, according…
Tag: command injection
CVE-2024-39943: Rejetto HFS Command Injection
CVE-2024-39943 is an operating-system command-injection flaw in Rejetto HFS. It was associated with the recovered tooling in the Operation CameraSwarm campaign but…
Snowflake GitHub Actions Flaw Allows Command Injection via Crafted Issues
Cybersecurity researchers at Wiz have disclosed a GitHub Actions workflow injection vulnerability in Snowflake's public snowflakedb/snowflake-connector-net repository. The flaw, present in the…
CVE-2025-6514: OS Command Injection in mcp-remote
CVE-2025-6514 is a vulnerability in mcp-remote, an OAuth proxy for MCP servers, that allows a malicious MCP server to trigger OS command…
CVE-2025-10123: D-Link DIR-823X Command Injection
A command injection vulnerability in D-Link DIR-823X, exploited by Evooo1Bot.
CVE-2025-55583: D-Link DIR-868L Command Injection
A command injection vulnerability in D-Link DIR-868L B1 router, used by Evooo1Bot.
CVE-2022-30525: Zyxel Firewall Command Injection
A command injection vulnerability in Zyxel firewalls, targeted by Evooo1Bot.
CVE-2023-1389: TP-Link Archer AX21 Command Injection
A command injection vulnerability in TP-Link Archer AX21, exploited by Evooo1Bot.
CVE-2024-10914: D-Link NAS Command Injection
A command injection vulnerability in D-Link NAS devices, included in Evooo1Bot's exploit module.
CVE-2018-14558: Tenda AC7/AC9/AC10 Command Injection
A command injection vulnerability in Tenda AC7, AC9, and AC10 routers, exploited by Evooo1Bot.